summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGerald Carter <jerry@samba.org>2003-08-15 19:38:18 +0000
committerGerald Carter <jerry@samba.org>2003-08-15 19:38:18 +0000
commit21bdbb7ffb3a13e6965a761148cece6f755a8a59 (patch)
tree7ebf0f8be5ac5cd1ef4d06d81e8c7a0ee45f9305
parent603b66d22d486c254b0b710165e952f77e57c594 (diff)
downloadsamba-21bdbb7ffb3a13e6965a761148cece6f755a8a59.tar.gz
syncing more docs for 3.0.0rc1 release
-rw-r--r--docs/Samba-Developers-Guide.pdf11742
-rw-r--r--docs/Samba-HOWTO-Collection.pdf57400
-rw-r--r--docs/faq/samba-faq.html5
-rw-r--r--docs/htmldocs/AccessControls.html564
-rw-r--r--docs/htmldocs/AdvancedNetworkManagement.html39
-rw-r--r--docs/htmldocs/Appendixes.html8
-rw-r--r--docs/htmldocs/Backup.html9
-rw-r--r--docs/htmldocs/CUPS-printing.html2051
-rw-r--r--docs/htmldocs/ClientConfig.html5
-rw-r--r--docs/htmldocs/DNSDHCP.html5
-rw-r--r--docs/htmldocs/FastStart.html5
-rw-r--r--docs/htmldocs/Further-Resources.html7
-rw-r--r--docs/htmldocs/InterdomainTrusts.html193
-rw-r--r--docs/htmldocs/IntroSMB.html17
-rw-r--r--docs/htmldocs/NT4Migration.html237
-rw-r--r--docs/htmldocs/NetworkBrowsing.html419
-rw-r--r--docs/htmldocs/Other-Clients.html73
-rw-r--r--docs/htmldocs/PolicyMgmt.html70
-rw-r--r--docs/htmldocs/Portability.html29
-rw-r--r--docs/htmldocs/ProfileMgmt.html285
-rw-r--r--docs/htmldocs/SWAT.html58
-rw-r--r--docs/htmldocs/Samba-Developers-Guide.html343
-rw-r--r--docs/htmldocs/Samba-HOWTO-Collection.html8625
-rw-r--r--docs/htmldocs/SambaHA.html5
-rw-r--r--docs/htmldocs/ServerType.html184
-rw-r--r--docs/htmldocs/StandAloneServer.html76
-rw-r--r--docs/htmldocs/VFS.html84
-rw-r--r--docs/htmldocs/bugreport.html39
-rw-r--r--docs/htmldocs/compiling.html90
-rw-r--r--docs/htmldocs/diagnosis.html76
-rw-r--r--docs/htmldocs/domain-member.html308
-rw-r--r--docs/htmldocs/groupmapping.html165
-rw-r--r--docs/htmldocs/install.html129
-rw-r--r--docs/htmldocs/integrate-ms-networks.html335
-rw-r--r--docs/htmldocs/introduction.html8
-rw-r--r--docs/htmldocs/ix01.html41
-rw-r--r--docs/htmldocs/locking.html184
-rw-r--r--docs/htmldocs/migration.html3
-rw-r--r--docs/htmldocs/msdfs.html52
-rw-r--r--docs/htmldocs/net.8.html22
-rw-r--r--docs/htmldocs/nmbd.8.html24
-rw-r--r--docs/htmldocs/nmblookup.1.html16
-rw-r--r--docs/htmldocs/ntlm_auth.1.html8
-rw-r--r--docs/htmldocs/optional.html60
-rw-r--r--docs/htmldocs/pam.html210
-rw-r--r--docs/htmldocs/passdb.html574
-rw-r--r--docs/htmldocs/pdbedit.8.html20
-rw-r--r--docs/htmldocs/pr01.html5
-rw-r--r--docs/htmldocs/pr02.html1
-rw-r--r--docs/htmldocs/printing.html823
-rw-r--r--docs/htmldocs/problems.html52
-rw-r--r--docs/htmldocs/rpcclient.1.html19
-rw-r--r--docs/htmldocs/samba-bdc.html106
-rw-r--r--docs/htmldocs/samba-doc.html72
-rw-r--r--docs/htmldocs/samba-pdc.html389
-rw-r--r--docs/htmldocs/securing-samba.html87
-rw-r--r--docs/htmldocs/smb.conf.5.html390
-rw-r--r--docs/htmldocs/smbcacls.1.html8
-rw-r--r--docs/htmldocs/smbclient.1.html23
-rw-r--r--docs/htmldocs/smbcontrol.1.html3
-rw-r--r--docs/htmldocs/smbcquotas.1.html8
-rw-r--r--docs/htmldocs/smbd.8.html23
-rw-r--r--docs/htmldocs/smbmount.8.html4
-rw-r--r--docs/htmldocs/smbpasswd.5.html3
-rw-r--r--docs/htmldocs/smbpasswd.8.html7
-rw-r--r--docs/htmldocs/smbsh.1.html22
-rw-r--r--docs/htmldocs/smbstatus.1.html8
-rw-r--r--docs/htmldocs/smbtree.1.html8
-rw-r--r--docs/htmldocs/speed.html53
-rw-r--r--docs/htmldocs/swat.8.html8
-rw-r--r--docs/htmldocs/troubleshooting.html3
-rw-r--r--docs/htmldocs/type.html9
-rw-r--r--docs/htmldocs/unicode.html56
-rw-r--r--docs/htmldocs/upgrading-to-3.0.html196
-rw-r--r--docs/htmldocs/vfstest.1.html8
-rw-r--r--docs/htmldocs/wbinfo.1.html89
-rw-r--r--docs/htmldocs/winbind.html200
-rw-r--r--docs/htmldocs/winbindd.8.html50
-rw-r--r--docs/manpages/Samba.75
-rw-r--r--docs/manpages/net.86
-rw-r--r--docs/manpages/nmbd.814
-rw-r--r--docs/manpages/nmblookup.18
-rw-r--r--docs/manpages/ntlm_auth.14
-rw-r--r--docs/manpages/pdbedit.88
-rw-r--r--docs/manpages/rpcclient.18
-rw-r--r--docs/manpages/smb.conf.5582
-rw-r--r--docs/manpages/smbcacls.14
-rw-r--r--docs/manpages/smbclient.122
-rw-r--r--docs/manpages/smbcontrol.12
-rw-r--r--docs/manpages/smbcquotas.14
-rw-r--r--docs/manpages/smbd.812
-rw-r--r--docs/manpages/smbpasswd.82
-rw-r--r--docs/manpages/smbsh.18
-rw-r--r--docs/manpages/smbstatus.14
-rw-r--r--docs/manpages/smbtree.14
-rw-r--r--docs/manpages/swat.84
-rw-r--r--docs/manpages/vfstest.14
-rw-r--r--docs/manpages/wbinfo.196
-rw-r--r--docs/manpages/winbindd.812
-rw-r--r--docs/textdocs/README.NOW6
-rw-r--r--docs/textdocs/README.jis149
101 files changed, 46018 insertions, 42585 deletions
diff --git a/docs/Samba-Developers-Guide.pdf b/docs/Samba-Developers-Guide.pdf
index 0ca86fa63e4..fd5ddf3fcfc 100644
--- a/docs/Samba-Developers-Guide.pdf
+++ b/docs/Samba-Developers-Guide.pdf
@@ -927,7 +927,7 @@ endobj
<< /S /GoTo /D (section.10.5) >>
endobj
624 0 obj
-(10.5 \134\134MAILSLOT\134NET\134NTLOGON)
+(10.5 \134\173\175\134\173\175MAILSLOT\134\173\175NET\134\173\175NTLOGON)
endobj
625 0 obj
<< /S /GoTo /D (subsection.10.5.1) >>
@@ -1389,11 +1389,12 @@ endobj
<< /S /GoTo /D [930 0 R /Fit ] >>
endobj
932 0 obj <<
-/Length 239
+/Length 230
/Filter /FlateDecode
>>
stream
-xڍJ19&3$9'sbZh|{'R AȠ>2C1) p <i臈cy"SȐ8MAAX%"odxlG#SH]||d/';| .mBf5I9 )]Bl PFBsلzezpdwxP%P/5}a9N=_ߣ cI/?cMendstream
+xڍN0 }
+CLNrLBDo+i<?MH bN"B.ϻ&ȺH()Y
endobj
930 0 obj <<
/Type /Page
@@ -1413,19 +1414,15 @@ endobj
/ProcSet [ /PDF /Text ]
>> endobj
944 0 obj <<
-/Length 999
+/Length 1050
/Filter /FlateDecode
>>
stream
-xڝV[o6~ϯۨѢ(꒷vh^=mk%C\(%Ma也<TP2ȋL|GloH&MafmDfeFow7;m2.݁wG%Ʌ6pcF s6swS/ݲXq}o(MSqZ-Z_{dmjnMʧ߽Rı,AGI.㲤S;A}r1B lU֮z\hث-vՇI)>bpFu )׉bڱ UI&4 Iێmd:R|#A›d0a0,֞JerAr N è<&գ;QDoEp >(0X>bKMF]7_f?B>W5G/+
-U~47v>T"ȪoXN%}˛H{tNNЀ¹VhZ|鬳$0XsY,u)FKwLQ]
-xJE\b1M` 4 W,x0oͻX:MeӌI [ 0ɹf϶JdJY"lly>҉*fJImJVH
-e<t@sӅ`kdVp$g6_m|{۝{ [zƞ*ۿ^'ˍԙo]*H\ g/'D,M
-0.3߰
-eG.
->pk{;Voli*1S%Z~M}|EAx2j5p QqO֢[K
-reRkc4pSO37O%ˇaa"IU:5?:oX_계FjxUbޮ8GIlMTӓ<L#6K'?ߥ25~%P.A/Y?
-Iendstream
+xڍVM6ϯq@$1T&7$ Mbۭa~ryȽ4KWB
+Mc57BѸX+8c}ݍWs
+i"1s{z9VsNp ,Q5VK΍6T 5-0 ٩Y-T^'mQ_8(ü3*n 6ȈV:[4I<  Cp ,t§֜(јfSϺpv'R4NI_e]ج”2d6><aVEL4@Awng?ۍmPpV1^utB5'k8[xhGΫֵPP L$8,nlq.-pAcr *׃{7&U
+@=gk}nu_4vuItWǗgxDf1,anxC f/=OA5BZԱ\V\m2S06ofKٗ. Wr%xO{ \#[@ނK`n qOq
+O¡e-,ogŸ0Þ>6soꊁ&V'L<W-w6endstream
endobj
943 0 obj <<
/Type /Page
@@ -1467,19 +1464,16 @@ endobj
/ProcSet [ /PDF /Text ]
>> endobj
961 0 obj <<
-/Length 1930
+/Length 1319
/Filter /FlateDecode
>>
stream
-xZKsF WV>Xt:r$M&vXImESl(%:/%eEز=4%DbaC1zep1Z8S{~g z`o3vslUNVO1Q9bvG3uMY<
-EM?p|W 'W$1n ) + џ׃ۗ
-m3mxf)&7o"#%-R*F^MUge[)oo4CE<4o_$op[_q=+o:QկEW9\
-+S#d3s<XDfmT]a-izggnŭJ͙~|$d9q
-\ fq#l"kLcT!{,(9!LxղhIw5ud 3FYΣ'd.}6ma^粊*
-09a_'+I^.8*ӊ3g
-3CBe*֋"B,/9C ӧ B K~~"8L2 ,( oedaIʫ/>bNgAA $qho]{B]DGAX4@ {4kyd.OeI6*H׷DXd\7Ia)gRfv5eMQĶ lbhs{x`Eve:
-cr11{Fқ&p8&Od2AH_`Ÿ1?b Ci٦6$✤CI6[eYFW˺wdWf RZI5q9lm]x9(]d{f 3F.%JjOFվsSq@&"2,/5pgHEbl`3).4wYuC1%
-GȜ O~\.]&<UKJӤ%+ԝ]'%5t\$U3Ǣnj" UJ35 Uھs}˛`Y@t\1m@4'3@V阠s6kX s*~l9.
+xڝXMo6W(DX,6n7xCۃb+Q
+dyr(ʢ%QR
+LPH_`W>]1C1Y]$a.1c!(G\r,SP˗ƐD ᰪc򗫏O8C8C8XPX,7Aۀ J$F
++B ?0ᇈ;0Z05n cU- WXJ
+/=,eշ .E
++DfffHڤ紶\vWeFJw*^B_ H71A&IF0+0ޥ6t@YZJdXXйhd,&xxDMJ;wǛj[`?*wsNJQSq%F\qДf~[lcrzpd0TA{k0[T66NbQBDD׶<h hRv:Â9OUsp8LGevG@j441sp EA[4) Wq]6g\2xֺ}I7uKw}joҲʳ!#鸿-fa xu8økw(jtaxKƝn1#N[Ф#a/)ds#<P':SsV3=CG-,SDҡEHwLws2MJDYn@S9U22ޥ;; nx}5͍p?N魹a=K~
endobj
960 0 obj <<
/Type /Page
@@ -1487,6157 +1481,6986 @@ endobj
/Resources 959 0 R
/MediaBox [0 0 595.276 841.89]
/Parent 941 0 R
-/Annots [ 966 0 R 970 0 R 971 0 R 972 0 R 973 0 R 977 0 R 978 0 R 979 0 R 980 0 R 981 0 R 982 0 R 983 0 R 984 0 R 985 0 R 986 0 R 987 0 R 988 0 R 989 0 R 990 0 R 991 0 R 992 0 R 993 0 R 994 0 R 995 0 R 996 0 R 997 0 R 998 0 R 999 0 R 1000 0 R 1001 0 R 1002 0 R 1003 0 R ]
+/Annots [ 964 0 R 968 0 R 969 0 R 970 0 R 971 0 R 975 0 R 976 0 R 977 0 R 978 0 R 979 0 R ]
>> endobj
-966 0 obj <<
+964 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 711.214 394.107 720.125]
+/Rect [84.043 614.97 378.006 624.538]
/Subtype /Link
/A << /S /GoTo /D (netbios) >>
>> endobj
-970 0 obj <<
+968 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 685.311 204.163 694.222]
+/Rect [84.043 560.773 180.945 570.341]
/Subtype /Link
/A << /S /GoTo /D (architecture) >>
>> endobj
-971 0 obj <<
+969 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 657.471 238.808 668.319]
+/Rect [84.043 504.455 218.566 516.144]
/Subtype /Link
/A << /S /GoTo /D (debug) >>
>> endobj
-972 0 obj <<
+970 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 631.568 202.726 642.416]
+/Rect [84.043 450.258 179.187 461.947]
/Subtype /Link
/A << /S /GoTo /D (CodingSuggestions) >>
>> endobj
-973 0 obj <<
+971 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 559.782 187.013 568.693]
+/Rect [84.043 289.789 163.399 299.357]
/Subtype /Link
/A << /S /GoTo /D (internals) >>
>> endobj
-977 0 obj <<
+975 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.002 544.893 383.28 555.741]
+/Rect [198.134 260.569 360.309 272.259]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:David.Chappell@mail.trincoll.edu)>>
>> endobj
-978 0 obj <<
+976 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 533.879 192.838 542.79]
+/Rect [84.043 235.592 167.914 245.16]
/Subtype /Link
/A << /S /GoTo /D (parsing) >>
>> endobj
-979 0 obj <<
+977 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 507.976 230.716 516.887]
+/Rect [84.043 181.395 210.763 190.964]
/Subtype /Link
/A << /S /GoTo /D (unix-smb) >>
>> endobj
-980 0 obj <<
+978 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 480.136 237.502 490.984]
+/Rect [84.043 125.077 216.308 136.767]
/Subtype /Link
/A << /S /GoTo /D (tracing) >>
>> endobj
-981 0 obj <<
+979 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 454.233 288.599 465.081]
+/Rect [84.043 70.88 272.399 82.57]
/Subtype /Link
/A << /S /GoTo /D (windows-debug) >>
>> endobj
-982 0 obj <<
+962 0 obj <<
+/D [960 0 R /XYZ 85.039 786.531 null]
+>> endobj
+963 0 obj <<
+/D [960 0 R /XYZ 85.039 643.064 null]
+>> endobj
+959 0 obj <<
+/Font << /F20 937 0 R /F15 951 0 R /F42 967 0 R /F39 974 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+991 0 obj <<
+/Length 1985
+/Filter /FlateDecode
+>>
+stream
+xڽZr6}W҃ pӱ\8j恶Y %]*Iشtf`pXN3 S
+@0n&tſy=MO2K&kc6]r̛_g
+3Pft_Agxj@ٟ756y "!y|S7z~g xvsg~ :ۭ? Z^UuJ r.osyb҈+k^kS8ܭ
+,sh:צp4+8nTL6H'h0G$}K)^v2BGn:ozm:KlY\Aʭ؄n:Dâ /ZKj[Mw $,~Re,~cPҖa:DŽ(O
+%R4[vFe2'p3i@C3z f֞W6Gl5<jl텸NXm~ (w{x)7ӽPZV 0Dm~ 9#بp1PX h0DbZZN9t4k#y%9#
+>yEh;6hԐ=wBxTm%P`~Ec4DPsCc>A d%b
+=@ܱFSRrҩ qRRHn:e^.un`n=<PCSB?r_ZمQ 4sX\Ǡmgü/u~^=ȲM(">7Ž N:Mݵ)W (e}`Jf>2PE2qN}K)FL:LB&4(N&ǰL,Y9.i/ ˡ%Xm.QR6Zh94+}8&KM>O2[N
+:ȀK(V񬩿V(bNNwǫ $,=9~r\kS›M+ST0 )ܶR8Ljĵb@CZI9<jԊ52d/lSG)Ւ8ԊcI}R.\kS8V&ȩE?جu?EHr xKI퐒llh`]@9hw**_椘Uzxsf櫺D6Eb 6<ɀKqJ_&c:>UӪ<r
+'oꁀ:~|d9TH2
+3nTՈ-hx7hD/tDY5y _Ӡdi9@ 7wW,?..<endstream
+endobj
+990 0 obj <<
+/Type /Page
+/Contents 991 0 R
+/Resources 989 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 941 0 R
+/Annots [ 993 0 R 994 0 R 995 0 R 996 0 R 997 0 R 998 0 R 999 0 R 1000 0 R 1001 0 R 1002 0 R 1003 0 R 1004 0 R 1005 0 R 1006 0 R 1007 0 R 1008 0 R 1009 0 R 1010 0 R 1011 0 R 1012 0 R 1013 0 R 1014 0 R ]
+>> endobj
+993 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 441.282 316.308 452.13]
+/Rect [213.498 752.53 301.672 764.219]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-983 0 obj <<
+994 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [237.686 429.326 317 440.175]
+/Rect [201.074 725.431 287.733 737.121]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tridge@samba.org)>>
>> endobj
-984 0 obj <<
+995 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 418.312 199.48 427.223]
+/Rect [84.043 700.454 177.46 710.022]
/Subtype /Link
/A << /S /GoTo /D (ntdomain) >>
>> endobj
-985 0 obj <<
+996 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [229.329 403.424 323.006 414.272]
+/Rect [191.922 671.235 294.309 682.924]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:lkcl@switchboard.net)>>
>> endobj
-986 0 obj <<
+997 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [220.944 391.468 325.635 402.317]
+/Rect [182.74 644.136 297.187 655.826]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:paul@argo.demon.co.uk)>>
>> endobj
-987 0 obj <<
+998 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [245.85 381.061 324.887 390.361]
+/Rect [210.013 618.732 296.369 628.727]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:duncans@sco.com)>>
>> endobj
-988 0 obj <<
+999 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 366.562 227.154 377.41]
+/Rect [84.043 589.939 206.308 601.629]
/Subtype /Link
/A << /S /GoTo /D (printing) >>
>> endobj
-989 0 obj <<
+1000 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 342.596 218.312 351.507]
+/Rect [84.043 537.864 196.43 547.432]
/Subtype /Link
/A << /S /GoTo /D (wins) >>
>> endobj
-990 0 obj <<
+1001 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 314.756 244.52 325.604]
+/Rect [84.043 481.546 222.763 493.235]
/Subtype /Link
/A << /S /GoTo /D (sam) >>
>> endobj
-991 0 obj <<
+1002 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 288.853 287.409 299.701]
+/Rect [84.043 427.349 271.824 439.039]
/Subtype /Link
/A << /S /GoTo /D (pwencrypt) >>
>> endobj
-992 0 obj <<
+1003 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [231.487 275.902 312.766 286.75]
+/Rect [194.286 400.251 283.096 411.94]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:samba@samba.org)>>
>> endobj
-993 0 obj <<
+1004 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 264.888 151.853 273.799]
+/Rect [84.043 375.273 126.096 384.842]
/Subtype /Link
/A << /S /GoTo /D (modules) >>
>> endobj
-994 0 obj <<
+1005 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 249.999 316.308 260.847]
+/Rect [198.801 346.054 286.975 357.743]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-995 0 obj <<
+1006 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 237.048 224.719 247.896]
+/Rect [84.043 318.955 203.521 330.645]
/Subtype /Link
/A << /S /GoTo /D (rpc-plugin) >>
>> endobj
-996 0 obj <<
+1007 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [238.904 224.096 327.876 234.944]
+/Rect [202.407 291.857 299.642 303.547]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:aliguor@us.ibm.com)>>
>> endobj
-997 0 obj <<
+1008 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 212.141 316.308 222.989]
+/Rect [198.801 264.759 286.975 276.448]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-998 0 obj <<
+1009 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 201.127 174.989 210.038]
+/Rect [84.043 239.781 151.096 249.35]
/Subtype /Link
/A << /S /GoTo /D (vfs) >>
>> endobj
-999 0 obj <<
+1010 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [251.081 186.238 315.423 197.086]
+/Rect [215.74 210.562 286.006 222.251]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:ab@samba.org)>>
>> endobj
-1000 0 obj <<
+1011 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [250.666 175.831 340.385 185.131]
+/Rect [215.286 185.158 313.339 195.153]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:metze@metzemix.de)>>
>> endobj
-1001 0 obj <<
+1012 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 161.331 201.218 172.18]
+/Rect [84.043 156.365 175.581 168.055]
/Subtype /Link
/A << /S /GoTo /D (Packaging) >>
>> endobj
-1002 0 obj <<
+1013 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 135.429 195.473 146.277]
+/Rect [84.043 102.168 172.733 113.858]
/Subtype /Link
/A << /S /GoTo /D (contributing) >>
>> endobj
-1003 0 obj <<
+1014 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 122.477 316.308 133.325]
+/Rect [213.498 75.07 301.672 86.759]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-962 0 obj <<
-/D [960 0 R /XYZ 85.039 786.531 null]
+992 0 obj <<
+/D [990 0 R /XYZ 85.039 786.531 null]
>> endobj
-959 0 obj <<
-/Font << /F57 965 0 R /F20 937 0 R /F14 969 0 R /F15 951 0 R /F11 976 0 R >>
+989 0 obj <<
+/Font << /F42 967 0 R /F15 951 0 R /F39 974 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1025 0 obj <<
-/Length 1448
+1027 0 obj <<
+/Length 2355
/Filter /FlateDecode
>>
stream
-xIs8|
-*x:BЕmӗ>8`*b2`&oObt*Dc\EUUS\>UPu
-h:x0.=X*0c^OkAHV#e^ed"ـ4t \;NEs1dj 0lIڃO\A>JU*45GJjBL;Eto1U%f0 H' J.%Ww◙|lmhtŮ,%ħT1<$]љ8U&'U _PǞDS# c3)|' U$]V|1:^<[L ߥlџ֏3CLoj֣^5{Mɴg1N}h A7+XٕuTDV:KHR?{!MfFp0.-`5<K:<MH L.M-f([ aSHM0 ϑe{_je ~>6(B[ـĶ ״AMYhhɛ
-dJu @^Miǥ8i,̓<\mpI%)RfmڇjFS J=4l/lRX9*R!C{H{ U6%r
-.̬׼!cYp&hbsvt싃׍[j`&6}KW#ݼjkB]c A{$/!ʇȿ?عendstream
+xYs7+HVXǣ'TlgMn^<"uTI08I-[[Ql9vF CFZ Hi#<w~8! .#7TR:L1U#{l~)Qdu4DZC0գzZﶓ?㣜!,1D"fLBE0A3k8HbYZE02ؔVgUd25/V) _Mx޹dʤ?^wݙwiw3ƽ=Oݑ}o޹ʿڧ}+ս,ݍU1Amx5Wks3
+ħaW>dCDaLi1Ȇ`J.[snh27_1_u+mCW($OάҠKM :Pc?CMmAG| u
+&b,@L\:@ww[W˻]/}αಾd1
+.&~.oW}Ԝ ฾0d1
+OB_aeಾd1
+~vbwh`;-9?`Č}Vfpb)w'M0ִ숹F3w}q`5Fĺ8l Cϰrۚ"Mñ"bT#98˸u!.xtsںry¬h][yV+[ Egp1>lAwp뾶جmofM/&dᘝ7]b<4ph
+
+ބDBHkB" Ab1`
endobj
-1024 0 obj <<
+1026 0 obj <<
/Type /Page
-/Contents 1025 0 R
-/Resources 1023 0 R
+/Contents 1027 0 R
+/Resources 1025 0 R
/MediaBox [0 0 595.276 841.89]
/Parent 941 0 R
-/Annots [ 1028 0 R 1029 0 R 1030 0 R 1031 0 R 1032 0 R 1033 0 R 1034 0 R 1035 0 R 1036 0 R 1037 0 R 1038 0 R 1039 0 R 1040 0 R 1041 0 R 1042 0 R 1043 0 R 1044 0 R 1045 0 R 1046 0 R 1047 0 R 1048 0 R 1049 0 R 1050 0 R 1051 0 R 1052 0 R 1053 0 R 1054 0 R 1055 0 R 1056 0 R 1057 0 R 1058 0 R 1059 0 R 1060 0 R 1061 0 R 1062 0 R 1063 0 R 1064 0 R 1065 0 R 1066 0 R 1067 0 R ]
+/Annots [ 1030 0 R 1031 0 R 1032 0 R 1033 0 R 1034 0 R 1035 0 R 1036 0 R 1037 0 R 1038 0 R 1039 0 R 1040 0 R 1041 0 R 1042 0 R 1043 0 R 1044 0 R 1045 0 R 1046 0 R 1047 0 R 1048 0 R 1049 0 R 1050 0 R 1051 0 R 1052 0 R 1053 0 R 1054 0 R 1055 0 R 1056 0 R 1057 0 R 1058 0 R 1059 0 R 1060 0 R 1061 0 R 1062 0 R 1063 0 R 1064 0 R 1065 0 R 1066 0 R 1067 0 R 1068 0 R ]
>> endobj
-1028 0 obj <<
+1030 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [504.314 631.159 512.306 640.727]
+/Rect [525.586 617.61 539.579 627.178]
/Subtype /Link
/A << /S /GoTo /D (chapter.1) >>
>> endobj
-1029 0 obj <<
+1031 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [504.859 617.61 512.306 626.632]
+/Rect [526.677 604.06 539.579 613.083]
/Subtype /Link
/A << /S /GoTo /D (section.1.1) >>
>> endobj
-1030 0 obj <<
+1032 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [504.859 604.06 512.306 613.083]
+/Rect [526.677 590.511 539.579 599.534]
/Subtype /Link
/A << /S /GoTo /D (section.1.2) >>
>> endobj
-1031 0 obj <<
+1033 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 590.511 512.306 599.534]
+/Rect [526.677 576.962 539.579 585.985]
/Subtype /Link
/A << /S /GoTo /D (section.1.3) >>
>> endobj
-1032 0 obj <<
+1034 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 566.053 512.306 575.621]
+/Rect [525.586 552.504 539.579 562.072]
/Subtype /Link
/A << /S /GoTo /D (chapter.2) >>
>> endobj
-1033 0 obj <<
+1035 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 552.504 512.306 561.527]
+/Rect [526.677 538.955 539.579 547.977]
/Subtype /Link
/A << /S /GoTo /D (section.2.1) >>
>> endobj
-1034 0 obj <<
+1036 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 538.955 512.306 547.977]
+/Rect [526.677 525.405 539.579 534.428]
/Subtype /Link
/A << /S /GoTo /D (section.2.2) >>
>> endobj
-1035 0 obj <<
+1037 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 525.405 512.306 534.428]
+/Rect [526.677 511.856 539.579 520.879]
/Subtype /Link
/A << /S /GoTo /D (section.2.3) >>
>> endobj
-1036 0 obj <<
+1038 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 511.856 512.306 520.879]
+/Rect [526.677 498.307 539.579 507.33]
/Subtype /Link
/A << /S /GoTo /D (section.2.4) >>
>> endobj
-1037 0 obj <<
+1039 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 498.307 512.306 507.33]
+/Rect [526.677 484.758 539.579 493.781]
/Subtype /Link
/A << /S /GoTo /D (section.2.5) >>
>> endobj
-1038 0 obj <<
+1040 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 473.849 512.306 483.417]
+/Rect [525.586 460.299 539.579 469.868]
/Subtype /Link
/A << /S /GoTo /D (chapter.3) >>
>> endobj
-1039 0 obj <<
+1041 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 460.299 512.306 469.322]
+/Rect [526.677 446.75 539.579 455.773]
/Subtype /Link
/A << /S /GoTo /D (section.3.1) >>
>> endobj
-1040 0 obj <<
+1042 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 446.75 512.306 455.773]
+/Rect [526.677 433.201 539.579 442.224]
/Subtype /Link
/A << /S /GoTo /D (section.3.2) >>
>> endobj
-1041 0 obj <<
+1043 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 433.201 512.306 442.224]
+/Rect [526.677 419.652 539.579 428.675]
/Subtype /Link
/A << /S /GoTo /D (section.3.3) >>
>> endobj
-1042 0 obj <<
+1044 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 419.652 512.306 428.675]
+/Rect [526.677 406.103 539.579 415.125]
/Subtype /Link
/A << /S /GoTo /D (section.3.4) >>
>> endobj
-1043 0 obj <<
+1045 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 406.103 512.306 415.125]
+/Rect [526.677 392.553 539.579 401.576]
/Subtype /Link
/A << /S /GoTo /D (section.3.5) >>
>> endobj
-1044 0 obj <<
+1046 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 392.553 512.306 401.576]
+/Rect [526.677 379.004 539.579 388.027]
/Subtype /Link
/A << /S /GoTo /D (subsection.3.5.1) >>
>> endobj
-1045 0 obj <<
+1047 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 379.004 512.306 388.027]
+/Rect [526.677 365.455 539.579 374.478]
/Subtype /Link
/A << /S /GoTo /D (subsection.3.5.2) >>
>> endobj
-1046 0 obj <<
+1048 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 365.455 512.306 374.478]
+/Rect [526.677 351.906 539.579 360.929]
/Subtype /Link
/A << /S /GoTo /D (subsection.3.5.3) >>
>> endobj
-1047 0 obj <<
+1049 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 340.997 512.306 350.565]
+/Rect [525.586 327.448 539.579 337.016]
/Subtype /Link
/A << /S /GoTo /D (chapter.4) >>
>> endobj
-1048 0 obj <<
+1050 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 316.538 512.306 326.107]
+/Rect [525.586 302.989 539.579 312.558]
/Subtype /Link
/A << /S /GoTo /D (chapter.5) >>
>> endobj
-1049 0 obj <<
+1051 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 302.989 512.306 312.012]
+/Rect [526.677 289.44 539.579 298.463]
/Subtype /Link
/A << /S /GoTo /D (section.5.1) >>
>> endobj
-1050 0 obj <<
+1052 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 289.44 512.306 298.463]
+/Rect [526.677 275.891 539.579 284.914]
/Subtype /Link
/A << /S /GoTo /D (section.5.2) >>
>> endobj
-1051 0 obj <<
+1053 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 275.891 512.306 284.914]
+/Rect [526.677 262.342 539.579 271.364]
/Subtype /Link
/A << /S /GoTo /D (section.5.3) >>
>> endobj
-1052 0 obj <<
+1054 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 262.342 512.306 271.364]
+/Rect [526.677 248.792 539.579 257.815]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.1) >>
>> endobj
-1053 0 obj <<
+1055 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 248.792 512.306 257.815]
+/Rect [526.677 235.243 539.579 244.266]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.2) >>
>> endobj
-1054 0 obj <<
+1056 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 235.243 512.306 244.266]
+/Rect [526.677 221.694 539.579 230.717]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.3) >>
>> endobj
-1055 0 obj <<
+1057 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 221.694 512.306 230.717]
+/Rect [526.677 208.145 539.579 217.168]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.4) >>
>> endobj
-1056 0 obj <<
+1058 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 208.145 512.306 217.168]
+/Rect [526.677 194.596 539.579 203.618]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.5) >>
>> endobj
-1057 0 obj <<
+1059 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 194.596 512.306 203.618]
+/Rect [526.677 181.046 539.579 190.069]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.6) >>
>> endobj
-1058 0 obj <<
+1060 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 181.046 512.306 190.069]
+/Rect [526.677 167.497 539.579 176.52]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.7) >>
>> endobj
-1059 0 obj <<
+1061 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 167.497 512.306 176.52]
+/Rect [526.677 153.948 539.579 162.971]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.8) >>
>> endobj
-1060 0 obj <<
+1062 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 153.948 512.306 162.971]
+/Rect [526.677 140.399 539.579 149.422]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.9) >>
>> endobj
-1061 0 obj <<
+1063 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 140.399 512.306 149.422]
+/Rect [526.677 126.85 539.579 135.872]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.10) >>
>> endobj
-1062 0 obj <<
+1064 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 126.85 512.306 135.872]
+/Rect [526.677 113.3 539.579 122.323]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.11) >>
>> endobj
-1063 0 obj <<
+1065 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 113.3 512.306 122.323]
+/Rect [526.677 99.751 539.579 108.774]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.12) >>
>> endobj
-1064 0 obj <<
+1066 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 99.751 512.306 108.774]
+/Rect [526.677 86.202 539.579 95.225]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.13) >>
>> endobj
-1065 0 obj <<
+1067 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 86.202 512.306 95.225]
+/Rect [526.677 72.653 539.579 81.676]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.14) >>
>> endobj
-1066 0 obj <<
+1068 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 72.653 512.306 81.676]
+/Rect [526.677 59.104 539.579 68.127]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.3.15) >>
>> endobj
-1067 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 59.104 512.306 68.127]
-/Subtype /Link
-/A << /S /GoTo /D (section.5.4) >>
->> endobj
-1026 0 obj <<
-/D [1024 0 R /XYZ 85.039 786.531 null]
+1028 0 obj <<
+/D [1026 0 R /XYZ 85.039 786.531 null]
>> endobj
-1027 0 obj <<
-/D [1024 0 R /XYZ 85.039 656.613 null]
+1029 0 obj <<
+/D [1026 0 R /XYZ 85.039 643.064 null]
>> endobj
-1023 0 obj <<
+1025 0 obj <<
/Font << /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1070 0 obj <<
-/Length 1925
+1071 0 obj <<
+/Length 3142
/Filter /FlateDecode
>>
stream
-x\KWH+M3dRdik?[Ew/"Dt NFSn% *v *2I}}*?뱠|
-FAk^3ĎSo?I鹁4fHO-;E?y{cmw"mr*6~}} e߼m%A4`'Nsu<Ǜ_s|D>9-\VΝOa"N8]NTDysV[x{e-S0.]4hfMl
-%h*O!5AI 4]"euU\Dur+%E,8O(};˸Akn\ ,
-՝lPn
-q96AU:$,
-@IḸ {t꩝tQ&DʳO
-'|eRH$yoDQrtzeN[E@o&6E@5@{(Ór̲`̈́q(=Qܓ{mճ|>jMGKV,5&ϧ_<@]ZiA\k,߇(W~M\[m䅌rPyP͢tdK|en?wBvf#c~z(xgaw$V& _h|~3U;gn,G5Tu_~) I=<~ SVl
-{dns
-D%jq6^_f0t4!F;/ATQ0/%0"8:|b
+x[w:)6άƺؒ ,h94y87 m42o?uemj
+ZX⭽?eA.(PN%*(L_\12k**GEU?合l;6?/]kL*29|sjpu
+
+Fo,h_QP
+A㟁g#/
+T2dO#Ji^~sV_x^뷇o勒fh8*<UW}wOݒ tE__ 􋷡jRVR2
+#I n{``#,#+΁%aT #{"ƗM/ e:GjA}9fY ?p &L_ G.I\J\PT4;`:WKTUD邛q|R/T5bRUfQ_O4˦g
+,`% ~m7\190Xًz94,抉 nn]ηu=,#fmr
+
+=el{znOj=ՓB7#wd/- %P%
+Px3
+*IH_ rl@8@dȯk *.L ՝d[fxٽn&}f
+qViOc=K 65=riOAZnЯ[PҒrnGB(Ee`yfq1^#[((,PDVgv>/]s_I=ov91zJ39faEhLs .(u
+'/]:q.l.mݩlŋb'$ 6H0K
endobj
-1069 0 obj <<
+1070 0 obj <<
/Type /Page
-/Contents 1070 0 R
-/Resources 1068 0 R
+/Contents 1071 0 R
+/Resources 1069 0 R
/MediaBox [0 0 595.276 841.89]
/Parent 941 0 R
-/Annots [ 1075 0 R 1076 0 R 1077 0 R 1078 0 R 1079 0 R 1080 0 R 1081 0 R 1082 0 R 1083 0 R 1084 0 R 1085 0 R 1086 0 R 1087 0 R 1088 0 R 1089 0 R 1090 0 R 1091 0 R 1092 0 R 1093 0 R 1094 0 R 1095 0 R 1096 0 R 1097 0 R 1098 0 R 1099 0 R 1100 0 R 1101 0 R 1102 0 R 1103 0 R 1104 0 R 1105 0 R 1106 0 R 1107 0 R 1108 0 R 1109 0 R 1110 0 R 1111 0 R 1112 0 R 1113 0 R 1114 0 R 1115 0 R 1116 0 R 1117 0 R 1118 0 R 1119 0 R 1120 0 R 1121 0 R ]
+/Annots [ 1076 0 R 1077 0 R 1078 0 R 1079 0 R 1080 0 R 1081 0 R 1082 0 R 1083 0 R 1084 0 R 1085 0 R 1086 0 R 1087 0 R 1088 0 R 1089 0 R 1090 0 R 1091 0 R 1092 0 R 1093 0 R 1094 0 R 1095 0 R 1096 0 R 1097 0 R 1098 0 R 1099 0 R 1100 0 R 1101 0 R 1102 0 R 1103 0 R 1104 0 R 1105 0 R 1106 0 R 1107 0 R 1108 0 R 1109 0 R 1110 0 R 1111 0 R 1112 0 R 1113 0 R 1114 0 R 1115 0 R 1116 0 R 1117 0 R 1118 0 R 1119 0 R 1120 0 R 1121 0 R 1122 0 R 1123 0 R ]
>> endobj
-1075 0 obj <<
+1076 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 754.651 512.306 763.674]
+/Rect [526.677 754.651 539.579 763.674]
+/Subtype /Link
+/A << /S /GoTo /D (section.5.4) >>
+>> endobj
+1077 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [526.677 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.4.1) >>
>> endobj
-1076 0 obj <<
+1078 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 741.102 512.306 750.125]
+/Rect [526.677 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.4.2) >>
>> endobj
-1077 0 obj <<
+1079 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 727.553 512.306 736.575]
+/Rect [526.677 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (section.5.5) >>
>> endobj
-1078 0 obj <<
+1080 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 703.094 512.306 712.663]
+/Rect [525.586 689.545 539.579 699.113]
/Subtype /Link
/A << /S /GoTo /D (chapter.6) >>
>> endobj
-1079 0 obj <<
+1081 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 689.545 512.306 698.568]
+/Rect [526.677 675.996 539.579 685.019]
/Subtype /Link
/A << /S /GoTo /D (section.6.1) >>
>> endobj
-1080 0 obj <<
+1082 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 675.996 512.306 685.019]
+/Rect [526.677 662.447 539.579 671.469]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.1.1) >>
>> endobj
-1081 0 obj <<
+1083 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 662.447 512.306 671.469]
+/Rect [526.677 648.897 539.579 657.92]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.1.2) >>
>> endobj
-1082 0 obj <<
+1084 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 648.897 512.306 657.92]
+/Rect [526.677 635.348 539.579 644.371]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.1.3) >>
>> endobj
-1083 0 obj <<
+1085 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 635.348 512.306 644.371]
+/Rect [526.677 621.799 539.579 630.822]
/Subtype /Link
/A << /S /GoTo /D (section.6.2) >>
>> endobj
-1084 0 obj <<
+1086 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 621.799 512.306 630.822]
+/Rect [526.677 608.25 539.579 617.273]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.2.1) >>
>> endobj
-1085 0 obj <<
+1087 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 597.341 512.306 606.909]
+/Rect [525.586 583.792 539.579 593.36]
/Subtype /Link
/A << /S /GoTo /D (chapter.7) >>
>> endobj
-1086 0 obj <<
+1088 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 583.792 512.306 592.814]
+/Rect [526.677 570.242 539.579 579.265]
/Subtype /Link
/A << /S /GoTo /D (section.7.1) >>
>> endobj
-1087 0 obj <<
+1089 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 570.242 512.306 579.265]
+/Rect [526.677 556.693 539.579 565.716]
/Subtype /Link
/A << /S /GoTo /D (section.7.2) >>
>> endobj
-1088 0 obj <<
+1090 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 556.693 512.306 565.716]
+/Rect [526.677 543.144 539.579 552.167]
/Subtype /Link
/A << /S /GoTo /D (section.7.3) >>
>> endobj
-1089 0 obj <<
+1091 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 543.144 512.306 552.167]
+/Rect [526.677 529.595 539.579 538.618]
/Subtype /Link
/A << /S /GoTo /D (section.7.4) >>
>> endobj
-1090 0 obj <<
+1092 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 529.595 512.306 538.618]
+/Rect [526.677 516.046 539.579 525.068]
/Subtype /Link
/A << /S /GoTo /D (section.7.5) >>
>> endobj
-1091 0 obj <<
+1093 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 516.046 512.306 525.068]
+/Rect [526.677 502.496 539.579 511.519]
/Subtype /Link
/A << /S /GoTo /D (section.7.6) >>
>> endobj
-1092 0 obj <<
+1094 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 502.496 512.306 511.519]
+/Rect [526.677 488.947 539.579 497.97]
/Subtype /Link
/A << /S /GoTo /D (section.7.7) >>
>> endobj
-1093 0 obj <<
+1095 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 488.947 512.306 497.97]
+/Rect [526.677 475.398 539.579 484.421]
/Subtype /Link
/A << /S /GoTo /D (section.7.8) >>
>> endobj
-1094 0 obj <<
+1096 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 475.398 512.306 484.421]
+/Rect [526.677 461.849 539.579 470.872]
/Subtype /Link
/A << /S /GoTo /D (section.7.9) >>
>> endobj
-1095 0 obj <<
+1097 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 450.94 512.306 460.508]
+/Rect [525.586 437.39 539.579 446.959]
/Subtype /Link
/A << /S /GoTo /D (chapter.8) >>
>> endobj
-1096 0 obj <<
+1098 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 426.481 512.306 436.05]
+/Rect [525.586 412.932 539.579 422.5]
/Subtype /Link
/A << /S /GoTo /D (chapter.9) >>
>> endobj
-1097 0 obj <<
+1099 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 412.932 512.306 421.955]
+/Rect [526.677 399.383 539.579 408.406]
/Subtype /Link
/A << /S /GoTo /D (section.9.1) >>
>> endobj
-1098 0 obj <<
+1100 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 388.474 512.306 398.042]
+/Rect [525.586 374.925 539.579 384.493]
/Subtype /Link
/A << /S /GoTo /D (chapter.10) >>
>> endobj
-1099 0 obj <<
+1101 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 374.925 512.306 383.947]
+/Rect [526.677 361.375 539.579 370.398]
/Subtype /Link
/A << /S /GoTo /D (section.10.1) >>
>> endobj
-1100 0 obj <<
+1102 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 361.375 512.306 370.398]
+/Rect [526.677 347.826 539.579 356.849]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.1.1) >>
>> endobj
-1101 0 obj <<
+1103 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 347.826 512.306 356.849]
+/Rect [526.677 334.277 539.579 343.3]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.1.2) >>
>> endobj
-1102 0 obj <<
+1104 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 334.277 512.306 343.3]
+/Rect [526.677 320.728 539.579 329.751]
/Subtype /Link
/A << /S /GoTo /D (section.10.2) >>
>> endobj
-1103 0 obj <<
+1105 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 320.728 512.306 329.751]
+/Rect [526.677 307.179 539.579 316.201]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.2.1) >>
>> endobj
-1104 0 obj <<
+1106 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 307.179 512.306 316.201]
+/Rect [526.677 293.629 539.579 302.652]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.2.2) >>
>> endobj
-1105 0 obj <<
+1107 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 293.629 512.306 302.652]
+/Rect [526.677 280.08 539.579 289.103]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.2.1) >>
>> endobj
-1106 0 obj <<
+1108 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 280.08 512.306 289.103]
+/Rect [526.677 266.531 539.579 275.554]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.2.2) >>
>> endobj
-1107 0 obj <<
+1109 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 266.531 512.306 275.554]
+/Rect [526.677 252.982 539.579 262.005]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.2.3) >>
>> endobj
-1108 0 obj <<
+1110 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 252.982 512.306 262.005]
+/Rect [526.677 239.433 539.579 248.456]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.1) >>
>> endobj
-1109 0 obj <<
+1111 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 239.433 512.306 248.456]
+/Rect [526.677 225.883 539.579 234.906]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.2) >>
>> endobj
-1110 0 obj <<
+1112 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 225.883 512.306 234.906]
+/Rect [526.677 212.334 539.579 221.357]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.3) >>
>> endobj
-1111 0 obj <<
+1113 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 212.334 512.306 221.357]
+/Rect [526.677 198.785 539.579 207.808]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.4) >>
>> endobj
-1112 0 obj <<
+1114 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 198.785 512.306 207.808]
+/Rect [526.677 185.236 539.579 194.259]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.5) >>
>> endobj
-1113 0 obj <<
+1115 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 185.236 512.306 194.259]
+/Rect [526.677 171.687 539.579 180.71]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.6) >>
>> endobj
-1114 0 obj <<
+1116 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 171.687 512.306 180.71]
+/Rect [526.677 158.138 539.579 167.16]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.7) >>
>> endobj
-1115 0 obj <<
+1117 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 158.138 512.306 167.16]
+/Rect [526.677 144.588 539.579 153.611]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.8) >>
>> endobj
-1116 0 obj <<
+1118 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 144.588 512.306 153.611]
+/Rect [526.677 131.039 539.579 140.062]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.9) >>
>> endobj
-1117 0 obj <<
+1119 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 131.039 512.306 140.062]
+/Rect [526.677 117.49 539.579 126.513]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.10) >>
>> endobj
-1118 0 obj <<
+1120 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 117.49 512.306 126.513]
+/Rect [526.677 103.941 539.579 112.964]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.11) >>
>> endobj
-1119 0 obj <<
+1121 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 103.941 512.306 112.964]
+/Rect [526.677 90.392 539.579 99.414]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.12) >>
>> endobj
-1120 0 obj <<
+1122 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 90.392 512.306 99.414]
+/Rect [526.677 76.842 539.579 85.865]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.13) >>
>> endobj
-1121 0 obj <<
+1123 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 63.293 512.306 72.316]
+/Rect [526.677 63.293 539.579 72.316]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.14) >>
>> endobj
-1071 0 obj <<
-/D [1069 0 R /XYZ 85.039 786.531 null]
+1072 0 obj <<
+/D [1070 0 R /XYZ 85.039 786.531 null]
>> endobj
-1068 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R >>
+1069 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1124 0 obj <<
-/Length 1932
+1126 0 obj <<
+/Length 3479
/Filter /FlateDecode
>>
stream
-x\[S8~ϯȣ3Qu<R-h}hM 4l~u8ۀ,K;.+Du:{[v@LQ+!PPuGh98LzX潯Q&}
-('.?;DD/]
-rXz})x
-pz Z{8
-'+hp],*PwMaOpt7V2A-ٴ~_4"%N밀۴n8iɪ }c
-&h5WW^$ŕQ&y/i
-9Ns*
-2'3ث2 ,5M` |hL!/[&=U_⓷>
-dѠT`"$?A+PJލVzQ0> t3fԓzm^.k5{]G> sԌ0 Mg:Ä}fgx7%cک^N=DPn \+2l`]N`j7 @鎳ӛr#@plϣv#b
-is:f'Gl k$P>'f^zMy,ttkM.v?[[DIIĎ'Y"GN8\6ܨ~58Ye3kVٮ`Xl*9F[YxL&vk~59~@*MqxÝ)-h|&4im"|ec8ǒ{&HKaO1ecҁO)SB+4RWdV_]S-4 sМ> I+NYE
-wvٽdsZպ/8w!x1Gjy5ğ6{X5^HhV9k$W!A J2#nsRAA&_cԶ ,^`VFX5+,)q,׭p7L\"E&n>=r?*pE 5ii[ I$5@틾ad42.Ҧ*t
-VhfBP[XĘ &oDHTeNpZƎe p0]PI>$)< Ơ˸he
-@N5VOv2u_9E܊pPͫR!<fWS TF
+x[s6)(V(q#4qtZ'mT[I5Vo
+*M2ppd F-}RkAW9HÇd}-18Kfо4 ଶ3Oͽ>&; <үyIv[;CȺhMPEVayaX@"')KoO/rHb!mr=?;X1RzN%vysLw5w0\qJxTᅕ.=3@ ZCyTrrf;me߲[߬X˛ߎBzHk&jzbQJRտCib<&N4O/cO;cxzZV=aV'<M i; ;f[L^Ib@W p5%J}dP0RpRHOARhOA|-NJO`4;5Ŷۯcd{}eIٌvBO'ߐzS5}O'YpUceK}ث"yX܀};`,F (iX <p66DZhu.o+Mk~l(]qA*0U'd>XmR `q>B&E|tnsoN}1ܵtӿk鿩KAEW9
+-n -EԏMV{à!hTS\v]kkͭ{v-BHO<*zҤ'3@zV ئ%DKUg0p6FPO>nNн_D۱nԴ)Y,CdXRd}<2,L\O 5VϿb=/kM %2̳<109_&= ٫b.jar&jKYBf6y6 ) }
+PD"yX@5s I`W+3p$~LD3 D_!#B&{yj#7'Sޜl|-yO2}mXKΜ|X+{~rxƭL%k?6hvdvk<y_Y&ay8{q=80coG7>Fhk0B0%F2(c uf_{\S|r[+]—Vh ʌțgȋ *GH]KDgH
+@.
+4 а~w=hAvsXt' Y 0+E*1A4nCMD6em|ygn``KVKAB bgmH@@ˈb`3LZN/= оʮ,2G3DgPrD<Di,nZ* ukB۝+lח۾Z- !("o
+l?"/S,=,HeѸANeOS+y4C$G$3@$Z5|8H%d&`|~ʷ'7{a?lRUVh( *(g( [
+BNǤwe>!  鱸AzDeq婕<!# cqC_KBjp߮j$D3H[HH X0+HSޕVhH$@3@集P(*:+DXwD,<6w|jYj°?9O۶{$U
+~ wdpa_11~UKeg5'c?+rwj7qI( E0Cendstream
endobj
-1123 0 obj <<
+1125 0 obj <<
/Type /Page
-/Contents 1124 0 R
-/Resources 1122 0 R
+/Contents 1126 0 R
+/Resources 1124 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 941 0 R
-/Annots [ 1126 0 R 1127 0 R 1128 0 R 1129 0 R 1130 0 R 1131 0 R 1132 0 R 1133 0 R 1134 0 R 1135 0 R 1136 0 R 1137 0 R 1138 0 R 1139 0 R 1140 0 R 1141 0 R 1142 0 R 1143 0 R 1144 0 R 1145 0 R 1146 0 R 1147 0 R 1148 0 R 1149 0 R 1150 0 R 1151 0 R 1152 0 R 1153 0 R 1154 0 R 1155 0 R 1156 0 R 1157 0 R 1158 0 R 1159 0 R 1160 0 R 1161 0 R 1162 0 R 1163 0 R 1164 0 R 1165 0 R 1166 0 R 1167 0 R 1168 0 R 1169 0 R 1170 0 R 1171 0 R 1172 0 R 1173 0 R 1174 0 R ]
+/Parent 1180 0 R
+/Annots [ 1128 0 R 1129 0 R 1130 0 R 1131 0 R 1132 0 R 1133 0 R 1134 0 R 1135 0 R 1136 0 R 1137 0 R 1138 0 R 1139 0 R 1140 0 R 1141 0 R 1142 0 R 1143 0 R 1144 0 R 1145 0 R 1146 0 R 1147 0 R 1148 0 R 1149 0 R 1150 0 R 1151 0 R 1152 0 R 1153 0 R 1154 0 R 1155 0 R 1156 0 R 1157 0 R 1158 0 R 1159 0 R 1160 0 R 1161 0 R 1162 0 R 1163 0 R 1164 0 R 1165 0 R 1166 0 R 1167 0 R 1168 0 R 1169 0 R 1170 0 R 1171 0 R 1172 0 R 1173 0 R 1174 0 R 1175 0 R 1176 0 R 1177 0 R 1178 0 R 1179 0 R ]
>> endobj
-1126 0 obj <<
+1128 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 754.651 512.306 763.674]
+/Rect [526.677 754.651 539.579 763.674]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.15) >>
>> endobj
-1127 0 obj <<
+1129 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 741.102 512.306 750.125]
+/Rect [526.677 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.16) >>
>> endobj
-1128 0 obj <<
+1130 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 727.553 512.306 736.575]
+/Rect [526.677 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.17) >>
>> endobj
-1129 0 obj <<
+1131 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 714.003 512.306 723.026]
+/Rect [526.677 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.18) >>
>> endobj
-1130 0 obj <<
+1132 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 686.905 512.306 695.928]
+/Rect [526.677 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.19) >>
>> endobj
-1131 0 obj <<
+1133 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 659.807 512.306 668.829]
+/Rect [526.677 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.20) >>
>> endobj
-1132 0 obj <<
+1134 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 646.257 512.306 655.28]
+/Rect [526.677 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.21) >>
>> endobj
-1133 0 obj <<
+1135 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 632.708 512.306 641.731]
+/Rect [526.677 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.22) >>
>> endobj
-1134 0 obj <<
+1136 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 619.159 512.306 628.182]
+/Rect [526.677 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.23) >>
>> endobj
-1135 0 obj <<
+1137 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 605.61 512.306 614.633]
+/Rect [526.677 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.24) >>
>> endobj
-1136 0 obj <<
+1138 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 592.061 512.306 601.083]
+/Rect [526.677 619.159 539.579 628.182]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.25) >>
>> endobj
-1137 0 obj <<
+1139 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 578.511 512.306 587.534]
+/Rect [526.677 605.61 539.579 614.633]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.26) >>
>> endobj
-1138 0 obj <<
+1140 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 564.962 512.306 573.985]
+/Rect [526.677 592.061 539.579 601.083]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.27) >>
>> endobj
-1139 0 obj <<
+1141 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 551.413 512.306 560.436]
+/Rect [526.677 578.511 539.579 587.534]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.28) >>
>> endobj
-1140 0 obj <<
+1142 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 537.864 512.306 546.887]
+/Rect [526.677 564.962 539.579 573.985]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.29) >>
>> endobj
-1141 0 obj <<
+1143 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 524.315 512.306 533.337]
+/Rect [526.677 551.413 539.579 560.436]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.2.3.30) >>
>> endobj
-1142 0 obj <<
+1144 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 510.765 512.306 519.788]
+/Rect [526.677 537.864 539.579 546.887]
/Subtype /Link
/A << /S /GoTo /D (section.10.3) >>
>> endobj
-1143 0 obj <<
+1145 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 497.216 512.306 506.239]
+/Rect [526.677 524.315 539.579 533.337]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.1) >>
>> endobj
-1144 0 obj <<
+1146 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 483.667 512.306 492.69]
+/Rect [526.677 510.765 539.579 519.788]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.2) >>
>> endobj
-1145 0 obj <<
+1147 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 456.569 512.306 465.591]
+/Rect [526.677 497.216 539.579 506.239]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.2.1) >>
>> endobj
-1146 0 obj <<
+1148 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 443.019 512.306 452.042]
+/Rect [526.677 483.667 539.579 492.69]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.2.2) >>
>> endobj
-1147 0 obj <<
+1149 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 429.47 512.306 438.493]
+/Rect [526.677 470.118 539.579 479.141]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.2.3) >>
>> endobj
-1148 0 obj <<
+1150 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 415.921 512.306 424.944]
+/Rect [526.677 456.569 539.579 465.591]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.2.4) >>
>> endobj
-1149 0 obj <<
+1151 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 402.372 512.306 411.395]
+/Rect [526.677 443.019 539.579 452.042]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.2.5) >>
>> endobj
-1150 0 obj <<
+1152 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 388.823 512.306 397.845]
+/Rect [526.677 429.47 539.579 438.493]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.2.6) >>
>> endobj
-1151 0 obj <<
+1153 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 375.273 512.306 384.296]
+/Rect [526.677 415.921 539.579 424.944]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.2.7) >>
>> endobj
-1152 0 obj <<
+1154 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 361.724 512.306 370.747]
+/Rect [526.677 402.372 539.579 411.395]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.2.8) >>
>> endobj
-1153 0 obj <<
+1155 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 348.175 512.306 357.198]
+/Rect [526.677 388.823 539.579 397.845]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.3) >>
>> endobj
-1154 0 obj <<
+1156 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 334.626 512.306 343.649]
+/Rect [526.677 375.273 539.579 384.296]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.4) >>
>> endobj
-1155 0 obj <<
+1157 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 321.077 512.306 330.099]
+/Rect [526.677 361.724 539.579 370.747]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.5) >>
>> endobj
-1156 0 obj <<
+1158 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 307.527 512.306 316.55]
+/Rect [526.677 348.175 539.579 357.198]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.6) >>
>> endobj
-1157 0 obj <<
+1159 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 293.978 512.306 303.001]
+/Rect [526.677 334.626 539.579 343.649]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.6.1) >>
>> endobj
-1158 0 obj <<
+1160 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 280.429 512.306 289.452]
+/Rect [526.677 321.077 539.579 330.099]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.6.2) >>
>> endobj
-1159 0 obj <<
+1161 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 266.88 512.306 275.903]
+/Rect [526.677 307.527 539.579 316.55]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.7) >>
>> endobj
-1160 0 obj <<
+1162 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 253.331 512.306 262.354]
+/Rect [526.677 293.978 539.579 303.001]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.7.1) >>
>> endobj
-1161 0 obj <<
+1163 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 239.781 512.306 248.804]
+/Rect [526.677 280.429 539.579 289.452]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.7.2) >>
>> endobj
-1162 0 obj <<
+1164 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 226.232 512.306 235.255]
+/Rect [526.677 266.88 539.579 275.903]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.8) >>
>> endobj
-1163 0 obj <<
+1165 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 212.683 512.306 221.706]
+/Rect [526.677 253.331 539.579 262.354]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.8.1) >>
>> endobj
-1164 0 obj <<
+1166 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 199.134 512.306 208.157]
+/Rect [526.677 239.781 539.579 248.804]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.8.2) >>
>> endobj
-1165 0 obj <<
+1167 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 185.585 512.306 194.608]
+/Rect [526.677 226.232 539.579 235.255]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.9) >>
>> endobj
-1166 0 obj <<
+1168 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 172.036 512.306 181.058]
+/Rect [526.677 212.683 539.579 221.706]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.9.1) >>
>> endobj
-1167 0 obj <<
+1169 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 158.486 512.306 167.509]
+/Rect [526.677 199.134 539.579 208.157]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.9.2) >>
>> endobj
-1168 0 obj <<
+1170 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 144.937 512.306 153.96]
+/Rect [526.677 185.585 539.579 194.608]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.10) >>
>> endobj
-1169 0 obj <<
+1171 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 131.388 512.306 140.411]
+/Rect [526.677 172.036 539.579 181.058]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.10.1) >>
>> endobj
-1170 0 obj <<
+1172 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 117.839 512.306 126.862]
+/Rect [526.677 158.486 539.579 167.509]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.10.2) >>
>> endobj
-1171 0 obj <<
+1173 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 104.29 512.306 113.312]
+/Rect [526.677 144.937 539.579 153.96]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.11) >>
>> endobj
-1172 0 obj <<
+1174 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 90.74 512.306 99.763]
+/Rect [526.677 131.388 539.579 140.411]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.11.1) >>
>> endobj
-1173 0 obj <<
+1175 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 77.191 512.306 86.214]
+/Rect [526.677 117.839 539.579 126.862]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.11.2) >>
>> endobj
-1174 0 obj <<
+1176 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 63.642 512.306 72.665]
+/Rect [526.677 104.29 539.579 113.312]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.12) >>
>> endobj
-1125 0 obj <<
-/D [1123 0 R /XYZ 85.039 786.531 null]
->> endobj
-1122 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
1177 0 obj <<
-/Length 1586
-/Filter /FlateDecode
->>
-stream
-x\Mw8+{j}2!tRY]ѓd MLJ :,,Y{{ғ_~#8i"@bg0iH; ~߁<ȏ~r;y5߶N+bQ~>}-H8w#EΤ8EQSzQtsYڦ,ʂ`Ƽ0Av&A^%^?y2k3H~E|q_zF8c.k#G4}N!(ic .MYc]B7Ϧp' G،&{ڿ<t\v6-41 y(de+`uUm u}O셄 XR, JcEH#yX_ 1C;XyX%^!B!^zFaDh<devkt%dG/A OQCA>Vª>q< *)Lh
-x y1|p99R㠿/U8FZ,
-:z|g0,FfuɰU(F}1mrLq+SƆթaނïfL8#ld:Rǻ ~`\ ,H9XX1L{jB!.$` H۶* 2^&U>KSY˵N!ض&A֯ 7׸M ItMu=s {#VMjolX. b#訩waݏLJ]C]C8$ J&q҈G 04/m\$SLJYRfsP֡XHX-:kJR35%V^jx$/†+ѡ;/21nSw~A%1p_O@T0"|RT,5(h6 2=I>"pD·+$8Yt|,,2ke6MvLIA-C2*,LLj3Zrޠa5"}tKמ`zjC[&[}5JG֬ӆ!oޟTN&΃܅":ظQ z
-Wd N6|TGĢ!t3qO ?r@b'8@40*.TKyaXB,$kCȓl{Β"ks"@Q$/k
-R  e LHUF%21" 10{::*0!LfN!uPuBG"-t*9A <q'n;=l%0%\/W'p/ 4š]gӹ,Rg.2䷣VnLLf(bqk-&&u0CE#su
-ud4C1(*bh
-endobj
-1176 0 obj <<
-/Type /Page
-/Contents 1177 0 R
-/Resources 1175 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 1229 0 R
-/Annots [ 1179 0 R 1180 0 R 1181 0 R 1182 0 R 1183 0 R 1184 0 R 1185 0 R 1186 0 R 1187 0 R 1188 0 R 1189 0 R 1190 0 R 1191 0 R 1192 0 R 1193 0 R 1194 0 R 1195 0 R 1196 0 R 1197 0 R 1198 0 R 1199 0 R 1200 0 R 1201 0 R 1202 0 R 1203 0 R 1204 0 R 1205 0 R 1206 0 R 1207 0 R 1208 0 R 1209 0 R 1210 0 R 1211 0 R 1212 0 R 1213 0 R 1214 0 R 1215 0 R 1216 0 R 1217 0 R 1218 0 R 1219 0 R 1220 0 R 1221 0 R 1222 0 R 1223 0 R 1224 0 R 1225 0 R 1226 0 R 1227 0 R 1228 0 R ]
->> endobj
-1179 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 754.651 512.306 763.674]
+/Rect [526.677 90.74 539.579 99.763]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.12.1) >>
>> endobj
-1180 0 obj <<
+1178 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 741.102 512.306 750.125]
+/Rect [526.677 77.191 539.579 86.214]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.3.12.2) >>
>> endobj
-1181 0 obj <<
+1179 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 727.553 512.306 736.575]
+/Rect [526.677 63.642 539.579 72.665]
/Subtype /Link
/A << /S /GoTo /D (section.10.4) >>
>> endobj
+1127 0 obj <<
+/D [1125 0 R /XYZ 85.039 786.531 null]
+>> endobj
+1124 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1183 0 obj <<
+/Length 2745
+/Filter /FlateDecode
+>>
+stream
+xKsF-yev)ȉŵIDIPCRSɖc*b.fӘ0U)*ZS<?Fzϻ#쎘C1gGr9z4 +k1]4>Y&Dws2,8q)5_ѵợ
+Zrp]3֗GG?s}ld
+qEy50l$9G{ T06~q<RJ)>,f[+pc42uW7D"!conGvcYMA܆ YgO
+jvsI(\ :A
+`PRoBN̆ylxOAk߈rN1ok|c0+ͶmfyvG.z2UJ?
+
+\JU
+׉OS!l}`}OAԴe{*6;;hNЏ
+sW0K;;|ַ,-%`q㾙]?5e6D/τޫvnafkGc8R 
+ڙKH!~p" f}xu(
+ Pp7BPE61
+W!?{xwL, QL'&ܵ"syo/Nzmͽ0.!
+w"mE":%~yv~a[3,m{zЩky. /Z հjr8}-(ӐGkjhtAھc$ Oendstream
+endobj
1182 0 obj <<
+/Type /Page
+/Contents 1183 0 R
+/Resources 1181 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1180 0 R
+/Annots [ 1185 0 R 1186 0 R 1187 0 R 1188 0 R 1189 0 R 1190 0 R 1191 0 R 1192 0 R 1193 0 R 1194 0 R 1195 0 R 1196 0 R 1197 0 R 1198 0 R 1199 0 R 1200 0 R 1201 0 R 1202 0 R 1203 0 R 1204 0 R 1205 0 R 1206 0 R 1207 0 R 1208 0 R 1209 0 R 1210 0 R 1211 0 R 1212 0 R 1213 0 R 1214 0 R 1215 0 R 1216 0 R 1217 0 R 1218 0 R 1219 0 R 1220 0 R 1221 0 R 1222 0 R 1223 0 R 1224 0 R 1225 0 R 1226 0 R 1227 0 R 1228 0 R 1229 0 R 1230 0 R 1231 0 R 1232 0 R 1233 0 R ]
+>> endobj
+1185 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 714.003 512.306 723.026]
+/Rect [526.677 754.651 539.579 763.674]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.1) >>
>> endobj
-1183 0 obj <<
+1186 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 700.454 512.306 709.477]
+/Rect [526.677 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.4.1.1) >>
>> endobj
-1184 0 obj <<
+1187 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 686.905 512.306 695.928]
+/Rect [526.677 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.4.1.2) >>
>> endobj
-1185 0 obj <<
+1188 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 673.356 512.306 682.379]
+/Rect [526.677 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.2) >>
>> endobj
-1186 0 obj <<
+1189 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 659.807 512.306 668.829]
+/Rect [526.677 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.4.2.1) >>
>> endobj
-1187 0 obj <<
+1190 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 646.257 512.306 655.28]
+/Rect [526.677 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.4.2.2) >>
>> endobj
-1188 0 obj <<
+1191 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 632.708 512.306 641.731]
+/Rect [526.677 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.3) >>
>> endobj
-1189 0 obj <<
+1192 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 619.159 512.306 628.182]
+/Rect [526.677 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.4.3.1) >>
>> endobj
-1190 0 obj <<
+1193 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 605.61 512.306 614.633]
+/Rect [526.677 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.4.3.2) >>
>> endobj
-1191 0 obj <<
+1194 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 592.061 512.306 601.083]
+/Rect [526.677 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.4) >>
>> endobj
-1192 0 obj <<
+1195 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 578.511 512.306 587.534]
+/Rect [526.677 619.159 539.579 628.182]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.4.4.1) >>
>> endobj
-1193 0 obj <<
+1196 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 564.962 512.306 573.985]
+/Rect [526.677 605.61 539.579 614.633]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.4.4.2) >>
>> endobj
-1194 0 obj <<
+1197 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 551.413 512.306 560.436]
+/Rect [526.677 592.061 539.579 601.083]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.5) >>
>> endobj
-1195 0 obj <<
+1198 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 537.864 512.306 546.887]
+/Rect [526.677 578.511 539.579 587.534]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.4.5.1) >>
>> endobj
-1196 0 obj <<
+1199 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 524.315 512.306 533.337]
+/Rect [526.677 564.962 539.579 573.985]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.4.5.2) >>
>> endobj
-1197 0 obj <<
+1200 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 510.765 512.306 519.788]
+/Rect [526.677 551.413 539.579 560.436]
/Subtype /Link
/A << /S /GoTo /D (section.10.5) >>
>> endobj
-1198 0 obj <<
+1201 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 497.216 512.306 506.239]
+/Rect [526.677 537.864 539.579 546.887]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.5.1) >>
>> endobj
-1199 0 obj <<
+1202 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 483.667 512.306 492.69]
+/Rect [526.677 524.315 539.579 533.337]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.5.1.1) >>
>> endobj
-1200 0 obj <<
+1203 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 470.118 512.306 479.141]
+/Rect [526.677 510.765 539.579 519.788]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.5.1.2) >>
>> endobj
-1201 0 obj <<
+1204 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 456.569 512.306 465.591]
+/Rect [526.677 497.216 539.579 506.239]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.5.2) >>
>> endobj
-1202 0 obj <<
+1205 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 443.019 512.306 452.042]
+/Rect [526.677 483.667 539.579 492.69]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.5.2.1) >>
>> endobj
-1203 0 obj <<
+1206 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 429.47 512.306 438.493]
+/Rect [526.677 470.118 539.579 479.141]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.5.2.2) >>
>> endobj
-1204 0 obj <<
+1207 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 415.921 512.306 424.944]
+/Rect [526.677 456.569 539.579 465.591]
/Subtype /Link
/A << /S /GoTo /D (section.10.6) >>
>> endobj
-1205 0 obj <<
+1208 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 402.372 512.306 411.395]
+/Rect [526.677 443.019 539.579 452.042]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.6.1) >>
>> endobj
-1206 0 obj <<
+1209 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 388.823 512.306 397.845]
+/Rect [526.677 429.47 539.579 438.493]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.6.1.1) >>
>> endobj
-1207 0 obj <<
+1210 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 375.273 512.306 384.296]
+/Rect [526.677 415.921 539.579 424.944]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.6.1.2) >>
>> endobj
-1208 0 obj <<
+1211 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 361.724 512.306 370.747]
+/Rect [526.677 402.372 539.579 411.395]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.6.2) >>
>> endobj
-1209 0 obj <<
+1212 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 348.175 512.306 357.198]
+/Rect [526.677 388.823 539.579 397.845]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.6.2.1) >>
>> endobj
-1210 0 obj <<
+1213 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 334.626 512.306 343.649]
+/Rect [526.677 375.273 539.579 384.296]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.6.2.2) >>
>> endobj
-1211 0 obj <<
+1214 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 321.077 512.306 330.099]
+/Rect [526.677 361.724 539.579 370.747]
/Subtype /Link
/A << /S /GoTo /D (section.10.7) >>
>> endobj
-1212 0 obj <<
+1215 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 307.527 512.306 316.55]
+/Rect [526.677 348.175 539.579 357.198]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.7.1) >>
>> endobj
-1213 0 obj <<
+1216 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 293.978 512.306 303.001]
+/Rect [526.677 334.626 539.579 343.649]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.7.2) >>
>> endobj
-1214 0 obj <<
+1217 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 280.429 512.306 289.452]
+/Rect [526.677 321.077 539.579 330.099]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.7.3) >>
>> endobj
-1215 0 obj <<
+1218 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 266.88 512.306 275.903]
+/Rect [526.677 307.527 539.579 316.55]
/Subtype /Link
/A << /S /GoTo /D (section.10.8) >>
>> endobj
-1216 0 obj <<
+1219 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 253.331 512.306 262.354]
+/Rect [526.677 293.978 539.579 303.001]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.8.1) >>
>> endobj
-1217 0 obj <<
+1220 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 239.781 512.306 248.804]
+/Rect [526.677 280.429 539.579 289.452]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.8.1.1) >>
>> endobj
-1218 0 obj <<
+1221 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 226.232 512.306 235.255]
+/Rect [526.677 266.88 539.579 275.903]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.8.1.2) >>
>> endobj
-1219 0 obj <<
+1222 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 212.683 512.306 221.706]
+/Rect [526.677 253.331 539.579 262.354]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.8.2) >>
>> endobj
-1220 0 obj <<
+1223 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 199.134 512.306 208.157]
+/Rect [526.677 239.781 539.579 248.804]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.8.2.1) >>
>> endobj
-1221 0 obj <<
+1224 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 185.585 512.306 194.608]
+/Rect [526.677 226.232 539.579 235.255]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.8.2.2) >>
>> endobj
-1222 0 obj <<
+1225 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 172.036 512.306 181.058]
+/Rect [526.677 212.683 539.579 221.706]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.8.2.3) >>
>> endobj
-1223 0 obj <<
+1226 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 147.577 512.306 157.145]
+/Rect [525.586 188.225 539.579 197.793]
/Subtype /Link
/A << /S /GoTo /D (chapter.11) >>
>> endobj
-1224 0 obj <<
+1227 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 134.028 512.306 143.051]
+/Rect [526.677 174.676 539.579 183.698]
/Subtype /Link
/A << /S /GoTo /D (section.11.1) >>
>> endobj
-1225 0 obj <<
+1228 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 120.479 512.306 129.502]
+/Rect [526.677 161.126 539.579 170.149]
/Subtype /Link
/A << /S /GoTo /D (section.11.2) >>
>> endobj
-1226 0 obj <<
+1229 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 106.93 512.306 115.952]
+/Rect [526.677 147.577 539.579 156.6]
/Subtype /Link
/A << /S /GoTo /D (section.11.3) >>
>> endobj
-1227 0 obj <<
+1230 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 93.38 512.306 102.403]
+/Rect [526.677 134.028 539.579 143.051]
/Subtype /Link
/A << /S /GoTo /D (section.11.4) >>
>> endobj
-1228 0 obj <<
+1231 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 79.831 512.306 88.854]
+/Rect [526.677 120.479 539.579 129.502]
/Subtype /Link
/A << /S /GoTo /D (section.11.5) >>
>> endobj
-1178 0 obj <<
-/D [1176 0 R /XYZ 85.039 786.531 null]
->> endobj
-1175 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F14 969 0 R /F20 937 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
1232 0 obj <<
-/Length 1909
-/Filter /FlateDecode
->>
-stream
-x\[oH~J 3þUҺj4vڕ>`86x1n{\/EacIۅ?qipJimaU+6s\_֋#]'tvB^}^f :/ݤS?O_>Muh(Wp:$ Iz_EͱzWw07;u`ߡ>ܤ\W"p7EAdwX6Nz8[ݴs<O LmTC`>nW[>'"=R=˨SA \C<X .R̊I~1.,rr0\:[}6߷Wͭ#'xt7jꚕ;nJȱv!zL/c3x%0&X 9N;+tj5q'~hu/.D kxB
-27 ʅPN=|jj=Lo倨i
-yWR䠵7bADk*^<$+<TY41b lպe0hLa6|}>0=eo'*1`6CJQ@fTDcd/5#)dT~ N48 MPLЄCx-Сk`Җ Sĭ!>`X-n. 4ё&^)-H$
-vjKOm
-9+_/<D(.wFxɃ)^f(ޮ@jn2Tu4uF~ хl$ᨄrT,2Y.o
-Gp[r<dٙPdè$"5)d>J5V铍#R[d3L x$mQυl]@o.NQ3ELMKfN#?|ԱY\Iw2})@@e_qv?PoiHͪHb#>(Ѷ2|a^5NT2LT>DF"qxr
-gk?˺ܥzl ;\WiEa<U5g>hr|6et1&'Q}t˝fHjIK皨Fn|vTq#<MjA3>]$j18L/
-OÆ3h5g^$<vl Qg'SOjb=k3˵I*wJ8XPWyB$pP
-endobj
-1231 0 obj <<
-/Type /Page
-/Contents 1232 0 R
-/Resources 1230 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 1229 0 R
-/Annots [ 1234 0 R 1235 0 R 1236 0 R 1237 0 R 1238 0 R 1239 0 R 1240 0 R 1241 0 R 1242 0 R 1243 0 R 1244 0 R 1245 0 R 1246 0 R 1247 0 R 1248 0 R 1249 0 R 1250 0 R 1251 0 R 1252 0 R 1253 0 R 1254 0 R 1255 0 R 1256 0 R 1257 0 R 1258 0 R 1259 0 R 1260 0 R 1261 0 R 1262 0 R 1263 0 R 1264 0 R 1265 0 R 1266 0 R 1267 0 R 1268 0 R 1269 0 R 1270 0 R 1271 0 R 1272 0 R 1273 0 R 1274 0 R 1275 0 R 1276 0 R 1277 0 R 1278 0 R ]
->> endobj
-1234 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 754.651 512.306 764.219]
+/Rect [525.586 96.02 539.579 105.589]
/Subtype /Link
/A << /S /GoTo /D (chapter.12) >>
>> endobj
-1235 0 obj <<
+1233 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 741.102 512.306 750.125]
+/Rect [526.677 82.471 539.579 91.494]
/Subtype /Link
/A << /S /GoTo /D (section.12.1) >>
>> endobj
+1184 0 obj <<
+/D [1182 0 R /XYZ 85.039 786.531 null]
+>> endobj
+1181 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F42 967 0 R /F20 937 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
1236 0 obj <<
+/Length 2945
+/Filter /FlateDecode
+>>
+stream
+x\s6~_nF(A
+]aс$ejPȜFQ:7Qbd6}NGD|0VL&ۙy xv;TSt>t0~<J SrpSB,`Dpf?_]2
+B`R"%lBSJxN 9/fiǝ6N)x&&y^i2C,Vs}H.O웯ZA`j=7ݮ5n~p43JQFhvgt,QX]
+FLф@7I+([4)H^pQ g{Ҷ IAk)2K-
+yYۆo5 'kMj>҆~J[VDiDQ3rvE*mvkdNH{g,-zmĐq pmA<֣z=c8%~4_l eYSsٚ;]ֿCGE!\x~'ㅰd_7‘FЬuŹ+o@
+wYDCɓbX0ԉRԱK̾i@!i[#Fj1u;}\†MϜT+"ziRg.:7a="XC
+R0|ֵ)uc{0^o̺ݭDtej~;'[SLWu-^92s{F*>.0sHIΩ#]}?[O_/ GJ0Gz/31J7![9D!۶S&Ʌ ut{Pt\M#l,#9n~s[:._S 3Tv
+Q-xut֣}]#
+o{.r@@,mbnwXwVHY WzA4z6_4#ʶK)}n#@-@zsN,m9ɓp4ݕyRݝp+i=UǖشOA.xn u#@\E$tX@ZP˜tP7s=ϖp{kN8c"Q}Đ w Ty= Fju1a4aBL.Tpὓ OM 'uAF|FҲ~Y\>'PC@ }6SwIWd.V3uA}
++L ТM`9endstream
+endobj
+1235 0 obj <<
+/Type /Page
+/Contents 1236 0 R
+/Resources 1234 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1180 0 R
+/Annots [ 1238 0 R 1239 0 R 1240 0 R 1241 0 R 1242 0 R 1243 0 R 1244 0 R 1245 0 R 1246 0 R 1247 0 R 1248 0 R 1249 0 R 1250 0 R 1251 0 R 1252 0 R 1253 0 R 1254 0 R 1255 0 R 1256 0 R 1257 0 R 1258 0 R 1259 0 R 1260 0 R 1261 0 R 1262 0 R 1263 0 R 1264 0 R 1265 0 R 1266 0 R 1267 0 R 1268 0 R 1269 0 R 1270 0 R 1271 0 R 1272 0 R 1273 0 R 1274 0 R 1275 0 R 1276 0 R 1277 0 R 1278 0 R 1279 0 R 1280 0 R ]
+>> endobj
+1238 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 716.643 512.306 726.212]
+/Rect [525.586 754.651 539.579 764.219]
/Subtype /Link
/A << /S /GoTo /D (chapter.13) >>
>> endobj
-1237 0 obj <<
+1239 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 703.094 512.306 712.117]
+/Rect [526.677 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (section.13.1) >>
>> endobj
-1238 0 obj <<
+1240 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 689.545 512.306 698.568]
+/Rect [526.677 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (section.13.2) >>
>> endobj
-1239 0 obj <<
+1241 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 675.996 512.306 685.019]
+/Rect [526.677 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (section.13.3) >>
>> endobj
-1240 0 obj <<
+1242 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 662.447 512.306 671.469]
+/Rect [526.677 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (section.13.4) >>
>> endobj
-1241 0 obj <<
+1243 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 648.897 512.306 657.92]
+/Rect [526.677 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.4.1) >>
>> endobj
-1242 0 obj <<
+1244 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 635.348 512.306 644.371]
+/Rect [526.677 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.4.2) >>
>> endobj
-1243 0 obj <<
+1245 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 621.799 512.306 630.822]
+/Rect [526.677 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.4.3) >>
>> endobj
-1244 0 obj <<
+1246 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 608.25 512.306 617.273]
+/Rect [526.677 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (section.13.5) >>
>> endobj
-1245 0 obj <<
+1247 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 594.701 512.306 603.724]
+/Rect [526.677 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.5.1) >>
>> endobj
-1246 0 obj <<
+1248 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 581.151 512.306 590.174]
+/Rect [526.677 619.159 539.579 628.182]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.5.2) >>
>> endobj
-1247 0 obj <<
+1249 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 567.602 512.306 576.625]
+/Rect [526.677 605.61 539.579 614.633]
/Subtype /Link
/A << /S /GoTo /D (section.13.6) >>
>> endobj
-1248 0 obj <<
+1250 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 554.053 512.306 563.076]
+/Rect [526.677 592.061 539.579 601.083]
/Subtype /Link
/A << /S /GoTo /D (section.13.7) >>
>> endobj
-1249 0 obj <<
+1251 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 529.595 512.306 539.163]
+/Rect [525.586 567.602 539.579 577.171]
/Subtype /Link
/A << /S /GoTo /D (chapter.14) >>
>> endobj
-1250 0 obj <<
+1252 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 516.046 512.306 525.068]
+/Rect [526.677 554.053 539.579 563.076]
/Subtype /Link
/A << /S /GoTo /D (section.14.1) >>
>> endobj
-1251 0 obj <<
+1253 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 502.496 512.306 511.519]
+/Rect [526.677 540.504 539.579 549.527]
/Subtype /Link
/A << /S /GoTo /D (section.14.2) >>
>> endobj
-1252 0 obj <<
+1254 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 488.947 512.306 497.97]
+/Rect [526.677 526.955 539.579 535.978]
/Subtype /Link
/A << /S /GoTo /D (section.14.3) >>
>> endobj
-1253 0 obj <<
+1255 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 464.489 512.306 474.057]
+/Rect [525.586 502.496 539.579 512.065]
/Subtype /Link
/A << /S /GoTo /D (chapter.15) >>
>> endobj
-1254 0 obj <<
+1256 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 450.94 512.306 459.963]
+/Rect [526.677 488.947 539.579 497.97]
/Subtype /Link
/A << /S /GoTo /D (section.15.1) >>
>> endobj
-1255 0 obj <<
+1257 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 437.39 512.306 446.413]
+/Rect [526.677 475.398 539.579 484.421]
/Subtype /Link
/A << /S /GoTo /D (section.15.2) >>
>> endobj
-1256 0 obj <<
+1258 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 423.841 512.306 432.864]
+/Rect [526.677 461.849 539.579 470.872]
/Subtype /Link
/A << /S /GoTo /D (subsection.15.2.1) >>
>> endobj
-1257 0 obj <<
+1259 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 410.292 512.306 419.315]
+/Rect [526.677 448.3 539.579 457.322]
/Subtype /Link
/A << /S /GoTo /D (subsection.15.2.2) >>
>> endobj
-1258 0 obj <<
+1260 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 396.743 512.306 405.766]
+/Rect [526.677 434.75 539.579 443.773]
/Subtype /Link
/A << /S /GoTo /D (section.15.3) >>
>> endobj
-1259 0 obj <<
+1261 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 383.194 512.306 392.217]
+/Rect [526.677 421.201 539.579 430.224]
/Subtype /Link
/A << /S /GoTo /D (subsection.15.3.1) >>
>> endobj
-1260 0 obj <<
+1262 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 358.735 512.306 368.304]
+/Rect [525.586 396.743 539.579 406.311]
/Subtype /Link
/A << /S /GoTo /D (chapter.16) >>
>> endobj
-1261 0 obj <<
+1263 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 345.186 512.306 354.209]
+/Rect [526.677 383.194 539.579 392.217]
/Subtype /Link
/A << /S /GoTo /D (section.16.1) >>
>> endobj
-1262 0 obj <<
+1264 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 331.637 512.306 340.66]
+/Rect [526.677 369.645 539.579 378.667]
/Subtype /Link
/A << /S /GoTo /D (section.16.2) >>
>> endobj
-1263 0 obj <<
+1265 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 307.179 512.306 316.747]
+/Rect [525.586 345.186 539.579 354.754]
/Subtype /Link
/A << /S /GoTo /D (chapter.17) >>
>> endobj
-1264 0 obj <<
+1266 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 293.629 512.306 302.652]
+/Rect [526.677 331.637 539.579 340.66]
/Subtype /Link
/A << /S /GoTo /D (section.17.1) >>
>> endobj
-1265 0 obj <<
+1267 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 280.08 512.306 289.103]
+/Rect [526.677 318.088 539.579 327.111]
/Subtype /Link
/A << /S /GoTo /D (subsection.17.1.1) >>
>> endobj
-1266 0 obj <<
+1268 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 266.531 512.306 275.554]
+/Rect [526.677 304.539 539.579 313.561]
/Subtype /Link
/A << /S /GoTo /D (subsection.17.1.2) >>
>> endobj
-1267 0 obj <<
+1269 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 252.982 512.306 262.005]
+/Rect [526.677 290.989 539.579 300.012]
/Subtype /Link
/A << /S /GoTo /D (section.17.2) >>
>> endobj
-1268 0 obj <<
+1270 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 239.433 512.306 248.456]
+/Rect [526.677 277.44 539.579 286.463]
/Subtype /Link
/A << /S /GoTo /D (subsection.17.2.1) >>
>> endobj
-1269 0 obj <<
+1271 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 225.883 512.306 234.906]
+/Rect [526.677 263.891 539.579 272.914]
/Subtype /Link
/A << /S /GoTo /D (subsection.17.2.2) >>
>> endobj
-1270 0 obj <<
+1272 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 212.334 512.306 221.357]
+/Rect [521.223 250.342 539.579 259.365]
/Subtype /Link
/A << /S /GoTo /D (section.17.3) >>
>> endobj
-1271 0 obj <<
+1273 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 198.785 512.306 207.808]
+/Rect [521.223 236.793 539.579 245.815]
/Subtype /Link
/A << /S /GoTo /D (subsection.17.3.1) >>
>> endobj
-1272 0 obj <<
+1274 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 185.236 512.306 194.259]
+/Rect [521.223 223.243 539.579 232.266]
/Subtype /Link
/A << /S /GoTo /D (section.17.4) >>
>> endobj
-1273 0 obj <<
+1275 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 171.687 512.306 180.71]
+/Rect [521.223 209.694 539.579 218.717]
/Subtype /Link
/A << /S /GoTo /D (subsection.17.4.1) >>
>> endobj
-1274 0 obj <<
+1276 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 158.138 512.306 167.16]
+/Rect [521.223 196.145 539.579 205.168]
/Subtype /Link
/A << /S /GoTo /D (subsection.17.4.2) >>
>> endobj
-1275 0 obj <<
+1277 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 133.679 512.306 143.247]
+/Rect [519.586 171.687 539.579 181.255]
/Subtype /Link
/A << /S /GoTo /D (chapter.18) >>
>> endobj
-1276 0 obj <<
+1278 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 120.13 512.306 129.153]
+/Rect [521.223 158.138 539.579 167.16]
/Subtype /Link
/A << /S /GoTo /D (section.18.1) >>
>> endobj
-1277 0 obj <<
+1279 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 106.581 512.306 115.604]
+/Rect [521.223 144.588 539.579 153.611]
/Subtype /Link
/A << /S /GoTo /D (section.18.2) >>
>> endobj
-1278 0 obj <<
+1280 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 82.122 512.306 91.691]
+/Rect [519.586 120.13 539.579 129.698]
/Subtype /Link
/A << /S /GoTo /D (chapter.19) >>
>> endobj
-1233 0 obj <<
-/D [1231 0 R /XYZ 85.039 786.531 null]
+1237 0 obj <<
+/D [1235 0 R /XYZ 85.039 786.531 null]
>> endobj
-1230 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R >>
+1234 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1281 0 obj <<
-/Length 2886
+1283 0 obj <<
+/Length 2235
/Filter /FlateDecode
>>
stream
-xڝKs6_ᛩ&>d;Nǝ+̤=%Hw_ Fط³
-bc*܌T8V|goGʼ)o
-<MDRf"` :hv~p@]C(Od{GMs ?|a+==UDkp [&Ӊ}eͤbm[kX}oA#B##o^[> M/<Gx$vq Hjo*_
-~1ҙmI"9:$0LWEa/Ƕv[K@΋/<cdOZHF-T6Yo:kO_(cTJcJa@!}lξ5/7S1+zA!+MH}25f,>KN=,o7Ar.B^YoJJC5Dzš(T
-N4veBo(#<`dhTzJE*@kv!Srn-r
-jL{,bj 9JpXYh.O{=
-m4{۶m.<@fcT*;5Flr' H5 S.HdcCbۘ7tz"H?W52@P
-
-:sؼ!rpܻY*cID8䶀:w.pӱfpP>Z_;u}^:ڡ
-h參{7e!z^mVFz4;~_E#a F(fNR"s
-гBj(JS3l:< e{:ۮ^9s'̸҆ӻO^dh8idEN/x1[-${MdPK F\"`m4;
-Ż# m>غ)lY
-
+xڕX[o~ϯЛ) bx>թ[ utj)a-O(%8ofwIZBٝٙo.£b E%n񍷸_"C7"jL* \/Jgi4UDnEܾys-Mp3$$d_s~*+\N_6r&8ט/K|DF7m7]S 2wA G^|+:WVú7W[{@#z~̩C7LWFX?~Q2֏A~\N\zɫf ##qCf}m ]i'Pݡ?6]+$H
+s*&|,{MѪMi{?U'} | էtTMs{iA2vCmu\J5u$Sǂea,gNs{tx,r5JYH}ѫd`(d`~<x{MJh;'ի;:P:ܱӼ%Lv jk|$=FۀcB-7xLc`,paok$ R˳V"7pt[ň
+eٙ я}ΏH(<4.$3Uxy]y#>׷å9H?^ZQ%EO7f)u.4'#/瑷"zi;Z$xxC?ŀRsk):P;$dO7qJ S?-V`w
+S$-hB`Ȳ\#g';
+;Fᓴv( -0",Gbt4:} rL?V_ %c-?qЅm(\^kYKB'~Hp2%a 8'N$s! 4p^e!!CN| Y) s\Xq1 ȃƁZB *Kyt8C˪଀JغWYaCKHK $[ͱzU<J?H]tiZ~j4VeW08pklQsmN`A]܄JM>JG7̑t݅9*d<clNqV1:[C6[hyP*MK@痔$1$8 zam4XE"2Nl֓"^>.9{DU֮ao:N<Lu.a8s|uFwXj:EN,: }%+.XIOR/*ۤ;tA^-XVqʼnc.yFBzRLهipJ_x;)^xZA"sθI#!ƥ~ !2QdG
+LCM=q2$P& l BG -RbR6+Lh.͓Q5ݐ PF a5=^hp5oה9GkW6ǩmU 1/!fzvȵ?|зTެHW_tNv\.=߯ҼĨ …ٔ.J^zOWB_7kƧ ް\'!kB4/)Di˶CPJřp^jfk؎EQE|J2Ev·q;4˻y`<z4g(r.Mk~onyW} /ꆱwK0Nv=gg+<n
+Xendstream
endobj
-1280 0 obj <<
+1282 0 obj <<
/Type /Page
-/Contents 1281 0 R
-/Resources 1279 0 R
+/Contents 1283 0 R
+/Resources 1281 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1229 0 R
+/Parent 1180 0 R
>> endobj
-1282 0 obj <<
-/D [1280 0 R /XYZ 85.039 786.531 null]
+1284 0 obj <<
+/D [1282 0 R /XYZ 85.039 786.531 null]
>> endobj
6 0 obj <<
-/D [1280 0 R /XYZ 85.039 766.606 null]
+/D [1282 0 R /XYZ 85.039 766.606 null]
>> endobj
-1004 0 obj <<
-/D [1280 0 R /XYZ 85.039 651.298 null]
+980 0 obj <<
+/D [1282 0 R /XYZ 85.039 637.749 null]
>> endobj
10 0 obj <<
-/D [1280 0 R /XYZ 85.039 651.298 null]
+/D [1282 0 R /XYZ 85.039 637.749 null]
>> endobj
-1283 0 obj <<
-/D [1280 0 R /XYZ 85.039 622.563 null]
->> endobj
-14 0 obj <<
-/D [1280 0 R /XYZ 85.039 213.197 null]
->> endobj
-1284 0 obj <<
-/D [1280 0 R /XYZ 85.039 184.461 null]
+1285 0 obj <<
+/D [1282 0 R /XYZ 85.039 595.464 null]
>> endobj
-1279 0 obj <<
+1281 0 obj <<
/Font << /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1287 0 obj <<
-/Length 3049
+1288 0 obj <<
+/Length 3386
/Filter /FlateDecode
>>
stream
-xڵkoܸS@VE=ۢz>$4"( K]!Z'i㸿 )+ApYr8gƒ" ]O8PE~8;X1]n
-vR<0y_ԶO[-+K0mxWbP
- 2SQkC=v^dtc3jRyPGi {RpDV~I&,3k\ٕ@՚H b
-! }U\z>d*EszcWLjg֪?<h:\&Wti@*,詑#LMii; 9
-
-q {ӷ0xcP`l5TR'-"$t똥I-[A(3%+mRs^ψex4V
-p)IUyS[7x{ѻ@bc"ZaePrz{B܍3& `KAnޝj"p+"nb46;8w6x{_7_#d%i>5JӜq@΋s7׿ܞ(*ԩCA{H=><}mmέpgwoFxT'bN1Eʞį/)Ka~Mm3r:Ι`ۤ8֪㐌譐7ptzӎg̾XSZÖD~5BcFI<B]+38Zb`$
- R]CR cz1U07'n(hα_%ت?|J-t8O&xmF(@?D0_߇)`o ᄎM]Y-}<,|>ӨM
-q}6jJ=l'@ݪz_&p:
-I
+xZݏB}2X<.[wT8EHID$BR}kKS}(cv83;SS4r $iFd3PB1Es|%幙Mk'\'G滫,GYΫ۩r^ws
+{az:S|O&e󫷰G.͛.y9a3QHoq.nf`?n?x t mU0#dHwas$SSTf~3c7bs>̆nG mPtEs~xի+<K'μisG!L(\OC©h T&(.Į*ϮB8+ ?`'ʫ=O}K)R*n mmtc )yS eZ1?!8v$E}w E$RQū()>u^rZͪ] }z<hN\K{yOybSv<0t|_1g>i"=~l&'3Q
+
+⺃Ղ끇D
+oV1nh¯ Y7.a[F, 4|?tL$ْk~BB]ldtc3E<?`o-6αmsSUzD.ґF3p{Z<7˄YlTiLާo-+HG
+We
+ 3o;&398&_*)F rܜ@/ XMij_}^P"@ &Z?0ANL,)wH 2ݫD9[ǘLMM4
+^!y]vd!DG\}uLӲ胐Ϻ!ů (2@<iEP`|DrC@XF,9h^_,P|P
+Z{<OI
+e WfxB"-3Lѐ#e]E'$]|ea: h\^̙//eC)c|{, ޱ'u5³ܕ!8Z 
+usȪϰ0gN7vڰSۢsl51{-s&mԕ8CY<,;ŦI<60zdSD.Z^2Vc[ܑ#c&g5Gܐ
+[s@#A2@)sU=In"`ᔄ=#>,2bDRG
+T;Y|
+dpJ^( 7"#9nXDjjFi8M,\7XQ*lHIJďbb՝,#H< 9 %ݸF
+`XF 1K*§`M͂cf4<}PbHM~ \+
+>MYKJP
+Kjzؠ%',l)Jqɤ]I/pXgM-(X:cSL[h
endobj
-1286 0 obj <<
+1287 0 obj <<
/Type /Page
-/Contents 1287 0 R
-/Resources 1285 0 R
+/Contents 1288 0 R
+/Resources 1286 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1229 0 R
+/Parent 1180 0 R
>> endobj
-1288 0 obj <<
-/D [1286 0 R /XYZ 85.039 786.531 null]
+1289 0 obj <<
+/D [1287 0 R /XYZ 85.039 786.531 null]
+>> endobj
+14 0 obj <<
+/D [1287 0 R /XYZ 85.039 766.606 null]
+>> endobj
+1290 0 obj <<
+/D [1287 0 R /XYZ 85.039 744.844 null]
>> endobj
18 0 obj <<
-/D [1286 0 R /XYZ 85.039 722.931 null]
+/D [1287 0 R /XYZ 85.039 590.186 null]
>> endobj
-1289 0 obj <<
-/D [1286 0 R /XYZ 85.039 696.923 null]
+1291 0 obj <<
+/D [1287 0 R /XYZ 85.039 550.628 null]
>> endobj
-1285 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R /F11 976 0 R >>
+1286 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F39 974 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1292 0 obj <<
-/Length 2924
+1294 0 obj <<
+/Length 2237
/Filter /FlateDecode
>>
stream
-xZY6~_1oVE$b$I-M71:vo]><X ydJ(]pޅB& L>ه,$F~Q>
-,_͋VixO٨Ce{mjwxN /؏K
-ss'\~'{\^kz<T rit3ia
-=:eV2)qfnΐ#K_}2jd{JFGPݵd܏21=H3-HO-x4[3~l]SG>n5h'1{a.C>ɍ
-Wo^[:;ar|KeY:oJ*^ֻJTCm2r?̿P`dY\A TeŴV Wk9(Ϝq%()8_-^%߉٫y$(# O!rct_zjCWxϴ,=yј,]jjg O/B/-($ }Ak6
-:Y.gC6)o=Ow`eIF7㰱.:{'vU&gӊci|a8yK[`cGV`<"G&Jv=Xz2+~I5PRW Gml/RF)ݞۃut%ܥ(a":`p䥌Y%.o7wB׽#ϱ&i&Z,PLy063pL֫)Dp #RKNhVZ'p-<a Xh Wn=ggī?(ԨWYePrb(K
-J|W$XSipepB ç3|Ms#b {MkwC,>aL+6ኂ6d%A 8։jA#+Yl]q q;Hhi0 Cuz,מZ\'YS0[hfW2 NYMQLMYh?G =,4Ku_"Pm/2D,"F6#
-p}q0klW8SxdqYB°Gx)pm5TK;Zz7U1#m}yvʒ~Dob- 3~
-$B mFUIgsn㔦>|A&8f5hsl ,k%0ӸK<;IK\FZr%e{$6Gb¿ aoJP(G?woքPZ\  >zM"ƅ<OVؐu^:-##
-fdnގ ǏahӆtdF¸rM(Gqst @:l`j>~4g5ףs :L GB1:rNق=<:8Kf:a_se%(BEk>lY
-)\
-_SBFP|nb s1S_I./>jV1QsXO^~ H>R=um 2k>~[u3BҟZ/Azӆ+h#if$0셏
-F3l//j0[-Έ9e7w~8/ gb 9
-^-*V.
-=g_ ,T+PfO"VziBak8L_gC7!olY 'IR^ɐ|k
+xڅXK6ϯ-2֊{ f "8f%G^堁6EJJjZTyzQV*U?%=,qes"K#2Vc)yo"MЋWz(]<,W(+ ۃu֝f?sD}`rGdJUB"RWSMUSM*N5TQThw:|pws
+*]hH%/TI=Q)XlUFہ&imQ3qE-*rL edd#S7ۼ@To|ܶoWVaEδ-/+U/#5^ .pfFO+MTGeXNOćowTaP}NJ+W /
+W8 bgwU^)"WMJ;_͏3eнYzgs}$-8ީ_)SGX|J}J,1;YMh-"2d YR0fLX!ÄfBM@ďO}=2 /QaL[;9`RjqRkꥢrB\|muo*~}f<5 M
+$|Őx]ØCDj#6!z_I]̂<gʹmJ^OtRa!;{ ] ]?T) 4bb$ej&
+@L -KH@A\28ΉglKAkL^hȲN& [+O.5CgW,+3
+PYZǿ0?nT۫)qH< )/e"gX+Hi|9rˣc? T
+^P,z;Qä!djJwau
+Eo -ǙdH,'ždB), B(-5A|/`̄fs}$_<4~z1:υ 0V0Tfg鰃4MH9izd>M|1NCrl@w!=|^|a[aHݷTMv@4HUOy*I0L?u畞JN*endstream
endobj
-1291 0 obj <<
+1293 0 obj <<
/Type /Page
-/Contents 1292 0 R
-/Resources 1290 0 R
+/Contents 1294 0 R
+/Resources 1292 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1229 0 R
+/Parent 1180 0 R
>> endobj
-1293 0 obj <<
-/D [1291 0 R /XYZ 85.039 781.388 null]
+1295 0 obj <<
+/D [1293 0 R /XYZ 85.039 781.388 null]
>> endobj
22 0 obj <<
-/D [1291 0 R /XYZ 85.039 761.463 null]
+/D [1293 0 R /XYZ 85.039 761.463 null]
>> endobj
-1005 0 obj <<
-/D [1291 0 R /XYZ 85.039 671.062 null]
+981 0 obj <<
+/D [1293 0 R /XYZ 85.039 659.738 null]
>> endobj
26 0 obj <<
-/D [1291 0 R /XYZ 85.039 671.062 null]
->> endobj
-1294 0 obj <<
-/D [1291 0 R /XYZ 85.039 642.326 null]
->> endobj
-1295 0 obj <<
-/D [1291 0 R /XYZ 85.039 569.47 null]
+/D [1293 0 R /XYZ 85.039 659.738 null]
>> endobj
1296 0 obj <<
-/D [1291 0 R /XYZ 85.039 542.372 null]
+/D [1293 0 R /XYZ 85.039 617.453 null]
>> endobj
1297 0 obj <<
-/D [1291 0 R /XYZ 85.039 528.822 null]
->> endobj
-30 0 obj <<
-/D [1291 0 R /XYZ 85.039 498.834 null]
+/D [1293 0 R /XYZ 85.039 531.9 null]
>> endobj
1298 0 obj <<
-/D [1291 0 R /XYZ 85.039 469.43 null]
->> endobj
-34 0 obj <<
-/D [1291 0 R /XYZ 85.039 291.068 null]
+/D [1293 0 R /XYZ 85.039 493.374 null]
>> endobj
1299 0 obj <<
-/D [1291 0 R /XYZ 85.039 261.664 null]
+/D [1293 0 R /XYZ 85.039 464.154 null]
+>> endobj
+30 0 obj <<
+/D [1293 0 R /XYZ 85.039 421.42 null]
>> endobj
1300 0 obj <<
-/D [1291 0 R /XYZ 85.039 245.795 null]
+/D [1293 0 R /XYZ 85.039 378.467 null]
+>> endobj
+34 0 obj <<
+/D [1293 0 R /XYZ 85.039 160.261 null]
>> endobj
1301 0 obj <<
-/D [1291 0 R /XYZ 85.039 218.09 null]
+/D [1293 0 R /XYZ 85.039 117.308 null]
>> endobj
1302 0 obj <<
-/D [1291 0 R /XYZ 85.039 193.719 null]
+/D [1293 0 R /XYZ 85.039 88.742 null]
>> endobj
-1303 0 obj <<
-/D [1291 0 R /XYZ 85.039 123.852 null]
->> endobj
-1304 0 obj <<
-/D [1291 0 R /XYZ 85.039 96.147 null]
->> endobj
-1290 0 obj <<
+1292 0 obj <<
/Font << /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1307 0 obj <<
-/Length 3145
+1305 0 obj <<
+/Length 3312
/Filter /FlateDecode
>>
stream
-xڥnF_aeh`}KLf7hyh1﷮>dɞ Ȩ꺫:*.8Lz_E;U,uFE[߬߂w~\fi7O7qp7$
-Ӻ~qu}_eyY*,ˮԅ'iVUv &NCq~E UUr9<KK-Jx`f88βaYӼIЍ7 7Ͻ
-da$0L0YyS µł)`70
-sIkD$q늱 (rlxeC"kGiUl,<ABFý?@iQ@wz6O<G-kL20ttsv@ M#΢`tKT8!7Qp%
-%ϼ7Bx%Խq1K,bJpf}DN(нz@W4Qy[hўȲs>dD(`D5
-2
-<qB$(h4
-<"3~nĆƧͳRZX!/V\`IzId³$6RVN]͘E`qKc5eL~]K> .)H@M 9i+=ا;T-TI4s> (b <Xc/P!{?10g[zG#F&mU%JC98ťp⟝Kl5n*ujaHm!Lă1Z󸝿o"AILG9Աbh9҈]HRGʭFA'vkn3^Iyݞ]ٮ 9ۏ
-EB0-Jm/2Dep
-u 8m.P@p1L94
-+(;Ds~r-scu2kN^Fl"pXG0(253v 1đ~Prd
-I`S qn\W__Ra`=bAXVsm&zFc< >QX
-WAx2/u&3[q#P/*= $g]|&@S
-B =pE
+xڭn_oxɠd)aKI!?4wmAϡ>uuOH}TWW]5 7 7EqɋЏbmvv
+č80ﯾ0ˠ?.xR?I}Oo؋</л-&oQ߾ -f`S?_~\?
+n$ysuww :Vq~Q$~$a,87,x0"-6 00Zݧo"x^8=ZUUi
+w <zǃG8f Դ;1Kr*Ꚑ?PiMt(i#,怌܄(^;
+$FAQ"W`k'ő=F cd|c:)@~ŗMr9ooKt5K>㟒,0I"aC , nYb!U졷S/ꉇA'r&H"ǔnX
+2J`2xף0=Ir,;VwBAI
+Ͱw:cXNhw2x^}t"`߄ l>nyr#d
+!(T
+#מ2)N=Yu-(mr )ҁ9V'ǸrUl@%y~zt-%_ d0fe޺olR 5{BQQ[rCe٠J3P.pG
+| <nӕ,AdЅ'gٺ$)OANۺ=05"T#[pKQ>`zC 40pӦV{RJ /ܴGp|\Nb'/ ŦA|t~#'LlM3t1,]%?n7"r؞jlT!rO|XT1ԋ^q߄[t8X3AIBpr'\%Q ~teC8! Ǒ'Pn j,Q.v18N"*M0&[dFpbcϨw`EEHU ŽNq(@Q8'rT-˗ˋ#?pZ tUtBlyAm dvݞq<ǝm~Y G[`ɽ8$*,wr䜿\RC2a7ʀq&t ("va
+\jIynm<_\@Via 7>#ߩ`tuuyh]ljdy񒚅88Qg[<°i ?9\)HqWF<0G E
+"o-w(\ajQ+VZ}*JrH`8~o:r"c{(\(L ?ܨY@ζ¨ˢQʭ%fޏ;|Ʈ;GHQ"% ٖQA#Nw\O,n);5eQrͫ3/*f.k^T ; }y!R%íShb6'X6xt!6іh#7N8CRRsaH7 i.<Jng`FqT9򄐺2/EaRkpP2 >@b$T%RnU6=e|v:~~"i8H uL9δV1~J2V(/j\h7gƥڜz<-d
endobj
-1306 0 obj <<
+1304 0 obj <<
/Type /Page
-/Contents 1307 0 R
-/Resources 1305 0 R
+/Contents 1305 0 R
+/Resources 1303 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1229 0 R
+/Parent 1314 0 R
+>> endobj
+1306 0 obj <<
+/D [1304 0 R /XYZ 85.039 781.388 null]
+>> endobj
+1307 0 obj <<
+/D [1304 0 R /XYZ 85.039 761.463 null]
>> endobj
1308 0 obj <<
-/D [1306 0 R /XYZ 85.039 781.388 null]
+/D [1304 0 R /XYZ 85.039 736.955 null]
>> endobj
1309 0 obj <<
-/D [1306 0 R /XYZ 85.039 761.463 null]
+/D [1304 0 R /XYZ 85.039 667.088 null]
+>> endobj
+1310 0 obj <<
+/D [1304 0 R /XYZ 85.039 625.834 null]
+>> endobj
+1311 0 obj <<
+/D [1304 0 R /XYZ 85.039 587.914 null]
>> endobj
38 0 obj <<
-/D [1306 0 R /XYZ 85.039 718.394 null]
+/D [1304 0 R /XYZ 85.039 530.827 null]
>> endobj
-1310 0 obj <<
-/D [1306 0 R /XYZ 85.039 688.99 null]
+1312 0 obj <<
+/D [1304 0 R /XYZ 85.039 485.752 null]
>> endobj
42 0 obj <<
-/D [1306 0 R /XYZ 85.039 402.235 null]
+/D [1304 0 R /XYZ 85.039 158.35 null]
>> endobj
-1311 0 obj <<
-/D [1306 0 R /XYZ 85.039 372.831 null]
+1313 0 obj <<
+/D [1304 0 R /XYZ 85.039 115.396 null]
>> endobj
-1305 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R >>
+1303 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1314 0 obj <<
-/Length 2053
+1317 0 obj <<
+/Length 1141
/Filter /FlateDecode
>>
stream
-x]۸ݿo+k]I(Õ %&@rSI !y
-W8QB'|[|+f1P0`>2pX/@xz˹/E`nv^,PzCX(ڴ\(aT^{5
-%V1){aÒ> SBp,yI٥q34-ݍ#B
-^p `#'܅jٲ:K?@v^{OMϪICĔ.lTqNM&31V4i3# \nM-Fnm(<(56zAm:,IuΩi7-zU>xSBoӢx^$wҟ3@a0tj0dޜQLjQ$j(
-|; Doඦ.5Ś`Z? Ө|~8pmm€ދls"DDr7n1`;YH0敼aY$Mw47W"=TebM?g|觙)O0BA+gڤ@*ffMݏ)Q}= \gBDp[f"d(ӭmkFP\LyJ<Y9z 2wxYL6\Dޣ$WIDQLO3npSX o&r7#!p;.88Ug8O'Rb]t f 5
-9x54-%S6̩|G+ 7~x͟R;+7Ȭy=
-xuy.Ham-~ä5͐+xH W7u[>>7ծ>6}7Cx
->ԗ,uQcڔ,yIəmwyZ俛{C\F:pk"FGXD<dDHl> ¶ȅ%h
+xڥVKo6r XQԳ7'p[h*zHs=}f87ɡ0߼> %DP<eˢ&
+F8D ]4D˨ ';)ORT'?PJb `w[xw҄]}
+u7aQб!#MڜZ㶐 N'"v70pB⤏;_pJ@Y(RpjM1ShZdS8NHx#O3EL`#Y֧3`@:e7ɠ%GZ@jlƾN`]5L&i9^B* &Gb-7(NOೃ
+JMxOq hZ\y QIxYҽ*)@4΀!猃R2BYV
+.i' Q&ݹz.: Z͜D4PpjW2]t7+X9wki:{qVJm%"sC[ʏW
+,(yl3 k Ikk? CFͤ$QXkڎq/NkӁHFeCB: hZHx%i2L5Jlj^_Gj^6V7U>E=E $HC$jp
endobj
-1313 0 obj <<
+1316 0 obj <<
/Type /Page
-/Contents 1314 0 R
-/Resources 1312 0 R
+/Contents 1317 0 R
+/Resources 1315 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1321 0 R
+/Parent 1314 0 R
+>> endobj
+1318 0 obj <<
+/D [1316 0 R /XYZ 85.039 781.388 null]
>> endobj
1315 0 obj <<
-/D [1313 0 R /XYZ 85.039 781.388 null]
+/Font << /F57 1075 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1321 0 obj <<
+/Length 1631
+/Filter /FlateDecode
+>>
+stream
+xXo6_@͒>N"K1yPl̖Hr$ }xwsc2.gX &/o`H , lN4^#c@>gQ$NjU$R){ONaȽ6Le{q2^+sX׏i1yX|V@1*S_2g`V
+;ThR۫\3RVKo>*vהD# l)aѧH>]/NsS #+aȶ4Ñ54F65u䙎J6YNd$ܢ=-„`2f+CM5O_{2j-̭<dWjp}ZC:" im-("Pn/L9SL:eЬ-c :iq_auumu[Wt
+U84A9g4S`:,aJW>-Z7`k#VT2O< %Zy4.NǀI)C
+G얫+Na
+๶CdW)i!["A9AH1^EGrn:鬦Ot}mu" <c>IX6?ZHkt+[FIhe0L@YIїo-'o,BR#Zu^gF)&Z; uq
+endobj
+1320 0 obj <<
+/Type /Page
+/Contents 1321 0 R
+/Resources 1319 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1314 0 R
+>> endobj
+1322 0 obj <<
+/D [1320 0 R /XYZ 85.039 781.388 null]
>> endobj
46 0 obj <<
-/D [1313 0 R /XYZ 85.039 761.463 null]
+/D [1320 0 R /XYZ 85.039 761.463 null]
>> endobj
-1006 0 obj <<
-/D [1313 0 R /XYZ 85.039 667.044 null]
+982 0 obj <<
+/D [1320 0 R /XYZ 85.039 653.495 null]
>> endobj
50 0 obj <<
-/D [1313 0 R /XYZ 85.039 667.044 null]
->> endobj
-1316 0 obj <<
-/D [1313 0 R /XYZ 85.039 639.536 null]
+/D [1320 0 R /XYZ 85.039 653.495 null]
>> endobj
-1317 0 obj <<
-/D [1313 0 R /XYZ 85.039 373.804 null]
+1323 0 obj <<
+/D [1320 0 R /XYZ 85.039 612.438 null]
>> endobj
-1318 0 obj <<
-/D [1313 0 R /XYZ 85.039 360.254 null]
+1324 0 obj <<
+/D [1320 0 R /XYZ 85.039 227.751 null]
>> endobj
-1319 0 obj <<
-/D [1313 0 R /XYZ 85.039 333.156 null]
+1325 0 obj <<
+/D [1320 0 R /XYZ 85.039 200.653 null]
>> endobj
-1320 0 obj <<
-/D [1313 0 R /XYZ 85.039 251.255 null]
+1326 0 obj <<
+/D [1320 0 R /XYZ 85.039 160.005 null]
>> endobj
-1312 0 obj <<
+1319 0 obj <<
/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1324 0 obj <<
-/Length 1998
+1329 0 obj <<
+/Length 1716
/Filter /FlateDecode
>>
stream
-xڭXYs~`*%p˄gɎ7\f+eaDID ű}R)U suT&tH$tv~hPWq[obXT~rC$GOo_my</g"ooxL{/߿z{}W3ׇ%}^4Y~xot 4Q~&{+_t? @= |jDyG1שh,|TB?1Q΁T&}IEjF;*wX)qh7 E^o5;A^CXPޞaVb53 Ob8֬<`f&\͗48`+dGU52d0:^KRR!Hހݢ
-tq<;ܭne1wghxݪ,(5pY?0,O7mW,sh3-s{ H ۻAv@\;4rgk6 &IA'<t2/02җ"[lX޺E40 w{hy1kVxUC1M{#PA}UV4Jyd"jCZA{W,'39lx#\#דAjBt؉JtJsҟiּLN\1nsf%$czkd=SFs
-]2Da^b^*&%)e9O1!fH6G#r6 !WS!|$}9ޫ
-"」=e
-KByU.?CԤ:+ň4u0KBЄ^>'%\[վ\Y'ė!g'p~lϢlݰOiϸУDg4 #}cՍm[6)ιƭDSb~\
-h5[k?3\
-ls6 \_=\!d4>O!;;ˊȫ<dx2nqXgr,"wɆ(f;`T
-Rs]- ;V;xΑz˝Qhx
-6jvەcm-稤~=C,
+xXoH"BZHtR({VZMu8|jbZo޼3 COi (rsعɤGs1*pz48z㉵vdxhޏg%L/>\ |?ŵP/0 Q8VFyy>x?e{ORX}<Vv[g(T6Æ]ՌUǯ3Q8[M)[w3ZsYo5;%[ I|S<^ZwYVr$LfN0ZNeV5oN8zq̟"ϳ# 'N%~5 u{VDHE\LxSySpS!Wqh4qm@?B脧sq<Nd6QOӾǐ@Jx:8K۬\˱<V_ӊ0Xge!U;YUi1/븪ӄ8(WU6_Ly^$Uzi%4υq ب|Jm+jej)=GL<s>>X6` 5{f+'Uw5>ѩ\cGkyķ DW!T;a 9)J&+L\MOrWE
+U5E
+w\и~>T>ś5 ceAeqs0^dNܪzM::>KMEEqh1Ý
+S
+Vil)gMܕHlx57mGC; u{걊 W Pj`fkL;7 ٴU>.ZKoqHiå&}jHH%IGCHݺV \̱IL|_
+ὢ2SriVL\= ?iVmQOa)t#ySr v€SW\fIu$y10bRaac˝_X榳.hA(/:䧣&yi[ ,Ȩuk-CċÁ45u֋l=Or}W<ʊ"|$SFT'c@gIz? xAoƝ?E8 =QW9S'cq(sviӛU'j+P ma( ?59IY-cٳ@K2lCTfܴA Ir^סc` }dAT#[n#9|NtpCy*O] %5ZM i GNwXrFZ(rFTaMwyP/bWX+ :0p:~ev$%Ζ]7~"fTÏMXIlb9Ȳ͓_ǞZn:yW0z{.=92 ( `eʖnJdCC1z/Nq$զN腣q=ihmlX~kO>18Rg*iy9K
endobj
-1323 0 obj <<
+1328 0 obj <<
/Type /Page
-/Contents 1324 0 R
-/Resources 1322 0 R
+/Contents 1329 0 R
+/Resources 1327 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1321 0 R
+/Parent 1314 0 R
>> endobj
-1325 0 obj <<
-/D [1323 0 R /XYZ 85.039 781.388 null]
+1330 0 obj <<
+/D [1328 0 R /XYZ 85.039 781.388 null]
+>> endobj
+1331 0 obj <<
+/D [1328 0 R /XYZ 85.039 761.463 null]
>> endobj
54 0 obj <<
-/D [1323 0 R /XYZ 85.039 761.463 null]
+/D [1328 0 R /XYZ 85.039 538.398 null]
>> endobj
-1326 0 obj <<
-/D [1323 0 R /XYZ 85.039 736.114 null]
+1332 0 obj <<
+/D [1328 0 R /XYZ 85.039 492.527 null]
>> endobj
-1322 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R /F14 969 0 R >>
+1327 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F36 955 0 R /F20 937 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1329 0 obj <<
-/Length 1720
+1335 0 obj <<
+/Length 1701
/Filter /FlateDecode
>>
stream
-xڵikH ,)Q
-m^lw-,m %;":\In}HqI̛7c$6,[@ K*5#{#1kپ[/W>
-8EGt-חHW{{F%C5m0#דJFGv;S-)B+t!'@2s-}eHKNLϳUBLpb{6 Ѽ*we7[
-Vг󶘘nQ zSiRXz :[#2u]fk{hV!z(#A) 7
-m7"^2 Ѳh)2WCZ -70r$J~EH4@r4Zm76Dnx$|
-AO3u-N#H':3 +LHhPHjIƚrˤ)jFAxcY,k,:IL_X3"Q|Ft-ƭUBȑNM$s hzg Mы
-u>D@pǔjPeVΣ2&.ryIќ[XVtYvKHY4{ݱ^Vzs6~Cv@'eVΐ;$}Ѫi^v /9+qtKt1s&p]4mx+ F+5Œ1`AaF 'j[cL/6$jԂEQmبRV^a~2=@xCK9G/: |ʨ<͢
-07\j-tǀ"1$$+RhZ^TdîM[!vmy@Qp/>fm,WTJ*tИN$ux)Y_@`{Nd`nm57/В8&0_D`SPf ]KO\5Oŕ1>p net=B[mJo_lO'䛡8R#q''!2AEc؏m]s%?\]e$!]ҬέVG&WF1%)ޤ~՜n8KeTLoO }1rv(Q¥Ɵitkk{_*AefsZ[ _\~t˗n=ߣMoOS7aendstream
+xڵXYoF~ׯb*.oON$N4mTEJ\I)Rs-Eْ (gwgfwڙRcq؎X^3^HTDWA4V8xܝ~gg׷fWNY=FQl^1DY_]ʷ.`7BgH{?:{7 WgF%掭2v{.FGG1C^lv=pt1qck Lڊ+085iGVCi8,ik=YFirZPBg5(f0;}sޜGӦZ,O BM6!gt~(AFQv#33UMX62 zwPAdǮ r2{R텾9 9}7~s^aT7ֻqD~" |qLξ)z8h4ƷhC8WjߦeUoҶ%|[K9Py3f+Ȋ5nċ07<d5kRjlLmƙ Է(aK=<ѵtiu3p`z)GPPU)ޤ|;2
+kr^bURY+܃AJk{`KTkeH7ۂ}tEEnd;P`PY۶97P쪴=óUdz=&["0V #[i^/} 6||?0)>sdwZ/ҮчѲWL&^)f֡NuabyZAfV3 Bk0Ig*lsR#[GwE )5)b볍pf
+6MKI <3 f>Iםo'EƩ]pCṇzfwӔ=0S҉^zE*<w@ϝ<.BۋeW.ڼ*7O%ة$?R&> <kCuZP^z>aay΍Pdx# )DdTk&ޘbR0͝ڮtKe^p׶twP.p ~8<l9+.C
+C}
endobj
-1328 0 obj <<
+1334 0 obj <<
/Type /Page
-/Contents 1329 0 R
-/Resources 1327 0 R
+/Contents 1335 0 R
+/Resources 1333 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1321 0 R
+/Parent 1314 0 R
>> endobj
-1330 0 obj <<
-/D [1328 0 R /XYZ 85.039 781.388 null]
+1336 0 obj <<
+/D [1334 0 R /XYZ 85.039 781.388 null]
>> endobj
58 0 obj <<
-/D [1328 0 R /XYZ 85.039 761.463 null]
->> endobj
-1331 0 obj <<
-/D [1328 0 R /XYZ 85.039 736.114 null]
->> endobj
-62 0 obj <<
-/D [1328 0 R /XYZ 85.039 511.057 null]
+/D [1334 0 R /XYZ 85.039 340.611 null]
>> endobj
-1332 0 obj <<
-/D [1328 0 R /XYZ 85.039 478.735 null]
+1337 0 obj <<
+/D [1334 0 R /XYZ 85.039 296.86 null]
>> endobj
1333 0 obj <<
-/D [1328 0 R /XYZ 85.039 79.901 null]
->> endobj
-1327 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
+/Font << /F57 1075 0 R /F15 951 0 R /F42 967 0 R /F36 955 0 R /F20 937 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1336 0 obj <<
-/Length 1895
+1340 0 obj <<
+/Length 1559
/Filter /FlateDecode
>>
stream
-xڵXYoF~ׯ#T۽x=ڵs!)Zi$yEJb#*IE-R%q
-iq(ad<ߌx +/GQȱ2
-qr6ER2D2?x?s25FLqW<q3QŻ ^>pz68zj 9A7#)LЗBx35n݌w5;f37Z CH$2W
-ϨA+$&xP0|jǏn2JŽ 5k]O:ɮo0 )`^-/֟2cll>qgAgk;^ȹ/PN1"{^(gJW+Nn:jy>l槛=Z VhI%/) /ou>8:݄iæhipqC$7WC#?zo 贈UtN޾*ZF5Ya 4 e{Njwe]<yS0i"ͣBPJ{B Pbe:+wti&"VW
-#
-!Fw7nɌ͖Su =/bb
-n:
-W (~K+o~
-D&94kG?&p7[(@~NSp}I79O=ʦ=N)Lb9;cs4-%CTSex|}^F#@<B=Q= ТƊl* k"@!'ЀiGO=VYCF&-`ŢɁWLs+ҹUb}׹`3~PaCA"<|w &{' / DmxmC_j^bp = +ߧaBC\
-'<uZCe<8I7 't'A3Oub,Ki8+]Z+5*n{dY
-ڂEH'^Ӌ}:Q3$O^HQE=Z.=IW} Al=v:KqS[`ٸ}q9U|]=~m9+E jm/)
-^"9_+˱;>BQ_QUѱHWendstream
+xڵX{oF ߟB0@Nӣ
+m֢Hn
+mȶl գi0컏<e'E6tG#$ HfDlbpaikr>7fu/G2W
+clz{a~BM- rs  js_&ΜNіo_mcvLq 6@&` tr5E4נUc["`2{`̵KIUojjIGGR3MۡҸ<G
+)Z0҅dE
+-#kbP97#J-Y+S҄1pP!W
+~q90evrRO!lw =ͣ,;8Omx8F d$ "uZT*z
+MM QiHh1,J ,أveI#O4z[=Lʜwe!;3&qʼ:|l Gej28C ;n2Nu=йͫښP~S~LP)b|sxqISߧR"tq+Yu8M֠Òra:Q?ȌCSy=T<N͓O:(cmk_ vTgpVۥuZ[ep C\L>+" ]raK5hxCQ5$~vl}I~sx &M pwJ[sZӧCJexP(ѧEINJȩ`y]8/<hsY':s@'lE]B3mD)g$ȕI*_l.moHjj7.^L0<i%AB١4Upֆ׭ƇzaXt$U 2?CKПև.}~^)LcQ
+b$.rpO灾 KEӋ+zU8\*.zV]U@XhITEF%['-.fN8wl+}|Wۢ*jpV 2endstream
endobj
-1335 0 obj <<
+1339 0 obj <<
/Type /Page
-/Contents 1336 0 R
-/Resources 1334 0 R
+/Contents 1340 0 R
+/Resources 1338 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1321 0 R
+/Parent 1314 0 R
>> endobj
-1337 0 obj <<
-/D [1335 0 R /XYZ 85.039 781.388 null]
+1341 0 obj <<
+/D [1339 0 R /XYZ 85.039 781.388 null]
+>> endobj
+62 0 obj <<
+/D [1339 0 R /XYZ 85.039 720.515 null]
+>> endobj
+1342 0 obj <<
+/D [1339 0 R /XYZ 85.039 674.644 null]
+>> endobj
+1343 0 obj <<
+/D [1339 0 R /XYZ 85.039 197.504 null]
+>> endobj
+1344 0 obj <<
+/D [1339 0 R /XYZ 85.039 170.405 null]
+>> endobj
+1345 0 obj <<
+/D [1339 0 R /XYZ 85.039 131.879 null]
>> endobj
1338 0 obj <<
-/D [1335 0 R /XYZ 85.039 761.463 null]
+/Font << /F57 1075 0 R /F36 955 0 R /F20 937 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-1339 0 obj <<
-/D [1335 0 R /XYZ 85.039 734.228 null]
+1348 0 obj <<
+/Length 1752
+/Filter /FlateDecode
+>>
+stream
+xڭXY6~ Ĭ(:7ͅhn"Ƀl˶ZJ:;dXoA,Ǚ7aThajet8 fHEdɼ ~x㒡Uf)p2ݯ1&0j4N4n> nù?'8iuap7bgk8P,* ӛQ_zU<g;T扵Uƾy\\h<y4v. ~*p8 ތL춳s 
+%^3S6i!r &U 8ߣ풤3) q˰06= uБJIbD1D(DJ\Y_5Tj0 ˖BVO8y wP{.IgaKftvR<g͚1>&E5zWsʥ[_b_j|uTL*Y^֙Q ]Du\sb}\˯k <%O\`Hq&௥mNuڌg835%Ѿ4']mU؅iJ3ES~/m?E'$=d3!RZnWNȳ %/cR.@M!%n1iz$IUL**e2+]KTn,SRKr!+{aƈY٣uy|bΡl/(g ij:`Tv7|'SaA..1e=D³X-,J
+E.>уu*"-=gaƒZ_`UD]??LQ>%HR$8-'=z[F&06.Xg[sNO5OͺZ(2ZvArG*5euP@ SΤ97endstream
+endobj
+1347 0 obj <<
+/Type /Page
+/Contents 1348 0 R
+/Resources 1346 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1354 0 R
+>> endobj
+1349 0 obj <<
+/D [1347 0 R /XYZ 85.039 781.388 null]
>> endobj
66 0 obj <<
-/D [1335 0 R /XYZ 85.039 690.69 null]
+/D [1347 0 R /XYZ 85.039 761.463 null]
>> endobj
-1340 0 obj <<
-/D [1335 0 R /XYZ 85.039 664.681 null]
+1350 0 obj <<
+/D [1347 0 R /XYZ 85.039 739.701 null]
>> endobj
70 0 obj <<
-/D [1335 0 R /XYZ 85.039 664.681 null]
+/D [1347 0 R /XYZ 85.039 739.701 null]
>> endobj
-1341 0 obj <<
-/D [1335 0 R /XYZ 85.039 640.699 null]
+1351 0 obj <<
+/D [1347 0 R /XYZ 85.039 702.17 null]
>> endobj
74 0 obj <<
-/D [1335 0 R /XYZ 85.039 557.95 null]
+/D [1347 0 R /XYZ 85.039 605.871 null]
>> endobj
-1342 0 obj <<
-/D [1335 0 R /XYZ 85.039 536.695 null]
+1352 0 obj <<
+/D [1347 0 R /XYZ 85.039 571.067 null]
>> endobj
78 0 obj <<
-/D [1335 0 R /XYZ 85.039 453.946 null]
+/D [1347 0 R /XYZ 85.039 461.219 null]
>> endobj
-1343 0 obj <<
-/D [1335 0 R /XYZ 85.039 432.691 null]
+1353 0 obj <<
+/D [1347 0 R /XYZ 85.039 426.415 null]
>> endobj
-1334 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R >>
+1346 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1346 0 obj <<
-/Length 3386
+1357 0 obj <<
+/Length 2677
/Filter /FlateDecode
>>
stream
-xڽk!Ta~[RpA4(x$%H\Fk(@3 vg_Ysv:N\O|\oa+WfoA
-C+AViO0JDO9
-O˂[+/fSkr&ѡgxKW ҙOs^hߒR6 {4e;!293fO҈x8=va(@+^憀|DY+:LY^j;WupUX@>T5 Gi_0?2'sJnϤ'= W㄂"Z
-04~
-'MxO$/8S + ,YC )M?9{6H/0]v/[ PS3ӊJ*0e؉?K E@!?О8G7 c<Wou1Z& gtu)#BX%e](fea@lM[ ^;Iņ|O(wŒOUL:J*B]]JFba)t
-^ܥH+{$$NŞXhABR;Хč = Y8s]<;Qʗ:I]жTa<oV3UuftDc.O nq5]zYF_D_q6D^i`I:a
- q {7 "n;Cpb!L\z?(7;v1_$4m#/4B4IcrSIߏbW͈+ӚxsR %pr,*J$T3}9!̗ 7>\gvqzj'j?ᯫ^ >XF_`DĶ1/sn̜.e"cjC=Z ̜'-ߍ"m+ׅ}djAr|?Q]_st ⲣ|9Q]!Nr8/"$e@?ϱo/@r-Abڑ8KzQ)0' S_%$qJx1mY3_,ޜؚ~(8H~a>aۡ&{,~'T\ܕIg<~HٵGȤrG\yTz;a')Iϗ/FH-<ż%
-<Ac;}%!ܠƒ"%wil^gm<UJшG O~*3ܼxk Ի'6AlP
+xڭYY~_P@D>fO<ƚ
+3EJB_N
+7`
+$A]8 yó7PH|¸6Ndr/zb!3 &;7@Lj?ă SIl%\Uݪ4sɗ8҉elci08gbT1#o%?hJfC
+Ю"# a;hɗ-<8#C#8 Iz 3*daA>Zr"i\>1 He c@s)`'0.Y~,{ݵS^m: 9T4!nksM
+p@/%`hAxEԆ[*)[6B/"@=Cj&LT$ZMT-eZ&{Qjq8)h%`U>
+3|*<
+U 97O<; gmv=$߷?KVs:mz<"ZYP\ 0f#k0<f]띠޳ziOB &GratbՀX<6
+
+`:;)xF!_{e2'h}(9NZ?Eyȹ Rڷuǻy-<(Iz]Wȃxpv88FaHhd:+@Y{• =k$AQ)MъJ8VaZ)LYb*n/ZjN o8Fn6X&>?( Utrtp#8S#C.ωkK=k_;Il RȉV괔q6]Ev ]Ʒu{PjM @yjZvt3aaF
+w8ϩDN2
+nX}ePrCZOtN, >{K [}rvs|mu,7'tLEe^ @QySY)
+UGi#Jx>3G.1)~X.܀40/h+}AG |y-+IEn쇃pBȺUUo{NpxsY椉~/ vseAefxs]φ9Ť~lI4ߝYxpl||
+vtvx
endobj
-1345 0 obj <<
+1356 0 obj <<
/Type /Page
-/Contents 1346 0 R
-/Resources 1344 0 R
+/Contents 1357 0 R
+/Resources 1355 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1321 0 R
-/Annots [ 1348 0 R 1349 0 R ]
+/Parent 1354 0 R
+/Annots [ 1359 0 R 1360 0 R ]
>> endobj
-1348 0 obj <<
+1359 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [122.225 464.403 422.032 476.396]
+/Rect [84.043 410.207 383.851 422.199]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://lxr.linux.no/source/Documentation/CodingStyle)>>
>> endobj
-1349 0 obj <<
+1360 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [122.225 450.854 364.76 462.847]
+/Rect [84.043 383.108 326.578 395.101]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.fsf.org/prep/standards_toc.html)>>
>> endobj
-1347 0 obj <<
-/D [1345 0 R /XYZ 85.039 781.388 null]
+1358 0 obj <<
+/D [1356 0 R /XYZ 85.039 781.388 null]
>> endobj
82 0 obj <<
-/D [1345 0 R /XYZ 85.039 761.463 null]
+/D [1356 0 R /XYZ 85.039 761.463 null]
>> endobj
-1007 0 obj <<
-/D [1345 0 R /XYZ 85.039 667.044 null]
->> endobj
-1350 0 obj <<
-/D [1345 0 R /XYZ 85.039 286.574 null]
->> endobj
-1351 0 obj <<
-/D [1345 0 R /XYZ 85.039 259.476 null]
+983 0 obj <<
+/D [1356 0 R /XYZ 85.039 653.495 null]
>> endobj
-1352 0 obj <<
-/D [1345 0 R /XYZ 85.039 245.927 null]
+1361 0 obj <<
+/D [1356 0 R /XYZ 85.039 178.181 null]
>> endobj
-1353 0 obj <<
-/D [1345 0 R /XYZ 85.039 220.95 null]
+1362 0 obj <<
+/D [1356 0 R /XYZ 85.039 137.533 null]
>> endobj
-1354 0 obj <<
-/D [1345 0 R /XYZ 85.039 193.851 null]
+1363 0 obj <<
+/D [1356 0 R /XYZ 85.039 110.435 null]
>> endobj
1355 0 obj <<
-/D [1345 0 R /XYZ 85.039 178.181 null]
->> endobj
-1356 0 obj <<
-/D [1345 0 R /XYZ 85.039 150.476 null]
->> endobj
-1357 0 obj <<
-/D [1345 0 R /XYZ 85.039 110.435 null]
->> endobj
-1358 0 obj <<
-/D [1345 0 R /XYZ 85.039 96.279 null]
->> endobj
-1344 0 obj <<
/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1361 0 obj <<
-/Length 3230
+1366 0 obj <<
+/Length 3387
/Filter /FlateDecode
>>
stream
-xڽrPŐDŽ/idd$+9Dv ,ۺ4e.
-qۓG0ةmuOW>o,x̵>{wnvY`:9lt $}; |_ܜ`WMfx;vS0)ĉado,A>3+ϫl%U|ݔ
-/f:x+dG@Go U<sSԱpB[Y^|+ry^'3/0ijBSj$Et ~jw[sQ@џں,>>Kx+>g^ L31}y--tr8*[mv'lYY<]# 6
-ā"R'{uU^#.Z}O6vz/5sR &O.#j=lPJ?N1y"mdbtvq#&54`w$K7H~)h'SVgmGhw,DJՁ,knjV|>I,EMDߕnQh'~vBIY+ A@.X7zq@TDc.|J/o%~-f犨U*-LӣlGs
-
-]$Ɵ+
-[;
-lϚ{C\1+e/M1D䞫]8ejx:B
-GbUJ%J:H@:z? 3ԋBaץ>XE!2m2vvf2oӕn9nT2gY$:.?gi*\fX?l
-  jE
-O~'jvz׋j {gG~8=:l<̎M?GOendstream
+xڭZY6~_>DJV0ccשS#r$V$Q!L~kL
+h},HUU\&M(K!YZ4/n^3gaʠ=<M*IC_?>b<Qe޾{mp͛xׇn^?fR`S"o~5հnB4f*Kf<652TQ$~QJĈ"L-QxiPAY3]p4~va8Nr.qh%c:,b;}/бmK2"e8`|QQ"(˿ӨUNu6a4WW_D| B\TBbf@JkE.cda`Hrw=aL<{(
+Gl!\m ,>\ ͳ>rbTt :H^( 1*T}`\KkK
+fxs=ǕPdmM49jGNɩF" 6
+ZG9YRƘc'>#E`GQzTÕ*Cn8MNf^6*XuG
+8bMщl:Q؍QIXQ
+~n-o8'"5OhdծM"Qy;}?inBn;yj}MO\4{"qj[HH١S^F>fZ76!=\xZB~;<̙6)!5RRaxt=X y=a5k@k`ΤbgjkoN{4YoyօphxD݄? O_ þ] KQٮQ9P
+峩L،ܾP 9UomQCIBI,m }~/s%*O /1 `9_o^sכ1* x87GSe@˚XV
+ݠb 'RQwgV=:+YKG{eQ;Jw:ӦZMN[9?+?Sρms]Oq CiqCIhJ  J>~Jt%p$#7-QϞKJL<]MVw$"^٩
+A܎kI5Wv}}o~ߛJq՝<SQN-'5 }cgo32_u.7Ba"(eQ8*''F'*“mKI*:̶ٯ /fB:*dA^`=ጩb.JJ~ƍ!X|&X 8M<&|FxQhm[{v3:^FA&ĩ(RA(-6.M3ڰN%ιbK%(6fo8l,gWo#!eZ۸Ex|h 4pTW^Ip8@aY~i)j0S2;8ۊ<^aJ8\~٥ (OdnFƩuX
+*{}a3rAA1{
+?F}5oݴ"v4U'Rs Q^_MDendstream
endobj
-1360 0 obj <<
+1365 0 obj <<
/Type /Page
-/Contents 1361 0 R
-/Resources 1359 0 R
+/Contents 1366 0 R
+/Resources 1364 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1321 0 R
->> endobj
-1362 0 obj <<
-/D [1360 0 R /XYZ 85.039 781.388 null]
->> endobj
-1363 0 obj <<
-/D [1360 0 R /XYZ 85.039 761.463 null]
->> endobj
-1364 0 obj <<
-/D [1360 0 R /XYZ 85.039 734.228 null]
->> endobj
-1365 0 obj <<
-/D [1360 0 R /XYZ 85.039 707.129 null]
->> endobj
-1366 0 obj <<
-/D [1360 0 R /XYZ 85.039 680.637 null]
+/Parent 1354 0 R
>> endobj
1367 0 obj <<
-/D [1360 0 R /XYZ 85.039 667.088 null]
+/D [1365 0 R /XYZ 85.039 781.388 null]
>> endobj
1368 0 obj <<
-/D [1360 0 R /XYZ 85.039 639.383 null]
+/D [1365 0 R /XYZ 85.039 761.463 null]
>> endobj
1369 0 obj <<
-/D [1360 0 R /XYZ 85.039 601.463 null]
+/D [1365 0 R /XYZ 85.039 736.955 null]
>> endobj
1370 0 obj <<
-/D [1360 0 R /XYZ 85.039 572.243 null]
+/D [1365 0 R /XYZ 85.039 707.735 null]
>> endobj
1371 0 obj <<
-/D [1360 0 R /XYZ 85.039 558.694 null]
+/D [1365 0 R /XYZ 85.039 666.482 null]
>> endobj
1372 0 obj <<
-/D [1360 0 R /XYZ 85.039 530.99 null]
+/D [1365 0 R /XYZ 85.039 612.891 null]
>> endobj
1373 0 obj <<
-/D [1360 0 R /XYZ 85.039 504.497 null]
+/D [1365 0 R /XYZ 85.039 585.186 null]
>> endobj
1374 0 obj <<
-/D [1360 0 R /XYZ 85.039 490.948 null]
+/D [1365 0 R /XYZ 85.039 545.145 null]
>> endobj
1375 0 obj <<
-/D [1360 0 R /XYZ 85.039 450.3 null]
+/D [1365 0 R /XYZ 85.039 504.497 null]
>> endobj
1376 0 obj <<
-/D [1360 0 R /XYZ 85.039 396.104 null]
+/D [1365 0 R /XYZ 85.039 463.85 null]
>> endobj
1377 0 obj <<
-/D [1360 0 R /XYZ 85.039 355.456 null]
+/D [1365 0 R /XYZ 85.039 423.202 null]
>> endobj
1378 0 obj <<
-/D [1360 0 R /XYZ 85.039 287.71 null]
+/D [1365 0 R /XYZ 85.039 396.104 null]
>> endobj
-1359 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R >>
-/ProcSet [ /PDF /Text ]
+1379 0 obj <<
+/D [1365 0 R /XYZ 85.039 354.85 null]
>> endobj
-1381 0 obj <<
-/Length 3210
-/Filter /FlateDecode
->>
-stream
-xZYs8~p1kv2LQqf恖hԈT $Qv'rE eHĔybSEry _y¦&N牏su8c˹qW/_R'q˫Zy&js]&ˢ7Pfsz~O?^%Yy^>ėҘ/eccbŜVN53*U dy/jmHs|uȏJ/U+C~VMӖE8bh0= zK+S-fаomako릅\oq uO/fslTe[Oovh@9n%;PJZ3+Gj&)u}34V@c2Uǣup㪢es-r#srRܐ(ĥ2q2zE@&VoW~E>~q
-T[kݍ̏4 en35BfK#;MR2MGCBށj[QSCc9 1~{+J VumZ]wM*#&yD$j^wJq:^^{_8Xr[#*$ >| o©[&Zvĺ.
-7} ԠN0+7~uLm3N74= <-V#jI@k
-d&1_S.6WORln|j' byZ Ba9y,!(wL}#Tn<c&x7}?Q(Ҕf\)SqC=Ǟ]c㡛pu%*hS_h͇Y
-G2&Dz_@*ΝW<63;S&-6)nEkS9xJ;{|a`u[7;$&b#&rf-- @3捌HýՏmdkni=6ɝ[|'Y>'1EWz 
-.O( -aaN^jP%׺ }XsBr/rY8FR~r YaY匎f_ۻ9:kBَDj(*tcXRg&蛪es\&e{8:Ak}
-c%F;N d`s0DяB#R)Q 7c@n]zO=XYٗcR1)0ч,HyWE{kbhh` }pʹ<2FE*! a2s72ݎV"K|drSPL`߷TjS33h9lYM2Β&wYʤkª5d!g#<1
-9R< @:y.~3\"t9a uz[_*B'Kz6W,.#My$\KQt['Z&{sɧ:D(eQRO
-# X,^NLi.M&z"QyJ姉zye&V 
-Q!|" "07c=t8É߻٦Ǵ3*L)굜%&9v0nAEOH, ɻe493<V C1a;Myj.8B0y)Q
->;+ Aq4ܹb
-L_|lw 0?' S|KTG(|WOU$x/S#kU<WoH30Ob*K4JtA NA/Sj$YS
-E[A5~2;]KrLxvXG,i?\v&رEeEp+Q#K|򡄠>N\70>P71M5H_x8#vPI $y"*@s5 ks⛿#v_I[]Kƞ2-kn~k & kEHDyLsP+s 4 hU|k  hsPFО DC͝P Ɠ
-.]Pݵ nw r[n ]1 ],܅˨eU' ]
-GEC̯H(T=pKF瘵O/s}:t\̥T%Ť}x^ٸ-޻g8]qy'ѪFQM{w,4NƉAq*d'wo?z<-8Xk ^endstream
-endobj
1380 0 obj <<
-/Type /Page
-/Contents 1381 0 R
-/Resources 1379 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 1393 0 R
->> endobj
-1382 0 obj <<
-/D [1380 0 R /XYZ 85.039 781.388 null]
+/D [1365 0 R /XYZ 85.039 303.381 null]
>> endobj
-86 0 obj <<
-/D [1380 0 R /XYZ 85.039 761.463 null]
->> endobj
-1008 0 obj <<
-/D [1380 0 R /XYZ 85.039 672.655 null]
+1381 0 obj <<
+/D [1365 0 R /XYZ 85.039 274.161 null]
>> endobj
-90 0 obj <<
-/D [1380 0 R /XYZ 85.039 672.655 null]
+1382 0 obj <<
+/D [1365 0 R /XYZ 85.039 247.063 null]
>> endobj
1383 0 obj <<
-/D [1380 0 R /XYZ 85.039 641.13 null]
->> endobj
-94 0 obj <<
-/D [1380 0 R /XYZ 85.039 531.089 null]
+/D [1365 0 R /XYZ 85.039 205.809 null]
>> endobj
1384 0 obj <<
-/D [1380 0 R /XYZ 85.039 504.475 null]
+/D [1365 0 R /XYZ 85.039 165.767 null]
>> endobj
1385 0 obj <<
-/D [1380 0 R /XYZ 85.039 486.426 null]
+/D [1365 0 R /XYZ 85.039 138.669 null]
>> endobj
1386 0 obj <<
-/D [1380 0 R /XYZ 85.039 459.327 null]
+/D [1365 0 R /XYZ 85.039 86.593 null]
>> endobj
-1387 0 obj <<
-/D [1380 0 R /XYZ 85.039 429.85 null]
->> endobj
-1388 0 obj <<
-/D [1380 0 R /XYZ 85.039 415.695 null]
+1364 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
1389 0 obj <<
-/D [1380 0 R /XYZ 85.039 377.775 null]
+/Length 1636
+/Filter /FlateDecode
+>>
+stream
+xڥXIs6W21ܗci
+s`^3CF0s (=wpWݱ.Y3YxtE*ŬjA$0LځoqU3ۮ-]پBXHF`8r~WT@$A1vAVRƽͪz]PNBp38yPlh;*q[ಈ+c`y}gW?J]y^׻j9E[zE[;X0:)LW,g*WŐ= qBZw0:1T'Rᬹ\!;1uv'vk}tljJaT#+znoRȊLyLg H}%8|l\ZM$ǔ-'5ԶbDZ* I9HrjdݓN#Iy~/yT¥&KS33z
+ ylܩ$nwQ
+F{1b1s5v`}ȑ=9=Cf9"ixT.6P/לy 48!
+,@>ۅx)=O͹QP|@\&>n^P# 1L,?i -Q[^KB3
+̻R2Q+1rc!^4ao0. A_lyyT!b(6|I0endstream
+endobj
+1388 0 obj <<
+/Type /Page
+/Contents 1389 0 R
+/Resources 1387 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1354 0 R
>> endobj
1390 0 obj <<
-/D [1380 0 R /XYZ 85.039 348.555 null]
+/D [1388 0 R /XYZ 85.039 781.388 null]
>> endobj
1391 0 obj <<
-/D [1380 0 R /XYZ 85.039 291.979 null]
+/D [1388 0 R /XYZ 85.039 734.228 null]
>> endobj
1392 0 obj <<
-/D [1380 0 R /XYZ 85.039 224.233 null]
+/D [1388 0 R /XYZ 85.039 680.637 null]
>> endobj
-1379 0 obj <<
-/Font << /F20 937 0 R /F15 951 0 R >>
+1393 0 obj <<
+/D [1388 0 R /XYZ 85.039 599.342 null]
+>> endobj
+1387 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
1396 0 obj <<
-/Length 2015
+/Length 2327
/Filter /FlateDecode
>>
stream
-xYrF+X f-v[,&IH@@6XDJTyMJYe`5ǁdq<oGx#
- jQ!vM,n&8[g= VڪnX֬QX'NS!M߉)*v}ڈYMV8'/v//T<=V9]Vp N) )
-nynVB|Rw^ER(wpX9sV!}Q}$P Duy/fi![ܺqgc)jT ҚA J>u'2|ziEh&`<]B(1{X.w-`)c/붬6VE6q_LV<Goؚ#_1jE2 %wڇ,X,&L% !M[Vv,K6(f]Z(hgLv&VʵfҮkR^U}0a;gD
-:!_R-Ri%y׼B8G3%dwf[u7ƨDQX#E~,VkmWխ(Ma ltʣ뙁љǘU6]p}Q/[p?owwſʝȪ|pf*r Jafbnv<y[ %bWeH.AF;Kd#; VW+ 0~R,5\4o<|>Qt$N
-Z|eiܩrת&6qa6]sn<)Ox +nUZ1#< @%Zg%
-!Ax`ndTn>'A>[EEVC:K&+Zds9w8y^c#2\
-^*z0r2(:E`PMݴT]Nh+ADXؙdm{ΠZOٗF$|qmGw{(
-甚h-A(7W`-4 g)&& <^Kr+,O'XmL5Y<>̒*kvTaF1RqfTF7J$ǢehKn.'|Uج}O?dãg!!Dx[}lJ٫O-b\$Cel
- wmt}nH g,ϥ]ӠŐ&G|'Nc:;bŸ18pel1RG'D#mB+A Bn_c4VMɦmZ)%N34=-R dCo\Ίm#δaYJn?y76Q-&0_03;IY7`5c#n$a@*=?.Q1:*b3}{[l!S`ü3
- G""nlLPn? v8a9aǏaA CIVcu'"|p}!c|&z5
+xڭɎ6^_aI:g ]}Jrm-D[NU}BR-`qy|F\%'We&]R
+])Ya?OBYxb3vqD0F\JT"̿JDc$/QyK,K1Xy}7u,δk]ֿ=ݳ'udd+-t9ͳBdRxCNU_ɜ
+ɼ~ȠYk͖yV]
+XUmi!<tVf@l-hdp+I~ ?;"CT+a>}}!$5"hFIMfp aQAY
+bIׇ ~S]7<=Qxq'3( ;]F _W׼Y2DUeHh[k eF2k0TZ郋p0oE^z%؃C(aفoch8X{@
+٢̣U {A1AeVEjfJhnA\ܧ
+#$2ZP˝l
+ TJ?ؠ>p0a*ˏ?Z=\)O8{ >If@e_4cB6\"uH2 46JeTěƆ̶؛.6(A* E7C.Ae0l;^EDJ%2w܇ kCrP`fw2n{\wbl\g9
+4@ӡ_D袻.Hҹk@Pp~>m`~sd.x8]ͨ //< "ą%Hga_e8L#?3Ve*Xj
+3\­=i[gĊ _mpCT);jXOW~(W\>+
+ + jr=L"+<
endobj
1395 0 obj <<
/Type /Page
/Contents 1396 0 R
/Resources 1394 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1393 0 R
+/Parent 1354 0 R
>> endobj
1397 0 obj <<
/D [1395 0 R /XYZ 85.039 781.388 null]
>> endobj
-1398 0 obj <<
+86 0 obj <<
/D [1395 0 R /XYZ 85.039 761.463 null]
>> endobj
+984 0 obj <<
+/D [1395 0 R /XYZ 85.039 657.513 null]
+>> endobj
+90 0 obj <<
+/D [1395 0 R /XYZ 85.039 657.513 null]
+>> endobj
+1398 0 obj <<
+/D [1395 0 R /XYZ 85.039 612.438 null]
+>> endobj
+94 0 obj <<
+/D [1395 0 R /XYZ 85.039 476.846 null]
+>> endobj
1399 0 obj <<
-/D [1395 0 R /XYZ 85.039 680.637 null]
+/D [1395 0 R /XYZ 85.039 434.561 null]
>> endobj
1400 0 obj <<
-/D [1395 0 R /XYZ 85.039 653.538 null]
->> endobj
-98 0 obj <<
-/D [1395 0 R /XYZ 85.039 623.55 null]
+/D [1395 0 R /XYZ 85.039 402.352 null]
>> endobj
1401 0 obj <<
-/D [1395 0 R /XYZ 85.039 594.146 null]
->> endobj
-102 0 obj <<
-/D [1395 0 R /XYZ 85.039 552.451 null]
+/D [1395 0 R /XYZ 85.039 361.705 null]
>> endobj
1402 0 obj <<
-/D [1395 0 R /XYZ 85.039 530.59 null]
->> endobj
-106 0 obj <<
-/D [1395 0 R /XYZ 85.039 502.643 null]
+/D [1395 0 R /XYZ 85.039 318.068 null]
>> endobj
1403 0 obj <<
-/D [1395 0 R /XYZ 85.039 480.782 null]
->> endobj
-110 0 obj <<
-/D [1395 0 R /XYZ 85.039 452.23 null]
+/D [1395 0 R /XYZ 85.039 290.364 null]
>> endobj
1404 0 obj <<
-/D [1395 0 R /XYZ 85.039 430.975 null]
->> endobj
-114 0 obj <<
-/D [1395 0 R /XYZ 85.039 403.028 null]
+/D [1395 0 R /XYZ 85.039 250.322 null]
>> endobj
1405 0 obj <<
-/D [1395 0 R /XYZ 85.039 381.168 null]
->> endobj
-118 0 obj <<
-/D [1395 0 R /XYZ 85.039 339.672 null]
+/D [1395 0 R /XYZ 85.039 209.675 null]
>> endobj
1406 0 obj <<
-/D [1395 0 R /XYZ 85.039 317.811 null]
->> endobj
-122 0 obj <<
-/D [1395 0 R /XYZ 85.039 278.436 null]
->> endobj
-1407 0 obj <<
-/D [1395 0 R /XYZ 85.039 254.454 null]
->> endobj
-126 0 obj <<
-/D [1395 0 R /XYZ 85.039 215.08 null]
->> endobj
-1408 0 obj <<
-/D [1395 0 R /XYZ 85.039 191.098 null]
->> endobj
-130 0 obj <<
-/D [1395 0 R /XYZ 85.039 151.723 null]
->> endobj
-1409 0 obj <<
-/D [1395 0 R /XYZ 85.039 127.741 null]
+/D [1395 0 R /XYZ 85.039 138.94 null]
>> endobj
1394 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R >>
+/Font << /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1412 0 obj <<
-/Length 1843
+1409 0 obj <<
+/Length 2916
/Filter /FlateDecode
>>
stream
-xYے8}Wxr-)P , P[J$MYaع;3T%Ru>}.yX W&(dq3 7T8by:+7鎦2J?9/ nF>RJG^?bg+|v^7M,o;Iܽ+$.;Baz <uV%"!?~$A>y Q͛+!\+r߽nD]7Sto SU/`5An$NN,'3ܺZþITg,EAHyłE^U Т}\A7Uχ,+ym(P9K
- :}
-y,H
-3xq~]o0!^R\_0^D=۾ nn^D/0%Ӣ\jEdҘnsb\UpGmKRʩ)Vc jdddPҫtg }|2v7H mv_ KkC6`^b\e[cIAf5}Q;Kk S<{-
-}#
-]NVkazH<4h3C/[uɊOoufzCJKGԟ8y7p+!G:jxxJ9<VaQl1` AKMȭ;[51"`Wz 3keUAp
-R#{ʌVT<7^>Í'=$z">JL7=DEx.r}l$SB%SPŨ8l6FilၥIX;?zP[L 3|,X6Ps+ޖeLϑY]ZLGOL-WL- VCo4 降ӝBm߻ !R诶wө2դTq0'L2!6'e.Y*C~:{]G]Xr%Rkٟa n;9_pOةW?mˉKe n<E@mc l.""7箑U
+xn80
+fI_ۃIv۱$'z!(XU7KəDݬRhkgE:[/{yY1p]x2a2=^|ǻ߮?~9Z'M.ew8k_?_.uO
+t%0E*B(hǧw:gTXke"KM/ EpVB ˆGi.lfg#jfJhF uu9WJ'ݥå*'T+=
+}6EB n"sU Up&#n]}Le#`gҰ?ȣqle*axd[݄!=MpPCSrX/g|spm}dֈTsG:{ux\٩RI
+UO/t&msIeR hG5͢2B>b>(' 'W9H5}i$o'Q8(~=g8-܍p~*O zCo4[(KKT܎lH""*DlKLC*)s gj_@ rrkqSAEONߒ W NpU0ĩ Nfa*(\{8p}vivuV)iRll\l T#gkyYa DB<{+.qMq(* + JjAvV6<]
+3w#qXo.Մ!o"& Q~sI8G<Kt
+.ݙ ÛX0/3 ԗևeRN
+>=2/s
+k!;z6h0ȨO;I'5̰S3>Fzw;ұ\I @3ݪWu_-n[(#4:B%/ly\ى8=Mz;T1{w4KOf97F0gggS$7Q#M^sȇb
+|{4ܾgD,xb]5''Q={oiĦN$}Dwd 5w|f=ꬮ0I*]dql-j$E(v2x> Y0>xa]Dm<q(uɈ,ݩt}og2ɺ[a;) ZnU[۰\?Iei4 Gj~z=  :w  "z+Gea(Ηaˑxohܹm;6Hm=tW6 oRG@-Q
+N8PzQ02G?7b'?CJendstream
endobj
-1411 0 obj <<
+1408 0 obj <<
/Type /Page
-/Contents 1412 0 R
-/Resources 1410 0 R
+/Contents 1409 0 R
+/Resources 1407 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1393 0 R
+/Parent 1354 0 R
>> endobj
-1413 0 obj <<
-/D [1411 0 R /XYZ 85.039 781.388 null]
+1410 0 obj <<
+/D [1408 0 R /XYZ 85.039 781.388 null]
>> endobj
-134 0 obj <<
-/D [1411 0 R /XYZ 85.039 761.463 null]
+1411 0 obj <<
+/D [1408 0 R /XYZ 85.039 761.463 null]
+>> endobj
+1412 0 obj <<
+/D [1408 0 R /XYZ 85.039 585.186 null]
+>> endobj
+1413 0 obj <<
+/D [1408 0 R /XYZ 85.039 493.069 null]
>> endobj
1414 0 obj <<
-/D [1411 0 R /XYZ 85.039 740.47 null]
+/D [1408 0 R /XYZ 85.039 463.85 null]
>> endobj
-138 0 obj <<
-/D [1411 0 R /XYZ 85.039 701.095 null]
+98 0 obj <<
+/D [1408 0 R /XYZ 85.039 420.312 null]
>> endobj
1415 0 obj <<
-/D [1411 0 R /XYZ 85.039 677.113 null]
+/D [1408 0 R /XYZ 85.039 377.359 null]
>> endobj
-142 0 obj <<
-/D [1411 0 R /XYZ 85.039 637.738 null]
+102 0 obj <<
+/D [1408 0 R /XYZ 85.039 324.235 null]
>> endobj
1416 0 obj <<
-/D [1411 0 R /XYZ 85.039 613.757 null]
+/D [1408 0 R /XYZ 85.039 286.704 null]
>> endobj
-146 0 obj <<
-/D [1411 0 R /XYZ 85.039 574.382 null]
+106 0 obj <<
+/D [1408 0 R /XYZ 85.039 245.208 null]
>> endobj
1417 0 obj <<
-/D [1411 0 R /XYZ 85.039 550.4 null]
+/D [1408 0 R /XYZ 85.039 209.799 null]
>> endobj
-150 0 obj <<
-/D [1411 0 R /XYZ 85.039 511.025 null]
+110 0 obj <<
+/D [1408 0 R /XYZ 85.039 167.697 null]
>> endobj
1418 0 obj <<
-/D [1411 0 R /XYZ 85.039 487.043 null]
->> endobj
-154 0 obj <<
-/D [1411 0 R /XYZ 85.039 447.669 null]
+/D [1408 0 R /XYZ 85.039 132.893 null]
>> endobj
-1419 0 obj <<
-/D [1411 0 R /XYZ 85.039 423.687 null]
->> endobj
-158 0 obj <<
-/D [1411 0 R /XYZ 85.039 384.312 null]
->> endobj
-1420 0 obj <<
-/D [1411 0 R /XYZ 85.039 360.33 null]
->> endobj
-162 0 obj <<
-/D [1411 0 R /XYZ 85.039 319.781 null]
+1407 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
1421 0 obj <<
-/D [1411 0 R /XYZ 85.039 288.256 null]
->> endobj
-166 0 obj <<
-/D [1411 0 R /XYZ 85.039 145.739 null]
+/Length 1406
+/Filter /FlateDecode
+>>
+stream
+xڭXs6~ܓ ~#I{Im}h a@ 2wWd#L;ֻ~Z2
+,Bgeň֠yĜęL<?2ch[GD6aa<B䊌'eY1˧Tw
+ƛƼQo\=~JƼʛ` ehtNQ%Dn1nr u  tk +2,dQAh"ƾ>¸A?k+8ql}<NtWD [h}a\|#<]2&
+ pl`
+[BBaݦ (~{p0"p:ty6Q\H-IᢼH-<p~$( 'QG&4`9Hw|YkaWfpDf3 
+NEo|x%pdK6:%lrkdPI0!
+EJn=(&Ģ  0q0ѵ }B1
+endobj
+1420 0 obj <<
+/Type /Page
+/Contents 1421 0 R
+/Resources 1419 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1432 0 R
>> endobj
1422 0 obj <<
-/D [1411 0 R /XYZ 85.039 126.867 null]
+/D [1420 0 R /XYZ 85.039 781.388 null]
+>> endobj
+114 0 obj <<
+/D [1420 0 R /XYZ 85.039 761.463 null]
>> endobj
1423 0 obj <<
-/D [1411 0 R /XYZ 85.039 108.208 null]
+/D [1420 0 R /XYZ 85.039 740.47 null]
+>> endobj
+118 0 obj <<
+/D [1420 0 R /XYZ 85.039 685.837 null]
>> endobj
1424 0 obj <<
-/D [1411 0 R /XYZ 85.039 94.658 null]
+/D [1420 0 R /XYZ 85.039 650.427 null]
+>> endobj
+122 0 obj <<
+/D [1420 0 R /XYZ 85.039 609.343 null]
>> endobj
1425 0 obj <<
-/D [1411 0 R /XYZ 85.039 81.109 null]
+/D [1420 0 R /XYZ 85.039 573.934 null]
+>> endobj
+126 0 obj <<
+/D [1420 0 R /XYZ 85.039 521.422 null]
>> endobj
1426 0 obj <<
-/D [1411 0 R /XYZ 85.039 67.56 null]
+/D [1420 0 R /XYZ 85.039 483.891 null]
>> endobj
-1410 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
-/ProcSet [ /PDF /Text ]
+130 0 obj <<
+/D [1420 0 R /XYZ 85.039 442.807 null]
+>> endobj
+1427 0 obj <<
+/D [1420 0 R /XYZ 85.039 407.397 null]
+>> endobj
+134 0 obj <<
+/D [1420 0 R /XYZ 85.039 365.708 null]
>> endobj
-1429 0 obj <<
-/Length 3338
-/Filter /FlateDecode
->>
-stream
-xZYo~
-1<y̛gILFdw(+IM f]]W g8YY6[.="LAş
-$P(;Ҋv|
-20ոL9_T#NFz-w?MnF#KqXJ%kn2@SnUɄ0%
-Keq \U$˞ 9Ef޿YL32>lKTT4s89
-<b+`lk8^҄'`MW* ~!;:<8Imղh{?306e
-djȟ
-VbkXhk7(S quŪ;Ƽ5j"j~:|Em_ |;A= 1I=^XDk& xqu L\S} 4\-[Dc&
-58A 4B.+/.Pb,s6cj`5ujj36s)UvvCLbc4>卵Z<~/p`Lfz\ēPZ oI'2,JUb"Ncvh̀N,T:@n.2<Ps!_fKsRHUqq
-M-H:8èёhee&[U8s\$< 2cM!ʊђ\
-4;.y㷇]>qw
-rZ4Tq
-Ia5?d>~Zc"Jg;l
-ʠ4z[
-__R= 2?Fd?l !`7V K$ro݈W\Sl&XTb%L$td=ۇ eek-)mHػd+Cs'34~!'`;y 8n [K,lW -"?K3bxOb. B?RB?#{^eiG
-ィ8)clZog.j"rي'nn8oq"o﹚A~W7hXHݧ+Qp[b؉%AU-y5$vfwC
-!$=7ֈ(WweiP$WKG0GrQ\^$c
-}2˙̓<<y(BfgpϦ6ԦPՉiPL}7@av 84)BEtl>Y*Xo dzD:DZs`endstream
-endobj
1428 0 obj <<
-/Type /Page
-/Contents 1429 0 R
-/Resources 1427 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 1393 0 R
+/D [1420 0 R /XYZ 85.039 330.904 null]
>> endobj
-1430 0 obj <<
-/D [1428 0 R /XYZ 85.039 781.388 null]
+138 0 obj <<
+/D [1420 0 R /XYZ 85.039 289.82 null]
>> endobj
-1431 0 obj <<
-/D [1428 0 R /XYZ 85.039 761.463 null]
+1429 0 obj <<
+/D [1420 0 R /XYZ 85.039 254.41 null]
>> endobj
-1432 0 obj <<
-/D [1428 0 R /XYZ 85.039 748.383 null]
+142 0 obj <<
+/D [1420 0 R /XYZ 85.039 201.899 null]
>> endobj
-1433 0 obj <<
-/D [1428 0 R /XYZ 85.039 734.834 null]
+1430 0 obj <<
+/D [1420 0 R /XYZ 85.039 164.367 null]
>> endobj
-1434 0 obj <<
-/D [1428 0 R /XYZ 85.039 707.129 null]
+146 0 obj <<
+/D [1420 0 R /XYZ 85.039 123.284 null]
+>> endobj
+1431 0 obj <<
+/D [1420 0 R /XYZ 85.039 87.874 null]
+>> endobj
+1419 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
1435 0 obj <<
-/D [1428 0 R /XYZ 85.039 647.561 null]
+/Length 1705
+/Filter /FlateDecode
+>>
+stream
+xڽXo6~_aI.bIܢ]S$Yx{iAXmeܴxD'ҡ0';Rcq8Y6^lF|| 3Zj>zVcY_G3x~70s9J)#&4͢ffhU GDћy[|$ߏ8y61g7#̴y=-EsjLoۧ󘊜"L%"Yr},4g+fFL韓<f3_oN
+lJqqA $d+g`|$YPZ;u&P@ Ftu@ڳyz>AIjU%ch`coВ$E#8^>UkeőF}dG)kD/;ANv۞UZP!h8$>Z*HPqnbJhL(JlWƈ
+G%qjrhڞ-r0T([dX-ddms%b_,/46YM Q-F26dofSTaU@:Vn#VT_EkuT~B74ap Fd1IFK㔠;n@@(B[ aldߔTz%n~m{-R:Tjj6hh7 Z4 x W^,שE^UUN-$c5m{Bθ<fuX_DCLd1A)h]g^m ?ol~*o2vݗލi *{u,@STrɞ*d]YB–ȩxt- =<V_;lcJpWPȞ˃JXʷ)M]ԭ*p%7\'x<)zJkg&.@Pٖ.[b('GcXƅ%tWlH0(bLcݝ;g^ڽ!e(]Npt-S٭G4 Lgќp8!b&E|qK
+pFTIs_":)+(KD~C[׹5kd? iOw8A܇us?wzt( f Ѷ>{F{ ZPm/9._R0,b7H?Qʐ,+8'oP,0Ň|dYO֓5#ˋg?YxKbx?wx>abAb rXWcwOx0V'IGIe1h]Zkv TP,̶j{bZ
+ZD.6,>>[~sX,5%9yә|￰`n#endstream
+endobj
+1434 0 obj <<
+/Type /Page
+/Contents 1435 0 R
+/Resources 1433 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1432 0 R
>> endobj
1436 0 obj <<
-/D [1428 0 R /XYZ 85.039 619.856 null]
+/D [1434 0 R /XYZ 85.039 781.388 null]
+>> endobj
+150 0 obj <<
+/D [1434 0 R /XYZ 85.039 761.463 null]
>> endobj
1437 0 obj <<
-/D [1428 0 R /XYZ 85.039 566.266 null]
+/D [1434 0 R /XYZ 85.039 740.47 null]
+>> endobj
+154 0 obj <<
+/D [1434 0 R /XYZ 85.039 698.974 null]
>> endobj
1438 0 obj <<
-/D [1428 0 R /XYZ 85.039 552.716 null]
+/D [1434 0 R /XYZ 85.039 663.564 null]
+>> endobj
+158 0 obj <<
+/D [1434 0 R /XYZ 85.039 610.64 null]
>> endobj
1439 0 obj <<
-/D [1428 0 R /XYZ 85.039 512.069 null]
+/D [1434 0 R /XYZ 85.039 573.109 null]
+>> endobj
+162 0 obj <<
+/D [1434 0 R /XYZ 85.039 519.011 null]
>> endobj
1440 0 obj <<
-/D [1428 0 R /XYZ 85.039 470.815 null]
+/D [1434 0 R /XYZ 85.039 473.936 null]
>> endobj
-170 0 obj <<
-/D [1428 0 R /XYZ 85.039 398.971 null]
+166 0 obj <<
+/D [1434 0 R /XYZ 85.039 304.321 null]
>> endobj
1441 0 obj <<
-/D [1428 0 R /XYZ 85.039 380.099 null]
+/D [1434 0 R /XYZ 85.039 271.9 null]
>> endobj
1442 0 obj <<
-/D [1428 0 R /XYZ 85.039 360.833 null]
+/D [1434 0 R /XYZ 85.039 242.68 null]
>> endobj
1443 0 obj <<
-/D [1428 0 R /XYZ 85.039 333.735 null]
+/D [1434 0 R /XYZ 85.039 215.582 null]
>> endobj
1444 0 obj <<
-/D [1428 0 R /XYZ 85.039 268.716 null]
+/D [1434 0 R /XYZ 85.039 188.483 null]
>> endobj
-1427 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R >>
-/ProcSet [ /PDF /Text ]
+1445 0 obj <<
+/D [1434 0 R /XYZ 85.039 161.385 null]
+>> endobj
+1446 0 obj <<
+/D [1434 0 R /XYZ 85.039 134.286 null]
>> endobj
1447 0 obj <<
-/Length 987
+/D [1434 0 R /XYZ 85.039 107.188 null]
+>> endobj
+1433 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1450 0 obj <<
+/Length 3012
/Filter /FlateDecode
>>
stream
-xڽWMs6W\<θV$$PKu_]
-lcVW:Ojj5+W"|UeN-BhҬ) 89YnJ @N2[rx3OQ/B=.Sh ʅيKE,mձj nR
-EQvSM BIn@HUH`vRHH0$
-nիF@kDESYkL򲬑)aSvDB5<#y`<TUOzMDgxri*(S'Ǣ5Rb--Fׇt!2FPަEk-˥6)7E)fguyZϞMR'._HwoòlvE=R9E~& ?ZA#n8Au+k4xϟ`G2TG@o`83gLDQo5I5JxPXD7cB_]SṈ0(8o3^1E5λuH 뵄D4>' K~_qR1NAC0zTڬfuؗ4p!UR^ Ąe4f{w4d8/Dψbendstream
+xڵZY~_!%0bl&/6,$qW'<<}fS"#XxlVWuWur**@4Sβ|Pldм}t?'XzcMfǵ?l=&Fy>G+r99
+ݯlǻyzq+x}~iy>}e:ϲhYqAdubGyT "lpfh)Z#y hwk8W{Yoԫ:̼lx(""LWs_QfӉWheזݘX]\eaCu=y<<>4%Qx9c_N|\OU0s3)Ryvim lWSC;.^*8oA?;>C *EWE"Τs|^gYWʒe4x}6iޗY;+
+98_m5ft &
+Qg5xeV<IƖrl@6lBhh8cKkO9ÄuMyqb=cxO{o> P]<
+U'fnUk/2DL3X\RA~O"#p&zsyQ&IæӞes5bS7<1J PgR(TX<{^{fs ;!Gi2ldGE˿Cc,S⌔M⯲x0Htt$],ŝKtlt^n84fch<ɬ,If(Θ+o\_[zxT΀2L3_U~S {QAp}C5-pR̵N̸7:h4vʹi|UH"uuG鎄)5sdp@
+4ÃǖZPa8IV|SpXV` Hd;˃rR8 ,{D%r~%e$ubU_/
+ޝ \~6;E<谇<&Ԏby MfFi\;4*Uo?!qK#!h-ًBTrf7nۋ6|
+
+;kp6,ږY@,3pQbgѷ|Wuu#NV8׽jL4̧!a\]
+ӷו0q[}C˓hkMx&$'W$X%F
+iZT=%RW\n (m?
+!'drA<4a<|YO'89HӨH`dG@3"TҔ 8y"x7sÈ.lYdXaxC#WS]> l)I# vcqo?rxendstream
endobj
-1446 0 obj <<
+1449 0 obj <<
/Type /Page
-/Contents 1447 0 R
-/Resources 1445 0 R
+/Contents 1450 0 R
+/Resources 1448 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1393 0 R
->> endobj
-1448 0 obj <<
-/D [1446 0 R /XYZ 85.039 781.388 null]
->> endobj
-174 0 obj <<
-/D [1446 0 R /XYZ 85.039 761.463 null]
->> endobj
-1449 0 obj <<
-/D [1446 0 R /XYZ 85.039 739.701 null]
->> endobj
-1450 0 obj <<
-/D [1446 0 R /XYZ 85.039 709.614 null]
+/Parent 1432 0 R
>> endobj
1451 0 obj <<
-/D [1446 0 R /XYZ 85.039 693.943 null]
+/D [1449 0 R /XYZ 85.039 781.388 null]
>> endobj
1452 0 obj <<
-/D [1446 0 R /XYZ 85.039 682.515 null]
+/D [1449 0 R /XYZ 85.039 761.463 null]
>> endobj
1453 0 obj <<
-/D [1446 0 R /XYZ 85.039 666.845 null]
+/D [1449 0 R /XYZ 85.039 734.228 null]
>> endobj
1454 0 obj <<
-/D [1446 0 R /XYZ 85.039 652.69 null]
+/D [1449 0 R /XYZ 85.039 650.55 null]
>> endobj
1455 0 obj <<
-/D [1446 0 R /XYZ 85.039 639.747 null]
+/D [1449 0 R /XYZ 85.039 612.023 null]
>> endobj
1456 0 obj <<
-/D [1446 0 R /XYZ 85.039 626.197 null]
+/D [1449 0 R /XYZ 85.039 542.156 null]
>> endobj
1457 0 obj <<
-/D [1446 0 R /XYZ 85.039 612.042 null]
+/D [1449 0 R /XYZ 85.039 515.058 null]
>> endobj
1458 0 obj <<
-/D [1446 0 R /XYZ 85.039 599.099 null]
+/D [1449 0 R /XYZ 85.039 474.41 null]
>> endobj
1459 0 obj <<
-/D [1446 0 R /XYZ 85.039 585.55 null]
+/D [1449 0 R /XYZ 85.039 419.607 null]
>> endobj
-1445 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R >>
-/ProcSet [ /PDF /Text ]
+170 0 obj <<
+/D [1449 0 R /XYZ 85.039 322.785 null]
+>> endobj
+1460 0 obj <<
+/D [1449 0 R /XYZ 85.039 288.243 null]
+>> endobj
+1461 0 obj <<
+/D [1449 0 R /XYZ 85.039 258.417 null]
>> endobj
1462 0 obj <<
-/Length 2272
+/D [1449 0 R /XYZ 85.039 217.77 null]
+>> endobj
+1463 0 obj <<
+/D [1449 0 R /XYZ 85.039 139.202 null]
+>> endobj
+1448 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1466 0 obj <<
+/Length 1907
/Filter /FlateDecode
>>
stream
-xYK6Waeb%z8EM'r(rhzZYr%9w$%yeon hr8*^EDDjX<_gj+?<-NHbVTHgK422SPjJF"M(:L(+סJ߯fƁA6<&u]wף4UF%Llkt:Q,+|_F
-fsRd梖bq#f* ӣJu/A<R[&I= FmV=?LPA ʞ[^n|ƁG]5vZn<Y<]0} F68
-nǎ9kxovHhlCMf
-jz&* 5djfX㿖')`@7[[`9@eP}r$҉y`<:k :2lkڎ1a9L*b9+쌖>fAW:lp(4>mZߝ4q?*iɯ4Ԍ*=/|]TK['Emt.ι/'8&،nd
- 1\+խN NaL\QBKɺ;hVvzWm"Ct1_cl;T3ծ?puЮyt~z +&B[ Z,r9&af40vG4S{`
-qaҫ~lIazQa3HvH<JuK1f(]/CSY%j
-sYeLqcږ 4yr
-jj%R~NezdH±C)?Lb8r,nUzf5Xt7ַت<'+kd"d9B 9-.r),|N,ôCm Ykj!FAh:E3j(ē7XoQO!,#\ TOO>*ʗn{T)7HG@|8-4a$ÓqapDnۗsg /P)ȨNMp;IC*s<q7`)9WE4
-h݊dBHNo =!aWC܍ |KGQ4Y㩳!وK^݆&8Q ;,}<I
-l5gy]e&
-_gf/5㸣9_mI=> >4{^ ,LaZ
+xڭYK6W9@͊G/MlmmI-UVl~}AEX9oߌ9Ꮬ'Z*lj*I̟?̏3i5Ve9yy?ϥ/R?o}oy~oRb{/Qz7wA
+vR4'|d~g_HСbvkυs^uZ%B'R_8C:.Ы-p TfDU,ݛE{O8Pj nSeƮ45jBJ
+DT QX'_2%2-۽yJ)-$,"4^#s9# FȿG
+ I^~\yqk+1 a/c[V@ɜ36𸔣yƱݰB;qtQ9QdTQG(7vSd04(
+Rْ0֖T o/Z`qI5n${i$,FaGeCr`n$=°4XW]3)y\swi H4~UCEP T¥#74V!tX!t ~!u9}"kA"l9xh!LTCh[@gG
+qtXqtp{i+G+4]R)X˝VO}2Z@MXd]75YWq,Nt&oufO֡4ע?y̾YpȪ}~0)>Y t:xhNN΁bTSLe!>aCnGA ]:(Z<U<Z\ʢh9rc`/jPZ$Q@g2Le\=mO0m1p} Tuuu5[8rwiج#aem` |ʦ6)s:ꚮ'_zuJE^peC?\^N_1n-ۼ-vΰDž0n9 Ep_~OU1yE&bš^q?qendstream
endobj
-1461 0 obj <<
+1465 0 obj <<
/Type /Page
-/Contents 1462 0 R
-/Resources 1460 0 R
+/Contents 1466 0 R
+/Resources 1464 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1393 0 R
->> endobj
-1463 0 obj <<
-/D [1461 0 R /XYZ 85.039 781.388 null]
->> endobj
-178 0 obj <<
-/D [1461 0 R /XYZ 85.039 761.463 null]
->> endobj
-1009 0 obj <<
-/D [1461 0 R /XYZ 85.039 671.062 null]
->> endobj
-182 0 obj <<
-/D [1461 0 R /XYZ 85.039 671.062 null]
->> endobj
-1464 0 obj <<
-/D [1461 0 R /XYZ 85.039 639.536 null]
->> endobj
-1465 0 obj <<
-/D [1461 0 R /XYZ 85.039 609.512 null]
->> endobj
-1466 0 obj <<
-/D [1461 0 R /XYZ 85.039 596.568 null]
+/Parent 1432 0 R
>> endobj
1467 0 obj <<
-/D [1461 0 R /XYZ 85.039 568.864 null]
+/D [1465 0 R /XYZ 85.039 781.388 null]
+>> endobj
+174 0 obj <<
+/D [1465 0 R /XYZ 85.039 596.451 null]
>> endobj
1468 0 obj <<
-/D [1461 0 R /XYZ 85.039 555.315 null]
+/D [1465 0 R /XYZ 85.039 556.288 null]
>> endobj
1469 0 obj <<
-/D [1461 0 R /XYZ 85.039 495.746 null]
+/D [1465 0 R /XYZ 85.039 512.651 null]
>> endobj
1470 0 obj <<
-/D [1461 0 R /XYZ 85.039 484.318 null]
+/D [1465 0 R /XYZ 85.039 483.432 null]
>> endobj
1471 0 obj <<
-/D [1461 0 R /XYZ 85.039 470.769 null]
->> endobj
-186 0 obj <<
-/D [1461 0 R /XYZ 85.039 409.747 null]
+/D [1465 0 R /XYZ 85.039 458.455 null]
>> endobj
1472 0 obj <<
-/D [1461 0 R /XYZ 85.039 388.55 null]
+/D [1465 0 R /XYZ 85.039 429.235 null]
>> endobj
1473 0 obj <<
-/D [1461 0 R /XYZ 85.039 347.238 null]
+/D [1465 0 R /XYZ 85.039 401.531 null]
>> endobj
1474 0 obj <<
-/D [1461 0 R /XYZ 85.039 331.568 null]
+/D [1465 0 R /XYZ 85.039 375.038 null]
>> endobj
1475 0 obj <<
-/D [1461 0 R /XYZ 85.039 304.469 null]
+/D [1465 0 R /XYZ 85.039 347.94 null]
>> endobj
1476 0 obj <<
-/D [1461 0 R /XYZ 85.039 276.765 null]
->> endobj
-190 0 obj <<
-/D [1461 0 R /XYZ 85.039 248.557 null]
+/D [1465 0 R /XYZ 85.039 320.235 null]
>> endobj
1477 0 obj <<
-/D [1461 0 R /XYZ 85.039 227.36 null]
+/D [1465 0 R /XYZ 85.039 293.743 null]
>> endobj
-1460 0 obj <<
-/Font << /F20 937 0 R /F15 951 0 R /F14 969 0 R /F36 955 0 R >>
+1478 0 obj <<
+/D [1465 0 R /XYZ 85.039 266.645 null]
+>> endobj
+1464 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1480 0 obj <<
-/Length 1436
+1481 0 obj <<
+/Length 2017
/Filter /FlateDecode
>>
stream
-xڵXYsF~_o\9tLU
-UW>Tu)" L @2R8 {] zbtLyzy@^bs%+\Ox#}ERAcd!5
-\PF"Tz Gt% "[a11ҪY׉Hx;ݝC ɶ$ʒ|]uc*iivcՐ!$mkyk!ٓ
-|YVdrʂ={]wFʇ-ƽ&Xi)MVԋR |c
-G]bz%Ե?<猣 Xh. :SMJn_Xtȡ?0/<ibَ~q!>8u+;J- KqnwL:/u`lk-O v_sڑg[r¨-%ﭏ^߽c `?B~b6trQ<|-AqJNIJ
-?x`(P+x+ZV`2_E a{&eb1sLqqܞ^gy]'''6x<Q}slPx =}XNC '}`yog#sxEendstream
+xڍYI6ϯ0CdVDQk+rP=$=hlyF,m\챘 @L|9j?8Tj;%XN E82XܘMIVޤRձҼ޽%MVi^mFJWXo<z2:*_oT`7ooyk^xCdI8KҠE^Y}U(|2NRNJ~ B]ӣE̞dM8U_ѐ8*_$'ꘅyӜ/&˪hFL47X4&MZE;<cw6LAN_uI`s *qqSII;O@5ǼNK8SE')/ Yě*P
+ʹ&L4> (?^ZkBq<?pE#,4GXLL<!ɓS5G*nAyǕ΃h^jb]j{KTRU^0;X)
+ .]F3͡bg4[z FP DB
+p81MnmimvcKO%s08=,EW0 %e ϣYԟA<Bܬ|~3=ހܿpmRh=MOEQ 6;Q_TJA Ē,IlY#ˬB>wxa/3ety:^A3,/N=Sdrq)ctE?6
+{6M1r̾=4}DBR_:
+pbR5EN)=.2lsr<ōF86&ζA+MD*%.[&Ui_? +~v)({`G:voޚvR^~@)r0#4AX#$d[3ʕa:|ms%ܡ rŤߨ
+dzdr_rFU$-ܑ,&! V65x1cM=?rɶ1A`3WAI>{RnMgskb (CkTXfYBVBܜBBF<~3P48QZs
+SX I0wE ~vz/r.] I^נ+͍ʅ*sVAxrMJ 6Y
+kKVRq] :Gh#B.xl8_ț$ڈ`;LA~r30$}^M1XĆI1fzQOh rsϿBQ sOHcGD}LVlhCH˩=("_|p[H2$`2;cm~کAh:?f{?)+~'t˝|  a*k~ 8Rendstream
endobj
-1479 0 obj <<
+1480 0 obj <<
/Type /Page
-/Contents 1480 0 R
-/Resources 1478 0 R
+/Contents 1481 0 R
+/Resources 1479 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1484 0 R
+/Parent 1432 0 R
>> endobj
-1481 0 obj <<
-/D [1479 0 R /XYZ 85.039 781.388 null]
+1482 0 obj <<
+/D [1480 0 R /XYZ 85.039 781.388 null]
>> endobj
-194 0 obj <<
-/D [1479 0 R /XYZ 85.039 635.626 null]
+178 0 obj <<
+/D [1480 0 R /XYZ 85.039 761.463 null]
>> endobj
-1482 0 obj <<
-/D [1479 0 R /XYZ 85.039 615.492 null]
+985 0 obj <<
+/D [1480 0 R /XYZ 85.039 658.483 null]
>> endobj
-198 0 obj <<
-/D [1479 0 R /XYZ 85.039 135.961 null]
+182 0 obj <<
+/D [1480 0 R /XYZ 85.039 658.483 null]
>> endobj
1483 0 obj <<
-/D [1479 0 R /XYZ 85.039 104.435 null]
+/D [1480 0 R /XYZ 85.039 613.409 null]
>> endobj
-1478 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F15 951 0 R /F14 969 0 R /F20 937 0 R >>
-/ProcSet [ /PDF /Text ]
+1484 0 obj <<
+/D [1480 0 R /XYZ 85.039 570.207 null]
+>> endobj
+1485 0 obj <<
+/D [1480 0 R /XYZ 85.039 543.714 null]
+>> endobj
+1486 0 obj <<
+/D [1480 0 R /XYZ 85.039 516.01 null]
>> endobj
1487 0 obj <<
-/Length 1247
+/D [1480 0 R /XYZ 85.039 488.911 null]
+>> endobj
+1488 0 obj <<
+/D [1480 0 R /XYZ 85.039 416.537 null]
+>> endobj
+1489 0 obj <<
+/D [1480 0 R /XYZ 85.039 391.56 null]
+>> endobj
+1490 0 obj <<
+/D [1480 0 R /XYZ 85.039 364.462 null]
+>> endobj
+186 0 obj <<
+/D [1480 0 R /XYZ 85.039 277.063 null]
+>> endobj
+1491 0 obj <<
+/D [1480 0 R /XYZ 85.039 242.317 null]
+>> endobj
+1492 0 obj <<
+/D [1480 0 R /XYZ 85.039 187.828 null]
+>> endobj
+1493 0 obj <<
+/D [1480 0 R /XYZ 85.039 158.609 null]
+>> endobj
+1494 0 obj <<
+/D [1480 0 R /XYZ 85.039 117.961 null]
+>> endobj
+1495 0 obj <<
+/D [1480 0 R /XYZ 85.039 76.707 null]
+>> endobj
+1479 0 obj <<
+/Font << /F20 937 0 R /F15 951 0 R /F42 967 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1498 0 obj <<
+/Length 1536
/Filter /FlateDecode
>>
stream
-xڵWo6_7KĒ5,YW$z}IHJ,DRI^㑊()-~epN1fN
-ofܹ?fppG2Gxt>Y3guYVřa$uWoD 䐽yzD?lK&}sqfs kD9B٧هQ
-InMK!Y*b9KS9v֗PGAKU/x_j~6'ɒV9V |QFnT6PvUWMX܎#oC;=FD^uzV;//a]=nAR5=S>.LFDN,a|6KELھHDN LKܦ5x7ˮUwv/+j@hA;MGjw
-Rr{GpSӖh -w$],-u~ C4*ǻ^$[X\q .q!:.s?QGv%ۺno
-S]C^EGVc'\*˗ Z&Tkt\ AGeAN,NqiM'p`.# +~W}㭪2~L.%"1>qCxct2(
-3
- mc*]m/cw@NU uR5wni:s{_)-}kMMM@1 Lb0TCO,~Y6Q];HtjL`l-nЦ}5tt{6=2#>)ߺs0z[nCW3E J)qmNHO{Sqq0e^~ ɀa4 ?<h@endstream
+xڽX[o6~[bEe"Y[ݺ-_Y$Nw.$'NPt&UijDiJt:N
+N~HX`j6yyi Efrc6j:[|^~bIz7LK+L|{u\{N=5.@wP,`
+ ,Vv_N>M>LO);G 3Ei,b)tz,"8"3f 5a ) 7~ Z@T+?NzɿWD,x6u՞nȏS!i_P1UZTr*)poA[:슆/2E˻-ԻK~
+o2Kka"9/ PK0!H1Eyr*IX3ahM8(9x^6@g@MkWU݌Q^9{ m'ۂ`b .BjoXVI U7R`Ϧ#]>/Tk%^+K:ۭ7术6X={L;' g~M0C8 !8xWGq;tnæ,Y82BY֫</;fbwuw#׃i۬e 3],nQɒW9&?^ K?|6](g!
+-L;tx W?B~˽eh.HO(!W
+U}]u\y}a&$AzmԟiL;|otlPq yDQ-|5Vs7+Ic28) !q&j3`ȝwVbS<FuEܖwg^*4 -IoF'htpb^Uyu輭`ۊ+h;|o1`RNX4"q]3@^n#"u6<w443v=oI *,d uuwhI8/ )>hQT߱!O}F=XDi)$ڨ>ն>S[qX C,N*'h{/. }a#TmEt;q" ؓG> 8V4Y5*/lah`endstream
endobj
-1486 0 obj <<
+1497 0 obj <<
/Type /Page
-/Contents 1487 0 R
-/Resources 1485 0 R
+/Contents 1498 0 R
+/Resources 1496 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1484 0 R
+/Parent 1432 0 R
>> endobj
-1488 0 obj <<
-/D [1486 0 R /XYZ 85.039 781.388 null]
+1499 0 obj <<
+/D [1497 0 R /XYZ 85.039 781.388 null]
>> endobj
-1489 0 obj <<
-/D [1486 0 R /XYZ 85.039 701.758 null]
+190 0 obj <<
+/D [1497 0 R /XYZ 85.039 761.463 null]
>> endobj
-1490 0 obj <<
-/D [1486 0 R /XYZ 85.039 674.053 null]
+1500 0 obj <<
+/D [1497 0 R /XYZ 85.039 741.134 null]
>> endobj
-1491 0 obj <<
-/D [1486 0 R /XYZ 85.039 649.682 null]
+194 0 obj <<
+/D [1497 0 R /XYZ 85.039 375.387 null]
>> endobj
-1492 0 obj <<
-/D [1486 0 R /XYZ 85.039 620.462 null]
+1501 0 obj <<
+/D [1497 0 R /XYZ 85.039 341.704 null]
+>> endobj
+1496 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F42 967 0 R /F36 955 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1504 0 obj <<
+/Length 1429
+/Filter /FlateDecode
+>>
+stream
+xڥXo6_7̒(]\ )Elח$-B-9fٰ}w<RmI0'H1.'N &Yd</a(Ɔdܠ9^Męj>J: h;?p?wWqb6+ș௃;,Aɏ$r`Ιl
+1N8Sז<+Om%yI[!}4Q,Bg,PD?嚈⽋ _ 7<=2tG>MpY qSqF8Kh6A%eR{fve 0šzصUI!]mYUmNk'/ < W[B)|wHvEye+i+>!iHP,B _i N<[Zjn]Fc=p(׉
+'(픂YR++ۤnҼ^XLA?AԴ\D"B&"o/B7ɢL1BMC 0vDOMн,"! _jVe͆~[RvgVxp3*Cɸ@(89/?;ʐCmh{|bBزcг{1yP>4SM|cu[.!p}We<u4!Q{<YhH7өA귴q5Hj^'{xY'1Њ9jI%!V ӌfûav\Ӌ?E[,7Q벦KTJZ;{IҠ9$b)TQCa,RQ4K/NAޓ7n
+w7~TlnAc-l:FH1q6!ҫg(Y8&WVWş0Y_pWO"zX^S:F]"d_ks8<<(iѵOh ȏH~!Ҳn>ߝ8BG鎐A(H#'VC)6aqz==.zR ҇ za}:m&O/U̚yfGmNՀ3f-UzioW&J7p0P&.wOpI:bH,=*ɲPiCD%]p|B%{lB%6ęzBGBNF:tx
+Qb]+xCtMCv*DA1>RVcɥmFۥ=ܫ>5]A ُ!FeAQ
+endobj
+1503 0 obj <<
+/Type /Page
+/Contents 1504 0 R
+/Resources 1502 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1511 0 R
+>> endobj
+1505 0 obj <<
+/D [1503 0 R /XYZ 85.039 781.388 null]
+>> endobj
+198 0 obj <<
+/D [1503 0 R /XYZ 85.039 404.5 null]
+>> endobj
+1506 0 obj <<
+/D [1503 0 R /XYZ 85.039 359.426 null]
+>> endobj
+1507 0 obj <<
+/D [1503 0 R /XYZ 85.039 205.075 null]
+>> endobj
+1508 0 obj <<
+/D [1503 0 R /XYZ 85.039 177.371 null]
+>> endobj
+1509 0 obj <<
+/D [1503 0 R /XYZ 85.039 150.879 null]
+>> endobj
+1510 0 obj <<
+/D [1503 0 R /XYZ 85.039 112.352 null]
+>> endobj
+1502 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F15 951 0 R /F20 937 0 R /F42 967 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1514 0 obj <<
+/Length 561
+/Filter /FlateDecode
+>>
+stream
+xڥSKs0W(ԪdIt h;^1S)m]=0LCr0iOk8Ҋ2aP9Zj0̻GD!fR&og@Q *:J%P7W_7
+!pNIZ7#ϟf!0{aJdZǪǸ?G@6aT~(:TI6KBNpҜGD 5z]SQ εP*&9( IW$xc3 {8o-wg=hRS^׹0WމTZT4
+of|e8O16x`\F3:M6faC2~miP!8v }:-".m X&޲MCs G~1+> 7& s,TdRx=|,0<S*q @'
+il"
+P>Zz\['tpwpMpԍ߉ӧ*lgu֥TVa@瓷P ^@hvqJg:nTXe 8"*- f {endstream
+endobj
+1513 0 obj <<
+/Type /Page
+/Contents 1514 0 R
+/Resources 1512 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1511 0 R
+>> endobj
+1515 0 obj <<
+/D [1513 0 R /XYZ 85.039 781.388 null]
>> endobj
202 0 obj <<
-/D [1486 0 R /XYZ 85.039 563.944 null]
+/D [1513 0 R /XYZ 85.039 761.463 null]
>> endobj
-1493 0 obj <<
-/D [1486 0 R /XYZ 85.039 543.353 null]
+1516 0 obj <<
+/D [1513 0 R /XYZ 85.039 741.134 null]
>> endobj
-1485 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F15 951 0 R /F14 969 0 R /F20 937 0 R >>
+1512 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1496 0 obj <<
-/Length 2960
+1519 0 obj <<
+/Length 2495
/Filter /FlateDecode
>>
stream
-xڵZ[o~_(ut =݃&}h r, "l}F}(XpHo.J|_|SaoTiYlGX8< ,B$2ē0Q*uD)n(,aOnQn/wPAs7+~|_ݥqߥQ0@/>>Lb {; S&|uYfL0f?f= `N[o(rOyK 7q\<}ʲfʲ 돆);-)Xww0< S%/;hY-l`*so5{0s])h^IGx$k+Gŏ{ *Fk[fZˣ+h**@(A'Y uz3W;Uo (Z0#WC}
-m$d@PC[i4 F Nd[HbHb(72\W 3?1_XM
-j&Z) bE6;h %}h .LCV?DףeW/eu<6
-OyXYO W5S[{L7?}-^"cσV^t'][+=qjՃ jwr
-tZG+~d[S!⹏SgCdÜ;F²N^MD%(Ga&U7&T5 }9Yэg`΍MFݙ;vfΪ^F
-nX(-x$/9^Áb<,WquuĢi,$8qIK-=d7*\yI,DƓ("mٟ2^ncE
-{fqXq0X-\q>JRr1X){`ޮR;`"86*.iN-8kUB!%W9:s*mN`fb Ɋ%WnX
-ID>3]J.x$oA7#}\My`o.ȢX$ZrdQLdt7c}p9 6w6sPC /.߮uKvu'{,
-Z Xy,)ryn u^R 7y-ծێF>D˳L'e.pa$Ʒ^`^n$BQBe-H2`+v
-irި
-'\Ys_գ> y*E8̋ `,ͻr?âp4  wPyE+=JH+1`$ f3n] 'Ô)q<61$ef&CIjUH"39bYzR׻(pYsk "+& %"/ʯDAl7IDa]NG#hυZ»1# &A@#OTǡE$\bfO\bfvQҗR$.Qg s^Lf1 HUzZ9S7cuR UWˈ' m$aHFX6: L%O1Ҍ+b<GC+Tsr$b^ \ByNEbvW
-8No+r4~8X#%Uw)?=F~)-NevWW81Ux/}*3\銗<$G35{Y{yF$`Xedzpi{uOII?Qendstream
+xڅX[۸~ϯ0 Ċ$Bm&)MМ`}c5d΍e) Xp8?o"*7Cf~maobH3fi
+I*+2Ti<o_56I<"BᏠ,
+Ymwq0v"qrK}۪(yNV46DH~jNa+ߜ8sߜ$o1{0G]{O_SfR)6qQ驔iII*=aKʌf>M{qpB)6~:W#OH
+"̀4q$* ƎNv%t'wH1CZv;_nB ,$L`h'hk[~9?sR @[J V ivxbUVU;͍m}q/3*48X&3i,XaBAZem'iϿAǪCh4
+Lv(i s=Caҿ~u5>  EBC
+ԪGq
+41tc"!Ĕ(Cǀx۱
+|< '5;Olx݄TCDKM4*>TGC22mE\feiFыx<x2mB4"
+,> 
+p~o<fɫi';{RJȳ, Ύ@d yF̠(7h(Č
+:0
+qIO?kw<vB?iB54➡fV=QHVnye
+m}Za# Ӡ5
+vFep:RȃG,6J,f}"[
+8H<o4wA~+ƾWǵ\*x+
+L`ݛP?침$rKIRp价qL16akdyAEʤq]D1퐗۪鞟 s%=ve&~Fl3< u$[F.(~$<v6e\AqhW^J8HW9N"g^?뛷.|P9lJ(w}yݨ-Ȇ^.X# i=Bu .xJb@1uz@pƍZE ^V(~\^Ohl5C-gP92c6ݱK9Ws}dj9F*SWcGyi [t~%7&hk
endobj
-1495 0 obj <<
+1518 0 obj <<
/Type /Page
-/Contents 1496 0 R
-/Resources 1494 0 R
+/Contents 1519 0 R
+/Resources 1517 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1484 0 R
+/Parent 1511 0 R
>> endobj
-1497 0 obj <<
-/D [1495 0 R /XYZ 85.039 781.388 null]
+1520 0 obj <<
+/D [1518 0 R /XYZ 85.039 781.388 null]
>> endobj
206 0 obj <<
-/D [1495 0 R /XYZ 85.039 761.463 null]
+/D [1518 0 R /XYZ 85.039 761.463 null]
>> endobj
-1010 0 obj <<
-/D [1495 0 R /XYZ 85.039 671.062 null]
+986 0 obj <<
+/D [1518 0 R /XYZ 85.039 657.513 null]
>> endobj
210 0 obj <<
-/D [1495 0 R /XYZ 85.039 671.062 null]
+/D [1518 0 R /XYZ 85.039 657.513 null]
>> endobj
-1498 0 obj <<
-/D [1495 0 R /XYZ 85.039 642.326 null]
+1521 0 obj <<
+/D [1518 0 R /XYZ 85.039 615.228 null]
>> endobj
214 0 obj <<
-/D [1495 0 R /XYZ 85.039 556.019 null]
->> endobj
-1499 0 obj <<
-/D [1495 0 R /XYZ 85.039 529.405 null]
->> endobj
-218 0 obj <<
-/D [1495 0 R /XYZ 85.039 157.959 null]
+/D [1518 0 R /XYZ 85.039 515.372 null]
>> endobj
-1500 0 obj <<
-/D [1495 0 R /XYZ 85.039 129.161 null]
+1522 0 obj <<
+/D [1518 0 R /XYZ 85.039 475.208 null]
>> endobj
-1494 0 obj <<
-/Font << /F20 937 0 R /F15 951 0 R /F11 976 0 R >>
+1517 0 obj <<
+/Font << /F20 937 0 R /F15 951 0 R /F39 974 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1503 0 obj <<
-/Length 3295
+1525 0 obj <<
+/Length 2920
/Filter /FlateDecode
>>
stream
-xڥZYsF~ׯ`%`ʄq*eK^^V
-^__}фG9,
-7HznE~|漇N UN%4ESr߁xQE6=C[(wv:1u{~TW@&pbPfB~ /iLgf7}TM;|AgQ;=lMw/{VMU$͝9UˢB?ᨡ;EG
- /Yl\khFal£Eg)fL
-6
-Sj^*Gq8
-%h q
-l K@d|M˿8CY<a#(7h aa 28 lo3&秌J/ x CuuÀxFzjzzv'CX՝<d;B3f]E-9 <1K| ޿6r>LT 3OR}4r^bV1nv[Zc#m`Ǽ# ZAؚ#1U3K6{!UïQL
-[D>:,r4H>NO%t0U5<"E#?ɈYȎ ݳ[IO+%BGZ#$^c=Mp}r=4A]ڮY
-\ OZLt,a߸`-.r#@!
-( SqУLl8P~1 tl(9zϭ(:bY J^|w`Xş6s4{sP)[i=:-rfa N \Xp5 e%^ 1qL L/1 :N;"?;(.Y
-&Ӝӑ\ V'
-;$=\TTlQWY$s qZSae򥆗wO 8EXkVDQ2"pц;xrM^
-^>-hq}םdtC)
+xڥYYs6~P%T*fxgש{v٭$0IIL(Qa~YF_ƒE^/w,[ o\Bq%$Wͻ?OFqx(u_Wa:J̹^û-?_oo 2ǟ?rq`d29
+ů{s<[`>,o/@"7Bn./eXZ]sW~Aߍ( Q칱R7\^ű|A/MNRU]GM4$c=l@ Ehv׼L}s%zDŽ{k2h7
+]˿zR<(wK8R +$B#,8-fS;X~YPؕ&I-vj=7Ϗ@QK }x.+U 2:ߢ7\3g4 DΰǩKi՗Rf3p0A'`P|O40XKm U(7Çf
+_[ş- pSc`G N5{Γl SuH&͡gQ ׶ [ 8';LN oइ+4E
+N̂;+^q_1k
+3d$*[͚<ܝI#7;&(HS+|[ }I%VHF5{4hl0uJaD[\ 6t(┒^ <*
+ /8NǯRtn o=QFPz-i?L4#` xNu-+$]xӬFYOqqK_r]i Mzh%ҦDVjdm\ҨLFBIPqinT7iPBQņ#gI`GPqocFl8Iꎧ4Gޗ*`*FdR/y σ 5oR@J[:*=[*#0ŷ(Ճ^شzs\*KA1TC눙=ȫ]=6A@Yp<KTKXL`w,qkh
+2)"ZF 0F0΢?餧Za-uE  \e7Ȁ;FN7pV2tzF7yP=[y< Ɵ<wL,^D߸Ɏp/@{M>iVgP1ݰˣIILƐҋeQ'M.oWwʽ4 8Qp4́B6V٠=lexPijGkqAU%i6ිljfDOՑ~{_2 yO.Лֳ350|♣,{:aJ\&F@k dꉒ`[s p47GMPJ,RKUYx0 2
+o߳>G,ۖtϵA^v;aќm' q4~"~@k>gB7$,s!8qqEq?KGJM\RYyC\ {8
+MB7 &I#\#z-nfnAendstream
endobj
-1502 0 obj <<
+1524 0 obj <<
/Type /Page
-/Contents 1503 0 R
-/Resources 1501 0 R
+/Contents 1525 0 R
+/Resources 1523 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1484 0 R
+/Parent 1511 0 R
>> endobj
-1504 0 obj <<
-/D [1502 0 R /XYZ 85.039 781.388 null]
+1526 0 obj <<
+/D [1524 0 R /XYZ 85.039 781.388 null]
+>> endobj
+218 0 obj <<
+/D [1524 0 R /XYZ 85.039 761.463 null]
+>> endobj
+1527 0 obj <<
+/D [1524 0 R /XYZ 85.039 736.911 null]
>> endobj
222 0 obj <<
-/D [1502 0 R /XYZ 85.039 677.747 null]
+/D [1524 0 R /XYZ 85.039 545.001 null]
>> endobj
-1505 0 obj <<
-/D [1502 0 R /XYZ 85.039 651.132 null]
+1528 0 obj <<
+/D [1524 0 R /XYZ 85.039 504.837 null]
>> endobj
226 0 obj <<
-/D [1502 0 R /XYZ 85.039 431.455 null]
+/D [1524 0 R /XYZ 85.039 258.061 null]
>> endobj
-1506 0 obj <<
-/D [1502 0 R /XYZ 85.039 399.93 null]
+1529 0 obj <<
+/D [1524 0 R /XYZ 85.039 212.987 null]
>> endobj
-1501 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R >>
+1523 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1509 0 obj <<
-/Length 3475
+1532 0 obj <<
+/Length 3082
/Filter /FlateDecode
>>
stream
-xڽZnV}Wz1ps//ؖ3Gff Id[OUM
-$ }r??b 40No'izI]oNSB{R\-~s_f0 ԝ4s.|l;~E%ozy.E,ȜO_>~dyFI~yv@et}šG_O~/:Ŭלs?w >4&H i?-E0JId6c9/'b:[z΢d7͟=8 ~|+"A:2׏˹s[WeT7uʦG]񬊊:yo3-v[響vSK g íy",̹5q#h]ro,,>1* +s
-Rɛ=
-7\M_jwY dv^b0~B+ur/KM7}Qة ֺGjZB;f21[`h_]1Man{B07Dӕ4K'(5BLye
-0 2ք|8k$7B#F&a Q-Bh #>0p⇘@R6=6hu*zžVx<N"NI*M{U} e}Ȧۢ%p`m*}D/45w62h#H;HԝVQau=v );0q4e)sEԏlgX;Yse`|֘~|y}6;LB>z>z$㗬2
-*7b$R{(aQ@ahY4:wԈOVZ -S)qpbx4u̩V! <D$1eذDPki.[qQN+s+*^-a2KW8[
-3az]K3%bW"uabцϵK<iuG<'ex÷eJ؜3=
-惗`>M0^o8F|DF!Qx8~㯈 [C(a0E0Q%Ϻvyu137)t uƚhޭ0l2p/jIlg64Pvݬ@a
-|v#{- 'K|,LʨN,'jo,u3OdŘG2ms`&&5!cWZ!rqJ* 3ܐģ%a2u64p_hl,﫡6Q`*ځR:Uc|n2d*I>F}E`Pzla[$cQ:
-wQYodY<@v YYn?:ltYUj]4%4BSt!MZsCe9)<}bx -6+]82M"XC Im7\ dU5cL!c<HTo52}[JR閛4y@$ _H݀p\D \n>]S$H(h8iM Ҩ1\e Ήpe F:w`1v- eAV-]J/;u娵PTZeV`G(tbd<ȉlD?R@N;ljAOmJDݾmUƉn1m')aSm"i,c5wSH>PvZղ<gar \Sim*1[IF0 FbQ7ATp'r,kp.4\r|Ԟ]v/Fn1xz.? X
-sTXj^±d;XFW=1ubP&yI"]<?] ,#HLP-gRVЊEK 4b2~[xh0lbv'k4
-'eϷerqy;Mirc,?ͤ}ݕrjOIȫ1@R7I?PhxQ&/c2endstream
+xڭrF`* -yW)GJl[I#$
+͑t ȣĩ?8p .MS<ʛC1B`do]"g}Y0'ז5K7^r⽪fn`';ʂf qAuEYyDO@-
+®A22:qU;%[ 0Zޒ8s[-xv+=]j`Ht7Mеe!a񲝒8OA3uֺBIZr8!^% ζ}Mu%
+ya(v HaU~\g\և]~ݐ+V |7j{ }֢h}Da }|24`~>wp?=cq+c¢?z,uB*G@,<a.U
+ΒlًrV֜g4<m=
+ǝ )bnp[ZF)6f`eQ tTǹG1YVT5@Kdl_CoX‚PyM~@ZD)G7<'i%©#k k
+N#b8Dِvѹgb(Ǘ" ̆
+A
+)7H3 {~~\r>Ǹ|g&
+BpA2AHpm@ }ipL
+#H(Ոn/!$!zb4{KSCH\ 3NP߾a..B/uc ^>6
+cwZ MYޮ
+G15BG\u`G4f8@e{i4)
+8Oj15anhSHB:T |94NKfYg+
+=x@e1t€rM!q
+\%NQ"
+wl
+RϊbbTc8Æ32'{,׍(ϣ}_Sǔ?F>|+ra9dj4Yp(sD72CpyN&[NKV
+EӐVbB,v~Q]3lI2zˊ7sV'4+2N&$lXU?ď%y 8
+}vmДս|-7hNde;)=C|SUjdE$
+URS7ʍ!Lwny߷pGþͰc$ZHc:NT-}+i!| rC{-> gGe %8ɂx՝y҃#%DIϦ
+շG3ӏ\9445ˎs5um-\rg?p<ؐF=7oe?j$=WΫ!>qQ6дEN#˾?a{}py`_?T68auTGo@=y |G9C }c=]<[B)%~5 2411KH2fK*\2'b Doٜ;ctz+J; 3(b_(\ Fm o{Ry X1Ve
+ +pzX4+BFy5+VP6
+Q0ttkBX4b(g Ob%WovćM^2V>G wRҲEێƼ:1=7]?]J*7= F$Z*:%
endobj
-1508 0 obj <<
+1531 0 obj <<
/Type /Page
-/Contents 1509 0 R
-/Resources 1507 0 R
+/Contents 1532 0 R
+/Resources 1530 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1484 0 R
+/Parent 1511 0 R
>> endobj
-1510 0 obj <<
-/D [1508 0 R /XYZ 85.039 781.388 null]
+1533 0 obj <<
+/D [1531 0 R /XYZ 85.039 781.388 null]
>> endobj
230 0 obj <<
-/D [1508 0 R /XYZ 85.039 761.463 null]
+/D [1531 0 R /XYZ 85.039 555.804 null]
>> endobj
-1511 0 obj <<
-/D [1508 0 R /XYZ 85.039 736.911 null]
+1534 0 obj <<
+/D [1531 0 R /XYZ 85.039 512.851 null]
>> endobj
234 0 obj <<
-/D [1508 0 R /XYZ 85.039 586.167 null]
+/D [1531 0 R /XYZ 85.039 336.61 null]
>> endobj
-1512 0 obj <<
-/D [1508 0 R /XYZ 85.039 556.763 null]
+1535 0 obj <<
+/D [1531 0 R /XYZ 85.039 291.536 null]
>> endobj
238 0 obj <<
-/D [1508 0 R /XYZ 85.039 446.667 null]
+/D [1531 0 R /XYZ 85.039 169.493 null]
>> endobj
-1513 0 obj <<
-/D [1508 0 R /XYZ 85.039 420.052 null]
->> endobj
-242 0 obj <<
-/D [1508 0 R /XYZ 85.039 158.125 null]
->> endobj
-1514 0 obj <<
-/D [1508 0 R /XYZ 85.039 128.721 null]
+1536 0 obj <<
+/D [1531 0 R /XYZ 85.039 127.208 null]
>> endobj
-1507 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F11 976 0 R >>
+1530 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R /F39 974 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1517 0 obj <<
-/Length 1921
+1539 0 obj <<
+/Length 3359
/Filter /FlateDecode
>>
stream
-xڥXr+Tڄ)|r<85$nM,Z$e
-I|}p
-A߇_0
-/s?q>&E W6iF{a.u2}i5 `A©rE诖~L]&I8׋X'v/B
-:ocI^F$*W(uW2ڒIdvmÓ~ܝIQÒNM5W5F((n
-NxE-Jlt&85Ҙ6Ps#W~RE%nӦe\\9M/]
- ձ~n>'#ev*ݥ(8YSԜ4D(>5"e'd#}h-}r8[C˼#^ut
-_-d4 Hh}1 ~䬭A,՜<Cj{mmבY 7]F`Ș_c)$ 4FoBX>QJ ejگsOrmY󗂊\Ur\rQm5B7pfY;F vۧ=93&gG$B`'|gj仵V]"r!LjA@=lDPjJX13ڎ1evc%.:2kd2-Z)!q38ԝ5/I۽}Ukefy'=<j 8Pj0&O-C@
-QT/2Hd6 p"t%#_ - KKEg)sB>4K (`Dcnv 0yQZ>q9 p]d)eܛ-d`j۩AS*l+-/|JH!z=C’R]v^J\Fi<M*pkXZw|MɎot&t
-0^ڝ_
-hZ|ӣNx î@e\/4jK滼?ySz(rFz2
-9iXRz_Bj+`җ NyH@ݗU6[ K4t\Lto6RV@}?fi|_CRz 㿷)K?w^ NU ?|*77Fendstream
+xڥZYsF~ׯP%P>mU*Ri˩J
+=w]e=D,ZS40ՕYc,ǽv9 q0nZ)i'{HXkNHu~CĆv s9# vzi aI[:!hX-.Ǔ+)u`cե# y/e}2}I`GQZ4"}GSbR״Vn&90DD!Wڏ2\NE7b}^q5m*Yw4` 1b*Ṓ[@*Ȱd3΢Ntbvv PɩS F;Ff@f 1Lbt%.b KV|cP7Z ܠ禛NCzecB5MtNgݙ/wz$Pۨ Z:p$ޭk0RTă19@NWm8le%^\tTHiWF[2'0|p),*tZP+]^oJ}]?NOQ"D/r IEDRg #zEO]Hk<E
+Qy$WC8Ƽs$~H90k\q#`+ ۣ6rfeJ?48]}6HQn6d*a5c6AXn'{cݵNQ5W2BR+#<jFE=rdxa+8"A(mdm8LQ )k$-V,Tc}[H*N2i/N7
+,ƴ&|;c£;齪̕M-T?]Dc] ǰd*ҴQYY1) n[AW}E\!$d Fd(>~P+UgcQ'FsKBx"s)1:N t(F1धy0j)IzhSi~SGirgc3֡D(}MbH1so\9̉5~ 2@6rd`aE@B֭R':IΆLcybt-
+; kyS`83Y1ӉgPcl D78,q:AFLz YVҮu-yK]<ǒэuX 8*'Պ*%Иwd6`+j, Kv6I}]jہ8ƞ:NkR<̡d/W>5+37} ,DW#Nq͕ J<&4diNqhςSQvnt-LXSi kR[T?B?RԅL lOLض tkO7dA8>R|4J:kMΜ7Rm<iDt0-
+zihW&sxV׍NǡM72\{Ut˃c7P%`JF[hY eL~ /ټ3;3 ]I;'KXVsIaSc܍n{źDeg|`aSj1>~9{7[N#GX)5иG!o 7TJ1s)[bƣxlnr0 Agj"ğ E)]6Z7KcOpT#ᱷ58x꯰DZ(j$x٨EDU#E,s޹!W =goi^4}t<o8?z"t%KnSٯҮTSʬVުJ?\23SYj 0dK|YY,co@cI*JK䈵\
+Ls("cFB|c2:W4DfPbz8oRh4 }δ\<|"4=%2Ԛ:$TH!Wزnt>=mXUTWy42X{•18/`ZÅu8)vAS=E zv/ G)#J^D6GLMoIpN3;}]i3[RHR1Ti:EBt?\Y>- ȦLڬs@NIvTL\ 4@/Xډ,ӟgVQN,5##J%WB;\9U:o q/x-3@}A(gjY<O-+Şl
+f.IxXɻq=(Rn?} $d#^.VEX+u-"G _I7#endstream
endobj
-1516 0 obj <<
+1538 0 obj <<
/Type /Page
-/Contents 1517 0 R
-/Resources 1515 0 R
+/Contents 1539 0 R
+/Resources 1537 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1484 0 R
+/Parent 1511 0 R
>> endobj
-1518 0 obj <<
-/D [1516 0 R /XYZ 85.039 781.388 null]
+1540 0 obj <<
+/D [1538 0 R /XYZ 85.039 781.388 null]
>> endobj
-1515 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R >>
+242 0 obj <<
+/D [1538 0 R /XYZ 85.039 569.353 null]
+>> endobj
+1541 0 obj <<
+/D [1538 0 R /XYZ 85.039 526.4 null]
+>> endobj
+1537 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1521 0 obj <<
-/Length 3207
+1544 0 obj <<
+/Length 2590
/Filter /FlateDecode
>>
stream
-xڽZY~_1,hއ$1ٱ CđD<;>UU7[ O꫺꫃E/0J뻲ôVw݆F{,O<˨}epiGEFYymNRI-,#㻯>&]E=>j(x\q0UfL2͎zOF{#2HE2qǿ̣e Mӄ8q~GD}XfilnFpbTA3z/ҙz&./~'r#]7P0YOI2:/giXhteLϙE׽~/V=- /ОiLF)W:_q 1:+u+_(A7d\1BGbcw[n$tԽ
-am9򸃙P-j:G˳$asJm'#L*ik@Jz[7@;ya-IYPqܚęeY+9Or0 rg:p{GہI)2sI<D4a@_/8+
-֚I`%&q䗗gb"}-D~ڱوF0yQlBlu,,a xھ1Slyj]#5Bq. y"Թ <v/oZu"Qf;ci};|u43/-w1P􊞿 UL:3_f8uĶ dd<6ٯ֌ l0^ #FW{ W@<81> 0V #os
-,&asHO=x$L~nxуwp~1 q />bg5.HuX1rYf$
-/
-#$e'lܜ7ʷtvwyVJ6rzKsq`K0zYSg$YkrHXwh;۫QЪz'ho
-.Eɳ)/0ʳ3l4ƥ;6 vyaR>L2=<ʣ%+8q Wet|C?t4Y N/;F!H2OW8Ek4> XUA_ %Zrk44OMw{$o NlaN64VFsjs&}vrg1,
-] +n8uf>
-?s3&ĥ*5JbREgF7ʓ Z=K`2e֚|TS4S' ig*N^r3x
- Zk#+=N)InlE > ; qM3N@Vc^\Noڽ4v2yvZ޺:Lºkr':S>Xg/uгt^WQO}@'F^#[d_: PV];'o]* )`JyD^"KĊ,bZęHĄńJ
- P'Zd*\vdY!P#?ޗn4ԙ/&S <{*C> >I5?-4n=Xfo__{K/q͊@iU&Y,+aD%v%T44
-7gFs҇DB5 %[daVV0=N~YK=Z0Nz8>
-k 9
-B"<r![ |;=iߪ+Z7Ǻ(~u@ .3 3*jԫ{QdK4soPgYfzq<įҜg|teYQycB@+YW=|3č2~جgFg)#Wιmtw2Ўx?mnV~ |?>u`.st_Te;#2 /e_DJ˶ډ/
-endstream
+xڍYmܸ _͇d|e%@ zaCshWM?hg3e`˗_I3޴X`-QEQCRE:Tyqؾ0XfZ:M1w, 4ߜ#{ U{DwIf;<:A"
+BN^(88̱AwUi`<BqPHʂiԌ//&"9$n(,r)4NIåyOQwvG?@~\"Jg%ϻ֟{i IAc,7аO\`#ڊ~3
+א$3/u׋'s`m?P֝F!;tܚ!.*#UY]4++V,r6Ggũ^l:wb:cmG׍ȧt- >_pEb5:4# %z]4!_1U.5%J6MќrzetF[A7ЦF4Mt>UA)x|Ƚ׹`TW*痿nSR.FɆ _Twl9J"t=Ry\*vƑD #yR
+"Zdd؛j8f8_ jP6hp~{gJוZ!ܖrd}-Y.tr>c'|uUOīլ`ĝuaZvAUTjFZCPr.==%-z2~)& whQ$ Y(Ҡr?*u- oi'%ƝJhDeU.Bۼ!a%^h[q
+xQQJaB0l1~0X飝8g8#xs]/ɗJyT~Ls}-<*{tL~5s2 ea `'@"pߝB H.xl! ]#х̱srJF@͍k}.2n2F=L"*xx` t;IĬwBe{WT QQ=ԶBowu1{-i(6$qΑ,+nWq+k O)J^arys+obokNGrd/Zexݪt1I|,BkYEBS
+|
endobj
-1520 0 obj <<
+1543 0 obj <<
/Type /Page
-/Contents 1521 0 R
-/Resources 1519 0 R
+/Contents 1544 0 R
+/Resources 1542 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1526 0 R
+/Parent 1552 0 R
>> endobj
-1522 0 obj <<
-/D [1520 0 R /XYZ 85.039 781.388 null]
+1545 0 obj <<
+/D [1543 0 R /XYZ 85.039 781.388 null]
>> endobj
246 0 obj <<
-/D [1520 0 R /XYZ 85.039 761.463 null]
+/D [1543 0 R /XYZ 85.039 761.463 null]
>> endobj
-1011 0 obj <<
-/D [1520 0 R /XYZ 85.039 667.044 null]
+987 0 obj <<
+/D [1543 0 R /XYZ 85.039 653.495 null]
>> endobj
-1519 0 obj <<
-/Font << /F20 937 0 R /F15 951 0 R /F57 965 0 R /F36 955 0 R /F64 1525 0 R >>
+1542 0 obj <<
+/Font << /F20 937 0 R /F15 951 0 R /F60 1548 0 R /F36 955 0 R /F61 1551 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1529 0 obj <<
-/Length 1084
+1555 0 obj <<
+/Length 1676
/Filter /FlateDecode
>>
stream
-xڥV[kH~yC5ь xnKzY[PJ%be+1=IMi)\o9S^ ̽4S22o=H^MHIbr2@AkR)[1{^L0 E&~fX̦:S_wX*1{{5SDO,f9+L<HFI? r}3 dgTym'Q8
-,', \?҉)l@fYtĭ37>Ԑ{?#cS1zܰ`7A0 ȺkAo`5ؓ@E'N^[_7 )fLTku= f|kmqS!ȳBr8Yf<;70mT4㣱rJZ}Gԥc :TD
-NdbJ[Gh[RukFG;^wsXY + c݈aH1"ܢ/*E
+xڥXmo6_a "Y% ؆$K}[b(b`,"$˿߽QcaP^ޑX^w8v#oW#_8f2\-G/U4=7r}PeŹ~}qys7AtEcv:x~;.q>x/߾~[,;:`G=ěI<>s}Xލ2W̋Nc5Į@j sR Lnv#͟Rb\dw2~F/^.6o<GOʉgo*q49~ON!1(7*\oYEQ7Rv'N:!
+d q7-:v+l=瘪M <rǼa65e}s`,CYdPi4A#GH-
+ 'f/FfjkiyH ^aN;=J;=ߩ"4e^<\ho[x#RH\ԏ 2X.-,)3}_=?)X ˮj3[c6b?d ;2^I"`
+u%s&\UgrdLm4^\nqyH9HޱOs1iy٬,i4arGN!uiO-HM;;یzޅ_͟*貤R(
endobj
-1528 0 obj <<
+1554 0 obj <<
/Type /Page
-/Contents 1529 0 R
-/Resources 1527 0 R
+/Contents 1555 0 R
+/Resources 1553 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1526 0 R
+/Parent 1552 0 R
>> endobj
-1530 0 obj <<
-/D [1528 0 R /XYZ 85.039 781.388 null]
+1556 0 obj <<
+/D [1554 0 R /XYZ 85.039 781.388 null]
>> endobj
-1527 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F36 955 0 R >>
+1553 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F60 1548 0 R /F61 1551 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1533 0 obj <<
-/Length 710
+1559 0 obj <<
+/Length 835
/Filter /FlateDecode
>>
stream
-xڽVMS0W(է-!R
-Nrai줞:6(?BL0Ae7̥eV@qC@hNuh!
-zcM(1`F1f=JwkZ]T=e#7!HBOel3R`ilIٮOoJl3gXd1$mIfZ<>DI[sojh.yaNw>8SL6a5xH~>Prmy>*F ֪|Wu.oķ&^ZHQ2|99>D7wH l=unea{
-wሚfsJs壵bvA?~ydcpjhc@\CiЬ/{I q$[`i[yܐj`y/tBw"=ݭN8PxkUa#V?Mvt2 g%׫?N| gV0'Eu$*(z@
+xڭVMs0+t} !c7M4p> ǾO
+N912p*!
+"_^!|%}6:Ђ2?hTT1Sl,j-tihè1Ln bx,woݕ7Z,ZrN[O27
+A}}4+"2iz팦Jhjtk 2Ej0UHCٺYpeeEy]YnZ']˻4,QڢY*yfe "5sE8! QshfI,5sz3Mb@+ɗgAJ7ٛwYSd>]vإ4/udv BHޑ>ڑ_% XZŕIp_8Ǹ.A\U"6<.󤤡`91U,Fvö767$V0Do|-KqcWXvW ]-Iű[^m(g ^@ ߺomun{VV7
+=Y^}A>Ty|bdJFeh+aH6t;(󣡴R ИceI0 e6W2A8MnqލP1x8#4YJQTj <L`ۖ\s w1bOn>m
+,PF2Ǐlךr{IN,Ug;cI/m'M,} HFU:uJF*]%+γOISL\'?
+wQendstream
endobj
-1532 0 obj <<
+1558 0 obj <<
/Type /Page
-/Contents 1533 0 R
-/Resources 1531 0 R
+/Contents 1559 0 R
+/Resources 1557 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1526 0 R
+/Parent 1552 0 R
>> endobj
-1534 0 obj <<
-/D [1532 0 R /XYZ 85.039 781.388 null]
+1560 0 obj <<
+/D [1558 0 R /XYZ 85.039 781.388 null]
>> endobj
250 0 obj <<
-/D [1532 0 R /XYZ 85.039 761.463 null]
+/D [1558 0 R /XYZ 85.039 761.463 null]
>> endobj
-1012 0 obj <<
-/D [1532 0 R /XYZ 85.039 667.044 null]
+988 0 obj <<
+/D [1558 0 R /XYZ 85.039 653.495 null]
>> endobj
254 0 obj <<
-/D [1532 0 R /XYZ 85.039 667.044 null]
+/D [1558 0 R /XYZ 85.039 653.495 null]
>> endobj
-1535 0 obj <<
-/D [1532 0 R /XYZ 85.039 639.536 null]
+1561 0 obj <<
+/D [1558 0 R /XYZ 85.039 612.438 null]
>> endobj
-1536 0 obj <<
-/D [1532 0 R /XYZ 85.039 639.536 null]
+1562 0 obj <<
+/D [1558 0 R /XYZ 85.039 612.438 null]
>> endobj
-1537 0 obj <<
-/D [1532 0 R /XYZ 85.039 626.656 null]
+1563 0 obj <<
+/D [1558 0 R /XYZ 85.039 586.008 null]
>> endobj
-1538 0 obj <<
-/D [1532 0 R /XYZ 85.039 613.106 null]
+1564 0 obj <<
+/D [1558 0 R /XYZ 85.039 558.91 null]
>> endobj
-1539 0 obj <<
-/D [1532 0 R /XYZ 85.039 599.557 null]
+1565 0 obj <<
+/D [1558 0 R /XYZ 85.039 531.811 null]
>> endobj
-1540 0 obj <<
-/D [1532 0 R /XYZ 85.039 574.58 null]
+1566 0 obj <<
+/D [1558 0 R /XYZ 85.039 493.285 null]
>> endobj
-1531 0 obj <<
-/Font << /F20 937 0 R /F15 951 0 R /F14 969 0 R >>
+1557 0 obj <<
+/Font << /F20 937 0 R /F15 951 0 R /F42 967 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1543 0 obj <<
-/Length 3256
+1569 0 obj <<
+/Length 2669
/Filter /FlateDecode
>>
stream
-xڵks6_*DIL&9N.MDR'|$d_>
-g%,HD"-^xn:`-{/ a_?eh.`K
-f|uTeL`OVIܖ9 KF;hOѸ3GV[ިj78mxrQx KJ-1bvW `qxF P!"ȧF'"-rlg<٥b}
-3tRw*Ņn1>Mn=],jYV۶Wh~@4$l9Y[/S}ʪEVF-|8:4ONl(V!tk
-ō
-W{'+YͶdFI ;'E8i /WXPC
-OSÂqzBz'1:(qGt-e kCHŠs}^.g8-_!/kTldîJ=g$VF;]U0)7R=/wʎUp'@`x{;#r'goVt'溓}>&q*=z@n`l·~Mkܾy@t4 Wӑ;r](Q
-@c41ld &H #ݾYʍHI#<=B^]U;Di7.OxÝg0a;kځ{n8‣7< K\
-hǶ"8)lھR)zTcTo7Ȓ;Iٶ
-6HtLZ,ۊPgU FU
-̐-
-GUyT&sF0NH{Ano!Fƍ@X7N:U^6,JA4?*ƞ
-rm=;xf@NΜ g$:MϺ{40n:mqY4%|Y;d"{lRCeHٓ?_Res:[b"WU1aYCL
-Q:1)zBZ1.jjwehQ&7>^~X,~~כMnEg'-s?C}apX>hL|}SVA1?u$=Ѹ1#NWpվ,GF'QvO躳@iUz^8mLJh+X:S((AWqวZ[񢐗NL,u`vJ j`ϘEf!W\>A23뗼ٱvR{MVzYvE)s#z/\odiHc,\z:'DfY0y'W(Zoӽ(4mBtMJJ+MqUwtDAΡ9Ǣ{9:WSaorPO6ݸ9 u<,ڦ4˘PvaLXgĔnEӅ1GSt*r\TmUQ€]0}D"o`3$NgA?AlJ;^>ܥYuvsmӊuof+6%d:٬zo]Ù'$Ew#TߧsL
-!_noZS =T2z6j)4-N :A$^t8Mt>NօKԈK &MwGCM5
-?!<G֐N%MyuY]/LleF'e95psjR?>=>c vhvy!xH=KSz#ɷ:Ǘ6aW@+0.7_P/Xbn5OgӑxJĨ8Рuh-!2 {:DmҾ5O)a ۦ#mW[te0t2*uB ䷵rzJ"=s;ƶR0dBoUڶyr/$BȤ9tJvYGۧ0hǹr;qD o*EkyH$0MDx;jXv+HR._k LCnQ,\'ΩG/KgsvcqZLPPŷG?珋%z\*"yZx
+xڕYs6_K
+"~&I]7Mb>P$EqB* 9K@Q\,]`9s?9dR8e+wV̻+i8@a<1M=L%|Z3afƮ`u;_ܭ Ft\:i0Gf5y&m;[xJ{rD"j YD8+ d!{
+æ$Q/1P,qSxr]]Te;Vj Z
+%ёTlr2e{N%2Dڌ R."C뙀"yN7*SVG"Uc`KLeHX|]QA9[<
+v9aQȲr*uF&J
+]WV֍MGdg,֮]cxY\lai]t́79T
+m„:CO^X sWߙL N:IЕD/Ge_*?PE.T叿mCtZpf5-ēc+ޒ{KhGȘ;m7Qۻ,$ܜ9eH3cV3/ {wc5J!2^e#'<VN6})j.֛#m3&W0C x^3ޏ][($CՒ'T鞉dTFb`ouT׸讵 :b*$Ej<|
+[+p? @#ngC]nv&c`yO-;xhPp<:ߴA9 ~'龉5@7
+RS}AUPJsXΔG
+idPvUt 5hގQR^X[s쯞z+,s 5L]26"Kן\/Vo7U'}3oD7qN?xJ2=IﯚYbw=XBzl߅'B$8Ef^e?r㸐I0I<x7^Xӻ*^$ԀyC[ňRs-ñ~ȴ]yad?";7y Np6UK}2mm(̈1I`<O(WԑO;92u*ڮ\fe:PMt2LhD\9~NQ^wI <W=yiN<(hK a,$h{lS(k}/mS^ei$S%H';52
+d`?m9j1K/k7QT1yH+em+;FʕLG WR-YE嶞(cx71_C!&4^]9>ݼCAf2EWr𕟯\ :"e}Z]RPaG4]x6±]7H~R4t]!y#:$GxM,PoXfJ _.ڧnԺ_gmNq,;)_l6aH$ˡnKȹ<z~(֢%Rp5@x-9 :ۨ|d@#k<p{aJSHl΁qiIqk 25|P^G.4VѦp~!K16=&NZ}/Veн*t N" 
endobj
-1542 0 obj <<
+1568 0 obj <<
/Type /Page
-/Contents 1543 0 R
-/Resources 1541 0 R
+/Contents 1569 0 R
+/Resources 1567 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1526 0 R
-/Annots [ 1546 0 R 1547 0 R 1548 0 R 1549 0 R 1550 0 R 1551 0 R 1552 0 R 1553 0 R ]
+/Parent 1552 0 R
+/Annots [ 1572 0 R 1573 0 R 1574 0 R 1575 0 R 1576 0 R 1577 0 R 1578 0 R ]
>> endobj
-1546 0 obj <<
+1572 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [418.678 611.807 512.306 623.8]
+/Rect [365.77 571.16 539.579 583.152]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://mailhost.cb1.com/~lkcl/cifsntdomain.txt)>>
>> endobj
-1547 0 obj <<
+1573 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 598.561 285.125 610.25]
+/Rect [84.043 557.913 177.671 569.603]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://mailhost.cb1.com/~lkcl/cifsntdomain.txt)>>
>> endobj
-1548 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [122.225 367.922 512.306 379.914]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://ntbugtraq.rc.on.ca/SCRIPTS/WA.EXE?A2=ind9708;L=ntbugtraq;O=A;P=2935)>>
->> endobj
-1549 0 obj <<
+1574 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 356.797 147.672 365.456]
+/Rect [84.043 300.176 509.849 312.168]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://ntbugtraq.rc.on.ca/SCRIPTS/WA.EXE?A2=ind9708;L=ntbugtraq;O=A;P=2935)>>
>> endobj
-1550 0 obj <<
+1575 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [122.225 340.823 353.306 352.816]
+/Rect [84.043 273.077 315.124 285.07]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://mailhost.cb1.com/~lkcl/crypt.html)>>
>> endobj
-1551 0 obj <<
+1576 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [306.355 327.577 382.391 339.267]
+/Rect [270.437 246.282 346.945 257.971]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:linus@incolumitas.se)>>
>> endobj
-1552 0 obj <<
+1577 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [122.225 300.176 462.621 312.168]
+/Rect [84.043 218.88 424.439 230.873]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.org/cgi-bin/mfs/01/digest/1997/97aug/0391.html)>>
>> endobj
-1553 0 obj <<
+1578 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [122.225 286.626 347.579 298.619]
+/Rect [84.043 191.782 309.397 203.775]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://mailhost.cb1.com/~lkcl/crypt.txt)>>
>> endobj
-1544 0 obj <<
-/D [1542 0 R /XYZ 85.039 781.388 null]
+1570 0 obj <<
+/D [1568 0 R /XYZ 85.039 781.388 null]
>> endobj
258 0 obj <<
-/D [1542 0 R /XYZ 85.039 761.463 null]
+/D [1568 0 R /XYZ 85.039 761.463 null]
>> endobj
-1013 0 obj <<
-/D [1542 0 R /XYZ 85.039 671.062 null]
+1015 0 obj <<
+/D [1568 0 R /XYZ 85.039 657.513 null]
>> endobj
262 0 obj <<
-/D [1542 0 R /XYZ 85.039 671.062 null]
->> endobj
-1545 0 obj <<
-/D [1542 0 R /XYZ 85.039 642.326 null]
->> endobj
-1554 0 obj <<
-/D [1542 0 R /XYZ 85.039 138.017 null]
+/D [1568 0 R /XYZ 85.039 657.513 null]
>> endobj
-1555 0 obj <<
-/D [1542 0 R /XYZ 85.039 121.74 null]
->> endobj
-1556 0 obj <<
-/D [1542 0 R /XYZ 85.039 108.797 null]
->> endobj
-1557 0 obj <<
-/D [1542 0 R /XYZ 85.039 94.642 null]
+1571 0 obj <<
+/D [1568 0 R /XYZ 85.039 615.228 null]
>> endobj
-1541 0 obj <<
-/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R /F14 969 0 R /F35 948 0 R >>
+1567 0 obj <<
+/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R /F42 967 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1560 0 obj <<
-/Length 2921
+1581 0 obj <<
+/Length 2435
/Filter /FlateDecode
>>
stream
-xrF`Ġ9K$c)5LJ 
-fE 7wܼ|;EQt6g /x}yo<z旳77f>w,<8UOgqIɼ:> !ea~c0*pd̏39'c7Tyhx~3Ӭ[Meլ7:8yUkaqf tMt[nu|
-+Y
-S|M(LeȘʰZC-|d$qs0W~:{aK9X5%I]7PtGʭC/(3}27SV/X=p-V@Kl n%0 h?x}N̰oA@QdU[p|atmc5gު%qQkE6?–'GbEeW +{P -  g$,UN^8s
-ssr~Ȇ-fFϖIntNqt9G'z~ziUzſ6ʌÓ+w ~/^ؓ-EWkްѕ$xz6ʅ9ΐPym*ڢF7 &@
- mc qBz죸8$F>8KT!Ll!)HOuϻ#8yڅDh ĺ^hkC[b
-$=\)oV}zW \@"֯!ٛy_t}^$(IH9e(g] ;d tuW.Ҋmpڰip?%6 UČҝaӜ%^5Q}gk>:T= I؏졏|ԡ({hpmp'54v(͂A #?g|0%j1zLjZL@m^םğX2PM4x`w`OQ l' B?Q˹9X+TPBV .
- N$&Ɩ_`U!P3DP@" xqShO
-ÿ8˖A:O-^~QG
-W, XuQ<]w˺h\lĀwmAL/]jՇĊ=`+폩uM:a7<By^_ڥ.jL !
-DgHqⵛaj2jHfHR' bto$O=Gmlĉo4nܜDa޷6<53RtFSz
-Vsorg@˖؂(J $o X "+\BvDf]D m]4Iu/G aS^ 
-$WFo>7sf
-F9EG_r%< v}]Aam5rj, {=u <G^`(LU3"=R`ׂ;5O{ pM14py5d[8 [JH$:`^ݕm  bAJH ~̇
-z8t~ɃfM9?\Swrfg{6*RRsRGRu-u}'p]"1M{< Dɦ坲vaP1ͤqLv΂L_R!"*$]n&KX>7a=&iC}ӁHIF ˆE,mD>\n=#9bWP
-kXvx&k=m2nΡSQ+>bw`]ކѱ@gJ,ߺ<@6ơk1*#l; bΎ5+-J 2m1̩JUSU$ H,eDeT
-{{ɒŴ1߮{?~*uIe_ٮOTD}?{8eO2IDžҳ *47I>S`Zendstream
+xڭYKsFW| Xe"x`d[W)K֚L0F$
+z:`>,W ՍP~WXVxץ3aIx~H?psc/CN~owO{yr<s a!p⇝~.,H8(~p-oTu#d^4U}s *
+e5z}U_#Egi-0GˮNA'V}/B1kܥmWc5($}@]k
+N<2ϏlZLdqzu=M/H+j RX9}r5~I4;08CR.VЭ_ЫNقi`[:0M1g>
+Ώd]%4<R0n iY ncLqd暿͆<̝8HGXf 6cO3nFcf֛qJ5@$g6Sb4s1/8J4[%-X:1tv8L!;V#;z8=cvS&<N"wē6ЌР QOI6gl>G6cf,sRR;<C ƗqN-IJy!Ĕ<kJ&N{rͤ5)
+_V#0ϕDhhR}V
+!Dڊܤ4dL^VלaTa]k "  {{ɀ2DK8Q*Hސ[r`
+qF"*8asfK#:2w]j? jp>g|銇,T V9.fbӋUJ
+t/(a#tsSҮUK ٢Y.yrJ s;8a \N:΀f{A=ހ]3lW( 'iF=7ֈ{a"^w~uOey)o<g70}[1ɋzBFldT*8ظ){kN̓۷!ΐ
+4 3cX9pL,{HjWl~9ɜVLQm/MJqEw1Hxjg{lܿ_9@7gESnHD#F W4?Xe'mEdQ6G%+NNavu:D@Պxkg[q'x@cIQ$
endobj
-1559 0 obj <<
+1580 0 obj <<
/Type /Page
-/Contents 1560 0 R
-/Resources 1558 0 R
+/Contents 1581 0 R
+/Resources 1579 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1526 0 R
+/Parent 1552 0 R
>> endobj
-1561 0 obj <<
-/D [1559 0 R /XYZ 85.039 781.388 null]
+1582 0 obj <<
+/D [1580 0 R /XYZ 85.039 781.388 null]
>> endobj
-1562 0 obj <<
-/D [1559 0 R /XYZ 85.039 761.463 null]
+1583 0 obj <<
+/D [1580 0 R /XYZ 85.039 693.318 null]
+>> endobj
+1584 0 obj <<
+/D [1580 0 R /XYZ 85.039 663.493 null]
+>> endobj
+1585 0 obj <<
+/D [1580 0 R /XYZ 85.039 637 null]
+>> endobj
+1586 0 obj <<
+/D [1580 0 R /XYZ 85.039 609.296 null]
+>> endobj
+1587 0 obj <<
+/D [1580 0 R /XYZ 85.039 555.705 null]
>> endobj
266 0 obj <<
-/D [1559 0 R /XYZ 85.039 691.864 null]
+/D [1580 0 R /XYZ 85.039 472.088 null]
>> endobj
-1563 0 obj <<
-/D [1559 0 R /XYZ 85.039 673.598 null]
+1588 0 obj <<
+/D [1580 0 R /XYZ 85.039 440.273 null]
>> endobj
270 0 obj <<
-/D [1559 0 R /XYZ 85.039 602.015 null]
+/D [1580 0 R /XYZ 85.039 356.266 null]
>> endobj
-1564 0 obj <<
-/D [1559 0 R /XYZ 85.039 583.143 null]
+1589 0 obj <<
+/D [1580 0 R /XYZ 85.039 326.373 null]
>> endobj
274 0 obj <<
-/D [1559 0 R /XYZ 85.039 483.287 null]
+/D [1580 0 R /XYZ 85.039 241.191 null]
>> endobj
-1565 0 obj <<
-/D [1559 0 R /XYZ 85.039 456.673 null]
+1590 0 obj <<
+/D [1580 0 R /XYZ 85.039 205.88 null]
>> endobj
278 0 obj <<
-/D [1559 0 R /XYZ 85.039 456.673 null]
+/D [1580 0 R /XYZ 85.039 205.88 null]
>> endobj
-1566 0 obj <<
-/D [1559 0 R /XYZ 85.039 435.68 null]
+1591 0 obj <<
+/D [1580 0 R /XYZ 85.039 171.338 null]
>> endobj
-1567 0 obj <<
-/D [1559 0 R /XYZ 85.039 435.68 null]
+1592 0 obj <<
+/D [1580 0 R /XYZ 85.039 171.338 null]
>> endobj
-1568 0 obj <<
-/D [1559 0 R /XYZ 85.039 392.911 null]
+1593 0 obj <<
+/D [1580 0 R /XYZ 85.039 115.02 null]
>> endobj
-1569 0 obj <<
-/D [1559 0 R /XYZ 85.039 365.813 null]
+1579 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-1570 0 obj <<
-/D [1559 0 R /XYZ 85.039 340.835 null]
+1596 0 obj <<
+/Length 2406
+/Filter /FlateDecode
+>>
+stream
+xڥZKs6WTULj)ɁhetHjɯO7afLot7hbie
+#dv+:El,d\oI+YrǻFJr Ȼćn}_P12ꏿjzř 9|L+iOWWoHњZѮ)b#9"l͙檱;\9 Aj,ѪCia 3)9F)ekU4,Ya.cQ0YoWҺ pd|mGT]X)r/>Mratck6oIaOlFҌ6h60Fob[]k"4=v{
+ƗME\P,IA|,pkd]&~IN w1r603͞?88{"iYy  %\ Ҳ쑐ѢwI_5 4wf~p8ڡHI~pCia C>GwhjaQ2ԃ1A5̟G&}ɭ
+ ϣa2[#X\lpܶ8=,:%> LVKa"I@p2lκ[L^YӦ1S/?%W9fC3H*Ea֕^ BS!6MS@9qlj2glif r߸&
+kNس=gIXLfds24qdM3#r{ lrHL @=w''.3mN]A<GW2mF'$`Yڱ)g(^B>JN(OIUlӍM+of\0Řê`1v1LqA~^
+{B
+`ȸZҪC 8
+{{ i,aF\Y
+?Sg*\.pٰ̼S5Zbz‡)U}e2XVboI>;㛯$ws`>Ms8=|{bàR?qKS`PàY0#`D`s
+=nWbݗF6s夲aFʆd"db\R:ye-G)wR[/2wP=ˣx3PfHNT-3EfĿV
+@ŋZY--&~ sd?*}2 e(~]agOY8;Jhf$~ȂPYY̯kGFC֑/^"Iendstream
+endobj
+1595 0 obj <<
+/Type /Page
+/Contents 1596 0 R
+/Resources 1594 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1552 0 R
>> endobj
-1571 0 obj <<
-/D [1559 0 R /XYZ 85.039 203.222 null]
+1597 0 obj <<
+/D [1595 0 R /XYZ 85.039 781.388 null]
+>> endobj
+1598 0 obj <<
+/D [1595 0 R /XYZ 85.039 761.463 null]
+>> endobj
+1599 0 obj <<
+/D [1595 0 R /XYZ 85.039 736.955 null]
+>> endobj
+1600 0 obj <<
+/D [1595 0 R /XYZ 85.039 601.463 null]
>> endobj
282 0 obj <<
-/D [1559 0 R /XYZ 85.039 108.783 null]
+/D [1595 0 R /XYZ 85.039 502.781 null]
>> endobj
-1572 0 obj <<
-/D [1559 0 R /XYZ 85.039 87.79 null]
+1601 0 obj <<
+/D [1595 0 R /XYZ 85.039 470.36 null]
>> endobj
286 0 obj <<
-/D [1559 0 R /XYZ 85.039 87.79 null]
+/D [1595 0 R /XYZ 85.039 470.36 null]
>> endobj
-1573 0 obj <<
-/D [1559 0 R /XYZ 85.039 65.074 null]
+1602 0 obj <<
+/D [1595 0 R /XYZ 85.039 434.095 null]
>> endobj
-1558 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R >>
+290 0 obj <<
+/D [1595 0 R /XYZ 85.039 282.471 null]
+>> endobj
+1603 0 obj <<
+/D [1595 0 R /XYZ 85.039 248.327 null]
+>> endobj
+1594 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1576 0 obj <<
-/Length 1683
+1606 0 obj <<
+/Length 1482
/Filter /FlateDecode
>>
stream
-xYv6++S"x@vqOCJHq@E6GC)m ܹ\lLᇍ"Tر6c//#Fб$4Qjg:z~@'% ΣW/OXIcc|ztF,L<:O3%šxY;I%"FgWwr %8#("L
-{tvz2a8$#8Izcp??/y1.}7*Kek3311$kTO@?-:gzp8KO~lvr'D$ v".u%A"<酌kµXC'
-x#[ -eH }l3h998+i!o
-ul_n72 )#-x{(Ѭ-D|Ka
-!=-ثӖgσDЊ]Z; x~ g-k z?>9ؗ7&0
-/JbNZ T؟mA3WţKG4^<"sSndӯi-l+so]*LXkj!@[yq̯g
-yZè@̏T~|u{Ze)]'oӱ]֗YAq.fܽk~D!)$N$LJкKY[Ey6}.}C!7&Ŋ b%yʂ}|3ڸXfE2`2Wx;H\;FG{Xi "Y=#c߂.*RwXA:~W $s$?^pendstream
+xڽXr6}Wd&Dp'\֙J^<(mcKD5i
+Nk@ fz8UQf~74T&|wvXzSՐZze '0MJď/'xP`@ԳumͬZj ?f_C"}# 4c0NPrwc xoKUHj#Wi}ra)D=Z"V#xyoRqX"+[KD*̌*$ܟE84qaRIeD UA2_
+$SWmq ֫l_'-ϻ)3˵3ģ) 2[&H7,4^-s]nȀuu۸ />QEPW-p W鯫iwJ,[Du
+p;r]zqKg]D0QTw٧ܠ.l
+P`F#|t=!v
+B_1+yc?XGzU6L*z 6ވ
+~fK}@yo)Qa&ov(s]cbׇj^C@QBfn`6`ZL/]14iv: zII]lLku}ۻP(Mzsuu=9)r͉ҵr2Ltc@Q}_Qڂi ZiHѶRtŘ۩1
+|J^;vĥ t7zZ`"7IQJ gg(tO%j:ѥb盰#!e 8 9z v~a7Ll'
+ M8v# #3dÇ!]W SlV3:tV^F jpUS U!םVlGj~P>FFY=]^qY(R .%@^.r㟗)ikW
+%0׮0#47QV̓0n2CY^@ת;^)4}%z
endobj
-1575 0 obj <<
+1605 0 obj <<
/Type /Page
-/Contents 1576 0 R
-/Resources 1574 0 R
+/Contents 1606 0 R
+/Resources 1604 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1526 0 R
->> endobj
-1577 0 obj <<
-/D [1575 0 R /XYZ 85.039 781.388 null]
->> endobj
-290 0 obj <<
-/D [1575 0 R /XYZ 85.039 694.591 null]
+/Parent 1615 0 R
>> endobj
-1578 0 obj <<
-/D [1575 0 R /XYZ 85.039 673.997 null]
+1607 0 obj <<
+/D [1605 0 R /XYZ 85.039 781.388 null]
>> endobj
294 0 obj <<
-/D [1575 0 R /XYZ 85.039 533.8 null]
+/D [1605 0 R /XYZ 85.039 708.141 null]
>> endobj
-1579 0 obj <<
-/D [1575 0 R /XYZ 85.039 512.807 null]
+1608 0 obj <<
+/D [1605 0 R /XYZ 85.039 673.598 null]
>> endobj
298 0 obj <<
-/D [1575 0 R /XYZ 85.039 512.807 null]
+/D [1605 0 R /XYZ 85.039 673.598 null]
>> endobj
-1580 0 obj <<
-/D [1575 0 R /XYZ 85.039 492.212 null]
+1609 0 obj <<
+/D [1605 0 R /XYZ 85.039 639.454 null]
>> endobj
302 0 obj <<
-/D [1575 0 R /XYZ 85.039 463.398 null]
+/D [1605 0 R /XYZ 85.039 597.091 null]
>> endobj
-1581 0 obj <<
-/D [1575 0 R /XYZ 85.039 442.803 null]
+1610 0 obj <<
+/D [1605 0 R /XYZ 85.039 562.947 null]
>> endobj
306 0 obj <<
-/D [1575 0 R /XYZ 85.039 413.989 null]
+/D [1605 0 R /XYZ 85.039 520.584 null]
>> endobj
-1582 0 obj <<
-/D [1575 0 R /XYZ 85.039 393.394 null]
+1611 0 obj <<
+/D [1605 0 R /XYZ 85.039 486.44 null]
>> endobj
310 0 obj <<
-/D [1575 0 R /XYZ 85.039 348.304 null]
+/D [1605 0 R /XYZ 85.039 427.8 null]
>> endobj
-1583 0 obj <<
-/D [1575 0 R /XYZ 85.039 330.436 null]
+1612 0 obj <<
+/D [1605 0 R /XYZ 85.039 396.383 null]
>> endobj
314 0 obj <<
-/D [1575 0 R /XYZ 85.039 298.895 null]
+/D [1605 0 R /XYZ 85.039 351.292 null]
>> endobj
-1584 0 obj <<
-/D [1575 0 R /XYZ 85.039 278.3 null]
+1613 0 obj <<
+/D [1605 0 R /XYZ 85.039 317.149 null]
>> endobj
318 0 obj <<
-/D [1575 0 R /XYZ 85.039 178.49 null]
->> endobj
-1585 0 obj <<
-/D [1575 0 R /XYZ 85.039 155.168 null]
+/D [1605 0 R /XYZ 85.039 136.043 null]
>> endobj
-322 0 obj <<
-/D [1575 0 R /XYZ 85.039 126.353 null]
->> endobj
-1586 0 obj <<
-/D [1575 0 R /XYZ 85.039 105.759 null]
+1614 0 obj <<
+/D [1605 0 R /XYZ 85.039 99.172 null]
>> endobj
-1574 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
+1604 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1589 0 obj <<
-/Length 1906
+1618 0 obj <<
+/Length 1454
/Filter /FlateDecode
>>
stream
-xZ[wF~ׯ[l-ɉ9Zj_<  RQ;9f]fg )L'% ˁ9K00=CǃG< "4+㧗8úv>fūs|䧑vbtp9߃0x105ܛ
-rJGHQϋhG
-C~aXm7;0xaõ5Pl[#ݐ<?{~v T|)*@ɁbiIEgSYoEI ^! i90\L-g%R,ږQsb {YD`0fHJa)W
-CaVkiK,]e y r @v0D,%mKHZuKY_{ rk1rUoL4a&8
- |R߲vH%(ɺWrQ3"s~W|?\fj@U/L#݇WmuoОvHi91XJE%A7H4k}ıw0bkmtm2-Tr<gs}6q\C@N ={m~e9P;p{DhAü'i9ʜSH~ 햅lYRM0O3RYCS+g)v_"Ե=Fi
-N:Wd@;*B
-3H<mCjT3՜gendstream
+xY]o6}ۤ)RI)ФKܽyp,ؙ%ɀ(,G<=
+cGJ ̊T1櫇iYbB F.拯8q:y2c LJ/lǣs{}/Wtv#GI]y 0Èj 1"0V$8k7ٟPSSkl)PAE\ N't ̍IQJd gOҌ$Z<O`+젅$e;dTk ˲I)'_ ,qq>J/aI_` |3?[ܟ<;[̈0ȀxSmWKfҳ1JJz2n۵?f,* b'F܉3O?,[e6&r̺b1 ZWPm|z{ADqzLX)hPq<C3$FRK"m=)TW%
+/̰IJ BreP(~2ؾMmOpuNvZ$vrViGE.UTcM 8#h`!X\֘et1jC]e~jtgW
+בPЌaS
+Ō*8f:H-fDy#;.ƾ^N{lڤ}Feb3,N;mB-Kv9O|4;&.
+I!Gh;P9!PXJAife"f/6
+xi1jgp'
+K=(zAv8 pŘ;ԓs_c\!^ȨLX]o?n:r׹޾oQrCa6E&ft",fUweɥnq U6>2Mk]ՃcDAċk@s˳[? ^zk ,vo54>ﺱz :_ |le{G@ xt0`N1.A %O|Q$~1aJE{<)bg(VEi0!EDqߺP<v0qxe svuuH:YU{ NBCje8^*LX,8R6*Ԗʋc=#`` I}O ̚#eP㹒pd^{]j{!n)R "~a(`c?k56G;S'jo(oSp ZCfdz<ϭn6;o'BTR_.[A_6"ݗ rˆ8, {[v5j+k6^%t2\k+џpR,pp%ob>r)xql<?endstream
endobj
-1588 0 obj <<
+1617 0 obj <<
/Type /Page
-/Contents 1589 0 R
-/Resources 1587 0 R
+/Contents 1618 0 R
+/Resources 1616 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1599 0 R
+/Parent 1615 0 R
>> endobj
-1590 0 obj <<
-/D [1588 0 R /XYZ 85.039 781.388 null]
+1619 0 obj <<
+/D [1617 0 R /XYZ 85.039 781.388 null]
+>> endobj
+322 0 obj <<
+/D [1617 0 R /XYZ 85.039 761.463 null]
+>> endobj
+1620 0 obj <<
+/D [1617 0 R /XYZ 85.039 740.731 null]
>> endobj
326 0 obj <<
-/D [1588 0 R /XYZ 85.039 761.463 null]
+/D [1617 0 R /XYZ 85.039 643.909 null]
>> endobj
-1591 0 obj <<
-/D [1588 0 R /XYZ 85.039 740.731 null]
+1621 0 obj <<
+/D [1617 0 R /XYZ 85.039 607.038 null]
>> endobj
330 0 obj <<
-/D [1588 0 R /XYZ 85.039 695.985 null]
+/D [1617 0 R /XYZ 85.039 535.194 null]
>> endobj
-1592 0 obj <<
-/D [1588 0 R /XYZ 85.039 674.784 null]
+1622 0 obj <<
+/D [1617 0 R /XYZ 85.039 500.444 null]
>> endobj
334 0 obj <<
-/D [1588 0 R /XYZ 85.039 642.981 null]
+/D [1617 0 R /XYZ 85.039 455.092 null]
>> endobj
-1593 0 obj <<
-/D [1588 0 R /XYZ 85.039 622.387 null]
+1623 0 obj <<
+/D [1617 0 R /XYZ 85.039 420.948 null]
>> endobj
338 0 obj <<
-/D [1588 0 R /XYZ 85.039 577.034 null]
+/D [1617 0 R /XYZ 85.039 348.497 null]
>> endobj
-1594 0 obj <<
-/D [1588 0 R /XYZ 85.039 556.44 null]
+1624 0 obj <<
+/D [1617 0 R /XYZ 85.039 314.353 null]
>> endobj
342 0 obj <<
-/D [1588 0 R /XYZ 85.039 456.891 null]
+/D [1617 0 R /XYZ 85.039 160.607 null]
>> endobj
-1595 0 obj <<
-/D [1588 0 R /XYZ 85.039 436.296 null]
+1625 0 obj <<
+/D [1617 0 R /XYZ 85.039 126.464 null]
+>> endobj
+1616 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1628 0 obj <<
+/Length 2022
+/Filter /FlateDecode
+>>
+stream
+xڭYM6WU"iǓrޑv/3F"i%>h)Vl,`~<̗<8Q4O3 o~qk&K_ُt8>x~:Li9_o>{o|ZXJ)=\,0pכ{jeuzA>/38g^fʴy?[ݺwjN_ QPR,ԠM3iji_<k<w!}#<f
+ k x'fxQ^Xj/KKU._p/9`CFVڇRD^" Jh?KI($S~0f5k`#Z ` ˜Ȝe.*_"a7[`,6qN2،2\oSmQv4cOr-?A$M\^*-JbXNL4gqա7܆^y \+Iaw6Ot=.Frj98i"`ҦR0KL6 )~7K fei鸺'<{3@Wh
+ۏʯ!Y߾&i(
+e!?e„䆉 !^8|^56W[x#[Xw- =SZFʎroxplFyhla
+塏< -;5Mao4*oHdiNZqJ0rD%2 >1>h %3&,HZ
+FNQ ) !{V͘b];$jKZS&`!4mgqެ%n~a<\@bWta !++#ZEebe^ʅ6Tݑ ]R|U\T,GEu5FDն)l220U3YofTm>T?w)W1chp0?ّA` aSK5E{m:B3sQ -ڦeR5@|<~A@ת-Upc<5{([sgt\=ۑvO܀}oX3DF?󮴝-MpSAʶiom#VO'+&#93' [#?1勒)kFɽyq}ٌ_*EYܢ핽nL v1,MΤN=D7RrlFK)}j}r<J)ZjŔUR/ I?}G
++~9 L\]E<P]9ae7 MY 63{G_/n65
+cd 2bspksL
+endobj
+1627 0 obj <<
+/Type /Page
+/Contents 1628 0 R
+/Resources 1626 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1615 0 R
+>> endobj
+1629 0 obj <<
+/D [1627 0 R /XYZ 85.039 781.388 null]
>> endobj
346 0 obj <<
-/D [1588 0 R /XYZ 85.039 337.353 null]
+/D [1627 0 R /XYZ 85.039 651.823 null]
>> endobj
-1596 0 obj <<
-/D [1588 0 R /XYZ 85.039 316.152 null]
+1630 0 obj <<
+/D [1627 0 R /XYZ 85.039 617.073 null]
>> endobj
350 0 obj <<
-/D [1588 0 R /XYZ 85.039 284.349 null]
+/D [1627 0 R /XYZ 85.039 571.72 null]
>> endobj
-1597 0 obj <<
-/D [1588 0 R /XYZ 85.039 263.755 null]
+1631 0 obj <<
+/D [1627 0 R /XYZ 85.039 537.577 null]
>> endobj
354 0 obj <<
-/D [1588 0 R /XYZ 85.039 136.846 null]
+/D [1627 0 R /XYZ 85.039 329.372 null]
>> endobj
-1598 0 obj <<
-/D [1588 0 R /XYZ 85.039 113.524 null]
+1632 0 obj <<
+/D [1627 0 R /XYZ 85.039 292.501 null]
>> endobj
-1587 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
+358 0 obj <<
+/D [1627 0 R /XYZ 85.039 168.581 null]
+>> endobj
+1633 0 obj <<
+/D [1627 0 R /XYZ 85.039 131.71 null]
+>> endobj
+1626 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R /F42 967 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1602 0 obj <<
-/Length 2155
+1636 0 obj <<
+/Length 1957
/Filter /FlateDecode
>>
stream
-xZKs6WЙPM@t?g'Hʼn$*$e}w$-;中3,>>..v+¶8A[nF޴pے¡׽C:]awnHzW{NW9QN}qYK]렷GW2 {=
-R{MRC:Rs O:]nP0Q:ӿÎpkoW9ge~߉t6)^U(FI<)'f¬_̲UQ@7>S!(Z-jk>I /:sN!8y]Bigc[DYS*)*p!/\ڒ E`7
-SI3Z?U<񚁚d@$'t(<fZ`2@DS MpJKIfx>RVR*'!Y mߒ?B>3$MǕ^Q#w? F#u0EE*\kq0iz%t[Up!m ؈KVƠA%]9z +֌G!dDp}2wku}!Z׭27K+&M@063xx@+raMtNah Rg5 Ȑqgw_yrt;K9(:%b̐qqh/E '>:zC6m6?<A\R"3ǽ^\ui`y*rp#@14P3~~lFV /)4i&DxxD}4N׎A _o}DK7HXc^ 8^lxQU4@Z;0M(lxnս[㰳Ofb2hlR@1 Bb?Ě
-g {4) <pD23Ĵ1<ޜ
-8 8eNuq:|jOy]]񸿔ʺAٰA 3lc;?ɥ7t"ydw C}g;wqࢲ>/P-- cq3 `),;%
-jObd:1ԡ"2+.1 FSӃ4mͰMY&GЊrC 72%apP:N,`/VpM[5P
-Y:cmq|uqRD؝95?
-w'\} J
-4x冩se}I@C\WxӘ=wRϳICzQndֱVw_\O+93~0c7 {yB |.zڥY?Ӓendstream
+xYM6WfjcA%d\I2*H]ۍI$U6V*I<>M?>5Ke159g2ϧ$>s{i1]|Li9]%/l.L
+ŌPJa`FсAdZgbc3%v+3 iM5]8p0(L:=?U<mR#{]n^kyYL€Q;]#g(RR?w{k E!4<092\ ^dGi>Mˣ~ xZ ċ]4H 9L93kgZ@N
+{ &HU*bF[-׊-"^=L0"b&-׬Jf,Za¤qr=Źp{ꡫxcr |:Q~l[7Bg!RTZ0.GXAKq" ]rRs]Τ=<yO͂OYGNa{ 8AF,dЪf Dy0cͰ6 6 9`ٶW=BCJxwBSD&^\-; M÷wm =i#w(>kwj/mU<Д1PbEΨL߉TqpeWJ%VQ]E"Sڪ<iΊU(+”NYw< ҏsu?03Z6߫#9TAگ$?ݟ\!kti
+cu^
+=oMr?A7̾@!QwoantȷJh8L~ԁI+W|@a |5/)j*-sZr
endobj
-1601 0 obj <<
+1635 0 obj <<
/Type /Page
-/Contents 1602 0 R
-/Resources 1600 0 R
+/Contents 1636 0 R
+/Resources 1634 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1599 0 R
->> endobj
-1603 0 obj <<
-/D [1601 0 R /XYZ 85.039 781.388 null]
->> endobj
-358 0 obj <<
-/D [1601 0 R /XYZ 85.039 761.463 null]
+/Parent 1615 0 R
>> endobj
-1604 0 obj <<
-/D [1601 0 R /XYZ 85.039 740.731 null]
+1637 0 obj <<
+/D [1635 0 R /XYZ 85.039 781.388 null]
>> endobj
362 0 obj <<
-/D [1601 0 R /XYZ 85.039 614.69 null]
+/D [1635 0 R /XYZ 85.039 624.724 null]
>> endobj
-1605 0 obj <<
-/D [1601 0 R /XYZ 85.039 593.489 null]
+1638 0 obj <<
+/D [1635 0 R /XYZ 85.039 589.974 null]
>> endobj
366 0 obj <<
-/D [1601 0 R /XYZ 85.039 508.095 null]
+/D [1635 0 R /XYZ 85.039 436.834 null]
>> endobj
-1606 0 obj <<
-/D [1601 0 R /XYZ 85.039 486.895 null]
+1639 0 obj <<
+/D [1635 0 R /XYZ 85.039 402.085 null]
>> endobj
370 0 obj <<
-/D [1601 0 R /XYZ 85.039 442.148 null]
+/D [1635 0 R /XYZ 85.039 330.24 null]
>> endobj
-1607 0 obj <<
-/D [1601 0 R /XYZ 85.039 420.948 null]
+1640 0 obj <<
+/D [1635 0 R /XYZ 85.039 295.49 null]
>> endobj
374 0 obj <<
-/D [1601 0 R /XYZ 85.039 309.668 null]
->> endobj
-1608 0 obj <<
-/D [1601 0 R /XYZ 85.039 287.255 null]
+/D [1635 0 R /XYZ 85.039 116.464 null]
>> endobj
-378 0 obj <<
-/D [1601 0 R /XYZ 85.039 203.073 null]
->> endobj
-1609 0 obj <<
-/D [1601 0 R /XYZ 85.039 180.66 null]
+1641 0 obj <<
+/D [1635 0 R /XYZ 85.039 80.502 null]
>> endobj
-1600 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F35 948 0 R /F14 969 0 R /F15 951 0 R >>
+1634 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R /F42 967 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1612 0 obj <<
-/Length 1948
+1644 0 obj <<
+/Length 2001
/Filter /FlateDecode
>>
stream
-xZ[sF~U}`
-ZhYHz U03o:üK
-3g=kwdE
-L0m;t:wdSok?*qLm5m /w]༵t4
- a2T>eRygRf)5*ϠVt@&s _ LRC)x}a}$U]K);.x
-3ux
-WhqTm< "oƳ
-CEޜ3rQE$-xxnACе,ܥVTk$)
+xڭYr6}WTĕd8g;!thJ5Lwq `7x<,
+󌣄4ÈfټΒ5|y=H`XΎ^t'|yt\}^ya|SJ#@.4͢ӥ~q|ɩ?○#pdDl v3jCWVS>r!ѱO8,zIZpwnj"fgn"E}D߭uf]}TMJ?^57X${շ;_T_`{o$*oʨVwnor@KysU\XR1gfmXPaAuq#ӪQ!il䥾)2+-FXØy0 DX!N2ܥ G4Eb2cS* oMm4G3b kU_@^zdr{]՞pME!!Q%PKkF Ōr a{eYkc%FQ{1d:Ʃ땁闿oWɠV-\! L*LӜsHSs |$절`HQNCA!c&;Oľ)v}H >d|ASfzz68|JF<F|~T9JBDٗ*33TҷzþP Գ1 XS.Oi8X Fz`H-L̝`F޵b3bd0%|h%lzuW jڳlO(˟,vq!W̓q
+r4ƙ0.#i8Y"xJWW\Q xLT0X-fD
+XuUobwe^ٔ&'4Z Y k|R1T0~ FI%d]R2^NV+@l1#ZXHPz-l<P7{ |s~<ClN=,ok äpN 9S&_XW`)Og@;%M}|nnJlJT]Xb;Ѱ</MrD@Xg lr`'",v?CHS2͙~ 4rҦ œwtVNƯԝNiNhuꋤT2Sf,8Bc&|P
+1RZ̈s0r`g v0@v0~y 1(;y8v|-ő+‡`#Ng9-Cjs-M=D6S/ptdlCE2r2:}ȿx~(OMO1ZNmYXHn>%s>m@}ޫܻIpxɄXȉrV1]2N./w76d65fiRB2/ZĻXU*銩Z#LVuMT%X]7m
+/d^vĢ4.⭬o
+lʴDAB[ )v ~iC-{m X\olVK+_$9უOQw!L+\&u$(qiB$σẌvPW%j֣Ꞧ{odd6H pc14b48;UPN\;N=F-Tp|Yxau0~ ƭOD VIcF0b96NƞVN<j,M,]=W.(g<AbiȠl0%
+Ѧ?rNC?{ p'z_49!Dʌ-͵?:6endstream
endobj
-1611 0 obj <<
+1643 0 obj <<
/Type /Page
-/Contents 1612 0 R
-/Resources 1610 0 R
+/Contents 1644 0 R
+/Resources 1642 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1599 0 R
+/Parent 1615 0 R
>> endobj
-1613 0 obj <<
-/D [1611 0 R /XYZ 85.039 781.388 null]
+1645 0 obj <<
+/D [1643 0 R /XYZ 85.039 781.388 null]
+>> endobj
+378 0 obj <<
+/D [1643 0 R /XYZ 85.039 663.595 null]
+>> endobj
+1646 0 obj <<
+/D [1643 0 R /XYZ 85.039 627.633 null]
>> endobj
382 0 obj <<
-/D [1611 0 R /XYZ 85.039 719.568 null]
+/D [1643 0 R /XYZ 85.039 311.903 null]
>> endobj
-1614 0 obj <<
-/D [1611 0 R /XYZ 85.039 698.368 null]
+1647 0 obj <<
+/D [1643 0 R /XYZ 85.039 277.153 null]
+>> endobj
+1642 0 obj <<
+/Font << /F57 1075 0 R /F35 948 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1650 0 obj <<
+/Length 1708
+/Filter /FlateDecode
+>>
+stream
+xڵYr6}WTDq'>d(N۩xdK5cS$'t]\H@N&E,vbGJ abJ x'!RI=# F9·ӛz`"y۳QK
+ źd[$a)Xv&0U^϶Q*Hȯz 0_J4]ncQjLƗK2Jѫ媸Y_̈"̈
+I0s;cEqw$s*xHш$ Q8y7f,^n_쇧$d ٯ?x #E/"aHaJg$2ڶP$Coq0p HXk_mn r] q6sϚ}bc;6+0a[8κ[w-AGv5yB$q AY<jHXK!ԋn#a|>*d5vobH&Mz3u-%2GL6,={ fA:_ttfq^lBߌ-dN$)}b
+-$;^͟#EGg['tX ^N=kHYr|od+FT%E'LބPڪjz*a>F\E}'}bX^˪QeH!qa*HX 9ȑ"({c<؋LZYU$Obm*tq7 U($d K0Xvsyf4H6KմWFR42Y6+x) {VsVZsV1oH2x0AJd~Ϻ*1iіoS%NA%6{FĮ -x~l ͒ʸX5&,ôĺ(;5E
+7]ؙ)͋7Qmh~L{RrjK;Uf.]%Cp2V47uC1Jh 4^_x9Y7e((cP2CS_ͣx:%F[
+DS>Lq@4M;Cɂ {|d}L{̂JVz|Uh ßc3Oi2pM6A[Ʋha-R`qH\}zl}K''Ga{BeD^{~o;}V!e]{
+BS6X ۤӵf|:M4f\Fp _L!gH5$MDOL+!mV$禇˃ha\u^|C{~ o9'{j3"<;yӠZ3L>[ǷǁrA][Lc~9e2s?0wzzendstream
+endobj
+1649 0 obj <<
+/Type /Page
+/Contents 1650 0 R
+/Resources 1648 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1615 0 R
+>> endobj
+1651 0 obj <<
+/D [1649 0 R /XYZ 85.039 781.388 null]
>> endobj
386 0 obj <<
-/D [1611 0 R /XYZ 85.039 490.164 null]
+/D [1649 0 R /XYZ 85.039 681.042 null]
>> endobj
-1615 0 obj <<
-/D [1611 0 R /XYZ 85.039 466.842 null]
+1652 0 obj <<
+/D [1649 0 R /XYZ 85.039 644.171 null]
>> endobj
390 0 obj <<
-/D [1611 0 R /XYZ 85.039 421.489 null]
+/D [1649 0 R /XYZ 85.039 571.72 null]
>> endobj
-1616 0 obj <<
-/D [1611 0 R /XYZ 85.039 400.895 null]
+1653 0 obj <<
+/D [1649 0 R /XYZ 85.039 537.577 null]
>> endobj
394 0 obj <<
-/D [1611 0 R /XYZ 85.039 260.698 null]
+/D [1649 0 R /XYZ 85.039 275.437 null]
>> endobj
-1617 0 obj <<
-/D [1611 0 R /XYZ 85.039 240.104 null]
+1654 0 obj <<
+/D [1649 0 R /XYZ 85.039 241.293 null]
+>> endobj
+1648 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F20 937 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1657 0 obj <<
+/Length 1641
+/Filter /FlateDecode
+>>
+stream
+xڵKs6څP N;2'un,h4DWA
+n1"p{7WrjηOG{TʗS̈@"cqAyA{p`1+p3C)I(ʊtN>k71)8ʳ)*ygݓf֣J8A򓍝_N)N>S+fB[냾m>mr8qF52LR Z]5t%L$8Ly-ڮLd/o.erlAa]D扏Gсug+,y>[}x@dӢ,PƩ,M:ⴐ gEFs\D];͙-B SķG `A3g&hF[pW 74C&hFf[vffP6.Upz>:wl-mXBTQ_hk$qJ.h,MM&ڣqmhl_?eeF%]<` 3h`f$
+i\E,;5̯,6WtyCoF:jQC67nbgKhώ1,,Mc]@1㾀\gOBc
+endobj
+1656 0 obj <<
+/Type /Page
+/Contents 1657 0 R
+/Resources 1655 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1660 0 R
+>> endobj
+1658 0 obj <<
+/D [1656 0 R /XYZ 85.039 781.388 null]
>> endobj
398 0 obj <<
-/D [1611 0 R /XYZ 85.039 129.733 null]
+/D [1656 0 R /XYZ 85.039 761.463 null]
>> endobj
-1618 0 obj <<
-/D [1611 0 R /XYZ 85.039 106.411 null]
+1659 0 obj <<
+/D [1656 0 R /XYZ 85.039 740.731 null]
>> endobj
-1610 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R /F36 955 0 R >>
+1655 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F35 948 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1621 0 obj <<
-/Length 1802
+1663 0 obj <<
+/Length 2129
/Filter /FlateDecode
>>
stream
-x[wH~g+ [{i(QN\;7,RC]fPC]
-2H_mLHaUҁ] mO
-ZH,_Eb!9&vEm5'9QɔϺ"[>
-k["5dL33<{W?\<HnjQWiПBCV[QjT4REi< Ȕԡ/"/rC*3T8g^(u_|)۟qɯ9=љ?8{fz% "!4$-U2-!xrM/|oۯl0DzrFI :ʚY q_
-rxc?O(}(ygK|[Mendstream
+xڭZMs6WVS$^2iܤ9msjD
+-Ȏԡ嫃&??>j2T01<T4ih[1}^)"$NZ+LL,1!>VY6[\Tr^OFhN&̍BNcg}R??aPNi#$L (4>TvQ R.15.D%Rȥ(IL$#3dG
+OȎ)ԡʟDఓ0u2a⽲q]ȗn)n!boT2cϥy +3{0
+07,ّ :LpTGD-pMQH!<iFaOwT}=>$G$QGYh?NdRX.9"/l)>f{h1Qh=v#δQ0H@b)Nn~"9k;cFQ mә,9l3&^uDe41
+,}WfX`rQb#iX|.WGkg}*mus|  H(rU+8i#ifȄ'r)UUQ|6W
+ܖ*:գERu;d`Fd7
+T2XvX4ED{W}x(aX)2?jT-;]BHb񔙵J{j54)æ]ׅDžJ3}/
+y3[F,y(U9)vN#T]IE辁X"ޒpdytmu{Ի8x/_Fxd,ݓfiǝ[L6)~gpu"AWɝjXzjו7w^I*ndHʑYli5["Ȟ8\Zu?ޱK(~Ȅnd&hv֮ˬ]ײ}]9L*t~guoGuG&>9rF%<VbPb:%k 3n)1{J3eK̸QtqKG:2udH 6gJ[F!R5lN`T?xԋq=~^kfD&~;e
endobj
-1620 0 obj <<
+1662 0 obj <<
/Type /Page
-/Contents 1621 0 R
-/Resources 1619 0 R
+/Contents 1663 0 R
+/Resources 1661 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1599 0 R
+/Parent 1660 0 R
>> endobj
-1622 0 obj <<
-/D [1620 0 R /XYZ 85.039 781.388 null]
+1664 0 obj <<
+/D [1662 0 R /XYZ 85.039 781.388 null]
>> endobj
402 0 obj <<
-/D [1620 0 R /XYZ 85.039 271.839 null]
+/D [1662 0 R /XYZ 85.039 380.606 null]
>> endobj
-1623 0 obj <<
-/D [1620 0 R /XYZ 85.039 251.244 null]
+1665 0 obj <<
+/D [1662 0 R /XYZ 85.039 346.462 null]
>> endobj
406 0 obj <<
-/D [1620 0 R /XYZ 85.039 105.676 null]
+/D [1662 0 R /XYZ 85.039 141.149 null]
>> endobj
-1624 0 obj <<
-/D [1620 0 R /XYZ 85.039 84.475 null]
+1666 0 obj <<
+/D [1662 0 R /XYZ 85.039 106.399 null]
>> endobj
-1619 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
+1661 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1627 0 obj <<
-/Length 2566
+1669 0 obj <<
+/Length 2361
/Filter /FlateDecode
>>
stream
-x\W۸~ٗܳѕdɶp޲@ۇ`vIvL@ 6sD=蛑&FEP_ˆ?j}0ۂĪx?(DQUu{7Tay<>=huvqIFC(䏝Oim_ETm#ONgmS'j)PySDqjCCZ*F]N Wޭ7׆ %!O's|^}ˆQ)oX8l~q{^jej]_NT3T3xyvѝ$=TxT7Q215߱K%jd/*=DHDc@Dip;
-F&zWG% \lI kw| 5`s "Je`omr'2ܿpO<?wF A?y #?F<==: JWWIi"Aqh4^p7jm5*А
-\*oh`&({(X ͅ4pH
-nt<Z1uG?U;ǔwnRtk<,E!DeI]Ujx P'SzPs H/f+A?3I> 뛚DXg=
-x㑋$T|eTs~߬6BPb.P>!J&e2N$SPmE ߭@ ױRUcrMDmd)rr< 'pf[|KKma
-Tdd@u-\돇td62=#,š$ ibmO4AY'rOzue|&\([AQa`6;+=p-: vY6襽DjƸOzɵ6uITm[;w_T L
-6I׹BXW[$
-2a-7ot8SM8L:6s2
->VNYxKݪ7S6jX_40WY)ݷ=nfKo~ѷYj;aa>--}&zwTɡTڨ
-k*^ |xx\5Nä&|g̟ûCqUʯ7
-Viep 8Ê'hYW^38AWd:,VZMcV͇:A]^i.K`WsF;i#q$+>?y !n!!(SGO3Q\e:>'<N0,ߩh6+{*fzEroTy'D !ttSHDͶ'ؘ1%34MA'nsY
-̾9[R
-Ź^B-gf,Uh/7
-v'8 |Q 'sB9 endstream
+xڭZr}W-ê6[R%)TĒqꖯhr$B
+Iotc,
+}5^PG<!aD&q)TqX$G8јEw8iv1I~ tyl Km,͉Hjtn.GFo8M YKaj?jlb)IRq
+RRI]L|ڭLp5G fBϚ9jh,ϖuO>l?ɨ-<Ydzxdgs;<AS[1Idtl1-ϵ19:c ! ,l BE T WAhx
+L( l PXIk`KÃ2G?iD)'[!xig`؎OCd{=4>g尸::;^qwi0w5nsWkb j+R%㏅* ]p ޔB`6~Wp}ka,I1*I %LpK)K >PzRRF'Nvzn"Ed1-5 s45V
+~fǨ_5e4RsA<9ަA;-&,zR_IYѻܬ܌]n^џ}}m+w++5d1- ŧJxѫ4 un0=-{ӄ:LJ[Ls#wHgn׵ Ku~XuG|ԩ% i0Ж/H?`dbijYLt~_<2fd)D|EiyHk4vd!Is"؁W >Wnx~bsͣ,/rv2`IBr5*CBo1"[1u64v,uY$5N̬05U2;Qkds٫S̏4X-<ͣӱ8/{L~,j_9H!a"c ?pjn]~.bKAoUn\Xo~@xm_ةs5HW0A6[^|=pa^ (&$4Xv/~CrW}^&|-nl>ԣ4z/tF}|r_pw.G[yf7R񇬦0vVE 8=c
+r3rݼ*xY~
+,3٠RZ8a YPA{Ր*;}bdP:BQYEE946Hd뉹&\JqWX i2SAt\À_;u;Y6I%FWHRLxrpŭ۪Xd0DCendstream
endobj
-1626 0 obj <<
+1668 0 obj <<
/Type /Page
-/Contents 1627 0 R
-/Resources 1625 0 R
+/Contents 1669 0 R
+/Resources 1667 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1599 0 R
+/Parent 1660 0 R
>> endobj
-1628 0 obj <<
-/D [1626 0 R /XYZ 85.039 781.388 null]
+1670 0 obj <<
+/D [1668 0 R /XYZ 85.039 781.388 null]
>> endobj
410 0 obj <<
-/D [1626 0 R /XYZ 85.039 761.463 null]
+/D [1668 0 R /XYZ 85.039 761.463 null]
>> endobj
-1629 0 obj <<
-/D [1626 0 R /XYZ 85.039 743.459 null]
+1671 0 obj <<
+/D [1668 0 R /XYZ 85.039 743.459 null]
>> endobj
414 0 obj <<
-/D [1626 0 R /XYZ 85.039 554.516 null]
+/D [1668 0 R /XYZ 85.039 391.925 null]
>> endobj
-1630 0 obj <<
-/D [1626 0 R /XYZ 85.039 536.042 null]
+1672 0 obj <<
+/D [1668 0 R /XYZ 85.039 359.903 null]
>> endobj
-1625 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F11 976 0 R /F35 948 0 R >>
+1667 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F39 974 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1633 0 obj <<
-/Length 3146
+1675 0 obj <<
+/Length 2517
/Filter /FlateDecode
>>
stream
-xZs6_I3 WINӛ$HۼPBR~
-pEBrS&
-
-?N~@xy}Ƀi0hXxb1-ib0ɜaY_
-m ej1` PZ!ʲvF|˥wD?$^d^
-R0qׂuYLJyp(\)`
-XϘ~=X .;,kP=,R:N,[YYU3s~Y.y
-R鵀>,޳fɷAՐw}XmrIESg3J2؃Ϊ}Āp3x
-r„t
->6ii}6 $}4o/d'pA<j G
-
-F }7*֋z@ ɠbx n.⏪3oJ?
-+0HpDg÷n~w^+;v[8ڱJ{e{G?rj?8$8+q~C?6Eq@g9uDqYlҖ4TZɘF/,.Grb[ΆP}< 5]w};\ MK;rDh=Pd O$g&–PO]9˄=(E
-;#*ˣA8H7jo͕%ԡR?w=b]Cm4DdwG%41)OmկXOaBr[U_xt[aR}"mP[pAI[P 囖#^a^iDNPSIdD)we(
-Ho/<3j>E$<cc;6b.
-/P۴91b6qѴY* 9F"Ub1` %<oLqBJߪJoTTӪ4?G&
+xڭ[vH}We`PSW[f[r[< '9uD"XHlڻn/I0+z$Iٻ_#\ =oD#8qz鿏ow!c0ezlN\_\ӿǿ˼eDQ}{S Fpˋ#Ȋg2{淚 Ydo07b )H`^ց:XYϋ9HiRs|`H?cЈB{ۻ v8p? Ze8{e$@6aj9rR# '~f4[Pٟ*Wd=_GuPEk g^f/]V9eä *L*RgH.XJ$9x./veBNRD| ,@6:bj9w
+SK!'p/<H
+u5Ge5k3/jt * 82, # \~0qXL_H"Uc_+;9V2<#~n:N ?H)ajICw kw'&J<|iT3`$WŴY)R=V;RIzNQ9L5 _Mi@Fj!X=9 & BRk kB y%fkg<s[=PFdZ&{i}SJ{}wz=zg7~DWe`g#+]ҕn' 6<1ZP\g0~j-Yl]+8'dqB^tBsGi#t|fmq9/
+H龺;+(Jb#Ѹq"\$/Tn:rP&S=Y4fI&Ѩt~(}6j̖{[uuqs~gq9/Of2y%fYA-0qZLkHm"Ucq+k΍`ivvٝ_j|t4y&8j퐶A!ӌ5=_
endobj
-1632 0 obj <<
+1674 0 obj <<
/Type /Page
-/Contents 1633 0 R
-/Resources 1631 0 R
+/Contents 1675 0 R
+/Resources 1673 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1599 0 R
+/Parent 1660 0 R
>> endobj
-1634 0 obj <<
-/D [1632 0 R /XYZ 85.039 781.388 null]
+1676 0 obj <<
+/D [1674 0 R /XYZ 85.039 781.388 null]
>> endobj
418 0 obj <<
-/D [1632 0 R /XYZ 85.039 731.337 null]
+/D [1674 0 R /XYZ 85.039 169.843 null]
>> endobj
-1635 0 obj <<
-/D [1632 0 R /XYZ 85.039 702.539 null]
+1677 0 obj <<
+/D [1674 0 R /XYZ 85.039 127.496 null]
+>> endobj
+1673 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1680 0 obj <<
+/Length 2779
+/Filter /FlateDecode
+>>
+stream
+xڽko6^qiB+N"q|H䃼+ۺh$HWNPp87gB?HB_t'7IV~9҂ɫ0^h*]:oCXo?z/_??__1`.Wqxgk3?G'ܞ"}[`#4YXwGpZ#=)^ 5wGҩiFC
+e F16Ukƙ\j̐
+"?S2k ַn 7eMbeOL M*̀͟
+ث/eEӌ?:/.%I&H&#D{hCvnyGK Vo_Խ6M
+(
+\%kKFaee\hZ7<_M<ҳ FD~ `dGZ-yCF!÷mk{>x0%L~U֨dֲtc2 f|yg<9G޺Ȃ
+.BsQ9xz3
+&u3l3k (|,L
+FY +L I2#D(QEU_S`d/KHͪL! هlre+K\L*qMCHqNq妏؁8Wݷ7yo# XM%Ka'XC60hiĠӦŵۡ* +TQGXa۽d)V)DO fhRXCQrU8W=Jjn8.6~%L*mlyl[
+|l<kVu"ZE&;TKE V;Ps
+UnJ1z$(Mux=%c[qzA.𽖎c`#礞U7q ԰!`|Q$ǩ6tGJ5cdMNy?7!B=vGIǶqz-q&RәB-ƠK z~(ɳa(횇j;6o)!>)5Oy!2ԋfP`ͮ2l4R3::(Syc!Ckkp3_R^
+DeF!rU H,MӻFV F+yѮ$vbnm*4f]%L2[JkRCqHzy:
+:t;pM7X<gKzw;cըIS-*J
+/tE$~C~/dendstream
+endobj
+1679 0 obj <<
+/Type /Page
+/Contents 1680 0 R
+/Resources 1678 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1660 0 R
+>> endobj
+1681 0 obj <<
+/D [1679 0 R /XYZ 85.039 781.388 null]
>> endobj
422 0 obj <<
-/D [1632 0 R /XYZ 85.039 674.393 null]
+/D [1679 0 R /XYZ 85.039 761.463 null]
>> endobj
-1636 0 obj <<
-/D [1632 0 R /XYZ 85.039 653.197 null]
+1682 0 obj <<
+/D [1679 0 R /XYZ 85.039 741.134 null]
>> endobj
426 0 obj <<
-/D [1632 0 R /XYZ 85.039 217.242 null]
+/D [1679 0 R /XYZ 85.039 196.786 null]
>> endobj
-1637 0 obj <<
-/D [1632 0 R /XYZ 85.039 196.249 null]
+1683 0 obj <<
+/D [1679 0 R /XYZ 85.039 162.244 null]
>> endobj
-1631 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F14 969 0 R /F36 955 0 R /F35 948 0 R >>
+1678 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F42 967 0 R /F36 955 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1640 0 obj <<
-/Length 2654
+1686 0 obj <<
+/Length 2276
/Filter /FlateDecode
>>
stream
-xZs۸_>Չp&>tlis3ISiry%ZV#QH'ł%bˉ3A {)Oa\% gG7'84࣓ˣ^[,Iړ\>F<~yv("xı]ī=~Oc
-|9Fpߏ8S}1g"Iz#m3Zӣ׻3ݣU-Whia8sNwRN?PEV"z'h)ͬkXI
-(WmB,6Vyi5.L3$348f1H9 zqbgF?WDT1m<ItC\,e 4ѠL'@1eqbX <vJL$&66ҲR+N %Q9%j
-< 0fe6(E{
-K$
-]p/5 ;n!v{~J`L(%y%^UM}"TXmb y ct&'ZƤvh01/Mg=5ٌuüZHG{5n@_4<[ï $ al
-C:04zwhГ-JED^ v׵ f0r{ gƢ9 uKn&By;夤/! N!&ZWЎi[P)闻Ze02a1oHjh/ ?7h̾/U%њ*n`wT 6pYfaem9guvWpAl)T8B?`ʏ"zA9.
-Z 
-ewl O"R7> 4tdo%`h+o%Hpd[3
-),p}^4glHQQDg@]W6q!G\ЗE.+ Mm
-XvR lt^8;<8I٢
-Pa9I0 ٶ̴X8̠ DjӾT<J`뛻+>\ѓ˯kKUllZ-V6sx|(D4ZvLY7_:elpl_@kf|Jo/)GKaF#
-#o١ -RୟSbhLPcVX:
-3A#
-hhK9z!Nqzvԝdr'le4q!ՎmCR?|~S٭Yu+ةWw>RGv%:)gdk-a#Y9`QPn
-->Qj-}{fV8UPEO—ǡ6XY_XSPSsT7QzM/t'ЬG{6Qڐ)9M&Kf*#g
-VJiV?Oendstream
+xZKsW)a<uN$E&vE"¹>,%XPR==>(D,fzfz~RL8gW$v)& `'"PɬAs6?Y“0md5:L)t.z9zqKz~O.չՎpF=w>Y?p7yϜ ޞhoNN]mEszBhcƩ%鹤p/ uȊLD?~%
+Np'(Z
+ @ilt?:d
+( DQُ>Mg2ߥ G êZ D5$,r
+/i| Dfd
+hh:1%~twHf@o|Ue_DUwQbD nfcc'-S`TR@Z;x@)II@֧ ?l"pJ-[S~
+;&!ˬrXT0fK|5<XwU>PH ؑ8 Zõ)Q]9}8x-?xR2tl֨Cy大?sYQg{*_aGm {-ʝvw_Ռi,iXYfh
+\Q7W}X^"Mcޓ}+o[|΋!p`Nw)k읋~8aT 9U`%s.@)B.>GIr̈h P`@yHkET60?pӧ4ðGq[}YRtx"~Ӡca@8t50tGY:mvK:YbfgQ܆WLj)|v([$MQ<#˔E(-bU2 AeL A4bĤCW|s<DIH&OhfgEf$T]ה51+eb;M39[||tzɡ5nQ[I9$BXtYP1暠r4# avZKش4N|nqR?rS<$E]SW+|=`#=]/C胸#W$
endobj
-1639 0 obj <<
+1685 0 obj <<
/Type /Page
-/Contents 1640 0 R
-/Resources 1638 0 R
+/Contents 1686 0 R
+/Resources 1684 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1646 0 R
+/Parent 1660 0 R
>> endobj
-1641 0 obj <<
-/D [1639 0 R /XYZ 85.039 781.388 null]
+1687 0 obj <<
+/D [1685 0 R /XYZ 85.039 781.388 null]
>> endobj
430 0 obj <<
-/D [1639 0 R /XYZ 85.039 542.823 null]
+/D [1685 0 R /XYZ 85.039 529.274 null]
>> endobj
-1642 0 obj <<
-/D [1639 0 R /XYZ 85.039 522.834 null]
+1688 0 obj <<
+/D [1685 0 R /XYZ 85.039 495.736 null]
>> endobj
434 0 obj <<
-/D [1639 0 R /XYZ 85.039 382.638 null]
->> endobj
-1643 0 obj <<
-/D [1639 0 R /XYZ 85.039 364.164 null]
->> endobj
-438 0 obj <<
-/D [1639 0 R /XYZ 85.039 264.615 null]
+/D [1685 0 R /XYZ 85.039 233.596 null]
>> endobj
-1644 0 obj <<
-/D [1639 0 R /XYZ 85.039 244.021 null]
->> endobj
-442 0 obj <<
-/D [1639 0 R /XYZ 85.039 198.668 null]
->> endobj
-1645 0 obj <<
-/D [1639 0 R /XYZ 85.039 175.952 null]
+1689 0 obj <<
+/D [1685 0 R /XYZ 85.039 201.574 null]
>> endobj
-1638 0 obj <<
-/Font << /F60 1074 0 R /F35 948 0 R /F15 951 0 R /F20 937 0 R /F36 955 0 R >>
+1684 0 obj <<
+/Font << /F57 1075 0 R /F35 948 0 R /F15 951 0 R /F20 937 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1649 0 obj <<
-/Length 2499
+1692 0 obj <<
+/Length 2015
/Filter /FlateDecode
>>
stream
-xZ[oF~ڇՔs㥋ɦUihH"R\f(Jd77bgF3ss?C9$V:ĉ:IY8Τ#COg_Ag(0ohx*xÑ:(b| n|gƭ=FFH&o^S8gi2xP4,ΌgWgnV13_22ZXH"IL+%rUZ8Ȯ HlRϊ৫g<%?ݥVX&"%M6wV}"LekUi{V-* @ibCp '(*`1&(o3Qnw|Yq?nP4]*FҦ$@^eEuc=+T'g2(wpnVrl.+TH(MB8C$-`7%pdmG#|:%Dr.a(lyHd:e,#y^w:BܲvwN&zdB nyN#9[̊aڅ.DL!3Y<y%`P+B]G*NY̹u2sq B;mYY]TFڜ^3ϭ/ɌlߧhYp@З֢Vd.,h,#GEΆ׹̦ [Ec{%
-G p Sݡf$#aurJ{>*~8$#}jTe*t-lf&+UƮ\#>z$4ENHV.
-i]J͝Irh`6yGaJPSWjKpU &t@ rpt-3k@Ǟ"["JZ^g׾CZ!TэFC辉#bT-]]Y7<nR k/Ƃ
-d9νV>&Y1H QǕ6+?rn
->BmH w9)_Q:i[#dÁI62{%ޫ3C/oǃi_aryggbd_c gjsM;7zMp1aݸ _t-#TsP/g7l D٭KGCr#J>?ڥCi{B
->~g(kt>N5gGg92h*SOl;懿Gs"{eC<ZLϒXޓ5Vl7KZH@/1`gi[iX.zÉM
- 8o:mPƬ|u"gͼVΉ(<CCoZž:JdwPRJT3]Lۋm_<Iq"8zŠ{H.hg/1vЕU(QJ8)xhkMQ"T R"-/Jr7p2 'b/Y@]tG&V] V]iս7p$و@c<Ί*K9W
-U^'Vs䗵KM^2*K},E'IË!5%
+xڭZr6+4TD( W;Md&i8E#2tb{`X6C230*#e|1#rU9=PsQq`󋏋;y\1\oo9y}O_^=kzѯalƈ VE3w}s;zĊ("$KvЁ FsdhIJ W/KGJ/r<=.u "nwd
+&*G"0I+0هW 
+YgZ|Y2ʏDtI""#"3bcFR"zL>;k%4V_z8Ts]g7CNIDUZ
+FjuK//"'Ni ']@ \X`6kaQ[Q d1#*}7vq+s_4ǾӶTΈ0.ʈwio:{~H$f9HD1q&.1YX`d1#*E [ys.em-'?JSBP~O0qM&V.69l#m "<O2IK'M`epJw7z}UQ-M 32Ɠpٕr4{o;- !1F1FYzoӢt>j ̳="iHJNx0]yU'1fI3"ҷ>]fcr}4RWtO lnuyCt"V0a,=X>)EL=b:t"]q[ 3SCcFL)cK&4zԳ'n,t[E~բ-HZ4
+ePRђK`J[5eXj||a5RLCM
+iL&npr5l7Oo73E !pZRɮ`0T5:zL$=ۖ"TGPytGP1QGHHíK]X`bz{cݺ fWE/uJ=b:Lt)gٌ_0>'IÿՠrV0UI lnU^Aٖ~O3uXw3Stu{"R'$]Exn :pɧ`y ^& 5 0ՠԇɮln~ˡÌ.Ly"HzFhM-u=& H
endobj
-1648 0 obj <<
+1691 0 obj <<
/Type /Page
-/Contents 1649 0 R
-/Resources 1647 0 R
+/Contents 1692 0 R
+/Resources 1690 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1646 0 R
+/Parent 1698 0 R
>> endobj
-1650 0 obj <<
-/D [1648 0 R /XYZ 85.039 781.388 null]
+1693 0 obj <<
+/D [1691 0 R /XYZ 85.039 781.388 null]
+>> endobj
+438 0 obj <<
+/D [1691 0 R /XYZ 85.039 761.463 null]
+>> endobj
+1694 0 obj <<
+/D [1691 0 R /XYZ 85.039 743.459 null]
+>> endobj
+442 0 obj <<
+/D [1691 0 R /XYZ 85.039 671.008 null]
+>> endobj
+1695 0 obj <<
+/D [1691 0 R /XYZ 85.039 634.743 null]
>> endobj
446 0 obj <<
-/D [1648 0 R /XYZ 85.039 719.568 null]
+/D [1691 0 R /XYZ 85.039 331.956 null]
>> endobj
-1651 0 obj <<
-/D [1648 0 R /XYZ 85.039 701.095 null]
+1696 0 obj <<
+/D [1691 0 R /XYZ 85.039 299.933 null]
>> endobj
450 0 obj <<
-/D [1648 0 R /XYZ 85.039 653.622 null]
+/D [1691 0 R /XYZ 85.039 225.361 null]
>> endobj
-1652 0 obj <<
-/D [1648 0 R /XYZ 85.039 635.148 null]
+1697 0 obj <<
+/D [1691 0 R /XYZ 85.039 193.339 null]
+>> endobj
+1690 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1701 0 obj <<
+/Length 1872
+/Filter /FlateDecode
+>>
+stream
+xY[7~ϯCq}{*UPJAݠ>
+) 4gS&U
+Y4"a?25M_V=YE=ޝWuื+8_Նhw\6@V &HӉƌQl6.AXж0c,Ҕ<ǩM*_94m|m_TXx+SD\[. LT\Y i1fܗWe(,IczqZMQ^EmO3".K{g\'Z 7q"q
+96u'3\wz;0B¿"`]7
+Ii|еYu[h[;t'zOœWOՅ`aySOjKĻ Q(Km2 =뵸tZo[m,f;7g<H_
+6Uo od|8CEO@ϓIYRi xendstream
+endobj
+1700 0 obj <<
+/Type /Page
+/Contents 1701 0 R
+/Resources 1699 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1698 0 R
+>> endobj
+1702 0 obj <<
+/D [1700 0 R /XYZ 85.039 781.388 null]
>> endobj
454 0 obj <<
-/D [1648 0 R /XYZ 85.039 465.732 null]
+/D [1700 0 R /XYZ 85.039 597.626 null]
>> endobj
-1653 0 obj <<
-/D [1648 0 R /XYZ 85.039 445.137 null]
+1703 0 obj <<
+/D [1700 0 R /XYZ 85.039 563.482 null]
>> endobj
458 0 obj <<
-/D [1648 0 R /XYZ 85.039 344.982 null]
+/D [1700 0 R /XYZ 85.039 395.581 null]
>> endobj
-1654 0 obj <<
-/D [1648 0 R /XYZ 85.039 327.115 null]
+1704 0 obj <<
+/D [1700 0 R /XYZ 85.039 364.164 null]
>> endobj
462 0 obj <<
-/D [1648 0 R /XYZ 85.039 238.994 null]
->> endobj
-1655 0 obj <<
-/D [1648 0 R /XYZ 85.039 220.122 null]
+/D [1700 0 R /XYZ 85.039 208.297 null]
>> endobj
-466 0 obj <<
-/D [1648 0 R /XYZ 85.039 161.22 null]
->> endobj
-1656 0 obj <<
-/D [1648 0 R /XYZ 85.039 137.238 null]
+1705 0 obj <<
+/D [1700 0 R /XYZ 85.039 175.876 null]
>> endobj
-1647 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F14 969 0 R /F35 948 0 R >>
+1699 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1659 0 obj <<
-/Length 2475
+1708 0 obj <<
+/Length 2271
/Filter /FlateDecode
>>
stream
-xYSH_ᢦ*TܫVqT8SS53BX$-l EaZgßU)T-w3mIia{.N펶OmaotNKF?;I`?:#n ޜ}:ͽc֟۽1a* zwж Ֆvp2=Ձ@KW( -@78)>MlG{8p⠄n'ff=\'}*wl
-n02K} ftB~a|EkCepsi+i!Τ4!qQVL=dUtJ#<܆y8 8ə
-9:]>-*6ϳN?רCVChߐ)_oj!#,p9
-ݺEӄU??s.KdmV|҂mz=J{t0x{|i%?GW>\UB~!+<M'\,'C4slxLxŗI sy1M L_ҹ&gMS/j8
-%Lmm` Qr?܅$h2ˌr@o9%hV_N<^1'A5ϗ&͡iM3\ :5[$DZ74 X/<P&IVTE*x">f|Eri
-q~.s$A]7e_wȾh/'a\ASa& 0w6̒S^j5ɔ_pVE@r,
+xZo8_!d`Ŋ_".i.Jb$]KioCʒ%+&@E! R#Y*XΤ(`'I:4Whi/w|4SZF\)e ͩ?~;ywF8kћy;oqGFKףFN#i%ǣhLE՘"9˅CƙdkZwSS
+%v=NWdqs*0sG_<c2sb:Di~Ŷ溤 nжQ Oħ $YUWģyq<^ح66T%B_DGjaM܂(quiz9'93c1㜤'-I@@FN<k=-YTeEQ"0.DYߪ)SuKPH{
+f9<.$PGEY%^Cp@fN,^Ⱥ/{DڅJx~=k8"2y -a^UzEo=U|7\'R'6LRJ}nܬ?l)BZf"!s[f43\>R3gmهv, ̙DSjgP8 h+ >C|Kjj"?$ls&{YPsf)Ÿwp3FA@0 )Xڅdsf کgնFqmef5MENM95JzA~Qt~v`L?}0`};];Kgi
+16$L?+0CbRv!BSE(亷5ipW|mOʉY+<V+F
+=QWa6t-MfM;Q.5 83Ȝ(@v `=]j`'1"ٞ;% 1oUW: I*|&O'IQҲ~PkpPR [Y fAM} O_!Õ4uh+u{bm)VUMШ7p]4riF6eJ۴pb6kCж`@Y-:Dxݮ}˽oh͊V\t-mi\VKҺ֨^b뿨 .muaBB$`/ kU Bk\q*@2 3OhBH w1[{ )s/gRt@:4\ih{Ӡl#Pꟶab
+?-4aʧ03~,ౌC7e@30
+h
+6y#9xΡ|ݳkgw+:rAUeQb ѹx-1-Kth^s~the U<UKRu/Cbf,߬cO;ya`J?h $l|g"Y,싫M3ԑendstream
endobj
-1658 0 obj <<
+1707 0 obj <<
/Type /Page
-/Contents 1659 0 R
-/Resources 1657 0 R
+/Contents 1708 0 R
+/Resources 1706 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1646 0 R
+/Parent 1698 0 R
>> endobj
-1660 0 obj <<
-/D [1658 0 R /XYZ 85.039 781.388 null]
+1709 0 obj <<
+/D [1707 0 R /XYZ 85.039 781.388 null]
+>> endobj
+466 0 obj <<
+/D [1707 0 R /XYZ 85.039 761.463 null]
+>> endobj
+1710 0 obj <<
+/D [1707 0 R /XYZ 85.039 740.47 null]
>> endobj
470 0 obj <<
-/D [1658 0 R /XYZ 85.039 462.86 null]
+/D [1707 0 R /XYZ 85.039 206.21 null]
>> endobj
-1661 0 obj <<
-/D [1658 0 R /XYZ 85.039 439.542 null]
+1711 0 obj <<
+/D [1707 0 R /XYZ 85.039 173.992 null]
+>> endobj
+1706 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F42 967 0 R /F35 948 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1714 0 obj <<
+/Length 1813
+/Filter /FlateDecode
+>>
+stream
+xڵYYoF~ׯ h'9S+HlRIdآCR;p3kQǼH*b/Qm'Ի7OE,dYM^U(i쭮uJx'h:΄> 0yprh~n///wU%Zd(mAwJDy' ()d9X-eI|gQTȘB/Ta<-ՔwiqkY/o'7e2oKǿ:>SEÛr/3\/xʈd_Xo5.i5\Z )Oyg"f xRڮ
+zV,T eo@Z NBZbrO{VLun,ЬJ)}d4mLoo.1x  ҸEq$B/ca-zPҬY$mÕLJsqG-zg}9s4ܩ\IO$}.z/E'@)ϐTdUQ:n, lrkK7v3G ~ߧkT=0c ϓo( UeE(J##pum֛(+$Ub+̧pjJ l\n~޺Mvhm'O).tukrI:Ɛ0I$M1!:sڭ_fP
+G0^E!Z 0-?v@4Px -a:ʵT0[GP]Fɨ1dXLө}ߣGjbLi}h_`J/v]9topX[}`k;Ė
+aQJcBt 3U!C!ի1Z=;!B ;/zYИ_HE
+a&C7X n1
+oAуlo¯fT1 Dt6aX{3{pi!%#28D Y<3yaP?:bk, HmW^avv>Ɔ5KM
+ս?) "b<)Ԑa
+ Dw2 #P`z ѐhf44s̞-Rw1s[E7\mx8
+@<x7H2grg_C#xhѧ!owXtDS! A̭4l4jGӘep`k <"!4^%3dhװ!-ՁUj>E00>ޡ70[d1: Vw+ $HF;LGA(1L$ ̘?3qM4w4kpQ \G$Ri$*>Hܥœaɐ.$SdgB7O.EX'" W׊1NhCu餛?+LGAh y%:ϱ>|0MiﺥYs1{P)hɥufn`ζNmj3=MK8S\ht$qJ Cu : ÚXendstream
+endobj
+1713 0 obj <<
+/Type /Page
+/Contents 1714 0 R
+/Resources 1712 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1698 0 R
+>> endobj
+1715 0 obj <<
+/D [1713 0 R /XYZ 85.039 781.388 null]
>> endobj
474 0 obj <<
-/D [1658 0 R /XYZ 85.039 187.299 null]
+/D [1713 0 R /XYZ 85.039 436.555 null]
>> endobj
-1662 0 obj <<
-/D [1658 0 R /XYZ 85.039 163.982 null]
+1716 0 obj <<
+/D [1713 0 R /XYZ 85.039 399.688 null]
>> endobj
478 0 obj <<
-/D [1658 0 R /XYZ 85.039 135.371 null]
+/D [1713 0 R /XYZ 85.039 357.528 null]
>> endobj
-1663 0 obj <<
-/D [1658 0 R /XYZ 85.039 114.776 null]
+1717 0 obj <<
+/D [1713 0 R /XYZ 85.039 323.384 null]
>> endobj
-1657 0 obj <<
-/Font << /F60 1074 0 R /F35 948 0 R /F20 937 0 R /F15 951 0 R /F14 969 0 R >>
+482 0 obj <<
+/D [1713 0 R /XYZ 85.039 198.858 null]
+>> endobj
+1718 0 obj <<
+/D [1713 0 R /XYZ 85.039 162.593 null]
+>> endobj
+1712 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F42 967 0 R /F20 937 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1666 0 obj <<
-/Length 1224
+1721 0 obj <<
+/Length 1340
/Filter /FlateDecode
>>
stream
-xYmo6_!ˤa*2dM4-UVHr`I9ȎY9=wDGy"Th/NIe_͠$4R8hhљ2_;‡ ?Y׽#>9~iazp0ZJ"#J.>Po x=DmJl J
-ןNo1UPvF4\u1᱀Qjޅ$̏BH_u3lwq֩ik"R߬n8 m,Hi_#
-nkU,P͖dc7{u<$
-We)'%ʌձ*?^q9K1oamNvz'-N5rM29
-T* (J, <򎺧c=Tݓ=|XQ E 19Yۈv?B0ӻL]?PXG^b'l6PA ^lSò}Qw:n,g7ͤtl/}@)`MG&ӨjC2»=i=*|M5o+T_6B3w#˄RRJ
-ll#bޘÌ>cL54cd39.]t1{ghپ'9/0¹܎("/p9=G"=4KlJ( LDݹG$rp;QɵWsP
+xڥXn6}RX.Aj;/IP(3r=,Il^.-#.
+o-dn_$)Gx=\'Ļ
+!e2\[ψ@LXP*NPD{`ȸ Y-yUW[7U&6Wn[سjBܸnryլ~OsƪFVHlRϡFB2ODGo/{ RrJ`K
+pQE3.9Èib0_]xw;ƧqnɾnŽuz$̍MۄBN-΍L]+ۀQΥ.1BV-&,<;R "ehy$R)P
+gl
+3<&L0u*|(V*_ɦ-&<_ ícjt ը}nղi\ޘm@a4*+mqB@ڠWHe5^ IEz{idEn<ڵ͈oQv[ڳBE@5<s(7*t.OD1
endobj
-1665 0 obj <<
+1720 0 obj <<
/Type /Page
-/Contents 1666 0 R
-/Resources 1664 0 R
+/Contents 1721 0 R
+/Resources 1719 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1646 0 R
->> endobj
-1667 0 obj <<
-/D [1665 0 R /XYZ 85.039 781.388 null]
+/Parent 1698 0 R
>> endobj
-482 0 obj <<
-/D [1665 0 R /XYZ 85.039 761.463 null]
->> endobj
-1668 0 obj <<
-/D [1665 0 R /XYZ 85.039 741.337 null]
+1722 0 obj <<
+/D [1720 0 R /XYZ 85.039 781.388 null]
>> endobj
486 0 obj <<
-/D [1665 0 R /XYZ 85.039 698.106 null]
+/D [1720 0 R /XYZ 85.039 761.463 null]
>> endobj
-1669 0 obj <<
-/D [1665 0 R /XYZ 85.039 674.789 null]
+1723 0 obj <<
+/D [1720 0 R /XYZ 85.039 741.134 null]
>> endobj
490 0 obj <<
-/D [1665 0 R /XYZ 85.039 646.178 null]
+/D [1720 0 R /XYZ 85.039 698.974 null]
>> endobj
-1670 0 obj <<
-/D [1665 0 R /XYZ 85.039 625.583 null]
+1724 0 obj <<
+/D [1720 0 R /XYZ 85.039 664.83 null]
>> endobj
494 0 obj <<
-/D [1665 0 R /XYZ 85.039 579.625 null]
+/D [1720 0 R /XYZ 85.039 591.773 null]
>> endobj
-1671 0 obj <<
-/D [1665 0 R /XYZ 85.039 559.636 null]
+1725 0 obj <<
+/D [1720 0 R /XYZ 85.039 558.236 null]
>> endobj
498 0 obj <<
-/D [1665 0 R /XYZ 85.039 377.924 null]
+/D [1720 0 R /XYZ 85.039 335.876 null]
>> endobj
-1672 0 obj <<
-/D [1665 0 R /XYZ 85.039 356.931 null]
+1726 0 obj <<
+/D [1720 0 R /XYZ 85.039 301.334 null]
>> endobj
502 0 obj <<
-/D [1665 0 R /XYZ 85.039 356.931 null]
+/D [1720 0 R /XYZ 85.039 301.334 null]
>> endobj
-1673 0 obj <<
-/D [1665 0 R /XYZ 85.039 334.215 null]
+1727 0 obj <<
+/D [1720 0 R /XYZ 85.039 265.069 null]
>> endobj
506 0 obj <<
-/D [1665 0 R /XYZ 85.039 307.522 null]
->> endobj
-1674 0 obj <<
-/D [1665 0 R /XYZ 85.039 284.806 null]
+/D [1720 0 R /XYZ 85.039 224.826 null]
>> endobj
-510 0 obj <<
-/D [1665 0 R /XYZ 85.039 214.477 null]
->> endobj
-1675 0 obj <<
-/D [1665 0 R /XYZ 85.039 191.159 null]
->> endobj
-514 0 obj <<
-/D [1665 0 R /XYZ 85.039 191.159 null]
->> endobj
-1676 0 obj <<
-/D [1665 0 R /XYZ 85.039 170.768 null]
->> endobj
-518 0 obj <<
-/D [1665 0 R /XYZ 85.039 144.075 null]
->> endobj
-1677 0 obj <<
-/D [1665 0 R /XYZ 85.039 121.359 null]
+1728 0 obj <<
+/D [1720 0 R /XYZ 85.039 188.561 null]
>> endobj
-1664 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R /F36 955 0 R >>
+1719 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F35 948 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1680 0 obj <<
-/Length 1522
+1731 0 obj <<
+/Length 1307
/Filter /FlateDecode
>>
stream
-xZKs6Wpr))Q< k%3Zj/4Rw(ZdŲ㎇\b÷Y@F*l #˜`0OhÊ4&5*!%ڠw/G//XBskm³>
-oNw_#D&MsyE!C&)aT()qdo5,%L #51հyX#NQq=ːR!Q:PG1 <?I0 |#_N9pdv!̀>\#ׄk=Ҕ+ƈUBX 0e)Ex얓/F@5.}aEymĜ0e0 "RI\vޝn/F I#Z|fXB-و@g bc:uXgEk߯z\"&<f5WK+`d' @Ϡ
-K7 Irz!9\[~”YRpyRТj6{N* y|@c n,dI .aa,2UT2)N 8.B| 8g-aB[Yw&pDζ㦝hL}/r]+|Xݔ@YĢ!/uh6ܯ;q;21sX*"<Ӕ5Ƿmd?`hO'C2.d=OsɒG
-C:킇.Q@wBUQ%a
+xڭXMs6Wpr)u`\;mqmVOi6ʒ-J A=, ˌ$LFl02 0LG:cȦv$c~fv<&]ۛƟGo{޽E(,'-P%P+SYP?/Gw{S & i?(F8e2DRS2fy1HI˻3#^Y^]9ߔۘ!LC(*"T,a :STW2a^m+:&"8L*PμFml;(PJ`I&1uN*|_mʘDbWF #tAryZXCeX>Ÿ$J5y@
+(B%{k nHsJYJAtx^YT |_Ҏ
+͝+r#Vh V!Bd
+0.C`ҺSK;hjlhg! He0z:O-
+G/=$x]:`舺w?m U
+Q`gcW
+AafN $0v J.Pnnm}۫7ciTFp;a᳃ʇ~lVjw0qpbxc+=qpN{ +66cU:tZL4I2lM@r:;m` Tn;H!Gyky<%Iて#YO=0qopS8p8G
endobj
-1679 0 obj <<
+1730 0 obj <<
/Type /Page
-/Contents 1680 0 R
-/Resources 1678 0 R
+/Contents 1731 0 R
+/Resources 1729 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1646 0 R
+/Parent 1698 0 R
>> endobj
-1681 0 obj <<
-/D [1679 0 R /XYZ 85.039 781.388 null]
+1732 0 obj <<
+/D [1730 0 R /XYZ 85.039 781.388 null]
+>> endobj
+510 0 obj <<
+/D [1730 0 R /XYZ 85.039 761.463 null]
+>> endobj
+1733 0 obj <<
+/D [1730 0 R /XYZ 85.039 741.134 null]
+>> endobj
+514 0 obj <<
+/D [1730 0 R /XYZ 85.039 741.134 null]
+>> endobj
+1734 0 obj <<
+/D [1730 0 R /XYZ 85.039 707.194 null]
+>> endobj
+518 0 obj <<
+/D [1730 0 R /XYZ 85.039 666.951 null]
+>> endobj
+1735 0 obj <<
+/D [1730 0 R /XYZ 85.039 630.686 null]
>> endobj
522 0 obj <<
-/D [1679 0 R /XYZ 85.039 735.239 null]
+/D [1730 0 R /XYZ 85.039 448.974 null]
>> endobj
-1682 0 obj <<
-/D [1679 0 R /XYZ 85.039 714.246 null]
+1736 0 obj <<
+/D [1730 0 R /XYZ 85.039 414.432 null]
>> endobj
526 0 obj <<
-/D [1679 0 R /XYZ 85.039 714.246 null]
+/D [1730 0 R /XYZ 85.039 414.432 null]
>> endobj
-1683 0 obj <<
-/D [1679 0 R /XYZ 85.039 691.53 null]
+1737 0 obj <<
+/D [1730 0 R /XYZ 85.039 378.167 null]
>> endobj
530 0 obj <<
-/D [1679 0 R /XYZ 85.039 659.727 null]
+/D [1730 0 R /XYZ 85.039 332.815 null]
>> endobj
-1684 0 obj <<
-/D [1679 0 R /XYZ 85.039 639.132 null]
+1738 0 obj <<
+/D [1730 0 R /XYZ 85.039 298.671 null]
>> endobj
534 0 obj <<
-/D [1679 0 R /XYZ 85.039 592.912 null]
+/D [1730 0 R /XYZ 85.039 225.353 null]
>> endobj
-1685 0 obj <<
-/D [1679 0 R /XYZ 85.039 569.595 null]
+1739 0 obj <<
+/D [1730 0 R /XYZ 85.039 188.486 null]
>> endobj
538 0 obj <<
-/D [1679 0 R /XYZ 85.039 540.984 null]
+/D [1730 0 R /XYZ 85.039 146.326 null]
>> endobj
-1686 0 obj <<
-/D [1679 0 R /XYZ 85.039 520.389 null]
+1740 0 obj <<
+/D [1730 0 R /XYZ 85.039 112.182 null]
+>> endobj
+1729 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1743 0 obj <<
+/Length 1870
+/Filter /FlateDecode
+>>
+stream
+xZKs6WVSx`/7NZg;^dYi<ñv $
+XW5H )b2exL;gz~qW9C̩{>VމH ZcaMm4 *7s2h`MY)"')LԔ%aJE m y:2YUCfc:NHtN7SMH=xmѩ. ,!@dZ{ں>'%R?@Tg7hRsøORVlR+eeWgR̐t,euTB:~A ar/^ɏ;7q.I8|xxHlV+Et~!9 |"lf5;,,[Bĭ <0߸y]W6o !I=i *d`F^
+1Fd.A 1e U2XI1
+( p>ɇP\qIO]H*wǠ9]ekq07& J.UOJ
+=Ut\c-b^ĥ!OU&ETH
+S+[|E}*DB%VBL`%fpاo3}H|<Ov>C&:5$Cž*@/(E9t7]c yAiŠ5SߦHA2"$tA}pv.Tj}WJjd՘x
+ 0QwHWh3#$>@ݑλ#o;6&;<fPO"z6kOO_F"m7 3h6hϠ%+Hܐb+xRxJ x(("ᱚmE4%M9Lľ*>8ެ\_ݠwCKD!nTؓk i6 Ŕ= xaa9;wSyWn<cS8V8nMA.Jཱྀ_wHRPQ5;j
+j@eDW߿endstream
+endobj
+1742 0 obj <<
+/Type /Page
+/Contents 1743 0 R
+/Resources 1741 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1748 0 R
+>> endobj
+1744 0 obj <<
+/D [1742 0 R /XYZ 85.039 781.388 null]
>> endobj
542 0 obj <<
-/D [1679 0 R /XYZ 85.039 406.685 null]
+/D [1742 0 R /XYZ 85.039 637.667 null]
>> endobj
-1687 0 obj <<
-/D [1679 0 R /XYZ 85.039 386.696 null]
+1745 0 obj <<
+/D [1742 0 R /XYZ 85.039 604.129 null]
>> endobj
546 0 obj <<
-/D [1679 0 R /XYZ 85.039 272.73 null]
+/D [1742 0 R /XYZ 85.039 395.319 null]
>> endobj
-1688 0 obj <<
-/D [1679 0 R /XYZ 85.039 249.413 null]
+1746 0 obj <<
+/D [1742 0 R /XYZ 85.039 358.452 null]
>> endobj
550 0 obj <<
-/D [1679 0 R /XYZ 85.039 220.802 null]
+/D [1742 0 R /XYZ 85.039 316.292 null]
>> endobj
-1689 0 obj <<
-/D [1679 0 R /XYZ 85.039 200.207 null]
+1747 0 obj <<
+/D [1742 0 R /XYZ 85.039 282.148 null]
>> endobj
-1678 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R /F35 948 0 R >>
+1741 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1692 0 obj <<
-/Length 2348
+1751 0 obj <<
+/Length 2025
/Filter /FlateDecode
>>
stream
-xZ[s6~t;j'B }smu^KL-ʤCRq\
-ȹp n__O~>:1h\ѻ`
-||
-GhB=mG㣿7zDYE>
-j
-9^l&J>##
-@i67R~m*٪!` +=}yEƐx;A @D!R
-ٝqd |U,*4)/H4鹷\vCu׺.d\n8i%0ڙ"jȞ^z ^M\Hns t*N S~ cTI,K'IHHSмtrW.ƻ&ݦLT)RTMN>4ɿZ{vg=.3]ReevdX<gc'uҲ(lbHhS_ҝ_ R}# d17~tdADڐ"GTsؑ:=%{ZwOV˘k#־sa?yț1K`oX[YFP* *'W𳞙+<o>12|@M{ *F셔 VT-j[ ~eМ#{Va[ 51^qYANXN@ڱ%jIXǫ)!okתQiv/疙yn3EUYq(@|AMw,ļ5 I֐5^I3.m/y'Ecέ7%{FzUʖk cn/(2XQVcnfjzO aj~!r<nx\6G3X@*Co_ج>eBѼz_ף㷦
- i7Q׮7fqVa&~gP*(sroM܁Dl-Sol804ILQeeܤ6νf*Vڶq:(1B$n<E=${[(z6\m7aPj^ҾR9@}luib4Ԙ2C](ᡚZ
-! Ä BzwHIo:DJm rW _Nt@]Q{@'/3nq&M1o%?HtRMU;ıYGtRpY
-$E rn,^;M pD/l}_q<?vЇ@#^miMR55M '*U_G"Q{GkLYh+(eeTC_DpEJAa(3A*士lL"oޭtNELd"94tdQGVi0&wb>ϋb1Ѝm
+xڽY[s۶~ׯt:LJysmuخ朙4D[#E5Ϳ? ,($=A,vi6"Tdcmƌ#:'?GL=d0zQl<k("ϖӟNg7"dI.gx%oO_N>~jDБYF><Ddf֔0x0DI7ѯ(|&1b2qCʈLENAQt~LX8ᓩR4wpƳ!ӥd
+j+0;
+|$-!du]XwXEnys1;QJMJ@0 K zi+48`z~lރVIʶ֧Ž;H&t_VT ]U#>¢ EQeibX'&Wgo #Q0=]AYG&phFaNpJ~=aGCP`1O&4Kg}#}]H.$6(6(z3N=)Ԧvcc
+8ͷ`%=0Մa;}SPgheڝ":?bO[qqJ;{@x&1_">G2JkbtMf0!e%.+JKח8;_VMYPbTPBv˼ڗq(ʟzJ
+[- ;h7`+pP"0uH" M,wK/go~tu9NJlx5d<)[dϒ4X^AahJ
+-mv6|BRߘbWoҮލ_&FYR{{+x[϶j6m1^rm/ฃ̋zȕ`eϦ7}&t~LB-3?i;!@8<Ɲ~ȿ?FmGXqE8>|Ʌ}<~G"_Z,>Ajek ?rQ6K_kФi_[]ﭹf-`o0P,`smPV FCuKt'OY !㥄a+6c:۽&vQ
+-3\ˀl>aF)Lc';%KXJ2 c.qomCʹ 0B#`z<6$eCvtLQ[A&jWGL
+v
+@ܵ=p mCS@ɀK%w+W!_$lB.W}0D
endobj
-1691 0 obj <<
+1750 0 obj <<
/Type /Page
-/Contents 1692 0 R
-/Resources 1690 0 R
+/Contents 1751 0 R
+/Resources 1749 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1646 0 R
+/Parent 1748 0 R
>> endobj
-1693 0 obj <<
-/D [1691 0 R /XYZ 85.039 781.388 null]
+1752 0 obj <<
+/D [1750 0 R /XYZ 85.039 781.388 null]
>> endobj
554 0 obj <<
-/D [1691 0 R /XYZ 85.039 761.463 null]
+/D [1750 0 R /XYZ 85.039 761.463 null]
>> endobj
-1694 0 obj <<
-/D [1691 0 R /XYZ 85.039 741.337 null]
+1753 0 obj <<
+/D [1750 0 R /XYZ 85.039 741.337 null]
>> endobj
558 0 obj <<
-/D [1691 0 R /XYZ 85.039 626.197 null]
+/D [1750 0 R /XYZ 85.039 531.353 null]
>> endobj
-1695 0 obj <<
-/D [1691 0 R /XYZ 85.039 594.672 null]
+1754 0 obj <<
+/D [1750 0 R /XYZ 85.039 486.278 null]
>> endobj
562 0 obj <<
-/D [1691 0 R /XYZ 85.039 327.223 null]
->> endobj
-1696 0 obj <<
-/D [1691 0 R /XYZ 85.039 306.027 null]
+/D [1750 0 R /XYZ 85.039 118.274 null]
>> endobj
-566 0 obj <<
-/D [1691 0 R /XYZ 85.039 209.064 null]
->> endobj
-1697 0 obj <<
-/D [1691 0 R /XYZ 85.039 189.075 null]
->> endobj
-570 0 obj <<
-/D [1691 0 R /XYZ 85.039 116.019 null]
->> endobj
-1698 0 obj <<
-/D [1691 0 R /XYZ 85.039 96.03 null]
+1755 0 obj <<
+/D [1750 0 R /XYZ 85.039 83.528 null]
>> endobj
-1690 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F14 969 0 R /F35 948 0 R >>
+1749 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F42 967 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1701 0 obj <<
-/Length 2092
+1758 0 obj <<
+/Length 2022
/Filter /FlateDecode
>>
stream
-xZw6mɷK
-_^\_߅VMuY) bA$dTq/u
- H5c`
-Z5@3R޲23]r#PzM`3p*59?4D1=|
-&tA;sk
-E\S7""
-|G]wvNVSY> >0}R@FӞ
-PF;8 +Nrj%c<aykjp2Iu|[W.r"A
-
-Vn(Xj$؛'ЏndB89#1€Oʙ0PL*9pI޼@(u1<c__
-y7:)f~)'k`h)|v pil36+chַA3.tg_t!b
->~RO$C=kE-quRVyC%g*cҗJ? I28% u! ׎7iR>De17-0cnʚ
-FN-H{,\{bUM @Eϩ61J'8:<b>yI}ٻTv7=̂ںMԽwUW5ꢦ_wa0@z>K v'qFl=<-o<&UsklL1A=v+;9F}m. k+p:+3_g" CU޴Mѕ-hJR2`۽)MAy>Il]}Y}nc189 GC`awqݯ A=F FzͲwea~9g{ m#m]۲r4떠icsIT6vB?/_]S{; qsp\.#,N
-1kM#M4Kۦ.c/W4߈_ ,Scy9f dŬҚb(-twg{yVu#}#(窏>ҥO)S:Yxgd?aDzw  ѤPǝq%
-!o:۫?hFjh&5pQ,l&Y ) (#'[TĄI{sP}xm>F^"Go"ba=tk*j;csY@Y5 4) -dţ i%<Q`8G#strLj<B1-1v_!~tI9wD8%>\Fr丱lh=e;ɲFRRIR(r* ͫL-Qtrm?a>|u` !"&C*0۲FN5SfQ((\%ǔL
-1E~AQM& Xi:|L+Ԕ+W}kD,dܩ?+!OPaRs\G4{QESendstream
+xڥYM6 WxʝER%mn'٤Y$֮5%g
+R44JIx\ؤ uլ|忮|mRo_6fo/V0X6,jmv9}ͮ({eK5PG~
+}P݀}%Cb-"]IwcOA!"mܳNVS-wpгGߞ좼sSgFNtz*kcu}3N6=vls<=8C]o[V+:#k]zu\J(pz
+2c=CjT ̙.g("|ړ& Ʃ&ҘaP H
+.r!'Lr$HyQ"N!02P"y#Yw? 2GJHga!ϔJe 'p:p36U4E >Rٱ#uüī谭qh<yCH֓ɠ\_ݬ߅#iΪt2#pThΔ+`ҳI
+7-;`Ŧl]j i# t*CLC2OjFe@ezJ{Pm{[Ps4 N(Et2 _+eNzqrVDѾ"*%4 ll'/AID2͞=I|4 yb=C=ԪEDZIiTPX[2O?ުӧ9T}44kʑwx5E+H,A bǼ9yyOr
+և)ǺцSZ$Wz2-$[U3axe)\{NLʆmp2^qֲNf
+;̰*5Vz]A]Q9-;sUv>!Ƣ;6Tt8lɸ.6-JWnT<#и9עzHC~
+HSH=:k%F:[cA"bӉ=!歒2>7- @Ra߶ dFZ0L됆[ne#Y:ؚRY'3}d,t7epC\_ma
+8ǛcbygB&ƊDl]wv\PNdvS"z 趰% u5Ocپcz(s&;7
endobj
-1700 0 obj <<
+1757 0 obj <<
/Type /Page
-/Contents 1701 0 R
-/Resources 1699 0 R
+/Contents 1758 0 R
+/Resources 1756 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1711 0 R
+/Parent 1748 0 R
>> endobj
-1702 0 obj <<
-/D [1700 0 R /XYZ 85.039 781.388 null]
+1759 0 obj <<
+/D [1757 0 R /XYZ 85.039 781.388 null]
+>> endobj
+566 0 obj <<
+/D [1757 0 R /XYZ 85.039 664.766 null]
+>> endobj
+1760 0 obj <<
+/D [1757 0 R /XYZ 85.039 631.228 null]
+>> endobj
+570 0 obj <<
+/D [1757 0 R /XYZ 85.039 503.974 null]
+>> endobj
+1761 0 obj <<
+/D [1757 0 R /XYZ 85.039 470.437 null]
>> endobj
574 0 obj <<
-/D [1700 0 R /XYZ 85.039 761.463 null]
+/D [1757 0 R /XYZ 85.039 397.118 null]
>> endobj
-1703 0 obj <<
-/D [1700 0 R /XYZ 85.039 743.459 null]
+1762 0 obj <<
+/D [1757 0 R /XYZ 85.039 362.576 null]
>> endobj
578 0 obj <<
-/D [1700 0 R /XYZ 85.039 644.777 null]
+/D [1757 0 R /XYZ 85.039 236.796 null]
>> endobj
-1704 0 obj <<
-/D [1700 0 R /XYZ 85.039 624.182 null]
+1763 0 obj <<
+/D [1757 0 R /XYZ 85.039 202.652 null]
+>> endobj
+1756 0 obj <<
+/Font << /F57 1075 0 R /F35 948 0 R /F20 937 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1766 0 obj <<
+/Length 1900
+/Filter /FlateDecode
+>>
+stream
+xڵY[w6 ~ۤU)kӭ=m%SVؖkI,[ҮiE #
+$<)$B1aNpmÉ>%Є0,JŸctL 2-`BG*oBhq0u(Ӡ.eŎ:$b2Vdz927`OP$a!^c"^狎9!@QVTLg`!\lQYM*[كM؂Ԡ?ڂ553C[(_vתdo'][i e5)j9j=)R:Xۣ‡DAbG%F$HƥLj-&Ki
+>qX6eNWG> L7z L,򋲶&Mwȥ8P ^^+!iK\jӔU_d8#%ί=_s}EyX/;CR.";ixs;>^oK- nIp?1?/c$#\8$m~mJUl=o _xSt{
+uXӥx{y^!YWE-(t uFrEa{m/s
+vBcRul S_&t!i8vWpV<Az~ #t"S1 x_Lhұjc/ DQ ؉jDMPRiٶ"aHjTk6U`A$R>FF QG.
+endobj
+1765 0 obj <<
+/Type /Page
+/Contents 1766 0 R
+/Resources 1764 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1748 0 R
+>> endobj
+1767 0 obj <<
+/D [1765 0 R /XYZ 85.039 781.388 null]
>> endobj
582 0 obj <<
-/D [1700 0 R /XYZ 85.039 551.126 null]
+/D [1765 0 R /XYZ 85.039 761.463 null]
>> endobj
-1705 0 obj <<
-/D [1700 0 R /XYZ 85.039 531.137 null]
+1768 0 obj <<
+/D [1765 0 R /XYZ 85.039 741.337 null]
>> endobj
586 0 obj <<
-/D [1700 0 R /XYZ 85.039 471.368 null]
+/D [1765 0 R /XYZ 85.039 640.921 null]
>> endobj
-1706 0 obj <<
-/D [1700 0 R /XYZ 85.039 450.375 null]
+1769 0 obj <<
+/D [1765 0 R /XYZ 85.039 606.378 null]
>> endobj
590 0 obj <<
-/D [1700 0 R /XYZ 85.039 311.046 null]
+/D [1765 0 R /XYZ 85.039 426.402 null]
>> endobj
-1707 0 obj <<
-/D [1700 0 R /XYZ 85.039 290.451 null]
+1770 0 obj <<
+/D [1765 0 R /XYZ 85.039 392.258 null]
>> endobj
594 0 obj <<
-/D [1700 0 R /XYZ 85.039 244.493 null]
+/D [1765 0 R /XYZ 85.039 319.201 null]
>> endobj
-1708 0 obj <<
-/D [1700 0 R /XYZ 85.039 224.504 null]
+1771 0 obj <<
+/D [1765 0 R /XYZ 85.039 285.663 null]
>> endobj
598 0 obj <<
-/D [1700 0 R /XYZ 85.039 176.163 null]
+/D [1765 0 R /XYZ 85.039 210.224 null]
>> endobj
-1709 0 obj <<
-/D [1700 0 R /XYZ 85.039 154.967 null]
+1772 0 obj <<
+/D [1765 0 R /XYZ 85.039 175.478 null]
>> endobj
602 0 obj <<
-/D [1700 0 R /XYZ 85.039 112.807 null]
+/D [1765 0 R /XYZ 85.039 121.89 null]
>> endobj
-1710 0 obj <<
-/D [1700 0 R /XYZ 85.039 92.212 null]
+1773 0 obj <<
+/D [1765 0 R /XYZ 85.039 85.625 null]
>> endobj
-1699 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F35 948 0 R /F15 951 0 R >>
+1764 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1714 0 obj <<
-/Length 1755
+1776 0 obj <<
+/Length 1424
/Filter /FlateDecode
>>
stream
-xX[sF~[N]Ri'
-`{FQ ǴxpHӗߍo/z%f*-OA=T?3$yOŌV~>znОөS–" K频
-$V.aE4f5LRE%Rt, 0Lqf'O_@ifY΋,0% B,`>AV d4ٔ7~B5@S婫  _2_o
-Ks"8^I( ߍWStܱKSaH iZL24A^.oͩk!RLAi1%>X' dFf-
-4Y/B,rK
- UJ nWOiC1dY0b%6qLS2kp- Y3htO~5 Oqh7 \K.\:(bXf3FZNMfF[>3DG[.T_ht `ނ
-G]9Ms޳#;:V%LWN(0)ƸvN].(*NZX1Aam}dIo[z@Ý{ 4bebendstream
+xXnF}WTQndP8ԒB6tHIZ;{!E4hƈٙ3ggwfM< ? ,TH C/Lw 3NHВe9yR(`[wѫٛ4` 9
+_N}dm4H8y{k
+;LL”.;6d(UlAj'`X0),G2={Hұ FGsE\5@2 $tu_e.2
+Vr;`vW6fUQAWsLon; H%-xnf? *`~\ݧm#Z@ad4CD!R;#3qu:_4fS~JζA64[J[ۿZ\^_^UUm7<Uoi ,ς?"}LǤTK]QMmyV;qv0}('pmuiK!ER>{'9x13EdLw#n>64:8
+zbFI^$ ,vtF ҠEP?YvR3&(8kֻb֘2vT)$ "
+ji@Q?n:[ў,MhE@T<hhRZr9㵦qTp$[ 5sG6~dzVWӎrٓ._Ņ$pbJ>qQxn (
+C_))1 (!:gZ
+F7| 'l's0'7ט͵oxնzs^Y #쎆ljU-x_`59Sf9hsbf9{r(x #:\2@VȢXPJͣp !Yp>`Bendstream
endobj
-1713 0 obj <<
+1775 0 obj <<
/Type /Page
-/Contents 1714 0 R
-/Resources 1712 0 R
+/Contents 1776 0 R
+/Resources 1774 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1711 0 R
+/Parent 1748 0 R
>> endobj
-1715 0 obj <<
-/D [1713 0 R /XYZ 85.039 781.388 null]
+1777 0 obj <<
+/D [1775 0 R /XYZ 85.039 781.388 null]
>> endobj
606 0 obj <<
-/D [1713 0 R /XYZ 85.039 761.463 null]
+/D [1775 0 R /XYZ 85.039 761.463 null]
>> endobj
-1716 0 obj <<
-/D [1713 0 R /XYZ 85.039 741.337 null]
+1778 0 obj <<
+/D [1775 0 R /XYZ 85.039 741.337 null]
>> endobj
610 0 obj <<
-/D [1713 0 R /XYZ 85.039 410.584 null]
+/D [1775 0 R /XYZ 85.039 369.937 null]
>> endobj
-1717 0 obj <<
-/D [1713 0 R /XYZ 85.039 387.267 null]
+1779 0 obj <<
+/D [1775 0 R /XYZ 85.039 333.07 null]
>> endobj
614 0 obj <<
-/D [1713 0 R /XYZ 85.039 344.5 null]
+/D [1775 0 R /XYZ 85.039 277.361 null]
>> endobj
-1718 0 obj <<
-/D [1713 0 R /XYZ 85.039 324.512 null]
+1780 0 obj <<
+/D [1775 0 R /XYZ 85.039 243.217 null]
>> endobj
618 0 obj <<
-/D [1713 0 R /XYZ 85.039 294.83 null]
->> endobj
-1719 0 obj <<
-/D [1713 0 R /XYZ 85.039 272.114 null]
->> endobj
-622 0 obj <<
-/D [1713 0 R /XYZ 85.039 211.171 null]
+/D [1775 0 R /XYZ 85.039 199.986 null]
>> endobj
-1720 0 obj <<
-/D [1713 0 R /XYZ 85.039 178.849 null]
->> endobj
-626 0 obj <<
-/D [1713 0 R /XYZ 85.039 124.401 null]
->> endobj
-1721 0 obj <<
-/D [1713 0 R /XYZ 85.039 103.205 null]
+1781 0 obj <<
+/D [1775 0 R /XYZ 85.039 163.721 null]
>> endobj
-1712 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R /F35 948 0 R /F14 969 0 R /F11 976 0 R >>
+1774 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1724 0 obj <<
-/Length 1509
+1784 0 obj <<
+/Length 1726
/Filter /FlateDecode
>>
stream
-xZS8_3{pлSrO\LbC씶%B
-ɐ2 3"vW+h;?VD\E WݻnEKEk-HK3G۟1tFDGݽ$Yާ9`8$
-q1O>9 t?wg"bnm}}C+"\#Bn_D
-^N[YpL+PM4>p
-WRrͻ`qN4dI6B&УhOؓ?k2!BM*;WƯX[΋і<vǣnU\Y@lF[!$1f{H!NHe.ud#{uo.%j_8d㥰 /(ZPE2kG> \G6ƶض`hVxi٦@JKK|ag9N/p[LwczѿO>
- f[H;:-YqMk4m(Ӝ5#'3?m6-c8Tued,"Ey(ÿӌj"-!<A2GJY.FKFƐƠ11La]˙+ RW/vf]WrFD\<QS%fs|O͝ Na#&,CB>/yzd2T[,y2R{ָɟdRM-dpX sXo̞ML=w䎢=HwxP{G-!7GX(UX}I²(?"\,| i6k7/
+xY]o6}$bMimڥh&q>KrKd6C[=J%S ȴjJXYN/'xz3&!
+)̫[
+WugG .t~%{ѧy^02@Re6oN?_.yZJ>L|+X F*0ƈX]M.&g);ǧWc>zDA*TQA%ku02A`$07:B;- TZTg`t(PCNJ"Xgp%HPa'Nb%JaLdHbeVSֿBz1/wnmW*{ٝ֫b7k w;n`Xa$ۮ[M[{g{[`A LYk,ʬ]?]7?jH!t)0~nM{4NNu6#-}y>_|*$R%ʪBX;AUx[E`l7zTYKhw8~RyG,H6cMdzIHy2?Q/v)V Q9MV\0O+c~qy\_ -v3;P_>T)KDH 0m%Sz}XT:6=:8߷-WH@
+٭Izbb5g>_pM4 %G`p>=hL&/??Y>
+q
+pB-BQ5LꡚB@/e?6k-Aʒ.A-PTƄ"TԊBEy"F/IN\P$ba&a}tce[BI ~ع`;7/V
+&D‹ X!Xcv@PR#ZSݚ&+/m 2z0\Ou]7P
+]
+v8{&:㈊2z0 Q~<e=f/-Q O!WW:-~lswlqYYRvz@CC{VJbGdQ +i!FXQ*U<d7(( qxn0x2]TLs"nyijΏM\biUENa>PRĝ1b׏2rƶws k M}CkLaZBKɠX{|-Լdt(<3.spt Gߜ?]?Ĺ^ZJ*DUZB ۾m tkh1
+CF!_"A >4L\K+faH9-?.&}~@9}y_u`T0Ľvq[#9$6I 5qy7|.+ײ=Rn,m UO0$|%X[U#櫭cBFNe}cA^<YۅDRU"-$NB%gވi^tnSwX_7)h#:l&gd!0[VB.X d
+D"endstream
endobj
-1723 0 obj <<
+1783 0 obj <<
/Type /Page
-/Contents 1724 0 R
-/Resources 1722 0 R
+/Contents 1784 0 R
+/Resources 1782 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1711 0 R
+/Parent 1748 0 R
>> endobj
-1725 0 obj <<
-/D [1723 0 R /XYZ 85.039 781.388 null]
+1785 0 obj <<
+/D [1783 0 R /XYZ 85.039 781.388 null]
+>> endobj
+622 0 obj <<
+/D [1783 0 R /XYZ 85.039 761.463 null]
+>> endobj
+1786 0 obj <<
+/D [1783 0 R /XYZ 85.039 736.114 null]
+>> endobj
+626 0 obj <<
+/D [1783 0 R /XYZ 85.039 668.118 null]
+>> endobj
+1787 0 obj <<
+/D [1783 0 R /XYZ 85.039 633.372 null]
>> endobj
630 0 obj <<
-/D [1723 0 R /XYZ 85.039 761.463 null]
+/D [1783 0 R /XYZ 85.039 577.663 null]
>> endobj
-1726 0 obj <<
-/D [1723 0 R /XYZ 85.039 741.337 null]
+1788 0 obj <<
+/D [1783 0 R /XYZ 85.039 543.519 null]
>> endobj
634 0 obj <<
-/D [1723 0 R /XYZ 85.039 616.811 null]
+/D [1783 0 R /XYZ 85.039 310.599 null]
>> endobj
-1727 0 obj <<
-/D [1723 0 R /XYZ 85.039 594.095 null]
+1789 0 obj <<
+/D [1783 0 R /XYZ 85.039 274.334 null]
+>> endobj
+1782 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F42 967 0 R /F35 948 0 R /F39 974 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1792 0 obj <<
+/Length 1611
+/Filter /FlateDecode
+>>
+stream
+xڥY]s8}0ST`_:~x)bi I{,)v:8]]ReGG-#Q`D"ZfYtWaH $0/fs Y->q-V?>-]&)4d
+Q_gs}|͋fanOR~]d
+0-;g XgԜogWGk,w4v$<Ci> )@:G IrWgI PaQc0*csDsʼn%Zokڙ^Nu58Mw"zDz?ZOwIZRXNPQة 4f$F`B?ky/\8v
+0 l '/־Lhb}:s≷v$NAj:fAf8{odEQTPO !sL,2\L
+endobj
+1791 0 obj <<
+/Type /Page
+/Contents 1792 0 R
+/Resources 1790 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1797 0 R
+>> endobj
+1793 0 obj <<
+/D [1791 0 R /XYZ 85.039 781.388 null]
>> endobj
638 0 obj <<
-/D [1723 0 R /XYZ 85.039 466.842 null]
+/D [1791 0 R /XYZ 85.039 761.463 null]
>> endobj
-1728 0 obj <<
-/D [1723 0 R /XYZ 85.039 446.251 null]
+1794 0 obj <<
+/D [1791 0 R /XYZ 85.039 741.134 null]
>> endobj
642 0 obj <<
-/D [1723 0 R /XYZ 85.039 376.993 null]
+/D [1791 0 R /XYZ 85.039 631.228 null]
>> endobj
-1729 0 obj <<
-/D [1723 0 R /XYZ 85.039 356.398 null]
+1795 0 obj <<
+/D [1791 0 R /XYZ 85.039 597.084 null]
>> endobj
646 0 obj <<
-/D [1723 0 R /XYZ 85.039 177.675 null]
+/D [1791 0 R /XYZ 85.039 255.771 null]
>> endobj
-1730 0 obj <<
-/D [1723 0 R /XYZ 85.039 154.959 null]
+1796 0 obj <<
+/D [1791 0 R /XYZ 85.039 219.506 null]
>> endobj
-1722 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R /F14 969 0 R >>
+1790 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F35 948 0 R /F42 967 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1733 0 obj <<
-/Length 1655
+1800 0 obj <<
+/Length 1841
/Filter /FlateDecode
>>
stream
-xZKsH+S䲕8dTd%AA¨
-cöd8-MiX;R
-#FDGm-fж$4P8bU
-/pC=au2DCe^o#ĚWĺX>̳hf726~&Zpk@=iZ7U6{1@@
-y z<AViS8Q5$V$r˞ ^ oJf+f7[Wys"Vl<"- W\%(.yweJ١"#cI"*UM٭Fa|^bUhY\F˥yxrh#
+xڭYr6}WTBF䥓kL㤖$E[ʒ#҉ӯFnd=$S ȴS5A(W<'Y̝<y)Ha5]^~8bNO/_ ,gs)ti;^{Զ?i1|3ylp4xo&QULC#W@EQnٸclj#9Ũ(بT~9F&9qdF2)ɖDgIr
+bؾ(?a3
+kTd}87ʶ/YҌ[pՏjGvXX_yҟ4q*M4Ar,t{Aď]AX$xnJ F_%bJlPG;K' CL$+o3 C"]^Hsd6MRa= ݨ</\J>yMkm ;:'9^jdg
+7\ٮVt3V{mm}o+= ޸`czc:LYY]kχ}:HJݫ՗ݏ @=xo>-~q}ٙ:4`jMrqo/*C}uV//Oc
+7+eN"&"ocDbyD)RR%!
+T)==7̤ɘ>
+ͿXYvFL;(гj::<SXo̶7ޡnWV-Wp^&jΦj4Ip##>G_ic3ӶT84=&>wgs'۹
+)͍إMnj:< jP7<D@}ByP}]R#CP`o3
+(B2EN}ᅪiendstream
endobj
-1732 0 obj <<
+1799 0 obj <<
/Type /Page
-/Contents 1733 0 R
-/Resources 1731 0 R
+/Contents 1800 0 R
+/Resources 1798 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1711 0 R
+/Parent 1797 0 R
>> endobj
-1734 0 obj <<
-/D [1732 0 R /XYZ 85.039 781.388 null]
+1801 0 obj <<
+/D [1799 0 R /XYZ 85.039 781.388 null]
>> endobj
650 0 obj <<
-/D [1732 0 R /XYZ 85.039 761.463 null]
+/D [1799 0 R /XYZ 85.039 734.065 null]
>> endobj
-1735 0 obj <<
-/D [1732 0 R /XYZ 85.039 736.911 null]
+1802 0 obj <<
+/D [1799 0 R /XYZ 85.039 688.99 null]
>> endobj
654 0 obj <<
-/D [1732 0 R /XYZ 85.039 680.8 null]
+/D [1799 0 R /XYZ 85.039 592.231 null]
>> endobj
-1736 0 obj <<
-/D [1732 0 R /XYZ 85.039 659.806 null]
+1803 0 obj <<
+/D [1799 0 R /XYZ 85.039 557.688 null]
>> endobj
658 0 obj <<
-/D [1732 0 R /XYZ 85.039 601.166 null]
+/D [1799 0 R /XYZ 85.039 471.95 null]
>> endobj
-1737 0 obj <<
-/D [1732 0 R /XYZ 85.039 581.178 null]
+1804 0 obj <<
+/D [1799 0 R /XYZ 85.039 438.412 null]
>> endobj
662 0 obj <<
-/D [1732 0 R /XYZ 85.039 440.375 null]
+/D [1799 0 R /XYZ 85.039 202.765 null]
>> endobj
-1738 0 obj <<
-/D [1732 0 R /XYZ 85.039 420.387 null]
+1805 0 obj <<
+/D [1799 0 R /XYZ 85.039 169.227 null]
+>> endobj
+1798 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1808 0 obj <<
+/Length 1978
+/Filter /FlateDecode
+>>
+stream
+xڽYKs6WЙR %^ٙmݸNj!h[THw
+E\0FY "fSV55=}hrl1#k8b9^l.dllD
+hFcfnt ؇t 0u~A9 YUZWʫVs0@-NPcL3p` a*XH31sA&F*LRz)6$sD1 f E'DpZP+f,tA6;fa"L*-ƭh/3:|=$WpH>Ҟ\=5H3G>n"%#`v`G*:
+Ri;`E"2H"V$˶cu&u{X׺kVI$ڡŸ`1HÌo6GhH
+V<hz|~1 ~4IG("߼U{ۀI`]ճv2m^ b
+FE&&q
+Fx([Nm~\TBwQʽ"5NJo0tBN4w^>
+I23GXؿҖ?(uM+EarY@cQf+f6m݇estݦ\Z)5TOo1Ga:Ÿh1h 뺷'b(> f [QsDngo)|YРC`֩=0}̭ Oz+[YVlbܶTw=}v^2dn }WUjmna
+./^GGuV]6qE֑1To[ti6Uowf諾$5p
+{=H
+z}Wi"p.V'-4|yoBU.6 
+endobj
+1807 0 obj <<
+/Type /Page
+/Contents 1808 0 R
+/Resources 1806 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1797 0 R
+>> endobj
+1809 0 obj <<
+/D [1807 0 R /XYZ 85.039 781.388 null]
>> endobj
666 0 obj <<
-/D [1732 0 R /XYZ 85.039 333.519 null]
+/D [1807 0 R /XYZ 85.039 735.322 null]
>> endobj
-1739 0 obj <<
-/D [1732 0 R /XYZ 85.039 312.526 null]
+1810 0 obj <<
+/D [1807 0 R /XYZ 85.039 700.779 null]
>> endobj
670 0 obj <<
-/D [1732 0 R /XYZ 85.039 281.59 null]
+/D [1807 0 R /XYZ 85.039 656.377 null]
>> endobj
-1740 0 obj <<
-/D [1732 0 R /XYZ 85.039 260.996 null]
+1811 0 obj <<
+/D [1807 0 R /XYZ 85.039 622.233 null]
>> endobj
674 0 obj <<
-/D [1732 0 R /XYZ 85.039 217.765 null]
+/D [1807 0 R /XYZ 85.039 552.074 null]
>> endobj
-1741 0 obj <<
-/D [1732 0 R /XYZ 85.039 195.049 null]
+1812 0 obj <<
+/D [1807 0 R /XYZ 85.039 515.809 null]
>> endobj
-1731 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
+678 0 obj <<
+/D [1807 0 R /XYZ 85.039 387.378 null]
+>> endobj
+1813 0 obj <<
+/D [1807 0 R /XYZ 85.039 342.304 null]
+>> endobj
+682 0 obj <<
+/D [1807 0 R /XYZ 85.039 342.304 null]
+>> endobj
+1814 0 obj <<
+/D [1807 0 R /XYZ 85.039 310.551 null]
+>> endobj
+1806 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1744 0 obj <<
-/Length 2024
+1817 0 obj <<
+/Length 1244
/Filter /FlateDecode
>>
stream
-xڵYYoF~ׯC&#;W SæIQ"e͎6#ǁ+L;v`_#WcGS?.G)B3/i27]^-&3۶ |?0>.y_/~aj1s9N@_F`mS0oFk ױu?ݍR9g̻T5+f2|a6
-f$N_K<vYn 봨884ج~85 07uBvu dE/QS:EV|e g"!Oҹq܊;pIa&AvӦe<cB`Ea)?+04_'^kle̓J+DzO@Y
-}rϸKq}7<_8oBrrO72- VcS
-'q;ʀt%,[9 wL|#>oȇx"hs{ijJkl;l2># tVjxt+j[L l2 }%MIFj ֧cOu;҄`
-7Fh* @2 )y
-5 %ȘpLhXZx||
-n(dqTŠQ6(tPU3\;=pB G磺|Z  3`I J..}6,#i[
-
+xڵWs6~_S*dfz3|6>y84!ݕ6$u2ji߇,
+
+8nh#nXI1f~111._o1JBZ>'wh}k;_Du]<H.|>b~EGQ9BLmt{G5
+YRfhb6HNU|S3Yb]FՓ&A.KO`&nTRnL.6Jݪzmf )lRiu.
+i
+u?KZzw|_B/l$mAC% )3W蝻Yʒ*|ꬼp:C0Ξssuᬮ.%|= P ܀4¿~ֵh Ofg}z sO 9ѧendstream
endobj
-1743 0 obj <<
+1816 0 obj <<
/Type /Page
-/Contents 1744 0 R
-/Resources 1742 0 R
+/Contents 1817 0 R
+/Resources 1815 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1711 0 R
+/Parent 1797 0 R
>> endobj
-1745 0 obj <<
-/D [1743 0 R /XYZ 85.039 781.388 null]
->> endobj
-678 0 obj <<
-/D [1743 0 R /XYZ 85.039 761.463 null]
->> endobj
-1746 0 obj <<
-/D [1743 0 R /XYZ 85.039 736.911 null]
->> endobj
-682 0 obj <<
-/D [1743 0 R /XYZ 85.039 736.911 null]
->> endobj
-1747 0 obj <<
-/D [1743 0 R /XYZ 85.039 718.708 null]
+1818 0 obj <<
+/D [1816 0 R /XYZ 85.039 781.388 null]
>> endobj
686 0 obj <<
-/D [1743 0 R /XYZ 85.039 522.193 null]
+/D [1816 0 R /XYZ 85.039 733.118 null]
>> endobj
-1748 0 obj <<
-/D [1743 0 R /XYZ 85.039 503.321 null]
+1819 0 obj <<
+/D [1816 0 R /XYZ 85.039 700.697 null]
>> endobj
-1742 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
+1815 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1751 0 obj <<
-/Length 2319
+1822 0 obj <<
+/Length 2070
/Filter /FlateDecode
>>
stream
-xڽY[s6~[h^܍TR&mhH﹀%Rry7 psH+~AϰӅ2r鹸?~`RP#YW??~ GZk #O\ߎox<pn:c#O#/!s )t 0B`uZ6ˋů) xW*#@KNzt~7kEeҕO}=?d ./'
-n\pVQ/xX-2as:3FhJ{9FYJK{}5UGCɿU:s\^s#V麺xs}9./*>"UpQ)N;a#k8NhH kJCei•UZ[RVU.Op])=wŷ4(3OU|fS3SVYoէX1 |X^^}s0Q ( % Sb_p5͌ q(%{ͻ>XlOtQ4mUA1K0<$ Omqk\Ι-?*.
-4NhG~ldHϵ~ΛbLӪ _fԤW*`ER"
-U}VodiiN 0MrZ̒!$˨JŠ3C] Ó)S V~ 槡"~@ u wN9iBtW>-`6RvH)33> $v.IPOW 2WM# W'dr8ZhyDPPGj$9E_ڕR@Kt3PGplG +JIGgJo^ 驳*ļ2sGS^6T䛵Q/|GFG#[A?:**[hwuԀ }{[nr~>MyUiM=j jby˳&Kl:XO%t{.BBp_>Yd'E\S%RSwoUExcT F^Jar(S?y܎Tn5$e+^pC(o;?hdžNtz=oA'endstream
+xڥXKsFW01 ڃVN6ڒdʇ$$H@3ۯ
+;o?GL^gS'HVߝ_n?~Z]s7IR~ o>ܾw_o~ZY#Pg
+w7 ՋB-ߖ3>5cS/J:P2YnDbͿ矻G7
+fꒊ-
+`SyY PYr͕M;wn 0 k84DEcÌ<W
+I.MUVzYD8N[ -k|S|7o78w)ۻ=thð+okK+F ZTD`/WaC98
+!K`"5"_aN۞Ɇϼt$ v+ZՄb/H0To}Wʡo15v,;AՄ\2jc8aCChfDu2 ɫ /u%"ɦ<,+[`tlzGGF/L7"6C Ddݢ}V 2R`[?8Rb_9Oh'DUrAIg} Bx6\{9bx뺒I$!EpI~@H
+OV3 q[/3VҟzKHC+|G,xmdbZQQ.PǶ;7*oA# χFaQ6.4EGVF ge95na*DU?X"ϬUX1E> J.߽{k"oծfG^?ϟ=&}͕}ͅ<k;`>^2+.=즌`b 1
+\`ͩ(%[Ⱦ|j[}9/ R;YcoEejYEa
+=6%ͥ1"d2߽YS|Mx툓q^sDKhQq`>-bFyR\ Եl6c(Kgzwjk2\mMF>2MboH8Ɋ&n+u+<y -*A<n2r2<V&Lf>l7eO031mHi ܺ 嚾ЈCJ%`+;]¥(9Uo>@fg XlNfXg;qX ,M53w I04<LIo;3Y842pt\R&# TͦP#ls[-FQD7<o`Zd/zYX
+)[nGO~!?$c/}UB+.M*b'3,:PR\&<'Ap@^UܐI^#ܧ5KAj%i2 *t-[}k^- ĪkO~;(O<I$44ďz
+ =^9% N~l 91NJkȱdd*t>,)?ke|]BR?(~'ULX
endobj
-1750 0 obj <<
+1821 0 obj <<
/Type /Page
-/Contents 1751 0 R
-/Resources 1749 0 R
+/Contents 1822 0 R
+/Resources 1820 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1711 0 R
+/Parent 1797 0 R
>> endobj
-1752 0 obj <<
-/D [1750 0 R /XYZ 85.039 781.388 null]
+1823 0 obj <<
+/D [1821 0 R /XYZ 85.039 781.388 null]
>> endobj
690 0 obj <<
-/D [1750 0 R /XYZ 85.039 637.406 null]
+/D [1821 0 R /XYZ 85.039 721.69 null]
>> endobj
-1753 0 obj <<
-/D [1750 0 R /XYZ 85.039 616.413 null]
+1824 0 obj <<
+/D [1821 0 R /XYZ 85.039 687.147 null]
>> endobj
694 0 obj <<
-/D [1750 0 R /XYZ 85.039 408.163 null]
+/D [1821 0 R /XYZ 85.039 413.273 null]
>> endobj
-1754 0 obj <<
-/D [1750 0 R /XYZ 85.039 381.549 null]
+1825 0 obj <<
+/D [1821 0 R /XYZ 85.039 370.988 null]
>> endobj
698 0 obj <<
-/D [1750 0 R /XYZ 85.039 276.284 null]
+/D [1821 0 R /XYZ 85.039 231.701 null]
>> endobj
-1755 0 obj <<
-/D [1750 0 R /XYZ 85.039 258.018 null]
+1826 0 obj <<
+/D [1821 0 R /XYZ 85.039 199.886 null]
>> endobj
702 0 obj <<
-/D [1750 0 R /XYZ 85.039 258.018 null]
+/D [1821 0 R /XYZ 85.039 199.886 null]
>> endobj
-1756 0 obj <<
-/D [1750 0 R /XYZ 85.039 237.423 null]
->> endobj
-706 0 obj <<
-/D [1750 0 R /XYZ 85.039 108.048 null]
->> endobj
-1757 0 obj <<
-/D [1750 0 R /XYZ 85.039 90.181 null]
+1827 0 obj <<
+/D [1821 0 R /XYZ 85.039 165.742 null]
>> endobj
-1749 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F20 937 0 R /F15 951 0 R >>
+1820 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1760 0 obj <<
-/Length 1632
+1830 0 obj <<
+/Length 1824
/Filter /FlateDecode
>>
stream
-x[[s8~WL]Kt$ dnMh s,l[l6`˒;lÚX*BE4amݠ+r`Eڔjz_jh$q6{*8u;"ad zy};t׽gޒH
-x6߀6?1%, QRF|wM6()Z룈T0\3, #LCOeW͒hdrbS.0ӍX"W&Lf-9H8?dU<&*fg_(/%ab{ۣi%&]heI}m꛵͠_\`U ['| &hS"L:͆Cw4xh H'!:Mx΁8-\RAޖs+WQXvarRMf|`ǣi}ChkNxe4s"-\X~A,<&>s4%"fQ˒EF== y,h $Bz 2;&I\Y`|< ;k9/XMVSXw0CpCЃ=;K@EO0R/HDߏrSax mG^9N(ݤ&o6蠔;L;F* ^*Fl,LCnϮMt g8b$sē[9L!q.uCĵ3X6
-O+[j6f~^QZ
-Ssu=8j֟2WNqrVyeA#ppZ* P:eR5SnC2$qNI51p+Kp1٤
-^fP:|%o(f%>Z!ΰD_NrFp
-Y*b$ہ| K`@vsJ,*u<$cSt>,lĞJ<4l+@-lAj:WKA#+Tc`u^ [![c+,auj˵Y"O'ܞB<rBvLy"1P3,abAW僝A|jSĪ=~Kw! w8:3k/ו $t]*iUY&B鉶ZjUŦ֒hwFۏpmٺ
-Z!j_GstU=~<]c]P~"ZŽR+35eX,^a_Cvs˳^%-C(;P",MEv_ϸbO'ý
-K$o$LM$4>FȝZ;h ,`
+xڵYr6}WLJ}(8LI*L-9w
+S Br|1;6\I& *)juVoϡ"斬L2k1")bqE "&HVLP
+6q(
+5"IDGED)JiEqUz};D0ʆ6bb:fY|>B1YL&?/$W\ "<`Է0ZAذ@8\gVUgb*fk YO&xr1)f"LAgZS}v5XJaO̳.dK41RH(s{0hlY~>iOZl1ɾN
+bjuyEatb0q4cx~A%$Om1~p0Ct{f;gMYeNӹDm1>h
+ [U.4ծ)bXܶl\n*n(d
+Pxv/f97݄q엉R
+O)Z鬒]}~orɘ}>' Mgcc Vۺ?11
+˯OR;W)eϡF/CC5TY;WhJ}vE-zs5?𸩛9!Lr[<ٙD2=L4/3 ~>"쐑XfMm´D;LCT d%ơktb3QUuW֭z^I/Ó PYfʽɆNif}_^΁^ yItQ\;WP(}r7J޿ ) M^؅<
+ɭ+ EU;}30˘ 0=@)`,P^0V(r@' En!r=r=&r]FfeDo˻U g#s FDT@rA:T@"Bx(Qendstream
endobj
-1759 0 obj <<
+1829 0 obj <<
/Type /Page
-/Contents 1760 0 R
-/Resources 1758 0 R
+/Contents 1830 0 R
+/Resources 1828 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1766 0 R
+/Parent 1797 0 R
>> endobj
-1761 0 obj <<
-/D [1759 0 R /XYZ 85.039 781.388 null]
+1831 0 obj <<
+/D [1829 0 R /XYZ 85.039 781.388 null]
+>> endobj
+706 0 obj <<
+/D [1829 0 R /XYZ 85.039 651.216 null]
+>> endobj
+1832 0 obj <<
+/D [1829 0 R /XYZ 85.039 619.8 null]
>> endobj
710 0 obj <<
-/D [1759 0 R /XYZ 85.039 610.569 null]
+/D [1829 0 R /XYZ 85.039 273.638 null]
>> endobj
-1762 0 obj <<
-/D [1759 0 R /XYZ 85.039 592.303 null]
+1833 0 obj <<
+/D [1829 0 R /XYZ 85.039 241.823 null]
>> endobj
714 0 obj <<
-/D [1759 0 R /XYZ 85.039 534.269 null]
+/D [1829 0 R /XYZ 85.039 183.789 null]
>> endobj
-1763 0 obj <<
-/D [1759 0 R /XYZ 85.039 515.796 null]
+1834 0 obj <<
+/D [1829 0 R /XYZ 85.039 151.766 null]
+>> endobj
+1828 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1837 0 obj <<
+/Length 1313
+/Filter /FlateDecode
+>>
+stream
+x͚MoF:p_%Pl%U۪$#( NH~~jZ6 PprgA㯨f:>#G4}Hļ\ҶV<) |5]
+ 3Q8 LҢ`$yٶ3kg9!
+7&#=L~) Rp ak8\NE2Y>k4de$xA$qGȸ1 x0o2t,w4#
+,6%1;&8ö ~m"zu򣐴1fgddVC\Ƹ1a^&ogv\)
+v͓7OeFT76IFH/hQZpFIX0 %[<07հLp[H1>h E ShA `A$p66Mﰬ}B[2>MdHx dM5j2ݔvL&
+EQhc `c$X6_ηV/%p("h}. 8^
+^VlѐGOx]7{?›H%KΌU=Kl>L:buAendstream
+endobj
+1836 0 obj <<
+/Type /Page
+/Contents 1837 0 R
+/Resources 1835 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1841 0 R
+>> endobj
+1838 0 obj <<
+/D [1836 0 R /XYZ 85.039 781.388 null]
>> endobj
718 0 obj <<
-/D [1759 0 R /XYZ 85.039 471.311 null]
+/D [1836 0 R /XYZ 85.039 761.463 null]
>> endobj
-1764 0 obj <<
-/D [1759 0 R /XYZ 85.039 450.716 null]
+1839 0 obj <<
+/D [1836 0 R /XYZ 85.039 741.337 null]
>> endobj
722 0 obj <<
-/D [1759 0 R /XYZ 85.039 394.804 null]
+/D [1836 0 R /XYZ 85.039 671.875 null]
>> endobj
-1765 0 obj <<
-/D [1759 0 R /XYZ 85.039 376.33 null]
+1840 0 obj <<
+/D [1836 0 R /XYZ 85.039 639.853 null]
>> endobj
-1758 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F35 948 0 R >>
+1835 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F35 948 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1769 0 obj <<
-/Length 2704
+1844 0 obj <<
+/Length 1792
/Filter /FlateDecode
>>
stream
-xk6
-ODԊ$lޥ3MӮ{יs#KFzt?_(Q~] 
-]r'N xzV9 nFKK#w5Mm]4{:
-0V.ۨgG\;öq*[1\OD GHe=2Nu u ˩GYcLWˢdab'"=8ȮYZQAj?93nWT&>RVȵnm"Y_ّ x>},[Z'#SzANb =<Q}ؿrl'>V\Q&5IE\p(0<zM5e8lh8ߥյ<BJXCc
-T?pa7˼37_576䵪SU}*, zYW~?^1z^vS?Ji5^G1ҿ^*J1;>l@Ŵ}#&7iF3 aOOfa)baD!(> έ:*rAaQgm-}␒Lc<Ab*G˘QzN{+4Zm ?p Z;{j?I$"Wa'ȷ>C^ T/qQ@8ݮ| 祇?cX9NG)quCV AKIn
-m޿꼸9Q?Iw f_(@`dE\U7PBzӧ= Wb'*R;e`\rА5A(EqZX$Ab0Ah%E`j^
-}C#r F2^nؑ%8TMRӇ>1>7;GݵJ2++˯y2
-JF9n⽳aS8DS'a5m/8UJm {M0
-嶦URKL&qAn M 0l?M)d+#ntE/(O <+L M>Sg*Caϝ1_
-`n4tlR=z"O)ٞM;1endstream
+xڕX۲6}?_KLM&M:i;Al`}Eg{K[ ~b'׋8LEz|{hAhDJ7 (h\U^hU,֮ b^mF\lvf"QI.6?UzΣ:nr%yUWT{|7KT],WT%7=Ͱq&y/]s;uh]5=w?swض]njf,!r.箽E&+5or's:7 _J;|
+;Uf5<c'E)P}B^-cc-?Zm}ԥⱅ=yfu\Vsb8;\vE,:<s2TM*-Y U%e
+ׅ̔7z,RLj]:k5YSw/}\f<Tnq]xR wvN;ZN4>q%jd7BXWA Cv|n~ J! 60%4+ w/k
+#<\<ivڠ䚧s~Χ$r^3#ݕpppx[Bff= rZ*?LKb@$#%3ޔfCoZ
+5(if"X>h^3#ipix[$1˼Ցz;M}ŧ V.L($#7s[ 3UhpPhx[!:}]EKuog0Wȟ߼-̌ntWAm,F+r=L,`䂽
+ӋǮKMIcms4fa`(G콃)9y^%宀@MدT(3<J| d 3cs k#6FyJ˳OFVRɜ
+NgAV֪.dtm:(8s˙qL"֡ɬq,̴q q{ofex! DG.||@ЀG[wvsz%""y0~-BO?
+Po}ZVhdWű_*둔S.d^&3ٺ;9K؈pg~tBa"  endstream
endobj
-1768 0 obj <<
+1843 0 obj <<
/Type /Page
-/Contents 1769 0 R
-/Resources 1767 0 R
+/Contents 1844 0 R
+/Resources 1842 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1766 0 R
+/Parent 1841 0 R
>> endobj
-1770 0 obj <<
-/D [1768 0 R /XYZ 85.039 781.388 null]
+1845 0 obj <<
+/D [1843 0 R /XYZ 85.039 781.388 null]
>> endobj
726 0 obj <<
-/D [1768 0 R /XYZ 85.039 761.463 null]
+/D [1843 0 R /XYZ 85.039 761.463 null]
>> endobj
-1014 0 obj <<
-/D [1768 0 R /XYZ 85.039 667.044 null]
+1016 0 obj <<
+/D [1843 0 R /XYZ 85.039 653.495 null]
>> endobj
730 0 obj <<
-/D [1768 0 R /XYZ 85.039 667.044 null]
+/D [1843 0 R /XYZ 85.039 653.495 null]
>> endobj
-1771 0 obj <<
-/D [1768 0 R /XYZ 85.039 642.326 null]
+1846 0 obj <<
+/D [1843 0 R /XYZ 85.039 615.228 null]
>> endobj
734 0 obj <<
-/D [1768 0 R /XYZ 85.039 583.118 null]
+/D [1843 0 R /XYZ 85.039 556.019 null]
>> endobj
-1772 0 obj <<
-/D [1768 0 R /XYZ 85.039 553.714 null]
+1847 0 obj <<
+/D [1843 0 R /XYZ 85.039 513.066 null]
>> endobj
738 0 obj <<
-/D [1768 0 R /XYZ 85.039 352.231 null]
+/D [1843 0 R /XYZ 85.039 162.542 null]
>> endobj
-1773 0 obj <<
-/D [1768 0 R /XYZ 85.039 324.708 null]
+1848 0 obj <<
+/D [1843 0 R /XYZ 85.039 121.47 null]
>> endobj
-1767 0 obj <<
-/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R /F14 969 0 R >>
+1842 0 obj <<
+/Font << /F20 937 0 R /F15 951 0 R /F42 967 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1776 0 obj <<
-/Length 2701
+1851 0 obj <<
+/Length 3382
/Filter /FlateDecode
>>
stream
-xڽZYF~_!%alv+Z6GF)R&x5ba_쪮ā?1 =ۑ$-p8K@Dَ> :vD̗X<|3?};I)-!,B|*×G87{{j> Տo_86~p:o)[~:7g֞85[Dds<i{J~vp~fS~kt3DFt0T1?r437>ipkT2Eb$Ms 9lnrUe=fzwP\I-,/o^wUR?vOYӪGK#
-U}# bi_&.U-|HzU_C-'}YzTsvUbDh/MsR~l.@^=P2c~<r5UU+6UFO#ܬ\mԛYLS* W>^_disUwWK.Fv>ݘUHnuأ6+dwڶOgǧ/_uy~\m%oD` ̍l%xE!%HWO)(ԍ7q
-UXR+rvCxF|f-U_ݢ&J,NL0NGc~WG$[rgە<;yu>^K $\pKV& 쐛t
- tçƣl;1@K7wK
-c Eq/T<epۿ:#/"@rP=.p{0$
- =/=o=sEd ';=xj> n`;"Gg' G P Хk0)iwڍm@By>mm%Hˠ'o+:cdW
-F[S> rh^ 5x:_2kk߻5l
-M0f1J.Ӆ]}VZ㫩t I;dҋxq:S8ZK %dYeXk#F=@ [HPX*L\1K ,:m1REZh (pt鶯¿j=q
-GFփؠ0.yu'^ !D=?XE$m] <jtt0 NF
-u۾(؁
-#A F '{O Ab<2qc\ !l h Б-=˻kuB傟)MLsFE]妥?R[`{)-{'(+Z__l+EOtm(l2Rd?E# J-zjǾ&{}(
-M)Pc`ح$g5+>dU<iđs"jEm"TiQxtL9 먁 GW`1^v^h%ɨIgM.nW'c743R0ON>8g uf+u~KA
-,Ig$6.??*M^)Ͳ6޸)GIC{t /#\2YP?ZW&jφ58G0*K<S[s6A||;!d"R֚w" _D$ڞo2'Iƒ8oe(Pa2WMՍ^z!y lK~]U*q2PME2v#o,EeqkJ>)梆se>ړJOA+LIOP#}b/UO"Ǭ4vL7W)Q>s_".B|S(/ c83RS49I;SL0xo\G0,(x_=9>mc?I +Jѕ ۸ykgMa\~;6O5͝A(w&_H??dם`UhX4?2 (/~g9e581W#'/ ]dBq55?m Ȉy1BnE8첳 wB(H* ~@?Qdz s<z e7Gg-ܧendstream
+xڭks~_Bz3pgiGD6I2
+H`d3b_D R#OI w {Gh+,T'a:Π/nCls'd>4W7.mvVSj4 ;ܢsGz2*?j׼lnmƖb._qEO—u/逡zQed,P9܈ G rЇFv 51%σR- wA %MqpJG84E6Nf<ԗ
+A='xh\} A CơaQK߈>z/72%v'|cu!@q~4ЩVqlvWyK(*$HcIYjoCR/9.|u[I!bf{}{:R8>>h\u}%|L̐3Spq=Е=^]x(Dq=k!ƿc1; 5㪲jx)bKӷ3:/BAVIB]/
+-*!_`dXgXo<Vฝ4-[1PCzrvy-oۙ ){{|ۦ a4]0 lc63崱]M@R/1wN/7)#4/*\JSh[L Ѓ,Y$q5 I c
+Th)@3aMz5)8ncm}G018c
+'X |z:*E4QW"A^pH< K AY(^ynfUheq%Ƣ!^cjVao,l!nІd
+a,Objϵe]Z':B+fh ,Q;H@ KNM3&ܺCv8FZR\FV-|4I'fޢ"CuߙESEnxGtgcݐg^{[ JYU;:u_>5]2aoA-lXri帳 {!hȋHvUt[d͂"[tii^Y%M4<*c )f\Sn}=-uZq>A}E؇-F6:7⬛jp`Ožhk-BM2.eQ=6֏w#h$sC{+X:mrLݦnuC7CY&]9 :76P"Kӽϛ}}󦯆5۳8 ad}< %; Z1[n[kKaK`9氢XU9c~;ѣ[mGt\Omk]}|}Wo߿>pc߮ xZC'fuY/6,C5,!_S=RE+,0ChعA[ġ\RMX`V)pͣ čZe=.~eKKULj}ci6:yvӒ&Idx09'L0l.Im}a1l*9Gk&4߁KԆ 5{./p`*
+ܗ/j\bn]@ˋ$i\0BEO.^s5/ 䋈<`ǡMr%uC8*À98ė (vI(6Dlꚥem([^P9IEnFߴǡ[ = g,!h#Xw²{='9xܭ1peĭE‹|=vrjY+= yblX"]*y Y޻՗*>ºT#
+ty(onM^%mزʥQMvVWD~/ dV<Jw+BY<> cy_Wț~E
+PtuVs(X)YPTkRxU> >V<Bt1ys d?`kddL[Gk1rb5HY `bhzX4uVdh̾g dKιf+6# 2ܻÂ*lk.iJ$J/v \
+D{LQR(ԛ\hFp?oXJNy
+ͪ9lV"jY#gͪC ź`JV. j@-ۇB/8XFI(sx H*3~5dx;dˆ2+NGFI}')kR2G!v|ڭ2Y+yn&wHZT{qy׃2>*<5n;(#<2Ez7]ɢ|k
endobj
-1775 0 obj <<
+1850 0 obj <<
/Type /Page
-/Contents 1776 0 R
-/Resources 1774 0 R
+/Contents 1851 0 R
+/Resources 1849 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1766 0 R
+/Parent 1841 0 R
>> endobj
-1777 0 obj <<
-/D [1775 0 R /XYZ 85.039 781.388 null]
->> endobj
-1778 0 obj <<
-/D [1775 0 R /XYZ 85.039 417.956 null]
->> endobj
-1779 0 obj <<
-/D [1775 0 R /XYZ 85.039 377.915 null]
->> endobj
-1780 0 obj <<
-/D [1775 0 R /XYZ 85.039 350.816 null]
->> endobj
-1781 0 obj <<
-/D [1775 0 R /XYZ 85.039 337.267 null]
+1852 0 obj <<
+/D [1850 0 R /XYZ 85.039 781.388 null]
>> endobj
-1782 0 obj <<
-/D [1775 0 R /XYZ 85.039 323.718 null]
+1853 0 obj <<
+/D [1850 0 R /XYZ 85.039 183.293 null]
>> endobj
-1783 0 obj <<
-/D [1775 0 R /XYZ 85.039 146.47 null]
+1854 0 obj <<
+/D [1850 0 R /XYZ 85.039 142.646 null]
>> endobj
-1784 0 obj <<
-/D [1775 0 R /XYZ 85.039 131.709 null]
+1855 0 obj <<
+/D [1850 0 R /XYZ 85.039 104.725 null]
>> endobj
-1785 0 obj <<
-/D [1775 0 R /XYZ 85.039 118.16 null]
+1856 0 obj <<
+/D [1850 0 R /XYZ 85.039 75.506 null]
>> endobj
-1774 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F15 951 0 R /F11 976 0 R >>
+1849 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F36 955 0 R /F39 974 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1788 0 obj <<
-/Length 2737
+1859 0 obj <<
+/Length 2356
/Filter /FlateDecode
>>
stream
-xZoBB]+OI<
-$sȪ"(rW(RJw^˗)状@ ogfgVGGsߴ`4ۦ; kt#/lFiM}zx~5eV0Ze}0?X/ou 6Ǔln܍mŻ/+^/m\/_3//o/ލ?\\[N<ӛ溜QL7NжL;F wMs\]^Ǽn9SәAõܫմ5Oq'36
-;fY:IܨiRn{ō-jESJBbMHFHw7yl7ĦɺqF# r Ƽ/˷ݒ*d| H0I\7j,2OqZV'a.˹ql #̜<NZ{4"f 繾qk3#[GYɦK2
-ZJ0{@Z2HH9dHc4*EP(s&מ|;;>O {<'z8_,SI$ul3lݧ} )zH'_hcgsG>laİ("aDS {P OQb3v2~hnC$%eݠA%6څ=J&ߵnSܲr'r=wx0}Nf(=MUڡlc%k8RQM{"<vS[ZX!Ef)CLfp!D?̡Ev,MY2$7Q\iĪ^̈وj$TV $vpbKhwC-;kO\/0Mf7tɁףNl8܁1tiuX axWyMgQ}:5OSHv̜호`Gu. l
-js<D<>pfl}`tJ[$j\=f xV8;0-k?
-7'ecU>j1Pt1|@Ɇ3Y \ 8!E1~m2,'YBmwd'Q9BZDs r0JvR@JA&z/a0 &'NUԗav+93 JT& 8$:/$ye4:'>$9Dˆr{>~mȕ4 |п RבiHO,RK`:ƊzҤ<I=)("eD95.xD4#{LڏsiR)@>=DDH@:dX껔 Yںoԉ+e<a)CI^PIgEwL2&
- _f```OMFZɾ7p~2(_+ nICV+:PӠ>@*L4.݂X^~f1ȯV}Y/vo\vǎ#}, N34EqX̣1+mXeCJW?A>u[G9Vh_q❼u#-(:w<=`Όorޮ1|%{.6(馧;a ^'&i8C&Yv)4+IhUԕ }~'T's'??dI;Ԋ:4mxք̿]bxd"P'-Q"Ip6\jX IOj꽎Iv4'N~bŒ=3s)؜5 88׽lj _@է!6xһ\̯` 񼜙/N}H߼{$r`]<J]=Le5$fX `\ǜu9p S8F1=C$|(@;0l=0N S:|?@[ה3ʑ $t*g ;uyy YNNKgCJ(NlՄ+wq
-w3gߏP#9q#|6~
-;Y*kfO57(a0D#B]~M-4xx;V,= [Cyu T1tSziYıeL!Ϊk W96)hi4AP9!~wIx_HSVi@Q9di\f
-[iꟿެ7;}y-\ Rā;xt܌S }b" B3^iT =j>R>ܨ#
-Fwl/?bC<EQ+臿 Eb
-b&AHV6hl5q3GCfkq}]K.ߓJh7‡١SP51:wFc?6Z9LN$AWi 0ƔΆJ Lۖ{Uqk@VTۭ*3߳\-/ל9g&T? tv{>}I0endstream
+xڥY[oܸ~jЌV](!ilS ̓<xHXHQsۢE` uxxxȨ,\/fI Mg77J8²x^-/~K̔f^6[G9FlY|q.v|;_$I|+W/:f9_( 7/}]x4%6C;/|fs,=sLo/7
+/>]݈pƫ9ix>4F^hB"+4YI0<wMyF̒tM bK37YnEove9w<6%wDf*qU*1&<j'`o?\p
+L [S>l϶B1M>UjIhwy_fAU0R#J~CO&޵Þ]j;~|h^UWԖu^偑AC(Lَʺ/O9{(LmS? t8\QxɍyPW|rf6YuJn.!/o~<3a G${yDl#Gtv$")hPe`#
+d-|M,%q/UlĆ7Ӵþ b9B!5 v+*S#[y<d 2򒖦-~(M۫rxZhY KؑZ24k0%
+X1D g Ǩ#FQ;31椓U"y,DjW7:0m@fvf U~YM kCAy(u> ({M,߷{+sg\TAhKx 6eb}Xt] xA xuc]1/e{U10FkW5J,0 Hș^d^l@XH9*[ky0n "<f tRht#L
+{u9pmÿ#>'U%mFZB<P(v|C`[H$vMA{H~i֒0 au8xʹt_V:瘍?G,_'>
+L4
+axG.F YCdmIN׀K|a~{G;vJ}5!8Dwȡ0H½2Y`XnK<F/zr' >~1Fe@fI!57f{"dWuR
+ l$q\rtn16UsԢ
+̛Ox8 &<POY-UA^B&z (0it
+`Y!޿7L%Ғp%Ϭ2]a/;ޟ.w׋<3oMqd#sBQ9Lƅ$lCU>Ti蔣E+` xV`VTtxK(M8`=%M#XD  > ]ͨ-)dP䩦,I)J(**Jbt!-^+3ԋ=N dHEEaC1 UK*r1pv^z<'H׋`Dw .du{4'4MMT6N8WM9U<Ѵ9UW# k&I`y%/.ҏ_yo>]qӯ4dF+-ITu -~m@s$|i*! P0w[WۇJRIfJ:l r~_dKAv q-bB[endstream
endobj
-1787 0 obj <<
+1858 0 obj <<
/Type /Page
-/Contents 1788 0 R
-/Resources 1786 0 R
+/Contents 1859 0 R
+/Resources 1857 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1766 0 R
+/Parent 1841 0 R
>> endobj
-1789 0 obj <<
-/D [1787 0 R /XYZ 85.039 781.388 null]
+1860 0 obj <<
+/D [1858 0 R /XYZ 85.039 781.388 null]
+>> endobj
+1861 0 obj <<
+/D [1858 0 R /XYZ 85.039 761.463 null]
+>> endobj
+1862 0 obj <<
+/D [1858 0 R /XYZ 85.039 584.016 null]
+>> endobj
+1863 0 obj <<
+/D [1858 0 R /XYZ 85.039 555.705 null]
+>> endobj
+1864 0 obj <<
+/D [1858 0 R /XYZ 85.039 528.607 null]
>> endobj
742 0 obj <<
-/D [1787 0 R /XYZ 85.039 650.202 null]
+/D [1858 0 R /XYZ 85.039 291.786 null]
>> endobj
-1790 0 obj <<
-/D [1787 0 R /XYZ 85.039 621.404 null]
+1865 0 obj <<
+/D [1858 0 R /XYZ 85.039 249.438 null]
>> endobj
746 0 obj <<
-/D [1787 0 R /XYZ 85.039 591.638 null]
+/D [1858 0 R /XYZ 85.039 205.963 null]
>> endobj
-1791 0 obj <<
-/D [1787 0 R /XYZ 85.039 562.043 null]
+1866 0 obj <<
+/D [1858 0 R /XYZ 85.039 162.819 null]
>> endobj
-1786 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R /F14 969 0 R /F36 955 0 R >>
+1857 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F36 955 0 R /F20 937 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1794 0 obj <<
-/Length 3219
+1869 0 obj <<
+/Length 1971
/Filter /FlateDecode
>>
stream
-x[o6
-diT%zjW/uZفNNh
-EBZ?d{[tdU݀Cp`}+tF[*5&Wy3cMZ6mOYm FW]V&y)gOjcɒ-*a{a}tNd}Uۉ,c>WhCFR$ 6ͶVvu?\%{%e:%mV=XSW˽=|+oHߜ9~'t,0xRb+]1yj)F؍ G<@b Jgڎjy=S_s=Fϱ^7H A"BawauSFﰴ[ct%nPl9C@ d<s%rhBCn[A䃌=0#Li1(Jj,́W^<>K>VCNX
->
-JIc ID6H
-JlrKC찑<ud"&j]>tav
-} Ǵ9HZh@m%qsk.߾aZftBYHkvfQz !ߺb<Ϟr͂=gB+韭e\bGBXD\JjazJ}Pz89GD udnknGX!ǝF.؍fж7~םq
-7e'޼Hv+h[2hYT•Ԫ|R+@^M.0NV؂{s`!'T]HC1\RDhv:]_J3ItUVki Y
-W5hACzHp5->\<Jp:Oa6%*둝GA39蜝k%RұU
-A{Y dLdJ>@uc[S#W^a*
-56,5$(t<X
-_WcC4OHtF7V*[Qnތ p+I&@{&G{WtZqZ"&R{tJd'̞v
-sQ0Ŵ|)|"Χ糦wO|Q<:,Q28 e:ɶ6?TKKR\CJiڔ!ok)DǣkJXvn7̆ZIVDI?ۮƅ.w8tNrv RsT@xͶ`5v!Ğn 뾤0"y6O0?, NN}=Hėw]_X |Zt[Qg_7ܣgO>7~T(@.^/Ê9Vx3pJE?ݑZXE7DFXD$6mtDGNg0d7oq`5҆X-n.Q?<PпTfKpzĤ"^\H}EzoHoZ C+
-WlޮWaty"CNmo
-x.FE|BF7I#5(p~E(ЃpxPR~NPD?*JndQPn+ : u hwIi7+iC%qfAǛjءjL})4hFdA'Ѯ/_q^OΡJoT띨_;[;`v`jgO"ZwҏGO" e`endstream
+xڭYm6_o.Jtn&i6RU]gCK`涿3 U3gyp؄?8 ә2 G9~oGJfn~c4|;~<.8Y|wooL,˸~0y&w?~}Ԛ<%[߮~xm~WRsq 9?2 g/06 O#H\GާO+sVײ1 pL3
+֠LpMg_Mo2gFcU@esm8݈e)/2
+DA> \۰a*M
+>Om߰}Gf@ FIǨ{e0.-1[o6 4c 2+M|{Tw'湤7iAg8JXgsa9N_N6hI.,Oɷ[ ґ衛F 4~)6[;b'ݨt!(^ ythz>yA0Mi!DqvM3> 9
+
+S%e^kV|mZ|Zovգqq3*ױЇ\";&L&MeARNW痮;A*ʞLG7nF@mNVi} )Z%// @/H9FP(YY[ϼjR`nCۺ7ތKUl*qy4(C?uUIu{f$4o=k/΢]THCBr XaSSW)0q<$=|b_0OPM\?Gy3؃?
+li5
+m=uʨ-ѹ(*Pa#8+\V"̲,=A0RYPzZ?}siJbyRZFoiuu6sM]Y^q&ea'uO\}BJԠ.VkV4H? vK CءoysL>pw%E~T/NM(VfWg Em`%,,ZNU;ʡ=ڇ_u7o512lq)
endobj
-1793 0 obj <<
+1868 0 obj <<
/Type /Page
-/Contents 1794 0 R
-/Resources 1792 0 R
+/Contents 1869 0 R
+/Resources 1867 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1766 0 R
+/Parent 1841 0 R
>> endobj
-1795 0 obj <<
-/D [1793 0 R /XYZ 85.039 781.388 null]
+1870 0 obj <<
+/D [1868 0 R /XYZ 85.039 781.388 null]
>> endobj
-1792 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F15 951 0 R /F14 969 0 R >>
+1867 0 obj <<
+/Font << /F57 1075 0 R /F42 967 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1798 0 obj <<
-/Length 698
+1873 0 obj <<
+/Length 3172
/Filter /FlateDecode
>>
stream
-xڥTMs0+8J 8:ӺiLOiajC
-8wW+arxޮ~=tcEQ,ynwϥ#mpC.By|<nLHZܲtqA0)GQVdosCv e]-/)΋ʻK8UZ?0N<Hble{'TWa`;gYtk;pplS63(:}WC/7@HMB%eM]H6` CKeR LP7iN~Е}Dy}ٓlD xO@Xa%N'1#mM%֧K`I=Vu!c$7!xisd '~ ގM:7vO*qg 
-*P"8Ao@Rڒ{W6ۡ"^c\^]`w>.۴6C?tfk[w&HLkL_rcSvF]+$q`QPQyW߃kh3MT@IȆR,t Q!ԯ]_G WZOm g\jػPxendstream
+xڭ[mo6_o3W$߲n^8mqPl9qX$'7/$EɲnDf g#🜤t6IR)tNOf~bnH͇wd"nDǟ.p3kR<ILN/W|u7r;'f㯋_&KE tN^:.
+[e_LRy.Z&/AB5wI mr;Vu 06Nť, 8-1ZB·:@@4,"/i=Эv8zR>CB2SƐC40HcpPew6@:4iQ^آ_4~$g0P3t 
+8AۊX rgsd. NZ"rF1^s@ѰGZ+rÙ5 σYg"S?,U^evUz8PŢy'QgAgx@Ce_/Y= :s)Չ=wNg~Sm
+ i-GrD3W1!l ݆<W.x y0{t)5Rq m˯ɌL#,ƖK#i &F\FZPRjlLm^ƶ#ǟye6S'78c
+p:cϳilW߱aJ۾ eP1#鹘bIޛ1cTDjь4֘=$NQO} q"b75 X@i)^ iͮ1X}Y[@
+yKFF.8 &hk3u Ȯ8A0uƱhGIe *u&3YS4&9S_3_?__W(zo1
+uiK8Os 9Y^qO+^4,m1nB@ ̧*6ԝ%bF0E{RRhtc6#!:n:*q&d.ؔ 0q~lk)T$w~K3 ɝ?"=;ߓ;a{Ĩ\if3MFCnbcf-Ųχ$<vZG8OsԮ8|Fo=6ڤ'q&Dޥ=5Dn(lm5))v:֊Mblǫnd"cxkL'iFph pl86<l.4H<:z=]R=?vG;G#EU _V` l "K4z2Mלu[؎R!~5Nn=Z/%>JK27uz4C%:ݗ8}n~&&do
+U/5Ѷmצ{f\vO@n^3'{TsRdPLsNǥfR+o$Nm&5{Nz<߇ufP<-qS:t7SO\p }'m_-qǹOgc!ul7P Oŋ-]bmM[puO/c7=ť#iN~Aw\Z]Ws8R_,άEøGhAΦ #VDhW턋OyU?zb#}\ [3U>ҍ ʆsMTgʌ Ih.(Sendstream
endobj
-1797 0 obj <<
+1872 0 obj <<
+/Type /Page
+/Contents 1873 0 R
+/Resources 1871 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1841 0 R
+>> endobj
+1874 0 obj <<
+/D [1872 0 R /XYZ 85.039 781.388 null]
+>> endobj
+1871 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F15 951 0 R /F42 967 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1877 0 obj <<
+/Length 940
+/Filter /FlateDecode
+>>
+stream
+xڥVKw:WxiCt%Ke)ʁ殀;!Pʯeei$fDBOR%t˭'5hxZLddr:N|%E&3ڟ˷7p$I.TŇ(6 ngp]eλTfw;O
+PzwBubHS<54QR #!7JSr*8GN
+R$dʁ=?qTG"Gke܏
+e6¾tੰbE[XV0N!pDC%X8g@lqߐ99*lܪ^i ]t/f0|:r]/۲O|}Ld>yA?cijqNӑF@/q-+h+F~{AS.^R9WW,[56 A
+endobj
+1876 0 obj <<
/Type /Page
-/Contents 1798 0 R
-/Resources 1796 0 R
+/Contents 1877 0 R
+/Resources 1875 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1766 0 R
+/Parent 1879 0 R
>> endobj
-1799 0 obj <<
-/D [1797 0 R /XYZ 85.039 781.388 null]
+1878 0 obj <<
+/D [1876 0 R /XYZ 85.039 781.388 null]
>> endobj
-1796 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F14 969 0 R >>
+1875 0 obj <<
+/Font << /F57 1075 0 R /F42 967 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1802 0 obj <<
-/Length 2095
+1882 0 obj <<
+/Length 1670
/Filter /FlateDecode
>>
stream
-xڵXm _aY{h7wYkl %$g@|3@3$pg8R(O \QWhEOǝ%0,M؟,f0hdySx$7G=Di}aywUgJo__&.;,o*Q4M~ǾJx7Vxn.o( {T2Rl:ta6d0H^Әj^'vf#Fz<!SfY;g^ͤEZagd@yb=z`̽x]-]5$Qw*"Hr4Wl4|88ֻ5<ekj=nu%!^֍3{sa&!ӘUv7NC_!Ŀ+O0۰- 5<B79hbqoB.9E ([U(r~glUe_qpwUWXM82HxJ|l.?.<U+4T7t8W_~y%`";.F&SQT[-EpD*M-(*ۿ\ݘ"' 0I(~;ȝrڠ34'ݐƕGZ~,dJggDq`t˭;ziF x#c@5%Ms_)!QrVGuLpN(bd[ӝTyD&"U@Ѱ0WV YQZsK@H#c- Д J)4~*{Eh¡hHZLF[Z\Uo4 Yjb)Þ4͟oB$EI:sf2ꃳj< 4vA]Lito0x&$B wE2t 6o;۝n:bF$$E6"u"Ұ{;(Dznv`+rX\ ֕qr*/[ k-NVƖ|󌹅X I$YNGa'}!Bk ɀmpqۯYiԳ̈m8םugIZmHr~\({,ǹ
-G4OR,XyGhcMtP bUa]kԝeZfD]U.8ύ<!Đ BLgj(?~-- \Wkte4 zu+N98d}וܴfI(I0*,$%~=7P{c8T| .1%9Qx3*M<Ǖӵﶩآ朏s Pb442ٷ7^;ԭȒ]s9H6S,QV Ui;P|gHŽ1t,>
-D
-hyde@~=B}gZWI2}س!*/׿ǦHQ[fǟzendstream
+xڽnF|)F wA@EkRK4E"ec߷p䤇0ˌDā#dxܜI'RS#ȩNC~tF˘F2q<_" WL\ᄡ7Y<EX8qL[K45WeO0nfsE֬lӺTEc]vr1:LAn,jH[P[7v8:ҺҚ',-5*ӐR2H$"($T%*XXKTguZnl *{
+A5t2
+{,D7ۂ|R[mXyFQ)˳*B u))ȁm.NYQ=ClLo?wx](haHx?tW JM$d'qO2;4bڅ{o8Uz'_2W%q>(^@xmK)-JvZ8WákGf]5L
+O(Σ[hޑP?:X(2w"
+C1 T]b4,kpחK A˯5T,at1#7pc2
+O .iF)$ <nʆqNdiF+6
+ _6.S.+/Rk<緎q0~842ꦝڮΟWKs RADTeUÓ-Q{Z5ˉyY0yn)|2 Ekv|WZ{3*}îT`Ɖ_1ծϐʺTڹh~jOmj(bLe5L߸g=;v&l/EȢm2؟r{B8e|תѧHpL]/Wҗcs葪Ļ VT8GrX1eSib
endobj
-1801 0 obj <<
+1881 0 obj <<
/Type /Page
-/Contents 1802 0 R
-/Resources 1800 0 R
+/Contents 1882 0 R
+/Resources 1880 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1805 0 R
+/Parent 1879 0 R
>> endobj
-1803 0 obj <<
-/D [1801 0 R /XYZ 85.039 781.388 null]
+1883 0 obj <<
+/D [1881 0 R /XYZ 85.039 781.388 null]
>> endobj
750 0 obj <<
-/D [1801 0 R /XYZ 85.039 761.463 null]
+/D [1881 0 R /XYZ 85.039 761.463 null]
>> endobj
-1015 0 obj <<
-/D [1801 0 R /XYZ 85.039 671.062 null]
+1017 0 obj <<
+/D [1881 0 R /XYZ 85.039 660.071 null]
>> endobj
754 0 obj <<
-/D [1801 0 R /XYZ 85.039 671.062 null]
+/D [1881 0 R /XYZ 85.039 660.071 null]
>> endobj
-1804 0 obj <<
-/D [1801 0 R /XYZ 85.039 642.326 null]
+1884 0 obj <<
+/D [1881 0 R /XYZ 85.039 617.786 null]
>> endobj
-1800 0 obj <<
+1880 0 obj <<
/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1808 0 obj <<
-/Length 3358
+1887 0 obj <<
+/Length 779
/Filter /FlateDecode
>>
stream
-xڵko
-,Mrm9XĆ\ѿy풒"0`cvwv322O@Y*/Ep^'Og&WvvF~g`̏2ub/w(T]=]*In[-W*ͼO;޺oWww{M.݄=2,N(_w_0U#쇌mYƲI]B΢%pŋG~ߥh'ra
->y s9oc- y8tွoP 5/iQ>_h`r6#?4AGfVֈVh=e 5Kj7#qQ`
-ZɁW]\9i<$zD8Ϣ@{pe͟ -tY[^'A56?
-xɆE/<@apO!]Jp`I/J !'wi;(+n '7(˼i_p;݈.xjhgguqDR.p[֣'g)m>ΠĒrOu`q@t.g*(uز4j)mIPSe_q7[
-:F,YYM3ZgA>ԥ-4*/xb ^ sq
-/8+{f{ܪ=*SWZAQ"ȯۚs/yϝºNb\If-Ŏjm#ǧ8sGPcaUR0Z+R)\`25{TR>ekaJ ;뢉d& fE)=W#!2&ҁø"cրʅ+p91a"M݋X|` )?9 QY
-+$Nu`¦֜| fx
-}fqitzH"?J0'endstream
+xڥUMs0+8H8:MM39=(FLm\7Zi: ~}kßUsYT*\lVo1&<qp<4|d?Mͯ$&y,lj=nF67wh"5烈gmp= 9 k0ǟ<,mcY
endobj
-1807 0 obj <<
+1886 0 obj <<
/Type /Page
-/Contents 1808 0 R
-/Resources 1806 0 R
+/Contents 1887 0 R
+/Resources 1885 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1805 0 R
+/Parent 1879 0 R
>> endobj
-1809 0 obj <<
-/D [1807 0 R /XYZ 85.039 781.388 null]
+1888 0 obj <<
+/D [1886 0 R /XYZ 85.039 781.388 null]
+>> endobj
+1885 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1891 0 obj <<
+/Length 2449
+/Filter /FlateDecode
+>>
+stream
+xڥrMԔ!љ$z*\I a1EjHj<@ږA`wCYAT̲\Q϶`_(Og6vw~ggq2S
+q% fai4[?XA<<=-IxY,4m{X(jv ]][=9,\zqv-,lF~?>E2^pt*}¿}UDf% do] YK;␴*/b"m
+ k ALy(mP㻝A
+py')VFl(=
+xd$t#3A}\?.`a*EFLw`ř9a˶⹑ʷgGAn>Ճvu=l #<Kי'<>*`ą̀>I,r1. Emw< m؉i|6`ܤuqq^"|WboEE~* ^סtZ @+/9Q~Fc[e]3tnǣ;M\fdseˋzC!>Wɾ㘕%bX8J})ǪH0jzǶy )sXT+:OcytdMI%zgZ57{ Js&ڦF?g*V Jn{
+waI
+
+~
+r~
+s%Ɔc_Z쌘nQZu(Lɞ7|u
+endobj
+1890 0 obj <<
+/Type /Page
+/Contents 1891 0 R
+/Resources 1889 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1879 0 R
+>> endobj
+1892 0 obj <<
+/D [1890 0 R /XYZ 85.039 781.388 null]
>> endobj
758 0 obj <<
-/D [1807 0 R /XYZ 85.039 761.463 null]
+/D [1890 0 R /XYZ 85.039 761.463 null]
>> endobj
-1016 0 obj <<
-/D [1807 0 R /XYZ 85.039 667.044 null]
+1018 0 obj <<
+/D [1890 0 R /XYZ 85.039 653.495 null]
>> endobj
762 0 obj <<
-/D [1807 0 R /XYZ 85.039 667.044 null]
+/D [1890 0 R /XYZ 85.039 653.495 null]
>> endobj
-1810 0 obj <<
-/D [1807 0 R /XYZ 85.039 639.536 null]
+1893 0 obj <<
+/D [1890 0 R /XYZ 85.039 612.438 null]
>> endobj
-1806 0 obj <<
+1889 0 obj <<
/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1813 0 obj <<
-/Length 3353
+1896 0 obj <<
+/Length 3316
/Filter /FlateDecode
>>
stream
-xrF]_7.0kIw+D$V
-ƫ%GMZ5@yf@'
-GHik\;TE첺Aw;lB2yD>dĜM=͗9gA
-\ߟR &-AM ^јp` CϹA(vmV=wcᖞ#]{ܬy~+{k]eV
-@MJV>Mi991H Zl9Oܕ|bf=;Bd/vsRсE9 Z,%#g;0:r! ]j=i<Be7(QD{1SIb@ZtI|X$
-W 6C\NK<T^}q|+$~.:/ް<9)R+B<
-%d9zAeD@ W|t*}0zF~8{o*bT= BT`XiW| -QpdV!X:ړAmjW%
-)N
-)9baNnvX #S0bVUZb){fVr}Y,M蓮+R캾NE<vg+3FF_T.DMﮑRR58GF3]CmJD(N)5giA㥍-#Di`#& M WTCFD턻'14%#}c!yEVp>OꬪF\rSPlȳN)b~ёIژ2Kx)
-$*[۷:fgܜ ^@F 0+>]±C'p5#27Ă^/-d*X*/#A*6Y+۠8;0;f溈JdrUp'W rU*kǎ%D7`E iedK\d֊!
-k5Bk+K=! VNn#辍\c_K75(-bsUƪYtci$c'cy]IJ0m!6
-47a;AIG"jH吁(X%)<c7ƄUE_Tx>F06<@i[g H[`^Z1bqZ&N>`(e5yHt')ϴX^H];kDϢ 9"Il  &
-V>8TSn֏\q@O8X8t|7t)>#ũSE
-zF:7!*3v(Re\MIk'QE:q,elqF@8>]IuW%!aA
-}N<̦@o-R<Gj{֨($y=J
-=%r|j6=!Vi*/neEekiTo\tN'9&ii'ƒb8bNDjiC8ۊ$Nΐ
-:[nhQsTP:q"5\ b-N%&*Xs}.[Prc~ٚ q4{m !r7ښIJ#)b.Xt'LH TB/My^pL"~͓F=\"CF4ldp&CÝʲYUa˵G[^p_|ii<~D)05(lHcqPA]38e /zjfCo'CWj/A،e eYkel+FEh*5u\5H&K<Mk7&7 CUؚKnR\DYٶ˾G#/[6aIMð|<Kk?֣M9yWj,h5 t%tdL)hojPl%*3zh(l?,lm6(H
-FLXey1<[Luēҝ8O#bƫ@Ag8'%.۳=+s+.@)e\[v-%e1?7+;QT[+p7&sWt),k?)mE~Vendstream
+xڭr۶_7љ%tiS'9;9g>"-H
+ȵ!` kW
+YhSڝDK^|/Blڈ9ޖ! $Z%a{B.@,p
+'fXk?U\pHaPEC8 j<wMp}HlHPc8pqIm߅zy굊|e:߇8 t#vMa<T!wT(
+~܋`>ĿG`_:1P/$ QYfщR,WRn#ƽO);OtNbxI>!0:JF( 0<b< ;S5C6NwH5YQ6ZsiC{H:>o<|n@XHྨpWQUWfKJ2Dj({$'JF3XbYN "K,)xtHY~ń/`,`ZP%uCåQzsp#]  3e
+^.%0I:bQAhUDBQ+'fNDjH8dnT?X7gɊAܞi;#"2o)ٗxt{wz\;HKiv㦁VӊH~l$0We/y'ηcsX3T^MU"e<v%0b@^ ~+ZЌ6屾HI"R~3+Q:t{~Ԇe@ N> <z6 KNFp8ȧ9QtXn>B#fgIjcG
+ ?a{њa1vvbqh+Eƍ98H
+AS?2
+ONF V 7[s#q2P7>`$I7'LMP=3|Fv7(qGHeP]`ߝ7,j㺫:1ZC7
+ccC*=x ?gkN}SUsJ[&61fpvH^D:.ooxdrH]/[72?\qʅLរ33#zYf^vj|2cZ\(+<}Y?ה!?~eHN?JBEJ1}҃l!n:yY82B,^Ppo;Oԥ`ᬝ4?f&$yᣣ%'#9 :uv.r,c?CGS1܏×S#hN~(KζD_C,mIuH yCMN$@oNR-J6q~OT61EFB #ڿ:Gj$endstream
endobj
-1812 0 obj <<
+1895 0 obj <<
/Type /Page
-/Contents 1813 0 R
-/Resources 1811 0 R
+/Contents 1896 0 R
+/Resources 1894 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1805 0 R
+/Parent 1879 0 R
>> endobj
-1814 0 obj <<
-/D [1812 0 R /XYZ 85.039 781.388 null]
+1897 0 obj <<
+/D [1895 0 R /XYZ 85.039 781.388 null]
>> endobj
766 0 obj <<
-/D [1812 0 R /XYZ 85.039 718.394 null]
+/D [1895 0 R /XYZ 85.039 501.607 null]
>> endobj
-1815 0 obj <<
-/D [1812 0 R /XYZ 85.039 691.78 null]
+1898 0 obj <<
+/D [1895 0 R /XYZ 85.039 461.443 null]
>> endobj
770 0 obj <<
-/D [1812 0 R /XYZ 85.039 578.375 null]
+/D [1895 0 R /XYZ 85.039 320.94 null]
>> endobj
-1816 0 obj <<
-/D [1812 0 R /XYZ 85.039 551.76 null]
->> endobj
-774 0 obj <<
-/D [1812 0 R /XYZ 85.039 299.875 null]
->> endobj
-1817 0 obj <<
-/D [1812 0 R /XYZ 85.039 270.47 null]
->> endobj
-778 0 obj <<
-/D [1812 0 R /XYZ 85.039 270.47 null]
->> endobj
-1818 0 obj <<
-/D [1812 0 R /XYZ 85.039 249.942 null]
->> endobj
-782 0 obj <<
-/D [1812 0 R /XYZ 85.039 196.354 null]
->> endobj
-1819 0 obj <<
-/D [1812 0 R /XYZ 85.039 175.361 null]
+1899 0 obj <<
+/D [1895 0 R /XYZ 85.039 280.776 null]
>> endobj
-1811 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R /F14 969 0 R >>
+1894 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R /F42 967 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1822 0 obj <<
-/Length 3128
+1902 0 obj <<
+/Length 2573
/Filter /FlateDecode
>>
stream
-xڽZmo6_o $RoN^ C[]9E/7/$%{e; 9̐ D~f/x[ǟ姣p~\z
-J[|Ɣz
-K(\W'
-SF6y̽f0(R?Jp#(TÚr׎kMo4TTW2s~3ab ״ [loz
-F~di
-#GqgޏʐKT o3ѩ͈%7v~H)5}:̭='뭛G<Q # JPt;Z!'N!nmp3xUpBݴ%l"Y(@nhhiPbu\y,~aÅ#CAɫ@K#S39Kͨ6Ɏi{. ҐuzTq&^deᤤ&H bn
-F-卉>Ef լZMDOĒ|z\ڢ8&8C#t~)|2(#P!
-2< {iV1(! 6'unoBV4ESXq~
-0@g}qtƼ`di3H_Rs6wםO`9؈CŗWpCx$fqo:U,ҹwhqO#3Ntfo]XY0
-c&pN9xDF}h<;x,q]f7~FZK(y5S|1Ľ(݌v+jGRrȴ;D.2<=wpISK
-|
-`_z&(
-D!喋؛F&[Hrӎӧ$8%[d(h81XHT+.ӑ Rz9H= x$52|$>z# 8d n}>Y;b-KLXJ ok&Fj`un}ͭKmE_sј듷o/__^fFz~zyq}u~j@Pr Jd⋧놲"2\~@U)'1*>O/4sN$f[4 ?
-_X w }F|O2+CF~"S^&[>7Zendstream
+xڥr]_1ovh
+c
+MI=ЏOF1{X[te
+,-WI6#,u]]l+^ǘ_iQ^xW/HL<*IFbv`CJC- i x r
+SOz≵T"DSjL;6pAG^'|pTsˎ#eba/~ť'y#nDr8cr
+.܌s!Dyr` ?j/M5Wns8g]@g=*8kV;`VW 5-(q P5Rdߌ KzȷݞSk-2C
+( uܦ 58=^9"r S Vec$&}jئaY\;Xzdڅp*
+\bě<a*^ܠ⍩"&&n992s?mϽrwe wd *!rpe}9r璲ydflRVIfo:?#hG"W3ԜiBRsrsݤ넳L\RQ.)J3Я\Q+K^pjǑ8
+G徻8. vG
+? slvtLg{7×I
+r=͞:us)XKQ-62tl^c.|) ml
+QN7 b51r,y@e\:'X.K#ݼ?0@L4ͽZ9b0]z%i3)*Bmz`7PAW|͘! B;~8¤8oUq 9i$ou;pendstream
endobj
-1821 0 obj <<
+1901 0 obj <<
/Type /Page
-/Contents 1822 0 R
-/Resources 1820 0 R
+/Contents 1902 0 R
+/Resources 1900 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1805 0 R
+/Parent 1879 0 R
>> endobj
-1823 0 obj <<
-/D [1821 0 R /XYZ 85.039 781.388 null]
+1903 0 obj <<
+/D [1901 0 R /XYZ 85.039 781.388 null]
+>> endobj
+774 0 obj <<
+/D [1901 0 R /XYZ 85.039 666.319 null]
+>> endobj
+1904 0 obj <<
+/D [1901 0 R /XYZ 85.039 621.244 null]
+>> endobj
+778 0 obj <<
+/D [1901 0 R /XYZ 85.039 621.244 null]
+>> endobj
+1905 0 obj <<
+/D [1901 0 R /XYZ 85.039 587.167 null]
+>> endobj
+782 0 obj <<
+/D [1901 0 R /XYZ 85.039 531.457 null]
+>> endobj
+1906 0 obj <<
+/D [1901 0 R /XYZ 85.039 499.036 null]
>> endobj
786 0 obj <<
-/D [1821 0 R /XYZ 85.039 761.463 null]
+/D [1901 0 R /XYZ 85.039 348.279 null]
>> endobj
-1824 0 obj <<
-/D [1821 0 R /XYZ 85.039 743.459 null]
+1907 0 obj <<
+/D [1901 0 R /XYZ 85.039 313.737 null]
>> endobj
790 0 obj <<
-/D [1821 0 R /XYZ 85.039 643.603 null]
+/D [1901 0 R /XYZ 85.039 213.881 null]
>> endobj
-1825 0 obj <<
-/D [1821 0 R /XYZ 85.039 616.988 null]
+1908 0 obj <<
+/D [1901 0 R /XYZ 85.039 173.718 null]
>> endobj
794 0 obj <<
-/D [1821 0 R /XYZ 85.039 616.988 null]
+/D [1901 0 R /XYZ 85.039 173.718 null]
>> endobj
-1826 0 obj <<
-/D [1821 0 R /XYZ 85.039 593.671 null]
+1909 0 obj <<
+/D [1901 0 R /XYZ 85.039 136.851 null]
+>> endobj
+1900 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F42 967 0 R /F20 937 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1912 0 obj <<
+/Length 2448
+/Filter /FlateDecode
+>>
+stream
+xڥYYsF~ׯH>ƕXY$X X
+ݍn:XhAMY0n(e˴ב[3t A|6#G.-[twΨfҿўTIOgm7˼渴tW\`5RdʙMsI<i&7CUτKq s]^#N.vC0
+,{^4-c`u7U YgՐ,mYJ#B9H4SIVP[C:7>CXDeϼV p9b14J&KvKTiK0׭ۼA
+S9%d`Tr:nFh~}ȼ=ǃÑOeNOKe JS;!CQ!jp$1
+7FPVrȤ=6)k[OMRvWdR$kĥX|KM&Թ5h/X
+#%Į/>DZr3IO)6,1,T lmU&Wfo4X :tF*i|_|ndC&P ǬRVbp֧3aMZV0q]hn-{;1We؃ndi RYoR*?-ܨ<@Bb5pBxB„Qd[| 20mDEʮU=U
+kQӆ>3mEILݍZ#*Dp)KdJ&i;/-32ͩbfZ5t7d(j$S"9vBA.5=:=X,.E]ɗnO:kZ;t}#r93FAZAES,J.,$#ukE?4
+S7INUg=&D.-KppՕrݑ<v۰ʑH},4k:Kߏxً/`ǧ͕~S, 6À@GZH:mUg8O#GYQ+>ce}`*
+s7I*c͕iأ_6?
+endobj
+1911 0 obj <<
+/Type /Page
+/Contents 1912 0 R
+/Resources 1910 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1916 0 R
+>> endobj
+1913 0 obj <<
+/D [1911 0 R /XYZ 85.039 781.388 null]
>> endobj
798 0 obj <<
-/D [1821 0 R /XYZ 85.039 524.412 null]
+/D [1911 0 R /XYZ 85.039 761.463 null]
>> endobj
-1827 0 obj <<
-/D [1821 0 R /XYZ 85.039 505.54 null]
+1914 0 obj <<
+/D [1911 0 R /XYZ 85.039 743.459 null]
>> endobj
802 0 obj <<
-/D [1821 0 R /XYZ 85.039 367.158 null]
+/D [1911 0 R /XYZ 85.039 602.349 null]
>> endobj
-1828 0 obj <<
-/D [1821 0 R /XYZ 85.039 335.633 null]
+1915 0 obj <<
+/D [1911 0 R /XYZ 85.039 560.002 null]
>> endobj
-1820 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
+1910 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1831 0 obj <<
-/Length 1784
+1919 0 obj <<
+/Length 1554
/Filter /FlateDecode
>>
stream
-xڽXYoF~ׯCQE󖘇$Nc;hE+reᡒ8cIQ6(P3;|;=/|r|ab15ۑ9gZM
-$ԻbRʪV7[PiY&89- +o ԩh9Pߞlؕ)#޿`dl 3HMަP&@n0oR"-Yf]My"M IRmV
-59P pjg^Яavz}ˈcZJsJ6ZtɶR7lHk
-vEw  7Sx˝BGP{.\S1OTmL*ҝفQ3V@{X`9s_p5`4E!yBah"1x {a^ e T-QuSq bJkdRk:&ڪHـ{7m Evzl\5|R|>R ʢ*;|bvƣ3YYY*S&Vc
-ׄ(38d, 7YtYM%o
-R$Wm9=߅v_r9-;rNX;ǵl\Nm3q+ϗYݱ+\`xm=Cщ.GN󴈇FDyW; QY/۶`X"WwF'Ixm^jX<Jv&*sw!_,ۻG{%HKE&OCcKqnb\y.[:=`$kdQ3`c0[2ISBy]#?DEˇSDEYwM9[y 0Vd  %by~LmBO@~An\}xPV5=vxk[IIދhq,x}4g0@ܓ6T/{%iqm@XܡPÿu}%,Wvv0m3 {뤓E^xIjALd# 8jym',H|d5whvHk s !xB#
-= O y:Oz Qx:~(=^,deo
-2Tw+T&տJ*_Ml'/k0E:\Ō[8;5U0D<.؊r\-BO O/.}vȭ>|A,cNUEmэ>zmbJ5ñu59fi@'r'(m⷇o77owsGL?5TX}։endstream
+xڥWYoF~ׯCQE>P@qimP$"6
+8dA°;3;7Ǯ?4MˍadnMrbMnbBD{2[?ږ[4MwI8{>kaS?ml+X\_czy! NVɇ*=m>՚feq4}e.'{zyޔOw#ӏ}-¿Ln׫O7՟w|wmoNUfu3^&G6as@"
+͇[z h@ѐ /tAIbkU"grzQCC.U_Y%Om"8w3wU#%ch J?i]灋D++أt
+&M`4ȷm>.Ȉ9:iLjL=:/'RF{V0%Ѡ>H<cĚHvC"vr`f;)KA#[ָv*"@;atlP8Ԁ}3!74|16K\sN՘ca-DU-9lDĢ”>X^ac
+?+Z=ۧl~C]Θ'Fla#w.0`5ɨ`"KtUB!R?~`nc)ԾR&1$ᕂl= EJ\H**_^0@MQ+";hI;;ْ/l2Q4HҋcPd; cmG!C+
+}E M#ň99(
+ADhd灄
+ g\WENO1 2mxƒǃ%B҅u7]+1 Lq8L(ܡ1:Pu͚) [hRw$vlO笐{N+atn)|^ZT۽.fx*>A:zQMr\^jV?:jVZ?Ǧk%U=/׎X̪wn;v˄K/lR44 u6UœȊi@~np6}d. c6h4<{.q^趖Iœ)Ah]
+7gw/<]tcve?q$r/!==_ gendstream
endobj
-1830 0 obj <<
+1918 0 obj <<
/Type /Page
-/Contents 1831 0 R
-/Resources 1829 0 R
+/Contents 1919 0 R
+/Resources 1917 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1805 0 R
+/Parent 1916 0 R
>> endobj
-1832 0 obj <<
-/D [1830 0 R /XYZ 85.039 781.388 null]
+1920 0 obj <<
+/D [1918 0 R /XYZ 85.039 781.388 null]
>> endobj
806 0 obj <<
-/D [1830 0 R /XYZ 85.039 579.046 null]
+/D [1918 0 R /XYZ 85.039 706.966 null]
>> endobj
-1833 0 obj <<
-/D [1830 0 R /XYZ 85.039 547.521 null]
+1921 0 obj <<
+/D [1918 0 R /XYZ 85.039 661.892 null]
>> endobj
-1829 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F15 951 0 R /F20 937 0 R /F57 965 0 R >>
+1917 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F20 937 0 R /F15 951 0 R /F60 1548 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1836 0 obj <<
-/Length 3133
+1924 0 obj <<
+/Length 2614
/Filter /FlateDecode
>>
stream
-xڵZK۸WLbjSN8koZnų583%)_w)q|J́
-4Vކ
-uf^q@GQI"mH\5p
- ֳ0έwDk>]/-FحntC
-pצfn`Ю
-n!W[!<l:jd kI~019@©5{v|$޿fYd'iȵEŊ ۿ`[Q<qRU2q9&S} I]nbp2͕ޫ_!Sr5ykXLJ n1ӳ"_@AȂ~;,1e#՛~;i{3G8c#HXa6bWGoy(G>.-xj)WjJJuvQxV:r13p>rq%XOؤPw~eЭN[|{#Ga R:vVK%_u᥹=͇ϟspB 8),/MC٥xqY)z٧4IQOQ3ӀjM
-&$:Zg?6$%0*tjW(t\QkExbn9^Ozͽk _*
- :sJGvhc~_z62G6"C|m~c/p.%!򩸕 T7{ufy]20wT;AҺ<~Mq֑E‹ ޗ
--"Gr W˺sTCd4.ow I1$8
-Gq4qĶHl;ґ'$NiB"YXBtqʞ-[kXXno^M?ƐC"A+ᰀ\~Vk1
-lPiKCAm u0+X,߷Nh,ڜp C&2.SN7kFjf4ӁjCDla)zP(E8,epO|͖lľR(x#4&;C@ƶ?N+ f_n16wt VP2> !+XS aV.e2Q6UkkfdD
-{_!KSuثqM݊O{')6KNC<VB^b@ai 5u00/#C@{aTLvE]a#}"5 Ñ =ga|D|,<1D
->>Pëܓ԰V`N^.i;#fx
-zq$vH] bߓ800ߝ^'tNrz#Ch`N+@.ݏt{\riG!bA(tSW]RCMj}
-\ai b2ZƐf'U[l&|)qF\,6V\+@$JJvݾ$* rRE1>U*:=~R#PT)k!`BpGލ,"ekQ :z#rB;tGfiz*Ԫt.D{h3B:9.ֹ<׮ԍ 'egokR$ŒE:._̋"$7]g4;j,""_B].ǛQt:kendstream
+xڝYKW b
+)cڻ9pDD E$
+ Ĕhv|kHvcMNZrT#j8 a>m@V{x'X9lA3@Z
++AVrd5g%7~|=(cYod*B _я^w̅@X'C sx _/3ƛP/R p+l"4곰?r%0<Fֺx' $-T&[l+om}w yd=+) 觜LD
+YF"$ iX{^ߝ=/*\MXYD/E/H!4+;K,ImrϺ}̼nISunɯ9X*;3xӉQL~`nq);}+3Jn$LjCwO\Ʈ;0[ItB%;.JrĈ??MB'X;6i[0 [ v82S[,dnm.r)9XK^5hk~\
+f[V^Qk ]lx(`[&6|1唰}tR4#
+D|f$l}'<?󀺘0s:h;LϜsDWD,8:@V]ܮē^HՂ h-b]k梨;A]Zx0@ϒ1BZb5T,J
+L͘оTeHhNX#
+4GUU`_Y El_fIde}U95XЬ; BczRhdQlTnؒid~stKà>:fa 3
+uJ獚l[ڞ3p)>q<ڧ)~?o!+HVW<>d.E$KԝXN\@եrsGAJ߹jr*WZh>|
+lL|>QO 6keM)+c^oO@.9`fy`iWzMbŤ!;:15֎_n߶afU=GBԴmʲ|c|X[@4A
+^Q~>.ClΛ6
+˽Wntyځ / mL)28 M s-4endstream
endobj
-1835 0 obj <<
+1923 0 obj <<
/Type /Page
-/Contents 1836 0 R
-/Resources 1834 0 R
+/Contents 1924 0 R
+/Resources 1922 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1805 0 R
+/Parent 1916 0 R
>> endobj
-1837 0 obj <<
-/D [1835 0 R /XYZ 85.039 781.388 null]
+1925 0 obj <<
+/D [1923 0 R /XYZ 85.039 781.388 null]
>> endobj
810 0 obj <<
-/D [1835 0 R /XYZ 85.039 761.463 null]
+/D [1923 0 R /XYZ 85.039 761.463 null]
>> endobj
-1017 0 obj <<
-/D [1835 0 R /XYZ 85.039 667.044 null]
+1019 0 obj <<
+/D [1923 0 R /XYZ 85.039 653.495 null]
>> endobj
814 0 obj <<
-/D [1835 0 R /XYZ 85.039 667.044 null]
+/D [1923 0 R /XYZ 85.039 653.495 null]
>> endobj
-1838 0 obj <<
-/D [1835 0 R /XYZ 85.039 642.326 null]
+1926 0 obj <<
+/D [1923 0 R /XYZ 85.039 615.228 null]
>> endobj
818 0 obj <<
-/D [1835 0 R /XYZ 85.039 542.47 null]
+/D [1923 0 R /XYZ 85.039 488.273 null]
>> endobj
-1839 0 obj <<
-/D [1835 0 R /XYZ 85.039 515.856 null]
+1927 0 obj <<
+/D [1923 0 R /XYZ 85.039 448.11 null]
>> endobj
-1834 0 obj <<
-/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
+1922 0 obj <<
+/Font << /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1842 0 obj <<
-/Length 3257
+1930 0 obj <<
+/Length 2597
/Filter /FlateDecode
>>
stream
-xڭkoFQ
-h.ơ6W>';i>P-H菿y-;1;;::O#?0y*ߤ|}/agJ ^ܟ]a0 ; GOWo|;c<i?'ʻ?0=LR]Noۗoq70wv||&K*gad(4ү5s94ԱhOp FɻqiX_x3ܩ/x`wBDW[Yu <wiٺozB[}owkzew5g2HmG+$VF7-q}򮬗=¥orB'p4C&Nu5@\+5F "?e7aRG&(
-{[3b˂G~ TX'~} (_BrዢC2w)2ɜt_M<Vf=̬d,G&S4&μ Ġz>Nv=68G*X*Bydq%"KMT:H:ΈÒm%N\ky
-8QP8&4~@Dak_9
-JRkrR0::qUrH/Eߖ<0
-RvUg^/Z|zm Z _1=
-fk!yo朿́
-AkA$ \5~pxEP'Rv_`s5<dMR^{5]01O5ʿ.ǰ 1'R3/g_\p' KTQ4\RcKGRieڋʉKsB MmO2t1QPevc%:y[p"7 Ô:>vihu s{}|TMLz8ԐF݀m_ɷ8ʦ8MMC' 3_3 0-mk'lH-Ƈ!
-
-P9qx^&L58;8
-ul GO=9ܾx['&ݻx`Ts+XGNZ9l"^|)5o,]|ɗEX"?XS8,uc1&a>3 <cYjHtN\$4:G{ԢxDk x4}d6$Z5A !DD'!_na05dZx!M^Ԑwi:[If BoR&$ uQ2HGT Sx*ZQuJZN1qelQՇ9Ҡ+=0Y]ۋ6RGA}d'ݾ4/k
-$
-Frml3*kiDۢC
-_Hbړ~5Q1n4~sC<y5ޏz(eɾxйN<'[:hqV6`I*A;0()5-Ƽ@)&m5Ȑ*Nk8vG29(n
-FD_/(s 76XF&LmȊji%^An^<*ż\K9)%_}]i&\MD9kp](DKlG&dHzY*
-?``vv^vmUQgWl=N*N9"
-endstream
+xڵێ}BBErxE
+4ŕإH^ s!)Q۠1 Ϝۜ  J]"?xF8mnGKO䆑Zl{frr]D;_};/_nÿoZ9/ʻ,V^ݽ|{|{6?ܼXE
+TZz‰~\#=ׇ FO 3Jiui?J乑U>⡞z8C
+Cgˬ[|ZNHҴymїrma$ X~XLmAy[~\UZ3N^(RUEeTl+HU
+C픰e<YI
+=&J ]t^J߂ T#z'QAp&w:^Y޳?!$?CC]<
+ ᆝ8{UH!9<9XS
+2 Bsld뛶Xb^YER)1|t=c-9O=\x&uk9WP\7Tf$W]!e|2IoSI`,,symjQ'%p;=VM4BVwTMQDYc<0J*5ńMP@@(Ŏwj Mq)JcߝF84*G3Nc^\ElqWt!
+&hП5W s_"yw&]gO
+[읏ɨV533ݞ<\mYGb(
+uRXIh:k+G3
+U!tKQ|u=jb5aIC\ o>k7I逞|O (
endobj
-1841 0 obj <<
+1929 0 obj <<
/Type /Page
-/Contents 1842 0 R
-/Resources 1840 0 R
+/Contents 1930 0 R
+/Resources 1928 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1846 0 R
+/Parent 1916 0 R
>> endobj
-1843 0 obj <<
-/D [1841 0 R /XYZ 85.039 781.388 null]
+1931 0 obj <<
+/D [1929 0 R /XYZ 85.039 781.388 null]
>> endobj
822 0 obj <<
-/D [1841 0 R /XYZ 85.039 718.394 null]
+/D [1929 0 R /XYZ 85.039 596.451 null]
>> endobj
-1844 0 obj <<
-/D [1841 0 R /XYZ 85.039 688.99 null]
+1932 0 obj <<
+/D [1929 0 R /XYZ 85.039 553.498 null]
>> endobj
-1845 0 obj <<
-/D [1841 0 R /XYZ 85.039 688.99 null]
+1933 0 obj <<
+/D [1929 0 R /XYZ 85.039 553.498 null]
>> endobj
-1840 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F20 937 0 R /F36 955 0 R /F57 965 0 R /F11 976 0 R /F35 948 0 R >>
+1928 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R /F60 1548 0 R /F39 974 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1849 0 obj <<
-/Length 1294
+1936 0 obj <<
+/Length 2380
/Filter /FlateDecode
>>
stream
-xڥW[o6~У ̌(R{Htk:Yb`<ȒL(ˮח!@Hw> O{iyIISo;δhUA֛} @eA歞HeU~v}/1jHzi%-XanT{/
-7˷>.珫ĩU66?ϏWg2Y`(enf#"kd=ԅVGġ0JS;&AG O{\?*D~B0<LCt߁g͡i,KPu.o)gpNƵ_h†M+Xo!q/4.pW? O]A+
-4ko` 9RR<~ݣ;hz.-@\V\X']qRE'p\Z QB4,,8 Mu-_( QeTMD8e!Go5dT;<a2?TYk uB\ -#z%ұVI܄x<x'[
+xڥYKs8Wbʢ
+O6buG(6ir);zqd5)(
+& 0
+ӆB={brs?脅lS1eEs BpU8rfl"<kNnb-lнGL,( <Ȟ  _,-8oZǁYK2è;d l0@D;Y|5[mZS}6(g03cغá^
+\v"iT
+<׈2vT' r{-~.I̎LaK OFqRrAQb+
++?ϢE@.y&kzE9HW5C/\)=ݖ}.JWYz?}wl/M
endobj
-1848 0 obj <<
+1935 0 obj <<
/Type /Page
-/Contents 1849 0 R
-/Resources 1847 0 R
+/Contents 1936 0 R
+/Resources 1934 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1846 0 R
+/Parent 1916 0 R
>> endobj
-1850 0 obj <<
-/D [1848 0 R /XYZ 85.039 781.388 null]
+1937 0 obj <<
+/D [1935 0 R /XYZ 85.039 781.388 null]
>> endobj
-1847 0 obj <<
-/Font << /F60 1074 0 R /F15 951 0 R /F57 965 0 R /F35 948 0 R /F36 955 0 R >>
+1934 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F35 948 0 R /F36 955 0 R /F60 1548 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1853 0 obj <<
-/Length 2265
+1940 0 obj <<
+/Length 1616
/Filter /FlateDecode
>>
stream
-xYێ6}WI1[u>u;
-ƧɶtbUkH2K<ߺ[
-z!=z3VWpŞV[XTUe:bO(AKe,"5pTӱDE<uċTyQhJ[*6:/QMٲu_nXFFx@H)Ee t./>ۦfV&FŠp?Abè`G5ބhHn 2y=g' C &m*@eS|^( \; [ї!f±-L⪫L(>>;J4RA>4T-zQuz-ZVzc.7͋P~b-}߰(=^s&ZiBKMlCnvM`cpVz eumTRpy⾩r
-^3G֓P2%dBdB7Y ^so98qCަ*H^+
-`#W,Q Gy0=yԷQ@O[(V"hafN? lqzfk
-
->!b00D)3paa63۾(Nƞ fv
-ER.k͗f$vfz9ȄI#GcV)$Bm2AIܪؖOb7Q򙄼LR .Lh10{i,bNgpn"BŶD&LG0`kQۀdр
-> =~=#|x§SE) &QvɆ)p5EVEXE&Ur^œfʭyl C+q-{a e~+s|
-KN`a?4# ׻0voz
-0ΠZC+HGm8TQ> ^'89
-@?4?r0xL??_|뿿 \t8y`?Keʎ|7^* ȧ盉*Ɉ>5v\"er{\Yq>7{tQҰ9]q" H :Dh|''~= п)1l/ xz|o]Nc%7c)@$ᯜ I:" :
-b%'7M&
-@Pjepi^?ITx0` R $gHQǁkޏ@Ar=endstream
+xڭWKF WE.YFA[X] ÑlE{!Gr{(XKC#HIǃ?$Tĉ*I]gJA
+h*VVVO\Gmfg]rBpK d{ḿOO09}$Lg\(ǧ U]oCɛ2S&!*}(D 1Y ki ~PטcM/Z*eX8E& Bs0t^hMf 3
+àM0K
+a
endobj
-1852 0 obj <<
+1939 0 obj <<
/Type /Page
-/Contents 1853 0 R
-/Resources 1851 0 R
+/Contents 1940 0 R
+/Resources 1938 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1846 0 R
+/Parent 1916 0 R
>> endobj
-1854 0 obj <<
-/D [1852 0 R /XYZ 85.039 781.388 null]
+1941 0 obj <<
+/D [1939 0 R /XYZ 85.039 781.388 null]
>> endobj
826 0 obj <<
-/D [1852 0 R /XYZ 85.039 761.463 null]
+/D [1939 0 R /XYZ 85.039 761.463 null]
>> endobj
-1018 0 obj <<
-/D [1852 0 R /XYZ 85.039 671.062 null]
+1020 0 obj <<
+/D [1939 0 R /XYZ 85.039 657.513 null]
>> endobj
830 0 obj <<
-/D [1852 0 R /XYZ 85.039 671.062 null]
+/D [1939 0 R /XYZ 85.039 657.513 null]
>> endobj
-1855 0 obj <<
-/D [1852 0 R /XYZ 85.039 639.536 null]
+1942 0 obj <<
+/D [1939 0 R /XYZ 85.039 612.438 null]
>> endobj
834 0 obj <<
-/D [1852 0 R /XYZ 85.039 525.326 null]
+/D [1939 0 R /XYZ 85.039 487.277 null]
>> endobj
-1856 0 obj <<
-/D [1852 0 R /XYZ 85.039 496.528 null]
+1943 0 obj <<
+/D [1939 0 R /XYZ 85.039 449.177 null]
>> endobj
838 0 obj <<
-/D [1852 0 R /XYZ 85.039 356.132 null]
+/D [1939 0 R /XYZ 85.039 293.11 null]
>> endobj
-1857 0 obj <<
-/D [1852 0 R /XYZ 85.039 335.139 null]
->> endobj
-842 0 obj <<
-/D [1852 0 R /XYZ 85.039 189.833 null]
->> endobj
-1858 0 obj <<
-/D [1852 0 R /XYZ 85.039 170.961 null]
+1944 0 obj <<
+/D [1939 0 R /XYZ 85.039 260.689 null]
>> endobj
-1851 0 obj <<
+1938 0 obj <<
/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1861 0 obj <<
-/Length 2559
+1947 0 obj <<
+/Length 2805
/Filter /FlateDecode
>>
stream
-xZ[s6~дf, %lvwv4H[l$KRq<;{.
-#)T#wt 3?i>Nz+b7nd}w~vxr/Ɠ0t|:mD (GR8#W8û+d6GW|Ghw9=UxXEhPx
-`N 5fj<}XIʛX'ҹ))t޿Ğ0~O
-?Zn@rEj<ѡG'W
-n_yu52JCpˋeH zy;SV171'UY%[<~7+ ڀDt:ٌY$hCa?diّz
-2[07Vvhon*k!}!AD股}MgN\ 0ؗX $Lj`6MRL4
- aE~kI3ܻt8JFK٥Efo+w?N]IZlΐK~RUVZ4S#
-3%-+Q 3E\!3t/Twm- aI7Lgݘ`0<p'&3ny<iFR\bݞmOJmꐒGK-ɞօ
-^*^k11k at6ar|%yqkX0~>p.#{ΊC;yaqbu$MeBz|\+ϙt1h0|d__f@B^EaLIE•έN`y|:*Hh~qee;+"Y~Ȋ r;%]|!8XP` g yB%[AJ# dA)GD?ӴmxN='Myզq yo(Q yC V
-7b~BR;&1'뇶AXt<8a6פXAdHx . #w8Z79͠@~(\)s j
-R5В|vP]P;c{q_Q`"JŇ şOo@>B}Bw1Zendstream
+xڭZmoF_!X*BON&q/pZ-飨{eIQ"%`I<k1
+Gb*X*GY0z΄!^g̛ڌD'A2oh?j4KϳO)5ڟx1~wr:ueԒ
+aCG&~,|ikhyb}c LQ14`4":Zψu";t[t
+~r>z=Ul'a ka)U
+g} @
+T#P~maCoP-gLU¶FBG #㛎NFFUmwQY~ ?sQ= #@6=!odNe]a
+pǏܑ6jYCT"pBoî8U//*_H+>6hzy-W!,lj,'"B%nՎX$e.s{@B܇ETB7֙5-6,ګ H'(s
+F`AL%{:{@CO"ah
+.1\򞻇[tqje[&eB}Oq#QL,LV;>OCr~j9u6͐3:cQ >a^c!6cFPN|@xurYZe ab%wduMj{ I$v8R)v$UBӑϚ3Yd ] ر.kܢ6~!>T:}ݶXl^WQGp"Mg)5-DvU/2Eg2;%eI<sls]:7puAv !@3iA5h]QenXL
+&PmI^=RxξePb %H#}0'u\F% ive4yr
+?7Xi* Aۦ񥌼"NYErYa#v.(TοrήC|q4@zl+k|G-@a@
+iybv Fabr5
+cO$|pgK#\?w- < fO(7L⢻Hm[41P^wmu];tէo/oqyzusYV
+JWS'v[l!ط*/beiv:{Witfp߁L~;1A{kݮն͛wm<s^7:CxC;=>7r1O+%UQΫrtꨓCoYUvHZ.nb+2iYuN5OoO1h`E+_i `$ڶ&X>'eF˨B< nh[5uk 5;ݠaӶSM^;°6d)9l:撤\M Cא~us}/E-ҏG@/-L:~c suɗn!ZFwzO6\ϤY
+(HU4ik XMYԬ6_x E"tK'ۻc+o$Ws0t$ak{}|Z )?I^vԐ
+~ȏ r<|ކ:ڼ1ά;alh/jNQhHhLoޠl.?d˝+ޮ]y`fN*e2#؋qM!$N˂KDo  wendstream
endobj
-1860 0 obj <<
+1946 0 obj <<
/Type /Page
-/Contents 1861 0 R
-/Resources 1859 0 R
+/Contents 1947 0 R
+/Resources 1945 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1846 0 R
+/Parent 1952 0 R
>> endobj
-1862 0 obj <<
-/D [1860 0 R /XYZ 85.039 781.388 null]
+1948 0 obj <<
+/D [1946 0 R /XYZ 85.039 781.388 null]
+>> endobj
+842 0 obj <<
+/D [1946 0 R /XYZ 85.039 761.463 null]
+>> endobj
+1949 0 obj <<
+/D [1946 0 R /XYZ 85.039 743.459 null]
>> endobj
846 0 obj <<
-/D [1860 0 R /XYZ 85.039 761.463 null]
+/D [1946 0 R /XYZ 85.039 602.955 null]
>> endobj
-1863 0 obj <<
-/D [1860 0 R /XYZ 85.039 736.911 null]
+1950 0 obj <<
+/D [1946 0 R /XYZ 85.039 560.002 null]
>> endobj
850 0 obj <<
-/D [1860 0 R /XYZ 85.039 444.486 null]
+/D [1946 0 R /XYZ 85.039 199.83 null]
>> endobj
-1864 0 obj <<
-/D [1860 0 R /XYZ 85.039 420.504 null]
+1951 0 obj <<
+/D [1946 0 R /XYZ 85.039 162.299 null]
>> endobj
-1859 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R /F57 965 0 R >>
+1945 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1867 0 obj <<
-/Length 2151
+1956 0 obj <<
+/Length 1454
/Filter /FlateDecode
>>
stream
-xڽێ۶_EEӢ@hMgyhr%9 eK{i.b!r8$~Řß͸JƱL3^lF|| +?b: a<8mVd<pddS;g%gQƳÜ-D4j̓TEQpOD<EH@C,yZM4;P\2.ဣ%Bw!SatL,D#Ҳ dt/j2& $
-v"ZP'c?uiRMip^Yܦ x}K^HC#.܍K{WeKJ !ЈgBQnũl2 Up'%[.sթHSÔE,%PmvRBmF']$l;r<">Q;m9%k Wَ'MLK:Զ$b%liF-bC:r˷7M K+ Hi0t@mWahC*8=Z^kAS'DMMqeXֈqG[?x#Eu:; rIvQgbSˑS5+S:'bvo%y0hfx4H2?۴tSp?g~ucAh#B(D,-@1ۈPr7zy
-nͼAzk.M`z (28xym,>P @/hh]159 ׀ "68b`I6<}A;}ODej yAnp TAm_>LKuWJA W= =X}c0]3mw)fbDfnˢNЏ8U~^x>(K$L67[׎ K.H26`GHRC5lKL/oȈD3syf t~ِ>ri$oH5`=>Nr
-:u{O8*wj̫k.?֩1漢ȡ`C
-#ZȋtwRl OeݬɌ4_J9*\h0&q;sE[}~PAIn?7j;Χ,(۬".*DE* e.Yp_L| ҐI7RN=++ d#X!Xvv׎ i3nbGś7``WwX-wY,eۚРȄq(_X`so~*?<#ߎczÖ. ?]wb--uUOU(>LFr,aGaT\Ȣ!<fHo1!H%VN5ψlKK0W
-0n?"Dclr6X7%{~s':`ʡQSz3O~u73OHZK<!*L$g-s7<zq1|]VϪxI߲IȩBa1j+`25p>➠:hw Ѽ.ŝ
-ڧ?BvL9Ç5l"&Trn C%yFߛ9ո
-r$55$bZJ̽aq*)+V>Ti؂d%8 {A'hs##Gj&ϡ|F/v{e%w f7}B. hGMsxJ7iu&sz5T @as{H0q~}*'=B?RyMendstream
+xڭ]o6ݿBo!ER.kX֮v m(bk%WGɊR}Yx /ьKʼn`2Il3
+n~ G8`Bs?ױ'83x=͔2/o恔̓8N_={birv,A)_f>q/^8&̙ 0;W쯑)^2J˄D[% 4g+k a?? e4yý@IΒ_]\_Y{?rͻMw&>u~6t" -sm[5u)zds|ӧ}]Y_6[m;h!PiTSbyyuOѳآFû7v.2‡GPant
+mjNğOf ~#R6Iۀhځ
+eJ ~^HB}~IW@*CPqءd3wΔ
+PnB3<۵cņ6 ,+]7 O6V6ގ'R1qˀcypJ V;
endobj
-1866 0 obj <<
+1955 0 obj <<
/Type /Page
-/Contents 1867 0 R
-/Resources 1865 0 R
+/Contents 1956 0 R
+/Resources 1954 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1846 0 R
+/Parent 1952 0 R
>> endobj
-1868 0 obj <<
-/D [1866 0 R /XYZ 85.039 781.388 null]
+1953 0 obj <<
+/Type /XObject
+/Subtype /Form
+/FormType 1
+/PTEX.FileName (./xslt/figures/note.pdf)
+/PTEX.PageNumber 1
+/PTEX.InfoDict 1964 0 R
+/Matrix [1 0 0 1 0 0]
+/BBox [0 0 27 27]
+/Resources <<
+/ProcSet [ /PDF ]
+/ExtGState <<
+/R4 1965 0 R
+>>>>
+/Length 1966 0 R
+/Filter /FlateDecode
+>>
+stream
+xeU9,Ge@@Q !%bd(dʤ(
+$T)_acڿG=1Fl]tquݦ5<8Ǘ:\;<q;.\i2c~eqc=7+g ctaL1cacum QO-{w&k
+9xcH
+ϒig٥C6u&\ GTMKlFyu|?%iȥKNq{v*JE]8hp0R$(+ nN
+qѫ^>> .13ׅӃ!3SAՔihŨ^(<m䦽lL7
+г2"E9~
+n*1xƈp&XîÜ\D0}#X>#^V|2i9΁r)`Xh&hbHe"
+rGX58ժOt$yBқ5/vpo`kAr 4N.4
+endobj
+1964 0 obj
+<<
+/Producer (AFPL Ghostscript 6.50)
+>>
+endobj
+1965 0 obj
+<<
+/Type /ExtGState
+/Name /R4
+/TR /Identity
+/OPM 1
+/SM 0.02
+/SA true
+>>
+endobj
+1966 0 obj
+1049
+endobj
+1957 0 obj <<
+/D [1955 0 R /XYZ 85.039 781.388 null]
+>> endobj
+1954 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F36 955 0 R /F60 1548 0 R /F64 1960 0 R /F18 1963 0 R >>
+/XObject << /Im1 1953 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1969 0 obj <<
+/Length 2485
+/Filter /FlateDecode
+>>
+stream
+xڭnF_h27޺R)RlRmmDM~e_Gj"OMXHOL eBN llDl-,B(1KU.UZNIb&$"H%Yr:3I]Sĝ4zSF]]vo1ȒLaR}Dy,lʱ-3SQ۞}vȫxeL(eYG Gg|:
+z
+{=PZ:u l'~6\q] +QzO`W5r[vК@3eݵ=>XM;8.PhV^0B)5GE;OjK8[d%F*:~)9+ *WAC] D*/*
+ҞІBtzKXm,8s|x  ,݂W~ okG=}O{%=M6?堩{r2و"Z1Zh\tۢ/#+lT/,oŅOB$Gð<IQQ #2R
+5o${+t`x*7,( r[T=Z
+ʪo vPe4W7N3a V`[O\&G4zw~.<:WSnǚE17,4Ѭ[L07q_moRJ}@юo`]Q k2|ƾce"rPBEXȭ3w4N𧊻ms_2 RLA岤/%/m)6['&ʏC <~iW7!:[#j:up?Z&_WSYll8ea32jpެ_!\2,/,w! &i8ScjK(:Q'
+ z6k^ChT2-;(¾y g 97=+'~Eq%vc DƻL`DM.T@oAq*hIo]O $J|}s fiSmON' Pje0׻b tn*Y}|E4˜@nn]lO7բsTzuCoIuùG' 2 `p0ȯ(\@FLH~f&rdgZk5|-ZѠpK}+Vf 3ߤ̾] yoj]pQzcj v"8\#5X204
+e 0qgDxhwnA#oJjh5l!ǹ0zg8έȲa |dfoH3 U ת;ĩzs: %Ψ ǐ>8GÌZ?x@oAtUk#Vvgh^ס
+4o aWԿsbLA=^. q|SjD`m~pdB+b<ζr$R-<y>gLaK0b9/q4`]Fy =LkkTεȬ}>g Pv[)ha:ϘQPo[ ~t_ ] exڀhgoVVh0!؎i@zcW x ssH/6gN/'Lendstream
+endobj
+1968 0 obj <<
+/Type /Page
+/Contents 1969 0 R
+/Resources 1967 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1952 0 R
+>> endobj
+1970 0 obj <<
+/D [1968 0 R /XYZ 85.039 781.388 null]
>> endobj
854 0 obj <<
-/D [1866 0 R /XYZ 85.039 761.463 null]
+/D [1968 0 R /XYZ 85.039 761.463 null]
>> endobj
-1019 0 obj <<
-/D [1866 0 R /XYZ 85.039 667.044 null]
+1021 0 obj <<
+/D [1968 0 R /XYZ 85.039 653.495 null]
>> endobj
858 0 obj <<
-/D [1866 0 R /XYZ 85.039 667.044 null]
+/D [1968 0 R /XYZ 85.039 653.495 null]
>> endobj
-1869 0 obj <<
-/D [1866 0 R /XYZ 85.039 642.326 null]
+1971 0 obj <<
+/D [1968 0 R /XYZ 85.039 615.228 null]
>> endobj
862 0 obj <<
-/D [1866 0 R /XYZ 85.039 556.019 null]
+/D [1968 0 R /XYZ 85.039 528.921 null]
>> endobj
-1870 0 obj <<
-/D [1866 0 R /XYZ 85.039 529.405 null]
+1972 0 obj <<
+/D [1968 0 R /XYZ 85.039 488.757 null]
>> endobj
-1865 0 obj <<
-/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R /F11 976 0 R /F35 948 0 R >>
+1967 0 obj <<
+/Font << /F20 937 0 R /F15 951 0 R /F39 974 0 R /F36 955 0 R /F35 948 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1873 0 obj <<
-/Length 1146
+1975 0 obj <<
+/Length 1105
/Filter /FlateDecode
>>
stream
-xWKFWpev<˕K);ݍrKEX(loRkJLO?̠cF*BA`lv3j_fLk8 znOmS:'Rl5ZpjpJ<OTj&-uflԌ-bfR[V/g0 ± !c> #c7DF¶&
-23.3KZ3Ș:}B3-`Tؐ?CQP !J ]-+ĨywEREdET)
-Mr4';
-b@Caͣs q.պ[ɔ*GMVhZ#9};j
-BJw3BZc3]Hx/,O*UU4)% | ^i!0qM y-~ JfRvjrc%GVpZzn}s{{R]J3*.|H ՅYdYu jq5n~śFr>qOU^ϟ>_\/_Yo/^\/'q˕Y2֫Ⓣѫ~?Yn NpMg[:Xlk;`U\xkZVCEB=*78f~O-b/?%X~xqs
-_wy/K8BqDnS} 5FNh䦃Z we<;A~uاPzh cݱ$gZbGM}גTew) ̯!=H/r0^ |_Op [}u0endstream
+xڭVߏF~_#`Pԇ%҇4 g W=U3pg0;}̎as"I0bDDڎso~1HAdz߾'4}l?d1C7xʩ)QJ8"JH:/%u?O/T~Iݵ3w_xMkhC "B"V%C"ceW}\YMjΓ .;U a̛SnxO1 03xcDV,=f2
+IcF
++Fgzm,8< Lq!Tಱ.
+-6ߋu*)ź5^&ffdjn*M0#oUJҡJۋZ7^{n?DA"(Q?Yb7 Bȱ:_NǏYM64!T\uK}<|=@W0J{ju1^<넘 ^n@=x*T/$ J؛ enZf_?Z8ѡno0lvg2]cN#XM93 z zgw.0ŸofɁ<v4yB>[L.'_/'on&rt|5qQ54AKуVXlrB202/ת6A5HEHYEͪ8 N2H >Cnvdz">>ˇJd=)_lmHh#%^l}Ae|el@Yhj[r>`ۣdg2B:gEr_[Zyd^Xv<*"y"
+q>wendstream
endobj
-1872 0 obj <<
+1974 0 obj <<
/Type /Page
-/Contents 1873 0 R
-/Resources 1871 0 R
+/Contents 1975 0 R
+/Resources 1973 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1846 0 R
+/Parent 1952 0 R
>> endobj
-1874 0 obj <<
-/D [1872 0 R /XYZ 85.039 781.388 null]
+1976 0 obj <<
+/D [1974 0 R /XYZ 85.039 781.388 null]
>> endobj
866 0 obj <<
-/D [1872 0 R /XYZ 85.039 761.463 null]
+/D [1974 0 R /XYZ 85.039 761.463 null]
>> endobj
-1020 0 obj <<
-/D [1872 0 R /XYZ 85.039 671.062 null]
+1022 0 obj <<
+/D [1974 0 R /XYZ 85.039 657.513 null]
>> endobj
870 0 obj <<
-/D [1872 0 R /XYZ 85.039 671.062 null]
+/D [1974 0 R /XYZ 85.039 657.513 null]
>> endobj
-1875 0 obj <<
-/D [1872 0 R /XYZ 85.039 638.739 null]
+1977 0 obj <<
+/D [1974 0 R /XYZ 85.039 611.641 null]
>> endobj
874 0 obj <<
-/D [1872 0 R /XYZ 85.039 638.739 null]
+/D [1974 0 R /XYZ 85.039 611.641 null]
>> endobj
-1876 0 obj <<
-/D [1872 0 R /XYZ 85.039 619.008 null]
+1978 0 obj <<
+/D [1974 0 R /XYZ 85.039 578.361 null]
>> endobj
-1871 0 obj <<
+1973 0 obj <<
/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1879 0 obj <<
-/Length 994
+1981 0 obj <<
+/Length 971
/Filter /FlateDecode
>>
stream
-xW]o6}ׯP9RBN,ܸ+ McJJn?eJVV`<B:$?.vvV2 ;
- |$)=BqF?NNNxށ`pބ
-r\KPj>
-"dn7F*gYmd;O^P&+RD#H6KTv<Q @,k@FźZ,㈥"$$sf#sP) W'ߧ=sM4 Y #OTpсeѣ'⠤M\HcǢw.( {7:Б8w,3g7 Vx'z]_,rVLoA`!gQo;"+xֻ/7s
-Dendstream
+xWo8꾐6iR$eװ6E\0ktڦni~ϿM ?bx aG<c` > zX9|\`c]F h^ fCRj -!1z1}w5+WYP/Z|?Wƈv
+P[xS=dWCí8T3^X-UO5]ׇ.ι$gLvH=z ,4I0Y]\-.*4LRMN=Z.¾Z![poqҾ0_ݦgӯZ*9(Yγ؀2Z󃱴3ĸGC|rf
+ze:ֹ|͏uޘqO3z3W k|Bal ۡEpe߇
+ X ˠ|۲qVgȵݽؕ;R$"Q=*o]S.Yvs4a-IQqvTO\{{\+J&s5iYdl2֍G<mo<"><'M IuL=`v|=*݄Q8ׅ0B _ߦZA)"y fډendstream
endobj
-1878 0 obj <<
+1980 0 obj <<
/Type /Page
-/Contents 1879 0 R
-/Resources 1877 0 R
+/Contents 1981 0 R
+/Resources 1979 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1881 0 R
+/Parent 1952 0 R
>> endobj
-1880 0 obj <<
-/D [1878 0 R /XYZ 85.039 781.388 null]
+1982 0 obj <<
+/D [1980 0 R /XYZ 85.039 781.388 null]
>> endobj
-1877 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F15 951 0 R /F11 976 0 R >>
+1979 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F15 951 0 R /F39 974 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1884 0 obj <<
-/Length 2286
+1985 0 obj <<
+/Length 1966
/Filter /FlateDecode
>>
stream
-xڥkoFSbH.(.:9ZM!ĕD"U.%Wwޙ](G"y8ādŮx0__9%|r53m' p;qdA W?n&cr#{8ǡkǟW#C7~o "~rlă;$0;W_,jS=||'8cDZ0:w(Fv ixBR"W #/\"iP"EQm핪\OEuX.RGr[К#zFG<vEm t x#?nk'p%6Pk= /p!sR f
-1 ,YW(9Ce>ZL\~@!0bzEۼ6
-|q%LGPpLdG.#`~F9bZ) 7[oknoX|^oyc'7uxʲj>jU z')ØY0!(& 1X!:cT5B%ґlբHΨӒhTUgs.ĩ*?r mKʧZEJr)*L\ϒC}Af? dZLETHdjL[gm0Jhi %F&8J'7s/:nVX"Z!A-#V~vLgpwPs}4_̌tvh)e$j,['Cu djjBb#V 'xJ BײUqcR7" bV)$r3 j}jaz㓂0vH޾+ԈR6bl/%(_1:J99UR3[9;GZ(shI5WF/-\d] <>#E
-ݣt_nH8Z3ɠ wjsT!1Ct3aNnb"PYK#p Ou^n+'n+VtWPh(N(Haw~{Px^N{97Rnݔ7)KP%jM:Yzh--{'7/?8T[bΌ̨%cOkl`*u?hT0ugE
- GM'"dX1U%\ƎV\A %J *XYJIqpYQYG p&IaLNUa-SEH55e;BS`qOP0㍪AYe|;ё|$<Qus+jTtlw2e2MoDr,R7poij᜚[$NgJ@
-2Pj *MfsTo7m|^Xs޶f]Ϝ nD]{=K#P [6endstream
-endobj
-1883 0 obj <<
+xڭXo6HCiYV m[d7lh,,?f8{HGI?yN0_̻g8ey=:˽ ?M|wq;ك ,/vA/mϚ0۟x*mŁ5~O{$]ǃMT:Q7؊⹰ϫ9#'Î;u"7$w#˪7xy>xu]TCjI<^o9IҵL/ڵc_؃ȏRQ#R͏|<%*KK^5zdv50ejzdm^2_Hj?
+?q8f{iGvwp5g9_|5FYnCىn7-y-E*s^m^&s]<] pH\㘟f?"r6,ǎ ]-r.E p%O6f='1
+<g @ȵntU) 3H0UNx xz,Etδ 8Φ){YcOw9E=LbZVlCϺ%M4Ȣ[mE3)fFj;IgZnx@]*K1diHAP}>t| `; /^1áN8jޗܘ!qѡE.$`v @otfv3' Յm%K%wHUE-u"JAV'&2UtF2hx
+5?  d`od9[󭛦FP%æH)9KW ti(^ap2YIXaP4٣p:XR10uz]ޙ"Ae'\GR cD 9ꆼl2#E39c2 Q\c
+@qوEe0cG8w{/
+Hј@C.BVt C*P’i(Tk%s
+K|@vXPJr*,@t/O媔O/L l ⠌<n;;%-LyL@W.x4L/Y Dc!`Cb,)
+endobj
+1984 0 obj <<
/Type /Page
-/Contents 1884 0 R
-/Resources 1882 0 R
+/Contents 1985 0 R
+/Resources 1983 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1881 0 R
+/Parent 1952 0 R
>> endobj
-1885 0 obj <<
-/D [1883 0 R /XYZ 85.039 781.388 null]
+1986 0 obj <<
+/D [1984 0 R /XYZ 85.039 781.388 null]
>> endobj
878 0 obj <<
-/D [1883 0 R /XYZ 85.039 681.042 null]
+/D [1984 0 R /XYZ 85.039 559.099 null]
>> endobj
-1886 0 obj <<
-/D [1883 0 R /XYZ 85.039 657.724 null]
+1987 0 obj <<
+/D [1984 0 R /XYZ 85.039 522.232 null]
+>> endobj
+1983 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F20 937 0 R /F15 951 0 R /F39 974 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+1990 0 obj <<
+/Length 1952
+/Filter /FlateDecode
+>>
+stream
+xڭYrF }WO:ц{''ONj4I+yI2Zb]/7QmEqA
+_aՈ:d^F.Ӑa<-z$gO~L9d2:
+>^LhpeoyÇ/ףNO_нCBay=D
+FW_vۧS (J 0X U &S)`vJf2AɼaVԭTѫd}ˏWuw*]ۅd?sIb
+qdB"Y?kR"ůVVEbЃk2=]+cAV"E& e"_ ?gDVV}-d0^# +rQ$S{3A]pU
+! #jv6
+?l9T#Ww
+0$Baesx[☈֭78EØhȡM PKKh;(*fϐלhd"&١x憁z ; cϠ),i̗~i(9%S?Dpa0>0diFo'tG [AzJBhkbI
+8*n}gv5;^+]=0}^8"gA܋1Nǭ}ai4B=̀M+6 lج0D1ܫF'tPN0(U"TTa}ȼ[6^SӓЌq1O^<jڇwEJCAs/rNCJ&B-c0[XCHtMA.k[ἾW 6 _a`rA)A}]ቓuQo`͐碫X1*qdk5v} 9ts,Qu8#~ǐLÂulLendstream
+endobj
+1989 0 obj <<
+/Type /Page
+/Contents 1990 0 R
+/Resources 1988 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 1994 0 R
+>> endobj
+1991 0 obj <<
+/D [1989 0 R /XYZ 85.039 781.388 null]
>> endobj
882 0 obj <<
-/D [1883 0 R /XYZ 85.039 288.342 null]
+/D [1989 0 R /XYZ 85.039 761.463 null]
>> endobj
-1887 0 obj <<
-/D [1883 0 R /XYZ 85.039 241.673 null]
+1992 0 obj <<
+/D [1989 0 R /XYZ 85.039 721.768 null]
>> endobj
886 0 obj <<
-/D [1883 0 R /XYZ 85.039 241.673 null]
+/D [1989 0 R /XYZ 85.039 721.768 null]
>> endobj
-1888 0 obj <<
-/D [1883 0 R /XYZ 85.039 218.355 null]
+1993 0 obj <<
+/D [1989 0 R /XYZ 85.039 684.901 null]
>> endobj
-1882 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F20 937 0 R /F15 951 0 R /F11 976 0 R >>
+1988 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R /F60 1548 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1891 0 obj <<
-/Length 1977
+1997 0 obj <<
+/Length 2332
/Filter /FlateDecode
>>
stream
-xYmo6_aKfDR/T~p3gMiP-`[$ ݑ,Y%m
-lR<s4mG&&ڮ ў.Zf ޢl[tlz3n;0h+I2>Go{E97K:]Ƈ5Fjli_~k%]XG >~2l]$[蛄z^{ѲlNlykz_pQsV[j8G┸nwIhlb8+k:MQ<nrWj7pMg(u}t0BI<SQ6SПep ʔ
-儹3vg}2
-٢Sl]?Աa>A(4V0(e*B¬a xTI*yK@TSpǒͅ?ˈ!q2?8*I1V@K@ 9o,U$]!!
-4(S-:*.ޚ)R3XQW/Sȶ~gZĵaT9Qi;n$ϻUlfi\O3՟'j"c&UQhա2%
-d)*UrFpaEJ=Ԗ]]QzXK\ack3p^6+T{pqUҿuiBЗ9R;
-2gr!пFRXd$*gFVջ"ťu[.d<;B4Oh:ҳ~6d#Etֈu;[t hm1W~V5veā LO-x*ZdECZmjUCn9OH_G1~&^ߓL>&s9i\ aKaM791LPXR̜_Lwlȡ[QSo'/V%6 "+lA&0qv y(u53D؋A4PJ 4,ژߩZ\C8ܬb07 go. GGr+&
+xڭYo6OTj(JZi<8YPm93#)iKV%QxzX/uÞ0Ao9;X3C2м=$ao(xDxno2tz=:'·>szۋz4h8)@@A(qàƔ0XH ׼G]mzn@mZȼ =J<*ڌ?`j[%1N |0+G`C+ߞ•%aGjxs4M:3l^^?D=4 xolOqs|n|<zԲ%m<a Jh4<-oÛt4>&(Ta*?}B\;Ħ6Fd-fC\|oO/=Q·Zrj;_͢<6vbo%JQ>Ņ1BfeMTHvd<9܎Y|Ik }HVsT F!iߧ[-|[eyN!Ul80
+3hqD0_@s'L2 q!BJ2'sгYF:֤;xP'N:W?yG>Uhp_0y,54߂fJ-X"ewLYʕ30$h%
+u0j,\t 61f5(y$; <Zˢ޷e \}DH%<fYuzLN|WV=H]UPNDExbsCױ%-|ϻppq2_]0W
+/ ?-endstream
endobj
-1890 0 obj <<
+1996 0 obj <<
/Type /Page
-/Contents 1891 0 R
-/Resources 1889 0 R
+/Contents 1997 0 R
+/Resources 1995 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1881 0 R
+/Parent 1994 0 R
>> endobj
-1892 0 obj <<
-/D [1890 0 R /XYZ 85.039 781.388 null]
+1998 0 obj <<
+/D [1996 0 R /XYZ 85.039 781.388 null]
>> endobj
890 0 obj <<
-/D [1890 0 R /XYZ 85.039 256.633 null]
+/D [1996 0 R /XYZ 85.039 501.914 null]
>> endobj
-1893 0 obj <<
-/D [1890 0 R /XYZ 85.039 233.316 null]
+1999 0 obj <<
+/D [1996 0 R /XYZ 85.039 465.047 null]
>> endobj
-1889 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F57 965 0 R /F36 955 0 R >>
+1995 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F36 955 0 R /F20 937 0 R /F60 1548 0 R /F39 974 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1896 0 obj <<
-/Length 2006
+2002 0 obj <<
+/Length 1283
/Filter /FlateDecode
>>
stream
-xZ{oH?"p:Hfz⤴My(MIPK:'Rofw8 G{B}7hՀ?bpj;pǩz3/+T0&1,SGʳS  n?KOWͷy9QޟiϺ'鿩&1-'||bTěATomq~XUeTԜYUJhjq̲5Hd2YoFqQ
-Tm,'V)r|[R<Q",}pQI*JH`&+ĵ݄b6_#E4L֒8| I9 &0W
-0<HǃX=3 }p IBV jy+:tDR)Gyu) 5H0<19P21BgT8FkxhKj b1S)jɊE*LWwČhy;.IHğޠIð!5!h$Ω 鋊8Iͳ{!c:Bj:0\d ©9GC/Jru&vv4(40tW :IT:1L3HSM3 n‚嫭($ur\@R@
-3XC"IeK$N58k_0U' ƺNgf 4Z)4Y`,2*̂:sz~,&3X6}0$ߔhf=.d9?lbh)t HZ1cHpX?{Ju>Ƶ֣] =I`
-F3_L"@[(ZI Tvi-KBN$
-G"f@O,h>0<<n `.̭ՃP^`$QipS-)Lz5Z窋K%.HjqPM,s)ҷ[pP򟅨lD=\B\U'9lJ5 0\7v(88R^/kgX&(ԏMϱՏYU
-X0wKs"4U[B4}?d
-endobj
-1895 0 obj <<
+xڽXkoHίpDd~J$1VRp*
+Y$H`S$;c "̝s=ssmA4HͲ f R21J6^, A@GK(#|/[oYiXn7>7˻>6\pZqc3oC]F6OU #6`6YRa@,4 qGtG2yO&4\4]D.(3A< j4fJ
+<ڴCrnu+儳eO$(,>[DvEcg9;wVﺕRqtMߖ {h˖VȲ2XZSpp
+u%CKX+'(_c@x`210]fi5m#
+~@tv
+i+9 )+iSw\]Q<++ȏȟNe+}ƌ{AϡG1+#(5ia|8#mr]s0JFd6Ε
+M,P)窞5gAUݡLd,|$-ycD o"B;L1~9Q[@³7#> 1yBb닾r
+c3<h'uYgt
+]eA*~! QfR+ 9̀
+endobj
+2001 0 obj <<
/Type /Page
-/Contents 1896 0 R
-/Resources 1894 0 R
+/Contents 2002 0 R
+/Resources 2000 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1881 0 R
+/Parent 1994 0 R
>> endobj
-1897 0 obj <<
-/D [1895 0 R /XYZ 85.039 781.388 null]
+2003 0 obj <<
+/D [2001 0 R /XYZ 85.039 781.388 null]
>> endobj
-1894 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F11 976 0 R /F36 955 0 R >>
+2000 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1900 0 obj <<
-/Length 1031
+2006 0 obj <<
+/Length 1094
/Filter /FlateDecode
>>
stream
-xXmsF_L'/Qb$eG$aDJT> 9r㑵w>s+A4x"@\WPf~ j@S/fJ<ia*GuO #@*/.ލ}1acjPoնL
-ib28jghUQmxr|vX'q`'qf,(V:]F_
-%/wI`wXYqWX[l@/WrHHΖyG@U/{!;O: /ӺAzPit=Ro-R=S:I 7[{8~
-?+[.y2 Cu<~Ī=:xrj l: TFaendstream
+xX[oH~@daTr8Nj*B\jkmH B7F]";a;93@
+D"sbSrUbMaX&GYAtJ(Vs[
+T7ts Ch<tcgy+`MoaHC,wtl`71CpKo0d*(3KxE%4p2=9рW}2?*ȵez|T˖Z $VIoS</&eKӢ:N\7YeBjAS[-1ꕎYVc
+Ku.3@J,ϑ<<0Wh
+9M-=ڜ״l@liv7me' \nGn/zE6mOt\ Nlގzַ걤pHя0_;zFrp P*0:Yendstream
endobj
-1899 0 obj <<
+2005 0 obj <<
/Type /Page
-/Contents 1900 0 R
-/Resources 1898 0 R
+/Contents 2006 0 R
+/Resources 2004 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1881 0 R
+/Parent 1994 0 R
>> endobj
-1901 0 obj <<
-/D [1899 0 R /XYZ 85.039 781.388 null]
+2007 0 obj <<
+/D [2005 0 R /XYZ 85.039 781.388 null]
>> endobj
-1898 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F15 951 0 R >>
+2004 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1904 0 obj <<
-/Length 1824
+2010 0 obj <<
+/Length 2505
/Filter /FlateDecode
>>
stream
-xn6_aI6jW]0l@%ۊ6g&˱Q2INwIٲ-Q*)$s0Mᇵ}Eڞψv4m5bvmKB]Ks&) hsg}!<{yeΥ|7gulPBЗD1@%"۷0A{ڒJ%NZ?V56P|}=#TekY.Eui8̮Sun9s;Gl>.?<ͥ6tKaŽ[Dq
-Bz}*rSG xT B&0iQ:ǽ s w͇ 4\$|MQL
-_ijNB91^ S\ZD !㾵`lGGh
-3Zh0E`
-؊F=O6
-HOMUF
-<h*d!Wģ繫Eq̶
-bop\ܿ/:F %a Aqo=1l[3Vx¸a B|rN|e +h:v4(k"\53Ǩ"?}wqqv:X)|:zwemJxNg\t#P)rn¥pz.N,64$&%\ݱd.\„ۀ3&^f 5%eV
-LJB |{ˢxcEUn®UeHGZLQvߞf@Bpݷ'kJ\T6_F<ƃLW+Vk5Μ<5Nc~C䦫>3[OރDZ'9(@pkE3wpy3CpHހ(V
-i/(?U/KbMf!rtq觢=jVB>JΖw]HcoZQCŸ>2Sό\e[ UVzG?m#|h9 ?Of4_؇c{BD cbbvaoq:@m'ٞ#+ȸz^e@(c \<$Uxp658R{hZ&JY|z>IG`=9h p})M'y]<Iǟkd`A +4i-Tn<Dהp_ sDX,p=UB"N}%Y]ED|XWY}Dq(suYl=lv>kP#6K .`+-FD8&xҧpmFendstream
-endobj
-1903 0 obj <<
+xڭZi>BOM6I>6qkk%o[c4`YXzd(U|d,#tuEG߯Xh1 M&InTf(i>(">d㯷/~O3d<1f~9f;۟߿z?rRZ9jG:_(}kJ^]J˫wWDwr{5[LXNrZTNV!uE9R4{+f']0l7oW1wCb:ƶ-&L`%n&9c5ɕJc>Xj$\Co_qlɍ+3o .
+x5a~YL9&o1U0bYi6P]YTι%ˆQh %8*;:9StbNx:&W98Li"ITw 4g$ꆨrN!k@6[6#˙!QrEypODH5-KXv_{;er MB-?sIʲ&X.h06۬L?GMf5EP@>hXĄT ++l֜'cRK|?!2I")4RFNu7">K Ka6= nА ev4"F6aAW"qyI}/6xlt6A7={ sVX'
+aƆ1j&>DnXTP 4*idMa %3N1J_糡b 1h-aW&D)ƋQV7BȦ؆&Td!]Mݼtb94Ć(݆dZ9Zo!LH-lǤ_P~.5fj%Jyy6S f6vd!64$A0th;.uIVVզ@I
+d#Yq18'Ƥ&@SC AEY8a5l\Ceu\Wp;C `9jAVjpB7
+aA$֐Pt.+#P #0؂l\lR<,A&-TN^C
+s;$ J7Ҧ4$mZIClE+iVNu4oqk >mRGaLrzBVxY955mIaY=`rV֜%Ad SP^͵Z1=ڐ*pw
+׿gQ %t nfD0[ՃX I&du#Xw!uO΍qnD{V
+ Zz נ䧦3Ss>yL95o* O6d
+ ,&Q0YC4",
+Z/ar= kED'm"܋e5RRQ_Kqg!PQݨ%TUcP z
+|ڸͳO9oxU=w_l3WOQ"H["5O~|
+# #F{6۽,VO㸉(sՍYdF 2R)-ϷYsd)r`y n\ʝ:`n jCD I sL"zL"iv-xhaPNR$?_?Ք[
+FpdPJO}m׉”vyV[F]& h<>^{J>?/flA3חA=aˀQZx$@70޼%]Y }@fBl׮,f-TkG(Z]gnŲ{! <p,?_g4P/ʵ;SwzH˅<tvŮweSeO&Ku.c:M6_ח+$XG'?m5́ŝ|9?MNendstream
+endobj
+2009 0 obj <<
/Type /Page
-/Contents 1904 0 R
-/Resources 1902 0 R
+/Contents 2010 0 R
+/Resources 2008 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1881 0 R
+/Parent 1994 0 R
>> endobj
-1905 0 obj <<
-/D [1903 0 R /XYZ 85.039 781.388 null]
+2011 0 obj <<
+/D [2009 0 R /XYZ 85.039 781.388 null]
>> endobj
894 0 obj <<
-/D [1903 0 R /XYZ 85.039 761.463 null]
+/D [2009 0 R /XYZ 85.039 761.463 null]
>> endobj
-1906 0 obj <<
-/D [1903 0 R /XYZ 85.039 736.911 null]
+2012 0 obj <<
+/D [2009 0 R /XYZ 85.039 736.911 null]
>> endobj
898 0 obj <<
-/D [1903 0 R /XYZ 85.039 736.911 null]
+/D [2009 0 R /XYZ 85.039 736.911 null]
>> endobj
-1907 0 obj <<
-/D [1903 0 R /XYZ 85.039 716.383 null]
+2013 0 obj <<
+/D [2009 0 R /XYZ 85.039 702.834 null]
>> endobj
-1908 0 obj <<
-/D [1903 0 R /XYZ 85.039 716.383 null]
+2014 0 obj <<
+/D [2009 0 R /XYZ 85.039 702.834 null]
>> endobj
-1909 0 obj <<
-/D [1903 0 R /XYZ 85.039 661.784 null]
+2015 0 obj <<
+/D [2009 0 R /XYZ 85.039 634.685 null]
>> endobj
-1910 0 obj <<
-/D [1903 0 R /XYZ 85.039 634.685 null]
+2016 0 obj <<
+/D [2009 0 R /XYZ 85.039 594.038 null]
>> endobj
-1911 0 obj <<
-/D [1903 0 R /XYZ 85.039 607.587 null]
+2017 0 obj <<
+/D [2009 0 R /XYZ 85.039 553.39 null]
>> endobj
-1912 0 obj <<
-/D [1903 0 R /XYZ 85.039 566.939 null]
+2018 0 obj <<
+/D [2009 0 R /XYZ 85.039 512.743 null]
>> endobj
-1902 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F11 976 0 R /F36 955 0 R >>
+2008 0 obj <<
+/Font << /F57 1075 0 R /F20 937 0 R /F15 951 0 R /F39 974 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1915 0 obj <<
-/Length 958
+2021 0 obj <<
+/Length 719
/Filter /FlateDecode
>>
stream
-xڽXmo8ί#Y-1/:Inrw45tSBL@6!ݭV74% Ngf<CT : aꪶCu5\(Xɟ
-f`DbBS bbWrh /@jFݶx@}[2jL
-o-V#0Ⓜu;<cD\W](&zOVD5S!<`8!j584Ltf0+4ɾʧwg a9n+d5ˣ1+ˠoVT| ?+ LO ]@Fm<bj+$t-}\ /ijbx5|㒟u KZ@zmIUq>#8Ly1!m/O+4P^~%ިh7pGnSKՄ6+dpضY39tchzMƄBf ,8ﺜ z
+xڭW]O@}WHLgF ݤjV5D~ )pÅ u 6DMG
+KDܻnWNMz{nH𠛅la3 B]N`/I{`1i~nGCGOOJLpÚF$%ҕ߲pHeùT 'K fdQexu$ 2)sXz^,mZn}p"~R^M/.)o'x>?Hঌc2~ .K<d6X<8LGsۚfh>Yϻ57zA!o=m?\]3"zW.AXZS}M @16[(J|ulWQz7{w_
endobj
-1914 0 obj <<
+2020 0 obj <<
/Type /Page
-/Contents 1915 0 R
-/Resources 1913 0 R
+/Contents 2021 0 R
+/Resources 2019 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1919 0 R
->> endobj
-1916 0 obj <<
-/D [1914 0 R /XYZ 85.039 781.388 null]
+/Parent 1994 0 R
>> endobj
-1917 0 obj <<
-/D [1914 0 R /XYZ 85.039 107.714 null]
+2022 0 obj <<
+/D [2020 0 R /XYZ 85.039 781.388 null]
>> endobj
-1918 0 obj <<
-/D [1914 0 R /XYZ 85.039 91.438 null]
->> endobj
-1913 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F15 951 0 R /F11 976 0 R >>
+2019 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F15 951 0 R /F39 974 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1922 0 obj <<
-/Length 2271
+2025 0 obj <<
+/Length 2558
/Filter /FlateDecode
>>
stream
-xZ[o~ׯPR0΅ fm].J$v%Q%);3gHf€99͌І?6%|8 z aev uѶ;Nj$x?L!<kdzo|y;b55~zX|7OjҒ='{ lKʶł`HGX\QB}rHz0
-bH= Tp@udq϶#᎑of,^&ygӛE_My}z<2t,nvBnZ졀sٳomܳ'#A^0]F%szҾ%}=cIyh׫x>k$ ލoj ^`1W?nBg8l0)PU(u"hdFڣX H3SCT4*;d.̪a)=s
-Ѽuܦ@py';f^X]=xu5t=d
-W*P@e, 22?m[D0ݺ"v E 4#`9,3_S!*8OtQ:\b䏕[O?eqXRźTc7'*Uae95rmyϛm\JqlnKqt|<ZcXT PPJͦIHi$hI<+wxjhAYńriVylb{Wײ0V4T%nC͜3!¬˩Jp-+ks#_{҈,S&Ѱ-O5L$J6-k䋦P-RqfZ!f(,t C:كԐƣ_e_ 'b(P3#'ݣaQ:5}ַEJf,0aAXvFEsj~!L|sakW?GgGA
-endobj
-1921 0 obj <<
+xڽZmo8_as)R7nEt[-ۺ-$'-7d1MQÙÙgHӞh/e/(7Yy9<3dy><{R=p#~o8Ûw4$0^|s7og7jJL q}oge{G(<^Dp|_ݟ^xOf#""i8R& B(|n߿~ |=ݽn
+oީ'
+~nl?gD$hXYhp_ח3
+FւBlFvXG B^ipI͔Z{/-MmN:=1!q_+{pH<TՓ™5p3OcՌ$[@U,cU_-7R/:VV<
+Ϛu>gm5LR3kxԲBZC<VV!dXӚ{ȲI,i:D?NcLs',ЦV( DpJK[]f"LV
+4^ ;byTiՔJ$^$I=<%?AsPDljSN$
+;@RX #Pnu7e
+U`0xZik1CzNJd A+G80kd(OҶCYV,joc0;ΰi\ԃOQy$BUzȰ*=VI  ~[^hrn}^V==x;YĹrQdd ]8b63L#sR 0]yޚ}C$(-{ kRӲ*Ѧ5ބuC?Z+/ rװRYn$H'F/}B7FڠnNǑZU' eӀnad$^<;<d[Zڪ',mwȗrZ]4Wk 
+endobj
+2024 0 obj <<
/Type /Page
-/Contents 1922 0 R
-/Resources 1920 0 R
+/Contents 2025 0 R
+/Resources 2023 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1919 0 R
-/Annots [ 1926 0 R ]
+/Parent 2033 0 R
+/Annots [ 2031 0 R ]
>> endobj
-1926 0 obj <<
+2031 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [248.685 529.993 326.185 542.895]
+/Rect [936.585 401.484 1014.154 417.026]
/Subtype /Link
/A << /S /GoTo /D (modules) >>
>> endobj
-1923 0 obj <<
-/D [1921 0 R /XYZ 85.039 781.388 null]
+2026 0 obj <<
+/D [2024 0 R /XYZ 85.039 781.388 null]
>> endobj
-1924 0 obj <<
-/D [1921 0 R /XYZ 85.039 709.856 null]
+2027 0 obj <<
+/D [2024 0 R /XYZ 85.039 706.875 null]
>> endobj
-1925 0 obj <<
-/D [1921 0 R /XYZ 85.039 612.285 null]
+2028 0 obj <<
+/D [2024 0 R /XYZ 85.039 677.049 null]
>> endobj
-1927 0 obj <<
-/D [1921 0 R /XYZ 85.039 517.44 null]
+2029 0 obj <<
+/D [2024 0 R /XYZ 85.039 551.871 null]
>> endobj
-1920 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F15 951 0 R /F11 976 0 R >>
+2030 0 obj <<
+/D [2024 0 R /XYZ 85.039 469.579 null]
+>> endobj
+2032 0 obj <<
+/D [2024 0 R /XYZ 85.039 402.481 null]
+>> endobj
+2023 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F15 951 0 R /F39 974 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1930 0 obj <<
-/Length 946
+2036 0 obj <<
+/Length 982
/Filter /FlateDecode
>>
stream
-xڵV}o@O,S#着`.-in6Kچ08*v˾Ci#wy?$BC(wEMG@uљ P|$'PT
-endobj
-1929 0 obj <<
+xڭWmo:ίVn;)mI)KVW&H i]>;65}WQsR! ձ
+Toȹ&M͉N-[EUc2T?|/C0Pmgp5Bxqv9ܱ
+-X|Qzuޅ툙!.$
+~Y2
+>]$y'wƿǜDx`Thx֜91;<_Z@+I.qfv 1䙘I'T;yiFCUa |X{Wiv(Lěucz'0g^g*ppDS5"krDwH,7$UZIQ3܌ۍd!0x(p8J$:8H6Y-[\pS[aQ36d68ݍQ@~fi%1R\wv'nOGK.wWE~2?y󃳉?Bv~9#k4iߧI!ͽb>N]1#<|
+O*!MRc-ђǻK@ y$9qwk"ֈ&g('ݲ1o0m7a |_>{/jT3?I`Lz 
+s6 ݾ2LO
+@G%foyv
+endobj
+2035 0 obj <<
/Type /Page
-/Contents 1930 0 R
-/Resources 1928 0 R
+/Contents 2036 0 R
+/Resources 2034 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1919 0 R
+/Parent 2033 0 R
>> endobj
-1931 0 obj <<
-/D [1929 0 R /XYZ 85.039 781.388 null]
+2037 0 obj <<
+/D [2035 0 R /XYZ 85.039 781.388 null]
>> endobj
-1928 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F15 951 0 R >>
+2034 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1934 0 obj <<
-/Length 1593
+2040 0 obj <<
+/Length 1048
/Filter /FlateDecode
>>
stream
-xXmo6_ #]+6 MvEn[ h CX,y7wǣ,fue>wG-c 3' +k2l:8>b 2M/N~N~<`#3BtxDO_&ӎeo[x9--ƣh<Qlp=e'hni0ebar|C7e>2=3LmAGUSR;`VDgGt/ӚVF-ezׂ6I\Ǵ::ntD#*VbVed~gy֓ZTX)3R#7"w5M~*n//4;4!c>UO԰f6/\{(")rcS&9q"/MDRe^G.Ҽef.Ad&FdC RUr! uLXyWؖBǛJ3s>IQ ~
-Pz%AIpE|6{s~={qruv1]O j;:3jso3W
-.&s}nua;(FJ!rppc!gP+ר@]wi"4V-Jщ9/(fWH
-8CYJ|% 0XEmZ.6{P/
-eىFXaFlk8.\jCX"ޔfs[AD}u B=$l4ێS(Hbkޏ{G*IÃt]w<gb]W:k241fnb><9Cc4 T
-S=u,h^0kۍ{(~# > m?IINV],tY."o;{ԅev C\ZL@ĥ2Z SENߦw zk:mH$e Rb<eVC IcC(X6*Ŀ,8o5{!yٕF-W91#Z} :"rf/6Cy6o{ }&WPgUKѵ﻽p- ʲ%4QɃ~م7``ځ~:|x_x~f|NcG6PWUc
-IZëC?+YޫWWE#uDѵ*IآqdUfqNAޱ@QWpOֿ/יk?Za{}xz Y8endstream
+xڽW}oFߟE#s86)/NuT
+sh\ɺ}Ӵ{^~4
+Wd7lBp Hz!d̦6o`ς6k MGE1 NP\-A^rz9i&aomO!ǡ.81aMQ!ψ9PVx1dnKOF?}lnw\iUXD@,/zendstream
endobj
-1933 0 obj <<
+2039 0 obj <<
/Type /Page
-/Contents 1934 0 R
-/Resources 1932 0 R
+/Contents 2040 0 R
+/Resources 2038 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1919 0 R
+/Parent 2033 0 R
>> endobj
-1935 0 obj <<
-/D [1933 0 R /XYZ 85.039 781.388 null]
+2041 0 obj <<
+/D [2039 0 R /XYZ 85.039 781.388 null]
>> endobj
-1936 0 obj <<
-/D [1933 0 R /XYZ 85.039 273.293 null]
+2042 0 obj <<
+/D [2039 0 R /XYZ 85.039 83.605 null]
>> endobj
-1937 0 obj <<
-/D [1933 0 R /XYZ 85.039 162.779 null]
->> endobj
-1932 0 obj <<
-/Font << /F60 1074 0 R /F36 955 0 R /F15 951 0 R >>
+2038 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1940 0 obj <<
-/Length 1278
+2045 0 obj <<
+/Length 1830
/Filter /FlateDecode
>>
stream
-xڵWYo8~pysv4I;."Pl*Vk$' wCY#'}YŹgaętsyF{ |dLz/G;qjb` !,y4֘/? }o8i`{ ӟ=8÷x=/zާy}î%ldܐ
-!-R\k㏃ص$gHY*q#eD
-:}WY~Kt [X
-=k}G%I"<+G/G"::P1xNY%U6踾a4CL.T)߹KyπVVzj~#l!m~Zvl302 !G a<rENӓϣ!ۆ9C۵; Kى;:: X$B{PX>JGI5m
-,j\Jcr:[IZ,jӓ}Cs~OȾ"=
-endobj
-1939 0 obj <<
+xڥrF]_!AfY>"v+$dQ#P
+\MkEY/\cĴ=#ހ,A
+i|;,!NԎQ$ J&N:k`
+|drta Dv- ':rzókcV@s_8I+x<BPRNT(&P(ɣD++"$EҔ|`:]!FRoԅR~Ңt)-AAU(j[lJP KSI!qx[SYB#"L𺉤q'CK.Kft ց59zNъ!w*?1]o97EDd$$Tx%&Z œҨZs"֜Zt)55E2
+ٟW/.gh^ߌF']5M酢 j;eV*ߙd'Azwe)k:b SRn+.^[^IOR3OH"lfFk`9>UwWaI furii+u@خN릵NE
+bcj/MDv@dZ?
+uc7= fͬMdnZ|Z?o[!\w_JMJխ&![Іc7U Ĵ7@ɡIF|CP >va^zHhW*~ELTlY6CB)H
+i^AAYQVzAE%)޼N(uzr eU Phy{:vW6𵍘"p^Դ6kjWTo,&$/ 8ZCGP߄oPh.HĥL¸w s<1}z(<DOczRp!Z+ii-"OD̮4z<LO$="u&Ee!ϕɟ!3 ܱbv0<L+s?a*/6E
+yendstream
+endobj
+2044 0 obj <<
/Type /Page
-/Contents 1940 0 R
-/Resources 1938 0 R
+/Contents 2045 0 R
+/Resources 2043 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1919 0 R
+/Parent 2033 0 R
>> endobj
-1941 0 obj <<
-/D [1939 0 R /XYZ 85.039 781.388 null]
+2046 0 obj <<
+/D [2044 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2047 0 obj <<
+/D [2044 0 R /XYZ 85.039 667.088 null]
>> endobj
902 0 obj <<
-/D [1939 0 R /XYZ 85.039 761.463 null]
+/D [2044 0 R /XYZ 85.039 541.259 null]
>> endobj
-1942 0 obj <<
-/D [1939 0 R /XYZ 85.039 739.701 null]
+2048 0 obj <<
+/D [2044 0 R /XYZ 85.039 505.947 null]
>> endobj
906 0 obj <<
-/D [1939 0 R /XYZ 85.039 739.701 null]
+/D [2044 0 R /XYZ 85.039 505.947 null]
>> endobj
-1943 0 obj <<
-/D [1939 0 R /XYZ 85.039 716.383 null]
+2049 0 obj <<
+/D [2044 0 R /XYZ 85.039 469.08 null]
>> endobj
910 0 obj <<
-/D [1939 0 R /XYZ 85.039 592.928 null]
+/D [2044 0 R /XYZ 85.039 299 null]
>> endobj
-1944 0 obj <<
-/D [1939 0 R /XYZ 85.039 571.731 null]
+2050 0 obj <<
+/D [2044 0 R /XYZ 85.039 264.254 null]
>> endobj
-1938 0 obj <<
-/Font << /F60 1074 0 R /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
+2043 0 obj <<
+/Font << /F57 1075 0 R /F15 951 0 R /F20 937 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1947 0 obj <<
-/Length 1030
+2053 0 obj <<
+/Length 287
/Filter /FlateDecode
>>
stream
-xڅVnF+tl"b7.`.A
-"x =%*}?X>T kQ*.^B](:a%îX50TlȻzk@peT'3T$*zsFy˚-UӐ\<:Cj-։]CP,: âb 0ndr!UR65xbarJ%{[6NVг>dri$bD P~Hlvcb 0N 1ahOt=kodPaA ûw}-TK{WSa^7kZj[jAn{'|j:~%'?0TV}KLƉAժBoJYvĹxM8>##
+xڥQ;O0+<&;_B <RPH@BU'ZXhSieB}ai/~+ϱrh0+ak7 !`Ӧ@!8;9?0sFr9eU]Hv oj<A=
+ןq@<WEUkjNv ~!kI;A,gMx͍XR^j?EBJc!oȂlإ?_1u\0x]$ hUK~]ǹ%Ftendstream
endobj
-1946 0 obj <<
+2052 0 obj <<
/Type /Page
-/Contents 1947 0 R
-/Resources 1945 0 R
+/Contents 2053 0 R
+/Resources 2051 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1919 0 R
+/Parent 2033 0 R
>> endobj
-1948 0 obj <<
-/D [1946 0 R /XYZ 85.039 781.388 null]
+2054 0 obj <<
+/D [2052 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2051 0 obj <<
+/Font << /F57 1075 0 R /F36 955 0 R /F15 951 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+2057 0 obj <<
+/Length 1055
+/Filter /FlateDecode
+>>
+stream
+x}VKo6WHCԫ@/EZhIؒVM;QvpO8Ldy,MA'!61276u7JT6sDY\HccyULS+4W2ϓ`_}qFIğF02i*L |M,ܩ_פk,yz
+"mS----f{2fԟ[],ھk=Dse#y!$qJ IrH B9Dfl`>n) 0ҹ`foX--
+Iu.r u&"ȧ[p>t,cIa%NRՏc`;izo7g0Tyk*6ة1>Z/bƕx0IVKk%M;=_Ṃv[TMUmf3U\ xtvrXON+xybasS³rf"bsuۀƈ!9WXJ/bik'ǹ8fz۬K-qc|
+s#}e8;^9~ꉍ=⭻$4Z`rz˳\D O& )/eQ?;q!SnegҪV$v͢v{Û]9XiCFL̈ /TA/UJz|G=r(dB
+-Wa&![NIg`{znSe fD=# {\c,lT ]>7n #uz%e%0Fxtޯ<W0[nAƍeZ=<>骷ha3bnHJG/͹6kn?;~LU3{; " U\G^WIԙHA:7br$0d/­ Y;GK۸#1J|,؞fvnqc]E:q(wߎ-sîHQl0\=
+endobj
+2056 0 obj <<
+/Type /Page
+/Contents 2057 0 R
+/Resources 2055 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 2033 0 R
+>> endobj
+2058 0 obj <<
+/D [2056 0 R /XYZ 85.039 781.388 null]
>> endobj
914 0 obj <<
-/D [1946 0 R /XYZ 85.039 761.463 null]
+/D [2056 0 R /XYZ 85.039 761.463 null]
>> endobj
-1021 0 obj <<
-/D [1946 0 R /XYZ 85.039 667.044 null]
+1023 0 obj <<
+/D [2056 0 R /XYZ 85.039 653.495 null]
>> endobj
918 0 obj <<
-/D [1946 0 R /XYZ 85.039 667.044 null]
+/D [2056 0 R /XYZ 85.039 653.495 null]
>> endobj
-1949 0 obj <<
-/D [1946 0 R /XYZ 85.039 639.536 null]
+2059 0 obj <<
+/D [2056 0 R /XYZ 85.039 612.438 null]
>> endobj
922 0 obj <<
-/D [1946 0 R /XYZ 85.039 528.054 null]
+/D [2056 0 R /XYZ 85.039 487.406 null]
>> endobj
-1950 0 obj <<
-/D [1946 0 R /XYZ 85.039 499.318 null]
+2060 0 obj <<
+/D [2056 0 R /XYZ 85.039 445.121 null]
>> endobj
-1945 0 obj <<
+2055 0 obj <<
/Font << /F20 937 0 R /F15 951 0 R /F36 955 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-1953 0 obj <<
-/Length 3047
+2063 0 obj <<
+/Length 2974
/Filter /FlateDecode
>>
stream
-xڵZY~
-WtL!i- t.x:͜y$RxP6W<hLڄQgGEئG1h8ڄ^MlDY[Ga#q
-r&&ǒERQIA(pErښgz|䏒9<fwO]NfUϝ2?MQ6fڃe8<P~][UwC6ZB]D.uSzw^'^Eҁ ԈJev9(K kELÊ_n?)~2?M,W'0t%gZNcb$mӳ*tg&4-#4ɢM'SVH-؇p Kdf}<<byQq?ݰ2WĂ%dM(mc-m'G q?[fYz]T{f@2׋Ii]p?p?(Ƹ<'nS%Pַ?P27HУ`(Ͷ3c?C!d ۑ@ejdVP6`߲xS.er AF U) )Y|Jz<aaHz#CRl#|h&Sbn N>H#b_5ۤE7ĔwrB0 P+;XuFOpkmS0R~7
-,l "AB(:Y>PjQ4xSc1c*tcVB(Fe'-$SCdpq
-BDQkҌ
-g|m_hGP٢ [W G[RRN6f;$Wcm -3Ζˬx,F:86?M&2UoTK+OD}$_jʼnh>_d,Au^ Kh[K?81\$DLmƑP)j_r^Uf>rd~W:,vtGWT󡨗&W"Ƚ[ X`sg;RκW
-Ojux<Yj>;@7J^9^&^y80퇆BrH+ɨ9]7=qĩ"?0*nx\
-,/U7۳-_O
-38g*+γďE +A7ͨqJ."wXB.?yu•,L-߮ 
-MWaO3eYeU(PQ93S(>!+Ƞ+y2ycaxrBPVLDz=qG*J?R0):޺}Цm/ۢ?ORtpbw(QE)aj-kHہNx<K{ A |Lqrq.^VydB{ x_x|̱62dbz ,7!`ϱ%.b9I^V(#Nm(/Й]i̸m\~ݐ2NRNZ D/sg54y֭%l'԰}ۺ7{O_ڻv|ܯRQIg?cJ_4}A1}endstream
-endobj
-1952 0 obj <<
+xڕZ[۸~ϯXEIE`Ɩe!dHrfFdEXsᨧ< Br<:\>O%q$yμݥQ*>бB^>(| M0a$|ڱ_ocV۝N͡_9_^f, 17 q'pr V1qKٗ]>ϩ|ㇱnfAn"ߴXb.uuFfdR '&}Ϻ,CuKXeheˎ69L}zQf(.(&
+)?t
+,}ȎYK<ʒt(޲J+<^RkTOFq @كa.O73ThqLLsxzvy _! `+scXK~8)XB5;2ND`+>,JqKv*#z<۝&2u8}NW+?uMScݡڼW= #N32:U3FňNwUyAiD=pVWt4,乍 bLm؀$$p#hyqKGű#:3sd:Dq2 sT$i{ˎu~A 5.!L )E5)|,]Z[jTg8L][uC_m;a۷6L8u,MQɲvCKwAɛD6U(#QnVLr6ʂpϧ}9cTIP| k+$> /ezkԨN) Vw3]۱]0VD#|2
+F0W7.t%;KuPq!MO%}t )zxDC8(
+tKG4ԗ1yuU쏌c)(])Ff%1g('
+H\Лf熬
+CY~$ONQIs^$wK=FŹGLB=SMJ}WT +z`I,5H<9Xb0h_|pJ=i+hP1f
+5rQUb 5)Y;VU6m?A0h@{- ]>
+]`hAUٳ1>*B;4E3G*HC ͂32=~E"rZ~Y$y_8?o@,}%9"foT_Pޖc9D9{D`(gN aGbh3_ (E (|| mѺz}-ŕ&F :
+`.Y w3mOex}lkVS{2,ޏ J OaqhCۧPңN)(͕mp^02͏44 g/ 0Xj$=?> rݜzu9pِΑ~6Fl~Td馬]o)l",gN^e؇ߪ6Cw=w`YWNXlyڤ} ^⥱e%.ljh6`̽QƿyEWK' W7y7ؾq>lioJ  %̻c)Wf42џ%NBQendstream
+endobj
+2062 0 obj <<
/Type /Page
-/Contents 1953 0 R
-/Resources 1951 0 R
+/Contents 2063 0 R
+/Resources 2061 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 1957 0 R
-/Annots [ 1955 0 R 1956 0 R ]
+/Parent 2067 0 R
+/Annots [ 2065 0 R 2066 0 R ]
>> endobj
-1955 0 obj <<
+2065 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 252.502 213.733 264.192]
+/Rect [462.239 273.889 536.549 285.578]
/Subtype/Link/A<</Type/Action/S/URI/URI(https://bugzilla.samba.org/)>>
>> endobj
-1956 0 obj <<
+2066 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [313.424 225.404 447.309 237.093]
+/Rect [218.709 219.692 351.61 231.381]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:samba-technical@samba.org)>>
>> endobj
-1954 0 obj <<
-/D [1952 0 R /XYZ 85.039 781.388 null]
+2064 0 obj <<
+/D [2062 0 R /XYZ 85.039 781.388 null]
>> endobj
926 0 obj <<
-/D [1952 0 R /XYZ 85.039 761.463 null]
+/D [2062 0 R /XYZ 85.039 761.463 null]
>> endobj
-1022 0 obj <<
-/D [1952 0 R /XYZ 85.039 667.044 null]
+1024 0 obj <<
+/D [2062 0 R /XYZ 85.039 653.495 null]
>> endobj
-1951 0 obj <<
+2061 0 obj <<
/Font << /F20 937 0 R /F15 951 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
+2068 0 obj <<
+/Type /Encoding
+/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/exclamdown/equal/questiondown/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef]
+>> endobj
+1962 0 obj <<
+/Length1 1319
+/Length2 4957
+/Length3 532
+/Length 5759
+/Filter /FlateDecode
+>>
+stream
+xg8m F-F2-:{O0Øa(KtQG  DHF=}}g<ֽu{=Ƣ+k)^
+G!00$.b퀂(DH"$ `ʣ=p;{ CW(P C@ += Wj
+l(\/W"VNĭeL5eNf:3BH; (wU{l=
+
+Ð64o 
+Am+8w_ٿt@3>.?)"(8"`m D^ i
+ u A -Vh\2'neIr$W q $*W 9 k\$s}A8wA@~ \߄[M~ ¹ \wq8C ępq. Άⶉl@ ?Q`@ ~F?W^N yEps<$ SU
+8{EpOv|d5@a( TѪ9"m<ѓ
+Ms-f9LUصpH}ǹ0<l.-eMU{ dH8
+w$NHI dYݘ[1JAyQhzczjAay̜Ŝ;<dј3ʪYThѩwGJ`
+fK9p<KW{'P/Y.~MǞ{ӷ|M&m
+e<:/fS1Ksx?4T]\Z~Xk~5m޵%O(B/]M5u$EP'ʻW捊RgM8J{6=)n:P$3e?sP<Fd]5/ԗeI0wABjAvb%+e}Mec5COc- S[qA
+& @]&
+Ϸ嫰Ld}@Rgt(ڦ%t!x򨙃;$1˛^YV2̷,,=,'Md@jh$ e` vnC鯢Ki0{̃W<9W\M߰4YH457_ENؘ%Fo&íMNl*m6ikV̢1Q:Nb0a^7.97It_Pk=r|uMw
+Ox^^I/53O<F^*&yAw\1Xˇ*"9tze֫deuL+JoH|{ÒPN *U L|Z7Ke4@rx֊s|XP͆ocb͘
+z_")|x"ّ ;aҖ5[̾ M
+&#.
+#,’~I|&Y)1 ӆRQ̌1I\ÐDs( FiocX"\^؉!]V7Z.VĘZBPN""mxvxWvyOpn.2?L-ϳm2&bU⺰!Y뀤3B#+g=Х+<YѰۛwc0(5Z2kGV;椭)zR`dR91rV'W?ҍ cTTNv
+Cq35lE\?`!5 [InZ".kcf+׍k_tp󏔥T$=%as6('D*?18+~4emx#ꇚsii%޳JƒoYo\:}H+ś[&~ `>r' ko` it3`/YPntp2f˷{M(}|ēWH@ߜiWWW޺D i9uzf;B٩#E_L%NrTjE_@4)\cb f*K
+"y@ŦV8-+
+ӔWMoi{7Hͭ>,ƦS$
+ITm?r{:~zbA*67L OK3+Ze}̈́h>[ 6Suqb:^ Xm*԰=Z%dOp"Z;$KU*1&_;<ay`G_haa{0zwk}{AڅbuON8nymeMH$d 5tm([Ӧ~UFWP )`u6XxCą/_ußȁD޳;?}/
+R4d@?_O ܩ4eu#G{GA{Mn^[f Vyq24q,BznɪOMaW[ʐ-^Y\WD9@8fht)N k ݭԨqp<+2̽!K+_qS|ڭxe_ʰ2,QB];-b|!W?ƭӈ&/oQ86K9[Wož xjy<\&AÖċE^])|I3#Jݼ{ɫ32^ [͇C<ț<A7 4Sшr5 RJȐ.
+R-aH1Utjg{!
+L)nU۞@Vȋ,9ѝ5^ȳZ.A:xpY +\es$x%M<ɢ{1.?+x9dFQޘP_^h>bUN~r ٪T Uӕt
+ynjZE`TN~kVa|$^hL,t\uQ'&]"zskN"%-/xFZXA>fٞ\0MKݼoRr^5fvW
+48sۺ8٠qaesE27uݨVZ7zVGk)|?`SmklG_ѳb~`x
+endobj
+1963 0 obj <<
+/Type /Font
+/Subtype /Type1
+/Encoding 2068 0 R
+/FirstChar 12
+/LastChar 121
+/Widths 2069 0 R
+/BaseFont /CGUDUX+CMSS10
+/FontDescriptor 1961 0 R
+>> endobj
+1961 0 obj <<
+/Ascent 694
+/CapHeight 694
+/Descent -194
+/FontName /CGUDUX+CMSS10
+/ItalicAngle 0
+/StemV 78
+/XHeight 444
+/FontBBox [-61 -250 999 759]
+/Flags 4
+/CharSet (/fi/parenleft/parenright/period/B/D/E/I/L/M/O/P/R/S/T/U/V/a/b/c/d/e/f/g/h/i/k/l/m/n/o/p/r/s/t/u/w/y)
+/FontFile 1962 0 R
+>> endobj
+2069 0 obj
+[536 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 389 389 0 0 0 0 278 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 667 0 722 597 0 0 0 278 0 0 542 875 0 736 639 0 646 556 681 688 667 0 0 0 0 0 0 0 0 0 0 481 517 444 517 444 306 500 517 239 0 489 239 794 517 500 517 0 342 383 361 517 0 683 0 461 ]
+endobj
+2070 0 obj <<
+/Type /Encoding
+/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef]
+>> endobj
+1959 0 obj <<
+/Length1 808
+/Length2 1461
+/Length3 532
+/Length 2047
+/Filter /FlateDecode
+>>
+stream
+xR}<T0h%o5OS`ڮ1hKe38cF#)D%n$W֔JA-X^%InVhy_s9sgɰ`ዬ@h :H@ хS#|'@;;9
+P  0
+0b⳿4&h贅3m;]z2a'Zo"hBBX$WӜ, 9: 
+Xt{PDb@
+!hq0?$ ݉aYe:mdi}!NBI60Cjl54`F";L.ALҬS_iy3ZVW+<m'f7SQw ÊvM [$W
+`oZ̛MY^'zmOԳR:U!YJB7cIQ2(i+Z۩V;KLmw.~zTٴ*o/Dӎ焺؞8<$1Ȃ VWrUn1Yhusv|o)J/Jxm-Kuo}՚7+׉M4<=79\fIwu7Iks*W,ܯ&m$wMI&-Y!vp9Fro4kTd[û>}i zc_<VG}[WvzKxifV1N5ftVCew^`>8PCuzp
+t76u>О]7HG~y-ҙ;^m9qʼneUSNқ6_dr6A{NWyAvg,]+?忓W]0պ' o*uJ NOuT~]w ՞ъ1|`^8ĺIkƮ^:Oū%\F[hEK3د/U'
+y:EwP'&E*M>8j񱎡ȁ+a _3HzYَ^TJ]5Î0?Ӧ7g˷RnZVme)BKt&EkKz_{Qlܪg?7&tb({/5;;m~F#9O1Tsszb+|c[-٦]m}Ʒ\b}88>SF+) 5% j-FBKc*uv++Y}MƄK>^S Y+d(|Sx=}"܎pjz<5ܷ(ӫ>ugEҦP|䘂lF\&Y?9Qi
+Xjo3r18QpT6"sv*`");yR⚼1*o <ZQpxtfe|geOyu΁@YLUqt1,-/`R'"VY'#+_*>\ٯU!?B:أ &M|ٵTo3\Yra]F=xa]<Gڇ&U(jMT;߉“i]Fɀ[K|9E[Ҏ%4\̵s},VLeBŅBc
+ñ<wendstream
+endobj
+1960 0 obj <<
+/Type /Font
+/Subtype /Type1
+/Encoding 2070 0 R
+/FirstChar 78
+/LastChar 116
+/Widths 2071 0 R
+/BaseFont /DJSYEA+CMCSC10
+/FontDescriptor 1958 0 R
+>> endobj
1958 0 obj <<
+/Ascent 514
+/CapHeight 683
+/Descent 0
+/FontName /DJSYEA+CMCSC10
+/ItalicAngle 0
+/StemV 72
+/XHeight 431
+/FontBBox [14 -250 1077 750]
+/Flags 4
+/CharSet (/N/e/o/t)
+/FontFile 1959 0 R
+>> endobj
+2071 0 obj
+[814 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 558 0 0 0 0 0 0 0 0 0 636 0 0 0 0 591 ]
+endobj
+2072 0 obj <<
/Type /Encoding
/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/alpha/beta/gamma/delta/epsilon1/zeta/eta/theta/iota/kappa/lambda/mu/nu/xi/pi/rho/sigma/tau/upsilon/phi/chi/psi/omega/epsilon/theta1/pi1/rho1/sigma1/phi1/arrowlefttophalf/arrowleftbothalf/arrowrighttophalf/arrowrightbothalf/arrowhookleft/arrowhookright/triangleright/triangleleft/zerooldstyle/oneoldstyle/twooldstyle/threeoldstyle/fouroldstyle/fiveoldstyle/sixoldstyle/sevenoldstyle/eightoldstyle/nineoldstyle/period/comma/less/slash/greater/star/partialdiff/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/flat/natural/sharp/slurbelow/slurabove/lscript/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/dotlessi/dotlessj/weierstrass/vector/tie/psi 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/alpha/beta/gamma/delta/epsilon1/zeta/eta/theta/iota/kappa/lambda/mu/nu/xi/pi/rho/sigma/tau/upsilon/phi/chi/psi/tie 197/.notdef]
>> endobj
-1524 0 obj <<
+1550 0 obj <<
/Length1 777
/Length2 1024
/Length3 532
-/Length 1589
+/Length 1588
/Filter /FlateDecode
>>
stream
-xR[TWEY(R(!#+(DbܐLL Qli_A-@ւ<AԂhDDRH}u\3?w=+p;O~Nq\>
-
-r
-*08.| Y2I(`͚
-XOd$BX2@aL ߰Â WQEJQ,/
-!)(H $&u |΋ޚ@ 1TaqWuT*!R"  19Cyߤ {Apgvj'B28铘!Dr&W|qxp9!I
-ш6r#P l >`61A2&M`+^^rx8N\08.nU$!NMt*uo/:Yy3XGjj_]%k@FYFQwgjpN&{g6Jz;ۑ{kg|rrlx?zK7bWȈV
-f | ~YG,fe͝ TmƼOG7xpGXBG0O0($)B*$K?Zendstream
+xRiTWErQ
+r
+ 1`
+(d nO}ZSvjKvu}č=AA<zTh4HmnmТuh_1HVes<{=ݕe/~A\æ;gV޼QZBzݽ@#Zy>~DSj;n땸*3%Cy]mgБqXfxoM#]wÆY( ƨ:^7!)[15mt]dž8g4S+SĜw:Ƣ>=wpۮ5_,[9ͫR,<{`呋 tb%_5¼~rvLo-QgRvd*h_&ÖiZ 'd21ł_{1C%:fw(=2KGu_޿8’'>5Z?yҥ¤s'Lwn|\$m؈ q+*w}dknYxK6rnaz:m)3
+ʝYf=?$1ۮ9g5-d.Y{lڔH47 U|~1Hဍj<齌U=/UGMXZoꖄ R%xތZ;'~a_(kHE:Ymh V< 3̔ou7f
+>YS=ip{u^.RAW9#qa3:i[c޻={HW楏4<[N{=fj)mz3AqATr҄rRs3>ECWB433bJmy3*5mt<:ߗ8N5hC/)r[؏=0fNyГe-6J~i̥'~ݞ/3KFgo=v&1tOlxQgߨܙBUw8;'3']~sܷv4yH>f$t/ucR}jZ0ɝ?%tgÇB@AInZendstream
endobj
-1525 0 obj <<
+1551 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 1958 0 R
+/Encoding 2072 0 R
/FirstChar 62
/LastChar 62
-/Widths 1959 0 R
-/BaseFont /TNXAOT+CMMIB10
-/FontDescriptor 1523 0 R
+/Widths 2073 0 R
+/BaseFont /ZIYGEL+CMMIB10
+/FontDescriptor 1549 0 R
>> endobj
-1523 0 obj <<
+1549 0 obj <<
/Ascent 694
/CapHeight 686
/Descent -194
-/FontName /TNXAOT+CMMIB10
+/FontName /ZIYGEL+CMMIB10
/ItalicAngle -14
/StemV 113
/XHeight 444
/FontBBox [-15 -250 1216 750]
/Flags 4
/CharSet (/greater)
-/FontFile 1524 0 R
+/FontFile 1550 0 R
>> endobj
-1959 0 obj
+2073 0 obj
[894 ]
endobj
-1960 0 obj <<
-/Type /Encoding
-/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/exclamdown/equal/questiondown/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef]
+1547 0 obj <<
+/Length1 1373
+/Length2 7756
+/Length3 532
+/Length 8610
+/Filter /FlateDecode
+>>
+stream
+xU\\!8mwBNC7[,ܝw 0s̽3OjUVMG&@vl@N!6'!NG'9[B$A!
+L&
+P0?] '4 KS1;s_&K'iKwX`qe؁Sq `WPQf3kQdiaw1? 뎣;@^N#$3-\|
+5Jj.ʛ,Eb7oQi oS8,Z}WkiSxʘCL㎫Ng3yǶ=u!vk/HIN~_ƏeFI]oTpzui|ҩ6!A5T8%<!+n8q+>V!M,g6<OFpN$1I_{7 ofg5ԏ+&]g%-|ORGq)2TF*2Yx5y;8BVtEmGB
+|?&bT*MTZ&47-Yuo^}7<e)
+"FV쌮)5`cO9Qp[ Z,4C|َU.gDN0z"cK26@hh- -(uݎп$cߍV/** Z9%]#GQ3s&_OVnWZ兄dCTChY`$9#2Dְ :A\S m OE:
+,
+cGqX׈8mjZz <_ <H/`M]iW+rO,Jޙ ^bZ< MId0Ḹ&~9\8Д
+ M*][k+oto s!%o ['ILk|hLBEKe1vIǏXBp B8\w5_*Zw@(A8WՓ^f51t'!Y2wԱbe+&^bmN=NwGުD}w*8X
+ s131?^ڶd[}V$}~1zBmJ4װs.nbPV=]K3d[QO'1dQV.z5g'3I 1+}(0;dN f>,}6$L`->_y9 [yŮ1릘> gd^" HH:U||L!F`pqγ'`ŘtjږԩBv
+gi-[)^XG3ST`@
+ܛQ#"g\u~jLv0u *b4՛&<q!5c}0JqIPkvj67/g4;KIkzAp裃aڼ?+hm[>G-N>UQQX'Iҕ!4x+9ws,شbu5ʲZ#ϱה D8of93!-1si}N"̩ΌהOԁ?X(WrP#dowQpTl$^WvE+[K7
+jFL6-PvtXN]iCwY+o`~jw).=$^ե?9+qURCW&dnei3sI<TRʌCP|~鏽W'JYp\1\6 \CM#MН7{ 8
+FI֔뎏S_ŗUki͚"{7x ]}Q+
+Qdɻ<4oK탏gVK! xelJ vͷ;߉LqBO>/Y۔L nx7̟r
+{,&L}T ԛSnݗ/1
+ˉ;| ,o+T$*ctgW@D߻hpd]G!^]ݭM3(=eC3=0Ȭ]]
+PtbU(GbMġFpI.PR*u ֚uI+ϑqw>T2EoU zǎI{d7l
+{ Y:p>}kHG
+I64sgCZ3l) W+:804*2?eWrV=tJŃ(F(u˛Fs]dOM3`!EΪv;/HƲA)FY]ںW' <>) _'T&T2G)xy(u4`y+#EfW}hy5O6{'V"Zα%SCrp=$>E\dTt-Qܽq܋pma@hو,iZD8KXRob Z78ō+\\z>RCJF'eʅ B^щZhޔ4߈.
+ܣ_A_w{+FwKJȻ|*h9{/з3(/
+yڧ$WmU \dǥ\$/.F]8ϤӱM^<.ܜe&2Jv8$bU M=%u@4R.۠CpkIbQh *tl{i3SP8hJn #@Sl E\>Qe5a4W72V_kSEp9rJi W\4~%(Q Xk~ Ž^'ٽ1UjγfG
+*;(=IoH'0/@YNBLdzjqE-<M lGF?) e8.Wʁݿ$Q=689Nvк;L|(0W(RDptۖeLڙ7U&<K̑ی  pSOR`:k׭PLZh<oO^ݨFcLsS/PVkΰ-Gh}kn Yǎ:| huNNIQO3Լ[]88Ǔ[
+50`H@QW*W|vkBZ", [=#)PL{E!dGwr1tz?5h/R:0懲U[5
+y cx(M [[.Kwk:wў93M㾍_Ǹ &+FhxJxj Ѥ;hTI#||exx s! 6ar
+Eg3B!AX{jE}Tu#!;ڰ'8 q2,fHǹ5y'j:$8CH'W pi0kjV$W؍ȵ$hUXd}ب~$
+et_3,]T2tb5.Ԅphd`:3s݈_<^TUt1Ǫ:F..g|-ʱ1UڡqeD'8\8S)iA%,~nF"I~~"iIO w3FYU8џc;o+]wIB.cɃ]-Xd`B#┪D|q6(Xi4ha Dx'_@Ml& ZTIxnAKg@s0fq8_ț
+J0A<;۵_UҔ³X-}A lkx'gW~  xGuoAþȼ׻.Le>xĖ(ͩhVo7Z I DL7밍`6k$%6:kmqeHư
+fYUcԩ}\>s,+gᴒUj&/@('?enOBm4EK 1|K¨ k[
+E<o}WVU:Uيu7jG*p0OEfF MTR='<~a:PmY?P1յ3l 5=X~l9k+ϔiOY5b½"m'?/[~a{^XjQ˂-s?**= W{9?Dw,K+t9in˭dRmKPS2, /38-vbE*xGN.Ұ&"
+fHF~k垲р!LG?ᅤ ']6?W9]Ȍ-s&7EcqĜśnd3<AtǀkTuD? {c$a+˰Exey*OJ*~&fQP l_؇cuI@Зb3~93"Zas_82$03:\.RPP]6_fPx3*4άYoəOsa'1KVji)UH!;# 8[ZZ$%qERL6@{@\a82Vdh|1PPwhv`-5|׻O_䋹Qiz5$ߚY@^u0SVaY~LH#WTTԇ*,Vb[;cտvRI|hDy8o6$06?F
+&8"ZG)G4=M  xIAC\$XUMkܕcm~AGW\텬l-
+i62bJGA^ IeBDV93R'głԵf>*]pdzH %8&=Q
+7M70Fl䯥I
+ՙgۚ.^Y'W40KMv|Hvf;ֈH gT hzׯkwnSH0t_(t䣃}䧅 d߲h(>(#-
+;
+ut*Ӓ|9@C`j9:CmA 0
+endobj
+1548 0 obj <<
+/Type /Font
+/Subtype /Type1
+/Encoding 2068 0 R
+/FirstChar 38
+/LastChar 121
+/Widths 2074 0 R
+/BaseFont /BZBMQP+CMBX10
+/FontDescriptor 1546 0 R
>> endobj
-1073 0 obj <<
+1546 0 obj <<
+/Ascent 694
+/CapHeight 686
+/Descent -194
+/FontName /BZBMQP+CMBX10
+/ItalicAngle 0
+/StemV 114
+/XHeight 444
+/FontBBox [-301 -250 1164 946]
+/Flags 4
+/CharSet (/ampersand/hyphen/period/slash/zero/one/two/three/five/six/seven/eight/semicolon/equal/D/I/P/a/b/c/d/e/f/h/i/j/k/l/m/n/o/p/r/s/t/u/v/w/y)
+/FontFile 1547 0 R
+>> endobj
+2074 0 obj
+[894 0 0 0 0 0 0 383 319 575 575 575 575 575 0 575 575 575 575 0 0 319 0 894 0 0 0 0 0 0 882 0 0 0 0 436 0 0 0 0 0 0 786 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 559 639 511 639 527 351 0 639 319 351 607 319 958 639 575 639 0 474 454 447 639 607 831 0 607 ]
+endobj
+1074 0 obj <<
/Length1 1348
/Length2 8057
/Length3 532
@@ -7645,64 +8468,64 @@ endobj
/Filter /FlateDecode
>>
stream
-xe\[ݶq V@
--SJR\Jq-mR}ٛ}xY_c<k1+qs)Xj)| r
-8r$go#lϔ 4|4DZ4ۺ
-J
-l}'M puw0P7s>0G0Pq" ?b ^ f@x@9 vC:`‘Kx-0_a5GH
-j!VぐTz !uExh;'r`9 Y_oGUyB''k jCrRȑ9``{_ 5'[@ v榡fBA֟jB
-}sF0YhA-U!e!IX:q05=Rs UqO5Y25}]}Cތv"9_l +.-
-ۜ|T{3ӷ>6Csx 
-I`ͭWe9й^
-Sһ9qE@d{) .bmنnN;~q3inr]SawKK!+ݒ8 Ȫ'74G'/Pj>7Eps{ި!ja>Zjǥ'XR|}*aI\BLTnCA9ѻ_Jd)?HYQ`(:I}fh%3_v\e{QZ~zE:멁 {{)l>EOh;"gG+Ê@7=!O--6}J^iO},awsX8~]/Jۘ&s%Q5,U{).JkCILC/=5A
-/]%%K.?ry{2V;3}o^AY_1%jh.T=Vf4
-9_Hp_ЂwrEaZQQgM}}/6E/p5H}_dbx $OsL[`]w2Ya8:o^= S@ C Md= ט_t#@kͫy7z?A}>ѩ?4>Q8J˨S<Ӆ1ldUs^~*͈`AToZҁ` _) >0I5"d,go Ƭh0iigd6; i#~He-xu1B'oQDT}-rN9J@;rZXU.3r
-[`
-ȰSN3DOPzuF$牅t'cHINN;@ut)>ex jE?X:YU|=x?-
-<=vQɺ$^Hx( ^z$u*V^OBM JPxL@;ѻ RE0!iE0!7WE揶O
-šR)ɷ$=ǔ}!w+u$֞1/5%*XqjsPհỘa0:A
-+'\K;#o
-t3Q Kqn6WZͰYʎ p,^ܘR(؃#`ۃ}+$>u>H>i]
-1yCT.^ӮŤ9IK\VG/kUa/Pk=Բ\;u>i-m3!:jӷ[EE^Ͷړ? ł(w.zi8l2If)M1Mu1_rVicg(UK)Y}s'oT-eu)V~>Ybts@z~~&'H?[ x<S3}<ʌ7(֜wwӳoSc`F02ͥvUp;BG!;KYzN-yu؁Qڢ?~2)U˱ax;}M+ݘޅFf_5`ΏC7ƿWAO^=z&Rc/r |]mVO)|_Qw'&jEp@stJ--Z)ѢB9fk >F( =^:
- ~55dS.'ˬv2d>2`~AʿvQkᑺcm'Zw2F#p~b&U29PV+Ʒ+;+AwOsN^U,?-><_y~+r!l^̓(%CxQU.6fmVΛ(Xl+1I.QX5$JL/c 0^ b3 /T Wc9HR^rl3ii"(1қ(s~wy]YuReVbWlfL7ա.c'gx7WpDTʾ<yΜ|^/*#uǐxM|Sو>@Od@Y<˭ͱC½u)qk/e)"= `'1km1 S*KԆ@O,L]\<=uC
-kwy\
- w}B|ìuaAkkpճy ۸pO1e.. 869?|gH'V @0?Y6"/%S(RyGH)ٓ-w)؇7ƛ R*z^ѠQ+o::Y>#ޜwǏcqbAU!  ?s ec~o7>XZr!MTĸ#͈7?=Dmw?.ݢנzof%ƞT?J"Aq &lC8 ‹n7iA3Cz?"D_mZ,* ~:Coz˻qgzR2ݣRh0=&p $ڢ%ueb / ś=^P̵ͪ[>ջl=8- `x^ɖͧpE
-ؒy2TNky9h.QE޷,U(A"Cu\O2VtN"}t`Z1̶M9?XMrh<CW*| $UCJ禢`}E.,lz
-Y]Xx|?=,äp fkfI"{Q$v3h*_ly.3SjO/<E:m4?;?Q|ޞGqIئL]pZTwS<lϘ)gxrS5ǯB$?B}^ƪ ɔ_= '\Z`ƭV7Ƴ 3G>X'jOB[BdZsuRҾD}y_l'HӨR ϧ;Q]NlN OZ+d&JTN)CMFH1U:Ԝ{@U*=|d i;2;tqzNV+Y:fszNsO6<xޯN
-ea)E$ʷczM|I!Vx\ 4 DR30XAF仟86/&w}:91bp 3M djߟ0&GLTTm),8Au
-p'NSpNUuvIVH w"}YxGSmoy@(ߔ][G?i4Mje:2BJ< ׶(
-#fhaJ- .N!}{o1h9xf-
- CV^{'bUyE%oow[yHNx7"Y{KY1^~V.ywWIT{"TA1*c7/(T^Q3dRJ>7ѻSl*xߑ9Y_?j:)'.eє)a[0Tb)sBJ+F򇘬)*EzώwЁwiCf(`A~TLW)ė1S/WƟ)Q'{gdXv_JTQzF8F{Q++%۹!ɞ
-T =Z;30V䅞<5ň͔ w$ *?`G~_xMq()$Sh[صx|0UFjt5O!<X$-W1\@NOy0Ѵ%ӽ``dMylKJZUtA97hΒG,r'/(渳>qOiqy׽dTa\խ"o"3r9YCH.Q-]2ݏgD2Wu"ͻM: 9"o\u91GS/1UӢ(h2ti2+{OVh}~}Fnf5DKA+1!kDBlm])/4mi
-?ԠaW>_8eunvY pZC\ 5‡ى><qKl%(yA\tijKD2r(r}/}".! %U<F9%%N %H# XUC0{;I =bokaϧ=UUz㤗ļxILpNypm_ 0_d࣓>NG>Jut c$<;op.Q[OuI{k0ں(X1hi`,(ut;:hĂidQo_&|}q$. GP9ypy~t%e{mo^ s5ӢLト KKrÒ!,U8]Aޟ޵8e pcC4I0{&ź_Km,5[ИRv'<dŮv[Bp1*cb& BbĎ5?^32
+xe\[ݶq V@(Z[`ݡXK(.ť/Nwg~%1Ɯϳs1>SV{-f5KC988@@6Q6C&p
+hab;7O#m]QBRV^O爐 
+//E~ wB} iB)<R!/C)?RA
+j!VぐTz !uEbh;r` Y_oGUyD /7jCrȑx9``{_ 5'[@ v榡fA֟jB
+}rF0hA-UAeAIX:q05=Rvs U1O5Y25}]}Cތv"9_+.-
+T{3ӷ>6Csx
+I`ͭWe9й^
+Sһ9qEd{) .bmنnN;~a3qnr]SawKK!+ݒ8qȪ'74OhM_*|r'oU-B"-S}$ZyKOfuڥ~\,UÒ/8݆D`sdϣwM#<S|t(ţC.o5P\!A7u:Vr-J#RG~-=jgsOu*SJ?N6|U<S'|$ 닞b)-wE&ώVozCZZlҺ7v(Y4'~U?q:^N1_́MK48kCYWOLw+ޕ4&)a=+.^zj6==
+nv[}[{mbfr)P՞LuH ʩXUϧJrXf2.rK3X9Nuq[-}Aߟ21ʬ rSĽsS~'y'
+N7Z+PISB:Zղ \#
+b%?gy#44@ɴۉ'
+*ǗNJ*'esrXnZ%^φh9-e) f52UdUG=W Q+Wm͟U>'.aLg8*>:`k. GLd=DSiUR 9%}Xy;Pܾ|$vN"͢1%()snQ<5ґ74< ,8 @1=Ųҗ竊]3;]id+W,A uKu:?0UӞUKB(c-QգlP>:e9d}t42$#BrG^Q9I
+cO$.:b)g.e37P_NKxK܇]| ;d#v&d=*p/K#c7)KЊ]{fU5h 
+QȾJGV9l+IJk\WZkccU\ЦuLbw:r3'FݜSvKGy;sF<GW{6AS+uӑafD; 0p8 k#NNƐzŝ.Tgw>2 jYSl("I!=z~yu*)z~$k yzkuA Zm~P*955*:]}G \UXŽ~5,@evwA T!/CRЏӧ`BH{o\@mǛt5e1֥<94)o{Iz)C&V^I,= $Ds_=kJT(fQ"ЫaQ/[#'w1a!pCweqܩ'f1p,VNwF4el*v=m)1#X8aAX419P҃QG(:_W6o}|-|nHc*r^A]+ɳIs"8(
+v^֪^őPk= Բ\;u>i-u93!:jS٭7¯gdI@bm; T4ewN@g׈
+~55dS.'ˬv2?c~AʿvQkᑺcm'Rw2F#p~bR?* ~(ەI96fO/RȆe}uo:,k`[2Ed@>
+JljykIs&&%D}f&ի&|Y]tFjj`9;I+m:Mx8M4%Fj37eqp6R24NR1̵"`1|Jʒ
+R7w#/֙Rd2Rw G4:U9 |DTeɳ\;$\˛P'ڞfR6ѝ!kЃ
+LT,bdxr| ݝ z\FVH| {]䧂+iy _&p /k߾ yND
+}Qh&T@.<9PGQ;C,F̒ǝJZOlvzK5ߠb'J6{4jԕȿ\6Pkzd%hV}$R1f!xőHtm8O%o?-o{.JVhvƖ̻ijOujW8^܍^̓D=4(Fs*/Ld=Y%J$9ĎM_$cE$RG骅Cd۴,'Gc`1)TX.M6x6\/jHTtr[~Q ȅ9[џ-_OA+ ǓET}[R:3q!ls}I@{/3jnF \{-o=}f}_e Oxu;2pӋZ#FSC?y*omVhUK5q7+8svg-7|*8G#W1n_!
+YLZU߃
+X)5 {a<*<cgG0ᓢ2Ж>/>gBξK/\iT^ӝ
++~.P':nbdKuuɇ&P#$y+f_iνBdӪRHa~>2etnd
+YO./NH_Z3gBU1(./*\څxwZ9}󰔢1=Un&nx?d{䠗H"}MMseF仟8:/*w}:1bp sMq7djߟ0&GLTTm),r;Au
+ߡ5@n
+bD 0+͊ד1ldel rDXf%22^
+[͜Bbew*
+A.!'U_sn^l'
+wb1۾ꬄURD4VƘXSHe#\Xqν)'xGz5^T{aiM!j&vY\6dʡNybR~2{4&ji?PR5BaYqOQaI'Mu`j% wEǼm@Q;kB3(-X9@/#7|f^G\N#eCERb@1WR\UV'oK#.!A/HMV^LCYRy)e? AH0HKQKo[|!.[.O6y_L[JϛtkĚ/!Xu6-Oo#Q=@^
+xiUI bį9-k73vǔ Դ_zh{ Kʨ p~^+d/ Y yVwW';y`L2slE 3cF)Fwm]PkVe='DҢTrǚ/n0t_P gI2J,.}:n~w!@Tt#sų,u!@PtRN])Sܶ`pG)'_'[}R焤VK1Y7S8TNۋ<;AVޭ 3ݣuHi#2Q2]}b
endobj
-1074 0 obj <<
+1075 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 1960 0 R
+/Encoding 2068 0 R
/FirstChar 36
/LastChar 116
-/Widths 1961 0 R
-/BaseFont /CRYLOL+CMSL10
-/FontDescriptor 1072 0 R
+/Widths 2075 0 R
+/BaseFont /NCDHKH+CMSL10
+/FontDescriptor 1073 0 R
>> endobj
-1072 0 obj <<
+1073 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /CRYLOL+CMSL10
+/FontName /NCDHKH+CMSL10
/ItalicAngle -9
/StemV 79
/XHeight 431
/FontBBox [-62 -250 1123 750]
/Flags 4
/CharSet (/dollar/quoteright/period/zero/one/two/three/four/five/six/seven/eight/A/B/C/D/E/F/G/H/I/L/M/N/O/P/R/S/T/U/V/W/X/Y/e/n/o/s/t)
-/FontFile 1073 0 R
+/FontFile 1074 0 R
>> endobj
-1961 0 obj
+2075 0 obj
[500 0 0 278 0 0 0 0 0 0 278 0 500 500 500 500 500 500 500 500 500 0 0 0 0 0 0 0 0 750 708 722 764 681 653 785 750 361 0 0 625 917 750 778 681 0 736 556 722 750 750 1028 750 750 0 0 0 0 0 0 0 0 0 0 0 444 0 0 0 0 0 0 0 0 556 500 0 0 0 394 389 ]
endobj
-975 0 obj <<
+973 0 obj <<
/Length1 793
/Length2 1151
/Length3 532
@@ -7710,389 +8533,288 @@ endobj
/Filter /FlateDecode
>>
stream
-xRiTS2j=,)09`(,rͽxDPe]2RaUJ-
--DZEx!U".XWW~swNQnb
-p9Z(X;u#3a" X4.@44I0oaH.(2- (Z
-;Ń(.SMvoy
-A0pU !fR0U3R"r1YG2 E \ 24a oZ;>2<4^N'#dFFk3`=s)D9,K<Y &!K<LK@
-,-
-7b5BMGw^ʎp%ֱ<yBlpyEaȮYXbu'?Q] ︝%tDtb!eNi9wn񊬨dŞ yiRrOL,Ɩ=;/*|aR,\jèA[j H٭/p5ݝ׉V:|M-?
-n[ aG
-^7ivz ?\( GaA*N7ɒendstream
+xRkPSLyj F4O !DESsN)9x8D|PIU"6:TZbZiXTN罿ܽoo/[!p #ARͦhA8,' poB\/ y^BBAXGRTO@qD!GTN` YC!W@`B"0CL
+ DAp
+RX$70M{ʀtRIHCz
+kFvI- YShUrDIk/I0Tj FfjVBՈBa,cDCP\O0
+MUB7( k'r%"i0`͞9ǤI8l&!~{JL*0AS
+p|ke&`)ֿ1\Nn$/8,F52hz/j ׵mV9up8i {hk^Xc{6R( nVǧxW?3U_%Da=vˍF Vp=Ƒ-\=foهҵ_7w'uVG}lM
+ I>yRM`ƐE3n}g;"jBlo|l1?G{/ȱ</u'~R6k>5'Ybޛz:zFH0kQACMY'x!t)r#¡0yE2 8܂1Cx )9Xeصl_Gu iOs^o9-ݣ"g:jbZL= 2VyXӠ
+M r(O񰸚J4vhV@n
+!*[,9^j5ŮOMvB#֎:_.hT)}/ۓ<Wul,P bxl9s $7֪mלEk8c:#y6fR7ŵ}a%Gv\̌z?|#ڵD\:.vͺ4WԠh3PQdQ:/SJڼbHZ[|vAUVQwlђ Yk2φzf}뾰PE@I' URò|mȢ1gLT=}ʊ$C;D7[vj:ՍU%ֽp߮6ކ1ūK]'rCWfBf,~UOSk
endobj
-976 0 obj <<
+974 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 1958 0 R
+/Encoding 2072 0 R
/FirstChar 60
/LastChar 62
-/Widths 1962 0 R
-/BaseFont /XQNJXM+CMMI10
-/FontDescriptor 974 0 R
+/Widths 2076 0 R
+/BaseFont /BMYDCW+CMMI10
+/FontDescriptor 972 0 R
>> endobj
-974 0 obj <<
+972 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /XQNJXM+CMMI10
+/FontName /BMYDCW+CMMI10
/ItalicAngle -14
/StemV 72
/XHeight 431
/FontBBox [-32 -250 1048 750]
/Flags 4
/CharSet (/less/greater)
-/FontFile 975 0 R
+/FontFile 973 0 R
>> endobj
-1962 0 obj
+2076 0 obj
[778 0 778 ]
endobj
-1963 0 obj <<
+2077 0 obj <<
/Type /Encoding
/Differences [ 0 /minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/arrowright/arrowup/arrowdown/arrowboth/arrownortheast/arrowsoutheast/similarequal/arrowdblleft/arrowdblright/arrowdblup/arrowdbldown/arrowdblboth/arrownorthwest/arrowsouthwest/proportional/prime/infinity/element/owner/triangle/triangleinv/negationslash/mapsto/universal/existential/logicalnot/emptyset/Rfractur/Ifractur/latticetop/perpendicular/aleph/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/union/intersection/unionmulti/logicaland/logicalor/turnstileleft/turnstileright/floorleft/floorright/ceilingleft/ceilingright/braceleft/braceright/angbracketleft/angbracketright/bar/bardbl/arrowbothv/arrowdblbothv/backslash/wreathproduct/radical/coproduct/nabla/integral/unionsq/intersectionsq/subsetsqequal/supersetsqequal/section/dagger/daggerdbl/paragraph/club/diamond/heart/spade/arrowleft 129/.notdef 161/minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus 171/.notdef 173/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/spade 197/.notdef]
>> endobj
-968 0 obj <<
-/Length1 795
-/Length2 667
+966 0 obj <<
+/Length1 842
+/Length2 1048
/Length3 532
-/Length 1237
+/Length 1656
/Filter /FlateDecode
>>
stream
-xSU uLOJu+53Rp 44P03RUu.JM,sI,IR04Tp,MW04U002225RUp/,L(Qp)2WpM-LNSM,HZRQZZTeh\ǥrg^Z9D8
-@'T*qJB7ܭ4'/1d<80s3s**s JKR|SRЕB盚Y.Y옗khg`l
-,vˬHM ,IPHK)N楠;|`9iC,WRY`P "P*ʬP6300*B+2׼̼t#S3ĢJ.`
-L 2RR+R+./jQ
-*[mF%s_-j(ls~gغ|K~#ﵾӷ&g]p_!GrnM`v^Dl>Z`,&7{طeY/-pp3LXc:s٧Oy1#u,U)MPPQSiމ_]7`tlx~FqFI8>
-vMO7J]8f풻v_ք7xht*̀B5j0 9'5$?7(
+xRkXgf5BeY$* #1IHfp2
+&QI!O .
+|{M Uʮiu^/l+۸Nrkѷz@iie93(*d^N??rR'ZN-~|9=ٶ<VbSC̣
endobj
-969 0 obj <<
+967 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 1963 0 R
+/Encoding 2077 0 R
/FirstChar 15
/LastChar 110
-/Widths 1964 0 R
-/BaseFont /PUFCFN+CMSY10
-/FontDescriptor 967 0 R
+/Widths 2078 0 R
+/BaseFont /BVEMNB+CMSY10
+/FontDescriptor 965 0 R
>> endobj
-967 0 obj <<
+965 0 obj <<
/Ascent 750
/CapHeight 683
/Descent -194
-/FontName /PUFCFN+CMSY10
+/FontName /BVEMNB+CMSY10
/ItalicAngle -14
/StemV 85
/XHeight 431
/FontBBox [-29 -960 1116 775]
/Flags 4
-/CharSet (/bullet/backslash)
-/FontFile 968 0 R
+/CharSet (/bullet/braceleft/braceright/backslash)
+/FontFile 966 0 R
>> endobj
-1964 0 obj
-[500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 500 ]
+2078 0 obj
+[500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 500 500 0 0 0 0 0 0 500 ]
endobj
-964 0 obj <<
-/Length1 1430
-/Length2 8484
-/Length3 532
-/Length 9360
-/Filter /FlateDecode
->>
-stream
-xeX[֨wbNq)w{Ipw.Ŋ;8šHqw-}{{&1cΕ'V`7d'6.v.!.'SNtC!R@'KP@d}xy8
-
-9ml
-en 3U%h;q ph+(Ϟ=
-C4)Waq
-¬@0 ?4\@o|oKB k+ؑ3 `{gqrv77a:2E
-Y4HL!2KX4ŪuN}F)Rg^ս+OAܡr} shR9MyqyB{mGs8}q pi^a_I~*.5\K}WFLVhp-=7:N}iO+Nb@PfSh3]Jn£1ܭ)҇/¾;c.x vlfV46)s|"_cytsm2|ZOy)<XN&2 {=};8LVrf6
-*I^8^@T1P`Rև:S?m|Ui}{@lE`CFVwQ^|DcYG+{;<s~;*co4zs p9IuW1~p᱀djqbvq_#CWEvFV6acL:Rt] ^tz?'u:C^Z
-ck"6@hp55]3B<IWNZpTLO|<95*Fb(F>z
-}H3F$!mmA4@/7seJ',_zG{~u\?%i18cڽw穴~4FfgTmkJF{|RWhDaHz:WkP)+׏GL8.=\Rs?*=%/xG}s+ƶ=V2
-8y5JwC9mA‘z썚zuzb/kzd(3wk&V<;|gvеj [㈕'btc+V %x,3ʊX+vj$jSTmL]9Sy5U̹8ʾ9T_}f)/:2j=TK ' qDf6w/H#jgҩ¼ߟN@LSp=U|nVLwRU/'Un%n]vr:
-V$֝ (-ϸF~m~=ϷmᵳAa5r1)IioT5\=bGW~5Dj,6%I剬z<!|9+8=Mf.$1VKַȴ~x<2zDq@_dDV% 8+zQr]ל8n_i&Gg%xR?α`?Rr&Q8ӝMϩR2BŘxb!fK|Xi`;`C>=gb^hgg
-h&o1}P.;G[&[읫Œ/r?V!Qf{_Ҳ~*PfJEdg!!<rcMF
- \xD]bk.R +J¥8v#~1*K)l
-ek #.ѯsjE
-|qJ1?0B~k_5J)<Y
-R!+/ cJ^};BHퟹ7pP*y!QG9kXךvaڨ Ӈ0 |E"zCh] Jv4B CҨ$ߥnC&1V!+3{)Zt# ğ-2F,Y&J_Z gq%DqQ6ާJvܨrAB_ 4WlȍP|';G:}+q=6l>C@՗fn ֙"ތ:Ţ;Wf* ZSkSeQn=)=@i?\'z)ٳ8KxoU^7q
- HhCWK;I Z.5Mӟ3)\iMB y p.4tjJnsnDP]gDW}w 807UA~>juՠ UM _* a6I&ܵXbl\1&\s7ťnS̢E^vƪWl9fS )~B^$t@bj}hו^-J*KnL T,w6Ϥ7{G<~#7 OuQ|AML14pKx#J`b!zeQe.Li8_)8+<pNL[$v*lTXDӐ%$2ܞѓ&VVB3EU璠a0G>d996y3 b{eՎi )6^" t:ǎފO
-%~&muCcCވ]1,B e'}1wD~@b
-e'h'*B|}òGŅ^"_rq'iaz>Kژc|FM-/-;*9}=o19cb-/*uXAFg]w鈻 ES4W!P^MS37%)в63_ѕUOPxsۯݗOFR9>v KdVl^.+YRJΑX 7@29%?"Bs1ϣY=՛("n3面dz1Kò戳 &Q>~h-Ɵ:ԛ#xec! =p_*Z/PSx=.z\7:;
-Qh+:lkx7ѯ&EEEԿ1
-dflk!mb,8P[}ܶ$6JUd }x~o{q bvoS)hm֬{O0
-vVEhN$eGC{TxW} O$i!zdUx7HS -M3Lvg#p4dAA953$ɪ9ʚpV`D~Y"a{ekU6~ Kn$Ska5p}g5|$ďxorxTV^ilF=Z*bQ]ј^s
-*i"/k +'\F} G*0k
-+t'FyzkI_)L)/sEu,B)]@^b9[VGUAnQڕNV 6}7Q-jS-<_
-˫A!iTEU,sFD_]f b%vxoLj{jKK{ςy|, _&pzv^qyT>X(Hy55=:+q6~Ea> G0V.[n|{U+{ޣM(P^,čZ
- ׂ݀aqV{Zx!5RM ٵ܏mReSi{J)o,dI4 Y/վp?XXQn)QqUWpRU^} =h
-]&2}2UZAuᴯFl))L[L֠=ܙjqRKnPRQTjZtt9!Д;UDbG!0?~GZKU_V0;U$1@ u@;T1h¶?}Z}8:x+2L[ $~,vOh:*aX{-IB)Xm !9y#"\O3'I =YU_}+' G>\[|ٻL&IJpvOڲ2x-y\o^"4Oq&Q4+P!z
-ҭb#o
-
-)xv"+awg{|Spj}'_077uAi%]#0>\9dg!{!VkɠǂWǘgg}S'MjPS =u%눂2(x$,:\m_w>p@<C;<;N-sN yTZD<#Ēؤ'FXeA@>a{KvFK0[+Xk'OYynv3s(md%.UJ!usH!kSC3"Vi3[$乷}>"@j 1=,r0k0&C*yh V^+IRm=fu*pk[2#c
-DP&a鞹JZ2G+;\ufs
-;G4R x@HRu"E|cmkr{ 5/hA|C wciר>
-Q\)L&\MTO[d,fLN)f_޿JEYr^-vlNw랱Ww_-~E4\ *_ïuv9T/Nx~awWxQUF|Qm=5T /}6Y{}+'Ooޟ:!/5+0]xED>^THÓI&:/hɜ{OY}
-H<ٚn+7.~mlTSq;m'& :Dhs ϵ5Y 俌y53A ;>\
-íE(6~,G) ޱ&\$f]bP霧]`du֊ʓ1^h=+<Vtz}1&Ɗd+ӧ`U0O:CzK'oUOW>|86;e`nn ,BkUyw,W&'UU6fQ R3+YPyMxDӝy(k+ O}!7_dQ>\&5{hia|Be^Y}I6[Ivk6ZFh``-ˑ'iOD<Gs/dFÏ/y'g'Ș"LdU#jT+FґNsҭ(:tCirmSJ-`̅ސ8jxA}:NMJ;$TO8\G@VKeom'֠> _jb*#Npj&ʤg,5|:f~fBm6
-endobj
-965 0 obj <<
-/Type /Font
-/Subtype /Type1
-/Encoding 1960 0 R
-/FirstChar 38
-/LastChar 121
-/Widths 1965 0 R
-/BaseFont /NVMYNJ+CMBX10
-/FontDescriptor 963 0 R
->> endobj
-963 0 obj <<
-/Ascent 694
-/CapHeight 686
-/Descent -194
-/FontName /NVMYNJ+CMBX10
-/ItalicAngle 0
-/StemV 114
-/XHeight 444
-/FontBBox [-301 -250 1164 946]
-/Flags 4
-/CharSet (/ampersand/hyphen/period/slash/zero/one/two/three/five/six/seven/eight/semicolon/equal/A/D/I/L/N/P/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/r/s/t/u/v/w/y)
-/FontFile 964 0 R
->> endobj
-1965 0 obj
-[894 0 0 0 0 0 0 383 319 575 575 575 575 575 0 575 575 575 575 0 0 319 0 894 0 0 0 869 0 0 882 0 0 0 0 436 0 0 692 0 900 0 786 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 559 639 511 639 527 351 575 639 319 351 607 319 958 639 575 639 0 474 454 447 639 607 831 0 607 ]
-endobj
-1966 0 obj <<
+2079 0 obj <<
/Type /Encoding
/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/exclam/quotedbl/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde/dieresis/visiblespace 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/dieresis 197/.notdef]
>> endobj
954 0 obj <<
-/Length1 2243
-/Length2 14621
+/Length1 2224
+/Length2 14366
/Length3 532
-/Length 15858
+/Length 15584
/Filter /FlateDecode
>>
stream
-xUT\ݶpS-{ZCpw =; }}{nC暣1暫Z9Pɝ]
-[z%O ,&=
-Ô)$:9o0g3qO\>_SsS?MqߑK١mYjAWB6W86ۧ 2M jAm ,[?P P<C|t&uZF@L>R}|YHf[I%d %cyB>ChuD'MGBQ"SCP7Bsr}1*vs=0f+Yg*.H'6ixK
-\s kn
-8K
-_EJ t> 
-|1
-% ׼{?:=F
- ՜
-`}FD_Yž, <DRzv-!bLhgz/&P
-{
-frY yi9;b
-vqkk3$vG6Jyc~ӾW,kcݓw)STj+'%$>|G`K̨IӁKWZ\Olp9I!b~:xzgĄ+E#Nsr7==2gt a=C^|zOɃɣdf{Q/2 [\FaXݛ,pO^@ ^d"g?#YdARlR$Ή*wzR{ZX!6PsU8ëV9Tp(ʛ^'H^IpS-( /9ǟg
-顰 ;:Z4?Q*=p뷴w"rOC1?27:^{!xVkuMr#QE6[_7
-v^vja\rX`K.m1ujdR'fhE#jXCQIb &3v|UsέěJ)!wQnsw#%/</ TVO''g=ﯜEoN+?3۽(9<.:),r9&΀'<oA< 6DY跀>Y*D, |?3R(sȋ`]/b$ OU`n
-(u{b~GHG&(@ j 6?oH_nuf~Gx+c_|Ok'-M6sh
-+a3sŽzGbC
-bixX52A/UOO48i4N1k]l?B/lHם ֧.4S!ׇ
-ROќ8R8` ܲGϊhi^uc) |aM#(r8Tv=
-(,e()z@醲,N:? ؆H({N=Sv!+~3\.qvH.mt$Wʇ\{pDu[sMI-q`y~qgT 7IByriBnF[@ׯCG3R^tsp9<I^I#<4Y{;Muy<r mKXs͓V4 l0UP`#b$‰eԠ|QsH8(3Dݫ
-yRwѶ4WH^иwn*gY+qe7VzgI>KJ KC^WzZm*6^z5tE"{g_ isk T3U^9<4=n(FZgSi r<`2D^̭E #*^6Hays8okc?6V708G>VQ@U[1/k0YEAPL=,|φPP=>zIH쨙-BmeSaG /òW9a #,Q_־~_3}zŒrH3:sґgO?/`$Aajts"tsOIOFry%ۡIˋShlƞXŌB֟=-|#ye%nQ،[4f 69fL~_ ^EʙSh~ԩˬ%rb]TY:?tg
-,]Rpz‘}*l 0rpGLx)VEG$FGj{3C{[6QTbߠEQ%=>jSȞ0;~%yЅ򂋙j {U_+w bXV"2En6dHE,bϜ>z]_
-V&FY(6k;Qя~<hHmםXvc޺ 5ЗK7M
-LDmbY95O1rl q{˘Z3lpԌ ̬- H(0rux[gIlHd:L_QKdfYd`*9ՃGdh3Ig?NSd#X3n6`Йɧ7ܹeϥ3,TW8vꆮF.v9[{BЪ{/"+͉lL/c8"F
-Z Ivn˃!9)_RCw%OBNsN,E;(lI`.9vH)B$A2
-G6e(FtæKSqFȆ9tdp ]
-ܗ192#3 Ea,IeYoY@}Ti*دwX%B@Ӱ \DLM1
-؝6Pw[I<)6-hūL]˛FM;H1 ˆbdFN
-Ժ]y%c*wKPd/?_{rm u֤ޗ=.(+0KkO嗤rZ+T*f>IU8uHVu
-13vI/P$td0TjS.
-,uCTMyِ-^V0F="r'vⷛqF+K,_^.H T/`
-Mr(96*cn
-+l}QYYH\Idhgb%xt's8%dS~2r[^3?R(2}$G+:`]>/jxwY|Bpgi-ݝ*Xҹ
-;)HJyY
->yy_b4LqI*F+NI議 ahzlF+I\Yf%'c匶33A@C} r:$M~`ZG ER1,k=`%d̕(tqOq4nX]?%cw(cY*> )aW'#a_i$XtS1=#lxz!'N@A7xGUekv20͟,V=6I$a%M5ytIU0,(цs:x@^+!0B͑;9xCl!l֝;h0 5kZڛ>*,P>Y)am}^:1'_F`^Y
-i˫?G*(+РotI^ܲʈ>!_[{ٷ)W엾(#.pDIRk<?J_<3 {%VC
-%`]}<E2>_Hk}kk=Ni^Ч-8~$# 8Zp 릸Ce3>HL.BBXۨ!q!by|k(raisjE;ª!0D[yZ;觱*~.%wh$3=Z;Fce8~VrXn2f]H}ۀ0q2b MzMFm*ӼKf|UlGCaӶKRyvC[)\kaGc =ɦoB/^5;E ) y4? T߫8K>I!,k$}T[A[5C .g`1~Ý@S&TMTlIli';9nA0c yx2MydE; c8⡬\bb<z||VE\nis1 I`a+)H z'L8%}H<r/ĢPc02[G]yXH= ]ՈMl+P<~vLz7nfYlx %_vj7e0Ւ\罇R]8]Iw _rOgOw xPu;.M"oyʋye,JD e+>hS ԝʵGʇD6(8/(c}JYdiHo|N^>0983,yk$ <EHne" 9]Rp%y
-:jqB B7
-ME!IdUUrZ
-+
-OU;R*FP4`lr :
-C$"~xBv/KIM$n]ƒ$ s$/8?!Ae9⎠CS>qUbxvw[._}{me|Rg`e`c1@yuN+j! a{h):330\;0XK>o[2ѣ">cT}Xz6e\  NϸzQ<~yUFBIj;jG2n*L{JD2yo&;w@F#1$榤CLT8Ɋ0uI(|`TzDnoOR6%nuxGF98-pr l# Wc>y:\ǁm VKi̫n1ٝCކ
-\c]': -;5iaMsY~VsokbjQ6? 8o8KBXGZ*7 j]w*}$捄>i,Ȋ͙ydCVp"oӿ0x
-dij糃;Rjex6rj_ eB'dJ{sohNp oB\hc.ILrDLnzMxHHAA24U^}B ~rSGYXr*mW ?=egS \ul3i~(z
-oVeu7:ql[6Jw:KXx!݋xq-nD_=+o
-t$KЬdZs
-%~@(z tݰWѢRƅd`C.A҈22SܪRI\eu3ȇ6I*Ho&>Y::\viևU*b?ܠMY2}OpEt-fV3$HC,?]%KR0^y]9:~,Wu8ހW}h]45PV[5gW?/&xF=.?S$(% z+4"˷l)aE]8?`xxt-ep@a:>d)9qByam׃p<k`2qEmޗÒOĞ6A-xYNrw)@M3=!@*+iM|#'DMrKon#N3ɍ[R
-v #DWZ׋u|^Bm3y
-c,X8B]BbgN?/]m3Lpjl|ɍ/;B#<s7ړ1G;rh'ScQJaYZ9-Sʎ/8ׄe ӛl~v@'޵v
-;*S »5cOœpnGH8+kjbXcYܖ`L9?n#wzCS^':S]20iTk}`7 {a->S | ʣU;G8_i
-ᩏd[aQ/ԭʐDBdjC*XhڃvZ dzx잕 eNX8kwl4!NNʪ[ QFJ*E0csQ/Z8ى.F$@r9}8=( X}2wB(~f6F̬ODڽu|س}Sq(`Q.O jkg[ue6ɬ>'ڊi"zt#u]ͽrjc{* Kl4D5d-Dc>n½صRتja@F6;V(̒bE%q>%N{Uz4-i oY
-D|O4S]A`TfiiZ
-03$Od/##7
-<6
-$m͚†|NdBBs쓿;Na}Ձ$m M<k#"R$ƴ'(?7_xj^!GkMv9}QnU! RMh4En[X:k"1!5mw-l:&DX/+c]I4vڮvҫT9hk(1x:*^uo:[UGiS\ao.hwjTcWRcΤ&pQa6w5Ä
-{ksf Ssۃ Z5yu6|b"gI*Һ^xbBxD lMg
-'H\"j<و ,P芥kq_3~͊P4a0Pj "%f qtbB܎QBg3*m?㈔L/B&%32B~&N.M5x;G GQnb "!4S(ʯI\a t!vA@Kˡܨ.V6$ĥ,hm79H_k dӡީ ef6Wr{'Liz/߫fY+њ5NPG>|_
-)qjbA߸PTOyDq^B|#tQ]H28nat$TJ:4ۘ;ʊ#ZW-J3gA2e7#&tԮGh^z?Q:BƩ'vY<
-H
-`EcLTr<M4VzYlK^6'=egr+d\UWqkt&/.i\i_:kĦGB.9FurΈ΀/S6˝3= C" y~ZM1ZKW6N˨[e qף)ێ] F#^ϡe|R`Њmxs"[~I +b')MMOjW [v8s|wy{&=T<waKf ճklh0#ao4Ʀ{Fbt,(#g[~uu
-E@kVJb
-۰l wX"85B7t2 ~0^҇<~H('8x)YV%6C&ײzU{hY9QABU~Gs) {?OH0+$ubCt>4FP:m&>n`'N%gCLk%7^ևs7\xV֍6w}!rCv6>]^
-(} bT87k,tE6pG`YL~HG,
-W&gr|9ƩvĴvZLؼq|2 ޒ;0}U;ƌH}ZdD vz4Z`,y%e`FCv($`%!A*'aw+ԙ(U@fȞd[w[nx/OD wL) Iys~91TM -:*jnQ?tW w=
-޶xU-\\(_m$hZV>:8d)|yA=wbxtqT3kaW:{]8?=rS N8jlUwc%C <fLOǠN'Q!z,_ІJ;>?]0< f_YX,ėChMy[6Z;$a&Xt]g6J]OI c& CJ毅TJyEMj˰
-N%d XF.5Edz沿H~}BIY%X,An.խZe^rG7+f=1s`eH[K9.]8f6-,R)@I c-\QGEl#9n_A
-ĩGЧ&#| ;yFem5"DjQ?tONOh$%p*law#VWo(ət| — KEv|oM_9ePe
-W>¨Q"_$Lqe ]|)sDP3Jk} "hO5 sd*Hb9In7>eZ.$΅ 3oژx 3cI}.OJ^
-&xjKWitJK=ϔoӾL,n*7±^7VAo5R K<2P:QTL^SD|
-;U_@3:_/<n®2ޚdݧL
-.JDM2N2f3 '[IiMP3;nw.vVXeLmjN~4{}*a3 ʢǒ+O&"9C %*;v} CVs!㦡ҏJuw?O$Ju^A.+y0pĺBd[
-iXī t&>)(
-D|a@PnUwپɅZq S!}
-BE
-*;฼PsUMN#ǽ3w|;@X{/,۴_C࣡:i
-|!*MiDZ_:b2dO ,f wgG3=dAendstream
+xUX̖hKpׅKpw A'KY>>YjY
+&vF@1;[gzffgYf&
+Y~ \5Tχ,9ʜ!>HFV'ΐXg dJi#yj,3 }6]lނi϶s̮G 0J&v[1 v
+eS׬M5(хQwm"ͷFNweFvs9ע+_ͻQc9JK;ȩ,t%[CJ,ROj d`&/;I--yuH
+jN~A찐,GN#b<61yp3ltl:dcA`ϓ|q& o7 nMN 7uV:n*")5g@M)`&'?*cO[B 2ijW5u$Nˁ5`ԥAk<Nڭ#ɒ&ͅvs >~bJTF_RMrxWw(k埱I:25d; ~ȣn&IPB+oO9\GtMM^1\w3SaNX9?6o纑jC6/
+.Տ\|YHs6ǡ@>]㰒2%<7R]@yX{PP$/\óY/ܕl֊udHg5[Z +k !jwu40(Sop<yC]s5^1 z.|ژ-ӰZe°N%sW-|FBԥoga(cRJd
+FT?%tVBՈ޹'r pƮsy])v2߆X> |&f2UBGι9bVD&^Ѧ{ӘTWn>1G2"GvsZÙCw Ef;Kw,kXÙlx^x!m(Fd?fDh szxX`gr6Wu헓l&hc"²n%?'a
+?J4QD<6,3Yr,z[Pd}X.ĠaЫaթ3 X<W=3_@[!xAbАNz
+|ų"}z'4th +:p);7RAmY2u%ҰVۆ{^iEj]v[;LXmP6K#V:Sxm ۗW AD͟{NjÊ= <t}I03t^[M3I"& NpFw|a-}a< /|#D{9Eͣb$fj1_I3x>ryd>HS?C&| BOs:73.ީ
+|V3.L**TqowĠؽ%ֻ+<1w8:~'?` Q՛:CT#U~pՒ2 /J^ F4fp;:ҫ#N&gim[Cx(h1*(wҚH-]ePoc:]~c_/БlH
+} ctt4v^(CW,@(vq tɛY2Xqنay_">HOB*AU0> -Z#FLU*%cLbMKǹ29!$ )S
+mZW*UV&Yn/nCw#R!ӱ.Et}D1`@vP׽Х+i<#ēs餥 C䱟%RVU2z<ky7~7B[¡M2z)`w7\%P*afl7dM[..2-17Ƃm3AG?xBj4N:sݚK!s<X^`dNYLB>hF@C#rTl[HDpv{QX
+C4 8bo)yhj~}KsT[{`*Sb {A"duٝwmv\2JjLu:N*n$j~SMtʆa(tf}輨Pwȕ}BMF!Hd '{9=ci꯰pR#>C)Щ8\Ef~XpKJ+|w
+) 8` ("$JC 1SR.C1$R1eع
+ޜc Ȉ[K <OeD*$QisBEQ <>J>Ӏ;OfXa"q1ѳz-#+b6'ղwN6%3鵇- È~",pP,fDYiU}'~Inyi yw-<&Я=Xcbz/Sf3H{VT~IweU7ĎS8J&CiKub'~~%q,!Oׂ S?8$wl D7P,;!\urifA Ꮲ>/׻x*;[YWݩW[*&sQ/k,@\g2hε1D9`sj.F H=.GqXxDC|ҾhM{C_6onr^oI>Vפutij)嫫/t)~P5OP5Ґ
+l)]Tx@q,[Nңn캴ZM΋t=Soapb#E$z3)_NsL-+kw764fȨؕ3S0Ӡmݱix(*2%!刕Sk!;tN?*rF+A
+ƳZ١ynN=, 8ES*^SRoǯG
+/ zC^k6G FJ0PBN[\
+Rp;Y& wq+'f b7>_yrGr[38'X[1,9L5j1C-*R3b"+٢h58yg}gchٲn<32 J$2X:Q {_*Gզ'BFފHH.m@rL筒+(<Ab1OGTM4q-%-a~W8&̄lDְ/ vʐPŗ75N8pGJf|x7 Fym\+!>Tp"j,*߶-E;J/wJUڂ5uSY]._-uiŠ,#-%k*@Gg/6Z*,eì{n@pX+_(NqanbC0.F7伧3#CW崡\.[uzlDjzB yxqR .6žHn7:}72oϕ2r|cu48ʠTpII= ~:HS<-}˲c4XZohP]c7pʿlGc~a4nCV;U =tIEetG jNtlMF+!>QFmUbˊ'
+oI *A]eW1yЎyGa25[x`]9Sݭ5^M]=ޏs/ 8Er3|2(KCx4)q(-x
+{`Jnr룛I9&(K~>xQu4 {(,e9 MI0Ϩw9뢠gЁ
+5D`:Ԃ'{Q`ycE^/3]He8u!}i/Ծ!ψ4~AqĬ- ->8p|]KMqEيHD'ɇ!A4)"K4Gj&TAr^ڳXg7f㴥!l`)*]w#G~s4&e'(YG3ۏ;.[]l{M^B9)?{ovpZ3Lr
+h}/lw7ᧄ6sv"b àlF>79x 4*XfǪ~g`TKei'tr1ctF=?י55,R-LPEjD'*(&DφE96ܨkKirF2n_H[ x~dZǻ>Cq
+sݒ1fSb
+'gYftf< ViٯF6N17~Ep1!]rJUCؘ^*[=|¢dQC_]}vDLh)P( &
+ݿDcHCtCGw.ru:y4JGb t.WKmL=;Z%,Z"Rn2r~6`iM!{ Ĉ8t_Ow%[ye][b< đ5`|q!٨"ͱF,)p0Fݵ .!Vi4َ퓂WN HNxz$N48{9;7Ie:(Y%0 L+G$|ip@kxHg/h>/'2ua5"y˿ hWɥ&_Dǣ(.<kU~2.aBQK0 U:+/zsAӈ I>э<)JE~]dhRoJ#Hx_-P΅7{MI^lH ?PGYRzz@Z<.CrZ}sfCi_GAd]g <#m'h&Vby}gL4Yr@VыRJm.OY!~TVhYиZ8۪$C
+OC$[vO2~V `9? ڎSF=i0W MJ&kVq~|̙x,WY׆,c k6:`,cH֎m08n*vQ,k/M,(9LF$%ü;\"z쬖f3e#GįQptBKF]_ZGq20J_՞nJp𢡄H AxDT ˧8~}*^h,҃9! ͙o4}$uD@x9DYԗCoJp*-CRr")4ׅ Gib) +'iM3IJ|tk6 @ZAD"tkuNJ_%E*
+H)7Z:̮+,5oP0KBl1/Q^(n>.yȦz˿s/RJ?/;̌{}z+>1߂)EPllznVꢺwǀXϒ`w.h &)(h?o"ʚaOQ*bTHAܷYY
+
+*@*'h/zUhS3\461/ٔ[HC4(V@ɯ}U\V_
+7)b󰃞 >W*c0Cn$ MmVҸ'L#cN>Cs5P䶦K3yfL韙dٺ*u$xÏ?a?g\vTQ֒!!^hĦw2Jzlm'hߓp [f^H纠q
+*o]YLQڑ}_5PyGu9R,~;Gg{-̲;[( B8 xa0KLR fv/jhJfY|U . ӈ8} dtBvcRMVS}R $R⻤eo7fCi
+Ӯ}Z)doǯs+O#m2C.ڽ_r0r.}Y SJ ȴw\_DvLtF~ F'0hZKI~wFGev섹ܿi^ҤE~*B]7J,<(/O\$IמMv_aM >-%^Ji"8Q"6"_+*+㑣Zܦ]rʄB_Kzqfǂf{LJ8v_U]_xCԗ`Oj חs;d8-Lz5
+ءJjb
+NN_4.lݲ
+
+5͒IBTknmNI+?DxԐMXg܏X$t0l+=vJl~A/5ehn8%,*E &s>կ/g#'T#0U~+: jXC"Y;aȼն+ow
+˚xAZa-P#8Y$0Htęc}.T1.֮bZ"oNR&awPkq&ImĶ0DI˫<aifpַ\!<w]UPND/w}o+cl~ؔ\?KǯozӸ4υjoTWP (1)8U9k9Է<cbngB[8غ/P.cQ\pD(M@QbOIJSS- 6V18_ :x_d ]Vr.VV|G&WD`hUqcbIM>/츢ҭ6@s#צs$'8rf]p?&tLM> .sTIYs5ּ?^V8HSYc)!gR/(
+p6 #idzC Ɏf݈n.,S4Okz
+Qp&]$Y"K4Mֈ`
+~*zںIWc-֫a$T\BՌ!a<hG4{䆤 8C=Q : űMlsձ!
+'n=5)i2q(rѣg[p2f{ٙ
+"#FO)V򘿞JD5-chNUcQFo<y濫B2G6s*M\֯B </[y~{T3I, }թ)S b[!u
+:3ݢ PbuEN+m{E΃7CғgƪX9(#~7>4Us[ -xz~溙_Ua#6f 51P^<N o_^Ͻ)N%Ops&gUt;ϗn
+g}Jf
+ڹjpv78TKO=75(bڢY;Ռ†")qGVrdGjBUӉՌhTp&!43 SK6*7ЈRJ[
+
+wښ g
+Bm_`Dl/W]p9 eǥR]KcԴ%.+j6u_qk\Ҩe4, ")MtSNOݝVuhc4̥'|8(@udK:}ٽ_W֦g0ѶDS^.ue4fx@ XOJE(SĮ̲D{?NMC\t8j}7bKXV= hT/nt BD f Gŋ.ˆg7?V3pϏbe5)'eb\^{(@c(72m.5n$RQ<נĒf&_&x@IHƸݯ#
+wde
+~"eW=u*mCsx-Qf%ڤly.vGW;hrq^2"]>]M^l9$5K1*$n|N?jN
+!)|W9ڇݨ#]s޻(_Fv<=6NPM`M~x>I@U`Mհk.*lo4۔X.}j[/ Bsh} xd`#4ᗮ=!-kԙ@Uf-I![(lW3,#ڦR8{
+'B&jKի:m$f>c'$9w9,m7C ӫdAc"*} }F
+<. oEttj&EUu s2Ü|WTRyfbv6VM$endstream
endobj
955 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 1966 0 R
+/Encoding 2079 0 R
/FirstChar 33
/LastChar 126
-/Widths 1967 0 R
-/BaseFont /RLEQYF+CMTT10
+/Widths 2080 0 R
+/BaseFont /GNCLKR+CMTT10
/FontDescriptor 953 0 R
>> endobj
953 0 obj <<
/Ascent 611
/CapHeight 611
/Descent -222
-/FontName /RLEQYF+CMTT10
+/FontName /GNCLKR+CMTT10
/ItalicAngle 0
/StemV 69
/XHeight 431
/FontBBox [-4 -235 731 800]
/Flags 4
-/CharSet (/exclam/quotedbl/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/bracketleft/backslash/bracketright/underscore/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde)
+/CharSet (/exclam/quotedbl/numbersign/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/bracketleft/backslash/bracketright/underscore/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde)
/FontFile 954 0 R
>> endobj
-1967 0 obj
-[525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 0 525 525 525 525 525 525 525 525 525 0 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 0 525 525 525 0 525 0 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 ]
+2080 0 obj
+[525 525 525 0 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 0 525 525 525 525 525 525 525 525 525 0 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 0 525 525 525 0 525 0 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 ]
endobj
950 0 obj <<
-/Length1 2203
-/Length2 16804
+/Length1 2223
+/Length2 16852
/Length3 532
-/Length 18067
+/Length 18118
/Filter /FlateDecode
>>
stream
-xڬeT\Ͷp{k!K\BpwwwMpw%8_?{s߿ߠUsU^Ċ*¦@ {;zff23I\ hbio'f0ss
-sF, lt
-jmcd'j45hjk1
-?tr LRC ?RC ?rqKL$h>!H!!! @.J@.*@.j@.@.Z!n;X]fO_
-PfsԹA!D&jh&ӿsTBЄ!(s_Ň _r AR&&՟2 *v!/Y9׿d +dB_d<B_
-'h:
-˿ulf @ ʢ oUJshxt94 yK|CwĠ8pQGzͧtt_п_v(MH\8Ʀ.r3Նy.@;y\avc,Qp r$OJL
- ;#X>YP)#)ecg7+c;1F ]mD{2lj+}S(2+
-EdCHJY8/`/ #x O
-S0/&H-ԑW5L)826ۯFtNQo/޷R3g[Ul}S؊D5K8 5`D@*'h^uQ<!q2F^b:%(Ǽ3g+d
-ME)L,$̫6dOب@#b0 o 0T}8H[`{&Lo^x/Wu(*uK,CyA&LgLm_Xfo$$ɫ~`J uٖm'뚘zF^[{h7MA;4Ҩ"z/w5s.!hEA]fy12 Ź]a
-]`(oƒ_Hzra%+f{(Ժ
-fmv%pd~9a rg9 ƽܶeQ)6&(ӚbqQi>?cqe &oU_M M,Qu*[ ȳtm$%*G֯b3b'g2Ξoo%ĽVHxe)௎J\ ک+$˟#\ 4%(jڐIwCnJd
-ҙ!X f{P-n<#D9 _eCpTgD'>e͸gc+"S ZzF,@m9
- ɻCԀ}I
-s8Px6ֈVG)"']7H';G\gU
->
-TMTrZ;T91;.'@G>s72.DL<7 ō6&6pTSGW_P$c?\doXBhR :\ ~U8IFyk; rAr-5jptUQ olU#)JoD<Ax1l\/$D]xYK6{[*Nt~mJb\ ;@j.9
-Eu&~[;L'eDw-v\>hK!t߭kzm>SZJ;yP6lL:0$*H< p7oؽy!cծ w4o+rn&̅${QI/ܾl]e+$$$fO r&l*z_3f.xqt7Z_g>*."bRգ"ywiOf" . @s҅~~uJoέZ
-c-xZ <#pͣ _kll&P)N-C^Zۂ<VVqV7i\T9YN
-⃯9M08$_<Z)E=LCϡ()XXУ
-߾'G=L!No;UY(Su.ʝUPni-
-Hv+N7vJm.GJvDUks Yr0em1Ԧ7\F{jN B #LjN("9 (<Kkv;M ҹH}^Xq@)q!s)R"TxpJyw.n" ,_kN߀vk;zX;%hf) Z.6Yn
--/T/jL$B;&gz6W/q 6ѿWY},̆KF@A }MtApHe:לOCK,q`٩ rg$ ޝE'_LGBɟ1yk
-$:66,jܮ!!6UwfxHwEI^FQ%KX0m֠maKs2br2Ks:UM7VNj1(jUA]hi:vJ
-ibE6pƕktirԻQi>6h9+TM!;>J[pB8٬hύJ\@>j8vT.mMIFΏj=xc>bwgCf!>,R-!ƷC$d ?FBk-:E''<IHĠ?oF5>TG.khbɻbuf(Krv9<")XgrÌ
-mPqWIo˅4fET$MAN ͋kH&ټ?5n[zH݄=?\8takF p .|1-'X[8K;D֔:XiMO:l}!@z8l[تKxzXjI|XF㝆R,~7]w1.}[>yE+ j$JLgA6o;+(YUnp|tES58PFLϢpM!]Fo;1ʖWJ+f;#J#6*a6BSC/M\5SS60'N)9;'$ G"\0~~GC#j yS*Dc#:JݛTX>ش_2'̰,N}Ȏ<e|_2c1oM[8 lG^hQ=`'@\\5;ݬoLKū'4ŊL[*Ka>Ldb6>eNnEQ8E$he|
-6or|@pUi5ԑD@P_u;tUE`Ahs#|ěLT'dC'] y)'o,׿/{;PCԆGo-NY.=H:z3v]-&M7CIHG+Gj?4}opO0YN%HiэI8dTE[P6bcXI,ϩ:ufm(5rlŸ@Cڍm$eJ <~ֻ@
-7` )(6Q u>Qߞ1<1vO,J\B>4(.2RN`SdpnWUX5gC faP6%#7-@}s׺VkJCJC͏2 9ǃܑA.;Kw2*5M K#bػɐԡꢉav ?Df"TC+{$U4,Gg2J<U=N5h(${d /\!~kA:E?l>+ 0ES}H$ FFѩݰ;o;n<DBUZe W¥rhٍ֗_Ks%2 cErT[@nfͿ|U1Z K&S>m.
-
-3ݞOo!S6YRf\ꔰɠlRi(dEnT
-䰇xu/FK ] G
-x2=*wm[{8ERk4}Kw NjUL]}?:l?}
-5 fĽ$KX=?QI0N )0ܘ;A’đ$αq6H7tm?~KQ9k$
-՚\{X50;{?x8J<}4OJ$67 <9CjvU_갷yNicG|RpOEfn59&#kg0RSydӋ80# 3un%J<U|?FeUA?N3rA\%_RYIdҔUŨ7
-|*|k
-=g1Z2{/G(+)ՙP=SUeZ-.Ǝ뛌п1{Bc~~#UF7]ky[u5NS4a4Hп)@3VXbz.`aȦ("ݐ}ZK0F >νz2 dfdIdY\-B<T}࣯tʘZEK2q71|iBTp~>8Wsd#o @/;4#Z]*zw;03t'N'[s6ձv >:`IƹCϻFoFBMh,8:TZzεf^n^UXK!#9;EH Ғxʣ$lϿ-I2EOm|=$G-|
->$XT4DpHRʂ_)G8!B8P簺uTݻ2 k\+ٱc:ۚRTd"U"ŋ,@(ci,OH?Ӳ F,ZbnGdqՇ'[T2EW~_@LW(V(&SN»WGb3P>ׂ#줝`˿VBKԓͶlͣBJg+0kQR{HTP҇"ᱶjH/>PMnmq-G @585,Cv]ڐsN=_r9Id* AgH7v|o5Pˍ1BAZ
-0~ -[?p顗p~x B4aS⳿@pA/+&xtL)v{SX\ V>am$'?GJn"N=Lh}V袔I&I52I{֧9re-5?(Ev5SmǼ"b2jy{ <7|b-L;Yfh(.z"12e;+Fd B%p{ |Y\6tL79;\K!7:#+]aO u#ץoĔn}kOUn/Qd>9,{|CUT<Gh?L6L?{+3!3->0ON!'
-|d'ZP= bd1F2`3]RtB
-Hos.#o`r5DpW;OXw]
-Iwd!6~&1J:|_-?;
--U4?|*1׮zrѯsdaI0Md!7
-}zqQSLd$$F{gT bc1,&ҽmACօW)swHgpK°<jnٔ:6rt.WG?
-yЮW$3E%ܞ)/JS!k2RSj>,XuZjbm>`>zZHb@N{j%L!a|{A?OC.Ijo`fy#I /B
-\dނ)t*P\{+fhX#n~|a&|FXpasqV,]uye8_Óx?D d~>K2-/ን
-#]OHO59VA9s1цwѴĹ
-~m
-0p"r3v tFVrekڍF$/h2$H[|EHïќ&RAd*eBU=Z2Vg;SX0R5~m3J5[9CGʢ3.}4RO4o˽ݭDt?w+qK<P]GCǷh.n-\aʳTzYbYYCYQ۰u˶*ye=ObIHT^R >P
-hj^qj[=DGkIӘX\G[r"JOtev4!.:Ws1LgKcǼT
-<C|B*B*41޲
-QcQtp=Ă0soK?-p@#Iuۆ#%[`Ѐ|먞w/O_f*/T
-d~tHVѴ&Uy|ڕ8* vKOX6 j9;|vCL~E
- >AZa&ȩN
-R,0i<<bHs2 P9A|:4RșQ8+|1""AW>LSkJ,v/#3@8-ܖے%ۓjQZ\?~p w *18)(.iL}KT&
-֊"j& ((Z
-ǒ;S+@xkA4
-2)3`!~ܸ\K\ElizXm5Q8"#4.|rib:3v=X_os糫OK &[%ʓp|SmbYzEW(esRXrr)ZIN t"%L~hVn>^2El68ɲ]'f2sU0n3})J1"DHeM,"#<&4 s-y5ޮn
--Di'#q!(b/ˍRܢ cn4++HHimj!ݩrC:+/aybk8;]=s~?:[ x6\.sq?ZV,NƕI2w2 2,$Gf]3ŋ9]8w:;;mS~wO?mxws0{+㵔šϬ=MDǁQl[{cZ4}7CqvFo
-R _MOJ>5X 1ί~I(wz!8`.dN~>Z|ֽigѽ|[|p|OhwYhwpKjy/ㅀCDk@<nȉ9^[¯N"{7Tf5O:S5LfMi+ (N\.S-qzd*I5V a:0Q`n|@&dT-i:=,֥g]QP+?Syڹx'wQ?7$t,gW˼O/eo_%\ 0|yr<Uap`mf
-=%OVZ>p= b.^%Cyi\63+?홮P^hBd(x ZӁa $1%Zۤv3V~iľ `߅Q, naoM
-`$]բPSR,XRjHjd9N%0ق%g4O˖%XDPW
-kzT}q;U?#=wZxXg~~*)Y!#ʰ
-GĘj.8*3C bDb2/P3'u?;57ss]28QJ2d命/qx?c<(`XJx ǮѢ>xl&Y9Ujc2M}…vͿy9PGĮ`&Aވ]?-nS%{8;߱e9 ؚ
-Յmw\㗹4cüD0]9෇J{T>ꫢ1^T Cb]}uxe^omwU.]
-̭g6SOW vK${P
-^6#<sj|0Wn-֐uo>#A<XVNj}-nJ4[}k ?.q:'2> _\W_5-7D#hd̕S\mPA,:^`onw?"挲yR/]v:廸\I.#.fXڜCWTo'(
-
-
-C$UL#SCs~
-B珊DV庢q1БpwfJĻߺHK.-&Eչ)iGLr'=ڔ` 6!#U
-MD-^$ʔJ;G_qjzntD?Aab@
-Fb_p|.3ܿZ5Iٱ=?X\6peѡQVZjNp mdJnzΎ72^6Ɗ 5A "g%j,% ( :Zc,>!еA=tY'moP"V?!X e}} iYs[]̅"gcҸ$OhZR߭JjZ Mz
-s/1+(TWQ<v 
-Ի-K_Us֌ +Xb.NP'<[TI+]u}_c|?fM x,bO#MGT<n0EW;c{/5}F55?@??=!ͫY^
-3#*VB + Aaр{qweZOvH!dWQԗ9~&(.1o|k2>w"?RpEA _Q.7ksyi[1)cwSm07
-oBVUo~uBK
-Z[{QmefA?p,IʼnG׎+ .[,jvV}c\g^:|iao/AV;6R= 7R~kvg^Ό>#EN9[ |ҬeAǹkWf}L+ĈC"h!%>ԃp~(\<%m۞ELt-G(NRku]tyS7re}^WbA=VMOeed095cZ~rdP sှ^YxwŨ?>uzrz^<LzleՃ ?vӤ8#d$/ӜJ[ǐzc'em.;(SNvv5N/WxeX;z)YW[*.A"֏
-AJbs\%ԺrdM ߹ɋ "^?2c4G|g΂V*ݲwm yQs^^"ojI *Oncgh}]gbљIZŦeP7(cÝk 'KZ^-X59;):YyEyucnsW~9_eĄ̫r`C|.9<@ |/ǪMN5OK׽V>^|kb iwlMO/xA&^Au˫fn`46bM@ߛ\%
-liHn1t }p@NI 1g$Fyendstream
+xڬstݺ۶m۶msvҰmN46~+cus>s^P3Z8YJ9932+2QRZ:9J[HY
+
+,nOTj 
+(wnyFG:<&zwWqI\849׹V9r&{ @n[U^ܞJ-9zQB#qI
+22ŭ# Ќ ob'UCtBIMؚ ~RSajC̮Ov"|YY{x^$ZݕrFmR64=>Ox'd5Cg;%v1;MZ/q0$O=)A)EqZzvz#9Hxpd©<D ElP^hGT[հ]En}w TbP5)ѶP ̷E*jDCCRf9e1"L5#\X*$<=[)5LT*_N:h7 aeX@jP\k؀mՇ ~qs߂O0s`'e_s)PNI){Ծ@_%ɼ,AEN?
+U`+fy/ii=ɠ *z{s~u{?6.?lpF^=RNʍy(
+r" Ylf>bnm/} bkmG }cl-"g RB.jAʒN^tOwk1Yn]sD%cE3ނB-rG$9v
+VkHcPG;o&.<LςAyU;R«&&zAH($yǝgAJ&2YkgٷR--6tX7#-n1t68UpC.3a$ۿK,H]\ǐ'YdtQ38` \+D@@9Wp3$*UGR
+Bz+R!nک >Y~<$|ӑ l1{
+Mh
+Į'M_"J` EAiWr`\ۯZJ%F[\Ʉb?`Cd+n`1k.5-~q@ܴX'DX {vRû"v޵A
+U45º^ ,]*燷/gcY=)(9
+jµ$\%p5 {wF!җ;{&]-@p t޼NjrE6vES,@adzA簇 g_SQA1gq"\3>#+2W*.6ɞ]*`qv ~#KYWB5û<`oGW> EdҚ{%97Diw\s3 swla %GYt#p/rpN`Pb^ք$ <(]# ltBLa`놅r
+_ Fw[~
+J7ݫ]*3YκT?&AJy..+z•~# <CKH.Z`rjSc*:&82 m'/HnҼa7z[qUq~sXHxXD $mE0$ '=8]]Qk_Q!q^qx<ʣ|O)TH3sߞ<bs kxga0n2꫸84+[b#&w%FmoBtyu}kqyp mZګ%Ҵ̅zQ|&)_<U#@{P)+ǵ2y<6:b%Y&~;G.ɰ+v:TDsx
+}oIoRas|8w
+DE}݌_W'VR.}3]wԂzQHZ4 6m?ɑ } 5X*DLhΠY4z,I ]"}]=~߰CZ ڧg(i=WuvXd䌅aykWfAf$}B鰌t&oI1:?4$M_} E0+8鄵A$a=je_ՆX>#VCh84rP>9uLT<ŰH _m?<~P[% mrLIc0FL onb?fc^b$(:vѧ# \{$KnWGn^c$a@J|6lJrso%M1?Wv ( "T"CIm~87>ሔIcB&GK3ϴͺ H~K:7b WlR66]gdPB_Z}d g]D*eJ<XM?Po9F8Xj< Lx$!^&k>T~Ou*K@{Tui{$5ő#FۥZ-@DžW&g*{6~}+(l"S^sIN3%" %@[*;J/b̬,&#AǓd4wO#a`mM\&lQ)\*1HҒDYKMAȊ?HT,h[fawMs^Sܺէ(i'7K `xx+^u}
+1T\oDDf ,8ILиUv$f.7/ PSaHB7UHtnXC%J^*48CQM!2+C>MRk19@}yk`!<4r,!St9ׁ$ѧp~!N
+$1/ܼ}^ ԊT3aKF~RɫrPQ w.A1:{ i\"?7Ol5KKlo5v}y.V{n%H++B/s4xcK~(1ŢAi{x^/]5x[!oyʦ_8N!ZN%}AHƓGzht txBHAe}¡֎ʂU~)ZeŌ52]fK{W< %Mq?P|Nm Nἲ?M<]uPL* ps{D%
+M~/sc!(jQDe#v-`dءCnՂϰx2l8@]S0P˺QFJiJ+\fv`]z*xsvδ9&Zq[,:JM(ԇ:P8l[ǒ5- ,F AG5SPzIR=N":vjG>13Cۑ)`7S Ix[;i!l_Ua[ڀ(v6L& R'_.΃R;Si fU2p1Vs=U}r }ߛu$@'Ri/5A
+`$c}ܗVava;GY]# 0lm1Rx5P{r&ZϱI4N783M~cڹ26<r~X˩ 6K
+<Šh mܙDKe})|Pٷ:#Q3 g^ R`\l|w<ix{N^E28RlQ.}RÔc sIy s\T'J cqqGWY
+ID醨 &uSnEHXOi2D+HoF:w_~W'^ܑr/M<3:x*헞~7fņK\k=U1ta_,Vi'+}Gf+(8T|݉P gyǓĿ$\
+Ѫ1 ixgh=]hm<tF*1Oyfn} R2HDلrv2Ͼs[G<4߿BZe} [a] 8$1(·FG&LT-iE-V$\#UE5˹iRg{&eyߓ́~v'GJLq]jlMoH6X
+uä-ҁc%B"O"F&5"{ p]B|!i|8Lu܈z8 Q) !w y(XUfZ)!~IBOy!|tYxcgq ɹ+Bi2?۔Nؼ(ԌDbA~^g,&a-}zLhR+JS!`mT4; ~vyM} i{m-Cr|5mi|뵼8mUy(qҾ?#9䋵&oa K}'Fmq }ҍ3=\ew/$p f)(oS-4}nki#bBڛ!Yկcsה΅uT
+.-W(8pݥ9DB7kg:v|S6?
+ˊ&p+tOoh S*7 )s3o??Ip>GNz?k*P 4;|;5$/% N}#HӝamoS҅&񍇉ODs. ހn#Iѝwfl0<"rFƾ˘uOR7D%I*8lF-%pd`U\lϷp~60-MikP CX!q7o$K͍\ܖ$9XBe 7bxQ}!xz ؋axPլ!iwC~*e]M,8>SF1qу8Sib;;9\Cb~N0*#ttcw\PMc+u4Bk)||:կ]fho׏(qjw:S=sZQjI~JI 5"jP>JY_G̃Qe8ࡻn%+Ty|Tݐ< [VT"1n!f7̑(]e ɗEm
+AeF,X3mӞ^Wا#v6{RܬPq+Jz 4duqF^;09m02?qMP cJMCucB9yB̨`i[P-Vh HR%ftd;
+ł]Aiyz\;'M O}LYh!x~TP܋B}n)vX`$/d ?YW5atW\yTF2dTo/) ݋H
+A\2
+g|UsFлeA7*g(qeɤr,PߕkS5ުaˑoѤɨ ~scWIGVꀈSM0
+avW]JP/SVݫ6.rajk _=\Rq&<OhVl1gq7.ylUZC}X7řuEG,ejE34G֝2#$ eluAu$a efj'S85ńiQOLo2~D% aAhZ]Cړ%{ PSX `R!D.BO'{t6dSR}3I{J% Xu\pYD.Sn"$;͌$T c<K}HZF IT|(c*C ,|L?n.M_$(z6 GENiUnyn@\j|,fۆn5 /ZP\2%$&Y뇧@ 2ylM.ZPK)WpF=oS8!Ԁ`k'"3tdBq\fh
+aY~:r7WFm)T㽫Zs@a ~oi*٠+e'+}aRπߕoS0 z5ڂBNc`[Y,0'wNwŵ}N)ɲKwd_Kzg?ZN]~mdym(zç z2Y?,ko&+i1,'dV7w%w|s]d[6`qtgv U8$4zKpȌW}b
+#U٥
+ _ y|23:ި
+e+JGڏ_G>i6?tikQ}2CDV2KXq7cάWz8tRúWx#~acc o_
+A-b+ *, VF{0 QcYזXm X\o_K^y L,'뚲okt#VC",jaah it`8Sh[֝y'V?,"_kFckktã(#&{zӤHzARX kT>0Bh_.,0eeMJҎUogR! x8X1ʑ._Wh(݉kRTU ꎵ>Y] YqT_U RD%_ߨ(1om4/gu?T+}ҁ3i鬻Sv=<EbaQ-BQS<tEzNe$Diu{"R7j}:!HIre|@ni9ԅl}C[n)x ŀMMaiYh(ۧsϏ(OѺ5 ڬW{DoK;[QsxaNZd0¿J"֧Ia4OS8>]^䢸K{^d]oMD{лF0ޯ#n~ʠTA乃Q#{VF5TCDG4F #1\n@ Kt\!֧x*)Um
+bΈ1鵱Ҁ
+0=}`hgA\s<jd%
+[2=Yg0Fϫ')d24dr;׿VYeȫQʕ`*֯wxe]5"}Z?+d*KR8FA7 .?Bk<~{ja }g.L5Uhցdߪ6Ă/iwp}!3zfyz*zD4?GLs8𛁨f@~TFxJ+nu*َ$J?z{v>mtJ! Tn=!㡴ۡŒAUU.]9BWz$e0DT ;\2W
+@em\"k)K#zbW>"t+<Ks($8EB+6>޶
+AK@1 fxd`e)̓sIkJ#/:uN>#Qwa,Z˥,U^[T^<:"zw<v(*]-1Hej_]+jƎnL8_ʏ7\%3/Qs[˧D$qmXP&.`)}̿AWmA/TLmn\9@jsw*7U幎qZM}8(+ڃK{l.
+#e;HpڣRF
+5?,ws|5>Rg̹)[7;UN\9ozݚΕ |J~Wm&eUu=
+ӱSEb•uƤMVI1!H
+J~$'̽m&L2@]XՙG /¹G8Ԗ>eAb
+U~{?,#.d\xԏx) QȊKm>mPm"a Hr2yFFle `AH>'}.J(ޡ~nFWم땡 ZxAgyYWBe<]>W3KDaywxZ̦BBNfo(]cPZXK)+y%Ů1VjΪ<Ys:[V|țnDkiޖOCQFGO>gGu*ѡoR}4O;$xt{&I-R`93!t_9S;6v\zޒ9~nE
+Kɰ/ m Oeћt>55}|+0} ]q°b&DM$I4x>|QIcAd)b普E#+%>چ`rUr4k;EOfdO(W/: ]76~Ӣ:Ups|2kk>SQIN: ek y:&L7V1p2N6$5hD-G)adn&^:"*X4oy[,20nIs6eا 1ZՈʊ/j.UɭEls7:.b7sDz4M]gA 噂v+,{FȚޘOO
+Z
+'). OOmwѧRm[:綗c(2XG58`60?LrJI>] *'@ (%J I%vF8qOYMn%_3S] &I^doYvkʱ=[⻒·}O>yN븶6[XxKJ9-iJ܅ 3+K]#dSjH0TG<IA* 8xԕвƛ#l`&ș%Py&#wOjtQYEϋUhصqUO_ y(WܥBLl03>qP^o'L|u_
+$;ŶIQ‘}%Qםfk5g~(&zm}feѩ[.T`PmB9DD5+8Vr#;׳2!iH":A >sR,W֊1_(LuL Pk|O`WjXͺtɽG
+m_e`T+_A8j:v"~\0hvRʦXD)]8? g=G0-};w%~k"PxVa&;IPS>؃w^Kl|jN{;)=\n|+J:+ٝq̓~L.zơGN`7&&J]RH2RvG2Q&(JiߩL&&X SI\ SgwCS Řn?#ahwOHٿ7
+ aFdڨ2!ţA BL C.+4h]+Ng6
+W'ayKݻ(St*vHW[,Ƈ`@67[Qr zV1h*Xά?Də7Q҅xNz^D|+[衽:H oX~gIwN>0<<7 ӟ{a_
+:^m  :?7iNVT?uU^Pr60*~LA2K"V=^Ed7p=T^7ZeBJPtݖI}RE&^} TN#l |.B尔#|| gmAcLg;]OC.ۨ@zg 0dvT
+eֈ7-3MF 9n`v=`(uHܕqiEsܲ2'Ѽn \s>*89!x`q,`~<
+WS0.-K8 
+# 3xh6m;s
+KDvʫό DMKԟ_ ו"~(D&rMc4ƹϳ8A7T 6QP\8 [F%ٱ.
+YԆ_ TxڭE9_
+ƌag?T`;@`Jf Q>Zm}?Js]\"y8mG W 7*ߋ zrw7FeI
+Z\2CB*lDl1~MW 8W1 ~Yh& +< ?]mP1Md7sYFØĴ$2~}-nHS^ρ.h<5aW͈VueGl'%ubWr*rƭаDzOc r/V;fgw]WcL\ ^Wے}%:Z-ݫ <4 rXK"^?
+Ŝ UV/SVQn~9hiJ0}쫹1\F'FEO>S5g: eaXm+H>WU ^%ʬϷ\\gC
+> j]X+HLL.fAasu$3Xs'f.8k?~!|Fh@B6V_sf-qF_3w= %-RF3z Ͱ/Ɇs*DZav d ]z +On=~ܻ_
+jL(pUȀ?vKoeRlԈ,WtOnuT ի..\Wq{!-NrPq8lZN\rRy:Kf364I;fN&~yCNG4Ϋ&ڰ5{u/ΚF]g
+IɜaS((Dsگ&
+CH}
+ZS{T b'>U*SvAeNMlƆF=bd|9'68R*>فRD^rD{ nw?`.B{2k30YsBJ3
+F,[] oVǏ*gemH,qR
+
+HMy֢VcCM
+i7?͝.^t8sU E 1>5SLjEt$Tg:ρP4ed
+/^P?DkH-{&8|ZxSrH} n]IamZs21x|D]%l0C,X*Z^<{Zh:n9 :&97oÔj:se|ũXVDN&hTU̺{EW~:2Ge7Dn`q]\5<tE@/| 1bEH"?jOBxFk^&s\s;ʄ
+og:ɳAj% xmNsNZFc:YiU uwEvY7WԸ[<ć,O+i^ Ѧ|;g Em=nCg@:U u¼!6_#;G=ʘ(W[P"dCv:ٌT1
+nij1rE!kF/'\ !>:2 endstream
endobj
951 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 1960 0 R
+/Encoding 2068 0 R
/FirstChar 11
/LastChar 124
-/Widths 1968 0 R
-/BaseFont /BZOVEY+CMR10
+/Widths 2081 0 R
+/BaseFont /LBYBZE+CMR10
/FontDescriptor 949 0 R
>> endobj
949 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /BZOVEY+CMR10
+/FontName /LBYBZE+CMR10
/ItalicAngle 0
/StemV 69
/XHeight 431
/FontBBox [-251 -250 1009 969]
/Flags 4
-/CharSet (/ff/fi/fl/ffi/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/emdash)
+/CharSet (/ff/fi/fl/ffi/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash)
/FontFile 950 0 R
>> endobj
-1968 0 obj
-[583 556 556 833 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 278 500 833 500 833 778 278 389 389 500 778 278 333 278 500 500 500 500 500 500 500 500 500 500 500 278 278 0 778 0 472 778 750 708 722 764 681 653 785 750 361 514 778 625 917 750 778 681 778 736 556 722 750 750 1028 750 750 611 278 0 278 0 0 0 500 556 444 556 444 306 500 556 278 306 528 278 833 556 500 556 528 392 394 389 556 528 722 528 528 444 0 1000 ]
+2081 0 obj
+[583 556 556 833 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 278 500 833 500 833 778 278 389 389 500 778 278 333 278 500 500 500 500 500 500 500 500 500 500 500 278 278 0 778 0 472 778 750 708 722 764 681 653 785 750 361 514 778 625 917 750 778 681 778 736 556 722 750 750 1028 750 750 611 278 0 278 0 0 0 500 556 444 556 444 306 500 556 278 306 528 278 833 556 500 556 528 392 394 389 556 528 722 528 528 444 500 1000 ]
endobj
-1969 0 obj <<
+2082 0 obj <<
/Type /Encoding
/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/sterling/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/exclamdown/equal/questiondown/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef]
>> endobj
@@ -8104,7 +8826,7 @@ endobj
/Filter /FlateDecode
>>
stream
-xS|߶IǨضmض;VG۶mFV'Xokコz/Ϲ:SUs<sLTH i Mli
+xS|߶IǨضmض;VG۶mFV'Xokコz/Ϲ:SUs<sLTH i Mli
u1g{ sw
rSA>gɔЧ,>5Чv8?3 gџi/tjWӬ_i/ta~ڰw_i/a3O j+ӕ_/t~ߗ-e<2
0<en2љHPMf*}3ݖkx #{EXۭշUc$vDsq| ;U9 Tٲ ;0VY5 GtK
@@ -8163,23 +8885,23 @@ v\ 0
h AhՇ E||?g).UQaG}K=¾if>z&Dss9 XYUCSA
^ v/C7b<.z~U
z@R[St‰V&mZ&C" ܃7A}.ƀi9zG1[&lsfzM%N x|XՖw&B OhmȢ1Ǝo+0ץO)hF
-LM`j=FS$kͦf@˽Rw xqO[MJ;o@@,I;5l-y
+LM`j=FS$kͦf@˽Rw xqO[MJ;o@@,I;5l-y
endobj
948 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 1969 0 R
+/Encoding 2082 0 R
/FirstChar 11
/LastChar 122
-/Widths 1970 0 R
-/BaseFont /HXPLVA+CMTI10
+/Widths 2083 0 R
+/BaseFont /QRFOKQ+CMTI10
/FontDescriptor 946 0 R
>> endobj
946 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /HXPLVA+CMTI10
+/FontName /QRFOKQ+CMTI10
/ItalicAngle -14
/StemV 68
/XHeight 431
@@ -8188,66 +8910,55 @@ endobj
/CharSet (/ff/fi/fl/quotedblright/numbersign/quoteright/parenleft/parenright/plus/comma/hyphen/period/slash/zero/one/two/four/five/six/colon/semicolon/question/A/B/C/D/E/F/G/I/L/M/N/O/P/Q/R/S/T/U/V/X/Y/a/b/c/d/e/f/g/h/i/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z)
/FontFile 947 0 R
>> endobj
-1970 0 obj
+2083 0 obj
[613 562 588 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 514 818 0 0 0 307 409 409 0 767 307 358 307 511 511 511 511 0 511 511 511 0 0 0 307 307 0 0 0 511 0 743 704 716 755 678 653 774 0 386 0 0 627 897 743 767 678 767 729 562 716 743 743 0 743 743 0 0 0 0 0 0 0 511 460 460 511 460 307 460 511 307 0 460 256 818 562 511 511 460 422 409 332 537 460 664 464 486 409 ]
endobj
939 0 obj <<
-/Length1 1030
-/Length2 4000
+/Length1 916
+/Length2 2862
/Length3 532
-/Length 4701
+/Length 3503
/Filter /FlateDecode
>>
stream
-xWTSQ@ J.T@!^w U@!Бޑ&R
-;(]z"]&MQGާ;nߜַ1{j `Ab8ADPч
-#\Xwlp`GA4v@򯲭[+1O y FŠQxabBo
- sisHц9!Q`p,E`AMatsgWC!
-h{tUEz lH\?C+XKY[MXՃh!O/atH\XHXBuRA1H4q!%
-ZcNϙ~|!,C!ZK!@m&w\#C:SIFBo{|
-Uh}WC5zV;a'iUf^O#ݶҴ^Ed9c[};e.P\N՝Oo9 1V:eџ?7uIW.=WuEr5_3bJgzky/,N:.S9-,pͯsMX6\m LxN5M!L((ٚ<`;{(ZP^yC&W[K3gF%KWBaxK_.W(ǗJ;Y]7îβI
-r1
-6|D)}tE h/^U ~Q=r
-ڮ:_<=Ca̤V CR3KMgF-(;HVo@z ]V4(4ֻʬO|N~|kz"Is^
-<M9\t%~M,)>˚KHt=޽֐TӃH5TE`ҁ_FZEhiQM,/-,EQЎ}beߙnwܢ$!til( `ǾMy R!}]α4xek
-|~|OZy uILEh#$Z?(yr\WN8c'بHk$n_O2Kdzq@YJPSyEFb쫻<`Ψu[,$rRJFH Q@f7Fd1c%|kcTPĞ㈞P|gkV/A;tȬހ*p԰)ns]/drb0Tӱi6m@Fzcw=d  H9<I <STTFzOR<M(7:d~WQ`q[0=@ d0S&*<i8p<$
-y4cO>"}"G[}²V ͶnxM8B8<(8ulБ
-|vFSYSŋL7)CtoZ;$Cm4j;{rO\qٕ}Tu(<
-3wbٿ/+冾"LҕB6gg⮼ (c}.ht/ϗd f+mؗ6Q5<zBdL
-ςxRpd 1\9xȾ>{E =N=uhR-ݝO+s܈\|-)o ?f+2#;|'2W0u!Ԩ
-97}6q|J(^ AMdreԯ
-Binsc=XEhOql֬P{^'=2$<%MS
-+իn~ o4m1ݳQsõ[}{`iyw*Ms[ǣ\UIHUrWwۜvEB;'QKX﫼 fsИ8\J#QW85aHP7iV}=QЎO=xuEE)',
-
-lKm3)Ֆ1R=VQ{1
-, zV l9gC>ڼ
-l%r-=6b~\Gv<H`נJHUu<iA;Lr];a6@VfV37fyC+JO2lj۫&xd_բ'>fWUZ3} Ve @d'G0H@4~
+xRg\JDQKtTB/GzG2IRDR%HSb@.`DzAQ#E"zO}z7ekҒvzX'hL"RQp6``a:Hnii2@$!j(--G 6R[0 !3.
+cX$">K.#ԯT<CnI(c>?Jɀ J,@,D%Z5`ȟ` A5D|
+ɪ _ 5
+{K8}XV Ďy_ay4kMM!6OߟOښ:[/⼔eZcʼUd3ͥ#Ã|k9C&$Z]i5ّYx*I[X?3V5y ,-uagb8*>Hj
+lr^clޯ?gHݝ34&qSEU¤͍9tJLJ&qxntpPKᐚ0kGU3ŹB.@xc\i9r<{Jml>_93
+DjA/0Gqv6`~z* л}՛ǒ;'mz::Zi5]$.VƮP9y[ |+ptPB,Q5:t|,H?0pP[Mqޠ`{KVQM&Z)6rԌ%ͱQ^Tv.yÉcz^VS1kQsSg@h}z6.Uj5kU:;EeArAE>Ɵ\½0uE-ZXd: MeK44[C{ˠ -E(l9GW%OT.MM%,jqYS8Ylaq5Ƀy _Ks<>5WJ>Zv _]~-Vikk4E w )ԇ?zwepz*oB!PKlAݙp5;Xܳgv FH Cn߽YJ·z!i/n6Ygꙴ0
+Lx(ZB>|}1CCk!]%²V؆$}|'wki;q̏ X>b4Bs9(5.֗/
+<gWqq|\z!љDx80SNdLkֻ6jtj%yEՕGywVPMj̲K ݭ/ɔ#6K(F,V@(wRp5` *OY
+Mv27dY5a vJq~/jg|3uЂ;*e.HۜnfEs&>+KSƹCϋwIDo͎ѪܷE'EIx>D#ͱvq}Q
+d 92svr
+w%m-l5ВZ7lC`"J۸NlGx2D<ZIW{")E%npj>@(c>D(CL0W<%ԋ/V}3Nе"&m >;3+XӢpN;|]hWwm*GKD^d
+c3vʮdc*$ۭj 0%Nv G2&͓rqX]R1|koLoJ|xќ\N#<M{tC-iv-XM}|210VrBt?|Đ)$onendstream
endobj
940 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 1960 0 R
+/Encoding 2068 0 R
/FirstChar 48
-/LastChar 121
-/Widths 1971 0 R
-/BaseFont /KDLGMV+CMR12
+/LastChar 117
+/Widths 2084 0 R
+/BaseFont /ZLSHQH+CMR12
/FontDescriptor 938 0 R
>> endobj
938 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /KDLGMV+CMR12
+/FontName /ZLSHQH+CMR12
/ItalicAngle 0
/StemV 65
/XHeight 431
/FontBBox [-34 -251 988 750]
/Flags 4
-/CharSet (/zero/one/two/three/five/A/B/J/M/S/T/a/e/h/l/m/t/u/y)
+/CharSet (/zero/one/two/three/five/A/g/h/s/t/u)
/FontFile 939 0 R
>> endobj
-1971 0 obj
-[490 490 490 490 0 490 0 0 0 0 0 0 0 0 0 0 0 734 693 0 0 0 0 0 0 0 503 0 0 897 0 0 0 0 0 544 707 0 0 0 0 0 0 0 0 0 0 0 0 490 0 0 0 435 0 0 544 0 0 0 272 816 0 0 0 0 0 0 381 544 0 0 0 517 ]
+2084 0 obj
+[490 490 490 490 0 490 0 0 0 0 0 0 0 0 0 0 0 734 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 490 544 0 0 0 0 0 0 0 0 0 0 386 381 544 ]
endobj
936 0 obj <<
/Length1 1972
@@ -8260,72 +8971,79 @@ stream
xUX\]h;
\w` ݃Hp <;wwS:ϡns=sɦ&WRe6%@NLXy",
4
-00v,lq5#ll_C.@G,I
-^ufh`7s
-G -
-җVdjÑ$
-նe98OIWbgq{3U^3ECCo˂8cm}m*
-hsR>Y=̜%bZ٪ gDZ
-oBU&VF_5Y.-SM'q:\<co L>fxSVpَ#:T[
-kUÕ"OjRd|<zwF)6nºMRѼC[0^'v]q~/8?-t]69݃Łg!pKS=tB*)㎷RGe'<]V[oI
-1|Dž:Ca"fm=9Wn#R۔e|/MGnH:Q`D.$NӶOG Œ0UQ(l$o6eͥJ)\?N^ͩ,6.z"36|*oKooS& ^oP}{rl3K |Mk&@~acWvW-4~Unc54%P rwSRt0h?ʞwE*ؠ <.?X@M>d@s#'zrpOJ?|4TNKPK|`7`ϙRK(͸6ӷSeNQP5.kr
-SHOߩ&}|5&YG)#CE`eY)RCTdpQK/%_EQvSTJbgb.CN\ꣁv17>
- kB
-h&nf+mDŽv3ڪR?h7V0;tӪ$'J@%bڍq$)°6M"9=LC5t ]ԛu9P$ө}60d!"Gn,,:XzC4L DAۉxz+I-0a+AzdmRs훫eSc2Br2Z,mďJ~2vzhjO (fK'?oe+[W"rlƆ#[Jݞ@{hNBfg7dK} =dAܔ(ecl8{%'_3jHP9m?Omx(2͛} *c%̔$cXY
-p/ O#jQQ>:?|K4|{"c|h3KWra3Ax8
-D-b|0E]WjB8C+F}rVpa!V SC!Ge1Ia_1zy:(+^@Ls׻֍3-~X/^FdQc,J8-ָR㊥y)ka`KNi`uQ!#:!z'xå2y*!m.wB>5ٵj͗. )0GAsxz .c;㖍-#j`TX[tinP9MZOCգ9H0e2ɯxAVaQ&mT4>SQ,6gP.l . P7@c#~Y{<Xzho(j0Ù@}rp
-ؠ4MHVQmnAC*TZirpS5O@GA(q@V¸
-4ܨVò%JfwSuC[r}ӵ k1j;rȮ]Q/g7$I@Ӧ R X_YM2c>R~h;cbE 9*Ete%״5aVJd5Q:_;2h:\`PX°|JXtV[xfŪ]sl!iK
-Asj+geUgO3Uyu߅Vr$OgdiyD+|
- -/S-"'L ;^osb<"|0Oh"jnA rP`_tEމ[A6ųc1
-ac/Kּv΀ic?}jDmy_Ӧ0xF]z 8eb]g`WI~sj; ,E[ӻ(DKAB{֔ +;M
-nGaVxqS_ۛĕGA6|p#$3~~☜93hō67SE{uڴR@ qQF EM(v3t
-acIR;5aqApKov&cH.W:8G{*E"OkP6i:k6
-R|"h|q8$5ff灴3‘Ù[>]\fd)n}՞!_#${f+֒Ͽyol"Wfu)۹oƆ~Kp] _ PI]_ۙˆn_T{7rur<,P+8\e!$pc>5~(*Ǽ<bt!I)+|:<7w9(ÌUv]2()+E.<A)WoV`n`)
-nw0iY vmd#A}&Ek<e2(s7#4U <aVH*pHn:-<4KQ*Mu^3?'.EgʢW=%(E_|NjPEȼnI5%RV1o-5XAּ+%ߝ4((ll|ňkk,-2IY/loggoyKS`n\
-Gk2KE&2rbdW0AEnh.$o-~PBrUC"w  `|
-]] -|
-TNl3iw.V))67eGLF3qT3l7;&C?u91ѭX>wjZNE ޙ 8-I%Iɮ<،7QC5OGéA73yN}&ND>:^*Ye_f"w*p͋ۨ[8MTc"l|8*։,p&S3l]<P_t3*ě!g5% y,z׋-9SLX9Ků<|헫i|C-i0LbZYbmM&c/[ܼo͉yb5 e'|>k$p [/!#̇_dU&` ;B5u!8!dD_W:jh`"Puņ% WTFzįuNcbV
-{<Tm*2mO:! !U/>ۆ.;ի]J;Z색$Tj2qlomQ"IaA_=ğ>3<4x.7$b|tPa)PNB$'M|{
-₍(aqH6 ےAM7|Fi!Hx&cbgv5 K9w6jThork'm<# 4(8BmpXU% |g=@zhx'LJҎL q6ZwdyU@9FN;gX-z $/cBDv"rW>}9&V*k3#jDzHwC*Et/U(XfX>]`dKlYӈY1<U|rxc߆ɹ =̝,%LU 4e=[ЪQޟamld";Ψtʾ?@ɽ+2d:dp;hl[q˶Q=UFcu4E
-ai<ZuS5wD- 7@yT&/~}̙o1|im d('|x9v:iT:i&[uOͤeQT7Ve57LmLFL}!lo
-ڳ6&-/ѯxZŋ.B] WxN: L
-SS<({e
-ΒJ
-HvE QtYn]\#yɴ$a#N+]Nܵfܛ 6}=/o?f ;5gj*eCYtP~x9bta:,
-WRbҒ#^SS#c$tZנp^O0k[>Ɠ텬蝦9j6̦QIRtmG9珘Q0h˓< AϡxI:nEU;I-r>Yy!w||ZLQn+/Z.F'Dvyy.@㚾%o+ noݩ:MLj)%ړGY
-q0œoKW/JcU!6n8ͧwI[C
-GKp<y$%\@FJ 7[[٘-h/b\K W˔gI4$HCo40\2i/?햇q{7<<-߽Av:oɐ,p/\7BP4@ù2Ϭ*ЁdCIQzeudT;w- (H}y\{ٴ61ѻ}n_gd2+fRujEV^D96 6Fc7Sĺ-Zr:i 7l$P[BiS
-׻P.mq 1)GvpY|<;((du}ׯ
-v$\1Hj,
-y%dVkV*(wHaĦ+'$ۄcPJ׬8nNsׁ?v氐1`"ю΍ Xۨ~7/6pxK
-R
-mˤH[]Xc+98
- UX3 #=@6 ݄ϬM'[&
-q+dFBc5v|}ljJ5~J6Qf!0'E'+Iu "}Ltp
-}M߄gyQcLoebt<&!4ܽ 1i=5:[RXmIݶ/xa GP@ ~b jUWuH ҟA#Y h^whʯ< 1
-rټ ̡nJvȆ:S1(-K#vStf-
-}3<;b?=)!aJSA
-b %Wql A"汗>Dk[H_D6QpL_pB#?nKL%| n\4gBQM=n'u,̈nNL).C+1 B Ee8O&sIo^Rn3ee8??:i5ca'Zo׍QUˑˊi"rRGQ{0ɚS@ O*PPcژ8(?]3 ~w%lgHn
-Cvf ˷J03.(7/R44"Mam'B|cj$ <ms%)W2Hߗ|G4g^a)/ToAPCWs]^'͢=R[›.-0K?.⮌֘7pEƿCo=6(cr>,U@N(DeNmnelrV& >)>e6a./n Cc89m]81Q\~02qC^&en}ZF魗.ڗU(K$gE0/V~v;׳8_h~7e-Afrc-I걡z`#=-ifգiC
-~X/uf}#k*?ADٯ̀r";2j2d @nSff/b
-Yr%9y[sCbpz5+mdTI7c߅3zdtaTE*/f1{p8&E\X=yԦ_!Rf/F(ہRӉ'Vu#OwLM Nh59_^%"kYK gs~7^%ls.# # j-.)`!nй4i;@qc\`?MYo_@[sBbِVe,_+[ @6VH_Cendstream
+00v,lq5#ll_C.@G,I
+N.;xw
+5n`g '#
+v3fc~ی41 ?/WdK2 5uNYEY`',el|31`+_ x!/gw`+l\B_/[`+|ED@nL>j?nk>?bCn?Qcgb/6
+h<75mrp
+O3:dO"Lkl`#&JImzV{hy.h8fE\MY^{ ;J a5p(P}dB҇ ]b-}|ݪ[ڼ>C@R6$x2eK0<nZN凘j0Pг0~Mjuh|t {J9+J4UA*/2c9a-O
+ L$0Pk=\Z6N u걹x~@| &Ft&ɷ,4 ͇+Ew*" x28Rvm܄u9y4<je=`LOV
+xCp_pzZmlŕW}syB{)UR*oOBU[y8h:?ߒR8c 3u`E9T>zsܺGr)oS__ݛȏ@ݐtr ]T=Hm('2%a4ī&Q\ٮIj>m˚Km/S=4~SYlF+r]f3DfImTxߖbDM, =8?ޠfߗ4yuA5˙L팯#+ZhlMӫ0矟QDjhJ(߉ e`s~=:TA.xX[/$]4,Ё|B@FN,C:~i8ϹVPd199!xn<Q3mPq-lo˶՝6QϑkZ =^1]T y^T(P"ʙCM(lUMbbe@}!G G*`5˥ p D*Cz`y뵕ttA)X9vZTl:evёϟSMyU'8k<M0&ŏRF&ʲR6֫߇ S9# ,_,9
+0iKKΩ)":X[k]BP3Gbn}0  J +1녾aMĔ1o[VAe)CdOZGQ~J=ҒfH}^F?ڔgΨAEneI?QYX9YBa7Nl[!M
+n`w,ikUIOUKN16LHRRa'9m#ENsz&_k9,F7rlHSBmEaBD6XXDuPesi( @d;M4g-Z>a?VأZ-a²W>>"ɚۤ7W\o%Ɯ5dhdֵXڈdsѮ՞AP̖N79~8H G3WrïDby%ٌ Gq7=5М">
+99IFb /I}Q%%޴XDe^e˘
+a9h_7AQZ{fXI3_QT'ԗ#2iQ8e1
+K4u=r k>brwD]_ΌoH&?MU}#9A,4d| ֥vC-xŊBsTKi-j6Uj
+A uvdul ڹ 2a{3:82US
+5<IYyCj0&/eAo Wʪ6$(՟.dg. Hp&
+~W ?u {e;&ޓǴx|S17v.vxGr-~r, Zn_!xZ;2y3. |1ZZ"<Fq[^[DN^Av7OxE*a
+ E݂
+ŷ,lgw
+(b
+#^Zieykӈ~~?2B'Ma?g$*/Kfmqj R3vY6I ·`w!QJσ*)Vw^ݎ:z%7+cmIG:Hf!&53@?19sfЊmvo
+3L7xdd&Q
+ooFh>.#x¬T ᜑ^ݜ7t[,3Yy'iUzB=52fjտO\6, *\E{8KPȋ&Y!Ԡy̓XjJF c~[bkby#5WK;i@wQ*Q<i*3ֆYZd6o!ۓ^ޢ3h66<y"e
+ <
+RX[!
+&qZJ]yok>S1n>fΝLrŝ.;9|t-U>ET ŷQ=,~;pE/z+"qVUJY*{GbM<o'fٺyF-m#?wfUp!j7CD%9kKLXʯ[r&rw b_yyŸU=/W ȇZ&`VŴ 7')ɳZLnh_4y &9P};k%PO}r6HQC! ^ɳCG4-LhSa@vjB7q SCɒ݉ZuԦDH 9&Kr0`D_ǨŸ
+<]8k#U,y\'"Te۞tB<# H3BP3_`} g]w%;nW<8wI>Y+d>:D=$)Â&z{?y}dW÷gxh]nH>fF(S\(eI/O<( w#
+QJ/l1v%nBl!L0j@sl2ըќJNң ʳ) x.GhhP*rLIqSnJ2._{(O"1XlWl'я1Z/r؉wrZx}mgH_>DŽm@E,};sMUdqfF^鉀;
+b5UZ{X_P: Ǚ16*$>|Ȗٲbxӫ Ǜ0)TƎ? ]s}z,;YK.hzU壼?2Dw Q_}\U'{'kW9et8ww|Ѩ\vlm{ "ViP"yJ%AkH>Z5nML^3+=c,QN*rt*uMr)"If G#n,7 jToNڄ# Bdniq[Z?Q>BB¼꒤儼T<R HRX)H\3rvxصѪx.A40CI#ᣏ<]~"?n
+54X;<^'yN]-mۗ|Rgn]D!z4?i%ݖ ]V̻xc#&$r^zVX=S"s{9^f^In42-N']
+|[L^59Z = M|ZD]$9uLXvJEj
+sB$pSԯ\vxhԁB+#(N挌I F*>ް'|s)iGJ`"Tix:$?x} cnA Nŵ'^Zq\I_JPu=tLa)P+;3C* F)Wkh7! ɕׇNuO<+c$?N'zkJכFjf{>,'%
+JİAPZnAyd뫓`hAknKEh G<+2q?J~)@%7U6XYUrKC¤Vci|0r
+F$[K~G Oz^#Im)D<ir|uz\3!_M֗c?/E_ͯiO #} l"VIboGN/.~@HqQ0vqb>n9NR1`ŀ'}Xˡx 4}K䎪n1c,oB\A4jx)ٙd h񤸫)"zDI#A;遟e/M,#Ri5..ՋPXq監.R4f?WGhiH?Fk<cW(WQk[7!l({^Ahk @vXk&:Taw}e;ʚ.:Sr_tYJ2*Ӭ󹶭r{v,M5jZ"6.GKB9Mϗ:Jsl>EoM~O 췜E7OLVD?_ sv47"h ,q_g;|4~$ ;HeaZj흤_P/> <A2 B9GX8
+y<w1ߖ!,MB³K]說\Uo_gqˊ֭~vQ!7͖,`E ni94t<?Kke%wN+c~Zׇ?p*fŀkbq-? q(^yҹFրgD =KC!W>xSgST) wg~HvZCwA6Wx˩42vx,.)V1o[϶q&wWz]w?>-65/wtf׃ĥI
+K{{%<xQeϬL%*.=&RqMmĤ%G"/L セ;&%:FnHf$A༞`|n|?w'M Y_CI1;Ms lM蓤x=$ڎ
+=vS]9s1a pі'y
+2,hqvcJM5緖5iԐBt
++ɀB8Tr6!E0O%v?ÂP%
+Ƕ1GnCeUTl3a19Ja"}ADCӡĵ̕pB]r@'/D%$)a:*T;jB d]Sw(Cg%6ry.Dĭ6پOw-2K\1rL{Ry0w1c7\Nz<-H5/ _?}-@&uGK,1Wt"GEVEPqiUAkXUGi9bBąa9oT7^ڷƲVC:mܾqO;w< &
++gs'$bm>[N̢%Q6y"BP|[G\4xH
+h`7ѹe:^~ǟ-G%2nx~-4 y[{rud(!Y^;nhseY'"TɆjz˼Ȩ*3ww[*QJ=!2(e5iji-mcw9SW!(ݺm
+]۬%}b"@S%xvPhQ"P#q_\I:b:X'tJHy vAaɬ֬T Q 2OV{MW#4NH ozYqܜ{b}a!= Qc6E4Y;AϷQnz##_.m
+#14Z3zRu$$<}Q^!
+n#B|fJ
+V*i iUYjZIzTr *hq\a]7W`i 'HR%>\k_TwMh2n4ϑGdj[zߢ@Lkce~\
+EY9htuma'zy|R5
+:$R2!,i\{ Abo=RMc,1݇<| _Se7Ծf&߲8
+NVKhU9 |詸
+R*
+K6i~@cmfJ8*3M෹wwϱ8Hmlrc2dSMba&Wl?~vC>F|XDgڭ_CmR0f @W( -yuTǖ!jl5A/ՔjNq5lV4ZB`4N6'NV1E>:@ πe=oPwGFxLB~i.#{2'bzkt2Y9ڒһm_:'uuI"Ƌd@B&)',?F,e!,ДJє_y^'PGc&2y= Cݔdɑ ub)PZ>F)Px3[Bfyw~FzSPC"$:7Ô.z1rK|@Dc/}ķ^/ +l>Huf7:F~ܖBJ>+@:*iτ3;{fOX :5ԫS\ZV0c@& q6pz:M &"ބ;hfʄ{q|~tj&ѳXNޯV#DHУ`N5NU
+áƴ1q)Q~V3f|oP?Jΐ( |7/—o`#g\]Po^ S'ih'HEEEFOE .I@y4n 7B%3hKySeۑv׳/*ǏUi|ϼRF1^F5ނ*ɡF̷b?$2mNQE{897Ǚ]Za>~Y ]]1oV{l$P5#1}XϝQ˜8׭LK}R|8`mv]^wʇ3pr>R+9^pbN&0eae↼L^\[/]/4PIΊa_X0
+;vg+q:oJ'Zǀ[bcC:F,N{Z$@Gӆ
+{{S:GS m(=¶''+Xc
+Q\&3`<qyeǏؓ1KSJ1_㞌JAGf!|Äz(
+n#^v̲GגUL[_E1"Dvd4&d&b+ݦ-^N&Jr"攇|&)M0jk:VT)(EG#n
+ 7f 9_
+U^\;b$Dp#M2LzKMBV-A*_(G.P`)O2F \VtajtsJDEֲdioJ<DZ"6\FFZH]rOS,ַCܠs+jivbǸt#~
endobj
937 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 1960 0 R
+/Encoding 2068 0 R
/FirstChar 11
/LastChar 122
-/Widths 1972 0 R
-/BaseFont /VCXQEM+CMSSBX10
+/Widths 2085 0 R
+/BaseFont /BLCWEH+CMSSBX10
/FontDescriptor 935 0 R
>> endobj
935 0 obj <<
/Ascent 694
/CapHeight 694
/Descent -194
-/FontName /VCXQEM+CMSSBX10
+/FontName /BLCWEH+CMSSBX10
/ItalicAngle 0
/StemV 136
/XHeight 458
@@ -8334,123 +9052,153 @@ endobj
/CharSet (/ff/fi/fl/quotedblright/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/question/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/bracketleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z)
/FontFile 936 0 R
>> endobj
-1972 0 obj
+2085 0 obj
[642 586 586 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 558 0 0 0 0 306 428 428 550 856 306 367 306 550 550 550 550 550 550 550 550 550 550 550 306 0 0 0 0 519 0 733 733 703 794 642 611 733 794 331 519 764 581 978 794 794 703 794 703 611 733 764 733 1039 733 733 0 343 0 0 0 0 0 525 561 489 561 511 336 550 561 256 286 531 256 867 561 550 561 561 372 422 404 561 500 744 500 500 476 ]
endobj
941 0 obj <<
/Type /Pages
/Count 6
-/Parent 1973 0 R
-/Kids [930 0 R 943 0 R 960 0 R 1024 0 R 1069 0 R 1123 0 R]
+/Parent 2086 0 R
+/Kids [930 0 R 943 0 R 960 0 R 990 0 R 1026 0 R 1070 0 R]
>> endobj
-1229 0 obj <<
+1180 0 obj <<
/Type /Pages
/Count 6
-/Parent 1973 0 R
-/Kids [1176 0 R 1231 0 R 1280 0 R 1286 0 R 1291 0 R 1306 0 R]
+/Parent 2086 0 R
+/Kids [1125 0 R 1182 0 R 1235 0 R 1282 0 R 1287 0 R 1293 0 R]
>> endobj
-1321 0 obj <<
+1314 0 obj <<
/Type /Pages
/Count 6
-/Parent 1973 0 R
-/Kids [1313 0 R 1323 0 R 1328 0 R 1335 0 R 1345 0 R 1360 0 R]
+/Parent 2086 0 R
+/Kids [1304 0 R 1316 0 R 1320 0 R 1328 0 R 1334 0 R 1339 0 R]
>> endobj
-1393 0 obj <<
+1354 0 obj <<
/Type /Pages
/Count 6
-/Parent 1973 0 R
-/Kids [1380 0 R 1395 0 R 1411 0 R 1428 0 R 1446 0 R 1461 0 R]
+/Parent 2086 0 R
+/Kids [1347 0 R 1356 0 R 1365 0 R 1388 0 R 1395 0 R 1408 0 R]
>> endobj
-1484 0 obj <<
+1432 0 obj <<
/Type /Pages
/Count 6
-/Parent 1973 0 R
-/Kids [1479 0 R 1486 0 R 1495 0 R 1502 0 R 1508 0 R 1516 0 R]
+/Parent 2086 0 R
+/Kids [1420 0 R 1434 0 R 1449 0 R 1465 0 R 1480 0 R 1497 0 R]
>> endobj
-1526 0 obj <<
+1511 0 obj <<
/Type /Pages
/Count 6
-/Parent 1973 0 R
-/Kids [1520 0 R 1528 0 R 1532 0 R 1542 0 R 1559 0 R 1575 0 R]
+/Parent 2086 0 R
+/Kids [1503 0 R 1513 0 R 1518 0 R 1524 0 R 1531 0 R 1538 0 R]
>> endobj
-1599 0 obj <<
+1552 0 obj <<
/Type /Pages
/Count 6
-/Parent 1974 0 R
-/Kids [1588 0 R 1601 0 R 1611 0 R 1620 0 R 1626 0 R 1632 0 R]
+/Parent 2087 0 R
+/Kids [1543 0 R 1554 0 R 1558 0 R 1568 0 R 1580 0 R 1595 0 R]
>> endobj
-1646 0 obj <<
+1615 0 obj <<
/Type /Pages
/Count 6
-/Parent 1974 0 R
-/Kids [1639 0 R 1648 0 R 1658 0 R 1665 0 R 1679 0 R 1691 0 R]
+/Parent 2087 0 R
+/Kids [1605 0 R 1617 0 R 1627 0 R 1635 0 R 1643 0 R 1649 0 R]
>> endobj
-1711 0 obj <<
+1660 0 obj <<
/Type /Pages
/Count 6
-/Parent 1974 0 R
-/Kids [1700 0 R 1713 0 R 1723 0 R 1732 0 R 1743 0 R 1750 0 R]
+/Parent 2087 0 R
+/Kids [1656 0 R 1662 0 R 1668 0 R 1674 0 R 1679 0 R 1685 0 R]
>> endobj
-1766 0 obj <<
+1698 0 obj <<
/Type /Pages
/Count 6
-/Parent 1974 0 R
-/Kids [1759 0 R 1768 0 R 1775 0 R 1787 0 R 1793 0 R 1797 0 R]
+/Parent 2087 0 R
+/Kids [1691 0 R 1700 0 R 1707 0 R 1713 0 R 1720 0 R 1730 0 R]
>> endobj
-1805 0 obj <<
+1748 0 obj <<
/Type /Pages
/Count 6
-/Parent 1974 0 R
-/Kids [1801 0 R 1807 0 R 1812 0 R 1821 0 R 1830 0 R 1835 0 R]
+/Parent 2087 0 R
+/Kids [1742 0 R 1750 0 R 1757 0 R 1765 0 R 1775 0 R 1783 0 R]
>> endobj
-1846 0 obj <<
+1797 0 obj <<
/Type /Pages
/Count 6
-/Parent 1974 0 R
-/Kids [1841 0 R 1848 0 R 1852 0 R 1860 0 R 1866 0 R 1872 0 R]
+/Parent 2087 0 R
+/Kids [1791 0 R 1799 0 R 1807 0 R 1816 0 R 1821 0 R 1829 0 R]
>> endobj
-1881 0 obj <<
+1841 0 obj <<
/Type /Pages
/Count 6
-/Parent 1975 0 R
-/Kids [1878 0 R 1883 0 R 1890 0 R 1895 0 R 1899 0 R 1903 0 R]
+/Parent 2088 0 R
+/Kids [1836 0 R 1843 0 R 1850 0 R 1858 0 R 1868 0 R 1872 0 R]
>> endobj
-1919 0 obj <<
+1879 0 obj <<
/Type /Pages
/Count 6
-/Parent 1975 0 R
-/Kids [1914 0 R 1921 0 R 1929 0 R 1933 0 R 1939 0 R 1946 0 R]
+/Parent 2088 0 R
+/Kids [1876 0 R 1881 0 R 1886 0 R 1890 0 R 1895 0 R 1901 0 R]
>> endobj
-1957 0 obj <<
+1916 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 2088 0 R
+/Kids [1911 0 R 1918 0 R 1923 0 R 1929 0 R 1935 0 R 1939 0 R]
+>> endobj
+1952 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 2088 0 R
+/Kids [1946 0 R 1955 0 R 1968 0 R 1974 0 R 1980 0 R 1984 0 R]
+>> endobj
+1994 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 2088 0 R
+/Kids [1989 0 R 1996 0 R 2001 0 R 2005 0 R 2009 0 R 2020 0 R]
+>> endobj
+2033 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 2088 0 R
+/Kids [2024 0 R 2035 0 R 2039 0 R 2044 0 R 2052 0 R 2056 0 R]
+>> endobj
+2067 0 obj <<
/Type /Pages
/Count 1
-/Parent 1975 0 R
-/Kids [1952 0 R]
+/Parent 2089 0 R
+/Kids [2062 0 R]
>> endobj
-1973 0 obj <<
+2086 0 obj <<
/Type /Pages
/Count 36
-/Parent 1976 0 R
-/Kids [941 0 R 1229 0 R 1321 0 R 1393 0 R 1484 0 R 1526 0 R]
+/Parent 2090 0 R
+/Kids [941 0 R 1180 0 R 1314 0 R 1354 0 R 1432 0 R 1511 0 R]
>> endobj
-1974 0 obj <<
+2087 0 obj <<
/Type /Pages
/Count 36
-/Parent 1976 0 R
-/Kids [1599 0 R 1646 0 R 1711 0 R 1766 0 R 1805 0 R 1846 0 R]
+/Parent 2090 0 R
+/Kids [1552 0 R 1615 0 R 1660 0 R 1698 0 R 1748 0 R 1797 0 R]
>> endobj
-1975 0 obj <<
+2088 0 obj <<
/Type /Pages
-/Count 13
-/Parent 1976 0 R
-/Kids [1881 0 R 1919 0 R 1957 0 R]
+/Count 36
+/Parent 2090 0 R
+/Kids [1841 0 R 1879 0 R 1916 0 R 1952 0 R 1994 0 R 2033 0 R]
>> endobj
-1976 0 obj <<
+2089 0 obj <<
/Type /Pages
-/Count 85
-/Kids [1973 0 R 1974 0 R 1975 0 R]
+/Count 1
+/Parent 2090 0 R
+/Kids [2067 0 R]
>> endobj
-1977 0 obj <<
+2090 0 obj <<
+/Type /Pages
+/Count 109
+/Kids [2086 0 R 2087 0 R 2088 0 R 2089 0 R]
+>> endobj
+2091 0 obj <<
/Type /Outlines
/First 7 0 R
/Last 927 0 R
@@ -8459,7 +9207,7 @@ endobj
927 0 obj <<
/Title 928 0 R
/A 925 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 915 0 R
>> endobj
923 0 obj <<
@@ -8477,7 +9225,7 @@ endobj
915 0 obj <<
/Title 916 0 R
/A 913 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 867 0 R
/Next 927 0 R
/First 919 0 R
@@ -8566,7 +9314,7 @@ endobj
867 0 obj <<
/Title 868 0 R
/A 865 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 855 0 R
/Next 915 0 R
/First 871 0 R
@@ -8588,7 +9336,7 @@ endobj
855 0 obj <<
/Title 856 0 R
/A 853 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 827 0 R
/Next 867 0 R
/First 859 0 R
@@ -8640,7 +9388,7 @@ endobj
827 0 obj <<
/Title 828 0 R
/A 825 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 811 0 R
/Next 855 0 R
/First 831 0 R
@@ -8669,7 +9417,7 @@ endobj
811 0 obj <<
/Title 812 0 R
/A 809 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 759 0 R
/Next 827 0 R
/First 815 0 R
@@ -8763,7 +9511,7 @@ endobj
759 0 obj <<
/Title 760 0 R
/A 757 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 751 0 R
/Next 811 0 R
/First 763 0 R
@@ -8778,7 +9526,7 @@ endobj
751 0 obj <<
/Title 752 0 R
/A 749 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 727 0 R
/Next 759 0 R
/First 755 0 R
@@ -8821,7 +9569,7 @@ endobj
727 0 obj <<
/Title 728 0 R
/A 725 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 259 0 R
/Next 751 0 R
/First 731 0 R
@@ -9670,7 +10418,7 @@ endobj
259 0 obj <<
/Title 260 0 R
/A 257 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 251 0 R
/Next 727 0 R
/First 263 0 R
@@ -9685,7 +10433,7 @@ endobj
251 0 obj <<
/Title 252 0 R
/A 249 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 247 0 R
/Next 259 0 R
/First 255 0 R
@@ -9695,7 +10443,7 @@ endobj
247 0 obj <<
/Title 248 0 R
/A 245 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 207 0 R
/Next 251 0 R
>> endobj
@@ -9763,7 +10511,7 @@ endobj
207 0 obj <<
/Title 208 0 R
/A 205 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 179 0 R
/Next 247 0 R
/First 211 0 R
@@ -9815,7 +10563,7 @@ endobj
179 0 obj <<
/Title 180 0 R
/A 177 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 87 0 R
/Next 207 0 R
/First 183 0 R
@@ -9979,7 +10727,7 @@ endobj
87 0 obj <<
/Title 88 0 R
/A 85 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 83 0 R
/Next 179 0 R
/First 91 0 R
@@ -9989,7 +10737,7 @@ endobj
83 0 obj <<
/Title 84 0 R
/A 81 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 47 0 R
/Next 87 0 R
>> endobj
@@ -10051,7 +10799,7 @@ endobj
47 0 obj <<
/Title 48 0 R
/A 45 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 23 0 R
/Next 83 0 R
/First 51 0 R
@@ -10094,7 +10842,7 @@ endobj
23 0 obj <<
/Title 24 0 R
/A 21 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Prev 7 0 R
/Next 47 0 R
/First 27 0 R
@@ -10123,2028 +10871,2140 @@ endobj
7 0 obj <<
/Title 8 0 R
/A 5 0 R
-/Parent 1977 0 R
+/Parent 2091 0 R
/Next 23 0 R
/First 11 0 R
/Last 19 0 R
/Count -3
>> endobj
-1978 0 obj <<
-/Names [(CodingSuggestions) 1007 0 R (Doc-Start) 934 0 R (Item.1) 1295 0 R (Item.10) 1317 0 R (Item.100) 1554 0 R (Item.101) 1555 0 R (Item.102) 1556 0 R (Item.103) 1557 0 R (Item.104) 1562 0 R (Item.105) 1567 0 R (Item.106) 1568 0 R (Item.107) 1569 0 R (Item.108) 1570 0 R (Item.109) 1571 0 R (Item.11) 1318 0 R (Item.110) 1778 0 R (Item.111) 1779 0 R (Item.112) 1780 0 R (Item.113) 1781 0 R (Item.114) 1782 0 R (Item.115) 1783 0 R (Item.116) 1784 0 R (Item.117) 1785 0 R (Item.118) 1908 0 R (Item.119) 1909 0 R (Item.12) 1319 0 R (Item.120) 1910 0 R (Item.121) 1911 0 R (Item.122) 1912 0 R (Item.123) 1917 0 R (Item.124) 1918 0 R (Item.125) 1924 0 R (Item.126) 1925 0 R (Item.127) 1927 0 R (Item.128) 1936 0 R (Item.129) 1937 0 R (Item.13) 1320 0 R (Item.14) 1333 0 R (Item.15) 1338 0 R (Item.16) 1339 0 R (Item.17) 1350 0 R (Item.18) 1351 0 R (Item.19) 1352 0 R (Item.2) 1296 0 R (Item.20) 1353 0 R (Item.21) 1354 0 R (Item.22) 1355 0 R (Item.23) 1356 0 R (Item.24) 1357 0 R (Item.25) 1358 0 R (Item.26) 1363 0 R (Item.27) 1364 0 R (Item.28) 1365 0 R (Item.29) 1366 0 R (Item.3) 1297 0 R (Item.30) 1367 0 R (Item.31) 1368 0 R (Item.32) 1369 0 R (Item.33) 1370 0 R (Item.34) 1371 0 R (Item.35) 1372 0 R (Item.36) 1373 0 R (Item.37) 1374 0 R (Item.38) 1375 0 R (Item.39) 1376 0 R (Item.4) 1300 0 R (Item.40) 1377 0 R (Item.41) 1378 0 R (Item.42) 1385 0 R (Item.43) 1386 0 R (Item.44) 1387 0 R (Item.45) 1388 0 R (Item.46) 1389 0 R (Item.47) 1390 0 R (Item.48) 1391 0 R (Item.49) 1392 0 R (Item.5) 1301 0 R (Item.50) 1398 0 R (Item.51) 1399 0 R (Item.52) 1400 0 R (Item.53) 1423 0 R (Item.54) 1424 0 R (Item.55) 1425 0 R (Item.56) 1426 0 R (Item.57) 1431 0 R (Item.58) 1432 0 R (Item.59) 1433 0 R (Item.6) 1302 0 R (Item.60) 1434 0 R (Item.61) 1435 0 R (Item.62) 1436 0 R (Item.63) 1437 0 R (Item.64) 1438 0 R (Item.65) 1439 0 R (Item.66) 1440 0 R (Item.67) 1442 0 R (Item.68) 1443 0 R (Item.69) 1444 0 R (Item.7) 1303 0 R (Item.70) 1450 0 R (Item.71) 1451 0 R (Item.72) 1452 0 R (Item.73) 1453 0 R (Item.74) 1454 0 R (Item.75) 1455 0 R (Item.76) 1456 0 R (Item.77) 1457 0 R (Item.78) 1458 0 R (Item.79) 1459 0 R (Item.8) 1304 0 R (Item.80) 1465 0 R (Item.81) 1466 0 R (Item.82) 1467 0 R (Item.83) 1468 0 R (Item.84) 1469 0 R (Item.85) 1470 0 R (Item.86) 1471 0 R (Item.87) 1473 0 R (Item.88) 1474 0 R (Item.89) 1475 0 R (Item.9) 1309 0 R (Item.90) 1476 0 R (Item.91) 1489 0 R (Item.92) 1490 0 R (Item.93) 1491 0 R (Item.94) 1492 0 R (Item.95) 1536 0 R (Item.96) 1537 0 R (Item.97) 1538 0 R (Item.98) 1539 0 R (Item.99) 1540 0 R (Packaging) 1021 0 R (SMBPASSWDFILEFORMAT) 1845 0 R (architecture) 1005 0 R (chapter*.1) 1027 0 R (chapter.1) 6 0 R (chapter.10) 258 0 R (chapter.11) 726 0 R (chapter.12) 750 0 R (chapter.13) 758 0 R (chapter.14) 810 0 R (chapter.15) 826 0 R (chapter.16) 854 0 R (chapter.17) 866 0 R (chapter.18) 914 0 R (chapter.19) 926 0 R (chapter.2) 22 0 R (chapter.3) 46 0 R (chapter.4) 82 0 R (chapter.5) 86 0 R (chapter.6) 178 0 R (chapter.7) 206 0 R (chapter.8) 246 0 R (chapter.9) 250 0 R (contributing) 1022 0 R (debug) 1006 0 R (id2738317) 1310 0 R (id2738368) 1311 0 R (id2738434) 1316 0 R (id2738557) 1326 0 R (id2738687) 1331 0 R (id2738732) 1332 0 R (id2739102) 1294 0 R (id2739152) 1298 0 R (id2739189) 1299 0 R (id2739211) 1283 0 R (id2739295) 1284 0 R (id2739325) 1289 0 R (id2804843) 1340 0 R (id2804850) 1341 0 R (id2804870) 1342 0 R (id2804893) 1343 0 R (id2805223) 1401 0 R (id2805236) 1402 0 R (id2805250) 1403 0 R (id2805264) 1404 0 R (id2805278) 1405 0 R (id2805293) 1406 0 R (id2805308) 1407 0 R (id2805322) 1408 0 R (id2805336) 1409 0 R (id2805351) 1414 0 R (id2805365) 1415 0 R (id2805380) 1416 0 R (id2805394) 1417 0 R (id2806096) 1418 0 R (id2806110) 1419 0 R (id2806125) 1420 0 R (id2806141) 1421 0 R (id2806176) 1422 0 R (id2806328) 1441 0 R (id2806433) 1383 0 R (id2806458) 1384 0 R (id2807011) 1449 0 R (id2807131) 1464 0 R (id2807216) 1472 0 R (id2807270) 1477 0 R (id2807334) 1482 0 R (id2807430) 1483 0 R (id2808283) 1493 0 R (id2808347) 1506 0 R (id2808409) 1511 0 R (id2808440) 1512 0 R (id2808465) 1513 0 R (id2808510) 1514 0 R (id2808961) 1498 0 R (id2808983) 1499 0 R (id2809048) 1500 0 R (id2809084) 1505 0 R (id2809522) 1545 0 R (id2809720) 1563 0 R (id2809754) 1564 0 R (id2810342) 1565 0 R (id2810349) 1566 0 R (id2810424) 1572 0 R (id2810431) 1573 0 R (id2810505) 1578 0 R (id2810637) 1579 0 R (id2810644) 1580 0 R (id2810655) 1581 0 R (id2810666) 1582 0 R (id2810680) 1583 0 R (id2810692) 1584 0 R (id2810787) 1535 0 R (id2811049) 1585 0 R (id2811063) 1586 0 R (id2811119) 1591 0 R (id2811161) 1592 0 R (id2811189) 1593 0 R (id2811231) 1594 0 R (id2811317) 1595 0 R (id2811410) 1596 0 R (id2811437) 1597 0 R (id2811524) 1598 0 R (id2811593) 1604 0 R (id2820210) 1605 0 R (id2820288) 1606 0 R (id2820329) 1607 0 R (id2820411) 1608 0 R (id2820464) 1609 0 R (id2820634) 1614 0 R (id2820737) 1615 0 R (id2820776) 1616 0 R (id2820919) 1617 0 R (id2821032) 1618 0 R (id2821596) 1623 0 R (id2821690) 1624 0 R (id2821732) 1629 0 R (id2821901) 1630 0 R (id2822368) 1635 0 R (id2822380) 1636 0 R (id2822482) 1637 0 R (id2822672) 1642 0 R (id2822805) 1643 0 R (id2822831) 1644 0 R (id2822870) 1645 0 R (id2823010) 1651 0 R (id2823050) 1652 0 R (id2823201) 1653 0 R (id2823273) 1654 0 R (id2823353) 1655 0 R (id2823399) 1656 0 R (id2823579) 1661 0 R (id2823744) 1662 0 R (id2823757) 1663 0 R (id2823827) 1668 0 R (id2823869) 1669 0 R (id2823883) 1670 0 R (id2823922) 1671 0 R (id2823975) 1672 0 R (id2823983) 1673 0 R (id2823995) 1674 0 R (id2824067) 1675 0 R (id2824074) 1676 0 R (id2824087) 1677 0 R (id2824176) 1682 0 R (id2824183) 1683 0 R (id2824210) 1684 0 R (id2824242) 1685 0 R (id2824256) 1686 0 R (id2824355) 1687 0 R (id2824452) 1688 0 R (id2824466) 1689 0 R (id2824579) 1694 0 R (id2824678) 1695 0 R (id2824838) 1696 0 R (id2824870) 1697 0 R (id2824940) 1698 0 R (id2824973) 1703 0 R (id2825004) 1704 0 R (id2825072) 1705 0 R (id2825120) 1706 0 R (id2825159) 1707 0 R (id2825201) 1708 0 R (id2825235) 1709 0 R (id2825250) 1710 0 R (id2825276) 1716 0 R (id2825338) 1717 0 R (id2825353) 1718 0 R (id2825380) 1719 0 R (id2825430) 1720 0 R (id2825447) 1721 0 R (id2825461) 1726 0 R (id2825587) 1727 0 R (id2825708) 1728 0 R (id2825736) 1729 0 R (id2825919) 1730 0 R (id2826034) 1735 0 R (id2826079) 1736 0 R (id2826100) 1737 0 R (id2826225) 1738 0 R (id2826298) 1739 0 R (id2826312) 1740 0 R (id2826352) 1741 0 R (id2826415) 1746 0 R (id2826422) 1747 0 R (id2826584) 1748 0 R (id2826664) 1753 0 R (id2826714) 1754 0 R (id2826754) 1755 0 R (id2826761) 1756 0 R (id2826887) 1757 0 R (id2827068) 1762 0 R (id2827083) 1763 0 R (id2827131) 1764 0 R (id2827190) 1765 0 R (id2827512) 1790 0 R (id2827525) 1791 0 R (id2827858) 1810 0 R (id2827986) 1815 0 R (id2828012) 1816 0 R (id2828081) 1817 0 R (id2828088) 1818 0 R (id2828104) 1819 0 R (id2828130) 1824 0 R (id2828152) 1825 0 R (id2828159) 1826 0 R (id2828181) 1804 0 R (id2828612) 1771 0 R (id2828628) 1772 0 R (id2828720) 1773 0 R (id2829402) 1827 0 R (id2829432) 1828 0 R (id2829518) 1833 0 R (id2830248) 1838 0 R (id2830273) 1839 0 R (id2830367) 1844 0 R (id2831014) 1893 0 R (id2831234) 1906 0 R (id2832151) 1855 0 R (id2832196) 1856 0 R (id2832226) 1857 0 R (id2832266) 1858 0 R (id2832295) 1863 0 R (id2832356) 1864 0 R (id2832513) 1869 0 R (id2832532) 1870 0 R (id2832836) 1907 0 R (id2833247) 1942 0 R (id2833254) 1943 0 R (id2833278) 1944 0 R (id2833342) 1949 0 R (id2833371) 1950 0 R (id2834775) 1875 0 R (id2834781) 1876 0 R (id2834882) 1886 0 R (id2834946) 1887 0 R (id2834954) 1888 0 R (internals) 1008 0 R (modules) 1018 0 R (netbios) 1004 0 R (ntdomain) 1013 0 R (page.1) 933 0 R (page.10) 1288 0 R (page.11) 1293 0 R (page.12) 1308 0 R (page.13) 1315 0 R (page.14) 1325 0 R (page.15) 1330 0 R (page.16) 1337 0 R (page.17) 1347 0 R (page.18) 1362 0 R (page.19) 1382 0 R (page.2) 945 0 R (page.20) 1397 0 R (page.21) 1413 0 R (page.22) 1430 0 R (page.23) 1448 0 R (page.24) 1463 0 R (page.25) 1481 0 R (page.26) 1488 0 R (page.27) 1497 0 R (page.28) 1504 0 R (page.29) 1510 0 R (page.3) 962 0 R (page.30) 1518 0 R (page.31) 1522 0 R (page.32) 1530 0 R (page.33) 1534 0 R (page.34) 1544 0 R (page.35) 1561 0 R (page.36) 1577 0 R (page.37) 1590 0 R (page.38) 1603 0 R (page.39) 1613 0 R (page.4) 1026 0 R (page.40) 1622 0 R (page.41) 1628 0 R (page.42) 1634 0 R (page.43) 1641 0 R (page.44) 1650 0 R (page.45) 1660 0 R (page.46) 1667 0 R (page.47) 1681 0 R (page.48) 1693 0 R (page.49) 1702 0 R (page.5) 1071 0 R (page.50) 1715 0 R (page.51) 1725 0 R (page.52) 1734 0 R (page.53) 1745 0 R (page.54) 1752 0 R (page.55) 1761 0 R (page.56) 1770 0 R (page.57) 1777 0 R (page.58) 1789 0 R (page.59) 1795 0 R (page.6) 1125 0 R (page.60) 1799 0 R (page.61) 1803 0 R (page.62) 1809 0 R (page.63) 1814 0 R (page.64) 1823 0 R (page.65) 1832 0 R (page.66) 1837 0 R (page.67) 1843 0 R (page.68) 1850 0 R (page.69) 1854 0 R (page.7) 1178 0 R (page.70) 1862 0 R (page.71) 1868 0 R (page.72) 1874 0 R (page.73) 1880 0 R (page.74) 1885 0 R (page.75) 1892 0 R (page.76) 1897 0 R (page.77) 1901 0 R (page.78) 1905 0 R (page.79) 1916 0 R (page.8) 1233 0 R (page.80) 1923 0 R (page.81) 1931 0 R (page.82) 1935 0 R (page.83) 1941 0 R (page.84) 1948 0 R (page.85) 1954 0 R (page.9) 1282 0 R (parsing) 1009 0 R (printing) 1014 0 R (pwencrypt) 1017 0 R (rpc-plugin) 1019 0 R (sam) 1016 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.10.1) 262 0 R (section.10.2) 274 0 R (section.10.3) 418 0 R (section.10.4) 558 0 R (section.10.5) 622 0 R (section.10.6) 650 0 R (section.10.7) 678 0 R (section.10.8) 694 0 R (section.11.1) 730 0 R (section.11.2) 734 0 R (section.11.3) 738 0 R (section.11.4) 742 0 R (section.11.5) 746 0 R (section.12.1) 754 0 R (section.13.1) 762 0 R (section.13.2) 766 0 R (section.13.3) 770 0 R (section.13.4) 774 0 R (section.13.5) 790 0 R (section.13.6) 802 0 R (section.13.7) 806 0 R (section.14.1) 814 0 R (section.14.2) 818 0 R (section.14.3) 822 0 R (section.15.1) 830 0 R (section.15.2) 834 0 R (section.15.3) 846 0 R (section.16.1) 858 0 R (section.16.2) 862 0 R (section.17.1) 870 0 R (section.17.2) 882 0 R (section.17.3) 894 0 R (section.17.4) 902 0 R (section.18.1) 918 0 R (section.18.2) 922 0 R (section.2.1) 26 0 R (section.2.2) 30 0 R (section.2.3) 34 0 R (section.2.4) 38 0 R (section.2.5) 42 0 R (section.3.1) 50 0 R (section.3.2) 54 0 R (section.3.3) 58 0 R (section.3.4) 62 0 R (section.3.5) 66 0 R (section.5.1) 90 0 R (section.5.2) 94 0 R (section.5.3) 98 0 R (section.5.4) 162 0 R (section.5.5) 174 0 R (section.6.1) 182 0 R (section.6.2) 198 0 R (section.7.1) 210 0 R (section.7.2) 214 0 R (section.7.3) 218 0 R (section.7.4) 222 0 R (section.7.5) 226 0 R (section.7.6) 230 0 R (section.7.7) 234 0 R (section.7.8) 238 0 R (section.7.9) 242 0 R (section.9.1) 254 0 R (subsection.10.1.1) 266 0 R (subsection.10.1.2) 270 0 R (subsection.10.2.1) 278 0 R (subsection.10.2.2) 282 0 R (subsection.10.2.3) 294 0 R (subsection.10.3.1) 422 0 R (subsection.10.3.10) 522 0 R (subsection.10.3.11) 534 0 R (subsection.10.3.12) 546 0 R (subsection.10.3.2) 426 0 R (subsection.10.3.3) 462 0 R (subsection.10.3.4) 466 0 R (subsection.10.3.5) 470 0 R (subsection.10.3.6) 474 0 R (subsection.10.3.7) 486 0 R (subsection.10.3.8) 498 0 R (subsection.10.3.9) 510 0 R (subsection.10.4.1) 562 0 R (subsection.10.4.2) 574 0 R (subsection.10.4.3) 586 0 R (subsection.10.4.4) 598 0 R (subsection.10.4.5) 610 0 R (subsection.10.5.1) 626 0 R (subsection.10.5.2) 638 0 R (subsection.10.6.1) 654 0 R (subsection.10.6.2) 666 0 R (subsection.10.7.1) 682 0 R (subsection.10.7.2) 686 0 R (subsection.10.7.3) 690 0 R (subsection.10.8.1) 698 0 R (subsection.10.8.2) 710 0 R (subsection.13.4.1) 778 0 R (subsection.13.4.2) 782 0 R (subsection.13.4.3) 786 0 R (subsection.13.5.1) 794 0 R (subsection.13.5.2) 798 0 R (subsection.15.2.1) 838 0 R (subsection.15.2.2) 842 0 R (subsection.15.3.1) 850 0 R (subsection.17.1.1) 874 0 R (subsection.17.1.2) 878 0 R (subsection.17.2.1) 886 0 R (subsection.17.2.2) 890 0 R (subsection.17.3.1) 898 0 R (subsection.17.4.1) 906 0 R (subsection.17.4.2) 910 0 R (subsection.3.5.1) 70 0 R (subsection.3.5.2) 74 0 R (subsection.3.5.3) 78 0 R (subsection.5.3.1) 102 0 R (subsection.5.3.10) 138 0 R (subsection.5.3.11) 142 0 R (subsection.5.3.12) 146 0 R (subsection.5.3.13) 150 0 R (subsection.5.3.14) 154 0 R (subsection.5.3.15) 158 0 R (subsection.5.3.2) 106 0 R (subsection.5.3.3) 110 0 R (subsection.5.3.4) 114 0 R (subsection.5.3.5) 118 0 R (subsection.5.3.6) 122 0 R (subsection.5.3.7) 126 0 R (subsection.5.3.8) 130 0 R (subsection.5.3.9) 134 0 R (subsection.5.4.1) 166 0 R (subsection.5.4.2) 170 0 R (subsection.6.1.1) 186 0 R (subsection.6.1.2) 190 0 R (subsection.6.1.3) 194 0 R (subsection.6.2.1) 202 0 R (subsubsection.10.2.2.1) 286 0 R (subsubsection.10.2.2.2) 290 0 R (subsubsection.10.2.3.1) 298 0 R (subsubsection.10.2.3.10) 334 0 R (subsubsection.10.2.3.11) 338 0 R (subsubsection.10.2.3.12) 342 0 R (subsubsection.10.2.3.13) 346 0 R (subsubsection.10.2.3.14) 350 0 R (subsubsection.10.2.3.15) 354 0 R (subsubsection.10.2.3.16) 358 0 R (subsubsection.10.2.3.17) 362 0 R (subsubsection.10.2.3.18) 366 0 R (subsubsection.10.2.3.19) 370 0 R (subsubsection.10.2.3.2) 302 0 R (subsubsection.10.2.3.20) 374 0 R (subsubsection.10.2.3.21) 378 0 R (subsubsection.10.2.3.22) 382 0 R (subsubsection.10.2.3.23) 386 0 R (subsubsection.10.2.3.24) 390 0 R (subsubsection.10.2.3.25) 394 0 R (subsubsection.10.2.3.26) 398 0 R (subsubsection.10.2.3.27) 402 0 R (subsubsection.10.2.3.28) 406 0 R (subsubsection.10.2.3.29) 410 0 R (subsubsection.10.2.3.3) 306 0 R (subsubsection.10.2.3.30) 414 0 R (subsubsection.10.2.3.4) 310 0 R (subsubsection.10.2.3.5) 314 0 R (subsubsection.10.2.3.6) 318 0 R (subsubsection.10.2.3.7) 322 0 R (subsubsection.10.2.3.8) 326 0 R (subsubsection.10.2.3.9) 330 0 R (subsubsection.10.3.10.1) 526 0 R (subsubsection.10.3.10.2) 530 0 R (subsubsection.10.3.11.1) 538 0 R (subsubsection.10.3.11.2) 542 0 R (subsubsection.10.3.12.1) 550 0 R (subsubsection.10.3.12.2) 554 0 R (subsubsection.10.3.2.1) 430 0 R (subsubsection.10.3.2.2) 434 0 R (subsubsection.10.3.2.3) 438 0 R (subsubsection.10.3.2.4) 442 0 R (subsubsection.10.3.2.5) 446 0 R (subsubsection.10.3.2.6) 450 0 R (subsubsection.10.3.2.7) 454 0 R (subsubsection.10.3.2.8) 458 0 R (subsubsection.10.3.6.1) 478 0 R (subsubsection.10.3.6.2) 482 0 R (subsubsection.10.3.7.1) 490 0 R (subsubsection.10.3.7.2) 494 0 R (subsubsection.10.3.8.1) 502 0 R (subsubsection.10.3.8.2) 506 0 R (subsubsection.10.3.9.1) 514 0 R (subsubsection.10.3.9.2) 518 0 R (subsubsection.10.4.1.1) 566 0 R (subsubsection.10.4.1.2) 570 0 R (subsubsection.10.4.2.1) 578 0 R (subsubsection.10.4.2.2) 582 0 R (subsubsection.10.4.3.1) 590 0 R (subsubsection.10.4.3.2) 594 0 R (subsubsection.10.4.4.1) 602 0 R (subsubsection.10.4.4.2) 606 0 R (subsubsection.10.4.5.1) 614 0 R (subsubsection.10.4.5.2) 618 0 R (subsubsection.10.5.1.1) 630 0 R (subsubsection.10.5.1.2) 634 0 R (subsubsection.10.5.2.1) 642 0 R (subsubsection.10.5.2.2) 646 0 R (subsubsection.10.6.1.1) 658 0 R (subsubsection.10.6.1.2) 662 0 R (subsubsection.10.6.2.1) 670 0 R (subsubsection.10.6.2.2) 674 0 R (subsubsection.10.8.1.1) 702 0 R (subsubsection.10.8.1.2) 706 0 R (subsubsection.10.8.2.1) 714 0 R (subsubsection.10.8.2.2) 718 0 R (subsubsection.10.8.2.3) 722 0 R (tracing) 1011 0 R (unix-smb) 1010 0 R (vfs) 1020 0 R (windows-debug) 1012 0 R (wins) 1015 0 R]
+2092 0 obj <<
+/Names [(CodingSuggestions) 983 0 R (Doc-Start) 934 0 R (Item.1) 1297 0 R (Item.10) 1324 0 R (Item.100) 1583 0 R (Item.101) 1584 0 R (Item.102) 1585 0 R (Item.103) 1586 0 R (Item.104) 1587 0 R (Item.105) 1592 0 R (Item.106) 1593 0 R (Item.107) 1598 0 R (Item.108) 1599 0 R (Item.109) 1600 0 R (Item.11) 1325 0 R (Item.110) 1853 0 R (Item.111) 1854 0 R (Item.112) 1855 0 R (Item.113) 1856 0 R (Item.114) 1861 0 R (Item.115) 1862 0 R (Item.116) 1863 0 R (Item.117) 1864 0 R (Item.118) 2014 0 R (Item.119) 2015 0 R (Item.12) 1326 0 R (Item.120) 2016 0 R (Item.121) 2017 0 R (Item.122) 2018 0 R (Item.123) 2027 0 R (Item.124) 2028 0 R (Item.125) 2029 0 R (Item.126) 2030 0 R (Item.127) 2032 0 R (Item.128) 2042 0 R (Item.129) 2047 0 R (Item.13) 1331 0 R (Item.14) 1343 0 R (Item.15) 1344 0 R (Item.16) 1345 0 R (Item.17) 1361 0 R (Item.18) 1362 0 R (Item.19) 1363 0 R (Item.2) 1298 0 R (Item.20) 1368 0 R (Item.21) 1369 0 R (Item.22) 1370 0 R (Item.23) 1371 0 R (Item.24) 1372 0 R (Item.25) 1373 0 R (Item.26) 1374 0 R (Item.27) 1375 0 R (Item.28) 1376 0 R (Item.29) 1377 0 R (Item.3) 1299 0 R (Item.30) 1378 0 R (Item.31) 1379 0 R (Item.32) 1380 0 R (Item.33) 1381 0 R (Item.34) 1382 0 R (Item.35) 1383 0 R (Item.36) 1384 0 R (Item.37) 1385 0 R (Item.38) 1386 0 R (Item.39) 1391 0 R (Item.4) 1302 0 R (Item.40) 1392 0 R (Item.41) 1393 0 R (Item.42) 1400 0 R (Item.43) 1401 0 R (Item.44) 1402 0 R (Item.45) 1403 0 R (Item.46) 1404 0 R (Item.47) 1405 0 R (Item.48) 1406 0 R (Item.49) 1411 0 R (Item.5) 1307 0 R (Item.50) 1412 0 R (Item.51) 1413 0 R (Item.52) 1414 0 R (Item.53) 1442 0 R (Item.54) 1443 0 R (Item.55) 1444 0 R (Item.56) 1445 0 R (Item.57) 1446 0 R (Item.58) 1447 0 R (Item.59) 1452 0 R (Item.6) 1308 0 R (Item.60) 1453 0 R (Item.61) 1454 0 R (Item.62) 1455 0 R (Item.63) 1456 0 R (Item.64) 1457 0 R (Item.65) 1458 0 R (Item.66) 1459 0 R (Item.67) 1461 0 R (Item.68) 1462 0 R (Item.69) 1463 0 R (Item.7) 1309 0 R (Item.70) 1469 0 R (Item.71) 1470 0 R (Item.72) 1471 0 R (Item.73) 1472 0 R (Item.74) 1473 0 R (Item.75) 1474 0 R (Item.76) 1475 0 R (Item.77) 1476 0 R (Item.78) 1477 0 R (Item.79) 1478 0 R (Item.8) 1310 0 R (Item.80) 1484 0 R (Item.81) 1485 0 R (Item.82) 1486 0 R (Item.83) 1487 0 R (Item.84) 1488 0 R (Item.85) 1489 0 R (Item.86) 1490 0 R (Item.87) 1492 0 R (Item.88) 1493 0 R (Item.89) 1494 0 R (Item.9) 1311 0 R (Item.90) 1495 0 R (Item.91) 1507 0 R (Item.92) 1508 0 R (Item.93) 1509 0 R (Item.94) 1510 0 R (Item.95) 1562 0 R (Item.96) 1563 0 R (Item.97) 1564 0 R (Item.98) 1565 0 R (Item.99) 1566 0 R (Packaging) 1023 0 R (SMBPASSWDFILEFORMAT) 1933 0 R (architecture) 981 0 R (chapter*.1) 963 0 R (chapter*.2) 1029 0 R (chapter.1) 6 0 R (chapter.10) 258 0 R (chapter.11) 726 0 R (chapter.12) 750 0 R (chapter.13) 758 0 R (chapter.14) 810 0 R (chapter.15) 826 0 R (chapter.16) 854 0 R (chapter.17) 866 0 R (chapter.18) 914 0 R (chapter.19) 926 0 R (chapter.2) 22 0 R (chapter.3) 46 0 R (chapter.4) 82 0 R (chapter.5) 86 0 R (chapter.6) 178 0 R (chapter.7) 206 0 R (chapter.8) 246 0 R (chapter.9) 250 0 R (contributing) 1024 0 R (debug) 982 0 R (id2722648) 1285 0 R (id2722732) 1290 0 R (id2722763) 1291 0 R (id2722878) 1296 0 R (id2722932) 1300 0 R (id2722970) 1301 0 R (id2723044) 1312 0 R (id2723106) 1313 0 R (id2723191) 1323 0 R (id2725185) 1332 0 R (id2725315) 1337 0 R (id2725362) 1342 0 R (id2725474) 1350 0 R (id2725480) 1351 0 R (id2725500) 1352 0 R (id2725523) 1353 0 R (id2725986) 1398 0 R (id2726011) 1399 0 R (id2726171) 1415 0 R (id2726185) 1416 0 R (id2726199) 1417 0 R (id2726212) 1418 0 R (id2726225) 1423 0 R (id2726244) 1424 0 R (id2726258) 1425 0 R (id2726273) 1426 0 R (id2726287) 1427 0 R (id2726302) 1428 0 R (id2726316) 1429 0 R (id2726330) 1430 0 R (id2791658) 1431 0 R (id2791671) 1437 0 R (id2791685) 1438 0 R (id2791702) 1439 0 R (id2791718) 1440 0 R (id2791755) 1441 0 R (id2791906) 1460 0 R (id2792005) 1468 0 R (id2792126) 1483 0 R (id2792216) 1491 0 R (id2792273) 1500 0 R (id2792338) 1501 0 R (id2792434) 1506 0 R (id2792506) 1516 0 R (id2792555) 1521 0 R (id2792580) 1522 0 R (id2792665) 1527 0 R (id2792716) 1528 0 R (id2792777) 1529 0 R (id2792846) 1534 0 R (id2792888) 1535 0 R (id2792916) 1536 0 R (id2792961) 1541 0 R (id2793387) 1561 0 R (id2793528) 1571 0 R (id2793730) 1588 0 R (id2793766) 1589 0 R (id2793803) 1590 0 R (id2793811) 1591 0 R (id2793894) 1601 0 R (id2793901) 1602 0 R (id2793976) 1603 0 R (id2794107) 1608 0 R (id2794114) 1609 0 R (id2794126) 1610 0 R (id2794137) 1611 0 R (id2794150) 1612 0 R (id2794162) 1613 0 R (id2794256) 1614 0 R (id2794269) 1620 0 R (id2794326) 1621 0 R (id2794368) 1622 0 R (id2794395) 1623 0 R (id2794438) 1624 0 R (id2794523) 1625 0 R (id2794617) 1630 0 R (id2794644) 1631 0 R (id2794730) 1632 0 R (id2794800) 1633 0 R (id2794900) 1638 0 R (id2794977) 1639 0 R (id2795018) 1640 0 R (id2795100) 1641 0 R (id2795153) 1646 0 R (id2795323) 1647 0 R (id2795428) 1652 0 R (id2795465) 1653 0 R (id2795609) 1654 0 R (id2795721) 1659 0 R (id2796285) 1665 0 R (id2796380) 1666 0 R (id2796422) 1671 0 R (id2796591) 1672 0 R (id2797058) 1677 0 R (id2797071) 1682 0 R (id2797176) 1683 0 R (id2797365) 1688 0 R (id2797500) 1689 0 R (id2797527) 1694 0 R (id2797565) 1695 0 R (id2797708) 1696 0 R (id2797748) 1697 0 R (id2797898) 1703 0 R (id2797970) 1704 0 R (id2798050) 1705 0 R (id2798096) 1710 0 R (id2798284) 1711 0 R (id2798451) 1716 0 R (id2798465) 1717 0 R (id2798535) 1718 0 R (id2798577) 1723 0 R (id2798591) 1724 0 R (id2798630) 1725 0 R (id2798685) 1726 0 R (id2798693) 1727 0 R (id2798705) 1728 0 R (id2798776) 1733 0 R (id2798783) 1734 0 R (id2798796) 1735 0 R (id2798888) 1736 0 R (id2798895) 1737 0 R (id2798921) 1738 0 R (id2798953) 1739 0 R (id2798966) 1740 0 R (id2799065) 1745 0 R (id2799163) 1746 0 R (id2799177) 1747 0 R (id2799290) 1753 0 R (id2799388) 1754 0 R (id2799551) 1755 0 R (id2799583) 1760 0 R (id2799653) 1761 0 R (id2799686) 1762 0 R (id2799716) 1763 0 R (id2799785) 1768 0 R (id2799833) 1769 0 R (id2799872) 1770 0 R (id2799914) 1771 0 R (id2799948) 1772 0 R (id2799962) 1773 0 R (id2799990) 1778 0 R (id2800051) 1779 0 R (id2800066) 1780 0 R (id2800094) 1781 0 R (id2800144) 1786 0 R (id2800156) 1787 0 R (id2800176) 1788 0 R (id2800302) 1789 0 R (id2800423) 1794 0 R (id2800451) 1795 0 R (id2800634) 1796 0 R (id2800748) 1802 0 R (id2800794) 1803 0 R (id2800814) 1804 0 R (id2800940) 1805 0 R (id2801013) 1810 0 R (id2801026) 1811 0 R (id2801068) 1812 0 R (id2801129) 1813 0 R (id2801137) 1814 0 R (id2801299) 1819 0 R (id2801398) 1824 0 R (id2801445) 1825 0 R (id2801485) 1826 0 R (id2801492) 1827 0 R (id2801619) 1832 0 R (id2801800) 1833 0 R (id2801815) 1834 0 R (id2801863) 1839 0 R (id2801922) 1840 0 R (id2802085) 1846 0 R (id2802101) 1847 0 R (id2802197) 1848 0 R (id2802419) 1865 0 R (id2802432) 1866 0 R (id2802814) 1884 0 R (id2802970) 1893 0 R (id2803100) 1898 0 R (id2803127) 1899 0 R (id2803196) 1904 0 R (id2803203) 1905 0 R (id2803219) 1906 0 R (id2803247) 1907 0 R (id2803269) 1908 0 R (id2803276) 1909 0 R (id2803294) 1914 0 R (id2803323) 1915 0 R (id2803423) 1921 0 R (id2803560) 1926 0 R (id2803580) 1927 0 R (id2803709) 1932 0 R (id2804076) 1942 0 R (id2804124) 1943 0 R (id2804158) 1944 0 R (id2804199) 1949 0 R (id2804227) 1950 0 R (id2804291) 1951 0 R (id2804486) 1971 0 R (id2804504) 1972 0 R (id2804713) 1977 0 R (id2804721) 1978 0 R (id2804836) 1987 0 R (id2804907) 1992 0 R (id2804915) 1993 0 R (id2805108) 1999 0 R (id2805352) 2012 0 R (id2805360) 2013 0 R (id2805888) 2048 0 R (id2805896) 2049 0 R (id2805919) 2050 0 R (id2805989) 2059 0 R (id2806022) 2060 0 R (internals) 984 0 R (modules) 1020 0 R (netbios) 980 0 R (ntdomain) 1015 0 R (page.1) 933 0 R (page.10) 1284 0 R (page.100) 2007 0 R (page.101) 2011 0 R (page.102) 2022 0 R (page.103) 2026 0 R (page.104) 2037 0 R (page.105) 2041 0 R (page.106) 2046 0 R (page.107) 2054 0 R (page.108) 2058 0 R (page.109) 2064 0 R (page.11) 1289 0 R (page.12) 1295 0 R (page.13) 1306 0 R (page.14) 1318 0 R (page.15) 1322 0 R (page.16) 1330 0 R (page.17) 1336 0 R (page.18) 1341 0 R (page.19) 1349 0 R (page.2) 945 0 R (page.20) 1358 0 R (page.21) 1367 0 R (page.22) 1390 0 R (page.23) 1397 0 R (page.24) 1410 0 R (page.25) 1422 0 R (page.26) 1436 0 R (page.27) 1451 0 R (page.28) 1467 0 R (page.29) 1482 0 R (page.3) 962 0 R (page.30) 1499 0 R (page.31) 1505 0 R (page.32) 1515 0 R (page.33) 1520 0 R (page.34) 1526 0 R (page.35) 1533 0 R (page.36) 1540 0 R (page.37) 1545 0 R (page.38) 1556 0 R (page.39) 1560 0 R (page.4) 992 0 R (page.40) 1570 0 R (page.41) 1582 0 R (page.42) 1597 0 R (page.43) 1607 0 R (page.44) 1619 0 R (page.45) 1629 0 R (page.46) 1637 0 R (page.47) 1645 0 R (page.48) 1651 0 R (page.49) 1658 0 R (page.5) 1028 0 R (page.50) 1664 0 R (page.51) 1670 0 R (page.52) 1676 0 R (page.53) 1681 0 R (page.54) 1687 0 R (page.55) 1693 0 R (page.56) 1702 0 R (page.57) 1709 0 R (page.58) 1715 0 R (page.59) 1722 0 R (page.6) 1072 0 R (page.60) 1732 0 R (page.61) 1744 0 R (page.62) 1752 0 R (page.63) 1759 0 R (page.64) 1767 0 R (page.65) 1777 0 R (page.66) 1785 0 R (page.67) 1793 0 R (page.68) 1801 0 R (page.69) 1809 0 R (page.7) 1127 0 R (page.70) 1818 0 R (page.71) 1823 0 R (page.72) 1831 0 R (page.73) 1838 0 R (page.74) 1845 0 R (page.75) 1852 0 R (page.76) 1860 0 R (page.77) 1870 0 R (page.78) 1874 0 R (page.79) 1878 0 R (page.8) 1184 0 R (page.80) 1883 0 R (page.81) 1888 0 R (page.82) 1892 0 R (page.83) 1897 0 R (page.84) 1903 0 R (page.85) 1913 0 R (page.86) 1920 0 R (page.87) 1925 0 R (page.88) 1931 0 R (page.89) 1937 0 R (page.9) 1237 0 R (page.90) 1941 0 R (page.91) 1948 0 R (page.92) 1957 0 R (page.93) 1970 0 R (page.94) 1976 0 R (page.95) 1982 0 R (page.96) 1986 0 R (page.97) 1991 0 R (page.98) 1998 0 R (page.99) 2003 0 R (parsing) 985 0 R (printing) 1016 0 R (pwencrypt) 1019 0 R (rpc-plugin) 1021 0 R (sam) 1018 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.10.1) 262 0 R (section.10.2) 274 0 R (section.10.3) 418 0 R (section.10.4) 558 0 R (section.10.5) 622 0 R (section.10.6) 650 0 R (section.10.7) 678 0 R (section.10.8) 694 0 R (section.11.1) 730 0 R (section.11.2) 734 0 R (section.11.3) 738 0 R (section.11.4) 742 0 R (section.11.5) 746 0 R (section.12.1) 754 0 R (section.13.1) 762 0 R (section.13.2) 766 0 R (section.13.3) 770 0 R (section.13.4) 774 0 R (section.13.5) 790 0 R (section.13.6) 802 0 R (section.13.7) 806 0 R (section.14.1) 814 0 R (section.14.2) 818 0 R (section.14.3) 822 0 R (section.15.1) 830 0 R (section.15.2) 834 0 R (section.15.3) 846 0 R (section.16.1) 858 0 R (section.16.2) 862 0 R (section.17.1) 870 0 R (section.17.2) 882 0 R (section.17.3) 894 0 R (section.17.4) 902 0 R (section.18.1) 918 0 R (section.18.2) 922 0 R (section.2.1) 26 0 R (section.2.2) 30 0 R (section.2.3) 34 0 R (section.2.4) 38 0 R (section.2.5) 42 0 R (section.3.1) 50 0 R (section.3.2) 54 0 R (section.3.3) 58 0 R (section.3.4) 62 0 R (section.3.5) 66 0 R (section.5.1) 90 0 R (section.5.2) 94 0 R (section.5.3) 98 0 R (section.5.4) 162 0 R (section.5.5) 174 0 R (section.6.1) 182 0 R (section.6.2) 198 0 R (section.7.1) 210 0 R (section.7.2) 214 0 R (section.7.3) 218 0 R (section.7.4) 222 0 R (section.7.5) 226 0 R (section.7.6) 230 0 R (section.7.7) 234 0 R (section.7.8) 238 0 R (section.7.9) 242 0 R (section.9.1) 254 0 R (subsection.10.1.1) 266 0 R (subsection.10.1.2) 270 0 R (subsection.10.2.1) 278 0 R (subsection.10.2.2) 282 0 R (subsection.10.2.3) 294 0 R (subsection.10.3.1) 422 0 R (subsection.10.3.10) 522 0 R (subsection.10.3.11) 534 0 R (subsection.10.3.12) 546 0 R (subsection.10.3.2) 426 0 R (subsection.10.3.3) 462 0 R (subsection.10.3.4) 466 0 R (subsection.10.3.5) 470 0 R (subsection.10.3.6) 474 0 R (subsection.10.3.7) 486 0 R (subsection.10.3.8) 498 0 R (subsection.10.3.9) 510 0 R (subsection.10.4.1) 562 0 R (subsection.10.4.2) 574 0 R (subsection.10.4.3) 586 0 R (subsection.10.4.4) 598 0 R (subsection.10.4.5) 610 0 R (subsection.10.5.1) 626 0 R (subsection.10.5.2) 638 0 R (subsection.10.6.1) 654 0 R (subsection.10.6.2) 666 0 R (subsection.10.7.1) 682 0 R (subsection.10.7.2) 686 0 R (subsection.10.7.3) 690 0 R (subsection.10.8.1) 698 0 R (subsection.10.8.2) 710 0 R (subsection.13.4.1) 778 0 R (subsection.13.4.2) 782 0 R (subsection.13.4.3) 786 0 R (subsection.13.5.1) 794 0 R (subsection.13.5.2) 798 0 R (subsection.15.2.1) 838 0 R (subsection.15.2.2) 842 0 R (subsection.15.3.1) 850 0 R (subsection.17.1.1) 874 0 R (subsection.17.1.2) 878 0 R (subsection.17.2.1) 886 0 R (subsection.17.2.2) 890 0 R (subsection.17.3.1) 898 0 R (subsection.17.4.1) 906 0 R (subsection.17.4.2) 910 0 R (subsection.3.5.1) 70 0 R (subsection.3.5.2) 74 0 R (subsection.3.5.3) 78 0 R (subsection.5.3.1) 102 0 R (subsection.5.3.10) 138 0 R (subsection.5.3.11) 142 0 R (subsection.5.3.12) 146 0 R (subsection.5.3.13) 150 0 R (subsection.5.3.14) 154 0 R (subsection.5.3.15) 158 0 R (subsection.5.3.2) 106 0 R (subsection.5.3.3) 110 0 R (subsection.5.3.4) 114 0 R (subsection.5.3.5) 118 0 R (subsection.5.3.6) 122 0 R (subsection.5.3.7) 126 0 R (subsection.5.3.8) 130 0 R (subsection.5.3.9) 134 0 R (subsection.5.4.1) 166 0 R (subsection.5.4.2) 170 0 R (subsection.6.1.1) 186 0 R (subsection.6.1.2) 190 0 R (subsection.6.1.3) 194 0 R (subsection.6.2.1) 202 0 R (subsubsection.10.2.2.1) 286 0 R (subsubsection.10.2.2.2) 290 0 R (subsubsection.10.2.3.1) 298 0 R (subsubsection.10.2.3.10) 334 0 R (subsubsection.10.2.3.11) 338 0 R (subsubsection.10.2.3.12) 342 0 R (subsubsection.10.2.3.13) 346 0 R (subsubsection.10.2.3.14) 350 0 R (subsubsection.10.2.3.15) 354 0 R (subsubsection.10.2.3.16) 358 0 R (subsubsection.10.2.3.17) 362 0 R (subsubsection.10.2.3.18) 366 0 R (subsubsection.10.2.3.19) 370 0 R (subsubsection.10.2.3.2) 302 0 R (subsubsection.10.2.3.20) 374 0 R (subsubsection.10.2.3.21) 378 0 R (subsubsection.10.2.3.22) 382 0 R (subsubsection.10.2.3.23) 386 0 R (subsubsection.10.2.3.24) 390 0 R (subsubsection.10.2.3.25) 394 0 R (subsubsection.10.2.3.26) 398 0 R (subsubsection.10.2.3.27) 402 0 R (subsubsection.10.2.3.28) 406 0 R (subsubsection.10.2.3.29) 410 0 R (subsubsection.10.2.3.3) 306 0 R (subsubsection.10.2.3.30) 414 0 R (subsubsection.10.2.3.4) 310 0 R (subsubsection.10.2.3.5) 314 0 R (subsubsection.10.2.3.6) 318 0 R (subsubsection.10.2.3.7) 322 0 R (subsubsection.10.2.3.8) 326 0 R (subsubsection.10.2.3.9) 330 0 R (subsubsection.10.3.10.1) 526 0 R (subsubsection.10.3.10.2) 530 0 R (subsubsection.10.3.11.1) 538 0 R (subsubsection.10.3.11.2) 542 0 R (subsubsection.10.3.12.1) 550 0 R (subsubsection.10.3.12.2) 554 0 R (subsubsection.10.3.2.1) 430 0 R (subsubsection.10.3.2.2) 434 0 R (subsubsection.10.3.2.3) 438 0 R (subsubsection.10.3.2.4) 442 0 R (subsubsection.10.3.2.5) 446 0 R (subsubsection.10.3.2.6) 450 0 R (subsubsection.10.3.2.7) 454 0 R (subsubsection.10.3.2.8) 458 0 R (subsubsection.10.3.6.1) 478 0 R (subsubsection.10.3.6.2) 482 0 R (subsubsection.10.3.7.1) 490 0 R (subsubsection.10.3.7.2) 494 0 R (subsubsection.10.3.8.1) 502 0 R (subsubsection.10.3.8.2) 506 0 R (subsubsection.10.3.9.1) 514 0 R (subsubsection.10.3.9.2) 518 0 R (subsubsection.10.4.1.1) 566 0 R (subsubsection.10.4.1.2) 570 0 R (subsubsection.10.4.2.1) 578 0 R (subsubsection.10.4.2.2) 582 0 R (subsubsection.10.4.3.1) 590 0 R (subsubsection.10.4.3.2) 594 0 R (subsubsection.10.4.4.1) 602 0 R (subsubsection.10.4.4.2) 606 0 R (subsubsection.10.4.5.1) 614 0 R (subsubsection.10.4.5.2) 618 0 R (subsubsection.10.5.1.1) 630 0 R (subsubsection.10.5.1.2) 634 0 R (subsubsection.10.5.2.1) 642 0 R (subsubsection.10.5.2.2) 646 0 R (subsubsection.10.6.1.1) 658 0 R (subsubsection.10.6.1.2) 662 0 R (subsubsection.10.6.2.1) 670 0 R (subsubsection.10.6.2.2) 674 0 R (subsubsection.10.8.1.1) 702 0 R (subsubsection.10.8.1.2) 706 0 R (subsubsection.10.8.2.1) 714 0 R (subsubsection.10.8.2.2) 718 0 R (subsubsection.10.8.2.3) 722 0 R (tracing) 987 0 R (unix-smb) 986 0 R (vfs) 1022 0 R (windows-debug) 988 0 R (wins) 1017 0 R]
/Limits [(CodingSuggestions) (wins)]
>> endobj
-1979 0 obj <<
-/Kids [1978 0 R]
+2093 0 obj <<
+/Kids [2092 0 R]
>> endobj
-1980 0 obj <<
-/Dests 1979 0 R
+2094 0 obj <<
+/Dests 2093 0 R
>> endobj
-1981 0 obj <<
+2095 0 obj <<
/Type /Catalog
-/Pages 1976 0 R
-/Outlines 1977 0 R
-/Names 1980 0 R
+/Pages 2090 0 R
+/Outlines 2091 0 R
+/Names 2094 0 R
/PageMode /UseOutlines /URI<</Base()>> /ViewerPreferences<<>>
/OpenAction 929 0 R
-/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10a)
+/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10b)
>> endobj
-1982 0 obj <<
-/Producer (pdfTeX-1.10a)
-/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10a)/Keywords()
-/Creator (TeX)
-/CreationDate (D:20030715231700)
+2096 0 obj <<
+/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10b)/Keywords()
+/CreationDate (D:20030815195700)
>> endobj
xref
-0 1983
+0 2097
0000000001 65535 f
0000000002 00000 f
0000000003 00000 f
0000000004 00000 f
0000000000 00000 f
0000000009 00000 n
-0000086708 00000 n
-0000450715 00000 n
+0000093786 00000 n
+0000506737 00000 n
0000000054 00000 n
0000000130 00000 n
-0000086831 00000 n
-0000450643 00000 n
+0000093908 00000 n
+0000506665 00000 n
0000000177 00000 n
0000000207 00000 n
-0000086955 00000 n
-0000450557 00000 n
+0000097771 00000 n
+0000506579 00000 n
0000000255 00000 n
0000000295 00000 n
-0000090481 00000 n
-0000450484 00000 n
+0000097895 00000 n
+0000506506 00000 n
0000000343 00000 n
0000000378 00000 n
-0000093909 00000 n
-0000450359 00000 n
+0000100636 00000 n
+0000506381 00000 n
0000000424 00000 n
0000000463 00000 n
-0000094033 00000 n
-0000450285 00000 n
+0000100759 00000 n
+0000506307 00000 n
0000000511 00000 n
0000000546 00000 n
-0000094345 00000 n
-0000450198 00000 n
+0000101070 00000 n
+0000506220 00000 n
0000000594 00000 n
0000000641 00000 n
-0000094468 00000 n
-0000450111 00000 n
+0000101193 00000 n
+0000506133 00000 n
0000000689 00000 n
0000000726 00000 n
-0000098466 00000 n
-0000450024 00000 n
+0000105359 00000 n
+0000506046 00000 n
0000000774 00000 n
0000000811 00000 n
-0000098589 00000 n
-0000449950 00000 n
+0000105483 00000 n
+0000505972 00000 n
0000000859 00000 n
0000000893 00000 n
-0000101133 00000 n
-0000449824 00000 n
+0000109099 00000 n
+0000505846 00000 n
0000000939 00000 n
0000000982 00000 n
-0000101257 00000 n
-0000449750 00000 n
+0000109222 00000 n
+0000505772 00000 n
0000001030 00000 n
0000001070 00000 n
-0000103997 00000 n
-0000449663 00000 n
+0000111680 00000 n
+0000505685 00000 n
0000001118 00000 n
0000001160 00000 n
-0000106234 00000 n
-0000449576 00000 n
+0000113885 00000 n
+0000505598 00000 n
0000001208 00000 n
0000001253 00000 n
-0000106358 00000 n
-0000449489 00000 n
+0000115960 00000 n
+0000505511 00000 n
0000001301 00000 n
0000001346 00000 n
-0000108945 00000 n
-0000449378 00000 n
+0000118405 00000 n
+0000505400 00000 n
0000001394 00000 n
0000001430 00000 n
-0000109068 00000 n
-0000449304 00000 n
+0000118529 00000 n
+0000505326 00000 n
0000001483 00000 n
0000001519 00000 n
-0000109192 00000 n
-0000449217 00000 n
+0000118652 00000 n
+0000505239 00000 n
0000001572 00000 n
0000001607 00000 n
-0000109315 00000 n
-0000449143 00000 n
+0000118776 00000 n
+0000505165 00000 n
0000001660 00000 n
0000001712 00000 n
-0000113613 00000 n
-0000449054 00000 n
+0000122364 00000 n
+0000505076 00000 n
0000001758 00000 n
0000001797 00000 n
-0000122466 00000 n
-0000448926 00000 n
+0000132483 00000 n
+0000504948 00000 n
0000001843 00000 n
0000001879 00000 n
-0000122590 00000 n
-0000448852 00000 n
+0000132606 00000 n
+0000504874 00000 n
0000001927 00000 n
0000001968 00000 n
-0000122713 00000 n
-0000448765 00000 n
+0000132730 00000 n
+0000504787 00000 n
0000002016 00000 n
0000002056 00000 n
-0000125897 00000 n
-0000448636 00000 n
+0000136814 00000 n
+0000504658 00000 n
0000002104 00000 n
0000002149 00000 n
-0000126020 00000 n
-0000448558 00000 n
+0000136938 00000 n
+0000504580 00000 n
0000002203 00000 n
0000002244 00000 n
-0000126144 00000 n
-0000448466 00000 n
+0000137063 00000 n
+0000504488 00000 n
0000002298 00000 n
0000002339 00000 n
-0000126269 00000 n
-0000448374 00000 n
+0000137188 00000 n
+0000504396 00000 n
0000002393 00000 n
0000002439 00000 n
-0000126393 00000 n
-0000448282 00000 n
+0000139086 00000 n
+0000504304 00000 n
0000002493 00000 n
0000002534 00000 n
-0000126518 00000 n
-0000448190 00000 n
+0000139210 00000 n
+0000504212 00000 n
0000002588 00000 n
0000002629 00000 n
-0000126643 00000 n
-0000448098 00000 n
+0000139335 00000 n
+0000504120 00000 n
0000002683 00000 n
0000002725 00000 n
-0000126768 00000 n
-0000448006 00000 n
+0000139460 00000 n
+0000504028 00000 n
0000002779 00000 n
0000002821 00000 n
-0000126892 00000 n
-0000447914 00000 n
+0000139585 00000 n
+0000503936 00000 n
0000002875 00000 n
0000002921 00000 n
-0000129227 00000 n
-0000447822 00000 n
+0000139710 00000 n
+0000503844 00000 n
0000002975 00000 n
0000003021 00000 n
-0000129351 00000 n
-0000447730 00000 n
+0000139835 00000 n
+0000503752 00000 n
0000003076 00000 n
0000003124 00000 n
-0000129476 00000 n
-0000447638 00000 n
+0000139958 00000 n
+0000503660 00000 n
0000003179 00000 n
0000003227 00000 n
-0000129601 00000 n
-0000447546 00000 n
+0000140083 00000 n
+0000503568 00000 n
0000003282 00000 n
0000003325 00000 n
-0000129724 00000 n
-0000447454 00000 n
+0000142279 00000 n
+0000503476 00000 n
0000003380 00000 n
0000003423 00000 n
-0000129849 00000 n
-0000447362 00000 n
+0000142403 00000 n
+0000503384 00000 n
0000003478 00000 n
0000003526 00000 n
-0000129974 00000 n
-0000447284 00000 n
+0000142528 00000 n
+0000503306 00000 n
0000003581 00000 n
0000003629 00000 n
-0000130098 00000 n
-0000447154 00000 n
+0000142652 00000 n
+0000503176 00000 n
0000003678 00000 n
0000003723 00000 n
-0000130223 00000 n
-0000447075 00000 n
+0000142777 00000 n
+0000503097 00000 n
0000003777 00000 n
0000003813 00000 n
-0000134944 00000 n
-0000446996 00000 n
+0000147171 00000 n
+0000503018 00000 n
0000003867 00000 n
0000003905 00000 n
-0000136612 00000 n
-0000446918 00000 n
+0000149758 00000 n
+0000502940 00000 n
0000003954 00000 n
0000003998 00000 n
-0000140004 00000 n
-0000446786 00000 n
+0000152896 00000 n
+0000502808 00000 n
0000004045 00000 n
0000004084 00000 n
-0000140129 00000 n
-0000446668 00000 n
+0000153020 00000 n
+0000502690 00000 n
0000004133 00000 n
0000004173 00000 n
-0000140695 00000 n
-0000446589 00000 n
+0000153584 00000 n
+0000502611 00000 n
0000004227 00000 n
0000004275 00000 n
-0000141071 00000 n
-0000446496 00000 n
+0000155862 00000 n
+0000502518 00000 n
0000004329 00000 n
0000004384 00000 n
-0000143010 00000 n
-0000446417 00000 n
+0000155987 00000 n
+0000502439 00000 n
0000004438 00000 n
0000004488 00000 n
-0000143135 00000 n
-0000446299 00000 n
+0000157934 00000 n
+0000502321 00000 n
0000004537 00000 n
0000004567 00000 n
-0000145152 00000 n
-0000446234 00000 n
+0000159263 00000 n
+0000502256 00000 n
0000004621 00000 n
0000004661 00000 n
-0000148630 00000 n
-0000446101 00000 n
+0000162250 00000 n
+0000502123 00000 n
0000004708 00000 n
0000004753 00000 n
-0000148755 00000 n
-0000446022 00000 n
+0000162374 00000 n
+0000502044 00000 n
0000004802 00000 n
0000004838 00000 n
-0000148880 00000 n
-0000445929 00000 n
+0000162499 00000 n
+0000501951 00000 n
0000004887 00000 n
0000004920 00000 n
-0000149005 00000 n
-0000445836 00000 n
+0000165910 00000 n
+0000501858 00000 n
0000004969 00000 n
0000005007 00000 n
-0000152791 00000 n
-0000445743 00000 n
+0000166035 00000 n
+0000501765 00000 n
0000005056 00000 n
0000005089 00000 n
-0000152916 00000 n
-0000445650 00000 n
+0000166160 00000 n
+0000501672 00000 n
0000005138 00000 n
0000005169 00000 n
-0000156882 00000 n
-0000445557 00000 n
+0000169734 00000 n
+0000501579 00000 n
0000005218 00000 n
0000005252 00000 n
-0000157007 00000 n
-0000445464 00000 n
+0000169859 00000 n
+0000501486 00000 n
0000005301 00000 n
0000005338 00000 n
-0000157132 00000 n
-0000445371 00000 n
+0000169983 00000 n
+0000501393 00000 n
0000005387 00000 n
0000005423 00000 n
-0000157257 00000 n
-0000445292 00000 n
+0000173847 00000 n
+0000501314 00000 n
0000005472 00000 n
0000005515 00000 n
-0000163244 00000 n
-0000445198 00000 n
+0000176927 00000 n
+0000501220 00000 n
0000005562 00000 n
0000005610 00000 n
-0000165923 00000 n
-0000445065 00000 n
+0000180351 00000 n
+0000501087 00000 n
0000005657 00000 n
0000005716 00000 n
-0000166048 00000 n
-0000445000 00000 n
+0000180475 00000 n
+0000501022 00000 n
0000005765 00000 n
0000005814 00000 n
-0000171787 00000 n
-0000444867 00000 n
+0000185389 00000 n
+0000500889 00000 n
0000005862 00000 n
0000005900 00000 n
-0000171912 00000 n
-0000444749 00000 n
+0000185514 00000 n
+0000500771 00000 n
0000005950 00000 n
0000005987 00000 n
-0000175663 00000 n
-0000444670 00000 n
+0000188777 00000 n
+0000500692 00000 n
0000006042 00000 n
0000006076 00000 n
-0000175788 00000 n
-0000444591 00000 n
+0000188902 00000 n
+0000500613 00000 n
0000006131 00000 n
0000006165 00000 n
-0000175913 00000 n
-0000444459 00000 n
+0000189027 00000 n
+0000500481 00000 n
0000006215 00000 n
0000006260 00000 n
-0000176038 00000 n
-0000444380 00000 n
+0000189151 00000 n
+0000500402 00000 n
0000006315 00000 n
0000006347 00000 n
-0000176476 00000 n
-0000444248 00000 n
+0000192362 00000 n
+0000500270 00000 n
0000006402 00000 n
0000006441 00000 n
-0000176599 00000 n
-0000444169 00000 n
+0000192486 00000 n
+0000500191 00000 n
0000006501 00000 n
0000006547 00000 n
-0000178771 00000 n
-0000444090 00000 n
+0000192610 00000 n
+0000500112 00000 n
0000006607 00000 n
0000006653 00000 n
-0000178896 00000 n
-0000443971 00000 n
+0000194584 00000 n
+0000499993 00000 n
0000006708 00000 n
0000006745 00000 n
-0000179019 00000 n
-0000443892 00000 n
+0000194709 00000 n
+0000499914 00000 n
0000006805 00000 n
0000006840 00000 n
-0000179144 00000 n
-0000443799 00000 n
+0000194834 00000 n
+0000499821 00000 n
0000006900 00000 n
0000006933 00000 n
-0000179269 00000 n
-0000443706 00000 n
+0000194959 00000 n
+0000499728 00000 n
0000006993 00000 n
0000007027 00000 n
-0000179394 00000 n
-0000443613 00000 n
+0000195083 00000 n
+0000499635 00000 n
0000007087 00000 n
0000007122 00000 n
-0000179519 00000 n
-0000443520 00000 n
+0000195206 00000 n
+0000499542 00000 n
0000007182 00000 n
0000007246 00000 n
-0000179642 00000 n
-0000443427 00000 n
+0000195331 00000 n
+0000499449 00000 n
0000007306 00000 n
0000007349 00000 n
-0000179766 00000 n
-0000443334 00000 n
+0000197289 00000 n
+0000499356 00000 n
0000007409 00000 n
0000007470 00000 n
-0000182177 00000 n
-0000443241 00000 n
+0000197414 00000 n
+0000499263 00000 n
0000007530 00000 n
0000007612 00000 n
-0000182302 00000 n
-0000443148 00000 n
+0000197539 00000 n
+0000499170 00000 n
0000007672 00000 n
0000007726 00000 n
-0000182427 00000 n
-0000443055 00000 n
+0000197664 00000 n
+0000499077 00000 n
0000007787 00000 n
0000007857 00000 n
-0000182552 00000 n
-0000442962 00000 n
+0000197789 00000 n
+0000498984 00000 n
0000007918 00000 n
0000007982 00000 n
-0000182676 00000 n
-0000442869 00000 n
+0000197914 00000 n
+0000498891 00000 n
0000008043 00000 n
0000008106 00000 n
-0000182801 00000 n
-0000442776 00000 n
+0000200428 00000 n
+0000498798 00000 n
0000008167 00000 n
0000008229 00000 n
-0000182926 00000 n
-0000442683 00000 n
+0000200553 00000 n
+0000498705 00000 n
0000008290 00000 n
0000008380 00000 n
-0000183051 00000 n
-0000442590 00000 n
+0000200677 00000 n
+0000498612 00000 n
0000008441 00000 n
0000008506 00000 n
-0000185711 00000 n
-0000442497 00000 n
+0000200802 00000 n
+0000498519 00000 n
0000008567 00000 n
0000008646 00000 n
-0000185836 00000 n
-0000442404 00000 n
+0000203276 00000 n
+0000498426 00000 n
0000008707 00000 n
0000008783 00000 n
-0000185960 00000 n
-0000442311 00000 n
+0000203401 00000 n
+0000498333 00000 n
0000008844 00000 n
0000008908 00000 n
-0000186085 00000 n
-0000442218 00000 n
+0000203526 00000 n
+0000498240 00000 n
0000008969 00000 n
0000009061 00000 n
-0000186210 00000 n
-0000442125 00000 n
+0000203649 00000 n
+0000498147 00000 n
0000009122 00000 n
0000009222 00000 n
-0000186335 00000 n
-0000442032 00000 n
+0000206167 00000 n
+0000498054 00000 n
0000009283 00000 n
0000009364 00000 n
-0000188800 00000 n
-0000441939 00000 n
+0000206292 00000 n
+0000497961 00000 n
0000009425 00000 n
0000009505 00000 n
-0000188925 00000 n
-0000441846 00000 n
+0000208518 00000 n
+0000497868 00000 n
0000009566 00000 n
0000009617 00000 n
-0000189050 00000 n
-0000441753 00000 n
+0000208643 00000 n
+0000497775 00000 n
0000009678 00000 n
0000009744 00000 n
-0000189175 00000 n
-0000441660 00000 n
+0000208767 00000 n
+0000497682 00000 n
0000009805 00000 n
0000009893 00000 n
-0000189300 00000 n
-0000441567 00000 n
+0000210913 00000 n
+0000497589 00000 n
0000009954 00000 n
0000010016 00000 n
-0000191620 00000 n
-0000441474 00000 n
+0000213547 00000 n
+0000497496 00000 n
0000010077 00000 n
0000010172 00000 n
-0000191745 00000 n
-0000441381 00000 n
+0000213672 00000 n
+0000497403 00000 n
0000010233 00000 n
0000010316 00000 n
-0000194815 00000 n
-0000441288 00000 n
+0000216538 00000 n
+0000497310 00000 n
0000010377 00000 n
0000010432 00000 n
-0000194940 00000 n
-0000441209 00000 n
+0000216663 00000 n
+0000497231 00000 n
0000010493 00000 n
0000010544 00000 n
-0000198604 00000 n
-0000441076 00000 n
+0000219698 00000 n
+0000497098 00000 n
0000010594 00000 n
0000010649 00000 n
-0000198729 00000 n
-0000440997 00000 n
+0000222969 00000 n
+0000497019 00000 n
0000010704 00000 n
0000010742 00000 n
-0000198854 00000 n
-0000440865 00000 n
+0000223094 00000 n
+0000496887 00000 n
0000010797 00000 n
0000010830 00000 n
-0000202039 00000 n
-0000440786 00000 n
+0000225901 00000 n
+0000496808 00000 n
0000010890 00000 n
0000010985 00000 n
-0000202164 00000 n
-0000440693 00000 n
+0000226026 00000 n
+0000496715 00000 n
0000011045 00000 n
0000011098 00000 n
-0000202289 00000 n
-0000440600 00000 n
+0000228559 00000 n
+0000496622 00000 n
0000011158 00000 n
0000011202 00000 n
-0000202414 00000 n
-0000440507 00000 n
+0000228684 00000 n
+0000496529 00000 n
0000011262 00000 n
0000011308 00000 n
-0000205431 00000 n
-0000440414 00000 n
+0000228809 00000 n
+0000496436 00000 n
0000011368 00000 n
0000011414 00000 n
-0000205556 00000 n
-0000440321 00000 n
+0000228934 00000 n
+0000496343 00000 n
0000011474 00000 n
0000011520 00000 n
-0000205681 00000 n
-0000440228 00000 n
+0000231298 00000 n
+0000496250 00000 n
0000011580 00000 n
0000011626 00000 n
-0000205806 00000 n
-0000440149 00000 n
+0000231423 00000 n
+0000496171 00000 n
0000011686 00000 n
0000011732 00000 n
-0000205931 00000 n
-0000440056 00000 n
+0000231548 00000 n
+0000496078 00000 n
0000011787 00000 n
0000011818 00000 n
-0000206056 00000 n
-0000439963 00000 n
+0000234311 00000 n
+0000495985 00000 n
0000011873 00000 n
0000011919 00000 n
-0000209048 00000 n
-0000439870 00000 n
+0000234435 00000 n
+0000495892 00000 n
0000011974 00000 n
0000012026 00000 n
-0000209172 00000 n
-0000439738 00000 n
+0000236765 00000 n
+0000495760 00000 n
0000012081 00000 n
0000012123 00000 n
-0000209297 00000 n
-0000439659 00000 n
+0000236890 00000 n
+0000495681 00000 n
0000012183 00000 n
0000012219 00000 n
-0000211039 00000 n
-0000439580 00000 n
+0000237015 00000 n
+0000495602 00000 n
0000012279 00000 n
0000012316 00000 n
-0000211164 00000 n
-0000439448 00000 n
+0000238873 00000 n
+0000495470 00000 n
0000012371 00000 n
0000012419 00000 n
-0000211289 00000 n
-0000439369 00000 n
+0000238998 00000 n
+0000495391 00000 n
0000012479 00000 n
0000012515 00000 n
-0000211414 00000 n
-0000439290 00000 n
+0000239122 00000 n
+0000495312 00000 n
0000012575 00000 n
0000012612 00000 n
-0000211539 00000 n
-0000439158 00000 n
+0000239247 00000 n
+0000495180 00000 n
0000012667 00000 n
0000012723 00000 n
-0000211664 00000 n
-0000439079 00000 n
+0000239372 00000 n
+0000495101 00000 n
0000012783 00000 n
0000012819 00000 n
-0000211789 00000 n
-0000439000 00000 n
+0000239497 00000 n
+0000495022 00000 n
0000012879 00000 n
0000012916 00000 n
-0000211914 00000 n
-0000438868 00000 n
+0000241322 00000 n
+0000494890 00000 n
0000012971 00000 n
0000013013 00000 n
-0000212039 00000 n
-0000438789 00000 n
+0000241447 00000 n
+0000494811 00000 n
0000013073 00000 n
0000013109 00000 n
-0000212164 00000 n
-0000438710 00000 n
+0000241572 00000 n
+0000494732 00000 n
0000013169 00000 n
0000013206 00000 n
-0000214204 00000 n
-0000438578 00000 n
+0000241697 00000 n
+0000494600 00000 n
0000013262 00000 n
0000013299 00000 n
-0000214329 00000 n
-0000438499 00000 n
+0000241822 00000 n
+0000494521 00000 n
0000013360 00000 n
0000013397 00000 n
-0000214453 00000 n
-0000438420 00000 n
+0000241947 00000 n
+0000494442 00000 n
0000013458 00000 n
0000013496 00000 n
-0000214578 00000 n
-0000438288 00000 n
+0000242072 00000 n
+0000494310 00000 n
0000013552 00000 n
0000013595 00000 n
-0000214703 00000 n
-0000438209 00000 n
+0000242197 00000 n
+0000494231 00000 n
0000013656 00000 n
0000013693 00000 n
-0000214828 00000 n
-0000438130 00000 n
+0000244572 00000 n
+0000494152 00000 n
0000013754 00000 n
0000013792 00000 n
-0000214953 00000 n
-0000438012 00000 n
+0000244697 00000 n
+0000494034 00000 n
0000013848 00000 n
0000013892 00000 n
-0000215077 00000 n
-0000437933 00000 n
+0000244822 00000 n
+0000493955 00000 n
0000013953 00000 n
0000013990 00000 n
-0000217930 00000 n
-0000437854 00000 n
+0000247352 00000 n
+0000493876 00000 n
0000014051 00000 n
0000014089 00000 n
-0000218055 00000 n
-0000437722 00000 n
+0000247477 00000 n
+0000493744 00000 n
0000014139 00000 n
0000014196 00000 n
-0000218180 00000 n
-0000437604 00000 n
+0000247602 00000 n
+0000493626 00000 n
0000014251 00000 n
0000014299 00000 n
-0000218305 00000 n
-0000437525 00000 n
+0000250141 00000 n
+0000493547 00000 n
0000014359 00000 n
0000014395 00000 n
-0000218430 00000 n
-0000437446 00000 n
+0000250266 00000 n
+0000493468 00000 n
0000014455 00000 n
0000014492 00000 n
-0000221038 00000 n
-0000437314 00000 n
+0000250391 00000 n
+0000493336 00000 n
0000014547 00000 n
0000014592 00000 n
-0000221163 00000 n
-0000437235 00000 n
+0000250516 00000 n
+0000493257 00000 n
0000014652 00000 n
0000014688 00000 n
-0000221288 00000 n
-0000437156 00000 n
+0000252921 00000 n
+0000493178 00000 n
0000014748 00000 n
0000014785 00000 n
-0000221413 00000 n
-0000437024 00000 n
+0000253046 00000 n
+0000493046 00000 n
0000014840 00000 n
0000014890 00000 n
-0000221538 00000 n
-0000436945 00000 n
+0000253171 00000 n
+0000492967 00000 n
0000014950 00000 n
0000014986 00000 n
-0000221663 00000 n
-0000436866 00000 n
+0000253296 00000 n
+0000492888 00000 n
0000015046 00000 n
0000015083 00000 n
-0000221788 00000 n
-0000436734 00000 n
+0000253421 00000 n
+0000492756 00000 n
0000015138 00000 n
0000015178 00000 n
-0000221913 00000 n
-0000436655 00000 n
+0000253546 00000 n
+0000492677 00000 n
0000015238 00000 n
0000015274 00000 n
-0000224172 00000 n
-0000436576 00000 n
+0000255473 00000 n
+0000492598 00000 n
0000015334 00000 n
0000015371 00000 n
-0000224297 00000 n
-0000436458 00000 n
+0000255598 00000 n
+0000492480 00000 n
0000015426 00000 n
0000015467 00000 n
-0000224422 00000 n
-0000436379 00000 n
+0000255722 00000 n
+0000492401 00000 n
0000015527 00000 n
0000015563 00000 n
-0000224545 00000 n
-0000436300 00000 n
+0000255847 00000 n
+0000492322 00000 n
0000015623 00000 n
0000015660 00000 n
-0000224669 00000 n
-0000436168 00000 n
+0000258091 00000 n
+0000492190 00000 n
0000015710 00000 n
-0000015769 00000 n
-0000224794 00000 n
-0000436050 00000 n
-0000015824 00000 n
-0000015864 00000 n
-0000226847 00000 n
-0000435971 00000 n
-0000015924 00000 n
-0000015960 00000 n
-0000226972 00000 n
-0000435892 00000 n
-0000016020 00000 n
-0000016057 00000 n
-0000227097 00000 n
-0000435774 00000 n
-0000016112 00000 n
-0000016148 00000 n
-0000227222 00000 n
-0000435695 00000 n
-0000016208 00000 n
-0000016244 00000 n
-0000227347 00000 n
-0000435616 00000 n
-0000016304 00000 n
-0000016341 00000 n
-0000229520 00000 n
-0000435484 00000 n
-0000016391 00000 n
-0000016442 00000 n
-0000229645 00000 n
-0000435366 00000 n
-0000016497 00000 n
-0000016538 00000 n
-0000229768 00000 n
-0000435287 00000 n
-0000016598 00000 n
-0000016634 00000 n
-0000229893 00000 n
-0000435208 00000 n
-0000016694 00000 n
-0000016731 00000 n
-0000230018 00000 n
-0000435090 00000 n
-0000016786 00000 n
-0000016832 00000 n
-0000230143 00000 n
-0000435011 00000 n
-0000016892 00000 n
-0000016928 00000 n
-0000230267 00000 n
-0000434932 00000 n
-0000016988 00000 n
-0000017025 00000 n
-0000232796 00000 n
-0000434800 00000 n
-0000017075 00000 n
-0000017146 00000 n
-0000232921 00000 n
-0000434721 00000 n
-0000017201 00000 n
-0000017239 00000 n
-0000233046 00000 n
-0000434628 00000 n
-0000017294 00000 n
-0000017329 00000 n
-0000235870 00000 n
-0000434549 00000 n
-0000017384 00000 n
-0000017419 00000 n
-0000235995 00000 n
-0000434431 00000 n
-0000017469 00000 n
-0000017507 00000 n
-0000236120 00000 n
-0000434313 00000 n
-0000017562 00000 n
-0000017604 00000 n
-0000236245 00000 n
-0000434234 00000 n
-0000017664 00000 n
-0000017718 00000 n
-0000236370 00000 n
-0000434155 00000 n
-0000017778 00000 n
-0000017825 00000 n
-0000238506 00000 n
-0000434037 00000 n
-0000017880 00000 n
-0000017922 00000 n
-0000238631 00000 n
-0000433958 00000 n
-0000017982 00000 n
-0000018031 00000 n
-0000238756 00000 n
-0000433865 00000 n
-0000018091 00000 n
-0000018141 00000 n
-0000238881 00000 n
-0000433786 00000 n
-0000018201 00000 n
-0000018252 00000 n
-0000242089 00000 n
-0000433653 00000 n
-0000018300 00000 n
-0000018347 00000 n
-0000242214 00000 n
-0000433574 00000 n
-0000018397 00000 n
-0000018430 00000 n
-0000242339 00000 n
-0000433481 00000 n
-0000018480 00000 n
-0000018544 00000 n
-0000242464 00000 n
-0000433388 00000 n
-0000018594 00000 n
-0000018636 00000 n
-0000249288 00000 n
-0000433295 00000 n
-0000018686 00000 n
-0000018761 00000 n
-0000249413 00000 n
-0000433216 00000 n
-0000018811 00000 n
-0000018871 00000 n
-0000256690 00000 n
-0000433083 00000 n
-0000018919 00000 n
-0000018962 00000 n
-0000256815 00000 n
-0000433018 00000 n
-0000019012 00000 n
-0000019050 00000 n
-0000260664 00000 n
-0000432885 00000 n
-0000019098 00000 n
-0000019144 00000 n
-0000260789 00000 n
-0000432806 00000 n
-0000019194 00000 n
-0000019244 00000 n
-0000264633 00000 n
-0000432713 00000 n
-0000019294 00000 n
-0000019339 00000 n
-0000264757 00000 n
-0000432620 00000 n
-0000019389 00000 n
-0000019446 00000 n
-0000264881 00000 n
-0000432488 00000 n
-0000019496 00000 n
-0000019527 00000 n
-0000265005 00000 n
-0000432409 00000 n
-0000019582 00000 n
-0000019620 00000 n
-0000265129 00000 n
-0000432316 00000 n
-0000019675 00000 n
-0000019715 00000 n
-0000268762 00000 n
-0000432237 00000 n
-0000019770 00000 n
-0000019808 00000 n
-0000268887 00000 n
-0000432105 00000 n
-0000019858 00000 n
-0000019894 00000 n
-0000269012 00000 n
-0000432026 00000 n
-0000019949 00000 n
-0000020005 00000 n
-0000269137 00000 n
-0000431947 00000 n
-0000020060 00000 n
-0000020097 00000 n
-0000269261 00000 n
-0000431854 00000 n
-0000020147 00000 n
-0000020189 00000 n
-0000271550 00000 n
-0000431775 00000 n
-0000020239 00000 n
+0000015801 00000 n
+0000258216 00000 n
+0000492072 00000 n
+0000015856 00000 n
+0000015896 00000 n
+0000258341 00000 n
+0000491993 00000 n
+0000015956 00000 n
+0000015992 00000 n
+0000258466 00000 n
+0000491914 00000 n
+0000016052 00000 n
+0000016089 00000 n
+0000260608 00000 n
+0000491796 00000 n
+0000016144 00000 n
+0000016180 00000 n
+0000260733 00000 n
+0000491717 00000 n
+0000016240 00000 n
+0000016276 00000 n
+0000260858 00000 n
+0000491638 00000 n
+0000016336 00000 n
+0000016373 00000 n
+0000263217 00000 n
+0000491506 00000 n
+0000016423 00000 n
+0000016474 00000 n
+0000263341 00000 n
+0000491388 00000 n
+0000016529 00000 n
+0000016570 00000 n
+0000263466 00000 n
+0000491309 00000 n
+0000016630 00000 n
+0000016666 00000 n
+0000263590 00000 n
+0000491230 00000 n
+0000016726 00000 n
+0000016763 00000 n
+0000266073 00000 n
+0000491112 00000 n
+0000016818 00000 n
+0000016864 00000 n
+0000266198 00000 n
+0000491033 00000 n
+0000016924 00000 n
+0000016960 00000 n
+0000266323 00000 n
+0000490954 00000 n
+0000017020 00000 n
+0000017057 00000 n
+0000266448 00000 n
+0000490822 00000 n
+0000017107 00000 n
+0000017178 00000 n
+0000266573 00000 n
+0000490743 00000 n
+0000017233 00000 n
+0000017271 00000 n
+0000268322 00000 n
+0000490650 00000 n
+0000017326 00000 n
+0000017361 00000 n
+0000270897 00000 n
+0000490571 00000 n
+0000017416 00000 n
+0000017451 00000 n
+0000271021 00000 n
+0000490453 00000 n
+0000017501 00000 n
+0000017539 00000 n
+0000271146 00000 n
+0000490335 00000 n
+0000017594 00000 n
+0000017636 00000 n
+0000271271 00000 n
+0000490256 00000 n
+0000017696 00000 n
+0000017750 00000 n
+0000273600 00000 n
+0000490177 00000 n
+0000017810 00000 n
+0000017857 00000 n
+0000273723 00000 n
+0000490059 00000 n
+0000017912 00000 n
+0000017954 00000 n
+0000273848 00000 n
+0000489980 00000 n
+0000018014 00000 n
+0000018063 00000 n
+0000275666 00000 n
+0000489887 00000 n
+0000018123 00000 n
+0000018173 00000 n
+0000275791 00000 n
+0000489808 00000 n
+0000018233 00000 n
+0000018284 00000 n
+0000278088 00000 n
+0000489675 00000 n
+0000018332 00000 n
+0000018379 00000 n
+0000278213 00000 n
+0000489596 00000 n
+0000018429 00000 n
+0000018462 00000 n
+0000278338 00000 n
+0000489503 00000 n
+0000018512 00000 n
+0000018576 00000 n
+0000278463 00000 n
+0000489410 00000 n
+0000018626 00000 n
+0000018668 00000 n
+0000285574 00000 n
+0000489317 00000 n
+0000018718 00000 n
+0000018793 00000 n
+0000285699 00000 n
+0000489238 00000 n
+0000018843 00000 n
+0000018903 00000 n
+0000295084 00000 n
+0000489105 00000 n
+0000018951 00000 n
+0000018994 00000 n
+0000295209 00000 n
+0000489040 00000 n
+0000019044 00000 n
+0000019082 00000 n
+0000299282 00000 n
+0000488907 00000 n
+0000019130 00000 n
+0000019176 00000 n
+0000299407 00000 n
+0000488828 00000 n
+0000019226 00000 n
+0000019276 00000 n
+0000303214 00000 n
+0000488735 00000 n
+0000019326 00000 n
+0000019371 00000 n
+0000303339 00000 n
+0000488642 00000 n
+0000019421 00000 n
+0000019478 00000 n
+0000306416 00000 n
+0000488510 00000 n
+0000019528 00000 n
+0000019559 00000 n
+0000306541 00000 n
+0000488431 00000 n
+0000019614 00000 n
+0000019652 00000 n
+0000306666 00000 n
+0000488338 00000 n
+0000019707 00000 n
+0000019747 00000 n
+0000306791 00000 n
+0000488259 00000 n
+0000019802 00000 n
+0000019840 00000 n
+0000306916 00000 n
+0000488127 00000 n
+0000019890 00000 n
+0000019926 00000 n
+0000307041 00000 n
+0000488048 00000 n
+0000019981 00000 n
+0000020037 00000 n
+0000309994 00000 n
+0000487969 00000 n
+0000020092 00000 n
+0000020129 00000 n
+0000310119 00000 n
+0000487876 00000 n
+0000020179 00000 n
+0000020221 00000 n
+0000312178 00000 n
+0000487797 00000 n
0000020271 00000 n
-0000275201 00000 n
-0000431642 00000 n
-0000020319 00000 n
-0000020375 00000 n
-0000275326 00000 n
-0000431563 00000 n
-0000020425 00000 n
-0000020462 00000 n
-0000275451 00000 n
-0000431470 00000 n
-0000020512 00000 n
-0000020554 00000 n
-0000279198 00000 n
-0000431391 00000 n
-0000020604 00000 n
-0000020647 00000 n
-0000283755 00000 n
-0000431258 00000 n
-0000020695 00000 n
-0000020725 00000 n
-0000283880 00000 n
-0000431179 00000 n
-0000020775 00000 n
-0000020810 00000 n
-0000284005 00000 n
-0000431047 00000 n
-0000020860 00000 n
-0000020900 00000 n
-0000284130 00000 n
-0000430968 00000 n
-0000020955 00000 n
-0000020996 00000 n
-0000284255 00000 n
-0000430889 00000 n
-0000021051 00000 n
-0000021092 00000 n
-0000287305 00000 n
-0000430771 00000 n
-0000021142 00000 n
-0000021182 00000 n
-0000287430 00000 n
-0000430706 00000 n
-0000021237 00000 n
-0000021303 00000 n
-0000290099 00000 n
-0000430573 00000 n
-0000021351 00000 n
-0000021395 00000 n
-0000290224 00000 n
-0000430494 00000 n
-0000021445 00000 n
-0000021475 00000 n
-0000290349 00000 n
-0000430415 00000 n
-0000021525 00000 n
-0000021566 00000 n
-0000292012 00000 n
-0000430282 00000 n
-0000021614 00000 n
-0000021648 00000 n
-0000292137 00000 n
-0000430164 00000 n
-0000021698 00000 n
-0000021752 00000 n
-0000292262 00000 n
-0000430085 00000 n
-0000021807 00000 n
-0000021855 00000 n
-0000296413 00000 n
-0000430006 00000 n
-0000021910 00000 n
-0000021966 00000 n
-0000296538 00000 n
-0000429874 00000 n
-0000022016 00000 n
-0000022104 00000 n
-0000296663 00000 n
-0000429795 00000 n
-0000022159 00000 n
-0000022217 00000 n
-0000299158 00000 n
-0000429716 00000 n
-0000022272 00000 n
-0000022341 00000 n
-0000305297 00000 n
-0000429584 00000 n
-0000022391 00000 n
-0000022450 00000 n
-0000305422 00000 n
-0000429519 00000 n
-0000022505 00000 n
-0000022573 00000 n
-0000315406 00000 n
-0000429401 00000 n
-0000022623 00000 n
-0000022658 00000 n
-0000315531 00000 n
-0000429322 00000 n
-0000022713 00000 n
-0000022771 00000 n
-0000315656 00000 n
-0000429243 00000 n
-0000022826 00000 n
-0000022879 00000 n
-0000317191 00000 n
-0000429110 00000 n
-0000022927 00000 n
-0000022968 00000 n
-0000317316 00000 n
-0000429031 00000 n
-0000023018 00000 n
-0000023053 00000 n
-0000317441 00000 n
-0000428952 00000 n
-0000023103 00000 n
+0000020303 00000 n
+0000315311 00000 n
+0000487664 00000 n
+0000020351 00000 n
+0000020407 00000 n
+0000315436 00000 n
+0000487585 00000 n
+0000020457 00000 n
+0000020494 00000 n
+0000315561 00000 n
+0000487492 00000 n
+0000020544 00000 n
+0000020586 00000 n
+0000318635 00000 n
+0000487413 00000 n
+0000020636 00000 n
+0000020679 00000 n
+0000323620 00000 n
+0000487280 00000 n
+0000020727 00000 n
+0000020757 00000 n
+0000323745 00000 n
+0000487201 00000 n
+0000020807 00000 n
+0000020842 00000 n
+0000323870 00000 n
+0000487069 00000 n
+0000020892 00000 n
+0000020932 00000 n
+0000323995 00000 n
+0000486990 00000 n
+0000020987 00000 n
+0000021028 00000 n
+0000327290 00000 n
+0000486911 00000 n
+0000021083 00000 n
+0000021124 00000 n
+0000327415 00000 n
+0000486793 00000 n
+0000021174 00000 n
+0000021214 00000 n
+0000327540 00000 n
+0000486728 00000 n
+0000021269 00000 n
+0000021335 00000 n
+0000333951 00000 n
+0000486595 00000 n
+0000021383 00000 n
+0000021427 00000 n
+0000334076 00000 n
+0000486516 00000 n
+0000021477 00000 n
+0000021507 00000 n
+0000334201 00000 n
+0000486437 00000 n
+0000021557 00000 n
+0000021598 00000 n
+0000335823 00000 n
+0000486304 00000 n
+0000021646 00000 n
+0000021680 00000 n
+0000335948 00000 n
+0000486186 00000 n
+0000021730 00000 n
+0000021784 00000 n
+0000336073 00000 n
+0000486107 00000 n
+0000021839 00000 n
+0000021887 00000 n
+0000339881 00000 n
+0000486028 00000 n
+0000021942 00000 n
+0000021998 00000 n
+0000342351 00000 n
+0000485896 00000 n
+0000022048 00000 n
+0000022136 00000 n
+0000342476 00000 n
+0000485817 00000 n
+0000022191 00000 n
+0000022249 00000 n
+0000345327 00000 n
+0000485738 00000 n
+0000022304 00000 n
+0000022373 00000 n
+0000351475 00000 n
+0000485606 00000 n
+0000022423 00000 n
+0000022482 00000 n
+0000351600 00000 n
+0000485541 00000 n
+0000022537 00000 n
+0000022605 00000 n
+0000361676 00000 n
+0000485423 00000 n
+0000022655 00000 n
+0000022690 00000 n
+0000361801 00000 n
+0000485344 00000 n
+0000022745 00000 n
+0000022803 00000 n
+0000361925 00000 n
+0000485265 00000 n
+0000022858 00000 n
+0000022911 00000 n
+0000364135 00000 n
+0000485132 00000 n
+0000022959 00000 n
+0000023000 00000 n
+0000364260 00000 n
+0000485053 00000 n
+0000023050 00000 n
+0000023085 00000 n
+0000364385 00000 n
+0000484974 00000 n
0000023135 00000 n
-0000321366 00000 n
-0000428872 00000 n
-0000023183 00000 n
-0000023223 00000 n
-0000023594 00000 n
-0000023835 00000 n
-0000023275 00000 n
-0000023713 00000 n
-0000023774 00000 n
-0000425664 00000 n
-0000412425 00000 n
-0000425498 00000 n
-0000411972 00000 n
-0000406987 00000 n
-0000411809 00000 n
-0000426537 00000 n
-0000025917 00000 n
-0000024999 00000 n
-0000023920 00000 n
-0000025856 00000 n
-0000406166 00000 n
-0000389962 00000 n
-0000406002 00000 n
-0000388026 00000 n
-0000369674 00000 n
-0000387863 00000 n
-0000025162 00000 n
-0000368693 00000 n
-0000352549 00000 n
-0000368529 00000 n
-0000025333 00000 n
-0000025503 00000 n
-0000025674 00000 n
-0000033588 00000 n
-0000028025 00000 n
-0000026015 00000 n
-0000033527 00000 n
-0000350913 00000 n
-0000341268 00000 n
-0000350749 00000 n
-0000028416 00000 n
-0000340836 00000 n
-0000339316 00000 n
-0000340672 00000 n
-0000028566 00000 n
-0000028721 00000 n
-0000028869 00000 n
-0000029029 00000 n
-0000337416 00000 n
-0000335406 00000 n
-0000337253 00000 n
-0000029181 00000 n
-0000029367 00000 n
-0000029516 00000 n
-0000029667 00000 n
-0000029817 00000 n
-0000029973 00000 n
-0000030143 00000 n
-0000030310 00000 n
-0000030460 00000 n
-0000030635 00000 n
-0000030811 00000 n
-0000030980 00000 n
-0000031130 00000 n
-0000031277 00000 n
-0000031422 00000 n
-0000031574 00000 n
-0000031743 00000 n
-0000031893 00000 n
-0000032064 00000 n
-0000032217 00000 n
-0000032390 00000 n
-0000032561 00000 n
-0000032707 00000 n
-0000032874 00000 n
-0000033047 00000 n
-0000033199 00000 n
-0000033355 00000 n
-0000086768 00000 n
-0000093970 00000 n
-0000101194 00000 n
-0000113674 00000 n
-0000122527 00000 n
-0000140066 00000 n
-0000148692 00000 n
-0000163306 00000 n
-0000165985 00000 n
-0000171849 00000 n
-0000242151 00000 n
-0000256752 00000 n
-0000260726 00000 n
-0000275263 00000 n
-0000283817 00000 n
-0000290161 00000 n
-0000292074 00000 n
-0000317253 00000 n
-0000321428 00000 n
-0000042131 00000 n
-0000035241 00000 n
-0000033712 00000 n
-0000042005 00000 n
-0000042068 00000 n
-0000035735 00000 n
-0000035888 00000 n
-0000036042 00000 n
-0000036196 00000 n
-0000036351 00000 n
-0000036504 00000 n
-0000036659 00000 n
-0000036814 00000 n
-0000036969 00000 n
-0000037124 00000 n
-0000037278 00000 n
-0000037431 00000 n
-0000037586 00000 n
-0000037740 00000 n
-0000037895 00000 n
-0000038050 00000 n
-0000038205 00000 n
-0000038365 00000 n
-0000038525 00000 n
-0000038685 00000 n
-0000038838 00000 n
-0000038991 00000 n
-0000039146 00000 n
-0000039300 00000 n
-0000039455 00000 n
-0000039615 00000 n
-0000039775 00000 n
-0000039935 00000 n
-0000040095 00000 n
-0000040255 00000 n
-0000040415 00000 n
-0000040575 00000 n
-0000040734 00000 n
-0000040894 00000 n
-0000041055 00000 n
-0000041215 00000 n
-0000041374 00000 n
-0000041534 00000 n
-0000041693 00000 n
-0000041852 00000 n
-0000052348 00000 n
-0000044223 00000 n
-0000042217 00000 n
-0000052285 00000 n
-0000334821 00000 n
-0000325631 00000 n
-0000334655 00000 n
-0000044780 00000 n
-0000044940 00000 n
-0000045100 00000 n
-0000045255 00000 n
-0000045408 00000 n
-0000045563 00000 n
-0000045723 00000 n
-0000045883 00000 n
-0000046042 00000 n
-0000046197 00000 n
-0000046357 00000 n
-0000046510 00000 n
-0000046665 00000 n
-0000046820 00000 n
-0000046975 00000 n
-0000047130 00000 n
-0000047285 00000 n
-0000047440 00000 n
-0000047595 00000 n
-0000047749 00000 n
-0000047904 00000 n
-0000048056 00000 n
-0000048208 00000 n
-0000048363 00000 n
-0000048517 00000 n
-0000048673 00000 n
-0000048834 00000 n
-0000048995 00000 n
-0000049149 00000 n
-0000049310 00000 n
-0000049471 00000 n
-0000049637 00000 n
-0000049802 00000 n
-0000049963 00000 n
-0000050129 00000 n
-0000050295 00000 n
-0000050461 00000 n
-0000050627 00000 n
-0000050793 00000 n
-0000050959 00000 n
-0000051124 00000 n
-0000051289 00000 n
-0000051455 00000 n
-0000051622 00000 n
-0000051788 00000 n
-0000051955 00000 n
-0000052120 00000 n
-0000063171 00000 n
-0000054461 00000 n
-0000052448 00000 n
-0000063108 00000 n
-0000055036 00000 n
-0000055203 00000 n
-0000055370 00000 n
-0000055537 00000 n
-0000055704 00000 n
-0000055871 00000 n
-0000056038 00000 n
-0000056204 00000 n
-0000056371 00000 n
-0000056538 00000 n
-0000056704 00000 n
-0000056871 00000 n
-0000057038 00000 n
-0000057205 00000 n
-0000057372 00000 n
-0000057539 00000 n
-0000057706 00000 n
-0000057862 00000 n
-0000058023 00000 n
-0000058183 00000 n
-0000058349 00000 n
-0000058515 00000 n
-0000058680 00000 n
-0000058846 00000 n
-0000059012 00000 n
-0000059178 00000 n
-0000059344 00000 n
-0000059510 00000 n
-0000059671 00000 n
-0000059832 00000 n
+0000023167 00000 n
+0000368236 00000 n
+0000484894 00000 n
+0000023215 00000 n
+0000023255 00000 n
+0000023617 00000 n
+0000023858 00000 n
+0000023307 00000 n
+0000023736 00000 n
+0000023797 00000 n
+0000481070 00000 n
+0000467831 00000 n
+0000480904 00000 n
+0000467418 00000 n
+0000463632 00000 n
+0000467255 00000 n
+0000481943 00000 n
+0000025991 00000 n
+0000025073 00000 n
+0000023943 00000 n
+0000025930 00000 n
+0000462811 00000 n
+0000446607 00000 n
+0000462647 00000 n
+0000444662 00000 n
+0000426259 00000 n
+0000444499 00000 n
+0000025236 00000 n
+0000425287 00000 n
+0000409417 00000 n
+0000425123 00000 n
+0000025407 00000 n
+0000025577 00000 n
+0000025748 00000 n
+0000029365 00000 n
+0000027488 00000 n
+0000026089 00000 n
+0000029243 00000 n
+0000029304 00000 n
+0000027699 00000 n
+0000407941 00000 n
+0000406001 00000 n
+0000407777 00000 n
+0000027847 00000 n
+0000028001 00000 n
+0000028148 00000 n
+0000028307 00000 n
+0000404101 00000 n
+0000402091 00000 n
+0000403938 00000 n
+0000028458 00000 n
+0000028645 00000 n
+0000028793 00000 n
+0000028943 00000 n
+0000029092 00000 n
+0000093846 00000 n
+0000100697 00000 n
+0000109160 00000 n
+0000122425 00000 n
+0000132544 00000 n
+0000152958 00000 n
+0000162312 00000 n
+0000176989 00000 n
+0000180413 00000 n
+0000035480 00000 n
+0000031541 00000 n
+0000029476 00000 n
+0000035419 00000 n
+0000031863 00000 n
+0000032033 00000 n
+0000032204 00000 n
+0000032353 00000 n
+0000032528 00000 n
+0000032703 00000 n
+0000032873 00000 n
+0000033023 00000 n
+0000033169 00000 n
+0000033315 00000 n
+0000033467 00000 n
+0000033637 00000 n
+0000033787 00000 n
+0000033959 00000 n
+0000034112 00000 n
+0000034286 00000 n
+0000034458 00000 n
+0000034603 00000 n
+0000034770 00000 n
+0000034943 00000 n
+0000035095 00000 n
+0000035250 00000 n
+0000185451 00000 n
+0000278150 00000 n
+0000295146 00000 n
+0000299344 00000 n
+0000315373 00000 n
+0000323682 00000 n
+0000334013 00000 n
+0000335885 00000 n
+0000364197 00000 n
+0000368298 00000 n
+0000044740 00000 n
+0000038014 00000 n
+0000035578 00000 n
+0000044614 00000 n
+0000044677 00000 n
+0000038499 00000 n
+0000038651 00000 n
+0000038805 00000 n
+0000038960 00000 n
+0000039115 00000 n
+0000039268 00000 n
+0000039423 00000 n
+0000039578 00000 n
+0000039733 00000 n
+0000039887 00000 n
+0000040042 00000 n
+0000040195 00000 n
+0000040349 00000 n
+0000040504 00000 n
+0000040659 00000 n
+0000040814 00000 n
+0000040969 00000 n
+0000041129 00000 n
+0000041289 00000 n
+0000041449 00000 n
+0000041602 00000 n
+0000041755 00000 n
+0000041909 00000 n
+0000042064 00000 n
+0000042219 00000 n
+0000042379 00000 n
+0000042539 00000 n
+0000042699 00000 n
+0000042859 00000 n
+0000043019 00000 n
+0000043179 00000 n
+0000043338 00000 n
+0000043498 00000 n
+0000043658 00000 n
+0000043818 00000 n
+0000043977 00000 n
+0000044137 00000 n
+0000044296 00000 n
+0000044455 00000 n
+0000056333 00000 n
+0000048049 00000 n
+0000044826 00000 n
+0000056270 00000 n
+0000401506 00000 n
+0000392316 00000 n
+0000401340 00000 n
+0000048615 00000 n
+0000048770 00000 n
+0000048930 00000 n
+0000049090 00000 n
+0000049245 00000 n
+0000049398 00000 n
+0000049553 00000 n
+0000049713 00000 n
+0000049872 00000 n
+0000050032 00000 n
+0000050187 00000 n
+0000050346 00000 n
+0000050498 00000 n
+0000050653 00000 n
+0000050808 00000 n
+0000050963 00000 n
+0000051118 00000 n
+0000051273 00000 n
+0000051428 00000 n
+0000051582 00000 n
+0000051737 00000 n
+0000051892 00000 n
+0000052044 00000 n
+0000052195 00000 n
+0000052350 00000 n
+0000052504 00000 n
+0000052660 00000 n
+0000052821 00000 n
+0000052980 00000 n
+0000053136 00000 n
+0000053297 00000 n
+0000053458 00000 n
+0000053623 00000 n
+0000053789 00000 n
+0000053950 00000 n
+0000054116 00000 n
+0000054282 00000 n
+0000054448 00000 n
+0000054614 00000 n
+0000054780 00000 n
+0000054945 00000 n
+0000055110 00000 n
+0000055276 00000 n
+0000055442 00000 n
+0000055608 00000 n
+0000055775 00000 n
+0000055940 00000 n
+0000056105 00000 n
+0000069221 00000 n
0000059993 00000 n
-0000060153 00000 n
-0000060319 00000 n
-0000060485 00000 n
-0000060645 00000 n
-0000060811 00000 n
-0000060977 00000 n
-0000061138 00000 n
-0000061304 00000 n
-0000061470 00000 n
-0000061631 00000 n
-0000061797 00000 n
-0000061963 00000 n
-0000062124 00000 n
-0000062291 00000 n
-0000062458 00000 n
-0000062619 00000 n
-0000062783 00000 n
-0000062948 00000 n
-0000073682 00000 n
-0000064925 00000 n
-0000063258 00000 n
-0000073619 00000 n
-0000065510 00000 n
-0000065677 00000 n
-0000065844 00000 n
-0000066000 00000 n
-0000066161 00000 n
-0000066327 00000 n
-0000066493 00000 n
-0000066654 00000 n
-0000066820 00000 n
-0000066985 00000 n
-0000067146 00000 n
-0000067312 00000 n
-0000067477 00000 n
-0000067638 00000 n
-0000067804 00000 n
-0000067970 00000 n
-0000068131 00000 n
-0000068297 00000 n
-0000068463 00000 n
-0000068619 00000 n
-0000068780 00000 n
-0000068945 00000 n
-0000069111 00000 n
-0000069272 00000 n
-0000069438 00000 n
-0000069603 00000 n
-0000069759 00000 n
-0000069920 00000 n
-0000070086 00000 n
-0000070252 00000 n
-0000070413 00000 n
-0000070579 00000 n
-0000070745 00000 n
-0000070901 00000 n
-0000071061 00000 n
-0000071222 00000 n
-0000071383 00000 n
-0000071538 00000 n
-0000071699 00000 n
-0000071865 00000 n
-0000072031 00000 n
-0000072192 00000 n
-0000072358 00000 n
-0000072524 00000 n
-0000072690 00000 n
-0000072844 00000 n
-0000073000 00000 n
-0000073156 00000 n
-0000073311 00000 n
-0000073465 00000 n
-0000426658 00000 n
-0000083455 00000 n
-0000075785 00000 n
-0000073795 00000 n
-0000083392 00000 n
-0000076325 00000 n
-0000076479 00000 n
-0000076635 00000 n
-0000076789 00000 n
-0000076945 00000 n
-0000077101 00000 n
-0000077257 00000 n
-0000077413 00000 n
-0000077573 00000 n
-0000077734 00000 n
-0000077895 00000 n
-0000078050 00000 n
-0000078211 00000 n
-0000078372 00000 n
-0000078528 00000 n
-0000078684 00000 n
-0000078838 00000 n
-0000078994 00000 n
-0000079150 00000 n
-0000079305 00000 n
-0000079459 00000 n
-0000079614 00000 n
-0000079769 00000 n
-0000079930 00000 n
-0000080091 00000 n
-0000080247 00000 n
-0000080408 00000 n
-0000080562 00000 n
-0000080718 00000 n
-0000080873 00000 n
-0000081027 00000 n
-0000081183 00000 n
-0000081343 00000 n
-0000081504 00000 n
-0000081660 00000 n
-0000081821 00000 n
-0000081982 00000 n
-0000082138 00000 n
-0000082299 00000 n
-0000082455 00000 n
-0000082615 00000 n
-0000082775 00000 n
-0000082929 00000 n
-0000083084 00000 n
-0000083240 00000 n
-0000087079 00000 n
-0000086522 00000 n
-0000083555 00000 n
-0000086645 00000 n
-0000086892 00000 n
-0000087016 00000 n
-0000090605 00000 n
-0000090295 00000 n
-0000087165 00000 n
-0000090418 00000 n
-0000090542 00000 n
-0000094905 00000 n
+0000056433 00000 n
+0000069158 00000 n
+0000060596 00000 n
+0000060763 00000 n
+0000060930 00000 n
+0000061097 00000 n
+0000061264 00000 n
+0000061431 00000 n
+0000061598 00000 n
+0000061765 00000 n
+0000061932 00000 n
+0000062098 00000 n
+0000062265 00000 n
+0000062432 00000 n
+0000062598 00000 n
+0000062765 00000 n
+0000062932 00000 n
+0000063099 00000 n
+0000063266 00000 n
+0000063422 00000 n
+0000063583 00000 n
+0000063744 00000 n
+0000063910 00000 n
+0000064075 00000 n
+0000064241 00000 n
+0000064407 00000 n
+0000064573 00000 n
+0000064738 00000 n
+0000064904 00000 n
+0000065070 00000 n
+0000065231 00000 n
+0000065392 00000 n
+0000065553 00000 n
+0000065714 00000 n
+0000065880 00000 n
+0000066046 00000 n
+0000066206 00000 n
+0000066372 00000 n
+0000066538 00000 n
+0000066698 00000 n
+0000066864 00000 n
+0000067030 00000 n
+0000067191 00000 n
+0000067357 00000 n
+0000067523 00000 n
+0000067685 00000 n
+0000067852 00000 n
+0000068019 00000 n
+0000068180 00000 n
+0000068347 00000 n
+0000068514 00000 n
+0000068675 00000 n
+0000068839 00000 n
+0000069004 00000 n
+0000482063 00000 n
+0000080701 00000 n
+0000072134 00000 n
+0000069308 00000 n
+0000080638 00000 n
+0000072710 00000 n
+0000072871 00000 n
+0000073037 00000 n
+0000073203 00000 n
+0000073364 00000 n
+0000073530 00000 n
+0000073696 00000 n
+0000073857 00000 n
+0000074023 00000 n
+0000074188 00000 n
+0000074349 00000 n
+0000074515 00000 n
+0000074680 00000 n
+0000074841 00000 n
+0000075007 00000 n
+0000075173 00000 n
+0000075329 00000 n
+0000075490 00000 n
+0000075656 00000 n
+0000075822 00000 n
+0000075983 00000 n
+0000076148 00000 n
+0000076314 00000 n
+0000076470 00000 n
+0000076631 00000 n
+0000076796 00000 n
+0000076962 00000 n
+0000077123 00000 n
+0000077289 00000 n
+0000077455 00000 n
+0000077611 00000 n
+0000077772 00000 n
+0000077933 00000 n
+0000078094 00000 n
+0000078249 00000 n
+0000078410 00000 n
+0000078576 00000 n
+0000078741 00000 n
+0000078902 00000 n
+0000079068 00000 n
+0000079234 00000 n
+0000079400 00000 n
+0000079554 00000 n
+0000079710 00000 n
+0000079866 00000 n
+0000080020 00000 n
+0000080176 00000 n
+0000080332 00000 n
+0000080484 00000 n
+0000091184 00000 n
+0000083840 00000 n
+0000080814 00000 n
+0000091121 00000 n
+0000084362 00000 n
+0000084516 00000 n
+0000084672 00000 n
+0000084828 00000 n
+0000084984 00000 n
+0000085140 00000 n
+0000085301 00000 n
+0000085462 00000 n
+0000085623 00000 n
+0000085778 00000 n
+0000085939 00000 n
+0000086100 00000 n
+0000086255 00000 n
+0000086411 00000 n
+0000086565 00000 n
+0000086721 00000 n
+0000086877 00000 n
+0000087033 00000 n
+0000087187 00000 n
+0000087342 00000 n
+0000087498 00000 n
+0000087659 00000 n
+0000087818 00000 n
+0000087973 00000 n
+0000088134 00000 n
+0000088288 00000 n
+0000088444 00000 n
+0000088600 00000 n
+0000088754 00000 n
+0000088909 00000 n
+0000089070 00000 n
+0000089231 00000 n
+0000089387 00000 n
+0000089547 00000 n
+0000089708 00000 n
+0000089864 00000 n
+0000090025 00000 n
+0000090181 00000 n
+0000090342 00000 n
+0000090503 00000 n
+0000090657 00000 n
+0000090812 00000 n
+0000090968 00000 n
+0000094032 00000 n
+0000093600 00000 n
+0000091284 00000 n
0000093723 00000 n
-0000090718 00000 n
-0000093846 00000 n
-0000094094 00000 n
-0000094157 00000 n
-0000094219 00000 n
-0000094282 00000 n
-0000094406 00000 n
-0000094529 00000 n
-0000094592 00000 n
-0000094655 00000 n
-0000094717 00000 n
-0000094780 00000 n
-0000094843 00000 n
-0000098713 00000 n
-0000098217 00000 n
-0000094991 00000 n
-0000098340 00000 n
-0000098403 00000 n
-0000098527 00000 n
-0000098650 00000 n
-0000101633 00000 n
-0000100947 00000 n
-0000098813 00000 n
-0000101070 00000 n
-0000101318 00000 n
-0000101381 00000 n
-0000101444 00000 n
-0000101507 00000 n
-0000101570 00000 n
-0000426783 00000 n
-0000104121 00000 n
-0000103811 00000 n
-0000101732 00000 n
-0000103934 00000 n
-0000104058 00000 n
-0000106544 00000 n
-0000106048 00000 n
-0000104247 00000 n
-0000106171 00000 n
-0000106295 00000 n
-0000106419 00000 n
-0000106482 00000 n
-0000109439 00000 n
-0000108633 00000 n
-0000106657 00000 n
-0000108756 00000 n
-0000108819 00000 n
-0000108882 00000 n
-0000109005 00000 n
-0000109129 00000 n
-0000109252 00000 n
-0000109376 00000 n
-0000114302 00000 n
-0000113006 00000 n
-0000109539 00000 n
-0000113550 00000 n
-0000113159 00000 n
-0000113360 00000 n
-0000113737 00000 n
-0000113800 00000 n
-0000113863 00000 n
-0000113926 00000 n
-0000113988 00000 n
-0000114051 00000 n
-0000114114 00000 n
-0000114177 00000 n
-0000114240 00000 n
-0000118902 00000 n
-0000117712 00000 n
-0000114401 00000 n
-0000117835 00000 n
-0000117898 00000 n
-0000117961 00000 n
-0000118024 00000 n
-0000118087 00000 n
-0000118150 00000 n
-0000118213 00000 n
-0000118276 00000 n
-0000118339 00000 n
-0000118402 00000 n
-0000118465 00000 n
-0000118527 00000 n
+0000093969 00000 n
+0000098019 00000 n
+0000097585 00000 n
+0000094118 00000 n
+0000097708 00000 n
+0000097832 00000 n
+0000097956 00000 n
+0000101379 00000 n
+0000100450 00000 n
+0000098132 00000 n
+0000100573 00000 n
+0000100820 00000 n
+0000100883 00000 n
+0000100944 00000 n
+0000101007 00000 n
+0000101130 00000 n
+0000101254 00000 n
+0000101317 00000 n
+0000105606 00000 n
+0000104858 00000 n
+0000101465 00000 n
+0000104981 00000 n
+0000105044 00000 n
+0000105107 00000 n
+0000105170 00000 n
+0000105233 00000 n
+0000105296 00000 n
+0000105420 00000 n
+0000105543 00000 n
+0000482188 00000 n
+0000107114 00000 n
+0000106928 00000 n
+0000105706 00000 n
+0000107051 00000 n
+0000109535 00000 n
+0000108913 00000 n
+0000107201 00000 n
+0000109036 00000 n
+0000109283 00000 n
+0000109346 00000 n
+0000109409 00000 n
+0000109472 00000 n
+0000111804 00000 n
+0000111431 00000 n
+0000109634 00000 n
+0000111554 00000 n
+0000111617 00000 n
+0000111741 00000 n
+0000114008 00000 n
+0000113699 00000 n
+0000111917 00000 n
+0000113822 00000 n
+0000113946 00000 n
+0000116273 00000 n
+0000115774 00000 n
+0000114134 00000 n
+0000115897 00000 n
+0000116021 00000 n
+0000116084 00000 n
+0000116147 00000 n
+0000116210 00000 n
+0000118900 00000 n
+0000118219 00000 n
+0000116386 00000 n
+0000118342 00000 n
+0000118466 00000 n
0000118590 00000 n
-0000118653 00000 n
-0000118714 00000 n
-0000118777 00000 n
-0000118840 00000 n
-0000123340 00000 n
-0000122280 00000 n
-0000118989 00000 n
-0000122403 00000 n
-0000122651 00000 n
-0000122774 00000 n
-0000122837 00000 n
-0000122900 00000 n
-0000122963 00000 n
-0000123025 00000 n
-0000123088 00000 n
-0000123151 00000 n
-0000123214 00000 n
-0000123277 00000 n
-0000426908 00000 n
-0000127017 00000 n
-0000125522 00000 n
-0000123426 00000 n
-0000125645 00000 n
-0000125708 00000 n
-0000125771 00000 n
-0000125834 00000 n
-0000125957 00000 n
-0000126082 00000 n
-0000126206 00000 n
-0000126330 00000 n
-0000126455 00000 n
-0000126580 00000 n
-0000126705 00000 n
-0000126829 00000 n
-0000126954 00000 n
-0000130596 00000 n
-0000129041 00000 n
-0000127117 00000 n
-0000129164 00000 n
-0000129289 00000 n
-0000129413 00000 n
-0000129538 00000 n
-0000129663 00000 n
-0000129786 00000 n
-0000129911 00000 n
-0000130036 00000 n
-0000130160 00000 n
-0000130285 00000 n
-0000130348 00000 n
-0000130411 00000 n
-0000130473 00000 n
-0000130535 00000 n
-0000135258 00000 n
-0000134128 00000 n
-0000130709 00000 n
-0000134251 00000 n
-0000134314 00000 n
-0000134377 00000 n
-0000134440 00000 n
-0000134503 00000 n
-0000134566 00000 n
-0000134629 00000 n
-0000134692 00000 n
-0000134755 00000 n
-0000134818 00000 n
-0000134881 00000 n
-0000135006 00000 n
-0000135069 00000 n
-0000135132 00000 n
-0000135195 00000 n
-0000137365 00000 n
-0000136426 00000 n
-0000135358 00000 n
-0000136549 00000 n
-0000136674 00000 n
-0000136737 00000 n
-0000136800 00000 n
-0000136863 00000 n
-0000136926 00000 n
-0000136989 00000 n
-0000137051 00000 n
-0000137114 00000 n
-0000137177 00000 n
-0000137240 00000 n
-0000137303 00000 n
-0000141195 00000 n
-0000139818 00000 n
-0000137465 00000 n
-0000139941 00000 n
-0000140191 00000 n
-0000140254 00000 n
-0000140317 00000 n
-0000140380 00000 n
-0000140443 00000 n
-0000140506 00000 n
-0000140569 00000 n
-0000140632 00000 n
-0000140757 00000 n
-0000140819 00000 n
-0000140882 00000 n
-0000140945 00000 n
-0000141008 00000 n
-0000141133 00000 n
-0000143260 00000 n
-0000142824 00000 n
-0000141307 00000 n
-0000142947 00000 n
-0000143072 00000 n
-0000143197 00000 n
-0000427033 00000 n
-0000145277 00000 n
-0000144714 00000 n
-0000143386 00000 n
-0000144837 00000 n
-0000144900 00000 n
-0000144963 00000 n
-0000145026 00000 n
-0000145089 00000 n
-0000145214 00000 n
-0000149130 00000 n
-0000148444 00000 n
-0000145403 00000 n
-0000148567 00000 n
-0000148817 00000 n
-0000148942 00000 n
-0000149067 00000 n
-0000153040 00000 n
-0000152605 00000 n
-0000149229 00000 n
-0000152728 00000 n
-0000152853 00000 n
-0000152978 00000 n
-0000157382 00000 n
-0000156696 00000 n
-0000153140 00000 n
-0000156819 00000 n
-0000156944 00000 n
-0000157069 00000 n
-0000157194 00000 n
-0000157319 00000 n
-0000159683 00000 n
-0000159497 00000 n
-0000157495 00000 n
-0000159620 00000 n
-0000163369 00000 n
-0000163058 00000 n
-0000159770 00000 n
-0000163181 00000 n
-0000324449 00000 n
-0000322573 00000 n
-0000324283 00000 n
-0000427158 00000 n
-0000164846 00000 n
-0000164660 00000 n
-0000163495 00000 n
-0000164783 00000 n
-0000166487 00000 n
-0000165737 00000 n
-0000164946 00000 n
-0000165860 00000 n
-0000166110 00000 n
-0000166173 00000 n
-0000166236 00000 n
-0000166299 00000 n
-0000166362 00000 n
-0000166425 00000 n
-0000172287 00000 n
-0000169923 00000 n
-0000166586 00000 n
-0000171724 00000 n
-0000171974 00000 n
-0000170130 00000 n
-0000170323 00000 n
-0000170517 00000 n
-0000170740 00000 n
-0000170963 00000 n
-0000171152 00000 n
-0000171328 00000 n
-0000171536 00000 n
-0000172037 00000 n
-0000172100 00000 n
-0000172162 00000 n
-0000172225 00000 n
-0000176721 00000 n
-0000175414 00000 n
-0000172412 00000 n
-0000175537 00000 n
-0000175600 00000 n
-0000175725 00000 n
-0000175850 00000 n
-0000175975 00000 n
-0000176100 00000 n
-0000176162 00000 n
-0000176224 00000 n
-0000176287 00000 n
-0000176350 00000 n
-0000176413 00000 n
-0000176538 00000 n
-0000176659 00000 n
-0000179891 00000 n
-0000178585 00000 n
-0000176821 00000 n
-0000178708 00000 n
-0000178833 00000 n
-0000178956 00000 n
-0000179081 00000 n
-0000179206 00000 n
-0000179331 00000 n
-0000179456 00000 n
-0000179581 00000 n
-0000179703 00000 n
-0000179828 00000 n
-0000183176 00000 n
-0000181991 00000 n
-0000180004 00000 n
-0000182114 00000 n
-0000182239 00000 n
-0000182364 00000 n
-0000182489 00000 n
-0000182614 00000 n
-0000182738 00000 n
-0000182863 00000 n
-0000182988 00000 n
-0000183113 00000 n
-0000427283 00000 n
-0000186459 00000 n
-0000185525 00000 n
-0000183289 00000 n
-0000185648 00000 n
-0000185773 00000 n
-0000185897 00000 n
-0000186022 00000 n
-0000186147 00000 n
-0000186272 00000 n
-0000186397 00000 n
-0000189425 00000 n
-0000188614 00000 n
-0000186585 00000 n
-0000188737 00000 n
-0000188862 00000 n
-0000188987 00000 n
-0000189112 00000 n
-0000189237 00000 n
-0000189362 00000 n
-0000191869 00000 n
-0000191434 00000 n
-0000189551 00000 n
-0000191557 00000 n
-0000191682 00000 n
-0000191807 00000 n
-0000195065 00000 n
-0000194629 00000 n
-0000191982 00000 n
-0000194752 00000 n
-0000194877 00000 n
-0000195002 00000 n
-0000198979 00000 n
-0000198418 00000 n
-0000195191 00000 n
-0000198541 00000 n
-0000198666 00000 n
-0000198791 00000 n
-0000198916 00000 n
-0000202539 00000 n
-0000201853 00000 n
-0000199118 00000 n
-0000201976 00000 n
-0000202101 00000 n
-0000202226 00000 n
-0000202351 00000 n
-0000202476 00000 n
-0000427408 00000 n
-0000206180 00000 n
-0000205245 00000 n
-0000202665 00000 n
-0000205368 00000 n
-0000205493 00000 n
-0000205618 00000 n
-0000205743 00000 n
-0000205868 00000 n
-0000205993 00000 n
-0000206117 00000 n
-0000209422 00000 n
-0000208862 00000 n
-0000206306 00000 n
-0000208985 00000 n
-0000209109 00000 n
-0000209234 00000 n
-0000209359 00000 n
-0000212289 00000 n
-0000210853 00000 n
-0000209548 00000 n
-0000210976 00000 n
-0000211101 00000 n
-0000211226 00000 n
-0000211351 00000 n
-0000211476 00000 n
-0000211601 00000 n
-0000211726 00000 n
-0000211851 00000 n
-0000211976 00000 n
-0000212101 00000 n
-0000212226 00000 n
-0000215202 00000 n
-0000214018 00000 n
-0000212415 00000 n
-0000214141 00000 n
-0000214266 00000 n
-0000214391 00000 n
-0000214515 00000 n
-0000214640 00000 n
-0000214765 00000 n
-0000214890 00000 n
-0000215014 00000 n
-0000215139 00000 n
-0000218553 00000 n
-0000217744 00000 n
-0000215315 00000 n
-0000217867 00000 n
-0000217992 00000 n
-0000218117 00000 n
-0000218242 00000 n
-0000218367 00000 n
-0000218492 00000 n
-0000222037 00000 n
-0000220852 00000 n
-0000218679 00000 n
-0000220975 00000 n
-0000221100 00000 n
-0000221225 00000 n
-0000221350 00000 n
-0000221475 00000 n
-0000221600 00000 n
-0000221725 00000 n
-0000221850 00000 n
-0000221975 00000 n
-0000427533 00000 n
-0000224919 00000 n
-0000223986 00000 n
-0000222150 00000 n
-0000224109 00000 n
-0000224234 00000 n
-0000224359 00000 n
-0000224482 00000 n
-0000224606 00000 n
-0000224731 00000 n
-0000224856 00000 n
-0000227472 00000 n
-0000226661 00000 n
-0000225071 00000 n
-0000226784 00000 n
-0000226909 00000 n
-0000227034 00000 n
-0000227159 00000 n
-0000227284 00000 n
-0000227409 00000 n
-0000230392 00000 n
-0000229334 00000 n
-0000227598 00000 n
-0000229457 00000 n
-0000229582 00000 n
-0000229705 00000 n
-0000229830 00000 n
-0000229955 00000 n
-0000230080 00000 n
-0000230204 00000 n
-0000230329 00000 n
-0000233171 00000 n
-0000232610 00000 n
-0000230505 00000 n
-0000232733 00000 n
-0000232858 00000 n
-0000232983 00000 n
-0000233108 00000 n
-0000236494 00000 n
-0000235684 00000 n
-0000233284 00000 n
-0000235807 00000 n
-0000235932 00000 n
-0000236057 00000 n
-0000236182 00000 n
-0000236307 00000 n
-0000236432 00000 n
-0000239005 00000 n
-0000238320 00000 n
-0000236607 00000 n
-0000238443 00000 n
-0000238568 00000 n
-0000238693 00000 n
-0000238818 00000 n
-0000238943 00000 n
-0000427658 00000 n
-0000242589 00000 n
-0000241903 00000 n
-0000239118 00000 n
-0000242026 00000 n
-0000242276 00000 n
-0000242401 00000 n
-0000242526 00000 n
-0000246171 00000 n
-0000245483 00000 n
-0000242701 00000 n
-0000245606 00000 n
-0000245669 00000 n
-0000245732 00000 n
-0000245795 00000 n
-0000245858 00000 n
-0000245921 00000 n
-0000245984 00000 n
-0000246046 00000 n
-0000246109 00000 n
-0000249538 00000 n
-0000249102 00000 n
-0000246284 00000 n
-0000249225 00000 n
-0000249350 00000 n
-0000249475 00000 n
-0000253150 00000 n
-0000252964 00000 n
-0000249664 00000 n
-0000253087 00000 n
-0000254228 00000 n
-0000254042 00000 n
-0000253263 00000 n
-0000254165 00000 n
-0000256940 00000 n
-0000256504 00000 n
-0000254328 00000 n
-0000256627 00000 n
-0000256877 00000 n
-0000427783 00000 n
-0000260914 00000 n
-0000260478 00000 n
-0000257039 00000 n
-0000260601 00000 n
-0000260851 00000 n
-0000265254 00000 n
-0000264447 00000 n
-0000261013 00000 n
-0000264570 00000 n
-0000264695 00000 n
-0000264819 00000 n
-0000264943 00000 n
-0000265066 00000 n
-0000265191 00000 n
-0000269386 00000 n
-0000268576 00000 n
-0000265367 00000 n
-0000268699 00000 n
-0000268824 00000 n
-0000268949 00000 n
-0000269074 00000 n
-0000269199 00000 n
-0000269323 00000 n
-0000271675 00000 n
-0000271364 00000 n
-0000269499 00000 n
-0000271487 00000 n
-0000271612 00000 n
-0000275575 00000 n
-0000275015 00000 n
-0000271801 00000 n
-0000275138 00000 n
-0000275388 00000 n
-0000275512 00000 n
-0000279384 00000 n
-0000279012 00000 n
-0000275674 00000 n
-0000279135 00000 n
-0000279260 00000 n
-0000279322 00000 n
-0000427908 00000 n
-0000281097 00000 n
-0000280911 00000 n
-0000279536 00000 n
-0000281034 00000 n
-0000284380 00000 n
-0000283569 00000 n
-0000281223 00000 n
-0000283692 00000 n
-0000283942 00000 n
-0000284067 00000 n
-0000284192 00000 n
-0000284317 00000 n
-0000287555 00000 n
-0000287119 00000 n
-0000284479 00000 n
-0000287242 00000 n
-0000287367 00000 n
-0000287492 00000 n
-0000290474 00000 n
-0000289913 00000 n
-0000287681 00000 n
-0000290036 00000 n
-0000290286 00000 n
-0000290411 00000 n
-0000292387 00000 n
-0000291826 00000 n
-0000290599 00000 n
-0000291949 00000 n
-0000292199 00000 n
-0000292324 00000 n
-0000293747 00000 n
-0000293561 00000 n
-0000292486 00000 n
-0000293684 00000 n
-0000428033 00000 n
-0000296788 00000 n
-0000296227 00000 n
-0000293860 00000 n
-0000296350 00000 n
-0000296475 00000 n
-0000296600 00000 n
-0000296725 00000 n
-0000299283 00000 n
-0000298972 00000 n
-0000296914 00000 n
-0000299095 00000 n
-0000299220 00000 n
-0000301682 00000 n
-0000301496 00000 n
-0000299409 00000 n
-0000301619 00000 n
-0000303106 00000 n
-0000302920 00000 n
-0000301808 00000 n
-0000303043 00000 n
-0000305862 00000 n
-0000305111 00000 n
-0000303206 00000 n
-0000305234 00000 n
-0000305359 00000 n
-0000305484 00000 n
-0000305547 00000 n
-0000305610 00000 n
-0000305673 00000 n
-0000305736 00000 n
-0000305799 00000 n
-0000307338 00000 n
-0000307027 00000 n
-0000305988 00000 n
-0000307150 00000 n
-0000307213 00000 n
-0000307276 00000 n
-0000428158 00000 n
-0000310349 00000 n
-0000309803 00000 n
-0000307451 00000 n
-0000310098 00000 n
-0000310161 00000 n
-0000310224 00000 n
-0000309947 00000 n
-0000310287 00000 n
-0000311675 00000 n
-0000311489 00000 n
-0000310462 00000 n
-0000311612 00000 n
-0000313761 00000 n
-0000313449 00000 n
-0000311775 00000 n
-0000313572 00000 n
-0000313635 00000 n
-0000313698 00000 n
-0000315781 00000 n
-0000315220 00000 n
-0000313861 00000 n
-0000315343 00000 n
-0000315468 00000 n
-0000315593 00000 n
-0000315718 00000 n
-0000317566 00000 n
-0000317005 00000 n
-0000315894 00000 n
-0000317128 00000 n
-0000317378 00000 n
-0000317503 00000 n
-0000321491 00000 n
-0000320793 00000 n
-0000317665 00000 n
-0000321303 00000 n
-0000320946 00000 n
-0000321122 00000 n
-0000428283 00000 n
-0000321577 00000 n
-0000324659 00000 n
-0000324684 00000 n
-0000335144 00000 n
-0000337627 00000 n
-0000337658 00000 n
-0000341051 00000 n
-0000351255 00000 n
-0000351530 00000 n
-0000369287 00000 n
-0000388584 00000 n
-0000389013 00000 n
-0000406606 00000 n
-0000412218 00000 n
-0000426137 00000 n
-0000428363 00000 n
-0000428488 00000 n
-0000428614 00000 n
-0000428713 00000 n
-0000428795 00000 n
-0000450825 00000 n
-0000466224 00000 n
-0000466265 00000 n
-0000466305 00000 n
-0000466536 00000 n
+0000118713 00000 n
+0000118837 00000 n
+0000482313 00000 n
+0000122676 00000 n
+0000121758 00000 n
+0000119000 00000 n
+0000122301 00000 n
+0000121911 00000 n
+0000122111 00000 n
+0000122487 00000 n
+0000122550 00000 n
+0000122613 00000 n
+0000127623 00000 n
+0000126243 00000 n
+0000122775 00000 n
+0000126366 00000 n
+0000126429 00000 n
+0000126492 00000 n
+0000126555 00000 n
+0000126618 00000 n
+0000126681 00000 n
+0000126744 00000 n
+0000126807 00000 n
+0000126870 00000 n
+0000126933 00000 n
+0000126995 00000 n
+0000127058 00000 n
+0000127121 00000 n
+0000127183 00000 n
+0000127246 00000 n
+0000127309 00000 n
+0000127372 00000 n
+0000127435 00000 n
+0000127498 00000 n
+0000127561 00000 n
+0000129802 00000 n
+0000129427 00000 n
+0000127710 00000 n
+0000129550 00000 n
+0000129613 00000 n
+0000129676 00000 n
+0000129739 00000 n
+0000133294 00000 n
+0000132297 00000 n
+0000129889 00000 n
+0000132420 00000 n
+0000132667 00000 n
+0000132791 00000 n
+0000132854 00000 n
+0000132917 00000 n
+0000132980 00000 n
+0000133043 00000 n
+0000133106 00000 n
+0000133169 00000 n
+0000133232 00000 n
+0000137313 00000 n
+0000136377 00000 n
+0000133380 00000 n
+0000136500 00000 n
+0000136563 00000 n
+0000136626 00000 n
+0000136689 00000 n
+0000136752 00000 n
+0000136875 00000 n
+0000137000 00000 n
+0000137125 00000 n
+0000137250 00000 n
+0000140207 00000 n
+0000138900 00000 n
+0000137413 00000 n
+0000139023 00000 n
+0000139148 00000 n
+0000139272 00000 n
+0000139397 00000 n
+0000139522 00000 n
+0000139647 00000 n
+0000139772 00000 n
+0000139896 00000 n
+0000140020 00000 n
+0000140145 00000 n
+0000482438 00000 n
+0000143277 00000 n
+0000142093 00000 n
+0000140307 00000 n
+0000142216 00000 n
+0000142341 00000 n
+0000142465 00000 n
+0000142589 00000 n
+0000142714 00000 n
+0000142839 00000 n
+0000142900 00000 n
+0000142962 00000 n
+0000143025 00000 n
+0000143088 00000 n
+0000143151 00000 n
+0000143214 00000 n
+0000147484 00000 n
+0000146483 00000 n
+0000143390 00000 n
+0000146606 00000 n
+0000146669 00000 n
+0000146732 00000 n
+0000146795 00000 n
+0000146857 00000 n
+0000146920 00000 n
+0000146983 00000 n
+0000147046 00000 n
+0000147108 00000 n
+0000147233 00000 n
+0000147296 00000 n
+0000147359 00000 n
+0000147421 00000 n
+0000150512 00000 n
+0000149572 00000 n
+0000147584 00000 n
+0000149695 00000 n
+0000149820 00000 n
+0000149883 00000 n
+0000149946 00000 n
+0000150009 00000 n
+0000150072 00000 n
+0000150135 00000 n
+0000150198 00000 n
+0000150261 00000 n
+0000150323 00000 n
+0000150386 00000 n
+0000150449 00000 n
+0000153960 00000 n
+0000152710 00000 n
+0000150612 00000 n
+0000152833 00000 n
+0000153082 00000 n
+0000153145 00000 n
+0000153208 00000 n
+0000153271 00000 n
+0000153333 00000 n
+0000153396 00000 n
+0000153459 00000 n
+0000153521 00000 n
+0000153646 00000 n
+0000153709 00000 n
+0000153772 00000 n
+0000153835 00000 n
+0000153898 00000 n
+0000156112 00000 n
+0000155676 00000 n
+0000154059 00000 n
+0000155799 00000 n
+0000155924 00000 n
+0000156049 00000 n
+0000158309 00000 n
+0000157748 00000 n
+0000156238 00000 n
+0000157871 00000 n
+0000157994 00000 n
+0000158057 00000 n
+0000158120 00000 n
+0000158183 00000 n
+0000158246 00000 n
+0000482563 00000 n
+0000159388 00000 n
+0000159077 00000 n
+0000158435 00000 n
+0000159200 00000 n
+0000159325 00000 n
+0000162624 00000 n
+0000162064 00000 n
+0000159488 00000 n
+0000162187 00000 n
+0000162436 00000 n
+0000162561 00000 n
+0000166285 00000 n
+0000165724 00000 n
+0000162723 00000 n
+0000165847 00000 n
+0000165972 00000 n
+0000166097 00000 n
+0000166222 00000 n
+0000170108 00000 n
+0000169548 00000 n
+0000166385 00000 n
+0000169671 00000 n
+0000169796 00000 n
+0000169920 00000 n
+0000170045 00000 n
+0000173970 00000 n
+0000173661 00000 n
+0000170221 00000 n
+0000173784 00000 n
+0000173909 00000 n
+0000177051 00000 n
+0000176741 00000 n
+0000174070 00000 n
+0000176864 00000 n
+0000391713 00000 n
+0000382815 00000 n
+0000391547 00000 n
+0000382580 00000 n
+0000380705 00000 n
+0000382414 00000 n
+0000482688 00000 n
+0000179121 00000 n
+0000178935 00000 n
+0000177178 00000 n
+0000179058 00000 n
+0000180914 00000 n
+0000180165 00000 n
+0000179249 00000 n
+0000180288 00000 n
+0000180537 00000 n
+0000180600 00000 n
+0000180663 00000 n
+0000180726 00000 n
+0000180788 00000 n
+0000180851 00000 n
+0000185639 00000 n
+0000183763 00000 n
+0000181013 00000 n
+0000185326 00000 n
+0000185576 00000 n
+0000183961 00000 n
+0000184154 00000 n
+0000184348 00000 n
+0000184570 00000 n
+0000184757 00000 n
+0000184933 00000 n
+0000185139 00000 n
+0000189400 00000 n
+0000188280 00000 n
+0000185764 00000 n
+0000188403 00000 n
+0000188466 00000 n
+0000188529 00000 n
+0000188592 00000 n
+0000188651 00000 n
+0000188714 00000 n
+0000188839 00000 n
+0000188964 00000 n
+0000189089 00000 n
+0000189212 00000 n
+0000189275 00000 n
+0000189338 00000 n
+0000192735 00000 n
+0000191987 00000 n
+0000189500 00000 n
+0000192110 00000 n
+0000192173 00000 n
+0000192236 00000 n
+0000192299 00000 n
+0000192424 00000 n
+0000192547 00000 n
+0000192672 00000 n
+0000195455 00000 n
+0000194398 00000 n
+0000192835 00000 n
+0000194521 00000 n
+0000194646 00000 n
+0000194771 00000 n
+0000194896 00000 n
+0000195021 00000 n
+0000195143 00000 n
+0000195268 00000 n
+0000195393 00000 n
+0000482813 00000 n
+0000198039 00000 n
+0000197103 00000 n
+0000195568 00000 n
+0000197226 00000 n
+0000197351 00000 n
+0000197476 00000 n
+0000197601 00000 n
+0000197726 00000 n
+0000197851 00000 n
+0000197976 00000 n
+0000200926 00000 n
+0000200242 00000 n
+0000198139 00000 n
+0000200365 00000 n
+0000200490 00000 n
+0000200614 00000 n
+0000200739 00000 n
+0000200864 00000 n
+0000203773 00000 n
+0000203090 00000 n
+0000201052 00000 n
+0000203213 00000 n
+0000203338 00000 n
+0000203463 00000 n
+0000203587 00000 n
+0000203711 00000 n
+0000206417 00000 n
+0000205981 00000 n
+0000203899 00000 n
+0000206104 00000 n
+0000206229 00000 n
+0000206354 00000 n
+0000208892 00000 n
+0000208332 00000 n
+0000206543 00000 n
+0000208455 00000 n
+0000208580 00000 n
+0000208704 00000 n
+0000208829 00000 n
+0000211038 00000 n
+0000210727 00000 n
+0000209005 00000 n
+0000210850 00000 n
+0000210975 00000 n
+0000482938 00000 n
+0000213797 00000 n
+0000213361 00000 n
+0000211151 00000 n
+0000213484 00000 n
+0000213609 00000 n
+0000213734 00000 n
+0000216788 00000 n
+0000216352 00000 n
+0000213910 00000 n
+0000216475 00000 n
+0000216600 00000 n
+0000216725 00000 n
+0000219823 00000 n
+0000219512 00000 n
+0000216914 00000 n
+0000219635 00000 n
+0000219760 00000 n
+0000223219 00000 n
+0000222783 00000 n
+0000219923 00000 n
+0000222906 00000 n
+0000223031 00000 n
+0000223156 00000 n
+0000226151 00000 n
+0000225715 00000 n
+0000223358 00000 n
+0000225838 00000 n
+0000225963 00000 n
+0000226088 00000 n
+0000229059 00000 n
+0000228373 00000 n
+0000226277 00000 n
+0000228496 00000 n
+0000228621 00000 n
+0000228746 00000 n
+0000228871 00000 n
+0000228996 00000 n
+0000483063 00000 n
+0000231673 00000 n
+0000231112 00000 n
+0000229159 00000 n
+0000231235 00000 n
+0000231360 00000 n
+0000231485 00000 n
+0000231610 00000 n
+0000234559 00000 n
+0000234125 00000 n
+0000231773 00000 n
+0000234248 00000 n
+0000234373 00000 n
+0000234496 00000 n
+0000237140 00000 n
+0000236579 00000 n
+0000234685 00000 n
+0000236702 00000 n
+0000236827 00000 n
+0000236952 00000 n
+0000237077 00000 n
+0000239622 00000 n
+0000238687 00000 n
+0000237266 00000 n
+0000238810 00000 n
+0000238935 00000 n
+0000239060 00000 n
+0000239184 00000 n
+0000239309 00000 n
+0000239434 00000 n
+0000239559 00000 n
+0000242322 00000 n
+0000241136 00000 n
+0000239748 00000 n
+0000241259 00000 n
+0000241384 00000 n
+0000241509 00000 n
+0000241634 00000 n
+0000241759 00000 n
+0000241884 00000 n
+0000242009 00000 n
+0000242134 00000 n
+0000242259 00000 n
+0000244947 00000 n
+0000244386 00000 n
+0000242435 00000 n
+0000244509 00000 n
+0000244634 00000 n
+0000244759 00000 n
+0000244884 00000 n
+0000483188 00000 n
+0000247726 00000 n
+0000247166 00000 n
+0000245060 00000 n
+0000247289 00000 n
+0000247414 00000 n
+0000247539 00000 n
+0000247664 00000 n
+0000250641 00000 n
+0000249955 00000 n
+0000247852 00000 n
+0000250078 00000 n
+0000250203 00000 n
+0000250328 00000 n
+0000250453 00000 n
+0000250578 00000 n
+0000253669 00000 n
+0000252735 00000 n
+0000250754 00000 n
+0000252858 00000 n
+0000252983 00000 n
+0000253108 00000 n
+0000253233 00000 n
+0000253358 00000 n
+0000253483 00000 n
+0000253607 00000 n
+0000255972 00000 n
+0000255287 00000 n
+0000253782 00000 n
+0000255410 00000 n
+0000255535 00000 n
+0000255660 00000 n
+0000255784 00000 n
+0000255909 00000 n
+0000258591 00000 n
+0000257905 00000 n
+0000256098 00000 n
+0000258028 00000 n
+0000258153 00000 n
+0000258278 00000 n
+0000258403 00000 n
+0000258528 00000 n
+0000260983 00000 n
+0000260422 00000 n
+0000258730 00000 n
+0000260545 00000 n
+0000260670 00000 n
+0000260795 00000 n
+0000260920 00000 n
+0000483313 00000 n
+0000263715 00000 n
+0000263031 00000 n
+0000261109 00000 n
+0000263154 00000 n
+0000263279 00000 n
+0000263403 00000 n
+0000263527 00000 n
+0000263652 00000 n
+0000266698 00000 n
+0000265887 00000 n
+0000263828 00000 n
+0000266010 00000 n
+0000266135 00000 n
+0000266260 00000 n
+0000266385 00000 n
+0000266510 00000 n
+0000266635 00000 n
+0000268447 00000 n
+0000268136 00000 n
+0000266811 00000 n
+0000268259 00000 n
+0000268384 00000 n
+0000271396 00000 n
+0000270711 00000 n
+0000268560 00000 n
+0000270834 00000 n
+0000270958 00000 n
+0000271083 00000 n
+0000271208 00000 n
+0000271333 00000 n
+0000273973 00000 n
+0000273414 00000 n
+0000271509 00000 n
+0000273537 00000 n
+0000273662 00000 n
+0000273785 00000 n
+0000273910 00000 n
+0000275916 00000 n
+0000275480 00000 n
+0000274086 00000 n
+0000275603 00000 n
+0000275728 00000 n
+0000275853 00000 n
+0000483438 00000 n
+0000278587 00000 n
+0000277902 00000 n
+0000276029 00000 n
+0000278025 00000 n
+0000278275 00000 n
+0000278400 00000 n
+0000278525 00000 n
+0000282586 00000 n
+0000282149 00000 n
+0000278686 00000 n
+0000282272 00000 n
+0000282335 00000 n
+0000282398 00000 n
+0000282461 00000 n
+0000282524 00000 n
+0000285824 00000 n
+0000285136 00000 n
+0000282699 00000 n
+0000285259 00000 n
+0000285322 00000 n
+0000285385 00000 n
+0000285448 00000 n
+0000285511 00000 n
+0000285636 00000 n
+0000285761 00000 n
+0000288175 00000 n
+0000287989 00000 n
+0000285937 00000 n
+0000288112 00000 n
+0000291727 00000 n
+0000291541 00000 n
+0000288288 00000 n
+0000291664 00000 n
+0000293047 00000 n
+0000292861 00000 n
+0000291840 00000 n
+0000292984 00000 n
+0000483563 00000 n
+0000295334 00000 n
+0000294898 00000 n
+0000293147 00000 n
+0000295021 00000 n
+0000295271 00000 n
+0000296479 00000 n
+0000296293 00000 n
+0000295433 00000 n
+0000296416 00000 n
+0000299532 00000 n
+0000299096 00000 n
+0000296566 00000 n
+0000299219 00000 n
+0000299469 00000 n
+0000303463 00000 n
+0000303028 00000 n
+0000299631 00000 n
+0000303151 00000 n
+0000303276 00000 n
+0000303400 00000 n
+0000307166 00000 n
+0000306230 00000 n
+0000303576 00000 n
+0000306353 00000 n
+0000306478 00000 n
+0000306603 00000 n
+0000306728 00000 n
+0000306853 00000 n
+0000306978 00000 n
+0000307103 00000 n
+0000310244 00000 n
+0000309808 00000 n
+0000307279 00000 n
+0000309931 00000 n
+0000310056 00000 n
+0000310181 00000 n
+0000483688 00000 n
+0000312303 00000 n
+0000311992 00000 n
+0000310357 00000 n
+0000312115 00000 n
+0000312240 00000 n
+0000315685 00000 n
+0000315125 00000 n
+0000312430 00000 n
+0000315248 00000 n
+0000315498 00000 n
+0000315623 00000 n
+0000318823 00000 n
+0000318449 00000 n
+0000315771 00000 n
+0000318572 00000 n
+0000318697 00000 n
+0000318760 00000 n
+0000321610 00000 n
+0000321424 00000 n
+0000318963 00000 n
+0000321547 00000 n
+0000324119 00000 n
+0000323434 00000 n
+0000321737 00000 n
+0000323557 00000 n
+0000323807 00000 n
+0000323932 00000 n
+0000324056 00000 n
+0000327664 00000 n
+0000327104 00000 n
+0000324218 00000 n
+0000327227 00000 n
+0000327352 00000 n
+0000327477 00000 n
+0000327601 00000 n
+0000483813 00000 n
+0000329435 00000 n
+0000331028 00000 n
+0000329312 00000 n
+0000327777 00000 n
+0000330965 00000 n
+0000379399 00000 n
+0000377064 00000 n
+0000379232 00000 n
+0000375441 00000 n
+0000369394 00000 n
+0000375275 00000 n
+0000330794 00000 n
+0000330852 00000 n
+0000330942 00000 n
+0000334326 00000 n
+0000333765 00000 n
+0000331199 00000 n
+0000333888 00000 n
+0000334138 00000 n
+0000334263 00000 n
+0000336198 00000 n
+0000335637 00000 n
+0000334451 00000 n
+0000335760 00000 n
+0000336010 00000 n
+0000336135 00000 n
+0000337535 00000 n
+0000337349 00000 n
+0000336297 00000 n
+0000337472 00000 n
+0000340006 00000 n
+0000339695 00000 n
+0000337648 00000 n
+0000339818 00000 n
+0000339943 00000 n
+0000342601 00000 n
+0000342165 00000 n
+0000340132 00000 n
+0000342288 00000 n
+0000342413 00000 n
+0000342538 00000 n
+0000483938 00000 n
+0000345452 00000 n
+0000345141 00000 n
+0000342728 00000 n
+0000345264 00000 n
+0000345389 00000 n
+0000347142 00000 n
+0000346956 00000 n
+0000345592 00000 n
+0000347079 00000 n
+0000348603 00000 n
+0000348417 00000 n
+0000347242 00000 n
+0000348540 00000 n
+0000352039 00000 n
+0000351289 00000 n
+0000348703 00000 n
+0000351412 00000 n
+0000351537 00000 n
+0000351662 00000 n
+0000351725 00000 n
+0000351788 00000 n
+0000351851 00000 n
+0000351914 00000 n
+0000351976 00000 n
+0000353151 00000 n
+0000352965 00000 n
+0000352165 00000 n
+0000353088 00000 n
+0000356577 00000 n
+0000355903 00000 n
+0000353264 00000 n
+0000356199 00000 n
+0000356262 00000 n
+0000356325 00000 n
+0000356388 00000 n
+0000356451 00000 n
+0000356047 00000 n
+0000356514 00000 n
+0000484063 00000 n
+0000357939 00000 n
+0000357753 00000 n
+0000356690 00000 n
+0000357876 00000 n
+0000359416 00000 n
+0000359168 00000 n
+0000358039 00000 n
+0000359291 00000 n
+0000359354 00000 n
+0000362046 00000 n
+0000361427 00000 n
+0000359516 00000 n
+0000361550 00000 n
+0000361613 00000 n
+0000361738 00000 n
+0000361863 00000 n
+0000361983 00000 n
+0000362713 00000 n
+0000362527 00000 n
+0000362159 00000 n
+0000362650 00000 n
+0000364510 00000 n
+0000363949 00000 n
+0000362813 00000 n
+0000364072 00000 n
+0000364322 00000 n
+0000364447 00000 n
+0000368361 00000 n
+0000367664 00000 n
+0000364609 00000 n
+0000368173 00000 n
+0000367817 00000 n
+0000367993 00000 n
+0000484188 00000 n
+0000368447 00000 n
+0000375737 00000 n
+0000376054 00000 n
+0000379602 00000 n
+0000379709 00000 n
+0000382790 00000 n
+0000392049 00000 n
+0000401829 00000 n
+0000404312 00000 n
+0000404343 00000 n
+0000408177 00000 n
+0000408398 00000 n
+0000425874 00000 n
+0000445227 00000 n
+0000445658 00000 n
+0000463251 00000 n
+0000467648 00000 n
+0000481543 00000 n
+0000484268 00000 n
+0000484393 00000 n
+0000484519 00000 n
+0000484645 00000 n
+0000484725 00000 n
+0000484817 00000 n
+0000506847 00000 n
+0000522723 00000 n
+0000522764 00000 n
+0000522804 00000 n
+0000523035 00000 n
trailer
<<
-/Size 1983
-/Root 1981 0 R
-/Info 1982 0 R
+/Size 2097
+/Root 2095 0 R
+/Info 2096 0 R
>>
startxref
-466732
+523191
%%EOF
diff --git a/docs/Samba-HOWTO-Collection.pdf b/docs/Samba-HOWTO-Collection.pdf
index 615d2831240..8429c7d4dee 100644
--- a/docs/Samba-HOWTO-Collection.pdf
+++ b/docs/Samba-HOWTO-Collection.pdf
@@ -99,7 +99,7 @@ endobj
<< /S /GoTo /D (section.2.5) >>
endobj
72 0 obj
-(2.5 Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client)
+(2.5 Try connecting from another SMB client)
endobj
73 0 obj
<< /S /GoTo /D (section.2.6) >>
@@ -117,11337 +117,11865 @@ endobj
<< /S /GoTo /D (subsection.2.7.1) >>
endobj
84 0 obj
-(2.7.1 Why are so many smbd processes eating memory?)
+(2.7.1 Large number of smbd processes)
endobj
85 0 obj
<< /S /GoTo /D (subsection.2.7.2) >>
endobj
88 0 obj
-(2.7.2 I'm getting "open\137oplock\137ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs)
+(2.7.2 "open\137oplock\137ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested")
endobj
89 0 obj
-<< /S /GoTo /D (chapter.3) >>
+<< /S /GoTo /D (subsection.2.7.3) >>
endobj
92 0 obj
-(3 Fast Start for the Impatient)
+(2.7.3 "The network name cannot be found")
endobj
93 0 obj
-<< /S /GoTo /D (section.3.1) >>
+<< /S /GoTo /D (chapter.3) >>
endobj
96 0 obj
-(3.1 Note)
+(3 Fast Start for the Impatient)
endobj
97 0 obj
-<< /S /GoTo /D (part.2) >>
+<< /S /GoTo /D (section.3.1) >>
endobj
100 0 obj
-(II Server Configuration Basics)
+(3.1 Note)
endobj
101 0 obj
-<< /S /GoTo /D (chapter.4) >>
+<< /S /GoTo /D (part.2) >>
endobj
104 0 obj
-(4 Server Types and Security Modes)
+(II Server Configuration Basics)
endobj
105 0 obj
-<< /S /GoTo /D (section.4.1) >>
+<< /S /GoTo /D (chapter.4) >>
endobj
108 0 obj
-(4.1 Features and Benefits)
+(4 Server Types and Security Modes)
endobj
109 0 obj
-<< /S /GoTo /D (section.4.2) >>
+<< /S /GoTo /D (section.4.1) >>
endobj
112 0 obj
-(4.2 Server Types)
+(4.1 Features and Benefits)
endobj
113 0 obj
-<< /S /GoTo /D (section.4.3) >>
+<< /S /GoTo /D (section.4.2) >>
endobj
116 0 obj
-(4.3 Samba Security Modes)
+(4.2 Server Types)
endobj
117 0 obj
-<< /S /GoTo /D (subsection.4.3.1) >>
+<< /S /GoTo /D (section.4.3) >>
endobj
120 0 obj
-(4.3.1 User Level Security)
+(4.3 Samba Security Modes)
endobj
121 0 obj
-<< /S /GoTo /D (subsubsection.4.3.1.1) >>
+<< /S /GoTo /D (subsection.4.3.1) >>
endobj
124 0 obj
-(4.3.1.1 Example Configuration)
+(4.3.1 User Level Security)
endobj
125 0 obj
-<< /S /GoTo /D (subsection.4.3.2) >>
+<< /S /GoTo /D (subsubsection.4.3.1.1) >>
endobj
128 0 obj
-(4.3.2 Share Level Security)
+(4.3.1.1 Example Configuration)
endobj
129 0 obj
-<< /S /GoTo /D (subsubsection.4.3.2.1) >>
+<< /S /GoTo /D (subsection.4.3.2) >>
endobj
132 0 obj
-(4.3.2.1 Example Configuration)
+(4.3.2 Share Level Security)
endobj
133 0 obj
-<< /S /GoTo /D (subsection.4.3.3) >>
+<< /S /GoTo /D (subsubsection.4.3.2.1) >>
endobj
136 0 obj
-(4.3.3 Domain Security Mode \(User Level Security\))
+(4.3.2.1 Example Configuration)
endobj
137 0 obj
-<< /S /GoTo /D (subsubsection.4.3.3.1) >>
+<< /S /GoTo /D (subsection.4.3.3) >>
endobj
140 0 obj
-(4.3.3.1 Example Configuration)
+(4.3.3 Domain Security Mode \(User Level Security\))
endobj
141 0 obj
-<< /S /GoTo /D (subsection.4.3.4) >>
+<< /S /GoTo /D (subsubsection.4.3.3.1) >>
endobj
144 0 obj
-(4.3.4 ADS Security Mode \(User Level Security\))
+(4.3.3.1 Example Configuration)
endobj
145 0 obj
-<< /S /GoTo /D (subsubsection.4.3.4.1) >>
+<< /S /GoTo /D (subsection.4.3.4) >>
endobj
148 0 obj
-(4.3.4.1 Example Configuration)
+(4.3.4 ADS Security Mode \(User Level Security\))
endobj
149 0 obj
-<< /S /GoTo /D (subsection.4.3.5) >>
+<< /S /GoTo /D (subsubsection.4.3.4.1) >>
endobj
152 0 obj
-(4.3.5 Server Security \(User Level Security\))
+(4.3.4.1 Example Configuration)
endobj
153 0 obj
-<< /S /GoTo /D (subsubsection.4.3.5.1) >>
+<< /S /GoTo /D (subsection.4.3.5) >>
endobj
156 0 obj
-(4.3.5.1 Example Configuration)
+(4.3.5 Server Security \(User Level Security\))
endobj
157 0 obj
-<< /S /GoTo /D (section.4.4) >>
+<< /S /GoTo /D (subsubsection.4.3.5.1) >>
endobj
160 0 obj
-(4.4 Seamless Windows Network Integration)
+(4.3.5.1 Example Configuration)
endobj
161 0 obj
-<< /S /GoTo /D (section.4.5) >>
+<< /S /GoTo /D (section.4.4) >>
endobj
164 0 obj
-(4.5 Common Errors)
+(4.4 Password checking)
endobj
165 0 obj
-<< /S /GoTo /D (subsection.4.5.1) >>
+<< /S /GoTo /D (section.4.5) >>
endobj
168 0 obj
-(4.5.1 What makes Samba a SERVER?)
+(4.5 Common Errors)
endobj
169 0 obj
-<< /S /GoTo /D (subsection.4.5.2) >>
+<< /S /GoTo /D (subsection.4.5.1) >>
endobj
172 0 obj
-(4.5.2 What makes Samba a Domain Controller?)
+(4.5.1 What makes Samba a SERVER?)
endobj
173 0 obj
-<< /S /GoTo /D (subsection.4.5.3) >>
+<< /S /GoTo /D (subsection.4.5.2) >>
endobj
176 0 obj
-(4.5.3 What makes Samba a Domain Member?)
+(4.5.2 What makes Samba a Domain Controller?)
endobj
177 0 obj
-<< /S /GoTo /D (subsection.4.5.4) >>
+<< /S /GoTo /D (subsection.4.5.3) >>
endobj
180 0 obj
-(4.5.4 Constantly Losing Connections to Password Server)
+(4.5.3 What makes Samba a Domain Member?)
endobj
181 0 obj
-<< /S /GoTo /D (chapter.5) >>
+<< /S /GoTo /D (subsection.4.5.4) >>
endobj
184 0 obj
-(5 Domain Control)
+(4.5.4 Constantly Losing Connections to Password Server)
endobj
185 0 obj
-<< /S /GoTo /D (section.5.1) >>
+<< /S /GoTo /D (chapter.5) >>
endobj
188 0 obj
-(5.1 Features and Benefits)
+(5 Domain Control)
endobj
189 0 obj
-<< /S /GoTo /D (section.5.2) >>
+<< /S /GoTo /D (section.5.1) >>
endobj
192 0 obj
-(5.2 Basics of Domain Control)
+(5.1 Features and Benefits)
endobj
193 0 obj
-<< /S /GoTo /D (subsection.5.2.1) >>
+<< /S /GoTo /D (section.5.2) >>
endobj
196 0 obj
-(5.2.1 Domain Controller Types)
+(5.2 Basics of Domain Control)
endobj
197 0 obj
-<< /S /GoTo /D (subsection.5.2.2) >>
+<< /S /GoTo /D (subsection.5.2.1) >>
endobj
200 0 obj
-(5.2.2 Preparing for Domain Control)
+(5.2.1 Domain Controller Types)
endobj
201 0 obj
-<< /S /GoTo /D (section.5.3) >>
+<< /S /GoTo /D (subsection.5.2.2) >>
endobj
204 0 obj
-(5.3 Domain Control - Example Configuration)
+(5.2.2 Preparing for Domain Control)
endobj
205 0 obj
-<< /S /GoTo /D (section.5.4) >>
+<< /S /GoTo /D (section.5.3) >>
endobj
208 0 obj
-(5.4 Samba ADS Domain Control)
+(5.3 Domain Control - Example Configuration)
endobj
209 0 obj
-<< /S /GoTo /D (section.5.5) >>
+<< /S /GoTo /D (section.5.4) >>
endobj
212 0 obj
-(5.5 Domain and Network Logon Configuration)
+(5.4 Samba ADS Domain Control)
endobj
213 0 obj
-<< /S /GoTo /D (subsection.5.5.1) >>
+<< /S /GoTo /D (section.5.5) >>
endobj
216 0 obj
-(5.5.1 Domain Network Logon Service)
+(5.5 Domain and Network Logon Configuration)
endobj
217 0 obj
-<< /S /GoTo /D (subsubsection.5.5.1.1) >>
+<< /S /GoTo /D (subsection.5.5.1) >>
endobj
220 0 obj
-(5.5.1.1 Example Configuration)
+(5.5.1 Domain Network Logon Service)
endobj
221 0 obj
-<< /S /GoTo /D (subsubsection.5.5.1.2) >>
+<< /S /GoTo /D (subsubsection.5.5.1.1) >>
endobj
224 0 obj
-(5.5.1.2 The Special Case of MS Windows XP Home Edition)
+(5.5.1.1 Example Configuration)
endobj
225 0 obj
-<< /S /GoTo /D (subsubsection.5.5.1.3) >>
+<< /S /GoTo /D (subsubsection.5.5.1.2) >>
endobj
228 0 obj
-(5.5.1.3 The Special Case of Windows 9x / Me)
+(5.5.1.2 The Special Case of MS Windows XP Home Edition)
endobj
229 0 obj
-<< /S /GoTo /D (subsection.5.5.2) >>
+<< /S /GoTo /D (subsubsection.5.5.1.3) >>
endobj
232 0 obj
-(5.5.2 Security Mode and Master Browsers)
+(5.5.1.3 The Special Case of Windows 9x / Me)
endobj
233 0 obj
-<< /S /GoTo /D (section.5.6) >>
+<< /S /GoTo /D (subsection.5.5.2) >>
endobj
236 0 obj
-(5.6 Common Problems and Errors)
+(5.5.2 Security Mode and Master Browsers)
endobj
237 0 obj
-<< /S /GoTo /D (subsection.5.6.1) >>
+<< /S /GoTo /D (section.5.6) >>
endobj
240 0 obj
-(5.6.1 I cannot include a '\044' in a machine name)
+(5.6 Common Errors)
endobj
241 0 obj
-<< /S /GoTo /D (subsection.5.6.2) >>
+<< /S /GoTo /D (subsection.5.6.1) >>
endobj
244 0 obj
-(5.6.2 I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an existing set.." when creating a machine trust account.)
+(5.6.1 '\044' cannot be included in machine name)
endobj
245 0 obj
-<< /S /GoTo /D (subsection.5.6.3) >>
+<< /S /GoTo /D (subsection.5.6.2) >>
endobj
248 0 obj
-(5.6.3 The system can not log you on \(C000019B\)....)
+(5.6.2 Joining domain fails because of existing machine account)
endobj
249 0 obj
-<< /S /GoTo /D (subsection.5.6.4) >>
+<< /S /GoTo /D (subsection.5.6.3) >>
endobj
252 0 obj
-(5.6.4 The machine trust account for this computer either does not exist or is not accessible.)
+(5.6.3 The system can not log you on \(C000019B\)....)
endobj
253 0 obj
-<< /S /GoTo /D (subsection.5.6.5) >>
+<< /S /GoTo /D (subsection.5.6.4) >>
endobj
256 0 obj
-(5.6.5 When I attempt to login to a Samba Domain from a NT4/W2K workstation, I get a message about my account being disabled.)
+(5.6.4 The machine trust account not accessible)
endobj
257 0 obj
-<< /S /GoTo /D (subsection.5.6.6) >>
+<< /S /GoTo /D (subsection.5.6.5) >>
endobj
260 0 obj
-(5.6.6 Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable")
+(5.6.5 Account disabled)
endobj
261 0 obj
-<< /S /GoTo /D (chapter.6) >>
+<< /S /GoTo /D (subsection.5.6.6) >>
endobj
264 0 obj
-(6 Backup Domain Control)
+(5.6.6 Domain Controller Unavailable)
endobj
265 0 obj
-<< /S /GoTo /D (section.6.1) >>
+<< /S /GoTo /D (subsection.5.6.7) >>
endobj
268 0 obj
-(6.1 Features And Benefits)
+(5.6.7 Can not log onto domain member workstation after joining domain)
endobj
269 0 obj
-<< /S /GoTo /D (section.6.2) >>
+<< /S /GoTo /D (chapter.6) >>
endobj
272 0 obj
-(6.2 Essential Background Information)
+(6 Backup Domain Control)
endobj
273 0 obj
-<< /S /GoTo /D (subsection.6.2.1) >>
+<< /S /GoTo /D (section.6.1) >>
endobj
276 0 obj
-(6.2.1 MS Windows NT4 Style Domain Control)
+(6.1 Features And Benefits)
endobj
277 0 obj
-<< /S /GoTo /D (subsubsection.6.2.1.1) >>
+<< /S /GoTo /D (section.6.2) >>
endobj
280 0 obj
-(6.2.1.1 Example PDC Configuration)
+(6.2 Essential Background Information)
endobj
281 0 obj
-<< /S /GoTo /D (subsection.6.2.2) >>
+<< /S /GoTo /D (subsection.6.2.1) >>
endobj
284 0 obj
-(6.2.2 Active Directory Domain Control)
+(6.2.1 MS Windows NT4 Style Domain Control)
endobj
285 0 obj
-<< /S /GoTo /D (subsection.6.2.3) >>
+<< /S /GoTo /D (subsubsection.6.2.1.1) >>
endobj
288 0 obj
-(6.2.3 What qualifies a Domain Controller on the network?)
+(6.2.1.1 Example PDC Configuration)
endobj
289 0 obj
-<< /S /GoTo /D (subsection.6.2.4) >>
+<< /S /GoTo /D (subsection.6.2.2) >>
endobj
292 0 obj
-(6.2.4 How does a Workstation find its domain controller?)
+(6.2.2 Active Directory Domain Control)
endobj
293 0 obj
-<< /S /GoTo /D (section.6.3) >>
+<< /S /GoTo /D (subsection.6.2.3) >>
endobj
296 0 obj
-(6.3 Backup Domain Controller Configuration)
+(6.2.3 What qualifies a Domain Controller on the network?)
endobj
297 0 obj
-<< /S /GoTo /D (subsection.6.3.1) >>
+<< /S /GoTo /D (subsection.6.2.4) >>
endobj
300 0 obj
-(6.3.1 Example Configuration)
+(6.2.4 How does a Workstation find its domain controller?)
endobj
301 0 obj
-<< /S /GoTo /D (section.6.4) >>
+<< /S /GoTo /D (section.6.3) >>
endobj
304 0 obj
-(6.4 Common Errors)
+(6.3 Backup Domain Controller Configuration)
endobj
305 0 obj
-<< /S /GoTo /D (subsection.6.4.1) >>
+<< /S /GoTo /D (subsection.6.3.1) >>
endobj
308 0 obj
-(6.4.1 Machine Accounts keep expiring, what can I do?)
+(6.3.1 Example Configuration)
endobj
309 0 obj
-<< /S /GoTo /D (subsection.6.4.2) >>
+<< /S /GoTo /D (section.6.4) >>
endobj
312 0 obj
-(6.4.2 Can Samba be a Backup Domain Controller to an NT4 PDC?)
+(6.4 Common Errors)
endobj
313 0 obj
-<< /S /GoTo /D (subsection.6.4.3) >>
+<< /S /GoTo /D (subsection.6.4.1) >>
endobj
316 0 obj
-(6.4.3 How do I replicate the smbpasswd file?)
+(6.4.1 Machine Accounts keep expiring, what can I do?)
endobj
317 0 obj
-<< /S /GoTo /D (subsection.6.4.4) >>
+<< /S /GoTo /D (subsection.6.4.2) >>
endobj
320 0 obj
-(6.4.4 Can I do this all with LDAP?)
+(6.4.2 Can Samba be a Backup Domain Controller to an NT4 PDC?)
endobj
321 0 obj
-<< /S /GoTo /D (chapter.7) >>
+<< /S /GoTo /D (subsection.6.4.3) >>
endobj
324 0 obj
-(7 Domain Membership)
+(6.4.3 How do I replicate the smbpasswd file?)
endobj
325 0 obj
-<< /S /GoTo /D (section.7.1) >>
+<< /S /GoTo /D (subsection.6.4.4) >>
endobj
328 0 obj
-(7.1 Features and Benefits)
+(6.4.4 Can I do this all with LDAP?)
endobj
329 0 obj
-<< /S /GoTo /D (section.7.2) >>
+<< /S /GoTo /D (chapter.7) >>
endobj
332 0 obj
-(7.2 MS Windows Workstation/Server Machine Trust Accounts)
+(7 Domain Membership)
endobj
333 0 obj
-<< /S /GoTo /D (subsection.7.2.1) >>
+<< /S /GoTo /D (section.7.1) >>
endobj
336 0 obj
-(7.2.1 Manual Creation of Machine Trust Accounts)
+(7.1 Features and Benefits)
endobj
337 0 obj
-<< /S /GoTo /D (subsection.7.2.2) >>
+<< /S /GoTo /D (section.7.2) >>
endobj
340 0 obj
-(7.2.2 Using NT4 Server Manager to Add Machine Accounts to the Domain)
+(7.2 MS Windows Workstation/Server Machine Trust Accounts)
endobj
341 0 obj
-<< /S /GoTo /D (subsection.7.2.3) >>
+<< /S /GoTo /D (subsection.7.2.1) >>
endobj
344 0 obj
-(7.2.3 "On-the-Fly" Creation of Machine Trust Accounts)
+(7.2.1 Manual Creation of Machine Trust Accounts)
endobj
345 0 obj
-<< /S /GoTo /D (subsection.7.2.4) >>
+<< /S /GoTo /D (subsection.7.2.2) >>
endobj
348 0 obj
-(7.2.4 Making an MS Windows Workstation or Server a Domain Member)
+(7.2.2 Using NT4 Server Manager to Add Machine Accounts to the Domain)
endobj
349 0 obj
-<< /S /GoTo /D (subsubsection.7.2.4.1) >>
+<< /S /GoTo /D (subsection.7.2.3) >>
endobj
352 0 obj
-(7.2.4.1 Windows 200x XP Professional)
+(7.2.3 "On-the-Fly" Creation of Machine Trust Accounts)
endobj
353 0 obj
-<< /S /GoTo /D (subsubsection.7.2.4.2) >>
+<< /S /GoTo /D (subsection.7.2.4) >>
endobj
356 0 obj
-(7.2.4.2 Windows NT4)
+(7.2.4 Making an MS Windows Workstation or Server a Domain Member)
endobj
357 0 obj
-<< /S /GoTo /D (subsubsection.7.2.4.3) >>
+<< /S /GoTo /D (subsubsection.7.2.4.1) >>
endobj
360 0 obj
-(7.2.4.3 Samba)
+(7.2.4.1 Windows 200x XP Professional)
endobj
361 0 obj
-<< /S /GoTo /D (section.7.3) >>
+<< /S /GoTo /D (subsubsection.7.2.4.2) >>
endobj
364 0 obj
-(7.3 Domain Member Server)
+(7.2.4.2 Windows NT4)
endobj
365 0 obj
-<< /S /GoTo /D (subsection.7.3.1) >>
+<< /S /GoTo /D (subsubsection.7.2.4.3) >>
endobj
368 0 obj
-(7.3.1 Joining an NT4 type Domain with Samba-3)
+(7.2.4.3 Samba)
endobj
369 0 obj
-<< /S /GoTo /D (subsection.7.3.2) >>
+<< /S /GoTo /D (section.7.3) >>
endobj
372 0 obj
-(7.3.2 Why is this better than security = server?)
+(7.3 Domain Member Server)
endobj
373 0 obj
-<< /S /GoTo /D (section.7.4) >>
+<< /S /GoTo /D (subsection.7.3.1) >>
endobj
376 0 obj
-(7.4 Samba ADS Domain Membership)
+(7.3.1 Joining an NT4 type Domain with Samba-3)
endobj
377 0 obj
-<< /S /GoTo /D (subsection.7.4.1) >>
+<< /S /GoTo /D (subsection.7.3.2) >>
endobj
380 0 obj
-(7.4.1 Setup your smb.conf)
+(7.3.2 Why is this better than security = server?)
endobj
381 0 obj
-<< /S /GoTo /D (subsection.7.4.2) >>
+<< /S /GoTo /D (section.7.4) >>
endobj
384 0 obj
-(7.4.2 Setup your /etc/krb5.conf)
+(7.4 Samba ADS Domain Membership)
endobj
385 0 obj
-<< /S /GoTo /D (subsection.7.4.3) >>
+<< /S /GoTo /D (subsection.7.4.1) >>
endobj
388 0 obj
-(7.4.3 Create the computer account)
+(7.4.1 Setup your smb.conf)
endobj
389 0 obj
-<< /S /GoTo /D (subsubsection.7.4.3.1) >>
+<< /S /GoTo /D (subsection.7.4.2) >>
endobj
392 0 obj
-(7.4.3.1 Possible errors)
+(7.4.2 Setup your /etc/krb5.conf)
endobj
393 0 obj
-<< /S /GoTo /D (subsection.7.4.4) >>
+<< /S /GoTo /D (subsection.7.4.3) >>
endobj
396 0 obj
-(7.4.4 Test your server setup)
+(7.4.3 Create the computer account)
endobj
397 0 obj
-<< /S /GoTo /D (subsection.7.4.5) >>
+<< /S /GoTo /D (subsubsection.7.4.3.1) >>
endobj
400 0 obj
-(7.4.5 Testing with smbclient)
+(7.4.3.1 Possible errors)
endobj
401 0 obj
-<< /S /GoTo /D (subsection.7.4.6) >>
+<< /S /GoTo /D (subsection.7.4.4) >>
endobj
404 0 obj
-(7.4.6 Notes)
+(7.4.4 Test your server setup)
endobj
405 0 obj
-<< /S /GoTo /D (section.7.5) >>
+<< /S /GoTo /D (subsection.7.4.5) >>
endobj
408 0 obj
-(7.5 Common Errors)
+(7.4.5 Testing with smbclient)
endobj
409 0 obj
-<< /S /GoTo /D (subsection.7.5.1) >>
+<< /S /GoTo /D (subsection.7.4.6) >>
endobj
412 0 obj
-(7.5.1 Can Not Add Machine Back to Domain)
+(7.4.6 Notes)
endobj
413 0 obj
-<< /S /GoTo /D (subsection.7.5.2) >>
+<< /S /GoTo /D (section.7.5) >>
endobj
416 0 obj
-(7.5.2 Adding Machine to Domain Fails)
+(7.5 Common Errors)
endobj
417 0 obj
-<< /S /GoTo /D (chapter.8) >>
+<< /S /GoTo /D (subsection.7.5.1) >>
endobj
420 0 obj
-(8 Stand-Alone Servers)
+(7.5.1 Can Not Add Machine Back to Domain)
endobj
421 0 obj
-<< /S /GoTo /D (section.8.1) >>
+<< /S /GoTo /D (subsection.7.5.2) >>
endobj
424 0 obj
-(8.1 Features and Benefits)
+(7.5.2 Adding Machine to Domain Fails)
endobj
425 0 obj
-<< /S /GoTo /D (section.8.2) >>
+<< /S /GoTo /D (subsection.7.5.3) >>
endobj
428 0 obj
-(8.2 Background)
+(7.5.3 I can't join a Windows 2003 PDC)
endobj
429 0 obj
-<< /S /GoTo /D (section.8.3) >>
+<< /S /GoTo /D (chapter.8) >>
endobj
432 0 obj
-(8.3 Example Configuration)
+(8 Stand-Alone Servers)
endobj
433 0 obj
-<< /S /GoTo /D (subsection.8.3.1) >>
+<< /S /GoTo /D (section.8.1) >>
endobj
436 0 obj
-(8.3.1 Reference Documentation Server)
+(8.1 Features and Benefits)
endobj
437 0 obj
-<< /S /GoTo /D (subsection.8.3.2) >>
+<< /S /GoTo /D (section.8.2) >>
endobj
440 0 obj
-(8.3.2 Central Print Serving)
+(8.2 Background)
endobj
441 0 obj
-<< /S /GoTo /D (section.8.4) >>
+<< /S /GoTo /D (section.8.3) >>
endobj
444 0 obj
-(8.4 Common Errors)
+(8.3 Example Configuration)
endobj
445 0 obj
-<< /S /GoTo /D (chapter.9) >>
+<< /S /GoTo /D (subsection.8.3.1) >>
endobj
448 0 obj
-(9 MS Windows Network Configuration Guide)
+(8.3.1 Reference Documentation Server)
endobj
449 0 obj
-<< /S /GoTo /D (section.9.1) >>
+<< /S /GoTo /D (subsection.8.3.2) >>
endobj
452 0 obj
-(9.1 Note)
+(8.3.2 Central Print Serving)
endobj
453 0 obj
-<< /S /GoTo /D (part.3) >>
+<< /S /GoTo /D (section.8.4) >>
endobj
456 0 obj
-(III Advanced Configuration)
+(8.4 Common Errors)
endobj
457 0 obj
-<< /S /GoTo /D (chapter.10) >>
+<< /S /GoTo /D (chapter.9) >>
endobj
460 0 obj
-(10 Samba / MS Windows Network Browsing Guide)
+(9 MS Windows Network Configuration Guide)
endobj
461 0 obj
-<< /S /GoTo /D (section.10.1) >>
+<< /S /GoTo /D (section.9.1) >>
endobj
464 0 obj
-(10.1 Features and Benefits)
+(9.1 Note)
endobj
465 0 obj
-<< /S /GoTo /D (section.10.2) >>
+<< /S /GoTo /D (part.3) >>
endobj
468 0 obj
-(10.2 What is Browsing?)
+(III Advanced Configuration)
endobj
469 0 obj
-<< /S /GoTo /D (section.10.3) >>
+<< /S /GoTo /D (chapter.10) >>
endobj
472 0 obj
-(10.3 Discussion)
+(10 Samba / MS Windows Network Browsing Guide)
endobj
473 0 obj
-<< /S /GoTo /D (subsection.10.3.1) >>
+<< /S /GoTo /D (section.10.1) >>
endobj
476 0 obj
-(10.3.1 NetBIOS over TCP/IP)
+(10.1 Features and Benefits)
endobj
477 0 obj
-<< /S /GoTo /D (subsection.10.3.2) >>
+<< /S /GoTo /D (section.10.2) >>
endobj
480 0 obj
-(10.3.2 TCP/IP - without NetBIOS)
+(10.2 What is Browsing?)
endobj
481 0 obj
-<< /S /GoTo /D (subsection.10.3.3) >>
+<< /S /GoTo /D (section.10.3) >>
endobj
484 0 obj
-(10.3.3 DNS and Active Directory)
+(10.3 Discussion)
endobj
485 0 obj
-<< /S /GoTo /D (section.10.4) >>
+<< /S /GoTo /D (subsection.10.3.1) >>
endobj
488 0 obj
-(10.4 How Browsing Functions)
+(10.3.1 NetBIOS over TCP/IP)
endobj
489 0 obj
-<< /S /GoTo /D (subsection.10.4.1) >>
+<< /S /GoTo /D (subsection.10.3.2) >>
endobj
492 0 obj
-(10.4.1 Setting up WORKGROUP Browsing)
+(10.3.2 TCP/IP - without NetBIOS)
endobj
493 0 obj
-<< /S /GoTo /D (subsection.10.4.2) >>
+<< /S /GoTo /D (subsection.10.3.3) >>
endobj
496 0 obj
-(10.4.2 Setting up DOMAIN Browsing)
+(10.3.3 DNS and Active Directory)
endobj
497 0 obj
-<< /S /GoTo /D (subsection.10.4.3) >>
+<< /S /GoTo /D (section.10.4) >>
endobj
500 0 obj
-(10.4.3 Forcing Samba to be the master)
+(10.4 How Browsing Functions)
endobj
501 0 obj
-<< /S /GoTo /D (subsection.10.4.4) >>
+<< /S /GoTo /D (subsection.10.4.1) >>
endobj
504 0 obj
-(10.4.4 Making Samba the domain master)
+(10.4.1 Setting up WORKGROUP Browsing)
endobj
505 0 obj
-<< /S /GoTo /D (subsection.10.4.5) >>
+<< /S /GoTo /D (subsection.10.4.2) >>
endobj
508 0 obj
-(10.4.5 Note about broadcast addresses)
+(10.4.2 Setting up DOMAIN Browsing)
endobj
509 0 obj
-<< /S /GoTo /D (subsection.10.4.6) >>
+<< /S /GoTo /D (subsection.10.4.3) >>
endobj
512 0 obj
-(10.4.6 Multiple interfaces)
+(10.4.3 Forcing Samba to be the master)
endobj
513 0 obj
-<< /S /GoTo /D (subsection.10.4.7) >>
+<< /S /GoTo /D (subsection.10.4.4) >>
endobj
516 0 obj
-(10.4.7 Use of the Remote Announce parameter)
+(10.4.4 Making Samba the domain master)
endobj
517 0 obj
-<< /S /GoTo /D (subsection.10.4.8) >>
+<< /S /GoTo /D (subsection.10.4.5) >>
endobj
520 0 obj
-(10.4.8 Use of the Remote Browse Sync parameter)
+(10.4.5 Note about broadcast addresses)
endobj
521 0 obj
-<< /S /GoTo /D (section.10.5) >>
+<< /S /GoTo /D (subsection.10.4.6) >>
endobj
524 0 obj
-(10.5 WINS - The Windows Internetworking Name Server)
+(10.4.6 Multiple interfaces)
endobj
525 0 obj
-<< /S /GoTo /D (subsection.10.5.1) >>
+<< /S /GoTo /D (subsection.10.4.7) >>
endobj
528 0 obj
-(10.5.1 Setting up a WINS server)
+(10.4.7 Use of the Remote Announce parameter)
endobj
529 0 obj
-<< /S /GoTo /D (subsection.10.5.2) >>
+<< /S /GoTo /D (subsection.10.4.8) >>
endobj
532 0 obj
-(10.5.2 WINS Replication)
+(10.4.8 Use of the Remote Browse Sync parameter)
endobj
533 0 obj
-<< /S /GoTo /D (subsection.10.5.3) >>
+<< /S /GoTo /D (section.10.5) >>
endobj
536 0 obj
-(10.5.3 Static WINS Entries)
+(10.5 WINS - The Windows Internetworking Name Server)
endobj
537 0 obj
-<< /S /GoTo /D (section.10.6) >>
+<< /S /GoTo /D (subsection.10.5.1) >>
endobj
540 0 obj
-(10.6 Helpful Hints)
+(10.5.1 Setting up a WINS server)
endobj
541 0 obj
-<< /S /GoTo /D (subsection.10.6.1) >>
+<< /S /GoTo /D (subsection.10.5.2) >>
endobj
544 0 obj
-(10.6.1 Windows Networking Protocols)
+(10.5.2 WINS Replication)
endobj
545 0 obj
-<< /S /GoTo /D (subsection.10.6.2) >>
+<< /S /GoTo /D (subsection.10.5.3) >>
endobj
548 0 obj
-(10.6.2 Name Resolution Order)
+(10.5.3 Static WINS Entries)
endobj
549 0 obj
-<< /S /GoTo /D (section.10.7) >>
+<< /S /GoTo /D (section.10.6) >>
endobj
552 0 obj
-(10.7 Technical Overview of browsing)
+(10.6 Helpful Hints)
endobj
553 0 obj
-<< /S /GoTo /D (subsection.10.7.1) >>
+<< /S /GoTo /D (subsection.10.6.1) >>
endobj
556 0 obj
-(10.7.1 Browsing support in Samba)
+(10.6.1 Windows Networking Protocols)
endobj
557 0 obj
-<< /S /GoTo /D (subsection.10.7.2) >>
+<< /S /GoTo /D (subsection.10.6.2) >>
endobj
560 0 obj
-(10.7.2 Problem resolution)
+(10.6.2 Name Resolution Order)
endobj
561 0 obj
-<< /S /GoTo /D (subsection.10.7.3) >>
+<< /S /GoTo /D (section.10.7) >>
endobj
564 0 obj
-(10.7.3 Browsing across subnets)
+(10.7 Technical Overview of browsing)
endobj
565 0 obj
-<< /S /GoTo /D (subsubsection.10.7.3.1) >>
+<< /S /GoTo /D (subsection.10.7.1) >>
endobj
568 0 obj
-(10.7.3.1 How does cross subnet browsing work ?)
+(10.7.1 Browsing support in Samba)
endobj
569 0 obj
-<< /S /GoTo /D (section.10.8) >>
+<< /S /GoTo /D (subsection.10.7.2) >>
endobj
572 0 obj
-(10.8 Common Errors)
+(10.7.2 Problem resolution)
endobj
573 0 obj
-<< /S /GoTo /D (subsection.10.8.1) >>
+<< /S /GoTo /D (subsection.10.7.3) >>
endobj
576 0 obj
-(10.8.1 How can one flush the Samba NetBIOS name cache without restarting Samba?)
+(10.7.3 Browsing across subnets)
endobj
577 0 obj
-<< /S /GoTo /D (subsection.10.8.2) >>
+<< /S /GoTo /D (subsubsection.10.7.3.1) >>
endobj
580 0 obj
-(10.8.2 My client reports "This server is not configured to list shared resources")
+(10.7.3.1 How does cross subnet browsing work ?)
endobj
581 0 obj
-<< /S /GoTo /D (chapter.11) >>
+<< /S /GoTo /D (section.10.8) >>
endobj
584 0 obj
-(11 Account Information Databases)
+(10.8 Common Errors)
endobj
585 0 obj
-<< /S /GoTo /D (section.11.1) >>
+<< /S /GoTo /D (subsection.10.8.1) >>
endobj
588 0 obj
-(11.1 Features and Benefits)
+(10.8.1 How can one flush the Samba NetBIOS name cache without restarting Samba?)
endobj
589 0 obj
-<< /S /GoTo /D (section.11.2) >>
+<< /S /GoTo /D (subsection.10.8.2) >>
endobj
592 0 obj
-(11.2 Technical Information)
+(10.8.2 My client reports "This server is not configured to list shared resources")
endobj
593 0 obj
-<< /S /GoTo /D (subsection.11.2.1) >>
+<< /S /GoTo /D (subsection.10.8.3) >>
endobj
596 0 obj
-(11.2.1 Important Notes About Security)
+(10.8.3 I get an Unable to browse the network error)
endobj
597 0 obj
-<< /S /GoTo /D (subsubsection.11.2.1.1) >>
+<< /S /GoTo /D (chapter.11) >>
endobj
600 0 obj
-(11.2.1.1 Advantages of Encrypted Passwords)
+(11 Account Information Databases)
endobj
601 0 obj
-<< /S /GoTo /D (subsubsection.11.2.1.2) >>
+<< /S /GoTo /D (section.11.1) >>
endobj
604 0 obj
-(11.2.1.2 Advantages of non-encrypted passwords)
+(11.1 Features and Benefits)
endobj
605 0 obj
-<< /S /GoTo /D (subsection.11.2.2) >>
+<< /S /GoTo /D (subsection.11.1.1) >>
endobj
608 0 obj
-(11.2.2 Mapping User Identifiers between MS Windows and Unix)
+(11.1.1 Backwards Compatibility Backends)
endobj
609 0 obj
-<< /S /GoTo /D (section.11.3) >>
+<< /S /GoTo /D (subsection.11.1.2) >>
endobj
612 0 obj
-(11.3 Account Management Tools)
+(11.1.2 New Backends)
endobj
613 0 obj
-<< /S /GoTo /D (subsection.11.3.1) >>
+<< /S /GoTo /D (section.11.2) >>
endobj
616 0 obj
-(11.3.1 The smbpasswd Command)
+(11.2 Technical Information)
endobj
617 0 obj
-<< /S /GoTo /D (subsection.11.3.2) >>
+<< /S /GoTo /D (subsection.11.2.1) >>
endobj
620 0 obj
-(11.3.2 The pdbedit Command)
+(11.2.1 Important Notes About Security)
endobj
621 0 obj
-<< /S /GoTo /D (section.11.4) >>
+<< /S /GoTo /D (subsubsection.11.2.1.1) >>
endobj
624 0 obj
-(11.4 Password Backends)
+(11.2.1.1 Advantages of Encrypted Passwords)
endobj
625 0 obj
-<< /S /GoTo /D (subsection.11.4.1) >>
+<< /S /GoTo /D (subsubsection.11.2.1.2) >>
endobj
628 0 obj
-(11.4.1 Plain Text)
+(11.2.1.2 Advantages of non-encrypted passwords)
endobj
629 0 obj
-<< /S /GoTo /D (subsection.11.4.2) >>
+<< /S /GoTo /D (subsection.11.2.2) >>
endobj
632 0 obj
-(11.4.2 smbpasswd - Encrypted Password Database)
+(11.2.2 Mapping User Identifiers between MS Windows and UNIX)
endobj
633 0 obj
-<< /S /GoTo /D (subsection.11.4.3) >>
+<< /S /GoTo /D (subsection.11.2.3) >>
endobj
636 0 obj
-(11.4.3 tdbsam)
+(11.2.3 Mapping Common UIDs/GIDs on Distributed Machines)
endobj
637 0 obj
-<< /S /GoTo /D (subsection.11.4.4) >>
+<< /S /GoTo /D (section.11.3) >>
endobj
640 0 obj
-(11.4.4 ldapsam)
+(11.3 Account Management Tools)
endobj
641 0 obj
-<< /S /GoTo /D (subsubsection.11.4.4.1) >>
+<< /S /GoTo /D (subsection.11.3.1) >>
endobj
644 0 obj
-(11.4.4.1 Supported LDAP Servers)
+(11.3.1 The smbpasswd Command)
endobj
645 0 obj
-<< /S /GoTo /D (subsubsection.11.4.4.2) >>
+<< /S /GoTo /D (subsection.11.3.2) >>
endobj
648 0 obj
-(11.4.4.2 Schema and Relationship to the RFC 2307 posixAccount)
+(11.3.2 The pdbedit Command)
endobj
649 0 obj
-<< /S /GoTo /D (subsubsection.11.4.4.3) >>
+<< /S /GoTo /D (section.11.4) >>
endobj
652 0 obj
-(11.4.4.3 OpenLDAP configuration)
+(11.4 Password Backends)
endobj
653 0 obj
-<< /S /GoTo /D (subsubsection.11.4.4.4) >>
+<< /S /GoTo /D (subsection.11.4.1) >>
endobj
656 0 obj
-(11.4.4.4 Initialise the LDAP database)
+(11.4.1 Plain Text)
endobj
657 0 obj
-<< /S /GoTo /D (subsubsection.11.4.4.5) >>
+<< /S /GoTo /D (subsection.11.4.2) >>
endobj
660 0 obj
-(11.4.4.5 Configuring Samba)
+(11.4.2 smbpasswd - Encrypted Password Database)
endobj
661 0 obj
-<< /S /GoTo /D (subsubsection.11.4.4.6) >>
+<< /S /GoTo /D (subsection.11.4.3) >>
endobj
664 0 obj
-(11.4.4.6 Accounts and Groups management)
+(11.4.3 tdbsam)
endobj
665 0 obj
-<< /S /GoTo /D (subsubsection.11.4.4.7) >>
+<< /S /GoTo /D (subsection.11.4.4) >>
endobj
668 0 obj
-(11.4.4.7 Security and sambaSamAccount)
+(11.4.4 ldapsam)
endobj
669 0 obj
-<< /S /GoTo /D (subsubsection.11.4.4.8) >>
+<< /S /GoTo /D (subsubsection.11.4.4.1) >>
endobj
672 0 obj
-(11.4.4.8 LDAP special attributes for sambaSamAccounts)
+(11.4.4.1 Supported LDAP Servers)
endobj
673 0 obj
-<< /S /GoTo /D (subsubsection.11.4.4.9) >>
+<< /S /GoTo /D (subsubsection.11.4.4.2) >>
endobj
676 0 obj
-(11.4.4.9 Example LDIF Entries for a sambaSamAccount)
+(11.4.4.2 Schema and Relationship to the RFC 2307 posixAccount)
endobj
677 0 obj
-<< /S /GoTo /D (subsubsection.11.4.4.10) >>
+<< /S /GoTo /D (subsubsection.11.4.4.3) >>
endobj
680 0 obj
-(11.4.4.10 Password synchronisation)
+(11.4.4.3 OpenLDAP configuration)
endobj
681 0 obj
-<< /S /GoTo /D (subsection.11.4.5) >>
+<< /S /GoTo /D (subsubsection.11.4.4.4) >>
endobj
684 0 obj
-(11.4.5 MySQL)
+(11.4.4.4 Initialise the LDAP database)
endobj
685 0 obj
-<< /S /GoTo /D (subsubsection.11.4.5.1) >>
+<< /S /GoTo /D (subsubsection.11.4.4.5) >>
endobj
688 0 obj
-(11.4.5.1 Creating the database)
+(11.4.4.5 Configuring Samba)
endobj
689 0 obj
-<< /S /GoTo /D (subsubsection.11.4.5.2) >>
+<< /S /GoTo /D (subsubsection.11.4.4.6) >>
endobj
692 0 obj
-(11.4.5.2 Configuring)
+(11.4.4.6 Accounts and Groups management)
endobj
693 0 obj
-<< /S /GoTo /D (subsubsection.11.4.5.3) >>
+<< /S /GoTo /D (subsubsection.11.4.4.7) >>
endobj
696 0 obj
-(11.4.5.3 Using plaintext passwords or encrypted password)
+(11.4.4.7 Security and sambaSamAccount)
endobj
697 0 obj
-<< /S /GoTo /D (subsubsection.11.4.5.4) >>
+<< /S /GoTo /D (subsubsection.11.4.4.8) >>
endobj
700 0 obj
-(11.4.5.4 Getting non-column data from the table)
+(11.4.4.8 LDAP special attributes for sambaSamAccounts)
endobj
701 0 obj
-<< /S /GoTo /D (subsection.11.4.6) >>
+<< /S /GoTo /D (subsubsection.11.4.4.9) >>
endobj
704 0 obj
-(11.4.6 XML)
+(11.4.4.9 Example LDIF Entries for a sambaSamAccount)
endobj
705 0 obj
-<< /S /GoTo /D (section.11.5) >>
+<< /S /GoTo /D (subsubsection.11.4.4.10) >>
endobj
708 0 obj
-(11.5 Common Errors)
+(11.4.4.10 Password synchronisation)
endobj
709 0 obj
-<< /S /GoTo /D (subsection.11.5.1) >>
+<< /S /GoTo /D (subsection.11.4.5) >>
endobj
712 0 obj
-(11.5.1 Users can not logon - Users not in Samba SAM)
+(11.4.5 MySQL)
endobj
713 0 obj
-<< /S /GoTo /D (subsection.11.5.2) >>
+<< /S /GoTo /D (subsubsection.11.4.5.1) >>
endobj
716 0 obj
-(11.5.2 Users are being added to the wrong backend database)
+(11.4.5.1 Creating the database)
endobj
717 0 obj
-<< /S /GoTo /D (subsection.11.5.3) >>
+<< /S /GoTo /D (subsubsection.11.4.5.2) >>
endobj
720 0 obj
-(11.5.3 auth methods does not work)
+(11.4.5.2 Configuring)
endobj
721 0 obj
-<< /S /GoTo /D (chapter.12) >>
+<< /S /GoTo /D (subsubsection.11.4.5.3) >>
endobj
724 0 obj
-(12 Mapping MS Windows and Unix Groups)
+(11.4.5.3 Using plaintext passwords or encrypted password)
endobj
725 0 obj
-<< /S /GoTo /D (section.12.1) >>
+<< /S /GoTo /D (subsubsection.11.4.5.4) >>
endobj
728 0 obj
-(12.1 Features and Benefits)
+(11.4.5.4 Getting non-column data from the table)
endobj
729 0 obj
-<< /S /GoTo /D (section.12.2) >>
+<< /S /GoTo /D (subsection.11.4.6) >>
endobj
732 0 obj
-(12.2 Discussion)
+(11.4.6 XML)
endobj
733 0 obj
-<< /S /GoTo /D (subsection.12.2.1) >>
+<< /S /GoTo /D (section.11.5) >>
endobj
736 0 obj
-(12.2.1 Example Configuration)
+(11.5 Common Errors)
endobj
737 0 obj
-<< /S /GoTo /D (section.12.3) >>
+<< /S /GoTo /D (subsection.11.5.1) >>
endobj
740 0 obj
-(12.3 Configuration Scripts)
+(11.5.1 Users can not logon)
endobj
741 0 obj
-<< /S /GoTo /D (subsection.12.3.1) >>
+<< /S /GoTo /D (subsection.11.5.2) >>
endobj
744 0 obj
-(12.3.1 Sample smb.conf add group script)
+(11.5.2 Users being added to wrong backend database)
endobj
745 0 obj
-<< /S /GoTo /D (subsection.12.3.2) >>
+<< /S /GoTo /D (subsection.11.5.3) >>
endobj
748 0 obj
-(12.3.2 Script to configure Group Mapping)
+(11.5.3 auth methods does not work)
endobj
749 0 obj
-<< /S /GoTo /D (section.12.4) >>
+<< /S /GoTo /D (chapter.12) >>
endobj
752 0 obj
-(12.4 Common Errors)
+(12 Mapping MS Windows and UNIX Groups)
endobj
753 0 obj
-<< /S /GoTo /D (subsection.12.4.1) >>
+<< /S /GoTo /D (section.12.1) >>
endobj
756 0 obj
-(12.4.1 Adding Groups Fails)
+(12.1 Features and Benefits)
endobj
757 0 obj
-<< /S /GoTo /D (subsection.12.4.2) >>
+<< /S /GoTo /D (section.12.2) >>
endobj
760 0 obj
-(12.4.2 Adding MS Windows Groups to MS Windows Groups Fails)
+(12.2 Discussion)
endobj
761 0 obj
-<< /S /GoTo /D (chapter.13) >>
+<< /S /GoTo /D (subsection.12.2.1) >>
endobj
764 0 obj
-(13 File, Directory and Share Access Controls)
+(12.2.1 Example Configuration)
endobj
765 0 obj
-<< /S /GoTo /D (section.13.1) >>
+<< /S /GoTo /D (section.12.3) >>
endobj
768 0 obj
-(13.1 Features and Benefits)
+(12.3 Configuration Scripts)
endobj
769 0 obj
-<< /S /GoTo /D (section.13.2) >>
+<< /S /GoTo /D (subsection.12.3.1) >>
endobj
772 0 obj
-(13.2 File System Access Controls)
+(12.3.1 Sample smb.conf add group script)
endobj
773 0 obj
-<< /S /GoTo /D (subsection.13.2.1) >>
+<< /S /GoTo /D (subsection.12.3.2) >>
endobj
776 0 obj
-(13.2.1 MS Windows NTFS Comparison with Unix File Systems)
+(12.3.2 Script to configure Group Mapping)
endobj
777 0 obj
-<< /S /GoTo /D (subsection.13.2.2) >>
+<< /S /GoTo /D (section.12.4) >>
endobj
780 0 obj
-(13.2.2 Managing Directories)
+(12.4 Common Errors)
endobj
781 0 obj
-<< /S /GoTo /D (subsection.13.2.3) >>
+<< /S /GoTo /D (subsection.12.4.1) >>
endobj
784 0 obj
-(13.2.3 File and Directory Access Control)
+(12.4.1 Adding Groups Fails)
endobj
785 0 obj
-<< /S /GoTo /D (section.13.3) >>
+<< /S /GoTo /D (subsection.12.4.2) >>
endobj
788 0 obj
-(13.3 Share Definition Access Controls)
+(12.4.2 Adding MS Windows Groups to MS Windows Groups Fails)
endobj
789 0 obj
-<< /S /GoTo /D (subsection.13.3.1) >>
+<< /S /GoTo /D (subsection.12.4.3) >>
endobj
792 0 obj
-(13.3.1 User and Group Based Controls)
+(12.4.3 Adding Domain Users to the Power Users group)
endobj
793 0 obj
-<< /S /GoTo /D (subsection.13.3.2) >>
+<< /S /GoTo /D (chapter.13) >>
endobj
796 0 obj
-(13.3.2 File and Directory Permissions Based Controls)
+(13 File, Directory and Share Access Controls)
endobj
797 0 obj
-<< /S /GoTo /D (subsection.13.3.3) >>
+<< /S /GoTo /D (section.13.1) >>
endobj
800 0 obj
-(13.3.3 Miscellaneous Controls)
+(13.1 Features and Benefits)
endobj
801 0 obj
-<< /S /GoTo /D (section.13.4) >>
+<< /S /GoTo /D (section.13.2) >>
endobj
804 0 obj
-(13.4 Access Controls on Shares)
+(13.2 File System Access Controls)
endobj
805 0 obj
-<< /S /GoTo /D (subsection.13.4.1) >>
+<< /S /GoTo /D (subsection.13.2.1) >>
endobj
808 0 obj
-(13.4.1 Share Permissions Management)
+(13.2.1 MS Windows NTFS Comparison with UNIX File Systems)
endobj
809 0 obj
-<< /S /GoTo /D (subsubsection.13.4.1.1) >>
+<< /S /GoTo /D (subsection.13.2.2) >>
endobj
812 0 obj
-(13.4.1.1 Windows NT4 Workstation/Server)
+(13.2.2 Managing Directories)
endobj
813 0 obj
-<< /S /GoTo /D (subsubsection.13.4.1.2) >>
+<< /S /GoTo /D (subsection.13.2.3) >>
endobj
816 0 obj
-(13.4.1.2 Windows 200x/XP)
+(13.2.3 File and Directory Access Control)
endobj
817 0 obj
-<< /S /GoTo /D (section.13.5) >>
+<< /S /GoTo /D (section.13.3) >>
endobj
820 0 obj
-(13.5 MS Windows Access Control Lists and Unix Interoperability)
+(13.3 Share Definition Access Controls)
endobj
821 0 obj
-<< /S /GoTo /D (subsection.13.5.1) >>
+<< /S /GoTo /D (subsection.13.3.1) >>
endobj
824 0 obj
-(13.5.1 Managing UNIX permissions Using NT Security Dialogs)
+(13.3.1 User and Group Based Controls)
endobj
825 0 obj
-<< /S /GoTo /D (subsection.13.5.2) >>
+<< /S /GoTo /D (subsection.13.3.2) >>
endobj
828 0 obj
-(13.5.2 Viewing File Security on a Samba Share)
+(13.3.2 File and Directory Permissions Based Controls)
endobj
829 0 obj
-<< /S /GoTo /D (subsection.13.5.3) >>
+<< /S /GoTo /D (subsection.13.3.3) >>
endobj
832 0 obj
-(13.5.3 Viewing file ownership)
+(13.3.3 Miscellaneous Controls)
endobj
833 0 obj
-<< /S /GoTo /D (subsection.13.5.4) >>
+<< /S /GoTo /D (section.13.4) >>
endobj
836 0 obj
-(13.5.4 Viewing File or Directory Permissions)
+(13.4 Access Controls on Shares)
endobj
837 0 obj
-<< /S /GoTo /D (subsubsection.13.5.4.1) >>
+<< /S /GoTo /D (subsection.13.4.1) >>
endobj
840 0 obj
-(13.5.4.1 File Permissions)
+(13.4.1 Share Permissions Management)
endobj
841 0 obj
-<< /S /GoTo /D (subsubsection.13.5.4.2) >>
+<< /S /GoTo /D (subsubsection.13.4.1.1) >>
endobj
844 0 obj
-(13.5.4.2 Directory Permissions)
+(13.4.1.1 Windows NT4 Workstation/Server)
endobj
845 0 obj
-<< /S /GoTo /D (subsection.13.5.5) >>
+<< /S /GoTo /D (subsubsection.13.4.1.2) >>
endobj
848 0 obj
-(13.5.5 Modifying file or directory permissions)
+(13.4.1.2 Windows 200x/XP)
endobj
849 0 obj
-<< /S /GoTo /D (subsection.13.5.6) >>
+<< /S /GoTo /D (section.13.5) >>
endobj
852 0 obj
-(13.5.6 Interaction with the standard Samba create mask parameters)
+(13.5 MS Windows Access Control Lists and UNIX Interoperability)
endobj
853 0 obj
-<< /S /GoTo /D (subsection.13.5.7) >>
+<< /S /GoTo /D (subsection.13.5.1) >>
endobj
856 0 obj
-(13.5.7 Interaction with the standard Samba file attribute mapping)
+(13.5.1 Managing UNIX permissions Using NT Security Dialogs)
endobj
857 0 obj
-<< /S /GoTo /D (section.13.6) >>
+<< /S /GoTo /D (subsection.13.5.2) >>
endobj
860 0 obj
-(13.6 Common Errors)
+(13.5.2 Viewing File Security on a Samba Share)
endobj
861 0 obj
-<< /S /GoTo /D (subsection.13.6.1) >>
+<< /S /GoTo /D (subsection.13.5.3) >>
endobj
864 0 obj
-(13.6.1 Users can not write to a public share)
+(13.5.3 Viewing file ownership)
endobj
865 0 obj
-<< /S /GoTo /D (subsection.13.6.2) >>
+<< /S /GoTo /D (subsection.13.5.4) >>
endobj
868 0 obj
-(13.6.2 I have set force user and Samba still makes root the owner of all the files I touch!)
+(13.5.4 Viewing File or Directory Permissions)
endobj
869 0 obj
-<< /S /GoTo /D (chapter.14) >>
+<< /S /GoTo /D (subsubsection.13.5.4.1) >>
endobj
872 0 obj
-(14 File and Record Locking)
+(13.5.4.1 File Permissions)
endobj
873 0 obj
-<< /S /GoTo /D (section.14.1) >>
+<< /S /GoTo /D (subsubsection.13.5.4.2) >>
endobj
876 0 obj
-(14.1 Features and Benefits)
+(13.5.4.2 Directory Permissions)
endobj
877 0 obj
-<< /S /GoTo /D (section.14.2) >>
+<< /S /GoTo /D (subsection.13.5.5) >>
endobj
880 0 obj
-(14.2 Discussion)
+(13.5.5 Modifying file or directory permissions)
endobj
881 0 obj
-<< /S /GoTo /D (subsection.14.2.1) >>
+<< /S /GoTo /D (subsection.13.5.6) >>
endobj
884 0 obj
-(14.2.1 Opportunistic Locking Overview)
+(13.5.6 Interaction with the standard Samba create mask parameters)
endobj
885 0 obj
-<< /S /GoTo /D (subsubsection.14.2.1.1) >>
+<< /S /GoTo /D (subsection.13.5.7) >>
endobj
888 0 obj
-(14.2.1.1 Exclusively Accessed Shares)
+(13.5.7 Interaction with the standard Samba file attribute mapping)
endobj
889 0 obj
-<< /S /GoTo /D (subsubsection.14.2.1.2) >>
+<< /S /GoTo /D (section.13.6) >>
endobj
892 0 obj
-(14.2.1.2 Multiple-Accessed Shares or Files)
+(13.6 Common Errors)
endobj
893 0 obj
-<< /S /GoTo /D (subsubsection.14.2.1.3) >>
+<< /S /GoTo /D (subsection.13.6.1) >>
endobj
896 0 obj
-(14.2.1.3 Unix or NFS Client Accessed Files)
+(13.6.1 Users can not write to a public share)
endobj
897 0 obj
-<< /S /GoTo /D (subsubsection.14.2.1.4) >>
+<< /S /GoTo /D (subsection.13.6.2) >>
endobj
900 0 obj
-(14.2.1.4 Slow and/or Unreliable Networks)
+(13.6.2 I have set force user but Samba still makes root the owner of all the files I touch!)
endobj
901 0 obj
-<< /S /GoTo /D (subsubsection.14.2.1.5) >>
+<< /S /GoTo /D (subsection.13.6.3) >>
endobj
904 0 obj
-(14.2.1.5 Multi-User Databases)
+(13.6.3 MS Word with Samba changes owner of file)
endobj
905 0 obj
-<< /S /GoTo /D (subsubsection.14.2.1.6) >>
+<< /S /GoTo /D (chapter.14) >>
endobj
908 0 obj
-(14.2.1.6 PDM Data Shares)
+(14 File and Record Locking)
endobj
909 0 obj
-<< /S /GoTo /D (subsubsection.14.2.1.7) >>
+<< /S /GoTo /D (section.14.1) >>
endobj
912 0 obj
-(14.2.1.7 Beware of Force User)
+(14.1 Features and Benefits)
endobj
913 0 obj
-<< /S /GoTo /D (subsubsection.14.2.1.8) >>
+<< /S /GoTo /D (section.14.2) >>
endobj
916 0 obj
-(14.2.1.8 Advanced Samba Opportunistic Locking Parameters)
+(14.2 Discussion)
endobj
917 0 obj
-<< /S /GoTo /D (subsubsection.14.2.1.9) >>
+<< /S /GoTo /D (subsection.14.2.1) >>
endobj
920 0 obj
-(14.2.1.9 Mission Critical High Availability)
+(14.2.1 Opportunistic Locking Overview)
endobj
921 0 obj
-<< /S /GoTo /D (section.14.3) >>
+<< /S /GoTo /D (subsubsection.14.2.1.1) >>
endobj
924 0 obj
-(14.3 Samba Opportunistic Locking Control)
+(14.2.1.1 Exclusively Accessed Shares)
endobj
925 0 obj
-<< /S /GoTo /D (subsection.14.3.1) >>
+<< /S /GoTo /D (subsubsection.14.2.1.2) >>
endobj
928 0 obj
-(14.3.1 Example Configuration)
+(14.2.1.2 Multiple-Accessed Shares or Files)
endobj
929 0 obj
-<< /S /GoTo /D (subsubsection.14.3.1.1) >>
+<< /S /GoTo /D (subsubsection.14.2.1.3) >>
endobj
932 0 obj
-(14.3.1.1 Disabling Oplocks)
+(14.2.1.3 UNIX or NFS Client Accessed Files)
endobj
933 0 obj
-<< /S /GoTo /D (subsubsection.14.3.1.2) >>
+<< /S /GoTo /D (subsubsection.14.2.1.4) >>
endobj
936 0 obj
-(14.3.1.2 Disabling Kernel OpLocks)
+(14.2.1.4 Slow and/or Unreliable Networks)
endobj
937 0 obj
-<< /S /GoTo /D (section.14.4) >>
+<< /S /GoTo /D (subsubsection.14.2.1.5) >>
endobj
940 0 obj
-(14.4 MS Windows Opportunistic Locking and Caching Controls)
+(14.2.1.5 Multi-User Databases)
endobj
941 0 obj
-<< /S /GoTo /D (subsection.14.4.1) >>
+<< /S /GoTo /D (subsubsection.14.2.1.6) >>
endobj
944 0 obj
-(14.4.1 Workstation Service Entries)
+(14.2.1.6 PDM Data Shares)
endobj
945 0 obj
-<< /S /GoTo /D (subsection.14.4.2) >>
+<< /S /GoTo /D (subsubsection.14.2.1.7) >>
endobj
948 0 obj
-(14.4.2 Server Service Entries)
+(14.2.1.7 Beware of Force User)
endobj
949 0 obj
-<< /S /GoTo /D (section.14.5) >>
+<< /S /GoTo /D (subsubsection.14.2.1.8) >>
endobj
952 0 obj
-(14.5 Persistent Data Corruption)
+(14.2.1.8 Advanced Samba Opportunistic Locking Parameters)
endobj
953 0 obj
-<< /S /GoTo /D (section.14.6) >>
+<< /S /GoTo /D (subsubsection.14.2.1.9) >>
endobj
956 0 obj
-(14.6 Common Errors)
+(14.2.1.9 Mission Critical High Availability)
endobj
957 0 obj
-<< /S /GoTo /D (subsection.14.6.1) >>
+<< /S /GoTo /D (section.14.3) >>
endobj
960 0 obj
-(14.6.1 locking.tdb error messages)
+(14.3 Samba Opportunistic Locking Control)
endobj
961 0 obj
-<< /S /GoTo /D (section.14.7) >>
+<< /S /GoTo /D (subsection.14.3.1) >>
endobj
964 0 obj
-(14.7 Additional Reading)
+(14.3.1 Example Configuration)
endobj
965 0 obj
-<< /S /GoTo /D (chapter.15) >>
+<< /S /GoTo /D (subsubsection.14.3.1.1) >>
endobj
968 0 obj
-(15 Securing Samba)
+(14.3.1.1 Disabling Oplocks)
endobj
969 0 obj
-<< /S /GoTo /D (section.15.1) >>
+<< /S /GoTo /D (subsubsection.14.3.1.2) >>
endobj
972 0 obj
-(15.1 Introduction)
+(14.3.1.2 Disabling Kernel OpLocks)
endobj
973 0 obj
-<< /S /GoTo /D (section.15.2) >>
+<< /S /GoTo /D (section.14.4) >>
endobj
976 0 obj
-(15.2 Features and Benefits)
+(14.4 MS Windows Opportunistic Locking and Caching Controls)
endobj
977 0 obj
-<< /S /GoTo /D (section.15.3) >>
+<< /S /GoTo /D (subsection.14.4.1) >>
endobj
980 0 obj
-(15.3 Technical Discussion of Protective Measures and Issues)
+(14.4.1 Workstation Service Entries)
endobj
981 0 obj
-<< /S /GoTo /D (subsection.15.3.1) >>
+<< /S /GoTo /D (subsection.14.4.2) >>
endobj
984 0 obj
-(15.3.1 Using host based protection)
+(14.4.2 Server Service Entries)
endobj
985 0 obj
-<< /S /GoTo /D (subsection.15.3.2) >>
+<< /S /GoTo /D (section.14.5) >>
endobj
988 0 obj
-(15.3.2 User based protection)
+(14.5 Persistent Data Corruption)
endobj
989 0 obj
-<< /S /GoTo /D (subsection.15.3.3) >>
+<< /S /GoTo /D (section.14.6) >>
endobj
992 0 obj
-(15.3.3 Using interface protection)
+(14.6 Common Errors)
endobj
993 0 obj
-<< /S /GoTo /D (subsection.15.3.4) >>
+<< /S /GoTo /D (subsection.14.6.1) >>
endobj
996 0 obj
-(15.3.4 Using a firewall)
+(14.6.1 locking.tdb error messages)
endobj
997 0 obj
-<< /S /GoTo /D (subsection.15.3.5) >>
+<< /S /GoTo /D (subsection.14.6.2) >>
endobj
1000 0 obj
-(15.3.5 Using a IPC\044 share deny)
+(14.6.2 Problems saving files in MS Office on Windows XP)
endobj
1001 0 obj
-<< /S /GoTo /D (subsection.15.3.6) >>
+<< /S /GoTo /D (subsection.14.6.3) >>
endobj
1004 0 obj
-(15.3.6 NTLMv2 Security)
+(14.6.3 Long delays deleting files over network with XP SP1)
endobj
1005 0 obj
-<< /S /GoTo /D (section.15.4) >>
+<< /S /GoTo /D (section.14.7) >>
endobj
1008 0 obj
-(15.4 Upgrading Samba)
+(14.7 Additional Reading)
endobj
1009 0 obj
-<< /S /GoTo /D (section.15.5) >>
+<< /S /GoTo /D (chapter.15) >>
endobj
1012 0 obj
-(15.5 Common Errors)
+(15 Securing Samba)
endobj
1013 0 obj
-<< /S /GoTo /D (subsection.15.5.1) >>
+<< /S /GoTo /D (section.15.1) >>
endobj
1016 0 obj
-(15.5.1 Smbclient works on localhost, but the network is dead)
+(15.1 Introduction)
endobj
1017 0 obj
-<< /S /GoTo /D (subsection.15.5.2) >>
+<< /S /GoTo /D (section.15.2) >>
endobj
1020 0 obj
-(15.5.2 Why can users access home directories of other users?)
+(15.2 Features and Benefits)
endobj
1021 0 obj
-<< /S /GoTo /D (chapter.16) >>
+<< /S /GoTo /D (section.15.3) >>
endobj
1024 0 obj
-(16 Interdomain Trust Relationships)
+(15.3 Technical Discussion of Protective Measures and Issues)
endobj
1025 0 obj
-<< /S /GoTo /D (section.16.1) >>
+<< /S /GoTo /D (subsection.15.3.1) >>
endobj
1028 0 obj
-(16.1 Features and Benefits)
+(15.3.1 Using host based protection)
endobj
1029 0 obj
-<< /S /GoTo /D (section.16.2) >>
+<< /S /GoTo /D (subsection.15.3.2) >>
endobj
1032 0 obj
-(16.2 Trust Relationship Background)
+(15.3.2 User based protection)
endobj
1033 0 obj
-<< /S /GoTo /D (section.16.3) >>
+<< /S /GoTo /D (subsection.15.3.3) >>
endobj
1036 0 obj
-(16.3 Native MS Windows NT4 Trusts Configuration)
+(15.3.3 Using interface protection)
endobj
1037 0 obj
-<< /S /GoTo /D (subsection.16.3.1) >>
+<< /S /GoTo /D (subsection.15.3.4) >>
endobj
1040 0 obj
-(16.3.1 NT4 as the Trusting Domain \(ie. creating the trusted account\))
+(15.3.4 Using a firewall)
endobj
1041 0 obj
-<< /S /GoTo /D (subsection.16.3.2) >>
+<< /S /GoTo /D (subsection.15.3.5) >>
endobj
1044 0 obj
-(16.3.2 NT4 as the Trusted Domain \(ie. creating trusted account's password\))
+(15.3.5 Using a IPC\044 share deny)
endobj
1045 0 obj
-<< /S /GoTo /D (section.16.4) >>
+<< /S /GoTo /D (subsection.15.3.6) >>
endobj
1048 0 obj
-(16.4 Configuring Samba NT-style Domain Trusts)
+(15.3.6 NTLMv2 Security)
endobj
1049 0 obj
-<< /S /GoTo /D (subsection.16.4.1) >>
+<< /S /GoTo /D (section.15.4) >>
endobj
1052 0 obj
-(16.4.1 Samba-3 as the Trusting Domain)
+(15.4 Upgrading Samba)
endobj
1053 0 obj
-<< /S /GoTo /D (subsection.16.4.2) >>
+<< /S /GoTo /D (section.15.5) >>
endobj
1056 0 obj
-(16.4.2 Samba-3 as the Trusted Domain)
+(15.5 Common Errors)
endobj
1057 0 obj
-<< /S /GoTo /D (section.16.5) >>
+<< /S /GoTo /D (subsection.15.5.1) >>
endobj
1060 0 obj
-(16.5 Common Errors)
+(15.5.1 Smbclient works on localhost, but the network is dead)
endobj
1061 0 obj
-<< /S /GoTo /D (subsection.16.5.1) >>
+<< /S /GoTo /D (subsection.15.5.2) >>
endobj
1064 0 obj
-(16.5.1 Tell me about Trust Relationships using Samba)
+(15.5.2 Why can users access home directories of other users?)
endobj
1065 0 obj
-<< /S /GoTo /D (chapter.17) >>
+<< /S /GoTo /D (chapter.16) >>
endobj
1068 0 obj
-(17 Hosting a Microsoft Distributed File System tree on Samba)
+(16 Interdomain Trust Relationships)
endobj
1069 0 obj
-<< /S /GoTo /D (section.17.1) >>
+<< /S /GoTo /D (section.16.1) >>
endobj
1072 0 obj
-(17.1 Features and Benefits)
+(16.1 Features and Benefits)
endobj
1073 0 obj
-<< /S /GoTo /D (section.17.2) >>
+<< /S /GoTo /D (section.16.2) >>
endobj
1076 0 obj
-(17.2 Common Errors)
+(16.2 Trust Relationship Background)
endobj
1077 0 obj
-<< /S /GoTo /D (chapter.18) >>
+<< /S /GoTo /D (section.16.3) >>
endobj
1080 0 obj
-(18 Classical Printing Support)
+(16.3 Native MS Windows NT4 Trusts Configuration)
endobj
1081 0 obj
-<< /S /GoTo /D (section.18.1) >>
+<< /S /GoTo /D (subsection.16.3.1) >>
endobj
1084 0 obj
-(18.1 Features and Benefits)
+(16.3.1 Creating an NT4 Domain Trust)
endobj
1085 0 obj
-<< /S /GoTo /D (section.18.2) >>
+<< /S /GoTo /D (subsection.16.3.2) >>
endobj
1088 0 obj
-(18.2 Technical Introduction)
+(16.3.2 Completing an NT4 Domain Trust)
endobj
1089 0 obj
-<< /S /GoTo /D (subsection.18.2.1) >>
+<< /S /GoTo /D (subsection.16.3.3) >>
endobj
1092 0 obj
-(18.2.1 What happens if you send a Job from a Client)
+(16.3.3 Inter-Domain Trust Facilities)
endobj
1093 0 obj
-<< /S /GoTo /D (subsection.18.2.2) >>
+<< /S /GoTo /D (section.16.4) >>
endobj
1096 0 obj
-(18.2.2 Printing Related Configuration Parameters)
+(16.4 Configuring Samba NT-style Domain Trusts)
endobj
1097 0 obj
-<< /S /GoTo /D (subsection.18.2.3) >>
+<< /S /GoTo /D (subsection.16.4.1) >>
endobj
1100 0 obj
-(18.2.3 Parameters Recommended for Use)
+(16.4.1 Samba as the Trusted Domain)
endobj
1101 0 obj
-<< /S /GoTo /D (subsection.18.2.4) >>
+<< /S /GoTo /D (subsection.16.4.2) >>
endobj
1104 0 obj
-(18.2.4 Parameters for Backwards Compatibility)
+(16.4.2 Samba as the Trusting Domain)
endobj
1105 0 obj
-<< /S /GoTo /D (subsection.18.2.5) >>
+<< /S /GoTo /D (section.16.5) >>
endobj
1108 0 obj
-(18.2.5 Parameters no longer in use)
+(16.5 NT4-style Domain Trusts with Windows 2000)
endobj
1109 0 obj
-<< /S /GoTo /D (section.18.3) >>
+<< /S /GoTo /D (section.16.6) >>
endobj
1112 0 obj
-(18.3 A simple Configuration to Print with Samba-3)
+(16.6 Common Errors)
endobj
1113 0 obj
-<< /S /GoTo /D (subsection.18.3.1) >>
+<< /S /GoTo /D (chapter.17) >>
endobj
1116 0 obj
-(18.3.1 Verification of "Settings in Use" with testparm)
+(17 Hosting a Microsoft Distributed File System tree on Samba)
endobj
1117 0 obj
-<< /S /GoTo /D (subsection.18.3.2) >>
+<< /S /GoTo /D (section.17.1) >>
endobj
1120 0 obj
-(18.3.2 A little Experiment to warn you)
+(17.1 Features and Benefits)
endobj
1121 0 obj
-<< /S /GoTo /D (section.18.4) >>
+<< /S /GoTo /D (section.17.2) >>
endobj
1124 0 obj
-(18.4 Extended Sample Configuration to Print with Samba-3)
+(17.2 Common Errors)
endobj
1125 0 obj
-<< /S /GoTo /D (section.18.5) >>
+<< /S /GoTo /D (chapter.18) >>
endobj
1128 0 obj
-(18.5 Detailed Explanation of the Example's Settings)
+(18 Classical Printing Support)
endobj
1129 0 obj
-<< /S /GoTo /D (subsection.18.5.1) >>
+<< /S /GoTo /D (section.18.1) >>
endobj
1132 0 obj
-(18.5.1 The [global] Section)
+(18.1 Features and Benefits)
endobj
1133 0 obj
-<< /S /GoTo /D (subsection.18.5.2) >>
+<< /S /GoTo /D (section.18.2) >>
endobj
1136 0 obj
-(18.5.2 The [printers] Section)
+(18.2 Technical Introduction)
endobj
1137 0 obj
-<< /S /GoTo /D (subsection.18.5.3) >>
+<< /S /GoTo /D (subsection.18.2.1) >>
endobj
1140 0 obj
-(18.5.3 Any [my\137printer\137name] Section)
+(18.2.1 What happens if you send a Job from a Client)
endobj
1141 0 obj
-<< /S /GoTo /D (subsection.18.5.4) >>
+<< /S /GoTo /D (subsection.18.2.2) >>
endobj
1144 0 obj
-(18.5.4 Print Commands)
+(18.2.2 Printing Related Configuration Parameters)
endobj
1145 0 obj
-<< /S /GoTo /D (subsection.18.5.5) >>
+<< /S /GoTo /D (subsection.18.2.3) >>
endobj
1148 0 obj
-(18.5.5 Default Print Commands for various Unix Print Subsystems)
+(18.2.3 Parameters Recommended for Use)
endobj
1149 0 obj
-<< /S /GoTo /D (subsection.18.5.6) >>
+<< /S /GoTo /D (section.18.3) >>
endobj
1152 0 obj
-(18.5.6 Setting up your own Print Commands)
+(18.3 A simple Configuration to Print)
endobj
1153 0 obj
-<< /S /GoTo /D (section.18.6) >>
+<< /S /GoTo /D (subsection.18.3.1) >>
endobj
1156 0 obj
-(18.6 Innovations in Samba Printing since 2.2)
+(18.3.1 Verification of "Settings in Use" with testparm)
endobj
1157 0 obj
-<< /S /GoTo /D (subsection.18.6.1) >>
+<< /S /GoTo /D (subsection.18.3.2) >>
endobj
1160 0 obj
-(18.6.1 Client Drivers on Samba Server for Point'n'Print)
+(18.3.2 A little Experiment to warn you)
endobj
1161 0 obj
-<< /S /GoTo /D (subsection.18.6.2) >>
+<< /S /GoTo /D (section.18.4) >>
endobj
1164 0 obj
-(18.6.2 The [printer\044] Section is removed from Samba-3)
+(18.4 Extended Sample Configuration to Print)
endobj
1165 0 obj
-<< /S /GoTo /D (subsection.18.6.3) >>
+<< /S /GoTo /D (section.18.5) >>
endobj
1168 0 obj
-(18.6.3 Creating the [print\044] Share)
+(18.5 Detailed Explanation of the Example's Settings)
endobj
1169 0 obj
-<< /S /GoTo /D (subsection.18.6.4) >>
+<< /S /GoTo /D (subsection.18.5.1) >>
endobj
1172 0 obj
-(18.6.4 Parameters in the [print\044] Section)
+(18.5.1 The [global] Section)
endobj
1173 0 obj
-<< /S /GoTo /D (subsection.18.6.5) >>
+<< /S /GoTo /D (subsection.18.5.2) >>
endobj
1176 0 obj
-(18.6.5 Subdirectory Structure in [print\044])
+(18.5.2 The [printers] Section)
endobj
1177 0 obj
-<< /S /GoTo /D (section.18.7) >>
+<< /S /GoTo /D (subsection.18.5.3) >>
endobj
1180 0 obj
-(18.7 Installing Drivers into [print\044])
+(18.5.3 Any [my\137printer\137name] Section)
endobj
1181 0 obj
-<< /S /GoTo /D (subsection.18.7.1) >>
+<< /S /GoTo /D (subsection.18.5.4) >>
endobj
1184 0 obj
-(18.7.1 Setting Drivers for existing Printers with a Client GUI)
+(18.5.4 Print Commands)
endobj
1185 0 obj
-<< /S /GoTo /D (subsection.18.7.2) >>
+<< /S /GoTo /D (subsection.18.5.5) >>
endobj
1188 0 obj
-(18.7.2 Setting Drivers for existing Printers with rpcclient)
+(18.5.5 Default Print Commands for various UNIX Print Subsystems)
endobj
1189 0 obj
-<< /S /GoTo /D (subsubsection.18.7.2.1) >>
+<< /S /GoTo /D (subsection.18.5.6) >>
endobj
1192 0 obj
-(18.7.2.1 Identifying the Driver Files)
+(18.5.6 Setting up your own Print Commands)
endobj
1193 0 obj
-<< /S /GoTo /D (subsubsection.18.7.2.2) >>
+<< /S /GoTo /D (section.18.6) >>
endobj
1196 0 obj
-(18.7.2.2 Collecting the Driver Files from a Windows Host's [print\044] Share)
+(18.6 Innovations in Samba Printing since 2.2)
endobj
1197 0 obj
-<< /S /GoTo /D (subsubsection.18.7.2.3) >>
+<< /S /GoTo /D (subsection.18.6.1) >>
endobj
1200 0 obj
-(18.7.2.3 Depositing the Driver Files into [print\044])
+(18.6.1 Client Drivers on Samba Server for Point'n'Print)
endobj
1201 0 obj
-<< /S /GoTo /D (subsubsection.18.7.2.4) >>
+<< /S /GoTo /D (subsection.18.6.2) >>
endobj
1204 0 obj
-(18.7.2.4 Check if the Driver Files are there \(with smbclient\))
+(18.6.2 The [printer\044] Section is removed from Samba 3)
endobj
1205 0 obj
-<< /S /GoTo /D (subsubsection.18.7.2.5) >>
+<< /S /GoTo /D (subsection.18.6.3) >>
endobj
1208 0 obj
-(18.7.2.5 Running rpcclient with adddriver)
+(18.6.3 Creating the [print\044] Share)
endobj
1209 0 obj
-<< /S /GoTo /D (subsubsection.18.7.2.6) >>
+<< /S /GoTo /D (subsection.18.6.4) >>
endobj
1212 0 obj
-(18.7.2.6 Check how Driver Files have been moved after adddriver finished)
+(18.6.4 Parameters in the [print\044] Section)
endobj
1213 0 obj
-<< /S /GoTo /D (subsubsection.18.7.2.7) >>
+<< /S /GoTo /D (subsection.18.6.5) >>
endobj
1216 0 obj
-(18.7.2.7 Check if the Driver is recognized by Samba)
+(18.6.5 Subdirectory Structure in [print\044])
endobj
1217 0 obj
-<< /S /GoTo /D (subsubsection.18.7.2.8) >>
+<< /S /GoTo /D (section.18.7) >>
endobj
1220 0 obj
-(18.7.2.8 A side note: you are not bound to specific driver names)
+(18.7 Installing Drivers into [print\044])
endobj
1221 0 obj
-<< /S /GoTo /D (subsubsection.18.7.2.9) >>
+<< /S /GoTo /D (subsection.18.7.1) >>
endobj
1224 0 obj
-(18.7.2.9 La Grande Finale: Running rpcclient with setdriver)
+(18.7.1 Setting Drivers for existing Printers with a Client GUI)
endobj
1225 0 obj
-<< /S /GoTo /D (section.18.8) >>
+<< /S /GoTo /D (subsection.18.7.2) >>
endobj
1228 0 obj
-(18.8 "The Proof of the Pudding lies in the Eating" \(Client Driver Install Procedure\))
+(18.7.2 Setting Drivers for existing Printers with rpcclient)
endobj
1229 0 obj
-<< /S /GoTo /D (subsection.18.8.1) >>
+<< /S /GoTo /D (subsubsection.18.7.2.1) >>
endobj
1232 0 obj
-(18.8.1 The first Client Driver Installation)
+(18.7.2.1 Identifying the Driver Files)
endobj
1233 0 obj
-<< /S /GoTo /D (subsection.18.8.2) >>
+<< /S /GoTo /D (subsubsection.18.7.2.2) >>
endobj
1236 0 obj
-(18.8.2 IMPORTANT! Setting Device Modes on new Printers)
+(18.7.2.2 Collecting the Driver Files from a Windows Host's [print\044] Share)
endobj
1237 0 obj
-<< /S /GoTo /D (subsection.18.8.3) >>
+<< /S /GoTo /D (subsubsection.18.7.2.3) >>
endobj
1240 0 obj
-(18.8.3 Further Client Driver Install Procedures)
+(18.7.2.3 Depositing the Driver Files into [print\044])
endobj
1241 0 obj
-<< /S /GoTo /D (subsection.18.8.4) >>
+<< /S /GoTo /D (subsubsection.18.7.2.4) >>
endobj
1244 0 obj
-(18.8.4 Always make first Client Connection as root or "printer admin")
+(18.7.2.4 Check if the Driver Files are there \(with smbclient\))
endobj
1245 0 obj
-<< /S /GoTo /D (section.18.9) >>
+<< /S /GoTo /D (subsubsection.18.7.2.5) >>
endobj
1248 0 obj
-(18.9 Other Gotchas)
+(18.7.2.5 Running rpcclient with adddriver)
endobj
1249 0 obj
-<< /S /GoTo /D (subsection.18.9.1) >>
+<< /S /GoTo /D (subsubsection.18.7.2.6) >>
endobj
1252 0 obj
-(18.9.1 Setting Default Print Options for the Client Drivers)
+(18.7.2.6 Check how Driver Files have been moved after adddriver finished)
endobj
1253 0 obj
-<< /S /GoTo /D (subsection.18.9.2) >>
+<< /S /GoTo /D (subsubsection.18.7.2.7) >>
endobj
1256 0 obj
-(18.9.2 Supporting large Numbers of Printers)
+(18.7.2.7 Check if the Driver is recognized by Samba)
endobj
1257 0 obj
-<< /S /GoTo /D (subsection.18.9.3) >>
+<< /S /GoTo /D (subsubsection.18.7.2.8) >>
endobj
1260 0 obj
-(18.9.3 Adding new Printers with the Windows NT APW)
+(18.7.2.8 A side note: you are not bound to specific driver names)
endobj
1261 0 obj
-<< /S /GoTo /D (subsection.18.9.4) >>
+<< /S /GoTo /D (subsubsection.18.7.2.9) >>
endobj
1264 0 obj
-(18.9.4 Weird Error Message Cannot connect under a different Name)
+(18.7.2.9 Running rpcclient with setdriver)
endobj
1265 0 obj
-<< /S /GoTo /D (subsection.18.9.5) >>
+<< /S /GoTo /D (section.18.8) >>
endobj
1268 0 obj
-(18.9.5 Be careful when assembling Driver Files)
+(18.8 Client Driver Install Procedure)
endobj
1269 0 obj
-<< /S /GoTo /D (subsection.18.9.6) >>
+<< /S /GoTo /D (subsection.18.8.1) >>
endobj
1272 0 obj
-(18.9.6 Samba and Printer Ports)
+(18.8.1 The first Client Driver Installation)
endobj
1273 0 obj
-<< /S /GoTo /D (subsection.18.9.7) >>
+<< /S /GoTo /D (subsection.18.8.2) >>
endobj
1276 0 obj
-(18.9.7 Avoiding the most common Misconfigurations of the Client Driver)
+(18.8.2 IMPORTANT! Setting Device Modes on new Printers)
endobj
1277 0 obj
-<< /S /GoTo /D (section.18.10) >>
+<< /S /GoTo /D (subsection.18.8.3) >>
endobj
1280 0 obj
-(18.10 The Imprints Toolset)
+(18.8.3 Further Client Driver Install Procedures)
endobj
1281 0 obj
-<< /S /GoTo /D (subsection.18.10.1) >>
+<< /S /GoTo /D (subsection.18.8.4) >>
endobj
1284 0 obj
-(18.10.1 What is Imprints?)
+(18.8.4 Always make first Client Connection as root or "printer admin")
endobj
1285 0 obj
-<< /S /GoTo /D (subsection.18.10.2) >>
+<< /S /GoTo /D (section.18.9) >>
endobj
1288 0 obj
-(18.10.2 Creating Printer Driver Packages)
+(18.9 Other Gotchas)
endobj
1289 0 obj
-<< /S /GoTo /D (subsection.18.10.3) >>
+<< /S /GoTo /D (subsection.18.9.1) >>
endobj
1292 0 obj
-(18.10.3 The Imprints Server)
+(18.9.1 Setting Default Print Options for the Client Drivers)
endobj
1293 0 obj
-<< /S /GoTo /D (subsection.18.10.4) >>
+<< /S /GoTo /D (subsection.18.9.2) >>
endobj
1296 0 obj
-(18.10.4 The Installation Client)
+(18.9.2 Supporting large Numbers of Printers)
endobj
1297 0 obj
-<< /S /GoTo /D (section.18.11) >>
+<< /S /GoTo /D (subsection.18.9.3) >>
endobj
1300 0 obj
-(18.11 Add Network Printers at Logon without User Interaction)
+(18.9.3 Adding new Printers with the Windows NT APW)
endobj
1301 0 obj
-<< /S /GoTo /D (section.18.12) >>
+<< /S /GoTo /D (subsection.18.9.4) >>
endobj
1304 0 obj
-(18.12 The addprinter command)
+(18.9.4 Weird Error Message Cannot connect under a different Name)
endobj
1305 0 obj
-<< /S /GoTo /D (section.18.13) >>
+<< /S /GoTo /D (subsection.18.9.5) >>
endobj
1308 0 obj
-(18.13 Migration of "Classical" printing to Samba-3)
+(18.9.5 Be careful when assembling Driver Files)
endobj
1309 0 obj
-<< /S /GoTo /D (section.18.14) >>
+<< /S /GoTo /D (subsection.18.9.6) >>
endobj
1312 0 obj
-(18.14 Publishing Printer Information in Active Directory or LDAP)
+(18.9.6 Samba and Printer Ports)
endobj
1313 0 obj
-<< /S /GoTo /D (section.18.15) >>
+<< /S /GoTo /D (subsection.18.9.7) >>
endobj
1316 0 obj
-(18.15 Common Errors and Problems)
+(18.9.7 Avoiding the most common Misconfigurations of the Client Driver)
endobj
1317 0 obj
-<< /S /GoTo /D (subsection.18.15.1) >>
+<< /S /GoTo /D (section.18.10) >>
endobj
1320 0 obj
-(18.15.1 I give my root password but I don't get access)
+(18.10 The Imprints Toolset)
endobj
1321 0 obj
-<< /S /GoTo /D (subsection.18.15.2) >>
+<< /S /GoTo /D (subsection.18.10.1) >>
endobj
1324 0 obj
-(18.15.2 My printjobs get spooled into the spooling directory, but then get lost)
+(18.10.1 What is Imprints?)
endobj
1325 0 obj
-<< /S /GoTo /D (chapter.19) >>
+<< /S /GoTo /D (subsection.18.10.2) >>
endobj
1328 0 obj
-(19 CUPS Printing Support in Samba 3.0)
+(18.10.2 Creating Printer Driver Packages)
endobj
1329 0 obj
-<< /S /GoTo /D (section.19.1) >>
+<< /S /GoTo /D (subsection.18.10.3) >>
endobj
1332 0 obj
-(19.1 Introduction)
+(18.10.3 The Imprints Server)
endobj
1333 0 obj
-<< /S /GoTo /D (subsection.19.1.1) >>
+<< /S /GoTo /D (subsection.18.10.4) >>
endobj
1336 0 obj
-(19.1.1 Features and Benefits)
+(18.10.4 The Installation Client)
endobj
1337 0 obj
-<< /S /GoTo /D (subsection.19.1.2) >>
+<< /S /GoTo /D (section.18.11) >>
endobj
1340 0 obj
-(19.1.2 Overview)
+(18.11 Add Network Printers at Logon without User Interaction)
endobj
1341 0 obj
-<< /S /GoTo /D (section.19.2) >>
+<< /S /GoTo /D (section.18.12) >>
endobj
1344 0 obj
-(19.2 Basic Configuration of CUPS support)
+(18.12 The addprinter command)
endobj
1345 0 obj
-<< /S /GoTo /D (subsection.19.2.1) >>
+<< /S /GoTo /D (section.18.13) >>
endobj
1348 0 obj
-(19.2.1 Linking of smbd with libcups.so)
+(18.13 Migration of "Classical" printing to Samba)
endobj
1349 0 obj
-<< /S /GoTo /D (subsection.19.2.2) >>
+<< /S /GoTo /D (section.18.14) >>
endobj
1352 0 obj
-(19.2.2 Simple smb.conf Settings for CUPS)
+(18.14 Publishing Printer Information in Active Directory or LDAP)
endobj
1353 0 obj
-<< /S /GoTo /D (subsection.19.2.3) >>
+<< /S /GoTo /D (section.18.15) >>
endobj
1356 0 obj
-(19.2.3 More complex smb.conf Settings for CUPS)
+(18.15 Common Errors)
endobj
1357 0 obj
-<< /S /GoTo /D (section.19.3) >>
+<< /S /GoTo /D (subsection.18.15.1) >>
endobj
1360 0 obj
-(19.3 Advanced Configuration)
+(18.15.1 I give my root password but I don't get access)
endobj
1361 0 obj
-<< /S /GoTo /D (subsection.19.3.1) >>
+<< /S /GoTo /D (subsection.18.15.2) >>
endobj
1364 0 obj
-(19.3.1 Central spooling vs. "Peer-to-Peer" printing)
+(18.15.2 My printjobs get spooled into the spooling directory, but then get lost)
endobj
1365 0 obj
-<< /S /GoTo /D (subsection.19.3.2) >>
+<< /S /GoTo /D (chapter.19) >>
endobj
1368 0 obj
-(19.3.2 CUPS/Samba as a "spooling-only" Print Server; "raw" printing with Vendor Drivers on Windows Clients)
+(19 CUPS Printing Support in Samba 3.0)
endobj
1369 0 obj
-<< /S /GoTo /D (subsection.19.3.3) >>
+<< /S /GoTo /D (section.19.1) >>
endobj
1372 0 obj
-(19.3.3 Driver Installation Methods on Windows Clients)
+(19.1 Introduction)
endobj
1373 0 obj
-<< /S /GoTo /D (subsection.19.3.4) >>
+<< /S /GoTo /D (subsection.19.1.1) >>
endobj
1376 0 obj
-(19.3.4 Explicitly enable "raw" printing for application/octet-stream!)
+(19.1.1 Features and Benefits)
endobj
1377 0 obj
-<< /S /GoTo /D (subsection.19.3.5) >>
+<< /S /GoTo /D (subsection.19.1.2) >>
endobj
1380 0 obj
-(19.3.5 Three familiar Methods for driver upload plus a new one)
+(19.1.2 Overview)
endobj
1381 0 obj
-<< /S /GoTo /D (section.19.4) >>
+<< /S /GoTo /D (section.19.2) >>
endobj
1384 0 obj
-(19.4 Using CUPS/Samba in an advanced Way -- intelligent printing with PostScript Driver Download)
+(19.2 Basic Configuration of CUPS support)
endobj
1385 0 obj
-<< /S /GoTo /D (subsection.19.4.1) >>
+<< /S /GoTo /D (subsection.19.2.1) >>
endobj
1388 0 obj
-(19.4.1 GDI on Windows -- PostScript on Unix)
+(19.2.1 Linking of smbd with libcups.so)
endobj
1389 0 obj
-<< /S /GoTo /D (subsection.19.4.2) >>
+<< /S /GoTo /D (subsection.19.2.2) >>
endobj
1392 0 obj
-(19.4.2 Windows Drivers, GDI and EMF)
+(19.2.2 Simple smb.conf Settings for CUPS)
endobj
1393 0 obj
-<< /S /GoTo /D (subsection.19.4.3) >>
+<< /S /GoTo /D (subsection.19.2.3) >>
endobj
1396 0 obj
-(19.4.3 Unix Printfile Conversion and GUI Basics)
+(19.2.3 More complex smb.conf Settings for CUPS)
endobj
1397 0 obj
-<< /S /GoTo /D (subsection.19.4.4) >>
+<< /S /GoTo /D (section.19.3) >>
endobj
1400 0 obj
-(19.4.4 PostScript and Ghostscript)
+(19.3 Advanced Configuration)
endobj
1401 0 obj
-<< /S /GoTo /D (subsection.19.4.5) >>
+<< /S /GoTo /D (subsection.19.3.1) >>
endobj
1404 0 obj
-(19.4.5 Ghostscript -- the Software RIP for non-PostScript Printers)
+(19.3.1 Central spooling vs. "Peer-to-Peer" printing)
endobj
1405 0 obj
-<< /S /GoTo /D (subsection.19.4.6) >>
+<< /S /GoTo /D (subsection.19.3.2) >>
endobj
1408 0 obj
-(19.4.6 PostScript Printer Description \(PPD\) Specification)
+(19.3.2 CUPS/Samba as a "spooling-only" Print Server; "raw" printing with Vendor Drivers on Windows Clients)
endobj
1409 0 obj
-<< /S /GoTo /D (subsection.19.4.7) >>
+<< /S /GoTo /D (subsection.19.3.3) >>
endobj
1412 0 obj
-(19.4.7 CUPS can use all Windows-formatted Vendor PPDs)
+(19.3.3 Driver Installation Methods on Windows Clients)
endobj
1413 0 obj
-<< /S /GoTo /D (subsection.19.4.8) >>
+<< /S /GoTo /D (subsection.19.3.4) >>
endobj
1416 0 obj
-(19.4.8 CUPS also uses PPDs for non-PostScript Printers)
+(19.3.4 Explicitly enable "raw" printing for application/octet-stream!)
endobj
1417 0 obj
-<< /S /GoTo /D (section.19.5) >>
+<< /S /GoTo /D (subsection.19.3.5) >>
endobj
1420 0 obj
-(19.5 The CUPS Filtering Architecture)
+(19.3.5 Three familiar Methods for driver upload plus a new one)
endobj
1421 0 obj
-<< /S /GoTo /D (subsection.19.5.1) >>
+<< /S /GoTo /D (section.19.4) >>
endobj
1424 0 obj
-(19.5.1 MIME types and CUPS Filters)
+(19.4 Using CUPS/Samba in an advanced Way -- intelligent printing with PostScript Driver Download)
endobj
1425 0 obj
-<< /S /GoTo /D (subsection.19.5.2) >>
+<< /S /GoTo /D (subsection.19.4.1) >>
endobj
1428 0 obj
-(19.5.2 MIME type Conversion Rules)
+(19.4.1 GDI on Windows -- PostScript on UNIX)
endobj
1429 0 obj
-<< /S /GoTo /D (subsection.19.5.3) >>
+<< /S /GoTo /D (subsection.19.4.2) >>
endobj
1432 0 obj
-(19.5.3 Filter Requirements)
+(19.4.2 Windows Drivers, GDI and EMF)
endobj
1433 0 obj
-<< /S /GoTo /D (subsection.19.5.4) >>
+<< /S /GoTo /D (subsection.19.4.3) >>
endobj
1436 0 obj
-(19.5.4 Prefilters)
+(19.4.3 UNIX Printfile Conversion and GUI Basics)
endobj
1437 0 obj
-<< /S /GoTo /D (subsection.19.5.5) >>
+<< /S /GoTo /D (subsection.19.4.4) >>
endobj
1440 0 obj
-(19.5.5 pstops)
+(19.4.4 PostScript and Ghostscript)
endobj
1441 0 obj
-<< /S /GoTo /D (subsection.19.5.6) >>
+<< /S /GoTo /D (subsection.19.4.5) >>
endobj
1444 0 obj
-(19.5.6 pstoraster)
+(19.4.5 Ghostscript -- the Software RIP for non-PostScript Printers)
endobj
1445 0 obj
-<< /S /GoTo /D (subsection.19.5.7) >>
+<< /S /GoTo /D (subsection.19.4.6) >>
endobj
1448 0 obj
-(19.5.7 imagetops and imagetoraster)
+(19.4.6 PostScript Printer Description \(PPD\) Specification)
endobj
1449 0 obj
-<< /S /GoTo /D (subsection.19.5.8) >>
+<< /S /GoTo /D (subsection.19.4.7) >>
endobj
1452 0 obj
-(19.5.8 rasterto [printers specific])
+(19.4.7 CUPS can use all Windows-formatted Vendor PPDs)
endobj
1453 0 obj
-<< /S /GoTo /D (subsection.19.5.9) >>
+<< /S /GoTo /D (subsection.19.4.8) >>
endobj
1456 0 obj
-(19.5.9 CUPS Backends)
+(19.4.8 CUPS also uses PPDs for non-PostScript Printers)
endobj
1457 0 obj
-<< /S /GoTo /D (subsection.19.5.10) >>
+<< /S /GoTo /D (section.19.5) >>
endobj
1460 0 obj
-(19.5.10 cupsomatic/Foomatic -- how do they fit into the Picture?)
+(19.5 The CUPS Filtering Architecture)
endobj
1461 0 obj
-<< /S /GoTo /D (subsection.19.5.11) >>
+<< /S /GoTo /D (subsection.19.5.1) >>
endobj
1464 0 obj
-(19.5.11 The Complete Picture)
+(19.5.1 MIME types and CUPS Filters)
endobj
1465 0 obj
-<< /S /GoTo /D (subsection.19.5.12) >>
+<< /S /GoTo /D (subsection.19.5.2) >>
endobj
1468 0 obj
-(19.5.12 mime.convs)
+(19.5.2 MIME type Conversion Rules)
endobj
1469 0 obj
-<< /S /GoTo /D (subsection.19.5.13) >>
+<< /S /GoTo /D (subsection.19.5.3) >>
endobj
1472 0 obj
-(19.5.13 "Raw" printing)
+(19.5.3 Filter Requirements)
endobj
1473 0 obj
-<< /S /GoTo /D (subsection.19.5.14) >>
+<< /S /GoTo /D (subsection.19.5.4) >>
endobj
1476 0 obj
-(19.5.14 "application/octet-stream" printing)
+(19.5.4 Prefilters)
endobj
1477 0 obj
-<< /S /GoTo /D (subsection.19.5.15) >>
+<< /S /GoTo /D (subsection.19.5.5) >>
endobj
1480 0 obj
-(19.5.15 PostScript Printer Descriptions \(PPDs\) for non-PS Printers)
+(19.5.5 pstops)
endobj
1481 0 obj
-<< /S /GoTo /D (subsection.19.5.16) >>
+<< /S /GoTo /D (subsection.19.5.6) >>
endobj
1484 0 obj
-(19.5.16 Difference between cupsomatic/foomatic-rip and native CUPS printing)
+(19.5.6 pstoraster)
endobj
1485 0 obj
-<< /S /GoTo /D (subsection.19.5.17) >>
+<< /S /GoTo /D (subsection.19.5.7) >>
endobj
1488 0 obj
-(19.5.17 Examples for filtering Chains)
+(19.5.7 imagetops and imagetoraster)
endobj
1489 0 obj
-<< /S /GoTo /D (subsection.19.5.18) >>
+<< /S /GoTo /D (subsection.19.5.8) >>
endobj
1492 0 obj
-(19.5.18 Sources of CUPS drivers / PPDs)
+(19.5.8 rasterto [printers specific])
endobj
1493 0 obj
-<< /S /GoTo /D (subsection.19.5.19) >>
+<< /S /GoTo /D (subsection.19.5.9) >>
endobj
1496 0 obj
-(19.5.19 Printing with Interface Scripts)
+(19.5.9 CUPS Backends)
endobj
1497 0 obj
-<< /S /GoTo /D (section.19.6) >>
+<< /S /GoTo /D (subsection.19.5.10) >>
endobj
1500 0 obj
-(19.6 Network printing \(purely Windows\))
+(19.5.10 cupsomatic/Foomatic -- how do they fit into the Picture?)
endobj
1501 0 obj
-<< /S /GoTo /D (subsection.19.6.1) >>
+<< /S /GoTo /D (subsection.19.5.11) >>
endobj
1504 0 obj
-(19.6.1 From Windows Clients to an NT Print Server)
+(19.5.11 The Complete Picture)
endobj
1505 0 obj
-<< /S /GoTo /D (subsection.19.6.2) >>
+<< /S /GoTo /D (subsection.19.5.12) >>
endobj
1508 0 obj
-(19.6.2 Driver Execution on the Client)
+(19.5.12 mime.convs)
endobj
1509 0 obj
-<< /S /GoTo /D (subsection.19.6.3) >>
+<< /S /GoTo /D (subsection.19.5.13) >>
endobj
1512 0 obj
-(19.6.3 Driver Execution on the Server)
+(19.5.13 "Raw" printing)
endobj
1513 0 obj
-<< /S /GoTo /D (section.19.7) >>
+<< /S /GoTo /D (subsection.19.5.14) >>
endobj
1516 0 obj
-(19.7 Network Printing \(Windows clients -- UNIX/Samba Print Servers\))
+(19.5.14 "application/octet-stream" printing)
endobj
1517 0 obj
-<< /S /GoTo /D (subsection.19.7.1) >>
+<< /S /GoTo /D (subsection.19.5.15) >>
endobj
1520 0 obj
-(19.7.1 From Windows Clients to a CUPS/Samba Print Server)
+(19.5.15 PostScript Printer Descriptions \(PPDs\) for non-PS Printers)
endobj
1521 0 obj
-<< /S /GoTo /D (subsection.19.7.2) >>
+<< /S /GoTo /D (subsection.19.5.16) >>
endobj
1524 0 obj
-(19.7.2 Samba receiving Jobfiles and passing them to CUPS)
+(19.5.16 Difference between cupsomatic/foomatic-rip and native CUPS printing)
endobj
1525 0 obj
-<< /S /GoTo /D (section.19.8) >>
+<< /S /GoTo /D (subsection.19.5.17) >>
endobj
1528 0 obj
-(19.8 Network PostScript RIP: CUPS Filters on Server -- clients use PostScript Driver with CUPS-PPDs)
+(19.5.17 Examples for filtering Chains)
endobj
1529 0 obj
-<< /S /GoTo /D (subsection.19.8.1) >>
+<< /S /GoTo /D (subsection.19.5.18) >>
endobj
1532 0 obj
-(19.8.1 PPDs for non-PS Printers on UNIX)
+(19.5.18 Sources of CUPS drivers / PPDs)
endobj
1533 0 obj
-<< /S /GoTo /D (subsection.19.8.2) >>
+<< /S /GoTo /D (subsection.19.5.19) >>
endobj
1536 0 obj
-(19.8.2 PPDs for non-PS Printers on Windows)
+(19.5.19 Printing with Interface Scripts)
endobj
1537 0 obj
-<< /S /GoTo /D (section.19.9) >>
+<< /S /GoTo /D (section.19.6) >>
endobj
1540 0 obj
-(19.9 Windows Terminal Servers \(WTS\) as CUPS Clients)
+(19.6 Network printing \(purely Windows\))
endobj
1541 0 obj
-<< /S /GoTo /D (subsection.19.9.1) >>
+<< /S /GoTo /D (subsection.19.6.1) >>
endobj
1544 0 obj
-(19.9.1 Printer Drivers running in "Kernel Mode" cause many Problems)
+(19.6.1 From Windows Clients to an NT Print Server)
endobj
1545 0 obj
-<< /S /GoTo /D (subsection.19.9.2) >>
+<< /S /GoTo /D (subsection.19.6.2) >>
endobj
1548 0 obj
-(19.9.2 Workarounds impose Heavy Limitations)
+(19.6.2 Driver Execution on the Client)
endobj
1549 0 obj
-<< /S /GoTo /D (subsection.19.9.3) >>
+<< /S /GoTo /D (subsection.19.6.3) >>
endobj
1552 0 obj
-(19.9.3 CUPS: a "Magical Stone"?)
+(19.6.3 Driver Execution on the Server)
endobj
1553 0 obj
-<< /S /GoTo /D (subsection.19.9.4) >>
+<< /S /GoTo /D (section.19.7) >>
endobj
1556 0 obj
-(19.9.4 PostScript Drivers with no major problems -- even in Kernel Mode)
+(19.7 Network Printing \(Windows clients -- UNIX/Samba Print Servers\))
endobj
1557 0 obj
-<< /S /GoTo /D (section.19.10) >>
+<< /S /GoTo /D (subsection.19.7.1) >>
endobj
1560 0 obj
-(19.10 Setting up CUPS for driver Download)
+(19.7.1 From Windows Clients to a CUPS/Samba Print Server)
endobj
1561 0 obj
-<< /S /GoTo /D (subsection.19.10.1) >>
+<< /S /GoTo /D (subsection.19.7.2) >>
endobj
1564 0 obj
-(19.10.1 cupsaddsmb: the unknown Utility)
+(19.7.2 Samba receiving Jobfiles and passing them to CUPS)
endobj
1565 0 obj
-<< /S /GoTo /D (subsection.19.10.2) >>
+<< /S /GoTo /D (section.19.8) >>
endobj
1568 0 obj
-(19.10.2 Prepare your smb.conf for cupsaddsmb)
+(19.8 Network PostScript RIP: CUPS Filters on Server -- clients use PostScript Driver with CUPS-PPDs)
endobj
1569 0 obj
-<< /S /GoTo /D (subsection.19.10.3) >>
+<< /S /GoTo /D (subsection.19.8.1) >>
endobj
1572 0 obj
-(19.10.3 CUPS Package of "PostScript Driver for WinNT/2k/XP")
+(19.8.1 PPDs for non-PS Printers on UNIX)
endobj
1573 0 obj
-<< /S /GoTo /D (subsection.19.10.4) >>
+<< /S /GoTo /D (subsection.19.8.2) >>
endobj
1576 0 obj
-(19.10.4 Recognize the different Driver Files)
+(19.8.2 PPDs for non-PS Printers on Windows)
endobj
1577 0 obj
-<< /S /GoTo /D (subsection.19.10.5) >>
+<< /S /GoTo /D (section.19.9) >>
endobj
1580 0 obj
-(19.10.5 Acquiring the Adobe Driver Files)
+(19.9 Windows Terminal Servers \(WTS\) as CUPS Clients)
endobj
1581 0 obj
-<< /S /GoTo /D (subsection.19.10.6) >>
+<< /S /GoTo /D (subsection.19.9.1) >>
endobj
1584 0 obj
-(19.10.6 ESP Print Pro Package of "PostScript Driver for WinNT/2k/XP")
+(19.9.1 Printer Drivers running in "Kernel Mode" cause many Problems)
endobj
1585 0 obj
-<< /S /GoTo /D (subsection.19.10.7) >>
+<< /S /GoTo /D (subsection.19.9.2) >>
endobj
1588 0 obj
-(19.10.7 Caveats to be considered)
+(19.9.2 Workarounds impose Heavy Limitations)
endobj
1589 0 obj
-<< /S /GoTo /D (subsection.19.10.8) >>
+<< /S /GoTo /D (subsection.19.9.3) >>
endobj
1592 0 obj
-(19.10.8 What are the Benefits of using the "CUPS PostScript Driver for Windows NT/2k/XP" as compared to the Adobe Driver?)
+(19.9.3 CUPS: a "Magical Stone"?)
endobj
1593 0 obj
-<< /S /GoTo /D (subsection.19.10.9) >>
+<< /S /GoTo /D (subsection.19.9.4) >>
endobj
1596 0 obj
-(19.10.9 Run "cupsaddsmb" \(quiet Mode\))
+(19.9.4 PostScript Drivers with no major problems -- even in Kernel Mode)
endobj
1597 0 obj
-<< /S /GoTo /D (subsection.19.10.10) >>
+<< /S /GoTo /D (section.19.10) >>
endobj
1600 0 obj
-(19.10.10 Run "cupsaddsmb" with verbose Output)
+(19.10 Setting up CUPS for driver Download)
endobj
1601 0 obj
-<< /S /GoTo /D (subsection.19.10.11) >>
+<< /S /GoTo /D (subsection.19.10.1) >>
endobj
1604 0 obj
-(19.10.11 Understanding cupsaddsmb)
+(19.10.1 cupsaddsmb: the unknown Utility)
endobj
1605 0 obj
-<< /S /GoTo /D (subsection.19.10.12) >>
+<< /S /GoTo /D (subsection.19.10.2) >>
endobj
1608 0 obj
-(19.10.12 How to recognize if cupsaddsm completed successfully)
+(19.10.2 Prepare your smb.conf for cupsaddsmb)
endobj
1609 0 obj
-<< /S /GoTo /D (subsection.19.10.13) >>
+<< /S /GoTo /D (subsection.19.10.3) >>
endobj
1612 0 obj
-(19.10.13 cupsaddsmb with a Samba PDC)
+(19.10.3 CUPS Package of "PostScript Driver for WinNT/2k/XP")
endobj
1613 0 obj
-<< /S /GoTo /D (subsection.19.10.14) >>
+<< /S /GoTo /D (subsection.19.10.4) >>
endobj
1616 0 obj
-(19.10.14 cupsaddsmb Flowchart)
+(19.10.4 Recognize the different Driver Files)
endobj
1617 0 obj
-<< /S /GoTo /D (subsection.19.10.15) >>
+<< /S /GoTo /D (subsection.19.10.5) >>
endobj
1620 0 obj
-(19.10.15 Installing the PostScript Driver on a Client)
+(19.10.5 Acquiring the Adobe Driver Files)
endobj
1621 0 obj
-<< /S /GoTo /D (subsection.19.10.16) >>
+<< /S /GoTo /D (subsection.19.10.6) >>
endobj
1624 0 obj
-(19.10.16 Avoiding critical PostScript Driver Settings on the Client)
+(19.10.6 ESP Print Pro Package of "PostScript Driver for WinNT/2k/XP")
endobj
1625 0 obj
-<< /S /GoTo /D (section.19.11) >>
+<< /S /GoTo /D (subsection.19.10.7) >>
endobj
1628 0 obj
-(19.11 Installing PostScript Driver Files manually \(using rpcclient\))
+(19.10.7 Caveats to be considered)
endobj
1629 0 obj
-<< /S /GoTo /D (subsection.19.11.1) >>
+<< /S /GoTo /D (subsection.19.10.8) >>
endobj
1632 0 obj
-(19.11.1 A Check of the rpcclient man Page)
+(19.10.8 Benefits of using "CUPS PostScript Driver for Windows NT/2k/XP" instead of Adobe Driver)
endobj
1633 0 obj
-<< /S /GoTo /D (subsection.19.11.2) >>
+<< /S /GoTo /D (subsection.19.10.9) >>
endobj
1636 0 obj
-(19.11.2 Understanding the rpcclient man Page)
+(19.10.9 Run "cupsaddsmb" \(quiet Mode\))
endobj
1637 0 obj
-<< /S /GoTo /D (subsection.19.11.3) >>
+<< /S /GoTo /D (subsection.19.10.10) >>
endobj
1640 0 obj
-(19.11.3 Producing an Example by querying a Windows Box)
+(19.10.10 Run "cupsaddsmb" with verbose Output)
endobj
1641 0 obj
-<< /S /GoTo /D (subsection.19.11.4) >>
+<< /S /GoTo /D (subsection.19.10.11) >>
endobj
1644 0 obj
-(19.11.4 What is required for adddriver and setdriver to succeed)
+(19.10.11 Understanding cupsaddsmb)
endobj
1645 0 obj
-<< /S /GoTo /D (subsection.19.11.5) >>
+<< /S /GoTo /D (subsection.19.10.12) >>
endobj
1648 0 obj
-(19.11.5 Manual Commandline Driver Installation in 15 little Steps)
+(19.10.12 How to recognize if cupsaddsmb completed successfully)
endobj
1649 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.1) >>
+<< /S /GoTo /D (subsection.19.10.13) >>
endobj
1652 0 obj
-(19.11.5.1 First Step: Install the Printer on CUPS)
+(19.10.13 cupsaddsmb with a Samba PDC)
endobj
1653 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.2) >>
+<< /S /GoTo /D (subsection.19.10.14) >>
endobj
1656 0 obj
-(19.11.5.2 Second Step \(optional\): Check if the Printer is recognized by Samba)
+(19.10.14 cupsaddsmb Flowchart)
endobj
1657 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.3) >>
+<< /S /GoTo /D (subsection.19.10.15) >>
endobj
1660 0 obj
-(19.11.5.3 Third Step \(optional\): Check if Samba knows a Driver for the Printer)
+(19.10.15 Installing the PostScript Driver on a Client)
endobj
1661 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.4) >>
+<< /S /GoTo /D (subsection.19.10.16) >>
endobj
1664 0 obj
-(19.11.5.4 Fourth Step: Put all required Driver Files into Samba's [print\044])
+(19.10.16 Avoiding critical PostScript Driver Settings on the Client)
endobj
1665 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.5) >>
+<< /S /GoTo /D (section.19.11) >>
endobj
1668 0 obj
-(19.11.5.5 Fifth Step: Verify where the Driver Files are now)
+(19.11 Installing PostScript Driver Files manually \(using rpcclient\))
endobj
1669 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.6) >>
+<< /S /GoTo /D (subsection.19.11.1) >>
endobj
1672 0 obj
-(19.11.5.6 Sixth Step: Tell Samba that these are Driver Files \(adddriver\))
+(19.11.1 A Check of the rpcclient man Page)
endobj
1673 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.7) >>
+<< /S /GoTo /D (subsection.19.11.2) >>
endobj
1676 0 obj
-(19.11.5.7 Seventh Step: Verify where the Driver Files are now)
+(19.11.2 Understanding the rpcclient man page)
endobj
1677 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.8) >>
+<< /S /GoTo /D (subsection.19.11.3) >>
endobj
1680 0 obj
-(19.11.5.8 Eighth Step \(optional\): Verify if Samba now recognizes the Driver)
+(19.11.3 Producing an Example by querying a Windows Box)
endobj
1681 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.9) >>
+<< /S /GoTo /D (subsection.19.11.4) >>
endobj
1684 0 obj
-(19.11.5.9 Ninth Step: Tell Samba which Printer should use these Driver Files \(setdriver\))
+(19.11.4 What is required for adddriver and setdriver to succeed)
endobj
1685 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.10) >>
+<< /S /GoTo /D (subsection.19.11.5) >>
endobj
1688 0 obj
-(19.11.5.10 Tenth Step \(optional\): Verify if Samba has this Association recognized)
+(19.11.5 Manual Driver Installation in 15 Steps)
endobj
1689 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.11) >>
+<< /S /GoTo /D (subsection.19.11.6) >>
endobj
1692 0 obj
-(19.11.5.11 Eleventh Step \(optional\): Tickle the Driver into a correct Device Mode)
+(19.11.6 Troubleshooting revisited)
endobj
1693 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.12) >>
+<< /S /GoTo /D (section.19.12) >>
endobj
1696 0 obj
-(19.11.5.12 Twelfth Step: Install the Printer on a Client \("Point'n'Print"\))
+(19.12 The printing *.tdb Files)
endobj
1697 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.13) >>
+<< /S /GoTo /D (subsection.19.12.1) >>
endobj
1700 0 obj
-(19.11.5.13 Thirteenth Step \(optional\): Print a Test Page)
+(19.12.1 Trivial DataBase Files)
endobj
1701 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.14) >>
+<< /S /GoTo /D (subsection.19.12.2) >>
endobj
1704 0 obj
-(19.11.5.14 Fourteenth Step \(recommended\): Study the Test Page)
+(19.12.2 Binary Format)
endobj
1705 0 obj
-<< /S /GoTo /D (subsubsection.19.11.5.15) >>
+<< /S /GoTo /D (subsection.19.12.3) >>
endobj
1708 0 obj
-(19.11.5.15 Fifteenth Step \(obligatory\): Enjoy. Jump. Celebrate your Success)
+(19.12.3 Losing *.tdb Files)
endobj
1709 0 obj
-<< /S /GoTo /D (subsection.19.11.6) >>
+<< /S /GoTo /D (subsection.19.12.4) >>
endobj
1712 0 obj
-(19.11.6 Troubleshooting revisited)
+(19.12.4 Using tdbbackup)
endobj
1713 0 obj
-<< /S /GoTo /D (section.19.12) >>
+<< /S /GoTo /D (section.19.13) >>
endobj
1716 0 obj
-(19.12 The printing *.tdb Files)
+(19.13 CUPS Print Drivers from Linuxprinting.org)
endobj
1717 0 obj
-<< /S /GoTo /D (subsection.19.12.1) >>
+<< /S /GoTo /D (subsection.19.13.1) >>
endobj
1720 0 obj
-(19.12.1 Trivial DataBase Files)
+(19.13.1 foomatic-rip and Foomatic explained)
endobj
1721 0 obj
-<< /S /GoTo /D (subsection.19.12.2) >>
+<< /S /GoTo /D (subsubsection.19.13.1.1) >>
endobj
1724 0 obj
-(19.12.2 Binary Format)
+(19.13.1.1 690 "perfect" Printers)
endobj
1725 0 obj
-<< /S /GoTo /D (subsection.19.12.3) >>
+<< /S /GoTo /D (subsubsection.19.13.1.2) >>
endobj
1728 0 obj
-(19.12.3 Losing *.tdb Files)
+(19.13.1.2 How the "Printing HOWTO" started it all)
endobj
1729 0 obj
-<< /S /GoTo /D (subsection.19.12.4) >>
+<< /S /GoTo /D (subsubsection.19.13.1.3) >>
endobj
1732 0 obj
-(19.12.4 Using tdbbackup)
+(19.13.1.3 Foomatic's strange Name)
endobj
1733 0 obj
-<< /S /GoTo /D (section.19.13) >>
+<< /S /GoTo /D (subsubsection.19.13.1.4) >>
endobj
1736 0 obj
-(19.13 CUPS Print Drivers from Linuxprinting.org)
+(19.13.1.4 cupsomatic, pdqomatic, lpdomatic, directomatic)
endobj
1737 0 obj
-<< /S /GoTo /D (subsection.19.13.1) >>
+<< /S /GoTo /D (subsubsection.19.13.1.5) >>
endobj
1740 0 obj
-(19.13.1 foomatic-rip and Foomatic explained)
+(19.13.1.5 The Grand Unification achieved...)
endobj
1741 0 obj
-<< /S /GoTo /D (subsubsection.19.13.1.1) >>
+<< /S /GoTo /D (subsubsection.19.13.1.6) >>
endobj
1744 0 obj
-(19.13.1.1 690 "perfect" Printers)
+(19.13.1.6 Driver Development outside)
endobj
1745 0 obj
-<< /S /GoTo /D (subsubsection.19.13.1.2) >>
+<< /S /GoTo /D (subsubsection.19.13.1.7) >>
endobj
1748 0 obj
-(19.13.1.2 How the "Printing HOWTO" started it all)
+(19.13.1.7 Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and commercial UNIX)
endobj
1749 0 obj
-<< /S /GoTo /D (subsubsection.19.13.1.3) >>
+<< /S /GoTo /D (subsubsection.19.13.1.8) >>
endobj
1752 0 obj
-(19.13.1.3 Foomatic's strange Name)
+(19.13.1.8 Foomatic Database generated PPDs)
endobj
1753 0 obj
-<< /S /GoTo /D (subsubsection.19.13.1.4) >>
+<< /S /GoTo /D (subsection.19.13.2) >>
endobj
1756 0 obj
-(19.13.1.4 cupsomatic, pdqomatic, lpdomatic, directomatic)
+(19.13.2 foomatic-rip and Foomatic-PPD Download and Installation)
endobj
1757 0 obj
-<< /S /GoTo /D (subsubsection.19.13.1.5) >>
+<< /S /GoTo /D (section.19.14) >>
endobj
1760 0 obj
-(19.13.1.5 7.13.1.5.The Grand Unification achieved...)
+(19.14 Page Accounting with CUPS)
endobj
1761 0 obj
-<< /S /GoTo /D (subsubsection.19.13.1.6) >>
+<< /S /GoTo /D (subsection.19.14.1) >>
endobj
1764 0 obj
-(19.13.1.6 Driver Development outside)
+(19.14.1 Setting up Quotas)
endobj
1765 0 obj
-<< /S /GoTo /D (subsubsection.19.13.1.7) >>
+<< /S /GoTo /D (subsection.19.14.2) >>
endobj
1768 0 obj
-(19.13.1.7 Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and commercial Unix)
+(19.14.2 Correct and incorrect Accounting)
endobj
1769 0 obj
-<< /S /GoTo /D (subsubsection.19.13.1.8) >>
+<< /S /GoTo /D (subsection.19.14.3) >>
endobj
1772 0 obj
-(19.13.1.8 Foomatic Database generated PPDs)
+(19.14.3 Adobe and CUPS PostScript Drivers for Windows Clients)
endobj
1773 0 obj
-<< /S /GoTo /D (subsection.19.13.2) >>
+<< /S /GoTo /D (subsection.19.14.4) >>
endobj
1776 0 obj
-(19.13.2 foomatic-rip and Foomatic-PPD Download and Installation)
+(19.14.4 The page\137log File Syntax)
endobj
1777 0 obj
-<< /S /GoTo /D (section.19.14) >>
+<< /S /GoTo /D (subsection.19.14.5) >>
endobj
1780 0 obj
-(19.14 Page Accounting with CUPS)
+(19.14.5 Possible Shortcomings)
endobj
1781 0 obj
-<< /S /GoTo /D (subsection.19.14.1) >>
+<< /S /GoTo /D (subsection.19.14.6) >>
endobj
1784 0 obj
-(19.14.1 Setting up Quotas)
+(19.14.6 Future Developments)
endobj
1785 0 obj
-<< /S /GoTo /D (subsection.19.14.2) >>
+<< /S /GoTo /D (subsection.19.14.7) >>
endobj
1788 0 obj
-(19.14.2 Correct and incorrect Accounting)
+(19.14.7 Other Accounting Tools)
endobj
1789 0 obj
-<< /S /GoTo /D (subsection.19.14.3) >>
+<< /S /GoTo /D (section.19.15) >>
endobj
1792 0 obj
-(19.14.3 Adobe and CUPS PostScript Drivers for Windows Clients)
+(19.15 Additional Material)
endobj
1793 0 obj
-<< /S /GoTo /D (subsection.19.14.4) >>
+<< /S /GoTo /D (section.19.16) >>
endobj
1796 0 obj
-(19.14.4 The page\137log File Syntax)
+(19.16 Auto-Deletion or Preservation of CUPS Spool Files)
endobj
1797 0 obj
-<< /S /GoTo /D (subsection.19.14.5) >>
+<< /S /GoTo /D (subsection.19.16.1) >>
endobj
1800 0 obj
-(19.14.5 Possible Shortcomings)
+(19.16.1 CUPS Configuration Settings explained)
endobj
1801 0 obj
-<< /S /GoTo /D (subsection.19.14.6) >>
+<< /S /GoTo /D (subsection.19.16.2) >>
endobj
1804 0 obj
-(19.14.6 Future Developments)
+(19.16.2 Pre-conditions)
endobj
1805 0 obj
-<< /S /GoTo /D (subsection.19.14.7) >>
+<< /S /GoTo /D (subsection.19.16.3) >>
endobj
1808 0 obj
-(19.14.7 Other Accounting Tools)
+(19.16.3 Manual Configuration)
endobj
1809 0 obj
-<< /S /GoTo /D (section.19.15) >>
+<< /S /GoTo /D (section.19.17) >>
endobj
1812 0 obj
-(19.15 Additional Material)
+(19.17 In Case of Trouble.....)
endobj
1813 0 obj
-<< /S /GoTo /D (section.19.16) >>
+<< /S /GoTo /D (section.19.18) >>
endobj
1816 0 obj
-(19.16 Auto-Deletion or Preservation of CUPS Spool Files)
+(19.18 Printing from CUPS to Windows attached Printers)
endobj
1817 0 obj
-<< /S /GoTo /D (subsection.19.16.1) >>
+<< /S /GoTo /D (section.19.19) >>
endobj
1820 0 obj
-(19.16.1 CUPS Configuration Settings explained)
+(19.19 More CUPS filtering Chains)
endobj
1821 0 obj
-<< /S /GoTo /D (subsection.19.16.2) >>
+<< /S /GoTo /D (section.19.20) >>
endobj
1824 0 obj
-(19.16.2 Pre-conditions)
+(19.20 Common Errors)
endobj
1825 0 obj
-<< /S /GoTo /D (subsection.19.16.3) >>
+<< /S /GoTo /D (subsection.19.20.1) >>
endobj
1828 0 obj
-(19.16.3 Manual Configuration)
+(19.20.1 Win9x client can't install driver)
endobj
1829 0 obj
-<< /S /GoTo /D (section.19.17) >>
+<< /S /GoTo /D (subsection.19.20.2) >>
endobj
1832 0 obj
-(19.17 When not to use Samba to print to CUPS)
+(19.20.2 "cupsaddsmb" keeps asking for root password in neverending loop)
endobj
1833 0 obj
-<< /S /GoTo /D (section.19.18) >>
+<< /S /GoTo /D (subsection.19.20.3) >>
endobj
1836 0 obj
-(19.18 In Case of Trouble.....)
+(19.20.3 "cupsaddsmb" gives "No PPD file for printer..." message while PPD file is present)
endobj
1837 0 obj
-<< /S /GoTo /D (subsection.19.18.1) >>
+<< /S /GoTo /D (subsection.19.20.4) >>
endobj
1840 0 obj
-(19.18.1 Where to find Documentation)
+(19.20.4 Client can't connect to Samba printer)
endobj
1841 0 obj
-<< /S /GoTo /D (subsection.19.18.2) >>
+<< /S /GoTo /D (subsection.19.20.5) >>
endobj
1844 0 obj
-(19.18.2 How to ask for Help)
+(19.20.5 Can't reconnect to Samba under new account from Win2K/XP)
endobj
1845 0 obj
-<< /S /GoTo /D (subsection.19.18.3) >>
+<< /S /GoTo /D (subsection.19.20.6) >>
endobj
1848 0 obj
-(19.18.3 Where to find Help)
+(19.20.6 Avoid being connected to the Samba server as the "wrong" user)
endobj
1849 0 obj
-<< /S /GoTo /D (section.19.19) >>
+<< /S /GoTo /D (subsection.19.20.7) >>
endobj
1852 0 obj
-(19.19 Appendix)
+(19.20.7 Upgrading to CUPS drivers from Adobe drivers on NT/2K/XP clients gives problems)
endobj
1853 0 obj
-<< /S /GoTo /D (subsection.19.19.1) >>
+<< /S /GoTo /D (subsection.19.20.8) >>
endobj
1856 0 obj
-(19.19.1 Printing from CUPS to Windows attached Printers)
+(19.20.8 Can't use "cupsaddsmb" on Samba server which is a PDC)
endobj
1857 0 obj
-<< /S /GoTo /D (subsection.19.19.2) >>
+<< /S /GoTo /D (subsection.19.20.9) >>
endobj
1860 0 obj
-(19.19.2 More CUPS filtering Chains)
+(19.20.9 Deleted Win2K printer driver is still shown)
endobj
1861 0 obj
-<< /S /GoTo /D (subsection.19.19.3) >>
+<< /S /GoTo /D (subsection.19.20.10) >>
endobj
1864 0 obj
-(19.19.3 Trouble Shooting Guidelines to fix typical Samba printing Problems)
+(19.20.10 Win2K/XP "Local Security Policies")
endobj
1865 0 obj
-<< /S /GoTo /D (subsection.19.19.4) >>
+<< /S /GoTo /D (subsection.19.20.11) >>
endobj
1868 0 obj
-(19.19.4 An Overview of the CUPS Printing Processes)
+(19.20.11 WinXP clients: "Administrator can not install printers for all local users")
endobj
1869 0 obj
-<< /S /GoTo /D (chapter.20) >>
+<< /S /GoTo /D (subsection.19.20.12) >>
endobj
1872 0 obj
-(20 Stackable VFS modules)
+(19.20.12 "Print Change Notify" functions on NT-clients)
endobj
1873 0 obj
-<< /S /GoTo /D (section.20.1) >>
+<< /S /GoTo /D (subsection.19.20.13) >>
endobj
1876 0 obj
-(20.1 Features and Benefits)
+(19.20.13 WinXP-SP1)
endobj
1877 0 obj
-<< /S /GoTo /D (section.20.2) >>
+<< /S /GoTo /D (subsection.19.20.14) >>
endobj
1880 0 obj
-(20.2 Discussion)
+(19.20.14 Print options for all users can't be set on Win2K/XP)
endobj
1881 0 obj
-<< /S /GoTo /D (section.20.3) >>
+<< /S /GoTo /D (subsection.19.20.15) >>
endobj
1884 0 obj
-(20.3 Included modules)
+(19.20.15 Most common blunders in driver settings on Windows clients)
endobj
1885 0 obj
-<< /S /GoTo /D (subsection.20.3.1) >>
+<< /S /GoTo /D (subsection.19.20.16) >>
endobj
1888 0 obj
-(20.3.1 audit)
+(19.20.16 cupsaddsmb does not work with newly installed printer)
endobj
1889 0 obj
-<< /S /GoTo /D (subsection.20.3.2) >>
+<< /S /GoTo /D (subsection.19.20.17) >>
endobj
1892 0 obj
-(20.3.2 extd\137audit)
+(19.20.17 Permissions on /var/spool/samba/ get reset after each reboot)
endobj
1893 0 obj
-<< /S /GoTo /D (subsection.20.3.3) >>
+<< /S /GoTo /D (subsection.19.20.18) >>
endobj
1896 0 obj
-(20.3.3 fake\137perms)
+(19.20.18 Printer named "lp" intermittently swallows jobs and spits out completely different ones)
endobj
1897 0 obj
-<< /S /GoTo /D (subsection.20.3.4) >>
+<< /S /GoTo /D (subsection.19.20.19) >>
endobj
1900 0 obj
-(20.3.4 recycle)
+(19.20.19 Location of Adobe PostScript driver files necessary for "cupsaddsmb")
endobj
1901 0 obj
-<< /S /GoTo /D (subsection.20.3.5) >>
+<< /S /GoTo /D (section.19.21) >>
endobj
1904 0 obj
-(20.3.5 netatalk)
+(19.21 An Overview of the CUPS Printing Processes)
endobj
1905 0 obj
-<< /S /GoTo /D (section.20.4) >>
+<< /S /GoTo /D (chapter.20) >>
endobj
1908 0 obj
-(20.4 VFS modules available elsewhere)
+(20 Stackable VFS modules)
endobj
1909 0 obj
-<< /S /GoTo /D (subsection.20.4.1) >>
+<< /S /GoTo /D (section.20.1) >>
endobj
1912 0 obj
-(20.4.1 DatabaseFS)
+(20.1 Features and Benefits)
endobj
1913 0 obj
-<< /S /GoTo /D (subsection.20.4.2) >>
+<< /S /GoTo /D (section.20.2) >>
endobj
1916 0 obj
-(20.4.2 vscan)
+(20.2 Discussion)
endobj
1917 0 obj
-<< /S /GoTo /D (section.20.5) >>
+<< /S /GoTo /D (section.20.3) >>
endobj
1920 0 obj
-(20.5 Common Errors)
+(20.3 Included modules)
endobj
1921 0 obj
-<< /S /GoTo /D (chapter.21) >>
+<< /S /GoTo /D (subsection.20.3.1) >>
endobj
1924 0 obj
-(21 Integrated Logon Support using Winbind)
+(20.3.1 audit)
endobj
1925 0 obj
-<< /S /GoTo /D (section.21.1) >>
+<< /S /GoTo /D (subsection.20.3.2) >>
endobj
1928 0 obj
-(21.1 Features and Benefits)
+(20.3.2 extd\137audit)
endobj
1929 0 obj
-<< /S /GoTo /D (section.21.2) >>
+<< /S /GoTo /D (subsection.20.3.3) >>
endobj
1932 0 obj
-(21.2 Introduction)
+(20.3.3 fake\137perms)
endobj
1933 0 obj
-<< /S /GoTo /D (section.21.3) >>
+<< /S /GoTo /D (subsection.20.3.4) >>
endobj
1936 0 obj
-(21.3 What Winbind Provides)
+(20.3.4 recycle)
endobj
1937 0 obj
-<< /S /GoTo /D (subsection.21.3.1) >>
+<< /S /GoTo /D (subsection.20.3.5) >>
endobj
1940 0 obj
-(21.3.1 Target Uses)
+(20.3.5 netatalk)
endobj
1941 0 obj
-<< /S /GoTo /D (section.21.4) >>
+<< /S /GoTo /D (section.20.4) >>
endobj
1944 0 obj
-(21.4 How Winbind Works)
+(20.4 VFS modules available elsewhere)
endobj
1945 0 obj
-<< /S /GoTo /D (subsection.21.4.1) >>
+<< /S /GoTo /D (subsection.20.4.1) >>
endobj
1948 0 obj
-(21.4.1 Microsoft Remote Procedure Calls)
+(20.4.1 DatabaseFS)
endobj
1949 0 obj
-<< /S /GoTo /D (subsection.21.4.2) >>
+<< /S /GoTo /D (subsection.20.4.2) >>
endobj
1952 0 obj
-(21.4.2 Microsoft Active Directory Services)
+(20.4.2 vscan)
endobj
1953 0 obj
-<< /S /GoTo /D (subsection.21.4.3) >>
+<< /S /GoTo /D (chapter.21) >>
endobj
1956 0 obj
-(21.4.3 Name Service Switch)
+(21 Winbind: Use of Domain Accounts)
endobj
1957 0 obj
-<< /S /GoTo /D (subsection.21.4.4) >>
+<< /S /GoTo /D (section.21.1) >>
endobj
1960 0 obj
-(21.4.4 Pluggable Authentication Modules)
+(21.1 Features and Benefits)
endobj
1961 0 obj
-<< /S /GoTo /D (subsection.21.4.5) >>
+<< /S /GoTo /D (section.21.2) >>
endobj
1964 0 obj
-(21.4.5 User and Group ID Allocation)
+(21.2 Introduction)
endobj
1965 0 obj
-<< /S /GoTo /D (subsection.21.4.6) >>
+<< /S /GoTo /D (section.21.3) >>
endobj
1968 0 obj
-(21.4.6 Result Caching)
+(21.3 What Winbind Provides)
endobj
1969 0 obj
-<< /S /GoTo /D (section.21.5) >>
+<< /S /GoTo /D (subsection.21.3.1) >>
endobj
1972 0 obj
-(21.5 Installation and Configuration)
+(21.3.1 Target Uses)
endobj
1973 0 obj
-<< /S /GoTo /D (subsection.21.5.1) >>
+<< /S /GoTo /D (section.21.4) >>
endobj
1976 0 obj
-(21.5.1 Introduction)
+(21.4 How Winbind Works)
endobj
1977 0 obj
-<< /S /GoTo /D (subsection.21.5.2) >>
+<< /S /GoTo /D (subsection.21.4.1) >>
endobj
1980 0 obj
-(21.5.2 Requirements)
+(21.4.1 Microsoft Remote Procedure Calls)
endobj
1981 0 obj
-<< /S /GoTo /D (subsection.21.5.3) >>
+<< /S /GoTo /D (subsection.21.4.2) >>
endobj
1984 0 obj
-(21.5.3 Testing Things Out)
+(21.4.2 Microsoft Active Directory Services)
endobj
1985 0 obj
-<< /S /GoTo /D (subsubsection.21.5.3.1) >>
+<< /S /GoTo /D (subsection.21.4.3) >>
endobj
1988 0 obj
-(21.5.3.1 Configure and compile SAMBA)
+(21.4.3 Name Service Switch)
endobj
1989 0 obj
-<< /S /GoTo /D (subsubsection.21.5.3.2) >>
+<< /S /GoTo /D (subsection.21.4.4) >>
endobj
1992 0 obj
-(21.5.3.2 Configure nsswitch.conf and the winbind libraries on Linux and Solaris)
+(21.4.4 Pluggable Authentication Modules)
endobj
1993 0 obj
-<< /S /GoTo /D (subsubsection.21.5.3.3) >>
+<< /S /GoTo /D (subsection.21.4.5) >>
endobj
1996 0 obj
-(21.5.3.3 NSS Winbind on AIX)
+(21.4.5 User and Group ID Allocation)
endobj
1997 0 obj
-<< /S /GoTo /D (subsubsection.21.5.3.4) >>
+<< /S /GoTo /D (subsection.21.4.6) >>
endobj
2000 0 obj
-(21.5.3.4 Configure smb.conf)
+(21.4.6 Result Caching)
endobj
2001 0 obj
-<< /S /GoTo /D (subsubsection.21.5.3.5) >>
+<< /S /GoTo /D (section.21.5) >>
endobj
2004 0 obj
-(21.5.3.5 Join the SAMBA server to the PDC domain)
+(21.5 Installation and Configuration)
endobj
2005 0 obj
-<< /S /GoTo /D (subsubsection.21.5.3.6) >>
+<< /S /GoTo /D (subsection.21.5.1) >>
endobj
2008 0 obj
-(21.5.3.6 Start up the winbindd daemon and test it!)
+(21.5.1 Introduction)
endobj
2009 0 obj
-<< /S /GoTo /D (subsubsection.21.5.3.7) >>
+<< /S /GoTo /D (subsection.21.5.2) >>
endobj
2012 0 obj
-(21.5.3.7 Fix the init.d startup scripts)
+(21.5.2 Requirements)
endobj
2013 0 obj
-<< /S /GoTo /D (subsubsection.21.5.3.8) >>
+<< /S /GoTo /D (subsection.21.5.3) >>
endobj
2016 0 obj
-(21.5.3.8 Configure Winbind and PAM)
+(21.5.3 Testing Things Out)
endobj
2017 0 obj
-<< /S /GoTo /D (section.21.6) >>
+<< /S /GoTo /D (subsubsection.21.5.3.1) >>
endobj
2020 0 obj
-(21.6 Conclusion)
+(21.5.3.1 Configure nsswitch.conf and the winbind libraries on Linux and Solaris)
endobj
2021 0 obj
-<< /S /GoTo /D (section.21.7) >>
+<< /S /GoTo /D (subsubsection.21.5.3.2) >>
endobj
2024 0 obj
-(21.7 Common Errors)
+(21.5.3.2 NSS Winbind on AIX)
endobj
2025 0 obj
-<< /S /GoTo /D (chapter.22) >>
+<< /S /GoTo /D (subsubsection.21.5.3.3) >>
endobj
2028 0 obj
-(22 Advanced Network Management)
+(21.5.3.3 Configure smb.conf)
endobj
2029 0 obj
-<< /S /GoTo /D (section.22.1) >>
+<< /S /GoTo /D (subsubsection.21.5.3.4) >>
endobj
2032 0 obj
-(22.1 Features and Benefits)
+(21.5.3.4 Join the SAMBA server to the PDC domain)
endobj
2033 0 obj
-<< /S /GoTo /D (section.22.2) >>
+<< /S /GoTo /D (subsubsection.21.5.3.5) >>
endobj
2036 0 obj
-(22.2 Remote Server Administration)
+(21.5.3.5 Start up the winbindd daemon and test it!)
endobj
2037 0 obj
-<< /S /GoTo /D (section.22.3) >>
+<< /S /GoTo /D (subsubsection.21.5.3.6) >>
endobj
2040 0 obj
-(22.3 Remote Desktop Management)
+(21.5.3.6 Fix the init.d startup scripts)
endobj
2041 0 obj
-<< /S /GoTo /D (subsection.22.3.1) >>
+<< /S /GoTo /D (subsubsection.21.5.3.7) >>
endobj
2044 0 obj
-(22.3.1 Remote Management from NoMachines.Com)
+(21.5.3.7 Configure Winbind and PAM)
endobj
2045 0 obj
-<< /S /GoTo /D (section.22.4) >>
+<< /S /GoTo /D (section.21.6) >>
endobj
2048 0 obj
-(22.4 Network Logon Script Magic)
+(21.6 Conclusion)
endobj
2049 0 obj
-<< /S /GoTo /D (subsection.22.4.1) >>
+<< /S /GoTo /D (section.21.7) >>
endobj
2052 0 obj
-(22.4.1 Adding printers without user intervention)
+(21.7 Common Errors)
endobj
2053 0 obj
-<< /S /GoTo /D (section.22.5) >>
+<< /S /GoTo /D (subsection.21.7.1) >>
endobj
2056 0 obj
-(22.5 Common Errors)
+(21.7.1 NSCD Problem Warning)
endobj
2057 0 obj
-<< /S /GoTo /D (chapter.23) >>
+<< /S /GoTo /D (chapter.22) >>
endobj
2060 0 obj
-(23 System and Account Policies)
+(22 Advanced Network Management)
endobj
2061 0 obj
-<< /S /GoTo /D (section.23.1) >>
+<< /S /GoTo /D (section.22.1) >>
endobj
2064 0 obj
-(23.1 Features and Benefits)
+(22.1 Features and Benefits)
endobj
2065 0 obj
-<< /S /GoTo /D (section.23.2) >>
+<< /S /GoTo /D (section.22.2) >>
endobj
2068 0 obj
-(23.2 Creating and Managing System Policies)
+(22.2 Remote Server Administration)
endobj
2069 0 obj
-<< /S /GoTo /D (subsection.23.2.1) >>
+<< /S /GoTo /D (section.22.3) >>
endobj
2072 0 obj
-(23.2.1 Windows 9x/Me Policies)
+(22.3 Remote Desktop Management)
endobj
2073 0 obj
-<< /S /GoTo /D (subsection.23.2.2) >>
+<< /S /GoTo /D (subsection.22.3.1) >>
endobj
2076 0 obj
-(23.2.2 Windows NT4 Style Policy Files)
+(22.3.1 Remote Management from NoMachines.Com)
endobj
2077 0 obj
-<< /S /GoTo /D (subsubsection.23.2.2.1) >>
+<< /S /GoTo /D (section.22.4) >>
endobj
2080 0 obj
-(23.2.2.1 Registry Spoiling)
+(22.4 Network Logon Script Magic)
endobj
2081 0 obj
-<< /S /GoTo /D (subsection.23.2.3) >>
+<< /S /GoTo /D (subsection.22.4.1) >>
endobj
2084 0 obj
-(23.2.3 MS Windows 200x / XP Professional Policies)
+(22.4.1 Adding printers without user intervention)
endobj
2085 0 obj
-<< /S /GoTo /D (subsubsection.23.2.3.1) >>
+<< /S /GoTo /D (section.22.5) >>
endobj
2088 0 obj
-(23.2.3.1 Administration of Win2K / XP Policies)
+(22.5 Common Errors)
endobj
2089 0 obj
-<< /S /GoTo /D (section.23.3) >>
+<< /S /GoTo /D (chapter.23) >>
endobj
2092 0 obj
-(23.3 Managing Account/User Policies)
+(23 System and Account Policies)
endobj
2093 0 obj
-<< /S /GoTo /D (subsection.23.3.1) >>
+<< /S /GoTo /D (section.23.1) >>
endobj
2096 0 obj
-(23.3.1 Samba Editreg Toolset)
+(23.1 Features and Benefits)
endobj
2097 0 obj
-<< /S /GoTo /D (subsection.23.3.2) >>
+<< /S /GoTo /D (section.23.2) >>
endobj
2100 0 obj
-(23.3.2 Windows NT4/200x)
+(23.2 Creating and Managing System Policies)
endobj
2101 0 obj
-<< /S /GoTo /D (subsection.23.3.3) >>
+<< /S /GoTo /D (subsection.23.2.1) >>
endobj
2104 0 obj
-(23.3.3 Samba PDC)
+(23.2.1 Windows 9x/Me Policies)
endobj
2105 0 obj
-<< /S /GoTo /D (section.23.4) >>
+<< /S /GoTo /D (subsection.23.2.2) >>
endobj
2108 0 obj
-(23.4 System Startup and Logon Processing Overview)
+(23.2.2 Windows NT4 Style Policy Files)
endobj
2109 0 obj
-<< /S /GoTo /D (section.23.5) >>
+<< /S /GoTo /D (subsubsection.23.2.2.1) >>
endobj
2112 0 obj
-(23.5 Common Errors)
+(23.2.2.1 Registry Spoiling)
endobj
2113 0 obj
-<< /S /GoTo /D (subsection.23.5.1) >>
+<< /S /GoTo /D (subsection.23.2.3) >>
endobj
2116 0 obj
-(23.5.1 Policy Does Not Work)
+(23.2.3 MS Windows 200x / XP Professional Policies)
endobj
2117 0 obj
-<< /S /GoTo /D (chapter.24) >>
+<< /S /GoTo /D (subsubsection.23.2.3.1) >>
endobj
2120 0 obj
-(24 Desktop Profile Management)
+(23.2.3.1 Administration of Win2K / XP Policies)
endobj
2121 0 obj
-<< /S /GoTo /D (section.24.1) >>
+<< /S /GoTo /D (section.23.3) >>
endobj
2124 0 obj
-(24.1 Features and Benefits)
+(23.3 Managing Account/User Policies)
endobj
2125 0 obj
-<< /S /GoTo /D (section.24.2) >>
+<< /S /GoTo /D (subsection.23.3.1) >>
endobj
2128 0 obj
-(24.2 Roaming Profiles)
+(23.3.1 Samba Editreg Toolset)
endobj
2129 0 obj
-<< /S /GoTo /D (subsection.24.2.1) >>
+<< /S /GoTo /D (subsection.23.3.2) >>
endobj
2132 0 obj
-(24.2.1 Samba Configuration for Profile Handling)
+(23.3.2 Windows NT4/200x)
endobj
2133 0 obj
-<< /S /GoTo /D (subsubsection.24.2.1.1) >>
+<< /S /GoTo /D (subsection.23.3.3) >>
endobj
2136 0 obj
-(24.2.1.1 NT4/200x User Profiles)
+(23.3.3 Samba PDC)
endobj
2137 0 obj
-<< /S /GoTo /D (subsubsection.24.2.1.2) >>
+<< /S /GoTo /D (section.23.4) >>
endobj
2140 0 obj
-(24.2.1.2 Windows 9x / Me User Profiles)
+(23.4 System Startup and Logon Processing Overview)
endobj
2141 0 obj
-<< /S /GoTo /D (subsubsection.24.2.1.3) >>
+<< /S /GoTo /D (section.23.5) >>
endobj
2144 0 obj
-(24.2.1.3 Mixed Windows 9x / Me and Windows NT4/200x User Profiles)
+(23.5 Common Errors)
endobj
2145 0 obj
-<< /S /GoTo /D (subsubsection.24.2.1.4) >>
+<< /S /GoTo /D (subsection.23.5.1) >>
endobj
2148 0 obj
-(24.2.1.4 Disabling Roaming Profile Support)
+(23.5.1 Policy Does Not Work)
endobj
2149 0 obj
-<< /S /GoTo /D (subsection.24.2.2) >>
+<< /S /GoTo /D (chapter.24) >>
endobj
2152 0 obj
-(24.2.2 Windows Client Profile Configuration Information)
+(24 Desktop Profile Management)
endobj
2153 0 obj
-<< /S /GoTo /D (subsubsection.24.2.2.1) >>
+<< /S /GoTo /D (section.24.1) >>
endobj
2156 0 obj
-(24.2.2.1 Windows 9x / Me Profile Setup)
+(24.1 Features and Benefits)
endobj
2157 0 obj
-<< /S /GoTo /D (subsubsection.24.2.2.2) >>
+<< /S /GoTo /D (section.24.2) >>
endobj
2160 0 obj
-(24.2.2.2 Windows NT4 Workstation)
+(24.2 Roaming Profiles)
endobj
2161 0 obj
-<< /S /GoTo /D (subsubsection.24.2.2.3) >>
+<< /S /GoTo /D (subsection.24.2.1) >>
endobj
2164 0 obj
-(24.2.2.3 Windows 2000/XP Professional)
+(24.2.1 Samba Configuration for Profile Handling)
endobj
2165 0 obj
-<< /S /GoTo /D (subsection.24.2.3) >>
+<< /S /GoTo /D (subsubsection.24.2.1.1) >>
endobj
2168 0 obj
-(24.2.3 Sharing Profiles between W9x/Me and NT4/200x/XP workstations)
+(24.2.1.1 NT4/200x User Profiles)
endobj
2169 0 obj
-<< /S /GoTo /D (subsection.24.2.4) >>
+<< /S /GoTo /D (subsubsection.24.2.1.2) >>
endobj
2172 0 obj
-(24.2.4 Profile Migration from Windows NT4/200x Server to Samba)
+(24.2.1.2 Windows 9x / Me User Profiles)
endobj
2173 0 obj
-<< /S /GoTo /D (subsubsection.24.2.4.1) >>
+<< /S /GoTo /D (subsubsection.24.2.1.3) >>
endobj
2176 0 obj
-(24.2.4.1 Windows NT4 Profile Management Tools)
+(24.2.1.3 Mixed Windows 9x / Me and Windows NT4/200x User Profiles)
endobj
2177 0 obj
-<< /S /GoTo /D (subsubsection.24.2.4.2) >>
+<< /S /GoTo /D (subsubsection.24.2.1.4) >>
endobj
2180 0 obj
-(24.2.4.2 Side bar Notes)
+(24.2.1.4 Disabling Roaming Profile Support)
endobj
2181 0 obj
-<< /S /GoTo /D (subsubsection.24.2.4.3) >>
+<< /S /GoTo /D (subsection.24.2.2) >>
endobj
2184 0 obj
-(24.2.4.3 moveuser.exe)
+(24.2.2 Windows Client Profile Configuration Information)
endobj
2185 0 obj
-<< /S /GoTo /D (subsubsection.24.2.4.4) >>
+<< /S /GoTo /D (subsubsection.24.2.2.1) >>
endobj
2188 0 obj
-(24.2.4.4 Get SID)
+(24.2.2.1 Windows 9x / Me Profile Setup)
endobj
2189 0 obj
-<< /S /GoTo /D (section.24.3) >>
+<< /S /GoTo /D (subsubsection.24.2.2.2) >>
endobj
2192 0 obj
-(24.3 Mandatory profiles)
+(24.2.2.2 Windows NT4 Workstation)
endobj
2193 0 obj
-<< /S /GoTo /D (section.24.4) >>
+<< /S /GoTo /D (subsubsection.24.2.2.3) >>
endobj
2196 0 obj
-(24.4 Creating/Managing Group Profiles)
+(24.2.2.3 Windows 2000/XP Professional)
endobj
2197 0 obj
-<< /S /GoTo /D (section.24.5) >>
+<< /S /GoTo /D (subsection.24.2.3) >>
endobj
2200 0 obj
-(24.5 Default Profile for Windows Users)
+(24.2.3 Sharing Profiles between W9x/Me and NT4/200x/XP workstations)
endobj
2201 0 obj
-<< /S /GoTo /D (subsection.24.5.1) >>
+<< /S /GoTo /D (subsection.24.2.4) >>
endobj
2204 0 obj
-(24.5.1 MS Windows 9x/Me)
+(24.2.4 Profile Migration from Windows NT4/200x Server to Samba)
endobj
2205 0 obj
-<< /S /GoTo /D (subsubsection.24.5.1.1) >>
+<< /S /GoTo /D (subsubsection.24.2.4.1) >>
endobj
2208 0 obj
-(24.5.1.1 How User Profiles Are Handled in Windows 9x / Me?)
+(24.2.4.1 Windows NT4 Profile Management Tools)
endobj
2209 0 obj
-<< /S /GoTo /D (subsection.24.5.2) >>
+<< /S /GoTo /D (subsubsection.24.2.4.2) >>
endobj
2212 0 obj
-(24.5.2 MS Windows NT4 Workstation)
+(24.2.4.2 Side bar Notes)
endobj
2213 0 obj
-<< /S /GoTo /D (subsection.24.5.3) >>
+<< /S /GoTo /D (subsubsection.24.2.4.3) >>
endobj
2216 0 obj
-(24.5.3 MS Windows 200x/XP)
+(24.2.4.3 moveuser.exe)
endobj
2217 0 obj
-<< /S /GoTo /D (section.24.6) >>
+<< /S /GoTo /D (subsubsection.24.2.4.4) >>
endobj
2220 0 obj
-(24.6 Common Errors)
+(24.2.4.4 Get SID)
endobj
2221 0 obj
-<< /S /GoTo /D (subsection.24.6.1) >>
+<< /S /GoTo /D (section.24.3) >>
endobj
2224 0 obj
-(24.6.1 How does one set up roaming profiles for just one \(or a few\) user/s or group/s?)
+(24.3 Mandatory profiles)
endobj
2225 0 obj
-<< /S /GoTo /D (subsection.24.6.2) >>
+<< /S /GoTo /D (section.24.4) >>
endobj
2228 0 obj
-(24.6.2 Can NOT use Roaming Profiles)
+(24.4 Creating/Managing Group Profiles)
endobj
2229 0 obj
-<< /S /GoTo /D (subsection.24.6.3) >>
+<< /S /GoTo /D (section.24.5) >>
endobj
2232 0 obj
-(24.6.3 Changing the default profile)
+(24.5 Default Profile for Windows Users)
endobj
2233 0 obj
-<< /S /GoTo /D (chapter.25) >>
+<< /S /GoTo /D (subsection.24.5.1) >>
endobj
2236 0 obj
-(25 PAM based Distributed Authentication)
+(24.5.1 MS Windows 9x/Me)
endobj
2237 0 obj
-<< /S /GoTo /D (section.25.1) >>
+<< /S /GoTo /D (subsubsection.24.5.1.1) >>
endobj
2240 0 obj
-(25.1 Features and Benefits)
+(24.5.1.1 How User Profiles Are Handled in Windows 9x / Me?)
endobj
2241 0 obj
-<< /S /GoTo /D (section.25.2) >>
+<< /S /GoTo /D (subsection.24.5.2) >>
endobj
2244 0 obj
-(25.2 Technical Discussion)
+(24.5.2 MS Windows NT4 Workstation)
endobj
2245 0 obj
-<< /S /GoTo /D (subsection.25.2.1) >>
+<< /S /GoTo /D (subsection.24.5.3) >>
endobj
2248 0 obj
-(25.2.1 PAM Configuration Syntax)
+(24.5.3 MS Windows 200x/XP)
endobj
2249 0 obj
-<< /S /GoTo /D (subsubsection.25.2.1.1) >>
+<< /S /GoTo /D (section.24.6) >>
endobj
2252 0 obj
-(25.2.1.1 Anatomy of /etc/pam.d Entries)
+(24.6 Common Errors)
endobj
2253 0 obj
-<< /S /GoTo /D (subsection.25.2.2) >>
+<< /S /GoTo /D (subsection.24.6.1) >>
endobj
2256 0 obj
-(25.2.2 Example System Configurations)
+(24.6.1 Setting up roaming profiles for just a few user's or group's?)
endobj
2257 0 obj
-<< /S /GoTo /D (subsubsection.25.2.2.1) >>
+<< /S /GoTo /D (subsection.24.6.2) >>
endobj
2260 0 obj
-(25.2.2.1 PAM: original login config)
+(24.6.2 Can NOT use Roaming Profiles)
endobj
2261 0 obj
-<< /S /GoTo /D (subsubsection.25.2.2.2) >>
+<< /S /GoTo /D (subsection.24.6.3) >>
endobj
2264 0 obj
-(25.2.2.2 PAM: login using pam\137smbpass)
+(24.6.3 Changing the default profile)
endobj
2265 0 obj
-<< /S /GoTo /D (subsection.25.2.3) >>
+<< /S /GoTo /D (chapter.25) >>
endobj
2268 0 obj
-(25.2.3 smb.conf PAM Configuration)
+(25 PAM based Distributed Authentication)
endobj
2269 0 obj
-<< /S /GoTo /D (subsection.25.2.4) >>
+<< /S /GoTo /D (section.25.1) >>
endobj
2272 0 obj
-(25.2.4 Remote CIFS Authentication using winbindd.so)
+(25.1 Features and Benefits)
endobj
2273 0 obj
-<< /S /GoTo /D (subsection.25.2.5) >>
+<< /S /GoTo /D (section.25.2) >>
endobj
2276 0 obj
-(25.2.5 Password Synchronization using pam\137smbpass.so)
+(25.2 Technical Discussion)
endobj
2277 0 obj
-<< /S /GoTo /D (subsubsection.25.2.5.1) >>
+<< /S /GoTo /D (subsection.25.2.1) >>
endobj
2280 0 obj
-(25.2.5.1 Password Synchronisation Configuration)
+(25.2.1 PAM Configuration Syntax)
endobj
2281 0 obj
-<< /S /GoTo /D (subsubsection.25.2.5.2) >>
+<< /S /GoTo /D (subsubsection.25.2.1.1) >>
endobj
2284 0 obj
-(25.2.5.2 Password Migration Configuration)
+(25.2.1.1 Anatomy of /etc/pam.d Entries)
endobj
2285 0 obj
-<< /S /GoTo /D (subsubsection.25.2.5.3) >>
+<< /S /GoTo /D (subsection.25.2.2) >>
endobj
2288 0 obj
-(25.2.5.3 Mature Password Configuration)
+(25.2.2 Example System Configurations)
endobj
2289 0 obj
-<< /S /GoTo /D (subsubsection.25.2.5.4) >>
+<< /S /GoTo /D (subsubsection.25.2.2.1) >>
endobj
2292 0 obj
-(25.2.5.4 Kerberos Password Integration Configuration)
+(25.2.2.1 PAM: original login config)
endobj
2293 0 obj
-<< /S /GoTo /D (section.25.3) >>
+<< /S /GoTo /D (subsubsection.25.2.2.2) >>
endobj
2296 0 obj
-(25.3 Common Errors)
+(25.2.2.2 PAM: login using pam\137smbpass)
endobj
2297 0 obj
-<< /S /GoTo /D (subsection.25.3.1) >>
+<< /S /GoTo /D (subsection.25.2.3) >>
endobj
2300 0 obj
-(25.3.1 pam\137winbind problem)
+(25.2.3 smb.conf PAM Configuration)
endobj
2301 0 obj
-<< /S /GoTo /D (chapter.26) >>
+<< /S /GoTo /D (subsection.25.2.4) >>
endobj
2304 0 obj
-(26 Integrating MS Windows networks with Samba)
+(25.2.4 Remote CIFS Authentication using winbindd.so)
endobj
2305 0 obj
-<< /S /GoTo /D (section.26.1) >>
+<< /S /GoTo /D (subsection.25.2.5) >>
endobj
2308 0 obj
-(26.1 Features and Benefits)
+(25.2.5 Password Synchronization using pam\137smbpass.so)
endobj
2309 0 obj
-<< /S /GoTo /D (section.26.2) >>
+<< /S /GoTo /D (subsubsection.25.2.5.1) >>
endobj
2312 0 obj
-(26.2 Background Information)
+(25.2.5.1 Password Synchronisation Configuration)
endobj
2313 0 obj
-<< /S /GoTo /D (section.26.3) >>
+<< /S /GoTo /D (subsubsection.25.2.5.2) >>
endobj
2316 0 obj
-(26.3 Name Resolution in a pure Unix/Linux world)
+(25.2.5.2 Password Migration Configuration)
endobj
2317 0 obj
-<< /S /GoTo /D (subsection.26.3.1) >>
+<< /S /GoTo /D (subsubsection.25.2.5.3) >>
endobj
2320 0 obj
-(26.3.1 /etc/hosts)
+(25.2.5.3 Mature Password Configuration)
endobj
2321 0 obj
-<< /S /GoTo /D (subsection.26.3.2) >>
+<< /S /GoTo /D (subsubsection.25.2.5.4) >>
endobj
2324 0 obj
-(26.3.2 /etc/resolv.conf)
+(25.2.5.4 Kerberos Password Integration Configuration)
endobj
2325 0 obj
-<< /S /GoTo /D (subsection.26.3.3) >>
+<< /S /GoTo /D (section.25.3) >>
endobj
2328 0 obj
-(26.3.3 /etc/host.conf)
+(25.3 Common Errors)
endobj
2329 0 obj
-<< /S /GoTo /D (subsection.26.3.4) >>
+<< /S /GoTo /D (subsection.25.3.1) >>
endobj
2332 0 obj
-(26.3.4 /etc/nsswitch.conf)
+(25.3.1 pam\137winbind problem)
endobj
2333 0 obj
-<< /S /GoTo /D (section.26.4) >>
+<< /S /GoTo /D (subsection.25.3.2) >>
endobj
2336 0 obj
-(26.4 Name resolution as used within MS Windows networking)
+(25.3.2 Winbind is not resolving users and groups)
endobj
2337 0 obj
-<< /S /GoTo /D (subsection.26.4.1) >>
+<< /S /GoTo /D (chapter.26) >>
endobj
2340 0 obj
-(26.4.1 The NetBIOS Name Cache)
+(26 Integrating MS Windows networks with Samba)
endobj
2341 0 obj
-<< /S /GoTo /D (subsection.26.4.2) >>
+<< /S /GoTo /D (section.26.1) >>
endobj
2344 0 obj
-(26.4.2 The LMHOSTS file)
+(26.1 Features and Benefits)
endobj
2345 0 obj
-<< /S /GoTo /D (subsection.26.4.3) >>
+<< /S /GoTo /D (section.26.2) >>
endobj
2348 0 obj
-(26.4.3 HOSTS file)
+(26.2 Background Information)
endobj
2349 0 obj
-<< /S /GoTo /D (subsection.26.4.4) >>
+<< /S /GoTo /D (section.26.3) >>
endobj
2352 0 obj
-(26.4.4 DNS Lookup)
+(26.3 Name Resolution in a pure UNIX/Linux world)
endobj
2353 0 obj
-<< /S /GoTo /D (subsection.26.4.5) >>
+<< /S /GoTo /D (subsection.26.3.1) >>
endobj
2356 0 obj
-(26.4.5 WINS Lookup)
+(26.3.1 /etc/hosts)
endobj
2357 0 obj
-<< /S /GoTo /D (section.26.5) >>
+<< /S /GoTo /D (subsection.26.3.2) >>
endobj
2360 0 obj
-(26.5 Common Errors)
+(26.3.2 /etc/resolv.conf)
endobj
2361 0 obj
-<< /S /GoTo /D (subsection.26.5.1) >>
+<< /S /GoTo /D (subsection.26.3.3) >>
endobj
2364 0 obj
-(26.5.1 My Boomerang Won't Come Back)
+(26.3.3 /etc/host.conf)
endobj
2365 0 obj
-<< /S /GoTo /D (subsection.26.5.2) >>
+<< /S /GoTo /D (subsection.26.3.4) >>
endobj
2368 0 obj
-(26.5.2 Very Slow Network Connections)
+(26.3.4 /etc/nsswitch.conf)
endobj
2369 0 obj
-<< /S /GoTo /D (subsection.26.5.3) >>
+<< /S /GoTo /D (section.26.4) >>
endobj
2372 0 obj
-(26.5.3 Samba server name change problem)
+(26.4 Name resolution as used within MS Windows networking)
endobj
2373 0 obj
-<< /S /GoTo /D (chapter.27) >>
+<< /S /GoTo /D (subsection.26.4.1) >>
endobj
2376 0 obj
-(27 Unicode/Charsets)
+(26.4.1 The NetBIOS Name Cache)
endobj
2377 0 obj
-<< /S /GoTo /D (section.27.1) >>
+<< /S /GoTo /D (subsection.26.4.2) >>
endobj
2380 0 obj
-(27.1 Features and Benefits)
+(26.4.2 The LMHOSTS file)
endobj
2381 0 obj
-<< /S /GoTo /D (section.27.2) >>
+<< /S /GoTo /D (subsection.26.4.3) >>
endobj
2384 0 obj
-(27.2 What are charsets and unicode?)
+(26.4.3 HOSTS file)
endobj
2385 0 obj
-<< /S /GoTo /D (section.27.3) >>
+<< /S /GoTo /D (subsection.26.4.4) >>
endobj
2388 0 obj
-(27.3 Samba and charsets)
+(26.4.4 DNS Lookup)
endobj
2389 0 obj
-<< /S /GoTo /D (section.27.4) >>
+<< /S /GoTo /D (subsection.26.4.5) >>
endobj
2392 0 obj
-(27.4 Conversion from old names)
+(26.4.5 WINS Lookup)
endobj
2393 0 obj
-<< /S /GoTo /D (section.27.5) >>
+<< /S /GoTo /D (section.26.5) >>
endobj
2396 0 obj
-(27.5 Japanese charsets)
+(26.5 Common Errors)
endobj
2397 0 obj
-<< /S /GoTo /D (chapter.28) >>
+<< /S /GoTo /D (subsection.26.5.1) >>
endobj
2400 0 obj
-(28 Samba Backup Techniques)
+(26.5.1 Pinging works only in one way)
endobj
2401 0 obj
-<< /S /GoTo /D (section.28.1) >>
+<< /S /GoTo /D (subsection.26.5.2) >>
endobj
2404 0 obj
-(28.1 Note)
+(26.5.2 Very Slow Network Connections)
endobj
2405 0 obj
-<< /S /GoTo /D (section.28.2) >>
+<< /S /GoTo /D (subsection.26.5.3) >>
endobj
2408 0 obj
-(28.2 Features and Benefits)
+(26.5.3 Samba server name change problem)
endobj
2409 0 obj
-<< /S /GoTo /D (chapter.29) >>
+<< /S /GoTo /D (chapter.27) >>
endobj
2412 0 obj
-(29 High Availability Options)
+(27 Unicode/Charsets)
endobj
2413 0 obj
-<< /S /GoTo /D (section.29.1) >>
+<< /S /GoTo /D (section.27.1) >>
endobj
2416 0 obj
-(29.1 Note)
+(27.1 Features and Benefits)
endobj
2417 0 obj
-<< /S /GoTo /D (part.4) >>
+<< /S /GoTo /D (section.27.2) >>
endobj
2420 0 obj
-(IV Migration and Updating)
+(27.2 What are charsets and unicode?)
endobj
2421 0 obj
-<< /S /GoTo /D (chapter.30) >>
+<< /S /GoTo /D (section.27.3) >>
endobj
2424 0 obj
-(30 Upgrading from Samba-2.x to Samba-3.0.0)
+(27.3 Samba and charsets)
endobj
2425 0 obj
-<< /S /GoTo /D (section.30.1) >>
+<< /S /GoTo /D (section.27.4) >>
endobj
2428 0 obj
-(30.1 Charsets)
+(27.4 Conversion from old names)
endobj
2429 0 obj
-<< /S /GoTo /D (section.30.2) >>
+<< /S /GoTo /D (section.27.5) >>
endobj
2432 0 obj
-(30.2 Obsolete configuration options)
+(27.5 Japanese charsets)
endobj
2433 0 obj
-<< /S /GoTo /D (section.30.3) >>
+<< /S /GoTo /D (section.27.6) >>
endobj
2436 0 obj
-(30.3 Password Backend)
+(27.6 Common errors)
endobj
2437 0 obj
-<< /S /GoTo /D (chapter.31) >>
+<< /S /GoTo /D (subsection.27.6.1) >>
endobj
2440 0 obj
-(31 Migration from NT4 PDC to Samba-3 PDC)
+(27.6.1 CP850.so can't be found)
endobj
2441 0 obj
-<< /S /GoTo /D (section.31.1) >>
+<< /S /GoTo /D (chapter.28) >>
endobj
2444 0 obj
-(31.1 Planning and Getting Started)
+(28 Samba Backup Techniques)
endobj
2445 0 obj
-<< /S /GoTo /D (subsection.31.1.1) >>
+<< /S /GoTo /D (section.28.1) >>
endobj
2448 0 obj
-(31.1.1 Objectives)
+(28.1 Note)
endobj
2449 0 obj
-<< /S /GoTo /D (subsubsection.31.1.1.1) >>
+<< /S /GoTo /D (section.28.2) >>
endobj
2452 0 obj
-(31.1.1.1 Domain Layout)
+(28.2 Features and Benefits)
endobj
2453 0 obj
-<< /S /GoTo /D (subsubsection.31.1.1.2) >>
+<< /S /GoTo /D (chapter.29) >>
endobj
2456 0 obj
-(31.1.1.2 Server Share and Directory Layout)
+(29 High Availability Options)
endobj
2457 0 obj
-<< /S /GoTo /D (subsubsection.31.1.1.3) >>
+<< /S /GoTo /D (section.29.1) >>
endobj
2460 0 obj
-(31.1.1.3 Logon Scripts)
+(29.1 Note)
endobj
2461 0 obj
-<< /S /GoTo /D (subsubsection.31.1.1.4) >>
+<< /S /GoTo /D (part.4) >>
endobj
2464 0 obj
-(31.1.1.4 Profile Migration/Creation)
+(IV Migration and Updating)
endobj
2465 0 obj
-<< /S /GoTo /D (subsubsection.31.1.1.5) >>
+<< /S /GoTo /D (chapter.30) >>
endobj
2468 0 obj
-(31.1.1.5 User and Group Accounts)
+(30 Upgrading from Samba-2.x to Samba-3.0.0)
endobj
2469 0 obj
-<< /S /GoTo /D (subsection.31.1.2) >>
+<< /S /GoTo /D (section.30.1) >>
endobj
2472 0 obj
-(31.1.2 Steps In Migration Process)
+(30.1 New Features in Samba-3)
endobj
2473 0 obj
-<< /S /GoTo /D (section.31.2) >>
+<< /S /GoTo /D (section.30.2) >>
endobj
2476 0 obj
-(31.2 Migration Options)
+(30.2 Configuration Parameter Changes)
endobj
2477 0 obj
-<< /S /GoTo /D (subsection.31.2.1) >>
+<< /S /GoTo /D (subsection.30.2.1) >>
endobj
2480 0 obj
-(31.2.1 Planning for Success)
+(30.2.1 Removed Parameters)
endobj
2481 0 obj
-<< /S /GoTo /D (subsection.31.2.2) >>
+<< /S /GoTo /D (subsection.30.2.2) >>
endobj
2484 0 obj
-(31.2.2 Samba Implementation Choices)
+(30.2.2 New Parameters)
endobj
2485 0 obj
-<< /S /GoTo /D (chapter.32) >>
+<< /S /GoTo /D (subsection.30.2.3) >>
endobj
2488 0 obj
-(32 SWAT - The Samba Web Administration Tool)
+(30.2.3 Modified Parameters \(changes in behavior\):)
endobj
2489 0 obj
-<< /S /GoTo /D (section.32.1) >>
+<< /S /GoTo /D (section.30.3) >>
endobj
2492 0 obj
-(32.1 Features and Benefits)
+(30.3 New Functionality)
endobj
2493 0 obj
-<< /S /GoTo /D (subsection.32.1.1) >>
+<< /S /GoTo /D (subsection.30.3.1) >>
endobj
2496 0 obj
-(32.1.1 Enabling SWAT for use)
+(30.3.1 Databases)
endobj
2497 0 obj
-<< /S /GoTo /D (subsection.32.1.2) >>
+<< /S /GoTo /D (subsection.30.3.2) >>
endobj
2500 0 obj
-(32.1.2 Securing SWAT through SSL)
+(30.3.2 Changes in Behavior)
endobj
2501 0 obj
-<< /S /GoTo /D (subsection.32.1.3) >>
+<< /S /GoTo /D (subsection.30.3.3) >>
endobj
2504 0 obj
-(32.1.3 The SWAT Home Page)
+(30.3.3 Charsets)
endobj
2505 0 obj
-<< /S /GoTo /D (subsection.32.1.4) >>
+<< /S /GoTo /D (subsection.30.3.4) >>
endobj
2508 0 obj
-(32.1.4 Global Settings)
+(30.3.4 Passdb Backends and Authentication)
endobj
2509 0 obj
-<< /S /GoTo /D (subsection.32.1.5) >>
+<< /S /GoTo /D (subsection.30.3.5) >>
endobj
2512 0 obj
-(32.1.5 Share Settings)
+(30.3.5 Charsets)
endobj
2513 0 obj
-<< /S /GoTo /D (subsection.32.1.6) >>
+<< /S /GoTo /D (subsection.30.3.6) >>
endobj
2516 0 obj
-(32.1.6 Printers Settings)
+(30.3.6 LDAP)
endobj
2517 0 obj
-<< /S /GoTo /D (subsection.32.1.7) >>
+<< /S /GoTo /D (subsubsection.30.3.6.1) >>
endobj
2520 0 obj
-(32.1.7 The SWAT Wizard)
+(30.3.6.1 New Schema)
endobj
2521 0 obj
-<< /S /GoTo /D (subsection.32.1.8) >>
+<< /S /GoTo /D (subsubsection.30.3.6.2) >>
endobj
2524 0 obj
-(32.1.8 The Status Page)
+(30.3.6.2 New Suffix for Searching)
endobj
2525 0 obj
-<< /S /GoTo /D (subsection.32.1.9) >>
+<< /S /GoTo /D (subsubsection.30.3.6.3) >>
endobj
2528 0 obj
-(32.1.9 The View Page)
+(30.3.6.3 IdMap LDAP support)
endobj
2529 0 obj
-<< /S /GoTo /D (subsection.32.1.10) >>
+<< /S /GoTo /D (chapter.31) >>
endobj
2532 0 obj
-(32.1.10 The Password Change Page)
+(31 Migration from NT4 PDC to Samba-3 PDC)
endobj
2533 0 obj
-<< /S /GoTo /D (part.5) >>
+<< /S /GoTo /D (section.31.1) >>
endobj
2536 0 obj
-(V Troubleshooting)
+(31.1 Planning and Getting Started)
endobj
2537 0 obj
-<< /S /GoTo /D (chapter.33) >>
+<< /S /GoTo /D (subsection.31.1.1) >>
endobj
2540 0 obj
-(33 The Samba checklist)
+(31.1.1 Objectives)
endobj
2541 0 obj
-<< /S /GoTo /D (section.33.1) >>
+<< /S /GoTo /D (subsubsection.31.1.1.1) >>
endobj
2544 0 obj
-(33.1 Introduction)
+(31.1.1.1 Domain Layout)
endobj
2545 0 obj
-<< /S /GoTo /D (section.33.2) >>
+<< /S /GoTo /D (subsubsection.31.1.1.2) >>
endobj
2548 0 obj
-(33.2 Assumptions)
+(31.1.1.2 Server Share and Directory Layout)
endobj
2549 0 obj
-<< /S /GoTo /D (section.33.3) >>
+<< /S /GoTo /D (subsubsection.31.1.1.3) >>
endobj
2552 0 obj
-(33.3 The tests)
+(31.1.1.3 Logon Scripts)
endobj
2553 0 obj
-<< /S /GoTo /D (section.33.4) >>
+<< /S /GoTo /D (subsubsection.31.1.1.4) >>
endobj
2556 0 obj
-(33.4 Still having troubles?)
+(31.1.1.4 Profile Migration/Creation)
endobj
2557 0 obj
-<< /S /GoTo /D (chapter.34) >>
+<< /S /GoTo /D (subsubsection.31.1.1.5) >>
endobj
2560 0 obj
-(34 Analysing and solving samba problems)
+(31.1.1.5 User and Group Accounts)
endobj
2561 0 obj
-<< /S /GoTo /D (section.34.1) >>
+<< /S /GoTo /D (subsection.31.1.2) >>
endobj
2564 0 obj
-(34.1 Diagnostics tools)
+(31.1.2 Steps In Migration Process)
endobj
2565 0 obj
-<< /S /GoTo /D (section.34.2) >>
+<< /S /GoTo /D (section.31.2) >>
endobj
2568 0 obj
-(34.2 Installing 'Network Monitor' on an NT Workstation or a Windows 9x box)
+(31.2 Migration Options)
endobj
2569 0 obj
-<< /S /GoTo /D (section.34.3) >>
+<< /S /GoTo /D (subsection.31.2.1) >>
endobj
2572 0 obj
-(34.3 Useful URLs)
+(31.2.1 Planning for Success)
endobj
2573 0 obj
-<< /S /GoTo /D (section.34.4) >>
+<< /S /GoTo /D (subsection.31.2.2) >>
endobj
2576 0 obj
-(34.4 Getting help from the mailing lists)
+(31.2.2 Samba-3 Implementation Choices)
endobj
2577 0 obj
-<< /S /GoTo /D (section.34.5) >>
+<< /S /GoTo /D (chapter.32) >>
endobj
2580 0 obj
-(34.5 How to get off the mailing lists)
+(32 SWAT - The Samba Web Administration Tool)
endobj
2581 0 obj
-<< /S /GoTo /D (chapter.35) >>
+<< /S /GoTo /D (section.32.1) >>
endobj
2584 0 obj
-(35 Reporting Bugs)
+(32.1 Features and Benefits)
endobj
2585 0 obj
-<< /S /GoTo /D (section.35.1) >>
+<< /S /GoTo /D (subsection.32.1.1) >>
endobj
2588 0 obj
-(35.1 Introduction)
+(32.1.1 Enabling SWAT for use)
endobj
2589 0 obj
-<< /S /GoTo /D (section.35.2) >>
+<< /S /GoTo /D (subsection.32.1.2) >>
endobj
2592 0 obj
-(35.2 General info)
+(32.1.2 Securing SWAT through SSL)
endobj
2593 0 obj
-<< /S /GoTo /D (section.35.3) >>
+<< /S /GoTo /D (subsection.32.1.3) >>
endobj
2596 0 obj
-(35.3 Debug levels)
+(32.1.3 The SWAT Home Page)
endobj
2597 0 obj
-<< /S /GoTo /D (section.35.4) >>
+<< /S /GoTo /D (subsection.32.1.4) >>
endobj
2600 0 obj
-(35.4 Internal errors)
+(32.1.4 Global Settings)
endobj
2601 0 obj
-<< /S /GoTo /D (section.35.5) >>
+<< /S /GoTo /D (subsection.32.1.5) >>
endobj
2604 0 obj
-(35.5 Attaching to a running process)
+(32.1.5 Share Settings)
endobj
2605 0 obj
-<< /S /GoTo /D (section.35.6) >>
+<< /S /GoTo /D (subsection.32.1.6) >>
endobj
2608 0 obj
-(35.6 Patches)
+(32.1.6 Printers Settings)
endobj
2609 0 obj
-<< /S /GoTo /D (part.6) >>
+<< /S /GoTo /D (subsection.32.1.7) >>
endobj
2612 0 obj
-(VI Appendixes)
+(32.1.7 The SWAT Wizard)
endobj
2613 0 obj
-<< /S /GoTo /D (chapter.36) >>
+<< /S /GoTo /D (subsection.32.1.8) >>
endobj
2616 0 obj
-(36 How to compile SAMBA)
+(32.1.8 The Status Page)
endobj
2617 0 obj
-<< /S /GoTo /D (section.36.1) >>
+<< /S /GoTo /D (subsection.32.1.9) >>
endobj
2620 0 obj
-(36.1 Access Samba source code via CVS)
+(32.1.9 The View Page)
endobj
2621 0 obj
-<< /S /GoTo /D (subsection.36.1.1) >>
+<< /S /GoTo /D (subsection.32.1.10) >>
endobj
2624 0 obj
-(36.1.1 Introduction)
+(32.1.10 The Password Change Page)
endobj
2625 0 obj
-<< /S /GoTo /D (subsection.36.1.2) >>
+<< /S /GoTo /D (part.5) >>
endobj
2628 0 obj
-(36.1.2 CVS Access to samba.org)
+(V Troubleshooting)
endobj
2629 0 obj
-<< /S /GoTo /D (subsubsection.36.1.2.1) >>
+<< /S /GoTo /D (chapter.33) >>
endobj
2632 0 obj
-(36.1.2.1 Access via CVSweb)
+(33 The Samba checklist)
endobj
2633 0 obj
-<< /S /GoTo /D (subsubsection.36.1.2.2) >>
+<< /S /GoTo /D (section.33.1) >>
endobj
2636 0 obj
-(36.1.2.2 Access via cvs)
+(33.1 Introduction)
endobj
2637 0 obj
-<< /S /GoTo /D (section.36.2) >>
+<< /S /GoTo /D (section.33.2) >>
endobj
2640 0 obj
-(36.2 Accessing the samba sources via rsync and ftp)
+(33.2 Assumptions)
endobj
2641 0 obj
-<< /S /GoTo /D (section.36.3) >>
+<< /S /GoTo /D (section.33.3) >>
endobj
2644 0 obj
-(36.3 Verifying Samba's PGP signature)
+(33.3 The tests)
endobj
2645 0 obj
-<< /S /GoTo /D (section.36.4) >>
+<< /S /GoTo /D (chapter.34) >>
endobj
2648 0 obj
-(36.4 Building the Binaries)
+(34 Analysing and solving samba problems)
endobj
2649 0 obj
-<< /S /GoTo /D (subsection.36.4.1) >>
+<< /S /GoTo /D (section.34.1) >>
endobj
2652 0 obj
-(36.4.1 Compiling samba with Active Directory support)
+(34.1 Diagnostics tools)
endobj
2653 0 obj
-<< /S /GoTo /D (subsubsection.36.4.1.1) >>
+<< /S /GoTo /D (subsection.34.1.1) >>
endobj
2656 0 obj
-(36.4.1.1 Installing the required packages for Debian)
+(34.1.1 Debugging with Samba itself)
endobj
2657 0 obj
-<< /S /GoTo /D (subsubsection.36.4.1.2) >>
+<< /S /GoTo /D (subsection.34.1.2) >>
endobj
2660 0 obj
-(36.4.1.2 Installing the required packages for RedHat)
+(34.1.2 Tcpdump)
endobj
2661 0 obj
-<< /S /GoTo /D (section.36.5) >>
+<< /S /GoTo /D (subsection.34.1.3) >>
endobj
2664 0 obj
-(36.5 Starting the smbd and nmbd)
+(34.1.3 Ethereal)
endobj
2665 0 obj
-<< /S /GoTo /D (subsection.36.5.1) >>
+<< /S /GoTo /D (subsection.34.1.4) >>
endobj
2668 0 obj
-(36.5.1 Starting from inetd.conf)
+(34.1.4 The Windows Network Monitor)
endobj
2669 0 obj
-<< /S /GoTo /D (subsection.36.5.2) >>
+<< /S /GoTo /D (subsubsection.34.1.4.1) >>
endobj
2672 0 obj
-(36.5.2 Alternative: starting it as a daemon)
+(34.1.4.1 Installing 'Network Monitor' on an NT Workstation)
endobj
2673 0 obj
-<< /S /GoTo /D (section.36.6) >>
+<< /S /GoTo /D (subsubsection.34.1.4.2) >>
endobj
2676 0 obj
-(36.6 Common Errors)
+(34.1.4.2 Installing 'Network Monitor' on an 9x Workstation)
endobj
2677 0 obj
-<< /S /GoTo /D (chapter.37) >>
+<< /S /GoTo /D (section.34.2) >>
endobj
2680 0 obj
-(37 Portability)
+(34.2 Useful URLs)
endobj
2681 0 obj
-<< /S /GoTo /D (section.37.1) >>
+<< /S /GoTo /D (section.34.3) >>
endobj
2684 0 obj
-(37.1 HPUX)
+(34.3 Getting help from the mailing lists)
endobj
2685 0 obj
-<< /S /GoTo /D (section.37.2) >>
+<< /S /GoTo /D (section.34.4) >>
endobj
2688 0 obj
-(37.2 SCO Unix)
+(34.4 How to get off the mailing lists)
endobj
2689 0 obj
-<< /S /GoTo /D (section.37.3) >>
+<< /S /GoTo /D (chapter.35) >>
endobj
2692 0 obj
-(37.3 DNIX)
+(35 Reporting Bugs)
endobj
2693 0 obj
-<< /S /GoTo /D (section.37.4) >>
+<< /S /GoTo /D (section.35.1) >>
endobj
2696 0 obj
-(37.4 RedHat Linux Rembrandt-II)
+(35.1 Introduction)
endobj
2697 0 obj
-<< /S /GoTo /D (section.37.5) >>
+<< /S /GoTo /D (section.35.2) >>
endobj
2700 0 obj
-(37.5 AIX)
+(35.2 General info)
endobj
2701 0 obj
-<< /S /GoTo /D (subsection.37.5.1) >>
+<< /S /GoTo /D (section.35.3) >>
endobj
2704 0 obj
-(37.5.1 Sequential Read Ahead)
+(35.3 Debug levels)
endobj
2705 0 obj
-<< /S /GoTo /D (section.37.6) >>
+<< /S /GoTo /D (section.35.4) >>
endobj
2708 0 obj
-(37.6 Solaris)
+(35.4 Internal errors)
endobj
2709 0 obj
-<< /S /GoTo /D (subsection.37.6.1) >>
+<< /S /GoTo /D (section.35.5) >>
endobj
2712 0 obj
-(37.6.1 Locking improvements)
+(35.5 Attaching to a running process)
endobj
2713 0 obj
-<< /S /GoTo /D (subsection.37.6.2) >>
+<< /S /GoTo /D (section.35.6) >>
endobj
2716 0 obj
-(37.6.2 Winbind on Solaris 9)
+(35.6 Patches)
endobj
2717 0 obj
-<< /S /GoTo /D (chapter.38) >>
+<< /S /GoTo /D (part.6) >>
endobj
2720 0 obj
-(38 Samba and other CIFS clients)
+(VI Appendixes)
endobj
2721 0 obj
-<< /S /GoTo /D (section.38.1) >>
+<< /S /GoTo /D (chapter.36) >>
endobj
2724 0 obj
-(38.1 Macintosh clients?)
+(36 How to compile Samba)
endobj
2725 0 obj
-<< /S /GoTo /D (section.38.2) >>
+<< /S /GoTo /D (section.36.1) >>
endobj
2728 0 obj
-(38.2 OS2 Client)
+(36.1 Access Samba source code via CVS)
endobj
2729 0 obj
-<< /S /GoTo /D (subsection.38.2.1) >>
+<< /S /GoTo /D (subsection.36.1.1) >>
endobj
2732 0 obj
-(38.2.1 How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?)
+(36.1.1 Introduction)
endobj
2733 0 obj
-<< /S /GoTo /D (subsection.38.2.2) >>
+<< /S /GoTo /D (subsection.36.1.2) >>
endobj
2736 0 obj
-(38.2.2 How can I configure OS/2 Warp 3 \(not Connect\), OS/2 1.2, 1.3 or 2.x for Samba?)
+(36.1.2 CVS Access to samba.org)
endobj
2737 0 obj
-<< /S /GoTo /D (subsection.38.2.3) >>
+<< /S /GoTo /D (subsubsection.36.1.2.1) >>
endobj
2740 0 obj
-(38.2.3 How do I get printer driver download working for OS/2 clients?)
+(36.1.2.1 Access via CVSweb)
endobj
2741 0 obj
-<< /S /GoTo /D (section.38.3) >>
+<< /S /GoTo /D (subsubsection.36.1.2.2) >>
endobj
2744 0 obj
-(38.3 Windows for Workgroups)
+(36.1.2.2 Access via cvs)
endobj
2745 0 obj
-<< /S /GoTo /D (subsection.38.3.1) >>
+<< /S /GoTo /D (section.36.2) >>
endobj
2748 0 obj
-(38.3.1 Use latest TCP/IP stack from Microsoft)
+(36.2 Accessing the samba sources via rsync and ftp)
endobj
2749 0 obj
-<< /S /GoTo /D (subsection.38.3.2) >>
+<< /S /GoTo /D (section.36.3) >>
endobj
2752 0 obj
-(38.3.2 Delete .pwl files after password change)
+(36.3 Verifying Samba's PGP signature)
endobj
2753 0 obj
-<< /S /GoTo /D (subsection.38.3.3) >>
+<< /S /GoTo /D (section.36.4) >>
endobj
2756 0 obj
-(38.3.3 Configure WfW password handling)
+(36.4 Building the Binaries)
endobj
2757 0 obj
-<< /S /GoTo /D (subsection.38.3.4) >>
+<< /S /GoTo /D (subsection.36.4.1) >>
endobj
2760 0 obj
-(38.3.4 Case handling of passwords)
+(36.4.1 Compiling samba with Active Directory support)
endobj
2761 0 obj
-<< /S /GoTo /D (subsection.38.3.5) >>
+<< /S /GoTo /D (subsubsection.36.4.1.1) >>
endobj
2764 0 obj
-(38.3.5 Use TCP/IP as default protocol)
+(36.4.1.1 Installing the required packages for Debian)
endobj
2765 0 obj
-<< /S /GoTo /D (subsection.38.3.6) >>
+<< /S /GoTo /D (subsubsection.36.4.1.2) >>
endobj
2768 0 obj
-(38.3.6 Speed improvement)
+(36.4.1.2 Installing the required packages for RedHat)
endobj
2769 0 obj
-<< /S /GoTo /D (section.38.4) >>
+<< /S /GoTo /D (section.36.5) >>
endobj
2772 0 obj
-(38.4 Windows '95/'98)
+(36.5 Starting the smbd and nmbd)
endobj
2773 0 obj
-<< /S /GoTo /D (subsection.38.4.1) >>
+<< /S /GoTo /D (subsection.36.5.1) >>
endobj
2776 0 obj
-(38.4.1 Speed improvement)
+(36.5.1 Starting from inetd.conf)
endobj
2777 0 obj
-<< /S /GoTo /D (section.38.5) >>
+<< /S /GoTo /D (subsection.36.5.2) >>
endobj
2780 0 obj
-(38.5 Windows 2000 Service Pack 2)
+(36.5.2 Alternative: starting it as a daemon)
endobj
2781 0 obj
-<< /S /GoTo /D (section.38.6) >>
+<< /S /GoTo /D (chapter.37) >>
endobj
2784 0 obj
-(38.6 Windows NT 3.1)
+(37 Portability)
endobj
2785 0 obj
-<< /S /GoTo /D (chapter.39) >>
+<< /S /GoTo /D (section.37.1) >>
endobj
2788 0 obj
-(39 Samba Performance Tuning)
+(37.1 HPUX)
endobj
2789 0 obj
-<< /S /GoTo /D (section.39.1) >>
+<< /S /GoTo /D (section.37.2) >>
endobj
2792 0 obj
-(39.1 Comparisons)
+(37.2 SCO UNIX)
endobj
2793 0 obj
-<< /S /GoTo /D (section.39.2) >>
+<< /S /GoTo /D (section.37.3) >>
endobj
2796 0 obj
-(39.2 Socket options)
+(37.3 DNIX)
endobj
2797 0 obj
-<< /S /GoTo /D (section.39.3) >>
+<< /S /GoTo /D (section.37.4) >>
endobj
2800 0 obj
-(39.3 Read size)
+(37.4 RedHat Linux Rembrandt-II)
endobj
2801 0 obj
-<< /S /GoTo /D (section.39.4) >>
+<< /S /GoTo /D (section.37.5) >>
endobj
2804 0 obj
-(39.4 Max xmit)
+(37.5 AIX)
endobj
2805 0 obj
-<< /S /GoTo /D (section.39.5) >>
+<< /S /GoTo /D (subsection.37.5.1) >>
endobj
2808 0 obj
-(39.5 Log level)
+(37.5.1 Sequential Read Ahead)
endobj
2809 0 obj
-<< /S /GoTo /D (section.39.6) >>
+<< /S /GoTo /D (section.37.6) >>
endobj
2812 0 obj
-(39.6 Read raw)
+(37.6 Solaris)
endobj
2813 0 obj
-<< /S /GoTo /D (section.39.7) >>
+<< /S /GoTo /D (subsection.37.6.1) >>
endobj
2816 0 obj
-(39.7 Write raw)
+(37.6.1 Locking improvements)
endobj
2817 0 obj
-<< /S /GoTo /D (section.39.8) >>
+<< /S /GoTo /D (subsection.37.6.2) >>
endobj
2820 0 obj
-(39.8 Slow Logins)
+(37.6.2 Winbind on Solaris 9)
endobj
2821 0 obj
-<< /S /GoTo /D (section.39.9) >>
+<< /S /GoTo /D (chapter.38) >>
endobj
2824 0 obj
-(39.9 Client tuning)
+(38 Samba and other CIFS clients)
endobj
2825 0 obj
-<< /S /GoTo /D (section.39.10) >>
+<< /S /GoTo /D (section.38.1) >>
endobj
2828 0 obj
-(39.10 Samba performance problem due changing kernel)
+(38.1 Macintosh clients?)
endobj
2829 0 obj
-<< /S /GoTo /D (section.39.11) >>
+<< /S /GoTo /D (section.38.2) >>
endobj
2832 0 obj
-(39.11 Corrupt tdb Files)
+(38.2 OS2 Client)
endobj
2833 0 obj
-<< /S /GoTo /D (chapter.40) >>
+<< /S /GoTo /D (subsection.38.2.1) >>
endobj
2836 0 obj
-(40 DNS and DHCP Configuration Guide)
+(38.2.1 Configuring OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba)
endobj
2837 0 obj
-<< /S /GoTo /D (section.40.1) >>
+<< /S /GoTo /D (subsection.38.2.2) >>
endobj
2840 0 obj
-(40.1 Note)
+(38.2.2 Configuring OS/2 Warp 3 \(not Connect\), OS/2 1.2, 1.3 or 2.x for Samba)
endobj
2841 0 obj
-<< /S /GoTo /D (chapter.41) >>
+<< /S /GoTo /D (subsection.38.2.3) >>
endobj
2844 0 obj
-(41 Further Resources)
+(38.2.3 Printer driver download for for OS/2 clients?)
endobj
2845 0 obj
-<< /S /GoTo /D (section.41.1) >>
+<< /S /GoTo /D (section.38.3) >>
endobj
2848 0 obj
-(41.1 Websites)
+(38.3 Windows for Workgroups)
endobj
2849 0 obj
-<< /S /GoTo /D (section.41.2) >>
+<< /S /GoTo /D (subsection.38.3.1) >>
endobj
2852 0 obj
-(41.2 Related updates from Microsoft)
+(38.3.1 Latest TCP/IP stack from Microsoft)
endobj
2853 0 obj
-<< /S /GoTo /D (section.41.3) >>
+<< /S /GoTo /D (subsection.38.3.2) >>
endobj
2856 0 obj
-(41.3 Books)
+(38.3.2 Delete .pwl files after password change)
endobj
2857 0 obj
-<< /S /GoTo /D [2858 0 R /Fit ] >>
+<< /S /GoTo /D (subsection.38.3.3) >>
+endobj
+2860 0 obj
+(38.3.3 Configuring WfW password handling)
+endobj
+2861 0 obj
+<< /S /GoTo /D (subsection.38.3.4) >>
endobj
-2860 0 obj <<
-/Length 223
+2864 0 obj
+(38.3.4 Case handling of passwords)
+endobj
+2865 0 obj
+<< /S /GoTo /D (subsection.38.3.5) >>
+endobj
+2868 0 obj
+(38.3.5 Use TCP/IP as default protocol)
+endobj
+2869 0 obj
+<< /S /GoTo /D (subsection.38.3.6) >>
+endobj
+2872 0 obj
+(38.3.6 Speed improvement)
+endobj
+2873 0 obj
+<< /S /GoTo /D (section.38.4) >>
+endobj
+2876 0 obj
+(38.4 Windows '95/'98)
+endobj
+2877 0 obj
+<< /S /GoTo /D (subsection.38.4.1) >>
+endobj
+2880 0 obj
+(38.4.1 Speed improvement)
+endobj
+2881 0 obj
+<< /S /GoTo /D (section.38.5) >>
+endobj
+2884 0 obj
+(38.5 Windows 2000 Service Pack 2)
+endobj
+2885 0 obj
+<< /S /GoTo /D (section.38.6) >>
+endobj
+2888 0 obj
+(38.6 Windows NT 3.1)
+endobj
+2889 0 obj
+<< /S /GoTo /D (chapter.39) >>
+endobj
+2892 0 obj
+(39 Samba Performance Tuning)
+endobj
+2893 0 obj
+<< /S /GoTo /D (section.39.1) >>
+endobj
+2896 0 obj
+(39.1 Comparisons)
+endobj
+2897 0 obj
+<< /S /GoTo /D (section.39.2) >>
+endobj
+2900 0 obj
+(39.2 Socket options)
+endobj
+2901 0 obj
+<< /S /GoTo /D (section.39.3) >>
+endobj
+2904 0 obj
+(39.3 Read size)
+endobj
+2905 0 obj
+<< /S /GoTo /D (section.39.4) >>
+endobj
+2908 0 obj
+(39.4 Max xmit)
+endobj
+2909 0 obj
+<< /S /GoTo /D (section.39.5) >>
+endobj
+2912 0 obj
+(39.5 Log level)
+endobj
+2913 0 obj
+<< /S /GoTo /D (section.39.6) >>
+endobj
+2916 0 obj
+(39.6 Read raw)
+endobj
+2917 0 obj
+<< /S /GoTo /D (section.39.7) >>
+endobj
+2920 0 obj
+(39.7 Write raw)
+endobj
+2921 0 obj
+<< /S /GoTo /D (section.39.8) >>
+endobj
+2924 0 obj
+(39.8 Slow Logins)
+endobj
+2925 0 obj
+<< /S /GoTo /D (section.39.9) >>
+endobj
+2928 0 obj
+(39.9 Client tuning)
+endobj
+2929 0 obj
+<< /S /GoTo /D (section.39.10) >>
+endobj
+2932 0 obj
+(39.10 Samba performance problem due changing kernel)
+endobj
+2933 0 obj
+<< /S /GoTo /D (section.39.11) >>
+endobj
+2936 0 obj
+(39.11 Corrupt tdb Files)
+endobj
+2937 0 obj
+<< /S /GoTo /D (chapter.40) >>
+endobj
+2940 0 obj
+(40 DNS and DHCP Configuration Guide)
+endobj
+2941 0 obj
+<< /S /GoTo /D (section.40.1) >>
+endobj
+2944 0 obj
+(40.1 Note)
+endobj
+2945 0 obj
+<< /S /GoTo /D (chapter.41) >>
+endobj
+2948 0 obj
+(41 Further Resources)
+endobj
+2949 0 obj
+<< /S /GoTo /D (section.41.1) >>
+endobj
+2952 0 obj
+(41.1 Websites)
+endobj
+2953 0 obj
+<< /S /GoTo /D (section.41.2) >>
+endobj
+2956 0 obj
+(41.2 Related updates from Microsoft)
+endobj
+2957 0 obj
+<< /S /GoTo /D [2958 0 R /Fit ] >>
+endobj
+2960 0 obj <<
+/Length 236
/Filter /FlateDecode
>>
stream
-xڍ?O1 sC'N:jAl-= ]=>W)dPydRLVhV<Tt$Bd!h= 3 IS"D&nɨiR{#)Hy{vdǵc~iߵZm{6~)jV.ɓ
+xڍJ0}93̤=vYA7 u]]-hV\fd$ CHRC UcAm UPcJϩg0iZ,XukHިFj7mqu@ +3Ӿ>~SzvM=|uü>; /G*ۻ⺽_^HQV
endobj
-2858 0 obj <<
+2958 0 obj <<
/Type /Page
-/Contents 2860 0 R
-/Resources 2859 0 R
+/Contents 2960 0 R
+/Resources 2959 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 2869 0 R
+/Parent 2969 0 R
>> endobj
-2861 0 obj <<
-/D [2858 0 R /XYZ 85.039 786.531 null]
+2961 0 obj <<
+/D [2958 0 R /XYZ 85.039 786.531 null]
>> endobj
-2862 0 obj <<
-/D [2858 0 R /XYZ 85.039 766.606 null]
+2962 0 obj <<
+/D [2958 0 R /XYZ 85.039 766.606 null]
>> endobj
-2859 0 obj <<
-/Font << /F20 2865 0 R /F21 2868 0 R >>
+2959 0 obj <<
+/Font << /F20 2965 0 R /F21 2968 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2872 0 obj <<
-/Length 1373
+2972 0 obj <<
+/Length 1451
/Filter /FlateDecode
>>
stream
-xڕWKs6Wh|)5$[N%!~ EIvgL`wY@lg2ΊM0&tq$i s1pQ4̏_d~ˮʿն %z2gAe[gyˢl#, ߷tN,M)ҚhQ_R knQzj[rK'(y%j?_$ivn;}1(IL##$5t=9M)rz^|;LJߔrU}SeypE@b5oН_!ڷm\Қhn8W8gbO9`BzȫbpvL]O˿ыOG!$tY44F$8_#5JXT&
-Wpj0J}RƁK)n0ڍ^JY=W۾ww<NڷFGY|P~;úBp?\w+B1.ch##*eMQYaϘt/I \Dď#5g|gj_TRsдثlf7Sjpxjq֗ݕzoetTHUThKMx}u)
-\~7:>)O͵@Yx_LUFK7=;LGi^p;^6w&}b s8ȱ\ N7=}}Rrҭ*[}̗ *e&}^4cŕnhqI2=mAdž6%BNت57y<Xh~@Bbq.cOLW; :0ݏ D^| Vf)\8<ix9$zQY6)pnu'p#dj)cSD
-
-˽hwmJBzx7$Ksjeq;Tݳ+tyD2"1v> 2l4<U?15XM(<Nsg~qU3Y
-n-g
-u[eZTbI#c8Wn30&Ő5 _
-hIVNB:wn.!ɅS[ =uULҸ
+xڍWK60RHz3A.)=4=VV I)r Xp838/E?ȓ0"0bQV^ ǡ&J+Daj""Y(,b~Z4L,?zW˕̒`\Y`?T4OJY18,ڶd~\Wx8X%hڀ+'2.AOG<jpJR뷀J a@6';!FYώ|j["֜8g{
+#eūz@ w(U$Iq8q:?'!Wv
+y9 L<n?><Nm}#L]3:ʄ#
+40:"B~;0ָVtцEo"┯1! Fػ!H$%BT"r:ܫ 5sh[Ӱ/av2k 1];E[5J/m]m\ZJ],Bsx&-&+C?t_#T݄ܶJFY(.l5Gھ~AL&j~m:T (oGg ^Ew2S*m<KBB1 -dQpT1wm8N\*ʃœ帎m~͗I96Qv穿u۶-!R|@3МP莣; 0GsfB# eV;N5:{J$c惭RTRsjL VoVbGE2D0rY\<)4"O_3&l- 8K{bI5*N`
+6UGk
+;=d&Pe} Eox8 ܾs@23nQk1
+syFR#jq=8U6IW]J's'q6s@Puݫ@h'pqs?T΍-onkA*&-چy&փcؘkNl͠Y1^h{
+]CH L)m禼cmy|vԹ-e᫛ީCk܌A6Ndu`#9S[^tZ¤\0}p8p8gyH0C&=9:(ks.߲WS'̾.#ɧw8<wd<̘<l|C!<'uX؏e|>%b'䬦GLB%wendstream
endobj
-2871 0 obj <<
+2971 0 obj <<
/Type /Page
-/Contents 2872 0 R
-/Resources 2870 0 R
+/Contents 2972 0 R
+/Resources 2970 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 2869 0 R
-/Annots [ 2877 0 R 2881 0 R 2882 0 R 2883 0 R ]
+/Parent 2969 0 R
+/Annots [ 2977 0 R 2981 0 R 2982 0 R 2983 0 R ]
>> endobj
-2877 0 obj <<
+2977 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
/Rect [210.406 518.803 332.67 530.796]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.samba.org/)>>
>> endobj
-2881 0 obj <<
+2981 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
/Rect [138.346 504.951 215.702 517.852]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-2882 0 obj <<
+2982 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
/Rect [220.377 504.951 304.46 517.852]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2883 0 obj <<
+2983 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
/Rect [319.468 504.951 425.172 517.852]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jerry@samba.org)>>
>> endobj
-2873 0 obj <<
-/D [2871 0 R /XYZ 85.039 786.531 null]
+2973 0 obj <<
+/D [2971 0 R /XYZ 85.039 786.531 null]
>> endobj
-2870 0 obj <<
-/Font << /F15 2876 0 R /F35 2880 0 R >>
+2970 0 obj <<
+/Font << /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-2886 0 obj <<
-/Length 2140
+2986 0 obj <<
+/Length 523
/Filter /FlateDecode
>>
stream
-xks6~>R3͍:%6vۛihD$ HE*dI8Hp , OǸ
-D?xOzB3j|Gy 0o{9a؟\O1U~ڻ<s6J_@{Lkwfc]!UCuCW_dMC.Cq2màBLqFL 1) MKCx |
-@
--CG$v2z;sSC{Oa!"7@z
-eD 6@΁[[Y
-tr#LEV(hZ . ~{(TtHtȁVltOYf~gX 6PG#jy!* CVR.aUob*,P,pv)sׁ<@.lNlԸ7[g^>#g-ekd5%ۿp& ϓ( 3pKnGmy{LigJ3>ǵ*y-DSWH4߽4ވs' Ey~ )߻b
-=&T[SHh7f\Ϭ{T> ӣv(l]vb
-oN_.)zD\/_D]EIS_qe˃JpSb^6M \-"Gj*e.RNӱ.:sFxiDr
-sмus2_H:J߬J (a+Mmo#.Iib-@9*c^3uO趙:#.?0" &Ҽ|
-V*g7z>iu,݀mi;AS[9<Vw._6W¼}^f ɺpVݷ2$Eb5|QyOG+_b{9fSًa
-[τq|nEz͟uq1UgKMPme
+x}SM0Wh8Jm*ZZz
endobj
-2885 0 obj <<
+2985 0 obj <<
/Type /Page
-/Contents 2886 0 R
-/Resources 2884 0 R
+/Contents 2986 0 R
+/Resources 2984 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 2869 0 R
-/Annots [ 2891 0 R 2892 0 R 2899 0 R 2900 0 R 2901 0 R 2902 0 R 2903 0 R 2904 0 R 2905 0 R 2906 0 R 2907 0 R 2908 0 R 2909 0 R 2910 0 R 2911 0 R 2912 0 R 2913 0 R 2914 0 R 2915 0 R 2916 0 R 2917 0 R 2918 0 R 2919 0 R 2920 0 R 2921 0 R 2922 0 R 2923 0 R 2924 0 R 2925 0 R 2926 0 R 2927 0 R 2928 0 R 2929 0 R 2930 0 R 2931 0 R 2932 0 R 2933 0 R 2934 0 R 2935 0 R 2936 0 R 2937 0 R 2938 0 R 2939 0 R 2940 0 R 2941 0 R 2942 0 R 2943 0 R 2944 0 R 2945 0 R 2946 0 R ]
+/Parent 2969 0 R
+/Annots [ 2989 0 R ]
>> endobj
-2891 0 obj <<
+2989 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [156.148 700.189 341.202 711.314]
+/Rect [97.376 585.447 299.821 597.439]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.fsf.org/licenses/gpl.txt)>>
>> endobj
-2892 0 obj <<
+2987 0 obj <<
+/D [2985 0 R /XYZ 85.039 786.531 null]
+>> endobj
+2988 0 obj <<
+/D [2985 0 R /XYZ 85.039 639.047 null]
+>> endobj
+2984 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+2992 0 obj <<
+/Length 1726
+/Filter /FlateDecode
+>>
+stream
+xڽZn6+,K|
+}I(a X^ eR`E
+U!t!@#ŧ3\ܚ'ψGs9p?] 0I#\ޜb$+n>D!*n+˶mvp`<k*>~݇ TH 10$UA0X =2㰢l)}0?֤Wkhw^^GG)^ &UUf$X* FR
+)!p`8fEJ38!1B'_ll~6@|[bX:b*#Q4_A43Z[G/0lZ[PݞͿ}R"']LmX13zĖ,2R 'fCfC^ީo7}aJ.fm,J"h{.J"Y` Irƒsb4D1 "R6 n{[0BD%%Ŧ.)l>x0L:hm>[j*?n-\I&HSKD<F ZpG1-Usytiuv lq5`ΖNJL|;/W۴+ 90l&)hcKXˆK%҃9{L%xu욑S 2%g*.мd ){thxM'/+"2#3c2.%P0f f3b
+r!
+FRΟ:n{<mv~?~&&A1b`~t)I׶PjA( cZgxCm>Y@DGGLd^ Q,Swi^f?
+^ "i͏OM֩~%bZN+T!ń{^* "5}=^d4ds$L5|`"AK*2=&uz^]nĘxD<!Jɔ&C/l7@NKxX5 (x=feZ>"K6
+QN:{zq﻾=tGPmeZ9Uc!͹0'3\0E
+Z#nr$0I "Xc,u/s.endstream
+endobj
+2991 0 obj <<
+/Type /Page
+/Contents 2992 0 R
+/Resources 2990 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 2969 0 R
+/Annots [ 2995 0 R 3002 0 R 3003 0 R 3004 0 R 3005 0 R 3006 0 R 3007 0 R 3008 0 R 3009 0 R 3010 0 R 3011 0 R 3012 0 R 3013 0 R 3014 0 R 3015 0 R 3016 0 R 3017 0 R 3018 0 R 3019 0 R 3020 0 R ]
+>> endobj
+2995 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 675.66 216.99 684.571]
+/Rect [84.043 614.97 194.551 624.538]
/Subtype /Link
/A << /S /GoTo /D (IntroSMB) >>
>> endobj
-2899 0 obj <<
+3002 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [230.74 660.927 316.059 671.775]
+/Rect [193.467 585.75 286.703 597.439]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:david@lechnyr.com)>>
>> endobj
-2900 0 obj <<
+3003 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 650.068 262.89 658.979]
+/Rect [84.043 560.773 243.278 570.341]
/Subtype /Link
/A << /S /GoTo /D (install) >>
>> endobj
-2901 0 obj <<
+3004 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [237.686 635.335 317 646.183]
+/Rect [201.074 531.553 287.733 543.243]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tridge@samba.org)>>
>> endobj
-2902 0 obj <<
+3005 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 623.38 316.308 634.228]
+/Rect [213.498 504.455 301.672 516.144]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-2903 0 obj <<
+3006 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 611.424 294.197 622.273]
+/Rect [205.528 477.356 277.612 489.046]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2904 0 obj <<
+3007 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 586.673 240.908 597.522]
+/Rect [84.043 423.16 219.945 434.849]
/Subtype /Link
/A << /S /GoTo /D (FastStart) >>
>> endobj
-2905 0 obj <<
+3008 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 573.878 294.197 584.726]
+/Rect [205.528 396.061 277.612 407.751]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2906 0 obj <<
+3009 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 561.082 266.57 571.93]
+/Rect [84.043 368.963 246.551 380.652]
/Subtype /Link
/A << /S /GoTo /D (ServerType) >>
>> endobj
-2907 0 obj <<
+3010 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [237.686 548.286 317 559.134]
+/Rect [201.074 341.864 287.733 353.554]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tridge@samba.org)>>
>> endobj
-2908 0 obj <<
+3011 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 536.331 316.308 547.179]
+/Rect [213.498 314.766 301.672 326.456]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-2909 0 obj <<
+3012 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 524.376 294.197 535.224]
+/Rect [205.528 287.668 277.612 299.357]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2910 0 obj <<
+3013 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 513.517 186.188 522.428]
+/Rect [84.043 262.69 163.187 272.259]
/Subtype /Link
/A << /S /GoTo /D (samba-pdc) >>
>> endobj
-2911 0 obj <<
+3014 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 498.784 294.197 509.632]
+/Rect [205.528 233.471 277.612 245.16]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2912 0 obj <<
+3015 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [227.821 486.829 302.181 497.677]
+/Rect [227.149 205.766 308.384 218.668]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jerry@samba.org)>>
>> endobj
-2913 0 obj <<
+3016 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [229.606 474.874 321.068 485.722]
+/Rect [192.225 179.274 292.187 190.964]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:dbannon@samba.org)>>
>> endobj
-2914 0 obj <<
+3017 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 462.078 223.714 472.926]
+/Rect [84.043 152.176 202.43 163.865]
/Subtype /Link
/A << /S /GoTo /D (samba-bdc) >>
>> endobj
-2915 0 obj <<
+3018 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 449.282 294.197 460.13]
+/Rect [205.528 125.077 277.612 136.767]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2916 0 obj <<
+3019 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [237.52 438.874 364.24 448.175]
+/Rect [200.892 99.674 339.46 109.668]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:Volker.Lendecke@SerNet.DE)>>
>> endobj
-2917 0 obj <<
+3020 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 424.531 208.447 435.379]
+/Rect [84.043 70.88 185.672 82.57]
/Subtype /Link
/A << /S /GoTo /D (domain-member) >>
>> endobj
-2918 0 obj <<
+2993 0 obj <<
+/D [2991 0 R /XYZ 85.039 786.531 null]
+>> endobj
+2994 0 obj <<
+/D [2991 0 R /XYZ 85.039 643.064 null]
+>> endobj
+2990 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F38 3001 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3030 0 obj <<
+/Length 2055
+/Filter /FlateDecode
+>>
+stream
+xڽ[n9}W1f<=
+ e.04Cnڰ߯=wU#=7ط@C B`t~y=W3j$#g>dœͺ~S3Bj~=#gߛJ I8a1V(
+Rr1O.fN9ӌTY5^Q36AwggC5Dr #-|FF.n'ůb)٢YEr_ԫ2UUP:t\)+r>Vh,⍷^bh\|Ҽm&DIJUh(VJB޻TƩp8 b J!taxgMۨ+7j& E*H.ب?ztB6i\?5ʂPsb"`lQ3-pO &83Ę.GiͪT[φ~D7]A3AjSlQ]iT4hZmb%5 `)UX0qK0&1J;#F|j6йBI.X\I&ZcŀqѠfݵzkS;Vp"@c&Rڃ a{XP` c<k6v0;iFfTGb;O T@[Ţ2. 2Rfh[ɸj\ ٓwToBqi @Ezgfux&'HӴOK5<zL.T* z;"3y/PNȊļ݃R>}>5oԧmt6aކJ$B aU!zhWG>Ѷyvyu-?v
+c2WwCޭտ+DdNi3I
+DtdRRHPt8ēGJEg$KpBh@(% Cb10}vجuV[`fl`FM{Ff0ZIvQe>'\rR JJ%+
+d fg<VXFiAkC``b|%Bq04 B ÆN
+`Çmð m_K,,#{:奙%LUTv.Boqmrd?`<wִn2LeRMប
+J
+ZufR&`A$bH
+`. @K8 XbszAVS(.h-'
+P[N-'4D-+B=0I,(0}1ӑ\6OG٧#P@O5Edn
+ALaAIS 1l
+XH}z>Gk:cs$8Jb+N*&n2 F82 3f6uGx5/붿.
+9T=zEz9_ O=~tzj*;31>w@%2 R{N::sMX6W݀JDnA3g?^m{k;t˶w_]K O\j0#s!s{J&C Ϛ}Ʋ%|q]nAr(u!b^j/5i%
+endobj
+3029 0 obj <<
+/Type /Page
+/Contents 3030 0 R
+/Resources 3028 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 2969 0 R
+/Annots [ 3032 0 R 3033 0 R 3034 0 R 3035 0 R 3036 0 R 3037 0 R 3038 0 R 3039 0 R 3040 0 R 3041 0 R 3042 0 R 3043 0 R 3044 0 R 3045 0 R 3046 0 R 3047 0 R 3048 0 R 3049 0 R 3050 0 R 3051 0 R 3052 0 R 3053 0 R 3054 0 R 3055 0 R 3056 0 R ]
+>> endobj
+3032 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 411.735 294.197 422.583]
+/Rect [205.528 752.53 277.612 764.219]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2919 0 obj <<
+3033 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [231.487 399.78 297.241 410.628]
+/Rect [194.286 725.431 266.096 737.121]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jra@samba.org)>>
>> endobj
-2920 0 obj <<
+3034 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [227.821 387.825 302.181 398.673]
+/Rect [227.149 697.727 308.384 710.629]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jerry@samba.org)>>
>> endobj
-2921 0 obj <<
+3035 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [237.686 375.87 317 386.718]
+/Rect [201.074 671.235 287.733 682.924]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tridge@samba.org)>>
>> endobj
-2922 0 obj <<
+3036 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 363.914 316.308 374.763]
+/Rect [213.498 644.136 301.672 655.826]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-2923 0 obj <<
+3037 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 353.056 206.025 361.967]
+/Rect [84.043 619.159 182.824 628.727]
/Subtype /Link
/A << /S /GoTo /D (StandAloneServer) >>
>> endobj
-2924 0 obj <<
+3038 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 338.323 294.197 349.171]
+/Rect [205.528 589.939 277.612 601.629]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2925 0 obj <<
+3039 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 325.527 310.315 336.375]
+/Rect [84.043 562.841 294.415 574.53]
/Subtype /Link
/A << /S /GoTo /D (ClientConfig) >>
>> endobj
-2926 0 obj <<
+3040 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 312.731 294.197 323.579]
+/Rect [205.528 535.743 277.612 547.432]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2927 0 obj <<
+3041 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 299.382 333.736 311.337]
+/Rect [84.043 508.038 317.354 520.94]
/Subtype /Link
/A << /S /GoTo /D (NetworkBrowsing) >>
>> endobj
-2928 0 obj <<
+3042 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 287.139 294.197 297.988]
+/Rect [205.528 481.546 277.612 493.235]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2929 0 obj <<
+3043 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [213.498 454.447 301.672 466.137]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
+>> endobj
+3044 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 276.281 257.687 285.192]
+/Rect [84.043 429.47 237.551 439.039]
/Subtype /Link
/A << /S /GoTo /D (passdb) >>
>> endobj
-2930 0 obj <<
+3045 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 261.548 316.308 272.396]
+/Rect [213.498 400.251 301.672 411.94]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-2931 0 obj <<
+3046 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [227.821 249.592 302.181 260.441]
+/Rect [227.149 372.546 308.384 385.448]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jerry@samba.org)>>
>> endobj
-2932 0 obj <<
+3047 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [231.487 237.637 297.241 248.486]
+/Rect [194.286 346.054 266.096 357.743]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jra@samba.org)>>
>> endobj
-2933 0 obj <<
+3048 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 225.682 294.197 236.53]
+/Rect [205.528 318.955 277.612 330.645]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2934 0 obj <<
+3049 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [261.348 213.173 347.359 225.129]
+/Rect [226.983 291.251 320.975 304.153]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:olem@IDEALX.org)>>
>> endobj
-2935 0 obj <<
+3050 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 200.931 297.054 211.779]
+/Rect [84.043 264.759 286.869 276.448]
/Subtype /Link
/A << /S /GoTo /D (groupmapping) >>
>> endobj
-2936 0 obj <<
+3051 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [227.821 176.18 302.181 187.028]
+/Rect [227.149 209.956 308.384 222.857]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jerry@samba.org)>>
>> endobj
-2937 0 obj <<
+3052 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 164.225 294.197 175.073]
+/Rect [205.528 183.464 277.612 195.153]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2938 0 obj <<
+3053 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 151.429 303.302 162.277]
+/Rect [84.043 156.365 286.339 168.055]
/Subtype /Link
/A << /S /GoTo /D (AccessControls) >>
>> endobj
-2939 0 obj <<
+3054 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 138.633 294.197 149.481]
+/Rect [205.528 129.267 277.612 140.956]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2940 0 obj <<
+3055 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [231.487 126.678 297.241 137.526]
+/Rect [194.286 102.168 266.096 113.858]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jra@samba.org)>>
>> endobj
-2941 0 obj <<
+3056 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [213.498 74.464 301.672 87.365]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
+>> endobj
+3031 0 obj <<
+/D [3029 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3028 0 obj <<
+/Font << /F41 2998 0 R /F15 2976 0 R /F38 3001 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3065 0 obj <<
+/Length 2240
+/Filter /FlateDecode
+>>
+stream
+xڽZr6}WQz0JAt2NӦΤ6Lltq)iŕ@`q'زx{<X\2(#U%/7E'?.Fdˋ ^.[rB}~QPhA߻ъzV,GS B`Գ~TXhQʂ w7o^bzys7NcnnXvkjp+>՛vcϟ^yڬs7#<QQKlT3TP"#ǒW<8[cFEF$gO
+g%hIị=sDpxjv/BIEnd7/Iea**݊lMQ^.Yj :A۳)%^lsyj$ Z=%EB8Cv|GFRX#$6 u[{GH~Ȫ"PFMPY2r\ܲHGa }ϢD YJVBq43p$9 49E{ xu!=(m5r#5b K?M@,|,3y᲏Eq6^y.%W
+%D%E`fLzYS0̄AI
+e_4:׳)}Aē#?j-3TO368+4r̾BG*^cx*u5쵔ab3k>Ym3IFgJ2׳1gsh~TOJvvzQH(c.WI0Lڳ(8_@0̌hi[&1a
+U5pGK?x=0b?5Ht=Փ"K\l|͙YcDh@ y ge |r
+޾%ca1` `|A4wNw<E7g+c/:JJ7(4߷)﻽)@?<EkXV4oru-J
++e
+(>%QasyF=G8:Jf4UEF-cJ#*J+m
+a&;\"R03γ(^ZIYYhGg0O klԯ_ _tG}w %QV8g ןNCW,IYˉ"(" oDiL*&S rw-zU~}.T#VU ъ:Z^|i0h)2;PA|.^wR3|fXhbר*mL{ZP86
+)GQ(A 0/XNr^/zNb#P2&c@xI`yQ̞38*K֨bu|TM]`T0qϦpA̻Vm/E>i{6t&vQ̌Ͷ? T30qPJ"Q"ǠDl?}ӓx$;-EmP c
+tǻTm/(J[4 u-r)Os,tVY.^[JjQ
+Ŕ.:ȢJP4)ى\<Iy^ S%S (1 ?<<~MPg%XB}*jSkbV0D4()$cX"\tΦnC7X(|[KT_Ϧk}'4) Hx;E?,UT+ʀR=e{L>8hL>> I"gN::̸hۗ徯íH[2\.T{jچk2&\Uև%3h2d1AǯA632od)<. &p%, EbNb<byZ'!8SO '>$zK*xs~
+endobj
+3064 0 obj <<
+/Type /Page
+/Contents 3065 0 R
+/Resources 3063 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 2969 0 R
+/Annots [ 3067 0 R 3068 0 R 3069 0 R 3070 0 R 3071 0 R 3072 0 R 3073 0 R 3074 0 R 3075 0 R 3076 0 R 3077 0 R 3078 0 R 3079 0 R 3080 0 R 3081 0 R 3082 0 R 3083 0 R 3084 0 R 3085 0 R 3086 0 R 3087 0 R 3088 0 R 3089 0 R 3090 0 R 3091 0 R ]
+>> endobj
+3067 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 113.882 223.728 124.73]
+/Rect [84.043 752.53 203.49 764.219]
/Subtype /Link
/A << /S /GoTo /D (locking) >>
>> endobj
-2942 0 obj <<
+3068 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [231.487 101.086 297.241 111.935]
+/Rect [194.286 725.431 266.096 737.121]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jra@samba.org)>>
>> endobj
-2943 0 obj <<
+3069 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 89.131 316.308 99.979]
+/Rect [213.498 698.333 301.672 710.022]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-2944 0 obj <<
+3070 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 77.176 294.197 88.024]
+/Rect [205.528 671.235 277.612 682.924]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2945 0 obj <<
+3071 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [221.386 65.221 310.94 76.069]
+/Rect [183.225 644.136 281.096 655.826]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:eric.roseme@hp.com)>>
>> endobj
-2946 0 obj <<
+3072 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 52.425 186.7 63.273]
+/Rect [84.043 617.038 162.127 628.727]
/Subtype /Link
/A << /S /GoTo /D (securing-samba) >>
>> endobj
-2887 0 obj <<
-/D [2885 0 R /XYZ 85.039 786.531 null]
->> endobj
-2884 0 obj <<
-/Font << /F56 2890 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F14 2895 0 R /F11 2898 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-2964 0 obj <<
-/Length 2316
-/Filter /FlateDecode
->>
-stream
-x\[s~̌nTKvga<X" {_{$#aOXri\{z, (YL3ޙÝwgh;} W?~wÙx9ۉL`ió{fzf7}K&xcpe [ߏξy+LdtF3j1/Nч7Ι#-fZi9=M^0n
-W<{} C.LJY<1)\G+鼸yQO:1|X7;pfHx6lWe8>$ s00H0,O$l96A8Y,zbC T_HhY3} Ưߔ㗼q$b1mӅu\e IE6'L٦xz5RP+= y?%Jf^02ЫŁw`\ᱶոL
-{g9DAZ
-;Fo0ʱ-)8sM> kݽB힤 p2+t2
-C:/ٟaCFkFTlTjQ)55]ڑP[Σlya:'RBh UK1k b]/t{m'؉h>֞;JZ;\
-QSfjz $!bnǠ˔I}bI!GyFAө׸IF6 3pC4y$PȬM`NLLo(Y7Y|:Ɏۘb/<9Ҁ>\4!
-endobj
-2963 0 obj <<
-/Type /Page
-/Contents 2964 0 R
-/Resources 2962 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 2869 0 R
-/Annots [ 2966 0 R 2967 0 R 2968 0 R 2969 0 R 2970 0 R 2971 0 R 2972 0 R 2973 0 R 2974 0 R 2975 0 R 2976 0 R 2977 0 R 2978 0 R 2979 0 R 2980 0 R 2981 0 R 2982 0 R 2983 0 R 2984 0 R 2985 0 R 2986 0 R 2987 0 R 2988 0 R 2989 0 R 2990 0 R 2991 0 R 2992 0 R 2993 0 R 2994 0 R 2995 0 R 2996 0 R 2997 0 R 2998 0 R 2999 0 R 3000 0 R 3001 0 R 3002 0 R 3003 0 R 3004 0 R 3005 0 R 3006 0 R 3007 0 R 3008 0 R 3009 0 R 3010 0 R 3011 0 R 3012 0 R 3013 0 R 3014 0 R 3015 0 R 3016 0 R 3017 0 R ]
->> endobj
-2966 0 obj <<
+3073 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [237.686 752.714 317 763.562]
+/Rect [201.074 589.939 287.733 601.629]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tridge@samba.org)>>
>> endobj
-2967 0 obj <<
+3074 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 740.759 294.197 751.607]
+/Rect [205.528 562.841 277.612 574.53]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2968 0 obj <<
+3075 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 727.807 258.955 738.655]
+/Rect [84.043 535.743 241.278 547.432]
/Subtype /Link
/A << /S /GoTo /D (InterdomainTrusts) >>
>> endobj
-2969 0 obj <<
+3076 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 714.856 294.197 725.704]
+/Rect [205.528 508.644 277.612 520.334]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2970 0 obj <<
+3077 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [238.932 702.901 318.799 713.749]
+/Rect [202.437 481.546 289.703 493.235]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:mimir@samba.org)>>
>> endobj
-2971 0 obj <<
+3078 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [213.498 453.841 301.672 466.743]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
+>> endobj
+3079 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [209.407 427.349 317.339 439.039]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:vorlon@netexpress.net)>>
+>> endobj
+3080 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 689.949 386.292 700.797]
+/Rect [84.043 400.251 370.612 411.94]
/Subtype /Link
/A << /S /GoTo /D (msdfs) >>
>> endobj
-2972 0 obj <<
+3081 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [227.198 676.998 308.477 687.846]
+/Rect [189.589 373.152 278.4 384.842]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:samba@samba.org)>>
>> endobj
-2973 0 obj <<
+3082 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 664.046 231.549 674.894]
+/Rect [84.043 346.054 212.43 357.743]
/Subtype /Link
/A << /S /GoTo /D (printing) >>
>> endobj
-2974 0 obj <<
+3083 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [218.149 651.095 297.352 661.943]
+/Rect [179.68 318.955 266.218 330.645]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:kpfeifle@danka.de)>>
>> endobj
-2975 0 obj <<
+3084 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [227.821 639.14 302.181 649.988]
+/Rect [227.149 291.251 308.384 304.153]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jerry@samba.org)>>
>> endobj
-2976 0 obj <<
+3085 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 626.188 284.75 637.036]
+/Rect [84.043 264.759 266.399 276.448]
/Subtype /Link
/A << /S /GoTo /D (CUPS-printing) >>
>> endobj
-2977 0 obj <<
+3086 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [218.149 613.237 297.352 624.085]
+/Rect [179.68 237.66 266.218 249.35]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:kpfeifle@danka.de)>>
>> endobj
-2978 0 obj <<
+3087 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [232.401 600.728 311.908 612.683]
+/Rect [195.286 209.956 282.157 222.857]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:CVizitiu@gbif.org)>>
>> endobj
-2979 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 590.267 221.19 599.178]
-/Subtype /Link
-/A << /S /GoTo /D (VFS) >>
->> endobj
-2980 0 obj <<
+3088 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 575.379 316.308 586.227]
+/Rect [213.498 182.857 301.672 195.759]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-2981 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 563.424 294.197 574.272]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
->> endobj
-2982 0 obj <<
+3089 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 502.652 300.145 513.5]
+/Rect [84.043 158.486 198.672 168.055]
/Subtype /Link
-/A << /S /GoTo /D (winbind) >>
+/A << /S /GoTo /D (VFS) >>
>> endobj
-2983 0 obj <<
+3090 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [215.935 489.7 288.302 500.548]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tpot@samba.org)>>
+/Rect [213.498 129.267 301.672 140.956]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-2984 0 obj <<
+3091 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [237.686 477.745 317 488.593]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tridge@samba.org)>>
+/Rect [205.528 102.168 277.612 113.858]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2985 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [247.04 465.79 347.303 476.638]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:getnag@rediffmail.com)>>
+3066 0 obj <<
+/D [3064 0 R /XYZ 85.039 786.531 null]
>> endobj
-2986 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 453.835 316.308 464.683]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
+3063 0 obj <<
+/Font << /F15 2976 0 R /F41 2998 0 R /F38 3001 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-2987 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 441.879 294.197 452.728]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
+3101 0 obj <<
+/Length 2128
+/Filter /FlateDecode
+>>
+stream
+xڽZr6+B rӱMܺMc]]#+D_ߋI@f4U3y#i"yaͷpֈhRqٟG `gβabbFٯu[SUX)sbt+(a\`9PeO #y+|Uk G Jtn8l086=b(&=%^+(+JⲬʍR+EqTV7Ӄ(! bA6[P^BwKBv H
+]0njh7nZ4<YbUJR֤}i=Lv(K ֶ9$CR<u^;H <C-n!+h޺ݹ۹~}:
+\!Yz/=T/6ywZ }qP}ceM8C4&" uՏ
+aΖEI͗edQ,EOҕfą[yPzd!g&*8%@U"bЦ8"1 3Q0Iy)I_-Sj
+Epi=pCfPR,7F|h<l%5Α`AL<A X U "n[|SSѡ9!Wը+u*)5R!{@]3$k8]Mj0 (i<EqFQИ0 c~a0=0zя #mTa*
+Î) 30bDah0F-Uwuy/zHĠv!MX׷62;$
+3*T}wnw^FH²x2M. /1F<E2~kaBu:}ӫ]XNbhd~-îj<GM吋i@nZ*2$4,4Ø_ GBL/%^ a<U%2#qČ'sc7L &#Mcv?n MVE %Q%
+rq&K EFpؑ&Qwkn{߭Be]K<:x#(^~ht8zۦp|(꽃aݖ.0 <G,XN 'KN+$cN=3`ްY uj'F ožbc1<! S;OKp򑓊4&
+0<'( md*)ĭ
+h0r|7x[hh<֥Z+QF*hP4|CQ'h8C,(51*=:Ubzwսw lClwv,]W!*? EFpؑ&Fj/öyH Uv$ΑjF%L#yA 8cytCQM} J,?7_U]T'2ظs1$E%p"M5d*s;_RMl00ҷ ө'Tػjpy!87^/'޼6]kUn^
+endstream
+endobj
+3100 0 obj <<
+/Type /Page
+/Contents 3101 0 R
+/Resources 3099 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3126 0 R
+/Annots [ 3103 0 R 3104 0 R 3105 0 R 3106 0 R 3107 0 R 3108 0 R 3109 0 R 3110 0 R 3111 0 R 3112 0 R 3113 0 R 3114 0 R 3115 0 R 3116 0 R 3117 0 R 3118 0 R 3119 0 R 3120 0 R 3121 0 R 3122 0 R 3123 0 R 3124 0 R 3125 0 R ]
>> endobj
-2988 0 obj <<
+3103 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 428.928 262.583 439.776]
+/Rect [84.043 671.235 241.218 682.924]
/Subtype /Link
/A << /S /GoTo /D (AdvancedNetworkManagement) >>
>> endobj
-2989 0 obj <<
+3104 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 415.977 294.197 426.825]
+/Rect [205.528 644.136 277.612 655.826]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2990 0 obj <<
+3105 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 403.025 245.414 413.873]
+/Rect [84.043 617.038 223.884 628.727]
/Subtype /Link
/A << /S /GoTo /D (PolicyMgmt) >>
>> endobj
-2991 0 obj <<
+3106 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 390.074 294.197 400.922]
+/Rect [205.528 589.939 277.612 601.629]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2992 0 obj <<
+3107 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 377.122 247.578 387.97]
+/Rect [84.043 562.841 224.612 574.53]
/Subtype /Link
/A << /S /GoTo /D (ProfileMgmt) >>
>> endobj
-2993 0 obj <<
+3108 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 364.171 294.197 375.019]
+/Rect [205.528 535.743 277.612 547.432]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2994 0 obj <<
+3109 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 353.157 291.45 362.068]
+/Rect [84.043 510.765 274.369 520.334]
/Subtype /Link
/A << /S /GoTo /D (pam) >>
>> endobj
-2995 0 obj <<
+3110 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 338.268 294.197 349.116]
+/Rect [205.528 481.546 277.612 493.235]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2996 0 obj <<
+3111 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [245.297 326.313 344.038 337.161]
+/Rect [209.407 454.447 317.339 466.137]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:vorlon@netexpress.net)>>
>> endobj
-2997 0 obj <<
+3112 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 313.361 328.574 324.21]
+/Rect [84.043 427.349 311.975 439.039]
/Subtype /Link
/A << /S /GoTo /D (integrate-ms-networks) >>
>> endobj
-2998 0 obj <<
+3113 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 300.41 294.197 311.258]
+/Rect [205.528 400.251 277.612 411.94]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-2999 0 obj <<
+3114 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 286.905 194.618 298.86]
+/Rect [84.043 372.546 171.642 385.448]
/Subtype /Link
/A << /S /GoTo /D (unicode) >>
>> endobj
-3000 0 obj <<
+3115 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 274.507 316.308 285.355]
+/Rect [213.498 346.054 301.672 357.743]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-3001 0 obj <<
+3116 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [275.268 262.552 388.51 273.4]
+/Rect [242.225 318.955 366.036 330.645]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:monyo@home.monyo.com)>>
>> endobj
-3002 0 obj <<
+3117 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 249.6 235.816 260.449]
+/Rect [84.043 291.857 213.218 303.547]
/Subtype /Link
/A << /S /GoTo /D (Backup) >>
>> endobj
-3003 0 obj <<
+3118 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 236.649 294.197 247.497]
+/Rect [205.528 264.759 277.612 276.448]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-3004 0 obj <<
+3119 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 223.698 227.265 234.546]
+/Rect [84.043 237.66 208.824 249.35]
/Subtype /Link
/A << /S /GoTo /D (SambaHA) >>
>> endobj
-3005 0 obj <<
+3120 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 210.746 294.197 221.594]
+/Rect [205.528 210.562 277.612 222.251]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-3006 0 obj <<
+3121 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 197.795 310.307 208.643]
+/Rect [84.043 183.464 290.036 195.153]
/Subtype /Link
/A << /S /GoTo /D (upgrading-to-3.0) >>
>> endobj
-3007 0 obj <<
+3122 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 184.843 316.308 195.692]
+/Rect [213.498 156.365 301.672 168.055]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-3008 0 obj <<
+3123 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [205.528 129.267 277.612 140.956]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
+>> endobj
+3124 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [227.149 101.562 308.384 114.464]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jerry@samba.org)>>
+>> endobj
+3125 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 171.892 314.693 182.74]
+/Rect [84.043 75.07 296.399 86.759]
/Subtype /Link
/A << /S /GoTo /D (NT4Migration) >>
>> endobj
-3009 0 obj <<
+3102 0 obj <<
+/D [3100 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3099 0 obj <<
+/Font << /F41 2998 0 R /F15 2976 0 R /F38 3001 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3139 0 obj <<
+/Length 2036
+/Filter /FlateDecode
+>>
+stream
+xڽZMo8Wh̊$Rbݶ`w==8kȿ_EQP"EQD_fo"G˄D< 0vD+D4Eg}W
+s3*_PY6>ℓ$JSYH;1ۙH0/ob:ɢl<(#>AɧycF)zkL#MLNYMq:Oޑ|*d=INtVOȽxåaUuV0x_lL1KXe ŦBx?lvʲJs]LNDq΋MHI,b1=&ۖɯZL*d`lQ(n]i
+b::U'E$)m KB%b`i4Xc_Uot@7 .TS;V嫇"z_ԟO""RaB=GA˅$MHH<5jP(5 c԰=:Sv],U
+EY ">
+i1D*PP#V$GJ S;\%mYbkʡMYM.^y0=tahƀ鼸3zꉇ$ܤ|B dZ7bm ^w=m^^h6,~&Y*@yhk8=ls<]W#
+b; :vG0p>μ2*M}\e"sLGwBBB$H$mBX\ ap&UARbAb<bxJu|ֵ`ݻq (8UۦVaz?Y #<hjL
+endobj
+3138 0 obj <<
+/Type /Page
+/Contents 3139 0 R
+/Resources 3137 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3126 0 R
+/Annots [ 3141 0 R 3142 0 R 3143 0 R 3144 0 R 3145 0 R 3146 0 R 3147 0 R 3148 0 R 3149 0 R 3150 0 R 3151 0 R 3152 0 R 3153 0 R 3154 0 R 3155 0 R 3156 0 R 3157 0 R 3158 0 R 3159 0 R 3160 0 R 3161 0 R 3162 0 R 3163 0 R 3164 0 R 3165 0 R 3166 0 R ]
+>> endobj
+3141 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 158.94 294.197 169.789]
+/Rect [205.528 752.53 277.612 764.219]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-3010 0 obj <<
+3142 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 147.926 324.816 156.837]
+/Rect [84.043 727.553 308.248 737.121]
/Subtype /Link
/A << /S /GoTo /D (SWAT) >>
>> endobj
-3011 0 obj <<
+3143 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 133.038 294.197 143.886]
+/Rect [205.528 698.333 277.612 710.022]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-3012 0 obj <<
+3144 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 122.023 208.405 130.934]
+/Rect [84.043 673.356 184.278 682.924]
/Subtype /Link
/A << /S /GoTo /D (diagnosis) >>
>> endobj
-3013 0 obj <<
+3145 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [237.686 107.135 317 117.983]
+/Rect [201.074 644.136 287.733 655.826]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tridge@samba.org)>>
>> endobj
-3014 0 obj <<
+3146 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 95.18 316.308 106.028]
+/Rect [213.498 617.038 301.672 628.727]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-3015 0 obj <<
+3147 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 82.228 288.048 93.076]
+/Rect [84.043 589.939 271.763 601.629]
/Subtype /Link
/A << /S /GoTo /D (problems) >>
>> endobj
-3016 0 obj <<
+3148 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [227.821 69.277 302.181 80.125]
+/Rect [227.149 562.235 308.384 575.137]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jerry@samba.org)>>
>> endobj
-3017 0 obj <<
+3149 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 57.322 316.308 68.17]
+/Rect [213.498 535.743 301.672 547.432]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-2965 0 obj <<
-/D [2963 0 R /XYZ 85.039 786.531 null]
->> endobj
-2962 0 obj <<
-/Font << /F14 2895 0 R /F15 2876 0 R /F11 2898 0 R /F20 2865 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-3039 0 obj <<
-/Length 1067
-/Filter /FlateDecode
->>
-stream
-xYKsF+tLզq[rAXR=# Z;EU(Ạ<MH`$Qo==֌^30_;%,' J}~[^jSM_RN/c1BXNG."፾'tytiDyK*"Փ%U{8{> Bp43?E`{IL~-V5=7-T:|
-=tuEbָk˪D{?}ҀG~M0$B̚)ΛϮ}rVۨWsKrYϧI+k
-t;"Y uY4M,rqB2v~^p3tޗ['(+@kӕ%P=m:L= j K}[_1|HB-'׋QAPi# endstream
-endobj
-3038 0 obj <<
-/Type /Page
-/Contents 3039 0 R
-/Resources 3037 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 2869 0 R
-/Annots [ 3041 0 R 3042 0 R 3043 0 R 3044 0 R 3045 0 R 3046 0 R 3047 0 R 3048 0 R 3049 0 R 3050 0 R 3051 0 R 3052 0 R 3053 0 R 3054 0 R 3055 0 R 3056 0 R 3057 0 R 3058 0 R 3059 0 R ]
->> endobj
-3041 0 obj <<
+3150 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [229.606 752.714 321.068 763.562]
+/Rect [192.225 508.644 292.187 520.334]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:dbannon@samba.org)>>
>> endobj
-3042 0 obj <<
+3151 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 739.762 184.052 750.611]
+/Rect [84.043 481.546 160.975 493.114]
/Subtype /Link
/A << /S /GoTo /D (bugreport) >>
>> endobj
-3043 0 obj <<
+3152 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 726.811 316.308 737.659]
+/Rect [213.498 454.447 301.672 466.137]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-3044 0 obj <<
+3153 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [201.074 427.349 287.733 439.039]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tridge@samba.org)>>
+>> endobj
+3154 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 701.904 226.786 712.753]
+/Rect [84.043 400.251 196.036 411.94]
/Subtype /Link
/A << /S /GoTo /D (compiling) >>
>> endobj
-3045 0 obj <<
+3155 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 688.953 316.308 699.801]
+/Rect [213.498 373.152 301.672 384.842]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-3046 0 obj <<
+3156 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [201.074 346.054 287.733 357.743]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:tridge@samba.org)>>
+>> endobj
+3157 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 664.046 160.078 674.894]
+/Rect [84.043 318.955 137.43 330.645]
/Subtype /Link
/A << /S /GoTo /D (Portability) >>
>> endobj
-3047 0 obj <<
+3158 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 651.095 316.308 661.943]
+/Rect [213.498 291.857 301.672 303.547]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-3048 0 obj <<
+3159 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 640.081 250.345 648.992]
+/Rect [84.043 266.88 229.915 276.448]
/Subtype /Link
/A << /S /GoTo /D (Other-Clients) >>
>> endobj
-3049 0 obj <<
+3160 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [239.015 625.192 319.38 636.04]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jmcd@us.ibm.com)>>
+/Rect [213.498 237.66 301.672 249.35]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-3050 0 obj <<
+3161 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 613.237 316.308 624.085]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
+/Rect [202.528 209.956 290.339 222.857]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jmcd@us.ibm.com)>>
>> endobj
-3051 0 obj <<
+3162 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 600.285 239.724 611.134]
+/Rect [84.043 183.464 218.369 195.153]
/Subtype /Link
/A << /S /GoTo /D (speed) >>
>> endobj
-3052 0 obj <<
+3163 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [230.879 587.334 330.118 598.182]
+/Rect [193.619 156.365 302.097 168.055]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:paulc@dth.scot.nhs.uk)>>
>> endobj
-3053 0 obj <<
+3164 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 575.379 316.308 586.227]
+/Rect [213.498 129.267 301.672 140.956]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-3054 0 obj <<
+3165 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 563.424 294.197 574.272]
+/Rect [205.528 102.168 277.612 113.858]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-3055 0 obj <<
+3166 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 550.472 283.767 561.32]
+/Rect [84.043 75.07 266.596 86.759]
/Subtype /Link
/A << /S /GoTo /D (DNSDHCP) >>
>> endobj
-3056 0 obj <<
+3140 0 obj <<
+/D [3138 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3137 0 obj <<
+/Font << /F41 2998 0 R /F15 2976 0 R /F38 3001 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3178 0 obj <<
+/Length 502
+/Filter /FlateDecode
+>>
+stream
+xڝn0z
+6\.)@QzIspIG젯R(Y
+D{B&j䘱9hBvKʷ[`
+endobj
+3177 0 obj <<
+/Type /Page
+/Contents 3178 0 R
+/Resources 3176 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3126 0 R
+/Annots [ 3180 0 R 3181 0 R 3182 0 R ]
+>> endobj
+3180 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [228.194 537.521 294.197 548.369]
+/Rect [205.528 752.53 277.612 764.219]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-3057 0 obj <<
+3181 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 526.507 195.697 535.418]
+/Rect [84.043 727.553 172.611 737.121]
/Subtype /Link
/A << /S /GoTo /D (Further-Resources) >>
>> endobj
-3058 0 obj <<
+3182 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [235.611 511.618 316.308 522.466]
+/Rect [213.498 698.333 301.672 710.022]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jelmer@samba.org)>>
>> endobj
-3059 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [230.74 499.663 316.059 510.511]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:david@lechnyr.com)>>
->> endobj
-3040 0 obj <<
-/D [3038 0 R /XYZ 85.039 786.531 null]
+3179 0 obj <<
+/D [3177 0 R /XYZ 85.039 786.531 null]
>> endobj
-3037 0 obj <<
-/Font << /F14 2895 0 R /F15 2876 0 R /F11 2898 0 R /F20 2865 0 R >>
+3176 0 obj <<
+/Font << /F41 2998 0 R /F15 2976 0 R /F38 3001 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3069 0 obj <<
-/Length 1876
+3186 0 obj <<
+/Length 2685
/Filter /FlateDecode
>>
stream
-xZKsHW UayIl6bS9
-!~{F;O'&Cx~|3֎ SBϛ#tvN=_hwO#vzos :Ϫ$Jkmk7z=ȥԞa<rE,2;]Áv"MN pg*ͳ d@b6\_ )vy
-/!I[h,D /p!6]99>mdQa[:x-^Di]+bA|)0Nlŭ՝>,
-۸ʆ#Mqnimjc6T'Vv`*H)oP,eh 詅#)߯fWQ.7x&Jfmt_ <jP^Ona=ml^b3z}Z_#orOzN]Gn{in͕9&> b ՜* ڿJ׮ u HccԽRaiw=ȋ,/6ixCs/¤ж0t:Zb9&q͌ɧM0
+x[KsFWrYY^,:e]>$9%qC
+ ѿy
+ۜOZ2d~ H*d~S򲮚El̿=y5o MdV3JT!
+SLf@T,T"b| 87&fIؔLj <dU6˺;SRL ݧ=Z평
+ݛ<Af4=C
+۠ݮVŵR7/ Zaۋ0=55iK3B~|ѽ\#&y_W?Yj_ ZtFr\xpl{h˱p"ї5/
+WJs=%
+#r$̽~bu#0tO`ޗkDʸ~Gɯܣ
+mMg>CWQ~CIvJv{ɥmS  j} P h̯[ _EDf_%Ida&ܢO$NOPhBq#m}r'yվB(ü1XB*#򶳃
+~ǚƆ?إ^UU ځ1˼+f۝uZ\~pQ&Fo#u۷ͻ?uSFh7s l] 1{Ī\Ve
+ 3!>T m`(k-M6ϫz*m 1x~z}[6E b#Œ`LAvC  NdE>D%N([5ngk5Ӯa1tdKpRaqWDj
+D8r$i.
+tbPHuv1\eNrޖ&YWCS홖d)1|L?Y>nY"ୈdɎ(|rUT[<=tn@Xﲴ/z4fȍ2;ԃjQ7J;Ԉ(9oHwmȎm<zWyw&0Ɲk+Jg$ƒAQAw H@7 e;dE;Dk`,]7H} Ty[OJ͍񐉷nl.h^< OTތd@!Ȑ(o7]sYyPEQU;xČ(G#yWC<v\VC+^\sU&-Dw=?ؘQk<n>HMUw13V ੉j4 ͤ=u 8ķ /a94477endstream
endobj
-3068 0 obj <<
+3185 0 obj <<
/Type /Page
-/Contents 3069 0 R
-/Resources 3067 0 R
+/Contents 3186 0 R
+/Resources 3184 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 2869 0 R
-/Annots [ 3072 0 R 3073 0 R 3074 0 R 3075 0 R 3076 0 R 3077 0 R 3078 0 R 3079 0 R 3080 0 R 3081 0 R 3082 0 R 3083 0 R 3084 0 R 3085 0 R 3086 0 R 3087 0 R 3088 0 R 3089 0 R 3090 0 R 3091 0 R 3092 0 R 3093 0 R 3094 0 R 3095 0 R 3096 0 R 3097 0 R 3098 0 R 3099 0 R 3100 0 R 3101 0 R 3102 0 R 3103 0 R 3104 0 R 3105 0 R ]
+/Parent 3126 0 R
+/Annots [ 3189 0 R 3190 0 R 3191 0 R 3192 0 R 3193 0 R 3194 0 R 3195 0 R 3196 0 R 3197 0 R 3198 0 R 3199 0 R 3200 0 R 3201 0 R 3202 0 R 3203 0 R 3204 0 R 3205 0 R 3206 0 R 3207 0 R 3208 0 R 3209 0 R 3210 0 R 3211 0 R 3212 0 R 3213 0 R 3214 0 R 3215 0 R 3216 0 R 3217 0 R 3218 0 R 3219 0 R 3220 0 R 3221 0 R 3222 0 R 3223 0 R ]
>> endobj
-3072 0 obj <<
+3189 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [497.163 617.124 512.306 627.419]
+/Rect [524.436 603.575 539.579 613.869]
/Subtype /Link
/A << /S /GoTo /D (part.1) >>
>> endobj
-3073 0 obj <<
+3190 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 592.666 512.306 602.234]
+/Rect [525.586 579.116 539.579 588.685]
/Subtype /Link
/A << /S /GoTo /D (chapter.1) >>
>> endobj
-3074 0 obj <<
+3191 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 579.116 512.306 588.139]
+/Rect [526.677 565.567 539.579 574.59]
/Subtype /Link
/A << /S /GoTo /D (section.1.1) >>
>> endobj
-3075 0 obj <<
+3192 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 565.567 512.306 574.59]
+/Rect [526.677 552.018 539.579 561.041]
/Subtype /Link
/A << /S /GoTo /D (section.1.2) >>
>> endobj
-3076 0 obj <<
+3193 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 552.018 512.306 561.041]
+/Rect [526.677 538.469 539.579 547.492]
/Subtype /Link
/A << /S /GoTo /D (section.1.3) >>
>> endobj
-3077 0 obj <<
+3194 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 538.469 512.306 547.492]
+/Rect [526.677 524.92 539.579 533.942]
/Subtype /Link
/A << /S /GoTo /D (section.1.4) >>
>> endobj
-3078 0 obj <<
+3195 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 524.92 512.306 533.942]
+/Rect [526.677 511.37 539.579 520.393]
/Subtype /Link
/A << /S /GoTo /D (section.1.5) >>
>> endobj
-3079 0 obj <<
+3196 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 511.37 512.306 520.393]
+/Rect [526.677 497.821 539.579 506.844]
/Subtype /Link
/A << /S /GoTo /D (section.1.6) >>
>> endobj
-3080 0 obj <<
+3197 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 486.912 512.306 496.48]
+/Rect [525.586 473.363 539.579 482.931]
/Subtype /Link
/A << /S /GoTo /D (chapter.2) >>
>> endobj
-3081 0 obj <<
+3198 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 473.363 512.306 482.386]
+/Rect [526.677 459.814 539.579 468.837]
/Subtype /Link
/A << /S /GoTo /D (section.2.1) >>
>> endobj
-3082 0 obj <<
+3199 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 459.814 512.306 468.837]
+/Rect [526.677 446.265 539.579 455.287]
/Subtype /Link
/A << /S /GoTo /D (section.2.2) >>
>> endobj
-3083 0 obj <<
+3200 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 446.265 512.306 455.287]
+/Rect [526.677 432.715 539.579 441.738]
/Subtype /Link
/A << /S /GoTo /D (subsection.2.2.1) >>
>> endobj
-3084 0 obj <<
+3201 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 432.715 512.306 441.738]
+/Rect [526.677 419.166 539.579 428.189]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.2.2.1.1) >>
>> endobj
-3085 0 obj <<
+3202 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 419.166 512.306 428.189]
+/Rect [526.677 405.617 539.579 414.64]
/Subtype /Link
/A << /S /GoTo /D (subsection.2.2.2) >>
>> endobj
-3086 0 obj <<
+3203 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 405.617 512.306 414.64]
+/Rect [526.677 392.068 539.579 401.091]
/Subtype /Link
/A << /S /GoTo /D (section.2.3) >>
>> endobj
-3087 0 obj <<
+3204 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 392.068 512.306 401.091]
+/Rect [526.677 378.519 539.579 387.541]
/Subtype /Link
/A << /S /GoTo /D (section.2.4) >>
>> endobj
-3088 0 obj <<
+3205 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 364.969 512.306 373.992]
+/Rect [526.677 364.969 539.579 373.992]
/Subtype /Link
/A << /S /GoTo /D (section.2.5) >>
>> endobj
-3089 0 obj <<
+3206 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 351.42 512.306 360.443]
+/Rect [526.677 351.42 539.579 360.443]
/Subtype /Link
/A << /S /GoTo /D (section.2.6) >>
>> endobj
-3090 0 obj <<
+3207 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 337.871 512.306 346.894]
+/Rect [526.677 337.871 539.579 346.894]
/Subtype /Link
/A << /S /GoTo /D (section.2.7) >>
>> endobj
-3091 0 obj <<
+3208 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 324.322 512.306 333.345]
+/Rect [526.677 324.322 539.579 333.345]
/Subtype /Link
/A << /S /GoTo /D (subsection.2.7.1) >>
>> endobj
-3092 0 obj <<
+3209 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 283.674 512.306 292.697]
+/Rect [526.677 297.223 539.579 306.246]
/Subtype /Link
/A << /S /GoTo /D (subsection.2.7.2) >>
>> endobj
-3093 0 obj <<
+3210 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 259.216 512.306 268.784]
+/Rect [526.677 283.674 539.579 292.697]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.2.7.3) >>
+>> endobj
+3211 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [525.586 259.216 539.579 268.784]
/Subtype /Link
/A << /S /GoTo /D (chapter.3) >>
>> endobj
-3094 0 obj <<
+3212 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 245.667 512.306 254.689]
+/Rect [526.677 245.667 539.579 254.689]
/Subtype /Link
/A << /S /GoTo /D (section.3.1) >>
>> endobj
-3095 0 obj <<
+3213 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [497.163 207.173 512.306 217.468]
+/Rect [524.436 207.173 539.579 217.468]
/Subtype /Link
/A << /S /GoTo /D (part.2) >>
>> endobj
-3096 0 obj <<
+3214 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 182.715 512.306 192.283]
+/Rect [525.586 182.715 539.579 192.283]
/Subtype /Link
/A << /S /GoTo /D (chapter.4) >>
>> endobj
-3097 0 obj <<
+3215 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 169.166 512.306 178.189]
+/Rect [526.677 169.166 539.579 178.189]
/Subtype /Link
/A << /S /GoTo /D (section.4.1) >>
>> endobj
-3098 0 obj <<
+3216 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 155.617 512.306 164.64]
+/Rect [526.677 155.617 539.579 164.64]
/Subtype /Link
/A << /S /GoTo /D (section.4.2) >>
>> endobj
-3099 0 obj <<
+3217 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 142.068 512.306 151.09]
+/Rect [526.677 142.068 539.579 151.09]
/Subtype /Link
/A << /S /GoTo /D (section.4.3) >>
>> endobj
-3100 0 obj <<
+3218 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 128.518 512.306 137.541]
+/Rect [526.677 128.518 539.579 137.541]
/Subtype /Link
/A << /S /GoTo /D (subsection.4.3.1) >>
>> endobj
-3101 0 obj <<
+3219 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 114.969 512.306 123.992]
+/Rect [526.677 114.969 539.579 123.992]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.4.3.1.1) >>
>> endobj
-3102 0 obj <<
+3220 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 101.42 512.306 110.443]
+/Rect [526.677 101.42 539.579 110.443]
/Subtype /Link
/A << /S /GoTo /D (subsection.4.3.2) >>
>> endobj
-3103 0 obj <<
+3221 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 87.871 512.306 96.894]
+/Rect [526.677 87.871 539.579 96.894]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.4.3.2.1) >>
>> endobj
-3104 0 obj <<
+3222 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 74.322 512.306 83.344]
+/Rect [526.677 74.322 539.579 83.344]
/Subtype /Link
/A << /S /GoTo /D (subsection.4.3.3) >>
>> endobj
-3105 0 obj <<
+3223 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 60.772 512.306 69.795]
+/Rect [526.677 60.772 539.579 69.795]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.4.3.3.1) >>
>> endobj
-3070 0 obj <<
-/D [3068 0 R /XYZ 85.039 786.531 null]
+3187 0 obj <<
+/D [3185 0 R /XYZ 85.039 786.531 null]
>> endobj
-3071 0 obj <<
-/D [3068 0 R /XYZ 85.039 656.613 null]
+3188 0 obj <<
+/D [3185 0 R /XYZ 85.039 643.064 null]
>> endobj
-3067 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+3184 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3108 0 obj <<
-/Length 2452
+3226 0 obj <<
+/Length 3145
/Filter /FlateDecode
>>
stream
-x\[sH~PjPUDhSʷ$卝nFXb8n@$;vAC;ΑYQY/ÞxOH]i;O¥w?z;t%r6:̧}7>g28<ϽpzCE96޵:vlɞܖlt_SѬ%k@ԁcE ϳNιugV0+0n>?PÄݑΗnO
-'L?2alfyjXaMn΅g{\!vbԣ?{Yx]9.~ɁYLFWuM
-_>o8\ 8ie8tE+*ōTpu8h ]9C,g$؅b7NEc~4O7 qn]S-7ʵrhبQY3+=K,.RoEI"3anHqxHudu+| PyEC4΀킆z^$.XSu%=.\W$@HxR6hH'o h>(+hK%b>IHߡ~\|܃Q5$fC7
-G\yX5L-谥%9NBYoaWߨ7LXq u
-h%+Mo s4xYu
-q*#״
-_ i guE *1vNf*iI0!sBje;˺vKoMNPʛE?'&YH
- TA95ӒHa'3P٪fՅ$udax
-6sTBM13z &PoΝhSˎSn7V,5t]@86=h
-C<}Z Oײ*aХ CZ;<XAڢuhܔh%6~\5/ 7f7ᾴ'Ou<Tkpom5/
-P^;*)SOVVxD&6IBG "vߟmr."h%ՒENZ{|ŎEYoط4x 7zl *<L섅tI4 ,/LXnEvv>/ ͎K:ŏgZr2H*jUGSyYDp!!>Qi+g;na֯櫱<i&Cut'WX!k?" ‡IrI[[q΂endstream
+xYs7+U!`p̓:+vi-%NU1E[\PHǿ_A+bKS[Yfcn
+dB6plwYL'+R
+ɲ3d A.X#pCǖN
+u௑Ġ3!bEuwkLO$$?JaCngfݥJ79ybэMk`FP@
+{Y5_ 1dg|LOF(lX&cF8yoV'»|h V%ұӤ#@Hczl]̓[=nu"ן97^<UQrA1tl4И^w늰b7v,I5KSݱn34UTZ1RAS-4]ٺdR̜&\Ҭ/V&Sݏ\6L=rA1Tl4P^J,.(v P/ٗO'g
+$RŮ}mY&@wW>ms k]e֑ٓu#.jiCI-lykvxTv>Igi^ߴ Pn|1s$!J6
+J2 ~wsxf?<d?\2GvduAڛBW0VyEݠ3 bi h1ܣ-ObyVkB-*]_ݴkp{}=2}h
+bjiZ 0SeŐE~ Q^gBMOt],1RO`\A Hh
endobj
-3107 0 obj <<
+3225 0 obj <<
/Type /Page
-/Contents 3108 0 R
-/Resources 3106 0 R
+/Contents 3226 0 R
+/Resources 3224 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3158 0 R
-/Annots [ 3113 0 R 3114 0 R 3115 0 R 3116 0 R 3117 0 R 3118 0 R 3119 0 R 3120 0 R 3121 0 R 3122 0 R 3123 0 R 3124 0 R 3125 0 R 3126 0 R 3127 0 R 3128 0 R 3129 0 R 3130 0 R 3131 0 R 3132 0 R 3133 0 R 3134 0 R 3135 0 R 3136 0 R 3137 0 R 3138 0 R 3139 0 R 3140 0 R 3141 0 R 3142 0 R 3143 0 R 3144 0 R 3145 0 R 3146 0 R 3147 0 R 3148 0 R 3149 0 R 3150 0 R 3151 0 R 3152 0 R 3153 0 R 3154 0 R 3155 0 R 3156 0 R 3157 0 R ]
+/Parent 3126 0 R
+/Annots [ 3231 0 R 3232 0 R 3233 0 R 3234 0 R 3235 0 R 3236 0 R 3237 0 R 3238 0 R 3239 0 R 3240 0 R 3241 0 R 3242 0 R 3243 0 R 3244 0 R 3245 0 R 3246 0 R 3247 0 R 3248 0 R 3249 0 R 3250 0 R 3251 0 R 3252 0 R 3253 0 R 3254 0 R 3255 0 R 3256 0 R 3257 0 R 3258 0 R 3259 0 R 3260 0 R 3261 0 R 3262 0 R 3263 0 R 3264 0 R 3265 0 R 3266 0 R 3267 0 R 3268 0 R 3269 0 R 3270 0 R 3271 0 R 3272 0 R 3273 0 R 3274 0 R 3275 0 R 3276 0 R ]
>> endobj
-3113 0 obj <<
+3231 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 754.651 512.306 763.674]
+/Rect [526.677 754.651 539.579 763.674]
/Subtype /Link
/A << /S /GoTo /D (subsection.4.3.4) >>
>> endobj
-3114 0 obj <<
+3232 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 741.102 512.306 750.125]
+/Rect [526.677 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.4.3.4.1) >>
>> endobj
-3115 0 obj <<
+3233 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 727.553 512.306 736.575]
+/Rect [526.677 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (subsection.4.3.5) >>
>> endobj
-3116 0 obj <<
+3234 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 714.003 512.306 723.026]
+/Rect [526.677 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.4.3.5.1) >>
>> endobj
-3117 0 obj <<
+3235 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 700.454 512.306 709.477]
+/Rect [526.677 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (section.4.4) >>
>> endobj
-3118 0 obj <<
+3236 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 686.905 512.306 695.928]
+/Rect [526.677 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (section.4.5) >>
>> endobj
-3119 0 obj <<
+3237 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 673.356 512.306 682.379]
+/Rect [526.677 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (subsection.4.5.1) >>
>> endobj
-3120 0 obj <<
+3238 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 659.807 512.306 668.829]
+/Rect [526.677 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (subsection.4.5.2) >>
>> endobj
-3121 0 obj <<
+3239 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 646.257 512.306 655.28]
+/Rect [526.677 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (subsection.4.5.3) >>
>> endobj
-3122 0 obj <<
+3240 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 632.708 512.306 641.731]
+/Rect [526.677 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (subsection.4.5.4) >>
>> endobj
-3123 0 obj <<
+3241 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 608.25 512.306 617.818]
+/Rect [525.586 608.25 539.579 617.818]
/Subtype /Link
/A << /S /GoTo /D (chapter.5) >>
>> endobj
-3124 0 obj <<
+3242 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 594.701 512.306 603.724]
+/Rect [526.677 594.701 539.579 603.724]
/Subtype /Link
/A << /S /GoTo /D (section.5.1) >>
>> endobj
-3125 0 obj <<
+3243 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 581.151 512.306 590.174]
+/Rect [526.677 581.151 539.579 590.174]
/Subtype /Link
/A << /S /GoTo /D (section.5.2) >>
>> endobj
-3126 0 obj <<
+3244 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 567.602 512.306 576.625]
+/Rect [526.677 567.602 539.579 576.625]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.2.1) >>
>> endobj
-3127 0 obj <<
+3245 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 554.053 512.306 563.076]
+/Rect [526.677 554.053 539.579 563.076]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.2.2) >>
>> endobj
-3128 0 obj <<
+3246 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 540.504 512.306 549.527]
+/Rect [526.677 540.504 539.579 549.527]
/Subtype /Link
/A << /S /GoTo /D (section.5.3) >>
>> endobj
-3129 0 obj <<
+3247 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 526.955 512.306 535.978]
+/Rect [526.677 526.955 539.579 535.978]
/Subtype /Link
/A << /S /GoTo /D (section.5.4) >>
>> endobj
-3130 0 obj <<
+3248 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 513.406 512.306 522.428]
+/Rect [526.677 513.406 539.579 522.428]
/Subtype /Link
/A << /S /GoTo /D (section.5.5) >>
>> endobj
-3131 0 obj <<
+3249 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 499.856 512.306 508.879]
+/Rect [526.677 499.856 539.579 508.879]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.5.1) >>
>> endobj
-3132 0 obj <<
+3250 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 486.307 512.306 495.33]
+/Rect [526.677 486.307 539.579 495.33]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.5.5.1.1) >>
>> endobj
-3133 0 obj <<
+3251 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 472.758 512.306 481.781]
+/Rect [526.677 472.758 539.579 481.781]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.5.5.1.2) >>
>> endobj
-3134 0 obj <<
+3252 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 459.209 512.306 468.232]
+/Rect [526.677 459.209 539.579 468.232]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.5.5.1.3) >>
>> endobj
-3135 0 obj <<
+3253 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 445.66 512.306 454.682]
+/Rect [526.677 445.66 539.579 454.682]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.5.2) >>
>> endobj
-3136 0 obj <<
+3254 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 432.11 512.306 441.133]
+/Rect [526.677 432.11 539.579 441.133]
/Subtype /Link
/A << /S /GoTo /D (section.5.6) >>
>> endobj
-3137 0 obj <<
+3255 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 418.561 512.306 427.584]
+/Rect [526.677 418.561 539.579 427.584]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.6.1) >>
>> endobj
-3138 0 obj <<
+3256 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 377.914 512.306 386.936]
+/Rect [526.677 405.012 539.579 414.035]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.6.2) >>
>> endobj
-3139 0 obj <<
+3257 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 364.364 512.306 373.387]
+/Rect [526.677 391.463 539.579 400.486]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.6.3) >>
>> endobj
-3140 0 obj <<
+3258 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 337.266 512.306 346.289]
+/Rect [526.677 377.914 539.579 386.936]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.6.4) >>
>> endobj
-3141 0 obj <<
+3259 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 310.168 512.306 319.19]
+/Rect [526.677 364.364 539.579 373.387]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.6.5) >>
>> endobj
-3142 0 obj <<
+3260 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 283.069 512.306 292.092]
+/Rect [526.677 350.815 539.579 359.838]
/Subtype /Link
/A << /S /GoTo /D (subsection.5.6.6) >>
>> endobj
-3143 0 obj <<
+3261 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [526.677 337.266 539.579 346.289]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.5.6.7) >>
+>> endobj
+3262 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 258.611 512.306 268.179]
+/Rect [525.586 312.808 539.579 322.376]
/Subtype /Link
/A << /S /GoTo /D (chapter.6) >>
>> endobj
-3144 0 obj <<
+3263 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 245.062 512.306 254.084]
+/Rect [526.677 299.258 539.579 308.281]
/Subtype /Link
/A << /S /GoTo /D (section.6.1) >>
>> endobj
-3145 0 obj <<
+3264 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 231.512 512.306 240.535]
+/Rect [526.677 285.709 539.579 294.732]
/Subtype /Link
/A << /S /GoTo /D (section.6.2) >>
>> endobj
-3146 0 obj <<
+3265 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 217.963 512.306 226.986]
+/Rect [526.677 272.16 539.579 281.183]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.2.1) >>
>> endobj
-3147 0 obj <<
+3266 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 204.414 512.306 213.437]
+/Rect [526.677 258.611 539.579 267.634]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.6.2.1.1) >>
>> endobj
-3148 0 obj <<
+3267 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 190.865 512.306 199.888]
+/Rect [526.677 245.062 539.579 254.084]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.2.2) >>
>> endobj
-3149 0 obj <<
+3268 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 177.316 512.306 186.338]
+/Rect [526.677 231.512 539.579 240.535]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.2.3) >>
>> endobj
-3150 0 obj <<
+3269 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 163.766 512.306 172.789]
+/Rect [526.677 217.963 539.579 226.986]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.2.4) >>
>> endobj
-3151 0 obj <<
+3270 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 150.217 512.306 159.24]
+/Rect [526.677 204.414 539.579 213.437]
/Subtype /Link
/A << /S /GoTo /D (section.6.3) >>
>> endobj
-3152 0 obj <<
+3271 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 136.668 512.306 145.691]
+/Rect [526.677 190.865 539.579 199.888]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.3.1) >>
>> endobj
-3153 0 obj <<
+3272 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 123.119 512.306 132.142]
+/Rect [526.677 177.316 539.579 186.338]
/Subtype /Link
/A << /S /GoTo /D (section.6.4) >>
>> endobj
-3154 0 obj <<
+3273 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 109.57 512.306 118.593]
+/Rect [526.677 163.766 539.579 172.789]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.4.1) >>
>> endobj
-3155 0 obj <<
+3274 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 96.02 512.306 105.043]
+/Rect [526.677 150.217 539.579 159.24]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.4.2) >>
>> endobj
-3156 0 obj <<
+3275 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 82.471 512.306 91.494]
+/Rect [526.677 136.668 539.579 145.691]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.4.3) >>
>> endobj
-3157 0 obj <<
+3276 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 68.922 512.306 77.945]
+/Rect [526.677 123.119 539.579 132.142]
/Subtype /Link
/A << /S /GoTo /D (subsection.6.4.4) >>
>> endobj
-3109 0 obj <<
-/D [3107 0 R /XYZ 85.039 786.531 null]
+3227 0 obj <<
+/D [3225 0 R /XYZ 85.039 786.531 null]
>> endobj
-3106 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R >>
+3224 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3161 0 obj <<
-/Length 2114
+3279 0 obj <<
+/Length 3284
/Filter /FlateDecode
>>
stream
-x\[sH~WP$$oRakI6ي Lyfb(b2{n!| y)W![j;#vU(PVؾ-f2#]'HY$a[߽n6p9;?+2Q=/
-w8$iK*()Mw9mToeO۾e=,
-L",gÚAǏN`2"Kc>Ov}L1jFŸ4yNxx-kR
- f#< <o$~pQa$Cu
-c\ՁZDk4xV9&51ָespsLL(eߑ j
-o6;xwA>x9X~G /_;Cʰݩ}\do9ꊎ"
-&x[Ai̾mdB.#Ǜ[OfWQ̼4'+ h.2s<F{֩y=q':aDY}FÚVa/HO6v1
- VqUsmMMy80[1
-Ee7,5A*D ZLj|/F1=cCǵh>z4i#{Kߧ)!|
-{6_6aK@yi饽rɊЁkmjRZ5@ȳqjZ+# 7Uij҂(9Fcta6fdH
- nHR$60Ez
-B.ET d_&$srK踱9%9>%j?гI\V|.\Z"{["jP(3'5VÛIL ")nȒtHoX~.GQ6GzEaY@N"2K1h*nxMumSl5 9CL=KIS\+dp9 &7sE!RZk
-U½^ X|k[nl=Afk&-]l9{E)R1{%Fz5/f趒xwU+Z E < w
-ĔϢVv}!)#g\~>>hÆ=q0ZDJgfzMX@W 610ֈV}w8 4Qq\>$T@<&hJTv
+xKs8tL
+jd_G_ơ8uqc̮gȶdjT(}Ưܹ/P A'k ¬SP:7z7uVvXR.C
+"CI ]D]?$Q `615r=yQlVndf 35}jme+
+?"}bi 1
+n(mw/GnwpKOQ4 Qv!""g{ԑ SF98/P C(5@cv};T"@> [ߺ6]D?P CtH]D]Yu߿1 zd|rĝw5@cv=quu)=pX4Knҭ箙_h)7ֹfa s\nKڗB@G/[̈Q &HNi92#ŕ?oZZ+TøsM_ԡ:v{vm̮oԔB2V<[P+Eq{:ܝ"CTI& t
+$CJ ]D ]3^ Tpykn8;K'#=n}J,ݶ7E!hcѶkzJfd߅3&kuZi !}!be2d̮gChohԭ'R1rqxfRk痾C1usuL}&u3y&Ive5f.S6):W&Mxn'zSG*YO>Z{&7[%s34M2bm?\ڳEoWR;5HZԮIQ:@>|K&ZCtF@)֫}K!:xe21E"U',A%UOmf]7ђAtlDTVX΁}!$s;jh \PR
+e7}N mlыtazJj ő:B1D15@4PW3N\F78NUXέ{Kq૾C1!Ϳ]?fw j_?H Ι}!A%S;jOJ|zgaQf5ΜuQS>^}v4_ KŁ.clpFţWY3hJ
+
+gV{׋í7\/#I.USCZVc;lQt;ѥQvLIqi,I)LcܪBҪ U+uLg1]gUt4זO9D@}i}Odkt+au j /`,ђљh :/հ$Wcɉҡ2C%[=3}"'[i
+VQ;2eܯC'o ŐpBԮAz\J)$9^;]Calw+P-=)pkODRDR)sB3/Ip">N$۾z DxG `vaɅʊwEwBV#߹0&l<4@_p$8{}-ॾC1|D
+yLxs< Ht/>9!EWʻ66HΎ(
endobj
-3160 0 obj <<
+3278 0 obj <<
/Type /Page
-/Contents 3161 0 R
-/Resources 3159 0 R
+/Contents 3279 0 R
+/Resources 3277 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3158 0 R
-/Annots [ 3163 0 R 3164 0 R 3165 0 R 3166 0 R 3167 0 R 3168 0 R 3169 0 R 3170 0 R 3171 0 R 3172 0 R 3173 0 R 3174 0 R 3175 0 R 3176 0 R 3177 0 R 3178 0 R 3179 0 R 3180 0 R 3181 0 R 3182 0 R 3183 0 R 3184 0 R 3185 0 R 3186 0 R 3187 0 R 3188 0 R 3189 0 R 3190 0 R 3191 0 R 3192 0 R 3193 0 R 3194 0 R 3195 0 R 3196 0 R 3197 0 R 3198 0 R 3199 0 R 3200 0 R 3201 0 R 3202 0 R 3203 0 R 3204 0 R 3205 0 R 3206 0 R 3207 0 R 3208 0 R ]
+/Parent 3126 0 R
+/Annots [ 3281 0 R 3282 0 R 3283 0 R 3284 0 R 3285 0 R 3286 0 R 3287 0 R 3288 0 R 3289 0 R 3290 0 R 3291 0 R 3292 0 R 3293 0 R 3294 0 R 3295 0 R 3296 0 R 3297 0 R 3298 0 R 3299 0 R 3300 0 R 3301 0 R 3302 0 R 3303 0 R 3304 0 R 3305 0 R 3306 0 R 3307 0 R 3308 0 R 3309 0 R 3310 0 R 3311 0 R 3312 0 R 3313 0 R 3314 0 R 3315 0 R 3316 0 R 3317 0 R 3318 0 R 3319 0 R 3320 0 R 3321 0 R 3322 0 R 3323 0 R 3324 0 R 3325 0 R 3326 0 R 3327 0 R 3328 0 R ]
>> endobj
-3163 0 obj <<
+3281 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 754.651 512.306 764.219]
+/Rect [525.586 754.651 539.579 764.219]
/Subtype /Link
/A << /S /GoTo /D (chapter.7) >>
>> endobj
-3164 0 obj <<
+3282 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 741.102 512.306 750.125]
+/Rect [526.677 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (section.7.1) >>
>> endobj
-3165 0 obj <<
+3283 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 727.553 512.306 736.575]
+/Rect [526.677 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (section.7.2) >>
>> endobj
-3166 0 obj <<
+3284 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 714.003 512.306 723.026]
+/Rect [526.677 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.2.1) >>
>> endobj
-3167 0 obj <<
+3285 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 686.905 512.306 695.928]
+/Rect [526.677 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.2.2) >>
>> endobj
-3168 0 obj <<
+3286 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 673.356 512.306 682.379]
+/Rect [526.677 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.2.3) >>
>> endobj
-3169 0 obj <<
+3287 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 646.257 512.306 655.28]
+/Rect [526.677 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.2.4) >>
>> endobj
-3170 0 obj <<
+3288 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 632.708 512.306 641.731]
+/Rect [526.677 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.7.2.4.1) >>
>> endobj
-3171 0 obj <<
+3289 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 619.159 512.306 628.182]
+/Rect [526.677 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.7.2.4.2) >>
>> endobj
-3172 0 obj <<
+3290 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 605.61 512.306 614.633]
+/Rect [526.677 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.7.2.4.3) >>
>> endobj
-3173 0 obj <<
+3291 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 592.061 512.306 601.083]
+/Rect [526.677 619.159 539.579 628.182]
/Subtype /Link
/A << /S /GoTo /D (section.7.3) >>
>> endobj
-3174 0 obj <<
+3292 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 578.511 512.306 587.534]
+/Rect [526.677 605.61 539.579 614.633]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.3.1) >>
>> endobj
-3175 0 obj <<
+3293 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 564.962 512.306 573.985]
+/Rect [526.677 592.061 539.579 601.083]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.3.2) >>
>> endobj
-3176 0 obj <<
+3294 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 551.413 512.306 560.436]
+/Rect [526.677 578.511 539.579 587.534]
/Subtype /Link
/A << /S /GoTo /D (section.7.4) >>
>> endobj
-3177 0 obj <<
+3295 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 537.864 512.306 546.887]
+/Rect [526.677 564.962 539.579 573.985]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.4.1) >>
>> endobj
-3178 0 obj <<
+3296 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 524.315 512.306 533.337]
+/Rect [526.677 551.413 539.579 560.436]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.4.2) >>
>> endobj
-3179 0 obj <<
+3297 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 510.765 512.306 519.788]
+/Rect [526.677 537.864 539.579 546.887]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.4.3) >>
>> endobj
-3180 0 obj <<
+3298 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 497.216 512.306 506.239]
+/Rect [526.677 524.315 539.579 533.337]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.7.4.3.1) >>
>> endobj
-3181 0 obj <<
+3299 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 483.667 512.306 492.69]
+/Rect [526.677 510.765 539.579 519.788]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.4.4) >>
>> endobj
-3182 0 obj <<
+3300 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 470.118 512.306 479.141]
+/Rect [526.677 497.216 539.579 506.239]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.4.5) >>
>> endobj
-3183 0 obj <<
+3301 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 456.569 512.306 465.591]
+/Rect [526.677 483.667 539.579 492.69]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.4.6) >>
>> endobj
-3184 0 obj <<
+3302 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 443.019 512.306 452.042]
+/Rect [526.677 470.118 539.579 479.141]
/Subtype /Link
/A << /S /GoTo /D (section.7.5) >>
>> endobj
-3185 0 obj <<
+3303 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 429.47 512.306 438.493]
+/Rect [526.677 456.569 539.579 465.591]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.5.1) >>
>> endobj
-3186 0 obj <<
+3304 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 415.921 512.306 424.944]
+/Rect [526.677 443.019 539.579 452.042]
/Subtype /Link
/A << /S /GoTo /D (subsection.7.5.2) >>
>> endobj
-3187 0 obj <<
+3305 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 391.463 512.306 401.031]
+/Rect [526.677 429.47 539.579 438.493]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.7.5.3) >>
+>> endobj
+3306 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [525.586 405.012 539.579 414.58]
/Subtype /Link
/A << /S /GoTo /D (chapter.8) >>
>> endobj
-3188 0 obj <<
+3307 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 377.914 512.306 386.936]
+/Rect [526.677 391.463 539.579 400.486]
/Subtype /Link
/A << /S /GoTo /D (section.8.1) >>
>> endobj
-3189 0 obj <<
+3308 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 364.364 512.306 373.387]
+/Rect [526.677 377.914 539.579 386.936]
/Subtype /Link
/A << /S /GoTo /D (section.8.2) >>
>> endobj
-3190 0 obj <<
+3309 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 350.815 512.306 359.838]
+/Rect [526.677 364.364 539.579 373.387]
/Subtype /Link
/A << /S /GoTo /D (section.8.3) >>
>> endobj
-3191 0 obj <<
+3310 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 337.266 512.306 346.289]
+/Rect [526.677 350.815 539.579 359.838]
/Subtype /Link
/A << /S /GoTo /D (subsection.8.3.1) >>
>> endobj
-3192 0 obj <<
+3311 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 323.717 512.306 332.74]
+/Rect [526.677 337.266 539.579 346.289]
/Subtype /Link
/A << /S /GoTo /D (subsection.8.3.2) >>
>> endobj
-3193 0 obj <<
+3312 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 310.168 512.306 319.19]
+/Rect [526.677 323.717 539.579 332.74]
/Subtype /Link
/A << /S /GoTo /D (section.8.4) >>
>> endobj
-3194 0 obj <<
+3313 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 285.709 512.306 295.278]
+/Rect [525.586 299.258 539.579 308.827]
/Subtype /Link
/A << /S /GoTo /D (chapter.9) >>
>> endobj
-3195 0 obj <<
+3314 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 272.16 512.306 281.183]
+/Rect [526.677 285.709 539.579 294.732]
/Subtype /Link
/A << /S /GoTo /D (section.9.1) >>
>> endobj
-3196 0 obj <<
+3315 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [497.163 233.667 512.306 243.962]
+/Rect [524.436 247.216 539.579 257.511]
/Subtype /Link
/A << /S /GoTo /D (part.3) >>
>> endobj
-3197 0 obj <<
+3316 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 209.209 512.306 218.777]
+/Rect [525.586 222.758 539.579 232.326]
/Subtype /Link
/A << /S /GoTo /D (chapter.10) >>
>> endobj
-3198 0 obj <<
+3317 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 195.659 512.306 204.682]
+/Rect [526.677 209.209 539.579 218.231]
/Subtype /Link
/A << /S /GoTo /D (section.10.1) >>
>> endobj
-3199 0 obj <<
+3318 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 182.11 512.306 191.133]
+/Rect [526.677 195.659 539.579 204.682]
/Subtype /Link
/A << /S /GoTo /D (section.10.2) >>
>> endobj
-3200 0 obj <<
+3319 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 168.561 512.306 177.584]
+/Rect [526.677 182.11 539.579 191.133]
/Subtype /Link
/A << /S /GoTo /D (section.10.3) >>
>> endobj
-3201 0 obj <<
+3320 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 155.012 512.306 164.035]
+/Rect [526.677 168.561 539.579 177.584]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.1) >>
>> endobj
-3202 0 obj <<
+3321 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 141.463 512.306 150.485]
+/Rect [526.677 155.012 539.579 164.035]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.2) >>
>> endobj
-3203 0 obj <<
+3322 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 127.913 512.306 136.936]
+/Rect [526.677 141.463 539.579 150.485]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.3.3) >>
>> endobj
-3204 0 obj <<
+3323 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 114.364 512.306 123.387]
+/Rect [526.677 127.913 539.579 136.936]
/Subtype /Link
/A << /S /GoTo /D (section.10.4) >>
>> endobj
-3205 0 obj <<
+3324 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 100.815 512.306 109.838]
+/Rect [526.677 114.364 539.579 123.387]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.1) >>
>> endobj
-3206 0 obj <<
+3325 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 87.266 512.306 96.289]
+/Rect [526.677 100.815 539.579 109.838]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.2) >>
>> endobj
-3207 0 obj <<
+3326 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 73.717 512.306 82.739]
+/Rect [526.677 87.266 539.579 96.289]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.3) >>
>> endobj
-3208 0 obj <<
+3327 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 60.167 512.306 69.19]
+/Rect [526.677 73.717 539.579 82.739]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.4) >>
>> endobj
-3162 0 obj <<
-/D [3160 0 R /XYZ 85.039 786.531 null]
+3328 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [526.677 60.167 539.579 69.19]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.10.4.5) >>
>> endobj
-3159 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R >>
+3280 0 obj <<
+/D [3278 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3277 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3211 0 obj <<
-/Length 2341
+3331 0 obj <<
+/Length 3522
/Filter /FlateDecode
>>
stream
-x\[s6~W0}2uf7쭁>}0$Mml}ut$aIIB$a2$}~dn®`~@d7g$g{fwB"R? ;?p _;<K?"E«S|z 6nҧ>O珿D}Я'RtqRvgʈ(1Π .^:|!!νE#BdGW,j8'ިzeLI뇞M&jxRL+V݌Q)gow=x}NR(]<8{6"yKfX)i &/5~3k쬳vUſLLiQ+'e2K-}FXZ7er8SopA/`\ 3_Gz~ D}|D= cǕ9_
-y*˷%."t>I/WkiK,X"G;5&̬UQZxxac ^\"2(>!;w1;P(olrSc|uQvፋ/IoX+;d8[
-$sm
-`˔2KdTXbU-> C03t3 źr܆_]|$㲨*/F2EHt_ =0]THu
-9wuX!ZblaYj
-뾨 8.zC>sz՗B W6Fa7.ˤvuVwM <q";5ݕa9J=2>fiix-ϪͅiCffk\'
-b$~c+aLoqTUSֹfHeA2KyaYHS.h(dBI;^n^C7VOR>2;S^0\Xg뇺q5.thy_VUJ}l'YF[Cu
-qA@Ft `K'rUyI#^Nuin,ճ0-6\`M;>çJU S+ID91V1**oëU)|'7)Zj6jW˨Obc*ђ>#{#\x+֋8e^S}#28r+B=-$5@+6aߺ6OҀʹy[Q?,WpPb&]_z8S%j ' v !3NMjcAi=fmcS5 !J4mA5Md9b9pE h2iZ91=BTpq!_Glf[dKH&<w3_8{`Dz} '"xdt{d*J7+&=[䱭VEQz۪*bƗRG*f
+x[s6)4$=%$:Ӵ4i;ӝeSݖ/
+_/FP&E奐[)k-Íznc޼U7CgOxKYߵΜwjq‘z`m f
+8κLD#D>RrFsL6\d9Ey4kI~8w.J6^J"_o '&e^W\y sZUBװA3s<`hpOiB\5 ۚn.<-hVDH]4
+_.
+fzتSMW{۪=G6{,KtsCө33gXt[ :m1Hp'M^k+shVWmkݾ
+κ1^dǕ?LE
+J/vZ7ua*v)zVMӺz'LlWf"W &懋^_[ 4a
++z1K9v1g7;5*?[P3!aT{~ꤸ7sizs.DV8U PFPZ"
+T8 ӋQΰ
+48$3
+yuTEH^P%0TOL%oR4KQ1,PY|GebǨMjzendstream
endobj
-3210 0 obj <<
+3330 0 obj <<
/Type /Page
-/Contents 3211 0 R
-/Resources 3209 0 R
+/Contents 3331 0 R
+/Resources 3329 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3158 0 R
-/Annots [ 3213 0 R 3214 0 R 3215 0 R 3216 0 R 3217 0 R 3218 0 R 3219 0 R 3220 0 R 3221 0 R 3222 0 R 3223 0 R 3224 0 R 3225 0 R 3226 0 R 3227 0 R 3228 0 R 3229 0 R 3230 0 R 3231 0 R 3232 0 R 3233 0 R 3234 0 R 3235 0 R 3236 0 R 3237 0 R 3238 0 R 3239 0 R 3243 0 R 3244 0 R 3245 0 R 3246 0 R 3247 0 R 3248 0 R 3249 0 R 3250 0 R 3251 0 R 3252 0 R 3253 0 R 3254 0 R 3255 0 R 3256 0 R 3257 0 R 3258 0 R 3259 0 R 3260 0 R 3261 0 R 3262 0 R 3263 0 R ]
->> endobj
-3213 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 754.651 512.306 763.674]
-/Subtype /Link
-/A << /S /GoTo /D (subsection.10.4.5) >>
+/Parent 3386 0 R
+/Annots [ 3333 0 R 3334 0 R 3335 0 R 3336 0 R 3337 0 R 3338 0 R 3339 0 R 3340 0 R 3341 0 R 3342 0 R 3343 0 R 3344 0 R 3345 0 R 3346 0 R 3347 0 R 3348 0 R 3349 0 R 3350 0 R 3351 0 R 3352 0 R 3353 0 R 3354 0 R 3355 0 R 3356 0 R 3357 0 R 3358 0 R 3359 0 R 3360 0 R 3361 0 R 3362 0 R 3366 0 R 3367 0 R 3368 0 R 3369 0 R 3370 0 R 3371 0 R 3372 0 R 3373 0 R 3374 0 R 3375 0 R 3376 0 R 3377 0 R 3378 0 R 3379 0 R 3380 0 R 3381 0 R 3382 0 R 3383 0 R 3384 0 R 3385 0 R ]
>> endobj
-3214 0 obj <<
+3333 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 741.102 512.306 750.125]
+/Rect [526.677 754.651 539.579 763.674]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.6) >>
>> endobj
-3215 0 obj <<
+3334 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 727.553 512.306 736.575]
+/Rect [526.677 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.7) >>
>> endobj
-3216 0 obj <<
+3335 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 714.003 512.306 723.026]
+/Rect [526.677 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.4.8) >>
>> endobj
-3217 0 obj <<
+3336 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 700.454 512.306 709.477]
+/Rect [526.677 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (section.10.5) >>
>> endobj
-3218 0 obj <<
+3337 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 686.905 512.306 695.928]
+/Rect [526.677 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.5.1) >>
>> endobj
-3219 0 obj <<
+3338 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 673.356 512.306 682.379]
+/Rect [526.677 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.5.2) >>
>> endobj
-3220 0 obj <<
+3339 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 659.807 512.306 668.829]
+/Rect [526.677 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.5.3) >>
>> endobj
-3221 0 obj <<
+3340 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 646.257 512.306 655.28]
+/Rect [526.677 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (section.10.6) >>
>> endobj
-3222 0 obj <<
+3341 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 632.708 512.306 641.731]
+/Rect [521.223 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.6.1) >>
>> endobj
-3223 0 obj <<
+3342 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 619.159 512.306 628.182]
+/Rect [521.223 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.6.2) >>
>> endobj
-3224 0 obj <<
+3343 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 605.61 512.306 614.633]
+/Rect [521.223 619.159 539.579 628.182]
/Subtype /Link
/A << /S /GoTo /D (section.10.7) >>
>> endobj
-3225 0 obj <<
+3344 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 592.061 512.306 601.083]
+/Rect [521.223 605.61 539.579 614.633]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.7.1) >>
>> endobj
-3226 0 obj <<
+3345 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 578.511 512.306 587.534]
+/Rect [521.223 592.061 539.579 601.083]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.7.2) >>
>> endobj
-3227 0 obj <<
+3346 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 564.962 512.306 573.985]
+/Rect [521.223 578.511 539.579 587.534]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.7.3) >>
>> endobj
-3228 0 obj <<
+3347 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 551.413 512.306 560.436]
+/Rect [521.223 564.962 539.579 573.985]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.10.7.3.1) >>
>> endobj
-3229 0 obj <<
+3348 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 537.864 512.306 546.887]
+/Rect [521.223 551.413 539.579 560.436]
/Subtype /Link
/A << /S /GoTo /D (section.10.8) >>
>> endobj
-3230 0 obj <<
+3349 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 510.765 512.306 519.788]
+/Rect [521.223 524.315 539.579 533.337]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.8.1) >>
>> endobj
-3231 0 obj <<
+3350 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 483.667 512.306 492.69]
+/Rect [521.223 510.765 539.579 519.788]
/Subtype /Link
/A << /S /GoTo /D (subsection.10.8.2) >>
>> endobj
-3232 0 obj <<
+3351 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [498.314 459.209 512.306 468.777]
+/Rect [521.223 497.216 539.579 506.239]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.10.8.3) >>
+>> endobj
+3352 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [519.586 472.758 539.579 482.326]
/Subtype /Link
/A << /S /GoTo /D (chapter.11) >>
>> endobj
-3233 0 obj <<
+3353 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 445.66 512.306 454.682]
+/Rect [521.223 459.209 539.579 468.232]
/Subtype /Link
/A << /S /GoTo /D (section.11.1) >>
>> endobj
-3234 0 obj <<
+3354 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 445.66 539.579 454.682]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.11.1.1) >>
+>> endobj
+3355 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 432.11 512.306 441.133]
+/Rect [521.223 432.11 539.579 441.133]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.11.1.2) >>
+>> endobj
+3356 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 418.561 539.579 427.584]
/Subtype /Link
/A << /S /GoTo /D (section.11.2) >>
>> endobj
-3235 0 obj <<
+3357 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 418.561 512.306 427.584]
+/Rect [521.223 405.012 539.579 414.035]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.2.1) >>
>> endobj
-3236 0 obj <<
+3358 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 405.012 512.306 414.035]
+/Rect [521.223 391.463 539.579 400.486]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.2.1.1) >>
>> endobj
-3237 0 obj <<
+3359 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 391.463 512.306 400.486]
+/Rect [521.223 377.914 539.579 386.936]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.2.1.2) >>
>> endobj
-3238 0 obj <<
+3360 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 377.914 512.306 386.936]
+/Rect [521.223 364.364 539.579 373.387]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.2.2) >>
>> endobj
-3239 0 obj <<
+3361 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 350.815 539.579 359.838]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.11.2.3) >>
+>> endobj
+3362 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 364.364 512.306 373.387]
+/Rect [521.223 337.266 539.579 346.289]
/Subtype /Link
/A << /S /GoTo /D (section.11.3) >>
>> endobj
-3243 0 obj <<
+3366 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 350.815 512.306 359.838]
+/Rect [521.223 323.717 539.579 332.74]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.3.1) >>
>> endobj
-3244 0 obj <<
+3367 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 337.266 512.306 346.289]
+/Rect [521.223 310.168 539.579 319.19]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.3.2) >>
>> endobj
-3245 0 obj <<
+3368 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 323.717 512.306 332.74]
+/Rect [521.223 296.618 539.579 305.641]
/Subtype /Link
/A << /S /GoTo /D (section.11.4) >>
>> endobj
-3246 0 obj <<
+3369 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 310.168 512.306 319.19]
+/Rect [521.223 283.069 539.579 292.092]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.4.1) >>
>> endobj
-3247 0 obj <<
+3370 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 296.618 512.306 305.641]
+/Rect [521.223 269.52 539.579 278.543]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.4.2) >>
>> endobj
-3248 0 obj <<
+3371 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 283.069 512.306 292.092]
+/Rect [521.223 255.971 539.579 264.994]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.4.3) >>
>> endobj
-3249 0 obj <<
+3372 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 269.52 512.306 278.543]
+/Rect [521.223 242.422 539.579 251.444]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.4.4) >>
>> endobj
-3250 0 obj <<
+3373 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 255.971 512.306 264.994]
+/Rect [521.223 228.872 539.579 237.895]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.4.1) >>
>> endobj
-3251 0 obj <<
+3374 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [499.405 228.872 512.306 237.895]
+/Rect [521.223 215.323 539.579 224.346]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.4.2) >>
>> endobj
-3252 0 obj <<
+3375 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 215.323 512.306 224.346]
+/Rect [521.223 201.774 539.579 210.797]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.4.3) >>
>> endobj
-3253 0 obj <<
+3376 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 201.774 512.306 210.797]
+/Rect [521.223 188.225 539.579 197.248]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.4.4) >>
>> endobj
-3254 0 obj <<
+3377 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 188.225 512.306 197.248]
+/Rect [521.223 174.676 539.579 183.698]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.4.5) >>
>> endobj
-3255 0 obj <<
+3378 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 174.676 512.306 183.698]
+/Rect [521.223 161.126 539.579 170.149]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.4.6) >>
>> endobj
-3256 0 obj <<
+3379 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 161.126 512.306 170.149]
+/Rect [521.223 147.577 539.579 156.6]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.4.7) >>
>> endobj
-3257 0 obj <<
+3380 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 147.577 512.306 156.6]
+/Rect [521.223 134.028 539.579 143.051]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.4.8) >>
>> endobj
-3258 0 obj <<
+3381 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 134.028 512.306 143.051]
+/Rect [521.223 120.479 539.579 129.502]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.4.9) >>
>> endobj
-3259 0 obj <<
+3382 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 120.479 512.306 129.502]
+/Rect [521.223 106.93 539.579 115.952]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.4.10) >>
>> endobj
-3260 0 obj <<
+3383 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 106.93 512.306 115.952]
+/Rect [521.223 93.38 539.579 102.403]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.4.5) >>
>> endobj
-3261 0 obj <<
+3384 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 93.38 512.306 102.403]
+/Rect [521.223 79.831 539.579 88.854]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.5.1) >>
>> endobj
-3262 0 obj <<
+3385 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 79.831 512.306 88.854]
+/Rect [521.223 66.282 539.579 75.305]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.5.2) >>
>> endobj
-3263 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 66.282 512.306 75.305]
-/Subtype /Link
-/A << /S /GoTo /D (subsubsection.11.4.5.3) >>
->> endobj
-3212 0 obj <<
-/D [3210 0 R /XYZ 85.039 786.531 null]
+3332 0 obj <<
+/D [3330 0 R /XYZ 85.039 786.531 null]
>> endobj
-3209 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R >>
+3329 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3266 0 obj <<
-/Length 2306
+3389 0 obj <<
+/Length 3352
/Filter /FlateDecode
>>
stream
-x\YsH~WojQ4\ve+$٤*d2 V9ci?'f/X7jx9m0}הxYI sc/n]%go|Sj3m}?te )6}}C4<WQsceq5/\_
-?ltڧsm!cxEҾ474ct}2Ӵ,1BHka;hgOD.
-hn(/a'|x97o6[PxC}x1h_}>
-<I>~ 3(rS8K*04wְVLP%ZdJe#ܶ:hn2F{N¹ds#u|DC4
-|3I9hTй ~_yՑ2ۊӘ<3_t
-p?$)A"[MvOf%|BUZ^v_O`hĴh촞L&vj~Ft7!L7Vpoz$IFS$6tB
--@ZH(q_]yWT;^ZH)"܀7d| h͒GwKAg6s2oOZTs4)gkS= 0W_Y?0к,Il>M6%;S>~eT  w(A3FCy!:6HJm#8E8*x'3v{E6NYaV%kPPFcɨ)S qtR(Ef&&E*uI
-KG1AjgL lOi>[5:1!q9hjʻ-XĆR qyݯkGZx^}E2 5Lҳd6絥=%)UuzB]_l6ejٓwR*dB{CM\T[L-r'l (w4u#Pe'{g2uAA2SD9_c_햵E{)ûj4Q]zȘo"OMgقQdU9-*~M
-S v^19WYfldvN|Ow7_є<.Yn<2ACs#jUcv.Hzz#-ʈgiW5O+)t#d^AmODOs]2Xk 4Nkxsͅt#%YK33Zz҃d[nKSWx{hl)-UӤ]WSz=]iϸJR>wP5:*yi#NUVZ+?NT lL*7^-jp?"ݏho)uK4-7%ZBpd 8yU :̲EWеmK^H,#Pa?-fiDA[zY
+xYo8+zߺ5#^:s9`2ȮMyݲ݈my8˫H%֌r >A}b]d?(%x(ʜHN'{L}j+%5ώ|A3ReNY勣Պ˾?~{y8jr{-J_2«rq^gVrOHN޿oJM݅%%mМE!%Ea$+d/jnڧˍl9_^_歽Oޚ+omڏmwWJD>W}]W_*dJ}cuaw8Uw/[IGbc+F*8* ذ=6H`M8lh{h˜7o/ԛ+kui/zӸ}ʿB~%!Y$8V!5LYND%SW*̕x/?U_d㯳/ gĹψ!1V a>u^z>B0^۾TZeu>0,95@qa;ABD ňw[3vn5va}oc?`-6BG,HyYhp6zx^6Bo?ܚA9OVX~ԉWs.r*)8WE#aϤq 9B(ڰ'Z% D#ZM)D6NkI֥>*v51V%=`/-jVzzZ~.*R*?
+9z ;;6j
+P޳H
+Y,]ƭ䂨JBv8u KL q
+x1‹H%8Z̅kj{1{*i˲/6]sқn~)ܔ%5{zrl]W4Hw#}NyߴLהwEY1<7En37`ә7K! UH{a(9#+v<1Ju9~qՃqx3\bG $wMx0 BTUymŗMby෣=7a6-Loa+exݲI7P :To>!]jw nv. 2MpBk)SMz}o5mL2Y`Ѓ}`
+ta])@:dP3`ޛgmRUd~vFK:!OCvVWvRˡ޲\wFmozO 4_3Eign7i:
+` C畚oY=)?3
+9t%*R~ws1ll_\ŜP5 -+sRdy
++aϔds !~2c?~ r2;:<|l.Ķs
+b7^ŭ=!ad bٱ
+YaȘgDfՀl
+clnՂ׉Ub"dB5ְGMKR;an=,K5\^
+aA;j!s`
endobj
-3265 0 obj <<
+3388 0 obj <<
/Type /Page
-/Contents 3266 0 R
-/Resources 3264 0 R
+/Contents 3389 0 R
+/Resources 3387 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3158 0 R
-/Annots [ 3268 0 R 3269 0 R 3270 0 R 3271 0 R 3272 0 R 3273 0 R 3274 0 R 3275 0 R 3276 0 R 3277 0 R 3278 0 R 3279 0 R 3280 0 R 3281 0 R 3282 0 R 3283 0 R 3284 0 R 3285 0 R 3286 0 R 3287 0 R 3288 0 R 3289 0 R 3290 0 R 3291 0 R 3292 0 R 3293 0 R 3294 0 R 3295 0 R 3296 0 R 3297 0 R 3298 0 R 3299 0 R 3300 0 R 3301 0 R 3302 0 R 3303 0 R 3304 0 R 3305 0 R 3306 0 R 3307 0 R 3308 0 R 3309 0 R 3310 0 R 3311 0 R 3312 0 R 3313 0 R 3314 0 R 3315 0 R 3316 0 R ]
+/Parent 3386 0 R
+/Annots [ 3391 0 R 3392 0 R 3393 0 R 3394 0 R 3395 0 R 3396 0 R 3397 0 R 3398 0 R 3399 0 R 3400 0 R 3401 0 R 3402 0 R 3403 0 R 3404 0 R 3405 0 R 3406 0 R 3407 0 R 3408 0 R 3409 0 R 3410 0 R 3411 0 R 3412 0 R 3413 0 R 3414 0 R 3415 0 R 3416 0 R 3417 0 R 3418 0 R 3419 0 R 3420 0 R 3421 0 R 3422 0 R 3423 0 R 3424 0 R 3425 0 R 3426 0 R 3427 0 R 3428 0 R 3429 0 R 3430 0 R 3431 0 R 3432 0 R 3433 0 R 3434 0 R 3435 0 R 3436 0 R ]
>> endobj
-3268 0 obj <<
+3391 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 754.651 512.306 763.674]
+/Rect [521.223 754.651 539.579 763.674]
+/Subtype /Link
+/A << /S /GoTo /D (subsubsection.11.4.5.3) >>
+>> endobj
+3392 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.11.4.5.4) >>
>> endobj
-3269 0 obj <<
+3393 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.4.6) >>
>> endobj
-3270 0 obj <<
+3394 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 727.553 512.306 736.575]
+/Rect [521.223 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (section.11.5) >>
>> endobj
-3271 0 obj <<
+3395 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 714.003 512.306 723.026]
+/Rect [521.223 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.5.1) >>
>> endobj
-3272 0 obj <<
+3396 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 700.454 512.306 709.477]
+/Rect [521.223 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.5.2) >>
>> endobj
-3273 0 obj <<
+3397 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 686.905 512.306 695.928]
+/Rect [521.223 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (subsection.11.5.3) >>
>> endobj
-3274 0 obj <<
+3398 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 662.447 512.306 672.015]
+/Rect [519.586 648.897 539.579 658.466]
/Subtype /Link
/A << /S /GoTo /D (chapter.12) >>
>> endobj
-3275 0 obj <<
+3399 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 648.897 512.306 657.92]
+/Rect [521.223 635.348 539.579 644.371]
/Subtype /Link
/A << /S /GoTo /D (section.12.1) >>
>> endobj
-3276 0 obj <<
+3400 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 635.348 512.306 644.371]
+/Rect [521.223 621.799 539.579 630.822]
/Subtype /Link
/A << /S /GoTo /D (section.12.2) >>
>> endobj
-3277 0 obj <<
+3401 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 621.799 512.306 630.822]
+/Rect [521.223 608.25 539.579 617.273]
/Subtype /Link
/A << /S /GoTo /D (subsection.12.2.1) >>
>> endobj
-3278 0 obj <<
+3402 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 608.25 512.306 617.273]
+/Rect [521.223 594.701 539.579 603.724]
/Subtype /Link
/A << /S /GoTo /D (section.12.3) >>
>> endobj
-3279 0 obj <<
+3403 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 594.701 512.306 603.724]
+/Rect [521.223 581.151 539.579 590.174]
/Subtype /Link
/A << /S /GoTo /D (subsection.12.3.1) >>
>> endobj
-3280 0 obj <<
+3404 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 581.151 512.306 590.174]
+/Rect [521.223 567.602 539.579 576.625]
/Subtype /Link
/A << /S /GoTo /D (subsection.12.3.2) >>
>> endobj
-3281 0 obj <<
+3405 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 567.602 512.306 576.625]
+/Rect [521.223 554.053 539.579 563.076]
/Subtype /Link
/A << /S /GoTo /D (section.12.4) >>
>> endobj
-3282 0 obj <<
+3406 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 554.053 512.306 563.076]
+/Rect [521.223 540.504 539.579 549.527]
/Subtype /Link
/A << /S /GoTo /D (subsection.12.4.1) >>
>> endobj
-3283 0 obj <<
+3407 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 540.504 512.306 549.527]
+/Rect [521.223 526.955 539.579 535.978]
/Subtype /Link
/A << /S /GoTo /D (subsection.12.4.2) >>
>> endobj
-3284 0 obj <<
+3408 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 513.406 539.579 522.428]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.12.4.3) >>
+>> endobj
+3409 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 516.046 512.306 525.614]
+/Rect [519.586 488.947 539.579 498.515]
/Subtype /Link
/A << /S /GoTo /D (chapter.13) >>
>> endobj
-3285 0 obj <<
+3410 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 502.496 512.306 511.519]
+/Rect [521.223 475.398 539.579 484.421]
/Subtype /Link
/A << /S /GoTo /D (section.13.1) >>
>> endobj
-3286 0 obj <<
+3411 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 488.947 512.306 497.97]
+/Rect [521.223 461.849 539.579 470.872]
/Subtype /Link
/A << /S /GoTo /D (section.13.2) >>
>> endobj
-3287 0 obj <<
+3412 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 475.398 512.306 484.421]
+/Rect [521.223 448.3 539.579 457.322]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.2.1) >>
>> endobj
-3288 0 obj <<
+3413 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 461.849 512.306 470.872]
+/Rect [521.223 434.75 539.579 443.773]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.2.2) >>
>> endobj
-3289 0 obj <<
+3414 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 448.3 512.306 457.322]
+/Rect [521.223 421.201 539.579 430.224]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.2.3) >>
>> endobj
-3290 0 obj <<
+3415 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 434.75 512.306 443.773]
+/Rect [521.223 407.652 539.579 416.675]
/Subtype /Link
/A << /S /GoTo /D (section.13.3) >>
>> endobj
-3291 0 obj <<
+3416 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 421.201 512.306 430.224]
+/Rect [521.223 394.103 539.579 403.126]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.3.1) >>
>> endobj
-3292 0 obj <<
+3417 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 407.652 512.306 416.675]
+/Rect [521.223 380.554 539.579 389.576]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.3.2) >>
>> endobj
-3293 0 obj <<
+3418 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 394.103 512.306 403.126]
+/Rect [521.223 367.004 539.579 376.027]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.3.3) >>
>> endobj
-3294 0 obj <<
+3419 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 380.554 512.306 389.576]
+/Rect [521.223 353.455 539.579 362.478]
/Subtype /Link
/A << /S /GoTo /D (section.13.4) >>
>> endobj
-3295 0 obj <<
+3420 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 367.004 512.306 376.027]
+/Rect [521.223 339.906 539.579 348.929]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.4.1) >>
>> endobj
-3296 0 obj <<
+3421 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 353.455 512.306 362.478]
+/Rect [521.223 326.357 539.579 335.38]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.13.4.1.1) >>
>> endobj
-3297 0 obj <<
+3422 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 339.906 512.306 348.929]
+/Rect [521.223 312.808 539.579 321.83]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.13.4.1.2) >>
>> endobj
-3298 0 obj <<
+3423 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 326.357 512.306 335.38]
+/Rect [521.223 299.258 539.579 308.281]
/Subtype /Link
/A << /S /GoTo /D (section.13.5) >>
>> endobj
-3299 0 obj <<
+3424 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 312.808 512.306 321.83]
+/Rect [521.223 285.709 539.579 294.732]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.5.1) >>
>> endobj
-3300 0 obj <<
+3425 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 299.258 512.306 308.281]
+/Rect [521.223 272.16 539.579 281.183]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.5.2) >>
>> endobj
-3301 0 obj <<
+3426 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 285.709 512.306 294.732]
+/Rect [521.223 258.611 539.579 267.634]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.5.3) >>
>> endobj
-3302 0 obj <<
+3427 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 272.16 512.306 281.183]
+/Rect [521.223 245.062 539.579 254.084]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.5.4) >>
>> endobj
-3303 0 obj <<
+3428 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 258.611 512.306 267.634]
+/Rect [521.223 231.512 539.579 240.535]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.13.5.4.1) >>
>> endobj
-3304 0 obj <<
+3429 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 245.062 512.306 254.084]
+/Rect [521.223 217.963 539.579 226.986]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.13.5.4.2) >>
>> endobj
-3305 0 obj <<
+3430 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 231.512 512.306 240.535]
+/Rect [521.223 204.414 539.579 213.437]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.5.5) >>
>> endobj
-3306 0 obj <<
+3431 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 217.963 512.306 226.986]
+/Rect [521.223 190.865 539.579 199.888]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.5.6) >>
>> endobj
-3307 0 obj <<
+3432 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 204.414 512.306 213.437]
+/Rect [521.223 177.316 539.579 186.338]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.5.7) >>
>> endobj
-3308 0 obj <<
+3433 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 190.865 512.306 199.888]
+/Rect [521.223 163.766 539.579 172.789]
/Subtype /Link
/A << /S /GoTo /D (section.13.6) >>
>> endobj
-3309 0 obj <<
+3434 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 177.316 512.306 186.338]
+/Rect [521.223 150.217 539.579 159.24]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.6.1) >>
>> endobj
-3310 0 obj <<
+3435 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 150.217 512.306 159.24]
+/Rect [521.223 123.119 539.579 132.142]
/Subtype /Link
/A << /S /GoTo /D (subsection.13.6.2) >>
>> endobj
-3311 0 obj <<
+3436 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 109.57 539.579 118.593]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.13.6.3) >>
+>> endobj
+3390 0 obj <<
+/D [3388 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3387 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3439 0 obj <<
+/Length 3495
+/Filter /FlateDecode
+>>
+stream
+xYSIz)bUutӆ g f 'bvIb[֑uHJ!&f$T~YW1t$cՠ(%&;L}
+%Pdyyk!4#UV ?TO.Fy9\r;#Ք1G6*~'>#;\0"8;G;ϲ+8+-c[Ќ1K ٖ_
+e/n#:Ljj߼M#F-v^Q6"r’ "#WyJ6o>-jVn<= Ϳ0h.ITD&9g<'b~ʓ9W\{ՍSk/ת7/ͧWtߌr^ڸz2«*k VN$iN"8|BkB'N\Y\\ eYN4{$K#jwƜJA o1$`bnHtM@SLsIxnWw*NUEۊz4&rVA薅FZbxK49nuo6ko|AGT
+P_V.XZsJ&a2jԼ8p 4L_LLm?fйµx"87RB$v#h, } ujtH eX֭0P׺vϵLEÁ~|OXc<*D N72 zr7IJa Ⱦߝ70pVÜX~nXR> bثή NL)dJHSXS/U;7)_`҄?i!=_hY.PdC@2 kSAo-V3W z]c_Ȃ bٮ YL')MKqUZxX/LR#}11sms3c3 `~ մb?Bg-va%{Ԕ!})1rlr2S$QnP.HH˺iԗi 3k=JjhLl/d)6
+K],!b׉"ɬk S옉L*׵6K2#ܶq)jak6s6s]tYl)SO1Ks\sgQ.(;u%h."qRyo1$ bLA$ 0.( %MIX3V%nZ32ս*OvOA}1z|Q%wM@c}#.rZQƽfY~ݵ:nӡ K9!cg#& 1Ş*] yglx$(KK! #";VQ0:}H#~0ԧ~m?. f bFwg 3؆anm?Ouv?+/ },$ڮ [L~)%\~؋
+zX3q)VC"+?ש+.8bLn1!)vyU*"9?$ am6W>[M*
+P i=#!KG\bB:PŮ%'RU %L֊ խ醢_bs[XbH,HX蚀BA >-!vf"v:]vU45D}C$!!<"]CDMB!J7#驍Y-U^F
+3I: pT_A C@wM@c=}IFe |v 3
+¤wi bHļ0隀 >PT-87Kۍs%r&7Kyߍ%;Q& ]\˛y7v^wc}I}1|
+3'S(J:Cʧw^>!c zLGO)[8~xf.@G|M}1}
+ 7*vXrg} ]bȈpia ^[f˂=8/ Џ!-& 1n I**~;7Qٝ0tz>c7F#1*$F& 1)1
+A 
+]PPT~m.mznn^7Ǻ=)*`)CRbEʘb7˖2һL!8_N6ܳlmi$`kb oLfԧ|58`cw>y+}Q1uqu5أV )j- a욜GYyRǟju~ ?!cE b{WKi]t=7V6-s.&ӣ{%^`_zRiԱNja4hL%#\OfMw.jmcTt44hL-+Rt`rO:Q^
+"*r{E
++Pݵ϶55Fl7q?rgP<2yV=gz_$㤰{dӤܝʿoS$UL)YAL޻>OS(1&&endstream
+endobj
+3438 0 obj <<
+/Type /Page
+/Contents 3439 0 R
+/Resources 3437 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3386 0 R
+/Annots [ 3441 0 R 3442 0 R 3443 0 R 3444 0 R 3445 0 R 3446 0 R 3447 0 R 3448 0 R 3449 0 R 3450 0 R 3451 0 R 3452 0 R 3453 0 R 3454 0 R 3455 0 R 3456 0 R 3457 0 R 3458 0 R 3459 0 R 3460 0 R 3461 0 R 3462 0 R 3463 0 R 3464 0 R 3465 0 R 3466 0 R 3467 0 R 3468 0 R 3469 0 R 3470 0 R 3471 0 R 3472 0 R 3473 0 R 3474 0 R 3475 0 R 3476 0 R 3477 0 R 3478 0 R 3479 0 R 3480 0 R 3481 0 R 3482 0 R 3483 0 R 3484 0 R 3485 0 R 3486 0 R 3487 0 R 3488 0 R 3489 0 R 3490 0 R 3491 0 R ]
+>> endobj
+3441 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 125.759 512.306 135.327]
+/Rect [519.586 754.651 539.579 764.219]
/Subtype /Link
/A << /S /GoTo /D (chapter.14) >>
>> endobj
-3312 0 obj <<
+3442 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 112.21 512.306 121.233]
+/Rect [521.223 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (section.14.1) >>
>> endobj
-3313 0 obj <<
+3443 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 98.661 512.306 107.683]
+/Rect [521.223 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (section.14.2) >>
>> endobj
-3314 0 obj <<
+3444 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 85.111 512.306 94.134]
+/Rect [521.223 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (subsection.14.2.1) >>
>> endobj
-3315 0 obj <<
+3445 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 71.562 512.306 80.585]
+/Rect [521.223 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.14.2.1.1) >>
>> endobj
-3316 0 obj <<
+3446 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 58.013 512.306 67.036]
+/Rect [521.223 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.14.2.1.2) >>
>> endobj
-3267 0 obj <<
-/D [3265 0 R /XYZ 85.039 786.531 null]
->> endobj
-3264 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-3319 0 obj <<
-/Length 2148
-/Filter /FlateDecode
->>
-stream
-x\s8~ffײ%K~i&5d1.0goW+ ^h3- cjզ?Uø+U䉐uYNʳ33.HG΃2ߋ; zy?P:_Ueɰqx]{wE/;ƪ}qw"s݅.}jóBãI8={h&6<4^1zp9}0vFǏyE:fg6+O)|.}ՃV׾6#/pG9g?B!ޒE^4_:AE!_jn>Cx~ { d>yMdcӌ9j3~GDZ 0/:EDZÙ(X`}ztlEd, N.
-NHN |xxdNBKS\T"f="CBҙucTʲ' ~={Lږ^/r!hĪ1۫#0+>[FZ'0L {U$*z8Fݕk5`.;$Pb~XF `Њ92q`ͥ)Β(Y{g7;/xjv<@` XlC@@k2 Vhb%IɓV3Q
-ڲSOYe'CNC\{6ߑZF/VԨ:(/2m+L5׵(iic-[XZ,ALŽn riЄs!<v8ҡӨfp7tt%qTĺ̲RA䯴F]_@R?}|ERUFf!ޢfvٚ=TT5۴@4P W]AhWesR' z"Ýy~=6XW VءbK/%VɪbEMiw,-[s!+P۴XrI|rrÁiK<-P-Tk-kqSq
-Ԥh.J/ޭ /P|ٵojS^!섴u1IKϊk;C\:-\z
-endobj
-3318 0 obj <<
-/Type /Page
-/Contents 3319 0 R
-/Resources 3317 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 3158 0 R
-/Annots [ 3321 0 R 3322 0 R 3323 0 R 3324 0 R 3325 0 R 3326 0 R 3327 0 R 3328 0 R 3329 0 R 3330 0 R 3331 0 R 3332 0 R 3333 0 R 3334 0 R 3335 0 R 3336 0 R 3337 0 R 3338 0 R 3339 0 R 3340 0 R 3341 0 R 3342 0 R 3343 0 R 3344 0 R 3345 0 R 3346 0 R 3347 0 R 3348 0 R 3349 0 R 3350 0 R 3351 0 R 3352 0 R 3353 0 R 3354 0 R 3355 0 R 3356 0 R 3357 0 R 3358 0 R 3359 0 R 3360 0 R 3361 0 R 3362 0 R 3363 0 R 3364 0 R 3365 0 R 3366 0 R ]
->> endobj
-3321 0 obj <<
+3447 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 754.651 512.306 763.674]
+/Rect [521.223 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.14.2.1.3) >>
>> endobj
-3322 0 obj <<
+3448 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.14.2.1.4) >>
>> endobj
-3323 0 obj <<
+3449 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 727.553 512.306 736.575]
+/Rect [521.223 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.14.2.1.5) >>
>> endobj
-3324 0 obj <<
+3450 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 714.003 512.306 723.026]
+/Rect [521.223 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.14.2.1.6) >>
>> endobj
-3325 0 obj <<
+3451 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 700.454 512.306 709.477]
+/Rect [521.223 619.159 539.579 628.182]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.14.2.1.7) >>
>> endobj
-3326 0 obj <<
+3452 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 686.905 512.306 695.928]
+/Rect [521.223 605.61 539.579 614.633]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.14.2.1.8) >>
>> endobj
-3327 0 obj <<
+3453 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 673.356 512.306 682.379]
+/Rect [521.223 592.061 539.579 601.083]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.14.2.1.9) >>
>> endobj
-3328 0 obj <<
+3454 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 659.807 512.306 668.829]
+/Rect [521.223 578.511 539.579 587.534]
/Subtype /Link
/A << /S /GoTo /D (section.14.3) >>
>> endobj
-3329 0 obj <<
+3455 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 646.257 512.306 655.28]
+/Rect [521.223 564.962 539.579 573.985]
/Subtype /Link
/A << /S /GoTo /D (subsection.14.3.1) >>
>> endobj
-3330 0 obj <<
+3456 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 632.708 512.306 641.731]
+/Rect [521.223 551.413 539.579 560.436]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.14.3.1.1) >>
>> endobj
-3331 0 obj <<
+3457 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 619.159 512.306 628.182]
+/Rect [521.223 537.864 539.579 546.887]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.14.3.1.2) >>
>> endobj
-3332 0 obj <<
+3458 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 605.61 512.306 614.633]
+/Rect [521.223 524.315 539.579 533.337]
/Subtype /Link
/A << /S /GoTo /D (section.14.4) >>
>> endobj
-3333 0 obj <<
+3459 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 592.061 512.306 601.083]
+/Rect [521.223 510.765 539.579 519.788]
/Subtype /Link
/A << /S /GoTo /D (subsection.14.4.1) >>
>> endobj
-3334 0 obj <<
+3460 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 578.511 512.306 587.534]
+/Rect [521.223 497.216 539.579 506.239]
/Subtype /Link
/A << /S /GoTo /D (subsection.14.4.2) >>
>> endobj
-3335 0 obj <<
+3461 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 564.962 512.306 573.985]
+/Rect [521.223 483.667 539.579 492.69]
/Subtype /Link
/A << /S /GoTo /D (section.14.5) >>
>> endobj
-3336 0 obj <<
+3462 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 551.413 512.306 560.436]
+/Rect [521.223 470.118 539.579 479.141]
/Subtype /Link
/A << /S /GoTo /D (section.14.6) >>
>> endobj
-3337 0 obj <<
+3463 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 537.864 512.306 546.887]
+/Rect [521.223 456.569 539.579 465.591]
/Subtype /Link
/A << /S /GoTo /D (subsection.14.6.1) >>
>> endobj
-3338 0 obj <<
+3464 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 524.315 512.306 533.337]
+/Rect [521.223 443.019 539.579 452.042]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.14.6.2) >>
+>> endobj
+3465 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 429.47 539.579 438.493]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.14.6.3) >>
+>> endobj
+3466 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 415.921 539.579 424.944]
/Subtype /Link
/A << /S /GoTo /D (section.14.7) >>
>> endobj
-3339 0 obj <<
+3467 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 499.856 512.306 509.425]
+/Rect [519.586 391.463 539.579 401.031]
/Subtype /Link
/A << /S /GoTo /D (chapter.15) >>
>> endobj
-3340 0 obj <<
+3468 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 486.307 512.306 495.33]
+/Rect [521.223 377.914 539.579 386.936]
/Subtype /Link
/A << /S /GoTo /D (section.15.1) >>
>> endobj
-3341 0 obj <<
+3469 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 472.758 512.306 481.781]
+/Rect [521.223 364.364 539.579 373.387]
/Subtype /Link
/A << /S /GoTo /D (section.15.2) >>
>> endobj
-3342 0 obj <<
+3470 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 459.209 512.306 468.232]
+/Rect [521.223 350.815 539.579 359.838]
/Subtype /Link
/A << /S /GoTo /D (section.15.3) >>
>> endobj
-3343 0 obj <<
+3471 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 445.66 512.306 454.682]
+/Rect [521.223 337.266 539.579 346.289]
/Subtype /Link
/A << /S /GoTo /D (subsection.15.3.1) >>
>> endobj
-3344 0 obj <<
+3472 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 432.11 512.306 441.133]
+/Rect [521.223 323.717 539.579 332.74]
/Subtype /Link
/A << /S /GoTo /D (subsection.15.3.2) >>
>> endobj
-3345 0 obj <<
+3473 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 418.561 512.306 427.584]
+/Rect [521.223 310.168 539.579 319.19]
/Subtype /Link
/A << /S /GoTo /D (subsection.15.3.3) >>
>> endobj
-3346 0 obj <<
+3474 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 405.012 512.306 414.035]
+/Rect [521.223 296.618 539.579 305.641]
/Subtype /Link
/A << /S /GoTo /D (subsection.15.3.4) >>
>> endobj
-3347 0 obj <<
+3475 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 391.463 512.306 400.486]
+/Rect [521.223 283.069 539.579 292.092]
/Subtype /Link
/A << /S /GoTo /D (subsection.15.3.5) >>
>> endobj
-3348 0 obj <<
+3476 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 377.914 512.306 386.936]
+/Rect [521.223 269.52 539.579 278.543]
/Subtype /Link
/A << /S /GoTo /D (subsection.15.3.6) >>
>> endobj
-3349 0 obj <<
+3477 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 364.364 512.306 373.387]
+/Rect [521.223 255.971 539.579 264.994]
/Subtype /Link
/A << /S /GoTo /D (section.15.4) >>
>> endobj
-3350 0 obj <<
+3478 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 350.815 512.306 359.838]
+/Rect [521.223 242.422 539.579 251.444]
/Subtype /Link
/A << /S /GoTo /D (section.15.5) >>
>> endobj
-3351 0 obj <<
+3479 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 337.266 512.306 346.289]
+/Rect [521.223 228.872 539.579 237.895]
/Subtype /Link
/A << /S /GoTo /D (subsection.15.5.1) >>
>> endobj
-3352 0 obj <<
+3480 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 323.717 512.306 332.74]
+/Rect [521.223 215.323 539.579 224.346]
/Subtype /Link
/A << /S /GoTo /D (subsection.15.5.2) >>
>> endobj
-3353 0 obj <<
+3481 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 299.258 512.306 308.827]
+/Rect [519.586 190.865 539.579 200.433]
/Subtype /Link
/A << /S /GoTo /D (chapter.16) >>
>> endobj
-3354 0 obj <<
+3482 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 285.709 512.306 294.732]
+/Rect [521.223 177.316 539.579 186.338]
/Subtype /Link
/A << /S /GoTo /D (section.16.1) >>
>> endobj
-3355 0 obj <<
+3483 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 272.16 512.306 281.183]
+/Rect [521.223 163.766 539.579 172.789]
/Subtype /Link
/A << /S /GoTo /D (section.16.2) >>
>> endobj
-3356 0 obj <<
+3484 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 258.611 512.306 267.634]
+/Rect [521.223 150.217 539.579 159.24]
/Subtype /Link
/A << /S /GoTo /D (section.16.3) >>
>> endobj
-3357 0 obj <<
+3485 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 245.062 512.306 254.084]
+/Rect [521.223 136.668 539.579 145.691]
/Subtype /Link
/A << /S /GoTo /D (subsection.16.3.1) >>
>> endobj
-3358 0 obj <<
+3486 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 217.963 512.306 226.986]
+/Rect [521.223 123.119 539.579 132.142]
/Subtype /Link
/A << /S /GoTo /D (subsection.16.3.2) >>
>> endobj
-3359 0 obj <<
+3487 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 109.57 539.579 118.593]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.16.3.3) >>
+>> endobj
+3488 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 204.414 512.306 213.437]
+/Rect [521.223 96.02 539.579 105.043]
/Subtype /Link
/A << /S /GoTo /D (section.16.4) >>
>> endobj
-3360 0 obj <<
+3489 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 190.865 512.306 199.888]
+/Rect [521.223 82.471 539.579 91.494]
/Subtype /Link
/A << /S /GoTo /D (subsection.16.4.1) >>
>> endobj
-3361 0 obj <<
+3490 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 177.316 512.306 186.338]
+/Rect [521.223 68.922 539.579 77.945]
/Subtype /Link
/A << /S /GoTo /D (subsection.16.4.2) >>
>> endobj
-3362 0 obj <<
+3491 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 163.766 512.306 172.789]
+/Rect [521.223 55.373 539.579 64.396]
/Subtype /Link
/A << /S /GoTo /D (section.16.5) >>
>> endobj
-3363 0 obj <<
+3440 0 obj <<
+/D [3438 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3437 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3494 0 obj <<
+/Length 3853
+/Filter /FlateDecode
+>>
+stream
+xYs6+f]̃ H#ى]ek)r@k(9N_
+}#DŽ1yK1SJx޶V#y?L[6K A ojf>IVQ!kkR`0pF ˙$X>E? F`դU5+3W?k.n{ٙFyV׺oX/)UmokpֵW=o!*)ESc0yGWExL8st Nj͵n»6tW>d)ӄ @7&1 
+3(>_t^_,H1VИlDȎdf&)KkTߞӿpo89B39bFs U
+=4lЇ*
+
+ӥKΪʌQ_c}=qpEvJSчf
+ٍזke}S~Qs[)}Oޚj* Ð?T q2F2&J|(rgv  =&
+(o܈}v3Q[-4ɒ
+
+C@CHQ鲱^r ˑg\]inޚc* `Z$ #*
+
+kV F}@}0G&y!5TΡ96H.*
+ vTIQE޵y7[ٴu!ruo6c=Kga|"t8. ` &%YrcD4XP[PCrbtGj=>]ht&54F%Yb=8ڌp j :}hmY.;wѤgN_^&J-4E#Y=@ 1<V|p7ε5jNɈeիR/5H?W{
+44Fv%Y8
+
+Omz?T<|~㠖\޸\|{ۂZwwc9_ Ne #S,YQ` 9Cۼ_ob[r(~waU/Ʋ5T?
+ H塜۴컻mooUWY"Aا}9|C_+5TΡ927r
+
+"`O:|_x;eFcK߇^G1ϋDUhdW4NHYRxh$g@W?myϮr1|RGol6ul~Zfo^FLqS"u+.}uA{Vize7Io_Hb޷cn(k ~`~߾f3k`y5С|kT>G?Vzo}ƼPGX\|uoi0VLo<Op  ^,UpW:3dMHn._sReendstream
+endobj
+3493 0 obj <<
+/Type /Page
+/Contents 3494 0 R
+/Resources 3492 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3386 0 R
+/Annots [ 3496 0 R 3497 0 R 3498 0 R 3499 0 R 3500 0 R 3501 0 R 3502 0 R 3503 0 R 3504 0 R 3505 0 R 3506 0 R 3507 0 R 3508 0 R 3509 0 R 3510 0 R 3511 0 R 3512 0 R 3513 0 R 3514 0 R 3515 0 R 3516 0 R 3517 0 R 3518 0 R 3519 0 R 3520 0 R 3521 0 R 3522 0 R 3523 0 R 3524 0 R 3525 0 R 3526 0 R 3527 0 R 3528 0 R 3529 0 R 3530 0 R 3531 0 R 3532 0 R 3533 0 R 3534 0 R 3535 0 R 3536 0 R 3537 0 R 3538 0 R 3539 0 R 3540 0 R 3541 0 R 3542 0 R 3543 0 R 3544 0 R 3545 0 R 3546 0 R ]
+>> endobj
+3496 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 150.217 512.306 159.24]
+/Rect [521.223 754.651 539.579 763.674]
/Subtype /Link
-/A << /S /GoTo /D (subsection.16.5.1) >>
+/A << /S /GoTo /D (section.16.6) >>
>> endobj
-3364 0 obj <<
+3497 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 125.759 512.306 135.327]
+/Rect [519.586 730.193 539.579 739.761]
/Subtype /Link
/A << /S /GoTo /D (chapter.17) >>
>> endobj
-3365 0 obj <<
+3498 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 112.21 512.306 121.233]
+/Rect [521.223 716.643 539.579 725.666]
/Subtype /Link
/A << /S /GoTo /D (section.17.1) >>
>> endobj
-3366 0 obj <<
+3499 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 98.661 512.306 107.683]
+/Rect [521.223 703.094 539.579 712.117]
/Subtype /Link
/A << /S /GoTo /D (section.17.2) >>
>> endobj
-3320 0 obj <<
-/D [3318 0 R /XYZ 85.039 786.531 null]
->> endobj
-3317 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-3369 0 obj <<
-/Length 2735
-/Filter /FlateDecode
->>
-stream
-x\[sJ~кNUЃ80 I֩M⍝<`- "'w{F'Nd+U 0o_4#GsGo;^<
-=w48[qŁ+pFv=8yGcN<S.+*,~/]hLf{g?8݉mvx4?gܓYU:N,n-M<ǎ">x؞x}" <I̭bZriR'^Xgu^6yy {uZ,ĖkUc_l> _vDo_||os.WNr,v٠ gum΢]]s8V6
-n\l %14cmosˇm
-1
-I̳V"a*8?H=4=Glװ|j>W
--#KirU;R$nh,l$uڝu\I_!y~>y/+8WK1ܑ3bJItD; {)_soD>0FNFp38'x(0%S; [Isx5"(RTs(%+4Jf[$0 d;G䵜GMA1`|Qr:g]@ߑ+7hh? .}ϳ(Z*)|BtD9".B8SjtB,vF %'YT^8jnmVAµt{+N'~>pu3 `UTI^j"f愾HH Id1}R
-_L<̐Ũ5[Uv8´-rIVoޗL ")c?bs |a64>P SE/x󤔙/
-a[*YKsvr2/0'a+PKвr}A>R0ս9j:U+VJxߟǙ#f-Uy٨<Ja\b+n;E4 o8f6W69V)ȥ l^If9% e
- !q%cpߴh(r~^cJ
-_Ru Z1[!q(*zd+i^whVLQϛJVu'%N,1 Oaߡ,j$E+"v*nKS [Vcdw4}ۤKN~ۋTli[0333;H`&_[* 9\?~c}]:ػ(:b4ҟL'zsl!EZ;z3qU%:2̀
-Ka ]bHU~מZd`s;d]pkkӟf6a󷩇gR=<'jUL jш>洤fhgp69JO0aەdYQwRVb#q+rQ~$Ծ
-ԵY׋Ҿ0`co頯\ 7S+߈+j2 ^2!"
-s;)Q&8r -2rs TpkKOWsnQfŽF^km$,=FdI# 8ZiF[ed@v}w0Q+Ȫ)2T2Șo9U ɴX/-iN+R2)bʼnPSRd0 wB3oxFF"Y: "0Ja\ߐ8aٶzI`uP\ըQCHC@~ @/&bbS)jM#
-fĮQa*9qUhރ!mSl e+yTh}BF3vʓ(*ی<jc2QW"޼&|A?Zedr4[[2w>B5r 'U犪k*j.U\C2QG"V*<[RE=*| >UDWD$PE&d+UV\_IAbIAT`z`cEDQ|
-ɪkrlG} 1xQO<?cy"3}q*[~Gֹh^Oh+]@ף2+<Ch;Nc)w ]- v_t)䙯/du =##BZEc5ؒ^晴H^]&JRK`wZe"DPkSC(x$5g%>g{ y*q[
-nz%*s74V"ș`qDkNGG$0-f
-HoC`D| @~}[:}9KLZg2[|h}@=
-endobj
-3368 0 obj <<
-/Type /Page
-/Contents 3369 0 R
-/Resources 3367 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 3158 0 R
-/Annots [ 3371 0 R 3372 0 R 3373 0 R 3374 0 R 3375 0 R 3376 0 R 3377 0 R 3378 0 R 3379 0 R 3380 0 R 3381 0 R 3382 0 R 3383 0 R 3384 0 R 3385 0 R 3386 0 R 3387 0 R 3388 0 R 3389 0 R 3390 0 R 3391 0 R 3392 0 R 3393 0 R 3394 0 R 3395 0 R 3396 0 R 3397 0 R 3398 0 R 3399 0 R 3400 0 R 3401 0 R 3402 0 R 3403 0 R 3404 0 R 3405 0 R 3406 0 R 3407 0 R 3408 0 R 3409 0 R 3410 0 R 3411 0 R 3412 0 R 3413 0 R 3414 0 R 3415 0 R 3416 0 R 3417 0 R 3418 0 R 3419 0 R ]
->> endobj
-3371 0 obj <<
+3500 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 754.651 512.306 764.219]
+/Rect [519.586 678.636 539.579 688.204]
/Subtype /Link
/A << /S /GoTo /D (chapter.18) >>
>> endobj
-3372 0 obj <<
+3501 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 665.087 539.579 674.11]
/Subtype /Link
/A << /S /GoTo /D (section.18.1) >>
>> endobj
-3373 0 obj <<
+3502 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 727.553 512.306 736.575]
+/Rect [521.223 651.538 539.579 660.56]
/Subtype /Link
/A << /S /GoTo /D (section.18.2) >>
>> endobj
-3374 0 obj <<
+3503 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 714.003 512.306 723.026]
+/Rect [521.223 637.988 539.579 647.011]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.2.1) >>
>> endobj
-3375 0 obj <<
+3504 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 700.454 512.306 709.477]
+/Rect [521.223 624.439 539.579 633.462]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.2.2) >>
>> endobj
-3376 0 obj <<
+3505 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 686.905 512.306 695.928]
+/Rect [521.223 610.89 539.579 619.913]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.2.3) >>
>> endobj
-3377 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 673.356 512.306 682.379]
-/Subtype /Link
-/A << /S /GoTo /D (subsection.18.2.4) >>
->> endobj
-3378 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 659.807 512.306 668.829]
-/Subtype /Link
-/A << /S /GoTo /D (subsection.18.2.5) >>
->> endobj
-3379 0 obj <<
+3506 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 646.257 512.306 655.28]
+/Rect [521.223 597.341 539.579 606.364]
/Subtype /Link
/A << /S /GoTo /D (section.18.3) >>
>> endobj
-3380 0 obj <<
+3507 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 632.708 512.306 641.731]
+/Rect [521.223 583.792 539.579 592.814]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.3.1) >>
>> endobj
-3381 0 obj <<
+3508 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 619.159 512.306 628.182]
+/Rect [521.223 570.242 539.579 579.265]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.3.2) >>
>> endobj
-3382 0 obj <<
+3509 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 605.61 512.306 614.633]
+/Rect [521.223 556.693 539.579 565.716]
/Subtype /Link
/A << /S /GoTo /D (section.18.4) >>
>> endobj
-3383 0 obj <<
+3510 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 592.061 512.306 601.083]
+/Rect [521.223 543.144 539.579 552.167]
/Subtype /Link
/A << /S /GoTo /D (section.18.5) >>
>> endobj
-3384 0 obj <<
+3511 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 578.511 512.306 587.534]
+/Rect [521.223 529.595 539.579 538.618]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.5.1) >>
>> endobj
-3385 0 obj <<
+3512 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 564.962 512.306 573.985]
+/Rect [521.223 516.046 539.579 525.068]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.5.2) >>
>> endobj
-3386 0 obj <<
+3513 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 551.413 512.306 560.436]
+/Rect [521.223 502.496 539.579 511.519]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.5.3) >>
>> endobj
-3387 0 obj <<
+3514 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 537.864 512.306 546.887]
+/Rect [521.223 488.947 539.579 497.97]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.5.4) >>
>> endobj
-3388 0 obj <<
+3515 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 524.315 512.306 533.337]
+/Rect [521.223 475.398 539.579 484.421]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.5.5) >>
>> endobj
-3389 0 obj <<
+3516 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 510.765 512.306 519.788]
+/Rect [521.223 461.849 539.579 470.872]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.5.6) >>
>> endobj
-3390 0 obj <<
+3517 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 497.216 512.306 506.239]
+/Rect [521.223 448.3 539.579 457.322]
/Subtype /Link
/A << /S /GoTo /D (section.18.6) >>
>> endobj
-3391 0 obj <<
+3518 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 483.667 512.306 492.69]
+/Rect [521.223 434.75 539.579 443.773]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.6.1) >>
>> endobj
-3392 0 obj <<
+3519 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 470.118 512.306 479.141]
+/Rect [521.223 421.201 539.579 430.224]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.6.2) >>
>> endobj
-3393 0 obj <<
+3520 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 456.569 512.306 465.591]
+/Rect [521.223 407.652 539.579 416.675]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.6.3) >>
>> endobj
-3394 0 obj <<
+3521 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 443.019 512.306 452.042]
+/Rect [521.223 394.103 539.579 403.126]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.6.4) >>
>> endobj
-3395 0 obj <<
+3522 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 429.47 512.306 438.493]
+/Rect [521.223 380.554 539.579 389.576]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.6.5) >>
>> endobj
-3396 0 obj <<
+3523 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 415.921 512.306 424.944]
+/Rect [521.223 367.004 539.579 376.027]
/Subtype /Link
/A << /S /GoTo /D (section.18.7) >>
>> endobj
-3397 0 obj <<
+3524 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 402.372 512.306 411.395]
+/Rect [521.223 353.455 539.579 362.478]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.7.1) >>
>> endobj
-3398 0 obj <<
+3525 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 388.823 512.306 397.845]
+/Rect [521.223 339.906 539.579 348.929]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.7.2) >>
>> endobj
-3399 0 obj <<
+3526 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 375.273 512.306 384.296]
+/Rect [521.223 326.357 539.579 335.38]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.18.7.2.1) >>
>> endobj
-3400 0 obj <<
+3527 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 348.175 512.306 357.198]
+/Rect [521.223 312.808 539.579 321.83]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.18.7.2.2) >>
>> endobj
-3401 0 obj <<
+3528 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 334.626 512.306 343.649]
+/Rect [521.223 299.258 539.579 308.281]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.18.7.2.3) >>
>> endobj
-3402 0 obj <<
+3529 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 321.077 512.306 330.099]
+/Rect [521.223 285.709 539.579 294.732]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.18.7.2.4) >>
>> endobj
-3403 0 obj <<
+3530 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 307.527 512.306 316.55]
+/Rect [521.223 272.16 539.579 281.183]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.18.7.2.5) >>
>> endobj
-3404 0 obj <<
+3531 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 280.429 512.306 289.452]
+/Rect [521.223 258.611 539.579 267.634]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.18.7.2.6) >>
>> endobj
-3405 0 obj <<
+3532 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 266.88 512.306 275.903]
+/Rect [521.223 245.062 539.579 254.084]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.18.7.2.7) >>
>> endobj
-3406 0 obj <<
+3533 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 253.331 512.306 262.354]
+/Rect [521.223 231.512 539.579 240.535]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.18.7.2.8) >>
>> endobj
-3407 0 obj <<
+3534 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 239.781 512.306 248.804]
+/Rect [521.223 217.963 539.579 226.986]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.18.7.2.9) >>
>> endobj
-3408 0 obj <<
+3535 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 212.683 512.306 221.706]
+/Rect [521.223 204.414 539.579 213.437]
/Subtype /Link
/A << /S /GoTo /D (section.18.8) >>
>> endobj
-3409 0 obj <<
+3536 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 199.134 512.306 208.157]
+/Rect [521.223 190.865 539.579 199.888]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.8.1) >>
>> endobj
-3410 0 obj <<
+3537 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 185.585 512.306 194.608]
+/Rect [521.223 177.316 539.579 186.338]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.8.2) >>
>> endobj
-3411 0 obj <<
+3538 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 172.036 512.306 181.058]
+/Rect [521.223 163.766 539.579 172.789]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.8.3) >>
>> endobj
-3412 0 obj <<
+3539 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 158.486 512.306 167.509]
+/Rect [521.223 150.217 539.579 159.24]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.8.4) >>
>> endobj
-3413 0 obj <<
+3540 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 144.937 512.306 153.96]
+/Rect [521.223 136.668 539.579 145.691]
/Subtype /Link
/A << /S /GoTo /D (section.18.9) >>
>> endobj
-3414 0 obj <<
+3541 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 131.388 512.306 140.411]
+/Rect [521.223 123.119 539.579 132.142]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.9.1) >>
>> endobj
-3415 0 obj <<
+3542 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 117.839 512.306 126.862]
+/Rect [521.223 109.57 539.579 118.593]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.9.2) >>
>> endobj
-3416 0 obj <<
+3543 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 104.29 512.306 113.312]
+/Rect [521.223 96.02 539.579 105.043]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.9.3) >>
>> endobj
-3417 0 obj <<
+3544 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 90.74 512.306 99.763]
+/Rect [521.223 82.471 539.579 91.494]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.9.4) >>
>> endobj
-3418 0 obj <<
+3545 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 77.191 512.306 86.214]
+/Rect [521.223 68.922 539.579 77.945]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.9.5) >>
>> endobj
-3419 0 obj <<
+3546 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 63.642 512.306 72.665]
+/Rect [521.223 55.373 539.579 64.396]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.9.6) >>
>> endobj
-3370 0 obj <<
-/D [3368 0 R /XYZ 85.039 786.531 null]
+3495 0 obj <<
+/D [3493 0 R /XYZ 85.039 786.531 null]
>> endobj
-3367 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R >>
+3492 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3422 0 obj <<
-/Length 2603
+3549 0 obj <<
+/Length 3834
/Filter /FlateDecode
>>
stream
-x\[SH~WxyYj,7I]0%
-lC&6FH2Ij9-l0!֥Ւ\ERFL4#t'Mԙ;Čz<b.vc#Q(#ٻ!a94heͅ3ɀ<f0;?E/;QdHٛpB/vw΢jóXÔj#
-ӔMĆ&i($Xe> MQ;7c=HP֍?UOzcfjɢR[YZ*ȍ@b=~ć<r5 >f!IZDť\?8 Iդ7޿l:3CVsNaE0fܽ+JS
-ˀҏ\zK䳙B' Z~?@Ls
-k}R9#=,4 E\ Z,4>Ϧ}W@p%S&xpBIDvcCO5uɭ;˫6E%L͠m&{wNķA -C'i
-bldɪ:U2.ZM
-
-P+n&SC..QE DV
-ym'\V Rtm -UICP`Svħ6"3x!$Q"G}+Ne؜r:b_L Yoqh.$"pr7fok\7eASb*=fNv%g)Z 0@%A& JBHrکۮxrAO;j `ʰBg.tլR h_H#aӨl`.Qb-K@JmTS.lG>w:nnJVEpc#}{Es',yz972B-MaK<<ϲ+b;$Jǁ>߱w( 45m}Al%۴Wzf ꦂ1|(sv~!<䜚9s!K\.n*NdMmUȳ.=}vf0EUbᔱIS`;(Azat0ZedoaRl+к4P
-XT$Mqeݜ|n*̾vAևi9?nw{7򖏾=:ZdɁ.9iu\Eu.+T($oK<7waflQ.鱒QoA
-]@_ NbcUlZ uŎ:Bx
-dž U}Qu @'^GW5?tKyޯl1f▷u
+x[s6)~Yif7^fv;ɸSwݙȒ*q3\$eIc'ө-Sx~
+aZ]?MH蹾r9$T(9@ȁ2`F)'tȾgH l5] jpϷ#W۸/kW6;%v laXHJ.ݐ LR /PP
+h'D@X:Ծ02C0.mz'q>) ?@?PnabRt
+ (+ho}1zuUr?
+=ʊʏg:Y4}\#cFo ubnWL,kȕ=YP^ab}^E$`hWPe8(BLh!"ΡI_o>ϷOuc,bi8vߥ±}bPB>Vm|M}bž]=e8Yd _?oΡHlm"9~:}8⛙(t/X}bĻBN*X)0vz` =ƺ`!dBGoH,FH$!EI]B"g93' ϙN=66Ӎ {LQ3w-V˿FpJ?5/X`bݮ2YJL kL᜿oFgzK!L ˇ9Y" &A)kKh{3[."z/DFz@{
+-JPf~xwcV1y'B?¯ɫKJcfnKLnp2?6[wKBhPoݴ[U#Φd˪ZmX WtnZO+)ZUC 8簱Pxx鐏{mftUIá;V /`vm.w1usv ٣K($R`N9/D!doA QJ("'VGۢ?q}U:HPJhWe8 "fޭ2 pyV$S;"p0^&a *yX@UA,F A]B'd+*s6>` N!_a3 W\ !t'va_Y1lXTHQ
+eq9nbq!OnAŃByRyy!.Ѝ4>%"?`$[an
+')*x)~PWyD|黑M<3OV˝qݦF㜫pWE"U A ^,yTOpNM̶ jp (7s+j c~e.Yw\U~B=}bv\Yqݦj0@/y>؝xltG.<2ٚŇkMqX8ݹiM8hIH? yr Heot%ŋbNpwj;+A
+
+oč;#p'^s@ܔ[p
+qk[L|O'0h\k衾c1{}
+{
+vpy^r~jzk6S a{+ѣJ #$$Ю!ʰ@LSgx nݬM6Eg<썹 |
+Kr W>I^}c'XeQ:WbARV=2cH9ub,s!wEdKuNNnfMY i*(ʄ5v~k/6qv;XK_i͝
endobj
-3421 0 obj <<
+3548 0 obj <<
/Type /Page
-/Contents 3422 0 R
-/Resources 3420 0 R
+/Contents 3549 0 R
+/Resources 3547 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3471 0 R
-/Annots [ 3424 0 R 3425 0 R 3426 0 R 3427 0 R 3428 0 R 3429 0 R 3430 0 R 3431 0 R 3432 0 R 3433 0 R 3434 0 R 3435 0 R 3436 0 R 3437 0 R 3438 0 R 3439 0 R 3440 0 R 3441 0 R 3442 0 R 3443 0 R 3444 0 R 3445 0 R 3446 0 R 3447 0 R 3448 0 R 3449 0 R 3450 0 R 3451 0 R 3452 0 R 3453 0 R 3454 0 R 3455 0 R 3456 0 R 3457 0 R 3458 0 R 3459 0 R 3460 0 R 3461 0 R 3462 0 R 3463 0 R 3464 0 R 3465 0 R 3466 0 R 3467 0 R 3468 0 R 3469 0 R 3470 0 R ]
+/Parent 3386 0 R
+/Annots [ 3551 0 R 3552 0 R 3553 0 R 3554 0 R 3555 0 R 3556 0 R 3557 0 R 3558 0 R 3559 0 R 3560 0 R 3561 0 R 3562 0 R 3563 0 R 3564 0 R 3565 0 R 3566 0 R 3567 0 R 3568 0 R 3569 0 R 3570 0 R 3571 0 R 3572 0 R 3573 0 R 3574 0 R 3575 0 R 3576 0 R 3577 0 R 3578 0 R 3579 0 R 3580 0 R 3581 0 R 3582 0 R 3583 0 R 3584 0 R 3585 0 R 3586 0 R 3587 0 R 3588 0 R 3589 0 R 3590 0 R 3591 0 R 3592 0 R 3593 0 R 3594 0 R 3595 0 R 3596 0 R 3597 0 R 3598 0 R 3599 0 R ]
>> endobj
-3424 0 obj <<
+3551 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 754.651 539.579 763.674]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.9.7) >>
>> endobj
-3425 0 obj <<
+3552 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 727.553 512.306 736.575]
+/Rect [521.223 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (section.18.10) >>
>> endobj
-3426 0 obj <<
+3553 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 714.003 512.306 723.026]
+/Rect [521.223 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.10.1) >>
>> endobj
-3427 0 obj <<
+3554 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 700.454 512.306 709.477]
+/Rect [521.223 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.10.2) >>
>> endobj
-3428 0 obj <<
+3555 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 686.905 512.306 695.928]
+/Rect [521.223 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.10.3) >>
>> endobj
-3429 0 obj <<
+3556 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 673.356 512.306 682.379]
+/Rect [521.223 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.10.4) >>
>> endobj
-3430 0 obj <<
+3557 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 659.807 512.306 668.829]
+/Rect [521.223 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (section.18.11) >>
>> endobj
-3431 0 obj <<
+3558 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 646.257 512.306 655.28]
+/Rect [521.223 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (section.18.12) >>
>> endobj
-3432 0 obj <<
+3559 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 632.708 512.306 641.731]
+/Rect [521.223 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (section.18.13) >>
>> endobj
-3433 0 obj <<
+3560 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 619.159 512.306 628.182]
+/Rect [521.223 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (section.18.14) >>
>> endobj
-3434 0 obj <<
+3561 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 605.61 512.306 614.633]
+/Rect [521.223 619.159 539.579 628.182]
/Subtype /Link
/A << /S /GoTo /D (section.18.15) >>
>> endobj
-3435 0 obj <<
+3562 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 592.061 512.306 601.083]
+/Rect [521.223 605.61 539.579 614.633]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.15.1) >>
>> endobj
-3436 0 obj <<
+3563 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 564.962 512.306 573.985]
+/Rect [521.223 592.061 539.579 601.083]
/Subtype /Link
/A << /S /GoTo /D (subsection.18.15.2) >>
>> endobj
-3437 0 obj <<
+3564 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 540.504 512.306 550.072]
+/Rect [519.586 567.602 539.579 577.171]
/Subtype /Link
/A << /S /GoTo /D (chapter.19) >>
>> endobj
-3438 0 obj <<
+3565 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 526.955 512.306 535.978]
+/Rect [521.223 554.053 539.579 563.076]
/Subtype /Link
/A << /S /GoTo /D (section.19.1) >>
>> endobj
-3439 0 obj <<
+3566 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 513.406 512.306 522.428]
+/Rect [521.223 540.504 539.579 549.527]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.1.1) >>
>> endobj
-3440 0 obj <<
+3567 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 499.856 512.306 508.879]
+/Rect [521.223 526.955 539.579 535.978]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.1.2) >>
>> endobj
-3441 0 obj <<
+3568 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 486.307 512.306 495.33]
+/Rect [521.223 513.406 539.579 522.428]
/Subtype /Link
/A << /S /GoTo /D (section.19.2) >>
>> endobj
-3442 0 obj <<
+3569 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 472.758 512.306 481.781]
+/Rect [521.223 499.856 539.579 508.879]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.2.1) >>
>> endobj
-3443 0 obj <<
+3570 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 459.209 512.306 468.232]
+/Rect [521.223 486.307 539.579 495.33]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.2.2) >>
>> endobj
-3444 0 obj <<
+3571 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 445.66 512.306 454.682]
+/Rect [521.223 472.758 539.579 481.781]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.2.3) >>
>> endobj
-3445 0 obj <<
+3572 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 432.11 512.306 441.133]
+/Rect [521.223 459.209 539.579 468.232]
/Subtype /Link
/A << /S /GoTo /D (section.19.3) >>
>> endobj
-3446 0 obj <<
+3573 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 418.561 512.306 427.584]
+/Rect [521.223 445.66 539.579 454.682]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.3.1) >>
>> endobj
-3447 0 obj <<
+3574 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 391.463 512.306 400.486]
+/Rect [521.223 418.561 539.579 427.584]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.3.2) >>
>> endobj
-3448 0 obj <<
+3575 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 377.914 512.306 386.936]
+/Rect [521.223 405.012 539.579 414.035]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.3.3) >>
>> endobj
-3449 0 obj <<
+3576 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 364.364 512.306 373.387]
+/Rect [521.223 391.463 539.579 400.486]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.3.4) >>
>> endobj
-3450 0 obj <<
+3577 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 350.815 512.306 359.838]
+/Rect [521.223 377.914 539.579 386.936]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.3.5) >>
>> endobj
-3451 0 obj <<
+3578 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 323.717 512.306 332.74]
+/Rect [521.223 350.815 539.579 359.838]
/Subtype /Link
/A << /S /GoTo /D (section.19.4) >>
>> endobj
-3452 0 obj <<
+3579 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 310.168 512.306 319.19]
+/Rect [521.223 337.266 539.579 346.289]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.4.1) >>
>> endobj
-3453 0 obj <<
+3580 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 296.618 512.306 305.641]
+/Rect [521.223 323.717 539.579 332.74]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.4.2) >>
>> endobj
-3454 0 obj <<
+3581 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 283.069 512.306 292.092]
+/Rect [521.223 310.168 539.579 319.19]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.4.3) >>
>> endobj
-3455 0 obj <<
+3582 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 269.52 512.306 278.543]
+/Rect [521.223 296.618 539.579 305.641]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.4.4) >>
>> endobj
-3456 0 obj <<
+3583 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 255.971 512.306 264.994]
+/Rect [521.223 283.069 539.579 292.092]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.4.5) >>
>> endobj
-3457 0 obj <<
+3584 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 242.422 512.306 251.444]
+/Rect [521.223 269.52 539.579 278.543]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.4.6) >>
>> endobj
-3458 0 obj <<
+3585 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 228.872 512.306 237.895]
+/Rect [521.223 255.971 539.579 264.994]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.4.7) >>
>> endobj
-3459 0 obj <<
+3586 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 215.323 512.306 224.346]
+/Rect [521.223 242.422 539.579 251.444]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.4.8) >>
>> endobj
-3460 0 obj <<
+3587 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 201.774 512.306 210.797]
+/Rect [521.223 228.872 539.579 237.895]
/Subtype /Link
/A << /S /GoTo /D (section.19.5) >>
>> endobj
-3461 0 obj <<
+3588 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 188.225 512.306 197.248]
+/Rect [521.223 215.323 539.579 224.346]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.1) >>
>> endobj
-3462 0 obj <<
+3589 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 174.676 512.306 183.698]
+/Rect [521.223 201.774 539.579 210.797]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.2) >>
>> endobj
-3463 0 obj <<
+3590 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 161.126 512.306 170.149]
+/Rect [521.223 188.225 539.579 197.248]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.3) >>
>> endobj
-3464 0 obj <<
+3591 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 147.577 512.306 156.6]
+/Rect [521.223 174.676 539.579 183.698]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.4) >>
>> endobj
-3465 0 obj <<
+3592 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 134.028 512.306 143.051]
+/Rect [521.223 161.126 539.579 170.149]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.5) >>
>> endobj
-3466 0 obj <<
+3593 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 120.479 512.306 129.502]
+/Rect [521.223 147.577 539.579 156.6]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.6) >>
>> endobj
-3467 0 obj <<
+3594 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 106.93 512.306 115.952]
+/Rect [521.223 134.028 539.579 143.051]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.7) >>
>> endobj
-3468 0 obj <<
+3595 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 93.38 512.306 102.403]
+/Rect [521.223 120.479 539.579 129.502]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.8) >>
>> endobj
-3469 0 obj <<
+3596 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 79.831 512.306 88.854]
+/Rect [521.223 106.93 539.579 115.952]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.9) >>
>> endobj
-3470 0 obj <<
+3597 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 66.282 512.306 75.305]
+/Rect [521.223 93.38 539.579 102.403]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.10) >>
>> endobj
-3423 0 obj <<
-/D [3421 0 R /XYZ 85.039 786.531 null]
->> endobj
-3420 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-3474 0 obj <<
-/Length 2732
-/Filter /FlateDecode
->>
-stream
-x\r+X\ B<Iz$}**! $Ae?g! ڢ0Ÿ\e>3O7:cгuз=:x\_:鸶{`ow;̱#' .!A>*S(z ]^fϿ~c(¶c(\O؞+Uhۡ/Bnukiٞ͘cµi/` OG=fWD'0%|}-phuxlDbU6N8|[<X*^ 3D-gci};i
- d`{rU Se%q:b~> [/Ls]<X$%XF>ݻ=2 -/ʳdKaSij O
-=9䰀MF] mL\ պA['f9L3i3|ri6.`~VZ[4A{7.x`<T?̧E>u_{l"Ktdp{~(ԅɰ8#0@L~u
-}Żx!yaxD-H>Cj,imq3!aC;#/{/p}{Ã泏|,ϙʥh dIqK-c64o3x[, M-QV02񄾿蘴^s4rΈ!E-͕%/-u@2W!$=I92B0C`O9
-8{,N,2SHY?3.0x^M43vB=#V&~$#&kh]ר[?7%kRO}_0믂XN pU¬
-AP}`u\9G,r"#y:OE۶Q2EOe,5% k^Q)x7pv" ŬqENY(W9"v81cE[YaşRyX }#_lgxE_y/4Bm$aŭObs$y" c8,uoHڦ(k 8#+
-]dgu!.L%P#\]5Q5F-<)7DW ZZTO{GKIL 6ˤFMtL̬Oxri¡8;⎵PTJ-ge87/\2NUi]|ɤ2ݟa[V.<*گ0 ״w?]E׌_hwZՄFOEZYYU` ؈|ƹY|0|qUVc@<9pRV8SYݿmG`lJO>UHF0 z{zzn -n4S]g*-ed삔!ruuIwgHI,zimS V9KJMq#W
-]ުR%'] ,5U/)T >?
-Ln6Mٞ%RSK^#g Zo l*g }B&ꈣnG)w"ڂA5%ase0@kkr8*c5a&Jݖ\\C5`Ŵ ޴⛦ VP^XW*$ZdC`]+aKT}@V8* 'aIe2 I
-sTyfWi?5PWa5>L5Ig%C*XPԽ02̂)8O*S>cmƸgOUЅ4DCWUu/ ʜYe f݉.Jᴖ#BoPr3.XIKlop֚|24(DZMe1P4w3 ޒg_5KZ9 uA*GML%|MdLZCAaM,ZlbA,7`|7v{wi㑚> kpy3)x42֦*b]J{^)÷i>] Mr2KtQsRUbN hk,iQaV&3J۫prp]]2$gTOTVzߧ#Zy+cU Zjz
-I+TeMw37AZ固^K쨹eOT)[қy&1^niR*ʰYI<
-3uЖUI5urKǒ}FrBVbcMMnXL}2>GYY4آ<PlkojVQ³ _3(M9߄*=1~'I `iAìr]OEX{xQ 1 K endstream
-endobj
-3473 0 obj <<
-/Type /Page
-/Contents 3474 0 R
-/Resources 3472 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 3471 0 R
-/Annots [ 3476 0 R 3477 0 R 3478 0 R 3479 0 R 3480 0 R 3481 0 R 3482 0 R 3483 0 R 3484 0 R 3485 0 R 3486 0 R 3487 0 R 3488 0 R 3489 0 R 3490 0 R 3491 0 R 3492 0 R 3493 0 R 3494 0 R 3495 0 R 3496 0 R 3497 0 R 3498 0 R 3499 0 R 3500 0 R 3501 0 R 3502 0 R 3503 0 R 3504 0 R 3505 0 R 3506 0 R 3507 0 R 3508 0 R 3509 0 R 3510 0 R 3511 0 R 3512 0 R 3513 0 R 3514 0 R 3515 0 R 3516 0 R 3517 0 R 3518 0 R 3519 0 R 3520 0 R 3521 0 R 3522 0 R 3523 0 R ]
->> endobj
-3476 0 obj <<
+3598 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 754.651 512.306 763.674]
+/Rect [521.223 79.831 539.579 88.854]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.11) >>
>> endobj
-3477 0 obj <<
+3599 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 66.282 539.579 75.305]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.12) >>
>> endobj
-3478 0 obj <<
+3550 0 obj <<
+/D [3548 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3547 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3602 0 obj <<
+/Length 3906
+/Filter /FlateDecode
+>>
+stream
+xs6Wh$݌`/7\ksؙt-)#
+ .
+&+9JBj;xŔ!\_|Lx2||qdc.&S,/Ч/Λ
+r dJp,ٲB|f!6ٺ"خ'fqj́'voVp391bksY~U𳇲LHB^.,)98׌狵cU,/ݰ]lzLtW )gVlwYݘ?;ycO|-ɭAo33 uCFNYV1 trky0j a
+~P钂')%x\&F|E{~}Ⱦ
+`KKoU͔(\ jaPT] Lq1YhduTҽKEr|(VS4^"얿
+?<v!>Z:(B
+">MHBn]ut`K lyɌClXv&p~]jfl-yeGz2OHBfG:@05^۶RUq/9˸~I~V$߭mFjFB$to6 mP?8ӹF;pMt~\G[NO# ݛwiNI-/1uX=n.;gvD_߽>F6"#H?/5=Eyâզ#9.w V3#{[~{SQ1?aÃſoQ?!KV
+-Gb2 {z-*endstream
+endobj
+3601 0 obj <<
+/Type /Page
+/Contents 3602 0 R
+/Resources 3600 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3386 0 R
+/Annots [ 3604 0 R 3605 0 R 3606 0 R 3607 0 R 3608 0 R 3609 0 R 3610 0 R 3611 0 R 3612 0 R 3613 0 R 3614 0 R 3615 0 R 3616 0 R 3617 0 R 3618 0 R 3619 0 R 3620 0 R 3621 0 R 3622 0 R 3623 0 R 3624 0 R 3625 0 R 3626 0 R 3627 0 R 3628 0 R 3629 0 R 3630 0 R 3631 0 R 3632 0 R 3633 0 R 3634 0 R 3635 0 R 3636 0 R 3637 0 R 3638 0 R 3639 0 R 3640 0 R 3641 0 R 3642 0 R 3643 0 R 3644 0 R 3645 0 R 3646 0 R 3647 0 R 3648 0 R 3649 0 R 3650 0 R 3651 0 R 3652 0 R 3653 0 R ]
+>> endobj
+3604 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 727.553 512.306 736.575]
+/Rect [521.223 754.651 539.579 763.674]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.13) >>
>> endobj
-3479 0 obj <<
+3605 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 714.003 512.306 723.026]
+/Rect [521.223 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.14) >>
>> endobj
-3480 0 obj <<
+3606 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 700.454 512.306 709.477]
+/Rect [521.223 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.15) >>
>> endobj
-3481 0 obj <<
+3607 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 673.356 512.306 682.379]
+/Rect [521.223 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.16) >>
>> endobj
-3482 0 obj <<
+3608 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 659.807 512.306 668.829]
+/Rect [521.223 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.17) >>
>> endobj
-3483 0 obj <<
+3609 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 646.257 512.306 655.28]
+/Rect [521.223 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.18) >>
>> endobj
-3484 0 obj <<
+3610 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 632.708 512.306 641.731]
+/Rect [521.223 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.5.19) >>
>> endobj
-3485 0 obj <<
+3611 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 619.159 512.306 628.182]
+/Rect [521.223 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (section.19.6) >>
>> endobj
-3486 0 obj <<
+3612 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 605.61 512.306 614.633]
+/Rect [521.223 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.6.1) >>
>> endobj
-3487 0 obj <<
+3613 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 592.061 512.306 601.083]
+/Rect [521.223 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.6.2) >>
>> endobj
-3488 0 obj <<
+3614 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 578.511 512.306 587.534]
+/Rect [521.223 619.159 539.579 628.182]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.6.3) >>
>> endobj
-3489 0 obj <<
+3615 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 564.962 512.306 573.985]
+/Rect [521.223 605.61 539.579 614.633]
/Subtype /Link
/A << /S /GoTo /D (section.19.7) >>
>> endobj
-3490 0 obj <<
+3616 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 551.413 512.306 560.436]
+/Rect [521.223 592.061 539.579 601.083]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.7.1) >>
>> endobj
-3491 0 obj <<
+3617 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 537.864 512.306 546.887]
+/Rect [521.223 578.511 539.579 587.534]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.7.2) >>
>> endobj
-3492 0 obj <<
+3618 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 510.765 512.306 519.788]
+/Rect [521.223 551.413 539.579 560.436]
/Subtype /Link
/A << /S /GoTo /D (section.19.8) >>
>> endobj
-3493 0 obj <<
+3619 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 497.216 512.306 506.239]
+/Rect [521.223 537.864 539.579 546.887]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.8.1) >>
>> endobj
-3494 0 obj <<
+3620 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 483.667 512.306 492.69]
+/Rect [521.223 524.315 539.579 533.337]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.8.2) >>
>> endobj
-3495 0 obj <<
+3621 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 470.118 512.306 479.141]
+/Rect [521.223 510.765 539.579 519.788]
/Subtype /Link
/A << /S /GoTo /D (section.19.9) >>
>> endobj
-3496 0 obj <<
+3622 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 456.569 512.306 465.591]
+/Rect [521.223 497.216 539.579 506.239]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.9.1) >>
>> endobj
-3497 0 obj <<
+3623 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 443.019 512.306 452.042]
+/Rect [521.223 483.667 539.579 492.69]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.9.2) >>
>> endobj
-3498 0 obj <<
+3624 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 429.47 512.306 438.493]
+/Rect [521.223 470.118 539.579 479.141]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.9.3) >>
>> endobj
-3499 0 obj <<
+3625 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 402.372 512.306 411.395]
+/Rect [521.223 456.569 539.579 465.591]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.9.4) >>
>> endobj
-3500 0 obj <<
+3626 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 388.823 512.306 397.845]
+/Rect [521.223 443.019 539.579 452.042]
/Subtype /Link
/A << /S /GoTo /D (section.19.10) >>
>> endobj
-3501 0 obj <<
+3627 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 375.273 512.306 384.296]
+/Rect [521.223 429.47 539.579 438.493]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.1) >>
>> endobj
-3502 0 obj <<
+3628 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 361.724 512.306 370.747]
+/Rect [521.223 415.921 539.579 424.944]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.2) >>
>> endobj
-3503 0 obj <<
+3629 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 348.175 512.306 357.198]
+/Rect [521.223 402.372 539.579 411.395]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.3) >>
>> endobj
-3504 0 obj <<
+3630 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 334.626 512.306 343.649]
+/Rect [521.223 388.823 539.579 397.845]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.4) >>
>> endobj
-3505 0 obj <<
+3631 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 321.077 512.306 330.099]
+/Rect [521.223 375.273 539.579 384.296]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.5) >>
>> endobj
-3506 0 obj <<
+3632 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [495.133 307.527 513.49 316.55]
+/Rect [521.223 361.724 539.579 370.747]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.6) >>
>> endobj
-3507 0 obj <<
+3633 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 293.978 512.306 303.001]
+/Rect [521.223 348.175 539.579 357.198]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.7) >>
>> endobj
-3508 0 obj <<
+3634 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 266.88 512.306 275.903]
+/Rect [521.223 321.077 539.579 330.099]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.8) >>
>> endobj
-3509 0 obj <<
+3635 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 253.331 512.306 262.354]
+/Rect [521.223 307.527 539.579 316.55]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.9) >>
>> endobj
-3510 0 obj <<
+3636 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 239.781 512.306 248.804]
+/Rect [521.223 293.978 539.579 303.001]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.10) >>
>> endobj
-3511 0 obj <<
+3637 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 226.232 512.306 235.255]
+/Rect [521.223 280.429 539.579 289.452]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.11) >>
>> endobj
-3512 0 obj <<
+3638 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 212.683 512.306 221.706]
+/Rect [521.223 266.88 539.579 275.903]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.12) >>
>> endobj
-3513 0 obj <<
+3639 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 199.134 512.306 208.157]
+/Rect [521.223 253.331 539.579 262.354]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.13) >>
>> endobj
-3514 0 obj <<
+3640 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 185.585 512.306 194.608]
+/Rect [521.223 239.781 539.579 248.804]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.14) >>
>> endobj
-3515 0 obj <<
+3641 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 172.036 512.306 181.058]
+/Rect [521.223 226.232 539.579 235.255]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.15) >>
>> endobj
-3516 0 obj <<
+3642 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 158.486 512.306 167.509]
+/Rect [521.223 212.683 539.579 221.706]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.10.16) >>
>> endobj
-3517 0 obj <<
+3643 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 144.937 512.306 153.96]
+/Rect [521.223 199.134 539.579 208.157]
/Subtype /Link
/A << /S /GoTo /D (section.19.11) >>
>> endobj
-3518 0 obj <<
+3644 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 131.388 512.306 140.411]
+/Rect [521.223 185.585 539.579 194.608]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.11.1) >>
>> endobj
-3519 0 obj <<
+3645 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 117.839 512.306 126.862]
+/Rect [521.223 172.036 539.579 181.058]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.11.2) >>
>> endobj
-3520 0 obj <<
+3646 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 104.29 512.306 113.312]
+/Rect [521.223 158.486 539.579 167.509]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.11.3) >>
>> endobj
-3521 0 obj <<
+3647 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 90.74 512.306 99.763]
+/Rect [521.223 144.937 539.579 153.96]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.11.4) >>
>> endobj
-3522 0 obj <<
+3648 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 77.191 512.306 86.214]
+/Rect [521.223 131.388 539.579 140.411]
/Subtype /Link
/A << /S /GoTo /D (subsection.19.11.5) >>
>> endobj
-3523 0 obj <<
+3649 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 63.642 512.306 72.665]
+/Rect [521.223 117.839 539.579 126.862]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.1) >>
->> endobj
-3475 0 obj <<
-/D [3473 0 R /XYZ 85.039 786.531 null]
->> endobj
-3472 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-3526 0 obj <<
-/Length 2606
-/Filter /FlateDecode
->>
-stream
-x\sHB03 7ǎMm6޳{U|@
-WrvDafHzq@F^;>)^>S%S?yyd \p·^oofsytsYf;BrW
-n]hLhՆgpGSa(frCe̕n99Gɨ?`~FQ,t+?= =R8!tw rzO47'ԬPC)SA7IK/^OWMsO_0)n>gp5@)y?"n4v+P^kŤG|nkpz-nEWGOӂbMOݟ9\pӻKOa
-`8z%D\yt n~7@>N.K5V|wܠ@'.x.1R^).v/%Z'%h2ti+JKqBRX*E"X^"IrWFQc cTE1jB t6ixTFyaP{#aƣ-8nMr|M|h"| Tc*~0i-_I2=;Ź9uG|Fa\S"KO6>!2H=6+jܪMu2Of
-j*P [F ~f|[tF,2b*""4@['$VHCIJ٬ԏeB,U^\4ъ2! BC phfYӹdɰNjer4a
-z#J!JskNEL6^s^a1iZuB| ;``.S=lxMfۗ(F%-ZF3[nɔ<L)oհeG^Y-:K8qMm:MndGt|'vHqN^ /0Ę_rو!]0DC#?OJx8>-d[vC13W^~Lݸ
-\G6*l|mu!/jy>fht0qd'
-Kl)~;xvqa=Ms1]Da;Ȳְ:G2TX#a$0cȪuq-1 j02(0,ZB @\,EvX?Bdi_/[sOV]=Vtg2٥r 9AS-eBeb9)H;C nFewuÏ\ߓL#7c@ ͹2XLendstream
-endobj
-3525 0 obj <<
-/Type /Page
-/Contents 3526 0 R
-/Resources 3524 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 3471 0 R
-/Annots [ 3528 0 R 3529 0 R 3530 0 R 3531 0 R 3532 0 R 3533 0 R 3534 0 R 3535 0 R 3536 0 R 3537 0 R 3538 0 R 3539 0 R 3540 0 R 3541 0 R 3542 0 R 3543 0 R 3544 0 R 3545 0 R 3546 0 R 3547 0 R 3548 0 R 3549 0 R 3550 0 R 3551 0 R 3552 0 R 3553 0 R 3554 0 R 3555 0 R 3556 0 R 3557 0 R 3558 0 R 3559 0 R 3560 0 R 3561 0 R 3562 0 R 3563 0 R 3564 0 R 3565 0 R 3566 0 R 3567 0 R 3568 0 R 3569 0 R ]
+/A << /S /GoTo /D (subsection.19.11.6) >>
>> endobj
-3528 0 obj <<
+3650 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 104.29 539.579 113.312]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.2) >>
+/A << /S /GoTo /D (section.19.12) >>
>> endobj
-3529 0 obj <<
+3651 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 714.003 512.306 723.026]
+/Rect [521.223 90.74 539.579 99.763]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.3) >>
+/A << /S /GoTo /D (subsection.19.12.1) >>
>> endobj
-3530 0 obj <<
+3652 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 686.905 512.306 695.928]
+/Rect [521.223 77.191 539.579 86.214]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.4) >>
+/A << /S /GoTo /D (subsection.19.12.2) >>
>> endobj
-3531 0 obj <<
+3653 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 673.356 512.306 682.379]
+/Rect [521.223 63.642 539.579 72.665]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.5) >>
+/A << /S /GoTo /D (subsection.19.12.3) >>
>> endobj
-3532 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 646.257 512.306 655.28]
-/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.6) >>
+3603 0 obj <<
+/D [3601 0 R /XYZ 85.039 786.531 null]
>> endobj
-3533 0 obj <<
+3600 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3656 0 obj <<
+/Length 4038
+/Filter /FlateDecode
+>>
+stream
+x[s6)4~4BHe߲NͥkgڙDRJu2HOINC
+P q,c=-Hg_/Q_-y[A]+ZyS])Kکl*߾١[T5*bpѩ"?MOQ"]se8GCh.Œl4lkk""sJ!+AfW{)B<&` Tތ
++Y39-V/l{eU0x[y4xhhnx ?dFh$-FZ"b0ߡwgE_\*Zfw]n˶p#WjL&QSz3!$pX!<bHBq'8NT#;ٻ| &Ua![#>(2J
+Jxia]Q*n¿˦:@8x6HPۘB, }Y@LZ-T:4ccyїm
+5K<+vz4܄s?Ҵ@i$P%k7,t#qTތѭG@2vA LoDΚZ,Vmၞ[潉t~SJYMui=F<Tތ`\K1`JeF15Q!_Gfց`RBţhI_SE <5r$<"0{zAzq7n47##SԇE S;X5oM{}en89amnm]2G0GxƛS% RDE $Bel%e9BfeDbGef?ؕSl t~7l~6te@y#. d6 ۏa\dN'"Y<oZ4̀; q
+Ϣ0*gEC^a\R+x`N]]v1=`G{~a9Uތ"xT "
+2(V ,3o=ѡútUl o|'cVqT%x3B a%P;%D%#%v:nS`Ẕ6KW6nBG+ڢ X
+қ ?)" HY ] x~_G;znl %>hf2mnrwR`XRUt)t|xwry%̄l&w
+x62#4nŨƇE 4Nel5.+S4nvbM-hWzvog؜P/
+sXjo#f"pd6
+հ**c*IY&ٝTw/Me:x }X?m0oʣUz֌`N%;;mfsky'ISIz3$r(ErX$#)bX$iv]B Vcs1Q]sI}{c5PX'oG$ؠӎt.RXbM'G\]P.S.O9Rn6.n8ؾ@BpA!?Xww7pFٍ,^<;S=6ΘJ؛y>HTƎI @Xmk!sU¿?>8
+z*c>X2"9"y^V"oݑTG҈KbvVel
+ 1Ee{a3WL|e
+ތ"BIaXB
+TN
+`y'0n3kn;lrњށ9hZxqxPOȷ<=utT*c5,b U
+!xVB$P۾ͷ
+L!* m'VIJ,i|*MoFDNh@Ф2v4xj`bOU8r0Nz''1'D &mŕHu%h78u<TތJIeli!K#rU;O0oFi3q0Z)mϹq QCtU=dtp0i 0*2SicylvuٗƇXzA,hoٖg0$
+endobj
+3655 0 obj <<
+/Type /Page
+/Contents 3656 0 R
+/Resources 3654 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3706 0 R
+/Annots [ 3658 0 R 3659 0 R 3660 0 R 3661 0 R 3662 0 R 3663 0 R 3664 0 R 3665 0 R 3666 0 R 3667 0 R 3668 0 R 3669 0 R 3670 0 R 3671 0 R 3672 0 R 3673 0 R 3674 0 R 3675 0 R 3676 0 R 3677 0 R 3678 0 R 3679 0 R 3680 0 R 3681 0 R 3682 0 R 3683 0 R 3684 0 R 3685 0 R 3686 0 R 3687 0 R 3688 0 R 3689 0 R 3690 0 R 3691 0 R 3692 0 R 3693 0 R 3694 0 R 3695 0 R 3696 0 R 3697 0 R 3698 0 R 3699 0 R 3700 0 R 3701 0 R 3702 0 R 3703 0 R 3704 0 R 3705 0 R ]
+>> endobj
+3658 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 632.708 512.306 641.731]
+/Rect [521.223 754.651 539.579 763.674]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.7) >>
+/A << /S /GoTo /D (subsection.19.12.4) >>
>> endobj
-3534 0 obj <<
+3659 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 605.61 512.306 614.633]
+/Rect [521.223 741.102 539.579 750.125]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.8) >>
+/A << /S /GoTo /D (section.19.13) >>
>> endobj
-3535 0 obj <<
+3660 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 578.511 512.306 587.534]
+/Rect [521.223 727.553 539.579 736.575]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.9) >>
+/A << /S /GoTo /D (subsection.19.13.1) >>
>> endobj
-3536 0 obj <<
+3661 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 551.413 512.306 560.436]
+/Rect [521.223 714.003 539.579 723.026]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.10) >>
+/A << /S /GoTo /D (subsubsection.19.13.1.1) >>
>> endobj
-3537 0 obj <<
+3662 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 524.315 512.306 533.337]
+/Rect [521.223 700.454 539.579 709.477]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.11) >>
+/A << /S /GoTo /D (subsubsection.19.13.1.2) >>
>> endobj
-3538 0 obj <<
+3663 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [522.044 510.765 540.4 519.788]
+/Rect [521.223 686.905 539.579 695.928]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.12) >>
+/A << /S /GoTo /D (subsubsection.19.13.1.3) >>
>> endobj
-3539 0 obj <<
+3664 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 497.216 512.306 506.239]
+/Rect [521.223 673.356 539.579 682.379]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.13) >>
+/A << /S /GoTo /D (subsubsection.19.13.1.4) >>
>> endobj
-3540 0 obj <<
+3665 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 483.667 512.306 492.69]
+/Rect [521.223 659.807 539.579 668.829]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.14) >>
+/A << /S /GoTo /D (subsubsection.19.13.1.5) >>
>> endobj
-3541 0 obj <<
+3666 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 456.569 512.306 465.591]
+/Rect [521.223 646.257 539.579 655.28]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.11.5.15) >>
+/A << /S /GoTo /D (subsubsection.19.13.1.6) >>
>> endobj
-3542 0 obj <<
+3667 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 443.019 512.306 452.042]
+/Rect [521.223 619.159 539.579 628.182]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.11.6) >>
+/A << /S /GoTo /D (subsubsection.19.13.1.7) >>
>> endobj
-3543 0 obj <<
+3668 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 429.47 512.306 438.493]
+/Rect [521.223 605.61 539.579 614.633]
/Subtype /Link
-/A << /S /GoTo /D (section.19.12) >>
+/A << /S /GoTo /D (subsubsection.19.13.1.8) >>
>> endobj
-3544 0 obj <<
+3669 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 415.921 512.306 424.944]
+/Rect [521.223 592.061 539.579 601.083]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.12.1) >>
+/A << /S /GoTo /D (subsection.19.13.2) >>
>> endobj
-3545 0 obj <<
+3670 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 402.372 512.306 411.395]
+/Rect [521.223 578.511 539.579 587.534]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.12.2) >>
+/A << /S /GoTo /D (section.19.14) >>
>> endobj
-3546 0 obj <<
+3671 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 388.823 512.306 397.845]
+/Rect [521.223 564.962 539.579 573.985]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.12.3) >>
+/A << /S /GoTo /D (subsection.19.14.1) >>
>> endobj
-3547 0 obj <<
+3672 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 375.273 512.306 384.296]
+/Rect [521.223 551.413 539.579 560.436]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.12.4) >>
+/A << /S /GoTo /D (subsection.19.14.2) >>
>> endobj
-3548 0 obj <<
+3673 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 361.724 512.306 370.747]
+/Rect [521.223 537.864 539.579 546.887]
/Subtype /Link
-/A << /S /GoTo /D (section.19.13) >>
+/A << /S /GoTo /D (subsection.19.14.3) >>
>> endobj
-3549 0 obj <<
+3674 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 348.175 512.306 357.198]
+/Rect [521.223 524.315 539.579 533.337]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.13.1) >>
+/A << /S /GoTo /D (subsection.19.14.4) >>
>> endobj
-3550 0 obj <<
+3675 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 334.626 512.306 343.649]
+/Rect [521.223 510.765 539.579 519.788]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.13.1.1) >>
+/A << /S /GoTo /D (subsection.19.14.5) >>
>> endobj
-3551 0 obj <<
+3676 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 321.077 512.306 330.099]
+/Rect [521.223 497.216 539.579 506.239]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.13.1.2) >>
+/A << /S /GoTo /D (subsection.19.14.6) >>
>> endobj
-3552 0 obj <<
+3677 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 307.527 512.306 316.55]
+/Rect [521.223 483.667 539.579 492.69]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.13.1.3) >>
+/A << /S /GoTo /D (subsection.19.14.7) >>
>> endobj
-3553 0 obj <<
+3678 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 293.978 512.306 303.001]
+/Rect [521.223 470.118 539.579 479.141]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.13.1.4) >>
+/A << /S /GoTo /D (section.19.15) >>
>> endobj
-3554 0 obj <<
+3679 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 280.429 512.306 289.452]
+/Rect [521.223 456.569 539.579 465.591]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.13.1.5) >>
+/A << /S /GoTo /D (section.19.16) >>
>> endobj
-3555 0 obj <<
+3680 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 266.88 512.306 275.903]
+/Rect [521.223 443.019 539.579 452.042]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.13.1.6) >>
+/A << /S /GoTo /D (subsection.19.16.1) >>
>> endobj
-3556 0 obj <<
+3681 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 239.781 512.306 248.804]
+/Rect [521.223 429.47 539.579 438.493]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.13.1.7) >>
+/A << /S /GoTo /D (subsection.19.16.2) >>
>> endobj
-3557 0 obj <<
+3682 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 226.232 512.306 235.255]
+/Rect [521.223 415.921 539.579 424.944]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.19.13.1.8) >>
+/A << /S /GoTo /D (subsection.19.16.3) >>
>> endobj
-3558 0 obj <<
+3683 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 212.683 512.306 221.706]
+/Rect [521.223 402.372 539.579 411.395]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.13.2) >>
+/A << /S /GoTo /D (section.19.17) >>
>> endobj
-3559 0 obj <<
+3684 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 199.134 512.306 208.157]
+/Rect [521.223 388.823 539.579 397.845]
/Subtype /Link
-/A << /S /GoTo /D (section.19.14) >>
+/A << /S /GoTo /D (section.19.18) >>
>> endobj
-3560 0 obj <<
+3685 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 185.585 512.306 194.608]
+/Rect [521.223 375.273 539.579 384.296]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.14.1) >>
+/A << /S /GoTo /D (section.19.19) >>
>> endobj
-3561 0 obj <<
+3686 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 172.036 512.306 181.058]
+/Rect [521.223 361.724 539.579 370.747]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.14.2) >>
+/A << /S /GoTo /D (section.19.20) >>
>> endobj
-3562 0 obj <<
+3687 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 158.486 512.306 167.509]
+/Rect [521.223 348.175 539.579 357.198]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.14.3) >>
+/A << /S /GoTo /D (subsection.19.20.1) >>
>> endobj
-3563 0 obj <<
+3688 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 144.937 512.306 153.96]
+/Rect [521.223 334.626 539.579 343.649]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.14.4) >>
+/A << /S /GoTo /D (subsection.19.20.2) >>
>> endobj
-3564 0 obj <<
+3689 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 131.388 512.306 140.411]
+/Rect [521.223 307.527 539.579 316.55]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.14.5) >>
+/A << /S /GoTo /D (subsection.19.20.3) >>
>> endobj
-3565 0 obj <<
+3690 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 117.839 512.306 126.862]
+/Rect [521.223 293.978 539.579 303.001]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.14.6) >>
+/A << /S /GoTo /D (subsection.19.20.4) >>
>> endobj
-3566 0 obj <<
+3691 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 104.29 512.306 113.312]
+/Rect [521.223 280.429 539.579 289.452]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.14.7) >>
+/A << /S /GoTo /D (subsection.19.20.5) >>
>> endobj
-3567 0 obj <<
+3692 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 90.74 512.306 99.763]
+/Rect [521.223 266.88 539.579 275.903]
/Subtype /Link
-/A << /S /GoTo /D (section.19.15) >>
+/A << /S /GoTo /D (subsection.19.20.6) >>
>> endobj
-3568 0 obj <<
+3693 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 77.191 512.306 86.214]
+/Rect [521.223 239.781 539.579 248.804]
/Subtype /Link
-/A << /S /GoTo /D (section.19.16) >>
+/A << /S /GoTo /D (subsection.19.20.7) >>
>> endobj
-3569 0 obj <<
+3694 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 63.642 512.306 72.665]
+/Rect [521.223 226.232 539.579 235.255]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.16.1) >>
->> endobj
-3527 0 obj <<
-/D [3525 0 R /XYZ 85.039 786.531 null]
->> endobj
-3524 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-3572 0 obj <<
-/Length 2234
-/Filter /FlateDecode
->>
-stream
-x\rH+87@ jr-GGcʭDBB @IYYij6X&*lryUBz"*zכ@=fzx=z¦'{ȋz'Oc>Щ)|qt/*Íy l{.tO**)~7o}j=:kóD(ݐa(fjCe>9.I Fl^泲?􏌢Ɵm]vW`,`{MxŤG>oWj B:tu\TQ0D0AŠR3@?
-q2xg@"/@n^X} Y^QkЍӣ ytYLmdJ."ߏiMPWa
-h 5xZma[aB ۳0\8ËV 5|y:*%%5pq[ڬPA>0+c
-wV$Gr?@hk>(+Ol rlK$ܾs'ujf9ū.z{ZuNإ0IZY&F?^x T+ 'ަ'0_e_0'>P~iHSl3gZTp(78Xp&I«HmnDeФJRҕĆj˳?K*Fr?Fщ8 liYW tELD ߱0F7TXGpr)59RumTJ։:^_Zo 1nKn-@-ou̓b4V vZ!sϬjF1K;הCW30E5T.LxbQ58itH4]o ;ASYRU]-;~Q
- SnI|u_J䰥.pER!?o|;[1!Y0 <yag=OKi
-ϐ,]0zyNG1׬n/Xk+:;ƻM =L̨L|8Iܘ|g8ǁr輤!<{ѝ2ζ!OtuZ!(xn{F tUgSK[Tֳ< DjT~u_DY'$1F<f^+fKsFO-Y)D
--i3M
-J;3 sh)FX
-n'.w
-WH\2w?\jWI[醨c?zxe"ߐb\R |O"jO5G-endstream
-endobj
-3571 0 obj <<
-/Type /Page
-/Contents 3572 0 R
-/Resources 3570 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 3471 0 R
-/Annots [ 3574 0 R 3575 0 R 3576 0 R 3577 0 R 3578 0 R 3579 0 R 3580 0 R 3581 0 R 3582 0 R 3583 0 R 3584 0 R 3585 0 R 3586 0 R 3587 0 R 3588 0 R 3589 0 R 3590 0 R 3591 0 R 3592 0 R 3593 0 R 3594 0 R 3595 0 R 3596 0 R 3597 0 R 3598 0 R 3599 0 R 3600 0 R 3601 0 R 3602 0 R 3603 0 R 3604 0 R 3605 0 R 3606 0 R 3607 0 R 3608 0 R 3609 0 R 3610 0 R 3611 0 R 3612 0 R 3613 0 R 3614 0 R 3615 0 R 3616 0 R 3617 0 R 3618 0 R 3619 0 R 3620 0 R 3621 0 R 3622 0 R ]
+/A << /S /GoTo /D (subsection.19.20.8) >>
>> endobj
-3574 0 obj <<
+3695 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 754.651 512.306 763.674]
+/Rect [521.223 212.683 539.579 221.706]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.16.2) >>
+/A << /S /GoTo /D (subsection.19.20.9) >>
>> endobj
-3575 0 obj <<
+3696 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 199.134 539.579 208.157]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.16.3) >>
+/A << /S /GoTo /D (subsection.19.20.10) >>
>> endobj
-3576 0 obj <<
+3697 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 727.553 512.306 736.575]
+/Rect [521.223 185.585 539.579 194.608]
/Subtype /Link
-/A << /S /GoTo /D (section.19.17) >>
+/A << /S /GoTo /D (subsection.19.20.11) >>
>> endobj
-3577 0 obj <<
+3698 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 714.003 512.306 723.026]
+/Rect [521.223 172.036 539.579 181.058]
/Subtype /Link
-/A << /S /GoTo /D (section.19.18) >>
+/A << /S /GoTo /D (subsection.19.20.12) >>
>> endobj
-3578 0 obj <<
+3699 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 700.454 512.306 709.477]
+/Rect [521.223 158.486 539.579 167.509]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.18.1) >>
+/A << /S /GoTo /D (subsection.19.20.13) >>
>> endobj
-3579 0 obj <<
+3700 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 686.905 512.306 695.928]
+/Rect [521.223 144.937 539.579 153.96]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.18.2) >>
+/A << /S /GoTo /D (subsection.19.20.14) >>
>> endobj
-3580 0 obj <<
+3701 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 673.356 512.306 682.379]
+/Rect [521.223 131.388 539.579 140.411]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.18.3) >>
+/A << /S /GoTo /D (subsection.19.20.15) >>
>> endobj
-3581 0 obj <<
+3702 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 659.807 512.306 668.829]
+/Rect [521.223 117.839 539.579 126.862]
/Subtype /Link
-/A << /S /GoTo /D (section.19.19) >>
+/A << /S /GoTo /D (subsection.19.20.16) >>
>> endobj
-3582 0 obj <<
+3703 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 646.257 512.306 655.28]
+/Rect [521.223 104.29 539.579 113.312]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.19.1) >>
+/A << /S /GoTo /D (subsection.19.20.17) >>
>> endobj
-3583 0 obj <<
+3704 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 632.708 512.306 641.731]
+/Rect [521.223 77.191 539.579 86.214]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.19.2) >>
+/A << /S /GoTo /D (subsection.19.20.18) >>
>> endobj
-3584 0 obj <<
+3705 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 605.61 512.306 614.633]
+/Rect [521.223 63.642 539.579 72.665]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.19.3) >>
+/A << /S /GoTo /D (subsection.19.20.19) >>
>> endobj
-3585 0 obj <<
+3657 0 obj <<
+/D [3655 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3654 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3709 0 obj <<
+/Length 3215
+/Filter /FlateDecode
+>>
+stream
+x[s6)oԃľ9qMNٙnI5ŕ(;;`<7IDZ5TD
+J$JD$?`8fB"%hHE#XIbHpD;ҾW3g/?SºCln/җl7Ñ|bjp$ΐz W~% J_dpUyJbM2P)&8M[LhYH9QhGċ?*Q`-kiX9Il\W!#Yiϋ߯Jp6/g+]Ѕؑ yXaXWusÁ5J)4ի<{5,FU}ӯ;M7/̧k Wո2~3ʿgKvP
+}Q,F aI<#1rM욏c#Q|X % ¥i ԰&10daŒ!4[vK?4J=\g{%UaօK ݸ #. /r&Xg^#<- ɾxb
+\ K5lڲ. ?'^_$b1
+H֜Tn:y̱ smH PAfe
+g;;&N8{VȲ|8 (HĀ(h
+endobj
+3708 0 obj <<
+/Type /Page
+/Contents 3709 0 R
+/Resources 3707 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3706 0 R
+/Annots [ 3711 0 R 3712 0 R 3713 0 R 3714 0 R 3715 0 R 3716 0 R 3717 0 R 3718 0 R 3719 0 R 3720 0 R 3721 0 R 3722 0 R 3723 0 R 3724 0 R 3725 0 R 3726 0 R 3727 0 R 3728 0 R 3729 0 R 3730 0 R 3731 0 R 3732 0 R 3733 0 R 3734 0 R 3735 0 R 3736 0 R 3737 0 R 3738 0 R 3739 0 R 3740 0 R 3741 0 R 3742 0 R 3743 0 R 3744 0 R 3745 0 R 3746 0 R 3747 0 R 3748 0 R 3749 0 R 3750 0 R 3751 0 R 3752 0 R 3753 0 R 3754 0 R 3755 0 R 3756 0 R 3757 0 R ]
+>> endobj
+3711 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 592.061 512.306 601.083]
+/Rect [521.223 754.651 539.579 763.674]
/Subtype /Link
-/A << /S /GoTo /D (subsection.19.19.4) >>
+/A << /S /GoTo /D (section.19.21) >>
>> endobj
-3586 0 obj <<
+3712 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 567.602 512.306 577.171]
+/Rect [519.586 730.193 539.579 739.761]
/Subtype /Link
/A << /S /GoTo /D (chapter.20) >>
>> endobj
-3587 0 obj <<
+3713 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 554.053 512.306 563.076]
+/Rect [521.223 716.643 539.579 725.666]
/Subtype /Link
/A << /S /GoTo /D (section.20.1) >>
>> endobj
-3588 0 obj <<
+3714 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 540.504 512.306 549.527]
+/Rect [521.223 703.094 539.579 712.117]
/Subtype /Link
/A << /S /GoTo /D (section.20.2) >>
>> endobj
-3589 0 obj <<
+3715 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 526.955 512.306 535.978]
+/Rect [521.223 689.545 539.579 698.568]
/Subtype /Link
/A << /S /GoTo /D (section.20.3) >>
>> endobj
-3590 0 obj <<
+3716 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 513.406 512.306 522.428]
+/Rect [521.223 675.996 539.579 685.019]
/Subtype /Link
/A << /S /GoTo /D (subsection.20.3.1) >>
>> endobj
-3591 0 obj <<
+3717 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 499.856 512.306 508.879]
+/Rect [521.223 662.447 539.579 671.469]
/Subtype /Link
/A << /S /GoTo /D (subsection.20.3.2) >>
>> endobj
-3592 0 obj <<
+3718 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 486.307 512.306 495.33]
+/Rect [521.223 648.897 539.579 657.92]
/Subtype /Link
/A << /S /GoTo /D (subsection.20.3.3) >>
>> endobj
-3593 0 obj <<
+3719 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 472.758 512.306 481.781]
+/Rect [521.223 635.348 539.579 644.371]
/Subtype /Link
/A << /S /GoTo /D (subsection.20.3.4) >>
>> endobj
-3594 0 obj <<
+3720 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 459.209 512.306 468.232]
+/Rect [521.223 621.799 539.579 630.822]
/Subtype /Link
/A << /S /GoTo /D (subsection.20.3.5) >>
>> endobj
-3595 0 obj <<
+3721 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 445.66 512.306 454.682]
+/Rect [521.223 608.25 539.579 617.273]
/Subtype /Link
/A << /S /GoTo /D (section.20.4) >>
>> endobj
-3596 0 obj <<
+3722 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 432.11 512.306 441.133]
+/Rect [521.223 594.701 539.579 603.724]
/Subtype /Link
/A << /S /GoTo /D (subsection.20.4.1) >>
>> endobj
-3597 0 obj <<
+3723 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 418.561 512.306 427.584]
+/Rect [521.223 581.151 539.579 590.174]
/Subtype /Link
/A << /S /GoTo /D (subsection.20.4.2) >>
>> endobj
-3598 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 405.012 512.306 414.035]
-/Subtype /Link
-/A << /S /GoTo /D (section.20.5) >>
->> endobj
-3599 0 obj <<
+3724 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 380.554 512.306 390.122]
+/Rect [519.586 556.693 539.579 566.261]
/Subtype /Link
/A << /S /GoTo /D (chapter.21) >>
>> endobj
-3600 0 obj <<
+3725 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 367.004 512.306 376.027]
+/Rect [521.223 543.144 539.579 552.167]
/Subtype /Link
/A << /S /GoTo /D (section.21.1) >>
>> endobj
-3601 0 obj <<
+3726 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 353.455 512.306 362.478]
+/Rect [521.223 529.595 539.579 538.618]
/Subtype /Link
/A << /S /GoTo /D (section.21.2) >>
>> endobj
-3602 0 obj <<
+3727 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 339.906 512.306 348.929]
+/Rect [521.223 516.046 539.579 525.068]
/Subtype /Link
/A << /S /GoTo /D (section.21.3) >>
>> endobj
-3603 0 obj <<
+3728 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 326.357 512.306 335.38]
+/Rect [521.223 502.496 539.579 511.519]
/Subtype /Link
/A << /S /GoTo /D (subsection.21.3.1) >>
>> endobj
-3604 0 obj <<
+3729 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 312.808 512.306 321.83]
+/Rect [521.223 488.947 539.579 497.97]
/Subtype /Link
/A << /S /GoTo /D (section.21.4) >>
>> endobj
-3605 0 obj <<
+3730 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 299.258 512.306 308.281]
+/Rect [521.223 475.398 539.579 484.421]
/Subtype /Link
/A << /S /GoTo /D (subsection.21.4.1) >>
>> endobj
-3606 0 obj <<
+3731 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 285.709 512.306 294.732]
+/Rect [521.223 461.849 539.579 470.872]
/Subtype /Link
/A << /S /GoTo /D (subsection.21.4.2) >>
>> endobj
-3607 0 obj <<
+3732 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 272.16 512.306 281.183]
+/Rect [521.223 448.3 539.579 457.322]
/Subtype /Link
/A << /S /GoTo /D (subsection.21.4.3) >>
>> endobj
-3608 0 obj <<
+3733 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 258.611 512.306 267.634]
+/Rect [521.223 434.75 539.579 443.773]
/Subtype /Link
/A << /S /GoTo /D (subsection.21.4.4) >>
>> endobj
-3609 0 obj <<
+3734 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 245.062 512.306 254.084]
+/Rect [521.223 421.201 539.579 430.224]
/Subtype /Link
/A << /S /GoTo /D (subsection.21.4.5) >>
>> endobj
-3610 0 obj <<
+3735 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 231.512 512.306 240.535]
+/Rect [521.223 407.652 539.579 416.675]
/Subtype /Link
/A << /S /GoTo /D (subsection.21.4.6) >>
>> endobj
-3611 0 obj <<
+3736 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 217.963 512.306 226.986]
+/Rect [521.223 394.103 539.579 403.126]
/Subtype /Link
/A << /S /GoTo /D (section.21.5) >>
>> endobj
-3612 0 obj <<
+3737 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 204.414 512.306 213.437]
+/Rect [521.223 380.554 539.579 389.576]
/Subtype /Link
/A << /S /GoTo /D (subsection.21.5.1) >>
>> endobj
-3613 0 obj <<
+3738 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 190.865 512.306 199.888]
+/Rect [521.223 367.004 539.579 376.027]
/Subtype /Link
/A << /S /GoTo /D (subsection.21.5.2) >>
>> endobj
-3614 0 obj <<
+3739 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 177.316 512.306 186.338]
+/Rect [521.223 353.455 539.579 362.478]
/Subtype /Link
/A << /S /GoTo /D (subsection.21.5.3) >>
>> endobj
-3615 0 obj <<
+3740 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 163.766 512.306 172.789]
+/Rect [521.223 326.357 539.579 335.38]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.21.5.3.1) >>
>> endobj
-3616 0 obj <<
+3741 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 136.668 512.306 145.691]
+/Rect [521.223 312.808 539.579 321.83]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.21.5.3.2) >>
>> endobj
-3617 0 obj <<
+3742 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 123.119 512.306 132.142]
+/Rect [521.223 299.258 539.579 308.281]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.21.5.3.3) >>
>> endobj
-3618 0 obj <<
+3743 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 109.57 512.306 118.593]
+/Rect [521.223 285.709 539.579 294.732]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.21.5.3.4) >>
>> endobj
-3619 0 obj <<
+3744 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 96.02 512.306 105.043]
+/Rect [521.223 272.16 539.579 281.183]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.21.5.3.5) >>
>> endobj
-3620 0 obj <<
+3745 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 82.471 512.306 91.494]
+/Rect [521.223 258.611 539.579 267.634]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.21.5.3.6) >>
>> endobj
-3621 0 obj <<
+3746 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 68.922 512.306 77.945]
+/Rect [521.223 245.062 539.579 254.084]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.21.5.3.7) >>
>> endobj
-3622 0 obj <<
+3747 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 55.373 512.306 64.396]
+/Rect [521.223 231.512 539.579 240.535]
/Subtype /Link
-/A << /S /GoTo /D (subsubsection.21.5.3.8) >>
->> endobj
-3573 0 obj <<
-/D [3571 0 R /XYZ 85.039 786.531 null]
->> endobj
-3570 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-3625 0 obj <<
-/Length 2015
-/Filter /FlateDecode
->>
-stream
-x\MsH+tb1-N쮽*2QW{f$,r ݯ_("Zc.-wmS7jk
-W
-8 ia,7 lCPt |R^4K O86 
-|[p>Rrށv$h$Ո\*܉u Ӕ?)IR祳R;Ɉ4CBȈ#%*zx6+BJS 1zZaA%?OIе?(M{_eBI'!h@CdbZ*`F
-D/#_A)~5#:g:H)+s"Cβ`@q~);Ñp!"@>ol,֧MKTQuf /hWLy$z RSpg]WJ(UD#NO?x_
-80+rc {^lcGH<1*
-m_`<`
-F^{*2mV4G=ec@|;TXpBkI,Ӧ[7FND˖Q2)0P>BOA&X==!j7  \.8rߕZ ZQ(}Q:X Q펛=֕l=];;ɯ(mOv\ o4(fdT?_R| o Y^"#?Qxo,mniq0jZ'1iW^`' 'b[kq_o:وhYLw` X78K`J[sEq<6A4v$mqR.9BcSEbӼd=-Ms튆hq-6jff\3Ӫ;3%-o[poU2:͍ϢZq
-endobj
-3624 0 obj <<
-/Type /Page
-/Contents 3625 0 R
-/Resources 3623 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 3471 0 R
-/Annots [ 3627 0 R 3628 0 R 3629 0 R 3630 0 R 3631 0 R 3632 0 R 3633 0 R 3634 0 R 3635 0 R 3636 0 R 3637 0 R 3638 0 R 3639 0 R 3640 0 R 3641 0 R 3642 0 R 3643 0 R 3644 0 R 3645 0 R 3646 0 R 3647 0 R 3648 0 R 3649 0 R 3650 0 R 3651 0 R 3652 0 R 3653 0 R 3654 0 R 3655 0 R 3656 0 R 3657 0 R 3658 0 R 3659 0 R 3660 0 R 3661 0 R 3662 0 R 3663 0 R 3664 0 R 3665 0 R 3666 0 R 3667 0 R 3668 0 R 3669 0 R 3670 0 R 3671 0 R 3672 0 R 3673 0 R 3674 0 R ]
+/A << /S /GoTo /D (section.21.6) >>
>> endobj
-3627 0 obj <<
+3748 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 754.651 512.306 763.674]
+/Rect [521.223 217.963 539.579 226.986]
/Subtype /Link
-/A << /S /GoTo /D (section.21.6) >>
+/A << /S /GoTo /D (section.21.7) >>
>> endobj
-3628 0 obj <<
+3749 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 204.414 539.579 213.437]
/Subtype /Link
-/A << /S /GoTo /D (section.21.7) >>
+/A << /S /GoTo /D (subsection.21.7.1) >>
>> endobj
-3629 0 obj <<
+3750 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 716.643 512.306 726.212]
+/Rect [519.586 179.956 539.579 189.524]
/Subtype /Link
/A << /S /GoTo /D (chapter.22) >>
>> endobj
-3630 0 obj <<
+3751 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 703.094 512.306 712.117]
+/Rect [521.223 166.407 539.579 175.429]
/Subtype /Link
/A << /S /GoTo /D (section.22.1) >>
>> endobj
-3631 0 obj <<
+3752 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 689.545 512.306 698.568]
+/Rect [521.223 152.857 539.579 161.88]
/Subtype /Link
/A << /S /GoTo /D (section.22.2) >>
>> endobj
-3632 0 obj <<
+3753 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 675.996 512.306 685.019]
+/Rect [521.223 139.308 539.579 148.331]
/Subtype /Link
/A << /S /GoTo /D (section.22.3) >>
>> endobj
-3633 0 obj <<
+3754 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 662.447 512.306 671.469]
+/Rect [521.223 125.759 539.579 134.782]
/Subtype /Link
/A << /S /GoTo /D (subsection.22.3.1) >>
>> endobj
-3634 0 obj <<
+3755 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 648.897 512.306 657.92]
+/Rect [521.223 112.21 539.579 121.233]
/Subtype /Link
/A << /S /GoTo /D (section.22.4) >>
>> endobj
-3635 0 obj <<
+3756 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 635.348 512.306 644.371]
+/Rect [521.223 98.661 539.579 107.683]
/Subtype /Link
/A << /S /GoTo /D (subsection.22.4.1) >>
>> endobj
-3636 0 obj <<
+3757 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 621.799 512.306 630.822]
+/Rect [521.223 85.111 539.579 94.134]
/Subtype /Link
/A << /S /GoTo /D (section.22.5) >>
>> endobj
-3637 0 obj <<
+3710 0 obj <<
+/D [3708 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3707 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3760 0 obj <<
+/Length 3333
+/Filter /FlateDecode
+>>
+stream
+x[w6+VA0@\HNv'{NL;XWk/@\Eccԗ%f8
+u)QN-T8hVZYgM)ͧΗƄ*RcSc¤|.ӽ)PAiN"4}!7'ZXB]ͤ m[Qgs7Rꛚ
+k*#r G M
+ ib׶EENm><6|Z%ص[syבy=y_sVa^4:f`C> d@6r0Do@RP' zt6Յibs/ mꚹ1GBh6aFTija
+Bjg&Fuy c.3Z
+&
+~]v
+>_)rc 1bobF\=^_"s\A `^y7ɼoRcԿ9nG:._/-7 (&
+(&$'> Oധ f&=lEA4Wvzs F>z^֗ WM3IMN%.Jʼn8}41E
+*PKJWdP ux|ȡmkB铅k 7p#Cp&
+0O3Vgqgj^WvBe]Oa[
+Iۏ ޷PSo茴%v{GM;5ޘ'i1wKKp(K.
+ï^7x/[WW,?~_ 6
+;vlH߭3\/I}&H,3,
+8&x<#R,yBZ=ItWUg.no{&y㥀#y)OFՠyw syEs|{.gj>RIA'jxRjtgC(T e_~*$dU@#J61jendstream
+endobj
+3759 0 obj <<
+/Type /Page
+/Contents 3760 0 R
+/Resources 3758 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3706 0 R
+/Annots [ 3762 0 R 3763 0 R 3764 0 R 3765 0 R 3766 0 R 3767 0 R 3768 0 R 3769 0 R 3770 0 R 3771 0 R 3772 0 R 3773 0 R 3774 0 R 3775 0 R 3776 0 R 3777 0 R 3778 0 R 3779 0 R 3780 0 R 3781 0 R 3782 0 R 3783 0 R 3784 0 R 3785 0 R 3786 0 R 3787 0 R 3788 0 R 3789 0 R 3790 0 R 3791 0 R 3792 0 R 3793 0 R 3794 0 R 3795 0 R 3796 0 R 3797 0 R 3798 0 R 3799 0 R 3800 0 R 3801 0 R 3802 0 R 3803 0 R 3804 0 R 3805 0 R 3806 0 R 3807 0 R 3808 0 R 3809 0 R 3810 0 R 3811 0 R 3812 0 R ]
+>> endobj
+3762 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 597.341 512.306 606.909]
+/Rect [519.586 754.651 539.579 764.219]
/Subtype /Link
/A << /S /GoTo /D (chapter.23) >>
>> endobj
-3638 0 obj <<
+3763 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 583.792 512.306 592.814]
+/Rect [521.223 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (section.23.1) >>
>> endobj
-3639 0 obj <<
+3764 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 570.242 512.306 579.265]
+/Rect [521.223 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (section.23.2) >>
>> endobj
-3640 0 obj <<
+3765 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 556.693 512.306 565.716]
+/Rect [521.223 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (subsection.23.2.1) >>
>> endobj
-3641 0 obj <<
+3766 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 543.144 512.306 552.167]
+/Rect [521.223 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (subsection.23.2.2) >>
>> endobj
-3642 0 obj <<
+3767 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 529.595 512.306 538.618]
+/Rect [521.223 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.23.2.2.1) >>
>> endobj
-3643 0 obj <<
+3768 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 516.046 512.306 525.068]
+/Rect [521.223 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (subsection.23.2.3) >>
>> endobj
-3644 0 obj <<
+3769 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 502.496 512.306 511.519]
+/Rect [521.223 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.23.2.3.1) >>
>> endobj
-3645 0 obj <<
+3770 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 488.947 512.306 497.97]
+/Rect [521.223 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (section.23.3) >>
>> endobj
-3646 0 obj <<
+3771 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 475.398 512.306 484.421]
+/Rect [521.223 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (subsection.23.3.1) >>
>> endobj
-3647 0 obj <<
+3772 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 461.849 512.306 470.872]
+/Rect [521.223 619.159 539.579 628.182]
/Subtype /Link
/A << /S /GoTo /D (subsection.23.3.2) >>
>> endobj
-3648 0 obj <<
+3773 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 448.3 512.306 457.322]
+/Rect [521.223 605.61 539.579 614.633]
/Subtype /Link
/A << /S /GoTo /D (subsection.23.3.3) >>
>> endobj
-3649 0 obj <<
+3774 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 434.75 512.306 443.773]
+/Rect [521.223 592.061 539.579 601.083]
/Subtype /Link
/A << /S /GoTo /D (section.23.4) >>
>> endobj
-3650 0 obj <<
+3775 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 421.201 512.306 430.224]
+/Rect [521.223 578.511 539.579 587.534]
/Subtype /Link
/A << /S /GoTo /D (section.23.5) >>
>> endobj
-3651 0 obj <<
+3776 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 407.652 512.306 416.675]
+/Rect [521.223 564.962 539.579 573.985]
/Subtype /Link
/A << /S /GoTo /D (subsection.23.5.1) >>
>> endobj
-3652 0 obj <<
+3777 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 383.194 512.306 392.762]
+/Rect [519.586 540.504 539.579 550.072]
/Subtype /Link
/A << /S /GoTo /D (chapter.24) >>
>> endobj
-3653 0 obj <<
+3778 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 369.645 512.306 378.667]
+/Rect [521.223 526.955 539.579 535.978]
/Subtype /Link
/A << /S /GoTo /D (section.24.1) >>
>> endobj
-3654 0 obj <<
+3779 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 356.095 512.306 365.118]
+/Rect [521.223 513.406 539.579 522.428]
/Subtype /Link
/A << /S /GoTo /D (section.24.2) >>
>> endobj
-3655 0 obj <<
+3780 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 342.546 512.306 351.569]
+/Rect [521.223 499.856 539.579 508.879]
/Subtype /Link
/A << /S /GoTo /D (subsection.24.2.1) >>
>> endobj
-3656 0 obj <<
+3781 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 328.997 512.306 338.02]
+/Rect [521.223 486.307 539.579 495.33]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.2.1.1) >>
>> endobj
-3657 0 obj <<
+3782 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 315.448 512.306 324.471]
+/Rect [521.223 472.758 539.579 481.781]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.2.1.2) >>
>> endobj
-3658 0 obj <<
+3783 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 288.349 512.306 297.372]
+/Rect [521.223 459.209 539.579 468.232]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.2.1.3) >>
>> endobj
-3659 0 obj <<
+3784 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 274.8 512.306 283.823]
+/Rect [521.223 445.66 539.579 454.682]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.2.1.4) >>
>> endobj
-3660 0 obj <<
+3785 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 261.251 512.306 270.274]
+/Rect [521.223 432.11 539.579 441.133]
/Subtype /Link
/A << /S /GoTo /D (subsection.24.2.2) >>
>> endobj
-3661 0 obj <<
+3786 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 247.702 512.306 256.725]
+/Rect [521.223 418.561 539.579 427.584]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.2.2.1) >>
>> endobj
-3662 0 obj <<
+3787 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 234.153 512.306 243.175]
+/Rect [521.223 405.012 539.579 414.035]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.2.2.2) >>
>> endobj
-3663 0 obj <<
+3788 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 220.603 512.306 229.626]
+/Rect [521.223 391.463 539.579 400.486]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.2.2.3) >>
>> endobj
-3664 0 obj <<
+3789 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 193.505 512.306 202.528]
+/Rect [521.223 377.914 539.579 386.936]
/Subtype /Link
/A << /S /GoTo /D (subsection.24.2.3) >>
>> endobj
-3665 0 obj <<
+3790 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 179.956 512.306 188.979]
+/Rect [521.223 364.364 539.579 373.387]
/Subtype /Link
/A << /S /GoTo /D (subsection.24.2.4) >>
>> endobj
-3666 0 obj <<
+3791 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 166.407 512.306 175.429]
+/Rect [521.223 350.815 539.579 359.838]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.2.4.1) >>
>> endobj
-3667 0 obj <<
+3792 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 152.857 512.306 161.88]
+/Rect [521.223 337.266 539.579 346.289]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.2.4.2) >>
>> endobj
-3668 0 obj <<
+3793 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 139.308 512.306 148.331]
+/Rect [521.223 323.717 539.579 332.74]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.2.4.3) >>
>> endobj
-3669 0 obj <<
+3794 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 125.759 512.306 134.782]
+/Rect [521.223 310.168 539.579 319.19]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.2.4.4) >>
>> endobj
-3670 0 obj <<
+3795 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 112.21 512.306 121.233]
+/Rect [521.223 296.618 539.579 305.641]
/Subtype /Link
/A << /S /GoTo /D (section.24.3) >>
>> endobj
-3671 0 obj <<
+3796 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 98.661 512.306 107.683]
+/Rect [521.223 283.069 539.579 292.092]
/Subtype /Link
/A << /S /GoTo /D (section.24.4) >>
>> endobj
-3672 0 obj <<
+3797 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 85.111 512.306 94.134]
+/Rect [521.223 269.52 539.579 278.543]
/Subtype /Link
/A << /S /GoTo /D (section.24.5) >>
>> endobj
-3673 0 obj <<
+3798 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 71.562 512.306 80.585]
+/Rect [521.223 255.971 539.579 264.994]
/Subtype /Link
/A << /S /GoTo /D (subsection.24.5.1) >>
>> endobj
-3674 0 obj <<
+3799 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 58.013 512.306 67.036]
+/Rect [521.223 242.422 539.579 251.444]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.24.5.1.1) >>
>> endobj
-3626 0 obj <<
-/D [3624 0 R /XYZ 85.039 786.531 null]
->> endobj
-3623 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-3677 0 obj <<
-/Length 2160
-/Filter /FlateDecode
->>
-stream
-x\]wFWp K'vyc'is^  W_ߙ]aLleH
-Yg>م5ǚQJfoASAp et{a.Y^ҡh}x]I[2x46_yϴnNR _Ia?Мlҷ<k[ҏY'Dzzh<4j0O(wb(S|VyNI+59\(r/ߖ"V*0§æ~}EB2Eo(4$#X' }/Udk3JAAp >\KD= w$7R=OPl5>ύ#?hU6EXQ3kE?9Ȉ042R<C%}]&f4L}.p$f̳{Ӆ*p&tY]$Cu2K͊4X7SSV;Wsx^\<L78yߥ)}`@cr90@#
-tYg0%.4g״%|q f<hE LpQ9SP<'k ~FQ"K}h~ª]tVѧlwab؄0u^1&8I&SgU҅pbbc"odoםwt7BsԫԴ5u,r B'-3D\ gϭ& @.ҀVh#S!#k!,0ITU|\+-N^Ғ/<"1zt& o0ï10Wf­4$0yJȳ$4%mK?7+8ZAV1;>I˃43^a\V;k%,L~'\̻۠9ߓ[PkBɅNm#Sڸ;$=:O륟{\dJ7dev*RvlXKTĭ=\O:択b nѵxV_|ȸڷh2B̈܊ߛ/!.)vmKˬJShXGZm0>#?oK;QlWqv v
-I^A}oR U:aq<
-m @Ocaߊ?lʺcӛ洷U`xQȧfl̪}O(ZPr,/Tdy=}UlD~?Q5Gu_"n*g蚥hHendstream
-endobj
-3676 0 obj <<
-/Type /Page
-/Contents 3677 0 R
-/Resources 3675 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 3471 0 R
-/Annots [ 3679 0 R 3680 0 R 3681 0 R 3682 0 R 3683 0 R 3684 0 R 3685 0 R 3686 0 R 3687 0 R 3688 0 R 3689 0 R 3690 0 R 3691 0 R 3692 0 R 3693 0 R 3694 0 R 3695 0 R 3696 0 R 3697 0 R 3698 0 R 3699 0 R 3700 0 R 3701 0 R 3702 0 R 3703 0 R 3704 0 R 3705 0 R 3706 0 R 3707 0 R 3708 0 R 3709 0 R 3710 0 R 3711 0 R 3712 0 R 3713 0 R 3714 0 R 3715 0 R 3716 0 R 3717 0 R 3718 0 R 3719 0 R 3720 0 R 3721 0 R 3722 0 R 3723 0 R 3724 0 R 3725 0 R ]
->> endobj
-3679 0 obj <<
+3800 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 754.651 512.306 763.674]
+/Rect [521.223 228.872 539.579 237.895]
/Subtype /Link
/A << /S /GoTo /D (subsection.24.5.2) >>
>> endobj
-3680 0 obj <<
+3801 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 215.323 539.579 224.346]
/Subtype /Link
/A << /S /GoTo /D (subsection.24.5.3) >>
>> endobj
-3681 0 obj <<
+3802 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 727.553 512.306 736.575]
+/Rect [521.223 201.774 539.579 210.797]
/Subtype /Link
/A << /S /GoTo /D (section.24.6) >>
>> endobj
-3682 0 obj <<
+3803 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 700.454 512.306 709.477]
+/Rect [521.223 188.225 539.579 197.248]
/Subtype /Link
/A << /S /GoTo /D (subsection.24.6.1) >>
>> endobj
-3683 0 obj <<
+3804 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 686.905 512.306 695.928]
+/Rect [521.223 174.676 539.579 183.698]
/Subtype /Link
/A << /S /GoTo /D (subsection.24.6.2) >>
>> endobj
-3684 0 obj <<
+3805 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 673.356 512.306 682.379]
+/Rect [521.223 161.126 539.579 170.149]
/Subtype /Link
/A << /S /GoTo /D (subsection.24.6.3) >>
>> endobj
-3685 0 obj <<
+3806 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 648.897 512.306 658.466]
+/Rect [519.586 136.668 539.579 146.236]
/Subtype /Link
/A << /S /GoTo /D (chapter.25) >>
>> endobj
-3686 0 obj <<
+3807 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 635.348 512.306 644.371]
+/Rect [521.223 123.119 539.579 132.142]
/Subtype /Link
/A << /S /GoTo /D (section.25.1) >>
>> endobj
-3687 0 obj <<
+3808 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 621.799 512.306 630.822]
+/Rect [521.223 109.57 539.579 118.593]
/Subtype /Link
/A << /S /GoTo /D (section.25.2) >>
>> endobj
-3688 0 obj <<
+3809 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 608.25 512.306 617.273]
+/Rect [521.223 96.02 539.579 105.043]
/Subtype /Link
/A << /S /GoTo /D (subsection.25.2.1) >>
>> endobj
-3689 0 obj <<
+3810 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 594.701 512.306 603.724]
+/Rect [521.223 82.471 539.579 91.494]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.25.2.1.1) >>
>> endobj
-3690 0 obj <<
+3811 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 581.151 512.306 590.174]
+/Rect [521.223 68.922 539.579 77.945]
/Subtype /Link
/A << /S /GoTo /D (subsection.25.2.2) >>
>> endobj
-3691 0 obj <<
+3812 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 567.602 512.306 576.625]
+/Rect [521.223 55.373 539.579 64.396]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.25.2.2.1) >>
>> endobj
-3692 0 obj <<
+3761 0 obj <<
+/D [3759 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3758 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3815 0 obj <<
+/Length 2978
+/Filter /FlateDecode
+>>
+stream
+x\[w9~ϯ:/{ ;%%asfqCb3Cdw0CHNVI}*U!l~Ƞ3=PDjfοHh1
+MFE'{
+9 ioS?#rOf?>4u\ MoxpnTx|Ljh=!YR_xAa x " Hr垃
+D>_#}^.gzmGd87_3jaHK3DUb_1[ϵڧjxި:vJ_T}H>[|V]jl࿼*RUvfaTP40qmau3f`RFp,&3'39pw~ń,V\.3uTyN_ȳ
+
+BȵU
+H["1Ė! fwTVHcbUenǾFEgZ6i.PlZK>7b1!{):U
+-9S4˜0Nץd~Gq8*Hc$MTãD>#<5Xk L7ͅvb<8`gBi5}z75}#w6Ma<3M; AS[w{J,O'"N$o677t69 .(VQiu$
+ Dy2,׮FB2|b+O&]ZN}dF0b_fd1@3*
+orW#7r0H_ral&u
+
+T!-H&%jjr4Y.F`g1
+
+9ބM:h b
+\Ù-(F;[ژ!C*n2Xpc xz=n0e|h[5}Ab
+m
+, U
+ Bj)]ڼuq88G{)/oҙ||ڽ4S}Y
+
+S E`ddf)Qc aN<7COtB <ߠs;x嵍Lh_} g#Ԡeh ۧeb45]MmϞ&Q|,*}BB#X:endstream
+endobj
+3814 0 obj <<
+/Type /Page
+/Contents 3815 0 R
+/Resources 3813 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3706 0 R
+/Annots [ 3817 0 R 3818 0 R 3819 0 R 3820 0 R 3821 0 R 3822 0 R 3823 0 R 3824 0 R 3825 0 R 3826 0 R 3827 0 R 3828 0 R 3829 0 R 3830 0 R 3831 0 R 3832 0 R 3833 0 R 3834 0 R 3835 0 R 3836 0 R 3837 0 R 3838 0 R 3839 0 R 3840 0 R 3841 0 R 3842 0 R 3843 0 R 3844 0 R 3845 0 R 3846 0 R 3847 0 R 3848 0 R 3849 0 R 3850 0 R 3851 0 R 3852 0 R 3853 0 R 3854 0 R 3855 0 R 3856 0 R 3857 0 R 3858 0 R 3859 0 R ]
+>> endobj
+3817 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 554.053 512.306 563.076]
+/Rect [521.223 754.651 539.579 763.674]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.25.2.2.2) >>
>> endobj
-3693 0 obj <<
+3818 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 540.504 512.306 549.527]
+/Rect [521.223 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (subsection.25.2.3) >>
>> endobj
-3694 0 obj <<
+3819 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 526.955 512.306 535.978]
+/Rect [521.223 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (subsection.25.2.4) >>
>> endobj
-3695 0 obj <<
+3820 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 513.406 512.306 522.428]
+/Rect [521.223 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (subsection.25.2.5) >>
>> endobj
-3696 0 obj <<
+3821 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 499.856 512.306 508.879]
+/Rect [521.223 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.25.2.5.1) >>
>> endobj
-3697 0 obj <<
+3822 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 486.307 512.306 495.33]
+/Rect [521.223 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.25.2.5.2) >>
>> endobj
-3698 0 obj <<
+3823 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 472.758 512.306 481.781]
+/Rect [521.223 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.25.2.5.3) >>
>> endobj
-3699 0 obj <<
+3824 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 459.209 512.306 468.232]
+/Rect [521.223 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.25.2.5.4) >>
>> endobj
-3700 0 obj <<
+3825 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 445.66 512.306 454.682]
+/Rect [521.223 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (section.25.3) >>
>> endobj
-3701 0 obj <<
+3826 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 432.11 512.306 441.133]
+/Rect [521.223 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (subsection.25.3.1) >>
>> endobj
-3702 0 obj <<
+3827 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 407.652 512.306 417.22]
+/Rect [521.223 619.159 539.579 628.182]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.25.3.2) >>
+>> endobj
+3828 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [519.586 594.701 539.579 604.269]
/Subtype /Link
/A << /S /GoTo /D (chapter.26) >>
>> endobj
-3703 0 obj <<
+3829 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 394.103 512.306 403.126]
+/Rect [521.223 581.151 539.579 590.174]
/Subtype /Link
/A << /S /GoTo /D (section.26.1) >>
>> endobj
-3704 0 obj <<
+3830 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 380.554 512.306 389.576]
+/Rect [521.223 567.602 539.579 576.625]
/Subtype /Link
/A << /S /GoTo /D (section.26.2) >>
>> endobj
-3705 0 obj <<
+3831 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 367.004 512.306 376.027]
+/Rect [521.223 554.053 539.579 563.076]
/Subtype /Link
/A << /S /GoTo /D (section.26.3) >>
>> endobj
-3706 0 obj <<
+3832 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 353.455 512.306 362.478]
+/Rect [521.223 540.504 539.579 549.527]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.3.1) >>
>> endobj
-3707 0 obj <<
+3833 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 339.906 512.306 348.929]
+/Rect [521.223 526.955 539.579 535.978]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.3.2) >>
>> endobj
-3708 0 obj <<
+3834 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 326.357 512.306 335.38]
+/Rect [521.223 513.406 539.579 522.428]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.3.3) >>
>> endobj
-3709 0 obj <<
+3835 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 312.808 512.306 321.83]
+/Rect [521.223 499.856 539.579 508.879]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.3.4) >>
>> endobj
-3710 0 obj <<
+3836 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 299.258 512.306 308.281]
+/Rect [521.223 486.307 539.579 495.33]
/Subtype /Link
/A << /S /GoTo /D (section.26.4) >>
>> endobj
-3711 0 obj <<
+3837 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 285.709 512.306 294.732]
+/Rect [521.223 472.758 539.579 481.781]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.4.1) >>
>> endobj
-3712 0 obj <<
+3838 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 272.16 512.306 281.183]
+/Rect [521.223 459.209 539.579 468.232]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.4.2) >>
>> endobj
-3713 0 obj <<
+3839 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 258.611 512.306 267.634]
+/Rect [521.223 445.66 539.579 454.682]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.4.3) >>
>> endobj
-3714 0 obj <<
+3840 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 245.062 512.306 254.084]
+/Rect [521.223 432.11 539.579 441.133]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.4.4) >>
>> endobj
-3715 0 obj <<
+3841 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 231.512 512.306 240.535]
+/Rect [521.223 418.561 539.579 427.584]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.4.5) >>
>> endobj
-3716 0 obj <<
+3842 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 217.963 512.306 226.986]
+/Rect [521.223 405.012 539.579 414.035]
/Subtype /Link
/A << /S /GoTo /D (section.26.5) >>
>> endobj
-3717 0 obj <<
+3843 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 204.414 512.306 213.437]
+/Rect [521.223 391.463 539.579 400.486]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.5.1) >>
>> endobj
-3718 0 obj <<
+3844 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 190.865 512.306 199.888]
+/Rect [521.223 377.914 539.579 386.936]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.5.2) >>
>> endobj
-3719 0 obj <<
+3845 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 177.316 512.306 186.338]
+/Rect [521.223 364.364 539.579 373.387]
/Subtype /Link
/A << /S /GoTo /D (subsection.26.5.3) >>
>> endobj
-3720 0 obj <<
+3846 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 152.857 512.306 162.426]
+/Rect [519.586 339.906 539.579 349.474]
/Subtype /Link
/A << /S /GoTo /D (chapter.27) >>
>> endobj
-3721 0 obj <<
+3847 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 139.308 512.306 148.331]
+/Rect [521.223 326.357 539.579 335.38]
/Subtype /Link
/A << /S /GoTo /D (section.27.1) >>
>> endobj
-3722 0 obj <<
+3848 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 125.759 512.306 134.782]
+/Rect [521.223 312.808 539.579 321.83]
/Subtype /Link
/A << /S /GoTo /D (section.27.2) >>
>> endobj
-3723 0 obj <<
+3849 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 112.21 512.306 121.233]
+/Rect [521.223 299.258 539.579 308.281]
/Subtype /Link
/A << /S /GoTo /D (section.27.3) >>
>> endobj
-3724 0 obj <<
+3850 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 98.661 512.306 107.683]
+/Rect [521.223 285.709 539.579 294.732]
/Subtype /Link
/A << /S /GoTo /D (section.27.4) >>
>> endobj
-3725 0 obj <<
+3851 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 85.111 512.306 94.134]
+/Rect [521.223 272.16 539.579 281.183]
/Subtype /Link
/A << /S /GoTo /D (section.27.5) >>
>> endobj
-3678 0 obj <<
-/D [3676 0 R /XYZ 85.039 786.531 null]
->> endobj
-3675 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R >>
-/ProcSet [ /PDF /Text ]
+3852 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 258.611 539.579 267.634]
+/Subtype /Link
+/A << /S /GoTo /D (section.27.6) >>
>> endobj
-3728 0 obj <<
-/Length 1706
-/Filter /FlateDecode
->>
-stream
-xKw8,aaFO@9iҦ#3vE L6.t~+ Ĵqbdctu"0
-|ɩzCq+#|Hz6"%"Kg|-S>_n8kgȹ6Rά'$xbc~}A<Z9H4^C H="FF"+(<gqţSww)d}]T9Y'~/jo9d,)k$(p `Q=l*MaLm^^_Fʅ/NnySuʻ F 7]y
- E%xق]mA{"oDXE(F|q$6LW5 P:$7F[&KMyQEq'Sȡ
-it/v95~. v8#<8l"cnO[t%CZSK12.Nv?KEDwSq*V !#֌`$7m
-)J}=YRem_
-L{nf>fz ;,{5a,|UهRue`u0ʈ]\G#nͺUBۄjpڣ<n{ʋEӺ?*:Uw
-?A8 ֡%XvK075ZzQ)MioW2܉ /ΰ>(Inst}yv`6"Yj^S,vmWm b%om;B"@M.oeNMsU1i:hW;A(Y֗@wxMZvnj`%pendstream
-endobj
-3727 0 obj <<
-/Type /Page
-/Contents 3728 0 R
-/Resources 3726 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 3770 0 R
-/Annots [ 3730 0 R 3731 0 R 3732 0 R 3733 0 R 3734 0 R 3735 0 R 3736 0 R 3737 0 R 3738 0 R 3739 0 R 3740 0 R 3741 0 R 3742 0 R 3743 0 R 3744 0 R 3745 0 R 3746 0 R 3747 0 R 3748 0 R 3749 0 R 3750 0 R 3751 0 R 3752 0 R 3753 0 R 3754 0 R 3755 0 R 3756 0 R 3757 0 R 3758 0 R 3759 0 R 3760 0 R 3761 0 R 3762 0 R 3763 0 R 3764 0 R 3765 0 R 3766 0 R 3767 0 R 3768 0 R 3769 0 R ]
+3853 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 245.062 539.579 254.084]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.27.6.1) >>
>> endobj
-3730 0 obj <<
+3854 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 754.651 512.306 764.219]
+/Rect [519.586 220.603 539.579 230.172]
/Subtype /Link
/A << /S /GoTo /D (chapter.28) >>
>> endobj
-3731 0 obj <<
+3855 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 207.054 539.579 216.077]
/Subtype /Link
/A << /S /GoTo /D (section.28.1) >>
>> endobj
-3732 0 obj <<
+3856 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 727.553 512.306 736.575]
+/Rect [521.223 193.505 539.579 202.528]
/Subtype /Link
/A << /S /GoTo /D (section.28.2) >>
>> endobj
-3733 0 obj <<
+3857 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 703.094 512.306 712.663]
+/Rect [519.586 169.047 539.579 178.615]
/Subtype /Link
/A << /S /GoTo /D (chapter.29) >>
>> endobj
-3734 0 obj <<
+3858 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 689.545 512.306 698.568]
+/Rect [521.223 155.497 539.579 164.52]
/Subtype /Link
/A << /S /GoTo /D (section.29.1) >>
>> endobj
-3735 0 obj <<
+3859 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [490.587 651.052 512.306 661.347]
+/Rect [517.86 117.004 539.579 127.299]
/Subtype /Link
/A << /S /GoTo /D (part.4) >>
>> endobj
-3736 0 obj <<
+3816 0 obj <<
+/D [3814 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3813 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3862 0 obj <<
+/Length 2989
+/Filter /FlateDecode
+>>
+stream
+x\vF+@Ζs*"hQԀ`OIˆ}<$U{UU$`Lj0.`d؜JyqF\k2K<<QNFЏHrrysqҺe7۳/Cljj˜?g?'ʄo0bW1"RN6g\0$8sog
+}{|b
+z2c5lB0A3BWI)xRF?s:~6tʪxn7]Y̧3R4))Eثֶ7u!u#|&AKk6Iľ!y~>CԼǪ~uWE2DDbw~)
+CW<K9/[WbfZbiZ~ob}g_G5WE`}R~ҽ{<C"+5K!M·VP՚K
+X_0}tkf(FiͲ3 iN7!Ӂyi,Q >EY&
+tV O
+p盱G1
+LRąm{Ic+BZ]/Z0E|I,ﱑ4H48@#O4
+#ճ#.ާcooĞ , )4VDſ6WSBUԧNS)Ucb
+=[b
+=
+f=7o:S8H~LOlA'&8Lp^,7^CK,'Y6t)"\=?9ӢT~NKpHD? K55f=[|ʳ]b*ih AC$HPAh Q5 l;e۱db
+Lޠlendstream
+endobj
+3861 0 obj <<
+/Type /Page
+/Contents 3862 0 R
+/Resources 3860 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3706 0 R
+/Annots [ 3864 0 R 3865 0 R 3866 0 R 3867 0 R 3868 0 R 3869 0 R 3870 0 R 3871 0 R 3872 0 R 3873 0 R 3874 0 R 3875 0 R 3876 0 R 3877 0 R 3878 0 R 3879 0 R 3880 0 R 3881 0 R 3882 0 R 3883 0 R 3884 0 R 3885 0 R 3886 0 R 3887 0 R 3888 0 R 3889 0 R 3890 0 R 3891 0 R 3892 0 R 3893 0 R 3894 0 R 3895 0 R 3896 0 R 3897 0 R 3898 0 R 3899 0 R 3900 0 R 3901 0 R 3902 0 R 3903 0 R 3904 0 R 3905 0 R 3906 0 R 3907 0 R 3908 0 R ]
+>> endobj
+3864 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 626.594 512.306 636.162]
+/Rect [519.586 754.651 539.579 764.219]
/Subtype /Link
/A << /S /GoTo /D (chapter.30) >>
>> endobj
-3737 0 obj <<
+3865 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 613.044 512.306 622.067]
+/Rect [521.223 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (section.30.1) >>
>> endobj
-3738 0 obj <<
+3866 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 599.495 512.306 608.518]
+/Rect [521.223 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (section.30.2) >>
>> endobj
-3739 0 obj <<
+3867 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 714.003 539.579 723.026]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.30.2.1) >>
+>> endobj
+3868 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 700.454 539.579 709.477]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.30.2.2) >>
+>> endobj
+3869 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 585.946 512.306 594.969]
+/Rect [521.223 686.905 539.579 695.928]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.30.2.3) >>
+>> endobj
+3870 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (section.30.3) >>
>> endobj
-3740 0 obj <<
+3871 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 659.807 539.579 668.829]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.30.3.1) >>
+>> endobj
+3872 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 646.257 539.579 655.28]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.30.3.2) >>
+>> endobj
+3873 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 561.488 512.306 571.056]
+/Rect [521.223 632.708 539.579 641.731]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.30.3.3) >>
+>> endobj
+3874 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 619.159 539.579 628.182]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.30.3.4) >>
+>> endobj
+3875 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 605.61 539.579 614.633]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.30.3.5) >>
+>> endobj
+3876 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 592.061 539.579 601.083]
+/Subtype /Link
+/A << /S /GoTo /D (subsection.30.3.6) >>
+>> endobj
+3877 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 578.511 539.579 587.534]
+/Subtype /Link
+/A << /S /GoTo /D (subsubsection.30.3.6.1) >>
+>> endobj
+3878 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 564.962 539.579 573.985]
+/Subtype /Link
+/A << /S /GoTo /D (subsubsection.30.3.6.2) >>
+>> endobj
+3879 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 551.413 539.579 560.436]
+/Subtype /Link
+/A << /S /GoTo /D (subsubsection.30.3.6.3) >>
+>> endobj
+3880 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [519.586 526.955 539.579 536.523]
/Subtype /Link
/A << /S /GoTo /D (chapter.31) >>
>> endobj
-3741 0 obj <<
+3881 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 547.938 512.306 556.961]
+/Rect [521.223 513.406 539.579 522.428]
/Subtype /Link
/A << /S /GoTo /D (section.31.1) >>
>> endobj
-3742 0 obj <<
+3882 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 534.389 512.306 543.412]
+/Rect [521.223 499.856 539.579 508.879]
/Subtype /Link
/A << /S /GoTo /D (subsection.31.1.1) >>
>> endobj
-3743 0 obj <<
+3883 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 520.84 512.306 529.863]
+/Rect [521.223 486.307 539.579 495.33]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.31.1.1.1) >>
>> endobj
-3744 0 obj <<
+3884 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 507.291 512.306 516.314]
+/Rect [521.223 472.758 539.579 481.781]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.31.1.1.2) >>
>> endobj
-3745 0 obj <<
+3885 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 493.742 512.306 502.764]
+/Rect [521.223 459.209 539.579 468.232]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.31.1.1.3) >>
>> endobj
-3746 0 obj <<
+3886 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 480.192 512.306 489.215]
+/Rect [521.223 445.66 539.579 454.682]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.31.1.1.4) >>
>> endobj
-3747 0 obj <<
+3887 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 466.643 512.306 475.666]
+/Rect [521.223 432.11 539.579 441.133]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.31.1.1.5) >>
>> endobj
-3748 0 obj <<
+3888 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 453.094 512.306 462.117]
+/Rect [521.223 418.561 539.579 427.584]
/Subtype /Link
/A << /S /GoTo /D (subsection.31.1.2) >>
>> endobj
-3749 0 obj <<
+3889 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 439.545 512.306 448.568]
+/Rect [521.223 405.012 539.579 414.035]
/Subtype /Link
/A << /S /GoTo /D (section.31.2) >>
>> endobj
-3750 0 obj <<
+3890 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 425.996 512.306 435.018]
+/Rect [521.223 391.463 539.579 400.486]
/Subtype /Link
/A << /S /GoTo /D (subsection.31.2.1) >>
>> endobj
-3751 0 obj <<
+3891 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 412.446 512.306 421.469]
+/Rect [521.223 377.914 539.579 386.936]
/Subtype /Link
/A << /S /GoTo /D (subsection.31.2.2) >>
>> endobj
-3752 0 obj <<
+3892 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 387.988 512.306 397.556]
+/Rect [519.586 353.455 539.579 363.024]
/Subtype /Link
/A << /S /GoTo /D (chapter.32) >>
>> endobj
-3753 0 obj <<
+3893 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 374.439 512.306 383.462]
+/Rect [521.223 339.906 539.579 348.929]
/Subtype /Link
/A << /S /GoTo /D (section.32.1) >>
>> endobj
-3754 0 obj <<
+3894 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 360.89 512.306 369.913]
+/Rect [521.223 326.357 539.579 335.38]
/Subtype /Link
/A << /S /GoTo /D (subsection.32.1.1) >>
>> endobj
-3755 0 obj <<
+3895 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 347.341 512.306 356.363]
+/Rect [521.223 312.808 539.579 321.83]
/Subtype /Link
/A << /S /GoTo /D (subsection.32.1.2) >>
>> endobj
-3756 0 obj <<
+3896 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 333.791 512.306 342.814]
+/Rect [521.223 299.258 539.579 308.281]
/Subtype /Link
/A << /S /GoTo /D (subsection.32.1.3) >>
>> endobj
-3757 0 obj <<
+3897 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 320.242 512.306 329.265]
+/Rect [521.223 285.709 539.579 294.732]
/Subtype /Link
/A << /S /GoTo /D (subsection.32.1.4) >>
>> endobj
-3758 0 obj <<
+3898 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 306.693 512.306 315.716]
+/Rect [521.223 272.16 539.579 281.183]
/Subtype /Link
/A << /S /GoTo /D (subsection.32.1.5) >>
>> endobj
-3759 0 obj <<
+3899 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 293.144 512.306 302.167]
+/Rect [521.223 258.611 539.579 267.634]
/Subtype /Link
/A << /S /GoTo /D (subsection.32.1.6) >>
>> endobj
-3760 0 obj <<
+3900 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 279.595 512.306 288.617]
+/Rect [521.223 245.062 539.579 254.084]
/Subtype /Link
/A << /S /GoTo /D (subsection.32.1.7) >>
>> endobj
-3761 0 obj <<
+3901 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 266.045 512.306 275.068]
+/Rect [521.223 231.512 539.579 240.535]
/Subtype /Link
/A << /S /GoTo /D (subsection.32.1.8) >>
>> endobj
-3762 0 obj <<
+3902 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 252.496 512.306 261.519]
+/Rect [521.223 217.963 539.579 226.986]
/Subtype /Link
/A << /S /GoTo /D (subsection.32.1.9) >>
>> endobj
-3763 0 obj <<
+3903 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 238.947 512.306 247.97]
+/Rect [521.223 204.414 539.579 213.437]
/Subtype /Link
/A << /S /GoTo /D (subsection.32.1.10) >>
>> endobj
-3764 0 obj <<
+3904 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [490.587 200.454 512.306 210.749]
+/Rect [517.86 165.921 539.579 176.216]
/Subtype /Link
/A << /S /GoTo /D (part.5) >>
>> endobj
-3765 0 obj <<
+3905 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 175.995 512.306 185.564]
+/Rect [519.586 141.463 539.579 151.031]
/Subtype /Link
/A << /S /GoTo /D (chapter.33) >>
>> endobj
-3766 0 obj <<
+3906 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 162.446 512.306 171.469]
+/Rect [521.223 127.913 539.579 136.936]
/Subtype /Link
/A << /S /GoTo /D (section.33.1) >>
>> endobj
-3767 0 obj <<
+3907 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 148.897 512.306 157.92]
+/Rect [521.223 114.364 539.579 123.387]
/Subtype /Link
/A << /S /GoTo /D (section.33.2) >>
>> endobj
-3768 0 obj <<
+3908 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 135.348 512.306 144.371]
+/Rect [521.223 100.815 539.579 109.838]
/Subtype /Link
/A << /S /GoTo /D (section.33.3) >>
>> endobj
-3769 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 121.799 512.306 130.822]
-/Subtype /Link
-/A << /S /GoTo /D (section.33.4) >>
->> endobj
-3729 0 obj <<
-/D [3727 0 R /XYZ 85.039 786.531 null]
+3863 0 obj <<
+/D [3861 0 R /XYZ 85.039 786.531 null]
>> endobj
-3726 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R >>
+3860 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3773 0 obj <<
-/Length 2049
+3911 0 obj <<
+/Length 2999
/Filter /FlateDecode
>>
stream
-x\Ys:~WVkɒeݗI4wti`C<L9,LpRL, ~Mz]ϗu.I;y9sWgp<wR{6`uғ3uwg?6hތ?O9)ݤ\xߵ?)п5eX)˙ov?{}UdGa*!"<"Ugn)Fq ΰhp>L_$Ł1ENF 8YIŃ9!,D=zu=8>潈<IhRZ02Z^M97c\d$v}9y
- '~ CbR{c W d4`jVYs!@!<-WÚ^|ufwizD]m#x_T,
- VGUwqsE1tRↅSk=aJjJʹ91&yAAy[HX3-?+]A=o<o
-T;Kr(.4$} iD^$aIBNQ϶UrutGzrN"`1Qt2 ;sDZz1>
-0&}bO:z(t:bJ֍-lԤgaW_aPvjdVIu8Kw]ioZ/& \0*x"hDUN˨Ee/Fu%V(x kY:@
-S96Jzcc}Q Iu# á4;]I[^י􎒑8?u -3If<|$dF_rk(
-UU1X(V3T"V+XEx7M
-4|쟩T$LX-$tᨡ<'ˣnq* l%o
-ޭE6QW{y:6e;XF;b=x O@MGǒoJ{muJ D˅+U=Ɨj.(8I( R
-kL]ͩj$+DJnWO^@)/;ϳK*>ۥW6CWlCLl0E|1F')r3endstream
+xKs8E:K<IIfLeLhYá< Hۂ3Ɗkj"?6@hШdYNĨ(yGRS[dy|z2>By&r1:y9~ZNp9juѯQӈuGe~;3"'=ϐe$cotdj J )ɳ;e4'N8-|ǝ2N &SAr2%WseR?~lkyT-*st=!hܪkTz3%E]4?#MtG4|GTD5MV:Lq-8.!uIQPRQke$)?m˥4j)S7yHw+Yr,kQ!Eata$M{ djMj}}B.8qetT`Y
+aӭkUZ=i5I<T4Li9԰\zcv+KT`@ l6 @0Ԙ@2k'urXbݙ#S)
+
+^<Ѣ ʊdq&=#Cf)9֐tL^*r37
+eM^˯-6:(S
+FSY
+2RLw%ېE!+Efv/ǵʼF:u?DlEMAfm_ӘM -QvA<#\%]-Qn22tYjae9)ʣCۡn]Q6fw9ӂvJ9Z33K j':K gfNW7 ̆ccSU;`3_ XI 66)6)ytROQpKE-+!E=(Q~գ}1{\Q_[Qe:’"';kT =2?;JbvD-MC<%>`
+drT39SY$Qڰ̱wtaXfa/smz2>0НqR/ )^&l y) Q7}a*LOJZ;
+mT̗xIkk_].N a8 gTB5Hswtj@I脗<nܳ_rL$T
+k\{-T{VO%dͺU^ڼ(j;90I_]kTuC5@.԰" Vn &&l(/tcl0>.hyASi}֨X:S
+GKE?j3F]Me&Tw`j{ \fdxi_KQOh׭Cfh*#37R1
+V=ebj)gM6MSҠP;HܵJBP2oxa;_iKr0+YRUБz?`gz?%vendstream
endobj
-3772 0 obj <<
+3910 0 obj <<
/Type /Page
-/Contents 3773 0 R
-/Resources 3771 0 R
+/Contents 3911 0 R
+/Resources 3909 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3770 0 R
-/Annots [ 3775 0 R 3776 0 R 3777 0 R 3778 0 R 3779 0 R 3780 0 R 3781 0 R 3782 0 R 3783 0 R 3784 0 R 3785 0 R 3786 0 R 3787 0 R 3788 0 R 3789 0 R 3790 0 R 3791 0 R 3792 0 R 3793 0 R 3794 0 R 3795 0 R 3796 0 R 3797 0 R 3798 0 R 3799 0 R 3800 0 R 3801 0 R 3802 0 R 3803 0 R 3804 0 R 3805 0 R 3806 0 R 3807 0 R 3808 0 R 3809 0 R 3810 0 R 3811 0 R 3812 0 R 3813 0 R 3814 0 R 3815 0 R 3816 0 R 3817 0 R 3818 0 R ]
+/Parent 3706 0 R
+/Annots [ 3913 0 R 3914 0 R 3915 0 R 3916 0 R 3917 0 R 3918 0 R 3919 0 R 3920 0 R 3921 0 R 3922 0 R 3923 0 R 3924 0 R 3925 0 R 3926 0 R 3927 0 R 3928 0 R 3929 0 R 3930 0 R 3931 0 R 3932 0 R 3933 0 R 3934 0 R 3935 0 R 3936 0 R 3937 0 R 3938 0 R 3939 0 R 3940 0 R 3941 0 R 3942 0 R 3943 0 R 3944 0 R 3945 0 R 3946 0 R 3947 0 R 3948 0 R 3949 0 R 3950 0 R 3951 0 R 3952 0 R 3953 0 R 3954 0 R 3955 0 R 3956 0 R ]
>> endobj
-3775 0 obj <<
+3913 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 754.651 512.306 764.219]
+/Rect [519.586 754.651 539.579 764.219]
/Subtype /Link
/A << /S /GoTo /D (chapter.34) >>
>> endobj
-3776 0 obj <<
+3914 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (section.34.1) >>
>> endobj
-3777 0 obj <<
+3915 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 714.003 512.306 723.026]
+/Rect [521.223 727.553 539.579 736.575]
/Subtype /Link
-/A << /S /GoTo /D (section.34.2) >>
+/A << /S /GoTo /D (subsection.34.1.1) >>
>> endobj
-3778 0 obj <<
+3916 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 700.454 512.306 709.477]
+/Rect [521.223 714.003 539.579 723.026]
/Subtype /Link
-/A << /S /GoTo /D (section.34.3) >>
+/A << /S /GoTo /D (subsection.34.1.2) >>
>> endobj
-3779 0 obj <<
+3917 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 686.905 512.306 695.928]
+/Rect [521.223 700.454 539.579 709.477]
/Subtype /Link
-/A << /S /GoTo /D (section.34.4) >>
+/A << /S /GoTo /D (subsection.34.1.3) >>
>> endobj
-3780 0 obj <<
+3918 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 673.356 512.306 682.379]
+/Rect [521.223 686.905 539.579 695.928]
/Subtype /Link
-/A << /S /GoTo /D (section.34.5) >>
+/A << /S /GoTo /D (subsection.34.1.4) >>
>> endobj
-3781 0 obj <<
+3919 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 673.356 539.579 682.379]
+/Subtype /Link
+/A << /S /GoTo /D (subsubsection.34.1.4.1) >>
+>> endobj
+3920 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 659.807 539.579 668.829]
+/Subtype /Link
+/A << /S /GoTo /D (subsubsection.34.1.4.2) >>
+>> endobj
+3921 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 646.257 539.579 655.28]
+/Subtype /Link
+/A << /S /GoTo /D (section.34.2) >>
+>> endobj
+3922 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 632.708 539.579 641.731]
+/Subtype /Link
+/A << /S /GoTo /D (section.34.3) >>
+>> endobj
+3923 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [521.223 619.159 539.579 628.182]
+/Subtype /Link
+/A << /S /GoTo /D (section.34.4) >>
+>> endobj
+3924 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 648.897 512.306 658.466]
+/Rect [519.586 594.701 539.579 604.269]
/Subtype /Link
/A << /S /GoTo /D (chapter.35) >>
>> endobj
-3782 0 obj <<
+3925 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 635.348 512.306 644.371]
+/Rect [521.223 581.151 539.579 590.174]
/Subtype /Link
/A << /S /GoTo /D (section.35.1) >>
>> endobj
-3783 0 obj <<
+3926 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 621.799 512.306 630.822]
+/Rect [521.223 567.602 539.579 576.625]
/Subtype /Link
/A << /S /GoTo /D (section.35.2) >>
>> endobj
-3784 0 obj <<
+3927 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 608.25 512.306 617.273]
+/Rect [521.223 554.053 539.579 563.076]
/Subtype /Link
/A << /S /GoTo /D (section.35.3) >>
>> endobj
-3785 0 obj <<
+3928 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 594.701 512.306 603.724]
+/Rect [521.223 540.504 539.579 549.527]
/Subtype /Link
/A << /S /GoTo /D (section.35.4) >>
>> endobj
-3786 0 obj <<
+3929 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 581.151 512.306 590.174]
+/Rect [521.223 526.955 539.579 535.978]
/Subtype /Link
/A << /S /GoTo /D (section.35.5) >>
>> endobj
-3787 0 obj <<
+3930 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 567.602 512.306 576.625]
+/Rect [521.223 513.406 539.579 522.428]
/Subtype /Link
/A << /S /GoTo /D (section.35.6) >>
>> endobj
-3788 0 obj <<
+3931 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [490.587 529.109 512.306 539.404]
+/Rect [517.86 474.912 539.579 485.207]
/Subtype /Link
/A << /S /GoTo /D (part.6) >>
>> endobj
-3789 0 obj <<
+3932 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 504.651 512.306 514.219]
+/Rect [519.586 450.454 539.579 460.022]
/Subtype /Link
/A << /S /GoTo /D (chapter.36) >>
>> endobj
-3790 0 obj <<
+3933 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 491.102 512.306 500.124]
+/Rect [521.223 436.905 539.579 445.928]
/Subtype /Link
/A << /S /GoTo /D (section.36.1) >>
>> endobj
-3791 0 obj <<
+3934 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 477.552 512.306 486.575]
+/Rect [521.223 423.356 539.579 432.378]
/Subtype /Link
/A << /S /GoTo /D (subsection.36.1.1) >>
>> endobj
-3792 0 obj <<
+3935 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 464.003 512.306 473.026]
+/Rect [521.223 409.806 539.579 418.829]
/Subtype /Link
/A << /S /GoTo /D (subsection.36.1.2) >>
>> endobj
-3793 0 obj <<
+3936 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 450.454 512.306 459.477]
+/Rect [521.223 396.257 539.579 405.28]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.36.1.2.1) >>
>> endobj
-3794 0 obj <<
+3937 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 436.905 512.306 445.928]
+/Rect [521.223 382.708 539.579 391.731]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.36.1.2.2) >>
>> endobj
-3795 0 obj <<
+3938 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 423.356 512.306 432.378]
+/Rect [521.223 369.159 539.579 378.182]
/Subtype /Link
/A << /S /GoTo /D (section.36.2) >>
>> endobj
-3796 0 obj <<
+3939 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 409.806 512.306 418.829]
+/Rect [521.223 355.61 539.579 364.632]
/Subtype /Link
/A << /S /GoTo /D (section.36.3) >>
>> endobj
-3797 0 obj <<
+3940 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 396.257 512.306 405.28]
+/Rect [521.223 342.06 539.579 351.083]
/Subtype /Link
/A << /S /GoTo /D (section.36.4) >>
>> endobj
-3798 0 obj <<
+3941 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 382.708 512.306 391.731]
+/Rect [521.223 328.511 539.579 337.534]
/Subtype /Link
/A << /S /GoTo /D (subsection.36.4.1) >>
>> endobj
-3799 0 obj <<
+3942 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 369.159 512.306 378.182]
+/Rect [521.223 314.962 539.579 323.985]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.36.4.1.1) >>
>> endobj
-3800 0 obj <<
+3943 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 355.61 512.306 364.632]
+/Rect [521.223 301.413 539.579 310.436]
/Subtype /Link
/A << /S /GoTo /D (subsubsection.36.4.1.2) >>
>> endobj
-3801 0 obj <<
+3944 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 342.06 512.306 351.083]
+/Rect [521.223 287.864 539.579 296.886]
/Subtype /Link
/A << /S /GoTo /D (section.36.5) >>
>> endobj
-3802 0 obj <<
+3945 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 328.511 512.306 337.534]
+/Rect [521.223 274.314 539.579 283.337]
/Subtype /Link
/A << /S /GoTo /D (subsection.36.5.1) >>
>> endobj
-3803 0 obj <<
+3946 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 314.962 512.306 323.985]
+/Rect [521.223 260.765 539.579 269.788]
/Subtype /Link
/A << /S /GoTo /D (subsection.36.5.2) >>
>> endobj
-3804 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 301.413 512.306 310.436]
-/Subtype /Link
-/A << /S /GoTo /D (section.36.6) >>
->> endobj
-3805 0 obj <<
+3947 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 276.955 512.306 286.523]
+/Rect [519.586 236.307 539.579 245.875]
/Subtype /Link
/A << /S /GoTo /D (chapter.37) >>
>> endobj
-3806 0 obj <<
+3948 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 263.405 512.306 272.428]
+/Rect [521.223 222.758 539.579 231.781]
/Subtype /Link
/A << /S /GoTo /D (section.37.1) >>
>> endobj
-3807 0 obj <<
+3949 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 249.856 512.306 258.879]
+/Rect [521.223 209.209 539.579 218.231]
/Subtype /Link
/A << /S /GoTo /D (section.37.2) >>
>> endobj
-3808 0 obj <<
+3950 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 236.307 512.306 245.33]
+/Rect [521.223 195.659 539.579 204.682]
/Subtype /Link
/A << /S /GoTo /D (section.37.3) >>
>> endobj
-3809 0 obj <<
+3951 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 222.758 512.306 231.781]
+/Rect [521.223 182.11 539.579 191.133]
/Subtype /Link
/A << /S /GoTo /D (section.37.4) >>
>> endobj
-3810 0 obj <<
+3952 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 209.209 512.306 218.231]
+/Rect [521.223 168.561 539.579 177.584]
/Subtype /Link
/A << /S /GoTo /D (section.37.5) >>
>> endobj
-3811 0 obj <<
+3953 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 195.659 512.306 204.682]
+/Rect [521.223 155.012 539.579 164.035]
/Subtype /Link
/A << /S /GoTo /D (subsection.37.5.1) >>
>> endobj
-3812 0 obj <<
+3954 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 182.11 512.306 191.133]
+/Rect [521.223 141.463 539.579 150.485]
/Subtype /Link
/A << /S /GoTo /D (section.37.6) >>
>> endobj
-3813 0 obj <<
+3955 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 168.561 512.306 177.584]
+/Rect [521.223 127.913 539.579 136.936]
/Subtype /Link
/A << /S /GoTo /D (subsection.37.6.1) >>
>> endobj
-3814 0 obj <<
+3956 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 155.012 512.306 164.035]
+/Rect [521.223 114.364 539.579 123.387]
/Subtype /Link
/A << /S /GoTo /D (subsection.37.6.2) >>
>> endobj
-3815 0 obj <<
+3912 0 obj <<
+/D [3910 0 R /XYZ 85.039 786.531 null]
+>> endobj
+3909 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+3959 0 obj <<
+/Length 2359
+/Filter /FlateDecode
+>>
+stream
+x[o6)6Y^%iulmdCV\:ӏ/b,$j1",G*ɰG2)f*+d#l=BSdz3* (ʳEP9Uc;w!h˜q6.4ˆ)} gjt55e㙵:l0MB0A3BI)>.yR&d\ߔ)ˋqۋzjŏ2~qeVK&S2FPGɲSqv0O9gW~ᆁ9Sf.DGr>--7c&b%o&SIN/0p="ɿhyY@#Ff}~ =4|ZթlPƫ+]s/ũi}E3PP
+aڪN׷ĖZͫSʻ U3
+r E'wҳdDWmTwue'hT g8C@"4 ( G\H
+DCP?n
+1v+UrF&K?ӧ:L}MP:3
+S3W~ ~D'<Ӵ 涞iC.7m ;"fYN<D?a6y2]^Sœ,k{0Ûl+?gCυrh̀
+wh=\?pU7ni;c-[`>rՁDfiTb
+")ϵ%vRqʟ$8.C
+Lg
+{K~f4\f{oԻCD}4 3hEW
+endobj
+3958 0 obj <<
+/Type /Page
+/Contents 3959 0 R
+/Resources 3957 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 3995 0 R
+/Annots [ 3961 0 R 3962 0 R 3963 0 R 3964 0 R 3965 0 R 3966 0 R 3967 0 R 3968 0 R 3969 0 R 3970 0 R 3971 0 R 3972 0 R 3973 0 R 3974 0 R 3975 0 R 3976 0 R 3977 0 R 3978 0 R 3979 0 R 3980 0 R 3981 0 R 3982 0 R 3983 0 R 3984 0 R 3985 0 R 3986 0 R 3987 0 R 3988 0 R 3989 0 R 3990 0 R 3991 0 R 3992 0 R 3993 0 R 3994 0 R ]
+>> endobj
+3961 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 130.553 512.306 140.122]
+/Rect [519.586 754.651 539.579 764.219]
/Subtype /Link
/A << /S /GoTo /D (chapter.38) >>
>> endobj
-3816 0 obj <<
+3962 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 117.004 512.306 126.027]
+/Rect [521.223 741.102 539.579 750.125]
/Subtype /Link
/A << /S /GoTo /D (section.38.1) >>
>> endobj
-3817 0 obj <<
+3963 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 103.455 512.306 112.478]
+/Rect [521.223 727.553 539.579 736.575]
/Subtype /Link
/A << /S /GoTo /D (section.38.2) >>
>> endobj
-3818 0 obj <<
+3964 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 76.357 512.306 85.379]
+/Rect [521.223 714.003 539.579 723.026]
/Subtype /Link
/A << /S /GoTo /D (subsection.38.2.1) >>
>> endobj
-3774 0 obj <<
-/D [3772 0 R /XYZ 85.039 786.531 null]
->> endobj
-3771 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-3821 0 obj <<
-/Length 1490
-/Filter /FlateDecode
->>
-stream
-x[Ko8WV >%TmڭȡAeGmee)w#9n8I+Hqp{FLZ/6Q%puW=Bi9x)2GK?g0~e|_BI‹uX(.Bn7(-CdUtz=S ڕFGP`1j\7|4_ЕQ/b]'3JL_WEo){FIqN5I/L34Kf<%`4CP<GIzRoruCZJ]E
-JS,6}f /ڕZe]'xHC_أ§pՑyJPd:ueұSŕߢL2I!?[fp/r2
-!*WۖM4l'Cjb`#|`Ն&K׈0E
- -ǜ&8BTvbq/Pzt>vE
-DäW.)|:*Edۦ/EQx#=YZjY}̚ Ev3^M- nkTa1*ƨcJlPEW ^YKW<Ԍ6O>]Esu}OPҶ1:ܬ{4A1I(d f?_̲ l 4k0M )†hLv+M2P s&[POlHWQ}cc].W)'e4DAY .W?92EypA gIz>~Lmmáӷ"W?jʹ л ;aHڵ48q"+u,fNk#Zhj>:q^s/nt
-endobj
-3820 0 obj <<
-/Type /Page
-/Contents 3821 0 R
-/Resources 3819 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 3770 0 R
-/Annots [ 3823 0 R 3824 0 R 3825 0 R 3826 0 R 3827 0 R 3828 0 R 3829 0 R 3830 0 R 3831 0 R 3832 0 R 3833 0 R 3834 0 R 3835 0 R 3836 0 R 3837 0 R 3838 0 R 3839 0 R 3840 0 R 3841 0 R 3842 0 R 3843 0 R 3844 0 R 3845 0 R 3846 0 R 3847 0 R 3848 0 R 3849 0 R 3850 0 R 3851 0 R 3852 0 R 3853 0 R ]
->> endobj
-3823 0 obj <<
+3965 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 741.102 512.306 750.125]
+/Rect [521.223 700.454 539.579 709.477]
/Subtype /Link
/A << /S /GoTo /D (subsection.38.2.2) >>
>> endobj
-3824 0 obj <<
+3966 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 727.553 512.306 736.575]
+/Rect [521.223 686.905 539.579 695.928]
/Subtype /Link
/A << /S /GoTo /D (subsection.38.2.3) >>
>> endobj
-3825 0 obj <<
+3967 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 714.003 512.306 723.026]
+/Rect [521.223 673.356 539.579 682.379]
/Subtype /Link
/A << /S /GoTo /D (section.38.3) >>
>> endobj
-3826 0 obj <<
+3968 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 700.454 512.306 709.477]
+/Rect [521.223 659.807 539.579 668.829]
/Subtype /Link
/A << /S /GoTo /D (subsection.38.3.1) >>
>> endobj
-3827 0 obj <<
+3969 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 686.905 512.306 695.928]
+/Rect [521.223 646.257 539.579 655.28]
/Subtype /Link
/A << /S /GoTo /D (subsection.38.3.2) >>
>> endobj
-3828 0 obj <<
+3970 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 673.356 512.306 682.379]
+/Rect [521.223 632.708 539.579 641.731]
/Subtype /Link
/A << /S /GoTo /D (subsection.38.3.3) >>
>> endobj
-3829 0 obj <<
+3971 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 659.807 512.306 668.829]
+/Rect [521.223 619.159 539.579 628.182]
/Subtype /Link
/A << /S /GoTo /D (subsection.38.3.4) >>
>> endobj
-3830 0 obj <<
+3972 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 646.257 512.306 655.28]
+/Rect [521.223 605.61 539.579 614.633]
/Subtype /Link
/A << /S /GoTo /D (subsection.38.3.5) >>
>> endobj
-3831 0 obj <<
+3973 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 632.708 512.306 641.731]
+/Rect [521.223 592.061 539.579 601.083]
/Subtype /Link
/A << /S /GoTo /D (subsection.38.3.6) >>
>> endobj
-3832 0 obj <<
+3974 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 619.159 512.306 628.182]
+/Rect [521.223 578.511 539.579 587.534]
/Subtype /Link
/A << /S /GoTo /D (section.38.4) >>
>> endobj
-3833 0 obj <<
+3975 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 605.61 512.306 614.633]
+/Rect [521.223 564.962 539.579 573.985]
/Subtype /Link
/A << /S /GoTo /D (subsection.38.4.1) >>
>> endobj
-3834 0 obj <<
+3976 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 592.061 512.306 601.083]
+/Rect [521.223 551.413 539.579 560.436]
/Subtype /Link
/A << /S /GoTo /D (section.38.5) >>
>> endobj
-3835 0 obj <<
+3977 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 578.511 512.306 587.534]
+/Rect [521.223 537.864 539.579 546.887]
/Subtype /Link
/A << /S /GoTo /D (section.38.6) >>
>> endobj
-3836 0 obj <<
+3978 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 554.053 512.306 563.621]
+/Rect [519.586 513.406 539.579 522.974]
/Subtype /Link
/A << /S /GoTo /D (chapter.39) >>
>> endobj
-3837 0 obj <<
+3979 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 540.504 512.306 549.527]
+/Rect [521.223 499.856 539.579 508.879]
/Subtype /Link
/A << /S /GoTo /D (section.39.1) >>
>> endobj
-3838 0 obj <<
+3980 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 526.955 512.306 535.978]
+/Rect [521.223 486.307 539.579 495.33]
/Subtype /Link
/A << /S /GoTo /D (section.39.2) >>
>> endobj
-3839 0 obj <<
+3981 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 513.406 512.306 522.428]
+/Rect [521.223 472.758 539.579 481.781]
/Subtype /Link
/A << /S /GoTo /D (section.39.3) >>
>> endobj
-3840 0 obj <<
+3982 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 499.856 512.306 508.879]
+/Rect [521.223 459.209 539.579 468.232]
/Subtype /Link
/A << /S /GoTo /D (section.39.4) >>
>> endobj
-3841 0 obj <<
+3983 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 486.307 512.306 495.33]
+/Rect [521.223 445.66 539.579 454.682]
/Subtype /Link
/A << /S /GoTo /D (section.39.5) >>
>> endobj
-3842 0 obj <<
+3984 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 472.758 512.306 481.781]
+/Rect [521.223 432.11 539.579 441.133]
/Subtype /Link
/A << /S /GoTo /D (section.39.6) >>
>> endobj
-3843 0 obj <<
+3985 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 459.209 512.306 468.232]
+/Rect [521.223 418.561 539.579 427.584]
/Subtype /Link
/A << /S /GoTo /D (section.39.7) >>
>> endobj
-3844 0 obj <<
+3986 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 445.66 512.306 454.682]
+/Rect [521.223 405.012 539.579 414.035]
/Subtype /Link
/A << /S /GoTo /D (section.39.8) >>
>> endobj
-3845 0 obj <<
+3987 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 432.11 512.306 441.133]
+/Rect [521.223 391.463 539.579 400.486]
/Subtype /Link
/A << /S /GoTo /D (section.39.9) >>
>> endobj
-3846 0 obj <<
+3988 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 418.561 512.306 427.584]
+/Rect [521.223 377.914 539.579 386.936]
/Subtype /Link
/A << /S /GoTo /D (section.39.10) >>
>> endobj
-3847 0 obj <<
+3989 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 405.012 512.306 414.035]
+/Rect [521.223 364.364 539.579 373.387]
/Subtype /Link
/A << /S /GoTo /D (section.39.11) >>
>> endobj
-3848 0 obj <<
+3990 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 380.554 512.306 390.122]
+/Rect [519.586 339.906 539.579 349.474]
/Subtype /Link
/A << /S /GoTo /D (chapter.40) >>
>> endobj
-3849 0 obj <<
+3991 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 367.004 512.306 376.027]
+/Rect [521.223 326.357 539.579 335.38]
/Subtype /Link
/A << /S /GoTo /D (section.40.1) >>
>> endobj
-3850 0 obj <<
+3992 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [492.314 342.546 512.306 352.114]
+/Rect [519.586 301.899 539.579 311.467]
/Subtype /Link
/A << /S /GoTo /D (chapter.41) >>
>> endobj
-3851 0 obj <<
+3993 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 328.997 512.306 338.02]
+/Rect [521.223 288.349 539.579 297.372]
/Subtype /Link
/A << /S /GoTo /D (section.41.1) >>
>> endobj
-3852 0 obj <<
+3994 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 315.448 512.306 324.471]
+/Rect [521.223 274.8 539.579 283.823]
/Subtype /Link
/A << /S /GoTo /D (section.41.2) >>
>> endobj
-3853 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [493.95 301.899 512.306 310.921]
-/Subtype /Link
-/A << /S /GoTo /D (section.41.3) >>
->> endobj
-3822 0 obj <<
-/D [3820 0 R /XYZ 85.039 786.531 null]
+3960 0 obj <<
+/D [3958 0 R /XYZ 85.039 786.531 null]
>> endobj
-3819 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R >>
+3957 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3856 0 obj <<
-/Length 226
+3998 0 obj <<
+/Length 241
/Filter /FlateDecode
>>
stream
-xmP;O1 WdL?\*C6p!C*s@SGg2LRM. yм)G@ A+?@ eMD5HQ B %mg4$i{}NȎNg%eud=#@.;|P,nr87
-=Lp. \ײ쵊@(ndhbz MmYendstream
+xuPN1 +<&CLN"L  ZTR U28{=,@ʊ׆lZQ%_g,1'1d:*C=@ȄHPL<dFޜgXY2h:bʩ]*"_~<Vnh7[qZ9gz5aѰonPB< FNӳWdQX8=}D.ܯwt 8`endstream
endobj
-3855 0 obj <<
+3997 0 obj <<
/Type /Page
-/Contents 3856 0 R
-/Resources 3854 0 R
+/Contents 3998 0 R
+/Resources 3996 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3770 0 R
+/Parent 3995 0 R
>> endobj
-3857 0 obj <<
-/D [3855 0 R /XYZ 85.039 786.531 null]
+3999 0 obj <<
+/D [3997 0 R /XYZ 85.039 786.531 null]
>> endobj
6 0 obj <<
-/D [3855 0 R /XYZ 85.039 547.583 null]
+/D [3997 0 R /XYZ 85.039 547.583 null]
>> endobj
-3854 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+3996 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3860 0 obj <<
-/Length 3343
-/Filter /FlateDecode
->>
-stream
-xko (!VuP&]-V#K>ޜ|EJNh@L Cp\̃4v0=L7wšG&fvMpL³qG; <7I³#a.9;DZGSk5N3ֺlj'G#,Ig;]e/ò;l}Ha⦁ogLGqB8
-Ns9 B:sf' W  aN FTEj^Gmg~+ZXоGv>RJ,@`8L
-XLcHeuG9B'sؠM)#=JF,R 3Ak>8wH-z~ vU>,ɗrOZ?ռ2L@ @aCXl=6]! IZHz+jRie恽BiY7b= GC׎eDsjК N;.]XLHf
-4uqp̏0JN#Ű(ufnM69sNoFNߍ!N~3L))qې M*ТD^6a
-' |CFE '\zzI#Z!0Ion3N3#gq7cǍmw
-'wfm$ * t!bz8>pKjr KZ'prv9}qn1
-mtVlN)MB+*)ÅPSTOwI9+ǃhWsērXrL 1RX^4^:LcԑbeB4p6
-J46 D򮎁d6MZFK1!tӅPyX?ݯ–`}DI0Ƙ2Z1t(H΂)\s|eG+瞃lpyh}LZ
--
-cX2WN]z
-8x1s{^?!H*)zZFi-YUlힺ8[S3!9
-Cu Z ؖMR {?5%B(fwL8wr#cʑ&ξ"Z7'e[ieIJiLz <gG/?%L^^&m j+Y6Ƴ9'`cydëjZpy5KOk
-ǭ')cn!-&Y_sWMk|*(ښ -fTO@Oo5s4[TϾco>O0gOnFmWvn^SqP+ׄO
-\A2u֪;6s`iъ+f&y:8l7}6YipW^0zi{v@dEi+@l)ITV}[^:8|Nr&|kuy'$$$\%^D )I9)ϥr~K%NQ7ǡמ:WJFĴ.sj!Sad5]{dk\0lK+nҚ\7)E S$ͰP$ć#XVsS6TI%OCƩE!" t2.m
-ĒП —{aT
+4002 0 obj <<
+/Length 2820
+/Filter /FlateDecode
+>>
+stream
+xڍko8{EP,PyQ+(qиnm4>t-Ӳ.fw^),r8ΛL|_|1H/I"_E*4Sa0>8IF,O4Lg)\-_]^'EXn $Jf8,
+nFqиv4;(XsWƓi6k]ѿaًqvG<TYeS?]͆Q2 'YsY3q pq5%n*޾Xǃ)Q9t,ʦ5djR& 41Na4g߃6s+_8yQyiö$aC: [C`ill8_I 8ӍWÁyU&,;ϖ%nXH [#U/Wu:zNzp-؍@Cm
+vu$DIth4ѹC{f󠔍e(1vȋAqgceӫ
+5hG Y1b7L뛎Vs'\kmQ}ќ= X'9 {86CX!
+:h=YdТ#e+
+S~LDx$>D7=9r4SZjH$a%߭!_4TdPCyN:*u]h-R(K1yYQELP^,:9ta!},pS4L̥aTѶdi[s_:fEm);oWsՎ"uE/ly24J%ڦz()ID P}\,:9p~ȰFk4j=}zA8a<!R9f>ּI*{XHHmT$#eѭq\йy6Zt8isĥ>MzZXX{6|#TgU}e?ߍf)&Z}tP {CPŰPE|v/ S8LUgeSzT5#sF0iWr- ֩cd-| 5*J{G aj:_ƬXVu{JFZ]K`y0O-Up $$
+ȚQ)
+iphꥐɱ"";dmo1qL~HL0C͵fyɻC8^^9U{o|GAЕ[<,Jɶ4rzLiنrD<4oue^ ؕfaUyőLa[5NS(}N#=(_^gS 0D"XzupSXtRNMhQ7Q=B49:@{eG,״2OIcܠ)t?GLc#]G@{߇dی<Lv-7`XWs|h혴ݱZstx4bkIΞ芗YIhzloT^=xH&o+| i,勂^{!D[t_l=^uyߏ%5֔=vm옺ed-#maTT]#l<;*-?%DQ2kF.ϮaĪ m)oł.4?ue`ב)߰Q 9Ŭ4|fAHR9~d d~RrC72d]v:_ݎ+[VZ_((Ϛp'NKorsx+Wx+44{ Peaŗ#C ԰PO5L,f;< endstream
endobj
-3859 0 obj <<
+4001 0 obj <<
/Type /Page
-/Contents 3860 0 R
-/Resources 3858 0 R
+/Contents 4002 0 R
+/Resources 4000 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3770 0 R
+/Parent 3995 0 R
>> endobj
-3861 0 obj <<
-/D [3859 0 R /XYZ 85.039 786.531 null]
+4003 0 obj <<
+/D [4001 0 R /XYZ 85.039 786.531 null]
>> endobj
-3862 0 obj <<
-/D [3859 0 R /XYZ 85.039 766.606 null]
+4004 0 obj <<
+/D [4001 0 R /XYZ 85.039 766.606 null]
>> endobj
10 0 obj <<
-/D [3859 0 R /XYZ 85.039 766.606 null]
+/D [4001 0 R /XYZ 85.039 766.606 null]
>> endobj
-2947 0 obj <<
-/D [3859 0 R /XYZ 85.039 676.205 null]
+3021 0 obj <<
+/D [4001 0 R /XYZ 85.039 662.656 null]
>> endobj
14 0 obj <<
-/D [3859 0 R /XYZ 85.039 562.8 null]
+/D [4001 0 R /XYZ 85.039 522.152 null]
>> endobj
-3863 0 obj <<
-/D [3859 0 R /XYZ 85.039 533.396 null]
->> endobj
-18 0 obj <<
-/D [3859 0 R /XYZ 85.039 192.444 null]
->> endobj
-3864 0 obj <<
-/D [3859 0 R /XYZ 85.039 163.04 null]
+4005 0 obj <<
+/D [4001 0 R /XYZ 85.039 479.199 null]
>> endobj
-3858 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F14 2895 0 R >>
+4000 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3867 0 obj <<
-/Length 3785
+4008 0 obj <<
+/Length 3410
/Filter /FlateDecode
>>
stream
-xZWHWx/}ZVr
-$2;6af–Yb$?nKFdsXjizaL'nG3ۏ\ocdw|6}MtdW_f?aQL`|ps:;?<Os ș}4x~8}$ ~0?Rs4_EqQrz?ve ` 5BϝN1tsϒ#o^"vXng<ã`B7u> %5Fy˛4<u m޶ZׇAl*(YW+
-<?oλ,]`sZ&{qG?rAnyA
-&Ds}˺k`
-GeP j-Dl7- uQmyvoTgy)tVN*|!@w4BD;^B\Oׄ[1%;-&Fu9 ̜dBٹtϫ IGÑOiF PhJ%ͪdlD NXИNlo68 vϪV'#gК +ـoݪV`=֝*lWeeA#"-W p
-/-Exk0kP+9L3LX%)T{\@LBNڈ AVgJ,}K?ޜc\YUa KT ޭw#٪BRByi5
-j^-Xo;z1jMM^k_W/GX~^#!s+zZllD.p;$*IA [i9d|m:5PR wT*N4M? qϓ[ H#@N!e[KuQ2`(\"l'EH#&2y:FjB0
-B[,r[@@jyyŠo]jh>s&,5"=l^sDcS?"ܿ8y'K(6.g=^OE0׎ GV'RX &na$w
-ʿ\ri0mu.j) C9N)V^F'$ĩ ?4eZt9-,NRh
-'ie4l9ӿ Ѿ(N.Oތiߍڔ_ alHSAV;okJa}J䌔c2EbiJN#gfKZV݌[dL|o+e^0PϤl,6np>g%]fW﬉f&g|D*rf:U6D=5MXˤԑ$$g
-4:8ߡ<MHJwF犀ϯ ®oeLIh5]_"KJi@ӪJ4~&tEõf߱+/)2s6"V7m.=GƲ<=cSHѲ̭eNLԪ X AMN]0VeW
-^gR|p(j=MkCb 9B:gL'9^B#@pQ6g)C6RwaSV6pyDQn=RןCyq+SwS7IF3 +xOD0]ɐs>eq8Iϻw|pفƓ:0D4b2 ]!"BL*2P>D`bqy9nke1,mVOdx%՚,M6pa[7Tht).?GCȗ7oEc2m7g^jBu9=!jrv"u |b>5W|'0%`yŃ?b*BoI!\2j# n.+# 7c(/yi4N:9+Jѭ`nc [;
-wx.ya8f5E؍n!
+xڥZKs8W|YjD$;8ٱR9hԐT@HThA
+,[՛Cz&$ ѫpǯt5D*UP@C<
+gwɽΚDa *@9a nviF!o*I1O&=5K` ٜiksM)N~4wQ#k-MBkVԷK ""ILî0pCKZBڵ J^Ƨhnhm9eW/BH|%el([LE:˱{:6ݳ*<3`Iqޙ3$D:3pw&CS} Lä bAr;6 KER5$܅Xn_f0 يH{hAn
+05Y:#
+&d0}Uq"(?QݍxCC̲J)Fi- 8qnH@#~'i?WQ +]`4N?˥Pr9!ki'ºP]X?lގh$
+8eQѳ >u/yV3~%F҄<nE^"h=XS/K\4݂ko<It8 _r^,C`H)mKY
+uL SX$[Thqdß*|~XQć4h}HAq.y2o}?q<\svݡZ'G4ҡ8> Dk:%vA]HmJBuDǩ;A=UgN~_tbqٽ-{]祂kJDrtUbw*М k9688Dy:>pI8@u?׃(&/s[YMV
+ :p $+4 7vu}QPPo%OR&<Ϫ="?adIiaPQ~(pr?ՈAzendstream
endobj
-3866 0 obj <<
+4007 0 obj <<
/Type /Page
-/Contents 3867 0 R
-/Resources 3865 0 R
+/Contents 4008 0 R
+/Resources 4006 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3770 0 R
-/Annots [ 3869 0 R ]
+/Parent 3995 0 R
>> endobj
-3869 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [173.74 248.031 284.915 260.933]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.samba.org/)>>
->> endobj
-3868 0 obj <<
-/D [3866 0 R /XYZ 85.039 786.531 null]
+4009 0 obj <<
+/D [4007 0 R /XYZ 85.039 786.531 null]
>> endobj
-22 0 obj <<
-/D [3866 0 R /XYZ 85.039 232.98 null]
+18 0 obj <<
+/D [4007 0 R /XYZ 85.039 766.606 null]
>> endobj
-3870 0 obj <<
-/D [3866 0 R /XYZ 85.039 204.182 null]
+4010 0 obj <<
+/D [4007 0 R /XYZ 85.039 742.055 null]
>> endobj
-3865 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F20 2865 0 R >>
+4006 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F41 2998 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3873 0 obj <<
-/Length 3761
-/Filter /FlateDecode
->>
-stream
-xZmoF_a"5iAb-PZZK)R%غ7o$:^2;;;;̬S~iN4v#'z?; ]/wqx{ne{"-~t.z~3{q2UJ9;&I\^>Nw>L|Bgoϯ O~;y;,= 0V'?.w'ʞg$J,N͠o<7MCU?OLC?pZ|u*tzв]QWPˢCIwj^nyQ`R&nLn1=TU'/Vs;H7I8+(slKF믱Es1kDa.%2hKsϷ bb-bak6&Amrʢ]u^Bw^%7vMq􂧙%^oʚ6ljx;4y˞ V07ŲBWK,NJ"4zNݭCZׇQ.,*$]o#|f<; ZU
-I q6S[\uۘ!C.7~j:*rOE!U
-/Hs4LH^q%cyGP1dUBY0=z9~_ VuN !RE)8FB@ d۸s+ Lv'p˟-
-T .>EY
-)]DzLRr ${5<U>hdn pcu}è0
-#Fidhir{BgL%vq'Fty5<$O;yRp汆GpK{ZQCGƝY
-"6Ͳ0L@D˺+N9vn$ &2BE%cDb5ĎdrT[-cj)Ցst@1E*ˑ8͇)߳ڕkv7|ךR10wunAZ:9*P,ukR( eop-83lc Թ*M37Nv@0aR0npm˜cÔ?冒#bD)D##S
-\n- q~Õ5>=hbŖ$=lB2t+1ܣ {%&>/t܋ Ln(=@@P= X. Y#nPYHaQdm7<@i`.I/Bjf*t5ovpg|Lv\՝ T9bz~ 0p41513AfcsL
-k"߂qйޖ%ӘcUs@6̇K-/eYA,MHw?-վW&)XRZs>_1GSEylyXI"fT/Kԃ!?!RyNj#%"GfEA4EyL%| Հn(HΟToq/6p\
- ;$}j.ywM0P
-m&< W?Ѕ|1Cv<(SQ0T7Xv͎;Q4U*g5/M~oV0ɨ(oLXA *Ȕ#ZuG9bla2Kԏ$'=r3瑶X(bK Vl\XbWVj6|@
- ? $c${##;\a'yNqg
-BFv+JA|G)i` täyen)v}'|x+JcJ 'e8ބW6!PvjP8 BQvtk 4GjH)Pp`D,lMx8F73U"ϊb8~fzNdʜԱl")j-)M :ô#xn-q^ŵAhR8AT~\Y y}ϏiGǕLE?th^6U'?>@1Ć#t ΤPհR Ɩ 6a{Go,85 @9A(ll^ʝF`+G%$gmkwx%BrKpU΄9zYnh@~d 18h3ҝJ-9VՖ}ǂP[)K *L _!XGE ޜ>CǺ)ȭm3Io8r(2,&'?[:/?hPϚ>9Jw[0/E wrio:ك뭠!J0hgS60"y
-jڳHy8TAw?es[]cbW,m &r1 y1par`־6Pߧ!c/ 桁۶yAeL
-J,:@3=ӟpHs"A6xC15̼G*'ɜ(rmD>}cc2t~J& P%tYL0 T5 %HOp 3˚spͭ-HJ =5_
+4013 0 obj <<
+/Length 3177
+/Filter /FlateDecode
+>>
+stream
+xڥZIsWt XeBXs=trHrH
+
+|;P^<FA ;T OZo(l HU%w*KYq/z&}NDVJ:m *i OH?'^Kٮ3nL r. \TyrO'pR$>+͉BIcW<z%>XAŮEU~x}}Em&hvUFw8te{;dq5ivwB@_`Gyvu4tUSEۘkUJǬHlF֗'a$'=Eq2[g5Vs2WV9-pƳZ1hŤ%۵kfeg&qU5otm͋<+Pn` ;6<0jߢ Ӳae2|/j=kc\WvAiCHBZ0<D)kj'hL97d7$Q3<٭v-;tMpB_4osF~ǖ(ŭvX3'!#RnVo6bq=uB;j Nܻ!OEZ)Gwzᠳx
+Uqb%|uEBVH4XSZ0 4 'n1wi dkRw2`EBJv 6ܚn*޽
+}=!ˬpON$9vӆ@[̠8\:&O.+۪~
+,BC.7iqBf5VWOpnSL1lT 8psΑHn\n5odi<#tA^x=;@kv'NxDŝS{?cxz]m(> 4ı1 iBJ
+ʒ@Wpˆh<)S\҂itSCuK:Z*ru
+ CeI
+m/0qC}^<Ly`aD
+X򪙔C!ƐM3'fSHtj>g4`&=DQF8C$0,]T8
+ǔyRŧw8d\@qgp0K5OWLJOGkفV\"dCщp-O7eW}zQ@d W 4HZ`/<o[px8gU5x;'9*Ft!p)z)(U(JjPߔ<R=qæWAև.ǟ UQEV<<ϳ <z4tM^~@SxLx^ *.yjPj!/%OSRSU \+)S׼ux.`B'k( s{X_fB`s
+JBޫ tk8bKA'"(dV?ˤ2}yI; ʥr#mZnҒ*l^spq~1Pbo_h2Yg[ \9|]<rWFU81Wha'6A6vv1?٦dUvɥϪr]`®y
+q8&oxcq?coK (tmzrjH9? -1]v{";feW;}"Scendstream
endobj
-3872 0 obj <<
+4012 0 obj <<
/Type /Page
-/Contents 3873 0 R
-/Resources 3871 0 R
+/Contents 4013 0 R
+/Resources 4011 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3881 0 R
-/Annots [ 3875 0 R 3876 0 R 3878 0 R 3879 0 R ]
+/Parent 3995 0 R
+/Annots [ 4015 0 R 4017 0 R ]
>> endobj
-3875 0 obj <<
+4015 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [481.98 668.246 512.306 679.935]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://jcifs.samba.org/)>>
+/Rect [84.043 738.375 195.218 751.276]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.samba.org/)>>
>> endobj
-3876 0 obj <<
+4017 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 654.697 146.975 666.386]
+/Rect [438.653 403.295 507.324 414.984]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://jcifs.samba.org/)>>
>> endobj
-3878 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [404.926 305.462 512.306 317.151]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.securityfriday.com/ToolDownload/SWB/swb_doc.html)>>
+4014 0 obj <<
+/D [4012 0 R /XYZ 85.039 786.531 null]
>> endobj
-3879 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 291.306 153.369 304.208]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.securityfriday.com/ToolDownload/SWB/swb_doc.html)>>
+22 0 obj <<
+/D [4012 0 R /XYZ 85.039 722.931 null]
>> endobj
-3874 0 obj <<
-/D [3872 0 R /XYZ 85.039 786.531 null]
+4016 0 obj <<
+/D [4012 0 R /XYZ 85.039 680.584 null]
>> endobj
26 0 obj <<
-/D [3872 0 R /XYZ 85.039 639.254 null]
->> endobj
-3877 0 obj <<
-/D [3872 0 R /XYZ 85.039 609.849 null]
+/D [4012 0 R /XYZ 85.039 374.302 null]
>> endobj
-30 0 obj <<
-/D [3872 0 R /XYZ 85.039 262.92 null]
->> endobj
-3880 0 obj <<
-/D [3872 0 R /XYZ 85.039 233.516 null]
+4018 0 obj <<
+/D [4012 0 R /XYZ 85.039 331.349 null]
>> endobj
-3871 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F14 2895 0 R >>
+4011 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3884 0 obj <<
-/Length 1430
+4021 0 obj <<
+/Length 3166
/Filter /FlateDecode
>>
stream
-xڥn6_a%4P+H^6im5-0٢mJt\o?sd'q2s:Y2N4Hd4p WSCiT 0|8]ɴ$.~{~h,Q0O&x}503q}bz4(WHos>}@u|K0 d wp(χJd(f{/qj\'<8 dd]Vc 5ZY袪|Q[c04 {XI(j 1iJ\3YeR@U_L eyQ9FDO&QEO1#n!\70
-6n5k)h&rF
-m/LC邊6NeJنu 0EՑu&!rDWS^Tc:]n~KU<~eJA?yC5_ZP$(Q͚SBPga[˘aj w`A=8 "
-vqb3Ү=bԎ=c17hMf!ڢS5e .J=Nt
-o{,τܼ{!̼]8PHGC.M06snԒ-S3%t]
--\|g`0+%kq־sn{Kň3. ~x.yks?h-X /I㲛sOJk Sbnny 3z;ebYC#7}'P>{,cL ΧCIzMO`JH,} T Uz(Hi-,qߺ><||OWy5Xn( _)f,W8 %][Sf5s1 ay_azlejRZO'3]
-8fn
-Au㎁U!8nڞsaVvEűnuLX55=:#J/izzprks )x̼_VzI\ң$xycsbvn/yD45v.L'g t|<߿ L<:a|Kendstream
+xڥZYoF~ׯ <&9de;Q ^k" Ԑa!gI͟ߺٜCyX>(?$\OY'7Y̏'PLdj|﹩NOQOO?};*=fsy3v$Η\/Ϧwn(t_5 ~g>47XJ09wo?xJ=O$J? / '5Tyn'8SM
+gMdb1PG~*?x+zUB@wnSTT~7pq;_2"΂Ӵ0w"k ZԋESyԮqF|YX æa<#kj88`y&A?So,㖸+ gɻΦQ<snPZq6DAߝM r._׆̪6M :/jeӗOXyQVܸ_]M\p183h6lH^1aK >`ﰝ1 pg"Ej"..H=q碩kM虸o7c*vClmۤ҅xaF3<%
+[/_&L, UG<Gw(~XipBJŎ3U~<2"R ጣrWNGLd4Zy˫.^[uNVgSel,A0s%ÂxnC89z2HX .u =츅2 x8Q"J!G_^{gwH(&q4s_NKf9Z˓\Xl[ =*#gez91``قqwUӼ..'GΥX[b7֖UUr?ulN/ilB(T26JޕDڮ04pv-҉reb_\~Pq-ņ{wq7 q
+7RE:1:
+ /[n8⑒yy`Z%9vhﳅTX6F ; ^
+rζBYDҒx]ϝg7-?.0Μ Z4`U +Q%,.m5=gY<n
+ 2<Evܥ
+kgP )9ܿe)i$x33ݢyv"x~Dj%
+Q7 H z 觸e*eXʀאo 2l) jb- 1$l.s*1U
+BOej
endobj
-3883 0 obj <<
+4020 0 obj <<
/Type /Page
-/Contents 3884 0 R
-/Resources 3882 0 R
+/Contents 4021 0 R
+/Resources 4019 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3881 0 R
-/Annots [ 3886 0 R ]
+/Parent 3995 0 R
+/Annots [ 4023 0 R 4025 0 R ]
>> endobj
-3886 0 obj <<
+4023 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [131.316 644.136 458.066 655.826]
+/Rect [370.528 654.697 522.302 666.386]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.securityfriday.com/ToolDownload/SWB/swb_doc.html)>>
+>> endobj
+4025 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [93.134 243.693 419.884 255.383]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://hr.uoregon.edu/davidrl/boot.txt)>>
>> endobj
-3885 0 obj <<
-/D [3883 0 R /XYZ 85.039 786.531 null]
+4022 0 obj <<
+/D [4020 0 R /XYZ 85.039 786.531 null]
+>> endobj
+30 0 obj <<
+/D [4020 0 R /XYZ 85.039 625.098 null]
+>> endobj
+4024 0 obj <<
+/D [4020 0 R /XYZ 85.039 582.751 null]
>> endobj
34 0 obj <<
-/D [3883 0 R /XYZ 85.039 628.693 null]
+/D [4020 0 R /XYZ 85.039 228.25 null]
>> endobj
-3887 0 obj <<
-/D [3883 0 R /XYZ 85.039 602.079 null]
+4026 0 obj <<
+/D [4020 0 R /XYZ 85.039 188.086 null]
>> endobj
-3882 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R >>
+4019 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3890 0 obj <<
-/Length 2536
+4029 0 obj <<
+/Length 2134
/Filter /FlateDecode
>>
stream
-xڕYK6Wj!
-<iK<IvfT<4 \iqe3SAkn BU3wog_~y Hr&,dTƌ
-
-/g{ї51 6v05]]٢tu& JnTPE~Wycm= Lg,IrSxi Q<"m pX
-eL ݸ,:EnDOn/MhF|A2ndoD80?0hԢ$CXQs]#<9P{I*z/-`iZs4V
-;B^e,VKQ=Mҷ\m}O h&E>V./rypU~O"uW|X4Zޜ+qODʀOQ7)׼#Q,C
-ʵ S
-awݓ%
-K۱inoW!y  q56]c8¥R :4ˆ%3癨J=˦wBO g>mZ{,(I/LJ>?d+̨௾`=]d9P?9٧ =cl{y_'+7!'Ubef zݿVmvR΢N6.,a[+bZ.i[懡OrNqإ헊jHPm'b
-k/rLg^T󿶯T2hэɦ8o?iOIwyrg?ɽT}rs^;[! L&P+1ʨoI$(Ӝ舢QxHϸL1\l"`7V5lW$İ#IP ԯfQhR=ۺn)k'^I4جuI`xŸI4®R}vF8 Z|.ZFgjUOn<&}?c\l[.|9sO 'qTPjyjyhZR"걻 ;nKQU\* ZW}2E|۩IW'c Vs{LtsW£ޏ2Qw5&JM-nIz{rOo]{W<7`JWW܍)WŽ^0jWc+qH0ݳdw1
-F>CZQཐʩ8uژ Y<7 oq
-"'ߤ
-N)!+o<:rKݮې
-K]OiR\xW#0n y
-rJ"v u :C;;s^
-]o%Ғ9?dHKW(vsۆpe9#K)ki)>;`̸;dBw?W`#9b'0Uh4/#Nc>endstream
+xڅXY6~0R⡫@4m6h4-6ym-D\Iw}dZ],&9p3S4i"rM(M010@wyo<y0A7ݯʟ*_.:EBPWt~̓W3-lk+ ib&瑗k&,f߼}[|[ κ?+- n^(KDZv/$&t/0x%xgs-4 8*Sm Iw0[.bJy[/E'AIM^5$a> B/d 'Pt5UzRZg̓{ e8[3;$TRؙ3@AᙧUͿ~GikOU BŖΫ` 1/ 6^S21^; )Kȋtiv%#= D$6pX/:{쯁DTˡ_hm>{PILA0Mmd.L;WDwpCXKAYex]U}^
+mjև" 4^I|93sK8:u%MTDs 俵s//(6L8a-H)mIC%;iƐ2ţi}u1:46PZb($t`N!M0APҵ&`m(0p+Oq9qړ30N͢v u6}Lۇ%"ۥ)ejm`GasY{jH+܀yC҄\ x 򳚇(-]co qljbmƐ1_pB򑗟*K'/>'yU牆K[;Y&& EnC
+P=Ѝ<LCsdtyhܣw蝛wcCM%wwh껢!Iiq.w,M+7&[XyY~Hyˣ>A큵l2M[OL`u!)ehsvo .Vqh|j|DKMMJ*Z yTӐݢȵ",u
+STR8߉*FX8ѤTeXw
+lMf^LC} :_eR}2lyt?ψ4p{T<݈NS#.]kc@S{X썧}#X3uIP]EKyӕ,RR$7l0
+xD Zv^L&' 듋(%^1d$謁LpB/4*`2Sǃ.x<j,[M:#i9c],(3DFw}s-5Ȝr}0(.?2fyo#—TмK~47EEDBph75{gx "/X?,ޟ% oKgl}6U(V勉JUz]B:$Fopr)3E2E2% 3n>La `-e|m{&΢S\)I K*t[(~WP& Uqkwf]#3(U %H-X."&/ǥJlMu!#^NmTke Re!Tktu*=}`XM\X:Q'7 rn&v_>A؉CёEgRG]endstream
endobj
-3889 0 obj <<
+4028 0 obj <<
/Type /Page
-/Contents 3890 0 R
-/Resources 3888 0 R
+/Contents 4029 0 R
+/Resources 4027 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3881 0 R
-/Annots [ 3893 0 R 3894 0 R 3897 0 R ]
+/Parent 4039 0 R
+/Annots [ 4032 0 R 4033 0 R 4034 0 R ]
>> endobj
-3893 0 obj <<
+4032 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [313.377 617.253 415.127 628.943]
+/Rect [236.346 576.833 338.096 588.522]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.org/)>>
>> endobj
-3894 0 obj <<
+4033 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [367.537 603.704 509.276 615.394]
+/Rect [334.765 549.734 539.579 561.424]
/Subtype /Link
/A << /S /GoTo /D (compiling) >>
>> endobj
-3897 0 obj <<
+4034 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [169.225 164.014 247.309 175.704]
+/Rect [84.043 538.306 119.763 547.875]
/Subtype /Link
-/A << /S /GoTo /D (securing-samba) >>
+/A << /S /GoTo /D (compiling) >>
>> endobj
-3891 0 obj <<
-/D [3889 0 R /XYZ 85.039 786.531 null]
+4030 0 obj <<
+/D [4028 0 R /XYZ 85.039 786.531 null]
>> endobj
38 0 obj <<
-/D [3889 0 R /XYZ 85.039 766.606 null]
+/D [4028 0 R /XYZ 85.039 766.606 null]
>> endobj
-2948 0 obj <<
-/D [3889 0 R /XYZ 85.039 676.205 null]
+3022 0 obj <<
+/D [4028 0 R /XYZ 85.039 662.883 null]
>> endobj
42 0 obj <<
-/D [3889 0 R /XYZ 85.039 676.205 null]
+/D [4028 0 R /XYZ 85.039 662.883 null]
>> endobj
-3892 0 obj <<
-/D [3889 0 R /XYZ 85.039 644.68 null]
+4031 0 obj <<
+/D [4028 0 R /XYZ 85.039 617.808 null]
>> endobj
46 0 obj <<
-/D [3889 0 R /XYZ 85.039 547.614 null]
+/D [4028 0 R /XYZ 85.039 466.627 null]
>> endobj
-3895 0 obj <<
-/D [3889 0 R /XYZ 85.039 517.412 null]
+4035 0 obj <<
+/D [4028 0 R /XYZ 85.039 422.877 null]
>> endobj
50 0 obj <<
-/D [3889 0 R /XYZ 85.039 449.416 null]
+/D [4028 0 R /XYZ 85.039 343.534 null]
>> endobj
-3896 0 obj <<
-/D [3889 0 R /XYZ 85.039 428.219 null]
+4036 0 obj <<
+/D [4028 0 R /XYZ 85.039 306.667 null]
>> endobj
-54 0 obj <<
-/D [3889 0 R /XYZ 85.039 149.745 null]
+4037 0 obj <<
+/D [4028 0 R /XYZ 276.614 216.978 null]
>> endobj
-3898 0 obj <<
-/D [3889 0 R /XYZ 85.039 129.151 null]
+4038 0 obj <<
+/D [4028 0 R /XYZ 85.039 94.508 null]
>> endobj
-3888 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+4027 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3901 0 obj <<
-/Length 2957
+4042 0 obj <<
+/Length 2445
/Filter /FlateDecode
>>
stream
-xZݏ6߿w ZQMڦH4!̓l˶.Jr6wHQky7C73䪙,\/fIQf7BJ8Yzq]\\~3幙n6r|ջ ߝ/$u~|;S疉7o՛y8W_3 /r` -o~xycja~ћa?]xn;h{ʲ"7
-./~1R//4BenGS<~I
-w{le`q*vGsu.8m2G(vʗ s)4 .$u9w~~"[kdVT~v Y<g zJ<-,a/PK
-Ѿ0=Ea,e=iw5x'; $C)3&5cO]C2d24H@nq-2ȃP7m.
-v;Ep
-b6LDlKF! 49!\hCc3Lδ${4oRnfG 
-4"wUj͸xͦ|R|?D?)<!=TF5n @/>'gzUtc4\aǼ:| GgQ؉VqC&DRqW+bpi 0u&~g|3N~jVWz/QMʪ<NN9Cx$dlp[s*)\0:d Z7<Q\
-P}vuz;\o@8JɅaDt c<;s\H m>'gΠ $ȍ= 5, ?vet(Ks~i:oLJJN8mӲVX]bpnBt"2~ ,
- |t뇕3xgLnu/C3Xęo$%,җς
-]o~M'֓8~nQ^]#*szs69N22+;SRPGQ]޼x{{=!&\/Sc13Lۄne⠔#>EhT ҒC1*/Er6h'Be mdzI'Xwz5 sTvR]Sَ\/ߴСRƊ
-Z'j xX%,
-=^ &cΠV^47yKys.[Ywy8M7
-g;2zjH/lВ{VoG}$
+xڝY ZI36^u(.e[==I%Zo"șofƒEI[`7pee9f^X}2ύx}qݧ˕R *IR痏 uȿo?ܯr޽c݇r;o D{|zW
+Wo~\'{e&JͿx-\W/%Rjn?z.QaBvy rVCU-(Ey̫'{G
+6LC.evڶi|.V~"ܝuglqへg .^e$B%^ӴUMȃ-UV/iz/A^=OgY޼3pT}<,c\IosjaoawKaϖ>w=ьC*suwrA*^rbTx{%,s xH#Hl@Y nC-= 0<!B;OxLD?z‘v 'ڍ<Wq ;F߃4s
+%8qAZ2y L<.eR7{#<Iтq G!NX3怑I){? OO<|*ʒGel*F&#څ,\#<SB<q"P޶@8XNr~F/6FA;#MQ^c/T'&
+ȑ@ƼoVa|
+2'Ǽ<uL.xVK raɪpé@Dv m$vmC '$H$EIoqoA)<J.? 4;s>AB\;@1̜[X{|jܨED:
+|X!@8sm$~Med*ʂ"Su.K)2 3[d0ڷMeWa
+~@`]B 0tb?0 Ӌžpp Ógl
+3Z!YEjNRv Jb^1t(WKUI͡3xcLw|p%b',N>8i%DTK( r<
+ @wLU}I2bi4C
+cdQ/aH}&%/~;@b,Aw䎍 y] U~`C~#)R7KXrj-yzǿ "!u3[&ư2_!y1u4L$$ .
+CbI2
+
endobj
-3900 0 obj <<
+4041 0 obj <<
/Type /Page
-/Contents 3901 0 R
-/Resources 3899 0 R
+/Contents 4042 0 R
+/Resources 4040 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3881 0 R
-/Annots [ 3904 0 R 3905 0 R 3910 0 R 3911 0 R ]
+/Parent 4039 0 R
+/Annots [ 4044 0 R 4045 0 R 4048 0 R ]
>> endobj
-3904 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [470.223 690.985 512.306 702.977]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://localhost:901/)>>
->> endobj
-3905 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 677.738 193.489 689.428]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://localhost:901/)>>
->> endobj
-3910 0 obj <<
+4044 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [293.723 140.375 341.14 152.065]
+/Rect [491.495 724.825 539.579 737.727]
/Subtype /Link
-/A << /S /GoTo /D (diagnosis) >>
+/A << /S /GoTo /D (securing-samba) >>
>> endobj
-3911 0 obj <<
+4045 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [225.07 126.826 427.223 138.516]
+/Rect [84.043 714.003 123.308 723.572]
/Subtype /Link
-/A << /S /GoTo /D (problems) >>
->> endobj
-3902 0 obj <<
-/D [3900 0 R /XYZ 85.039 786.531 null]
->> endobj
-58 0 obj <<
-/D [3900 0 R /XYZ 85.039 766.606 null]
->> endobj
-3903 0 obj <<
-/D [3900 0 R /XYZ 85.039 748.602 null]
+/A << /S /GoTo /D (securing-samba) >>
>> endobj
-62 0 obj <<
-/D [3900 0 R /XYZ 85.039 610.22 null]
+4048 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [414.285 436.223 536.549 448.216]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://localhost:901/)>>
>> endobj
-3906 0 obj <<
-/D [3900 0 R /XYZ 85.039 578.694 null]
+4043 0 obj <<
+/D [4041 0 R /XYZ 85.039 786.531 null]
>> endobj
-66 0 obj <<
-/D [3900 0 R /XYZ 85.039 453.924 null]
+54 0 obj <<
+/D [4041 0 R /XYZ 85.039 699.735 null]
>> endobj
-3907 0 obj <<
-/D [3900 0 R /XYZ 85.039 425.126 null]
+4046 0 obj <<
+/D [4041 0 R /XYZ 85.039 663.47 null]
>> endobj
-70 0 obj <<
-/D [3900 0 R /XYZ 85.039 313.904 null]
+58 0 obj <<
+/D [4041 0 R /XYZ 85.039 553.36 null]
>> endobj
-3908 0 obj <<
-/D [3900 0 R /XYZ 85.039 266.376 null]
+4047 0 obj <<
+/D [4041 0 R /XYZ 85.039 520.939 null]
>> endobj
-74 0 obj <<
-/D [3900 0 R /XYZ 85.039 183.05 null]
+62 0 obj <<
+/D [4041 0 R /XYZ 85.039 341.909 null]
>> endobj
-3909 0 obj <<
-/D [3900 0 R /XYZ 85.039 154.252 null]
+4049 0 obj <<
+/D [4041 0 R /XYZ 85.039 296.835 null]
>> endobj
-3899 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F56 2890 0 R /F14 2895 0 R /F11 2898 0 R >>
+4040 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3914 0 obj <<
-/Length 2254
+4055 0 obj <<
+/Length 1571
/Filter /FlateDecode
>>
stream
-xڵko6{~/kO*pX5E5F@ek gK$7ͿyP+N"@D3rl,t6I][-'݅a_2`EbqW%f"El2D(կѻ/oδ֑4uE8߫pymd~*#@ O0?\$dp!b=E,l0V0^^kf»Fu3řc8*UbN
-LM2S05Y@]4z_Tnk: 9
-8YvGΔ3'Vٚأpᅼ\@EEC{־A 9zդ~ SE&MU-r^ Ep?_ZA/0$z)#5uN$ 9`uJ\)ĕ2O+dFnm*!@`ncr7q]hD@ۢ\~W&کX?C[hA cp`ȒRce 8b
-9 ִ3p(df8KpŨ+L?[l2AD\"kG)2 IyQ&*κ h$a\V}L=sj]稢$( @\#.+Jgτo<h˒94F>{UK.?+"Erё sm)ڰ
-$.jyU&uʺ=M˝i͑DӐªu2!4
-
-8%!yL#nT>K"*3F<Cܾ,SxMk"Ucgh HFe&!爛 )QkϸW'i"Fi\:%>$3̜3G)CY&џ2P։Qg8ؗ$H_N3(q %%ΩcZzAH9br#Λšfg+_{liս0ZߌgI_wۜ_u9?UpǡgՇ%/1
-<r*͠*wJe
-U't4缂mԄK JSH
-̧[1+!"5v?z!C) ͇~"1cc*PxrY<S/B#}o>tEs-\aUh|q8ݎ{„dsMNu8`Af8w( 3(H?m{챠G{endstream
+xڭXo6~_! &3-~aC&kYyh ۲U\IN~w<RV-LǻwO+ĉ)v;XkԨL:ٕ
+OL%3_}r_{~ћ
+!܀y(W^$_7s/۷$xhxS^z-x(L.罧Xɧ/L|&عx8ۉT))̼L>hM:,Vc<taB? `U2!!tJPFIK
+յ<<><#ޢaZ{ noӾ
+['_[+ 7wjUޛi{}k&V6?N>s!2{/*R{`
endobj
-3913 0 obj <<
+4054 0 obj <<
/Type /Page
-/Contents 3914 0 R
-/Resources 3912 0 R
+/Contents 4055 0 R
+/Resources 4053 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3881 0 R
+/Parent 4039 0 R
+/Annots [ 4060 0 R 4061 0 R ]
>> endobj
-3915 0 obj <<
-/D [3913 0 R /XYZ 85.039 786.531 null]
+4060 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [263.502 186.32 308.646 198.01]
+/Subtype /Link
+/A << /S /GoTo /D (diagnosis) >>
>> endobj
-78 0 obj <<
-/D [3913 0 R /XYZ 85.039 766.606 null]
+4061 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [84.043 172.771 249.377 184.461]
+/Subtype /Link
+/A << /S /GoTo /D (problems) >>
>> endobj
-3916 0 obj <<
-/D [3913 0 R /XYZ 85.039 744.844 null]
+4056 0 obj <<
+/D [4054 0 R /XYZ 85.039 786.531 null]
>> endobj
-82 0 obj <<
-/D [3913 0 R /XYZ 85.039 700.36 null]
+66 0 obj <<
+/D [4054 0 R /XYZ 85.039 766.606 null]
>> endobj
-3917 0 obj <<
-/D [3913 0 R /XYZ 85.039 679.163 null]
+4057 0 obj <<
+/D [4054 0 R /XYZ 85.039 742.055 null]
>> endobj
-3912 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R >>
+70 0 obj <<
+/D [4054 0 R /XYZ 85.039 532.739 null]
+>> endobj
+4058 0 obj <<
+/D [4054 0 R /XYZ 85.039 487.664 null]
+>> endobj
+74 0 obj <<
+/D [4054 0 R /XYZ 85.039 258.821 null]
+>> endobj
+4059 0 obj <<
+/D [4054 0 R /XYZ 85.039 213.747 null]
+>> endobj
+78 0 obj <<
+/D [4054 0 R /XYZ 85.039 143.779 null]
+>> endobj
+4062 0 obj <<
+/D [4054 0 R /XYZ 85.039 103.615 null]
+>> endobj
+4053 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F35 2980 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3920 0 obj <<
-/Length 606
+4065 0 obj <<
+/Length 2124
/Filter /FlateDecode
>>
stream
-xڥTKo0 WT>X6][0=xIvߏ H("?~"% f\Zi)tp2˗@xNF$ >Eg[xl-4fa$) pέ,L%]_;{PPp NP=
-`SF"ᑓ_I5Ȝ k*PZ2/Iuqm<"a!8aq"XvS 6S5!CZsz
-5++s%yAвޯ_HÌ
- ٽwn[O̚t- rh
+xڭXK4WS1em]`}
+w0 xͦ
+_,{XF⺮ڲZ-i
+כF[4;p * +o ީT94
+dyֲ FJ͈(/(hF@g)22wOˊdu)Œ % pnk掅Gc:1ǎ<AGiLBvzl<VxʚpR1OHB'zK&޹Vx=2L
+w5ߖ]S\Է(¡!?#ӎg{qB1W@@,*īB Gt7 A$ qO}
+CrUOUz@suBى6Ͳ3uPנ_l;zQ YقzcHݶm9iO>Dhbrnrm*ӧX7u|(jt¹uͳVyWIfe_ F?q
endobj
-3919 0 obj <<
+4064 0 obj <<
/Type /Page
-/Contents 3920 0 R
-/Resources 3918 0 R
+/Contents 4065 0 R
+/Resources 4063 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3881 0 R
+/Parent 4039 0 R
>> endobj
-3921 0 obj <<
-/D [3919 0 R /XYZ 85.039 786.531 null]
+4066 0 obj <<
+/D [4064 0 R /XYZ 85.039 786.531 null]
+>> endobj
+82 0 obj <<
+/D [4064 0 R /XYZ 85.039 766.606 null]
+>> endobj
+4067 0 obj <<
+/D [4064 0 R /XYZ 85.039 746.277 null]
>> endobj
86 0 obj <<
-/D [3919 0 R /XYZ 85.039 766.606 null]
+/D [4064 0 R /XYZ 85.039 540.921 null]
>> endobj
-3922 0 obj <<
-/D [3919 0 R /XYZ 85.039 732.329 null]
+4068 0 obj <<
+/D [4064 0 R /XYZ 85.039 492.833 null]
>> endobj
-3918 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R >>
+90 0 obj <<
+/D [4064 0 R /XYZ 85.039 423.575 null]
+>> endobj
+4069 0 obj <<
+/D [4064 0 R /XYZ 85.039 391.154 null]
+>> endobj
+4063 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3925 0 obj <<
-/Length 384
+4072 0 obj <<
+/Length 396
/Filter /FlateDecode
>>
stream
-xڅR=S0 +2CeIrG2c04!9ڤIh m9'H$H
-#$$/2aB&y\њM3%/aT.TI2"RDIeuDWH=O1ًw&9J6o;۪|Z<G-$\)  s@aV
+x}R=O0+<C篬HB6ZDi'*wwY8 Kbl+Nc~%&Z)s0g1GaTVDr0I(KG E`֜
+Zh,}u)r$4>Lé{WwշoXI!U;F;0vTfi&;"R%}b/)`FrPrAKiH^5
+ 0iiS mAǒIG}>iJۥpYh5N{_Gq!tǸ:?k?O(~ϾQ]IĐ3N'YQcIMY>\~Ԡ/n 6返hW8
endobj
-3924 0 obj <<
+4071 0 obj <<
/Type /Page
-/Contents 3925 0 R
-/Resources 3923 0 R
+/Contents 4072 0 R
+/Resources 4070 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3928 0 R
+/Parent 4039 0 R
>> endobj
-3926 0 obj <<
-/D [3924 0 R /XYZ 85.039 786.531 null]
+4073 0 obj <<
+/D [4071 0 R /XYZ 85.039 786.531 null]
>> endobj
-90 0 obj <<
-/D [3924 0 R /XYZ 85.039 766.606 null]
+94 0 obj <<
+/D [4071 0 R /XYZ 85.039 766.606 null]
>> endobj
-2949 0 obj <<
-/D [3924 0 R /XYZ 85.039 672.187 null]
+3023 0 obj <<
+/D [4071 0 R /XYZ 85.039 658.638 null]
>> endobj
-94 0 obj <<
-/D [3924 0 R /XYZ 85.039 672.187 null]
+98 0 obj <<
+/D [4071 0 R /XYZ 85.039 658.638 null]
>> endobj
-3927 0 obj <<
-/D [3924 0 R /XYZ 85.039 647.469 null]
+4074 0 obj <<
+/D [4071 0 R /XYZ 85.039 620.371 null]
>> endobj
-3923 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+4070 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3931 0 obj <<
-/Length 238
+4077 0 obj <<
+/Length 252
/Filter /FlateDecode
>>
stream
-xmPN1+\- JTHSQ
-~dk̎g !r d "w 0|{lh˒<G1)!{(ܬvbSGj}{NvN'JL^ Mk}<V
-dQim\K$=_sua?U{>Ͳ52T没+ /k3Pv8f``]6s\~(^endstream
+xuPN1+\[vm (N!D)HK% 9,\R@.&erˏݺ w M Q)A YdҩDĕ蛫ۀ. ]Li0B{-ZF?ڎ-`C?4bU@D^Qi5~ڎX%_/H<Άf=:E{W 1e-4e RGshjnliiydendstream
endobj
-3930 0 obj <<
+4076 0 obj <<
/Type /Page
-/Contents 3931 0 R
-/Resources 3929 0 R
+/Contents 4077 0 R
+/Resources 4075 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3928 0 R
+/Parent 4039 0 R
>> endobj
-3932 0 obj <<
-/D [3930 0 R /XYZ 85.039 786.531 null]
+4078 0 obj <<
+/D [4076 0 R /XYZ 85.039 786.531 null]
>> endobj
-98 0 obj <<
-/D [3930 0 R /XYZ 85.039 547.583 null]
+102 0 obj <<
+/D [4076 0 R /XYZ 85.039 547.583 null]
>> endobj
-3929 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+4075 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3935 0 obj <<
-/Length 2940
+4081 0 obj <<
+/Length 2702
/Filter /FlateDecode
>>
stream
-xZK۸WLDUY I!e؉SjG[>$9pDJB"<>J}U& ׭"?0RbWf*4SaО\eQZ$Ea:"W~DIzrS+H2ˢ?b",qrNmōz{"_x#;hA weOFWV 0:!`d39hd)I")\ c8@u8{\,a]SqF71ZdEݩ!=JíGd|<<r,i3<()2']](Nr2_
-X'ó*Gd}7t;ãxg"{\湲 zt1q{ J.]( C,xDH"8~M#-T.5Jvsk" !^iFv}^6T8a;~,E=/&n#y|"{(#=Cp*
-oNFD`_IZB.Fn/ׁ*]8<3)ƌ-n3u#68yHԒu쐤ݲ!w>)b{O|{BVզԍO5hAbB0?s6fwV*5c°n ~e^")?9!g|L7I)8泮/ݞyqNW{+/HO!Ѩg|Ճe?5,Y6e*qCrdđn5hbxxd~"xa d E$|p;^ Dr45iС6BnQh*s6[[nó{d4׬?}:|&L|&S$>rJAfb}2{_~B(&uU@΋vlF#SxrڮuZifpWP[Xכ ^(>4 w3-&"1]ɝȉ&) Dѱ}E bFFbti
-Illc'u^ܗ wkwS
-|qēw8p, P`tmM.*@y˳jJ[aI
-,We- 'vSܲAbrSFR NY̌b
-!*:44dr* '\N8){{mʽtʪ!A]|⁐ƉWU|,lDq!~}y ]gH
-na)Sbq}4Vszg@sj\+ԅ)"`u)+][g@k=* #*:6q϶yc\;NƼe{#MxHi B .D e1勓bpYAf!uޏ6NKpCq: KX58JېשBmpže8ϖyY1OhV(4 i^n). YONV;% Gx=]B=!A:b\f;)P :P˔lРpZ#yd`d(h4d-9mSC̼. 9(pY81$( XPWPHSKM,7jb3T0;?V^C=^r郴'o:6Lx exU@]F3B*:GZ'a^ҁ8U.lNҙD
-6'n:"r;+kxq;bJ=:J[_TfK,-kJ‚4 KݘڵZ\
-,s|FwnGH~!l]3GBVCXL
-3dÏi# /,teۂX,3"֕m6fxcL7/qpSdIALRow.:
-i,IZڹrx~ߦfZE_nS9|=g qVU>#>)d_c$$ػ^2,_-aa>KWLC?_p
-a1)p$.+ 7H0e y/'*nMӭ<|gf6pv6͝d*d" PbA3IRLeVEendstream
+xڅY[۸~ϯ UI,/nҦh@ghdYJr&=7Ru0ssH e'z(Ua<laRйs}erf,NtqFd,LǺH?fCīzxڸ`#IV><tXy=6fX,ժU}?@'LWsYHiy3{hQ w޼T}}@CO4
+w8 *Z/2ڙ;i4³<: B֍nLvhflݖۮqmZ^$A8^=h>Tq!yv8 FIR=Bc 5jL'*„ך8l.glC?]Cxŝ7vxt:Ƅ3f|ű=ΩsRZͽFLBS1v(2z6"ȶ æ  N9s+XGhj&ܪx'0{|s+f؏8E& m#~苅QqṞqrOj48_9x΀tҤ3A㒛4,粦)ӎ0yn:g,ڹ`gqo9@NCMΟq=c}#J .rVq |D6&_mcPpi:69n ];0f>P8R;VWB^X#&bVI:UxZ6t4gbR n^IۼM:%o&FSB< E >`^k՚\9mZ5SX _(p/"b].W*c3b/O•%TߏJB
+-~()x9GM\dRVͫ
+9r !+SY\OAx\rfhá󒍓,(p]__)m5I sV3z
+\:[I:C$UR\& ȥ񂞿^(xƩۃ7wu]5
+'9zW'0\˳yz:Eo.H:@apSģi[e]vvTx&4C#B#ՂXytnN;f}&>M70M'w@wcWf
+ř vl;0nW噸p3P S<z`鬚c35dž!vNH XIVVX/>rkGnY>DE5B9NPUEIx4y<w)
+{.U^F vJ Zuyi
+pbă4\^& BE%֒dݧJE~OR^-BwDFXECw4h 4W>mtX#H
+VN{?i&vXݦ5R70q15cĭ=Ğa9(
+,'n"矿}NBFcɝdos³eh;t3\="K)h&i&o)!tl ߉}f ~X-L:+tnͰ̓ M+ͺ@َ3C3NWҽ$U]tɕgǢi-ٷphogH_!K Zl~=カ'a6׏"J^V}.:}y;-įT$1@N_s~UUy4u4Iᶡ<#T8&˻ͅē BfJ>.Uprח WysP=i= "r%mg8yC:䎶Meߖ6TuU4 n{FU78[y]җ
+=ى'ơyf䮃7ѺxN4{/'٥3' |mf'lf~Cp~ol7'SU*zLr{-#{ϙS֥AX.-лfYՂIGdx<opHn+RhRi^g*2<l~ r?PA~9U97$d8_9I" ғѺ{z7OӶw_1rOM[aX+̤fX|1ԅ䪌Rݑ`;endstream
endobj
-3934 0 obj <<
+4080 0 obj <<
/Type /Page
-/Contents 3935 0 R
-/Resources 3933 0 R
+/Contents 4081 0 R
+/Resources 4079 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3928 0 R
->> endobj
-3936 0 obj <<
-/D [3934 0 R /XYZ 85.039 786.531 null]
+/Parent 4085 0 R
>> endobj
-3937 0 obj <<
-/D [3934 0 R /XYZ 85.039 766.606 null]
->> endobj
-102 0 obj <<
-/D [3934 0 R /XYZ 85.039 766.606 null]
+4082 0 obj <<
+/D [4080 0 R /XYZ 85.039 786.531 null]
>> endobj
-2950 0 obj <<
-/D [3934 0 R /XYZ 85.039 672.187 null]
+4083 0 obj <<
+/D [4080 0 R /XYZ 85.039 766.606 null]
>> endobj
106 0 obj <<
-/D [3934 0 R /XYZ 85.039 508.603 null]
+/D [4080 0 R /XYZ 85.039 766.606 null]
>> endobj
-3938 0 obj <<
-/D [3934 0 R /XYZ 85.039 481.989 null]
+3024 0 obj <<
+/D [4080 0 R /XYZ 85.039 658.638 null]
>> endobj
110 0 obj <<
-/D [3934 0 R /XYZ 85.039 123.831 null]
+/D [4080 0 R /XYZ 85.039 454.407 null]
>> endobj
-3939 0 obj <<
-/D [3934 0 R /XYZ 85.039 92.305 null]
+4084 0 obj <<
+/D [4080 0 R /XYZ 85.039 414.243 null]
>> endobj
-3933 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R >>
+4079 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3942 0 obj <<
-/Length 3565
-/Filter /FlateDecode
->>
-stream
-xZYsF~ׯ[*s G6NNRJ%yIHBL
-tk(t]x Oh_ko<jI`Cɦm\d6@M{YkЩ>GKp0Il^D|wkrj҂ʣP__Ֆ
-IJ{'Gl)sD <<$Kaܮfop>N~ -HDRqj]Bs(# 10.,9#@;*\Ndcw;!g.6x4"
-%3 HR
-y6Y{ptf Qo$H19vc\<=:^ 5/)\q
-h"h()0(5$9:*j+غ1igTs*($$XL
-j.*B
-RCu6~™ ݺ
-n ℍU> q N+K2TCbT
-A8mm< ^#ioSe6f!v,Ajm=`N96C jqT2!a
-a-rrGeNi(x~'NO&"mW@/=EqJ9JƔڄ.eX<9@F*OQy
-fF{z
-
-0=w;}펃FV15랞Ϫ}W6>p_&xyyAINqegQx+1bg 4}ܧlxd8t{z3uBAFfKLvṀ
-׼ϣ^1>HT)9Pvi(d}L
->^j^Q7/&ԅtyþ$g43Mlf/T:L&O\ N8XE% ͷ$ax`ceCmϞ @\=;R-\I+03JZf,Rޭ"eEHh6ӮAE 3c/9EI`f*Ȩ})$@̕w;R];pvhJSݷ8( TS֒נOL _cY~lm0RXVp)
-kJY״<P" ̊Y ع~"DɡvqFXi {heöi&&9σn?@6gZ ]URpXR8?u[>yC
-)3ҮumTO}-}8Vz1cٔ\_ͣ"qi52c>:gZtXq:@B1 [wXφFkf.RJkSbE8Y3+LPkJۃ TG~G@<lj3ۈ3{٬:-+0*JiqJ%ʳ߻8 UL>@󟛒 Z[~TP˫JußcVtV\Fc"Kl:29zuͤ@ }-?1- ɥPK~2m +v>
+4088 0 obj <<
+/Length 2880
+/Filter /FlateDecode
+>>
+stream
+xڝZY8~_᷵X]I';lgg<mu[ly%9`AR- 1EYůV"f!4
+B͒4"%fM8{7biH͛Q<al zO>/J$I竅Üb;k=_ VL|+|X?_7NP(B)?7ζpo@ea lё
+"suۋCR,UF.X'9-<D(%Bx"4Jgf -G |!_*FXsˮe
+x7_\mφ5
+
+|<u%ǹ3we؂~1irKW900@;d ǞCK({WFT@ W#|
+>{ \WjݕG~7XZ-qMWΓ=-JG)dYMSHexxrc5OK C'+5
+i;(uUIJ<6q[cK0
+P%L8F!;6U<O [<#KgG`8L' M0ycv۲^7࿷Fݜ<!SSiJֿ3(T|8tbY]d"!@/Fl@UkQU$f00PS3clOp%h]0x'zH׺*)'kIfm4LnO1
+/%D$u3r]7]TX#gкxWo^~o\-l}o_aL\G
+>/)c0oL<rr֑0+"T4;* TjИ_bc%/.0 2@*f2i$Y!B2gk
+RMW&Bqße@
+1Jj$cQKfPF}!+6K9v@Q$/٨$)З訸 X.w`Ez[}Ǒ4aG
+/ȶ*w6]k72,Q"5`Ȓ5,Wa
endobj
-3941 0 obj <<
+4087 0 obj <<
/Type /Page
-/Contents 3942 0 R
-/Resources 3940 0 R
+/Contents 4088 0 R
+/Resources 4086 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3928 0 R
+/Parent 4085 0 R
>> endobj
-3943 0 obj <<
-/D [3941 0 R /XYZ 85.039 786.531 null]
+4089 0 obj <<
+/D [4087 0 R /XYZ 85.039 786.531 null]
>> endobj
114 0 obj <<
-/D [3941 0 R /XYZ 85.039 589.64 null]
+/D [4087 0 R /XYZ 85.039 682.89 null]
>> endobj
-3944 0 obj <<
-/D [3941 0 R /XYZ 85.039 560.235 null]
+4090 0 obj <<
+/D [4087 0 R /XYZ 85.039 639.937 null]
>> endobj
118 0 obj <<
-/D [3941 0 R /XYZ 85.039 276.776 null]
->> endobj
-3945 0 obj <<
-/D [3941 0 R /XYZ 85.039 253.458 null]
->> endobj
-3946 0 obj <<
-/D [3941 0 R /XYZ 85.039 169.378 null]
+/D [4087 0 R /XYZ 85.039 326.083 null]
>> endobj
-3947 0 obj <<
-/D [3941 0 R /XYZ 85.039 155.222 null]
+4091 0 obj <<
+/D [4087 0 R /XYZ 85.039 283.13 null]
>> endobj
-3940 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F20 2865 0 R /F66 3242 0 R >>
+4086 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R /F62 4052 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3950 0 obj <<
-/Length 2852
+4094 0 obj <<
+/Length 3077
/Filter /FlateDecode
>>
stream
-xkoF>R@E@>Izns hE$$%Qvp{ .$U\,DAo" 4H;B{/_+g*o =X 5 l͇8[3w?_.W7x+s̈́M~3XWd
-'|0vf+eb? [|ŕU{?j3G"qf;.j^eUGbSB#t4!]]Fx]BQVǾ64:OR6jo˖:ZZy?F" 1S3vO߀C95AЛwNJ%K.RQ2!ђ3"<.\׀Ԃ#c.` Fp􏛧wS"1ru7GtO7mP8
-kO=5~<T(``E`?3 Y S)ry
-v2t4tiLuREbaV_7{A6*~J \H?o7r'%"Iжw$4hd yBQg;5 lDeѼXAj)[)_L<
-Q ~˫-&@kJ+ã"&A>CgP'FK \D-~-GIGVA^w :3@R8Qv/E\~ usA2)AIUUT/(#oFpPWɳĥ =%0Q7k=hb̸)xǃca'fۖCSJ*>q%JLUIcBb-6cR>{ ~
-&Uhl勤IJ-%'!n'62 a΄xQxD $EG`c#(G{s]'%3PdHi4 `5$xHfd2
- Z
-%4B"%
-|~S;A(vb(
-c8EFcĐ;z`86(?>bI2&f[icj, 3Ri
-0B;)c)غ(Ih:r[nUB2SɎ>r{<dyt.9}ɟ)1O| }ml;~~fO/zlpٍ}dky%ﺥSXz#~(_]ic?
-ӡ)e &WsmhsE?!`xja[G8
-/1zg?"RāF!h*rC~hh=|Z$MUq~v7
+xڥks6WgCi^^-6TI*N}(77F X. SE'΋,N쮒Xו `^_g]$.z}IzKͿaՍ1&&ϋv"SJE} cZ떁z8FE?f3OA2z ,}{Ħ,`Ī,wW65qj|WWx^%œE bI89eFF`foUXnhj6T3@3=If-~Q  nrȯ223&iIa+94 Y
+ DwP%>z-L>F3(F 4ˣc#;mqh4 1C&h;L /U4j:#c>a@^YRI?ڠlU ۷
+8SBLC4JAlun XT8@܎/DB Fq(=1}aPTd*q9^KʟqijLg|xP58%zmhx RTtQa6 ,6N>v \T5nA-e{r96BṊ\=yq{Fɮ9<I7ĝj_V2V|VC0Gɜze^;v
+ν6h9wԐkyQ\9>x^i`52*~{P韡0_^np0g{\SqoNRAwr7|Xçq$dMJTJutQ IG?(`ei/řCb?K؊@ #I2/
+7?l[ߓShl„MPA5ꄎ?D t=0gYZClZYʐUv^
+
+qBs}, :T3Y]TP)cS.XAdOxxN V
+rS`B!<,T,K<&+l˷0Dryl<xةO3l+a"坔[~w-\@H~- x%)aݛ7
+ly[2 ?xy- -iq
+zc?9O&endstream
endobj
-3949 0 obj <<
+4093 0 obj <<
/Type /Page
-/Contents 3950 0 R
-/Resources 3948 0 R
+/Contents 4094 0 R
+/Resources 4092 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3928 0 R
+/Parent 4085 0 R
>> endobj
-3951 0 obj <<
-/D [3949 0 R /XYZ 85.039 786.531 null]
+4095 0 obj <<
+/D [4093 0 R /XYZ 85.039 786.531 null]
>> endobj
122 0 obj <<
-/D [3949 0 R /XYZ 85.039 724.106 null]
+/D [4093 0 R /XYZ 85.039 699.735 null]
>> endobj
-3952 0 obj <<
-/D [3949 0 R /XYZ 85.039 704.117 null]
+4096 0 obj <<
+/D [4093 0 R /XYZ 85.039 662.868 null]
+>> endobj
+4097 0 obj <<
+/D [4093 0 R /XYZ 85.039 578.181 null]
+>> endobj
+4098 0 obj <<
+/D [4093 0 R /XYZ 85.039 551.083 null]
>> endobj
126 0 obj <<
-/D [3949 0 R /XYZ 85.039 615.128 null]
+/D [4093 0 R /XYZ 85.039 383.788 null]
>> endobj
-3953 0 obj <<
-/D [3949 0 R /XYZ 85.039 593.932 null]
+4099 0 obj <<
+/D [4093 0 R /XYZ 85.039 350.25 null]
>> endobj
130 0 obj <<
-/D [3949 0 R /XYZ 85.039 323.557 null]
+/D [4093 0 R /XYZ 85.039 253.689 null]
>> endobj
-3954 0 obj <<
-/D [3949 0 R /XYZ 85.039 300.841 null]
+4100 0 obj <<
+/D [4093 0 R /XYZ 85.039 218.944 null]
+>> endobj
+4092 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+4104 0 obj <<
+/Length 2206
+/Filter /FlateDecode
+>>
+stream
+xڭX[6~_a` Ԋ(Z$NInAc˶ZYRr&{ne,vLLG" ]O8Pt-%+!Y hym-^}R h͛˕ *gT)g=~<XJ9?n>7o6(Q?n~[HxN#=Wt -?^,k*N0їfQYЍ̲?egɶxmOO>GT'j# E{n6dҏ\9;(.~<-W~9$"- N#Sg8=. ] nA
+[}`ޑeU*O BسX0tF+*m9J*Jِqih"4}gsLb&4BmNYY>L2u^+nG0I<!,v`^Se's HOt`Zd'^Ę|[]ѹCQ;qh'\ֲ:
+~:R"q25b^ 0:T3$u4nUBPO+sO*/Mţd*J[{YroD᪊涭DsšB{BJkZ&P1[[ *5c f&qGQI Av~BChÒ)Xc!O`d>E1W"8D3eѴ+W%sᲑM_ ȅ6ȗwEp` n'5$ و+
+rdh|b~
+%=9CVT~}BOhWC?1R pl(R
+ZYÌ8{ˇ)??Iõ;De&YQY¦uJ@e5LdvwGA8
+b4ԭ}[G*q͇ \
+pb͗`-U]p69S/4ifDPR><C5ˍ-!֦lҶ*Kk_'3TΚm</SyRBa(A=Nm<iRl]p>GX<فPEpD̘ʖ(q,B 4'Jq"ARVlJԶB!w8Q`9$ v}Z쒪%O
+缮Ot*,
+k%6M2=2 Ѓ."eax$
+
+KEendstream
+endobj
+4103 0 obj <<
+/Type /Page
+/Contents 4104 0 R
+/Resources 4102 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4085 0 R
+>> endobj
+4105 0 obj <<
+/D [4103 0 R /XYZ 85.039 786.531 null]
>> endobj
134 0 obj <<
-/D [3949 0 R /XYZ 85.039 184.754 null]
+/D [4103 0 R /XYZ 85.039 645.538 null]
>> endobj
-3955 0 obj <<
-/D [3949 0 R /XYZ 85.039 162.893 null]
+4106 0 obj <<
+/D [4103 0 R /XYZ 85.039 609.273 null]
>> endobj
138 0 obj <<
-/D [3949 0 R /XYZ 85.039 107.848 null]
+/D [4103 0 R /XYZ 85.039 499.163 null]
>> endobj
-3956 0 obj <<
-/D [3949 0 R /XYZ 85.039 87.253 null]
+4107 0 obj <<
+/D [4103 0 R /XYZ 85.039 463.753 null]
>> endobj
-3948 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F66 3242 0 R >>
+142 0 obj <<
+/D [4103 0 R /XYZ 85.039 397.28 null]
+>> endobj
+4108 0 obj <<
+/D [4103 0 R /XYZ 85.039 361.015 null]
+>> endobj
+4109 0 obj <<
+/D [4103 0 R /XYZ 85.039 226.515 null]
+>> endobj
+4110 0 obj <<
+/D [4103 0 R /XYZ 85.039 185.868 null]
+>> endobj
+4102 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3960 0 obj <<
-/Length 2908
+4113 0 obj <<
+/Length 2553
/Filter /FlateDecode
>>
stream
-xڽZmoF_!p
-'` 3?hY^LO@*tAK_?L_1UQ'P{0
-4m7ػ 7.qp<xv1ᵿO:y505F|`t+&;hJ`}bCBk:<WKw}d_*8 3 {PmU4Q?3/YAi>-r{M?;82#+?f8
-++<(yM5vo)qěˢw !=l= wk+&|w#-61|v͜zwH&$Ð|>e-6" )޸yawd2(W+fQh#D'Q؄}l!h:}6!DD ïQ
-U+2<-[m}/CyM8 %O6˪^6#-fUF&X1S3ގd>
-bĆ~+6u:`_I@jSÕR<<\? w}j߳l76SNā[e$*2sxkT-z7#G;8H6>-3_{cbxF" L^A"in0 o~K;B
-uSG{Q~mop2tHŦ*CwRVj\Y;{u#q'>۸ :
-U[ o!0 QV+>1ntBeA
-T,OO9ZÃI Nryfg['r,: bб?ZۄS(ijO\[łNg q>kztmE׆_vmD7+Kgtχi(/*$SFBk֮rXJ#j>-qE*CGr/4vOIͩ'PR6mc3Kwh%GĦeJ7"F[B+(#M(G !R,1BI{mbP7pU3omq3!Kn掠Gq]`ETZ:ctIa>ڔ Bג shAO\ܗ &SӸ
-`8qi]I.p3X/fYS 0`$43-WBrFA,q0㱺(U:^?HQ"gɡe[܃Guӆ4_i;Ih䅋I a]Nd'r9Loܺo^#sʅl˙NʒvΡc:XF2&TQOwEYXFR+V;bL%|WJ^K\ܩ.YWxAvL̆ ! xaUn7kykBp|QYs<x;peV\䫕,09QށO3&T)=W4]@LGk>
-R|:ϸR@C U(S^zӤY*15(63/Hz-/)\&5`XJT`pJjz2
-jj<AE%?Dfh|-".H#J5` ƧX/|%HX\oV*J*z^1
-vE. &'-
-RCq\ed1k/eAv*[/XoΝč%t҃~>\⫨VZ"Z==TLd阪/b m_t:D>f bEY3q q
+xڥioFP23UX(v٠)DKLIQ!8} IN60@7o޼KG?$/TIJ:B8k4AF8//^#ԙtRiW5}3|;R'^'D
+BCNu}0N
+BlE<;С18ѲNHp &GƐC˚Wư˨zd@VFw/=su PLطXT
+zYɌm)1/h4VI.Yȸ1ڔ
+YWfEc% I4If75R|(74 ,:홊$uތ;+Xu,в \&©`DwsavxIhbE<(Pk<
+
+׮KDvohp,7cS[4I` MLNєQXhjuK?av"g5\9`3p|qٚ_ȱ[$8uuP,CW7rwr-5@x;Dcj(L|E{OomՍ.6L},ib aOMjQPdYv_</72?6ao< QcEQffRSlh!w)nf$9Z{ǽg!2n옊S±NÑ4U{D5Ɖ+z̐KQ󍟙A2ǩqb%gzķ>Kۮ S'L6!癕1d Yix(ZE+yn}٩8nKF/}./ãKbc嗬]daP~jX u{Ӿ)1
endobj
-3959 0 obj <<
+4112 0 obj <<
/Type /Page
-/Contents 3960 0 R
-/Resources 3958 0 R
+/Contents 4113 0 R
+/Resources 4111 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3928 0 R
-/Annots [ 3970 0 R 3971 0 R ]
+/Parent 4085 0 R
+/Annots [ 4121 0 R 4122 0 R ]
>> endobj
-3957 0 obj <<
+4101 0 obj <<
/Type /XObject
/Subtype /Form
/FormType 1
/PTEX.FileName (./xslt/figures/note.pdf)
/PTEX.PageNumber 1
-/PTEX.InfoDict 3973 0 R
+/PTEX.InfoDict 4125 0 R
/Matrix [1 0 0 1 0 0]
/BBox [0 0 27 27]
/Resources <<
/ProcSet [ /PDF ]
/ExtGState <<
-/R4 3974 0 R
+/R4 4126 0 R
>>>>
-/Length 3975 0 R
+/Length 4127 0 R
/Filter /FlateDecode
>>
stream
@@ -11460,12 +11988,12 @@ qѫ^>> .13ׅӃ!3SAՔihŨ^(<m䦽lL7
n*1xƈp&XîÜ\D0}#X>#^V|2i9΁r)`Xh&hbHe"
rGX58ժOt$yBқ5/vpo`kAr 4N.4
endobj
-3973 0 obj
+4125 0 obj
<<
/Producer (AFPL Ghostscript 6.50)
>>
endobj
-3974 0 obj
+4126 0 obj
<<
/Type /ExtGState
/Name /R4
@@ -11475,1309 +12003,1650 @@ endobj
/SA true
>>
endobj
-3975 0 obj
+4127 0 obj
1049
endobj
-3970 0 obj <<
+4121 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [191.71 248.336 283.127 260.026]
+/Rect [84.043 406.344 213.036 418.033]
/Subtype /Link
/A << /S /GoTo /D (winbind) >>
>> endobj
-3971 0 obj <<
+4122 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [394.643 234.787 476.35 246.477]
+/Rect [339.379 379.245 525.639 390.935]
/Subtype /Link
/A << /S /GoTo /D (domain-member) >>
>> endobj
-3961 0 obj <<
-/D [3959 0 R /XYZ 85.039 786.531 null]
+4114 0 obj <<
+/D [4112 0 R /XYZ 85.039 786.531 null]
>> endobj
-3962 0 obj <<
-/D [3959 0 R /XYZ 85.039 682.791 null]
+146 0 obj <<
+/D [4112 0 R /XYZ 85.039 364.977 null]
>> endobj
-3963 0 obj <<
-/D [3959 0 R /XYZ 85.039 657.814 null]
+4123 0 obj <<
+/D [4112 0 R /XYZ 85.039 329.567 null]
>> endobj
-142 0 obj <<
-/D [3959 0 R /XYZ 85.039 209.09 null]
+150 0 obj <<
+/D [4112 0 R /XYZ 85.039 166.128 null]
>> endobj
-3972 0 obj <<
-/D [3959 0 R /XYZ 85.039 185.108 null]
+4124 0 obj <<
+/D [4112 0 R /XYZ 85.039 131.984 null]
>> endobj
-3958 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R >>
-/XObject << /Im1 3957 0 R >>
+4111 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3978 0 obj <<
-/Length 2767
+4131 0 obj <<
+/Length 2689
/Filter /FlateDecode
>>
stream
-xZ[6~_GX+D
-!d&lm}XYr%9=7 ((<RV.U88t_+w
-:V^GsL"6
- - k7K  ]?7u9+ҤbOr KBDN6r]exFo[ ȝ0`C}-ѲRL/m֖EX%FJRci KYɮ{s2w䃗0ڀGb Aq_Q1)%9$)aZ"M<vv ?|mfț8SfZ
-VkMuܙ
-CeQF
-sZ^chV(g-ܷ0.@.mZAJ[520t bF9
-TG ?ʯ GYʙ1&#}F&̮9?0ݩDQ1}E]@#1]LH.lVwrOJ%cWpu!PEX+%DKOU^A:F{o.2,z G|Z(
-Г~+?ͫ^'ddǭ8.uhG}$O<Xwy,]&Ʒ/̮o mNu`8lY휦}ȦBrn%
-jIn`MX2>d4-[|>^0 ,E4ȴ1Gk:9ʭ`]bP':~|*}r$7p
-Ɓ擨FtL8mZ#\âQ')A8":ĖUTTؔr܈oūSd=3TwJk*)MLQzQhtc}Áo(3=16Mwt =xoϧ;0IڞِDhu>p%bXdS6)KR<8FPFF^<Լy)w5.L5p͵mUJ2#OG0j6;ZUϢz ψ`!Gpyh8ah= 1W8rB7ܩ!`iu%TYsC\l.~W8`C [Sqc QLӛp!33aF.
-,HLiS䃅rDұ+fUW/;։]K6'&&{b%~
+xڝr۶_Gi&bmsIҜXm'hKTH{ ^$MX{ߥ‡Ht'gZl7V{b- kLPbsI}ϤbmyqZ/CodyRKSJ-y cZO햁}8j?|ē~zŰl~y\EirbWt,a{*MǛhτZދۛwx-\9x&S(%UElEؒG?WAO8Wk3/ޭA ϊxpf`KdR,5*Yzo瑮m52)`g
+af!mNc$4mXU^jcQxN Q ص1t8adgmW}ύ63/p]&
+^ #q(bEυG0Ί?Gq(9
+nsAB<V\h.Vu 2|P=[+ي B ,ā, P28+→ %.0ׂ#T>B<)^E;IV \N/T@?w
+m5!s0p3 񴄥Jl$>nr@tՓNJhev_dQ_REP"qW͏'R,SHEslj w
+"s L]{οJ]w7 s](p<˩H
+,mK ~b³>&ek)Co mR]5l6*Cŝ >aCDkakv*]t—bxmV¯_4 K`bmGqhCz>LO.endstream
endobj
-3977 0 obj <<
+4130 0 obj <<
/Type /Page
-/Contents 3978 0 R
-/Resources 3976 0 R
+/Contents 4131 0 R
+/Resources 4129 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3984 0 R
-/Annots [ 3981 0 R 3982 0 R ]
+/Parent 4085 0 R
+/Annots [ 4133 0 R ]
>> endobj
-3981 0 obj <<
+4133 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [209.297 585.761 309.974 597.45]
+/Rect [155.623 725.431 326.449 737.121]
/Subtype /Link
/A << /S /GoTo /D (domain-member) >>
>> endobj
-3982 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [330.926 585.761 472.531 597.45]
-/Subtype /Link
-/A << /S /GoTo /D (ads-member) >>
->> endobj
-3979 0 obj <<
-/D [3977 0 R /XYZ 85.039 786.531 null]
->> endobj
-146 0 obj <<
-/D [3977 0 R /XYZ 85.039 738.261 null]
->> endobj
-3980 0 obj <<
-/D [3977 0 R /XYZ 85.039 717.666 null]
+4132 0 obj <<
+/D [4130 0 R /XYZ 85.039 786.531 null]
>> endobj
-150 0 obj <<
-/D [3977 0 R /XYZ 85.039 557.943 null]
+154 0 obj <<
+/D [4130 0 R /XYZ 85.039 697.613 null]
>> endobj
-3983 0 obj <<
-/D [3977 0 R /XYZ 85.039 536.082 null]
+4134 0 obj <<
+/D [4130 0 R /XYZ 85.039 662.203 null]
>> endobj
-3976 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F66 3242 0 R >>
+4129 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3988 0 obj <<
-/Length 3122
+4137 0 obj <<
+/Length 3000
/Filter /FlateDecode
>>
stream
-x]o8= Ԫ(Q_ CthҽsE(T[%Wf)VrۗC|e5O͒t'j_x-B 7Ӯ8fyHϔ^:[ney?/2_AhwĹ+`J)_OY~G;|;_('^dߗ?][ZhWGR߽s4=@sU: P2./n/iw9=Uw_h?r:>qAaMDP?`>$3őKϔr0u|q
-,$ξ`7Di
- 9dL{܏i5m{b1 ܫx@RKs@d++Z7Wn*_G7g\TNS]uoti Fؼʺ<I.# rWaOD[J*t՞i28v6USyp
-G* u]y$hKkEQםͱwϜ Y%TN +ƽ gyt\YsHnW*R;h_BZ]~J >EM"d=O<vJ`rx򀟉1itԹv%%-=awY
-%OIQ H@},jyLVNEY: ,>rET΂4LCV.t(#pGx+Aqߋ%@b:s@Op&nIm Md-:3McVܓDT
-_# s3ɍuMQ |vKGsIv yV<]>x¦ΐAa⡊jĄrNx;DNw}N[ ee$aШhvrUS~yQ.{47-Ht@f-<!c&Hkܡ߅{Iպ<_|Hyvɀ 'G9fĎh J
-$K[1fA׏3GH/c =t76Ǯ__:uBQgL(b$ߊ(CiNa0Z ~׃xͱ{|B)%/KMJSV(yl7 VT|`'̓R\67w3*%!L0[qh\L}eVS[
-MA+#zzĩl[^ 1y$1''|
-߸c#TdPE Y`>0Q2oGP\Y 0HӋ'SO/qҐVX[Is`QA%?\ c=>z#ȏeqveI (/$fErtv'ޅHHYqp#I~qn@ ,p/eϼs_i5݌:!VQMzt'S?FriB[W$w )3Oendstream
+xڭZ[oܶ~XI dQu)ЇNq89sҠ,ɻwĵܨ^
+KkpÎH D&,&IvIc&i&$Ɏ`bZ[56 +l8&cWSTs
+oSMVuɂjs6n]aBlC÷W|MFt{͜F-9Z+#c
+
+)Hė{zuV7bjYO,\
+!Cy`y\A!Gx<c|X`&>2)@=j{
+/ [1kRLT0vw\STTM&hRZUa1_cCrGHEW@,dK'.?1$MKÛiOoB_=h1z2e6 8'k`kLŤ@@_Yg3X4q %xL$ˍ%1kJT=㕜lBe^A+L]kGQ
+dRX()hDlm#YeKSȌa"5ƍtN9:nmzIߑ0ast`
+Ц9Sx =k os. ږ_P۪F'68139:7h6cHQs"/,pqj
+Y!}
+7[P*160I  EX(}G?TAz*S:yn5˲$+廁˽
+lH pթ+?[G,tBh֢r|ِ(QfrBo92R/-HĴxj7Khr/t,tG^4Mk_gD~J('UFذ y4$NX;(.g>}˔8P_$9rvc+#J5<8 AG Rͩn Liȧ78 L^.8endstream
endobj
-3987 0 obj <<
+4136 0 obj <<
/Type /Page
-/Contents 3988 0 R
-/Resources 3986 0 R
+/Contents 4137 0 R
+/Resources 4135 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3984 0 R
+/Parent 4144 0 R
>> endobj
-3989 0 obj <<
-/D [3987 0 R /XYZ 85.039 786.531 null]
+4138 0 obj <<
+/D [4136 0 R /XYZ 85.039 786.531 null]
>> endobj
-154 0 obj <<
-/D [3987 0 R /XYZ 85.039 590.863 null]
+158 0 obj <<
+/D [4136 0 R /XYZ 85.039 606.533 null]
>> endobj
-3993 0 obj <<
-/D [3987 0 R /XYZ 85.039 573.124 null]
+4142 0 obj <<
+/D [4136 0 R /XYZ 85.039 575.245 null]
>> endobj
-158 0 obj <<
-/D [3987 0 R /XYZ 85.039 295.394 null]
+162 0 obj <<
+/D [4136 0 R /XYZ 85.039 275.527 null]
>> endobj
-3994 0 obj <<
-/D [3987 0 R /XYZ 85.039 263.868 null]
+4143 0 obj <<
+/D [4136 0 R /XYZ 85.039 233.179 null]
>> endobj
-3986 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F73 3992 0 R /F20 2865 0 R /F66 3242 0 R /F15 2876 0 R /F35 2880 0 R /F14 2895 0 R >>
-/XObject << /Im1 3957 0 R >>
+4135 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R /F20 2965 0 R /F58 3365 0 R /F15 2976 0 R /F41 2998 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-3997 0 obj <<
-/Length 3326
+4147 0 obj <<
+/Length 3183
/Filter /FlateDecode
>>
stream
-xڥk6
-ZՃz}(yl)M抶E$y7o^([N;!9Λb婟<=`y
-ER~&zT/b'OO/~~Xo8dY}\0~1_{̓|ބol`7[U#W` WO0(V~b|ծ8Y gߨ( q繲B!#nwtr 4 <ƃyt1q`QW yDlumߦkxO=0y6n|.ie<o7ĻuTx(wv*蔻^p'%!A
-Wci_Sö" #3wttkYT~H[{QV<hn|G¬M<f5
- \uBAS.? #MäDۺ컡C=(u=]MOW(l;vtû
-e^f8g "_x#3d+~rAV "=F@ʟƩ=ӐT̲Z&?}oWzgDc/;^J?N#$F=OS1ԪfO5&GbϵO \7gwwTO!%N uIڝm-% I@z\'Ƚ(, a{kH.'v=R p|<xq) $m'5nEBa4P$Dw-;,׿PX5∘ah<b @D  11Ӳ7u\$H ]%$(q&L&I=Ud|F}SAvX;DLsgTZc;RP)r }!2\fp7'2+\QCƕN!S&v-.Nj27yD}F8srͣ
-#M~hv 8`jCr5'87=k\N&r8 E( H4`n
-ЀHBLig"AYHp̶N(NJK>wVq* l-:ePH8Z )4W+):.\ fRqq)."WR= |mTD83]Q NX܏\@;5$eƴtU=dM3d\Rq$"k/c7 4
-QشGQY @0&C#ٵ9MCsgU83%=
-
-ɈjH˙OB<&{1r[
-b4U\ t
-ޛI3X"3Kk_A7yFw&N'/XIK/yHo
-Lp4gs(@IE`|8w`RZy
-&P:aY )G|CS'gy[SAYHz
-~?KB/$Ņ2>cZ
-'Bl:R
-:|"M8Wie8endstream
+xڥ˒_ a rˑ\Y񮣸lf ,h
+RzB$*s0{#vWG:=δ[b(ehPFW5g׆&%ƕ
+ xfsqN2L!-YiD9k1whb[)yDE^qKgtpᜢ"$#n}%W]ұV<j0RKO=m\WNCT'/ޣđщ4yJCNx\T9X^0N!֝Xw`ݤFI8k}
+zYI[ۍѸ^xŁǖRؠ-HdKa<c$a6la<RW֭"&aY җRV`<ټ؆} {Ί bhjr}/8p"t9
+[9ΕwqvJ5SNh?~?M(T<k%6NW>V!Fc6
+x14T]l1 E7`CG鎶xSāui0Hϒ>f|Kb4/hȚB:+|^dS9fWg)8'gSRщ㓺7n$qUVgkNL~pVmgg&eJ..P1+(W-e'zHp9" D"jAaWJ,ߔe'GKV #lRk's 
+n<{=a$jps`Z\ µxrJRG0\)<;إ0ea8ҢF]+$mt@6BUF[
+ }(PZL5BP j0(p z9 i &HҼá-zm7hA;!75"wɉ qBJYgR/ꆶCNT򍮥=pA9Gp~)'>pԯ\iҶPSK˶<u6[re7W
+o Oޘ"vr; d\Ёٯl|j&7d{g7$8֊Ϥ&IC)X=l4Wsš9Z,:ѮҤ{S7oA#J. >Zu` u*yuٝZU)
+h>fp;uPK\r_endstream
endobj
-3996 0 obj <<
+4146 0 obj <<
/Type /Page
-/Contents 3997 0 R
-/Resources 3995 0 R
+/Contents 4147 0 R
+/Resources 4145 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3984 0 R
+/Parent 4144 0 R
>> endobj
-3998 0 obj <<
-/D [3996 0 R /XYZ 85.039 786.531 null]
->> endobj
-162 0 obj <<
-/D [3996 0 R /XYZ 85.039 283.986 null]
->> endobj
-3999 0 obj <<
-/D [3996 0 R /XYZ 85.039 257.371 null]
+4148 0 obj <<
+/D [4146 0 R /XYZ 85.039 786.531 null]
>> endobj
166 0 obj <<
-/D [3996 0 R /XYZ 85.039 118.042 null]
+/D [4146 0 R /XYZ 85.039 209.66 null]
>> endobj
-4000 0 obj <<
-/D [3996 0 R /XYZ 85.039 99.17 null]
+4149 0 obj <<
+/D [4146 0 R /XYZ 85.039 169.496 null]
>> endobj
-3995 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R /F20 2865 0 R >>
+4145 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4003 0 obj <<
-/Length 1840
+4152 0 obj <<
+/Length 2267
/Filter /FlateDecode
>>
stream
-xX[o6~&5'(Kފl+YJ%9^M;nF!y.߹Ѕ0ka7p%xrΦ~sU L7/?L_]Ǫ8 #g2y
-ƴl80˫ Lx>{_oxyN ^M{BA >u U&[ʋz`}|kd&?SxyVJ00"NQ~#'~8WeDƩqhNq:l4֡Sg?* 5N|BKfXIQ8Ix 8^fy/=-YtBHXJ>nB(fjV)`8+ñi b4 z㌜̒5<j2aM7;1
-<Aq4YY v,RYo"CE60aS1anh]#;'5zvd@̚))]@ e3+tT
-,oC P+6bJW7@oxmKkd)Hst , Lz?eNtYq%|n 1%c2k5fOI8Eç<$&7$%t%\LJ~ 1h:M
-İhmSaWb+nP
-
-$;[%(5I5OZJ[[0IǘB
-&UR u<bG
-LtgsUK\7~h- ݔȣeEt@KPk8h]E7lc%@V9 N#ukΩgj{ƭۑq6ZHJzPF/i}\E)!@9!GojFp
-=>]r}Z<L]XhkF[.-6wL~I$zUm$^̕5b,]v8Jf/!.@E$ t5C?|l2K_\ؑ~p>%G#LD&9wTd$=7nZH?RoQ2Fk4JK,D8%(?mh.,9IRyݫϒʹb3N8iv+u=sp׊a0MXequTm <}6GvĀ$y aq-سn{7u40κ$avr,:wxh_ ̏ 궫6%:edυ"N_̮< t (<)C W6
-
+xڭYY6~_<E\u< Lov̱,$m-m9<[u6)X"GOB'S&I+gd '+XF LHf,&ǎO*œ߿2άA$I`Nk| cZ/_랉8n:?>ɏ3on睠U(7Nҏ7Y:98T:&ۛY"+ߛtx-KVq6U.fYSqY6_U6qa0Qr)5~GH:P3 h`gC dz=L-h#әI-/m|_.9%Ԥ
+]i_QfaVlcR[] +D3P0U ,SrD)8Wc0ך'8ijAgCCp|{q1/;q = ;EYT|kuђ5~FQTB:1Đst`AGFZ9 K9
+-Xf܅PrYarϰmμ
+r;^#mt/tOsl
+͌H@
+pabό>?UPXE
+W .:4MB_1$F*=#69:\p+J+ܐ2\h(H1p?5&Z3qԀ^Cp[]W )[0"q@:tk94}j  @ vbsh5oCyL0
+\B5oF⒘"8PȃJC+ѭ'JaW .Y%96 GPrfLJG/Dd[&}+P
+Ɵ[a<-@1R1ݬ a[m! 8X.6e{S\`w#8ֺ܋ąS٫3Ày|!k0&8a;~77>$t~#&T$v, >C `C6Y)DffhYw'
+|+N`uwQ+v$*vcI=lXOǮ4x3t,-v]$R~yNFC)q'Q39 S@(vޣgw|H=*vB0HiQS7?M %ɷ]kBY? }k.G C;ùQMendstream
endobj
-4002 0 obj <<
+4151 0 obj <<
/Type /Page
-/Contents 4003 0 R
-/Resources 4001 0 R
+/Contents 4152 0 R
+/Resources 4150 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3984 0 R
-/Annots [ 4007 0 R ]
+/Parent 4144 0 R
+/Annots [ 4157 0 R ]
>> endobj
-4007 0 obj <<
+4157 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [285.267 598.718 366.899 610.408]
+/Rect [103.437 426.968 291.006 438.657]
/Subtype /Link
/A << /S /GoTo /D (domain-member) >>
>> endobj
-4004 0 obj <<
-/D [4002 0 R /XYZ 85.039 786.531 null]
+4153 0 obj <<
+/D [4151 0 R /XYZ 85.039 786.531 null]
>> endobj
170 0 obj <<
-/D [4002 0 R /XYZ 85.039 726.833 null]
+/D [4151 0 R /XYZ 85.039 724.712 null]
>> endobj
-4005 0 obj <<
-/D [4002 0 R /XYZ 85.039 705.84 null]
+4154 0 obj <<
+/D [4151 0 R /XYZ 85.039 692.291 null]
>> endobj
174 0 obj <<
-/D [4002 0 R /XYZ 85.039 661.355 null]
+/D [4151 0 R /XYZ 85.039 609.28 null]
>> endobj
-4006 0 obj <<
-/D [4002 0 R /XYZ 85.039 642.483 null]
+4155 0 obj <<
+/D [4151 0 R /XYZ 85.039 574.737 null]
>> endobj
178 0 obj <<
-/D [4002 0 R /XYZ 85.039 573.021 null]
+/D [4151 0 R /XYZ 85.039 516.703 null]
>> endobj
-4008 0 obj <<
-/D [4002 0 R /XYZ 85.039 549.704 null]
+4156 0 obj <<
+/D [4151 0 R /XYZ 85.039 484.282 null]
>> endobj
-4001 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R /F35 2880 0 R >>
+182 0 obj <<
+/D [4151 0 R /XYZ 85.039 412.699 null]
+>> endobj
+4158 0 obj <<
+/D [4151 0 R /XYZ 85.039 377.953 null]
+>> endobj
+4150 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4011 0 obj <<
-/Length 3156
-/Filter /FlateDecode
->>
-stream
-x]o6}ETx%R_=޶q{`dE|l)RR`!9|]]2ԫ,Oëj#?#N2ch ^T-8QReZUHoׯ|P
-i[\o~ :I}s0vZY^,N+m*
-x\\4 ~=~GA MVAe_Jֶ}%%#/U<\5^<xF㱅S,T[~Hʦ2" ?M{OCVDУaiõn 4]]T6.6ůYx B,̩m#;jxr:A[I.D0C>oBmG!aҩƳx8'Pcۮ7pppgE&u"ND4U% ?&Fh$Ⱦ愧 g~=.Jpy0itJ*Ckѧ` deMN4mOx/ ˣ=pW:
-ya8鉂%)z1&v͌#<q3Zi`)57erdE|p`>v .A_aNyVvHnD'65Ѿ(tT4+դ۲;
-~Jg\,dJs>|gtA@0Jv'BC"d%y;o()O3 uptJ w }8Sꑎq@&qĆa\l3fkZvO]O858YCm? ,]/rǨ QԼg2-2O3K3&ַQGxn09 ?hFL7H I+3~Ջ
-S3-uv#
-[8©l|A31xXb<px-7/c^D{5(Beր2ٴ!ZQ>R$\,w[vk 4Aٻwsr?[-Kqe7IX޷-4X#b[nRg_":3JGTVgv1 Tq_©__,/a(z^" "F*2ԧUSӤTPTVdT
-9$&ZP<z'|=?Ul]Xp4o,K7"X82z]:.F`v؇Ι=. -mH@{L>%Qz_2Ef@2c=NK̊vk01"L2,-.!5=+e艡԰ݤ>cƴ5+1UVt8b(^ y(լTp8 L2`sQfULcI&; ǃ'Ka.Xq
-ŊDnT>}Lg`z'S7hT9sH灡˚__zPrM@b-VCi$.Rp\ᙵ>臤 l$Ògs|(2GBRuZ=h3)\A)J Tw+W0**aPDU%jIߖuIR",;'-c^~ڋ/*ݑscd[p[tV; wPOr he~M6 Vm^xv 2J]ͭzf_`m<Tp륷X QD~N&SCm @hp(>@FBDصXuキ!W:aMbdOC<!`}Tn9^@al qw ]<dMk建tdLЉa; Zސ]po**W*j\t61S-Y}60bcX{ ӐCٟgWxQDry!4
-(zض3D_cv|l)&K(̎ɭrΞT<t4WC`3U 8n$Hd#=hhL`1"q9<sHx>AkcEr̙m %}r|VN%
-ͭpְݒkz_gI 㳚$PRGrR<Dqԫendstream
+4162 0 obj <<
+/Length 2546
+/Filter /FlateDecode
+>>
+stream
+xڅY[s۶~ϯPJ I$>9I֧m(3(5I萔]7b
+gLZ,
+gy&m`7PZ:}f$YqFg1Ҽ_y)
+fQ'-N l\i~u})oTzlӷϛ#А"I4 ,(k"m3uGԏ=
+6ez)~&J`9V-,g\6<ʼ=oA:5<J-&_{_60MSm?o#i 
+y8vB&<mhQ6u"o[T_CV >(w6r
+8B6+jppdl`PX{ۉSSL}逴5%hqȺ e
+0 'gNX$qDsHB6\1tDxx9|DqRxp27OZƝ 阪gbyO-OwrH`א"¡ø9 Ԣ*PL*p6ZkX% wmEW ]0\CW[G[bPD &wbVnf./n)3%^7#"0;4֖nJ"0A0abK &q`eKgwi9D< Z"02~[ܡq-aQ́g]04 0*\K\Ķ۵uFo̤cj6¦CU$ izD~i8aqF(fz,/ ?UDA"@{Mb_
+ Z{J2r{fÆyMJPU>o% \B9IzlI`4B|Yڈ
+L.!NH'Y J8z>"6LΑL2EuzWH&] jFV&dBCVmkhFB.(I( NH$ zCaw5"Y%`GVrOqyVaؘkivj1'n{`gx]Q%H뿟EM!Sv2;t2ʛ*ĈkY5ms[3;
+OFW<H`[zje|5V2~ u4s+~x^C<fX8a4
+a-jWD'Z=UNjڡ=gIKS2 rmd'
+,J+toHhGH+uܢjƾun ϼ/8I]HGcmD\XL_.b`(WRe؏Cu`U(4y
+묦\%/hΘ1MٍzZNo;T:-AbR 2)lL2 X$Be +@eZWAįC.ڻzWs046K*Zb,|"F:s&+
+sx_ q!`::tn.I\Ȼu5=k^j,ڥjƨ0\)z;*fg{)i.s
+;88C\hyNIrI젚VţK n z7)Xi^xE4
+rH"'"|+2TD 7endstream
endobj
-4010 0 obj <<
+4161 0 obj <<
/Type /Page
-/Contents 4011 0 R
-/Resources 4009 0 R
+/Contents 4162 0 R
+/Resources 4160 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3984 0 R
->> endobj
-4012 0 obj <<
-/D [4010 0 R /XYZ 85.039 786.531 null]
->> endobj
-182 0 obj <<
-/D [4010 0 R /XYZ 85.039 766.606 null]
+/Parent 4144 0 R
>> endobj
-2951 0 obj <<
-/D [4010 0 R /XYZ 85.039 676.205 null]
+4163 0 obj <<
+/D [4161 0 R /XYZ 85.039 786.531 null]
>> endobj
186 0 obj <<
-/D [4010 0 R /XYZ 85.039 231.642 null]
+/D [4161 0 R /XYZ 85.039 766.606 null]
>> endobj
-4013 0 obj <<
-/D [4010 0 R /XYZ 85.039 205.027 null]
+3025 0 obj <<
+/D [4161 0 R /XYZ 85.039 662.656 null]
>> endobj
-4009 0 obj <<
-/Font << /F20 2865 0 R /F56 2890 0 R /F15 2876 0 R /F66 3242 0 R >>
+4160 0 obj <<
+/Font << /F20 2965 0 R /F62 4052 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4016 0 obj <<
-/Length 3479
-/Filter /FlateDecode
->>
-stream
-xZYsF~ׯۂU!țb9n%y4kq @LU񖪄9{zzz_d"7E=ә/#EzI]?ܞD ss/_ѐͯΫ/ݾ~\arsv;W7jle9o,dUFI}9wo~90OP\?۳(8
-^}8}тgjX,|08Ofs4=Ify@Kf> nVi}7odr,g$n#ŗzQ9)j88ZLQad5)OiN3;UQ@~G-?8a0m3-q.2#j p/[ho-W{JN`^`+];$xcR^
-UU;@R٪AH:e*DλjW|T<j^KYhL(L]))M}hӂwS0P^.qM<n6,=;3eB7 S6d'
--(%].*0H2i憰*%_V<]p^uNQv
-dA<#1}Ug
-䮩>k!J*\ F]g8Bpі "0!^dIrzƫt}j\}1! JG~l H 8r
-<gDX/ d@Î
-b!꥗.D ) jy?%Md 'Ը]O1z`0F҅3E#r]@1igf 3 UXB.2ތCRpҰ
-\%Y^ifΪ|cm.EKΆ՘&js| ,V$7㥅>̃Kɛ@<FMpqg͘V`zҠFT:jI,yˈRK
-Gͅpk%dp嫹hP|XhՍx\Q
-%Ihg߉.FF޾* Hc8b<΋]-j6<֚^o슗MBEԛ*3}9a _xY {g $
-( ]p%2ߗaAjG70NsLfIn87z/~]e\4Ta'eXKT`Ϳ?=r+b q݊7ɡЦ 1:絢XEwbb/r(K)71"bF_svm)(şqWM$혜mi
-}3É:S{ERZHNμoԅQ>뭚ܛ\ws׏'l(% p|uqȦ2I,-PHg ƌyw|ˋ"MTs#*"_DwleI1mP G}`̌/ҍ&#~B+ ]WqwAtK $w.Q`264*1Wٜ9
-d<:[$nf|v\2' \j
-YeA'p$rÖ3fXq,ͤ ރw5đtwvYZj==j]T%M7I:\I##kw0 'V[5EnIth y̢BJ6q3
-0jhOW}|\
-n[`bݏ@VQrg5m9*nX7{1CkRW/%pS?1}B3>A@Qb%hi 3j͆ CZX=#{ЉJ"Y;yҘClӴ9(afIb({T,5S0"&`}Ggɇ2vyEsnǜyg09WʾdJ$c]V YES pOeO,[ J,sOq|
-#Fxx~WG1{endstream
+4166 0 obj <<
+/Length 3254
+/Filter /FlateDecode
+>>
+stream
+xڭks651|~qNber3m?%B
+Iu $Q\,žwa$\/&IQO+o| qq]O|ͼlX}2ύxXYNNgI:S߹wa u>꧅!"C$կ{˕Y:yY6](t#wuuOϩ Ƙ<c7bÓ
+ؠ16m^V<$/_K׫x"U>G]fΡ4BR[<~o)mj*.z˰[K6p4GFͫJK:f\$4abNUĪ/ fN0%@^ T͆ Vp1@oy_6(wT> Ȯ`}e(-dmJMB0)(e,ȗ79b"ե.|93q9 |%2Vѷg$vVm
+,x֞瞴P[sZr|+ȏ J`pk_=,*Qpd$E{
+!`&pmB4^.a-5@k59AWZ{u̎B %jۙ9DYfZUW=[LG2 &mP5B,Wѣ=]SSF~QYlEa7$ ϵ>"^`0`Bn6ovI
+VH6ul/ΐ&qp sVGi5mN%4)$ >34M`.؂%=ȦNyA'bp !g#BiK|X.t\p`|=ly,g I ZxoDߏ
+^WܼoINC$=W<A.5#@CPj`umS{ۼg `K}[02ˇ1Ŏל_[norM]վ:DK4nbS<nGAAQBfyhAIdU#FOO15n5a&fhN
+rF
+7\!<O7>]OeY(֘nE;2ỏEl;%J}tqMJ
+ |3%&cz4 0-(̠CRR-d":L67<
+F
+0C^l'h=9sBYmS
+"SU  ܊T4z86RȞKЛԅ\
+&aOCj7>{f=iQ $ <pɑva w.>DU^ ' 'ibE4B:dn$-ZDd2#=*\_+@p1ةtHtޭ;r3?j6]<6XC4YQI ` sB{=-,9ä)f!w[Y(+d |;"{lĹCXO5ىG _ILxaxcjs)^jb qr¹[^:аQ'^V-"iV<0h_"WQ_7M!`5{:mp !R̄]Y5p3
+@j&g3OC2E PqC#гjH/=nԒrJ
endobj
-4015 0 obj <<
+4165 0 obj <<
/Type /Page
-/Contents 4016 0 R
-/Resources 4014 0 R
+/Contents 4166 0 R
+/Resources 4164 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 3984 0 R
-/Annots [ 4018 0 R 4019 0 R 4020 0 R ]
+/Parent 4144 0 R
+/Annots [ 4169 0 R 4170 0 R ]
>> endobj
-4018 0 obj <<
+4169 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [387.747 631.127 454.872 644.029]
+/Rect [449.546 389.988 482.144 402.89]
/Subtype /Link
/A << /S /GoTo /D (domain-member) >>
>> endobj
-4019 0 obj <<
+4170 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [155.951 618.184 190.52 629.874]
+/Rect [128.678 377.045 273.702 388.734]
/Subtype /Link
/A << /S /GoTo /D (domain-member) >>
>> endobj
-4020 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [253.407 177.601 331.566 189.291]
-/Subtype /Link
-/A << /S /GoTo /D (groupmapping) >>
+4167 0 obj <<
+/D [4165 0 R /XYZ 85.039 786.531 null]
>> endobj
-4017 0 obj <<
-/D [4015 0 R /XYZ 85.039 786.531 null]
+190 0 obj <<
+/D [4165 0 R /XYZ 85.039 766.606 null]
>> endobj
-4014 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F15 2876 0 R /F14 2895 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R >>
+4168 0 obj <<
+/D [4165 0 R /XYZ 85.039 744.844 null]
+>> endobj
+4164 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F58 3365 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F41 2998 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4023 0 obj <<
-/Length 3421
-/Filter /FlateDecode
->>
-stream
-xZKsFW` 1
-8_aW&Z>_"}f&&v0QG_.M16NmA=DD>]h4۬ZǬh2"$V|g ly }ec;m!dyy_pa#TTq3%5Tubj,Q3&+mEI&W <Xdq7zX Cޢ%eEΙ$6LH1Kֶ-x'tmYt O3wxwBOҀ̤Mꄢʗ/lDn6VnG>0
-%I8=>J{JKgZ|I|x9]+̠vsj]tc uR:k,ˮql}g:V;RXL\o7+gG1{ ;
-;ԩK&;:g:C]ק<=m>MT몕W[JxG> TW1.O# %F.4jiYL?,QBxH3?3 =Ná }g#8$s (2lȢ.Iw;wBʔN
-POy2i#H[W5tt ֥rzhni,C(߼~].Z{u#ߊ~m)oSP|/独&~
-6h>n98<cmG']0O\xhlo]W|ÔHRЩ
-8T: `F ~q7 l^v/%𕴝;BM=XbcfU^=C<5\ dwN76Є2p&ѓz8?ݴip8j0ilq
-_Uo-8vG6ڣ uX{b ɹXҚ / adjKFXWX`ȟW޿x#;H:ݎ}3*̍]%86^m%Fv~
-K יf5&}~ rEKnpuO֧*3q:#CKgIɄ~\O5/
-,Ev{Kh~OÅ!$;lp4~%n{lhIZV>h
-?\#WWjGSttfAU@?qdñ//@D~`?Nr?I%Q#%!Ϟ͓$w~5d, ]5|%3~rHdf#͎wTfNA>짱)hu8!Yc9!wΟ!|]j˃+wR8H٥Zh; 4nO5XЕTkjyBZ JӠ^76H8S)[J< o]
-h<~l`'e3&:N,w02N*Ź3eL&FkK ENv,ao_\.EK}c{G}vFH <͢)7a}U$N3𞙠|(R,B'1E%Jkfl
-?[x?8"]TdG9Q0Ftz$r6XN+>tAw%]X8]"ÁZ>h?)NJ+>TMp
--!J/A#n!0*Qqt
-?f0! 1GUq̣;
-(h2 &#ӕJI0
-nҙ-wS9퇶wG/|$ɳ!/-lُY6R0
-ۍ8Gf[
-qCݳښVжZ쐁>Ms)u~5۱0{[l%{l_hyX]Rf*J9b+Tzy繀VܟO]1 O;
-t V6x}b"~x.mʽ#W)NL$bMD.baY|USy.[{p+'եk>2M
-$J**K}.#3+m$H &>)q<_zm(
-y#زs^<MhrS'V hLeKXoqֿmKS·g$4 }uEUvy庳]Gk+9?"" ,9].0k]3zXf@J:D(h2hYQ=7DدP4[Bz5<$q5GY
-lXn7av/Hҥw
-ʁ^YH)CZ4HGTI2<"\Iw=<6}_ޕd]
+4173 0 obj <<
+/Length 3148
+/Filter /FlateDecode
+>>
+stream
+xڥr8_F ׾n2'[y$=$?}DJT"h4}#,?,@g$H"=ʿ.BXb
+J
+ǔ&Ѿ
+c 4#0܁~Z%` f'2,}+d'5$)G{sV
+r%\VkG
+,,zgѐbYvC4wVD63IJ![@
+\T*MH̽7 *4$LwDBFy`7c
+0pJ
+~Z@Q{D>'a7k݊ qWM@%u]4i@,47[ C_
+6:р1|_F_IY?wxs
+СÄs8U՚@;ҖDZ
+ʃ%EkQSpE*8&AŅd^5r)(alH?`n`j9>f@È!XYx<O
+@ #λPȫ<wa8bm'Dve%ِQqca| FSB)xϒbqH"=G&ƪ5\Few^<tr6IP`vPZo1.2(ccYE1Ȱz
+'݆la >/d]vKNX{O"Д\l#1IZLq@-b
+he|VMLmD3΃Kɒ$5+-֒ruoSTO8kvZ%B/=ySq0p9)GN6 I4_% C):7!JY
+qִΖ=ZN_\B#t Yh~mc طPq(9(]Uy%;A5v゙r *CE:x%b@(!\X,G$0JKYSWUߕJr&F;gwP`(u
+W]aEsu4akUO9%wp ~o+HF?n5Ϻ#UܺZkum攄G
+fӂ Z
+}V0ӂ@?̹`O˛3
+BN\|TL`-r΃#]SScHQȈ؜/NH ȽT zymy6-~ׂ T5
+[ ]j[ZP:m4ѿ,^G~6QJYliȾ+{y?)!ak$UUz :e#s$Mv8 Ү6J]IFkm\Հȵnhl.|Z|2H;^[j\V>tx$/^! :C#9  M6Dap"_$6qW#h=
+9K5N%61׌)0endstream
endobj
-4022 0 obj <<
+4172 0 obj <<
/Type /Page
-/Contents 4023 0 R
-/Resources 4021 0 R
+/Contents 4173 0 R
+/Resources 4171 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4028 0 R
-/Annots [ 4025 0 R ]
+/Parent 4144 0 R
+/Annots [ 4175 0 R 4176 0 R 4177 0 R 4178 0 R 4179 0 R ]
>> endobj
-4025 0 obj <<
+4175 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [241.412 559.852 391.634 571.542]
+/Rect [96.77 519.205 243.975 530.894]
/Subtype /Link
-/A << /S /GoTo /D (passdb) >>
+/A << /S /GoTo /D (groupmapping) >>
>> endobj
-4024 0 obj <<
-/D [4022 0 R /XYZ 85.039 786.531 null]
+4176 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [474.635 480.678 539.579 490.247]
+/Subtype /Link
+/A << /S /GoTo /D (machine-trust-accounts) >>
>> endobj
-190 0 obj <<
-/D [4022 0 R /XYZ 85.039 344.408 null]
+4177 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [84.043 465.008 210.464 476.697]
+/Subtype /Link
+/A << /S /GoTo /D (machine-trust-accounts) >>
>> endobj
-4026 0 obj <<
-/D [4022 0 R /XYZ 85.039 322.646 null]
+4178 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [362.911 451.459 539.579 463.148]
+/Subtype /Link
+/A << /S /GoTo /D (passdb) >>
+>> endobj
+4179 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [84.043 440.031 134.49 449.599]
+/Subtype /Link
+/A << /S /GoTo /D (passdb) >>
+>> endobj
+4174 0 obj <<
+/D [4172 0 R /XYZ 85.039 786.531 null]
>> endobj
194 0 obj <<
-/D [4022 0 R /XYZ 85.039 264.613 null]
+/D [4172 0 R /XYZ 85.039 424.588 null]
>> endobj
-4027 0 obj <<
-/D [4022 0 R /XYZ 85.039 243.416 null]
+4180 0 obj <<
+/D [4172 0 R /XYZ 85.039 382.303 null]
>> endobj
-4021 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F66 3242 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F20 2865 0 R >>
-/XObject << /Im1 3957 0 R >>
+198 0 obj <<
+/D [4172 0 R /XYZ 85.039 310.72 null]
+>> endobj
+4181 0 obj <<
+/D [4172 0 R /XYZ 85.039 275.974 null]
+>> endobj
+4171 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4031 0 obj <<
-/Length 3777
-/Filter /FlateDecode
->>
-stream
-xZKsFWJb+{%ƩF!aHB$x
-,ny*YzSn0=,Z{x7Ah٩N*PY~bH+W&MҬ1΂2PO2L1nڔ‹S둽`h4{ul<J[rZi6U*S|<I`aZ*(Ĭ vzH<MY49 2bЌo M3s}޷5͢[]ˋ
-|j <m sG~~-)8ɉ7fx+vk0v= {:jh@Y!NeȻ/mE-iQ'2X '@Eʼv(F1sn|e~c:IkXUUEGҀPps3;=@J7kl=)bLؚJiΧhRpv,Hw3ռc&2ϖ6VӱlVˌCOZ A}ۨa/m"KX{ Օgu`낼ODJVH3KNT$P |uVecWV5a=ҡ,#& ;֡Lɺ;#4\X9K
-MzVOUrЗ͖R@exol|Adn,jh;'A&  4']M
--esD;q\4KҊۑRᡷ|Nݲ^DdޠMs;3piGE6ཀྵřIyx(\ӠXYU
-ΡK}TRx g:#tm
-Ǿ &'~0V!زåUAdNVbðم=ƴX,q;زgGPBK=fw`9A9hZϗ7}b8ŷRL_qG]
-~!ZBت\ st6_>0RIz n@,q3 |}9Iza"@ Q, '9!i oJEӀAݎ`/v0Y>OShOlT\y~'k>64\Av+֓n$H'R ʐD&gKa:R1"KYU̾b3кe$ס`ZSإ\d-Շ{:VNm;NEz/P%RI!X
-.aпr UkIrot{r!l!0g yX4al&.В$-b0+²)
-\Ut+ywHrڴViLt[É|
-noOh۰eGa,
-QlOxJ+> ?N5G-N/8t}}93avOEHqjᙐ
-{WM/JՃD#&H:Y}ЅĦ+~IGIg*ďD.{;~c_S'}gCW"7v7dU0 zAi9%o*&
-H}0B<HX`+bBN')_J6N8ur,Ꮣ XM&sfE2?9QHa
-I: 0ajP1f0\"7q2樐 .ufkd7yA{d7 yό#\1hͤMYks8J~Uq8U_x_L[:fy
-akHq&*n#B/
-+h?7&<I/eFG ԲqgjLnÀ,Ie.0Ppf:ܶU&N5Nб |Qv euY g0 HG}\-VO@!i89L+ë́yƃ 6F;)->mā3=?y1F4|c1끆 ^\25ï \aM]qޝ$5|=9ƒcwK Uv|V'mob`?f#n,/Ґ_`FW1<#5vG
-'"Pw?'kO+$l ; &u@7
-2yrDBtcy2;/hPnc 5xfr`ӏN,+c<Ů$ 7Wc?žCVǃ~5|8
-߉-p)U>C'S,E.a~ełYG̲l]=XYaĹ0d+c Mo 
+4185 0 obj <<
+/Length 3578
+/Filter /FlateDecode
+>>
+stream
+xڭr6-TUĐ=yfRo9-F">o
+'*=KD@ 56x%0M|YM*{3pkOJY7GH
+KΜ5&zd̺}"ϦM
+"t_%8Vtx 8x@v2/Q-(Bb^@A(8;z"Xr-]TuU!6GFؾ{r2m*{2y@ƗgscKz%
+a 2>6pK}80>Car(afAdNH9Rp ^8 HzB+Rˉtxب ޱZr.=3vhv#{RnωlsV,%XK5la&'kEҁ\@r!;:mY$TՎ3G psO2'yTTl6ZU2e8X N5t~:2 R'Fx YK2E8 zE脘OXSY {eda:m7u. .rGb/96 I8VrY2#t<UKyMz4;F=2oEk(dKo.ri"@rD`{֨3)k [E?
+ ̖]k; |Vꕩ$H;jaƽijd
+`Etz2) H*nH)}e6JX^,8`$8ԄNg
+~n]0Dh Wc5BǸ}TDEk=A5S81VKM#y&ZΕ2n #IQ2|Wö-D(g^c* ә˶Ht >Hcg:䑍3*B qyt%|`\?WIX(a&ց0O5O#crR>n^q {2A >WmlށM<:&{%>x|@SE L4Zƾqr>f/}2=]'sOfgGs%c4 F(Ay`6N+L,=`eg@%I\c3bp6Wӝ v O(#MnP%巿` tA_`> 2uq+DiXBʏ #!2̲E8r*,"CUquиP2|ah<͏y5a>gYOb#RXEyW|h2=֒b8M}]d ݜ\ˆR"'@L(\3HD*oSp#Y*܇H绱K
+8 ,endstream
endobj
-4030 0 obj <<
+4184 0 obj <<
/Type /Page
-/Contents 4031 0 R
-/Resources 4029 0 R
+/Contents 4185 0 R
+/Resources 4183 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4028 0 R
->> endobj
-4032 0 obj <<
-/D [4030 0 R /XYZ 85.039 786.531 null]
+/Parent 4197 0 R
+/Annots [ 4196 0 R ]
>> endobj
-198 0 obj <<
-/D [4030 0 R /XYZ 85.039 149.668 null]
+4196 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [128.13 65.894 319.829 77.301]
+/Subtype /Link
+/A << /S /GoTo /D (passdb) >>
>> endobj
-4033 0 obj <<
-/D [4030 0 R /XYZ 85.039 128.471 null]
+4186 0 obj <<
+/D [4184 0 R /XYZ 85.039 786.531 null]
>> endobj
-4029 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F14 2895 0 R /F20 2865 0 R >>
+4183 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F36 4189 0 R /F58 3365 0 R /F41 2998 0 R /F37 4192 0 R /F66 4195 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4036 0 obj <<
-/Length 3108
+4200 0 obj <<
+/Length 3150
/Filter /FlateDecode
>>
stream
-xko/۹8T[$i=ԑ_y-Mswvvwfv^;+{f= =rYڳ̚e0 kLpٖYlH(gnp]"B6\2r ݮu7wB_Wߟ]-|p,?L7
-gOжL;f3幦\ggV15Y\-홮eس nZ`! 
-e釪~sρ5w="W)EɾuwLI^"#
-LGY d'0hu<_,[پ( @^6
-4"*E@Kr-Rp[ĈH&/{NAkDtd{h(Fk* Q@{#i{<́+敐ƉKkߺ"ʷUYg@c ҘR<V57PvpuE0m:_BIy*lm0
-ۊ9IyzQ!kl-Tĵ̾};ck@
-@`JIT;ISBT@
-xxq03wzڨd gm-ZFdMDYFggh.[6oY#=C{yW~E -ܻLQn>2fd`KmڈHc˳ J-3#7}>gY]#t*@3w{d&Udj (g\dq^9@oT؟$4ŁkxקJ(ydm ]d%%A#wmcc|fDp"0mj2C`ej#X$Ho
-.=\Sd?r| pw!jA]=9>xIQ [!Rf1xܡ |>n=%b/˃`]r|tJbѺ2\JUWF
-]7]R8:6= Y~GEjJ~$WR ^.?( qJ'rI֜a4q(ty[bp{."%Z DweQ([>
-ǚBcq$@K
-$/[].o v"-2qEU|v ܗẦ #hbz{}W
-{ʳu]:tK*cڰIwsc!R;񶋐0+Vp9 2(P ׹tF];OdTJIV1U'7q!|WFD=..z׸:CV em> # '|ΨÐ*rAR#DbF/甫e'pGZeL\\^$Z'sC߄}=7_rMG/ЫgnFjUP9=%:3I7h\2L$E~}]Rۣ E˩yJdxEtUp
- g% {H,aLl_J/nʦėa ?J)!CW
+xڥ]s6ݿBof* ~g{PĆ"_(;8v߻('UM4M'LML L@fbV~)ddûx~;4a:KԻ8އδS7s}_Ϯ掄: g& 3Y:yuMg }^ݝ˝kфwׄoڌ\?p¥L->O ^WWiSxM L|`0\:oeFAl*Kk28ok9-6|7h%J85Ȍn~y~0Ava@)߷b)No# W{/W~!měysave(~`-6%1Ӂ+6!@e~Bwr*SDha0(P;oZf
+ BGT@TΎz2N`a_2
+];׋;pGVFh%o4sogb@Iӟ)pWԗ Ò{~
+٨Ե"g!4;>, <P NB:.˃4%C
+ I`r"EP
+lr mF nJEhMCC$Rh[( /얄dyxۄ>qŐ
+jp
+b<@qG֙0*0ke qbq 2\SV˕0ʕ,$ X.K.!)G, ^eG݂|b/J,h3_yv,'D % y`1RlW[|] Jh6ksfom^gCMvՐ1AF&+Vc":|_ܰLrʆa1ݕL0TN 3&mrΓ<-,zW쐬rR?m -
+kFy=ܑ%B ii\y<P6;-BUr
+`Ewׂ)ϝ/֤)ն#`Po0q u͸ k'#+FYaklBcTc!6M 6B2W۾c\)hrzC#CÐ5-U잍{ QqxInbm[Zi
+7vMDQȁ{64endstream
endobj
-4035 0 obj <<
+4199 0 obj <<
/Type /Page
-/Contents 4036 0 R
-/Resources 4034 0 R
+/Contents 4200 0 R
+/Resources 4198 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4028 0 R
-/Annots [ 4038 0 R 4039 0 R 4040 0 R 4041 0 R ]
+/Parent 4197 0 R
+/Annots [ 4203 0 R 4204 0 R ]
>> endobj
-4038 0 obj <<
+4203 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [372.214 454.382 454.872 467.283]
+/Rect [465.728 117.052 482.144 129.954]
/Subtype /Link
/A << /S /GoTo /D (domain-member) >>
>> endobj
-4039 0 obj <<
+4204 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [155.951 441.438 176.004 453.128]
+/Rect [128.678 104.109 273.774 115.799]
/Subtype /Link
/A << /S /GoTo /D (domain-member) >>
>> endobj
-4040 0 obj <<
+4201 0 obj <<
+/D [4199 0 R /XYZ 85.039 786.531 null]
+>> endobj
+202 0 obj <<
+/D [4199 0 R /XYZ 85.039 532.034 null]
+>> endobj
+4202 0 obj <<
+/D [4199 0 R /XYZ 85.039 497.288 null]
+>> endobj
+4198 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F20 2965 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+4207 0 obj <<
+/Length 2494
+/Filter /FlateDecode
+>>
+stream
+xZ[o6~ϯ0dkFD]؇NѤċYV﹐ 5<l1H"?9<r?Ht'P\NW
+xmC$gz;Lfӛ z
+%|NOSx!k:<& - Hoe(tRrZu7xU&HҺcmIr6j/!x06O7#hHuZtfKw؄aE=
+Rܸ;qhBR#٫٫).6|\f1lȝa
+яhc22Q[w~9u( Q/T)0D(a`N^+)Ҁ=ODŧ4`uOsD OrqS$<kk\Vvb+OEP(\f%YF~<#yk;]f8xeN- f{n(ʼn!*X3ʄ1q.r'3g6yM3ŹĊ*^1\xtA-PK1)pmӼ%u:HvBD`Nq+HH.f3|%'81govJZN%RDa2RESbNS YwJ3]|İIy6ק:jv7PX(F8mcOg&25]hsO u$%ZƠh A<un(~U1k3C4
+_ş a?ѵEσ쪒O ^ ·@ !`;Yas1}9HgtBDqղ>Ki5Xendstream
+endobj
+4206 0 obj <<
+/Type /Page
+/Contents 4207 0 R
+/Resources 4205 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4197 0 R
+/Annots [ 4209 0 R 4210 0 R 4211 0 R 4212 0 R 4213 0 R ]
+>> endobj
+4209 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [430.884 336.518 476.755 349.42]
+/Rect [411.818 654.091 501.976 666.992]
/Subtype /Link
/A << /S /GoTo /D (NetworkBrowsing) >>
>> endobj
-4041 0 obj <<
+4210 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [138.589 322.969 301.915 335.87]
+/Rect [111.316 640.541 308.036 653.443]
/Subtype /Link
/A << /S /GoTo /D (integrate-ms-networks) >>
>> endobj
-4037 0 obj <<
-/D [4035 0 R /XYZ 85.039 786.531 null]
+4211 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [296.274 117.852 389.789 129.541]
+/Subtype /Link
+/A << /S /GoTo /D (ProfileMgmt) >>
>> endobj
-4034 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+4212 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [410.326 117.852 482.144 129.541]
+/Subtype /Link
+/A << /S /GoTo /D (PolicyMgmt) >>
+>> endobj
+4213 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [128.678 104.303 153.762 115.992]
+/Subtype /Link
+/A << /S /GoTo /D (PolicyMgmt) >>
+>> endobj
+4208 0 obj <<
+/D [4206 0 R /XYZ 85.039 786.531 null]
+>> endobj
+4205 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4044 0 obj <<
-/Length 2913
-/Filter /FlateDecode
->>
-stream
-xZIs۸WHUE4p;29@$-"zEJtrJn;s;Yv໳tsV0
-gl' pP\Ndv@$g}+(k}:µp[s/?οq~B*qo'8 Dı$=A۱$mNTہ_ܝsjƫ&Z(/cDZ\;vchN
-"Uβ -*B(Kc;c{l
-4WEA\P !ڵ9&izkM"P\q[;HIKy8xr O`1$Uoj;KvUj*O8q}7$>$~ ^nE "R>38Z\t4u;*DXw-ANnEZc;#겠-94ZDKQWi@w 4:}B>N&^`lP,ZuD]-ۉխ5vX 섏yr@a8N ɨSJ [7D?+k8WnA 809}BP_ǎHQr g880}c=2e8P~gk탭AU?o.ZX?ҝr|Dև\ZU bx#3TL{FVȳ_6x69P3n̄D#6\f)snI] "| Dϒ}B>oRw$t**Z1yHSaG9i ѱ᩻8/m?R%V+ ~RQ9HH.K0R
-jb#0&b
-0 *wsĉh+ )Ȗۑ<eaRl6Lsx6jק)tnlou{@<g;* հe
-8=@aoۈ~&pA
-Ӛcd\3 I[\ӎ8ԧ
-] "w80d)82{ 16 i>Չ jr0_6pFѵ*!WuʏHmɝþhbum.?>'Ƞ1!,]o+ O
-@4י񶌝I
-wbb^;l+nH)}^ }
-$,]<BpIaz)`߻:DӚz>s?lknd480r1<?˛eTb$C/!ؔ 5<X#=Ճ?vNb_!%]6rA53I{Z S#L-G&Ⱳv$HoZcBl
-3*=0{*. ee8uG7xO
-=B! h˃ K7Csa
-2-fnu>'p rĂ]o8 4cgGɏ'=Rin(М{*M  ETn`T`zG^ IgE-af s"U.vX}<̈́`F-
-lNj8(sfOOѫ#u;oKv'Kj8dxpb&{9 ^U2#Kyn
-En&caի#>Cn>ωlJq3RQw{ٝ잯'v#򀅗
+4216 0 obj <<
+/Length 3513
+/Filter /FlateDecode
+>>
+stream
+xڥKsH_۠@c'Jo9`~F`*jZ%t'/v~P'^I=WùMvכ8Nok||WrpG~|,$U /oU
+*敀V==[8}'mSVx|I@8p
+ٌz#ViSnow }B''wC'6
+.%ҞA6AxwyLP<O
+VB[*QK:Q5ZLIgUuW7=|@sjr79Ew 2
+cDKZVI5SQ#Лʅݸl*֍3SA6dIQ[&  ǐ<%|Z'!;8ry=ی/pTAƣJe<;KfӈX8랧'{U;)0G$-G} aȼ#x'54̳S/qj
+ИY 3<;c15'8F  йDU[uN?GgH"yn ZNY "D! |'NC&k!%i5,&w#$8:D^?*v-  T3>LCƁ;
+$ifXICPˆ`U@
+f> L0 D;^xȓd v}|gyA>/g ,k~x0Ԃ&rfOZhKΩ:p'rs,,L-PU
+;0fu=?3|r {`q{Vnlj Zn4}! #U~5`(/a7t!Z 8
+I 0I S85j(v(Ps۠P4gGY\W˹IK1XAb[(H}7:잔BǎxvdSwyE"QK6ÎD, 6~T5M16xL&@))v@kmR'
+;DuvwKy kȲC#0PAAf3a-&hW*q8Z/P j8M%p :KS
+Rl+ʇTSmME7gY7H:^-j #pNy`Db-ZP[ $=?<p}Ia݋iNGͮzp#BK zk|͞; ,
+/ Ee)d#B 'NO]_=P[T\(@o(yH3}[횶"Wl#u1Gak
+W*<A*W=60/SeOa5uEVN۝#xj*vfħI2O>%}RCI[
+gY18p~%
+ly
+ޥK+Ec|Ǔ}8%eF1%FJzzŏ{xRckcnء} E$PXB
+39{ƢP9km 9EZ
+i;|Cف~Ae(ɔIۂWӴԉ'R̥/Y(}(XK/ՠr;uy 5rw)]#86^V% ,>}+t\?,H N3&xJ!Dbe7Ǝp(}Nz]&sKv8|RύvA0(E37RG~uZ
+k:*oyi<nLv1:kKݠ#G1^&ꖑRH$ș ^M
+CippƋ,c0ŝ]
+r(J#n7o^+I|^)n7
+uOs+ FykWEʢd^y#}! "U1tyS4mlF%,b5""?3~M,:{endstream
endobj
-4043 0 obj <<
+4215 0 obj <<
/Type /Page
-/Contents 4044 0 R
-/Resources 4042 0 R
+/Contents 4216 0 R
+/Resources 4214 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4028 0 R
-/Annots [ 4046 0 R 4047 0 R 4048 0 R ]
+/Parent 4197 0 R
+/Annots [ 4219 0 R 4220 0 R 4221 0 R 4222 0 R 4223 0 R ]
>> endobj
-4046 0 obj <<
+4219 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [380.998 669.256 454.872 680.945]
+/Rect [485.279 376.196 539.579 387.886]
/Subtype /Link
-/A << /S /GoTo /D (ProfileMgmt) >>
+/A << /S /GoTo /D (pdc-example) >>
>> endobj
-4047 0 obj <<
+4220 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [155.951 655.707 181.035 667.396]
+/Rect [84.043 364.768 109.672 374.215]
/Subtype /Link
-/A << /S /GoTo /D (ProfileMgmt) >>
+/A << /S /GoTo /D (pdc-example) >>
>> endobj
-4048 0 obj <<
+4221 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [203.943 655.707 296.401 667.396]
+/Rect [522.435 102.224 539.579 113.913]
/Subtype /Link
-/A << /S /GoTo /D (PolicyMgmt) >>
+/A << /S /GoTo /D (passdb) >>
>> endobj
-4045 0 obj <<
-/D [4043 0 R /XYZ 85.039 786.531 null]
+4222 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [111.316 88.674 313.187 100.364]
+/Subtype /Link
+/A << /S /GoTo /D (passdb) >>
>> endobj
-202 0 obj <<
-/D [4043 0 R /XYZ 85.039 316.95 null]
+4223 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [128.13 64.578 276.157 75.986]
+/Subtype /Link
+/A << /S /GoTo /D (NetworkBrowsing) >>
>> endobj
-4049 0 obj <<
-/D [4043 0 R /XYZ 85.039 285.424 null]
+4217 0 obj <<
+/D [4215 0 R /XYZ 85.039 786.531 null]
>> endobj
-4042 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F14 2895 0 R /F66 3242 0 R /F35 2880 0 R /F20 2865 0 R >>
-/XObject << /Im1 3957 0 R >>
+206 0 obj <<
+/D [4215 0 R /XYZ 85.039 460.125 null]
+>> endobj
+4218 0 obj <<
+/D [4215 0 R /XYZ 85.039 417.172 null]
+>> endobj
+4214 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F36 4189 0 R /F20 2965 0 R /F58 3365 0 R /F37 4192 0 R /F66 4195 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4052 0 obj <<
-/Length 780
+4227 0 obj <<
+/Length 2317
/Filter /FlateDecode
>>
stream
-xڥVo0~eZ
-[Wmiej@IЌڦY`$4EwaۄgA8kIn@s!%_ [k@p+12LFl^vh;
-pp~=?NM峡etFC'\>ήY˝o*#4S ʀBs-Qd\=ƝsK%ʪ'*˕ۡ|C6:.y; @T *
-Vn$8X 9J
-M="# ^jVz߮I#v_z:~" ۬J*|MYq AbPunϚR4 ,:h~!]S8oX(b/=JGgsD57j
+xڭY[o۸~ϯbeVD-pmڦH8/>0l %IN6~Bʺ%b-` 30b?1ד,C7bڟy-|<baHߗgp&<7rI<7HrynR:;_DQ켿 k~7_u7cj}b٪QRH
+woe?yL|{HL 4[^fk꼖b{ncqQqr Nypğ$U^ u(R [|JE%]_.C˰ToOޣx
+E0 mc4@'ԦȹG+T,k>)+/( -Ok޿pEL=hCp=o #m͙Gt iYYc]^PV۪<h={74z}oȔ̉^xknQ޿1.ۃ#q{rJ
+*5Z_1+]͞IF=t]uV?9/bgno)2ŤձBlg5)pNU| ?Y Dlj#c䰯ܖ
+lQ)ԊM| y`ѕA),$$hnj؛ (z>8b$r噲
+ a淋5eoWE 3ܨogܑ;NЌpA^[RLgF8ʆƮg,^!Ǚ8 ъv씵+,Ƈ6pvL )i5׼j3qO]F~}07=MQL߃x8J勇Z d|`Sl>*z!ͯmꆯQ& dizH~d_,E8B
endobj
-4051 0 obj <<
+4226 0 obj <<
/Type /Page
-/Contents 4052 0 R
-/Resources 4050 0 R
+/Contents 4227 0 R
+/Resources 4225 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4028 0 R
+/Parent 4197 0 R
>> endobj
-4053 0 obj <<
-/D [4051 0 R /XYZ 85.039 786.531 null]
+4228 0 obj <<
+/D [4226 0 R /XYZ 85.039 786.531 null]
>> endobj
-4050 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
+4229 0 obj <<
+/D [4226 0 R /XYZ 286.841 769.79 null]
+>> endobj
+4224 0 obj <<
+/D [4226 0 R /XYZ 85.039 376.337 null]
+>> endobj
+4225 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4056 0 obj <<
-/Length 2543
-/Filter /FlateDecode
->>
-stream
-xYKs8WTՈ!nXɬ<J6T&Xe)RCRx %2*h4@&I^M4v@MV o/px-/|É&{bY8W|y: ,IRgq/LΔ[~|~]t~9Xnaz_|Mְ.<73=Wed{FˋۋY)<Nxȩf~ xc (GPL~n1{p$'rtvX'D)75(C=#T\'pD^eڴ~\od^Þ&aT}tˇ)niм'!HJ[㧁~L[,4sk0˒;-SWetzjMyAuAjꩰ %L@p7kyh[q@yͥШ+(%tD8.K:6,NrA(FN;o+tٲu겮U9Gao>Uԟ
-Nsۺw*^IMCs] \1F#yB uky8w;$0G
-S-P
-/y#ls> O,?ixN-<77x)=ҫ
-֞Oڳm??[bң,]R0f_6e}˯#zWsȤl8:}_ ?mԇ#W-Dְ|ϜAxrˣ0LOGNendstream
+4232 0 obj <<
+/Length 2558
+/Filter /FlateDecode
+>>
+stream
+xڥYݏ6߿t2pVDQG}u&p(>hmV#[$g)k'A" g~3d$?j0$h5YnVub&$3ͫM:QQXDdvr(4E:Y~ ^t~tL8eYMU_Og*>L<xw?}͛SSRi
+yd|'O0BUMbth-7vx-0%{-,`"sqh2SH!w
+&3V;4()
+ujL%N0J
+؞H1i?ZEvj2oA͉yrIS{"L33<T"U)j9ө ,΂3N,] 3TwL4럐R8%N$Xaixk^=|sa[L+3O"~4hؒ) 0
+2wb?6e(b-!V"fQø(@+UWu@%QΉbӛUŃU݋,
+LM+{1,cWS!'32->ɝ$cpY ~%z)`$pSTkv[6c?hWr^vk9ص
+Bl=Zk "x;a5 5X4Zi6 _=eap.,]\VWi˖ Jc9ӠqwQСxvYelq ipK2
+*BAYcga
+\ci^`JsHngF)3#[m917{Fڌ hwAQ ~`xeU#,mھ]bگ<ܱ?, m,'qKmҖ'U- .
+C5J&>44Za%dlK%
+t 'Nmc!8!Ll<{
+\_b*ţzˊ&[[ܦ0!jM0x)N!Opl%xsJzr͚TY kF.lzLZc?$Fx6(`Z2*
+{$J\E8l+bekыo1;K<tԸ\ 1ީ;]wV$H뫽IZ{57ޜa_Ucɟ]_wUdaGh\c+'C1U0Rnc=XO%^V΢03Gs5CU=uAѡŅyD*yz_&!1Q6b ٸ"~4w&a0ФANAnl'f*Lc-\(a;%/
+/؁R
+Am 0=33Cab{yT&9Kd/e!H.tc>H#, NtZrk&_9٬b.Ӓ<,+%! Dr44
endobj
-4055 0 obj <<
+4231 0 obj <<
/Type /Page
-/Contents 4056 0 R
-/Resources 4054 0 R
+/Contents 4232 0 R
+/Resources 4230 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4028 0 R
-/Annots [ 4058 0 R ]
+/Parent 4197 0 R
>> endobj
-4058 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [177.134 510.155 365.46 521.844]
-/Subtype /Link
-/A << /S /GoTo /D (passdb) >>
->> endobj
-4057 0 obj <<
-/D [4055 0 R /XYZ 85.039 786.531 null]
->> endobj
-206 0 obj <<
-/D [4055 0 R /XYZ 85.039 442.636 null]
->> endobj
-4059 0 obj <<
-/D [4055 0 R /XYZ 85.039 413.9 null]
+4233 0 obj <<
+/D [4231 0 R /XYZ 85.039 786.531 null]
>> endobj
210 0 obj <<
-/D [4055 0 R /XYZ 85.039 300.495 null]
+/D [4231 0 R /XYZ 85.039 553.022 null]
>> endobj
-4060 0 obj <<
-/D [4055 0 R /XYZ 85.039 271.091 null]
+4234 0 obj <<
+/D [4231 0 R /XYZ 85.039 517.711 null]
>> endobj
214 0 obj <<
-/D [4055 0 R /XYZ 85.039 229.396 null]
+/D [4231 0 R /XYZ 85.039 295.912 null]
>> endobj
-4061 0 obj <<
-/D [4055 0 R /XYZ 85.039 208.199 null]
+4235 0 obj <<
+/D [4231 0 R /XYZ 85.039 252.959 null]
>> endobj
218 0 obj <<
-/D [4055 0 R /XYZ 85.039 141.062 null]
+/D [4231 0 R /XYZ 85.039 197.715 null]
>> endobj
-4062 0 obj <<
-/D [4055 0 R /XYZ 85.039 118.346 null]
+4236 0 obj <<
+/D [4231 0 R /XYZ 85.039 162.969 null]
>> endobj
-4054 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F15 2876 0 R /F14 2895 0 R /F20 2865 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R >>
+4230 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4065 0 obj <<
-/Length 2988
+4239 0 obj <<
+/Length 2549
/Filter /FlateDecode
>>
stream
-xڭYs_3!OhJcٍ3@" w{PNьpw{'4v0$܍Cܜyay+7\oh{ne;&->;o޾p{tY{uu-7ә
-37IZvl8u>dF
-Xq&:$He9Q-xAk
-D͝LXI %0.y\ 쉅$yAE@{L:keġAF<Vz@ZLr潨|f:(BP>il14!F_-aI8T[`U/& 1lQ b-{ϱ _Qy*r+
-fկ^ m]Q"<N_J";@2b"4āG)Qo.DfKP_V2WްHЖjgL m2/9D6;7=o!A2_'H*?6^ug-)VB6R^ /{'t] y*tٺ\'koҋ ",LԦȝQ2->mis+Sf&_E8\ 3@M1>sUwRoG 9`cVmK_ÔE(K}Cع' #;\~]-9 9"*`A.PAVpsqQ+|o.!U$rp"B>
-e""QFԋ|xl'hvEZ:Ψ j~)$Fej$:YZ ߗr%D A"éb]> M?8W]+2njh V$e4>>*z/l``MC]ԬUdkV[Sqk\I"_)s@UO7xy-e]YT|8V2`!ejćɳV N[ښ]!BotoRf+Cɭ_LVqv $;.d]̡M⡙-PV j0I3
-B<~|S5 Qr.5QCsŁttV_|2_.n< ,jI4Vh82Xp8W65CFm ZZə2ho+Uvaf- >B9J8_S v~6[-kkm5PÁVˠhgo/seJǶ!7Ue#l83!9m'C-6(Zqe-T)3RWHeH(ԭ4:ڀi@A>
-e jf4f|kSvmC)3*:"oV/T^O?ܲOh.rn;{ )eFv(qobH/5nG Tg##Ef[d@e6p~U<PukEiE1Ήɍa75wDZ_2U0˾SJQj6jMꅅ@0inU*E6YhU.nF0c{ꪠ*Ƣ].>6XԆOp^HABn\6"bS }ѫQkn%L4#Pif ߼ؓ@9ӉKw=;gUR%fzRTĭ>L1U)eV({
+xڥX[s6~R3M3}pl&I;i D﹁,ɴsp/lp4ߜ,Lz4ogQYˎOQ廋IՇq\$pv*>:2zډ2zK0Z?̲Dڏ~yvwϙ:O:.NNm&ejhP% RЬ%q巓M7&%Q+7FZhnP*s4eB/(;HJl*fEZO,r/`za˒˗b0$BY! F^ Y~.-,k Tժ6,<8^|g6-^!
+y(#tx 4]mE0YJWI|B r&z]Wfי"s(驒E^>/l#wi[Ւin̢Â~ȴ(KmdtJP,Qrȫ1dSlhQ
+ |f# 7!B ~*pLx#H&4$L4p~*sԓTNz|9Y=UA&QѼFާ,88711i,biUˍ5GYѮaatVgBx37ZhRixW|;5YҺ
+r a_CYܣ9֋Xs!E(o<ݛ]
+>>;>dN5l*n1<tRY^)VpwR<kZW}V},Czף<
+T
+K+劽C
+S/_M+|FC۲V[q-P購Cz3;9{o:35nxI`yl\DsiYѲ6]׀hyKP̚N-s?y`oCnY-)Z]a$Kл 5Bg,f᳄
+?t& v{:RP^?QGr n/4#TR>޷<j} cV=fၡ0:Mۘί<RKMכ%c1oJ|0I"1 NUMR˳F[ݏfc;?1jZB3 0<"
+5 m`KJ~-mOLb8`yA>x7|` kLHI9B˖
+L@=qJQcqI>5G
+<vCͽJjĆ1vTzaAq6Uy,=!kY+`S\=޽'"e4]k<nHsWTuI
endobj
-4064 0 obj <<
+4238 0 obj <<
/Type /Page
-/Contents 4065 0 R
-/Resources 4063 0 R
+/Contents 4239 0 R
+/Resources 4237 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4069 0 R
+/Parent 4246 0 R
>> endobj
-4066 0 obj <<
-/D [4064 0 R /XYZ 85.039 786.531 null]
+4240 0 obj <<
+/D [4238 0 R /XYZ 85.039 786.531 null]
+>> endobj
+4241 0 obj <<
+/D [4238 0 R /XYZ 286.841 769.79 null]
+>> endobj
+4242 0 obj <<
+/D [4238 0 R /XYZ 85.039 606.673 null]
>> endobj
222 0 obj <<
-/D [4064 0 R /XYZ 85.039 659.087 null]
+/D [4238 0 R /XYZ 85.039 584.356 null]
>> endobj
-4067 0 obj <<
-/D [4064 0 R /XYZ 85.039 636.371 null]
+4243 0 obj <<
+/D [4238 0 R /XYZ 85.039 564.231 null]
>> endobj
226 0 obj <<
-/D [4064 0 R /XYZ 85.039 398.984 null]
+/D [4238 0 R /XYZ 85.039 564.231 null]
>> endobj
-4068 0 obj <<
-/D [4064 0 R /XYZ 85.039 375.662 null]
+4244 0 obj <<
+/D [4238 0 R /XYZ 85.039 530.087 null]
>> endobj
-4063 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F20 2865 0 R /F72 3966 0 R /F18 3969 0 R /F15 2876 0 R >>
-/XObject << /Im1 3957 0 R >>
+230 0 obj <<
+/D [4238 0 R /XYZ 85.039 249.795 null]
+>> endobj
+4245 0 obj <<
+/D [4238 0 R /XYZ 85.039 215.045 null]
+>> endobj
+4237 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4072 0 obj <<
-/Length 3899
+4249 0 obj <<
+/Length 3375
/Filter /FlateDecode
>>
stream
-xZYo~ׯ B+GJ
-Љã$IC߹8>էGUo0H5ܑrUx(`JxnG({e큊B7R\p6^3:RA BMSeG3`%κjy1Pі벥~Pvo]9ɑrm-uq;v@6<t25ccU#?];k%*#+)S}%_`!rF ~7\3IlJ8umEc¸nz~xl_VGze3lhZiqdO>ʱ^IUxX9)bNA_<_b6+Bf]pP([ m3yā-:Uj##|YsK>A",i] q;Ξ曋LT,ylyG8Ҍ$:ω&a40K jNJ۔e*X8h*e>;&ŋ<{ u+V9pʋLD'=f:-wZ Pj/鴽`/RS߁лU97F|;1e y=א
-UaN-DMm
-X>";LNW!l`N\/X z4k?
-%c&D;%kmٟkUdDXH$}!g)? sNK&IIGs0IC'|
-ny=H@Ƭ3jH/0a0lH$@i3[^E|(ԡbK OU&ÐD%H\G>sNb7в&q$`cQI+W@Ԗ9ӯ$IZjUߴχM^W8k;÷x~Ƣ 5'cƱWN16қ8@p2c (\1(z|ﮕ 64l(PCt+b,H [PV' G#Y!wΡ M>=Y*\9>wiGE~ʷPˏ7Uz~thzͱA!,%:>VC۬1{ *L$H{r ld54"H2fa2FDh`n)@( +n+ۗE+``b
-
-Pv)[Q
-(ѲxzwLv5sġpֵ0,q技"`*!R[nqtk6J߻`4u,.W3& (LA
-~1`Q+k n HJaT~S 24|$\UpzcIȉq@Ʀ).4QYY%OB7 Ԭb8J|)smQVͯp9gsf­z>SXdFĔ'X0t2jK'XiY."6?|8pNv2Xx1եXKmEr'
-J kf& _sՇ-mz&a{{sz>˧`gA[ m);B PX28/7c}w93
-AzăHaP{?Ϭ$"Vc!)IqO9V8n8?:: sVG3_ogR' R;!m&HrBby1'uL+Vb,VEmny |0<m1R߹)@\l0 7+}a?:2>Sbt`]'qFW=kA~yÎ)UdB2N3.J8b>EY-;8 h'!@-ZR>UgJ3Xt"R"KfSZ{| Hs\PNEE. `#rkaC]P Ċ}+7OZ7GrV 罫v
-/^i,0{lB*a0Pl{Z2f@`iiil{|H{`nxkNoXLR셰
-Ak1Ʉ}\#A\ Ѻrp\?]J48W<.FCϫ|l7߰զY
+xڥZ6>
+Z4
+=Cd_|`_nƾg\*ib5o&BSɍ+5͊[(K dbp}PDWXudWs1gj](?W Ѯ>Aw90z$Mhмe`[N&(>\plRdU; رb6Z\~
+(6pg~ +jU1Jϸ覥AFOLQ[P U]uۃ<yؒEVFmޣL8v9.-N"a|c<`@:Zj0AsFd =xn ͆f-G>
+Ÿ>Ps8Pi"nk)
+lHe_1 2PzZ
+D̈́Xz#-XnՎHF(( Ϝ<Ud`19-&Z FU˼̰I*BT$V6ji zqct K#)ͫ^fhҴS؎ԟ:2:\a𬹲Ϳ`MGER1-mmuT2R P$y-#hhqMǧ9힭*
+;BZ,쨵VR'`+!晏3(9uDBp}W$OPU%KZs6FbÐ0ç=JxLWuדABq2+B܌B%{è=0ZkFPzlSQ{ Ɓl𫆈CB߸6Dj[ xs&`o\T~gZ4׮,u$4|p{8n
+rj6Msz:\hYiLc,w=ɒK5԰$(k@ H (Q:9 o5Ϧ0jTn M<B0P7GSz zPʗ3@ {pK $eu}5$A; 6xokSW_N3+! PB{ZD|aDW=e8H<jz LQ<sSc,q89ctM62|U&4ĬdcV ˤ=yA#%b'~큛Òav> !}h/(樢7cҩm* ^= ՇP=|\w~ѝ2,Nc@3eB3XvbNMg̚,Pjlj*K+>\_D
+*(C& AqM&ǦmP#~7}E':/3%i9oQN#~]YY'\_o ʛEaGOG!d99bir/,Y4h/Nft/kL/ Z(웒!mU
+}:FX
+ z9HӶXlu" frͰa"
+C쌄/
+THEI# kߠ:lCW~ck-rb򰌒yhQqH\&\?;,c'~7XS7Kgo~b.Xxـendstream
endobj
-4071 0 obj <<
+4248 0 obj <<
/Type /Page
-/Contents 4072 0 R
-/Resources 4070 0 R
+/Contents 4249 0 R
+/Resources 4247 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4069 0 R
+/Parent 4246 0 R
>> endobj
-4073 0 obj <<
-/D [4071 0 R /XYZ 85.039 786.531 null]
->> endobj
-4074 0 obj <<
-/D [4071 0 R /XYZ 85.039 695.734 null]
->> endobj
-4075 0 obj <<
-/D [4071 0 R /XYZ 85.039 641.538 null]
+4250 0 obj <<
+/D [4248 0 R /XYZ 85.039 786.531 null]
>> endobj
-4076 0 obj <<
-/D [4071 0 R /XYZ 85.039 614.439 null]
+4251 0 obj <<
+/D [4248 0 R /XYZ 85.039 492.496 null]
>> endobj
-4077 0 obj <<
-/D [4071 0 R /XYZ 85.039 587.947 null]
+4252 0 obj <<
+/D [4248 0 R /XYZ 85.039 424.75 null]
>> endobj
-4078 0 obj <<
-/D [4071 0 R /XYZ 85.039 547.299 null]
+4253 0 obj <<
+/D [4248 0 R /XYZ 85.039 384.103 null]
>> endobj
-4079 0 obj <<
-/D [4071 0 R /XYZ 85.039 493.102 null]
+4254 0 obj <<
+/D [4248 0 R /XYZ 85.039 344.061 null]
>> endobj
-4080 0 obj <<
-/D [4071 0 R /XYZ 85.039 438.906 null]
+4255 0 obj <<
+/D [4248 0 R /XYZ 85.039 289.865 null]
>> endobj
-230 0 obj <<
-/D [4071 0 R /XYZ 85.039 251.478 null]
+4256 0 obj <<
+/D [4248 0 R /XYZ 85.039 222.119 null]
>> endobj
-4081 0 obj <<
-/D [4071 0 R /XYZ 85.039 230.887 null]
+4257 0 obj <<
+/D [4248 0 R /XYZ 85.039 167.316 null]
>> endobj
-4070 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F11 2898 0 R /F14 2895 0 R /F35 2880 0 R /F20 2865 0 R >>
+4247 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F38 3001 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4084 0 obj <<
-/Length 3300
+4260 0 obj <<
+/Length 3177
/Filter /FlateDecode
>>
stream
-xڭZY~_A+N-!܇SNJuY+˔+ea
-M1:`c'؂ψ^Cƞ:ec;|Ji@ RU5~O7l^?Ez=f]J}/k}Kl7F1bۋ}ډ ҃ȄIv;C[? ծVL~׶ܧ)gGȳoA2ٵS#]\%8;f!Qy1@Z x{m `ƅ .;/ک2ֵQglrb5OHg#Fc,3пg@Y7k]{o9F7{uO9ϝ0yvr|>OOd;n2G8.~^Mdb(S!D Oee0%՞U磩Q~7OpXDA?(KG?xÒ- qsF0u=Q%hzrCt=h舌Nd[2td_+?=pfShAW;݈Op5lZ%K\5L݉.poX\pxF p?Aimɇ\왤`w1 ^+}R-
- <}C(
-HS5M ~&L K!
-9
-^ٲ>? qȆ({vb ͻ1޴f.جK]-! c^QuF(N\v 4~te0XpM0$:rX< RhdAOҲp`(c4K
-ɯ~,,SH"` E ,oJ+,"hPܭi[)9ȀŞcE;Yg@7Ѫ!)kU^hVtN۝1XF]9au++.ns΅p J=G̜5Cg0`
+xڥko
+X9:E"]l~.8xrq`*͇
+߽grѧ΃_zǂǤcdϿF 0YExqX&9>sɂW͝yhxVJҋ̘0M2:}rDiǪ}2&\7
+Y73л_dn=Qqyp ЮZdm LDxn}M"{(mID4NoZ:sG#(h・ d Joi{VH ,VG*L̷СN&IbKy%Rf*J͢o7ovI6=!
+F p Yٕc(̞j`d}Ì (Dzm7"y"jt[Fmׂ-WV}e?DdBjhy<^2T0<@Mdf=+<y9Ѣg&6a g]i6ƠuA$M0Պde珊|tJ6 _*N-޴TȮ<r"L30Yf&!V,Q'E3q5Mb(iE&6=쇮%<3`Sd-sW:U' zr J1IkKyy.UĹ៼>4\$nTaz/3GAɁr>0J҅jޢi([\LIo;0Wc#@))
+bz$] mˎ!@L4B.",serP^7qR8e.
+rI
+ |תcm
+qP^RAvO q(*ٷpiB<ۖEBvDCS'O$Jo`|C0wAfBLVE7NXxR.Di@%04y#T34 uLTP:CBiH-j@.}f>I| D=ǔ
+u+x}:6LVl f
+[s9;hoݠ<4q; +ƺDYǙxFgzLZ&0#|ۺ2X(/?>t],vDW!y%
+fe&N#'-nԦGTHw$4len
+|ra㇡/֕aBvDn9gOoԦ@Am?QulZ]N#*P6J*+<FI΃SD|!.r7~2Q>+i׃lk\~`}Jf[bOɗ`U%)$.~c/U}kTa7";t^0~\5"y2C-NrӁ,endstream
endobj
-4083 0 obj <<
+4259 0 obj <<
/Type /Page
-/Contents 4084 0 R
-/Resources 4082 0 R
+/Contents 4260 0 R
+/Resources 4258 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4069 0 R
+/Parent 4246 0 R
+/Annots [ 4263 0 R ]
>> endobj
-4085 0 obj <<
-/D [4083 0 R /XYZ 85.039 786.531 null]
+4263 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [243.979 292.112 364.253 303.801]
+/Subtype /Link
+/A << /S /GoTo /D (DMB) >>
+>> endobj
+4261 0 obj <<
+/D [4259 0 R /XYZ 85.039 786.531 null]
>> endobj
234 0 obj <<
-/D [4083 0 R /XYZ 85.039 588.18 null]
+/D [4259 0 R /XYZ 85.039 514.811 null]
>> endobj
-4086 0 obj <<
-/D [4083 0 R /XYZ 85.039 561.565 null]
+4262 0 obj <<
+/D [4259 0 R /XYZ 85.039 482.593 null]
+>> endobj
+4258 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F38 3001 0 R >>
+/XObject << /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+4267 0 obj <<
+/Length 2577
+/Filter /FlateDecode
+>>
+stream
+xڥYmoܸ_ EhA/I/{@W]]Hr|7o޵[+pCZ-([$iH-6YgJ$V"rd^.ޘx? z;db]](</WIzW;\]2LX~{z= r/
+m2-eQ ~m\th&,W`ڠ!oaDާ#<m+Ʈ/ mE9[}!3*+^w܃ذzh4趬8exk4 ḣ O2%|hr/g<8x2W'Kr\`ݸ/{rņh578n:Tt>M_c)M%{ ΂٩CO'm$_ѭ*n(l] ۵Wj>#yӾr,(v7` {FpsӀd:|:.UY;W,[;c3֢/qFލG?t;2(åF y;,s&TYi_e$xaMz)Ҵ1\f=nTTK=:7TI1+áK]ύсW}^yBy*8qS e8K7]}ٟ3՟HƀpJ&0'+-*aI54)
+Ʊj蚷emnSA,dO5dtf|ʁ'
+jb!>P4SG/~*
+zU-zݎT59) T
+P&l3+턌!"m`@];>t}=Kpdc:!?Pv%j]h98kH7i9B-(?1mrW!YEO.l}t!)vb߯
+6@ nY9(Qm@X㛑E@Y}Ӥ*fT@ 6Fek3Ǒޮ耱Mh0@Ў󓔊Rʐ",r υ İGǿ,yrΣI1Qf+Q-qF/0Jla޲hQ
+)c-5柋}U 治~8"'E ~t݃>l*dƇcKA/\ZB#Pz춎v "\, tr^7OiVdJWRWh09"p]ϛ%VE Da@ @毩`cKb A7%EfƻS߉ TO\Yҳ v6rܻYS`lU1IEt.=B,xD>ianvhSʖ;I*2p2<IjTI&RÉ"K&+\a,Hpdz=C|\Oe\ğ٢J4)[tdd2
+#[L& ~Ab>b? w\[8uZG"z*/L33%E)UfvhnL^|WRmጽ8Z^Xyk[pHN,>rY!7ёXj$T"&3e;P82`<\}"bR-lUiع[Nl "uH ƽIϐ)D;̔{Q3szÄoKl60q /nXO) Y3Muz^LL@< 3< M <]l\x@O)Pfߕ@龴RGNtΙs^xQ8!ߕ+o\h,^rkx+]Y? 4ڷJbhJ܉wO҉<rjۚ:b(C]?OeYQyDV8o?[n D[cx 6Q4:a¤wendstream
+endobj
+4266 0 obj <<
+/Type /Page
+/Contents 4267 0 R
+/Resources 4265 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4246 0 R
+>> endobj
+4268 0 obj <<
+/D [4266 0 R /XYZ 85.039 786.531 null]
>> endobj
238 0 obj <<
-/D [4083 0 R /XYZ 85.039 561.565 null]
+/D [4266 0 R /XYZ 85.039 766.606 null]
>> endobj
-4087 0 obj <<
-/D [4083 0 R /XYZ 85.039 539.908 null]
+4269 0 obj <<
+/D [4266 0 R /XYZ 85.039 744.844 null]
>> endobj
242 0 obj <<
-/D [4083 0 R /XYZ 85.039 430.597 null]
+/D [4266 0 R /XYZ 85.039 744.844 null]
>> endobj
-4088 0 obj <<
-/D [4083 0 R /XYZ 85.039 379.384 null]
+4270 0 obj <<
+/D [4266 0 R /XYZ 85.039 709.638 null]
>> endobj
246 0 obj <<
-/D [4083 0 R /XYZ 85.039 223.271 null]
+/D [4266 0 R /XYZ 85.039 459.663 null]
>> endobj
-4089 0 obj <<
-/D [4083 0 R /XYZ 85.039 201.411 null]
+4271 0 obj <<
+/D [4266 0 R /XYZ 85.039 427.445 null]
>> endobj
-4082 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F56 2890 0 R >>
+250 0 obj <<
+/D [4266 0 R /XYZ 85.039 203.168 null]
+>> endobj
+4272 0 obj <<
+/D [4266 0 R /XYZ 85.039 167.758 null]
+>> endobj
+4265 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4092 0 obj <<
-/Length 1982
+4275 0 obj <<
+/Length 2397
/Filter /FlateDecode
>>
stream
-xڵَ6_aVbRM6m7m4 IhK^ꈳ߹(^{-@r8c><Ӯ,ruW/#_0rHֳH}ϝ{bM(׫7o'0 Nq<s_O|珫W ~>^-pv̜׿O>-^^,M{7N# btj:ݎ r&f^O<T)Ӗ'MM09 kBgWX~լg$=ߝk=dD T a=gIA*r
-dQʺQ]!fRjzN-vVUTin<`TK^HqooZ|>pOWECESY
-i)#p: a
-<Nnր#.:^:I0;=O`&Ix:ۊ3 ݰ2\{:5msZՑzF;tf3''-C&يMˋLx)M$\i3i"zFVkK}$OC5r"rߴlNd{-y۝{.r^}!^
-
-xIe Z!CiZ#4_jAmI$CRHk4'dTc-߾`YY:c5h!AC1xP+)wC:1TE9H:hcOuDbJ^ v{ʎci0kam0Xy[+AY/}iJ&_?5I
-l*'ޕr1WpiK'^x} 8X#l
-K4%qdۜ&9)vcON:Bճ6tp(\Y9>endstream
+xڥnF_!$Lͫy±O+$@"%qLZ~&eQ1ź??K,IcWlf8Dž/ AYp[^\}﹙͖kK'\ųes˻_0 I:7 a_A|iNjeaĤ.~ӛf֞glwUQ(KϢ5%
+SWX)78ovA0?sA[XӴ kV
+Fig56;>7
+3-:$XlCW^%򚙅E͈
+jv;Aug`EB >{nM=_@7p)Y+s\~唵&t'@KşⅣ<E+>wuj.k3A:Ԍ
+0Ẃ1 )}f߮^y`5x.ly‘^? >t.S_3'^{;R{hGV0vVFFFrWaRÍ~d7Dj6n8I'[LjZ$GAt2MmZWɠ068+d, SHdQk֭h z`́jsGUL瀭hQPͧ@ܸ"=,Ʈz*[ph$i |3PY 2EiLYS
+TjJQ
+"tdbah-FN(? 4 Q7,
+BpDg-%xKpBq$h9;5^f?55)E@nOϪٔ !dsGב2aX3‹Gc!!<s3u!%d!^t31\/MfF@ؒS#]`!"sHx8bXe7)ᚍ 8>(B`ut%+xՂE>ɪ6/|_b\aFq?pF)7Kqa2@45_c* Uʻ84`Uh%>ɷ}Y/ߕJ zI+{<~!&T9?rh䬾1hW6as#ub=U!i+Wg4*7
+' 5WYL[KAdId!2l~9?=endstream
endobj
-4091 0 obj <<
+4274 0 obj <<
/Type /Page
-/Contents 4092 0 R
-/Resources 4090 0 R
+/Contents 4275 0 R
+/Resources 4273 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4069 0 R
+/Parent 4246 0 R
>> endobj
-4093 0 obj <<
-/D [4091 0 R /XYZ 85.039 786.531 null]
->> endobj
-250 0 obj <<
-/D [4091 0 R /XYZ 85.039 726.833 null]
->> endobj
-4094 0 obj <<
-/D [4091 0 R /XYZ 85.039 691.892 null]
+4276 0 obj <<
+/D [4274 0 R /XYZ 85.039 786.531 null]
>> endobj
254 0 obj <<
-/D [4091 0 R /XYZ 85.039 486.938 null]
+/D [4274 0 R /XYZ 85.039 556.144 null]
>> endobj
-4095 0 obj <<
-/D [4091 0 R /XYZ 85.039 449.673 null]
+4277 0 obj <<
+/D [4274 0 R /XYZ 85.039 523.723 null]
>> endobj
258 0 obj <<
-/D [4091 0 R /XYZ 85.039 409.634 null]
+/D [4274 0 R /XYZ 85.039 264.572 null]
>> endobj
-4096 0 obj <<
-/D [4091 0 R /XYZ 85.039 374.693 null]
+4278 0 obj <<
+/D [4274 0 R /XYZ 85.039 230.03 null]
>> endobj
-4090 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F20 2865 0 R /F15 2876 0 R >>
+262 0 obj <<
+/D [4274 0 R /XYZ 85.039 133.469 null]
+>> endobj
+4279 0 obj <<
+/D [4274 0 R /XYZ 85.039 98.927 null]
+>> endobj
+4273 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4099 0 obj <<
-/Length 3226
+4282 0 obj <<
+/Length 1514
/Filter /FlateDecode
>>
stream
-xZK6W rY5%RVn3:q
-iqY_;
-_
-_oat&&|kqTL"҃<M4%v¸U0>SvXӶ~FcdуyW͜@Ȫ5ьBG",CfTxxuWYЎqN G' zdb<tE8~'ǂӺz8ovsDoAǜ%J] A{`BEp7<ϯ\umO_o(M8.6aQlXu[ڭ`s>j&L 7NM|wP'ҝbt>tTfj`mKu^8\S(kT{w
-X)$ZgAgVhW̒iZnCe]qiDi(,ŀ$m<p:caJ,ίz$3w
->ȼDMxJ%%,W3b$F|_
-ӓ2ޥHAp`-!Xa
- i*1k#i$gd #5TZ8E"3p_'Gqn=.1bgPvM@ 490kWac d.f`8FwSv7rf<SN<%,$E
-t
-0,ڦQ/e!*_ρJԉ*~C&ũFC|Ϸ6c\&Qs(bsu<bM@+91e ~s`d>Ðt烑곗~|^)+nE|䶿, 'HԿK*,lF6 =(Jkԫo+g(Zf?= LVAdx`?iZ|%*LSK3z>d\nU7Aɂykv<?y?\
-l 1jíK8t)P$kDojJ9vLv } "oL:PT
-emɳ~+yjߵc%Fk+rl
-M iݬ<uٟB`FyxOߡ
-ʗQvk#endstream
+xڥWKoFWHцKru6A6%%8;%iKFEx9;;7^O/S0[&iLy{mEc-*/_MԾlٍv2_,^n߯>n|Z0Z$^߬,^\}Zw~unf3Ba
+,Ɏm{\Gв6 HcъQ|Xv c4zboEP,>GKNܡeB)Ȭ>#~\x IM:Di
+M
+k? Ť$n
+'<W(h!뛫$QG +>s3e|Pý"__J@UD(ۮI J;N{7MYY(mٺ+L(k#ƍ?0@9(E:-B}h+pKEmӷY-u2-D9z:XJ'1? % .tNqcD>m
+Ip >bWk2?wO
+։ڎ[azxy[(ϼd[npY{*rƥq=%/-,;wKE]o:SIX+0)(*W Jzy]]7<6NPe:K LDEko}O`'A8&wY2m8SSwٮ{$> \G&c7}˞N,FESs&y:JU&HY
+ C?~#S{bendstream
endobj
-4098 0 obj <<
+4281 0 obj <<
/Type /Page
-/Contents 4099 0 R
-/Resources 4097 0 R
+/Contents 4282 0 R
+/Resources 4280 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4069 0 R
-/Annots [ 4101 0 R 4103 0 R ]
+/Parent 4246 0 R
>> endobj
-4101 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [432.259 645.989 512.306 657.679]
-/Subtype /Link
-/A << /S /GoTo /D (samba-pdc) >>
+4283 0 obj <<
+/D [4281 0 R /XYZ 85.039 786.531 null]
>> endobj
-4103 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [249.04 478.871 330.742 490.561]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
+266 0 obj <<
+/D [4281 0 R /XYZ 85.039 738.261 null]
>> endobj
-4100 0 obj <<
-/D [4098 0 R /XYZ 85.039 786.531 null]
+4284 0 obj <<
+/D [4281 0 R /XYZ 85.039 703.515 null]
>> endobj
-262 0 obj <<
-/D [4098 0 R /XYZ 85.039 766.606 null]
+4280 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F62 4052 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-2952 0 obj <<
-/D [4098 0 R /XYZ 85.039 672.187 null]
+4287 0 obj <<
+/Length 468
+/Filter /FlateDecode
+>>
+stream
+xڥMo0 <3(ꣷI[[CnE] e ">$_}!z&+ ǂG1bd0͏dP<hWU̥`UyEY̿Κl,?Win$1gž9Ek
+'~,Yݞ.k׈kur!^x"g&L)YKt=ڜF"Am#NE'.NvVh~CĤo#Bj{clEs-
+endobj
+4286 0 obj <<
+/Type /Page
+/Contents 4287 0 R
+/Resources 4285 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4292 0 R
>> endobj
-266 0 obj <<
-/D [4098 0 R /XYZ 85.039 616.997 null]
+4159 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 599
+/Height 387
+/BitsPerComponent 8
+/ColorSpace /DeviceRGB
+/Length 25699
+/Filter /FlateDecode
+>>
+stream
+xX-E@Qz
+4ԫWTUUMLLH4k!Yz̙3i3 A
+_~rJ:uj$HU
+!A
+UUUXzu---f644433[[[7k֌ضmۮ]*?bZԩSϟOnݺ;w҆8qҥKO<#v
+233
+
+J 6IC4ˣh?ׯ_xVA^xx8t֭k֬ }O46Dm*GgyQX~B>|8eիh]
+ >qɓ'ёVuՕ"~ǏS%##ѣG6"ʨy3{5k,+|vqڵk|
+|^~l?~,߷mFL~S @hg 'NCv
+J [2d "LP2rssY?|M4)0P>}:WP
+
+)c///_ugffֵk9s>|DuWeO7wDS6mP,Iʕ+
+aaa!
+ pF=mhhᑘg^~ňCkFMMmܸqϟM|
+j|i˖-\ߵ 4(::Zϒ?z$qZHPqi۶'OY([l%nݚ:_qww^xx59k…4D3>mc[YYiiil-Z87ٷo_i9vvvܾ}˗/Ӏrr=x7
+<zÃk[iHHK޽rss霭`ʔ)޾};̙痓zyqef_FpݺucbbhUV Hg 687*d{"Z:88^mM6ܨQH4{_~M׷/ ?йӧ{=;)^x%hРRKǏCEjcǎ`f#.]Dt"G
+@I%%%6bjjD3#HER$Ea?w\___6 TҕѣGBǏ
+I"Qsss.#E8ʒE7n,}3.;;K###nNޛ㶶)))t@Jw6n÷QQQN<) /,,ܺu+wVZToURX<u:$3}@g.Ұo>#"")ׯ733۾};={5k'P:'O>~8޴iӳgϨ?sLD:]q300'---$$[lniS;dYvkkkv!U)?FrΣGn42HTR)TڧtF<)P:300ǏollުUx."А lll|||&ӡB$Ha&ٖEϟ?6<HWСb 䐸aÆq \O8*H%
+;///
+T
+X-dk@*BQ[
+XΝ(Mr(
+sqqaEhΝJ A z9Aw'ȀlSmmmC?8q"{z/V !AFaaa``m'nkkkSPSS:urH45nTrBi|Y<;6)9r6p31BCIIQ$(((VUUe *KJJ+]vQܘIR 1M:Z5j(+2d%r+mೌ@\]C͛7T-o۶-(j|ˋ`llY*7\"Je6f̰qFrsv F,>7uuԩS=?}tEiT#GXXX7I/^,MA@&|TRy.y{E:4ҝutBȍ6i҈WzzlE^[ђ% ʓEEJڶmZ*7HHA[;r*ik׎hӦzɍZZWfycw ;wnݚ~Am؝]]ݭ[!AH`# `ZM^=<&#aT AU:::4,JȐ'OtԉAy󦼕?pOC@lӦ%ѰHBȃ1B$w:::?~ׯG:t(Wm : `6 իW ,>|8$ BBҢEsHL, ѹs=}}QO_O.q4~${ìB @C9LvX4iRvvv%sRXfMn:)ںz꼳}vaPPɗ=-ʊ*a-.Yf앍[nB@R͚5$tYx.Q244X`&` D'}* ܸzJƖ-[455i9s27nbbM_p!f=WZӧ'N'O6lؐot.^u-[LٳNK45hPTh J=A%8k̟$H2aC1V)e8wӿ֦J!zߋt>Sʁ>?~qFG|eWHܰj÷@
+
+ ']]]PJt֢HU99|8l2OK/==F^}!AFxxxZ(Zls˺666<@@$ʉ_uqnIرBCr(T-׫Wu˵ ŦMX}׋rXAl%(Ɣv…sQ5 丸PnY"FnRJWVWnaa1v/^  $ܰ~]vd_gqǎ$ڵkú;R\\pB[aa!2Ύ2f͚ϟUtF"~I@@@ oHTV >|xDyH%XV40wthÇY_$\8<~qƔ%bŊɓ'ἼI&|=??I׼ysOHC<͙3CC%ˡÍ7nd !C YѴiS_|edd6<g??իWTKAn`֬Y{lٲq9#aT$xoZ" C߄n:gM\v ":QQQ K$HVRWWgdÌ 6GKKKTKAޕd(AMZ9B% z ^zĉp/lOf>9r̓Eb Q $_PM6Ḿ/^p {Jc,unHp„vmhrph * o*-An ( T>-yP=ɺ["C畧'˫M6I;l2677皍'w)(Q DSǎ!A\PP6`mftW Zjr,L:$?ÿ_믿.]jee{ٳ׬YwOP٥D%د_oI?3С$B40Зa㐠脅\ǏGj|<2G[[A]]qƽ~Jӡ%. A:ynF$HPIH-ё{nf[1|ܹ\pAKKwx")gggQe^
+977Oʊ>7-7Pa $A
+4UVdddМ3fpss$`̘(N8ԩSoq?^!A
+ܹC!(((+++'''66W^+Q[nDDAپ4n`ҥ7n$Q޸qcoݺ2}7D
+VXCrBIII~h#[lYXX]&lР^%
+444͛[jF_5| .(M$':uLZBWἩ{`!??uD۽{w|`;CC/^`ɭ%рvb,|<~|_Ry.Ѩ(ܿ?"8 Wϒ]v7jii ;vt*k];c$5kR>nmےTTTbccr;sEgJ$R!*+A V-]d(Es ->^!*ȩSH4իWOHHd̙}$ϕ6ti Vu ZMnV m͛})-]:, zxLK~_r $X5!|ӀkTD[m۶ŭ,AMMEfQjD$XH!v]!IQQ#ȑ#a{8\U!AK!AJGw4(h XqOɓZjQd%^ӣ-ٵkK`JaÆ𥨨CBKU+D{:TDŐCׯYrݺLSN,Pi&0HP޽2\GG~ϥC=h3 =R%H=A%w5]kemC1܆Α&}<wqq;wdD
+:#Ru"Ak"G&U-P\)R;v, 3}Fq%`S=]A($)74((Ae{Hjjje:ĉE[yR$ʐ:u|m(rQ\ 5tÆ,\, FE2e<Kj;6~5P1Y2\߿N\,..f<[jŚbٙ6mZTTDda _]],IQSމG6mh N×/_N6ёNh544o˒#r(YŎ;V$h6660ٰ(H
+(t($HPn_9rdxxx=)$G<s){t(rܸqcq]qsV鶶)))Gx%;7]"AEέ|I勝%=F(644%GGG,
+ZnݺNt B$'_twyH6IV-m
+@JKp͚<K#uVܷo)""~z333}ٳgY*d ɓ6mٳ3gԯ_M[.All,Eiii!!!rf㦗w{JO@IܹX
+3I癙)cdŴXqm$:gbȕ+C
+ \S.AJC555s6*iLҡgϞ4<~xcccuuVZdzTUUlښ1lll|||&ӡHݯ_/_<SL]h{H@`U7f̈g}{`i ̛)4qXIH7o~bP0X_Gޢr[r` ש qqNu&₄EUEQxNa --99 Be rt+IpݺRKBIRRf\Tn $(Dڀ Tf!d)*7HCe~9e]/s LNb#Brirrr*իk6gϞOHD$(H{$O 4hP_HPnիY~ofΝCf*z|B *V9W$IP@ ɋvi Ub "YNey!o@J|G/խkv
+HP>qtt(/={  "P$Q.آΑ7Ke˖+W&&&_|a% B $盚Ү|r~8jԨJ6; Uv fJ9ED!AHtew455UUU_~ΝSR޼yYkPy`9ŋjjj$,@{o߾znY%'44H $ C:+WJ4ѣG!AcCNC
+WZ
+s%dSSҫ۶-};}+8x3$ ivW^D}}ޞP` $X^ uȐ~\<D%hb_+}`377+-m›1>z%71<<B\ Hb<xpGRy.]vF \m֬1-_ݭ[Wn5aXnM|g%HEou]vI|ܔ3fД+WB B`re ƹZZs:8ݓUK={b"HUV>tЁ@ Bb`jպ $ػ ݻRV%G|i
+
+!AP.HvڷoFkԨ "D$ <` W\ 򒑑A#;whH BUG))Wm)s]\QJGsw@=f~N, <MoߦСC!AD!A> ~]zs_?>*<q<S!CPZd``6E),l'$h7hx4l2HP%~*Qpp${"JPWW
+׮].bVX *<M?0`
+$>SuԡOI<*D***RHHiڴ1$ BG䶅$rnY hILiFA=G3ґ֌RHXB $d%\]@ ~]EfK:?TPH|G)Cr($ B:f/\8cGs%u{5S]D\~So,
+`PPInRNt BlBB̑#arHKKfӒ.v{>%-m$ nݺ¾JL@) &))Wy`!AHP.
+ R@ⓉIRKΧtP(
+3n+x|@ $XcV?wx8M *P{ij6p(o3dn!T\ Jr(Z!AD#*c AH ޺uҥ$ݾ߀vڵ--yQN|J'ժ *)" BK+W.t)> l_wqN>~m B_~ٳJ7o^tҍ!AE,/fd $ B
+-AHMZڛ7#6;v!AHmu$W !޽{"U&AJIjB $bLj:π
+ A
+Hv-))155$$u-6mț444 A
+iׯˑU&})AjZC
+CRC̬D^^^byFTTVM]55IPZ xzzҡ7sonQT(/r.H
+t@(
+ x)h"..M,((6m^Ǽ\pahhhi3r4qFZf߾}Z+VL< M4I+O͛g```hh奯OGwx7l߾}͛7OsD{SWWիW_Ν;Y4>|(fNQ@ E$QFD߰aC6`3fdddxydǎ(2^׬\"O0|9Ι3Ϗ~zjUV}ĉ***lgn;6k,=[lqpp@9W FFF7IFچ=zT]
+7oެY{YSSؘ]&o)7nׯ<*\eHP9`'Z$HIIITTTT @h6 rԩS$ի'$$۶]16
+'A%K(X
+gҥ۷GU20`
+,Z:&di|T}||萤9d^ /ttpçNjӦ Jr@ʠNPAC!W$݉-J+R&! l|)1FT~W7ͥq 4dä<CCCѯ={VtX%~*pG֭cNP&dX$i֬%H凷j^D)o.xoؼy ;\x2////Skז\+ 60ЗBѡ5mX6lD)|E|oo. ۷<JG >DAU_N=>e%kt*8h k*+ fpB>|%x*KAAAYYYTPK;Zn݈΃|}si
+J/ntp 8eU:xoݺS:=_
+ǣG iw3F^*?HgW$ܗC+A"11￧o*trJ '_<UUUvo6џ 5h@CC6,22et.*(tC!޽{+áe˖7ׯ/獠+j
+
+4Miɒyh6 (%/^ )"Hgsss۴i/ mHȹCC=xC֭+ 4Jby%0%*[>Kl P>޾}˺Сϟ_dB5jիW(@%HZt>CBW4aX$x|@@PN:T[n1 /?~?ްaC"
+m@>`Nx K~~> Ń{}.0
+Hpu ٦cB@p႖{#KII+СC\rVIIHP$0Ď?LAOOO.M*(+ !AP-%  `jڴi_|B4HP~$#矱 Pf,ٺu+2DX]`,W$(W1{A@f&hiiEDD CD'11kM\iJSv}IIOOJU-Z`O_v R^?~ܸqc@2 9\U A`'N۷)<<:8A@ZuݨQ4dHxec͚5ϟ?_XRJW@N$|c2 Eҝ֭!Ad>|FUE5O9D\E66V_HHrphND$ RuM% /M6K=c %x Jg$("$oGGGB@9qqqa{Ŝ //_ C%B)6$Mo֬& 3B@ѡj^zT ! ==2YCCL$(˒-W{%<B@~UƖ-[>{ "9rssǎ% 'KK n<SXX8qDV2]]]tؽ{7NNN8
+K0>&U ?~tssc}E8 uk< 0=bfff@Γ'O:uĪAQ< w̙cGRR(.)ceC-:ٶm uuunJA"T@9y7H(z%Cè$sͬmWA%XEӦ ykȝ;wZn͊z_~<Qb9baa>^x1:cm~IIyk, >}x̘\:r$oKsN:ۋyXNH,///uuu'UO>qIKp-WMW
+l1ahhcЀ6/%%%:u갎OlRٱZk׮4<Uj$$h\ZkH7oP{.ʞ _^[[>u> [$V0 ~mL VV[UJS5><qD7V/^\TTl◠hCp9@ gFFpܻwŅU2FFF;wD$/W&33!w \{ ɗooܸ?s'ĉM4a]nܸ1+*-Zy&{@q}vΝY$<yySRRk.]]]ȑ#={lY:usRlIH o߾uuu#dž6m :yyyK,aQhhhL>=--  U@,XFCKKk޼y*ƻw33j"-fee![ AH'$>?+d $=[^ܹsV)$ y|}}}bxnݺVfe˖ɵ*%˗ؽ{{_;ĄU-@B:9WtttpH0!!B'ݿ֯_c [eOOOo۶mPKCvZ.kժӧ-@<xƆS?~lQV FE,?)%*$X̙3WgMUkӦ #[ W+j՚;w?lA$H OOON;w>s  qqqÆ cSSSsĉ>D(>A$H;///r%d C=z4tP^A._lQ FE1c$\
+<xJ駟-@y;{_]?tQt r({fOCCǏ#gdCCCV֭vL䌂J0&&jI­[qP
+
+۷7mڔiUU1cƤ"gNɗϟ?)?DHP{.$@\AAIIӧ{ͮ[ۑ_|A(q9Hr8z3+iTE? tGyxxԮ]x ootK k:+T>}eg:4hPtttqq12 "A`8p ʃ,?\tiۯգc)+WO=A˗trO]p98d5kԯ_ QXX̑ ={g۷tbP\\wTON.RKV1' YD$[S1tQa-Ҳ2T$\%Y׷Nz=vy_|>lnnc?z(-NJb;88lQ(++{yyRd$Ar(RRRVPPeݻw===IIIk׮MMM>OS^,)JAdpp0>>^UU)asXX ~??y1w6lؐIWQ~>yR ݑWssD1<<"eFBtuuQp-**eFѲl'
+q_&NNv255!
+E1X,Qlzz:=MH9sNNN%%%tAID066S }0fff###xm\\:;;4NăCQnJJJL@hOtwwGFFZXX0fB!$244ڵk"Sn(VAvoÔ-=EC\. \+Wi BOHH022bO5::W ijj111acccA!ɧ+--‚M4_͛75cllÃ^4.G!"?@gfy_|\.7..%rq(f^ //to pk֬oqq1:$Ӈ3Cfk(cǎҘ#0))2=˩ I`MMMpp0|>%%%¹shZB UTT2ZXYYAI?X$ġ RRRH*?N}12+~Z[['y! "!x ===i2 ~D322 jjj8͛7:uzBr:,,LlPXnKvv6UMٙꪧ7{˫@v$?RL.]tMII"t(BBBydee"##ܹCh9$ecnj|}}+ ~ EDDXZZN/444+++i!x<}j`eeCW ZZZrrr||| 'N(bٲe|>`xxE|IOOϭ[$...PSEj#^zE"BbS}}ٳgtuu'pB!BFFFYYY[lAJ% DPOOD' L777kZcǎ@#Zq4knnnpp0FO2PTTDzx{{#U11Uill,((\A577MII}/ )jjjЈjjj_61BEGG#(nA@D6NVKKK mŊP3g\~7܌8t500jAy<?~>Awd6Ã,X`7PUUspp8rHBBBqq1N
+dۋ޸qA޽{U X`h+W@(&A?dttQ(&&&oܸQ[[[h18 NNN'O>^|Ϟ=ab=}!Btfffܷ",--d4G֒#wVVgE9-߾}lllFFիWa|^|9Fs <s=@ua%4?cb=]Z Ivŋp^^^666ȉ+~8͹s蘚B18|ĉ贴 .\t455wtttww~pp:22266ψt|||oO?~fݻw_[[[<y .
+ ӧOk@!Ob۶mp889sLafϞܹa_8R.AL1߿ڵL2-Xj… gΜ9G^^~8#pAAAqqq8䢢"5@7 ͛fEYYY~~~NNNjj*χ 8x޽{nݺi&]]իW/_%?>|֬YGl6{ƌ,K3"9}t)##fXYYYEEWWW?ׇa{ةȐĤ$hKK '5A|*endstream
+endobj
+4288 0 obj <<
+/D [4286 0 R /XYZ 85.039 786.531 null]
>> endobj
-4102 0 obj <<
-/D [4098 0 R /XYZ 85.039 590.382 null]
+4289 0 obj <<
+/D [4286 0 R /XYZ 85.039 723.602 null]
>> endobj
-4097 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F14 2895 0 R >>
-/ProcSet [ /PDF /Text ]
+4290 0 obj <<
+/D [4286 0 R /XYZ 85.039 723.602 null]
>> endobj
-4106 0 obj <<
-/Length 3469
-/Filter /FlateDecode
->>
-stream
-xZK-` зd'JK} YP鯻ص\\<`gCϟeY%nʛhWbxCoVWHKo9[meyO/0twHys=2?~$wos~zy:io_}^DnX_~fbW.#=_.g(8
-gOEƢ̚"
-7HznES8~↴s?~|:(bf<A&1r`SoдOZ]-C eC>Rc_N`^flS+jѰ/Xx^1iyj,̕dp]n#Zǽ,yD۵By:u|EhevJCKe]"g'̔BOG*k}9 $8׻ڎ6d<;%.H5f|{o K-q@Ď;\*|Iȫ VvLndc=V7֕Z%s;VTWzҕ&IJ ~1>1b56w2 S
-]<$,n~[Ah7ϔI$89_3Z,{֥VfzkɴN9D"nI)nr YyMnec^ݰ7w` Ijs#v 
-Cy%D*Cњ"W!,}7xxao9i ;h (MK|s؜4|JaaV$ºꃬ2XP 㞅@Lk7-.aˎwf>6d'&pV 
-$5 SM2:aߢHec$FR2rV$͔;N%gIxiԾ}ӳDEwo䈌$M2r$IHyHSՙUd
-S YB]6"#=uu
-2*BDC b &B
-MJX gH٦aLBC~k΢\̙l
-z,SSB)S#Y;×k^*bo SCNT&LYkohyRH4梨- QbFP *W6bցx&A
-^(\ 4Ĝ2:`j3O?$Л$CJ2h*{4cH})$5:E-slEGg
-qKCR,c %f_'X^kaTcŠFTl^c5}Ap4ϓ.hDJ_Nhk3r=xg )WiI!L٤
-}Bm+Vȗ٨cTg”ydݠ`{ֵbnfCZ$o@’R %cZtsN>sno\A[F-#m>,.sY"?d&r1b(-$NPFo&hSuˊ$HKD"OmW`N}#3$ rTl0s4T ΩB#YØ4/iK
-Jr`#vSX:Z占ٌ"p+Ba
-f<M{JO Q?ǤpxBU .K &+UV!Xm w}Ѝl5I f?_Mdϓ( ̿PqtΧt?|Yendstream
+4291 0 obj <<
+/D [4286 0 R /XYZ 292.716 125.59 null]
+>> endobj
+4285 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R >>
+/XObject << /Im2 4159 0 R >>
+/ProcSet [ /PDF /Text /ImageC ]
+>> endobj
+4295 0 obj <<
+/Length 2900
+/Filter /FlateDecode
+>>
+stream
+xڅYKs ϯ-iR͞$T2&Z*^=|
+wwLBE+5`a! )Y6L;c2di'aЛr28uU|əVIyKJPb 2H]ߢF59ʹ_~Uq4G;qrrUO1GLr,;>pa"NQA|n=c䭱FUh_90+&cN;Vf.Gq,8=[OM8)ӳXZ5K:Lca~n+O
+
+D
+%FM|Z),e@h!؍N3q'1Hg5"H5yc,LbkoN_~qɞ2 ]2eQ}o%dXh߿|Lky4Ƅ'K~-/a[K(Vܫ ׄ<2_+Z_K!+Hfpup,hf0@"qlO1l3:{tse{Wf%<j`FE\J]Ve$tfd:j
+^8FI0L$,c4ʩ@JW>3fW .ts:m);oNp!rTosNI
+pQSIä^Ǖˬ!%LqOiTf`4+dۦ }b"(LJ%6Jlunq}ڌAF.?=C|(gKE
+|Dxֻ;+$WB9YCn74 u$}X]ƺ0G
+3. Bb~viH8}xj![.4%[ڰfEj5ۈ`ƺ+k" FSE%@4]QMzh ¼{+ӑX'ĞTJnЮÄN!iuǾ<T<w޼k#.$Ci'bӍa̱r6_> =rp Kզt:صqrB#-sI9Y*A-Bl@.(11p 0r NC}n [zL-ԡ[t|=lx&x PZ4KA*:=p[Z%S@<.
+#?r?Nޑ~P3[wi>/s{h|TA}8{jۮ<N*SO,Q
+ 1kӹ6)]w; ireKu^zaݯ^0wzkSHha
+P~OxozՕ<j7+ΗLO5iendstream
endobj
-4105 0 obj <<
+4294 0 obj <<
/Type /Page
-/Contents 4106 0 R
-/Resources 4104 0 R
+/Contents 4295 0 R
+/Resources 4293 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4069 0 R
+/Parent 4292 0 R
+/Annots [ 4297 0 R 4298 0 R 4300 0 R ]
>> endobj
-4107 0 obj <<
-/D [4105 0 R /XYZ 85.039 786.531 null]
+4297 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [366.67 618.891 539.579 630.58]
+/Subtype /Link
+/A << /S /GoTo /D (samba-pdc) >>
+>> endobj
+4298 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [84.043 607.463 109.672 616.91]
+/Subtype /Link
+/A << /S /GoTo /D (samba-pdc) >>
+>> endobj
+4300 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [279.784 465.322 360.495 477.012]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
+>> endobj
+4296 0 obj <<
+/D [4294 0 R /XYZ 85.039 786.531 null]
>> endobj
270 0 obj <<
-/D [4105 0 R /XYZ 85.039 630.814 null]
+/D [4294 0 R /XYZ 85.039 766.606 null]
>> endobj
-4108 0 obj <<
-/D [4105 0 R /XYZ 85.039 599.289 null]
+3026 0 obj <<
+/D [4294 0 R /XYZ 85.039 658.638 null]
>> endobj
274 0 obj <<
-/D [4105 0 R /XYZ 85.039 449.2 null]
+/D [4294 0 R /XYZ 85.039 592.02 null]
>> endobj
-4109 0 obj <<
-/D [4105 0 R /XYZ 85.039 428.004 null]
+4299 0 obj <<
+/D [4294 0 R /XYZ 85.039 549.735 null]
>> endobj
-4104 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R >>
+4293 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4112 0 obj <<
-/Length 3491
-/Filter /FlateDecode
->>
-stream
-xڥko~Gr,\ǍU@kPBRq;]p0`.wgggfM EI[la _ EzqKW닟~Å﹙-֏|v[\)]$u.A\w<w.-WsSnA|.x
-0Vx_sU.`~-a(T^]_bpf8\A i8Ǯ=+N 䔉 #x1h' _L9QX;| أ(dWTte_z7js Tnd[;'jyOi2Yz#ӍLl`uB?LYBdN}I3.  83uV%6uY
-tlv?|o
- gf }XsgRu;J;zs\GsOrXi6Rf@?X1s]~yWx12ҲIo@VbV`)WʪRi.IVP׫4pvqEl f&֧)y; ]sWM*-{b-씞f kɅI4(H;[,ˈ4n+SKTOT%c IEblG.ۂУ
-eORi|}hI7ŕC+nH0d88-L- 5u MK@9!mST P\m@$m}\{
-u 0+j~XZNjlO?Bn$77 ;/̎ħT{)ꡅcsm(tnX҄=7KaPb6 {ܹ-#̶Ȣ2 p9S~8_ R){I~x02Je5.
-@QQsɆ`C`sG38FYPFn/Xa
-6#_vi,Y.q˙wͷޮ}F]UpwDZ⠓+M$5CPL %r8RjL8T(*2{S %A-K8Nq׊i2VrC`bˋd)J{
-5x("q|n O,~N+x #{AP͏+X,a
-GY?h@&I
- $sJA9~Se㕽bi$-sdº[/Q\j!
-`9ݔ)rlg{.D7-u72j-u 8hzz{Iɓ\GvZL<Pז[JueUAP#PDUJ( "8v "$VCQʴQX|j~\8y!Ϟ6"DZ֌n/ +n踼׵N7!}<UHd
-xRaFPkr}7 RJ Vj.>a漅@tPq>MERjF95p zy̛HO/}:0[Ssz<Id^B*M1*jt
-zC` *
-D^ !%/x.xW"5RkpNKb7 _$_F}@A?qU$(nz ɑ\}] I:*Kxp:*G,;o TixOQ0<)kI։ui2>ԐHc%q.GYEE$f|n$?I4xj~LzT>|(0 QiXz1AschK9PmG}52;[}?ǯCp[mJ'Nsor8Rš2i
+4303 0 obj <<
+/Length 2731
+/Filter /FlateDecode
+>>
+stream
+xڥYsH_'T7ܛc'wދZW{Uۜ%P
+ ѧ~բݢ<GR<p>.SI~_ zVMz U4u!4(nKNHÄ
+˞?f&-YTn|.xTpdsjgj;tuqa/
+!#^\Ni92M7X+@RTJC\
+SUT:!a)'/1?~߭^88ڟW6f#cs(8@-mp}?ȑ*%&c5(veAIujZiLd)MDKAzmnn< dE%&n|y-Z[ CEn'y*4_A)*%B-nNC1Al,~ VX}
+1'/IT΍ƙ-@!IQj>HMq۔J~|:-& 4,MQ#|PG ۏiNyCZ2fwQ3  ;񪕬I00W`>.a
+6PRy8P j-`5SGꍼ kqBBĦV2CRbpQ\Q FL(+AK%:bPA[ ١ٱJp1K jR
+].t紏|7ڏ<(09G9Ma؆-'DGо1#D<W 2FqY ̯Lè$\K:~ߴ7eAs 0ȥkuH4}|>J}v|纆)o bu䏜 sE>Ɨyﴪ46Ȅx˄*47ކ2&Eفo`EkA&93c~ ?Q
+?0FֻA(Ԍ~,i-АrkܓgkW
+Sk?bendstream
endobj
-4111 0 obj <<
+4302 0 obj <<
/Type /Page
-/Contents 4112 0 R
-/Resources 4110 0 R
+/Contents 4303 0 R
+/Resources 4301 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4118 0 R
-/Annots [ 4115 0 R ]
->> endobj
-4115 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [430.463 233.482 509.276 245.171]
-/Subtype /Link
-/A << /S /GoTo /D (samba-pdc) >>
+/Parent 4292 0 R
>> endobj
-4113 0 obj <<
-/D [4111 0 R /XYZ 85.039 786.531 null]
+4304 0 obj <<
+/D [4302 0 R /XYZ 85.039 786.531 null]
>> endobj
278 0 obj <<
-/D [4111 0 R /XYZ 85.039 410.091 null]
+/D [4302 0 R /XYZ 85.039 386.929 null]
>> endobj
-4114 0 obj <<
-/D [4111 0 R /XYZ 85.039 389.497 null]
+4305 0 obj <<
+/D [4302 0 R /XYZ 85.039 341.854 null]
>> endobj
282 0 obj <<
-/D [4111 0 R /XYZ 85.039 219.213 null]
+/D [4302 0 R /XYZ 85.039 191.766 null]
>> endobj
-4116 0 obj <<
-/D [4111 0 R /XYZ 85.039 198.016 null]
+4306 0 obj <<
+/D [4302 0 R /XYZ 85.039 157.02 null]
>> endobj
-286 0 obj <<
-/D [4111 0 R /XYZ 85.039 103.781 null]
+4301 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-4117 0 obj <<
-/D [4111 0 R /XYZ 85.039 80.463 null]
+4309 0 obj <<
+/Length 3511
+/Filter /FlateDecode
+>>
+stream
+xڥ]sFݿo'UX`y&wN!H@e0+KCt_tN: n7fy J@V%my>l< <}(Yݗo\14Xlxnw i-}\<tq 3Yͷ$_~ oK 000vc$HsW͝=1 YG$HmF Tre#*l$#L 8Q-4=y-p`2aꞑ>!>.W
+V_':椞"z'8Qj: ;@/><PvM4xeŐb e9!/az_dqV4h~?Vm@3GWIXt^QoU~b<и2<5cDM>Q6"1aGV瑄-;'gd-۵޲3"d*=7" bEG}m֐E;HMs
+!kn%O3@Lb!6,)tϿ?6x4x wa7I!z@ ̙kr9  ^ۺvbY
+4ABb/-5SdAAoF(wk ]1Y IL{ @ _U
+~uC\80Ʌ& PoS4ܟ
+戮)y&Bm+.%W\~ih>fHꒇ(ڟD"j['QxqӘsfK3](ǧz|r;GXs9#^Ld#9gGi>aؿBA`~ԕl=; Q|:.oQֱIOPx)-#8sRǍ &r=v9.wRI+v>rzo+tU,&!U HMS6SNaQ ue \gSfg<7Tg6 {>8/WL LK&70@cg:kRUV'og
+\g*QVOb+
+4"B(ufq
+>wUu^XUg#JTtR'SCD&;TXTSIsJMR9Y:%J;^06(#%-3j0G/NVC~һ%F}WŻY
+ZX^-f,xīc@}n!2FbCYp .-Uy&) 1*,f1H\|mggͅm>WAXj@箤&2 øb#c &FS^ѕk.ʳּt &DQefS63'}eVp2:@+$b[De
+ni}W1$_+0q3y3{@IT@JkBjj:~BHG@Lv/;R#7{霕p*m@;u)cK\C1}/$!n=g.rrV3=(f|s
+՟2#FLH{/f0GJ+:od\R6k3" 9Ѱsw׌,X۳')DSMEDh:F .v
+Y*Zq4AGJˑE$?P1;a)%sPP[Q\KVSEܥQ[)~cBB<pgZ
+4"5;m!Z=sRy9A8y_0#Co"
+cg')-{
+endobj
+4308 0 obj <<
+/Type /Page
+/Contents 4309 0 R
+/Resources 4307 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4292 0 R
>> endobj
-4110 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R /F35 2880 0 R /F11 2898 0 R >>
+4310 0 obj <<
+/D [4308 0 R /XYZ 85.039 786.531 null]
+>> endobj
+4307 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4121 0 obj <<
-/Length 3300
+4313 0 obj <<
+/Length 2946
/Filter /FlateDecode
>>
stream
-xZYoF~5,vcld$DKPM; fu|Up]$"N";p,v癫#E`;QȬٛo`:vꤋՃ Ym]ܭ~<}ߊy'KpK׺Y-HWnW/@={-}Aڟ~Yli{ߞ9&Gj;Yv/^[3'<bj$AT79꺡v|V]ss;J<'lxdVbHEGYDj.wM+z
-7.cTʧvo͇aĜevY8&#$S)M%A*+w=3ؑ鐿LzvدXt{wc$A^$=7>D_t1dgnv<{M׬Z
-+s &wlI{z`kT,>dEmzE%ڬksC+qS+ÔM]ɳ=[7ZE] VPdSAJ,3lw BW㙝]m&늺-oOKg FIl!bMf3vq8LX]uevT4fv|p8
-) 7r,G'i@O&->kipQyOP
-S>FTN7( jJ>e6\ARlHVb+6렲␒+tlH)#rde[5FQtE>B=m
-c P+uR.
->Ǐ`lr.'iO AsGBEp7amܐӆӆ!*'Tz(0X U  ?Waڮ $B%?rtQj0.uw7omƠ&J
-WJ]dS]]ӡop Ն
-beɳo ndjhok +'mFGQW48^<śpow۵B}aђ!UQ94 v;а.5FߣLK5KԾ&+%Cɇۤ3g|NjA~&Z'T:H؈ӻK18u*5Ә]E%o!U-Q vi @0N&<}hz/y[g%ˌkr5mG
-I<{k|I#: v[Z wyGNŋN R-鈷K|N/w׼ (C] zN٨+HM<c k^\ʰ׳$dyZg_`Nq!e r<SMT=ܥ84R]Sl
-1ZVFfqVC[IR_εfvxAdDZ~r;S$$pAi~
-F?9HuT=1&Ou5CXv\7Gq߮|>;˷:xH Y<_uc Tfi_&sJZ
-ewǵT7:),5_fߥ*Qy>y;ui?endstream
+xڵY[o~ЇR@,wy-z/9'97V9y%Z"LIܖ)3;,7Wdšoڝz~>c!,OA8󔛨d|hI$l\?]4_cН/(v.:v.[_}{sntfi##cuٻe+NO`ٗj9SI3%lw |#?۹ϟ񨱽[^O
+[h5 pC?"van?qHwO2PD9Wܸ,*JPV.cC2zseHƻٯ@ ?hQ Dv5[{l1ZgIGH:<i!e<b]\. ,9PVLy:T]e{<Q >k+Qg|YVARZ6] Z ^vyF7K|߰R)/L8emU>MalmQͮy;;@8)tKOYײH2-Y2f#{J+7`\tBUB@6cڗ >-sA"Vt*ra\n%%Yobp~/NA48a{h%9Bs7I̘y*p#_A4pgr@aC# ѸY.˄&yȓu`D : \/
+fN<Ks<JsM.҂BGxwW=f֍@{Pm7ڍ}ol,o$\E0=eC
+~\zq<6XhB]Z7j0 ?88K.&~v:tx{у h8z
+ƀQ@{+8x|A6(:^_nT1>klXCmZ
+D[dF::hQ2"kzs =cBC;:=":V-=H=bJ,<tZxܡSER!ɐ5RsֶcV._$R ~1TĨ qdUᗗ1ҎPvoSYӎZ*
+K !-Z9)&<F?p8gApWqS{c9Q~D[a@DKHsd{pON`򼾏p@&%@Mq!f"u
+ <|@*|MJz$$</ G;v6"4$E5byqɍD2Xxva& veSh_d-H Qæ+SË9@=NH-Hۗ 7z)vl`]úv%ѱl
+1[COarh`P>:e;9&Yʹth|¤It1@BҳQ
+b %ݕ*@UGz5]K_g?dK<uqHnY%/@:b<X0vʵdW~%_Tk~%eW+n.hB]$áw0CnOϤ&[Zcݳjc[њyD):[ZW\q-h^J!m}|UulG9rri7J{>Lp<,'5"ZW[WMXArupImaφ_coQK2
+ e2*q#9 e<)˔o-ӠTL+|&g9}xWP*bFߋ ~w6af PJHfb!>K\,#ñ5 5As3_ZxV'jx]-^BrC#Ӵj'-v:%e 7%jl_J{ins/c3•?_Z|*TLY/Uf
+ptn[##k,lXDL_`3EvȪ<1̘m ]"T"/Þ_|e+i/ wyR%6
+j8ȹ*: R#>Vec[fAIԝKX;ŸOp0jV='@]7-:'Q?U/N|k#7Bt7cW( ~p` XvmV'C{Q#{)>vǠqyU^X:rܹW(뷾y'!qy2c
endobj
-4120 0 obj <<
+4312 0 obj <<
/Type /Page
-/Contents 4121 0 R
-/Resources 4119 0 R
+/Contents 4313 0 R
+/Resources 4311 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4118 0 R
+/Parent 4292 0 R
+/Annots [ 4318 0 R ]
>> endobj
-4122 0 obj <<
-/D [4120 0 R /XYZ 85.039 786.531 null]
+4318 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [213.892 559.249 384.824 570.939]
+/Subtype /Link
+/A << /S /GoTo /D (samba-pdc) >>
+>> endobj
+4314 0 obj <<
+/D [4312 0 R /XYZ 85.039 786.531 null]
+>> endobj
+286 0 obj <<
+/D [4312 0 R /XYZ 85.039 766.606 null]
+>> endobj
+4315 0 obj <<
+/D [4312 0 R /XYZ 85.039 746.481 null]
+>> endobj
+4316 0 obj <<
+/D [4312 0 R /XYZ 265.175 682.906 null]
+>> endobj
+4317 0 obj <<
+/D [4312 0 R /XYZ 85.039 614.633 null]
>> endobj
290 0 obj <<
-/D [4120 0 R /XYZ 85.039 686.185 null]
+/D [4312 0 R /XYZ 85.039 544.981 null]
>> endobj
-4123 0 obj <<
-/D [4120 0 R /XYZ 85.039 665.192 null]
+4319 0 obj <<
+/D [4312 0 R /XYZ 85.039 510.235 null]
>> endobj
294 0 obj <<
-/D [4120 0 R /XYZ 85.039 538.238 null]
+/D [4312 0 R /XYZ 85.039 413.878 null]
>> endobj
-4124 0 obj <<
-/D [4120 0 R /XYZ 85.039 508.834 null]
+4320 0 obj <<
+/D [4312 0 R /XYZ 85.039 379.132 null]
>> endobj
298 0 obj <<
-/D [4120 0 R /XYZ 85.039 105.893 null]
+/D [4312 0 R /XYZ 85.039 269.226 null]
>> endobj
-4125 0 obj <<
-/D [4120 0 R /XYZ 85.039 84.697 null]
+4321 0 obj <<
+/D [4312 0 R /XYZ 85.039 236.805 null]
>> endobj
-4119 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F11 2898 0 R /F20 2865 0 R /F14 2895 0 R /F35 2880 0 R >>
+4311 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F38 3001 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4128 0 obj <<
-/Length 3256
+4324 0 obj <<
+/Length 2968
/Filter /FlateDecode
>>
stream
-xڵZoB@?.Ϣi]q*"͇D[ER!:;]2; (8cvwfv7CE
-<;"Y~YyZ{\i潻\wÿnxʻ^>}\ SmŇUGƳ`|gGhEuڏ#-?.<-xՌ( ˡiD񌨏Mp6r5^ȴs5)kLdY|f͡onpWߪ1{SX
-SHǹ_ FH{0$'JlԍgjM%-5؅X!XZPf&"f(e/j;Gf g
-@I)m N&FO&^մ;M-"0-"Y~]uƹxXp4a>{$sY轱0(3;};5-lA, 6s,L笙 (G^1 $O؁63{EfOe<-^Þy3 _~E\c
-V{!v T/kEK1wKʴOb,l@kO"4p.)
-]D a.-#(
-9JRC6K w=cA^;;l5M/ұ 5Nm׶(`ԸeGhGUv'F':{\c@3q)oxsj;ry?ОőqGp,4~vk:bōtKkĬ!񫆤,L'̐К
-"@,=Xx<s p#[R8P+0K2]Ǹ08\~PDd+ƶ9}G\WcCd$g
-FrR06&Dzcz$:u%Dx;$X2[Wy
-RxU mREG(FŽ(ߞ,[ ,F۲w"9yo9IknКLztB3 y2L q9` Εc0M+
-FcS ֬Zwet3ʝ3p vtS)Gfc:0ʘ 93hܓ!ia@,.2hHPP{vfwf1T䡍{6Ulxqف
-T,mސO<pCF|W-qX}%H5,`ݞ":"t?j4:-*X?}8Mmضv6QS>~kwr-Ev&kޢ6L>0 fbh#>MP2'LuIG`$Sٛt}Ӛ9Zs𯆠7uiūXC{vRn.]SsɫVqZ+^>َ.|}FÓtȷt+ӽ.q҇k.R37.S#d2)r([Cy\@ix,{ O-N}alH*52$u?;z1Vӷ .0f|}C/bl(59"05nzwʽ`;%νb"\ICv5_B81wh ?b;6܃6f[j%^/Ebh==`n;.`}{ |Q%]wͤR'V%0UzKcWf?T;6cM-ɓZ8RXb쪢J/Ȼy0Iٹo
-eld y<*tJiǹ[Y O,/p'17K=L}/5oϊD`h| F"HEA&8~CV P:n]Vb?ş ,&r'lz!Bغ׺ lh5HRFU'UC J{d4\rp…k& "+ɔ|;w:*&aɏz\Sn@m ;wֺ-ai[B^[:8.V`e~XpSCGn` ž5N$i,%oHŞSk36
-
-h +d "I}
+xڽn_iZk\Yov< 0%w z%y=ޯO$> ARU*YB,giXrsVp i d|'3<gwO8OfwOW}/RA"4͂W( Oㇹ ֛7wQ|__~xwJ!3]|J`P<=:2g +keۋ;\|gֱ[E$" 'NP:")'
+<x/po[BoMQN7];"D5
+G-杂xyQ,恟<reF_քaLi͊wjO|8Ɋ_(!
+ L  zUMK#[=U|{
+
+9bn% F^%/Vuy"c}`Ng RV9Ge}GO7ĕ{> 7P1Zz6vV;}^61|g9NgO#iJ;wMtՆ+T,*и 1[:`)^n]O%ҙîuG
++nS-Wf:y 8wO +J؜ GP4 _
endobj
-4127 0 obj <<
+4323 0 obj <<
/Type /Page
-/Contents 4128 0 R
-/Resources 4126 0 R
+/Contents 4324 0 R
+/Resources 4322 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4118 0 R
+/Parent 4292 0 R
>> endobj
-4129 0 obj <<
-/D [4127 0 R /XYZ 85.039 786.531 null]
+4325 0 obj <<
+/D [4323 0 R /XYZ 85.039 786.531 null]
>> endobj
302 0 obj <<
-/D [4127 0 R /XYZ 85.039 598.606 null]
+/D [4323 0 R /XYZ 85.039 766.606 null]
>> endobj
-4130 0 obj <<
-/D [4127 0 R /XYZ 85.039 571.991 null]
+4326 0 obj <<
+/D [4323 0 R /XYZ 85.039 742.055 null]
>> endobj
306 0 obj <<
-/D [4127 0 R /XYZ 85.039 527.507 null]
+/D [4323 0 R /XYZ 85.039 286.231 null]
>> endobj
-4131 0 obj <<
-/D [4127 0 R /XYZ 85.039 506.31 null]
->> endobj
-310 0 obj <<
-/D [4127 0 R /XYZ 85.039 344.328 null]
->> endobj
-4132 0 obj <<
-/D [4127 0 R /XYZ 85.039 321.011 null]
+4327 0 obj <<
+/D [4323 0 R /XYZ 85.039 251.485 null]
>> endobj
-314 0 obj <<
-/D [4127 0 R /XYZ 85.039 197.555 null]
+4328 0 obj <<
+/D [4323 0 R /XYZ 273.205 216.485 null]
>> endobj
-4133 0 obj <<
-/D [4127 0 R /XYZ 85.039 176.359 null]
+4329 0 obj <<
+/D [4323 0 R /XYZ 85.039 134.663 null]
>> endobj
-4126 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F11 2898 0 R /F20 2865 0 R /F66 3242 0 R >>
+4322 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F35 2980 0 R /F38 3001 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4136 0 obj <<
-/Length 961
+4332 0 obj <<
+/Length 2867
/Filter /FlateDecode
>>
stream
-xڥVMs6WVpD
-6fٰCи&\X5躾
-k23fpލ {5!
-cYma|7Fۺgu=̽m!>QH
- jiJgHJ}
--G{pACVc('a fiBs%4ԟ VOImw$]ح-vK)> 7Ty0`yfwX`4kִ'"$^yO VhH_ ЭuM物 eHV.M׷v%Z &%}m9"<2
+xڥYKsFW` 1x%%W,k#6[I J( _
+HzzKH:{nȍUϟK&(63YKhF(s[)A)R5岓g0۟`phDj;gQmBDk}#Uq]-4BAA嫍-zzNڑ<IhKvoa0"b={2˗K>nO[׵%<#g!{E^tg<{GȰc*RX|͢Ele$Lu_t.p{ FG_F, e0f{vf59H H^dnD8&>$.-p< ȁ#筌+\wא|eeٖa/wv"4t( r>nKaW%̻}#si0V-w+CP)||Il7rrrZ!=5$Gߟ8_qf.\؃9b)d3`0~j8<v21hS:87W*pzJE'0~; ӘM4B0q{+/f$0W_nRPKr= X*wYb_wjYuozƭ5I:['JN?zf3{CL/V}
+S"`'hk+bvVN8j76#ƒ;7,N[p'J|f!.Q_K$ssyr%37Ck PRX tU+|,s,RaRQ.)a<ȷuRoʕ6r@Ii{^'Q`Nn.iR4X"LWvebUSpp|A]bW+lb؜/&yՎF\Q3ZiSV$-g 𬓔XM
+>ܱ7aAָl,?k!ެ^ .|a1V O"WhP<*lfU` i@ I,u醻]EN7LficƉBzN^@Pfפ\D*&F5ʐF+KL*{F[|F+Vu#|Yh:/fN_]e[&#.rX?=hm ]tk8UOq&]kx kD|~ɩ !X7@)W+{ps>P4
+9\zhǔCr'T+7x `v̖v[O(uz&BınM.2UmdRsb3F 2{i+9(t YC|D A|.p
+b\M+DTN衠P^SROvՙ3. z0v~D "Li-Su1nD7}7v#۲׳_Afjr1+ā%ntiE/(ZQ6<{˙#ز=hfT.[bnb(^[L
+ Tն+]}YTgZ~^`bK>@΀3)Vƙ<^
+x"h`?yulsغ;޶||tq/7:6QzJLG#VPvy84c/rLyZP5
+("9?@b,ՏT˼{g:{tS[Yz>rT>I',~k¢qωi TKcg
+Qʼn2pKTQ_endstream
endobj
-4135 0 obj <<
+4331 0 obj <<
/Type /Page
-/Contents 4136 0 R
-/Resources 4134 0 R
+/Contents 4332 0 R
+/Resources 4330 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4118 0 R
+/Parent 4337 0 R
>> endobj
-4137 0 obj <<
-/D [4135 0 R /XYZ 85.039 786.531 null]
+4333 0 obj <<
+/D [4331 0 R /XYZ 85.039 786.531 null]
+>> endobj
+310 0 obj <<
+/D [4331 0 R /XYZ 85.039 522.931 null]
+>> endobj
+4334 0 obj <<
+/D [4331 0 R /XYZ 85.039 487.62 null]
+>> endobj
+314 0 obj <<
+/D [4331 0 R /XYZ 85.039 429.586 null]
+>> endobj
+4335 0 obj <<
+/D [4331 0 R /XYZ 85.039 394.84 null]
>> endobj
318 0 obj <<
-/D [4135 0 R /XYZ 85.039 711.163 null]
+/D [4331 0 R /XYZ 85.039 230.737 null]
>> endobj
-4138 0 obj <<
-/D [4135 0 R /XYZ 85.039 692.291 null]
+4336 0 obj <<
+/D [4331 0 R /XYZ 85.039 195.991 null]
>> endobj
-4134 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R >>
+4330 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4141 0 obj <<
-/Length 2887
+4340 0 obj <<
+/Length 1645
/Filter /FlateDecode
>>
stream
-xKo<_|'H"m@E#)Z[2$9m7/R-tQ"9Cr8'
-_x~Wiq^7 }
-#? :]Qj{\O0{Zqݶ{SBY$>V{<$և/#!dDe##
-9](m0)Cf@Oy5YCv(ཊV[Ζ%+d:^^Xu 80fCc
-q?=hF
- > Ňv4qtn3od 3l$Ě➇gQqM diq1u#*_ZFv҄<fZ ""hCq`夜eO9X\ lNrnJX-+x^!x5oI0nc#; O"ς+=~ZT މVٝkB|v~p@!:8zLBHH
-y<T֝J:89I4+T%/1cH!i
-LWUjg ؄-=͒˲\c4>IϽNK%}&,| +Ϲn]AZ>[MEWq8vj\K<2r҇[$gi!io[*{(H\7c(X Hy#䋱N֩"~{gk%kc8
-w kV8V\ 'MU.Z~Et &~d+~bfuꌆқzOaTqV)G6>T3sO9R)v(͜iNt5&̬K 0v5{gm1lGwzRkK Y=~<KAv "FfCb{#X . gvu*U?q~zT:]endstream
+xڥWKFWQՊ
+`ZW_U~t԰~q19G_k}Wk!Q?mP]2(k n5cqq YT1EVۭ9TA@{:D^Jk
+!QӴ3Ob(uenn=2AH]=7( X'/֫b K*rF<8c qO`-p,0exf\~FePݥp<jYHС,@&6KqLZw֏ UZ캽Bڇs
+o[Uwlo!,AU^e;sd\H\} *h_-$C6ؒ螢u"-^8%p.}Hw a/hunONeC307jfB> !؈bzdjy*)vMZ[ºn:"RZ=w:9nC[vVײ-EY;&xpaZ;5Uy`ѥ2!(8U W ];l ڳ8CSSLJDz(e Aie/5H-20dU燮PТlA|& D>da136yeGd%QTPyQ2i,囅zn.6nK,wgN(K3Z=#&>F+^
+% U+tS:;M@WY#R
+1Q.« 1@Q>GKKh6P{~<"ʨ?խʏb8!痌v>3}N1cpB[6jewD<Ne2jqiHHLgW\^9^'jZw$Vke=|7 n率ȰeP9-y2_<ph;{`Zx g*}a{eg}?p 5,dn^Qٹbx-.}SON_8SlҲVFLA1hTW2hy瀓s--S(z4v+ǻԨq};9oD
endobj
-4140 0 obj <<
+4339 0 obj <<
/Type /Page
-/Contents 4141 0 R
-/Resources 4139 0 R
+/Contents 4340 0 R
+/Resources 4338 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4118 0 R
+/Parent 4337 0 R
>> endobj
-4142 0 obj <<
-/D [4140 0 R /XYZ 85.039 786.531 null]
+4341 0 obj <<
+/D [4339 0 R /XYZ 85.039 786.531 null]
>> endobj
322 0 obj <<
-/D [4140 0 R /XYZ 85.039 766.606 null]
+/D [4339 0 R /XYZ 85.039 766.606 null]
>> endobj
-2953 0 obj <<
-/D [4140 0 R /XYZ 85.039 674.702 null]
+4342 0 obj <<
+/D [4339 0 R /XYZ 85.039 746.277 null]
>> endobj
326 0 obj <<
-/D [4140 0 R /XYZ 85.039 525.576 null]
+/D [4339 0 R /XYZ 85.039 555.076 null]
>> endobj
-4143 0 obj <<
-/D [4140 0 R /XYZ 85.039 498.961 null]
+4343 0 obj <<
+/D [4339 0 R /XYZ 85.039 522.655 null]
+>> endobj
+4338 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+4346 0 obj <<
+/Length 2402
+/Filter /FlateDecode
+>>
+stream
+xڅYY8~ϯGՒs_fL `vY5 INEebU*.S?Q].B'q Piq#:Yq#ͻOQp~!AmxZ'Iڽzzj\7qcc5ZY`S޴!. "(\T'IF6-`HdH%XB4v
+<3z'6;I?'F&v;}un8hT8|4ȓ͹M'VjYbƷ1vq=*NJR=&:| rP![6e9)I|~˾ȳ7~0o Nߑ^VȖ`ΐ ~x9eL0w¸n4/DW OHȼwMg]v'
+^9t!8kRy>CogGoBߡM撼8~ԴM:O\e[k[8/mJ?[0
+.7pƨ(L
+DO{_v餳@b0I"/Ȁ
+Hgّl
+tf@{. M9V|JS:J8O 7?[Bk n-tPn(<_o5y"ʘ!d*&Mz9!vkbT{Y?SB4l[P0Ĥ83Y-V8ֽ&;v6s)(M雸sԭieoȢ1傾vS^zD޿#BGǃR( =6ΛdB[}"ßPq(\- M+?қ10+}1
+hŅi㩷5"M%P
+5"ZlLX?.^`xeĸ"Ř?u!`"|nPꦩtJr (Ka''FOC g')?u؍а'l,
+Z␜E?ƚccƔ6s.&oGf&Awߗ!st\M]@]9)S-o\^E氖vV|]+ѩXX223h # \F>0?iT<c*v?-cLqjw$9 VMF9҂ыn, Gyc׋;M!±#y ,_yĽIs#y΍Y4j7L]ζɄK t>](f{޾4!]QQnvWk:6 BCOAPo)4<g= #_LbZ:W5u[`!V7j9̮`_:L@c[F5gPlao(}qَFIyBЋ\~}R00O6K0WtFxsIb а1Yj>I<]I=؄=&/~0tl_?|16ӧjke$> 'VmIcVz;v<*
+endobj
+4345 0 obj <<
+/Type /Page
+/Contents 4346 0 R
+/Resources 4344 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4337 0 R
+>> endobj
+4347 0 obj <<
+/D [4345 0 R /XYZ 85.039 786.531 null]
>> endobj
330 0 obj <<
-/D [4140 0 R /XYZ 85.039 139.947 null]
+/D [4345 0 R /XYZ 85.039 766.606 null]
>> endobj
-4144 0 obj <<
-/D [4140 0 R /XYZ 85.039 96.006 null]
+3027 0 obj <<
+/D [4345 0 R /XYZ 85.039 658.638 null]
>> endobj
-4139 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F14 2895 0 R /F35 2880 0 R >>
+334 0 obj <<
+/D [4345 0 R /XYZ 85.039 483.626 null]
+>> endobj
+4348 0 obj <<
+/D [4345 0 R /XYZ 85.039 441.341 null]
+>> endobj
+4344 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4147 0 obj <<
-/Length 3738
+4351 0 obj <<
+/Length 3094
/Filter /FlateDecode
>>
stream
-xZYoF~ׯhh(yͶF2@jp=CNH%o]<hwl 죺]8.vdšxb?qwW(o;a]nNο ؉,n6Drl~͛+^(.?,]|
-ꯖ+z߾77VϿ: ı$^Cٱ$YOߓf<jfO+ l/Tq͹nr:M/UlUuUm2)5l6*ش\Lk$["io)׃ҫ[hH<u.ly!|}s<J6r`պ"N,-\˕Jh\jqjB8jk|nf[4L_rUx>ָNccЌ|uILhҒ6 FIrU(82b_voV:t/y݇k&+Mk<M ,J\y'̹ɹa9-R⩠o ]sf&A)JFQL~
- WpϏiw,\"EQ$k@:M2TY/nQRj+ys\jD[Rq`e=NZkW0CF;#ULU=so O. QЙv^ CHWtyCtIͳ |9ύ†
-jEʝ8#AʩeDALAmZ˗=#;ݽ g6<SOh_O $N3c_aDEXi:޼w^L6e@92
-j$_5nh#]Ѵl=u:AIU(5qub@^]'5a0NT +UY$E@uq˴B/aq880BMщɘOŠ͸-Z5'I =^ID"hƎglHZ({\6ۗϸ҆w^$WV3/Mb&p%6$>qÁԍ% wm@[X "1T+Tv<70wsǍƓ眃p x`;)_# $9 q/NXT]zZc}` SQn/3tƤ-2e
-O0;Jn: onpc#7+1pc
-V>2AW493P-U_T=_)8 !}JrmYw~.
-9;R{\
-xWKWܣ_.eMoF9ڦZY?iST.P n/^@;nKޖ0 T2Kf*nNO0P980A ⲬTl@-mW$DⰫ.Dt`OCBd b-5O%|3n!ЂVC\
-EKڀbfL (cKBۍé!ut7o朆rc;fKެ {RwlF͢\35}ztV)'@JE
-fԑ9]fGIRY 4&> J: 61h-av9@d,(mN&ԒN\Y[a๝YSZ ,T$
-/@EGˌ#/&nc2q',XZbZM>8"8~`Z^+dʩxv0PFP 鍉r\;VQ}HmXEaL/tek%?㠗txmqƴ 3)ub[.Q*AHj;͝î)V: @d*p+Mk B't8I`+$O4{򇍳9v'UJ~ :EVz+b|!- R<*HRgXQ %"wZ+0g*Lia)RGc B ޳}ǎ^AU2Z=J'>11mt>m*]^ڇb|&'(<Θb3BULŜ4MBj6wz:u~l斤w/tWVwu)J:γ˹n't\>+#@@r*
-;c=ߐ%_s%p=u屉?Cof.f)>j|j7|ٝuD?{%v o÷/EeR}֥VA
-&z#{FLRNҮѬmr6{%Ho
-;Vs*6ĵ5NQaktp?y]u^ `?mlZ*p2B1/H]#SV<O'̤i=yn;=WJT@H·LBՕɵU=X6_+Yߓ0ߜJpd f\+EMڞڪ$ +1Ǫga rL=xlh.2UV2 B Kfqe"$3'|JIr/n@Ȫ=1xm.{@0vBy"F_`EJn YY/ l7+pn?}j:cFf4/1endstream
+xڥZKs8WDU4ߏ9qf㍕Jf
+>;ۭ8=7ˢ5nF#oi|7…fB|/q8[X <Gؖn7 RidN}G
+^5ЪSCJ9 +dnuVC
+j
+n졫I %i٪F=$lpQW4P‰S@>MN[}8cǍMiy 3H mcd#Ȣִ;W&oe"摑Qġ5]͆
+0
+\[QuzyEb#JMg\@lPTL>)*43tߕR%yf o'!7rA'IziFZL
+%d/;0~G'pVg
+6y|*~:p]55z_jΒhܙ}e`
+A;"}?~[R洬'
+# ͬs0š=r3۴( [.nF1(0*)R1 <%R))%~lXI0LZKoU1 *v#/$JR7ܧ&>
+r(,3%?0CZjA6Xů
+k
+%-+RuLוu) O<t5@"~+Tc3q~6FEB!Y `;I:s2}d9󚫿 xYGaq
+tۊ3[Iup m̋OOSf|f#Օg`?p>[9 Kg,u6p%xPsyQ+!ap`yd{]p|Zg}Q#4 ?`W pZS_U(_SqlLwu4 &cQTR*6~;6,Ndl#f9rLӦs@vX޳j9t1jOBXcv[Y9{jݵ} 3=j_V:Ĥ^Jav{j'*-P[cQىO1\IWip1qάZendstream
endobj
-4146 0 obj <<
+4350 0 obj <<
/Type /Page
-/Contents 4147 0 R
-/Resources 4145 0 R
+/Contents 4351 0 R
+/Resources 4349 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4118 0 R
+/Parent 4337 0 R
>> endobj
-4148 0 obj <<
-/D [4146 0 R /XYZ 85.039 786.531 null]
+4352 0 obj <<
+/D [4350 0 R /XYZ 85.039 786.531 null]
>> endobj
-334 0 obj <<
-/D [4146 0 R /XYZ 85.039 261.05 null]
+338 0 obj <<
+/D [4350 0 R /XYZ 85.039 695.833 null]
>> endobj
-4149 0 obj <<
-/D [4146 0 R /XYZ 85.039 242.178 null]
+4182 0 obj <<
+/D [4350 0 R /XYZ 85.039 652.689 null]
>> endobj
-4145 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F35 2880 0 R /F66 3242 0 R /F20 2865 0 R /F56 2890 0 R >>
+4349 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4153 0 obj <<
-/Length 3269
-/Filter /FlateDecode
->>
-stream
-xڽr]_)8BdNDk*u:i
-_|I
-L{~ɋ DJ&א8
-[XVS9$p lt Wϳ3C&Mf* LQR>b.~v㎖҆qix_ xWy uz ]W!( fgV;d͒0" /So٭dD.e%W{!CӕNu G-9N8G `!X\@Fd]Zl`ּD_^ f.G`8@v-H]n#<2  K<tQ2_MX== Ə|O0h@Uru8
-U8 ݺK*ySF.:/цDͺ"o#X68 R!V@ܬ.9ɠG&3bFMe̗$Z-1<|zvW\*;2[3f czIx, 6k[:nrv:Mk$- J^E]["Q8DnwnFqY
-/h/)4^ıiy@N9^;d̼U*++)4U88,9@S_JQ7$_g<7ƄO/
-pxLM\)pznW\T)jwYN&WEG#GX ]5k
-K J1-Vpo gBK
-)~&BpJhq+)A^NArcHBzsHd6Ix^4EP,lY4Rs^ d!>lʍ2``*/J%ā8`ͤ1yl
-b=J˱\mF6uSUx ~3\HYqPV+7hylbkd
-cqז>dN2B
-EsaxJga,e9/Ma@oiJ=eE97*Ic8]
-KlBXNMb pG4KK:KW*IFJ[_ccorO>?)͔Xl
-LB@>`N*Oc%m/
-ᗬS6Mt23Ur
-2'X8Fql"ߢۿ &wkI`VU8Ug2)@cq׺bՉj1_1[.޷Pʽ~id@hsx̙p"YM,q^˭D{R'=Z#P>Ɲ.x>Y,7gpRT)༨Tyo0`猼]>ױ* [=YǬ;
-$=k\P߅Mdk$q}c40PyC1r#6
-:K]HΕr83LsBE՘I
+4355 0 obj <<
+/Length 2231
+/Filter /FlateDecode
+>>
+stream
+xڥioF0U %iu$ڋ.E16<Tk(J` p7>F/Ezʤ8E^-L + ]-R.n>tRiO7o^'n'wyo_/]_懳7#1xg`34Y<Zy:MY/ |WggiY`9iCxabND\}h1ɛ5K?qDk_fxb|^:ql
+ջ%pPܙdAtP+7boEǸmM]PIL4b438$Evo<oȄ W'fPք,їwj-%Cb,WjÒSGݑz (1^&_ KQOc^ċ4{>JP9
+"Ԍ_"r=NAP
+!%@B*?q(P:d^ ܨQ e 8' ~7:#(lk)*CP|5%q3GH5We٩
+YB\lZDޒ^0*kDF)=6% YH(;*OZ~={ۧ
+G7}^ZyŹ K&9n^1P(/x~<?;!63Ex#2ߠؘ{wR4MtXMA6˻ 8 vDIDKDx7x[ ;y\fԋMx0cC7'!nh?Կr'fò&YA(zmb
+CC07Se)
+xO ,tvd.ŒDuiYlѡtz|鄳0.X莛{71O:bDK?'x $u JlGU
+x8M^KǞ-x2Nbi%*yn [vϼ Yi}
endobj
-4152 0 obj <<
+4354 0 obj <<
/Type /Page
-/Contents 4153 0 R
-/Resources 4151 0 R
+/Contents 4355 0 R
+/Resources 4353 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4163 0 R
-/Annots [ 4155 0 R ]
+/Parent 4337 0 R
>> endobj
-4150 0 obj <<
+4356 0 obj <<
+/D [4354 0 R /XYZ 85.039 786.531 null]
+>> endobj
+342 0 obj <<
+/D [4354 0 R /XYZ 85.039 683.458 null]
+>> endobj
+4357 0 obj <<
+/D [4354 0 R /XYZ 85.039 651.643 null]
+>> endobj
+4353 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F20 2965 0 R /F62 4052 0 R /F35 2980 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+4361 0 obj <<
+/Length 2975
+/Filter /FlateDecode
+>>
+stream
+xڥr_>` xI٬7xwv$y%ZbV$(& $=ɬ
+M>IDY'E8Y?.@d6;Lt0=x<ylL͇j:K,z7ͫ<}޿tn~?7w$X"T&&O0"F_5&59WqUIO)A(6|
+$<IDEiL%9\cAtm+`a"mWx[vdk4-eJ`8U_~vo%$X=
+zNq?g0Cъi<NgR]= yTwz'Np] gC;jCI<+<<bq\\[p oxʭExu>I r`uC~=3i.rz'ۀǐq`&IЕi/s,XE3h&19 Ƥ^U4qy1d ^l6Q$o贻/I 4Ηq#On`97 59:8,%n~O#nU.x-q@@ L cԞ
+|$+Io.RЋ)zcETc<!hok8RZ ["EFb͊e`Yf܃I!1$K[Mt 0vT.5Z<},(aoߙ&-Ym0,(mcev9C.匍94pc%Z9S 1?߳; CB,M-;&G;Y]uYڵǞC<UPhS-bp& nG AlP\: YnNEp"1e#֥];C5/{a# (ElJBkˆG}`St8њnz843 -
+"|F s-9qnɠڈXd?UP(E(
+5X`P"R"l*(P  mx-fCxKW
+핼/E#i?jN@$3E"bùBon)u/ ]|96N+ ~pÏO\Hda̫=?ߓ"JakXj0"@
+HZ<c~4J#TX|},I-IU7`?F:Uy0L,3el& m9$Ssdl$o9MP |~8;n`hT"m<s \O &M}N q 1
+8p`yM5o~Ub[lt?MomMU7<Ȓ
+P{>kιzSBf o<T8s-w7,T0v~s&L99vn|SL|G:*{V:/8 8s-| G\(ě4!B 9݋cc@!v-h9/]@˗!0:t1J\w׺ȵ<+wk(pr}M85.H?0rL[;!
+x4^7pi(7)kLq|
+}1
+WU1|\7P<X2r:!TG 6,à;
+9*>[X'8᜼ay =5`tr&.)Cq<UЫOT;s0 
+ǂʢkoȕfٜ+`Fer(Bʕ w1 ίIRɡm WϨqrm'|)Jq6|nA{9x p3is/?y|5B:VZ<0i&K u{i?%0 ^w
+endobj
+4360 0 obj <<
+/Type /Page
+/Contents 4361 0 R
+/Resources 4359 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4337 0 R
+/Annots [ 4364 0 R 4365 0 R 4366 0 R 4367 0 R ]
+>> endobj
+4358 0 obj <<
/Type /XObject
/Subtype /Form
/FormType 1
@@ -12797,1185 +13666,1213 @@ xmIn1 EOPwu$Ig0ľ6V5 oʯsO #h8:5?
6\>RgbWj[
WϢ{6;F])/ԬMu;pk;̩dh<EAw𬱱NtD²](;厰rL T͡誋tw_ =]=uS"yl-kHsreOڳvg<7t,e;Э/IB&(󻉨Yٹ,kRԚ'^ m" ^hW9AVy©/f"Fy-Sng \dƥ}B$w1.&COVX9gE{< P)!ZşLު~'UXLcXsЖӒ~BLƹONZ_[.*]3Q!-endstream
endobj
-4155 0 obj <<
+4364 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [369.053 626.992 448.095 639.894]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smbpasswd.8.html)>>
+/Rect [497.496 355.905 539.579 367.898]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;173673)>>
>> endobj
-4154 0 obj <<
-/D [4152 0 R /XYZ 85.039 786.531 null]
+4365 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 342.356 401.53 354.349]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;173673)>>
>> endobj
-338 0 obj <<
-/D [4152 0 R /XYZ 85.039 328.177 null]
+4366 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [401.962 342.356 539.579 354.349]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;172540)>>
>> endobj
-4156 0 obj <<
-/D [4152 0 R /XYZ 85.039 297.885 null]
+4367 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 328.807 298.441 340.799]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;172540)>>
>> endobj
-4157 0 obj <<
-/D [4152 0 R /XYZ 85.039 175.943 null]
+4362 0 obj <<
+/D [4360 0 R /XYZ 85.039 786.531 null]
>> endobj
-4158 0 obj <<
-/D [4152 0 R /XYZ 85.039 160.272 null]
+346 0 obj <<
+/D [4360 0 R /XYZ 85.039 538.26 null]
>> endobj
-4159 0 obj <<
-/D [4152 0 R /XYZ 85.039 148.844 null]
+4363 0 obj <<
+/D [4360 0 R /XYZ 85.039 506.042 null]
>> endobj
-4160 0 obj <<
-/D [4152 0 R /XYZ 85.039 119.625 null]
+4368 0 obj <<
+/D [4360 0 R /XYZ 85.039 278.031 null]
>> endobj
-4161 0 obj <<
-/D [4152 0 R /XYZ 85.039 106.075 null]
+4369 0 obj <<
+/D [4360 0 R /XYZ 85.039 248.811 null]
>> endobj
-4162 0 obj <<
-/D [4152 0 R /XYZ 85.039 94.647 null]
+4370 0 obj <<
+/D [4360 0 R /XYZ 85.039 223.834 null]
>> endobj
-4151 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F56 2890 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R >>
-/XObject << /Im2 4150 0 R >>
+4371 0 obj <<
+/D [4360 0 R /XYZ 85.039 183.186 null]
+>> endobj
+4372 0 obj <<
+/D [4360 0 R /XYZ 85.039 153.967 null]
+>> endobj
+4373 0 obj <<
+/D [4360 0 R /XYZ 85.039 128.99 null]
+>> endobj
+4359 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F62 4052 0 R /F35 2980 0 R >>
+/XObject << /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4166 0 obj <<
-/Length 3109
-/Filter /FlateDecode
->>
-stream
-xڵko6{~2f hlnѴ{~P,VcK$o6EZCəpf`_0Kl2Q0[n/
-F~ßi~|Yf7wrS|^ͫwEE^$I_|
-/t]n-qy?+/|e
-l&RFG򽹸[gM SYhpDI!
-BWu\]s̱ <8~
-*94ABHL<ڲc) 6%ҧOsVk Bf*cRa=iIA~Hy=ܦ)8= PSu-X-Hf[nIF@]u|sUޯAI*Y$Ƣ/[Puf̙h|3cйg''L =f맂T =d.)Vq
-Ջ,NgD^Vu0'5^y
-fc8C?D]r6!'YVس­ZH2k
-H=mZd tN5d^@v:VKre<ՙL[BRj&zZ)g`y}6q5f9ußo}6vo1~dyoN$skjʁ4̜'٥ws$B
-R˸Xv4_
- KG$RZA4>,]ZB{rPNj҂un3B?nFd/q*엗C1XđK*H6X8R:ߖ,b.D#g#>zB·񡿕Ele(Cؑ(Ēb`X߯]lARU'6\4MTݮ\&0uRd9f6)Ɩyoxzs(<*(i%d 01$ZP0P
-n?Y!Hx}ʴk*UTTvW09c'OWwS\ :;Pa@<>~xj5ƣ )d悗 C}/gWA`%#Eٗ ppL`›%e'T~ٹj:axiM,3/0 {w=2
-d6Ee]4Hhtb,"[س=镤A?P轡1/$%?VΧPOHa)RT+o3 :Hi|t:8} 4JZ8rVG93`&AzSf 8/H:ŚAiY*h{.B;c M 8TcqY='l{)q.xa J b+Dn`ƞ?eQpڤ:/; UCVgpUGD!|t($#slLFiiMX
-cؑ!ֶ`09IYa)Ț@+s
-20vOK1)_f+BJBC~eYIȺmrM,)=pJJFBU*)uG Wce vmG A1v Gz\)=*49w/Xx:BF~W^\m\<P(OpFMU:ye&.\)h!$hӧ0*0Yd`qW̗R&+!7ݏTAS&eI-{.FRU?\w})v^HeI<;:Tq8<}VY0uendstream
+4376 0 obj <<
+/Length 2613
+/Filter /FlateDecode
+>>
+stream
+xڥn_!lQ1/CrHdEMcY Z-}mHJԇ"9s̹_F̅̄ Yl"lpg' AY p,/.߇sU&}wN0fsEN86s#o|9`o _|2 W=U^̶: To.n/՝kzƻ /QHȍ:$  C$+_" ]ߑrGqO (v<mYu_[Ze<zߴ8xjU˶9%P48ġNTrMN+ {N?EKSDg>/q
+žyqBk 
+ PCBS`(-
+ǂeڊ8 (Hab>*;r0Dt&?r7-!g B?Ka0*1 X[b(Q &(/vINendstream
endobj
-4165 0 obj <<
+4375 0 obj <<
/Type /Page
-/Contents 4166 0 R
-/Resources 4164 0 R
+/Contents 4376 0 R
+/Resources 4374 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4163 0 R
-/Annots [ 4169 0 R 4174 0 R ]
+/Parent 4382 0 R
>> endobj
-4169 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [211.976 664.189 306.903 675.879]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#ADDMACHINESCRIPT)>>
->> endobj
-4174 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [395.47 69.841 512.306 81.53]
-/Subtype /Link
-/A << /S /GoTo /D (domain-member-server) >>
->> endobj
-4167 0 obj <<
-/D [4165 0 R /XYZ 85.039 786.531 null]
->> endobj
-342 0 obj <<
-/D [4165 0 R /XYZ 85.039 766.606 null]
->> endobj
-4168 0 obj <<
-/D [4165 0 R /XYZ 85.039 746.277 null]
->> endobj
-346 0 obj <<
-/D [4165 0 R /XYZ 85.039 554.208 null]
->> endobj
-4170 0 obj <<
-/D [4165 0 R /XYZ 85.039 519.268 null]
+4377 0 obj <<
+/D [4375 0 R /XYZ 85.039 786.531 null]
>> endobj
350 0 obj <<
-/D [4165 0 R /XYZ 85.039 476.904 null]
+/D [4375 0 R /XYZ 85.039 766.606 null]
>> endobj
-4171 0 obj <<
-/D [4165 0 R /XYZ 85.039 456.309 null]
+4378 0 obj <<
+/D [4375 0 R /XYZ 85.039 746.277 null]
>> endobj
354 0 obj <<
-/D [4165 0 R /XYZ 85.039 249.234 null]
+/D [4375 0 R /XYZ 85.039 526.981 null]
>> endobj
-4172 0 obj <<
-/D [4165 0 R /XYZ 85.039 230.761 null]
+4379 0 obj <<
+/D [4375 0 R /XYZ 85.039 494.764 null]
>> endobj
358 0 obj <<
-/D [4165 0 R /XYZ 85.039 104.375 null]
+/D [4375 0 R /XYZ 85.039 441.176 null]
>> endobj
-4173 0 obj <<
-/D [4165 0 R /XYZ 85.039 86.508 null]
+4380 0 obj <<
+/D [4375 0 R /XYZ 85.039 407.032 null]
>> endobj
-4164 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R >>
+362 0 obj <<
+/D [4375 0 R /XYZ 85.039 172.858 null]
+>> endobj
+4381 0 obj <<
+/D [4375 0 R /XYZ 85.039 140.836 null]
+>> endobj
+4374 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F38 3001 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4178 0 obj <<
-/Length 2895
-/Filter /FlateDecode
->>
-stream
-xr]_SKsڪ<ȢwNtdŕ$A1H(
-O|g ; ,;v珌g"{KNJWOICZ L7َ@9ELģEՐX²୨e87sB3{EbUcqƂ}_G[?_`0Yͨ]1)[HuiY1sK`)iV˺(įa Y /P%Q솰TSghE=T|<@di\A'(QW{1N%J(A-<TcyzvD3TcѬ2A,?,ݛJQkp|zBYLL| .D mF(h*=\pT3_ߗ
-T;c ǠJ1m:һƲmVE1ZYN]owt O"n)r3_6vIW>ۧ,r>CYrF7nR5nhW*[X]Q|lG9Φ[E0lx=HJߍѓ7PGCF '8Oplš,,^$H:=_ l؋\M@$q[yoMHd2
-?#5c.X8qAЏx;PXx0m բ-xoZ$ܱ&wN5܄lR:^j4_("Rd/H<Q/9oY` _ЁCs͓z =DkS>
-`Gݚ"`=9>{0jH*+q Sfbr wB^vZˤ4Ӌ ߸a8*nYS*x}eQ+fc :=JЉI/5t,Mq11W'+J >@T4LNmJYLtLmjq
-a+[9my87@zUAC< (dI{o_j
-Ieu4xt^B&"i"~#E2bb_53~IYg;:9p,|!Ӯ1ݜt|NM9GendyCfxD]mcS}QZG<Rk̈́[Ҵ͟w y 7Vݜnl>=#vP1>]aRAfE8mZcFE>IqTowrdlZ)ЄF+'%Þlp7WL%c@=|Iz"73ˤHLJv=e͌/s_zQxu<KV84/*ZCؾLC?vKOnwN6Z7-2m>$脭bۆCI763ǚB3y!YN/{ Iτ-y/Ow=ok`}yt%,?9괲rLYendstream
+4385 0 obj <<
+/Length 2819
+/Filter /FlateDecode
+>>
+stream
+xɒ۸_PUL
+h0}~2YkX Gqx7C]݇;~7i <}}~0 hy?|ed
+c_4Ъ0z{ׂ6
+{̮{ C1{;{"ǁthbo|-72WVMy$/{+
+ GK.Ĕ ]lFp7_axo`: aCS<Lj/s.TD5(ɔXMdlY6I=<X mu63EEH;#d֦HHۏoih"?<C=P<bW%O^OnS҈,+k$;0c2# %ͪ -%bd 5!pmS"@;?!AG&HT>X7%4l*#E(~f*D7?+p
+Kk4cޒ<Q/g
+)[ d=9!`T: zvx]H4x29X~|յ`XYvu2
+ ;Iv
+D- 1ZL t,(I,\>zG\z?D^ĺCۂ9ia&ϡt o'
+g9t6Ջ/7',V< Z[rC ?t{Olr졣oʐc+UH87FHn 2$03-`c'"
+
+BUMPR%g̟, 6[Eawg39eUsDl~l=mE)ٰvfsUi,V/^ ̲+JFφCÚĹЀaYBҜ E'
+uFet#I"8{rʘӍˎpߎ뉇݌8B*j8 7  zWlbXeſEC2 B
+tE򃉬jUn$@p* 6l ˦+$MRA՞?fmE>e91Bz43[L1Y` "
+"{8XVhZb)y,0+rp), 2T1Ha=:Zv" fmfPfh"7=*Zٜ$yo6ٷb~, MeSmG 9zk>~e<qt
+r-o)jz
+g BT?i*Ź ~Lv :Ac'ٚC|A'$ G4{ߌaQکJuD@ouLxH<QHlX!24؃R0FrVg>s.S"S^M**1픠r@*S@sab;LW$ Pu>aˊg6@,u=ILc am!: l(BJ
+9Չ8DIGIS5hOc5=rHػǹqJ W<Eދ.BK=Ŝ*ls(Ti|In NkJ#tp09pr&2F-vIU?:Y2q!v8ci@`u#"`w>M.Ԑ$}d̄L,m*
+f, yO 일kԯpU?~-X{mQ'J}9auDG^yl}uI(՝lX+wZ |BPuA*eYQxo[ [@ȉP8|}^ a AZ~x$e.9$)dn{{5)v{hhIRjoftQ ߟKR4I)Q3Gb|dzE١A8I=ζ7y ʷ APHf~.e ?Id)Ӟ(V3$*MNxŁ#K. 7Fendstream
endobj
-4177 0 obj <<
+4384 0 obj <<
/Type /Page
-/Contents 4178 0 R
-/Resources 4176 0 R
+/Contents 4385 0 R
+/Resources 4383 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4163 0 R
-/Annots [ 4180 0 R 4184 0 R 4185 0 R 4186 0 R 4187 0 R ]
+/Parent 4382 0 R
+/Annots [ 4388 0 R 4390 0 R ]
>> endobj
-4180 0 obj <<
+4388 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [215.483 606.235 334.938 617.924]
+/Rect [342.437 635.375 479.339 647.064]
/Subtype /Link
-/A << /S /GoTo /D (samba-pdc) >>
+/A << /S /GoTo /D (domain-member-server) >>
>> endobj
-4184 0 obj <<
+4390 0 obj <<
/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [226.58 380.651 265.633 393.553]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#SECURITY)>>
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [155.273 414.06 312.906 425.75]
+/Subtype /Link
+/A << /S /GoTo /D (samba-pdc) >>
>> endobj
-4185 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [203.74 321.487 256.096 334.389]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#WORKGROUP)>>
+4386 0 obj <<
+/D [4384 0 R /XYZ 85.039 786.531 null]
>> endobj
-4186 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [289.289 249.077 378.732 261.07]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#ENCRYPTPASSWORDS)>>
+366 0 obj <<
+/D [4384 0 R /XYZ 85.039 697.007 null]
>> endobj
-4187 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [250.286 221.676 327.4 234.578]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#PASSWORDSERVER)>>
+4387 0 obj <<
+/D [4384 0 R /XYZ 85.039 665.591 null]
>> endobj
-4179 0 obj <<
-/D [4177 0 R /XYZ 85.039 786.531 null]
+370 0 obj <<
+/D [4384 0 R /XYZ 85.039 619.932 null]
>> endobj
-362 0 obj <<
-/D [4177 0 R /XYZ 85.039 766.606 null]
+4389 0 obj <<
+/D [4384 0 R /XYZ 85.039 579.768 null]
>> endobj
-4175 0 obj <<
-/D [4177 0 R /XYZ 85.039 744.844 null]
+374 0 obj <<
+/D [4384 0 R /XYZ 85.039 361.265 null]
>> endobj
-366 0 obj <<
-/D [4177 0 R /XYZ 85.039 551.795 null]
+4391 0 obj <<
+/D [4384 0 R /XYZ 85.039 324.398 null]
>> endobj
-4181 0 obj <<
-/D [4177 0 R /XYZ 85.039 530.598 null]
+4392 0 obj <<
+/D [4384 0 R /XYZ 85.039 309.653 null]
>> endobj
-4182 0 obj <<
-/D [4177 0 R /XYZ 85.039 516.864 null]
+4393 0 obj <<
+/D [4384 0 R /XYZ 309.697 315.627 null]
>> endobj
-4183 0 obj <<
-/D [4177 0 R /XYZ 309.697 522.837 null]
+4383 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F62 4052 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-4176 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F56 2890 0 R /F35 2880 0 R >>
+4396 0 obj <<
+/Length 2526
+/Filter /FlateDecode
+>>
+stream
+xڭYmEQ\Z
+{wm\֒mRr7RrK p3Cڟy?[Ʈftq6͍7A_o|!ۏq2=7zkdgl]|u{^2_a|Kǹ<=~fӇ'~?_h|Y<tam !.߼Y~0[\?fMn]߬nnuq_4YSå/vM|:4_Dq4 uNֱ0KW7KWDat(-y1ySv%Ѭ!+Fu=Jh䥌ĀWZ2?ptQj߂cnHvonZ88pGg}y]q;an/k<?ܻFQ*X~/#;7~bMvaW[tF#yk|$RSF?=sCV/d7QAΠs*xm 3вiKҧm^'yb_X%{o$6} -W}%kQ۴
+,Aļ(y۵ܣdD Ͽ?8E/(x
+gQh+&? a {B7 ZE 8` }p2[
+Zue]5WNxmN<9jޭj$IœA[<}~<
+*! 2湃(z
+8v.7Ęh}r( {OYZAY%ǝC`~f|x^l B9yD>|A5h i=. caţ5(jq]2"m`1ILLj]CvB=M]eߋ'_Mb{۬a/ܩy>i.A&&B-'bݱopjGO)f䛶K;ҡ#pxPI^ad6R6"uoPaFF?;y-lL7I#c N_l~ƺ7d2endstream
+endobj
+4395 0 obj <<
+/Type /Page
+/Contents 4396 0 R
+/Resources 4394 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4382 0 R
+>> endobj
+4397 0 obj <<
+/D [4395 0 R /XYZ 85.039 786.531 null]
+>> endobj
+4394 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4190 0 obj <<
-/Length 3550
+4400 0 obj <<
+/Length 2644
/Filter /FlateDecode
>>
stream
-xڥZmEQXkEz+KzHkɶRYHQlyQ噡‡Z"Ic/
-b[B ОG8w^(lq!^r2.WI.xo>p[xr޿xw,ҞC\90,]<AT-:
-H^]]c􂿚J `
-}/M9l~Wv+%=2_;`\2~SU%>] ox
-{(s7@wdˢ -wkC~ݴw(|[ fP~joڼHl04c9)kڙ?ӺQL}Tո+ 5͊O9C0}![Clu=oFz757H
-{x?bg /;+`ț=nG-xjB
-5ȶRqf75WA4ʹMrѲ.znFbkuϷ?~|F~z˺MGuO( ZpbPM#+S&@C1ģO"/щPvaPY7ұ-pQ[^ƖMۣ/ɾe੄km<e'EΆ%NlZm8I@73;֑*K'^%^!fĶiys:SBeYoy ݻN3>7 BsK llpҖ7\a_:MFrQEHks"K$+3k2LgfcQ` [&:WRfC([A?юJd<R
-
-Ω:25mE^ AW6bG5nsW:!2Y .qB[]5[ l
- 0y̖s^~ƌ7ȗZͺK*W;HpJ ;w^ maӻ}5J(۠i5!“ 0$@h8Ǧ5d bR2X~*b@#VH>}|8N.%q4we^&<t~<
-.%дYؽC0=_bH = "1b4(twIpTHO
-\|61@Up6-f`bPŋ, K':.^~7۝}u,; 8.9Xc&DRʼ19¸揈sNxQ+Bĝh-KiRo8UF3a$(rX|0endE~`Q3}C6xpmD̯g6Kkݐ1;y3DQ Xw'ʼn?
-]{]5kS]#DRXEy}0=G"@<ѧsEf]ۡ|}v;C" evON`6ܟ%ljI=#k!Dq%-a??|R|5jbªZ1=-]28@ʏI|OxYEEAu( ñ:p+3ɷaj6ohθι ;$ϗ :sԪMs!‘)MARlBQassR&:n̮n>>kA$S!~HKV?Uj/̨8t0[ /HB Q^
-
-UA1(
-UM"Qdy. i &LJ
-A{C6Cg\ B R* Y3)Y&aPU
-$ S+\3׆#y:_>c <
-8[l,nO8gJ*p#hV5Qt8&O8Ar(׫L9o/|.Hao1e  -1ɏUC"s /LFq" pvgLs[צ0Րy" x%I !mpɟZ@v;Y d+dzݩ}06jy-D>*'9Q9',UJg
+xڥY[s~ׯL
+΄.X
+O rL[))
+mF+ so
+f}L>v
+Y7pI_ M&zD(
+ge Ŧш
+0]"2ը3)njX Qb
+%;g[qD7FA#Ӳ-* 0P/dZ}H Z#{XDVre<sK,(cHr'YK-F&.u8/^,<\{#6STT<I2l o~Sbdݸ̂.
+sEZ.B1RybSfd5g~kYWJ_dDYh瓒w0Ę 8&(qlGrmIŌK HY^.o6 Ȫ
+&"M9ßA "ѭ \ )=(y΂o_xafߗr0DAsYL9Y󈈴#g RvՍ]y[7Qdk%3 rs{ A%gPk
+pK\dV 5L<%
endobj
-4189 0 obj <<
+4399 0 obj <<
/Type /Page
-/Contents 4190 0 R
-/Resources 4188 0 R
+/Contents 4400 0 R
+/Resources 4398 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4163 0 R
-/Annots [ 4192 0 R 4194 0 R 4195 0 R ]
+/Parent 4382 0 R
+/Annots [ 4403 0 R 4404 0 R 4405 0 R ]
>> endobj
-4192 0 obj <<
+4403 0 obj <<
/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [285.619 542.708 316.703 555.61]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:net.8.html)>>
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [153.691 493.507 264.18 505.196]
+/Subtype /Link
+/A << /S /GoTo /D (winbind) >>
>> endobj
-4194 0 obj <<
+4404 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [262.823 290.269 345.582 301.958]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#SECURITYEQUALSSERVER)>>
+/Rect [128.678 148.709 182.61 161.611]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxworld.com)>>
>> endobj
-4195 0 obj <<
+4405 0 obj <<
/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [212.608 249.621 255.813 261.311]
-/Subtype /Link
-/A << /S /GoTo /D (winbind) >>
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [246.527 148.709 369.156 161.611]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxworld.com/linuxworld/lw-1998-10/lw-10-samba.html)>>
>> endobj
-4191 0 obj <<
-/D [4189 0 R /XYZ 85.039 786.531 null]
+4401 0 obj <<
+/D [4399 0 R /XYZ 85.039 786.531 null]
>> endobj
-370 0 obj <<
-/D [4189 0 R /XYZ 85.039 380.004 null]
+378 0 obj <<
+/D [4399 0 R /XYZ 85.039 650.988 null]
>> endobj
-4193 0 obj <<
-/D [4189 0 R /XYZ 85.039 358.808 null]
+4402 0 obj <<
+/D [4399 0 R /XYZ 85.039 616.242 null]
>> endobj
-4188 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F14 2895 0 R >>
+4398 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F20 2965 0 R /F41 2998 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4198 0 obj <<
-/Length 2021
+4408 0 obj <<
+/Length 1688
/Filter /FlateDecode
>>
stream
-xڭX[o~ׯۡpr>8ۺE-2TH*?߹,)ʢ }r$!ĉP_9D:Ke,t!C[o'g?Hd󷷗7S}7S/bTWyϧr/ap3oc^ >O>|m"#PI& |;/&[x/pԈL^Cxq)3"y@ TA EƁ a:Gv%/%h2^h*-ˬo6Yec<ܚM0UTNui;7meydB$$ڊJQ(dC1\uZەY*J7pf%2
-m^LSg띒4Pewlʀw)6+m$ˬ6̤4/#Pmj4 Kt_:m6sdg:%K (i Ƞ0_>U= 6咽ܬe3&ac*kIF4z[Pv8&& G ގa=0GCᑥ޿.vP$.DQJ$ uN24QBI`L|J9pu@<7s ae<vVvH7<Z@Lg7+$"<Nҩ @}n=|![
-ez>O܍8*]R~8gB7=5eJ\yP
-y XX<}ŀ4)1 N ߄SHjp{tQq]HcFQ,2*-Qz_-#k
-ʒx0U9^_}
-l$tdK1Kv(IzjPHP#:IҸZy:[a0`<<냬s) ˱ 5SB_b&А7º#S]&o[
-%Qa/$XN^fe,+O
-6co3a^D~ i_WUPO8w&ORsr2h[Pލ!n._]ԭ&o=tVeu4Uh̚+)4҃ PiȢ妶-ϧfp2C{nXe2]eҮi9-ݽHLG%/-J O;alKpUdר¼
-uu|*)E^{}9cGY* F$͎؏"{Z TB d{iC% VQ0
-@aժXt
-" $c^La /#pP7YROD~ԃr=B*ib:R7A
-ؙwQ6_K(V|qɄDqmE^w8o-Ob-kϴ-izmۛe
-fZJD2@;'.M 
-('PjWUjIU;hovoHmTw)S )@[ތZ>"O7E|$o
+xڥXnF}W-Pw\^:I-A%2a^keIQ @{=sfhH'CarD:+egE̋&tLAO"IBz}󫩧v#1(vN{yz//ab)W_/M?__LTZ_&>Kg Hy*Ir-L&x/p!o{ O%" CpA81" "H$ wBFz?IҸ.QeVdf 0d|i÷2d2RE"
+)ovwW)OzƬnyIx,f]W+^D5!S?vVygۏﺿtYG|vy]tⰵhSa MȫeJZ_bTdH>{)xt?7i9mO<:IG;QQh Ӷ-4$%đ ӹDbP@-}F۬]S-z UŢnfa r[ ?Qdi$!b/Mمb޿g^!$yC`-=
+VsI;c&KOJw8>x+.@%ŦA8=Okfբy\aJWSƻYKʼw1'DFabF=
+ Wic?
+0Л&zcwl`*DYsMK.JBM
+y qR02ŤFP#2fpmk4$3 F2Yg9Xg)z=<"q!50 F|-Ap9R1Ԍ^|ܴ:IlyG $fј:E 'rj0Yjz#N񈝔q|Z0=AنcNӐFa נxUw,8q"
+gSCHbp
endobj
-4197 0 obj <<
+4407 0 obj <<
/Type /Page
-/Contents 4198 0 R
-/Resources 4196 0 R
+/Contents 4408 0 R
+/Resources 4406 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4163 0 R
-/Annots [ 4200 0 R 4201 0 R ]
->> endobj
-4200 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [201.985 624.519 255.917 637.421]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxworld.com)>>
->> endobj
-4201 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [319.668 624.519 442.172 637.421]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxworld.com/linuxworld/lw-1998-10/lw-10-samba.html)>>
+/Parent 4382 0 R
>> endobj
-4199 0 obj <<
-/D [4197 0 R /XYZ 85.039 786.531 null]
+4409 0 obj <<
+/D [4407 0 R /XYZ 85.039 786.531 null]
>> endobj
-374 0 obj <<
-/D [4197 0 R /XYZ 85.039 584.069 null]
+382 0 obj <<
+/D [4407 0 R /XYZ 85.039 766.606 null]
>> endobj
-3985 0 obj <<
-/D [4197 0 R /XYZ 85.039 559.517 null]
+4410 0 obj <<
+/D [4407 0 R /XYZ 85.039 742.055 null]
>> endobj
-378 0 obj <<
-/D [4197 0 R /XYZ 85.039 517.822 null]
+386 0 obj <<
+/D [4407 0 R /XYZ 85.039 686.81 null]
>> endobj
-4202 0 obj <<
-/D [4197 0 R /XYZ 85.039 496.625 null]
+4411 0 obj <<
+/D [4407 0 R /XYZ 85.039 652.065 null]
>> endobj
-382 0 obj <<
-/D [4197 0 R /XYZ 85.039 174.763 null]
+390 0 obj <<
+/D [4407 0 R /XYZ 85.039 344.017 null]
>> endobj
-4203 0 obj <<
-/D [4197 0 R /XYZ 85.039 154.767 null]
+4412 0 obj <<
+/D [4407 0 R /XYZ 85.039 310.471 null]
>> endobj
-4196 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F35 2880 0 R /F73 3992 0 R >>
-/XObject << /Im1 3957 0 R >>
+4406 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4206 0 obj <<
-/Length 2748
+4415 0 obj <<
+/Length 2444
/Filter /FlateDecode
>>
stream
-xY[o~R
-6z}F@lapU_ΔJl׸ttILFRJ{{z"5Fhq.<3Ef'& deWR΂$IyܥQ
-@ i\M|h՛
-N(ҹtx,Q-MÕ} ۖj͈z]ǭBl6N] ht, -l[`Aĝjmi;'nzގ*R3p-<=΍;hm۲LjCΚq3(tȻ-B U_$+\岬ahe6pq^(~aa>R#~18N?W2ZLN #?թU <wj#(8~RjX
-BPpjH=/Iņxmw:
-~N|#FJKD;
- })%w|W7dvzDh^ ֬ve:}kG&|"xqa
-<alc`Yw[F>Ƞ9 ;KKGGza%YYo7Ly~DYƗK~8y2iB̢ŧ
-Lu"͗ͣ#[:Byeeܪ+ɐ yoA C9 4Pxbp@,tЮrBq.ʞb7?Tu I{i wnq@*YqfìО > IZţE r&r^4aV}}ŗzt! oH+Bo%/7j +2 p ЦDvO pD<‴ծݣ;qˇ@+U8\;;\lyF#PaHNZřȔU/^5]MJQەeM'|ƺ 1 #ԐVfW#UY&| #D02PanWsa#Hlۍ|I@ߚѬβ[$ȃ}Qe xc;p
-fs xao??w 46;avdrzZcŠ?̏e&MTKC/?k6jaL mG$? *C"5 >wo\; յLJ2R?-!HS"I| >$K碘s-r@3i)FI21u q+Lv3N UzɶqpP83Ʈ=RlS46QuNu\'SW|$C
-ɉ2F9-9$G4qIjsh,=K6PܩМ?V& )cqf|h(x*r'>*1t]a0t_oa%G@OBd^C$V|7q#=+6۩F=Eh& rOvq*m'/א#)iO[ D|8o;=^I!LɅV\ f*V6_gZ17i,e*5VVc1)sɬ [t4U߬2vWq">ʼn.9uY;G&j"I(BO!+ѷ-5XlKRrb.ví%KPxyػ
-0CXHt.˕ZSŽ; rŪZfI,.v=vKe'o2V y`z1筮m+ [$ UR\힢*:TtBMd(Pp4IcڠpMC#v(S@8TKg8T"C]
-( ;C-šQf^6o;WĊ4~fsT-t,2g% ~)ezgPg U>m}
- }m(ÝŸ0@˺M.~j?\
-eaMYX5#~!Lrfm#M!_a9k[Ɍͩ:xKfibu7[D*դQt9ĝeyT 23[z;.!„Sj,aoKpޕ9x>vv$<=[ph{$i7|q+wiV!#dn7Ih`އ?^SO)I%ٳ||Wendstream
+xڭYYs~ׯ`*
+*CO%97@ ) rhJs[^JEF^KuK8RxY̿΄Cw:Dda=>|0Y=_||ͥ~IW?΄掇?\qo?]?8"
+)qgzY,eLih%M>{8ȋǫR#d;PB$Zn2@ *hXyBxy%@M t:r}Z0Sf TY&i3JxW-9s/I*R+"ʂ8^@(rRΥ~MШW8+f( [_}t,J߰n[/y7iMP@f-g ɮ).PxQѺ2C
+;  4oSP,86FF<Mu<ccnˮcEC?vY㏐,Zv]Km)xIB:dP|<M`ё{4#ƙ~fߊ|:6MZ\Q t={~bZ AUq E)).<ս -X !?{<ɒ16,P4J}$ZN+AQmiޗf
+Dlc$!4FUd<)IWȩ\fCXhWk̃A/xjC?HeAM>Py_|ySl K/TxփTԠ)Ͼ2H$jҼ/@%r"9,ɅblE6a<] .u-b j"#E %g3Ijx]J]'dN}shHQ蔫o" T
+pba:sBpíO(VP/ct~vʼn{{shFl[$<.g2D[ݠ>l50\EC/2}4>&P$* ɻ4+EDٱ "Qށ'2qA0R*J=Gah$zo*}.d0t%8">eO"BuW-q޺`a${ty_KV8g*"Ю_DE,'M>27K9$?>e7yfGvZajM8q2/03~7x#i2 eW!ls ҩX>3yv!mfG28 4{OzK/M]4^%"|Ŝ ņ-ݱ=badL2
+C#=UJiendstream
endobj
-4205 0 obj <<
+4414 0 obj <<
/Type /Page
-/Contents 4206 0 R
-/Resources 4204 0 R
+/Contents 4415 0 R
+/Resources 4413 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4163 0 R
-/Annots [ 4208 0 R 4209 0 R 4210 0 R 4211 0 R ]
->> endobj
-4208 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [489.95 370.389 512.306 382.079]
-/Subtype /Link
-/A << /S /GoTo /D (ads-test-smbclient) >>
+/Parent 4382 0 R
+/Annots [ 4417 0 R 4418 0 R 4419 0 R ]
>> endobj
-4209 0 obj <<
+4417 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 356.84 183.828 368.53]
+/Rect [445.319 411.826 539.579 423.515]
/Subtype /Link
/A << /S /GoTo /D (ads-test-smbclient) >>
>> endobj
-4210 0 obj <<
+4418 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [214.276 356.84 356.796 368.53]
+/Rect [110.886 398.277 250.888 409.966]
/Subtype /Link
/A << /S /GoTo /D (ads-create-machine-account) >>
>> endobj
-4211 0 obj <<
+4419 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [380.57 356.84 476.48 368.53]
+/Rect [272.982 398.277 367.214 409.966]
/Subtype /Link
/A << /S /GoTo /D (ads-test-server) >>
>> endobj
-4207 0 obj <<
-/D [4205 0 R /XYZ 85.039 786.531 null]
->> endobj
-386 0 obj <<
-/D [4205 0 R /XYZ 85.039 329.022 null]
->> endobj
-4212 0 obj <<
-/D [4205 0 R /XYZ 85.039 307.826 null]
+4416 0 obj <<
+/D [4414 0 R /XYZ 85.039 786.531 null]
>> endobj
-390 0 obj <<
-/D [4205 0 R /XYZ 85.039 227.139 null]
+394 0 obj <<
+/D [4414 0 R /XYZ 85.039 370.458 null]
>> endobj
-4213 0 obj <<
-/D [4205 0 R /XYZ 85.039 206.545 null]
+4420 0 obj <<
+/D [4414 0 R /XYZ 85.039 335.713 null]
>> endobj
-394 0 obj <<
-/D [4205 0 R /XYZ 85.039 106.995 null]
+398 0 obj <<
+/D [4414 0 R /XYZ 85.039 238.488 null]
>> endobj
-4214 0 obj <<
-/D [4205 0 R /XYZ 85.039 83.678 null]
+4421 0 obj <<
+/D [4414 0 R /XYZ 85.039 204.344 null]
>> endobj
-4204 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R >>
-/XObject << /Im1 3957 0 R >>
+4413 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4218 0 obj <<
-/Length 3125
+4426 0 obj <<
+/Length 2777
/Filter /FlateDecode
>>
stream
-xڽr]_) `׾dIjd+RNjUD\
-
-so p.aJAkm4h
-=oPൗhf2<$z b`&16%ձ
->J
-I6Ggh7Ho'W haSm̶U
-7X
-r-cb@~hY8ܡcA!w/(|A?tM>PD_]ؖ
-+!@c4h@:LxH v*QWPZl:jB`_Fk \$dgT[ yw]&`Ml\
-\pM%1^]u#a]T}-SI\dv#=ѳ>sndsاJ%(<
-~)}sʭ(t<<d94qf* %Di Ib
-,s%}`9* I$AƩkpk91@*k0@F6gINT\%jU[ӜJykaj]%,R6*9('
-s` s d! lf$
-ծ+/r}vwԋ'Z Rڋ53{˃\/&Ů G]$U#gSIB @4^d,0SUfCO4y9Θ .0ouIYU32|Gیy[q~!mLyj!bR<¾bIlY{mb)xJtUǝf_?b9\B@ͥ]pU z?ÇO5Q<%J@;ZvhƾPzCH Ͷ{:@d2b.qehie(IWٽLvn8FTNؙ[6ٸC%6LJlOm=jO]]/N#~itFJ[^tQ|<0~6__Xendstream
+xڭr8_KCxJmL0$$qCZ߾@RᇙAht7YJgqg›``,e1|x1f^:{\tR hX\ǛRʉ"w>3Oq``¢_f4=s4m.tP+WhcZiH  `w0j$ HǤ.H -sihby<ٵ<"w3mO
+dP:C |7~
+2ڞuX:{Ddw*Җ:k xgybK5DU$UZY(EwO%"W+gE4@ y;TW~`
+27À?۬{И0>1Rcʎ'ˬ+ðE:Ī섽 7R~eGgġB҄>1! p C5Ll0e?: :mJCN$ G|o`i\]^9R`f:9M"44fx6)V _I cÜ)~č^w9AB$ z/j N=!be C)UYOBá
+/5498߫!e@FW[IJQ](@!SJG+xz:12LAĚ f'f<|fHfaͶ/Z`9Ǔ;M'{FqF(s2ψJxB I/ BI"q9<r5*oH#:
+zRCg bS倇a@3.p+l#|z.DxK)ĽpP(Y%NCr.\[BJjy`,sLlw!X;ŋ_YǡT
+Nv F*=Z'8ClDتJpGlktnڶ>=-sLpNFzSk)QI"eʹri IfhC\D;2
+8W46F*Iy |Uz3㎽Jxg1V퀉P|Gl9$9Y u~1P_[q< 8d5 rTe-o-Bu$&K\E^~jzErn{uK'c"V5(Lxy +)<>r_܊^, M:^=X`Ր{a^Xo
+ Oh7YuO!</tg\}q otm}ѰĹ]5>ii_o-epp>HBl$v&rt `lk>(8Ţn+ƶ* Sf<宩vH zQYKǡU<Ͷ2ػ@݉m{C4UxBՅ'&;Bl@N"z$!*a9
+PgyAh
+PH*^c4qB 'C`e>`07I M ҈1)/GQ'b4m"`ŴTDp6's)hPJ%@6M6Bk<O4]n#=`Te@a4t咿đ"MQ:ܲZ#: ׇy/KCZJnkKJ9'²jHgtϼ
+ezTΗ;Tw&y۽YdS\*>h ߮g~c1 X7Xxa$zcr,5 uVDi$u.o>"7<ܾ'%,':[;^C7Ɯ~ 6>1V^3ufo2< #NH<meT ]g)6GzA/Ɵ*JڈOy*-SgɉDPnM_2 uzzendstream
endobj
-4217 0 obj <<
+4425 0 obj <<
/Type /Page
-/Contents 4218 0 R
-/Resources 4216 0 R
+/Contents 4426 0 R
+/Resources 4424 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4224 0 R
->> endobj
-4219 0 obj <<
-/D [4217 0 R /XYZ 85.039 786.531 null]
+/Parent 4431 0 R
>> endobj
-398 0 obj <<
-/D [4217 0 R /XYZ 85.039 686.185 null]
->> endobj
-4215 0 obj <<
-/D [4217 0 R /XYZ 85.039 662.868 null]
+4427 0 obj <<
+/D [4425 0 R /XYZ 85.039 786.531 null]
>> endobj
402 0 obj <<
-/D [4217 0 R /XYZ 85.039 609.28 null]
+/D [4425 0 R /XYZ 85.039 766.606 null]
>> endobj
-4220 0 obj <<
-/D [4217 0 R /XYZ 85.039 588.286 null]
+4423 0 obj <<
+/D [4425 0 R /XYZ 85.039 746.277 null]
>> endobj
406 0 obj <<
-/D [4217 0 R /XYZ 85.039 515.529 null]
+/D [4425 0 R /XYZ 85.039 636.371 null]
>> endobj
-4221 0 obj <<
-/D [4217 0 R /XYZ 85.039 488.915 null]
+4422 0 obj <<
+/D [4425 0 R /XYZ 85.039 601.625 null]
>> endobj
410 0 obj <<
-/D [4217 0 R /XYZ 85.039 365.256 null]
+/D [4425 0 R /XYZ 85.039 545.916 null]
>> endobj
-4222 0 obj <<
-/D [4217 0 R /XYZ 85.039 344.263 null]
+4428 0 obj <<
+/D [4425 0 R /XYZ 85.039 513.495 null]
>> endobj
414 0 obj <<
-/D [4217 0 R /XYZ 85.039 207.055 null]
+/D [4425 0 R /XYZ 85.039 413.639 null]
>> endobj
-4223 0 obj <<
-/D [4217 0 R /XYZ 85.039 183.737 null]
+4429 0 obj <<
+/D [4425 0 R /XYZ 85.039 373.476 null]
>> endobj
-4216 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F20 2865 0 R /F66 3242 0 R /F35 2880 0 R >>
+418 0 obj <<
+/D [4425 0 R /XYZ 85.039 247.696 null]
+>> endobj
+4430 0 obj <<
+/D [4425 0 R /XYZ 85.039 215.275 null]
+>> endobj
+4424 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4227 0 obj <<
-/Length 1063
+4434 0 obj <<
+/Length 2064
/Filter /FlateDecode
>>
stream
-xVKs6WHT0@
-)nH5y> LN(L
-G
-qJN C\wD KkP
+xڭX[oD~ϯ:x|EBB
+"@b긍YCsIj<9sws<oy*2zofViX
+rBv]ϵ2?|2_EY<]{v}%jLԻayY,?|{yA<ٯW&K0βfFFEjv3qkwXLeA2"qb? `U,DÄIT`EwZ
+!cN^JAΣ5h#r
+-iڏ%H6`몰t}>0&*۳
+y~G=}ʱo!_)wn=@$J.<գ 2ޖ8Ƨ:- ےz]x۞%)k~>HV#dpNM}ϳ:p+w)k``hVGP<{ ےQ+<G%Ah-
+H?0mE Ըb
+s"hw>p'ATg
+;vY:fB%;`LVbD8x5i"UrHnwL>
+*<8SarP
+$Oi_#B@myڏU/hDo-[{~Ei , 0U%ѶTvaNxe"Jx g9e)dF; b&.ĆrKB uJudBtž]7-šwOޗʝmKf)ԌY
+~O'd HQ2:F;6l\.sqYCSTqU2&#Ѳ+K^*X:Φ9@@&PzJuQ *xx-'̞zC(uիgZq&>#X$l<n؛+I : $HB`!0)(b?,.8E6wM\vgJд7h&.z"|MG>6@v&'"O
endobj
-4226 0 obj <<
+4433 0 obj <<
/Type /Page
-/Contents 4227 0 R
-/Resources 4225 0 R
+/Contents 4434 0 R
+/Resources 4432 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4224 0 R
+/Parent 4431 0 R
>> endobj
-4228 0 obj <<
-/D [4226 0 R /XYZ 85.039 786.531 null]
+4435 0 obj <<
+/D [4433 0 R /XYZ 85.039 786.531 null]
>> endobj
-4225 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R /F56 2890 0 R >>
+422 0 obj <<
+/D [4433 0 R /XYZ 85.039 766.606 null]
+>> endobj
+4436 0 obj <<
+/D [4433 0 R /XYZ 85.039 746.277 null]
+>> endobj
+426 0 obj <<
+/D [4433 0 R /XYZ 85.039 416.595 null]
+>> endobj
+4437 0 obj <<
+/D [4433 0 R /XYZ 85.039 381.849 null]
+>> endobj
+4432 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4231 0 obj <<
-/Length 3017
+4440 0 obj <<
+/Length 2602
/Filter /FlateDecode
>>
stream
-xڝZKsWVޏ䵝8v\+m!(
-ƽ_xF.
-Cj n6wnO2W8ݽWA8:n"׹LSlo)7 [{͇ A|o܋<76c&oN}1liE3';~H{`Cӈ9`ښӝZeK,є?ohesX3Ŷ ( &Y|E{ݹ}(tx"~nÑM>TU>T߈}ߵ'LyݲKv=7 <J8$r@ ZnΜU6hVEGCS`O |,0̌Ն\CT^x
-"va56ɮxiYXϙ`S0VU>7KQ5WG;WGwxtJlꂇ.Ԝ ;
-y@ HrT쟪A@o1[at&^=8ɣl4Rl5RlǔNg_
-Q4?K/phD5}|FLêi}(jL^Bw&Wm#%1C|moEa҉b=??8O5uvZVJ7`6 TcEj
-M]6! 9J)Ǵ {4=yz3 1s3n=i 1"}<5{D}ZACgԃ,aPveDn5
-(/s2<jk B`M|Ntbk
-4Xlh=t%G0!7UYP?(-㧯}LĮjFġyHMO(SĎwKzM7ci ˹ uILt|$V8MxF J=BmFJ^
-Hy1g!/)y+6
-c2C1yWmltq=plDBA%& i}-ϭE*>jUVADV((1&KD˄
-I/RTBiVĖ0J%v/X/J,*{.,&3dY<Ы)NAfnԘICvx9Z {Ka"q( nO
-.J]1a]:t%z(d IU9G@s܁L 07@00Fl N'Z*]]"bA 
-{5nQI3:췾JOoV yn_#AubjPT0j k
-!޳Q{gj 0+e O=,jSY/}׈`C[s`wL7 J>ST?Es{wU<~-tA*ꈜ>c,ӤkYXd$j v~-EM>-qz~L$wϑ
-pbAR*KK\ܢ_W S~CooP~mfnk) ~
-sendstream
+x}YKs6WHD,_7M
+oDY6=&0H\V)WB^V=YMcy>3jBڗmy=n
+` O:#_y+ݗ_P],讥[d wq2p;TP񨩿8?foB_aOggW(M
+z:]3#E>;ƣVQ҃ο09^Q0aB4f[<<<0CQC=ɕЅA
+-O.~u 7%i
+
+?N[ɽP)ݲ "Qv1(p vqpAWU 1jw=P@M@24l\scdZ}OQtF#!t8zI?,2pCD{%1hXדN'Ql-eb1~d4E9aVLb
+S=tiؑb^A[C5T0r8SBB9}*$D4%Gsɑ P05]be Y8:DP"g7ĉWٴ9E|hjkUm˕$uaNnkҟM +ABe'e9A&H,Tȥd(]'"O]VqPq "tC;lڞ.ƹq!t4 To zV,
+GiYBR<H-';;܇mCc-+lŹE
+N,)΄}\Q9,p;}N=k
+t[Q(E"ľ밨2E--V2xyc/Yȝz;@pI󨩯w˒9 bFCJb)`m+FȸM=MlsC& @vxT zt%~)3A)¬#=;K3
+zXأ<#t>̋E9ߘzayz~-K|q(X1 CDp*[+YtյTNbD:;G9n0yxXJ(>.[/.&!~rח>{?,>aGoHվ7*{Xendstream
endobj
-4230 0 obj <<
+4439 0 obj <<
/Type /Page
-/Contents 4231 0 R
-/Resources 4229 0 R
+/Contents 4440 0 R
+/Resources 4438 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4224 0 R
+/Parent 4431 0 R
>> endobj
-4232 0 obj <<
-/D [4230 0 R /XYZ 85.039 786.531 null]
+4441 0 obj <<
+/D [4439 0 R /XYZ 85.039 786.531 null]
>> endobj
-418 0 obj <<
-/D [4230 0 R /XYZ 85.039 766.606 null]
+430 0 obj <<
+/D [4439 0 R /XYZ 85.039 766.606 null]
>> endobj
-2954 0 obj <<
-/D [4230 0 R /XYZ 85.039 676.205 null]
+3057 0 obj <<
+/D [4439 0 R /XYZ 85.039 662.656 null]
>> endobj
-422 0 obj <<
-/D [4230 0 R /XYZ 85.039 603.448 null]
+434 0 obj <<
+/D [4439 0 R /XYZ 85.039 576.349 null]
>> endobj
-4233 0 obj <<
-/D [4230 0 R /XYZ 85.039 576.833 null]
+4442 0 obj <<
+/D [4439 0 R /XYZ 85.039 536.186 null]
>> endobj
-426 0 obj <<
-/D [4230 0 R /XYZ 85.039 395.682 null]
+438 0 obj <<
+/D [4439 0 R /XYZ 85.039 327.936 null]
>> endobj
-4234 0 obj <<
-/D [4230 0 R /XYZ 85.039 366.278 null]
+4443 0 obj <<
+/D [4439 0 R /XYZ 85.039 284.983 null]
>> endobj
-4229 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R >>
+4438 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4237 0 obj <<
-/Length 2599
+4446 0 obj <<
+/Length 2460
/Filter /FlateDecode
>>
stream
-xڵrF`%*0x#U{#IN
-1P2~5
-ka1*s3?O
-Y1s?qkhd+|\maUa7= ^*-׵.pg7pʺݖ#Q
-=zQ\[z%䅵v]w]S3Z7 y:FYKp)ft >l^,L6+_zz;,?P.Cd鼖VT+"L=0
-AH ཐł"yQ߼ؔquNW>^?B.#Ueym $0?i>2>zreiZFstѹ/ޝ_ϱ[5e?~}vu1qX22_}XF;vZC*]r]Xe@[#e<V22D_
-D\W
-t<5- 8H,D ~d=m<SSz2N"(xѷ(r(@37e OQ+fv9 6n"O9oEzvOB2WvRטd3P#M nB3<Hn G`ˢCPL=V"Rˌ^7V#f|56CW?iv"%`cb2y@mgź5֑MwI}Ko y)(q-T.ݾ}Z,=n̾$qE[^ss08Wd&ҴT[) _v4l9@j5{Lc2 B vLF&
-z;}Q6Xv$>6bћƏP]^U4}p-lؔ_ЮmLaGI~ʉr#ޣ"ޔz'G*ɟh/לRn"1l@;v8(HץMg$@̮Xy"'|02ɟk;rF
+xڭYKsFW*0x#U{P$VV7NaD@$ aI~5
+[qxl[Xzs
+x-+=> L- ]ϵ>`<q8Up5/o=c3Nit,g?!!}alG^ph۞ZA%649="pu;^YUǶj)\S4"`Iqm'JE.*>J֬y<Jٸu]4kkN0IɕiAh[Q-wVi3Ӣit ^?TàoCaR8ZՙGFC UcB2ZJbwWAq`ޢ;* q
+b#{%/Dˌ 7=A.OX)[=YvFC+Ka
+u=euV$GciV6+[Ӓ`fVSU8@s4P>t}FØ ?T"]TeC8VЁV ׿10/NlWT1+AmppaLWItոثD]HRsL]i-q= mm!
+910bp }
endobj
-4236 0 obj <<
+4445 0 obj <<
/Type /Page
-/Contents 4237 0 R
-/Resources 4235 0 R
+/Contents 4446 0 R
+/Resources 4444 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4224 0 R
-/Annots [ 4244 0 R ]
+/Parent 4431 0 R
>> endobj
-4244 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [233.71 212.514 308.157 225.416]
-/Subtype /Link
-/A << /S /GoTo /D (CUPS-printing) >>
+4447 0 obj <<
+/D [4445 0 R /XYZ 85.039 786.531 null]
>> endobj
-4238 0 obj <<
-/D [4236 0 R /XYZ 85.039 786.531 null]
+442 0 obj <<
+/D [4445 0 R /XYZ 85.039 668.735 null]
>> endobj
-430 0 obj <<
-/D [4236 0 R /XYZ 85.039 766.606 null]
+4448 0 obj <<
+/D [4445 0 R /XYZ 85.039 626.387 null]
>> endobj
-4239 0 obj <<
-/D [4236 0 R /XYZ 85.039 742.055 null]
+446 0 obj <<
+/D [4445 0 R /XYZ 85.039 571.143 null]
>> endobj
-434 0 obj <<
-/D [4236 0 R /XYZ 85.039 686.81 null]
+4449 0 obj <<
+/D [4445 0 R /XYZ 85.039 538.722 null]
>> endobj
-4240 0 obj <<
-/D [4236 0 R /XYZ 85.039 667.938 null]
+4450 0 obj <<
+/D [4445 0 R /XYZ 239.826 446.534 null]
>> endobj
-438 0 obj <<
-/D [4236 0 R /XYZ 85.039 321.515 null]
+4451 0 obj <<
+/D [4445 0 R /XYZ 85.039 242.769 null]
>> endobj
-4241 0 obj <<
-/D [4236 0 R /XYZ 85.039 298.197 null]
+450 0 obj <<
+/D [4445 0 R /XYZ 85.039 161.082 null]
>> endobj
-4242 0 obj <<
-/D [4236 0 R /XYZ 85.039 256.885 null]
+4452 0 obj <<
+/D [4445 0 R /XYZ 85.039 124.216 null]
>> endobj
-4243 0 obj <<
-/D [4236 0 R /XYZ 85.039 241.215 null]
+4444 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F64 4117 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-4245 0 obj <<
-/D [4236 0 R /XYZ 85.039 213.511 null]
+4455 0 obj <<
+/Length 2119
+/Filter /FlateDecode
+>>
+stream
+xڝXoF_1enlV{{k'9)3`
+nϟw炶Kzw;Յ;?r)@.y=d=5o[|sۑK^Vyʽpю SxᐧdKδ&t/8mt𹏀 V\aŃc FX'>E`crjcl5xH"1|v~6Dn^6^&QQ6%GB^Ƽ=AvG<ay&=KXTg#b<=1xaaLSG7+kAr_|44oZ
+ضO tfK7T(gKSbv)X 7U$08;hMfg+5q+3¡ۑ=#)8xr-Ez:0PuR{Y;U{aD&{df (&Ke}i)N9A&l6M0$%f!D0Ͼǭm
+(xM
+Rr]ՙ-}T<:Lⶉ@ˢrP3j<OL($\f]Rg'3X#w~y?w<&C[JG^tg\$2"hDDC#w0R 녑H=blġ7Y0`1<' [7>%Qj2=h࿴dbA#k{ 
+wM^Fv@n2T""(`4s(t9UZ d>{W`;S=ۨj x
+BXG l<\a|!kݐgTǟʺ9~]
+endobj
+4454 0 obj <<
+/Type /Page
+/Contents 4455 0 R
+/Resources 4453 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4431 0 R
+/Annots [ 4459 0 R ]
>> endobj
-4246 0 obj <<
-/D [4236 0 R /XYZ 85.039 187.018 null]
+4459 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [124.649 711.276 245.309 724.178]
+/Subtype /Link
+/A << /S /GoTo /D (CUPS-printing) >>
>> endobj
-4235 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F72 3966 0 R >>
+4456 0 obj <<
+/D [4454 0 R /XYZ 85.039 786.531 null]
+>> endobj
+4457 0 obj <<
+/D [4454 0 R /XYZ 85.039 766.606 null]
+>> endobj
+4458 0 obj <<
+/D [4454 0 R /XYZ 85.039 753.526 null]
+>> endobj
+4460 0 obj <<
+/D [4454 0 R /XYZ 85.039 712.272 null]
+>> endobj
+4461 0 obj <<
+/D [4454 0 R /XYZ 85.039 672.231 null]
+>> endobj
+454 0 obj <<
+/D [4454 0 R /XYZ 85.039 266.58 null]
+>> endobj
+4462 0 obj <<
+/D [4454 0 R /XYZ 85.039 224.295 null]
+>> endobj
+4453 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F64 4117 0 R /F41 2998 0 R /F62 4052 0 R /F35 2980 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4249 0 obj <<
-/Length 1435
+4465 0 obj <<
+/Length 784
/Filter /FlateDecode
>>
stream
-xWo6_!t{1Ek.mWtm8B$ѓG2}w w<N0O$N,V3#xz|J{,g}kXٍr5_!ܘQsp/x%__j9w?\ׯgd2hg3$v@{'Sd X ]ٟ:IMĵ~8S<<dT<0Xsx u:w|!}_/7E=c :iO&Vyiu}\9Cq!?dtwAp"LvFzb\P0He1B7#@~_ABkihѬyĠE%=<Ap9qdFE~V]e~DcQ[~K;X.pwHiʞjE;ڤ$nte +SR^p"ukof r7)`!мH*QvF=r"ċ#c"WCӦբM]zFeh~6T]J CJ>IIو]өhi1صՖF0F 5vp7pT̹-+UxI̗]-s]c6eafGax_d"CAae
-[jR8[ܺ堡<EYBbUf@--q5G)%-妬-!K  hN蟃J <
-W[&xJqh~O8xiRA87vvȾǧq Pl+~{>9?~8eZUtѕJJU@Uƫ\wVi L78=KH/<J8o/k>́sG-ϨQAendstream
+xڥV]o0}WX <`l<ilMUm%hT
+^4]h+!t^`!UkX=7<TY$v]V F
+*{Z/q  Sؗ+F=郟BwY-EdI9Nn%$`\1vGZՏ˺:.||>cM
+l4xz/d )ilat)5tQ2;fM@jݘ(ϺP}P`]ڣS# 8\OՎ7sӤtb
+'n0JDz }$*_]dgGJ&ls
endobj
-4248 0 obj <<
+4464 0 obj <<
/Type /Page
-/Contents 4249 0 R
-/Resources 4247 0 R
+/Contents 4465 0 R
+/Resources 4463 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4224 0 R
+/Parent 4431 0 R
>> endobj
-4250 0 obj <<
-/D [4248 0 R /XYZ 85.039 786.531 null]
+4466 0 obj <<
+/D [4464 0 R /XYZ 85.039 786.531 null]
>> endobj
-442 0 obj <<
-/D [4248 0 R /XYZ 85.039 269.569 null]
+4467 0 obj <<
+/D [4464 0 R /XYZ 270.432 556.3 null]
>> endobj
-4251 0 obj <<
-/D [4248 0 R /XYZ 85.039 240.833 null]
+4468 0 obj <<
+/D [4464 0 R /XYZ 85.039 271.24 null]
>> endobj
-4247 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F20 2865 0 R >>
+4463 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4254 0 obj <<
-/Length 414
+4471 0 obj <<
+/Length 425
/Filter /FlateDecode
>>
stream
-xڅRMo0 W(>놭؀R=;xSM Uп_JdM6(==Q}J+K'-{ܮ{"zs(1-s9KȠrƗju]+tYΙUsσoEAQ $6
-TtD <_ǥAy:؏]$Iˤׇi[D;g,uAe@}DN]CmIrxQw* iTU%][j>; "IsJo]?ЁqŎ
-v/y!{5KnS'),"v3Վßx+Ov,qMOCJE%]h d1ʋ/z\O$4H?CZ.$zendstream
+x}Rn0+x$bI._hh.CbɱG
+dR6!@ZwfLYtRABҁfۗbOl̰3`7Rp3kXi%jQ(=jhDȪ/(S(ú @?T (l+#2O"hdCU+'̦.G€
endobj
-4253 0 obj <<
+4470 0 obj <<
/Type /Page
-/Contents 4254 0 R
-/Resources 4252 0 R
+/Contents 4471 0 R
+/Resources 4469 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4224 0 R
+/Parent 4474 0 R
>> endobj
-4255 0 obj <<
-/D [4253 0 R /XYZ 85.039 786.531 null]
+4472 0 obj <<
+/D [4470 0 R /XYZ 85.039 786.531 null]
>> endobj
-446 0 obj <<
-/D [4253 0 R /XYZ 85.039 766.606 null]
+458 0 obj <<
+/D [4470 0 R /XYZ 85.039 766.606 null]
>> endobj
-2955 0 obj <<
-/D [4253 0 R /XYZ 85.039 651.298 null]
+3058 0 obj <<
+/D [4470 0 R /XYZ 85.039 658.638 null]
>> endobj
-450 0 obj <<
-/D [4253 0 R /XYZ 85.039 651.298 null]
+462 0 obj <<
+/D [4470 0 R /XYZ 85.039 658.638 null]
>> endobj
-4256 0 obj <<
-/D [4253 0 R /XYZ 85.039 622.563 null]
+4473 0 obj <<
+/D [4470 0 R /XYZ 85.039 620.371 null]
>> endobj
-4252 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+4469 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4259 0 obj <<
-/Length 235
+4477 0 obj <<
+/Length 249
/Filter /FlateDecode
>>
stream
-xmP=O@ +n 1L ـ!jJ@*Uߏ/VIg9R\Qȭ>tCe(C|hǢP.H4' hJ雫{Fg3_s+Vm')G xC?d͵+
-S@If{ڎʚ5`)ljm7? NU֎
-ٴ g%@(.8;`<
-l7/\endstream
+xuPN1+^v~
endobj
-4258 0 obj <<
+4476 0 obj <<
/Type /Page
-/Contents 4259 0 R
-/Resources 4257 0 R
+/Contents 4477 0 R
+/Resources 4475 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4261 0 R
+/Parent 4474 0 R
>> endobj
-4260 0 obj <<
-/D [4258 0 R /XYZ 85.039 786.531 null]
+4478 0 obj <<
+/D [4476 0 R /XYZ 85.039 786.531 null]
>> endobj
-454 0 obj <<
-/D [4258 0 R /XYZ 85.039 547.583 null]
+466 0 obj <<
+/D [4476 0 R /XYZ 85.039 547.583 null]
>> endobj
-4257 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+4475 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4264 0 obj <<
-/Length 2940
+4481 0 obj <<
+/Length 2766
/Filter /FlateDecode
>>
stream
-xڥYn+tWCcvq2x
-btag$`Nm'elmTI?f?<7̳ =Y}ƹ牮WW˫N9 ߝGy4Lyb7f>!?`nSxhh\(fg>3j:)NA,٧4wn@G]#Xg
-(n1"?tdJABs$+/WAthw슍ԹdHg|rr_/pn:\5}g! %<^E(uNT`oF6KǨF+ 8*ు'
-則^F hLRD7ӺSKPZF;zO5N/y &ضU%[\lȣ `Pf|Q>A* N%G˵GÛ@:Dog^ѝX7@'BO8ujNg lw3A @2Χԗ"&2r3k#f9p[4Oӡw<<Se[m LSٵHK-:F\w"iah-{_I2Y>%<O<Ӌ4]5qSPE K4tYfV/]
-V,h`fDkЌCh</KJNqQyE'`~qfɡ&a{w5&TÜڞ =s9 ߦl:h&ǓӉ^aM<"f]6@&w0Q $$FPb7O2Fmj]qyc?{GX8xaZݩ>ۢ )mE ' dC*|#=W،+#ÌK]4t^j%f(lϭ* /#8(%
-|aPMT">Ag E$|-R
-i%S&.a|>DsDyC y7Ze6i9ZV@3'\zj_D|4eU5n+&Ʒ'</ Iy%%#HcrqcG͛2
-N\9I_!]cB M9:m%\=NEuG'kroy\ypaԮѿi !D31fÁIRQU]["% %TaA"O`{, FJylU=zq
-=I}sSMV}_sMKѣi-k @i}2ϽMޯnӷ7wC?"AAdzendstream
+xڥYIsWV[d)ʲ_U>$9
+^@U&.Ń0㑥lzztGU$O|v1n=[hb"a
+=RG˺E.4`H#bcd'{_
+|jϩp璒J,?-c[B6[{dH=Rmw'Le&hI)ʚ;\e\b 2)_%uFu}3ン͚t(r<MkICYz b5m) "OS_FJkkFΒ>H$C1G9 @..G Pc~y9џPf<Pl Zve>dg)l"S
+qW*p yWqNeJR*ӄ‚8fDe6~;F¬x)I}Mʙn J)l$ޑbrStr&TFxCwK鍟QnUO*-2kB'<{AOGn_O{
+0?I
endobj
-4263 0 obj <<
+4480 0 obj <<
/Type /Page
-/Contents 4264 0 R
-/Resources 4262 0 R
+/Contents 4481 0 R
+/Resources 4479 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4261 0 R
+/Parent 4474 0 R
>> endobj
-4265 0 obj <<
-/D [4263 0 R /XYZ 85.039 786.531 null]
+4482 0 obj <<
+/D [4480 0 R /XYZ 85.039 786.531 null]
>> endobj
-4266 0 obj <<
-/D [4263 0 R /XYZ 85.039 766.606 null]
+4483 0 obj <<
+/D [4480 0 R /XYZ 85.039 766.606 null]
>> endobj
-458 0 obj <<
-/D [4263 0 R /XYZ 85.039 766.606 null]
+470 0 obj <<
+/D [4480 0 R /XYZ 85.039 766.606 null]
>> endobj
-2956 0 obj <<
-/D [4263 0 R /XYZ 85.039 647.281 null]
+3059 0 obj <<
+/D [4480 0 R /XYZ 85.039 637.749 null]
>> endobj
-462 0 obj <<
-/D [4263 0 R /XYZ 85.039 405.033 null]
+474 0 obj <<
+/D [4480 0 R /XYZ 85.039 377.934 null]
>> endobj
-4267 0 obj <<
-/D [4263 0 R /XYZ 85.039 383.271 null]
+4484 0 obj <<
+/D [4480 0 R /XYZ 85.039 342.623 null]
>> endobj
-4262 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R >>
+4479 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F58 3365 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4270 0 obj <<
-/Length 2218
+4487 0 obj <<
+/Length 2543
/Filter /FlateDecode
>>
stream
-xYYsF~ׯTKʊec-ni<
->DlP@|rtΎ4Uj }}d- "`@k Pny9SVߓ ]6Eh`B+LŋtFj)^]/x74c9l3 ٸm[B`5t|^ĭnyz<bkvgd@KMtC e\?l,~$![
-PC3*\cAi4!-zÑ0Qd |7b~I #w֦xaMv1 o(oFq-u2.A<33'hm!n8p.9ZiJt#9G4[ XŌ
- HI!s?_.WH<_PG
-A~6m>LzzJvpn2V4 ]
-:%S{TRcf[Բh+ $RzYzp]7`rXڑ Gee)h\6ܾ\4;Q^:w}HJxv0ed\7$
-Kc/Fg%8G/trU|KXT! -$LCB\Ru9ēҢo뾈=vW>l$hRzȵӟ p=|ľ>qΈvMpx|) Gh jR e3ڥ.2jU6oYBJ 7QׄbY@C36 Y/? +1 aij֐-guMZ+랫W&qytg-د|޷=Bn VҾj1E%G0FG
-ϗnȓ[<Oem;;d8{C1X_#;bjB>
-
+xڭYYs6~PCyg&NǎJ@K5}DɵG,@>uO<'IzA:'dUy |;\H-ǟx{n꥓^'('oO|}z<qS|uC#^-9s.Lgs;|+w\|Wƽ~/g_zh~<o9 M&/\?M'Yn^-p³ƴ%hDMQԴ*>Qk|}.֠|z;NlgEYko2+FI+TyL _^/w/򰣨-`Kq}},{äYE DBIe# l;Q)飨v]ѯl41KR'+W(Ji:l5BkH֣stÅ%o)r&W\Y6H{Mmg8;zA{ϝ{l!ɉC݋YܱaAseL @4UixhQX<؇5`殗o3TY85mc˓cxL+X>iܨ|YOXgm~͈/uqo2&R[Ǧ}!ڧz|y7 aD: Ki*sF~^䗎fʭ-?I\-;4H3lTy>Ҡrԁٱ5m:w~dlܷ2g4
+3Dߚ*eIM\99@X;w #O*tq`5k~Б玌V}4mKlE)u"߂CQ8 )ͦ`IY"H>s
+sJ0V# 1gY7x&L)BǣZeU>ǧ#F끈pϢ! } |wC/ @}~Idh8gnu"k_|0k UDmkU iZ& ҉cfAhN[A0Ӽk܌ -`]en0+WPGCcORԯNE#7 @I[45S)ZGosi,j|&pxqќI #ez/5qQ*#WV%
+?ZwykjQԛZ|t5
+my[|bpFmnڵCK3z0Z[%o"eԊLWMSX K j>$=5*Ȇ)<,|̀f\0`wU>sPח8X=114XY_ )D3".-xT^^궞
endobj
-4269 0 obj <<
+4486 0 obj <<
/Type /Page
-/Contents 4270 0 R
-/Resources 4268 0 R
+/Contents 4487 0 R
+/Resources 4485 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4261 0 R
+/Parent 4474 0 R
>> endobj
-4271 0 obj <<
-/D [4269 0 R /XYZ 85.039 786.531 null]
+4488 0 obj <<
+/D [4486 0 R /XYZ 85.039 786.531 null]
>> endobj
-466 0 obj <<
-/D [4269 0 R /XYZ 85.039 668.735 null]
+478 0 obj <<
+/D [4486 0 R /XYZ 85.039 615.144 null]
>> endobj
-4272 0 obj <<
-/D [4269 0 R /XYZ 85.039 639.937 null]
+4489 0 obj <<
+/D [4486 0 R /XYZ 85.039 572.191 null]
>> endobj
-4268 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R >>
+4485 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4275 0 obj <<
-/Length 3614
-/Filter /FlateDecode
->>
-stream
-xڵZ[s~ׯ[7+vZʸ3I@Q
-Vﻻߞδ{{vAң?2]//,qп/GezI]o~LKss/!ߜ~~{{* CVi9wW[&G~g|pU9_q g?+| ԟ~\rQ)q.˅yvLmršGw/Ĭ^̈y/ R7HCALs˶"7)hLHywo}OϪmoҵ h8~:މjj\e*HbkjD_0͖WA<LΝzmb#FNa}x^ݙ%4x}LS_i5.SN/q|dYxp
-ehc M:[K^)aA_qƁ@[̩蛪:5zU-,Zd;s#ay: s `*7_͂|
-Ab3ZlP,kw6 {Eq^ b $5PS1 Â)Ā FX!
->gt
-!%Qj15Ey2S_8vhN Ai[
-j߁"*Z"ԂK}#l"0U2 SJ}(#ns0$4 ɨQRj:眄|,O~;kvz@{}:N0I,2a)Foa/h~Kq~x7FM|㏋fÜ#]/Xڂ G>G85`nE-<r@
-i#ӐBJ̎ņ*Z| Qgұ^[lLm*RҢZhБɨ<
-<N X6ťL?+bόoK۰
-Aok0ZcUgsSOX'V"P.-Qiu%(m
-)a`EW>#xMlIk#n/2>,mc
-5L̨$ԣ3!mxBDO<v*x'LGrWDcUDz&ڐ`ySb?^dx V7/>
-7ƴL0dQu+a}5H"%cE(GQ(׫z3/c ?f䌬Ea#1I(b>En)4܋3M;/Izirs߭Ƹ9ߍ9o0llt}RL%pdlqk  -jGqi<`2[NSwzѹ դ“dG1dR&LD{d44QHSFç1s2r^g P L<͝9|{≑Dbo|80"Ԉg;PDL趥q=q?uxBVѕ(V_*eP>+"GK)N ZEyM4G( {MGK qD75DC$3s+6CIA^e3zДU9 `xSTuqyղ<@R`A9Ca (,;Ɍey:6=r*=EUZ<NC$xJjZpl7۝[1 ஏqcc؈R(*
-՞Iz.I4 ä}k6!5c<ZUCi;Ivhz.,ߏ%j%諾ixMC߁Z Y&#\ȸ"+ 7GtQL )-YDB(>W>~PG29~7}4|a"Dňf3:I"7PZl@oOWHL@yă*;{{ޜ
-^pr`#."o<hP"Tgʇ;Cιf}T<W90a|H\ T,{p,Zۈw%_V.1M9޲}Gz!gRv
-l jL[Sf\75sZCk_M wy.RZ1
-$+z49>'?%Cendstream
+4492 0 obj <<
+/Length 2995
+/Filter /FlateDecode
+>>
+stream
+xZKsWP IYkWXRv
+uLZ?0f UwKUA#3G5;I~[6 J 6* C'ANY"aqz>J!AK#yduyj^Z ceJ,
+D'6: 7w5pDy]¾@KFH d㡑G"A0_n)~*+zkn,]X[xL.XdC0paG 7]jTYYpVD!Zd4=1)O589sU .R1)]g6^xs^C_~V.=L+ F<Sù %Z5R mdsmJ:#P(mxy㤣n([*BBRn xb{k=f9քQLIֽ浌oT噛<bDu%iM>bFeĺ
+QN \N{)a"Dҏnj-mW*OvR頦
+QI+\kU0&!Vd.e^ʼn.iRй"Mv~ЕuYdnXԶs5Jv?6BҢVVE`ZCtp?w+
+w؝HFtOY%CDZyt>e_ǭƊ($(S81И|ɓ̩?T
+
+P^d<ԩӠVc?bcJPqjs5MJ ]wMIsM@ΆZ ͛x5} naxe~0lp<WJ@ =|۬&Ii|+ξMn~Q(F}N2Q`_ߦgFrG +T #
+|uceI_Pkgi_`ALR6m
+A@[jSe!tb%&n
+E!2kю\~4p%̈( VB[SSȯE?ا$d{$5Iyuert_!Qk74b>R!R+ = W#6ĩ`k(" 9TǿuU. V*۵,fYSwR$; f:^k$3q+ϊ":1ѓV&2"X~;m(I
endobj
-4274 0 obj <<
+4491 0 obj <<
/Type /Page
-/Contents 4275 0 R
-/Resources 4273 0 R
+/Contents 4492 0 R
+/Resources 4490 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4261 0 R
+/Parent 4474 0 R
>> endobj
-4276 0 obj <<
-/D [4274 0 R /XYZ 85.039 786.531 null]
->> endobj
-470 0 obj <<
-/D [4274 0 R /XYZ 85.039 766.606 null]
->> endobj
-4277 0 obj <<
-/D [4274 0 R /XYZ 85.039 744.844 null]
+4493 0 obj <<
+/D [4491 0 R /XYZ 85.039 786.531 null]
>> endobj
-474 0 obj <<
-/D [4274 0 R /XYZ 85.039 673.261 null]
+482 0 obj <<
+/D [4491 0 R /XYZ 85.039 766.606 null]
>> endobj
-4278 0 obj <<
-/D [4274 0 R /XYZ 85.039 651.4 null]
+4494 0 obj <<
+/D [4491 0 R /XYZ 85.039 744.844 null]
>> endobj
-478 0 obj <<
-/D [4274 0 R /XYZ 85.039 162.781 null]
+486 0 obj <<
+/D [4491 0 R /XYZ 85.039 659.712 null]
>> endobj
-4279 0 obj <<
-/D [4274 0 R /XYZ 85.039 140.92 null]
+4495 0 obj <<
+/D [4491 0 R /XYZ 85.039 624.302 null]
>> endobj
-4273 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R >>
+4490 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4282 0 obj <<
-/Length 3274
+4498 0 obj <<
+/Length 2953
/Filter /FlateDecode
>>
stream
-x[Iw8W6{rKqO{Xϼ>-E"?"ENw'|VZ>hgdß3|Q9ts`@9>p=RHz5?8zc[e}ˋyc Oa/'髗جGL=_w|}r6; goX?Onx[Nfo&9x3omr,xˏa/ʶhs|'ofT9hV)#
-&Sg\֕'+"uE]#5N972gp)2IS2hLKd2J hH6 y MéRœ >dѲ\my~ ;.=tYdUhziV/l
-h_Oߑ/-nXA|4:aȀctQlxax8Q BH D*
-bJ-.7:
-k.PxAOij3KCRAuWYj\n
-2N%Lor=R@ 0烍%b
-'^h)h+7|.k-ٵam4s!y3dz.31#`
-*+ur6a;kng\)$@SrC'Ӂ>ҥЌH_$1yQAzL_9Y ɐChi|
-] TɝG4=Oٯ9LJxcqjxb"`UnrU?s>BeEc+ feFq7Bas\Y{$5)r,&m(p 7Iq=ʑ9ӪFbvMNi-s wƖ+f ;:</D 9-uɎks|:ʑarN
-zVG&ǶI@g~sWjV(Ofv'!exPv.f[/FU'2)
-AqS~HO:TBq{n E$ctM" ܌e)У6/h] \Ϩ^S \:vI:o A ;ZBoueum^Gy/*;\n)dqV2.5~ ^Se 1~jwJ)-W'7X#Jm7&!)>(],Q'VFmHA #5 h"K*&-wyV3Q)?/tM]jhWfe[{|u2\{_mȊ/ЭNw [EvO ?#t:VӠA@F@ʩK$J lNu3o%ԊNð"ig`1Jq
-YBL%%}i3?\>Sk/ZmNO؆'W~34e1,^}sGƴw)Ln
-Gf&E vѷ.KC
-v$8Ez2~('=AкɚĂ&m g\&8'榢7[I.sYzĈ:B1vdw Z{peR/(Yz%KP7 IP_=^ =6-gJ5|k
+xڭZs8_ᷓg֊(Ҹfodқ}PlԖ\Yn6HN鴲
+`-\2wM(ُ3r~6#'JH{jxGUrU m,E8$!zKQikg-bϬnCnC-OihD{1-1Mɑ8uNDw le!(ѵ?+U@^)D)3~D-kTfi~ 󼙣e܎
+9ϳ=KB]lHp s%:"r_ɾ(ݳ cpδߣ1]nӺ8H35Mci-i(uXNfE=l'Dk){O..c9Wv
+\9OC C#2hj0 ͉:hNMBcǾ,By=.K$O_-AX rjXObTe
+ٮ9v:PpXU{Wk|){Vd45DØ OAvbnM,|xBϜ΅t8ïtfw.gočOH/c8 `Гau ãQ͂z;9@u΄Ϸ:e@%j?dY|#2~L"rM1 $T${I`s[[G`jpJي>
+n@" {k&W{}Sޖ LT- xk76q|g^x\
+/Z.%nV}^=r
+9PjC prF=<sC PTD G3T*̮\DEӳ
+$*ִNg^G$ uO
+%rV5[߉.0ϓ>ءѽ:T:Ju}k}(ufM[}IriLU4+secb6K{pwEݦRTYk6/=04ᕌH
+z Ҩ:դKCt0Ŝ@\ X _3;m1cBT$ Yܵ-AA\}x12ɝ$LǠ)%_MoV4,cҧdM{9;&+JϾdT .1\. ͞ܞ :Yi{>,~I$H1f͍𨥮qjݪUty7V1G: =7liπːg͂`33JkiwP*\*9k,L1Er?ҹX7ֈB$)A&O&.wHRAZM }]P eƺӭ" |<h91a*Wk׏OFK5[G׈w}!
+<7Զq(8
endobj
-4281 0 obj <<
+4497 0 obj <<
/Type /Page
-/Contents 4282 0 R
-/Resources 4280 0 R
+/Contents 4498 0 R
+/Resources 4496 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4261 0 R
+/Parent 4474 0 R
>> endobj
-4283 0 obj <<
-/D [4281 0 R /XYZ 85.039 786.531 null]
+4499 0 obj <<
+/D [4497 0 R /XYZ 85.039 786.531 null]
>> endobj
-4284 0 obj <<
-/D [4281 0 R /XYZ 85.039 736.988 null]
+490 0 obj <<
+/D [4497 0 R /XYZ 85.039 766.606 null]
>> endobj
-4285 0 obj <<
-/D [4281 0 R /XYZ 85.039 722.833 null]
+4500 0 obj <<
+/D [4497 0 R /XYZ 85.039 745.613 null]
>> endobj
-4286 0 obj <<
-/D [4281 0 R /XYZ 85.039 709.89 null]
+4501 0 obj <<
+/D [4497 0 R /XYZ 85.039 621.549 null]
>> endobj
-4287 0 obj <<
-/D [4281 0 R /XYZ 85.039 698.462 null]
+4502 0 obj <<
+/D [4497 0 R /XYZ 85.039 593.845 null]
>> endobj
-4288 0 obj <<
-/D [4281 0 R /XYZ 85.039 682.791 null]
+4503 0 obj <<
+/D [4497 0 R /XYZ 85.039 567.352 null]
>> endobj
-4289 0 obj <<
-/D [4281 0 R /XYZ 85.039 669.242 null]
+4504 0 obj <<
+/D [4497 0 R /XYZ 85.039 542.375 null]
>> endobj
-482 0 obj <<
-/D [4281 0 R /XYZ 85.039 501.341 null]
+4505 0 obj <<
+/D [4497 0 R /XYZ 85.039 513.155 null]
>> endobj
-4290 0 obj <<
-/D [4281 0 R /XYZ 85.039 480.75 null]
+4506 0 obj <<
+/D [4497 0 R /XYZ 85.039 486.057 null]
>> endobj
-486 0 obj <<
-/D [4281 0 R /XYZ 85.039 163.443 null]
+494 0 obj <<
+/D [4497 0 R /XYZ 85.039 278.114 null]
>> endobj
-4291 0 obj <<
-/D [4281 0 R /XYZ 85.039 134.039 null]
+4507 0 obj <<
+/D [4497 0 R /XYZ 85.039 243.369 null]
>> endobj
-4280 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F14 2895 0 R /F56 2890 0 R /F20 2865 0 R /F66 3242 0 R >>
+4496 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F62 4052 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4294 0 obj <<
-/Length 3806
+4510 0 obj <<
+/Length 3072
/Filter /FlateDecode
>>
stream
-xڥ]s6ݿBR'Ai^buhgTI*} (Qxvb/ȟ)gi)͒4"6+5{̇+_(,T!fuuc|e*dmW,Z9$I [k~|o0#߯˿pLsw~}c2X#^ma#?_)OgglFڋB-?vƅ35!eGR+/MC+?] 曼ַҟ@<6Zn h[ik6|wSAx8ϫŁ2ck|.ge39<È?[ʖ>-=W)o^x8hWoZv 5`gXmA)|#
-}ѺhfXQ&@ u䡞Z=i2Ez8Mh[/
-U{Uf[ڜ%dؒ;nUh$R}I!T̈1xɄd[PҥXa Ak 4V5V;nI|4xGfp%(?!PrU$7D\oco6e<'aBUN47fS\{\2W}:FrNiƨB`,Z/ݹv5ŽF0-A])k`@-HLl
-F^b+)K 4tCN󈶝b\(`ޫeOح|4`# G9A,e8JXfn
-'^XS(PBWq<c7F0tS MpC`CYD#\% [@ B"%0At:
-S
-E܋$JvcO\f֒,;0ı}fb9K/ష|<&; EI )\Q| M_Q8112c
-SA:Ɉpvmn51l y$?`6L"q )J*ϣ0ʰTC:EteA$kٰT.EHg\8`7q65HyK%ЦKQM`8ƒ"ܙ 2BwI yw*~GS{p
-~J1KaO0hCf
+xڭZKs8WHUE ߏű'FN0;J%)CRq_
+BXh:vꤳ-'u0fwo>]/|߷sZ]͇7HaOϺ8~w?p^S}yVX_rXڎlwWˋkYxԔB? 3g7Ў/\kc[0T,e<jVYůo> ˚F첲Oуy| <5vZ.?:ɹ a;AOo!GٞzT­ȞFr@o+Ǣ^-ȠLLvd#OW HFQc?%VUa@ 9"@51@ ,֋m'e? A~-sO Ty,MzPUZ^"2bX8; |4K?3/ғ7~yn)'!^qD~! ҫp빅(T4T
+oy
+Ap srwP!L*~<_{ %x@ Sx9~%;3/uc'T3MGoyFOfmSvGl}cDc,/`%7+;&R,&|VJFH8(<P*;fuȋ']Єe1R^(YhL*Z8<YpA''Ad85pS."?KFQ0Q75s^Mݝ=:|Nc+>!a P MS~"cq:X#yKq0:bSvS:jxK (. ]O#?qeadB}d7S8R/H1Àl2hIYWE!}Vb';U
+6_H(|ѹzgO J9dgk-|4 Z4r3C 4!;D5cGZE ${e0U!(Hpa FXZ ݉qwdOpp; y#Ї×v8}č`do-z h1>*;|ebZSc(¶λwխ=*q(Uщ|$ےSn&Gs O>cȉ^ːOB@ɕ["t{\U;{Dvb-{V( ؤXբ'h)
+%.H{K!+pf/("0v1z-A^D Z5ģSBxbFcOl6LC5-jB[
+) ]-4J_G
+?ѥGVVd=`(*"eQ@ap][)䍖ʕC[eA4w%]X7`OFgSO',lDb* T
+ߙ\| K ZșRԓ >0`Tc/ d&RTँxlLy$4X^mt|323VaP43ݶґ?tᬳ5ݹ/ 6DIbvRvqwr#wwϷWǤ cqy`= e"M?XٱT-? +oՁ1 m6
+Nhad!3`X;!I@:STUHkV=#|sP9vO݃`4]s&CVBD~W4hCx?q-]!6+UHl<n6v?EsSBR^ ډ˒Ĩ0ߊco^h]ҝ`-]gͭǩ#iSľd;-NUf<8lBC+8gNG3oˍ.۝\ k쟀Įn[PuqYKi*?Px5a5[(6̄W2x;wXWqnuhV>b:{澓}|g5owߕ.>.q/5.ƉqRNG]%=F[>}+P1]9" #Je|d #nlER2
+U_Ytyأ1xP9 6Jh<:4yzd0qgv?:4~rTsbɉ!`, 4uV?k7Dendstream
endobj
-4293 0 obj <<
+4509 0 obj <<
/Type /Page
-/Contents 4294 0 R
-/Resources 4292 0 R
+/Contents 4510 0 R
+/Resources 4508 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4261 0 R
+/Parent 4513 0 R
>> endobj
-4295 0 obj <<
-/D [4293 0 R /XYZ 85.039 786.531 null]
+4511 0 obj <<
+/D [4509 0 R /XYZ 85.039 786.531 null]
>> endobj
-490 0 obj <<
-/D [4293 0 R /XYZ 85.039 277.588 null]
+498 0 obj <<
+/D [4509 0 R /XYZ 85.039 506.75 null]
>> endobj
-4296 0 obj <<
-/D [4293 0 R /XYZ 85.039 256.392 null]
+4512 0 obj <<
+/D [4509 0 R /XYZ 85.039 463.797 null]
>> endobj
-4292 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F20 2865 0 R >>
+4508 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4299 0 obj <<
-/Length 2395
+4516 0 obj <<
+/Length 2983
/Filter /FlateDecode
>>
stream
-xY[oF~R@E Ew8Nn;{ihRKRu{nC%iB˙sΜeFzgi %iG-wgj3δPY8©q8T6[߯>ܽ8_A|$w;ޫp8y-~wu}y37wo'H]~ǣ{ufdz7w
-G5=M8!ÒrݼlkM.&@a2_
-H&Cf`QnQLu;p#i]%Hy8Hށ[&ybo5%N%ɰBM1O)A“!S& >Rj~}$1bpJCUeqK(%wO
-:7?΍RI(t+Tܐd<eM @.񻪙BaRd$ޖ%O*<7b
-+ͺZMl\Xth
-?5mf\9na$7l39HerENqR-^vjnWZ]M 0 xw4tڄ"p!go 7<FS89بq
-xB%C.B9.a" D>G:^W_n~|vF#˫u##ip*yt뮴#\,ha~bpt1DfR% #WS|;w؀2tpt6_̤`wO_iipN쩱N"q˂2߷6`AZqé5e:GrX}r ],JJȾy++o#kx 㫜pH\-m4KkH*v(^$#ҹhf{ [W)&3B>xD\ A?*B&bnB^K
-G
-4Yh9=a  Z1j2xk9iﵼ04|!2_籝G6VMָ5(΂>AX;ej2
-&fxk=Y:roآ^=z5s8i0~K`h_<NfU9~VOOՍ%P`|Op$õ;Jb&|
-W> שm r/7!vXsUGJ&mPH-tWo/tIfFk{kV!D4w7FjiN64ٓq
-Oj:p 5&gXAG \:`Hި&y5UɏF| nKͲ5`Rl8:x!.9%o}S/|45{^6@Z?!lӳ`nd"?K:b
-r]:%endstream
+xڭ]6}"֊> CriM."@۲-Ė\INEDp8۫fS,,cf]0;% AY88/w
+<gmO'8Of'=|aZ{9_i=Ε{^}yyy#}/>Дq<f߼|5ղgܹ`+z:f`*gǻ(~ihƻ̏3='~$^ .zP^]hwAc `:$
+ ie%2@8 OW Lk<b%.BI<ux
+!$k:Rb ʞYӵO1$]rzrڡl;mMM;ͦ>wADŭ`_doC+(ɽƒ8֝H f&jx!P4hoYk(oߍ,qxh?"2o/B7´La8);DMSh8<x́GӲ67< EH)D:ǮhhH!?Ч:w7AGx>NUNyH5,
+ 7ȽduW8<R^
+Au.Uѡ]u XpdDpsKgp ='A3 oR#ᣝY09cJZk,zY5AX/aZ @^-!>hq|NzlZyK+˖ݓD4 .=]}8\u pFT`hr,pשٯ妿ME4_{Q-`\8FU<#)+dqKl߂Լl^Gȍ\y\AAvm0qxT{FAŦkc̳۞k^1q_mݡ
+~2iِ١⫠!Lfq5
+fs)D\ʩ
+><qXW#/:)9:C1hJa-\%[N \1*XM=x$C'?=[dQdTaZop7#f/e6UQxHa!Cn[JjFA'mzhz'VVCxle̚"CȂ$^"M`qD
+Jg̓/|5~\*?%=? 'Us_M T&dKGYvy|k#dוyJBf􆖥yb
+t6Y,A[JMYyWۖlrܐ >q}:xX_EasCb
endobj
-4298 0 obj <<
+4515 0 obj <<
/Type /Page
-/Contents 4299 0 R
-/Resources 4297 0 R
+/Contents 4516 0 R
+/Resources 4514 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4302 0 R
+/Parent 4513 0 R
>> endobj
-4300 0 obj <<
-/D [4298 0 R /XYZ 85.039 786.531 null]
+4517 0 obj <<
+/D [4515 0 R /XYZ 85.039 786.531 null]
>> endobj
-494 0 obj <<
-/D [4298 0 R /XYZ 85.039 207.58 null]
+502 0 obj <<
+/D [4515 0 R /XYZ 85.039 588.614 null]
>> endobj
-4301 0 obj <<
-/D [4298 0 R /XYZ 85.039 184.262 null]
+4264 0 obj <<
+/D [4515 0 R /XYZ 85.039 554.474 null]
>> endobj
-4297 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F11 2898 0 R /F56 2890 0 R >>
+4518 0 obj <<
+/D [4515 0 R /XYZ 272.129 263.494 null]
+>> endobj
+4519 0 obj <<
+/D [4515 0 R /XYZ 85.039 154.574 null]
+>> endobj
+4514 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4305 0 obj <<
-/Length 3025
-/Filter /FlateDecode
->>
-stream
-xڵZYs~ׯ`* R9u6  
-U/W66al뫻Q.׌,mQC3 3B4:,c˖ϡ]NSY./e7-eۖ_LݚkYOؓ~ƻNBŵ@)q GxD+6x`\7̲++)R#q%ծ-3Lg,h=Ph$(r95;N "2tq5ӵl{,:0EDʾ^ҍ]CGBMǚIOE[˞w/nG/ۙ:6Ug*
-fqef[qv(gFv"E* `WyQuKU m5WV05K& QRS%""3T[ Fߕ/\)ZYv #. g2?fꪓ`SEUwLFA"R "tuMZyW*Sa'0R4 .|ȢEVJbpS<Șh) ,ɂl% V(5 t:PCG@0q8&dftU7;l~݈n0uY7qPR_Zane~ $a4ա78
-F
-q'>eC__|a6c:ڨZє=έUߍ}
-Ixܛ ˈIFG9JgsU3ŽdzFEֲzb_H)5L܈Ę{P ,עP j9Gظeh E23w +0L?kN~?#`!<+T7f,8ئй c=
-ƣQDx 9ȹ)
-iY"s~iy0
-4jHx%<SɱcVmsDžTe`+eτO9}d]WGJ(@ *syEylbcpKa8ɐ=P 8`=r5XC63V }IPe#ơI x޻$XF{(|v]1dzbEM=(6M8Ћ5A#aqG"l1#Qq ^X(/IC8qxc͙iԤ]1Z =Ϗf_{ezM u8r?V\o@6;2|OȖP8\qC@ߜmt><rǓP _WG V<& w Ljo/wKpf3g7#HCwx ˴M]GP'f<F_–{?*穎{у#V:g3H8 6M
-x8Bt,GqQΒ=}b-%;`dԐ+{{\܀5qE#-jaA2C [(WߎNda#)LM^2'T &km:
-YvC0@[q0ʧ\l.jXTNP'z
-bK"IbyqT4Bz򓜧Pnj6{KK̒@wM)
-w]1]⸷c  EOӶyK*4ױNOұ}랔
-02 :B7E4] #'~fP6zf6
-GjC7tADBqc3 (n HXD
-
-ɝ DvrBrI'ʺA*|vDepn(Wn#0$%HLl/8d@Ò}=D9٭L29C`%$.ȯGP$AD,FfF{XQ_b.zuF~Yf"Ȟ$/?J#2A]x|/ ԛ@M7 c
+4522 0 obj <<
+/Length 2530
+/Filter /FlateDecode
+>>
+stream
+xn_R1Cr-NNc~H@KE]ܖ\^
+1lD 弐JĦs1Yx>5<)tm y.僕,;LS֒hB ]$Lg4ObS`_h=7>5$"6١g?WA뮌B*3$lx^,-Ҁ ,=<3,ۛBJb
+)؉%+A|`soaЀfum
+z+a}+qqNUPUXJQ ׂL E5bO:!TF$
+NSPJ] Rw_1vN׷Rv}d~Q
+z,s%u:;>(Ns(Q<JE}7\W.HRS?#448-@sxc'bY&YmedJ6d]kd ^rk'uO6}.UJ|@4Ȍc1=-cH&lq <, ծŏyEp8$J,]c_;3ND*瞲 Tx*> G
+Kwg-e9[s$9ZFJP)p$\Ż\pwW(zDi_0ȇ-Y.&] ;RA괲ͳsڸW:fe}qSE@֋6 @0
+LWA2W3lst w7l~hnvS˃RxhI{32XSd1ƕ`t;~w<BebĞ8a;1Mt+tф :<${rL3r~":B{ml\Y/Ehd N(y0l Jp>i!A i!1|EM)N='~C  B0o^dVӝ4q%٧X6pٱĖ˾PN=)kjJ)<#U͈F{GL6ߖG 7KVmXr}SNH^krjߝXtT;/;yLzJ'fBϽ5Y2Pte kNB(j+Mk.!ؖB| BU(Bzۛ/~}OWca+ӂg` hlpdO?|>rL~!J]h-g~!"ӂI^42N~QO“L}bSQEV
+0Sa$TbކY *ٟԎKp[%b.'vl+mf.o `F}ʀd%B@Ჵ7 @i@jgKӸ)2 Uem [t|0ӑm]|.u~d҉&G,2a/'Uc5ro9endstream
endobj
-4304 0 obj <<
+4521 0 obj <<
/Type /Page
-/Contents 4305 0 R
-/Resources 4303 0 R
+/Contents 4522 0 R
+/Resources 4520 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4302 0 R
-/Annots [ 4307 0 R ]
+/Parent 4513 0 R
+/Annots [ 4529 0 R ]
>> endobj
-4307 0 obj <<
+4529 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [310.193 627.598 512.306 639.288]
+/Rect [84.043 99.916 280.066 111.606]
/Subtype /Link
/A << /S /GoTo /D (browse-force-master) >>
>> endobj
-4306 0 obj <<
-/D [4304 0 R /XYZ 85.039 786.531 null]
+4523 0 obj <<
+/D [4521 0 R /XYZ 85.039 786.531 null]
>> endobj
-498 0 obj <<
-/D [4304 0 R /XYZ 85.039 463.421 null]
+4524 0 obj <<
+/D [4521 0 R /XYZ 277.887 730.6 null]
>> endobj
-4308 0 obj <<
-/D [4304 0 R /XYZ 85.039 440.103 null]
+4525 0 obj <<
+/D [4521 0 R /XYZ 85.039 621.679 null]
>> endobj
-4303 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R >>
+4526 0 obj <<
+/D [4521 0 R /XYZ 255.372 463.069 null]
+>> endobj
+4527 0 obj <<
+/D [4521 0 R /XYZ 85.039 354.149 null]
+>> endobj
+506 0 obj <<
+/D [4521 0 R /XYZ 85.039 338.087 null]
+>> endobj
+4528 0 obj <<
+/D [4521 0 R /XYZ 85.039 303.947 null]
+>> endobj
+4520 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F38 3001 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4311 0 obj <<
-/Length 3086
+4533 0 obj <<
+/Length 2508
/Filter /FlateDecode
>>
stream
-x]o6=K`ER asҢ&EpAeGXIr/R-ŵEpi5OrźeyYfE<ȷJ0♉oR3SqTnM(w>|\h0|Ȳ|~{z`3ˣ?7_|2<p?}πOeoO_w T#x|wGgЎ#U݅:FK{q{/
-Ϛa,TI(4`
-3- SuˆZBö-4瀛+7ka(8
-)G){xޓñeFC["" E՞1ݛ<2b);
-^-$0X.y#tb .Z l
-:qxF! ӽJw7J
-#5=u  vPY%&acFX, <T`E qQ|U[pV8{*_I6FA%xW*$p S̯ ٪栂״6`ycVlvh>nepZ"$j:5Ŗ;
-lI>+0Keﰪ`# 엨.Dr6E㼢k(&Px%JS21<#v{5| Vcel9;6fDfxwlىcm'{?ݻJuLM̬7ܩo$հIۈζbﳋTۊ=^x OOZWI%0LU3tj4qq<-tD4m*':L4N69]-q߮/w|ֱ&l!-,I
-b+c,=[o#XZ)4xJ=HX0Vn[aqP0q۳ɮёl vm6Τh-#H~'uf=b(hhua<9,WKQpo&Ld˄58oAn$*P+l\$+<8
-qt>̢( Hr 1I4&Ηۺr>91Oh;M "E4y]q/~)-k 85XP a&K:"q7Kr䐍rC30t=HLf#!$ !āPA/Q0Ha#dL٫+6T
-4@(twA&"t:?Mi!BQJ! uJCiN2VhXb%)y[KZ
-Xg
-+tR!9OEdGea\@"Jn6
- lH ]x*.Ue(?8K~ x;|W
+xڽYYs~ׯ`ޠ* ́Uyڍlz ငտO_
+rvu杍aAX=vriXm>y?V/Zk8/qxwwg?Sy7?r'nW8OLxssNjU`k֨/>}dbwa2./.9UsVrKRi,Gӓe觩R*B6N0M ,L\++].CʜcUI/_xΫs, \Y~'Ųk?FKtG761sO-7~ (B>=Z'_c$4vYP[_W3Kcd8-Ab!5HG:Y|  $j8j <e=QI΅W6E6M̻ik6R^mAq۳;l8-Bsѷ+O̘w0jr:HxiFt+sзmz<ǪĴd){hxLq-i
+<ul30zg'|& 4+T(y (([cj biSTrLSSu/M1UxΫs,ðcU0eE%9a.; sG| jfoS{ȵ6uA?!@{J8-e̢Ot|4 YHWtR×]EC[imཻhx
+jw!a򓨈R~'LƱo*ӷ7'>k%8j\J5TM+T"ұ:ġij j+.Z;9_8E=`-S@ ö'[%=6[tw\~Z%
+l2* d*M~;A CpLڝ:sp١q(KYB;÷-uL$~SO[xSFS3U_kQ[L[1m[ٚG;jEhYԣ/_Q**Y5ؖ[n(uꎰ zƞYנ,rܰ7Bj2zQy e;Ԡq"B&Q&dI-?+q@0 RC%xP$zĄ9Aۑ.aRP4~F'9ȸ;;P”EM򕧹^KT+kE.ϯš/pM*129}C{BtMo ݺ`=ZwzIA`H5H!+j޼jI? |wxa Z4Le
+
+7lY
+i|k'4~ݙu5ibldMGL ?UfTutpkWF|&5@z
endobj
-4310 0 obj <<
+4532 0 obj <<
/Type /Page
-/Contents 4311 0 R
-/Resources 4309 0 R
+/Contents 4533 0 R
+/Resources 4531 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4302 0 R
->> endobj
-4312 0 obj <<
-/D [4310 0 R /XYZ 85.039 786.531 null]
+/Parent 4513 0 R
>> endobj
-502 0 obj <<
-/D [4310 0 R /XYZ 85.039 766.606 null]
+4534 0 obj <<
+/D [4532 0 R /XYZ 85.039 786.531 null]
>> endobj
-4313 0 obj <<
-/D [4310 0 R /XYZ 85.039 746.277 null]
+4535 0 obj <<
+/D [4532 0 R /XYZ 277.887 769.79 null]
>> endobj
-4314 0 obj <<
-/D [4310 0 R /XYZ 85.039 540.254 null]
+4536 0 obj <<
+/D [4532 0 R /XYZ 85.039 660.869 null]
>> endobj
-4315 0 obj <<
-/D [4310 0 R /XYZ 85.039 513.155 null]
+4537 0 obj <<
+/D [4532 0 R /XYZ 255.372 606.975 null]
>> endobj
-4316 0 obj <<
-/D [4310 0 R /XYZ 85.039 452.981 null]
+4538 0 obj <<
+/D [4532 0 R /XYZ 85.039 498.055 null]
>> endobj
-4317 0 obj <<
-/D [4310 0 R /XYZ 85.039 400.906 null]
+510 0 obj <<
+/D [4532 0 R /XYZ 85.039 482.827 null]
>> endobj
-506 0 obj <<
-/D [4310 0 R /XYZ 85.039 329.322 null]
+4530 0 obj <<
+/D [4532 0 R /XYZ 85.039 445.96 null]
>> endobj
-4318 0 obj <<
-/D [4310 0 R /XYZ 85.039 310.45 null]
+4531 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-510 0 obj <<
-/D [4310 0 R /XYZ 85.039 240.989 null]
+4541 0 obj <<
+/Length 2835
+/Filter /FlateDecode
+>>
+stream
+xڥn=_aX+}Lb2IRl!J)ʖ``sS<Xdy'Zl7b +_n`e||IP_ɞS~ROUE`.WY{K}cG^zx{2̽{^oʀi8w_﷟>/{eMEϛ_~ %MGExqૢXo$8yss7{ 5$$դ5%^QQJyhwY˱Z7 BO-_ -^p}a'!@'i:F|14(X=B(=\s3
+o`xId
+EAC ht#%
+p
+9*"@P&Υr?rA(ڪH /-Z)AL5qn\r+=oʏ/,(;ED\ċ[PQOlܾ>p
+
+?ǜD>pl܁eD@p*C̲%XWq.~QA2yъh|2jk)U{Cp K?me Yaުq^KCNQ)Nah e3Nzyoi <Q#~IU=ғAi'"Sp }Yv.浅y!5`:LƏУ.m'xwr||#"&Y廌){E$'XK>[mǝ%});Ӌc~Տُ%6ºUE~N,6̠*a7Usendstream
+endobj
+4540 0 obj <<
+/Type /Page
+/Contents 4541 0 R
+/Resources 4539 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4513 0 R
>> endobj
-4319 0 obj <<
-/D [4310 0 R /XYZ 85.039 217.671 null]
+4542 0 obj <<
+/D [4540 0 R /XYZ 85.039 786.531 null]
>> endobj
514 0 obj <<
-/D [4310 0 R /XYZ 85.039 164.083 null]
+/D [4540 0 R /XYZ 85.039 711.163 null]
>> endobj
-4320 0 obj <<
-/D [4310 0 R /XYZ 85.039 140.765 null]
+4543 0 obj <<
+/D [4540 0 R /XYZ 85.039 676.417 null]
>> endobj
-4309 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R /F56 2890 0 R >>
+4544 0 obj <<
+/D [4540 0 R /XYZ 85.039 416.197 null]
+>> endobj
+4545 0 obj <<
+/D [4540 0 R /XYZ 85.039 375.549 null]
+>> endobj
+4546 0 obj <<
+/D [4540 0 R /XYZ 85.039 301.826 null]
+>> endobj
+4547 0 obj <<
+/D [4540 0 R /XYZ 85.039 249.75 null]
+>> endobj
+518 0 obj <<
+/D [4540 0 R /XYZ 85.039 166.739 null]
+>> endobj
+4548 0 obj <<
+/D [4540 0 R /XYZ 85.039 132.197 null]
+>> endobj
+4539 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4323 0 obj <<
-/Length 3379
+4551 0 obj <<
+/Length 2206
/Filter /FlateDecode
>>
stream
-xZYoH~R@a<Cd=#;0<-HIߺD{0AFWuu_g>gUIgq)kl;gkte? Y:9yKδR?Ӕ7||ljw=H<zqw{vj$5\~՗ߘp<S?}=qד7&
-#\q?[E~=I}t; Q64ߞ\ۅ"V(-$Mͷ;TZ'1M] e/՝Z[̧/W_?3[ZmzwPJzxM^efƑu0%B bGAsx(B{tr0^~6\Lggi48tQw~a
-uAZ^g7[jwR#W# U
-BFUK;\TeeF;Ef@]9UKcX0Jw|K+ht|HAۅiDi7@,]qW6_}|?vvػ#I<.~ yLV|r`-HaC K)CT<vG7ۊxU4QOJ 﫽N
- LDJ?w*I"da2hy3wwuESH 8zЈ~0 _,b3o[O8nP^^¾H4o'b$y,ez7Q^&m晛C=IRrYnQgw~Ϋp6=c1D'3K(:e➛O"<|yuÍ]%0Xx8ocm .O|?R" U΍ @&%|V>[E/{xg{آv==]6;Żײ>kq?>LEܠu&*Lv/j g1jٍa w'׽2,r{) v24 Bz&Os5\WN&3\ֻ䵧gWL`Y>B6ӈjTS `ūH@ز z-A 7`yHx[2&)ˍ
-]gYfF vAT[EU2;0#$#ͦ
-NCkVEV CR9ߘ)
-bFZ$GFU7,0~h}k#:ŬCK_JC=lc5<zG;e*0?nX;пss81cKN8UrPT^P;LT4pRx) C赢6:HHo-U즰h\K$j}z !́!,EpA6cfx=PqBNxBM-иEb? b +{y>O並O8e4VgQ3v6ZHsF
-^,_Q;a s2A FE:X魂grmҖ
- Ba3L:^BYoϢQI ,g;VgQ,`|  <E3EWg .ij5I89HtabHpt_BC
-2U-וQ@I{'hcH`'q_ozFL91!/3:L"҇b<Tc Dm SAΞ;s {uA&8zcު FJnQKB <5̑$ k<L23MŭuRE3N3}!f![M$f%y!6S> ٚpJ{ˊ|$R%dC6I…7C g첇*[o8U5_+XTdE%,6K\eCAq`/, !q31Q_W1I5&T
-V7>!G-;Gxj9r8(yֶ/*U BЖFZe4Ķ(V1wB/drv,5>4}rm/krr\0] :DBuĿoD|결
-
-#@(#z_uMb*@+R{VknT<,dq Wni6Dy.E/GVO>{h
-rmj`zziR9UɣrȞ85TW3}# 0Y3TLiw_GK!`aсJq ~N (v
-UXF}v,'zTu=Z@KD7v)(){%UD'zx-4)ɘL$^KnPB?
->Si%3U P*Di|6SU` Yv9 uT5i`;a[ E}'v hQ9F
-;,
+xڭn_Gki9n7x}PlbK>4߹dKisEÙ\r?9dšws2\-'~
+©tE&I\$tOR<bq&7W;xn#/~Z>\=Дq ɧe#T
+7wB%ƮI2=L@Wz<Nci?]CZ2s d &=X" &@~DunN{5qaEUt6**OYC`=)Wg9>VW+>rTVs t5"gj䈵c
+Д=q<J}\5 +K<p?]͕TbĈYaYupF > p<g6/f);iCv(=XX1)שC1~oqF"TR~L/5/*;n=O 1SB&^ J!+f?jӂ'bZoml
+xE)Um@5:4f6g5{˷Ys[w_,#yNSkƇ1.0RĂ{_5cb^OфBwX;*FA[w)U;'@$Q<{pcI{*cqC&1T/ .fbo 8%gw u,%bAf ήi _!.-~vl=[:VDoH]Veߟz >?L}];86TA`/bNZ9'_HuΔ G\ z7&c %'F
+A ㄉ,{FIkbĹ8sp`d=bHi6>zta,b霠uVB/89\@w8*uA9Rft/6 䐄ѰOWɼ0n#߁59vDIk
+d0R^+ 27qI?U)d`JRsJS{|l"ִƭVV@5j[`u~XSkMݒa/~]p_X
+816H*P+‘6ͤh*08ـ\0~`"|sH?C3)C ŋܶ)h
+dL8#
endobj
-4322 0 obj <<
+4550 0 obj <<
/Type /Page
-/Contents 4323 0 R
-/Resources 4321 0 R
+/Contents 4551 0 R
+/Resources 4549 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4302 0 R
+/Parent 4513 0 R
>> endobj
-4324 0 obj <<
-/D [4322 0 R /XYZ 85.039 786.531 null]
+4552 0 obj <<
+/D [4550 0 R /XYZ 85.039 786.531 null]
>> endobj
-518 0 obj <<
-/D [4322 0 R /XYZ 85.039 526.057 null]
+522 0 obj <<
+/D [4550 0 R /XYZ 85.039 766.606 null]
>> endobj
-4325 0 obj <<
-/D [4322 0 R /XYZ 85.039 504.86 null]
+4553 0 obj <<
+/D [4550 0 R /XYZ 85.039 746.277 null]
>> endobj
-522 0 obj <<
-/D [4322 0 R /XYZ 85.039 347.155 null]
+526 0 obj <<
+/D [4550 0 R /XYZ 85.039 690.568 null]
>> endobj
-4326 0 obj <<
-/D [4322 0 R /XYZ 85.039 317.75 null]
+4554 0 obj <<
+/D [4550 0 R /XYZ 85.039 655.822 null]
>> endobj
-4321 0 obj <<
-/Font << /F64 3112 0 R /F66 3242 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R >>
+530 0 obj <<
+/D [4550 0 R /XYZ 85.039 312.591 null]
+>> endobj
+4555 0 obj <<
+/D [4550 0 R /XYZ 85.039 277.845 null]
+>> endobj
+4549 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4330 0 obj <<
-/Length 3290
+4559 0 obj <<
+/Length 3311
/Filter /FlateDecode
>>
stream
-xڥko8{~SQ 8 $l7x,zXle%)ْ
-9Chϟ%t'CXy`2›)׋4.G?Gj{nꥳOO_}8> I'\#X9o<\^pψ۫>ƀ1׷˫_&OgoF~=0Mf/\?Mg#CWP,ƩϚʼn
-"7zn(+_O%'ʋqz*gJT`;q}se^lp]a,qʛ;7..=_A{Sv%|ꍐJRVrN
-Ähj$bm:+#X$Z>2婬xAN26z|mW4_Լ1PUji?BajnUۍrSYW@X^s;WzNomΗh<uhS,DR]}\U2??~ϣZtu'x p?'z!1I6E.# mK,%ݾF*K|_9mQuӎ^ed Mݙ&^Eh:Y^mEi;Pز1g} iHІ{ƲDY \v`<U/1#</H
-={_ D4wUj!G#>t cKieq3kh#cJDeU:Nҕ]cPq֮]֒u';['OmWgE\ؼ
-ݣd&f<qt@KQⱕ؟[8ePH{pЙLr]qAf,7?
-J+w ϼ9e?:uuM@)A242ܢ,\IW|MQ}~q+
- p?
-`zjN
-% FV, Xb$N”m!pqjU sv*$=w!WMڛ. <B$R
-4˨.e|LwekyI6+;Y`tѪ\C "(*oa"̖-њnL3X1/#m2h#h#x#Z^?Wƹg}ʁj{ reC n9G}\4u[/e.&sHC[Ǐ}>g1m$!.B⹲)pfEM݉Uv U]ql@es_Ÿ\ϙD?ac:
->儊ڲ;=ʍ MD7D@4Bń?ݻ^w1Jj)| H*vU$BmR]3*c!eendstream
+xڥ]s۸ݿB}
+5S1
+Y%~j{fy{c!( |yq2U>[Y:<-ן_~}qyi"M3z_#8^k ˫7A\?|?'\^e/\̿,;XZt">Q5ۙ<=X:g۳(8
+>>sьWMi`,tAcM&j2dI&Ay1/r&I$r}ɰPnլyǞ.)CFfkP.Wtϩ4,~,dO#m&Y. 
+TdPUji7_NĽqEDcJ?2ؓyA-je6eJuh+櫁 YP !淪[
+&0r_
+UA^,2oב}da٫IFgm$ @ x܉YiýP>QL$sT :W9_5M@#9(!}[BU:f'XT 3ae!%}fǣ׳$ +JzLiᐚHy{B `&ʮU5HB5%j!0FcǕKHE"wr8`8edo3|eNꇐOùtbP'E4bxP놽VYLT‚6e) r{N
+6[ޣv[G!,7F[VpP{#QSmKq3 )éy|8[y/Rj;L`Rn޵ĩ5r)Q:AaCk;}é1K쎓)&Me&Î=][WE?0(xz5l>n-C&.,%,"s1 c:gUͪLbA:-ڑ.j枢K %WU{sTɒWo ! NX|\7t'񆫨Vc\5{8R8JObM(XIcי#,+|Wx0C'1u%h6_gbO<=-J'_Nh1;pOR_G {[N*uMlDt@0da4qVb,-,n$w9qB̠1^+ ҁ4i
+t 3Cޟ詬06 a~0.sX3ToYu<‚8u-G8ƶi`%Zk-sl Nә  BRֻފPs<E= px!7>ϟb{F :rB4ՏU?$jNQ~T,p~CPAlLRmA!M-}bhm >, $+B~o
+n5Ap=qaCē\vƿai4:~
+>[oe Wy!7c8u袮pѸ##N*!#l8ZH7
+ZU&%fZ9z,W~4, 5]nѓvncqͲ _Pξ,9BCBq$A8F7-;sX ._0pD28|@}w ^HnNj1p;osȩ̽4]ʼIBk"^PE]}Ohz^<=k#qVOI bkUq)᥎Nq/_jCw`Nҵ<HiB%yLŘX_Nީ?0NJg \t\' 74j&ؠȳ`4,}8Xqq$
endobj
-4329 0 obj <<
+4558 0 obj <<
/Type /Page
-/Contents 4330 0 R
-/Resources 4328 0 R
+/Contents 4559 0 R
+/Resources 4557 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4302 0 R
+/Parent 4562 0 R
>> endobj
-4327 0 obj <<
+4556 0 obj <<
/Type /XObject
/Subtype /Form
/FormType 1
@@ -13995,3846 +14892,4425 @@ xmIn1 EOPwu$Ig0ľ6V5 oʯsO #h8:5?
6\>RgbWj[
WϢ{6;F])/ԬMu;pk;̩dh<EAw𬱱NtD²](;厰rL T͡誋tw_ =]=uS"yl-kHsreOڳvg<7t,e;Э/IB&(󻉨Yٹ,kRԚ'^ m" ^hW9AVy©/f"Fy-Sng \dƥ}B$w1.&COVX9gE{< P)!ZşLު~'UXLcXsЖӒ~BLƹONZ_[.*]3Q!-endstream
endobj
-4331 0 obj <<
-/D [4329 0 R /XYZ 85.039 786.531 null]
+4560 0 obj <<
+/D [4558 0 R /XYZ 85.039 786.531 null]
>> endobj
-526 0 obj <<
-/D [4329 0 R /XYZ 85.039 430.791 null]
+534 0 obj <<
+/D [4558 0 R /XYZ 85.039 766.606 null]
>> endobj
-4332 0 obj <<
-/D [4329 0 R /XYZ 85.039 412.123 null]
+4561 0 obj <<
+/D [4558 0 R /XYZ 85.039 742.055 null]
>> endobj
-4328 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F11 2898 0 R >>
-/XObject << /Im3 4327 0 R >>
+4557 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im4 4556 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4335 0 obj <<
-/Length 2837
-/Filter /FlateDecode
->>
-stream
-xڥ]o8=>d]ݸi7{z}m%"[^InEIU_"r8 i?`njs ` o`\/ pCh^<Xbf1,Gq̇3~?Aqyz_].>Uya6]?s5dWogEɑqM?Ͼ|k3q4xq<؜@2g7Tx xW.FF@{nF)QMm@P{N2J pr
-9rpع˶0YϲV g HW>[<X #<<QŸyKVu@e[J>5 vrnIMI;
-a!$|kX1wT
-K^Mx},y&<BNZ,247e
-QB( "(]6٤<,d_0BV/=0Qi9ȩ<e7^s33
-]į"f˶,T=G>|2Z
-86/ቜj*hC:b|P!9 d
-r .'1࿉c*褲T|A(v hUf*W$'÷v%ДrCF:G jb
- .TH!ʬxB8k[jpqUYT6#BlT
-N!85V-X.Z<F9*P+0`ir-G#Ta !P<'fM-][]Hxc:R*<Ӷ14[wl0!HGLF
-.*at%rf"RvPUaUZn. kAY!e>Ě]N
- Y!ilBY ɜ:6l1VT1MVQؓ
-$
-lY R$eGx6>._$b4gpQ4 #U.9 [3c80j$1c"Lف&/Jv
- vz4*H1i}X0mVcQ{J*bg+
-,[iVsrʼnJT./).ԄM UGt՝7|1uq A|rEk d.EH&{rZrfX:J;MmP`<gBNܲr yDRo^0
-+bfB
- `S&慏/?MUQ6}P4X`]J.|ʶF0(ӇK[?-d0
-%sUɍBO댸)
-)D ?PqkVQx0~~}[x~:tSI+G5%[endstream
+4565 0 obj <<
+/Length 2927
+/Filter /FlateDecode
+>>
+stream
+xڥkoD h
+K}7(|%&B:yr)Q
+c6bӏ&n)b'8sd>2d)<σy> e]0~3w- s嚱Vp;}~=5*I蕮-=sr9F3H!9t*YSAx  #i*Y9,eFXN5P𵆕1W_p:΅vP5UeLl<BsQCMmsem${<4nB 'RJ *6ae ڀl < ^4Ǫ!V_*Ifӗ i;:;t*1?:r$y^ x85m oC2;>;m qd6%DA#G'~S
+)m$8;]KIYv(aF`L5%r(A 5j+!RxHV%`%S+p>4c umAI(x2D?F *^dobBtd^kc<9փOfJq SlR')BpL40 M[fEc[g=* {
+F$PnduaSpR*| )ss[,:2!WH*&BPβZR*prOuX-&
+AkTBg|G_\J"UU#?9* |\jj 81Fب5;gM?Tf҈ZoӒOAbةh xo;wXm Q/s.ؙf(|>XdFSu$ĎF5#9`slb`vaD6o{sA4)xrʣuHn|  4sn(jrD+tɼB4c
+a@^Rd
+ S("׿1ƸGِ]
+
+6DxIbސJ#Qa8F<T6vgW Jh@$V@׮"<ZQ h!T*pUF H[䨣c8wMy`)]z<s)&!dޤ@5p-!ߖWG&H8"vz ZFBp*cpqT->0ۧ.rW '<80#JYs}؍ ]#Nz01r>lQ"N-Ľ*IN>T=> 0"xsquC L)7oj@+v#X޻BXTSB, /,3޵ O#7$}ǁ^/nb~&cgI7/B/2 rܖ%j$$."RMkW",OFj6e<W!**w i_+!2޴xjc<4 L0:e;~5\}Xfʬܞ#b1Vâ3q)x+HVAŸ蝄76nkg?ظ@]N!:GdY&Qp'ɨTŔ\0?8qqzqs`<rPq?p3}'ᠢ2>Kp(Ahv[2N5Ӡb_:U \fqg| \IAwbGy,n_yD]P+յ
endobj
-4334 0 obj <<
+4564 0 obj <<
/Type /Page
-/Contents 4335 0 R
-/Resources 4333 0 R
+/Contents 4565 0 R
+/Resources 4563 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4302 0 R
->> endobj
-4336 0 obj <<
-/D [4334 0 R /XYZ 85.039 786.531 null]
->> endobj
-530 0 obj <<
-/D [4334 0 R /XYZ 85.039 517.617 null]
->> endobj
-4337 0 obj <<
-/D [4334 0 R /XYZ 85.039 494.3 null]
+/Parent 4562 0 R
>> endobj
-534 0 obj <<
-/D [4334 0 R /XYZ 85.039 425.041 null]
->> endobj
-4338 0 obj <<
-/D [4334 0 R /XYZ 85.039 406.169 null]
+4566 0 obj <<
+/D [4564 0 R /XYZ 85.039 786.531 null]
>> endobj
538 0 obj <<
-/D [4334 0 R /XYZ 85.039 118.219 null]
+/D [4564 0 R /XYZ 85.039 766.606 null]
>> endobj
-4339 0 obj <<
-/D [4334 0 R /XYZ 85.039 88.815 null]
+4567 0 obj <<
+/D [4564 0 R /XYZ 85.039 746.277 null]
>> endobj
-4333 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F11 2898 0 R /F35 2880 0 R >>
+4563 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F38 3001 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4342 0 obj <<
-/Length 3040
+4570 0 obj <<
+/Length 1754
/Filter /FlateDecode
>>
stream
-xkoF/GMi>u?.V~XE"]Zh^Q0wgfwg=3$t=$rCV#ovGPxQˣ`{nꥳHw?^8_h@q87sy{qs؋*j8/~)Ӝ_g]xn9brAߎ~՛ep<Wƞl{ -. fjB KS7U]k
-Tc5!۹ǎi*
-e8B7V1n3 XN
- -<hFJ|M5z2x֬7VrN8Hz:tz~uÓ-֙Z@D` ܦc\Qц Xt-cH;>\
-R tAByHд d@ܲQT-xˌWJÊ,dfǦN|WMc='Lba+8؄"7bk[Y"6PQk@٢QZn᭕b9^H{.A]UҎa'J1]DŽndѶnE8kH殴=@p V(qZdj21C]?8|ٕx V#,NX썘:bMV'oTOݷ<z{$!4*a mt爃
-J#Ű%͇OٸA _U/v)(oIY>_ $*`ephU8C$;I j5=ΑkXiJWO0 !D 1p# oW 1J4v<װwȍ'ir7jq il 6)U^tB1ʈBpTUK+^Ay7
-vKFlp0@iͼAح`A}-A~o d ]>s6W`keu/!suyT ndu<.AxX
-S:TFIC<Vq C96
+xڥXnF}WC)4\./ySjq;">E"L.IEwnd[rAٹJ =SظNQFr30s>P1λ`ބC幉 N& ۇz4Z;9GQGʙ^8p&<{9ǧ|:<c'f8|; ]Ӑu.Yzl`Mi|pďI<$nѮ |Go!:Nc7˞ C7ޓ>*71ГƸa'yCc<p Fc堛йqT8_6gU
+6o{ s7Xur [>{ſ<ed32w-_!n.
+U %3l_W|yUwMG \7o_ 5_]N.W=-u<c$Q,wUY?reAknn3^@EDޛ\T(L)%d&P{`OT~dByoN$O'?kc\Zv͡MYH-SU߉.oii,P-=5O5@R&kf]}P0H798W![1.[ofǖ
+=/
+ڶtmKJ)7/ R4)eWUQbs7WQUb?$%_Q3Pp!/S}/{:'*Dn5GWpvD\b93KzMTmJG >()~d$,Ijj1@l6(2[@ nEd /mɆqw$ʌw[P q'n)IW^\7G៷_@!b76psQЁ%Szo#IK2endstream
endobj
-4341 0 obj <<
+4569 0 obj <<
/Type /Page
-/Contents 4342 0 R
-/Resources 4340 0 R
+/Contents 4570 0 R
+/Resources 4568 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4346 0 R
+/Parent 4562 0 R
>> endobj
-4343 0 obj <<
-/D [4341 0 R /XYZ 85.039 786.531 null]
+4571 0 obj <<
+/D [4569 0 R /XYZ 85.039 786.531 null]
>> endobj
542 0 obj <<
-/D [4341 0 R /XYZ 85.039 766.606 null]
+/D [4569 0 R /XYZ 85.039 766.606 null]
>> endobj
-4344 0 obj <<
-/D [4341 0 R /XYZ 85.039 746.277 null]
+4572 0 obj <<
+/D [4569 0 R /XYZ 85.039 746.277 null]
>> endobj
546 0 obj <<
-/D [4341 0 R /XYZ 85.039 326.801 null]
+/D [4569 0 R /XYZ 85.039 663.47 null]
>> endobj
-4345 0 obj <<
-/D [4341 0 R /XYZ 85.039 305.808 null]
+4573 0 obj <<
+/D [4569 0 R /XYZ 85.039 631.048 null]
>> endobj
-4340 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F72 3966 0 R /F18 3969 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R >>
-/XObject << /Im2 4150 0 R >>
+550 0 obj <<
+/D [4569 0 R /XYZ 85.039 215.178 null]
+>> endobj
+4574 0 obj <<
+/D [4569 0 R /XYZ 85.039 172.224 null]
+>> endobj
+4568 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4349 0 obj <<
-/Length 2794
+4577 0 obj <<
+/Length 2772
/Filter /FlateDecode
>>
stream
-xڥYKsHWTUD=q&ٍ5hXKR/>
-.ЁP3~X@08Xl/Oݦ/ @'Ս0 ְ) I+ Ku1lZݹV.'<{R[Cp_Y+Pzt+ߒVjP1h@+م!,9k[xpF2`nŘ8mhMe&j8dp~ꬪVj %"%O wC;&.5&Zg<!L\~s4(9Pm~W%Үٱ)mx)uϵ=כ2+}fڑoHai.|رs6(xQ<Z l?΍Hjk9O,V\E.(>\WY0[|cuwz 5{v~]RTy#
-߼lE'٭Sڣ(CPɶ3‰
-(ʏwhikR{{&
-]T[pjw ~[&acfwDÜ0[־Ln'VbM4
-O49O9%B$h TI^&5%8vqhDK>bbGPmŞ={8nqۇ뷷f|X2Q
-/ 8xTFM D{I>ԌcLCv%'uZ P&g3F`@ <Dca9&E8wB+sO14ëlW>{6 e3m\}%W݈'ޱ=AHiwhe^ L>Ԇ+I6"5pG@+{[%ǘsn#\!9\)q琬196
-^bj]h:l7sKoc`
-@P~jYY/13N) JVLr^gm]7c<+עOhSP`
-埽ZY\J7*uۨoe!p/{7nD^'Q4]̰Su#;!hշ
-xWz*Bl^'I%΋ k۾pGkτ9_dM@)ZTX!gf}b
-$N{Bˬ$rZ٘΄l 2~I
-}no$v c$Xl34X(oRF_cI⽭'i(a:c~-Qfɋ:!jqJ/}å2]#OPȜ4OS3kI`NQ8Wc1ch3G—DB& W?IĒIǎ&kNb~)[fg<"3C]
-ť@{VǛ9l/#jʼ9Bma&7^ὊI/)qAygmGfd+%]</ȰPHvK$gJxReڤhړ~0U} S/ʤJPM
+xڥYYs8~RUMq&XJ9[3@K
+EzH*N)e+[2q4Ѝ/4&Il\O'(]d9&O0D LHfٯ&(MdxI<$dyLk
+&d& XR%`d
+>oЦ\V d l;KxIOf
+MS9]\^›q v
+"
+SzN-w֧2G͇5H6.cԗ-1y&k+)Rx{Nf_;yr<Uڲ0'SCV&kꐹ$j1Ybfx</YI}㠊qt1O\ERxL\UV0
+yS r Oxz`sA# l)$ ihyQmVc&ͳp"+pxtp8ا؁]i9>]kPƔ0+9:k-SvO5>(yIBDϽ2_6Cup
+17g)[ӎ<K/s 4i;1#D&}̺![WPݦ>U;K[6mg<7i\fnuq?rMxs@sדG/˫<݈|:V P={@8p=G!ǧ݀ș d%  +*t0`
+oeu\+KJ_zGx.ҥ4MWC/1C,?rd=p5nN6j+6U|(S…1I?$&
+]j׏Ɵgv`:][t*XP~M*6XoXC׏[〆$ Snn# }OyCKJV9F\}V PP&qU9# {P827w7w%6-r Jz5 PRfd[!v# ;°l8`uiӾ;e
+bxls q}G[Io1?c Ƈ:aKltX_Xendstream
endobj
-4348 0 obj <<
+4576 0 obj <<
/Type /Page
-/Contents 4349 0 R
-/Resources 4347 0 R
+/Contents 4577 0 R
+/Resources 4575 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4346 0 R
+/Parent 4562 0 R
>> endobj
-4350 0 obj <<
-/D [4348 0 R /XYZ 85.039 786.531 null]
+4578 0 obj <<
+/D [4576 0 R /XYZ 85.039 786.531 null]
>> endobj
-550 0 obj <<
-/D [4348 0 R /XYZ 85.039 607.39 null]
+554 0 obj <<
+/D [4576 0 R /XYZ 85.039 766.606 null]
>> endobj
-4351 0 obj <<
-/D [4348 0 R /XYZ 85.039 576.773 null]
+4579 0 obj <<
+/D [4576 0 R /XYZ 85.039 746.277 null]
>> endobj
-554 0 obj <<
-/D [4348 0 R /XYZ 85.039 358.939 null]
+558 0 obj <<
+/D [4576 0 R /XYZ 85.039 291.565 null]
>> endobj
-4352 0 obj <<
-/D [4348 0 R /XYZ 85.039 337.742 null]
+4580 0 obj <<
+/D [4576 0 R /XYZ 85.039 257.022 null]
>> endobj
-4347 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R >>
+4575 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R >>
+/XObject << /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4355 0 obj <<
-/Length 3659
-/Filter /FlateDecode
->>
-stream
-xڥko8{~X2P+"}ki^Beɕfo^d[1$,?5K#?0,Ic?2j] ̼PB?#|3Yn>ݽ<_c</$n{%~ůo|Ի剛w_<p s}Gzϻ_.ލ\~5\䗋7Y:{v,.Qh_]^sWMb 448DeqB_}hU
-N[k<NLA Wè֘w [Y>";hW9%'c7j
-lma;3Y4pn|`#چʼnJ3xjOdx-H҈s'H;Eˑ3kvxF
- @󗀁[[d 6
-(qh4Qo2t;y"Z{*4}:zk|SI}@F>4QbȺ`"AHm#):; 9-&EY}; dH=KpAD- >s<~!̍Le{4{^p4@g[pj6a7F)kۃVlrp,0۷
-12z<tUy{ ?IN5-❆4g],nV DCt[>kGlۓ XWIU[SA:ceJbiUڈSଙ!A_n=8+R|84{_~grzT**m T,lǮNxJR|&>(`@S/59E :'_bm6D6_* N>I:s8$k|YYfO66ב}.3IPqd_OEBb۷kݧ$CԞ|3+JF͝mskD4uiLJ82[d
-SH3):I/R$Y䩵Yn{Rf 3OfAel 񫍿!tC^VB2xN2IVtk#~so!,ڛYCn`/@,W8V:OD-|Г5Zh}foYH@GUm $a Z3Ŭ&`
-SG"L mk)"z*ijX€We3bCpy;G6-J[Js rXxkG"ډZPБ<k=C18hgCUdGޡ, N Hyτq|3F.&7@
-{Е ;aٹXQq)TDfc!]"ualPVO'<D+L11&xFZil+7XAY.4@mCM%攂S&K0dhS"#_K|9u K9wW,[>wXWtg.^$;$ پ RWHN1p̘[]!`.F(ymmvwCCkMwR(n4hd+qeϚ_:/ylW ɔu;;H!㱄X_|Oa}>ztI=^tTOudFɅZ+_O?s,77_A D[V6競ANa;,k =ot]Reo laU(l*:‹YIW(\!QQ <އ ]Ql/ť'Sؓf(FV)Ǚ(%0h\+z(|±ыI
-̹tp b.u4;r{N臃 /r\)t{)ڲcݓsb3$
- @MO#dȌ-\kJ_^Ne/8r!!Y6-ѡkMLP\w0I, 5(UQCb&i<l'S:
-'ڳz'yzU0LST4
-ӡ<׸bR,=E`(…fXO11hG"4Reg@FHx0Dzdt0m
-DZ2
-ژD<7<`N₌ؙ!dۛauL@e90q6IJ<葦g:u-6U6\ڱElZbx=wBIj? -U<~q=eÿS `Oe
-2p'{r5VcMݰ1MNEu|_endstream
+4583 0 obj <<
+/Length 2808
+/Filter /FlateDecode
+>>
+stream
+xڽ]۸}q/Vԇ%Їl{m6iv)pw,Bdѕlw(Ѷ@qhdEpfS,(O"5+7l +n`,e=%YTA>{ tOio>?2_DQ|8Wޛwo{ݧyy_yW7})?|`_߽qj*{0[ (f0|MD~G2oo1xƻd1QgY$_ X9T Y$oJϯ%!vqŹ8Q%*#'~
+5 |k xfX1So*J^a󸆡&oB`+]3r~(Zyw~M#?L_tai.(ĉhzd
+G4fV,
+@U7e29z
+'|ńu1N@]7_D籱ltPTFOh߆(jl2gk><#s'm;xCGD ۆsHa&|ye$;n1>q%_W3b_K'$!
+0N#=9E9i o1:x\ԕNxykQ~ةz-s2 h'LJqhjL`̍H|@Lv?Yec ޚZm <?PWQ%G +)zC/ (A=fn(`)[{H)VDʖaHm d[P[nTGıV1an^%!s6b(>il9c"K5N*EBXN.E@E\:yi u 1Bc;! qo>ͻGν(P-Ӷea!LV%Oڗ|`
+㝰y&| si}$ _i
+GІuOd}43W'z 1S"as$7?u!\З):r0&QOh6BEiLC+F^)ݞY p&߰"w4pKƔJ$O[G;'
+lW@0f]eUJ~pSc86bW6
+@6 u,q+\kr<538ls`3mO"Jbmn +a.y;K6S
+f983 :gm8A6Ay6 p:=VOVsxR7rs[Z2ɤ0]>]w6 iAGMƋ͊7Ng[b_dp:4#|QhRž 5+҄Swv=Gaŕ8aR1ڬ0v\QCn#Y9S#P!Bmǀꇳ, *6ʖ8agTé\RǴS,%S?b#[qMѦGm8ٵ%~?!~^gWI89NOh
endobj
-4354 0 obj <<
+4582 0 obj <<
/Type /Page
-/Contents 4355 0 R
-/Resources 4353 0 R
+/Contents 4583 0 R
+/Resources 4581 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4346 0 R
+/Parent 4562 0 R
>> endobj
-4356 0 obj <<
-/D [4354 0 R /XYZ 85.039 786.531 null]
+4584 0 obj <<
+/D [4582 0 R /XYZ 85.039 786.531 null]
>> endobj
-558 0 obj <<
-/D [4354 0 R /XYZ 85.039 512.424 null]
+562 0 obj <<
+/D [4582 0 R /XYZ 85.039 489.606 null]
>> endobj
-4357 0 obj <<
-/D [4354 0 R /XYZ 85.039 493.552 null]
+4585 0 obj <<
+/D [4582 0 R /XYZ 85.039 447.259 null]
>> endobj
-562 0 obj <<
-/D [4354 0 R /XYZ 85.039 258.772 null]
+566 0 obj <<
+/D [4582 0 R /XYZ 85.039 217.996 null]
>> endobj
-4358 0 obj <<
-/D [4354 0 R /XYZ 85.039 238.182 null]
+4586 0 obj <<
+/D [4582 0 R /XYZ 85.039 181.129 null]
>> endobj
-4353 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F14 2895 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R >>
+4581 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4361 0 obj <<
-/Length 3165
+4589 0 obj <<
+/Length 3004
/Filter /FlateDecode
>>
stream
-xڽZ[o8~ϯ[eX/}Y4I v,03X( %70?~ύYn]t"yC;ZM"S&Kبb{MLIhb(t~w]b'*
-(=P/o>޽Ό14uTo` ^3:t50.t˄ۻOXp7P\s^]yۻ"g6U?6YM*&30F꛳۳4\f'<jD3$z23Qmܬ3lW۩N =F.x(
-GC\0i\Id@CtvryKD.Ps^6:3p::WBOXtD m+s8Lu_cx7QuZGwX
- <]T0<JG*F,nYcrdQ̏nC,Sdv4q܉wuD2=fD ffs!I;CO/<X}²_R:t ȸ8qιFťMC-^ءx)LҼP<n/k|]T_A t&L2v@U3ꨈA ?8"602ib4!j}( 7A2%Іint&L譸uIJEOO99Y&=_.ؗ%& n?nxk
-139
-kbS]C!,7mɔ,P>l9R[T+B~X+$blI4z8{8,76n&XaA'rf?;ӊec̰m̤wTbLڈ)G41]j- cbWo $vj0AQݷ
-ױtPJJjWIqbSNamDj
-.KVUqߑtɬ`'[@b5m(3K/r=rYcKܼ1#+"r ("QqRheo%:=pQnmͅ=jnf`?E$fR׺uQ%~6/((6ge> 3 D%}.`D#:v66 Mq ʲpM8$ɢ-o .bJ@lI&[z !(686@i4c߯Vܣ0Ł7ܘՄێQRYm2&_ ^sA ?
-=?3UxI{HҞUrnD67Y$ %䙠vNgƝ=AB6y=k:0~Fl4d\fް}8xB cPuf!Y>LΊIQ6Ⱑ6;''#*xPw]IE<5 yz.vBD=9 J571 ÔOdt^d|F-
-iۊ
-#)wB8_$
-R)yAlZK5~2ìcm&c 8<j${3L,dhWPdȿN/ł'μ}B-qFDQfk^sxP* ~0T*~m`50K9I,
-Ju^bsD(y8O:`oMJ|d*O' *d1K hjM^"W',C%+6=6ѓ#?]#YH+ 9
+xڥYYoH~,My[ x#zy$Z"B
+{﷮nREG]}UWW}UT3Y]/Hgq:P›ㅒ yKg{N:f]2_A"g9WOo^#9tK߹yy'ݒ;nޯoLx<#S?__/ޯ,㣣 @]7 MfP\EWˋ?Zx֔t: Ť􄘴v0&1]cۃlOxĺFr-n>F}Bf;kɺ5:ƛQ=q!+*^+f-i8q)Ns8[ӑ%
+噒
+OMO;0q+a,60XZ~0fI#zU|eb9yXSL Jw${D;]PbK*H$Vc*b\pk6P}~J|=LRr}tʫbUuLGw3Pr5B/p^ӡe@E9Y9~: !$NX#TBrd9ELOŦ^FK#iS{Qkd,=Xe/Qbȗ&Ʉ8/Yh8<I&r0 Cq<l{! 2TJ&vgWſ
+ۙu`,ڛ4T8y0ծ
+
+!xľ/EiZE޹`1,eu)Kki`k fN9 ٌu,AHq'[s"D~rVP2 3p,}i6\\ܛ6EW&
+#& BPg*FLkɨc~wʢN‘T.ڑu5ѭ89250N=xs83\[ܟzZ1R/림<%I {)6!MQ:ē!;CJqu@ڸ'h*%fh;RP~kqsr[>Eå-
+CFv}x؉CC{|++sXMeU?df=V^Bǜ0(
+_e2 )qE2ybFrvpH۲;&##]Z(N^0YJro-6g#+Dc+Ɓ&e+CFqYvdr2ĵmmZӷH!K$+N86ڠג7`
+-J ;Zrϴ$6@/gt8LT q\?scSWÓ ǎ<ؾCnb| bi)7%狦@s(8`U0P8.`^h%9iq$ɩڹ+m(H|ۗcEN|̚e̟Xn%a= wmpv&h@u0yG1[α)DǺz:1S|$F3ښ龜y}֑$Pkg܀
+b[[Ґꦑ:U6Dhz72a%旒&gǖi;nu +m<k,Ti<Ў'5=OonL ~G8]oI&-^ kY̦{ ) `: P$;
endobj
-4360 0 obj <<
+4588 0 obj <<
/Type /Page
-/Contents 4361 0 R
-/Resources 4359 0 R
+/Contents 4589 0 R
+/Resources 4587 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4346 0 R
+/Parent 4562 0 R
>> endobj
-4362 0 obj <<
-/D [4360 0 R /XYZ 85.039 786.531 null]
+4590 0 obj <<
+/D [4588 0 R /XYZ 85.039 786.531 null]
>> endobj
-566 0 obj <<
-/D [4360 0 R /XYZ 85.039 686.185 null]
+570 0 obj <<
+/D [4588 0 R /XYZ 85.039 419.173 null]
>> endobj
-4363 0 obj <<
-/D [4360 0 R /XYZ 85.039 663.47 null]
+4591 0 obj <<
+/D [4588 0 R /XYZ 85.039 386.752 null]
>> endobj
-4359 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+4587 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F41 2998 0 R /F58 3365 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4366 0 obj <<
-/Length 3229
+4595 0 obj <<
+/Length 3738
/Filter /FlateDecode
>>
stream
-xr]_%sJR%YM,;+maI( ~}IPc:.U nPM<Sw=O(p}&Wor=/&.{`'sc/\\Ӑ΋8q:38=aOs{_U;oOώ_Ou=玳x2G1g//?\tYp/d sMM>BsUO7o/}vObfus6DQQ. X
-8)L3"pD&8W'cr|K@GO CwVWh4OR°\<)*Y,9Dd]AvUdxMFR9P|z1-&RFV{Z
-IǤܾ,f&iFbm"bTi>-"-ery*B\Vk79{62*f9^m3 Fb!Cds]' |GT4߾/B^!B")jTj2 +w(3t)a a׺qT ³à;bx%齘Ɓ\..$ŦpMy 2\t`\ehvخ3\_+@bߒŴoUZZk7ԙѠ5a;<7ûFĄ4/ӱ-l`n,k`_iЗyZXA!s=>Nc{j: PLq$^WVV yDY2kh/~0Oh4*te?VjgZg#x:V&!<F\=/6
-_}8|^`q<<&!
-GA#{`q8gK4]dnkvɸDSGd:uv3UP uLmU_N)(v"7=."uᰠw‡}}?}/
-|3dz]+<O}3ݕ2n!ԗD0ݐ;wHΪ@;mq&:|;[Tǎ H ~#R&+!{{I"(Ło2FC¬yUJ 05@fm"`Cwkl[7-YvVypv Ò+%Nsw"+nk pD{; [ GaВ6X F%|,~XtDiE{Q|%+F!'F#_m|j辟D`}_am~Ead*xKf!xBS9 7A{N:t#>+ K|'lGS0 gܪ 6'Sp&<c4Sj{olg
-_D==E΃KF)3X̽aNZ`]I|}xn.:bOn\/]brG~<=2ra"NˊǒWY=r5g/9RTQ$l
-F 5(:l6DQd.$E{{ -)-NF;7j f`o ~Š
-+SVX:u*U꾂
-LB+x
-h=%=F@%T
-*@ c9R 3"AQ7؉axc7½ۋ.s-\(D
- gQUgLӕ=<7ͳ~zG6=h%^J=
-۩W!zy-֬1C"` 8PU$AS=E*HEďTK~뤚;h9]"|% 3S234q8?<TPO1ݮ<xCq^`Iendstream
+xڭr8-TU8xdmO03Z%V$QCRq_
+Fc5C gZԫА)\f}iLnVV2څ lZ)M=H$q
+'6HqMUH# fRo ƐފrgNW L1=EwnkZI|o<
+;9006&H]9(N#? @~9 CJws?=^Nu<Mљiy‰?Mr\5DnjM7#- M]l@C
+ ,w fCgS9n s*_y_a2qGFC_
+.Li߫bH.hĔ]D7_A^a>B$]Sn
+9[68xe!PW|"Ȗ=1?8C##Tc^HVkн`ۡs#
+dQlCH6m$5,M܆ (RQ<ȾlHh1G^d`%>sݗ+?L_O967'\Q$
+CT~C AThUQ&7(mb!1\74ЂY~B(7=Ki il@uQ4{̹bFӘ*ס0M(ZT&&^ivׇJB')}+2sx@mƻpp'>KI<V,a ⛵j&|6Q,>
+as[:VXhIEhns|[̬~-0{ H,ATEضܒv'>``
+ 4R<kG'N>o#i
+faz|5GqsAceqv/s f{}_ڲ/ 2$!85CUG{ !~lA;41$eX%P/S<#"bIh{[Ϛ!Q7xK_'˲f)G
+ y(HI?틵4KJFHؔŋ9>ΐW 0}
+NB_6߫M <"0Eemuc:p{Ƒ%JrL ޑ qdI*yhI]0(p:|IK2%KmLT_I< .屴$ EETU
+aźVؑ ۇq H
+Q; 8hW<8_q#|KՔq<2
+)Zf t/DpIE_4ܾlkgPpACi6d %^x@ǪxqWkWFyl涖݈Hq3TRhs̙_O AoYwm^au{D7zS̻ -
+ ^ڵ#%(.=8/AnxoۑV]щgsrW~
+ܨGY̠]`c$ nyKw][!Dp҄@N3^\!k'ptcB~ZÎ,_7h,˳숑%U֗pdR
+
endobj
-4365 0 obj <<
+4594 0 obj <<
/Type /Page
-/Contents 4366 0 R
-/Resources 4364 0 R
+/Contents 4595 0 R
+/Resources 4593 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4346 0 R
+/Parent 4600 0 R
+/Annots [ 4599 0 R ]
>> endobj
-4367 0 obj <<
-/D [4365 0 R /XYZ 85.039 786.531 null]
+4599 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [226.407 384.444 329.642 396.133]
+/Subtype /Link
+/A << /S /GoTo /D (browsing1) >>
>> endobj
-4368 0 obj <<
-/D [4365 0 R /XYZ 85.039 697.528 null]
+4596 0 obj <<
+/D [4594 0 R /XYZ 85.039 786.531 null]
>> endobj
-4369 0 obj <<
-/D [4365 0 R /XYZ 282.773 703.501 null]
+574 0 obj <<
+/D [4594 0 R /XYZ 85.039 766.606 null]
>> endobj
-4370 0 obj <<
-/D [4365 0 R /XYZ 85.039 384.975 null]
+4597 0 obj <<
+/D [4594 0 R /XYZ 85.039 746.277 null]
>> endobj
-4371 0 obj <<
-/D [4365 0 R /XYZ 282.773 390.948 null]
+578 0 obj <<
+/D [4594 0 R /XYZ 85.039 500.273 null]
>> endobj
-4364 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F11 2898 0 R >>
+4598 0 obj <<
+/D [4594 0 R /XYZ 85.039 466.735 null]
+>> endobj
+4593 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4374 0 obj <<
-/Length 2440
+4604 0 obj <<
+/Length 2536
/Filter /FlateDecode
>>
stream
-x\[WH~WQ+.d83=ya bXoUWKP 6C|8I}-}U]Utu<aP:AJpzun3-t=_aU_vF^ԹM.G;'8K'p й2Sj?];_<t^P+>O*я|J?/Gg!{ҕ@)s^g/ˑ((L<O.~+G:١^,zE܀tAăDc:Qm31!]BW~ëV-JF_M=$
--`t5#7`J@7cL6 c]'sU!.WC&UWzlJI(ɴB#݀[mUh-5x^.7zꓦ \m
-)AEk+"H..-c(poApj2`r"ǠړOmIw
-bN&Q!
-I!ˈ|O2qq{e6X+[%cF:r9!r?gXy)HĆ)C~k(k-
-A2'|Agwϐ^c*[BLW[2 1&ssf6ŷI6OOif4
+xZ[o~Rr2W^ozQ؁@۲-DI EJ$,0rs$(wB"T8呌`ݑ'I4'WGo޺4RRk>H_?^$Ƙ('IDOqox%>u|}1=0y|}k|.\Lg?~=:7^M=y m)TQD#po5/RHևeE3{ۙd(Qk'@)e¶IIA HopÓZZ^ ̥E~stYDT{ZѮ64rQ#0yT\2K'KYl H;In>gv𴞁d[
+GЙ`Xp(l&"@#‚^8MoXq^kc~vd^,A)a̭|ӇK~|-[ cQ.<c,W,x ע'YiQLtY"p(ԟT!RH}Yޓ<U B%^M@vp(Evg\,3Q!JOs8v'!&' KZ
+IMrr4]Ca|aھ+3< -[z/(4= a9 S֠R)$d; /nP g%5apZ)
+C`i.\{kT 8aC8pZ0 ^VYϩ0J:`Lhe[N{]`q.0$.?dV /?!!.jXZFo7;T?ه\zUVvҏ b| q[~JEnx `J~|V|`iyoV[pνfݙtoR1#) Ĥ!..'0dǫ'%ML' aQ aHTF+b7(*R"jPTg&:bMe1
+6j[D٧^pVQX ßNmb;f |U<al~ٖ1c*Ƃ2!Z B78dpbڴpNM;Ãzy% f]q65f-\gvyՑvH^uWjG.+:ښh;: _pGCBm;b;/D!o06)Nb/S3X .#O-~/Qbq1?qdU[f=AXxJWx>]_u9#8.Qg+J[!}_e8(*lغ1P%_}C̢aH$) 7°n;NY*!kW~(g$OBUj9A%5|U\pY#_Wmc=җ ˒Q$e$"SVSkgղĢ5~FEV$+xZW+՟%~n7aKjzS1 m/Kd׎C&T#oOw*2=x~k@4."N`whO
+B jU%}9VɎWi!ĠXl5D˳k.:nv^nC}EC){ŇKYK _n>wPKO(]NH kO(N`yu4 3_z8X?a'SAkv V
+T^,:ϺL_4`YH^J^Yӗ`Sao!PD䰡4u}*"/l#WH<d ^v^A4Ҋ5 'rgjKo0M
+%diUGbP?y#{VɎW#iцBV
+/y}pՊnCnih9}:2Q][ğ>W6Hd(ws^Gp L
+]=?B Eai;t@72endstream
endobj
-4373 0 obj <<
+4603 0 obj <<
/Type /Page
-/Contents 4374 0 R
-/Resources 4372 0 R
+/Contents 4604 0 R
+/Resources 4602 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4346 0 R
+/Parent 4600 0 R
>> endobj
-4375 0 obj <<
-/D [4373 0 R /XYZ 85.039 786.531 null]
+4592 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 582
+/Height 379
+/BitsPerComponent 8
+/ColorSpace /DeviceRGB
+/Length 16215
+/Filter /FlateDecode
+>>
+stream
+x{\F+Q[)%Yǰ6
+9.+9%"J
+ɖ|vi}XZNYB}ܿSy=13s]׼z_
+Jy;zv4b9YkF{ܹFs9l]mITVˤ@5~9sd ̝1FotgFsؿ>:ш#$d4RʣAgq1W5i-..9uԎ;,[.7\vm $2[OGS؜5/_O7`:5&M{<8vXi:tpSPMcfNdɒs
+}Ϟ=ˢi󪣌h@<<߯7c---9.KNNf)mŊq@#%''v`W]4hu޼yYYYtFwt53t}}[lR7Ě-00p{Ja?{O-J :jܹa41F1|ȑC4hlyfff =`4G&L0ڷ_
+W_}EF
+]lTgh*FT`4/0h
+FрƼvWoghٲeϞ=a4MFKMM7oOGFF|Νh@<F9I_e^3g655Dh4J8qqq6ˌE  s+++KKKMF(ܾ|2FQ-T.^F0MYYY2 ڵܫ6lfٳgƍ2oyeOsNL<Y-,,a4f,'N5p9w̜5k`41ڶmwdƌr:Nvsu֯F`4 h0h
+4!#S1g
+c4Bkl&<bX{d
+4&mllT/q=
+4!#SQc%ST Lո}W\Plذ}Ź-Ԃz
+
+b)hbX{d 4"::z* 9ku=ڣ 41=Z#ФM kl&<¯=ڣ 4=r 4Gav=r 4~Q/PqQi}Q[}S dsjO&ڣ 4=\>\4tUȵGhX{d7K-Є_{C&ϟO烦M6lpĉΝ;ZUa[ѦL"f@rQJ 'R1ަM?EQĄɓ'Zi۶hqss{ĈJN*KHNN3z̙jWy׮]?s%C-}B"ЀаHo޼L}߻w򇢒@\\E9s .^ZKS/I1̌ѣGZw*۩GA
+
+^vuYnҞ7o:::yaZL9sPToذA:N
+u˗Zߊ
+oݺu\,--iXݻ}gO80
+a
+abmmMc"o}޽{SO>0
+f͚i`ddD}oҤ ~:#
+c4)++;s
+/
+ P/^>|8s޽{K FC6
+4&ԺLCB
+fe\;C^Jdii)]?5k^|IW{夤 ᖖ{eHXXiݓz:|p H.&ONָrʭ[>}@e 4w9rb؜p}}}_tѣF;SȪ^kս3G+Jmʔ)W2::uDODNOOgNlժ͖퉷oߦY[[7he߾}تӀM1YyF`TH*6Pj?̺[xFZuwزe =<;;[]F
+ʎn،&'0
+ pRR{w)
+<
+`(
+^za(
+
+`cc>gϞT={ܡ"##I_go +++KLLdujժ?j@RդI>X_o{x}ѰT)а}Q ttt tڵ&&&o/--_>sںL?`aa?@
+zk7o"FGߟ}%u*x.$$$Px
+ n ?͛7们,???1GKxÙ---[ԦO>iҤ+Wܺuӧ\
+H Q<zC
+hݺFkذ*^͛h"ƒ]uEkzza駟 h-h*:bcc vF]u+vչuڴicybBzA-[lQ233ȑ#a4i\l]unv|:$$$!!AH/´\h5o<;zHMFî:vk Ծ/0J>Z{Zx- FTaWjUr B5# r Ba4DbFpN!h(>/ںlْyqqqwBw0hJm;66VHnè`4
+
+hѢr疓#@aB/,,L#
+hh9 0Wa ;o M-&Ç( [ުWLpQד6mڴ=g.Z++h0Z yժU+ۇnd~|U->}:#-[W[Hڔ$9Qܾ}o9gUٕfʊIJbt[ΊL׬Y-LUj%Kf.^l< FѰ]Zg5]4OL\/9/HS:Ze@F4hPbУhgfVS^&͟?.&prM Fî:vՕ{Vh4'U!C0+`Cٵ_?W>Gt[0MawN:tL:\""oCeԄ]vWLlذ"1_{ItW]5KvտXr2F2Co UT5~n#ݖSRݻwCGh:&}j 䮺DZ]u9;EZgW쪫}ZUdW rfW}ٚ>oh -р޴DwՅo9/+WhjUr TLcW]
+ˮӧOWIo޼<xJ[>a„#G
+PKzjx`HOOOFC˱H ])pGL5kp:>>~׮]U333ɓ'hm9h:ʴ\<###++jnnN-W#hdUmӦMtbFC˱H"]yƓzD-M-g
+4Ҫn9 Uh2*`ʔ)Ѩ/X{
+hР] W$r@#U lUhBG:vՕ jUgb֬YU;kO-g 4"Jlܸy=`Q U:[ /+xm9@RaQ U:%9m9@~ghj)а(L]uKqW]-e/+xm
+4i2foo>-[ֵkW=@î:v%2G<\kϟ?.<x
+ ;8wk]ŰȳdW-Ǯ:
+9
+endobj
+4605 0 obj <<
+/D [4603 0 R /XYZ 85.039 786.531 null]
>> endobj
-4376 0 obj <<
-/D [4373 0 R /XYZ 85.039 763.817 null]
+4601 0 obj <<
+/D [4603 0 R /XYZ 85.039 763.817 null]
>> endobj
-4377 0 obj <<
-/D [4373 0 R /XYZ 282.773 769.79 null]
+4606 0 obj <<
+/D [4603 0 R /XYZ 85.039 763.817 null]
>> endobj
-4378 0 obj <<
-/D [4373 0 R /XYZ 85.039 485.925 null]
+4607 0 obj <<
+/D [4603 0 R /XYZ 271.155 445.624 null]
>> endobj
-4379 0 obj <<
-/D [4373 0 R /XYZ 282.773 491.899 null]
+4608 0 obj <<
+/D [4603 0 R /XYZ 85.039 313.054 null]
>> endobj
-4380 0 obj <<
-/D [4373 0 R /XYZ 85.039 209.499 null]
+4609 0 obj <<
+/D [4603 0 R /XYZ 282.773 319.028 null]
>> endobj
-4381 0 obj <<
-/D [4373 0 R /XYZ 85.039 182.401 null]
+4602 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R /F38 3001 0 R >>
+/XObject << /Im5 4592 0 R >>
+/ProcSet [ /PDF /Text /ImageC ]
>> endobj
-4382 0 obj <<
-/D [4373 0 R /XYZ 85.039 155.303 null]
+4612 0 obj <<
+/Length 4813
+/Filter /FlateDecode
+>>
+stream
+x[w۸)(T,qoΥmv}h J[JrwD x'mϞx?VS*J͚.*f.ͅ
+%")W*f,]eW~3io/W~o߼Ro^_{n՗7~7˿]uO.M-\.t,ÅLQY/^)5ʴE՚S7jMUUԶqnpV\ 8ݥnwn/ܳczi}tg|]o|:]V}Bڗzjr~g3{Z+j\j
+=".J(l)orSjL->7*}a0UT7|s
+lXhLXSU NJ2ß0X턷tm#.K׺Pp]2܂Al?`k|3N(nd/|pcϖ &
+*6EelMA^iZz|dZ6۫U ʃ\L= к+Lc
+z[LWg-:f%]цK],hiMg,|EO}IUIW' "ЄYĒxOc̒UZ2đg/d-L+B,dPuqY UIT&YbµN+t?A)LihMӠ>@l &tvX.lcҠƫ R]l@!VU:m@DC"BBW5"`g C 龮 DC6|ѽz417,pZ8ߘ,D㓌PyZ$3
+=zE$"L7aGz/S7*k-_4݀+$|ŘQI[<-uӚEB]Fdkآe _5WEOk;^ }!;睢˪l}{z8&>
+!~C3OfCq^hM|oGWd[u2y,Vn9YȻϢ]aA5?SO~vI
+<|r>FltJd
+Krx N~G1 ?a? ”;խ?bg
+ _F+W~v2_laXyx^.14^0(lIgOt8[a*x?#>)2 p]Uc6+NѵSb% 
+q
+m
+h1H$jV>tF1ۀYUⓣyy7Hlapk'Ux\
+=^!oGZ~?*j<+Gͅ6:?$ !<ƞ;wKS|f+^tMkA|p]a [] {NGx`*рaXu#aUCT̯*SV36ES"16OYHϧ2$ʷz$ݱ{v6[?""16zaptQ!?톝ӆy-'OQF}g+\@V4x|, ]k;^E,Ҭ /:f_(29i4b^Ͳܣ>CXxò:+{:K7>caymwp鳚AY7i5-{h!L4VbX"9LRhYPh%
+*V8oB$ZHrM+DHV7В
+-ZxThB
+oZ%G
+-/(Ri_Th|4Z"ABkJWhI`FI
+As9_%J
+-4( $K[%[<h]6Em=~L(Bhe'2Z(>dd|6BIx9 u@$ abX f1ICrUTJDG+ SP_1feLY۔/cMBU2|_ӹGۃg4%䑍g{|y}0 _5QPW>T2K&0vwR)(AQ-5CG8O/'yKu4!ka `-|@[nUe@ P%8OVH950-a溴iİDa1k11 \Y cW|'r56w#RiG|Dʗ қ "|ߓ47%D] /-1ߗ
+j;He:'5ZAq4N?*~Ss|Cr2Vqn*u+λŹ"9uO$ZcqaLN&ޔ(B?>.)Ueg(;X
+;WcAkrF{q"z}L`b-ppM<! [C. !n
+je kҽEblvvgW&! ˾#n_|>`awN^ [BD 5ԏN# pWxA<~ qC?3 2ȥM
+R"X^reU"k_E* EE /RԤ\_#E 5ި_T԰|I:*G+jRiE)jx ШaAIQ3s5"^QCE WH`FE JAX%E 5)訢5QQòoK&%E 5|S29EgT԰ᛓ)jD@IQÃExsfWQ ejŧ6~MLzbX"0IrTJD Sp]_}+٬b->kZ.loZ.ק_Li_LYfa:͖i6Giv~OH@4ivg!f!)N i
+endobj
+4611 0 obj <<
+/Type /Page
+/Contents 4612 0 R
+/Resources 4610 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4600 0 R
>> endobj
-4372 0 obj <<
-/Font << /F64 3112 0 R /F56 2890 0 R /F15 2876 0 R >>
+4613 0 obj <<
+/D [4611 0 R /XYZ 85.039 786.531 null]
+>> endobj
+4614 0 obj <<
+/D [4611 0 R /XYZ 85.039 698.134 null]
+>> endobj
+4615 0 obj <<
+/D [4611 0 R /XYZ 282.773 704.107 null]
+>> endobj
+4616 0 obj <<
+/D [4611 0 R /XYZ 85.039 459.425 null]
+>> endobj
+4617 0 obj <<
+/D [4611 0 R /XYZ 282.773 465.398 null]
+>> endobj
+4618 0 obj <<
+/D [4611 0 R /XYZ 85.039 215.867 null]
+>> endobj
+4619 0 obj <<
+/D [4611 0 R /XYZ 282.773 221.841 null]
+>> endobj
+4610 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4385 0 obj <<
-/Length 1811
+4622 0 obj <<
+/Length 2746
/Filter /FlateDecode
>>
stream
-xڥXo6_ae20Hдi IE1}m*$7l'a(PwG, #$LU<\VhλA,P$E|D(̣|8_|9xR*
->5_Qlx(|X tT+ٗ!:y')d&S4Ö
-I [ ]ayQ!5嶆7|UݘfzÔr[>t0/Ĉ
-J/נnLnB4Ę<})[SEY
-KC@J"-+X7C+Ռ@ii0R@(C:#c!Rpnj 0<x`e/Cp0?:_͠ L Ra
-#mvgB:<{xxPb{B]ˌsFq
-55F4ڙ҉2JN#(I+__R.G=˅,o1xW1RIHoF/i&3 AH 
+xڥYKsFWrYj
+g&maM( aYxnn~)NfaA>{ڸud{_>~/Rpiy{#~~g}02#|_ń/<w݇?~6>:Znϛfk8/7l
+ѱc仺yͭczƳ.i)Vg\Ma|AMq':%5m E
+9O%AgqvMe*+ #_XؽI(ljj}=? Gï
+_K%^m{ r0v"nd|E 0“rϛX~l@ 2Ashq:K
+$gRƒVӐ"m5qR#y |O\ Jy:䚴 o]r
+=Nb՜â{:CxOÁ~X*o
+፩o?O>&o r(H O5JRb|"ͥ*VnnHT#7G+qebwQ?OsϔKΑ
+-e/ n]RJU;p}g\bau guAS m5Iml) Sx&-6ONB%{F-llauo$Ėd\wS{L֟yh̉SWqvϤ @U.R~2X½6
+PEHR1{V|9It8P.'N5Hs}q#qO鴱G ?+/g V,nPy[|`rX(=q@!Qr1hob
+T24.&&ua?Ì˗b__G!?&RAf$;?)opendstream
endobj
-4384 0 obj <<
+4621 0 obj <<
/Type /Page
-/Contents 4385 0 R
-/Resources 4383 0 R
+/Contents 4622 0 R
+/Resources 4620 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4390 0 R
+/Parent 4600 0 R
>> endobj
-4386 0 obj <<
-/D [4384 0 R /XYZ 85.039 786.531 null]
+4623 0 obj <<
+/D [4621 0 R /XYZ 85.039 786.531 null]
>> endobj
-570 0 obj <<
-/D [4384 0 R /XYZ 85.039 766.606 null]
+4624 0 obj <<
+/D [4621 0 R /XYZ 85.039 750.537 null]
>> endobj
-4387 0 obj <<
-/D [4384 0 R /XYZ 85.039 744.844 null]
+4625 0 obj <<
+/D [4621 0 R /XYZ 85.039 709.89 null]
>> endobj
-574 0 obj <<
-/D [4384 0 R /XYZ 85.039 686.81 null]
+4626 0 obj <<
+/D [4621 0 R /XYZ 85.039 669.242 null]
>> endobj
-4388 0 obj <<
-/D [4384 0 R /XYZ 85.039 651.666 null]
+582 0 obj <<
+/D [4621 0 R /XYZ 85.039 598.606 null]
>> endobj
-578 0 obj <<
-/D [4384 0 R /XYZ 85.039 500.506 null]
+4627 0 obj <<
+/D [4621 0 R /XYZ 85.039 558.442 null]
>> endobj
-4389 0 obj <<
-/D [4384 0 R /XYZ 85.039 468.293 null]
+586 0 obj <<
+/D [4621 0 R /XYZ 85.039 486.859 null]
>> endobj
-4383 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+4628 0 obj <<
+/D [4621 0 R /XYZ 85.039 440.49 null]
+>> endobj
+590 0 obj <<
+/D [4621 0 R /XYZ 85.039 287.006 null]
+>> endobj
+4629 0 obj <<
+/D [4621 0 R /XYZ 85.039 252.866 null]
+>> endobj
+594 0 obj <<
+/D [4621 0 R /XYZ 85.039 170.059 null]
+>> endobj
+4630 0 obj <<
+/D [4621 0 R /XYZ 85.039 135.313 null]
+>> endobj
+4620 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4393 0 obj <<
-/Length 3019
+4633 0 obj <<
+/Length 583
/Filter /FlateDecode
>>
stream
-xڥZKsFWrB ^[;^oI.9$(a 
-Ŝ\,}n;Kf͙@`rX׺¼<6 N֚w,2R%d3r
-+aLӶoKr2=3';Ɖdn#
-o+3犯(ZYJ*d`Z=c>WL (6C7UXM̬G
-Ɛ+!pؗ-2H@|
-?(C(vlnDsQbqM鮾27L vz鍞bIޤ)uz)D0[ǘn{ph-{ZRx"ZYtxS1E8xVIk Tnjc+rμ߫-+,冼TG!1]u/ \Z>Y@^
-=bvqWc܂<2XvuO
-nJ$3Ƒyw6t'Q}6I&ġa@(M5j#
-DI0|zEP= d c7// y_9$lNnuN(t8s#'iZYV[m|)ӯ5m*vݑ-]J~wrH15L|WuC omzp?Cbd~ӿ;B-] t7_JGL;i$&^h@YoW,x&40+[}u{$*q"tFK{4ܓ꿛i/,7Q6F02s;uFpyZr+Gԧ!w.jW<M"GL.'s3e|ַ8.Al+ ~bw
-@.!vh}y!&Ǎ}I"P4:(,gbA2R^.=o]Yq`\& '[mF8J_XKx 8beu,YTn!d6!,U  Q.2뉜O]qP|`gΌǠM1҅ľPp營iNQASXݝ_DE 3Z&=ҸK^Kd܊n-aLQ^6@޼d~x:qAbF(M9j7Ů,z\bX]2FNކW6$Uv0,c.Ѡv:b)ȕ&}WO“2տSGg~eǹɬ''9ዿ7FF
-}%MHbNC\LH9<>4l^0O@1Z湑ɘ7>\i$H~Dolٳٚݥ" ?8
-zК,ьf-}$iwFaS JiVn]9cZ/Bҫri(R\-8\o7|):]xO.pͭDF\P*@7a̅^{C80:1-|<sH3ɷ9CoI{/#n@ V0>T2sq- xJRˌ
-&>_jqNUdOTf1l FQƞvkҮ]$Eq_bR5anh1L[}kAڨ|A7Yl}`76u'3j4*Xx4!CJc6F× iږacVbiq D \1|B˵<DkRӋ?s\g.C0~]c{y8hPK(n݌ ^>}5&x=RjWgRvr! bu|IngG-wyG0p86INH]9 4m \TZT"q1^QEyu?
+xڥT[o0~ϯ׎m<M@SiBH!BqN2n{ʹ_Ȃp b42$0-YlNV:ӋϺCg!Ir/ &'zA`Zw}گOg:c<fV|ECoR3:>у3[ )ؿWNÙ 9̙CuL+Y3u5Чf]B$gƨHj:*hT).IdEpf!bg 똳B;
+Ik$
+MQW:2_.X)|N1? ʰѾ| c4LyaDRDendstream
endobj
-4392 0 obj <<
+4632 0 obj <<
/Type /Page
-/Contents 4393 0 R
-/Resources 4391 0 R
+/Contents 4633 0 R
+/Resources 4631 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4390 0 R
+/Parent 4600 0 R
>> endobj
-4394 0 obj <<
-/D [4392 0 R /XYZ 85.039 786.531 null]
+4634 0 obj <<
+/D [4632 0 R /XYZ 85.039 786.531 null]
>> endobj
-582 0 obj <<
-/D [4392 0 R /XYZ 85.039 766.606 null]
+4631 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-2957 0 obj <<
-/D [4392 0 R /XYZ 85.039 676.205 null]
+4637 0 obj <<
+/Length 2730
+/Filter /FlateDecode
+>>
+stream
+xڥnF]_G@xm(,$#<pHr8!YR]kßruIZ9ys;J  k7Ec3AwW |/󰵄D@$C񇫔Zy;ZG{R~ۮvM6T0m~Vn6dgχ0Qsr[.`^:R?]ҫC/ c>kVAnWju1{z^}ͳCϫ v
+%h^x3Y}X0a <:tSEr'>4h낁6$Rԕ\Vɮ*I|}Hp=CID-3 8 Oc\~_u%_VvcJ0E,~T6|
+L9=?efn!LJQURۈ7,º=4D [J<
+(~=&3}OA\lZfIP΋&48Ӆ2{rpʧj`~ul@`@[f4,00ń;RaQXO*X\TL 0S^S&?
+iΡj[)%ZDȅSyQl3ח'/y]bf |%0@pFwTI<J-T#{{X*.m$`?,d%ǩ,fď^ꥠ%u?J*jY
+/Dq:b#Mfky@
+$rn a
+Rq5з2!Kݶ,^ FPMʣK㸁H&n^Ot4<|`:P)@2w}t>T4ő5X$k/xgQoT3bL<m-,(^\rA):\GlfQ0~aJlamHDwMݯ%{
+IL~W AENb]/P&"pyKKY1J9*▂_d[XjlA/j! K/jSa3
+J/jWmrƊ,i%bCBLF_$?้aKV^ 3S0HnVIa-gbV:DY\qF9z BN0: 1T6l&V:3r7񠣹glP?{U~}z27U6](]N_z[_wx_o$sQk J\[}ؓ \CYɫ%Ϝ0usBg"QGn(ג ԬL4R
+@wBQ(E.RKA] g%{l ,/J7rj*҅CIsyr=u
+-Ihef/~/|rzgQ.g*]1~mʾNOQ<>8Iߌ 3ȫ!A@H 9P".qzI(H 5K$)D q27p/`WM)T
+endobj
+4636 0 obj <<
+/Type /Page
+/Contents 4637 0 R
+/Resources 4635 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4600 0 R
>> endobj
-586 0 obj <<
-/D [4392 0 R /XYZ 85.039 329.547 null]
+4638 0 obj <<
+/D [4636 0 R /XYZ 85.039 786.531 null]
>> endobj
-4395 0 obj <<
-/D [4392 0 R /XYZ 85.039 307.786 null]
+598 0 obj <<
+/D [4636 0 R /XYZ 85.039 766.606 null]
>> endobj
-4391 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R >>
-/XObject << /Im1 3957 0 R >>
+3060 0 obj <<
+/D [4636 0 R /XYZ 85.039 662.656 null]
+>> endobj
+602 0 obj <<
+/D [4636 0 R /XYZ 85.039 301.388 null]
+>> endobj
+4639 0 obj <<
+/D [4636 0 R /XYZ 85.039 266.077 null]
+>> endobj
+606 0 obj <<
+/D [4636 0 R /XYZ 85.039 210.165 null]
+>> endobj
+4640 0 obj <<
+/D [4636 0 R /XYZ 85.039 173.298 null]
+>> endobj
+4635 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4398 0 obj <<
-/Length 3746
-/Filter /FlateDecode
->>
-stream
-xڭZmo6_aZ-t$&m):7/$%rD9Ùgg$t I䆁?[mzuk
-o&]/
-՛wzH__|""z.'w܇$p?s-@t|4@~xȴկ{ s4s4md wyx}rƣ&"-M9E2V=›PO] +QӕH}!M._}Uow-Gz ȣ.B*<974X@P<# ?_f0aNuJ=m&/D;EO٩E#8eMƭKO/
-dPB1HΦĿu@P|!tTɡoTgWc}wbxny#)Z=M#o
-C\3Ee>0QeAf+tJZ
-é%],FNbh39N[5Y})<cZ(u88o!yy۝9>v{y5aCGр2]\uT#~TMhy+=q^*)J2I/D<_ !ȟ8yIvq#i"\ߏ~$8x:4UVj!3n;Q+2z?7G{ ?˹N<RI\slyN;
-bB ) ("%|paS7w>[ׇ'nilDb[3Öp¥F2jevqO60L[vĉ0)~4mp@&N:2'6\s6GuW䎖(q{ۘ3OoC ⼂Du
-XؗY'
-?!΢Z"N̽Fa"F
-0tM2)<XV(!@xgkqN_̏#Pǁo=vw!44/H^P]Vz2:Hg5!9ť\VMJbSĐ`Q6iL-U6:6 ;Ojmg&܀@^ "F3_y^ҹ-O&anj^7t(
-,miQhR}<Ǻ#
-k9a1Z$`bpo0:L+Ed
-ҊO:XLZge<0XC#14 7Q7nA13TY$q?'Ys⮬`d m~I2C] "OVoMa75(i]u@ˎ o Zݦd̿3xr}F,{[)@ RVPx=ڠԴ]<z)P_xVbC(óqge|>r7LX Jk:0ldu\"ަjڃ KH8n{T*-LGC/rȸK?X>S;7uU t:
-P8egǔ5Ɔ>\
-P h% 0N\b p<iq:Ք{%m;2w[jy ~mChlI<Z߉H٣)ePKkΖ,3
-OhcR$΍wH9O϶Xo`tK8b0Cc̝bԵ-*3)=K^Sozt:^tFh}|˒P7VMj&>N\Co
-%ڵ%/LF׊b1k!pp+oi=QAlds%K; k6 {ּ~n͉@nF"ïU`W Ŗ0 {]{sºsop_!*!\ <;!Cii>[UTܨ4..&~<TCa68` :,}Ǜm} P./,H%Z{G
+4643 0 obj <<
+/Length 3266
+/Filter /FlateDecode
+>>
+stream
+xڥZ[o~ϯ0ZIu߲&m\
+RHͻ՛t~գ]Ho|]}zп^fY\G_V8{~/?^0+o}苽ܼ^=~cǕ9Iro ǫWExvE]ʼnXw}u]ϚJr?T*aH% #_"K?3lE=_GW5^?a ,546o{%5;*e#أeVǦ+h6{4
+Pъ{đvG :6{'v ^j :^ q} Vܖ`S2jr}+M͚7Q0-7~t}W=N{ֺ9ZQAM)JC~9sđXqfgNro_3G$wNۖ6M{ZtrëE R9 neᢴ+ 5LeZC5 OP}۞Dea5 ey3N
+b6%ќ9g);~di2 nx")=TxHRKY %K!L}wH|ia
+dd|(M9\ZF%.*G<}2Ԗ5$8+#& s~ij^SH 9(CǬ7QOv ԏW~:f˜QŘ5.(ˠwһ|hF<õ
+zY!P%jzZޞOš&E @O!%;x5/fd]7g.#7 X̣"\8-vGWB,2.0Lu˫i> #ρ}aWE,;`LmK>  4h lDO
+2cJ%^Gv|}gNJ: '^edKwLl1A:1RT;ݒOzN-3dϝip1G-P{!I,i;sޞ{,&6ۖS_$tmP 쪁 Yqje"p JȻkzLxJϨ"@$2{afxݠ<l" 9q RM2
+܏\vvu{̰Ā\b!6_0HkpkdH'(Ȳiڑ'Z)L*́)3.aB?s(l_GlK9 :@"UOLf~PAcB6&4_ǎAT}!L B9`,&׀};=X|󫞇h5+cH
+N;l
+nÆ|aKkR#7Ar!WsA
+;T=pxlZb15&F~3=k>f{1ⶦǦg臬C5lcuOER8|yf07hC}3CRl809Wr6t<(и5ME]L=hc6cZ tz53(֙N~<}p
+8Zͬpͬ!9㮃E_TP!"PyB!N F [Hh
+iצ6ls|1̆ߓ仟zzom<҅<%oȺz|e/LZhz$7dA&h}?5mpħBX@p S@Ʉ/Y|e(Iny('iEbWؔbLÖ&8/NLhغ`hU78Wcq 4L3I"?4{H@
+$8Mrq}ZBUi</\zJq*QG2TphBC\ q"zHSגlVWfdTѼĻ0?QZY<Pu*+o@i^CM6
+jC}ďwz&XeimTS
+%ኛΟ׺ifNg@1bYck!oiq Y (".'h*
endobj
-4397 0 obj <<
+4642 0 obj <<
/Type /Page
-/Contents 4398 0 R
-/Resources 4396 0 R
+/Contents 4643 0 R
+/Resources 4641 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4390 0 R
+/Parent 4646 0 R
>> endobj
-4399 0 obj <<
-/D [4397 0 R /XYZ 85.039 786.531 null]
+4644 0 obj <<
+/D [4642 0 R /XYZ 85.039 786.531 null]
>> endobj
-590 0 obj <<
-/D [4397 0 R /XYZ 85.039 134.944 null]
+610 0 obj <<
+/D [4642 0 R /XYZ 85.039 575.671 null]
>> endobj
-4400 0 obj <<
-/D [4397 0 R /XYZ 85.039 108.33 null]
+4645 0 obj <<
+/D [4642 0 R /XYZ 85.039 543.249 null]
>> endobj
-4396 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F66 3242 0 R /F35 2880 0 R /F56 2890 0 R >>
+4641 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4403 0 obj <<
-/Length 3349
+4650 0 obj <<
+/Length 3273
/Filter /FlateDecode
>>
stream
-xZYoH~%41$y"k]d@IDLRO]ݤ,*;.fg$t=$rCVՅ7px3zQW"==7bC,gO/?-z9WJ9^8q^^߮H;KrW)Ч^ 0b$\:R(/l r|*Mf\?MgՅj%/v\`6W$'tp?\ ^ =tاUY5MHoyja̾ϥgu򀃚'~BkH\eeijੰZE=Bƃ.v9 \v4Q+)me9T~c#-slFNQw=dkfj6ܗYQ˸k QFwE;0gaGs}ju2Ñ&I0,#~;v4.%kh~wÒ$UIF 46rd
-9w3ýt44e=@I~2q9c&eLhs8Ċr:eƶ*f >ZWHk7Le|!,T0<[ ;˝1)]S rZ=Y
-WJ![h kC<|3 z{(&PvZ˺b^=B!EZ˦<ގߎ:62GκTh:$3ƨU^:M4zIћΈg=KdM7Վ @t.S6[>HrmSCI]6g&6 lBOEeA7NkG5#[Oȏ-,}N0ӲkQ|5n\I+e*]`&[̘d%SH,2!dx^7U%SME! !{PYSIA[H:hg As%&)9NI _'"Ǜ_{ldMpyeqjO;
-ڞuHQ)v/uM:EO6".oʜ#'4!@EC0l+n3 ShPMNTV>юa]N'gO2ky$q(]m֝0Ŏ$k3##.:!!No
-y)g,Y>esB,. ~$NT0z*MI@fUY;夌i=}@Cޘ^xz-Rc*5 )m)lyD!_tn5:Dr
-~1ɧ|kb)2~laĺg-H#gH-le+L53aL!j `WC)50=hх2,VrwLy;L9[y咽#o'.6c˩(mc6
-ܛCK4δ2u@Ov`C2yYo97m^N>MʈTjV$ԒcWQ1Gmx=U
-mz}ϝ6$ˠJ=u, /*_xV_ݙԩ qFkQXW`pW9_X砿Gt&(ċ*@IZw#zƝa{pz
-R֔<rC(oe#1ŏ(kbtUut"Q2cV')ZJupB*hnr-/0Z4O$Qjv㝮˛-`F\5.Va AHh~>Fu4$}[׋w*ݚ7Bi(5~A\qל-0ƱOzܸ!,sބ@zS[Ա
-mc? s8U5Hb7 &~ Z0|Q (~kc}5&ST;'TF.Z\1ic&S=WS_ihG9+Qꑝ+?tNl q%Pp^I',gN>_>g%Q?:AMihpKg ]̢ȍR0& )?EFbv?]ObMrU4 lJn
-a
-`uA8A`:p#[?T?yc endstream
+xڥZKFϯr 0|?#uXHrHĘ$IJ0 uWWWw׻/</|fb};Z׍wr7yM,|ͽ|Z:yXm~w^/[ޅaKy 2իW9o0o?/}ZBg=^
+"g /^.!a꧛WaȷrbC/s<[<s<_n8t(y}WK kg%WxiI
+[MK?KyΆ41iQi'h u>3H 7wG{JLN1fj2c Ph/}oy-p*ksjs1 K8y3saL;Y7ǿ-~OU?IPyrS0MI;7ft9bT
+Zݨ4mxf %Q%ċ՞yz[REM NyO jgZ 7)Mw~仱N՝%Jf7Րs1 %`[Gja}S8 /"N~=r9%S}U jZ7|> b'xUy!HSE#;N(qz4!ƹ|7䀚-ңbY =MSUbRuu_bUi<Q!{E?`"iUt/VJ86|ؾ/\ i]Wnn #qFn%KKQQN/'j-(Ihϒ4=Wdyҏ+R53OX>Y3YU (+%uXBf}Wxщډ7j{V>4LOU[rs#(CDxe dTJ49u6ݜpш)FznD䜶v9_z{ u=Yst⻫X bt9/'ޗO4ّygy Lm]{+[|0 ϏpZ"}{ܑp NyhXVNK|~t=ԥY(GGzyC0Cp<FF#dq#+C<41Yv'7[cԍsY~+^jz,L(D9!u[&B##g]4~)g6&ܪOˮ3vQVmU bfNWCJX$ BԊ&33Qlt *պ<1#w!Rold["ӌVta@M#lhey#g2`yMӱxk i$l;hƷ1?Fs'ΐ+'RpΙwpfe=뭤 $,$z$Φ&k&w#BBhI}!9-KR߈Sn G czVP,4:Lb%l2Xrn%d Iq,N"\b? >w=yW&2C'ukJ[M| bUy`LJu(d,}{ِۆkZ/+h2j"y 12e|y$7YrëLϣJǚ(Gޛ#jM$(P0TQt49D9hLfTՒR0uUwhµ-ziI#x(u~f;%gk'N{9l:>1 DpҘ":AY*I脂q`AęNb  uÙ?Ca;f+$409+E丶8Pת0
+ƋYFpl93͖a2Up{,;r]s)lz0%}K9O:҇r}j7=_{@zs
+%9tB
+CP A)w^Z C:Cd#kחp~0O--y:vBNCMg12x կ$QQo)A:d3rlxg<hqFC~=q c{ԴAuL|$h܏Ge?["K|*.*Ӏ"% !T㘪|4Ub\ A]ʃǢQ#=HMo*^ Lx+ȧP}$ :@+t&;"ԧ! r4;+h8ҢI]lfG0'3zsByϤfL6 5
endobj
-4402 0 obj <<
+4649 0 obj <<
/Type /Page
-/Contents 4403 0 R
-/Resources 4401 0 R
+/Contents 4650 0 R
+/Resources 4648 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4390 0 R
+/Parent 4646 0 R
>> endobj
-4404 0 obj <<
-/D [4402 0 R /XYZ 85.039 786.531 null]
+4651 0 obj <<
+/D [4649 0 R /XYZ 85.039 786.531 null]
>> endobj
-594 0 obj <<
-/D [4402 0 R /XYZ 85.039 575.671 null]
+614 0 obj <<
+/D [4649 0 R /XYZ 85.039 657.913 null]
>> endobj
-4405 0 obj <<
-/D [4402 0 R /XYZ 85.039 554.474 null]
+4652 0 obj <<
+/D [4649 0 R /XYZ 85.039 615.628 null]
>> endobj
-4401 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+618 0 obj <<
+/D [4649 0 R /XYZ 85.039 367.905 null]
+>> endobj
+4653 0 obj <<
+/D [4649 0 R /XYZ 85.039 333.159 null]
+>> endobj
+4648 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4408 0 obj <<
-/Length 3241
+4656 0 obj <<
+/Length 1369
+/Filter /FlateDecode
+>>
+stream
+xڭXYo8~У "ئ@m<>J!#,5pfQ"6J&Jhv~1 ,\QbZDY͗wɇ٧L3F$1ϫ9Iן. vW~w&9n΀n󏓳ymg&Z}rwO%xqB&z5%h3J%Ex'?jY~OFT(njSp~.IP':ā:ibZ)(R<]^ER{DuLōvi9IdFGX5ƁbA,P4YN
+?) ؐ8b}]y#x+ ьi|2. 5G
+$M[- l/<_-"aZ H`z3 #
+t43$+ =6Vy[]ZtP ꇴ¸!hNpjzg&#
+;oix9XmFh #P1^\ jE/(UT6;(%F1~Pd0Q۴L-ObaZaf 0,/7Kh&zPi,3Zr}lL;6@2gf5o 1VxH+y!u[5qQ׿a1}LWf_VV-a HJ|)YAU᩾nZw=<u>_[-F]ߕ"6! ᰫC/rFϬ&{~=1 kEգ }n&Aja̶aꌀF@!.LTp e5lLzdX(b|jXkyhKkG]oemó0ԏl+ ja[h]unuӡ>
+endobj
+4655 0 obj <<
+/Type /Page
+/Contents 4656 0 R
+/Resources 4654 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4646 0 R
+>> endobj
+4647 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 164
+/Height 349
+/BitsPerComponent 8
+/ColorSpace /DeviceRGB
+/Length 6345
/Filter /FlateDecode
>>
stream
-xZKs6WTUDG:?֒3@K̘"~(OjR;S:D7@tnȁ;Q(C;Ph>qF+x
-3m' avr1Gc'N2-e:~<QJYk'Q[gc/onfH񭫛u{=v+kvu{ô @o͐pa<)0^Nǿ~:4m?T?O~-`?8J+MJɿ,LG<j@AC9vC<kn Z`A$R S^
-mX8˻Z9Ce4M^i"h8ryӬ~AJV-eV#l;2P@YCj-3+
-lTgE<ZoRL"Ki ;\ ׹M]5RاdW"xΆh`ی'W24ݶ$<mQ")7ڧL$bheDs\iUvz'D}M؋xPk53,X 4 Y֌
-"`&7xO/jzBE8C!aVyo"hŨUff̘ţRɬXv̓0AXA׌{ʳbZ'I´G-mՈ#07LO2_zӞe)UYjϝ#|4<UB6Z܀d<b>v.;pl6*~s籮i%<_`9;yRKhmڎϵ1m)4$bВ3$nvШ9U:clz!ZJ”Tm5Cm`ԯvW Coߏrro7T"?8+OE$ѠZ~XDDN/Vv"χ)wsN>n6vpKyg  :v,78ˏYfG^^i\^ Զ<g f@~
+x{lmmT/[[m}ZULf,\Ic2AUP1ea4TH#)mR)ҚK'9y}.ߧ˷}?||un<}/_REQEQEQEQEYW Ʋb4ZֲDdMdMdM5EYSdM5Ee6SR7PMIdMM_KCսxUޢ=<<BBBnܸ!?o۶N<)W\>|xWlʉ'àAԬ;wܷoׯJ3f
+
+
+BCCQXXXRR]_K˖-Ai>|tȑO:d\{nP) ٰKhO\*icbb`\fMYY5r7nA4K|r\X
+?NΝ;׭[7t|$"wL4I˗ݻqEZ(k1<<SN;.rrrM#=қE]vuX*GT'OtSŋ=((jtb)p\]]+rY#ЦMa&ݿ_cZZC\?~0,zET2^0˼@۷pႴ*rY#
+;4//ٳg#\[[
+
+ڴi,Ϟ=9s{4{욚vϞ=aaa~}GSNٵٳ{ʔ)EnŞݺuKMM?~׮]>p9d3fLIIC~"/5KX__ cǎ f!q_KΛ7Ν;'O%66vUUUIIIh16&&&??c۶mdƍzRӽ{w4>hڵj!NEE]\\DСC]aa!Ϙ1ء֚%D`ha'zԩ2U\\DoP: XiGD]*'g
+h=xq|yyH޿Ç avzashf eQF]?Ǐ+-~~~wb;d-yyy.0#g-.--K
+vfguee*AqY<offsY+Ȃ 0i?x@,% .LNN~)&XZoڷočЉ'jkkvi֭[
-ZKZ*%t#.iZaCX9ՄЬƊb3͹=wW~8$7¡ ;Ќ8ӈ"
-.'$J^V )̴oy<->c$X"p2udmn,*
-8ssMj[M]t(݊Ԯ qrJ:A*Q&u8?pq΄w,}>-Evx&{_ͳg.!\-l8
-أOW;UM_Ef+BiW^
-=By>]L.H<(8{ D}CXw!>7N/Ź08#z 5ͺk[s+}O mP) e\'xLSfF͜P`vkQI9t/h<߂};sbצô-nW`)g@%ʇvg96'M@zf4mNH.5&XRV]lx&׆!G年*M6B} {?K
+^xq1lՅ׌0;999HjӦM3vQ7ob{c\ssssv Xӱ b}& l\JK-1{Q lA1 80++K]x ϨQ7FWXQWWgP)|wx KgjcEڿf;THyɚɚ"k)Ț"k)&릥og,55eog\q-,~AS[,5hnAW"n+hhhhhhhhhhhhhhv*PHHǎkO$t,4;mƺEnmQFʕ+Iɍ%guRdM5EYSdM5Y5Y5YSdM5EYSdM5EdMdMdMdM5EYSdM5EY5Y5Y5Y5EYSdM5J?!:t/ #kޚ~WWW׷$dFߥF |[QVVVc}"+d^GF9vގHsmmmmmmmmmmmmmmmmm4EBXz+r7&gc͵
+-LdM5EYSdm$-75Ys'krĉm۶4h.›7o
+믿v흑!]#N<Lr v f͚25K.egg#
+
+MgϞ͜9W={vMM Y]..."|С^zD[mܸQ uaaauu%Kf̘!ݻw|xk똘Bm۶Eزe֭[رcGllCψ~z*)) ]%JyX<Pí<PǏ/9Z0uԲYf9_ZZ*(O@@
+fosssǍaXk7YQFaotŊ=JkkgjcEڿ&k~M5Y$dJysr6֔~LJvĵ|_6Em6xu0lVݝ
+*++<y2)((TQNƬ7RBfXs-k"k&kڙkA9'kuf@֭u]]_`Yȑ#СCvqΟ?rΝ۷ov\+W >+l6ٵ-[`z2={BCC۴iYYY[gΜ9''']o8eUF`ܽ{wzz:&MҼW`!!SRRտ0___QXwḸ9((ƚjtLxu |dLahѢE‚a.pZZZ``?.5o)#Zqz(Ÿׯ_DDwii:L___Y[nҡCq˧Oldh(<k^oذoFK^QvvիWu<s ,X|e||<.݋#???7ndG}G'N0a,**2Zá{ݿ_ yOOM6)`ܶm[wwCɹ%116>1bDjj^h&'kc?{_Ije)Ț"kɚɚDYSdM5ղX߻wӳ.?Z~ao1~<xcǚbe]PP-&;v'O^j=sv%((hӦMj?ңGvڍ=Z*}NƳgϢSL10ڵk А(?IR֭={]vեUUU͛:uXt)>E;wL<Y׬YK,1c]5557nի޽{ff&P~~>``\|رcGN޹sg\\aÆEcpyVj'N`&un4Y1 (?~L/pc`0fTi/\ te˖Hї䳾6͛7?KS777Dӏ2~]]x{.&z)G5߿Ç G}TYYٳgOd^QQQSiܨ|M#MWJ~!FeD844i^^Lv‘el]jx='!!aS"dVxx3g% {*bYqܸqrܷoč͋bM#4 ߾1^TTEVo֭!Sl30=[ǎO#OgΜyI
+~:r| X1bbܿgdd`*Vp= LNNV?70?SL˘ Ń7E?++(vaaabÏ!!!9=peۼy3Y a&T~M:kΝk~1~iQdM5E֔5Y;7k~ D|:kٿFTyQQQtt߱c/4/o2?ӕ+WTUU8qB{ʬ={6s^ cGIn$Qq C~Er#r͛7 &oz!2ʣmff!CP1c8<dW+7..n׮]lg~jŋ˴(,$v磉m.Gz9
+_~k gϞ{K-_XX
+vէ;vz
+j6$Ap8;LDpssaGjW塡b&M ӦM#G^rخWB8wxȮ>P(3T6Frb# Lwi\3O?4gudƍ`1sDLS{|Q|md b:N1 (BjGYD1%Ҽ]餲RNPzS{|t锔4y| .LNNY`5[jzGfX|u`ݔ5
+l~hzziӄ]]}j/?5kѨ
+Kot$vgzU;"7VZwOڷo|WrѳM(+ NCo϶lb;)Y5EYS-5u k5M*endstream
endobj
-4407 0 obj <<
+4657 0 obj <<
+/D [4655 0 R /XYZ 85.039 786.531 null]
+>> endobj
+4658 0 obj <<
+/D [4655 0 R /XYZ 85.039 763.817 null]
+>> endobj
+4659 0 obj <<
+/D [4655 0 R /XYZ 85.039 763.817 null]
+>> endobj
+4660 0 obj <<
+/D [4655 0 R /XYZ 327.216 466.8 null]
+>> endobj
+4654 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R /F41 2998 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im6 4647 0 R /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text /ImageC ]
+>> endobj
+4663 0 obj <<
+/Length 2891
+/Filter /FlateDecode
+>>
+stream
+xڭrF]_U&x%9TtĤl%yHh
+%o"c׬U'@NrJ_w=1n
+%cF>zt5oRI% 9dGPv3n'+)0x=T΋*Q+'d? ,2kb(A!{S|F6YT VeCH%eʋ:@
+(Y^eu4QXu|ZҪӈ 4\7c8<*E妫s(nN+R-%#j/J
+,L8#zzN{0ء IӘ@e^;b,>𝇺Mr>Eyxs͈MVH ׈ƿi4{&xpxQ`j& |w@E!OQ NN Á1 t[Fܪ#߭4F7ʾk7YDY\1rIU^QuZdlgM 7Ͱ}$9 TJ쵏.KM`LvE%{<|L_h,TdVU rEG2HV8nE2b9kai1ۢGlg["XrvJD$IsVCw:kձ%1q}kZxQNth%'=lPo]3oo
+L..xJu>D
+viR`N\pwCn#JuYd;}j3NwǾ~l=wendstream
+endobj
+4662 0 obj <<
/Type /Page
-/Contents 4408 0 R
-/Resources 4406 0 R
+/Contents 4663 0 R
+/Resources 4661 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4390 0 R
+/Parent 4646 0 R
>> endobj
-4409 0 obj <<
-/D [4407 0 R /XYZ 85.039 786.531 null]
+4664 0 obj <<
+/D [4662 0 R /XYZ 85.039 786.531 null]
>> endobj
-598 0 obj <<
-/D [4407 0 R /XYZ 85.039 547.705 null]
+622 0 obj <<
+/D [4662 0 R /XYZ 85.039 520.606 null]
>> endobj
-4410 0 obj <<
-/D [4407 0 R /XYZ 85.039 524.989 null]
+4665 0 obj <<
+/D [4662 0 R /XYZ 85.039 484.341 null]
>> endobj
-602 0 obj <<
-/D [4407 0 R /XYZ 85.039 373.626 null]
+626 0 obj <<
+/D [4662 0 R /XYZ 85.039 278.781 null]
>> endobj
-4411 0 obj <<
-/D [4407 0 R /XYZ 85.039 353.637 null]
+4666 0 obj <<
+/D [4662 0 R /XYZ 85.039 245.243 null]
>> endobj
-606 0 obj <<
-/D [4407 0 R /XYZ 85.039 284.175 null]
+630 0 obj <<
+/D [4662 0 R /XYZ 85.039 135.134 null]
>> endobj
-4412 0 obj <<
-/D [4407 0 R /XYZ 85.039 262.979 null]
+4667 0 obj <<
+/D [4662 0 R /XYZ 85.039 100.388 null]
>> endobj
-4406 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R /F14 2895 0 R /F35 2880 0 R >>
+4661 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4415 0 obj <<
-/Length 2826
+4670 0 obj <<
+/Length 2961
/Filter /FlateDecode
>>
stream
-xYoFݿB "[&]etnF"eq%hD;6`g~5vE؎JQځrY@8 v
-r<ks[<(:#-Gz{gzdi͜{v H+%⭬ boD$-db/Ԇ3/}I^H
-O--"p7 ?CdwG:ij>/~_74
-u_BCO( DxjhȆ 2kMV ޓYىO| :8ͮ+D3*bpY+V]'gfdjIԬ53Fh"'sb*PÕX~we^h 'QD3JEv2|e| P0n(O (0_EG]5l{XۡOcm[ 2MF&
-.8B.lS/lW8D95?ϊT49h:Sw;ģءk45|# =y -r C+]k
- o n Ҍ<FYñ5
-ٰp~;isռҳƄ1<?6/(@չ|!S |1'̈́X-Ƶ:0u~7S
-kv58+~1SNc5\;vcάĵf8 u:8
-
-%ͨM4PղJ%D.H.3hJ!Q|BgQaJoY0-F? +[k)5)ip+a3NBfTĜzvI(;<O)dpk)ȫP *
-gIa;o==q{@5&J,?@M&ߦz?Q,+΍ 7J*grhb~ZZ)츈2qDfzVOٸxk ͕.$+Oҝ!PQ;0,R˔qL9/E,Z-9/\E1ԨO0
-)>$0+Ru
-3TFBhv#*`;0p߮8f
-:-*7Gu ]nltOB
-;3׃J7ol~L((2͞u7/̙-! c@HNEdɞ7fD Œqш}4M >źQxK%qSN{ %8~e<;M$}boQM qH #qms;UoTQ\"]sW]vc7T"Fjr刯 GFQ+~RG9jEjHpi#q@BօߚDaSh7j^w#h&\d]T^Z
-(8̏?fE+}[<_&)N&EYendstream
+xڥnH_f Xx$ɎdL(PBR﷮nR" 00`Q]]]w̃?5KB,N"7j^xGy{b. ̯7a4SzlxR hȿ87x\k(^8q/Ĺ~;sw>Rn݇{޻X n\z9
+eKKnCw &3"L8ȅK-f{t5f{up(fAgwcKk|*w|<GV+Hp/W,A~825-"Fjp!9ƒD>8kW<"/1Y#%_(1^3h$ tO޲[n߂ Qce`z/x[Ђk[Ҿ57twX&$=."ߗs 3gq#S?gҶ3b`-4̖1
+I=rI('*L&X6$ waeE A ,n.2gT'snp % |tG6C ZQ*|#Z 4CsM&9h9 ŋ9"pnxludҸUY0 &AwlP}o1
+7 > α&'2x{ 8c <ucRP{{,#e\x^
+etYW7=vC t0Y.fÒi
+;&hl_2K+<J27YG(|uX&hmT
+k٠?M4Wi܊XZG䏛z*PI&Jq48ڜďѺ<Fz:)1PEz;&R#.Pg<seRz*iȫN<V5Ycu*Y\Z'*ja[~+ WUN934>Zau?t< |'U"{,dD
+/<MIƁ:tω+ 40&/;V}4ly0C1TΐۀO6IRDyP{N3q`<8B}g q$CcF3 ;>Ey2
+ЏԶcAcsOL.C
endobj
-4414 0 obj <<
+4669 0 obj <<
/Type /Page
-/Contents 4415 0 R
-/Resources 4413 0 R
+/Contents 4670 0 R
+/Resources 4668 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4390 0 R
+/Parent 4646 0 R
>> endobj
-4416 0 obj <<
-/D [4414 0 R /XYZ 85.039 786.531 null]
+4671 0 obj <<
+/D [4669 0 R /XYZ 85.039 786.531 null]
>> endobj
-610 0 obj <<
-/D [4414 0 R /XYZ 85.039 766.606 null]
+634 0 obj <<
+/D [4669 0 R /XYZ 85.039 616.318 null]
>> endobj
-4417 0 obj <<
-/D [4414 0 R /XYZ 85.039 742.055 null]
+4672 0 obj <<
+/D [4669 0 R /XYZ 85.039 580.908 null]
>> endobj
-614 0 obj <<
-/D [4414 0 R /XYZ 85.039 661.833 null]
+4673 0 obj <<
+/D [4669 0 R /XYZ 351.735 437.513 null]
>> endobj
-4418 0 obj <<
-/D [4414 0 R /XYZ 85.039 638.515 null]
+4674 0 obj <<
+/D [4669 0 R /XYZ 85.039 369.239 null]
>> endobj
-618 0 obj <<
-/D [4414 0 R /XYZ 85.039 103.595 null]
+638 0 obj <<
+/D [4669 0 R /XYZ 85.039 352.003 null]
>> endobj
-4419 0 obj <<
-/D [4414 0 R /XYZ 85.039 83.004 null]
+4675 0 obj <<
+/D [4669 0 R /XYZ 85.039 309.05 null]
>> endobj
-4413 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F66 3242 0 R /F35 2880 0 R >>
+642 0 obj <<
+/D [4669 0 R /XYZ 85.039 215.279 null]
+>> endobj
+4676 0 obj <<
+/D [4669 0 R /XYZ 85.039 178.412 null]
+>> endobj
+4668 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4422 0 obj <<
-/Length 2046
+4679 0 obj <<
+/Length 1972
/Filter /FlateDecode
>>
stream
-x]o=K C$mM۸J> ;(`|'Ϳ1`;&ݕvWa1g'L&QzZEu"&+=-(OA'KD2/ e}s޼;_|RJEs6 b͛O_>h,է ;G)gSpnv}b<JT'߾Iz?L#'ɤ:QZzZI^ܞo05a]^B
-/N{r=5uq2+4F_<࿜S7 HQ,xo /-R,mQoȡ#3Aɉ İhb WlÈ(8ݿdU֓m
-=WfONI82&6a:EpXN#ϊ R c]Sy]Kxy_vtL0k^Pb1.MeԀ
-ڹ9Rh $lPǴy^S9,˳Ԯ ӉG1q[M5%dLYQ\YyiH]cYnn'(&[٤<R4ߩ<²1w'?K ZKP#Ho:gRxXXkY*QBAIU{s o,eC/z:#EY3*e;SVkv:Aza32N*.˺8`/v|#1DޘƤbV,0"D!pgf]" Cwn%Y$TZH@!+Aj‹oR~pQ:*Z.Ԯ-/K@z` MчBO.S|ǚ*1˒| d
-+}? c Ո27MQmj;Zy~ [mGv`(u\c7kwu3y)'$H;RoY >䦩EXYM0X>+<TESl UKo-
-,K]A nLwד)o1[kȈ*ue50beZ1þ}Qh{LEsvA, SΎmsUWPu\^]?{cYBj櫙l^GR,K 6 7xP%DҴm 't,e N 4L?/k+3 wH#ªmo M%7 C2<aX!q"/rAW~7
-۶9v-yE*Ԓ0x-JmI̦E.ajv}mgc ʏQk.43v"SN.H?SY: @_ⷺ,q{' <%)|`cC2t: "t:3r2JJ۱6WtVeow90BT̰ӟ9e
-
+xڵYݓ4_FH叾cz ;ib۹j%EN|>0%S:1& IT O7D!Yx4oߩh*8Ky:]9)g*ٛ^|q`&/8d͇OK\ g7psI0[|p^/X8ytrz @)я΂4`̙H~00߻wS5
+PQEaQ9dm{xV79+@T]$|17y g6XE!"\ӯ`/
+>l.V 859;lj v^O|Izgxh-)a[csF\6[:lk 2r@iϝȒUE^>"ߜ6jDC@rwN*6.Z骺>V?!xͯMc
+~pA_> 6j\֨Qy&x@㦼^}ۘ9 Qum$
+M%2K~4>CQ
+~B#FovZ@}rD"[ӐfHj[=mi:pNwSwG rdђ~HbJD/ gkTENuk_ E'.Ntv*l"q7 E@p"33۵X
+r*7t8kM"!chz&[(!@5 t
+R9p 
+B6OVn*ryΣrgZ $Diz.B»\(B?XpVzjC?"kBy-XNi{WftGPotKMV ̺x?zngU9ewGE,ϋ6>.(8 1~~`p?,\7endstream
endobj
-4421 0 obj <<
+4678 0 obj <<
/Type /Page
-/Contents 4422 0 R
-/Resources 4420 0 R
+/Contents 4679 0 R
+/Resources 4677 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4426 0 R
-/Annots [ 4424 0 R ]
+/Parent 4646 0 R
>> endobj
-4424 0 obj <<
+4680 0 obj <<
+/D [4678 0 R /XYZ 85.039 786.531 null]
+>> endobj
+646 0 obj <<
+/D [4678 0 R /XYZ 85.039 127.821 null]
+>> endobj
+4681 0 obj <<
+/D [4678 0 R /XYZ 85.039 93.681 null]
+>> endobj
+4677 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F41 2998 0 R /F58 3365 0 R /F35 2980 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+4684 0 obj <<
+/Length 1871
+/Filter /FlateDecode
+>>
+stream
+xڭXoH_aODBۣ-6$I"sC῿$N
+wJޙΚ; i ג;|PpYb<x~3?f3rb8pƳWg㋻'t9^FPD˗o݌ܫKz{w=@;z{CsrH8{1/ǯΎ'\J̙G̗q<˜<|}9"rhU( 'E4pZ
+[
+%Ԇ|$b"(nyN@h-{!h\fUuحh,' '8m Ů~$lQ&ujJAP^OM,?H{~>!w̰ApgHgYM v T/ jb@V-0~4[l
+<̍)4K !
+ξ]Y
+TLq~HiD0_LW3 $uA y@Xv
+.ǟ$udp-ge1ȓl:8z*fi5s}Q~jsRUQy^خ7E#2KC_;Pՙ Pv|WhHbfyD׉)ш m^{Mk0.2 X <ˤxWint)ox &H#&\״1x@P@gWh=MXM/NT)`[$~% }{NGX%m ɴȼ6;k΂O;)Lq?3o2IZ^)'!Ywômu|gԱ~P7!+i{t5~<z(;N~#Ǐv#AO~6qKS7<h}8pR]%>"&tY\5$v]J9Aq
+endobj
+4683 0 obj <<
+/Type /Page
+/Contents 4684 0 R
+/Resources 4682 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4689 0 R
+/Annots [ 4686 0 R ]
+>> endobj
+4686 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [437.587 654.697 464.58 666.386]
+/Rect [349.275 614.049 376.268 625.738]
/Subtype /Link
/A << /S /GoTo /D (XMLpassdb) >>
>> endobj
-4423 0 obj <<
-/D [4421 0 R /XYZ 85.039 786.531 null]
+4685 0 obj <<
+/D [4683 0 R /XYZ 85.039 786.531 null]
>> endobj
-622 0 obj <<
-/D [4421 0 R /XYZ 85.039 286.107 null]
+4687 0 obj <<
+/D [4683 0 R /XYZ 85.039 174.626 null]
>> endobj
-4425 0 obj <<
-/D [4421 0 R /XYZ 85.039 257.371 null]
+4688 0 obj <<
+/D [4683 0 R /XYZ 85.039 145.406 null]
>> endobj
-4420 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F20 2865 0 R >>
+4682 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F62 4052 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4430 0 obj <<
-/Length 3482
+4693 0 obj <<
+/Length 3016
/Filter /FlateDecode
>>
stream
-xZKoFWF43<IvxvFZ"-Hzu('bﮮꫢ"\Oe$H[+_zx^Å﹙-eO˕R}wJԹYݏ:>|Uw/}hM~wnBg 7+:uhO c_EsU.~-Wa(T^]}9X\ qDAIY)CM4Ԅ.E] 8cgS<]Ke]ޏf.a’^|AmW65tX;=7~{lh~m- sձOVM XMͭXypL47Uz:Gp-I6j,GVUUNV
-~k`ݖx~X<:PX E=*poX~Q|~{F_wAwc΃&ř y~O}a;5]
-4MEfӃ~ЏʪÊ״97}5ʎyMe&B8ub߿rta]%Jr+Nm=23U^dvgyWƚ zQ9
-@1't)E
-?"߼w/*4M^\ߍ07-gt'\q<4(6KEnX\G
-ϗ\bQE˞њ@DO[8h5A%|ޝnĻ`UO߽#XQEh? $wo͔NJ9uX_/xN$]ߚ 򹟱0sCZ{%<imsdĕ#2OOkFTP5R+Dijyt9Y֨wh [ik'R)@+M
-_v;NYK\zkphߕ5[o =!Τ!)@:,e#a!F n G)b5¨<6hG`Yq 5u]l*,؊
-tj4#B̬O5gՂ 1x!nkf*}wٜBύeN7$
-phڞ%!&J!l`<QQp$=G +mXXL bN, `_#ɧV9/iC<$Nσբ+j #P'y%g,442!uexQ0Ao?L`04 _uEw|zwk)JY^HcP]BјOyAiRnXеQD2$l4 ]w-8ʔKò
-tװz
-8u>tHdP~'QKѪ(:f`~H.N"+Y2Bi:Тe|jZmu.\)`) I`xE!\i  s)k%)k_,L,³-1u>L')Ԫ؂ &K걝q{B^; T̯-௸s t/ScI)P%g_rR4xem$94lp$Zr&H1OH4B0h?t7p}o46hl !LF0 m[c=}9h`P)e5+%ɤ;d&<,
-QG(=f 25O:H9W[h1]K_6lʘH1c/}4<*bIcv&a7([4E)_s/TŌBMD6$<
-a#yjYĖڂG]BGU3fLf/=4j xO-5 GW~?+n-Fm3JwV!w[}%צ#4YpDı\0CdX%)OB&P x0|ങe^IVqsYijoM'Giѯ{cMЌ~Po=73R?0Uȡ$Q P[a %CX_Ǧ–~0KϟH9)ͣl'<E;74MkiΆ ѣ
+xڥZKs8WTUL|3U{sSkw3sDZbE"5$~z氕Fui5 D$S?d &KF ŭ:4g7wt)?)ɬwOߦQyJ,˽w0>|xThy<G/f8hٯ7fVOg%*P˿n~3_o?*ځbOH7O7x,sF1Qy|pIqf pEGY414h?^
+R?OD.NЏTx kf޳;0nfPxhXIL̛V=KgڍË&Ҿ3- 4c6*C ZC {/DA]ߣhGq:wY G'q=N#\[FK+I3^|wgSWiN7UҴ0!:0ν,UcOeW顢ȓ-^y
+N$/~ȭVRn+OC'Ƶ;cEoԒiPHf1s֙|Խ<7tۮeOQ;3S-ڦƜ4u3 -U/5* {
+NѴg_n@ 'qSKϔ`˜8I Z.|vCIjd&p1oɃj<4wK!\yfU^Ț,&9 ;I3`l skHZ̰=Km= Bʼƨ1Th%>ؼMXjD|l@r*j5Eea3i4ګ!\7W4{k3 |xL[3^U*0Khl6ٝ 6[MH~]-ߢ}aJ{˻KS^">g_MdIU{1r)O!տ=E0+a(`C{3'q1ZG̏5pSe"H-`q~Mp=ա _Hke)ޑ?S
+Q*T3AT~xM͒l\L!J;Ic"UP8ULZ9@OA8%z0Tn|PIN=g'
+d;ά2L@:"3u1ñõi4ăȜuWGTڀٽ^d
+5a
+; $ByˀF_[
+x9ڀ'py1j6lVmW"s@17l:m vvЂ`UГApRulsY15?I*$̆Ec0I2vނТq9]MC'D㇕آI"\zFLxA8uxt0C.1c9g\C۸W1 2ZDam##ہ/Df,7P=EFP3]hUZ!Mx h䖱/N)[= %n,"A.$qh HyDr$"ŐڱM(wpAט8
+>
+BWۯZnNd 2d!T\z-:%Cfzq-J%SNxGwQ 4qDžɺzx~sXJy $fu/wO'fX4t62
+#_a,%'4`h%0:e*Ssu#$e937&j]o\xcϖ&Ul>^o)TY:Sh~v
+ XSJ|ljoh|q44m2=S&5,#R=BFWJ&̳I#.}1
+'s8N qz$ts;끀㑢cb[İ:@c,1^g0·&eʭ~/+ڭIGS7"iz,}J>iXjueQ(}/6J<t/:K~wniNZgJV1Bf3˫p9M(sYt6gJSHpz2ﹽ?<(izb򽌭$}izTQkvF-mJ˳jw0cD"6W .S6ԋjL]5~+k'Б
endobj
-4429 0 obj <<
+4692 0 obj <<
/Type /Page
-/Contents 4430 0 R
-/Resources 4428 0 R
+/Contents 4693 0 R
+/Resources 4691 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4426 0 R
-/Annots [ 4434 0 R ]
+/Parent 4689 0 R
>> endobj
-4434 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [264.771 627.931 385.537 639.62]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#ENCRYPTPASSWORDS)>>
->> endobj
-4431 0 obj <<
-/D [4429 0 R /XYZ 85.039 786.531 null]
->> endobj
-626 0 obj <<
-/D [4429 0 R /XYZ 85.039 766.606 null]
+4694 0 obj <<
+/D [4692 0 R /XYZ 85.039 786.531 null]
>> endobj
-4432 0 obj <<
-/D [4429 0 R /XYZ 85.039 748.602 null]
+4695 0 obj <<
+/D [4692 0 R /XYZ 85.039 766.606 null]
>> endobj
-630 0 obj <<
-/D [4429 0 R /XYZ 85.039 663.166 null]
+650 0 obj <<
+/D [4692 0 R /XYZ 85.039 737.087 null]
>> endobj
-4433 0 obj <<
-/D [4429 0 R /XYZ 85.039 642.273 null]
+4696 0 obj <<
+/D [4692 0 R /XYZ 85.039 696.923 null]
>> endobj
-634 0 obj <<
-/D [4429 0 R /XYZ 85.039 309.602 null]
+654 0 obj <<
+/D [4692 0 R /XYZ 85.039 555.668 null]
>> endobj
-4435 0 obj <<
-/D [4429 0 R /XYZ 85.039 290.73 null]
+4697 0 obj <<
+/D [4692 0 R /XYZ 85.039 525.173 null]
>> endobj
-638 0 obj <<
-/D [4429 0 R /XYZ 85.039 164.95 null]
+658 0 obj <<
+/D [4692 0 R /XYZ 85.039 428.612 null]
>> endobj
-4436 0 obj <<
-/D [4429 0 R /XYZ 85.039 143.754 null]
+4698 0 obj <<
+/D [4692 0 R /XYZ 85.039 391.746 null]
>> endobj
-4428 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F14 2895 0 R /F56 2890 0 R >>
+4691 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4439 0 obj <<
-/Length 3348
-/Filter /FlateDecode
->>
-stream
-xko6{~Q
-f$Rwi$-~`,VW\In6AJlXlDpޖ7q7dš7Y'd+oN<N|.}3?9{LK?9oޟNRi7s\񝫛8uݩrW7v+0;s\8t
-03
-bX :-Ģ*4P=HZP"]gR {,j{6zjGW+cicl%4%^)5k! "B=97*}gYIÖgn%6 X?O|[o;aj]nqs /9^hv\
-sgx(I~/K&bp~E*a⋼ 51ލx'K:j)/q ҲYmxc3GsZ^WxVW?󥈣'[+TGj{E2dVQ; ZY,&Gp\<LV
-Ԟ|cTsh.ЉPF~HKi|QRAև]mܱF@r'L=)8{atGd05
-z(9:"JD|/{R l}ʙq.Ѷ
-'<Vp
-s-
-[Iehϣ߉; q@wŷiÁ6f{m7Fm.=o j g%f{qA5 zkK{ab Imikm̪/U?wj֣i]¬)n?~I}qß\.x \>>٭ڴI5Uԋۮk\OAqїJHCt$T?t:D۪Ûa?U3 g [`Ov
- 3PRIʾPqb-X횺 qyTŢC%kwASJ qP
-74et-]р -f{Q`Tl :Alcbx6ίoci'E=>_â@:<@ nP~-
-jQ2"i ȟ*'"/ @Pvs^#R<=pǃ#!?pu}uG, ]#مA9V7}r8}Y)ƏھSn <>(;CUc޴ۇZ7 +!jUmyY$<A!=>拏cp؅\fun״#+zh_z 95P?Ӛmu0:
+4701 0 obj <<
+/Length 2911
+/Filter /FlateDecode
+>>
+stream
+xڥZYoH~y5  Nf<Hl.03mBRq﷮n.g au|J8 O8ɕ$S_d^'"7w*_d|WE:{׿\}4q셡?eY]Mܻn3w{?}0npoWo3y
+z<
+OحJ3R|G-??_) +\` W;d.?0YԖIUOE~_ w%.g! lu?# 0,7CisBi L7_Ut74"jaۣA M[RY
+}F<\7xG;YUnh=87(j6m`On`#[`sSk¢BtI]mxG3iri-" B)-Rf9L&>UW?-Y
+ !Wz_+אz3wt
+$yb_}͎QxETǙK#Τa-rFɯx=ؽscԎ{8c-u~28{N
+` jsK lL.<2
+F1\W`$JU-VUq;vk0|EZ?6nA-XbL ;7`FqlB{c~':7o. \XMbpJ5r]WmT5H@l7D"PMTHM;-M~{L3%uSEūvA<J;xͮ)g<j MŅыš9Tw?%nd)t3G4g\~^ppF
+Od_s74G!'v06ő%vQr8.q/Ph2*a)M({ܬ B[d8baD=mD9&Zy 0CGI^lP  Z[_-YU-oNӉ3V1 kRSg+l.D"'t»^3 OO
+n%~w
+.ȄRQgRFgɏZgU$5`޽^K`a+<]?ms[C/3~E{ZV*YR
+7gp,It -
+ zE!Xf^iT)`cIr'=b>6{܃S
+uX ˙|~PU&3mNn6 đTlkQ᧙D0  PI
+7$
endobj
-4438 0 obj <<
+4700 0 obj <<
/Type /Page
-/Contents 4439 0 R
-/Resources 4437 0 R
+/Contents 4701 0 R
+/Resources 4699 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4426 0 R
-/Annots [ 4441 0 R 4442 0 R 4443 0 R 4444 0 R 4445 0 R 4446 0 R 4447 0 R 4449 0 R 4451 0 R ]
+/Parent 4689 0 R
+/Annots [ 4705 0 R 4706 0 R 4707 0 R 4708 0 R ]
>> endobj
-4441 0 obj <<
+4705 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [470.223 738.375 512.306 751.276]
+/Rect [342.154 348.249 458.69 361.151]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.padl.com/)>>
>> endobj
-4442 0 obj <<
+4706 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 724.825 187.762 737.727]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.padl.com/)>>
+/Rect [374.665 321.151 539.579 334.052]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://safari.oreilly.com/?XmlId=1-56592-491-6)>>
>> endobj
-4443 0 obj <<
+4707 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [236.019 697.727 466.92 710.629]
+/Rect [84.043 308.207 142.399 319.897]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://safari.oreilly.com/?XmlId=1-56592-491-6)>>
>> endobj
-4444 0 obj <<
+4708 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [205.71 470.662 345.156 482.654]
+/Rect [178.437 73.761 317.883 85.754]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.openldap.org/)>>
>> endobj
-4445 0 obj <<
+4702 0 obj <<
+/D [4700 0 R /XYZ 85.039 786.531 null]
+>> endobj
+662 0 obj <<
+/D [4700 0 R /XYZ 85.039 711.163 null]
+>> endobj
+4703 0 obj <<
+/D [4700 0 R /XYZ 85.039 678.741 null]
+>> endobj
+666 0 obj <<
+/D [4700 0 R /XYZ 85.039 539.412 null]
+>> endobj
+4704 0 obj <<
+/D [4700 0 R /XYZ 85.039 504.667 null]
+>> endobj
+4699 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F35 2980 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+4711 0 obj <<
+/Length 3014
+/Filter /FlateDecode
+>>
+stream
+xڥr_S*pݧYߎ%fk>` dhߟ @éTakdk‘xr{f6%`>-.>2 Gu'4 7F՟ٗ|[q>`<=lvtg|}o-X xq}ksx O׳Eg$R?geVpg`
+cӰp=s\el~9#5$ 1Qi9~-8j 2-1HkZ~xZz5L)Z,b
+Yߺ9>)@9-?hks,h%Ug"h{Kn/ - n#+QMJh?O
+'mugnm{;€Kvsh+KV@lLD$Z!~PAeO<k1o2Ӭmf
+ Nfێ8;- =iӒ.ND.CeR{P'90bN8kc0C.Uhu$v])DaP֜"N^W J P !ׄ.' qA7Q8 Zھ\#T]ʪ P +) Ie Sw IA?u,%2>.d6Mr':Uk
+zq<{
+OƆir04탲{y}#,(H!M2u[PgX*RC 1$@[ mJ6Y]5ztX5B2_f|ZRb*#6_rM[zE{T̛ɰemekN4%M)6BP߲T^975yJ#Z1du-A"M, tə0'_:SC ޱ33=4X T7V_,<%"H56%5d$LʌRT}oc䘄{ZPQPR4pE&[HFg:Bghj,!GvBPW<x&2h=
+.''EnbBMAu_JևU de_5j㢿防Lk#*TZI2!za?-SW˒/Ir 0䔶mV ^
+endobj
+4710 0 obj <<
+/Type /Page
+/Contents 4711 0 R
+/Resources 4709 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4689 0 R
+/Annots [ 4713 0 R 4714 0 R 4715 0 R 4717 0 R 4719 0 R ]
+>> endobj
+4713 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [265.68 457.112 479.579 469.105]
+/Rect [238.407 752.227 452.306 764.219]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://iplanet.netscape.com/directory)>>
>> endobj
-4446 0 obj <<
+4714 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [161.013 424.339 303.763 436.029]
+/Rect [133.74 692.355 276.49 704.045]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.unav.es/cti/ldap-smb/ldap-smb-3-howto.html)>>
>> endobj
-4447 0 obj <<
+4715 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [290.138 410.79 335.01 422.48]
+/Rect [266.863 665.257 311.734 676.946]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.idealx.org/)>>
>> endobj
-4449 0 obj <<
+4717 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [405.626 307.184 509.276 318.874]
+/Rect [216.195 534.553 321.127 546.242]
/Subtype /Link
/A << /S /GoTo /D (bugreport) >>
>> endobj
-4451 0 obj <<
+4719 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [232.649 62.109 313.884 73.799]
+/Rect [429.952 221.732 511.188 233.421]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jerry@samba.org)>>
>> endobj
-4440 0 obj <<
-/D [4438 0 R /XYZ 85.039 786.531 null]
+4712 0 obj <<
+/D [4710 0 R /XYZ 85.039 786.531 null]
>> endobj
-642 0 obj <<
-/D [4438 0 R /XYZ 85.039 382.972 null]
+670 0 obj <<
+/D [4710 0 R /XYZ 85.039 637.439 null]
>> endobj
-4448 0 obj <<
-/D [4438 0 R /XYZ 85.039 362.378 null]
+4716 0 obj <<
+/D [4710 0 R /XYZ 85.039 603.295 null]
>> endobj
-646 0 obj <<
-/D [4438 0 R /XYZ 85.039 292.916 null]
+674 0 obj <<
+/D [4710 0 R /XYZ 85.039 520.284 null]
>> endobj
-4450 0 obj <<
-/D [4438 0 R /XYZ 85.039 272.321 null]
+4718 0 obj <<
+/D [4710 0 R /XYZ 85.039 486.14 null]
>> endobj
-4437 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R /F14 2895 0 R /F20 2865 0 R >>
-/XObject << /Im1 3957 0 R >>
+4709 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F35 2980 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4454 0 obj <<
-/Length 2550
+4722 0 obj <<
+/Length 1714
/Filter /FlateDecode
>>
stream
-xڥY[o۸~ϯ0Ї@BӴMѓI\
-
-g|"jIMU Ȕ"&m1nm]dYW 2ʭ5-CNEزg"}뷫Q,kF5V~f;Ћ(uI;ǵ(mA~[›NCN.o],ݜrk4&ʈCWcO,֚Lڌc gHiY>S 1r9#C<7Z<A a\Ά'\)R66zTKhREJe&;q
-Nn<7ψ ˔X5z2
-4CVn^u[<OD 8CZͷ@+< o/<߉nڛ+rUFZfNnJO$%QxP8w wIKC^Ye2xʗ
-#NiL6' .:4BcG @4^u9߀.k%H 2 /qq|DJ1qkЏl8 LPcդ?LZS !@Ymݏr`D026 6( HJbosu?vco$:Csk k;JK
-MYa_V}'&. \IJz-d^ 2p "j
-ړ%5bx빯*_Ov.uL-
-0 빫.Twj`_CA1MY&deesFJoRaVv^To_"9$ʹg;KIl,)3ס9N%6Ҥ?^F*
-<3Gs Ӄ+ZݫϷx)N7ŸhTE
-+w<-փ&ïi3ZYIf^L6jނ_Б
+xڭX[oH~ԇ`\uSunJ+
+vb\ɿsLbt/*s|3؞ZgOϴpKsiX"1@zx-eV8]o{;ezrN>/~q6w]װms69WqzSٰzkp攱ƅ9܀u u1_iX-~<+f[oԔƊ⹁iUlo*g.OU&38Ɯr*pLY6+ #|< vݴYpeb6pHVWk>.ѶasuuePEw*4!eRZ-9@w uTXX-Y.- 3ŗ&luԴ5
+Q-<GDehtaht$5FRA
+_B_Vc! řoà2g1\zRkPhey\F*^KR ‰B ^n-I/1B#
+Q߆( $"S4F۔[p:Ep%<:% {aH+;$$9-ELj61!A DNk7ۣAɱ' [iN.31g* و 5ΆΠy35,mP.޸CB5UWe xF\m@\Ym(ȓZʂMMһ9y)ud9Q
+bP[@]}I9SdtLh(QBd" 
+Ț&{*}u_®3K칡 F"}OK74%j 5\y"E JR1Lr/,\('g,<6{|ěg}X</o߾WȯzJF~rh*M Os]Ŷ9Ȩ>O%gnȇʞ\P4ǚZHԧy9*Jvw9(woR9O_̑$~ָ`"܃'B`uq 7L;*7xUi#4Јam,tMy~Ty
+TF
+ Чj{"D4YxtjV#q\sid"H:s,!oY3zks/;7
+08I9}0>XtFendstream
endobj
-4453 0 obj <<
+4721 0 obj <<
/Type /Page
-/Contents 4454 0 R
-/Resources 4452 0 R
+/Contents 4722 0 R
+/Resources 4720 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4426 0 R
+/Parent 4689 0 R
>> endobj
-4455 0 obj <<
-/D [4453 0 R /XYZ 85.039 786.531 null]
+4723 0 obj <<
+/D [4721 0 R /XYZ 85.039 786.531 null]
>> endobj
-650 0 obj <<
-/D [4453 0 R /XYZ 85.039 562.26 null]
+678 0 obj <<
+/D [4721 0 R /XYZ 85.039 724.851 null]
>> endobj
-4456 0 obj <<
-/D [4453 0 R /XYZ 85.039 541.666 null]
+4724 0 obj <<
+/D [4721 0 R /XYZ 85.039 690.707 null]
>> endobj
-4452 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+4720 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4459 0 obj <<
-/Length 1310
+4727 0 obj <<
+/Length 1146
/Filter /FlateDecode
>>
stream
-xڥW_O8杻/DRINJ--Mܒ$.N7c;EVloxƥԊxF#7=b-as b.u6 .GEؚ-,fuz;;ٔ}' #? w|jr}
-gϮn&zo;nŴcw1?cbK^YkK*z~แuޛޞ|KkuÑ; E6^ON0 lLTjUZ Y*uŊպd>Qò2OZ(J I^U?v|2K}JUm&}gu#.5e"z+lhISBfUt$i`eFg)^i,0Z$Om<;m'gs. =IcFpPp*x"& :nH2+ܨ)]Jޭ;J]vR`M^|P|pIwaƞ6|.9n*ymJH+ dϱl4ͱ<"Vcmu2;f}eTT9[d1MD;RRAI/+~%*k"OqRJ5-@=`w&L@>L S2JcL_^'j7UISՈEBQ/r국IG㻀Ǐ@0X9_:4550}|o9SV9ct^MB;$n?F5T1Q{OaPKS$ Shv(WWzkuJ5}歖H1hZo%.@%8(Q[
+xڥVKS8WSE۲*@`)&0$fJ?-~JCv
+iVY.yVE89yV\k;zA dœ{+><׉Ț/wDã5O/ƘyN0Y틋ۇwzz/}vCfϯo77
+mȥh2e"W^;`0'BI*Ԕ|"MZ@KQ{!Yb=îFiTGTgX/bXgbӪ`IߨN, ^1+YVQQ)i xF }B.~P|&Q 0S eb(U<LT9NGBj iD<t)) c9u8D_h1X ԊU@\ ;TD(uo'F:nc
+ABeʆ1Tn$1Bl
+aakAmoҽ#Q]Nr\42.̀;5HԕUݞvTk,q/$=YFҮqA^V1(. 0Y̟.Vy3"/  SkXtn]:ص9DP1N횖D䁢ɤޒn*O:n?-C|u[Qf؁ݸQVH*Ri^$ck3LOF/Zu`2Vq&zgtum{}F,N4NT*ݠWsn]zfc7%_d/3| -Bd. VQ─[ȸ4}g֙vFSNL*xM,ZyivY);YBQSӪr~:]fAloe@$yjfdi̡g^-Ɲu>Z!'ϧ/t~;#_n}x[|Dendstream
endobj
-4458 0 obj <<
+4726 0 obj <<
/Type /Page
-/Contents 4459 0 R
-/Resources 4457 0 R
+/Contents 4727 0 R
+/Resources 4725 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4426 0 R
+/Parent 4689 0 R
>> endobj
-4460 0 obj <<
-/D [4458 0 R /XYZ 85.039 786.531 null]
+4728 0 obj <<
+/D [4726 0 R /XYZ 85.039 786.531 null]
>> endobj
-654 0 obj <<
-/D [4458 0 R /XYZ 85.039 417.524 null]
+682 0 obj <<
+/D [4726 0 R /XYZ 85.039 458.172 null]
>> endobj
-4461 0 obj <<
-/D [4458 0 R /XYZ 85.039 396.93 null]
+4729 0 obj <<
+/D [4726 0 R /XYZ 85.039 424.028 null]
>> endobj
-4457 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R >>
+4725 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4464 0 obj <<
-/Length 1954
+4732 0 obj <<
+/Length 1980
/Filter /FlateDecode
>>
stream
-xYK۸W9PC
-/ ׺/ n8\cn#zxxwYzYg囫OKGJisΖNFRD˗a~5N}5DA
-y WKxVj~xx $
-mk dYDZU.<_2ߓX ͳhՌ'&BHE7@36HKT*-y]=O]ZUB=8 ~z%]R5]S|p?Tו*>E6^Y%ʒ}wǏ>sܾ͚[XuԬj꿉ǯqwXAݬ{]cc܍BkFZD`#"RdD
-\5N*,%?݉{_)q#rUYv}GH|q -nZ\uHg \Łafڲ56bP I]\Rp
-ԡR+"2L]oRWhΰZNX߼}M܃ Ciڜ
-ox_]mT`d$"/`_|7Uڱ49݀KZw4ނdf:I NAܳ{h=
-h}xZ{Ҽ"Jo{ef6gf~-)ssxr]|8LrA D#M0}"t;sY,Dȸ8:K?f>zLt1&dGra,.<CaA1ABeHřű$h%=-oKn uJLSnL^ζ:v5ߵW(&`@r B"ݸ pBXT&a{t}fMO=CI10"oc);r&>PyxɺuƸذA@hb ?
-k{:hrs#--bF8q_,DȞR . y<W)C1Y3p2k+%wPM, 4P$B<& ʓwUm[s+f3X$j6~eMKӪ1~`äE Eȶan4[WxѰI }QhZ܈6l*ѩ0E] X7Y,8>Fn
-_UQtpCxZrEL
-wItܑ(>/RA2g*6m7Ilh d@<`3}g>Cxsu.ey2=h
+xڥXK6 Wh=5#,e&l$&-^Ht\^dN3d{^@<Y$Փ
+v7Zߗp7HRٳ2:YNVW*;s5IN` (imNjv>0؅+~A lESBB~QZ9Z%
+t,=hF)]IGs#nCco걗N4BG@ wLodS;鵖dS,G\)6{aURXR†*s;l"-Q.h^'.9XKSXan؝]St=na(B.jKp•(Ľ3AQn}2|E敫5N
+:<=_s ILh6_Seʳw"k <277lPWDt.l#R$l $JS\76XE".Asa1{@ێ27gFpy0<ףfi;6Pc*y 5=|ڎmVOJhYY(Uck'Gx
+il]nB~!lvI헻jGҞr-ەq,l711e c-0
+W( lt cf;.j̲|-Mb!JI¥t\<SȪUhcYN=\۸6h٣jԨ#l"v/IhMT!QjeX"rQtv>\fGhC3J;tBzȐXnz*"X41W63Ί &=ܺЏЌF>;w}g.%; 5僉%wVli4L; u' 1pT
endobj
-4463 0 obj <<
+4731 0 obj <<
/Type /Page
-/Contents 4464 0 R
-/Resources 4462 0 R
+/Contents 4732 0 R
+/Resources 4730 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4426 0 R
-/Annots [ 4467 0 R 4468 0 R 4469 0 R 4470 0 R 4471 0 R 4472 0 R 4473 0 R 4474 0 R 4475 0 R 4476 0 R ]
->> endobj
-4467 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 293.701 286.551 305.391]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#PASSDBBACKEND)>>
->> endobj
-4468 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 280.152 176.46 291.841]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#LDAPSSL)>>
->> endobj
-4469 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 266.603 210.278 278.292]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#LDAPADMINDN)>>
->> endobj
-4470 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 253.054 190.036 264.743]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#LDAPSUFFIX)>>
->> endobj
-4471 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 239.504 187.278 251.194]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#LDAPFILTER)>>
->> endobj
-4472 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 225.955 232.763 237.645]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#LDAPMACHINSUFFIX)>>
->> endobj
-4473 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 212.406 213.157 224.095]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#LDAPUSERSUFFIX)>>
->> endobj
-4474 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 198.857 208.46 210.546]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#LDAPDELETEDN)>>
+/Parent 4736 0 R
>> endobj
-4475 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 185.308 223.49 196.997]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#LDAPPASSWDSYNC)>>
+4733 0 obj <<
+/D [4731 0 R /XYZ 85.039 786.531 null]
>> endobj
-4476 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 171.758 204.975 183.448]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#LDAPTRUSTIDS)>>
+686 0 obj <<
+/D [4731 0 R /XYZ 85.039 328.974 null]
>> endobj
-4465 0 obj <<
-/D [4463 0 R /XYZ 85.039 786.531 null]
+4734 0 obj <<
+/D [4731 0 R /XYZ 85.039 297.686 null]
>> endobj
-658 0 obj <<
-/D [4463 0 R /XYZ 85.039 369.622 null]
+690 0 obj <<
+/D [4731 0 R /XYZ 85.039 133.38 null]
>> endobj
-4466 0 obj <<
-/D [4463 0 R /XYZ 85.039 351.883 null]
+4735 0 obj <<
+/D [4731 0 R /XYZ 85.039 99.236 null]
>> endobj
-4462 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F56 2890 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F14 2895 0 R >>
-/XObject << /Im1 3957 0 R >>
+4730 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F62 4052 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4479 0 obj <<
-/Length 1921
-/Filter /FlateDecode
->>
-stream
-xڥXmoHί@9HؼEڤI䂫Sk`NU3`-gr&xh-uVV5
-<tsQ:ٽe(Z\A*?K5Oj&A| ̹_
-b^/fL@Ls-8u>I < "^~,!mk`O 4T":q)W Ie)<Cz{}ymN [*"u4ڨ
-d)_EPpצ.OA‚X <4U_dŻިkF
-׮Vk sP VQ'~r1g=K؊ݴxEHlN.Ҭd?! ^9MӮ*Hcirʨڂ(DTq\kR{up-̓&Ly,͋ 8e,XV|
-b1
-Oth_^WS;<d".8EVtb\;$ #9<ӗm#E>G
-\an!#U GbcQ}qg\mB@xP,~h+
-4\ WA
-9)23IS !d;~$B.9qMF2J5 t쾲
-_C$R:璇
+4739 0 obj <<
+/Length 2352
+/Filter /FlateDecode
+>>
+stream
+xڭY[o:~0؍ ĊD!Mm\.z ˊV\In,9.
+9 c-i98}sqY_y?TL5?w?-3IYd8adq3aV\n||5t
+s9,1rGNx8>8+9؎R}nFGD-ӎfz鹎GhӮ!H)̀>
+;瀝cgEl\w|~ |WƬo|lOD`xZQ\WJgadzkW98 =,ls^YY?=g͚FIEsmnjpH5i#۴`p,@ r:˿$9:M&*$ '^;>]IZ Noq'naFYe9qLz"m@7ig+Eև90I ,*A-nnx r,Ti7>q|/mҪ>~Ȓfs" k1~;cR T"+@Mҩ'J`ؠD,,U~JF#5Zha4z+P0#7A`Eą "-~Ow]5:,渰lW 6nGKu*<q1ateúqZn+f 1^W4Qق T(A#a6`݄&Gʫcؾ`3"=|;y^.qTa
+I/4Y}ʕ37"n,Q)ys@9ܥX{+u'@ǘ gFL.QX&uL ]V~uA>94mPE!4Y@۩nVde?.ӟgh/xBB 8HbyYK,w
+cmŧ0Ob+VpG]^RKBZvEQV~c(}/2CY7+syCWFad4e"NhFy
+G r/y\rTXB`P-gb*#tK#wC@(=z=j6LDUcM;a-G;DHd1@H g*5n~ʆ
+5*FMm$PHz
+ܔdO~_/T]J3K
+Ny&[ʭ*b.<n1t:"1lCZjFnK !54-oٰě?%>r=Z&b[%Ffyp3mwWWczq YA }rearR Jo ә U^ !17~eWbJszñ,`BB;PbUMQQ"z'9hY!/vIgR08.vk
+urSg>S^<
+~HZm@r 0T]9Gݿ\i-5j'Zr
+r#exʼ,wm6{bT8Ld?*lL;t)@2k PB-#\
+#pMmfceqbE McDOcI+x~=h4+ߦj0&W >hޙ3S\ (| x&)#!D+H^ޫw3 }%@U\-PQ"#Xw"%?OBk XuCV/θHSzy>==Bg$h:- DgD'`6cV?NhVWk G%P cӳca >02(O¶嘑saJ
+%[YNduDW֮xZ6 ,C_qdǦ^^yQrø\P?Erkak{cC=^ _Mendstream
endobj
-4478 0 obj <<
+4738 0 obj <<
/Type /Page
-/Contents 4479 0 R
-/Resources 4477 0 R
+/Contents 4739 0 R
+/Resources 4737 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4482 0 R
+/Parent 4736 0 R
>> endobj
-4480 0 obj <<
-/D [4478 0 R /XYZ 85.039 786.531 null]
+4740 0 obj <<
+/D [4738 0 R /XYZ 85.039 786.531 null]
>> endobj
-662 0 obj <<
-/D [4478 0 R /XYZ 85.039 252.611 null]
+4741 0 obj <<
+/D [4738 0 R /XYZ 289.523 769.79 null]
>> endobj
-4481 0 obj <<
-/D [4478 0 R /XYZ 85.039 229.895 null]
+4742 0 obj <<
+/D [4738 0 R /XYZ 85.039 322.14 null]
>> endobj
-4477 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F20 2865 0 R /F15 2876 0 R >>
+694 0 obj <<
+/D [4738 0 R /XYZ 85.039 162.479 null]
+>> endobj
+4743 0 obj <<
+/D [4738 0 R /XYZ 85.039 128.941 null]
+>> endobj
+4737 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4485 0 obj <<
-/Length 3306
+4746 0 obj <<
+/Length 2956
/Filter /FlateDecode
>>
stream
-xZYF~_!8X
-F l^a#vތ"G4L(R&o]M$"  Vu|U5%,N"7 lfJ 7Ӯ8W)Mt\2yOER|ljs;zy
-\l87 1,qhW/O (@>^7ˁ<7Hڞta:~uuwa3^5qXMpƏ]?d|oBJ …B:wrc{l%y9O (v:F>˶US, '|YVW
-'X]>-$p{|܏)${ w,m-8v8j̡_v+CFW
-nx1%ēZ2:{BDmR!]DLPJwڲXiK-t &[>v>6xLꝊ
-cx̸ ") 0Fda$lx}֝qt ﬦ
-_JFB$=_7 . PڷdTJb-Q(@ Z3aؿ
->:%:D2v᭾\TE
+xڥYoFݿBHQZD #\;i\7b}(J"vf4(y4pwø$?Id;7d '^10:dxRh2_a]z6o=qb]Mĺ9ϸu oo ^` `oOCL o֎ds<W׸,[cJQ3߱$80 ֊ \CqځOj_:@vDPQ=پQZ<- X4P[m /
+hXyIbOj'Y! vg1,z upY߷\ ^?OʪW A;ԊI\h_a !pǎ Aș&MIԎ^gا u|~
+<~N.Gz.X]);yʶ3 B/mAŶJb]GvU/l+JSm8*4z>0ɇ쑤Rr
+ax|g#sj׭;A "r$A$JRhK!ǡ%څ
+k
+Z岤0cE:7 (հ&@nA1]b೬]ߒW>Y] m._ʯ
+6ݍy5葉
+QxsTT͇ـA
+ g)(SGpBF#\2Ҏ̲LsGͲn@/(ޘe
+kմ!nx8Ipȷr1CVR $YXm6!JgQ<O$^I9qĀ9}ի޺=GP_RP5)ji6߫Ev8ΊlY%9ZC"w͚\1oKd9%wھsssFnzS3wrP۠䁃q 7.g,=o 375pN5`Psspl{?NvTomnFݜj4(S6|i,w45-HR}Vþ6^>đU6ثcOO6vK~GY_x VO13'űw:ys52~|Z
endobj
-4484 0 obj <<
+4745 0 obj <<
/Type /Page
-/Contents 4485 0 R
-/Resources 4483 0 R
+/Contents 4746 0 R
+/Resources 4744 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4482 0 R
-/Annots [ 4488 0 R 4490 0 R ]
+/Parent 4736 0 R
+/Annots [ 4748 0 R 4750 0 R ]
>> endobj
-4488 0 obj <<
+4748 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [362.773 616.958 512.306 629.86]
+/Rect [226.195 654.697 375.4 666.386]
/Subtype /Link
/A << /S /GoTo /D (passdb) >>
>> endobj
-4490 0 obj <<
+4750 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [234.557 293.576 421.201 306.478]
+/Rect [149.643 262.963 341.857 275.865]
/Subtype /Link
/A << /S /GoTo /D (samba-pdc) >>
>> endobj
-4486 0 obj <<
-/D [4484 0 R /XYZ 85.039 786.531 null]
->> endobj
-666 0 obj <<
-/D [4484 0 R /XYZ 85.039 766.606 null]
->> endobj
-4487 0 obj <<
-/D [4484 0 R /XYZ 85.039 746.481 null]
+4747 0 obj <<
+/D [4745 0 R /XYZ 85.039 786.531 null]
>> endobj
-670 0 obj <<
-/D [4484 0 R /XYZ 85.039 358.542 null]
+698 0 obj <<
+/D [4745 0 R /XYZ 85.039 368.576 null]
>> endobj
-4489 0 obj <<
-/D [4484 0 R /XYZ 85.039 335.826 null]
+4749 0 obj <<
+/D [4745 0 R /XYZ 85.039 332.311 null]
>> endobj
-4483 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R /F66 3242 0 R /F35 2880 0 R >>
+4744 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F58 3365 0 R /F15 2976 0 R /F35 2980 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4493 0 obj <<
-/Length 1393
-/Filter /FlateDecode
->>
-stream
-xڭWYo8~
-/]hlb[,j%3PӤ]g8>Cxq9G/G\$]{SO)qBweF osnQk4zfa]Lqk5ݍ{š#axigi748*w'ҏA7=0oaMuOqoެ^9a |8'n#^ NrEhMuVN|j+ϚuHXꝲ9J!_t^ș\HmYVEPF!p6PÆ
-U%(fMsX. !EmI-UhHް4f"5WQR}ug,Ui|DpUR k\G訋)? X$8$q$1ڤ&jlͫ"QEWE&^*(ӔbZP^ʪڪ2n~0F! =
-1)wtw(G+/F D2]rTjܜl}벐0d< A_
-^T1p[ʪ%u{R&.TKuk Q$GhpU~r"xu<у;ۍ,E4V‡է wWxA(BA]
-ԊH/AcAh:@5O,9?%Az2zoJ~?s*)O|OT%NjEt_e٬I0NϊZldYsb Y~,OϪߊPgeguq:%*wpR]t=YTܐ;{['@3 N0P4#a <Z*O+YcUa08m$*>cMJ3 B,\PD; ,fGma6>F:1<zE' E\ּnmI @
-}ThIlz(9`XzNz~PUN4'm; *Lg;7F z шdڃt(A^5]nɶ7~t]X8~n
-CqKMP5 ڥhyPI{:}݌0p
-H V0DSsG+|t&%Y>z?Eגendstream
+4753 0 obj <<
+/Length 3767
+/Filter /FlateDecode
+>>
+stream
+x\[s۶~Ҍ7^2rN&NNLs&-It$Nō E2ihک)X,o?.Q
+n~NOdobk -1e;l.J"o4 FSJ$8
+4:ըE&LJr&,dބR$
+G9ռQ_PՖ!aaͩ`AD8Җ9вNS6T`p/'JW:i2/vz¢-K ϋf’q?yJG xr#(!\v`
+a~)q_aI#(  pD~M:ŨJOt]JE ,&A@D@g$57II_տ5vq)
+EVXIɚRcٕ淇twk ktOtYl-Ltg&X{nym*
+l rmnxC(Rq )Hjz첏tc|o K-n=Џ23Z*0t`L'2xfŽCe܁wpYCAB xgyb
+Z;*C+9TyAs N`"6cZ CaxNJ;d)Lq{_Ϸ9vg"kb
+oOt0X<D YglzP0u;M>)%1⾮tw<Zp¡
+]j\vx֕9WlM;>pZ9D[rp6v;~2޻5psϬY< 
+MBG+e_MicGIR7ZBELS-ބ: +gd g4>7woPHbSʬ0z-R]va[aKܫn!w1xx_C]\˜]돳Jw. %0MhS,u3tѶ=?i0!@${!,xi"kϿr
+Bս73ma5/GYvݨft1CH,|U?[u:UCCOmn
+⨦m@9njoXb#hbnu#^]Abu3`$;qsމpWi!
+!@ث7 ?u<ԃmucd S0s|d &D 8`
+ <D ~4|Nam[ٗ|³4ŏ+T VMxT3/:-\.gt.3~?Дp"7:5R9ybga `KaHPatiD
+%4e0ԇKyrQT2R ЗiTU媡JdKpdJto
+kk)=eKPsT35aUsMͭ)Z[6C=**]{gZ.Π6BunZV܃}5QsՌ%̼ %ҖӝEP1ݯj̈7 B]ȔzZDq[}z,p^;QÂC$,(TFJDYe2Vh<|+&\%#vS .,ރ-qw½2%l*cZiq~&.OnvUh.15Ί_ "o^ ~kpumr6/6OAN<gCV<Sl5'`Ka=ۅG,4 K(:咿8ZM zvyYH` ݵG<N%xS&Dpp9ؔFqSd -]z&%A/f lƟ .K*qq3s4QBTDzMEtqg6/W)M/zһ4-*< =:{X"x˿? {FM00ņ}$nD>+.@[s>yXyՖev
+dip,P}|۴.~9%,Ř{z8uᚬb6ƆvWuIwcx)V3mtƒDƼE[#endstream
endobj
-4492 0 obj <<
+4752 0 obj <<
/Type /Page
-/Contents 4493 0 R
-/Resources 4491 0 R
+/Contents 4753 0 R
+/Resources 4751 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4482 0 R
+/Parent 4736 0 R
>> endobj
-4494 0 obj <<
-/D [4492 0 R /XYZ 85.039 786.531 null]
+4754 0 obj <<
+/D [4752 0 R /XYZ 85.039 786.531 null]
>> endobj
-674 0 obj <<
-/D [4492 0 R /XYZ 85.039 766.606 null]
+4755 0 obj <<
+/D [4752 0 R /XYZ 85.039 763.817 null]
>> endobj
-4495 0 obj <<
-/D [4492 0 R /XYZ 85.039 746.481 null]
+4756 0 obj <<
+/D [4752 0 R /XYZ 207.409 769.184 null]
>> endobj
-678 0 obj <<
-/D [4492 0 R /XYZ 85.039 141.755 null]
+702 0 obj <<
+/D [4752 0 R /XYZ 85.039 399.573 null]
>> endobj
-4496 0 obj <<
-/D [4492 0 R /XYZ 85.039 119.039 null]
+4757 0 obj <<
+/D [4752 0 R /XYZ 85.039 366.035 null]
>> endobj
-4491 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+4751 0 obj <<
+/Font << /F56 3230 0 R /F62 4052 0 R /F15 2976 0 R /F41 2998 0 R /F20 2965 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4499 0 obj <<
-/Length 3241
+4760 0 obj <<
+/Length 2067
/Filter /FlateDecode
>>
stream
-xڽZ[۶~_2PkE<l&ivH [Z[,9\w%:-XQCrHgjŁ,C7lfkJof\/ 뛻ס)MdvwOC΋=w|;_DQ<yOo87o^#
-zc߹y^bЌsϿ/`- |u;xիў5|7`]yij=W%l{e /Տ=335q`=7Ԙ5ţ <}x(*pu1Sޱ*f.B'mrlgwV0z-[!.m[p`d0kO;]'~eGUX =v:2 ^k#sMddZeϙn
-<)YDn)xx{zkgzӊ$%3ЮjZ7XK}I7ml0Џr!ܧJ?I|9!L ϊ@'5}hnOn|,\"f3cm:HX;%ggq3"y;i10mKV]@k5`u=
-=T*bEymӊЉ),]σ©u4"eMibHKx?~p\Z2vG+N%AT5? Iۼ0"S9,wEHKKf
-m17p~&o9c#oK|eab*ԩ,kz(5.Tz]W-h7~eC7yV3_ǀۢm#
-L'nU=qb+-H
-cO
-}hE]GB 28ˎrr08"[ޝ |$0a˴/*.*կX{[h@|0(p AA 6Z/@JC@ž7FÊ_:q*'͈Q8 ze׹6)̓o*ehehOIg1 )R`5sg <VY9ϒϼTcBn "ȰFmUe&|6m%|̰0D1##+]>K/<6lM꠽*yf~<0Q?{|)}EJ
-9А.eq tu<OU7VBmTq/m_ˏ5Bqd ݪ@95|
- V/%-
-2G6j;i׿DA< x1}- ywdLj^ !g]p\+i|S;a
-zt&'Һ-$܁?˚pȄV0>DF]4v=]AI8_$m1646ܒ\" $ҷHO+G@ ߣ3l9QߨM&fg/kld?a :t!\vnDr+'3[9Ei=|(Ѩ6HDxN )SG4.>2rl$yT1*JL%GGu)?1D1w\9KUp} ea1,S1ǐL-"mjcG%pw}3 Jܲqu"Wm!"5sNmMT>*XWl9t+q
-omCHKoG#eK\ebx1>27,' jҌ.7p |Jܲ a(!I!ؗ٣ۆv #8^Y^sOn$6䦃o&vvT6Ń:D<@Wq
-u s3]m8NNtj~}DZ\X&1}q<H_,M+ aSo2;8TЖU0I!~+`nd-˒ !?v~Ӎ D S拿b4g pPendstream
+xڭX[۶~_GJ4h<hmF\I!)[eopN g>]b?iEHD gԛsc :<[ze#'Dš7|~x|B12HǟFH[zx?`@|kGH3ƛdzg&LD/ԛ~<D[L*A9?}Ȳ4S}FQBšUXQN8g^$9 2)3W2I7v\]"OLo_:UYM8`+6rdܕӲeɤ=^!pK$=:^ĝTǔS.ooۋkq)TLRyss S͓j*k'm@\( D,U0qh$.KU EYg^h送7L 7y2m} nY՞WE➧_肘p\d<,i8cJ>.ێ;/Y1yN?gsR˗Nq&#E(CcL^?e"x'VniQQ5K
+b֭p5<qځW~Y7;̯a:ך2a]H ̄Wё*&:":<rz"$e$T
+W_*N XXǯ!XPJ{qPQUg6/ y56[q<'I2fc~p CRElS|xd
+& PIa4'.Y (dNV0xy3w*:wK%Dj+7{kܱui k .I A`]Xeyn!'y pF14o
endobj
-4498 0 obj <<
+4759 0 obj <<
/Type /Page
-/Contents 4499 0 R
-/Resources 4497 0 R
+/Contents 4760 0 R
+/Resources 4758 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4482 0 R
-/Annots [ 4501 0 R ]
+/Parent 4736 0 R
>> endobj
-4501 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [306.528 668.246 350.4 679.935]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#LDAPPASSWDSYNC)>>
->> endobj
-4500 0 obj <<
-/D [4498 0 R /XYZ 85.039 786.531 null]
->> endobj
-682 0 obj <<
-/D [4498 0 R /XYZ 85.039 653.977 null]
->> endobj
-4502 0 obj <<
-/D [4498 0 R /XYZ 85.039 632.78 null]
+4761 0 obj <<
+/D [4759 0 R /XYZ 85.039 786.531 null]
>> endobj
-686 0 obj <<
-/D [4498 0 R /XYZ 85.039 522.874 null]
+706 0 obj <<
+/D [4759 0 R /XYZ 85.039 428.751 null]
>> endobj
-4503 0 obj <<
-/D [4498 0 R /XYZ 85.039 502.28 null]
+4762 0 obj <<
+/D [4759 0 R /XYZ 85.039 392.486 null]
>> endobj
-690 0 obj <<
-/D [4498 0 R /XYZ 85.039 402.428 null]
+710 0 obj <<
+/D [4759 0 R /XYZ 85.039 168.005 null]
>> endobj
-4504 0 obj <<
-/D [4498 0 R /XYZ 85.039 382.136 null]
+4763 0 obj <<
+/D [4759 0 R /XYZ 85.039 133.259 null]
>> endobj
-4497 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im2 4150 0 R >>
+4758 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F20 2965 0 R /F15 2976 0 R /F36 4189 0 R /F37 4192 0 R /F66 4195 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4507 0 obj <<
-/Length 2309
+4766 0 obj <<
+/Length 2789
/Filter /FlateDecode
>>
stream
-xڽY[o6~ϯE6@;E&i(0RlHVF&_Bʒ-'Sl`,~FN\''/\O(UqNְ4D 7qwWHWn<Y<"\_gs#0r.f^\^,pE;np׏3 rnoxퟸsY9Og=Z@!S_>}v')ә+TM2'ř2^5"Re,bB
-(@'~isG :v-w(ctSMl<&5LO3:%W5󈩲ݪzylۄ;qŹғ
- N8_p[ O(גuVo6)x1G(gA&< K9oJ ʬu˃U;(ޡvXs vY,d'zGDS/blJ3)I=ð1YEڅo7SXܦݕ&
-|(ߴͪH0У5Y\gu1aXxpE?ΧDpЋ;;&A(`YDj-"w_60rP|èO `]a re]q/XOrm2Yx5Q Ų2X]In*dlcCA
-0I TB5U
-j}{_U{
-\A]*gJ:z-}DKi`'74O J0g:BLwILWV#J$z `Z~|Dnhi qz:~Бvœ-KX5[C@%
-|~@
+xZY8~_ l>$d3fbAm!:HI>Z4Y,V_K$I"r\;ו3K2м_]‰E'm'E3tY󩊽/f#ƻyTh7< @8t4W杜M(ՇOdz ēhB&dse-ջ :e@"Udp*A BUiE^=2l^T?,h0 iY.>7m&9~)v
+Wq2KD6ϨV-%3ikXsC0iɝ%T-o&Ѽ #mlrG:ު"8e%oB ֏UmhȘ*kӼࡇj- w On{w9kP
+|>?UЩTEd;w )XV$ؤnpKkHzZA:kZtV]7W{Soq'BOȻUnUًݬɉSwZlO?3m?>[17P5:*` \G֪L|xxlc HR !5c& I / :Cad
+M)1 Y{Q
+b?Ͷ6/SKr͖a57_A&G\9Z\eumA,ηخa. LΓ1ޟTaCFׯA|( 9!j6m^R
+&4B|fkNut~ٺTSm_wTt~R^2b璧Al{_Em@=E y"ct[gwm'`<좁c7g3)iQvkRLloI8(
+tPq<`\3SB3Q]יa׊8k'g ";`d9uV SQO`]5~ir9DzN %1@%L
+G?8^cQ&JE݊'sf"ƪm&wVNx0y5m@\-EwkoԴc =xB
+}dŇj૎`O=!>joӃP0pڳ#Q]NIhǓN ܆SMh߷n+Ұ|]ȿ!ab@atJ#uBH˕ha
+ƗIpk_<|
+.
+|v(dS
+[?)@k#"#1+ᙝuuzt;.qɭ$ o^e)ۃדfjb|^B#D  R/@<)w^/t /8'v .!ό~(b+ V%Yz_=u.VJH=`]ñݿ?K81҉݇ÔuR& 5qpˑm06t=ޤ \ݺ{__/L+-v ciEth[4X%noaϔq`A€RC _BŜw*euI(v
+vdr?A 1hI^+긾/:jzЙU"[֜Y Ί ?7a8HJ`U;~, p _iy!gLj)CX:+n¾~&о6_FBͣuRp,uRu_nX Z||eUY<3:޽vњ|tI:h֠(kf9V=Ye4I $4|³+ۃ!$OW7R^3Fꃁl6Fs
endobj
-4506 0 obj <<
+4765 0 obj <<
/Type /Page
-/Contents 4507 0 R
-/Resources 4505 0 R
+/Contents 4766 0 R
+/Resources 4764 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4482 0 R
->> endobj
-4508 0 obj <<
-/D [4506 0 R /XYZ 85.039 786.531 null]
->> endobj
-694 0 obj <<
-/D [4506 0 R /XYZ 85.039 766.606 null]
->> endobj
-4509 0 obj <<
-/D [4506 0 R /XYZ 85.039 746.481 null]
->> endobj
-698 0 obj <<
-/D [4506 0 R /XYZ 85.039 649.314 null]
->> endobj
-4510 0 obj <<
-/D [4506 0 R /XYZ 85.039 629.326 null]
->> endobj
-702 0 obj <<
-/D [4506 0 R /XYZ 85.039 546.315 null]
+/Parent 4736 0 R
>> endobj
-4427 0 obj <<
-/D [4506 0 R /XYZ 85.039 527.443 null]
+4767 0 obj <<
+/D [4765 0 R /XYZ 85.039 786.531 null]
>> endobj
-706 0 obj <<
-/D [4506 0 R /XYZ 85.039 441.136 null]
+714 0 obj <<
+/D [4765 0 R /XYZ 85.039 697.613 null]
>> endobj
-4511 0 obj <<
-/D [4506 0 R /XYZ 85.039 414.522 null]
+4768 0 obj <<
+/D [4765 0 R /XYZ 85.039 663.47 null]
>> endobj
-710 0 obj <<
-/D [4506 0 R /XYZ 85.039 414.522 null]
+718 0 obj <<
+/D [4765 0 R /XYZ 85.039 525.394 null]
>> endobj
-4512 0 obj <<
-/D [4506 0 R /XYZ 85.039 391.204 null]
+4769 0 obj <<
+/D [4765 0 R /XYZ 85.039 489.129 null]
>> endobj
-714 0 obj <<
-/D [4506 0 R /XYZ 85.039 351.165 null]
+4770 0 obj <<
+/D [4765 0 R /XYZ 85.039 311.188 null]
>> endobj
-4513 0 obj <<
-/D [4506 0 R /XYZ 85.039 327.847 null]
+4771 0 obj <<
+/D [4765 0 R /XYZ 221.091 317.161 null]
>> endobj
-4505 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F66 3242 0 R >>
+4764 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R /F62 4052 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4516 0 obj <<
-/Length 687
+4774 0 obj <<
+/Length 3596
/Filter /FlateDecode
>>
stream
-xڥTKS0W<U=m3=ZZ(883ﮤxBr}|aLS&Mf Ւ:`<_,T%]gy"Q!g0s gwG>b)%FqfdѣnnG$͵}F1:bL
- rRL}l"fWDNjya[ 0.$su}yvk7hȆQ  {Y6>Rn* ލķ{-w
-` 6Ipo~)*
+x\n#7}W% 6MeLf6^$=]$yX-,9of%4\@`&OEHZVZъHN78>gEy>;*ZS6cj"'?|o8Jp4z7xo;Lj>{541_~5A+j?^$sDϿ$YM]jLp&$'Rp<?:1މ}R$Dj*_ЊDjaR#Xo3O]r}XEDg%2L aur0#<mqu[7~١
+V3Տߺ.-46ćv}vr>_<b^ۮG#& >Y,&2 l_=xAHIc
+D͗w:ۑ734~?&-RԌj,@,~M? `t Si- dH!,ğܓFC?0B-w
+<<5lOl7EaMѧ}r}"Ч
+k E0C5Aai*iP@LY;f/ؖ1c(Zp^ހgzp\jUǜm%$:1[6Ԃ&P+[Vc\Wۨ\d`EsE"By( *ږHҵS gmdƠ25r3[T|k9JTa vm ā9P =p7z;m3 #t%D8eK\6n,f_fzl,oU%!sAvuZ=?7Iږ}WH+b5aJ8w-
+ڐW?KP7HR= h`iXjBFXڸru:
+_ p$Ûo._.;eawj C%"6v2<{tӻ J;=Q6@b#jhCu%Нm\Dc$Zy̴G {7iY${D r5H soIʅ<bmK1F ]%:F:F ȡc㪜i@t׏eER-a2csb*\fsjg(7N: 7+AKXc[rK,b(4*klK|{
+0s6YdD$D45|$Ox3[.^8s]m%?% BsS='qO _FOǏ'@ rP/A M .궮>KdSoVw/)r҄NIsT(9tbQsaOӍI3[/敐ū<n*%pyK@!Q1'Y);xK6պhBg&~Qe%hhA?% Z`h!~a{Щ$cK >eǀ NOXJd(bZVKcڡ=Y9 q# "n ȁ91-{[٥W}%
+p2q֖S
+ƫgqAxQפz/(
+:D`oro7J(=Ď3Β<%[Dv"fv2A^<[m*ncBR9-{#G@`n$d$a!0&M'`@cDNsܶj9? (sB-b1^ڢN\xYn()NMҨ!</.51B!T U`j j
+lm$v]d 5slƅj|xܺq~9_H KԐ6,\{ T0!Q3y|O8}6_y3}nkA@e7yK'܃a=ui.sm+P8[u?&Q2)a]/ir<_֮8w
+#ܷF&Z6)[MgpUE|Q5O3l=‶XC#}%NHRA%QKpVuK¡!@뙋wa[J Uqe`rd'oh|A/R fFy]J^7vktq7|\<r^i"۝\0]tÄ'R=oE.*EKU<׹{>Wv)٧\xžˤ\<6uwҵn¼糉3;ZB?X]l2)|YsxA>M^ 3_{+.~1ӧ}mln٦ڎԝd#ZQ1p[E]0s*;BM覽2/8;4vGν<~a#js 7"b=joG:vyM߸D׫VSFPĉв$9,޽`|3`ڲļ_>Zz2~z`Z&۱_Ľ??hSF, `=7_L`endstream
endobj
-4515 0 obj <<
+4773 0 obj <<
/Type /Page
-/Contents 4516 0 R
-/Resources 4514 0 R
+/Contents 4774 0 R
+/Resources 4772 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4482 0 R
+/Parent 4779 0 R
>> endobj
-4517 0 obj <<
-/D [4515 0 R /XYZ 85.039 786.531 null]
+4775 0 obj <<
+/D [4773 0 R /XYZ 85.039 786.531 null]
>> endobj
-718 0 obj <<
-/D [4515 0 R /XYZ 85.039 766.606 null]
+4776 0 obj <<
+/D [4773 0 R /XYZ 85.039 738.175 null]
>> endobj
-4518 0 obj <<
-/D [4515 0 R /XYZ 85.039 748.602 null]
+4777 0 obj <<
+/D [4773 0 R /XYZ 228.576 744.149 null]
>> endobj
-4514 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R >>
+722 0 obj <<
+/D [4773 0 R /XYZ 85.039 216.086 null]
+>> endobj
+4778 0 obj <<
+/D [4773 0 R /XYZ 85.039 181.942 null]
+>> endobj
+4772 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4521 0 obj <<
-/Length 2905
+4782 0 obj <<
+/Length 2070
/Filter /FlateDecode
>>
stream
-xn۸=_a@E-MmƋ-l˱7Jrsg.$۴E jh"z$D,og@=:©gó_^hio8%w@J qx0..f3ʻz޾0Hox ] )oOϞ;4 D>}&@g/Ӥwρ/Ҵ<S#% S=^8B p8vrg;-4 ];EJ'EK,~lkJb先:+" weޭ;TЮ[8.Ѧ«^=yʖ0F
-A̒.f-ﲪ+-A Р9-=NgcLh
-@%2 Q#Z%F"f QEHSPzQbhukgBe^Ȋ$;C+^XLY⚰Η٢KBDT"+WOrdz6@'TҠK窾tsT::0]F(a`s7˪?"I+.5I
-,I+B*1~jN(ɏ%ɫq|lDN-W~cFFҫK'IqN"V '/qt竱Yg xn%(
-[W#;CЗBf YP:mYhqAl|k B-'זs,`m"~F%@DJEvSԉiqDcX cdjRbH
-: 7Yi%~[F8 %Q
-0 .=_!*NP_Z $
-qr? P߃2³Η'?84QfH-Cu?L 8Y#ƒO1O+\b,8H7Uo bd6}u0D,/e~BCn?9xd:wXhV.|;HD+_Sp'/[iЂ)8lRN0 ͑Ivve7j8g:-J8՞k@,6&t)~epVV'9;/aK`|N204v>2S]dYֿ' O7g "r%?6wҸD&19e*Bz!wŦ`#1[I43f`KE,L>fn“6MU;EKsHʯ}tzCOlb|=u̓#L-A:kPkK`J-ɇ_8X?I/VXôax# {ڭ UAO(s箰<5xiH >IlnieD,?c0ڲ([F%MͿ>\A[ոwQԷ+$2 a= i[Śm WWLmZ4D/W?3=,R=Iy˧  JϸG`_F}Hs[1<4 _ϼXo-XRUi Oo&$oǫYVvN#3%GBfŵ;_ ڋ~cackx{g*l,$#\\!о8{HliҚܫ(V\]|GD:cKvv1߈b:_GmMH1}bLu'Rrk"m*\j Dduۗ.x#CƗFU%q5bE
-m -Т̀fXFJ4)tl4ڌt%QJ "F_Nl`{PW *qrw (N ܈ni8Gp<}1#U?bpΈPA|#`XwNCθvYNts5c5_P
-`Wܲbtr5pw5e8ЇLhFOзmxn:H8mkHm l]N
-eN8E`F)6J?IiI\ưϢL{#({HIu-dat r[2sXt)&GE{˨vF27.vi 9%D+4r;1Y5Ny/OS[8 ۂC6pu O[qI _]o49:\PZeV~,6G&]q徊mb^D8X
-JAhtrWY56DcfUy=>zړb209"b.i1'ltX[HHi6=7s}}tE0cEF`|O~endstream
+xڭXmo_"O"E\氛6^-V#K9I7Bʒ-{ eH<yf(?T2PhOۉ7]/HF<téKn: sۿ?|J)̍عع{8Ǚyxǡϟf>ʙ?<=_qg?\yϳo_'杞=K|P?&_y ,u =='t; :P_L'u{\0UcX OD"eP^'apU F?{նy`)q*]ZVn[pir&-
+Ӧbu=4K9Ȑ91GB{yh/mȩTذ♶bMogfJZnv6%`jt*Ž2ئ9v< VFP9WKi} +eWL 
+*^~\`x~EQT|ܨ@30_>²cXA%!畍!?#uD':k,w[csM~}ئ^ҵXmm#[(Ho=}hݣ7D"[sKdΒ<I7yӇ ,U|;t|Qn}P΂hiQ1oRT/8^b=* Pxv^noSH
+O݉hmqEMLu07/|)
+]ws_/Jn{ E;H'۲g̷Dz;I!ly\οwGr
+u]͔9u6#
+, a3QV8΃4iyejm8}bؒ8e;)e'Jħ)}jDZjӲ#}we6Ŷw0<Q!
+eIc ۈB(UlqȂLSl2cЦZFy%s/D\('D/rL(da
+S{gQdS o(y4Ͱ%w_?&B.W)4[pp/Zga#yxa[z
+.]r
+HzoQ}gߜ4Ѳ՘?}=1r5WwPj% Z/endstream
endobj
-4520 0 obj <<
+4781 0 obj <<
/Type /Page
-/Contents 4521 0 R
-/Resources 4519 0 R
+/Contents 4782 0 R
+/Resources 4780 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4525 0 R
+/Parent 4779 0 R
+/Annots [ 4787 0 R ]
>> endobj
-4522 0 obj <<
-/D [4520 0 R /XYZ 85.039 786.531 null]
+4787 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [84.043 290.779 219.43 302.468]
+/Subtype /Link
+/A << /S /GoTo /D (acctmgmttools) >>
>> endobj
-4523 0 obj <<
-/D [4520 0 R /XYZ 85.039 763.817 null]
+4783 0 obj <<
+/D [4781 0 R /XYZ 85.039 786.531 null]
>> endobj
-4524 0 obj <<
-/D [4520 0 R /XYZ 207.409 769.184 null]
+726 0 obj <<
+/D [4781 0 R /XYZ 85.039 766.606 null]
>> endobj
-4519 0 obj <<
-/Font << /F64 3112 0 R /F56 2890 0 R /F15 2876 0 R /F35 2880 0 R /F14 2895 0 R >>
+4784 0 obj <<
+/D [4781 0 R /XYZ 85.039 746.481 null]
+>> endobj
+730 0 obj <<
+/D [4781 0 R /XYZ 85.039 622.822 null]
+>> endobj
+4690 0 obj <<
+/D [4781 0 R /XYZ 85.039 590.401 null]
+>> endobj
+734 0 obj <<
+/D [4781 0 R /XYZ 85.039 436.348 null]
+>> endobj
+4785 0 obj <<
+/D [4781 0 R /XYZ 85.039 396.185 null]
+>> endobj
+738 0 obj <<
+/D [4781 0 R /XYZ 85.039 396.185 null]
+>> endobj
+4786 0 obj <<
+/D [4781 0 R /XYZ 85.039 359.318 null]
+>> endobj
+742 0 obj <<
+/D [4781 0 R /XYZ 85.039 276.51 null]
+>> endobj
+4788 0 obj <<
+/D [4781 0 R /XYZ 85.039 241.764 null]
+>> endobj
+4780 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4528 0 obj <<
-/Length 760
+4791 0 obj <<
+/Length 772
/Filter /FlateDecode
>>
stream
-xXKO@W-˾r
-qOI wf׉0*
-`x^|s)
-F"`nwP$ViPWB%~SIQvQIzW^c(}{V靴8u~y3KN[V%0'G~
-hus7P\ 2"dY!(Ϛ1Q0c*E+Ho4p<MGH
+xڥTMs0+8Z3=8Ӧ&mLOi`q+ N./qJR&Jy1 w{%c3fTO{re##!$Qd\^I+T}8X 퍵}B "a|
+&p2/3rVb~: rs:/ԧ#mR)>˺L!<L`jtTp(~=aB.HW%ޖ638v\nmٖ6GJ4Pհ.ӫ4-Uýsl6OSc&U:F 1h8H3C8.<V&JQHjZ?/B*6fVCShշ S'BȾK^VGj_j42M
+1?;qendstream
endobj
-4527 0 obj <<
+4790 0 obj <<
/Type /Page
-/Contents 4528 0 R
-/Resources 4526 0 R
+/Contents 4791 0 R
+/Resources 4789 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4525 0 R
+/Parent 4779 0 R
>> endobj
-4529 0 obj <<
-/D [4527 0 R /XYZ 85.039 786.531 null]
+4792 0 obj <<
+/D [4790 0 R /XYZ 85.039 786.531 null]
>> endobj
-4530 0 obj <<
-/D [4527 0 R /XYZ 85.039 472.12 null]
+746 0 obj <<
+/D [4790 0 R /XYZ 85.039 683.595 null]
>> endobj
-4531 0 obj <<
-/D [4527 0 R /XYZ 221.091 478.093 null]
+4793 0 obj <<
+/D [4790 0 R /XYZ 85.039 653.702 null]
>> endobj
-4526 0 obj <<
-/Font << /F64 3112 0 R /F56 2890 0 R /F15 2876 0 R >>
+4789 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4534 0 obj <<
-/Length 1660
+4797 0 obj <<
+/Length 2805
/Filter /FlateDecode
>>
stream
-x\s:WV`ղ$ʥӦk:m:׃ N<IW+Ā
-|v~v>u*:рR~CCG֍h{sn[(Y:꣖櫻Qlq!q=)C *0)Mt `K4^`V;/;6 @4+Zȧܣ|[a׏y&YO DOܗꌔBuo_g#~)_p}HyM}Su$fr}#D 3D# F^ۨK
-)EAH`l_v`z*t@q>F[I LN]JsD)9o`[ᔊC9,AD.晐 (~OS 3<)߳!y0I#p&#ˎªda,"8RJGw6?;y|iHo
-+p]pt/Ø!6 v0qQNJ&3\_]؀xa2 m ؖ#
-OKJ:.`PWx`JLRgYSd~5.A~G9Dzfs9\+-Uݚ13z ߩ%A{:h'PSN^Lzw lQ\S*3M-|14FHƽTOh7>@>
-gp<œwzS#vJv^e,c;UT>b>؄+F{Wq<N0TSJ+$mh@f?;/ |W}~uq6? C+P]7JHu7dc*ʽоѡh\mV+Y3zr9W4ԁaT|eyO(@g6)
-V˪
-7=#u6%ikxCSuz{g5;nJ<TԉSժOPowkA?ɭiq1Gjf_KGf5
-KLkN
-M,z42[f[3f},|޳j,l,LX ]_ ? A4X$D8-"aMfގUCendstream
+xڥY[o6~ϯX!ER}v:,b
+}-QG\IN&FI.
+MBeÕ:__^wmS*Z<91/"̜C f
+$!EqL:
+UOdHlن>ic!+d]GXv<C2(ab_=bBA$$Rx'lxÖՑi@LѲ$x*=|Lg,=yW;nm({Ԓ'_ j0 U7ޑOXZ/*ߕSt
+Ni-kI»AOX`H6sjAVԩUHif_,ds8ф_rK#Y~mT
+p^
+6JQ,țes$*Rx֘hZ\EW1#,mɠp% N_Kr?:5cD@cl4zv
+YZf5~+?(  _S:2@ރ,izGW bUTGz]x<HU7{<`ϋb@qZz
+\/0i)05PQ( ,5k,4JƔ~x tE&M ó+5S̏s5nl Yʫ7o$C<T|PA;n1ʺ)-;&?Ɍ$`.}|;][{&3Pq;GRytug.]J¼Ș VQzvcѥ<-7/^@ׄp? ϰՏuC#" 9Dv˵;V qvBPhh[x`q?KkIrLPLMb p}5jExs <Gy#_jLN<A 6m/rzUkI`HK{@Y\ķJaw_`s0O &|Y),Gy@ Sin|x3>/Y|7-Wf~Ο+0C%jvٟb#cl>"wF&c.=)eOR8ՉShuL{Ĝ R`","N{K[Kβ'4d7,nQ"-p/"E@"b ېgJ9Y1Ha[<O5WAT8<֧c/cmEAWEV\#{G+ zlo']Eœ]^E
endobj
-4533 0 obj <<
+4796 0 obj <<
/Type /Page
-/Contents 4534 0 R
-/Resources 4532 0 R
+/Contents 4797 0 R
+/Resources 4795 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4525 0 R
+/Parent 4779 0 R
>> endobj
-4535 0 obj <<
-/D [4533 0 R /XYZ 85.039 786.531 null]
+4798 0 obj <<
+/D [4796 0 R /XYZ 85.039 786.531 null]
>> endobj
-4536 0 obj <<
-/D [4533 0 R /XYZ 85.039 700.264 null]
+750 0 obj <<
+/D [4796 0 R /XYZ 85.039 766.606 null]
>> endobj
-4537 0 obj <<
-/D [4533 0 R /XYZ 228.576 706.237 null]
+3061 0 obj <<
+/D [4796 0 R /XYZ 85.039 658.638 null]
>> endobj
-4532 0 obj <<
-/Font << /F64 3112 0 R /F56 2890 0 R /F15 2876 0 R >>
+754 0 obj <<
+/D [4796 0 R /XYZ 85.039 429.939 null]
+>> endobj
+4799 0 obj <<
+/D [4796 0 R /XYZ 85.039 394.628 null]
+>> endobj
+4795 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F64 4117 0 R /F18 4120 0 R /F58 3365 0 R >>
+/XObject << /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4540 0 obj <<
-/Length 2791
-/Filter /FlateDecode
->>
-stream
-xڵYmo8_&"R}nEVl]d+MwRm !9ghO-lj_-ͼRDCɕ]L2G_'bL;,tq{`ʻͯrEqp(rƉm})M \)纤u~ Ę7~߂9:L^t7^a/3muP~f*lz}YSKkzOeCO{~4 ʫ'۶͑ftLl\ԩ"e'mˈRV9
-iאEK:yoc!W˕3],xmsc
-\ ӷ47v.grB&+Huzwb#Y 5SaHX[7{ a!aXl
-Q,04J>y>8:Xvoпu'
-;r!3+Ee\{ؐ|a.*0ʈ0տ($^݇WܜaPQ:KiϢh/_J%05wXZfq)cBq\MC|-FĂQ/Y,~ i^>eİXcM!N;Kڳӈs ”ɢ9-Υ|Ɯy#E
-;#, }p,Ka|%# ]n7'r.l}:85rݮ9V4`p4 .Da<m]B VLJli$V(:D&SX:,q`;ip(it?#;/RYItrU2LS-vdg;UÍEm'S[ݮ<$R/Mbn}%}Yw3X5|Hܓ ![Ē(+;n!QU6j刑)tX_nw}'&CA.cIT->+U? M ",'VLT (J̏ub
-Web%RQ웨
-)[&>]
-d޻exEۢT5Y!; 0w @RQ#EWhԊPgnȓHM+稝:X |y+0qD b,;#YFXc9lb <
-q
-(S0 ϓ[Z|4yZA_5g@eF4F6Gr=Ul!_n[ *&!.G%Z Ж/8|32i (zD0z=BHbX\;6dwGc|>TE[DB(FIk%Z ~ݤ5 εC Y@^MQrQu" ִނR  *TixƳ̰$_px[Ȏ):'
-*x5Nvy*QWrpkt{<xxq{oS#!-&/Vi$1OQIq$އ;B6'Rf7HB.~βXUF'h$t58FH' Ur'41 ݄3kZ;ݑEQ&-p vxN2N"$
-ki,\
- @°em& 2/_:4kk衲;=ԟ3'GrxRMl"# Dcgg8tMٰ@w‚7t0q/AlQQ'U0-lg$+Fb#{`/zR3>5ՑkNnD'}<b}jbS^dp,?Sa
-`sC±9D$?aR! i<`ZWl*뜑cDofxK%J?rp%=oʀ_ "5m6&8 ՍO 7JGokǗi-riКM^KcM3Fri!vGH Qz JչmLl8dzxYN;Sl%+,>&i2i5HU+6  Pg5=R\ބST~Y:>^0zg\PH/Rb
+4802 0 obj <<
+/Length 1781
+/Filter /FlateDecode
+>>
+stream
+xڭXYoF~ׯ "
+ֻ.nǍ@Z%ƔTbαKQK kffiIS^b S/N"aBM@Y%h ίL))RzNN*I#o2vh1q)~Gc߼sܾQv'_nHݤ3w!hoқ> s)Tzˁ60:rp7gcCq@8ilՅ;=u+!M"1(Lܧ٥5B3 ~xHw#ġHi@$z{Xm: G KD
+Pj&TH Ffv#hDOimر7<lCЃ\᪘ɔ+ez\Q $P][C[;ɮm[Zv䠮ˏy YPٳ DNyk4Q XQZ8>d-@-
+[er6sH -P˺v"\E#w!5- J@ $ W]
+
+2ヶ' QC?z p!CrCߙǕ!haS1F/#k &BbNjG8N:T͇L`Z&. ͓sK=x3UڀeVXE;w1Ad]V, [VJ7^p=PK0ULl%ǯ˷<w4%vXJF"ǐlFuq SR[gcf t486r""՜aq1g\&R[e=GmfL5?LzܿgYyxm7~mU|;:UC螘eض@ Wg_Sk~p)'ޫ
+̞ܳF-&<w{B{ 6^1Itȋ>4O>X7$OjIJW2INr$'u)x*+nx|t =+fWSi_}ܽ qemfR<b-|$xਫO\}JsuOKc8.\5M{G^j:7.g\, bW];^(^%[>xdTּDףώ~ M?}I'"M|H
endobj
-4539 0 obj <<
+4801 0 obj <<
/Type /Page
-/Contents 4540 0 R
-/Resources 4538 0 R
+/Contents 4802 0 R
+/Resources 4800 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4525 0 R
+/Parent 4779 0 R
>> endobj
-4541 0 obj <<
-/D [4539 0 R /XYZ 85.039 786.531 null]
+4794 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 194
+/Height 356
+/BitsPerComponent 8
+/ColorSpace /DeviceRGB
+/Length 7021
+/Filter /FlateDecode
+>>
+stream
+xyLW~օUQ Zf:hqNǤqi4vDTCGHj2Ўuu#;('} "a{9߳}9弯O=EQe/zHQ)HE(RDQ"E)HE"C="!EER4IQٳgǻ **
+~ZZڈ#yvŋ k׮Y؊]v:uj߾}2YPP*6y3g Ϝ9;vLsLve…2m4u6l@=sW^u$VZ,YYY1u6׮]?-uзŋeee`ex„ ʔ">,,L8xe?w,ED5Ё̛7ϑ(G;wh1
+(x[R~~Xs/PtȂ5`odRbJE5=/<^RRb۽c~BbN::mmubbbuut0@ P5E(Q"E)(RD"QHE(RD""E)HEn)r EEW5jԸqrss>G<ʕ+<x L8-::졩P pYQ3i*-->}:"}}},YV֭[w޷~{2ɓ'799^ߠR[l3f %%%W\a(,, y{$t9s*Awy뭷~^{ 1;vhkkkmmXHׯ_x~aLLMN۹sgDDL;v,i֭j !MssѣGDرch]MM 2YlA,0`M̼wI-P%dY~ٞt1AAAJq;ȷ6L e8 O0&SF",ᠬFSSAei5ž~]Y% t0zeLG%P~lۡ7ob2e
+:AM^^~ױ(}ҤI%%%ꪚL`822+;MidwwLog
+<== ?+++}ذa7BB!D!D!D!D!D!D!D!DlA"B6A !Z&HD QA"B!($$L)33_}U|}}yBn~2k 9jkk+tuV+):t~ _j%EٍQ"E)"E)HE(RD(RD"QQ"E)H)HE(RD"RD"Q"E"E)HEHE(RD""Q"E֭[/R P4m4kii@<*..vuu/GGG=z9RLLStR?̖M8q"0096HWJGG/L $"D5 !d%HD Y QVD(+A"B !Je%HD$"DY DP"DYPOQu"E )O="Q"EE(RD"Q) EZ5sH)"E;) O6M/»v >uԾ}}}} uss<y3gy/^l0"##]Cccٳ7>>^=n(JOOG8++ êŋeee0aZoo Sz
+'%%!O?LӃ
+tuuKp9j(#0(qqqoVp5ϟ駱ikkS*^hii1KQ@@
+jp2ϋX~~~Xe jRD(RD""Q"E)"E)HElj//N;c#Et?)554kƆkZgԁf"GWqٰa`;w{:HѱzQF7.77Wmw˖-cƌ$آ077^X|GZr|IDk 3gN}}9:6EbÛ'N貲2dxDxַ֭z_79~E^Sٹs'jnnoJ 233e?gddر eggÐ:eee -[nMef1FzzѨ?0&&lixM:"<~FF󽽽Mgppp]]pI Yd285K{9ڴNs`nܸyG}{RNNN&;(hQ&Тvb^Pan6ѥU:jJ*
+t(Т(00Pmp+_]]U-:}`tiC"L|ܴiΊ
+y
+zر]͚5nݺ%Fv?tVW\IKKӢhڵ۷oooorɤIك:aѢ̎Z,fm۶-X@"-:}ŨZiuի3D~~>&zwww>S_\\\;nmV1cFeeKS`+"22R-Wa5ۧ=V?he1jEZ6D(zR&tx>/?1@vL<==o߾M5E(Q"E(;\H;M:D'T]xȑ# /޽[? eRRR9ux}ӧOϚ5K? enܸ/<:o)odɓqqq!99Yy(4402ydQ%eWdff~uO<Fm޼#!! &##cFM>}ӦMFfkjj<x
+ endstream
+endobj
+4803 0 obj <<
+/D [4801 0 R /XYZ 85.039 786.531 null]
>> endobj
-722 0 obj <<
-/D [4539 0 R /XYZ 85.039 766.606 null]
+4804 0 obj <<
+/D [4801 0 R /XYZ 85.039 763.817 null]
>> endobj
-2958 0 obj <<
-/D [4539 0 R /XYZ 85.039 647.281 null]
+4805 0 obj <<
+/D [4801 0 R /XYZ 85.039 763.817 null]
>> endobj
-726 0 obj <<
-/D [4539 0 R /XYZ 85.039 432.131 null]
+4806 0 obj <<
+/D [4801 0 R /XYZ 309.595 461.859 null]
>> endobj
-4542 0 obj <<
-/D [4539 0 R /XYZ 85.039 410.369 null]
+758 0 obj <<
+/D [4801 0 R /XYZ 85.039 385.056 null]
>> endobj
-730 0 obj <<
-/D [4539 0 R /XYZ 85.039 134.374 null]
+4807 0 obj <<
+/D [4801 0 R /XYZ 85.039 342.771 null]
>> endobj
-4543 0 obj <<
-/D [4539 0 R /XYZ 85.039 107.759 null]
+4808 0 obj <<
+/D [4801 0 R /XYZ 85.039 107.434 null]
>> endobj
-4538 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F56 2890 0 R >>
-/XObject << /Im2 4150 0 R >>
-/ProcSet [ /PDF /Text ]
+4809 0 obj <<
+/D [4801 0 R /XYZ 85.039 79.729 null]
>> endobj
-4546 0 obj <<
-/Length 2657
+4800 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R /F20 2965 0 R >>
+/XObject << /Im7 4794 0 R >>
+/ProcSet [ /PDF /Text /ImageC ]
+>> endobj
+4812 0 obj <<
+/Length 1960
/Filter /FlateDecode
>>
stream
-xڭkSF;·\FcȲR 6*a ŒXI_#ɶ`s\*43oj$Ch5{d +`xBK_K&ׄryݧLk(ߝ΢(v~* Lg9>S?v.ptz̃ϧ''D] 6 x{Mp<W'ƞdRF&2_kwH`G0ОA'
-eFDVY|G Aiq*2I慀Xr
-vxg<0GZ(5eNyd=#ԆWu /TrMƃny7@+ZB)#% 킈?B 7mrcd MSZJqEfN
-`HN
-M[[r6~3F$z8D Zj3F6s `8dn҆ײtޮ)Hzi!l۟y'Ɗ \'h~ ڢCwN/pO{sA+EƣUrD!q~JT?`:H)峪F\B;MƙC
-G^w5f,.P/ X,`5h(C49Ϧ&A,۶Ib׷(ny}YS<[< ]YBìr#̍$yȁhi[{ْbEH"l8Ľ)
-u v-O
-4Z!
-Γ1WkEU|Q~66R65<)#ܞ;ۋ=Q„"G w$_,cr'0毨ZX0sTb=]y=rW!7^=RkT[{Oh^oџRT@J+nzぞ"ZN_a<LDiwHavekE(Fui͙l(Ӂ7P< )P8#޼dc Ne8"]囍܁cgqf]x Hi'CF,e6,Pbm+P*m=Z~{=ڮ)d
-' o`+CTu'"sS.hd5rb-kHȪ1N'~% ~5M~G>
-le%IL-@h<Xn31A(/[ . D)1!O /mbhȶr0KHrP'7$+|pi⊗8:qPgj#X7׭MU&DނVa?2ƆJpԾ PnkbCI[G9dt݂#m9RKxݖI\Ro'z*Y/21fOw @brpʍF|XSnw?|pm158b<pFZ\P$uBy]g?=/`#'-??3@u^Ia@$lo_}g-
+xڥXYs6~_1}Ty(*obP*Kw+4Ft8 HPJNyK%h4Ѝ>nH#ԄIFj3kXy;cX#.fGoL<QEj8'Bջ?-J@pL4xǏt[^G9|X4g'<|v_ ><_~ŠBB)TٯG.,
+Uo`"曙6*4Zy5;<kzλlcTTGq^ 9O cup-_ns`6"s^Û}óbӮwHA?h=wL)GUXi)/ЖGoXuC
+c~7/n_HZ*zq*O׈~TB(S>)<-λk,ude˶aRpaS~C-#r> zopιcroqZ;Szg"K>Ximn8y;ZxjrA_y84Xx\bE_$ˡ N+lkxGϘ6mBrA-&qgX1DDvgWnt6x& vSP Wm.XY8kI.n/^r_cc
+: ʅ JpPW8\-2K#NKRn0Jj}'}e=t8"
+J2J͌.jWF*В9F%^!OLSL:hEBWN=0;]ȘnMnL6.6 8dh2eq{s /TOSa0H)1ʆuɎs5u~AoM\U!=Rl˫zԔKEуBuZ$v&ʮV7p-2uZl|:=ѕ1N%F2u[Pș$/ yQm]4^Hk*gyۺتbx:aġA(xc
+<}1J:TKd)4 'lNr3N
+٦gTwnlǙ)1'R5wmI  (P
+ݷp>`">0__5uG^_Թ@5]gP3 1 f
+*|ωԣAURtM) PiC
+UBj4ߐ/;Ik<AdэKoz/U{;L!L2=N)>y1Ib
endobj
-4545 0 obj <<
+4811 0 obj <<
/Type /Page
-/Contents 4546 0 R
-/Resources 4544 0 R
+/Contents 4812 0 R
+/Resources 4810 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4525 0 R
+/Parent 4779 0 R
>> endobj
-4547 0 obj <<
-/D [4545 0 R /XYZ 85.039 786.531 null]
->> endobj
-4548 0 obj <<
-/D [4545 0 R /XYZ 85.039 615.045 null]
->> endobj
-4549 0 obj <<
-/D [4545 0 R /XYZ 85.039 600.89 null]
+4813 0 obj <<
+/D [4811 0 R /XYZ 85.039 786.531 null]
>> endobj
-4550 0 obj <<
-/D [4545 0 R /XYZ 85.039 529.894 null]
+4814 0 obj <<
+/D [4811 0 R /XYZ 85.039 695.473 null]
>> endobj
-734 0 obj <<
-/D [4545 0 R /XYZ 85.039 199.481 null]
+762 0 obj <<
+/D [4811 0 R /XYZ 85.039 324.413 null]
>> endobj
-4551 0 obj <<
-/D [4545 0 R /XYZ 85.039 178.285 null]
+4815 0 obj <<
+/D [4811 0 R /XYZ 85.039 289.667 null]
>> endobj
-4544 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F56 2890 0 R >>
+4810 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F20 2965 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4554 0 obj <<
-/Length 1624
+4818 0 obj <<
+/Length 1680
/Filter /FlateDecode
>>
stream
-xڵXmo6_u 5-]: mR/:AEKK-UI`?~w$ȶ쾤E"OsMGKL;G\g2Qmabz..^yN$4L\_] m6EC5`HZ=8XVO_ٿj4~7W׽VhC8}`cu$v06 ~s\ߗIfW ۳C$A4PPW1Db"͗81l.K5-2<뵶7t6X)Gq g*ϸa{,tLY{5Cq25ٜm!BĤntO, X
-T _juGR-P~%w,RXjiq_a>88 AxdM1hOkZ|G,,HL`%|S1+[݀"p%toV-.td<gi?s1_)βZ^Sc~JHuMc!;$KKFE-8])-S7YMrw" S>Tvii|
-j ӲmF'ԢVEz=)x#\$s3nϔ1koog^{'R'3]J=r"RduKݾV e؏:)GȎD//㈩w;H%eUJtzA~D =i˜#GXg,{~G*g/CV/.ۇxOPS[R؞Sendstream
+xڵWmo6_u
+mgkL\WL;ak$֭kT*UNuY_:\5ewX}{]V[鍟?+q| ll-´4.ֿ8]z-2(.a@"*P*.Xl39ڥ{R2;
+z 9T$+)KݞZA'ه2ԽF8K/>
+EuD|w
endobj
-4553 0 obj <<
+4817 0 obj <<
/Type /Page
-/Contents 4554 0 R
-/Resources 4552 0 R
+/Contents 4818 0 R
+/Resources 4816 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4525 0 R
+/Parent 4825 0 R
>> endobj
-4555 0 obj <<
-/D [4553 0 R /XYZ 85.039 786.531 null]
+4819 0 obj <<
+/D [4817 0 R /XYZ 85.039 786.531 null]
>> endobj
-738 0 obj <<
-/D [4553 0 R /XYZ 85.039 736.632 null]
+766 0 obj <<
+/D [4817 0 R /XYZ 85.039 766.606 null]
>> endobj
-4556 0 obj <<
-/D [4553 0 R /XYZ 85.039 707.834 null]
+4820 0 obj <<
+/D [4817 0 R /XYZ 85.039 742.055 null]
>> endobj
-742 0 obj <<
-/D [4553 0 R /XYZ 85.039 665.684 null]
+770 0 obj <<
+/D [4817 0 R /XYZ 85.039 686.204 null]
>> endobj
-4557 0 obj <<
-/D [4553 0 R /XYZ 85.039 645.094 null]
+4821 0 obj <<
+/D [4817 0 R /XYZ 85.039 652.065 null]
>> endobj
-4558 0 obj <<
-/D [4553 0 R /XYZ 318.781 623.298 null]
+4822 0 obj <<
+/D [4817 0 R /XYZ 318.781 616.398 null]
>> endobj
-4559 0 obj <<
-/D [4553 0 R /XYZ 85.039 366.461 null]
+4823 0 obj <<
+/D [4817 0 R /XYZ 85.039 359.561 null]
>> endobj
-746 0 obj <<
-/D [4553 0 R /XYZ 85.039 282.418 null]
+774 0 obj <<
+/D [4817 0 R /XYZ 85.039 287.376 null]
>> endobj
-4560 0 obj <<
-/D [4553 0 R /XYZ 85.039 259.1 null]
+4824 0 obj <<
+/D [4817 0 R /XYZ 85.039 254.557 null]
>> endobj
-4552 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F20 2865 0 R /F35 2880 0 R >>
+4816 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4563 0 obj <<
-/Length 1940
+4828 0 obj <<
+/Length 2105
/Filter /FlateDecode
>>
stream
-xڵXKo6X-UDuM7E)@d$7}Ajbh ř gyh:?.0JuQa[Ei߭ӵ*ֻkbտ/~<ܽ|&I8l lDpvy _o"8g:n?em];dx̴mySVQTQ(jݭ, 4qkZ60.`DaY+l}c7,΂C'~ty[}ͻfh^Zmot&ֲtW{
-
-.]cx,hG".*%kfߨ5ihV`^w͢p7Q.vy(
-|W/Y/ȍ{oEVd Ds6O<%ht+DlT5UfsQ 9"hp;uϑ Ҿ
-^;';`"* ^
-ֈ ISjSVZp*pʩhRd$l6|tܕ!K0\g$Im{L9Nݕ !nE/eیS)E m^qi>I 5k7sbrT7ɥ 1 3Ə8H2{2DXIX?"L%
-( Xqːi?QMT!UYUD;6c仱
-ZcǥUf=-1aW\Ч)a5ww/5"
-l[TK5ӑ/\J'(m:.7,97]
-@OlʸmMyۀ4?l!;'<!^(% 
+xڭXYoF~_1r f|Jli%5XCI
+cY~1H 0飺b?NBד:N"7bW+o};+a(d;yzsFkṩww=is~VJl8q>lsv} o¹}\o6~|6 goyyt >]l~zĝ($DaXރb<Wƞ+t]Pa ͼ\ݬ5{O-&&qd`0t &ԅlC?tVY˳٫'ך~,ϛCmڢt?PoL5Fkd[YоVSScі*_|U3S#Z4EkbI[~zCȂ}+S]MU9h
+Z(A"n(S[~y΂TA"&<Xm{ [!B͹+0 I;r
+^Rpc $cNg[!sJ^A. @S0ţ*KU ܗ@75͓lBd澚Yß}xFsIrVʴ!#{^s͠m#bh
+dEMpr ;yZ[_nNCLe(՞YUGWڰݦg .䬩{D0$w$G9~yq9-*Dz`QSƹ\(p%bg}C kDkbk=bC2s8xzɢ%f;Zf=xti lvt'BrSƟ
+.4(k0flcG
+'`nnijLgx[FC
+KnMÏOLT\ٚ
+t,21柊÷N~?ihA|6{*6y`H&mRk H=ϕm4%ZNzx'<N~`X
+Ld NQi8D.E!bvptLWSȴ1cy ۉ%'~ `α44apI[OȱmFHŠ7p @H=c?fICAۍ!S@y"4"\uwT:lr.>1>O\8+ASݎH+nbBsQFq\f)4xc8ȅ<>"F4xd3% ^S9L )pCg=Ha\ry3޶1Cc:Qw]S"!}\1(j(cASɰbdФ$,hBмmG0b<$R0Fi ]@wrɈ#J1_i
+
+Cof@f87U0xa$VĐs@zcAZ۔E8P Bo(O'i/6}0828~>.
endobj
-4562 0 obj <<
+4827 0 obj <<
/Type /Page
-/Contents 4563 0 R
-/Resources 4561 0 R
+/Contents 4828 0 R
+/Resources 4826 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4568 0 R
+/Parent 4825 0 R
>> endobj
-4564 0 obj <<
-/D [4562 0 R /XYZ 85.039 786.531 null]
+4829 0 obj <<
+/D [4827 0 R /XYZ 85.039 786.531 null]
>> endobj
-750 0 obj <<
-/D [4562 0 R /XYZ 85.039 557.958 null]
+778 0 obj <<
+/D [4827 0 R /XYZ 85.039 517.311 null]
>> endobj
-4565 0 obj <<
-/D [4562 0 R /XYZ 85.039 531.344 null]
+4830 0 obj <<
+/D [4827 0 R /XYZ 85.039 477.147 null]
>> endobj
-754 0 obj <<
-/D [4562 0 R /XYZ 85.039 473.31 null]
+782 0 obj <<
+/D [4827 0 R /XYZ 85.039 405.564 null]
>> endobj
-4566 0 obj <<
-/D [4562 0 R /XYZ 85.039 452.113 null]
+4831 0 obj <<
+/D [4827 0 R /XYZ 85.039 370.818 null]
>> endobj
-758 0 obj <<
-/D [4562 0 R /XYZ 85.039 301.56 null]
+786 0 obj <<
+/D [4827 0 R /XYZ 85.039 193.166 null]
>> endobj
-4567 0 obj <<
-/D [4562 0 R /XYZ 85.039 280.363 null]
+4832 0 obj <<
+/D [4827 0 R /XYZ 85.039 158.42 null]
>> endobj
-4561 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F56 2890 0 R /F20 2865 0 R >>
+790 0 obj <<
+/D [4827 0 R /XYZ 85.039 116.26 null]
+>> endobj
+4833 0 obj <<
+/D [4827 0 R /XYZ 85.039 81.515 null]
+>> endobj
+4826 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4571 0 obj <<
-/Length 3069
+4836 0 obj <<
+/Length 1286
/Filter /FlateDecode
>>
stream
-xڍYYoH~ϯ#D
-c2Gd}hD"5$뷾&%QفY]}UUup_p'?*<$Qp=vwrII kۻNÍgK<a nƛg}wI9yAY>իkuOu_mn^R晶ެ+Vð?hJY3ڱzt;An0t'1o$uU0K_pf}[v0^RDA j1`ld#~
-c#K?J~?12S{eFhs4XVn >595f{/]tNVZmg)j#{sIFayĶ.~_%u+ ^flZyw 6kgq.z=ʪۑ1.B{yQ\x_qVJV#_'h] bPr0$tF4v-4Xya?v,ǒug(џNc^JĢ vhyQso℉L`>7!ﱷ镕Jx/5-!ClFAEP=fHg9I ^u# iǑ1V[9z'|SogٸǴtVֲ<ٝs0\K7Kuu 5zޏoc-6̧^kv`0P[9G)cL's=^rwK_vi9Y[wtU>z,]Dd|}zR@)kr)KЌ蓹Rp2|:k6 {EA# ԃ:P[4jXی"X 0GtٍA R
-\vuVQNDjJfqq[>߁~'cb6Fy : ܫF:pYM{pHH.*@'G2z%i:r{1WnGC/O;S0zi|`T@;iPޜ
-tGARS(曪V莥U+'2ڐ1D]6Aͭ$Ja"
-0X0h!V K FcRRvqx=H_$PLÛ:tM)ᔽnP[ADê\}~IU ``,8czealTبک٪dG;6:R\tC&Nr^$ٔy#!
-S'].JD~5lkzR~T( 'f~|N ͝޸ޗj~^8\
-9E3tQ%pAq'9jFge,ߎf2{)AQLŽۙmrep419Yh77KQl໯A)pZě(N/^ `>m<੗8lrcOyY-;" vSrVR5ݨLPa#&k}cCNT LPuP]`Z"bUJkm"->/9Woykȩfsj*?Y}+Y4ϒoENY&C+rZ_b
-d7oBsHqI' D> :C]Nlkٜi0'e*iD&bZ/L.¥H [=
-9vw!W24rIO;0QI()z?ƒU}{}L/kewB
-ӳ0 LH(_-|iұd揄 ObW>d ޤG3 i]̳YI5L/Kft(gYz6Q:8Z_VE[&Ns{/uu$굍s@7.-47k<e_V%#&/t׮ߝ8s WOJe=}f7 =A0
-sY@oZɉ"1$3LA,FMIL릴~o,G+䛤%Br07eܱ+w[endstream
+xڥW[oH~c)&0oiǛ8jWU!6
+,M\/jfΜw.3icD},7Y@Zex>uHύؙtzbqol~8/rGcc"q?j6߻X-#_KNx<ʫGdxx=?n杻}<\?wX{cg3b4gR~?G3h톁!p # 2nq[\ՀQ{Rs:iيj4ˤ}$m2s
+Ny? _gU Uկc6jL(ln(Q@ i U5NЭ'ՆȁdŞJ3}<-X\9,O)dT-~a@tQoŽ&HL,>M&J(a &HgN/^H_rd YHSḱW~Bin0(KDB˪f> nef%gH &msΏjpzŭ&@$5;LL&?JySW2KgIi˰·@9LBwdž& fC$C˖,v/+M@v
+facq=}E EPAf+fH.8lWZ0"B/ҪTbxܛ5,,Q,i
+Wo:r['KTn+KfulL򡱚V@Jܽ0g¢Ej5rT?0[047Y2)ګ)M,u8%βoEƳ\lC^o܂4`}|ׂ1-6`˪,eapu7["[By5D:s3bl2܈<##O/}TqbIԟma7C^5vI뱑Mg
+zC]q4}d>~=$ȍ#urAǥ=nݧ.endstream
endobj
-4570 0 obj <<
+4835 0 obj <<
/Type /Page
-/Contents 4571 0 R
-/Resources 4569 0 R
+/Contents 4836 0 R
+/Resources 4834 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4568 0 R
->> endobj
-4572 0 obj <<
-/D [4570 0 R /XYZ 85.039 786.531 null]
->> endobj
-762 0 obj <<
-/D [4570 0 R /XYZ 85.039 766.606 null]
->> endobj
-2959 0 obj <<
-/D [4570 0 R /XYZ 85.039 651.298 null]
+/Parent 4825 0 R
>> endobj
-766 0 obj <<
-/D [4570 0 R /XYZ 85.039 241.932 null]
->> endobj
-4573 0 obj <<
-/D [4570 0 R /XYZ 85.039 213.197 null]
+4837 0 obj <<
+/D [4835 0 R /XYZ 85.039 786.531 null]
>> endobj
-4569 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F14 2895 0 R /F66 3242 0 R >>
+4834 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4576 0 obj <<
-/Length 3752
+4840 0 obj <<
+/Length 2771
/Filter /FlateDecode
>>
stream
-xZKsFWV0oͫlY1u "! 
-g3!_}Ofox{;vqA?/~=\Ђ~/=MQ\n.$8gEKufOqaF/Qy|I*pgmoɎq)L3<gnJro*[|VCEsۺmI`zLi?y0:徥v) 38{j꤭R1m&b'kzY0X0,)ta'>gNlx=YmO{,M8]N"0=Xx웖6/ 9>yakUKf<k(`=u=Hn2%e SI@NBDLy*YRhmGfw+^;qIh%ZVrO$ӦM8³vD+oq*iQ{DVf?O~Ѧi2^C{cqg}eA54_sojz\Q}/ktxEVK̶\u DNIDbrU]YGAdYcuT!cvU ޕ]=nv=+ +}[+GNX+>z*R}Qu|-xI2eڪǰHM]NsER'iP$ %U߈8BL,$4J\)_O
-AO+Yy{m)k""g6^
-`fM#xT
-]?,hcs8=ǯQ"bX2&U۾N Kye<&oWݶ:6vm5`g-mFʇD?lX޺Ķ L?ތ3)!KBj߶ Aw}ē
-iOezFtTlH@v}
-mUjz#me4[QM)&Sz?ch0l͔b3~7ROaǦ~ F"Q$j1Cj0H(zW $ͼ򾍼+)V|s+%B'R畜q47brd| o93;>;ԙ7K8c&+z:}aA:j=S}9t}k0M sV5fTGzhЯ]nidmq31
-s(|F&RDIܵK٢>DŽ h<@`٫~D#n9SeU/8UgleٯFTrxmCIC᫫L`oNвPr\?g8,yV&sc+0Ph$FC(ι=#j/z7qlG܋fs!cF $Wm5>E2~ eA1H
-$BqC=%DUcW@ۑtP3/CqNϗA+`&9 9uؤd tJc2s:HRՓ3ɠH<$Sn
-GpXW &x_xFUFcIVlG<32[%:r9 MJa7.QDx*`֙?C H"UsEN[e77f{a=&jcyf@VvXZtQ>o20O;Ŏ
- &c!8Q5_B>% hK:\=`(;Q0FDO|U oKHٽI#a 0m2ZZ
-o׌tW( ƶe!oˍH:`j1AP6iK/%rQʍ&_uf.&ٽA(ElE-׿oǻ=Zx5IM+-&~0=8P/9ꦗĉxc;[ˋjEgVAO{Pw.m)8]W {FOt3&r
-%߁9g4FFS"zVXM!X7 dK nTB,S7IHg<I%|Ȏn*sչ(+9-Q\iޗ9\pl5 Bšn4Vy/ U*1d\{dHw$I7ku7KF^.41rT\jfoPdY)qb@) +1^5\6ۥۯĭcyOM._=p[m!r8\xgifT~zz(N=Ih^74(<Ј
-YD_|w*Sr;5"`TzI|hxX9X7]}TĠ8];1opPD~< ~e潈y|gml/7endstream
+xڍY[oJ~ȣ Ԯ}dE=@R
+f(>kC!*0ՋHWY'J=WV1X)F]܇i^abc=>tmwP1g;8-9qaY`R[ =R*Sߎˆ5 E RcnzYWAV!(~6fQD!lZnc f7vKea¨YwmOV=]?]ft~NkLX1l"WXx0<}{og׎Uvg۔`p)bb$wVͷ԰m"b3;`ѕ[<3-)̷lo/Ql!Y*{7UiaaQZwa~ZugOqa\ap4nJ8̸Sdw4=Ґxg1pgҌ\scTz]i ;N & :q#<fޱ>w~!,wLٹj9.B@Rphwdb(y]Ajx7E;"sE²,'~A>>doFw=ѝx5˩ R8r m8o*R-ONZ*:46Fͱ4(0@j<;ro$cPחQ ;ĈRǥ# g͕23c~"` e[IT별e۰DMQAlꮚ+
+bP ^fԵ.q#,Z>8$LmG` ٤=ALڱ10P7PP9RI,C~uU"ל`f ];R9uilΛSfEWČҐ [v*~z</20k/ Y_;v\}Ms)e5
+oנ(lbjK [vM:w0H)3]se¶b}yWT3őy/!]
+j `HnςzA,xlK#}x <eJlF=L7\Vj<g9@g^A2پ6aE/tKg3y,]+ biRH[# SsFULUNa[}z0T랾{LA2ך*W:ef fytVsQɍHpŖY!kjW[se+5D_~XxmƾN=?OWalx;ñ Dq:ka}װв itSRw5\8Ƣ~ ^tGIS?
+dS$C|r9iʌK
endobj
-4575 0 obj <<
+4839 0 obj <<
/Type /Page
-/Contents 4576 0 R
-/Resources 4574 0 R
+/Contents 4840 0 R
+/Resources 4838 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4568 0 R
+/Parent 4825 0 R
>> endobj
-4577 0 obj <<
-/D [4575 0 R /XYZ 85.039 786.531 null]
+4841 0 obj <<
+/D [4839 0 R /XYZ 85.039 786.531 null]
>> endobj
-770 0 obj <<
-/D [4575 0 R /XYZ 85.039 493.201 null]
+794 0 obj <<
+/D [4839 0 R /XYZ 85.039 766.606 null]
>> endobj
-4578 0 obj <<
-/D [4575 0 R /XYZ 85.039 463.797 null]
+3062 0 obj <<
+/D [4839 0 R /XYZ 85.039 658.638 null]
>> endobj
-774 0 obj <<
-/D [4575 0 R /XYZ 85.039 381.454 null]
+798 0 obj <<
+/D [4839 0 R /XYZ 85.039 251.169 null]
>> endobj
-4579 0 obj <<
-/D [4575 0 R /XYZ 85.039 360.258 null]
+4842 0 obj <<
+/D [4839 0 R /XYZ 85.039 211.005 null]
>> endobj
-4574 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F66 3242 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F72 3966 0 R >>
+4838 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F41 2998 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4582 0 obj <<
-/Length 3822
+4845 0 obj <<
+/Length 3196
/Filter /FlateDecode
>>
stream
-x[Ys6~ׯET&@˖"lkR*r4\q ɱCC*;fKh4@Ѓ?u'QZqwh\/ ˃Cs<7u~qξ? Nj(ysPWP:֗o>:<p\u%sݾ?Ju3qg/?`ۋ_/8xu9bva\of<O[({J́ |70|p9Q3{z7qlQp:-#2bB = u* ovP@kH8?ACQeUGmc~l.5ݺhyp,_;#s.cܤU{psZYF~;$98Jhj[Mwխs.leӵJڷkR#iq<̈́Bm= \|γ6j}3 |~BWso$h\->qz;@vv8xClR>;g5P7@:Id<X%QӼI˒;ڨ8m'<C͏2tC):+T;HS/{0=ߘ8G9Dt$b%~(o޾r/}8^ev:ܭ7Q蠊#7QEg.)cdL⼩5.a ZBƁLƫ LZrCMR5i|":;}K(JuLuP"T{6o'~}DnFΖiA]ZEǚ%9weU|k2Smݺ+ϥ) kߑ9AOP4?#ݡ2T,B!sv}[ X"q%mu.te:F/ˆJOw-/=!Ph}qf'**} j܎g@V XV6#KB&qh JA{kҽov#Z,k
-Ew$ 'I
-]iiXz#,ȍΗ,
-"рMAZ?2Xu4L䛇¹8]CyW&%=a 6<|9ȫ8f/XaI]x/t|N$i"
-`ǰ[j(H@a ZTv)]SyY~7/w9PJ+G5lD k=Ϛ{?`{ȇ/m,:ߔcHorj3n>;h׿ft*٬"U4\\vu#s\h4ä>=EhQ@9nw[
-&Q lL6mB\ecUމH*
-*J"p4u(IL(dAI`¸G)t$4S,
-]D¢TY0#d@˲x
-9^Df q
-saVܫ)#G
-WE>GHԹT8QL
-|3:8S ocbb.$jhpLJR3X3ɓBMA,cWb:ؙm#, +) `Gf RDE汚rHR5 Ԫ|֕lz&
-\څWgke "qVTVG8G Җ9>c\$LFu2QFF[=F,/S kIj#~0+q2 FWW+?7IlZ!E3}әD: Wͪ0C] 50bG\<Py=dfO,vkǗrrǢ0^fF\ kc}9=OIy
-K;?]x?5U|Nـa!ۡ ,Y9.Ɵ2`*F_-jϴ[FiN2ÿPmn8^ 3^?*Ty8iP's22\%W\t
+xڥZےF}G*C*މ3v<[I8%qM
+IY38
+6 oAQ=D6|BCٯR;×3GVX_yW6u'o3 h<h:{U}% [5yR >Kn_c{ǘ1r~rM4NfX#{7ϓgũ[c˞N:W q=yzC$1X+d$P/1c 1zĉ!g}&&wR~HvNm܄e.ͱ0Ʃ7ȳks1U7 k,dּm|vI&𪯀%C-έ7#tHfJ'کgWO_/ǨiC m#9<,r+,y8'[
+o;cWs!6[d[M%kL{W֜tHiEoڝ"=󢼈q^\e<6Lk ZD>^,$WɔMXY2((
+0^XmUa}C 2,e> e˪d`A3Vo[lֹMmj[a8E vA u' =Ltsx׷| U( ^ ͳѝK:W|a=Dc
+ZRp* ڊI**MJ@Ma5[%^(K݀<Hx.aH][ЂgAj/OGl4bFUBfkv8Oxr2ȭ*#(Uc_v̋L-<DT}ZTl fsE[E
+J,%=cݫ 7
+dɋ9Way CMOs5W
+#E ޖI&rF ]ne^? ]LbSq-zԦKo˄Et\HJjmul[#ؕIf9ZS[A VnC:LYFrؔ Re7 <B8k9ł q<0ͥz2ah4rh:jVqF|M:4*Pn|^p2@%}SK〲 Ah )XroCCϛt05ej%iV\M!/m,6="t7H)]?RKIO+Nb|Eg$Hꬄ/X.ȹIWbh6Z<`gxo$g4aiF^$]Ej pٖBOR_`#a 6VBNZAI(`!^L#"Lڛ 6;n
+ &yaʦb0G.W\Csc_(O(@Sb!?E)9 [
++kMy&QA3VmI(zeAQ)Zkc?FP28 ,ͺlfld]Bdj BiP$Z峔&%ClOv{]ՋSǙ^%e28+FJZ 5az9YBғ3ݵ Ew$P8ۼ NhL͌i-i&<2nhhI^
+ |6Abn:MHPJ )^U/-ZTw|P(jKwqF-4U;]+(l1KJl]lgWg[K 7_^8 Ƒ 2]*H8}.?/(7f$;iC94endstream
endobj
-4581 0 obj <<
+4844 0 obj <<
/Type /Page
-/Contents 4582 0 R
-/Resources 4580 0 R
+/Contents 4845 0 R
+/Resources 4843 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4568 0 R
+/Parent 4825 0 R
>> endobj
-4583 0 obj <<
-/D [4581 0 R /XYZ 85.039 786.531 null]
->> endobj
-778 0 obj <<
-/D [4581 0 R /XYZ 85.039 287.543 null]
->> endobj
-4587 0 obj <<
-/D [4581 0 R /XYZ 85.039 266.952 null]
+4846 0 obj <<
+/D [4844 0 R /XYZ 85.039 786.531 null]
>> endobj
-4588 0 obj <<
-/D [4581 0 R /XYZ 85.039 238.862 null]
+802 0 obj <<
+/D [4844 0 R /XYZ 85.039 384.808 null]
>> endobj
-4589 0 obj <<
-/D [4581 0 R /XYZ 236.167 244.835 null]
+4847 0 obj <<
+/D [4844 0 R /XYZ 85.039 341.854 null]
>> endobj
-782 0 obj <<
-/D [4581 0 R /XYZ 85.039 128.42 null]
+806 0 obj <<
+/D [4844 0 R /XYZ 85.039 259.512 null]
>> endobj
-4590 0 obj <<
-/D [4581 0 R /XYZ 85.039 107.224 null]
+4848 0 obj <<
+/D [4844 0 R /XYZ 85.039 224.766 null]
>> endobj
-4580 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F14 2895 0 R /F56 2890 0 R /F74 4586 0 R >>
+4843 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F20 2965 0 R /F64 4117 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4593 0 obj <<
-/Length 1748
+4851 0 obj <<
+/Length 3749
/Filter /FlateDecode
>>
stream
-xڵYms8ί[LX_ 3Id^Ber` LHM~jMhKO֮d두Mdێ4v`J6Ӽͯ NӳG/i5cwN74&?;l %aضN[:k ig'e1
-uf.O嶭.b+^|]u88+< zq}4cCñU|
-D/%E:)?7dXÔj-Nk^yCZ22l;zw?挼^1N53YO#>"lp!MOsMx 0Jq >
-%CZV#Ù`QkSM~GW,Qi>0/
-3 Yܲ% +Rl}>XQ,ͩtƌ#J/zoH{u+eVRF<'.61@\ey8ǧoڼY(*Nף؜jCx1[* Kz?H0uL'LP9XwMc,-*|Đ
-dV >c8´|ʶ.@ۛI6[ulWz? 
-bMGe`qr;Bendstream
+xڥZYsF~ׯE`U>F)[ZܲSI 
+Nal;v4qjI0 
+ J&p(vٺ8>İern,;ZLvCco??5>oP/*Fd]sWi~?7yUwq_Mѯlց_Kx)egnfk`lU #
+
+n
+S:n{ㆎglK>p s9ʐls%0)A#+p:kVͧu&)Y?+wd_0qw꠰<ث$I,?"K(;~glM vl=4ꪚ}Wx >`&kgxK? ,lӹA:(֢{oi␭ȼvR&F30}Fa97fғ1G\#@$M˪#9k Vf̟i*QoAsx A9HDKÊבgm"@8R4x%vlMQ<c37fxE=>@m>Z@q-C[^gLB6 =͆YKl;pB,~A/QA쏴p͖A4BO|e22:<C )^
+;t )/L]A3@ 9uOk<#)AIev/TbVk"}lw/k-9J [yB:<9
+Xb~UOǒVhYVGt8u aREs6
+n˝lP,-2|&c"ycXz!QEsM^WFX7+pЌFxjSX[X?p7ᠮ籱>4Vw1QW `GNf!`OCU_NNb{O~%{nظJK0"=%QefTo^}NjpDzRk"(<G!]FnHi!ޚNUEւNF,pn5fŧO9!7q3AMWmԺzwýVk93MmZdk4=CT9DH!w)G(r >%֞|^ 7w`aݳi|[gJ/yiT 5i؍bmrߋP㞭W]KivRN.`%y2A3\WaܭV
+(ea?rT#!dJLgǩ;b? 4:ǃA#}XBZUM<i <5Ԏ΂,՛9ʓl?
+B82~ v1*R렼0SJZ١7SC:`_ ^ȄܹԺF&+1dˋܖ`Ҕ̄ '-D6&I\|z*B
+m׉uDFbT&饲'ԷTr(R: ec斟^{7
+DFv턆63{: hǨ؎bFm0層 :B,`Z
+1MۭS^
endobj
-4592 0 obj <<
+4850 0 obj <<
/Type /Page
-/Contents 4593 0 R
-/Resources 4591 0 R
+/Contents 4851 0 R
+/Resources 4849 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4568 0 R
+/Parent 4825 0 R
>> endobj
-4594 0 obj <<
-/D [4592 0 R /XYZ 85.039 786.531 null]
+4852 0 obj <<
+/D [4850 0 R /XYZ 85.039 786.531 null]
>> endobj
-4591 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R >>
+4849 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F62 4052 0 R /F77 4855 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4597 0 obj <<
-/Length 3423
-/Filter /FlateDecode
->>
-stream
-xڥZY6~_7SUC
-lz`hb^STvUOhzm%zϻ@øtuK4a}ZN8-+׊hO()Kӕtj#dO('/80JgW#R,ѡ4GxH 1e3w`hr-`H-MzG^Pm* TXJDE
-:f R*HfyyJ<rg& ..mxS-!Y2a&nh=Dٗ
-6(P˓➽쉹M/gԉH6 !fb=~ڭ`іcm1'GnV<7wk`(s¦.GH|<mj়OKV
-efm. QE6P}΃Iִ$W;r+ v
- X(JSΘR ng-㯲A<S@!O921`N1uQ֥w2v < DRgTJm2E`f?Xsy B0xYQ0u={D}|3임`4UJ}@A\b|N(bya"7 >2 H@H
-Z
-:k{7ga$NL#'v,f-8X>}_5Q2Bw
-5D61+ 1E5'W{\قF@$ud~1ٚ<}`{TJ&)ê[?&=yQPr$4FN#z4@
-E]
-?&PM1\^+xYc,@G,M%E9(9`FsI6^=GLQv gM幐dO'7ꪟMe#BJt(:[AD3=GSAG^@qjI%e!qF
-%m_*0C g.<TLx5 B\v-O F"\**ygqTZIxg-!JW'ȅ.$(o$ 豯t$U31@3t"#vVh]jGk!0Ew_eX% ׉DB7a<
-Ұ)1|v,|^={6C"C%4Hb(Y '&^Y,c \gzIɖ_f&K7l
-QHPqI OuTI
-߾8~uF~R0p?UOS~OS~8ӔPQ/~C`*4'gw6;WJ?r~_Bƴ f)ζ)=zD u$4ëט<k٤^jrb3!ziƣ/ Yg^wƉE % Elˎ#
-A?
-q}TO_,3YΞcM@C~WxQ&>M s mC$4ňe<C8y.;n)mΔM=NX3҈;壐
-"cYBr5a?U1WЁ(4BC%4ݣe-~d!Һ:xH[O
-AHŹ\lZ|OSz\oOk.h=@FyNyZiKOuEk4~rRR D8z4dmiB>(>/#b+/I~rXEyF(uoL@91iag4ﻡW+U.;eZ&󸵟]`&/>W< &̐4UX3iQa`Fҷ Ϙo'2n,[WWg?\-炢Q=oqPn 4tQA0]j svl%,~M褸3!t؊m{5Y$ֳx,>xAWq(ݼY0`$fm7+ }TyZO6M= y(t&(xl9#2;B8YQ*u+X1^$Xܧ ;Fs.R']l.gyxR}ӻTBWQ @9_pM#;5[5Fȸh%UEOolu
-`GzIy藥Q-%gT\~UF ȜaY)[ ج;"Hy> f5e(X=0&IQP͕{ UQ
+4859 0 obj <<
+/Length 2505
+/Filter /FlateDecode
+>>
+stream
+xYoB
+>0p\WE[h0%(Nwˇ$Rq[ȝ-wggfg~;;+'B'(d<D:
+ߑ=?ߞ}oÉA"}'MwoS_kIL(S}һO<4?;l~9pS{8pէk~]@oRkT_dKD:'/LXXwqrsז VC$H=l0 BU0*ھE BE*U?E!wh쨲Yr#cFm҇hHKid`&-o*cߥh{;]7*ϸ|*b*a /Wkb/ ]!E? X>%50ibt*K !Ȅܡt1-HXV `|=(*HAw(V`-͠&Q .LP5Diz]2-lc3i-F{Z64{Zn>X0d54Hc掌6/1ڼ+c1
+[LE>& FA.c22
+_ykWyRd\usi7V5«ql'y^
+\:\#HAApΠG3Z[#Z,A5VPbɂآ*GҚl̝AqoDzׄF@eA%=
+՜!-xRhwkzxX;I+Ǿ}],-1mŗ$./1n&d.)T'
+bۭQc\rV:c!OO2}:ˋ]nKD\UE֮(y<m~VtWk.<kxz&(txզz|/Έ](co/vc3U-֜85NB;hk5WiʢњЄckifCe:O<ߤDy*l';GG6^t`c[.Mp
+@%9,]i_AO}`*b&GXYE:
+Q ~ߜN觫7{ ui2o nrΪ1w~pJm*1׽'PA&Y6 }a Z_hyQ/yZUn +̳|E~7pg̬Gf=mz;݇ٺ _?C{J*}2 w^߹}՝W{9d GȭR2|jluXo2:endstream
endobj
-4596 0 obj <<
+4858 0 obj <<
/Type /Page
-/Contents 4597 0 R
-/Resources 4595 0 R
+/Contents 4859 0 R
+/Resources 4857 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4568 0 R
->> endobj
-4598 0 obj <<
-/D [4596 0 R /XYZ 85.039 786.531 null]
+/Parent 4866 0 R
+/Annots [ 4865 0 R ]
>> endobj
-4599 0 obj <<
-/D [4596 0 R /XYZ 320.069 769.79 null]
+4865 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [338.528 138.234 418.097 149.923]
+/Subtype /Link
+/A << /S /GoTo /D (access1) >>
>> endobj
-4600 0 obj <<
-/D [4596 0 R /XYZ 85.039 675.543 null]
+4860 0 obj <<
+/D [4858 0 R /XYZ 85.039 786.531 null]
>> endobj
-786 0 obj <<
-/D [4596 0 R /XYZ 85.039 379.216 null]
+810 0 obj <<
+/D [4858 0 R /XYZ 85.039 766.606 null]
>> endobj
-4601 0 obj <<
-/D [4596 0 R /XYZ 85.039 353.208 null]
+4861 0 obj <<
+/D [4858 0 R /XYZ 85.039 746.277 null]
>> endobj
-790 0 obj <<
-/D [4596 0 R /XYZ 85.039 295.174 null]
+4862 0 obj <<
+/D [4858 0 R /XYZ 85.039 704.637 null]
>> endobj
-4602 0 obj <<
-/D [4596 0 R /XYZ 85.039 273.977 null]
+4863 0 obj <<
+/D [4858 0 R /XYZ 236.167 710.611 null]
>> endobj
-794 0 obj <<
-/D [4596 0 R /XYZ 85.039 109.874 null]
+814 0 obj <<
+/D [4858 0 R /XYZ 85.039 599.775 null]
>> endobj
-4603 0 obj <<
-/D [4596 0 R /XYZ 85.039 88.678 null]
+4864 0 obj <<
+/D [4858 0 R /XYZ 85.039 565.029 null]
>> endobj
-4595 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+4857 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4606 0 obj <<
-/Length 2918
-/Filter /FlateDecode
->>
-stream
-xr6_Gjd
-DM4PN1Y'BDԫɋHd". d;ٛ'`'I꽝Jԗ7g_;{s:x6MC<klh~xyOU9~0;éϧ~<y3 @!bϿ,@[2&AC/OOݭsz_wAvI½ƒ
-5aҿ އ%9~* ':? T?%9 ˻Ij’ UR
-wKztk>rTU{UeEYԇ~ڰPAY:*X7P2ܫ-?嫆e"D3$`Q쵫tD5:IV-Z!_ԥ]3NM,8 9pv7
-Y1w1%'1/ [nJ"l 6f8iC](y5$4c Z0
-ҩs*B(_e}\kS7.FAμSfZIN59@X5 xC(p-xEϊՀ~g@N B /xi+T0>vkZmete( 2 wh91,6($QXc?9
-E5-.P+ue=y4n.y&7W=<; Q: 1fyy.vuA0wh1 odS i)5h҂߶E'v '(q-lXmQí?h_c[f-S8L!jl{>nvvrՖg "{p
- qcX[VKӕ t(hw]M-sY%nXCe*Q6.O
-òf,ƩZ&G'd J.ʄ{)3\B á|/QDx@,ϵyŀ_pbˇJ"k5Ö+^ڂʆ:n0X;-osMӹCĐ#cNU6c1a[
-e5*q02:=XI :=Ô:EymJ7 0l0(swuku]ߺ=q,lPJϺ GP.ĤKpy,Kf}@P|9r@J LOQ],)bXWuέb3uy8fplGtaenj/[a^!f7\zw;!R}K9;?\ tyLlIր!k*=
-FpCs7,A~|=-A%!l#4QT˭a,+:)ݚ҅)>Vϩ r ;\f#Q)&]@JMQwW8K!N[cyk ʐ1ֆagh ]#vcJf !n{K蚟k=}&[.ۓv{㞃\fR!/[.5ݍ .;Ordg:;I`[k2HUɲ9dx26 `|)<'&5r*wN-qB`^73* xHDi S[}]71!e eRJqJ.)8,}/rDk+CݚNv K.8"tTCY8COc!EZCoUE%_ <QQs17}ˑ_ aHb
-ãvO2ǯz=8ԃhB遦t?^1֢z&զ%^j%0yNk/*we/SfSڹ]qk
-Q)JRnꜧ?s8]vOaHo
-[@$;Ҍݜ }l@׬tcqJ Je
-hkb>`M־bmwڴry=+0t9xW 
+4870 0 obj <<
+/Length 2235
+/Filter /FlateDecode
+>>
+stream
+xڵXYoF~H&1ox,
+Rz~ L{\ıС tz6_B_t(UgM*s3{F<֌n\O
+BaHU TOۻdN{eXp./%@#*yl[-
+-g/ad מ6bHxz&]
+ Cī M)G#k(K%MB2a
+B;˼b){&MB/rb
+JW\Mm@5bJ?\
+b6u
+QQE1H~=bRDv
+X9] `H#C赫 8!lpծ7b=:𰙂 V3F<43hBb4CUaCyi!js+H1
+j^0؀R,BtJ8I-YFA_:ڒ!6'Y5^|rNxC*}KJ/"%]_t1dЊ\{S#IoT+(3Jyn~;V^w*ji^ɜܪ4i5}9EdS
+EQS澩z;</]Dl[S뾹<y(y a*
endobj
-4605 0 obj <<
+4869 0 obj <<
/Type /Page
-/Contents 4606 0 R
-/Resources 4604 0 R
+/Contents 4870 0 R
+/Resources 4868 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4612 0 R
+/Parent 4866 0 R
>> endobj
-4607 0 obj <<
-/D [4605 0 R /XYZ 85.039 786.531 null]
+4856 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 602
+/Height 267
+/BitsPerComponent 8
+/ColorSpace /DeviceRGB
+/Length 7907
+/Filter /FlateDecode
+>>
+stream
+xLUǧCp'sh7Q+PJXR` Qiܒ%ǒ&EےNҮG6h5.Iɜʢu2VP~ē͹9=8^|ϋycL[*YV݉
+"^jEHÆTZQ+:!VԊ=lHŨ#kR1jEHÆTZ%xkܽycCl8j{ l !6Ć k/ծXwޑo^7e˖_ҥK7vyϟ?裏gCuĉo޼y999?yA@~~{OMM=wq\ryy?q%_z_pq-9PY;Q>?_r[q_cfPn9x饗v| /?::3<c=鄃###O<ģ>:{lx➞sI "{jikkr\tP^;v-G*/>ӷrɹKQWW'+D
+w{'k ¬l /ӧOŋw944m5{l(??Y
+;{HgV,e-
+L.<//6T.90R;k ¬ ?z*_sXB̙3gmII_ѝDIoܸqKNMMib%FZ
+ݧq\c\on&?ǤM~g>ˏNTlܹF=jdd3;;ۼ Y7I;_v.>Ek\`CRD#qaCp /^z<yrǤLdڵkCCC7mڤ766=99)/W>ʏ/\{キcǎ;::~KD7+&iڿj#n߾:CgQy lhT
+ݝhd81lC-[&?ʕ+u3yrrrf8^};3557p z-FJJʊ+^R _j՟'f$y衇dmK6R-9Ш;Ȇq\cmpvt:o^xW#6kOTaaacRl YdA7nґ
+ѵwxVN܉
+k綾^zꩧ:u6 =>G/,?O=ϋ/(ǯ>{^cwbq;֞oKo-[`ҔJJJ;yr裏 }[ߺ~m ]
+kopp_jZZڒ%K~bCW=55rk׮ɱ|\bD^W{D~~iĩX"0
+
+
+
+
+
+rJrEKBĆ& gJ---miiwE('t\!6Ć0Ap(Pھ}{JJʾ}ffC{S ,r))KkÄMBĆb|CAv@ 77ѣ3QD9I唔􊢷aR$!bCl !7!6Ćn !6Ć
+ >G՝S,,64
+݆a1!bC Cx;}|cmPWUUu-[DOM#Fdi0Aݔ!bC ßيźokʐTsrr#GlذA۫{@ ]p95#<p}j&]6$bCl%#bClH
+b/ bC|ò2 ._<.HrEKBĆ Ap(p۶mǎ3tvvfff|>QD9y唔ܚ !
+ rYr
+ug0JBT9<r
+cox̙ 477W\̔/eeei&@@&pBS$D#
+endobj
+4871 0 obj <<
+/D [4869 0 R /XYZ 85.039 786.531 null]
>> endobj
-4608 0 obj <<
-/D [4605 0 R /XYZ 85.039 763.817 null]
+4867 0 obj <<
+/D [4869 0 R /XYZ 85.039 763.817 null]
>> endobj
-4609 0 obj <<
-/D [4605 0 R /XYZ 266.917 769.79 null]
+4872 0 obj <<
+/D [4869 0 R /XYZ 85.039 763.817 null]
>> endobj
-798 0 obj <<
-/D [4605 0 R /XYZ 85.039 209.51 null]
+4873 0 obj <<
+/D [4869 0 R /XYZ 264.216 562.379 null]
>> endobj
-4610 0 obj <<
-/D [4605 0 R /XYZ 85.039 190.639 null]
+4874 0 obj <<
+/D [4869 0 R /XYZ 320.069 523.591 null]
>> endobj
-802 0 obj <<
-/D [4605 0 R /XYZ 85.039 131.43 null]
+4875 0 obj <<
+/D [4869 0 R /XYZ 85.039 429.344 null]
>> endobj
-4611 0 obj <<
-/D [4605 0 R /XYZ 85.039 104.816 null]
+4868 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R /F35 2980 0 R >>
+/XObject << /Im8 4856 0 R >>
+/ProcSet [ /PDF /Text /ImageC ]
>> endobj
-4604 0 obj <<
-/Font << /F64 3112 0 R /F56 2890 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+4878 0 obj <<
+/Length 3895
+/Filter /FlateDecode
+>>
+stream
+x]s]of,;|͖ĝq-y4 V_w8$쌆ES< #]̲< fU4[ﯔ@ȍ%LEaSDaR?޿t}o,V^ӷ?uow
+ZH28
+=ήx/[; ?@m "*W2l;&h[TNY
+z4S I YS (ԍ$
+>Hw
+P6 V A|E/ҤWv ZY[v9a҈BP2BdEpq-ߢeP/Y1V<g
+8DC)FvF
+ȫ` @܆ 9: .չ >e;GXϼ8y\ih[s֐G
+PB_DziC7(-FhmmRR~é
+LQhAXsc![> (!+[̥_d-So<jݙݐ>!yRNgm1LqĄmc %[x_:=\["(-5Gxr"p26525*6SV)8D;bl /akQk2 Q{ J-A b*NhiB?DPg~_jIηH۲{2$lrdW M4>hձv֎|մ_b~B<8D1L&dmĄ{S\@$!7 ?(O[n]~E
+;H U3
+!%Q5oJLk%D%ǂ:5 0S  gr\ZrQx2PdPs*R<"}: =]nC״S~϶W5ش+νlJ94%`K˒4L*4)0!,C\|wJs&ifz^ޓsT/xAn /P0{aYSݱO%# iNGЭM
+OUlX/!hX0I&N)W0W/+p5 9uٖa3RbTDe<qmeD+ N.A
+Lte쑠͔ /gK
+endobj
+4877 0 obj <<
+/Type /Page
+/Contents 4878 0 R
+/Resources 4876 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4866 0 R
+>> endobj
+4879 0 obj <<
+/D [4877 0 R /XYZ 85.039 786.531 null]
+>> endobj
+818 0 obj <<
+/D [4877 0 R /XYZ 85.039 766.606 null]
+>> endobj
+4880 0 obj <<
+/D [4877 0 R /XYZ 85.039 744.844 null]
+>> endobj
+822 0 obj <<
+/D [4877 0 R /XYZ 85.039 686.81 null]
+>> endobj
+4881 0 obj <<
+/D [4877 0 R /XYZ 85.039 652.065 null]
+>> endobj
+4882 0 obj <<
+/D [4877 0 R /XYZ 85.039 474.933 null]
+>> endobj
+4883 0 obj <<
+/D [4877 0 R /XYZ 266.917 480.906 null]
+>> endobj
+826 0 obj <<
+/D [4877 0 R /XYZ 85.039 271.441 null]
+>> endobj
+4884 0 obj <<
+/D [4877 0 R /XYZ 85.039 236.695 null]
+>> endobj
+830 0 obj <<
+/D [4877 0 R /XYZ 85.039 142.459 null]
+>> endobj
+4885 0 obj <<
+/D [4877 0 R /XYZ 85.039 107.917 null]
+>> endobj
+4876 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4615 0 obj <<
-/Length 2927
+4888 0 obj <<
+/Length 4709
/Filter /FlateDecode
>>
stream
-x[ms6_o'D0o:57m?PeqJ>)Ǘx<΍'3
-2Ƥ!EwN7dkeJ![YpˋzMsQ>lk <qO#`o=5CZe3
-kx.Y;BD0jfzlBV &T
-^yM*,
-Zq?T^lEL;=u(g]dg4l衤SSW,Pl%b=9rrr|}/٫ k;h8p>$c1s^6+V)Al3&Q yߦ=hh.9|=ٛ%_L7Ί<q=@t6YEZ Y&Y~B^`uCM@0#F:s*,<5#~
-߾JZ`x|Sq6yG%ٵoy%5%Bx ?F%DjFxR9#2`C<l<θCCz
-!"YWY7gdPG3*M.Eo`xMS<{Ʀ1Y}6w:t)cwkjl[  5*/58;׹7Zdl@EْY[,-Q.{oMBcn9>sGc opϹcXh&P=|kvPlhQgwߒ$;@I<I",rC
-} )<u <c㒶iF7lMbPvXp7H-n[g-΀Ā} ɴz21eu![
-%[Ӿkcu$X%'* H&
-:MO?jm&hul/x3b:QxFM&T e-yov)юXiR<uUc)
-6D$}ŕ2 ax<`&l?oݱs{Au_8*@q*^fbRywXB']w2ւ
+x\[sܸ~ׯTV0 }jĩXٜJ@P˜Brտ?h\9$Ԥ\eq@\׍**Y4KX"XÛ?]ƥr8Y˃|usgf՟_~yqsE:2MM~ ׿o>yqE~j~*l}5_w_zϛ\1pF3X`Xg'xX#H//EĊZqr~:\jh0\t2\ Y`Z `[X&n_CZ,IRh' wvRҕp+o6y.nk\V<JxNkh$f?G˂hpBsB7ΰ'uUo>Mq)lAYՖ[oZL5>lx5꺪9PNNWus倯mn8-sشNpyΒ<3P0·d7Q
+ X fQ^*X1 e E=o<
+J?B¶K% d /_|jRPhKۭ:H^ kj&sY *>weKj&SEVS~KA0AÌ$M
+SDSXyؒ6箴;Q1m[s `tH`(%7!\am[W~mwyYb-^ӗZ"'CZ5~hzE]i.,%|LpI^Eq0.عY,Rw~3Lx^QοN,n٢P,}(E="KlH,)I.aqc
+t
+nkGT,l~-`Yy2/]gM uXRJ.'K*)+"G5U209ҳJ nr6vZ]YdcX]ӘٔZ3&V,@eGe> 9c,9yz4/yc.%| 5 aLR>Qٲe;ŌfKK ˲
+H4+.i`kkkJiVb"*ʲ@}P4 I9!7=pux7]ezω"%t\z/3TrzTOЀɌOeb ˲ئGE^KNx
+Etւ@4pzb2QHHm]e3`9Z1['K(dUN0آf|0CTʥ2uSx4M&pbqD叅43j:mK,2GE
+۟Nek!K :(5lֈP
+[7[٘}sl0y_H1'1Lü X2&gSQ/
+=cc;ÂK@{N e0 4 aQ$ 6'flk}y4ɈvqdD$$'UO3^y/ݟ<MuH~$9W4S)𸙬r4RȣU͝<p^[k`8 $ 5r#@+;j=ƋWkA/G! Yu¹1LNɨ:wffw9"eN_ȡ%8m0faNg@ajsc~Z"E}?ȝ0Hy ֠ꛓ*<yp7wM_kj_r DKye;㗭rR!`vӊ,s$iI4n\u-|Μ`M޳
+ĹFT`k6jh[f#둅8QKn ,ί$4<TÏ^*u
+KKd/ɛvj +!HGs8Xik;%ޥHoTKnlee(MWd-k՞ˋMHݠ qٛ/f`Uu#.s7q[Ġ޿2T~Y;:Jm80U2*?Ga]Q]?s4<eAN)/"ST(^#>B<j)W`lπ:y3d~R!0Q$9%o>cɁV){q9!'
+3jN>!IƳ鰶 ØXIΔk uӨ&fYr_&E+cxXʢ֍Ő'r'ZI>{J_mp2rynoOjt$|j<*N2
++N)r<oCq[5#HRPSM" ]5{yK+ & V}\aـR要=ӡZJe5,觛zq;v.~|g,ŗ"w;O^.FN%02#J_jXy<p'Vmu>d"%,J
+DI5xu^h.4)+LϮ?Qܜ(/Kűk_';71`3:wս*{&u%\1*kOGW(ލis
+
+z 4{K\Ck 4<w=q`
endobj
-4614 0 obj <<
+4887 0 obj <<
/Type /Page
-/Contents 4615 0 R
-/Resources 4613 0 R
+/Contents 4888 0 R
+/Resources 4886 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4612 0 R
+/Parent 4866 0 R
>> endobj
-4616 0 obj <<
-/D [4614 0 R /XYZ 85.039 786.531 null]
+4889 0 obj <<
+/D [4887 0 R /XYZ 85.039 786.531 null]
>> endobj
-4617 0 obj <<
-/D [4614 0 R /XYZ 85.039 763.817 null]
+4890 0 obj <<
+/D [4887 0 R /XYZ 85.039 763.817 null]
>> endobj
-4618 0 obj <<
-/D [4614 0 R /XYZ 233.803 769.79 null]
+4891 0 obj <<
+/D [4887 0 R /XYZ 233.803 769.79 null]
>> endobj
-806 0 obj <<
-/D [4614 0 R /XYZ 85.039 114.268 null]
+4892 0 obj <<
+/D [4887 0 R /XYZ 85.039 545.303 null]
>> endobj
-4619 0 obj <<
-/D [4614 0 R /XYZ 85.039 93.071 null]
+4893 0 obj <<
+/D [4887 0 R /XYZ 307.409 551.276 null]
>> endobj
-4613 0 obj <<
-/Font << /F64 3112 0 R /F56 2890 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+834 0 obj <<
+/D [4887 0 R /XYZ 85.039 351.625 null]
+>> endobj
+4894 0 obj <<
+/D [4887 0 R /XYZ 85.039 329.863 null]
+>> endobj
+4886 0 obj <<
+/Font << /F56 3230 0 R /F62 4052 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4622 0 obj <<
-/Length 3118
+4897 0 obj <<
+/Length 3125
/Filter /FlateDecode
>>
stream
-xn8=_ᷕ1*R(;I 3Ɩ"=fi1f[` <:sH1 O̒t؏B1[nf~$D0S~G87Otv&//.^/0DZ'ޛ{Zx/N?̓^†엗^Lc\yN;y 8Dl}ǟlQi2v4mT
-]??:?G ϩɢXRS w r$ G:Bsx94è H!ힿ`EJU/vichCG[6Ws:Nx[Y ך
-˼^ x=4ud!WI@QA8܆ x8h$:J9l.STfK,ljx"Ҿ]te4UD|YVXX]2\ IِD1_$>BEEHZtW)_ 0IvZvQ~BaZZC buPU&ovQRx)b #4v$e@ rqe0=SPWç 4<g
-3nf1l^-,;ۮI=I0Nőg Un-CNEg)&p
-<jQuS
-_p}X*glj?/^S/XҮyϲ$5Uۭe3 n)'ReC^׺8g!UFw2na,ʸW<d;2ۃ%}Čӕ4
-'z"N!z m1鹽#`?vԍ_vf*85 Rc7'5FhaC6(vWLqSxp:p¿u;Z by]."pO.We;'GdDa1p$ߥ%>ubD2Zo-D{mG7.%>O)JLYeuqkl!q.@@#4%"lܢ^)w 5DJRQ1֡)Ik?Gc2DEE"nyל2ZY$ޮ1O4mP +nCrbm] qd
-
-쟟qmY+kD[ITPKt]͐PC*jb07ߚlXk3N0<4ɒRrX6Kyr5s N.ӦA6$u'<VT,wi%A_sV 3Łn
-<[c"AGGSV-㊦@N}(}%&ȋX(ڝ{g%X*af3[.~Oҫ>ԉ
-R>Z<" tbTG"+3>1 BeA4Lv_
- Hs:X.
-wFXlhj{撕UEqaT<|!<ՊٜmN:U,!m267zN ;1+6È3]6ǤBC} !YlO0#APA5+E$@~(׆0T7<ErݽQ@:c }-f28wy<wU]DB[!l, מӨ[}>]-I ?EsupE27p#J*^}6ۛ<%I[{0m͛`_=ԾHddHiD?u)endstream
+xڥZo8_GVQ>K.4vAG,,iRmI]ܡh͏!g8fTXql&XlWb3beIV?Wf!0'83׷뷟+T T\%I[r%oϾye7[;ipq_YƩOzQ(?U,]<C;
+E-W:VaWWwW9Ucr+5jLh"kT¬85ǡ iC8
+D/gsX|+=+u)3:HB$hz8׬IP3 Y𥬷 3
+ԲY`{lrf]ԯ7:aB|Pyh& hfIahV]jA]\[KSVldcxXAs-zI*-MrK0{\:Z<L7k| eVBFEf*~so%>Y*GȠ},`_U<`Њ&Hk3 A=9,kαcN
+04>H w@2|V1p> 6:}yaCGegW@cypAm@e%iq"Y#z ϰ0$M<tVæU0嶀U-XT X^3{TS&a1uR%ki'^4PrE{4/:KC~HOD&Ltg' kR-X#z4M !
+kKJyI8⭧щy_2=4OhDlRK6
+9
+ f%NАY%e
+6"7twمEUv4sñc/c8Q=01_ؙ;]!w#A%.iPw[xf:
+ <Rә8=+[.SN,#{ݸy YZ{?/!SJ9m G]Ǒ줨B
+4*>4G
+>%VL*8 dZU؟Oq"O!DIL9%<4 3$@'9 xdОnճ/i鉺L5'+l
+`XI^ޫX@[qxib $ɜB!8VHK[ZgOhJqbN 7z$+d-7vѧX8C龛}as*$/]%nNc!>QVXF'_iol `
+E5rۘmQF9 bz
+õ-i['.\:M99#S=H 95W8Y24b!|r 45You y|d+v@Q4@Yt/~4x
+ O~[çp"b=){Ӱɇ"z$UE_tVi`(2rS%UƩO
endobj
-4621 0 obj <<
+4896 0 obj <<
/Type /Page
-/Contents 4622 0 R
-/Resources 4620 0 R
+/Contents 4897 0 R
+/Resources 4895 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4612 0 R
+/Parent 4866 0 R
>> endobj
-4623 0 obj <<
-/D [4621 0 R /XYZ 85.039 786.531 null]
+4898 0 obj <<
+/D [4896 0 R /XYZ 85.039 786.531 null]
>> endobj
-4624 0 obj <<
-/D [4621 0 R /XYZ 85.039 763.817 null]
+838 0 obj <<
+/D [4896 0 R /XYZ 85.039 766.606 null]
>> endobj
-4625 0 obj <<
-/D [4621 0 R /XYZ 307.409 769.79 null]
+4899 0 obj <<
+/D [4896 0 R /XYZ 85.039 746.277 null]
>> endobj
-810 0 obj <<
-/D [4621 0 R /XYZ 85.039 294.572 null]
+842 0 obj <<
+/D [4896 0 R /XYZ 85.039 704.117 null]
>> endobj
-4626 0 obj <<
-/D [4621 0 R /XYZ 85.039 273.841 null]
+4900 0 obj <<
+/D [4896 0 R /XYZ 85.039 669.367 null]
>> endobj
-4627 0 obj <<
-/D [4621 0 R /XYZ 85.039 208.822 null]
+4901 0 obj <<
+/D [4896 0 R /XYZ 85.039 577.25 null]
>> endobj
-4628 0 obj <<
-/D [4621 0 R /XYZ 85.039 166.053 null]
+4902 0 obj <<
+/D [4896 0 R /XYZ 85.039 534.481 null]
>> endobj
-814 0 obj <<
-/D [4621 0 R /XYZ 85.039 110.14 null]
+846 0 obj <<
+/D [4896 0 R /XYZ 85.039 467.141 null]
>> endobj
-4629 0 obj <<
-/D [4621 0 R /XYZ 85.039 88.94 null]
+4903 0 obj <<
+/D [4896 0 R /XYZ 85.039 430.27 null]
>> endobj
-4620 0 obj <<
-/Font << /F64 3112 0 R /F56 2890 0 R /F15 2876 0 R /F20 2865 0 R /F72 3966 0 R >>
+4904 0 obj <<
+/D [4896 0 R /XYZ 85.039 283.956 null]
+>> endobj
+4905 0 obj <<
+/D [4896 0 R /XYZ 85.039 202.66 null]
+>> endobj
+4906 0 obj <<
+/D [4896 0 R /XYZ 85.039 145.736 null]
+>> endobj
+4895 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F58 3365 0 R /F38 3001 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4632 0 obj <<
-/Length 3009
-/Filter /FlateDecode
->>
-stream
-xڭr۸_Gj!>t8]oc'vy%J"$e[s(J6 s!r?91U2M$B%'?Y?Τ'ZQK?޾D"|E OL)I%863}^}wu{y1x;5O߼Á
-U0\@4ݢI56#%h=8D8=m#CA;s=D80]t./׼@ր^BECKhh+qfM>Lr%@8XHsLah;asmGbG9Yq
-DC
-ÒȊ*@laē\eRtFuʼn+/kkmW+$0
-6G>x)! PE{1{i\hfn,ڦ=(NeO]vTmiQޏUsmm;cNx
-1r]h;vG*_A7Kʍ7U %V7c $ȇd]dH22wIH`HȩB@vz\mx17?d#ĕHCC[;gXZ?s$8&8.o!wDZL֫6<;3Nda,X]/]jD
-}|o㍋
-}mțOv3wQgS:y9yu|)P؜乢"dcĐvx*0/Hw?/w?=4\:Ǿ
-m]rCm\R{Yl؊y%I20avp ϡ]>#7'B$|VR$TJ0{XK\m`H=RM4jLU䀚 (WN4#ngF(.Fͮ;81\k RYĻpk
-
-)xwOA :)}k#x[=RՎ9v@ܩ`-跏G)h3.u[nt™9o, !d&96*s ~Sovآ)DᎧMF1Z-%ሇ]7cNi3'@(Q{*'KewQ/EeB1]DꈎDurk󮙡Z\6mB@}u$3bi
-6_uMÈfRZ(b>;Xbc B㡜CPc
-
-d@1Ơ5(iVf\b[cră6JjbS3 -W-]
-0hAäsΘfi-h):H?SaYaE 0wXpfLׇƅp9,?6K<3X$PqgꡬN練҃;/Ff^b%5zCsďAe~HBs$\#x9 Tu3߻l,J {&ӢZ7//TJ׋g"'zDa$$)Uw@dC5Nq< @wiher?9yf{gO<B=2o]*(. ApJ0MʍfTiTӓQכK8E޺
-¦p(:l"HVOb$0lz
+4909 0 obj <<
+/Length 2935
+/Filter /FlateDecode
+>>
+stream
+xڭrF]_Gʄ1}Sdy#{-el "Q&
+</~ty:3ʄYf
+n3|^}wif2Nlph?_~Tgww x{>~y`$2?D"
+MMa*' 0FwxNx)m9 ξ8Pb'&3,9}:ކNCabaG1lg(
+pؐ LJQU<ԭlI Fd'$@IA4٘ɻx]bWe#S:4KߟJ4:C[>Izq7h\kv_SѶgG"ko3"
+Z
+'(/Pb>ǝeԭ,
+±\1u$09Sh=GWh:
+_Q9 bq|d9ؐ_\8%*&F5qs7 PE\pg 3 - Fg:,E̞*
+ܾȆUhHq'lh C̓_1_&i^4Sc% $(,|`3^o7iN6M'C@ssB1'ƈYd^UI$a:MP%>C=@^O],I'C PXXZ 3P fٝӅ篋;p^K8J,,NyɍefsW,$MCyQ3*uՓK'K\Jes
+`N9¿1S OgpC#i 8He IB"dw06'} jD9mz 6XV
+aH 4ܡhY bS՞JߒDlە es2c{gV`IaSh>y+|IQCKB'9\?tåN.z #GC.n 8^ 6Fj#'B(X{żQ*%U}Pc&/L/Zj/fbHq)<ӆ<VriTYPF3m:߆oz\'zp-:1}cyK@!{19@=W1.ǚp^;B F
+R:
+]? "?q8R!:S,c<h~ QX*W
+<j|Q2y3v$c\=}w=hΊ3=ɩdyvaoqFބ> mv_ i!3a-f<
+2id`# xNJ-EXz<`0tSi} GQ$b_\$r4#^oվZsQk>IxT_<A=ؚ01JL})>G'JW> _ &U 1!˝L gK JcV̵{<E: ȉr[x٥4:|BÔwGRG]ݪڞR*Mj58֩`0O/vHa,“g*O 0(+A^EXe6ѲK򯝯Yz_.뫧j]-TH#NkZ|uwYeH=oܲ9.!*`~i
+3~"̉wH:z!HcRMI/9IF ~HOC52S1bq2Pҙ@ *3S|65zfG~9{jrG/qh9.NYgtkj噡CcAV3'X?Zendstream
endobj
-4631 0 obj <<
+4908 0 obj <<
/Type /Page
-/Contents 4632 0 R
-/Resources 4630 0 R
+/Contents 4909 0 R
+/Resources 4907 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4612 0 R
+/Parent 4866 0 R
>> endobj
-4633 0 obj <<
-/D [4631 0 R /XYZ 85.039 786.531 null]
->> endobj
-4634 0 obj <<
-/D [4631 0 R /XYZ 85.039 674.352 null]
+4910 0 obj <<
+/D [4908 0 R /XYZ 85.039 786.531 null]
>> endobj
-4635 0 obj <<
-/D [4631 0 R /XYZ 85.039 604.485 null]
+850 0 obj <<
+/D [4908 0 R /XYZ 85.039 604.832 null]
>> endobj
-4636 0 obj <<
-/D [4631 0 R /XYZ 85.039 563.231 null]
+4911 0 obj <<
+/D [4908 0 R /XYZ 85.039 566.731 null]
>> endobj
-818 0 obj <<
-/D [4631 0 R /XYZ 85.039 333.848 null]
+854 0 obj <<
+/D [4908 0 R /XYZ 85.039 566.731 null]
>> endobj
-4637 0 obj <<
-/D [4631 0 R /XYZ 85.039 291.364 null]
+4912 0 obj <<
+/D [4908 0 R /XYZ 85.039 532.654 null]
>> endobj
-822 0 obj <<
-/D [4631 0 R /XYZ 85.039 291.364 null]
+858 0 obj <<
+/D [4908 0 R /XYZ 85.039 235.69 null]
>> endobj
-4638 0 obj <<
-/D [4631 0 R /XYZ 85.039 270.836 null]
+4913 0 obj <<
+/D [4908 0 R /XYZ 85.039 203.472 null]
>> endobj
-4630 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R /F35 2880 0 R /F11 2898 0 R /F72 3966 0 R /F18 3969 0 R /F73 3992 0 R >>
-/XObject << /Im2 4150 0 R >>
+4907 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R /F20 2965 0 R /F15 2976 0 R >>
+/XObject << /Im3 4358 0 R /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4641 0 obj <<
-/Length 3621
-/Filter /FlateDecode
->>
-stream
-xZKsܸWLĩV7rَ4Hm@PrHXֿO
-ޭ7*xJ/7ۏLgX0t!,8?l/ol'nLh~>h p:VPB㙱:FK>:̊G-dc$S('i6OUC"K<dž:[)eB\i 0vz\Z瀒-$T3>T<:) "zwT-y&
-zTEu8!{OM{S5LPnD%}
-.zkU2ő Jk !'ΙA{)v8P :(OF[뙼k\+*/X!e6 ~ax; *(44)۸Cb !Ay- ߡBu᳀j*~QBYNȲt8t_6Cu0e؎b֙."=N
-+b:o SG_*
-XWh!N)i
-3%ŇB/VnAx]If4XFH,?P.XU
-ihS9&
-$MtIMTh
-Di ~OgVbc1y* !6fa/Q\mbr}ľ
-e]{1j$r 򈻀 Qhc=[q1` : FGi|sNE77G%i$4f/
-%JJvofM&^Ʃ]Ҹi'$CB
-TCUj+^snpdE13'c9)Tw08`/
-u2}U:u';ŲeGd83afA<&" xܶ 2ްЕd"6yBٟE#8{UF
-L1yx!UG =peGg/ 'qr#'iG{s
- ybђJ-t ]nl7.{qS=P c*]uIzvwOu%J8q8gư% 3߮|"'ӭ[o')%9TC$I]Zpk슚;z\kIw ܨj9F$V2U
-LeM!ԏAMSJ2H.ᆷ-KrNbpw%jG\Paig-O"H#wt (3hR,ƣc2K熟Qnє(^7p`Pe^
-4I|ds yendstream
+4916 0 obj <<
+/Length 2461
+/Filter /FlateDecode
+>>
+stream
+xnF|Y
+l69;``J$Z,%^M6-j&@= 5]e5 t6K7Z͖`;?(8s߯M<SldoxX]tyqu??Z{J$Int3psu7.n?"
+޾2~k&A_+ۈaT~Bx#>Jd$bS ɢalqf`9a+038x\@~ij4AR~RAyis|BFHiD
+C;աtO&CǔyL<5K,)&
+!8xUBȦ NQ={QPx"5$CF0{&@ mlڈ7i؛EpdsՌy`I-*B@9^ưqW5D:
+ΐC)J\ na`*})>)h$ٰq_LgFen]-%m훔}me'W&lFC&9dhS;%q?ir:~9
+:Xo>?d_I۪
+Y`ai:<4W _etڱy7RHM
+D}:4miy+ӟ>sk>v{{?;v<ڤb&w"l^ . ߧט_"2hjT'Vxֲ\-0R&o'xD&$890$M<<N0knRSLr8&KU@O3id~r34j֕X^ǡokjƏ_?sڷN,Єc#cSߤz1.endstream
endobj
-4640 0 obj <<
+4915 0 obj <<
/Type /Page
-/Contents 4641 0 R
-/Resources 4639 0 R
+/Contents 4916 0 R
+/Resources 4914 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4612 0 R
+/Parent 4920 0 R
>> endobj
-4642 0 obj <<
-/D [4640 0 R /XYZ 85.039 786.531 null]
->> endobj
-826 0 obj <<
-/D [4640 0 R /XYZ 85.039 617.717 null]
->> endobj
-4643 0 obj <<
-/D [4640 0 R /XYZ 85.039 599.048 null]
+4917 0 obj <<
+/D [4915 0 R /XYZ 85.039 786.531 null]
>> endobj
-830 0 obj <<
-/D [4640 0 R /XYZ 85.039 448.857 null]
+862 0 obj <<
+/D [4915 0 R /XYZ 85.039 766.606 null]
>> endobj
-4644 0 obj <<
-/D [4640 0 R /XYZ 85.039 427.66 null]
+4918 0 obj <<
+/D [4915 0 R /XYZ 85.039 746.277 null]
>> endobj
-834 0 obj <<
-/D [4640 0 R /XYZ 85.039 128.427 null]
+866 0 obj <<
+/D [4915 0 R /XYZ 85.039 381.058 null]
>> endobj
-4645 0 obj <<
-/D [4640 0 R /XYZ 85.039 107.23 null]
+4919 0 obj <<
+/D [4915 0 R /XYZ 85.039 344.191 null]
>> endobj
-4639 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F74 4586 0 R /F35 2880 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R >>
+4914 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F77 4855 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4648 0 obj <<
-/Length 3698
-/Filter /FlateDecode
->>
-stream
-xڭZKsWxXeb1jwm9+gN>@$($
-{5[̦
-ái73
-DU/Gβ̑!o|ֿو&a&a`麓O7\!>A{h@ddF\i+$W.f~`bQUi
-5PAT #7ReNsis#<'+WU"#=SQ0w/'at~vt1x$)" 󺨷%m֔N:dh_ɰtj sؚ7o00KvofukW;<}EȒh䩴A7|(,YbqY6 >Xԙٺf^ڇ]gxEb(-Z^$-)pY`8'\B, h{j%5G_=앦|1 ;8"tԍ=T:UՅ~ba|;ģއ5ODZLt9Gv Q~EHy ܩC1Xz\ǺzcA.kjYPa\2nC2@X~wgL"_NIo<S[@ٞh +Mǵ@]K YOT2oUf IA`%R@o<_ ޮ"i;JZG&HK` F"f,NRKxϗTlh7(_rlŇg = "8)EiÊ^LǢNƨDjtx$c/⚳&0qSmɇf ǾG k@q=&Seэ
-pփ5X±ov%bQg~DCol9z'ׁaݾXpj(fpaZY? az9]s?xh>QǐbS)9bn
-\q'h
-y^ 5o DZ@,w6mlwBĉ)u5\K9-X\@vy'r,GN(34/kR?N滜A`Lon!}(k
-0 *n&ɥ"8bJ>^jxy Laʖ A^js㿙P{a,@0YvׯNoOUmv{ɔ+7K;.ʞ:R2nn9I욏v}p"yw_ T;{8›L Lj?a-p
-92S<»). |I
-,#ԜwK<bG0לI]Z[*^BSLm1I򩖮s#qɎVl%i˂TqA8HWL2V
-(YO2{R(@ ZrA~U򧅫u|kw#.ݍ xX;t.X KHqIz\ȝm|6
-69N}oB-x@p v_|]踑|)-;305eJ@W_7d %ƒb}sSg JtrBazc1Z^ Y^ѡV ZǁO`E΃Ց_ȝ}
-%VG0JBG PXӃX2E2R~&l7 f
-a/~BG8
-!=ǀ_]9q[::yKENb0[HKZ@Цjod&RN8
-LTbHgI7F}N>HOmN _$lH/[.u2m_ټYDݣM! S '3}.O`}x.8r'~9 -9(+ї3b7(/g2 vz`K_dW D7HBwP832bKo+ {
-k7 c.'Ir* 5OF&+^Y,<Ƚw+xY>DU:CjDʌ$)hbMlԸo"h1"c tL5^㒣;ꢥ|yE2Bkn.-T'Aq"mXOt Z&
-쇆2kύBIEn]M R
-©P,|OfW3g1
-CBU ?endstream
+4923 0 obj <<
+/Length 3235
+/Filter /FlateDecode
+>>
+stream
+xڥZKsWxXe
+8Otml#F~}qwËҖXyƱ{hMh48LHȅSڌy_%h _snW|?UT!<6Ґl~4![໑H 釼)`+p@9Wno7]"HjY0txxb 9Ѳ we^<ߙtP9zS/Pft.fkaiG bB@aqYNYE9ܾwh9wqC2NJaZ%IS2)|Z/y`%Pew,v._Hw
+gT~8T(6h7l|
+e_a L=X25C!),<x$*&N\~X|{m!tкƱw9+Mc[-M#E0txG0 TV=.* Ù_GmW㥸'&EChʎƂ7X>oGJ:a\T3$GmHS܁he*a bm:&:]rHHuKI*_-sxA;TY*h:#ko ^oPԯL2m*JFQSZd-*8}H4m-_r2,56 c
+׃ǿ!FW3N݊JA\#be<)N[i6`wHר-/e ă"GA n<nj !XI˒t- Ծt77p͋=}/C|! "2}|q
+^d!w^r+ꮉ95gnUc9<
+@vh^!*5t$&lye_8ϭ\Wdgb+U"v<90%½ĢRQXQZNi9D-Sg&.''ϑdbƁ"u_hؑjp
+:_e+hN&a쁍EiN&a
+kB#UTHY L#WPn9O1܂Kڣ!ܜy얰@ L9PPR
+_rZUǓR\^TG]Sx
+{]:䶤dd{=p0U_٣ra"j N\"] 
+SXƠ*X*y:UTıE)jcu <i0q8q$9?rSߧ,^aC$L"ԁK$oL$2o_u9-7FҁC1HԙwDGPyn/YQ|D1 V]Q:dTDԏ-oS*Ʃ%INe"etj8r~IШ+zaj|縀`dg^}Y5$IঙIdDQp#s'CJ`Aݷ<=~13Ij
+GXŒWSB_ llNIe8n>[7w'-ޱu/^M9H:+CT$@@6s*[ d,@G= Bn=s"%#LTUaK؂ 0;xn\{`>V`%UJ9ՒuXdTq溤8(.+>Hq*?2_H%uN^DXe/Ł% ,*O
+G={8M .6xrxY4<cJU5MoK,&ép٥Cd#;hOׂ(N2Е;R4; J|V)E-8n/jN=v}(*i2qe4A>TDgq=TXC
+n(EA tKԍR5!1)2endstream
endobj
-4647 0 obj <<
+4922 0 obj <<
/Type /Page
-/Contents 4648 0 R
-/Resources 4646 0 R
+/Contents 4923 0 R
+/Resources 4921 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4612 0 R
+/Parent 4920 0 R
>> endobj
-4649 0 obj <<
-/D [4647 0 R /XYZ 85.039 786.531 null]
+4924 0 obj <<
+/D [4922 0 R /XYZ 85.039 786.531 null]
>> endobj
-838 0 obj <<
-/D [4647 0 R /XYZ 85.039 643.417 null]
+870 0 obj <<
+/D [4922 0 R /XYZ 85.039 766.606 null]
>> endobj
-4650 0 obj <<
-/D [4647 0 R /XYZ 85.039 624.943 null]
+4925 0 obj <<
+/D [4922 0 R /XYZ 85.039 748.602 null]
>> endobj
-842 0 obj <<
-/D [4647 0 R /XYZ 85.039 390.77 null]
+874 0 obj <<
+/D [4922 0 R /XYZ 85.039 487.33 null]
>> endobj
-4651 0 obj <<
-/D [4647 0 R /XYZ 85.039 370.175 null]
+4926 0 obj <<
+/D [4922 0 R /XYZ 85.039 453.186 null]
>> endobj
-846 0 obj <<
-/D [4647 0 R /XYZ 85.039 207.99 null]
+878 0 obj <<
+/D [4922 0 R /XYZ 85.039 275.331 null]
>> endobj
-4652 0 obj <<
-/D [4647 0 R /XYZ 85.039 184.672 null]
+4927 0 obj <<
+/D [4922 0 R /XYZ 85.039 240.585 null]
>> endobj
-4646 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F56 2890 0 R >>
+4921 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4655 0 obj <<
-/Length 3562
-/Filter /FlateDecode
->>
-stream
-xڵZYs~ׯPe0+okhJR "Q" 
-ϸvϕ9A!YfjuXIa̱-{.zA5G[/P(RnvWIВq M7`C,hKlTku;bO !jKVWiO 4Adk&»[x h yfnܵhﰢ#}.M,[t EeY?ރ 4'q(b|q$ZDfuyGR':`bK+ Uz<3n~'c} F֊$ޓ(|Y+JZ ɢ0ӌ<-f_hIqU[nDNtf`e~IF?CaCC+|wb_/c%3Fņ;>Qa#}vxv8%)b7 K`
-Z f1B+2fa=YE'K~oGL'aԁV
-.b;._ˍ3`BYŽ/6% (P˱ꤱ7+A?zpE_\LGI&$DqZ-AӸ9w͝[ +;dd;{H4-iv.ԝQp~-Vఈڴ9pa[s .k?C=s+Yչ5k$8,]`Tsb+JĘbi톥nŃm6Uob'@NUXtX[%Ѓ RIT OLxGfx)4BƝlAP?9Fy/+a`'KJ vq h@Q 6;Q#rwR6*Ro9U 9; z]-,dI ^s^4KwgUn*\\mP w=TYߣȌ3W*K^q{Y: "@&a'+tٵHnJauύc!s"h)gSv,e[P
- 'wiXV/o_
-1
- eu|^OLJ\€V6"XeG9,踓d ~#a#)6zAijQfF
-s>hKk]:d0N9\RWV{,٩WiD~(kaYu7~䌙K
-T)TdqEUZ
-206n̨{&M;Oo>HIC<0b2[
-_m rf)`lF*ʍܑq}~\ovbIZI/p%4+{ISyr W5{vIT
-Z(-%q/Pٕi>\Bk`Mt9!`n%˳&uꩿDΚcmϊ+BNۆBᬍ6:D7ɘ&˻`e簩
-%OMYYTxdʁSg_k
-"" ɽ3ޱV&rDZ-_zQ(?~vO|O0B':%;r#endstream
+4930 0 obj <<
+/Length 2991
+/Filter /FlateDecode
+>>
+stream
+xڥZs_ˢf` o]on/[vb+KXV_!$'efhz?-
++I'i
+o$ 3ixx]WW| ϹolMT!t|)[W3GcI|jLU^̰f.4{MWő\-֙ago9<9PGY0?=5;07yY /.+ק)
+5o|T0m̈́jQÁa FO"B y{9Q'*߂07xҰߥWk+X5_qi|b8 uR[I VIW g\v9*; 3}I)8$A[5ua2ߤ
+ȶ)HԮ&A&Z ia򔻒c>pTaPz;b
+k6rZҎ|(GЈ8"mNhHOp|\h "n˫5._/^WLm
+y]
+yS!б8֟R+ gp3 -x=_uGl+@T`8pȵTu3bBڡWe!o{1|>.vMZ}b?ye]3eIz|QkaSaȋ''r@$;UST3uk?V>oEDE
+Јb^|`Oq"ێmB$B
+P@5/pYJ7㯎a&Jڂba5%ӫL?'BƧ'Y7H9~
+9'4iJHT;F DEUқT0V~cT+ 
+)z>
+
+S+ni?XМы3z8gco9WɌo…QpRnܺ GߊaL w ~C|A˧k4;;~_nʡUVn񸞅o$sJ2LPnpU!5[l{BW^q{8[^ L qՉ7;b;:HG\Kv;L(R_\BQNx' #!7 J-$I]ʾ_+3
+BsyAWԡo\HچCk1aa ^B w~/rObf)i`4jԑ.hM<rx>W"pX)g?qYVr2wv@#I ­ɽ&I*{#޾uh۝Op0&Qg8s @$G-pVZߑ
+(C8}Tٿ9>
endobj
-4654 0 obj <<
+4929 0 obj <<
/Type /Page
-/Contents 4655 0 R
-/Resources 4653 0 R
+/Contents 4930 0 R
+/Resources 4928 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4662 0 R
-/Annots [ 4658 0 R 4659 0 R 4660 0 R 4661 0 R ]
+/Parent 4920 0 R
>> endobj
-4658 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [342.345 336.894 409.913 348.584]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#SECURITYMASK)>>
+4931 0 obj <<
+/D [4929 0 R /XYZ 85.039 786.531 null]
>> endobj
-4659 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [452.526 269.148 512.306 280.838]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#CREATEMASK)>>
+882 0 obj <<
+/D [4929 0 R /XYZ 85.039 507.319 null]
>> endobj
-4660 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 214.951 206.209 226.641]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#FORCESECURITYMODE)>>
+4932 0 obj <<
+/D [4929 0 R /XYZ 85.039 473.179 null]
>> endobj
-4661 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [427.522 160.754 512.306 172.444]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#FORCECREATEMODE)>>
+4928 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F62 4052 0 R /F41 2998 0 R /F58 3365 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-4656 0 obj <<
-/D [4654 0 R /XYZ 85.039 786.531 null]
+4935 0 obj <<
+/Length 2767
+/Filter /FlateDecode
+>>
+stream
+xڥko6{~_Vjޏ^6{MH$m˱Mo^([] &p^
+BP?.}LYeP6Niֿy߿n c8"~wn^оw%yTx3nՃ1cdo5Ee1{qe9_$iI,ϖ%354.OJS?KrRDbi5
+ŔIӮW5v/uϣ'թ}i[ #"Z[na\p
+3-{q@޼XhJD{Q85oyrǨ'MtF߃05HF Y^wJ- -sC*!"@s%Ʈ:6A`~PRjCV( .>b4|yA(I 0'+m0s8Em W]/;YWO+9E P
+/g^(N#P[jJm6Y) "AXDit۽0
+sak8=f :[I'Y:N<6Ć5,
+$0SG`<
+y(餮:ʜQ&9CiP P(d즆}JSz,-?.ߧz̤|}F2wvXT
+[B4tՕE[3u;7o5CfW^3(%{6N o-?ÒpTLm$mZ*|L.&~\uRggdƳu5eQWO۪Ρu o%Ti]7#R 0{x"!ɒ%'ohߥ|P{βm*vlOq0G dW9%<W{=#X >?Q ܟ/4*5)sY6D@W<5(&K:ޏSi;ey+{֧' g~S;J2?ϒoh_dYC#>c%se`p2ĂHĺnZX e%R}~e(Θ"}83S!pr;p1aTY΢" 1{e*)]<8oּp KzQ 0>3iiȷKtN-Kkx=cAXm=rJ
+^POLLՆ
+KS܅ X",ҼgiJdoYk2db
++%x.@RR(<p5'dNz-y<t:c0R'[lӀ y]G,n;z; NoqH8 D~
+I
+endobj
+4934 0 obj <<
+/Type /Page
+/Contents 4935 0 R
+/Resources 4933 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4920 0 R
>> endobj
-850 0 obj <<
-/D [4654 0 R /XYZ 85.039 480.826 null]
+4936 0 obj <<
+/D [4934 0 R /XYZ 85.039 786.531 null]
>> endobj
-4657 0 obj <<
-/D [4654 0 R /XYZ 85.039 459.63 null]
+886 0 obj <<
+/D [4934 0 R /XYZ 85.039 398.535 null]
>> endobj
-4653 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F56 2890 0 R /F35 2880 0 R /F66 3242 0 R >>
+4937 0 obj <<
+/D [4934 0 R /XYZ 85.039 366.317 null]
+>> endobj
+4933 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4665 0 obj <<
-/Length 3144
-/Filter /FlateDecode
->>
-stream
-xZ~/GM..!=IЮDD"U6\I9m0`>汳3Y??K# Yn›ȷf8ynMS""IRw^5\_ݼ/&}6B}͛k!U\+\{䫛wopw_\Y.B7?rP t
-h7#S;&{TLH{4.D,zZH,5y{W/;MF~7,Myy9Ὄά)賅V)m"V Rwwc;֤9bh4li8X ގfD6#*I6o튞dO8H3{q-kUEQUxP<kCk R.<q>j\g*ꬍ
- .U1JB4{(y<Fưm^2 VC8p,{j3V n(k5m~4gv#kctd]rG1D'^9a5i)0Tx|>:|%p14FWʅ}W5bKN
-gצDG5;ر, uCi1l"={ؙQJc]kxBU~" F"xуF+s:X4p}5GQ}~ 0,J8ЁO91! ӈ
-ćY-GKޓNBNdQ{d LqAIaD!::FaPKŃ
-|7;5JFqkAyP@IVVLDnz
-8, qRsӎ= t`;mnWB8;w T)>}bzT<V z͚ x%}/CcJC7
-lxX /B
- Mh#ښ@
-@e*;AdK^81±
-dD6ak+.
-}k< WluY Я4Q#i5p 1K+Uowq^'٬Q[k
-FL}2HT⣭5g7X ^yg=OFiNf ?I`Gؾa
-๗wv7ql>mnHo~ǻ)I̺^'j tbv{O{Ȥ:Pr?~d0
-#2 J*z[\2u?
-nʼE+>`si@LjB\h] q5N>tSo`{f)N|WZ}AQ'’Jc7?%endstream
+4940 0 obj <<
+/Length 1828
+/Filter /FlateDecode
+>>
+stream
+xڭXo6BDjFI=O]m"b˱V[L%nP$ˉbm$x^
+ X;o9fFÍq^(jY.$
+@סKH"8YX^h,oj!x1c3Ǒ~WWP6\>aBx?+C 9p!~ y B957Cw(̉lC>Y/^ yyɘFgo]hw: <ka%!1E]g҄Z=Z khǖ \ZaJ5<+or;4u]D1epl[p!P"b@vYVuڀMhFMp{(K9f%'ޠͷ2duשXqJY@UyΑ)H3gB8XX1Uzhќ3uz@3$=1?we<;R6B2u_o^Em(-87l~#0${iqBMbqeQE'/NP(n{n7#1ml*ʍ*\we*B1
+wG}:{Bt[.Y֐nKkv._пL):]N
+V 矿J%%K˫Q|/zOtЉ?7B9(ps 7N6P
endobj
-4664 0 obj <<
+4939 0 obj <<
/Type /Page
-/Contents 4665 0 R
-/Resources 4663 0 R
+/Contents 4940 0 R
+/Resources 4938 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4662 0 R
->> endobj
-4666 0 obj <<
-/D [4664 0 R /XYZ 85.039 786.531 null]
+/Parent 4920 0 R
>> endobj
-854 0 obj <<
-/D [4664 0 R /XYZ 85.039 560.658 null]
+4941 0 obj <<
+/D [4939 0 R /XYZ 85.039 786.531 null]
>> endobj
-4667 0 obj <<
-/D [4664 0 R /XYZ 85.039 539.462 null]
+890 0 obj <<
+/D [4939 0 R /XYZ 85.039 766.606 null]
>> endobj
-858 0 obj <<
-/D [4664 0 R /XYZ 85.039 347.827 null]
+4942 0 obj <<
+/D [4939 0 R /XYZ 85.039 744.844 null]
>> endobj
-4668 0 obj <<
-/D [4664 0 R /XYZ 85.039 321.212 null]
+894 0 obj <<
+/D [4939 0 R /XYZ 85.039 686.81 null]
>> endobj
-862 0 obj <<
-/D [4664 0 R /XYZ 85.039 277.468 null]
+4943 0 obj <<
+/D [4939 0 R /XYZ 85.039 652.065 null]
>> endobj
-4669 0 obj <<
-/D [4664 0 R /XYZ 85.039 256.272 null]
+4944 0 obj <<
+/D [4939 0 R /XYZ 85.039 554.435 null]
>> endobj
-4670 0 obj <<
-/D [4664 0 R /XYZ 85.039 163.752 null]
+4945 0 obj <<
+/D [4939 0 R /XYZ 85.039 527.336 null]
>> endobj
-4671 0 obj <<
-/D [4664 0 R /XYZ 85.039 148.081 null]
+4946 0 obj <<
+/D [4939 0 R /XYZ 85.039 267.025 null]
>> endobj
-4663 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F72 3966 0 R >>
+4938 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4674 0 obj <<
-/Length 1311
+4949 0 obj <<
+/Length 1024
/Filter /FlateDecode
>>
stream
-xX[OX~ϯJ\}A`UvM)3g NV Μ̜o.Fx~UIČ^>qv w{H{xbể?ǗAbAlj6I
-_ip|q$OKGHh
-;<vˁLCh||[gWxS6LG
-<{<tęJo4g"MHŌVn>]Zs=ѭR aLdJl%lr7ܘ$kW]uހ-hrzԌb}:Mh%w2Q
-y:I.cX%j~v2/nf3 Z^*XɑtGWOV
+xڥVKs6W9BxL,7dV%@DJ_,)[Tfb߂NL:ZCd1w~H$ia~ΨcL?Q 8N4NF1nGG^zW7pz?>jpw&n0u,l4!O&Mǰu~FZGRBz?1ΒΑuOiIaMz|"huZJ*R/VR!p$\(*xڈy7(sA%$1S-4pZyJ$gd:{xW"emZjX!F8e9\|ZѿYsrULQ7i97 u*%{$;]d-9:HY@ey| _K݊/ F-t4[ 
+Mc+cڬ]Z4ʐVJE0s?Dܲ~Ԝ. W
+ڕwTw:6KM<O}>_Ȗ:+NS 0f/3Rm剔K.endstream
endobj
-4673 0 obj <<
+4948 0 obj <<
/Type /Page
-/Contents 4674 0 R
-/Resources 4672 0 R
+/Contents 4949 0 R
+/Resources 4947 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4662 0 R
+/Parent 4920 0 R
>> endobj
-4675 0 obj <<
-/D [4673 0 R /XYZ 85.039 786.531 null]
->> endobj
-4676 0 obj <<
-/D [4673 0 R /XYZ 85.039 634.82 null]
+4950 0 obj <<
+/D [4948 0 R /XYZ 85.039 786.531 null]
>> endobj
-4677 0 obj <<
-/D [4673 0 R /XYZ 85.039 420.461 null]
+4951 0 obj <<
+/D [4948 0 R /XYZ 85.039 636.145 null]
>> endobj
-4678 0 obj <<
-/D [4673 0 R /XYZ 85.039 303.495 null]
+4952 0 obj <<
+/D [4948 0 R /XYZ 85.039 453.027 null]
>> endobj
-4679 0 obj <<
-/D [4673 0 R /XYZ 85.039 134.927 null]
+4953 0 obj <<
+/D [4948 0 R /XYZ 85.039 224.285 null]
>> endobj
-4672 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F15 2876 0 R /F35 2880 0 R >>
-/XObject << /Im1 3957 0 R >>
+4947 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R /F15 2976 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4682 0 obj <<
-/Length 1096
+4956 0 obj <<
+/Length 2595
/Filter /FlateDecode
>>
stream
-xڥVKo8WhOKQ !E(n-b*) ;ál'QC r<(3\2)Fd8Odd5}gu"/E̖AdŽ3;RIӬ({Jvf}<w➜MOg)OMOu;vǨyI).>^_g&`3͵Uɗ"Y@B&%@ .2NQhϛߝ鄴F0˴.wvTU>,^4!*J?brI bW"O1:
-$Сmуb]0vϢy:fߏy*DHdLo1ijpIM2XI,% v[8'FMU(,`0*z< ufPq<=iD@ `Dz߮&mpuk@GH?O5w] ]*<è:vc6(J3G1j-sկ0ĺx:wuP_Ѓ9VBE?}3F4C :`z ^|8ݪjs&-b8¼ WKA۰%OiG:us>mhPy)rHi-ˡ]`RMȚ!f2%t|F-)+bAXT "#%T,WU~ XoL;iØ1m]=
-MC.$-tAPڅTv` 7ņ'Xo
+xڥYo62fERCe [zkrm)j[,i:vr Ek|y=/d$?zR*դ(ʭ7'Vqb&$ɻos7ѩjr |T啛\/~N>tfMUYQɷS\Lg:Foygן>OKS Ks29gꊧ>]^ƥO_M:(E;t
+1_q-2=.;t"ڔ >FYm&3WT ]6ZUy.ԺP2tL|xفG4wܬ<-@
+yN~hfUe&;hFO@ɞw1&auMNUY1)L*׫)9y0
+~_j>vSSu0ͪ\MHʖ\Fm՟ 
+2!9T7
+(K2Ӏw풚 #h(Q/`{]gfǖ #ѩO"ώlFw֊DĠ3!2u+%.y\2k (
+~3?;Mp+q qSKO&J
+ 7a(dVS1@~D6/G!Jޏ׈|Fz= MSQq52Lb5/SEnq7Wa',n)jD )SHJXPp_[ Ãb۱
+ԯ07 U;_ AQ$M>A
+g<˟xp3ZC|)e$
+ kQ| ~<;`샏fCi]hRԡI/;Q7ɴ<ijfȷߨ(L'x]P$|+oLTdYLRDt~FnO[zRslkLFBt0p,!-x<.&*g}f^h܉R=%So#k-6PS*IP giua?η_f5Ӷ kG Э}8yQ u:gA
+(]s#&F#,;F[lm}؃Ǥ͓hcC#kIw,IYBkMdFq
endobj
-4681 0 obj <<
+4955 0 obj <<
/Type /Page
-/Contents 4682 0 R
-/Resources 4680 0 R
+/Contents 4956 0 R
+/Resources 4954 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4662 0 R
+/Parent 4960 0 R
>> endobj
-4683 0 obj <<
-/D [4681 0 R /XYZ 85.039 786.531 null]
+4957 0 obj <<
+/D [4955 0 R /XYZ 85.039 786.531 null]
>> endobj
-866 0 obj <<
-/D [4681 0 R /XYZ 85.039 567.21 null]
+898 0 obj <<
+/D [4955 0 R /XYZ 85.039 592.586 null]
>> endobj
-4684 0 obj <<
-/D [4681 0 R /XYZ 85.039 532.27 null]
+4958 0 obj <<
+/D [4955 0 R /XYZ 85.039 548.745 null]
>> endobj
-4680 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F73 3992 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R >>
+902 0 obj <<
+/D [4955 0 R /XYZ 85.039 492.833 null]
+>> endobj
+4959 0 obj <<
+/D [4955 0 R /XYZ 85.039 455.966 null]
+>> endobj
+4954 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F62 4052 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4687 0 obj <<
-/Length 2910
+4963 0 obj <<
+/Length 2292
/Filter /FlateDecode
>>
stream
-xڵَ}b4cGȂv
-}TWW]5RU)VYQ.Z=_@ĉ 8͍ݤ:BFaĻ:Z(LS>-Pq$I*hzc4(FO~nmy
-z}nF:Q=4Zp
-~0"ВND92܇{+|ڑ$j >oRC+A`|J+
-?mceEV r OFivӯ
-`Z?OX+>S !A9꣱U54,C%92`,Ld{I|~TbxZNbvߧaĨ$8L|b/!Goh\
-; f8F5ٴI%@20F^2!
-I"t/.#;TS'ܯ8LoD
-Qbu3I&E*gOY~ 
-`s,?^aq66.1+G;rE);a,n`Ⱅ2 S n;Nק.Kqf\l{@>9NI%;y&ӈjMe?Z|}(:o.P 6DBFLEW^=wkRfIeS3+؈xW0L=Or6J5[unQ=cJ4BMƈ+^ 6Uy<z\-Bqp "k\c]cΡ1 DxeN`PqHf | :`kV{X5.s(hؔSs AJ
-7ij΅u*AZ{9/Q񙶇?rTVӠCe&ωǦ<x>C)1
-m,Ͳr4.C&\äs-4>-Λ\~ֹSoZK貕8Uqo~wh]('<W3K#qV 3fm|6zX/¾+QoD)?އ $^jO8w &0_o F8ZYNΞLG#ّ Õb!*=7IF|
-h_҅S^J# $ܜ<`G Ugv=lxiNg0F7S.޾tqԤ
+xڥ]}fgH^sAsfM$\"K$w(k{0`Rp8CVEŦ\EFMz(HRI [t'E9c$Jq>~JQ3#.V/kDmOF[ٚ,_[wZrU1zyT+t|Ի,8IJJW*ʸ Y6i93Ѽ\!SSmt~GZ{ヿ(v[Ý zB3i}ӡFB@v9 @zDA=-Ws^{1Qɡ|Al[Pt$|1ٺi_}kj ]i@pe,#=byG,rćn<n]DIRo 7]NdyEMWLr 8lNܯJHa=X pjjHxg(˪> ,IZ=s
+6a[IO6
+X{q[L
+;łОxd5,Xm{9j^is iJ8;
+L}“[%/< bibo;m;?MQ\r4'L3rah"TRDe^D DO2~VV05=Ѷr@eksB064ap[XFlxJlGԌX -XC Ge9<?8w5 Hj[]NTLd=i" GM1R)ɬ )y SƆ竔(`j)!NsrW =o"
+uQTvttR흇q{@A -2Gù\KILv_}@w5K*;B^]t4e4lh8N.C_X!UK3x>FnYV%alv)P:K#:&Gt+(]B-^?n6|{(/&v5L~ $QiV*&_aX7\_T~v?ёỹ<
+Y8V?Lw~ FwoPsQw\lp ٻ0r2[J6q *4O$%hBs`5x7m0N@z tɰf ]A׈ #1INtƹ;ub?N5oԒqZmTDkc^7ZHQhg ѷZ}` 6F5Aʑ 8?e#]Ⱥ敞o[1
+mUF&͵;/:d{=w9Yp
+RKT+Э84r`_Ǣ#J)ֹ}ᣑ:RBWϹ
+endstream
endobj
-4686 0 obj <<
+4962 0 obj <<
/Type /Page
-/Contents 4687 0 R
-/Resources 4685 0 R
+/Contents 4963 0 R
+/Resources 4961 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4662 0 R
+/Parent 4960 0 R
>> endobj
-4688 0 obj <<
-/D [4686 0 R /XYZ 85.039 786.531 null]
+4964 0 obj <<
+/D [4962 0 R /XYZ 85.039 786.531 null]
>> endobj
-870 0 obj <<
-/D [4686 0 R /XYZ 85.039 766.606 null]
+906 0 obj <<
+/D [4962 0 R /XYZ 85.039 766.606 null]
>> endobj
-2960 0 obj <<
-/D [4686 0 R /XYZ 85.039 672.187 null]
+3092 0 obj <<
+/D [4962 0 R /XYZ 85.039 658.638 null]
>> endobj
-874 0 obj <<
-/D [4686 0 R /XYZ 85.039 630.546 null]
+910 0 obj <<
+/D [4962 0 R /XYZ 85.039 603.448 null]
>> endobj
-4689 0 obj <<
-/D [4686 0 R /XYZ 85.039 603.932 null]
+4965 0 obj <<
+/D [4962 0 R /XYZ 85.039 563.284 null]
>> endobj
-878 0 obj <<
-/D [4686 0 R /XYZ 85.039 284.675 null]
+914 0 obj <<
+/D [4962 0 R /XYZ 85.039 189.831 null]
>> endobj
-4690 0 obj <<
-/D [4686 0 R /XYZ 85.039 262.913 null]
+4966 0 obj <<
+/D [4962 0 R /XYZ 85.039 154.52 null]
>> endobj
-4685 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+4961 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4693 0 obj <<
-/Length 4068
-/Filter /FlateDecode
->>
-stream
-xnF
-p3dr8q$9Pݔ1l+y[KA<9 /o_Jy
-ڟa9oAç yRa]{z-ߕItԫۋ!z=/~ )ymWr{{ur,daR瑱4[
-Eᆶ1<o '8xX.qx$K7ܕ҄*sm6Կq
-΃!CZk-i䞿t2#W0i?|LJlQ[a"Jr3~y ϢG\V5ܷ-碠B16 
-%> (@qv(&x {d8=pt ќbK^<E2e/PãGjoyʆKbE$̲E
-B3ۺ>L#\%T
-ږ9+,TiP1peGi&^Ȳnoμ6f$&# rk=8)^. zV(U#RX0-/si|"wڥOJv֟+ CS@ .9"؋h;pC*aw1OZp#8Dy=pm/-{TA'-y&ilWE{@$2UK].GErkNg uhލfpo F tdGFcK6/TG{ `6DDQWs\R
-*
-:v͸ T`O))k%nھh0zs㙽ž)62dĸ(v׃o3@5
-*-V)P0H@u.*?u侎?g7ٟh",N~d!8NYt`ywӂD+ۀ ZBdő-lKddeSy PSpZZO-
-<8̯8ne -b"y^W9a)ޠ}
- p5MHD@k$o3yJ %LD71M>6 #`-XOb$=䋦Q$3<c|@638ĉ1Cĵ^n'p cqiǠA[P9&6FM6^,P-"U~{{$3EW'bafK6L7Qm$a+-
-3ҶbSeXj6eN|TdcJa]np,^ [ qWߘOF^@p4@b +(6ݍq81gHcEHupJ`?NnZc
-ЭBG%}{rMIiZ${R4GʹU(X#&`yvQy@RmƐhm
-ҕ3y<scQ$Z'Fc)49:I9FvrMqbb9Y_kBGR-
-Oň(HC? RX`r/@DK4VMZz])E<\؊Љqm> Uۮ%o@"ҀzW <ٔZ2щ=+H<T
-p|Pv gXA¤yi\`4~nul9N25ut_꟰8W ػ>حb0'/P#\<9Pm4wGt 1J+Xb%eQ{6j0>Gj8"e IEck8jB<Rēim+]A`t*ܶN(G10mu`zq+ukcynMfbI<q(7FpCRiJh8WW ޢ#3s%Ov8N
-O `: M俍Nz|j%,mbbq3O"ȟ `LJFS sgD7`uވA9١Υ?c^ъ,h|M/6H6 H>1['d ALPܶTYT{ 'pkjXK
-ϙ3tkPIv}0t: ͥFߵN* 6LteM*cq 2;E0§S3>W83*wrsۆs9Wk`v'"
+4969 0 obj <<
+/Length 3691
+/Filter /FlateDecode
+>>
+stream
+xڭk6
+;I~ȳ6%[hmm,D\I)ʖkdǐ{
+> Y|/,Qݕ 3_8Y|qsg}f/~yqZ{A4ͼ{\78z/>F}|Spe}~Won,VށֈӟW/6Wyx<_쮢X8ү>]sтW͑ ֙3}J A$J0n"5^ũ -AKg[OrX-K\
+oќh
+FC=6Tee8ˆ
+
+ZVDjft$YW':y@H<;Ԫx\ ='5Y!y6]2n "f0;r7
+a&{("=( ц`+
+rhN2 Xo
+uDP0S[:!-z0!r(sQ߯L 1w(jkVB<S7U*wFZitg1ȃc viQ!9NCoP;Z
+6js)f0Rp t
+oқɻxb^R'4%橤K)fh=g 7T"!BкǙᕔ{ RqE_R<O˪o}+H^WqTc EZep9+dk9itf()h00[ő)T\uu 3$tޙ<\NJ5%qAbvŐP4aBwt9;ш+i&^49
+0QDе@J`UӉ\P,vcH<SD.h(]1-BEvCy)z (q\\zˋд"gWh6ꍥ*U sm)Qw&:3jۯLl* `|}"UcWfi5 b$ ·޳˨f, q:A O<ER'
+!]9m1ȍ8O
+L>C=W Ch|T{ނ[>hiR`CO6T(xiM3憩<.K\?$}&+X\u`#؃v88⁁ ..$S(Œ^cc{  yV|9{g+@$ _dsL^6)OB~ aԻe
+@09}.R-@XFݲ%E +Ky*m3fY%fx1av1#y fPS
+ 9{!P L3II0~^7 #䋛Jnд;
endobj
-4692 0 obj <<
+4968 0 obj <<
/Type /Page
-/Contents 4693 0 R
-/Resources 4691 0 R
+/Contents 4969 0 R
+/Resources 4967 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4662 0 R
+/Parent 4960 0 R
>> endobj
-4694 0 obj <<
-/D [4692 0 R /XYZ 85.039 786.531 null]
+4970 0 obj <<
+/D [4968 0 R /XYZ 85.039 786.531 null]
>> endobj
-882 0 obj <<
-/D [4692 0 R /XYZ 85.039 548.572 null]
+918 0 obj <<
+/D [4968 0 R /XYZ 85.039 413.08 null]
>> endobj
-4695 0 obj <<
-/D [4692 0 R /XYZ 85.039 527.376 null]
+4971 0 obj <<
+/D [4968 0 R /XYZ 85.039 378.334 null]
>> endobj
-4691 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F20 2865 0 R /F72 3966 0 R >>
+4967 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F58 3365 0 R /F20 2965 0 R /F64 4117 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4698 0 obj <<
-/Length 3929
-/Filter /FlateDecode
->>
-stream
-xڥَF}B'
-)Ǭcgg׈
-V_] *i<}!W-bt W?&"/Mއu=7=BB~F}~w2ӻ?ݽrNqwU)uo"_AEj$&q$* W<kᢛ8HQ68]i^?LgAW1N~SH`#^A,@3CYa^xj?UK5p Tǿu{zf^50nhsFaX/wt`#c2YL9Wx&m
-hKˉawdb2DZz}=*fr5qG1a Z|W-ݤfDVak]>ɳCA%ޞ+`=8 ;뛍P&V ?c(a%
-cAL| G@58:t1xaX Nr҆= ^}upU5g[ -1ưtCO%ml&brs#*x'UC߀`g6fڶP ^ԍl\5'96,
-&K2Ǫw㻼VHoڌ5d-EWRU8;1t`IġڭFnԁ;g"Bt.H<T{vy:
-jYB3xQG
-$/: Y'Cz]'ປ0`2; ʘ% "rmᤓP*G6p GAeh%輹vzLR k5ٮ9dLGLRFR8*8?gBH:Ā&E["w.X.<=ۉ50LAFF:>\C:y%q9E.YRD7rN]?#s`8O=U\+MZr y|(Y#AQsy!2,;Vë)ZOf̽$<J7ZL~ڍy=AEGdzCuTɽhKC%Kgk4C@SsjЯHC{l[֧뛈Fͪ;JlX0#u$qFѥU$Dq$c`X
-#\t"E)^ͨɢFn$IKqõB^8+If_foxYf@1kAC\̪ .r$:M."qjcA42"
-~ȸ"t<hr[)Ӄ[&fPtF4h t5/f'οa]qMJ!8_EHG$%y|:-ppGOxE@8+9;Be9&\Z8{`<+k]lt
-$^#_EhBQ`ɪ*&idL]mg&jvB毩?[ .u=䛎(|Nc~Ĉn
-]-IKY5u*/(K\2S
-6 ׋46
-& B!oM"<>p$Ohlo
-x㉜OpohkK Ñ4Usi
-c,:8R9 V\nx/1]x/~ŝ0T`?A6Yo ^[}De!BzYB:˃'h:Z,wendstream
+4974 0 obj <<
+/Length 3882
+/Filter /FlateDecode
+>>
+stream
+xڥZKʤ~&˒-G[U>>$H"
+Ko6{ҵ ]0\a(_o+WtGԫ/h,&7K+=n_ʮ+{:UJ퓶;_Qu%#\k[ _wW@[nX5/jk&#XͲGl.滲^_3QLdl>`*b6
+"CnN]k[du0ЄYl
+{3w0H`Z! f½r{^fs~Cue(, T_š
+6 $ETQϿ0JԮA(
+>c'Y'YWY
+i`2 paX&
+p%ە7v= T]rۋ&"ZrD4Fnѫ iej8ܸgcFbK΄4&0Q^ SLgc(gaMC+|X0,7n3luHM7 ݮ$3V›F dl ejg`v0<' o1^ n9Iƭ7:h"v^F k8iA2 Z/lnrn~8(pO ^eHG9f<{1gsAΌtEھM`nr.):a,cL]_W\zǭ,S= i o1acn\#8rA z=Ow&zrarĚ#iE\)Ȓ\:g4`fCY WK~-$2h$` g1tdgw>F05
+WʱuoHWɴ
+JK \3-Us娂2TȺ$ w#CgEc$Hzs@p>_mԝ09t)MSI& z@sgļq#fFSA/\}5X)]=bq[5-X6L8&6
+D#{khCуȟzR%_2ս5"#JkA=tbIl\v!XX
+ޔrO8Q{ֱU8t+0sX&IjYM1Q(/Ϭ]bN^zK5.µE\+hq9U7r6*Ϸǣ)fcSƚ1X2 F8id3}b֝aZYϋ<v"8(Ww4>qIok>Hyo{SϐLX4hv%{)>7# Pשŧ]{kv
+jQلُ=g! .i d̅=d?C<̗$6{=T*9IX*;f@ǫ ^ }+Kw4v`<0Φ?m):G-[64Vgt+EDٝ+uA؇t|D[0IEbvKP v)E&TٓG<xW Z2/1rDy衭%a$Otֱ{ڹlĝI] pջ"׀2`C?;#FmΎ#Q0Y,o[ Gs[&&ǐ)5qx2=fQ\~9ɻR|y`Tw-gԭIdmtƣJ4l^4ׯFޠvzjrV|_w[:X ka2NF ^%m E-@yߕ,_䯱y!$~
+xMqA{q̕cXz*⇰
+f#nXi-GN6uY|~P]Yjfj1ӏdLNor^t#عPםEժ0W\mS[[q&|/Rl;G1%q_H
+7Sdm,ki] U}#>fx}&Ψ}=ƥzra, MLbjvƄrT"[rꌈ.[h1s<⤻2V~@ ǓzsQȖR P_Ns_lPji
+˩Ra鵘So$Hc<^t'
+ c1c 7eT-0\J_dT rï.LKUXtGNR&%iOy%r*˜%K_H$@*=\2]9z$c7~uRȔ er[@muvv8(]3<=Hрo|&kZ曮 j&$4 ه3VBf$8Ȝk9渜ZXyW0qgJh$
endobj
-4697 0 obj <<
+4973 0 obj <<
/Type /Page
-/Contents 4698 0 R
-/Resources 4696 0 R
+/Contents 4974 0 R
+/Resources 4972 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4700 0 R
+/Parent 4960 0 R
>> endobj
-4699 0 obj <<
-/D [4697 0 R /XYZ 85.039 786.531 null]
+4975 0 obj <<
+/D [4973 0 R /XYZ 85.039 786.531 null]
>> endobj
-4696 0 obj <<
-/Font << /F64 3112 0 R /F66 3242 0 R /F15 2876 0 R >>
+4972 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4703 0 obj <<
-/Length 3179
+4978 0 obj <<
+/Length 3091
/Filter /FlateDecode
>>
stream
-xڵZKs6Wȩ0|?c&v֖ˇ$ IͰ!cY/ &*4Fw_{Ͽb 4K8w|#KbIt{n׷wDr[|W60 ?r74͜yϯp$p^ ġ ?~qի[mFI,yu \ta]?Bs<>^EqQ(ǫUx,Y jy/!P$db\8 8ʝW_:Nx
-I(j>&i\$[H,ԏ8}
-Z yeVSL5vL5Td++Ag?mQhR>(;3}DA䨢z(?q[1
->YcdYc܋)Zn6&;'6h\/R^b0P? aߍ[E SC'{fRmm8I%'ot5Yx;(4Ct-x"9hlt\ZH\]2?'}.xMjl}sjLwn.]yl4jb4鸠ҍ[t"}hʽ#*N_ ^Ի^#bg3Ʌg%_b:NF 4ЉZz`?Ff6CFadaˁiQcy'6> ՞.V'T}3Jcc.AKnYQ2I_iw]Ν dޏ>LNO1q0QcOaPn\7Z r
-C3bP綞/%cc2KRcF6'=Pqcս {E<(ܹe̗86ɡ }Shj+2@cB(?`Jym;"F CGNw:Da)@i߃<Fj
-9<FG06w-9ܾeSEg.XN{luGpڷ0yoxOm}{/)QErx*+_|]حz9ύy7ZE3Hx Gns\_ODCJ̜~mp0(swA'Y@@ ۣTbtwn2a1~Seb B= !0H@~qC
-1q` yˡdS\` (Rϳ_Z}=J\VJ(~J).+ǩZ V& d^j }nP.xt=Nmʏ${&l?7^!'Ty1DࢭLTj ?l;7ͧ+H6TP`_ t,:"2
+xڥr]_GDp^fc;R٪>PD  O_sT\3===}&H .7yinvMyoB
+ց/l~S~Zf/?޿t v6n[\|>oʡ;c
+&<8òt7Ii{{%޵&4./e+2HS?Kr
+myiC͌߁ V}ab·W
+ta`@qEFc}D
+RXDlNMA V@)"T;O<y$C-ªdhtNryp^ gh ~P2jPIFEg>iTiQX?٨^ n@B@%fzfH+y(8"Gb
+f0ݞ
+HDyW»:>"ւW>%͚
+%Et`Qָ:Z8ж\_Ndƞ/lA`vQ2*Fp:;7q vHH-9 Q Oҝ3/;H%4XgRǥ{-n/³n&t 0BVopU;!b`9 iOipXJہ2;/fjh8#o39xI$)]cKj'sT<#Q8bWqee0
+Vy68qPEN(71?u#CXE5_s;]\OЁ AH\42(;˒=QtNN͙ǹuORB+Bg0 $(p ZY(AX@SȾ?1z %
+Mt|i|KxbO\r!Kd2AN̑oHź/i^0KN@ϓ2njZ -<
+u pǩљÊ< _Iy Kyak#Q5m!~=R$so(ڇ,L\9]638 2v.| З!30SQ|Nn4:?,V>t9nn9g_?*_V\4\{"gj3qC
+x
endobj
-4702 0 obj <<
+4977 0 obj <<
/Type /Page
-/Contents 4703 0 R
-/Resources 4701 0 R
+/Contents 4978 0 R
+/Resources 4976 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4700 0 R
+/Parent 4960 0 R
>> endobj
-4704 0 obj <<
-/D [4702 0 R /XYZ 85.039 786.531 null]
+4979 0 obj <<
+/D [4977 0 R /XYZ 85.039 786.531 null]
>> endobj
-886 0 obj <<
-/D [4702 0 R /XYZ 85.039 766.606 null]
+922 0 obj <<
+/D [4977 0 R /XYZ 85.039 467.277 null]
>> endobj
-4705 0 obj <<
-/D [4702 0 R /XYZ 85.039 746.481 null]
+4980 0 obj <<
+/D [4977 0 R /XYZ 85.039 433.133 null]
>> endobj
-890 0 obj <<
-/D [4702 0 R /XYZ 85.039 649.92 null]
+926 0 obj <<
+/D [4977 0 R /XYZ 85.039 309.474 null]
>> endobj
-4706 0 obj <<
-/D [4702 0 R /XYZ 85.039 629.326 null]
+4981 0 obj <<
+/D [4977 0 R /XYZ 85.039 275.331 null]
>> endobj
-894 0 obj <<
-/D [4702 0 R /XYZ 85.039 494.239 null]
+930 0 obj <<
+/D [4977 0 R /XYZ 85.039 138.123 null]
>> endobj
-4707 0 obj <<
-/D [4702 0 R /XYZ 85.039 473.644 null]
+4982 0 obj <<
+/D [4977 0 R /XYZ 85.039 106.1 null]
>> endobj
-898 0 obj <<
-/D [4702 0 R /XYZ 85.039 361.414 null]
+4976 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-4708 0 obj <<
-/D [4702 0 R /XYZ 85.039 340.213 null]
+4985 0 obj <<
+/Length 3176
+/Filter /FlateDecode
+>>
+stream
+xڥZYsF~T5Rx9gllUZ%)RKRx͖MaRFqe0Ldf]ni _!V
+r`~s\:{'q\ޖ.>ߗ0 ~^4[|^_ ;D?lFu>O˿otkr4Ͽ˒[yvDco"u:o.n.iq^t)X:<:R2O(<¨]bqGOŮGYB18ůr
+<c2Ռ?pI<Ѣr%c8ԓҨ5GzQ\XB}',pڊ0>2).UATPAK2|zlqWQ O|gm}z5 {wz6"gE @!^/`9ٚC${;hiۻpC#N(#m56t(
+B058"
+A+u&NUpQT2I&ߤ@i!?lÃLX n6w^ڋ,+-rW/+TZLF-xR-/'մ-BSOJUoUTO ^Beimf@nGMa \\i'ҒN
+<g' 06'D30zd礎!<z6Ik8âid4_ic{dDҠuʙ{eZb)|V:cSՔpZF{,^܀~vGwRYdQƛNjoV&gi`8{^9!9Aq[)]w4h+//|7Up)qu3U&MʣqۈU;+fNshb2 vSCpCW^ZbyoF>owF<Ϣ<Qo#踖#8"
+DL?8 7` ցu$fdtnH3+m~F
+ 3EL GiɬիkSpSk:Wu,r hiO^`A]1%T?KO&aaň s~f1:9_!wJű{JgoڿLSWzkAdz'>n} M4^ 'AKGlzLRMMq L4C[Qؕ# 5
+LZV jn8G JVe ) JCH V8M01޶Tp\t7Emq*G>jy`4= )-_|*@s*|n¥C6&EX:ٕU ؋w<ξkQs*J<8z3
+BZa{h̵_>/7@W?qNMܦmNV
+9³:^Gޤ/끲%VVΔҸeX;gFj4jY( _d5f5? _P c[ S>|tM'NPXuSpUteh56Cz9
+%MB>y֚S%>!w<ьSKtkh;W0)WHGd:Sm-s2q EM(JG̴Oc=8!؉oYr_wc3cY[+1[,y.ojP] \˷JOxaWx/F煞uIyf13ɝԞ|>roi619>Ҕ}u18MөesQcGN(Y1/ DhJ)L_p<tikOl',ô`b:
+g/<Vee< =\P[b9K&q*ыendstream
+endobj
+4984 0 obj <<
+/Type /Page
+/Contents 4985 0 R
+/Resources 4983 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4960 0 R
>> endobj
-902 0 obj <<
-/D [4702 0 R /XYZ 85.039 176.513 null]
+4986 0 obj <<
+/D [4984 0 R /XYZ 85.039 786.531 null]
>> endobj
-4709 0 obj <<
-/D [4702 0 R /XYZ 85.039 158.039 null]
+934 0 obj <<
+/D [4984 0 R /XYZ 85.039 684.064 null]
>> endobj
-4701 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R >>
+4987 0 obj <<
+/D [4984 0 R /XYZ 85.039 649.314 null]
+>> endobj
+938 0 obj <<
+/D [4984 0 R /XYZ 85.039 472.065 null]
+>> endobj
+4988 0 obj <<
+/D [4984 0 R /XYZ 85.039 440.042 null]
+>> endobj
+942 0 obj <<
+/D [4984 0 R /XYZ 85.039 341.361 null]
+>> endobj
+4989 0 obj <<
+/D [4984 0 R /XYZ 85.039 309.338 null]
+>> endobj
+946 0 obj <<
+/D [4984 0 R /XYZ 85.039 158.581 null]
+>> endobj
+4990 0 obj <<
+/D [4984 0 R /XYZ 85.039 124.437 null]
+>> endobj
+4983 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4712 0 obj <<
-/Length 3476
+4993 0 obj <<
+/Length 3063
/Filter /FlateDecode
>>
stream
-xZs6_5$~ͱƽen>"-L*IHI{ v.?,z?MBSiDn;]_8SzQEKOIJsߟ..?J)lljn;Wz9v>^I7(ޜ_N.# ՑB<4)9\&\?MO7':Tn|W'w'0M EcnS<A@ZބM nu^@(r.2[-0ud
-<7L'dmAf6gY]Bi2l·lE _ςzZ>emtK\rSzp7{Y73ӡCRL?ɻ }‡
-I1u˶5 WNo4&'Y;fUI=K TФ x'VpdЦmдޡo`Z:%Ag@Z+X/F h3cfjҒڳ &嫾:HKQ/v<(6q.yX/YT#;}3_']^9rpA0X̑vxvpGY@H
- _KoꙭxJȪA}2 hFHؠLC+$A>*yqU]m u&c
-#j[9[
-W3KI/ UeyN*oP
-GJF-tpXfڒO"y&%8a5.X؋_ xiiNE^^:2.
-DHFk%]Va=b%d22(Z2%
-c,̠hi˨WvvX
-R 399|-dQRƎY,vs@֯~sBcbRy6(gaLM&ӈdJViX dFlU[M%NߔyԱj3ev<= KMRt+$D%-0_{9(򌛂)!O8`# "Mm]\,Fn\
-qˬ3@`[wmHB!@sV_ˍQrPL \Xid{-nhMXycUn#b+zHQœɀWd\.@–oAy3ʲ8LD"fCb,(!q|?VwX0-bWt\)G;AVδA_eVtpxp2Brh9/ ػ.V|8{OCe3s67?;|Pt+~1?o>g?` R zvI[H⽌;7$4`P>^\?5q o"ԊwDĩdү%qT>X"%m ޗ5 MVR%xtxM2BFى1[~S^_H t\^VzWL` ڬN7|ٝpf8zըDC.T]i2*-qF r
-/fVstp9 CknA0K +Ҍn ⨚fJpq/}43JP'%eT5Qr€[zYF7~va.dl9N+F1T#;"ll(R_r&$\fgB%!l"Y߯ބ[&*]TH7OWohe2g[vwy[[-6?.4
+xڥrF]_XebqycdVֶl$$@ @j+q0؟y?b Y%nMu͞`/ Y`~Y]]|ͽ|zxrύd\Xޯna:~i9s;_\ 8/7tKw0"~կW7+KՈn? ӛm_<7̳+=YušG|WWx-)aYx*?AI <8[S Z\aPf2g3R+ wm2*u k'˦w 3P9IռW MuAT?1{~pQ9L­>
+8'l U[xz'AqUg1sFOMU $h_ `Z r>
+>XJHw4@MoP7Ap!np*
+ r$;@XZbOϤ(|T T RJTN*z,|FQE  7}|O]?I.g |.8iN#FM$͞YBRd;p
+cmңѠ
+/X8VN 4W_aJi
+iKBᷤ3Pc
+9'hGTí$y\7ŷ hIs؛.AK@ɇY`)kl@oLC (‘~dnlHs XŦ/VLH
+*iv2Xˠa *LD2й~5M#C(˩MYGzO-Ą4 CniؗogW)ۭӧk@4VcYqN%eNj7J=XLfE<
+1󂝼l>!"_Dd 4P0oڂk= (9I>bAݷvsm{|呋_4;𬡵Ie`ZoBY\9*'C L6i6H(OP3 Ki
+,#NDž0$ʤbtoQ`F<a4&NJ+[_
+Vy68 ̉ u `Z]3Ġ׺Sng7x !Q[J'E:ԃ8?
+$q.rt9OI͑ǹiOfRBD75'.L jVK̰p;W%fHnk%Lt|e2j#ɻ::dc7ȑx>/v:~XÓ-ck?"-Riz{`1vౢ%+[/$hX c8Bd{rMKilފHp4puv>"lm3J`T3+&Thh+ /ֺÌp2гki6cIL}$QI%:Rz0
+%qB> ITG?"nga=8~<I*n4/NCOk͏QG ʋge8jolJrF{sch\%4|PJ0py}9#B瓧Jk[NqSw[{PaF0d_chden~(7-1NJO?9%endstream
endobj
-4711 0 obj <<
+4992 0 obj <<
/Type /Page
-/Contents 4712 0 R
-/Resources 4710 0 R
+/Contents 4993 0 R
+/Resources 4991 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4700 0 R
+/Parent 4997 0 R
>> endobj
-4713 0 obj <<
-/D [4711 0 R /XYZ 85.039 786.531 null]
+4994 0 obj <<
+/D [4992 0 R /XYZ 85.039 786.531 null]
>> endobj
-906 0 obj <<
-/D [4711 0 R /XYZ 85.039 766.606 null]
+950 0 obj <<
+/D [4992 0 R /XYZ 85.039 599.78 null]
>> endobj
-4714 0 obj <<
-/D [4711 0 R /XYZ 85.039 748.602 null]
+4995 0 obj <<
+/D [4992 0 R /XYZ 85.039 565.636 null]
>> endobj
-910 0 obj <<
-/D [4711 0 R /XYZ 85.039 595.724 null]
+954 0 obj <<
+/D [4992 0 R /XYZ 85.039 414.879 null]
>> endobj
-4715 0 obj <<
-/D [4711 0 R /XYZ 85.039 577.25 null]
+4996 0 obj <<
+/D [4992 0 R /XYZ 85.039 380.735 null]
>> endobj
-914 0 obj <<
-/D [4711 0 R /XYZ 85.039 394.285 null]
+4991 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-4716 0 obj <<
-/D [4711 0 R /XYZ 85.039 373.69 null]
+5000 0 obj <<
+/Length 3393
+/Filter /FlateDecode
+>>
+stream
+xڥrF]_K-}>^;Dwm$C"'
+Ȕ3bGCcː+B4u78ʾk_EZ|@ (L=<{p~E#]"' lWQYE
+F* 5"^rt=NOI쵧)[CR6
+zVVI^I0EboFKIJ3@ PbTy8W&Fq3ېQ2 JadcG}҄S6Swú& k&zq"VegBl&n nHFZ4I{;E?}GפI0 w;ĭ&O@d(`6uS"gV=hFެXK"jDVgÑ49$߽@cC a%2/hɞm7!"לy: ~
+khM>q-}=,-)>bywLxg^$b`Tbm&7uσq(Xbp3?qY6DU%3/5Z
+mKK=h. ^.G$'2.
+>OnY;#E. _/JWz9x8վBs!EBl^I; VWXkߧ*SȲbJ)(,)
+endobj
+4999 0 obj <<
+/Type /Page
+/Contents 5000 0 R
+/Resources 4998 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 4997 0 R
>> endobj
-918 0 obj <<
-/D [4711 0 R /XYZ 85.039 225.054 null]
+5001 0 obj <<
+/D [4999 0 R /XYZ 85.039 786.531 null]
>> endobj
-4717 0 obj <<
-/D [4711 0 R /XYZ 85.039 202.338 null]
+958 0 obj <<
+/D [4999 0 R /XYZ 85.039 766.606 null]
>> endobj
-4710 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F14 2895 0 R >>
+5002 0 obj <<
+/D [4999 0 R /XYZ 85.039 742.055 null]
+>> endobj
+4998 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4720 0 obj <<
-/Length 3940
+5005 0 obj <<
+/Length 2551
/Filter /FlateDecode
>>
stream
-xڥrF]_K-}>%^;DRު$ X0뷯9@T%_x/|fbx=p \/qǛh{n<ns_~X0t]4s-}v򝻷88߽6"[zS wo~}o>Z"7JB$ox-Pyxyhn8t(~}p/9*c7L*,xķ;96xÔjA<50kq0rŀY/WAʋVp%[gaKYY[ծZ2[w8\u`8y*yvx;iO[5XɑW>-3+xW0d@ƁS [WOTA;qHcU]3v)S72h#pF#0͗a,qRlv!$zMCЮxo~T|e# #'ǃSTi`-O{ ȷ;p0DWT!$w)z(Ef3'\)#=?ZDF xlLU,/MdF gnA􄵋(Dq7JRgSWwE`tMhL/=9 FrL{{V,+If,#2kU'EZ"Z U'$V
-R0D8E +$Owl
-vGm+-6tK\$y?)D &@¢ shn L_ $Mt5(1ۖzyp,wņN<%ԗC}DpY [l '#`BXل#Gғ-)~<R%
-l)#!g=YNsdZ\yNe[T4(:<vTR?;TV2U$إIb*(uؗ<BՃk\
-,g&T~gJ(Vay
-
-*]+ՙDEdkd^(t{$hJ)r1mڌ69))f#!-xtw ̃rx0Vl UA%A+TF
-lF4!Xi6}`.Oml9^c
-zK0c<0-#ƚ55/1N9<a哲-L:Rь2災.0{j]H 眨ԽF/ؘzRg${`jvb4%XW~4C~h \In}
-&qF*$7gg7*H6(P
-2BFVNߑ4 #k[}JfYm 3 ~/U/m#\Ȗ@9!I
-h=aYlHnW`[ ź.\8M}Ya
+xڥr]_K [WXL)(!.
+B)|]
+uȅ#׾.
+bk)HTN!lМil78Ljpά0 #J́v*yIbjhN58] ?$f"GE0A]7:vG1!'H]9k&'܊"C~w'y&\ )H{ݘ3'Z
+UQ䭱$aÅoӹo
+qUYg K kN1t2
+d@.a
+%9C8"aYehE4^ b^0>P2-tyH[!YHԍo#qЛ^R!k(] 7ٸ*eS=T r蜺kӸ\)ѦlՒ h٠?컩58=Q2Q\lTRcXB
+C(S ?I +D\g|yqϨR]D< Ko<P6u`͈QMUv@ 7f6X?4,&pr={Bd_L5h=Y*2*<(@&tN +n39:͑WP-
+#u=z*cV𠻦a 'uGօȟpgj<>"|dž6#bpBߍ֏…< +5j./8#i#_HƂLcFt":rM'h
+?&VFb
endobj
-4719 0 obj <<
+5004 0 obj <<
/Type /Page
-/Contents 4720 0 R
-/Resources 4718 0 R
+/Contents 5005 0 R
+/Resources 5003 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4700 0 R
+/Parent 4997 0 R
>> endobj
-4721 0 obj <<
-/D [4719 0 R /XYZ 85.039 786.531 null]
+5006 0 obj <<
+/D [5004 0 R /XYZ 85.039 786.531 null]
>> endobj
-922 0 obj <<
-/D [4719 0 R /XYZ 85.039 615.144 null]
+962 0 obj <<
+/D [5004 0 R /XYZ 85.039 766.606 null]
>> endobj
-4722 0 obj <<
-/D [4719 0 R /XYZ 85.039 585.74 null]
+5007 0 obj <<
+/D [5004 0 R /XYZ 85.039 746.277 null]
>> endobj
-4718 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R >>
+966 0 obj <<
+/D [5004 0 R /XYZ 85.039 704.117 null]
+>> endobj
+5008 0 obj <<
+/D [5004 0 R /XYZ 85.039 669.973 null]
+>> endobj
+970 0 obj <<
+/D [5004 0 R /XYZ 85.039 426.232 null]
+>> endobj
+5009 0 obj <<
+/D [5004 0 R /XYZ 85.039 392.088 null]
+>> endobj
+5003 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4725 0 obj <<
-/Length 2607
+5012 0 obj <<
+/Length 2819
/Filter /FlateDecode
>>
stream
-xڵn_!K"b8@rq٤qiF"eD-Iq6n!@93sZxS$t ]I䆁Zl ?](A//Bynꥋ-\g_W}ˏUrljf˕r_"w^|x|+]̾z퇟_PҮ$׋/_ET|A,`*M ny//>]ۅazf]iA/V&8V /U hRgk6m%` v
-ӧP[v8<䆎ڬ<Y37)nyF{<he3
-kI:gSKcћ$EC~ z _y  {9 >`Δ6֣1S]q0$ 
-Q}" ͫT%8nTك(|o'Tx(lVTkP(YۺlGdP?.O%w~yi{l7w"2W(qaOsq<Enſ-0ũb!K[
-tE4T4aa7]fm xya`( B*RISu& @ڍëeS5^<tNVꕠ 8$֌q|i׊#Qs;{ђOC 55{mC4PQ:0D
-66\-Ȟ&Iq8i=G A6yͱfࠠJڷ<Zm5twޔڔ_gߋj"f&o="RnHXMѴ~ 4$_CV4 }.'(z.8$6"\h^)rg!qed _w6 ER0R#=]=xɁjzGb ;K5)[7MXQ W.CGeg3vҁ#Cihi|j[VZ25 5mQ}V eѳ.L)wQ3% ٔ
-J[-'% вvn?!cOe6DrӔ<1s-
-ۑt%^J6{{fĊU
-}Տ?>p/"d8md</mHvƹa7uHױx3YdL Ye|,ikލCH#wVR2qޟCgAWf[KD{'n>%d ܴۖE}- g~tGU0=厬my
+xYo8OVDz-p$}I6q7b˱PI򦽿EZ+p(P3p?5
+li5=p^)Ȥ#rzt*G* MNOQ雓xǓ$IWcO9wrqƻ>).Z.Oף󩳪cmOhz:KG*F#i?2Zƫߜ.ra$Kd9}-&ϲph%~
+L$J:`?~mIGEX)+:~Zq0A0V:=LR?ᨳR+9М%Seij-eV X aZEWIz1#Lh ӡ=.%S~Q„~UnVp}
+9&DFܿɺzxQl\Hb gە Ɏf/(1l(N2ߤ.pLN@)cCp읉V~
+D>~~)_l;Am(/oǁPEq&ysjr·w7ny"\~7'c9 ROx@ .ΐ~}3 Hz9ajB%Mn?4Yv//[Դe= + +@wuň!G]Yk._uf]r"5zϪ͂!knĂ(e`Pc釖dPQ]v'_A̋E֯Z)\Դ@;"`A(G!-bLjM['Wfm~u')d)-Sb5G#ɼf{;/@gH5$-etE'4BDs / &n5, u!: %Spw(q-\ &-YcT\I\0JxdI `F?ZD
+Nƒ¼CP-&Ƅ䵀${x79WN3y` i%\ |LY+4gBy{W''ϧJL%0K:ctpx}8_saqm,bC~R.pC׏#@ Qc1e.]I2$,N9<E=ySR.@_f^U35%HX  ?$[p].+:(wqrEz[pHM=w]=w@ǒBb p(|e)+=ws;+}<;yo5Zq~Gl 瑎Kyjǰs8Z`ͷ3mou T?({Bp(5^cZ^'=Р#yĝ~Xg\SHS=qͫ1@cô
+iA;lg
+m<]FMߢmϞ;۫ܿsĨ捒1u7׌I=taR0ں1YʅH{X"n JzP%NÖV"J_PV.=
+};P4ȷgh~@{wC4*#wgr4!"^CM@]Lwn$D$xlWα(<<ƈPtɄs!.{oyfńzwа6g+-8ǴU@vjŅL{+7Rw&=Dk>m@ۖtE(@QƮ5ի%Ͱ~I hr|x!k1'(3*w8T,-!s)k5?U V8 iཆp
endobj
-4724 0 obj <<
+5011 0 obj <<
/Type /Page
-/Contents 4725 0 R
-/Resources 4723 0 R
+/Contents 5012 0 R
+/Resources 5010 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4700 0 R
+/Parent 4997 0 R
>> endobj
-4726 0 obj <<
-/D [4724 0 R /XYZ 85.039 786.531 null]
+5013 0 obj <<
+/D [5011 0 R /XYZ 85.039 786.531 null]
>> endobj
-926 0 obj <<
-/D [4724 0 R /XYZ 85.039 711.163 null]
+5014 0 obj <<
+/D [5011 0 R /XYZ 278.932 769.79 null]
>> endobj
-4727 0 obj <<
-/D [4724 0 R /XYZ 85.039 689.966 null]
+5015 0 obj <<
+/D [5011 0 R /XYZ 85.039 660.869 null]
>> endobj
-930 0 obj <<
-/D [4724 0 R /XYZ 85.039 661.355 null]
+5016 0 obj <<
+/D [5011 0 R /XYZ 351.735 483.331 null]
>> endobj
-4728 0 obj <<
-/D [4724 0 R /XYZ 85.039 640.76 null]
+5017 0 obj <<
+/D [5011 0 R /XYZ 85.039 374.41 null]
>> endobj
-934 0 obj <<
-/D [4724 0 R /XYZ 85.039 423.851 null]
+974 0 obj <<
+/D [5011 0 R /XYZ 85.039 357.174 null]
>> endobj
-4729 0 obj <<
-/D [4724 0 R /XYZ 85.039 403.257 null]
+5018 0 obj <<
+/D [5011 0 R /XYZ 85.039 312.099 null]
>> endobj
-4723 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R >>
+5010 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4732 0 obj <<
-/Length 2789
+5021 0 obj <<
+/Length 1838
/Filter /FlateDecode
>>
stream
-xڵYms6_'S$7}P7Iϱ}\'@eL*IgHn{oX,ž<ܑC(lGMGQځrG3zgpF^Sg:el]/xEصޏ'uuϚ]A÷.iC7Ը3ԫ~;2rޑ`~ ¯g8Ici<zch{|e_UdɬNTE ǎc=
-N5$eQ4K*iY> z؛z{]q@:S`n<xDXsewaDžo[r>1y&&".#rkQ6'Ҫm"K]UVgx^Dsaiȏ g]"_,vFoKSoFIXZZzWٹތqiCdn؋-ud(JT=Ӟ4gכZ]kG?H~at;c/hgkC)_IUS,sg,[l<'ɫJvzFxoB~{qz{OO#vnrм5>^_wo~F~wOг717w4c~x^y(
-/@OH-Y  %5
-MV5eRQ( ,{ºi4')άEvc
-{f
-,B<WxwX9t8ی$(RGNצ{
-16&DZ4\=<v.<v(7/i;81s_';/{O tLm{(ZĪgJe|qHA S
-ʄFϗ蚸q-]"[/`[an( 
-C&6gnA\vl >4ڽzc0'Xv"7BSyqyTTf˶1͗|}lZO aa'5j$y*EMM)I!BlAʨ˼-i1=Luu2}Pun(,fܘO"͛Qx69XN"Lrsxw<pY8M^
-@I,b ]ႍ۷E$,6y7,Z-5vZ@.8 X`-E!ɘuxt
-$filݾZsezi+ֽ62V'o[_kUMZ1:ra^jkv_
-o1 cȃ_ N)\7e9@m~{?cV~W}`h.@xkɰ%#Bi`Ost <x`h7q%qT,D=Slp$Mi<qyؘ(q[!GI754hmސzzMY!
-RIU 4t73]rl់kUdw~Wǂe6@endstream
+xڵXnF}W w׼8ulI"%Hl;%EIT&) {=sfVrOZ'YA OKk8fY12KF5M<ߒȚ[9#ȷ'{z:ֶtp}6p$ (}31N]Aƌ^\?|;2}?L[:zKQoO_+z#dYi,s-O >;]5)UE,#ڳG=ռ~mej32cqUw,V4W]HR "gWxg5wV1641JM`sVKVF*+0pHo#rv+lQp"p\CFoǔ<DJ1،άo ㍴dvfpپpL(Q5us4pxo :N\tz<<ґ4Јf҆eцbYF8aŜ("?巭](=-y r_0tǪ6n|O<|`=O3Ƙ4a,<"S6G*(s%FECT$lgyxH)yKx ګ0¹#u 
+H~Mma*&HzSzњ=/(omɆH,<`iڰtV|oj_{d dZ&}+xN.~8;|ڽy-h,Ӽy]۴mi
+n]c:.U
+eb
+MfSN\CxʃۯwW(îL=4efg=Y9ft$
+^0L!ǦmT%i%in~_뽴(t
+,/ ɯЬ>vzR˿|OB~_y
+$[ePhx.endstream
endobj
-4731 0 obj <<
+5020 0 obj <<
/Type /Page
-/Contents 4732 0 R
-/Resources 4730 0 R
+/Contents 5021 0 R
+/Resources 5019 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4700 0 R
->> endobj
-4733 0 obj <<
-/D [4731 0 R /XYZ 85.039 786.531 null]
->> endobj
-938 0 obj <<
-/D [4731 0 R /XYZ 85.039 374.974 null]
+/Parent 4997 0 R
>> endobj
-4734 0 obj <<
-/D [4731 0 R /XYZ 85.039 328.305 null]
+5022 0 obj <<
+/D [5020 0 R /XYZ 85.039 786.531 null]
>> endobj
-4730 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F66 3242 0 R /F15 2876 0 R /F20 2865 0 R >>
+5019 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4737 0 obj <<
-/Length 1896
-/Filter /FlateDecode
->>
-stream
-xXYoF~ׯ#T 3o$N}
-c- Eaen:y细ȎHs|v9H)MZI滱0Oap1Ώq3ؚ .oټĵ\_
-?F_FZ~ٖBƶ%X\OZ+<]~ok0E',;DV퍅7p*\=
-3ɾBx
-iP`Ŗm`]>ʂEe۬-u’r G%JoQ yՖqa5v}TQҖ|1QW4_DwO1
-3QNo="¿W*偲M> l<5O7,eAi\}\\!x#Gو$AM'tGwqFbKe\52 ϛs5<hǡ4 0<_/E,l
-2Eb2='<?xbhK/i bsR4Rh䲍)~ʦΊ[> kװ)"
-"umzLEF2 ȑdا<ɔ`q?L9V\:ne3ImB,|r;ӢTf7T<Ӧa+-ּ٧pDF!Y4nsat0mɇɳTD{d[v5oR!=۩BqKJ0zŵRwWE!z`Ƕm*)p*L!'> FL}2ҒW>!!QJ_vwq%e5"A8K'1 GDIo1"]M</5ܳ*FΘ1›0K)%#ˁ/v:( @
-iUJNpmOte:Ht{!C5DHxH=z$
-J$c <NQ[
-8 *^m%e0[&J|XI[uI:ދ" :Ƥ}<߽n諪bUK% h[1Hy[Q!kQ
-n@HinSP-jS=i`[!uL3*܀xYy!C
-,pϣ,HrqWCC'!Bg2{ 8b eɛ=l
-4I DeWXDKQ9
-HO探@е/| *{’ʨ幊k'8&Lr{ uN3u@Iy$A?nqp1aԬn'8'ҌЀ=`~`w7mpEFaFuDLMOZsn gX@IyDž\+j ǜ<U\a~W9
-z82TFnet pe mzʤձ\oBU sͻsZ,mVt7[*j {e@+t
-
-+E:K|]CͼAЬ_k t CA?`]+8?W\[.z[;qmGc=XH9A6 ֘0@ >7I
-Zendstream
+5025 0 obj <<
+/Length 2207
+/Filter /FlateDecode
+>>
+stream
+xYs6_gjUI}lv7m6ٹi;;ĚؒW
+p c)tfG'@!T*#2|Q
+|ȋXm%$3?ҔJq#L[ThjB:b`3$FN6!NVu_m`vE\L6}O'3x8sh(dePHXI@
+CRu4$āyu=E S
+YӵC3BM.
+'(I<BG [1j@\h+pN_t@OSQ)M/*5_1h6x5QvѺPz.ؖkޜP%u}ESe5&МƇ!zS->Õ,J> "9*7&@Ǿ4,,mSύZ}%igCIUKxȫ2Jy Y|#DDv\J}-I(xIN|fTpO#JQ8>s#} p)IIWjfZH')g{a NL(%vtlO]okL3Pk^mu.'5~uǁ_Ee4#uͿÄ
+)35cǖ\B{wEnf
+҃ۛS-TM|2p(:t:4Q`՝IL"
+zsd)I{RTQiOfd\|_߮o/ήzvGڮb\ǀq wo.jо-S[k}WۼZ7z8[ۢ_0vY]eەz\ba2O>|_ͨ#I1_vc|~2sk'
+~
+8%Gk*CPƒLHendstream
endobj
-4736 0 obj <<
+5024 0 obj <<
/Type /Page
-/Contents 4737 0 R
-/Resources 4735 0 R
+/Contents 5025 0 R
+/Resources 5023 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4739 0 R
+/Parent 4997 0 R
>> endobj
-4738 0 obj <<
-/D [4736 0 R /XYZ 85.039 786.531 null]
+5026 0 obj <<
+/D [5024 0 R /XYZ 85.039 786.531 null]
>> endobj
-4735 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R >>
-/XObject << /Im1 3957 0 R >>
+978 0 obj <<
+/D [5024 0 R /XYZ 85.039 232.528 null]
+>> endobj
+5027 0 obj <<
+/D [5024 0 R /XYZ 85.039 200.107 null]
+>> endobj
+5023 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F15 2976 0 R /F41 2998 0 R /F20 2965 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4742 0 obj <<
-/Length 2307
+5030 0 obj <<
+/Length 1731
/Filter /FlateDecode
>>
stream
-xYmoF_oG;{I*q/V"XIE"UK-!rgyffGj(Ic7
-hF0B7
-]/pWq8RyhvO"՛_gǓ IΫrnLqw.߽F輿+{^r׳&nϋFKdڞl@ˋUx,NBA&ih5V g4pďBn96#g:SbkF{L+ES%`pXukik 4q̍SY"pv~Us<D(4\FZopsu|saFZҊ'X@ktW-@AgK!nX, ;ƱG|'?jnħ@b):|Trx䆑L<\ᚧ
-*V1ÖT })xH8CU;:e쳔i9 K-"1hkdU6?V%paK>:a3N@X8^|9v?၃4Р%. #&m5ڱo8jDyIA>_t2H=(Ɉ ְ_2@$i ~1ΥO1i93էJ~ݼZ}v<to_le/w~z;L:%0 Gx0ti+eӨȟ`n1C
-T.ph]
+xڵX[s:~ϯȣ3Ce[V
+tfL/hD |_Zu6!WnnhA Zjv8lKI-aecji34KpA*Sr};1!<*X8=c
+Du));dL;ݘaqG*+7uXl𛕫0#hk)HnS=uh([OdO*HeʃX8
+ qYmaV>^aarE.U M"3z{:Xyw9bc_iLr=?}̺I͗?@o]>Y5dwY]‹*U*;!Ģ /O xYQk(@Nd !)tbcpIx_ٍ~isxf.UQ8MG֍}ā7D9b,2i0&TZ[Bƀȴ+#VzAa]Buғ81x>#i:
+k 7^['h)v1BX9+lt ' G9|xpTSVȔ8 "rQ q̴6bY 5wm Pm }[Ub3PC8^M_ԁ[Nԉ($=,+܃=JXɾN-I}tVjoIV hE%u:rʦdn]@QV<i!T??Ώ8rMBd7$-~yh?ǘendstream
endobj
-4741 0 obj <<
+5029 0 obj <<
/Type /Page
-/Contents 4742 0 R
-/Resources 4740 0 R
+/Contents 5030 0 R
+/Resources 5028 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4739 0 R
+/Parent 5034 0 R
>> endobj
-4743 0 obj <<
-/D [4741 0 R /XYZ 85.039 786.531 null]
+5031 0 obj <<
+/D [5029 0 R /XYZ 85.039 786.531 null]
>> endobj
-942 0 obj <<
-/D [4741 0 R /XYZ 85.039 477.837 null]
+982 0 obj <<
+/D [5029 0 R /XYZ 85.039 724.712 null]
>> endobj
-4744 0 obj <<
-/D [4741 0 R /XYZ 85.039 458.965 null]
+5032 0 obj <<
+/D [5029 0 R /XYZ 85.039 692.291 null]
>> endobj
-946 0 obj <<
-/D [4741 0 R /XYZ 85.039 316.648 null]
+986 0 obj <<
+/D [5029 0 R /XYZ 85.039 153.609 null]
>> endobj
-4745 0 obj <<
-/D [4741 0 R /XYZ 85.039 297.776 null]
+5033 0 obj <<
+/D [5029 0 R /XYZ 85.039 108.535 null]
>> endobj
-4740 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F20 2865 0 R /F35 2880 0 R >>
+5028 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4748 0 obj <<
-/Length 3224
-/Filter /FlateDecode
->>
-stream
-xZY8~_ᷕXA]yKI&3lڻbf`[r[h$~"M_]< <dUg gyq1Opj=̼
-")?Hzz6U0-D,^OE^"r< DˏPާ70nIF?ܼwߗ?^Y:,Yr.
-g(fJb?Q۫]xNxA*( /ű8NHF?IP}~0_$QM=A,dpV}W(*"om|]^0] ",-
-st|ǓGHwɘʜl1qSΆF#Cŭ/@YW-JDy R>iXшM\M2o@џ13QelaadwsʏUnIF઼_sɕC̻F[ ɨ{#@-91 |()%<\0| fǝ G*Y`BD|lq| Ki奍`ZVg+Z<|;4p[~p(l1wMբU 8M
-\ָ#n^B̐Kl*~ABq\QDaσ‘I^ pz2tr*FAa8ftZM3>ADjD7Uy=^{.IuwT܆$Q̲Cblϭ<5XJgvƒdԷ6"#Cmctkԥ{HF272FI
-֧CA
-:QhWV !
-GO=ֈEAZK;=P,#qF+ZC5䍑^) S)Y=0ۍ}`*DͰĭ2OyEx8o
-٤έs;n[ ՞sZB..JZ]7U; wQ[XWFKυBs=%0[C[db@uCHˍg,˹J̆|fKμ=~_Ë3"s. 0Tqz@
-e&UsBOZMN.ZHSD9W7\ܦ\X[5na; HQa-j8Uq)c ~IP#C Q$_r!ʟ
-/Xa\t M
--SG!{|8p?.~ *i5~f5EA)l,$ã,xt{ RF#EqdvٺW
-uvKp䊙B!W˝,Ti<a*xS72 Io,)+1 s,E7bBE&!{/ <i9SlX+LEHq ~#yX">,y`k-v/r7X>tE|p"
-+nIez$;}:U7\jym4\ybҾ[ĉ]:pg\8eg
-Xqud,&ipX^`1g-Tf\62UFvI.r2ff$c*`@t _GM`ݨM7Nendstream
+5037 0 obj <<
+/Length 3169
+/Filter /FlateDecode
+>>
+stream
+xڥَ}Boa |{#]lZ"%C$קn?}TwUW
+ EqȋOpnf b% +i S~Zf/~rDZ&r2-W[`#>8e|ow?ܼT9tq4qo ,,M~oo>sɂW]cA~Zė<+<HS?Krex5jޟFro56*h4떻`U{zF^tǭZ0dګIa'u%򈣙{z(K7Lx wUGgD%VNUG.z{BdqI<!
+
+F &&F8I%|5/äQzM״@<-4ڳJvRĻo`1BeRrp}Llt2\1G5wyh\8mh_F%*=a&U<J eD=O3D 7jᒩ O0i: a/[A2|z6m%{F"6<%K~ ¤5T)J}8 ;tYxwuCB"^ڥ&s8`cˡ
+Q<4
+>hNu` C3!Z6aKJ\YASskذNѰ8T?npp/S ti ̛!>ۮ7}ྶp=IYԃ;mpJ<w{h "XF*[OjT._:D(4'X4{ ;F왼v5oJr~)J?N f_ť>
+OsXмwC.fBFzjZcR`=
+4S[# :'G6hn7nvt:Cce:%&]5
+.ˉM27 Ɓ3:K܀zll0E#a Fb`nx$yg8O.O,
+cEɳRi!U$\Ӄ Y<@I)>\"tܲɳ:<Ck:BCꐋQI]IYqY'Zfq ]$)r;nυI0ڥsdė+2&
+\D iZ
+(2
+C8GG"= ٲ ¹=l3.De,OɞB qp4fN!aEN ->1'EƙTJ$n1N$%1^Ty9c7 <evGTd峑c,BDt ,?)K"BHjK95a QOiE%7W0|hpTY,Ei1oL\y2$68wNq<LB'An]នb08ި,Zh~t)SC)ѩ]!J<*N*T6Yg!ânz+x0cO8Sڑ)kvgCQ.'e\=r.jd.~YDׅ,BK iESl~^rI
endobj
-4747 0 obj <<
+5036 0 obj <<
/Type /Page
-/Contents 4748 0 R
-/Resources 4746 0 R
+/Contents 5037 0 R
+/Resources 5035 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4739 0 R
+/Parent 5034 0 R
>> endobj
-4749 0 obj <<
-/D [4747 0 R /XYZ 85.039 786.531 null]
+5038 0 obj <<
+/D [5036 0 R /XYZ 85.039 786.531 null]
>> endobj
-950 0 obj <<
-/D [4747 0 R /XYZ 85.039 565.53 null]
+990 0 obj <<
+/D [5036 0 R /XYZ 85.039 669.341 null]
>> endobj
-4750 0 obj <<
-/D [4747 0 R /XYZ 85.039 536.126 null]
+5039 0 obj <<
+/D [5036 0 R /XYZ 85.039 629.177 null]
>> endobj
-954 0 obj <<
-/D [4747 0 R /XYZ 85.039 398.412 null]
+994 0 obj <<
+/D [5036 0 R /XYZ 85.039 215.269 null]
>> endobj
-4751 0 obj <<
-/D [4747 0 R /XYZ 85.039 371.798 null]
+5040 0 obj <<
+/D [5036 0 R /XYZ 85.039 181.129 null]
>> endobj
-4746 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F14 2895 0 R >>
+5035 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4754 0 obj <<
-/Length 2219
+5043 0 obj <<
+/Length 2311
/Filter /FlateDecode
>>
stream
-xڵY[oF~Do)‰ԍc'`H$¼hI* )JcE
-<ŋ3x“Hd0f0xVX%ni4+t:z{@&@,"{םrF~oͫD7f5C%蔆ʂWhGt:C.Si9 ]VCJʗ/N2ơB_)ϱ>{vB}hd!EϥLFwJqo3G}V|(M6Iѝ1lZ+t,{bʜ|Yu(^lͫ.3v0)<d\o(g+)yDmx"R̈ᤁ<#7<F Kr~mذx HuC5?oGɬTny=/bJT~ɘx
-|&E l \Rv.$:4ah 9&TbE1G_ֵ^&v7 ;Q;T~դg}MWWfQ' :y_Զ2{&EUt{siNe}f
-wp+=eiOY2SŞO)TP  4n|M=`{( r61V ]/T pxӦL4/$fmff076o;O*rad?\3]'sfe``ni[JvIpS<BߺW;*updW+޿JsHSyvQ^Wbj<!#&}s?lNyϵ^il^uK%WjV4OY}O1LJ=BHX/>fË
-a
- y!7g_xε_+8R@!Ao?BVЋr^Srс\ģJt\w;&{ġfl?$\&Ceܯ͇#i"qamѰe>͠AY&&,7-uSVoӽkz}]Z0iuGO]"w T+@f: 0[~φ)]"HH2W }a
-&̾
-0z = QҰ_4qЛAT<ZO[~u[6CUāT&ˀ+AHj
+xYo0Ҧ_<D>{[ֶݝ<1 LYTu5 ÀKH%]Uuuw|N/c'%wY
+c$]˵=<?vZRN:wIA|&yw8vVJK˃/,)f@ˈHhʪڀ5&KM
+w {ӔkN0g芚{z8Ƚy'R-͌2ݲ4Ls̋RmTFTC#;tS6t^˖8J
+TbdB0(k6Љm@uHfu56[ 0 L6e6#o}AO7&yG"(恤6O/oy&SJGPg"p n]H|QnGĔ1P@]ca ξfRdgڊ3Be:hiMF3IJͬ^YelaE70J[K0G.srsN Nt Ϭej'%B
+ j RHTjj?YRΒqT$ UL ./Ul
+YqX3 ?Pke})H_QܔUL?LpV,#j_Mcc/$SJ3RA-و/ F>ddېҐ/0vś82YjGJ}(_Znnvoٷr(}hUlV6/W$[B|n|aM~~,CD2"tQH&;Lۻz(^2w[Gpt%}BKʻsWN)"e.NvgQ'sJؚ!'-]?x79̦wG DPbBH%8ED pp84Wpr{=} epVok'PKdl1ZϏw?8n6:{>c0.O <^iߕ*kRsapC${T2r]@qYxaTQEM+ӄ l !ׯf<I} }bsfhDv}!9SkX$^o<y eƃ;NhD
+_Tp΋'~ hy>z@ge>wP| 0(">
+ꘈo>Y=tOH8ij[fwpj$/KDM Mxq-OeRw LDnʖ뱏loŧ?;eRǽj) t&-zL# HzvDj[w-oP GZN;eK?VoH'endstream
endobj
-4753 0 obj <<
+5042 0 obj <<
/Type /Page
-/Contents 4754 0 R
-/Resources 4752 0 R
+/Contents 5043 0 R
+/Resources 5041 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4739 0 R
-/Annots [ 4758 0 R 4759 0 R 4760 0 R 4761 0 R 4762 0 R 4763 0 R 4764 0 R ]
+/Parent 5034 0 R
+/Annots [ 5046 0 R 5047 0 R 5049 0 R 5050 0 R 5052 0 R 5053 0 R 5054 0 R 5055 0 R 5056 0 R 5057 0 R 5058 0 R 5059 0 R ]
>> endobj
-4758 0 obj <<
+5046 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [409.348 675.624 539.579 687.313]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/?id=812937)>>
+>> endobj
+5047 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 664.196 152.127 673.764]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/?id=812937)>>
+>> endobj
+5049 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [409.348 544.521 539.579 556.211]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/?id=811492)>>
+>> endobj
+5050 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 533.093 152.127 542.662]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/?id=811492)>>
+>> endobj
+5052 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [147.71 383.271 511.015 395.264]
+/Rect [388.679 336.453 539.579 348.445]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://msdn.microsoft.com/library/en-us/fileio/storage_5yk3.asp)>>
>> endobj
-4759 0 obj <<
+5053 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 322.904 298.441 334.896]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://msdn.microsoft.com/library/en-us/fileio/storage_5yk3.asp)>>
+>> endobj
+5054 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [367.133 356.173 512.306 368.166]
+/Rect [251.226 282.256 539.579 294.249]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;Q224992)>>
>> endobj
-4760 0 obj <<
+5055 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 342.624 331.441 354.616]
+/Rect [84.043 269.495 160.987 279.79]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;Q224992)>>
>> endobj
-4761 0 obj <<
+5056 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [367.133 315.525 512.306 327.518]
+/Rect [297.044 228.059 539.579 240.052]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;Q296264)>>
>> endobj
-4762 0 obj <<
+5057 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 301.976 331.441 313.969]
+/Rect [84.043 215.298 206.805 225.594]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;Q296264)>>
>> endobj
-4763 0 obj <<
+5058 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [424.405 274.878 512.306 286.87]
+/Rect [325.68 173.862 539.579 185.855]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;Q129202)>>
>> endobj
-4764 0 obj <<
+5059 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 261.329 388.713 273.321]
+/Rect [84.043 160.313 235.441 171.397]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;Q129202)>>
>> endobj
-4755 0 obj <<
-/D [4753 0 R /XYZ 85.039 786.531 null]
+5044 0 obj <<
+/D [5042 0 R /XYZ 85.039 786.531 null]
>> endobj
-958 0 obj <<
-/D [4753 0 R /XYZ 85.039 683.458 null]
+998 0 obj <<
+/D [5042 0 R /XYZ 85.039 738.261 null]
>> endobj
-4756 0 obj <<
-/D [4753 0 R /XYZ 85.039 662.868 null]
+5045 0 obj <<
+/D [5042 0 R /XYZ 85.039 703.515 null]
>> endobj
-962 0 obj <<
-/D [4753 0 R /XYZ 85.039 521.7 null]
+1002 0 obj <<
+/D [5042 0 R /XYZ 85.039 649.927 null]
>> endobj
-4757 0 obj <<
-/D [4753 0 R /XYZ 85.039 492.296 null]
+5048 0 obj <<
+/D [5042 0 R /XYZ 85.039 613.06 null]
>> endobj
-4752 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F11 2898 0 R >>
+1006 0 obj <<
+/D [5042 0 R /XYZ 85.039 517.65 null]
+>> endobj
+5051 0 obj <<
+/D [5042 0 R /XYZ 85.039 472.576 null]
+>> endobj
+5041 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F38 3001 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4767 0 obj <<
-/Length 2890
-/Filter /FlateDecode
->>
-stream
-xڵYێ }mXkt<o3;d Aڱ%G*OO}xHVI?.*"&_|Sa.nʪ4YD7O4ӛX)< ,ɹIe% 2'YÛw&¢Hoa <ϣެ}3v6<--ٿLJFE"IÔh^.NEO0͊b-q6]{D?Ώ#bzæfX(⠳:e<ϒ*u^͒2֘ f-!H$ٻ=t?:ܑm|W$M{Cʷap 8[@tPR SZ@M%y[g4ԐE 8cC-4+ 3h21.D6AY|DxyUnnq~ OD_6{@vTMȟ_ToDHpoĈU<E'2Ӧ1<?1FX5Yi!0 Z‹gO/2f=Eyp3<+N>
-ߣzCaaYz;'1YO/ydz%>4 s iVYs5$C>QȠ n?fUFz+M3<=IiBw{Xc`*."o߱L90R^m@:m7}O^,eU{eM|amU*0ӃcHᰄ~wǬqr'ee~ ãyi-^0{n҃h7_tl .Zm=,ёuR_;@OµI79uyюJdzk{
-)f[V=t̾*%BiVs]g'Don;0/: 影 ;%;Yjj)pV Bj<O4Q`j{ ZMkX`k?yFsj`1F{3Rrͧ°0>iM n_owrPC'fÛV]](FH ύ_q0aL#(DMݝmB~"b|K I!S-=ezXD{w_HcM/+<Ka(Ó_
-ǽw W9@Gi쩽?3JWQdQEG5xI]TAH ]’A' W~+.]#5^2* )<0pu\^"08#W@TF|
-^2K'
-2Ϯ'[չQ 48Se{al
-kzqtpioAt' o,#Y 3zEv9@Iw;!L+״@lڀ̎h#y'^k3BJ9ʮU^&#ȻTCd05F; }.Il*2 !r<G=0l!]Tg@S,@\OO%a~)tzf?~
-JĖtH8gSt3Qݶ{z/
-QZ%֮ xܟ*~ /a <|uCnQ7$s LXĕJi)X<JJJ,htPEx҉1VptXwIUYѳx<wq!%@ʰdOh-rdhYih<.X "NKΙ+qy
-2_}h?;64GEt;vO ոBjl̙u܇5XId}xSx:_I*)\ sg{HYkɤ@Gd&<0EnFjдw̨AN>U?4X$S`_<v?S|TInS$rQba'bb>
-$w 3i&+A|_Lg\:)R}NΫԵ0!2%eY>bĥ8`RŊ{u'Ki3J|W<CO|p/Bhs0lqvI.+
- \f̎PUQ6>LvVUeI@/Al.uDj=i2Xmi}
- ;Έ;0&ae-{y2 g2V_ 8˗iL+iXsTLO i7c
-մAu(ѳZ^mj7ǜ[Ý xxx<JOgWXe>;,\hԗ
-kbb
+5062 0 obj <<
+/Length 2572
+/Filter /FlateDecode
+>>
+stream
+xڅYYo6~_ D Lk$R9N&qYE6j5Vz%j<[)$b_MM.o" S3!$a$ڭ3FI~FX* "A?|Yo qGjQЬ[yY|j~zgy. M|:ZP]Q3],EP'RTq8Qc6)=۩M]Q+LCbMeT.HK\f45<x]<dqb$Ņ<=XYߠ*P4 UBX,x4 WO65٪N:6{< Z?Xx 3i,
+.8'*
+wC<1O~ϳeᆏnZ^/]?̑GqH8V#Z(
+nAE#G:xI<)Alx"&(}>ʓ{hvo},-> l*畎^(=3~G'& (w>MZl4߫B=Ac!~>@n/xPgwj34O( YٿE8r#N.IUNrlm]IJ2ɩsBJq`M2[j|mzw_ZKUoqj49>ZmxF>uFa,bpXmhCMՓ ]%0 Kyg֟xKk,C F7HWα`aBv-\H/<oX`UV1m5Z3**̳*Z
+Le'GաWgy j>^QX+LskQ.S%Z`dԒ0Pk#;h(1
+ P#Rɛ8FO9ߌ~eVT
+s碿< 3RE0"SVrS8T#t-WlW^lS$$̔:RhߡoxR*$a,*YHZx6VԻ02lo0%)+,>H#px,s* (hH]5,_OC-jt!Ch#t耑0yFtRLJ;lGkdP+/=LIx&Ew5c3Hno#!iptW*& JV{I2 SmlFѽǛ~y4^ w]c\]=ǐ߀`J-|0Kp'ttz
+6a\
+>wYw{yZ7
+Ovveb#5SN? aVrE'W06t,FdhA'G2ޜ2"
+}F6x?6> koGT_| 3z5v 6޷:88}S\\c8/tZ:U&،5! 3Km7c0x53kK4W{BE[M->o<8Y* DHH!gOUm 虳U\bR3?s8ܔ,ZʋRd.=#m{y`ȖpRBp2̐l;v`3EsS=4E
endobj
-4766 0 obj <<
+5061 0 obj <<
/Type /Page
-/Contents 4767 0 R
-/Resources 4765 0 R
+/Contents 5062 0 R
+/Resources 5060 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4739 0 R
+/Parent 5034 0 R
>> endobj
-4768 0 obj <<
-/D [4766 0 R /XYZ 85.039 786.531 null]
->> endobj
-966 0 obj <<
-/D [4766 0 R /XYZ 85.039 766.606 null]
->> endobj
-2961 0 obj <<
-/D [4766 0 R /XYZ 85.039 672.187 null]
+5063 0 obj <<
+/D [5061 0 R /XYZ 85.039 786.531 null]
>> endobj
-970 0 obj <<
-/D [4766 0 R /XYZ 85.039 672.187 null]
+1010 0 obj <<
+/D [5061 0 R /XYZ 85.039 766.606 null]
>> endobj
-4769 0 obj <<
-/D [4766 0 R /XYZ 85.039 647.469 null]
+3093 0 obj <<
+/D [5061 0 R /XYZ 85.039 658.638 null]
>> endobj
-974 0 obj <<
-/D [4766 0 R /XYZ 85.039 509.087 null]
+1014 0 obj <<
+/D [5061 0 R /XYZ 85.039 658.638 null]
>> endobj
-4770 0 obj <<
-/D [4766 0 R /XYZ 85.039 480.351 null]
+5064 0 obj <<
+/D [5061 0 R /XYZ 85.039 620.371 null]
>> endobj
-978 0 obj <<
-/D [4766 0 R /XYZ 85.039 245.004 null]
+1018 0 obj <<
+/D [5061 0 R /XYZ 85.039 452.769 null]
>> endobj
-4771 0 obj <<
-/D [4766 0 R /XYZ 85.039 200.456 null]
+5065 0 obj <<
+/D [5061 0 R /XYZ 85.039 412.605 null]
>> endobj
-982 0 obj <<
-/D [4766 0 R /XYZ 85.039 115.324 null]
+1022 0 obj <<
+/D [5061 0 R /XYZ 85.039 150.159 null]
>> endobj
-4772 0 obj <<
-/D [4766 0 R /XYZ 85.039 94.128 null]
+5066 0 obj <<
+/D [5061 0 R /XYZ 85.039 109.996 null]
>> endobj
-4765 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R >>
+5060 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4775 0 obj <<
-/Length 2790
-/Filter /FlateDecode
->>
-stream
-xڵY_o6ϧ[Z+,8m/mk8r]IN6%ʖڃLCr8HMBI&4 b&E8y/pIC.
-,&wkb[}݇_gsTlXۙ~x۫f_~p-07I4/d" tN*&  6ZۋۋwRxLx9&Jh ijx@vӗYN:q67G˪)uD5})EݔVBuYc E<EJ.aʚnyq"D5dXTBet
-5N-paC:#1ӢsXJv³P7۪s<Ѻ_dƤ6c24SRKo&~ VVO+^
-n) x<7VӍmZZf3P#w>r`G`*xJѶ
-m ͳA&BDʈ6`i53ldA:>A=-+,D'\ȶrfԑ
-p8_4ébC5呈^bb޺vl^9[lvlu 6Ifѥx+J5L wt6xw#z&Нv-G1>sE
-Y+ -W!:>6HxeZozQX|NZi#ރ3
-p
-T1ѱ `L؇
-M)ftdz 0>IpU=ERV-{a*߸6~_VߎCv;̥^曳(R,NEdDB3+Y5=h,dR
-o " - 'BU5m^˛KB
-fsp1SsQP[H:W,ǐ٭2U'<px8m 01rk/g447UdS2{.
-F*$qAebs9X1E'7\R2VI D%Hvӻ:% 쬼|IGGG'Yx|:^)Q&5EP sHK
-QN1͋eh8W5SP5;NǬAÈ.!HqxR'Ás4ބ"T8Px+:Qθ 9[ w);oEZYǟto1J<`(3L |
-M>=AbW*U"#Jac{|J&g-c^It@t40.=&B>ZH%᙮Rrنף>cm9W*z.y"A]PCsHO=ț.̵!!kA9E+ *{ϙ:y yt><aZ*98X=5P9
+5069 0 obj <<
+/Length 2441
+/Filter /FlateDecode
+>>
+stream
+xڥn_7SŚpx PvI46V}K̘"UZ6Ȧb3g2VEnH,OCb;B ƕ\y87ߙtj;)b|돫,ց2*nO7ϫ.>K=x.>}`(ExuX/Ch/.5d$4:M_̌ƄidȢj@mP "W*xr[۽UTI C1]9TwWqxζ]˶)~VHfJ >/Oi~>+,H/GԔEU py'AxΜqf*~&2A *,LE5{8eL#7miporRGA嚬5kZdaގ笻[p8N 늾l][T5#Ԑq`aTM
+w]i;2Z|AV{j#ZV{>A{)OQ#h?yS6֒) <3kaFȺ<ȑu۠Ld[euUAc<>5^LQ܃RnyTAc "CJ/GL|P4u : Qd=BwqE7(TWT3OUE?;򋮃䆐ZcA+|aPÔ{81g&D,$Qz"6*sϗ;Z(ń9C,
+\RoZTf+t ?T"Bɐc=
+מyΦ+ρ,w\ _Y`= w
+{WuꙭHg'n$_FAځl7'eCoǸ]SH6\1̨:j;5IEl<fGa6hR&LLT9]jXt$%5.o\b"nަ7G{QI)ڞQcRNj8lj` ](Mܻoe#+pqm=Z
+wjvA1ñq&W4LaNBM:BP̞+$PO }-g>{9
+&?:Lщ0ý׌֜|˚gKRcLP9v!ZI kL9'8.vq;ޘ&|Xpc rBP?9@Xq2#Q@pbo0&ȣlAZ:p?F: mDNVI_Ɵ<,3ЖN%:Y/i愄endstream
endobj
-4774 0 obj <<
+5068 0 obj <<
/Type /Page
-/Contents 4775 0 R
-/Resources 4773 0 R
+/Contents 5069 0 R
+/Resources 5067 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4739 0 R
+/Parent 5034 0 R
>> endobj
-4776 0 obj <<
-/D [4774 0 R /XYZ 85.039 786.531 null]
+5070 0 obj <<
+/D [5068 0 R /XYZ 85.039 786.531 null]
>> endobj
-986 0 obj <<
-/D [4774 0 R /XYZ 85.039 569.693 null]
+1026 0 obj <<
+/D [5068 0 R /XYZ 85.039 724.712 null]
>> endobj
-4777 0 obj <<
-/D [4774 0 R /XYZ 85.039 548.496 null]
+5071 0 obj <<
+/D [5068 0 R /XYZ 85.039 689.966 null]
>> endobj
-990 0 obj <<
-/D [4774 0 R /XYZ 85.039 432.613 null]
+1030 0 obj <<
+/D [5068 0 R /XYZ 85.039 447.943 null]
>> endobj
-4778 0 obj <<
-/D [4774 0 R /XYZ 85.039 411.416 null]
+5072 0 obj <<
+/D [5068 0 R /XYZ 85.039 411.076 null]
>> endobj
-994 0 obj <<
-/D [4774 0 R /XYZ 85.039 160.041 null]
+1034 0 obj <<
+/D [5068 0 R /XYZ 85.039 287.621 null]
>> endobj
-4779 0 obj <<
-/D [4774 0 R /XYZ 85.039 138.844 null]
+5073 0 obj <<
+/D [5068 0 R /XYZ 85.039 252.875 null]
>> endobj
-4773 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F66 3242 0 R >>
+5067 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4782 0 obj <<
-/Length 2182
+5076 0 obj <<
+/Length 2393
/Filter /FlateDecode
>>
stream
-x]oFݿB@MrY6ٹ\P$F((UI*RDwW.ݙY%7l4M?VhFO"` DςlXbћ~e<QJya'iǡw33zfѻ`}(hB|*KGϰ0F +?JocďPz&
-4La9}nj";>t
-ބ7xz+={uq4] MBT/sN^ރ 4aAib
-4֚
-or#$[dE֫ݧ ԰gt)K>qs{X\.EHfj֮R7|O<WlvcZsEQhZp,ql" ur dt!74L ԍeJM}=.?.!ڢ p"|kmއ@4Oݾ}ëfc
-Aysh]rz߮v}pX4~y\U SHB`/Z`ze~ pHvK/W 7%eݮ4KoD
-[<Dq/q]H,rt` [ I4i s.G/B;fګ˃ -E6_Q.,Yu'_#u g[KO#(5BI\PܰSXLpc$\0 1!ռ
-T=S|xfSxȐblw&^@um b2;kϞ\Xp
-TW72ME`/abbOʞxU*r!-rQ󭫓0.X<S?L#H@Q>;YIPfH {VXT:\,Q$\KHnk:'b[6A{mN]V8\B(LZ>w3 ldi [I03 '48r_^c`1:<
-ډ#CnOv Ky1XD+(%]oksAa T1INcQnN
-*N[Wendstream
+xڭY_oϧ+gEEK*Їt{[ާ}m%VW]K9߾c+9\[!9g~3èY?jV8,/j$'FɌLYs>nnj3eRVOĦ\Vۯ?>2_h#e"ϋ\ErxOϿ~b)q|̶ 7Ibvvo2ci7oyX6US'4MYNG/3w|e4]4j^Su[nvOKm'#ñ{ad?OxY(]M £kv'c@g *-IMS>#{VHS@niyp
+N,<^*&|sȷSUqiL<S]9
+u{ e`)Zt<|3 kinYfkn@+}Dmܲbg&WޛfKJ.p|/h)a0YyTc@+k`T(}i4mfZKFlӊGxg2NuFY% my-!5|ףV5{=sLqoW(by+ѹ[kf>3|kB'&VyWX2I5Ɛ>hѕe;) X0|,QpIP%p.cj]ޡ `ڙȋl EU >ođ6<e9rXV-
+K-UFwoh0
+_;Y)q
+Rm`&揶,Z4VPo@w[QFC38 P5Z78N+,Je ԧ
+#A* /э%_p -iGǎ+
+l3(F}~#{3at6\ HFq,gK-:TnHY͏8k4P<2T2 D|$K霸c pY,daԼt]΢ƏH=:B.Yչp9s>^wXTЩ(`cl(# X Ta<nLn>|:튛pE(EwhM= u0 ;~MhKыtHG@gSu^8bZ3B&Pw!~NAYZ^(GzD8ӓ˼8EME:]Ә4S兡BlY\J3u-
endobj
-4781 0 obj <<
+5075 0 obj <<
/Type /Page
-/Contents 4782 0 R
-/Resources 4780 0 R
+/Contents 5076 0 R
+/Resources 5074 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4786 0 R
+/Parent 5034 0 R
>> endobj
-4783 0 obj <<
-/D [4781 0 R /XYZ 85.039 786.531 null]
+5077 0 obj <<
+/D [5075 0 R /XYZ 85.039 786.531 null]
>> endobj
-998 0 obj <<
-/D [4781 0 R /XYZ 85.039 667.526 null]
+1038 0 obj <<
+/D [5075 0 R /XYZ 85.039 697.613 null]
>> endobj
-4784 0 obj <<
-/D [4781 0 R /XYZ 85.039 646.33 null]
+5078 0 obj <<
+/D [5075 0 R /XYZ 85.039 662.868 null]
>> endobj
-1002 0 obj <<
-/D [4781 0 R /XYZ 85.039 356.428 null]
+1042 0 obj <<
+/D [5075 0 R /XYZ 85.039 432.879 null]
>> endobj
-4785 0 obj <<
-/D [4781 0 R /XYZ 85.039 333.11 null]
+5079 0 obj <<
+/D [5075 0 R /XYZ 85.039 398.133 null]
>> endobj
-4780 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R >>
+5074 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4789 0 obj <<
-/Length 3094
+5082 0 obj <<
+/Length 2259
/Filter /FlateDecode
>>
stream
-xڽZ~0eX4|
-pp@('HNw;].8(P̞4r %iF?[mf~e7 ]/pf7Ż ?r$I~?^u"t8^}
-+ tvY6^QFa ?  g bgnskT$`̅nƶʠezFa|ح/|5('u].M1FlΘ] xpOjg:_xFu89ms,bL![Y8app{TmS(4Z߶ z PQ>=k7/88m7 b`z,P,0r!>FF6+ն}=~ t~_X~k2:}I'uI'8fH/p l`7|ft|f%eS
-Л6-%/-aY0j(sjZjݾn̗U}
- |3r+!@|O@p@!M]]ޏ٘(k6<.rr/]©[::xD18liU?@]ϳMun &Euy'e1 .șv#ΤݞW.0}
-%%o}2ҦV!T{
-
-=G
-q-JFL&i`Ԗ|>
-!_Qd)msw9W̞q# %<l2 /ɋxA<Aһs[$l+/lR <bS0!SB97G9}l 7[1~AIa
-ipJu4><6`v_LL Cw2)
-@ǽu5ЭS"`QWl-
-IVzmʼnRVSƖJVm_c0/i;F\D82ɡ#U|.A}0Bh[NrN\”-οx%~ ĆuՌ?"?"맊,c"'5<,byrV- }r{39w^; bB
+xڽXo8_a Ԋ(JT\vݤ;,ڢPl,EEYkP ͐jl4M?j/(](dv~qkTgA6z9YY2/xW|_O֞d:MXyW~~7ܾ}36zo:PKi[}[0Zz_ƁlT_DHwu1W/iшW:㘨e+$Ioxh8hJVkΜ8>cHެXlMiZyO Pٞ4S ʏMǩZvjk@R
+߰#nf--aHdVQȵC%|6kf4źpҚ1&٧NrϜixkzh:7GO4w\՛o޽pUhl~}1Ecƚ& 7] _LQFrE[?ʪOUXTcku4xɁB=DQM'xi<|cSUSpeW0sTdf5f`xWUɮˑcޤU[;~0{fgAy<zۮ_FA/KՑ62,3<N}cA cl'R,fdzl뼔=]qP^[U9Ńo:+] Ͽdi?;vE?3 \[}B8`l \@ ` zS ߟFo"Cq G#l0:~(R/-J<rX(z,N5Ŵqlf{)aϋ
+S(q?QhsT iʮT9hS&C0r!azm?7Փ]\0
+܁2,xT80֡]*Z-#Jr(:FIri0B>
+m(KDS@ >..HEH,\Y0
+Yj[^B5bQA';t'C,8uD >T%P: [c
+Z3*"0hehzu4ط*@ݴC̶h1*k\' 1l$*t,\ޖTSIhvѳpwJ~ξDP&C_eqLkZˤ;2
+=hNs3hiۃQb6O]٢a}.p9̒t2?а"d_"76%
+:(: b*
+u5 #菃5]UԴ86KqGBra9n#暚>\ܶy,ۀar#+hjGq"ᣇ|H+g9u#<7nW Uq2mk15<R|j,!=7{51ܕt3rP)?gH69tR%<%O' h lW,C}S+q5)5tdMaQcD$"yY@9m>#/asUAK62BE3c
+L.M
+e >AwQn0klys("WԳqxatKŊ
endobj
-4788 0 obj <<
+5081 0 obj <<
/Type /Page
-/Contents 4789 0 R
-/Resources 4787 0 R
+/Contents 5082 0 R
+/Resources 5080 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4786 0 R
-/Annots [ 4792 0 R ]
+/Parent 5089 0 R
+/Annots [ 5086 0 R ]
>> endobj
-4792 0 obj <<
+5086 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [237.716 727.875 359.98 739.867]
+/Rect [207.588 389.969 329.852 401.961]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.samba.org/)>>
>> endobj
-4790 0 obj <<
-/D [4788 0 R /XYZ 85.039 786.531 null]
+5083 0 obj <<
+/D [5081 0 R /XYZ 85.039 786.531 null]
>> endobj
-1006 0 obj <<
-/D [4788 0 R /XYZ 85.039 766.606 null]
+1046 0 obj <<
+/D [5081 0 R /XYZ 85.039 766.606 null]
>> endobj
-4791 0 obj <<
-/D [4788 0 R /XYZ 85.039 742.055 null]
+5084 0 obj <<
+/D [5081 0 R /XYZ 85.039 746.277 null]
>> endobj
-1010 0 obj <<
-/D [4788 0 R /XYZ 85.039 685.636 null]
+1050 0 obj <<
+/D [5081 0 R /XYZ 85.039 460.651 null]
>> endobj
-4793 0 obj <<
-/D [4788 0 R /XYZ 85.039 659.022 null]
+5085 0 obj <<
+/D [5081 0 R /XYZ 85.039 417.698 null]
>> endobj
-1014 0 obj <<
-/D [4788 0 R /XYZ 85.039 573.889 null]
+1054 0 obj <<
+/D [5081 0 R /XYZ 85.039 347.73 null]
>> endobj
-4794 0 obj <<
-/D [4788 0 R /XYZ 85.039 553.755 null]
+5087 0 obj <<
+/D [5081 0 R /XYZ 85.039 307.567 null]
>> endobj
-1018 0 obj <<
-/D [4788 0 R /XYZ 85.039 469.885 null]
+1058 0 obj <<
+/D [5081 0 R /XYZ 85.039 211.006 null]
>> endobj
-4795 0 obj <<
-/D [4788 0 R /XYZ 85.039 448.688 null]
+5088 0 obj <<
+/D [5081 0 R /XYZ 85.039 175.202 null]
>> endobj
-4787 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+5080 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4798 0 obj <<
-/Length 3179
+5092 0 obj <<
+/Length 1823
/Filter /FlateDecode
>>
stream
-xڕZKHWmPxv=ݱwb7|hz
-kr2zg!(*4Ͼ'bJÞ'ɽ(Nq9@3<׵#I1<ÖAZy
-/>вՋxMx*冝 gn Q>VAwZ1
-oa3&|$FY0%g³ضOjgaU5 [;V9݋d&Ǽ-]jK+Q-g%6UU# v 4JwY yI_r7{0iN46;|]+-2t~ps¸˭[.гtQsp8>BbOs6iSYd$IF:llh@3H/7[b]_?|pHy0lrZŒd3HH;_aGfaGqzӡ*"c$^T1]Ta6x(1a({*r&^OlA<g
--C'6O
-7Q O7B|f;3G%
-1:+3$O9Dn14wX5? awd&v9;/oBdIyBL֖P@RS..=R8b5˜TO`>ٯV</y;*]z`Xɻ`V+hJq
-'/Ua:$UN8V Cshȳ@B1dZY젉<)CON.) FaK<AL{\r#8i@⬊ػuDISxɖ~[ !J$6v&B8
-vˆu^x2 f{>F1Db[Jd/)mEOr# *ᵏxGCձ׈x
-Y|/2S|Iv,04n4mGQ>eRܔ& t_{A)HpFXl]ҥ&lP)\kʻ UE];:_DbJ2z2" j%:QQD>4m[p\"NLƗe oKgo.kC9Yُ|ga o4S5e>Tl] ?Y%:!WwjMIρ60p5-Ō'7T UpLJHb屛G6̪_^ux[A ߰ïǨ[uE'hL]rK/P`_yIB6k|σ)ш s2T ;(Uކ)KywRn <@@کW̯b;Q;aqFldW vEgSA}25ڜ M4ɽ-o_tHQ26 'u$lk78B.OU.sf*n!05XHK-<[t[TB2԰E¥jDz-޺:E 36*F 4QF N=+','u1fKE"s7Z33꾍+dIǂ%=('U0IK/. $)YW@cc,JH [3;o\W~
-gG'/B5jS@C {\lzUqLh2iu=`n}0wQ}zNA{rLB6"϶]{tI[,cIw p@ ;W l'k<^ik PhVlc30C3cAF9Ԡ׿tb[utM6IM8^6C{3<I7vU 'LKcA:w !JZ&
-&S9nJU|rra̱nĻ EB*Db;WO'-=!;w DQ*2I*g8ֱK EDU<%j LaeF=Xr
-+;4ޘ͟dukyP| Ȥh`Ӿ3 TJw4V\(V{MthN)ZhhrLQF;&:˙ac*=M8XaBN} }'D)YDKX?N2kJ/_\_"͋EP5\ĝ~F $4"wjrXnc1ص:+ѷa3v.VU8Hho?Q:V:U6Ro4#b]c3T)E=jŎ{[$D<A!w߿.SՒQ;L2<c#?2O,?_&p}Xk87
+xڥXnF}W(EV~)Iд@Hl(!)wn$y(ٙ3gfWt6sq`^2
+<gf~9HjOA8wl+Il+H*^՛y 2bupԛ_g_8x2ɞgۙmyI<ûm9I2ߓq5al?US;K'7x0B;4(0XIQ+#B6[w [Y`ai/uyk^jX:[IfRdef٪-m5<EގaCutmO{ˮ 7 !|z~^;}pA%
+pm "@[J@rG&6N
+<ìFZ>n &[(^g4_I)(X]u$X(meǗy}#,:iȪf" m
+~bq5dnT26 Usr麑Bd L$VVl{GW&S|~ss7*, #,cCܱnA37_Ӆ&n876+(Is#+PKK.(M>M
+PŧDmY;d>B$(fb/TCkP^r-.<ߎ9: Nn:rc8:'Nз08Ysk,vw|KsH)1l͝Rvnr8^`gOgc[IN
+\r }ӈ/؛?endstream
endobj
-4797 0 obj <<
+5091 0 obj <<
/Type /Page
-/Contents 4798 0 R
-/Resources 4796 0 R
+/Contents 5092 0 R
+/Resources 5090 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4786 0 R
+/Parent 5089 0 R
>> endobj
-4799 0 obj <<
-/D [4797 0 R /XYZ 85.039 786.531 null]
+5093 0 obj <<
+/D [5091 0 R /XYZ 85.039 786.531 null]
>> endobj
-1022 0 obj <<
-/D [4797 0 R /XYZ 85.039 766.606 null]
+1062 0 obj <<
+/D [5091 0 R /XYZ 85.039 766.606 null]
>> endobj
-3018 0 obj <<
-/D [4797 0 R /XYZ 85.039 672.187 null]
+5094 0 obj <<
+/D [5091 0 R /XYZ 85.039 746.277 null]
>> endobj
-1026 0 obj <<
-/D [4797 0 R /XYZ 85.039 578.47 null]
+5090 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-4800 0 obj <<
-/D [4797 0 R /XYZ 85.039 549.735 null]
+5097 0 obj <<
+/Length 2860
+/Filter /FlateDecode
+>>
+stream
+xڅYK W-TEl>v9ro2!G$)RKR3;~&%qҁ$@ (|>!S?1.x8/Bň'qL kN#?E΢؏86>|(<l aj$uzXu}uZ46"x2|kX6xc#Lp0y9&$c*ʽrmV8r&FΫ5A<l#v6S
+]o
+C
+@MAh ymU+-Wx'N8lWQ*X6Ԡ@$u|m9sң3#}TB7d8ՇkZID&rӓv8Iò#7{ WijaA}۱~6"l ՖUĪ~zMe+}Ʈzvwd||5kZnWQI&9} +QT
+CLq8bi2!TA
+蟲88mxMXo:%r%o7ڋ
+NP98qDj(541bPhDކo2&׹J
+Y<IB褻KbqOuS1HY^e^K^y
+ `39ZE@-8/[\;frzl5z'a2޷幄]ОZw1WJ(o˦|jYߝ I%yRؕ#BrC_#{K$5|9
+8/ Ȝ@؂u}@z.CDʆjVʾgw ;lףu~A_EUoN]gkdF(wCEuhr6JK`%%->C~Zv4C!VgY+h#CT(HXX|D9 #Zo?el!^*v*>hݕ
+A4#;M|lgۊm;kF
+}+͛4i~f74iHunM,-ԉ_xcRF?O8of}"ӪjP0b?
+2-Jz&䠛#d9oWoZtIu'7WQ
+t!2[ %lk7JeKϮq h>~v
+qõF dʰfWBQWm3D<]!vfݓ$25;4#]3S&/=IM,m> s!Heq7F~
+["
+X<=W $;] $RsAEq+ _}ճVj4X\ƱS*H,?j.#k;M`*s]U: 8?gT=jgjlpf0;R7ylLL[.e;5
+endobj
+5096 0 obj <<
+/Type /Page
+/Contents 5097 0 R
+/Resources 5095 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5089 0 R
>> endobj
-1030 0 obj <<
-/D [4797 0 R /XYZ 85.039 409.231 null]
+5098 0 obj <<
+/D [5096 0 R /XYZ 85.039 786.531 null]
>> endobj
-4801 0 obj <<
-/D [4797 0 R /XYZ 85.039 379.827 null]
+1066 0 obj <<
+/D [5096 0 R /XYZ 85.039 766.606 null]
>> endobj
-4796 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R >>
+3094 0 obj <<
+/D [5096 0 R /XYZ 85.039 658.638 null]
+>> endobj
+1070 0 obj <<
+/D [5096 0 R /XYZ 85.039 562.194 null]
+>> endobj
+5099 0 obj <<
+/D [5096 0 R /XYZ 85.039 522.636 null]
+>> endobj
+1074 0 obj <<
+/D [5096 0 R /XYZ 85.039 368.584 null]
+>> endobj
+5100 0 obj <<
+/D [5096 0 R /XYZ 85.039 325.631 null]
+>> endobj
+5095 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4804 0 obj <<
-/Length 3378
+5103 0 obj <<
+/Length 2858
/Filter /FlateDecode
>>
stream
-xڭZIsW6`
-<kPŮJxn~4sVWy_656P(wKN554WѨ*:7%3傊aurΪԅLjfwYwt,~Y`qLD<o`5/7(d,EK{ZrNZ8MA:y>m\yT,x9"1Mw"GO0_Q<xYyǥk5RlKb+wAP^fDp?ڵEjN61n9s:bJ3gg|re$2MAB0 ,SǨzʜvjP-ɫlFX`"m*լimnSYdFGZeiYDn@ "źD q׏nM .G}Lt'CHL-@.xWDS5w+xbDT8rYlMjr
-pukT,A -06V@4Lj37>ߣh#(!IbL|yDm_8( .aȬ5eÎG )t߭B*BmJVA<Xٱsl^#<弔QT,h6F)<zY߁#Gy۲Bvܷz4 >=ϜxZ<.Hp PD}- `
-{غFi Ff w ymb
-
-XxS*ZA~n( ~+˺t1?f&G%y`oDP"Ou?\M ~%E h.RfN=k]~*pUdvN<7Jt*s(.oƯfW)4-B3Ꮸtzp[s5ώ\1)E-$h抱lt{B{M/eĜ0v0{h^W\vuXa0;|6Ɛ
-R!jWҩ:ḕU)nF8w0\D8^On>rNZ:0)ngۖ AY
-{I ؃kkr)@@_To`_2H1wY 0/ 0^ E?:\ĸvgaB4֠nQmqÙ @
-S --@kRzq.ь42XXN3(#yչN-8w~$Gc p0!]6pFc. ^3N&iv~z51=9bFS[(kDk1+.e_.f|{ q8jYCk5o@DFp E,D`e-9ZZMM*񍫍4KoDDzZ43d
-28*2Tp8
-(CArCL>
-Px8\LJL# @<t#.vU1Xol^qP|%?Eʑ1b5\մ P(I=HgH$~- I/Өٌ#9p5#dN
+xڥYKs8W6T%7'l<5dcR[3s%b$~G(\/\|Op_'E(+!Y945IaAX?Z>y'yXo\EQ䅩\en`e}rzJ{_<?.nV2G0P^w~(׋h~ED~Gү//my\UsjH"':!Lf$~gⰅ3
+s^uoYl*vL~-,jCx%xQ K`H6F⡖%ٿG_P !+HB9aUW͡!N$k=X
+Q9i9)y+YA7T` \tKg@[ Iך}Yf|lab*6A ikc^L$݊7CWwZoDZֻc&dHBAEsգld-R2%t|d-!YA"1H ΩkýeuK%}p6{-4!߿
+zO<|:ذdDzRp
+-rHD%۠XW(ƌFިշ\:q!ɧyiTZp 8>œ$rYv؂'oN
+5 U :plNCK@󺄩Xԇ<!X)y4C$Z
+fc?S&/Z@8j=;~'K3R:Ex4쟃ZrA}s+#sC75М걆 Aw58$Ɓ=왵Pt4Γ<tb^38y eTz l?sHuڃT);]r@eJDg*ēM 4Z
++|',JsϠ#WylZ^J;:MP<ZޔCAu $ڴ%#<&2"\6h-̊Lඅ `k/ G9N @+=9v=N`ε,_uw. DCD
+mÉI/?axnbH瑱j#NO? 87;{imn<ۖTLpt8gys*!z&}}ONRHM2cyulg͘(LKZP{nJB=%.wҮ&,Dll2znA"[wګ3̩ x16g Ȅ9> Mqt"%#hv
+?eD>rՌ:`Ln+R7fqX jO-PhTL~-=K>ւ;; [|㇯EZ\v"?3"4~84#[,t+Q n
+hB%~?6~|-*R
+0T 3u*~*
endobj
-4803 0 obj <<
+5102 0 obj <<
/Type /Page
-/Contents 4804 0 R
-/Resources 4802 0 R
+/Contents 5103 0 R
+/Resources 5101 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4786 0 R
+/Parent 5089 0 R
>> endobj
-4805 0 obj <<
-/D [4803 0 R /XYZ 85.039 786.531 null]
+5104 0 obj <<
+/D [5102 0 R /XYZ 85.039 786.531 null]
>> endobj
-1034 0 obj <<
-/D [4803 0 R /XYZ 85.039 628.804 null]
+1078 0 obj <<
+/D [5102 0 R /XYZ 85.039 547.398 null]
>> endobj
-4806 0 obj <<
-/D [4803 0 R /XYZ 85.039 599.4 null]
+5105 0 obj <<
+/D [5102 0 R /XYZ 85.039 504.445 null]
>> endobj
-1038 0 obj <<
-/D [4803 0 R /XYZ 85.039 571.365 null]
+1082 0 obj <<
+/D [5102 0 R /XYZ 85.039 435.651 null]
>> endobj
-4807 0 obj <<
-/D [4803 0 R /XYZ 85.039 549.504 null]
+5106 0 obj <<
+/D [5102 0 R /XYZ 85.039 400.905 null]
>> endobj
-1042 0 obj <<
-/D [4803 0 R /XYZ 85.039 399.12 null]
+1086 0 obj <<
+/D [5102 0 R /XYZ 85.039 263.295 null]
>> endobj
-4808 0 obj <<
-/D [4803 0 R /XYZ 85.039 363.917 null]
+5107 0 obj <<
+/D [5102 0 R /XYZ 85.039 229.155 null]
>> endobj
-1046 0 obj <<
-/D [4803 0 R /XYZ 85.039 255.733 null]
+5101 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-4809 0 obj <<
-/D [4803 0 R /XYZ 85.039 224.208 null]
+5111 0 obj <<
+/Length 1924
+/Filter /FlateDecode
+>>
+stream
+xڥYMs6WVj& )iLiȜJCIﻋH"ψ$[,0^@f^,[g3-daټ\.^E,bo_Y[]/>|$s eWws]RjH+*zrB=yw?mv<|R__g>,`2K0e~FE߻쏮/ =j5FXe"rS,*eQdSE,E#~Q7~h^\U`&Ns竹~.w`QeLn6m(,8^a-*<?2[r_GmYGՕ FʕmXNШ:Qtl}TF"5H%rl #SԅEA*
+->>8|  ک}@hCOQѴ_ ьgC&U(B ҉o;<lR-78-Q+_ uѢn;Tu`IaC/}K莛]|/[\qoe׺.@e"N8Iaǧ%Q ȓ,c+NB$A 2baQ M<Un$,yJD2!1Q>*][p!4݂cFe2^ ^S6Wz baDfa5"/v=R4Ufb V0DgƼ&' AZVԡ{j}S ?-,NTf/ P?=b/̲عadu\g!lƈOA s2N
+a ה<i>뢩k]vr:ܞiqPR
+e΄H΢ԝX6QYU,q],>![Mpr};s?Q M> &@0JNڕ%m$jZ.̽ Z6EYE"qE,D{AVz3G8&UZɍ<>|l\ ap*o^`AjOV8YR :j%Ecdtɻ#O@ R2}6!?[l7FwvGWDx /Ua.,T[*!¢K9CC׽=^c,p'ĮHN0
+S)A ZM%64uuFU&N(uS3W}<ޖF.^Y꿩el[  ?IeB){N)eT QJH@M8endstream
+endobj
+5110 0 obj <<
+/Type /Page
+/Contents 5111 0 R
+/Resources 5109 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5089 0 R
>> endobj
-1050 0 obj <<
-/D [4803 0 R /XYZ 85.039 103.45 null]
+5108 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 541
+/Height 173
+/BitsPerComponent 8
+/ColorSpace /DeviceRGB
+/Length 8338
+/Filter /FlateDecode
+>>
+stream
+xyTge8.hT%b0qA (.(Q4. #*;1"`DA 28Ǹ$љcL8&愈q|յt??8Mwuխ{zoOwW=|H!B!B!Br4hЀI ꁓkpppAAvbsNG+E!:ATTT\r%..C7nHl3gΜ>}zRR+E!:j+W ߿QG>x@z˻ۼy-Z$$$̛7Yfx-cǎ5$ĉ5X{_|Eӟ}RǶU<ذaCIIIqqqll,Zwى5VNi&yö`̏ʶoҥK]t=<<BtV0;::/x|֭gy[5Voa[@rppE]V<!iѾZ<ڍ[||ڵ={jժaÆIXee% “!:[͖~ʕq۶m1Ivm瞋:w\aa!?&6E~~>Eǻ6)o߾}nn.+em_bEǎo޼)^ZpuJKKKJJj|R[i޼cǰΟy&1cƤ>wޱcDz^rk훟"J=JgDg/[oV0ԩ[ttqИ wG֋ |SZb!DmE;f+)))AAA!豭h盟Θ1"ݵ|IhbBڊFYI"}Sz%t44Xo~4i5B!B!B!B!DI]_?~<777--mΝ7o^fMTTԲe$^X -x#ގ`U'!HxC7mڴ`X-VM`C6MB~)//?uTRRܹs VO#suu<xQ&O:ȕ+Wl0
+$inH zĐŋK%:x```zz:W'H IgwH{gz"l={+R>k.{ڃt!iRLT7!"EN1iF$QFf:<3cH4|"H/VB/^-PTTr͛134"H-T# A/ZJddSO=%RԿ\3<#H; A/š())YzPFyI H\P~Ћw֭[פIC9s
+Q$iG!Pzڄ^rq*p/2g(\Px( sBEЋcǎꚓChuAP&Ћq*++7n(ְaCЊ
+V_;(
+J#tb?B/^f믟}Yd~bŵ J#M'Q29!"EhCfʄbq^IEЋW^}S4U5Pdz(Fn]AE["/~Ӿ}{z)1P>5 !"EBiiiDO8q۷YJ򡈢(+˜z"랞6--PJ1DqQb&ơA/B1>쳦M"Nwv(1
+̈́&"E(IRRb?f"Dq5Qn&֠A/B1.\(Z޺ux+EEQtvA/B1˃,,d#bf6
+{۶m&N8C H B/(Eq.==&0 uzDI/o֬e
+
+
+2,?My@$
+Q_Ћ Jz:Gmod?7
+ q,"E(Eo{|ɂ2l+ӦM3۷o_dmeƌijy樨(y
+֖jXmE !q
+{x!/+VTl+$MCN5z
+{׮]<sPxV
+| $ TQjm+"xt+EL2KΜ9BHl۶t9$$D.۷՜x)@N
+dacccʆ """To+ji K㺨 ov=ZVVvʕ:s B/mEy/C KxN{J=S nikI>8~oݺUu.AEЋP؋(--mѢ8<
+gB d׿dq ׹?UA/Ba/b޽綾^h m
+}%L/G^ă6lڕPxP/Hc[0ٮ]wy'//޽{Z^n彈gA׮]ٮ .]*  
+wbf0"V"RSS`
+d3x饗~mnw!jڊf0"VT">m3Fx|h(,9%ۊ֦0"EEg(&gmE Sz"T" Ge[a[QMϴ/T^Unݺŋ)<e؄/he0"xtEiG
+SMϖۊ2Sz<U"4i ۊ0"xtE899oyyCF1 ƍaw#G֭[)bc[^ۊ*^VWW+,EFwHiବ,X1NŪ@^O&wiMxqvvf[^ۊ*^DÆ .ފ ;`ʔ)~a>b>pj٥m0ԩSSSS 㙽`c7
+v?8lRCu>A>I&ք ᱭXz
+C/^*^O<}ބڵ+ aaaY qFyۊ3
+''66+V7oVF7u
+2#{,נ 6!<cӧի˪zx>>>{t3b8C[|(tbb"fcIN)𲳳`U{H/<<#BBBl[^&Ƕ"ĤNEЋPŋzP/O`޾}bcϞ=_}ձG|$:AAlBxl+2NLD^[sMywa!ntR YBҚ 6sn,ʼnЋb/W"PS;v,
+ۊ2@lBxVd zxbFᱭ(f3IU4;1z<U"***5jdggw
+³4Axuf'&uB/G*^>׮]+-b2۸qa<X;x _ؤxfϞ-o.m+++{/޽[hKd` Dz>?- 22Ryalj'JSRR̙SK5E[<y,[~ `:_ئLbbą ƒ%K !H*ۊ:LJB`{f[a[4䬦hdb[ЋQRR쌳"Af$oA/GZ^/EC(<!ne<%Y[-/)<
+r@`(jy7otppprr*,,(<K
+~e!
+C/GZ^Dyyy6m'(<
+O^ *
+"xtE`"Ӹqc'jiYڄ!*zaaaX`„ '8jyׯ_wvvF)/^h!ZJ^͚5>-[L^M>=44L!!]pAHDiqlWzl+*zsE%bXbE=^``'Ayy7zÇ%4J___o:Y/4mK~'ǀrĈ7|s&3l0 6l#yҤI3KԩS
+&,3-ECQxXڊ5HB *C/^^FW]v-++w!N^# +(=>x`NNN/m%>>Cݻww2c #拾Vv؁HS(ܰ8p@Z^^^vvKH^h+ C TLr$!AN5zjyҀ*;UxkVdAhq;wP[ٴi @]m;2`mXgTTrUKsA/BE/bv78Ufȇh+X̙3]8p5P&kX!
+Sgh{'}B`)EЋPы@Q.oooYn;.*&O/7b4^~bNfX*"KA=Ze@6$a\kЋq*-MU,*'MU,?xtt_^Ǐ;::<yR#?i
+p2"EE`<xiUrb)?%*@*ӠA/BE/ƍ.LKt8h?\GΝ'K R8_~TFA p"EE\xQFX-[x0@Db_pK@/^^Dff#y<C "EEbΖ.)$a@̆A"5|SN12xbC/ETWWO89e
+ڡ(%sBEЋvyݻyILRP89!"Ehoooq;h I4(J1'^͒ުU+1={vqq1PE(Ŝz"ϯA\"511R
+$Dt!i<` z11bno{q47AZ/RDQ-^b<eee)))~~~NNN 3<3cƌ/ֺ5 v;+8T !H AEЋ PYY7uTq43,,,11
+{]`wS҉v/z"TUU={xW.}n̘1111ǏEE$BE[ft"nbg
+矯^吾w'Ѻu#GΟ?}ԩS?"
+endobj
+5112 0 obj <<
+/D [5110 0 R /XYZ 85.039 786.531 null]
>> endobj
-4810 0 obj <<
-/D [4803 0 R /XYZ 85.039 80.132 null]
+1090 0 obj <<
+/D [5110 0 R /XYZ 85.039 766.606 null]
>> endobj
-4802 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R >>
+5113 0 obj <<
+/D [5110 0 R /XYZ 85.039 748.602 null]
+>> endobj
+5114 0 obj <<
+/D [5110 0 R /XYZ 85.039 676.933 null]
+>> endobj
+5115 0 obj <<
+/D [5110 0 R /XYZ 85.039 676.933 null]
+>> endobj
+5116 0 obj <<
+/D [5110 0 R /XYZ 308.64 504.152 null]
+>> endobj
+5109 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F66 4195 0 R /F62 4052 0 R /F41 2998 0 R >>
+/XObject << /Im9 5108 0 R >>
+/ProcSet [ /PDF /Text /ImageC ]
+>> endobj
+5119 0 obj <<
+/Length 2915
+/Filter /FlateDecode
+>>
+stream
+xڥkop `
+x$wor>\4Vp-i %$J\M`p3Q8 8b?P,?Vl
+fO* 9pμY^sσ||pd,ry|ğ/4n`ݧy}|z_Q}_җ3غtw|?s̡=T
+U<`a6W:V~̛ZXg|k B~Y~S*:
+ׁCȫaz0H,f30v1큵=rA^nz lE#Ӯk;{{sǃ"JN(j.Ok\^[l;
+MMue!cX >b<`"D!B|Ig?/
+_deZ`C>I:>NGw'Ú%IT|J,381 &}Q7ڃHHP@@Y+>޻7^wK8Tp
+#T(VϭUI ~×=sdgK#,pf(݂
+}@ )ezrszM+Pxya^~듁GeEFP4ԭp"F`4p8*L
+:Yzg^!$(Aǐ`X!rCHڽ[dh11
+Y|)] c<sj|ڦqsxl @m%\M
+5 fVtd;[C\-[
+ emAfa-ךf r<0~adT>\,pqϼzs]`n~;Dl2/:<_"
+†Wh_"^yB@BʎA_Y'Sv\ XHxb>Qܒ{PQN,XYd1?{P/UGR
+t;:y6cbg%IƙBq[xb;}OƒX\k܏=>"+/1U%(F[9p !"-
+sQb[> '1 ~ )OVj';"]~󰃜J{B5=zsU>p 
+ԟx77qK5<MYVB-n_^~a]qJ/ձ3.S(eyz؃,Z&.J)
+4c)X>8x(z9C;ԣb$V'NS,/GѢۓj݉S³E\<0Q, i*-6gҀYJ~umƁph2c.xXxAG=NXDm lU!kf u^7[luҹjXP0ؙDX:@aϙgJ嶆D|ÄHX WS F.ۅVm m
+P1gm?Xydp%zJ1wy)`niPI$]m+XFya2Q]kN0$)nIcj
+UPF`43 {6߆e@[cGPğao{Q߄aD|"(3BBZ!]{!ȶnX쇂^`X≠nGtG#QeH:1RH>;ӕ l?a`e=ll_HY8oL3VǢon^ `CʩKkk,8fv
+KmI|s(5u;ƞyF=ɽ؎ɽ$WH0:R Gt$6T:z]o|䪮GG~(9tԀIĭ7C&pBIU;\EӞSmQӃ?!y Jǡ: fKr:}]JJ PZ3,(6S~;Ű,Su&o^Y{rrX.
+endobj
+5118 0 obj <<
+/Type /Page
+/Contents 5119 0 R
+/Resources 5117 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5089 0 R
+>> endobj
+5120 0 obj <<
+/D [5118 0 R /XYZ 85.039 786.531 null]
+>> endobj
+1094 0 obj <<
+/D [5118 0 R /XYZ 85.039 685.011 null]
+>> endobj
+5121 0 obj <<
+/D [5118 0 R /XYZ 85.039 639.937 null]
+>> endobj
+1098 0 obj <<
+/D [5118 0 R /XYZ 85.039 491.969 null]
+>> endobj
+5122 0 obj <<
+/D [5118 0 R /XYZ 85.039 457.427 null]
+>> endobj
+5117 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4813 0 obj <<
-/Length 3395
+5125 0 obj <<
+/Length 3036
/Filter /FlateDecode
>>
stream
-xڽZYsF~ׯf]%B00ț|$Q6&UT6I@+ A{wSR\=}|#u?un#?ybc?|9 ΗݙAa׫\~Gbx~?JkؿJݥ]rJy.CLK ]7w3`go]\/9ש=v4=ߜH>98 c?LZӝZEnW۬} Haom=4x悿i/cv8}7OOo59QD rdv殻Z^Ey9&+ 쩐yS<lP(jbJ錟X)7:#ڊ~7@͘8KsθͰ7,=ilp*LEl;%Z )lv_aK6?i]ЦVrŀ&DJx>
-jFU&%CFWl8:m\wASUu K}</d}y+ ZdO.&$C?JU61|&±!ȶlX&@slhEyQDŽ#8LɈ4G?yfYhġT:ݩT# GWhU*a*y~VԟZ8l%n8F8 ÌWRT l#]O%-z~?{qᖋ.8
-;_^r%<qLVTYu^.U m^&,0Iw#y|hq!Ͷ}K#aa#v/R`J%@𴋲h&
-CVi
-lS
-[(bp2>xPy e.ILGaCTO#quS`ŏ#L8 }{q<`_<p[&6!ճ'a qa Xg8Y9!p09OC5sqEV(e`pgK(%{%RI;:mLP
-2jy/]!*49e\Ng#䁒B2iUlGUQ*%h wK EG {nXQɫž)
-( ; w۰x.`H7+Dq:A;,X_,[ODDNbzKݕnlUH%khnF75JF ոt:AmQA8 ,8p攚lʁгPWw&hoa:4hWn32&>m)]2 8 %`Ж}/E1z>LAVG&~ebE!)xĎjXP#:2;F+*D߃h ͊hDM&_Zk<Vg
-UX.K8+j${H7a?ݜ{!B߆$wO{.sXҡ $OśƿaYLzSȵulE
+xڭ]s6ݿB7Pjb ݓ'+ӹi@IV"]hfbw߰E&t144Z6hv+_)XƒvuͿL:SQXDluQhtanBk4/,^۹
+,_jPynW<^^껕̣]ityol <xg0BUUbth-۫8\xהCK9(3!c4HMyDF8C;Զ=u_Jo=\qgA z\dxǰh\3A#lpSiʡn $Mw]Egx7 B1wl N*#'aWJT#0S;"KfSoBP?~ϣc9 ,J2 4
+OxSXyvӲRw-^ȹԨ5B=9 ^#UһW< .o%Ϡf`W
+rٯJPbl><DZ݁C+llZ{9Σ]MH7.kŶf+*~dNLTq"wxb0񸆗?" mRj!DTx|  H&; gs:*"ڣ
+0-:J=B ,CiG D#Q99Kr>7IUpo(u.[`O|ރs/ I
+",T"hIqVk
+Cl9>Q\:۩D!0{AM(5'h&LtfuX,h&peв='^&#F5xs\H"Sc '<j׳'iPyT NQvkD6t% JbmB2Jħz:es/8
+Ag!A҆`؀mw6RaTAJ?^rI[ʺh0r0UGh0!z _؂]7z>0 厄 ~1m;_S^D!ކVk e?=(Gi1EdBεm,
+Ib4Z\1ƛ?D>a
+
+%賸^@RX }{84:T&24
+Јywk9MBSI"Z\/S<rsB-+nV(IO%*,)יgS*\~܏ZmTq`[O8A7g|Q{Z\c&;L]UnxJBD82-C6꛺o@q<p[BT7e'"q)McEB!L( ðOLRn*|'C-XC2(PI?2 w:)ɮrL2e7NY'ecc7ppG:QST>La^r^D=
+ň]kVaY0INl9%礳J`cC˿ݱiE+6Wfp^\{^h36:PGG#AP-TS x[_4RXⅢ& D֊쯩jYcEb;9 NIЩt4Iܠ<Vɢ'(x,Mzݧ=A v x`|-
+8rMGٖ2\3,{ ZA72!LßrU$y4PY-}+َ8 Ě{Uf
endobj
-4812 0 obj <<
+5124 0 obj <<
/Type /Page
-/Contents 4813 0 R
-/Resources 4811 0 R
+/Contents 5125 0 R
+/Resources 5123 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4786 0 R
+/Parent 5130 0 R
+/Annots [ 5129 0 R ]
>> endobj
-4814 0 obj <<
-/D [4812 0 R /XYZ 85.039 786.531 null]
+5129 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [113.843 77.171 412.147 88.861]
+/Subtype /Link
+/A << /S /GoTo /D (samba-trusted-domain) >>
>> endobj
-1054 0 obj <<
-/D [4812 0 R /XYZ 85.039 393.25 null]
+5126 0 obj <<
+/D [5124 0 R /XYZ 85.039 786.531 null]
>> endobj
-4815 0 obj <<
-/D [4812 0 R /XYZ 85.039 374.682 null]
+1102 0 obj <<
+/D [5124 0 R /XYZ 85.039 711.163 null]
>> endobj
-4811 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+5127 0 obj <<
+/D [5124 0 R /XYZ 85.039 676.417 null]
+>> endobj
+1106 0 obj <<
+/D [5124 0 R /XYZ 85.039 210.444 null]
+>> endobj
+5128 0 obj <<
+/D [5124 0 R /XYZ 85.039 172.343 null]
+>> endobj
+5123 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4818 0 obj <<
-/Length 1851
+5133 0 obj <<
+/Length 1564
/Filter /FlateDecode
>>
stream
-xڥXKo8W(5#6it{h{-+ wl'Nw"@H7YzI/D2/Ic)Im`DZ"#s9xkO" 2oyO,te,$IhW7Su9_r:4L/wK&^5YH:VƏ'PY=<2˼z#%"캚Mԙt0I<NEut$ _C3}*%*HrBzR,hxڷ8gH$!=I,S{4'=p1wՂFA)nHZ2=Eku2؂f6~:n-a"u[(~ n98E+X%~v'}b`/4|Duy`nꦔrS$uɨ=䉋w*:2E:uW 1[ uUUR(
-E ,ě6`R0Jf\9|q@
-aO F:2K3-z_- Cʼn݁Uws8_]U:8:yH.{z%3`v)ZJL үe]EPW9^,n1 3 E
-ڛb@5v?l)t1uFEDV AE)zmPlv?MA7,UKI54*iy6 $`;쬞H,μl6|}"h Dwûr"RR~mG=k5DA ҫV"ӧ~җ(S!c.0Lf)S~-* al6<3ʼ.xVY)O%; #6 4$ȟy]6k7Pp>].zgkF/F[>2Kwa\B j gg=d3-b-4ǁEr"kyk9eh)!@;eMk/3[r
-,~ړR .6 j`B66=/siKۮA'EDB3ngfHCemP,ߜr'nF%$  vڷյM3!bv1fVrݵ}{ox6DEE`g
-̚S Ώ 8(-,:_|8js{]MYUy魈]bg'~΂NDcl?pQQf=6Ml
-+
-]WGendstream
+xڥWKs6WX ANu\[N'́) E U9
+P%^Kd8Cz S(|Jyzlrt܂{ (ּKQ_y'lP6o𷓆5@<{ڇ bXonYYK[5EqzIZk;Y{lZ>EÜxU
+=k'٦ d^V7b48`| `@:-C"dr̊8rq&_79nxZ0<IQb]!SOT+e4qYvfxI 0Gi&<B`" f
endobj
-4817 0 obj <<
+5132 0 obj <<
/Type /Page
-/Contents 4818 0 R
-/Resources 4816 0 R
+/Contents 5133 0 R
+/Resources 5131 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4786 0 R
+/Parent 5130 0 R
>> endobj
-4819 0 obj <<
-/D [4817 0 R /XYZ 85.039 786.531 null]
->> endobj
-1058 0 obj <<
-/D [4817 0 R /XYZ 85.039 665.133 null]
->> endobj
-4820 0 obj <<
-/D [4817 0 R /XYZ 85.039 643.372 null]
+5134 0 obj <<
+/D [5132 0 R /XYZ 85.039 786.531 null]
>> endobj
-1062 0 obj <<
-/D [4817 0 R /XYZ 85.039 587.459 null]
+1110 0 obj <<
+/D [5132 0 R /XYZ 85.039 615.144 null]
>> endobj
-4821 0 obj <<
-/D [4817 0 R /XYZ 85.039 564.141 null]
+5135 0 obj <<
+/D [5132 0 R /XYZ 85.039 574.98 null]
>> endobj
-4816 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F20 2865 0 R /F15 2876 0 R >>
-/XObject << /Im1 3957 0 R >>
+5131 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4824 0 obj <<
-/Length 2412
+5138 0 obj <<
+/Length 2165
/Filter /FlateDecode
>>
stream
-xڕYo@?"K朻+j>PJY$,6"e*i`<~;VwA%iHݭ7f>QBM=19w8Lф&<~70 ? Q>Tޏu3U</'*VM֛G>-ul3Z;l5NރO?#&q綳%S2 km]c^.s\懧ˮ-~MȏkQ)3~+(`/Qټ;6Tkn([[pOd^K`ḷC}@?$N@P{r d%?&nxxE0hYz_[k!
-y$䕌Fi`yw Rw;*;+Ռv'bGq<[+ԅfW]#@ 5XF[tS2Ȥ0pIaF9;3?owE]^^o PGy5٬]
-\/=Rt4޲IђZ_v"lZpD/r&p얯Itۑ|b(?0K5m) C7`I| _@!x
-ſ?~%3?Hy(fM.0)wi0q"
-;ܻt:IJT== ҋW`bM|ũ@Ol6E4
-su!wt")
-?cFo5
-
-/![3(ʐ[tqaY
-B#>eK8OQs^Ubo2\OյCYĘo20"~bUp^V@ݔ]L5y?1Y~+H %*~-]*F>c۔S0|+qռDgaC=P_tގI:t4hBvܻBgn]_^#K.]qኳpk 2   2|s(c:X\)/JyO+WR:aQEn}.x- ݘrC 1,\H{rf!I(?udK.@-{)
+xڝXo@?T֊(zY^qw ۲[[IfiYVܢSpf8 fYfH4KBluf[XF :xbqVIF&46 Ҽ}YIgHDq6{\TFMWsB'iP{Vm5gU
+Zܰ<Ҹ\rg&
+MW%$-m.wSCqXGFMC)+D &\_5QM+5426DQ&q&Rh$tElKTcmz-c k *hHEeg*mmj ?G>:٨iqw@3Zlq|䵢fÿ]T#wQ=V+\Y|>gBaX01FxXa2t5
+jK7Cǎڎ?S%m<dXGT'ngKw h<W^6Fv²-IhsDiOkG'Q3i?B8atZF #Gm cݕY їAA9Z,"Y/Lo;ٲŇFݖ,TȩA@bͣe~/UE3eO0@N`Ĵ6.`I6orr\iqq lF~ټ3@,@b2K\hB Cb@~cxhi:GSiMi%^Gz%8Hia1pLuUǜPUvBT=
+Ch.`@
+Flw'gi=ju @.r' :h8{gY곲.!~P
+ ǸX$9 ʃ+vVU5N2l"5>FHʯlP璒1msu*[o&Sc`lXshgmg³){ZXYB7C5؞!̲l'$$ԉRyȍF+_`L
+$޸/%2Ή> OS]mj1e z@,tp*^JUDĹ~*Ѣ0S-ѕ xÎYYZ5ZzŠ{1@$Rҵ?)tXuE!a}v&|BH_=?ɵ \K\_7v6[ƾ<ٰSGrG`-ϛo03#Bg~yyj|BA nc| mj_+hmU% ~Q9"tķӖo.N)JgI89Q O5#MlȚ)/݄P*"9co?M'T+% 任a~b$]tR'/ KVsfҁ-ootl˂h,OGNJL%k}P24(基?ꦒ84e)D{+/ ZrkҜҝMJ(zW K+4vSm㗛S?8X0]Ҹ'*$sC[ݍ3h2C4_ń jͿpPOpӮyyHC#Sk+;޿Tzrٿw?@mh,.N3سt,,"?:Aendstream
endobj
-4823 0 obj <<
+5137 0 obj <<
/Type /Page
-/Contents 4824 0 R
-/Resources 4822 0 R
+/Contents 5138 0 R
+/Resources 5136 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4830 0 R
-/Annots [ 4827 0 R 4828 0 R 4829 0 R ]
+/Parent 5130 0 R
+/Annots [ 5141 0 R ]
>> endobj
-4827 0 obj <<
+5141 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [291.589 551.093 894.567 563.995]
+/Rect [279.468 511.531 400.945 523.22]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp)>>
>> endobj
-4828 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 483.953 163.096 495.643]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#HOSTMSDFS)>>
+5139 0 obj <<
+/D [5137 0 R /XYZ 85.039 786.531 null]
>> endobj
-4829 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [222.168 470.404 274.124 482.094]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#MSDFSROOT)>>
+1114 0 obj <<
+/D [5137 0 R /XYZ 85.039 766.606 null]
>> endobj
-4825 0 obj <<
-/D [4823 0 R /XYZ 85.039 786.531 null]
+3095 0 obj <<
+/D [5137 0 R /XYZ 85.039 634.211 null]
>> endobj
-1066 0 obj <<
-/D [4823 0 R /XYZ 85.039 766.606 null]
+1118 0 obj <<
+/D [5137 0 R /XYZ 85.039 634.211 null]
>> endobj
-3019 0 obj <<
-/D [4823 0 R /XYZ 85.039 647.281 null]
+5140 0 obj <<
+/D [5137 0 R /XYZ 85.039 595.943 null]
>> endobj
-1070 0 obj <<
-/D [4823 0 R /XYZ 85.039 647.281 null]
+5142 0 obj <<
+/D [5137 0 R /XYZ 279.417 300.885 null]
>> endobj
-4826 0 obj <<
-/D [4823 0 R /XYZ 85.039 622.563 null]
+5143 0 obj <<
+/D [5137 0 R /XYZ 85.039 164.866 null]
>> endobj
-4822 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F11 2898 0 R /F14 2895 0 R >>
+5136 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F38 3001 0 R /F41 2998 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4833 0 obj <<
-/Length 1375
+5146 0 obj <<
+/Length 1725
/Filter /FlateDecode
>>
stream
-xWKsHW趨* 8R&޵Hmm%9`@6e K~
-e/T<L랖Oqu2 给;
-&u=V5}
-%\kƷq޾v絷jMU9sS;t,</a' 5 <NdG80H
-eB6-RtR/3uĹGz@2?L"lWHK6=+ XP $H"Z$"_,JR SPsnzS|*rJ]I,1NE1be@Y(D-R Y`pE=PefX!
-6ePEU),4\/zX9o
->(]$V|PjEw`3:W:-+0A2m{Q*ҎT%Txn8tZxpiuۡWYKcv
-) >k0~sUt~p
-6 W:]C2ޥc߄mWXmÍ녫 !L\55k|^(1PS5LډcȎ``$QfQE\<fȥ$$)2}zdBJY-yr|,C>vs켰Y(/T}bTݫBԧ
-#|Na |D~J{7*QMendstream
+xڥnF]_!!\};AZ-Rvk):Rcν Ǚ,
+((L4+σ|<xV~.ޝ1LR^if޻ϓлg
+~}+MC8'oP92<Cr_7 \2[=#`Wy6~u^bl엣џ=+c Yיڷ)md#-N-W<U{bo^1b(LM*OTBRN2k0nyͷ
+W_ جm^T!
+u[[w HSùWOn,I.ъwGo(0`
+f@ew z咡K23 ѹ6ݿ`N:O٢r^]- " :!Z.
+d$Q:bRoq%*Tm]2l+ 0홡8Dżeă%Urg'&B$E#,t7A+gX21Dv/
+Q<\@d}XJ%?GezV%l4쪸1-O,nnCroԏ}F<aks b`=X(GVL]#̪("$ I<'i\ -hBCAuNn{ 0l,=_k;k7s d҉vnKn>Ub0 0=`׾aq:qa|:;4#,O #ă?x6}q)]kWcuÍSeSj0e-=g^Τ9 ɣ ˝0IKCҜp]'nBaw $^M2IE-M ԝ,5dmd>dJ[lGdp^d{Y>í
endobj
-4832 0 obj <<
+5145 0 obj <<
/Type /Page
-/Contents 4833 0 R
-/Resources 4831 0 R
+/Contents 5146 0 R
+/Resources 5144 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4830 0 R
+/Parent 5130 0 R
>> endobj
-4834 0 obj <<
-/D [4832 0 R /XYZ 85.039 786.531 null]
+5147 0 obj <<
+/D [5145 0 R /XYZ 85.039 786.531 null]
>> endobj
-1074 0 obj <<
-/D [4832 0 R /XYZ 85.039 682.284 null]
+1122 0 obj <<
+/D [5145 0 R /XYZ 85.039 585.057 null]
>> endobj
-4835 0 obj <<
-/D [4832 0 R /XYZ 85.039 656.275 null]
+5148 0 obj <<
+/D [5145 0 R /XYZ 85.039 544.893 null]
>> endobj
-4831 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F20 2865 0 R >>
+5144 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F41 2998 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4838 0 obj <<
-/Length 3204
-/Filter /FlateDecode
->>
-stream
-xڵZsF_K(^zMΥ3m"-H?
-xwlC3#Ic?M\2$;e~ųEyn/1
-fQ/1o_pixWE\z]Ef/BG3(9?_vҲAxǀpb%@yN?N!B{?+p^4M!WeS 64r_a@ͧ\wG+op
-3?k 8࢑#0!bk^kC.}%}1IMGwGU6ZP#a y&Wv hs[V1<Є
-4Ţٕwgd˵QQ=-Oғ ݁!E[}q0,Yh%M~hYͦ0T; 'XTeS;{
-
-D^bvv|E3| #i`0)&F U{ {Z] Ae.3adپPJScy:`ӽpeM+pD<V9k[yGfL="Sg`*
-@Fw 2G5|‘ ! z
-@SnWn*(P%E>#2f9Pw\(N:{5Jxzq z
-y?- P; P>I+>Y>ԽL27_,[{`L ? @7k~ZT_@2g~ڻ劼Ůmp vKz|}优;~1+Jヒ  ri=)
-1ѓ%3LNHeqˢI`o0~eK/uKdg \Qiނo]s>C5Dyu8bXSKz!*0|7t /4{sh=NXyhZ]0m;~ZiB3
-2DbO6MLV<w-4ˊaɫl1yMoHL<k>upk2cWN5\rBJbt覓ٝN=JYCf$ `(ag17< D C̖ZL֞oӔ/Wи3)`E˅3B;'(Wڎ/]̼ifCO҇2Y)|8G(`Bq.tn+  C'a6z|F^p*ӣ?O *rZU02՜%(ZnM1I`&uњoLx)™̖IqY2`=哌*pwtI~qam㔔LUK޽# "#\W7?HM.>${r[&.wR s J٢?-2li vlz)~$oL5h-^錞^Jpxajɹ}`KTr8OPQnY%e앣^O` Bw a$j\Sy#]ΗNJ)8둌*SNhĬ~
-̴vY/촔EaDpQ څTש$J^VǍcNšQ2_1A:Mv%g^BR{EDPrO\CG?o1 DKt>_{0+.#?"Ns?͗^_\kJ'"txU@tddя~"Ir,"l?}Z945gBa,J\bq{ g?l*v?\=pu 9${ ئz('kk&o̓.ҋa[|(
-$cBR#_+sRNB3zݵ6{? e&ຘ|ܖH0 /s3gZר干[7YԤ(z:FAp[S<wVdcuܒLoe 20xM< v_Q(K&\ TcPؓpJUbMpԭu08V8jf8M }79q#q2-OMg1!Qg<2~<Gqیl޸/6y3(o.|1p&&j˄ /uƯ{B5M#fc5x͏m4YSd9Z) ~957HG^ȇ45UF#0MRMso0꺰TT\Fgs
-flAz?]).
-=J-htl <a|S_5+e&aY]^vg9/ T{9@6C
+5151 0 obj <<
+/Length 2802
+/Filter /FlateDecode
+>>
+stream
+xڥn]_1r
+t#jpWkF-^ZzF7na]3$EL Rbv=]ߐBj|}_֕ya匪h,H0%\dHVy*Yܖ#Ξ xuR0wB(,go?#Xu,+#H}g*C_=u
+ٓ׉o/
+4֜$ ىj _-}~["Um08r 3V\~—ѣO#qL@aDapE~
+G;ޱ҄c,l:@`-y4vQV1[s~!,(xtÈs.Ũ7hu"%~ R0YXLdP&OԳ+G34N)b6C9e5ueq0â6 mݙBg[0gi^Pe x
+A79Idws'_0=ΈHQYDd?oPFo!&O4meX
+֍zR&7fj' y~D_S@"=RεwN{BIkь޾{ESLȱB^ J1vǚ)Hǒk#WY8'{{i)rbMSoש7KVnzo &' _Gk2{;d
+,.=h~{*3oCef#>JZjX nK {\Pb[<OarOx"TB gGCֹ\@ir,⁲oȮڒ"틍cz/,f^{Zw+D0?v^'!)y8UjYMcP;{AolRK ?ÃRCf @;(jG֎Jsʑ_,~`ǭ}T5X?' ektiDG5}Fa >e2]0 CsQ-<o4<Apk+(Z{omiyY)M-I%s鱕cC-B IK}y_¦.HV0rtΉ/Vᰤ7
+f2v3 7ǥGgDWgY8'عC4}K198bO̐Mb%JruH)O[6
+sj*v$gϷ(^.y\<o`<;"?WIO^JJ+Vlnjx^|:5O0½9/]l s9^DlsŌߩ-f|ǫtv=6p<S gJ5O
+HL9 4ahJ"W~(S@!|XKyB
+./oV0 /18
+ڻu&}alѾnv~
+H2nk_ƯpHh"OY"&i3TmlFЛ$$M!ݰyD2Tk
+"=W0Hald=0b9s@ej)W .o[=?"BaZ.@&<hCgQ=l\yG4ARB? ,2r4?03?7dQendstream
endobj
-4837 0 obj <<
+5150 0 obj <<
/Type /Page
-/Contents 4838 0 R
-/Resources 4836 0 R
+/Contents 5151 0 R
+/Resources 5149 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4830 0 R
+/Parent 5130 0 R
>> endobj
-4839 0 obj <<
-/D [4837 0 R /XYZ 85.039 781.388 null]
+5152 0 obj <<
+/D [5150 0 R /XYZ 85.039 781.388 null]
>> endobj
-1078 0 obj <<
-/D [4837 0 R /XYZ 85.039 761.463 null]
+1126 0 obj <<
+/D [5150 0 R /XYZ 85.039 761.463 null]
>> endobj
-3020 0 obj <<
-/D [4837 0 R /XYZ 85.039 667.405 null]
+3096 0 obj <<
+/D [5150 0 R /XYZ 85.039 653.856 null]
>> endobj
-1082 0 obj <<
-/D [4837 0 R /XYZ 85.039 667.405 null]
+1130 0 obj <<
+/D [5150 0 R /XYZ 85.039 653.856 null]
>> endobj
-4840 0 obj <<
-/D [4837 0 R /XYZ 85.039 642.687 null]
+5153 0 obj <<
+/D [5150 0 R /XYZ 85.039 615.589 null]
>> endobj
-1086 0 obj <<
-/D [4837 0 R /XYZ 85.039 180.371 null]
+1134 0 obj <<
+/D [5150 0 R /XYZ 85.039 139.723 null]
>> endobj
-4841 0 obj <<
-/D [4837 0 R /XYZ 85.039 158.609 null]
+5154 0 obj <<
+/D [5150 0 R /XYZ 85.039 104.412 null]
>> endobj
-4836 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+5149 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4844 0 obj <<
-/Length 2833
-/Filter /FlateDecode
->>
-stream
-xZ[sH~ϯ\I}dC,$l1<(hF$~ϥ[jc0BQs?9"/Z2$i$dNp'JFϏl$
-Ef%m9_ ^O3)eb:K4xq4
-ޜx~K*8'Χ(8yuq/6Mep>}sHѻdd<
-5Ced}ZI\9W tb#2iz#=rwAS4O$ʷniO lhpm/^(xnM6D=Ÿ٠@Iƣ8NRƑSUު4^ԯ<q+7]Y}b 3Mk~ߞd"̽P/.P0Ęnc~J Q5I&;C!\#{ N01F )?'Q$2}埠 Ԙ tci ^5
-U7Cd2c9H◄PX8L P8Xgg⒡
-OqSBocOljZw9ڒ-
-u XT3D*.>e^p|o)W՘[W^[{'1dk<t zSKû:z.^ʦmZwU4;Er `\ AYfʼ}I F|v R\# TMoaZIJ5J-BȂBu<[<Qd6)Y-d
-.4va'wƾ"!<_YfV{_,O4]X*6 #k+%-..Hۙ`6\A(oa}d'h@/ˬE@\Or"j$\M_YAkq1;ȐrRKT2 زȈ?Ȕ0Ɍ w)!Bs5p7i hHnI (+&.[,7c lI^'(zBO5 d4$bޗT0 4wWfb'NL>/dWA}܅.<:IxhC1*:^aEk8>@l|,Db;B4Pd(O
-VJMmQ;RLLv?9z!(Ӕ|wjpD<S=f8e,a9񋠎$WljN-Ok77V=1 q5c=Zrڢ[:h%YXp?]D4yeY7<r,Apξ"'}¨l{ݕ~X:l@Sh-/_Fu/& Qae^ dLwůٿG
-x@_T~,gۅڞp]k IQ08.4PD3ODSFB7[#򻟡a,9HJ
-J@ ^@`A ^<Gz BVG;4=YYЈǑd廪#sH"Ɔ(`(3_/Y:p ݂!SaR !ߙC݈#+
-j0hTqBQ<׷ǁړdIhږS3nFZ,\jG(B=@
- ;dfĩp? L;
-[#)vKקZڊ?Zi{(S2d+gj>E5l%)$n3(Y,h &Ь^c
-bAxa(\jq.}A&CsYzvUg5S~ٷ1'凱&}o
+5157 0 obj <<
+/Length 2938
+/Filter /FlateDecode
+>>
+stream
+xڥr۸_%L%HSng2+vy%b
++Р
+& w7+8F҈ul!M"vE##Yb#j{J֮Ԅհї[nKwy^[Sd=0qu>~}^~`<FYTD˪+=/' Iݖ'p|59ы[sDumv s6HC۹)hU'@t9DxW 7 @JYkڴ<c121pQ- $֗3ba\܁WԻwD;>hxf>w_7z##|85"Dw.FPc4
+F&HCb_IdKͤ^,E$ *+r=RC׭;eWoSҐ!qEMrfޙCFpr@t @5Sqƚ4v@ 6%{2'r:ie`t6G0y 88}Cï ]zF/6KmWAR聸t;tFoxamz7afk
+|5`@+
+@,$j "-/ O>iP9̒VᣵAlϿ%s9x.<݈kQR@N'h"!]bF}0qt3 0^4&b.g
+@N Kn0Kmn1&p%"3;[:\Wd@|w8׀{7}-;7s=,3
+SP9"0ENfTViGe5uqFVy찵dtbڏá͂[B0gRoQݦnN8!D}&HT&$q00(h\{ڛ:j9VUݚRԠ}:%1!V?aƥaz5.ziMgLy&?kful=,.&<3]I#rHuYi"bQ: # x3}n9^\js܅1v8H] *v`FUl`xTSYOgT잷4~H 8>Qb+GYps<sƑŁAVqN֋v8+Z\-]رU&|?7M$*:4MUNj<>OMhHuCcc J_=fd
+@8L.~.o>(-k]Y/%=SU9;-cLbzH{0ߏZYQ+B}B#T;8C 6uUau/>dKgNȐX*Uԝjkٌc
+NF7o( ʳ0#dcn tUD>@ jÆ995=q֊JZ몦[1wȴ)$Ѻ Q?A
+e/u1 52m+`>Y.XWJ@@%3g&1d{W'0в~O|D R
+XPߵ$0RY-@b3:Z H=7RK]
+i˟/! A'ˆ% Nk/DAƞ2Lb
+#9@Fh5/SɊ PD~4|., M9UMlceZqDop8(ğcgk nZSk'X7ۻm `?aGIwuk!ٽS>; W1}5"x$pX<
+n)kĬ_e,] 1Kьkh-F%Pc7F/y$&@24]M񾛵4<6E&I1 0@Oy_QUw.}
+%ΥUl
+ Lb}A.vPл:3`lMSsk'a}~-"$r`lydx5#VVe\eާ7D)^%R>vԸʮU6"&@^]@"rЇB咩_fOwtC 4ZٿJo-gY^endstream
endobj
-4843 0 obj <<
+5156 0 obj <<
/Type /Page
-/Contents 4844 0 R
-/Resources 4842 0 R
+/Contents 5157 0 R
+/Resources 5155 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4830 0 R
+/Parent 5130 0 R
>> endobj
-4845 0 obj <<
-/D [4843 0 R /XYZ 85.039 781.388 null]
->> endobj
-1090 0 obj <<
-/D [4843 0 R /XYZ 85.039 607.698 null]
->> endobj
-4846 0 obj <<
-/D [4843 0 R /XYZ 85.039 589.029 null]
+5158 0 obj <<
+/D [5156 0 R /XYZ 85.039 781.388 null]
>> endobj
-4847 0 obj <<
-/D [4843 0 R /XYZ 85.039 558.748 null]
+1138 0 obj <<
+/D [5156 0 R /XYZ 85.039 540.39 null]
>> endobj
-4848 0 obj <<
-/D [4843 0 R /XYZ 85.039 545.805 null]
+5159 0 obj <<
+/D [5156 0 R /XYZ 85.039 508.172 null]
>> endobj
-4849 0 obj <<
-/D [4843 0 R /XYZ 85.039 534.377 null]
+5160 0 obj <<
+/D [5156 0 R /XYZ 85.039 464.806 null]
>> endobj
-4850 0 obj <<
-/D [4843 0 R /XYZ 85.039 507.278 null]
+5161 0 obj <<
+/D [5156 0 R /XYZ 85.039 438.313 null]
>> endobj
-4851 0 obj <<
-/D [4843 0 R /XYZ 85.039 491.608 null]
+5162 0 obj <<
+/D [5156 0 R /XYZ 85.039 413.336 null]
>> endobj
-4852 0 obj <<
-/D [4843 0 R /XYZ 85.039 464.509 null]
+5163 0 obj <<
+/D [5156 0 R /XYZ 85.039 384.117 null]
>> endobj
-4853 0 obj <<
-/D [4843 0 R /XYZ 85.039 450.96 null]
+5164 0 obj <<
+/D [5156 0 R /XYZ 85.039 357.018 null]
>> endobj
-1094 0 obj <<
-/D [4843 0 R /XYZ 85.039 422.342 null]
+5165 0 obj <<
+/D [5156 0 R /XYZ 85.039 316.371 null]
>> endobj
-4854 0 obj <<
-/D [4843 0 R /XYZ 85.039 401.146 null]
+5166 0 obj <<
+/D [5156 0 R /XYZ 85.039 289.272 null]
>> endobj
-1098 0 obj <<
-/D [4843 0 R /XYZ 85.039 247.401 null]
+1142 0 obj <<
+/D [5156 0 R /XYZ 85.039 247.543 null]
>> endobj
-4855 0 obj <<
-/D [4843 0 R /XYZ 85.039 229.135 null]
+5167 0 obj <<
+/D [5156 0 R /XYZ 85.039 212.797 null]
>> endobj
-4842 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F35 2880 0 R /F56 2890 0 R /F14 2895 0 R >>
-/XObject << /Im3 4327 0 R >>
+5155 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R >>
+/XObject << /Im4 4556 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4858 0 obj <<
-/Length 2384
+5170 0 obj <<
+/Length 2852
/Filter /FlateDecode
>>
stream
-xZ[OH~W2ni\UFڇeF z4ZePv7nc!H\lC@vBusN}Ṽ?S,N|dx 99o/
-(HtXӐE9퇹rD8Nws~zvT?s 1}D9/o#@B|2 O4]C~6AD(S/ѯ}gMp22DScH(׋ßǟe"Ah&]Ě]I5E5q˿^,?;wpe ,0ҧ͙UYc)%G4|ѣb9Z57T mq7$upbűSb-Q
-now*@%qjr >58fq8ᯩzMk$Vw9ϚYٮ&4k"{1r s,*{h܇cbޕ*r6f\ҙX[_:&H8N7@JETĉ71lO؇0zZ;1 _G4 [l8xw{ȝ3bKn-PމlgY2jX .7;h3Ig͉R8%LG*Cb=咛pӎ :0!key҄tbx†u]npF1_Q@ZbY&7]F= p̍%?#q|"w 0_CD="`k<<7z<'k6L[EQt8^(7Yro[5N_cTOi6 ݥxp s*cԂުqU$Fn2j 3ێ-C._a;߰h`h]L) |S.\|xPZUXxت)Fpx x-pTcJ/2RjoA(<)> *_"WD}zГfb O@|M7Le'(S%wQp`q-#E+V7P"R}vQ-bIOF̝"]5}'( "DiGt((髢x5X!yF[ {IW㤵b4pqyzI Õ9@DJD`CK1a2G:lXA{G"37e2
-bp`.5ҹ3:ª()wn&19LxjW<{4cC&#N4D|Pxlɥ_¡$Ql+Mk8ꊇAG<6JơmڇzP<#μP83/_,HqL6Q!ߎnb2a36y7*7"0 l Q(, \$qj^WQyc
-`ı,F|H>z)&%bTG{i
-HS͸R>. W5.3Qe;;3G-h.>
-7\+sCO.W hpEusV5iFLUQ4QQ\2L"r#GPLtpĀx⺡x)m=
-^Ѳ^3f!
-[5WP~Λ|* ڌ{m\;&! w~ƘljWX! Ԯ%]}L<Q
-=*y!oA:MhdJ< ܲ9 X\Х& O* qXUP.Y e8*Zt[4Dl1Vcӓ*0hj.
+xڭYYF~_!%`l6Oypf}>f=
+1&Eo]M5%j` :*jE(W'bS_x;yub%$+ӗaPzb}{AsJk]8q.>^*88Wr7_1=zu疉v_.^G Aez鳷A_.<W=Wt}Ba建ȊSXMq5E "=ɇYah) HM߅cjPPz ע@9Q|,6M]q vnǏ_✲dG?А*e:"ۂ/충*Ys_&jwhp5ky - n}rvDž;Z
+Z)/ <9]Mz'ܢZ9lgee䢽ʐU֗ͮ{fvcŝ_U *5+2tgG:YQ[
+>B]g;xAF%y첛@"t{x`&+XT]
+NAZHھҩqa @}J&
+`?pQB@ 7Ո
+Z^::dKCW68t/ʾ
+0:!BzV9%x秆eKȨk |;h)%nkA2
+
+MQώDCv:<.1'B1B[ ;hU%/rqۋ|/Ҧ ApW!CÍtOwo
+u!`nƤheG N˅OG.@ $Y= TIcFٍuC 98?-g75*MA[U >T~?T]R2iRA&ӂ\zB& \:bt]y▊ߪo(ڪ X8n L@?:7ۆϕ*Xd6T8bVh@:v#w;7U+ol"=T3$DƏ͔a,)rGN'nTrwtvTf3E+&bO_F!'@сqJpbnt+rv<HڎpJ+ 'f!! vgĽcQ<ee^&aTDArb~6oʀф́8|t.ui^X4^C7E觺I,EݱP8>(*dGI_0b=Ui82"Acz4nt@Ձ/*vPV@ٴbL(fС*ğj217ro4ƃ _}ƎӗZ?IBx lgѬ Av1*;lI Ү_4 R VF 9S ᙒC pJX>УB16ŞFJ1ljY6*=˴bO0VQjn5$yu+2h 2B43dc$.L)\"QMt:PBw}edƖ:7ԉ&TPUendstream
endobj
-4857 0 obj <<
+5169 0 obj <<
/Type /Page
-/Contents 4858 0 R
-/Resources 4856 0 R
+/Contents 5170 0 R
+/Resources 5168 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4830 0 R
+/Parent 5176 0 R
>> endobj
-4859 0 obj <<
-/D [4857 0 R /XYZ 85.039 781.388 null]
+5171 0 obj <<
+/D [5169 0 R /XYZ 85.039 781.388 null]
>> endobj
-1102 0 obj <<
-/D [4857 0 R /XYZ 85.039 428.19 null]
+1146 0 obj <<
+/D [5169 0 R /XYZ 85.039 761.463 null]
>> endobj
-4860 0 obj <<
-/D [4857 0 R /XYZ 85.039 404.872 null]
+5172 0 obj <<
+/D [5169 0 R /XYZ 85.039 743.459 null]
>> endobj
-1106 0 obj <<
-/D [4857 0 R /XYZ 85.039 231.197 null]
+1150 0 obj <<
+/D [5169 0 R /XYZ 85.039 496.683 null]
>> endobj
-4861 0 obj <<
-/D [4857 0 R /XYZ 85.039 210.607 null]
+5173 0 obj <<
+/D [5169 0 R /XYZ 85.039 451.608 null]
>> endobj
-4856 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F72 3966 0 R /F20 2865 0 R /F35 2880 0 R /F66 3242 0 R /F56 2890 0 R >>
+5174 0 obj <<
+/D [5169 0 R /XYZ 256.553 362.21 null]
+>> endobj
+5175 0 obj <<
+/D [5169 0 R /XYZ 85.039 199.093 null]
+>> endobj
+5168 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4864 0 obj <<
-/Length 2718
+5179 0 obj <<
+/Length 1713
/Filter /FlateDecode
>>
stream
-xڥYoFBPh/Hi+q%B,#k)ʢ>fwgfg~3;',v0Y6Yn/f~›D8${d"yqp};, CYfۏwsw#NE-t4ͧi~.Й_~|n>`aQ"]&y6yy>^DqQ(?.<MxՈ3K1s71 u4
-PAJ `.r(*&(wA$uL 2nJs-gϏP}\W7qnrcmu 5 if 4w$+[`334y 2G#G vmTi7r€" __Zn 0-;Lu@ {T='˱vQ]hK>rNBެ@Yzϝem(@ @]1o-6~
-dM$<Khp>B_A:e)u5/q }Ap.wkUndfj1aW!7
-iՃjLSՕXqZ>G8/*>U}e$LN='g#`I6,)AI<r~A/M9 >s+&7Th@e7˰1=|Y3x#Ӱ/-!Љz$Q
-a:
-ƍ~$ '|,m[ AYsM* W @[52Ě t֒=^U~,)sP 'j,סt!0kk#Q gI!( xѻ>JVl~ _]!\f8{O9}TOzu{ڽ/J4[$􊠤0
-\K<y3K$m yy|8)(b!ՖACcn?1tG%2%UV Zx^S5y,E/ͨF6t*5 ǑwR
-@ ”.ϻU)E<TjkJwK.,]"]SkkL_.3zɯ~2=ca~DNJL:)[EQ ?y_,H+/;;@n^\OYM|>9u-LAUǏ `endstream
+xڥX[o6~<ZՖ!+6Ee;H@KLN2UN!?~B,7- s?;R?8]/\I2Nˑ7o9fem5:zǾ.xuQWٕt'tX$˳˩\<>CR\j:̏</.@4 zvtjj Kgۑd
+"G j: x;[[ʺV5Xя^9 k94<h.e6RdQ71AF~vP(ߕ6它a`*82Af>tI97Ľѹ)
+Ro><BnQkCg q-Nq؞-4<u,F/MZ7dB/f+Cz$A>U_ >\VUC]Z#5 T./;v
+bBw.(Z)3gpM f|䇄!SrBof#yԕRcV~TmG?0Jf.3jKk^
endobj
-4863 0 obj <<
+5178 0 obj <<
/Type /Page
-/Contents 4864 0 R
-/Resources 4862 0 R
+/Contents 5179 0 R
+/Resources 5177 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4830 0 R
->> endobj
-4865 0 obj <<
-/D [4863 0 R /XYZ 85.039 781.388 null]
->> endobj
-1110 0 obj <<
-/D [4863 0 R /XYZ 85.039 761.463 null]
+/Parent 5176 0 R
>> endobj
-4866 0 obj <<
-/D [4863 0 R /XYZ 85.039 736.911 null]
+5180 0 obj <<
+/D [5178 0 R /XYZ 85.039 781.388 null]
>> endobj
-1114 0 obj <<
-/D [4863 0 R /XYZ 85.039 323.41 null]
+1154 0 obj <<
+/D [5178 0 R /XYZ 85.039 706.019 null]
>> endobj
-4867 0 obj <<
-/D [4863 0 R /XYZ 85.039 302.214 null]
+5181 0 obj <<
+/D [5178 0 R /XYZ 85.039 671.274 null]
>> endobj
-4862 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F56 2890 0 R >>
+5177 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4870 0 obj <<
-/Length 1806
+5184 0 obj <<
+/Length 1968
/Filter /FlateDecode
>>
stream
-xڥێ۶_(V".%Z<iEͺEJ%ё?slyݶHDpf8w$4ReNBgɏ3bH'2qRd2s?ozSJ~*^۟,|훟(tarq~rO˟f#PB>~Nb4Besk),sY)> S )4< wmk[xQ ^?E<BdD^USu fhδE]M>Ѝ#ByN"_RUۚ{>xqn~/ F 8o˻,<u=:YSΈf0^zMN\R3fu-_JG?ZB- ˟C}7|/]6Kܾp9_$wߌ;`\t8]Q2Te1Xz~B)d#H,>nM]ttcIu=%wqz=8g6.S!-PX2Xw~ᅉrXuÛ6]Y=n lK(ط-l"H-#vSpH Ђeȴ,W./rޭ؊qkk{
- w>P]50)SBADQ iEsჼCjoVw̹GL@<PJ,=%hMo \(pܹw7ghg[ޗ `֠V="
-bHRì,*]2H` }@)9%EHoHqBA`
-)swC?)-xB!40渡3HE
-O%N)! =UyEzLd]1x帤2,tǨ}^$#㑿
+xڽXKs6W0!L$G;98t4V6Z$6"@ѲqNX,o^
+UŞWJA+ZVF-ܙ];Xи ָ7^tKڠ {b5Ib
+NU:$d"Т
+=~|
+flX=^o8%K9$1`ƞ#{]1 ^<vxhA;"4n
+UYkvT4E;h+ڇF1&2XG"m U<pm{<f~AUuՕB#+
+ˬA3@U9*L8oTZMy{^kSuv&@wO\DD&[z3wA ݹ,1Hcx)T+x*)#
+qӹkU:(a~uƯ
endobj
-4869 0 obj <<
+5183 0 obj <<
/Type /Page
-/Contents 4870 0 R
-/Resources 4868 0 R
+/Contents 5184 0 R
+/Resources 5182 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4873 0 R
+/Parent 5176 0 R
>> endobj
-4871 0 obj <<
-/D [4869 0 R /XYZ 85.039 781.388 null]
+5185 0 obj <<
+/D [5183 0 R /XYZ 85.039 781.388 null]
>> endobj
-1118 0 obj <<
-/D [4869 0 R /XYZ 85.039 205.008 null]
+1158 0 obj <<
+/D [5183 0 R /XYZ 85.039 557.09 null]
>> endobj
-4872 0 obj <<
-/D [4869 0 R /XYZ 85.039 186.34 null]
+5186 0 obj <<
+/D [5183 0 R /XYZ 85.039 524.872 null]
>> endobj
-4868 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F66 3242 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R >>
-/XObject << /Im1 3957 0 R >>
+5182 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4876 0 obj <<
-/Length 2228
+5189 0 obj <<
+/Length 1875
/Filter /FlateDecode
>>
stream
-xYs6_J̈́4ENڦ\M'LR/$Iɴ3}=cb]vf.z$r`9[$$,NfޞxBBǍ#z:9%g,l&Uzv8s{H7ίuuNxq۞uqӇqnjeϫ
-0ذdcﳉs_8[s:δqʼe=\Ago.\8nV2$εp4Cky4
-<`;
-|$l-&ұM(]뜌CT K\9| pƇ|eFt/2ct·%ov6
-؏]\gp`PQ2.#?C
-Fsä;s]^0o{JzpokI6peF i$\
-~`DC7s8VOv}P"x? qEIЀ32֔0bw{ԵN5BL䒖b6|HP]X%4ݘAIYfvGRgn N:4#.O1Ӵ4ZUgLHlf[9aY CE</~!#d1WC< )ʡ{I~Rֺa1\g{Ѓ1P0ʮ`[V~$'-IC$ 7ʀKǷk|WsӷFL&f=(&mk1$ zm6՛֙]@ Jpp
-Re#/^ 'nS1O-,#SSE>0}ӺϚ&owC9 q`&mۿ"{HN'L_//.߾bQ"%
-u/)LYzDas9+et+ةG;qNw:
+xڥX[oF~_Bxz=^4E<LIŗfIsެV;< 2,yZμ%qCwDjvRDsK櫋A`Ջw 7l.w޿~~B ^.w^"zpv-Y->^zz`B6}}3cAw0rF1f]~EY8'),x,a^L,%BX@#cg4;
+oF4+ҺDRUHi |vGD HjJiq.ݏ@sAQ8xK4#'纥Xn5aqQ}
+At-"(3pge2`r4ܭYDy֞ݪltBh1!
+".Dzh1UD`ADLp
+MBѢ].#\".;:5mz[S#^Z-0(큉d״@/qQ7H*5y{蠧ax6PEtNn+v1~.Pe= Sg*Iॡ@iA}ex"G^ rp!BYB)4:nc
+k1fF%%[Ca^Oˏ $<]MpGGYi+ &(j 4GN\WO:"tx!hGg[b<mPJRE./0kEH{,:źVb%Г]yܗU1xˡv1 DfpUE&#F[cm8:1#Nױs.{#k}y(?屟$y%9!IĠ^UVi+z]WJMK:ʤ=% -0eR)0Z8ځk]m<=Rq.F} .\ T-/L
endobj
-4875 0 obj <<
+5188 0 obj <<
/Type /Page
-/Contents 4876 0 R
-/Resources 4874 0 R
+/Contents 5189 0 R
+/Resources 5187 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4873 0 R
+/Parent 5176 0 R
>> endobj
-4877 0 obj <<
-/D [4875 0 R /XYZ 85.039 781.388 null]
+5190 0 obj <<
+/D [5188 0 R /XYZ 85.039 781.388 null]
>> endobj
-4874 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F14 2895 0 R /F56 2890 0 R /F66 3242 0 R >>
+5187 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F62 4052 0 R /F35 2980 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4881 0 obj <<
-/Length 2381
-/Filter /FlateDecode
->>
-stream
-xkoFC
-X|Ǘ6.ԍUE."eCȾ_%%Qr}{Ṽ?YJ٪f/L^֛?Ez{nꥳ@'B);_qܼ{L?~XsgG~Žy򗫷 H!_>}f9˕4`~+*7Jo
-cMt(xnh{eN\9//|j:kr@}<6%nx7O&]jl;qtHGdy]6n#Ƽ) ;B=o
-P%вy<| מT}Hdawߋ {-b_FD.pmTduqYN6WUY U},\/H|2!o1~6P HE$xqv5w ZEa$
-Lr{`Rْe,d1op"gWT<B/Ze
-8@=.8!E۪Yhq6s"#D2v[m,-
-=j[FE
-`l 
-,mISk!UP?>ItŬI[>9EBw=/`0!5ϭᄬJ0{NGlR:- 9.eH`w1εpxMY:w T#/^x㑷i}^g0]0(_q )3>9FǏߊʅT*F/&9 
-¾X'Gˤ@lb:ڔ/:JA:. K9'
-|7䷩˝;"DhiU<E*>j ]Nhmgk %),RIpTzLH^"r>:&_
-Qb_,_kaD:aN 6KV41O@Q̲&N+D<nNd+@zԊ?RRм7Lf}ϔ&l <~sxJ /~en+q Q͢u`ٹPĠeY E
-cCSA$29oha"d1J_Dɣ$ : s2,]J7Qe%!% {Ay: OЪO3`@xu[Ոz`{0N$f 9>PtI& fx~PSFτ=miendstream
+5193 0 obj <<
+/Length 3218
+/Filter /FlateDecode
+>>
+stream
+xڥi
+-
+Xoq \gU( E$}5ÑDm9̼Y
+7&"=8lo
+tBw(|vم"f!;pta:1S|0N@@$4,OR׵\ʪeĕjpo]Ḅ' !j" ZhN_EͦK?M{5B| \'Zl<Y,3t/Q fEÆ<pϙkE?G$Bٓy,FhWZp@H/j/Id%顢r&+$Ĕ_ BN\f\Yn1qcg~&{_"OT^!w%ۀ EgB/ӌJlUc:ޭhANOE1\tg}E9#l5arW-y ?r^ 'RQqk"iYiWH
+ƛe`Er%pE޼孮Ƈ8N?d ;{4l`#-u=:7HC0yH%P
+%Z8,fB ߷amJ[r$+&p9D} 9OƺA+9N
+ s
+˸ XR;%lPf$!ؗ.z оfL(}gORW>Ǿ'q԰8.?uܹa#'DPj{^($~9BdKO<i)0zfK]S@nȡ)m<:iZ
+IIJJ,/#BSJCCesɱ SKS$0‘~vMl ߱?jIʈjS| wMēzjЍJ-$ ԃ{ݽX`v|`j:0\Wʤ,cC%
+9 x< d-
+vHUVkM4H[Ѥc2o3_[7(ג 5aSɟPG뾝ЏcSuf('R,0b* h^w
+Z+8?F^uH/ܗ+SL~>p`\I
+A1A5xJ|<4reFVJ>_r
+io
endobj
-4880 0 obj <<
+5192 0 obj <<
/Type /Page
-/Contents 4881 0 R
-/Resources 4879 0 R
+/Contents 5193 0 R
+/Resources 5191 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4873 0 R
+/Parent 5176 0 R
+/Annots [ 5196 0 R ]
>> endobj
-4882 0 obj <<
-/D [4880 0 R /XYZ 85.039 781.388 null]
+5196 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [97.651 400.011 295.622 411.701]
+/Subtype /Link
+/A << /S /GoTo /D (extbsdpr) >>
>> endobj
-1122 0 obj <<
-/D [4880 0 R /XYZ 85.039 255.721 null]
+5194 0 obj <<
+/D [5192 0 R /XYZ 85.039 781.388 null]
>> endobj
-4883 0 obj <<
-/D [4880 0 R /XYZ 85.039 226.923 null]
+1162 0 obj <<
+/D [5192 0 R /XYZ 85.039 469.785 null]
>> endobj
-4879 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F14 2895 0 R /F66 3242 0 R /F20 2865 0 R >>
+5195 0 obj <<
+/D [5192 0 R /XYZ 85.039 427.438 null]
+>> endobj
+1166 0 obj <<
+/D [5192 0 R /XYZ 85.039 221.978 null]
+>> endobj
+5197 0 obj <<
+/D [5192 0 R /XYZ 85.039 179.025 null]
+>> endobj
+1170 0 obj <<
+/D [5192 0 R /XYZ 85.039 137.329 null]
+>> endobj
+5198 0 obj <<
+/D [5192 0 R /XYZ 85.039 101.919 null]
+>> endobj
+5191 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F20 2965 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4886 0 obj <<
+5203 0 obj <<
/Length 1857
/Filter /FlateDecode
>>
stream
-xڥnF]_R@\i M\[EP$"i ;R":q0wڹvgFrOZ[a$EVRk 3i(Nrv{[["Y_,]2EFWWsi_xz
-Q}_~H#^?,_Ξ-G*,|ic˙#8vvc̾]Kao1ׄ q@i\!r@c9
-cI/:!t-) 2
-2Nx.-'K
-Ǐc5ix`"ًҷ~A렍 NW~WGF9/uϛ&)4;<H2߶v/wyan1SE+(W 8O_" `db<z@
-t
-s#&;s#>G%$@@i^^fvMeLwY>%]PkW w=4LQ0#冶Zo3s2Xx;:&@mO0he@SvIFz~2I]uxOnY#U_- j Mpd]6DXk<BiPf)d^@pP ǣܵP{&#mJ
-w}M]ea&K[.dRnSln&)Y9I_ @:b_?mT"tA8USUݺW@֌}m˫|\e̟U2EG4dM{sM;7^7#WLSiLY%g{؇CuZb'OxԐB^[=!g{OM09u&N[C9;6`ajb^ AvC@NQ {0 l{Fya}bի"{L5qnusn8k)9Y5N0Ӯ{*@?>F~UFnHlU=B0v2<tq|_/<2ydT
-y-!7A8(&Jars@h+fu-LQs ;󺂆SKjn4^ه =4BZ*]Gm(g:Dؕff† ~78&[PV5C[2ʌ>
-}Ȇq=e N36;ᱧS 0tM4T'}}@0tcxC|!j{hh.sEO(5ªt⨃.7M6B#|l7fd9č{rFcWtry!T4}"svC!h4L/1
-5 ) ? U3͌ ( , (Y}ֽ6۱|AUp"V@Δ7X'
-h) 6 ^ |NJdlFAtS0)1؜!)'W'5F{) LU+H;mct'>L(<xFΏbTLuXI/A
+xڵXnF}W~
+7Dj(8wnH833gg-~ڊ|
+#LYna@HDF +?b'&7[=|cMɛr82:RQFPWg'8c^]L#m]fyy?sؓ餆UobypѱQ&h;Jr
+ 9Sび
+DX^bŅI3C쏤θ/ [Mb2.3N+JZ_Һ5Tv
+<`T&)c~dHHX4n
endobj
-4885 0 obj <<
+5202 0 obj <<
/Type /Page
-/Contents 4886 0 R
-/Resources 4884 0 R
+/Contents 5203 0 R
+/Resources 5201 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4873 0 R
+/Parent 5176 0 R
>> endobj
-4878 0 obj <<
-/Type /XObject
-/Subtype /Form
-/FormType 1
-/PTEX.FileName (./xslt/figures/tip.pdf)
-/PTEX.PageNumber 1
-/PTEX.InfoDict 4888 0 R
-/Matrix [1 0 0 1 0 0]
-/BBox [0 0 27 27]
-/Resources <<
-/ProcSet [ /PDF ]
-/ExtGState <<
-/R4 4889 0 R
->>>>
-/Length 4890 0 R
-/Filter /FlateDecode
->>
-stream
-xmYK, )rEHQCxa xf~ _AefU (2$崣_~keqUk___cV,n?cO?푿^^*[`k=qKz]6\Ľ;|x5ƨDzs4݌yrZ![֘дqq8{߯:ڦY߰bi7b kAY(S+Z9KXXQeϊ#Z=OޥMhgYq̆SF!w|`an19143[q
-'z@T} "eKTFRt@Ra*dP;o~6n89rb9*D:2RB8*c4t0(أ$`mԂq!aA&HX6hQҕ[f 5
- 6 oʺF^{̩R,rG9r)IvZ0fv5yGSS1>JXdLC`YyuϞI N9Ѝw塷<2d‹8o]I+s$>c
-
-mUN躆y!Flwe"[!I~/L'sԒ @S\^2b
-s&v j)CMhwC4MiKWV.\VqJQ|dL=B=*qM'*0*2gO1|:r
-
-˼{)n~\ڬZqp15LIcƠԤ9~z%g^ yNiۓ:%NkjPӒ{ qo@B%6l?򻘫tTMbH
-
-J@Mxk[%0+ AE._ y+~s\`
-endobj
-4888 0 obj
-<<
-/Producer (AFPL Ghostscript 6.50)
->>
-endobj
-4889 0 obj
-<<
-/Type /ExtGState
-/Name /R4
-/TR /Identity
-/OPM 1
-/SM 0.02
-/SA true
->>
-endobj
-4890 0 obj
-2934
-endobj
-4887 0 obj <<
-/D [4885 0 R /XYZ 85.039 781.388 null]
+5204 0 obj <<
+/D [5202 0 R /XYZ 85.039 781.388 null]
>> endobj
-4884 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F15 2876 0 R /F66 3242 0 R /F56 2890 0 R >>
-/XObject << /Im4 4878 0 R >>
+5205 0 obj <<
+/D [5202 0 R /XYZ 249.962 764.647 null]
+>> endobj
+5199 0 obj <<
+/D [5202 0 R /XYZ 85.039 316.997 null]
+>> endobj
+5201 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4894 0 obj <<
-/Length 3798
-/Filter /FlateDecode
->>
-stream
-xڭZoFB5(D ~9R7v9h E*$of~+R =vg_Y3YfI*Mg7GB׋#Wq8=7L\}tN<9|nPJ9~I:oN.sqvzB眺^s5?<U򧣗Ɗq|ʛ͟<Weڞgl}FʍB/v3XԜ qD "AY4*D!:DD(̜|KcUqcSQ?y1෿+|M㛪cH\]Vv4[L7ɞIQ؛{_is_ַ`\ف9+FcN~K
-pВ/mߴz3/̿5L:`#tX'O2w 1'FyΥ۪ΙW
-h0Af^[ sz95+$ϚwR?\%d" 猴Bв48S/FtMbt"<r9woDi*Ro!>ǜeB! +4 ";wfbwifm`D0w$ r[͢i@;f1`^۱5u.,̾U`Ր--s}kҸ\W>qe@4YaˆUjxIf![W3mc:i($vPK?F@/oN'(&2{`@EGz;Y%NC揾#aiPnsS'X"m 4:둀Gr/(&m 1E+I 9
- 'R̢ [mx1t"a!i)ȝ\~jiAUxN;4azʠ٣sQxA< o)4,A -j}aD1QRS =pZj: x\wÓ
-
-1Xd(H?ź@-:)B,A?*Z-3XvD{k3:^tȀ>[l8m*폘<Y*봓RdRJF*ALC(,uX)h!Qz3a!'7h 5x~f/kCMedR;sN.Yub=$7&`ۮ=ŠFaWg dLɳ*Đ?2ݝNׅH F !s^V[ +
-aj҇n=̕{B7N ѼH}}Fv ȚQiZ{a,|7kT0<M.i @g$7
-cIBA2)9ϥ#2aO'@^mcl$S%jf1(}n׵ mT4֩.)<T5QNs`)Dǖ8Տh$pCOs;iK-I1nU&
-2svI68zI\hˌTHޠ E^;ۭ<4<K\C =uc@mJx^ Rq43b6r[M{Xґʇ) 
-An0G
-u9T(3hm"aX\Yd=.Sy"%:ί;'|ϣ KPER0+‚A+KQ,"9幉 $wHmO^
-Dž5]o, AʟG8S=q R<5[] #"7BO
-0#؇w Z,8$K," C:G~u^Xs5T~;Z&#:mmcwU:rY*cbQ,sH!W*""Ep16eUlEԘ^ǁv3ERIg0}an/<H=)e4MFaD,n!_LTv&\?+~$ί Su^$ N5řtg2 i+9nvH̫}0* y8 󖥎*}MeFiԇ%PEWc9:{,e
-H>o>Cf#׻_Yh敘;UnZc#~-F_#g+[ɣB:_(l;cPN q䦁AoAw`\k
-ͺߥ(8mߕ6 "PZvxp$ Ӵ[7hAdA4U?11.ᥓxGVkȫiAv2d/aKs;tڢ߶@}4.OԒ+f?
-RNK9<&)c 6zdSKrN\/7鳒ǖ_Vq ?&/<
-MLTҘD[Uگ(-M'Yly/J9SA:m6ej j,a vЕ7ª8P(:)A<.[6j\KJc4" y*A*xmuK$ϗ:?DE8cJA<̧+ L5%ם"RIc@bWXQ5_endstream
+5208 0 obj <<
+/Length 4000
+/Filter /FlateDecode
+>>
+stream
+xڥko68 2%zݡ@s纵Hꢕ6+߯y \a$"Cr877\.|feb; 0Y(KAY:8=6NaA ľoo| 3b77wpH{2_}8vEZ@B4}>1X?ʳ#?:~}vs]gͱ@W)4(EYHn,azl:"h2 jLc{1^1^L~ES?5LqwDU ,n5<S426c8.`(^慗Dt9Ɖt*Ȉ-Zt䙷Pw~U{޾0Ů:6-a슺~bH>`
+%c4PFwvNĶjVBf#_Qr:QV{򀓒vnonTGajWp{k1E#D}]
+GhAt:aphbqO8̜2K<Yd#tx2ĝС[r ʦ
+-S2='Y&MC3˺\{F@&^T!~@dKJUr Wp&֧TF.B&/2X&M
+`:yfWlZuY X߃8Faˇ{Oy ]/سA#il?Yky8qP{4vx ]nWLy\[3L!#
+FׇG{
+̣1! 0..1VOE<C l>QⰵѪW8oAɂ8X? % #ttv03*RNa#go(=;mCwxׂf8sq{"C(EأYBdB
+OiA뜴`3pa9}o:32m 彗;IePa
+71"sȓY}MN_I
+vģQ
+gT,S(@
+LPTd#)]"ozx.@@y608.D$IR O{q$5 8s`^6&_2"d.4l'SW;(<\I`Pda1 pDSqy2Vg#%uu8>Aa9̒0pF%a.þْūׂ*aј*pxV6M0/+D;\vhmWB72%eV/VҜ yyg[`2^ܔk]A@Sޅ;wCqjCuYBH/ Ml+ǥQjcHILVeב ? ٹ(ÅJY*bOr5\p#hu3,+V/gMγ ؘJPh*8eٯ.m&x'iR+_"y&JL[{C\ ı:Ԡ eP
+86
+Fmyg8JiQTr0)u8i$-(8
+b|y͐]a#b
+Fc݀ʪq $eˍc/ֲ Y(X :i_1=
+b!\nډk¿n\rt.J7MH"n7gEPŔO7 jKaDAR9E2ق>pIM#VƙT˽?ђN+hGXPtsdw!E-k鼪13yjg)psy.ǔnMR;TVzLl|P$\XxcJ夾DeS 9'Wr(߰V`VHT n6W$UHr]<-{~s .c) ĆԲD^gFs$n&5UNprG͕8f[xJ59+#*<K
+b[z9>iɔ1/4˟ˏ.J9ѣMLU ZEwkЩ h:)Ӈ߅ɣ$͜S< y뉴OV[W
+[Ti"iM QJ%(ѣkvydv6Yc%TN~KM? 0OG_ _>2o,6nc)g瘈BMwC>u-R%7Ȍl|e\? ;wwWg(}~VOoQ~FmD{΀Mi}L<$yY/PePdM>#H<?RbɼҐ1Z
+{5<|{F<v;+DMa at5Ng I8CoZlhj#//;q:^븄ljDF+B"Ǯ3o4:u~Ѐ)4XuąwR8Ѳ y
+4#K}(qkx*)'@P}p4+)
+Hf"aU^٦T&&޲?֥`HLBL~+qwmHN.I
+| ??`+g 6%mI@fCC r3)qREtAendstream
endobj
-4893 0 obj <<
+5207 0 obj <<
/Type /Page
-/Contents 4894 0 R
-/Resources 4892 0 R
+/Contents 5208 0 R
+/Resources 5206 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4873 0 R
+/Parent 5210 0 R
>> endobj
-4891 0 obj <<
+5200 0 obj <<
/Type /XObject
/Subtype /Form
/FormType 1
@@ -17854,1933 +19330,2038 @@ xmIn1 EOPwu$Ig0ľ6V5 oʯsO #h8:5?
6\>RgbWj[
WϢ{6;F])/ԬMu;pk;̩dh<EAw𬱱NtD²](;厰rL T͡誋tw_ =]=uS"yl-kHsreOڳvg<7t,e;Э/IB&(󻉨Yٹ,kRԚ'^ m" ^hW9AVy©/f"Fy-Sng \dƥ}B$w1.&COVX9gE{< P)!ZşLު~'UXLcXsЖӒ~BLƹONZ_[.*]3Q!-endstream
endobj
-4895 0 obj <<
-/D [4893 0 R /XYZ 85.039 781.388 null]
->> endobj
-1126 0 obj <<
-/D [4893 0 R /XYZ 85.039 761.463 null]
->> endobj
-4896 0 obj <<
-/D [4893 0 R /XYZ 85.039 736.911 null]
->> endobj
-1130 0 obj <<
-/D [4893 0 R /XYZ 85.039 708.765 null]
->> endobj
-4897 0 obj <<
-/D [4893 0 R /XYZ 85.039 686.905 null]
+5209 0 obj <<
+/D [5207 0 R /XYZ 85.039 781.388 null]
>> endobj
-4892 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F56 2890 0 R /F35 2880 0 R /F66 3242 0 R >>
-/XObject << /Im5 4891 0 R >>
+5206 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F58 3365 0 R >>
+/XObject << /Im10 5200 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4900 0 obj <<
-/Length 4261
-/Filter /FlateDecode
->>
-stream
-xڭ[mo6_@WDޡ@sAsѦE{HA^ɻBFZI;R$E +gt~f|;S,<U?oϮ^'y\4|׋W?_^4ͼ?x{xo_"~s{
-7|O8vignV%ix:/ϔ|wڏ#-۳Ux,:v~?V~EvAa =eyCcmT%;=l+n\t5Lȑ
-[b?=Z`R+78&OR(wȷ=?}?-ϱc'4Z*~5#Fw+e'+JG ty\5D& nxfm <WK=ykt%n x"i%0ƑWKlh'~8t}I膺`+K7,BGqo27OSzzܫqHʞxO1F9a }hysǰꁟŮBVu--<^ "Of/H s6&rց+
-rٕŷ> 4Z30&Zޡo Q}"y8<{tdmHW[)&
-~a;52$KY,jν+l{<.<kamQ=Y?X|QvY(+DאJ#Ulx$wGPc~}p[cWtrrvwxyv-RF p-KMVLcO#ӾFYOHh|GWCk-zbtK̊<<ϦqWsh=?oYϏL^;t'Jbvg
-3?$T &*D:@&Zo%s_|e վ#GKb$:Ui9qϏ5X<z*6*xOfAbB,2tE&xc``dIl~L\Ȟ lG'cFAqHzo
-{9Bdy(j@A"D+tʰ
- #6Ǔύ(`-
-c>">fz УQh9ډ.u}o[-9=[VO 4f'KD%۷[I#GL
-%ZMK03wj@=nd άmk m #2"eN5 w<`G0rW@?;z SJEC-49;{¼-(lN.8Xpk$zˏw*w8H y4/GDn89DӐ'1P ш(N`]nowr[6 KϨ$JX܍uY[ƒ=̊D:FxM:Lơqm%ڭX1\N!phK1_rֹr\>аa$XtDF
-9EԔQ9Zs0#CR@O#3K+o?c|aJ(PWNcBŃhR
-$g9,G6$ TI(8rV=w}BBĝ2U%ZO4E_7m%=*ps]vdUm*U ә` z)Aƅ8#ePI62RI$
-C"m[r7.>2{rg*r<EjIPldcDˡSi+T\ێh"Za1w8B#6Lr!&J2>8T Rmo+hmmTBLդʧ CS &>X)~!s%_nz(^\b72{b^vW~\&6Uj :vaDr0TsA ~JJĄަ'+顎 jC?G3I]&*α<O1[0GiJ)n`'\s O( 2CR\
-H{r۬!)$C(RI*A RY=+ nq[jSlOPZrLI ׎ 05A \06k0O&+Ttڭs`D靋f kաDG"l=-zOKc=Iզc4R21 /7,wdEZd@"`/R>SɴΒQN{ʳ3;L (O84b"Lm uu#ƩZWyҵmMs女{Q4 d : :W,=_66)vz`
->X4CEX1"1ל[?Sݷh43)R̲"yvsz'Q|8A?OUf|Er4ZiSU|YL!sℏG5.`RGX yJ)'gR]Agx$t{&`
-^
-q:Bԁ{
-<,OH:keˢ 3'o"E91U?ؙ6>P3H9;D4N /ܼطw,!\^y s:`@ c]RG;
-Yo6=^xIC "5߷3NFU9DXd
+5213 0 obj <<
+/Length 3943
+/Filter /FlateDecode
+>>
+stream
+xڥk}1X4_G
+彺pw3â{37 m6žšaS
+:=4f
+l;|'9Ab+0f_65l<3Cr= @?3 3 %u~󣬔ZV] jysZ ad&hg뼥ѩ?VI/7 ܋> U:~9V 0[OF<I=?Swօԑl(g_t3#φ Tzd-&yrp:;˄
+?üGk
+L/jZ 8u=QɌU l9> 5 R>qNIT^fɲc<9idoɞ57Hmpd{}КlJ &1#sC/s}Ftr8! eK {.\<Nk6m6YD!f.KU`,,Y}IGb7>L R@,з#䜢؍xR?clPfP)
+7W6Eq8qvZ[Kj((^vT@&&^eKK>Eybf.mf](Ao[hcCᛥ*\bw\x{/b<dU
+ex\Gp2$]'6y]I';L2w: \3,U 8Ț Y5n>[eqt3fAoCzb#:11 Zpy׉[$ei/'Cի0K^9܎s~Cd͖N4,B-I:\qli! d}-%Qd [GURIN09Hb痚
+,
+C
+S ɬyca'1)D@KGp}% bu {B2cW1Yxqy %~1
+ {UhHr^~w_`¹4%tǪBc|›h%c77̒)V9ؚoQThLL8fQ0鮓0u>p[gcy<}!s}n)xeH[PFByGdiʮtEISNsPyH<c wU:՚BZ5ܠ $'[|[PMRcJv
+QxjTծ5P9vxK%ԁVz@>W{8i|!!y~{^$+Bx:IH"XP
+@0hr⚓6T2?Pq@+O
+E*]p.+A:QkV׭FB8a]GKR߸D:J=#/{ -=LtPJPȅ^/ѳg''S7q\%{[ YXԞbN8/0߬<gO|wq! |Q'Qn}zn⛾¹k5q+*k"vpż2:-j4ΌI^RȦg
+ ag.`CX8-}fUpb|*3.h!ۚ5(^gl;zM$_<tsf|Zcg4Mbn22{V<\K4 ̭98 M| 70I5.tv6ϕ&
+p8mHƎ\WI1dez54w)#.!Z-* <$ gXJ@.)褬J
+g:k]d[(J+H#wW ]ϿݎƸaȭ2Rh 1b+RK2 u`'vnU,?(ҕ@HEsg>f6FW#kZ+tJ
+S8pN
endobj
-4899 0 obj <<
+5212 0 obj <<
/Type /Page
-/Contents 4900 0 R
-/Resources 4898 0 R
+/Contents 5213 0 R
+/Resources 5211 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4873 0 R
+/Parent 5210 0 R
>> endobj
-4901 0 obj <<
-/D [4899 0 R /XYZ 85.039 781.388 null]
+5214 0 obj <<
+/D [5212 0 R /XYZ 85.039 781.388 null]
>> endobj
-1134 0 obj <<
-/D [4899 0 R /XYZ 85.039 516.331 null]
+1174 0 obj <<
+/D [5212 0 R /XYZ 85.039 761.463 null]
>> endobj
-4902 0 obj <<
-/D [4899 0 R /XYZ 85.039 494.47 null]
+5215 0 obj <<
+/D [5212 0 R /XYZ 85.039 740.47 null]
>> endobj
-4898 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F66 3242 0 R /F56 2890 0 R >>
+5211 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4905 0 obj <<
-/Length 4097
-/Filter /FlateDecode
->>
-stream
-x[[6~_1h K`LѦf" [c %G﹑lM&twR\sHLAYYv؜+,Dcw7gOHyyQO_|U^Wiy/~y2^_x V)|~*_?^ .ػ|{7| ,<;C><?ߜ)Z]>9镊C?UYh_iR#
-ffKR&w7=!g$r& df˫(7iHC 2ʼÆڎ3ԕت}3NحqP
-v'`IUSrdWu}V*Țc()T5f;-&h.&L?ܬlЪsSX@D*ruw( LD޿u1&a3l,4ʽ˒Ŋ[O Mi.bY-;p6Ȃ{nΌ
-hD5iXdtȕKnbybs 'z[HA3^#BH .ƴ_8Ǿd<SrunPUM[׈9VrͶ.*5--۝4ZVal+T}ܞf+3cwRzΕ|)G'"IٙT3P2/T{IAE»+0> F8/璄hex[n鮦m=4kS%u_L4EN@O-j0|E
-Fg5̢~% :\cye3{گnemajKǵ.d#`>AMdž*~ -e&63i4fɔLiXLQ0-d"֑pir)Je<o5L찋 CL 
-Bzs?M&'a;$r}@*^tsiL2z|,iB q@ijӪY Tpr*+cmmsէkaR2z+@$'\4x mXNNhbcoUCYSd BBY2Luczkw˕e0D&Y|72>6BOe+owL%²UmGXM{uښd-㪮65SʻxI%}VZuܱm1 ΐ*3AylW($S|wQ(=7
-x4or?ÇMh3ekF4EWT3N|B'P5'J(E ,J&4ڸX4*_{ވR~9ϝV2vb?Wz1O/juRO
-lPWш6v}( A/>gĠɔvPp`^\^^C.**'r=CXιU6 ^qjK#mo8p/٥kϋ2 T{tbp\婟EZ@Rf@1߁kj1=_,DS@+_ƈ211'1ް85`)ƌb
-qhO(~(<1_Ki_ln㥄q3LrIZ)#I<g@9FOA g`0푖<x?I©;dhXqCP亷"䭅(B)v:o?kcȒخږwǩw=pEj1N]Gk[4(Q8qFYR~1gv5*Ů
-BM
-++ṾC* j 6(z?Qٗ)/ hWDbQ6ϫ01ge^FnÐx GQP1 8p<{h'AK Ԋ8y㶶j)Al~N|Y"iDS H3M( Afe]qQs8
-#f,<L,?}5im?L$8 iWԁ$pr{M}KJF
-FQ';y
-hz/JC4h!>k^I?@W8+΄`ƒόT8 )nLP[GR]nkN0 FlFrJ2ڔi؈`^
- A3G|:OU/OFVeX21%a׉;s6uuB? NJHAX7N4ӆpQZ?Qcg.g~(M}V{qWTpB˺%}U-WX'ڲ/q 9{;kh>^
-TEa|Ԯ%{.H+ayԀ1 at\1"־58*vA80U_>zΑY`SkzO :Q<FԎZucfyhf`RUɥ+d/8<Lsz+3Zx:$68RsMNc :B W2uLы~o/RBhrɢ%G폡YI
->Nd58vS{
-NLXAU_K#ӧj%pp蝧Y3|Yvm(7Fh]zvz򒒮4{\2n*f` Gv ivr <osi 2o:`؋nt8
-4H#%r1 Ά@Ղq'vCQ\/5&5b };w阜>D;3ݐ f@9F[pq^ ]sb+‹?;34,Njr4`6
-q.sY3 *_>37pi g'~7#,>endstream
+5218 0 obj <<
+/Length 3515
+/Filter /FlateDecode
+>>
+stream
+xڭZKs6W(n堸]7J5/ 9#IF1::dI|Up=RBCZ~d##s}c<7$I7?ݾQ7?aW轃_lw/L4xgIwǫ A ezx&K=t@(?
+|WW>GSبttYM jЫ,\5E! 4L
+_@q}8B5 Gg6*4'oL%\iE;S؏uiy]Sk茧CueSQ¶44;.D51}G+PQ,A}ǛN"o;n,Cg >2y b'\;[{x HA=,ɁU½ن5$hR6 Fdn-T|*`qö* ځIm b}=SfɢYo3g4rz=}.knZ^Z93.T``{{s˫|4%,lvƢc[O:KI b/60WIV-))Ea?E5,9YSi5lBE6MP[V_i+Q\v=PN545P!
+r'w&Qޟ@q@ȍ5"bU&>+_'̩h\hQz8ϸl؝p%DyDg%AwlMiz~-vm1`? )hS) ٿضbVns_
+/0^vbzB}y{^d跓Y4L^˳nR5Ff.*a'iFqYrgơacipms8`^SUk[hb z*KсUm{:R`v[t|-&T_^Yfrt u:Y͠d
+J#L^^VA rti֣ЬX0Ŋ|wv#ǧS/ҽ5N.
+giM \e73Ȧ8#:H\hYMZQbtRm착hMqRCv8
+tMRg_MdGd0VTEWazwxs!;qeʶ``3Hj'& 3E([#sZ`yvϭW)gĢؔ)
+Čme]oIq֧{hdv`ԯAC-s"G?,DnxC-y%IΣ$X1]ff.`:t#?1+7$O܉K{?0|:{Rv<tӴJePZ5`j/of݀\o6V~fŲ4 *c?
+D060qhhy rT;= 6V(? /q YW# yJuP`q.cIJE@sUoq.ϡY՟!tb R'D@F6q q!쒨f!_C(R=uCp 3DE-;;J㠢Iմ-d`mk+6h,m*&zH:JxNE;tZ"y<'%
+;SNEFD(5
+ZJb?͢bYB3;6՗I?r/3IR*!(n7mq`Q2-|Af!ҴpeR?)4$؞w=h:r4 &vDa:NӍֱ4nq]v̔
+L`Kڻ{-.M$%k'X(2ۢ܈sIj{֑rСY<KC%8Y
+`h=A iqBc16, wOx1P( bhxU(}n؁8ʶ!['J/9 $W2wƒo[ CmK]Ny ) WS'y שPYygj(--٬079Z7ӑ^cir[ܬ̌{4myhhTpX,>UFF/"4
+,z/|_R[~+Q02A0@N
endobj
-4904 0 obj <<
+5217 0 obj <<
/Type /Page
-/Contents 4905 0 R
-/Resources 4903 0 R
+/Contents 5218 0 R
+/Resources 5216 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4909 0 R
+/Parent 5210 0 R
>> endobj
-4906 0 obj <<
-/D [4904 0 R /XYZ 85.039 781.388 null]
+5219 0 obj <<
+/D [5217 0 R /XYZ 85.039 781.388 null]
>> endobj
-1138 0 obj <<
-/D [4904 0 R /XYZ 85.039 556.978 null]
+1178 0 obj <<
+/D [5217 0 R /XYZ 85.039 761.463 null]
>> endobj
-4907 0 obj <<
-/D [4904 0 R /XYZ 85.039 535.117 null]
+5220 0 obj <<
+/D [5217 0 R /XYZ 85.039 740.47 null]
>> endobj
-1142 0 obj <<
-/D [4904 0 R /XYZ 85.039 165.452 null]
+1182 0 obj <<
+/D [5217 0 R /XYZ 85.039 235.312 null]
>> endobj
-4908 0 obj <<
-/D [4904 0 R /XYZ 85.039 146.58 null]
+5221 0 obj <<
+/D [5217 0 R /XYZ 85.039 202.891 null]
>> endobj
-4903 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R >>
+5216 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4912 0 obj <<
-/Length 3638
+5224 0 obj <<
+/Length 3940
/Filter /FlateDecode
>>
stream
-xko8{~/@q2P$Q]lm;Vl5'@~K4e+I EP &Cr8 #8صUg4\pF6}}zB:v$sB9fz}tr/Rrc{<z۱k=~u6 T9t<q㟾g|ywr3ce8}sAķP! ~̀7xcI2Z_I8x{O=
-#5҉AA9vzn0Y
-גUjV3xfm+
-j9ÇZ@9u#]uk3.r?0k-TjD\Y6жPΤDҀ..
-58*#f<cD[/˭,pٙ
-T',n,IH(n*+Yh,12djk[.My0\}0>
-V9 lLӶyFh5(5y9VqZ/ӱBTh7Wz4ʀoiTߺ^VrcX)JAVA3y@0V/;,/*X/QqY )I;TۚZތuE3W<kD y)Du&t)XJO<FVaķrDTC7Bډ+T9E>͛dU&imeؖE"zuZ-KSuESbrQFQCgQ!eKy0v(mp̴-Hr9@Vlah|5g0}VkU7,
- zf4ǪI~wb9A5Ϙ-K>[ (RNyWVZt}P aK8Ү.~oFzϵ#t1 |*GyvuHCh!Hl(Y|4f`H~I?9YZPt4I8A =6#'suX![BMp}dzH}ǵߗg :Fڴ [Mp S~-csCפqB(,! eM$4-R>*L'>^k cZloϙK 7`v5nxl\`d vBpP @/N^Ƽf&'Rw$MmBp'+tY/R35b8 >l79#V1]߅S?
-H h`v? hF Ťg|b%zQ*Dؾ %G:Q}]_,̶WOCH3KD O^U~lk}N. cX;dTTIAWwj 4-fU@Ha_R
-aZ$Dl#`HRO;[SkG0x@ey
- z:z _Z IEK^ϷgݜuƏ4-cLm(뀯.BI(oBMʉ)2+)i!QL1ۡ>i[:Y
-'pV噫'P9{l>ض{QIOIX9ij'
-)ҩՅV#HEpt:g7dVtnr;>Z4\*kPb wAP-s~Egź?$2
-'Iɮ
+x\YoF~ׯ5`,l sXFm$oH@Pma#Yc3!}UU*Il̗'z~8 숙2_h"UV.u:SJyYΧw~ُzgpY1~Q']4l5yz{_d<J}@:T89?w5Z߃@Cڃ4z 2m@t*ch%CW8vzmo2Xe4raq(^&^Yq[/f~YŭW0\/{'ٻ$>u75Zy.& G~R8n줻;%?r Y O|  uXp-Q^!$-`F!uY7x2-&
+L*v:[V$@$9Q >fvȈ=O˕D0HqDnqES8 F#|P>KOUݜh"!M%E=r<&]]QWt -d t3Pq) қ+X3*$A>Ķwa;R.:vTHVYrI+V.:'Dg C߻peH@Gr1+"4mJ״)N"װ9 :h)v=jaH{v#x 9=o\I'V/P"TnsV
+w H!}e`zCؘ힅@
+ȣ+%0/[UE͐QA`H%Ӊxܭwǃ?w8x](<O-[q|l}으ξ] +m(3VUp]~.x ݗo qg=O1HA% ?$xP~4<[ph2|eGW%@_!Bmɞk!pU"S4H|7
+ +knȝct^a3Aڻ(#_*q
+"4Iʅq{6"]MɀXϞntO8Cqa:38̀fgցup'7B9I 0{HN1bhYH))[G^!5naDf[sa֡5̎r!Ȣ]6FtW}FوG+87WF 'F@1@*PrhAj I0qFpX^%9v
+¸߆N@Yଏ
+&=
+4,ֆK`X젉wj is`$H7͍4@1 T=v!yܱnYaC!cg=mZjc`;?;vƐ4D"xŧiFF@QuԪ'jn#[H" oEםO/f],nx.O ( \^
+H|C@w٤s"qz>/yA Ch4u$PA"Bcz|,5i/d͖1}Tz)_ #89{:c;<t-H͌=mx~| 6!^ L }d^v:=LdAϱYs<uxG93J›sԂcǂl6ZIHvڰm?x#z/%$U7F!Wm˴);g}OJh^1b<f}w?o¯}ϾɋNJ:^H3oۍ-`?eivܶ1ƴY&a~vvp5LrO^/+L#LIͰztZU>fkOJ/-_d)ORkf6v<oT}LZzueJo8z*߻23둗nuJ3,vLwK6PNX)lq"J|%+*۫?Hm@\c^COOFvUr*Rl5ٸTE,ЏXy$N";XD%4A~"_H 5a)GՂݺL11+6vs_aI1;. 7g 5Zejt(3\v aL&'܆jB2;C(ٴM%&Wْ֩/l>gݽ6@ j]f8PB('^jn)-Pт$
+?+fUBhBaZM*@9Ϣuk!ذaG#btB0@uC˃[fmBK= C0>X*] NE/[npobaw3Ψfj#6 HSʊȄoATr9*; Z.r$gͷwSR7|Ga%HbKtY" HB{ S* ƆY-xbwMq#&śʆBz>I\N=SIGY[#:MJ
+8F
+dHtM &ئ'ؔ9I-25
+l13z;14 W6zLN R8.Wwmڳ{SBFf<6hW
endobj
-4911 0 obj <<
+5223 0 obj <<
/Type /Page
-/Contents 4912 0 R
-/Resources 4910 0 R
+/Contents 5224 0 R
+/Resources 5222 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4909 0 R
+/Parent 5210 0 R
>> endobj
-4913 0 obj <<
-/D [4911 0 R /XYZ 85.039 781.388 null]
+5225 0 obj <<
+/D [5223 0 R /XYZ 85.039 781.388 null]
>> endobj
-1146 0 obj <<
-/D [4911 0 R /XYZ 85.039 678.921 null]
+1186 0 obj <<
+/D [5223 0 R /XYZ 85.039 719.568 null]
>> endobj
-4914 0 obj <<
-/D [4911 0 R /XYZ 85.039 657.724 null]
+5226 0 obj <<
+/D [5223 0 R /XYZ 85.039 684.823 null]
>> endobj
-4915 0 obj <<
-/D [4911 0 R /XYZ 85.039 545.939 null]
+5227 0 obj <<
+/D [5223 0 R /XYZ 85.039 564.071 null]
>> endobj
-4910 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R /F56 2890 0 R /F35 2880 0 R >>
+5222 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4918 0 obj <<
-/Length 3622
-/Filter /FlateDecode
->>
-stream
-xk6
-_pAd V^-@E/
-ܗ+M
-FP~&8gߤj~m~80,˽?]7?n*}8cnVWi4v`2
-O(+~bWWZ𬙓TQ8\#̑WUЩc'6~ -KD G=U7Q5 >2ʽGU z5!k:
-ZݖP5@Nyqȗv6ܹ)[P`FȏOӝf7VUP(9hXG/xkn?(1xQUPnDxph<r="
-IgrGgFJX; xHuM!<Hc$<FC(kl1$mK O30vŞTz \I
-U'y4am\$VWb/{(ȶj7Ds
-`$j&3:KAf;f:ū<)]> D^ՌRƱ#Ȝ}S]&؈ӻ9A8Y#2#4جqO{'R 6T<hyle
-cOZVIGr1l &~'cBBJ3^ȰFFA ;?QXQt ىgb8$aE5:OUQB^a*xE ȺLj轠m]\xQ^k֔8OGX$炡$.RhCb?0rI<#aeFb
-2ܿbڛ{@ޙQ*"CBMa~
-n("qeXH8x70 hVjcHz;,cEpe&*H)ɂFu1DN MI`c
-CZpW꒫ }]W63)h;evh"DFTX}F-Sc|ɄUE7o:%0茩.SR.5l%E$'2LrݓGk8+MXMIDL׭IO(q|׋u,k-&d+ My?b><: 2Ëɝ)'R IhsyԆ]\b[/񥪃\ȤlՕM"'ck˪ڌVNJsЦ(U0p64LCGsA2*n6e5kZF6)ԍ;-㞔5aE2{0]ͳM;J$\e )§B%"LFQ‘MWjCqZ.W 5qTFÄ|ijڻEza ;% %-&)N㔣&Йր]M Qٵ3c^Iy߽ nizk)(N"Da
-|aN+]̞~'JVkN 1S3)yf<4U=0g,iHp#Ex622Rߙ X2}gxY-i
-ɐy#kW\ITes R"| 0Ho 
-XD w-1&46S;%
-t4#?ٲ;8rKtKfa j֌endstream
+5230 0 obj <<
+/Length 3353
+/Filter /FlateDecode
+>>
+stream
+xڥkoF/8$W pj!͇Dl)R%8.81;3;;Ux2O@Y*/7fZ@aAq$~WoVJya,^vz7_S?ݼYCw 0?}/[[ޯfmٲyr p/!L.)?ۋ[T<_%(9/4TY1E0EbJ? bH&a)(Iy
+xjh+4zz _yz,O1)!FBSsHS2w۷z;XQ ե |i&w$>hA@3`RkĉDmt]3 ~KmCz6hpϲe9 <ڜ%lTx?'XLϮƥLVUIDQ~|~ uh"ƊDžGE0L
+Ɓ}Jc(w"8`J7CWqwsz`Xmt yGڢ7vKuA C*VzLgvh
+
+kTOi p|U, R94,hYs_[bI$e!G60}K2X)'dMJ0(ЁR@0̼DÎHlasz~
+5vFq% Q}]
+ ū aWfk %7q YO4-8Oϋt9#RHE:,RBnY7
+׉6] Ad1ϳ"aΈL>)3G(.̡x .Q1%AaD(F i }Ʋ\T]?%0|ǁ9#L09,LTh%cQVBnqVB$.`,ӱ'$-{#N Fكq`N#hfNq`\W<Ӥ(T`ݸyBԍk 'xF($J~ۋ)NZڝxPJHkY]\m]7$-rqR袕^TrJy(,KzBX!WpR*;cDNMr5("D` tʩ&V?nRKb ame7E`~G)TpqXjvk\{ϊghg>y[k)%>8
+GEnq7FD7L{aŨ/Qv*3(=<T|BV%8#ko0Y8VR$N)Jd`!1@%16Hb>O`=`G!V%9PnM N5*bRbq .<]X]jԤy$"%YuWԴ!`U:F#.3[ )2ҳ)r}v֜!W5:4K+^C%FisvɞԔ*YBo yE^<)TZ*dyZ?c+7(HĹ0á1z9?. VV<skbd8DwqːżAꑪ.ڶU+z/fLawڱr*U&(Rҗ7?d 9wǣEދF
+mN}~bi|hhXdfP1+kEz`q\l8zۍv4x:10Ec#j!&U"`|dB fA Fݭ}(`$%d;n|y << %a,4?+xQlcZ*y#uN8JgXɂbJ:x~ 6rx>&>/h\{Ri]EQTnOAVX5jLτqF9OQٛ
+ު2WͦF>khƧPK $BLrŶx7?&KF,>b?NS.Hna[UFe}n奖Y~ ,ф 
+7l)#ltPB:y S>0f|>~k-Ù{+t4~0(LHI룵ҽdDo1`rY34ۇB0*?|8G@ nk @JU`h
endobj
-4917 0 obj <<
+5229 0 obj <<
/Type /Page
-/Contents 4918 0 R
-/Resources 4916 0 R
+/Contents 5230 0 R
+/Resources 5228 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4909 0 R
+/Parent 5210 0 R
>> endobj
-4919 0 obj <<
-/D [4917 0 R /XYZ 85.039 781.388 null]
+5231 0 obj <<
+/D [5229 0 R /XYZ 85.039 781.388 null]
>> endobj
-1150 0 obj <<
-/D [4917 0 R /XYZ 85.039 706.019 null]
+1190 0 obj <<
+/D [5229 0 R /XYZ 85.039 761.463 null]
>> endobj
-4920 0 obj <<
-/D [4917 0 R /XYZ 85.039 684.823 null]
+5232 0 obj <<
+/D [5229 0 R /XYZ 85.039 741.134 null]
>> endobj
-4916 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R /F14 2895 0 R /F35 2880 0 R >>
+5228 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R /F38 3001 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4923 0 obj <<
-/Length 3955
-/Filter /FlateDecode
->>
-stream
-xZ[o6~ϯvQyQ+Hݦ(̴M1,AX[Yr%9_F]l:}؇-ICIz*UIr]x0/3KzQCWEK/4eٹz|q6WJ9~q87ofsw{sǏܾ㜟86KrD\:RH?]n/<W=O݅j%?UxL_[uA I#ze%Ϛlcw78 #.Sgh~6bnVз)TWmsn8-ﺢ23 ^FX&f>kA;bIȹod JtY璔ϼR,N܅H{K\}ƌ
-8^Ӣ{ D1[:UYvjUTW/VnNJy(mB63MEv"EK綪Ǭ+
-EN"b;H+ EιYb7Nh |7du kP=Єi RX0+$6V#~u4Z,YFaJt{SO˺,rC:!krv5*g*W0ieHv wY3' ȗ{<mywm2ib"r=Ii#e G/Lp؏'[Фȩ|EᎧm^qk/nqD-@蠡z r8ee`
-X8TM'ȬrDZD$uO7 "E٨3a±D5UEK]Ěs(<meFۗ9!L#jZfQ]9nH}w7ma*jz8[˚o#Cڃh`G46h ?,d!klk!7pG*81G|D\@*h& L6*)ᾧ46-DY
-l55Q}Oαヨ NS҂xVe8 .9Q5vE~mC*XlPAs5Xʟ|]|@n 3h(L塇%K Jc7`yU!8!8xաx(5m8AÆqUu6 Xc49 o =qЗWir*<(Qf!N}ASzʄ.h9
-{ =c!IHqb!{iu1.= Ĺ!va@MB[MŞJ]<-x'@/=3a\WC 1|,G:)(ri`ypy*q2:mScVkQ#_P6UȈrY;LT5(OwQ;CYR}k4ɉMvqAisQZKNMw۬,
-!AF9Cxo&:"
-+}V9.1~fMSY*Z*sX0W2Mj.VKE#XtaU˭lK4N^=*xHq4+D@!_#MN!#
-5RwͿ#{^lEhrsc ϑ]tbK(V}y7 d=_Z򴱗sCL@s2,#2aeh &Yw5xꈏO[|G4 Wi,߇p`젪mIX@7T%-aƟ E5vo%(:s%
-'qǷy\>ٗtI+`Eb8$$-G`hf
-΂(vTqKF(|rrH7$ Pq)qIQ3lK-Rȿ v3QXVMMPBJZWk+$*ٴxP@l)C]J{΃/%z򂧏nttϭ\<Ru\_bO|Sli >@"oK]
- ]K苆׋O'G\a}TJJ~σ\o
-[2\x<_r};\^Qq
-7:<_$)zHB 6LٕmqG< \K;E^[d)N;7lV/
-]_˟ޕ̵wsXt'IkQ
-I8kM}Ϧg
-D)ET5[uJXdൿrjv23p'qI3_>e@گV![^AoЙd :J rW`fY!)F,ְ!F3X5 OysV$/J誉H%<mPCLn@ˑ !Ij nb8N'{BQ޽ADSn=H_BP8N 5g,
-%fP+3 /Bʚ-,r4eL)0f. )ޱgQ$J]_d5bz?NGw7_ endstream
+5235 0 obj <<
+/Length 3530
+/Filter /FlateDecode
+>>
+stream
+xڥks6.37n"tn'sIt:hJBRv}(M&&X
+ F,B
+R,-4TGi7n
+LO
+,ihzxaԹ@|Qi@xkL' <kpF<Ո+ƞ!n31t{w7B0P)<x]a}:e#
+Bg#pY4]5-V!L i6"9}*VB?f(gn xt.7{Oq0̂4u:9@GB|:>OMfmhpv\koJg2$`_㛊.=nH!h]eP?>)~!!e, /sKO);MﮰFx u}L13B? M^O)zU󚢜m<7I;;?%%aB;猔7̆8.%X 8=ca04 Mmr~q1j!_]P"gnRD2 j/]B SXC>,)ǁA0>y/س RvdD Ý8xD!7o98K枒v ᜑvAٰ9&zqjz T(t&B$HODLAGl
+@ma Mj:U2F7x@2H9b8\%=t=Jgt6Jww<R: V&O8>aE X6ly-d
+S+C:ZP*:_᜹NAuٰ΃ǯ#zV1P Ƭb{P+e]YALjA%XFT-PXMԇGe fcwxc
+wJX92)[=w2_}l6n:s/L!S{WEi@<pVfcOBd●cSȪ~n;z5ɀ v(J؇':(
+wȅcʋ, k0 H4Nƴ
+6!Mֲ[9@"S:]EX=@RWبR1wK]VcYN\VDʔpkr.jf8/:I
+X@JV/,.o:I0- T$\|R¸pL6<xpJ@6'_Xs ?M}hI- EPIزVXQeW^Y#o~GJL~rkICXVsS]-XRubȻ
+[ˬWo:g mC_PeJ=ǵ<#jGNol"
+].sk U`: sn7`}
+ྛ'
+c繞6K~Mc~wD
endobj
-4922 0 obj <<
+5234 0 obj <<
/Type /Page
-/Contents 4923 0 R
-/Resources 4921 0 R
+/Contents 5235 0 R
+/Resources 5233 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4909 0 R
-/Annots [ 4926 0 R 4927 0 R ]
+/Parent 5210 0 R
+/Annots [ 5238 0 R 5239 0 R ]
>> endobj
-4926 0 obj <<
+5238 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [297.182 492.39 447.569 505.291]
+/Rect [111.316 441.788 154.005 453.477]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://imprints.sourceforge.net/)>>
>> endobj
-4927 0 obj <<
+5239 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [343.406 465.291 494.306 478.193]
+/Rect [153.74 400.534 262.854 413.436]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://msdn.microsoft.com/)>>
>> endobj
-4924 0 obj <<
-/D [4922 0 R /XYZ 85.039 781.388 null]
+5236 0 obj <<
+/D [5234 0 R /XYZ 85.039 781.388 null]
>> endobj
-1154 0 obj <<
-/D [4922 0 R /XYZ 85.039 676.879 null]
+1194 0 obj <<
+/D [5234 0 R /XYZ 85.039 675.821 null]
>> endobj
-4925 0 obj <<
-/D [4922 0 R /XYZ 85.039 645.354 null]
+5237 0 obj <<
+/D [5234 0 R /XYZ 85.039 634.793 null]
>> endobj
-1158 0 obj <<
-/D [4922 0 R /XYZ 85.039 231.247 null]
+1198 0 obj <<
+/D [5234 0 R /XYZ 85.039 139.391 null]
>> endobj
-4928 0 obj <<
-/D [4922 0 R /XYZ 85.039 212.981 null]
+5240 0 obj <<
+/D [5234 0 R /XYZ 85.039 107.576 null]
>> endobj
-4921 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F66 3242 0 R /F14 2895 0 R >>
+5233 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4931 0 obj <<
-/Length 3613
-/Filter /FlateDecode
->>
-stream
-xZm ~ba8-@K8pk\pAީ]m$흯Cr%-hC 9!g݅C" mOq~,6 gqG#^J,ۉB `:vꤋ-^_~r&rljuҵn\~߼]\ͻo4ﯯe[O_|s;X*~Y/O#M"}; |}]\"cBfH
-bj$A'Έ\X&# 8U8.Cת-wB=bR+-i#PX95a%VQpyXzV$F?
-!VTK/k_ahe( 톋TiydAދevi
-|P +rHl$3-7}:8NoRsV ԉL1yΙi}lL|j|`5d0c$czf1W|~ky*mkd`+ SzOI!R2F:r6pK%~ĪI.uٽl\JW?|f}o_\O\^IQG1 ITfOTG:<m3Zǐjglh׏7f@h2vNI8dsNYzT7ַ\]kc9uFwcF]Q?4M؈>UN;rڞ `=ߣ0V6\踑^:K
-٥,I;3Ȁ>5 %ODc ٓ0QB7W4ʦ$t 4]1ԧHg! @" \֩ mYza@;O2Ɛalf`ì &tgʚ y t4Sa/ F6cƒ@HC)L iܟKϰ+68 F󷡶㑱[UPAPgd+7ΰ9d9;jo;5JԋgzF[0
->kuy35 'Ɯ(y}֞u}TQnVK=k WqCW?Ce-(Kz
-IhPxh&GL0;yLXwр`
-|s+BZ]ÞIVDpCxq=sޡєG6}ȣݲ F1RI߱Yq5g4tSl8Kd1\gjV]E[`(No%si2vDHF3#҇]Iа>W1 ,Ռ|Z AM I,/=*ue#7vlO,/U:A]3+ƳS!R? .7e{ 834焵TZu~b|N ~[xY]=adp%N }GW?%XY[(q"F8 %< t<gg?Wp'74PAL=47OTG} "KY8 "K+<=gEDx_JIFHX1˼ϋZ 1?zTCP|,[ɸ}Fc44@ܔ# SEs$P p=|2Y"*v[LJX)j33t:APlr
-c{D-pcEjd; jf\bqj:]X%xg@LU;)aZ?3H~1D seǧ )u.7~)usJXyv
-n K5H=DXh<VN%;$`C~0^$f ג*cmM/|ddwʐ3:ЊkSlql{fL<Eg]cጳt'Kigx",Ɛ ?91Zijn!u/LK8\A ʟ3DU=cs-nQTh(HfWC.FB ø+CMMfQ4}Hzg\؇o;lžNH^l{(,ǵ4YІ+@J-1@cجIgin@ y?=p:(r%I%RC h;C ġyکԏA"7ĺ@\ W?# N:0Fߓu+E81yRNU*!{ICOOI!%Pak2B`b:7:fe| =;8qڙDH>R
-!,DV@$Woqʀ<LƐ?0xI8KADr e*4pZE%7b֕qSRKBQR|xձ? 0lARbKy=MSS:z!_td~$Ǽl}d<iw@ְ&5ìEM;[\re?/&딫V
-QPx×/Lo?@k~+HLwu
-Kuџ({
-6.h4XѬ+i)ɘ&]E#ջr`IiD*m5&bxZ]EuW,)Lhz3y|V%\#'ؗٮ p\piOe%g2deB+64PyN_ hzc%M00f67;Wz\` Y"6M) ¹{
-j#J(6 X3֧*s팠g ^OPbfx蓩C ]m#Ĵ|&OVUL WrAnh(P=MOuҵ7VO)DUyӠi8.MュUM
-\p8awǷ{kUG0KzNX:D4y^:\(^{ 8|uEj\DZ̐HNǐ4Ÿ}<1zXQ3\]V4K/Sl/ꂯW "_Pp+QIP./NEsvaF +mćkz;Pqw; f¼?.[E&ۯP 7C{in6JYL'W:wGX̤s. έTǢnpuV\Y٢D_=fOd.<LR&vѦCkGi8$,vQUn4*f;Zendstream
+5243 0 obj <<
+/Length 3530
+/Filter /FlateDecode
+>>
+stream
+xڥko6QRԳMrm\׸n>+9uWH87/RԮ"9Cr83W+$T8r<?_o'tBP.<^5Iϵ
+ U_M$a&x_WƘ@"+-
+yww?1>vuwr\>^rڑ6
+Gu^U=$6ߜ?[a9ZbAb01tD=Ɠ5=,N˫;fAc`70*yV?แ׹6E [lU*J
+6<qF1J2J=n^EYpԌп[GAK-.p-pB1*oZ*4hF'}C=Y8
+ rvq۴Oޖv@ RaE
+B$V!`ՀHG^,ӭsX\LBq H1_aOzR(y$
+P17MlXy=nHI=b֕s#ЩH~)45 S}yɩy^F\ydmdUո)GWP=qD1+ EKCDG2KX$R:(쫕
+.ܿ3I*EhVy!$BF)qOJF.H:n[ÂeIQn76]|S/q۞
+)]պg1W2F7J䕆xwgw8es3.[Ήim>qqGbmc[uA
+ m|ľeuV-cz(^"V2 ,#YdYmP'dЭ" K34Piƨ. ,Wyֻ㢦+:|Mׂ16#oh^p<m]h kuEIFma3t--^_bs_.1і\:-IM{5ݹ1$-ޒYC쉚zʷӢa^4jV
+A!qW$.}.f %"g'b^]%S"׽T쎳j%Κ+&#wJi6!I$\3qt/o%SO.UD\UDGSikNqLqOW-&R:^Avӕ$Bq^yr1
+vKeRB+ } b!1ږKMmc2,ЏT]RXMuҐ r>l9ʥ{9WOu3Ҙ4^]OjIGVb8m!TpΕٖ1hۑЌ:ۻ71AtlS[Kfo }C+/@Y9\='uJ8jyE L@hhw4%1;1ĸ*#g83:Z)8V׺U'X]5y eJ\Mwmk:p7?=r@uX \@Z|&i{Fp| @$ʭ1=bkWQֻRT6<,Fg`(y9u8 "{4F'zD'( xn78Ɔ
+FV"ğ!g|@m5I~x, ,)C* R
+,wyktvT[}32=D {Fj7AɷHbo¢ĥz>AaXzi9Vɟ÷E<!'+#Z
+fRG$ŝo8rqMs5i<g-%nV;h#b_j :j`i
+jf;:CrR[Iܚ߯#B(+\/N/ϵ 7
+e!xZ\lNŵi\șەK iEqW(J.]Je``,6N)JL܏_a9m-r&) M%v}PʴY<침8sQZ -V`' *3?6an'$Y[ZQO
endobj
-4930 0 obj <<
+5242 0 obj <<
/Type /Page
-/Contents 4931 0 R
-/Resources 4929 0 R
+/Contents 5243 0 R
+/Resources 5241 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4909 0 R
+/Parent 5246 0 R
>> endobj
-4932 0 obj <<
-/D [4930 0 R /XYZ 85.039 781.388 null]
+5244 0 obj <<
+/D [5242 0 R /XYZ 85.039 781.388 null]
>> endobj
-1162 0 obj <<
-/D [4930 0 R /XYZ 85.039 551.001 null]
+1202 0 obj <<
+/D [5242 0 R /XYZ 85.039 374.861 null]
>> endobj
-4933 0 obj <<
-/D [4930 0 R /XYZ 85.039 529.14 null]
+5245 0 obj <<
+/D [5242 0 R /XYZ 85.039 339.451 null]
>> endobj
-1166 0 obj <<
-/D [4930 0 R /XYZ 85.039 286.527 null]
+5241 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R /F20 2965 0 R /F62 4052 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-4934 0 obj <<
-/D [4930 0 R /XYZ 85.039 262.545 null]
+5249 0 obj <<
+/Length 2661
+/Filter /FlateDecode
+>>
+stream
+xڭko0T4&;R=p-R$Z"B:w^ˇHZ$wggggfvgsgo;:k(vl+?]E?u؉gO|={X>r#{ܵo>~Ku_on ׺緻60|CV{ #O\|{tfk q4{c
+8X3v]V>!-CcP:kص$';Kt\%* jR>.!So;tBf0Q[Ɉ3/6|J 7ies@]2ma;]3B+YfSJZYyJHy@QndWFGrMP-/? 1hsh'F[_U Qc8U({2C^Մ꣩ZU#IBr]
+mb3'te*0}&_tg ) ~ca\#=W6L0Y f++r Ӎwv."T)!ڪk:>Z)b`;=s b e9Kc ex =9*XmA9Pw[Jj^f{%#OeFToqqNt'+ cd͖-'AUL. RЦ 5Z#Ue'2+ۋqơTУeEMg׋l!On48]im;)~ln kk{1;ԔMZЮcfFSBv:(SnC9)fL ybvp{&/q ^hzZ<,_Qra/s vne.DBZ(Vrzp/=66gJrl[293Ng`*lDs7-/]MVk]@ |eS(Yz;GJѮWB)xtFdj4D 4SʣꚳꚌԆkb51e5,8.{}/
+S$6E{@0$z}*3#-,xb9BІ:q*8e@Bpε!]lU}Py!5R%@r*)OqF'򭴨S|.-7I JWiE*
+4@\;q,7LӪ
+{6λ4[O4Ξ){*$0]d*g$Ȱ u<(Q,ԂbЎGHS9 Z"%`҅pD̸>[@ܰC */\վx'秖
+n+HnE/Q~],$y c)KQ<y1-Tk
+\)%Idx[9.wm χ^2C*~[UJK9&Dۧhj 9
+%TJ%o~ma; O@!:)04Yў tf AơD
+endobj
+5248 0 obj <<
+/Type /Page
+/Contents 5249 0 R
+/Resources 5247 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5246 0 R
>> endobj
-4929 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F14 2895 0 R /F20 2865 0 R /F56 2890 0 R /F35 2880 0 R >>
+5250 0 obj <<
+/D [5248 0 R /XYZ 85.039 781.388 null]
+>> endobj
+1206 0 obj <<
+/D [5248 0 R /XYZ 85.039 761.463 null]
+>> endobj
+5251 0 obj <<
+/D [5248 0 R /XYZ 85.039 740.47 null]
+>> endobj
+5252 0 obj <<
+/D [5248 0 R /XYZ 312.932 595.862 null]
+>> endobj
+5253 0 obj <<
+/D [5248 0 R /XYZ 85.039 337.294 null]
+>> endobj
+1210 0 obj <<
+/D [5248 0 R /XYZ 85.039 281.191 null]
+>> endobj
+5254 0 obj <<
+/D [5248 0 R /XYZ 85.039 245.781 null]
+>> endobj
+5247 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F77 4855 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4937 0 obj <<
-/Length 3178
+5257 0 obj <<
+/Length 3276
/Filter /FlateDecode
>>
stream
-xڥZmo8_a TjE(Z`EmR ۊ,捲d+ۢ&5RÙQY
-B J=s[
-l*AT,oT.>H* Gß_}nMx%&IY;pkb#bչVfR? ~34`|p?A+[nsnHwhwU #gW≩8b ѡ.;[Y~G^֭I;RFMQ~'^.bJgw9Nwho%"&=.8poAG3kTN;ō#}#rGdh9SG^?q,Ќк~﵁^6WgFWvCk8Ha s,i4H:inΝ׶[$9imϸхX2L@-A tp%~ 3hEFy NH-KmM4*{+`8ص;6=,zĐWF:9dd)D0!dNJLKΫֲ5ϣ;F$ $snH,DbG)
-RKaX%XCgΒ>(X&Dzw^mПR%\p߃U震 {VMlnD|R`cHb? h{7&iB&V\$~~(ĻQ]\kip =2/},-Z/ ?z=3lDbx[#.h@]{GxZ=
-挨y[JF9Z7͚Z6Pp/& 7J}mCA6GFi
-;2MWo
-n)f>VQH? HL|8I
-#l{eݝ?
-! k )>i:K"2J&Z DHOGgk%#ꭋ;q؁dQPqyMAU7\!Xc 3 ϐ)VR(z D}-'-j
-Ok6 1N1fLU
-p
-^o${2u-' N(r|`rM=E3bHף `cǷx4OX4*!ֹ=;g/;vWL~)vS'e8 cQ<ë\ᢙV(ȞQzC~P+XZ+e8gRl-[7Ѷw*H:,aAFj=$}N O$0
-{eyY!m\E)o444k:Pnl=&qCI 1*\͐a|B}qVtv|.0i{B^jZ
-ΪB TΓtidT]<BOx h|`{Pܒ?PADvȩgv%Tߍǚ}{xyDB|O!~"yK"
+xڥZox|?
+sy9HkR\-{}we.`pfụ,]/gia͖3o|X(bDod{n峛؍pvz7?a:~i9o~囋19o|;W =h~y'ͳй+ݐD!g?xÙy6{4=#8
+_]Ӳh&TfY4In=7"P@M}t$uڏ&ySOO't$6:МH#i$v?;gؐʫ~YW bVM(bŁwn 6Mѕt}]Kz
+-C/!s9,Ij塩!8ΈAϝ;"8f:S/~Eͦ%)q+fvdfwS7] }"|\tm@ޑVԕ:z8`e IYD\ U܂oX.4N;EѺ5a&'-XtLdA )j-(>bV7-%>][P2iᕡ*r~ut6Jv_'n$Ȉ0 `28A,^ic> #"7rB(CcBMr=$ٍ
+yn~y($68[tv$]J.N<JgI7zA8 _]t9hwT& t;̐-Ÿk:fUe c3l)&#t&0qP8ˇbA}2G $fq -nYބ8͋;>'tWx $1PN@$فimQ鸦SJ08^lo{BoKk
+GR6ҽ盯V$FO!|vkrc kcMjc̓0GuX5[JFq, }6tiѱC<1Y~ߦU<IzxS;[%ib{`b5|\ww2S6Ue1!&LHGƺWe?{> vE# X"ۺrJհay
+G<yv?zʇr2P u徫G+T$ݘkl8G7hIzFo`QyC*Zs'_,|ٞ l9JĪT<譐V+il &GWbc
+
+ӗ^&V<B9>m;o~95|4Jizz$[
+Ֆ-QLavq/cz@`
+N6')b&E.<ldg^?kfte#VoGRBO#qZ;x;ޱ^"&Q
+ :v"(rn8=`K'mkR?㈻ِ:}RBk}G ?ˁ4aDݚRxҾ1-#d4)xxBT C{d̒09O4qX1qFVBB;+![ 1\eLo|~w™X"y <J|'&sLμvu9a˺*aȱNteqQ0"G\H4o}?.ഠJCsU|4tN~: ew_-U ESފPWUwPF=(JFh ;R:@9Olvu$"7.}+_QIȑ
endobj
-4936 0 obj <<
+5256 0 obj <<
/Type /Page
-/Contents 4937 0 R
-/Resources 4935 0 R
+/Contents 5257 0 R
+/Resources 5255 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4909 0 R
+/Parent 5246 0 R
>> endobj
-4938 0 obj <<
-/D [4936 0 R /XYZ 85.039 781.388 null]
+5258 0 obj <<
+/D [5256 0 R /XYZ 85.039 781.388 null]
>> endobj
-1170 0 obj <<
-/D [4936 0 R /XYZ 85.039 567.539 null]
+1214 0 obj <<
+/D [5256 0 R /XYZ 85.039 305.03 null]
>> endobj
-4939 0 obj <<
-/D [4936 0 R /XYZ 85.039 545.678 null]
+5259 0 obj <<
+/D [5256 0 R /XYZ 85.039 269.621 null]
>> endobj
-4935 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F56 2890 0 R /F74 4586 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+5255 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4942 0 obj <<
-/Length 2863
+5262 0 obj <<
+/Length 2748
/Filter /FlateDecode
>>
stream
-xYYoH~ is88Xd D[D(R!8o}U$uسB죺Kĥ7IBU$N<G%d>q'!IQO^EsM';/o_gMm%Ԏĺxs~=ˋ7
-M]^ͧg]^,y?4Q|q;pH'7ɒ|}:*M&4v/M' TN(=/OOc`"pjӺҞ\'Ie/<rFćUٲ{=o4>b'*kh%[.o~wCONfՒAjm
-f ^fXBd_2r@om7eF|̓3=GXc"0Ϛ 9L}n$G~IV&iBFPI6;o]UַdKazHM_.*嘥9"i6
-`@Q(he z9̻N<ȺX pit 1K.}SAe'"u!J,X>}ض1U L툻Zd=~3SQ@36:Ȏd]7Y,ĺ30Ŵ?Xo&߄t $VG&bz+ʫg?+!XRYjoѵ~khQڹ徬o֦)zsяW.LXZLƮ8ifU) Kwc#nx;;p5_^+
- +v&%ޱǎ+s?O{^!,5?[ۂ,VغxyiIY7r>m4I%;v"7z>] _CYgUa/3Drmb!F(+c]C^\_ȻLK*q
-24߸~-Ix[r|H,ܼ@
-u"[#a*N,E"_hmB%y8nY(`hrXlX
-Ly!;HkH4XC.P8tEX~QL =] X2M&΃<c,F?_5'Ma$(3Z+Ye5Nb"bA)Ӫ4^[q/3LPW`BI5Ϝ$yY]c~ }4 c\ h }% f#F!(D=KI0(\~l<^Nʁ0ɿlDGP 2L٤qh*
-"m-BM%5jQ6 }OMiE``;}~0^8.$vP+P:uJKԄnk*ٶm9DFoMELG
-0FO@f^E|k\ryS;R'Hó4y
-~9'2q^nVٿ?̞5x׻uݧ.'zy38=ұa= NFG{= 7ç\##'tT2QK{ž?Eqp)/?;M21L,^v ~12ᅳ˵Xѓn I8c'؀
-.rhH*Ԉ/6K=OA ~9v޸L,e_ǩrA($ 4ZP4+],|G4"'cu9TEǚyGhC' =ǐbk1MjQP׻`S<J4MEwpi_K^^tC
-_z&#w l9\A/ j׌iԖ5*z@Iv(k;/_3:%:=IoՍ32c3 g9n`#eްMSyrWD"
+xڥYs6BJ3GC'Mԝʤ7i>m"Io
+NM t%tM+V/.gs~m-MyW4هZnG(wX$_y̢/ūg(=NR'&Q$]ȓ4*KzfE"mIa"<B)6ͻ k+b xͮl[X(qAX&UL= O0 .N/wf򺆛L8/]&JCLĉF
+tsS$VY 5kڍy*{u
+ѶVe;$A$-Nvy
+7vf=U]KבAnϬF k
+/=I+{y@D6c
+=%&`yb0N E1o˶y
+6c* kcOa;TUU4ykCv3 ΖMѶ h9 @s̶8"@N}ݣ ̱dcoȻ _ci'i(vmMwc'5G|^e&!<Ѐ|dw|eNYWۇo W3)4^רmzɬ
+yrP1ND$#XޱTqB' o Ym^옘s]YW %
+<J&RJ:<GWG"S Zy5VCkQS݀2@'NcP$N6_ȉsm
+kT,T
+nV$ղ+-॥Ɗ
+oNν̲`G]ޭPW o0Ŭqj>Mᶬ !XØA<\>DA@9RT,~@BMo4q;ER@b >@Bk*κyB " T#W_F;hM:"8mƲeb⾯q\rMP>ƕǎ)0Gr@-HʊgrrlN$l㦘tF; /@ڛ}w
+~7+޸3UXX"%Ib0=$^UI
+ϤH hn欶-]׬Щ>ޗ'Pf9!Zq߭6EOGrΕ"ٰ^E,1Ac j#**RgؚTWFƭWA]ædR-yٞ菐ԁ=OEvxbCύnEo9#1:1"
+B:f#]=ז>hڂ}k@YW\Їf-0vz "xrs+yXYXIۺtUg~EٸȝV_BJ
+eK~ŴH#bV)m^ѲX^_'c/eendstream
endobj
-4941 0 obj <<
+5261 0 obj <<
/Type /Page
-/Contents 4942 0 R
-/Resources 4940 0 R
+/Contents 5262 0 R
+/Resources 5260 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4945 0 R
+/Parent 5246 0 R
>> endobj
-4943 0 obj <<
-/D [4941 0 R /XYZ 85.039 781.388 null]
+5263 0 obj <<
+/D [5261 0 R /XYZ 85.039 781.388 null]
>> endobj
-1174 0 obj <<
-/D [4941 0 R /XYZ 85.039 651.823 null]
+1218 0 obj <<
+/D [5261 0 R /XYZ 85.039 382.96 null]
>> endobj
-4944 0 obj <<
-/D [4941 0 R /XYZ 85.039 629.962 null]
+5264 0 obj <<
+/D [5261 0 R /XYZ 85.039 339.209 null]
>> endobj
-4940 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R /F14 2895 0 R /F73 3992 0 R >>
-/XObject << /Im3 4327 0 R >>
+5260 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F64 4117 0 R /F18 4120 0 R /F41 2998 0 R /F65 4141 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F62 4052 0 R >>
+/XObject << /Im4 4556 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4948 0 obj <<
-/Length 4012
-/Filter /FlateDecode
->>
-stream
-xZoܸ_Nb$Pk.E\ރj+W:qofHIq@_A9$=C Lqo|; oiYyiϾK_AO]KceW/BW1{\_\ޫ7/0޽{x^
-8ӯyEh,MvEq;'*2ˬ^Z˰(Y2? A %7q:'
-!#J$qcۆq[:|z/Pssf?vheާ C=&ХEϳ?13LVO0;\\qݕQ=O }`m jt`J8ww%zue9& j_ ]Dw
-s@4S{1@#^ҋU9#5
-P{&`B#̌/H\{Rt!E~ʧJņD$ùzi &Au]1aBA=H%̮{n0"A'3te(f6۲% 3mx<x=2~]ۓ@xEh۩&v}{'LA+lMwo؝bk'&|bz]Xy5񈊂dj`ޯ!a2B""qQfg*Gb̴^K~#
-8QXZa`4ZrQ}~E:L/Q5M0Ȃ㔊q;*cXJX><Qf@ ,M,ICj;Xߴ~k>L}D8Ie?NtJkD!;<asgv;f. ZˮA6mJ΂<r?)Bݶ:ˢb 5SHp_8hp{h./yQT0|WwVz#@{D<
-GA`4Wكpơ?>WbWgS97G'<%$|obr^Q1rT#BgnQ(F;_G
-F/alj_)ڝO?l!R)z84pfNƺ+݈&0%1mK;%O4d;p҄$)MpI཯Ǒuʋ`tmY >-4*:E1Z@ϙ~ޗN
-M(~9>m
-X4TNJC?51>[FGi:I:ӹſSK&Lf N/͚I m;]AE)~%pgN^~,rI)}o9ⶁnLF#rJR'l u}/c"֪8(@YJ?۽u |5#G]ޖϐ0D`i梖K`QVƢA#ȟWi#P$bLu45q<!)"պ. 5^ %즟7^"[N
-k0+e}d!̴m]I/ܵn aS++/Cx9eh ;hy~rXN(>hV\p7
-@ N;hhSҡ"L箉w9gc+vgH@eDBL$壔Mۦ#@dvk/1+0eC)/pvd@r.}Z$dmBCSsLK|lk<i;6c,RLfdv*3t0Vo.6atF(#y)8 F 璘o;WIZ4\̂ސPei's1W]$UyfԚIlrT3h_81̜EX |2n`d:HNHCPД۫,p䉪k[o@*!#uJN
-VǶ$cQ꥘ "zAm־C-˝+{[3QYDUz94%!;SGO4uԩ@FH8 KS8B VkŦPǑK `Bp-n`ns>{6RFieh*;^͆Fr
-$@ 0bܷZj(7qdD0) ԦAr#i<I̤cfZ{VuRӈQ|q@ϩ^{KFO2쨃
-7Q&E'CR(+
-vZna[df ^lUZvJW;vY KX/5^0FdWb-{T&a懙 @+5I+;:([>SLZԭgF=e!o-yp*SӇxq,%`8tePU[ UJ5W~*!\/Q 꾆"œ:ظc#șE%S!f~")p?
-qj69LLcSz~|T>ϒWTD1r^eT#m8@u{lNh4|%rnуV"pͼn!Ш{ǁT$2eeh*Bǧp䯛vo=Gʜ;5D4tvR-7h~d \-gtҷGPB{;
-ЅhȡUda[n\h@E-ck9p?KUj+VmJ`?Qr͕$
-,QhԐ}-l7pyC
-4V߹  y`:-y‰I5)گ
-:2:ɤI&c;J:9J#7kvܨun\|)8Z9||,R?l5On>aYfoW%yv9XBX {]yAR?{4R lė2z<*tDOx1Iؒ+ m65w"ٳ(OEyi2c3"4$} %9RO҃vFR^&Z`ЖkQ^u 76,Z|5Vrlm.)uňj>rGu2-:
+5267 0 obj <<
+/Length 3504
+/Filter /FlateDecode
+>>
+stream
+xڵZ[o8~ϯ TjH:ȶsɠf)fyP,9ֶ<4HѶ`(rH~B< #S\f
+M_.|wb.$sw_}*
+[$a˻Sۻo~͍1<ͻ3|~s?^*{&v7w- P O_|-.3PA
+H}u_n*/yԔ,\abJUƉIC
+$ŔDa$&L6(IC= Đfۮy+vfTqC,mlG \*oVH\onT<TYq~# S%Фͻz6׉
+ 224W풿[htxF`'Pg: Ƕ^?>ǚElrR#½=:-L]O^.EMl5e׮?US3oVms0QhjYA >7+==8 ؒ(]
+["pi*yd6T0Mq,-DP%S#+CPxSFI\e7߽#qD{r臎X#J<6a2Ω6j*2IfGDb߳QFZْj$C& r\T+5ͭBa% ~jSv3XЯ" _>A0(sR&}([VctE5j5(i9nm37.6R*iڣY-.çc !+QLJR68y% ▊)06-[)+l;ބU~'%M
+p[64vX.;YX} ؜/hvZ[Cq[2Ea7ŧ~F
+@xQ9
+-;awgG"_~X̄f[`ŦvvX>
+jێ|[?5 ^ƚqf ^QA!vE>ҋ3B,yRD e Å2dnZi~T<
+1dFv&u\ꊀ#2l=Ԣ4؈f ׉gJ[_f9~qBTb!
+T8ucwF&{e=QCYC߆!Nվwq&/#n@ER %j@ɤC^"X&)d/<*PǺ{AJMϰRU9H$ɨ32ńgvz4lR3gtGDj8X7dYE>G8C,i{% (ABg2z\@H)/-v.HhQVd3S-!  t+CGׇV"Wg˕s提s?ֳ*EWJblYX!v5<!<`G =
+ckfBpDG
+1B2Lqd Tn svZS }))z=A-#`z,~RvcDz\7xZ1h|cL&85uwkXR
+|SS\
+!Ӕ4A&rA8=%2C`E8j~Ź5zf vSjNp0rOm4'dL)ap:$Tz /kO.=k~ E s=ܞK!տ{& mÁI(T_FeWՈq3G۴pac%q P޳cY&Ř=$?
+[1<J{H
+=BJpORR^7|w;j9xh hW6_2ɐۜsv"F_x4OKhPziYm<s˹֫jq~p8~l|_fEa=7y?]J.ν. ߱VtL{81ȠQ"ok yĶ 6 S&$S:?ʌ$'5FHp1sRa,ZV]7:N2)`}ps$a؇Pz]R
endobj
-4947 0 obj <<
+5266 0 obj <<
/Type /Page
-/Contents 4948 0 R
-/Resources 4946 0 R
+/Contents 5267 0 R
+/Resources 5265 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4945 0 R
+/Parent 5246 0 R
>> endobj
-4949 0 obj <<
-/D [4947 0 R /XYZ 85.039 781.388 null]
+5268 0 obj <<
+/D [5266 0 R /XYZ 85.039 781.388 null]
>> endobj
-1178 0 obj <<
-/D [4947 0 R /XYZ 85.039 761.463 null]
+1222 0 obj <<
+/D [5266 0 R /XYZ 85.039 761.463 null]
>> endobj
-4950 0 obj <<
-/D [4947 0 R /XYZ 85.039 736.114 null]
+5269 0 obj <<
+/D [5266 0 R /XYZ 85.039 741.134 null]
>> endobj
-1182 0 obj <<
-/D [4947 0 R /XYZ 85.039 553.141 null]
+1226 0 obj <<
+/D [5266 0 R /XYZ 85.039 232.324 null]
>> endobj
-4951 0 obj <<
-/D [4947 0 R /XYZ 85.039 532.55 null]
+5270 0 obj <<
+/D [5266 0 R /XYZ 85.039 197.578 null]
>> endobj
-4946 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F14 2895 0 R /F56 2890 0 R /F35 2880 0 R >>
+5271 0 obj <<
+/D [5266 0 R /XYZ 85.039 154.145 null]
+>> endobj
+5272 0 obj <<
+/D [5266 0 R /XYZ 85.039 127.046 null]
+>> endobj
+5273 0 obj <<
+/D [5266 0 R /XYZ 85.039 85.793 null]
+>> endobj
+5265 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4954 0 obj <<
-/Length 3974
-/Filter /FlateDecode
->>
-stream
-xڵZ{o_BH[hr-Xq uT[SFA3ɳ~cw8JvD}7DAlj$9_ς-p&L\A"u.? u^eH2O^.铟IyWb)?pl[$wx{WQ4?{68_?~&P|3C_мg/f6uΣfv="Sؗq=:uL&F|}ؔvhx/+-l:7-lE(_
-g^5EչERsVuUZuS--?nSBϜVI쵸Xߺ\}-d}j,&mCE#`\XG[vW͝ G-Wf*ZbEg(Yx'˃a#/+f 0QĊH{
-+S4K.gWZaPUk(iG9ȊR# AGfSRҚ)@Af gKN՜dva4
-O'M|h6RJO͸Sk2P2+l*Aq6#؍zIδ5W+[J6b*̋p%匸ls~`0}!JS$ aYȑ9qc)X(B MڨاeYɝPc#;ha_C`x]9~N**;Gybt4`
-( B{ªGX/Č'"rsh3UE tA) )tGݥsWKʌJ87: ]Au}L&R*/,8 /Dd"-
-wv)
-R_TɌUkS3sjc FXl 5o(+td
-55Kq֡]5tsǹ::';-V0$^N.8;+舴]LdzrayCSRJY ڦ!fuM4@YDd>
-M3?v 9 RP i üDc𥮐b,D\XBIj(TWNOcl]4N[,-xk:5durl/g6uIot|8VeI0#oӹc Z㧋r;dӹ\n}2"lOLF.7&`Yֱ-AZ>tWި1Nlj#=ѝ5剌ie;a/RkTx;25S9sVY/Ä*c{<t&U*z&
-'(XJW4
-ձt;z `-Ń!XBNmr5ݝB}]b,#`alr{93ՏZF$L6o"oBGG"ыL@*i
-E?aJPp] .Kw+| Agw,/K8RC#'^ {!,پwPAٕ`Dј"=O
-pkڀsX;:}rKK+e. }^2%bF:B dq:>7a,2:MR+
-IBD:!^sԘYipb?chz~m H#$L
-nzou/X~3z'Poݮi|thƲ{oi5{ PwyPpbDۙy"HCSץǀ"~jwآu@eq"őN<)))8Fi{ܯPvNORkH<-|rഴz8yY=u8sJ*0""D&/".+^VAf]JemSd3C_ W/eGa SaX>IHҳd`K4ybSuO]C̏ ȖzcBI:Ȑ kL!lr !(A+2(SF63]2~Lc# YQ^f<e;r'Nv9TvZ0̿׷PXSflܔ41hlr`EO^a}J:J#E v7?#AB u|WtX:{P춙erI*CPH_NlɠɼCBHZ҆"A.%0 lGf;PܰvƱ2v`+k+3M5 F.u4Zhj]aJ? /r-XFn ik8Ejd.>m PV']#14"=*.ƴǁEtܡ=SekhZw1X֥r67F,#et]EfbJ,N)#ńL8go)A k2~ 2 n%zG$EnC>u)[A nxzws59 $#?їJ֜ݏ'ѽaj
-B
-m{ˢXL)0+_mFܩEGxP)2y4xHLx/:eH0}ymr8Ixm:'i{nfbE>JiztK6y5vV{w}rWÝƥĉ&
-um^BǯW.&=2u+~>2
+5276 0 obj <<
+/Length 3551
+/Filter /FlateDecode
+>>
+stream
+xڭkoF!Rm\>sRi\\_=AD"U7â}m cvfvgv^+=s௞ErL< #LֻgN@,d9fu̴b'nz<|3[o^]}Xc:ReFӷz~u~-NyK;X-z~~#pnjqɷ #O|RG8AQw'=#_*fj,8*wx1ipLqLhfS@E~4`:fa&vGiYyA/^`@ =_lE\w5_+/veerlh fmXwy-g.BP<FdmZ#3S̸q=itCG%eJ>[\͒u7+
+foD`SHi@B#ɋLv˅ۆndzd8dhMK=
+@Ȱ0.: ~˨\=v_v0nsl0R®`
+Mh=Э-7'/P44vyڅMޞ/ ^N{qؾCEF==%Csgqѽp k" -H/O0;mV!%=C1?kEt'|94dOq9wp7l e.+TxYms{.PU;qlI2[lioO(qPXL
+ϓ|%+³twv;o
+xQ̊yx9ڭ?=e_:.yadZ^Dyc٥{MôޖPwd2$Mrb[T&C^eћleTe*`mj[0L' }dq7S7-JL;0 [V_U!]0 _O9!M#<~a!3774f[F^ܴV51=Ga{%({߹
+` 2[7Cjkc@B&{{8~C}g[fYY(e]qm5SYHKVvϮ6,q$LXV|c$Ƃc<cvynK7:x C"1G
+5e1a4̙$*֣7%!8XM"A{~o֠Yfy;toZݧzC2ͦ$prMq**62H;^ۑ"RHMt40"FJVgIAfx_Eg\( U㞨qD=BrZîԶc
+Վ7]ۃuIA} ?@|r+pֳA1X{2ϙMO]|'Y@:|l$6aH4{R#IQ٥p~M1VJ7:]a*K({ ZN[D cB/`ŜrK{b_!Æ5#)<taeBG`vȑ1.Oι=cvB AfItI+*+}: +X,#EDhwn{!
+p]Uw`+޿懇eH7 TР*raNB,-
+T7z gW;حה@gP9'vJ-h]cic<5/'`
+ttdyقʵLUW^zn5Pu
+u"cfRm:` 3z
+؟f֋T[dLhqm:敘]~;7۠ɵi+6x}sáF_d3;(7A$v{xAd떞Ts
+ m3^jACU9[6_"7,kĄosbt' KAʐ}zу}}dc
+WUIPd`\@oB>6>Y[ygmdij(Nb0qe3K
+Ue]J-w%m/癌6cğIȎy~&Ӭ87.iZ kZ.0<Х1L]R;L&b>`TXa !~Ҹ73WM%4^ij偿.KN
endobj
-4953 0 obj <<
+5275 0 obj <<
/Type /Page
-/Contents 4954 0 R
-/Resources 4952 0 R
+/Contents 5276 0 R
+/Resources 5274 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4945 0 R
+/Parent 5246 0 R
>> endobj
-4955 0 obj <<
-/D [4953 0 R /XYZ 85.039 781.388 null]
+5277 0 obj <<
+/D [5275 0 R /XYZ 85.039 781.388 null]
>> endobj
-1186 0 obj <<
-/D [4953 0 R /XYZ 85.039 761.463 null]
+5278 0 obj <<
+/D [5275 0 R /XYZ 85.039 761.463 null]
>> endobj
-4956 0 obj <<
-/D [4953 0 R /XYZ 85.039 741.134 null]
+1230 0 obj <<
+/D [5275 0 R /XYZ 85.039 703.031 null]
>> endobj
-4957 0 obj <<
-/D [4953 0 R /XYZ 85.039 711.743 null]
+5279 0 obj <<
+/D [5275 0 R /XYZ 85.039 668.887 null]
>> endobj
-4958 0 obj <<
-/D [4953 0 R /XYZ 85.039 684.645 null]
+5274 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R /F58 3365 0 R /F38 3001 0 R /F35 2980 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-4959 0 obj <<
-/D [4953 0 R /XYZ 85.039 656.94 null]
+5282 0 obj <<
+/Length 2645
+/Filter /FlateDecode
+>>
+stream
+xko8{~2P3HY~YvmC[,Kʒ+Iw,jQ}hH<h9ppU4B)T#w?Q߳x ]``s.Ng_GJ)Gb8
+9<JfrvzKڹt6Ig2+\ʙ ?:z>kj"ѻ :r>G7GiI>*~uБ+|Wb-Y>;Tv2yt<MYBTp\O'7|w`q$QH9= &-htl#9ߐg;N~/M)qkMO!J"yiw.BO*"_&/Z^GN*)"^EqG=y!m$%v0JU@BΖ^<s2wd3fq4j$q?m"O FMʣ?wmiO[X
+ڪP8$FdXq^ǴLNgkYJ1^&ÒW_S<-Y %j3@[q;yrCPUY7 1x3(#ߋwf 5uTmɚ<(Q(Xo>Hٵ 50ސ`r>\Dvw0 ƨ9*F[{
+mX6\<P/!4C~-0Ir>rWc<ih0R NlVӣ
+X?G<aRhxLLp8TvAFfmӯd} 4U"(ͣ
+w6Eچ-w 9hd
+^0vqh 嶈x"
+xf/Yb8
+endobj
+5281 0 obj <<
+/Type /Page
+/Contents 5282 0 R
+/Resources 5280 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5285 0 R
>> endobj
-4960 0 obj <<
-/D [4953 0 R /XYZ 85.039 630.448 null]
+5283 0 obj <<
+/D [5281 0 R /XYZ 85.039 781.388 null]
>> endobj
-1190 0 obj <<
-/D [4953 0 R /XYZ 85.039 586.054 null]
+1234 0 obj <<
+/D [5281 0 R /XYZ 85.039 137.201 null]
>> endobj
-4961 0 obj <<
-/D [4953 0 R /XYZ 85.039 565.459 null]
+5284 0 obj <<
+/D [5281 0 R /XYZ 85.039 104.701 null]
>> endobj
-4952 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F66 3242 0 R /F11 2898 0 R >>
+5280 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F64 4117 0 R /F18 4120 0 R /F62 4052 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4964 0 obj <<
-/Length 2290
+5288 0 obj <<
+/Length 2688
/Filter /FlateDecode
>>
stream
-xko8{~,p23H[.I7&nq/{hbɶPYr%9̓X;!9EZl
-~
-ludۑ4@ sqӣ7H[v8 eίn#%1~`_ u7>?%mx25 eM]N;"ОB}lb#[0<l Ցvp2_-^գHyaH"tr{T>+g˴NfL~\ǵ>ާy\<U<B-xQ#TC!(Ǥdۨ^64$O&SUp. _#Dxd|g?D\\_hfǫPΈz1t5|.~ G_xdeG"&$FՏ췎'O=3IR7`;{q2 2}
->(_eT?5'ȳͳofLgezSi]yj+AphQ]?ҞPЇhe)6Ñvk  /t z8Z59˴A\(}:`STedֿnpNx!9nݬ#SY (l
-gޞe gyҁ\#!U$HSZƀw$]H*ʷ2"T6Ϫ2Iڢ9͝.Ac a+SZ[olBufgڑ1:Z,Ռ!G8\fTN7W^
-ۢi+5.=vַ-IRmC)6Ͳ4[bfQp896DHb&NGlkߠ')0fJ<ױҼ4Ge\۶DblfTf$e&EUkrrxi\Ej@^U'砳#YD5E٬^rz\5g&t a!Rdח`iBp8T7coi} f]
-
-
-Lм0AQ$Ɯws33.1&r#Ya,O'ZtQىM
-X>)
-
-VᏘʴ5/qf/* f"iTG
-6-
-5w' TC"N@}G+|/x8r}\urC:EtW Iv@!F_q#}})!&4/LPh~|
-Ab,ۈ%嗦tMQؤ8mY~)0\t+ϵ1"`Hf8`{G":֪6'%
-1|S6a<[]iХ_I瘺OiR =1wȐ7fAj9SQO
-9fO`maxcjU 3H7U@/P&FQ&շk>3#tȰ\E.yK>j{BK2IBĠpBy$uo549s1Kqޓ 6\:^"=KOHj Q}(|s|A t}FM*hGEhw^ZP#Z_ؑ.endstream
+xڥYo8=oAM[I,48`XJ,T4{̓e[ξZc?~3rA0=ߓFbdDF7;H[v8ܭq$~8<֖ pb(XP|r6urQ mM7'Y`B6w}cb=[0<B{`pmڡV \7>n\[C>XV z+1EDkQc!rht=RhoXqFZe-բoaF .8TbJ.OLZYIksBKea;YYTRc)gRcByi>͖ '8
+.^__y\<V
+i.!)7mOϸ1ʣBwiv.Sy!^9N6r
+
+ߌה?o?~
+tE &PFY@25Me#<O i\bӺs8Dc.Iz +n#$u1E8*mA./(bh v̢)h),5!ˋӕl*W4yrgюX< tF9M?OG=PNAX4kӀ)R ͦ=cE4-.X
+E#Qonג*9 T pg>5=IvEmD(.L){| Hy$ j^J $DJu{bL!ikck3}I4)fʚӉKe3谘;L$hF̱-*MҮ(-Y*O4<:XɓNTdQ燷%ta0rێ
+hɜ[oi@VPj:AG I^: d$ڠvbMKRPg4l&1TKFӧjsZ&2Oɧ}Er(7)ᒬy ,i,mDzߕZ,Qn (%jfY؋40i/"s|)S֜L՜}sЮ78W_iO
+<{/\ЕHW"={l}V(ѭNh15<e
+z!-z1 %cҋ]KԎW2;}VS|r/
+&\S8d²t`t
+EȏWxIkW'(ߚ m`E+~&Wwȁ` x"ӲLs|ZC;kb|jie'@l Ziw_ڱ|9 $<76wi4n1>qsx{Օ'$d?YՔ0 ^ffLDzOQփ0摲!q#ԙ,BOf|3yT7`RYtzEU|uUXtE] hXB|pҁPq'\EK~hL¤{֭mi!z~
endobj
-4963 0 obj <<
+5287 0 obj <<
/Type /Page
-/Contents 4964 0 R
-/Resources 4962 0 R
+/Contents 5288 0 R
+/Resources 5286 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4945 0 R
+/Parent 5285 0 R
>> endobj
-4965 0 obj <<
-/D [4963 0 R /XYZ 85.039 781.388 null]
+5289 0 obj <<
+/D [5287 0 R /XYZ 85.039 781.388 null]
>> endobj
-4962 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F14 2895 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+1238 0 obj <<
+/D [5287 0 R /XYZ 85.039 361.14 null]
+>> endobj
+5290 0 obj <<
+/D [5287 0 R /XYZ 85.039 326.996 null]
+>> endobj
+5286 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F35 2980 0 R /F20 2965 0 R /F41 2998 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4968 0 obj <<
-/Length 3141
+5293 0 obj <<
+/Length 1932
/Filter /FlateDecode
>>
stream
-xZmsH_*r
-RV 쒽r89Ԗb)
-[2Lݟ~Iv~9(LOkξ W(ڟ9);qwl \/^]׵HaY/O#ǚ<:):w'gcsy~Fk].~{uS^}S{rhh[9q|W+˽?Z)<󪁓 ؉U!**V)P
-!Tp(4(be\@6kbBYdLW׬bלj~RHˑXǚ^#]ְ9k[U^4?]"ufjiӇ*
-?pr#ܡk FHq @; g񸎅X
-#
- '񖤵Wf49r-@m<7 ŗyAPdk"{:81;Ӹ5x]a~`Gϖ˧<ywXE)r=
-0+;7%O$hl_ujdY:iH/&x! $]3Zȣl[Ǒh\GVgȺIb$ˤnu Z-K7w³}!=Y"&QFAoښ-sZTPKn䚐<QHANoF_KpMBUfQSR̈[T*ػIyђ4'n7"z?3C j@w_/^BG^uYX!s@5t68FĹb"{$k)+&,Ik[ ync)eCVe݋|81r\'_'olm Au"R&޻CLz}|G8p!SaN64D/nY&6'\޸}(VI9<*=J9h¿e7;EFˆUVˢ ΧH=*O`n|qJW|uͫ+;}mrdjUwm˫OΘx<`}/n3sДG/}4wl @7cgDJW:h8YFCIMi((Kty
-''y_6x4dlP/ $iqĪld=ar`[A'uE%f@D@Iaƻ]~w4"9C"}=&M
-IQ\ٮ-B|ˬ-
-]n͔$x".4tk$Jt) .Z$m\PvX,pa+cR7+͠*ڱK6Vsm.]'VH^OW>BxB1T|ĉ4H"ᜇiW7sxTt"Of[)]#~MaGEVG|9J$z;]|΃ Y0H؍hCft/^e I3<Z5`To7v[1?/GK!ndtӋ; o42˜HBڗ Rp#\@nFdzOO(B܍cY]m ʨ%[U2[YRJ''$C7NvH;=?h
-I;WQdzH#/z-ըLl)Fh>yl-DT?94 Vr\SmM!\UL&TCA
-r^YXH %>-VNRj eztc 4Zhhs3iLmӇ}zPC]_v=
+xXo6:Df=3C4m$f"ɉPYr%9n~w<Jc's=l!5y<wR}~2¾Oz+{p `Qox!e:~st5z=PJY"`hh kxv|tKu.G@Xgy~5;P0z{5 !wm399<QuaN9}ڵ W :] :}`:k+]ِIޜ_DrLB \>9?eGrnA@#GR]=%0rpMn5YKuz_@P$Jͧ;HXwCF=}aIêis9:Ӭ!hܕ Q mɊ&QRNxdyqT7Kt麴PL!LIC4EDzΚ(,}WVi=-,rB “Dz]ܢ؀I9j8\_aôzHÛa45K&}&+YJ
+`7X`$ \ABΥlHv39QQexLnvw>o!SQ!|t U{p~[c4A@nm]@ri_XSRM8RQRyiH#RmT<j|`F2l0G4\5 ڗ[I,>@환dT}Y‰{C1uBn3P+tqݢTV a#t%3w6:k0v"tRZ&:ƽe`a^JGĸ48g&NؔVޝ]:|[a˧A 8IfV*`'71EO,7 e0. @dZ:OO`Y֓盶H:0u`J^K۴TE4TO
+ =ϜځCI&y۷p"u!aMgnRJs*#0;FJ 5pKL/\5E^O RcHfgSXaa<`\<S0;dEeS.SԦJ U%ݽa]*:yS]B@\ߧzL5p`^^Uto| .~>{ :-.X3X>P nf2M</M-~ḣƳIE}xVU]$xlPcN&O*"PkGMp[pV!9D tg(`c<V-F:p
+grqd?zN@WBDk ,ک>K7endstream
endobj
-4967 0 obj <<
+5292 0 obj <<
/Type /Page
-/Contents 4968 0 R
-/Resources 4966 0 R
+/Contents 5293 0 R
+/Resources 5291 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4945 0 R
->> endobj
-4969 0 obj <<
-/D [4967 0 R /XYZ 85.039 781.388 null]
+/Parent 5285 0 R
>> endobj
-1194 0 obj <<
-/D [4967 0 R /XYZ 85.039 761.463 null]
->> endobj
-4970 0 obj <<
-/D [4967 0 R /XYZ 85.039 740.731 null]
+5294 0 obj <<
+/D [5292 0 R /XYZ 85.039 781.388 null]
>> endobj
-1198 0 obj <<
-/D [4967 0 R /XYZ 85.039 340.111 null]
+1242 0 obj <<
+/D [5292 0 R /XYZ 85.039 282.399 null]
>> endobj
-4971 0 obj <<
-/D [4967 0 R /XYZ 85.039 319.516 null]
+5295 0 obj <<
+/D [5292 0 R /XYZ 85.039 248.256 null]
>> endobj
-4966 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F14 2895 0 R /F66 3242 0 R >>
+5291 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F58 3365 0 R /F62 4052 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4974 0 obj <<
-/Length 2208
+5298 0 obj <<
+/Length 2086
/Filter /FlateDecode
>>
stream
-xYnH}Wh}cE<q.= H[D$RCQVj2Ek Ā1!*DV0e`8yw hM]?N=<L$~|1yp
-eQPKP|2ɣ7* ?O~:x3ق0L<Rg* 9q<XPP+_~iPШKGZhfgdv\Q(}.b1KQkgʠ[K΃߅h''X"ݫuT {bG阋W+ >T>KK'9
-Y$=If)ȋ:iW@0NWdUo0b*?xJ.&oE?YuG*[-b;rAo;Nс\$yˋ3<~ȿ8nէq%,J>w/n7r>vOÃo`Kڄ3pj{@:Eܥ//^]FHf5ʲqxOKDZiz}Ѷ'6`}ƻv.QGE
-9g9ۊ:naU2f!ﳳaǮJ|iReupoGcDhCpm#Њh'>VưE>X8@ۊ߆˭P?n}ᶢ
->O17zwY<Ds| ߃#%y&={cǽ=Bh'GV`.U"]qVlߺB&bFE ^$7 \$3̪X uU-
-- *)4T-fՊ0ۚqwc|U-M!8掮K%%(|.2Pq )v)cØrU\4"u2d f+"<[%+ u"8av)-!6 ΍pOe$/OIj+zP.Z5\9j. KiQ|A
-Q"U6uS k.#{-@B-Ѥ [uE@&
-Jiʜ2!ӻCZªD/08l_(Ҵ)#D'08^Qϐ
-e{04ݏv^b*ԭV\]SȜPBb#87'/t=2ʈHlol%xb,4_(x=˦_
-Y3rSuYnS<󆻢n{7I!k}Ĭjb&CQ[]QpWJ╴[e6q7jnBf%'F%#W69M$X5>܁J-GM]{!0G#kʂ%e{;p=0 O<Tvl_{2OӁʹ76O$ipa|iyi8 [aa4HGRxy~[GX2L3nJ3zԑF{ΔUY(8=IV.
->m1LMl:UmR>ݚ$BO+9&\2wU#Ţbi?Ԫn{ "
-ÔP|endstream
+xks6&כPœMmbyr3IC͆&U~bAd׽(s
+v~>cPFOot0̏X4]h_i9%Wo'ÑxMΆ;;y5y[ʛl8τ8o74қ ~9x=kj/l0_Ffpssؾ9
+HTq3t1>YId8p-u,Ff%M?~>"Чa(VVIJlZ~J*؞tZs:s
+#z~:J1[V& (durza%9O>"_'|˾>Js/`|0J ;b 9[fzT6>XVoM:( ޭ{^7u(ܠ9r7X*]%?#OEg8<F 3 *-jBO*e@Q̥Ÿ W*+pQ
+ߎ^Oϴc\\HGYc4<^i\ ,\(M]]dQ9:|XsK"oTGolPJf~6=~3TVPmݘX1 ޽ɩ>-lU.h8#X؞p<"*
+>3
+1RZ[﮳9_3m YX*]1&үp6,BG*+w(IZ> x$$@?5LyVEcU 7cbd໬Y$Ώ,oXk+2ţ )luq
+a^IY6j UxO HDHijrg/,M1H{NӁŀ̱@mebq&wtۀقZm,+)%UHW *ZnXdo3Rf
+ @C|m0"od`/o- >9endstream
endobj
-4973 0 obj <<
+5297 0 obj <<
/Type /Page
-/Contents 4974 0 R
-/Resources 4972 0 R
+/Contents 5298 0 R
+/Resources 5296 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4945 0 R
+/Parent 5285 0 R
>> endobj
-4975 0 obj <<
-/D [4973 0 R /XYZ 85.039 781.388 null]
+5299 0 obj <<
+/D [5297 0 R /XYZ 85.039 781.388 null]
>> endobj
-1202 0 obj <<
-/D [4973 0 R /XYZ 85.039 309.498 null]
+1246 0 obj <<
+/D [5297 0 R /XYZ 85.039 255.301 null]
>> endobj
-4976 0 obj <<
-/D [4973 0 R /XYZ 85.039 288.903 null]
+5300 0 obj <<
+/D [5297 0 R /XYZ 85.039 221.763 null]
>> endobj
-4972 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F66 3242 0 R /F56 2890 0 R /F20 2865 0 R >>
+5296 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4979 0 obj <<
-/Length 2161
+5303 0 obj <<
+/Length 2212
/Filter /FlateDecode
>>
stream
-xkoFT!"pd;i&.EbB*IYYR11;\&A+,v~< |NG?Հ37d`~c@t6n8R:\qhrȝR /1w/~$x~|iyr/ߎ>|b鈹2ԃ ppw<zJyvty : XqjƒZVdu߅| 93x| 1r쾍풢&'x!cG9r:8PqƟN:‡ǾY oNrӗG ,UWΘ#? Jew)gXP—|~J%188d+}Orof}xٵk5vB+Ujr;$ bqqC*ob+$`>J:K qCL. ,&8-E]4M-\*9}{2^.q*Ӽ~RG8G%(l8V ǬO~:."4$/'/gudJ*Z:Qݧ#-f OtJIl,fЗMb/ׄg*-F>aD?"!q8 =_8.Ɇ ŤfZ<fge
-w6;ۋ~/P{m7fb"ԄxH0:E 鋢N*S/fB S& t?;qPh M0W%^ QILzi9޹C _&%Bj} 0Ώ`UY\T~$7%;b,)֕ڪl4pX(2w$uXN \zmQsQL0%kZ72Vx(o6Sҳ'(#jdM{Q٠,@
-}3n_u "|GmMl
-^_cm<p֍}
-=u&j/WK̦Ȭo~+7jGJq1PT/ 2W v!;ЅDysV?pX`ؤ溎˛<Ό83p!\.ljWf ?,% l6R7Wbdv Wkk-o19>BT'歂+x3l6pg
+xio{~;"2kHA>x&lؒ+9=>p츃)Pw]0_ :m;up7=k|?Sn3;`Ag|QTNgZ'nqvyur9u58\⑴
+^h&\tWDg
+dHWaAZPߔR?@+%Zذ5юK4P/XQX$>fIB=ЈkJ8X1#jXY `iDY=Q SC[VL"nFQq!(ʈZ !p;k}Ѭ4nh6 7뭶h)}Ccpln WLWfݸ&:
+BckBrChrrI73؎+ܻHtB0R&B2l-!&9W`=zenYGp)m髍 ,̦(E@,&ΐcI[)FVJ%AK"ptݨ*#
+8 `
+5q %QI}DHG`(\ֈBڠ|mSG,R5h 1
endobj
-4978 0 obj <<
+5302 0 obj <<
/Type /Page
-/Contents 4979 0 R
-/Resources 4977 0 R
+/Contents 5303 0 R
+/Resources 5301 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4982 0 R
+/Parent 5285 0 R
>> endobj
-4980 0 obj <<
-/D [4978 0 R /XYZ 85.039 781.388 null]
+5304 0 obj <<
+/D [5302 0 R /XYZ 85.039 781.388 null]
>> endobj
-1206 0 obj <<
-/D [4978 0 R /XYZ 85.039 309.498 null]
+1250 0 obj <<
+/D [5302 0 R /XYZ 85.039 459.145 null]
>> endobj
-4981 0 obj <<
-/D [4978 0 R /XYZ 85.039 289.509 null]
+5305 0 obj <<
+/D [5302 0 R /XYZ 85.039 427.122 null]
>> endobj
-4977 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R /F56 2890 0 R >>
+5301 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4985 0 obj <<
-/Length 2204
+5308 0 obj <<
+/Length 3017
/Filter /FlateDecode
>>
stream
-xڽYmo8_Cef*Q)4쥉o`-ؒOfp(%nP\kQ!g *EV0em/-t <iCK?Nޜ'8yܛ8I18:&R?"}ώ縤L9"8j4ĵUiɆ tІ|{g*s&7?F1КѮ=̊7PY;٘3f~{,"u~NGEz"i{1fQ]M^F.1Uj6{$JQ.d63ߜM+ VG*rZ7 8ȃxuL ,qbGMhr"g sNPg^yr8?qw| dއMƪlH[h_:B
-AEõ0H4+mZ)A@_[Orb>ǟÑU!sq@IyMB
-]_]ޏ'W{1u]yLn.i6pͱCڒ=q̤܆u`Ȩ+{,jtES\z(vڗ1ՙm[ M%?m!oYK4+nŠf_Pz]c
-YF5o]ZE`]!i$%urUp7t,j83>$t pW>H&):heĕuPKn],UX}FS e+&ajT8RU pKii.!.^B hw? !?}_ ,عR
-= fUzv К$R#[e.wHo{Qqq[|bk6F0/bE(V8!JߏƆDy4j_,Yybxy-q@ƛ}~7zNGz_a/ft|y%![pi֚L]&^J HxV yEʄ_laA>%e)K:oմ~_$4l6_LdWSs iZ$mplT]mRD .^^O8ÿ!TO~E_ޟl[*
-;h`PR@ |)H&mKu"*ګ/+$}c#m]"_u|+萩Po/,hWendstream
+xڵZ[o~
+̛sk\$O =h(0E$eg.Kr%p"Mٝٹ|#'&N&6f؞f~:bfIf͛a4OD2^ ~7dzLgZkO:ctv5۳O8xz:OL4_//hz'{z B2ub>N—0=0ж_\ߊ SA}::H"?HI
+?㻋+!\fOp^)Pxg tWr: U}NP"xkiШ l&QCNq"<rȅ{(+G*<t~qpvB>iQ|2-eϦu$t%ɿA+7Tcg+8guگBcP2c$ι2_n񥑮i"#vo="%N.͋t^dt,~#H1HʪAjP6Tr]`yUt  n,P|KK64춆v^"k,02^{:\ T=_a,'~KIjh|^È!t5g}iZl҆rQg)-I|+ j%JI_E %A:{7 Yy
+1)ƻwYCWE.tKO
+T):EО)(+!<=[+<4۶K>X pԺž
+hȠ?t[mVI|DbmSTvԻ2L+XR ܵ;!u1a@Ba(2K0L-9:iUl^?:Jš! p!@~#<3H" \S ;#{w&5qZFc'”-/)&XkoQ-n^3IcuxV۹I,_o91pnj8ɅrVtK]*Шnh6x&v6%#ߋ:\K` @^0g͈$WeVDWx
+@@УM X
+ 5g˻('
+]ѦsbnFҐmrKL@QҰe kQpr! RhUU(8v@$|0Gy d_+Ea?`mŃd)\gA8-XnN~j,:[a .r沛T9%H Rf͂@yET@P c_.nej&ny"%=/GEȤU{(&=]Qو" @':Tz
+!
+orݴ<.E=ޔM0Èq,߽@ }`QU&4M `g0l2yGv/*
+l^\B-,ND"zȨ $x84G@)=98
+d\I0+cF[@5QQlh~&j/At"㠤1
+( !e<I%8,`ֱ [g?ўOH t`(Gt1 SIO{k~Jr('ď<`Z$$GX ~ba(a0=9ۜՎ؅`yVlF6UR= V8Ru/PBi mv2
++C{g%۴J(ZHMV_8?O<>VW/_?t$q:T{`vIjsd/QNW:
+Q"ϻ/Wb*qwAc,VA\ ~"h2:95 H0=2Fk ̨v^ ,tiAHI)3*~2&_T w]=YZ^nva_|uT_D}:O\d݃fJ>Pu577
endobj
-4984 0 obj <<
+5307 0 obj <<
/Type /Page
-/Contents 4985 0 R
-/Resources 4983 0 R
+/Contents 5308 0 R
+/Resources 5306 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4982 0 R
+/Parent 5285 0 R
>> endobj
-4986 0 obj <<
-/D [4984 0 R /XYZ 85.039 781.388 null]
+5309 0 obj <<
+/D [5307 0 R /XYZ 85.039 781.388 null]
>> endobj
-1210 0 obj <<
-/D [4984 0 R /XYZ 85.039 581.088 null]
+1254 0 obj <<
+/D [5307 0 R /XYZ 85.039 485.637 null]
>> endobj
-4987 0 obj <<
-/D [4984 0 R /XYZ 85.039 562.614 null]
+5310 0 obj <<
+/D [5307 0 R /XYZ 85.039 452.1 null]
>> endobj
-4983 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F56 2890 0 R >>
+5306 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4990 0 obj <<
-/Length 3781
-/Filter /FlateDecode
->>
-stream
-xZYoF~0L&_#k0 A@IMX"緮n$ ؼ10ꮾ8?u~i(ˎZ;R#8~jvtmUA~<.w׳?MQy*'4ͼ/n&ʻ|}w ՟.f.6"o64T:p)8^6?
-(ώ*ϏG:XGR_mGt3O2m#G~&P~_p"w1*<i
-n!X#݆
-:4^ieeXXeRb3n/ٮL0Pe\{2| h !@ӚIy[PB2$=@{1;U)P|r<UX+ㆋ4
-Y7e5.>5;D%*ȇjJdž#I+ WA{/e?bemߢ3Gu璗ݸgSzíL$wx!qd_c{
-,OeO+N#d^T#/Dx
-ДoPGix[|Dc.1G~Բď
-c^Mf#zQ.rsS ll`FAڃ,JբMhF;ndejK"RӚdckYX'!\sϖ)r(&_HQkmNKY8gh[ܩo Ŷqj5%
-Ą1
-N}s'5sXty.#/Ъ\rQV,8ˆQKNn-27C%,iy70'e"FkJ-hBv\󈥠cY
-bɕM#
-8-yP s˿n c[+;KwڀL!"=ask㠗lE^"F5@gFhN&1Ar_-q$I)g1t#x^C-m7?c
-^F\YzF<VR+ITFhRkJJ  G ͅX #႐;iR䞳l7F@%ԡb˗B*@
-'<f
-i֜4,R0eYq h„\80Ĥ)
-WS<h<vlk &INz`M9K>ql83tdEv87>_SETJK<*i _4ӔpVT
-NDCtľҊC'm)doF6t߬6LƶoM/W:>䣨I.[VjʭQSf_ha :KI(~WzuI& ?Br~Mu|_-a$8')>-$ ~L(_D_F΃3L Aya ;yuPG~t/yVdyiIP;7MMS,l,(F?aS_˧,~*6SYS/wD{Ij%M5*OMh`SY1^JȎN%t uw+ ٵ ~VdCȵ{N?`?% T?+i1rS>/ʿJQ75/t%0endstream
+5313 0 obj <<
+/Length 2604
+/Filter /FlateDecode
+>>
+stream
+xڭiovaja3E񺱌HCTH!5%7io޼ˑriWxFUQ4JGbt;I11  /`$x4Ѯh}r^;0(IFt/pw`az9O3wGʙogd 1ӭe@oGUq4zp%l/(WGGQ?SDUH e %)=WIojjxN"wqTiI]TT-OOc@,έY N'u>7(kdC"pcXH: і$Ϣhڢ<<vw(ڢ׮%ο_|+xJhu
+1Dى]ڈ9"]/H2>dYM1/AŚxo%
+'x-(ė XkBR8$B|Y^|GTR1hpU<J2:u
+^U;dw/WY?&n}W* z&!oeF>B8+YybxmZRiIˣ$5-}W??#jC0wz ʕ'D_nIxͶ>\F m[c$zkd %HX")GMضŒ6&h  Ӓ!JEΓڢ
++•g8@XR
+ڊU*pC 4Ь
+6M`<7FFCb,y6V3$ֲ;7A q)]Ut&rCm(ORT 7W3Jj[7.F" ,pTJ;HqMlFO|
+\HbʪЅ=7"9K)2#>JpdÄR ;A5
+ Nc Y,Ob2p^2|ĕ,t仞_3:<s=4sҤRNZmJR-.R3e F9u8eAA7,½
+Xy5O6iٻ7k!r8p.\jugo :<H pF hNrJ :KڭY~5D Pfۧ~eB9_?bqj r:G0kjj^ˌAʟDK7P?Y@/CPq=
+8TIB髺(No,U44͛nW
+nݓ"Rm<Md`5G0A]|16=<3]ݏTIԂaB\Qx>n[w p3
+}&0AW^o+]QwGMmL)_6ŗMYsۣMSGV"C
+43ȱ #8XsM35FrSu=U,3azBmY<.`\sŋ%ĀO4jmKlv~ںsv Ӷ}M;Q
+JV,.(HsQW.m7^uV ;cpwut {ohpv
+sV}Dž)AAi%w8ccCvIqNPv35Z":Lׇʂ9aJ*yÝ36uY=7z):Ӹl4-iۄQq
+M>_z
+Ry|{teovpsNEZz0Ech-/OyE;%36bX&?4V@+U+k=(Wp[y
+s{ 6-#W8*;S\|[fQsD_V=+>\ jPTf2h(P:1lI șh(-*|P4g\⪷~aAz>t Þлv4o:endstream
endobj
-4989 0 obj <<
+5312 0 obj <<
/Type /Page
-/Contents 4990 0 R
-/Resources 4988 0 R
+/Contents 5313 0 R
+/Resources 5311 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4982 0 R
+/Parent 5317 0 R
>> endobj
-4991 0 obj <<
-/D [4989 0 R /XYZ 85.039 781.388 null]
+5314 0 obj <<
+/D [5312 0 R /XYZ 85.039 781.388 null]
>> endobj
-1214 0 obj <<
-/D [4989 0 R /XYZ 85.039 648.228 null]
+1258 0 obj <<
+/D [5312 0 R /XYZ 85.039 611.338 null]
>> endobj
-4992 0 obj <<
-/D [4989 0 R /XYZ 85.039 628.239 null]
+5315 0 obj <<
+/D [5312 0 R /XYZ 85.039 577.194 null]
>> endobj
-1218 0 obj <<
-/D [4989 0 R /XYZ 85.039 135.763 null]
+1262 0 obj <<
+/D [5312 0 R /XYZ 85.039 136.435 null]
>> endobj
-4993 0 obj <<
-/D [4989 0 R /XYZ 85.039 115.169 null]
+5316 0 obj <<
+/D [5312 0 R /XYZ 85.039 102.291 null]
>> endobj
-4988 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R /F14 2895 0 R /F56 2890 0 R >>
+5311 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F62 4052 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-4996 0 obj <<
-/Length 1948
+5320 0 obj <<
+/Length 2608
/Filter /FlateDecode
>>
stream
-xڵXOH"nSY'~
-]ʲ$ZUebCvj;?8[̼7c}~ewK|?M{f
-(zR00]I{oݗ̠?-蓱{:y{6) |cxw<hIq
-ӳp$w}%PO_~bB~ƦAO{c+=ƽ.L|Cӑ
-$(o7*+Ct8r,
-(*cEM3T;
-erL*غFњʫC-E]-D 4XhL|e9WRWl$R%*,1i:_)nKCB!Z#R ^dQ#|͇qJmظ D2`g20P
-е1yB<ы{%g()j*/>*;1k<.@;/EU-W(Gm+ot/: rt-,H".pC1LlbM!N,S} ؛yp7E:Q TI9҂pCP@* X➧(x5\C(ہvP,M&mMk /
- l5k,!-iO5Jʮ~ڋsƔ`Mŕ,n[J@qom"!w*Yt0M&o|UTJ2.S&HXI)U^O GyBbSbz.9TUe>u Dϙ)c FuKצG pd0 ߑT:(ӼS>Kz1y07`E{9'o5K?ǂG)lƒ${Fܭ <VGE5}n7aU<o!-N*M-6v?_I/ך2ֹ! iNFl  tl,
+xڭks~Gm`Ƅq8<YceGf2if|@
+#`
+[zH_I;}̟N~m>1Y^
+1nt9aӢͅ$pтVHŭ-AZv >=b)W
+% ,].6]?>kP~y~:_'Z^7F QF
+fJqXR hWy1]Z;M|vJ=7췙r M5cL֤x$<UZ&
+ȖT$QBL\*RBypF1!pNY1 fKa~UC-7ɹpEi)r8.2ՍZFp}ZE
+pJyEΉ{]_.[8Ɋ|G8Š#g#Җ2UC?Ҷ4M7z)si[B:@-G3_Nzʳa9=0}N<.xKgO0f=L'W
+'^zZCSAI؞㽕csX>8H F'#bXn]^w.+ F⍦+#鴰J#Epr
+o 42
+`~nAF᥻m69w쭒 FK.s@$\C䯼KwdO&]K{$d¶ OBp|=dYā~B94j$М 筡|<JqQ*+z n?>~Tu&A*\z).^:
+؍9x~
endobj
-4995 0 obj <<
+5319 0 obj <<
/Type /Page
-/Contents 4996 0 R
-/Resources 4994 0 R
+/Contents 5320 0 R
+/Resources 5318 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4982 0 R
+/Parent 5317 0 R
>> endobj
-4997 0 obj <<
-/D [4995 0 R /XYZ 85.039 781.388 null]
+5321 0 obj <<
+/D [5319 0 R /XYZ 85.039 781.388 null]
>> endobj
-1222 0 obj <<
-/D [4995 0 R /XYZ 85.039 404.948 null]
+1266 0 obj <<
+/D [5319 0 R /XYZ 85.039 373.935 null]
>> endobj
-4998 0 obj <<
-/D [4995 0 R /XYZ 85.039 384.354 null]
+5322 0 obj <<
+/D [5319 0 R /XYZ 85.039 338.624 null]
>> endobj
-4994 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F56 2890 0 R /F66 3242 0 R /F20 2865 0 R >>
+1270 0 obj <<
+/D [5319 0 R /XYZ 85.039 267.041 null]
+>> endobj
+5323 0 obj <<
+/D [5319 0 R /XYZ 85.039 234.62 null]
+>> endobj
+5318 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F58 3365 0 R /F41 2998 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5001 0 obj <<
-/Length 3642
-/Filter /FlateDecode
->>
-stream
-xZYoF~F<zs%N2 HhkTHj<E;%fuuW gY,U͖ۓ`/NBf^]xY&0"ZB)兙?_irzϾ)]@"?|Hŷ87ϔw5꫓W#׉B~=`6: |e?4f=ѱc_\szƫ&NQG)4"NƏM2:`: ፩ytZ>ܲp1 בqF@8_‡$أh qٯ1gGmtXD/ηM,#x~ fo`4~!~Ֆ ѱ3Klxm^( zM KD'2DTyym {"lۺA}Iq׋d ֮jx .Q4
-3&ޯQMD <xv7BQdXJ"hָoYbA0H *V<!KTI=P+nhy[MqU[a42^TDĕ'o6>S,dWZpw0tmZ[d򊇐K#sYkzr{ "N,X눨Ç|tpk_GE 7eܒ#b.pw_+W w` /C0P$-R0T9xZ &- 
-<w
- :]fp֒E=a)
-5/ M}1%<Zr^w}K*`NpK.՞>ѱ<%7pmi2-'IƻS]zv<๪keqSF^@S/iX/W!C 7Ʊo"
-H|]# =rWcNkMJmZn7{i0TK }0x{{GxRzM
-gEcp5L 1k +Ww8OMeߟ m"C@[teR޶͑^![zw},rYZ!( 4ȢC48
- B/DH ~
-Bv=w
-&w06VۑĖ%( {ݱ͢6uXtzPs: q 40:f=Eލ5"_}o׼d1[rdY koɦ[W)0BB'Q" ߿oA==&1c(x손ZسkB!T, ~ú8p,Db̙j
-˦v[and!te߳$|
-HRqA~Rź1fJ).[g ,.8 ͳO#$d!pfJ fXMiî9GbUE9]<)kʋ䚤*&{ &WwqBZ\somu\K6B[5đy2\ox)`'Qvr-C)z聑+%cNK`MB}gg!Z?޴[עFuO
-j,c !Bnp٢P,6Nfv7N<+wP*ydhZXY V@3yP?d €CBXV0cgc '퀫QC]ʆ&E,+K噀eZ\KL!U_ r
-9
-Rle^݄!/,BKw-Ij$X]B
-n
-+X[T>\=Z[KIU;i뗛#m%VN=T
-zʾ$HdE[րg@ ޡJ䟋)5 yMr7՗XvV%ck˪$``2DڡbxqYTY&Daf9}rmiXWfp_D_KM? 6u6#=;i+k:=pr=VHa *q\/lA)G*"&BWTf)4`?Ua*2`0߉$eRt+85b 0'ױ# e@ (A]d1qA*e꧘4Mle(r._O$D8l70m֛ռ.F6m:f5`6)h>է0(1|QO` *
-
- i(C1[S iq޻jg?%q9vOY]l%a7:$,%t?cN0Pn }~:[<]~URR\IX5yISC'Hx\SAg\aM\
-DaZ7vDŽlt,Cieon jo B >s$a ntƖÏFv)Ik9ⷒl<y8H $endstream
+5326 0 obj <<
+/Length 3379
+/Filter /FlateDecode
+>>
+stream
+xڥrF]_˂U&KWec[k1J
+)`)|oBnqPf U>x ̏r H{@{~Wq-><DZ{--GT_O{"3ykCަ^;u\+>[`lәwBe3t#[bht
+ÚrI762j`6ddtw ̢`›hK'{5Wa?jni^Mk"r8(HDv턞d2
+]~6N`x >0H ldԢסr}7\QDq"6,t,0t$.L"7o@uw-uOqq9Fz'8I
+A,Jjݞ ی[
+Pkl(h,d__?R\!H|%a
+2t`e@_bLP4RFw_>Gy\ 9*Mk)90#X9)>bg()JE> 4\
+
+}1"masqrnY0Nd
+ԣU(e' Ն^_`w| 3ڲvn.9fC*3Ho7AV<kD ClO9kj.[!#{"
+Pw|ch%[ၑiG'd=DX<
+V  6E5U%ՁHTh"mTC<el40
+P\AD0S*;"We.c uɃZlT9%ˌi !%*[~$z*:ЦCg!#̱02((3QY,5Q-6ZRijo[xCB̊>~b[Q4'& LKݺ2vD+dӾ9A|Z@\Z$\܍[h$za H K8œ@zRO %p: Gasֆ)~llqf;wStͤV
+'W$^1
+
+|GI}q:*70C Grl\4´Su] I  \^!(l{JRpO;w'âQz~JE4fT$g@{c<[(i،Q4@Une#rMdGbh8b,Gн~,<|tA:W>1gwc{CS8$V;B 3d" 2=|U M2NL}p;n:ж~CN  ϱ36Eyݶ3. ;$7FMv%Ya&LeנD*Hz(%mHwgt‷zp5&2Qu!E3Wn {C[~dfc c7|Qo؇Kw}vD6bA`7.sq߁8@
+5&l\x97)FV"bȰ1>'b`p.KivPLP'N>eͯ88Uf_z~nF&#+y-I^Z0+*(BH kmyH"O~Sk򨙱we-w\Y5{}0[]V[5pqZe=8PGR/:z%b)(2~KxMo ȩJ,m}3&SYn:%7fQ4lv")9;
endobj
-5000 0 obj <<
+5325 0 obj <<
/Type /Page
-/Contents 5001 0 R
-/Resources 4999 0 R
+/Contents 5326 0 R
+/Resources 5324 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4982 0 R
->> endobj
-5002 0 obj <<
-/D [5000 0 R /XYZ 85.039 781.388 null]
->> endobj
-1226 0 obj <<
-/D [5000 0 R /XYZ 85.039 625.193 null]
+/Parent 5317 0 R
>> endobj
-5003 0 obj <<
-/D [5000 0 R /XYZ 85.039 581.115 null]
+5327 0 obj <<
+/D [5325 0 R /XYZ 85.039 781.388 null]
>> endobj
-1230 0 obj <<
-/D [5000 0 R /XYZ 85.039 526.667 null]
+1274 0 obj <<
+/D [5325 0 R /XYZ 85.039 374.861 null]
>> endobj
-5004 0 obj <<
-/D [5000 0 R /XYZ 85.039 507.795 null]
+5328 0 obj <<
+/D [5325 0 R /XYZ 85.039 340.115 null]
>> endobj
-4999 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R /F66 3242 0 R /F56 2890 0 R >>
-/XObject << /Im1 3957 0 R >>
+5324 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F62 4052 0 R /F41 2998 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5007 0 obj <<
-/Length 3961
-/Filter /FlateDecode
->>
-stream
-x[YoF~ׯ
- $}d+>Ejș!!'ddߺٜ$ 0iQ]]]m܃y^Yvܞykh̗yzIM/g_}D^~XQEꇛŷ.0t̽Nyw_yMs^[\^ws{lBgqdzo ב%!/y%yve|{šG|7gg0T-:Q3+=̓xOABACMl 
-K5bzeU_)en]mmąnUn' ׬Ϗg65ΚyNחUU'|gu{d}TmGA~gnCq5Pj*=(I }i`j_wcpyԊ)lr?(*۟v\G 9s,!oC2(66͹D~<^ƱSXXCl܂-/c$Fu]V<t2QiuV}HN%B.ԦB٣&?bz3}w=R^W >k=H񈆀md[L+vZ< ?;j5E[r4CPqf_j}@7KW%Bnk$Teȅn5\Y&^"{9
-: S<3Z἖a0I^5kY2L73Ư> $5FkVw-7c\ թ@-S.QD`82]$h \-icG#dtS1 1 xT9Uo7U;O>(ȏF
-lT%ئǣv ÈB@bꫢ4hnCx$i;"O*S42KI!DXU6dnj^TXсrG*CYuHJWiiM!M
-a+Ni":%a.1s N,fӠCY0Cx>͐m$j,ؒ b^+ [uLr@/GY(Ҕb`=?^ !!, ^v|us/W3$71&U`OK#1-MKj?0=Y
-["GfT~q5n#*KhT5??w;&}ESH
-=qa 3E!2TQAxRCJL"Ʉojv?]2Bݎbm62D7."x " ȁZ#{YcT%sxsЦbSJR
-}JVnݣw]UC7Ji_L+9d2-n X+`Vq1`.þ-{,th .kO9x?ЉH߱Q统޼԰ k##-+
-dwl^V]OT$ TQ8ߡ[jO30bZ 1-dfc*<{c1nLfo'zw ǑRX"&VUi )! ֺCu3W}$P.+9-eDGJ_ tO 1َ>
-K,ځ౺N19 XowSZ#
-֕t3N(0
-p3C9S ſ'$
-4ra,VO{]
-qUm{W'^ ~F:)>[&]Vn'd?37?+$)t;O3(Nd;!j??]%7כZ@M%<%'JL:Cel\~?tb] ̓aFu 8(p %}.76?py zψ2ai!YŁ mP݊iIF
-!DRb]DRIPD? [FV'@@"#2hC,5#]=S9:;rzy$\6suƫm:&`/ї[t3>ឮ6 O(+Qp!,6Dy6%:ͭ9@ mfevifap2T砊с>,+ac<TѦ+?<s&gvduݸc%r7MMXĘQ
-"ku!+k"8kk.ޠ+$Ҳʓ(ɊPk?GZo$ hQo t+
-R:~[z}27FkH[|5y
-b{tWaOv9E8C BzJ8AzULdIԺ-s(Nht`7jq0!C{!U\/GEG^+#c$Lɛ(z7X:c~Ti=*9SWV<9J!( L'Ý#8"%U K|J"'@PXyxA.ǐLg"ն[s:0APj<
- ]F:¬ rNaɃu4D>iDQ<oJG6iң %~="]ez4iFLM2_@Hc-6=Ag eB3{Yeן={-=% *GS EIFbTB>SG:yN ;EKjݺ FD~y T \/<*F?0u61ϼCFm 9dendstream
+5331 0 obj <<
+/Length 3307
+/Filter /FlateDecode
+>>
+stream
+xڥَF}b0X$cG81O]$y%jD"ͦDi}TwUU
+^gT~fz
+a懫P t`^]|0 یh?nWwX*04ͼ7^}Yޗo^}ػ/?- 0~ƹEşw?]}gɲi?5U<~v0|+W_mWͱ@י:Agx_1uX:Ey`,Ka +H
+8Ha3!|N_UR* ~h-2Pn
+P`;R~xNH=11錉Ѭ1 5ʹݒTkJ%[;\ ]0ؔ!AojMhpŁ-ZƘ-}OT4'Jn Ö ۖ[LM&;v{r+
+u5
+C7F. :T6*tjJ^ѬqpB !tFOVO Po ]pŽl[_ZʼnuHutU[Eh];5g2țAD# R75|_eA2dY׹X$ȁ抾*{`Y4wݎ u &<S+$d[zA= !(ݻ!~jbqBLPvȀ0`Tqsa O ][A09ǡO>(\Rnx(]A._Q%S PTW"gZw[ m{!U{Zܔ0rc8,')BY&*lTf%HS-@y4kv
+)t ;Ǔ@ r# ,Cc1E7ώɟ$.3w+2dLzU&ZG޲/ [xZwŷR6P'NsYi);+8h^s^9y\BhrqV".{?t574ǪIŹ˺\
+]n(.RfEmjlu#`GM5y 488ay 3@i%VÎ1j7" j_: j0`cVBy#I%ayaR09QR^[!quRS5J~⥇H4}ܲ& O%}8te}SuM6;'~7:̱28q2Dك! d<'P7J/?_rmG &s3_<@'9$̯gĭR|9~"C.yڮ Ydzw(SGQf
+Nց!V⮍$q΂o'猟)pcA<p570v1AXưF[UNt O.,KV%s@k06bRWZB*=7Y+
endobj
-5006 0 obj <<
+5330 0 obj <<
/Type /Page
-/Contents 5007 0 R
-/Resources 5005 0 R
+/Contents 5331 0 R
+/Resources 5329 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 4982 0 R
->> endobj
-5008 0 obj <<
-/D [5006 0 R /XYZ 85.039 781.388 null]
+/Parent 5317 0 R
>> endobj
-1234 0 obj <<
-/D [5006 0 R /XYZ 85.039 761.463 null]
->> endobj
-5009 0 obj <<
-/D [5006 0 R /XYZ 85.039 741.134 null]
+5332 0 obj <<
+/D [5330 0 R /XYZ 85.039 781.388 null]
>> endobj
-5005 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R /F66 3242 0 R /F35 2880 0 R >>
+5329 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5012 0 obj <<
-/Length 3667
-/Filter /FlateDecode
->>
-stream
-xYoݿBX0X yhGNpN"-Rz_P7so>Fƒ?Ff$0Mݙ|^ܞ}]f^mUU˷7K߹zys ݏWo+߹z=#̏pn^ZWX)W!_g-
-gfڞgbwЍT(ofS ^5J$=7MAُfPkĢ_5a[N($Lee.#Y/qq Z(7TzuW5C 7
- 0eM[ ë.WAܫ6|e:ئMC!
-4*n}^3PeO]}
-X%Z,$$C#t; i'g2KO3^ ϻ|W:S
-Jsgp4ywL
-nKoDIJG AzKw2gIh\YU-­Xo
-6-5*eUCFGcDTA)7u_L EkPYQhQ3Bc'u<H#EMC͒SUG H낕%oDwlppV<~KF%^1R(l7{Limr=Gn蘈,X|hu v-D ^#G_&nzÏGaB0c&:1GGa`ym(1 LՂM ITW? TFdHd֢
-HpJ~O%lj-/|܄knzjƮQ&y3RgƑѪӥ,ޏWMC0iCMxmD\BnsqEdOA-P!REYFI$(pP?0T8h&IB q/xТ^-Xc"ׇ#6g
-dqjU :ަj(y}>W".`J3٢2 6KS˴۟^!\!X!HNޡ5Eqz/; +uG$CT&q͐#0sPp7C,A)M_B7S/(.!C.g`#'N]?f8ˮ8)6vAtE%|dDN`Cu} af (˂L
- $!8ͦm
-f`jf'f%BVCύ_8Oۼ+/w81^O q:,$CG-[p H
-cu q3@NV/AG4cBNJw#:X;pۘ5X@q@EK}Yox
-C*Trq^[(vfN
-_s r=`?UQ^Wֹ?ZƗ\Ӥ2B7DJ(is+2H!2'aF9?i:B߼GP)GzUs |Ur;I%Ms*=CcC&qۆn44`tXtղ㒴v;lK\o,ɤߞw{҅mSɛ-ų*"sm&P)EC)D# [璎^蓴YЩ16N/{]Oz7T:>38@~o oKW~r.'`*[ZU.{Kᨮ #G3ul̃"lj6b
-N9nkL0|ǙLAd1f^Mzz=1K5s4`jz4&0*)pR)fT2_ O~8̞8HZ],{zK <6
-or esțU՟Vo(EvAbuq8B+Ã,cBwJnX=Zm4RrCwa-"4yp*7?_a
-v>0=qV~ʂRa7eiU'*D piʡmSo|wc1{gRuVpv.l~zm:}^C"B&B~̦SnI&zNz8\n^+|wi&>v*a=g?cΩ0vX郰R'֤ y`ާ͔n>窟ojߏ{<
-.Nd"BR œ
-y3BJaZEZQxE'=d R,sPK?d(R .5e2Hl{y/Oj:#p_
-PXF{8&H<!88]=9o\cp"xD)`'*o!y҉o9kjؙ\#FjLDe0ӓGS7C9u)D L7GyO彮Aȯ:tq`ۥ`m^,?m | F w2;iQ77PdlS\7kj(9'}9'Kmg&
-y(h3c@7r8C`3r9W>l
-`$K.G$i!v7#=vE<~#Ȥ!π!r3Bg(XQ1Wj'sp}
+5335 0 obj <<
+/Length 2999
+/Filter /FlateDecode
+>>
+stream
+xڥYoB
+,X\@[ln$hPJRqܿ!E֜73o{Or&?9_dq<[nOV~>baInO^™~"?'MgOˏړ?_DQ읿=K-.һz3#ͯpmkvێB`!As鋘_Nx
+`𳐦T:^R0aKkϷ"x- Enn.*Rޱi|*kFu^5P@i Wxw}8\W$PzEaBMS !\ɇJ0FW%/:|+oJ9a8hЀ/xA*@<'# UBN 8J`׼FZw $'KN &92 hWCHY|I ڶqw(eӛ7o RTuK:Sڣ
+Q22.`Xr
+mġG݅)-YB;5-ke=ОyӦ|vr6`wh|xR<Y
+Evi^tE(@.&O؊:A?ߒ<c+wm {[9qV7v/b:N
+bN
+
+ޖ"5CCQ`.q
+D?L(F۲vWm!ܿTC˄#Sw!~X%FӔg(yPM6N%o)-w~ N) -dX9: Rm &^3{NUFgf1-́p+n۠|*٦y0<ΐ'"Mnt ɬ'\
+! ,>fWu=nR˭%T!es̅Jn햔AsZRP൵MxH IA3$KTK^R H.> =`/jcjE`aW6O^/Q@ڪ0ͣ}կ
+@v ws>LR׫˲jw6AF<#/Ogˏ75t0;jA#䛻
+.mgꏔpl ]}}L2 HllOX
+hظ
endobj
-5011 0 obj <<
+5334 0 obj <<
/Type /Page
-/Contents 5012 0 R
-/Resources 5010 0 R
+/Contents 5335 0 R
+/Resources 5333 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5016 0 R
+/Parent 5317 0 R
>> endobj
-5013 0 obj <<
-/D [5011 0 R /XYZ 85.039 781.388 null]
+5336 0 obj <<
+/D [5334 0 R /XYZ 85.039 781.388 null]
>> endobj
-1238 0 obj <<
-/D [5011 0 R /XYZ 85.039 651.823 null]
+1278 0 obj <<
+/D [5334 0 R /XYZ 85.039 761.463 null]
>> endobj
-5014 0 obj <<
-/D [5011 0 R /XYZ 85.039 632.951 null]
+5337 0 obj <<
+/D [5334 0 R /XYZ 85.039 743.459 null]
>> endobj
-1242 0 obj <<
-/D [5011 0 R /XYZ 85.039 455.095 null]
+1282 0 obj <<
+/D [5334 0 R /XYZ 85.039 484.308 null]
>> endobj
-5015 0 obj <<
-/D [5011 0 R /XYZ 85.039 431.777 null]
+5338 0 obj <<
+/D [5334 0 R /XYZ 85.039 447.441 null]
>> endobj
-5010 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R /F14 2895 0 R >>
+5333 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5019 0 obj <<
-/Length 3923
-/Filter /FlateDecode
->>
-stream
-xn6_%2a%%/۠q/E[`yF͌Jޯs#%y䤗`FgV:?NH,;^5<?dDxlTXzzy闉9B5 \<{qvqw uetY(x}%vߝsyox󏋋Ww˯0$a臟QtB9TQ-o*gyIn"U۹1qT@=Rb3JdC&^M‰4xM?BV߷s ٙ'Bq8 VXޝYPJSMS*]_l
-
-
-w\XY EOpwx8V&L]q7sX+i)pF:Rz-@Pl+l5ܳbвc4)j);Y2wXo-1Lm(][6}٭f2Lt3UY̨t[VTR8м-G BY[AG-W/(@rH6O}#sNvq$?,Ѝ
--mMଖF 5xDf+B1i=O{wj-6{Xu~ m,! 7ޠdظ\ (V.pSx$y(4-?7Wҏ W; a Zl-[ܢG iKb<DExx2Rq<іO{- BiuL50?Gr&%g6"PLXޠ~9a ږ/
-϶$~kY]Ļ}P/b?` d}B$2b]ϥnJ'(`̮Zo*SJEb,ٸɿkVss,NzعnN
-;o7e%2[/Q@0ۊ왷nR'K嶺I/fK1ZQ~X|d] B۾*;gJY8(TY, <_kƦ=ۋ8ZʉpQۆi-/l;B@jhgB@9C:Acc{å ABH#VAhZq8}{MӚm8Ggug FljHƭvQyQws[vi٬BpP8y]7\DiUn+k2iߞ<a2WKch4ϐ5ծ>w`
-S6<qj+$i-U@AGjk0èfsJnu6\^8Jg 3S`x
-]$aºk|-2iD[
-ʢc3<H،n5X zV ZmP)\A9&1p ,̺j)bm`P|t,O|D::3 pnnD 1c,#eT6 @*8^cgJH(8Pe60A۹h@EkB#U
-0r:dEP|L".r!ScD\աmRspXwi;R҈GX2cpD8ȱ_i>W\&YEO#t7M<hx7mbV]ߺiF+Kb7qk)
-bS\DK^xvTߍEsnHZ!0헃?Fo#/{A|fS'N'xixև!N9(svLEY<ʴXemq'|}29..Bj!^8X{94$܊Wzom<rs V^H{vc;g/p<6c [؆sVr斵(T(J\҈K`6M7|Нf;
-֛̉3D8>tWNU
-2#Į[q֩Y*RM;Jh$ud؀:WZeHGYt&ZBUGy*/%D](${P'ewr#e2gc}$[yw@m=t#OM..o
-Sz~s#fiOIL5<$kt(εD\L.3t@nCRr.4͍vxWbٴtsZpo9)<V=flQƎz<{ŷ&9Fpβhۻqđ>愝޻B ЋX&^6n(#h(8 y `(22#F"D![aQqtbj.J&WzpZj(^v;6 I@;؜ -)m\P3|O!pLٯ81Zhz-qg+,Z ;׍r5 B44t!|V`Z8JeDZr 9(o$)$1 Oad+$އߣ>k#Ft})(hGohpqՉ$oWBW`=|pM+ߍuGhL`c2n9I Tq6Ys%
-vf.Ŏd U9h,ekBE*9N /rCZ0 ЧI淚Z2K4Z#.yJvL!$6YKyL K'7))#bl]t3:PGNp1Iuwzqv$(gGB9ۚKb_-%0A$b,z~]vPE2K"8<[Cvl bF
-:d' tڎ^ n|6>O0ޯ/o})BwjA3.3Eu̩+\iԱVZ1+s5ŪW10syXRC!xatHHT4% j(>]+y
-*G'LyL0ˌx=~`^p2[:~X3ʃ
+5341 0 obj <<
+/Length 3197
+/Filter /FlateDecode
+>>
+stream
+xZo6_KdfE{(vvM9)b[$ooHѱ,zb+~ 9fӗy¸r<\l/ywb.$s$UwaD$[f8<3|y{Lp ݟn~up;G~YwᄏΉůKPE~Pi^P*17/~t[Uc*H\%y| U,ʃ<2QPn6p
+q؎Z^Kb\;>Ȇ%/w]0{8屄f[}t+Ȱ'$+gQ<濅I@EؐpK0;~hw=^P3FmcHqiB7$sc
+}SS:MKτ#9Ipi-Uy@N=wVVC{]PM7+f,w
+
+nmU.yhF~ꮺXW5Uyʾnvl bSW;ENI9L3"u "1ߖ#M,a?Q=:K-Z .B\_Ld[McQɝH^SrwM\X(8
+z`]_2٧c[o>C ZB~p$‡!QďPJx Ѷ^ Gs'sP 6t0f
+H@۽sqq m{{{^"ë~D5rW>G7b"- .X=}'+|=ܻ
+$
+G Gj~cLpg{ճ톂]UkӤOh@g%*Mc4gQc.9BѮV'p#QVsmE0=0J%! مZ^[*)b1=FgzGl65wAs=:<eͽk
+F+io
+s+`D|Dv vQ ߟ]=R}gL3a}g_=ae 8=Z8=,0I&aFJJ=ޠdM!u t/愵l!qd1gUe'-2Rр7`أ'[ysxf] y;%6Aq("Xd8 mP6>UFuُQ .AHmۍxBh {aU"}=8StфxypMm:&0X*6&HrRO6OW@L9
+C8KY+7#+eGLQfKuR#ܓDŽX(6u
+2;n,U)/ضV6XP 8[
+ t'O[1.^.OEhD76̓_nOkVB%^N2<*b:G3Z}P/yANr"i>p!x¦{|WR~ ;"Ff\B&{4ge4TC bfiPEj}DHVjr%PKTt
+U4h*dZy
+ 2jp٠)nNjWlj[DE,~($ yD H␬e C JvNi(?EC[7EiE.848(mEϲrV<' F,G@YJsL(BԼժjyEQs֌,6 Ϛ93ؽwgm]lg[.K [y`UO2s~f!utfIHhF!!b($LqbH#q+q/6$Ť1z4ITbq5F@$=f 4E'kQ *9T0ESd!ǂL/ Pl8,ꑓ8lfBۡ<y
+y O#? hl_`| s&'QZPKy_j"sendstream
endobj
-5018 0 obj <<
+5340 0 obj <<
/Type /Page
-/Contents 5019 0 R
-/Resources 5017 0 R
+/Contents 5341 0 R
+/Resources 5339 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5016 0 R
+/Parent 5317 0 R
>> endobj
-5020 0 obj <<
-/D [5018 0 R /XYZ 85.039 781.388 null]
+5342 0 obj <<
+/D [5340 0 R /XYZ 85.039 781.388 null]
>> endobj
-1246 0 obj <<
-/D [5018 0 R /XYZ 85.039 761.463 null]
+1286 0 obj <<
+/D [5340 0 R /XYZ 85.039 704.69 null]
>> endobj
-5021 0 obj <<
-/D [5018 0 R /XYZ 85.039 739.701 null]
+5343 0 obj <<
+/D [5340 0 R /XYZ 85.039 665.132 null]
>> endobj
-1250 0 obj <<
-/D [5018 0 R /XYZ 85.039 626.864 null]
+1290 0 obj <<
+/D [5340 0 R /XYZ 85.039 552.746 null]
>> endobj
-5022 0 obj <<
-/D [5018 0 R /XYZ 85.039 606.274 null]
+5344 0 obj <<
+/D [5340 0 R /XYZ 85.039 518.606 null]
>> endobj
-5023 0 obj <<
-/D [5018 0 R /XYZ 85.039 427.349 null]
+5345 0 obj <<
+/D [5340 0 R /XYZ 85.039 326.61 null]
>> endobj
-5024 0 obj <<
-/D [5018 0 R /XYZ 85.039 413.8 null]
+5346 0 obj <<
+/D [5340 0 R /XYZ 85.039 297.001 null]
>> endobj
-5025 0 obj <<
-/D [5018 0 R /XYZ 85.039 400.25 null]
+5347 0 obj <<
+/D [5340 0 R /XYZ 85.039 269.903 null]
>> endobj
-5026 0 obj <<
-/D [5018 0 R /XYZ 85.039 373.152 null]
+5348 0 obj <<
+/D [5340 0 R /XYZ 85.039 231.376 null]
>> endobj
-5027 0 obj <<
-/D [5018 0 R /XYZ 85.039 359.603 null]
+5349 0 obj <<
+/D [5340 0 R /XYZ 85.039 199.646 null]
>> endobj
-5028 0 obj <<
-/D [5018 0 R /XYZ 85.039 346.054 null]
+5350 0 obj <<
+/D [5340 0 R /XYZ 85.039 170.037 null]
>> endobj
-5029 0 obj <<
-/D [5018 0 R /XYZ 85.039 332.504 null]
+5351 0 obj <<
+/D [5340 0 R /XYZ 85.039 142.938 null]
>> endobj
-5030 0 obj <<
-/D [5018 0 R /XYZ 85.039 305.406 null]
+5352 0 obj <<
+/D [5340 0 R /XYZ 85.039 102.291 null]
>> endobj
-5031 0 obj <<
-/D [5018 0 R /XYZ 85.039 293.978 null]
+5353 0 obj <<
+/D [5340 0 R /XYZ 85.039 77.313 null]
>> endobj
-5032 0 obj <<
-/D [5018 0 R /XYZ 85.039 278.308 null]
+5339 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F62 4052 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-5033 0 obj <<
-/D [5018 0 R /XYZ 85.039 264.758 null]
+5357 0 obj <<
+/Length 3214
+/Filter /FlateDecode
+>>
+stream
+xr]_A`rv~Ii/[VV%).c hU~>} 0AV\AOtOwO_#3ҮeQ.gma #KAY8n/^KҙѪn'Qqf_\^߾X:"2w7 \>?\],MtkGǹEo^  /B+WGke`zL$v]]\ߊA
+|tZy<SJ' )*q/&b$bJ&Y1sх*xD[oYk𮬚-ÛѦnA_qGݠ^6<}BVcb)ۆ?"jaw٬}:="`ةc5)3*,Z&,c!!e>U8Dxtn:p 4>>_NVݜgQ%J+P3ѯ:P5#=<@yE3ufLvk\Uo"g;&*'fͽ3H+Hb+6duIDa1 }ypG2a9$k!R0x@9KAS #p@u[e~s`;SN[ HɎAyɈdbU+ނZm~+ @[Ole܀VaneZAS &tdIKcpȠal7b+;mٛG@C @!J[{:>͖Z43u\s m9mig'M Q- ZHSfTnr1îsui!ߕUג 4bqHޤRv#ssZЂtIA!6^h,A,At)P(Qؾ!
+5 M)%"Z˸:,p%pYe8'qh|JY:K++$iTf%(8BAZ$5f_JDǥ?z;Pry0:bsK^j-InUVQ5!II-d
++“>LK6VM(9/o^|?ʚ]=}P6^VL:rTZӦ`-/EeL8MeK7;9!7#P,
+@K-ԟCЫJ::UP \88S'>߽i6cVn\M*&͙01%N@c|6ydޔ(WhW{D|T/Lؔ$0u6jkpp4~"Å)z|AZk^V%95^S\\qB"-8/=zڎ {L^ r5;Su
+6X Wd4^&y2Os\6rLT}:W&I=m{˵_C64xo'!\/xAA:J{T qwc:-EÎ[SԪ,9DK E؀ӗ8_J: wh.O2EuW;z!Bpx<.WZ
+&,c(G۔{XI6Yh}fr.=B/=2ߗDx.L4yXL H~wV1"ˇS5of;(q\55'T1yĂ=t22dSEK?
+|$u
+ɨ<IeX]f̌qQ8F p3{
+endobj
+5356 0 obj <<
+/Type /Page
+/Contents 5357 0 R
+/Resources 5355 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5365 0 R
>> endobj
-5034 0 obj <<
-/D [5018 0 R /XYZ 85.039 237.054 null]
+5354 0 obj <<
+/Type /XObject
+/Subtype /Form
+/FormType 1
+/PTEX.FileName (./xslt/figures/tip.pdf)
+/PTEX.PageNumber 1
+/PTEX.InfoDict 5366 0 R
+/Matrix [1 0 0 1 0 0]
+/BBox [0 0 27 27]
+/Resources <<
+/ProcSet [ /PDF ]
+/ExtGState <<
+/R4 5367 0 R
+>>>>
+/Length 5368 0 R
+/Filter /FlateDecode
+>>
+stream
+xmYK, )rEHQCxa xf~ _AefU (2$崣_~keqUk___cV,n?cO?푿^^*[`k=qKz]6\Ľ;|x5ƨDzs4݌yrZ![֘дqq8{߯:ڦY߰bi7b kAY(S+Z9KXXQeϊ#Z=OޥMhgYq̆SF!w|`an19143[q
+'z@T} "eKTFRt@Ra*dP;o~6n89rb9*D:2RB8*c4t0(أ$`mԂq!aA&HX6hQҕ[f 5
+ 6 oʺF^{̩R,rG9r)IvZ0fv5yGSS1>JXdLC`YyuϞI N9Ѝw塷<2d‹8o]I+s$>c
+
+mUN躆y!Flwe"[!I~/L'sԒ @S\^2b
+s&v j)CMhwC4MiKWV.\VqJQ|dL=B=*qM'*0*2gO1|:r
+
+˼{)n~\ڬZqp15LIcƠԤ9~z%g^ yNiۓ:%NkjPӒ{ qo@B%6l?򻘫tTMbH
+
+J@Mxk[%0+ AE._ y+~s\`
+endobj
+5366 0 obj
+<<
+/Producer (AFPL Ghostscript 6.50)
+>>
+endobj
+5367 0 obj
+<<
+/Type /ExtGState
+/Name /R4
+/TR /Identity
+/OPM 1
+/SM 0.02
+/SA true
+>>
+endobj
+5368 0 obj
+2934
+endobj
+5358 0 obj <<
+/D [5356 0 R /XYZ 85.039 781.388 null]
>> endobj
-5035 0 obj <<
-/D [5018 0 R /XYZ 85.039 209.956 null]
+5359 0 obj <<
+/D [5356 0 R /XYZ 85.039 761.463 null]
>> endobj
-5036 0 obj <<
-/D [5018 0 R /XYZ 85.039 197.012 null]
+5360 0 obj <<
+/D [5356 0 R /XYZ 85.039 745.394 null]
>> endobj
-5037 0 obj <<
-/D [5018 0 R /XYZ 85.039 183.463 null]
+5361 0 obj <<
+/D [5356 0 R /XYZ 85.039 701.152 null]
>> endobj
-5017 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F56 2890 0 R >>
+5362 0 obj <<
+/D [5356 0 R /XYZ 85.039 660.504 null]
+>> endobj
+5363 0 obj <<
+/D [5356 0 R /XYZ 85.039 634.012 null]
+>> endobj
+5364 0 obj <<
+/D [5356 0 R /XYZ 85.039 606.913 null]
+>> endobj
+5355 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R /F41 2998 0 R >>
+/XObject << /Im11 5354 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5040 0 obj <<
-/Length 3016
+5371 0 obj <<
+/Length 1720
/Filter /FlateDecode
>>
stream
-xڽksܶ~EiǼ3 [vk+9NHX35
-' :φw[E#oA8KJ!j{S@9UNBʴd$O'T7XKKX-5=Z>C *ﺢ";#>Di1*2m;H=38vJQI s+NE+~2><.Yw,2 [>2|Þዑ8 x*5\3r(@a9ڷḆ
-M6{xvdv?82oah0惮Xc{t\RTQ؍7ت%-/`"Rb쁨 ~>v(PKȑ@{YO<]WD&j#J)4geM,QRWP@qMNuvh͜Gl/>VM/Xju䟸:^TY!Ĝ#'ēA8稠z:SkIZpFe)*^gJKQB
-%W9VT!O\}6:[yֺ5muJբi1 mA
-kcM25ij+,,<i)igم ҹ63E5[^Y5{@S*07M>
-G>/e"mʂ
-P;ם!(B2jg<A/O<JG\S"~RfVb֒H`cc)I;;BK+,%ؾ`aI^Gmh -FE}2?IMPB Ov/ 2$ 3\/UNt^njI8MD($g]k<* `ֶp
- ma0w3ĥp{g Ei?`9M;C~8A
-g P~fBi}mm-c:-o[ '
-_Dk4K+Cnw͗
+xڽXYsH~p
+ ё}0 G ^,ER-:iɿ>F;YX5c&C ~0C?øX%p^ ks eV8_mHӕp,ٻqChqf2 cvv2y,ט뻳h,,2[ǘ>_ {zB> aX5-S
+yg:ɅhZxq5L^,-
+3ӼZ;fQ2fMgL[*Sҙ0[ULmZIU Khce 22aT.sTQ0laYG Jrc0P(ka@Ḑ&C}V"l g:>':S&eTSr25*ꄉ,i6$~J ;Ԛy`.]1Wm q6!agߴE X*" (ϸBСQ
+F;"aɷRnXoHxFfPtx%ټ-1/Ut74K^MOB4tSw8&trz2Su 4K2Zo̊BX0a3r/)ЉKqJ5\%{af~)Cs=-pGxa} ,9Ԛp\xo)YJb?cX
+eWxneZQ%#}~~"Gt*Gm"* )2_]_C_8|"m]2poendstream
endobj
-5039 0 obj <<
+5370 0 obj <<
/Type /Page
-/Contents 5040 0 R
-/Resources 5038 0 R
+/Contents 5371 0 R
+/Resources 5369 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5016 0 R
+/Parent 5365 0 R
>> endobj
-5041 0 obj <<
-/D [5039 0 R /XYZ 85.039 781.388 null]
+5372 0 obj <<
+/D [5370 0 R /XYZ 85.039 781.388 null]
>> endobj
-1254 0 obj <<
-/D [5039 0 R /XYZ 85.039 344.943 null]
+1294 0 obj <<
+/D [5370 0 R /XYZ 85.039 761.463 null]
>> endobj
-5042 0 obj <<
-/D [5039 0 R /XYZ 85.039 326.275 null]
+5373 0 obj <<
+/D [5370 0 R /XYZ 85.039 741.134 null]
>> endobj
-5038 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F72 3966 0 R /F18 3969 0 R /F14 2895 0 R /F56 2890 0 R >>
-/XObject << /Im4 4878 0 R >>
+5369 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5045 0 obj <<
-/Length 817
+5376 0 obj <<
+/Length 1655
/Filter /FlateDecode
>>
stream
-xWO0_1M$1vl'N=u){)<-%XϮ T|mBR5>~wSHtFĞ20czjP
-G P'
- ̰jeiS*+
-u+e$ !8%/xAv!u)^!6BR ͩ眦UUA=fSڮ( .EWbI̳Jm置;jobB}ÂׂVmә
-^:5b
-HIPKS<L`Zv'Q["29Do]nkE xVyYygGfTa><4_ͫj-g<MEn;u>ٞՒNy-y5
-R%F[ԭǖO;ܗ[
-!/<IkUu6<'t79)Iw>&ʅ>1۬ڬW%V>lm)}۽{s,Q25ai`ڮ׸4-\q"nEkC9L/.7rBظWVuU9em+ dmk: 6e
+xX[sF~ eWkf`R(\씇ŒmJrL{.+YNDOΞ=\5WWH@ U> 4RbjH=W7VR2/G>p\=^W|dT &SDY[<r9,?\[Nʺx#|&e'V L8ߌa0>\
+:-Fv!:n@=R?])\ *>&Sv:ixRMi6x:I$I L7iM{~Ir@+·|ʲjIaX~y1_^2}VǧIwUZ$SzмЌ!c9΢M}v%?\<!)<9?Gq'JwMZ_~wl ?ɥ|ˍ?l'3f4jXiVeή)W\hQG}~FEwLJ}[ t8 ooW_Zl8Zxqg;^[ /H\\+ ۈDܭcΓ3!Q\n'$
+N-Q aW;8!pF*6VBއقƁmEJ]c˺AVMpQY4w{HܣUbf%'1`ALP!b>ƺ`٠҇}jRIm
+ei\'\d L>9:P)Z5U/<7?r<ᨰVsN?6:%
+x$iWd$Ng,Je<Ik`zDI}a4 %6 6oA
+[^@/ `Zߠa]%*'YFZ&ه>L$nR*2IV)AO
+wWxj.b
+ohKrYˮ
+BT FmNp-Ku~?q"p0*7ءw/zJP˄ \SCRAz,Y]ܦY& _,ec]ޥ
+{0kMP
+kV,h5[ z IȲendstream
endobj
-5044 0 obj <<
+5375 0 obj <<
/Type /Page
-/Contents 5045 0 R
-/Resources 5043 0 R
+/Contents 5376 0 R
+/Resources 5374 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5016 0 R
+/Parent 5365 0 R
>> endobj
-5046 0 obj <<
-/D [5044 0 R /XYZ 85.039 781.388 null]
+5377 0 obj <<
+/D [5375 0 R /XYZ 85.039 781.388 null]
>> endobj
-5043 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F56 2890 0 R >>
+1298 0 obj <<
+/D [5375 0 R /XYZ 85.039 259.884 null]
+>> endobj
+5378 0 obj <<
+/D [5375 0 R /XYZ 85.039 225.744 null]
+>> endobj
+5374 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R /F41 2998 0 R /F77 4855 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5049 0 obj <<
-/Length 3313
+5381 0 obj <<
+/Length 3206
/Filter /FlateDecode
>>
stream
-xZ[6~_a c(nv&@Ŗʒ#s_BR[, 0:")\?ZL"T&T2M'E4/&*]-/~HDDaeX_W],_ΤHl>OW?/OEgR ~DpGG77oo`9}륷
-U"q .~=a?]DQ(lPZZI^]ԄGt$@(LS,Ȗ_wыL)amYO4苖~T5},O8Dw[{TZCz =͡Zs6G&ˉc?NgBjfʮ5+P(HG8fΟ>/0ҐUa;UfV 
-/HBFX
-VN<F;]ѯ+8~*
-#F/$.a:
-
-i?1R'.IKp8-4c-|$+5Ym~#Ey5 BV>͆UlM̴|.l`
-,a8C3 e!PRu,4̃x`X@ܒLTFa0#Cn$w$bT=Ps/Gоㆼ{K1F-?]]:8ICe]} WMS{jiʚg57D &p[pdn+ "9}y]xj[TWp85ta uK8qo%@G !`sLܜ!l-v <%$,nn6AvY_mC׾y9edBEa`c
-~fulې#UOY<<Co>#/@*Ʒ`d}} Bx/4 Sesa=Oi-۩K2G}
-Mdc
-QYh _r|@#9>%#K0=p\!Gd'4R9.#?|~߿qD:$.W#$R* ꢇdSe;`<t]U2m;z0jq@\bR ƹ#C_<
-rX[g=Rw^"w#3ñN c3@9ȕK?SoQ9}̄a
- '3F+?lI
-/a
-}鐂0`9yǙݝ^J*h?{8Ǔ;@xՃ$Y^d)hm: 3 fa E<S
-~_~Q>YIUI*bSh D \R8`3 H},mtx,"8;p9
-9^r|AF8=v#W<+SOB$Ӫ4(C};<S&1)0d=WFuh9̔E0Nfޏ^sR&6&l ~e>^sV tP >XuZRդƐ\"~y_*>DP)X[p]8-GHc(f|J\SRc\BJ@G1U3XvgJl\ՠ*0l'ONI<iK30bGՅ{Ϫ \- 7wGΉ8d~iEP+*yK-\Eb-No=fy( : jjӄXF)BgR 668̡ӁۢhԕdӚOrbؐ11 +VE\x,RZʤTۈu쾉4U|Ά<.t!4F !9Ss-+Ek%4)1sՠӯt@h
-NN.K%g&qb?=<ܵ|Șc8i͈evt?Z;l$4_,/!bnj^}FGWhEy*F#n>W& tp\þ 1z<SES$X9lZvgDٷ 7X ƕ<:W/Lp2∷DS0
-JdU oԂTΏUUK+73Ԍ ޳
-m6;G pqSM ]m|T((wt) f xV¥Kve!ܕ)̄$-ɲ¶7}4d2b?m~h %gC zsQ%-57ڻ< b*fkD\R W̶q@} pԣ-Ckc".=E³Qj MC8P|=C4(:BNY6ߜC}=~ÖXjKh$6%a:"z43Ӓ{ޖKEžoj˄@Ib;bsɩ3ǜoG+PY2ڳۅ: `{0UO^񕗲\d4w-0ShYFEu3hri
-eo
-*|z9ɗN+s;}; n
-3|<jue8~ZzCsU59<=txBڋg{si+ph)v#gEl(~yPTӯdVendstream
+xڥZ[s۶~d@X4ޓ郓=i.'qΤy`$Z҉$*$ego
+[pVL#yh8s zqŧub8
+H9[B{iq#{zp}iqV~ۀ /r<:|Noni{6 T/ի+ûn Db8JId֪1/hܠY%
+oܬD:pĈ3?Q-I30-Ieʹl|ЉWQ2rDui? 5n+}hw ҳ
+ Tz"
+}$"o
+h
+ vQwʶ96 {(f6-Vwpgy@:r; @F=bSpm@A2ęx~r<gDs7jY̖mҦ9%ctwh=fS 9CsB");;2زhX :?</#c `iv4'T+DN{Up,,Ieъ#!E헢v!ɚG,^Db@eK8IϒDk`0I:rwFAtvМ=j ;qñ1E%K<a :R5Wd03*/b0bI|؍U7ŀf>&<ַrm4t^NýĎlJd
+pknCJ$$:'0dCal
+uġdaց& 90\֨$žʦ)xņ%a` $Bߎ9'ff,R[_FCױ? "~s2fcRT; 8M[^q;0ls/oA`_Fq,V9kM@jruIbaU>M#RvR¦"|4V]AaB]`3țv+]UM3K&UM,kbZ :({
+y7{OnawgIbކJ:c8c:XJS<e{JIEOľTz~zczhzBTp, ((X,9kUJWTal.7oufk9sGb<D;7_yQ"@WTdRlnW!Ap?G=RRftxӽQ8 gҲO^0r N1pׁ[.4<u$ {2:4/^.StiۻqAk)5GQA#k;JaԹ\X2%' JqSA#9OB>fi >9zC
+m ޓ鄒Ǻ'~~W1{a×r#_z
+W pt?KSEgXkH,h}y0c|endstream
endobj
-5048 0 obj <<
+5380 0 obj <<
/Type /Page
-/Contents 5049 0 R
-/Resources 5047 0 R
+/Contents 5381 0 R
+/Resources 5379 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5016 0 R
->> endobj
-5050 0 obj <<
-/D [5048 0 R /XYZ 85.039 781.388 null]
->> endobj
-1258 0 obj <<
-/D [5048 0 R /XYZ 85.039 691.864 null]
+/Parent 5365 0 R
>> endobj
-5051 0 obj <<
-/D [5048 0 R /XYZ 85.039 671.274 null]
+5382 0 obj <<
+/D [5380 0 R /XYZ 85.039 781.388 null]
>> endobj
-1262 0 obj <<
-/D [5048 0 R /XYZ 85.039 120.719 null]
+1302 0 obj <<
+/D [5380 0 R /XYZ 85.039 253.216 null]
>> endobj
-5052 0 obj <<
-/D [5048 0 R /XYZ 85.039 99.522 null]
+5383 0 obj <<
+/D [5380 0 R /XYZ 85.039 218.471 null]
>> endobj
-5047 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F20 2865 0 R /F35 2880 0 R /F14 2895 0 R /F74 4586 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im4 4878 0 R >>
+5379 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F41 2998 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F77 4855 0 R >>
+/XObject << /Im11 5354 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5055 0 obj <<
-/Length 3600
-/Filter /FlateDecode
->>
-stream
-xrF]_n` a0N$vgL$J @o_le%c0{{=trq|؞ykXL wn\/ pۻBs<7-9{f6Z;*vg(?_Δs{g\2 ~}7+ 0kX;ww?07 5w%$>?sUoLhy/na5s_Mp:7~ ƱQA^'5%?<3&R0Ld UJ H Bgl4-')$իoPQۗoSQE=kl6.E5 2fL%]?+0 ߩZF3~=
-uq4e |DT{|
-
-&!$q-:0BuPA+<+
-z`+\lqb?[,h0,h ;c;3V' $_\PT+".p2H~flsT9@yTUe9}|XRn1T&.P`ȅ
-[
-`L7#)=zPJJ
-dfݚg_GƑYh>A WH҉!&}d{d؁uh+9( Sޭs J<;pȂBĚeT7a;""EqkYa ً|"  saxD(P&`яJʖ G.x oI$|_" J 1IW
-
-ɱ
-}c'JFU<ڼ#緮2'U[C_Y XhR~r`ڱǔHCĆ%sjRG
-LVKPԕshqG:RP<GT@bA2 4(L!Kܼ*8#.,
-H%))zǸ [^Zf}M
-'d
-t'lh턅o 7 Md
-mR@ť <&pc}-]US ː/!YRL/aa@ :bGqbo0ZH=Gg ׆S/q&!9BT0vq! M>bC~ra= Sa{Λ>v-
-XQa;a(JNUmO,pň}ON
-())qg{6o0F6-ДؤP P$*?+`k|`m\ꐉmZg^nR{`fwF
-nKd 1^w~Fy
-N]ׂ1'nآ]Ë}R7Hq<&jD޼j&GS+h.}1% k~Z_W6(>oܯ$[fsLf|~.Ż<bV5ul%\pf.)TgiS/.<^QT3݂\瓫6/ӶiEOf!0Yf@*
+5386 0 obj <<
+/Length 3193
+/Filter /FlateDecode
+>>
+stream
+xڵrF]_h
+YeB (r
+pN}f`@Z%L[Zʇi-޹<ɞ̚CyU2
+:mO;|9 *F{9@#άJ*DFmi”}
+r<rb@;y3|iMw
+,oo81z%l6s9BόNr2F@YCtc6΃P+VlStI[ 5]d`/
+ad/o*iw@m<[#Oƫm96 Fqx-}Fi6
+ܸ j C
+ z=P|X evpH? *==-|O{UqFyt3zpƀjk^Y M^yK᝕<H
+!b7aK&̈1s<ɲދ9Ƴ`U;Nd&u.(@K>7xt:7E
+HV$ᗷK{hc7~|Gi):z~&U4F8ȧ\Bы}e3
+ K^x,bZSSUr\_ҹQd/2 (o:ֵ7TA(`ːRd/6+y)L\,i߉`̝[+#B
+3;
+QDᶂ"V1>r'']zW,xXzÌ;7jozjV
+#|L؜YG\ !ʖ<
+'W'+2NE#/Jl27N> /,hzˋ:𐶻
endobj
-5054 0 obj <<
+5385 0 obj <<
/Type /Page
-/Contents 5055 0 R
-/Resources 5053 0 R
+/Contents 5386 0 R
+/Resources 5384 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5016 0 R
+/Parent 5365 0 R
>> endobj
-5056 0 obj <<
-/D [5054 0 R /XYZ 85.039 781.388 null]
+5387 0 obj <<
+/D [5385 0 R /XYZ 85.039 781.388 null]
>> endobj
-1266 0 obj <<
-/D [5054 0 R /XYZ 85.039 472.088 null]
+1306 0 obj <<
+/D [5385 0 R /XYZ 85.039 580.482 null]
>> endobj
-5057 0 obj <<
-/D [5054 0 R /XYZ 85.039 451.498 null]
+5388 0 obj <<
+/D [5385 0 R /XYZ 85.039 546.342 null]
>> endobj
-5053 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F56 2890 0 R /F74 4586 0 R /F35 2880 0 R /F20 2865 0 R /F66 3242 0 R >>
+5384 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R /F58 3365 0 R /F41 2998 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5060 0 obj <<
-/Length 932
+5391 0 obj <<
+/Length 948
/Filter /FlateDecode
>>
stream
-xڽXKo8W=C*7WiSW Ȕ*IKr:a0b 9o ?dS@!EPj{ [ɹ mWcFvEƉ?͓%8ԉ 9E<_*$yX39եW2_ośQ⤳\p=Dݺv!ݼ % "{oy>GvihgkH]z āDp<L/XDD%kg}"(fpGEܯRP孊[+ ( 6Evhۢ3 .rd5E x04:XK aϓX.MB,,D^wm]>_3X2Ɔ fP4SUAb5!
-eW&1zcqm~/(SaڗMv(;ygݏD|@jD-w#JS>*eM+qDlFǙ!t;525oXG3_(v Vȓ$v1Sq]r:]~,-x)q%6|.O_l8Zm/*=K,?Ո"odu|Vgu|V7wI]'\Llٖ ]#M],J}(tg:lyk ]/4o|ȓɄ|$Oþݭ"KCδ$e/>.2U鎂K1604{&m0Q˄r`'WrվΔ[L!tВC)/]ce۞4VS5WQ\OI%@4U-fI pH
+xڵXߏ8~@{
+g4ԐkEy;ǶF+/QIٌX}0PR=43 2Ho I
+P0>kjs!i ="rMB@׼x)b׶C1!K"O)uSO%}%)[Zą>{AtpA\b<I4׳(4
+O.:N
+
+ztbm%AoNA/B5,f\BYW]<?O腏9X2= v-D$GLq)`?)>zM񰗧e^iO7mQ{|Ё0)R-:hAι4<fp(jc|dQJt_ȫ}Χ]0%x3{-ʼXc-~=_/v:l)K>2cl6kND/!UghG0띈@ѿto2I-ΒrM\zU;tXK8I3*>@̧ll[\5B'nlՃj K9_7\/|ulߴC!.ȕVP.d=)RىJ+gT#W/Fi 0WYB6cUt_$nbXQ+9UBY,-Qa']<*^6+\6`bMt
endobj
-5059 0 obj <<
+5390 0 obj <<
/Type /Page
-/Contents 5060 0 R
-/Resources 5058 0 R
+/Contents 5391 0 R
+/Resources 5389 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5062 0 R
+/Parent 5365 0 R
>> endobj
-5061 0 obj <<
-/D [5059 0 R /XYZ 85.039 781.388 null]
+5392 0 obj <<
+/D [5390 0 R /XYZ 85.039 781.388 null]
>> endobj
-5058 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
+5389 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5065 0 obj <<
-/Length 1305
+5395 0 obj <<
+/Length 1304
/Filter /FlateDecode
>>
stream
-xڭW[oF~p[20dJ^g/YeS7qJ0xo? 6I+5M9;cؘ?+PCňPjFt
-՜_¹(I`ouMЮb|=\e! 97M{%B c8:е$}4<{'9sZވw$)ۮ;דمCt -+
-¢ w^!UD;SaeGvwˍ1~43ΨqJ
- rNH@@M:Ef6AA[l\8S|Y Lh֣@>IH졦Sm ]uHgSadmeVkVhe3c8,Gm 3 zM{@?Пxn0TM
-#nf2^msT
+xڭWoFu
+Hq4u4UyMjb#ap7ʹ?~;0*-mTqg*2MC]4Lt'n8̋ ˻RL{kzX|g;B+vPYٍͭ
+|kwKsXg|3yBy# sEf.r/̾LMљ?%H\q  bnP2W2_ )r̓# WoFYڎxl Ey
+
+)
+f6UyF-=`Qn Bi]UtҸͣ~۟7ڧp"_2.N l>%E!{ 7x]nlQ9:<̛۪+;a%)-*8]Iyn$uH+>T`@˃HҪ$p|BfH0\P“{^8q\ѓyg1F*10A(\4ŭa@yIOD~ 0!'}OZٔ')\.E݁v{ //B <:\g_Ͷhso#f9xV+ĔUM 'GV@IGh@3Ul6
+MݛmOu߰[U&Ā7gq홒bX{\KV{ppP uAzZUTV8i:EסXڌDzu)6$d GZGIS:2'K'vΊZ(~aXXMUą;RtU@+3q051Ph\$k+z4EH&Utoo|z؇ĞT"?N^6yǻX}c5eendstream
endobj
-5064 0 obj <<
+5394 0 obj <<
/Type /Page
-/Contents 5065 0 R
-/Resources 5063 0 R
+/Contents 5395 0 R
+/Resources 5393 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5062 0 R
+/Parent 5397 0 R
>> endobj
-5066 0 obj <<
-/D [5064 0 R /XYZ 85.039 781.388 null]
+5396 0 obj <<
+/D [5394 0 R /XYZ 85.039 781.388 null]
>> endobj
-5063 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
+5393 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5069 0 obj <<
-/Length 3442
+5400 0 obj <<
+/Length 3072
/Filter /FlateDecode
>>
stream
-xZYs~ׯPbʄp !%\keM Z
-Y}wE|wwA/ ˚E70:Ư|{$l/ZxHo6W 9l'% hDe Enh>P[B<ǂv;{Yr*oHcekWWiDfono@Qq*L_O*Ȍ~%4,Qqꇢ^5 ||6@ԍ!Lx,GrĮTԪ
-~
-p`U(WG*Z'FkV]rP(V ("6K/<= -룏3oR.yu7('g(G/`ȨtU[+g{W{L;(NȽ3:3c2nU`(O<27}OG,
- 杬7Z',֒p-ڲ2ӠD5?x˒@c$>ҝ6X!@n), 'O2pսg] ?1ך)}+ڶfvVwD~)
-!+QFo8zRL#~-Q*n,4
- ^PGg{b~o!e7 "s ;Krt_ z/m`yAFA"$ rŁ1ݐpqjAJ
-&2F.j'xϯ떍Ow{">3Nqpj\F});i.0J.#1!J;ʫcRmrw-/ͪPM G 6 ) ,s5ƽ$l`e
-yTNܬ¹LhXUY.L&d {=|t /SJ7fP!)%\\ZU2#;zQ`\}=>98 8v蔱[ TS 7ݗ56(,+H וSeϢp%aryETn*T[( =m<xX6҉މym|.1,Mu*@"6da?t5#zM ]AFLEq7E @hwTh3kFP)5.h}SF5-%%+Y6.`Aa**uNy8GB0@U#S|kkء( C0V9Q sA,AlvHB1Cx?4$ZHCd%J-=mCiƉE>si}BN)UػBjӊRky%\\Q~{;˴ifUd31{eSVe31w \ISeNecV<t*i*..=o6Ob\DeL'97&}ŁQ$
-vF#@.Y(ށtcoL OP|{Y2EE8㋥qι-n!Gb.,ef·c|^Ry*Q4|7&H`"t# V2*,˒^HԀXZނ"o*L 'YeS(pj@n|ڦ>i#(]PQ9ӉbHp@S{M!TZmڇϕ'V0mi?HDdMza6}z9zdbJZ>0^LZ#mXF4m.sr ,|HXɾX<B)|pMbk:Ѝ/qwV6&1{(mӜNc=Cm1Kn iↁS
--oLnLq K'գ,a:#K
-"{bI
-`xלKfR SbE^. J$IL ObEpNxI*rt7+נudSqQ8IԩEE͸抸miIHL&o_9d!ɹ+cVމ#|8~.(Ĥ\1:)ZfԘx6ĕ+k@Pxr;QmrC$V |.˽2Z  Q5Nz-B=7x:Q/S)PrN8dn͘ J5*!m@*'~g~:yqL׶endstream
+xڥ]oݿK(\~
+I>$97VwhgJTH>wvd3
+"" ? |Nҕ#(J ˲:4),Ϋ/ a5mϟOUⷲO`ee݀8fhiuQ׀GZ<SXCPTE$}Qj{ZT[x;4~~~g¢s(E yc(
+hVl^*c{{F_萅El b6 |[jY62t9wa_zlu+8 L^;8/QBwڎTڎǦZX9l쳡\-ޚd
+)>hdò1 ;:p 뚕5etƶm(wgR+J9e] 興^CtDK'J
+)<4CV :V?OwBP)0!
+qo"C?IWCc#s}8I'Wyj"3.<i`2&QOa9i>8%F̏uFc?3d,d񹎁-Ɂ5j"9]M%oz^Ƿ/b,Rb~]pD`<
+ꨥݴǪ<TTTyhzC70(0H!jk"QX1J^*x#aKq`:0g)X.K:dڵ}Uo^\T3Z5v^B-,G|#nbc~eag3\3u-WAE~M_Zb*rZPcCAj^lX0\cU@֓7ԕɂmD?q+Q9' VqCڛզ$jԑ;:[  mYIF#+1ߗEO -MdT(йHH xA lBiQqբPV;U[.P7gb}@M}H=T aL&WJYaPMm9օy^}+R{O;/k猇scz%&:P%G3hԨc=tBiru1[
+Oͬgĺ=a. be6D+TbfD:X=xUȱp( &boECBdn~|
+pC[6F5x^%a S O
endobj
-5068 0 obj <<
+5399 0 obj <<
/Type /Page
-/Contents 5069 0 R
-/Resources 5067 0 R
+/Contents 5400 0 R
+/Resources 5398 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5062 0 R
-/Annots [ 5074 0 R 5075 0 R ]
+/Parent 5397 0 R
+/Annots [ 5405 0 R 5406 0 R ]
>> endobj
-5074 0 obj <<
+5405 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [481.678 346.575 512.306 358.567]
+/Rect [377.225 306.326 539.579 318.318]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://imprints.sourceforge.net/)>>
>> endobj
-5075 0 obj <<
+5406 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 333.026 267.943 345.018]
+/Rect [84.043 293.079 108.944 304.769]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://imprints.sourceforge.net/)>>
>> endobj
-5070 0 obj <<
-/D [5068 0 R /XYZ 85.039 781.388 null]
+5401 0 obj <<
+/D [5399 0 R /XYZ 85.039 781.388 null]
>> endobj
-1270 0 obj <<
-/D [5068 0 R /XYZ 85.039 761.463 null]
+1310 0 obj <<
+/D [5399 0 R /XYZ 85.039 761.463 null]
>> endobj
-5071 0 obj <<
-/D [5068 0 R /XYZ 85.039 743.459 null]
+5402 0 obj <<
+/D [5399 0 R /XYZ 85.039 743.459 null]
>> endobj
-1274 0 obj <<
-/D [5068 0 R /XYZ 85.039 522.834 null]
+1314 0 obj <<
+/D [5399 0 R /XYZ 85.039 522.834 null]
>> endobj
-5072 0 obj <<
-/D [5068 0 R /XYZ 85.039 490.015 null]
+5403 0 obj <<
+/D [5399 0 R /XYZ 85.039 488.089 null]
>> endobj
-1278 0 obj <<
-/D [5068 0 R /XYZ 85.039 403.708 null]
+1318 0 obj <<
+/D [5399 0 R /XYZ 85.039 392.679 null]
>> endobj
-5073 0 obj <<
-/D [5068 0 R /XYZ 85.039 374.304 null]
+5404 0 obj <<
+/D [5399 0 R /XYZ 85.039 347.604 null]
>> endobj
-1282 0 obj <<
-/D [5068 0 R /XYZ 85.039 197.117 null]
+1322 0 obj <<
+/D [5399 0 R /XYZ 85.039 143.319 null]
>> endobj
-5076 0 obj <<
-/D [5068 0 R /XYZ 85.039 175.92 null]
+5407 0 obj <<
+/D [5399 0 R /XYZ 85.039 108.573 null]
>> endobj
-5067 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F56 2890 0 R /F14 2895 0 R >>
+5398 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5079 0 obj <<
-/Length 3252
+5410 0 obj <<
+/Length 2550
/Filter /FlateDecode
>>
stream
-xZs6BO\/7>7Mܦ/V'7D-N)R!()'wN;1X
-^]^}тGte(V~A<Gn@"s+
-ŎTe@o.Xv;,E/R}GY|nKFG"u%5i;įZlfq>c&5%5m> 6~dӚG)'83{ؘ9 ,*&7)Q: ttW/ixUE dbF;{~T%/ʴEX/p[. 9PW#rU m(luQY@ef
-e;!:KwC[ s8={}7 /4M&2hx@xBL-KCQO0a IDd2 kU=q&4;S.Ώv98lV~:mNj=QEIM|^ߠ^d{#p
-"(1S:`.Kj [n~@Z^uDjfϏr^yCℂU0 f#
-+233ΦIȫvlY9]ދJ
-.
-|
-Ki2Ƒۢz!Jiy5JLFZ!\ED&%( &mlImA7]QD-v$1CԘ¾pm9s$\L&6E!k>qEwAs aF&4 ]c=Z?2
-
-$˽l1]X 0Cc6[ XD.
- a endstream
+xڥYKs8WHծ ErnYox6xc03H%V$RCRz !\S[Xx4Ѝ~|
+ Jznj
+=7VM$<\"ڍxam6`hhEhs+K?v4v_|8vh@IՑǫ ))WOauRM^F2gڹ+uR r^jFfRKwIsEHⱔƞq @@K%t̳܏evԞK@yv43DovagqZG 2Ȉǚ
+cƿ
+wzOeō]{{J+ΰZiݐ>P4øZ,;auQ8Yʹ [&cؚqd6QEݨz"iI=*"=W!hKxJԁUp0«eI 
+ݬ߽cb'I`0.xd INSrhw*vN_2F\mfP۴cF^6 nnbEޱl&fԣpd(HK 9MkOrU68.p!qv^:rIRϦD~>50Ɠ&
+؍!AP
+#]k8Q>ofA\BWaw(̗)-^kKtj
+3 ӒH$ljr4<& h\,wL|((਄HuS8pi
+ǹ:2Ӯ0id?MwEl!Dqv2
+Z[uHzXፀUyJ[ha4# w)
+Ҭ@ xB(gܢD ]kt({A#BՌV&#2t7dh&b}"'
+L}"![UY#y- IAaC<[lC<gާE(_͛lp(^`0*mc
+H@p,t`ߣI؞G?*J#|,F*~Y:΄c(]Q'
+pwl,Hf?ɴw>¾]lxI)Z##Ǵ RmJ?2N\#s\?
+<yQpCґw!,T4Sj&v4WHARj/ݯhJY?&\ރ r{
+tw5>}ř_7_swV5A$x0TS^X+DAI3.5"%y%WC=R[Q|ީi䘮)5~Rr| h- Cփq~ҪP`[1/:{?pKS Mї ̫Q&zSu3 ;8Uw߸eҌVӞQΔ vh>Q;W_T?%?~$?E.|$a09>
+9eAd'/dь"wMCd?S0$M [XMa~cRg~RQ5%.$WaMi}2@Ӧ52as}[AVcf0L[bVid#t_xFHNs ?Z\N"N(B/,d
+?T΂endstream
endobj
-5078 0 obj <<
+5409 0 obj <<
/Type /Page
-/Contents 5079 0 R
-/Resources 5077 0 R
+/Contents 5410 0 R
+/Resources 5408 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5062 0 R
->> endobj
-5080 0 obj <<
-/D [5078 0 R /XYZ 85.039 781.388 null]
+/Parent 5397 0 R
>> endobj
-1286 0 obj <<
-/D [5078 0 R /XYZ 85.039 761.463 null]
+5411 0 obj <<
+/D [5409 0 R /XYZ 85.039 781.388 null]
>> endobj
-5081 0 obj <<
-/D [5078 0 R /XYZ 85.039 741.134 null]
+1326 0 obj <<
+/D [5409 0 R /XYZ 85.039 638.284 null]
>> endobj
-1290 0 obj <<
-/D [5078 0 R /XYZ 85.039 671.875 null]
+5412 0 obj <<
+/D [5409 0 R /XYZ 85.039 603.539 null]
>> endobj
-5082 0 obj <<
-/D [5078 0 R /XYZ 85.039 650.679 null]
+1330 0 obj <<
+/D [5409 0 R /XYZ 85.039 520.742 null]
>> endobj
-1294 0 obj <<
-/D [5078 0 R /XYZ 85.039 556.443 null]
+5413 0 obj <<
+/D [5409 0 R /XYZ 85.039 485.996 null]
>> endobj
-5083 0 obj <<
-/D [5078 0 R /XYZ 85.039 535.45 null]
+1334 0 obj <<
+/D [5409 0 R /XYZ 85.039 389.65 null]
>> endobj
-5084 0 obj <<
-/D [5078 0 R /XYZ 85.039 374.715 null]
+5414 0 obj <<
+/D [5409 0 R /XYZ 85.039 357.229 null]
>> endobj
-5085 0 obj <<
-/D [5078 0 R /XYZ 85.039 361.772 null]
+5415 0 obj <<
+/D [5409 0 R /XYZ 85.039 101.685 null]
>> endobj
-5086 0 obj <<
-/D [5078 0 R /XYZ 85.039 348.223 null]
+5416 0 obj <<
+/D [5409 0 R /XYZ 85.039 75.192 null]
>> endobj
-5077 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R /F14 2895 0 R >>
+5408 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5089 0 obj <<
-/Length 3649
+5419 0 obj <<
+/Length 3112
/Filter /FlateDecode
>>
stream
-xYoFݿR@Ds8<S,
-76n;.>"%HfHJt&@8㻏::OBy(W'jwo`3%yzQSܝ]#
-Ε^z~&W˫,ZkG%bljB9/^T@R9ׯgxy{s3--~컻D߽Ù494=ߝv@K:=݅s^5@,U~8Ǯk
-l{QPVs0z!Nn5V} [QxibO`o1W8mO}gTzÅy|CkMI+kr62p#otđ5f'[^|`) Gs {} /W%GJB|){ǭUU5Ns\ ZȤ8bl:I\^-B8A5^J;,KS,6ssONkeGlbw]E\FeqTo^KV@i0Ϩx= m_^vi{wWڦkֽjvyUfݪ^.AT*/<C7Ls&
-\a+ρ#J'9@Y r݆=.fI/>
-F~@#WUv=:1 pLL5XX8+…ݣG^e-ѬSw T+3t3} PDv
-
-öԏ
-ZC J$7
-Nm
-dBOٍ9n3ёHA#rg'ht-Հm(J$V&:Z6m>{@ l5ɔt0z0X]27 =Jd>GXL=yExxbS)Hd\^A<y;F}Rb&kǂ@.Hl$c]l:Ϲ(q#߈Ɏ@?#>FIdgȃX/ ĹhOW%pk
-0X)FiMG
- 6b# ADoٗ0$,U>:nusġ"k!{je E9 ΢,17ѧ[⩿Q~j S!y[h|s?byX~
-
+xڥkoF/G)뤍<|MQaTH*kɕH5sŁx,,۝9 rc!( ۳p;qz~nWXW.o_/<ϳTlQ[W/oʺY^])ߺ˷󅲖oa|p}gmV! Oә_K[ ߓ?=)gjJnϱ؟Qʵ=傜
+ 9)"oPP}z8 5Opb?/$|FVD㨚=/|߷mlҊr+uVM)''pxbuWO]پ~[:;
+&e 5hc͛;~ŋFq$o^~S.__񸫅D!,y"C ].[s?D !>]%UFRokWY}WaW<*vapSTݾAq29
+!u~7S#^[y%Pv|ΔJH~,pUMn1 d E]1[ *4kǃ
+q|)8( +ݧ0FjSWx'DޢTXcgt#{Y՘={Z2k|a@H;ʦhF H١^xAPT PQBOPnY/ z9_ccĕ>a7SA~N)C'f joGnɽ)Uxg. 6Ru׸*zgez3E[(ӏ2}ל _;RLE`m+q@D3wI#Flt r{N?˜b{
+ϐ5( 0NzUa7;TpqF|gp;2" N
+B9<1"㡏ђ=,3Ҷ|L)H.pZuh !FZzƈx9ka6@'Yb<yKDZ
+CQJL5* yKLLdQ#0*]ѥEs I<{-hrMn5;.$HqyJ
+9[G%IAZ<}nPB;7mk{M'm_%5+]X6<$eȚ(BҙBF7
+hyuI=qA84C{W<wRjG'Վy&6j,?,_H;q1?_.9.T,ؽTq.^-[ۡč!)8G}SFGPV(r9pbM(Nj<WSqh{tB
+!:.$j Dl}䋿4<1Cu)ـ>$JpV<cg$OE_O u,`Un|5lLR!XA[jp%kLS%g o QJ͖.KU= }Zh/XcI_JX%հn31BJQ_3^(q=OCQ>1p%+s),[zO>1
+[GVn mRlP W)kGf8x OA ,LjkRq
+
endobj
-5088 0 obj <<
+5418 0 obj <<
/Type /Page
-/Contents 5089 0 R
-/Resources 5087 0 R
+/Contents 5419 0 R
+/Resources 5417 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5062 0 R
-/Annots [ 5092 0 R ]
+/Parent 5397 0 R
+/Annots [ 5423 0 R 5424 0 R ]
>> endobj
-5092 0 obj <<
+5423 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [154.728 677.397 512.306 690.299]
+/Rect [497.496 347.146 539.579 360.048]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;189105)>>
>> endobj
-5090 0 obj <<
-/D [5088 0 R /XYZ 85.039 781.388 null]
+5424 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 333.597 401.53 346.499]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;en-us;189105)>>
>> endobj
-1298 0 obj <<
-/D [5088 0 R /XYZ 85.039 761.463 null]
+5420 0 obj <<
+/D [5418 0 R /XYZ 85.039 781.388 null]
>> endobj
-5091 0 obj <<
-/D [5088 0 R /XYZ 85.039 721.768 null]
+5421 0 obj <<
+/D [5418 0 R /XYZ 85.039 761.463 null]
>> endobj
-5087 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R /F14 2895 0 R /F56 2890 0 R >>
+1338 0 obj <<
+/D [5418 0 R /XYZ 85.039 433.802 null]
+>> endobj
+5422 0 obj <<
+/D [5418 0 R /XYZ 85.039 388.728 null]
+>> endobj
+5417 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F20 2965 0 R /F58 3365 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5095 0 obj <<
-/Length 3669
+5427 0 obj <<
+/Length 3215
/Filter /FlateDecode
>>
stream
-xZo6"PzPaGv;lAG]r%y̐me[p@"r8$yy@yA\gyy~ܜ+,TA`苛_< "(oz͗?^.8ܿ\dY{sw25uz}s_ >p~cy\rٗ77i ~;{Kp^ߞ~\(7g&_9[E̹̚9DeԈ?ύ;rݎe{5 ^5
-v79C CO"ee|$?Ivɲ$ڡVo(ǒ+>^`W-z[L iP7rh>ʴ'LbEmn!$RLN? hr ;+K2ڌXYj3
-zmRoG# *'pYt'9 O 09e_}=榨Hɺ!ڦKvC$Q J)x*)':z1N (BD R jD`+nh_+7NW G<?>qJS/=ZR W"n7؜*JC'6:@{Ep>|O|8?rL&F=`0 UXɪ]Y#WCV-L{>27AkF\hk3GYD9eV>н”To83A˂OLaZ1`X~Rc3 U/ph+2-l1` !
-Oi
-.cPaiFqfyցY^|(IYPaWI:qV(
- B8Qђiib7p^n~XIC@ړ 4a!
-%춬)̖q'XΖ7͹{TU >* 1"A['jP̴V86YǻQ3RHGuUW#V;
-P8ģZb?O+ۑ{Qp$?Gb GoGJԏe\Zr/930**jعyl m"J
-x}u`67.F<rTFs'Auk)y&Jᔐ6^%ș1}ݜT#.p,dȏGuZK5 ۿR< 蓄
-UJ93,
-\<ZS(v?ӊgVhQ= Dm(ݎ=CĮ$OVq<ecx e>|*-Μ}g"l̛=eIAq Iq↙3
-6֡mɿx/*XJ
-؟f /g_rXnM ,y&TW~g~8G1Sl d'endstream
+xڥێ}B0
+X,3kip +R+6׋|m!EiS,̙99YZ$t'3In#pb- ko7oF {.9fq|?ƘJ:Vjy,oaçZ-?|*1՗n )ͯ_Et{&MO{
+7@FGZ]s"Mⅉ9
+gd^$`.˖3o_g-Dn ʦ>pU
+B;ˢ}y g}Vӯ㠮& ݔ?e2ؙ&׏ C Ή=({~X|! F4L#KKW5Z!煚PQȦIfE\\*A-ym]6x1y5|V,5dh9^j0R'S|H9s;nbP`c.@mSH̴Iad`$>`#rW>| c`M1>׸( 9'es3Y !IpeUNq].g--ԤDyE`JR@3֎woߡJtF$FJ4Q1: :3~Pͨ4T\?hz
+#wı5P"
+z.\)襠r aUgÊq+^qXٌK2( :^$-Ԩ;Q`rӖƅC8;v~(w:$bQDD3KXQpIbU37QfVt;9Orrg`i?x,!@&h)-2Z]pM ;-zGTh5#?adVmxHt|u{hPp?aAyfw%2zH
+<
+LuV1lYYRlSJMyqH<bLo|%փg<d*3mٱW#- lG)O{&&؜8-S[Y L Lϖ-D"*G +D{
+”[q x,ͺʭ$8;W%ّϫ(v~j8l^>>r R/HJ́\Y*kJlqs1~2xrRV2*/.g_yڢ;aJV=İ;ٍtfL4jGVAjj 0WnM^+[`556lJHܥy5WqdCcILHɏg
+KZ.GğH8
+,[D/o]-6qnrq%vE+p jݷpP]) vZw:0p.HGKfpu[`rSK8-d&~<Cvjϟm㱴FsiMS8=vjXHgLV&tϜ^8#1f|YC+p;aGH!gZ|GгXB4۴Oj\x VSz߰_}endstream
endobj
-5094 0 obj <<
+5426 0 obj <<
/Type /Page
-/Contents 5095 0 R
-/Resources 5093 0 R
+/Contents 5427 0 R
+/Resources 5425 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5062 0 R
->> endobj
-5096 0 obj <<
-/D [5094 0 R /XYZ 85.039 781.388 null]
->> endobj
-1302 0 obj <<
-/D [5094 0 R /XYZ 85.039 522.122 null]
->> endobj
-5097 0 obj <<
-/D [5094 0 R /XYZ 85.039 493.324 null]
->> endobj
-1306 0 obj <<
-/D [5094 0 R /XYZ 85.039 355.61 null]
+/Parent 5397 0 R
>> endobj
-5098 0 obj <<
-/D [5094 0 R /XYZ 85.039 326.206 null]
+5428 0 obj <<
+/D [5426 0 R /XYZ 85.039 781.388 null]
>> endobj
-5093 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F20 2865 0 R /F56 2890 0 R /F35 2880 0 R /F66 3242 0 R >>
+5425 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F58 3365 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5101 0 obj <<
-/Length 2241
+5431 0 obj <<
+/Length 3348
/Filter /FlateDecode
>>
stream
-xێ6_  Id44u3fi8lkג\Qs!i͌(>,`/ qƳ4EW(o
-Kvڳ^;9aAQ\,cz!Rd0@9i/@Q %x2x$[cK^%
-tb1ŠT(%"l_ir8hc[o]yyX.O
-1 jW[uXBqM8pاwmb(ڶ]ꪬ!ů
-¯Ea*BIrSElAU]D}Tt+\^4)u(} cfOiՆ%`I/zv:`gWlO1g`V,hi"? (00r
-eO=
- jBveG)V^3nĜ 6hMqx ]x{*>p?t&/_q|צ0 ZZ,/)_v7*븽gR|[<[ߐ+. 26mγq[pck3y|+`$3W|M'W-L!Qjt_řcrMXacMAwXI8Uzky PiE`UysI3nuCezD8cm<B{z~}TƜ!\KV%sHh>eSR<XCV;ObK0
-wLZ:~2D/ &:bj77l SpÎ˧a LXs?TSĂ~2HRiIWSiѣ7ķB#5QgI?䡸hUX_f3(IsåR p-Sfd{ \endstream
+xڥ]s6ݿ=S&;m̉D$ $RM&&X`e
+tx4a^+I.][VH*e5Z-Xݑʶ{lۦZjFb@ap GA<vE7
+R@ | ?P$Hl
+
+űBQAgFIFzNaʪ Z4834D΢{BN 1N z`U!KV]Uu.zSvM#
+ݯzWZ(]WkIb+*v
+(TFxK꺥Ku"EN g6*ncUiC슒Tnf|wJ|wrRMV<޶de5I @h`$ra4\Z$
+q(@
+=NQ(}F}@/PqUoRo!B ==y
+*!R;ѾP(F67T{U!E󁗦w&Tg#R z HOzKR}[I"q{44vkI^-;vDm5X )aR;p2w_L%EQFwZ;i((ҚS? 8J!Ks d2~৕..&`k;y4^}" Iuq ]G6\̂"Hɕ5*8<~
+< vGN/؟cƽ<,>"_߲ƳOA'"Ӝ<! `IOW `NѵcO{j
+Ut#;—lh amPWm7~x"@lqp(DM 6HH.?=,A3xTZ)^
+sR-|a8$Sra埰cĹRݿ$pMOCnoru\ ̨3Th:A$݅I{'P6AG  U*{\3hxV'm$5DfE̪YWs $8V֍rH|'g9{Z~cZR*5rb6%XK_ʨd,㘐ᚊ̐u{U T<a2 SlĞ@MU6&:9w.4 P_~e9(]E9CpT#P|ml+.ˏ1Mߪ2-4t{W"nyN N~o$1Vn{kOg3IݮcitMNP2ia#HH 9NLc6]y8mơdK
+g@ $%S.S@!$\i6^nN3 S/u<r'@|WFN@$yfCF7< IC_<l
+O U &+ǶC7BKvtC?ɤI@:#|@(dgN$fE5PKs;gNrxZam6`8~y:6Bz--
+jM`lBq# (?PɁ`gbS֥\&
+%ekT 5~:9 96Ss.1OG9~N[p˵-Dwh|=O<ܓhl=~nD,$:1)Ƨ-\:u{mOUDX+::: 6otd )
+x1
+n+ILtE |R 5ǃώ]cؑ[sa`rv҃ntL^ldm=]1z͟~7>M${ic3H3sS56"VQapBԼGJbiR{z .tlg0>xup-h8C*)Q{.R(
+Ivm]̊Nv_֠5E\wtH Ȁ//l0tGp鮜8?xGwc1ӻ7_12^n֏y(jV~äf5> (Ul;8ѭ׊{᠓Y+$rð?=xUa]M5Lr<LudgͬMN1]KY\lwj~%K%g5Be?-)9<ղn`Wogɾqz{l ,f]SgD=B_XgtQSendstream
endobj
-5100 0 obj <<
+5430 0 obj <<
/Type /Page
-/Contents 5101 0 R
-/Resources 5099 0 R
+/Contents 5431 0 R
+/Resources 5429 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5108 0 R
-/Annots [ 5103 0 R ]
+/Parent 5397 0 R
+/Annots [ 5435 0 R ]
>> endobj
-5103 0 obj <<
+5435 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 652.239 323.852 664.232]
+/Rect [111.316 119.05 296.579 131.043]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://imprints.sourceforge.net/)>>
>> endobj
-5102 0 obj <<
-/D [5100 0 R /XYZ 85.039 781.388 null]
+5432 0 obj <<
+/D [5430 0 R /XYZ 85.039 781.388 null]
>> endobj
-1310 0 obj <<
-/D [5100 0 R /XYZ 85.039 610.001 null]
+1342 0 obj <<
+/D [5430 0 R /XYZ 85.039 761.463 null]
>> endobj
-5104 0 obj <<
-/D [5100 0 R /XYZ 85.039 565.453 null]
+5433 0 obj <<
+/D [5430 0 R /XYZ 85.039 736.911 null]
>> endobj
-1314 0 obj <<
-/D [5100 0 R /XYZ 85.039 533.344 null]
+1346 0 obj <<
+/D [5430 0 R /XYZ 85.039 599.198 null]
>> endobj
-5105 0 obj <<
-/D [5100 0 R /XYZ 85.039 506.729 null]
+5434 0 obj <<
+/D [5430 0 R /XYZ 85.039 556.244 null]
>> endobj
-1318 0 obj <<
-/D [5100 0 R /XYZ 85.039 464.366 null]
+5429 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F41 2998 0 R /F58 3365 0 R /F35 2980 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-5106 0 obj <<
-/D [5100 0 R /XYZ 85.039 441.048 null]
+5438 0 obj <<
+/Length 1411
+/Filter /FlateDecode
+>>
+stream
+xڥWYsF ~ׯPhc:GIS5VI@ŖJRVcES>t2-,
+E:E!;;tL,crβ_yN-:¡
+& [qwiGqkl=,զiyoY?9=B6Hk
+F8#8yo- %ts_+JOS1zm
+&pͦk,R} kPܼ ՈJ)#x"dUVbs ;MQV8mdU
+endobj
+5437 0 obj <<
+/Type /Page
+/Contents 5438 0 R
+/Resources 5436 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5444 0 R
>> endobj
-1322 0 obj <<
-/D [5100 0 R /XYZ 85.039 358.24 null]
+5439 0 obj <<
+/D [5437 0 R /XYZ 85.039 781.388 null]
>> endobj
-5107 0 obj <<
-/D [5100 0 R /XYZ 85.039 323.096 null]
+1350 0 obj <<
+/D [5437 0 R /XYZ 85.039 761.463 null]
>> endobj
-5099 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F56 2890 0 R /F66 3242 0 R >>
+5440 0 obj <<
+/D [5437 0 R /XYZ 85.039 736.911 null]
+>> endobj
+1354 0 obj <<
+/D [5437 0 R /XYZ 85.039 694.042 null]
+>> endobj
+5441 0 obj <<
+/D [5437 0 R /XYZ 85.039 653.878 null]
+>> endobj
+1358 0 obj <<
+/D [5437 0 R /XYZ 85.039 653.878 null]
+>> endobj
+5442 0 obj <<
+/D [5437 0 R /XYZ 85.039 617.011 null]
+>> endobj
+1362 0 obj <<
+/D [5437 0 R /XYZ 85.039 520.654 null]
+>> endobj
+5443 0 obj <<
+/D [5437 0 R /XYZ 85.039 485.909 null]
+>> endobj
+5436 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5111 0 obj <<
-/Length 3418
-/Filter /FlateDecode
->>
-stream
-xڵZKsFWhu Te!x ^CY%ەf# 
-c9_c>+dL솮jSdOP~)E&_PERz
--U=K-%&x\߃ _"{ԁO
-3RFb#nS
-ڭ&2r ʱ2<d 6jt)9x-1Ҳ##39' &x-R%nES<۶sV 'y<{N_|g)BUcEKvR.߻NnǷ;1nT1f>[5U,Z>e֛jFxEߞty#OgG1=."DE|!UPUc`vZĤ4Gd4PYxM-H䳼eՊ`+,f8x>2aŕYЉ"S|,VdlI
-*VwDŵEF:. "L7o(
-]H5ٶSpzA9ԣ&&~G Ez7 7Oz
-
-EW?Nhяt/%wF>9S]Rӌʥ옵\[uzzt' sqzGRS?GT\UіK,#<~%X
-Й)Wݒ9EZU^騊&'~&Nw)z
- LGSSmBΉ}rSWnH*\9s8[+)p'3V;8|Oۍc>B{vX[ԩ30N.&R˧:J)O",.!lKZ[L/Y=( C<*ޓȖnH51Z I-mͫ{ Q;nJu)>f$7}=Ƹ8VՎ
-GDkZG83f3DT]wm'.
-?Og˟OZG:U+U4'nvqXח==>x
-$N W
-Z\2xDXR('ZI3Ws #~IԘ0Ȁ}ANmK6?cU!GW'c
-/=
-57|xOgaN<Mb0'4Eϥ3 -endstream
+5447 0 obj <<
+/Length 2913
+/Filter /FlateDecode
+>>
+stream
+xڅYYoF~%`Ű>Ċ(c6Кa!<$Ͽߺ2}TwWUW}UգSWYQ~fʏj{\m`7J(t>3yfotzFθIUGZ!ۇ7?0$zX;F,,zXMBy_?/n$,nW@jZʫxdp/~}aҝ&~# #?JWL@!:B* b'S! PL{wU$ª_vE]]QQuUa6QyOxOg<*O}G [-mQg*쯸۶JwA:!^U|A>0Kׇлw;dF ϐa H'6ƹp8Ɖf#&8 { hgg#9x*VִeMZ>ls`={P^_>h yTB%;8uq* m
+"?G+P29y̫j;B(;춶hxh KlljCKAr&Q=,ȫ;aKe)D#񒶗]͚/I娪`uەEpVCxx }+E(a4h>ܣP+򦝭aA†6d
++r' "#<Ff<rN^[a##գCOa*EiOܕ;QCfb੦a$\PkZZ^6,d#l]docv%̈İKu8 X 7rju)dTȋvٕ%l8*R)hxleҐ1ŒU. nlʖE%}%_{uZdYw^yD:nv`ƀd S{ϋ8쉈] h8]A Jl D?R׾e8 QA~ 2A۬ peǶpƄO)'^LQv[G0ѐe#
+cTdTAc4>t>cv
+Periu8bWLx' *-KG>ԭS]VND{Gaˡ@cpH)7O{=0L^q>;X:9Vh5^b'osquydbrjF,zk<J6Z]yREBR3?NT`j {fg)
+~n@|S0D)6Vx|<v+a.\IASPo4* BHm<|
+
+g[އ;0-q\Wid-."v'Xeu5kr50%; 5W, +voz\6[ۚgxóǦ`n"Vxms1>_ EI1p`@ejձ(0n'#:۟,9JbHw5O9HiZ"ͩTGO D8dx}Eti^ڽ7JV7w.()ct#+T=<\EcA}V ^B,y۾81L֕[P1Yxў3%h+R.kIa\|b=q|/
+g4$s?x-K%˄Y*3ܕl/[OBu%Nڵ<Gy!|ǶpA kϑbKb?I%#ݽlbᔤ!DgJA 6L
+.%8 *6k\򜈯WL!w==c4Ngl-V .% YdKlk<5|# f04YtTendstream
endobj
-5110 0 obj <<
+5446 0 obj <<
/Type /Page
-/Contents 5111 0 R
-/Resources 5109 0 R
+/Contents 5447 0 R
+/Resources 5445 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5108 0 R
-/Annots [ 5115 0 R 5117 0 R ]
+/Parent 5444 0 R
+/Annots [ 5451 0 R 5453 0 R ]
>> endobj
-5115 0 obj <<
+5451 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [279.296 604.06 310.834 616.962]
+/Rect [258.436 549.863 289.974 562.765]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cups.org/)>>
>> endobj
-5117 0 obj <<
+5453 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [359.407 229.072 410.369 241.974]
+/Rect [84.043 242.621 135.005 255.523]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://printing.kde.org/)>>
>> endobj
-5112 0 obj <<
-/D [5110 0 R /XYZ 85.039 781.388 null]
+5448 0 obj <<
+/D [5446 0 R /XYZ 85.039 781.388 null]
>> endobj
-1326 0 obj <<
-/D [5110 0 R /XYZ 85.039 761.463 null]
+1366 0 obj <<
+/D [5446 0 R /XYZ 85.039 761.463 null]
>> endobj
-3021 0 obj <<
-/D [5110 0 R /XYZ 85.039 667.044 null]
+3097 0 obj <<
+/D [5446 0 R /XYZ 85.039 653.495 null]
>> endobj
-1330 0 obj <<
-/D [5110 0 R /XYZ 85.039 667.044 null]
+1370 0 obj <<
+/D [5446 0 R /XYZ 85.039 653.495 null]
>> endobj
-5113 0 obj <<
-/D [5110 0 R /XYZ 85.039 642.326 null]
+5449 0 obj <<
+/D [5446 0 R /XYZ 85.039 615.228 null]
>> endobj
-1334 0 obj <<
-/D [5110 0 R /XYZ 85.039 642.326 null]
+1374 0 obj <<
+/D [5446 0 R /XYZ 85.039 615.228 null]
>> endobj
-5114 0 obj <<
-/D [5110 0 R /XYZ 85.039 621.333 null]
+5450 0 obj <<
+/D [5446 0 R /XYZ 85.039 580.685 null]
>> endobj
-1338 0 obj <<
-/D [5110 0 R /XYZ 85.039 346.512 null]
+1378 0 obj <<
+/D [5446 0 R /XYZ 85.039 387.159 null]
>> endobj
-5116 0 obj <<
-/D [5110 0 R /XYZ 85.039 327.64 null]
+5452 0 obj <<
+/D [5446 0 R /XYZ 85.039 354.738 null]
>> endobj
-1342 0 obj <<
-/D [5110 0 R /XYZ 85.039 132.94 null]
+1382 0 obj <<
+/D [5446 0 R /XYZ 85.039 135.061 null]
>> endobj
-5118 0 obj <<
-/D [5110 0 R /XYZ 85.039 103.536 null]
+5454 0 obj <<
+/D [5446 0 R /XYZ 85.039 89.987 null]
>> endobj
-5109 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R >>
+5445 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5121 0 obj <<
-/Length 3039
-/Filter /FlateDecode
->>
-stream
-xڥk
-P
-V\"$NıS
-PĆu$Z>N5mli^$ML,vՕo@ (ĭ.R?]lnd6__1Nrljڻw_y78xzð<3_~|wfD*$bw+&{J颺Q52/c=S3̯l U^
-:®ɗ+ePOremeGD^ez沶ŅM:<!0$oO~,MGж7r
-Ab2 Aغ5¡4+g_]
-<Ή0'-,w6XCqE6pFF|;<k%d|c_+[j2Ռ8!Ҳڠ1 |0 y{>1u1Qzo@y #7o,I#8dC8ٲ w-Y zC9m9?D\GbWM+&CQbеz'T]qITbt%W.{^P
-rF+._s8zƋ[""k|U3Ec|ka'0vRoG*Q褹>Mi :ic|[UPxI$b|lL|.#5ݧ}=RgQ!x
- n[/۹;; F
-Q^Lփ~gB['f\R@nkQ7f
-4<nȃplgNfnp$#r͘D0xW|S.+Jg}z$a{oc[A|}|RU>/oN_14hm[BQp/w}n5@g<]p?p,`K=} GB<
-0|O
-|UD'41o?Jvgje"dMzt$9/fpj#tD=Ԩ-b/ǁ/ e! 7嶃C'UEK[XQ>z9-) psc[Ƀ8vJR) Cy
-KfTw |wGcp8D ו]|U)*xRrʹ0%AX:5eab4\( )=k{ځQQ
-/b$M[\8z]9 Y\ULf" v†avEYp_/'<8RX
-Il:~.0{)a=o͐.b+J.֔
+5457 0 obj <<
+/Length 2932
+/Filter /FlateDecode
+>>
+stream
+xڥi6
+EjYDH$m)rmf P,$g2?"MHwD& d
+<,ڋh_/`eἸ2DEa=&&,?/{Yǁ*,*fWoo*=.0ygqM?~ˍ
+ 34I,_%uN+&CǧjQZL(!'RITә
+@)QoTTgA֏ә`\$n 10860jח#|kX%7B37|h<J;)j<+:yagz`q [npqDim
+)oA
+Y8Kag&(qӇixv:s\
+k"*DU_? ! %qx{0(6 gz ;myͿ0u$o@MKgئllUh79g,Ww;{ }A7Ż(chqw=w`urCGXk#~[־:XG)U?00N`eYf8•T{TeaBH&ũh8,C2w0B[ zʂ[K%jA^zX@QYZQ6ϱfUr aVT1wf*J(Hys<H?=AGl8u6E3.+>=)žiR|tYwxjP4Ƕ9f/y;J焩8LO).oEaU5SIYP,Aј(xM3]z|[tF<F0
+3 ;ex%b
+nf3rv..|h^7X'
+ِUO<
+EWt|3`9NRR4DUZt8Ailc qȆ4Y^U~$6$[Q1N
+TQÛEAqtf`F
+*Pڝ몯\ǐ貆ਮ05*0QE
+GR+t]BԱZ tG1";y( O 7V6W'D?Y!3ǐш_+W٣-~\ǹpրowj;z"Omr8xHPۺOɖd+BPʁJ`A~tX 7D-^OGtB^RW'QlT`7c4P]q&ۺ4ΠIvI ެ(!f;A+󚕏!$@F<` :8ӤStitp*VasG4k2o)Jt3nӹY^,ߛikBCcmρ)4mROu@
+À+K-a9EZbp䀥JPM f1`q&+thaY{K%?ďdK')wS]7
+BேuXxho @n2; 0gz$2"(s?noqѝbo‰(ߠb)+?Mc>'ڿTBHBmyL =_Ef#Ogj;- a '܋wa >݋.1jYq#r2y.ΤQZhe!_@M."s${U/}zpmg Ϥz"' [vS/b:u̜yb%S|o&(j($Pτq-ہKcTLaD+d͝,]m :TAŜIgHJK&~s-ܳCnD}9|]M>'?(qUQ\K9(a
+n:d2 htBK֑7aA  P -8B>Wѡ ef/~{KuX9@9Sv9Y[2khC m'\p#=_`|ϻeG5KgRP%ċ1yw%
+Y#CPFPC*P6j?3
endobj
-5120 0 obj <<
+5456 0 obj <<
/Type /Page
-/Contents 5121 0 R
-/Resources 5119 0 R
+/Contents 5457 0 R
+/Resources 5455 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5108 0 R
-/Annots [ 5123 0 R 5124 0 R ]
+/Parent 5444 0 R
+/Annots [ 5459 0 R ]
>> endobj
-5123 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [309.861 679.338 512.306 691.33]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://localhost:631/documentation.html)>>
->> endobj
-5124 0 obj <<
+5459 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 668.213 136.217 676.872]
+/Rect [204.407 665.788 429.761 677.781]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://localhost:631/documentation.html)>>
>> endobj
-5122 0 obj <<
-/D [5120 0 R /XYZ 85.039 781.388 null]
->> endobj
-1346 0 obj <<
-/D [5120 0 R /XYZ 85.039 653.944 null]
->> endobj
-5125 0 obj <<
-/D [5120 0 R /XYZ 85.039 630.626 null]
+5458 0 obj <<
+/D [5456 0 R /XYZ 85.039 781.388 null]
>> endobj
-1350 0 obj <<
-/D [5120 0 R /XYZ 85.039 137.996 null]
+1386 0 obj <<
+/D [5456 0 R /XYZ 85.039 651.519 null]
>> endobj
-5129 0 obj <<
-/D [5120 0 R /XYZ 85.039 119.327 null]
+5460 0 obj <<
+/D [5456 0 R /XYZ 85.039 617.077 null]
>> endobj
-5119 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F20 2865 0 R /F11 2898 0 R /F66 3242 0 R /F69 5128 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im4 4878 0 R >>
+5455 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F35 2980 0 R /F20 2965 0 R /F38 3001 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im11 5354 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5132 0 obj <<
-/Length 1821
+5463 0 obj <<
+/Length 2589
/Filter /FlateDecode
>>
stream
-xX[o6~02IanMSY8膮hH'uw.";jn^?<<;WiȦI"MjMװr>-7 ]/pbr:f^6]"zsvz6B8~I:nfsԫ9B .|=K`˧w/x&\oqvbja,֟iN<WdtclZMHQ(켜L~Z8e"Jc.<7M "Be>GAl6iy=Uf vHXz}m?˻[fe>+$ԇ+]U6zʒW#P~iպ<me#2F[%!Zy#V[+ܷީ֢_o
-7~ Yd^Py@'0lBj 7 i^l
-"dN<΂;N
-cDS]$r#:GfA[YdzlK q8#CipFRBAg 2^Ў)s}m1FX({ Z됒C;GCaG0e(!4$&sHk<[LI(si
-]siG aB] Qd h$H"<&@+Y2U`C!\F#KiK'p: =RX dr&cSEB5K,Mc,hZ( }o:S*&)#Fr{Her'p :geQ+#:5Z"̹
-b$=` q.5ZAaҺpmACzw>_n[q}YE-/2ݝh0qar<z](~'VʏRC_@v rz̽
- y><HλDw
- xb:5-窬XnɒlO'biu]%BdHNh'H5˙EV68ecI{(c
-Y}[L0$F]?uEfs86ALnO.r~=~̳FBIf$gaڿHX "XD<睞 O[jO<o+hʬt}e S2U.vt@W-I=ިN&l4@]o(5B5;h'6AlVSLR<,p jӞ.kNJiDjxd<tS\aU(b(95?nt6z6 {r$w{xQh{xʰGmGcW}G)nZ~
+xڭko/3Mr|8ri.%"cdI*;]R "@̎E]O8]$[la/Wr5-|Mtq0n~y+*ۥ1o+|}X&ʹg~~_xso9<
+6(iVؐ{j›Q)*{`n3ny/
+issgr.玝hz2;
+"$͌KܒpJLx_=?4~e:f8 ;
+|Ñ3l]9 C+w 9WSrή酕息1«ș7籽mωX''>Y_7x D%ĀdԎ ȆC-gG@\ F˃KJjƚ|7-e.2{YK\gCԠ0udriJ9t00
+@+QC!\(산 Ƨaey 畽$.e埄ie}Znᖃ0cw^DeDm6qI32#7K5g52!; .d]RvjTaZs\ڦ΅ɏu?xèĸ#sb3ЀĮQ)]90heh\yaM(-% X`$&ش1훲3}z0 PoO8:l r4$ <*1G9=}9Zlr܃;y^8W<P6<@;K0PF6TЊsIP7䂁Z kQ^td@
+Hw4QIVJ"zr[Pu$? F*H!imgq^|ÛfnqkX9X< 4왟m^wfs:;A}۹o0w@PWHzc]s I~-Edn
+֓42d4O{ )`Eh>ܙjR۱Kdz6E>LL-j)c)Ų1<Re+k9A48䆁|;vBYIФoN!6t|
endobj
-5131 0 obj <<
+5462 0 obj <<
/Type /Page
-/Contents 5132 0 R
-/Resources 5130 0 R
+/Contents 5463 0 R
+/Resources 5461 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5108 0 R
+/Parent 5444 0 R
>> endobj
-5133 0 obj <<
-/D [5131 0 R /XYZ 85.039 781.388 null]
+5464 0 obj <<
+/D [5462 0 R /XYZ 85.039 781.388 null]
>> endobj
-1354 0 obj <<
-/D [5131 0 R /XYZ 85.039 379.971 null]
+1390 0 obj <<
+/D [5462 0 R /XYZ 85.039 761.463 null]
>> endobj
-5134 0 obj <<
-/D [5131 0 R /XYZ 85.039 356.653 null]
+5465 0 obj <<
+/D [5462 0 R /XYZ 85.039 741.134 null]
>> endobj
-5130 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R >>
+5466 0 obj <<
+/D [5462 0 R /XYZ 269.675 691.919 null]
+>> endobj
+5467 0 obj <<
+/D [5462 0 R /XYZ 85.039 461.055 null]
+>> endobj
+1394 0 obj <<
+/D [5462 0 R /XYZ 85.039 295.952 null]
+>> endobj
+5468 0 obj <<
+/D [5462 0 R /XYZ 85.039 261.206 null]
+>> endobj
+5461 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5137 0 obj <<
-/Length 3062
+5471 0 obj <<
+/Length 2375
/Filter /FlateDecode
>>
stream
-xڥYmoF_a0BCrڢť6Mкڹ|hZZI)R%);ʯyv)ʖݙٗٝyff4C_l}.$ii¬oO^~ƧaAqz^]^dŸL,^~{{1C%e+Bo/W?}
-=߯ߝ|w=4T<tN;wOaQODIl::0 x)FQ~Ϣp
-*9r
-^NIx_;=o9劽LodM)i̚Zqfj:×h1׽vdEYtgh| /eٴ_5V~ U,)B?%eKhd֛[պyb.{xGMߡyz|w۵;9aN'.i{S#S->#owsM,HtgdM =_m{WMۜzw0$QaiiUaIGN\f}8iUƊx*iX}BL1~]rV%1+<'Վ[ׯLk kZ'41<cG>OKnyQ CbRxo{2E
-cC7*%%t=^֭^\dXVEi;̨G^3ľ-
-iҩ"e;{fńPm1 "Y*#LAqAqaA)B#'Q۬1X,5,4[Ɯ)cV7S0@
-Qv5of孃6-p׎
-zu2rT -".{
-*2RBoIfm,z?
-j
-r@/\RKdkv$Z2͢2'NyqD] `l>Si;*6: aurb.%&TvҎufɢvKseA⣤;8XLy*F}*uӮ'
-$ʦX=14\-[8',!f-)GԾ/{z)[6zi$%HH*$cXeNj12naG7=ՊV.jo;MZWc;#B"kϾ+`$wPiڷ&6K=PֈrRcQDQ*46
-# ĽίpV-ZA.e봺:sD}3\2ivz𝟵M;<O'>ad~DQ2e>syJs!ѱݳ'$:xWrizBiQ
-ܺ=Hc5Ny,Ǻ^pM3U dF\щ3T%
+xioF`( ,i G[M]7@ihSJRv_(do޼y13Y=_%(|y
+H נ#WWGg?p&|/톎fWٵWo>J)G$ީESo/^_
+YMIOHvք<"ńYbY$4ٛOty
+g*g]]KyB&M{X٥8m ge  樨`ܤ8.G˺[Fhj#
+M8=jw S >/d{"E"8 AW~rtvW- jQ uRtGti`iQ[54c U1' d4z
+M=CK3ܣm?q~t.eЧ-|N0N[52zÙqFL) FZD/ H('LT}bS@E$
+UxʏAv 4h * сA y^#wnӾiexA,enoKG'dFy%OA z}RѤx@}*^ 2ojS
+rKptAL(*4Hi["kO2޽`W oT<vz ZzpDi1넉whT
+Dq@,~!QFISsBnZ:EJ1}#˕]ޯW|zMKw[5<Mdn@t̍{TMo pYlWE/՞9`s(wWOq`IL"?1jEKCim9 *aW`:x $'>ڦ^I>l W:GS72Y+*LH--maWܧz=A )Bx !1Kj?Tyݷy![B_vs`CAc!`<oݾq͚cN7+c=}BLGxA\#\Õt~´pK
+l kKrQC܂)MabNv8n7iVBW)L3V4tÔ#P1}jSHM??bP0Ȑ2dD'/H()bHê6 쪈Hm36t!k'Ci &m婡p:4<RTE'SFcSPx.VX "qK"on&2X>膊p,8~6go\{r)-6ʁG]ǐ QL e/˞9HTq =R+\'M3hf7DA9"j߹ rښF bM!qxrS4p~kBq;}rNhS$=n!l͑ȉZ fdegEVC!$/znѡe cJ~EjjXZDI]9~@P7a(}1x:E$ҝwmQz|O©!
endobj
-5136 0 obj <<
+5470 0 obj <<
/Type /Page
-/Contents 5137 0 R
-/Resources 5135 0 R
+/Contents 5471 0 R
+/Resources 5469 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5108 0 R
+/Parent 5444 0 R
>> endobj
-5138 0 obj <<
-/D [5136 0 R /XYZ 85.039 781.388 null]
+5472 0 obj <<
+/D [5470 0 R /XYZ 85.039 781.388 null]
>> endobj
-1358 0 obj <<
-/D [5136 0 R /XYZ 85.039 430.872 null]
+5473 0 obj <<
+/D [5470 0 R /XYZ 237.129 764.647 null]
>> endobj
-5139 0 obj <<
-/D [5136 0 R /XYZ 85.039 401.468 null]
+5474 0 obj <<
+/D [5470 0 R /XYZ 85.039 330.546 null]
>> endobj
-1362 0 obj <<
-/D [5136 0 R /XYZ 85.039 332.675 null]
+1398 0 obj <<
+/D [5470 0 R /XYZ 85.039 308.229 null]
>> endobj
-5140 0 obj <<
-/D [5136 0 R /XYZ 85.039 311.478 null]
+5475 0 obj <<
+/D [5470 0 R /XYZ 85.039 283.678 null]
>> endobj
-1366 0 obj <<
-/D [5136 0 R /XYZ 85.039 173.868 null]
+1402 0 obj <<
+/D [5470 0 R /XYZ 85.039 214.884 null]
>> endobj
-5141 0 obj <<
-/D [5136 0 R /XYZ 85.039 141.654 null]
+5476 0 obj <<
+/D [5470 0 R /XYZ 85.039 180.139 null]
>> endobj
-5135 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R >>
+5469 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F38 3001 0 R /F41 2998 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5144 0 obj <<
-/Length 2840
+5479 0 obj <<
+/Length 2908
/Filter /FlateDecode
>>
stream
-xZKsFWp} YeBlśUZ.oUDDlHB@i_ Hqm.r9ϞOͲ8u>K3,wgf?S" Lbz:;{bf* 0niɪy~׫K\bB?˫30柮qE+^ty5L~5t.~]pvq4I4Ͽ8, t*g3 6Z۳g/D,3T<!zT
-b$4vkVm,7X/2w$[m0Jn %79kTՋ%--vͼ׊Ra%AUK;#۲`pso`-d [pHW(6A?l_7nŒ# X]p0Q4)R̯rVHݐe)ќOUEfWnZ(Z"piYUu7¥VxmPNI_'$mࢱI {K%bsF^6-y_IZ*\ &m!dj[^Xe `!"0R1w]_w4GRqʙiߴl50GP7@
-ya{F -ʊ1^6W<<&pJĭp񆟂=180~C}S+kЦ#@D@:#eMOc7 i ˄sCIV 7 0Tm:SoKx1.gLn~@+G"2bDV
--5`#ӫ:HšAne B
-4Ch{ >L.xQ
-R2P)aK;#*] EH(&V`*9Sdb$z8
+xڥZ[w6~es*
+8iU<I|%QD1iXNAgIΠs{wZSACZHҽPAGAEO3h5zɄmUܼ+oeZV> ;Sq^$6anRЇ qN7./eClx?
+TDL#KN\I,RJnXiCӡn@=K:ez =-H0kQPs s<|sSmCUO<oSt`MȘHKa:/Xl~Fw`{VwuEUY`Ojm%ߖ[wi3ƱBÏ#uюc]lka`d ̓]\H2rwGCG.}Ã.svDy) mD
+# C\Y~0Anҁr 7^t~ `kvE/W{Ҹ6lwZ`$q5i#k瑎?mY,<c{#3=Dp|iMsh~?;ߓc̻.J|PDIēpԾ$M*$U,_$B?2 0KdZiЉi_OeeZx]: \Lu O(B\=;|ٽD5RHooI߃Ve03k<:m6$ZW=h8C瀯ߧTlZ@{b~T
+=JZ\'+i9Os3RS
+~kt F< &2'Eq
+g::F$VQڍ#Mac AKDXPu h
+ʾefWURB#ő-X |3=wG\ʃ/ڰuvëݴ_71*;}=Oxq8<<3H)YL%Z?BsxgҿEsHNb8\Gu_Fxrq 9`rP2.A\EQ]{)х͞ExDW&3e z{uJFW@Ci 72#%OEi' -UJlv̝S
+peRGRH~~83 AFy6@dՕ|]}/gH%*aoڣ ֹE•L]t0an99ui@g,=8%_)$-C^ZUks뾲%FftP/Y׷e E, ylќ: {
endobj
-5143 0 obj <<
+5478 0 obj <<
/Type /Page
-/Contents 5144 0 R
-/Resources 5142 0 R
+/Contents 5479 0 R
+/Resources 5477 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5108 0 R
+/Parent 5444 0 R
>> endobj
-5145 0 obj <<
-/D [5143 0 R /XYZ 85.039 781.388 null]
+5480 0 obj <<
+/D [5478 0 R /XYZ 85.039 781.388 null]
>> endobj
-1370 0 obj <<
-/D [5143 0 R /XYZ 85.039 665.44 null]
+1406 0 obj <<
+/D [5478 0 R /XYZ 85.039 761.463 null]
>> endobj
-5146 0 obj <<
-/D [5143 0 R /XYZ 85.039 646.568 null]
+5481 0 obj <<
+/D [5478 0 R /XYZ 85.039 729.511 null]
>> endobj
-1374 0 obj <<
-/D [5143 0 R /XYZ 85.039 490.045 null]
+1410 0 obj <<
+/D [5478 0 R /XYZ 85.039 524.557 null]
>> endobj
-5147 0 obj <<
-/D [5143 0 R /XYZ 85.039 466.063 null]
+5482 0 obj <<
+/D [5478 0 R /XYZ 85.039 490.015 null]
>> endobj
-5142 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F14 2895 0 R /F66 3242 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R /F73 3992 0 R >>
-/XObject << /Im1 3957 0 R >>
+1414 0 obj <<
+/D [5478 0 R /XYZ 85.039 306.182 null]
+>> endobj
+5483 0 obj <<
+/D [5478 0 R /XYZ 85.039 268.651 null]
+>> endobj
+5477 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5150 0 obj <<
-/Length 3628
+5486 0 obj <<
+/Length 2940
/Filter /FlateDecode
>>
stream
-xZ[oF~JCr}M]So,#>EZ"Us!e, 3gg;g gi*Wi:ςZޝ#i?Hblz>{CgagA6[Ruח?,J)/rJחлbﰦzחE5w:?4xk:~=R:Q?~=_eʁflcZI::GM~WI4[OS'\xc6 yw۶99na<꘤~ǖgח( b oz?-Qͱ-SRa{glCɀ֏:{;S&zaɛTrl"2xS0"/Ǯ8ܳ™{r^ܚcE{Lc SЁ6WL2
-
-ॊ=| :ֻ^c-Nq6vYdpGh32Ȥzg]QpgTin{Upr\V{S,2OA{kL81 ۑt
- [qp}aꎋU}899YLhckԶ!n~Ek{|`n2]''],Tj qwcL;:U'֦ȹ9 5MGgOl&ErGbpZ4CeU|>T^ح Ya1: N&^yuj;rW[S5KݢjX \@9Մ3܈mb8 ]FN{9y8 )F1)jF>p#ʂ#E [#:8naorf#JNc+.۠]t=o^S)' C90ᣘG={ 
-\Z#X=BĐVȣ9ʊͨ%@QoZB
-{{l <0e
-mSXZ"H$@ˁxcT
-)UcrH޵"ō5-z4
-_l!8HqX@"}[q4@
-IDea';i֑n
-
-Óp1ܗ2$ bᏋ'Uҙ0xmq[nBa *)6>ȧ42
-1hooXǽHڏ8چ EghRic_22>g=皰H''ygdW>R :RHj"}-<B,?7
-wڏMYcYAIϪyj|L`K`BRk;73O);n0ē̥H'
-鷓;C zZ224I(^f-Q`R揤0C4 K4^/thi^ryXJ<2 SN+>ظd9:fB$ZUx!Hx!'.Z6:#hG0{DqF13vGJ
-&6]7uWd?m}^ڝpbIPsΏ@v65'_Xi-?g[zq߳(M/я%5rW~Ȅ`ew =g0ʢP4Mv2!e2aݳ攴l
-l[SrC&MV$
+xڥkoF`P
+;)I9 Z,]߯y-(Cp󞑞OOHA6IR4,6gv>i ́y3?x&O(̋o___}΂ t$I7S}ϗ?,E\4 tqkʟ~vn>P:
+ImifqdǦDpnYÿ`1%d*p
+  <IT%Ë<UEW&Q0eLIiT%F?&Za ⌉hr'4@ġT,ԑ6 $DQaٔEՃE|t$[e։.{9B~ G}sFCJuS /db_zI6.JqXҩ4DB{|&3J##
+K4*^<Kx} tt~KvoyL'-Wg"t(ʎ],̌7_QBfRq̙0|HDow6 Lѻ]@V/e]`YK:T3dޣAQ{y0ƶџC:sh]70Wy8N\n:, HM?1yʭ^UߣP 8׊q~# ًϷB1^-ܰu
+}. {.ѪqW.x5^hduPΏ\w k(-[DZ+>,4>֏Ł!2K0 UecXqȘ1 WP" _/BFUw=+~]")KK&,A #щғ s 94M3%Zuv=3xF1GUq+K]cz]$W}yҶU-rd䝴$_Z+: s
+ Ta290-ߩ`g
+iNg*Ppm~ >eIR*ĉwU+Wc@84nn[Dx}5tO0$~d/ $KGN-qp| |)MFfcv_f
+axCcBH=w\I==a;e g
+
+\ C &֕ 9 9jVIE])NbyZ}uaب0 _t 9P];_+ 8<OCIzB stかڨ@]>|VBk2G ?dumAqXei$5َzhڛtIU]p0kk$]ՌeMOC*PRHyJrA,zYr{$'@? %q9736p
+D>T.ZuG]HP U_G\-#'k]o ?a+@? q:7`G$K06'na"?9e 9\k?怹ğ b`ګ4ڲ.ԾgèCB +b}Q_n >uew% {)1I"5壜CXN5gZ`@C$>GI@'%$CDB)Cb<9t\^f@48>_?̨VG(--Gcڟ/5үendstream
endobj
-5149 0 obj <<
+5485 0 obj <<
/Type /Page
-/Contents 5150 0 R
-/Resources 5148 0 R
+/Contents 5486 0 R
+/Resources 5484 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5154 0 R
->> endobj
-5151 0 obj <<
-/D [5149 0 R /XYZ 85.039 781.388 null]
->> endobj
-1378 0 obj <<
-/D [5149 0 R /XYZ 85.039 570.527 null]
+/Parent 5489 0 R
>> endobj
-5152 0 obj <<
-/D [5149 0 R /XYZ 85.039 549.331 null]
+5487 0 obj <<
+/D [5485 0 R /XYZ 85.039 781.388 null]
>> endobj
-1382 0 obj <<
-/D [5149 0 R /XYZ 85.039 331.451 null]
+1418 0 obj <<
+/D [5485 0 R /XYZ 85.039 306.297 null]
>> endobj
-5153 0 obj <<
-/D [5149 0 R /XYZ 85.039 284.114 null]
+5488 0 obj <<
+/D [5485 0 R /XYZ 85.039 271.551 null]
>> endobj
-5148 0 obj <<
-/Font << /F64 3112 0 R /F56 2890 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R /F14 2895 0 R >>
+5484 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R /F62 4052 0 R /F58 3365 0 R /F20 2965 0 R /F41 2998 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5158 0 obj <<
-/Length 3750
-/Filter /FlateDecode
->>
-stream
-xڥZ[o6~e5GD]XN.rEzHIǻ~ύ䑽,yH~;/<iz*[$4]w'b 5'V9M.|ͼlq&7ΫϮn^\)?s$IWsͥW?_|
-}Vy*]޽<r7?I
-0V(֗_9HӉ,]Cs,[NHQ$_\ӎu{,~`R?م[|
-ЌmܝB#s 6[Ua?!ۮ|]о@o[18wFw yknyנP;ӵB+՛uVr[\Tk=v4x"NQs6(BU
-N^%4%kh2kvFeJ㜕^S7O&4- DcO);|C 'ɊwC\KMhuQ(DTěrOnkm48c#.xK•Z]/-WuN:րӾ'i?˙kiP !ٍ
-\7٨`]?<U0YAI}7 Xn7 @u肸>C98%P'+M
- n4 :h1FUAZRwY}_ |0k6|XEC0H-j~ *׺'{0RKyZF5oVMS?qb?`Nyhue׷o GX"#䭱
-*{˻4ɮ
-N6.ڮDjEMģ4հ3H}
-kEuhǧaL/C
-]
-tE5
-|w%
-A+9i1)BL<zqZf W Q#G*,1 56(];6JCE
-!k0OA;ht5
-$2sAHE 9s4 nSLcyá B7K>[
-مf)5.uCNH}Ne "іKo!+HXy;jyLw;enųv8nc=9`Nq"WpeI0:orX=ZSze^e+GitC]y-T0
-]?]tqR@!BR l%=z gLe;Ucz}t aV qlJ0‚rNqzxđ7?MOL1i܁#$f0,V<wL"BDtKFK>)-z͂g'"6\;4hd̖=_9e蜠# 3B_ۇν.
-oq@ Dn:t|(U'`NiLvJs߇(6yQ D0Aox-
-<383
-F|3=wI+q2 ػQԧȹzGR$6<'A韊iewT\& ~ Ǯéu/9uendstream
+5492 0 obj <<
+/Length 3146
+/Filter /FlateDecode
+>>
+stream
+xڥْ6}B5/,$+urY{\ޭl8Gb,2; $QÖFw7βT>KWY6[v^_, <g#ױݮ~^R sH{fzxwo޽ƙxۿgʻe7翾x3?nrjy
+'x Z/jꡨ)iBXV(\ZkO:E5W~RG6a*"F+x
+2vk`(fo>y)Bs/zh_[gA qS
+=y'֊h"?Q
+wtk)-?8@|x_ń
+:v?y}3*+, ƀ˶Bw[wp섇TC%paU 9aXts`L3Ԍ}Fo.L">Vc~tV #ߩ$ J(@U G%<8c%Tr#vVCՈ D]lOQ<S'Mr~/aOљES?[^;\`Ѵkbr*!*"RXWu8*SRw`?_"h?EYƢwm!Hd_硍UUY/Mʊ
+<i;VVۢ'JcByShB/q1i`YbS-yros>/jv sUю<N'ZHuWg| _{#Kp$eR4=xT/m9,ȷfܓ?'ƆBbV;{ָ*fCH\!u=9{et մAW 2ʄł3VV§XՈNmH2ނ>%iMGes2.1X{=eo.OEGX;FQp|ir! 䑦ZlPxh'j
+ ȋ둇 DDe"M
+M<^}}O&Ta>NuZB2N2p :w8{nd#6d뻫Ww J4.
endobj
-5157 0 obj <<
+5491 0 obj <<
/Type /Page
-/Contents 5158 0 R
-/Resources 5156 0 R
+/Contents 5492 0 R
+/Resources 5490 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5154 0 R
+/Parent 5489 0 R
>> endobj
-5159 0 obj <<
-/D [5157 0 R /XYZ 85.039 781.388 null]
->> endobj
-1386 0 obj <<
-/D [5157 0 R /XYZ 85.039 665.372 null]
->> endobj
-5160 0 obj <<
-/D [5157 0 R /XYZ 85.039 644.175 null]
+5493 0 obj <<
+/D [5491 0 R /XYZ 85.039 781.388 null]
>> endobj
-1390 0 obj <<
-/D [5157 0 R /XYZ 85.039 479.466 null]
+1422 0 obj <<
+/D [5491 0 R /XYZ 85.039 688.307 null]
>> endobj
-5161 0 obj <<
-/D [5157 0 R /XYZ 85.039 459.938 null]
+5494 0 obj <<
+/D [5491 0 R /XYZ 85.039 627.421 null]
>> endobj
-1394 0 obj <<
-/D [5157 0 R /XYZ 85.039 148.969 null]
+1426 0 obj <<
+/D [5491 0 R /XYZ 85.039 256.689 null]
>> endobj
-5162 0 obj <<
-/D [5157 0 R /XYZ 85.039 132.625 null]
+5495 0 obj <<
+/D [5491 0 R /XYZ 85.039 219.822 null]
>> endobj
-5156 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R /F72 3966 0 R /F18 3969 0 R /F73 3992 0 R >>
-/XObject << /Im1 3957 0 R >>
+5490 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5165 0 obj <<
-/Length 2333
-/Filter /FlateDecode
->>
-stream
-xڥrF`V0erأtSI-
-â ZQ~o0Ap.Sa`^}75NA
-Qx>`#$˟=an!ndq89푣Rw Wm`Nj$R4? ¹aAn멸 AJ,._R 9w\oSyA؁YNh
-m֨^NhQ"9G -̜{(4RrHԈ0)TY Uu^q;'n
-}BI~0h39?݀1Nwǁ,c6,F_nžs\ q\^!df5ǖ _ywZtݵlEM!^e׌rdUhI0_Fε kEe4yx5 QlI$0K{
-P=ȁeb)=ņQ ۺ[O|A4˝mOqDY7!oYWbI(Qb$.#J^;`JuVAgF=ԅ^'HRSڒ,ʄ4t-*@sﱓYn"BOdoQ}dEOZT[>,VO1КA9$i2xR]Yo:tYB>"Zs#84m.T܏K]cRu_Gr9?uwt `q 4j'7(J7PtL@ A{/^defpH3o2RS-F}xaRs'B4B57NpTlfwmؔQ j M=Ӧ߿ԣ02=JMA%CUw\eH;o󰃸V$_7|% +eme)t7ԕv-4n|9!Z P kTwq2$w"B ܯ)o5T($ ,cțJZ RPqvU٤'o
-endstream
+5499 0 obj <<
+/Length 2768
+/Filter /FlateDecode
+>>
+stream
+xڥnF_!"R`Q8qUI7h@KF"J{nC EX  gΜۜ$j?$It]5\( ́yYMG<Ə,Vxoyyxq:Z{*$I7nʻۏ`Syni/߽/ӿ]]<
+D"uN:.ODZwQY4[b!f Y5+?uNj "|6x%|Tz{ ljwՔߊ}_T՜?j0o]?((|# q̙Vcbz^0f+ Sf64އW|mǺrw|+ +
+\`{`&d[spp+
++6\5X^d*K*#t
+ b}Ub`d>kyQÊJN
+xȻ\bF,%Ĝj@LǷ"/,>cI\G)F"8|'/[>lzӂT G'ąDv[VXO1+˦ i66[6] -x
+.ঃݟ``DpM!h9,&ςV gw0],>$%x G
+4; b`#dH~# j[V b83,Cqf<ոMto ^;zvKo5v6݆bƊdPC3;OGyhAPt0[yf\HW/>rXɠ3Hb7*2-&RnTSS%Eai (cfƞaHpJS6=.x{31>l~
+sxV
+8P܀9 r
+tBcQiqQ*yS؜8
+ڙT1(eb-xr7) T܊dKn<,|(> i`$,B|hlrN^nT0?t@@'V8дKk̅T8TPՇ|6ƙ،JG)Hr2Im'.1ƮjC~0_I.\|B1_*Vٯr\ƻ]*Cc?Z_̜br$>ϚL8
+R6pHt b7A[toX/Si6PJ
+.+NTG> I葟B+">-8E骀:_[b**[
+EYh50it SLvD4 ( ֜AUV|PAzNH̜;C!^\ЋR1a()a3Yw:h2nrk-R! [̷2/~C?+{AHЀUIrNlZ(,2ccM}iO%/+9*0qq%Nܦvo
+}z+g&AO2|Ժϔ\E:<;T衱:3ˣ(2TcQ) jcLiMU2<J"s_ $d I2H/|*ZN4jO!a8@!&Tt89 cje9IQz~ !N0 \*Qǣ_+<*;[tR\);Vx:TO64
endobj
-5164 0 obj <<
+5498 0 obj <<
/Type /Page
-/Contents 5165 0 R
-/Resources 5163 0 R
+/Contents 5499 0 R
+/Resources 5497 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5154 0 R
+/Parent 5489 0 R
>> endobj
-5155 0 obj <<
+5496 0 obj <<
/Type /XObject
/Subtype /Image
/Width 780
/Height 318
/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5173 0 R]
+/ColorSpace [/Indexed /DeviceRGB 31 5506 0 R]
/Length 15650
/Filter /FlateDecode
>>
@@ -19840,7 +21421,7 @@ q[t'U
,¸qy
ec11Po|2^81P):* 4 ^wZU-Ы\8U1{+ǝjl3o1n<̚H _Z YQ-߅󲬇,kpNʬ|Q)#s?ex߬#Mc韯XB㩦Tw8VoڊBeqWNumr-lUnެ*S\\L38-WOZ] <>$ݭc1v您CR-=#p#i!q5D.D.|q.a4!G-4vfDPXeЂq֭ȅȅoͥj@-01M>QGWb hA5?hP`oS+!%w VL3)n- g~܎~uƾN=s X
endobj
-5173 0 obj <<
+5506 0 obj <<
/Length 107
/Filter /FlateDecode
>>
@@ -19850,54 +21431,99 @@ x`
|||ٜrrr--->endstream
endobj
-5166 0 obj <<
-/D [5164 0 R /XYZ 85.039 781.388 null]
+5500 0 obj <<
+/D [5498 0 R /XYZ 85.039 781.388 null]
>> endobj
-5167 0 obj <<
-/D [5164 0 R /XYZ 85.039 758.673 null]
+1430 0 obj <<
+/D [5498 0 R /XYZ 85.039 761.463 null]
>> endobj
-5168 0 obj <<
-/D [5164 0 R /XYZ 85.039 758.673 null]
+5501 0 obj <<
+/D [5498 0 R /XYZ 85.039 742.197 null]
>> endobj
-5172 0 obj <<
-/D [5164 0 R /XYZ 260.019 389.014 null]
+5502 0 obj <<
+/D [5498 0 R /XYZ 85.039 426.321 null]
>> endobj
-5163 0 obj <<
-/Font << /F64 3112 0 R /F75 5171 0 R /F56 2890 0 R /F15 2876 0 R /F66 3242 0 R >>
-/XObject << /Im6 5155 0 R >>
+5503 0 obj <<
+/D [5498 0 R /XYZ 85.039 426.321 null]
+>> endobj
+5504 0 obj <<
+/D [5498 0 R /XYZ 260.019 216.657 null]
+>> endobj
+1434 0 obj <<
+/D [5498 0 R /XYZ 85.039 174.953 null]
+>> endobj
+5505 0 obj <<
+/D [5498 0 R /XYZ 85.039 145.059 null]
+>> endobj
+5497 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R /F66 4195 0 R /F62 4052 0 R >>
+/XObject << /Im1 4101 0 R /Im12 5496 0 R >>
/ProcSet [ /PDF /Text /ImageC /ImageI ]
>> endobj
-5177 0 obj <<
-/Length 2119
+5510 0 obj <<
+/Length 3759
+/Filter /FlateDecode
+>>
+stream
+xڥrF]_K*08'Wry@
+`l|{ڊg r|FnLl
+ZYAgqc8eAP"#SDhk!l
+Qa#?u.%% !ƅHwDObmuxIƩzz72U
+J BcBeft Q Sʧ,%I| hw9
+1෰(KgY~Vԃ 9z8G
+03*Q08ڋ !!.#3,)OŇXOqW/:`AXo'=z}[Xc 952iXݐN `wvr #@ќ!YXq|enR~ N9EB )L=
+5o$=Ajp=ps#pCC!/} h5{( $7+ַs\5 +lxOᑾpS? '+0m6b0:9[N{_xD#0fdämIղ &љv]1*{
+]Li~(walg㒙Lu {*Jb yΜ<Aؤ`v6FYoc{ؘ<!Zo9m[I%VE9SEf!Ka,_ə`vK&qSS_*CcNCG$s$υ>EυtXMI<<2xl
+L-A!(9H9~GDZQ榢3p.1DllV&Y_<>̺DW>6xrRZ7kN26|v@#li;S =֑)wN9U\2Z0k[?].k[02o d9qv=,y0lM=tM%4<ʈZs~]SOh~-gc[_@
+b~[\pv=ׅQe2v<M_=z$sA {Es68 {)us>8(Pa"ԟ
+:ӿٷ_8oc 9^NDiWjm Uq2C)8Bhy$zM@juaҿ`A_qf,y6! wz J!MЋeW&U@l<ʥ"qRmj
+jқY6Fw?L*U_M!x9p87Hn6iL{TrJsBHk .&6~Lb7ӛ_ +G!E< $Ө0FϨ0%]$3&1%Pg1T[`dW*L%s9k0?)+<>{14?
+©".&? T-B+Ebwz
+PK4>݋|"yG27N` ME4I:[XKuicN7Wri#W\Թ<s~>i Ie4-~ۘ i t=MZʨz0q\Rn\VfsAKkMU6o} pЂ TpI#ZFendstream
+endobj
+5509 0 obj <<
+/Type /Page
+/Contents 5510 0 R
+/Resources 5508 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5489 0 R
+>> endobj
+5511 0 obj <<
+/D [5509 0 R /XYZ 85.039 781.388 null]
+>> endobj
+1438 0 obj <<
+/D [5509 0 R /XYZ 85.039 475.683 null]
+>> endobj
+5512 0 obj <<
+/D [5509 0 R /XYZ 85.039 440.937 null]
+>> endobj
+5508 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F62 4052 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+5516 0 obj <<
+/Length 1248
/Filter /FlateDecode
>>
stream
-xڥے]_KP03 ΓMu%+W<8FB*? iq|T%7 '=kDS/Rhk~z[IzcWٷ?Ƒ'CrO/ڗIb-ҿ-jHo_^7-_7#HDF>+ Y(tjGXBEF i^gTy|jARepT"Tb^O
-`vXO@%p7 \KjU][ma͋;4+@ X
-ie恵ܱN"N=Y6Sx! ѨqGd@;Yv!r'?PlYx2;ltE: }(m'S iM,5ː?$xa*Jܠ:Zj22힙G1I>o_!
-"+!m;&]C>'-@""2q.Um"w:%VHaLOl-D)
-0Fv9>ۓ /l&.g5m,r4oTluS8xMU >m)'s]:gLFg]̅ϔJOR+I|!S%273~
- I|P@mN l*Xِ K8<((Xa0M?vJ֚EfA¹ḧ#3$rxp|CD07ك "=S=1Mb ʵҟNں*tBgJ:Yhǃ׃m^*%Ïjݱ]>V;FB<˾u{?0xÂ2*D;h=(0c7]IjWS$^2?U<-V LHC^uG˂J0$DE=ZDKwS]35껑b듨7`4=΢heP NZF
-[-d|]R /x '$KWd-ZIȹ>VaXe0KlH/*6<V }@jf<+R/F[l|p*\>t:uIM<Q~,',}QHDq-L!M/Q/=rqJ񻁎@ŵ4҄"NdO -N6
-r~uI}жX/
-4? M\`LF44ylHaH.ar2%qYq]W.c9t<:k7<pf2Ape\Bfw4+9gx4S[_ O>5CI:
-Py^]rpQ/yg'wKD,it
-:F/UX,`
+xVo6_G ~[5 ,bAX-%R?;x
+a0`Rǻ~,0PaD3<y؋7ŕ$i("Vջ(B,%Q$&|{Xtj~s_Yxn##•ۗt_ݪCa
endobj
-5176 0 obj <<
+5515 0 obj <<
/Type /Page
-/Contents 5177 0 R
-/Resources 5175 0 R
+/Contents 5516 0 R
+/Resources 5514 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5154 0 R
+/Parent 5489 0 R
>> endobj
-5174 0 obj <<
+5507 0 obj <<
/Type /XObject
/Subtype /Image
/Width 780
/Height 265
/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5183 0 R]
+/ColorSpace [/Indexed /DeviceRGB 31 5525 0 R]
/Length 10989
/Filter /FlateDecode
>>
@@ -19936,7 +21562,7 @@ y#-1kV̅ȅI~¼y.
j<elJ5S55rXֶaO_axpa.T.ztfL44Xv(&{]bqhB 'J}.b [Sbb-# 4;K< tѱ _5tbP9A-(w{0i\Xn=i+jVlj3´P0IB7tݤ٧U^3Ƅi\0 VWeYS/"w-FwW@$I x?0}v֏\\-.Z2csjc]RBTvi(dZHy:l@7hEq@.x-LSij\TG ڎT\iG)KK/ԺTfxaZ$)H ΍6vZUx-XˉE …<Vq\&Pu[0C*5sr!@Z!siH׶hMkCz-XXTI5a-& LA-3sp!US=蹬h:W}N:Usl^ Q݅; Ku0vaRh?onî/*c\`n\xa)<MvuD/Q)t hDs 7p sqA[
u{x, Džx.nFbϼd{[\x4.VO,c.<ސM'ѽuQ cqs{qj\`c.0ؘ 6s\`c.0ؘ 6s\`c.0ؘ 6·e jŻt_sv+=
endobj
-5183 0 obj <<
+5525 0 obj <<
/Length 104
/Filter /FlateDecode
>>
@@ -19945,58 +21571,13 @@ x!
QW4?uO4U*J 0#$ݽws~s~ߗs6ƌ1ZZJi)E)sRʔ1
!sƸ
endobj
-5178 0 obj <<
-/D [5176 0 R /XYZ 85.039 781.388 null]
->> endobj
-1398 0 obj <<
-/D [5176 0 R /XYZ 85.039 761.463 null]
->> endobj
-5179 0 obj <<
-/D [5176 0 R /XYZ 85.039 741.134 null]
->> endobj
-5180 0 obj <<
-/D [5176 0 R /XYZ 85.039 431.141 null]
->> endobj
-5181 0 obj <<
-/D [5176 0 R /XYZ 85.039 431.141 null]
->> endobj
-5182 0 obj <<
-/D [5176 0 R /XYZ 270.807 114.482 null]
->> endobj
-5175 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F72 3966 0 R /F18 3969 0 R /F75 5171 0 R /F56 2890 0 R >>
-/XObject << /Im1 3957 0 R /Im7 5174 0 R >>
-/ProcSet [ /PDF /Text /ImageC /ImageI ]
->> endobj
-5187 0 obj <<
-/Length 1328
-/Filter /FlateDecode
->>
-stream
-xڥWIsHWpT5M37'8Nx4|JrYT$P
-PDK_3gRu(Yk%
-V~BCaLd; vrueރE0g9J)@
-
-
-3&gѶeGhJ^(9y[Ծrаظ#`#L
-dѻl>"6([\jIUͼv_vٽCՔJNC hY=lxJ8[l׋SˬIUTaP-K.
-]alL0Ktnz v, <%Rt0X(
-^(_̳9jad"MYHpTH#Ub8 |H0qm~Np8-Ă=Z8p" !1WGG)27 b73O3@|Sk:=3l
-endobj
-5186 0 obj <<
-/Type /Page
-/Contents 5187 0 R
-/Resources 5185 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5154 0 R
->> endobj
-5184 0 obj <<
+5513 0 obj <<
/Type /XObject
/Subtype /Image
/Width 780
/Height 265
/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5193 0 R]
+/ColorSpace [/Indexed /DeviceRGB 31 5526 0 R]
/Length 11734
/Filter /FlateDecode
>>
@@ -20035,325 +21616,309 @@ b0,^xc^qaC+Id ?`bwh}aiB l[f
^`^M, l͜¯4%JP4]^Ԓt4"tsk2ʈujO= B/(˥h'MH0DGb^Q,(unڗ2ʘ2 4a_jX|~92WiH 7{C>"OX/0/ /@*5[n I
/m }:>6A`a5@T^`^,|^`^`,^`^`,^`^j,d^ܜy?^`^l,EQޠߦn_ 7kL/T孚%OjBlͯog?T/(ϳZG·1/|/0n _ X/0/^`^`czy6 lX/0/q۱p>^>}y:3ۧ{IO taO"uendstream
endobj
-5193 0 obj <<
+5526 0 obj <<
/Length 105
/Filter /FlateDecode
>>
stream
x@
endobj
-5188 0 obj <<
-/D [5186 0 R /XYZ 85.039 781.388 null]
+5517 0 obj <<
+/D [5515 0 R /XYZ 85.039 781.388 null]
>> endobj
-1402 0 obj <<
-/D [5186 0 R /XYZ 85.039 692.47 null]
+5518 0 obj <<
+/D [5515 0 R /XYZ 85.039 758.673 null]
>> endobj
-5189 0 obj <<
-/D [5186 0 R /XYZ 85.039 671.274 null]
+5519 0 obj <<
+/D [5515 0 R /XYZ 85.039 758.673 null]
>> endobj
-5190 0 obj <<
-/D [5186 0 R /XYZ 85.039 588.986 null]
+5520 0 obj <<
+/D [5515 0 R /XYZ 270.807 575.51 null]
>> endobj
-5191 0 obj <<
-/D [5186 0 R /XYZ 85.039 588.986 null]
+1442 0 obj <<
+/D [5515 0 R /XYZ 85.039 525.568 null]
>> endobj
-5192 0 obj <<
-/D [5186 0 R /XYZ 231.163 272.327 null]
+5521 0 obj <<
+/D [5515 0 R /XYZ 85.039 505.239 null]
>> endobj
-5185 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R /F75 5171 0 R /F56 2890 0 R >>
-/XObject << /Im8 5184 0 R >>
+5522 0 obj <<
+/D [5515 0 R /XYZ 85.039 411.523 null]
+>> endobj
+5523 0 obj <<
+/D [5515 0 R /XYZ 85.039 411.523 null]
+>> endobj
+5524 0 obj <<
+/D [5515 0 R /XYZ 231.163 228.36 null]
+>> endobj
+5514 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
+/XObject << /Im13 5507 0 R /Im14 5513 0 R >>
/ProcSet [ /PDF /Text /ImageC /ImageI ]
>> endobj
-5196 0 obj <<
-/Length 3420
+5529 0 obj <<
+/Length 3435
/Filter /FlateDecode
>>
stream
-xڵZYsF~ׯ`%``nmlKR\KZ?$yHD
-o^Իۓ?DDyn꥓.r|;=<ԝ8qͧʹ 09N4[&-|כrv,pG~?o?x&Gh{J$}7 |'7'\0U#:ru 4:ai4z0cf`n}Bx<7a]b=QMp.nDrO]?pAXW`rV/MñJhˏJFͧ Stxai[n6EΔ*ZXW3b/p7^E=ձp?~Yr~fH_T0RtcXo+G+Kt"%v:q=l{ڹmErK<F dQ#`>!;D28|oĻf.ײEx`4xEO^Gڙg糑 =,>G@cWu
-2H9aTP(T99h)]<%CcD4
-"Ee,^9jVGV ӭ2GF)1dF^0Y
-^7NoG$N܌
-!]h}&'!x}ZVL;x(qWI ش`v-X9wsng-589E
-$ËВ|/EST(oYZlFNCIci{$zeDW+#W0|Ŏd?q^;EUtLHա'm#<+4N~_rZ##D1 #gHj\skc7h:8dclTW$8zMydhhF,5,Q*UhBթ({r%fsj,OtKТ=p-Mr2_4
-:!
-h=>=ˌ AꦜQЯ$
-lMDw9!Xt<F1!$M6adwԇFžv#07{&,0X!)) ]lʥ^
-GgB-zb ץQR Ha W3sk7 !80=`#7}ZIre@*7RՔfccſtAXrrϗ@}iK FfuyT-I3뚈L6lΫd58T(3, /j[irc$lxE KkbnC`=0!Gs"@MZ5/|8Me
-z䲤 $\~'=a-F c_H30vALc]Åt\hVqU"
-_::r ϐ~l1}KqrȦMl傘+ʄ$ o¾|; ƤJj~ب{SPjϔ+$j'>/},ڮ(K|Z__/`'۰S/]ȏ]
+xڥr]_˂UK,3Tʶd\^aw $
+coE`\;@nI<C;-LLHACa)|Vج -*Ǘ$^eq~$@u!&9GKB *4٩zC~l)ZK[eprO ]DQ
+Vʋg <~⹱*1!Q!@ThBCa Z9˹&wk
+Ƚ8Īgo[dߜ9>ryBfx˺$X2:2cWo#.b8e"lAK., `s83
+7C?&3>}JCI_~azbK{Nu⑁+aC8gz`)En%'i~L
+GZdr HO P<"Ay AtHEW1W`q<=26 1zs<dh
+0Q;]SzVY̓RR"yԹՉC
+]ńL(Eb%1δqZǂB}[IL*;PMLF6M~az8|&kF2x|P#)|KCL
+fs!OS)H@JPyXm u=Q9*M5d?Kghj7tW7*|s}~_B u↉endstream
endobj
-5195 0 obj <<
+5528 0 obj <<
/Type /Page
-/Contents 5196 0 R
-/Resources 5194 0 R
+/Contents 5529 0 R
+/Resources 5527 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5154 0 R
+/Parent 5489 0 R
>> endobj
-5197 0 obj <<
-/D [5195 0 R /XYZ 85.039 781.388 null]
+5530 0 obj <<
+/D [5528 0 R /XYZ 85.039 781.388 null]
>> endobj
-1406 0 obj <<
-/D [5195 0 R /XYZ 85.039 465.898 null]
+1446 0 obj <<
+/D [5528 0 R /XYZ 85.039 503.818 null]
>> endobj
-5198 0 obj <<
-/D [5195 0 R /XYZ 85.039 445.901 null]
+5531 0 obj <<
+/D [5528 0 R /XYZ 85.039 470.272 null]
>> endobj
-5194 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R >>
-/XObject << /Im4 4878 0 R /Im2 4150 0 R >>
+5527 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
+/XObject << /Im11 5354 0 R /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5201 0 obj <<
-/Length 3029
-/Filter /FlateDecode
->>
-stream
-xZ[۸~_V*;O:t&Nbw4l#K^]f2QǚI,P !yH}Q " ׋8Q$l. w8n⧟o`\Gzސ:zK}KigiqbZ*#>\]b-Fe}ZoYz5qxheN.r u( 0^]|8
- kf񶑰aQ db$`WB=}Q ;P[YZsa
-,DVZU\\yuA'{uji9'"rj{y>uB}<v' B+CP:
-,tM%K
-_zC@7V7*;< v|`~Q~ChJi~b[2iO{) nqоup?fmZqh :^h;DāUn[? ]+YQF*MecIsT̾An J7j[>M}6ZO @M[B~YűAwzwy/ikH*p.yrGrm!R4Ѿҥzr<-
-KjMl֡'gG!Lx.(o6ӭ5Ug m\ '57}
-;^k; yn$ʞ:w/CYCzDI><r
-|7ه2c`@6;ߏv7\:?p?Cs*oe$6ϴ'HBf4C#D40?M%OC\KFt8H.NFY /%
-"}7篓2ixD W`UGm|x0k
-lǍ{ Qfxz\GŴvV|}h;ʌ0c( fL96
-4dhUpSI+i*%,5t&Y!7Ƶ}NQ_PWW피QH9v:AڈJŏw'k$r"oYHPH(|A>/A,+tb/:RA2-?A'St׊
-]…[NA%b|(hA. ;`=뀵PnQ$3D"?M"PF2Nħڣ '=1w,zNmGfdгISPˠynXwFz0 PX6A։ v ܀yqgxs2/Ҝiuw{ڬWsW擻h=
-_WN7pB%56 i5tBGͿE۲&S
-ʊes(,h:+
-'Y1{.l(Ѫ3C]
-CxغF~\D5N}p˯nŝq.7uQϼ~rӧ
-[cwFz⚛w$ t, ~1Ĕ±k)Gn Ō
-ehQ2=@bQEζϝ ;+)8Dk8(rIhr$+_
-ڸ[b$%(|' {.# o˯'suLDRfMr%4q^7º^U2>[={"ķ<k vV)mعt/&v
-|&8=6t߶g0bot| k+d1RL9lא #tbNlcAadH&=q}-X1&R2'ɤ~~YZ sOY$%yΧx
-kfs}r'CYR~\K&WT,FO_8Mf4l/{3r.N}z"1sQvM'+@}< ";l}k| l7р6؍
-|G{1'rxl#O7y."_{c3hit{`Sx"ּ*끛kD\NRcI\6O(ָOEG鳦Ygf(+{-0y?c:&FOz|7~^ Dp<D4 C` A
-e6,Pq_E`UD7y E%:3ƹw q#ȹqv$Yo[<c˾i:Ocm6LVq2U
-z2H >`:ln O@1 ϳb ')endstream
+5534 0 obj <<
+/Length 2812
+/Filter /FlateDecode
+>>
+stream
+xYoFB
+B)mucCHI)R%);7])_p >fgggg~3;YbP8Jjw60Ù%G4-ߙh& b=16j~s_)4qx G>\\...A}?-r~wpdz^^*E1:p~< &{hl<>gszƫ(|8Y*D#kN¬Rcƚ3a`BM:Ơ3cBtPgQ쭖7m[%7>UVϕZX䯡znuy#lxM{JVg80 *bV((;93[8"dhxz?{,`Lz(~r_Ÿ"Džw3vK!4\u8+ze*Mm%j:I-ܮ{ wxUKfK>ˋ_tg(0hP.gBfDJd9D$" l8i5Uն]
+MѱpVvwE;
+U7xVj.c<m?񁗰34v4Twv7'E
+`f"u*I,4p~bf#-[qcBAId
+<JKW<ڍF:]{d~iqMjm
+GIRVJܵܥYhSJ)*w0~G/iﯴs
+{wNJbw?m9=nѫehꅁfSp5rާ?J|93 ?W
+@2fAc0e1>R*J9Xcg,]
+ݔJh+}❯&2br/<eT{J#'0<~fCSҊ%p4i8ܮb#GN}ɍ-SOʵ$
+-8LgyZPKO.; 3V)~Ü B* j{
+3~>S!sb]ELb˽Zo$_s?
+ nnGu3&Rcweq['/{0)h|}s|h+lP`Dܥ
+ %JD璇<|,sz8ZohNm:=PxɌ{/80Eli\q y>2Uǚ)Hm庿M,`l=.Wu_aADg͐sND"!gO59Yƣ6Q#A6z\
+iWr LcSZt閃BvY RⷀSu*OCvH{ |f*e;FYT\dž-E
+N=)`9TP~[v{5|rw,m._u&覽V8w< N
+CrZJHx- ' *N*X^>Beendstream
endobj
-5200 0 obj <<
+5533 0 obj <<
/Type /Page
-/Contents 5201 0 R
-/Resources 5199 0 R
+/Contents 5534 0 R
+/Resources 5532 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5208 0 R
-/Annots [ 5204 0 R 5205 0 R ]
+/Parent 5540 0 R
+/Annots [ 5537 0 R 5538 0 R ]
>> endobj
-5204 0 obj <<
+5537 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [424.243 605.692 454.872 617.685]
+/Rect [388.516 578.594 482.144 590.587]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cups.org/testppd.php)>>
>> endobj
-5205 0 obj <<
+5538 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [155.951 592.143 306.851 604.136]
+/Rect [128.678 565.045 216.579 577.037]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cups.org/testppd.php)>>
>> endobj
-5202 0 obj <<
-/D [5200 0 R /XYZ 85.039 781.388 null]
->> endobj
-1410 0 obj <<
-/D [5200 0 R /XYZ 85.039 761.463 null]
->> endobj
-5203 0 obj <<
-/D [5200 0 R /XYZ 85.039 743.459 null]
+5535 0 obj <<
+/D [5533 0 R /XYZ 85.039 781.388 null]
>> endobj
-1414 0 obj <<
-/D [5200 0 R /XYZ 85.039 241.642 null]
+1450 0 obj <<
+/D [5533 0 R /XYZ 85.039 761.463 null]
>> endobj
-5206 0 obj <<
-/D [5200 0 R /XYZ 85.039 222.973 null]
+5536 0 obj <<
+/D [5533 0 R /XYZ 85.039 743.459 null]
>> endobj
-1418 0 obj <<
-/D [5200 0 R /XYZ 85.039 125.442 null]
+1454 0 obj <<
+/D [5533 0 R /XYZ 85.039 207.299 null]
>> endobj
-5207 0 obj <<
-/D [5200 0 R /XYZ 85.039 96.038 null]
+5539 0 obj <<
+/D [5533 0 R /XYZ 85.039 175.081 null]
>> endobj
-5199 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F73 3992 0 R /F14 2895 0 R >>
-/XObject << /Im4 4878 0 R /Im2 4150 0 R >>
+5532 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R /F65 4141 0 R /F41 2998 0 R >>
+/XObject << /Im11 5354 0 R /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5211 0 obj <<
-/Length 3658
-/Filter /FlateDecode
->>
-stream
-xێ}b@PhΐKpR v)-QZ{n3Jmz3>Ren(..\q_f^_(Y]&a4TQXD톖ܮweǁ*27 ћwoo߾^*p?[qpˋߎ/|{q-~孇2 4Fq0"
-"v_$&MKw
-%kePgЈ0ef0l`bPRyyaҠkz z
-J 7װKؚ`x8, !&X<L#"
-^~^ cPfK t<~fv%R twlcߪReeзT& ɠ/8KpD9a<4CTB ej}THz S{[3^ ̽䎀;̘V9OnofKA'PLjN|΂߱]u-i@7//n{Yt`(eQ]YAРs`9}1V,@b A 7DJUenuHe.G[$s[1f=|U3$۫ jӻ5Q+WÄ>X,($G(HUZ="/zUv<ĻAV{v،/<Y`1tu3f@o(V3<"ú6[ȣgߝ:@AX ++]A@ws{2Fє?X=X$
-֨LPa_0|20Y 붩ۊjEq<T|ybCv
-ք@q0kG
- Z(w%/y}C?6_[\kH(bީ Z
-~.*J^,!-Y5lK['ኮmN_K@}
-WVY48*<op  &=c6k;A93+s5gMnC!FF}簱@+0q]Z7#('af>)Jjba]R&9,? G]@^</@PSjֿyZ@w\TW#+zDmaFKTzG `k\$!m|Ayl-` w-rwUnyz
-sPڬqS'
-
-a:]}4hĢ&`FƨB+9I^Ԛmf4grwA8meɻO\K n4yyz pH-=9Pqf'D̔AS(2Vp#=ްbw$!R'BGꨂgXB8FSS4-LՒTjt'FY?59'⬋RU:&4iW<b{\eQR(MĠP#wmq
-O0#iE|i/XIüքQD7:w WWs͎s'Wg80זj92y"{!XU6cʃ SC)fkCTS1ҁůZ.%"Jdɴ6
-򩗊
-sy@vpK$T\c9gѱVKgQqeyu=1R%Rq=\Tz B 8{ݎαoL)'hbZhFW{레
-3S~96 ^eb*y]C]6 3- eN]7喫ZS? }e eI ,VVvGSk|r2> < cI nL<v!G`B--ZW7{E8s/`ͼXǐMjdThr_UzQRz3F)CZކ9^: ./]P
-lՈr0Jۗ1[d+1d+d F9o]*LiN@y>yTl)v.M]"T d^j h 7-LHv%XYn _W蜁7r2D9PuaH_
-H vU;Q?;:J?h ?ǃB<&O"-9jG 48Dzۛ1FC^$< j2ƨ@0U6ٗ= y
-uZQ} Dmb0G\D|cWnI2zPT Cp6,!ФVSeQM<R+$ ǾgN$싒9Hm/G $Oa4lLU]A.PI|yFЃF?*\6pa*_!w.B?l%\y6Er5QJ㩎ҳ5"/endstream
+5543 0 obj <<
+/Length 3684
+/Filter /FlateDecode
+>>
+stream
+xڥ]o6=p83}vmn}8؊V\Il7_([I  Sp8F/|i|-T+_laB J@V7x}q02޷߽i2x:SU޷g>~x_!Lj.in?o?|󖿌~tʐ/~_lJ_d ƾҰ
+3v9wȸ8ޗ/ڲv+b[RĜ0Q_'w!ru4#hgA#}ax릕Q󈿱%&p [;/]v
+" >M="IR"=ӇSXA_Yh/aFl4{oI!քCUekUdpKDF%{ACʇj\!9x.)9-*)_ΒɹYϭM%A6^ۢ1p)ELEޣ yBN߱c1]x1Λ26#D˘-^k!֣n
+$tɡ#bN\s~'| R٭A|Hqp#'\acd$PHOUnz.%#9q.: t-{܍jg<K+%<2OVq7M]  mA7/dOQ IZb^͞ʞB^؇L&
+MB 1JYij
+>4 )NBYl(Ll59Vm'5Cy`dX<&4 oíz^һPd80
+muNduAjC D# jR-m!i}QOÓkcP(w궤UtKVUB-S]M3iiTeƅs;d= )ʝp2We&]񕬸C!m-^-ԜJ.5#Ҵ}cu#>ˠpk KN܃9:Z" pK`Qhq@YnIfB Sv91} ;AE`3+%،Ժku,L! rg\ N毮o9)qa`T ̈́g ySLN"{Q(i[ŀʥfuL(;I^.cish"+Ÿ]T(F/MT^DXblp( d˄gnA{B QsoL>0m g&!m4$ (Iggi5dxͨy0daڹ
+ WljݱPQ|:o`ψa#aW<}?<k#jq#@tGB?by/yuiN=iy:d5Ռ2 NJFճmxa={Sľzi_bG!{GwH(<Qih͕ 5ayתq:[.gzFAL^90ôV
+f-D.'
+e8c)vTl3d\x$<E0zrow|OsW.X`<!&mzqa>wl/lӄSE=x 3@0xp&/}%BiZűJ2Ő3L0
+oj(5$endstream
endobj
-5210 0 obj <<
+5542 0 obj <<
/Type /Page
-/Contents 5211 0 R
-/Resources 5209 0 R
+/Contents 5543 0 R
+/Resources 5541 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5208 0 R
-/Annots [ 5213 0 R 5214 0 R 5215 0 R ]
+/Parent 5540 0 R
+/Annots [ 5546 0 R 5547 0 R ]
>> endobj
-5213 0 obj <<
+5546 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 538.171 193.25 549.86]
+/Rect [243.069 432.524 323.966 444.213]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cups.org/ghostscript.php)>>
>> endobj
-5214 0 obj <<
+5547 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [455.889 456.27 512.306 469.171]
+/Rect [339.156 350.622 424.694 363.524]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/)>>
>> endobj
-5215 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 443.327 146.066 455.016]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/)>>
+5544 0 obj <<
+/D [5542 0 R /XYZ 85.039 781.388 null]
>> endobj
-5212 0 obj <<
-/D [5210 0 R /XYZ 85.039 781.388 null]
+1458 0 obj <<
+/D [5542 0 R /XYZ 85.039 761.463 null]
>> endobj
-1422 0 obj <<
-/D [5210 0 R /XYZ 85.039 374.255 null]
+5545 0 obj <<
+/D [5542 0 R /XYZ 85.039 736.911 null]
>> endobj
-5216 0 obj <<
-/D [5210 0 R /XYZ 85.039 353.664 null]
+1462 0 obj <<
+/D [5542 0 R /XYZ 85.039 282.157 null]
>> endobj
-5209 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F14 2895 0 R /F56 2890 0 R /F35 2880 0 R /F20 2865 0 R /F11 2898 0 R >>
+5548 0 obj <<
+/D [5542 0 R /XYZ 85.039 248.017 null]
+>> endobj
+5541 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R /F62 4052 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5219 0 obj <<
-/Length 2504
+5551 0 obj <<
+/Length 2704
/Filter /FlateDecode
>>
stream
-xڥYKs6W萪L
--2{$AA[yh,heeB-4"mWV
-i$]XOO%w
-B++4O
- FLz9HZ@m>R,Ty"bxo+h}*{*/4wF~BqDQ&~=lgV|$hrU}JP 8̖Fcu{ˣ5-Ak{{cl+SvI;w܄W?A3E<iY!`X$KKͫ
-.Wh^L78W~mIJ輎 *K[c/Cǯ_բ YdC,+̃NE鱢2::endstream
+xڵY[o6~ϯp+/bI]E4iv>}J-L%9g,`^sHOR*T&MGՉL4nN޹xUltsquft3=x˫cLp<I4xjk0^c >^Ʃ nhzOx{&T?oޟ$d
+MB ӫ3tHyr}:gХf_- Ԓ0Qb0sԒre]mfrݎ'Z9x"i7euШ??hJ2qa5alds`UUYz^
+1$XHDH)wǟz8;tE/˪JoEu_nH{T4螏V0iY48RDlQX.#os$~d}!V
+(smj0#@Iw:#rx"\XBD)' 9BBNܣj+$8"ǧFD`GD&/H 
+0V?u^ܗ&o`KHj88@4k?fI,Bg>]7A
+`)N3)UVyE>Wbx?Lm>
+72Ni絧;mAfup`/;
+E*w 1vyI幈ymߞK;')=]N>
+Bga/>hNB,t*aԅIJ+IM ly ^}w6P 8 >11Cs
+I j髳|Z>a7$RA}$3#豉/D$oGwX,.!%ꏝŠS^}= 8a6dw$)"6Eޱ we<v@#!㑊]wfE5OSJ
+j$B=g=„GxA^TBd/{"?endstream
endobj
-5218 0 obj <<
+5550 0 obj <<
/Type /Page
-/Contents 5219 0 R
-/Resources 5217 0 R
+/Contents 5551 0 R
+/Resources 5549 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5208 0 R
+/Parent 5540 0 R
>> endobj
-5220 0 obj <<
-/D [5218 0 R /XYZ 85.039 781.388 null]
+5552 0 obj <<
+/D [5550 0 R /XYZ 85.039 781.388 null]
>> endobj
-1426 0 obj <<
-/D [5218 0 R /XYZ 85.039 367.956 null]
+1466 0 obj <<
+/D [5550 0 R /XYZ 85.039 269.971 null]
>> endobj
-5221 0 obj <<
-/D [5218 0 R /XYZ 85.039 347.365 null]
+5553 0 obj <<
+/D [5550 0 R /XYZ 85.039 235.225 null]
>> endobj
-5217 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F73 3992 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R /Im2 4150 0 R >>
+5549 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F58 3365 0 R /F38 3001 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R /F20 2965 0 R >>
+/XObject << /Im1 4101 0 R /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5224 0 obj <<
-/Length 2413
+5556 0 obj <<
+/Length 2450
/Filter /FlateDecode
>>
stream
-xYIs6WĮ2),\ss8Vh!fKH?oHR\S< rF"IetN
-(H;C,@~^ÅA&jKSVޛw/V~XZkOfO{b)<zo aPz.eO:?_k@,~?u59aX7'Nt.-e$tw'O=paZU3C%hEဂfPvWsS6Y6{y?{+K@
- 1-~Wt_7R%R^җ^8vjωBkW7=8?59:_W(mӛ~ݕQyZ,)g{cQ$k$At$㋠­p ^w\bW vzY]m mǓd(oK"g3/;?B;f4?g{MS dY`NTx!}+~J ":)
--W$ēs'hCʪ4(IФ?۱ྒྷ*l75>lES>]Q~Nu^sImiG`>Vw
-]"BL]kf#>C ðYAI$K^s߻Aܵ D.
-a‚瞚&baLBdKBp:LñkP&H|d/؆'mHj 6kfyN 4,Q=C[9X9 4h8C`!릾hl|t]BD{WbBb-F^Y캺/7c8I5qfq
-k:
-W@JgoN֖%OF\px0r`Œv$-sJ=(f0Žo[hvJ26Na9;dz!T)G$w׼ep
-HU
-endstream
+xڥY[s8~ϯ͓
+ ˒|7Hf,-I|vC\$}Y"cr?HT)T,VExRğz{2i.n}F-nW/nnRLҏ{f)w<{80)7e[&~3-/xDx﷣ Ub~1XH\BBrur
+.3nkz_CŨDD¢ 4q/b%k۲XeCϿki.}Ŷ~Ee>CWr7"P&g$aPIf_-"76H$'HE3)V06<l;,}Y^>Lruىlr)na5倶 xG~ @o9j<,[U,K/ 2oAJt|.$<8GЇ꜋,{ƣP qp*-=qy[fE L#aGb CY28GKΨJ?nHghi%0,WGMK Iec('ᯁEk%Y_BP)l+` JدɁߺ#)P&)H$Kv&s:ݚ)_l ZRyI6 NH`ɳaKs D@ױI& EV%19i$a(!i_㱣{]^ПJCy&j>2o0X.WWp˫B3#YV:ͤW
+oc),u(Ilu7.}3pS'Q"f'X y?7o}izeI{4sla֎pCmp=LY:GG\Z7E`VG*6r@[xmm79ݝPGocyYe|rz!_'¬
+ayh9 TNC_1y؍PfYĭ%B׋vxJF@%{X|YH4UL2{'Jo Ihgs)TDP
+I(\Uf5DCmsɘ>]|37xtR%SjL2nbrFq 4 
+1^HS&1p?t~XH*Y-;sH7$*b4f;P $Af[l*hM޻0CdVXzRU7oy%{66{O(oP U.B4-cS|}㖡a8Erp$f,nƼ2nysDHL{O` 9!|:<f|A:wtEqjn)wHT-t(`MRe)JќV#BI>aZ2>0U( x]oG@;pn,׿h6lO9 kX6E籝h`k; -=pE9n{%hxP`>eX=n ݖ˽pX(9DsNKD
+Kw}k@y s R^rS0^mǸt
+: y&3Y".)Dn3(tβ4<"ؖͨ!'&8V3yDKdTO["4I(9ќњK#xK}9`g,dW
+Gåi|[.' g R+xZ}{DELMWk cLֶ$WT.&X|&]*7mW
++ǖ;|juK3wL0ʚ̻kYX
+ۢ8_K]L^5u-VYOW*>85x2zFw6F!,O:/Go=Z/]ٺ.̔~Ndgһc/듬m"
+b܃MBKDcݯ6nYjњ 3?H+ CR'-BVs}pL4iuendstream
endobj
-5223 0 obj <<
+5555 0 obj <<
/Type /Page
-/Contents 5224 0 R
-/Resources 5222 0 R
+/Contents 5556 0 R
+/Resources 5554 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5208 0 R
+/Parent 5540 0 R
>> endobj
-5225 0 obj <<
-/D [5223 0 R /XYZ 85.039 781.388 null]
->> endobj
-1430 0 obj <<
-/D [5223 0 R /XYZ 85.039 560.955 null]
->> endobj
-5226 0 obj <<
-/D [5223 0 R /XYZ 85.039 540.364 null]
+5557 0 obj <<
+/D [5555 0 R /XYZ 85.039 781.388 null]
>> endobj
-1434 0 obj <<
-/D [5223 0 R /XYZ 85.039 111.433 null]
+1470 0 obj <<
+/D [5555 0 R /XYZ 85.039 475.659 null]
>> endobj
-5227 0 obj <<
-/D [5223 0 R /XYZ 85.039 95.089 null]
+5558 0 obj <<
+/D [5555 0 R /XYZ 85.039 441.519 null]
>> endobj
-5222 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R /F72 3966 0 R /F18 3969 0 R /F73 3992 0 R >>
-/XObject << /Im4 4878 0 R >>
+5554 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R >>
+/XObject << /Im11 5354 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5232 0 obj <<
-/Length 1634
+5563 0 obj <<
+/Length 2058
/Filter /FlateDecode
>>
stream
-xڵWKs6Wpr"gLO8/uT^5Dw 0ҎgL`X,~R?NH㣼PELdt+/'*h
-9\z:\lG[R/ׯfo+/4ϋ,Q Kgoo7/qfAw3\mRxJ7OxfL><yZa3n}(%xD
-+PGuF8k|=9X5˧V9a2FC}+MRJxd]<Pi n"<iQ.yVo+T>li><ަޒE{Yռk-tCᶩˆy&> \ae]Sj',ÞcA.Jr<.:V92D{7 ;%5C$-z.XF`޴5U% AKa3](n*rnzÓ)4lu0t2={#@_A@WepF;8¢U*+_gbC+R"SsAmyM=!(Qhm]HHj8 Ě^r8]hP
-OFN2NLY}NnO|ݲcH_c+tjA&ҖsD0F ɓ[[j`pesձ`4?
-.%ilfA`8QUhˎşnAyLXAsluM0F x 8d3P}5 dQU05ew-
-
-9(TMPM%^f;AGn^C&xɕG(uӡo"ExEX7**1تLbUxd­M @!TOdrGP7UX+GSЭd'Qa:eMpfRڬƳI;eHHV\1Sբ v:]o
-^+Πv/1]3?:g渆&;Hvk2j$O\J>FVkt9IM!T NC{{rcxy{0zh VXZ^+Z <E= It/n|wGAޤp=aphć~$ tVyKl-Z;rK]6^ vP
-4NgMbHTAMrjǤG0MiVp8Py)W?xc2BPOTϑpcrLJ%
-а
-_4<ͅ1>yi_)ac-O%zdAF>('.FIp
-D 0E$2PUk% wpo޴lG8 嵗3xŜEbF:A$mݯС%um(/ϯ#bOrFglDz[U5;pL2"sMtwkL̞V
+xڵXYH~ϯxrq6/Z` xf,8u$XV#M겜F'ΊHI.7hz ;&S$<\L?TF"czX =?X<y3 ցL,L<z{1%^Z_=ÙEofN &_><ɢJQϓw
+Tz1N+#!a{395ד_+3S>5f"ReO[.ĺ])Rk!K+@[66
+.}$ͺɫ.b4$#(cc⼞FL%A'uV`mp1S.(e9 eP05Lc: s^&|G*[ H9Ope<ߌ|gǬW<P挗o&[7`إә3AUnВ`PCrҲ*_sz^ۼʚfVg^
+eMX}m߆;# @#"P'x{ъ.Q䇷D7t7Oim /.4Z |V[ns)=ys[qmϵZ^^ŦQie z nZm0=,^;#"Uyع=^DFLd@{O6 S34x/eANCdg'A"YyA KGsloZOx1[s$ 3)xu
+ N/}L!;ǖx9 O
+'KaB=r75Sxpc[z
+r֜[ʼn=1&0$|0)yFѝ28㳙0k#)7Ӕ e^wּrFAYPU68G
+>~g2.bG~ժgι4m;Gɜ/AɬJft>JPp
+=hTDLr$-|jm+*Z}%dE+Va);!W[#NZKXHpxLwuDltʓݠF Z R2|Iw]!xUߑT
+"񖫻@hS`sYRBLՌr3J~W5Qu 3LK 2sHl
+>c,sv Pq/{z:(C 609{Mm+)0'B6p+\baG' {፜N-Edť Ox^ц(?tY7蹩6[߆!{նyv7-v3.Gm|SiĂo1{^9E[xA%Ȃ?~ܕUl(ӿ%5f~}99J,rT`(7;Gzndj#af,3I3'xcYIe;H{| UCl?ה0k
endobj
-5231 0 obj <<
+5562 0 obj <<
/Type /Page
-/Contents 5232 0 R
-/Resources 5230 0 R
+/Contents 5563 0 R
+/Resources 5561 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5208 0 R
+/Parent 5540 0 R
>> endobj
-5228 0 obj <<
+5559 0 obj <<
/Type /XObject
/Subtype /Image
/Width 780
/Height 412
/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5238 0 R]
+/ColorSpace [/Indexed /DeviceRGB 31 5573 0 R]
/Length 17146
/Filter /FlateDecode
>>
@@ -20424,62 +21989,20 @@ i"s8/4rūaJ0*—dTk|.dٶXoׂCBy`kT*z+8~
bX@AA, PP bX@A, P bX@A, P Jzb,FAybقX@AR W<[nǗendstream
endobj
-5238 0 obj <<
+5573 0 obj <<
/Length 105
/Filter /FlateDecode
>>
stream
x
endobj
-5233 0 obj <<
-/D [5231 0 R /XYZ 85.039 781.388 null]
->> endobj
-5234 0 obj <<
-/D [5231 0 R /XYZ 85.039 625.245 null]
->> endobj
-5235 0 obj <<
-/D [5231 0 R /XYZ 85.039 625.245 null]
->> endobj
-5236 0 obj <<
-/D [5231 0 R /XYZ 251.11 161.585 null]
->> endobj
-1438 0 obj <<
-/D [5231 0 R /XYZ 85.039 113.315 null]
->> endobj
-5237 0 obj <<
-/D [5231 0 R /XYZ 85.039 92.118 null]
->> endobj
-5230 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F75 5171 0 R /F56 2890 0 R /F20 2865 0 R >>
-/XObject << /Im9 5228 0 R >>
-/ProcSet [ /PDF /Text /ImageC /ImageI ]
->> endobj
-5242 0 obj <<
-/Length 1364
-/Filter /FlateDecode
->>
-stream
-xWMo8W9@E")JS.4۸Ŗږ*YdpHYvvBCrf޼EOf\fIi,wl@~"(W]YƳ`[//oo?M#)e(26Iןo"՛O=~)X4MeM%}IƧ&o"T"Ѭ/x?L8Y sDҒi%vr;d*S#G*NXl`"9KSգ 
-~aWdxw7(vٔ5,wW.Զ`E2bqdƹ)ܔO29aC䅁@ HY-V਀&C/;7Mi̴If0[=F I~O11:h<:ڻrsh0HF-gNbynF$N|$D" 1MP.
-[p s+o
-Eo;W
-P/޺=;%!rn v6S$Z'6
-d3Ζ8`Dz>,dc .(x]K[CGG.'q_umҗD<c.cugx-majOʞ8Zo]$,J6gVJ'kT-6ɽjo_`66pdɈώ|\ME=:D^4гk9O~ o{endstream
-endobj
-5241 0 obj <<
-/Type /Page
-/Contents 5242 0 R
-/Resources 5240 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5208 0 R
->> endobj
-5229 0 obj <<
+5560 0 obj <<
/Type /XObject
/Subtype /Image
/Width 780
/Height 418
/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5248 0 R]
+/ColorSpace [/Indexed /DeviceRGB 31 5574 0 R]
/Length 21835
/Filter /FlateDecode
>>
@@ -20561,61 +22084,86 @@ ZTQHUƄ 0
ń_GW0FvR~$WZُ(8'0,~J5"+SjB.J.*~U@x4~$M̜5ٳ%HHpŏԢ%b%IaN\Nr±.N#z]`_0+ ӧ~oXQO;}b^,(yhy<ptQkґp"5=i 5GӰBpdSj6a69R/_XD;7ZGx4l.hTalc6X|e qk4Kjĩ}gلO!gKmNn}gm`V9*2^^mgTdԾ[ervqpLX(й-T}gk![smv.r5AοW2xs,x>[m8 :k}pض/m~1:f2f^t*tr)|w~Rm@B5f`AP|Ŏj`
_J:5(Na+b!?AU`\dkR  |aaQ-?=5gdq"!uPb;C@DDX "a!<e"""3"""N(/endstream
endobj
-5248 0 obj <<
+5574 0 obj <<
/Length 107
/Filter /FlateDecode
>>
stream
x`
endobj
-5243 0 obj <<
-/D [5241 0 R /XYZ 85.039 781.388 null]
+5564 0 obj <<
+/D [5562 0 R /XYZ 85.039 781.388 null]
>> endobj
-5244 0 obj <<
-/D [5241 0 R /XYZ 85.039 733.638 null]
+1474 0 obj <<
+/D [5562 0 R /XYZ 85.039 761.463 null]
>> endobj
-5245 0 obj <<
-/D [5241 0 R /XYZ 85.039 733.638 null]
+5565 0 obj <<
+/D [5562 0 R /XYZ 85.039 743.459 null]
>> endobj
-5246 0 obj <<
-/D [5241 0 R /XYZ 257.292 263.979 null]
+5566 0 obj <<
+/D [5562 0 R /XYZ 85.039 564.002 null]
>> endobj
-1442 0 obj <<
-/D [5241 0 R /XYZ 85.039 117.572 null]
+5567 0 obj <<
+/D [5562 0 R /XYZ 85.039 564.002 null]
>> endobj
-5247 0 obj <<
-/D [5241 0 R /XYZ 85.039 96.678 null]
+5568 0 obj <<
+/D [5562 0 R /XYZ 251.11 410.338 null]
>> endobj
-5240 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F75 5171 0 R /F56 2890 0 R /F14 2895 0 R /F35 2880 0 R /F20 2865 0 R /F66 3242 0 R >>
-/XObject << /Im10 5229 0 R >>
+1478 0 obj <<
+/D [5562 0 R /XYZ 85.039 366.651 null]
+>> endobj
+5569 0 obj <<
+/D [5562 0 R /XYZ 85.039 331.905 null]
+>> endobj
+5570 0 obj <<
+/D [5562 0 R /XYZ 85.039 262.561 null]
+>> endobj
+5571 0 obj <<
+/D [5562 0 R /XYZ 85.039 262.561 null]
+>> endobj
+5572 0 obj <<
+/D [5562 0 R /XYZ 257.292 107.397 null]
+>> endobj
+5561 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F66 4195 0 R /F62 4052 0 R >>
+/XObject << /Im15 5559 0 R /Im16 5560 0 R >>
/ProcSet [ /PDF /Text /ImageC /ImageI ]
>> endobj
-5252 0 obj <<
-/Length 1659
+5579 0 obj <<
+/Length 2910
/Filter /FlateDecode
>>
stream
-xڥWKs8ϯpqYOc,Kcol(fX֏$_ǞXnZ_/?:e%dzjz[М/=FśXy" 0ַd?>Z^Ȃ*IRRXzu}q<ǙoP2..Gg<A~xDR%usE,`"˼j n^.>,=xaxW*( 4U,=.W72J~~O[$Nlf1eE߱AO*^Rt:}8f\ӭmkJp7[Al\M[q̃i-
-ЁRd
-\ Nb-E_'~#N hh
-v7aDžSBI(Xg 7ܵSf:*s k$QG%d鮡d5CeM0]޻ȔDJP9n/ Q<uJ'>A5BE-=膼@4#?H1m?p;gsq>,2?;gswamSQc !w5~zCzS
-^X6Siߑ8"͜(pӋFO]Lx,""~yAaKGJ(rR>8G
+xڭ]sݿBK&
+,>/96b5TGfPt?G*=0dp AsBQ!ECŶT.@v ΢[<hRwŲlq{j=Ng: oISta?G6d {qiݖOk
+fǁ{(-@k"nFqj6Y\mwp 99-$N|l
+=<f}t&AdAkX֪PG;(L0&f6Ce LIy0!rVU[;ʼn!uB!$(l-hmyI3pR&IdA!5 L-#|,+3x戰+t&
+
+d!lNGP3Vs f;vK_]H(up+N*F;1>]ZǪ
+@xp`3KXyA
+G5< 
+Vif 7Q86<z,ޞ˦1ua;Xcx\@Jd(&z$,AKLsӊgd-b|Bsk0#o@1U8Jk0i$IT"9*9I,AU
+Q`U^dNҀ`rT'u̥Gq=|Y3sLc06Ւ]+ss qdArV1m^jC>jbëz̦״W8Ba8WXX2T$˪XG,y]KOa?2!E$Na֓UrƋP@Tmv+@Ñ'']2IǺZnBFXdUr 1ƳsnbYHbL(VNG^<8إDS=
+X/ӎ>PIk
+?17I>CeB$@TKV2<hY \+Eh_ w#€Ӿɷ1{vh&RRrH05yF0@mZ&ZT@̚DɮJaRj^l{Qo0åX=b0 NlጵP6#ELtJcUSbD!בI*!T:VY
+䍧BjA]}rr0(UoS|>A-f^x5h߼<yO=M
+rN[JӮnU<PbYޡmUӚ
+KSmxXRB%FX;J :N\cX)Hȳ@tNIXu BO|+;/؋rlG1|L#r7;R:ݻTxξeSH`y,qS qᅲ>LAOp\\oQGjS-WE-m@TPSWvs\pHЇB5-i-&*+(:ӅNMWtu_-)vendstream
endobj
-5251 0 obj <<
+5578 0 obj <<
/Type /Page
-/Contents 5252 0 R
-/Resources 5250 0 R
+/Contents 5579 0 R
+/Resources 5577 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5257 0 R
+/Parent 5540 0 R
>> endobj
-5239 0 obj <<
+5575 0 obj <<
/Type /XObject
/Subtype /Image
/Width 780
/Height 418
/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5258 0 R]
+/ColorSpace [/Indexed /DeviceRGB 31 5585 0 R]
/Length 26233
/Filter /FlateDecode
>>
@@ -20693,58 +22241,63 @@ LiqYQmeN;ކcfҶVOX0Z76Tݭl׳տ qıPTX|A!UO_
A8m:H=7h/> 1_ƂH*IH ic&.uyIghkc] @hҢ#ÑOiƂt;c8*c i -/E"v +0€\AUcɔ1qo qD427Z {Y1q}-ޖip3*4jP.Vg#CwFtS u ƂXX{, spE.(G}azȬ;D[<e!g)ڂ
X9jCy$ML7n‚R\:%&̷lKQv500Zgsj)-
endobj
-5258 0 obj <<
+5585 0 obj <<
/Length 107
/Filter /FlateDecode
>>
stream
x`
endobj
-5253 0 obj <<
-/D [5251 0 R /XYZ 85.039 781.388 null]
+5580 0 obj <<
+/D [5578 0 R /XYZ 85.039 781.388 null]
>> endobj
-5254 0 obj <<
-/D [5251 0 R /XYZ 85.039 720.089 null]
+1482 0 obj <<
+/D [5578 0 R /XYZ 85.039 664.766 null]
>> endobj
-5255 0 obj <<
-/D [5251 0 R /XYZ 85.039 720.089 null]
+5581 0 obj <<
+/D [5578 0 R /XYZ 85.039 630.626 null]
>> endobj
-5256 0 obj <<
-/D [5251 0 R /XYZ 248.731 250.429 null]
+5582 0 obj <<
+/D [5578 0 R /XYZ 85.039 534.789 null]
>> endobj
-5250 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F75 5171 0 R /F56 2890 0 R >>
-/XObject << /Im11 5239 0 R >>
+5583 0 obj <<
+/D [5578 0 R /XYZ 85.039 534.789 null]
+>> endobj
+5584 0 obj <<
+/D [5578 0 R /XYZ 248.731 379.626 null]
+>> endobj
+5577 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F66 4195 0 R /F62 4052 0 R >>
+/XObject << /Im17 5575 0 R >>
/ProcSet [ /PDF /Text /ImageC /ImageI ]
>> endobj
-5262 0 obj <<
-/Length 1717
+5590 0 obj <<
+/Length 2416
/Filter /FlateDecode
>>
stream
-xڥXK6WT"Z$E=y;@7K֖m5Xr-;Jm@`Er7БN
-Bw\4|X4qiNR
-2 ctZ6H |sa4a-NgT
-q.D G`ܖrl8 I ?<J^& :B%&b} ) T#%H?;w#JDNlA/= Gmg$ָVyJ cCS<|u6,:Eݞ-"%e Ld)kW/sWP%ɱGUg B3sE08-s ^}Bp^3K$T{IM`ܿro
- BW
-g$vS4@lHw #H$t䬻aTn =la=vrn]*vJӵ{Y/=?
-'Hy0'y!44a%TԮpR
-~+zր!w _S/Nhs#Y>$ڣHlL:v=1T1r[Ȭ`6
+xڥYsH_ˢa dgwo,?e$d
+ Z %9y(n;- JC,K+?c%o7՞[ڊ1*1rpu,uɷYoRP? `84[؂VH=͙@){̊W˪պnnn+v{t~֘@4,9o:kF
+AM'7Ks]yy?KDxZWkm Q7B]a'WC}s1))X}bIJD/;?T (UEN
+ykE|SHsXq
++U(BUʆY{ Z]raC3JSa+B <z x.ǀNxTo`x.M5h4y\,}\O95Ős R<u=Lߔy G
+ծTD -("%-7p%pF$(Q4cNK9cx7|̖>p0Yۊ'lڣ}TI|Iu1Zx%aKp`짌x\$7ŧH<5mM|\CڎFBĹ~&{8C4wL6kr Zjeǃ,EUbX;Msx(ݨ:\L*Fh T6dXs҂Mz~0{|t <Umʈ\ly;e{<O@<$
+g,HBv}*$
endobj
-5261 0 obj <<
+5589 0 obj <<
/Type /Page
-/Contents 5262 0 R
-/Resources 5260 0 R
+/Contents 5590 0 R
+/Resources 5588 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5257 0 R
+/Parent 5598 0 R
>> endobj
-5249 0 obj <<
+5576 0 obj <<
/Type /XObject
/Subtype /Image
/Width 780
/Height 348
/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5269 0 R]
+/ColorSpace [/Indexed /DeviceRGB 31 5599 0 R]
/Length 23954
/Filter /FlateDecode
>>
@@ -20827,3948 +22380,4426 @@ Z̾k8 _$AyQ3Ni.j: h7Mk{>\ŸU(3.
eԀ"S
ZNrgAk7Dp97 t<E<Uendstream
endobj
-5269 0 obj <<
+5599 0 obj <<
/Length 107
/Filter /FlateDecode
>>
stream
x`
endobj
-5263 0 obj <<
-/D [5261 0 R /XYZ 85.039 781.388 null]
+5591 0 obj <<
+/D [5589 0 R /XYZ 85.039 781.388 null]
>> endobj
-5264 0 obj <<
-/D [5261 0 R /XYZ 85.039 758.673 null]
+5592 0 obj <<
+/D [5589 0 R /XYZ 85.039 758.673 null]
>> endobj
-5265 0 obj <<
-/D [5261 0 R /XYZ 85.039 758.673 null]
+5593 0 obj <<
+/D [5589 0 R /XYZ 85.039 758.673 null]
>> endobj
-5266 0 obj <<
-/D [5261 0 R /XYZ 244.345 359.014 null]
+5594 0 obj <<
+/D [5589 0 R /XYZ 244.345 534.01 null]
>> endobj
-1446 0 obj <<
-/D [5261 0 R /XYZ 85.039 221.947 null]
+1486 0 obj <<
+/D [5589 0 R /XYZ 85.039 484.068 null]
>> endobj
-5267 0 obj <<
-/D [5261 0 R /XYZ 85.039 200.751 null]
+5595 0 obj <<
+/D [5589 0 R /XYZ 85.039 463.739 null]
>> endobj
-1450 0 obj <<
-/D [5261 0 R /XYZ 85.039 117.943 null]
+1490 0 obj <<
+/D [5589 0 R /XYZ 85.039 380.931 null]
>> endobj
-5268 0 obj <<
-/D [5261 0 R /XYZ 85.039 96.082 null]
+5596 0 obj <<
+/D [5589 0 R /XYZ 85.039 345.521 null]
>> endobj
-5260 0 obj <<
-/Font << /F64 3112 0 R /F75 5171 0 R /F56 2890 0 R /F15 2876 0 R /F20 2865 0 R >>
-/XObject << /Im12 5249 0 R >>
+1494 0 obj <<
+/D [5589 0 R /XYZ 85.039 235.673 null]
+>> endobj
+5597 0 obj <<
+/D [5589 0 R /XYZ 85.039 203.858 null]
+>> endobj
+5588 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R /F20 2965 0 R >>
+/XObject << /Im18 5576 0 R >>
/ProcSet [ /PDF /Text /ImageC /ImageI ]
>> endobj
-5273 0 obj <<
-/Length 4078
+5602 0 obj <<
+/Length 2012
/Filter /FlateDecode
>>
stream
-x[oƱB}Ck["
-+ϗ:#5um0p[
-Ct&EDP-X䰑¦1c.HvDj'£Nq-#W
-$UŮpM4E
-aZ7ҭMi v# FsI
-3m 9+)xaˤAi2sDQrU?-}$%:"9Μ<(^|A׹E$bNLY1gIz֖:wX^z˿s8UIiw+tVJSCj:)qǩv']+u"L˄HW(e]͚'!Qa1
-MX᳌ Yýn\MYqj~ἆufꈩ*).IFQU]qbr
-ΎE͂-{vv!1+n3T<XHbqu0PGޏvac5Ϻ:.Ylg3sQAe3G9]4ua xq˹"TNgvAwYa#f:. WM&m$pdA
+xڵYK6Wr8U^e"h,dvAlF$Fw
+Xb"OeDXl |,HdA$kY^+0Jr'W=H%ś2B,'x^7߻{{3$tu"xwt[埛W*G7,~&;X%"_N $J>,~[ڨc2Ƣ%2N|h&=sb`&Ř%`H"}Q="ɗ(yhL w=Hlqxuwdy%W24 ׬ubI
+-zzTk̢vaFm܋2:vݱTzH<UǢOb#Uť.+ߖݢqm겇foyB۹7@3I1cKr@2{!S"ƍ10x"TN4vA} #t7LJ|ծ  QV%Bpv%tHQվ8 Q&e&{`StlnC]r~vya' ez}TA֡DAb0wlOK|nr
+Vg>YQf` cC[~
+UnxE
+\ ad"(Th ###;]AzY BvufV9uUKr1EcaQ%!)ytd*6)(c*3 냄]토NŬ(30"VَMMsTT}ꃊxL@/MA 2cr_T}
+
+g
+j_jw>wj0n|٬`d~M'Z}F0<< VLsYwK':
endobj
-5272 0 obj <<
+5601 0 obj <<
/Type /Page
-/Contents 5273 0 R
-/Resources 5271 0 R
+/Contents 5602 0 R
+/Resources 5600 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5257 0 R
+/Parent 5598 0 R
>> endobj
-5274 0 obj <<
-/D [5272 0 R /XYZ 85.039 781.388 null]
+5586 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 780
+/Height 575
+/BitsPerComponent 8
+/ColorSpace [/Indexed /DeviceRGB 31 5607 0 R]
+/Length 36251
+/Filter /FlateDecode
+>>
+stream
+x]8 ;0_$ X{B I,ͳ-a .Xn . 6Xࡹ UB`"9܅? oxa!y;x`/GN>[0z <_C53k
+pBlC/D !΄W^ij^x&#[C6RE2H: I#PnTSa
+ Ն )sZH*?^0i,}qG~ԐDQat5 ݤD6
+Y]c!ZPj*KlFk|}^Ȼ>7Qn{R㪢 p7HBX0(uw~TՌo=7"^Li/(oEyO_WX|Ѓ 9/hd c@X^ 27/-q"/Jh5B]liiP“h /d&2A_". 1
+B և/sbzFZ<<Lu>3Z9 }]@Pi|\brю9( Xߍkjv*ZXn ,Ym#^i]6-i`YeE1'ʋ<c܌td䅋CU7jBXJ\0BXђe6=o Gr^m$ڡ
+ڌNLp/ހEuk1υ~]'Y4bgxZO2\k7_XJ^t/ڠyҏ"HSwr͉k}?R%Zǂ6t=)pZG¨gc<9j۾zK
+`䘅1۝s_ )y&^hDYIu',|%/bvLGcLV<,Ozx
+Es]9Mcl}Îya5'=睙=]] akKM{30b~LKBH1/Ɔ?0&(yB$qJ综@XHt
+1mE |0ɀ8?o5uh¸LM[w[oz5;
+H(ixThwdкVdIE\ :SgvL|Y_NӃX03;W>Aup `!<=!C
+ jT,a %Iʇ,Z[,/S;lX!ИZ{?~VF\[{H <hFZ/GJU=5ĸV,WP]HUI܋#Q>ĂvxAKx Jaa
+ܣ|M NTOjK:r/L*GЭflYgzZwc:ݥ,<eZ !>Y4H'ZgxaQq1U@KX`V6^hpXPj8N
+1} NI>Œkf; ^nW-[fu| 2Xo,/<YUY42uXQ`~83ҋl#Gv9, Ь:A^#3Iwv>;Y
+
+~նvY0l7ö<hn]b XhF ڿGǑJQ
+-HL:_Pq 0h#+Ĵ 8/|ZR,
+0JٿDZf<jd =^B}(۸W`ոb` 0KJg/N6>RR80 :=(zdBUԴFxØ}2g6iAΔdng{{fͼ~u^pȭ"ͭ7.­_] ك*}ĵXpd*3#I@K>I8GR}[@k8Nk0r7|7)P9ߗcҬ5a=giߥqjWFCY=n'*I)s Xpo7ͯ^, [‚> JƿgwaXo%ՋW^a0,5+,YJW7XxMa
+ 7-h\Xu^p kw! QiHJ TAK_],h;4kH?bc᾿煕Xxʽ\Nw`׼r704őބecMxXF t91uE,h1 4bCnQYB=^–.jTyunOh ue<Z<gno>@c굪kQB.PS>EV^Xmc^^tü7p<H>G:0^BymXX&Ű uvɅ!̗zvRN>%_ލj3Fi}N.,<[b-ZԲ/ K
+Õ>^'"Fp^r)ɂ] [DRP+n){y1Nړ;#
+8=̍mFSXO}EGᅃ
+xtc8Ҏ2> 48cH؅ d‘* y %E} Jx}`/Sk N
+ ^6 39Qu#Hg-Rp[C/>YW[c8)g/t$3^5Ea`"
+}Tjl> TL$B[
+%-R5̍t|
+ މPdJA'RkT T+:-X{#/a<oe΍76;PN? C9iGy)`@Iu(4-4/`A nj_YEzjBX脃gJ
+Ŷ iBF^!_(>A[:S  rAsޗs}q<Y;vױǑ.X8Wo"SYmr 3UωRzR<h^#Q#R]k,0:Lj^T_,z RuIVw`y:QaS_ /\cjEq!`C, ٺO?/k]iYB< <bڊ9Is5o]Pպon\Gy^va^Гm 8)KZ8ϸ
+tL LUinPD-HH'~,8LǞ.1UOo9\pP.r@a^X vǑ&(&:í̂ƫ>z_*a6;Z|}Pz38Ν1/ D"̮6q/̕4.p;N­=wtd!o>E}~XJiz!7¦E}<wul|_+VkAlLHN]u6xoqc2FћH4f뤉zHnC+c-݋#p_ ֪o-5aJ47RQ_x#[v
+'{S>dUa>Zۺ
+mۘhSw·ɖ^/tHc!4.kA %5Xl?*'̙ DwZF#4MчMc)n۱P,,l,}\,4]2oG2qL
+5YQ*҃b`xđ#\Ix#(>Ն\S B <RƘ3*#đ /^XE[cbIE6PQxBGaPqRs\"JqL5h,L}ͬ|g2Exd)DM
+YHN9&(^xV^Qԝ.X(
+ۅt/ M Ίη[JT4oM9>YxSg.ެ{DXѾdY$4|$R`Yyw%*Rf>X(E1bp."lXz(O%"uث۬5w\8yy-^Α ,EfImpJD]w8'Jp@<&HP<+šF"uS*AN8oZK$}BQ//^IJDŽ=a%bڀbg;,2-4`x %
+G]x"'2 ic,4`!$Hzg//#an詖"Tav
+PgH4`2O؂;p+T*35˦K,d<VZK Ix F6R3)΁
+G/䤜e\،Ey?')'dp_~ШƂ@,dҧV%-:HjHsTz6"W6Iz\q9ضOQ7 ,/
+W, ܓ[x!왰pGqIFӞ_ry!DS!?}F3-3iaRBǧv ;!k o#ixH/c/$J%@ 5?svb,p/2tw^|0j{/i97IC6VaQl9ELWSֽUC(ѓE?.M’YПb]vOMVo-܎i0Lt4"DbIWc!N /GM ʼn0i>^ӣMf
+dFZ2-cDXxB B4zை<ȥWDg3 _pNK1+,𸂟6ȨU2L/T~$oX"j}&-YU
+nUPF<)b4t*|)|^͎(g>R^ȸh$"x!A>^@wGhߢ^8r<bxr,<bplu XN!M. /,4j . Vpv{Bws}Ey2 CGZm
++']x ƺUP?OH\mMO‹uGoy{(/(Icqnr~'|М0cs&݆ݠy|e?
+,6s\b PRiBRain'FA7 \ܚ|THFK?{#*{
+@ )`G,sBM
+_9<c5X-J|m< >8^080򂶧_<N7]M8UU7}4`Xx?/ĀZ1<Nu&B!0;BLی^0Bc1EWy% 3kbʝ'r^0.}ɿȑ#$ow~) C` J]X0`NvDxq=gA<i&֝~“RQߓH
+Ls,l$/8RhsĂ5C=K>HH#WH뉱`y C
+%Out})E,Ps]t/r F O%Ub Y8w} }sɩ
+^0rY;^H.Pkˈ7Fjhgj,@"ޟ; /y,>D_Xmc-G-DB-Jl#+F MhL@ Y@;'m;c:3nk^02/VSR-;8s6W ֱ{,65J޳#ΏdM־ܦ8XR$-H%]K\Op FG\QεZ%y|^0.X(VcՃ'ǥ|
+
+|Y(V$^0 6>3`ۉᲶ", FSbexl$v<\^0)@|ʧj{> Et`; {FQM}+F5O%Ǎ bxҵ< X`M9WFFFO'B SvH§.X\$|g,|u2jϽe#,Ԉ+\ݱD[L}myQ^6LfRG F~4/(,8ƪeŽH5_ sN&IY+`=l{Vʈ€:z1ǃ#Bo=)%&% Q=^|q2h#
+ϛؾ^hxF~(2S25 Yҩ|gG2X0;xIHVДc[s|_ y  F~/ؠn/[յMB$`k /]`I Xζ9!/\Q`)u^iSi5Lr;7X0+x!0H <A.T3!T;
+Zd_ʾSѦa
+y9= /D1
+w, ?{f|U,Op |pc"N"L)eҤqK3\-4>b<;sEtrԈ?
+ߊ=aW$q,EheŁlql24jWbw: ,x֋;6bfAԧNڪ M6Hx$m[eOQ2ԲiJb+&x–~sfxQ0ͪwt ~&9GX(DYK W4Fz?.3(z\p(T"
+HV?_`[
+(dYӕ0/%.~a}KZ92 %e=B5ihJ xO3Ūxxe#т;3kppvfM5ˋUY郯(L| Y,,|9/(,x,Lu,T}{/{,MR2`1Bȴ+Q~+mֽ'=Z[E z84"X;
+Erd+/\ő+Ը:l%mo%1|v5>ᕍDQN/K]mv fp pI>* ?,+3ppnKč?+/\őftbDSt#3VcxX{-E\ El&}z%z`? _Hq$ysBx 8sO!sIy9إ//4/XO<28ǂү$ͳXXVm}nN0 YZ;]}E/} +f{T 3pC~PUzDa.{zm^GaY.1Xq30BDTb<EJÝ0VV-2@&W1R~a8j@^? 8^K_Ǐ!/sGJXpm`L>av[X-W~ _QJm}Dá
+(ЊM`, o&_4z ?VO3` 坼0ʋH:"z!Kg߄ya.ify!~n#m _ꡈ+%%U5B5u8]0lv/Z˗n:7^y!v vUog֤V=S1ʶ&WmVO]m_(Ibv{{6\amh`fnrl:BdeHu6x.mQFퟒ#
+/pI׽di "zj
+Mx]R$7}qR#l-iwM^}񊇺^N`րׅsMlö7. ,CS^_ nw`^[9^g57{s{G޵&K볁~+kYz#%i) hGHjǾqlJǮHCہA bV 1IzVIeHa^P`w6s-5'f5oXb!ׁS$`^z27wX6'\jIVns`)Dz\
+If^ {D21<IvE e!o&j2 ,k5Lò
+ ?O3aAt?<p<.S!ZlW <}<㽼\R}N1clVJ1luU06ǒ0oXmV[zѱm[a1Qp͂.7i :4ǸSܴ9c,aiRXp
+ ;k//< z=h
+oB(|(,0g Hc< /Ns/}ʫ_&{ 2{pp3ýj:G46s /h^d˿\X2*XT.n)>}:%?|Iy Ք"czO83ujXu]S9~ji~x&*ox0{0{pŊX^‚*JՎ7ûH>Z)XCm+vͺg7h. V|c-OTz]ze2 <m~$tYAq^eQͣ ڹ^>W
+)4#,1VPSj+0Gg{W + ^.BZ;kz
+:!5y^M) vV% pAO'u\6
+J1xRHI1]RXnW˗ /C@6Ň"ypyh^]RCE> 4X Q[],$ C/gzSa:K_`t!
+EOB;a݄XҟHv;rY\ ٜ &Q'lf/N,Y
+
+ʈa**H(^HϓK/Ծoq?;<^o
+_9a`x)y^b^+*dG85Ie6$,2* ")E]^rHN̖E3X2,L_ rj4UN%h1.Kh~A GqVXt³@Q\}SxYcsA4zC >c`lqYo;hZ$_Y|p>(_ex9[釸xYwVQ ܮ?b`H/KsR=Fp5aY򂽼 9bak { L-XɣNBצ /x Ƕk^+x;v!b3ʕ/{,a _`=`CaDŏ*>-‰\H DYmy^n/~}d`wđ"piY^=]0հX5x@K
+"Y0\̶`/dwsvKd+.*p_l.9x~%.׳B˪TSmDб*lX`I2/. 麮o}3=Txn/K\kSJ'+QFc'wVt8i6*b}ol gz2X0L?/f]   0 :63~\ ^ъ+5X8:UL(*KoT,:wyNh </x2XD9=<_rtwR52".E3!|.[q<R<#O/0,ɹ(a2?<Np %1W$d`A.͓5
+ >Cѻ$ ~} /lPQ9/t?rBFXȗQlDZ1iisWh1;,PgOC,Շ~?/}tP\u'9O5Iɥ"^ 9ӝ .ͺ[(/,|g{BD-0i|Z`r{ ~!m%ԁgǂ|
+,}jZ)3I 7,mn Ո=UߊwqyVGP+Ƌ3h^_T  [AXe|b
+p<HY@%;x=€"ŜsxAO*q^!p^DaIul1w? vCa2{,:XpPBSymq-p4%A( |(ei@BFw$Ӎ[Uc7˂ٰ dZH,۸n<AeHySlC?3 *I_c&]X,_j5c#O%u@90Nc#eu}t\`IuR'Y9X*orh5[!OdԵ-kNałSS4J$%Dfwu_;? +O}/bAB7q^u][ @{@Hn9\!;9Qԭ0&,d41~]ȃN[h:|&^KE@7%
+N=^Mpx`uH[,,mWJc}WaA>۠V2a
+Ұ)!wVX@0!Ylpb^tzpB+EY8+^7] ޜ2][`FTԦ'л(X~ .MD:π-%6X ^\Шb@V`Q4*[H{͙),kT9h'^)N`V<v~!:Z|.\,XuXRjV'EATB,`8/~0; 3TRH$? F4s8y% >}2vNqX?֥_p
+XofuJw-w{e CHW0ⅈ5M7LXyXˢZNʖmA{ h[4`uesđ$D!g‚> ADb!V5>%9,s~FdIC5v<O!ά"/Qkp?4z+$6ZឈY
+bt^L,)Z& nFF[=v M;C|M**u QLIǴiڷ'cA)| t
+ŷ,}`HA:6I魱uQprWwEtd6`v6zf /
+PE_nBie< d0վbg.wa&.a ^ϱ@rac@ Vt`ﰀV#Evo<A76"1rԜyA-!? jT 5dA04|.(f8-|Cj>+}D_ q|$ڏT*j:Ǭ-E06hDT{ᥟ"?W1Rr~R"
+Pm8 H_6Yz\RKB@aĄ)>haR K\N^ʙ\avM/WdB
+Wv*``pFZIYIJ`w]|noR# ^@Zpɬ_WCF.,W\H,`ds|K60ɝ+8c<E^<
+ \'C3NCYXVjj=T Q{g|K(#ji
+k)/? ObI_,<xvo,"NHz W &[*dc@k2ĺFdW~V `Rq!h/eeFI@̤N
++E<Tr=S;?+<˖bDTN)ϯ殘ۅ3\ιX<
+ ${<YABش$ ֨mna)&
+ )YB\&u0A50h&iUE8
+eb/D!:lXu=%[rJrR0텘$:L zR;U0KUuh E2&p"y\)v_(DOsa҉kg} $>A$1qtBK/Kf3H\M,G8TnEr` ! rae6QTX
++/ 87~\TC!R y4orΝ?\O:*k%WUAe,
+ƿDn% ~zܫXT`1O/4E [^XXFN vH02gݮ;׻Sd'ַx.ٜ2V,,m&bLN[0)
+ {,FP+]sYV,^\(95^`!1`Q
+ jeR!Jnt^[ `20&{f2 ] #1bEYlK0Ji`8+žC5Y(YZ1P+Xމ@Pg;(g5 B(眗eL<Y|``Tt7REb"AEȈ=h>HM]D*fKF,Ӑ`ì',,,Ԋ!}c&+$MyȨ`Kzwy`,P``g/΃8/~wEko
+/os2e`ӱB 0ѵ,,p,h-fLy k7jlgUSRNp<Sm}I<cV=BVZ`Л'd@^@:;Gj_5^R0<.mx
+&]Xtپ^Xսq,|R,z|
+'8e#
+ЫZe<g;D7r $)u9(ޡzĮn* Xȱ1j *~PsmtnpF]2y;lf'_?mF.G0<`+raT) ɑ ::5QNS:EgoNQSjb=X֌\xuӉ' 3'fn[* `fȅ_@M^a^cX0/3 } ^0dC\0dC\0dC\0dC  2X0d`7dG<iЏX <Yf Q<   2X0dMD·aDIDNӲ<Itm/WaTqSgnoaN<"lE׽,!x_Ύ+EbeZɒ{͔P,Mn=oTßI:!);cxa_7Q|I
+fH"PW vL
+(EÜTZ4% QiMrx> \NL<0C،Ǹ':͔'5 >8 ^x5,U.|Ho ~ΏBVd/a[[j]F|uۜc^xZu?Vz>w;-E`\P@<J9[;"[_-<
+9nOrɅ݋khTm_
+Vǰ^I/o /[2W; {\л(e0d9<_ kafFL3kcg{I{1ON,׽_rvk7Z ^ui%=rA'˝3Ut)mP$~My긩n-m7YeLT iӞ􁖽&0ڹI%V Ց7ھO.l+^T1̵e`\V%g0mM_B={%g ka\]zk ‹z5,W.{n\ѵ`Om']cBkڍS]aAu(%5
+h?I>G#EXX!|;QȻͶ-CLF\_ǂz7{ XHV0 #abYΣ~!1Fǝ'~."n@ ,`>4NlիXYy#‚r}Tb*V1W
+ H2>wTmad~j? KZ?^[_3^5vűE{ߛl?}'vlEN>Ăʫkt6𿊅V|~-+,W|̩O=\ܔ +04ɬ]^Do՝6ZSX?,xwWoy8OF{A:S $]`re
++mhƊX% t๓ Sqsc,#
+]I;?ğ=uhK"XkvAqd} 0*Q
+wvCG69ºrpo**ccEvUNN;aObv`7c+X(֝+-[ AnN)׷pdKTMeX2
+ U
+ו^'KJ\F,l nJƝT Hs+XXo,C8bʎx#W?Q.X7HsV{/V텵soXH畯P8/-M._=Vki=e\|eJ_>Wt\nKRPq\ ߂$<ZY.gA!Yc0.*|Erns.;p]&NטrO͕,3Vzn5m4X,lVsqt=k>׭|hjWp
+Z>MqF5?Tzl}tfimU3\SPaWI_!UjX`ᛰYX1
+]iK8uci۪m;ڒ.b#smՄ׻<qm{<`vށAէGKĶyݞX pc_]h fb/Jt ٳ'1c*ԻEk]&{ B'eԥL*QS\*գeNku8tZ x ;)a뫇UAѼ cXifWLWoBj5Rpr<ܶܓ}T/lORYU#w~}y5.iuMn׽]߄{m|ѸO΢cx l=- ˿!X@|MrAY47\ۭZ)/@O|<jJjuP^Nڒ wIo+ZݳqػVHh?b5]ZN ɓ1Y:][9c5'ѵD`~9b`*y\m},dT}B 6d{gGյj}ʾs/~o >NFx9|rh
+x9@Hoe2hD9"O
+aLJ_@o^[ ed`aa})Px$WnC2EUS:}Cҩo3X03/`/QImdwY_-`O4X0Cim7C /`ҕOB`oёc`    f,pf`````aH`PU`_B.҇Bf`baes0?#嘧ƺo2  X,= ,X(T}f`Oc!UՎxsC K+`ПBIjCg,R (Eү  ],KFAYC,_(lmn˒:Ff;œFՒFUs{EwJ+ jmd ^@HO
+5]2am+=Դ3eKA`o^/u)4֛KU]^.K,|;,<O .wK)!%RI 5?:li Y^CN5 Q^+5 R(/x,ZH_Ur+J ﹺX-ݵ==,H`WX{3Pr UHgkl] BҭaI?u1֜8I!ґ
+ἰ!9i<}aᷨ2 gR\#~KZ fZCIb`Vm(,́q ӌX"Ry;KU^)3r W0ue J.2qwʓ>-#{AT}RXuEU. m *<J
+x>qWQ k\m9Y}īg`ͅPN.̋ *ďdo<9x\`,񙬶I~A,tĦކ{ m/A+v '&`j^z@ꀰbAPrÂЏތcB pI`}zM1_L;G6XHb;`q<,&-I3s+"
+أ>ɅZXhAޏ
+-Q_ @]*t0iyP'dpпÂ+kPC|7,zs[ X h^.T1#);eU|<X g\( 6aa٦wra[(,ĀXУ5aaVK&6,l mw9daeR:DS[ c#y6js?rYb0`[HiɈX\p kAA7+\n O2l_BAωlPV,x
+),LĽn,d V,4 j߰GLdq~9h<fRkFxgnRX5 ̆[c~b(=؉\X2rU8E@}̀Y-m9 )?T\QƂ2q#&4 B,rw&,P2]rZrzlrrKQ0'%ND>z :h&DS@K&XHPK̗AL٠`d d8hjVU=-H
+G,hvwXl~t(7%8g6"V9"9<Jij>Ph;S㰌-:Q P`ePMA,$1mkZϕJV9 Hwiva_E5^<;l
+~ 7*iz3kRZܯϙy'\OJz q4[?ۗ:S:(2 JL:oPRv'd/ [w:i,)z Fd鍞VFX.RKW
+rCNQakޚ߉F",fD5V@/Yr8&2Яzh)((9 X.&˨
+ Z,\@CCbz-TJb5[)aX0 ް@1aP+PXTW>f ~5EU#˅ Md"l(3{ ^(veegEghZ{o!Sp-uƟ倍,,N
+endobj
+5607 0 obj <<
+/Length 107
+/Filter /FlateDecode
+>>
+stream
+x`
+endobj
+5603 0 obj <<
+/D [5601 0 R /XYZ 85.039 781.388 null]
>> endobj
-1454 0 obj <<
-/D [5272 0 R /XYZ 85.039 691.864 null]
+5604 0 obj <<
+/D [5601 0 R /XYZ 85.039 758.673 null]
>> endobj
-5275 0 obj <<
-/D [5272 0 R /XYZ 85.039 673.598 null]
+5605 0 obj <<
+/D [5601 0 R /XYZ 85.039 758.673 null]
>> endobj
-5271 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F66 3242 0 R /F56 2890 0 R >>
-/ProcSet [ /PDF /Text ]
+5606 0 obj <<
+/D [5601 0 R /XYZ 230.943 420.51 null]
>> endobj
-5278 0 obj <<
-/Length 3095
+5600 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R /F20 2965 0 R >>
+/XObject << /Im19 5586 0 R >>
+/ProcSet [ /PDF /Text /ImageC /ImageI ]
+>> endobj
+5610 0 obj <<
+/Length 2486
+/Filter /FlateDecode
+>>
+stream
+xڭY[o~ϯ0Vx-Onw89l+Jr3R[y"E 9O@:E:gŸ=OrxX~
+™E'CN Lg?Y}]xZL‹xf!wL .b=_1~x=-_.>:I;@T:gѶ_\][̌gMYqxREId''Af=
+10$FP YNY 3'QF"cġ^^ʟXd^8OPAhC@`
+?d*ApJ3{)^?eP2|u $P _ETVYU<!k'c9m:m,<9o6j|[Ya /T<o3;vwXx*bM/ l%*PP6z
+g!''ap1g17.$́< $PNv xh;ȓgŏ.볼@my!F-W; *
+kbi㱦'X!0 c\:SEѼ٥BFJ(@;sڷ%$NP!;Z(`\1.J5)d^7Hr^+,b,Q5glTGdO<ݹ$\-2-eAw/tF|
+{0P$[<vgasX|_Q茆G=U/H`ƉD("IB$qh #07x,/&40FԮR'dwg
+; ; -Er¥:4"d*4FusX9)&
+W%6;V$uZ L{z})|x
+^G6@a
+NO7 IgiTkrǝ+_jyɣQqz88sE2vR<yx?M`(J|o[e=v t`^
+R;m%s^N$<P=xSzg 5cb܇2qP`|;Cz$$?<`=;p4{Ԧշ8R^ݩN-:a+c=VIkh
+ٜ O.ɤ%K\ZlP_SYw c9S v^Ȓ<fQP{ICYL;~P#N+ ǥ47
+/-ioqLB=d@+KY+ni6/;qmF֮
+]@(Ӽ<Ep>.J} D-^ZPMeKô ,$Ns;'JྐçHM3V8*9PCKsvcL{]2[`Z^k$*(!{2$ .RYIׅf/rt:֝xH̖#Q>W|;V47`zo_S.+`@ɋXɣB$LƯǤ+I
+endobj
+5609 0 obj <<
+/Type /Page
+/Contents 5610 0 R
+/Resources 5608 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5598 0 R
+>> endobj
+5587 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 780
+/Height 369
+/BitsPerComponent 8
+/ColorSpace [/Indexed /DeviceRGB 31 5615 0 R]
+/Length 24902
/Filter /FlateDecode
>>
stream
-xڥZK6ϯ갡R&#';[V%RcPHj/HR
- tvxY6kn(p0z}'3 3uevEN3;p4 )xѕSxP8rfrð X.*ՖA",Sl;yN9t<g9O};nQTFzTW7r 0e㶇VbUTwSx)ksMa Ρp(9QKiAf}hE~\ۂ <,ʫ:sekk^PO[w6] ^
-%N\)Ȳ%@|ZBU;(. Kw
-\Njl@P v<ݚ}ljʧ1 Ƨ
-6y*N=/6* +$`& wk:wU+tNy٘>y<Ȕו͓ "'d(mT<=, %u@74bI%Du .p]C8ud2XVލK'۠fܚO %[
-hJ-#Gdj'D
-{>{yЁݠp0@IlTĮ]#~駅 +r8߲5T2юʥM}--!O0wH;9ЕOS^9nD́ꃵ' R$#pH q=L' &1<n1P")oeVl5*]U)dROī4=YOzT c>Jg0@%8wB2t9{7ŋzv
+x]b: ea3l d6I}ﶥ dIbP2ǍPJjv[8_B2x[ٌ`!7v[nֶoX6^6^6^6^6^6^6^6^6^6^6^6^6^6^>O{sk'bv*'ۏI1z߇ o?{+:[[VOs"[:=A9h=~##xe9U{tYg38&/MlIήNDIvmkFٷl<KQ9RmȺ$:4݌ش3m @6,|/įeh0,Wl LT{,4ցio+Ӽ=%Qc6+7Sۉ+~B,;mȌ$>', RJ뒴 84_cazg"ڰM@vDc\ ΍X!9ByG%Y 6xKK7,|/Vn`:/&:0Q(s@&x݁8:XH'6<Æ0mY2luvbX ^ґ]4{!]d8Aco=j܎Yz
+57,|/a2N]G %t<iGp#%y/hy72I]ʓ
+=A-Ǟ0bm>ņaaxn+?/F/JiNx*1YU2)CI8߄d'`;oB>lƹ b
+ pc al:whH_zY}Gi2$kn^0ť}-JܠߏKy3$ӑȨs$8#Vfyp ~?:uR}=
+d>i:]R$i}p@Ca"<{}9Ld+nH02|LB<CUyx$2-}di61o#y޲gTqM;9Hbkԥ:,/j߫ug30EM3GMcK*txܼHOsWq^a䀲#2̧wb\Yd'"w\o8t#J0G"WxImt8챐;:H̏7'ғyatwwj]Bl0=?/3MT"7Ä69Iɥzxo" N 4/߷A zʌU0ba8l?R Msuk2/~ܓ O=6L+%X8<ٱf_߲GY7*k3?y,Iw-rw@}gmeWʀ{c&}ɾ)/reo6HFgѼx~5`c:NVxĊN89)鏞 rD2J)/Lr:ۏ1NX vOnlpV}[tKyH~Zs<h,mRG~m)op 5Y'ף+m i =u#]BV(ھ*0<jɗGjұ5SQʶ;Xk
+|fJwa)J\#y!ΒKˬY ^hmu0#H7(v49rR2r`rQb@9 ׍ϥW9sNޝzD /ΨmÔo7%ދWr&,Zt^4SG`%J ~W _~tiW<@  .{}9.Si"FHn̹7QX@G DŽHvǫh1$Msnsq}aBwJ6,vS^<q}8t.z azdvčB.[ 5/B| G}v6
+H89xMZ|G֑4~›xaN첯x^8~Fkwq<hЏNINlv@ϛ@K'KT
+J}SR&aB u_:_`aGtN<| ?X2lUЉ3qH2~ul~7O;/)|'# x13ŽL YW?^1]fKim|lQs0ȏe]a}0yfZ'5n0 sgOF鲎X}ɾq`E^¾ƴ9%,8jmcV`,raƈsQ-|Dip{xa8'QpƨM[-Gov´y/@>XWZFVcj/k wM$w8!Load"2b#?iH:\K i$N^zsqiIy Ӓjrf&.1bo0<9^~^8c]y$0Us)~v;ws޸2dLlpgX"cj֜)~56?[yak7<7-LVK`TS;q* Ԝ?q` 9z+oK kf]!9=|Iٹ3V`Q7wyfy$Ư5{+Ur>6%Twa]E!5-uvءCENXpQ@R充>ǥڤ}{TM!N<*0tB, 3/& ¾4)*@rCaoi>/'|M>۰z^Pn].ғ
+ʼWogvBճW7}^5O
+ Js \`)zT^ ՉqQa^vdQGi»x;O.fɗrIp1ۣu£tesܒ3qoqAx_w\Od]*@>):  >
+sXV1#-~ד
+X {*C
+ /B{=U
+Ծ׮ ‹]z& dͷY*<WA,L
+ph˒еW{n=5TwH̳7#M+a*u <TcPhl& wmv9"@hZy
+tJK4ҍbbfʹkň"! W0am<'YupqijED%bE
+2+[ e@\/-,8/$5̭dDJkbËDȟpAo<%*!%/M@$S<Ȳx" ؍X4hJ7a0ma^
+~h̛&ho'/XTi{*<%JHvQ#Ynv
+ь/5,
+f*B!qElqpR8' ,چ8OX00Ccՙ;F-/(Y`!8 ܟAR b3
+ IѰMK _R/"xAZj}=7AF,t3Pޏ+so^
+r4##n cxZ `90©eaK8TR_P1ZG^Ч
+z,\ވ
+݊{Fh"i;SWȫkm/|sPvhp]?3!xa/<}
+,`Mq7&}<&O; uٟI@,9\klzc<5xt,Xc>;W?' ?
+{>,|ㅯ&NF8A ~-RX}rCa  ;e
+ޥ xզf{o+.wh?ޖ/IzFfu*/|; ޶*7&[ֶH6^6^6^6^6^6^k[/7^[ [ۘc.Űmmk[ֶmmk[ֶmmk[ث_IY'M{t4d)Arms4h"%[Zo\*@A\sҕ}7|9[Ǥ
+O$`P\o Pɜ@Jgř̕<V%fp_n&]ÓIl?UAI?wQ@aNJ^-eLWe= 
+};ێ\3|
+^лy.>5.,8VB|MخC~-,8ɏĂEMB4rօvCĤHj}zT$XR!\!h[9.|s0V5Fx4JDZlj8& D }pU7Ylt]g h+ڜ>H31]?s|x$Ud5ĴLD^ZGrh
+{a|qD†CCcIw!uH2iJ dRaB.3k0?
+p.H4e87xY +tT%p~Ă!X8~x#:Lov'ڼBkip `%xH6po?^
+޽ґ ެ/eHř\54%>!&B\|&/`]DSxR+
+k=4@~v14 Z(pPO;vu#99cl:JWW-A}V pbW0y 龏E
+,Z` )YGPC[cP耰^=4AP:
+|(/ rvτЃڤi
+ ;`KFNj89loFS;~ƂŸh}ca"#ܶ 5V4^
+ `U舣za`AqR
+: n usP{$(~FKw ^'M QF`#GC]ɾjbZ") $;U ~}KNAO9P5GhBla^d衁 IU M8БR3bkW<[Ak1߁_Haa_ / /|\[nXb _7 tㅍ6^xauL{WBk.񞀅.!BCgbn;|0Ky0clM^h~ؙM)<+!LXh.t\wUǍX +ժfyk^yq6,;Ч`8/>_ 9,ǘ\) *-Ġ8(|!,RE%|Y'$E :R 7w ҟz`Z$ݼ`2I;#Y+aN%'H*>=#i*+YcX͊^ nzDG`c^o9:~:y`TɨOvm/PloБ2xxht$TG_i/`LoqK=\C,"j} pL*0˲x/0L])Q^k;T#PHh Z;!/ 2-)/0y.K,hF;p1Q?R
+&e`P_ !.\2~> r8a7Pb*I]z2>$150~g`Xzn􋼎j1K0dhk?ڭA' W5me,xcoXx /lXxs`lX [6W]FD,3;\QBc!~|
+j ^pXT, słu%sF{v8}2/`m,Xӧ;O5? >C]{`J\<ߺP{j~2/T]\ :ӱ`_
+v?ɸ˞ AavA\3Ɂ u|/a,y!s (+5;Šʴ3n΃R:V&C-ܬ IԡLXKZ&ƹFV^娾-^2(V՛h,m/x%/N´wqd Ne9>hHo]X:neԵy!HeaY¡z'g0m!Z* 4 H +yi u&EMX2^.f# xS.2&KD#C#sܹͺ &vBJm\]b0v <5Tb̙ah2z8 r20}bڴH&8!⍔mC%Ջ1C0S>B$}p2ǝ$ Rf#8 2S*\ nip <;R^鍈C̘Y #Xc5~x`u*cH=WB*?$%Tj=
+ TMlL텞aS`=\,Z_G
+@=ܡdUG5:lyp:Wa,x&BLXLBzy;
+TKJעÂ0W8uL„r9_`zPqiA"/#"lOQ}#LI4,&:1b֬YtgANMOS^VyZBca`#:nN2`ZmTI KTWP tFX!lXdSH$2М;#XuB -q#ݘ5ݸ0i,#7M01pxu$%ZOJLtD)"Ga Ubs s.lV,Ԫ4Z3J# T-u,88C֓,Pyn~}2O)XfPI,]vZFUy& JGζ<I[I[u$tc25%  ^HF^f{Jn D6e"Y/p3gmIq\f I%\x΅ STXz^
+ۭ
+f*^PuسjgXd/  &z5ѨUyЇ!ݼJQj74fDy]AªpS,UB^Kq-E7h9#n0`au *|R]_C ^pu
+/-D
+骏izE+1︥Ƈ8984wPk|
+<韣=jمṃ㕋&/kNϋr\aV^gʋt f
+Q6Y,dz=.B%s
+iA1X@[ @v`Aq"Kq/| QvN|E#5 :P9jaC!=w>>];򟱰Nb;o<w089w~rXѯZNw=WL*wm C[g۲mY,2:x=ry%AiTG,g(E3 syߦ{T'7͗z mBDt/< s^jU»WBd,
+G
+ƆPo[r.,}ߡZrnO`rY0r m/xe=VlY
+%
+~SK41g3v\ 4oky-WlgrWIZs|pr! tG4Ga!WHݵ@f?n̐
+p\3S!{HԼ;J˴K|EiOq84ֽ
+ܼniUXn{x*.O =X耂ड़ *&C`IjGqW1^ H
+A+quuMs{~(Ou֝s.Z6Ts)ny
+{uZ vB,5ؑ)e煌;Asm}v/
+ *BSM{r-(Ekۭ6/{^P?Y#U:^y_)˰/<[
+Y /(CE,u1FoY/6pӵyaƂ$:ObI ҁ{[[J$Wa' ux!؛ 8XJWXHG,--nqwB\ar A73o~/ܮ#NE͙
+J#@Hc0nS},  7OnZ^x',E%Ξz9ʭ}yA(A4S߾#n#]ޙɅ kSm0iN@^ L7ͺ`kJej3/LY5<0^ȟk;9R @7W$'Dt] A ԑP7h x͏./S'~V#u޵f/`oº~BEǻVkU^;†okBm`[=ShhŽf/s8g?FHP^?ڶp:;t _m/ bi؏ 3'M=D ýOPns߻:Tb
+*fZm,|`?v̬*V #{\qT1mkyr:*pb;3p (PVnzOB6_WOK¶૫Ё5 ʤb!W~&?ƈlLHVIO9
+WrA6{SyymWTcWGhA@
+A;Ci9K򘹠qjfL:)Yfi,|~"}Ӽޮ=Gm#pռ^{a=,lW
+5^{b8z/f F΅ 1<D⯁ɰ
+QK16VX9x_Pͯc݋%ߦlX@}'k<w|{=l=T&.Ĵ{YC
+) R,tk=+V̊ݹGXPyA,3;Ts
+嬒z35
+v;Xʼ"V.\_H l:4 F0%/L=q,#,tqpWa4ss_.i,HQJaxbU^{{!W\@aW^'.޾~JW7U .] {vHvcQ]^(y6V՟bX=NDd@I} E#PEkmr}!Gkm'mutfm_ÉX;Лq{5п OBq8}H~$g,8v[nf,:4u֬?,B{^,G2Z/"WlP]x`[_ B5Säh/\-
+zvEYv^zgkvK`}9` R. sCn4**Dߧrדּ}69۰jM^HY<6& E8o31ɒNJƙlz+:T+έ 5,T֯ÂA]uLl)T6!n)gF)/dkK3|1&'CHvä^kƶkYf܅j?4,iyg V(.KrۥШU/BMrlc= 6d>:ʊeއzO 8*<J魹Lak͸JfSP&qSI ~7T"ޚ/1FdZ`ǚ: <R%Fr$,4Z`h|4LUXP"%eUhX$pG{P0F(& s;= ,dbxJum*[|X ^PXT[]qKX}Pmf{,|IdۆYGPa«p`MYF/q>)rÄ^P]=
+ .`txA>A[ NVPiP`_B9umF
+udSK۸^()W@Z]yܨ^iAUA8F+lva!G= $_?:`ز.jx̒  LpiC5iG{6iq#Jսa@^3S U
+Kb^$,x7WC`%)2G!xP8\G!bp9p0)Kn[J1\|f\`gNjs=+?)Wb5ֱ
+"!/? T`[ݰ_ۍ~$# h=K^0`VD9u'a#&.NJ̼V ܮ<lE k,50h(h+XMoA]
+0
+A1qn w~|/Xv63y SJ]& ? :UR9$2U`%;uJt%:ќikB?0`J}e;c~usܘa}G+Juxay0o6
+F ljua/Ouݧq8U8\vO#UtϓKX8vW,is 0.r^)D]9bT4ʷ@E#,TL2o&E}08)s=&Uۤf9JE=⸾^r !0 Y tͯ'z!F=!
+a;䅽0tw/.bu}LZzi:\+qy;mbGJ#ae<weX!Q5b#vkrYjOH|//&TcXsAW\iZiKX &Cx Gk
+T%@ъ= f/{ jw6`Ƒ
+SRx]я)<F{RD
+߬Rz.fқ< u/6RӺXz\hzǖɾ '~$uG/֏ލQ6m^q jFKLTL w:_4I+B9Hu0 bJCsGdtQ̟35ʨt.z?\WӥI R'{g[N2,_n+,x ! EɠHG%_5ԾUTOǙ?-#͡{=XW%B$ήXX?Ę3ө4тgrqY\xa| 7,(^(kƃBiP
+ t2 S虮R_ӖX? 19B2Gy:
+ Ӌ^J5ۇXf _X墓.DA
+
+3 hW0Xe^ݑ&/ w_:X؁YJiAs~m?w/\#%oΔ@ʥSWxRCk,煢Ll_߽OŸ]_Htl@Zf3熁˼dwrHXm/L~Du]|^p:.bFkB6Ơ;k}y!쉓]y]n?nB./]|@e/GPkGxoG^N"TSMi[Wh2dPMJ5Vq=fU޼} =rq ߵ_^_
+^oł'xR{x~YM%)ޓJ\<#a GǔR6+#>o?8>2X;k7RT$zl+߶l# cx(ܭ /|`K~1NozViHmA53ns7/,vԬt^=1[*S(Uj=ǘ<XU ltW:d1;e`tU$7Ƈb@Xn{ip01Y_|9C fXQ܀oC]13_:y+lnQqō3UĹWPG$6iS#VJuG
+i/` OnWHkw^@-LA]vyfAѣX(Rse 5H~^8Q z( s P4lyFmkSdԂ9EDᥧ웽Z^ AoB
+q~K
+w,:
+JAP;(r1e/pΚV 1Ðg}BJ!·IBw{C
+uu#Hy=Dr7{*iBӂoZ^ȕQej8XЫ_ZUĘB4]xv"TZ%w•Q5N!^Ơ Խ7]<Z^x3/$߱ϣc? ` mXn{[{zuwmޙ˳ ʏb0.μ` փ? /<G99rܜplv9dzh89?#a_<_[ Λeⷋ~#7o~1j}lQ8cn{-V^;fdl`w7`!\ĖL?R}ʍ۲)N+9
+]v0 A0[@ѢvuM{5"\&f沬$4몴cJh}CqV.X.PMHr Y;,x˻xGYu<Qgu뺰zG.m=G+Eִ: PTh rc-T$R(ezY.$nr)T֒RӍ!ę0:N'\g</{i ۅYfVЮ 5ܭ],KXHdBيrfgV_a\bM
+NWAbĐ7Hw_pM/__`8/ Qf" eAڃ`V]qS\pl쏰!"{̐
+(lvi7 I٧5BT1ǡXR^KCy\H[t0M\xi!e=8NI.x_4X.D\0Up}JT=Q؅L̍C=*\8Ջ5o f(.=%1p*P$q^;;'2ͷ\Nva/ Ua|8)i]xz:qamoȟև0PP|.vrNb90
+
endobj
-5277 0 obj <<
-/Type /Page
-/Contents 5278 0 R
-/Resources 5276 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5257 0 R
+5615 0 obj <<
+/Length 107
+/Filter /FlateDecode
+>>
+stream
+x`
+endobj
+5611 0 obj <<
+/D [5609 0 R /XYZ 85.039 781.388 null]
>> endobj
-5279 0 obj <<
-/D [5277 0 R /XYZ 85.039 781.388 null]
+5612 0 obj <<
+/D [5609 0 R /XYZ 85.039 758.673 null]
>> endobj
-1458 0 obj <<
-/D [5277 0 R /XYZ 85.039 623.857 null]
+5613 0 obj <<
+/D [5609 0 R /XYZ 85.039 758.673 null]
>> endobj
-5280 0 obj <<
-/D [5277 0 R /XYZ 85.039 599.875 null]
+5614 0 obj <<
+/D [5609 0 R /XYZ 265.428 523.51 null]
>> endobj
-5276 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R /F20 2865 0 R >>
-/ProcSet [ /PDF /Text ]
+5608 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F35 2980 0 R >>
+/XObject << /Im20 5587 0 R >>
+/ProcSet [ /PDF /Text /ImageC /ImageI ]
>> endobj
-5283 0 obj <<
-/Length 3135
+5618 0 obj <<
+/Length 2976
/Filter /FlateDecode
>>
stream
-xڵZYs6~ׯTy(7HZgġ4\s12xXJjU
-aL% VI|8lIx7ΘfޛpaB
-{ʯuۅ~;;k;okOQ{܄gM=öD SvUs:'eFRf<
-`)
-fV3kdW<-7ek+_TN;$ Gp"c좮9 Z@mGJr"рB!א `.gyˑ$ W\A5L"p+C~;=S0+$+Z4Q)kHܝ6όXL..倱uJ2DǎC4ħQ%r}X+l$M @2vyҡ4MJ:Mk.jO9 $sc8(Ø,$
-ӹ=]s\ֻa#;ifodfKڎ'3LgVIZ6YyQZz%@ 2,TQZ9Ih9=viNcU񠄰R%YRЋ a)QX̀PfWZM- |1tndSND؎yN lʃ-s'FV„#!sIl$%-pEӻ-Вz ^@4oG~$M}4&L D5k#XTC۷~sy L8
-/vC2/%$/yj)GSkEk.l6lfv
-8ԺJzz5!7WZ+<mT.
-W˽JF]Ls7s y%I\2t^ɪf`w
-<|S}-NipO)NJSBaeELu7;~EL{tِ) Tt&A噸s4H%V#/m{y}.ؘ
- ~'#="kWϦAQ)K
-v{ˣ$Z2%لFG
-rPɊŀϾt &}6{+$ɷJׄr6DTʜ{}:BLܾ ,/TUrjHNҩbjMHemv\Zlᤠ!#ւȩwx0Y|j C%x$0o\Az-]i*\9{VO5D|bR3q8HD[!\#eiK,&]{=~ md4KPti)0a8 *htj$@:uIH-6 }8@uך_:S Q0~J oT4zd }99
-_ Q!h
+xڭks6M|_nytr
+4u5A&9  -wiOǡÌӗ8:P 7~ro-b2P-|E>-THax4j,8l=pG_1M'y}!ajT~ŢTʻvʂm&`4,$ ^DwX7 
+ S0,
+e8i R'}D9dEZk3(
+'EY?.Pϲ_Y
+-o-~@XAx˦[ +0YùC ĨƮʊPW3liGYB8 ) dSn
+eo _3gZjxz65㣂Rz׼p3)t`BHzFf >(/&q?{h$g?WPy5xVڟ~ ;gBjA^ݴvV>Juq)tOVyQ4|csXYxp֊lsT ϴlkcg:9ܘi
+M7ik%,J u80U
+W `85%ꧦ`/)R|5L
+AvG~z 8L"wyMYz?Pĺ(֐Rx V qnɞ̻!N" aa,wldQT֩ZiLo+w2b׍p1 ^S)5TKeD7 8٦rILVyQ^X#2b®cI IJGmtss
+ Ksj
+G(TlS)콦fڜqPH=T\!$ATL湴\$g-
+_R՟GVS <=YMj+ssIhZ'.SysΣ{'oQQEEyȍwW^&/U5έ8x|n0Gy.H8
endobj
-5282 0 obj <<
+5617 0 obj <<
/Type /Page
-/Contents 5283 0 R
-/Resources 5281 0 R
+/Contents 5618 0 R
+/Resources 5616 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5257 0 R
+/Parent 5598 0 R
>> endobj
-5284 0 obj <<
-/D [5282 0 R /XYZ 85.039 781.388 null]
+5619 0 obj <<
+/D [5617 0 R /XYZ 85.039 781.388 null]
>> endobj
-1462 0 obj <<
-/D [5282 0 R /XYZ 85.039 761.463 null]
+1498 0 obj <<
+/D [5617 0 R /XYZ 85.039 761.463 null]
>> endobj
-5285 0 obj <<
-/D [5282 0 R /XYZ 85.039 741.134 null]
+5620 0 obj <<
+/D [5617 0 R /XYZ 85.039 740.47 null]
>> endobj
-1466 0 obj <<
-/D [5282 0 R /XYZ 85.039 698.974 null]
+1502 0 obj <<
+/D [5617 0 R /XYZ 85.039 145.051 null]
>> endobj
-5286 0 obj <<
-/D [5282 0 R /XYZ 85.039 680.102 null]
+5621 0 obj <<
+/D [5617 0 R /XYZ 85.039 110.305 null]
>> endobj
-1470 0 obj <<
-/D [5282 0 R /XYZ 85.039 408.518 null]
+5616 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F35 2980 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-5287 0 obj <<
-/D [5282 0 R /XYZ 85.039 389.85 null]
+5624 0 obj <<
+/Length 3048
+/Filter /FlateDecode
+>>
+stream
+xڥYYoH~"Mv"猃I֛8X,f-Q'<~jd. fuW-5 lʏt.f~PB{TgA6ٌ|M4YͻϋeE2IRO7W~žA}~^wDWW_^n>\$d
+Z*kFq:Nz[t pcgԣAnXP֎ǪX97$}M/c!T8rrTƘ-Z&N ހWLpۜi+QMqػ-oƶ*z[rq04K>P5&#MhVC |8$CSl@,CǶ ibmeԀ]H 5I B7X|
+E;?bY1
+3p_+\ r`sd8Ґ
+&J 9XvXD4`g!'WhӱnƉE÷.S $$[a&0=!OA5@~F9Eێ qAֶ<䄪%
+d/Th$=80/Ż5|75iy2tOcx$1Ba-.eEl@WQT`GgoeQeRp]HՙglD8VA2[; De^3t41^y L<\y"RW ˹`?$py"Ӕ+)i*VxlU*W>[zZv b4X':[q5`弥kyJj>=PHGOqqz6Ɠn=p2Ǧ{.N\C9}HPtsnT5xB
+:g(~s*+ŢM5
+ҪBN#+|dF[7j@" ȈxX PGUkH'}୺/xY4n
+\q8
+X5b^C\6u)C~%w ƻڻ<*6#B7a۽`"'\q- LE/rUՀ(뗨h
+X^u(vm=N!kV%`+_f
+1]ӻJܿ0b>'1d\ `:g@ c_j>_wTR1g؞wCGF
+х/.]%4 χ^d4?03Cy By + ,>!dZp.B>ȓHvyi)#
+ #ipmzMr\N!X4a(8֜@BC1&q F
+-h6:A5|zG.H{t1~@ʅ<%GJ+ԧ(\<<DeYwR#UJ4Ilu>ytTWw6%䀛y0«n2?lBB)8\֙
+>BR@Lqsruw;^;^Xu?v= <oeV?Mk$>'yk0\fFa;?:J~ <ƿX@fQ,xAl<sC0y|X;IEXSSkfglzTw7bc΂cۤP[؎1z;zMkրq餶Ʈ佬Qv |D)d垶6$`uMkL* A~ $Ϳs]q-?ڌ_:CY7mKY(xŕB>~Tvg4/ .._>ZQ
+endobj
+5623 0 obj <<
+/Type /Page
+/Contents 5624 0 R
+/Resources 5622 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5598 0 R
>> endobj
-1474 0 obj <<
-/D [5282 0 R /XYZ 85.039 124.319 null]
+5625 0 obj <<
+/D [5623 0 R /XYZ 85.039 781.388 null]
>> endobj
-5288 0 obj <<
-/D [5282 0 R /XYZ 85.039 103.064 null]
+1506 0 obj <<
+/D [5623 0 R /XYZ 85.039 761.463 null]
>> endobj
-5281 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F56 2890 0 R /F66 3242 0 R >>
-/XObject << /Im4 4878 0 R >>
+5626 0 obj <<
+/D [5623 0 R /XYZ 85.039 743.459 null]
+>> endobj
+1510 0 obj <<
+/D [5623 0 R /XYZ 85.039 471.875 null]
+>> endobj
+5627 0 obj <<
+/D [5623 0 R /XYZ 85.039 439.657 null]
+>> endobj
+1514 0 obj <<
+/D [5623 0 R /XYZ 85.039 174.126 null]
+>> endobj
+5628 0 obj <<
+/D [5623 0 R /XYZ 85.039 139.322 null]
+>> endobj
+5622 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R /F62 4052 0 R /F58 3365 0 R >>
+/XObject << /Im11 5354 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5291 0 obj <<
-/Length 2556
+5631 0 obj <<
+/Length 2407
/Filter /FlateDecode
>>
stream
-xYKoHW:Qf?H6dYo6QX΁hkԐ zt-dv. fꪯ*Eba0R"5"T,UWΈ:n?$z!0枦lZ),\~Z ~|s4t'Q'No>}o*Vm~zZP'
-ߢ4*
-UfOЎBeÕUke/W^ͯLBBCE1zg0A|X88B4
-}}-hykE
-`"(p` 3Uup2Ҿnmkc q#.Ñ}sJfƘFNC`s;p$Իe? vMf'$d
-0ݜ@u2Uquj1StȭIfc "qD
-ƉLVӬҊCzʒCq($`{DfڄGMWWڳ׺ y"v;`ߙ ٨@r 1'@a$ J.{I2Ic
-q2o| v]{x퉁Ϲ7|6]XqǡJn1.NgT 3쟙IdZ *A/(NMiͶ4];[BB#V~\/
-~Iʺ:bEHi\dggeHӟhu2:ztBL{ vo՝No EE{-Bq0GO#fSk2eCyMq?~VYR%g UaCNffS*;*HT'Lf鼤.1W0fڞ#G5iT„:dz7֜t:a)'i,6 ߖ3;2'y;{cA<U#x3 򷏮8Oj =JDTMWݞ=ȻmXf6>?[%jBJ$낱7d!.s]%UqثWº>9 wʑ $B4z,Gm薻mZ0e}/T> HV)L%O;~(SnѶ4~Ax$4'ܷ9GW[*gί]NozJxzЅ(wkBNR;3c *`ȨEu:=+QZ6/
+xڥY[s۶~艚
+dMcbo 4 O ˍ<Xtp3?_X£yss|ѪEps{䓨8x|EQh
+5_dY܄y7~^ &4ϣ?_{?n~z{3I:
+˕VQhke`zwr$|$UGjO-VYY"IH-_r&wݵu?rqow8njY3De6q(#1nPk2s75a߹-±ixm.ǦCK`ipGq1~On MWW]5s$Rozp>p5P$HHȼ 166*[gO3:Uy9^X{ING^Hb
+)dW,$p 1w|?rZdD8ovQ% fczn /bktUscs aa‘9hkwu xi7Ѯi7KdhlXa]U-Eq ymZ&J308 ,XOՔ8.;8+`2 ImC. h y܏fqqk} 9^E$G^]nQuhZ֡Y̏J6əWlu\lqx2 SoJPDD8pG caj
+˃Lk.LLZHv;ps*Ɛq2^21 +6 ;IPۑ DĨ\rFC:F(E aoVjN`|WnŵFpPD <! "d/N)Q(3>f!?=2~ }+ s#.\wv~+ åBQLB.kLMgdT5x]b[JAjV(Cэ1]_KQt!t8MN
+#+F~]
+ϳEp.Sjm";i ȗ'NŦ,DʐЧc<Fa\P6~< ,w&)OParzPi*x3Bqt:
+0 GB>|}~ߧxկ5EzGM5]e9\_ +JT
+54fPg=-%4vXiʼnTKr>^-HRcx$Vy戛cpþ[1 SM/@g
+/LeF5pz ׼D
+? Vw'ߪfEaaU[YUָʒel/la,sWz'朆
endobj
-5290 0 obj <<
+5630 0 obj <<
/Type /Page
-/Contents 5291 0 R
-/Resources 5289 0 R
+/Contents 5631 0 R
+/Resources 5629 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5257 0 R
+/Parent 5598 0 R
>> endobj
-5292 0 obj <<
-/D [5290 0 R /XYZ 85.039 781.388 null]
+5632 0 obj <<
+/D [5630 0 R /XYZ 85.039 781.388 null]
>> endobj
-5289 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F14 2895 0 R /F66 3242 0 R /F72 3966 0 R /F18 3969 0 R /F73 3992 0 R /F56 2890 0 R >>
-/XObject << /Im1 3957 0 R >>
+5629 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R /F62 4052 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5296 0 obj <<
-/Length 3178
+5635 0 obj <<
+/Length 3312
/Filter /FlateDecode
>>
stream
-xZIs8W|" ejII<0Z%ɯ,\S3* އă?Ff$0M'Ց7Y@˻#_zxzqM?]&W7j'0 ?sOI:8K|;RP;^`'i\qC?Nʢj\Hף&s# trel:RQF*,ܦ&<j1 $nP
-d"0l7L:ov{v܌GfwH6ly5@JY#t*(g{@yf=&2Z za5J1 ۴vA/Fn Z{;y,wLm"fKWjK? \akZ,t)[)"d ;ڒNq{c)R l)$ z+Wݴ_
-n Vn#)Xɛ
-c2@qÒs9F̌tnzS͹wOvׇeLzCm
-݇k3β&D̎qt|z
-apul8fҰrB>@)Y1ƜW]jMcwlfUG{?D8 00ܑ`,FK4J:>#]N
-ɎP -ZjfH-d٘0(2
-E[0qD+G=Re²f+͉kHI. ݶࣸ n:v]o| |[is
-$"
- \aN/e!sr$/30X6`PၲX#
-fj4z7-p`vn aAA[ k
-7,+C&
-բPhQH4 n5d}tyX Ee'Շl-*˝4JHMpWX{x[Yʼhoa/|wM:h
-T
-?jPf
-6i)9 p-WyH:Gm]8 +: ~!3|]S" o&sr z %ց풞 SWYQ6NRD9톮rĩo6")v&_IS4dA`TiG<*xÇm _J5 BOA+fMWLŠ<_xJi\;{RF ƀJ %u-XF%#PN^w;'m6O♜2tK#/U(}_-al+?v3QZ)~[6Ft1qLz [ an2fQL>_@M[M ifc}]i
- ]HF HEOAMj"iE"s2Kx)x̓)[l. |GV)(X;[O[JD&l<8C^Ⴟ0%7wyhM=t_J:ؾ"PVv6%LuCYز3Es} 4]C&) 4cw DhS;8}ӱW{? uc Z—=#廧fHbdmF3B.oJ2Suc4vc왆'J8HX7fKjгG(Eа`J/МYR9,N"/E Κ7LrhO)2l=r1L\?f"ص<2endstream
+x[[s6~e!.C[iRo>}%fMHś=,QvYOf"8888Y,DYHd= gWD:#Y h??y634Lg=HHW~xyv|d*8NWek>~8? T3l<9~_%i?y'i'H{8[~< NC!<tώ:O*:9+ӜV)(j.
+EV(
+Aݴb݂l6
+(T- 7 5ֶX~ ƶJP#qbܐX͘M,"Fz$Ж-*+P~q0i4q7WIdHs-IUrU[owU+n7\8î5[\$GPe]_|V|C=/L:w3fQaJX$ Yj-$B.%Œ.5Oe[(͒6&4E
+9 X^
+{naPrQжCUo\F@q-Ĺ(ɕpvƢ8G@~/a<DȘ.}]7o`)pTu .-j%`Rk ,:(m5 ib?iLo"E7,YZEM+;@a+li,6 aMI7_wE20s,@{LyYvO*yh5R gu0Xڇ F<lm.H!5; #Bo[W[q kf.|`^!O=PYx(2L&Y!eR-okt!8I̶\Bn^Q 9:Σ2 xWQ+XeR%/vj]
+$ۚktad - N߿^k'6Ƹ_W7`vTxձ[E¹e'!>օ.v Y+:=r>4#l//w!Je:K>Գ@bBJ%VX577<
+3<
+4=)@sL4IbO6&fd>6=BiB>o
+lǹ9"V8L!V +yS lδF\oSY>~If<ASȅ]<@1a"!{i { m&xNGHȫҙR| ѴKI&=)sLV%gM >=PO_ISHKf")Zu
+֡>]Cdy>eHceB*l*s{@'?NI+ v(nV5teA!a[~lI{+vHc.501ٹpE #{kB_^r[{|c$?JiH>jM/Hx) _Hm6]H'7z.V3Kg#W܊[
+XޱX;]MAտoFpZqcQ]=a"WFO3'0?`5c[{w(kiqL׍{XLC((u
+2Z$zwL|_H?\ endstream
endobj
-5295 0 obj <<
+5634 0 obj <<
/Type /Page
-/Contents 5296 0 R
-/Resources 5294 0 R
+/Contents 5635 0 R
+/Resources 5633 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5300 0 R
+/Parent 5641 0 R
>> endobj
-5297 0 obj <<
-/D [5295 0 R /XYZ 85.039 781.388 null]
+5636 0 obj <<
+/D [5634 0 R /XYZ 85.039 781.388 null]
>> endobj
-1478 0 obj <<
-/D [5295 0 R /XYZ 85.039 761.463 null]
+1518 0 obj <<
+/D [5634 0 R /XYZ 85.039 761.463 null]
>> endobj
-5298 0 obj <<
-/D [5295 0 R /XYZ 85.039 740.47 null]
+5637 0 obj <<
+/D [5634 0 R /XYZ 85.039 740.47 null]
>> endobj
-1482 0 obj <<
-/D [5295 0 R /XYZ 85.039 215.786 null]
+5638 0 obj <<
+/D [5634 0 R /XYZ 85.039 367.73 null]
>> endobj
-5299 0 obj <<
-/D [5295 0 R /XYZ 85.039 180.641 null]
+5639 0 obj <<
+/D [5634 0 R /XYZ 278.924 373.703 null]
>> endobj
-5294 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F14 2895 0 R >>
+1522 0 obj <<
+/D [5634 0 R /XYZ 85.039 136.342 null]
+>> endobj
+5640 0 obj <<
+/D [5634 0 R /XYZ 85.039 101.538 null]
+>> endobj
+5633 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5303 0 obj <<
-/Length 3607
+5645 0 obj <<
+/Length 2425
/Filter /FlateDecode
>>
stream
-xˎF>_!e9Iqqf=SG$%Q!)'_fS
-cD9xh j
-ɮ%F h-Pα0!I84Uͭ+ɎDZg*x ڰYbQmqgLf΁80Ptn~?Gxe&',7H# ZKe㦙-1gmM$jKGt]kT ,Vˮ?"*D<L;K#Ǿre3Q\"dI)a G'
-=olӾ
-8@"clJfE=YO3E2:' ICCXl P30̰鈐 @)/W 9-+h[;U {j)m-)3%yF`6JQȰ%8}o<2/6 pܮ; BIT&I\mR+.f\OP+dz`PWZI(ǰk<P{/Wt\}5k !Pr{@t͜ B^hY=X&rŠ`c"FЪz>@IR0@#QA· pX"iʍMS:иaEss" 2͞)c}!>Y8 <$2(pr35 N!6xR)Rb$K\YSeb
-?A5˯htZp6H l2=+DlcWMsk,qhWZ݀dZ@/̬2^ܮl<v%'UIR'i$a`3{zRy(~CI)V mcd9%[݊Ao ~/V:ZM9tʎҷO{n~"d"M NmIvZOKK?ر\+T5]Q8lI EiXMӳ(;6 t" O7ũsN{P+T`=HBjUPtpl {RlEnr3[ W2Ҟ򭫤c
- yN0:ȌsƱ[(aomlˆҩ-K\d95ZRQ|DaK$ᲝfV#a\6SsoT*A?(7V3@@av&MJM9OWŠ75<=Eiy !n0mHaRS!py,@|P]8q2*'pGi>!fl<HUE %gSXa8D77! Nm(EWn+ܘ!fX*tS$uCt͚|rb: RZ(tElX\|sI$7u|CfqBhEGQĬ8xPC,0:8:Q/*Sd, iԭA9(#$S!2c3 dn9-9KնnN^8mE=
-VemInj-fDʘݣ>䜹Qcv!A_W4lbg\8[ĠRO|lL$łi<S_|+AJ;O
-tnWOˏ(
-S }()A]2]iKwBo#WW"O:ے\ F^&/?uD[*~rc<ؚ &16wUEgA?Q8`^`̶ 1JӤF8qd3٥/w:#!)VEov0%зGn~V_oՇ"T L?@Cz(NQEPd6p
-jid*A,X0ag=jY(H{922 O:Q}]v'#2HPr]%*] TH4 1Z:sqD^fS<]1endstream
+xڭXo8_aIjE$E}={m/4fvA[8r%i"%jb gZD #/L&Uʇ+%+!YMh_]BEaǑ ckzswre T.Wi?qTgts{sG1L;\inn7}#F˿zw5:V9ϿE G*
+M-;
+,@F=+^k*be0-gF\&S
+,HSQf6[L]t4JT:4JH|_w`~R\uI0l+xu-]ux hs+\`'1L\4u]4Lj#WkE;|Ǜ>aըz*cadoW?C!5O+ˮi^p/]}&qu/n{kxՉw[*JK0{,хJEMuijtQ[h3I8]b ^v5,Ї?+kǠ╊]5
+9kd {_?qm@q_⹍ /y F;a:^(h|Z o!6G"RskD0 BP]; *m@+qU4/Ҕ۟!W@Q:5QrD8~T _0F7O|A$S_
+7lp܎1AXX(9H>vo5QpD#v*NbRP2y* ͜%4s0Dg:̓sRdeك/i9J5 s7;lA,Se
+>ա6Dz$YdRPf0V|H>G8 M:Oa܉.U=)_Μ#zFU ,Թ9se֡U^9Gr܉3>(k}<,z}(`EK$]Nw L]Uwv8M(/*t~l6N!!݄ZChtޖB-ُ{2Ey\QJ\=#*S/Oaky,0I0bG~Fx,mћhHuA qeN̾T$r$K:1#,WIQb, (XXa+DSEl1ٗդ l5fVct'=*=e꤬$ 1;)OxɩODAb֠Z
+ym@pR0__ a_^K
+j? 56o.t4E^Mz9'맧\
+-ln]si~y%4J9'
+"Fi0+P)(
+K58;fbeU"3cCwI>[O
+iÅrW{k+5=ja"٠r+kۯQo+0lh)✻YJ¸>
+>豩à*6=әTiÖ/Z9M5ϢSrnyfZ zEفcf.TD3~8|7AW 0/&U?3}~9Tۣo*/rM`Tf{ F蠷{2(V$q>}1 ߔ<Ox0FwɊU2ϥN?>/"`><:uNnfI4!^"=.'wj):c7>)$~} ebOjjtA8;ך,TRXoendstream
endobj
-5302 0 obj <<
+5644 0 obj <<
/Type /Page
-/Contents 5303 0 R
-/Resources 5301 0 R
+/Contents 5645 0 R
+/Resources 5643 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5300 0 R
-/Annots [ 5305 0 R 5306 0 R ]
+/Parent 5641 0 R
+/Annots [ 5650 0 R ]
>> endobj
-5305 0 obj <<
+5642 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 780
+/Height 546
+/BitsPerComponent 8
+/ColorSpace [/Indexed /DeviceRGB 31 5651 0 R]
+/Length 38179
+/Filter /FlateDecode
+>>
+stream
+x]b0 .,gootmD74i&I%Zg!<zCjx7&c<kTq<ؽsH5<l{41l|݋|Vclw'N8lޝ.Kӓøm>l3aLڴolUVi۶30?hGLc8n3a <6a|v=
+?fv3
+WχݣG(c<;/Y;=J8P*٣M>Ikb:jVꝖ3@KYKwXi ır[,XfG~PjPR0+y43ywB9ͣ?ˌKjϼ`<Y B/Byan|Qj#pԗ6N;Kz ,d lvzI^X`aw;6o,^4Oq‰z ļCx4lY` ڙc3:voÌx)` v3xx>a/f.
+if> ѝva 0qt >J]w WQPٰp*uņ ye5_  b6,l&6^d :-soF60 nX[.ca/=^s&gŝ7^c Hd<!7]  b܏#}iY҇ [y8V58Otl FIP{GCztn (g;+d.E 6/lr]XML_
+5kn~:6^,bU\N*}5чvJzt?3`DO1F2q7^[] ߠKiJ6U^vvgyc g/77 ىu]Z%_<Ix44/Ε=) AVWƚ뼐
+`}yl<{n ,|r|2Ӂ&3Vf?"'#uGIQrj$IXLuC3}Lx֞* ^aڹs?hRU8pv5EәLM?K _V5Xm7}(5ZJ)#*
+ % py*uhaij@ӵP"‘T/b(lP5N _ {N h \~ }IBLU$'nTOa6{ Ozh֑ LEG=t%±st|c2`]2 :j'&cUY_sxyƠ9o'=K
+>tI5 Ο. I a TSQ5tV'K"[ aðl OɄkPvjƂ4-̔L8W3dh)ɸb嗳J.,
+:f(-c~ҋKT <X8g;02۟?7c [Bsjޙ[SsHn
+{Bnv,/PN3
+~ƭقV6NINmjS: 8~['7ufC c FRF91K(1%HK҂傲
+L<΍ف>=]oFJa#
+s5j, \g0$
+_eL=F=8`Q|$\G!='.7^x<:ӓ
+1Da~bnh-^ DgDY~[yv  Q\j;o?ϒ8 NvKfǝg2r;۔,IyӰ# .y8 mw~wCVѼ6lylS9V1y%:Ro:r+&,p<mㅍimxu /`> _GQ2KGiKgQ:nP 7@pN,<E<9怓Y|//]D -Ƥu,[A'p<xeoX83, tpa<ֳLad /xҍu-f}( /*6^G:Bi]rl "ㅙ̶ӸNAX;nv6pk%Ԣ gx
+z
+
+-p ;/8 8Ʉ?3BAH:m5niJ. ]xa-/…6v?iP5N?y&!j}.#>/sp ϵ稙ڤ]3d`FbM͇vBrpiþ'7^X 7
+q|@&%by͚>M>MGxtXns>X۩%ʓx JT\ٚA1oGk9qܬibC&Y/hS,eWnb!*L3|[boyAss }mO8lx7Q"XPN2HܘmL1o=pݜ[%\,/[ښNj$DXuPibPJl|tզ`TX{PKYM|}
+ǫI_DQ(D{^U H!RWZ&^xb"w>xhYxDv?RϖFf>G!/'rf<~L2vK `K,HGtҳxuyAd B(>]h8HEFf]LvPU t#BuLmc Mv*2_UjKұL9zvL˭gW/ޙfTn&}?Tɖ<[v*;35Hț;lFTv?N]οAɡ?D^tkxaG׾T6^xHup,;TI))B teJ^GolX.,:lq-}&u/Hy|/ħ2) 7 a$].jmQ>?m?'FvN> Nѵ4r=K͢ 2?˦N=/avYةv߭QW8OD س{o{trG'+7-۰X;ΪN^gx.,)?|Lxf5A=F/߅aH'(^gxϗo/n,< j§Hy,/I^/lCU_^H(7,-^Gq<̏Èy'~8fq,Mc?(]j:nߜw~ _x᫒S
+jiԶND ۶nkHx֝ mA`w잉VdSct ?FڰRR `!H@qƤ
+ejƎ
+uUX:W#N_غ Q1-M5d(f:Gԇݏ^\DyQ<jxy&#`fF)8Q4w45`&{ңilш;S:-)re$;mI5Rs  @wBt`
+P>B`t ,$UKbD'#T-1)<!!8*,yY%8QZ1]dSSb 8a;Q
+Z]S1<8p_*wRmNp޵dx?՝P]@[asCr3o*PWαPѪkSԨT#g^p|PC1̉4ZӲw
+=T
+@) ȊZCM.#M
+nG{Dk{zBD2B]
+v $sbݡЁ2#2F<BAdTUZ-ڏGnJm"=J˜~i ә1 !
+Qxf5=-S!.zf$I=<>
+0mk d|Apf愶Bjj2g,{hk'EWMX beZ8usVBawv`|qSɑ^;,Ę|G`Aw
+sU{{UhnSt*e" =Puݕ 9Ec(U!`f
+E[% ,RR3M#tXF\ƢA-UG?}ecW|#g[,?.%`L,6iN&֜N1=Ck"?tu7n<(hCFaDa1\[żaqPIcVb2ῡ/vxsQߙPPp6[{^qOGHScƗ FgH/vg =ܶH>gG@߼@qQ2gZcEsHDM}#ڰaXxkaYzhWS#_!IrXx/BX[2!qgaa/
+oɨ#]$#%+& _`1z9OUSxa7BQxe?V)>p})ş-A̺< 7\;3>-Y^>k}
+T7Fy<r__x &|•3'O)idوk yY%J<YK "h(uJBB.#XP¦ DNMV*]eԿΝS5
+žq B<e#efLʹzǛ)>MҶDEmAEw]Ru#WQul?jW۱&a OR!G#i28PUHldNj`J5//뜛68%MjBeΑxBŇ}6(;AX!j#1c][S
+f':WN2u60 ۶=uJTŒ# 
+w膅M&ݹ#AS3$<t:y
+SymcE6Ky)vm8wQSi`:7rf:
+¸Nط:+ú6Ά..AQ]eM?#Ӭ1\AX7*D 1 NXCr`*y5Oʼ_X A mIKGjӊrcQBZ"'uש(]u)RC:HҴA
+X7cxpt:x'h=
+ͦ*N[Ǥpܑa&WA)UZRk6(u!"SkRh
+ǏBnΒ;!d;XYTS(/ &)䵈ͮka\6ݿƨ džB :XHUfF~DN`pCF5|: >fK'a`.kZ?0,Ų:q`?MIHo#'@jT,q,t .H.D*F7蔫>rFpZSpw` = V,wU8@
+T04Ꜯ(:tW5:ݓt-s,t䮠EV(Rp+-R;X0co/< :Z37}.
+ވ/`|7Y(AfC*!Ϟ̀:MHcMyaazytS3,_8ÂL J]Vk;W|m,/a]nǝmSIv!} Bf҃CZ:N.%VBl./i WK|+l!?h?I>8UڿYh&6߹<R7^]9p/$Bu;$H.%==ܭ,*Ո. 1]Ɏ cZ;Eb88twV7yF%' c8ߗ;-nk$67S2'ܭ~,IO2o7Ņu^VJ] ҤnSFBG`!7+xlw_x9|$c{B+QV^ RTQ%nOڰj9;^C$Ex I/k̭;S6,l$PmHuF~{&o,hrO. c5$ ߑJ+6XvueP~ aqre/OS%;flnzM[clI~x7U $2_WWU輴ˮ4p̾wNFo%"qZS,\[-SίHfL#-e8|i1*؜kigź]gychr 4
+KBKL%tH!#UЗ%2 MmE+^&b)Ϭǚ'Qod3/]ra^Tz4b}<
+e@%zj;;M;3=D? 婪ky
+&nR8S8~FA+x35v""IX OhtDjQ|sdJib ]&}BLYAx:" ^i_UCbD2~f^3*B@!8oTYn:&B>/dХQbg?,%U0)Wa! 7,]7X!-Z?eWPOXpSC1 hXUkvy0 !E1T@<URqh%<U HeW\swfaW@ IA
+<R഑dNNymifY`A
+a ʣ1B ]ǂ
+@OjL`!5<ԱKE֏)$s
+A#hj' 6ffwyΞuaE -t1CLܠ Lv"uQ?Ǣ fF#jg9%;)R&1b~fdJcɯCu],$ FhSMǞ= m.&Ԕ/j6e娹p
+SGL6#L1sX0-FXȮ H)'a/Q[x3\4sf14/7nVB2FwZYz=a>!Wm [EvC56ŚkǑ
+~(Jb2wǴVUk*+9]FZY*ej8CѺ 䢲{g`H:8o c[ju Q:h?ǻʒ+*]WCҤ{[qgJ7v
+"W9MeTQb)q"esy2^z |8RǑ[wU
+xt݁]Qu'1+`xj鼰}OBU(|-1* ;l
+S`?{bD+Hy++ ,<$ߑK ecN>;QJ~R1%34Tv?= vw?FW`[~G|aUdPʝ}Q7}f] i\޽}_xl.&W*,^w)䩋6^SkTõ9=r[>ssS`(Pn4C/Z+l #q^FoBo]*ۘ_%<Z$`y./^B3j,1i&{bAȗױ |C<Nn'ov
+u 9.<kd\o_ȺzLn jgจuHwy܎5XuRr ݰS>ggT8Q*5T*4] ms?/ .=GWE<ܯaa_S+ K <3D J3 GǑn
+ŸH/,~F<ef(KU/U:&Iu6[b _ y܉/
+beł4KZB#HW nMNzkf_9
+ +j"ר-3̜_
+^7Q 0&y\_>Au
+}_`b)
+ j\I/lr 7_p*n</ҵ0KuBofИJso߹Jn^.7o-n^2z3/DnoڱA#hJ߹(+:O[&%Ȭ;b֧-i@/n9wn6,lZB֠$zc޾>-+ޜvGHNoװ煹<X8J3Z߰z##ZUqgh+6v-i*$at$m' nO9 {y涧s<!R4nu791(n`!Umk޶X3vy"EJ Xׂfe޵N{ky;ǫZJ&s̈́<M;HZ8Wu&#DNt_9N:pnw]:f`;3u`wЩ͞?exTnZPepj_6 a { / [, 7,}/Ilڱ3^+xeަԛT,mָho:^Y7)v&߉cBXk)*_wa%M;'Haa/E |6^xaㅍ6^ے_H/$vl&< ܰ&6,l =ΆpQoI򺸇] v4W$=ݑp+p_ܾ&~vt-Xm(aRݝ?>Қ
+iƆ+QCiQ$
+/DBUKaaDe,UJ6
+^$,HUu_@_`/\G DuN8a
+|w`soPaMyLuBvjdSpzXb!G oZ+ۈy9DT24r}d<B,j)'N3r|$r2s7H6Z~^w. ׁ.$)᪙+ _`/ҡkxEl8eZeg:qE(qCpbZW5CPT`+x.UQ8^84/O慑b8-_ ^0 D'
+:Y\$1LBq\\.fvLUS^?!+oW CObwBEe<`"Qa"|TQv]yNNEB2BK}0ϻG~|ObMun|b,QRwA}^(vX
+EM4MiDhqrCZ,{μh|89Wh
+˦e$_Ο W̋ݴN]+$;Jh: A̋4u;Y9%
+YNvٹ4 {3 /XqKIӐ-`P XK,vX{.MZ9<wsi-,EibpǏ/*gdfal<&Bu<C|ꕥggݔχy-ݩ%-wKPÆ.[MK4 7ip,䤱CMmȤ)H*\ &<[ iPД@C:(EUX`^L8
+1\Qy!ϲmKBטՙܶ,8OWX:_ ؉.'+&Y1UN[qR_NFq^. e'2oM=зM;W',4LJ[\-Pyc Z1u,6E<(#ɸ!FGvnhL^^kz J֎SН0BgLz/H'E>V 26҈5Mxz ϙ,qԒ ś~LoPuP
+].rSR܍>ߕ VhON#Pkdөf3C<لF|m(gQ`4Q6^x8 yp8l2s^WUcHX`amY$*-{NY*h\O?Q.,6\vX8b; Ga!P4)BؒS Ρ>x!k0 ,oMj_3jOav鉉/{XN41jff`ٴoM@Ӯ;~Nu5HDtBms1(/
+c\GsdPWcs9׳X%j%^YM 4H' &-\WX
+Fb .,{YmiAz4c&\w_w<`E[EF$=G:#̐,򱼐}d Xx-/\qse2¨M@C9ʇ
+G<qrl ֖L}jiB4X&G 9'^(<xQَ#5z8ٽ$7]c=Lr\~?Idѐy(2Wkil:7D^S#ys`B6^}0+Tym`}&nV|1M2B<S u$Oyǁ5
+L`q(-ya
+ itㅟ S,oIo`|^Nn$=fu; #Ql(z/}tAFEe 8 U7=cOjِ.p}ty`Q&Cyk;YJg_.ba$AH^\`c M8Ai߹&
+^7 0Xg^⫰dzʋH8/b^ԛ,;;"OSt{u'W˃sy;bv9`Zт81/ظZzhz|Ο )MQq:Qt--taL+g( -aj0n^oFF^I(<O?_`  TK<-:(Ӕ\W`aI*^ize.b$v0^z4P@]ͼ`>Iᩂ 6op3{E-47uj,:ˆə|kFe3n+<ĝwBv ,.e?_ĸ }\[.Umȳy4Dr5vkҜm*3N ]-u} 3-Y5"軙ɒMspv}d3wyR~++7b(y!x/fg!~
+m/`'ħ؍ĄhZyjSvw*ca=v t9?24FF<%n K2N55q qô˦15ͅ5丫Ѥvb.0( 0odM[`v E ps8l.츹<l5(H;gw5=O;` 燁Erǎe}S/
+
+瑦b@H3~\w^v-XIy2:کr37AXmb>[|;i7FK ffYxԝ5sr]11.@pʦ xi?UZ6iSZ]ApJ ?iirxm΁ɋ'7kzf
+\v=ul]a$Z^mmaSɓbK3u{ƃ^jxw]Z)nfܪ%GF/Lf߅)nZU=VI [
+_<|ɮ>'.~2p}|q$\&?R |,Vŝ7x-@^nO}6Y b iߏ6=Sp/Qu=y?8)۱ G"4&0GL!ys84`/DP_lt|OcҌ9/Z3%!(ǎ1P9++_ux%:Vrat:+=%S~&+K/8,D<H k+Sz,XS-(M[1dFv])
+MY?JjVΌn>wMSԾ722*iz^AI{dA;'+6x76#IJ05m"ܩ(4`e?)\H,/0,ȱkj"QR(Wc:61c63+[!YE>JM)ilrQl68re@E0#ں/9
+LQZ ]SQ<ij1Q)JEL Kwa53L"Aۅche4Y5u C[t-X .?'%eNGJJ F u56 Z;U m)@1DD]&U
+E`/ȦE (ݵ'mDTjpTLU-fkbPspH%G+U8QK0} C1Y%
+Gy)
+obsRBm^ Ga!87X0wBm@e1Y_4J%{czDv!"Kk8w!8Ṧ^~:qjz1^{2^u.ǽLBH3٘캉<ypdAWʜ,++#tn
+kh28)ڼ7n?+XȏVBhY/>lЌXcIt̬u2*,:b`V6הLpR1׶=/(e )fOjsTJ c/8 +l0m~g8m L/"q^=1ʚ,;_B_9u:^y Wr0}mztn 2#EaO)(/$ĉ6}zc0}
+#F) &7o=Lh-e4<a/y
+ZxaFU0M,7}/|yWͤ^d|O.jpOG
+@5NZ'X 'yl:GPm"~hɄ]Hdoo8zM|A|J</ u/8鄦D#X` xQlܝi"nBеixZ?6Q/ okDs#=
+/#!*ΈD\ܙwM7r>%e+u7%B|+_3/[-g-B?F*/ǝe-ؓq}aaH},/:Ɇ >橵HwٰcឬG-6\,? aII7,lrW0lw'4wS@Y'w%@TTpC"oLbM_[ᄡQqÙe߹aoɏ_ ݘ @SxDؐj= vDh"u<_p1?&?e|annDx\>U]^(o
+WyyaiaG5 st#:\#2 ) =|>
+ <$W<uϘN{`Qdd\)9^SJJi5DZ\FM) ")%oj*Xhpd!Q3֋9[zֳx!s0
+(}bSZ"~ 6wԐAX8֠g\xOđ|c>;\#U~-b T ł RA<z5(ߋqf
+Y+2ƗI_#',4Xb
+`Ye?1f ~|ׇݪF+Hwp ˇx`ϲ5
+oxΞw{cb -u)~~ k~~n 缰|lX>`D0q.=$]b" yAR?;J26OXzG9> oeE5 YǢBTCyy~0^}uߴQ}e'(`o!^"vchA4b፼Ow:\FS6ܚoLzӘjzo0 AxAF~ N#K6>jR4mG䈓,\d5Ž:^qj.ڱOㅽTlHtrMxR4N^,cՍCPW}L܇gn<>?łŊWh -'ً,*8CSOuFygsL5Y{c^lR /ltތY,8w L v;
+lݸo^i1wNIz{xM&ݙ9ml6G[hb;m0dV/Ի5 o$IRܭ ZIѷN95wbFa'%YyIۜw-`w{ؾw)nք6)-@1umu ϋ\`dz QdgbBB{=>^jcNyq_ya9ĂPj+ W6Nzvzt7l\={h(OK W-1=nYbac!=N`@i*E:ι*g7͓ {x=Ƣ ݯW
+KljB]&[+2&\I2? Oϼ/x%?΃=Nc wv&ZIw~_f4MAyͦKc%lOy۳d$ܬWSAjo>|W.O˳I+ɘ~y~  [ضZ  Bv_Ƶ'8/?"WyCkw.z[5n ~//h}]/"޸b%I8,YOaAdz#sR%,3U3(_MﵰGE.IAcѕpi F R'n tJ*2rsZG
+JF*cU-ŔADɻ{.{~:TNR=GTPhamn8ڷ/*E|hճW@/R,yOvZ;A E"bEyUѐԍorG(|[-i.Lb' 113h}A=bU'
+[KI!&㶉as8:F ㋸Swzpr 3A c~'*9(1‹c[>ĄGơNL:ʶ4%R zza˜ MW@O<M%tCh$bMhގ5h@FZj, OQߛhtMtӓvW8j #M
+c
+~]xj]Xj
+<tk=%.O:"9l_`c:sLrȋLS~m" ɘ!25^bV)>tTeX _p1K,|>.xeyaIbc LEM!DXm>N
+W։?,t/+ՄBCsW(
+~<6HD D?By^~/ e3,H=_G,sNzwz6pAE4HZJ<U
+y 2&[^Qյt<"uit1֕ vpGIG> 1i@q =OX(6>8f$Byڧp#E&p"68
+tm68 ı6[+H̓3$
+{?Labɺ;zQo?,z)zXlvϪ8Rڳazl=,[ݫ~mujwgawaw~y6,Dj ލ/| ˼XrP;yȼ~8ىÂÂ'  N8,8,8qXpXpnYqptvhOdf']bC vXpQ_Â=DÂפ5SM/8q'N47o'G3pdCv\:'N~HMGu8}WMg#9YB8qXpaߵ\]py2Zu,2<yZ;qױ ' F]uʼn?8,.a+wĉÂ' N;XhD_ׅjqDIKY,Ν`#\};y^[Ъ\IG&]x̍}B!F8UXQ !ix!rX/M̋$`dy u ەExcdp%
+,3D  $hh~ # A A:X~ {ixC8p຤wEV x!uXXv`ydQeDeқX`a`8v,'CW!K\8\m,X17xg] .T&>kڤ,j.xAaW¨qV_4l=Yv io\f/-ㅟ)Qw'8ϿbaY͘-g^lSGwO0߅pZ29^wE}F8RlO,%g ˼ca=kst K,8^4i/i
+UDiꢲH䇠]>MBiGZY?u_#)r9[ ~.gcX fmC/\y$8s_eKǛ#oYGTyݪNǝFGh8$R& łQ"p /&?3Z[֕X0 7`O PDBcP<GD=c6:C'־ї^jT 8)MA `^%0cK/&,Cb,YsAg'j{FfG/xAx)Ƣ`KЙTR|UUEW-<`Z,
+Iؑ \Lqvf."MڌNL_ & {_-qAq!t
+%,4&/{ !Y2hc̹.|ò$GC2[nxwZ'A, 
+'&FnǼO4~h;tSk`/3}RS {;ԧ rGOَ? B
+maHv XRJ4Euv•~yiگf-*xsTʟṪ.A_Ԁrxeߠ|jV^6L'yp9{yYO HC,FY(Xn.
+&j (1"K1l$LuWk XԠ bDX4O4BlOz7 1OƨN|s){GbG)xt1 Ъ bN\f;Gk/>w&#X[9.O\1w<XfȑX&3F:v!e"FԼ,_HRϹiB/Y;ykD7щ[ M\IhEYN[yn'; /N1 ⇗aLb(l,<PZB:`#ߙ
+)$}W_>‚ >hX+lx:{".=(8&n"*BD0R Un;BQYE,$8]Q>CsZ wpaYQa)=lfP6? b2w7SpŅKϖ؍;p[jBK=Lawo{ ƓaK{q(^5-G^9`,4TX#Oam¥\CVeQn5rn=^#qk /%Hi,gp S'SSΊRk`c$ Iu>B
+ymтd//Ck(ļ:ip/j>XG^؄QVzMMv xLnwK>SR 'FCnYwPܲ<h۵p9,v۔84 \Q˗MAtvi@cDCdOT< yy/k%?+X7s<DMV_ܦ\
+.DI4<;݃Zf͏XEr#[8BV\M.b>Pd^(,s!/uJ%g>~Gg naz9/y4f.<+K
+370Ï5=2_]W,ghdcʴH0σY5/ct' *k6C{"_7q*LU%n}n7gb;l$-O ֺ.bbv4˼0(vMH(DU *S€;ؗpbf.D()DԔsRBVFhD:\I~m_ƂuHl_q2?Z%{ 6dFWku0B1DlE5sQJXBd:Nv@Ջ
+7f f?YAiitX0:3Sc
+
+&M
+”؎8M
+nJʗ%\jj[,h+FZ8A4Q`VJsG5e`Dk秳.LLW{FcQ".0XN!V{]xQ8`Aqz33u|2Z/?S XO) x\/ t(:S s<ۀis=]gAQ&vRm/Hfp:ì3.k'6'6e}*P-N2918SK?>I[9<?Mdr0;5k/6$= $dR2wi7'HiSeTb~̶Q |헤?΂˼;%BP>]{V8~vNzZԶ,8qEDaOÂ',ĉ=+civ##w|g#mw N aa NoX(G fiDEFJXȉ// 2Pqȼ7U|d\t;,| uałMŸԈahj{z=YѤw+lp4+nLjB Qrڽ:[ױ :pu9uD ƕVr+RjGq+ʹ=P@ez:J W
+OFV4xyc_/*Xh1#w85頃ǪԢmGy^=Ǿ'~nCי&>UǦgUA<Lj)sXA%S)I^6 N׎cCXT]=B,ߴ F
+qA*vHWhBjbLbxD.͋!v|\oWaFXS7<IiJX
+-B\|Hg9)@^P YCD /i"H4 3`(l]>PY+z7Rb
+ Jh#Y^9{ C p_s=,I6sp2pUTu!B, WXiDxQu)ĺJ:ܾġ=?؂@bxK1UiLP=JENMx[ &k%UEZ9EF!S;p&y1;v"8?"SGL1 3& Cc.Mdzyۿ}L3ulJU5f'133Q T3ǿ¿/8qXpg#9qXpXpl$'ĂjwjWEwkSz">GvQ/fT/ Я>VL6R6ܙ
+@ﱑO>V+;V? 6›}—dD߂A9,X(3/Bk7bAq8^rx=疇qH7BnH?9
+1
+""ٰ"/xR6<G0Z J-z]bWb _ xe D'f}zxab [ķ&y*YTfr̳NY,8xAЎn43et} X (׍N?@i|_ X,d"N2i%"8IG;Q#ݵB Z8h<ZrbAfR},LTꜫ)H U?P`3!Dp ,;OJuX"ޏ5͡QS ?/ny#1TE3<VLt/tg@;:9kÂyթ $Ex$jH8nB#, "h3y Ce:Fwc Xv~?/nCjp5^`зc
+B{
+A11WJHN;_B<Q{u Q\׊K^-Ebwmc >'QLЯ-z1vTvQwu 9<_h3fMżGW"M:-{ hBS+*u1 B/P%EO"'J=5^MM1#/ Y}ÃSmbt oٶyjx1P%۸B %}S\BH;) eZ^);5d,pRAc:sF\T>':۪oGBdxiE,G\y 8BcƘpdXIg1!
+S{|} qN=^ &=g=t@'Sgb<G"W3e)JX{t:Np*AIqSA܇9TʢTƑ:2SX(;hem2G8*1^0'~WyAd9>|y)z/Xؙ:aE{4oئJ &Q\KSEReױ`W@QL܋/9L<]' rY2V_X;hO7vUa`
+F<j87_B4]t8o<I|Z =CEp} T
+zQav a}薠 Z%-Wt4/捶> :<
+{mGiW.
+egߊcaR;"B<U%3W  MK t
+M <PO< % +Y=Һi2Z^Bdh`4ՄXj1MpЖf'R"t#M@T
+G xNy8u(܍ |$S"k/6hVX@Ezݡ&zD 8MkX.3~^ie\},}yM19ry$UA<GAwpF;d Á~C' TtYhөo2rYq
+psyFz/l Қ-*Ёr06煦ڰ1TpFшPCOW#%̢U<{ >!\KyRۿ")e<?Q2a>tc>|(\`!ʐv8=p0<%>nvS>,8/P톯q%~4XG bɶYt~I%ET>O nj|ҡf
+nI!0+ C!l|,߾KwlWbwyA|ǐ|(4y9b?`Z(Tgª>;D7Z絉}M-_]*? >+l"N"U#i!^PĽPMC& C%FBvRդ<q@
+>(&VSz v
+UR+Mjy_P `>CO,1Mvl>2C{B893U
+
+I\b{pK
+4p C)Wr;(+OXa! !EØU/t[0W!%3GfS _*^M 7*kMubhEVUe&XО>G:ud};,8[ys `gyk _= ٗp iN al̃ڎꏽeDŽ_6f,ϵHi킹Fendstream
+endobj
+5651 0 obj <<
+/Length 107
+/Filter /FlateDecode
+>>
+stream
+x`
+endobj
+5650 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [418.678 719.682 512.306 732.584]
+/Rect [276.16 226.708 473.376 239.609]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cups.org/cups-help.html)>>
>> endobj
-5306 0 obj <<
+5646 0 obj <<
+/D [5644 0 R /XYZ 85.039 781.388 null]
+>> endobj
+5647 0 obj <<
+/D [5644 0 R /XYZ 85.039 635.199 null]
+>> endobj
+5648 0 obj <<
+/D [5644 0 R /XYZ 85.039 635.199 null]
+>> endobj
+5649 0 obj <<
+/D [5644 0 R /XYZ 222.519 310.929 null]
+>> endobj
+5643 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F66 4195 0 R /F62 4052 0 R /F58 3365 0 R /F35 2980 0 R >>
+/XObject << /Im21 5642 0 R >>
+/ProcSet [ /PDF /Text /ImageC /ImageI ]
+>> endobj
+5655 0 obj <<
+/Length 2801
+/Filter /FlateDecode
+>>
+stream
+xɎ:_a22)(jɜ/@2wP&Hr:=_?%f9Y*^Y,SA(Y@fl
+gpJh_̋oT2aǣXw7?/|)'`iz޽Oo)M}|^dһa_<'?o>\Z~lWp2f+3Pϛ/WYT|)(*bjB,* TX}[oZETͿUpծO7ǃְQ2оA"ʼPěƼQL@5C$@F~*
+!W?v
+a!5B͜ =kT'eDŦyuۏ%T>fx7E "Jѯ u53wo貄ρC! -6s-&u
+hU.Wi|ƼU"e~0նo[nZHmjJ2}qB3V
+xX qDPtAEP(%A>cD-"H* l_m6kV.g>@Gic<١;j0RvHh0FU=X2(XCasgӄ:Y8D7,hYoO'j:J‹XvXYN$)2c NEڀĐ$
+R
+)
+7BI zILd
+ڄE ?ݫ:߲- F8k/},sR6 ;uE3LOL
+.lgu3q^k]wI`[PVT_~B1Hj؁9atIZ )Njإ{bLQ7^zi_ZmKkkta6;Юt4GTgAgE; &VwC* Xk'ժ9Z5E!ثuDqZE4(+UhUG<m>b_mN`1L(HicK h-tTQ MWglY))7Jp]9k mMAm-*)A4Dg Ƹ[l~T9lVZAծk]Sa[~ 0ܲm 5}]. L]|q,ansZ5CrNӓ>Ҋb402Ƅ/
+4R)CҥNeS-
+endobj
+5654 0 obj <<
+/Type /Page
+/Contents 5655 0 R
+/Resources 5653 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5641 0 R
+/Annots [ 5658 0 R ]
+>> endobj
+5652 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 364
+/Height 29
+/BitsPerComponent 8
+/ColorSpace /DeviceRGB
+/Length 1604
+/Filter /FlateDecode
+>>
+stream
+x[(|_%C3(HMyPD(/)2D# r-ƒxai"BQn~-wuƙiƜ31k=hϞ9{>kg3I;==8 48m;RRR/99{xxG: ҁR:Hv0c;KI[&}tLI_VेRܙ'ұB ȷr:ccc76603 $bl0ڑZD"~WWWB )}᡺ލt|PC̿ fj䕕h{LARvj䵵5Xţ,eKkkD3t8EGSCd677R)qT\\|}} jSSr*W<KzJK(̠j- FDD@322nnnHg{{{`` '%%z~~.--+//bҼ X&$$Bf)D177hG3</:Ί6(VTTI$>#Yhnn&{>>>ZZZ<==333IA``tvv<>>666r[__qqNl]]]>T*̻ jݮ.g)ޑ
+Ѐ+W|p~zz:HnjiCt* quuҋʔ FG:K|FIfgbU _tm
+@VYU1~avV4E9.彬s[[
+ ԲhY$%% P$pR/i5dvv6""ŅuQRR=PIeeFll,),r9eIC,! )
+ )y/W599y``,6ASSSXsd-Ғ,eo
+V08\hZ-ۙF 탞t~N/G 5Ē0KEEE[ 5tPC O4[s}<"::zeeZFHt>PF#ֹ?ZYHktc>XbR*nnn~c4e:H=Rl$-gffB!4JYhH12%&&`LY322bohH ,MOO73 >ѕendstream
+endobj
+5658 0 obj <<
/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 706.133 216.896 719.034]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cups.org/cups-help.html)>>
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [322.255 312.671 401.824 324.36]
+/Subtype /Link
+/A << /S /GoTo /D (pdftosocket) >>
>> endobj
-5304 0 obj <<
-/D [5302 0 R /XYZ 85.039 781.388 null]
+5656 0 obj <<
+/D [5654 0 R /XYZ 85.039 781.388 null]
>> endobj
-1486 0 obj <<
-/D [5302 0 R /XYZ 85.039 434.632 null]
+1526 0 obj <<
+/D [5654 0 R /XYZ 85.039 664.909 null]
>> endobj
-5307 0 obj <<
-/D [5302 0 R /XYZ 85.039 414.041 null]
+5657 0 obj <<
+/D [5654 0 R /XYZ 85.039 630.769 null]
>> endobj
-5301 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R /F20 2865 0 R /F14 2895 0 R >>
-/ProcSet [ /PDF /Text ]
+5659 0 obj <<
+/D [5654 0 R /XYZ 85.039 299.226 null]
>> endobj
-5310 0 obj <<
-/Length 3434
+5660 0 obj <<
+/D [5654 0 R /XYZ 85.039 299.226 null]
+>> endobj
+5661 0 obj <<
+/D [5654 0 R /XYZ 300.398 228.091 null]
+>> endobj
+5653 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F41 2998 0 R /F66 4195 0 R /F62 4052 0 R >>
+/XObject << /Im22 5652 0 R >>
+/ProcSet [ /PDF /Text /ImageC ]
+>> endobj
+5665 0 obj <<
+/Length 3096
/Filter /FlateDecode
>>
stream
-xZ[oܶ~XZ ~I긭=탬j?sDe'E€")rH|Ṕ?wYOY9qfrzJg('
-M\GN:.W_o/^۾[nv'˹k]rٻw@k}Xby[Ws~3꧓WTvG>3[?8Oʎrt9 B_/Q-[/R^ QILq#æ8S;NjUʋǃbShN٭a
-ޣߜk՛V]Wo
-'0C!Ρkx=~Zbkja"/FݪۮvMlN.N2 N7 rRiT+iqRwm۔zV}F@hC{^7-ʿͪ]},GEA򝢗YHY"1^Ov-a4<hb8& (~0)7$Bz[33p 0p(d%g`R~Z1 ׅ-GϺB;1BbhFpwdzIĒs{БyPnh`vE"#lm_qˆM}p-IiLxd1Q?ԑ@/wCkMEDW5?mK+ w0g+[d
-
-3T+cu6oD:D?skS:21K_))"N ˺7ehDBXI qžr}F,8<Z2yCB}7[>j-Q_Cˮhh$m VUBpk(ܕ>h}E:#sJ9CMY -}ڑ$x|sl)b*IbVb I -OT6TjƬqH
-E5:p]Jx}Q<k (% xd I؃@XXfDbMde e?UrfY!;Rd>qm,o퉕Lp4 {dW!I*mdj*)ȏ PVZޟ>1pHK!a& p7-,]S{GpP  3 wpz1
-l+tD6Ek*z*[%ro5;KC9:>N}
-oֵC#\hAI :*\<E[GzN]wkœYK%()3%`mh^Z0_Ůu)>? o]\UH͉إk3=o4Pӄm^EFY8f~ؖ_[ y)^'5Ԉ{| ؈UxQ)#>Z#]KUX p-2rwf`cUϺvܩXB^
-oN"1q+.'^.&4㚛Bq8V9yd5ᭁsa;
-%ާ%0 .iT8@9&&
-bN】8 ,o45
-FꞲy 9,(8=~"&*7̋,;fu
-%T/_ W> G!cQuyY6ZX.tK05=H@T@N{IgX=7V <^{endstream
+xڥYoFݿBK) b˻}s8jXm@>-D0 .wggfǵ?1|qY ۍzw̶ru!B, ˻W`&;vcǷ=ߝm|x{yp]=_ad_ͅu˳OwOWW|y-?˯/_k;~xwp
+iBv(O D:H݃_Y'"TP/
+\lZZ()=)CwXr!E-l[~s!&fޮ#B(Bb&mHຉ|`ur@Tٲߣw0)"R+N
+:\c‚}#
+*&·=>(y"P=çxrE W
+JXk"(:qE/x˩6MS^p3lκ4йkyܪ3khjfeZ+#mA)
+Li
+ْ*Ery,JNB"6{_q%9[]C
+^PЕS[!r
+[?ED]'$dRHJ.R%*)u?8{bT
+ JFzAo2(endstream
endobj
-5309 0 obj <<
+5664 0 obj <<
/Type /Page
-/Contents 5310 0 R
-/Resources 5308 0 R
+/Contents 5665 0 R
+/Resources 5663 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5300 0 R
-/Annots [ 5313 0 R 5314 0 R 5315 0 R 5316 0 R 5317 0 R 5318 0 R ]
+/Parent 5641 0 R
+/Annots [ 5667 0 R 5672 0 R 5673 0 R 5674 0 R 5675 0 R ]
>> endobj
-5313 0 obj <<
+5662 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 370
+/Height 99
+/BitsPerComponent 8
+/ColorSpace /DeviceRGB
+/Length 3132
+/Filter /FlateDecode
+>>
+stream
+x]Hs}Y5zstMkEJB& |nK/
+M\ŤBo(/ xa ( ^D`慥K30,<sٙsϞ?@J]@*w/^+jb[qARΒڧb؍[788ӧ[[[HGth"I:HYR*ⶓE:rNI [Ek~}xx8 X,VU>׉t<OI*?n<i60VL:H
+V=a]]]Ѵ׷duucu`f󫥥"FCb*=$:nJi}֭EU妃bÇ)h2zmmϏ
+MIy*gΜٱScxx811볳^)څ$»V9pF-aZZ-ե޾} (+XEZ) F=##cnnۿ]YYFSSSn׿T
+Z&%%S###)))\W^7D|$e#f2tnH/f3.SVYYYxx8~%~bf_.XÇ?zݻ?KbGuwܡ*giibܻwOo߾UWW+}r*njj~Av "吋o)/H;111⫠UUUTEaaaNNpLo&0DFFRmҸ^ 4OLLHh}(\x0M^,>>>0 69СCJ쬲m%d/YON<ѡqK}ipp0Viĥ>C.J H ݼy3!!+
+^<k[DDM~V(˻"9 WA5J944Tׯ\]YYYSSS_K}(\VaqiZxW
+ӽJnAJsLn~~~ww7]3Bkׯ_*..]YY㎕*666>|qKr)4G}=+q吋o)VG¿+RFye/Z%55Ut:*!րW\~CFFí~\CӶľ>ōۡ!M5U3#C9䢬t[E
+UY&V:GS-HDD9
+1֓o9,FHII EOGWW>ܝ+=긕k}FXrӁU'm
+[Of_[xґg:HJ*x&#{wvvzCkr_/ 3$,*鸝~:211qxx؍ҐAR۷:6Zm]]DH`rO
+
+
+
+R
+
+
+
+
+
+FX
+
+E, 1DTjaVF"l5 *HeȶՌ*HDVaXŽrd~*HDAVaXVU<$NͿu/yլUhd2Qr{F#4===Q]eeetKfgg?kuu5??)((X[[(.Rfdd:
+B^zOǟ8qb``
+Nܾ}={f=XVϲۃV. ~oei"78;# mC:$Gdd$ۦzfffp^m !*
+4*N<a0 ]$VyfBBݭ~]F
+ߨĔ
+.pIzhhld544Eʻf-Irig۟Q?S'Y$4_O \aXQZ,466~oһ>}Zt_{ƍ2i5SHb?RMMMsTTׯyETTT444K ^|a;*..]YY>Jt>Bg*
+100O3cǎ|%77Wľ>~L7W`` -i,V$Vioo7Lp8rHUUp?F=IDNo޼qVY~M#PZjjV!D
+~*{ՌĢe}
+V 1/=Խq(,߿2![O6M*xҩba&*5?Խs&*.299&
+
+endobj
+5667 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [322.255 554.709 401.824 566.398]
+/Subtype /Link
+/A << /S /GoTo /D (pdftoepsonusb) >>
+>> endobj
+5672 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 389.924 387.717 402.826]
+/Rect [111.316 269.847 180.062 282.749]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://wwwl.easysw.com/printpro/)>>
>> endobj
-5314 0 obj <<
+5673 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [157.067 308.629 429.341 321.531]
+/Rect [131.434 188.552 232.166 201.454]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://gimp-print.sourceforge.net/)>>
>> endobj
-5315 0 obj <<
+5674 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 267.982 343.884 280.883]
+/Rect [111.316 134.355 171.288 147.257]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.turboprint.com/)>>
>> endobj
-5316 0 obj <<
+5675 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 240.883 508.187 253.785]
+/Rect [111.316 93.708 147.857 106.609]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www-124.ibm.com/developerworks/oss/linux/projects/omni/)>>
>> endobj
-5317 0 obj <<
+5666 0 obj <<
+/D [5664 0 R /XYZ 85.039 781.388 null]
+>> endobj
+5668 0 obj <<
+/D [5664 0 R /XYZ 85.039 540.961 null]
+>> endobj
+5669 0 obj <<
+/D [5664 0 R /XYZ 85.039 540.961 null]
+>> endobj
+5670 0 obj <<
+/D [5664 0 R /XYZ 303.989 420.414 null]
+>> endobj
+1530 0 obj <<
+/D [5664 0 R /XYZ 85.039 376.727 null]
+>> endobj
+5671 0 obj <<
+/D [5664 0 R /XYZ 85.039 341.317 null]
+>> endobj
+5663 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F58 3365 0 R /F66 4195 0 R /F62 4052 0 R /F20 2965 0 R >>
+/XObject << /Im23 5662 0 R >>
+/ProcSet [ /PDF /Text /ImageC ]
+>> endobj
+5678 0 obj <<
+/Length 2843
+/Filter /FlateDecode
+>>
+stream
+xڥYYs~ׯ`)UYj `p:O-VV,:Njw $Ad<ɖ_C=ROBV&MB0B DX&W;ieG*[9zf4jvxbtd'AZ܎uW7Q[_nqqh3]l_%[}x;5u
+GOl i{⟽(sG<U:Qv-)Sno9W,]eF7iۡDۃ<z)#ZiF;jiop p{@/7Gk`IOۑ,Wwo&M;v\ OBʳ޴U Q`CaxRyZYu=8U!CoQmPܜYZӅOQG89+ Mk9f!o*48Md*
+0rw9zJ⏨[Z =:cմdqs
+PHʍ",wR~'"L
+=zS"v2u NW(u1ORU:`vXm%\#d`{BH)j#lpEɷ_ NKBAx(]I:Fsd[P Ҙt'5%
+Rs9)?ZJjWs6V)lxymhV" 4&_e@ I˃zFiw1G L3ZàI53Ln9>!U kcEw ?X,9CxJpr}%N&@xoʩ! ox2, ]nek$ wx)؇aBnwܴibK4>a'i
+Pui?yF?dɤw6d:xӒsuh_J@2l߶κ_NIӔ"ڄÐcD,Dr~!̺|]C'W:dz}py!~^~'_-PoCEzgMQLPE
+VcSj$z?etC% UV
+:i{ѢLK/?cbzS)SyD50 F!HA6ʜḏgFPV 4CNh|m4oAdzu</R1YsJқl!m_L>tsR<6.Y]C6gմYWL`r!չ$ߍtTG( "[:{uOh/;O5̫x#!ؠ8 ąŨ
+U1ݾ{:)yVNX1KIlµ.)xKnR~>
+.ѿ(|ž.&L
+.p "1J[#mk7&Á$y:fiYJW_NhGA4r<T- ة؉&2QUۮ!$yYWrn7NbJ1$+y=_ْȷWmad悔!/<}Irur1le;6B;1,uCގ gl@ b$p
+\,>=cfи}t.Zzq
+_isr3P zu3bi7tI뮯jAs_0--2`5_1((3p5X 8Щo
+3~^=1OmT<-I>ϟiT].E&1~PBv{xI
+HME9XUHszFٳҏ @sѝ.xa T9Tendstream
+endobj
+5677 0 obj <<
+/Type /Page
+/Contents 5678 0 R
+/Resources 5676 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5641 0 R
+/Annots [ 5680 0 R 5681 0 R 5683 0 R ]
+>> endobj
+5680 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 186.686 338.269 199.588]
+/Rect [111.316 746.78 148.718 759.682]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://hpinkjet.sourceforge.net/)>>
>> endobj
-5318 0 obj <<
+5681 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 146.039 400.551 158.94]
+/Rect [111.316 706.133 218.725 719.034]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/)>>
>> endobj
-5311 0 obj <<
-/D [5309 0 R /XYZ 85.039 781.388 null]
+5683 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [127.983 252.984 490.789 265.885]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://playground.sun.com/printing/documentation/interface.html)>>
>> endobj
-1490 0 obj <<
-/D [5309 0 R /XYZ 85.039 471.827 null]
+5679 0 obj <<
+/D [5677 0 R /XYZ 85.039 781.388 null]
>> endobj
-5312 0 obj <<
-/D [5309 0 R /XYZ 85.039 447.845 null]
+1534 0 obj <<
+/D [5677 0 R /XYZ 85.039 550.012 null]
>> endobj
-5308 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R /F20 2865 0 R >>
+5682 0 obj <<
+/D [5677 0 R /XYZ 85.039 517.795 null]
+>> endobj
+1538 0 obj <<
+/D [5677 0 R /XYZ 85.039 237.54 null]
+>> endobj
+5684 0 obj <<
+/D [5677 0 R /XYZ 85.039 194.396 null]
+>> endobj
+1542 0 obj <<
+/D [5677 0 R /XYZ 85.039 126.4 null]
+>> endobj
+5685 0 obj <<
+/D [5677 0 R /XYZ 85.039 93.979 null]
+>> endobj
+5676 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F62 4052 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5322 0 obj <<
-/Length 3108
+5690 0 obj <<
+/Length 2104
/Filter /FlateDecode
>>
stream
-xko6{~WI$fѦz[HV7ɿ<HY{p8R"%i4`v+B̤
-^-.r~dP_?^8_!0$Iןw돗W˫8
-BF%0
-F[ xn:`h; aBFx\𕭪̼C;fRÑ+)ʚN%_w½E$§@z1Jt^BiH=^að~n y dZըqlN/FwudPl0qǵH9+ʲs7JLPYҨ( 
-}a;:6QGF9|_kd]IkJ<u<!l(~ygt[
-pB6'_gg α]/Xn(wA,ؕqWT)v9.L`D6
-<+-o+vvo
-*uXwy#r~˵؎-ќXhk5n %9K[Vh#?J\%FCJ~lQޭ 4hR58a?1"W;=gb*[ӂMUtYk5Jª;@[A]zֽ[SW'5HTd<_KÓjB0NZ(?
-AY%}8,b,jᘹJu.0aaqBB^a*[H.B bygIz!0n&U|X4!@aM?rd=sVisTn(QR_xGtcdgꆿAOM`$vrl<d
-ж5HUe4{pQ,0 : `RO''soK as7?fC$ 4оjHboq.iGΟ]WKKPEwgZJ__&~:j'<a{Д:2\ k,ճMR`88'_ӽnh1)S{a*S_HllFzf_Xs@Džډc6<ؔ'%3؎nRӎlJLaEĒ_IN09&|pIiN}ȥ q/`&9Vwl_ܷ%VpRfnׅ)s3;S#o;
->eI2 x&B9)U 9Kg*gdg2@5p;<<Du jv92IbQ Ulv@(z`T]AQzP}yM;s/*|Le /9Arz4n
-O Oo (Ďȉ*9N(_Nr; vC'*:Yqx}iu%Ѩ/B{iP帱
-I; xνw2=:aKJYqz߸Av}V}K,*TGZdWV9ʖ]7gB:߼: ?Jj%1MNSS}l&'?3<.ns58 Q͆G6XKTR
-S[hzTR6pD6@uUAX#DNmѐ2(y.XזArWpvý eR fY9/,ŶH{duY{^RL\2WU%nяQWٵ t :b3'k#꒲UO|r2m6\8 F]y6H&7GqCyGE'Ec8MDendstream
+xڥXo6_!e2P(JԦibͲ}P,' [$7,K7}Hy!)Ϛ ԙZhkfzwvc!,ϫx* 0{9&ٻWWY0_>]͕ԫˋ˷8OWǹ../?z3/eoioXz, tfG Le^ͮgx-x18kӞ3a`¸\S
+P{ ]9Tt*Lk76Qx&jTQUtqzPjow˸hJ|G'ɱ_VyU}cJ-xЬa- __z3sh0#Ż-jj1Ÿ&n>e)_x'-^[FgqVo tZ-3a 34(<'@!L
+
+i<Ɩ<kw<c=@ZZGeFU/Nftɠ >&-P[W
+F?]^"
+=`@{||nqEhxG?Иw̒'  yhCWHVb.'TkFJ0A.$RBR* >]M?6p i9&gJ^$KƔm]-* ?&G\Ype曲*stщh,5 "M_&@uԷ3\n Mi]4Q}a[-wշg1 
+`x[^</d-'`\j(xy'oԀѻJVJ1>vq 7z{?%WA g(I[PReEb8%eؚ#WqX}}*OrJEXQc':XEP)q,cV철;A/x_0M3PFD2 (^`TTP**8 tܙ$:uS!ZAb-' TY0@Jcgg1VDÂu$xSӖ:NќQOle4FIđ=foowg, ]M
+
+78,P#i'Aǎ ȅ!SXs
+-st+ jWC77g"!3\7:q$ö nUS;lSg,gY-s: lpYANppHH|*+H·jRH+wTtw;(ڊbREXztHJu(1# ݂c.>Ȱ)ӑ|xli,X7 HÄ6X܊C뻆KUb[ ^w܂y
++ s^hgk{hY;ډT
+Ta줓㎔`O/~
endobj
-5321 0 obj <<
+5689 0 obj <<
/Type /Page
-/Contents 5322 0 R
-/Resources 5320 0 R
+/Contents 5690 0 R
+/Resources 5688 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5300 0 R
-/Annots [ 5325 0 R 5326 0 R ]
->> endobj
-5325 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [309.861 384.459 512.306 396.452]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://playground.sun.com/printing/documentation/interface.html)>>
->> endobj
-5326 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 370.607 273.67 383.509]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://playground.sun.com/printing/documentation/interface.html)>>
+/Parent 5641 0 R
>> endobj
-5323 0 obj <<
-/D [5321 0 R /XYZ 85.039 781.388 null]
->> endobj
-1494 0 obj <<
-/D [5321 0 R /XYZ 85.039 654.087 null]
+5686 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 780
+/Height 299
+/BitsPerComponent 8
+/ColorSpace [/Indexed /DeviceRGB 31 5697 0 R]
+/Length 22110
+/Filter /FlateDecode
+>>
+stream
+x]b( >1+$M;mtt&q|$!Dgrw w{_Q7ag~6c }s$ l*cK,X.ZX^RIM l{ a7b>j^^{HOll煽켰^v^ya/;/켰v^ ;/Xya ;/켰c_^^mW^r΄e /Th<]ov*_ϸֹh /Tn~v,,&B/$h?|و!*m͢
+V5igxy0s8EPo0$/ٶGHeWs(OrD_Cyarڥ(T:)\5ޮ8OLuF @|Һ.7}85kytIP;X.wTV
+ņ= 
+"?(}̝=XG5TKP2&d4CY8zP36iXMXQ/R;=E 54>+
+ޤm7gX+.4n͐-mZ>SVIJ 4aZѥSW]WU`{D&XBI*H5hd
+m7v^"eYN/rMGuh6ᜡd<;b3[5@lg
+aX
+BBJjFY_6*37y3u踶6ya/? )Xb\lT$%rÈqtrÎ#/ԝ->&=2aH#hTf-ya/? i,Gڒ
+
+0=b$|Y< Q;/'%g`8 :Hiȇtڎy H_aA9" ~Q^aއ|9`ݲ^@#s7j'WXbq" D$L&SҺ8`{.+Е~VU4bDo4|49F8=bs^@OX !(8HmISQ {B IZ]w.Dv^TO?!Kľo/ѧA5|v8=K_ٸߛ04نeXXॅ4#5ށL(,,
+XֽPj6lKg%f,Qƪ$b)o?shᐡ)LyC;.Ì#U|v7/˨>~mՇ3`G:޽A;ҊD
+"+ȹX$,2ak8h(ʌB<jO129 ~Qܣe!,a[= W=$'7ү#P$EIID_m6d0)\."ߝ63E
+o#aT s#@1dPE[!$ E4dN )yy>Oʕx.!5<MqD`PnY5sNE_Ƒ 2p!,۰,0٦ #%!U*P[>bY%:v;жv rD2? ?]ʗ>TwAɂFpXT~PnJdw,pЉlA&39^3`6;i3:),1.iݲa܆*dpg'?KOLR`ڠ#I~O ?$JeD J A]CzB>\ W ! 8MF=wtXFH0ćX- ԮHPº4!d QLFH
+UxA9W*yT#*0,6ԯan|G`y +^tmJy1.oXX/x }mlH}HC Ēpei{B.Qԑ}v|F`Dyf঻/~o\⭻x|mOY B;X7,W92~eE#Ξ$Џ-V1HΜFxCi#bᚹo%52M
+ c T;hzph惎[Hp]"r;\ꀅI:b`I! 5̂,O %X]v"[P b06 z:q
+C=mX@M+n%܅Uu.I;/|,
+v8N_7(aMaC4Pov&MAsE9Isl*l `=bqYH,Q;/v
+̛ Ran$RfJFKn+?jU;lQ@U2/JLFd#ug8-+YA ꖐ{UD ,]wyE22LomaSuj@8 MΎBеUL({q|c>Zy.~zkms1F.]xAK"/ #/Lـf,E{as8s)e]
+%|照ㅻTw^+/y
+^gƕR}dKoc*:+ Y"Se 5bB a:xAp]+B0U\u]1
+^Fԉ}JxL>lyAKrŧ2^Hݼ-C:'K[>,"E0V^o/4f 8j.o#I /'7[P(ɻ,`aA)6ÌZS.煆 T<4p|Rtx~3U]L3"dsdeP'jS*!YO
+9]-2_rr &efG*<*
+Z^GJUU9*aѹ7 Zu׿G!/A!~bHg[e:]G!TYi||. (2
+k2e/ㅲhDCWĵ-\AP`DJHп.K}7|QoI [}$,и' N vP
+~SpG(:1CT5+qyar1w++׼ vDAk]l/%‹oPl5=^]'=;]]y!>Cgq4͇rWY]*^(Ĩs _X|>ޯ3s+N$o:|HHZ ~&j
+* P@P'EJh?R Aq זn?x!a4$tc H,^VwBN"C
+
+r^g/م$R^({<cwd
+S֗27^`8ҡ{B"u(^`g|4~4o?Gуlg2Ũϴ7q&ox**{OwBJmXumԗ`^]׸)ymGD%wɿ eIe2"ʘIPxˆ. ߱~h/kKxõ CnJF&>,<H*+g5R/3j^zż`_$BVI{9Guc!:^ c*!2I._( (9gu {޿ YdH_h
+P1[y f)Ϯ݇ak%L8^ jWN c&X^m/K:kF> G>C@7
+Xz31AGjmFV-{F8JT~ x S,{332t*dK.}>xyiڪN "rq3/Z$j{9GvSmN}u2ؙIg;bUk9l H{i <0 X) 3CquTiF
+\Rmׇ/49{C 7 /5,Jaa~ *(5I@p(;*JdZ\.z^] 8qy ߐϮs:1.v`_S!QD
+68֥CJH=x!tƓw6z^.%Z9Z3!c-|tFo6兗J^gł<aavؕuS(vNj8>>
+qMx^ |AT4k+j0b;㡫a|[}5/3
+Vfg3WGJƢ
+OfZm} m9O?|RC~9{8`^8f<>9 e}/vRK˅w#N{CG0h{2db-A/,)02VX04<_ZёB~ ߘ 7{*kojpH> tOx /L Z`u!kk^~*Ϡ1n̒w}1Z@ o>)ѬWԣ3 L| ;
+>iMCۙ\ /='e2RoZWa
+*Ǝ7B,sTn.OfyhZMgt V`"Ok"<ÉCg5̕ XS ,MՈYY@nSi s=/`B %HMki xi>rkQYo#pB6*
+pޞ$Yo5M$^Sm^(߆nJ~A)!dll t#DYkMgX!-0C9Fh b8BZ͕ɸ"pօ)KVh!2UyP7޹>Y 7<C m`tqfmHXA4oc]W.U'UԑpUT$>mz-#d[+y!C׊!lNx3`b;`K7w P\ WYbx\f.g`
+F7e @HGqIߘ7 m?Je~"y=/ e
+ςDZZ{ҡw@&㝏OZ^ %8GZje˂lD
+5'!#`̣J
+G9Ṽ$j G5sRr8=KDNܣ4unwf]rk~3ˈ{ w&ǦʏԠ4/C^HH@Uۺy4/?-}}W8 WKV3D}fYhlIԿPΩ,@Tctl2kKs~4ʭopf[E1eHJ`\LCx͆DL,':קte:E+.Ho-KyA0(ӿLfXhm)Q*#D)TjKz
+6YVh2SZپy+/ab^hNWBcw[}]8,adĞd諬==sOec;eǀhRxwA gx!4!DBWn\VjIH .h,W DRjOjy$=)E-SH1b>ՒRⱼLA)/,$N a1Y ~Ks*DUL=:@嵎+wNй b3ζ ԟ)=BFS=/Z-qRIK%3H%dE~μ#N.ڼQ2\0X^
+F{ȪDkVw T#'EW}{0-(D7JPWxu([O<Ή!ع]>8e0S(2U]kG"F͘wbaA,L<f8 _ =.kҊ:|-|t5E$.Ҝr[5B/<C<6'~&L\iŵQ߰:Qƌ> #jUFcm6ߜblQuJq<3{Ԁ`AD8Sp ;c!A8iJ,R#詟KPV-He~y[UfnsU^PԥnD8ˈ3Q lbwEu¦-Mcye&W x[˔㴩 NRYػ:bA a;iS+57 ~j^ӡ^⤓)뜍'H%kC
+UN<,ߓl.s/a!UկC=\_v-kX<1۔=ᠰ$03Ũl,Ķnm2h@^x%>SBCQ@ͫL2I-Oa!KӮ"Kd0aN-7xQw7w>`4a& ? 2RuԠQT/u{p㮵ј.AѰdU2tؓkqp'/x(z sb؀yoOܰ}fT.Hi1u⦚+Sr
+QWVDZxaϳ}+.p
+:m³i 
+dK+~HQi (DO =LXE"W/p<R2
+YèV05µp$ޙ pqs"5\Hg+mѺT.,l]>/7iU^t132? W}xA8fjyb^f}\FG:¶kT\`e0q@sJ^de\AixϺ."y }&) /XyB{!Gw\)\#Jxy y! 5H|
+@ `fs #ҍtˤ 5*!p $SdƉ:qИ*54Zἀ3T^'SP28 9ΜM6cF xY#l{4Ls6`2e]ErRg' $d.pl N[ګ ֻ`*;*ӆZ۰#GCG^y7[k 9 5mg +w-YjZfZ +eILG9Jz3,i#;WX}IBHA^X|e f5ad:,L<R|gDHLv SR|S#$}Ue rÂ&*
+CtE3.{@ߛB
+i~~>NU:J>>^៶ u"WXG^V!!EoӠDF h1<8joO4O'tH,몪|:˭t351Te%%6u, >;CN(oLͿ %4А9Y-o5rQ ~ `ߘgo:_^G?ݖʧYįm)#Ox9mZ,4/80;IM[ 9X¶{YzO<_ۛq"ōc<iQP/O󂬷q2D']'ÿ=ripYq Mqb7cF^xҒȿ ?)6y 懴cN*ʱ9[ɘ=|m-[-8vYM,C%rk~zQǿ
+ ? OT]9*e٨5SmfU_dH:KlGYȲ}na9愌H|#H
+7.E8g] :+?EyU[ك #rF:4 $*a,Mmf^hLQ\f9y!0)I
+NIcL=L",0/ԉH 58r9;USœ>UU|dn17K~ D .ƖA>xTYvod[x1˱Rg{}T-' _ㅒYe$
+(S&\,[#E=<.~)yAm I8wji{`^P;/|:k]u "1$[2-v>%FO!GacsJ##&¤BRIFA^JPD,> :ljB/9?e^x7S1?n/l8D1 U"<x1˅oa} ; T/)uGl#u  1}g3LfrB{q7'I/R ür0_6‡1?G5!=n,
+L8g*y j {e5aoWug0s ? ϿHɂ:3qҩaJQ"΅phyįㅫy ǵ=<)/$46{F,p7{{0j̪y᡼~
+vi}`)J
+ Y>̺¯t$U^9| uO:Ϡs"i-MZ}zL@Cq P7> CS+^x+ZgRb!nZ׾w<^~ND?xX^<6 !'ꝵ- Ѻ60AKXP<6ꀄk'p4? < !/R<g牛?q[o/F癓:ԗ0.a~^
+I)^B!w
+VT`'[OkQ^8M>Q<4t ņUOqm? a: nqEkY~ƦLBE鱰n/\\bw
+^0$"-/ ~^+y!;/P[''yAL
+{C{e}mxSD֦ۼ՝جdf煝~i4GgKS/"(bַЖ$pL p@m8+\D}uP-b
+Ӗ3,/GyDE9v^~/ʨ*"҉߀^y*W%}}#^ vdxuI {
+Z0}
+n兲K&#b`%5wAD,$hnW X)54-Hg^e 6Ċ,h',p4mH dߍXAQCXxhĮ/>
+!fS WU7}/Oѿ
+u 9BX~/L4h6Ph_ @PK``^֚g,4 嚁b$皘 XIt$7f7^8n/kMm͉LsZ>Ph׸8踏Бp˯&>ٮ؋J~j5>UHF ,(8s5x4Xe`4N= l7G_]H&`ɖe09|V|H5/7&"%7 O>_6z [""|ozX,[5KEe=ֿ# YD}ܒ_m߾^IR`g^
+HցljY@ eriQHmJdE Åsx}d`0r^(k$iDu^eB\>d JS'xMq0"/w
+2$>MP9HY/h_ a^&2Ow]2H1,
+R )\q1 Fٰ72aDEb(*_3{v=mezjj7PBuV\Xjpr47ƛҀ .jK,JIS3Ʌ 98_gw1XZ͒3dAD?GX^K{2.ą*R5PQm>ucׁ@CI0+q0-jc
+H[EB:T#T~M`o(m~T7
+\j\ ֙T 4P(vWvJZݔ5cF3[B&L}#cXp}PQZNU񼗃2JoO% T;JKe|."_lBIgYS#z: c
+ r02ƛ5V"ڎG%Se@Ú6*gVtRiͅF-t'^
+.;!evdyvZy30̑MLG/u.'BBqUGх/fe6ebd5|lW+0AR7F!:{My27paQמ7]EL)a]9\bӍab 6j-Zϫ<GHI>8UE7SO \TՐc\$YTFϫ̅̅GPB5\ Ŷ)<wrwlZ)UB(UP&? 1t7JBE-o;ОW y)s1.mʴHȚĴt P<#<e5j!s! unj5&%2wzrV 93ˈkRTq^-{YEs p.P]Α~7VU5rs`r 9ؾ=n[B?qT#T}'rahS#MHGt{(d-uGO
+0Mǝ< >wX<a|KJڲS ӓ=L;w,.F?۟bŅ3~._Q\8^-F̅pa{󨩍d-d.< eT˩Zڬ̅'pSXB-s!k![BB̅l Y 2n-}
+endobj
+5697 0 obj <<
+/Length 105
+/Filter /FlateDecode
+>>
+stream
+x@
+endobj
+5691 0 obj <<
+/D [5689 0 R /XYZ 85.039 781.388 null]
>> endobj
-5324 0 obj <<
-/D [5321 0 R /XYZ 85.039 635.418 null]
+1546 0 obj <<
+/D [5689 0 R /XYZ 85.039 648.834 null]
>> endobj
-1498 0 obj <<
-/D [5321 0 R /XYZ 85.039 355.164 null]
+5692 0 obj <<
+/D [5689 0 R /XYZ 85.039 616.413 null]
>> endobj
-5327 0 obj <<
-/D [5321 0 R /XYZ 85.039 325.569 null]
+5693 0 obj <<
+/D [5689 0 R /XYZ 85.039 506.824 null]
>> endobj
-1502 0 obj <<
-/D [5321 0 R /XYZ 85.039 271.122 null]
+5694 0 obj <<
+/D [5689 0 R /XYZ 85.039 506.824 null]
>> endobj
-5328 0 obj <<
-/D [5321 0 R /XYZ 85.039 252.25 null]
+5695 0 obj <<
+/D [5689 0 R /XYZ 262.428 306.66 null]
>> endobj
-1506 0 obj <<
-/D [5321 0 R /XYZ 85.039 147.591 null]
+1550 0 obj <<
+/D [5689 0 R /XYZ 85.039 262.972 null]
>> endobj
-5329 0 obj <<
-/D [5321 0 R /XYZ 85.039 128.719 null]
+5696 0 obj <<
+/D [5689 0 R /XYZ 85.039 228.43 null]
>> endobj
-5320 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F14 2895 0 R >>
-/XObject << /Im1 3957 0 R >>
-/ProcSet [ /PDF /Text ]
+5688 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R /F66 4195 0 R /F62 4052 0 R >>
+/XObject << /Im24 5686 0 R >>
+/ProcSet [ /PDF /Text /ImageC /ImageI ]
>> endobj
-5334 0 obj <<
-/Length 3412
+5700 0 obj <<
+/Length 2214
/Filter /FlateDecode
>>
stream
-xZYoH~0aC1 L3ol䁖hTH*1~뫪!QN}꺫ZCiڎƉkIrܜ8w4U4(/'/uIOozz3-7gqX].\JF/^x]%xH|Z. O|Y|~}zY`>|蜮'Wj; 0_\ESY5sl/ITp*T5֪!/ /řk:-:pn7t+tmleVVhݔ:nVOǍY-
-~`G
-KPs9X %ASR .*z m +ʬc<EhXz3LqԶXvlǴOVΧك<w+Rf6_M]Hm ͱP-{ So;LוHL9ٜ
- t2e\R"XY P}+_#Mus|X[S9#w,jVA$h8dF@#SN՞21c{8@$c. ߐ7<Sa~H~%LSmC; Sx9-BcL1͉|1ŴF2J#j]
-;CK k1FڳV.7R8䟡9E@(1l.I.d3 QgIIev?!
-ɛL|%13֞ݭ)`SyZEcY*Lc7cohb[p AA5h776x3z+ we1\sطc/{ 5h:rO~|e ~t_pTisY =hinV4+M[(I$_R4XjRXAida!}gCo"?~5tN5cҺG J\%6ʥ0ޘۈ9m.pD2UsR ~@E]/Ar )zf6 W0SLIy'%}<ὊRZklCVMj:leN$卼;(.8J g&T'FM1jd1k>NH?JP)L…>3ؙ|Ve-a>RL :W2R y‰I]k aXM>WWDcGic)NF$ŭ@._ <2i nRmQZ@
-bC˫ۙq5;/tYk>,R@w0
-89DW۲ʃ30rl֚`}37LYE 5KUkKJɣMV&gC>n29TH7w>*# m6OB 1/CrNJgG_u"M+8gF{"{A.9$oa #5ʻh;UiyE&y+=nͷ(v;f{"aD <;W^yZ՚/sVcu}fnBJ(FQyp(f2+{ wJfm7sp/#ߨ<
-!~C~P
-RWC^FY$C 7S5 lrBݲ\D,N x<
-Zs9K!>.I0k}($gr*&$j° |'4h /Kn8K<bC&H\cSؼmSJqLIcrL.u>XZXhszgOԂ֢`OϛDu
-z.*FF(
-mϧFY 0uڰ-'Y}C"t/e۽ܓStLBA[;WuzRiىo ?#&qyoAcendstream
+xڥX[۶~RRnC6v' He[l9̅>Ap83ǡ'PHzqN/N_'r,lbmyJTb5 X~߼{}tU*8N7`b~+ |?M`ݰ^L 9mˢJ̯O#6Bc),o'`j0o/׌ǻ.yq) 8WUO3uқ)Y_DBT(fdz"Dwda( L-o˼RH 4 \D/$#C1:J"&toe6aQEޖCS@$ʠ-ުp-JD7xjlAl p9S㎴A] tqܔ@0Z i:P~ P [%Eûsy*It2xd
+2OCg]݅JFvfr` Y#um_9
+ j<D<*t[pȧAFk|
+#j5Ā)aȬ @ %?dRa)-:梱]͔rK#Pk޵*и}-7a:9Qf@]mqw~#pTvʶWUu`q ̯\u eF8|`J-"KeHszC)26n
+,
+K=⹊MZǀMtwh<RC4 bJ<nޕ
+l8!`b>|WlǓ.2eo0ELlmmf kH*f?OK$֍ռ).T# ow +NZwM`\+Zp1h ';`WF(mnC7j|kH%Խ nU|'J<¸i<8]Q q%u‘KYڇ EOu$}Y+bn{~yo(<G/z%R_Kq qWx *臻f$~++orkDvcV(f!
+Ό'{)M!]GŒiE42_,ypR>N4 F<ݼ?WuU;P}WRZ;E$nj& jh y\?i]dwyk
+E/usL/-=j{cアk6aOtA?n(|pF>ȳ|^
+d;1e(/cmq*V}J^ݠYBU*D#n-T5}`5VNV^v-i,'8sgW-umQ|Ocwz1t4G^pf ݹJcY#Cѡ7`#hI@}2x7 ES7%r&*~3+jY1(.qѻM}iPaIU>g?9gY8%ȲOyD+~һ?Ly'-+MyY 9'[-- (g #NDsendstream
endobj
-5333 0 obj <<
+5699 0 obj <<
/Type /Page
-/Contents 5334 0 R
-/Resources 5332 0 R
+/Contents 5700 0 R
+/Resources 5698 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5300 0 R
+/Parent 5707 0 R
>> endobj
-5335 0 obj <<
-/D [5333 0 R /XYZ 85.039 781.388 null]
+5687 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 780
+/Height 299
+/BitsPerComponent 8
+/ColorSpace [/Indexed /DeviceRGB 31 5708 0 R]
+/Length 23606
+/Filter /FlateDecode
+>>
+stream
+x]b( c0'_4It;O:mzL w11`A9'k$_YG{r'ǻ<UeXh޶3<caWaa>D>g /p` ^8p`^8p ^8p`  yV0Y_]^1k,cQ*"ML[V)gו˷ԗxҮ^!0:Wx.Bյc}'RD '+OC;uIyglta.^4wpŸB뼐Xg*q`iinS|{.NLOBY@ؕ"B d=-Xs‡MIҝ׬^yM@tŰKX7)4tltyX nl{h[>5A e5Y2]F<
+O9,4n+U./_E/FuDcq;Ag"=u)woh6NQFt~ xŹ ÉHgk7 Լ>d?ٰ}m RkRixWvKͺN0mXC"˃rV^@'4S EM_BOjџ=m’Ss jٌ$sBzm
+T'f}%3| /IEgTۣ(`2۠: Xa,\ fn7
+ kU˥//XF̞˷qPiƍ>XhXWm;&^%*$/ ^0`”?/\9l-te^b^;oW d1蝗}, t߶^0DOB\ & 7Y# eԚ2Q ]!dW1=g4g,X<>>r qE[J
+
+j[mh,C
+c*s[sG5xYdf% F.~J9կp>^ 
+ħ£twW^g6;z{W_mo`aEkVJXb-ZJupOoUI.]s%beU.V<:P:._> ޫTfe";yN %=cŸ(pYf߰0vʵn(
+tPt6v@ϛXgI0deҤ:=P0fÂE,@Ah sXf9n\Vփoބ<,x~@ ޅ).p 7Pg,D-`E#N> xrvWT5`>l![
+vι> #U"9x!߰qXH\ IDYL5A;P6)Xp9e{ ;Ƞ'5%l« ߟvi< T !(AG:cAv,hv߰SM+zt†9u$ RL oB|iIXX0Iq
+HO%p_ߎHЭEo^BDXx(/㓛v<C$hei)֋l8h~<^l?'>EK4` 1lJҖ5:Sг8$RMvy¢<ן%Nj =Vk%9vu[g>p>hy,A^Xkc.d fWa E[&iR%3A%Mp.$sk؀$ EC3eL*,|T&j͇p*!QJ7d,$Q.zlā
+c\+᪨K10V^f08Yt p9F@';(N@gB Ji:i^M'/=~ fo9ɼWTӵ+EXjP]1dhVV 6,KlO ZW_cX ު\%> qBhYoY%t+Bkxg!l
+gٱ QX i4";=4CCc?V~'``oAd)C, ?wEX`!u6Ao!ҕ,,Q(Y6It`᳼pJ;V|Q> _N>%o}VopM幜#p6?ztLe
+z8G"`Yn1-`;;^;/8VUa6X$`A9<)偅Bu붊$#F+(=]g145 (2<1 ik$`aҸkWEڷusCap$)w$Y"#&5LT} p~cg¨ mTq eD̀gYSk6Le.Yquط?nEk~`s1RGcK)և,"cc40ewr^XhL*0n PcxztpJ;7Wp8lNM lQ^Ya 2Opںs )0@X%X%)@HK<쳧M49W):(iP~W٠0v8
+ݱ
+u] Ȩԝc%^xaBz1(/5kKȬe_ԟ\Kq\(F}KIdrjil*rBN{Ŗǰ"/̎~]ϗO8N<_ 2<*M`g^6a|'֥,>%?%b
+VSLXx(/'; 9a苃5}'3NjL~rC&..4N'a6B f2:Q]Qt0</.>ÿ < &q|S5TY&]F'xEUd S4h
+?̑蕚`N}y048cq6c=YF~zv]w\\BIB,HtՀ됑52! JPX4A+5`}f_R) f?;8/hy!\08G`W]bS`_dy8֨.@NBh#.gU,ǂXx$%&r ԏƘ⅀l :=;HaskL40a XB4*BKt$6&f,|{b?
+묾
+ߟ.qm`g=[iycoeKy^಴[2x629\y VID^\PKݘ-nAٯZ'jToybB&;ˮJ+=@ny*om+K5b퇥  <P/i7L[M+6ح|Vʩ+|۪ /^I/ㅔeW2Go?"I H%G5+C,h/ج,
+k<\ft]W4k/FQmCs9^0l<c!dBMߌu֔0zH\:F*ҩʨS,^:wKg. /xbxa:dJh x(VVkkSe|4QLJI0T
+0
+۶CUr8baܱ 5WIH*yS!h ԕ_^ S +,ح/;DeX5v#yᄅ/VQzye%Vl۵9,/;/e@J窪  VDD*lX\~Vr&SGS2xdxI]N* <A^{٤VH@^p[$9b*GtK-A3IK,]hYy XXWbA^
+5j*K*֊Of&!,6ݚ?"ǖx~׽!5&^q'5EHdÿ SY":.uVr6Umm~ּ$RZR͆L_! 텠 }GyX涝/ljq-N@뵚AwyxX^(ĉf)P΢ :,vh>CW»MT\R?^ֺ(2O| ^x8RGޢ"Ky~+^@$ ,|,u mIW#~|89M܆MGzE 7qd)[z`ރuO?yt58cx'Jb_HJR<Įք;΃J[<8BqveNz™!/bz{xC6Z-ZrI х1ܰ{ۇw"`h`ra=Ag$OVA.̱Tέ zY+M] #Yɉ'd}s</xb~6/ L/Ӽ,.xez[A%su/Y9 d.??aWБf 8(ujU1i"߉r/7ý0`jL[ly'ET^]&.dyA0M`Y^F-pN{^g-셷sD&yhIPW$zmжqX b~h\ۡ{yA 3_~Ͳ8EQQqQ=͞ R:Yl'y=~
+ @,tLQ{f<gj.CHP+r"aΤhcܔEI#WP}$U_nY賸RoT6ypM[7(^59^BEpdI1J+M1?\[ϗDa<0Ao~w<o!PBuC#XG5FaPB^kظi%?=?ynt}Y^BOBncęSpvHh/euN_ T RE9pS3KTRZyav} עl)M^h sbp^5 xL6I-rEC5y0WR]a~^XM ^ -@s.
+D$̷ QXfq}M)z^hOSj}(3N{+j.4:@Ba= dG\*$dύaDvؽf{%)M煗B$>w#I2KOA
+m `W,[. _OϘ_x1e߯rmx^(cO/Ju.|~B~j03*ِKaq
+e)
+V鈲0)'^ DzéYoR IҞ^ɮ#yܴqgxᥦ-)1/\ Ka@AÎv}w(XU$n1M? ~M_F[)^07,/Ֆ +ۀM<a] -b!_, UG~/ y(9mx\EX{ύې(}3b1} ľzob>baXT>(v,m7T$mtyA4%egБt~9t~r\Zܸ>'1ĽJ2JE̓o崨B&jG;p6\q 81yM|O<Y
+/Psky*hCFBCcp |m/ȳݱQl䅳 ^ M*tbVsD*~8~㬱)jR
+E 5~bM[+r6|䠄‡yW0S=DUZX6pzg;ftKrQTj%Y45b-[0_)SZ߿‰OB+tjԒ% PN)J;`YTH /C"3beind6d8mɲPQn5գu'b@yJ~ Al ,#|
+ g0] cZm[2_4`i+,DgNZկ, 7{X^8ɯ1TVuJ8 OO~/WyeignːǷڏoIp+u%vROGxEcDM$H S]xnbAwng!q)<.ЅƞJtٰ :eE^0t'/%>6|?/A,t!b̯R,bp?drkE_ 
+3J2!ISϚ_pzŅ
+>6_ &XX1(gǂQhMr"dxvl()^8H eKtov^и/\ԲW\c;~BO%jl V"NsBR/Z3Ήzק[& -g؂ hM+M4&M]\HYFBTK;*=St|)T^j NX[
+d.MkV Ow'ЏJ
+DCt覝aJTBеҽbz\PfUyzU!0b+,,8'-:W/D1
+y Y^a>1\H2vCxX?R~W``T$'SKپFewƂq(a0V6X8vb| /`ްO;GX[yR_k/<ջ2eR85K˲Th ƉB E-m #3~0Z9^؃9G<о zx[~ȅn} Vd%@cmDsŘ\d7 :9cyB?[f/JY,dUXqmǂ̙P"Or!D_!'΄wGD
+q ޤ鍼aʷFG-:]p'/h6"S_Zԩvo׬'yA'uK62h+t}@芈xx?RYs+5V^
+uaHaK|"x012a! c0:[<ZsVj$s5'p\nu\elV̟
+H<nnAH*R &?yA
++x'%TGYe- O爾Л$d*'urrz% ,{!ueg<P#pv!ì;H)
+)ˆj ^(
+G<1<xjOJl( kcq;xa?r[&
+ "F-."^6;![Bn\ZyH"#_r"CHlE9s!&?3Tʲ,d7 Ra$i(Yz +5O iyŽi4q15>8i= 7)3EkƲ/O='\ƿ[bJG#;Qi{,}my{lt 4Ljvh7@gO ^uXo½HæM~]gO j~ V,`o<`aB)93xU&tBTό#K,9~O^ㅧ?^OQ2͙H8u e-%C>&d$ z|{yv5 zF h~V6E*-0|ύGJk?{Ţb Y[$^eL3qfv_x:/̡M`kSeܕtQEwԁ胀 >* NW#I~'6 8t :U1QVNmR}
+܃2PD|6v]V%nچY`Qun? 82\lF~mSoVBй7ͫjNKx3e۸3i]T*u(b%",m[M3 )]bGχ=xJM4ą$z^h֕7E =.wIꂳ\:RQV^*^DF^تtyA ,,l{`je96V]1z煸 bNj&Ukډ*ʋERrr7}wy7KΣ ,2ht$Nsvх*ebH\Bc+~Nj Ƶ\cP D7Bxb 䛱``Zn?[rYQ+{0EeS)&ꟴ|ȫ݄fd;} ^x *.`) 6L6ȺӦL|Ib*l QX rI{. Tb&
+%H];
+Ms5"c +B? [e[0])Xp1lSXGeKuOᡗoq~m޾a”n%{kx_^{4+E0Xf ҼL|*rJƋO#[
+ɟQA/mx) 3`
+ѷŠPٲ, &S%srd3d#fRISf1eOqM{(]It* #H\]8f:
+%[E
+WR@8*p7g5,w+tK儏C%r찴y .(M
+#EM ^F@9t 䞁A '$]1D
+ȷA /|#^1_1U8 ~,dkYj`a~t4MDx{gBDK7Q T&nA Ο$N)VV͠S#xnnOmo\^`jvN
+?eRGBE.&BzREk%Lp|8a/,^~N;8OL
+x~g,|/d B)
+0ߔ-.:,] VGVBF 5X"^Ȥ + NK%(4X`?/XX9 ՕN1%үy0ßCپa.
+m痍k{aKxE,gtsC:UɄA~Ɇ䅵|I5H<z&.51_7T6Ħq~o BucL?uq$v qBh~an~Az|c,%{~aA1_c[/4W^+/ULGZ^KKswu<9xSZ^KNX C! 5|[+Om׌xAip,p·^Qd>Zv>r>x wve23AXK 咘ޑVv\=>,p ߙ8dqc+vE+OuB9:sqZp ߙZxtIerd7<zqb2k`у{//JdպS*N,prKU+VJI^H* .j`
+
+WSֻ :=+DQfgs$d`ۺ"O'7M@%z0EτB.30,@5Ѓm2}o.}0*&$p
+Ʉ ^gjꕛ9
+
+0V7=w֖W /Oyiac
+ZCp L}< ow-O:\.ZyUuLK޲.k&M\1Iް60a4P;"#/`$U\Ǖ[!<i1W&d}r_W3;M&Q.~rxMqaHtf
+eE5tt j OzF n&;>@ u1;vsVЅe\Bmï#-DY"l+).@"ʹq2Q ,B>\3-/0&eʺFQ^AAalq /Ņ_8Zl>k!WB9 m_IE.\Ȱ
+pVv¤.X/_qp>zJBč1Sq;</
+v s8-h63?_q\/wΙ0@E\K'.
+<;OdBz-tҔߠ>w.}꛹н=PcLd %$_RpK
+ oG:ITS=i#jj{n11\4~!q5P[c(]q\Y ią!yvTݵZH\H\xM.Ta̵o04njvn S5llmuP}B
+Ƭf=JikL2^B͜I:j%\>ԌZYU
+EB#ZH\H\xU.X"3ɱHc0"~ `:261'<-N7ocB+B@f BBCbeh wR //Q608b
+\mجڋA4^nWji\/CKyx# Zi:`rmΈ޶.p8dAkKݘy47SmR ^TG7><d
+h.C ksέ~~>R@JW ~#GzQqmoG<sЫ˪=X;?0{fmy6Ͽs -^
+.d~,G\Hn\HZx_ąC 7p8?h )^8@ -q!q!i] I I I I )^HZH\H\HZH\HZHZH\HZHZH\HBBBBBBBBkh9wOx97ӂmj?7v 3꿙Rݠ}#-XR}U uF{endstream
+endobj
+5708 0 obj <<
+/Length 107
+/Filter /FlateDecode
+>>
+stream
+x`
+endobj
+5701 0 obj <<
+/D [5699 0 R /XYZ 85.039 781.388 null]
>> endobj
-1510 0 obj <<
-/D [5333 0 R /XYZ 85.039 721.69 null]
+5702 0 obj <<
+/D [5699 0 R /XYZ 85.039 758.673 null]
>> endobj
-5336 0 obj <<
-/D [5333 0 R /XYZ 85.039 700.697 null]
+5703 0 obj <<
+/D [5699 0 R /XYZ 85.039 758.673 null]
>> endobj
-1514 0 obj <<
-/D [5333 0 R /XYZ 85.039 587.292 null]
+5704 0 obj <<
+/D [5699 0 R /XYZ 261.943 558.51 null]
>> endobj
-5337 0 obj <<
-/D [5333 0 R /XYZ 85.039 539.158 null]
+1554 0 obj <<
+/D [5699 0 R /XYZ 85.039 508.568 null]
>> endobj
-1518 0 obj <<
-/D [5333 0 R /XYZ 85.039 471.161 null]
+5705 0 obj <<
+/D [5699 0 R /XYZ 85.039 465.286 null]
>> endobj
-5338 0 obj <<
-/D [5333 0 R /XYZ 85.039 449.301 null]
+1558 0 obj <<
+/D [5699 0 R /XYZ 85.039 397.29 null]
>> endobj
-1522 0 obj <<
-/D [5333 0 R /XYZ 85.039 164.907 null]
+5706 0 obj <<
+/D [5699 0 R /XYZ 85.039 361.88 null]
>> endobj
-5339 0 obj <<
-/D [5333 0 R /XYZ 85.039 144.317 null]
+5698 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F41 2998 0 R >>
+/XObject << /Im25 5687 0 R >>
+/ProcSet [ /PDF /Text /ImageC /ImageI ]
>> endobj
-5332 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R /F14 2895 0 R /F35 2880 0 R >>
-/ProcSet [ /PDF /Text ]
+5712 0 obj <<
+/Length 2350
+/Filter /FlateDecode
+>>
+stream
+xڥXKo8W}X@f1Lgz6 t7zJmYrD)~AJ2"Y
+xK0e&C
+BB-Hxǂ A9@UliHeB2#u̳ ]V
+TVGP
+{Ʃ0ow& ~;jQlGǚSmѢj{UԼqN
+b >(/7,-h٭# =.PFh5`
+b@p5.)w.y8&S7yQnڦ{z<
+MFQa||FM9wھvrG6 kAiE7ksJ65abrY t+;A"^Q_n*
+B?Mqn ߲߳o'4O2!moε@|ԆrW6&΁GUF#<,;iJ8aG}@(K`&tɮrB
+ShA,u}4WP/ zޯ)crY|w Og7?!OII65j-kgk|c $TInQ
+'M/UPE]ޘ—|>|a{>tM@ʭiLo^mlO6[`t :_+jip׆|}ĸ_0=f&i2/N9^lԮxjxLdYWn_tɟ4mf
+Ze&+W&7 ig1pʬ1s\]mŤа#4޲H1pq?0qMJWi Vw86JgjQ RL'XP N`(%tN|Sy73(endstream
+endobj
+5711 0 obj <<
+/Type /Page
+/Contents 5712 0 R
+/Resources 5710 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5707 0 R
>> endobj
-5342 0 obj <<
-/Length 3684
+5709 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 780
+/Height 425
+/BitsPerComponent 8
+/ColorSpace [/Indexed /DeviceRGB 31 5719 0 R]
+/Length 23871
+/Filter /FlateDecode
+>>
+stream
+x]b(EAQA|?;&}>4mӬ$Mp Ì{da+momoMb{6`o{ۉao{{N JBk~ 7lkWR}mY{VT -67ko߫^Q}E|{ {涌 ˎ}{;d wş {ŐB}اi {ƛXH,}h4cviIQB)1®>B`BmX(l ;/PlHTa {7psnµm {Vb8S߿[,zaoچxXPQTvqw~s)9J@ޮlݟ_D b)|\BwYR˗|u>U[.n3p4/$ XkC^Ļ
+ OKiy)mXȗE&C4XP
+wx??? am8}YE~} cc4ǐ ;/2/煍/ۼX(>r ;/z;˼GBa ;/y/0za0<<Nɴ녝>xza/HItV}=x?m }WJx U-¦eՆ(d6)vװPmNb=xt.t{qǷd{eά}9rslBJsfXM H"G~B JO=ejc!1J k֨4؊oӜ3?XBW/~.#.˳C]w͸$|Uy',` ,a ?%. uێPH_(VS}ؤwͰTj:v zUN&庤(6>Z
+Ӱ^׭GRV/oVի][.̓`#uaX9}4E:{>#.PY/|(DE| څ8z8DmW&=yF
+ azc_~#N2so֛VA]52߳gHL>tYOWEۋ c4QF ]͢ʍ6,lḭu~ޱe^ p:0*{ >JBօOj,H]T:&ͧU 2,)<vG]ӓo'WWK|s5w$ZǦ$&yQ}c~F
+X{=c2=oRdU5QNz\79C8pU QcgW,23·*yXoă–+'8
+FkPc>Y9.j8`ZZN̍k[jDw+PaUPva^R;vdY%lUjK߯tQsCBhpR u]._zX0 d՝y9#;\s?ƥN+ Nl5NGR:ݭ;+0T g'`O"Vn> q^t Jcaa_HNүn
+5:i!9zOrΈ~*-.Ҫ xJ\/BׯL[+
+Nս@K.!Gj#"spꨳ8 [`k3e`)ѵ1M:vn2*YSeTq{,$a6Rm.q}*3~RzHj#RZz*dS41W`PR"x&ayKTh8.TJ04jIZ|
+uծXP*Ř<JL"8Hk9Pz͒`Tx" @/mXA](m1f=rHX wf,5G~+jWzTICOJ8'<XHee+<6=@=V>q>Z{mV6աXN.jm' :"/
+X,͔.Se~I[
+{A [̜N6`w0\-Jvee]R`v
+Xȃ!6w 28J#yj
+j}rG,T5ІiG4B&w~8A&f
+9b!Q1
+[2't=q.;baQ3 M_&ވ_
+;1 |yx"X@ @
+m$%<|<,\4u7)ui.j>_^HXykQ hR@Fy#PI#jt6@,$RQK+UnB, nuba_p=jB8C.`x! 0H 8a9C?Je *,^snڡ8a싅}µH r~:Vb@X
+_ފ0v*ʗrXzD)b@@w#,NV;{l'ߵORit10'=;mbf,e
+>M5kЎ;-&)]/Hwv_ ;vp[7]/<./}6^1طdβP+ٞl'5zvo =QN2q73A9ν8MüQURb`W9Iם-/>^녽}/|D,]*&NmfC찥ڒ F%r͞Q)&GM豵l |İc zaofcj]
+_E[:À(QJSՊ5Av,:Ў1~(Z,
+#AoN1f8 ~>#8'u`&n] $1bפ`ѹڌ!*ǥrZ-GpQǂO&W*1-/5^B=?HI bKH0W^Q,`Ҽԑn[B:r\ g13 Xv!o {#?R
+=w2J*#rGNUk֩8c8V XX{, Ѧ^"QKMyI\z
+]4eX?3St)\(? 錆t?VnԀ[Vqp^HohOgW2 0Ώı^°L]v[Bm4%.g& 7.l.M,F:q7֢ſ F 0;`g@"D5cMm> oꅌ*n=%sZz5{G{ 3*LdD fYm8m`LÆ:l͸Zܺ3穝8?i nMpÞ_Z߰ vS. ذؙLQ@ww! \MS_Ttazz*:ލߝ
+ONMp oҟzaue /BItkӹe,6 cd117R#X~ cK\KYW.>:^H0,imv߲>y58Cs*^Ի1u,nm
+N 'UMG)<旱@0IG륂o GhKWש^ד9T=vI_XeyZ{m$.煒kT[iw&v(ʥF^X\,[蜶{zWȌɹ6/0)OX@;~~8sڛXMȪ8^|)KOhY7⣛.KS F3ˤvT];wA/',^d
+|@ vx>Ly(n7)>v0QrLז,^u=~`O :F
+9H.R"fL2*(#kg"qyz!S +|blg7 |`Ssv缞/e:g~u0
+bu*΅\sB13b,UykObtf{PeX 43t);)R5aa}'{РfO]PoQْPuJDz4/ [:yA,jK ~uM
+{/(.\UWsj^{f|}蒈Ž0GD  xZQ|'/v 8mf}(U0#EmN'S:z8kү`˼
+ z@R.R;c<ro\ ȡouJ"𢐤2CTOYg!4(q_\v[JYx5ߤg`%GU17ða<,0hX`GUUMUM~ &ʲ,$Vt$c&
+y&ջ?_/HVˠFJYRKix:c 2ɷhR۝\7ҹ,ps:^`"81Jw#ZSVpUg)yקzo a;l?vk(yK]x,/`2^+Фr:&2.Us99mkxAP>V29<K$d_&f5ЅKBPћVHad<&,/dIJWzy9u;5֮jU?)WN.#`!s_Y4\x\|p,J me|DRL\2/#Sy,DΕkH+/@V!uҚ"\(U_țw#^(w⓿țƾͷ8XPF}go[؜<
+ka9' 7+ㅒf
+/O]W3@0Z'IW\Lo[˿W#:+O>O &suoY e. ZIR0
+==.s$s|ҸcoO4cXvU<Rz \N^ =9;Idu<._OuؤfT?
+.џ6Uo_zI Frsd4$Qct-QOY~$m÷ix§ֺjQX0P:4H[ jUкXy)5׍c s xaޞMlebw<SX7x^m?JC D"\ŏ H @
+CJ`<nV1FhutU JFWeG*ZҪ帮rK5*WA:6eQRc#"ؘT'Uڑgsz}<BPטg5/Kּʹ> BfCB(5äU&|ĂIh3jՙJaﱑUO
+:p,M
+>\W;9-Ϻr e^O9Uox!0lR@FXi,92^ae3CߑXcIU^‹l].:l~I"0E^,|,˹3eyo﷌|bTB iæl"Ӳ1JEoֆCXqB?.Hir(ݻ20NR'cUkK:]
+
+>_^@iQ/FƾI$JIeUViGޝq
+f[!GxXؾJ>@oy|ljY;ADži/hzVY W•[TE#7/{}C  njoi ȑSJQJRBϥҀ`{蔕
+=
+:W5ǚTPsnn
+hJGE"Tp%*:ee*Z l7 iwd>(hsټf5jq}GtDka}m\l޿)b60:[TLsNUE%o]Dd. HDrg{8JGTF޵jвe!Ke Bq` GH;96~yL,#õB#yWaZA,f]#Lض3` Lk@g,%HC{QQ;o#/l<$[IF
+?G?a&1.R1֔I&4IU *R?Y^Hз<U<-i3||8 w~A,U"9F^`b1:cU-e¸6 b)q9
+U5V6Kx;V\HiDY, Ckt,T "VF:"mȔE{y֨H/,8(Zw T bn59֩'"kL:~ zEG ԷjpY4+De5ẑF|qÿSW5xk";Cav^yAKC! R-r5LrTKe"HƩX]=C[` :d|U$j=;W[eaT:W'qTZ碸lAGTnXx^y!3FE8f-]+/Xĺ ϏTKc_cp^@,I3  Ny4&[
+c}UͲmۺ?BWQY Jϔfh`Y$I',jfj%UQ0:n8]oONHk.ڧR)<v>I{0 T%>(&SpB^A"; wOOǩz <  2-ibb9;(² G*yqⓔ/m!,dJ(F2BA=ux
+M'$Xx mR!f'ov䔀t
+9z?( ;/?RMj L<A˧y;X<}H2NU1tuMd H~13pœJ"x+g<  6sybP{ NVEŸ \uKhuv10+U"ʎrǵV)%!6_s" r&l$٤$)3MTw]/!?R+7(դ, "ͳ.Nƌ\4Fk}f "b,N+4&[Ҹc Z&ND.Ruj.Y,4 Z:Մi-u
+sRF|
+$iD1:V <it ;/)<_Ŧ6"Te/Vk2
+yd,pz!|䥍4AtYↀ9(gP fLQ"jX.FM ^#~$itC`T%l兑ki@ϒٖ3>vxWҨ6[Kw/BqZ)_ĐBm1U-n*1m
+GhxK>BU~]/ ?R6鞯,tCHm[S*LxIcLQ7ez䑱½>\xC+[ƫ]=vyH9H@FŮ~_f g,\xoW_θ4N[5'\~}Q;fne;/=/AX wG2G Fyxd,p~ɅpB?
+bjv^%?|r_}y煝BY{)\>4v^g?RCca{CaAXyHg?c#w^yWHi5;/pTKv];zargfip~$rbwεkynyA|-8%v^yH[ GJ,={Oɮw^x`?ξT/#£"Ϯѽ_ys ;/}?ٓ p>Ï/dXyNy!dT~F. _u %G)ǩ~$wy~ &;ϕxd,pzg| wG:~jcy.y~;/ܣIKL_w^y?ҙkO˟Iяtarv>мE9r煝EgKj  wG ,o;PF W"<𧇷6䯶~ͳ/X-,pPKvَ8CC yY
+bQ%w:0`1[Oa(ǝC/. ;/|͏4 H鲬[fe]IQ&rPyRr%]]feM[S^&Z.uMZVIYZZذnI,e~C _#\mLK]|VmC֧mW Чʛ?ΏUwl,iƂ^&1k[v^C?RM, Xm w 8\L/N򏃅_`ӟЏ$aӋF ;/|/əXxFHXd3/j.ł5//$wuͲZ, p8]Df.#]/`!yF / 0Mcr%v^/dqJKx*~2"5<ԼlxN'>eWba(1tNژ^Qm\>J_G)zz g| ;/܈{O3"Mc<1
+wx,$8T-yda^LMk4A,>F"*y,眳+xa@_f: /ꄅ
+_9Uc!4txyXpF(<=le?X܀=f.LQKHb񂅟+|ޔ{z>r]5T)WP/-zvV8WEYlt4zvbGP/X&(5hdϯB#:U%qmр7s^q?1
+|qxaN<]#Ruצ)ezˏʧʍE"p-p{?1 `=PGZ|~O8?ۣ*-YBbcah kUcGy1_4ƱߙwⅳPO|u5-I|N AuFzt^KT[PHKŠv{6ҋgru;J-'7%y^îv^8FfUH^眏|/^t9 WI.uN ?^H#yXx5\;RT?UiԠK_7oS,΃aXPۍjUH*뀅J\G²uXO^av^?'U XHU[/#a>y! GHJ/R(f^)~j#]Ony7T˲M/`6ڤba*©Ixz
+Q'x Wa^yv!.yGB^@>.V]`^y
+İK/X_H82Џ7 w O y/$3^>Kf}gcH {<%6XXX_^x<?/=N,xq9J3w^y`ˬ ;/O>յU_;慧ZUJRNK#z6W9F W;k^x]c!S1cA&vhߪwg23ҾBq%l].p߼椅X_.]
+2v@5,ʘ;GGOQt }ęvYvss1&k /$T-sɵDzDVrVN2j]H BNp ̏@X#OF̢aLАdq4BY: W/rub,<`a-g֝# M/`.]&># 6w9HHC'_oER,ki8٤5U(j]zpM/}xI)Ů|hIʨIV*E{8$V,uzM9
+^ES B~m|v;p4XTৢZ<8gi@YVp&Ej5/ZUҷm_MzSϏ-`a;#z6a}^02m+❎IpPTsՔƕSxbn .b~';/ܭ)m /v5jA4p+{z弁]:Z"ަR^(YrOMWj_):f14 ;/ܥ^%e;> 6& b!2+oƔVr
+\js z!$4F酉gvFjw pkh`:Rq_C^/,
+`!, {1 ^0H>yFGZ3n[gRTU cS/rbaP-[ *)´WmQ$:ʮǸ+o/5Ǡ4_@^
+,p~$b@.춍7>U/of^R*β=p9 Sr ^H.0}txah9^m6h2m1!5Oڪ ;/ܩ4×Ʃ&y4.xq慟k;/7/gaZ$B,/0v^W?ABY8-zya煻#\,\ RQ2+5hya_#.̰ҴLZ {Aʝv^p~K&,{k/;/~$ ЫBr 1 n ;//b^` Fya#)eוl3ya_#9 BY2Y뢨/;/;~ss
+][0Yx|n!ɠxx~1ԗtya{ [sC
+aDoy=ͥiwӭ1nj1T<E3>U/t0v\@.<Θ/\
+]w[}ow39i(§r
+΂`;.2*qΥkBuaoyMyz/]lYشlYOD0owNq~YuQg{בNɢmzUtis] х 6y0D=DsPG Li[:J<RʺGc{\{/4Mŝ ? Y`irF<97$^{!+il^ycOx gڧ6RRUF]EcF\îˁHwHߎ 9Dyh)l ^Ho>9paSppV*#<߽Ml 2gy6&]U#9[fn/0M=u搼`*%7F. }:<Z)n x|BL^.l^qB
+H1B
+*ERinDa\t_:?:%K*H޷L6_8l\S\k NMR˿Eӂ(^-b鳹`|ʐ~<LB:ڦVTƅ8 UWFmOc&g= ?vW3UϰGؗ1,[ԑp ^OWsCuBrb𒧟y!$''-iݹ0{#UjK1x ?B"̥ &<YEKd !2"j]& bTeZ˙t(\7*=OYJLcX+/(krVH(Xb%\xr* b֝29z4*G*:NM!3O˴~\Mb鳹po}{.t LѺ8 lRJH~ֵ:p!vyzJ.:/ܓ RzDž(/T`H^hl9UreK6xHwB^{O7 p%|v΅H::Ȳ!N SCBJPy\x.dp9κiكSI]ZTBY(Sm̦~ҬFiB:ddz VSЉs@.d ZeB,^)qkEIEdM\OZ#=\$tښt6h'Rg@Etp m\Nir0˅idfM4)gAU)姘1n5]炳7 |"Xw) t\nrڜ2!5* 6P[ )Ӷn]hz[|pu\5c,B~s.X;_zG%!lnTkS骣\pO4uy4cb e\sJer! { ) rV)6okJ8\`
+Ihrhu&!}l>y^Wc2u3tx5m9|l x_//P#75(z G#uT0ޜ U'X#"pAA*yAFʩIq~#6֞Rؿ\\8<܁F{l^6 3@bBu^o9?vjtP?)&a@v{#=uv}]U
+.~IGPEXL)|pUqΩu/8rJH7^{w1MܒǑR;,D XNz{)v\:ҹi}8.9>6>ݗ\4 :l{n<ix?p(~?.`*p쒃{ug,4_{t!opa(% ? ų}<^腳#5c7H(gE1^q\@.` \:rru$r\@.` \:ru$rrHr\:ru$rH ֑ ąE. > W\[W^F2XG\Xrϟm~keHGqT0LŇX=z)ػȅą.~&BE}DY{:!Pʅ; z:ru$rsy\@/  o? r\x XGB. "֑ #
+݌ W䂮gŪo>q\@]y;r^ sRoLQ
+\@ (rB.P
+B!P(
+\@ (rB.P
+B!P(
+\@ 1C/?,zu_9RDz<endstream
+endobj
+5719 0 obj <<
+/Length 107
/Filter /FlateDecode
>>
stream
-xZ[oF~0Ԣə-}J6nj-hTI*~mD' /3
-/ /tv]ysʈAa7w2 ,.hW?^}Xj0$IWW{ǭ7w7of1ޯT{w<v~7/`MN45돋_.p/_g#?̲݅-ſ*g.yFžJ?MBPowe蕋JOm˅miSBzktmAW^\|ֶf˂yChlvAE\eW"!' aallYqg=V rz.]:.xNBvy8 h=7z Whc U+c[_ĕ)Dã[x2dUd|Uch߂ o"xvX;.W7 HF^\AQaö|'m\e(jW\{›^mXjJ9$u(-W܀BXоX=f̾#i!8. [ 1[[+ a8 mKQ!:5qXcvѮAC eVXxDEf/Ň~yAdⳉJ LB, eQD
-SJ
-H_.A2g00tJA񵉧
- u
-C{taC`9>q[a30]0<i'^8:65cz>t L 2] łt0IbSZh[$}U'J}*#v? ֹȑhq떙hknGž e]~
-q-XoC6y wSUnʇdoqzPq
-& 8-.o3~@o]} : UdВAɹmEH*Ԉaء`*a. X2p[Ũb52~í&Q=kj{h`DG:5ӜJ/mIDv{vM C3CvsSŖ'
-XWMƋ.؛gBnLk1?$^qv=#D/J.Dp32Fbũ/ukKݒu qؑ)lC
-GP$G
-dCv.gKYx"C<|Q26.'n/nSeG5=\`s BA@D7"7T^.o-Tg_QeILZm]C']\-r`D÷{$g[$n֡R{l?b[3푋Y(*^Mb•imFС h8 <,oT
- ^5%U:7>CE`16nw\fWZT-b}.|n\Y 2sMir
-x 3t #=ðq}]E^#~ t>- %P&pmrW-j
- yJh4ppTYtcL09?À[Ɵs_/3@ &}uX g0v
-"WS6V*|O1Ų98oJjWҁ8gAA[дqY8埢NTDz{({F'rc-$Hl.Z|-f:X1w
-)sB5 yb'h:I=Y6]ae8AQU/ M^c8⤡IåR.eYu)#r<`#7P4I3+$+.řެ9a ] a(2ѣq )AO#~7(JS>NyO)Owa!Mn2tw\ `]IDj35皶sAۂt\$:o
-"_w,_=zAllX.V
-a֚Sz!SY6>8-}'[)PwUM3NpEЈ #?C30yrᆣOL}-le Ɋg
-0F49ʟɸ+'*ѷ?}bfIPOOuD\ x4j>z Op?m9ŀ?ұ~-Vr{WrC# J lG}_8'U
+x`
endobj
-5341 0 obj <<
+5713 0 obj <<
+/D [5711 0 R /XYZ 85.039 781.388 null]
+>> endobj
+5714 0 obj <<
+/D [5711 0 R /XYZ 85.039 692.384 null]
+>> endobj
+5715 0 obj <<
+/D [5711 0 R /XYZ 85.039 692.384 null]
+>> endobj
+5716 0 obj <<
+/D [5711 0 R /XYZ 270.549 428.615 null]
+>> endobj
+1562 0 obj <<
+/D [5711 0 R /XYZ 85.039 384.321 null]
+>> endobj
+5717 0 obj <<
+/D [5711 0 R /XYZ 85.039 350.181 null]
+>> endobj
+1566 0 obj <<
+/D [5711 0 R /XYZ 85.039 171.355 null]
+>> endobj
+5718 0 obj <<
+/D [5711 0 R /XYZ 85.039 110.469 null]
+>> endobj
+5710 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F66 4195 0 R /F62 4052 0 R /F20 2965 0 R >>
+/XObject << /Im26 5709 0 R >>
+/ProcSet [ /PDF /Text /ImageC /ImageI ]
+>> endobj
+5722 0 obj <<
+/Length 3158
+/Filter /FlateDecode
+>>
+stream
+xڭZ[s۸~T'ydn4<vhK*IsIܙv2|;q;IBI$ʙa+3!4?.n~ةNBvX0o=qb=.{#~Z a֒?~/v-?]Ԓj@կ9ʱ4@۱]^v]]}fcgi%;LSZBԒt%un-kr
+GuS fph5*
+:D}}+cW휉s
+@_FϪʮyϨν:B ]QlV{,?8
+ġFd(fY/%{Hů2mR4L˗H\w2)ɏ?p-َ0JFbtй_xo[J09=y`-[!n}Hh{=g-7E+c943yѫ<aGh=zrr\RL@G|$Lu~QC8AL(='ȇZ(g9@ߌ<QMT*6p4#߽6c ^Ju͉,K}DPDэ]aXMApnjubAK ~qb^k55ZzN!>yS<07Dv2 ݙƁX9xfգsoI0tx[Iӡp,LbGyc'X-ЁpCKZxhߓJTFY|W=gCa+M" jΜHL
+}E rdyAh{`Rn{Qu f(쮅v弃DϔIE*
+6çĔH%h|;N4Y<u"Ps
+ZVѱq_Pفq>
+,HgKzd7yÃC<  eIYj@Yf;Ե thdAA\B
+繧ʇ$?ur'`A
+C٫tYO GR8{ti#G\D31>ge%Ür(J hd t$E(A{!g2T>"9Bg`+=m9 ys1K@Bj[5JӍc$&;&s
+-@g s_W
+?8ZsC1&[ ϾN}tQ ^;-l4Bߜ)ڱ081Ԟz#p}w80OE8HJ~
+wLx)r0
+7;Eމ ̄2xӘ{(dtX!7: ahRqG6!L"-uAU(Oź6Ԁxg M:e,մ
+$Ey|̤3y`S+0w=7K)6t.!Pxw*ؠ9 v .{&h+qN^s{.e9w}/c'/*1$jS].3
+r #wB0u^X=Ҽikz#ѭ)varJm$7 (}=\ŘCSKOhIܑv7?pD8Or q#nf
+%AWaIS"uVH7ϸvȠ!7
+\qmH_D/&T4'+M
+endobj
+5721 0 obj <<
/Type /Page
-/Contents 5342 0 R
-/Resources 5340 0 R
+/Contents 5722 0 R
+/Resources 5720 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5300 0 R
-/Annots [ 5345 0 R ]
+/Parent 5707 0 R
+/Annots [ 5724 0 R ]
>> endobj
-5345 0 obj <<
+5724 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [277.578 480.435 451.387 493.336]
+/Rect [117.472 665.485 291.281 678.387]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://localhost:631/printers/)>>
>> endobj
-5343 0 obj <<
-/D [5341 0 R /XYZ 85.039 781.388 null]
->> endobj
-1526 0 obj <<
-/D [5341 0 R /XYZ 85.039 664.197 null]
->> endobj
-5344 0 obj <<
-/D [5341 0 R /XYZ 85.039 616.861 null]
+5723 0 obj <<
+/D [5721 0 R /XYZ 85.039 781.388 null]
>> endobj
-1530 0 obj <<
-/D [5341 0 R /XYZ 85.039 399.026 null]
+1570 0 obj <<
+/D [5721 0 R /XYZ 85.039 597.626 null]
>> endobj
-5346 0 obj <<
-/D [5341 0 R /XYZ 85.039 380.154 null]
+5725 0 obj <<
+/D [5721 0 R /XYZ 85.039 565.205 null]
>> endobj
-1534 0 obj <<
-/D [5341 0 R /XYZ 85.039 213.727 null]
+1574 0 obj <<
+/D [5721 0 R /XYZ 85.039 385.228 null]
>> endobj
-5347 0 obj <<
-/D [5341 0 R /XYZ 85.039 194.855 null]
+5726 0 obj <<
+/D [5721 0 R /XYZ 85.039 352.807 null]
>> endobj
-5340 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F66 3242 0 R /F56 2890 0 R /F14 2895 0 R >>
+5720 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F58 3365 0 R /F62 4052 0 R /F20 2965 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5350 0 obj <<
-/Length 3476
+5729 0 obj <<
+/Length 3344
/Filter /FlateDecode
>>
stream
-xڵZYoF~%`qyC&Nb;<Ŷ11o]ݤ$ ] <جh34v0%i:[W'f=›EqZF3s3/dz" C"IRNjշ؋`w>]Oi謘j>|wν濭?f5j2D~?7oߟxngh{e$C7B'7'\4&6$=7M) JȟЯn"vX^<\ĚVw%HJ/|V=2xo0MSQGfzYftw~}z
-z\Ukz0u<GhmL7^EBR`qEh͢gAi"6yw,
-Ɔ[ěby|e![H}bM 4XfHw|DsYdZP R촻flRkAKD81[%'.n؃WCLASx ~ZurgD ǓV=2ykW+b`GxDxZZAǂ%Cx;ק< [nPV``=Z:|aÝVG$f '^X$r2HS'ұ*+7ձ`hu̱/G̔s^MLT q >Ƿc)ly&h'mM'Oo<M[4 #EgS"X cIpIMcB|"y^MMqvͮjj9;#r#0n L+e%תyd6ӈF grcO ~ 8uL/5b=(ˮӪ %+ür'9tNߕ;MZJ=hoNHl>+U˳w+y"lj!R=ZnXAcD±1[3e NAǚޚĠgԠ=&6|rTE/zӉ7;T%*Yڂ=N]B FYb #(HZor6u&pP#$Q8*'Na:51f3$$<Cd&tgGcd";ysgR
-n;RcA*fOI'޾ U$\'-!6+(Y_3N/tILjq- M<U$J+dqt),%iTOIh`mȮJNcKCu
-e1dT(ltRuQx A-:~SU!_4vA ?|asmK}CT}0E|QDzys^h[ߧҿ,3ȑcZLir{C2 2>y+ەư^݆݅``da408}]wQ g5[o`u `<LUh~
- mrV* ?á 15B(ύ'̶!Q `#KsڏĚ/a ^D\d2c?`TϹbHY8^P
+xڥrFPx1X%b1x{Hٲ7vl9ZK.*" 
+\,
+eE,E2$ ltMף8[TMϔ2xD:&BB!մ,sELeY~BhSy8x7xVV(/o
+pmf0!
+f+A뻢#i͓0Y36ru|L?jC=F:[MM֎skNBT 8T:> eƐ߃F@$FCj>]y<[7A~m6zo~RSqOze?9] o{/5ϐ+TU4]Ѿ.i>n^rasү2$ԓ|Ǒ21uW`N3")mu]0cӎDWҾ=Y9 W<U:@BvဉbWRͲ_6]a}M~Tz'@vnZMhL#J$70S勣Z{eW0BlQ!g~QfJڋ㴒;R?DS('\^cA>M51_<J
+PǴHgԥ;.ؘP =pVpRGD:
+wF[bAL̸ J\F>q6C#*/F36 zjؒZBwĝ\lPTlX$.ѵ
+\Djt,TDS} qk{.A8m˜#?œ.ku
+V6kKن*1FX9SoxЯĀnkNg
+D45㶟Wc'z]%ˑ>d/Sɣ챋$v2$I5<өρj<c ݇OuطJѫG<Q!/,S΃dr@߄U'ބ8QpUr1 W*))N$& ӏщ%llWDb|b=49V 8&.v~Vz=jW=L{ƅƕ4tG>vQxw;UTSqJޝ[(:Xb,Ge6Dҁ|6 Ƹ<F nC}C (
+[[t]7@mҼHm @"p(!iy\n7ZQ0ڭ!1e=
+X|Gr$ļ'óݛGBToZ<X3w~5}u߱fMdf*6v)s, 1ώd&׵]y.tx1endstream
endobj
-5349 0 obj <<
+5728 0 obj <<
/Type /Page
-/Contents 5350 0 R
-/Resources 5348 0 R
+/Contents 5729 0 R
+/Resources 5727 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5357 0 R
+/Parent 5707 0 R
>> endobj
-5351 0 obj <<
-/D [5349 0 R /XYZ 85.039 781.388 null]
+5730 0 obj <<
+/D [5728 0 R /XYZ 85.039 781.388 null]
>> endobj
-1538 0 obj <<
-/D [5349 0 R /XYZ 85.039 688.307 null]
+1578 0 obj <<
+/D [5728 0 R /XYZ 85.039 761.463 null]
>> endobj
-5352 0 obj <<
-/D [5349 0 R /XYZ 85.039 658.106 null]
+5731 0 obj <<
+/D [5728 0 R /XYZ 85.039 736.114 null]
>> endobj
-1542 0 obj <<
-/D [5349 0 R /XYZ 85.039 590.109 null]
+1582 0 obj <<
+/D [5728 0 R /XYZ 85.039 668.118 null]
>> endobj
-5353 0 obj <<
-/D [5349 0 R /XYZ 85.039 568.913 null]
+5732 0 obj <<
+/D [5728 0 R /XYZ 85.039 633.372 null]
>> endobj
-1546 0 obj <<
-/D [5349 0 R /XYZ 85.039 404.81 null]
+1586 0 obj <<
+/D [5728 0 R /XYZ 85.039 444.292 null]
>> endobj
-5354 0 obj <<
-/D [5349 0 R /XYZ 85.039 383.613 null]
+5733 0 obj <<
+/D [5728 0 R /XYZ 85.039 407.425 null]
>> endobj
-1550 0 obj <<
-/D [5349 0 R /XYZ 85.039 286.651 null]
+1590 0 obj <<
+/D [5728 0 R /XYZ 85.039 310.462 null]
>> endobj
-5355 0 obj <<
-/D [5349 0 R /XYZ 85.039 266.06 null]
+5734 0 obj <<
+/D [5728 0 R /XYZ 85.039 276.323 null]
>> endobj
-1554 0 obj <<
-/D [5349 0 R /XYZ 85.039 129.056 null]
+1594 0 obj <<
+/D [5728 0 R /XYZ 85.039 139.318 null]
>> endobj
-5356 0 obj <<
-/D [5349 0 R /XYZ 85.039 96.236 null]
+5735 0 obj <<
+/D [5728 0 R /XYZ 85.039 104.572 null]
>> endobj
-5348 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F20 2865 0 R >>
+5727 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5360 0 obj <<
-/Length 3082
-/Filter /FlateDecode
->>
-stream
-xZKsWTZJAky^
-cӱSZ$$b 
-]ouT38c7Y0K'\?& nB./>^ݮcj³F v:禩Z-\S9=s9 Pus. aW/Qi!2q$Vk-3u_%
-n#^kprJ)|~Z E$y_
-4u[w |.I["2t*Ϯ斶{@> tzE7MKΰ%VRi,FeD̔ш
-MF5bdp+<OL+:nY"uq܌sS܊M|WIJg[>|1E$ hYz(_᠍Lp ;cMf{™kfYh#Sc!yk3j]ۘ,!$B-:,!/u)2#.:JެH^toj4>n]o#>tl4d1ٴ8e LGFK/sۗE äG<@^F &k8@_ q8? ?BGPV
-kGpSB v⍵=Έ
-vkjm.#::RC8b82@TB2Ѫ
-,'w'g
-JS٭r+aRtɁZ81QPC%<!ϰzG&ȴ3NLP^x!1NeUVz5&}1LNR\^v
-c$,FsQ~ [Q%8ָ~ꇜl}i.vZ!)2gW0rs8o%66~J cc{<d%ȉJC0@MÛRHn
-!hR1Tu;ݸ3(O{K7vg3Au9Gڢ3f= KQ BʍL`yisQ
-\{vYI+^iXWz<yMM{9ӯ6%K37->A&Ϛmc9
+5738 0 obj <<
+/Length 3028
+/Filter /FlateDecode
+>>
+stream
+xڥr۸_t&Ԍ}ʮYojWvyE"U@ȢN#
+R7JChB-F^Hji݋# A}y'N.>
+
+%yaju2ߪd O&JcR`wO4&“\귂x)ŕȊMel!9D *_<0y+6רle/kms^l9 #Zb E,`
+h0uգ\AWe.g4@/LQ 4F]7xEQ^ʮ)FyoS~M2|ZsBmY?ƛcx+yÿ7c`+^`ޒ߽ ҧCqV+b{~|;3^Gr8H\C^&AJ eaܕb8-«cngG)e|E M1 H0M8s ! 0
+Dm!ۼ
+Ü "l)|Nt/
+b{* ճ12ָ`DaCbo_;tv2/b7{rl
+4!utSU&\s|RP%'݆cr3TqOlǧѢsVmEKl; 6O+~z@Q! x#Ri$RX8G_rɹH"iFzBko1pqQ̣޺Ɇ
+ o%]Y7iq%&id;QK|t4~>P [[D|~|[_IE<.4T/+2;Wi|*7}&Dĕ<OC-[='Q0fl\M@,2LpJq9 R5? '~O%εpɟf?#W"p?FĢM|*ikE?K@cl
+pb"1M}0P]._闈(cā9-{Ot<P4xAshB#pDgni];Q(R@Bw 'yW,=NO8Hr||ۂiB_A mjeXEP݇ n -60گ?Q~B:?t}_Sƞ!s
+d<GJ>2+I
+d{v9s(ﴭʉJӖk18WX 50X
+BjڼA ]|e{&ߔ~TRYUCj@z 5O+cZ1 up
+ ˲=/nT&wk:bRWvdҰWuHF"Q^D$D 4_Y'v/+"W̱sLHsM𘱎Ԁ
+mǴ]ck߁H KhJah%,=悖n/
+?k fJ-hT9b's4 rPOSn FB)S5}g|7PJ2~'9]'$%
+5i-w6k[ـӷ?&#qz:X8G.i1?3Cnu;}bpcepuuJ}AA-V?ٖ?ZM#]_i^P~tx8`2[Rendstream
endobj
-5359 0 obj <<
+5737 0 obj <<
/Type /Page
-/Contents 5360 0 R
-/Resources 5358 0 R
+/Contents 5738 0 R
+/Resources 5736 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5357 0 R
+/Parent 5707 0 R
>> endobj
-5361 0 obj <<
-/D [5359 0 R /XYZ 85.039 781.388 null]
+5739 0 obj <<
+/D [5737 0 R /XYZ 85.039 781.388 null]
>> endobj
-1558 0 obj <<
-/D [5359 0 R /XYZ 85.039 610.001 null]
+1598 0 obj <<
+/D [5737 0 R /XYZ 85.039 637.099 null]
>> endobj
-5362 0 obj <<
-/D [5359 0 R /XYZ 85.039 580.597 null]
+5740 0 obj <<
+/D [5737 0 R /XYZ 85.039 594.146 null]
>> endobj
-1562 0 obj <<
-/D [5359 0 R /XYZ 85.039 497.648 null]
+1602 0 obj <<
+/D [5737 0 R /XYZ 85.039 511.197 null]
>> endobj
-5363 0 obj <<
-/D [5359 0 R /XYZ 85.039 477.057 null]
+5741 0 obj <<
+/D [5737 0 R /XYZ 85.039 477.057 null]
>> endobj
-1566 0 obj <<
-/D [5359 0 R /XYZ 85.039 212.132 null]
+1606 0 obj <<
+/D [5737 0 R /XYZ 85.039 146.508 null]
>> endobj
-5364 0 obj <<
-/D [5359 0 R /XYZ 85.039 190.936 null]
+5742 0 obj <<
+/D [5737 0 R /XYZ 85.039 109.641 null]
>> endobj
-5358 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R /F35 2880 0 R /F14 2895 0 R >>
+5736 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5367 0 obj <<
-/Length 1621
+5745 0 obj <<
+/Length 1779
/Filter /FlateDecode
>>
stream
-xڥXmo6_ad -[}K֥@3/qm?(6c %W~w<ʖm%-0xC:|?>NBt'$W#w#n5d~hG$ggFetvyzB8q|ܹ%zvug8nD83R>,/Y+O2 t
-Jav
-1dqgI"(p
-*WceܹK=_:1n]
-~kSz[~
-qe \tJ 5Dp%{?\`5D0s0dγj1`2VUy©)~2 HK0h.XuT\WM"o6d4rv9Z10d`c҆a؂1"|S V#&xL<tNAs!\:M
-}f0B#b4kh{ɨxaM{H”5[׵ G M"rX'8ה7n-s+ɦ_M9T {OO=f#5IhO\,y/$7Nd2DXoO ( .m#M"I!# d>]x/tU{~F
-ѕ|+⼿MWe-ihȪ{R<{7kKJ? -@G=ͩ$?
+xڥkoH
+k5P>k|&6
+p΂&K23;C0T09a8\lpRmѼ ɐ{,G1pu^b:BGlA輺sM՛ٛ˿M;7SDs5
+3#7w/_Л`bh
+YMUa.>frg 4&gC
+9lE#$SŨpAc
+2tz4҈eQJ>ǃXnWyuK~#UbMV2eLPqmࣶ|
+$ˆ)1, nf dj21V7sSLqN⵸7ULgbo+½6S
+x7wgvŸ1S
+IgVgS= &U/ L#] \4a[aٯik"3UaK$~^ҷU ZFk1}fdO*~3n5gM ՅըRubZBgtן֙!& Cw gVAHfwf! }Wr&! n i`+qM>[h'Ib>-H~ BSVU=7*[=eY<l-wٚK+s AYO|Ux Sendstream
endobj
-5366 0 obj <<
+5744 0 obj <<
/Type /Page
-/Contents 5367 0 R
-/Resources 5365 0 R
+/Contents 5745 0 R
+/Resources 5743 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5357 0 R
-/Annots [ 5370 0 R 5371 0 R ]
+/Parent 5707 0 R
+/Annots [ 5750 0 R ]
>> endobj
-5370 0 obj <<
+5750 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [354.8 480.691 512.306 492.684]
+/Rect [345.558 341.001 536.549 352.994]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cups.org/software.html)>>
>> endobj
-5371 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 467.445 136.217 479.134]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cups.org/software.html)>>
+5746 0 obj <<
+/D [5744 0 R /XYZ 85.039 781.388 null]
+>> endobj
+5747 0 obj <<
+/D [5744 0 R /XYZ 279.478 764.647 null]
>> endobj
-5368 0 obj <<
-/D [5366 0 R /XYZ 85.039 781.388 null]
+5748 0 obj <<
+/D [5744 0 R /XYZ 85.039 411.841 null]
>> endobj
-1570 0 obj <<
-/D [5366 0 R /XYZ 85.039 518.654 null]
+1610 0 obj <<
+/D [5744 0 R /XYZ 85.039 389.525 null]
>> endobj
-5369 0 obj <<
-/D [5366 0 R /XYZ 85.039 494.672 null]
+5749 0 obj <<
+/D [5744 0 R /XYZ 85.039 368.531 null]
>> endobj
-5365 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R >>
+5743 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5374 0 obj <<
-/Length 2090
+5753 0 obj <<
+/Length 2029
/Filter /FlateDecode
>>
stream
-xڥX[s۶~<j& oyK$u[g&%ɒ5^
-ǓŸ< i9~wL/?,e}}vn:Z{2Y޻OS3fqugt?Mc-<Ÿ~Yp~qjTϋ_Ip ē}!d0v^^_2H53]#
-@"`X?YOWۦuf,Qd"y峀/
-WN@+VT,]}ldi?>eΣ&o7EuՍoVհ~%ʪl*f#\W_tþv?ccР,E#XJ)Ko GuY1G+dNK\bu׳Le@k}ip[:r 9kjEB!HkB.gpPvk82P'
-T.u =A CDe AQU99<rrHp7_!) M󛁾5N!'c󫍚\֠䠙N H;,DZY (+."T=@bQK8!r;耯)JU!q6s Ga]6VǗRbd Kmb:'Ew=W@sL?Rb=44#g̔cNB#&{:n"C0% Vuсs5] ~r;XM%Z1yzKU9#+Ĉc4_74(wc57phzTΐgF\TkVg˔,_iiD@Hd3Ì&Pr(t%X"j6^,c˦V.pzp<P@ET%{byƾ+s(LpضTma}KvBKp@"/g;YT0#1ʻm@ݏ|=_\[
-3_&f 9 `y>;8/
-' XWX\ Bf1Ww{La|aG=Gȟ@~Vsf(SlqmӀarܿ&1'ڤ؇}jEf?\W[{C.r|Yt ےv]4L!b3?t9lfΙz I-O?2<f_^
-+*CC@&>Oendstream
+xڥX[s6~d $x[Z'ume3<$mq"T\
+E&D\UL M(@xg}in!ofsxiNHȤܯ*P/z_|VY޿`ty[ ca{+ʦZΘo_} Qy)}+R̯7sU@>DeSHPڸTݺڴ=+v۶㽍釹Sv
+^#\*d2=4PWp8GQz4caM[v0kXl1d@j˰$^O (wL/J@ҺE*>R Nr:"gG@t5 6"L2K#_QD (R} D eC$ᕥ2t]ш#O)E Lt:S*E LuWT
+%!Ф1Ϫة =KFϠz,nl GF ݴDo:`)0Y6GӜWz8#2t[njwr_8v{SHhVq9W(۠8zYv&ӜxX}S(vt*1fsSy87*aÄl`8:28XD
+x㏤&j ^p8o /΋ۗuҺ,40?uXOn'l Nq~M=Sp `dWNT?١W# 2v)endstream
endobj
-5373 0 obj <<
+5752 0 obj <<
/Type /Page
-/Contents 5374 0 R
-/Resources 5372 0 R
+/Contents 5753 0 R
+/Resources 5751 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5357 0 R
+/Parent 5756 0 R
>> endobj
-5375 0 obj <<
-/D [5373 0 R /XYZ 85.039 781.388 null]
+5754 0 obj <<
+/D [5752 0 R /XYZ 85.039 781.388 null]
>> endobj
-1574 0 obj <<
-/D [5373 0 R /XYZ 85.039 290.091 null]
+1614 0 obj <<
+/D [5752 0 R /XYZ 85.039 216.367 null]
>> endobj
-5376 0 obj <<
-/D [5373 0 R /XYZ 85.039 269.5 null]
+5755 0 obj <<
+/D [5752 0 R /XYZ 85.039 182.227 null]
>> endobj
-5372 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F66 3242 0 R >>
-/XObject << /Im2 4150 0 R >>
+5751 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F41 2998 0 R >>
+/XObject << /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5379 0 obj <<
-/Length 2736
+5759 0 obj <<
+/Length 2208
/Filter /FlateDecode
>>
stream
-xڥn_!Byz1KIZ$b(RCR1yȢ,:i9O-l7n 3{͙4@ ӈ=5p0_|d}u2_=GZ2Ñӡf >oop
-{uռ#H (` vf 7 XB`{+r>=85S=ʏ\_ `a P\c|&P^R>\\MgJ\>=]&qLJOӧtvpFJ@ F/Ipm?±m,lɋO yQwb~+S_*aToiПm u@>o?v WB^[`oS6hB?h<Rhsspj8V|Ha0tY!orpHV*7ܮ}u؈/uз+PYCp+6 Y&KXH ɏ`RᡔIdYHSmb^@ޘOrYCu;#WևN
-g]G¯-85$MݓPt.hO$[}<τe̛ nȭ\]M|:A?X]y !HN태FLXOyCoSs
-hyGh
-ieI/"XǛw>mjx|8L/A,?&bSm7:-v;Io{77A^pdKZ;˃+ Aݏti"$,SSC`3,6tJ,H>Vt2?P aIqN&BNdqaT7g_C:¶d
--l y97Jd-Ob'TA!vDE1DDMkl@Y"fN3C՗vkvxA5(q7z IA+3wlwMrI?GT<
+xڥYYoH~
+m)L?>E/NO~oY\CZi(F$ 5Jʠ\)D *Ed$0f{=*t%*-[盗& E u,tlLb"<[#3
+#dlg.+&2n"c+Xuk4MN/}%ѣ1._`dfHi nZJy'M%aSJg+\UpɤY.vAy0_ÌVУffF]k juV/K}&t)CU(rOw#Mlc5B*&6B/v`=72
+R%z84w!:vGwdW;J<;D7{ëf
+_Zu[a fL׷7̃!Phڈr789U%(n0>t’ TѠ~E7D4=$Uăv%v~#$g{T f
+"qG?Ѓ*{c\RG9iQKRȯ~
+ 4t:
+ 5aO5[D|,%Uzf?A[bdWX?|ɖH{'4/6 ':5,fu{t'ž}%u
+˙`rJKAْ3eL1 2Sy8U
+Wr[JǬOjz Jyȏ3<$lJ <0dO`{*x\{YukY .f/]xC9v Dk9MZ›
+y:0xNSO )>S?mu F$Z5{A:-4t_hEendstream
endobj
-5378 0 obj <<
+5758 0 obj <<
/Type /Page
-/Contents 5379 0 R
-/Resources 5377 0 R
+/Contents 5759 0 R
+/Resources 5757 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5357 0 R
-/Annots [ 5383 0 R ]
->> endobj
-5383 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [306.831 175.625 509.276 187.617]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.easysw.com/software.html)>>
+/Parent 5756 0 R
>> endobj
-5380 0 obj <<
-/D [5378 0 R /XYZ 85.039 781.388 null]
->> endobj
-1578 0 obj <<
-/D [5378 0 R /XYZ 85.039 408.185 null]
->> endobj
-5381 0 obj <<
-/D [5378 0 R /XYZ 85.039 389.517 null]
+5760 0 obj <<
+/D [5758 0 R /XYZ 85.039 781.388 null]
>> endobj
-1582 0 obj <<
-/D [5378 0 R /XYZ 85.039 251.906 null]
+1618 0 obj <<
+/D [5758 0 R /XYZ 85.039 220.091 null]
>> endobj
-5382 0 obj <<
-/D [5378 0 R /XYZ 85.039 216.704 null]
+5761 0 obj <<
+/D [5758 0 R /XYZ 85.039 187.873 null]
>> endobj
-5377 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R >>
+5757 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5386 0 obj <<
-/Length 1505
+5764 0 obj <<
+/Length 2488
/Filter /FlateDecode
>>
stream
-xڥWmo6_!F3wIۧ/fthAX-#Q"@D2'r(N$I-#H .EֳhʙH
-4zY=DkdǓ8NWcɮzrvqw}BD ]\O>{J;ȫit:M=iGjnzWx&SO: *;$bb yR@y- Ő"k{ٶ8c1G6 DVe^4E8JpQځ{|W*NX%&a wى` *nLJZTV\z(-> +2I9} )
- >r1@qZ;w۴|ڐIJL}Ҭ:Dcёzsk%]LeS;͛hqc[b"$kX/"ٲ$c1z3_4E֥Op'E
-
-2"-4#>T_\oIM٦wRixebz0Rبp&
-$PkihA]$_]_ʍɇ(aQr0fG6nk\ra`~qLe,vR䨲 
-nl9P1M?Qڱn#_y:aRwN|*|Nw˦ECLI' D*rXqS A&p;=
-%x%Cg?Av|;ݪ ]E
-U
+xڥYo68iQ$h?m7ج/"-AXXYr%yyH"Hp8o#GJFQ,bsᏞaÅK24˄#OFUmh~<QJy2Iϳxtv{7= <OXys&}_?_;I;@W#| ģ=}!azsr
+XsZq8Y5JCi.Y)c30&K,7{72aly*;5V.`XI/}ΘZZ\sho-kYU\l1/kב0!u@ԑd(THd$TB1׮An7f&8HHZ 'v lڴ(Y^s! IkͿPK `66W@\ՎiޠNAU;~;mbz@r73Ho#wuXLk/CoEnBBڹޤ/ZVٲ%kʤl5c⛇ٙH<Ra;8c<Mc_Ga q~tԓ91Ovݶ~/yibQm(vSMps Q8
+cEv <V- z\U$نf3Q>Qx`!@LX!ц Y>LH⡞C@vu;]W{\Q 7 " F%A:0`_v@_rBaD
+!BtXj{+Bb8Qof$<rLz"lxhI74 ,#@|`
+Zog~Mb"s,-I@ʭ"\=#˒jg\,N΁&].8h.[TMAq䴳M{PSU$2+G<pԒ
+#SXѤ2DZce"Êħ sa]ԇ1,Zn1>!0MЂCPrF -Ar(79`,~d$QL2hah`zrt]xdsA#3Ҿ֡zf:N{JAtqu6~7zl\ЅsI
+Wٯ.%%M7qK Uf !ɞw:J+6ż#bmϼsHҩDy7Py
+^4ctwjD!>Լ>/e~Y)4*9&D ,x~Pܱ5S S/endstream
endobj
-5385 0 obj <<
+5763 0 obj <<
/Type /Page
-/Contents 5386 0 R
-/Resources 5384 0 R
+/Contents 5764 0 R
+/Resources 5762 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5357 0 R
+/Parent 5756 0 R
+/Annots [ 5767 0 R ]
>> endobj
-5387 0 obj <<
-/D [5385 0 R /XYZ 85.039 781.388 null]
+5767 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [192.75 685.841 395.195 697.834]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.easysw.com/software.html)>>
>> endobj
-1586 0 obj <<
-/D [5385 0 R /XYZ 85.039 761.463 null]
+5765 0 obj <<
+/D [5763 0 R /XYZ 85.039 781.388 null]
>> endobj
-5388 0 obj <<
-/D [5385 0 R /XYZ 85.039 743.459 null]
+1622 0 obj <<
+/D [5763 0 R /XYZ 85.039 761.463 null]
>> endobj
-5384 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R /F56 2890 0 R /F72 3966 0 R /F18 3969 0 R /F73 3992 0 R >>
-/XObject << /Im4 4878 0 R >>
+5766 0 obj <<
+/D [5763 0 R /XYZ 85.039 740.47 null]
+>> endobj
+1626 0 obj <<
+/D [5763 0 R /XYZ 85.039 589.974 null]
+>> endobj
+5768 0 obj <<
+/D [5763 0 R /XYZ 85.039 558.159 null]
+>> endobj
+5762 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R /F58 3365 0 R /F62 4052 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R >>
+/XObject << /Im11 5354 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5391 0 obj <<
-/Length 3441
-/Filter /FlateDecode
->>
-stream
-xZYoF~B#}
-xA2LKKM EjHjc%ўl@죺&$ 8QIb}L3%Ab󛳋בOtr"ދo.7~Ό1J,ŏu՛7_cB~cn;\3~0ͷgnRͬo#b}8d {&M&;(J̆zyv}Ϟ Y14hLaNBQ>4*
-a 2d@ClvN G%76/f qɊێN]p̆hX܂V0kd9I{%Qr)R
-8q+jV|
-QoK֤q@p(zp`;DLpXo
-h|r7ЎA&jȦdBCŕB j"b3>ð߹7pBaBxzlNE:S!л U:Ħ#w|@ȕ{x;<t>@K#g{pBRd۩۶ЁF"wq
-Azh,R=)s"mb_9jA"^PD|[mնkBAG%"4d/
-5{m2*Bt`=wUL|EV1u>`jޱ8Ruc;Gqa-ZeM펱^& zg7H0Bm@p
-f5.(s[Ԍw7o4qѣ:,LK ҥ
- fG$$$,1x4ſ99c";o#ӧH08B9³qd]nc)`?QJ٠y'xU7vP1fWx[%NNQ:qأ|Ϊ%E#phI:|ݘJ!2Ʌ]x>(]qN^S fka
-}`
-GSϭ0;Л!T7lxk)`rFDW_-PpV𥇞yPAݗ7oA4gCr}(^`kJFqː]ޣDn
- "ުWum2=pk{ 6$hx!{
-<4$H`-e]CG_Pg
-ȿ|ܰ0֬-Ŷ [KFD;*`5|sw\س W<!"[>rsmbCerm+l܅
-c6=k\ж %sDO@ y[1ᴚ!8u7F.^iNzzSKP\Hh >f|gt54P2+e.:~P{5 (~0TeFosT_n0Q2ʖR$A4&g4L3궫g76w|J `#X% ʀjr{È3o< [3lkwSR6mWo0Sš8H>=FԲ0 {S,2|.4&Ey`zrllIW .1t%P¿$rC<+=dMY,*E_b3 )h$-=cqn+9{- Jp[d_+鱜endstream
+5771 0 obj <<
+/Length 3801
+/Filter /FlateDecode
+>>
+stream
+xڥkoF@Q*h.GpjS4/qm%Z""
+IͿy풔hHy.,?5Kli:[ޝ5|b! 볋&ςlv}1~dz˫ 2H{j<z՛Wo^poS]3Ы7맗~0dz׎RGP!~#H?=_HK{?E3^5 &v,y
+
+hKB-w,&s B+˷+<4^žm. *rk/FJbQJXEGμUqĂ3 IrŪC7b$3u{`-D6bV{}W]~|!mpDh$yp8 G,iʎ- %YZ6<lF1 6S93:5~73Tu7#%2:0 ȐǮ#pp(/a9Z/ćc$5h3HV5K$5&<K+r>Q:AC++^vo H6$$!YXŶ5JeeͭcT9Z1^}0TYG0ـ, IVbu@X+o]/~b(4F^喇Q#ҁ:O#tܯ
+" \p ,3,S3PH oqW: KW* XXzEUq竂wWc^$"C3Oiq!
+8< Z
+Γ1 /<߂1^`B vNN7kM?V~Bh*a5Шc/֭tU($+̫b+WBj'BJR?6ay8lG "%Fy+ '
+N*62C?w[qMƾGSlneCA Ő,*"3wN * tNcM(2kqZ2ᣧC?XZRA(+ h1d.mգƶliǴB9bh92tY$);\\':@v64kl\
+6to-G%`4} mrމc``*v2[$^k` zmDkx&Uƞ-0ǃs,Q)7;& |BO}JPRaEi>Yc-n "
+2KƆxeX.?b*AQ"5Yu8?LN=ISfR; 6{[- }"a(Q2|srANVUέxIɱIƷ99Ȍq}},\vÊj 
+)KIɸ 0~`ʧt@)B)pv_%
+%SZ B/
+rSn̘yKҔu4
+2{[!䳒?^*FOacπ>sI12
+[wPEٜ?@7F ^{>4Plo#to#*
+$l
+Y*j1]63E<1Ou1~0RKAm(Xlj!cב6]NT_:RĨAPԞVvZh8qh%rpp^KJC莐"<q@u;ʌO&pdt;AE[ s#^2e`ԆQte@щk9)S$Y~vœ֮ wXBhp%sP&=9q
+&5pǪS|m+ }Ĥ,_[OpIo$'4yK1.qpI. wi?cAZ4Q;C_۵pӿdwd=N˦9!zT6'6esl;+C崙sucDu'tjywo,{{;jx.CRyU:DiziѾTdcMgST*GWy 6}\Ėaý D;RMqYD$ <$B0sFK vy3ym̋zTD~[I8
+PؤV=5ÿݕPG|x%|/RŊq8~AX~%WB%@yzSi$K \$+U^ܑAqz`#=XtG>e%)KVy
+΀!k$mZ޼
+BfCFb|zhpz)=ʴe Iǃރ۴vPas ؟1SWB`I*`|~6c@a`Eb|oHQI-(lm/!_ocwPb޳aYs)x:Tal]缹x5 ܲG_֙,I km탛բh>c !O-0H;! h>fg(G a |)K{o{`tE$r'*9
+4#q!c%YD$T>_$\s nZɱeX.u|;[~FWt MkVFOI(P,-\N}csendstream
endobj
-5390 0 obj <<
+5770 0 obj <<
/Type /Page
-/Contents 5391 0 R
-/Resources 5389 0 R
+/Contents 5771 0 R
+/Resources 5769 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5398 0 R
+/Parent 5756 0 R
+/Annots [ 5777 0 R ]
>> endobj
-5392 0 obj <<
-/D [5390 0 R /XYZ 85.039 781.388 null]
+5777 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [213.858 394.054 306.485 405.743]
+/Subtype /Link
+/A << /S /GoTo /D (printing) >>
>> endobj
-5393 0 obj <<
-/D [5390 0 R /XYZ 156.947 730.534 null]
+5772 0 obj <<
+/D [5770 0 R /XYZ 85.039 781.388 null]
>> endobj
-5394 0 obj <<
-/D [5390 0 R /XYZ 156.947 686.358 null]
+5773 0 obj <<
+/D [5770 0 R /XYZ 129.675 730.534 null]
>> endobj
-5395 0 obj <<
-/D [5390 0 R /XYZ 156.947 613.958 null]
+5774 0 obj <<
+/D [5770 0 R /XYZ 129.675 699.907 null]
>> endobj
-5396 0 obj <<
-/D [5390 0 R /XYZ 156.947 376.847 null]
+5775 0 obj <<
+/D [5770 0 R /XYZ 129.675 641.057 null]
>> endobj
-1590 0 obj <<
-/D [5390 0 R /XYZ 85.039 243.395 null]
+5776 0 obj <<
+/D [5770 0 R /XYZ 129.675 442.472 null]
>> endobj
-5397 0 obj <<
-/D [5390 0 R /XYZ 85.039 210.114 null]
+1630 0 obj <<
+/D [5770 0 R /XYZ 85.039 327.41 null]
>> endobj
-5389 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F73 3992 0 R /F11 2898 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R >>
+5778 0 obj <<
+/D [5770 0 R /XYZ 85.039 282.905 null]
+>> endobj
+5769 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F38 3001 0 R /F58 3365 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5401 0 obj <<
-/Length 3491
+5781 0 obj <<
+/Length 3438
/Filter /FlateDecode
>>
stream
-xZ[o~&9nч$MwEn` dbD2TH*fHJLvZ 0`z\s(J#S*I}W*_x| o^󻋫Vw4x7R3wIyf;{-Ny{?YʹIׯg?7zw?^P 0VHNjwUx*KW\?V0Rn*y/n/awpū.~74 -h +כ
-#11 j -<v\$§Ys:
- +p""+.6RC]u$jvhC
-6BaO=<-Kp^ܸ%/Qłf !4aD3|NGA,A檂1&-Bn-ʃu5|^ n!pN6m{jilc狷8i'&ktōJf9z~yB5| 1֗|Zi+b0e) W%]p'L3qh$2Ke (&`! i<V5‘'Y9b;ͱ
-!X/ P%V"[Baz^ St>:M69=xc;hnw&~~#H~)
-s5q,A/E7<B
-W LP!)`5=(bWp‰kM9 r* 7_CKwHU];1&rn9B x3z6Bw6grRA|%bܒ'lG)#Xk6 $#Ē
-CJƨ ?I+gOp;ʐQA:\B1)<K<^}$C.W!m-&aUQ
-A]H`$SOeóa~5z[2hq0U'(S`bx3`+wbM,W,cXrp#!煋U;sWl\ۗ}JI>@NQd&#5d+T8*H.MfF€9e3a)B2K"i2j*H |T;~qP_1aՕsuUZ<2v TG|"A^]gh*EPj6IqMR&Mkٱ6<=2kєSuMzc5+VMDFag #s ߺ
-i%=AX#@;z¾RF}&fHX~悶9*<͑`5PP'{'KHUU9+ ĥ}`(;Jo^uK#?݆ȞIok[$w L]:(e=4WQ&I9
-HTr“`0 s`[7~Q c6`Է7ak}gW +u!Gh~jvz]OS0/t-N1M
-I64bR
-I&eQ,&G&PA çVN%`QӯX_Yui)_ISendstream
+xڥZm6|!!^AHmim5%۽_BR-;Ecr3P+'Iz2]ĉpe,ooXiDazb8A(O?[H*K<p뻷?[
+̙FN5
+ߕ?9VΫ,W~l޳/K?,P97M_랾[m] -k ﵾ{Tw=g`E?s^Y|-a\+;(m*}^C_(t ~`⿸T8R,C܉'+/ "=۷0ˆVUkg ,n{)Jg!D&v.'tbwٓeq.0dm=siNNrdа`O8DyCW2 Z[xcҘ㎢cP"J#Wzո\[#ٸjqq^I mԳ\+Cd=(0COT+JVcSsnBGnaXNy{'seit.nP1iQ`Ӌp5APO;i2_>a.@:nз˫7wo~zĝn`QMS:p ͚l|K
+;S[6@4bښuFd4ِjA #qF+hWvq&A w^SrLfh&0u}B`0ʨGsUAЃ$+TX$Y8țY ж‡y?i V<< d#4^b3UTV-SQ}\il@P
+gi0#iG"505\Kv l̃ij8a+<ZeT2C4{ɸ[/pJG%lǦ26]ᴔ6roݭ"8h<̠lXO{Y55'#[E$M$|s`+7`Lc6xH"SӐ5
+SAZ"Ž$B}3ZsZp.NMoWRώU|5 Mw"smB6gf)7N~0-6cMcU:٠
+:igc?'d0^팿J1/GL~ݺo:X,sٵ40mM$DCB UIuGCL&74 0ۮHqcս}2ޣ 9MQig6s HQa5qtx_(&}7HX<'\G ua"s*f" 뽮:,7pq%@BuSMorɣx#'y}f57<S$#>LKo>r#9Ԟ
+yuB
+|ɥ`􅴂LN״Z㘳m $v/9dxE`W} g(-]r5& 4}Ph ~6m]#ׄ5~8Ϡ%JI0faӸ>L&aD{$雊jn3^10=K<SH\&2y <$9H ojC>/4CiO,k{e.8rI }1I-$ _pŲ>M!wjυGHY}aha(˵^o4X،_^.םq5_xFԖ$6 .0^GX4@ Z /P >DyTpcin<|R}KVz;f^reЃײLuJ5
+@ 󓄮ּ3Ƭ?ԉ]꺼8TB"BuUd)5m.04U9Z+R!~:H?o0|4¬GtL0 VX(endstream
endobj
-5400 0 obj <<
+5780 0 obj <<
/Type /Page
-/Contents 5401 0 R
-/Resources 5399 0 R
+/Contents 5781 0 R
+/Resources 5779 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5398 0 R
+/Parent 5756 0 R
>> endobj
-5402 0 obj <<
-/D [5400 0 R /XYZ 85.039 781.388 null]
+5782 0 obj <<
+/D [5780 0 R /XYZ 85.039 781.388 null]
>> endobj
-1594 0 obj <<
-/D [5400 0 R /XYZ 85.039 407.331 null]
+1634 0 obj <<
+/D [5780 0 R /XYZ 85.039 421.236 null]
>> endobj
-5403 0 obj <<
-/D [5400 0 R /XYZ 85.039 386.076 null]
+5783 0 obj <<
+/D [5780 0 R /XYZ 85.039 386.433 null]
>> endobj
-5399 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F66 3242 0 R /F14 2895 0 R /F35 2880 0 R /F20 2865 0 R /F56 2890 0 R >>
+1638 0 obj <<
+/D [5780 0 R /XYZ 85.039 136.833 null]
+>> endobj
+5784 0 obj <<
+/D [5780 0 R /XYZ 85.039 102.087 null]
+>> endobj
+5779 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5406 0 obj <<
-/Length 1873
+5787 0 obj <<
+/Length 1349
/Filter /FlateDecode
>>
stream
-xڽXms8ί*W!oT\ 7wJWMۭe;W zO% tŵ=qu]W VM_:iS'Nm*<Sf 2 o_'nsUO']]tr5͆_pdPW'8=\p><9gZK|ְg2h7M /qU1UǴ8L.IgwBsBZ6= V0^O ~Prٳ,MZ@ҶՃnOWu^aX@e~1*,I!*p4feDɡWoc4\hkrړ3MW}i?ϊ$UF-ZT[!`8Ի,NatGYQuXR-e@m1JTN>5EG:'=Q^5ܗ2\|qW-*ۦJ
-`>R?@fptD O_*gk12ZQt5|z-JgقZ$N=ћq hTiTKR1p
-r¥-*M M u^D=udM8)U!(6*Җ8XFE4h)96v,n-9֝a" `'= pvRpvuHEIx;&VKkEB ,ec`hKCw[)JqP.8ι-r
-B_Hđ
-PSQ0> [TeQ)Z)E!JPfc UkdB(J͆ b,rCFb+*!e1ػ˨jcȻ4"&ҍQSN so1uY2*{;(NxA:ۭi:jX xN5Ea'$05tjq/ǬIY]"K S~~J!3ŗѠeOxK$[4I߯9Fo:7! 6QPDpO0puƒWn׵?a9`<aac/eeI}ݯVyG;_!
-x!\b<MU,DB3RrgQ+4K32~ 2}\+}'Mkв%zΔϕF? ڏѳ YeL5U<W>3035n[(^ U@۸pQZ.r^.5[ȃ-wbG8 Gь]A3͠`6닋>{wWvr)Vɣ}?C11{eͮ5yLsZZ}`Z$y蔕$Q6N|_Hԇpdjt_A d29D/?~xC}fSvMCL,#dgW5~Vz1i+o~vyr52Mbx..^L گ)r< k OoA'<%-^{)wc
-ln5\Z~wݚ?\7T!Lfc)5endstream
+xX[o8~WD]b$΅Z*X۳VUS\h=~.hUEc3 ?(H)anؐxXDn&@ )Tw߼ۗ(J%Ѽ[9d`TL٘,&-Ciڔi`m{=:Szovi$j6$&4$x9l`=R6(
+tWWx
endobj
-5405 0 obj <<
+5786 0 obj <<
/Type /Page
-/Contents 5406 0 R
-/Resources 5404 0 R
+/Contents 5787 0 R
+/Resources 5785 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5398 0 R
->> endobj
-5407 0 obj <<
-/D [5405 0 R /XYZ 85.039 781.388 null]
->> endobj
-1598 0 obj <<
-/D [5405 0 R /XYZ 85.039 761.463 null]
+/Parent 5756 0 R
>> endobj
-5408 0 obj <<
-/D [5405 0 R /XYZ 85.039 741.134 null]
+5788 0 obj <<
+/D [5786 0 R /XYZ 85.039 781.388 null]
>> endobj
-5404 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R >>
-/XObject << /Im2 4150 0 R >>
+5785 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R /F15 2976 0 R >>
+/XObject << /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5411 0 obj <<
-/Length 2357
+5791 0 obj <<
+/Length 2450
/Filter /FlateDecode
>>
stream
-xڽko6{~/!2C"qع-]I%W7Ϳ eNYp3Yς٦%1Sx^/\XϰVOc`Α=ffs2>翜Nf`gM̘tr;Fq&Ȍ .=ai4^/^LV@?Y8`zO0LŁiK׆
-!@2iz ezl ZX*>6y4~ atZ,"9@{Ђ3!?&<Y9\u˶~Xf
-EoPF_1[/q|֬;voUxAxQx65] [qGf͑o:o%d*͋mG ۞;] IK⍥jt  LHovvb
-fd[Ȝ9t2x:~!wM J]eY#V/AЬXaYE4!/t0߻"ϫqXՑ=
-4BIOZPfv]S8|CrT'5d|wuuwuA ۴d۞y@h#هGddpuu*jl[I;oVvc㿥j:EU.Z
-k3GrqYWi\Uqdp(\ :BnDSWыҴ!کvvnӎ>ZUN}'*߱v:,k%k3GsLxsW*!]#ï-O8JS"%e9.}3$FրhVY$PO}<Q"Z{(cTH%y\z gqHJ Gҷb#szq QF 8!i^$Vț,-i[
-]橉833c?#0((G WrإU<Yw7!3ȰʋL6TgHAshMKV?Ul)bU.%|\~
-HZT+QzXI5+=us!ܲ`rc%F~5f ZZek]։[ZX^JtqQ`DjZPf
-,Mp# %N*S%7PUcVƇ9 /X1 𷉮λ:=Ug U.P+iL.αcgYR* ӦL2U' /CZ?SoG
-]["no*10|#)j$+Ha^Eu-ty%nZ M[J{]+w` )@2YE2 ªNvMn8$ѡ uy-)q^ctB55o)BMIM( n㲪[R' I3mBDJHKt71.w0,Rċ\գJEhjϢ hJ/z
-6CWAp0 n% !I\InLh%9pGpƵP]`M녆Lm>m_endstream
+xڵkOH;" G"m6
+B±db8vv`[#$i4ՑɁSדBy`3OӞ#2j.@7Qyd6?Rp亞n6-Cg7|2 g6
+cSHX^±'{{?פx]Rq'OmE9-caUc;fq49c,2Hc"i-9+t4߻<"~Fy Z`$- 0_qfladc6L|cVFXtOήOg8q{Efgӻ۫8=7'ߓ>lS=7N.[ququxv~1XDpzz99E*y$%} OȒUhlpA<OɎEBMqZV:k Cb:I* $
+Ee7+L+mʤǗ {҆hjsv_"ÏnhN$]v8cp*_b8YcxZq₼ o<IjA0V! _mЀFVt|%<dz0s`2ROh0p#(d $F"[$Mo#h8w@.-e<Gl5N"CI w%[2 ^#pl %'!MXiiȒ@E<Fb7}kLSmسo
+㜫θԨEt
+c^V#dlzruŖ닱}4~< *l}N5mH)L)q
+.@1wEdXnJi̟+_-<cAdiRH&t".<|?&!1k`GA (W[i3F%Hx_6 V{7_S,HAQ<_ =R X2 `U^?[㤸1e@XmlMe<2
+-=D,YQ؃ta٣4(djUub[,)4%` AQGR]0wWT{-8|g 4t=dXk9@KXqN]g+ir؍X[N%* J]_LiW@Hu쑿*lH-W5;n)O_-mP*RIs,<=?NJK(IL迬v 3F-iL&ѯ:ΔRȆX7lv Y^kH,m&:2E?,lٯ[OsZj%+ kh$iV.h.':bH7ŦR=N@ ϯHG 3hd:O.:,מbt2#.X',[꧅ө
+:wZ*[di-+pEI<.X<4[>-[Jj68I\]
+FQ9gV9Ʈs/bR'
+}>I!f@zM+dgEueRoeM9#њ }sNAqsڍR n5ޭJ.q UNQi+o Njm=5vw\mj;TŅwbUP
+Doze@
endobj
-5410 0 obj <<
+5790 0 obj <<
/Type /Page
-/Contents 5411 0 R
-/Resources 5409 0 R
+/Contents 5791 0 R
+/Resources 5789 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5398 0 R
+/Parent 5799 0 R
>> endobj
-5412 0 obj <<
-/D [5410 0 R /XYZ 85.039 781.388 null]
+5792 0 obj <<
+/D [5790 0 R /XYZ 85.039 781.388 null]
>> endobj
-1602 0 obj <<
-/D [5410 0 R /XYZ 85.039 268.85 null]
+1642 0 obj <<
+/D [5790 0 R /XYZ 85.039 444.99 null]
>> endobj
-5413 0 obj <<
-/D [5410 0 R /XYZ 85.039 248.26 null]
+5793 0 obj <<
+/D [5790 0 R /XYZ 85.039 410.85 null]
>> endobj
-5414 0 obj <<
-/D [5410 0 R /XYZ 85.039 220.497 null]
+5794 0 obj <<
+/D [5790 0 R /XYZ 85.039 380.966 null]
>> endobj
-5415 0 obj <<
-/D [5410 0 R /XYZ 85.039 191.278 null]
+5795 0 obj <<
+/D [5790 0 R /XYZ 85.039 340.319 null]
>> endobj
-5416 0 obj <<
-/D [5410 0 R /XYZ 85.039 177.122 null]
+5796 0 obj <<
+/D [5790 0 R /XYZ 85.039 312.614 null]
>> endobj
-5417 0 obj <<
-/D [5410 0 R /XYZ 85.039 137.081 null]
+5797 0 obj <<
+/D [5790 0 R /XYZ 85.039 271.967 null]
>> endobj
-5418 0 obj <<
-/D [5410 0 R /XYZ 85.039 109.982 null]
+5798 0 obj <<
+/D [5790 0 R /XYZ 85.039 231.925 null]
>> endobj
-5409 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R >>
+5789 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5421 0 obj <<
-/Length 2615
+5803 0 obj <<
+/Length 2451
/Filter /FlateDecode
>>
stream
-xY[o~PӇ!gx (lEn M0((*)f`(s9sw$
-Ih?Lɢ8RKH _E~D+?Ud"ӳ7YN,۳yg34 9)B_M?9z1H53BчOj9R~&kh+_826 9:?GῡW~fbhO߂#p3 lAhei{n; R5%\fәA9[i8Mg%x2m&^>\5sp¼5Ս̈hᱚx(WzX`yO:SCޑb# @rߏʪf kY SUˆ6JvEYwSxk1S; u)duWLx=V>w.wZӦsjqnQʗ7b8p瀙uY7p >~e8)Mu:BrYܟ/puV]!~hb_p0~]oں"bp
-0**/@/] (סPa>h^TG6׈"?7ph޺ӄN}fT5-hMgFapO@BZ&/mM\ݝ))"|4>*m ZZ
-抻/jU6Y+; wp6cG"Dߒ1ʲD5`Prv7|| ^ C'X#ZÔR3&O*c$a>p`pK"ZM`JPe
-©ԐQiqpcMMGqp 7@s3UcoƀAX#.e.`ɩQTX&6@CFAѫm"ǁcI<p8pۃ@ʅ/^36>mIY2cO<O~˽ْe’?=LG~)~-h/
-7_gu0Ef(//i$3Õ 3Wwn>/4 sR|b`FɊ A1!LN;0Lt~ E޳A{@sx -Ϡ\s7.UwHxrU6@HD,bG5ݢqw=MP )TL|KB "rDxk|M閨/-!.ݻ+iruEITKNq3Y䕅c­RV}T\ݤl7nf1T:91EޫʘqWe|&19l Ӎ9Yr?S4Ю>45ۑWYSh=b)F w8-6FJ
- Mizjy'#!`~ULڎ*}  GRv`ı)!C@ =Zn0AtrbFabSy6[,ujd₣'{JlX &]?n_4MwSi2ABecA Ρx
-N3K2q(3JR|bfqQg$-mXF|HYgev!%h/O/m1ơ&`6_ ;C @+endstream
+xYYsF~ׯ* V# fR)r"fˊVNl?@HaM
+NnOݲ9=UPL`gg[ΗBRD-g\a\M`YخjƸe1V[.[bgRf`vSIR;bYutρIFخV} {hh@i[H
+{Z#zLiK^OH:sܧ 86f}@JQg<߳vb`"-pjܱ͹'^9]URi8f4d{7XfkT%q
+4=xT$wIװƀN B+T 8{5oQwDp0H8Dq:h+8)O|PCk D;PKجNL'?Îfl:#:;Þ 8n{`dx! U_ſGV<O E#8{pĠKptE*HAСPG
+ud8az]CA[ =:Gg"I8 TB b{b/1)b~0iShDJ#6T7!2B]FCxc\^H9aR
+ 3\4) Y;.l̔ulӢxNcDoIOnm2 4OK 8QPXE3e$!H<ABq-0>e ѩq{BM|9mBw'Ņ< +:A,`)ɏ&ΩE l^gh7VknsuS<pȣeqQ4avg*J~kqR\`Yt-Y,6Mm5rk"8 gK}II\`8.wtm'E8~UpNT
+8v5鈁ЪPp<}` -r ,^6lB g6uBK7$_ch{l Fsu)&InO4p6]EjzZ_N:^I Bkv&ӚYeokbQU@ISPS!0n˦ KI7ֺ7m m 7BI.t3^tA| j' "_̱D'ߜ24@*I4 gpYZuZ|7K:$}ğIXsg=79H.;|-_,TXBjsm F;Z
+LW[[TaߘErCLd3/o~ΎT4Jj{')ǜ G !3J^8(fy;9۹s06s;U`?Uͳ֣a aT(>RYuO/# V>+COS,vzDZYL ȫ\>@V·weQp3yj=M/ޞ.?KXGnq7_M>{= ҿ*UYu2t jW:n虲.-{v5ge^me2yl<607oVCE4y1=MO޿»}R?У ԐCْ?38f}Ў˚h+bC/3xR
+8 _ UV
endobj
-5420 0 obj <<
+5802 0 obj <<
/Type /Page
-/Contents 5421 0 R
-/Resources 5419 0 R
+/Contents 5803 0 R
+/Resources 5801 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5398 0 R
+/Parent 5799 0 R
>> endobj
-5422 0 obj <<
-/D [5420 0 R /XYZ 85.039 781.388 null]
+5804 0 obj <<
+/D [5802 0 R /XYZ 85.039 781.388 null]
>> endobj
-1606 0 obj <<
-/D [5420 0 R /XYZ 85.039 637.475 null]
+1646 0 obj <<
+/D [5802 0 R /XYZ 85.039 761.463 null]
>> endobj
-5423 0 obj <<
-/D [5420 0 R /XYZ 85.039 614.157 null]
+5805 0 obj <<
+/D [5802 0 R /XYZ 85.039 741.134 null]
>> endobj
-5424 0 obj <<
-/D [5420 0 R /XYZ 85.039 584.309 null]
+5806 0 obj <<
+/D [5802 0 R /XYZ 85.039 697.701 null]
>> endobj
-5425 0 obj <<
-/D [5420 0 R /XYZ 85.039 556.605 null]
+5807 0 obj <<
+/D [5802 0 R /XYZ 85.039 656.447 null]
>> endobj
-5426 0 obj <<
-/D [5420 0 R /XYZ 85.039 529.507 null]
+5808 0 obj <<
+/D [5802 0 R /XYZ 85.039 615.8 null]
>> endobj
-1610 0 obj <<
-/D [5420 0 R /XYZ 85.039 298.378 null]
+1650 0 obj <<
+/D [5802 0 R /XYZ 85.039 370.916 null]
>> endobj
-5427 0 obj <<
-/D [5420 0 R /XYZ 85.039 279.71 null]
+5809 0 obj <<
+/D [5802 0 R /XYZ 85.039 338.699 null]
>> endobj
-1614 0 obj <<
-/D [5420 0 R /XYZ 85.039 109.129 null]
+1654 0 obj <<
+/D [5802 0 R /XYZ 85.039 154.463 null]
>> endobj
-5428 0 obj <<
-/D [5420 0 R /XYZ 85.039 88.538 null]
+5810 0 obj <<
+/D [5802 0 R /XYZ 85.039 120.323 null]
>> endobj
-5419 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F66 3242 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+5801 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5431 0 obj <<
-/Length 3484
+5813 0 obj <<
+/Length 1851
/Filter /FlateDecode
>>
stream
-xZYs6~PeC
-\qy ׮/n//yﮗIr˫7ϾIRBٯ$,4Y<A9E.vgJVnf6Q3_+T*\2N9IhP@7؜pFZ%|]Uv^Ppa tͦ-=׽iǢrSo?a`8
-+3ImFKv%FPaMC)vK{wzovʎ+;R&^shcn<{sT{L[쳶ȹm ?qSEil`-"T03@ HivPG</vqznÔ݉Mn( vjj<ΎڳJKu=>$Bۅ/h`-֤^'
-xlfВys=ulY~z:Ж* DX25_YxGa4"C
-VUs1G~30F͛~FE$0.~I^ !F?ّ$Vg 4,hXj\~~>}DHu['f 59l<'wH5ycdd#:HŌZL9`EO͓vU)4j2Cn"Ixk^A^c&HK\jb^W*ssa
-XWO<ӶAuˋw >4vX-)KTOT}s[lgk.صF
-wM*CCt`.)Z$y ?pFE(KH*XKDP˘i(;=6NW7Ǹ%RKL< Ci4Ih1|O*B#}D rGg8c6@BW!HN^ ߌ@
-UԹَoxF&\aM[@t?d㣮Jb%pVw<&__p18T5QJ}[? ޚ$cXߞu˽ȗ1;0'{ٷ S}lat s*`8d
-gBi=ZiT8Lܚ[ئk=czx_X([AVW"벐9O\tX< XU] %c,T^o"T.#{v| WușO]/J\Nl20iRbDs]+`J҄]%@ zb7OÖ{CIҔYחkl{mÿ8"7j_5qf'9ŒHٰs&_|T;Z=DhEq?=e6w˸h8$ 9-pNMf'vO8)41*}@h+[%eUE8fup`JtPk3Z-H^q4 ]a 77z926em-zU3t?QdV\HHp6J|uBk'y -eZ>>?_Ǧ IyKc>qS=NXPk958ټBO'C7˥O NwKM`1FK ,4w-ܳD0UealN1DZYCL80U=s56'3Dc$Ys璂,M"l
-門hTDV8Hŀ 3$yBo$Nv
-FxDؔv©'࠾qQ9gz%|R27/-Le5|i+z}6룣$GLr= tÕ;
-%QKąC7-PVcY
-"8z4x )b9IBM^<<=MυO9UQgvXAh뱱sw2#kGI+GW N:.~zg=J%+Tɱ„댗Ѩ~ok4Y}7V5JMmGJifW[ؑb3'"3ί4^d Or/HP"NRp*9u1%K31s㣦]/³EIIR2bl'I_yz648C!^ވؽ7NbC` b*m<# R(0"oϰ}5QyH!7_PP7~Z%XgwY17ջ݈L[+PƉbF _,QD$W-ܜhtxh4 @Yތ6R,I=_wӨ:~B>aAK\{c=\`;ijh|C)>r-+FUpdBFfcjW<I6bbL 3gޤC?-L+}X
-ow_endstream
+xڥXKo8WTVH=66.@ۃjˉJ;áP gy0܋bLp&Iλ w# 4J{<bizUGXIo_|
+B)SIbϳ״:4O,EOW_.h&Y|wv:V)s[-J&a1ۛ T,|=ݱأScVi)BDcqI8q@<y!$ e,Ym:#c*j$)J]ZDӍHhʅkf8ޙ+&gX
+
+zc,8"kevjZ\ #C,wD#N^mɗPkXx\rCb#:fu$y+Xl2 *'m$Hqh*o)qygch |CZ ȽN J%(j^@QzT5jv=+zĵp`h|6Jt ,H&ψMQ: 0hC8n/E^bn:G"#
++X3BF$;=_t
+_n|m|LiRڮ/p1  fJcc39y)tQ^]Ve
+ÎkG䲽^C:/٥`Tl^Y[]-=Xfc0`Gے
+(U$_4 .:>,FwNƊH*}%qN=Ƕl<h
+
+ǒ Ds C7ˮL
+[0""qF;ei :WX
+,ynkr^vֲ]x:]lE}]w=CՒ6p^d
endobj
-5430 0 obj <<
+5812 0 obj <<
/Type /Page
-/Contents 5431 0 R
-/Resources 5429 0 R
+/Contents 5813 0 R
+/Resources 5811 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5398 0 R
+/Parent 5799 0 R
>> endobj
-5432 0 obj <<
-/D [5430 0 R /XYZ 85.039 781.388 null]
+5800 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 780
+/Height 667
+/BitsPerComponent 8
+/ColorSpace [/Indexed /DeviceRGB 31 5819 0 R]
+/Length 44246
+/Filter /FlateDecode
+>>
+stream
+x] C,FDPP@EDt6+殶EEuMRJŘHɫh1',$$IB$ I$,$I$IB$_Ѧ"N
+e*$7O=KO䌼P>D_8JPHy %Гf^/XiS'I
+I }(ӫxG},=t"~ x)nW{^дN[ -+\ױ[Qү*Z]5mZy|uj6䣋xA%yssxbNŁuռ&$z_ .An\? )X W+Cr7Mp1 ^Սs0EO)^k}*$߅ڒ#-[KeF Aޠ SpmBS_ 0
+,Gg,e2s@j@|'X$q+|݅L+ PL" q$_Et(i+Jw<N|x[pK4=;>G v,wd,|)"D:ӛX?0]/qۮ,<qj9㽳yf`AySԞ\{&Y+ܑ9d+:j}n/#w ͳ=9QtrulpFq׭dNj*揺~%)/UOeO5Y,ٚQe[ɼNqbyqh
+RV up=Cp%jYn36#l\̉\BhE" wLR!V7ŮZ`DCCQbu xt13PKQ-F^b= uwչㅙ`8Qդ8@ތm/.joC $q(`(
+:Z++" Q Cb8{g (` $uEEZl?bC=䢅g}^Z!;Wuy~2o\QX2'şI=ɛCA&%XVCz ;(Bq~IŢX!(=$^OnLB/{37S TXwX֫j\ؚ26qh>2$\<3X@C߭rm.ba;, ti<\Ux5w{_nk~~hxͧF \Q ׍\Ն۶-^Y%??hBkU <-,U5BCN'~uT$뼗\ ۢhb)r>[b-` ڍtoZf{BlM m4NڈTSJ$õ(q9/cjpB ӨSA3, qrU$ޏS:9&
+Zk,V]ꨌ^nPPJ#4h4~:J).4>4Ba*>tW8J"~Qud= m{^n}|TG
+du<?lvz<, u:cC?QUp-^gpS+*(/ ~ .?-/O:c2]3H5xayS P%, iUGx MVW)K@
+<BZҬL:.p#H]:<OF[{M30[Va*>_0{ ]l8y7/ݻǑ3iO}tFHCf&IIY =6B $G?dݍ1xјyBкqrbu
+h
+:< znܞY- K :׼k70c9(YrU4o6Q-ya L[ke,(A[6- vo.Kg$?ֲx55M??x̰v/E9_'fd֏&¶f+#A 7^ -{OOt8!|X7PFˬ |W7@Chj-`e<;b%I0X{Zj"R-Hi1ulY&eljBCSC-"^ʌRz8;)>GEM 5
+ߡ~09#tx\3z'1*3>v#H 8Qp~S1+qn#<~i 7_KR`RP:
+sn*;:ϫ Pl-hêCXuE_չrcy'AsZt11t>0|}9'\AQ?O~dWȫz5
+.c<+W Ch
+>Ӽd^iU=2<:5%1F)VF&x0y+krpF rԀV<3ژ]xa`!
+Uq|`{?/lSss /m)2rDCeUFU.:'xl \* n`aC Tɾ'QkZ:Wt46Ut"g {nW ㅼuq0 /yaFwj3ڀG1ibswz@ W\hMhADVBrZ),>F2
+JeiQ2B!3a2:D%J( й*ƔB((D8=g`4#  ٓhxе{I~k 8*<lB^=(Gk[`S!v`
+UWjj2> />Z3sgNiL W_>qi)y l1(ϙж5mP=-P
+jUb/t"P1Z6HgC˔m xfFUQƌ6>nvsάJw1pgF]X}#;
+1bDǍhyzBpM^X
+ưLI7y,]<6FC;>_Ew􇞖r b=#(5m@.`%I-iA`\4x<Kv.^o͜Yfsf@trg]q_:k5TfV'`l)+ ')ǡ̴kPP4J9a]Fv01Ƣ@ Ċm% \FJt ehȄT" at6R[Y G;p#^ԬO=ݫKĂ8&ټW@ޠxlwi/XY
+iw3@OE`XP
+ c~Vް U%y_+oRZ`MAvUa r]`"gXi̲$ys Yn40ZLhHfeuLYe~)s -)S(@G$e/='J'RuܞR\Ǯ%DHfZ+/M|Q}hOkcV
+:h65C:QHvTx:tQehpW@Stͩp+5458dee=>PبN՘<X /0Ws^B - t1|2N՘CGW/ŇK(i-4-{xG^0+;Z@<l%,aN,XK@]>b;|BtES 8+2D,3Be#=܆eKx^1j ˑ1t6W"VB9ƑʈWQ}o{(`awg>f`6 4󈴼  Ŵ= U,l*3<vU,< Pxj#}~aYBy hZ|B!Qfq{8ret'5.AZ S7Nn.
+v_#/9J/9Y]q8 u`PrN'`kj/z="t" igq&B4aSLi8q<id
+;ay6{0iڹCsō Vx*D(Sy!H$@&p8XWef pvN4=ԩl[Ѧ\N0&Ӛpfeyfֱ#y0W_L \dk;l[T ǵHHCv@о*Hp:"F9ruQ)xfexqpG E ӡZj^ƀKg
+J
+jȊ#2su$kt_Adafn01&1"`n5LBf۾ƮZ)ޗ-iM-!2nV\HCG҅9tNGjYT"bA $ -{7rɗܓNE9qJ tG#. T/8ڼCGz*cibND峀F
+x:$ZTI :=4
+@e|
+ 0 .B+A=ÎmxrXg4v=޵ML*I =!+ xF3
+ ]ʅd]}CG\[< Lk:,Q;/i(،CW\{p6b{~s,ȨX^iev1&&
+j]Pb5mŕO9X ARH_ /k>flf*zw)ʊ$tFtM uTajTw`Napxj:HGx 7Kf
+~"h/FHCUɘm wr.
+H]<wDr~mM׵8S |!x9|`Jy#x!ƦG,Z^Fwv?mm_ @xPNb%)=1,Zf_N^&0q5r1|HF \<u$cۡ`Ɍo Rb)Z2 j[vGh0RV]#rnJ3WV_,X`bnW}ԠHxI(]#isw't$ӱ 'b_"3mlfO*y,o y̹=
+lM"HC_1g0chN klz To2h+uv8+#k0Č*JA f8-GJ{χBIuS}!z0ƙsɋB+gijx OX_ 9Xo䛭_h8<E|ygF "H}gtWަD`)jOR[a/0;v շS<:F替'/@Z -*-yAIRJNP> B\2{E<3|o^p%m,XJ 8C}4 )$Gc8Ek> _ "? 6'+)ww"|3{-465ď j~3y ž% ; %l/a5mN3~ L 6?]mGNМvOyެ4
+9n L!L~"z`:[ɾ.3g7w^0w!SL{=GZ
+Vhji'[^[M؏ n~gmgyvlӈz0+ R5$ ]x$F\܈{R'
+77}N0?ͣ<L^ȸ-~.b,,댄): V'҅yT<G,|a4`N$<2 ;/ /Ը)iU"=BTtvxUW
+WnqXؤ'[>m)こLE:y7ͮ3t1j8
+ k~jMx 0;xQ˜D0m
+kb 3}5nAe i},$^X/16w؜8w^8rG0nK~8b
+{cNJإ(ʱ.h7xU[ˌV':<KΉa/(3)qƘrPzjNXP
+S,!MeBGVcX /<9Ҡ;/ v?Uu~CGWט۝O=pds8IRy/?t~Cx=8?RM8`8;#=>%
+ڔ(?[eހe8?߮4 VIi86߳8'w7t9l才M_Z2g]Ope޹D9S "5>Cx+粘pUВ.@q#c7i@>V'ԁ: Pb\t/w%djR"Z\Xgllǩ{t6fXNBa4kqxZB^W\ 71O*fn Z[fMe7%EJouV03IVH9QB^ V5{" FH7Rln)ú"]6C[5
+B.@4 ދ[
+͇\sDpp(qT[~jF:oBoK$͌!Bs
+r=Qvd9SRdcvJ) Y߈|.tgo㪧vÝZPC3+Z,aB>cOpPvZV$fpT5vNE$ 4\`_:O4i
+K4 ?a j1ly阷TyYVJQB[.yN uZxi| Rn\a
+^H@t
+SB۔Շ!C)4k3^bc-i(&:.sCZ_VԨ#f"hCL A;dzBτ !n!?{Wp? cX\T%3=(d0Q7l}Z˓sxϳހ
+b 
+Xfu"Mt
+y 4G ^:) ju8f͙NJ #!yMI<F0(
+g
+ :l/'t鰠h]usm=}V7=U_ I/Eų/$,mwgO)7Sݙ Mx!aӳ\ *DOR fs%^HXFkGgfW홑g/$,|Z ؋RZgܗB䣴;w,t0,ڿB'>Z4H p}{ [? H144N%FK1&:d?;Pz<zϯz^H>I;{!^
+ַ^4$}ɰŝh1/:q`/>&0\KDEWٰ=!4_h:˯]I+S+4} r}|͘o,`u*a~X /8tP$! Zo@z.5*ІbcۯOz ҵxeof/ xj~@ RZ$"'o~>+\V'1Fa5)& 0'BBE/ż55[4bgۯ_s4 6(\)uXm^{9ư+8ai0cho<'\_B D
+_6']!XxHB7^3Ԉ6o/_;]
+j;a 
+y̼k0wܷ<3y |cIh3b!^X)RKP>SBvi߭w͸3y5g[zŲγc5,N/b~+Z94 X! n#XļYߑ%rF*>DCY%BuB
+ES-29 d{G3ƻ47k'Â(yX_Ύee&f֎wlE9PbP͈ToٰJ~)Wb!:_gq>lxoAwFWD$Ot!T1*3^C729cGCZ1}8=GTmy<:c7kHX;WxHULzSs<ql)by}@⢅wן PȥxOsLzDV4g:i0 j: vᒓS54J ){˲b'T΃X%UJ{c[گq0)WT~u,xu<g&WO!]I_a/`!4[u5eiu^#3) i cǂlʦ2$&c|A gE#c||eSEN`e<ČLGn~ \>1-6s0E`a^ )i_?2KMaFtxwGuB\:Vkh)or_d 5~$^ XI ҷEtv4n/ܤ+/\[ąR‡^7 WF+ZT{TAM#&CU8*yǧPsvp*̽4m*J]]cL6IHktH*eƔ4Z0U^D֍3SPpJ)2S0
+sG
+(c7)='a5}7G0ޔP4*@bP\Gqu)B{ p
+3GyG9:@B ɰ)ɗƑڍTD<።.0zQG ;
+ .^PVi*X3lBcB)E?k}LZ^LXnZ:NePv:⦣#ty!@:qp1Py ql4[G:9|V¨qT |{aNxA ?R 'ÂtJPo:*qU gS@a'u]h;^{y!ޠ)50+CL#q9u3G,<D@z 8۞12h>:(>Ptc,83XUnYG7Yְ
+L,3Hh'MC2k<,Ȭ6b]bDPPED}δnsv~q|| $;kdCyg+}شC[|r}D(-՘XXE, q%d)mK jGNYj!z  qp?cQ1ImW,WQe6EU5X$ Sf'Ue
+^%u눿w7aA:d5sPeESv—E|thĞ )I1l`;JO덮ԛ`j$0I`꣧8#P9,![6#
+ͭ2˕sUO DQ&̭+ڰ<gssn%I[Ee$u{VxO(௰0;*[%R`]cľȼa7O<`Am:6_wDN٬$cp0zς4RTQ ѱ[|Ф
+ƧsD>X7geYn ғ\/S MR #L96SSb#Q)
+~0xd4`* xevLEJcX ov^{Vǥ[4wʁ%2N"$BJ_ o+
+Dj
+F@s+8)@Ex8^
+)M,TqsjFh 邀Xа &]&O-PThΙIz-4p,+Etq+6񢂧1qz8 Ƽ3BEǰe<}1 K6 CG:H^jP՜emO2
+HMDQ*E=.r/V:q*ۈɯ+Rf|boj>ۚ >Maב0u`i)
+i80IHemU]osw!'4'׊,wj)(c(!q+jDVq4n|g:(umx́|BfR5.VĂgͧJn}Afx3BZ^
+,X
+hƓ=oI`5,F܂`(C
+-玠<(-yJ>qF k ȢbSI'H@] D "S,_D lLBʄ4Tތ\$L#qGtDBtupq7z7.B5/d1&ι᧝ +s\qyy+-ÌV^VՅq2z <uWC /T㡏p.zzS$W$2];m]e }gn&Mp-IS!L>.*4 q!8
+(v"dpjm:<5ܸX&6I//%b궤Ƶ%ڨ\z;w{f{tk^
+M/jW\cJO?Go lX8y1xQ08pz8IgBSG_t#{cnu͡0:ƽjpG!NL%ؒ .|2 ڳ7e_A '/</H٫S_:l@q f7!H_m:<Tb*|2y^4y Gd)hN'xĎ&Mwҍϝ|$nF BB->CoπmO*z—iP-QL5״Q) ftT\TԒM\
+N@g=хY1dZsD -×(u_wǠ>K
+j#a6B. _^=W|{|sX0[r$kѸNY䎑p(%(%LsY
+XE^pPb'R8!81 > lƍ N;wY=y Ϭ\KE:\/By,$0rRi1(0(=sJHFԲT&:1+IMW)ysѯYJbkŘ- V]x%+k6Vݩ}l8/XV8>؅nhX/JQh vPTJf?`bY
+@i+T<B`ռC[۹t UGU0m϶ _HɈ
+LDk
+;Su"C>{
+ qa@n F(u(4nǠ dK؟Kq ҾvZ~,4/Pdq9]gfHPzL}0vwlfu}S^pMfBڮpb^~Lbhy$Jڃuk?5/m9״ w;KvDM-]E_bAh=`4E>|^3IIcHdx<9of%0*^9B/&ȡ9) f&IڠیIT"B,$OUҦ_,#a&yQL<A'aZw9›KKC1C/wyX.PKH2z vr ']tu.k5Ϝ<m9?G̯/-orUà;Sl#/X9Wgs,b
+DW#v3%*+FKQPΉ"1a[(X^C{{a
+6 }4 ̵& ZPdKIME+En/-7u Ѯ;¥?0\$i 3bX8/"ˎ X9D
+kwa$C:XOgO^UqlV⹵['yZ1hLGjO^*+O].KK=o*5@xA!,N/iw \.|$Y BW2l.F^_TFyq?Dem{_ȍwQޔ..Mkf^ |^uMggo5t}~ī>r_;ـaΥ6#BfP LlOE?8пԘkgBʮO}~d=9Gvl #BX$e!j^LuWWlf>"ާ4xRo.йRM/$6:Ʀ`FjC<@5V_uaB& pb&Hw$|{I tb1{ۓF[,0@ՁIWOv3hhWbOw"ŎHu_g`H(ޖĚY$UY̆RRFU6jh7&.Īi*'f~eUVHǶE
+Cw6SNNu9 ?pL (PO/no׹FMNJht&'Uۦ/Bf$>)#erH*,KUh( "dՐ)V嵘l!R k#u"ZyCٟ"!OkJ g3g>$5K1kmuQxOxΓhV͌N>)Aêg;T!
+(ٶ׋hfBAQ0{e7*6l
+ lЍj)pE>ژ9T
+j^EӲۚuU㺨 5"oŤK\wb~XDT^GLJ&ּ@
+H`Fy bIb[9*ƠL(^ ıIRZя[P#PN2Uj>su=$Fa*eU+dXaRH؉rهB+%AEeD:xchthB+L> wԅMb\@O {))9*C!xJi31K
+zZ2C$|!{y|;; m-#[ڙ%ꁆT6):8HNB˱i65q\xgXvr qOIyyV89W{cDt@igǜY\$1[pa萡.o.nЄFJ7Kk"ݓP%6| o ﰨ-%|{<Hc/<;u ?Ū
+r{uOf+^z;pXwxx.jm|?>-_[DO,pg<(@up{Hˏ ") ,{3xJAX /XLѼf{&++U2?@G$s=\*`Eyq>G^kՀ|HhyC%0)+B"B.N.i%ݝӾ|TET2 ʛb;C ' Mw,,&
+4β@V.jإ8Q^mYC*<K>y6żHv$ZLՒ{ lm rŃ9{^zꚢBT`^V(u=^Jgʨ)r;5,bw7ypLtPsB1;`8ztBATVζO4;X ɼ
+V.i.X;햄uuu1*WM jF7UrQʻ&>٘5xR4oyq7pw9SrXp9DqŵR8X0*?2w 'Y1E eq92
+i&{M@k饷yJ2E6'YXk  o "xAƙ;{l L=jD2
+R=f;!^8nHK_3G1=)Ϙ >8ゕq }"`!<7
+˒UYYh]pU90Iyb <.+k<.%ὮY6]R3х`ZnB5[œ#ㄗ
+WE3;ԎpL 1*-me`,DCVl3T׷S$a1̾an>'/|^Yr Z41ҹj2cH fttR Îԓ|/
+sTeVdlb/4p 9ar'y
+ #*_j0Uj:M5!V,W dzH58ٺUmbRsJyx*-j#%,gb/ v(]"hBi361UAkCְ.V.T<ZiϝB)*fO,9z݇Za_s:m=35^U<-һSk෽5,vS@;MPA7 GXHVvTŌ>ltE^?Oi
++^[?w\.p>sdX;1E9yx3>ݟΡ7;M{9Vs?}UcPnnT= /헱]Em6נuo9fys"z5"BI_8MAyW|q`La}%w??]: '/</a\2cl^` w
+eemgy8nTn+ab3
+ڋ@A-Z}o
+֍AJ,=&8YR7u\$-%ŤALނ~#u[:8V/@.#*αe/VB6lR
+φ7`h+Fi.z]zHňXJuW"iY4Fl4`bd-` 6BSg<ƒ4̚e׉P 7>造|ڠK0"/p'CK?
+@[xVpr|xcq =RD:<3IГJ DLi;LT$wzcFϓ0c`ޢj]9kt[/7ǧtnwZh8{]J̽|f?*L%^Ggõ̽.~Y<p@Ɓ1  @wIG{#/W?4^˅A?= }xN^x0^yYdl3o  ?.!&C.LN^/;D߂N^}F 7 6\%|9)o_ r!^`R2 Ry?/Q`RS*3;sD(*wbAڲ:I#)%c
+AEwba|OO X8唯'ǧ?O, Dp)s!HyyX)HL@:}0o\ͫI1 7:L~A L.$,Hw+ٽm_S'3<*a #\t)L_殱.uw|}uH`c3`Q4 >шofS.=";JXֱ~9Ny9(e.;i7O8RS
+
+jˡ#g{΂c.,xQ=J~CvÀa\<4_/ >y"SГ?6k5;}p1ø>$@ჱ«
+:/^w>#<-aAFܷ#J]M)X8ϕ0L4HK#XV)%xMBGષ>pʗXb00i-Swc+z1/.;Ǚ5'NXP ~j;(U8|bF1'Q-*}bo'd"SA-lXj'XМKU9JN,x-,P։1L0R8\t#=+>s݉Sjw.o[R.eXHռ1?:pʃcA2vCКu}Je.,+EsԑZ+X8 * )>`/c8mRԸkjF'Nn5b PL\C9`ʫ#8\0oWX=pC&ƚwe㔶A:0}oXF6eW_/{M <807yH]\H_Ͻ|1N,-EY3.ƉS)XΉ |W%X8
+J-&r
+$&r
+
+Q ?o))\MsbSP2~br(Ege_{^7Fnpʺ֠3]BW%kS74Nt_&гË_d'zcX= =\(ˁq-' 0>
+
+KRAI"^LˌZ㥏0+y>^Xnf(IuBLpPJPg;g@.>iA_.Q4qn/aП+/N4HžN_W^bXz8&TB0eB^H nך ݬ}_WJ5kFhF|SqJT:@ll-W|辧k2&kWݠxMeTF_o^ U5Wztg*+htH\QTsA4d6N!2Vgb֍As!82ENjĐ7o(
+V"X15fw^.ʵ%-wo.PPnzec`J[N^ /?@A-f+Xg4.`p|B/~ [Fi^ZkTmo
+ЁT@ Z2C [|`a9t X`*"H 6+鞱G[FVRA #X
+W> +]GCf\ۘe4zcI 68%wynWc/ 4BV&
+Ty
+ ׉+p_3[j1M$+ ~HEZX;Xk
+
+}2>* 2xaw]s,ҏW{W(_Ur<) GQxz]WIF/ BPHNhB ޢb? I7#
+% VL4'S 6tX}{Q]uXyo)oBG<Uj4KEf>(Ad+* ݕ%0("[~э8S@s꾧_FtWV9e1Ց>xa VJT4W, #B1(GXhڶLyxsEWVGRT@G =mx fjl  #T_<i/0ig"uZsHJL-;҆++D%q= p
+E%v[
+ڌhZI
+G\#//0^Ȟzic!Hz <8Te+q5X.X 5cє
+ Apa=gbUo6 i d"/&/9 Ni
+"5&K-MA)Ǣݟ#t R"3+ V!<M酈;xQBk
+T 1zK;mh . [$X7,`m!Ddg[R`|M(pfe^"1۱63 ?Z(}ݳy1EvV9VvDU{4n/( SW(7,x]nTsBjDku^j3=+/L1EH)&7뙺ޅFNВLKti'V˒ί*n+4J9|R3Z.L9<Mr)ܺ!3-&A7ya
+)xv+/bA>B|0/yU 5I:ҐF G뤮:+> Q(:HAd)x Gb^HYu8xoBD}{9p';/T<֑L
+"őMTj  zZ 4xL GA z4@텞ЗOdx.M&7REVƁ=YIKy/-x`JHC]"I 튤\yڶY]T}fR33›]޳㳰tه<8#KOZo~;8>~ԒGCCo;,쒩m>[@94S}f^xw,JæM\r"Hiy@89U]ք[`_A Qɶl<5kAhqrHqNf4TX[M)j*Pn۠5gT#gP8j[pWJ7Ox{aC]1TF&ȁ:dV6}(ka<<[0W8w`d2VilFyq20m/8JRu!t*7h=ʔRP%=gմ_OxAA+^E⎌wX"
+3俁9F?Ton$uӑPkO@brdb3L[a%j8!՛Rus>Yq5R_XGڠt[Z^@rÍ9<>U( cgq {5+vI?K^Pa٥/'0tTY%jM0uS
+hu4-N#~7{ r1沑>(
+1-x'>-LxNX<!/L {X(_73ҦSB"%歚02f4+4i)Ra#Lf/>B\nBhd}_5QZ?rO:-l&:G= @ĚșfVIR"DI,=qЦH TфTKӟ^kӄMA}ҳh<,e~Zn Rf*1Xai n|qSI^76q;dح'\pjp9ĺH9*qCMm{FUz8^czl.`2k MK;YGj}F6J ^cZDo])9MoГdIQ5W(?rOL&m
+'K~Zu>CbQ[Wpm1u㊂cȖ{1v=>@;]LYeP[~5+:u!M9+1z5=1:[#^Ak<je _*ĝU zͦS ,+i1{_^𳩣}&[VPyƾ+O+<2jGz_gDRV-*CUvm:; y+gBk1fXB^*4`ȫq%z*$>/,H#sw,6׆A
+X;^+lWƈcntҼ~IoWКMRooX*ѓyazArH6Gl{M[q4ƪP6l(O$Wػ.
+q  >zL^V5Ʀ4l%-_
+N)6I:<nAQٝɀ5
+ɦ;K
+s'n;N]s^f,Msh(Bc$?ї:qPZ]^=c5-ts
+sF2WXI#RgQN }mϜܸ'ن^Ș8e9rtW v, pf^`,Kix PZ,j 3ZOg-'s]Yd/#c01E`tlܿHl kBA~@TAIQ+M`;ҚKMGKFc^x`y4ZuW򬫧K%VypLZ}VTəstOދBJ:6S*c;0{iS;,MmXh9 /<=8/T0^8xR_?x(j% /8=<߲9!‹v6C58,
+j~%cdѱ<x ϙ7/PG`*MSyO64+,8* _ c iYX_w7_*_4ŠUJ-'T+dTk#
+,I")Qs>6vX`@,8IHSUP&0
+u0e4 A9ڝZ)j_碽e"=9J/
+ c7$0D=8ĎB0lK;X=+i\} E9wߊ Qã^ʼ@",&+L7^x$$xuBq,jC0E߱҅А,U-93=gIMw6#n.!jv /|i^[RhaVy /#Wq{a͒:؉syš!HҜ NX k>f !c!/^zTz0& \٫4/_ժO:'ݫ MQrPE lr6aNL@umj`KHuQ<9|q_lMV-LQVHJz_," /}qH9h9M4nP
+
+Őr»aAp=]3Qzht7#=ƑBXxs\5o0_ oz0 IL ;78<@uKEn7o¥6F?cK%X^`_VU0fInۭ+y6rU#cavn-:_8ːh*;IʖI){^H2O66zKGiKK TJ&x,yA2BMhqM1 *.2^8&+S l[3%m*΃9]WjE{]s"ɩ2e"^֊Jޚ<xǞ1s&Zv&CSW54
+ZSgt#"ԯW$xӑrkvLHLzlHUaJg<|A _
+0Ҳ&q4SZ gdX]wÀx2Z]yZjO/,Y{rv/Ce)Z*}3+zn_/<[ť%Wq
+2>TȨAZ+Rz\d OF0D
+xA
+ t~J4ur^ ,pJsc]
+T;8 ^gc:{Əi^x"_r/Ho]:x=L$%I
+Tv^x^ P  IsMy -<Kko~/#ю5$7KjƖDG9 Jy121dfy5CQ9ϧ:]^x\c<6jͱ/|6ϼ)8RBWiB?m`Y`͙H.JᘂO"Ʀ d1tcUqŒFy0rO
+W"JkE,J $j*b%UopO KӖ+R8ɹjaN"<%m$|~{!OT^8x: /r G%/)XX,y1eQGr(G9Qr(G9QrR Ҩf!k1*yCx:Q>gQHxa+^mM}0AjU QVT4j< Cܜ]J* *ݕ
+ښ)"B8|V
+endobj
+5819 0 obj <<
+/Length 107
+/Filter /FlateDecode
+>>
+stream
+x`
+endobj
+5814 0 obj <<
+/D [5812 0 R /XYZ 85.039 781.388 null]
>> endobj
-1618 0 obj <<
-/D [5430 0 R /XYZ 85.039 761.463 null]
+5815 0 obj <<
+/D [5812 0 R /XYZ 85.039 758.673 null]
>> endobj
-5433 0 obj <<
-/D [5430 0 R /XYZ 85.039 741.134 null]
+5816 0 obj <<
+/D [5812 0 R /XYZ 85.039 758.673 null]
>> endobj
-1622 0 obj <<
-/D [5430 0 R /XYZ 85.039 255.079 null]
+5817 0 obj <<
+/D [5812 0 R /XYZ 296.792 374.51 null]
>> endobj
-5434 0 obj <<
-/D [5430 0 R /XYZ 85.039 234.489 null]
+1658 0 obj <<
+/D [5812 0 R /XYZ 85.039 324.568 null]
>> endobj
-5429 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R /F66 3242 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+5818 0 obj <<
+/D [5812 0 R /XYZ 85.039 304.239 null]
+>> endobj
+5811 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F58 3365 0 R >>
+/XObject << /Im27 5800 0 R >>
+/ProcSet [ /PDF /Text /ImageC /ImageI ]
+>> endobj
+5822 0 obj <<
+/Length 3043
+/Filter /FlateDecode
+>>
+stream
+xڥZYoF~%1l ,ؓģ -3!):~j%Q1̃jh Y(7Hjs^`,,o/NG3幩}`\||w?_Aԝ/8q^Εۻۻ aP9?/q< G&~{ H.~ݛp.<7Hgh{0~upa+ gjJ+n';P$;oP>,}hpː3U{pWQ8SMƻJ=7T'wC=)*ԑN$QL^Xm~< |sQĜYʶ k_T%U)?uX"buvY~/BO;]V0^@4uƭvǂ̠d?iGQF~ͭ럁r{+ E˺.rsT(0 gDzd@34f'];A>T=|JF@p | R](MfGs?uڲ YKQ֤&':4qF,p &jEIs>Y"dFޘN2v
+
+N]u7m.t{ [V|˺ \:h-LQ
+yڻkzי,% G
+JX0(_hR<Nss *se#ͨ8aӮle*^h@L<hgY5V°
+71 <\(Zx@Ul|H*4# {ʦLZJ(,sGAs_<Sk,DZ&)RlYi'
+8j8 pWع֞sڔ9&E"q=j/Dsc 7_:Ŝ8ܹO; &L{pO %`m!Sz4+Frλv=hZlk0<B$ܶ
+J(ȵ`hX=AT`)K+$Myc2fx8E
+;[^{rF<qNGD$@E>>3lߘž9p?$^Iʺ^dǺf3.$5ytWzxY-FcXfDq8xO
+l9KC7t`xB@ Ѯd{]I`̩dx4SV=uުF3V%D_3 G:8mUGppZUVhI=E "cc8vڝqoh;ijS8MïPj6S IzH"'#6G )&kZ3l=D ~3gK~Y[KG[s1(uƚ4)A ? *
+ Y6:屪9a :[0۲d)bҫ\_7,k_a,ȐUEsBE̞a8b4f-k)@v!gcGxcpJ(<P++k|rR~'5@$Syj񜡼U?qcEV:ӛ 0>or޾':<GR#r& ]Ccwo2AvDc)үbMpHCェ&?r΋y| qSf%"H)n
+endobj
+5821 0 obj <<
+/Type /Page
+/Contents 5822 0 R
+/Resources 5820 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 5799 0 R
+>> endobj
+5823 0 obj <<
+/D [5821 0 R /XYZ 85.039 781.388 null]
+>> endobj
+1662 0 obj <<
+/D [5821 0 R /XYZ 85.039 489.543 null]
+>> endobj
+5824 0 obj <<
+/D [5821 0 R /XYZ 85.039 455.403 null]
+>> endobj
+5820 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F41 2998 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5437 0 obj <<
-/Length 3146
+5827 0 obj <<
+/Length 2727
/Filter /FlateDecode
>>
stream
-xZYoH~B
-NG?xHLDgj<!2$ {T,bx(-'Z<pn7J{6~=nK|-`_K9^j.he[a jfnOi hX*T
-B}o9yEܦ47}Ɋ!sFLLk21ЌT1ՂYԤ"[[n `
-(&iSL[` !E8${idǑ/YC
-n\8ts(+d
- ?$xMoGU:*'Wn{Iv|&m
-Y.Ury 5]qH-G fI`1\Uו?ct$(C+PQ څ..+*F%?y"U(!ЄanZqQSձ0s$O!Ў<ACPP &' ^R[&/
-hn8 MZEwjt^YXF|,XYZ{- r@reHedg=p xp 9.ɱQka&$M]VjbdcN]uLƗn1,^% d
--&D:bbdkOQ|Y
-*dvտF*A9+sh3cendstream
+xڭnH_! F ],1LhmEF$"<'u5ٲd VwuuUwUu]t's'q`;*Dk8, g.\ uqUN\NdXtd}/^NgJ)M,bԵ:}sxs|
+N);"R=V>mT9v ~ewy!-G 5?e;"Qp]>%[9` <CQa~MJa QU
+(EHGQZaVmP#v-HZ.ϵ')I4nhYG\ۆ +H1PZg7.GCãH%h_
+}KCMuiYטhnZ[!݇x ?[ ^U˕U'U=ð`CO%
+P"^߀5ZK?K1-RcnBZ ➊yYe?S*@rE`?t/%MT/ ")(g4-fXicxyDQlhBw4$M;n=`^d;ɏbHǧ8w#D;
+!,O~c?Ѩlj|#g;@HI?{I;d{EQ> .Yz @:A8,]W
+\Kh8-.΍-r+9KԼʿh
+@8%CG
+wd+/ӂ.;0V_,>eMģ2
+`=U"*5#xgp>_mפF~8? ~Tq,L'trH )#ޝl3 ]n<+i凛zv|UZ'.; O_~CApSx
endobj
-5436 0 obj <<
+5826 0 obj <<
/Type /Page
-/Contents 5437 0 R
-/Resources 5435 0 R
+/Contents 5827 0 R
+/Resources 5825 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5448 0 R
+/Parent 5799 0 R
>> endobj
-5438 0 obj <<
-/D [5436 0 R /XYZ 85.039 781.388 null]
+5828 0 obj <<
+/D [5826 0 R /XYZ 85.039 781.388 null]
>> endobj
-1626 0 obj <<
-/D [5436 0 R /XYZ 85.039 636.493 null]
+1666 0 obj <<
+/D [5826 0 R /XYZ 85.039 761.463 null]
>> endobj
-5439 0 obj <<
-/D [5436 0 R /XYZ 85.039 588.965 null]
+5829 0 obj <<
+/D [5826 0 R /XYZ 85.039 736.114 null]
>> endobj
-5440 0 obj <<
-/D [5436 0 R /XYZ 85.039 548.915 null]
+5830 0 obj <<
+/D [5826 0 R /XYZ 85.039 682.515 null]
>> endobj
-5441 0 obj <<
-/D [5436 0 R /XYZ 85.039 519.09 null]
+5831 0 obj <<
+/D [5826 0 R /XYZ 85.039 639.141 null]
>> endobj
-5442 0 obj <<
-/D [5436 0 R /XYZ 85.039 505.541 null]
+5832 0 obj <<
+/D [5826 0 R /XYZ 85.039 612.042 null]
>> endobj
-5443 0 obj <<
-/D [5436 0 R /XYZ 85.039 491.991 null]
+5833 0 obj <<
+/D [5826 0 R /XYZ 85.039 584.944 null]
>> endobj
-1630 0 obj <<
-/D [5436 0 R /XYZ 85.039 368.071 null]
+1670 0 obj <<
+/D [5826 0 R /XYZ 85.039 447.474 null]
>> endobj
-5444 0 obj <<
-/D [5436 0 R /XYZ 85.039 344.753 null]
+5834 0 obj <<
+/D [5826 0 R /XYZ 85.039 410.607 null]
>> endobj
-5435 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F66 3242 0 R /F20 2865 0 R /F56 2890 0 R /F76 5447 0 R /F35 2880 0 R >>
+5825 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F78 5837 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5451 0 obj <<
-/Length 3135
-/Filter /FlateDecode
->>
-stream
-xڵZmo_!(L5(Z8sI8-7-.aMkԑ)ۮHNEh;;ܗgƟyǟlto|䋄7 ]/p觷q8=7D_N/gR3wHy}}1+||3>;8r*gBç^rGg
-/zÑ,~6Ga(T\]jpƳ&6 h(MОM§u}nnMCϪ-ay:|;2;{RCbz> ~(k;IWЬH|
-іf}#jW{-V$K)<5t!{2k/J6
-%zŃsprW+h+}|=L3#37߶p0/Zo uq*_'œJU9j%링}3כz
-n K(X\fn 4[<{I:fKy3GW!%Fv<DxW"T \(T o@ps 1EA]ъRh~aa E&ܘzq-(A<e?w%ΗyM<>XѺ5:%haxQaP XRgU 4L"q_"ıސYiA&WOf<~#N䁵[s=?Tw#uãQa;$ZW B-yœ]oHPО;Y뽁o5w*Cv7
-"e_-﫯Br6|W
-: q
-aH>J9qQF֍66XP/A/arHa#`-ֲt O8gM*<z@<
-wU)M(;,ErDT8n=P5;ÀDYخcڑHH>(n;MD9F{OϜ[ehM0v-ksT#33#:w.5"Ce ;h .@'ۚ ?|OFf/8~3LrPb@?As54{䎲_]Pȏ䲚48$Qpf0t&4x\ -Z >QS)h@Z#0/g[Su1>I;;Y&aCJ=$uQ:%Ԅ0'em0эQ 1dħg;G&g(O;lzO  /HKi2o !0_arwցѨD{N^N|7œw p` N6($A={ܯ|M
-]`Q  9q7BD p 㾎͍ylrJ 0Dt 琖 uixR8;tN"45?+넙'B ЮC9&vjk{cv=It~ 1mbR#k&rܹE#/d. svgr4 T}ÞQ:4KvkBדR" G;d?-( "<𑁜D&CF `FIVk "
-S)TqFp-e|IU=whPY& ]qC$L6E7c PĂ,pqupc|0bC lwHR+-D*ilV{*qgOO和-
-0k
-Be sdL Rq)}g
-WO\
-t6D
-q뫳Og8 /0xο'bη8ءN&ˤqX@#JMf
+5840 0 obj <<
+/Length 3121
+/Filter /FlateDecode
+>>
+stream
+xڥYmoܸ_pQX duHE\\$k@^Zi#iomܟQ/(gp8<3YJgq*If7_|Xbwa4=7:TW˳B);_q⼹S/.?/?= D߹/D9Kfpk)כxt4t
+ۂ1
+7ge휝;s<(έ/t0 1@!FM:8̪@ $ }
+7x̴ 4^=iȓHLxDA՞' mԙK3p?<tW p\m 9 )qtiUŞkH3r\ٙ) Jya&:2pWe"EIU ڼ*~{_&Ơ62[ FEbAP
+Ei)V w6-r!k>t0j٪1ӾJa E0RSUa
+=r!!{& ppYFJྦ[ze]h2U$a,0
+5U[Xa|-_D)
+¸2F'pr:Τ (9pX by}H@am~"3`lJFݕKWݩCpf:*'RX tcyH cPYc3 )
+2nTz;(Zk?9A^)L#񦱕O6X J;|o{h}Ms v6}F &ʸ4qVg ԟv|u1qbqnTw{֎:+❋@ECWaBHw
+|ݚ^)[1: v S4ܞ^r#)Wti|~Z{zX^(tاwNЇ[ `G:
+i
+_oܳN<{ "4)Qr;8lՆC
+xa@ tJs!G㞏Y8[Ȣz (c<4vhrlqHg1aϔ6a>1B_ry>wk|,\t"b~3?maa>
+~ :l9Q{Ƣ 14+
+vt?y- ໓  r箑
+Y#֯^kix|ɿ7T SNb;٘{h?}aS$0@ӥφr3S:tD
+eK=Uީ!G0+.vf
+dSnyKW-w O>O&-oZ#a"՜'Fl`珷j$}G""܉;+t0'
+.u{:> hpx3WlhGy5 ?[0L{xi~zjsh7Pl\ܤ4"TJ'/'?J\{F|?9mu+I%Gmؼ}G%cXruhn^~t Ÿo,!^ht$?scٯ<p| 7sgO8ﲂnGfPGa_J{F BS'0 =0)2Vp2&6{zcn#R;ϟ %cx7PV"ˡԃ7z?ջ0]>:<~|{Cr¾V:!ALU*o_肠%a[j4~xAR@) .k7ߖ
+0|xӘS^0Dq5/j|,aVtQ<pd <7HMhNcfV< ~i~-
endobj
-5450 0 obj <<
+5839 0 obj <<
/Type /Page
-/Contents 5451 0 R
-/Resources 5449 0 R
+/Contents 5840 0 R
+/Resources 5838 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5448 0 R
+/Parent 5799 0 R
>> endobj
-5452 0 obj <<
-/D [5450 0 R /XYZ 85.039 781.388 null]
+5841 0 obj <<
+/D [5839 0 R /XYZ 85.039 781.388 null]
>> endobj
-1634 0 obj <<
-/D [5450 0 R /XYZ 85.039 651.823 null]
+1674 0 obj <<
+/D [5839 0 R /XYZ 85.039 667.493 null]
>> endobj
-5453 0 obj <<
-/D [5450 0 R /XYZ 85.039 630.626 null]
+5842 0 obj <<
+/D [5839 0 R /XYZ 85.039 630.626 null]
>> endobj
-1638 0 obj <<
-/D [5450 0 R /XYZ 85.039 245.88 null]
+1678 0 obj <<
+/D [5839 0 R /XYZ 85.039 245.88 null]
>> endobj
-5454 0 obj <<
-/D [5450 0 R /XYZ 85.039 222.562 null]
+5843 0 obj <<
+/D [5839 0 R /XYZ 85.039 209.013 null]
>> endobj
-5449 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F76 5447 0 R /F20 2865 0 R /F66 3242 0 R /F14 2895 0 R /F35 2880 0 R /F11 2898 0 R >>
+5838 0 obj <<
+/Font << /F56 3230 0 R /F62 4052 0 R /F78 5837 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F41 2998 0 R /F35 2980 0 R /F38 3001 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5457 0 obj <<
-/Length 2764
+5846 0 obj <<
+/Length 2504
/Filter /FlateDecode
>>
stream
-xnH_fa
-+}3dhP#g~hRd
-B/ p:
- JmB*N'ug`!j*T; Uu&cEuSdÊGYc'ЊHi<:HA1O$Cjs}cH
- DovH֤B[C(fňbGu$T-Tl]"ɷ{]GGGfrnm)"C!O%loD>e*-<aW7k/CvjZ]sz@L &OS֤0+)&,CWP!nCٕ~mvmQŜV]4/nP,}5܄g+m^ٺvLqʕmK"t
-mN?kSlA3/J(-)\IsnjN4zk/MLކZ (u |΃BJ^V1&kCh"+4{Mw'>J4){aMCɳ6C)_ )_l +xV4RJM)CapPB趐+}"%ϳmh;De\|jsp
-f-^~N( =!<*`<̴ uI`CE0l2df|rnn@XE(lCt ,kzL;aD7uOUevopk€]3;S^|BLН:6
-˶3?t /n/ -mNC4l搮M\0LDtX7Vbd;mzqxȎj{?FiGo+9*=e{%L xo5ZD\rB{q4X4CH \ekz+W9>m$loBDgǺʆ-oh8dmfn_,ci?dW1.gWc?7(
-O
-B{?PЮ]~YR=n7/&endstream
+xr]_1a.AXL3"ewFD$& @e?sYJ뙤I= 'zcZ*y0f#
+#8*<ÊW?[e!JMZjix?
+.
+?[BpD~`mOb^k8F}|whW4!a;0$&W[ :rZ>rZʛ4ǐ>QY<|=v) #=;BphV
+3ZafRԕ0Øzzb=_`ɫX
+l*.i:u6 X;qAxWcF4D1F ,*K*QyEM`
+Lɧ,]wz=RlG~+qqWcneU5Pgy+JƩAyR]4=kklXBJ
+\R8ı-aK»dH_p+"3ѣRa~ WjT\Õ0%:: X`u$
+Q>i}'
+m >=Ϭp <)/Ћ!@{}S,ߴ*MYOS
+}ZIsE<$3B|aZae6.׍ʲ.OT"(xVU"[;08R !6 3 k==_HS>idҧ<jͨdN:u-ƾ<"BU9JwV-WQ0A@! Dߴ@4V.ECq袠Еh5YPouɇC }eʓZڠ \nn`ЬQ#!85N̦0o}1n (j5pBLN$$?$9$<$I m<؝$-|!%4Q`-CzN!辶d]Yː=qOMJT$OʑWo9%6_evL{Ϩ4+jX٩&655 ecL#b0<!WbHY/"N.6<χELݭ
+\4îY Xm`]GӱdRpL=}`XcC.|K6Z<Ƨ}E\j^/xԔ"Nɵr53-L^i89ޚA;p< un~_O:f۸mW{83<i VDƛ5~"<b
+q4eA5'[oO?
endobj
-5456 0 obj <<
+5845 0 obj <<
/Type /Page
-/Contents 5457 0 R
-/Resources 5455 0 R
+/Contents 5846 0 R
+/Resources 5844 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5448 0 R
+/Parent 5849 0 R
>> endobj
-5458 0 obj <<
-/D [5456 0 R /XYZ 85.039 781.388 null]
+5847 0 obj <<
+/D [5845 0 R /XYZ 85.039 781.388 null]
>> endobj
-1642 0 obj <<
-/D [5456 0 R /XYZ 85.039 350.751 null]
+1682 0 obj <<
+/D [5845 0 R /XYZ 85.039 323.047 null]
>> endobj
-5459 0 obj <<
-/D [5456 0 R /XYZ 85.039 329.555 null]
+5848 0 obj <<
+/D [5845 0 R /XYZ 85.039 288.907 null]
>> endobj
-5455 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R /F56 2890 0 R /F14 2895 0 R /F74 4586 0 R >>
+5844 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F62 4052 0 R /F41 2998 0 R /F77 4855 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5462 0 obj <<
-/Length 2439
+5852 0 obj <<
+/Length 2813
/Filter /FlateDecode
>>
stream
-xYYoH~Xm6o-\0Y`p E$y Ib~MQd{ h9ៜDxFRQ4I{'RSO؁KO?D"|I$κzf:s]ג0.^Ou˳7W_W_>ȃIi}L#ך3՗_y#W'#f=@'ph
-s8=׼ :p̋f- ZhZ;NdC;l뾂zC+ {mRht&dD
-rF82eRuMٴ9@7\! DFzOYLg i'e`g,@_#̉}!A3jioV[InT
-E
-
-|s
-:4M
-
-ٿoM#85ܖ]軾in:W9-|)+/biۚn=_ץ:ߴyTuuujdR݃WMn@2)P#H=/ 1vU0ίd0:G&qxIq{ԑPCxp5p
-I8L1~  z;Z{~8z&fvz/UXwyҞ[|0 ӣk`!yU5@*F/|(JS
-T!m]Uz,_ntT[\k&iy -آ^U>v1um[!)8!?O2AI"WUk[~H}*.Q<yNb]wzܬZfvg ;P8"YuwƟo7z>SEw2S] kX^tvq W>/_S\d8tGy4<I8{9,"a-Ap䵪Ƥuccgȥgj̚FYJ#ώ)pvJ,3L.S'nnP|vqPۡ)Dж~krzcҚ~;V9]Or
+xYoܸb2r?|y8h\7^ppv]J:I;R>sh ԁCr8Q#Q ۍGa$E-aÅ24xF^/<MGݗu]Kb< Ⱥ~K랩w_nn7pQZw8/ȵtsO_}Gߦ.M;M;@=JH.lh}[H^]\=//щ9oīYpL\[Dwr-|,Ɂ-g#ÄjptDG (Jgg mUЭbDVj\ Z1uY<jKndkn%Oz/PDɛis\g ̒0"oP=*̬JݍgZZ|V4m*C܌h]D-d$$̎+y\fᕟٰ_`Ci]㩻 j6XѺiyx)p)X
+3O#*f`'3j038pghT ]ei}G`5kNVVIr‰dĉ 
+lCvzpgA$lq \;qrOB#k2vnC@1Ltyeч}DG#뼎 E;:>?\_ô~olXUה+ZxN %
+LYoHkFjLf͈BvRMۢIj5'YT}6t!o>RU6.AT*cBWJHPxSF ]gIXqEi6Fɬ\Ziai`@\橬k"e9<NS0; 9,,l
+0vl+
+kMuؘȅe4LhO5E򉧺gh8*Vv6<A8}*'TtZÜ'ًrŌ\:LI'Zn DLZ^BMoǠns(~F%->xSЃ184 ޕ'cPf4c!gK
+.1Q-ćZBeܘQ܋ ^Z7xNZou!L aΈl0 KJ4x9$9?*H05?
+\ƭN:w³99 sutHau5'z|MsZl'k<ɟF7Z
+,lvExq#it!\:n<Pa{endstream
endobj
-5461 0 obj <<
+5851 0 obj <<
/Type /Page
-/Contents 5462 0 R
-/Resources 5460 0 R
+/Contents 5852 0 R
+/Resources 5850 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5448 0 R
->> endobj
-5463 0 obj <<
-/D [5461 0 R /XYZ 85.039 781.388 null]
+/Parent 5849 0 R
>> endobj
-1646 0 obj <<
-/D [5461 0 R /XYZ 85.039 678.921 null]
->> endobj
-5464 0 obj <<
-/D [5461 0 R /XYZ 85.039 657.724 null]
->> endobj
-1650 0 obj <<
-/D [5461 0 R /XYZ 85.039 602.015 null]
+5853 0 obj <<
+/D [5851 0 R /XYZ 85.039 781.388 null]
>> endobj
-5465 0 obj <<
-/D [5461 0 R /XYZ 85.039 581.42 null]
+1686 0 obj <<
+/D [5851 0 R /XYZ 85.039 624.724 null]
>> endobj
-1654 0 obj <<
-/D [5461 0 R /XYZ 85.039 454.773 null]
+5854 0 obj <<
+/D [5851 0 R /XYZ 85.039 589.978 null]
>> endobj
-5466 0 obj <<
-/D [5461 0 R /XYZ 85.039 433.572 null]
+5855 0 obj <<
+/D [5851 0 R /XYZ 85.039 511.008 null]
>> endobj
-1658 0 obj <<
-/D [5461 0 R /XYZ 85.039 171.433 null]
+5859 0 obj <<
+/D [5851 0 R /XYZ 85.039 399.625 null]
>> endobj
-5467 0 obj <<
-/D [5461 0 R /XYZ 85.039 140.016 null]
+5860 0 obj <<
+/D [5851 0 R /XYZ 85.039 163.573 null]
>> endobj
-5460 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F20 2865 0 R /F35 2880 0 R /F66 3242 0 R >>
+5850 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R /F64 4117 0 R /F79 5858 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5470 0 obj <<
-/Length 1980
+5863 0 obj <<
+/Length 1953
/Filter /FlateDecode
>>
stream
-xڭis۶~mLIO$^]V8 %'<=@i;iXb_1Ǖ4#x*'v~N} q1 pM;BYdO_-^_l)%gfGQlj&^]_\...ƕ@a߯gtq>s^Iǝ_:yheJT;@_'#x$?NK.&7?z.Ojx[ƮX0q8{/` ҟRݾ3e/Yכhj.PjB$W34,r6FWc,u3x
-3`Yn&-b0Dd: _ei ^Q6q.ű`留Wij}v+1N,E 'l7UvlG]w_x<W-[A Auݴ$9p"/:Bf[a_?]~ë?
-LLaD wӥKFc$DV0:JFHyPZΔAk>c0V!xyXՕ] CfHjRl 3S%Y[H
-ƆЩD$ diQ)PV +NkNl9IpR-OXhB췹fyF=
-36zNEs9hh͝ "O1~33Y ?0k;bgӑcXY *;o
-N Ūn2 S'ng~D}2(#
-P6՗`'ƝXЉedW5Z}>?aF[_Ѡ/jJʨE5'{s3$pU
-hj9Ha<ܪqxËuX Y¤BH6rhmq}rc8/-C9
-@Hղ[b;k8v95"0Ky8<itK=SZfRK?A$p kA1'Qbgt~Ύ^J+6fTol0Rj EUϤ
+xڭXms6_&LE
+}>
+ՅAlޔ);|FxdFSoje/pIiCL8VS.}Ads+:]nT5:|(
+"Szpe:3D,LC
+di6$RzZj;cV)1򁌁ġd&yɉ{*aJp=Ln\"L7ѓZG+p7)d!k>0gn+‹c8{ᙅ)1G!Ё:$QIڵ(wU3tHG^_\ûRF C27Ӏra|i>rA&z9 _V-T
+ESئDXcػ5RkVTͪ4 o8PfX ?>M-=`а2A=4p %VA[e
+ٷ:-1 \L=6C̄gwaG }qcb"2vՠpk5A2<iε9*'ۜ6eȳmS޺6`y2<msrr4{E]d>tJX _X_YS 3s8 ̼ґJ<ЀK^dQz'X@OO\0S ,if<zb=;Zfa$"y>[e27ʂؗz}aV)U2Hra }+-Ԫz;
endobj
-5469 0 obj <<
+5862 0 obj <<
/Type /Page
-/Contents 5470 0 R
-/Resources 5468 0 R
+/Contents 5863 0 R
+/Resources 5861 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5448 0 R
->> endobj
-5471 0 obj <<
-/D [5469 0 R /XYZ 85.039 781.388 null]
+/Parent 5849 0 R
>> endobj
-1662 0 obj <<
-/D [5469 0 R /XYZ 85.039 501.248 null]
+5864 0 obj <<
+/D [5862 0 R /XYZ 85.039 781.388 null]
>> endobj
-5472 0 obj <<
-/D [5469 0 R /XYZ 85.039 480.047 null]
+5865 0 obj <<
+/D [5862 0 R /XYZ 85.039 502.054 null]
>> endobj
-1666 0 obj <<
-/D [5469 0 R /XYZ 85.039 247.068 null]
+5866 0 obj <<
+/D [5862 0 R /XYZ 85.039 270.305 null]
>> endobj
-5473 0 obj <<
-/D [5469 0 R /XYZ 85.039 226.473 null]
+5867 0 obj <<
+/D [5862 0 R /XYZ 85.039 88.449 null]
>> endobj
-5468 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F14 2895 0 R /F66 3242 0 R >>
+5861 0 obj <<
+/Font << /F56 3230 0 R /F79 5858 0 R /F64 4117 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5476 0 obj <<
-/Length 1871
+5870 0 obj <<
+/Length 1901
/Filter /FlateDecode
>>
stream
-xko6m T(}JKf^
-Jtq=q)9\OV.0dl?N 
-(+ąEfK
-?@B5фBsCF`W(Õ
-c؈Jaki>u7D4{\[gIM:F1Y~ "%\@YB0t//42J,%;QxJ:vm2G
-Z`m50[72CȂ@@\z8T(&h
-L, {0 Q}NݣWTfbA5w#WJ cs|LiewJ4:5=!_Ty y2,EI%
-Jbzpcˁw4F- -g0 fy kjd؛W?z?sꬶc^G^U//Lhc MV~! rO<|۶,2n:><wʅ%׼J.
-++SҀojƝ&ؾ/,t8 n")endstream
+xڭXYs6~_1d+%E
+vYqT>!)YCf=Ѳi͊*tZX7:A}Zf.F0'
+(CQһ^dF3q搯
+]88\V ݖr(cn(_㙨{Z0ƗpYU~C{PkԞm|D&:9(*8öEc3I}PMm?l\ 5%ݲR]ҷ|a8~L}ӊSnʿZQ gX@+N):E\:nC뜙蟛 -;-ux<f}WuNU1R 5 S_ *j^+O5Tk? |
+JG9 KDyӬ yOSda lʺ GHL?!e'5{_jh>F7
endobj
-5475 0 obj <<
+5869 0 obj <<
/Type /Page
-/Contents 5476 0 R
-/Resources 5474 0 R
+/Contents 5870 0 R
+/Resources 5868 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5448 0 R
->> endobj
-5477 0 obj <<
-/D [5475 0 R /XYZ 85.039 781.388 null]
->> endobj
-1670 0 obj <<
-/D [5475 0 R /XYZ 85.039 761.463 null]
->> endobj
-5478 0 obj <<
-/D [5475 0 R /XYZ 85.039 740.731 null]
+/Parent 5849 0 R
>> endobj
-1674 0 obj <<
-/D [5475 0 R /XYZ 85.039 492.747 null]
+5871 0 obj <<
+/D [5869 0 R /XYZ 85.039 781.388 null]
>> endobj
-5479 0 obj <<
-/D [5475 0 R /XYZ 85.039 472.152 null]
+5872 0 obj <<
+/D [5869 0 R /XYZ 85.039 571.376 null]
>> endobj
-1678 0 obj <<
-/D [5475 0 R /XYZ 85.039 196.464 null]
+5873 0 obj <<
+/D [5869 0 R /XYZ 85.039 324.501 null]
>> endobj
-5480 0 obj <<
-/D [5475 0 R /XYZ 85.039 175.263 null]
+5874 0 obj <<
+/D [5869 0 R /XYZ 85.039 104.725 null]
>> endobj
-5474 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F35 2880 0 R /F15 2876 0 R >>
+5868 0 obj <<
+/Font << /F56 3230 0 R /F79 5858 0 R /F64 4117 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5483 0 obj <<
-/Length 1530
+5877 0 obj <<
+/Length 1549
/Filter /FlateDecode
>>
stream
-xXYo6~_!-*@8ڛ
-v\wv)Ec"ù8 in1VR&B8A`ŌYװj $eKϖ/=iqFCZ˵bY&+b|n !<srӳ+I rn?Al|ٱ 7ˑUh֧Y Xfƨƌ0tu0|v1e+EIKpF@n ܉(D]hnKV$T5N&+qA8UܵUvuSFO9Z@W:~>IOcM^+O_ql!ЖN*}H㓫 GM&Ob\?Q nڰFӺ XF͝T$1[*Ef[ KMJvʋZE6!} u"Jsꄏ+`1x"Hpi#Q%NVaMm~oL1PXy _trtBS^8 Ⰹz
-f@RO|0W1/.|EEaM F&V
-v|jZTsQ*~F ]4-WU:)F{;l벪p<5oUި |z^`N^8/pp6Du7[:ȸ,=VaDu2e0JMxQw(_jA}l:9q =`(XMJq14{_PO7ppVHf;͙ydCWRw -#qu8
- F }CU'Gqww\{0a#shsmlOݍu{b\cS(88誚N3Te:{ͮ(#u2>/Mז9Zf"m롻ՇLVs-sMHi6.:O/wKs6yGivMɺ4fo5wu<G97_>7?!c
-#|oj?{_
-S endstream
+xXmo6_aJI->/kS4\ꭢ4~x,'R-ûw1l6=<#p3w~ +f lgOxNFvssBX,rvt}r
+GKd.z&~c ]\^{=`!ͯ w\GDdaπ-gwzUӮ1x"tPu1w% _ޥfV,6LY7eKB)Pi)nHhp'((z+
+:EЕǩ"\AÁm4س}  R\W1 aXdJ6mEbpi}mv2;Zm4:vFP(%!)>K=M;)'C)V!eBfqA : hGȪWi*ZRm\XeǓ $.a%7tlpqj8k{>."
+dgΘAT&- EM-$+$+g=Y,\I&x:-y M'@dj bPw< ?бR3AI҂sH &V@LgGa[*]7q'bamk:{A4R|9^@l=8KC= >\F!N7*(,h?Ϭ7ٮTF'&:pIK{$%G𴌵<ُ. Dž87~Drɓ*Y'E%Q4B6tYuCe!/FC(<<hu|i&sRe}t~z0s3LOs'oR<
+z5_^4.(hn闪{
+h'B%\GcރGER#5ǹY#6/7wOendstream
endobj
-5482 0 obj <<
+5876 0 obj <<
/Type /Page
-/Contents 5483 0 R
-/Resources 5481 0 R
+/Contents 5877 0 R
+/Resources 5875 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5487 0 R
+/Parent 5849 0 R
>> endobj
-5484 0 obj <<
-/D [5482 0 R /XYZ 85.039 781.388 null]
->> endobj
-1682 0 obj <<
-/D [5482 0 R /XYZ 85.039 649.169 null]
->> endobj
-5485 0 obj <<
-/D [5482 0 R /XYZ 85.039 614.419 null]
+5878 0 obj <<
+/D [5876 0 R /XYZ 85.039 781.388 null]
>> endobj
-1686 0 obj <<
-/D [5482 0 R /XYZ 85.039 434.517 null]
+5879 0 obj <<
+/D [5876 0 R /XYZ 85.039 664.099 null]
>> endobj
-5486 0 obj <<
-/D [5482 0 R /XYZ 85.039 400.373 null]
+5880 0 obj <<
+/D [5876 0 R /XYZ 85.039 80.616 null]
>> endobj
-5481 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F56 2890 0 R >>
+5875 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F62 4052 0 R /F15 2976 0 R /F79 5858 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5490 0 obj <<
-/Length 2370
-/Filter /FlateDecode
->>
-stream
-xioF݅GɐY8
- 'hC1vcxHӠ ͛w;s;ۑ,][,ΜN~8s 3m' ٫w?s;qrM սx’R
-7V͇ۅ+x\xE,Œo˟䕴ŧOgWUoD~;V@Og-xsvdV_uyvw 35%vc;^2ϵ*tݨ_/ 'ut_USA_:{Hoi$ӝ,, 첬,rk/ld<j_Biy֭6MYVջF#*
-n.G۬)vշWM9'i^%U2y} ;V%` HX쑼@bF69p U-H9T
-^Unװ{{|7U+H qMǔ33hqQ
-ePHm/U!⤄II+o/cP$p*/
-|x+KOE zBpjd
-Kg'2:4U)ʢ-G1õQ\vxw^Taռ{Bq|’N`*A," {q<g"AL0x6fUAk #qqJMN`B@D,(9UX%; Yy 0k]?Y
-p`kz0WD9v 9Н
-<VS 7:%.q7cuH 8,?-KFIx^
-G@ux^]ZCpe6
-" *a\ʸ:]'MQw32Ih_F[9!<fȣlQLbɻHCoW<`a>mhODᬟ3nmG4 +$S'>&G{ZoK2d%u`68=Q bݣs^*RJgI*ʷ}+O8Og'O@jkc@MpH1%5(
-S;xF~[ sXe]#!7̮1v
-P
-B^jde84pŏ/dXaZ {d$A)KO+3Da<쟷l 5¸`+$vTT_`#-.,QA簨
-ϽJh]׼rrLy :1>7b=jiˊ1>udz9uV;"ӫܫ&;nכB*p
-2bƣhyx=UYJU`_ذuqWJ7eycשif] ȡ?6zmC9&/%<j{;օekI
-m(^
-nywB'a.Bx*Jƴ]s#E_ 8FZ_l($3[RϴKNsdm=4BJe:&Xz4_ͺ2t5B7'OwieqONuv.sgz G=F:7T S=XOʘUM%geEMBUъK fPT1vq~e˩ JBv~-
+5883 0 obj <<
+/Length 2424
+/Filter /FlateDecode
+>>
+stream
+xڵY[o۸~ϯp Ԍn%X Mmn6'qAK'Jrg.,'vv)R!9f88#9H
+ۋGa/F-aGsL5t~vrQ#fu7-O7<ˉdufXwL]]=D5cϹ {}rK
+<c}㯋+-耑dp<8 $#4kp^v}"i}LG^E.y6KR7r=cPۤ\p,1^3\‡
+7L#B^W;ယ&+3k v'~r58w\y 0-v &d$
+S*hG[cIXR1o1Z 1:9lmVIz^[QK#05{5Ad0"WgUە== w^ul\172&K.cb "Sn
+S-Mw+t>lUzrZ;QPK׭B ap~x-Rb MsWmklEt5')x lD{۾XkJFy"^h<d^ՄRZ 9ƃ6=xgg83….pTe=PpsT"a \u\
+#%w
+e_*̫O`Mx ] ̉m*p@1HǚnƔۛ/
+>8{/X斘_Sf[n{4^)S
+!珢zskȃxz!Gz} bs84t\4yE?o|NSնB1~wSҜl czmGOGT8Cc`
+̠_y:O7bYƍj3@lLYM¬MN^y&L&VzEo[X uFk&@V*a
+IdAY&bā,9j\3eadLsL"\ѠXf 7>d3j0.DŇ /]Wsy_^J4_endstream
endobj
-5489 0 obj <<
+5882 0 obj <<
/Type /Page
-/Contents 5490 0 R
-/Resources 5488 0 R
+/Contents 5883 0 R
+/Resources 5881 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5487 0 R
+/Parent 5849 0 R
>> endobj
-5491 0 obj <<
-/D [5489 0 R /XYZ 85.039 781.388 null]
+5884 0 obj <<
+/D [5882 0 R /XYZ 85.039 781.388 null]
>> endobj
-1690 0 obj <<
-/D [5489 0 R /XYZ 85.039 554.519 null]
+5885 0 obj <<
+/D [5882 0 R /XYZ 85.039 457.872 null]
>> endobj
-5492 0 obj <<
-/D [5489 0 R /XYZ 85.039 522.496 null]
+5886 0 obj <<
+/D [5882 0 R /XYZ 85.039 372.982 null]
>> endobj
-1694 0 obj <<
-/D [5489 0 R /XYZ 85.039 228.95 null]
+5887 0 obj <<
+/D [5882 0 R /XYZ 85.039 277.876 null]
>> endobj
-5493 0 obj <<
-/D [5489 0 R /XYZ 85.039 207.75 null]
+5888 0 obj <<
+/D [5882 0 R /XYZ 85.039 210.13 null]
>> endobj
-1698 0 obj <<
-/D [5489 0 R /XYZ 85.039 108.73 null]
+1690 0 obj <<
+/D [5882 0 R /XYZ 85.039 140.668 null]
>> endobj
-5494 0 obj <<
-/D [5489 0 R /XYZ 85.039 88.135 null]
+5889 0 obj <<
+/D [5882 0 R /XYZ 85.039 103.801 null]
>> endobj
-5488 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F56 2890 0 R /F20 2865 0 R /F66 3242 0 R /F11 2898 0 R >>
+5881 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F79 5858 0 R /F58 3365 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5497 0 obj <<
-/Length 2032
+5892 0 obj <<
+/Length 1847
/Filter /FlateDecode
>>
stream
-xڵn]_(L"4Rյ PKt\41nc?pvvvv3+w;xFQ4^Fx;?\C}Lܺ\^ck"Y&vbK)-7; #kvw3qconϸZw7$֒\^J
-gantIeŸJ3N@w#G8
-zg}A9<Z=IHZG a#E
-,2DH>^¹{,ïBD2
-[oZ%(Zs ]5]Pf6{ 5¦_^ݞ惇-Jud\^ |Xt.MXD H´Wf "<<Oא99v0ŋt32u#&x\`FF KjWM1W7(Ҟ+V<tYB@yru-:m5iA/TP1}EbRv7=!YJO#fS^`%EC~
-4cP~A[}oj)jI:ҵΘ{*W[2 <UaftȮ84%
- +ӅST5b4J~׽P}:ZI;ܽa$Jwцedˡ5obo˃oZ O'hV/uCs-e
-ćJu0{V}}MPvh3*KunJ]ZҞyY^>7u<Mc #}daܧ)ll{}ϤgO܌22 cl>?P 桭3<}u#Ԑ%F\8/&C׳˯uBN}
-5@endstream
+xڽko6a<Tޏ
+ Ź=ED ɪcəibxdYp̉ Y?c6(Qd
+$%0Yk>r
+(/׌!rxkט6z.&3'ґ㨹Rr5(;U4ݯl=gڹ-.Q/?.'˫ǫbq~ `慡 A `+1L`gn2ix
+KB
+MGa_q18Y-_Pz- ISZt$uh H2U}vja t}%^,,V=% 5g{rQ!h@]Dliz`^PiMe G#7wXa8!Uo<qD'2m&#ugT հ Na"FNc Yab}6(YW}uͥ׵7H=W.UަiRަNJM[sWGHi-# L{$vN˶u/ֵ,-G&Ѱh2kƼ+L@
+;z+eRum>~|y3\5rYfAe-NUr|NHל.TmomWyXX铷p$mt[AVQ[bϹb*95,N]VͨoR}Se%}Ռ sEe2)0D*J_y<q lChCp`@Cv1<*A
+Z;9B.ndžU;<l}Ά~N<VHOK4ȍw؝,Or Hendstream
endobj
-5496 0 obj <<
+5891 0 obj <<
/Type /Page
-/Contents 5497 0 R
-/Resources 5495 0 R
+/Contents 5892 0 R
+/Resources 5890 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5487 0 R
+/Parent 5895 0 R
>> endobj
-5498 0 obj <<
-/D [5496 0 R /XYZ 85.039 781.388 null]
->> endobj
-1702 0 obj <<
-/D [5496 0 R /XYZ 85.039 689.601 null]
->> endobj
-5499 0 obj <<
-/D [5496 0 R /XYZ 85.039 668.4 null]
->> endobj
-1706 0 obj <<
-/D [5496 0 R /XYZ 85.039 599.602 null]
->> endobj
-5500 0 obj <<
-/D [5496 0 R /XYZ 85.039 578.401 null]
+5893 0 obj <<
+/D [5891 0 R /XYZ 85.039 781.388 null]
>> endobj
-1710 0 obj <<
-/D [5496 0 R /XYZ 85.039 498.176 null]
+1694 0 obj <<
+/D [5891 0 R /XYZ 85.039 196.152 null]
>> endobj
-5501 0 obj <<
-/D [5496 0 R /XYZ 85.039 474.858 null]
+5894 0 obj <<
+/D [5891 0 R /XYZ 85.039 153.199 null]
>> endobj
-5495 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F66 3242 0 R /F56 2890 0 R >>
+5890 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F58 3365 0 R /F62 4052 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5504 0 obj <<
-/Length 3171
+5898 0 obj <<
+/Length 2795
/Filter /FlateDecode
>>
stream
-xڭZoF—/
->(/V]DD$Uc?إ(ݢ .1;;3;y
-s^5rJfA#DRPe6226MQuyE%wJ f~!緑))>*]c;/LvoQHk]4Ŧ+ x}zlE]y}y'hOgM^ jx_Tof_PbS9ʏTDۼ{=&2-M/6Fu0{8" *1x_o[fq7»nr;l \ij;^zܳ)>!yӒ,C{u`qV!D≩9j؏\LcE)<LT1k/cuKӾ Vx(^UvE/.c3+(;kR!zbM]ۺ^^9|!hYXtyE–%9 0p¯Ik40|th)@E?3
-"cJ%8y<^ux&Gdk
-P#g&H"y5yZD:'Bi> TVtJRS1Gɞ
-˼m2?*~Ɇ*ڿ.8Yev2CrN
-%7(H;0nTHSBЄ&,Ln46s\[sQ Jp8C}:9 S'Lv:aDziv*,aI44t؛c2B:*_jSQ_[^U_t"Z@_[I+6 B|->Ɗw no$@R`y|5qB^N|1~}h:}`m
-<q#Fs=i\Žp%o51Cov^$CADGy"ٯU#jF=YPDy(Ui#h xO\֔ss9"4cU7cx]9F{L:һXǐpv&Z!k"/2<1cTjW>; QS~9A'ZL$
-z&
-,*3QU,@'u%Ó$<B
-hu;XMl.1TVJ1, hz>RCiKzqOQ)M' mk6qD$soeu{XAE6)e\!܉;Hb|J`3i-!Ń RC T7(ګIo)|$X %sSsqNA  а2%ܳ;҂.jʄ;/&6z EўBDG" n ` -KI? ] ٤lp 9
-9mcQȲys;a?(Xu +$NVrlC)b }ዖ9i+"6eZ܂NZ%^NB%#&qQ%C?Nߨ/~*SktM~tk @twBj&&a;W `nny-҃Owņgr6 !8
-n9\s{z>WNd gOl-XD S614 9 ywk^6"٥<q"'n
-~xSE6h!:bzMey0GQZg9 >kʅ} ;}Gd%D;0(BFcq|P~F ñ@r rL4.N4$/v2[%ec@"˟=ʕwS WeÓ箨ow.rQyAG ǨnoՇaT+<jg~=X"~=֏ٗendstream
+xڥks6T' #;iZwi.VwfDIKJRv=HȒ7bX{a5
+G2Q>J3GY6o/
+VP1s3z
+<G@GFgw|O(T'iyo>}+>޾޾g1
+H曋x-SRY%(?N^r!*?ڕ|$9 B@hZ <Dy%@J!$A37-zaSd#C*}B*񣄘E}[V [{l~ߟf\AEØ4)f; t̑=o5 㵫egBAH]jcX,j^j .,Ξzx}O><"/YAzƐ<7G =^ 'O*Ypbjl-NAu] K.?횧Kͦ,ouoE
+ߦ¦jECBvS{,%RAq
+OÄs0qXӑ~
+jWq(~v jGWLE~(/KRL.!\=}KuUs4FT>f/QoEVJ:ںd0~$'*$9'(<Rolp hr%**ڼwZPL2|[Ѽ+ѡ֤SF?WIcڡeѹ҆QWncS1šg"0CUT뫖,<P950gÂz]
+T_u%0&-𛠙'dN=ibШ;ymf
+DVHT!q!hVPt7(L-SJa鑳JqaKjE4>`fǑh‰ Yu&Qbwp$q*kHjڒ<׺lB ?n9[AHݢ$펔R7_# 2c)y|T")zC mtsncM'- ,?RIOў(znxT(sdXCqvffKUWx7]#s_C%kQpJmU[iw/!V'2iQ{ /U$/S.]AS`R$rf8nPǧit౔GVZUTJZjXm U3d8QS,`PxAY~:ci%P.h36L=vRTD ݜ*,WCX$wK=fRľWG4J>Iu^: $42iz*#Nfw;%~ a'áH#(@?,U_IUgKAؘ̭ iy aGxma"S#s7K֔2Rdž֟=V գ3.9b
+W)SA]cx޵<FE|a
+BО zrNaX}M"i~1gn˄: Ra6<~wj;WpXJ}%?8yabƠ*zw-O94}Ay1*;y9r"I˔ P$"о O
+/`|>40;'9.M?; @mYA?Xr&uE5>8j2KiH;DprY8.zփP4IB h@/ ;'q.W N|
+[X52i~Yf#`,>#/slÓe0@ttPb_e΢c
endobj
-5503 0 obj <<
+5897 0 obj <<
/Type /Page
-/Contents 5504 0 R
-/Resources 5502 0 R
+/Contents 5898 0 R
+/Resources 5896 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5487 0 R
+/Parent 5895 0 R
>> endobj
-5505 0 obj <<
-/D [5503 0 R /XYZ 85.039 781.388 null]
+5899 0 obj <<
+/D [5897 0 R /XYZ 85.039 781.388 null]
>> endobj
-1714 0 obj <<
-/D [5503 0 R /XYZ 85.039 620.561 null]
+1698 0 obj <<
+/D [5897 0 R /XYZ 85.039 761.463 null]
>> endobj
-5506 0 obj <<
-/D [5503 0 R /XYZ 85.039 591.157 null]
+5900 0 obj <<
+/D [5897 0 R /XYZ 85.039 743.459 null]
>> endobj
-1718 0 obj <<
-/D [5503 0 R /XYZ 85.039 508.814 null]
+1702 0 obj <<
+/D [5897 0 R /XYZ 85.039 618.484 null]
>> endobj
-5507 0 obj <<
-/D [5503 0 R /XYZ 85.039 489.942 null]
+5901 0 obj <<
+/D [5897 0 R /XYZ 85.039 583.738 null]
>> endobj
-1722 0 obj <<
-/D [5503 0 R /XYZ 85.039 363.859 null]
+1706 0 obj <<
+/D [5897 0 R /XYZ 85.039 447.539 null]
>> endobj
-5508 0 obj <<
-/D [5503 0 R /XYZ 85.039 342.966 null]
+5902 0 obj <<
+/D [5897 0 R /XYZ 85.039 412.793 null]
>> endobj
-1726 0 obj <<
-/D [5503 0 R /XYZ 85.039 205.961 null]
+1710 0 obj <<
+/D [5897 0 R /XYZ 85.039 305.814 null]
>> endobj
-5509 0 obj <<
-/D [5503 0 R /XYZ 85.039 184.765 null]
+5903 0 obj <<
+/D [5897 0 R /XYZ 85.039 268.947 null]
>> endobj
-5502 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F56 2890 0 R /F66 3242 0 R >>
+5896 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F58 3365 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5512 0 obj <<
-/Length 2248
+5906 0 obj <<
+/Length 1800
/Filter /FlateDecode
>>
stream
-xڽX[6~_a/rѺP5X,i2$&4(d#*%g eeP`g
-`J4'AEQ9['No." )=
-GU`3 vhEbX@3WT푣(q$#3H N߫rzWL6z(n*pOojʌ$~l;U4Ѯwv=R$:fLv9C_±)Ij
-#>'5[B%vfƐP+e<`gfvR)D EQ"bϏ߃ѹ"׽tۯǶ*%`%pb2-^ C0IV.h-=hyM3j)#xemx
-S;0@;n)Imxa oXZD?L9g[I47e
-[YP^l] ),x#,a4>?*FCY.1l^<
-D,.Mǃ<ӊnxӔn'EcoGW<~wCeU!)e;?ܬ҄ _عٲŽIթ=Ѓ. k
-ђؗQXthl'%koXJPLs;qlm5(-6vTx(gU\ħ1-
+xڽXKsDW"SHX ]sdibH1ǛO?FX.TTVOO҇_be /̲e.V[+Zw&v6Nr?_n^^m6WnȽ/p>0wwS8lp,t,teۯ^[?oUnYAHo XnG}o?Ox-Z[Y̋:-a|#-aqLiJWnN3`h.uSN 0p*njrwD R;3ʹq'l݃-UԪVCJå ܃Ǟ;ղi <u
+jm0I <Ym Cf]}"lIp'0Mf2Ԑ'Jf h(GtBhJgQ9hp۩~אXA%~;~WhP**. G׋ %n
+p #H CfXo1+$r8^.PbqίȻʢc7Edc$t?n8+Cx
+N/
+T;0T7 SZʕD).xb_ AmۓC
+mmj,ILwʸd޸cuU%lN!7Ӂe@kjy%OԻ)=DZذDafv\S iE%]Ɇ"q^!#]al,r6V9b)av`/0kV%lVH߸f\ض)ܧp`X9c^18*L+PpvzO+:
+~ +ʫ|֌J0k2C #z4gGDzٹT8ruiEiѿ(tj) \̐0/=cSu ՞D;5N9"HJV
+tQ#\L ax 4A{@ zo%Qڝ_4ԉ54όSQ6KYhX/",NAlޜrFw&t=\j?0 Cu EAE3LS~,olSlbXw:Ŷ>14Y%Ŏ><_Š(DF][BvTG0*&+yRCb2mu^oYNq򮷡
endobj
-5511 0 obj <<
+5905 0 obj <<
/Type /Page
-/Contents 5512 0 R
-/Resources 5510 0 R
+/Contents 5906 0 R
+/Resources 5904 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5487 0 R
-/Annots [ 5516 0 R ]
+/Parent 5895 0 R
+/Annots [ 5909 0 R 5910 0 R ]
>> endobj
-5516 0 obj <<
+5909 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 87.442 371.033 99.435]
+/Rect [325.68 275.906 539.579 287.898]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/printer_list.cgi)>>
>> endobj
-5513 0 obj <<
-/D [5511 0 R /XYZ 85.039 781.388 null]
->> endobj
-1730 0 obj <<
-/D [5511 0 R /XYZ 85.039 761.463 null]
+5910 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 262.357 131.853 274.349]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/printer_list.cgi)>>
>> endobj
-5514 0 obj <<
-/D [5511 0 R /XYZ 85.039 741.134 null]
+5907 0 obj <<
+/D [5905 0 R /XYZ 85.039 781.388 null]
>> endobj
-1734 0 obj <<
-/D [5511 0 R /XYZ 85.039 327.573 null]
+1714 0 obj <<
+/D [5905 0 R /XYZ 85.039 544.376 null]
>> endobj
-5515 0 obj <<
-/D [5511 0 R /XYZ 85.039 296.048 null]
+5908 0 obj <<
+/D [5905 0 R /XYZ 85.039 499.301 null]
>> endobj
-5510 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+5904 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5519 0 obj <<
-/Length 3703
+5913 0 obj <<
+/Length 3800
/Filter /FlateDecode
>>
stream
-xڭZoFBpT4|ҤIk_ @K %*$e߼vIZ"}r5;; &$@g$UNrsLDɈ`b LTgA6Y\ѐwZkOel$Lyz|qv ߽[ů?7??p575?
-8$uNn*&i?2Zޫ'rp#0(,>02㧉yp:ܲDpWWKN(y fsG$e~—>2Q~`LsMpzQW54ҙ p{TzD]3hEwz^!>$oEZɻr9e]]DŽV<L 寮]|Iix Yau~Dq=\yHfQy;b WLsi﫤UM /)Sgޕ@qMF̷%ˌٲgs^}O/reMhO|nylV5儴&/VXXG{˓Pffyu <6>Q]mGzF >xĊ_⣥]߷0A}Sh2VlQ=?=SZU5+kn֧)Weuy1~[h1; 78e/0_8c A2.'6Jd0*ЈNEE[N3knJU; |7 ϻtm' KCJE!o
-/[P;gtIm"RV1tyB,A͇;סbTmkBgwk28dPot<47Gq']U~JQAX7aDzJdr1/hxAJtIlōvdZ#Pf LA̡c5 wp08x~N.B.b7)H3HQ}N.< 9eIW-%ﻲ*P2jk(&:fU)р>m
-C+R [Ov!UF.҉Z^}Џ؈
-hh$^uW8~+v?"8}0W)<{4v,h p#$k
-%ٌ/?czWys[D@`i`0։w$KI-7b`g2;~҂PK@\)r
-!FPL`DQ6;dx!md췬r4JzG ΃I^XGEݒi__\: <
-qdW2BY'
-&L/(ñP/VI@Ԗ^S:.M}\&EI^ ^[ ),aɅǎknFjHd^%>آ%Wd S?Z&'FN86`c(NSׁwr Sx1W1xnj]b@G=%doFy? &JB wx
-Pcl%e9aI4E BDF}eO v9E( Z)o)<
-rD{/̀
-i`wpI 7pn {^ PU }Z;HTg9A9fq]7}Oٯ/ZÏtaNU a<./ \?e,{0"(͆\$+]!m~?e%Y_|)mY"a~ 7QC\Qe%|߳11LH 1Gl
+xڥZoFB5pT4oҤIK_ @ E*$7%PyfhpZāx"b;sXysb%$+볋AP8v~-?o_\]q<R\EQl|T'x|aRYpeYLt~X~/ɳ_׿rK
+8:,5N$$P/VNۊN_P(kJ sِ^Ցy_P7VYW7EOFXo~sIFM< s Qs|Y0xziJb OK
+z>d.4hM2 OeuvYT}j*]7)evzSLe]cAMhfr %;"뒌@>aϖr"s4Afh~HO ˏ<+ghZ3Ae+dYƦbұ3`paگKYz՚9A=G\7[|Om;=yӏ'_/ʒGUԒ#IL_qZmy+:OlhMQK~V]n<5i"-P+!A*Crٗ^e4{D\
+PZT=p'q
+.rwݝBLJV^/Π
+NS#ӢB#PM2{CU;%^0IIq 94{>,DhۍG?9]16l2Yg2[Zoy`P
+
+ok)!Nk#)l
+)EsF0Ĉީ4AIbAY}|\W<\(2
+OQ
+DܠtULnRM/9 Ā $-
+ ?r(َV漭NMHp5Wp,E p$E!ҜMᲭp(4aZdj4%
+@OM>c;XtBL>sp+QUS Z./a]dqʷX͵_#Zx8>N_v5/(n
+'opYȗ,J_G5ԦR9,Wqb^<R!>B&_͚nW`6xSw=}ohͼAlۣgK\z_6nߝDU9~4ka~bd;t,\Br<RkJBxG͙.endstream
endobj
-5518 0 obj <<
+5912 0 obj <<
/Type /Page
-/Contents 5519 0 R
-/Resources 5517 0 R
+/Contents 5913 0 R
+/Resources 5911 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5487 0 R
-/Annots [ 5521 0 R 5522 0 R 5524 0 R 5525 0 R 5526 0 R 5529 0 R 5530 0 R ]
+/Parent 5895 0 R
+/Annots [ 5915 0 R 5917 0 R 5918 0 R 5919 0 R 5922 0 R 5923 0 R ]
>> endobj
-5521 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [412.789 653.385 454.872 665.378]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/driver_list.cgi)>>
->> endobj
-5522 0 obj <<
+5915 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [155.951 639.836 369.851 651.829]
+/Rect [171.679 672.115 425.668 684.108]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/driver_list.cgi)>>
>> endobj
-5524 0 obj <<
+5917 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [421.617 405.262 475.382 416.951]
+/Rect [382.345 412.564 435.974 424.253]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/printer_list.cgi?make=Anyone)>>
>> endobj
-5525 0 obj <<
+5918 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [179.03 364.614 225.113 376.304]
+/Rect [418.702 384.859 464.786 397.761]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/foomatic.html)>>
>> endobj
-5526 0 obj <<
+5919 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [375.968 364.614 430.714 376.304]
+/Rect [163.355 371.916 218.138 383.606]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/driver_list.cgi)>>
>> endobj
-5529 0 obj <<
+5922 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [191.321 143.854 256.005 155.543]
+/Rect [165.032 124.057 229.961 135.747]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www2.picante.com:81/~gtaylor/)>>
>> endobj
-5530 0 obj <<
+5923 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [181.685 130.305 300.65 141.994]
+/Rect [107.442 110.508 229.112 122.197]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/foomatic2.9/howto/)>>
>> endobj
-5520 0 obj <<
-/D [5518 0 R /XYZ 85.039 781.388 null]
+5914 0 obj <<
+/D [5912 0 R /XYZ 85.039 781.388 null]
>> endobj
-1738 0 obj <<
-/D [5518 0 R /XYZ 85.039 519.568 null]
+1718 0 obj <<
+/D [5912 0 R /XYZ 85.039 553.968 null]
>> endobj
-5523 0 obj <<
-/D [5518 0 R /XYZ 85.039 500.899 null]
+5916 0 obj <<
+/D [5912 0 R /XYZ 85.039 521.75 null]
>> endobj
-1742 0 obj <<
-/D [5518 0 R /XYZ 85.039 323.247 null]
+1722 0 obj <<
+/D [5912 0 R /XYZ 85.039 344.098 null]
>> endobj
-5527 0 obj <<
-/D [5518 0 R /XYZ 85.039 302.652 null]
+5920 0 obj <<
+/D [5912 0 R /XYZ 85.039 309.954 null]
>> endobj
-1746 0 obj <<
-/D [5518 0 R /XYZ 85.039 178.994 null]
+1726 0 obj <<
+/D [5912 0 R /XYZ 85.039 186.296 null]
>> endobj
-5528 0 obj <<
-/D [5518 0 R /XYZ 85.039 158.399 null]
+5921 0 obj <<
+/D [5912 0 R /XYZ 85.039 152.152 null]
>> endobj
-5517 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R >>
+5911 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5533 0 obj <<
-/Length 3903
+5926 0 obj <<
+/Length 4197
/Filter /FlateDecode
>>
stream
-xZ[s6~ԎŒ݇i]I&δ3mhD
--JuwϏy3JN<Fe.T;\{mϩ {P# =9;bd𝂙Mse R-&jK]?Э5l6ΒOiD~
-9"2BF78v~[gB/S{`y;}VLnEExm ~"^,&]Z/*A(ċAjT:v^cJ2M `m>0Iعوaミ)h
-N[ӢLh`ZӲWVPCqͮ55;Xyd3+%g- SÎ;nT_UDH I/0끅B.FM."#rNQZRǻ}6<k%,c'\7 g2y&NO=d^
-6Yb}5:*׊jcoZ@u
-E!Moa*a4&q=Ȭy
-$j"R;`ġ"EO9.qTi:q7M`Fi=4[a/W
-L [R?s 9:yF:ygq*\! 8'w5E{fh<vWBWڡ(\Ox`kP1vGdHvն?\X_1,M
-K~c'OVK=au
-׸e;&׫-jHR`xa%KcRĐʗ'l8qiΣMCh}(O^jh v}/0{Fo,aS
-G}+ECvrZr\}9B7GOWRK#e,\@'\Th!nήN|TTok'8di!eۓ#4" l?\
-0䖩SC"s9P y FH,L9v,9eω~H""CO;=/oijL͔62wNJ
-΢<FC{"/O b
-8j>"-7;wE7g\\o$ek(cuĞII&UFLS6+NJtISel|;W&'?>OE'8ŷJ\?iGM^X<endstream
+xڥr6]_P["Cfĉćb+T%y לDV/WV w7`u2 O/D9~\wF^\(6`0TNya}l-:Wv'\)޼@~wߺeWogo{_^u==Uh~/2#t:~\>@u .
+Sv[hMWuڣЯnpW|i\v{0\
+#l(C?ccQUv^ &<Z݀!@[QV@XLPD%to ݇uC"+Gs: ~AX7Hc{GAgo#ˍy&3)XJ\Q>wž-z,-^<q_4DRjؽ1i n˖G$*<mfǰk
+E;!~plݵ*$E?/GE1V/~@vڑg@D{i^hjss$^<+PE6ȮYF<a(-7[lm.'07KmkS2 qD2>D$K؂A3:';kľn>WI'BA2(@__&=XzX/WjVG6("ӗoJ$:u`CwoTz2$6`(&a9 Sjَ#ۯhGM]oFpd}lfK;6tSvɂEU}IN*X
+ᚧu!)5ua ݰ| DvC?S'(* I2`, a ~Hh}<\8aΏ<"A#y뎺H&8P:ڛ0OV|X$"sqx~`J֧#4aG26/ɉx߹SɑF+‡Aҟ(F 4ж>'tMJN0oӕp_
+֔=n
+"`T+4&vYVM"ib6 1Y 9@&d|3%I^KFJ5
+iP=r\t1
+靧+ζ֮|n M/<>dMw0ӭ#ρ`̆QxCsɆA_*)llKXVuY%v;O# y)hYbTT A?]yAo۰xtӉv1
+XCz&ٓM}̮HPAJt Ŕ*AU"gd HaPjے(
+U)o|z~@7UEIoHfOzu8=m 4Y%庱ts4Be*sJ;ང3qЗ >\ΠX}oQߒMN%wQ೩Z)b,OA|]U!/
+3U}ʍYkTUF&zcvJy⒘;s>6('_l*3j03Fo~tr՟ձ,=C@qk`EKS( җi !dS%5uA^<
endobj
-5532 0 obj <<
+5925 0 obj <<
/Type /Page
-/Contents 5533 0 R
-/Resources 5531 0 R
+/Contents 5926 0 R
+/Resources 5924 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5548 0 R
-/Annots [ 5537 0 R 5538 0 R 5539 0 R 5540 0 R 5541 0 R 5542 0 R 5543 0 R 5544 0 R 5545 0 R 5546 0 R 5547 0 R ]
+/Parent 5895 0 R
+/Annots [ 5930 0 R 5931 0 R 5932 0 R 5933 0 R 5934 0 R 5935 0 R 5936 0 R 5937 0 R 5938 0 R 5939 0 R 5940 0 R ]
>> endobj
-5537 0 obj <<
+5930 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [417.299 388.145 472.685 399.835]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/download.cgi?filename=cupsomatic\&show=0)>>
+/Rect [384.951 320.399 440.338 332.089]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/download.cgi?filename=cupsomatic&show=0)>>
>> endobj
-5538 0 obj <<
+5931 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [365.076 279.146 434.644 292.047]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/download.cgi?filename=lpdomatic\&show=0)>>
+/Rect [296.178 224.949 365.747 237.85]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/download.cgi?filename=lpdomatic&show=0)>>
>> endobj
-5539 0 obj <<
+5932 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 265.596 179.218 278.498]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/download.cgi?filename=lpdomatic\&show=0)>>
+/Rect [442.864 224.949 510.766 237.85]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/download.cgi?filename=lpdomatic&show=0)>>
>> endobj
-5540 0 obj <<
+5933 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [286.484 239.104 364.4 250.793]
+/Rect [236.356 184.907 312.341 196.597]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/till/)>>
>> endobj
-5541 0 obj <<
+5934 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [323.843 225.555 392.533 237.244]
+/Rect [208.094 171.358 276.783 183.047]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.mandrakesoft.com/)>>
>> endobj
-5542 0 obj <<
+5935 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [339.529 211.4 370.915 224.301]
+/Rect [174.108 157.203 205.494 170.104]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.fltk.org/)>>
>> endobj
-5543 0 obj <<
+5936 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [403.684 211.4 428.706 224.301]
+/Rect [238.397 157.203 263.419 170.104]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://cups.sourceforge.net/xpp/)>>
>> endobj
-5544 0 obj <<
+5937 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [407.442 184.301 432.313 197.203]
+/Rect [148.686 130.104 173.557 143.006]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://ppr.sourceforge.net/)>>
>> endobj
-5545 0 obj <<
+5938 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 170.752 151.596 183.654]
+/Rect [256.19 130.104 296.471 143.006]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://sourceforge.net/projects/lpr/)>>
>> endobj
-5546 0 obj <<
+5939 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [176.334 170.752 212.114 183.654]
+/Rect [318.929 130.104 354.71 143.006]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.lprng.org/)>>
>> endobj
-5547 0 obj <<
+5940 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [115.558 157.203 176.975 170.104]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/download.cgi?filename=directomatic\&show=0)>>
+/Rect [194.892 116.555 256.309 129.457]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/download.cgi?filename=directomatic&show=0)>>
>> endobj
-5534 0 obj <<
-/D [5532 0 R /XYZ 85.039 781.388 null]
+5927 0 obj <<
+/D [5925 0 R /XYZ 85.039 781.388 null]
>> endobj
-1750 0 obj <<
-/D [5532 0 R /XYZ 85.039 719.568 null]
+1730 0 obj <<
+/D [5925 0 R /XYZ 85.039 719.568 null]
>> endobj
-5535 0 obj <<
-/D [5532 0 R /XYZ 85.039 698.974 null]
+5928 0 obj <<
+/D [5925 0 R /XYZ 85.039 685.425 null]
>> endobj
-1754 0 obj <<
-/D [5532 0 R /XYZ 85.039 422.679 null]
+1734 0 obj <<
+/D [5925 0 R /XYZ 85.039 382.032 null]
>> endobj
-5536 0 obj <<
-/D [5532 0 R /XYZ 85.039 402.691 null]
+5929 0 obj <<
+/D [5925 0 R /XYZ 85.039 348.494 null]
>> endobj
-5531 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F66 3242 0 R /F14 2895 0 R >>
+5924 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5551 0 obj <<
-/Length 3801
-/Filter /FlateDecode
->>
-stream
-xMs۸_ft'bHJO&Ͷɺ3=i E*$I7}y
-883ʇͅ~ K};NR/ڒ bAW,KU8?<0<lq>]j0{s_`zEp"J+9<?\d.Quk`}r`+2Q58S5eV&i֣F12Wd@DmS=a n@DŽb(}E*pCmLj7Zuy%#G.l,8jOTx946YGF"T#ߘ3 فX!llJ(_>rwxq)\9"pq8; ҁf>#,Hb&Kҁ]
-Yڑ&
-{kYS !2׮; "qJ:o1_ykbeyn0[o^O`A)ߴjPUnshC?yDLEY},s =ƎɌ3^y#PlO1K#L}T
-YKj! b?؜X] oЖ8 k&ycpU8m`nl4`sܴE)"lGC5Fg`xwU2v^B\QXVMYE,[6LP車uA.P)gx\xX/^1jgI3Y蹌O' LZCA;l|ydh15pdץ(2\%><p) qG8V 1''%\jM1MYq@7)pFfD3?%Y"˘iZT`]osk0$Б!ec5R58Pdt-S>+Jd#'k)q
-I2
-\O2B=aN5E(OE{_q# ?QQRT9ҩFpxP䝑$E߀meg ieCplg Ad4&#Jcjg3DU8,v̞K+p ҄_sٮY.= ^9IH̄Xn™6do9Ne Z>0dOyRnt.
-2cI*}I< s Sԡѩӭ2hgꈮWjʺdX8t^siO ;s/9HNKxׇC`S
-fMR?Pw.(構D.^q #AU+6B#"(|שz<|
-Ik%# lɌZ&@7oq_h@ZVe L\ӮqPr mY9Fr;C))qE7oVt!yޭ9e`"~PSu*.$8{:#d
-('s;47!+Ε6D"Td0 HOܣ7D_nԅSտx)v)}%PpQ}43/FBps_ )Vg^ Ͻ!ƾ2b>h%~h_If-
-`(:Z]ww]K/Q!vg_{-w31ƾ&HRO_wˬXzw\ Щ9
-!suhm:`)krR*|\X{70=Ǐr5&@N#ͮ,_}2 k6@
+5943 0 obj <<
+/Length 3864
+/Filter /FlateDecode
+>>
+stream
+xڥks~N 8<OvJkGig|B 
+ۆG]U~. Iv<KC~쪘: b'kn9 &f]Ю89Uð߮iWkjp eUpxʌa"%BCm_A]Y9!)e$ /x %7
+)jdtE:2
+$s>p>)ZՕGb%j͇8OJH7%8?<g YV_Nv:ݹ+m-'Z\Z*9ض>hò!@Rr4> r0wE"Žtc%zv$)|(I۔_ FL)(nR(2^Δ0?Kr痪b>k^Vp' -߽eKiRlJP \Qt''%ŚA"ӔdKWˈ5.guGĞe5K4A3%P>v(*@G"o|f1;)FI:{V+
+])V@#JW#o}GHkVhIVOT~Ax(QJegCJP"!ބlE<K!N?tG-VRv
+۳-Gnj*”ή2D@)F9/jU Fca% `﬌Mch7-q@^d!^P0}$q%#14O$y"84"a<:)II@ mf@%ji\"xs?52f93NxInBrQj3uWs'xC1V_A&~/K@R5onL.=Qn B R }}k)C5<'ytJ<aA AP*(oexₗ$ga.n
+GN_9"erw3^V02dlMО5F6
+ف䜑c95_)N>5E<L{
+bv 
+VVʶ=6pi^-
+\8gOLˍ|+KTn *"\J ұqN-8Dڇ`;#0Q̜Ґ|b*)э
+ (0h pd3R\.\fz|(MEU߯X ll wCODH \@rR `>Jm_BzNSu~T'd͒|0ODj;>RR?]Iϖ)ہ6}\1оzwJ@RUdr`T,H.iZӶYOK"#m;*vvۡO]k=^4IE/y[FJbs1yH|Hڴy'ƼdІeI<mh>bn{]o4GQ :]&$"}*3zv‡`/v‚yNhę h'l\_}ᄮ12B<ehOTR Ul
+-
+ș`L^`5rY i Np^i mAs]%*r(
+:Ű))ʷ8E
+k̦_bc y?Z-v1-?_n\M-l75- FD:%;,endstream
endobj
-5550 0 obj <<
+5942 0 obj <<
/Type /Page
-/Contents 5551 0 R
-/Resources 5549 0 R
+/Contents 5943 0 R
+/Resources 5941 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5548 0 R
-/Annots [ 5554 0 R 5555 0 R 5556 0 R 5557 0 R 5558 0 R 5560 0 R 5561 0 R 5562 0 R ]
+/Parent 5895 0 R
+/Annots [ 5946 0 R 5947 0 R 5948 0 R 5950 0 R 5951 0 R 5952 0 R ]
>> endobj
-5554 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [465.465 713.243 512.306 725.538]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip\&show=0)>>
->> endobj
-5555 0 obj <<
+5946 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 699.694 126.672 711.383]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip\&show=0)>>
+/Rect [417.336 699.694 477.54 711.989]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&show=0)>>
>> endobj
-5556 0 obj <<
+5947 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [362.259 564.202 455.161 575.891]
+/Rect [126.184 550.652 219.086 562.342]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/download/foomatic/foomatic-db-engine-3.0.0beta1.tar.gz)>>
>> endobj
-5557 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [449.589 550.652 512.306 562.342]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/kpfeifle/LinuxKongress2002/Tutorial/II.Foomatic-User/II.tutorial-handout-foomatic-user.html)>>
->> endobj
-5558 0 obj <<
+5948 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 537.103 137.066 548.793]
+/Rect [172.618 537.103 264.005 548.793]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/kpfeifle/LinuxKongress2002/Tutorial/II.Foomatic-User/II.tutorial-handout-foomatic-user.html)>>
>> endobj
-5560 0 obj <<
+5950 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 240.82 167.248 252.509]
+/Rect [111.316 213.721 139.975 225.411]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www-124.ibm.com/developerworks/oss/linux/projects/omni/)>>
>> endobj
-5561 0 obj <<
+5951 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 186.623 171.793 198.313]
+/Rect [111.316 159.525 144.521 171.214]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://hpinkjet.sf.net/)>>
>> endobj
-5562 0 obj <<
+5952 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 145.369 195.687 158.271]
+/Rect [111.316 104.722 168.415 117.623]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://gimp-print.sf.net/)>>
>> endobj
-5552 0 obj <<
-/D [5550 0 R /XYZ 85.039 781.388 null]
+5944 0 obj <<
+/D [5942 0 R /XYZ 85.039 781.388 null]
>> endobj
-1758 0 obj <<
-/D [5550 0 R /XYZ 85.039 761.463 null]
+1738 0 obj <<
+/D [5942 0 R /XYZ 85.039 761.463 null]
>> endobj
-5553 0 obj <<
-/D [5550 0 R /XYZ 85.039 743.459 null]
+5945 0 obj <<
+/D [5942 0 R /XYZ 85.039 743.459 null]
>> endobj
-1762 0 obj <<
-/D [5550 0 R /XYZ 85.039 373.187 null]
+1742 0 obj <<
+/D [5942 0 R /XYZ 85.039 386.736 null]
>> endobj
-5559 0 obj <<
-/D [5550 0 R /XYZ 85.039 353.199 null]
+5949 0 obj <<
+/D [5942 0 R /XYZ 85.039 353.199 null]
>> endobj
-5549 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R >>
+5941 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5565 0 obj <<
-/Length 3882
-/Filter /FlateDecode
->>
-stream
-xڥZYsF~ׯ`%Ж9fpͱ|%>$ 
-l>
-#H:88RPhttbeOڟ TL{~b|91מo<3l
-|i/O278C[B_^ٮԸ'7Aåk7uoÞ .侼ƶ%^r>@dtE ~/omx3|WQ6H]MpuYª_6zۨWiwu2p`xw{e'7x.7u1t}aHle
-
-/ӱ<4ЎeqqrM@`] %H}ޗf e,KǛ|xKyre(jNzSx>2t|D%`Uӿ. 0 GQk__(*Ki[zw[;0!
-a)_2L 㻉X]7eBAF
-V܅(m:&Eײ+]keYQCs ŢM)Øș  v 9?q캡Ms˼EnerOD4w8~n5ڠh'[ܢ c=˭; t s'CqC˒$у% = I49"=֮[D~,XozWep^<;aM}&^=I{=hV(}g95gN2-mQ4ZF4.}#2IT0 =/@8UCLC7-^FA[yV.¾cTeL<x2.]ihpIg %´ؙD qR46#ou~DӁfYfwT}:5ٰ)b3l+H'%B+~כخXD"H&GIFiE.kDB %*џ(A[|a*
-tJB%91n1 Pv܋*
-W[;``1!%s{RV(gNޚoDzC٩2
-9*E 2Q8rWhXfZbn,'(Qs^3AhS0(#6BVPnLbĬl7AoW,f$ [^Y gǝ|Q#YtYc4yTN[J7=v2uA5Exr.!9ˈ[puEa5,{™1 P%&)H|(Rif)vGh! 6&"{+vJ0,  l DS%sitGx)%* Sw( a+mz$><4L$򂄊7[MC {2]g-$8fDA6%(C@ɅIσsL9-IIU4TF{%v(eh!.M&#VrgY$GQȯ,hb\\89A=jۊBnrx联'^&}kژzIfA
-SHߛڱڦk9y'ysOqe/rhwc-
-n7PU"}@S9TFyĢ|]ߒZhNs\S,Bx=ORd$]*}t!ϗ[q_!w nxbiĸRJ/4I(/_Nw0bi\B\H'v*[NU5(+JwI;b!;>zݑ^}Ao$ǫ &Ra~A`'wL4`;Ak/sx ↽'|לUP("_q'r5 `haZLDOZ<EyHjAgb{`tFUV}/gzdq!ieN~k${D82dSyJk0G+ß<N2q r_25>:;C֋_o0:̑!ҵCSWEWxS)3oRz%VqBCpx[ 4@ދ)1X~wEZ6BȳsLy5gj2R;zņQ N(ECvSh[ d:#HJ
-sLz΀3aÙS`,LkDiZlv/+$cK_A[=9/㏫!VFI=t6n]dxm$ޠb;)hdsJA:A VIO;a]ѷ㠧qU%_L~ǧNUR@bU|JtW=a
-^J&w zHI;?[sendstream
+5955 0 obj <<
+/Length 3768
+/Filter /FlateDecode
+>>
+stream
+xڥrF]_K-`p͎dY%s-yUI $
+3Om{h Rh*ƙwkIf<gxEVK6VxY#߷@f(˱ԁ/!*h׎>؍ m]_~oraWZ'[ L g{V2AUF4EyYPY=I|"
+i>.i~#X3<%N"<iPcx>@&;[bqc@_%mx*KwoB톣 m7p&^/Ny2޿KVuˀ넶6;`pNo*e^3u@ .*k_1m]Wx_
+a`^ʳ}S$<ۮ}L ijI7=z^hA|Rmw(AnZ#D.e%?TP3Yv4=Cك"^A*/X*gUۡ/`OTk&
+pZWBO{l2
+%HIqCP
+@/AMpqY0x6AOH*YX]W+T}R33i\Vr0"2< ߤN[I&<0L0ph/8tȃJp6+>`UtM[W cҿ47xBF阀Hx -;#N=<2(8_s]p$̰sϴS_WrI$D@(MڄGKʞ`@"βW&)Rx}b%9L[ՏG"ܠ`#
+ԫ]\C&>BUguF(RF,!xżP%FE^f)+y6>e߱~ʒr69e]d90$ h\zzg (ImHI"0kzuZK5 Ӌ$*lͺ~L*`8F-g}]ȕ;C>!Edhdx$T*ӑ]ȀTU4(v b
+"ХVc<! S)X3`LG"]Th rp֍m,F^^s){^_՚㬳e ܜ.pH7#z쮚yq iE%̂vh}cSr? {si5kry k#>܃:xM8t7D^ZȠlSu1M buF 3Xt?VnLf[~VK2cZYd픍lF9;ŵV̌|9td N-V k>x6˩ܳ</mWɠU*,\m+v;tOv< Mݻ_L^eҋ=9tmEpٳܣuA-ZCE,#
+9/089g,г#6I֥] lЄrW|<`˓>(DOvf@LC+[m"<pK
+ *-xD' U ?EKeV| ~PBbzOH]&m,Crw\cYzB(α:8e9ʣfF#Ui69
+0_00Av0I0IݵV`-ܑFTTa\t7(&Ә& ${d̦OQ8eꡉ #j{(o4f b_X
+,Ǖ*Ptm^(cgcwpUv3yD ?O9ݲWInc4lr?U-K*bĒž4%`
+r D5 O=ꀈ࠼fJ8|*QW4-HTN;B2xev߈;찕%!ԭ2JDŽ(oxMV7G `ZV ӡX5(djmim6BB,#/N+ %҉agV[a| EմHP^l#CӦY0ԅϮ3t'ri˽Dehk(1
+7.߇g6-50(sNIk(J<lc JĽ<FoWI!ξv<.ھ#`Ya|`ywptE7?넰W9JI ,%y<gp,v %
+Ť4@Βi+7=Oo<'5kΑ~r&ᰂ
+q漨pB(4433z$ Mu("ls}tB=s_qtdSC&Y/^-z/~+ *~kP3ӄEJq#w>_榻-x(
endobj
-5564 0 obj <<
+5954 0 obj <<
/Type /Page
-/Contents 5565 0 R
-/Resources 5563 0 R
+/Contents 5955 0 R
+/Resources 5953 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5548 0 R
-/Annots [ 5568 0 R 5569 0 R 5570 0 R 5571 0 R 5573 0 R 5574 0 R 5576 0 R ]
+/Parent 5966 0 R
+/Annots [ 5958 0 R 5959 0 R 5960 0 R 5961 0 R 5963 0 R 5964 0 R ]
>> endobj
-5568 0 obj <<
+5958 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [229.571 699.694 271.655 711.383]
+/Rect [166.274 686.144 208.357 697.834]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org//kpfeifle/LinuxKongress2002/Tutorial/)>>
>> endobj
-5569 0 obj <<
+5959 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [474.768 699.694 509.276 711.383]
+/Rect [414.258 686.144 448.765 697.834]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/newsportal/)>>
>> endobj
-5570 0 obj <<
+5960 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [382.128 685.538 512.306 698.44]
+/Rect [267.768 671.989 397.093 684.891]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/macosx/)>>
>> endobj
-5571 0 obj <<
+5961 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [323.743 672.595 408.715 684.285]
+/Rect [153.592 659.046 237.013 670.735]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/newsportal/thread.php3?name=linuxprinting.macosx.general)>>
>> endobj
-5573 0 obj <<
+5963 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [458.132 208.512 509.276 221.413]
+/Rect [84.043 167.864 135.187 180.766]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://printing.kde.org/overview/kprinter.phtml)>>
>> endobj
-5574 0 obj <<
+5964 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [188.809 194.963 226.257 207.864]
+/Rect [216.837 167.864 254.284 180.766]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://gtklp.sourceforge.net/)>>
>> endobj
-5576 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [175.286 61.174 435.003 73.167]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/printer_list.cgi)>>
->> endobj
-5566 0 obj <<
-/D [5564 0 R /XYZ 85.039 781.388 null]
+5956 0 obj <<
+/D [5954 0 R /XYZ 85.039 781.388 null]
>> endobj
-1766 0 obj <<
-/D [5564 0 R /XYZ 85.039 761.463 null]
+1746 0 obj <<
+/D [5954 0 R /XYZ 85.039 761.463 null]
>> endobj
-5567 0 obj <<
-/D [5564 0 R /XYZ 85.039 729.909 null]
+5957 0 obj <<
+/D [5954 0 R /XYZ 85.039 729.909 null]
>> endobj
-1770 0 obj <<
-/D [5564 0 R /XYZ 85.039 444.64 null]
+1750 0 obj <<
+/D [5954 0 R /XYZ 85.039 417.541 null]
>> endobj
-5572 0 obj <<
-/D [5564 0 R /XYZ 85.039 426.901 null]
+5962 0 obj <<
+/D [5954 0 R /XYZ 85.039 386.254 null]
>> endobj
-1774 0 obj <<
-/D [5564 0 R /XYZ 85.039 156.323 null]
+1754 0 obj <<
+/D [5954 0 R /XYZ 85.039 140.652 null]
>> endobj
-5575 0 obj <<
-/D [5564 0 R /XYZ 85.039 133.005 null]
+5965 0 obj <<
+/D [5954 0 R /XYZ 85.039 105.906 null]
>> endobj
-5563 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F66 3242 0 R /F14 2895 0 R /F35 2880 0 R >>
-/XObject << /Im1 3957 0 R >>
+5953 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F58 3365 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5579 0 obj <<
-/Length 3690
-/Filter /FlateDecode
->>
-stream
-x[[oF~0PS@EsEȥHS7vm"-D~mxh{IQsf;ձqێ(:)k |zqut@+ǎꆆ\X/~q<KtTYz3ihTֻ 4+t~\lgG]v5Ӷ<Gۋ[HkO*ܧyg l7QƨR p}(v5[_fZәV[˰Yr5)k-E&AE^7\*owS|=u#T<?YVI\C{R7q=sxcX6ngzqS&_/l̬;SH┆e{<=_Z%ٳrm#v1Z3sZfUPA & RV\[@J:¼8++TƆ>A7Ivu9ARna'׍#+?QJ*F>!e-d,^CDm;d
-t/@ V+^b "8hƏUݙM1KU4}E9~qϱhOʊtOI-*?^CsCpF4ŶԮw@6rT=CE#[+jYw_Qr^5)j`vB~߮L;V6ɪn"`Id4nE,&fp=T_L+eCrBy$~Y3T+@Q7cmA3<\ [ɎUrH}pS$f󸥲Q7*'ۙv9n^JG + R8ei>A(?,K.e
-
-
-];A>a`]x|i@#|@w{hW\etąozq.w7r9ൿsu"FkjP|ȳC<"ؿGO:;*F8u%b[1Uc@wdJ0OBBj;2>Jq:3+y2+UTWHJ#.琕Vz rxqZei &VcsGMfaH 3V9(9dYCqH~yl&gvnITu F~
-N68c2<pL+.TlF{5Iά U;&d56M2"C/ xDKu&c[]e1黽8/ppun6fZgd{Bჽ+2NIc8C2'HMR7ʢs^@ -l[[iGF=i0omV:f~ 6 0UrKLUx|x"9If(qb6*,eq\Ⱥ$,
-:ڶ W<Pg%s%L0RQEV]`8aN7 $Q
-sjϤu* b[ܾV[5B) ^ۚF GQ-b Gn =hhQKxG|Y 1'Pi+P+6Lj'h+z1;N0Ӱ\nijGt=KF^S;CB $Bo
-TyE%M OUq]ݐӹ>Tag«f9޷i֫rz>rp;E#nϑHX 8gn.2aD
-0"8FBgd81he|E7#| Ep*kuT[EF#3߼0cd2WKk%gbA_BI(Ò N+8v'RelVxCg랋cN7|~k 1<#v_RacU*&_s#⾪3T]b "p*5SYU B-!P/7P\ ȋ<zo1=|ǶiF+O.F[Y6nfn6MS ]'*A'酬-obF%n_=yH7bSд̊ 7sРYEɃk9(ת5 ŀvd,w54|zT%OW%؈ӱwc s][Nov3VEauSA_ZfBy}_0;xOOm}ⱀ(^& 5P4 E>on<#R_;Ql~endstream
+5969 0 obj <<
+/Length 3376
+/Filter /FlateDecode
+>>
+stream
+xڵk6
+2P)"Ezi&6|8EZ[]re9ܯyzY\`cΐyb?|E Njz.0Jh[-ﮞ :/<|oqۻ߭l,;+; #+aw7on޼Na}Vg1͛f?縫^]xW^*eyb[zu:^-u `<ί_R1YC\#-`:-d+ٮla+[Uo`{/V6
+}V2:JnT0[<`-1m8=ezc3,mԸs" tT8ψ#-<\r |7&nD70tJTQW#=OOM40;R$t<!;ߟ5#Uno8Pn5Ļ2422z8q:~㣓g
+ 'Hˏyv6/RSp_2t\Vc x ܱ[౵)Ւ!dX ^~B /2{,QKϠ`꩛J>AB^JGŪQ11I笘Ͱe
+x
+6I,m,YqtvyEJ^67ˑ WO(9aO+3hV'6ߣ8-Ф
+BPqЭ)"ԇ:N086"7zə0i~)cE ptZ0cNg`}:}ӦxעF6&)Ğxw\9q{ٻ?j
+T%l1&]BT+dCߍX]{}͎=->2Zc`}>8
+kgW %
+ ! c.Ŏr ?);z |qxB=gI[N9H{}_9~4R0v h@zZ@_>T-GNj70>d FŎ3[C_,YfMRyxxמH P 5u5h)6ߑyw Z
+HZ#Q^eqUh2EX6HHNҿ#c ~'`%t9؝퉫.<`l
+>Xok^G'<0i^
+I\nJ?vB
+ PZe/L*z|u:M/n0j BD!bKtTKG,aK^ 5kE LTkvm^?<@tKPUer8πWJ'q>aVj_*\1#.R*gJ57]U.t61aS%)B+uڑk)8*ْ~D}È3kAǡ A Ƿ6Y[|n[dE B
+\%! }n<9S]F~me]) 8-<]*.l rw_<RZ B뎝X?\r/Z?~R. ˤ2Q:m4,Ik@K̩ZzE}7|պN"U+Y}J>.5֯QV:Âxn#E FOLώpB`8ȵҚO8Ҭ._<u](W؁3Mj+l\aw _a7nߨ<;f{à&nLTWés" 3spU_I6K (!l
+M>> endstream
endobj
-5578 0 obj <<
+5968 0 obj <<
/Type /Page
-/Contents 5579 0 R
-/Resources 5577 0 R
+/Contents 5969 0 R
+/Resources 5967 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5548 0 R
-/Annots [ 5581 0 R 5582 0 R 5583 0 R 5584 0 R 5585 0 R 5586 0 R 5587 0 R 5588 0 R 5589 0 R 5590 0 R 5591 0 R 5592 0 R 5593 0 R 5594 0 R 5595 0 R 5596 0 R 5597 0 R 5598 0 R 5599 0 R 5600 0 R 5601 0 R 5602 0 R 5603 0 R ]
+/Parent 5966 0 R
+/Annots [ 5971 0 R 5972 0 R 5973 0 R 5974 0 R 5975 0 R 5976 0 R 5977 0 R 5978 0 R 5979 0 R 5980 0 R 5981 0 R 5982 0 R 5983 0 R 5984 0 R 5985 0 R 5986 0 R 5987 0 R 5988 0 R 5989 0 R 5990 0 R 5991 0 R ]
>> endobj
-5581 0 obj <<
+5971 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [148.013 703.447 407.73 715.44]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/printer_list.cgi)>>
+>> endobj
+5972 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [378.225 747.083 512.306 759.076]
+/Rect [371.497 676.349 539.579 688.341]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/printer_list.cgi?make=Anyone)>>
>> endobj
-5582 0 obj <<
+5973 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 733.534 323.852 745.527]
+/Rect [111.316 662.8 273.67 673.883]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/printer_list.cgi?make=Anyone)>>
>> endobj
-5583 0 obj <<
+5974 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [386.739 679.034 512.306 691.936]
+/Rect [371.497 567.652 539.579 580.554]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/show_printer.cgi?recnum=HP-LaserJet_4_Plus)>>
>> endobj
-5584 0 obj <<
+5975 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 665.788 404.531 677.781]
+/Rect [111.316 554.406 354.349 565.489]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/show_printer.cgi?recnum=HP-LaserJet_4_Plus)>>
>> endobj
-5585 0 obj <<
+5976 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [377.256 611.592 512.306 623.584]
+/Rect [371.497 459.562 539.579 471.554]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/show_driver.cgi?driver=ljet4)>>
>> endobj
-5586 0 obj <<
+5977 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 598.042 323.852 610.035]
+/Rect [111.316 446.012 273.67 458.005]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/show_driver.cgi?driver=ljet4)>>
>> endobj
-5587 0 obj <<
+5978 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [174.8 529.993 417.833 542.895]
+/Rect [508.95 377.963 539.579 390.865]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/cups-doc.html)>>
>> endobj
-5588 0 obj <<
+5979 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [456.688 529.993 512.306 542.895]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/pdq-doc.html)>>
+/Rect [111.316 364.414 325.713 377.316]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/cups-doc.html)>>
>> endobj
-5589 0 obj <<
+5980 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 516.444 312.896 529.346]
+/Rect [371.497 364.414 539.579 377.316]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/pdq-doc.html)>>
>> endobj
-5590 0 obj <<
+5981 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [450.04 516.444 512.306 529.346]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/lpd-doc.html)>>
+/Rect [111.316 350.865 182.533 363.767]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/pdq-doc.html)>>
>> endobj
-5591 0 obj <<
+5982 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 502.895 312.896 515.797]
+/Rect [325.181 350.865 539.579 363.767]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/lpd-doc.html)>>
>> endobj
-5592 0 obj <<
+5983 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [392.387 502.895 512.306 515.797]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/ppr-doc.html)>>
+/Rect [111.316 337.316 136.217 350.217]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/lpd-doc.html)>>
>> endobj
-5593 0 obj <<
+5984 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 489.346 186.642 502.247]
+/Rect [216.087 337.316 430.291 350.217]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/ppr-doc.html)>>
>> endobj
-5594 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [311.286 489.346 512.306 502.247]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/direct-doc.html)>>
->> endobj
-5595 0 obj <<
+5985 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 475.797 163.49 488.698]
+/Rect [133.74 323.767 388.228 336.668]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/direct-doc.html)>>
>> endobj
-5596 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [405.345 462.55 512.306 474.543]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/ppd-o-matic.cgi?driver=ljet4&printer=HP-LaserJet_4_Plus&show=1)>>
->> endobj
-5597 0 obj <<
+5986 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 449.001 512.306 460.994]
+/Rect [394.406 296.971 539.579 308.964]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/ppd-o-matic.cgi?driver=ljet4&printer=HP-LaserJet_4_Plus&show=1)>>
>> endobj
-5598 0 obj <<
+5987 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 437.876 146.308 446.535]
+/Rect [111.316 283.422 492.799 295.415]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/ppd-o-matic.cgi?driver=ljet4&printer=HP-LaserJet_4_Plus&show=1)>>
>> endobj
-5599 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [470.223 421.6 512.306 434.501]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/ppd-o-matic.cgi?driver=ljet4&printer=HP-LaserJet_4_Plus&show=0)>>
->> endobj
-5600 0 obj <<
+5988 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 408.354 512.306 420.346]
+/Rect [421.347 256.021 539.579 268.922]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/ppd-o-matic.cgi?driver=ljet4&printer=HP-LaserJet_4_Plus&show=0)>>
>> endobj
-5601 0 obj <<
+5989 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 396.191 215.035 405.888]
+/Rect [111.316 242.774 492.799 254.767]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/ppd-o-matic.cgi?driver=ljet4&printer=HP-LaserJet_4_Plus&show=0)>>
>> endobj
-5602 0 obj <<
+5990 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [367.133 326.755 512.306 339.657]
+/Rect [342.861 147.627 539.579 160.529]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/show_driver.cgi?driver=ljet4)>>
>> endobj
-5603 0 obj <<
+5991 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 313.206 323.852 326.108]
+/Rect [111.316 134.078 245.034 146.979]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/show_driver.cgi?driver=ljet4)>>
>> endobj
-5580 0 obj <<
-/D [5578 0 R /XYZ 85.039 781.388 null]
+5970 0 obj <<
+/D [5968 0 R /XYZ 85.039 781.388 null]
>> endobj
-5577 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R >>
+5967 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F35 2980 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5606 0 obj <<
-/Length 3437
-/Filter /FlateDecode
->>
-stream
-xZ 5(AP8㠵E(WJ)ae!%q.X|qp]ā"]ۏp,v
-gl' ۫wZ8Hnqs}M:boV[o޾z}K)htoU[L_o;_nvU>\`?\9ċ#MJ(_ջYO-xn'з";=s ~0s efZ/ ˴_^5IG6ie^>dM8|o4YnڢnF^d{ۡ͝ mSsq[2|R
-sWk t a zNnR*?"W^l=YVjV}HbF2o%oZx_`^b 5b%zKk$]( aVQ
-O
-<]ӥ!-qr<lOi[r_=SmDxiO]#'oi8I\{_RYr}[ˉb1FGv;x }|9vYTwns_V<N6kMlXu]+/X8
-}}¬+gr"xC2My-JYĻ W dzn;r箢Hl{㴇= #⦎אuYXZj4+PwL\]0`~tY)3TU
-} 3Ћzҝ(؞k1l&׃(>
-b5Smz2w*>%!]sָ l W{f7$>8rdc 2زg`k4/g$#܃f#
-BweΔ#g{)8u= 7ItC#
-7
-d>|ڜgXS#9cg/OospwڦUפ&P2'@Ttt-Gs>z`(F4aVJ_A 骶@7T.Rb v
-4gZxb((L 7zHF
-Isφnsڦ% f<L:PgԠ r%2bfU<'m0%h oǮNΘM134yGiE5ĄucF)S2BgQό
-Sʎ agx29v6gNwi3k>&2+Y1 o8f rX;X[0p3d$9 )D+*nlO  ӄmkDm
-ɽkEH5\M*\BNE
+5994 0 obj <<
+/Length 3477
+/Filter /FlateDecode
+>>
+stream
+xڥkoF;\(E\"S$mmŵĆY>"oRE;;ܙݝȟyϟ%tJ|W$lfykFYX8oﯖEKg:Fbv !|Z%λosO>G!
+WwWp_MJ$7Ju,fs#/sY]A8<VN4g2S
+_|Nw_4Eu]@!u!y0JφEث?d?R l6b3,fLg_23|yNYyw<Ml_dwX+_|q|gx|َꢞZ8$o 绡'_=uLb7 I)ٗ([zQ| {hjEѲ\%k%%kjː r{u
+ZxLApj" D
+~/ v=f*IՊg˚i곂SeU-j%>Jx+_Yvhp[\
+Mo:֫Glz !T9<T
+θlqo)󆟲hn`5gzUQ(޻&̊Ck*4O^$$Yљb@8ӀǽO&b ֝YL%}w<5Cmk`TNQagwbfvʒ&ԓw|Czs }K,.;sH/: tDq9YJ PP0
+}Gnay"æ4!+7R7"HgK5cÍ~ RB Ir˶\ȶ,}*(HC{G$ZգyAg
+5UrcsAh$/y=7H/%SsViSKJ̑UKϳᛴ2ގtK8 K;n-
+eP`fl6_Dzv`QilTjê=+îTz/ˢykZV*{(lvF08(y0H/%SDzUɍRv`6W1%xaeL9{uX !>\ ) \/׌HKdQ7#UD
+°&
+ FL\<q=2uKі ?F;,ǏlG7KW{![h8Ǻ C;< XB]x+˜'d^X$J#<^<JVm%}ˬBz!(;
+c _s^.$-|?a"wNJ!`qu
+y4%ŵ;'צxO2`Hm֐-KYјx1)
+c(`X=c|)n.
+-Rfl ˵aGJ(b0RW: f-< Sv)
+5 X}9xQp> 8Fz>] 8ا#ɢ8.jce悡YXr!
++º̣)ˮu F)ynI^TP+5EPV6tTQ<ΓyCM3Ǎ_ ' :m=6 5e\ق婯wC͉
+UP8ot*ZV:yZ#kF~㚃t2^_ېW]mp,"T=%l<[u"PNc#
+*I>xID,zq0Lʜdfp8zJtޭq&°<QbW*LGQQ+z g? h4q44#.G#Wgg/Ϫ2vWSO
+XӪ|q^.P냨#rӿXȽ3 ueXĵ暱Edbc|><R#v6[qh\gƇu o';y'oWQ ҝﴍ[icLSzn0Y?&~6T䅛3(7Ȏ5?z;a^endstream
endobj
-5605 0 obj <<
+5993 0 obj <<
/Type /Page
-/Contents 5606 0 R
-/Resources 5604 0 R
+/Contents 5994 0 R
+/Resources 5992 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5548 0 R
-/Annots [ 5608 0 R 5609 0 R 5610 0 R 5611 0 R 5612 0 R ]
+/Parent 5966 0 R
+/Annots [ 5996 0 R 5997 0 R 5998 0 R 5999 0 R ]
>> endobj
-5608 0 obj <<
+5996 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [286.952 649.25 512.306 661.243]
+/Rect [140.74 415.925 539.579 427.918]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&show=0)>>
>> endobj
-5609 0 obj <<
+5997 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 635.701 387.349 647.694]
+/Rect [111.316 404.8 119.036 413.459]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&show=0)>>
>> endobj
-5610 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [470.223 621.849 512.306 634.751]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&show=1)>>
->> endobj
-5611 0 obj <<
+5998 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 608.603 512.306 620.595]
+/Rect [439.559 374.975 539.579 387.876]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&show=1)>>
>> endobj
-5612 0 obj <<
+5999 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 594.751 146.308 607.652]
+/Rect [111.316 361.425 440.258 374.327]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&show=1)>>
>> endobj
-5607 0 obj <<
-/D [5605 0 R /XYZ 85.039 781.388 null]
->> endobj
-1778 0 obj <<
-/D [5605 0 R /XYZ 85.039 207.502 null]
->> endobj
-5613 0 obj <<
-/D [5605 0 R /XYZ 85.039 178.704 null]
+5995 0 obj <<
+/D [5993 0 R /XYZ 85.039 781.388 null]
>> endobj
-5604 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F14 2895 0 R /F15 2876 0 R /F56 2890 0 R /F66 3242 0 R /F20 2865 0 R >>
+5992 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F35 2980 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5616 0 obj <<
-/Length 3091
-/Filter /FlateDecode
->>
-stream
-xZoB՗R@Dsqubiqw(hxHIEqkD%
-cvwvvYM<&qz~2Yxܜy̼>SBM׋Bz~{v*
-&s/msۗfsb;gʹwWoo޾^
--ݖ?.m<7i
-'1|-#*yuar~9l˜;\9fVzΞM=M3;*Yyǝ0L'L7~Q'v0P)g"BUPH ].Z,͌
-"AǀU G#f/)
-%6ȋ,:dVb(
-ԡF{Da~䌌0!͢ 7a&Y
-uHZ*BT
-)#"0*xo~ȗYy Z20<[yڍ
+6002 0 obj <<
+/Length 2698
+/Filter /FlateDecode
+>>
+stream
+xڥYYs6~ׯ>Po7:[(RyH@ ! cch}
+Q iooipKFhv餃L\s零 p$Ǝ LcLyZ8x킥<B?h)gR[$XXYKo9xpq=RvM1 GrBwfV3-4ʄ=BnEw5*YGxUaF-_
+Gˏ>ma8kI%nVIsAg(9mT [1}2dd.Ƃ1:c<ISlY<"^4LnEc/3do䲴%ŝYܲCP"3kzyI
+$S
+=\z.!0HgÇ0˔j<usWbs9^ o+,rx0J,# PqLJ4I꾡buSK+Ii_@
+^b' Vʨ`fqB"f)8`e bHݬ \>\`!ӓ>RiBB:)lrG C&^5l az^2a*6yiF:WL$X[daڍHaظ2@ܯĦw?ѣyT=QBmx /46U Jxxk-π ȏCkOl? 1fETa"7ے[Ӫ(TPx>@4YRN\ԁ8pO-H=?t.[GQNDڐkr<p[V`)\upm0- \rᾝFkU٪qD)Z*
+(rM%p*?;zDF@PTfcGvARF>wjQK0;mk
+,ЋւcH}y!lQc*AQn(,ˀbf1xBx9Ɓˀ(m<!\^
+Hvy^P* < "XC`PTK`NWrcf `~~H.ɗgr/p Z~׊w89olr iR2HB3U.--6a!ꜽ;q mn+}׍GحwERg//+x NUWN(}]mGȂ= |^USDcLYiG0A@fWU/L*%/aAҋ8!B4K-S0a߼ 랪ʡ2x,"5F}5՞ıMD(׵~/ !e7AA?j5pt bq%qvux{$
+>@ 3q2mDnA8`ǗUybnC;"rՅV@NU m~~c4@hj<٩ >jJ tHa04e+Z vYKwt?Qw;GөK
+?.M =8<*7y"/H1O̍8XZ5t~^
+ʤϦh-BwjxQ(I?;V
+ xo
+yieo7xբƂHW7F}6Te[GKHg_eKe]w4bOޥaU[…z֍lbe16vV81t[B}jhد<1F-Z7pZsVX7
+Ad)S)n;X]WQ_ǡRAZ̿ve!}/eYLkr5@,ϧ8@h]Ag bmendstream
endobj
-5615 0 obj <<
+6001 0 obj <<
/Type /Page
-/Contents 5616 0 R
-/Resources 5614 0 R
+/Contents 6002 0 R
+/Resources 6000 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5548 0 R
-/Annots [ 5620 0 R ]
->> endobj
-5620 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 426.515 371.033 439.417]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/printer_list.cgi)>>
+/Parent 5966 0 R
>> endobj
-5617 0 obj <<
-/D [5615 0 R /XYZ 85.039 781.388 null]
->> endobj
-1782 0 obj <<
-/D [5615 0 R /XYZ 85.039 761.463 null]
->> endobj
-5618 0 obj <<
-/D [5615 0 R /XYZ 85.039 741.134 null]
+6003 0 obj <<
+/D [6001 0 R /XYZ 85.039 781.388 null]
>> endobj
-1786 0 obj <<
-/D [5615 0 R /XYZ 85.039 597.546 null]
+1758 0 obj <<
+/D [6001 0 R /XYZ 85.039 582.296 null]
>> endobj
-5619 0 obj <<
-/D [5615 0 R /XYZ 85.039 576.955 null]
+6004 0 obj <<
+/D [6001 0 R /XYZ 85.039 539.949 null]
>> endobj
-1790 0 obj <<
-/D [5615 0 R /XYZ 85.039 412.246 null]
+1762 0 obj <<
+/D [6001 0 R /XYZ 85.039 389.86 null]
>> endobj
-5621 0 obj <<
-/D [5615 0 R /XYZ 85.039 391.656 null]
+6005 0 obj <<
+/D [6001 0 R /XYZ 85.039 355.115 null]
>> endobj
-1794 0 obj <<
-/D [5615 0 R /XYZ 85.039 126.125 null]
+1766 0 obj <<
+/D [6001 0 R /XYZ 85.039 184.428 null]
>> endobj
-5622 0 obj <<
-/D [5615 0 R /XYZ 85.039 105.535 null]
+6006 0 obj <<
+/D [6001 0 R /XYZ 85.039 150.288 null]
>> endobj
-5614 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R /F14 2895 0 R >>
+6000 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5625 0 obj <<
-/Length 2679
+6009 0 obj <<
+/Length 2684
/Filter /FlateDecode
>>
stream
-xZ[6~_aBm^iӴSd}Hm˶r$9{.$%{4bf0!EwFNIB4ʲrw!&BZ
-1ѡHbDOsOnDrzˋ뛟J@lY37Wo^= 2f^/~T(fo~fpuX.޽ <B[2' 0uQ
- %,c42 0Ex1!dz~8Ա]x)N==o]̿C+( ;Q
-RīBlt0ۂqZ[4OV$.)ˠa9).CY_chV%AeQ)wxOӕ~j{SAW>Y9o[Eq\@[mI{oЮ=WK\Q*Vv";_ڕQNI;X.C[)|*+R4QeOggטeR8 -EGi=q<yG3W$1W3$T> _v4ﱅvn 5LY`^Ftʮ kh/qWjxT 0Qg]wWo#ycqK ɍwQšyLUR\F٥V<7!xmKmgۙcё ,6a E7'xGQ([ܔ+\JKuۺDGQ2TNroW4
-'(X2]{%?zp%ì
-z[llUy^ M5|JlHЛ
-nKk۴|;fajޓŷqC8bgދYòS21A݄g9CUo8Xip ?Ґ
-z2GQR9Q #kwL! ^Α#)owbst1-y1>\ӞzO]%sf(u7?pӶd۱&12WWLlŒHeîw>|*]?+
-gJqyǁmÇ|\9:ލ핻C3LY|fGo4U?C֫ ˑ/q9
-Siq?gY?WLiyӅ/f\xܯ 2OLTy˦8e WdGe6-F~yT0sCɹ
-SM̲;'ɞ/gP(i÷8MCNLOC"|`ܹvSïa᪫R?3qbiE0я,TzUJa8⤮8482߿I9c+tBz*ʈhmk,@qaD gIq+KhjXR:I|{m~^[.}KV=a@+_ݦL}|T/"<Rigs endstream
+xڥZ[F~_ oΎ7*[I`$b
+"[C ڪ-Wsw\5qDxd)ۋzwL60 7A8Q;d~MV^}=ϳTlEd)G??=y4<kD?y=vf>ܽ[562T1ݯ;Tp^Mvlӻ;|O/V<OxU*A]âX`V@8,͕rXXJ]Ȫǧu#=Юv؁-t2n<+q9 }>o³ۧ}N 6TL%&Hif}
+tI
+zpxGš+vS 12 ,ן啨B|&Pobg#q0OȠ#^h›UěWp3$/+8|HM''n|^x‰""
+7Bzn_~{^ YG :쾹(eG.F@W*cD0B 1saV1&܆vbxo p):h D)7Ryr:yFpc)HHYyC0b\d0̈́ H(M!%J+$ Zc^>cN@GAo#ܾNu x(C-X2(me/xKI "Q联ltFC
+cV =;)F#QHJdduR8©ɁCDdmMk}fE攉0G{jlw$`uP3REM${wfc1FSjMYjsT6Eemx6P+$̀N<V(gȼكy8hp.M:[xb0噯y(C[:f<t~uk36Y]|D=3Cu2=ey=)hdSb12pN(CFIi#Lodj&6w3t8VurkjdcY3rS>Ԅ&F+hS)F]Fgd!;`ኍi{c=RpЇ.:\)&Lս/*(r3Hڐ>HE1I؆ PrGͦW*\zFi*(j(|ק)xfnp>#s?Fy4ӶJHo @؞J pՌd׎T LeH*PҒ944~3j\xhN]c9%ubQ0طTߒPl6dErB(1nHڞrMv)#b\LJR.~o$@J4oahiFp@0lpR xnGR4D{:rrINڋnѳ..A׼ _.B9PJd+Um/Kʡ*Z M0lo4#&epYpqאI{MEuG"eܛ$7q1ռ{ڶƁqZM0lo=ı!ZWuSE*d+|jh1Ga'`9ҋ8_@Tr][;.}gNxs8_목2f췓EsR?$izhv<UͳT=T6h4uq<NjrKTxEHfJr&/dx ~vj-R3^)N!R"{G|D#/-l8`zўA3\{] I .$. ??"(Kf> i>pki_"صC%Q
endobj
-5624 0 obj <<
+6008 0 obj <<
/Type /Page
-/Contents 5625 0 R
-/Resources 5623 0 R
+/Contents 6009 0 R
+/Resources 6007 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5629 0 R
+/Parent 5966 0 R
+/Annots [ 6011 0 R ]
>> endobj
-5626 0 obj <<
-/D [5624 0 R /XYZ 85.039 781.388 null]
+6011 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [343.74 706.133 512.885 719.034]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linuxprinting.org/printer_list.cgi)>>
>> endobj
-1798 0 obj <<
-/D [5624 0 R /XYZ 85.039 466.717 null]
+6010 0 obj <<
+/D [6008 0 R /XYZ 85.039 781.388 null]
>> endobj
-5627 0 obj <<
-/D [5624 0 R /XYZ 85.039 445.52 null]
+1770 0 obj <<
+/D [6008 0 R /XYZ 85.039 691.864 null]
>> endobj
-1802 0 obj <<
-/D [5624 0 R /XYZ 85.039 210.682 null]
+6012 0 obj <<
+/D [6008 0 R /XYZ 85.039 657.724 null]
>> endobj
-5628 0 obj <<
-/D [5624 0 R /XYZ 85.039 189.486 null]
+1774 0 obj <<
+/D [6008 0 R /XYZ 85.039 351.546 null]
>> endobj
-5623 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F66 3242 0 R >>
+6013 0 obj <<
+/D [6008 0 R /XYZ 85.039 317.406 null]
+>> endobj
+6007 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5632 0 obj <<
-/Length 2789
+6016 0 obj <<
+/Length 2644
/Filter /FlateDecode
>>
stream
-xڥYIsW0t 7vxQdrCH@_5gR{{5ݙ, mOgq~̶ gwpfD!NXةַdfbbljµէէw `е^E[k^t%|Y~f=jA#Y.~Ùe@ dvmvtvB_ŗu\0]/͊%0z/؇ 0 #PNp\ "
-Ck pv[*]T;G ԵjhO4{vԹ^b
-ڪ|OKVq?k^Ύ0Ȯ P&?.0Y!~ 0~Ah'7p`AT!6HK<
-+UL?*<s8?"ŃCҼD*\8*Ǿ`Fx}
--DIy){Rb#8:QeMP9Ϟs{9.b(4{zbEY%vzd%!nA!EJqq5ebAuXNp&Wc
-0ό|l`<oqҰ%{ijOjB 81YNօ31p9,se( u/jºvK3}u{b(\93zrRV.e
-mM=yKך١lv G-A~QH Ы+,[
-ٚ_0#`sNgL@ Mq>4I}z1E0Ȋq|J-j'CwK74vճ?Ec'i8)vBZ^<%ԍl?
-?&endstream
+xkoF~(Z wC4 4]܇\p%Jb#
+Iy-(hQgd5$$N'd&kJ \@̏WޅDyn꥓UO?yX~tJ<w3݇Y
+[J؃kCYk6&UUﲶr̓\lK|yo7^zdnGD]Q6_^{:C:uˣS<<Fy7: |S-;sZv2U>+PoD)Jo !%+-oYuG1aR|F닪rӪ(rϗp;>ky1A/(yBڹ})plz c0uQtƈ*@s#{ؔL"(zkn]6YR?Èf29q| xHNƼ&3
+
+VeUi^u&dK½"gn?% Z ?圆 _|I!tbD r{!
+F: KîrS>]~Ǎ4#H@ɑ2|E7GnSV4I%ZV*7
+@W*qD⁂:kCe.َO
+{5D}%Cra;]$S!!{ N:jIPW!z`u4$sfydB3i(@M%A #M1n^Ll2P^+̈́vI!F: x\sٵ\εbtm6 %1ZMAgl0n2T twAz- O]0VpVS;@ s C!,-_|@>,++!;{a<~&퐒@>zz\Iz%da$'hxcWY$/ 3?C{b ɺλblۥ锗Ggڗ89b*2"J> c^.V(;%N7Ɠk 沸 KC؉㠸lyAn-
endobj
-5631 0 obj <<
+6015 0 obj <<
/Type /Page
-/Contents 5632 0 R
-/Resources 5630 0 R
+/Contents 6016 0 R
+/Resources 6014 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5629 0 R
+/Parent 5966 0 R
>> endobj
-5633 0 obj <<
-/D [5631 0 R /XYZ 85.039 781.388 null]
+6017 0 obj <<
+/D [6015 0 R /XYZ 85.039 781.388 null]
>> endobj
-1806 0 obj <<
-/D [5631 0 R /XYZ 85.039 761.463 null]
+1778 0 obj <<
+/D [6015 0 R /XYZ 85.039 551.001 null]
>> endobj
-5634 0 obj <<
-/D [5631 0 R /XYZ 85.039 741.134 null]
+6018 0 obj <<
+/D [6015 0 R /XYZ 85.039 516.255 null]
>> endobj
-1810 0 obj <<
-/D [5631 0 R /XYZ 85.039 711.349 null]
+1782 0 obj <<
+/D [6015 0 R /XYZ 85.039 227.22 null]
>> endobj
-5635 0 obj <<
-/D [5631 0 R /XYZ 85.039 684.734 null]
+6019 0 obj <<
+/D [6015 0 R /XYZ 85.039 192.475 null]
>> endobj
-5630 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R >>
+6014 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F20 2965 0 R /F41 2998 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5638 0 obj <<
-/Length 3515
-/Filter /FlateDecode
->>
-stream
-xZ[oF~Pќ@Ҵi47v-EKIc-E*$6CJ{A Μ9\h5 e,͔flf0݅,$Ʃo/._$L~;Zr{o,az*4ͼoʻa׷Wç{{?Ydwˋ^^}B?XrWȏzw/l0f0|E~\]\sьߚ2
-r?2N<N
-a<!buїM}þ[mKx@~w^׮We}]YEA\P㗉x $LPaԱpgVB6I>eoxX)I2:E)UUwQZ*bB?I`rɄA8,
-d~CqC^VC%{w9* 8Q.JHR>>`-*'"Y+<\w[}Gz65`8Wp̷ {+]$!ءx?';~x }N2o[5@F|8%
-m[+ r ,u_V_!\VٓMGg~XQ {$peszL,(;`U)$Xc:!9\ĶԻC
-BF {sBOZ9
-;^@|R!
- ]H>*7V@2ri m0T+ts@p̚+\6#rG0D9/QrqN3X "#JR)W<2xxrneeDGWʪ@WIDGe~`T|˻ۖM=ea7,,6J6=*wH87q9u9ٞO]鸟1wsTe(YI[.V/z_ V?/q}i~/a  c';7ZA3Q+\I;Ls)ց22Rτa0G '}o@Z6.e+F@ 4q8~‘-2ؙIb?k%btYkȅ,^7sY(?Iס} 6qm4 $Z}a줿04ak`߇2Aaڶb7`>p\8Y¶@V`l{8SuĖ;h
-J2
-a[j1+<PPˣHg=v0;o-
-ۨ#hsu\skr_.0G/tQd
-ڟؑ Geˆ}|f3//5$=4pռ*yQ7)[C&e>8n~s]J(31oIorvA4W47
-o[Â0?jb͟h%ͺ ׎ĚWIɦk%;Q#-5~{Bo3>p9Aޅ㳊tZfendstream
+6022 0 obj <<
+/Length 2856
+/Filter /FlateDecode
+>>
+stream
+xڵYYs~ׯ``JqzzmGVdه!S
+t@b!NF^>nyo׷wiifλƳw7_7_>(I~_&Y̙K|k7srjy
+e\]|=ע:C1 =7ˢ5{nEVs?Мn#C^fq6vr9я7[/~=+[M~.`1#+n +[ʜx= cזM˴]SzwKˆZ.'Sf˛ ۵c4CTxĉ65?BPlez7,#D?9e7,֏g!5wdËy{%TnS0
+0{:%
+ `IN„TX
+Iu@sjBsN1qz*Vߢf߹dn'A^wkdZ^W^ʡUD R7"JOca D̪̍=FGs2f)8덪XUBjo8yUq#Qq#D;yA:d S׋<tS3a&BA7G-!YiA/ 7p0|cYM "
+HTU'0EUJ., βa
+`!_.MiʎĤ )axBxaE"d:2sf} (PBPhA,>|~q 6%*]m5"g eҴ[^z6x.8sCy9 ̓uS-rc%rd0F6~Т5;R)*5Af2ɥbb,'`떩[+C<ÏdXTVxvm$1HBQep
+"f)Mv!/I-jQ?mҎ7%s{Ԗȭg
+Тqb$CUuGqy,d&zW<|OPMք
+Ęڤ*V-pnAkn
+Pd*@Τ \qKϨJq힩ץTҍ)rН*@p{/)BVچ٪:/3Klz;l TW&N, 7g`\h2>JeC{ќ恞zgЪ{j*@;0&V*
+M_(y"6J
+J|/0ص=2T
+>JyxeΛ{ڳA*}#I>݉W&jEhf/HK/;)w2 yP(;Qo
+[MǔXѓ q#/BpKWbE%3M N4moEW]znp/|kv
endobj
-5637 0 obj <<
+6021 0 obj <<
/Type /Page
-/Contents 5638 0 R
-/Resources 5636 0 R
+/Contents 6022 0 R
+/Resources 6020 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5629 0 R
+/Parent 6026 0 R
>> endobj
-5639 0 obj <<
-/D [5637 0 R /XYZ 85.039 781.388 null]
->> endobj
-1814 0 obj <<
-/D [5637 0 R /XYZ 85.039 511.561 null]
->> endobj
-5640 0 obj <<
-/D [5637 0 R /XYZ 85.039 482.763 null]
+6023 0 obj <<
+/D [6021 0 R /XYZ 85.039 781.388 null]
>> endobj
-1818 0 obj <<
-/D [5637 0 R /XYZ 85.039 400.118 null]
+1786 0 obj <<
+/D [6021 0 R /XYZ 85.039 706.019 null]
>> endobj
-5641 0 obj <<
-/D [5637 0 R /XYZ 85.039 379.224 null]
+6024 0 obj <<
+/D [6021 0 R /XYZ 85.039 671.274 null]
>> endobj
-1822 0 obj <<
-/D [5637 0 R /XYZ 85.039 154.341 null]
+1790 0 obj <<
+/D [6021 0 R /XYZ 85.039 627.939 null]
>> endobj
-5642 0 obj <<
-/D [5637 0 R /XYZ 85.039 136.075 null]
+6025 0 obj <<
+/D [6021 0 R /XYZ 85.039 587.775 null]
>> endobj
-5636 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R /F14 2895 0 R >>
+6020 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5645 0 obj <<
-/Length 1825
-/Filter /FlateDecode
->>
-stream
-xڵXmo6_y*#z]Q m)4k]C_
-/<K,)Eg9đvǁA%ű 贐
-,6FX(8]BaoDi9qT\,i2&'%Ov<-r ̰udb5Q]˹Sgˤy<%(awg'aLd%+Q3 Z
-_I R2bW
-m_7 ڑ]MTx t>&kVp
-MB@kqcmg *t%l5]iUeDu8Ptrc:tubEnoi$10'ut؜e8#=e)B,ϛ1S^W}2ʲ`SJgf 1U-
-L *0K8$8r&ʆ)=Xm4O"7 uÐ.1&2杶S¯:
-/(s}rZ^
+6029 0 obj <<
+/Length 3103
+/Filter /FlateDecode
+>>
+stream
+xڭZY8~_aeA,>3Mwd@նft8ݝ[)-wv0dbWEݙ$?ʼnkI2Tl/\X
+rb&fcN:vϯn^Z,}߷^,8^~Z5^}psw0Z"fГ{,޼x}c45:V)Wg-pl?Mfvli/FӂϚJ'vfÁYRǎx!/eǡeTԫzkonf넎w\qr{lv$7hϺ_xK0ז-$뿎ln%V^>0#zMT rNvMk:jj@;>2F{a{mPI^RP}c}rвLJ[;Z@;- fK/8MT])>83Jٌϐv'=AֲA2U@ _#IF.)Fl)846mq
+z(VAKx,q垜IȦreSS8H8|=7 N쳿MRZ1h 5NĬzNԢF1
+UP΅rвus@d?Ap; *d҉I{rhkӛ%~h]Ns2roydMKTVв_Z~p%Ų f"VǮ]
+҃cw\z!Yi %V:V^C%*u̒1=p^cdZ!
+>1&P̢8a Us[ovP@p+Ϩ*&6(<yіp
+o9G]|R;t<$R~!'h@hڅo(ߏQ/9%.58B͞(0I"13uh>JDܭ2k2@pdS
+٭h§j4EKwB }Ʊ0Jl)'M'A'/f0J52\_70 p TB R,3ϭ~#Ax Tv2wzɻ|Ml9
+&>V*zH`uM%G}F}LU0x{ yƇ
+#S9/Np
+ɰnvmۇ d"Ġa{UIV[Ba'Bsg|G ApͿ=N&N}dU28B_.ܣ(lp]B:1%?
+xhBbtr;S
+".
+Ey%D
+): Ю]ϪL35/Q{ZY  VBaاȎFeBkiOA#v}EUgӣ;aVLFƍ_pjFQy?bG#ɷ[.#:Aޒ"|жwe-0AE7Lыp#=Gx"qq.n-?ۛ m)Dۉ&BK7KO>Cĉ&eDendstream
endobj
-5644 0 obj <<
+6028 0 obj <<
/Type /Page
-/Contents 5645 0 R
-/Resources 5643 0 R
+/Contents 6029 0 R
+/Resources 6027 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5629 0 R
+/Parent 6026 0 R
>> endobj
-5646 0 obj <<
-/D [5644 0 R /XYZ 85.039 781.388 null]
->> endobj
-1826 0 obj <<
-/D [5644 0 R /XYZ 85.039 613.806 null]
->> endobj
-5647 0 obj <<
-/D [5644 0 R /XYZ 85.039 595.137 null]
->> endobj
-1830 0 obj <<
-/D [5644 0 R /XYZ 85.039 538.254 null]
->> endobj
-5648 0 obj <<
-/D [5644 0 R /XYZ 85.039 508.85 null]
->> endobj
-1834 0 obj <<
-/D [5644 0 R /XYZ 85.039 478.924 null]
->> endobj
-5649 0 obj <<
-/D [5644 0 R /XYZ 85.039 452.915 null]
->> endobj
-1838 0 obj <<
-/D [5644 0 R /XYZ 85.039 252.806 null]
->> endobj
-5650 0 obj <<
-/D [5644 0 R /XYZ 85.039 234.54 null]
+6030 0 obj <<
+/D [6028 0 R /XYZ 85.039 781.388 null]
>> endobj
-1842 0 obj <<
-/D [5644 0 R /XYZ 85.039 202.998 null]
+1794 0 obj <<
+/D [6028 0 R /XYZ 85.039 410.739 null]
>> endobj
-5651 0 obj <<
-/D [5644 0 R /XYZ 85.039 182.408 null]
+6031 0 obj <<
+/D [6028 0 R /XYZ 85.039 368.392 null]
>> endobj
-1846 0 obj <<
-/D [5644 0 R /XYZ 85.039 153.191 null]
+1798 0 obj <<
+/D [6028 0 R /XYZ 85.039 285.443 null]
>> endobj
-5652 0 obj <<
-/D [5644 0 R /XYZ 85.039 132.6 null]
+6032 0 obj <<
+/D [6028 0 R /XYZ 85.039 251.304 null]
>> endobj
-5643 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
-/XObject << /Im1 3957 0 R >>
+6027 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5655 0 obj <<
-/Length 2560
-/Filter /FlateDecode
->>
-stream
-xڽk
-!`QK
-ٝHM&Ia:$,w|#?#\zu{1.6iNnׄr{70 =әTy7
- ~b@TGc8چZNO֌'8ᔷ߃8Y sQg-tBH; 'Sw
-FSBAh ^ O?
-wUPyGi&_ /vOjL |;T4M&H0Rj
-}-3NxD OD)<l>3爎3#lƩ]H{ȇiûvx"W.n[%2PzsK=Y&+60LY &d_#'D;fSPX)ݤxd'b$
-mB6Z'!x;`#FlW4$}II d@ئr &5'X] C1bD8J
-:a3v,KZِ%c(QFƌJB#I?3pKD`28.Yȇk6LģH,rFbE0dl{'P}R Y5]ʪxr׎C^ - 9'f݆%Iq:#FhϞG^CFʏ#%ZuXվ D;u(s{لDJ`+4zi\b&01[Oጀ@ tO8
- o|z`%?ѓ59fҟɐ9`x?cy12VԱŒZ]OrQxǺZ&mm.Xa5*zVLoW=#.ћZ{~wڪj`:^W{DcAq zF3=Dem HU >09+ƃAo p!wɰ<D, 8!(cuZ9l%?UǕpدQAQI
-{j,5lTž#s9Hē6b.%bSj|h]Ok s"[+'ҰRPt`^Hp\I:nڦn3á Nd#*!md91`[H+fwY9N[חP
-{ʞ;Ǝ)Fk_SPi*ve5mCtlT: h #nZf;)Ƴr~Q Ӷ}(4H:։"w
-O-BG>gI7 5YA !
-k>ӲPg8ZM0M71܉Ȱ9c˂ĉΫzuJFC
-. AO"Ɯc3)BqSSZ-@+OQPC{Q?T?
-D8['#?W<Gۮ'.ӑ=gT;;H^endstream
+6035 0 obj <<
+/Length 2128
+/Filter /FlateDecode
+>>
+stream
+xڥX6p "nvKΗ8z-J[ڍ,9<(Wrk3y8'I(|D
+$v`嗑3K2sh~\_X"'ANj7o3'S1qݼOgoo,n
+y cEv%.m
+ښϛ-Ŋ[l 0KĮAfmىa~àV(E<A :$+wvV{ phbp$~:G~TWZԴ*Ma%v&Bk&6_UJ٬&'LdlR̭fǂ !` z3%Hb:4
+VH(
+#2$P }P*mZsN'Nqt|T*HN/IۚQ?rLwD Bc~>3%L_ʄ<bGdXyPyr <cOLlu>6T5%E?X(L/z͡! _=#n$L.
+h$2W4LG1[48Q1bOdެtkbnrBݡ<Isg(ӚǓ6w]M })jŹ%C kŸYOМد-sr!A0Jŗ]=\p%/\} =43?Ī*?<I.%+^-1sn(%sj%J/r`JKES^8@iS:MYrlz*wwl޲Υ2ӬA ?bXń'+&L]>G|zG$g(p.c-ҀMA@|pΎZIRKiéhv+?UԲ9|9
+Dc'!}#g/fLQEQ(4<.:P"H[m ,
+kCPVMұ@s>@Ce-"z:hp- 2դf5;uSa'G?|W/ ㋈8H~V0"P^(zmt#V<
+u$.!ʑSe.{~2=xYͦ}]Ŧi3ӄ_k=M2^<y$M(L T$4<3$va(o=zZ_ԮG4[+!Tqovq{kxM6bWwv'u]fJ9 &0a S]9,Q%ծ-Zۖ9|]4|RN$πO$Ba]ۃݛ2o]?ԜC:RhOPrw7Ok }&ޔjt]Lr,$'}LS離b9k-9kClзI:7 Z߱=B%[8TJ(QW*Sendstream
endobj
-5654 0 obj <<
+6034 0 obj <<
/Type /Page
-/Contents 5655 0 R
-/Resources 5653 0 R
+/Contents 6035 0 R
+/Resources 6033 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5629 0 R
+/Parent 6026 0 R
>> endobj
-5656 0 obj <<
-/D [5654 0 R /XYZ 85.039 781.388 null]
+6036 0 obj <<
+/D [6034 0 R /XYZ 85.039 781.388 null]
>> endobj
-1850 0 obj <<
-/D [5654 0 R /XYZ 85.039 761.463 null]
+1802 0 obj <<
+/D [6034 0 R /XYZ 85.039 688.875 null]
>> endobj
-5657 0 obj <<
-/D [5654 0 R /XYZ 85.039 736.911 null]
+6037 0 obj <<
+/D [6034 0 R /XYZ 85.039 657.06 null]
>> endobj
-1854 0 obj <<
-/D [5654 0 R /XYZ 85.039 736.911 null]
+1806 0 obj <<
+/D [6034 0 R /XYZ 85.039 365.343 null]
>> endobj
-5658 0 obj <<
-/D [5654 0 R /XYZ 85.039 716.383 null]
+6038 0 obj <<
+/D [6034 0 R /XYZ 85.039 333.126 null]
>> endobj
-5653 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F11 2898 0 R /F35 2880 0 R >>
+1810 0 obj <<
+/D [6034 0 R /XYZ 85.039 262.693 null]
+>> endobj
+6039 0 obj <<
+/D [6034 0 R /XYZ 85.039 222.529 null]
+>> endobj
+6033 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5661 0 obj <<
-/Length 2096
+6042 0 obj <<
+/Length 2494
/Filter /FlateDecode
>>
stream
-xڵrFίT&+ %K63"  
-ftӼUFP4GuR2X
-G-q"NީaK+lT8}c#\&%A{Ѕ6恿/i~(Ӝ#3tq|Y^Gf9jj$WD_[wzPnZ-Kw"0!~ѶEȠ=;i40|Й:m Ȱd45 6LHOI֤G_UYͅk88)4M>&B/6'$Ό
-֒Ca!72=LX_3pY[1w
-29v3 o*O_ՐEʋ$'˲8"ƅECTgtKrs7t/?Z@p[;չ7)V3dUd6ӱKҘKE1n]M964@J]H '>:9&&`Mo%rہxiƪhy": WT_{@pqPURovfgOș}hw- n j?b?w-]~NiǦH,$1 K+tt6#n%ca`D<AU0L'EdTߊwmP{*]O~p~ S 2
-d_ OY¼:*j,,[x ؆)C)<%_(W^T*1,o[niq>3FxiRuFw;FV<1WKYR<6-^EKyY#]{b<9XM?c`RoOy^Ob#2!]|nU:`ޤ9B
-"b6'>͓Gy\ wLתrBA@<g
-smE ..1?j?1k9ZXhpOVFm=fyƅEUā"BFݠH)]6ohtohDiؘe6AQ"q|S(-3~թgT=MYj/]ѺE?dIgI[
-'iJڼY#-p-PI>U`zrwZ՗cCy(S
-NmpW8y^PS⭥7w5@C^
-4[Y]GLiX!GBl΁l?šV޷Gj-Vz6WPP}w^iTR:Ÿ9ÿj6/┳VLۛ *}(,{ N4endstream
+xڵk
+
+(}Zخ\
+tyuu{{ÂJ'njQZB N RSw(Q#9$kT8 ѧ RݶuD2G#pG~,[9x>4-d1ʢepk9UY!=_-j\(rJjI <%v5NzVXN0-G -
+j  I}͕TƏŀC
+bkh73~Yڎ׶M WALsb(G6MtFde `}}H{ @A*/BQΡ~+5Nte:om,Mءa[PQSzyB'߼(bm%Z ygyy[9԰$,A҂p
+ p1piZ#M˪VoxF >Ƌz*h.b&E7RPH=Qq!;G=F
+Pm <ln"HM2
+ggJ|$V8
+@#ЋRPδB*D~/ bߝ*$FJ*B:m~/N5FOH7pO6WIb&Q=N L.2)1yC$&3Q&$4&S)1zo3qBݪ[`.z#[w哅6~I -BՄ(2@}TO8NS]+֡[B:j6y:ʭ(Ə>a"Љ\&9 71e`74U>T*
+\~i
+14gFAYoF 1!ᰫbLڰˮc /-97TyCf pz5<vy"Y/e"~栕2};SF.IO! =+D K_踫N
+^)a!uU<}g{ʾ H MΞ {v,^FCA"?q19s ԊjW]'/1dN*e))ľWۏ6ܵ:ɳ>c<9GXJ& ч1aRL.6IaS~+/kJ$G2$&.D6
endobj
-5660 0 obj <<
+6041 0 obj <<
/Type /Page
-/Contents 5661 0 R
-/Resources 5659 0 R
+/Contents 6042 0 R
+/Resources 6040 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5629 0 R
+/Parent 6026 0 R
>> endobj
-5662 0 obj <<
-/D [5660 0 R /XYZ 85.039 781.388 null]
+6043 0 obj <<
+/D [6041 0 R /XYZ 85.039 781.388 null]
>> endobj
-1858 0 obj <<
-/D [5660 0 R /XYZ 85.039 355.788 null]
+1814 0 obj <<
+/D [6041 0 R /XYZ 85.039 717.788 null]
>> endobj
-5663 0 obj <<
-/D [5660 0 R /XYZ 85.039 335.198 null]
+6044 0 obj <<
+/D [6041 0 R /XYZ 85.039 675.441 null]
>> endobj
-5659 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R /F56 2890 0 R /F20 2865 0 R >>
+6040 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5666 0 obj <<
-/Length 947
+6049 0 obj <<
+/Length 2386
/Filter /FlateDecode
>>
stream
-xڵWK:W Qk<+"Mɔ@gCh@U4_ $3s;%~>,!ÒAD,01$)I;r=BI*D,'*a-dIV~oof"c ΀a;ògݍu3R$?z33s!gu\߼h?*BU' _eO$)YAlYR6Q55q:&{-|MUѡbA4՞5$l6qmv|MM.kZTAMjfh͂惚ue}Bcc4{/y7ɷQWNתȄ;qQ:LJ:
-2ܹS3Vɏ?b[;},lY:KB.1?x\\iwB3Eya?خYT^ZrA.ă#}tQUuLOe:RS0ND-prHDsiM]Ѫlm+g bDbK4>ȑ0s=j@G]{P}Hc=}FyϺc 囥^77s)R+!Zs?k&j䅿Ni5(Mv{|}d VT!4 L:a(D]UrKgiGЁEl=X&v_Q]wWݡ]΅勒SPK4ӂ(+ A%?+ډ3Ux"W4(!aa/'endstream
+xڥrFV feײlI,q%|s
+G{ۖiy#?)^sGV<'9VNų-vI-HA;4U96u`,&jye9֡yY%iuϘS(+[NTFJ /4%?&Q0Kh=F"J(%(#+I(ɖqó
+6A0bm
+KXN{D J&aohikRxWary
+rPhq^};>b,pcÕ Yvh:v
+ H=(9gAvn`L+/ı<ba({H++d|9e.[r@(kҎFVz'FWCޫdh dx$؇T:5+p.5PT8lU
+-ҍu6)`@[בl7F^&L5.рS!kC ,e
+BfCٚ3Zo "|bS%L>1z}6ӃL@]1.dqPVθ4r }!<XKN$w3yg<ns$+2yc ^M%ﲛT)뮲DB99Y7oAC+;-4Dp YͱB':<-0Yͦ#ۿR0Ҁ?1& endstream
endobj
-5665 0 obj <<
+6048 0 obj <<
/Type /Page
-/Contents 5666 0 R
-/Resources 5664 0 R
+/Contents 6049 0 R
+/Resources 6047 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5668 0 R
->> endobj
-5667 0 obj <<
-/D [5665 0 R /XYZ 85.039 781.388 null]
+/Parent 6026 0 R
>> endobj
-5664 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
-/ProcSet [ /PDF /Text ]
+6050 0 obj <<
+/D [6048 0 R /XYZ 85.039 781.388 null]
>> endobj
-5671 0 obj <<
-/Length 1029
-/Filter /FlateDecode
->>
-stream
-xڵW[w8~W/d9J!qO.y`>1ɏ_ɒ 6-<h曙ot
-b?tuHO1nWYlHYH 2t>itF`{8\}Nۀ=m mܚQ{jk|{ĭ/6L]r5~:5pX4~Cǐj Hz]e^O44@]#6fϥ1)bU@S Av2
-D .Q Tzk!oc
-=w?mjw{wƁ˓{3- b8}dt>&JLp4W4[-q` `ff?׫藧n.Xu.j(ۡ@"
-VF}SJ4b04XH=^&YE#I.PveIJ.Rkٷ;kwɸ03dSۑV2
-E={R?@]mXs0rCqge_C b(E">q,/ݟ;d4*b*c -OeY\k *}Ml7ͫY+;1!V^YxA/h
-l7zJ@b[oBT0ㄅK[=VFE=?a8G4 [΋`%QMZ0eWu`?N
-endobj
-5670 0 obj <<
-/Type /Page
-/Contents 5671 0 R
-/Resources 5669 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5668 0 R
+1818 0 obj <<
+/D [6048 0 R /XYZ 85.039 340.005 null]
>> endobj
-5672 0 obj <<
-/D [5670 0 R /XYZ 85.039 781.388 null]
+6051 0 obj <<
+/D [6048 0 R /XYZ 85.039 297.657 null]
>> endobj
-5669 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
+6047 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F58 3365 0 R /F41 2998 0 R /F62 4052 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5675 0 obj <<
-/Length 892
+6054 0 obj <<
+/Length 1394
/Filter /FlateDecode
>>
stream
-xڵWS0~`z/tn¯:ChRliသvճHh5@N"b{';}5]@pvbao5v)%nB<v "L7}6#u+tP*)`8ȯIA+AQ Tj+LlU@5(t@4 f ,YUiaR .`JN.>YtI'<$gpiޡjxmZ
-#}۾}ךOӾSDj~MVzzEY
-e^lydF*vJc026Yy/l0 36E08ae8)Vu oG-;ӽ .;k`6|3
-&<m&[s:8Q/+bH:/`(|&ťɒ]0uӱ٠c[A"lؐ\eJp|8Aûc]m@c/<"ˊ까yƛGsA |v,g_y~0{sh]y[b:80{tuS>;/li-=[J`De C*ӺN=dUHYn<7GG#s
-`,Z~pE(\-E_Ou!?n)Ic?Ȳ>_Z| 2V2/agE`SuOtEGI鶁 ڮ ^^%N{S [f 봕%"ee47jClԞW=3ne $_
+xڥWo6~_!e0)!͒6fbhX#ԖI~w$%+>,wݑa?hE0AZՄ 0{xf:yuQb w;;H%i%<{wz==b!D 4٧눅-$,5?DZStyѷGc
+;p1c(BLLπ$ 41 TZv#eWh?l@%DFXL ăMp2¸(zі,E8.K4^M1=N
+J[9m߮;]5^Kmh :}77%'?YIJ`-3ʦۢO!{?1ItL.10oQRSFJwKֶ_'kr_NC$Po[.[Er贮;0w#rz1Dv- Rh/fdyެnO\y|`WYRkw 8YB`ŵΚf*s_rPڜ@˼L"7I*:GAK 2<5'.w 6lc%ONSt|݆ݎoU
+ODYELܴǮSIo+cQ .u m>զo$>AA`<Q֓a^(oe¶ȖnGD-
+ 9e"ƃ>_:8\$#YԂrלXfw2%\Icv+ Ћ0+w bcvXQ>QuK[<ni`d$pjtk;kͪ[YznyѶWS-m1)^^zs`_[? 6^b1d]9;xe6k* ?[X޺O!/' 3焳 WahqFN[endstream
endobj
-5674 0 obj <<
+6053 0 obj <<
/Type /Page
-/Contents 5675 0 R
-/Resources 5673 0 R
+/Contents 6054 0 R
+/Resources 6052 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5668 0 R
->> endobj
-5676 0 obj <<
-/D [5674 0 R /XYZ 85.039 781.388 null]
+/Parent 6026 0 R
>> endobj
-5673 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
-/ProcSet [ /PDF /Text ]
->> endobj
-5679 0 obj <<
-/Length 799
+6045 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 559
+/Height 468
+/BitsPerComponent 8
+/ColorSpace /DeviceRGB
+/Length 29949
/Filter /FlateDecode
>>
stream
-xڵV_O0ϧdƎIm^-4m$PMώ(]RV)w;χU>DSC` qN,%jBd[uDmAy*DZk z: h؃:pWk]F:bAza2kgw{K4*+ۿ8Ŋ@3% MpX3AĞN"2\OXELUjp MkDX Q˰{S*8V
-= */X46t48ӓd(OfXkϊt:r1%Dɤ b!$R>iѱ
-?my/YHDy*V$33Xd/2q2D⛥h7jԺMm|M:,6Ќӹ$ݥ_.Ob!F9$J<hw{>mL_1[ހ*4+vqA?ÖOng?4nˆRp7b{.C#Ցu3ӇhYVqZ O23yBCNoe\77O15,]BjǬ"*$]6f6S=֡4UQY>biv7km0m}a=i{?>ѵ5E`g!0O3.irxzH`8#*p  l6wā}]7dbvEMeendstream
+x{x T.$HAszzкPԥE{iխ
+z\iK:RQTP>Yϻyg̞~^{]~f]k!B!B!B){1+55~^^^0X6^
+pa V,q[+w}X',y9uT߾}###W^w*c0bĈ4ƍVVW^˗/@O~:+e]^JW5X322j׮}5#VN,{֡P#$.V˗FMΜ9?o߾aÆ#|^|966vРA"SNsν{.JII޽{ի;Ⱥz8%%%+μơGܳWvňTh deHWZY&""Zhq!aaa(ӪU+9ի }3gNZ<<<5 X8fbƍhr<*
+?|wށ޽{߹sG^FCs4{WK}iq
+
+
+pc QݴiS Ho4{W Zbde˖)(ݻ7Cϟ59&˛9 ib(( G9vMN
+Վ}YoӞ׎zB ==]Yܕ+W۷|ìN: GK*_4111:J#!B!B!B!()1z~He9_\aQJ& QcJHuCʜ>}B))og<"@ه=*Np 1%iBQݺuO8!^|sog06c-qlV'G'h#zAIgA3-X6bm:cƌ5jԬY399yH+_b&)1ijw5#fb(<<H;vyXbb"ãgϞ-z;Ȧ@3VcEW#P ӣ N(TK$X=QF J7tfZP5bxHi̭[7|#`Zb\v ☞ߠAׯAa;VF"rŋez*6d̙F2A61+b0=zo=5(Q̗$ĩHzAI̟fZP5b2*UشV#I/c1_2Do?#,vD.]dl)e[nz;Ȧ@36*AazA(TKR lDHCƾ6Zbk $Ӂ6mڹsZ5X}a. uh۶fz;Ȧ@3v"#0=ŨȮ(TKR lU#&Y#mH?iF*U5 #Θ1C^Sw@3Cd&
+NTQ̗$|10H/(sL FLL|"%B9#3 3Rmz!""B`tt6Se9,gΜY"%Tfz*% !q,ZHy]Yr҅ap"BHqkt%FP~#\*08!B!B!B!8F&@_L]i] t tV)Df=p#ʘyIgަMXZ5}^|R~)l{ddիN_...#F^ݸqc8N0zZ|yٜz=z[i\KkԩE7N12,#R2aw cY޽{ܹ]Yx*_AoϜ9Sv?8###o߾aÆݱ :u;wݻwTJJJL4 ٣gee6GэW%|O*Tdkt"iݱ5NkG3Uq`O8qŒyyyXX
+WST>D3} |Ȑ!"↙CBU{{{4 VY/&oϙ3VZ8$m#={7SF]hگm4w`͛7i[UT4 ƾH@awSS6b5$$7Լt`2֏Fƍ~7xر;Z8_~^z%cfLğ:u\r$btMB9{l(fNNѶ ƤX[S#G$Fzoɦf#x|/Ũ򉑙F;@vǎ85e Fsch^puJw`Jdue||? o3}d3㣌S#T<s VK.\0`
+&FBR-3<s?Ue_UTh"͟BBB?AUe`L+4KbdiOIv;GtBc?s?ksM>ݦDvD&RU cG[Jӹs甔_ze׶FW@eVܾ};99Y$O>Ī f2*S'NQ6<##U0]t葸4:5nk׮hdeeX^,c2:f̘lI)K126z"P0rС?3HU]3qj4kiw^AAAP"ͿlR>d޽
+ #GԻ1ˮVm0t:"Ça,fbqqqիWcN T|͚5V%K:vއ ߖ`LkZZDDlHϞ#co׬tÆ bD}#À=\RN%!tBʞ~u@B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!8;v<{߳gOPPPU=ܹӦ*B*K-D:333,,L,c7߯W?l=䘩Rf@!YpiDz֭C qPG[lQeǮ]T ƁBŋpM6]z<rH=<<:$2Ǐ?vضmۺ|w'N ODӧOw k yY ?V J f͚jժ?55U ]v0o߾Ξ= MA&
+
+J`(00P z\ty*z :3йsg\]]Ώ?9B$ׯGs޽;'''>>>22R+'Q_KLLȀW:_ըQ۷u6l(*d_Q矇G1tO:%]tQuV&MA&˖aAo'lѣܹcr$hVZ@!D2W_]bHsVZ3g{ŋk"}P$౗-[&2sssEE_w]n@,4h ڇXv$ L>!n͛77!#Az)p3 }YIB!J/_.rn޼)ׯ_Fn|ĉVLL̗_~)~رcEȥ/IIIvnj#ڇXXv$ `Q#B .2eH׮]}i"Q6Gg 73XcjժiӦYfSNB!*
+ WF M^JJNNzm6__tO>_}e7[i&ѾLh@yyy"sλv Ǎ7ꙧbuMCdd-[Dfǎc9B$Ç{ްaO?-2KrrrvrY]yχedd ݲe˥Kӧ'L {^O?e;5kLKKC"H@LtР}ڨ#
+#w4OY̆oo'O޹sgܹhB!J֭[פI//=z"M6uwwꩧĝl)))ѲִiD955u֮5JLL!h Z~e;]eB
+/-12LJDBb !YfrHIb |Bf8 e T"Bɓ'gggs@JD1#WWW|pL#DJD*FGmٲX";6###CJQJD3bD^^^\\\ժU5((hǎR*B%"#ɓ'Dan߾!"%*!1񞞞شiG'.T"Bb$8w\įvNJ$1T"B*7sJ=1ժUC__>OL
+ Gd-StwҥݻbH+w1*!jXaq~Pr &):T"B)1*~]֯_?{Ν;}ATC%"bT6lڴ)
+gGQT<fݘdg.¯:DLhKfQ௿Wܾ};
+[^T̄ü2?<?.?uHtEU֭[M4'77˗/exM6ך5k9sFӪׯ?Sh҆+W؆ `'FiV]/7P*1FV1ٓ'OK$C; ,z*FQTdɒƍ&MJKK_V,v?yP ewSN !BXŋ[7oñM1"DtkeΫb
+ xu>yά^{MO<9$˖-KQ|XՍ 4 GH>}[-N
+a-V=r"hժU*U0_ŪG\r~0vWEĩF !g $SC#b!ȵkN>q0ÎM<UjC3Ƨq;ձOg̘QF5kb/O<͛7NIITZ7o^:u~năƖ؟ѳgO(A *YYY͋)+II YΝС_~v̄ݻ777ٳӧO_hѽ{,X
+2ǧѣ-[cNJ2|pL*v-_T{/''_:)$$dƍR/#Gnذ!??=zWo`?B `wK:u#O3bF,'NޔI9776m(wޫmVJ/bN޽=<<:tpy___ 쏎Ful2tK!A D7x۪
+m B,q[hG!XokR̝;13gG%LdR@S(FqtVe|X6!%F6)U) OVx:BwsB_ĕ=)5kfNM:B1"D2h KW
+/HybDbD1#GC'bDJD(FNQzD%"#UD=3o&yfPrPrPM7U^6{yy)qν(O9*qS\8q"&&gy]...#FHKK+uz'{Nu<_ąJD(FM>}vګW.f޽;wv蒧˱ *u1^AyQE#*!>|;@;ݻ;w,ϛ7N:(ӭ[7WWW`1cF5j֬<yd7o, $&&yxxݻVE"ooo_4lذjժ~׬Y-Z:trB7W ˊz㩲QQQH:bTzD%" hq,a&M4|p2K,ͅjժuUb֭[]\\Doiܸ,vݻ7sQFY7ok?k,ԩSϞ=mIJJjٲ'x 6TQqN1jРAzzHUbmbYQFb;77Bχ?x
+ Ch͟f‰Qffxv-l/(Z] 3g|sT&هq !TlX+EDDֵkWU͚5|J5:Exxg}f~B|=c^x_~BB͟fyĨka[n;ڧ ӦM+b5n8##C7` K BJJ¢Eѕz,C2Ul@ΝDSQd2$44fx{{c 2'LtR$ƏGM|V^ELLRe#GoS7Ϗ/]v~?|rƍgf/^(ִiSaIe,A\”i B SJkt(Fz}HJ/FHؽ{i$~m5ː̢[N:u7lp'N=Zw}WQܹshrrr###]t<x`?lj
+NM vv#FhdYFs`~!zå<Re>}np/W2۴i#~sww<{̙3-V
+
+*V1ٳ͛K] }@v*2CBB6n(d%z ()) O>Dѯ70BJ®]\AѵM-[̎[^#GipXXX*U4&C( ?d F/_yׅѯdذa"ňb+%YغrZ7nCDɕ+Wԩ#{BSlə,]%{_D)J~_{2!ĒzbItS{bIK tS{3gcv<Hሷюnp/SA|7^.G1IYBHIp\d"(Hȣ
+/1BGT"B1"#¡B1"zD%"#BP!+T"B1"PňRzD%"#BHP!GT"B1"QňRzD%"N(F#P!GT"B!GT"B!GT"B!GT"B!GT"B!GT"b+;vܹsgf͚]p߿{g ''JDl"33G-Z/bku% .9s*ȫFB*%YYYV3nڵkWdڴioܸqFF-|W111>\FBΝ;ci?!C>c+W4Ȝ0aҥK?~|BBϟ0`
+>b6lO[6kGhٲҥKaӧ'L8!83k׮]6ѣ(*Um۶۷?SH!(-?2,$%%58Re4m-k( :=zT> ._~<,Ӯ]; '001dQKsdu4iѣǟi9*J9zHnH !bMΚ̙3.\E#J0>wrk,K6\!їİ0={޽{W<x0**jժC-\Tpǘ1c|7n|BW޻wo̙IwܳgΟ?_se4}Ebvv f̘aGBR_nݺ%+Rvdu{_JmmBQ
+GAAHڵ]v۷o#*>|(&!e̵b88ݹsGSEvڀ
+
+|BJȼyp]pLyCaTAE B1r6ΝkjsBʋ]vk]Q
+!E & B1I3 m}헗#!2tR#'WUdkN۷{ddի/\\\F!+7n<xojհ.^|9ňbDݔ@1*_1:sLڵ1U޷o߰äQQ˗/4HwiܹwES)))ݻwQGeNv.°
+jBf``СC-ki@Gk֬@~-*qbb"zٳ ӬwynΝ;"'xZP>::Zs5k#qU,FD?@*7m!C,YĤ2HeHRbD1"8z滾.<x
+%u aR`<T!gφP(F؍"YFAra!X$''%AV\]] [7oРAzzHcY$; ޾}ѣG Z~v퐆̥Z#ͭP斟o3g;wȿpLA>ɓ')F#Bl1[aK]\tiĉ[www%w~###onYQWtX#&6o[VVVF>|X^=lln݌,EBp_bLНr3Ey… Ŋ=Bp\Q(Fpjժxw\/h]#tWy8S?~\UkUWI 6·\~]S *FӧO׿5agϞ2eyJ]0#F\hf!!!?NӓbD1"<u7k֬tCi)5j߸qcժU|p…ݻwZV,`FRSS]zz:}5·|$&&B
+G3fP,v5Rͭ;x |Ϟ=HݻiUւ|lܸQ1:q.999##޽{.]5cLL H\CCd,F]vE h;wŊ/)((CM1bAJ=.mְaCWWF7#Gi5 hԅ`ae_PP
+^nMRSSׯcbT6A%"#gkP'o)'#G P(FT^G)ŨlJD(F&/ыiDدe;oða_4lcƌ)fܸq=x(6cƌ5jԬY399yHV3V&M
+tQ}ٔP*ƌ)))#),,lܸqFWPStDK=ze˖b4v، Q_JRByyyqqqUVנ;v<Qӣ:P*|ɨ(9l0壎# B1zD%pAAA||'-R`3P*(JTisuAگ_k׮Q]8)13zp C0T18 U}btĉ6V<_RF_ŽzZ|3UI4/FN>#R'vL/]Խ{wQ |.p>}vګW.f޽;wvu w\ň[9N,b򵙤) z5轝QQQ(8t"pB-͝8q_hhh|||E!Ϸd<ϱɌE,eIey=hZhV E1"yA\v_~:;wt]Z^WQ3^,PUϟ9߆ϟ={6{llI.^/YR|xI%drep"z%U_ b'iZ$u-Ѭ@bD)1lڴ)
+ 1!uVL`Vu L*7n\79W111%AsZt[p+B'OK&MY'Fnnfҹsg%9<<ɤʕ+ 2'LtR$Ə/A8Zzj.mX+cվ}{LfPX޾>v!kÇ+7*IZEoOuu388 iժ7|z#sEl#r6m*[YQs4[Sf˭h@\ʑ4FHѕ"sLM<b =,g#9%޽{i$~m5ːL
+yS+<|Anݺ'ຏ;AݩS.^X.J,7K/ɯ.\xF`}w_~9z)PVDVXb]1=,Hk =̿bDE0ƲiӦ111͚5F&lD>zIIIbfl21V[ kI?)ٰb׉'nj#Ґ!iʔ)л?矗-kօCOLU#c!PUVɯp Ȁ˗c%g{d-|U֔cYr+T"G^o+T]T []1==1Ӆރ#bz˖-"ݱc={? 2|MLƍիq½{v7n ieuyE^\k¯۶m _+̉/ώ^]8(靰BIxG\y!n߾}5j|͊#ךr 5Xnj@meЫޣ+OL>쉙.'#ooo8/ΝL8ꔔjx-̐]/N./H8^_Ǎمzeu(WBBc"}/o
+Հȑ3FE#GH3|C3]=A1"N.Fbծ].kXSߪݶmpwwۋufzꩢ?Epá-[L ARRZkٲ6m| ~P@|`n,CE/y2geڵk!8#"" "ji Xn]&M_=z?-G^&Pj+T"G^UN.FeTGW<~bAgOt3ebd10a˛53˗3gb^Zf=2N5kL!Q=*ň8хɘR37vvS iS=bdZxر͛땴鑨3fԨQk=+&O͛9!< ;^Y݅N%K xb/O[nuqqoF>oE(F8\įw\ǹ  wE޸X*D)BJ*A#B
+ 7n\/
+}nr'hPfȊ&ώvGS|y#3'*?88XΦ0KLü%͛73g1Uyڵz*gSӡׯ^[Yoah+M{Du"e-ѻ7/F R#;cIgy(ڽ;vl:;Jr
+t=bԵkהYzQD IөPj(RnTFXd3N&:Xf$b6NCISr5D9g{sػ{^󜳻~[Z֭[7qDQ\\͛e; Ys]lم Py3#῱hu{{S˵+VhhhtRee
+Orh/_ 7αkdYeϞ={Μ9Νklld̙vBay,MdJkth6mjkkg̘`̼c3@M@.]ikt3w#?3***JIIւh֭C ֭,1[trBBBAA~h[#FٳǜŻ=qex~|||xxٲeD9,l|4-4hF&%ٳ',))qla&2\%5wX`=^?șy-ǎAgvE݁Djj*̅Y5:Dc iʴ>i0
+#FO.X..**"K륅d*H
+l%rdyi(9qGhᵵH8qS_6ANw&
+CjkkݴBƑ % kHQGRtL &ø Fzi!
+%D1[9<} [4z`UV!-m>}'W8E3QTVV/Nc$a )HNtY
+&ø@XXX{{`d 㑥]ai(9qG3Xޗ9iLjR n+
+CTlٸqo_,I_C:e'-@
+CTl}>JLLĞKmŒ5#Q:
+u#( ]pj̘1ŏ=v$xbI
+{(4
+{%KhUTT`ؽ{w, 7l`2$2nk!ꃨ%LCYkFIII}HQ5 8 EaSǎC0oV,IXC:;]`'9(s=QVV6m4Mןx^eDk0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 \+k(QZ׼]\Z\gqqSO=%+}CD&%%%<|K/ɺ{ƍӧOdd9f)uIOOի<PZZƂ{Ν;P]^-[dee͢333;揹hR{~0`ɓ'e8+W6̃a Md---AѓO>Y]]m_o^~*֭;;GWٱc?Թs]^^ɓ9u`N߶m{ѣGhgnV\9m4Ee,7qslYQHG>pCM2Ű-**z駝N̥y
+W^ꫯ/B;aC ٳϞ=kY,zOڣGC6lHJJ;~2/ͥᒻWd} .[PTa{pay/Μ93*D[]r7
+3naK. /KъJ17311СCH<x;!s&J
+g͢Mz(%,}G}Tx\Ď;Xxc{Έh( Fi!  F2ͅLYp Rɓ'c?3#&M`5pWn`1 … :tiˬ0+N+ '/ڨ-d눶’Vw"s}eAtό Kdc߼y
+Fm
+lE.L08|pffM7UNPN:5eʔ &|x;VP\$lCn`BG(6*x"# 9rdk׮z;wɡN
+^
+QKXB`;~#x)(3-%t0TԮhsy!fKQxQ(IYTF!H|1jԨLes :X>
+Q <M(QLkbdK'Y)D.Yc)Zdeea,pڿuuuXлk^zCun}(I䅘-EE$kTg;#/5k҈s̱QW"
+/2%)-+7mڄ kkkg̘`w۷w^@zݖv#
+Q <M(QL툨*Qʲ[)6&eudUL B}y<(|1}-YD+lٰaewDDDDGGggg $CuHHV7ZH-m:LvG H0@qGB) uE
endobj
-5678 0 obj <<
-/Type /Page
-/Contents 5679 0 R
-/Resources 5677 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5668 0 R
+6055 0 obj <<
+/D [6053 0 R /XYZ 85.039 781.388 null]
>> endobj
-5680 0 obj <<
-/D [5678 0 R /XYZ 85.039 781.388 null]
+6056 0 obj <<
+/D [6053 0 R /XYZ 85.039 758.673 null]
>> endobj
-5677 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
-/ProcSet [ /PDF /Text ]
+6057 0 obj <<
+/D [6053 0 R /XYZ 85.039 758.673 null]
>> endobj
-5683 0 obj <<
-/Length 1201
-/Filter /FlateDecode
->>
-stream
-xڵW[s8~`Lݝ쌛:;$/>Qd&?~
-? #D-CS'vV3r䄒 bq<?'9˴(CuJ+ <8dyCܝw̭(d_2kse~"C,wF4u!)tV;!ڐP,ɋ )ea]f
-SoR-*5APu,RYbjbWdRr~ֻf!i\<G 3 5+G!8UmB`C>KZCG5dؚd%jMUQw2B\(|/^joZLOz=2^,oށ-m|d{̰EU񘓔:E}V2{]r3ʻ.~z?h Q]TS_|[wLsǍ44m
-endobj
-5682 0 obj <<
-/Type /Page
-/Contents 5683 0 R
-/Resources 5681 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5668 0 R
+6058 0 obj <<
+/D [6053 0 R /XYZ 309.807 377.657 null]
>> endobj
-5684 0 obj <<
-/D [5682 0 R /XYZ 85.039 781.388 null]
+1822 0 obj <<
+/D [6053 0 R /XYZ 85.039 327.715 null]
>> endobj
-5681 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
-/ProcSet [ /PDF /Text ]
+6059 0 obj <<
+/D [6053 0 R /XYZ 85.039 305.953 null]
>> endobj
-5687 0 obj <<
-/Length 3231
-/Filter /FlateDecode
->>
-stream
-xZ[~_8BZwmR, 0
-ts5qᯚ$$N'dp'0B ; 7
-qQ0Qd"yz}R38x=S ^z=z{ *k~v֜^ |ǝ}pq9qeNO?8u4:*M' 0𥿾G ^5ry;"NjNpD
-vUZfG^hl#
-I suִn(og
-cX}f3YqCa)oĝ.>z
-
-(=7>!E|7o^]_gﮞ^7חO_=3[{-G]c[tN/bl@pjx:kzèuQzQіk3W@C&7G_\s+m׻[([B+Vd$J>|I` Im)X F 3RV[aB; $]k$+JPDQ
-Uv+lmOoq[1 [9+8< CVcg~2ߌ? XGr%[ -[LQ z{Dr-D:8ݜN} ?\0W@?\ 춀8X,/A|&p[܂{`)E(p%hͺp'cڛWs#au
-B̎%3oLl`?]1slĮ!-Vhv?#9<v%91 w"??&p~xbxdrCZ-{7m^cT9Jc'|:Y2f<`D it5'4fz Z|8Wfm)}6@ G%=&`.*BeBקB.S!?c|"[d@ϏfЁvѼ7P
-r6.XN1lβ*W x
-X8.[f'Wx=){$vmIi弢-Z$^E,PJ 'H!rx8}?,>޵$Qb4yᧆ
-VLsgYPx1ZWoulZv5In_/Cn
-^a?( ~YR@4
-X ޑ7nهP1<7/+bzi*
-C1Hg4GNHwk<7U@=VQG?2N9؂ǚ6}~G\RcvNVpaCDWX !L{&qJq&qu$%NEÿӋ ޕ
-0=t%4Ҽp,R'R5 0F
--D$r
-8#`"TpEe. Pr(gTݚ2)=TjMvhg8@@S o(s*wdZ措.i"F
-AZD'HH AOEgEZ4z{ZP\v:?jHQy{
- +Hɿlye;
-xrPl)=R.e ѼUM
-6,'b~Fvzm\ bBRWnl[$_ڭBVJIi6+F.rW&v|wY\(?PʁmOug~Eℒ+~ YQxZ˿ExS5DZӴm!,T}EGՈ\)p7/F"yCb$K :aҞendstream
-endobj
-5686 0 obj <<
-/Type /Page
-/Contents 5687 0 R
-/Resources 5685 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5668 0 R
+1826 0 obj <<
+/D [6053 0 R /XYZ 85.039 305.953 null]
>> endobj
-5688 0 obj <<
-/D [5686 0 R /XYZ 85.039 781.388 null]
+6060 0 obj <<
+/D [6053 0 R /XYZ 85.039 271.411 null]
>> endobj
-1862 0 obj <<
-/D [5686 0 R /XYZ 85.039 545.55 null]
+1830 0 obj <<
+/D [6053 0 R /XYZ 85.039 213.377 null]
>> endobj
-5689 0 obj <<
-/D [5686 0 R /XYZ 85.039 510.609 null]
+6061 0 obj <<
+/D [6053 0 R /XYZ 85.039 178.631 null]
>> endobj
-5685 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F14 2895 0 R /F11 2898 0 R /F66 3242 0 R >>
-/ProcSet [ /PDF /Text ]
+6052 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R /F20 2965 0 R >>
+/XObject << /Im28 6045 0 R >>
+/ProcSet [ /PDF /Text /ImageC ]
>> endobj
-5692 0 obj <<
-/Length 4598
-/Filter /FlateDecode
->>
-stream
-xڭ[is_bbb1ZWp{J[N*HdAU5.'r.uH]zLB 8Qn$݅wo/.E!V}sm/^zyHM9xu{rRwyv;.p}s}-4*-VL] Wᄍ\zhV+(ixx9O=WB@şm/\/ůMnxnh *م.˕<i[~laiOJt 'N-kX'noS n-&+~^R*.5f<d¡Dv2n苷a4ZF"72𝇮Cǭ'^+G}J=gsٺ/?vueMS9ߕ,~kk(5eחU%#gozNŊ
-1x֘R V3_ե|7xc1>K tT-EF/W2=P'(ر-!h#eD
-5(q2 `\9N\mU Dq۲F(I5{[J}s5cz5#(<LӞ3-.5
-oGMiڢh?x2j}ܣHPD1a\kO\ LS9!М&y
-^g9׃`WhP_UvJ r^«@VyW'۱fdkd `%kCGt,-Ri=s9m?"JN|?ߣɄհGGUi|y-MQ=v0t3J CAi0 
-*? ^1mB7J!=scpS=7=tM㖖,%
-0NKE΍B٣ٴ:Dln|-c+ۤ ANu`ҋ-9!IX?[k[R#M11
-Ӌc><5'f7E>,CnJ?a*0V|&)O(oyxY@ȍxI?̩vbTTTp2xTAd$r\ٺw]4"Pt@3Û}o7_}nʜE oD;Ҋ
-nԳ%.s= nR8;rN0BO{x
-s/g͜ f#Zr,f3.a|^IǛ sI>?YUv\(:"_5k[K֌剜S%љAX$mUǡS>r Q>qH)-X
->
-E{Y_#
-vѨ`T|E~Q5tRA"%q@.HޓiI4KԔⲰSUSBn_6@
-yt#\m_xheYQm_WBX,1r AH
-`"%`X{vkN?'O`>GًϧΊQuX
-/1_|
-qz̚L
-R7T_5!詎8ޟ 8״iKR#.}Ga.K܀ (jti%Pp+%_VKځg.u=uQ$Le[!I>ϊ6oMI7e0 LNÅ=r 'FRp[߬$5GFN>$qv…:'\4!Ɓ
-b$)ց&د
-^}-,ٞRY#bu˪ʑ(2 Ny8 e e9j&%rƟM=0ht_FJSKNSH(=
-<
-O #`,#q_n>@ᆀK*uレVE. Ji&*d Gޔ/ƗG17^@Iy+|[N&ί'F'fCن;.)'4:Z-e_rk]znwGGQCF |as.+<6!yޘSm(4 ?azE׷嚹NdÑ##W AVaP)L4љg弸8d
-V*M&Oy|Q}!FڏwtC$hh٧(nd)h3ShCJ\ h! I&RǦ Rrc\1F ZKqseZڧHSԗ}hvsi3Յ "*qZoiFM ./gi-FxSpZ@A%ҹ<G n^12ӓ;9<'>I0z3"Ac/f"s,8MHW
-M ? bW%?e'H֍&_DUuendstream
+6064 0 obj <<
+/Length 3322
+/Filter /FlateDecode
+>>
+stream
+xڥZYF~_!Lݼ _I֞ ?pDJ",
+I2[WY/q>h5q?5|qI)ۍb{LV0B \H=w`;vݲǷ=ߝܥon^}]׵TlaY/?̔uˣ7߽{ <T֧q{M_\ۙ}]ip#\|LRO
+m9c U:8) bq؋:y<tGߴ|]֮~Z U#hbytd=_x Y.Ɋd)wЩbc!fQt*jla2Ye,x4UG3$V .=7򄣐ps|F˺^` =Cq^/pH0}i9#
+m74[ۤ `%%u𽘧l{dvb_/pJ'XU'^d!\_yPV%Pa`W,XLHqzzԁgM7 y}B.hR~bOzRҖ /4ZDvߠB^Υc|-nAhUzװ<"v8 htZN LKL:Z==V$mdG+q8[
+@YsJgmm*fM*hT r > ^6x˿<ϗHX?E*!{مpۭ; 7V
+&d <"w5G[#00E]c|LWfw0qcK1
+rD|mǑoçu~`%T&` us/l+\v
+#JpgVB[?:PaP(Y3 |IlƷ^YB:$
+Mx5ŶE:C]SC <mr;c&<5k@#C
+4nбwUu;cCxޑ.X]66If͘i:C- j ?ǒ7ƾf= O3ATw_znLvN}ZOBGs^
+=W6oEQrfh>9`}6%.C,d3RWp Ktt|}}k!JJ<A
+6hO6?6U,[H@~ts>>wz}s Lqf#L01ނpNPVUJZ ෡I#
+.8¹! &bmLġ%
+I8 y0\ő1zw]KCnԴ١B9ɆXp_rc+s|*'Y}6!g$CXC+I Kf*0oZPKE2a kNEGm3<^ehCQȺ{cy]ST+H<JЏAg3>p69&(x Is'ƣj;prE"7bSSFE)}"$I#q!(
+izky?>ϠYhTjml/ۿ0pTNb3[&iɆ{! E:j :0&Vu3Vq{E0*衚#!To}
+Ѡ">f۲qDQ-{<TrXߵQO
+}*/M{ɶdgEܞhκ"<+csh]^Zmxz
+dM |ۏ+ٝNկ?{ŕAZ6F [sůX!r9E{ UU TH_@r/T6Ȧ9TJrUM[Lig}khfuu'XM?&946{Β]G?szڑ{RZG /c_ߍ
endobj
-5691 0 obj <<
+6063 0 obj <<
/Type /Page
-/Contents 5692 0 R
-/Resources 5690 0 R
+/Contents 6064 0 R
+/Resources 6062 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5694 0 R
+/Parent 6071 0 R
>> endobj
-5693 0 obj <<
-/D [5691 0 R /XYZ 85.039 781.388 null]
+6065 0 obj <<
+/D [6063 0 R /XYZ 85.039 781.388 null]
>> endobj
-5690 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F66 3242 0 R /F74 4586 0 R /F20 2865 0 R /F14 2895 0 R /F11 2898 0 R >>
-/ProcSet [ /PDF /Text ]
+1834 0 obj <<
+/D [6063 0 R /XYZ 85.039 761.463 null]
>> endobj
-5697 0 obj <<
-/Length 4288
-/Filter /FlateDecode
->>
-stream
-x[mo_!K
-NbZ2"HX ɳ.
-l'h"]3#u8<?ȎTyAG-|wdz~aWGώnhUūo.WA,T-WI.^X%^}}~;| Q-]`4X\cُ_[_?jB*8@~=
-"t1O 6p=D\bI(Bd ;N3)Ap1&j&kx,R@)_Ί-CYu$ mǝbYt|3~f*O Fp|5wYN:VG] UٕI;4gc VH:+wÝOzmᜂ8|ڝNz*Un#zj«X447^LɝXkix6)f)RI{{mxÆtȡB!rQW
-Θ0 ؋kCUF\ Ï+l[px%j"NG?¨N##vߊ@ʦ%V\QhP10/HREQ D+ ' {qL,_>, ,6e(iɝKs 0 ?LTMOZ,w<:gG1=G΍4w/=7&l& h6E0BAc4}=q<ti~{q;Ŀxewy:Y]gr*?9U,0hnـ:/,s @Hh݆sϦf+Ͻ _ŢΤPD)J3p%m!-XZ\ 3m N)$fXpg#md
-hj]W"ײ ]Tm9H^Ųxc*V1_ҷ){{
-~vLZܼb#USq8*=3Z4T&?01%9#ߤ<lSI
-ko67.Mi/49li?wf6tģ|r[
-m^L%=#d8$6ۘVM
-3[3utVּh_WGcS]2MZY 69~hBΊֹ֫侗=6}q8# 3\䷤dƒdiM8wqU. #~K~'H# M} `f%q2uk{C7~ɲG ,fc2_Og >Dp~uU‡7;G%; .fA
-XRJa}KWyٲNb @NCyj2Xlb.\Rc0qsMB5[ȼ$Kf<vxajvx!KJz2Qc@h7l95s !o7N0w(,Yl` r*Վaܤ!'l^z6tգ cQYAsfLIM Yݤ~L6H ]ucYgwN~Kiߣ~Eޡ"edO(疪k6ԓjIAہ㍺drv >0v0)gЧ[)W<(Gj 0$fۖ^p<T"3E;ƟErk7j_׸TzE-]
-şG3"*HX9 B: 35ʮ
-5v>Ek80fRxڞ_ί<Lq4]-=O3*~wyHLx ]xw~ŋo^~E? ,.WgơqEu$=8uHd< po4SmCXeMϗ߮s4
-paUrL֛[Me$$;#O?1cv雲΢\Lz^V
-=6o&F vaMK %!).X= vx 'g=ci]eW<t;aJ!g
- Hfe)4ͫG2XJt`0d=R֬u%n&N?ikϷ)0[N*b5`2_oL5Ã@eFfy`IxxbACvU1&ɣAQ^57RJcsLq{[rJSpSEL_-2,*8*b:|yIϧkkf )˅Kܰi4ƅ5l訖๋85CYENqtꃗ1w'/C҄NB)O*<(ȴRQQ*ɟʸ391m[
-u]sm".5榈&˕lj2
-` /qXr'`S:P?-uj<#T ֍HrTӉǛyg fTA958rAGP:O7 X*endstream
-endobj
-5696 0 obj <<
-/Type /Page
-/Contents 5697 0 R
-/Resources 5695 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5694 0 R
+6066 0 obj <<
+/D [6063 0 R /XYZ 85.039 727.186 null]
>> endobj
-5698 0 obj <<
-/D [5696 0 R /XYZ 85.039 781.388 null]
+1838 0 obj <<
+/D [6063 0 R /XYZ 85.039 617.28 null]
>> endobj
-5699 0 obj <<
-/D [5696 0 R /XYZ 85.039 679.769 null]
+6067 0 obj <<
+/D [6063 0 R /XYZ 85.039 582.534 null]
>> endobj
-5700 0 obj <<
-/D [5696 0 R /XYZ 85.039 664.099 null]
+1842 0 obj <<
+/D [6063 0 R /XYZ 85.039 526.219 null]
>> endobj
-5701 0 obj <<
-/D [5696 0 R /XYZ 85.039 650.55 null]
+6068 0 obj <<
+/D [6063 0 R /XYZ 85.039 491.415 null]
>> endobj
-5702 0 obj <<
-/D [5696 0 R /XYZ 85.039 623.451 null]
+1846 0 obj <<
+/D [6063 0 R /XYZ 85.039 287.329 null]
>> endobj
-5703 0 obj <<
-/D [5696 0 R /XYZ 85.039 609.902 null]
+6069 0 obj <<
+/D [6063 0 R /XYZ 85.039 252.583 null]
>> endobj
-5704 0 obj <<
-/D [5696 0 R /XYZ 85.039 596.353 null]
+1850 0 obj <<
+/D [6063 0 R /XYZ 85.039 169.776 null]
>> endobj
-5705 0 obj <<
-/D [5696 0 R /XYZ 85.039 582.804 null]
+6070 0 obj <<
+/D [6063 0 R /XYZ 85.039 121.082 null]
>> endobj
-5706 0 obj <<
-/D [5696 0 R /XYZ 85.039 555.705 null]
+6062 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F38 3001 0 R /F58 3365 0 R /F62 4052 0 R /F41 2998 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-5707 0 obj <<
-/D [5696 0 R /XYZ 85.039 544.277 null]
+6074 0 obj <<
+/Length 2967
+/Filter /FlateDecode
+>>
+stream
+xڥYYs6~paCՎh
+0J HHF=&W7mt? |דϷɻÑS?q}ȣ30/cyhoDۏ?rO/W&Ulu U4~v+^]5Z˫ǫu[U(Fp4%)D\OK I Ь -\=Msc0ݬl6kV04)oUYyf<K^sg >n
+=j-ݝI| ̄+{rT눮LxaxՆ;fMy9gjKɾ#m!ijhyV?,l l/<hݱ@S4|+H%(¹'^9¿o?}8AJ#fҽn?FDSĨC?]<kz#qEyt,gf8q
+}#6@T-YȵSŬ<eS}oIHhA^ AFs&#PnUcu*r oX#ktOlMK:7Ӫ1c^Tg FGs"vR2o_2}|=`E:E=nZ,yZ1.e ehќuE[mْ.$сi!t*)nDڜLƦV Y4Z 6с/trоɬ`(v `8x&FF>m~,
+͛Lচ@ tHo 3`9:rh»<: ~<_WkBnem,gaa }q3fOÞe;G5\,L}N6~tADO>8\0sfԇ&\H(^p7Ef(gHgp@>CZz{``G+QK$<Wܰg!4UE2F_d1p;cgr8Ρ:q.@ G4-☲cP4nݒ/vߊOKwNB" tc;Nq5Cئ阄{?KZ[q/e,x ߌWכoϘq|F:QMM IfR& ]0+ W1B~ZԕE6 xAi>r~KX x$k2ZRH(݃at$)Y;*kb`)%"ȉ5Hb>LFH!)\͇ҟ$"rV+F:<\qj)Onv]\R4G/y T.Z]Y7SXڳOInyٲ#+3rި'ښG2iVrJ|+
+{$cWd)$P6$&&gϠ0w4gs.G~bb&w6_r-{h4
+3
+0S@X@M\5W2Ƒ-ܮ|&K$ac0V%zP$cӆKJv.P`&}co\dCy%$~r@3sIg,t
+d#a$溑w
+bNQs=*"N
+Ou/!eW=\6'tƟ2B|gNGǷ>_
+3^-!V'M1endstream
+endobj
+6073 0 obj <<
+/Type /Page
+/Contents 6074 0 R
+/Resources 6072 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6071 0 R
>> endobj
-5708 0 obj <<
-/D [5696 0 R /XYZ 85.039 528.607 null]
+6075 0 obj <<
+/D [6073 0 R /XYZ 85.039 781.388 null]
>> endobj
-5709 0 obj <<
-/D [5696 0 R /XYZ 85.039 501.508 null]
+1854 0 obj <<
+/D [6073 0 R /XYZ 85.039 761.463 null]
>> endobj
-5710 0 obj <<
-/D [5696 0 R /XYZ 85.039 473.804 null]
+6076 0 obj <<
+/D [6073 0 R /XYZ 85.039 741.134 null]
>> endobj
-5711 0 obj <<
-/D [5696 0 R /XYZ 85.039 446.706 null]
+1858 0 obj <<
+/D [6073 0 R /XYZ 85.039 671.269 null]
>> endobj
-5712 0 obj <<
-/D [5696 0 R /XYZ 85.039 433.762 null]
+6077 0 obj <<
+/D [6073 0 R /XYZ 85.039 637.13 null]
>> endobj
-5713 0 obj <<
-/D [5696 0 R /XYZ 85.039 420.213 null]
+1862 0 obj <<
+/D [6073 0 R /XYZ 85.039 540.773 null]
>> endobj
-5695 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R /F56 2890 0 R >>
-/ProcSet [ /PDF /Text ]
+6078 0 obj <<
+/D [6073 0 R /XYZ 85.039 505.363 null]
>> endobj
-5717 0 obj <<
-/Length 3287
-/Filter /FlateDecode
->>
-stream
-xڥZst&`Ƅ͇VvDZVcyN A@j 4M3pݽ}v)?k }7f-0/+rH"=7-~p^}s}w* COʘyn;xۯK_-йE7o/^ߏZ)WE!?y 8s$^<I_(Z]^GOԂwq7Uqz-zF ?At/W\銺*JkD+Y79Si7cYVCwyTxTl36㑧,*`+5pG;h'ai͋h[-V\xAu&:S7MEGk<ē=
-{z(wzV`ay%;*oOծz:
-\mCb,d5vlf<[dQYV+*O+8?k|:0́V8g[
-̀<I,ҒOou86|4y w{qp6=ϏU` "We`PDX8B#;К<Jvx#GӛHbӇ xU 4i\9|{ibI !65JB>J)rTGB㩠8oqc=1sqȠ!R` c$1<pC'.S:0eZm8)3{#4u+v:] )XzMAdFq
-]궻y- 4-ڋgX3PCL|FL}..|k>lFqdP\fWgp l*f
-!][#U@
-0yFb*
-[
-9|אNz .Z"1jL5ɯUJa;cP#ꬩ˼o8ʾ:^6z@<U a͉g"Z[tޠ18jn2-"\>E"uaH+0%Z/.|nj=e>5k슜 8Hd *#ZJc c]qc0
-j"KR>PH/s&czyId
-ںB՜tl@`b،V܎m}\
-t
-'-ޱb.Hf3 dxZ>a;u)_:^sJâejϩ.yYk%
-"?7Cu EP>b6ֆGԫaNfxTD_%՛עƎ[s3rVg%v#?;x&NvyVԌNZkОwVil kGۤLy(IK3s<iY L%kJ\E
-'q e!!L)#׋}[
-R5e>m:^^ `y@v#Ҍ``HQ
-=c`Wd`ТUh+r{|Fs7Ef0NxVlSiXso?bhD0>3Q=JaRDJɕqȖ6B 7|5pIquh5*}t G_lΓ`o)~Uޕ7'bHocHpHTLf+?$u7
-85Y64 GW>K s@^o|F*ʢ#KAx~PY"|B-Dwm3Ƽ~L#J*]ϟm<O
-M0 O\QX$]WROܔ ;+>^{'YDge C5EMNQJW =@A(PEǿ "sv0RQTendstream
-endobj
-5716 0 obj <<
-/Type /Page
-/Contents 5717 0 R
-/Resources 5715 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5694 0 R
+1866 0 obj <<
+/D [6073 0 R /XYZ 85.039 450.318 null]
>> endobj
-5718 0 obj <<
-/D [5716 0 R /XYZ 85.039 781.388 null]
+6079 0 obj <<
+/D [6073 0 R /XYZ 85.039 403.949 null]
>> endobj
-1866 0 obj <<
-/D [5716 0 R /XYZ 85.039 288.115 null]
+1870 0 obj <<
+/D [6073 0 R /XYZ 85.039 307.389 null]
>> endobj
-5719 0 obj <<
-/D [5716 0 R /XYZ 85.039 264.798 null]
+6080 0 obj <<
+/D [6073 0 R /XYZ 85.039 270.522 null]
>> endobj
-5715 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F56 2890 0 R /F74 4586 0 R >>
+1874 0 obj <<
+/D [6073 0 R /XYZ 85.039 214.206 null]
+>> endobj
+6081 0 obj <<
+/D [6073 0 R /XYZ 85.039 182.391 null]
+>> endobj
+6072 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F38 3001 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5722 0 obj <<
-/Length 470
+6084 0 obj <<
+/Length 2863
/Filter /FlateDecode
>>
stream
-xڥTMo@+;;WnD8`%
-qۿYS!{{Biux)\Np!EP%xEڶT/x^]-Rֺtr?0U:D'1E(bS9;.1"Su\UG
-C{$ 3I$w%N
-M ?v?%
-w |uAz{g9GgpL{5+G3:]WY8[]
-ݳ̀o_͊w\@MQRѮO80Ο` w2+zi6:pIcjb9l~fʥm|qأP
-,Y<+ Q0W)y
-99X7endstream
+xZs_KB}.%{qy%ZbO"U>} $dH>t<c],[,!E0*YU*\lwW_9I:TEX,y'nS7(]*K|ϭ{-bh2;&zaE*\|7w Ub꧟U"_<A9TW JH6L}GMiR`eIKhМ^$q5* cLiB1h-Iණ4 #tMmsⶇvJc! OUwl ᣃO߉휖L%W=кxi1:UQJ~.M<-WqeWqGlpu
+iJ0xM4$;䩃@=-yad2M+ _:F<ؾsa%c@xL"U>,(lђ
+RE0sD<f ʃ.$ [grG$ArnXQ>8湳i&Uh2=U$:l{#0pVp*]M{B*{G(iB<{8q~}R'4 d[!w$:YTRxÄL:ʔlHjJc&Ri,dOɇmLԼUv!]%dAc%6"[_9\DnJ;aHҹQy)B#pLw#_afRhE닃wl2Uޢ? Hp3.sg+oқeZeYq/.$+fқ:!ռU{9OQpsx⁺S˽~Nmx ]عuhd(4h/y0+,q}<Zs0X:
+BGY r4spceTowtW}Fs ,R:EPņ# $65"@4r&S쎡ꈆZ7\!${NPa=MBmaE-Q6v.{wsgwZ~3k=rD][^.1Aլ
+"g>cJBeH3oLBrDa6`OCF ,
+q7ָ d?瀀B `A ꉕ t]1w0ĈI#%f#kL.C3o.B>f {CFCj,{Uz[5pA8wJ~Yh0*ʲȫAfVs14f5h/Zd*."UC4D)<įБf^B%
+06(awÀTO㥱Gc7F}q\w/gZorƭ*o1]~l.$\Lf6Jqh&a2(lj/RBL707iگ9x׺枳eGٶ Tlv ̝]
+=8=`aKwJu4[_Cg$!I
+if(촚%P1ܰ~ {rkxcC3 d0dXsbp76_ZEnf3494 G1:xGwÁo/5" g^N4[qFo#kL&TE]qCE!
+Yf
+6؟6P5p*#;rљ2LrO.'0e+~-4Zoc6jmв〦d?^DA=!.b8W\$_J)
+1gE{}wBý yS3ŐY5f^h~mw4~ߨq}/€*Y_v=v(Wϊ{F#J|c' 9S'`{!á7]BՑ *a_VQ/ၫc}97"l%h'lih# ΞP^z-u"$jkaV{@W7[12ݡld<\lp/*}V]؂/Y^;s
+~=O(!yT]JXK-51Пo`˕v13UJWr&@S /פpb¹#{Q&"$A/
+~>tK߹3&ay%h%h'Ivbqt|JUAxi&~6̋w~^]\[nHav87IN}-,ץ,t_j(N8к0͕&U>b*` m"YÉ*{:򤹁ٶ=s琈@X|]KrͯڏK~ 1Mm|t3:QaaF^L!JCfA;:޹̯f
+쥼I 5Lendstream
endobj
-5721 0 obj <<
+6083 0 obj <<
/Type /Page
-/Contents 5722 0 R
-/Resources 5720 0 R
+/Contents 6084 0 R
+/Resources 6082 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5694 0 R
+/Parent 6071 0 R
>> endobj
-5259 0 obj <<
-/Type /XObject
-/Subtype /Image
-/Width 780
-/Height 575
-/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5727 0 R]
-/Length 36251
-/Filter /FlateDecode
->>
-stream
-x]8 ;0_$ X{B I,ͳ-a .Xn . 6Xࡹ UB`"9܅? oxa!y;x`/GN>[0z <_C53k
-pBlC/D !΄W^ij^x&#[C6RE2H: I#PnTSa
- Ն )sZH*?^0i,}qG~ԐDQat5 ݤD6
-Y]c!ZPj*KlFk|}^Ȼ>7Qn{R㪢 p7HBX0(uw~TՌo=7"^Li/(oEyO_WX|Ѓ 9/hd c@X^ 27/-q"/Jh5B]liiP“h /d&2A_". 1
-B և/sbzFZ<<Lu>3Z9 }]@Pi|\brю9( Xߍkjv*ZXn ,Ym#^i]6-i`YeE1'ʋ<c܌td䅋CU7jBXJ\0BXђe6=o Gr^m$ڡ
-ڌNLp/ހEuk1υ~]'Y4bgxZO2\k7_XJ^t/ڠyҏ"HSwr͉k}?R%Zǂ6t=)pZG¨gc<9j۾zK
-`䘅1۝s_ )y&^hDYIu',|%/bvLGcLV<,Ozx
-Es]9Mcl}Îya5'=睙=]] akKM{30b~LKBH1/Ɔ?0&(yB$qJ综@XHt
-1mE |0ɀ8?o5uh¸LM[w[oz5;
-H(ixThwdкVdIE\ :SgvL|Y_NӃX03;W>Aup `!<=!C
- jT,a %Iʇ,Z[,/S;lX!ИZ{?~VF\[{H <hFZ/GJU=5ĸV,WP]HUI܋#Q>ĂvxAKx Jaa
-ܣ|M NTOjK:r/L*GЭflYgzZwc:ݥ,<eZ !>Y4H'ZgxaQq1U@KX`V6^hpXPj8N
-1} NI>Œkf; ^nW-[fu| 2Xo,/<YUY42uXQ`~83ҋl#Gv9, Ь:A^#3Iwv>;Y
-
-~նvY0l7ö<hn]b XhF ڿGǑJQ
--HL:_Pq 0h#+Ĵ 8/|ZR,
-0JٿDZf<jd =^B}(۸W`ոb` 0KJg/N6>RR80 :=(zdBUԴFxØ}2g6iAΔdng{{fͼ~u^pȭ"ͭ7.­_] ك*}ĵXpd*3#I@K>I8GR}[@k8Nk0r7|7)P9ߗcҬ5a=giߥqjWFCY=n'*I)s Xpo7ͯ^, [‚> JƿgwaXo%ՋW^a0,5+,YJW7XxMa
- 7-h\Xu^p kw! QiHJ TAK_],h;4kH?bc᾿煕Xxʽ\Nw`׼r704őބecMxXF t91uE,h1 4bCnQYB=^–.jTyunOh ue<Z<gno>@c굪kQB.PS>EV^Xmc^^tü7p<H>G:0^BymXX&Ű uvɅ!̗zvRN>%_ލj3Fi}N.,<[b-ZԲ/ K
-Õ>^'"Fp^r)ɂ] [DRP+n){y1Nړ;#
-8=̍mFSXO}EGᅃ
-xtc8Ҏ2> 48cH؅ d‘* y %E} Jx}`/Sk N
- ^6 39Qu#Hg-Rp[C/>YW[c8)g/t$3^5Ea`"
-}Tjl> TL$B[
-%-R5̍t|
- މPdJA'RkT T+:-X{#/a<oe΍76;PN? C9iGy)`@Iu(4-4/`A nj_YEzjBX脃gJ
-Ŷ iBF^!_(>A[:S  rAsޗs}q<Y;vױǑ.X8Wo"SYmr 3UωRzR<h^#Q#R]k,0:Lj^T_,z RuIVw`y:QaS_ /\cjEq!`C, ٺO?/k]iYB< <bڊ9Is5o]Pպon\Gy^va^Гm 8)KZ8ϸ
-tL LUinPD-HH'~,8LǞ.1UOo9\pP.r@a^X vǑ&(&:í̂ƫ>z_*a6;Z|}Pz38Ν1/ D"̮6q/̕4.p;N­=wtd!o>E}~XJiz!7¦E}<wul|_+VkAlLHN]u6xoqc2FћH4f뤉zHnC+c-݋#p_ ֪o-5aJ47RQ_x#[v
-'{S>dUa>Zۺ
-mۘhSw·ɖ^/tHc!4.kA %5Xl?*'̙ DwZF#4MчMc)n۱P,,l,}\,4]2oG2qL
-5YQ*҃b`xđ#\Ix#(>Ն\S B <RƘ3*#đ /^XE[cbIE6PQxBGaPqRs\"JqL5h,L}ͬ|g2Exd)DM
-YHN9&(^xV^Qԝ.X(
-ۅt/ M Ίη[JT4oM9>YxSg.ެ{DXѾdY$4|$R`Yyw%*Rf>X(E1bp."lXz(O%"uث۬5w\8yy-^Α ,EfImpJD]w8'Jp@<&HP<+šF"uS*AN8oZK$}BQ//^IJDŽ=a%bڀbg;,2-4`x %
-G]x"'2 ic,4`!$Hzg//#an詖"Tav
-PgH4`2O؂;p+T*35˦K,d<VZK Ix F6R3)΁
-G/䤜e\،Ey?')'dp_~ШƂ@,dҧV%-:HjHsTz6"W6Iz\q9ضOQ7 ,/
-W, ܓ[x!왰pGqIFӞ_ry!DS!?}F3-3iaRBǧv ;!k o#ixH/c/$J%@ 5?svb,p/2tw^|0j{/i97IC6VaQl9ELWSֽUC(ѓE?.M’YПb]vOMVo-܎i0Lt4"DbIWc!N /GM ʼn0i>^ӣMf
-dFZ2-cDXxB B4zை<ȥWDg3 _pNK1+,𸂟6ȨU2L/T~$oX"j}&-YU
-nUPF<)b4t*|)|^͎(g>R^ȸh$"x!A>^@wGhߢ^8r<bxr,<bplu XN!M. /,4j . Vpv{Bws}Ey2 CGZm
-+']x ƺUP?OH\mMO‹uGoy{(/(Icqnr~'|М0cs&݆ݠy|e?
-,6s\b PRiBRain'FA7 \ܚ|THFK?{#*{
-@ )`G,sBM
-_9<c5X-J|m< >8^080򂶧_<N7]M8UU7}4`Xx?/ĀZ1<Nu&B!0;BLی^0Bc1EWy% 3kbʝ'r^0.}ɿȑ#$ow~) C` J]X0`NvDxq=gA<i&֝~“RQߓH
-Ls,l$/8RhsĂ5C=K>HH#WH뉱`y C
-%Out})E,Ps]t/r F O%Ub Y8w} }sɩ
-^0rY;^H.Pkˈ7Fjhgj,@"ޟ; /y,>D_Xmc-G-DB-Jl#+F MhL@ Y@;'m;c:3nk^02/VSR-;8s6W ֱ{,65J޳#ΏdM־ܦ8XR$-H%]K\Op FG\QεZ%y|^0.X(VcՃ'ǥ|
-
-|Y(V$^0 6>3`ۉᲶ", FSbexl$v<\^0)@|ʧj{> Et`; {FQM}+F5O%Ǎ bxҵ< X`M9WFFFO'B SvH§.X\$|g,|u2jϽe#,Ԉ+\ݱD[L}myQ^6LfRG F~4/(,8ƪeŽH5_ sN&IY+`=l{Vʈ€:z1ǃ#Bo=)%&% Q=^|q2h#
-ϛؾ^hxF~(2S25 Yҩ|gG2X0;xIHVДc[s|_ y  F~/ؠn/[յMB$`k /]`I Xζ9!/\Q`)u^iSi5Lr;7X0+x!0H <A.T3!T;
-Zd_ʾSѦa
-y9= /D1
-w, ?{f|U,Op |pc"N"L)eҤqK3\-4>b<;sEtrԈ?
-ߊ=aW$q,EheŁlql24jWbw: ,x֋;6bfAԧNڪ M6Hx$m[eOQ2ԲiJb+&x–~sfxQ0ͪwt ~&9GX(DYK W4Fz?.3(z\p(T"
-HV?_`[
-(dYӕ0/%.~a}KZ92 %e=B5ihJ xO3Ūxxe#т;3kppvfM5ˋUY郯(L| Y,,|9/(,x,Lu,T}{/{,MR2`1Bȴ+Q~+mֽ'=Z[E z84"X;
-Erd+/\ő+Ը:l%mo%1|v5>ᕍDQN/K]mv fp pI>* ?,+3ppnKč?+/\őftbDSt#3VcxX{-E\ El&}z%z`? _Hq$ysBx 8sO!sIy9إ//4/XO<28ǂү$ͳXXVm}nN0 YZ;]}E/} +f{T 3pC~PUzDa.{zm^GaY.1Xq30BDTb<EJÝ0VV-2@&W1R~a8j@^? 8^K_Ǐ!/sGJXpm`L>av[X-W~ _QJm}Dá
-(ЊM`, o&_4z ?VO3` 坼0ʋH:"z!Kg߄ya.ify!~n#m _ꡈ+%%U5B5u8]0lv/Z˗n:7^y!v vUog֤V=S1ʶ&WmVO]m_(Ibv{{6\amh`fnrl:BdeHu6x.mQFퟒ#
-/pI׽di "zj
-Mx]R$7}qR#l-iwM^}񊇺^N`րׅsMlö7. ,CS^_ nw`^[9^g57{s{G޵&K볁~+kYz#%i) hGHjǾqlJǮHCہA bV 1IzVIeHa^P`w6s-5'f5oXb!ׁS$`^z27wX6'\jIVns`)Dz\
-If^ {D21<IvE e!o&j2 ,k5Lò
- ?O3aAt?<p<.S!ZlW <}<㽼\R}N1clVJ1luU06ǒ0oXmV[zѱm[a1Qp͂.7i :4ǸSܴ9c,aiRXp
- ;k//< z=h
-oB(|(,0g Hc< /Ns/}ʫ_&{ 2{pp3ýj:G46s /h^d˿\X2*XT.n)>}:%?|Iy Ք"czO83ujXu]S9~ji~x&*ox0{0{pŊX^‚*JՎ7ûH>Z)XCm+vͺg7h. V|c-OTz]ze2 <m~$tYAq^eQͣ ڹ^>W
-)4#,1VPSj+0Gg{W + ^.BZ;kz
-:!5y^M) vV% pAO'u\6
-J1xRHI1]RXnW˗ /C@6Ň"ypyh^]RCE> 4X Q[],$ C/gzSa:K_`t!
-EOB;a݄XҟHv;rY\ ٜ &Q'lf/N,Y
-
-ʈa**H(^HϓK/Ծoq?;<^o
-_9a`x)y^b^+*dG85Ie6$,2* ")E]^rHN̖E3X2,L_ rj4UN%h1.Kh~A GqVXt³@Q\}SxYcsA4zC >c`lqYo;hZ$_Y|p>(_ex9[釸xYwVQ ܮ?b`H/KsR=Fp5aY򂽼 9bak { L-XɣNBצ /x Ƕk^+x;v!b3ʕ/{,a _`=`CaDŏ*>-‰\H DYmy^n/~}d`wđ"piY^=]0հX5x@K
-"Y0\̶`/dwsvKd+.*p_l.9x~%.׳B˪TSmDб*lX`I2/. 麮o}3=Txn/K\kSJ'+QFc'wVt8i6*b}ol gz2X0L?/f]   0 :63~\ ^ъ+5X8:UL(*KoT,:wyNh </x2XD9=<_rtwR52".E3!|.[q<R<#O/0,ɹ(a2?<Np %1W$d`A.͓5
- >Cѻ$ ~} /lPQ9/t?rBFXȗQlDZ1iisWh1;,PgOC,Շ~?/}tP\u'9O5Iɥ"^ 9ӝ .ͺ[(/,|g{BD-0i|Z`r{ ~!m%ԁgǂ|
-,}jZ)3I 7,mn Ո=UߊwqyVGP+Ƌ3h^_T  [AXe|b
-p<HY@%;x=€"ŜsxAO*q^!p^DaIul1w? vCa2{,:XpPBSymq-p4%A( |(ei@BFw$Ӎ[Uc7˂ٰ dZH,۸n<AeHySlC?3 *I_c&]X,_j5c#O%u@90Nc#eu}t\`IuR'Y9X*orh5[!OdԵ-kNałSS4J$%Dfwu_;? +O}/bAB7q^u][ @{@Hn9\!;9Qԭ0&,d41~]ȃN[h:|&^KE@7%
-N=^Mpx`uH[,,mWJc}WaA>۠V2a
-Ұ)!wVX@0!Ylpb^tzpB+EY8+^7] ޜ2][`FTԦ'л(X~ .MD:π-%6X ^\Шb@V`Q4*[H{͙),kT9h'^)N`V<v~!:Z|.\,XuXRjV'EATB,`8/~0; 3TRH$? F4s8y% >}2vNqX?֥_p
-XofuJw-w{e CHW0ⅈ5M7LXyXˢZNʖmA{ h[4`uesđ$D!g‚> ADb!V5>%9,s~FdIC5v<O!ά"/Qkp?4z+$6ZឈY
-bt^L,)Z& nFF[=v M;C|M**u QLIǴiڷ'cA)| t
-ŷ,}`HA:6I魱uQprWwEtd6`v6zf /
-PE_nBie< d0վbg.wa&.a ^ϱ@rac@ Vt`ﰀV#Evo<A76"1rԜyA-!? jT 5dA04|.(f8-|Cj>+}D_ q|$ڏT*j:Ǭ-E06hDT{ᥟ"?W1Rr~R"
-Pm8 H_6Yz\RKB@aĄ)>haR K\N^ʙ\avM/WdB
-Wv*``pFZIYIJ`w]|noR# ^@Zpɬ_WCF.,W\H,`ds|K60ɝ+8c<E^<
- \'C3NCYXVjj=T Q{g|K(#ji
-k)/? ObI_,<xvo,"NHz W &[*dc@k2ĺFdW~V `Rq!h/eeFI@̤N
-+E<Tr=S;?+<˖bDTN)ϯ殘ۅ3\ιX<
- ${<YABش$ ֨mna)&
- )YB\&u0A50h&iUE8
-eb/D!:lXu=%[rJrR0텘$:L zR;U0KUuh E2&p"y\)v_(DOsa҉kg} $>A$1qtBK/Kf3H\M,G8TnEr` ! rae6QTX
-+/ 87~\TC!R y4orΝ?\O:*k%WUAe,
-ƿDn% ~zܫXT`1O/4E [^XXFN vH02gݮ;׻Sd'ַx.ٜ2V,,m&bLN[0)
- {,FP+]sYV,^\(95^`!1`Q
- jeR!Jnt^[ `20&{f2 ] #1bEYlK0Ji`8+žC5Y(YZ1P+Xމ@Pg;(g5 B(眗eL<Y|``Tt7REb"AEȈ=h>HM]D*fKF,Ӑ`ì',,,Ԋ!}c&+$MyȨ`Kzwy`,P``g/΃8/~wEko
-/os2e`ӱB 0ѵ,,p,h-fLy k7jlgUSRNp<Sm}I<cV=BVZ`Л'd@^@:;Gj_5^R0<.mx
-&]Xtپ^Xսq,|R,z|
-'8e#
-ЫZe<g;D7r $)u9(ޡzĮn* Xȱ1j *~PsmtnpF]2y;lf'_?mF.G0<`+raT) ɑ ::5QNS:EgoNQSjb=X֌\xuӉ' 3'fn[* `fȅ_@M^a^cX0/3 } ^0dC\0dC\0dC\0dC  2X0d`7dG<iЏX <Yf Q<   2X0dMD·aDIDNӲ<Itm/WaTqSgnoaN<"lE׽,!x_Ύ+EbeZɒ{͔P,Mn=oTßI:!);cxa_7Q|I
-fH"PW vL
-(EÜTZ4% QiMrx> \NL<0C،Ǹ':͔'5 >8 ^x5,U.|Ho ~ΏBVd/a[[j]F|uۜc^xZu?Vz>w;-E`\P@<J9[;"[_-<
-9nOrɅ݋khTm_
-Vǰ^I/o /[2W; {\л(e0d9<_ kafFL3kcg{I{1ON,׽_rvk7Z ^ui%=rA'˝3Ut)mP$~My긩n-m7YeLT iӞ􁖽&0ڹI%V Ց7ھO.l+^T1̵e`\V%g0mM_B={%g ka\]zk ‹z5,W.{n\ѵ`Om']cBkڍS]aAu(%5
-h?I>G#EXX!|;QȻͶ-CLF\_ǂz7{ XHV0 #abYΣ~!1Fǝ'~."n@ ,`>4NlիXYy#‚r}Tb*V1W
- H2>wTmad~j? KZ?^[_3^5vűE{ߛl?}'vlEN>Ăʫkt6𿊅V|~-+,W|̩O=\ܔ +04ɬ]^Do՝6ZSX?,xwWoy8OF{A:S $]`re
-+mhƊX% t๓ Sqsc,#
-]I;?ğ=uhK"XkvAqd} 0*Q
-wvCG69ºrpo**ccEvUNN;aObv`7c+X(֝+-[ AnN)׷pdKTMeX2
- U
-ו^'KJ\F,l nJƝT Hs+XXo,C8bʎx#W?Q.X7HsV{/V텵soXH畯P8/-M._=Vki=e\|eJ_>Wt\nKRPq\ ߂$<ZY.gA!Yc0.*|Erns.;p]&NטrO͕,3Vzn5m4X,lVsqt=k>׭|hjWp
-Z>MqF5?Tzl}tfimU3\SPaWI_!UjX`ᛰYX1
-]iK8uci۪m;ڒ.b#smՄ׻<qm{<`vށAէGKĶyݞX pc_]h fb/Jt ٳ'1c*ԻEk]&{ B'eԥL*QS\*գeNku8tZ x ;)a뫇UAѼ cXifWLWoBj5Rpr<ܶܓ}T/lORYU#w~}y5.iuMn׽]߄{m|ѸO΢cx l=- ˿!X@|MrAY47\ۭZ)/@O|<jJjuP^Nڒ wIo+ZݳqػVHh?b5]ZN ɓ1Y:][9c5'ѵD`~9b`*y\m},dT}B 6d{gGյj}ʾs/~o >NFx9|rh
-x9@Hoe2hD9"O
-aLJ_@o^[ ed`aa})Px$WnC2EUS:}Cҩo3X03/`/QImdwY_-`O4X0Cim7C /`ҕOB`oёc`    f,pf`````aH`PU`_B.҇Bf`baes0?#嘧ƺo2  X,= ,X(T}f`Oc!UՎxsC K+`ПBIjCg,R (Eү  ],KFAYC,_(lmn˒:Ff;œFՒFUs{EwJ+ jmd ^@HO
-5]2am+=Դ3eKA`o^/u)4֛KU]^.K,|;,<O .wK)!%RI 5?:li Y^CN5 Q^+5 R(/x,ZH_Ur+J ﹺX-ݵ==,H`WX{3Pr UHgkl] BҭaI?u1֜8I!ґ
-ἰ!9i<}aᷨ2 gR\#~KZ fZCIb`Vm(,́q ӌX"Ry;KU^)3r W0ue J.2qwʓ>-#{AT}RXuEU. m *<J
-x>qWQ k\m9Y}īg`ͅPN.̋ *ďdo<9x\`,񙬶I~A,tĦކ{ m/A+v '&`j^z@ꀰbAPrÂЏތcB pI`}zM1_L;G6XHb;`q<,&-I3s+"
-أ>ɅZXhAޏ
--Q_ @]*t0iyP'dpпÂ+kPC|7,zs[ X h^.T1#);eU|<X g\( 6aa٦wra[(,ĀXУ5aaVK&6,l mw9daeR:DS[ c#y6js?rYb0`[HiɈX\p kAA7+\n O2l_BAωlPV,x
-),LĽn,d V,4 j߰GLdq~9h<fRkFxgnRX5 ̆[c~b(=؉\X2rU8E@}̀Y-m9 )?T\QƂ2q#&4 B,rw&,P2]rZrzlrrKQ0'%ND>z :h&DS@K&XHPK̗AL٠`d d8hjVU=-H
-G,hvwXl~t(7%8g6"V9"9<Jij>Ph;S㰌-:Q P`ePMA,$1mkZϕJV9 Hwiva_E5^<;l
-~ 7*iz3kRZܯϙy'\OJz q4[?ۗ:S:(2 JL:oPRv'd/ [w:i,)z Fd鍞VFX.RKW
-rCNQakޚ߉F",fD5V@/Yr8&2Яzh)((9 X.&˨
- Z,\@CCbz-TJb5[)aX0 ް@1aP+PXTW>f ~5EU#˅ Md"l(3{ ^(veegEghZ{o!Sp-uƟ倍,,N
-endobj
-5727 0 obj <<
-/Length 107
-/Filter /FlateDecode
->>
-stream
-x`
-endobj
-5723 0 obj <<
-/D [5721 0 R /XYZ 85.039 781.388 null]
+6085 0 obj <<
+/D [6083 0 R /XYZ 85.039 781.388 null]
>> endobj
-5724 0 obj <<
-/D [5721 0 R /XYZ 85.039 728.299 null]
+1878 0 obj <<
+/D [6083 0 R /XYZ 85.039 761.463 null]
>> endobj
-5725 0 obj <<
-/D [5721 0 R /XYZ 85.039 728.299 null]
+6086 0 obj <<
+/D [6083 0 R /XYZ 85.039 740.47 null]
>> endobj
-5726 0 obj <<
-/D [5721 0 R /XYZ 230.943 101.64 null]
+6087 0 obj <<
+/D [6083 0 R /XYZ 85.039 672.724 null]
>> endobj
-5720 0 obj <<
-/Font << /F64 3112 0 R /F75 5171 0 R /F56 2890 0 R /F15 2876 0 R >>
-/XObject << /Im13 5259 0 R >>
-/ProcSet [ /PDF /Text /ImageC /ImageI ]
+6088 0 obj <<
+/D [6083 0 R /XYZ 85.039 640.515 null]
>> endobj
-5730 0 obj <<
-/Length 473
-/Filter /FlateDecode
->>
-stream
-xڥTMo0 Wḧ[5]
-,i`Y4(Ca('ɨ<MBD|i*mmVw [X^!W7$2_ߏ ̧x2UmYY~o"R^5A73]<UwMu`=%YoÓVϢ.@k@fʬ#pl}gi0]/w%:)K3>Ee
-l90m^-
-Q ^@9)_endstream
-endobj
-5729 0 obj <<
-/Type /Page
-/Contents 5730 0 R
-/Resources 5728 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5694 0 R
+6089 0 obj <<
+/D [6083 0 R /XYZ 85.039 613.417 null]
>> endobj
-5270 0 obj <<
-/Type /XObject
-/Subtype /Image
-/Width 780
-/Height 369
-/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5735 0 R]
-/Length 24902
-/Filter /FlateDecode
->>
-stream
-x]b: ea3l d6I}ﶥ dIbP2ǍPJjv[8_B2x[ٌ`!7v[nֶoX6^6^6^6^6^6^6^6^6^6^6^6^6^6^>O{sk'bv*'ۏI1z߇ o?{+:[[VOs"[:=A9h=~##xe9U{tYg38&/MlIήNDIvmkFٷl<KQ9RmȺ$:4݌ش3m @6,|/įeh0,Wl LT{,4ցio+Ӽ=%Qc6+7Sۉ+~B,;mȌ$>', RJ뒴 84_cazg"ڰM@vDc\ ΍X!9ByG%Y 6xKK7,|/Vn`:/&:0Q(s@&x݁8:XH'6<Æ0mY2luvbX ^ґ]4{!]d8Aco=j܎Yz
-57,|/a2N]G %t<iGp#%y/hy72I]ʓ
-=A-Ǟ0bm>ņaaxn+?/F/JiNx*1YU2)CI8߄d'`;oB>lƹ b
- pc al:whH_zY}Gi2$kn^0ť}-JܠߏKy3$ӑȨs$8#Vfyp ~?:uR}=
-d>i:]R$i}p@Ca"<{}9Ld+nH02|LB<CUyx$2-}di61o#y޲gTqM;9Hbkԥ:,/j߫ug30EM3GMcK*txܼHOsWq^a䀲#2̧wb\Yd'"w\o8t#J0G"WxImt8챐;:H̏7'ғyatwwj]Bl0=?/3MT"7Ä69Iɥzxo" N 4/߷A zʌU0ba8l?R Msuk2/~ܓ O=6L+%X8<ٱf_߲GY7*k3?y,Iw-rw@}gmeWʀ{c&}ɾ)/reo6HFgѼx~5`c:NVxĊN89)鏞 rD2J)/Lr:ۏ1NX vOnlpV}[tKyH~Zs<h,mRG~m)op 5Y'ף+m i =u#]BV(ھ*0<jɗGjұ5SQʶ;Xk
-|fJwa)J\#y!ΒKˬY ^hmu0#H7(v49rR2r`rQb@9 ׍ϥW9sNޝzD /ΨmÔo7%ދWr&,Zt^4SG`%J ~W _~tiW<@  .{}9.Si"FHn̹7QX@G DŽHvǫh1$Msnsq}aBwJ6,vS^<q}8t.z azdvčB.[ 5/B| G}v6
-H89xMZ|G֑4~›xaN첯x^8~Fkwq<hЏNINlv@ϛ@K'KT
-J}SR&aB u_:_`aGtN<| ?X2lUЉ3qH2~ul~7O;/)|'# x13ŽL YW?^1]fKim|lQs0ȏe]a}0yfZ'5n0 sgOF鲎X}ɾq`E^¾ƴ9%,8jmcV`,raƈsQ-|Dip{xa8'QpƨM[-Gov´y/@>XWZFVcj/k wM$w8!Load"2b#?iH:\K i$N^zsqiIy Ӓjrf&.1bo0<9^~^8c]y$0Us)~v;ws޸2dLlpgX"cj֜)~56?[yak7<7-LVK`TS;q* Ԝ?q` 9z+oK kf]!9=|Iٹ3V`Q7wyfy$Ư5{+Ur>6%Twa]E!5-uvءCENXpQ@R充>ǥڤ}{TM!N<*0tB, 3/& ¾4)*@rCaoi>/'|M>۰z^Pn].ғ
-ʼWogvBճW7}^5O
- Js \`)zT^ ՉqQa^vdQGi»x;O.fɗrIp1ۣu£tesܒ3qoqAx_w\Od]*@>):  >
-sXV1#-~ד
-X {*C
- /B{=U
-Ծ׮ ‹]z& dͷY*<WA,L
-ph˒еW{n=5TwH̳7#M+a*u <TcPhl& wmv9"@hZy
-tJK4ҍbbfʹkň"! W0am<'YupqijED%bE
-2+[ e@\/-,8/$5̭dDJkbËDȟpAo<%*!%/M@$S<Ȳx" ؍X4hJ7a0ma^
-~h̛&ho'/XTi{*<%JHvQ#Ynv
-ь/5,
-f*B!qElqpR8' ,چ8OX00Ccՙ;F-/(Y`!8 ܟAR b3
- IѰMK _R/"xAZj}=7AF,t3Pޏ+so^
-r4##n cxZ `90©eaK8TR_P1ZG^Ч
-z,\ވ
-݊{Fh"i;SWȫkm/|sPvhp]?3!xa/<}
-,`Mq7&}<&O; uٟI@,9\klzc<5xt,Xc>;W?' ?
-{>,|ㅯ&NF8A ~-RX}rCa  ;e
-ޥ xզf{o+.wh?ޖ/IzFfu*/|; ޶*7&[ֶH6^6^6^6^6^6^k[/7^[ [ۘc.Űmmk[ֶmmk[ֶmmk[ث_IY'M{t4d)Arms4h"%[Zo\*@A\sҕ}7|9[Ǥ
-O$`P\o Pɜ@Jgř̕<V%fp_n&]ÓIl?UAI?wQ@aNJ^-eLWe= 
-};ێ\3|
-^лy.>5.,8VB|MخC~-,8ɏĂEMB4rօvCĤHj}zT$XR!\!h[9.|s0V5Fx4JDZlj8& D }pU7Ylt]g h+ڜ>H31]?s|x$Ud5ĴLD^ZGrh
-{a|qD†CCcIw!uH2iJ dRaB.3k0?
-p.H4e87xY +tT%p~Ă!X8~x#:Lov'ڼBkip `%xH6po?^
-޽ґ ެ/eHř\54%>!&B\|&/`]DSxR+
-k=4@~v14 Z(pPO;vu#99cl:JWW-A}V pbW0y 龏E
-,Z` )YGPC[cP耰^=4AP:
-|(/ rvτЃڤi
- ;`KFNj89loFS;~ƂŸh}ca"#ܶ 5V4^
- `U舣za`AqR
-: n usP{$(~FKw ^'M QF`#GC]ɾjbZ") $;U ~}KNAO9P5GhBla^d衁 IU M8БR3bkW<[Ak1߁_Haa_ / /|\[nXb _7 tㅍ6^xauL{WBk.񞀅.!BCgbn;|0Ky0clM^h~ؙM)<+!LXh.t\wUǍX +ժfyk^yq6,;Ч`8/>_ 9,ǘ\) *-Ġ8(|!,RE%|Y'$E :R 7w ҟz`Z$ݼ`2I;#Y+aN%'H*>=#i*+YcX͊^ nzDG`c^o9:~:y`TɨOvm/PloБ2xxht$TG_i/`LoqK=\C,"j} pL*0˲x/0L])Q^k;T#PHh Z;!/ 2-)/0y.K,hF;p1Q?R
-&e`P_ !.\2~> r8a7Pb*I]z2>$150~g`Xzn􋼎j1K0dhk?ڭA' W5me,xcoXx /lXxs`lX [6W]FD,3;\QBc!~|
-j ^pXT, słu%sF{v8}2/`m,Xӧ;O5? >C]{`J\<ߺP{j~2/T]\ :ӱ`_
-v?ɸ˞ AavA\3Ɂ u|/a,y!s (+5;Šʴ3n΃R:V&C-ܬ IԡLXKZ&ƹFV^娾-^2(V՛h,m/x%/N´wqd Ne9>hHo]X:neԵy!HeaY¡z'g0m!Z* 4 H +yi u&EMX2^.f# xS.2&KD#C#sܹͺ &vBJm\]b0v <5Tb̙ah2z8 r20}bڴH&8!⍔mC%Ջ1C0S>B$}p2ǝ$ Rf#8 2S*\ nip <;R^鍈C̘Y #Xc5~x`u*cH=WB*?$%Tj=
- TMlL텞aS`=\,Z_G
-@=ܡdUG5:lyp:Wa,x&BLXLBzy;
-TKJעÂ0W8uL„r9_`zPqiA"/#"lOQ}#LI4,&:1b֬YtgANMOS^VyZBca`#:nN2`ZmTI KTWP tFX!lXdSH$2М;#XuB -q#ݘ5ݸ0i,#7M01pxu$%ZOJLtD)"Ga Ubs s.lV,Ԫ4Z3J# T-u,88C֓,Pyn~}2O)XfPI,]vZFUy& JGζ<I[I[u$tc25%  ^HF^f{Jn D6e"Y/p3gmIq\f I%\x΅ STXz^
-ۭ
-f*^PuسjgXd/  &z5ѨUyЇ!ݼJQj74fDy]AªpS,UB^Kq-E7h9#n0`au *|R]_C ^pu
-/-D
-骏izE+1︥Ƈ8984wPk|
-<韣=jمṃ㕋&/kNϋr\aV^gʋt f
-Q6Y,dz=.B%s
-iA1X@[ @v`Aq"Kq/| QvN|E#5 :P9jaC!=w>>];򟱰Nb;o<w089w~rXѯZNw=WL*wm C[g۲mY,2:x=ry%AiTG,g(E3 syߦ{T'7͗z mBDt/< s^jU»WBd,
-G
-ƆPo[r.,}ߡZrnO`rY0r m/xe=VlY
-%
-~SK41g3v\ 4oky-WlgrWIZs|pr! tG4Ga!WHݵ@f?n̐
-p\3S!{HԼ;J˴K|EiOq84ֽ
-ܼniUXn{x*.O =X耂ड़ *&C`IjGqW1^ H
-A+quuMs{~(Ou֝s.Z6Ts)ny
-{uZ vB,5ؑ)e煌;Asm}v/
- *BSM{r-(Ekۭ6/{^P?Y#U:^y_)˰/<[
-Y /(CE,u1FoY/6pӵyaƂ$:ObI ҁ{[[J$Wa' ux!؛ 8XJWXHG,--nqwB\ar A73o~/ܮ#NE͙
-J#@Hc0nS},  7OnZ^x',E%Ξz9ʭ}yA(A4S߾#n#]ޙɅ kSm0iN@^ L7ͺ`kJej3/LY5<0^ȟk;9R @7W$'Dt] A ԑP7h x͏./S'~V#u޵f/`oº~BEǻVkU^;†okBm`[=ShhŽf/s8g?FHP^?ڶp:;t _m/ bi؏ 3'M=D ýOPns߻:Tb
-*fZm,|`?v̬*V #{\qT1mkyr:*pb;3p (PVnzOB6_WOK¶૫Ё5 ʤb!W~&?ƈlLHVIO9
-WrA6{SyymWTcWGhA@
-A;Ci9K򘹠qjfL:)Yfi,|~"}Ӽޮ=Gm#pռ^{a=,lW
-5^{b8z/f F΅ 1<D⯁ɰ
-QK16VX9x_Pͯc݋%ߦlX@}'k<w|{=l=T&.Ĵ{YC
-) R,tk=+V̊ݹGXPyA,3;Ts
-嬒z35
-v;Xʼ"V.\_H l:4 F0%/L=q,#,tqpWa4ss_.i,HQJaxbU^{{!W\@aW^'.޾~JW7U .] {vHvcQ]^(y6V՟bX=NDd@I} E#PEkmr}!Gkm'mutfm_ÉX;Лq{5п OBq8}H~$g,8v[nf,:4u֬?,B{^,G2Z/"WlP]x`[_ B5Säh/\-
-zvEYv^zgkvK`}9` R. sCn4**Dߧrדּ}69۰jM^HY<6& E8o31ɒNJƙlz+:T+έ 5,T֯ÂA]uLl)T6!n)gF)/dkK3|1&'CHvä^kƶkYf܅j?4,iyg V(.KrۥШU/BMrlc= 6d>:ʊeއzO 8*<J魹Lak͸JfSP&qSI ~7T"ޚ/1FdZ`ǚ: <R%Fr$,4Z`h|4LUXP"%eUhX$pG{P0F(& s;= ,dbxJum*[|X ^PXT[]qKX}Pmf{,|IdۆYGPa«p`MYF/q>)rÄ^P]=
- .`txA>A[ NVPiP`_B9umF
-udSK۸^()W@Z]yܨ^iAUA8F+lva!G= $_?:`ز.jx̒  LpiC5iG{6iq#Jսa@^3S U
-Kb^$,x7WC`%)2G!xP8\G!bp9p0)Kn[J1\|f\`gNjs=+?)Wb5ֱ
-"!/? T`[ݰ_ۍ~$# h=K^0`VD9u'a#&.NJ̼V ܮ<lE k,50h(h+XMoA]
-0
-A1qn w~|/Xv63y SJ]& ? :UR9$2U`%;uJt%:ќikB?0`J}e;c~usܘa}G+Juxay0o6
-F ljua/Ouݧq8U8\vO#UtϓKX8vW,is 0.r^)D]9bT4ʷ@E#,TL2o&E}08)s=&Uۤf9JE=⸾^r !0 Y tͯ'z!F=!
-a;䅽0tw/.bu}LZzi:\+qy;mbGJ#ae<weX!Q5b#vkrYjOH|//&TcXsAW\iZiKX &Cx Gk
-T%@ъ= f/{ jw6`Ƒ
-SRx]я)<F{RD
-߬Rz.fқ< u/6RӺXz\hzǖɾ '~$uG/֏ލQ6m^q jFKLTL w:_4I+B9Hu0 bJCsGdtQ̟35ʨt.z?\WӥI R'{g[N2,_n+,x ! EɠHG%_5ԾUTOǙ?-#͡{=XW%B$ήXX?Ę3ө4тgrqY\xa| 7,(^(kƃBiP
- t2 S虮R_ӖX? 19B2Gy:
- Ӌ^J5ۇXf _X墓.DA
-
-3 hW0Xe^ݑ&/ w_:X؁YJiAs~m?w/\#%oΔ@ʥSWxRCk,煢Ll_߽OŸ]_Htl@Zf3熁˼dwrHXm/L~Du]|^p:.bFkB6Ơ;k}y!쉓]y]n?nB./]|@e/GPkGxoG^N"TSMi[Wh2dPMJ5Vq=fU޼} =rq ߵ_^_
-^oł'xR{x~YM%)ޓJ\<#a GǔR6+#>o?8>2X;k7RT$zl+߶l# cx(ܭ /|`K~1NozViHmA53ns7/,vԬt^=1[*S(Uj=ǘ<XU ltW:d1;e`tU$7Ƈb@Xn{ip01Y_|9C fXQ܀oC]13_:y+lnQqō3UĹWPG$6iS#VJuG
-i/` OnWHkw^@-LA]vyfAѣX(Rse 5H~^8Q z( s P4lyFmkSdԂ9EDᥧ웽Z^ AoB
-q~K
-w,:
-JAP;(r1e/pΚV 1Ðg}BJ!·IBw{C
-uu#Hy=Dr7{*iBӂoZ^ȕQej8XЫ_ZUĘB4]xv"TZ%w•Q5N!^Ơ Խ7]<Z^x3/$߱ϣc? ` mXn{[{zuwmޙ˳ ʏb0.μ` փ? /<G99rܜplv9dzh89?#a_<_[ Λeⷋ~#7o~1j}lQ8cn{-V^;fdl`w7`!\ĖL?R}ʍ۲)N+9
-]v0 A0[@ѢvuM{5"\&f沬$4몴cJh}CqV.X.PMHr Y;,x˻xGYu<Qgu뺰zG.m=G+Eִ: PTh rc-T$R(ezY.$nr)T֒RӍ!ę0:N'\g</{i ۅYfVЮ 5ܭ],KXHdBيrfgV_a\bM
-NWAbĐ7Hw_pM/__`8/ Qf" eAڃ`V]qS\pl쏰!"{̐
-(lvi7 I٧5BT1ǡXR^KCy\H[t0M\xi!e=8NI.x_4X.D\0Up}JT=Q؅L̍C=*\8Ջ5o f(.=%1p*P$q^;;'2ͷ\Nva/ Ua|8)i]xz:qamoȟև0PP|.vrNb90
-
-endobj
-5735 0 obj <<
-/Length 107
-/Filter /FlateDecode
->>
-stream
-x`
-endobj
-5731 0 obj <<
-/D [5729 0 R /XYZ 85.039 781.388 null]
+6090 0 obj <<
+/D [6083 0 R /XYZ 85.039 572.769 null]
>> endobj
-5732 0 obj <<
-/D [5729 0 R /XYZ 85.039 625.299 null]
+6091 0 obj <<
+/D [6083 0 R /XYZ 85.039 542.682 null]
>> endobj
-5733 0 obj <<
-/D [5729 0 R /XYZ 85.039 625.299 null]
+6092 0 obj <<
+/D [6083 0 R /XYZ 85.039 512.595 null]
>> endobj
-5734 0 obj <<
-/D [5729 0 R /XYZ 265.428 204.64 null]
+6093 0 obj <<
+/D [6083 0 R /XYZ 85.039 485.497 null]
>> endobj
-5728 0 obj <<
-/Font << /F64 3112 0 R /F75 5171 0 R /F56 2890 0 R /F15 2876 0 R >>
-/XObject << /Im14 5270 0 R >>
-/ProcSet [ /PDF /Text /ImageC /ImageI ]
+6094 0 obj <<
+/D [6083 0 R /XYZ 85.039 444.849 null]
>> endobj
-5738 0 obj <<
-/Length 478
-/Filter /FlateDecode
->>
-stream
-xڥTMo@W>찳4D*99DAH$Pڿ.pC;; (P BUĂ+;0mJu19#PATQϩ~//? լDTbJz˻imNgI=\7$wӦeV*4taTPW+i8jhJ<1B Y(V>Q_ߦV˶C:19~G'ptǤ>$Y|>(iMū
-endobj
-5737 0 obj <<
-/Type /Page
-/Contents 5738 0 R
-/Resources 5736 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5694 0 R
+6095 0 obj <<
+/D [6083 0 R /XYZ 85.039 419.872 null]
>> endobj
-5293 0 obj <<
-/Type /XObject
-/Subtype /Image
-/Width 780
-/Height 546
-/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5743 0 R]
-/Length 38179
-/Filter /FlateDecode
->>
-stream
-x]b0 .,gootmD74i&I%Zg!<zCjx7&c<kTq<ؽsH5<l{41l|݋|Vclw'N8lޝ.Kӓøm>l3aLڴolUVi۶30?hGLc8n3a <6a|v=
-?fv3
-WχݣG(c<;/Y;=J8P*٣M>Ikb:jVꝖ3@KYKwXi ır[,XfG~PjPR0+y43ywB9ͣ?ˌKjϼ`<Y B/Byan|Qj#pԗ6N;Kz ,d lvzI^X`aw;6o,^4Oq‰z ļCx4lY` ڙc3:voÌx)` v3xx>a/f.
-if> ѝva 0qt >J]w WQPٰp*uņ ye5_  b6,l&6^d :-soF60 nX[.ca/=^s&gŝ7^c Hd<!7]  b܏#}iY҇ [y8V58Otl FIP{GCztn (g;+d.E 6/lr]XML_
-5kn~:6^,bU\N*}5чvJzt?3`DO1F2q7^[] ߠKiJ6U^vvgyc g/77 ىu]Z%_<Ix44/Ε=) AVWƚ뼐
-`}yl<{n ,|r|2Ӂ&3Vf?"'#uGIQrj$IXLuC3}Lx֞* ^aڹs?hRU8pv5EәLM?K _V5Xm7}(5ZJ)#*
- % py*uhaij@ӵP"‘T/b(lP5N _ {N h \~ }IBLU$'nTOa6{ Ozh֑ LEG=t%±st|c2`]2 :j'&cUY_sxyƠ9o'=K
->tI5 Ο. I a TSQ5tV'K"[ aðl OɄkPvjƂ4-̔L8W3dh)ɸb嗳J.,
-:f(-c~ҋKT <X8g;02۟?7c [Bsjޙ[SsHn
-{Bnv,/PN3
-~ƭقV6NINmjS: 8~['7ufC c FRF91K(1%HK҂傲
-L<΍ف>=]oFJa#
-s5j, \g0$
-_eL=F=8`Q|$\G!='.7^x<:ӓ
-1Da~bnh-^ DgDY~[yv  Q\j;o?ϒ8 NvKfǝg2r;۔,IyӰ# .y8 mw~wCVѼ6lylS9V1y%:Ro:r+&,p<mㅍimxu /`> _GQ2KGiKgQ:nP 7@pN,<E<9怓Y|//]D -Ƥu,[A'p<xeoX83, tpa<ֳLad /xҍu-f}( /*6^G:Bi]rl "ㅙ̶ӸNAX;nv6pk%Ԣ gx
-z
-
--p ;/8 8Ʉ?3BAH:m5niJ. ]xa-/…6v?iP5N?y&!j}.#>/sp ϵ稙ڤ]3d`FbM͇vBrpiþ'7^X 7
-q|@&%by͚>M>MGxtXns>X۩%ʓx JT\ٚA1oGk9qܬibC&Y/hS,eWnb!*L3|[boyAss }mO8lx7Q"XPN2HܘmL1o=pݜ[%\,/[ښNj$DXuPibPJl|tզ`TX{PKYM|}
-ǫI_DQ(D{^U H!RWZ&^xb"w>xhYxDv?RϖFf>G!/'rf<~L2vK `K,HGtҳxuyAd B(>]h8HEFf]LvPU t#BuLmc Mv*2_UjKұL9zvL˭gW/ޙfTn&}?Tɖ<[v*;35Hț;lFTv?N]οAɡ?D^tkxaG׾T6^xHup,;TI))B teJ^GolX.,:lq-}&u/Hy|/ħ2) 7 a$].jmQ>?m?'FvN> Nѵ4r=K͢ 2?˦N=/avYةv߭QW8OD س{o{trG'+7-۰X;ΪN^gx.,)?|Lxf5A=F/߅aH'(^gxϗo/n,< j§Hy,/I^/lCU_^H(7,-^Gq<̏Èy'~8fq,Mc?(]j:nߜw~ _x᫒S
-jiԶND ۶nkHx֝ mA`w잉VdSct ?FڰRR `!H@qƤ
-ejƎ
-uUX:W#N_غ Q1-M5d(f:Gԇݏ^\DyQ<jxy&#`fF)8Q4w45`&{ңilш;S:-)re$;mI5Rs  @wBt`
-P>B`t ,$UKbD'#T-1)<!!8*,yY%8QZ1]dSSb 8a;Q
-Z]S1<8p_*wRmNp޵dx?՝P]@[asCr3o*PWαPѪkSԨT#g^p|PC1̉4ZӲw
-=T
-@) ȊZCM.#M
-nG{Dk{zBD2B]
-v $sbݡЁ2#2F<BAdTUZ-ڏGnJm"=J˜~i ә1 !
-Qxf5=-S!.zf$I=<>
-0mk d|Apf愶Bjj2g,{hk'EWMX beZ8usVBawv`|qSɑ^;,Ę|G`Aw
-sU{{UhnSt*e" =Puݕ 9Ec(U!`f
-E[% ,RR3M#tXF\ƢA-UG?}ecW|#g[,?.%`L,6iN&֜N1=Ck"?tu7n<(hCFaDa1\[żaqPIcVb2ῡ/vxsQߙPPp6[{^qOGHScƗ FgH/vg =ܶH>gG@߼@qQ2gZcEsHDM}#ڰaXxkaYzhWS#_!IrXx/BX[2!qgaa/
-oɨ#]$#%+& _`1z9OUSxa7BQxe?V)>p})ş-A̺< 7\;3>-Y^>k}
-T7Fy<r__x &|•3'O)idوk yY%J<YK "h(uJBB.#XP¦ DNMV*]eԿΝS5
-žq B<e#efLʹzǛ)>MҶDEmAEw]Ru#WQul?jW۱&a OR!G#i28PUHldNj`J5//뜛68%MjBeΑxBŇ}6(;AX!j#1c][S
-f':WN2u60 ۶=uJTŒ# 
-w膅M&ݹ#AS3$<t:y
-SymcE6Ky)vm8wQSi`:7rf:
-¸Nط:+ú6Ά..AQ]eM?#Ӭ1\AX7*D 1 NXCr`*y5Oʼ_X A mIKGjӊrcQBZ"'uש(]u)RC:HҴA
-X7cxpt:x'h=
-ͦ*N[Ǥpܑa&WA)UZRk6(u!"SkRh
-ǏBnΒ;!d;XYTS(/ &)䵈ͮka\6ݿƨ džB :XHUfF~DN`pCF5|: >fK'a`.kZ?0,Ų:q`?MIHo#'@jT,q,t .H.D*F7蔫>rFpZSpw` = V,wU8@
-T04Ꜯ(:tW5:ݓt-s,t䮠EV(Rp+-R;X0co/< :Z37}.
-ވ/`|7Y(AfC*!Ϟ̀:MHcMyaazytS3,_8ÂL J]Vk;W|m,/a]nǝmSIv!} Bf҃CZ:N.%VBl./i WK|+l!?h?I>8UڿYh&6߹<R7^]9p/$Bu;$H.%==ܭ,*Ո. 1]Ɏ cZ;Eb88twV7yF%' c8ߗ;-nk$67S2'ܭ~,IO2o7Ņu^VJ] ҤnSFBG`!7+xlw_x9|$c{B+QV^ RTQ%nOڰj9;^C$Ex I/k̭;S6,l$PmHuF~{&o,hrO. c5$ ߑJ+6XvueP~ aqre/OS%;flnzM[clI~x7U $2_WWU輴ˮ4p̾wNFo%"qZS,\[-SίHfL#-e8|i1*؜kigź]gychr 4
-KBKL%tH!#UЗ%2 MmE+^&b)Ϭǚ'Qod3/]ra^Tz4b}<
-e@%zj;;M;3=D? 婪ky
-&nR8S8~FA+x35v""IX OhtDjQ|sdJib ]&}BLYAx:" ^i_UCbD2~f^3*B@!8oTYn:&B>/dХQbg?,%U0)Wa! 7,]7X!-Z?eWPOXpSC1 hXUkvy0 !E1T@<URqh%<U HeW\swfaW@ IA
-<R഑dNNymifY`A
-a ʣ1B ]ǂ
-@OjL`!5<ԱKE֏)$s
-A#hj' 6ffwyΞuaE -t1CLܠ Lv"uQ?Ǣ fF#jg9%;)R&1b~fdJcɯCu],$ FhSMǞ= m.&Ԕ/j6e娹p
-SGL6#L1sX0-FXȮ H)'a/Q[x3\4sf14/7nVB2FwZYz=a>!Wm [EvC56ŚkǑ
-~(Jb2wǴVUk*+9]FZY*ej8CѺ 䢲{g`H:8o c[ju Q:h?ǻʒ+*]WCҤ{[qgJ7v
-"W9MeTQb)q"esy2^z |8RǑ[wU
-xt݁]Qu'1+`xj鼰}OBU(|-1* ;l
-S`?{bD+Hy++ ,<$ߑK ecN>;QJ~R1%34Tv?= vw?FW`[~G|aUdPʝ}Q7}f] i\޽}_xl.&W*,^w)䩋6^SkTõ9=r[>ssS`(Pn4C/Z+l #q^FoBo]*ۘ_%<Z$`y./^B3j,1i&{bAȗױ |C<Nn'ov
-u 9.<kd\o_ȺzLn jgจuHwy܎5XuRr ݰS>ggT8Q*5T*4] ms?/ .=GWE<ܯaa_S+ K <3D J3 GǑn
-ŸH/,~F<ef(KU/U:&Iu6[b _ y܉/
-beł4KZB#HW nMNzkf_9
- +j"ר-3̜_
-^7Q 0&y\_>Au
-}_`b)
- j\I/lr 7_p*n</ҵ0KuBofИJso߹Jn^.7o-n^2z3/DnoڱA#hJ߹(+:O[&%Ȭ;b֧-i@/n9wn6,lZB֠$zc޾>-+ޜvGHNoװ煹<X8J3Z߰z##ZUqgh+6v-i*$at$m' nO9 {y涧s<!R4nu791(n`!Umk޶X3vy"EJ Xׂfe޵N{ky;ǫZJ&s̈́<M;HZ8Wu&#DNt_9N:pnw]:f`;3u`wЩ͞?exTnZPepj_6 a { / [, 7,}/Ilڱ3^+xeަԛT,mָho:^Y7)v&߉cBXk)*_wa%M;'Haa/E |6^xaㅍ6^ے_H/$vl&< ܰ&6,l =ΆpQoI򺸇] v4W$=ݑp+p_ܾ&~vt-Xm(aRݝ?>Қ
-iƆ+QCiQ$
-/DBUKaaDe,UJ6
-^$,HUu_@_`/\G DuN8a
-|w`soPaMyLuBvjdSpzXb!G oZ+ۈy9DT24r}d<B,j)'N3r|$r2s7H6Z~^w. ׁ.$)᪙+ _`/ҡkxEl8eZeg:qE(qCpbZW5CPT`+x.UQ8^84/O慑b8-_ ^0 D'
-:Y\$1LBq\\.fvLUS^?!+oW CObwBEe<`"Qa"|TQv]yNNEB2BK}0ϻG~|ObMun|b,QRwA}^(vX
-EM4MiDhqrCZ,{μh|89Wh
-˦e$_Ο W̋ݴN]+$;Jh: A̋4u;Y9%
-YNvٹ4 {3 /XqKIӐ-`P XK,vX{.MZ9<wsi-,EibpǏ/*gdfal<&Bu<C|ꕥggݔχy-ݩ%-wKPÆ.[MK4 7ip,䤱CMmȤ)H*\ &<[ iPД@C:(EUX`^L8
-1\Qy!ϲmKBטՙܶ,8OWX:_ ؉.'+&Y1UN[qR_NFq^. e'2oM=зM;W',4LJ[\-Pyc Z1u,6E<(#ɸ!FGvnhL^^kz J֎SН0BgLz/H'E>V 26҈5Mxz ϙ,qԒ ś~LoPuP
-].rSR܍>ߕ VhON#Pkdөf3C<لF|m(gQ`4Q6^x8 yp8l2s^WUcHX`amY$*-{NY*h\O?Q.,6\vX8b; Ga!P4)BؒS Ρ>x!k0 ,oMj_3jOav鉉/{XN41jff`ٴoM@Ӯ;~Nu5HDtBms1(/
-c\GsdPWcs9׳X%j%^YM 4H' &-\WX
-Fb .,{YmiAz4c&\w_w<`E[EF$=G:#̐,򱼐}d Xx-/\qse2¨M@C9ʇ
-G<qrl ֖L}jiB4X&G 9'^(<xQَ#5z8ٽ$7]c=Lr\~?Idѐy(2Wkil:7D^S#ys`B6^}0+Tym`}&nV|1M2B<S u$Oyǁ5
-L`q(-ya
- itㅟ S,oIo`|^Nn$=fu; #Ql(z/}tAFEe 8 U7=cOjِ.p}ty`Q&Cyk;YJg_.ba$AH^\`c M8Ai߹&
-^7 0Xg^⫰dzʋH8/b^ԛ,;;"OSt{u'W˃sy;bv9`Zт81/ظZzhz|Ο )MQq:Qt--taL+g( -aj0n^oFF^I(<O?_`  TK<-:(Ӕ\W`aI*^ize.b$v0^z4P@]ͼ`>Iᩂ 6op3{E-47uj,:ˆə|kFe3n+<ĝwBv ,.e?_ĸ }\[.Umȳy4Dr5vkҜm*3N ]-u} 3-Y5"軙ɒMspv}d3wyR~++7b(y!x/fg!~
-m/`'ħ؍ĄhZyjSvw*ca=v t9?24FF<%n K2N55q qô˦15ͅ5丫Ѥvb.0( 0odM[`v E ps8l.츹<l5(H;gw5=O;` 燁Erǎe}S/
-
-瑦b@H3~\w^v-XIy2:کr37AXmb>[|;i7FK ffYxԝ5sr]11.@pʦ xi?UZ6iSZ]ApJ ?iirxm΁ɋ'7kzf
-\v=ul]a$Z^mmaSɓbK3u{ƃ^jxw]Z)nfܪ%GF/Lf߅)nZU=VI [
-_<|ɮ>'.~2p}|q$\&?R |,Vŝ7x-@^nO}6Y b iߏ6=Sp/Qu=y?8)۱ G"4&0GL!ys84`/DP_lt|OcҌ9/Z3%!(ǎ1P9++_ux%:Vrat:+=%S~&+K/8,D<H k+Sz,XS-(M[1dFv])
-MY?JjVΌn>wMSԾ722*iz^AI{dA;'+6x76#IJ05m"ܩ(4`e?)\H,/0,ȱkj"QR(Wc:61c63+[!YE>JM)ilrQl68re@E0#ں/9
-LQZ ]SQ<ij1Q)JEL Kwa53L"Aۅche4Y5u C[t-X .?'%eNGJJ F u56 Z;U m)@1DD]&U
-E`/ȦE (ݵ'mDTjpTLU-fkbPspH%G+U8QK0} C1Y%
-Gy)
-obsRBm^ Ga!87X0wBm@e1Y_4J%{czDv!"Kk8w!8Ṧ^~:qjz1^{2^u.ǽLBH3٘캉<ypdAWʜ,++#tn
-kh28)ڼ7n?+XȏVBhY/>lЌXcIt̬u2*,:b`V6הLpR1׶=/(e )fOjsTJ c/8 +l0m~g8m L/"q^=1ʚ,;_B_9u:^y Wr0}mztn 2#EaO)(/$ĉ6}zc0}
-#F) &7o=Lh-e4<a/y
-ZxaFU0M,7}/|yWͤ^d|O.jpOG
-@5NZ'X 'yl:GPm"~hɄ]Hdoo8zM|A|J</ u/8鄦D#X` xQlܝi"nBеixZ?6Q/ okDs#=
-/#!*ΈD\ܙwM7r>%e+u7%B|+_3/[-g-B?F*/ǝe-ؓq}aaH},/:Ɇ >橵HwٰcឬG-6\,? aII7,lrW0lw'4wS@Y'w%@TTpC"oLbM_[ᄡQqÙe߹aoɏ_ ݘ @SxDؐj= vDh"u<_p1?&?e|annDx\>U]^(o
-WyyaiaG5 st#:\#2 ) =|>
- <$W<uϘN{`Qdd\)9^SJJi5DZ\FM) ")%oj*Xhpd!Q3֋9[zֳx!s0
-(}bSZ"~ 6wԐAX8֠g\xOđ|c>;\#U~-b T ł RA<z5(ߋqf
-Y+2ƗI_#',4Xb
-`Ye?1f ~|ׇݪF+Hwp ˇx`ϲ5
-oxΞw{cb -u)~~ k~~n 缰|lX>`D0q.=$]b" yAR?;J26OXzG9> oeE5 YǢBTCyy~0^}uߴQ}e'(`o!^"vchA4b፼Ow:\FS6ܚoLzӘjzo0 AxAF~ N#K6>jR4mG䈓,\d5Ž:^qj.ڱOㅽTlHtrMxR4N^,cՍCPW}L܇gn<>?łŊWh -'ً,*8CSOuFygsL5Y{c^lR /ltތY,8w L v;
-lݸo^i1wNIz{xM&ݙ9ml6G[hb;m0dV/Ի5 o$IRܭ ZIѷN95wbFa'%YyIۜw-`w{ؾw)nք6)-@1umu ϋ\`dz QdgbBB{=>^jcNyq_ya9ĂPj+ W6Nzvzt7l\={h(OK W-1=nYbac!=N`@i*E:ι*g7͓ {x=Ƣ ݯW
-KljB]&[+2&\I2? Oϼ/x%?΃=Nc wv&ZIw~_f4MAyͦKc%lOy۳d$ܬWSAjo>|W.O˳I+ɘ~y~  [ضZ  Bv_Ƶ'8/?"WyCkw.z[5n ~//h}]/"޸b%I8,YOaAdz#sR%,3U3(_MﵰGE.IAcѕpi F R'n tJ*2rsZG
-JF*cU-ŔADɻ{.{~:TNR=GTPhamn8ڷ/*E|hճW@/R,yOvZ;A E"bEyUѐԍorG(|[-i.Lb' 113h}A=bU'
-[KI!&㶉as8:F ㋸Swzpr 3A c~'*9(1‹c[>ĄGơNL:ʶ4%R zza˜ MW@O<M%tCh$bMhގ5h@FZj, OQߛhtMtӓvW8j #M
-c
-~]xj]Xj
-<tk=%.O:"9l_`c:sLrȋLS~m" ɘ!25^bV)>tTeX _p1K,|>.xeyaIbc LEM!DXm>N
-W։?,t/+ՄBCsW(
-~<6HD D?By^~/ e3,H=_G,sNzwz6pAE4HZJ<U
-y 2&[^Qյt<"uit1֕ vpGIG> 1i@q =OX(6>8f$Byڧp#E&p"68
-tm68 ı6[+H̓3$
-{?Labɺ;zQo?,z)zXlvϪ8Rڳazl=,[ݫ~mujwgawaw~y6,Dj ލ/| ˼XrP;yȼ~8ىÂÂ'  N8,8,8qXpXpnYqptvhOdf']bC vXpQ_Â=DÂפ5SM/8q'N47o'G3pdCv\:'N~HMGu8}WMg#9YB8qXpaߵ\]py2Zu,2<yZ;qױ ' F]uʼn?8,.a+wĉÂ' N;XhD_ׅjqDIKY,Ν`#\};y^[Ъ\IG&]x̍}B!F8UXQ !ix!rX/M̋$`dy u ەExcdp%
-,3D  $hh~ # A A:X~ {ixC8p຤wEV x!uXXv`ydQeDeқX`a`8v,'CW!K\8\m,X17xg] .T&>kڤ,j.xAaW¨qV_4l=Yv io\f/-ㅟ)Qw'8ϿbaY͘-g^lSGwO0߅pZ29^wE}F8RlO,%g ˼ca=kst K,8^4i/i
-UDiꢲH䇠]>MBiGZY?u_#)r9[ ~.gcX fmC/\y$8s_eKǛ#oYGTyݪNǝFGh8$R& łQ"p /&?3Z[֕X0 7`O PDBcP<GD=c6:C'־ї^jT 8)MA `^%0cK/&,Cb,YsAg'j{FfG/xAx)Ƣ`KЙTR|UUEW-<`Z,
-Iؑ \Lqvf."MڌNL_ & {_-qAq!t
-%,4&/{ !Y2hc̹.|ò$GC2[nxwZ'A, 
-'&FnǼO4~h;tSk`/3}RS {;ԧ rGOَ? B
-maHv XRJ4Euv•~yiگf-*xsTʟṪ.A_Ԁrxeߠ|jV^6L'yp9{yYO HC,FY(Xn.
-&j (1"K1l$LuWk XԠ bDX4O4BlOz7 1OƨN|s){GbG)xt1 Ъ bN\f;Gk/>w&#X[9.O\1w<XfȑX&3F:v!e"FԼ,_HRϹiB/Y;ykD7щ[ M\IhEYN[yn'; /N1 ⇗aLb(l,<PZB:`#ߙ
-)$}W_>‚ >hX+lx:{".=(8&n"*BD0R Un;BQYE,$8]Q>CsZ wpaYQa)=lfP6? b2w7SpŅKϖ؍;p[jBK=Lawo{ ƓaK{q(^5-G^9`,4TX#Oam¥\CVeQn5rn=^#qk /%Hi,gp S'SSΊRk`c$ Iu>B
-ymтd//Ck(ļ:ip/j>XG^؄QVzMMv xLnwK>SR 'FCnYwPܲ<h۵p9,v۔84 \Q˗MAtvi@cDCdOT< yy/k%?+X7s<DMV_ܦ\
-.DI4<;݃Zf͏XEr#[8BV\M.b>Pd^(,s!/uJ%g>~Gg naz9/y4f.<+K
-370Ï5=2_]W,ghdcʴH0σY5/ct' *k6C{"_7q*LU%n}n7gb;l$-O ֺ.bbv4˼0(vMH(DU *S€;ؗpbf.D()DԔsRBVFhD:\I~m_ƂuHl_q2?Z%{ 6dFWku0B1DlE5sQJXBd:Nv@Ջ
-7f f?YAiitX0:3Sc
-
-&M
-”؎8M
-nJʗ%\jj[,h+FZ8A4Q`VJsG5e`Dk秳.LLW{FcQ".0XN!V{]xQ8`Aqz33u|2Z/?S XO) x\/ t(:S s<ۀis=]gAQ&vRm/Hfp:ì3.k'6'6e}*P-N2918SK?>I[9<?Mdr0;5k/6$= $dR2wi7'HiSeTb~̶Q |헤?΂˼;%BP>]{V8~vNzZԶ,8qEDaOÂ',ĉ=+civ##w|g#mw N aa NoX(G fiDEFJXȉ// 2Pqȼ7U|d\t;,| uałMŸԈahj{z=YѤw+lp4+nLjB Qrڽ:[ױ :pu9uD ƕVr+RjGq+ʹ=P@ez:J W
-OFV4xyc_/*Xh1#w85頃ǪԢmGy^=Ǿ'~nCי&>UǦgUA<Lj)sXA%S)I^6 N׎cCXT]=B,ߴ F
-qA*vHWhBjbLbxD.͋!v|\oWaFXS7<IiJX
--B\|Hg9)@^P YCD /i"H4 3`(l]>PY+z7Rb
- Jh#Y^9{ C p_s=,I6sp2pUTu!B, WXiDxQu)ĺJ:ܾġ=?؂@bxK1UiLP=JENMx[ &k%UEZ9EF!S;p&y1;v"8?"SGL1 3& Cc.Mdzyۿ}L3ulJU5f'133Q T3ǿ¿/8qXpg#9qXpXpl$'ĂjwjWEwkSz">GvQ/fT/ Я>VL6R6ܙ
-@ﱑO>V+;V? 6›}—dD߂A9,X(3/Bk7bAq8^rx=疇qH7BnH?9
-1
-""ٰ"/xR6<G0Z J-z]bWb _ xe D'f}zxab [ķ&y*YTfr̳NY,8xAЎn43et} X (׍N?@i|_ X,d"N2i%"8IG;Q#ݵB Z8h<ZrbAfR},LTꜫ)H U?P`3!Dp ,;OJuX"ޏ5͡QS ?/ny#1TE3<VLt/tg@;:9kÂyթ $Ex$jH8nB#, "h3y Ce:Fwc Xv~?/nCjp5^`зc
-B{
-A11WJHN;_B<Q{u Q\׊K^-Ebwmc >'QLЯ-z1vTvQwu 9<_h3fMżGW"M:-{ hBS+*u1 B/P%EO"'J=5^MM1#/ Y}ÃSmbt oٶyjx1P%۸B %}S\BH;) eZ^);5d,pRAc:sF\T>':۪oGBdxiE,G\y 8BcƘpdXIg1!
-S{|} qN=^ &=g=t@'Sgb<G"W3e)JX{t:Np*AIqSA܇9TʢTƑ:2SX(;hem2G8*1^0'~WyAd9>|y)z/Xؙ:aE{4oئJ &Q\KSEReױ`W@QL܋/9L<]' rY2V_X;hO7vUa`
-F<j87_B4]t8o<I|Z =CEp} T
-zQav a}薠 Z%-Wt4/捶> :<
-{mGiW.
-egߊcaR;"B<U%3W  MK t
-M <PO< % +Y=Һi2Z^Bdh`4ՄXj1MpЖf'R"t#M@T
-G xNy8u(܍ |$S"k/6hVX@Ezݡ&zD 8MkX.3~^ie\},}yM19ry$UA<GAwpF;d Á~C' TtYhөo2rYq
-psyFz/l Қ-*Ёr06煦ڰ1TpFшPCOW#%̢U<{ >!\KyRۿ")e<?Q2a>tc>|(\`!ʐv8=p0<%>nvS>,8/P톯q%~4XG bɶYt~I%ET>O nj|ҡf
-nI!0+ C!l|,߾KwlWbwyA|ǐ|(4y9b?`Z(Tgª>;D7Z絉}M-_]*? >+l"N"U#i!^PĽPMC& C%FBvRդ<q@
->(&VSz v
-UR+Mjy_P `>CO,1Mvl>2C{B893U
-
-I\b{pK
-4p C)Wr;(+OXa! !EØU/t[0W!%3GfS _*^M 7*kMubhEVUe&XО>G:ud};,8[ys `gyk _= ٗp iN al̃ڎꏽeDŽ_6f,ϵHi킹Fendstream
-endobj
-5743 0 obj <<
-/Length 107
-/Filter /FlateDecode
->>
-stream
-x`
-endobj
-5739 0 obj <<
-/D [5737 0 R /XYZ 85.039 781.388 null]
+6096 0 obj <<
+/D [6083 0 R /XYZ 85.039 390.652 null]
>> endobj
-5740 0 obj <<
-/D [5737 0 R /XYZ 85.039 714.405 null]
+6097 0 obj <<
+/D [6083 0 R /XYZ 85.039 360.565 null]
>> endobj
-5741 0 obj <<
-/D [5737 0 R /XYZ 85.039 714.405 null]
+6098 0 obj <<
+/D [6083 0 R /XYZ 85.039 316.323 null]
>> endobj
-5742 0 obj <<
-/D [5737 0 R /XYZ 222.519 116.14 null]
+6099 0 obj <<
+/D [6083 0 R /XYZ 85.039 275.675 null]
>> endobj
-5736 0 obj <<
-/Font << /F64 3112 0 R /F75 5171 0 R /F56 2890 0 R /F15 2876 0 R >>
-/XObject << /Im15 5293 0 R >>
-/ProcSet [ /PDF /Text /ImageC /ImageI ]
+6100 0 obj <<
+/D [6083 0 R /XYZ 85.039 249.183 null]
>> endobj
-5746 0 obj <<
-/Length 470
+6101 0 obj <<
+/D [6083 0 R /XYZ 85.039 222.084 null]
+>> endobj
+6082 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6105 0 obj <<
+/Length 3630
/Filter /FlateDecode
>>
stream
-xڥTKO@W>xB &PA
-(yq@ηF!A H
-y^/3)9ra!iM `l@ AQnR|t1YQQ9nfi=GK*
-Oy&mxd,Y՗YêԠ-EZo2@-CLj%ŴHU=/}
+xڭZYoF~0B 98;1 yEJb"?u5Eɔ'] 컫Z܃<\$Q\͙woΔʐ`̋ <Wx|_'pϳ_^_L1J4bD9zz~u |hT vy;3AW_\r͸Ҟ*A2?w;\P\ݛ3 |#_R1S8Y9*M9 M`ȹs's*
+dHgst,; o
+jA%d zL NDGN>EIcs#$% Cϓ(rC+4QK|h@T?2i7fpCEү3DlZn797m@SH/_]l$M@X&3PZI[9 ^v˺"aQc%_nHI}5{0~'pl6(?Gi%9Hp|؁^We7W_i6^fVXxߢG1 GcER֗ m.b+b aܤ`G
+  c
+$]qkGGe#OE6i[nE5oHPc@l(k3^s
+}ߍYw5s[`)}OyPbm,k+ܳP%U-ab<\/-̃*2-"H2xjJk*rO~?椳AI B$a5D:;cyA){6l@5Eȸ /I}X8k4Dʍ<H|[
+FR, op^ƫjq՘S:' ~rZCCZߣqfM޶>=FXLd0:ա:'m|=k-ٔ>U0t6[lJI ce5邿ݦiOAlP6rI(Q7!R"$[|WIO:f ,k>@\B΅IBADr&Z\tYH jc0F Ӗ>n75=4
+ᚠmX*;
+
+@M!lm.oށ>NYA.)ع Ai"\LF/?Fpݏt=0T'%@S`s9ZZ^%B* 80A:0ծC殎}-: q&zH;h_k+a|qFJ;u~2,ST:veCs7fҽEHnLO@[1(@i(G9&:]xvCQj AO.j<U!4
+7Ca`QȍҎ=h۴*h?{8R>fhl|S#:ůY?Xt-Fvd8O0
+t-^+S6O9Nb/) X]I©i~B#32վ_F
+?KN^{I`![ŨbN.s%kxrG6ODmsSY$>z1Pt
+PI#ǭ&ܭ>%fH^gn'j*n 2mV#ΤC&௼d^]mrJb7I`I "I|P?ÜUqB8sIלȹH
+f-@Eۖy5==p+B*H Ɯ<D gwM 0q2o$:ٮ(yniCXv3VzNDk?xD
+3l[_r4($U負Ӛ-l{gOq8$Z42jDLaٹ>޼xؑ׏A"Sd֤쏲 8Vwu{3+1{M'{濹_ֹlW Ѻw׶ u*[6 9!t8VCzp`l]SMQds^}[t'/#3oRϟ J,-&ǁ'?pendstream
endobj
-5745 0 obj <<
+6104 0 obj <<
/Type /Page
-/Contents 5746 0 R
-/Resources 5744 0 R
+/Contents 6105 0 R
+/Resources 6103 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5751 0 R
+/Parent 6071 0 R
>> endobj
-5319 0 obj <<
-/Type /XObject
-/Subtype /Image
-/Width 780
-/Height 299
-/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5752 0 R]
-/Length 22110
-/Filter /FlateDecode
->>
-stream
-x]b( >1+$M;mtt&q|$!Dgrw w{_Q7ag~6c }s$ l*cK,X.ZX^RIM l{ a7b>j^^{HOll煽켰^v^ya/;/켰v^ ;/Xya ;/켰c_^^mW^r΄e /Th<]ov*_ϸֹh /Tn~v,,&B/$h?|و!*m͢
-V5igxy0s8EPo0$/ٶGHeWs(OrD_Cyarڥ(T:)\5ޮ8OLuF @|Һ.7}85kytIP;X.wTV
-ņ= 
-"?(}̝=XG5TKP2&d4CY8zP36iXMXQ/R;=E 54>+
-ޤm7gX+.4n͐-mZ>SVIJ 4aZѥSW]WU`{D&XBI*H5hd
-m7v^"eYN/rMGuh6ᜡd<;b3[5@lg
-aX
-BBJjFY_6*37y3u踶6ya/? )Xb\lT$%rÈqtrÎ#/ԝ->&=2aH#hTf-ya/? i,Gڒ
-
-0=b$|Y< Q;/'%g`8 :Hiȇtڎy H_aA9" ~Q^aއ|9`ݲ^@#s7j'WXbq" D$L&SҺ8`{.+Е~VU4bDo4|49F8=bs^@OX !(8HmISQ {B IZ]w.Dv^TO?!Kľo/ѧA5|v8=K_ٸߛ04نeXXॅ4#5ށL(,,
-XֽPj6lKg%f,Qƪ$b)o?shᐡ)LyC;.Ì#U|v7/˨>~mՇ3`G:޽A;ҊD
-"+ȹX$,2ak8h(ʌB<jO129 ~Qܣe!,a[= W=$'7ү#P$EIID_m6d0)\."ߝ63E
-o#aT s#@1dPE[!$ E4dN )yy>Oʕx.!5<MqD`PnY5sNE_Ƒ 2p!,۰,0٦ #%!U*P[>bY%:v;жv rD2? ?]ʗ>TwAɂFpXT~PnJdw,pЉlA&39^3`6;i3:),1.iݲa܆*dpg'?KOLR`ڠ#I~O ?$JeD J A]CzB>\ W ! 8MF=wtXFH0ćX- ԮHPº4!d QLFH
-UxA9W*yT#*0,6ԯan|G`y +^tmJy1.oXX/x }mlH}HC Ēpei{B.Qԑ}v|F`Dyf঻/~o\⭻x|mOY B;X7,W92~eE#Ξ$Џ-V1HΜFxCi#bᚹo%52M
- c T;hzph惎[Hp]"r;\ꀅI:b`I! 5̂,O %X]v"[P b06 z:q
-C=mX@M+n%܅Uu.I;/|,
-v8N_7(aMaC4Pov&MAsE9Isl*l `=bqYH,Q;/v
-̛ Ran$RfJFKn+?jU;lQ@U2/JLFd#ug8-+YA ꖐ{UD ,]wyE22LomaSuj@8 MΎBеUL({q|c>Zy.~zkms1F.]xAK"/ #/Lـf,E{as8s)e]
-%|照ㅻTw^+/y
-^gƕR}dKoc*:+ Y"Se 5bB a:xAp]+B0U\u]1
-^Fԉ}JxL>lyAKrŧ2^Hݼ-C:'K[>,"E0V^o/4f 8j.o#I /'7[P(ɻ,`aA)6ÌZS.煆 T<4p|Rtx~3U]L3"dsdeP'jS*!YO
-9]-2_rr &efG*<*
-Z^GJUU9*aѹ7 Zu׿G!/A!~bHg[e:]G!TYi||. (2
-k2e/ㅲhDCWĵ-\AP`DJHп.K}7|QoI [}$,и' N vP
-~SpG(:1CT5+qyar1w++׼ vDAk]l/%‹oPl5=^]'=;]]y!>Cgq4͇rWY]*^(Ĩs _X|>ޯ3s+N$o:|HHZ ~&j
-* P@P'EJh?R Aq זn?x!a4$tc H,^VwBN"C
-
-r^g/م$R^({<cwd
-S֗27^`8ҡ{B"u(^`g|4~4o?Gуlg2Ũϴ7q&ox**{OwBJmXumԗ`^]׸)ymGD%wɿ eIe2"ʘIPxˆ. ߱~h/kKxõ CnJF&>,<H*+g5R/3j^zż`_$BVI{9Guc!:^ c*!2I._( (9gu {޿ YdH_h
-P1[y f)Ϯ݇ak%L8^ jWN c&X^m/K:kF> G>C@7
-Xz31AGjmFV-{F8JT~ x S,{332t*dK.}>xyiڪN "rq3/Z$j{9GvSmN}u2ؙIg;bUk9l H{i <0 X) 3CquTiF
-\Rmׇ/49{C 7 /5,Jaa~ *(5I@p(;*JdZ\.z^] 8qy ߐϮs:1.v`_S!QD
-68֥CJH=x!tƓw6z^.%Z9Z3!c-|tFo6兗J^gł<aavؕuS(vNj8>>
-qMx^ |AT4k+j0b;㡫a|[}5/3
-Vfg3WGJƢ
-OfZm} m9O?|RC~9{8`^8f<>9 e}/vRK˅w#N{CG0h{2db-A/,)02VX04<_ZёB~ ߘ 7{*kojpH> tOx /L Z`u!kk^~*Ϡ1n̒w}1Z@ o>)ѬWԣ3 L| ;
->iMCۙ\ /='e2RoZWa
-*Ǝ7B,sTn.OfyhZMgt V`"Ok"<ÉCg5̕ XS ,MՈYY@nSi s=/`B %HMki xi>rkQYo#pB6*
-pޞ$Yo5M$^Sm^(߆nJ~A)!dll t#DYkMgX!-0C9Fh b8BZ͕ɸ"pօ)KVh!2UyP7޹>Y 7<C m`tqfmHXA4oc]W.U'UԑpUT$>mz-#d[+y!C׊!lNx3`b;`K7w P\ WYbx\f.g`
-F7e @HGqIߘ7 m?Je~"y=/ e
-ςDZZ{ҡw@&㝏OZ^ %8GZje˂lD
-5'!#`̣J
-G9Ṽ$j G5sRr8=KDNܣ4unwf]rk~3ˈ{ w&ǦʏԠ4/C^HH@Uۺy4/?-}}W8 WKV3D}fYhlIԿPΩ,@Tctl2kKs~4ʭopf[E1eHJ`\LCx͆DL,':קte:E+.Ho-KyA0(ӿLfXhm)Q*#D)TjKz
-6YVh2SZپy+/ab^hNWBcw[}]8,adĞd諬==sOec;eǀhRxwA gx!4!DBWn\VjIH .h,W DRjOjy$=)E-SH1b>ՒRⱼLA)/,$N a1Y ~Ks*DUL=:@嵎+wNй b3ζ ԟ)=BFS=/Z-qRIK%3H%dE~μ#N.ڼQ2\0X^
-F{ȪDkVw T#'EW}{0-(D7JPWxu([O<Ή!ع]>8e0S(2U]kG"F͘wbaA,L<f8 _ =.kҊ:|-|t5E$.Ҝr[5B/<C<6'~&L\iŵQ߰:Qƌ> #jUFcm6ߜblQuJq<3{Ԁ`AD8Sp ;c!A8iJ,R#詟KPV-He~y[UfnsU^PԥnD8ˈ3Q lbwEu¦-Mcye&W x[˔㴩 NRYػ:bA a;iS+57 ~j^ӡ^⤓)뜍'H%kC
-UN<,ߓl.s/a!UկC=\_v-kX<1۔=ᠰ$03Ũl,Ķnm2h@^x%>SBCQ@ͫL2I-Oa!KӮ"Kd0aN-7xQw7w>`4a& ? 2RuԠQT/u{p㮵ј.AѰdU2tؓkqp'/x(z sb؀yoOܰ}fT.Hi1u⦚+Sr
-QWVDZxaϳ}+.p
-:m³i 
-dK+~HQi (DO =LXE"W/p<R2
-YèV05µp$ޙ pqs"5\Hg+mѺT.,l]>/7iU^t132? W}xA8fjyb^f}\FG:¶kT\`e0q@sJ^de\AixϺ."y }&) /XyB{!Gw\)\#Jxy y! 5H|
-@ `fs #ҍtˤ 5*!p $SdƉ:qИ*54Zἀ3T^'SP28 9ΜM6cF xY#l{4Ls6`2e]ErRg' $d.pl N[ګ ֻ`*;*ӆZ۰#GCG^y7[k 9 5mg +w-YjZfZ +eILG9Jz3,i#;WX}IBHA^X|e f5ad:,L<R|gDHLv SR|S#$}Ue rÂ&*
-CtE3.{@ߛB
-i~~>NU:J>>^៶ u"WXG^V!!EoӠDF h1<8joO4O'tH,몪|:˭t351Te%%6u, >;CN(oLͿ %4А9Y-o5rQ ~ `ߘgo:_^G?ݖʧYįm)#Ox9mZ,4/80;IM[ 9X¶{YzO<_ۛq"ōc<iQP/O󂬷q2D']'ÿ=ripYq Mqb7cF^xҒȿ ?)6y 懴cN*ʱ9[ɘ=|m-[-8vYM,C%rk~zQǿ
- ? OT]9*e٨5SmfU_dH:KlGYȲ}na9愌H|#H
-7.E8g] :+?EyU[ك #rF:4 $*a,Mmf^hLQ\f9y!0)I
-NIcL=L",0/ԉH 58r9;USœ>UU|dn17K~ D .ƖA>xTYvod[x1˱Rg{}T-' _ㅒYe$
-(S&\,[#E=<.~)yAm I8wji{`^P;/|:k]u "1$[2-v>%FO!GacsJ##&¤BRIFA^JPD,> :ljB/9?e^x7S1?n/l8D1 U"<x1˅oa} ; T/)uGl#u  1}g3LfrB{q7'I/R ür0_6‡1?G5!=n,
-L8g*y j {e5aoWug0s ? ϿHɂ:3qҩaJQ"΅phyįㅫy ǵ=<)/$46{F,p7{{0j̪y᡼~
-vi}`)J
- Y>̺¯t$U^9| uO:Ϡs"i-MZ}zL@Cq P7> CS+^x+ZgRb!nZ׾w<^~ND?xX^<6 !'ꝵ- Ѻ60AKXP<6ꀄk'p4? < !/R<g牛?q[o/F癓:ԗ0.a~^
-I)^B!w
-VT`'[OkQ^8M>Q<4t ņUOqm? a: nqEkY~ƦLBE鱰n/\\bw
-^0$"-/ ~^+y!;/P[''yAL
-{C{e}mxSD֦ۼ՝جdf煝~i4GgKS/"(bַЖ$pL p@m8+\D}uP-b
-Ӗ3,/GyDE9v^~/ʨ*"҉߀^y*W%}}#^ vdxuI {
-Z0}
-n兲K&#b`%5wAD,$hnW X)54-Hg^e 6Ċ,h',p4mH dߍXAQCXxhĮ/>
-!fS WU7}/Oѿ
-u 9BX~/L4h6Ph_ @PK``^֚g,4 嚁b$皘 XIt$7f7^8n/kMm͉LsZ>Ph׸8踏Бp˯&>ٮ؋J~j5>UHF ,(8s5x4Xe`4N= l7G_]H&`ɖe09|V|H5/7&"%7 O>_6z [""|ozX,[5KEe=ֿ# YD}ܒ_m߾^IR`g^
-HցljY@ eriQHmJdE Åsx}d`0r^(k$iDu^eB\>d JS'xMq0"/w
-2$>MP9HY/h_ a^&2Ow]2H1,
-R )\q1 Fٰ72aDEb(*_3{v=mezjj7PBuV\Xjpr47ƛҀ .jK,JIS3Ʌ 98_gw1XZ͒3dAD?GX^K{2.ą*R5PQm>ucׁ@CI0+q0-jc
-H[EB:T#T~M`o(m~T7
-\j\ ֙T 4P(vWvJZݔ5cF3[B&L}#cXp}PQZNU񼗃2JoO% T;JKe|."_lBIgYS#z: c
- r02ƛ5V"ڎG%Se@Ú6*gVtRiͅF-t'^
-.;!evdyvZy30̑MLG/u.'BBqUGх/fe6ebd5|lW+0AR7F!:{My27paQמ7]EL)a]9\bӍab 6j-Zϫ<GHI>8UE7SO \TՐc\$YTFϫ̅̅GPB5\ Ŷ)<wrwlZ)UB(UP&? 1t7JBE-o;ОW y)s1.mʴHȚĴt P<#<e5j!s! unj5&%2wzrV 93ˈkRTq^-{YEs p.P]Α~7VU5rs`r 9ؾ=n[B?qT#T}'rahS#MHGt{(d-uGO
-0Mǝ< >wX<a|KJڲS ӓ=L;w,.F?۟bŅ3~._Q\8^-F̅pa{󨩍d-d.< eT˩Zڬ̅'pSXB-s!k![BB̅l Y 2n-}
-endobj
-5752 0 obj <<
-/Length 105
-/Filter /FlateDecode
->>
-stream
-x@
-endobj
-5747 0 obj <<
-/D [5745 0 R /XYZ 85.039 781.388 null]
+6106 0 obj <<
+/D [6104 0 R /XYZ 85.039 781.388 null]
>> endobj
-5748 0 obj <<
-/D [5745 0 R /XYZ 85.039 590.299 null]
+1882 0 obj <<
+/D [6104 0 R /XYZ 85.039 761.463 null]
>> endobj
-5749 0 obj <<
-/D [5745 0 R /XYZ 85.039 590.299 null]
+6107 0 obj <<
+/D [6104 0 R /XYZ 85.039 741.134 null]
>> endobj
-5750 0 obj <<
-/D [5745 0 R /XYZ 262.428 239.639 null]
+1886 0 obj <<
+/D [6104 0 R /XYZ 85.039 644.777 null]
>> endobj
-5744 0 obj <<
-/Font << /F64 3112 0 R /F75 5171 0 R /F56 2890 0 R /F15 2876 0 R >>
-/XObject << /Im16 5319 0 R >>
-/ProcSet [ /PDF /Text /ImageC /ImageI ]
+6108 0 obj <<
+/D [6104 0 R /XYZ 85.039 610.031 null]
>> endobj
-5755 0 obj <<
-/Length 468
-/Filter /FlateDecode
->>
-stream
-xڥTn0+xs829S:)͡H@ ;]E
-LqPe*,f7ٗmT|(10hvx}GGxt'izYOlJ l;U
-7/Yeaq6F}a'Kw<`mOxsr^H~5Scendstream
-endobj
-5754 0 obj <<
-/Type /Page
-/Contents 5755 0 R
-/Resources 5753 0 R
-/MediaBox [0 0 595.276 841.89]
-/Parent 5751 0 R
+1890 0 obj <<
+/D [6104 0 R /XYZ 85.039 513.674 null]
>> endobj
-5330 0 obj <<
-/Type /XObject
-/Subtype /Image
-/Width 780
-/Height 299
-/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5760 0 R]
-/Length 23606
-/Filter /FlateDecode
->>
-stream
-x]b( c0'_4It;O:mzL w11`A9'k$_YG{r'ǻ<UeXh޶3<caWaa>D>g /p` ^8p`^8p ^8p`  yV0Y_]^1k,cQ*"ML[V)gו˷ԗxҮ^!0:Wx.Bյc}'RD '+OC;uIyglta.^4wpŸB뼐Xg*q`iinS|{.NLOBY@ؕ"B d=-Xs‡MIҝ׬^yM@tŰKX7)4tltyX nl{h[>5A e5Y2]F<
-O9,4n+U./_E/FuDcq;Ag"=u)woh6NQFt~ xŹ ÉHgk7 Լ>d?ٰ}m RkRixWvKͺN0mXC"˃rV^@'4S EM_BOjџ=m’Ss jٌ$sBzm
-T'f}%3| /IEgTۣ(`2۠: Xa,\ fn7
- kU˥//XF̞˷qPiƍ>XhXWm;&^%*$/ ^0`”?/\9l-te^b^;oW d1蝗}, t߶^0DOB\ & 7Y# eԚ2Q ]!dW1=g4g,X<>>r qE[J
-
-j[mh,C
-c*s[sG5xYdf% F.~J9կp>^ 
-ħ£twW^g6;z{W_mo`aEkVJXb-ZJupOoUI.]s%beU.V<:P:._> ޫTfe";yN %=cŸ(pYf߰0vʵn(
-tPt6v@ϛXgI0deҤ:=P0fÂE,@Ah sXf9n\Vփoބ<,x~@ ޅ).p 7Pg,D-`E#N> xrvWT5`>l![
-vι> #U"9x!߰qXH\ IDYL5A;P6)Xp9e{ ;Ƞ'5%l« ߟvi< T !(AG:cAv,hv߰SM+zt†9u$ RL oB|iIXX0Iq
-HO%p_ߎHЭEo^BDXx(/㓛v<C$hei)֋l8h~<^l?'>EK4` 1lJҖ5:Sг8$RMvy¢<ן%Nj =Vk%9vu[g>p>hy,A^Xkc.d fWa E[&iR%3A%Mp.$sk؀$ EC3eL*,|T&j͇p*!QJ7d,$Q.zlā
-c\+᪨K10V^f08Yt p9F@';(N@gB Ji:i^M'/=~ fo9ɼWTӵ+EXjP]1dhVV 6,KlO ZW_cX ު\%> qBhYoY%t+Bkxg!l
-gٱ QX i4";=4CCc?V~'``oAd)C, ?wEX`!u6Ao!ҕ,,Q(Y6It`᳼pJ;V|Q> _N>%o}VopM幜#p6?ztLe
-z8G"`Yn1-`;;^;/8VUa6X$`A9<)偅Bu붊$#F+(=]g145 (2<1 ik$`aҸkWEڷusCap$)w$Y"#&5LT} p~cg¨ mTq eD̀gYSk6Le.Yquط?nEk~`s1RGcK)և,"cc40ewr^XhL*0n PcxztpJ;7Wp8lNM lQ^Ya 2Opںs )0@X%X%)@HK<쳧M49W):(iP~W٠0v8
-ݱ
-u] Ȩԝc%^xaBz1(/5kKȬe_ԟ\Kq\(F}KIdrjil*rBN{Ŗǰ"/̎~]ϗO8N<_ 2<*M`g^6a|'֥,>%?%b
-VSLXx(/'; 9a苃5}'3NjL~rC&..4N'a6B f2:Q]Qt0</.>ÿ < &q|S5TY&]F'xEUd S4h
-?̑蕚`N}y048cq6c=YF~zv]w\\BIB,HtՀ됑52! JPX4A+5`}f_R) f?;8/hy!\08G`W]bS`_dy8֨.@NBh#.gU,ǂXx$%&r ԏƘ⅀l :=;HaskL40a XB4*BKt$6&f,|{b?
-묾
-ߟ.qm`g=[iycoeKy^಴[2x629\y VID^\PKݘ-nAٯZ'jToybB&;ˮJ+=@ny*om+K5b퇥  <P/i7L[M+6ح|Vʩ+|۪ /^I/ㅔeW2Go?"I H%G5+C,h/ج,
-k<\ft]W4k/FQmCs9^0l<c!dBMߌu֔0zH\:F*ҩʨS,^:wKg. /xbxa:dJh x(VVkkSe|4QLJI0T
-0
-۶CUr8baܱ 5WIH*yS!h ԕ_^ S +,ح/;DeX5v#yᄅ/VQzye%Vl۵9,/;/e@J窪  VDD*lX\~Vr&SGS2xdxI]N* <A^{٤VH@^p[$9b*GtK-A3IK,]hYy XXWbA^
-5j*K*֊Of&!,6ݚ?"ǖx~׽!5&^q'5EHdÿ SY":.uVr6Umm~ּ$RZR͆L_! 텠 }GyX涝/ljq-N@뵚AwyxX^(ĉf)P΢ :,vh>CW»MT\R?^ֺ(2O| ^x8RGޢ"Ky~+^@$ ,|,u mIW#~|89M܆MGzE 7qd)[z`ރuO?yt58cx'Jb_HJR<Įք;΃J[<8BqveNz™!/bz{xC6Z-ZrI х1ܰ{ۇw"`h`ra=Ag$OVA.̱Tέ zY+M] #Yɉ'd}s</xb~6/ L/Ӽ,.xez[A%su/Y9 d.??aWБf 8(ujU1i"߉r/7ý0`jL[ly'ET^]&.dyA0M`Y^F-pN{^g-셷sD&yhIPW$zmжqX b~h\ۡ{yA 3_~Ͳ8EQQqQ=͞ R:Yl'y=~
- @,tLQ{f<gj.CHP+r"aΤhcܔEI#WP}$U_nY賸RoT6ypM[7(^59^BEpdI1J+M1?\[ϗDa<0Ao~w<o!PBuC#XG5FaPB^kظi%?=?ynt}Y^BOBncęSpvHh/euN_ T RE9pS3KTRZyav} עl)M^h sbp^5 xL6I-rEC5y0WR]a~^XM ^ -@s.
-D$̷ QXfq}M)z^hOSj}(3N{+j.4:@Ba= dG\*$dύaDvؽf{%)M煗B$>w#I2KOA
-m `W,[. _OϘ_x1e߯rmx^(cO/Ju.|~B~j03*ِKaq
-e)
-V鈲0)'^ DzéYoR IҞ^ɮ#yܴqgxᥦ-)1/\ Ka@AÎv}w(XU$n1M? ~M_F[)^07,/Ֆ +ۀM<a] -b!_, UG~/ y(9mx\EX{ύې(}3b1} ľzob>baXT>(v,m7T$mtyA4%egБt~9t~r\Zܸ>'1ĽJ2JE̓o崨B&jG;p6\q 81yM|O<Y
-/Psky*hCFBCcp |m/ȳݱQl䅳 ^ M*tbVsD*~8~㬱)jR
-E 5~bM[+r6|䠄‡yW0S=DUZX6pzg;ftKrQTj%Y45b-[0_)SZ߿‰OB+tjԒ% PN)J;`YTH /C"3beind6d8mɲPQn5գu'b@yJ~ Al ,#|
- g0] cZm[2_4`i+,DgNZկ, 7{X^8ɯ1TVuJ8 OO~/WyeignːǷڏoIp+u%vROGxEcDM$H S]xnbAwng!q)<.ЅƞJtٰ :eE^0t'/%>6|?/A,t!b̯R,bp?drkE_ 
-3J2!ISϚ_pzŅ
->6_ &XX1(gǂQhMr"dxvl()^8H eKtov^и/\ԲW\c;~BO%jl V"NsBR/Z3Ήzק[& -g؂ hM+M4&M]\HYFBTK;*=St|)T^j NX[
-d.MkV Ow'ЏJ
-DCt覝aJTBеҽbz\PfUyzU!0b+,,8'-:W/D1
-y Y^a>1\H2vCxX?R~W``T$'SKپFewƂq(a0V6X8vb| /`ްO;GX[yR_k/<ջ2eR85K˲Th ƉB E-m #3~0Z9^؃9G<о zx[~ȅn} Vd%@cmDsŘ\d7 :9cyB?[f/JY,dUXqmǂ̙P"Or!D_!'΄wGD
-q ޤ鍼aʷFG-:]p'/h6"S_Zԩvo׬'yA'uK62h+t}@芈xx?RYs+5V^
-uaHaK|"x012a! c0:[<ZsVj$s5'p\nu\elV̟
-H<nnAH*R &?yA
-+x'%TGYe- O爾Л$d*'urrz% ,{!ueg<P#pv!ì;H)
-)ˆj ^(
-G<1<xjOJl( kcq;xa?r[&
- "F-."^6;![Bn\ZyH"#_r"CHlE9s!&?3Tʲ,d7 Ra$i(Yz +5O iyŽi4q15>8i= 7)3EkƲ/O='\ƿ[bJG#;Qi{,}my{lt 4Ljvh7@gO ^uXo½HæM~]gO j~ V,`o<`aB)93xU&tBTό#K,9~O^ㅧ?^OQ2͙H8u e-%C>&d$ z|{yv5 zF h~V6E*-0|ύGJk?{Ţb Y[$^eL3qfv_x:/̡M`kSeܕtQEwԁ胀 >* NW#I~'6 8t :U1QVNmR}
-܃2PD|6v]V%nچY`Qun? 82\lF~mSoVBй7ͫjNKx3e۸3i]T*u(b%",m[M3 )]bGχ=xJM4ą$z^h֕7E =.wIꂳ\:RQV^*^DF^تtyA ,,l{`je96V]1z煸 bNj&Ukډ*ʋERrr7}wy7KΣ ,2ht$Nsvх*ebH\Bc+~Nj Ƶ\cP D7Bxb 䛱``Zn?[rYQ+{0EeS)&ꟴ|ȫ݄fd;} ^x *.`) 6L6ȺӦL|Ib*l QX rI{. Tb&
-%H];
-Ms5"c +B? [e[0])Xp1lSXGeKuOᡗoq~m޾a”n%{kx_^{4+E0Xf ҼL|*rJƋO#[
-ɟQA/mx) 3`
-ѷŠPٲ, &S%srd3d#fRISf1eOqM{(]It* #H\]8f:
-%[E
-WR@8*p7g5,w+tK儏C%r찴y .(M
-#EM ^F@9t 䞁A '$]1D
-ȷA /|#^1_1U8 ~,dkYj`a~t4MDx{gBDK7Q T&nA Ο$N)VV͠S#xnnOmo\^`jvN
-?eRGBE.&BzREk%Lp|8a/,^~N;8OL
-x~g,|/d B)
-0ߔ-.:,] VGVBF 5X"^Ȥ + NK%(4X`?/XX9 ՕN1%үy0ßCپa.
-m痍k{aKxE,gtsC:UɄA~Ɇ䅵|I5H<z&.51_7T6Ħq~o BucL?uq$v qBh~an~Az|c,%{~aA1_c[/4W^+/ULGZ^KKswu<9xSZ^KNX C! 5|[+Om׌xAip,p·^Qd>Zv>r>x wve23AXK 咘ޑVv\=>,p ߙ8dqc+vE+OuB9:sqZp ߙZxtIerd7<zqb2k`у{//JdպS*N,prKU+VJI^H* .j`
-
-WSֻ :=+DQfgs$d`ۺ"O'7M@%z0EτB.30,@5Ѓm2}o.}0*&$p
-Ʉ ^gjꕛ9
-
-0V7=w֖W /Oyiac
-ZCp L}< ow-O:\.ZyUuLK޲.k&M\1Iް60a4P;"#/`$U\Ǖ[!<i1W&d}r_W3;M&Q.~rxMqaHtf
-eE5tt j OzF n&;>@ u1;vsVЅe\Bmï#-DY"l+).@"ʹq2Q ,B>\3-/0&eʺFQ^AAalq /Ņ_8Zl>k!WB9 m_IE.\Ȱ
-pVv¤.X/_qp>zJBč1Sq;</
-v s8-h63?_q\/wΙ0@E\K'.
-<;OdBz-tҔߠ>w.}꛹н=PcLd %$_RpK
- oG:ITS=i#jj{n11\4~!q5P[c(]q\Y ią!yvTݵZH\H\xM.Ta̵o04njvn S5llmuP}B
-Ƭf=JikL2^B͜I:j%\>ԌZYU
-EB#ZH\H\xU.X"3ɱHc0"~ `:261'<-N7ocB+B@f BBCbeh wR //Q608b
-\mجڋA4^nWji\/CKyx# Zi:`rmΈ޶.p8dAkKݘy47SmR ^TG7><d
-h.C ksέ~~>R@JW ~#GzQqmoG<sЫ˪=X;?0{fmy6Ͽs -^
-.d~,G\Hn\HZx_ąC 7p8?h )^8@ -q!q!i] I I I I )^HZH\H\HZH\HZHZH\HZHZH\HBBBBBBBBkh9wOx97ӂmj?7v 3꿙Rݠ}#-XR}U uF{endstream
-endobj
-5760 0 obj <<
-/Length 107
-/Filter /FlateDecode
->>
-stream
-x`
-endobj
-5756 0 obj <<
-/D [5754 0 R /XYZ 85.039 781.388 null]
+6109 0 obj <<
+/D [6104 0 R /XYZ 85.039 478.265 null]
>> endobj
-5757 0 obj <<
-/D [5754 0 R /XYZ 85.039 590.299 null]
+1894 0 obj <<
+/D [6104 0 R /XYZ 85.039 382.572 null]
>> endobj
-5758 0 obj <<
-/D [5754 0 R /XYZ 85.039 590.299 null]
+6110 0 obj <<
+/D [6104 0 R /XYZ 85.039 333.878 null]
>> endobj
-5759 0 obj <<
-/D [5754 0 R /XYZ 261.943 239.639 null]
+1898 0 obj <<
+/D [6104 0 R /XYZ 85.039 198.995 null]
>> endobj
-5753 0 obj <<
-/Font << /F64 3112 0 R /F75 5171 0 R /F56 2890 0 R /F15 2876 0 R >>
-/XObject << /Im17 5330 0 R >>
-/ProcSet [ /PDF /Text /ImageC /ImageI ]
+6111 0 obj <<
+/D [6104 0 R /XYZ 85.039 162.128 null]
>> endobj
-5763 0 obj <<
-/Length 470
+6103 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F62 4052 0 R /F38 3001 0 R /F77 4855 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6114 0 obj <<
+/Length 347
/Filter /FlateDecode
>>
stream
-xڥTKs0WhjzpKCSBC!ge ǖV>i?Ud0T)Z]Q캨;IքԏpV_+MD%&t*,o|2'ӫl9YnݟUn&ӽ{bZzv<eZOQ0@)?27)MᘀmqZ9fl^w-Kp!FH`N1$n8'0-Mc8`>jO^* m]"$ٰYOm`"o Tgߣz{FBHf0F>l]»S e<>F7ۊ?*_2`j5^QHϋMeCEE+%.s
-r
+xڥ1o0w
+ΐ/g'RJS0b@
+Bh*Reާt4y9rN7B+=WG| O;gJൗaycXa1UV(&"8˜LոGa{eg$/QHkUu:zzʗk~LG <sYk)UiFVQqĜ'or)I&jL$g5Xm.xd8.-gNSV֧bZ&Seu?&߯vU;.P͋Á=?A^"Y0<PdO55C6~7$KҐ y,9✟endstream
endobj
-5762 0 obj <<
+6113 0 obj <<
/Type /Page
-/Contents 5763 0 R
-/Resources 5761 0 R
+/Contents 6114 0 R
+/Resources 6112 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5751 0 R
->> endobj
-5331 0 obj <<
-/Type /XObject
-/Subtype /Image
-/Width 780
-/Height 425
-/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5768 0 R]
-/Length 23871
-/Filter /FlateDecode
->>
-stream
-x]b(EAQA|?;&}>4mӬ$Mp Ì{da+momoMb{6`o{ۉao{{N JBk~ 7lkWR}mY{VT -67ko߫^Q}E|{ {涌 ˎ}{;d wş {ŐB}اi {ƛXH,}h4cviIQB)1®>B`BmX(l ;/PlHTa {7psnµm {Vb8S߿[,zaoچxXPQTvqw~s)9J@ޮlݟ_D b)|\BwYR˗|u>U[.n3p4/$ XkC^Ļ
- OKiy)mXȗE&C4XP
-wx??? am8}YE~} cc4ǐ ;/2/煍/ۼX(>r ;/z;˼GBa ;/y/0za0<<Nɴ녝>xza/HItV}=x?m }WJx U-¦eՆ(d6)vװPmNb=xt.t{qǷd{eά}9rslBJsfXM H"G~B JO=ejc!1J k֨4؊oӜ3?XBW/~.#.˳C]w͸$|Uy',` ,a ?%. uێPH_(VS}ؤwͰTj:v zUN&庤(6>Z
-Ӱ^׭GRV/oVի][.̓`#uaX9}4E:{>#.PY/|(DE| څ8z8DmW&=yF
- azc_~#N2so֛VA]52߳gHL>tYOWEۋ c4QF ]͢ʍ6,lḭu~ޱe^ p:0*{ >JBօOj,H]T:&ͧU 2,)<vG]ӓo'WWK|s5w$ZǦ$&yQ}c~F
-X{=c2=oRdU5QNz\79C8pU QcgW,23·*yXoă–+'8
-FkPc>Y9.j8`ZZN̍k[jDw+PaUPva^R;vdY%lUjK߯tQsCBhpR u]._zX0 d՝y9#;\s?ƥN+ Nl5NGR:ݭ;+0T g'`O"Vn> q^t Jcaa_HNүn
-5:i!9zOrΈ~*-.Ҫ xJ\/BׯL[+
-Nս@K.!Gj#"spꨳ8 [`k3e`)ѵ1M:vn2*YSeTq{,$a6Rm.q}*3~RzHj#RZz*dS41W`PR"x&ayKTh8.TJ04jIZ|
-uծXP*Ř<JL"8Hk9Pz͒`Tx" @/mXA](m1f=rHX wf,5G~+jWzTICOJ8'<XHee+<6=@=V>q>Z{mV6աXN.jm' :"/
-X,͔.Se~I[
-{A [̜N6`w0\-Jvee]R`v
-Xȃ!6w 28J#yj
-j}rG,T5ІiG4B&w~8A&f
-9b!Q1
-[2't=q.;baQ3 M_&ވ_
-;1 |yx"X@ @
-m$%<|<,\4u7)ui.j>_^HXykQ hR@Fy#PI#jt6@,$RQK+UnB, nuba_p=jB8C.`x! 0H 8a9C?Je *,^snڡ8a싅}µH r~:Vb@X
-_ފ0v*ʗrXzD)b@@w#,NV;{l'ߵORit10'=;mbf,e
->M5kЎ;-&)]/Hwv_ ;vp[7]/<./}6^1طdβP+ٞl'5zvo =QN2q73A9ν8MüQURb`W9Iם-/>^녽}/|D,]*&NmfC찥ڒ F%r͞Q)&GM豵l |İc zaofcj]
-_E[:À(QJSՊ5Av,:Ў1~(Z,
-#AoN1f8 ~>#8'u`&n] $1bפ`ѹڌ!*ǥrZ-GpQǂO&W*1-/5^B=?HI bKH0W^Q,`Ҽԑn[B:r\ g13 Xv!o {#?R
-=w2J*#rGNUk֩8c8V XX{, Ѧ^"QKMyI\z
-]4eX?3St)\(? 錆t?VnԀ[Vqp^HohOgW2 0Ώı^°L]v[Bm4%.g& 7.l.M,F:q7֢ſ F 0;`g@"D5cMm> oꅌ*n=%sZz5{G{ 3*LdD fYm8m`LÆ:l͸Zܺ3穝8?i nMpÞ_Z߰ vS. ذؙLQ@ww! \MS_Ttazz*:ލߝ
-ONMp oҟzaue /BItkӹe,6 cd117R#X~ cK\KYW.>:^H0,imv߲>y58Cs*^Ի1u,nm
-N 'UMG)<旱@0IG륂o GhKWש^ד9T=vI_XeyZ{m$.煒kT[iw&v(ʥF^X\,[蜶{zWȌɹ6/0)OX@;~~8sڛXMȪ8^|)KOhY7⣛.KS F3ˤvT];wA/',^d
-|@ vx>Ly(n7)>v0QrLז,^u=~`O :F
-9H.R"fL2*(#kg"qyz!S +|blg7 |`Ssv缞/e:g~u0
-bu*΅\sB13b,UykObtf{PeX 43t);)R5aa}'{РfO]PoQْPuJDz4/ [:yA,jK ~uM
-{/(.\UWsj^{f|}蒈Ž0GD  xZQ|'/v 8mf}(U0#EmN'S:z8kү`˼
- z@R.R;c<ro\ ȡouJ"𢐤2CTOYg!4(q_\v[JYx5ߤg`%GU17ða<,0hX`GUUMUM~ &ʲ,$Vt$c&
-y&ջ?_/HVˠFJYRKix:c 2ɷhR۝\7ҹ,ps:^`"81Jw#ZSVpUg)yקzo a;l?vk(yK]x,/`2^+Фr:&2.Us99mkxAP>V29<K$d_&f5ЅKBPћVHad<&,/dIJWzy9u;5֮jU?)WN.#`!s_Y4\x\|p,J me|DRL\2/#Sy,DΕkH+/@V!uҚ"\(U_țw#^(w⓿țƾͷ8XPF}go[؜<
-ka9' 7+ㅒf
-/O]W3@0Z'IW\Lo[˿W#:+O>O &suoY e. ZIR0
-==.s$s|ҸcoO4cXvU<Rz \N^ =9;Idu<._OuؤfT?
-.џ6Uo_zI Frsd4$Qct-QOY~$m÷ix§ֺjQX0P:4H[ jUкXy)5׍c s xaޞMlebw<SX7x^m?JC D"\ŏ H @
-CJ`<nV1FhutU JFWeG*ZҪ帮rK5*WA:6eQRc#"ؘT'Uڑgsz}<BPטg5/Kּʹ> BfCB(5äU&|ĂIh3jՙJaﱑUO
-:p,M
->\W;9-Ϻr e^O9Uox!0lR@FXi,92^ae3CߑXcIU^‹l].:l~I"0E^,|,˹3eyo﷌|bTB iæl"Ӳ1JEoֆCXqB?.Hir(ݻ20NR'cUkK:]
-
->_^@iQ/FƾI$JIeUViGޝq
-f[!GxXؾJ>@oy|ljY;ADži/hzVY W•[TE#7/{}C  njoi ȑSJQJRBϥҀ`{蔕
-=
-:W5ǚTPsnn
-hJGE"Tp%*:ee*Z l7 iwd>(hsټf5jq}GtDka}m\l޿)b60:[TLsNUE%o]Dd. HDrg{8JGTF޵jвe!Ke Bq` GH;96~yL,#õB#yWaZA,f]#Lض3` Lk@g,%HC{QQ;o#/l<$[IF
-?G?a&1.R1֔I&4IU *R?Y^Hз<U<-i3||8 w~A,U"9F^`b1:cU-e¸6 b)q9
-U5V6Kx;V\HiDY, Ckt,T "VF:"mȔE{y֨H/,8(Zw T bn59֩'"kL:~ zEG ԷjpY4+De5ẑF|qÿSW5xk";Cav^yAKC! R-r5LrTKe"HƩX]=C[` :d|U$j=;W[eaT:W'qTZ碸lAGTnXx^y!3FE8f-]+/Xĺ ϏTKc_cp^@,I3  Ny4&[
-c}UͲmۺ?BWQY Jϔfh`Y$I',jfj%UQ0:n8]oONHk.ڧR)<v>I{0 T%>(&SpB^A"; wOOǩz <  2-ibb9;(² G*yqⓔ/m!,dJ(F2BA=ux
-M'$Xx mR!f'ov䔀t
-9z?( ;/?RMj L<A˧y;X<}H2NU1tuMd H~13pœJ"x+g<  6sybP{ NVEŸ \uKhuv10+U"ʎrǵV)%!6_s" r&l$٤$)3MTw]/!?R+7(դ, "ͳ.Nƌ\4Fk}f "b,N+4&[Ҹc Z&ND.Ruj.Y,4 Z:Մi-u
-sRF|
-$iD1:V <it ;/)<_Ŧ6"Te/Vk2
-yd,pz!|䥍4AtYↀ9(gP fLQ"jX.FM ^#~$itC`T%l兑ki@ϒٖ3>vxWҨ6[Kw/BqZ)_ĐBm1U-n*1m
-GhxK>BU~]/ ?R6鞯,tCHm[S*LxIcLQ7ez䑱½>\xC+[ƫ]=vyH9H@FŮ~_f g,\xoW_θ4N[5'\~}Q;fne;/=/AX wG2G Fyxd,p~ɅpB?
-bjv^%?|r_}y煝BY{)\>4v^g?RCca{CaAXyHg?c#w^yWHi5;/pTKv];zargfip~$rbwεkynyA|-8%v^yH[ GJ,={Oɮw^x`?ξT/#£"Ϯѽ_ys ;/}?ٓ p>Ï/dXyNy!dT~F. _u %G)ǩ~$wy~ &;ϕxd,pzg| wG:~jcy.y~;/ܣIKL_w^y?ҙkO˟Iяtarv>мE9r煝EgKj  wG ,o;PF W"<𧇷6䯶~ͳ/X-,pPKvَ8CC yY
-bQ%w:0`1[Oa(ǝC/. ;/|͏4 H鲬[fe]IQ&rPyRr%]]feM[S^&Z.uMZVIYZZذnI,e~C _#\mLK]|VmC֧mW Чʛ?ΏUwl,iƂ^&1k[v^C?RM, Xm w 8\L/N򏃅_`ӟЏ$aӋF ;/|/əXxFHXd3/j.ł5//$wuͲZ, p8]Df.#]/`!yF / 0Mcr%v^/dqJKx*~2"5<ԼlxN'>eWba(1tNژ^Qm\>J_G)zz g| ;/܈{O3"Mc<1
-wx,$8T-yda^LMk4A,>F"*y,眳+xa@_f: /ꄅ
-_9Uc!4txyXpF(<=le?X܀=f.LQKHb񂅟+|ޔ{z>r]5T)WP/-zvV8WEYlt4zvbGP/X&(5hdϯB#:U%qmр7s^q?1
-|qxaN<]#Ruצ)ezˏʧʍE"p-p{?1 `=PGZ|~O8?ۣ*-YBbcah kUcGy1_4ƱߙwⅳPO|u5-I|N AuFzt^KT[PHKŠv{6ҋgru;J-'7%y^îv^8FfUH^眏|/^t9 WI.uN ?^H#yXx5\;RT?UiԠK_7oS,΃aXPۍjUH*뀅J\G²uXO^av^?'U XHU[/#a>y! GHJ/R(f^)~j#]Ony7T˲M/`6ڤba*©Ixz
-Q'x Wa^yv!.yGB^@>.V]`^y
-İK/X_H82Џ7 w O y/$3^>Kf}gcH {<%6XXX_^x<?/=N,xq9J3w^y`ˬ ;/O>յU_;慧ZUJRNK#z6W9F W;k^x]c!S1cA&vhߪwg23ҾBq%l].p߼椅X_.]
-2v@5,ʘ;GGOQt }ęvYvss1&k /$T-sɵDzDVrVN2j]H BNp ̏@X#OF̢aLАdq4BY: W/rub,<`a-g֝# M/`.]&># 6w9HHC'_oER,ki8٤5U(j]zpM/}xI)Ů|hIʨIV*E{8$V,uzM9
-^ES B~m|v;p4XTৢZ<8gi@YVp&Ej5/ZUҷm_MzSϏ-`a;#z6a}^02m+❎IpPTsՔƕSxbn .b~';/ܭ)m /v5jA4p+{z弁]:Z"ަR^(YrOMWj_):f14 ;/ܥ^%e;> 6& b!2+oƔVr
-\js z!$4F酉gvFjw pkh`:Rq_C^/,
-`!, {1 ^0H>yFGZ3n[gRTU cS/rbaP-[ *)´WmQ$:ʮǸ+o/5Ǡ4_@^
-,p~$b@.춍7>U/of^R*β=p9 Sr ^H.0}txah9^m6h2m1!5Oڪ ;/ܩ4×Ʃ&y4.xq慟k;/7/gaZ$B,/0v^W?ABY8-zya煻#\,\ RQ2+5hya_#.̰ҴLZ {Aʝv^p~K&,{k/;/~$ ЫBr 1 n ;//b^` Fya#)eוl3ya_#9 BY2Y뢨/;/;~ss
-][0Yx|n!ɠxx~1ԗtya{ [sC
-aDoy=ͥiwӭ1nj1T<E3>U/t0v\@.<Θ/\
-]w[}ow39i(§r
-΂`;.2*qΥkBuaoyMyz/]lYشlYOD0owNq~YuQg{בNɢmzUtis] х 6y0D=DsPG Li[:J<RʺGc{\{/4Mŝ ? Y`irF<97$^{!+il^ycOx gڧ6RRUF]EcF\îˁHwHߎ 9Dyh)l ^Ho>9paSppV*#<߽Ml 2gy6&]U#9[fn/0M=u搼`*%7F. }:<Z)n x|BL^.l^qB
-H1B
-*ERinDa\t_:?:%K*H޷L6_8l\S\k NMR˿Eӂ(^-b鳹`|ʐ~<LB:ڦVTƅ8 UWFmOc&g= ?vW3UϰGؗ1,[ԑp ^OWsCuBrb𒧟y!$''-iݹ0{#UjK1x ?B"̥ &<YEKd !2"j]& bTeZ˙t(\7*=OYJLcX+/(krVH(Xb%\xr* b֝29z4*G*:NM!3O˴~\Mb鳹po}{.t LѺ8 lRJH~ֵ:p!vyzJ.:/ܓ RzDž(/T`H^hl9UreK6xHwB^{O7 p%|v΅H::Ȳ!N SCBJPy\x.dp9κiكSI]ZTBY(Sm̦~ҬFiB:ddz VSЉs@.d ZeB,^)qkEIEdM\OZ#=\$tښt6h'Rg@Etp m\Nir0˅idfM4)gAU)姘1n5]炳7 |"Xw) t\nrڜ2!5* 6P[ )Ӷn]hz[|pu\5c,B~s.X;_zG%!lnTkS骣\pO4uy4cb e\sJer! { ) rV)6okJ8\`
-Ihrhu&!}l>y^Wc2u3tx5m9|l x_//P#75(z G#uT0ޜ U'X#"pAA*yAFʩIq~#6֞Rؿ\\8<܁F{l^6 3@bBu^o9?vjtP?)&a@v{#=uv}]U
-.~IGPEXL)|pUqΩu/8rJH7^{w1MܒǑR;,D XNz{)v\:ҹi}8.9>6>ݗ\4 :l{n<ix?p(~?.`*p쒃{ug,4_{t!opa(% ? ų}<^腳#5c7H(gE1^q\@.` \:rru$r\@.` \:ru$rrHr\:ru$rH ֑ ąE. > W\[W^F2XG\Xrϟm~keHGqT0LŇX=z)ػȅą.~&BE}DY{:!Pʅ; z:ru$rsy\@/  o? r\x XGB. "֑ #
-݌ W䂮gŪo>q\@]y;r^ sRoLQ
-\@ (rB.P
-B!P(
-\@ (rB.P
-B!P(
-\@ 1C/?,zu_9RDz<endstream
-endobj
-5768 0 obj <<
-/Length 107
-/Filter /FlateDecode
->>
-stream
-x`
-endobj
-5764 0 obj <<
-/D [5762 0 R /XYZ 85.039 781.388 null]
+/Parent 6071 0 R
>> endobj
-5765 0 obj <<
-/D [5762 0 R /XYZ 85.039 653.905 null]
+6115 0 obj <<
+/D [6113 0 R /XYZ 85.039 781.388 null]
>> endobj
-5766 0 obj <<
-/D [5762 0 R /XYZ 85.039 653.905 null]
+1902 0 obj <<
+/D [6113 0 R /XYZ 85.039 761.463 null]
>> endobj
-5767 0 obj <<
-/D [5762 0 R /XYZ 270.549 176.64 null]
+6116 0 obj <<
+/D [6113 0 R /XYZ 85.039 736.911 null]
>> endobj
-5761 0 obj <<
-/Font << /F64 3112 0 R /F75 5171 0 R /F56 2890 0 R /F15 2876 0 R >>
-/XObject << /Im18 5331 0 R >>
-/ProcSet [ /PDF /Text /ImageC /ImageI ]
+6112 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-5771 0 obj <<
-/Length 456
+6119 0 obj <<
+/Length 511
/Filter /FlateDecode
>>
stream
-xڥTMO1W=x@ RpHQn|-Vz<y3FiC<2&JI.V;
-\G_\Gh ,&^^oi}24)P:V.l<Ǔb9^Du9-*۠d~?n3qRo\BQ\dg
-ӑF,81F%aƛ9 m<zzN>hhw<5BW`#[!~>蘲ݭ`[}/JZU6 baQ٨9noc'= _0mY+9)ijXO^zқ\WFwP
+xڥTR0+th,(aỉrȄ6x@a,qO/glIV($?(I^T]&Ŗ#vYMf
+>!Q_bUD*, ̯r5_ei^fV~=,4_;)HWNXrx1O0cv}﷊1-bXW4xkNUQRNIQ"sVc%J+=(c:ox"vmUR.&w`7 O;g%J$8[+7@DVFN6FtCJỷɾìپdǸւ :P>4.$|Jɪ@# )$Drl=G6:~S*uWޛC{́?!y7VAu'NO. )ذ$k֍4A0F)Pٮ,yɓ߈^tῲCendstream
endobj
-5770 0 obj <<
+6118 0 obj <<
/Type /Page
-/Contents 5771 0 R
-/Resources 5769 0 R
+/Contents 6119 0 R
+/Resources 6117 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5751 0 R
+/Parent 6071 0 R
>> endobj
-5772 0 obj <<
-/D [5770 0 R /XYZ 85.039 781.388 null]
+6046 0 obj <<
+/Type /XObject
+/Subtype /Image
+/Width 499
+/Height 849
+/BitsPerComponent 8
+/ColorSpace /DeviceRGB
+/Length 31825
+/Filter /FlateDecode
+>>
+stream
+xytU޸/YYdIB@B
+AaAa (/*"HQdLB~=N*TT?}}
+B|nݺcǎ⋒.ڳgOnnŋ;uJĊ~4ht 1V
+;vq˖-{/b[n?c=&
+b߯ xG
+\zuֲLQϹsGF.#thPz駟̆U8c^vy(..BBB 
+k5(=lx*+󠐏;wʘy
+r{5Dom#mS6u
+OK=$С}&L|r6xkӦ 8 LDݳgψơ
+]ٳ'$$D%o> 3o?$Dk'N8|˖-ׯ_֭Ǐ;ְ SҲ]xqNWyQt^^޺u~YK.EEE#4kP<,Hkǎ{ \dlv@̦ˡ
+BsN+֭z,3--Yf_DqK,) a֭>JkGLzUt*Vp5a AdXƦ`
+$&&JuYɫڳ%" UXDs޵ ̑#G]?ThC2+ptcl0]
+
+Z| ͛7k"""cbb_nv+ƹSA*֬YSڥKpZn߾o<xkTb bHHt؛6mzYӧedd9s瞓SΟ??''';;{ܹb?cSLIKKɲs*?,,l߾})/;Lsƌ<}qpm۶ըQC?VZi̙s;mڴ1cƘݹS YpMٳMZ9r_`kvʕ#G v
+F`'Tg}̕YsM
+=]
+?k'AĎ]{TT^ԭ[;b]ٷ2 %`/zqv\s#ի4huw㴓|:o֩f-Tkرc8zh O!-;bO[UnXl3pVf[. xUźf;w7O]:50Ӭ]]
+XpjDmq"i[#v&v m^[1n3n-vw[qㆶu-v7O]:50Ӭ]]
+Y_<?l}-;bO^U6/=v-Qkn]yxN w74klwWB(l޽a@G<AzX -vGwx,ی[n޼_NUagx}1t%޺S 3Z0ݕPw^u0[#v\;Un(-vGwx,ی[>\XX(FڴiӨQܪk3ͧ.f`oiւٮLŝY}-;b{.vz*l3p^*6bwd0ߴ~uwÝl>w7p{Lv}we*Ywq؂#vbQ}?0 v{2ŭZ*yĎA; v#v@L vGW TYrB5K7'LLLDAvvv9;w,إE#
+*H 殠
+ /^~ e޽{>G3\_ ]bō7dI_12,_nKLᅬ+5jP6"::6aSZGX*T%b;?~DO?>G )U-=]P1u7WKyžyRv-
+B!b7k[]ʯ\ U5jtp+v=]ysu m2]ZCUX<J[;sE}k 5*))IumI;fbw]u7Wwpp e^%܎ឋ[;se=ibk׮*ݮ];P!!![+vWNλQѩ~kW9cuaowc%*}G9xïg</˭;ʞ㼹.e|Rp+*gpo~m̙ڏY-Z$3f$\z˗߸q#''g<[24{»ޣλ[ݕ4yZݎcn!5jŝpYֆ׷žԭ[WԩӜ9sJl=ysu](#FȇbBnb"5"Bvy'R
+ba'X; v;bn'cu@vncN<܎mBׯ_zzG/K<@e!]nv^Mn}K
+
+<d<
+
+
+.l)vO1I{bџ.]X޽{,< ;fi_+o0}خ]J@ {<~rܹS4nEYbF LrT Rcɒ%%v!lݺU*U5j|cU'BZ VGu׿,N2eZj@g<}t~fFum[Ê3`֚~ 8Äh3ov]XJrz(ׯ_?;;ەZ7v#gY0X]>XRQ_K[v,Nԟ򪶆²wQ۷ wY0;l,w]۶m+sΘ1C[ʚ,399Y'\tZ xe}r9w!KsriWWg*+A޸qTZ.b^<y|v|'=ֲa],Ե2'NtZJS~m{=Y˪IƣՒnyCɿf g5q>
+ f(K}=..NN #GƲeQ3SNի555033s޼yCU\hBe'$$ȅ[NN=vk߿_z' 4keӧ޽{U믿VIIIYZ}A{7n\0yo_Nr.VZUZ_]s gq 
+J>2ԍ ?Ϙ(Օ 6B a
+ f(xѣի׼yss3B&]v~^QQQ;sL@KjkfOX]+ooot={>_L06 YfId䑓\'=9ܸxarUrO?z2PֱlTP֭[W禾|
+$&&JuY#--M^ i
+TYyhϷXԕmd$#e'jz]:HZd/ ǏuԑHaYe
+ fl0]LTI&9?gyoռy<s*GE;@uCvzfCdE*R?WU=(
+<SJ
+
+e hbw6B4h8$^ *>cǎf:t {MC1wC͛7GGGs؛M={Vo6g\&faӧedd9s瞻^ΆC8"})SHһ\tٰ{[D_̢RtjLæj
+b
+;Z -
+"~Ib'N?^~[n?~|ر]hpSUOOOXnnŋ;uꤽ#D֬.-**tRÆ ;wwծ# ^zOƍϝ;믿'@.^|mLn
+
+
+fF*Iǎ{ ]&-_v,fg?(رC|2l-@5tΝ"RuV(R/2d( dɒ%%v!lݺU*U5j|2ZU[õeQѣ֭[_;eʔ h;iD>,}YӧOlfYc062lG?{2ԥK|NNV\˥}۶mEw3w3fh WY e&''3F"8oҤ˗:ӹ ᥗ^̩Uoܸ+WT5jllܸ֠q*-Jk/M<Y'<cZˆuEzPL8aZDj*˗f3#{—G*<62lG?{2iP+v-@-[TO>{UZe&%%+f 6Hb7nONN}YE;w!jJT1 n߾]kpذa,GńFgLLu;fueY=#GP@D*@1dȐlf*_~e``;l Ϟ U֍ZjڵkfͪW^^^^VVHo=1?/^h)_~]" i}'L$8t[M}u[bbTxXXXZZ=p"2
+
+R l ߶m[ffўٳJ8HZd_XXx_~N:d83Rxȑ"^xiwD͞йsEPO<9i$-@`hhHlرֽsݻkϯwj=lҫW/ITB8|Y֐8uwڵ](5۴i#VjTTVK
+¢bY:-~^
+~SO<CZ=zƃE;v>|e83ܺuk,ߝalfe֎6{NMMڵ Ui8%iӦ͛73 ABV}dCd* {nM
+
+Z| ͛7csGuQСáCoVxٍ5 ͩCϘ1C8s…ZR۷/???--w1\J-###;;;..nȑ]8Ԛ:usrrܹs=6LVVֶmjԨҟ6~9Ɣ)SG799sb7, sxbT#?Z
+
+ӢE aM3gLJJJ!CvP+>>>!!!77WĨmnأYn66ZG^~/2vXĎzطo޲eKooٳgӭ[j#""-뢢",0`ƍͺ2{ŰGbn66Zr1x`~ԩSB @\rСLZ
+z衇,YR^'Jb8bbb_|.U¾zƍ"-`Oؓ}C)E]~իWge߾}}EYti)w,1F߿y扉ܹs2<rJѯƈ#/_d??3f>}Qǎ}}};tp!o<\} 4\f1yK%dq"&y/ȚMgVwV`Ҷm_~E.\QJ|00c DEfff)zΟ?ߨQ#^=I!!!/3O2%--M+;wVSN?~NN#ae"4..NV/gΜy?%9sȀiӦ3ʼnlUxe˖IbŊeQ$CaK;'N`^,Z-@O<v\]ʥ&"
+V>\
+*
+ [l7pԩz^zjN iϯ-ZȁKʕ+-ȹG55u#
+;vH?X{ݺuK)e{1b߯ xG
+\zuֲ|LQϹs"?mܸ1??_^
+
+
+_ tҥ ZݝB?Kˀ?>vX㲞Fi?$$7ސ)dJͦȹGlHEsE @e5j|Ң___I$E&EEE*/Jϲ.fҥ*S*
+[nַ#
+W+9t:u|h۷w8)SȨTZQ͆$VG}|X_@,YD߲Y#(֭JeYS=jby2_֖|iܸ+WTZM4(66V5h YeƏ*ާC[G&d}; 2n8վZy:tD7oɓD
+H#'NT 9dvЪ^|Y߲Y#8w3fefM9 FM[[A@vdo߮2ׯ2d;W**ԹVZ;vLD qFվ0, kwW+ lٲbH?cbb:t Urrr>}|*+5ܣ6Q Z
+keddHIj*YYY۶m\F=m @۷ʏ?8aF4F02NٿG/^4kʡGlԫWOziݺuZws6mK-hEPQQQZ9s4ɧv[<&kTXZۑ վ0,prϛ5k&k={:ȇ~(2O<DC~^6YKu?ܢ0ӽ{vɁ~CFe=B@ @./_~gfΜոzA0K.^^^&#Z:==
+r;V'VG@܎;Ac{huDXX]M8b"v~."v Pn T۱:b"`3#v
+bՅeuֈ GY̚5 ;A
+H… [j>}z\\\FFƙ3g{9WXq ~wfϞ-Ųȑ#L&ɝ;wV ,x׮\RPPpȑjr+^ص7d\F.Qf͚~[jᙙ*- rrrUe˖խ{vDGϞ=۵kWQVLT|md}~)}HP\p0ޫ;#7oʂ\۷o/Q8v올b7zC HJJnK)r]P=^nG@m/Ç7m4j(~ɿ|U4M<9##ιnݪ3g_v 55uȐ!b7n\JJ\ ȕӫ+߿͚5۷l;22rٚisrrF]^͛+i/GC~,Y"iiG> qFk'?/&&&VCW;A
+:}ˈ*NOOݻwqqIr֭qջԫz$ofhhh͚5|5˿}Qǎ}}};tp!pDD)Tzccc4hТEŋ[HJJcbb_۞={J?<F^˗޼y[yg̘zj}
+ c\K]9F%~i˖-M;u9b\<K c]:uʕ+Ncɜ?~NNNvvܹsEb˃wygR,..nȑ.6L&ZKNNܹCy… [jUd2
+
+
+9?vw'*лrFJ3NF,bwT cƍ۷Wiڴ*-/5k
+Ti9 eZHyz{{GĜ%]F(s/}իWeYҲsqÓ[<~WfRܚX^\K]9FJ}%vwOuitdqL./>GN\T0<{llll׮]=#
+2`b/**m=zv:uc0!'a%Τ,N:eؚSg<msU.w2+w%߰+se]|N-vyw٨foҤ{YjUuKQ_윔+zرc L~7ś>GR,&G%׭k׮mذa`-Aw3y$}r5bUޕ3lTِ20Wwk&b׫W/-'>>>!!A.No9,,lÆ y5sLq
+
+
+RSS"}]/,,|U|z&Oqyu;Q˖-O:U.Jr:o޼C|ӧ={Zha=%CbƏuVqƥH/>}z3e8 G-\וYL<5k!rI؅[?#l߾=""Bꖝ, lܸQ_kժݝpnvNJ-[ʕ~ddٳzDG6o\T,9ر\k?Կˢeʗ#uvAy(Q.<~c'+~-YD)31Jk%*ln͕5.r(l8*wn1$纮 bY Lʕ+_x*qUn =A7 +N
+io"Ͱ; (.m]-6B7QKO?? G>uv/SA;1 ͆a3,cx8f[WFev>HZ>hxC/uʘ+qW/r>FJ)-PR
+$YQIRaQ`XAJ-DaXqY^\ ZI%Z(.Z %YAֺ,Ey)OOno;3~lfs{|p(J=.K (^VVVWWmoذ~6nh?Jr;yX0ccIxӧ:\Ξ$vV?rp#%@x{ATҼPZZJ\Wxܓ(߹7:u8|ݱU\<PF&m\8tqpOh!Wy(_9Uy#W
+wq ]ܕO.'y!C-CsG/ו"޻eŮyXZ+$fU\<PyZ.͈ :\={g-!$ysa$+;m% t}woQMMMAAUBsG/({pbaRc`w,h/I&Kt|߾}<@8t+qe,XO8 CCHHy#W
+w(BwK@jwo~D
+MޣXxi<NKeݱ$vI6*.dԨQ_С;@Ѕĕc <,* !ɛ 8#罸1ڱ;w.?{>7 N>zju
+\ycǎ}:'Zx1Fy^?؝dipEStEƸ)u8jƃPƌ|ˡ,Aa3=LbƴԩS9~ٲeAw3f0Ē!vvPF6wY|gVRR ĉ7omoٲEc-_sѥ^`^f א+\ (]80:60d{^juN'PtqT1-Fx~P)JzxW%(֭[={6Zb*bcƌeU{7Gƚ9MAM<ܹsF3s>*ʈԦOyy9m :TuVB5nmjôAk*4ijpBF[$?IK BpSS1n97r]dg?OQMN(lO>؊탫hSO=Q~O+uFY ۽{7]/;\O`86bꫯ nknn@n)O=W;}Q(ynN|hwA7RRI
+U=ƸotoLed(esb =vX>P~V?tq/((0~d1l锵ƍ%k ߜHYfѝgJFMs}if\eeR Kn
+~iL[y!6>H;M+7-FxnFfCͧ(e8oW޳gOQQ=ѝŷrȅnj(n3`/[̞=Y\ab)xuqHm_C' \ n{ڵ{7hz`@r=*:w|rZhEN2hF_j-رcM6M89.2 6OQZq,t_%(lOoߞbj#JZ+|[.tPUUu 7vaKQ2wޔb0FOTڴ߿h鞚ZEKKK+@r];w[)*46l;6TMHK ,AKZ8?gul[]d<m54^{_pa9 9!hm6y(E m6aaZ<ۗĞAmf<AAAAAAԩSӯ^z&@^U]]}w?JѿNAoՁpPW]uQVV {E 6|w#LSHF~
+7r9|w-yAg(7O>Mfsi{icnd)KV`AϷ#أG#GXsNg_CbD
+7g@|{ 2>C9%PZij$"}b7%Xi!  LbOg}Vcg_yI1@HӡpIw 3c[{cc#YH_r@DJJ $,ԢE8
+%]-xח+>3WCKP4(Ï͏0SPbOYPNoLIϹX vЃ-֒V(:Fnyf>я~J\%|7By.v'u#=XMi 3 %q6 X;]B֒o[uAtZܹSu\Ηx#g.D_ve_|pȂ:>{B;4s ڱ@D v9$SV(:FnyU>C/q :_P?uӧ:ѣ޳kːu##XJi 3 N&kDUXX?{k#ZK{\mc䖧?Pߊ*q% Qc4! b#G"X{(Mo倠\QAy/!ěm.(dCAAAAA崒3A;AAv/tkٗ}Q5%ud8A$L ,8v7|Cѭ-+Wݻ۶
+,
+)z ڕ%A&+.1G6i}~!+Z¬ \{ssz G6-]T+Z¬ }ǎgϞiӦ'z9u׬><yGopmaVK! ֭[teΜ9Νst Y}D!C,Y$0!                                G]tQrx,_]][ɔ3s:Ҟ$v߉Ik޽GԩS6m vZZu ⋻vz}?~|ܸq;vl׮ȑ#{/?hʹĎ+;ݻ\ɓo $?q֬Ywywnz'K[ni+v$v$vN>=eZbTWW[f:m,]/KFA3;}kvn_v_|d̙EEE]tYbŴi:wLۯj(((
+꪿rE-ZUA\n]~{ґ="Kn?w7ިj;{lʙtʨQ<x0PSZZk.ޯ_?n; ǏNⓖm۶
+o,f4W%}Jejjjgy׿~̙;w&yQscdI85:^i,Y ѣ$v;MIx+++);:usƎz^Xf㌰T裏V5c pg,:4Wzr}} 7׏jE֥
+Ga)}D*X[je7U*hHZַTGZ )-nSS`1tЏ>Q [>{lN'644КM]}><fZ$S7|xWmذK˴ظqMPI&v@hZ M2Ό]\OIqMΝm z kjH\p#GL2?!l6mݠbF#%tD8CHt\1Tk*QvhByꫯ'|" 3'IKS򩧞&>-tFWԦu)RZZJQN1ψ
+1dbu8 MΌ]KrN]v]#=ZzJ~Yt~]zZ*PaZ^~]v:[ק:>#% 4[]g}&jUNij|cqlƎpBG={v8@+( "/%2dHuuVcaI gDh˜Ǖ$[Zuhtf,eY1fN:}tZ=z{D˗9s3f{Z__O̴졕ѣ˖-f*u֒~NѴqZ9~5k/r:8LF#%ugSb/:i)EX\t)E;OCӟ;N6m8qNh|aqoWbÞ={ktD>:T+**({\hž˩S?m,c555UV#\fDh_hsqKbw$L(8(V'MԡC^zQґ{tB/nݺh%/++{w/ؓޟ'%>}̛7O?~݄pLo&ugSbH'J_aŋq3yGK\_6lC ʄȞ9s)$i@
+aꣵkZzMuօ汪n<?~xkll$(7’ogDh I<$vסIҙɴk<Zp!Œ3y8!t}ra 8      (m\YlSFg իWaa!B|Mi&kF!={LAwvp:?1Í
+No/V2 \B%Z&vW,qUqh/ql[vCq)"c._<
+'oCWg.$ Ab:0ܵZW,StLٮǩ! MWBy(-EdKG9m(
+%.LOnu5wPGDGHpvJV{wF:SD9 {\GQb(
+%(.LO#0ÿsպW'W#&5sO4饗^v4)<V#˖-sMYwŏGa/
+PfKP \ly`swZWt~+ƈvM\wL5j{:tcǎA۲F:$c744U|WxQ’#XYTZ
+^Zƽޛc=$RʭC HZm۶O?g<QV߶m[M(      (Wd1FUWWq97pijcccQQљ3g]9= c1Mŋ#Hr.=権MMMݻwOWYR%?jѢE&Mv!2GnXqqqss3= ws"_{[nv!}'Lq"qi(-8w}Wxs,))yٍ4NMR#Gjw4=nݺs=A-'E/mCo CdٳgW^y}hرc_|}:N,&6xKO ̦Pn%+!z+2kbw/Yăx\rƌӬE[pӺmtȑ#jgϞt.Oz9PC|`BC,OS3>c˗/K/% i{͚54q|%3:9-@ >]iA#W_M<Yq3i.\ E]Ρo Á%
+endobj
+6120 0 obj <<
+/D [6118 0 R /XYZ 85.039 781.388 null]
>> endobj
-5773 0 obj <<
-/D [5770 0 R /XYZ 85.039 599.799 null]
+6121 0 obj <<
+/D [6118 0 R /XYZ 85.039 744.431 null]
>> endobj
-5774 0 obj <<
-/D [5770 0 R /XYZ 85.039 599.799 null]
+6122 0 obj <<
+/D [6118 0 R /XYZ 85.039 744.431 null]
>> endobj
-5775 0 obj <<
-/D [5770 0 R /XYZ 296.792 230.14 null]
+6123 0 obj <<
+/D [6118 0 R /XYZ 273.413 94.474 null]
>> endobj
-5769 0 obj <<
-/Font << /F64 3112 0 R /F75 5171 0 R /F56 2890 0 R /F15 2876 0 R >>
-/XObject << /Im6 5155 0 R >>
-/ProcSet [ /PDF /Text /ImageC /ImageI ]
+6117 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R >>
+/XObject << /Im29 6046 0 R >>
+/ProcSet [ /PDF /Text /ImageC ]
>> endobj
-5778 0 obj <<
-/Length 451
+6126 0 obj <<
+/Length 499
/Filter /FlateDecode
>>
stream
-xڥTMo0 WhĈ>wKM^Ꜻ6 ,-l/
-DR|OQj~PF b+=ZZeY-#o%jH:yR?Wê
-LPbq>J,k5O2,U};-#u4Ûa#C}-.Vʂi-@)^kJXG,mŝlN\^htB
-[8:FH`CRAr>G7G ucBru0^a_ܓhϹ8]m/<m2|mQ*⒰z.~7ٙyWEz=0X$=GL;ʱSjz[/_J?\,{6)$_Xp
+xڥMo0 :3ҮR`:b͂
+endstream
endobj
-5777 0 obj <<
+6125 0 obj <<
/Type /Page
-/Contents 5778 0 R
-/Resources 5776 0 R
+/Contents 6126 0 R
+/Resources 6124 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5751 0 R
+/Parent 6131 0 R
>> endobj
-5714 0 obj <<
+6102 0 obj <<
/Type /XObject
/Subtype /Image
/Width 780
/Height 1135
/BitsPerComponent 8
-/ColorSpace [/Indexed /DeviceRGB 31 5783 0 R]
+/ColorSpace [/Indexed /DeviceRGB 31 6132 0 R]
/Length 95337
/Filter /FlateDecode
>>
@@ -25071,5977 +27102,7036 @@ BIG:?Dq
kl"F2a9ӻNI5CZZ})!2 ̚4V9|EUغEgrFK-r$Em]Pov1Y=h
>I5< ""IeUeC=e_:H'6 JDp_oC}iF84jm71<O0.|ۧS(By68{_iCOL]-<}Ɯ=pvO317ʤ*ò4fCCGt$5HlQo -cfbl7X|RQ '(R## I,&9^&xy`B)0౽v)4J
endobj
-5783 0 obj <<
+6132 0 obj <<
/Length 107
/Filter /FlateDecode
>>
stream
x`
endobj
-5779 0 obj <<
-/D [5777 0 R /XYZ 85.039 781.388 null]
+6127 0 obj <<
+/D [6125 0 R /XYZ 85.039 781.388 null]
>> endobj
-5780 0 obj <<
-/D [5777 0 R /XYZ 85.039 758.673 null]
+6128 0 obj <<
+/D [6125 0 R /XYZ 85.039 728.534 null]
>> endobj
-5781 0 obj <<
-/D [5777 0 R /XYZ 85.039 758.673 null]
+6129 0 obj <<
+/D [6125 0 R /XYZ 85.039 728.534 null]
>> endobj
-5782 0 obj <<
-/D [5777 0 R /XYZ 288.958 -427.984 null]
+6130 0 obj <<
+/D [6125 0 R /XYZ 288.958 110.371 null]
>> endobj
-5776 0 obj <<
-/Font << /F64 3112 0 R /F75 5171 0 R /F56 2890 0 R /F15 2876 0 R >>
-/XObject << /Im19 5714 0 R >>
+6124 0 obj <<
+/Font << /F56 3230 0 R /F66 4195 0 R /F62 4052 0 R /F15 2976 0 R >>
+/XObject << /Im30 6102 0 R >>
/ProcSet [ /PDF /Text /ImageC /ImageI ]
>> endobj
-5786 0 obj <<
-/Length 1786
+6135 0 obj <<
+/Length 1834
/Filter /FlateDecode
>>
stream
-xڵXK6W(,%AAHr%yDW:%˶6Ebj8CU
-,P:،Y6%vgS%71qm1$[NG$_[x`8"
-(  aS0H
-:^q5+3dEj?
-Z:3eV.}
-+'t
-E>CBZcվ<3wgD!\"ŕGFl0[<4U}<F{BFPl"* mk0aݙ5&7k1Nn~h<s|xg[A|6qx*t^KSa}8!wCpg 5uѫE{l}:Xbg'B F*\lo+FEfKuEL65M62*EUh6K_~:( #z[
+xڅXYoF~ׯ#D˳@4ZA'+Pxֿ\KҢZ-=S$t=.D:Ir-`B Gj7 w #wc:PnQwHxn˻uzmgv?VZ9f[:7Q9Z9=1w_Τ_[}ӄ(P *
+sS/&TcĹ5ʏ-ZCdžN5-~NaqEM 6c()o^kt=^VM>a=]VG[! ˚. *Re%;0qO8gtczi{-ӺGWh /(%.X^O$g{K dMtk{S%dqiR/LZ
+-Rr9У&Co`egMvԣr8/uJSIR՜2gn B
+!:-.#UԡDq PC,{{NR<*>Z+Rnh6@ 
+N6`ʧ.C5UnPD.SnL>D(;*72$AwmWt!1Ŭax( *w\Rsjl~rYnc^SKgz,{ 8
+wX+=@) X.{=/ ύx ߞ q-bqs:*7MN`(q8w827 +rY& LIf>
+Вxe}4gy6-)ڪmG
endobj
-5785 0 obj <<
+6134 0 obj <<
/Type /Page
-/Contents 5786 0 R
-/Resources 5784 0 R
+/Contents 6135 0 R
+/Resources 6133 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5751 0 R
+/Parent 6131 0 R
>> endobj
-5787 0 obj <<
-/D [5785 0 R /XYZ 85.039 781.388 null]
+6136 0 obj <<
+/D [6134 0 R /XYZ 85.039 781.388 null]
>> endobj
-1870 0 obj <<
-/D [5785 0 R /XYZ 85.039 761.463 null]
+1906 0 obj <<
+/D [6134 0 R /XYZ 85.039 761.463 null]
>> endobj
-3022 0 obj <<
-/D [5785 0 R /XYZ 85.039 671.062 null]
+3098 0 obj <<
+/D [6134 0 R /XYZ 85.039 657.513 null]
>> endobj
-1874 0 obj <<
-/D [5785 0 R /XYZ 85.039 671.062 null]
+1910 0 obj <<
+/D [6134 0 R /XYZ 85.039 657.513 null]
>> endobj
-5788 0 obj <<
-/D [5785 0 R /XYZ 85.039 642.326 null]
+6137 0 obj <<
+/D [6134 0 R /XYZ 85.039 615.228 null]
>> endobj
-1878 0 obj <<
-/D [5785 0 R /XYZ 85.039 571.69 null]
+1914 0 obj <<
+/D [6134 0 R /XYZ 85.039 544.591 null]
>> endobj
-5789 0 obj <<
-/D [5785 0 R /XYZ 85.039 542.954 null]
+6138 0 obj <<
+/D [6134 0 R /XYZ 85.039 502.307 null]
>> endobj
-5784 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F66 3242 0 R >>
+6139 0 obj <<
+/D [6134 0 R /XYZ 284.478 383.02 null]
+>> endobj
+6140 0 obj <<
+/D [6134 0 R /XYZ 85.039 260.551 null]
+>> endobj
+6133 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5792 0 obj <<
-/Length 2302
+6143 0 obj <<
+/Length 2293
/Filter /FlateDecode
>>
stream
-xZs6_GA4A|}s]MNrzLZ-N(%ؾv
-(&/WdD2x$*>[5
-̀"#cU„%ꗡzxVV٬95٩\Ѓ`h% #Z{sΫlIl?D]ﰊ>-EYSy!R?;_GO@l8pyO0)@ И@8>gb3cQ%a,z69n03 gL(4;akM9P[PC'P>?7fMdĴpZ͂\_ًIڕg#:qD=&7gMvx&R"(Ņ繣`8a pD{@h7z%
-g\YeCYQ/FLD nʡ[;q:Ay䩟E%ǝ[@nz:܍Y4sս ԋ0Hbo i3cww%\w&[2:p iiԙZ9Z7?`yd~R';!
-Qw- ㄦ3
-c0]YS!ξ/jk 3/܁K=ܜB@|W٨SHI&@ef/q@Z&h>ꙟ!XW5%-̞w]l=cM
-x KD1$D=jF)alNKn~V%Q"a ‚K'ɫGqKګ޼J)Fw ^Rjc^;}$rO-1)3$>P]64_wQ(yb=UjjٯКVX1Ui(4A)p65 SItI
-}@/}=][tEkAvorOhGm?;D2 ZiDRp\6LgM^)kW^揰&mj/jca.;ArIӐ( 䫺mv07 @ ^vjul`\lN^Uvo01+~zHZvw_0zc^ܳ D3*-PMzCK9:/8'j:>Z%
-Tcp%ݢQ-|<v.
-@n _І{2[ifxwp/AZJ<X5feP|IRZ*2y+ʮ)V9KAijd{f)´%1hm\#<kY )dq.z߅{,΂ҳ'
-NDhGNtUT9rR{ר{U,aܯD
-Pqus\ŲoƄ]er஭v7NT(c9\7;=o?_aÂځ/dž*zGHz+:A ?S
-9O[OɡB%`aN9b4t߯g^+5:ch:'fe|z3`M99XPX'X~ %gGe jOcC$<2':{J6m!#`)%2p9Ny99PJѺgGrB&_=endstream
+xrܸ񮯘#y
+(΂W,B}f{T#<9<Dc jrIyr(ر0 1!;wSu;E m
+?ޑ5JZ=' :*g
+SN!ŁW Mx1hăy*1¿ٖO`AH}~%QumQ~zPHUYQ`N7GJ1k
+|v4'5{LW3jb.CGAIhA,0#r!(aӥX?3"E|ٓ Iv"(NPVCm.wEݕ)sC
+Q|980 /DPݡHx4VXK_M!|%m/ ko.OG&XR3 tJ=K[ )Ng@1t:qOtqym`'|)) pT,<Q2!ÐEɲeB24#
+HE{d, d}^[\k٘QNȤRskf@pIXQ\WC^cnL#0">:+AV0^L"
+)G
+*4^XkƋ[n<;̉z_{_PP=o3ay34`I:'G pqL$i`3LgED _78Ri}5~Y,e8==ag a:j E6|OΠGlmhmɊn!Z3syo sIDFza:,z\txFh?9ݴcBfZ;g Zt`
++2wE7A7WtV !j\yl|X鯿 V? Wr|ٷߑps*pÅ
+[^\0 Ui" bendstream
endobj
-5791 0 obj <<
+6142 0 obj <<
/Type /Page
-/Contents 5792 0 R
-/Resources 5790 0 R
+/Contents 6143 0 R
+/Resources 6141 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5801 0 R
+/Parent 6131 0 R
>> endobj
-5793 0 obj <<
-/D [5791 0 R /XYZ 85.039 781.388 null]
+6144 0 obj <<
+/D [6142 0 R /XYZ 85.039 781.388 null]
>> endobj
-1882 0 obj <<
-/D [5791 0 R /XYZ 85.039 761.463 null]
+6145 0 obj <<
+/D [6142 0 R /XYZ 263.114 764.647 null]
>> endobj
-5794 0 obj <<
-/D [5791 0 R /XYZ 85.039 739.701 null]
+6146 0 obj <<
+/D [6142 0 R /XYZ 85.039 601.529 null]
>> endobj
-1886 0 obj <<
-/D [5791 0 R /XYZ 85.039 739.701 null]
+1918 0 obj <<
+/D [6142 0 R /XYZ 85.039 579.213 null]
>> endobj
-5795 0 obj <<
-/D [5791 0 R /XYZ 85.039 718.708 null]
+6147 0 obj <<
+/D [6142 0 R /XYZ 85.039 557.451 null]
>> endobj
-1890 0 obj <<
-/D [5791 0 R /XYZ 85.039 619.42 null]
+1922 0 obj <<
+/D [6142 0 R /XYZ 85.039 557.451 null]
>> endobj
-5796 0 obj <<
-/D [5791 0 R /XYZ 85.039 601.154 null]
+6148 0 obj <<
+/D [6142 0 R /XYZ 85.039 522.909 null]
>> endobj
-5797 0 obj <<
-/D [5791 0 R /XYZ 85.039 516.543 null]
+1926 0 obj <<
+/D [6142 0 R /XYZ 85.039 369.425 null]
>> endobj
-5798 0 obj <<
-/D [5791 0 R /XYZ 257.152 522.516 null]
+6149 0 obj <<
+/D [6142 0 R /XYZ 85.039 337.609 null]
>> endobj
-1894 0 obj <<
-/D [5791 0 R /XYZ 85.039 379.003 null]
+6150 0 obj <<
+/D [6142 0 R /XYZ 85.039 239.448 null]
>> endobj
-5799 0 obj <<
-/D [5791 0 R /XYZ 85.039 357.806 null]
+6151 0 obj <<
+/D [6142 0 R /XYZ 257.152 245.422 null]
>> endobj
-1898 0 obj <<
-/D [5791 0 R /XYZ 85.039 274.999 null]
+1930 0 obj <<
+/D [6142 0 R /XYZ 85.039 134.586 null]
>> endobj
-5800 0 obj <<
-/D [5791 0 R /XYZ 85.039 253.802 null]
+6152 0 obj <<
+/D [6142 0 R /XYZ 85.039 99.84 null]
>> endobj
-5790 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R /F56 2890 0 R >>
+6141 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F58 3365 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5804 0 obj <<
-/Length 2477
+6155 0 obj <<
+/Length 2524
/Filter /FlateDecode
>>
stream
-xY[۶~_˻Hx:4wLIyQreP.L?t<pp.ggi,0-R_i:[VWl #\F›EKbzpu.f'2/=H!y>0 swH<йfwu[X;? ׇWw#-HDIjv,M_y"ڞlV]Eq((4߆Ux,3ug" s2B$
-q6%1z]`8ZufQ a8;88vFh {ФThk#@PwvEF9 ,ݸ4 4Iwjh,q\4-ypq(Ϗz(Hvmsh1Y5m>B$f2͟q!:VVU/rM[P]c~7΃5s$Zu/R?=XDP>/:V"G%].@|#]Q -OX+h& 3ZV)kFcX]-p#<g!s! 㾊?@͍l9 tnޅ x. t]=eSXnC8H_DG ǟdcdh- ф?)2V3ibJ⏦'2=ឲsM)hiI@ޗz:S!gQʠۻYʲܟ0u g &N3B2nDPH}iU< $M4nC
-_~:T5ЭAFUtYS=1Q~W&
--|(H#hW 꾻j\NHA1[ص]Zṵ6]}ysRk}ٴPy/͢RMGZMQn
-Ae?:Xa6f
-2fR1CF’%V?G TY]n+44[^JH<~|8eX 1x
-=
-9%9hLOdF ro*Y^0TdkD̝k_,D  qGv܃;`h0EՄ&QD䁧y3p\nQ4lr<fPԠݠ&kYds1gړE;j)iKlL1(hq;uHoG+|;KZ嚅bGuK)eM8B$gRm)I&Y
-q=s@"ͬ ,Hz#Q ]_
-'!Y9="J<YjS Rv
-09XIB[+! UHP89};9 ᪵GMpM4p- u`pEx8\8V
-0lEӮoNH\/.0D?t49]b0d11
-.#9f'j%4{U W.[ ?+n/X*$:Nendstream
+xڥYY~_R V Vqb$v,I0
+`W,z`ˎdگ[6u!L+BhfaǾrh܈DFhGPCP> XvC!XeoY3K*/v^eDsz6'
+jE),D!Dp(w %!L O2} YfKqCAek
+W/H87$O'2, T@ڽ<$$Lyf PBρH/u8˼R~&n]Q7`NN c6>\j~ZwXUg,|^p4c"=S.!/Mi,"G3|K3B~Kp'Ud[
+ai&Rb0DwRk J~t$<QOr{M*@m!5v]+Zbu bMK=9" !E/JJޥRPWw$咰G3 K3 -e7M
+%!,DhBAㇲU!_0:e%R?\GҬ\r+LH^_vdqaw؃w3@~<!׋ {\F0[h&VfBJa_#ӫƍ,Jzq]]OpQ7fri?bKV #8 kPE:٨ˣ1vyR8['Q. 3Ag*⫉M.&F8`ц|-Ibk);߰->G
+W]$uh*0UYfE,ENTF<u×$ZJ/ai&nՙG8|& ϑ?NXs7!h;;%uEFk "T >`m]Gb(@pnVεbgG3^ @ˑOEiNytQfJ54vQ-o{yŶ^l~?jc;Նlڑ3RQK8F$Z:It 0ù-\{.ynbADvaHk+Y08hю ZlnLN$aB\imUYKְۺҶ,-ECmu7+xD >\7}׋>B%Ho^3Pp5:sWp`gщ-;!~foI/\=bCmu'CF>fǢ)q<7\=uQ`d?L^dF(s@:ꃘK]SO\]k)/mu᧫ ,
endobj
-5803 0 obj <<
+6154 0 obj <<
/Type /Page
-/Contents 5804 0 R
-/Resources 5802 0 R
+/Contents 6155 0 R
+/Resources 6153 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5801 0 R
-/Annots [ 5809 0 R 5810 0 R 5812 0 R ]
+/Parent 6131 0 R
>> endobj
-5809 0 obj <<
+6156 0 obj <<
+/D [6154 0 R /XYZ 85.039 781.388 null]
+>> endobj
+1934 0 obj <<
+/D [6154 0 R /XYZ 85.039 719.568 null]
+>> endobj
+6157 0 obj <<
+/D [6154 0 R /XYZ 85.039 684.823 null]
+>> endobj
+1938 0 obj <<
+/D [6154 0 R /XYZ 85.039 260.296 null]
+>> endobj
+6158 0 obj <<
+/D [6154 0 R /XYZ 85.039 227.875 null]
+>> endobj
+6153 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6161 0 obj <<
+/Length 2060
+/Filter /FlateDecode
+>>
+stream
+xڥXY6~0Rnm&mʺA\pu>wRm"pqf8Ir9OByH'|SfI4*ˉ]ͥ+VjގvB|ۏ2a!"8oK| 8?˟A_3{ {c<#|3sJBt9\" |=~L\0U׼`5r%V^")<l z*tE)pN
+i4<V$vv+?t'1 Yؘ
+\|}XFrDrs[jjŗ<`uș%%xwRhc] àde<B)?:=:Nl={H.'M=UXhQ\G X7cF7Wc =&XbV?$LuTL ₺dDcɀyX
+ ZYcĺ+b3KYa+\ݧLaF,(\9o
+͇CfBu[:4|R5yOWf:C/M:YvYM{L<V?ډm^;{k뽮TкAy ,/<us\)0"$-RJ|j)}Zr>.v 7uCcy!'6 G/Q\arP a<|
+}'6[bd VIėU{ oc3웸
+g Oyc(AnE-S~\4 l'3t\;k>ojr@0h{5r)hX3|}mʈYǑ2:lLIT|_`Zfrva;}jO_]t #-txC?a_Wdendstream
+endobj
+6160 0 obj <<
+/Type /Page
+/Contents 6161 0 R
+/Resources 6159 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6131 0 R
+/Annots [ 6165 0 R 6166 0 R 6168 0 R ]
+>> endobj
+6165 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [141.013 496.014 469.456 508.007]
+/Rect [113.74 564.53 442.184 576.523]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.css.tayloru.edu/~elorimer/databasefs/index.php)>>
>> endobj
-5810 0 obj <<
+6166 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [139.346 482.768 202.339 494.336]
+/Rect [101.164 537.735 164.157 549.303]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:elorimer@css.tayloru.edu)>>
>> endobj
-5812 0 obj <<
+6168 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [141.013 297.166 309.095 309.158]
+/Rect [113.74 325.034 281.822 337.027]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.openantivirus.org/)>>
>> endobj
-5805 0 obj <<
-/D [5803 0 R /XYZ 85.039 781.388 null]
->> endobj
-1902 0 obj <<
-/D [5803 0 R /XYZ 85.039 761.463 null]
->> endobj
-5806 0 obj <<
-/D [5803 0 R /XYZ 85.039 743.459 null]
->> endobj
-1906 0 obj <<
-/D [5803 0 R /XYZ 85.039 643.603 null]
->> endobj
-5807 0 obj <<
-/D [5803 0 R /XYZ 85.039 616.988 null]
+6162 0 obj <<
+/D [6160 0 R /XYZ 85.039 781.388 null]
>> endobj
-1910 0 obj <<
-/D [5803 0 R /XYZ 85.039 531.856 null]
+1942 0 obj <<
+/D [6160 0 R /XYZ 85.039 761.463 null]
>> endobj
-5808 0 obj <<
-/D [5803 0 R /XYZ 85.039 512.984 null]
+6163 0 obj <<
+/D [6160 0 R /XYZ 85.039 739.701 null]
>> endobj
-1914 0 obj <<
-/D [5803 0 R /XYZ 85.039 333.007 null]
+1946 0 obj <<
+/D [6160 0 R /XYZ 85.039 627.47 null]
>> endobj
-5811 0 obj <<
-/D [5803 0 R /XYZ 85.039 314.135 null]
+6164 0 obj <<
+/D [6160 0 R /XYZ 85.039 595.049 null]
>> endobj
-1918 0 obj <<
-/D [5803 0 R /XYZ 85.039 227.829 null]
+1950 0 obj <<
+/D [6160 0 R /XYZ 85.039 387.974 null]
>> endobj
-5813 0 obj <<
-/D [5803 0 R /XYZ 85.039 201.214 null]
+6167 0 obj <<
+/D [6160 0 R /XYZ 85.039 355.553 null]
>> endobj
-5802 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+6159 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5816 0 obj <<
-/Length 2765
+6171 0 obj <<
+/Length 2240
/Filter /FlateDecode
>>
stream
-xYY~X\&ā@<,CQa
-IͬSU_u(
-( i6w7a'k?t@w߸q<<qW:6cWkrZq}bt<҈VO@GމPHX^|іaq"xo%nsb X!7̜w`x孒sٖxP7wooCesd޷+?uXw;|/<J -bb*nv#Ou|ϫP97ziPpۉeP uS2zu= @[
-}% v,St{3R~3y‘5+ _򆷟pbs]}G
-"jجF|Sb`e S #7?yًl ](Mمѯzeeb6ܻA|7g#7Y_vE|xʬQCJY<-8b:#,L,†)
-?ƨy&,֘iEbg`xtb۲=^0̮Ě=fb<_<KM>kk1j,PZl7 ^9CLqX
- !'p @_M)(^.ݟ#F\|[bTA<4DĂ艹vK+,G%13Hr3w9b?u6 ){+[>iD'rH\0lyүhH@JMĽѾ`PzD^Ņ2#RroX" ⑐mg( ,R(/00Ҝ#AMb`<dhe&n h~|n<?4T
-+ !I1d[~ /q;jFZx|m<5\$p16o{0~p8f&CW^;=;uﱼrC#p?kO2G >w+֭YXw泃-Yz=+3Dx
-h_3*[(Stk
+xڥi۸d Imihig]$Btxu7 %8@F/ZZb+EV+a䗕_)X/n&pEcD_Vۏ\g A$(7ەzvQ:{ި(tzi7%EGi u߭xuQ+F  kzw 7F*/kFGǵ'<6G;!3RkwEpHD[R8g"QH7&}~hhЎR߼bAa
+-As='bu{ QK'RP+ͰkJ5zOgLn
+BV)W'ֆb`՝GŽs"S
+W%}7i:;_^*n]\<3myHX&ƒPΔԶq聘3K*Py!3&;D#u{ @*tFB .'EDP1487/
+Ie]^y^-5t֪%el*]޿ _N|`Y}DB7sǬfp2e8>fƢ mMm K[ Ghe%P4ܱF0tqJ3]k3R{%}K
+$Cƾ*H(z&@A pb׽ GIPp
endobj
-5815 0 obj <<
+6170 0 obj <<
/Type /Page
-/Contents 5816 0 R
-/Resources 5814 0 R
+/Contents 6171 0 R
+/Resources 6169 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5801 0 R
+/Parent 6131 0 R
>> endobj
-5817 0 obj <<
-/D [5815 0 R /XYZ 85.039 781.388 null]
+6172 0 obj <<
+/D [6170 0 R /XYZ 85.039 781.388 null]
>> endobj
-1922 0 obj <<
-/D [5815 0 R /XYZ 85.039 761.463 null]
+1954 0 obj <<
+/D [6170 0 R /XYZ 85.039 761.463 null]
>> endobj
-3023 0 obj <<
-/D [5815 0 R /XYZ 85.039 647.5 null]
+4128 0 obj <<
+/D [6170 0 R /XYZ 85.039 657.513 null]
>> endobj
-1926 0 obj <<
-/D [5815 0 R /XYZ 85.039 647.5 null]
+1958 0 obj <<
+/D [6170 0 R /XYZ 85.039 657.513 null]
>> endobj
-5818 0 obj <<
-/D [5815 0 R /XYZ 85.039 618.764 null]
+6173 0 obj <<
+/D [6170 0 R /XYZ 85.039 615.228 null]
>> endobj
-1930 0 obj <<
-/D [5815 0 R /XYZ 85.039 492.295 null]
+6169 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-5819 0 obj <<
-/D [5815 0 R /XYZ 85.039 465.681 null]
+6176 0 obj <<
+/Length 2977
+/Filter /FlateDecode
+>>
+stream
+xڥ]oH='s@}J]<J1F1<ܯꦱqripp%~* }eM},0P0tp>/K.σ|~$~ź_ן}TJyQ_.W̻ e]3~Ȼn(>⒏7߮׷ ڭ~z*0 `Ob%ۋYR</x՜0 2<J^Xq"}O2@JI{Wеp+js寲1a20Ӏv5qU+UP<M!@vZ} G_Uص}00j
+Y˥+F<=#b$ItQV!c•;i1-
+0t,4}U:yچV:;J+/KaB7[ WfB9eB$*J/ NdE&PQil%
+A:`ŞCvZX~@[9gm/U;)9CA (8'ʖsqPrQl"Q ֏Y?.
+0h o)a>z;GDZvB'q_ ;5B#2L,4[JI:Fz378 6snPl+>ޠ۶B ZF?C+; Yb?$=ɩ\+*
+P¦ReB(1 6 &gDȅy>1:*/
+Yl\{\uxFuŠynq>
+Hc F~d"
+1tրFr̛\SAi^XI#1Oeq(kᏹT~8"?
+ /(;IN/5endstream
+endobj
+6175 0 obj <<
+/Type /Page
+/Contents 6176 0 R
+/Resources 6174 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6180 0 R
>> endobj
-1934 0 obj <<
-/D [5815 0 R /XYZ 85.039 171.674 null]
+6177 0 obj <<
+/D [6175 0 R /XYZ 85.039 781.388 null]
>> endobj
-5820 0 obj <<
-/D [5815 0 R /XYZ 85.039 145.059 null]
+1962 0 obj <<
+/D [6175 0 R /XYZ 85.039 761.463 null]
>> endobj
-5814 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F14 2895 0 R >>
+6178 0 obj <<
+/D [6175 0 R /XYZ 85.039 739.701 null]
+>> endobj
+1966 0 obj <<
+/D [6175 0 R /XYZ 85.039 382.411 null]
+>> endobj
+6179 0 obj <<
+/D [6175 0 R /XYZ 85.039 342.247 null]
+>> endobj
+6174 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5823 0 obj <<
-/Length 3424
+6183 0 obj <<
+/Length 3038
/Filter /FlateDecode
>>
stream
-xڥZo8_ ld1]\\ l)rf7d[nw7^^f< 8.WrM#.B.  ?Ń,߽_o?ͮ8П]v,>]ϲ[}~|3=5? Syvŀ7?^]we|Ƽ.~3, ^~g/0/7&o./`\bLќqgq ~z?I*nәh,ʼkBl*>g7{hSg̼jňAh0z%f.H8-i5^& ]!f Ax'};3;dFr/J{K`4-S( ٵ> eLdA1@vM xю ~eH
-U(#o+<aYgQAԝKV !'/OL hyMfhOē|\A'
- b>߮jAgHnEX9ٳљO
-`3ayNK׺U`^P\Fs_-u6O,uokXg9uNU!ob,Gm{˝7?\ej>>LB?4zb^883O<h=ʥa@VuqxNAV*2duK#sEѣ~.TOP+*'C0KV7(-tb`DW JT zӐe@ôJ ?0.q^oW7@
-d0~}u԰SbnԻf}\F. <Ysa
-c.)XV.B8[~7ʠuT&~b'9~M6j1) &+5ts,FŭTlnK ÔzB7:RR!Jօ4ЋmdēNEglBPaHpxDSS.Vi3xL DںAm)k"9e-fUrgwʺbd'33~,Yo2ا=|8uŖ:s; ?on"s)E.CSd
- D
-7R >G,Dߵ$gv F.>@[>0}Մ'qv%#ǽ5z##a+`Dn5)"O: *EMpBTlE3qL-bN UOSJ;CWGp(nxGD^jWY^lIʬ+\E q[.,A;2/\
-sV=G1 7FbL/7v]sRNXVk(ʉCv11ac'RwDl ,D2&$V].DKL-ԁ SiB ! MCj(/ƬE㐗'K1`@@6
-<hx䎦DyrL4;e\4]oQdsԞ6.)_l5)Hm> T7/lFhR+W8vUAO(".ڰ<US6ݘ-PMg,*L߱ (q;-xi<,]yJrS'Jf.y|O9Cf
-h5#!=R]8~~M5ι+wxKS0Q8wFόvߣJ8noQ8"G$!2Vbs\\2穷b"g
-Ejxធ=/+on0.:7jn=<Џx9Ft6n'lV4]d*Uմi>Qjx0>~ĽΦyf>0wW3w ,8hqjc
+xڥYKsHW6TU){sd'k+C[%V(RCRv<~hzrF@ӿϿLc $0M/ rE#c,χO.O:|s4 C'4IRw>Os?dG4'!||'I:טra^~k&t]wva^Ps}\xn//./%cѥ:8L8 '{nEN^tE]ѯ)I9&(EC>Z-
+mCz$3˼=t 4Q u4yvW, /lm<a.ȚםҌ)w:p{j@2@PX' C*UH^x_/?Iiu0P촯mǫn)Զ3Y2fhw?FFX[7,&Vt^e=.<>}^*
+]ߒcAKIElfMe}^H=08-I4}*݊÷ΖrfeO+~eFpg ho؛#]=>rk)&P
+KtҡF $J2l$ofR^
+P<`)gBB7"R8(aڛZvԑz>YQ!n^ w M^02Cr,E[c@Ǘ1Y .L:%{@gɢDq<JT1cEpXJEdN)2vջZ)* i<]SJrt5)R bvt54|i^~c4] Fi7Dsh;<R!RQ ڜMW^9>Vز=]]5Ls
+X^RMh>SE3oA-ZH;Kϣ
+)h.!v MRHoA| Wی<`'OG{[6 @J2!S?¸\4fӿV&Xii%LA ZXT"af\j'Oy5`CMH#vU)߽
+#$]0dsZBawm Uwa5Zd5DM3z z37]OԜiW~kaEF3I:G)D/xc}#"Y&5z<HF롐&i9ϱ=qlF
endobj
-5822 0 obj <<
+6182 0 obj <<
/Type /Page
-/Contents 5823 0 R
-/Resources 5821 0 R
+/Contents 6183 0 R
+/Resources 6181 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5801 0 R
+/Parent 6180 0 R
>> endobj
-5824 0 obj <<
-/D [5822 0 R /XYZ 85.039 781.388 null]
+6184 0 obj <<
+/D [6182 0 R /XYZ 85.039 781.388 null]
>> endobj
-1938 0 obj <<
-/D [5822 0 R /XYZ 85.039 515.724 null]
+1970 0 obj <<
+/D [6182 0 R /XYZ 85.039 691.864 null]
>> endobj
-5825 0 obj <<
-/D [5822 0 R /XYZ 85.039 495.134 null]
+6185 0 obj <<
+/D [6182 0 R /XYZ 85.039 657.724 null]
>> endobj
-1942 0 obj <<
-/D [5822 0 R /XYZ 85.039 356.955 null]
+1974 0 obj <<
+/D [6182 0 R /XYZ 85.039 505.996 null]
>> endobj
-5826 0 obj <<
-/D [5822 0 R /XYZ 85.039 330.341 null]
+6186 0 obj <<
+/D [6182 0 R /XYZ 85.039 465.833 null]
>> endobj
-1946 0 obj <<
-/D [5822 0 R /XYZ 85.039 258.758 null]
+1978 0 obj <<
+/D [6182 0 R /XYZ 85.039 367.151 null]
>> endobj
-5827 0 obj <<
-/D [5822 0 R /XYZ 85.039 239.886 null]
+6187 0 obj <<
+/D [6182 0 R /XYZ 85.039 334.73 null]
>> endobj
-5821 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F20 2865 0 R /F56 2890 0 R >>
+1982 0 obj <<
+/D [6182 0 R /XYZ 85.039 143.325 null]
+>> endobj
+6188 0 obj <<
+/D [6182 0 R /XYZ 85.039 106.459 null]
+>> endobj
+6181 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5830 0 obj <<
-/Length 3547
+6191 0 obj <<
+/Length 3178
/Filter /FlateDecode
>>
stream
-xڵrF]_K*08؎WXZLyy 2H08U~@BJR)9zzzzzH#S"I}Wb;y ]/pp{ne@/Λ\߭}ZRNU|^Y{?}|Fo:xg}K>~\ޭGB7/z,]~-Wa(Tүe\U3lXY$
- ?Qf9#јcЅ#(%t6M'+~[6Ŧs'oZn`a5+CP?8%؏f <lL98K*~$xQPhDnΓP]  H`"0ZgD} `9Y6x߆y"-;nz$>Moou@!5/ecSw<DtU
-ȜFu |n
-# C&쿈%z`t F`@ >͟t 6UɄwu_!cwaB҆ :KQ'
-H;q8?,a(Rz]Q'P("Ci2\9UP1XV m2GAD
-c}-yAZnԅWs?M#x爅rSFpr6Dx ;١Mx/OUH)JQL!Z0(gH _@ Ԏ.?SK$N^`.c2OSUpLFψ8^0Oy,WMSG|>G.KDgZ'x@$i4bߜm7i_-i
-0naBMSRb<w|C͖_'G uB"gQ*k['%yiTy&;<{lKYH*ĵW^6 7!Ēn
-4t4Npc7䛳MJ[1 _{7}Yk@c5J sH$&)
-X
-|7nVJU+̀b<[rhx"꣈xL\HUȾ R9PC`{hQ%aq߿✚ɳB u)ZXFdVEl!YUjz 0ٸ+橫J5C
-bTuFNw
-c춎qz/37__ݩ'(H 8endstream
+xڥr8_]Ѽy<]OUةl<@"%Bz~HTJE
+u_f
+OEa>N|B5M\˸'/+Ҁ*t`:Ȳ
+m8qwߨ㱨<6=h.J
+MݟS0/| l&$ݡ5 au2U#LНָa
+cHGP|Aк"n/`k яs2Tsw!a!y^8ԩUۭ#C\%Z|:yE):j0ZBI@v<lT3ڻkV%JA{i PZ@f70qOx uy WHee;p@SkShFtzGV\F˒;&0t|bJ"*g(ZB~82:!TVVU!^U"pع9LyC$Ae-OMzkGi/6)~q$%B[J wM]( F 5FyǑ{{W$0BvY'wX_Ǝ)nXi b;uՎc.&7 \xh3iz 5미$&R!Jj7`,;+E.
+1ZdZV{y=xh8 1@luTk'~
+ĘIR;ךQ:q IF>.)g!(k'R#s
+J.]BLK;bJWf3f| c_ZHd,GFyp`,*wH{\́oG~̾4蜽 ]A5vs*r^.SO4 G]>e=u΅ kqOqCϕ@֋ fLIrcT̥? VIBηx:nqG7'8̎A4dWm#G*TŠƎAң33~h.p m?k=B6'vfG$umps6h iQ]
+ ;%?t( 9yT!
+)9$IЪ8$Uɻ!v
+ћ$Lؤ\5d"Tr["
+"ӄ-:S~HʎȬQI9͋}J@/NfL7SKMR A8M+jK۟<:q\&hnfT")XQ7/Em$*ošye-'WK<*|s6
+t&
+^p8eo{^ ?kO-(,?](!$KiA NzIҥendstream
endobj
-5829 0 obj <<
+6190 0 obj <<
/Type /Page
-/Contents 5830 0 R
-/Resources 5828 0 R
+/Contents 6191 0 R
+/Resources 6189 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5801 0 R
->> endobj
-5831 0 obj <<
-/D [5829 0 R /XYZ 85.039 781.388 null]
->> endobj
-1950 0 obj <<
-/D [5829 0 R /XYZ 85.039 761.463 null]
+/Parent 6180 0 R
>> endobj
-5832 0 obj <<
-/D [5829 0 R /XYZ 85.039 741.134 null]
+6192 0 obj <<
+/D [6190 0 R /XYZ 85.039 781.388 null]
>> endobj
-1954 0 obj <<
-/D [5829 0 R /XYZ 85.039 658.326 null]
+1986 0 obj <<
+/D [6190 0 R /XYZ 85.039 719.568 null]
>> endobj
-5833 0 obj <<
-/D [5829 0 R /XYZ 85.039 639.454 null]
+6193 0 obj <<
+/D [6190 0 R /XYZ 85.039 687.147 null]
>> endobj
-1958 0 obj <<
-/D [5829 0 R /XYZ 85.039 182.516 null]
+1990 0 obj <<
+/D [6190 0 R /XYZ 85.039 203.111 null]
>> endobj
-5834 0 obj <<
-/D [5829 0 R /XYZ 85.039 161.32 null]
+6194 0 obj <<
+/D [6190 0 R /XYZ 85.039 168.365 null]
>> endobj
-5828 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+6189 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5837 0 obj <<
-/Length 3512
-/Filter /FlateDecode
->>
-stream
-xڥZ[o~ۑeyq4u9HKl$R%g%%N€;{ݝ7
-f>,h9Kl]5?3h[#w/~O(a].4~2̢iQ?fP׏'&_AN|x{?oa<D`ϋ~g ߋʾ,݅#/6ַ\"mf&&aa؋p|/ˌ; 8U}. „f~JlC-j)QN1ټBϼZ:_;@z =u}uOa:o!/33~c-E/J;3w}RP=ykŞ{[Ki,n0S'V;YsYB;*Cqtdɶ-5جMc2P fMt 'b.>.Kd/ j {jhyYȪ:?Z;@8a[>]>1x~rFi>2Y*y2=%idӫ"*mHI[]asU+
-BAH;+:7Փk^H}EVPdZ1aR;L*|`zB-LL787Ҭq-OUH,}+!
-HAy,7ftz,p;GC{ \-Z'2Ԯ]jJY$ =VLLD.fGRZm!#,r,SZ63w{埬m)sSP DyԏS k;'/:M4`螥d" a)a"=lT莑ho9Fk_Keo'֙ɁmUiTlx {.ٱK~Oy7aNT&a Bo::!_tZae5-9PٱDŒ޶Z,5{Bv'%MlEwP:l;0΁*[-ŀ?C
-}7i0RJԥ14D4j+uEh&A%4dN1a/1lc,oc3Q2 h
-=U5gW0g+jJwjBNo&O 'oj[=\uVq"/#e<Lba`а99&t
-#Xؖe /͓F yKX
- i?#q
-EQm;*iɨ3p
-
--2@gb±镦xqiu)10bSr<+߾VJKsP=om4p`qWsyD|@7n/.T}UyM FBE|>I=HYPmwby>e vTi>iRft& fC.ÓH&NA3,y/@" l_O%a V}6*RQ hibs peWo^
-"ɱxRA]aVk%np2
-GjBZ&΢o/f
- X7"E93Jr(!BO-O1<Gh*:h\Աx@k>j9dXˏa4t=k[nCBBзд0́:0ےYbuO{6D40jl3gQCHbʹ|vF읓@G,nϷ .F(՟"T'z|(5#
--?")Hh ?N
-(,-`G~&lzfֲ(sW>D%J":dV,Uu;J1o&JUh sYxs,\endstream
+6197 0 obj <<
+/Length 3296
+/Filter /FlateDecode
+>>
+stream
+xڥZs6_P31MͱӞ{+δ}IZUԇs77 ,߮_x~,,;gf~> BH.F4g?y`~x։}G7W_fQy*giyл]݇ۻׇQx;_T]#w_>.nkfyy',yvaz}>{8[9sSFe~E#ڈ?4i{&م]W*3HkUaAv$5T<mFoM 7m
+&$^n*!~rk>*񒩟QW)W|vEC SOU+x7x=G Cx8Lƶ^yW͟Ҿ1d0q)Jtw0^{ آdLHc/m|`I\_Vg:pu!gvZp t8\}ٮHKZ9Ӗ ,gݘBFⲅF#%C<Bϐ)+ ٩[ *ײ"_N"⧐9!6Ea=RFvS[VuxZ1~zv}B<GI $g_!+}EzC)hy%&j 7xvIq!
+)8Nܪz̴OP>8EDesQtۮъ<M
+ mʿU.hۤCw욞ew1f^זrMG=nD t]AT*M,Og׵M䥢H|Vf\f˰E㐚=C;Ia)r""1~rd-WI;VQX]wl:LYrQrC >25ȡU]/#[# X w+('Ӊܫ.V#6[n@~ҽrDR"háNZ3%Js$6 DXԞt܈*)YZ<T2\K
+Fq*zhN[?&noV^@fyJ(zqhNT@(~HWRH0tX3to³t *Hh~ZDʲ
+v@0[fh [~~:k!!$znkY#_Ykp[_6'cRgA%
+,Ȁ{ע@Y 骇.$b>ɳm~xXZ19L
endobj
-5836 0 obj <<
+6196 0 obj <<
/Type /Page
-/Contents 5837 0 R
-/Resources 5835 0 R
+/Contents 6197 0 R
+/Resources 6195 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5801 0 R
-/Annots [ 5842 0 R ]
+/Parent 6180 0 R
>> endobj
-5842 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [250.936 169.022 367.444 180.712]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jtrostel@snapserver.com)>>
->> endobj
-5838 0 obj <<
-/D [5836 0 R /XYZ 85.039 781.388 null]
+6198 0 obj <<
+/D [6196 0 R /XYZ 85.039 781.388 null]
>> endobj
-1962 0 obj <<
-/D [5836 0 R /XYZ 85.039 572.649 null]
+1994 0 obj <<
+/D [6196 0 R /XYZ 85.039 572.649 null]
>> endobj
-5839 0 obj <<
-/D [5836 0 R /XYZ 85.039 549.331 null]
+6199 0 obj <<
+/D [6196 0 R /XYZ 85.039 535.782 null]
>> endobj
-1966 0 obj <<
-/D [5836 0 R /XYZ 85.039 371.679 null]
+1998 0 obj <<
+/D [6196 0 R /XYZ 85.039 357.523 null]
>> endobj
-5840 0 obj <<
-/D [5836 0 R /XYZ 85.039 350.482 null]
+6200 0 obj <<
+/D [6196 0 R /XYZ 85.039 323.384 null]
>> endobj
-1970 0 obj <<
-/D [5836 0 R /XYZ 85.039 212.304 null]
+2002 0 obj <<
+/D [6196 0 R /XYZ 85.039 185.205 null]
>> endobj
-5841 0 obj <<
-/D [5836 0 R /XYZ 85.039 182.899 null]
+6201 0 obj <<
+/D [6196 0 R /XYZ 85.039 142.252 null]
>> endobj
-1974 0 obj <<
-/D [5836 0 R /XYZ 85.039 102.678 null]
+2006 0 obj <<
+/D [6196 0 R /XYZ 85.039 142.252 null]
>> endobj
-5843 0 obj <<
-/D [5836 0 R /XYZ 85.039 81.685 null]
+6202 0 obj <<
+/D [6196 0 R /XYZ 85.039 110.499 null]
>> endobj
-5835 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+6195 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5846 0 obj <<
-/Length 3706
-/Filter /FlateDecode
->>
-stream
-xZK6ϯОLUY4 Y{+̬(#L
-Iy2~IrryH
-T^&I0gдU}k Ǩs,U<vحw!+k&9`+Z6ݞ)2]WW +k{QrzO訳޻(]H,i&=Mt0?D>G\*!A>/o^0s"lĥnL7N]p!}_L怍}/>Yո~OӨa/Xw'о(_9]~Bč
-Ϲ9O \#쑦 )
-'/-7{ݛwB"-a w7l}.oIBHܐDN۾lǺ._P-fT͜x{b)Iهm
-AiZ~33"XsVG=2|Q
-5hfͯ{<f;ݾ9Uh>!8PBa=n|u.!ACA׉A>ZQ懲.ۄ;-'~Caӈ`T-f|'Hv(؃f<=tY{ԍܳr 5f T ASmN#F7̚\= VM+Z~9wBgX .«q`ʌʶ9:cz.b݇vN/VQAfbdpV2d2TY^ֻf-oph{:,ɏUcҠ#vh ]T]]1 ƞzn`&iGg
-||eƸ
-@㚟Bq+@(' [{Uir,'j1\t!ro?Rn V7t #?{RB&rCWE}un>M36y9Ƭ-%OgWwsJR&KHF4=mcWdnUk!)㤆6& IG>~~=[yC}vV50d'`HD܋$+5:MhLl\$L'ttz9dߌIl=SE3 (@mM% |8jY`"3 %Ҡu$#02^ȃ'ӹ񈍌{.ylÞc:HBHWT䇈oLT!`xz)$U
- 'Dֻ\ FA#Bk;Qw #COqӦ-wtʬĎ"CsS>2ؐp;Uf2moh 0N+ )c580 ԥJ#x3pv [
-w#Tw^ 2cV ]Ai S6ELifp$x=wgiumQl itkX'Uc|@=B%Lxnh<1'Mry_ ~JR)=L|rȱ1ұ$Ȟ:#NH>xvpꋋ E.X7ܠswH7{냨OZm@wh(ϏO^ UQ`# vUÐ ;FE֐jmC3"0}
-,Akad9 )d'5 қ*(JuWKf/EZ"%9A`-4ԅ7 mIPXR36i=,]r(`&WrB "peɣ촺<g^p֔}57TB,g4.{}mEnh6Hsq48`#Zm.1F|Ҧ-_=Pؖ7,"Lt2/<?;}=
-r
-Wu| 6CSN>Nd!"<g^֜9x0h^b<x2;i>ˋEiȸ-kUhyB'Bv0y4HZADKAdLf:\Pb2F;럭BfFM[HVMZ)!om$->Ѻ#
-NYJӠq]}t8/)8 [_ ?o~@co?*u5endstream
+6205 0 obj <<
+/Length 3098
+/Filter /FlateDecode
+>>
+stream
+xڥZKs6WhO,$a8Sc{ǚ!-˔T (akjx4F?&)̲WQ>KlڞfsBH͇ŗ8U>[>|b_lY}v|E|w?"?\]'лn]^]srfG\nK+Q~MJ8/gʏlm0=XGokYS0HYWXXi08
+ Tk j*HOl0;cΎAGA8~
+JSߴv׃CCaSF.Oa+PrZЧW4MWB}\W^q>\
+ew0+oY mǓ=|yVo +Y7o7soW.d䩷)"
+c:D U{ۏ&iC-2`Qp?Xi[- ZԶ{J< FX!Gpfݺ#δ=TiX?2oE)=Olg{>ooxr~w}ˡy۷ {Z:o;oāȷ@^UnІwU8oQ;r<1w<1cTfn8O{DkFhbQ=G$?W t}nP8r <A:6ւ)t#,ňd]ɍp
+=; $8T}ݼD BZHuWHŢ?(`8]叝x;vDGk[mGWTFNMupn`Z.,yYf0WA<) OQG-M< +V>Op~нD"kD-^+%LDKA Vpdne9r_P
+0SV34}794SB Tq
+HMb +}bvdj ić,4# I31O!7$xVxi(h! >Ljwx`Ɯߵg qw`)Wv>GI$ ~rpo&D(NA
+d
+RF '84v
+c*D
+jS?Y K6Urzr@UdBI&k[JCHVH GD<Bt!ƚ?|jr,QS69‡B2XI6(+RNT^J.=g74[W.2*s0o8|$e?9b_7+Ph䏺tjneJi£ q"+ܰٯc
+捗):^ĕ1`H'%Y9=uw
+̌3Р*WE+?eeP}e;, /hZ~+!8}[ ٤g`|аR>sw`RC*vlUc Ro= R"CJb^tQ@LK|-}~$bzRqӋ)`4ܑJݴ[V_@ZP"~\x .+aBZ8]ˇIYn-мF)'>e!<1jd"B7h'0%eC7R4o8*$܂6FJ30v:gEϔg8*du`U Y5@ q-D:ҡ [t0zBӒٚO$l2ցF5#K:|Hৼ@Nq"/e;Jp9lzN rCiNR昞9 ;.#ҕ_fmyIld:IFE椞ԛ8 "0ҙDCΎEQK+m %:z+Ձ4ϔkt y<Q'ca@uĩa! [4}iuZthm$(sU&tJ_>'" t\g_]`_ rX _`z"+ n:f}RQbw`@ vttqHN @*5< {&[a'3HTsaG9G1$Ux283樕y#d˭zgfGSF^ε)َӚX:ΪG0fJt8:Hea㯕b)?<![#͐:(? cPK,x(卣 Rlt,_ϲ"endstream
endobj
-5845 0 obj <<
+6204 0 obj <<
/Type /Page
-/Contents 5846 0 R
-/Resources 5844 0 R
+/Contents 6205 0 R
+/Resources 6203 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5852 0 R
-/Annots [ 5849 0 R ]
+/Parent 6180 0 R
+/Annots [ 6208 0 R ]
>> endobj
-5849 0 obj <<
+6208 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [348.805 382.959 464.335 394.648]
+/Rect [218.337 385.948 334.338 397.637]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.org/)>>
>> endobj
-5847 0 obj <<
-/D [5845 0 R /XYZ 85.039 781.388 null]
->> endobj
-1978 0 obj <<
-/D [5845 0 R /XYZ 85.039 526.891 null]
->> endobj
-5848 0 obj <<
-/D [5845 0 R /XYZ 85.039 505.694 null]
+6206 0 obj <<
+/D [6204 0 R /XYZ 85.039 781.388 null]
>> endobj
-1982 0 obj <<
-/D [5845 0 R /XYZ 85.039 262.418 null]
+2010 0 obj <<
+/D [6204 0 R /XYZ 85.039 584.077 null]
>> endobj
-5850 0 obj <<
-/D [5845 0 R /XYZ 85.039 239.1 null]
+6207 0 obj <<
+/D [6204 0 R /XYZ 85.039 549.331 null]
>> endobj
-1986 0 obj <<
-/D [5845 0 R /XYZ 85.039 115.645 null]
+2014 0 obj <<
+/D [6204 0 R /XYZ 85.039 263.285 null]
>> endobj
-5851 0 obj <<
-/D [5845 0 R /XYZ 85.039 95.05 null]
+6209 0 obj <<
+/D [6204 0 R /XYZ 85.039 228.539 null]
>> endobj
-5844 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F66 3242 0 R /F20 2865 0 R /F69 5128 0 R /F35 2880 0 R >>
+6203 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F58 3365 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5855 0 obj <<
-/Length 2183
+6212 0 obj <<
+/Length 1889
/Filter /FlateDecode
>>
stream
-xYYF~ׯKQd4 QIhD E*$,ǧ.RDgaVu|ǙϙFu< #G(&=#Svd.𦎭b;.$LOr5ad-߾9֧Y7<`{u͟>~?|"1 oo^8f@@O~͞p&q4}8&iɏ.<MyՈ(7uoأo9URku\jg2n%Efʡ.[Dv7*16{~w`C@*Mk5׶vXnf6w=z l Zz3PCbCS#Q ^pfYo8 \>YzQT)٭̈Ᵽ؁!=2>Jcg[ںȼ!(Ra=V Z J@|ċͫCܱ5>Du VB8k-ET|6Yh2\Vw|){jEht=tJ蹔3drh g5\,rMg:jd#=Lp,%{֪KHIH$_qZ`
-SCBjW9M"^og оZa+:D1K4N졔n#
-{eEj]U@EW_DcoyӣWOr$U5OGbsknI=YuNJԸ wC͢u-Z@@_`/82<e g[aK/tjiכ2a6~R )-軕6rU}`tވMp!Ryk
-Bո.ޗˋkõ(y,8ly-,0)ܯͧy>. Q1U]l_j{l|]IOޮ.8f~^f{]XGb{HsES&y<kcܗ(0m誖=)z< y;Ft V&=ة^)wx`έeR71OgUN ΗWt04_Y ǦCf?R§+:Bt`18!0E(Ss nimoy4o閛tDuТD"̷yIhKC5ixR
-!}5vр^_t b ;Ig74O w!,w+(x bNc4gQBOHlEq%p$K}2!0 P
-xR*03`$%k7&LdK% N-lچ[]^-
- ?p H Ďu\%Ê> =G7WX n8xl 3EE\"6  +OL+W\h陇 E[ $T}bG%݌|llD;B2̮G 3*ut?ݹd$Ϗx5- Fž6f1 \o Ȯ
-UTr
-WoHpsMm?ʣ&Kࢧr]uu\_:^h%A#G*9qn]| SBendstream
+xXYoF~ׯЇR@.
+'9MFq^L Wevu]a=6A?nYK'#GdZhoU,6DXOd'/PlR3ٰ)h
+z(i3j>aCC+Sԛ-tq<r7رҫ1.&GPG:,)\߳i:ϺimBeAd
+<*9`,Bm3)\sAldygV/
+`vK!ҡ_)P`
+=$OoCA";bTӟxDp•/YYeH,G9.N+&
+rYiK/.8f:/ phCrJT˵Rֶ
+ZvmuBa XN|Iendstream
endobj
-5854 0 obj <<
+6211 0 obj <<
/Type /Page
-/Contents 5855 0 R
-/Resources 5853 0 R
+/Contents 6212 0 R
+/Resources 6210 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5852 0 R
+/Parent 6180 0 R
>> endobj
-5856 0 obj <<
-/D [5854 0 R /XYZ 85.039 781.388 null]
+6213 0 obj <<
+/D [6211 0 R /XYZ 85.039 781.388 null]
>> endobj
-1990 0 obj <<
-/D [5854 0 R /XYZ 85.039 596.758 null]
+2018 0 obj <<
+/D [6211 0 R /XYZ 85.039 761.463 null]
>> endobj
-5857 0 obj <<
-/D [5854 0 R /XYZ 85.039 574.042 null]
+6214 0 obj <<
+/D [6211 0 R /XYZ 85.039 741.337 null]
>> endobj
-1994 0 obj <<
-/D [5854 0 R /XYZ 85.039 188.565 null]
+2022 0 obj <<
+/D [6211 0 R /XYZ 85.039 220.674 null]
>> endobj
-5858 0 obj <<
-/D [5854 0 R /XYZ 85.039 170.092 null]
+6215 0 obj <<
+/D [6211 0 R /XYZ 85.039 188.652 null]
>> endobj
-5853 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F56 2890 0 R >>
+6210 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5861 0 obj <<
-/Length 2799
-/Filter /FlateDecode
->>
-stream
-xڵis~+OpvEnd= p
-=rQ* Ѳ8F+X:S{z~6wG2#+h<lia~q<qǰ9Ah\_^q6c~y?zp
-B7v7u*b<C#A` 0(IT2j噡
-MӶy鲭~Z@QR˻
-Y- 3Ugd P6R2FFXE lubQs1>F)Z`\F-XR-$T^U"^˧tڬI@$Ɠ 2zIsc06DjO7P@
-A ү޳Xn@Lj9΋7#Yd-̭ڊ[B^R _="CA!5ʔh
-ok֚l
-ϣ|ߨpwB6'4y\oSU 3HEjIMpNݡ 1}s㾚%Qդg2TFai:R0uT!,Td4v/2v@*rAdM7&4(O
-7_bh
-!(4 <ȸ+Bxa e"CsdKԒ=Fz<+
-{Zɉ$ . Q6=zm6$ّxrř.#\;ԡ!L fLWABK޾/]qa8W1xē7 P!ZTк8k؃Nĥ7LDa7]H UOBW%vA]saMHy!B;(rLܟ6]lt76ۺRE=վ<q8/
-
-oσO&2W?ۣ )Q&V
-zZ){ jo <y;j#=G
-j9uJ>BcP ג!tbKkT4wQ~yq)C5髗E%6Teh_~8uyFe‚F=Oz
-b
-O
-
+6218 0 obj <<
+/Length 2384
+/Filter /FlateDecode
+>>
+stream
+xڥY[o6~ϯ0R1k
+|NMkì+#RYCg6(}V/pB;O*piz1+Vp&#-VӮ]@tJ5o"[0چ`YbYud|Yɉ#߂2% 6dadl cccog-fvFq6EV(V+xnv9afXղL7<2Jy~ڱ[ %՘P'>rZA!ym|w٠1p:8kso-8}Wc&ڙ~k- ժKz`rYmKL`su⻉NFQQqŅz%vbt)>OJ-%vIn{?3F]~,ݵsokr*$yy
+4#hY uu?0- $L:3kdO.,dn NOo~@)z^cSд7E`D9D&ߢb~7le]dWRx
+SłQtme8YcU,TqR"8DG+jÛWªK)~G mS7Hc ~>2ZIK5UŞ_׀m{3ǎ7
+i{j :2Ȧ[2_|LVfHKwJ))rUP?Ҳm6@I ekgtԔ2'Wq5A@ao4y88u#GrC# n1*vAڊ]KrNAK.a~ mc^ˎ%W bFDO )⽨fKsRC hh6Tr#/s+^ŭkBG)f]|p6JTT0 
+*X[؆"Ip<}=# *xA_^󗡁
+|endstream
endobj
-5860 0 obj <<
+6217 0 obj <<
/Type /Page
-/Contents 5861 0 R
-/Resources 5859 0 R
+/Contents 6218 0 R
+/Resources 6216 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5852 0 R
-/Annots [ 5863 0 R 5864 0 R 5865 0 R ]
+/Parent 6227 0 R
+/Annots [ 6220 0 R 6221 0 R 6222 0 R ]
>> endobj
-5863 0 obj <<
+6220 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [381.287 649.553 512.306 661.243]
+/Rect [481.851 649.553 539.579 661.243]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://publibn.boulder.ibm.com/doc_link/en_US/a_doc_lib/aixprggd/kernextc/sec_load_mod.htm)>>
>> endobj
-5864 0 obj <<
+6221 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 636.004 322.762 647.694]
+/Rect [84.043 636.004 353.452 647.694]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://publibn.boulder.ibm.com/doc_link/en_US/a_doc_lib/aixprggd/kernextc/sec_load_mod.htm)>>
>> endobj
-5865 0 obj <<
+6222 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [186.225 622.455 485.324 634.144]
+/Rect [158.952 622.455 458.051 634.144]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://publibn.boulder.ibm.com/doc_link/en_US/a_doc_lib/aixbman/baseadmn/iandaadmin.htm)>>
>> endobj
-5862 0 obj <<
-/D [5860 0 R /XYZ 85.039 781.388 null]
+6219 0 obj <<
+/D [6217 0 R /XYZ 85.039 781.388 null]
>> endobj
-1998 0 obj <<
-/D [5860 0 R /XYZ 85.039 608.186 null]
+2026 0 obj <<
+/D [6217 0 R /XYZ 85.039 608.186 null]
>> endobj
-5866 0 obj <<
-/D [5860 0 R /XYZ 85.039 587.591 null]
+6223 0 obj <<
+/D [6217 0 R /XYZ 85.039 574.042 null]
>> endobj
-2002 0 obj <<
-/D [5860 0 R /XYZ 85.039 300.475 null]
+6224 0 obj <<
+/D [6217 0 R /XYZ 285.296 510.468 null]
>> endobj
-5867 0 obj <<
-/D [5860 0 R /XYZ 85.039 279.88 null]
+6225 0 obj <<
+/D [6217 0 R /XYZ 85.039 279.605 null]
>> endobj
-2006 0 obj <<
-/D [5860 0 R /XYZ 85.039 181.199 null]
+2030 0 obj <<
+/D [6217 0 R /XYZ 85.039 263.543 null]
>> endobj
-5868 0 obj <<
-/D [5860 0 R /XYZ 85.039 160.604 null]
+6226 0 obj <<
+/D [6217 0 R /XYZ 85.039 232.126 null]
>> endobj
-5859 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R >>
+6216 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5871 0 obj <<
-/Length 2263
+6230 0 obj <<
+/Length 1771
/Filter /FlateDecode
>>
stream
-xڵYYoF~ׯShE>R$hm7QiV"%IG)QIH |363ǁv8S`LGx #w#S8Ckx"yAdj۶fdv0ڛ7<#Pho ~!Ꭷx5"fF?>n#Ï#C`a8NGkcK;z;]ǜ10Ա<az8=LwE\<DqV<S{Aωj*XVu<:+ZIJ$*j*>Y'\e&VKaBU"E:*RexyFht $Rm̤V[i!8\
-]V'^]{AIbM*5i/M-mV{'rguYpe&IUY 1[af}FG@^TpicB=ȇ\2y<T& 3ݘ(U]jIö#Ђq(p֨HZ;RD"pb"1ag6MR^r= E@96Gc&wC?X)h́O6eg(FD`2vg;}mf/?SP P4O=丗=Vy>4
-q!3@U_D tt="Pc&'
-M\JruՓȾJdJ3҉O7ח|AX_'9[%ɹPK3*&nf֜ $H+&)tPEx3Q./}kdՙzw:?l-q/K~p6-kYf!6} ^>~2J L)P,":n;xW`TS]{.yyA]7z&y]nh{{F1{(Itdi'Fy+P $tg8>cl7PIS>d^WMmq: P//jKޚv.BLo6Ύ/oY|0@|`p@d@)!z'>r#g2;} y0^鮮Nu/fU{Y y
--q'۶mRrSe*<O7[4*
-H *R̃Ǻw2<YvIGE!tEbdVB5a:V~#xnj?UC>;$ΐ<,W* jPu Im53_h^i[.~ӡ+MJ\eOe-N~ّh|X7gזp1j?S2]oC@6%sջPl>x45"m7.\rE@(\ѿ y3.O2ȣk0MEؼw]us%w/zZ/cŴw ۙښf}~ \^% ۮ;9/w|6MXwS[3Rendstream
+xڭXnF}W)ĢI.)~)|K
+4>@jxX3v0xUD* DK2dXن©S7)t-f|&dCj-13iƱ)0mʈc ]m`=ǬxޜyQ >+QIșs9}cW+jOgmfY
+9Z,'1a/ȼTW4`ô:fU*20X6L*;aaDx4G}j} ,|TIΓdO*]>aNCcR>rTDemP#@Q`4ζ#TbV.#lG8rflJp[8Qh[tJ c'%XT=.I"L*as~늨 2Ҥ8+2%ɉYnH%mN2E{->^#:LRPV9[A~ﶞuLp8L%2 uM{ۺ1')ܔAO|sPW[- ̡!tNluM}/6ÑgJhZ&u񧍭H90$,dAi9B%F9-5,b|qɝEvj
+J_xɖ9`-"Ns^(hi0 9e)yC&?CJ>*Dn).iMfr:nZbiF@u{EU+Rm-$n 
+w];T7ݗm\3{!BՃi sc.To!P2KN"z*<9yA+TDM/\n**<N/8|%E~"SpЅaeڞ xrc NYt֒@\:wf]9M}x`Sd.]r)#߂ŏ,F ĝqSSQDİה'N̹K|7͏\>'Q2GBKi)i8 o9̈́!^^?(h_ԥ'~\$z2BO{۟~$틳ebN"\`
+o'Ϭ}zr^?qV]]ŷ
+{;i \{@K ЄT&UqvmlB0YD( ٝlGkN 77Yud3j;D^zME*tL:W{!NPKC\)\`#701 +Mڽ$%pLu1G_rP$}?8?V~i
endobj
-5870 0 obj <<
+6229 0 obj <<
/Type /Page
-/Contents 5871 0 R
-/Resources 5869 0 R
+/Contents 6230 0 R
+/Resources 6228 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5852 0 R
->> endobj
-5872 0 obj <<
-/D [5870 0 R /XYZ 85.039 781.388 null]
->> endobj
-2010 0 obj <<
-/D [5870 0 R /XYZ 85.039 159.668 null]
+/Parent 6227 0 R
>> endobj
-5873 0 obj <<
-/D [5870 0 R /XYZ 85.039 139.073 null]
+6231 0 obj <<
+/D [6229 0 R /XYZ 85.039 781.388 null]
>> endobj
-5874 0 obj <<
-/D [5870 0 R /XYZ 85.039 139.073 null]
+2034 0 obj <<
+/D [6229 0 R /XYZ 85.039 761.463 null]
>> endobj
-5875 0 obj <<
-/D [5870 0 R /XYZ 85.039 139.073 null]
+6232 0 obj <<
+/D [6229 0 R /XYZ 85.039 741.337 null]
>> endobj
-5869 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+6228 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5878 0 obj <<
-/Length 918
+6235 0 obj <<
+/Length 1649
/Filter /FlateDecode
>>
stream
-xWms@ί`2Œ\86C0%iKKZ8N>{]t*@|FBW!טҠCn_ Q@OJ/_C6#y1};ύpwr8~<8'R ?x״goar3vtLD`xQ__3%,渜WtMW^PhQ˱ q~UvԣnB]*>̴\5C"[ R
-vSPrI 0=A։ 
-=کk~mDـpۄIX,Sendstream
+xXYoF~ׯ Јry)@P8>HiP$yI",
+(B9#Mӗ03;ͽ'ru=KIYG(b7xN;+
+Ctc-vfzחRj{}w=]B=]<f%.Lm|g#^LO;+㷣qs9
+y\D,Ϫ-`_f9oƫT\ՅgvZr*Ș4(,O;0((O43_V,7] Y
+dB_QBT a!sg˂yYS|V݁`7[ !/<{M{kd ";< KnyLo+sٵb >.V}q<޾*p+! G^s_
+}{ < D|uVe/HJZPăB\P=skJK\zx^&b^y8gU!'w{'.
+lҔ
+TD3sd"q<][,jM9,*m
+
+7B>P6\e&eDRLIcyYk;2,Mi j⦱?,GM NhSP q\? ƥ1r(4"cvC]X!/i/Oi~2Ń"՗]<BݳnCޞΚgOiAwt^[,4 s\ۿZLm.eG\>N'"1WK_$8˕H.B?<\ɕHח^kpNkf
+6=!n47<ڟR RR?tA)I^
+CJJZpˉ[;A &=`M<nΖ("TEi {^#Uŝ. л,l\O
+ˆY!NǍ2PˡC$"flzP`m2 ob)p#E+cQi-*i1Ibk;K^
+7usxA y\<r뛅z$S 0l?"}{l^׭''OO#
+﫯N&(<
++NEr*b|3&qɃߎ?fCG?wj4?+O'+|W}Ⅱ~..y#<|ȟxvDz2rg\q?(b]`v3WTY,HayTVyڶ7c4tsx_FK{rxg5D+e?,Lendstream
endobj
-5877 0 obj <<
+6234 0 obj <<
/Type /Page
-/Contents 5878 0 R
-/Resources 5876 0 R
+/Contents 6235 0 R
+/Resources 6233 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5852 0 R
+/Parent 6227 0 R
>> endobj
-5879 0 obj <<
-/D [5877 0 R /XYZ 85.039 781.388 null]
+6236 0 obj <<
+/D [6234 0 R /XYZ 85.039 781.388 null]
>> endobj
-5876 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
+2038 0 obj <<
+/D [6234 0 R /XYZ 85.039 486.243 null]
+>> endobj
+6237 0 obj <<
+/D [6234 0 R /XYZ 85.039 452.1 null]
+>> endobj
+6238 0 obj <<
+/D [6234 0 R /XYZ 85.039 452.1 null]
+>> endobj
+6239 0 obj <<
+/D [6234 0 R /XYZ 85.039 452.1 null]
+>> endobj
+6233 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5882 0 obj <<
-/Length 1283
+6242 0 obj <<
+/Length 1272
/Filter /FlateDecode
>>
stream
-xڥWmsFίPL:I 5vM]gR۵Iv'h,$6'pxyv!,
-|ehdXE[39m c-[Vg BZé6Nn=vs:~`@ 8
-gRM}6+`u`:&׻ED]Zk7|Y+|l*Y_VIQ_Y6bm`"$ |:;HVkos.u:`IVkPC\Uv@4$7gmskxSji\/VlfV jNл7Q ٴ>[ ,5{5}և׳:ї0z8 Ɠ(^ً@۽hxڍqnLsbfb]zcN1E-X g`p1y+{endstream
+xWOH~_aѪ8RzmǩTBz$>
+lH#-\9l0dxI4$wkV9Xzd"98NiEDDz ܓkĸVLj?ZߌScdz"1pŘs<Z0p1 iY$_k%o:ϧjbM@_!ZR)p9澑uB;߽A28|gE#(lx`6kD>U* IyX ݳ(rI7(ouT<蛅arU_  뎔`{Dy4´ pe{6Hߔ:?^1s}OJ_竪J[GI<,>
+Q( |v{)hC,s#rdI wN4%b@3DR (f  m/P-|V&
+2|fiŶU
+ZR!RSlPؐ0,m8Kʜ"c*AhH덬Tci(EYUiIcn/aSf!QOA4zQh#VVo,o lzLv
+?|iSr= %x뿬v
endobj
-5881 0 obj <<
+6241 0 obj <<
/Type /Page
-/Contents 5882 0 R
-/Resources 5880 0 R
+/Contents 6242 0 R
+/Resources 6240 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5852 0 R
-/Annots [ 5886 0 R ]
+/Parent 6227 0 R
+/Annots [ 6246 0 R ]
>> endobj
-5886 0 obj <<
+6246 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [362.947 691.474 416.333 703.163]
+/Rect [335.674 158.672 389.06 170.361]
/Subtype /Link
/A << /S /GoTo /D (winbind-solaris9) >>
>> endobj
-5883 0 obj <<
-/D [5881 0 R /XYZ 85.039 781.388 null]
+6243 0 obj <<
+/D [6241 0 R /XYZ 85.039 781.388 null]
>> endobj
-5884 0 obj <<
-/D [5881 0 R /XYZ 85.039 708.141 null]
+6244 0 obj <<
+/D [6241 0 R /XYZ 85.039 188.887 null]
>> endobj
-5885 0 obj <<
-/D [5881 0 R /XYZ 85.039 708.141 null]
+6245 0 obj <<
+/D [6241 0 R /XYZ 85.039 188.887 null]
>> endobj
-5880 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F20 2865 0 R /F15 2876 0 R >>
+6240 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5890 0 obj <<
-/Length 2568
+6250 0 obj <<
+/Length 931
/Filter /FlateDecode
>>
stream
-xڭYoFBhPh]rIn4h8ŁigJTInл"EZc\o^+=OD If?[ț3-3YЋ˳(i_9.iew_/ VE'Woڻx>OKݛw@}
-<4Viɚ_^]O=#ڂ1n !jþ
-XEn{ݠ`&Nl7_=NgxqV.{7C?P7@r7#[)9X~tv@G -Ume
- T! np}ٛ,(~b3k;=Ŏяr0?o$&Gbgb]D6ͤU<G$^5XAxUHyNg,Xp)
--֤0R %U:5ƣ..L[]}w%xZJISHLQ}Gy
-OLn Ub'LG]cKyFPw LZ(vL.
-(LUC8b>M רmԘզSB61Eԇ 
-AMP,=Hq֩>ByXNe^.T*W
-sR9}{5!hWJɐA2IS USwDYW6L܍m" \ ۍ1A0UyPz<{\W~
-cR+.{^~( }rQjtuC@BNmtRUu#?1RcblJW`9,YL:ұzԲ+[$wIQhCQމhR~JdgƂ5 oU~=k" CKo$k~IAӱ8[UTVam!CYXKkJ`hMb~*P}]QXhwY,
-W؏N%R@M}R Ѓ9`'t
+xڥV[S:~ `Yi@za@9S+/4i߫$0j/e1Ca:2 ,3wQRq6t{M>5uC)<l'BMS!t2~-@xN$}`{u&G痓}=}oO}1HQh?O ƕ LiՕ v6 =y ||<ӱ 2ێ֕<]ҽIr]k{"@yu˄`ckFRyQI"+Vyڜ1NIU˜<@},fG3lgHJ(ʘ
+ ct2e.JrB4bQYٴf\/̴u[BI }@{!ꩊUw=]xqfg~$T.\^VdɾRG;/T(ʯYę(W9`7Un|v'UB45PWZXx5M*)[/uQ-bTmg`db#IPxקVWZ̢ԭ3,{-6V~ˉpfE>oFvA<j 5톺E;DLrSaG,+gqG(oDӇϫ9ŔjB_h+(W%쵪fn'e zטz=x~
+* #@"Ȓ\1xRň^B 3HB%:Q O׎b䍺uY ̐]U0X JxZ'|endstream
endobj
-5889 0 obj <<
+6249 0 obj <<
/Type /Page
-/Contents 5890 0 R
-/Resources 5888 0 R
+/Contents 6250 0 R
+/Resources 6248 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5897 0 R
+/Parent 6227 0 R
>> endobj
-5891 0 obj <<
-/D [5889 0 R /XYZ 85.039 781.388 null]
+6251 0 obj <<
+/D [6249 0 R /XYZ 85.039 781.388 null]
>> endobj
-5892 0 obj <<
-/D [5889 0 R /XYZ 85.039 566.671 null]
+6248 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-5893 0 obj <<
-/D [5889 0 R /XYZ 85.039 566.671 null]
+6254 0 obj <<
+/Length 2246
+/Filter /FlateDecode
+>>
+stream
+xڭYYo6~_[usn$3AH,m:::Ong, ["Y,UQ[~6mIhVg{+HMak{Ff[؉7/<_mo_߼ǝ\)vvF;i]liuW[|qx͇_^;7^~zsۛQh&F@o7Pq}wGHX6 =zȊ׼-Z3"G_E`=KQcvCOxHWh;5?PBFT@ݗM.nmQY}׷Wl?32Р<Ov
+.R g04g,\ @ġZpu
+L mXm%2WAlƷlPVH(@yipC,wE;`"a
+0I+Ϡq݃#,PpLɓȮZ|d0
+8$"OQV1"7#2Sc4NBfhGIuG€R)j{SSk'@42("k8tŪd$mM@:D һ`)#h@]wJzk^yMpe
+]]DՅ^R c\<a3
+!1
+fVqscbG!EA`
+{ӭ ,0.Dp1|VrCs&¼JBz ѹLɒv'c@/ނ=Rs830=/-2|ɩg#<r!#5eL7Wc_s.~l*yvrI{!~IzfsaQ?3I: *Ї hPsI+JQxki^
+_|i=x!vHaluš `Y#Ln1h
+dP s\RNں)DTtNKm*M`8~RR}BS _n> !38]lo
+endobj
+6253 0 obj <<
+/Type /Page
+/Contents 6254 0 R
+/Resources 6252 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6227 0 R
>> endobj
-2014 0 obj <<
-/D [5889 0 R /XYZ 85.039 508.637 null]
+6255 0 obj <<
+/D [6253 0 R /XYZ 85.039 781.388 null]
>> endobj
-5894 0 obj <<
-/D [5889 0 R /XYZ 85.039 488.042 null]
+6256 0 obj <<
+/D [6253 0 R /XYZ 85.039 678.053 null]
>> endobj
-5895 0 obj <<
-/D [5889 0 R /XYZ 85.039 309.581 null]
+6257 0 obj <<
+/D [6253 0 R /XYZ 85.039 678.053 null]
>> endobj
-5896 0 obj <<
-/D [5889 0 R /XYZ 85.039 309.581 null]
+2042 0 obj <<
+/D [6253 0 R /XYZ 85.039 620.019 null]
>> endobj
-5888 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R >>
+6258 0 obj <<
+/D [6253 0 R /XYZ 85.039 585.876 null]
+>> endobj
+6259 0 obj <<
+/D [6253 0 R /XYZ 85.039 353.217 null]
+>> endobj
+6260 0 obj <<
+/D [6253 0 R /XYZ 85.039 353.217 null]
+>> endobj
+6252 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5900 0 obj <<
-/Length 2165
+6263 0 obj <<
+/Length 1447
/Filter /FlateDecode
>>
stream
-xYoFBhPEq|0pm8ͣH&)0UT|X>$qR_w0 sv33c1wO#vd<#a(̙oaLܳǩ׳ ǎxВu߽Y?{XJ)-W؋eFի anIk)k}=z_޼oiW^_^}Xg#cwg ?[ڎ-x^<_ھ'MS9oλ&`XzNl;Q 8NOu/[9Y_= vC9_J",,^Z@q[ͧ"#¯n[u;h6
-8mhJ9 @ۍ,7VRj\n9mθǧV^7@M>O΋d'-)})
-6O^KR2`lgJh^37fKR6IF0y< g0I=O̐k<nKmh8*:DwXh/Gj2Ϊvxc vd8gyR%,P1$zpG9Z$xtͣ\Coo @<&fuKMК\6ek҅-۵,tϖ[~tumLX۞߭ۖucf;@)@UYN/A1
-4J&<..!4zp "ؙ Rw<rWBuh^O
-f T2iuIvBfx-9hZSh'=_m$ lH򉨧$ ITou}vߥ BƁGHh4>{0M8 XJ)J,t)
-|Es
-кj ΉRdJV/PP]?ߛv"EaUmſz/qS4Kw"ː-_xߩ&3v-t0 |Uݙ(=ܽ%IuN &DJHBwV Ƥ{W:$F!ۨ>߹E{M
-5$a~z>Q!m1#5a$d0Ҙ.?1ǾԳ]=z-D^qAK#餄 \[xw@Cx
-69"׎p!*w!Qz!bKGu% v :?,hc9qQCܴ@8,<Jʝ R5J/MZq{D< vc*p\ Ywk@^qpWMaC0:1>?2e[9ղkTU29 [C1*M-E JH<Q`w ߩ2YHDl`R.뀽iU d(i=h)"{ i}^Aý3#|5(LJQ(85m R6yRW 8.|Қ_pf/v3hٛP;[*]d(nɁr
-ڐL滾bFU6/뼵U\N`E1u:4/loHZP§J #,wJ.Ъ1Qx>c >N /;{]ɵ+8go,QR_\;Fi3t 4wPx@<Tp ̦
+xXo6~_GeIl@\ɶC[DDdwǣd9v݆ER;}wT/pYLcId`A`%FVdԓy>^|y{Q̜y}oW G17 h:M?;3Z}B}s50LռsIѻσ}'H^|{^1;/owh-rH1K8ahF^ΔM4 B Gqg/43ʣ`I"M(_U
+ V\$d`RQ6̂D6ZTFJ|OϷU60La#.Z7tR9.r%t!ʪukalRhqoeaf
+^XYOC
+ڠyWN{Pv`(M;Ua锵,Z8gT7 ;װwy;?]kӫM)tU
endobj
-5899 0 obj <<
+6262 0 obj <<
/Type /Page
-/Contents 5900 0 R
-/Resources 5898 0 R
+/Contents 6263 0 R
+/Resources 6261 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5897 0 R
->> endobj
-5901 0 obj <<
-/D [5899 0 R /XYZ 85.039 781.388 null]
+/Parent 6265 0 R
>> endobj
-5902 0 obj <<
-/D [5899 0 R /XYZ 85.039 189.755 null]
->> endobj
-5903 0 obj <<
-/D [5899 0 R /XYZ 85.039 189.755 null]
+6264 0 obj <<
+/D [6262 0 R /XYZ 85.039 781.388 null]
>> endobj
-5898 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F56 2890 0 R /F20 2865 0 R >>
+6261 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5906 0 obj <<
-/Length 780
+6268 0 obj <<
+/Length 1245
/Filter /FlateDecode
>>
stream
-xWKs0Wx&=-%fcXDW~D0Nf,i+"?Z@V[eBLtT쀪 `K׎R4U mՙf[A=p:Ún@Z;n iv24sމ~ej#1 0ۖOߧ~7_t*GO74RG‡[ög1
+xڽXmo8ί!6Ǝ $ؾܱR_nau:4 `)$4N~؆%-}0yf@EYO(A+^t5f,\c6l>M:3o1JBZOz>&7rm /#eŧɯZu|g_鍓BC c<r|b2v~L>wN'
+EF;nlv"e~#Rqv/<`D!(t E  9E#jiHm_q@<8
+G,MK|V@gQ9O#LD
+rT ê*tu6Ǩ@kihHZrW:
+-ȨbVQ'Q
+le>]hmD9Mt;Tf3&pJ "ؙVU(o? 8bꨥD"ԧG– *`e3Ӫ0Ұ8=>}hݭӑ>p\,ץ+D1:K. |k\e!F7cZi8(|AgȩL˟x_ >\ Ȉ+o}w?;a sW"G"ʣLpVjLok(,4KQPk}nDY<`X]_F®s
+ endstream
endobj
-5905 0 obj <<
+6267 0 obj <<
/Type /Page
-/Contents 5906 0 R
-/Resources 5904 0 R
+/Contents 6268 0 R
+/Resources 6266 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5897 0 R
+/Parent 6265 0 R
>> endobj
-5907 0 obj <<
-/D [5905 0 R /XYZ 85.039 781.388 null]
+6269 0 obj <<
+/D [6267 0 R /XYZ 85.039 781.388 null]
>> endobj
-5904 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
+6270 0 obj <<
+/D [6267 0 R /XYZ 85.039 761.463 null]
+>> endobj
+6271 0 obj <<
+/D [6267 0 R /XYZ 85.039 761.463 null]
+>> endobj
+6266 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5910 0 obj <<
-/Length 2187
+6274 0 obj <<
+/Length 2413
/Filter /FlateDecode
>>
stream
-xXmoF_!"S(>[A
-`MRTe\7RE;
-ٙg;wϝǁdŮxV3g3Wf8sv
-.רH!O`L/e HЂL⇺a@&DžY5ZWwX!VBeqFjEghj Ex$JF̮mw 4(TWһtvY`cDؖ!?}nD]0Ҟ\h9LEn`0cp 6l}Zv- |_Q꼶utoOAl_je<[Cހ ;G%]Kdd һ˛oC:=&Žw n5ŗ.к_y6 *v^
-2ƟjP,<Mn<Űhv\
-徊<*.)v& )f<A'!'Һ;εH<Hf!цm, q΃pqj0mx 슅L޳ӄFhm=Dk&hQAJh .?pg+GӠM3T77#=${W0`Ņ$uJ[R]
-mj_TO`Pr&VIN. OcH;UM;8qm2v9Q?Au
+xYmo_!@MrIo>'i}7vzd"VYq;oKR\ ۳??I"SIJIV_x5Pz LXf#..E o1yX r"7!չәR |w:y;7ә,Y p޿7on<s[\>OCo`Yu_.~ݛp.<W-3=r}Qd^]_Ŵp»]F7JmhtAOs#/Sa(m4<3ŗ4.\VeSd)ۗ?_]nS)v}0g棵 M4ްk?"Y"vM˓0  FҶ77/M(jvM+ x_5ήJKm-N+!1`˧Ui:F0¼4%_'2Ճ#wNJ/~Ox?k3?v$BULv@1WIKYe>ǪC3n'(nǯWolkʚQi9nF<o0Nظ҇FȝG䑙=KM!Wj1zdRZ##ܱkVv(s]`*n+ѱe8^&;TStp-5 Ȝe4.z,Y,H
+֦yw^;ó{\L4.mt0iͦr[?E^Hhv~Sڲ&ѽb uכ.v+B`
+}xFY6P@ ]G- ׏A
+m1TAEiiGT,fC#1!w)p 2cOؾh󩊣BFg}`9Yq=.+NWy5FO1"5m֍n?5_Pcq
+v44v|.[Nr7Z >8biS%#$O0S-`z^]\CZUͻh~8@Z Ϻf`!τ#wCOY1x%Y}uhcua10QoDo4wҲhlqt
+DBfA
+}{o 9endstream
endobj
-5909 0 obj <<
+6273 0 obj <<
/Type /Page
-/Contents 5910 0 R
-/Resources 5908 0 R
+/Contents 6274 0 R
+/Resources 6272 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5897 0 R
+/Parent 6265 0 R
>> endobj
-5911 0 obj <<
-/D [5909 0 R /XYZ 85.039 781.388 null]
+6275 0 obj <<
+/D [6273 0 R /XYZ 85.039 781.388 null]
>> endobj
-2018 0 obj <<
-/D [5909 0 R /XYZ 85.039 634.11 null]
+2046 0 obj <<
+/D [6273 0 R /XYZ 85.039 471.52 null]
>> endobj
-5912 0 obj <<
-/D [5909 0 R /XYZ 85.039 607.496 null]
+6276 0 obj <<
+/D [6273 0 R /XYZ 85.039 431.356 null]
>> endobj
-2022 0 obj <<
-/D [5909 0 R /XYZ 85.039 523.31 null]
+2050 0 obj <<
+/D [6273 0 R /XYZ 85.039 345.05 null]
>> endobj
-5913 0 obj <<
-/D [5909 0 R /XYZ 85.039 494.575 null]
+6277 0 obj <<
+/D [6273 0 R /XYZ 85.039 304.886 null]
>> endobj
-5908 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F14 2895 0 R >>
+6272 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5916 0 obj <<
-/Length 2570
+6280 0 obj <<
+/Length 867
/Filter /FlateDecode
>>
stream
-xYY8~ϯ跖X-:L:, wfDBK!ߺ(0L,bWG77iz*IRUizS4|x E)7
-C蟙y^ 7H<#_ݽsX<. w6"y[~Bfs^̔t<0Wz6>t;W
-6-f6R6U; 2g5ġl3}5/aںjY5'NYb9VL7-lDɒ0M ^fDD(1܇yT.L vȲ HA;0`F:G3yk/kHg^iMWȂ/xy5oal+:۞E_
-T:z{y[rNɟ`a+٪G7g΁ P2*ݹ57r(~~o\~0>2.+̜hI:$v$t~ҭN%XveB!ϕB;2DFzm͞Nxqr"O{
-KBA3fUΗ*i)rĊԷ(!$$E !@Dĉ'TEpp8ޓ
-OHo;V&(f
-f_yXد/r 3H?CE|C=va:doH?>>6`KÅu6
-TM 9`]У3Pթ
-;i
-6t0:ut'7$HaO}[ݟ<nk5 L}kqr~%,8HBh ];&Ri%l臾hXO$`IVR-)8 ysQ]D(qzA ՝
-  vV29MP<Rt4UO6'.*9 xFXo1nL%\5nTgŤ1ijZw0W y
-b jLi$
-X<0mQyB;c\>p8R5R.p[vKVw5ӊEa0 L6 ȕM)u5]G1KPӦg&Z<)3 ^
-b D$A|-`w|/
-!*!> Ge!.y@/Z>ՓR)Op5ErN ϐEMM(&j$sCsOS0 *TGBXtB:,.|I,/ԃx
-rrB5F@83M5\.)SBŒŜ☡X' aʏT{x^kohŋ/ Hl,;|r;HJ&{R~ S/z=Fiߟr*/+\^z` DFُ S'
-j
-endstream
+xڥU]o0}ϯc֖߱nB7Rm
+F a]n*$=>>pÉՔIGR˩L#sȼxHZH;mg1G]M$O?_g_z24 D<|A=aS\r:Q*?-@!#S8yĨt<QeV/Qy[* A$Q'3*# r
+Ly@<(,F}E]]/fKPPxܓ<KT%%U<ux28i 852VE ʄQޯ̀
+:U[ьUc-xѲ
+ߠlJP-};=)dtƞL>p4Xrү&0m&)&h28O_M!aK?a{Mz^0ՌUְld@{䄢S1WaWiFoXL
+Z dp?mWn$v
+̥O3I endstream
endobj
-5915 0 obj <<
+6279 0 obj <<
/Type /Page
-/Contents 5916 0 R
-/Resources 5914 0 R
+/Contents 6280 0 R
+/Resources 6278 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5897 0 R
-/Annots [ 5920 0 R 5921 0 R 5922 0 R 5923 0 R ]
+/Parent 6265 0 R
>> endobj
-5920 0 obj <<
+6281 0 obj <<
+/D [6279 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2054 0 obj <<
+/D [6279 0 R /XYZ 85.039 761.463 null]
+>> endobj
+6282 0 obj <<
+/D [6279 0 R /XYZ 85.039 741.134 null]
+>> endobj
+6278 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R /F15 2976 0 R /F62 4052 0 R >>
+/XObject << /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6285 0 obj <<
+/Length 1950
+/Filter /FlateDecode
+>>
+stream
+xڕX[o6~[dfDQ׾ j+큱i[$6~Bʲ#gXytnwYr'"T,˥Py>[ׯV~}%D(1'~uF"IgcBX̻իQ8BjzG<yV(Eͣnf3_4 >~;عA{ sf j4nVOZ<} y- EcU(b׫}QZ:`ۃmx~c0GQGyлOӖXߛVW<_vs^<-/E$gsfzL*GoIީ%սm;-l! L͡ ~#l7<2k1vMqkNCk˦;[\Ql*ZNwT,XCiu6l&&JV{";eê@Yپ88KuWV\
+iߡ %]<\Df".iu%vielr`HuFb2;CqGJ5 zw<7MAdڦ6Tw8 ޮKm\&AsЍ\
+{T@Gi@{\"ud \6>ps
+S4h"CbKUO<
+n@O 
+uN풗44Y<A]ѹ N@ gm&(`k\2A7Tvb* T9Q غd}vhwU2fٓ32Ǐq2d
+$+.=&
+ ;uMu0,8u@`v0}α\jqp=ǑgEok RiM㷔Ś\A ipk z#/9;!gOףLohI%|VI,ؙ߯t5n+^MF yIY&~a/ #৉tZKf:WMѡ6Wp1 G_kW1O`޳2Yp*A8C*\ʷ ֍ntWΔTwv˄cSa Lt)<KmnSv}+w _xt <@狒|*jG(u#ơU^da&[3A.84wI-nC}CVQd972 ;{ܵ/ [ɬcaõ dϭlv1r6*m191†Pt;-9 sT朢^*
+^%=\hwN󈭼b$Ntp7+r`k[_/aPw׷pxRcf,
+yA7nC!w4kY.^J{;])>U
+92i"p=E\>"*
+3"[*Rn%* 8?9/ endstream
+endobj
+6284 0 obj <<
+/Type /Page
+/Contents 6285 0 R
+/Resources 6283 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6265 0 R
+/Annots [ 6289 0 R 6290 0 R 6291 0 R 6292 0 R ]
+>> endobj
+6289 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [327.043 300.33 512.306 312.322]
+/Rect [268.952 172.675 539.579 184.667]
/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://ftp.microsoft.com/Softlib/MSLFILES/NEXUS.EXE)>>
>> endobj
-5921 0 obj <<
+6290 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 288.296 216.398 298.773]
+/Rect [84.043 161.55 103.217 170.209]
/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://ftp.microsoft.com/Softlib/MSLFILES/NEXUS.EXE)>>
>> endobj
-5922 0 obj <<
+6291 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [327.043 259.682 512.306 271.674]
+/Rect [251.226 118.478 539.579 130.471]
/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE)>>
>> endobj
-5923 0 obj <<
+6292 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 247.648 233.58 258.125]
+/Rect [84.043 107.353 103.217 116.012]
/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE)>>
>> endobj
-5917 0 obj <<
-/D [5915 0 R /XYZ 85.039 781.388 null]
->> endobj
-2026 0 obj <<
-/D [5915 0 R /XYZ 85.039 761.463 null]
->> endobj
-3024 0 obj <<
-/D [5915 0 R /XYZ 85.039 667.044 null]
->> endobj
-2030 0 obj <<
-/D [5915 0 R /XYZ 85.039 611.854 null]
->> endobj
-5918 0 obj <<
-/D [5915 0 R /XYZ 85.039 585.239 null]
+6286 0 obj <<
+/D [6284 0 R /XYZ 85.039 781.388 null]
>> endobj
-2034 0 obj <<
-/D [5915 0 R /XYZ 85.039 458.285 null]
+2058 0 obj <<
+/D [6284 0 R /XYZ 85.039 761.463 null]
>> endobj
-5919 0 obj <<
-/D [5915 0 R /XYZ 85.039 431.67 null]
+3127 0 obj <<
+/D [6284 0 R /XYZ 85.039 653.495 null]
>> endobj
-2038 0 obj <<
-/D [5915 0 R /XYZ 85.039 232.205 null]
+2062 0 obj <<
+/D [6284 0 R /XYZ 85.039 586.876 null]
>> endobj
-5924 0 obj <<
-/D [5915 0 R /XYZ 85.039 201.589 null]
+6287 0 obj <<
+/D [6284 0 R /XYZ 85.039 544.591 null]
>> endobj
-2042 0 obj <<
-/D [5915 0 R /XYZ 85.039 132.795 null]
+2066 0 obj <<
+/D [6284 0 R /XYZ 85.039 404.088 null]
>> endobj
-5925 0 obj <<
-/D [5915 0 R /XYZ 85.039 111.599 null]
+6288 0 obj <<
+/D [6284 0 R /XYZ 85.039 363.924 null]
>> endobj
-5914 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R >>
+6283 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5928 0 obj <<
-/Length 3481
+6295 0 obj <<
+/Length 2710
/Filter /FlateDecode
>>
stream
-xڥko/&ŧRss>7q-%$W!)kkvvvvޔ?ϟInEuMo^gWp{ܛO !y ̽&I\\R 7o/|AB乏us> nHgMr Ùt: @X,Nxב;OYqA`/DG.i4[nV٫^V׹j7%ˢ|jI[ռͦz)[n?ݼγnFkmu"5>^k>NoGm /Bgk.Kt'j_:"[gOEYtZۭnHF4bWx"܋5zYcrSXˆ,Xu#s ZJN5l,u,>5{Xj]l){GoW+qu(TEC4'q~.C~yJюTd^4UfS͛Kʵ!izgo)2duU=PY.OQ*FG|MgX`cn ݟks[PR_֪)TP:d^7jQdyo"OzMziB^m2,5XFkCְ-yY,q^\o`>;o %؟ {Ń;1#\+-ju Q=3@[3
-vC$B=13Z|@FuoQA+
-VaZ; F2كY@k >j-3ݱn q)`/v@$9UJ,-MY
-r&n!8z Euce*t$uMXDq
-))\zP+ ^3 Q bR["㭴&\<lǁP^nj$J&5zV]~ch%,:S{R  A
-`7}4ɧmxZy*LP[wC&xLՂ]5vL\scGrfkNDow!>Xʑ 0h7BfE+DZx'HcL9[X`ltr >,1 q>,=-TmSrYd" %U8~g ͭKG~tCU{
- e EG8ȸz[RD2ڲ ys ]|ڈB?D$g%Wf⾱8"@$P5oh Du#$Xx1za
-SX"AAJX*noP.(l(B Y N1'ثς~Ѝ
-&ah%AFL; #
+xڥ]OH_͓#<܈fnvvbaCݟj HnwUWwW5́w'e~ϲ̙=3W0|Z]|؉VNh?[[?_}]>[gel]̽muu};wD {#_ڗ9b]Oq{v3 $_gr3xc
+0HUNuڗNou3\U;`i/l8ĦNa6(~C͑3oi=8mZz#mV
+mƲ '`Gd8ɺWnhՈN@yc,I
+,yV+Wy/IqǞdwhZ %g]+~*!ߠ:冷822Qr>+j\Pj] WtF&'B8
+;4!y d<i\E t
+p|*Eǵ
+XY
+qF!= @ ϘJ1LW4Ukҵ~ׂ8oGiMxuϲw_i$V5(9Λ]]耴5Oֺ9 h)ޕE %T' +nv؁Aﺶȅx6bG?cCJd-!`v'5چ|83ʅK~c ]fO]=a\Yk!};Rz>-vcG]*\Q:->'i];~M
+ݡf_Jl~9#zmJ;a 8"ͳ`<;?^Щ^94QM^^\{ ?qY/.YutLS/tn d$*VTXpGS:6)#O[tzI^I ӬL0hܰ9@ݺ=@吖<Ò~, t#_!C닇ϟFsB'orE¼`S7_ hGι
+)j{ ɗb"0}#HqJ3Ʃ
+ #12z|)Z#Hi*/.<<y}&GբM#"9/.`ULܴ3Nێg8{͎{ B"^VFq+qM,I8wqs?
+Xft A~ץ,t.n0RCH{C{2@Nu}ξHTı':nl&tu |*,5&zs&FAĢיC_-{´¢ֵt!C>L*\6#p=)VݡaK8mb L"Cwܼ{ZehR1V,;=C;9_a-뻔RI!y.k5'd"%N#_S}$~hRBLun =,ْVm]Zs߁u=!UB$S S\d.iRH$c) WԤAt}S=o2[Dי"Ǻ2X/|/ϫ{ʮu=o*l)ǧ}>?DRFr䎇t޵
+>s g`E]o 
+sxFM f\.w8'5^ p8BWWֽ7Ŷ$T^v_aʇ榢<pwlo~B׿[c?n7Bϳ=Џe:fCendstream
endobj
-5927 0 obj <<
+6294 0 obj <<
/Type /Page
-/Contents 5928 0 R
-/Resources 5926 0 R
+/Contents 6295 0 R
+/Resources 6293 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5897 0 R
-/Annots [ 5930 0 R 5931 0 R 5932 0 R ]
+/Parent 6265 0 R
+/Annots [ 6299 0 R 6300 0 R ]
>> endobj
-5930 0 obj <<
+6299 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [481.678 567.955 512.306 579.948]
+/Rect [474.587 341.766 539.579 353.758]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.nomachine.com/)>>
>> endobj
-5931 0 obj <<
+6300 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 555.921 227.853 566.398]
+/Rect [84.043 329.732 166.217 340.209]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.nomachine.com/)>>
>> endobj
-5932 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [165.255 296.971 384.882 308.964]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.nomachine.com/testdrive.php)>>
+6296 0 obj <<
+/D [6294 0 R /XYZ 85.039 781.388 null]
>> endobj
-5929 0 obj <<
-/D [5927 0 R /XYZ 85.039 781.388 null]
+2070 0 obj <<
+/D [6294 0 R /XYZ 85.039 761.463 null]
>> endobj
-5926 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F14 2895 0 R >>
+6297 0 obj <<
+/D [6294 0 R /XYZ 85.039 736.911 null]
+>> endobj
+2074 0 obj <<
+/D [6294 0 R /XYZ 85.039 654.569 null]
+>> endobj
+6298 0 obj <<
+/D [6294 0 R /XYZ 85.039 619.823 null]
+>> endobj
+6293 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5935 0 obj <<
-/Length 2571
-/Filter /FlateDecode
->>
-stream
-xioFE
-(ouJE4EIPQl#~5%SE ̛7>Fj?5f(Vǣ<qF+9;Q| dc菔cϜh$WWyI֋Wc7~+/Oz uϸ}# \;;ŏӋۓyoqh=qlonaj6'~فwqr} #>5wCۍ`9vC0*= F 7GELCq8/~E8V9v#k KqM++Oly
-5=޲/)lɕ{`]NH-+k EwOQ U:3P9Jgs Ѹ Z,$8pCT#,ɂJkFI$(LIp`r7'pئ zx|e`$ׂ*#Š\$b|= nV}xZ`15v3DQe49}};K>,<Mm ~C>1ߺ:jcc~}|B0u#+Jj6ZH dR8 ^xF6)b<kYvgl5 gWs/ڸ'OGQR`V9`&p*thl |2ydb>
-BRV/DN抷\Bl%2VVjZY7d}nf=,L ?3ԔaL'ͽ,`<E Q5uÓ];Fhύ|6rtrȪ"g@P^xy>Vငp^^_G_͸S/5v/iv EFӬ N$O&7vkJdqې p C+ϔ\@H
-.bh
-x|P,Ұ5u$$ 
-XLʉ8tKRޡ'稱8)һW<..tAe N
-z)V&(qfjJv]Gžo{pЄІY{
-sOI? zE3A7?߃ǫR;=FR)/vV;a+ :!с>!_Psu:a` 0Leݚn"Y!6W^rI|DpC-o#Y׭jK̞+2WNwqY ćGF73Gܦ4c_DZDwOs'CHE4IDVLr[\$78¹!&xHdȕ#.B@1
--4]fJ.
-ݯ bUt-/
-Q^wర*dbgJfG3uF%G/o5/BrSd-şIp JRRsGrB90_A\QLL
-B*quf{~.
-z(
-C*/ 1O1މ#:ߦ۶t5
-!{%<WVK!VJ3GzJł7BU
-H8-ol|y,e''gBg%I4l;{5a_@Z 7&|zi$O0ח1E!.<ng =Jw{w)Vw(<4SϴMʛdZel;(o<}י>S11My^mDYP;*<[2VgaQ
-E_PRKD/oVzk=1BfayMO=85@pրLD/n@Cɺ6Z4~kcN"ph"IWRE w_W;b[CWPA?i7Y/Wu<Y?4k:Gȳgᑟw]7EKҝ^BzŎ
+6303 0 obj <<
+/Length 3138
+/Filter /FlateDecode
+>>
+stream
+xڥ]F}&/UX[2!X8IJ dC8q篿f4ުJz==ݭ=Ͽb ia]͕wWW`ensy8=w-w#؍zy˗g0 pg4͜g/fA2}yvw^ Jz+n^ė77W/As40@z7ys"s}n=7ByneH^tͿFfn҈=7"<|w)gsiV/zk+~²P!xe6%/A@wJF;9
+g3 Rkϩg9fg)<[cXN
+s :UE>sAP[#xl%oy{" ݋nжߵ?x *QTJȿ~{
+='1ħ)} 8AFSUǔ>1-c}A0 (f_q۞0$#^/İK 4qlj
+2~U) o=uT,G$z&k)dڎUJ6>i@ &NA&X5[Jh Bw']1XΨJMRCRȢ)
+MieCuR.*wDTic"lsb@{(Dz;uNc
+!tғ*QY1<.0y'z̝a
+qY&t]`&c"bh jУ00? V?WUM e ;{m-DhW 'W׏y?x^1E
+1
+E1XaIB7ADS[N)QЧueM\=O瞫Ĥ&(MW:B_;!FoR[WVmU9EO`
+So+c
+Zx'En6<&}З5",tSNOI!B]>?gO tȡ6i
+l[UFrA
+-h?)KBneo9]U]N('\n&cWFzH949=qR9T]E8 DR2熓x<ךoATj nl$-g=ݝ2%oC"q^.7=%뇗ǩ= ҃zpਧd?:ц;/ Í y?'ȧEy8)H<ONughe uQ
+(:|
+Yl~~k?2 gaݨ< J\_ hҁ{NOnM u8fB39|=vnsG)2jl_<لp0ԝgn[dž
+hSbz&aB_*rޢ^d9{uhKޱD(C YW&XǍ(dlFn%g.?]?eV+r¹/?4ƒjǐ}HܚR( h]u,0t4G@G!nZլmT+*FS2@ѱ 7
+]MX,䤹V <9ԃoA&a}ҋwYL˸;t@[i?Tc-zB>4LPʞ@89d}&d}A_rA2x4sScO3hF !sXjhpDz1㸎r>}+TT -B.'""׊z/b<qq}v@d3s Tf:bSk^0Osjќendstream
endobj
-5934 0 obj <<
+6302 0 obj <<
/Type /Page
-/Contents 5935 0 R
-/Resources 5933 0 R
+/Contents 6303 0 R
+/Resources 6301 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5939 0 R
-/Annots [ 5938 0 R ]
+/Parent 6308 0 R
+/Annots [ 6305 0 R 6307 0 R ]
>> endobj
-5938 0 obj <<
+6305 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [218.134 512.523 287.369 524.212]
+/Rect [84.043 679.338 303.67 691.33]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.nomachine.com/testdrive.php)>>
+>> endobj
+6307 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [138.346 116.607 207.581 128.297]
/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:jht@samba.org)>>
>> endobj
-5936 0 obj <<
-/D [5934 0 R /XYZ 85.039 781.388 null]
+6304 0 obj <<
+/D [6302 0 R /XYZ 85.039 781.388 null]
>> endobj
-2046 0 obj <<
-/D [5934 0 R /XYZ 85.039 568.747 null]
+2078 0 obj <<
+/D [6302 0 R /XYZ 85.039 199.93 null]
>> endobj
-5937 0 obj <<
-/D [5934 0 R /XYZ 85.039 539.949 null]
+6306 0 obj <<
+/D [6302 0 R /XYZ 85.039 157.583 null]
>> endobj
-5933 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R >>
+6301 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F41 2998 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5942 0 obj <<
-/Length 1112
+6311 0 obj <<
+/Length 1634
/Filter /FlateDecode
>>
stream
-xWmS8_I2+: !ICoJֱ\[ WdS ݇XZI>()JՔaHHs:rZb"i@l:hT=KM7ISVUnqm4Foطq̦h!khreM6dXCyk,
-SS.恘՛^(;9x9TprVjԘ'(DCpƂč<GhJNVsHGCy? ;?NzI2J76 <#t&5
-p fUTܟ4E`}^LG'uǻ߾E:PZ數ߩ v4`-Rlj
-o^v2x#EP›8/|BGg
+xڽXmsFί3 L;uml'q58s#0fݻ=&줝dN{>rYuYu5Lǯw=p<&5~o.jIH&Ǩ>wi_MVz\:Qqzyr=4[4lh]qrִǦeYii5Px _nޫM:NzQn
+Z^Vd!Rh?ABQYEI^-c:RFy&}J2{8D<ABMy}dt}[I~Ls6I"VIlD"ӡ^)ƠE2'Qu/P YBg
+
+.6XxGͲ`ITnPfU4"[N@k@ٔ6m0󱬻HV(kw רq,$G<W
+c^d2iL2eBlz-,a3\tXH lx_LkǨ}skX]GNW{K{g1O3xQrmW(A~r5PcR2Y8~Ex-W($^Vu&=P(ҔCGz|i$d-BhYkR=ɧbGj<&P!P,ڶ'cOsM^ޒ{//gJ_^,ȂಡcuF&3SCV:N~ݍ=PvnG "&c%Y[V3VϥEq5L@JCv$㠝2՜ ߠM2x}r 4U
+]tH AC\麘Imp\ۂ<^ۗ'A@qy/v>Ai?N桮'~-J$2ϥC\F
endobj
-5941 0 obj <<
+6310 0 obj <<
/Type /Page
-/Contents 5942 0 R
-/Resources 5940 0 R
+/Contents 6311 0 R
+/Resources 6309 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5939 0 R
+/Parent 6308 0 R
>> endobj
-5943 0 obj <<
-/D [5941 0 R /XYZ 85.039 781.388 null]
+6312 0 obj <<
+/D [6310 0 R /XYZ 85.039 781.388 null]
>> endobj
-5940 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
+6309 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5946 0 obj <<
-/Length 1296
+6315 0 obj <<
+/Length 1380
/Filter /FlateDecode
>>
stream
-xڽWKs6WHΔ@|$IDMN4QCBR$U.(ZVdЙZ.}}aq^s/+`y$BӏDzzC.w ؏"iW( U W"k:
-&sy67?V9\D倃ˑ CF.rm@m]f0
-.j2=_ E]~yՅA(,\'˜e(CɁ9$SdۓBbLE lI@r :Uu>םz"jr [Ρ<]P"۪C'^__x/bqL ߧIr
-c[ O%U :`=Zj[iDg!2DKt:'"vc}
-h0 T߽C_Vua2uDv"NKCŤ2`>ԑ<3#X)&, ]l[,sчM͑[/dfZwRJ2&#҃d_|3i'^G,R=DBiac;j&]Tw۩2gf"= vSd߃Ƌ'kbӛ3Lm%m,b|Gx"w ;!tpwbr_g}SO&&45z7{aɫ+rxpr7qu =oE 
-3z3F\co&07 Hjfv=ђYR%.qd 8<`xˇ(r|endstream
+xWmoH_N
+5˂T:&=ֆuzf_iZ_N<3;3 X3k iq]-\ m''=8e 푆 7zldD?3rBtDEt}>>Xw򥤽s1Lf2Yo7
+5__vT1} ޷_C}hdIʀ%y+ۧ_WDž?^|x'}H^ӓ/ZM\틟q_a'*8ȢvsKEKJd)U&
+VAjw'-ˋ//%3{(j;9/7*Ʌ
+
+;(:l
+κ%r!Y
+IxxR65أ7g:vBkiENsڤ&n j\YgJ[+t_93<Ag4"c!G(o0%ق QyV4 nܠ5b=`%G7)Wims\.*3$BrW fH0_Qmc
+GK<xҜ E
+a
+ Y@8(/2BZ%"BفGF0o̸e #]0 d m%pMHIشa1Bg?W-̫|P/*Ua~{fFPO,͂8Fldyϰ ;8d)Fo3Y`YB1IdžAgEG^ &65|L q'
+$cs7@
endobj
-5945 0 obj <<
+6314 0 obj <<
/Type /Page
-/Contents 5946 0 R
-/Resources 5944 0 R
+/Contents 6315 0 R
+/Resources 6313 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5939 0 R
-/Annots [ 5948 0 R 5949 0 R 5950 0 R 5952 0 R ]
+/Parent 6308 0 R
+/Annots [ 6317 0 R 6318 0 R 6319 0 R ]
>> endobj
-5948 0 obj <<
+6317 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 716.996 381.124 728.989]
+/Rect [90.021 228.532 332.556 244.074]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.craigelachie.org/rhacer/ntlogon)>>
>> endobj
-5949 0 obj <<
+6318 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 703.447 266.58 715.44]
+/Rect [90.021 214.983 218.012 230.525]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.kixtart.org)>>
>> endobj
-5950 0 obj <<
+6319 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 689.898 490.439 701.89]
+/Rect [90.021 201.434 441.871 216.975]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.asp?scid=kb;en-us;189105)>>
>> endobj
-5952 0 obj <<
+6316 0 obj <<
+/D [6314 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2082 0 obj <<
+/D [6314 0 R /XYZ 85.039 187.165 null]
+>> endobj
+6320 0 obj <<
+/D [6314 0 R /XYZ 85.039 154.947 null]
+>> endobj
+6313 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6323 0 obj <<
+/Length 791
+/Filter /FlateDecode
+>>
+stream
+xڥUMs0+8*B=Mt҉&L{Hs mR]IԱsx<vv~|/x%\Jh߀c:H8|̼wgM;&YyO.>/e 䜓8A8K bI~1X],F.znD-PvrٵLx_B$^Dy*8G wƻMY]W!B`D6DDElU iB\ BFv nPuIqqX{W3*!n'Gt8fl@ԪW݁T!T562FJ8lNyo²!$C]4ީA$ a2e8/3:;Ɉy;cK=Kzq8` l
+Յ'b-w RyJ@S=BG{7YIjmy@g|g,nMrPB0fLa6݊*ӕy"DZ4*k8=5F)0&JE f#, 1o"@endstream
+endobj
+6322 0 obj <<
+/Type /Page
+/Contents 6323 0 R
+/Resources 6321 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6308 0 R
+/Annots [ 6325 0 R ]
+>> endobj
+6325 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [266.468 572.648 475.915 584.337]
+/Rect [228.286 747.387 437.733 759.076]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.asp?scid=kb;en-us;189105)>>
>> endobj
-5947 0 obj <<
-/D [5945 0 R /XYZ 85.039 781.388 null]
->> endobj
-2050 0 obj <<
-/D [5945 0 R /XYZ 85.039 675.629 null]
->> endobj
-5951 0 obj <<
-/D [5945 0 R /XYZ 85.039 654.736 null]
+6324 0 obj <<
+/D [6322 0 R /XYZ 85.039 781.388 null]
>> endobj
-2054 0 obj <<
-/D [5945 0 R /XYZ 85.039 557.204 null]
+2086 0 obj <<
+/D [6322 0 R /XYZ 85.039 731.943 null]
>> endobj
-5953 0 obj <<
-/D [5945 0 R /XYZ 85.039 530.59 null]
+6326 0 obj <<
+/D [6322 0 R /XYZ 85.039 691.78 null]
>> endobj
-5944 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+6321 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5956 0 obj <<
-/Length 3285
-/Filter /FlateDecode
->>
-stream
-xڅZYs~P%` >JVEJ!
-ȖRIc7Bc
-Tw
-547gGögs@iR>I&4fPtҽ꭮2lff߽> ڐXt{ƹ{ (~Qr(>BJ;_VTj: ; |
-:"!O-V'h8Pwz!%?B͝a{ÐAWæЗEIBq,;gޚ{VPMKօ/z6A5 v=tϵ[L%?wB5
-as-3S
-7;ig컹я#
-Pe`t3FHd~Zz'H+ګTiES/w~p%2߱B4?Xg?*r0c+.av,|t=\/,{ ԫGF`.5{LxI5J?SX|[QЌti7p~mz. G&<uFR:x=`y|B] V`m㷕bQEZzH'RFpo3=nU]9zAftJvGe{P-]|:v/i6ձ\4OQnṖ;ːfF0DU} ;}yuP"Édy~&kЌPFw <
-Kˏlga>e΢8 <p L5B6+|p1+N^x2#sM[A!bV A|z |p%3GְW $o讒g󎇊РbPdTրt9<UT6s?5|
-7ˡd7
- s^^fhXm͆ 4lI@ ]%3
-FP?lz,Pj .Jfhv[h옱(DS/gcFx̸ C=ox7eh
-= 8w4>>Zw 9-W%
-b>XI 7_f:բGݗ8<?\@mGf0Ҷz๬hbiR yɴ8C_(s<i4$8@oGתSNa QhT^٫w$|=wWn?[*Rn#[y%5afDOb`xV}cr
-`AKW|',AS4K`#f6|ؕLpӈĸ}F}|\mB`kZ[&BCX-fAn0ڥH8Dby*fv'
-Տj0I&oqéf1f\7
-C|egaS ` ώ4ceKV@_!vn1ȟ"'tՌ?~z872qTduU3s3mq.fLL<qO=1fU8ʠ[*E 85a?%
-`ܺ1s9]'}JVc/?qJկn( %׶ Q
-LX$cw44fU s
-wt}0LUdn"ʉc@!WSVᓯ#a:I/bNrB!b~#k
+6329 0 obj <<
+/Length 2852
+/Filter /FlateDecode
+>>
+stream
+xڅYɒ Wb*NG%rCɒHZo<
+© d/=t=[3]xsA1'݋UyFE@R,=鰄~?WzG<Ai.XEcHde 7C)֜@10J\ȅ
+Q]C94-Ro)Ⱥ uU@lQ2I'"`4f>٤6ė6F+dV 5Z=(U>d؂<ԕuiO4Dtul
+
+Fw"B@.Ev: &yF~zQæ+rOW/Z<&~Ȯ}rr!K&ʶx *NﰗXBC\@(r.bfj #F`zLQz?UAyv}-Jγk=ɮ_O,J/ p30qѥ
+#9M90 2M^WOcnG1T
+*w̕Fi3֎ Z~h?칊i_WG I:B>$zKB7 2ZueWPzT%ԃ@i;40wR|||tb*87͢:b7[TZTJ3
+Rձd|;#`PqVrfg3俚b2$P~̞hf##K(bkU~M飐&C[k0Ɨsrc;f҈H粜 A* fCc&hڐ>ִ`3 ZK4-S#>??›o#C{ /Omr1 .yE?_5ɗϗQr5$ZJUOR~H;oō8k󺗥1j! v$evԾLkTLFI܅oqj+cp۟IT?ۤ٧fï.dbF ʫ22ϩto4q4Tz(^kAM]cL$\h|f"+m4GAyV.uЕ }:7nP|0F6tgn3u+y)ٻivKcgjʛJ~?֞HW?^}RQr05KҲћDZW~#߶w!Mw܌ay{z 5 Ϣ.9ٕy@s?a* >(3K`ov=(sN?UwRN5HFw6qF#
+zv3* VaYxnendstream
endobj
-5955 0 obj <<
+6328 0 obj <<
/Type /Page
-/Contents 5956 0 R
-/Resources 5954 0 R
+/Contents 6329 0 R
+/Resources 6327 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5939 0 R
+/Parent 6308 0 R
>> endobj
-5957 0 obj <<
-/D [5955 0 R /XYZ 85.039 781.388 null]
+6330 0 obj <<
+/D [6328 0 R /XYZ 85.039 781.388 null]
>> endobj
-2058 0 obj <<
-/D [5955 0 R /XYZ 85.039 761.463 null]
+2090 0 obj <<
+/D [6328 0 R /XYZ 85.039 761.463 null]
>> endobj
-3025 0 obj <<
-/D [5955 0 R /XYZ 85.039 667.044 null]
+3128 0 obj <<
+/D [6328 0 R /XYZ 85.039 653.495 null]
>> endobj
-2062 0 obj <<
-/D [5955 0 R /XYZ 85.039 598.304 null]
+2094 0 obj <<
+/D [6328 0 R /XYZ 85.039 571.206 null]
>> endobj
-5958 0 obj <<
-/D [5955 0 R /XYZ 85.039 571.69 null]
+6331 0 obj <<
+/D [6328 0 R /XYZ 85.039 531.042 null]
>> endobj
-2066 0 obj <<
-/D [5955 0 R /XYZ 85.039 309.244 null]
+2098 0 obj <<
+/D [6328 0 R /XYZ 85.039 255.047 null]
>> endobj
-5959 0 obj <<
-/D [5955 0 R /XYZ 85.039 279.84 null]
+6332 0 obj <<
+/D [6328 0 R /XYZ 85.039 212.094 null]
>> endobj
-5954 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F66 3242 0 R /F11 2898 0 R >>
+6327 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5962 0 obj <<
-/Length 4229
-/Filter /FlateDecode
->>
-stream
-xڥrF]_)fpͱ#k^K)W6D$J @Kk
-OBV.[G;usc9}Vp[Z<4L?
-
-u\CPDY?F<s&zڪ³;a#K5Ď;
- 6<
-@ )b y
-*ܙ/_gˢ8ӄm^I҅wkx 1AA;
-*O0IQM±'; ; x9phsgG^sؕ"\,`!\2]֕,K#Z
- u%z c')H^պظ?}"L3N[
-T0-C(n_kt/%[r&֤x3]W7?_ jY3}9ּ$ ^v,֕$(enKּ 3}yzKcŧ}A6fdr;l)y(21Xѐ:>QK9fF)(l%΀J0mKhFZ2.# %Q4%V)#ISW'-Y8F](M„H#kLSlR-(
-8%a6B6'4G@q2T]vg>N6sn^-JT Cݗ횚ېz2s85" Cܺ81fp2fRt ;JWuDmHazP٢G0aaZ%и(/3?ANY
-ǚ3D3f_RJ'= g5c"PS42 d)%!iIjRC.Sg\_)CW&dRUeĈ).̡=󰂂ELEIca46  `V%9rki?`/enh
-͚T` !HY);S_n \s6pLUSzNZ=Vqaa!t[
-{+5
-vVueq=4VDb"=i[`2W+QIl®sDw
-1J?VQbp)ár2ȠEl}FYwP=,Ϙ:,Od;]=ն8fZK-9|7zi,~BCCa%G5VBƷ!x . `Q
-HX贯e5HrnOЁq~s-Xl@GEyˊ\ 仺 tmF{0h<d:DVW~ <<RdTIk6OEKd64$T `viX/`AA |uqߧ|-x`I!ۅmF{+k%ީ%LcAOʹ"d>Nm]< 4[KNےlGsz!JBZJBZDdr`9ʴN1_ 6 gZ8D0}XE53vL2~H3([Kn!0%4li{[{rlWdCDnn3 {E)$j񾮘ɯ8-qs3K.OFz:*?`Ƒ )7M!|9e]OZֻ`N`S3S"XN@v[?C6O:5r:"si7Gc7\- =bK\
-d1K/#^<Ct1ӹd:,heCɗ}2ȴߛk507mgȞsK!R֘}l & nM\r~
-GW}>FQ#Yv)hm2ڔhK8T2<o0(~_#kvRtBU_A'؟|`boȏ\|%e8 L%[ kK;
-h^zˬ^Sa`{GCSa&Û )Ç0狦RZeċ
-p@}
- CH S4Ĭ*p
-7' Rֽh'>rI8U(+\ė%_Lbo
-" N2F%,l<eP)+<8+|^@`0AZх
-Rb BkMN
-@~We a,L?Ӊ=4XMT7:f*M,JGMendstream
+6335 0 obj <<
+/Length 3402
+/Filter /FlateDecode
+>>
+stream
+xڥ]oFݿBKh 4qj'^(S|reIrvvvvvp_b?E~e"Xla構P0tp~z'0 _o&:hq_ͧϗ(<4ͼonRe۷G>_?\އkx{˙ȑ\g(\~g'~ ˏu$ſ,) ^5'883b?4ΓiK ghK]{{(
+/Ǟ.\`ƹQhe40:L g]R.UA0V˥bS _zzpr0H@BšVqO{G~[2e$S~ m$ ,:R~
+ rB$U4YJ[RMX@Q_2JFӝu@j-~yiApT |~Nd.J8(`0bzMFw!`9~~Cr22#%[MS<zo;l> Ɣo+8w8e(;ƨru~ސ ^é XA';8,bavx
+N7t,c}Ǔ92.uFKh1"AKɈ+է$D->c Yˮhd[6@,E"I&tE+XKk.9D^rm5^*PkbyG}q> nMkh (`yϼ`ry)<5vM=ن7b5(` e5%}S f KJ On|Ռ?6i+떈,GSo>fͯ s,W*Jɶ}U"ȠEpp%U<B
+x~%6o,a] ڰ^W,\'i9G~
+m;3a |$41jY{Ea8& <_Μ\0΢Sa]sdZEWm"J"ƻUאoTiltΆ'riƉWԍ lz'ݐ舧=dR$"&-]FIiyC퇉^Y'`|vGtϳ4QVЬ]i;t }7|1([
+t徊7 !SU j><|ö!*S]wRi A>Ao?!咢 &!΋
+yKa6Z
+y|25a
+|ORun_"j!8*mrR6u;HɋY'+(
+l s n=/dd!O];YcZz'&TN 6l]ui?i(8Cޫ_;Z45Rpʲ9-1ۂVFs9nz
+[ύɩ,RSܐ9vXm
+VqtY z_7/Z
+ /((:Tc~t<endstream
endobj
-5961 0 obj <<
+6334 0 obj <<
/Type /Page
-/Contents 5962 0 R
-/Resources 5960 0 R
+/Contents 6335 0 R
+/Resources 6333 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5939 0 R
-/Annots [ 5964 0 R ]
+/Parent 6308 0 R
+/Annots [ 6337 0 R 6338 0 R ]
>> endobj
-5964 0 obj <<
+6337 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 665.485 824.811 678.387]
+/Rect [413.168 584.796 539.579 596.486]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp)>>
>> endobj
-5963 0 obj <<
-/D [5961 0 R /XYZ 85.039 781.388 null]
+6338 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 571.247 216.819 582.936]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp)>>
>> endobj
-2070 0 obj <<
-/D [5961 0 R /XYZ 85.039 584.077 null]
+6336 0 obj <<
+/D [6334 0 R /XYZ 85.039 781.388 null]
>> endobj
-5965 0 obj <<
-/D [5961 0 R /XYZ 85.039 562.216 null]
+2102 0 obj <<
+/D [6334 0 R /XYZ 85.039 489.232 null]
>> endobj
-2074 0 obj <<
-/D [5961 0 R /XYZ 85.039 289.778 null]
+6339 0 obj <<
+/D [6334 0 R /XYZ 85.039 453.822 null]
>> endobj
-5966 0 obj <<
-/D [5961 0 R /XYZ 85.039 269.187 null]
+2106 0 obj <<
+/D [6334 0 R /XYZ 85.039 127.793 null]
>> endobj
-5960 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F14 2895 0 R /F56 2890 0 R /F66 3242 0 R >>
+6340 0 obj <<
+/D [6334 0 R /XYZ 85.039 93.047 null]
+>> endobj
+6333 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F38 3001 0 R /F20 2965 0 R /F41 2998 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5969 0 obj <<
-/Length 3894
+6343 0 obj <<
+/Length 3821
+/Filter /FlateDecode
+>>
+stream
+xڭZYsF~ׯЛ>f<@$$b
+9{
+|=" m-*#m]emX",t@}7l%QNQ:v҆LͪYJ#im~t~L cZ$ w@ޓC=gU`F^ny!FEE]ef+F&_-#"1kml}rgy cE6  t̜a#Cplл]lRL G aR:ưN#r:ˮ ,nt:hQ4*m셃r/<yOz|
+B/qWy׷b ъ,Iz7
+ k{$;@/]ŢԪ[рww9[eeCLd kA?$8ߚ$Tȹj=[cz 0αz+L6nK/.ŜU,7G1󨾂$K>2
+%n˫'Tɣ4Rr-wt0pb͓yuN c@ p*TbM1XՎNʫ!wIQ_udi:B?Vv_nb G
+ Sq7b:,OCR%n橅cϘ9\ C)
+#;ppf2'!f>Ba
+**r*7FZ aCݑΕ0ˎC/QGL)& ( V֙s#B 8W^`dJ[i}u %EנC
+[ 1#(D1!jUMZ FR5L"3IO!MpxJ| \Rra.Ƣ"h9&$ᘣ0 vF9Ny6T2
+r_1 Es@k=}eyBm9D
+ȻyJd|u1
+oޏo^<!- ܌ iןPF}*WȢSf>aa|阪h]s%AHVU-=Wvժʣ˪ս`R~D<4U$ȯSF)Yck iy .wZq!PeXTSgo])?%Q\-^m-5ЕhrQEذI='E@i`EA:o&%%8qA;G8}-CXfl*Ԅ._UtJ
+T3ȴً&I\/#Z`ȃaD&K$ ~%\r.i&kL_*zR%4nD@Řin54bٜ|;PsXk,P~ͬԛ+!NRn?BFD8QjZ%6)i"k~Vj*d1 J8`-|ar2 {etOocqgͅƔbT[F,W<A⼃e;ZwS2s}fLa2 {zSYʗ*ЖCQJ%v5NX;)&'XA1%'qnRɲ.bN
+q[B-s0UW}^9Pv(Q|P^r9z|I{OzR] >=p&9KhOu,RS.GG<ԒoBs)e' XJ36F4H!{SO?5gf/&:Wv|3 +y2hAHGRt75oj
+Itv\@PfkAr K6{XYjԴI~RL`x%2H7%]\c.9F0|-f0tbnv̾Ps;ye|}
+Y<@
+ݘƨ_4'P4tc)mO$T 58#W 9m>2C414EA3"ocA -FR
+endobj
+6342 0 obj <<
+/Type /Page
+/Contents 6343 0 R
+/Resources 6341 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6347 0 R
+>> endobj
+6344 0 obj <<
+/D [6342 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2110 0 obj <<
+/D [6342 0 R /XYZ 85.039 559.099 null]
+>> endobj
+6345 0 obj <<
+/D [6342 0 R /XYZ 85.039 522.834 null]
+>> endobj
+2114 0 obj <<
+/D [6342 0 R /XYZ 85.039 412.725 null]
+>> endobj
+6346 0 obj <<
+/D [6342 0 R /XYZ 85.039 377.315 null]
+>> endobj
+6341 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R /F62 4052 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6350 0 obj <<
+/Length 3290
/Filter /FlateDecode
>>
stream
-xڥr-`|S4<hd}HPB4
-w/*Qb~4s/e<-$(t=R*xN `Nõ{/<`h|8MUdS^#`B:V<=fefg=㙼5[N#֐Y|$cFOfKUW_EQgÓL%NP>tn
-F\V% fNr(rufuU-77t'OWI\F6*t343RsZ~)k ʗ+ZDu-veS/[>,f6ټcd".vUzz &,edHքb~IS̅.p:KwK k  }f V}Km Nт  ``݋<¦}@A
- eA=cw6
-Nܒ34(&'"Lo.@}>Mc3eH|b4n$`â v[Q2Cn† fwsZAp[#+&|s_D<ׂjAwۣ GX3V>`&* zX(犄ס;1hy_mv֬o"RWN3e q0"gPBv8><*#@O-
-T{
-0I }k<xǁވ\x\E鎎e˥ٙR0[Nvn7hiȦW7 :@ʜ'Tz_##rvC|DxVXB=}ՐE5j:ZYXU! Mrdj A)7zVa?/z|%Zʽu؟2Cp/5,6t7LMlk}0ON0h0rP\
- g!D~q`ȹ+aK-0` Oi^PEjbM) )}<r?=kj+8N vyaj]%I L=f
-6)@-iq+'95rlr,.HMETGto!<9phl~pH\B}ˮPBA<<:L
+xڥZY6~_G[ecϱ9^WH%R&gTFGMOM|flRn.f^( ̡y5)N&* F>dջ˻Y,M3~/7<4:n?q ûLy@~7s+QLp/?̳#_(ߖE^uL qqAG~D~hjgҩW7xwU*<g~ hO=;ƺ.A*&u׮w0يb6;:(|U2fХꪞlPI
+7SלlP_]U"0|E)H_h:f]u=
+>[aUH8=,|&a轆BCOGL'ڍp0%jA%u? s@)t@`y{w@x#EcWЖtx8vDtv=xڀ_PO﷦džE e"LzAmJx|65=tQ
+<QCd6@GVoĻ9( 2-<ըA F֕L"hnKv[۪όޒ
+Ey[z@ژ @ahUY#
+J'VYN}eVÃ@c .Rp:4\-f8y 㠵A8oB{ C@90>]=]ÇRZ6γ5 cWIB
+ϘǶڞ}t43y^vӌ?h ~+i*WӭKz<;>F~ qI@! SUNPsxCD(4_| r8K@!zl~4V<p3ح#챻=g?Yiz6hwh(Za9xGV
+RnKBJuc3.y?w{7 )k>S'?L4'XG~y
+]T)`3KdHc5iRt򙧞8ۄ>&/жR6m#40*`t1&(y0*,
+rAc0lPi~Ar\Qg*94%Nn#mg7 4$׆/ؘc~k}yCh!!Wŕ&QV,~T SvacV_Phn%BBgY%v')©v+] tdZ.M5݋B4+fc.XfJx8!Vaca#hj~&3Jcdt Me
+'W)CѣI& b#-E:lo=Ȟؾqgo;.,9Gy
+4OEhh||^s*TNYԎ]H\9Ju@ɝJ`}]qdz$ՏBara؋n!ڲe
+>RƩTνwRc+6'
+ֺ0- =Qm5BT7ul l}`VέjSHM-S"E&V @sfE,ӑ0k!0$pUGߘt"d3h\o)ٷx #H߄ԩ ţKo_LpGx޾&)]
+E_yP>h\O
+G?E
+
+2*])ыҸd./}폊lMT~?&_%pT-Gnjx^C` OqWPwYVEbx!,U;a@JћD XN`Ib+j22
+B,<cR6anYu.Si,vCPt^!iPQ/dbl/z nssG_E8kF9%s_@b#'Y_6V*c1 }At22L^|}X|“'j sFP?עC &r#endstream
endobj
-5968 0 obj <<
+6349 0 obj <<
/Type /Page
-/Contents 5969 0 R
-/Resources 5967 0 R
+/Contents 6350 0 R
+/Resources 6348 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5939 0 R
+/Parent 6347 0 R
>> endobj
-5970 0 obj <<
-/D [5968 0 R /XYZ 85.039 781.388 null]
+6351 0 obj <<
+/D [6349 0 R /XYZ 85.039 781.388 null]
>> endobj
-2078 0 obj <<
-/D [5968 0 R /XYZ 85.039 761.463 null]
+2118 0 obj <<
+/D [6349 0 R /XYZ 85.039 584.077 null]
>> endobj
-5971 0 obj <<
-/D [5968 0 R /XYZ 85.039 741.337 null]
+6352 0 obj <<
+/D [6349 0 R /XYZ 85.039 549.327 null]
>> endobj
-2082 0 obj <<
-/D [5968 0 R /XYZ 85.039 633.349 null]
+6353 0 obj <<
+/D [6349 0 R /XYZ 85.039 495.13 null]
>> endobj
-5972 0 obj <<
-/D [5968 0 R /XYZ 85.039 609.367 null]
+6354 0 obj <<
+/D [6349 0 R /XYZ 85.039 455.088 null]
>> endobj
-2086 0 obj <<
-/D [5968 0 R /XYZ 85.039 120.748 null]
+6355 0 obj <<
+/D [6349 0 R /XYZ 85.039 414.441 null]
>> endobj
-5973 0 obj <<
-/D [5968 0 R /XYZ 85.039 99.547 null]
+6356 0 obj <<
+/D [6349 0 R /XYZ 85.039 373.793 null]
>> endobj
-5967 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F35 2880 0 R /F56 2890 0 R >>
+6348 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F62 4052 0 R /F38 3001 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5976 0 obj <<
-/Length 3731
-/Filter /FlateDecode
->>
-stream
-xڵr6_PUMU3kv6(JTH*3ޯ߾
-?5Wl ځlcZIzczƳ&QG)4Tg {HOp$Ϗ:i$c_oQ|]ʽ~w:>@<=RS(Q|5}q;8ra*eU5݂Qpe~oqٷStЏߠz_J8h5C/ȇDyy,ꪕT6[(
-949k^QYu,ݮƻw jb=בͪ+q*I˦Xe"{U4-x[и0p<qqLQ
-BL 'џ.nZnFG ^uhu5a>GO48{h "02^x槒.o'۠)t
-#CIUīM= `dW5aW|2et Sc8~FyD2BR >2,Z
-C
-[o$@@B &CRf8m0zvפU]22"۲
-u!8G{WܙR."&RԱbnŕuc%[)XFb6a$3)$1S} *_LgN[:bB(ߢwE3@ >@ﴊO"ZdJh+[kGũ%,y>C<F,<FhFƬ%B0VsfdVmWrhg6cM
-+
-0{gf[XJb>--8I-
-9¯lJ"G7-s=? Q0.Tn0WN
-,AyUwt_ 6EN:[ m'sm>|ys_$Y7.]vEhaG yY?  :/i2r%pl/=Yigde7Ġ=LtV}’V8a\^`I|;;hņ=)E;X~%p4C6h9~afmcfJdYY *kE*ؓ4[˄/z_һ4ZD]cuM/ʐ*R!CĪʔl5eOմΥ;h'tj}R#-׭cN|諜ژiD\ڰm*k
-po~
-vq܀Ү6gbv}- IoeKJDFÒ}}Ih[R$U.4Į1F(
-7 y܂YόN7ʊxIʩ5|ĶcHY{wyoསXe`I_e7̀r/>F!P=:&1O,Q9>2*ľ<ewQ>|lm.TQ}SΚ /[bљ" e#aA_4'on"
-dȕ8.Aھi@D]93 ٰ ȫa0L{T%P1M*#QdSp3Y3
-WDZF/avd..*5T4STE5!aB˅(2GjZD짓sc ˢ-YdKhF.2RZ2]!Sjwr*g <ߨ<ԏ~?endstream
+6359 0 obj <<
+/Length 3222
+/Filter /FlateDecode
+>>
+stream
+xڥr8_ᷕ" k߼1JlX<"-sBIo_
+`T{]IE$AD:}Λ|]5kAPժ6ŗdB5kkIoX1Trz#WE'/doivU$^`'fkJC))O4_ c*Yv
+A `mkq'${<D͖rWԲ<$PIy^aV뒻A 9-3?B*
+!'DHޞ;/!qo
+ޡ4tFⰜ=FѤF]q+_xGBjBZqgQ2Ui8!޲nOSjځMmLu&H<
+
+J#ɖ;+15R 5Gp{R'`{Rvh7P@WdZ"k,е<#rQx X@Gg$Ѻ&=<
+t@tu $(Lj}7<^$08/6Ďsr<"ЌGB4 F{C#Mp&\ɍFsA74 _6-.*TνG .=ɦ`Bۆm.ݮ tzŊk;Rlh\ƁGiL #wASMNJ4ezN*Cğ>O5( I( [Xqլ
+|4ń0VO֕US60!-с% w=[ ],qTQ d)QJ < -η13>!d% ϬfqdbV悷"=* #Qt 1n<kr| k ہǫaABr9 @$in>dw6A0k5u68nB|s&"Rt+[`Aw=87-|wOZ
+J0ˮ-?|ɻY~vĞ';:Hq.تᶉ:ҺIlmM̲Y ub*qb#V)}P_Զ只ˁj` .)lxYHHÈOL]τrxp?ATŝ9At<|CKCڨxuYVh4cn(`ݮ|3wjl
+^<'&dka.2y{$x1 4FyAG6-c&f4+.Nxob$HS;cr#WρKʶF\[r3$<ё
+r7@ǧq27)^:Ohj0]9}Y$vgT }Nz0Q^63NcV5!R/_1&.Rn{Qx`2P$y1^Q>
+@Q/-gL3"cvg[qb=&\Y ?.7tӬ+
+\z72*=!%<'hEO]~$_0>[l7*<QKf>>Wy]=/PZrDnSM8#o6u`&=cnV'\q;v= %e3b;O)hs|/ !?4&(@ap"kendstream
endobj
-5975 0 obj <<
+6358 0 obj <<
/Type /Page
-/Contents 5976 0 R
-/Resources 5974 0 R
+/Contents 6359 0 R
+/Resources 6357 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5983 0 R
->> endobj
-5977 0 obj <<
-/D [5975 0 R /XYZ 85.039 781.388 null]
->> endobj
-5978 0 obj <<
-/D [5975 0 R /XYZ 85.039 761.463 null]
+/Parent 6347 0 R
>> endobj
-5979 0 obj <<
-/D [5975 0 R /XYZ 85.039 734.834 null]
+6360 0 obj <<
+/D [6358 0 R /XYZ 85.039 781.388 null]
>> endobj
-5980 0 obj <<
-/D [5975 0 R /XYZ 85.039 707.735 null]
+2122 0 obj <<
+/D [6358 0 R /XYZ 85.039 761.463 null]
>> endobj
-5981 0 obj <<
-/D [5975 0 R /XYZ 85.039 680.637 null]
+6361 0 obj <<
+/D [6358 0 R /XYZ 85.039 736.114 null]
>> endobj
-2090 0 obj <<
-/D [5975 0 R /XYZ 85.039 396.451 null]
+2126 0 obj <<
+/D [6358 0 R /XYZ 85.039 218.006 null]
>> endobj
-5982 0 obj <<
-/D [5975 0 R /XYZ 85.039 370.305 null]
+6362 0 obj <<
+/D [6358 0 R /XYZ 85.039 183.26 null]
>> endobj
-5974 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F11 2898 0 R /F72 3966 0 R /F18 3969 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R >>
+6357 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-5986 0 obj <<
-/Length 2930
-/Filter /FlateDecode
->>
-stream
-xZrF}WV0.ߴ8%Z*o*H@
-BtpXX%\2)=폾ٖYhvOCfɯӛu]q$BvlίL
-c'4w3lP p~:s܎|r>I1Q]㏓_F HeQ8zeQ4Z(5=J=?=w
-8D9Pp-3 U{j8NqCcH/S,bDFCtCh<f0*UJUD/xu˿pl #z:n!0</q1=` ?)+,gVx&OOXV\Pq+\V1 ,ʍ>.N[
-MVRS9ȍs<,‚)SzU<o{a*nԂHWQ+P؈gN9\5ȊEIݐaCfhPLyu.%ܠԻb]>]k',U"/yI<*w*VYӤ"NHh:/ 6fOV``t
-(d">h_ fyeI-4-ι&<aOc|3S _rvgl3iz;c6Ym IT+1G
-=o匑kQeshsl`?6*
-mdL(,[5XQܷ?z~o3ۋL+e̚.ylʦ % E1˴LhQ`9uC "w vGQiӷzeM `i=slX鼉,^ZG. in[Ok2hJ*PxVixT [:C5}z&һ) )<Cd\~Ok&
-й~óQ>OW"-.踛1UD/;LH]EϏٖYT4 ͣeXҤq3"y"IeZ*-aZ64ٖ6<:EC
-_9ãL `ڱL/J)<׈G̥zF542
-cE^׃WlB7![{I ~֔xJa;ޓ"Ntw]66IQUU֫1:FnQ?%׷Mˑoddi9!釜+wL?` E:xC/
-_DB,
-!D_}١mKݬK2vSb青dTǴzjQA;/`j$H:%B>M4EP2v&%ic7v~
-ʓcfD"]W-"kBL5^v:p,PFJez)-qbHo=ϔ}"lbi
-w9븒.ZF4#Sa(-ZN3D{*!,N)grӳBTqRJҵ}f*P ڡy/o1[Vo{
- 3+.o2\4pcDZvlubv)<ZΔoftҶdw7
-8:dw;}^O*D@hڃ"ǝk<
-ǟ,Ϳ~o_6կ:,
+6365 0 obj <<
+/Length 2735
+/Filter /FlateDecode
+>>
+stream
+xڥZrH}W( EX4P\+{z{}y@Il#tOFG7PUYu2dVI虖&Ah* '5YCϗ [$f"2Ϟ?-3Ӫ3]OMߍ?nOgJ)Qt8=>rݵLИ5@tf_oq/7OZ& l TQ8yw˴{{2=Ww~xk;u-1#3rq|t}"@mFGʳLr )
+mh T|o߶1Z?$%cukNˣ˲ò]z_)77~Zм;1\&B*t
+,s-y |
+
+YPg\#7A#1< 5i<
+FR+7~s1~<5mV+YܒAv|Fhj"D=VP VhжIKqԧ}mk0NRo1FKxC-;33+#YЃ鄮cߝHMaCMQᢄo@ ; `IH##NzF$A3Bg)
+V"?h7<k>Pbq"R=6ky`cV`B>1Nf1U?s| ʻJKHv)UB{/Tuc{YQHGi$l#X+B;{n+WTzz!)din4,"H̙ihNmpp*x['XT 7RR~,^^b :9G%s쓃B֣%64M"ʔ^V?e4t٬'FS⟒2"Pɾ934a~QmCklS8Q򲎥 Dwʛ m";Ҋ6lλxf0Dp,tDEҭptؠO}F'3)ZxoWƴ2NK_˦o0Lml˸Z6*"ZE@zv9L\'"HGVhSЊ|iB~~}[Zdz%5S f O&lKq&Gu#.kĻ݅l^8o@H{`au愁Z#A
+ZZf"sv܎ 7WD4̉CSQݸr/|;F!êY|/6RL$p\sX
+SӮ<5'mǵxT!>N=+r<I^ݮ$]D;xti.iC*LwNN`RAݹ$)KK٫x)R8t/a9n|+)3<6M'z\ tOf0LkDQ 1mmUמtw٣~7;6*q
+]P$(I
+5c0÷-=O)-Q>5QSS}_4\~ :(7l-p:ɽO.7y]<2AeG'3lc1ԝEO7cK x!QhuÿT:4Z&7Wj'w!{4*@2f]OΣ9z-*x
+M/T &gendstream
endobj
-5985 0 obj <<
+6364 0 obj <<
/Type /Page
-/Contents 5986 0 R
-/Resources 5984 0 R
+/Contents 6365 0 R
+/Resources 6363 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5983 0 R
+/Parent 6347 0 R
>> endobj
-5987 0 obj <<
-/D [5985 0 R /XYZ 85.039 781.388 null]
->> endobj
-2094 0 obj <<
-/D [5985 0 R /XYZ 85.039 635.285 null]
->> endobj
-5988 0 obj <<
-/D [5985 0 R /XYZ 85.039 614.088 null]
+6366 0 obj <<
+/D [6364 0 R /XYZ 85.039 781.388 null]
>> endobj
-2098 0 obj <<
-/D [5985 0 R /XYZ 85.039 585.477 null]
+2130 0 obj <<
+/D [6364 0 R /XYZ 85.039 761.463 null]
>> endobj
-5989 0 obj <<
-/D [5985 0 R /XYZ 85.039 563.616 null]
+6367 0 obj <<
+/D [6364 0 R /XYZ 85.039 740.47 null]
>> endobj
-2102 0 obj <<
-/D [5985 0 R /XYZ 85.039 470.045 null]
+2134 0 obj <<
+/D [6364 0 R /XYZ 85.039 644.777 null]
>> endobj
-5990 0 obj <<
-/D [5985 0 R /XYZ 85.039 449.052 null]
+6368 0 obj <<
+/D [6364 0 R /XYZ 85.039 612.356 null]
>> endobj
-2106 0 obj <<
-/D [5985 0 R /XYZ 85.039 378.416 null]
+2138 0 obj <<
+/D [6364 0 R /XYZ 85.039 539.599 null]
>> endobj
-5991 0 obj <<
-/D [5985 0 R /XYZ 85.039 346.89 null]
+6369 0 obj <<
+/D [6364 0 R /XYZ 85.039 496.645 null]
>> endobj
-5992 0 obj <<
-/D [5985 0 R /XYZ 85.039 317.471 null]
+6370 0 obj <<
+/D [6364 0 R /XYZ 85.039 453.677 null]
>> endobj
-5993 0 obj <<
-/D [5985 0 R /XYZ 85.039 289.767 null]
+6371 0 obj <<
+/D [6364 0 R /XYZ 85.039 412.424 null]
>> endobj
-5994 0 obj <<
-/D [5985 0 R /XYZ 85.039 195.529 null]
+6372 0 obj <<
+/D [6364 0 R /XYZ 85.039 250.439 null]
>> endobj
-5995 0 obj <<
-/D [5985 0 R /XYZ 85.039 181.373 null]
+6373 0 obj <<
+/D [6364 0 R /XYZ 85.039 222.735 null]
>> endobj
-5996 0 obj <<
-/D [5985 0 R /XYZ 85.039 167.824 null]
+6374 0 obj <<
+/D [6364 0 R /XYZ 85.039 195.636 null]
>> endobj
-5997 0 obj <<
-/D [5985 0 R /XYZ 85.039 140.726 null]
+6375 0 obj <<
+/D [6364 0 R /XYZ 85.039 168.538 null]
>> endobj
-5984 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F56 2890 0 R >>
+6363 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6000 0 obj <<
-/Length 1900
+6378 0 obj <<
+/Length 1942
/Filter /FlateDecode
>>
stream
-xڭXmS6~7%rt(B )4~ھ瀡3M,iWjѳSU44R(cbN 9HNpE.'o=h#e9zwx<c6WJ9yz&˓ ?\3sgGtNs=mrX1B
-{;M&P>B2DJZ~>Waa\D +Wt5|h|}+"gIY↏QSnYӲw;Wj:MZkgQ榆W迴MVY5- o nSVv{).AoO1B5Kh4'%rFli# ]K"`ʳUF ϸN\m,Mݺ*sjp>)KY۪nfFK[ ]:ߤkPhnI݆ɦ>wj]p8ͪ;Zi#`ޖёHq4K +߱7 Gf6]/gF"Adu#wBsV6`^ it|Oqj^6,k`},I|bh_iնX4r><
-
-iOa_3v; L%p<y?r)NFكK*pr(b1KT<T=L<K55Oa.cE,qm3ns>?@
-C,wRCWS7/=Wy}6É OKV%lfM2B puۊxEx]2ڵ,a{Um.߲Fr;HڱtAuW]IU;rQGe/ikpE pc-Hيdz 潒*0^ 줈0=t0 HPCŽwaQPq[ݐ:qEk=<F lE[Ŷr
-QU0rQ_P4-&K/U*ﲵ
-
-
-sOIm ]tǪ_\ 1A1U sd-8B~Yy$r)`TaWBA AhG[uď|T0$PDQry9<oUggY Io݀㞳yH2a;H^Dt~Am W=~}wpQp—3XO+ Ǹ-Knl]QRZ3G%A}qX&W
+xڥX[sF~ׯ[LLڗkSGvkeL"d**=" 塓q====R8mSxY܎l/ћ_=l[fdEٲ3]Og'ɅRp9xǧ{^^`Ç \&qwɗٻͬ RD(?O_q*YƖizrdFW;S:0PIvLe;`*2=mM=SRcMlz6rqcBsOr9ޗ "n`K6/`픽ph52*޴ESV{>5Xb/r -wck-6};Y|o[
+`!]L@X ƴdM Hfb%[dD[?mVz)0V!s {H3Gsl(4U{B3it}I͊p-s9#fd⋸o60ɳT̹ĽrcOahO5ȣx[?g/i\ѷ7 kI=$hpqì:պcv_y?4jt45Ep\ma\eLK>}Bke_Kd
+ԼIe@2 V6-5h!i+TTe`ѰbLcW@
+x*n[7q\lq5CQ#}{@ I9V7j ~1sr  |lh(uMnSiI? .9r&X
+\zv(GzVCiYOhv3^Vϳ֞s^5VoLIpe^f8F݀$](nS:.pqQqWz`, tSC8q-갅mx&BO';[MtE7( ?>gS\_
+R3PA}4;QDB2bF!oͩ:I{P!eFp/KBU*R7+4,a=(!
endobj
-5999 0 obj <<
+6377 0 obj <<
/Type /Page
-/Contents 6000 0 R
-/Resources 5998 0 R
+/Contents 6378 0 R
+/Resources 6376 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5983 0 R
+/Parent 6347 0 R
>> endobj
-6001 0 obj <<
-/D [5999 0 R /XYZ 85.039 781.388 null]
+6379 0 obj <<
+/D [6377 0 R /XYZ 85.039 781.388 null]
>> endobj
-6002 0 obj <<
-/D [5999 0 R /XYZ 85.039 748.383 null]
+6380 0 obj <<
+/D [6377 0 R /XYZ 85.039 718.296 null]
>> endobj
-6003 0 obj <<
-/D [5999 0 R /XYZ 85.039 734.834 null]
+6381 0 obj <<
+/D [6377 0 R /XYZ 85.039 691.197 null]
>> endobj
-6004 0 obj <<
-/D [5999 0 R /XYZ 85.039 693.58 null]
+6382 0 obj <<
+/D [6377 0 R /XYZ 85.039 637 null]
>> endobj
-2110 0 obj <<
-/D [5999 0 R /XYZ 85.039 637.099 null]
+2142 0 obj <<
+/D [6377 0 R /XYZ 85.039 566.364 null]
>> endobj
-6005 0 obj <<
-/D [5999 0 R /XYZ 85.039 610.485 null]
+6383 0 obj <<
+/D [6377 0 R /XYZ 85.039 526.201 null]
>> endobj
-2114 0 obj <<
-/D [5999 0 R /XYZ 85.039 566 null]
+2146 0 obj <<
+/D [6377 0 R /XYZ 85.039 468.167 null]
>> endobj
-6006 0 obj <<
-/D [5999 0 R /XYZ 85.039 544.803 null]
+6384 0 obj <<
+/D [6377 0 R /XYZ 85.039 433.421 null]
>> endobj
-5998 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F66 3242 0 R >>
+6376 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6009 0 obj <<
-/Length 2279
+6387 0 obj <<
+/Length 2049
/Filter /FlateDecode
>>
stream
-xڥYY6~K(R>4mhqi6m Hr7d[ P,vc8+~<աP|P|S|3/gQZ:=1$
-EVaRe ݋H#&wD~fZ?B]}\,U
-6Bƅk3VA(c
-9)
-C2yQ#?nՂIQHq% ԇ(2:n@Jh *TrZ5h/]ݴ!-w#\wJ$#AS6tT՗"ܐ'KD V&ya^Ĕ?dUWott1թWN?-yȳb7&g,atn1 zAC>GEЦU(KXcԈ 9v118@֋Sb9L R.+lnf6tX3?pn ׂ&Ge5 #
-W4(MNW+LRFmoT|Yth-;HaFqe*8k'RsYy2ßvƻ -mk>`
-,zL'I  C݄ (\eIP)>>|-P:E(l^ΔB%_~TqdCᖣ>AYHR栐 )!6Al38V4;n"{UFjk>H0D-Flp?%K'1x{ɐNc@;r"'M$@ jYQ2;W^v-wDW[ΆYw_[$a% _e}N*!Z=9jԊe p  o9Aa;tA1 ]1@ڎ2 8 -, ]H<dr+IY`x 3cpnua1ZȖm)smDN[)#?t P^@1>K۽|mǝ zt!6'[`q\=qX.N0(pPuEzc$ DsM)C{ˌ
-5Mڔ6Ae `xmS5%{ph~s", h@3@[/:
-N>ilphEzS c;dtBUjh!.8
-[ob=6.? I
+xڥX[۶~[d֒"u{<%M9
+[?,k7zRt@sP|VB8_DUʼnTYURjbVN+Rv Zdw-8q_ꋃGt-+fXeC Nxk\NdO·#W\˳Ʋ6{upm.Ǯ jt.[c|
+=IR6~"-جO{׃Ni>G&'uHZsg@}N#ʖ Tu?PQX_qHy6I;=b$^N;miPn¿Y&4&{t&nnu\smIȉ EEߗqL
+%՟et6f>T+0:kꎤW%=7Tz7PXT⵴L+rBPv5;XTaLm\^h:@xjƝ;^nbN{^%7zklCM8bM
+{8
+"~natR 씩De>-~]E`i *UH2)Lڤ@ <
endobj
-6008 0 obj <<
+6386 0 obj <<
/Type /Page
-/Contents 6009 0 R
-/Resources 6007 0 R
+/Contents 6387 0 R
+/Resources 6385 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5983 0 R
->> endobj
-6010 0 obj <<
-/D [6008 0 R /XYZ 85.039 781.388 null]
+/Parent 6347 0 R
>> endobj
-2118 0 obj <<
-/D [6008 0 R /XYZ 85.039 761.463 null]
->> endobj
-3026 0 obj <<
-/D [6008 0 R /XYZ 85.039 667.044 null]
+6388 0 obj <<
+/D [6386 0 R /XYZ 85.039 781.388 null]
>> endobj
-2122 0 obj <<
-/D [6008 0 R /XYZ 85.039 667.044 null]
+2150 0 obj <<
+/D [6386 0 R /XYZ 85.039 761.463 null]
>> endobj
-6011 0 obj <<
-/D [6008 0 R /XYZ 85.039 642.326 null]
+3129 0 obj <<
+/D [6386 0 R /XYZ 85.039 653.495 null]
>> endobj
-2126 0 obj <<
-/D [6008 0 R /XYZ 85.039 490.395 null]
+2154 0 obj <<
+/D [6386 0 R /XYZ 85.039 653.495 null]
>> endobj
-6012 0 obj <<
-/D [6008 0 R /XYZ 85.039 458.869 null]
+6389 0 obj <<
+/D [6386 0 R /XYZ 85.039 615.228 null]
>> endobj
-2130 0 obj <<
-/D [6008 0 R /XYZ 85.039 226.062 null]
+2158 0 obj <<
+/D [6386 0 R /XYZ 85.039 434.077 null]
>> endobj
-6013 0 obj <<
-/D [6008 0 R /XYZ 85.039 204.866 null]
+6390 0 obj <<
+/D [6386 0 R /XYZ 85.039 391.123 null]
>> endobj
-2134 0 obj <<
-/D [6008 0 R /XYZ 85.039 162.706 null]
+2162 0 obj <<
+/D [6386 0 R /XYZ 85.039 110.288 null]
>> endobj
-6014 0 obj <<
-/D [6008 0 R /XYZ 85.039 141.505 null]
+6391 0 obj <<
+/D [6386 0 R /XYZ 85.039 75.542 null]
>> endobj
-6007 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R >>
-/XObject << /Im2 4150 0 R >>
+6385 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6017 0 obj <<
-/Length 2755
+6394 0 obj <<
+/Length 2559
/Filter /FlateDecode
>>
stream
-xڭYoFB!(D4|p(KҸ_ WJIMD"Z>$1"7+5ādq<YnO5r› \z>?9}K&5W~v9n:Z;q(/ʹ ̧3弅%\ٛ<qN4/ד$3P(_N>~&+I<$lOLhyߜ\kf_xa7N:9.,g67<?P'oeUMVwJYδq5o=׋#b{UHΓ7l*NZԛj*yKB^[k|*W`;#g#3QUEZx
-:.R0W3pǝo}(P*guWAj74uWBʍ=h\<Ϩ; b26×8xBv(r rV1 m_;Y`@˘2
-*lɅ?M`rև` tȡϔ62t}NĦU
-$7K
- 2=3#L-xndmL0=7mv P3nB4}i> uAN <yَ;a8NuDFIb6}~^J 6a<7̓$%_F-=j%rIFSBI*LЪ זiq(lz#:ԁu0[[tGRPu)ԑ}Z dXjЬIz {`pԻb/F{J^]i},J]4 zJnS~HC{y6G#o6kt šnN$AxR32ə%1/ {dw
-2l Gn,hsCb:H2u
-z(-~knƠA#1~G,;YnԯMױ(^HFKuLDWWž@ړz!(恘PzP5~8&ug|w!Xۭj(a=?ūx'd|͸i)1ϵ g񇃶h6tHe N;V}OxLKmVmUlčVZ.q2[0i:{7jK !g=oLwCڭDޏZ?=Ӿ~Pʭt"G?τ ZȪendstream
+xrF]_}p-Xe0T탽N,ӕ J(
+q d<Q+ \\"܄'`H
+x%{“_8NM "@
+z]]|Q(I[VZKh6xZT[J rǫj
+A8i/?q8vu @0֨x4b]?E=?J'Ǒ.pCiGp#(59~<Oޏ щ2y<MU;-m2asj-pS6,GN!Q%)fZn][k%o[I{\DGsPKF<{<3u)u ډmou^6r%kr9o(:|+JŶ^ .ǡhnOG= J
+B0Kˆ'߯ٽcqHBQpB`g{ [JC.-} HƜD Hep?rEbq۠:$L3FUX?P925(E
+u22(x|, igh5>͂MZB6V-]*"8X/r9frW+Gd՞'yv:0T#VwFƧ$L: }vQxh)2MGq&*cs_f6<
+
+9e={`FRY$Nᛢ^T0^U@2p 9r2ևʓa<jG@-ڿ])jT[bItzw%3qkwMQD9\<D^+kYK @{*J(RHy١X{@]:}PN5tItȤ͋ U˿,LX(1<]vF™؆OPoes/[/Rى1<`v% #B9Pp|1Gn b_!A waBUdMݯ1 os\xRʼOSB}Ăq+ #kb_
+,># K`>VCN15:лLܻ=F&^;(Yi-U<MH#VmA[CSºo}
endobj
-6016 0 obj <<
+6393 0 obj <<
/Type /Page
-/Contents 6017 0 R
-/Resources 6015 0 R
+/Contents 6394 0 R
+/Resources 6392 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5983 0 R
+/Parent 6398 0 R
>> endobj
-6018 0 obj <<
-/D [6016 0 R /XYZ 85.039 781.388 null]
->> endobj
-2138 0 obj <<
-/D [6016 0 R /XYZ 85.039 488.874 null]
->> endobj
-6019 0 obj <<
-/D [6016 0 R /XYZ 85.039 469.924 null]
+6395 0 obj <<
+/D [6393 0 R /XYZ 85.039 781.388 null]
>> endobj
-2142 0 obj <<
-/D [6016 0 R /XYZ 85.039 246.049 null]
+2166 0 obj <<
+/D [6393 0 R /XYZ 85.039 761.463 null]
>> endobj
-6020 0 obj <<
-/D [6016 0 R /XYZ 85.039 224.848 null]
+6396 0 obj <<
+/D [6393 0 R /XYZ 85.039 740.731 null]
>> endobj
-2146 0 obj <<
-/D [6016 0 R /XYZ 85.039 128.027 null]
+2170 0 obj <<
+/D [6393 0 R /XYZ 85.039 362.875 null]
>> endobj
-6021 0 obj <<
-/D [6016 0 R /XYZ 85.039 105.311 null]
+6397 0 obj <<
+/D [6393 0 R /XYZ 85.039 330.375 null]
>> endobj
-6015 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F14 2895 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F56 2890 0 R >>
-/XObject << /Im1 3957 0 R >>
+6392 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F64 4117 0 R /F18 4120 0 R /F62 4052 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6024 0 obj <<
-/Length 3052
+6401 0 obj <<
+/Length 2001
/Filter /FlateDecode
>>
stream
-xڥZYoH~RŰ^ĉ"䁖hѿ:yHH0@쮮҈Y仞ga$\EUq60L^oˋo={l@$g忮no #;_az=;g9_# nv.#㛷_Շ+h^_IՁBQ]| hv8W/.q5=]^h%P(S4}`)EzJy[ ^Q`Q(wWUpzS?}zt~88ZG_ W-(8v p@UWCV׆o[Mےr̓y3",2vچ<BzEO[=,58oH^g ]@ȺJr6]\:Oа/Hy ŖŦ* _ζ*RJ'z'guϳ5<B0[aTs \ɚ>rz
-QDXd0ztqs&WվSv
-fw@i5
-wU~W~Ohn0"GG9י=rD{Ӻ1nds ^Hه. K`⦐Amҕ3B T JZ8\۔7R=.Tλ yĐ_wp W{YP}|m팂#!pU&JC
-0F%XBυj⟋M% 鹡
-6RB$"-:6 ZRA-^7}lϻN('E(쟶kT{gW<1nh"ylׁogAA;=.MZ|u5 4F]I2510Ӥ>;RvNG3(,|6_j7FC%2٨I15b`鰅xIB:isa$WQ\apN󫶪3<w0!=T*Ӷj 8sҋ榆57^&]!.ƮNҿaØ~3 HldSmc @Ko*bLF {-,}~@?4lH'ݠqw#=JзL `hX;kpƖ}W@*|MDD,
-6fCSҔYiڕ&mEv$O,*e O,RQͥW 7MWd [*68s>QrV׮M(
-,v{N&N%$h'iA4 OcL:-W\P:oxCFCO=G\)L'rll ,Yc$H?`#壧 $@0pipNҾ-;k4H8Di%-n<f8:zB%Y" Oʟ
-f};MexW0]۶궮0`RKQa.'RB?H[t0b@@f
-Ʊ%ד=T}cLIB{ 3sY
-PeTVٯ;;g~?NFۛ8?~{06ډb
+xڽXYoF~ׯKQ
+hr% 8iR;qcI(-Q
+IcW&-J Pȡ=fvffb1㱎Gx^
+v^ilt2sc/ϖ
+lyd#;j9/'¹My+&z?s^<{{K&_goF糝v;I}}p7#h|c]@77PџxOkb*b7qkUxn)HpE1X*Psݧ Dj{]ky|d)O<Ȍ¹E3u"=y?4 #yrUW_<(ٕv HC!D!I;3ǛAUf3JTu5,+o)rvӏ'%.c?r"c5g`X>tTKۖWvuy̍֨^Ah\T`tdɗ;HMB|N
+REn pRK2aʹ}RlnT Ո~EJt!;<b.+T=R.v B1!CD -6> HD='tm kt#'<](
+Urw[dDh
+p;Eb'"-zn׶M4Ւpn<tTg@ɸHra Ek-EſF"COqt>h]b*]/f: ``ĀmJ;'&p0EHSkdSאL;4=^|MqQ<SQfO~?IUF
+
+VSh 2 B#5k? 
+Pq@\0M0%n}b"# )H!& O',t_A#=[gF./A_{v);55l65ЉZГ,.@@^n;YU MU:Ħ@֜r{Ȣ]A~  f
+]tI$ۀ] ͺYO}Å+k/!/jf/u:Xjj<p6]VXK1t5:G,,W6os\q+Џ2oS7PRH-
+{
+* |[AZPzo*?ȯ/5 C-xsqc&B-D-k%p17Fok;zm~
+?s4ҕ~詾^+Wendstream
endobj
-6023 0 obj <<
+6400 0 obj <<
/Type /Page
-/Contents 6024 0 R
-/Resources 6022 0 R
+/Contents 6401 0 R
+/Resources 6399 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 5983 0 R
->> endobj
-6025 0 obj <<
-/D [6023 0 R /XYZ 85.039 781.388 null]
+/Parent 6398 0 R
>> endobj
-2150 0 obj <<
-/D [6023 0 R /XYZ 85.039 255.288 null]
+6402 0 obj <<
+/D [6400 0 R /XYZ 85.039 781.388 null]
>> endobj
-6026 0 obj <<
-/D [6023 0 R /XYZ 85.039 236.619 null]
+2174 0 obj <<
+/D [6400 0 R /XYZ 85.039 761.463 null]
>> endobj
-2154 0 obj <<
-/D [6023 0 R /XYZ 85.039 236.619 null]
+6403 0 obj <<
+/D [6400 0 R /XYZ 85.039 740.731 null]
>> endobj
-6027 0 obj <<
-/D [6023 0 R /XYZ 85.039 215.622 null]
+2178 0 obj <<
+/D [6400 0 R /XYZ 85.039 643.781 null]
>> endobj
-6028 0 obj <<
-/D [6023 0 R /XYZ 85.039 93.418 null]
+6404 0 obj <<
+/D [6400 0 R /XYZ 85.039 612.493 null]
>> endobj
-6022 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F35 2880 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F14 2895 0 R /F11 2898 0 R >>
-/XObject << /Im1 3957 0 R >>
+6399 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6031 0 obj <<
-/Length 4084
-/Filter /FlateDecode
->>
-stream
-xr6_K&ևIt{on-גT@PLdNCN8u~f*Yv:[ aw7''TA7wr3?yWM֓g4&/_۟TM@A9ɛ|;._=Ǯ̫Kwus槓W7N&0ƭ~Cx:t:N*O'&Al|Nޞa1sʳF<5QD)4tdQ:p8x*Q,0LG&?le-Klgw|l>C'˒ȉb^VTb9 dQ 7~}z{Py2tM\S4YSPǖUA2vÙYט %z>nXr! &SE]͚E
-ۑ+2v
-ͬ)o"Xg_B"0CZE#hm^84O̪lh9 b^Z3;Eg
-E..V#nًHxnqU+j% vhi`~j,-e7=A
-(x}`B"Aef3$Ml-&@G 6Q gAF{/q#@t<T풏$;@mQ6;|&طP(8|,Yi
-bezECq婋ʠsxE CD.NJ_hon˿Y)T?~{sP e᳏ࣸrL(c0qR%[0f4aQ
-ן1Govfnj>@GQ$LgL+-%lOQn)fel/ZBL1J"M^ĢE@K$A;9F4Ɠ_SFP/b= JgBP1Ea`venY1LQF{7/7ȤТ"[n6V<
-a0ؿj=+~KJD[f$G)&4JH'y9yIN۱?%G=ʩxso|v{T1n!4À
-FېMɱV82KWULxb.f<h`U2qLeܒۿ:`%%Tl'mU-5b&
-Umd}#} n)U(JF&7w\Zpau|ϣ&\FÆ =ЧS${nsW<4‹,-vN&~׫~mI`M+jg^idƸlg&M(F#r
-N4HMrqϹ=p\ 4<ж`] 8r+%#?;]0_J”)`Ti :Hܥt,_<ٻ/|<pIӥaUK(uwOc
-D`H.<bYQb@#SܮgGkL(y xff$KV cSpdc0r5Ye</.V!svl;4 BQ!WpXbVTG?X+ҾZ
-+~X7%=X=^jU~+mo'%RLֲo
-
-Y\υ6x| ?\"a.nrxvFXjmEESR<Nh RHA[ٔڽz*㊠?,G&z_T {HQ6U@Xpɚ2ý3g3!ilÿ#߱ˁ?xVypMpbrhM
-
-"hڱKK#>"d[?fFhmC
+6407 0 obj <<
+/Length 3444
+/Filter /FlateDecode
+>>
+stream
+xڭks~Ԍ pWgҎk9HVcu܎ RI@(gf{f!Ygie,m`3% Yx0=6Nf* 0ݮ<q`b=]}竛7?/4o|q 7?Gݷo|W_w
+]ߞͭ H/g?0y6{v(ޝmAlgP)NXE0 0.-TatlZn>Bē$
+ObfJyx00
+d Ws
+,"$|t<6VfD]6#:jhm"^\[^_D qqkW)YNg?Co=-Z~-h퓅V|%￲D({ctt@<OSg=?TY!i?@G-'aq]35`$ uSw-JuT4@+طZM׬{"J?8AI?ifZ&*'hy*P
+=#%@J0a
+|!9eUu,0 il@)3̽׀iOߧML3uP`oAvL8vq/ &]'<G~@}N-P x~0͸%9=u)[@"yll:nUT {fQoq .qLc8B 4/۲ w@tY4/dh!A{ݠ<p=ܢw,鬟w@m6A#Qeckw΋#h@M g}fڪtxiT|^<V-Y{;t^?e}eB;ڎGi)QLل]|kA" hJXDZ[ R- o)|Q(l[˜@EH<Eaͦ;(E$3>+E }{N4v[͎tY,kݳ⥱:}dUVmu$ p pj!?n ~ED^
+&t{U74/8x`h ;8ȳ@Zp h&A},s)
+YSpp:M8ТKqy&InRЁ\cȄ8">7 Iſ':8."(-NW@<o!8lK[m$k8|eccސ)Q!`gh%۟180l/D@w yz(-,l|yb @40sbTϓe
+PYS4.E.ry
+& 8G{Î[. aSb3&mɘ3b!= K0.2
++
+DJgc8k¿/^qe Y2B.IAf*KR[STORU_ȩ0F>msWxoh'“kI
+:w D<2D@).|ށ|1#^tr(F8jWN\?qH
+&rL4q|= N6d7_bpDg(bYܭɮ"#$R×q)b{Ȣɮ;hїph'*@KtA8XU0Iא5j
+be'K/>!3s ,<PUOН:~
+fWz+zK=sWN!JbPm_2;($4Sϗ<W
+QD҂r: \Aendstream
endobj
-6030 0 obj <<
+6406 0 obj <<
/Type /Page
-/Contents 6031 0 R
-/Resources 6029 0 R
+/Contents 6407 0 R
+/Resources 6405 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6039 0 R
+/Parent 6398 0 R
>> endobj
-6032 0 obj <<
-/D [6030 0 R /XYZ 85.039 781.388 null]
+6408 0 obj <<
+/D [6406 0 R /XYZ 85.039 781.388 null]
>> endobj
-6033 0 obj <<
-/D [6030 0 R /XYZ 85.039 761.463 null]
+2182 0 obj <<
+/D [6406 0 R /XYZ 85.039 639.916 null]
>> endobj
-6034 0 obj <<
-/D [6030 0 R /XYZ 85.039 295.282 null]
+6409 0 obj <<
+/D [6406 0 R /XYZ 85.039 607.699 null]
>> endobj
-6035 0 obj <<
-/D [6030 0 R /XYZ 85.039 281.126 null]
+2186 0 obj <<
+/D [6406 0 R /XYZ 85.039 607.699 null]
>> endobj
-6036 0 obj <<
-/D [6030 0 R /XYZ 85.039 199.831 null]
+6410 0 obj <<
+/D [6406 0 R /XYZ 85.039 573.152 null]
>> endobj
-6037 0 obj <<
-/D [6030 0 R /XYZ 85.039 175.46 null]
+6411 0 obj <<
+/D [6406 0 R /XYZ 85.039 435.278 null]
>> endobj
-6038 0 obj <<
-/D [6030 0 R /XYZ 85.039 159.184 null]
+6412 0 obj <<
+/D [6406 0 R /XYZ 85.039 381.081 null]
>> endobj
-6029 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F11 2898 0 R /F35 2880 0 R /F56 2890 0 R /F14 2895 0 R >>
+6405 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F38 3001 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6042 0 obj <<
-/Length 3380
+6415 0 obj <<
+/Length 3000
/Filter /FlateDecode
>>
stream
-xڽZYSH~WtePQJ3c0kzû13r#@Zɫtt zTgfVGɛL S1jϝ@O{pgZQ]X}Mfk9zx84?ıqOs [<#<\Os8ߝ~8ᆳCl Ɯ{'%Z(@Rwwv 1{xv$՞@ދ˽vp )?Us/༪>=+d2 [yuusg-upFv ^eWxohos^b? ox~hpJVI{h'-P(Rő/ hN[~iE:p\/#2iĦ NsNZd%RBʬ_&j[38( c#<Oi?w'4W? +5X[9;|ӛ6m|X92}WI}A +pWs#F<'mŝg\H<skS!E-s;*=Gb7iFZ88 ΂ +
-5ռƢB=w|ФҤT^m)e.LyqZ67wY3i+)5AE!ć"
-R#R x18m#qH
-ʇ۫ z*s%B1 IwBR!,
-#=e#iq7 yւO唾YwqBT/BF2 iŧGj޴lmʋZlD~a4z
-]H W"֕J8mFb%m[-rzڵ[LVI^EQk-]Lb AגCpZj8H[y0,m^/U}.z{^٦1p|$p7ttw*_00c}MFJfpa>pUro9+2Fvce pk?2$qv:+Q&,T5٩
-ұL5
-n3:辒v^+w:~؛]J5,BvB9lQIc}reI~"p^6#Ȗ(I֎ռj^u7
-Or Ѻ;[| F
-<)yfJ"[_*mmendstream
+xڭrF]_KNVv) ( Bk
+v~<S1
++Bg?}޿|K?̛xgo=u^$G>}͖ϢQ`{{52ߜ~/OMq"6Yg*`Eqd>k~fl%:
+!U[lw VK޹,us1ig,68,[_ì
+Ŧ*k-+>
+|ħv|~d
+xpeGЩ=<2&
+$EbgJ9<
+SE4}[
+wXpYs\
+_$_,PQ%Ŗ<P |J3ƫ2䃙ɧ+|A+G n>Eendstream
endobj
-6041 0 obj <<
+6414 0 obj <<
/Type /Page
-/Contents 6042 0 R
-/Resources 6040 0 R
+/Contents 6415 0 R
+/Resources 6413 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6039 0 R
+/Parent 6398 0 R
>> endobj
-6043 0 obj <<
-/D [6041 0 R /XYZ 85.039 781.388 null]
+6416 0 obj <<
+/D [6414 0 R /XYZ 85.039 781.388 null]
>> endobj
-2158 0 obj <<
-/D [6041 0 R /XYZ 85.039 719.568 null]
+6417 0 obj <<
+/D [6414 0 R /XYZ 85.039 321.225 null]
>> endobj
-6044 0 obj <<
-/D [6041 0 R /XYZ 85.039 701.095 null]
+6418 0 obj <<
+/D [6414 0 R /XYZ 85.039 295.771 null]
>> endobj
-2162 0 obj <<
-/D [6041 0 R /XYZ 85.039 426.274 null]
+6419 0 obj <<
+/D [6414 0 R /XYZ 85.039 160.279 null]
>> endobj
-6045 0 obj <<
-/D [6041 0 R /XYZ 85.039 405.073 null]
+6420 0 obj <<
+/D [6414 0 R /XYZ 85.039 122.359 null]
>> endobj
-6046 0 obj <<
-/D [6041 0 R /XYZ 85.039 380.702 null]
+6421 0 obj <<
+/D [6414 0 R /XYZ 85.039 92.533 null]
>> endobj
-6047 0 obj <<
-/D [6041 0 R /XYZ 85.039 365.032 null]
+6413 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F41 2998 0 R /F20 2965 0 R /F62 4052 0 R >>
+/XObject << /Im3 4358 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6048 0 obj <<
-/D [6041 0 R /XYZ 85.039 351.483 null]
+6424 0 obj <<
+/Length 2914
+/Filter /FlateDecode
+>>
+stream
+xڭZKs8WTՈfn^'d6v2[3s%Z"5$~2)aR@nF3\}8Ѯ$:›ϴP,d9ck*=_=nէՇoe' Y-
+[&_>%N 4qjꗳ++ (_g7p_Δ3 dsv+~)M~↉?V'T*7T( C<CV+i rpZ7y6qGgkyrڹӖ' tWbL!3Qˊ)|6<JN^Oo4Ox
+'PXA; Wu ӫbguo0Q@" #v
+2&x.ڂJ0 e+TFQ
+ƶ" zi!`11
+q<7%Q{f\Sz :$7Re?<L|\t|
+A|cڤ. ar
+rWQ8K/"ɭ&-='m=ACJJϒ\ R| 1Qf|z>#…A_֓kr$ Ce=Ql
+__&-3׍08ָ%Gu4/\*v>w=N؎}y^`YG M?o\M):5tO<:DΎ*Jn8pIǻ\sx=:\nmSNp0'ӱ1%;_m_`\JBV0cA5+21 DA5cl$γFXRWC :#4;m"ʹ" ش: f4,Xm{7jB~j))xJj-*a,Tl
+wmy|45lw]3䥬eo! dӲf\އSwU
+ rOR6aVE4*IhKB~U1yJck_Ye]q:V\.x3&gRavNXZYx" %ė2`GVYB(Js{K"`uOd)KB0S(o0z{F_/oNnԏzk hNn<?qcsO)uNmJS=ƍ7cD_O lúHvp;'>Hs<`_>jn}VHvTnQ#>?ԍ%UlywR.Zj@3T>\ Gᦘ,7C3NkXB_ps?W$n_^!ZL| 7҄(P]#@p*ﻉ7q@sZBC|Z3zϱ
+Fۏ^Cϟ MJ=M+U?<anlwudل6_6Ø]g~a<y{H
+׀洑94í7;k+JV *^G:DtkKm(&)X;0vԓԃ'>>noNY'U:jtQ]cC̛*NΟ*-պ.:4gd-QW&znIN_HP#Iϰe?`6҄]7ޝn
+endobj
+6423 0 obj <<
+/Type /Page
+/Contents 6424 0 R
+/Resources 6422 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6398 0 R
>> endobj
-6049 0 obj <<
-/D [6041 0 R /XYZ 85.039 340.055 null]
+6425 0 obj <<
+/D [6423 0 R /XYZ 85.039 781.388 null]
>> endobj
-6050 0 obj <<
-/D [6041 0 R /XYZ 85.039 323.778 null]
+2190 0 obj <<
+/D [6423 0 R /XYZ 85.039 651.823 null]
>> endobj
-6051 0 obj <<
-/D [6041 0 R /XYZ 85.039 310.835 null]
+6426 0 obj <<
+/D [6423 0 R /XYZ 85.039 619.8 null]
>> endobj
-6052 0 obj <<
-/D [6041 0 R /XYZ 85.039 297.286 null]
+2194 0 obj <<
+/D [6423 0 R /XYZ 85.039 263.684 null]
>> endobj
-6053 0 obj <<
-/D [6041 0 R /XYZ 85.039 157.817 null]
+6427 0 obj <<
+/D [6423 0 R /XYZ 85.039 228.934 null]
>> endobj
-6054 0 obj <<
-/D [6041 0 R /XYZ 85.039 147.124 null]
+6428 0 obj <<
+/D [6423 0 R /XYZ 85.039 188.025 null]
>> endobj
-6055 0 obj <<
-/D [6041 0 R /XYZ 85.039 135.696 null]
+6429 0 obj <<
+/D [6423 0 R /XYZ 85.039 158.805 null]
>> endobj
-6040 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F66 3242 0 R /F72 3966 0 R /F18 3969 0 R /F14 2895 0 R /F56 2890 0 R >>
-/XObject << /Im1 3957 0 R >>
+6430 0 obj <<
+/D [6423 0 R /XYZ 85.039 131.707 null]
+>> endobj
+6431 0 obj <<
+/D [6423 0 R /XYZ 85.039 106.729 null]
+>> endobj
+6432 0 obj <<
+/D [6423 0 R /XYZ 85.039 76.904 null]
+>> endobj
+6422 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6058 0 obj <<
-/Length 540
+6435 0 obj <<
+/Length 2662
/Filter /FlateDecode
>>
stream
-xڥTMs0+td>: IԎS58_ δݕ ,VOIVH+@`e"\$CHf--}ynHg<@4Tmi2"͜+Y^J37L"drߜ_~.cb4)urDqWWIY(Ɍ0&)ݽd Jо`?1gX-ѻE2MWkEVρ3r
-1;m>Ec Y&$waN ' b
+xڵZ_s6K!qc禱}:i-TT$(LNLX`U2_$XL(5Yl/f~ ̐oއ$Y'SOd(&o޻_ϯ?MgBK6ű򮮧̧{"4ʻ{5 |ġ#Oxq=ok$ o% DM
+HJCT/zOYgU]qM 6Yn_NfedxA@Y/ (Fb-Sx;mIzIpP+C2d`-EY;1HPRˎ|MZ,ifKz7t քn_O`VoPhB+iU*{4PS2E1SzJ0.xo B d8^6f̬LP,Ƅ# M&<@Dⶤ7{PC+-I|$hw-{,=fLJt9)ˆ%2Doשd?N(VmymL̞V$8og:fIk:fZ߻^(#ck@(bͪ6L~su x
+FE&Okr;J!ٗt W*mG~BK04)ό^&!]4q[|s\33i
+hi>@fwSDGP"'ZcI @k\uB1#Tvt}Ihc/'c6cs6ȳhhI>2<NA\(cDdA}D٘80ˎ6EI3`}8l{ǽ3q0 Abit&LcܚD8&B|BkJ^7, *WMYB(4<?"퀔;Z@޷)RI6AEْvg/so>viN0
+/VfixV|~wea@QyM0RYMքx$xU5l3q9nb4s<ņzPH&|,ϕiTһwK3^o3hwicqҞ@RsyPXOjھڠI=?O8FgQVrHfu#_[20 aĕYMjSf)
endobj
-6057 0 obj <<
+6434 0 obj <<
/Type /Page
-/Contents 6058 0 R
-/Resources 6056 0 R
+/Contents 6435 0 R
+/Resources 6433 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6039 0 R
+/Parent 6398 0 R
>> endobj
-6059 0 obj <<
-/D [6057 0 R /XYZ 85.039 781.388 null]
+6436 0 obj <<
+/D [6434 0 R /XYZ 85.039 781.388 null]
>> endobj
-6056 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F15 2876 0 R >>
-/XObject << /Im1 3957 0 R >>
+6437 0 obj <<
+/D [6434 0 R /XYZ 85.039 761.463 null]
+>> endobj
+6438 0 obj <<
+/D [6434 0 R /XYZ 85.039 748.383 null]
+>> endobj
+6439 0 obj <<
+/D [6434 0 R /XYZ 85.039 581.816 null]
+>> endobj
+6440 0 obj <<
+/D [6434 0 R /XYZ 85.039 557.573 null]
+>> endobj
+6441 0 obj <<
+/D [6434 0 R /XYZ 85.039 532.596 null]
+>> endobj
+6442 0 obj <<
+/D [6434 0 R /XYZ 85.039 325.369 null]
+>> endobj
+6443 0 obj <<
+/D [6434 0 R /XYZ 85.039 173.601 null]
+>> endobj
+6444 0 obj <<
+/D [6434 0 R /XYZ 85.039 147.109 null]
+>> endobj
+6445 0 obj <<
+/D [6434 0 R /XYZ 85.039 120.01 null]
+>> endobj
+6446 0 obj <<
+/D [6434 0 R /XYZ 85.039 92.912 null]
+>> endobj
+6433 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R /F41 2998 0 R /F62 4052 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6062 0 obj <<
-/Length 2443
+6449 0 obj <<
+/Length 2645
/Filter /FlateDecode
>>
stream
-xZS8H9Ua}ּ\;0p}0!.;;d?!f2PsEUVSBBĊP^H7[p =E3",v4<8<LO…7!] /u8 ep+ CI..* ON;憏GgGh?⸳a/Ö$#LQ~3A_B][A9ҹX-Ѿ>=: XH
-
-h?NXuNBGJ i'ШpɓG|,O/
-p.^EzR
-gm{/J@F)_=)BVD݌ә/AF,턂Ok,Hht(eMI,{
-crN
-#nꞧM7H5Q?\Gb`1!^O1Soqr9|NiN3
-P!,v΋EyO;eD}_⋲hMweY5SlQMް*[{uY
-D\"(rmϔ
-.WO F?8]kd& :b쭖K$p*!yE뤱w܂l= czCP +:@Q)8O#}Fq2QIdJգs,0,2aT<U.:0e^4x Rߺ}6O`hб rYII_~u~=ь
-.=4.N-7/'S$(Ip6c^?x`cJs6zU~}Iߠѫ/_ѢʛW-lBDԛSh~v!d2)xӎ CG"}Gh<F/٬OGqpUA^`+D0oLV'r QmpmÂ4<q,'SodT+ˏ8&!ZO'^vM;a&-IN}0Ia~
-te:JGn(]Fm`{U9$y󷑷x^eS՘̽5ɫ'_}5~Y=Ś0`hRX:
-d}%ڨqb"(mJ#!Qb| L(L|߂A {.MSXM;)ECrN{./Ck> o75\>Pn:]>`Eic~.zJL,R/ף2)g9*kPBm4Н8}p;ʊBp7&`Wz0ީ`o~^
+xڭZr6}WR& ^؞IbVZ$)Q!)k
+8a ,XH ˭N( Y3C2p zgx7|QujT5:Cln%cǷ%v\Ctd
+J̓wa[~ *gq
+*e8%=q[֖L/EZ(z)3 iloR):/ŇX˯@EZL#!lc3Kn+|öjv㖂@C!@;>LĂ s7lVJiOXIN,`Տ>Dx<ҽfɶP52 A " ׏IL*2_op
+Cߥ/NBD? K-C R4)6!Ja h8QdyP2Cqa`ѹk6p= Pk~Ob 2ve_u)Z)ܧH1X4,5Mqp]sN4\*m+]Js${?@m`;l'NJg/iG"9j9l7 7,n-an-!=9lZLi)2k\kZCxƴ,g慩R)^~a&' uEܼTAȖ;D "U@`(QqxȔ9%#ƈ#ɲK~M]?Q$-Skq]i(ŬnLDM BFY%^ z?32,,8ZwRڔIk~ T:@G4L= р43U#:\r}2B(KT2:Ш"34^财'-, иdr vF]0 =9eݘ61^a_QN ,Xoq
+,]kYeis0k0[#g%s
+Y8.WBH%6%DmCyϸxx}^`Pnxx^p/ʼn'nvPigjۮVD(V&m,74Kz)%q*ɃS%rI!Yq+i+7Ca؉uZu*Q[M<Bi<&1 ?5HنXI:-/ @@T/\;Q#1}U$$pՠĠT~Qo9볒jCrqpkܟ cZPq"9tt؆OVIġn/EKQ:J &ҙI;ي!!z:ޡ:.&>%d'kg4i4&"%Otm:%~35)ᾇ3A2>p  |Ǽ(d-[v,6_hV)dP/
endobj
-6061 0 obj <<
+6448 0 obj <<
/Type /Page
-/Contents 6062 0 R
-/Resources 6060 0 R
+/Contents 6449 0 R
+/Resources 6447 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6039 0 R
->> endobj
-6063 0 obj <<
-/D [6061 0 R /XYZ 85.039 781.388 null]
->> endobj
-6064 0 obj <<
-/D [6061 0 R /XYZ 156.947 730.534 null]
->> endobj
-6065 0 obj <<
-/D [6061 0 R /XYZ 156.947 550.26 null]
+/Parent 6465 0 R
>> endobj
-6066 0 obj <<
-/D [6061 0 R /XYZ 156.947 519.114 null]
+6450 0 obj <<
+/D [6448 0 R /XYZ 85.039 781.388 null]
>> endobj
-6067 0 obj <<
-/D [6061 0 R /XYZ 156.947 497.426 null]
+6451 0 obj <<
+/D [6448 0 R /XYZ 85.039 761.463 null]
>> endobj
-6068 0 obj <<
-/D [6061 0 R /XYZ 156.947 476.345 null]
+6452 0 obj <<
+/D [6448 0 R /XYZ 85.039 748.383 null]
>> endobj
-6069 0 obj <<
-/D [6061 0 R /XYZ 156.947 458.143 null]
+6453 0 obj <<
+/D [6448 0 R /XYZ 85.039 720.678 null]
>> endobj
-6070 0 obj <<
-/D [6061 0 R /XYZ 156.947 435.697 null]
+6454 0 obj <<
+/D [6448 0 R /XYZ 85.039 694.186 null]
>> endobj
-6071 0 obj <<
-/D [6061 0 R /XYZ 156.947 414.768 null]
+6455 0 obj <<
+/D [6448 0 R /XYZ 85.039 667.088 null]
>> endobj
-6072 0 obj <<
-/D [6061 0 R /XYZ 156.947 395.05 null]
+6456 0 obj <<
+/D [6448 0 R /XYZ 85.039 642.11 null]
>> endobj
-6073 0 obj <<
-/D [6061 0 R /XYZ 156.947 375.484 null]
+6457 0 obj <<
+/D [6448 0 R /XYZ 85.039 615.012 null]
>> endobj
-6074 0 obj <<
-/D [6061 0 R /XYZ 156.947 356.524 null]
+6458 0 obj <<
+/D [6448 0 R /XYZ 85.039 572.243 null]
>> endobj
-6075 0 obj <<
-/D [6061 0 R /XYZ 156.947 336.2 null]
+6459 0 obj <<
+/D [6448 0 R /XYZ 85.039 545.145 null]
>> endobj
-6076 0 obj <<
-/D [6061 0 R /XYZ 156.947 300.206 null]
+6460 0 obj <<
+/D [6448 0 R /XYZ 85.039 520.168 null]
>> endobj
-6077 0 obj <<
-/D [6061 0 R /XYZ 156.947 266.333 null]
+6461 0 obj <<
+/D [6448 0 R /XYZ 85.039 493.069 null]
>> endobj
-6078 0 obj <<
-/D [6061 0 R /XYZ 156.947 248.13 null]
+6462 0 obj <<
+/D [6448 0 R /XYZ 85.039 449.694 null]
>> endobj
-6079 0 obj <<
-/D [6061 0 R /XYZ 156.947 227.806 null]
+2198 0 obj <<
+/D [6448 0 R /XYZ 85.039 410.058 null]
>> endobj
-6080 0 obj <<
-/D [6061 0 R /XYZ 156.947 177.657 null]
+6463 0 obj <<
+/D [6448 0 R /XYZ 85.039 372.527 null]
>> endobj
-2166 0 obj <<
-/D [6061 0 R /XYZ 85.039 116.799 null]
+2202 0 obj <<
+/D [6448 0 R /XYZ 85.039 154.892 null]
>> endobj
-6081 0 obj <<
-/D [6061 0 R /XYZ 85.039 85.843 null]
+6464 0 obj <<
+/D [6448 0 R /XYZ 85.039 119.482 null]
>> endobj
-6060 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F14 2895 0 R /F20 2865 0 R /F15 2876 0 R >>
-/XObject << /Im1 3957 0 R >>
+6447 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6084 0 obj <<
-/Length 3030
+6468 0 obj <<
+/Length 2269
/Filter /FlateDecode
>>
stream
-xڵZYoH~$W[&vf<Y;X`0;DKDx($~&%J>(o?o$N<G%dQ~
-w8noQ0\Gz2%?W_)~8^\μo>;oqKnd.yK\^㾛'M'^?%Q:<Bu<'I*' 􋓻Z*<Lxg9~ :IXνpe~lggOg3lU8A4]B{KIR\m2!ѭaZe۟ 9@!k2|̻5 ŦBpkִ8J5>7
-ʼ_Cib}Q_:akz_}5iYq;¥40m] ޼s?scrzA#r76A($^<j2-*VLiSX`LsC1%26+Dy;+|s% ^bGnJ4R16!>QE-
-a$;my&tG>\~6tAJq
-Ogخ 3p@{
-PIU[^kPԐ(tK[MFyfxCEJ(ɀu]f5'|Nq9E^ocN:s/1f'.%KGţZ:֏\'NB`sr wsOŲ3B 6nGsb?yGnY?`Px~V7$5g
-@$z"ͧ!vaU4ͪE÷ܤmK n; ^ /p`(aΈWgV*+|ɺLx28A믊MCYAǏA4}ǾޢNě҃ Lc-/j98*A/x+.Ebp$Z8kq^8o#XUrAp$\5-vk,]>
-d>qH!w/%@9G|~,_Dz|׉xL5, ͣJha(Gԡ n4|pauIy
-%#o~.:b?Ě6'a,5-7.11V
-4nUSo`og?Exp@w}'!,ÐdwzɊ%"3QuGЊ8̴H3@8Vd[2J{tP3|f0F
-ng| 9"i/O4P=S?g)s^~i_($oh2֨
-D5 /g/ 䨴I0EujW%^#9_ԋendstream
+xڥr۶_鋩!iԎ+hQTH*{("$bﻑI
+_8B%dQ|& ̀^ E꧓O(t&/oW3h1q]^MwOg
+i}MI:>e5U{BA5 (nq=WF__ ||pmU^ۖ`{զN@jUz {^%#"zԧ#0U~Yo^MgAx9t}z \ҁ0ʬ--)h`M-
+ /@[1܁uttG>A;gO-~w8(TLաꚩ;-uMMV}e'|eSy«MJDڱF~kC:!_xgE;̀D:95L*VdOĤ$LFYqrRB=x3jA_geUf
+/P/`8- 43L#W~ԉ<HzH䱈R`]
+m%yRi,$'_'R:M8k.x}]eNe31GGTǓ<= sA+Tˑخxi
+_`|k!*؊>{M(=J% t½AX8E[ذ8H.5Uf?(p݊-#8 E: q?$Z.a0FsV!3$ R94F0һp3àuޓu$$JR8t*Poj; fXaiP;Hs\'M޵I]{碐PaQ}/;',c!GVT@7(%UNm(x_Vb6 #Bsa?m@ڼ:M{Rex/ AIQLj5) -0 b3Up|2ֳζM}hk űTR:cN5~IMjK(b>%$n*]ܧ]a<:0ú40H:.utHTs*83vlVi.@u,1B7_sL[qXs\ý-ڰi"ڃHjs`n`QG>FSC'Ef3h\4Jo.<IL蘒l\n:u<?rLeOjIOeP/:d'"ziNi`FLBhV\UM@-Q0
+?
endobj
-6083 0 obj <<
+6467 0 obj <<
/Type /Page
-/Contents 6084 0 R
-/Resources 6082 0 R
+/Contents 6468 0 R
+/Resources 6466 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6039 0 R
+/Parent 6465 0 R
>> endobj
-6085 0 obj <<
-/D [6083 0 R /XYZ 85.039 781.388 null]
+6469 0 obj <<
+/D [6467 0 R /XYZ 85.039 781.388 null]
>> endobj
-2170 0 obj <<
-/D [6083 0 R /XYZ 85.039 611.175 null]
+2206 0 obj <<
+/D [6467 0 R /XYZ 85.039 761.463 null]
>> endobj
-6086 0 obj <<
-/D [6083 0 R /XYZ 85.039 589.314 null]
+6470 0 obj <<
+/D [6467 0 R /XYZ 85.039 741.337 null]
>> endobj
-2174 0 obj <<
-/D [6083 0 R /XYZ 85.039 520.72 null]
+6471 0 obj <<
+/D [6467 0 R /XYZ 85.039 670.603 null]
>> endobj
-6087 0 obj <<
-/D [6083 0 R /XYZ 85.039 500.125 null]
+6472 0 obj <<
+/D [6467 0 R /XYZ 85.039 632.076 null]
>> endobj
-6088 0 obj <<
-/D [6083 0 R /XYZ 85.039 459.478 null]
+6473 0 obj <<
+/D [6467 0 R /XYZ 85.039 457.053 null]
>> endobj
-6089 0 obj <<
-/D [6083 0 R /XYZ 85.039 434.501 null]
+6474 0 obj <<
+/D [6467 0 R /XYZ 85.039 432.81 null]
>> endobj
-6090 0 obj <<
-/D [6083 0 R /XYZ 85.039 286.575 null]
+6475 0 obj <<
+/D [6467 0 R /XYZ 85.039 405.106 null]
>> endobj
-6091 0 obj <<
-/D [6083 0 R /XYZ 85.039 275.882 null]
+6476 0 obj <<
+/D [6467 0 R /XYZ 85.039 378.613 null]
>> endobj
-6092 0 obj <<
-/D [6083 0 R /XYZ 85.039 261.727 null]
+6477 0 obj <<
+/D [6467 0 R /XYZ 85.039 351.515 null]
>> endobj
-6093 0 obj <<
-/D [6083 0 R /XYZ 85.039 248.784 null]
+2210 0 obj <<
+/D [6467 0 R /XYZ 85.039 279.064 null]
>> endobj
-6094 0 obj <<
-/D [6083 0 R /XYZ 85.039 223.806 null]
+6478 0 obj <<
+/D [6467 0 R /XYZ 85.039 247.042 null]
>> endobj
-2178 0 obj <<
-/D [6083 0 R /XYZ 85.039 179.322 null]
+2214 0 obj <<
+/D [6467 0 R /XYZ 85.039 189.008 null]
>> endobj
-6095 0 obj <<
-/D [6083 0 R /XYZ 85.039 160.848 null]
+6479 0 obj <<
+/D [6467 0 R /XYZ 85.039 156.985 null]
>> endobj
-6082 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F72 3966 0 R /F18 3969 0 R /F14 2895 0 R >>
-/XObject << /Im1 3957 0 R >>
+6466 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F41 2998 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6098 0 obj <<
-/Length 3151
-/Filter /FlateDecode
->>
-stream
-xڵnH_!K(`Dk޼$v<-I|K
-ϙ 9)o G
-4`$rFdP6ʊdW%<% imc{Qw%7|Lg&TW-{# O *v%L/p,K
-X C8 mQm=M
-۶&o12fxӚK02E#F |bqUe"$<T[-YZA@( bd(|:)`Vu̳fF'щjwE{ u_9<XC~x}MvѶh|VG~> *݃v<ys8> +m@<|( :m\zz?ZZpO݈A2$%j!\@ s|M 4^H1A(` 3_n
-:eZf{a:i90$!!j2
-ϙS`,`PdV܏ؗa.sqBr5E#n93opt/6ZǍQ8BrͲ/I5ø.B`7a>e Am۔M)p!ݜ&0CWn$ ,R[ȅ/ ۈNi1# 5o=f**5NH1EShv2uI1n?#ǢM~Ʋzg?\d1+5X\2׀;W`!D/5-C;Lˠ0^ZT PƠڱ(nQ1{b |5OT๹T{9S;0!2ZlK1 !:+c\5%>r侽 O-#ߙ6VsАf֜w鎴j#v wA5+vXcI)W Y&շvCZO['\`q",|XKv
-m3p)!hT"NLe#1
-557E2<vBtɢN˾7Ib0O#5I~sÃSdS-)ujC*¸^7.`| )y<=BzCTH=ŻJp;fT<$bZBQMxf*[אW(qcD
-m+@.R
-ÞPl?ًvϚ
-8Pe22<!$
-vw#|[w[rB@H.cLl& ,!Z
-Wv
-L/;+ZF!;لS9n6bR(2G\r"ݩ.g2^晡Dt$dS奃\EZ:I?>Eٮ6=_"puTrZFd~JdؾVsL(qtuyOlpMݐ0}57q{xR0e  gF^K^s/_\+@eBY#єq5+l!+yՖ0(.3(kNJ(tsEw>Cv TMGGCGyAQũ֐_o% O
-(d4L9a [lG}ںm jL&N,0SƷ6SN36}v.Oƚ6Dc`O\OdTAPuka pjR}iZц!82"^Q/P>wK6+?hʉ+% > h>˂.GHӊ^7;dRSHVu?ËQu"i$ccHvו>yCYQ8G;F6 )vE}U)Zc|CHD)$>UϮaer $oc5OqA236v$J
-ۡN)hR"?]m?dIO~a]\q9h3B0ӚES='y JK?_KS$$M!FCA?z5eQc߮endstream
+6482 0 obj <<
+/Length 2931
+/Filter /FlateDecode
+>>
+stream
+xڭrF`b*0
+MC?0(*L$-aLz8
+$HFNЌf?nfc?;+='F4S :>C[}׳__O.f-wI}=`kz&`
+7'Z#ɿ[RfGkHc?Ҋo#JK
+? ,I }QRM YDw{ kO^<OCp&"v~OWoOEV49pt@5+d8[^31g)bYs{yn}|_0>` \E=ͪoU<~O_"#\Gn% ~ XZ9Ӛΰ:a8dYe \@{5Ϸt?eׂ6iP,<l)U2'; Ǹ,\d݉ƉP_܍tB7~C-S*(Eqʌ2hcGk#vJ+_B:$dgX?kBE7v+rS]^_ o
+<z9ɑ`-LуCX(&{ bx Dл,|ё@r\"#<ŧ6(@ Kw14: [.b=T`MBÐr' 
+咭2M$7xjJȤi z6ᴙ2c ]fg$JE
+zdu؎ =1|)pB >ryl؈8C)B:ȐE?la2ߔqC8*mxUNW ]EfB᫴G۟ޡ3e#pP$oA)飘6Ԕfkwj
+E oR+[l׆+MJ[q VnyKUwbg/6`c^Z;2z)y߀cbXB&]xmtc?\7b7r՜¿ 5?rňc`e{dRnY=(P Q#lvȦ ~W@3
+ıt/I} EnsW7<p
+`a+#zq6M^,kwEE|i'g˕!{X.//V` *]I2)
+O(N^?ٚdŢ|#*ׄ~ ~:P'˜J1(^ނilyxSŋl='c_,ǫ.2jIk MB%p9D6|ӪH:]KC9&J( Sd(εvM%L=lnsQ=d@wm۔Nwqv]1=E9]-`%:(KBz+R
+Vk)ވXWʒCP~ F7 ~ea;Zm-NHkox%\7QDo:] wIA]-Eq&8YbȍB{Df<տ\6r?8Y۠y58>_
endobj
-6097 0 obj <<
+6481 0 obj <<
/Type /Page
-/Contents 6098 0 R
-/Resources 6096 0 R
+/Contents 6482 0 R
+/Resources 6480 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6039 0 R
->> endobj
-6099 0 obj <<
-/D [6097 0 R /XYZ 85.039 781.388 null]
->> endobj
-2182 0 obj <<
-/D [6097 0 R /XYZ 85.039 761.463 null]
+/Parent 6465 0 R
>> endobj
-6100 0 obj <<
-/D [6097 0 R /XYZ 85.039 743.459 null]
+6483 0 obj <<
+/D [6481 0 R /XYZ 85.039 781.388 null]
>> endobj
-2186 0 obj <<
-/D [6097 0 R /XYZ 85.039 684.819 null]
+2218 0 obj <<
+/D [6481 0 R /XYZ 85.039 761.463 null]
>> endobj
-6101 0 obj <<
-/D [6097 0 R /XYZ 85.039 666.951 null]
+6484 0 obj <<
+/D [6481 0 R /XYZ 85.039 743.459 null]
>> endobj
-2190 0 obj <<
-/D [6097 0 R /XYZ 85.039 526.448 null]
+2222 0 obj <<
+/D [6481 0 R /XYZ 85.039 589.406 null]
>> endobj
-6102 0 obj <<
-/D [6097 0 R /XYZ 85.039 497.044 null]
+6485 0 obj <<
+/D [6481 0 R /XYZ 85.039 546.453 null]
>> endobj
-2194 0 obj <<
-/D [6097 0 R /XYZ 85.039 229.946 null]
+2226 0 obj <<
+/D [6481 0 R /XYZ 85.039 244.422 null]
>> endobj
-6103 0 obj <<
-/D [6097 0 R /XYZ 85.039 199.745 null]
+6486 0 obj <<
+/D [6481 0 R /XYZ 85.039 200.671 null]
>> endobj
-6096 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F14 2895 0 R /F72 3966 0 R /F18 3969 0 R /F66 3242 0 R >>
-/XObject << /Im1 3957 0 R >>
+6480 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F64 4117 0 R /F18 4120 0 R /F58 3365 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6106 0 obj <<
-/Length 3361
-/Filter /FlateDecode
->>
-stream
-xko6Ţ@qZ +"`?M&mrv-D+ܵ}AJV+L3ys"?H#?z—iޝ-x" DP~G8Zׁ^\mjJJ_$/gw\ 5t.2L?xygpG9u]tr~`R%/5`IK.|bw"GJ?]xN-x +~`'0q2~
-`."qIQ^īX!9AZ֒g>9,;xVF)NA@,Z"s43&%{652^SUHQ& w7f׻6oxhp7G3Em;ga
-f]m̐i)BRq
-
-fÇ`#¡CفmKOO%H
-Gqr:_%H&U_dpZa|e359K
-,*m2swLPƉ >Z^䳝2<-`"pЭhF..AS<dy]f՚_aVa_2
-!Vߟ^G [GqI87WTt1_2+@BC7Kp( ;p`%Ufo;0 I_!͛1e,蔣mX.̲~sܦH105"jOb>٢}h&'J:`4I5{ 2k D]}4'Almҕ)7}$^IgW0d9XIcjٰ-"ѫfY#(LTiX{:"C_
-mI:O1h$ p
- Ͷ$Eqo%\
-iF1tv%OK!q͢w.)6jgN9>V+Teֹ)A`ŕJg5OaF\ HܸiC͙ 6#5CG>j@LE֣%RC4~0 },X.zwݕ`wc8܊1 醵 v5r_R:x2PqH$5>tK B=8NI*Z?gO@'VZR
-m_P-{8֬%Ƶsͻ D7(ɉf3ϻuX:@}1p[ޙO'Oh J칌iZ\k mXQJOۊ}} C-L9[ARMX瑸΃bpȬM˪uIlZe#;D"+hOyD Di<ѿwc0*!6w6(S-H-mVXl@srz&)ꌝŘ6 pT(yE@JqCݗ*&8nAH _o/o' ֛n5>3 Eq-l6QA>!ʇiW"d8Ϥæ(E!%D
-Wq`a #JnO&k6xfT\4皅 1kX4 _lk`l!p-0CX=0c `jJaV&Ű|\ `'A
-9d~LmOú,ɇdLrss 0+faLJmqS切ǕboNC/&Թ0IA|c~Cpt4DRؓQ/̍vw!OJ hl
-ő$ezģp
-#a=%aX%p ACGTbg/d5qOY9m*lz20в9‰SyZ?ț-VQ 0!շMBw#D+4ġ jZ$5ijɠw7jQ^ #d<>a0^3nΧ7WATҩx=s f ,-YxJstmPU'#K35Q 8b; raM:5eA93gBP€#ϡ~ZHRN<Dޭsic:@Si8r|c&өƗ\Ċ2]-Of<n\ .0DwnXt[gOE'c6r8s/aJ+WBCSOa+eRm̯i_O+gԯ1="B8=8 
-65yx C z+hd?fH}
--W"SۙTiTLTi
-R`sȼF\i\أ$2 (!$SfhR_Ӿa'}X ~ eʣj# Lk~endstream
+6489 0 obj <<
+/Length 3274
+/Filter /FlateDecode
+>>
+stream
+xڭZ[s6~ԌEaw8ݤolv#2'Rtm=7(9m'sA,?jadYdly{0#% !Y h~::1Nf*
+(]]|fv%xhig*3s5_=4.\g߾{Oy}.]tKIr_~f+OGQhl
+&΂FwG4`<oӖnpKSaNyg- e/G`X7ȵ-롪`{j5(nJu жwVP90n]y ƛV<*N-*r,%ƄJkoFmh>=%Q&ŀw̓3RuqO$%!vע$ fQ98ϭ= _x
+qb>b
+",x[싃N%wD}WDG.-]
+5$wxŞe^Hˮ2'mȷUF\'woй,VOQ>VێN8
+N[F
+"Da5j]2{E0p0u2(f;1 ЖPH6-n(]eEM[Gl,]b@SnWt :qGmD<ؗqC)r k+*Uv V+:arMw+BޠL)Le{[3$ rp]-[L'V `7mŝu 2#٪B|qi%lmPX7M!Si!';<hIj[PTGCd^
+m!)ĕmP%_ԎImA ;7c5_
+j +HH7ܫUavmmZlv0yӆh p?D6TL`Y  ɌǀB5F&<tT[q4>eqٲH_}ozO=!סp{ cyx1 .SY2/̮zHH|$S4^KŐȀ@lcx PAfxe*&d*QάI% { LZO| `փtĆ;YrOŪNn)tq
+D>mp}MϞ:!R:\U@ph6NB%#KBm֜=6{X~]lXᱷ#DCH
+4kD^-1ώE;۫7o/^aY56rXTI \.r y9wͺ`,
+{Ezs$1ͨ(g8θjO%<r9 s= yĮMq+#1^~i\;2wǮ@;4MRg lAx > s 0r%7[F?IۇnQ|HVucѡ.L~6|7 8d}lѐgv%򏧭A
+[S/`4'y^">` $SXKkM ?t 5ڐ#Zq(u`r
+#)$p'cv%('l[\nŀTF㑺r%a _!hqؑh/@ pcsM+msn_CTĘf\w8q>?{AV/}#8c-E24yCWB3NiA<!.߶RZJ+)ѻ<!}
+\ZIh]5]Fyo6
+5yX8x\p =0BPy&tUǥbT 襃ʋɴ$ <|c'}.C\Jd+ h b}T0
+aV{*gW\CrWeпv_z)N9lj's.\ D_2񴿗й7"w
+SmlʸtʳUBVF2 . _ߐkz58'd(uD
+
+'37էgڛ(B.{%)*2gG)]v9|aܦ5TԠjJ2,Wچy$ГeG*Y,aow' lϩͦ<)
+ Q,: {N4 V@SIi:nPcwr/2<
+`kf65$ĸع6u)%i*TpiS7Ū7o`@pii윁\? &̆
+±X3񲹓6
+ip}5
+v!`𵳏7hұZ#=+ȡYi膈eKⷅ[zPw{XgD} r~IW"h:~ iE(¨)Ki0g^ŔM[ɐ*JdB:<(r|S&w(wEeF~hοFmxSNDܭIؔA0_P."N?q<;8F0k>O<Hć~wNo"#JM|_f y`/d@V!tVNԬ$Y3Ygf*
endobj
-6105 0 obj <<
+6488 0 obj <<
/Type /Page
-/Contents 6106 0 R
-/Resources 6104 0 R
+/Contents 6489 0 R
+/Resources 6487 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6112 0 R
->> endobj
-6107 0 obj <<
-/D [6105 0 R /XYZ 85.039 781.388 null]
+/Parent 6465 0 R
>> endobj
-2198 0 obj <<
-/D [6105 0 R /XYZ 85.039 626.181 null]
->> endobj
-6108 0 obj <<
-/D [6105 0 R /XYZ 85.039 604.419 null]
+6490 0 obj <<
+/D [6488 0 R /XYZ 85.039 781.388 null]
>> endobj
-2202 0 obj <<
-/D [6105 0 R /XYZ 85.039 505.738 null]
+2230 0 obj <<
+/D [6488 0 R /XYZ 85.039 633.122 null]
>> endobj
-6109 0 obj <<
-/D [6105 0 R /XYZ 85.039 483.877 null]
+6491 0 obj <<
+/D [6488 0 R /XYZ 85.039 597.811 null]
>> endobj
-2206 0 obj <<
-/D [6105 0 R /XYZ 85.039 333.987 null]
+2234 0 obj <<
+/D [6488 0 R /XYZ 85.039 499.13 null]
>> endobj
-6110 0 obj <<
-/D [6105 0 R /XYZ 85.039 312.787 null]
+6492 0 obj <<
+/D [6488 0 R /XYZ 85.039 463.72 null]
>> endobj
-2210 0 obj <<
-/D [6105 0 R /XYZ 85.039 108.439 null]
+2238 0 obj <<
+/D [6488 0 R /XYZ 85.039 286.732 null]
>> endobj
-6111 0 obj <<
-/D [6105 0 R /XYZ 85.039 89.567 null]
+6493 0 obj <<
+/D [6488 0 R /XYZ 85.039 251.982 null]
>> endobj
-6104 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F15 2876 0 R /F11 2898 0 R /F56 2890 0 R /F35 2880 0 R /F14 2895 0 R >>
-/XObject << /Im1 3957 0 R >>
+6487 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F15 2976 0 R /F38 3001 0 R /F62 4052 0 R /F41 2998 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6115 0 obj <<
-/Length 3779
+6496 0 obj <<
+/Length 3207
/Filter /FlateDecode
>>
stream
-xkoFQ D,|DINV(ڢ`$&*.Iy-)m}:u8QN?GJ cQC}*2R?=dqwTk= w2drv&WTMB< Wofq~zq]fv.'?Ͽ=͝Lg"[ǟ%#ir|mSiz92B{}tu c5r "/}/IL{rv |IsEf,*;hA-f X@&dkhB;.H>L؎ҔHO~kxe
-B+YT">]nmQO(CSM 2hzp:E]}WP#WntGFLx*=?L{#ћ
-+,N&] m2>^6 [F@E-2<uZX<K&l4Td BX06
-1C-3 'F)~#sK:_"g$]M H̀hÐ~vu+2Re1*~OL$NI̫0N5~D
-
-o #(IP](ZrG!X i1fXc,8:/U/=L u?pRD8,z"qJ &C0øґ\pL"݃ŕWL7b&H:X7L2$V7 i1ծ=ߋr*wo>jc}h6/"g8
-ڄ@)ƀOJ@iOi<ҩt[hB Ne0Н#PhMl^`?J!GT=lJ-VWPӲј:|Vߦ K w t+"v@{g>>{VӀQ#vXJ>(K p=RŅ[zҪ_X2
-f%)5C)ekE(zr./+WcԺ.ۈ II`(SL6^6
- 4l_Kr 5H5EӶ{ġbMP/N~9?}͛OJsj ,HA~,/Kb /bWUw^pSsWlIc{ċeΛEɿ򮬖}OWGtm,I)?5~*"*%$FhߋVt ~aZ[Ei_P9D: uO5G{Y"4G(k]skH]P؄[5{V\ \"e+!T ZDHJ"P#ju~\F?݀–ڲhV{Ƹr@Q\?FR{±&l5Dl[ӻ-q#[
-)ԑ|r}PYɥ-WY51߮D:|dNW3pWj ]ǢTJˏT:Rp'ŒXyrms5k'Ŭ{芟uyU0*xU,؋$z>e7 1b.;@U
+xkoFP  T |>I+(Ȣ߼ZCC$ggggf+5 li:?;y{c*(S石Wox? l&ғW <M;;?VOgv<U5g7a]ywq΀˓Kw5;}[8ɐ{0Y?#͏ѿ:R<f&<kLc2? ڊobi+QgQj+
+(0-PP䃈!)zQ{jpjHh6ojOIA8ĶF6Yž4 C7_a
+$*mGT!l8O F)Fw /xҒ=2JR?ԇ!e/
++h_@1Jul⠖ϋyqe6/bFmUl ${[R`ޢuQzp#
+?ΒFmI 50p
+l#l㻢ϩq|[h1O$4+ބfqloB;Z.gŕ tvQSAJC QsD܄Hez.ϲ}ɛtv3Mv
+B2b/pp0ags $rx2<
+W*yc,hi-Y;/?!>l;lf [Bd[nq$z[Xm떇Y2^goe G6>
+N3Y}T
+P 5#U9q׼Vkw ^|'?Q Gԉt6h)UIRS}ۛL8D-qfilq(-Юd~FS[<vS3_wѕԇ%RKX\xP*%pong<biv,2kFCuQr6*ODh(vO$LvXmr8qH)SiRxJ
+|D'CIcdaZSXd,ͺ[/MHf #K=ֶ%<Xӹ/FH.${ՂpDq/ŗWhۿ+dC9JrM&3L+.!WpnlK/2Hm0wd=Hjuu@c"1U!\VrvS7<.x.߆Fܴ׊jҖ6
+1FPHtwt&
+[PkI1\PEF6`OџQ4"ѻ`"zۛ3 Ԟ`(°y\?G:T/endstream
endobj
-6114 0 obj <<
+6495 0 obj <<
/Type /Page
-/Contents 6115 0 R
-/Resources 6113 0 R
+/Contents 6496 0 R
+/Resources 6494 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6112 0 R
+/Parent 6465 0 R
>> endobj
-6116 0 obj <<
-/D [6114 0 R /XYZ 85.039 781.388 null]
+6497 0 obj <<
+/D [6495 0 R /XYZ 85.039 781.388 null]
>> endobj
-6117 0 obj <<
-/D [6114 0 R /XYZ 85.039 608.251 null]
+2242 0 obj <<
+/D [6495 0 R /XYZ 85.039 761.463 null]
>> endobj
-6118 0 obj <<
-/D [6114 0 R /XYZ 85.039 515.528 null]
+6498 0 obj <<
+/D [6495 0 R /XYZ 85.039 743.459 null]
>> endobj
-6119 0 obj <<
-/D [6114 0 R /XYZ 85.039 472.759 null]
+6499 0 obj <<
+/D [6495 0 R /XYZ 85.039 503.109 null]
>> endobj
-6120 0 obj <<
-/D [6114 0 R /XYZ 85.039 432.111 null]
+6500 0 obj <<
+/D [6495 0 R /XYZ 85.039 407.659 null]
>> endobj
-6113 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F14 2895 0 R /F66 3242 0 R >>
+6501 0 obj <<
+/D [6495 0 R /XYZ 85.039 354.068 null]
+>> endobj
+6502 0 obj <<
+/D [6495 0 R /XYZ 85.039 299.871 null]
+>> endobj
+6494 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6123 0 obj <<
-/Length 2506
+6505 0 obj <<
+/Length 2975
/Filter /FlateDecode
>>
stream
-x[[s۶~Kg&
-zk"M>_Z뾲`y~x W?ÿ`(P`ˁ'osVSw65ixdh {e&O{Ё߻%df{ck]X*KxJONkR4 Ov~4~>AF J/Qt'ip\]`lBj .h֕1Y)"0g]n$ᷓ%1T4.+?ʣ~
-")蟁KLUk]I[xV'tom’ apP
--3Y8֤pdm|E!RᯈJYsQX_
-}%*wq-] p/}5=`PBxq2>`h AhT>C^) i_-Qj(6F|k\n>6,tu6c~Mro{X[DXMpw+:rH:6?poQtng]oNWQ:x!ӹv̨7#=mDyKKwbsd9#
-MIFe(Xw&^ g|C1u?kP3"]WC|iE焏?-i'2NK^]U>} LؾrUÃk<B+~O_9;22 `.WL̮dX<qNquu瞁wq:nMqEGik|'Y*$gۖ+O@r'Y2;)5f΅[!Pkϰph Ih.(-K8㌶m3ˌg
-@L'NO!"ݍ'qq<ͿCk=YlЪf flmpDE/
-lJm e (*dK|ؐk1yCLg:f<U}u'e6U쿙Q,a@(Y-"mZ,K3
-C
-m)yo`Y8F@ސ3M(;~+&\$a P qCH*5Ao!Gx1`?Dcʇu1`lQ*8jzh)X𭮭L>Cf_f 23 -)/pfğHU"r.Q7a:X^*o5gltҘ,oHZCZMʜB*ƫt> v8i"pRr} NUI̗e0gtشyN f`V鸞1ݲ|_zDn$D6~ |i\[
+x[Ys8~KBy瘉Q3HĊ$z(*v!񰼡*FCwhA
+cϮ|84{*{];-nғ&+(]9"*U-mznNK
+0n^fi4͢
+ߙSf[Uz" ;8߲\o <YMɍ-fZ-@Y[ >Y>elQI^|K9
+@+vWIyR<ǯeX`KdZ)@
+s34nQ} ڹm+/۞ł*M<
+/.lRr/̛\%aq[?4e"eHDH@&=^haÚ*FZh
+oż0b
+èg >/J. k0@h@Z!ԇ>N
+-zѫ T %l@<0
+LlVLldLvWv[tPN[C+AQA!tn&{׊k钑ݓ֬K vPS6;<ĭjҙN D=SX&Cg~*žJICp"i7C7k=[>]A+<: ©ÛLӏGYB Ӂ $t8
+Ëw5T@XNy= ℋ}.m7o_4xXP76M~QJM,Aj.A$-3DG  "MWֻX&1ȧ ( EӺ+QFZ1oO'RD
+ݚG! є *s)<MMȃ{}N]yz7w6?֚r-+=:7$ius
+SD1EisqeVX\  X<aԚ{nR03'>`, ,Ix/
+_6ݑB\Ae/:f2) N]Ug7nYS%yMv19yPaMhe4( BtacZp>m
+b==V: %4Лbz,-
endobj
-6122 0 obj <<
+6504 0 obj <<
/Type /Page
-/Contents 6123 0 R
-/Resources 6121 0 R
+/Contents 6505 0 R
+/Resources 6503 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6112 0 R
+/Parent 6465 0 R
>> endobj
-6124 0 obj <<
-/D [6122 0 R /XYZ 85.039 781.388 null]
+6506 0 obj <<
+/D [6504 0 R /XYZ 85.039 781.388 null]
>> endobj
-6125 0 obj <<
-/D [6122 0 R /XYZ 85.039 758.673 null]
+6507 0 obj <<
+/D [6504 0 R /XYZ 85.039 557.499 null]
>> endobj
-6126 0 obj <<
-/D [6122 0 R /XYZ 236 764.647 null]
+6508 0 obj <<
+/D [6504 0 R /XYZ 236 563.472 null]
>> endobj
-6127 0 obj <<
-/D [6122 0 R /XYZ 85.039 477.993 null]
+6509 0 obj <<
+/D [6504 0 R /XYZ 85.039 262.8 null]
>> endobj
-6128 0 obj <<
-/D [6122 0 R /XYZ 248.712 483.966 null]
+6510 0 obj <<
+/D [6504 0 R /XYZ 248.712 268.773 null]
>> endobj
-2214 0 obj <<
-/D [6122 0 R /XYZ 85.039 326.904 null]
+2246 0 obj <<
+/D [6504 0 R /XYZ 85.039 145.513 null]
>> endobj
-6129 0 obj <<
-/D [6122 0 R /XYZ 85.039 302.922 null]
+6511 0 obj <<
+/D [6504 0 R /XYZ 85.039 107.982 null]
>> endobj
-6121 0 obj <<
-/Font << /F64 3112 0 R /F56 2890 0 R /F15 2876 0 R /F14 2895 0 R /F35 2880 0 R /F20 2865 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+6503 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F62 4052 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6132 0 obj <<
-/Length 3545
+6514 0 obj <<
+/Length 3178
/Filter /FlateDecode
>>
stream
-xZ[s6~t&Sy&b-(i˶}`$"]Dٞfp.9'&I2ĉdLVr=NOG!vkym&R?,irw.әr(tTL?LL/pC.Ndz97:M` /O_~2_:;)OEɯ5ߓi24lOT(PI]/O'TOMx3%BOFd&}/I\#^pzߟj ]5ru-Gf Uqu9(4z+yM!{+u9ӬAkMItu2ӬGJ Mtc nqoP%4 )sŪskPa Oq;pa*wwEYr˚iO7.w19qvf#Ud/LF|nd
-绋sl&kr.AFeιuO%buc"T_B潑HKMDRwR.oͦۤE
-$q>\
-Z]dz`sW
-8Z΢*+roK(]|^"A^H'j^Y{
-sE4~d[qw1OFĕgeb%4U s lއzbGFAU~Džc]9.OPyBQ\;'uaGj:x\W űia!+DO9}]6 2[U]~=(`KlϘn襃Xj7ƔMWA;ˣ(]l +Frciط LJ=/>f^bFkNO9p2xF$[ttS'އΙ7ˏ"?&p1̜P8Z
-`̱~6b_DZ{JG;J&G K&A7tcuwYj
-`1f1([6k?M!N=Odn嶄Dx 
-; 2,`<7xsvh5Hyijn H^ڈFFx?rU %AE~t8za7+9~ jB80Drmt/3l􁓦CE6s=ANptB,M:ۺu!lyK'A\4GBde2 YkE I XϭїC`h7uV 6Ync }XAW9`3?&i\ bai<
-cbl.6͓<Ǯ)4"g?= {+e74Ǒ{)
+xڵrF]_W̛Rgck1T%yI$߾fpd\63==}wj5K#?0,Iot]-PEFL~d]'VW][]/1"IRz?By7x u|kx{ĭ
+t
+1~)?0HoMwovjvUvKgHJg~DDk`>%V: m75Δ]'ѷMٖoÝNHyG>?pSTЁ6|@{ T \ گ$>Z]ļ{ݢIhN=u5mI7J
+ n 7+Ӯ[9X>Eۢm!f'h)Y~08ȏV]jS%b݄7qHK#à0|䱮rķzƾaG1ft6gJ/DaD#`g;n}5gheUj[JNְ!((~6 y'"*@/ءN~I1xbד
+H*[[(<wrwrQX=\egmm}30M.]YX*#gbv8@Ɗx*V=?j$I 
+Jb[foHyo %˱m )6*N'bs~{b2e@ sr]DD9 T-j 
+`KމR( C!WA%<UN X2lRDR舀m*i]$%m
+_ͧcsHZq|?&Nkdrkߌ,X8+dZB:˒D&Y4w:l
+(2/;Ipd&Ug%./ք
+$pTb>*}~Tb<6WZh3/\폕e\p!涇>7^Vt{M"#h8>1a@_>&!'B5qH'I קjOp>X
+KXy> \zA6*vsFĸ~6 :B\R͌hZ6HL8sQO$(ZTyW)+Qpt]QB
+y!
+Nž+h[~O<-JRphT=.UWv'EVYX7_f#3t-F6 4TXSqIWv#x\:v3:>k'033ԜM_ZR=s![{/~q.zW7k,{(_KC/]m]ZFȫVYCMCôeDI#ABp6xnʌ1j?2T=-0k;b%%
endobj
-6131 0 obj <<
+6513 0 obj <<
/Type /Page
-/Contents 6132 0 R
-/Resources 6130 0 R
+/Contents 6514 0 R
+/Resources 6512 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6112 0 R
+/Parent 6516 0 R
>> endobj
-6133 0 obj <<
-/D [6131 0 R /XYZ 85.039 781.388 null]
+6515 0 obj <<
+/D [6513 0 R /XYZ 85.039 781.388 null]
>> endobj
-6130 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F14 2895 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+6512 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F15 2976 0 R /F41 2998 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6136 0 obj <<
-/Length 2868
-/Filter /FlateDecode
->>
-stream
-x\oFB(PTk.
-Ix_fo |`
-;x6 vplߓ_QqeOOVSh)@u9·4~u>_!_JqwbRؠf]$ ,P|ݰ}"C7ΓE,4}#:Ö(TSs }J|92-kƎPs
->OPX~d0[/
-+)pcZt,4e[43L$N܇lW`Sl_fh
-'a~ +DwhP\~ p/}5B(giI<
-8KY?`وOg 3Y5) QoyzتGԏ7Y
-# 5-ac`Rt`)XB];U
-(4*%ITC"6-ffu<g? =ۗ>RfwQxf{°ß}߆
--$<O[(ř.
-L), /lW.%fw`#x"̸3u=׻1\O^d)@~D[[&uf1|¿X@qPQIN=T\Þ3;Ful cmH+.}*JtW
-!\8b[2B*lfn'Vc Cw |82c@[
-[VEq 3섇|
-$a|xjt]2Kx7n1{>XIt
-SOi7X
-.*ox;KtPuMb6wЗ` d~j+ASkT]5RSGoZ4BY6w}Ϗ^]v9.}Ԫ^~5<=EBj(nʻ0h 1Rs2H{@ p֎t<Jߢh>ї;Fdq>[ߝDITF&6]_rfu4H!mH Ek79i䥫ב5zg
-sqx%zZ{\5JZ
-չaq[ V{I(k~F"y|;ɎI=!X
+6519 0 obj <<
+/Length 3331
+/Filter /FlateDecode
+>>
+stream
+x\[s۶~t&SiB-v.mXNN{>0li+QI.E"ib"=Y$Ik{Ww5o1M6<zJ=$Jz͔o߼<< }`h x3 y=ܜS󋁰޾;ӗg/599.\ttrs $ڟG0"&
+P8ޘV?ϏFGIQ[u2m(_q5ҵQǘWshռ?6"ѽ+-lmW+l׉(/2E0Bd(_wʹaIlzFH~J&LTְDl_h\p&PjЇ v1Lwát
+ &NCwnvӼ|50qޯd1U3msrE~i0-9U}|:+?}ܙ()uF["^QbQ
+un /S.'7tM^NPLtwvnл:|[fSO(7MΏ z3 no&CGI[ca`1TM8jMK;zEEHiK6i
+2 f-|
+]D
+B=uC_#6B><~{r-$\sSf#_8vB?Z{EěIbDM#PKm”j\-BcEO'@Iϳ}hvV)aXb6 t"Ct&P6 qBrs Fd@N(]ahedӅ:1e{c9紶w,k>9. ¬0W}Z?PQX@OtWHR0H4A PCkgXX`ۄ^iN^__ "؅H:~ō,LJZUܿ,*\0^?qaWWH]/OLX9w=4`Ӏµ q,b$e?FM]␽oI҂fΞ9jgvE#yn .RB_[J>w 'emM\,W# lo?dͬl+@ʧ[
+O^9u"C
+cj!ՅpإXisc<
+OvBREF68F`h?{4Yg+4 nX2 j/vM9lA2.#* /ckS?mؒ)x}Ȋ %rg)B(d7Ąx(3dTmʠ}*3 T}@{\<m|'Z:`+mD@9
+dl0 ;g~_3~$/mw:hhw& NZ˿i K&+>n7DzvI ٴJ̼Ҳi7f;s>faKj(s<x?)*{T;w <FRBaZd.y
+J(SY'xSmX1=a
+L(ެIڽ nBP2Yx1YÿR}Ok*?=!C9x|΁\'
endobj
-6135 0 obj <<
+6518 0 obj <<
/Type /Page
-/Contents 6136 0 R
-/Resources 6134 0 R
+/Contents 6519 0 R
+/Resources 6517 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6112 0 R
+/Parent 6516 0 R
>> endobj
-6137 0 obj <<
-/D [6135 0 R /XYZ 85.039 781.388 null]
+6520 0 obj <<
+/D [6518 0 R /XYZ 85.039 781.388 null]
>> endobj
-6138 0 obj <<
-/D [6135 0 R /XYZ 85.039 758.673 null]
+6521 0 obj <<
+/D [6518 0 R /XYZ 85.039 665.892 null]
>> endobj
-6139 0 obj <<
-/D [6135 0 R /XYZ 224 764.647 null]
+6522 0 obj <<
+/D [6518 0 R /XYZ 224 671.866 null]
>> endobj
-2218 0 obj <<
-/D [6135 0 R /XYZ 85.039 321.948 null]
+6517 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F62 4052 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6140 0 obj <<
-/D [6135 0 R /XYZ 85.039 295.333 null]
+6525 0 obj <<
+/Length 2503
+/Filter /FlateDecode
+>>
+stream
+xڭYs۸Bs_BT4ANub\nDKl(B!*%J^L<o؅ăb'IW&d&+Bh&Y4_\ K'O̗;73)tljf*ǟ|:h<0ǩ8޾ၻ+hnp|y']/Hh_/~Û,?]xLڞ+`zsa uxcsW! y G=7q: d|*R %y.gOe7S+^i:NHkgFn"Q\4^gW dhzxp
+Ccmj50n 9<+>Hpo}</ʲ?cp,zk %;d&Po)X*g '0Pα8(@Y:h8QVE֚$uhrQ] 5#m` ōdLr?zB=o}Vؾ+j`
+04pzWy#BU8B?@X&/6HJY]gu_{U/_{Qp%|ۊ!ٯBpi%4kR/ъ-jM Vg ki-@i;Ԏ{"tDRgCEC{2,<Ƒ H E`s643'VS9usJ8=FMBր&n -,)Zkrܚ/qVOS6[[OǚȣxS(R.#.vS M,^M>ah KcK}se@-)ap[R+3cx(rA{3dyz&_l+<n
+"qXǢ9i;A:|u}*ywlfx ao<m
+"/MÎ8ưJ*3]_u 7 oS<.;a%Su:m'O#gH wYdU*;ĘGÁAv<h, w-[_<'~7%ᅉ-[֧NKDW""z|mFvͭ=NrJ}A<ns}{a%?R Ejo
+bgYYf<B 'Y8b AJT;q,YYjF-|ƌ(8
+#)T iۧW֙qBӯݻƮ#_͛+w
+wjՅDQHgkyp f>>|bhbJ >D:JEZ@yėjWg5Vaѡ얋s}]!wDtYp`G}QEi$1u>'t_6eHA3:Z4dk~/OvU2>Ox юww;^iD
+wTQViеPTW/ P@ٰ`q5PmƐgd&:mf莶) <J[tFU}zqzܞ ٰ`qp5T|a1HIJ\g9j|ue׻ϩb+<{Y{UHc@`X
+&S<n] |IᇣZx\t.Vd*" !{S:6}ߊBRH^cN1[&Kjy!D0lwgxX"VsҪͶRuk.ܞ8'-EjdžGkG RwՍNhzCu^nFj>nUkiIof]h1-_,TZ@͚: V%1KZm
+SIu&Bb1=n] "ED6ܮ҄WVCqMVq.??tjX欇-x5RYtEn=gu~yĩ&$N$b֓tAG$"0 O[c H pPEd1$Xĝ(*iun>}.'ȼ 'kyz
+P]fw*^lvyBDU\K0>g(?3~r| DPF/,(<OsG3̲endstream
+endobj
+6524 0 obj <<
+/Type /Page
+/Contents 6525 0 R
+/Resources 6523 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6516 0 R
>> endobj
-2222 0 obj <<
-/D [6135 0 R /XYZ 85.039 263.792 null]
+6526 0 obj <<
+/D [6524 0 R /XYZ 85.039 781.388 null]
>> endobj
-6141 0 obj <<
-/D [6135 0 R /XYZ 85.039 228.589 null]
+2250 0 obj <<
+/D [6524 0 R /XYZ 85.039 631.121 null]
>> endobj
-6134 0 obj <<
-/Font << /F64 3112 0 R /F56 2890 0 R /F15 2876 0 R /F14 2895 0 R /F66 3242 0 R /F35 2880 0 R /F20 2865 0 R >>
+6527 0 obj <<
+/D [6524 0 R /XYZ 85.039 590.958 null]
+>> endobj
+2254 0 obj <<
+/D [6524 0 R /XYZ 85.039 545.867 null]
+>> endobj
+6528 0 obj <<
+/D [6524 0 R /XYZ 85.039 511.727 null]
+>> endobj
+2258 0 obj <<
+/D [6524 0 R /XYZ 85.039 222.087 null]
+>> endobj
+6529 0 obj <<
+/D [6524 0 R /XYZ 85.039 187.947 null]
+>> endobj
+6523 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F58 3365 0 R /F35 2980 0 R /F20 2965 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6144 0 obj <<
-/Length 3152
+6532 0 obj <<
+/Length 2864
/Filter /FlateDecode
>>
stream
-xZYoV~<*7'u2neu2A[`(8H⨿gD%F``r,Wȁ?w'(vm?G3ZBϛ3WF8#e;a]/g_j:v$ .~^vz~<}=DQl|1vot<q(c/n^_slzc.pti$eǣ|>gr~ng*@R/>ˬ}jij.<Q^h{|ǎc54s؍8*;k/jgmwUp"eN wӬ-\*ċ,NmU;^lKha
-e:+ʰ{HIHhFvx$H>pmsm=s(л-HDh~F8֫uMr1Jdm t r[&9qst\}=6k{9YHŪDliY4pɻQd7㖶aVtYQ.cy`l;bVZ7\,`
-/TƱo˔RϖDJ, 9^K%WTmDxǍ87†]qEjAY/:7,Rl5Kn})lۍW+Wԫ2rԬ֤T?CyVSY+;_i"6h }Yn*Bݿ'%9 |p:{q i
->)S=C8ҬwxA3Zm$`0#a,r8{&-I5IE˼i 7׺UB%t<!G\aQn"+h6gHµݼ:G\vpmGx` &Im#M|Gg=ox |#1'l{vanh
-CAɻEIj6xTpbxFwǕ l]A킾 p[Co&[1s_ %kMS ~p 2*%a VR4ZÌ\?<v:y¼ڐA
-RFwV
-+)lt9l2Z.ـ^0tta̯lIX H|;ABc*q` 9tG Uw;?~e %[
-P_W|@AD)$0EbE(ȋh-e#%еLvkк![콾0{P̅#U}{
-y'0ZTD E5j
-%##9S{?xs~-cp
-%%.q`3[/yM܏$qZHp$
-RBR% ;PKɾ-2pgK.Be^RLJ!,۶5qƲA2{dza"XOi%+u*?+:tWtfE}#{.<Esk$98_k)R6|XeR:\Z*m <Rվx73!3o!(JF,|V4߱B;_UM0;7i+(eXfQD 0qiG:|4na#{g?SRV%ZC>Zro\1G9f=nHFa\U
-%V)Jm1;p{ eI/i@bAjy>6840ɣE?X6ؗz/ѽ]6=Tq@Y"uKs;3.wx,I MDh#|Y̤zu~K[K\Zc(LقucAA J!=+f~ϢD%s#_#~dm#|4wF"8?@aky**cu:te@Zd?H} > ADHy⒬ud-;m!54$7< MGv).sJT+^. |3T^qr 0tC?Z _.U 916k|dp8S;†Rd-1r?*+3Oi~37g<^kߢZsWEȵ -W/|@
+xڥZYoH~[( bH6ϼ9YO6qI43,-Q2aIԒTߺ)fE:jşyǟlt_y-|b!$ /Q<=7raf_/oJ)'"IRo7sg9_4<H_>~8hnnqW7KÝ98ɐ_7[5~\gh{+͍B%׫V<x՘$(SByn4IFis#/4
+i JKKa 8WS?=?TѼ=NT2Npi,Œn=" <'9@~jLWR V<>">->σĩj
+Xr =fxyZ^eΫUn .x΂#0A4ýj:R(j
+kƔH_enKsGHgb !Y`җF3p ph^};"y57b3Հ
+iCG
+rt:L44D11 5`]ų|[Dԅcނr_
+EA'm?_
+lgOmE;Y㞒@[/}:8uI c# T-O?n\)q77M(1{ôN=ޯSڇGOj”|\K(LjfB3BSLqX'~]jØRZ\jceŏ#n]ڕe'-)geѴ:5 ]1|p¢4c"
+&bpvR{l
+TF2_X endstream
endobj
-6143 0 obj <<
+6531 0 obj <<
/Type /Page
-/Contents 6144 0 R
-/Resources 6142 0 R
+/Contents 6532 0 R
+/Resources 6530 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6112 0 R
+/Parent 6516 0 R
>> endobj
-6145 0 obj <<
-/D [6143 0 R /XYZ 85.039 781.388 null]
->> endobj
-2226 0 obj <<
-/D [6143 0 R /XYZ 85.039 732.512 null]
->> endobj
-6146 0 obj <<
-/D [6143 0 R /XYZ 85.039 711.921 null]
+6533 0 obj <<
+/D [6531 0 R /XYZ 85.039 781.388 null]
>> endobj
-2230 0 obj <<
-/D [6143 0 R /XYZ 85.039 133.97 null]
+2262 0 obj <<
+/D [6531 0 R /XYZ 85.039 109.735 null]
>> endobj
-6147 0 obj <<
-/D [6143 0 R /XYZ 85.039 112.774 null]
+6534 0 obj <<
+/D [6531 0 R /XYZ 85.039 74.989 null]
>> endobj
-6142 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R >>
+6530 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6150 0 obj <<
-/Length 1551
+6537 0 obj <<
+/Length 1639
/Filter /FlateDecode
>>
stream
-xڥWY6~K
-Jt^I'r5CӕN XaPx˿J\9GJ殷U$ªrgWgw{,ۢOzh9.oأ c> 5nm؈Q(>7vfx 8{< 0PT0&1"?!)0=!&BRq
-["Xrk㢔n4x< F%[Lr2lie7Any!M+yIk4O"
-eÀ΋uvwg w8J
-gϾ۩^ 5
-.
-vJ RF{3oendstream
+xڥWYoF~ׯ P%jK.
+8ٚP.)zX0+LD)PGPX=)$ᝡ>7T:iw@[Jʊ
+֡]"#+ }(T!J,%cIF{R~Nηz]HS#v>.;Z]Wi Ҧ5Ge1CֺJ,m`)l@+vV1$s
endobj
-6149 0 obj <<
+6536 0 obj <<
/Type /Page
-/Contents 6150 0 R
-/Resources 6148 0 R
+/Contents 6537 0 R
+/Resources 6535 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6152 0 R
+/Parent 6516 0 R
>> endobj
-6151 0 obj <<
-/D [6149 0 R /XYZ 85.039 781.388 null]
+6538 0 obj <<
+/D [6536 0 R /XYZ 85.039 781.388 null]
>> endobj
-6148 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F14 2895 0 R >>
-/XObject << /Im1 3957 0 R >>
+6535 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F41 2998 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6155 0 obj <<
-/Length 2907
+6541 0 obj <<
+/Length 2763
/Filter /FlateDecode
>>
stream
-xڵZ[F~_G
-knݚ7(,IHeRyH5
-Y$y.=9ݒlkj)
-tLob?ffl_-tZ(~E4\U J`TT/V*M..ߪ`?I!6y*8KW+$u SMmy}i៫ܛW~
-]Qzz9OK55/u5~W5uxtL1ڕr[/Um_T0ɼqRj#Kx}# 8uKȣܗ5fנ]
-([a"?,H^Q@EC?j|D}z~E'
-QUr>eΕ5:#Io#nfoV X~Q{{k;Jo}^/ ;jGSSA0E?_#7
-2:2i +mTB'`O^@״=GpyD \^!KGlH-3I(r}YAB3ɫi`gNO`y-]쿗;i
-V]Φ͓IB:DGJ<W'FfdOZGMaUoNy?,@vڭ
-W(|]d(FNߧ90}*$KK-WФﳔ1 D_KAeM0u$!rxo:?pHf{s"FSyLcu
-L"iV`Hy ywA}IJp>8Pv"){KJ .x Fo$
-7ɱ%?;i nd3лKIlW#ڼ{4qe֌ 9Y*OچK$zI'3imk BaRm_5tp_žGw%NLU6o%U$hbq5sݲ|۲fKP%ڈJ^
-HNZ+yNZ(*NM|_;Ռ&endstream
+xڭnH_G
+h+o `ͬ@DI`30`Q]]U]Ÿ(M%
+LzUmaWJ ldZ/l:AhEc,0V!۫_t0c;B4 4n}uUwVk]ޕCmuw»S+WkjMWaWXE
+,̦0ŷJToV:w艢c כO_<ݕqo[Ǻ'Ӄq} Xd |jӜ"@;RÒIyM
++HkP2bߟ?L2Z8e:" (:;$H2N<pcBuNTj^8֕hmH%]1o=biXfL߷(=HO7*L
+:w ?a8JPop͌GIRr4B&a@6}ŝU^|7P3S X)}^oڑ 8xM'rvCFczęgsU<#I/o-qKZU[\QmRP2rtK9s0 jY${"pQچWy/d \Gkʜv%8zuYJ$@-Da$XuÖvNtP/AU$pUJ@"7=<NqTy+mE1DO[qJT Ǧp9Y/h慖<HïXA6$
+3B]⎵'Ou)EIʀ! \O.4NWSAfPr6m#4LDttq]CI\%mj^a(8/E_
+eX
+;AZMV];~
+m *K [PRaؐ& ʍ jwAGs>!K@@N,lTQYH 5sĹ[I0~&>"L).^-^IFi muA^j8Y@q>2w.ُ"ڬ u خ"5 # {g\1'E!8fcZ WIT!xyw,oaR Ya-tr9YQ,~xD9ƒ7NaʌzDVX8-F׬u@a5&sD{ M58ı,ef6-*b-w-ֆٗQ^C,8|7ԥ۪<
+~kPbFW'#T5`if'`Aʷ$ f>wJc+Uu;سF*+$ Kf~H,u9A\ӖU<~T.,D&q(V AXwd`1j(zI #P%A3tjݩ"8.u [/b dz-h%|i2۩Zư8v+uqF/"dd޹E~.nN-lIA[-:0Ux WqT2Bgl`a܀|cH%& tb8 i=ZhSX6dDYchBe:Lj8h5NV*IdQ6HzvO]_F7GAlcZ`A"0iS,8LՂ Xn#qwexm@_<rA)Ab& #(
+Լ|
endobj
-6154 0 obj <<
+6540 0 obj <<
/Type /Page
-/Contents 6155 0 R
-/Resources 6153 0 R
+/Contents 6541 0 R
+/Resources 6539 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6152 0 R
-/Annots [ 6157 0 R ]
+/Parent 6516 0 R
+/Annots [ 6543 0 R ]
>> endobj
-6157 0 obj <<
+6543 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [225.436 434.035 321.065 445.725]
+/Rect [141.709 431.843 237.338 443.533]
/Subtype /Link
/A << /S /GoTo /D (winbind) >>
>> endobj
-6156 0 obj <<
-/D [6154 0 R /XYZ 85.039 781.388 null]
+6542 0 obj <<
+/D [6540 0 R /XYZ 85.039 781.388 null]
>> endobj
-2234 0 obj <<
-/D [6154 0 R /XYZ 85.039 761.463 null]
+2266 0 obj <<
+/D [6540 0 R /XYZ 85.039 761.463 null]
>> endobj
-3027 0 obj <<
-/D [6154 0 R /XYZ 85.039 646.155 null]
+3130 0 obj <<
+/D [6540 0 R /XYZ 85.039 657.513 null]
>> endobj
-2238 0 obj <<
-/D [6154 0 R /XYZ 85.039 393.584 null]
+2270 0 obj <<
+/D [6540 0 R /XYZ 85.039 391.393 null]
>> endobj
-6158 0 obj <<
-/D [6154 0 R /XYZ 85.039 371.823 null]
+6544 0 obj <<
+/D [6540 0 R /XYZ 85.039 356.082 null]
>> endobj
-6153 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F56 2890 0 R >>
-/XObject << /Im1 3957 0 R >>
+6539 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F62 4052 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6161 0 obj <<
-/Length 3378
+6547 0 obj <<
+/Length 3479
/Filter /FlateDecode
>>
stream
-xZ[o6~0,ONnSlo mj$V#J=7RH6I7!!y.9u?u8QN|w@ߏ׋Bzyutc+MꚆ\8~:zdv=q\$s[_]>Q9~P(F9P@՗^?q>^՛Wwh{䷫^_MnidG<W=W(ZˣZ*@BF{nTTr*o+`5Go[>TRGu%ˇ{QzI |gۺ,SA=<؏7
- t6hq~a͋5`5S8$^&WOeEUoYŞ[f>-Tӝ=K癬 <۷Jk2o Yrx~2H68삻}qy$4WI> # WG|$!qrHKLyNO 4haˮmjh|9.ȱ~uW6yCGRv5ܭ7{Lʚ+Ф^
-тZM )f %&G+ UMe#NGc$J٫`G-
-}ڻlHsa\5.'>m━, Nh)!(42 (gw|J5G4=!
-Uf
-PES x|N&P?aOF=$[Ɇ1 i'0yE*dǽkNcKkp[wrMߍAgHUx@ŧ%Ld f +vȺlbɠԒps1C<8V^Ѝ<)`7a ۨM BO>6\x ls<=<)n
-#U
-R 4-ƚA}
-+iqqbLx횁gbr6Vvaӧ~N;*S4hrblj8۔,w<VxLNӯ+n$v8`|"֘ӵP9^ؤF`I ztj=Pwؕ (U'2SDp xx{ʄ0|8k>NlOxo\:XDI)(qrk_~zg
-ٲW2sRVU(~wOjNep>sj
-wM{ ɕ?dVC5z$O~uEefW2] Nڄ:':r`c}ʡ7Ѯ>F5dO$Ǹe[?ud*4O?qn fZendstream
+xڭZKs8WTU
+4͂O,.˛wK\S Dp\4|e/2 |a}.՚>Ž??][;ɝL eb?E<[<8
+,.@P<o/n.XZ]sZud,gi<ԙ:
+u;MhF5s݂DPum5R#^x\N4GG -TrQ3&:?et^+BfI˩v ܭe_0 >nQ$E zfx0 =Zyh u/)
+)o2+[P5K4~d
+{a-sߵ3
+
+C A09,"<6qc!
+n{cY ae$Cͣ汙ALx!`:Lj[-_yi5V߰f &.
+
+ oΌ>Q\5B6vS
+9U&L# ?:O;dP7vgŃye݆elQĔqu >-u椭[@cM[x әu8ZON
+essz=לda:ҜA}r8)>4IJ`iD8P"<L1DԹ_0o ]5:ۚ7/ CkK]!Cҩƙ - y O$XA9dW/0v0I7}
+vf&Hz baq“+0*lkY||OjĵXOczGqѠxĆi@࢞)ms8h*A
+^+L1Bgҝ8_I=oaR!fU<JEaV/G*̥\d&\[LCy9Ŷm*cJd
+M$9llLB,1c Vu<QץN0
+ y+X= TiK'ޓ2mmHCƅ85r8v3'`S[-dW7\b]
+_
+$짭c{MqRƖ8#Z|v}1t~p|%bAe{us5C8^'] Ɍ=qW$e`: ĥvq$S;y`(pzCrTj4V祳|ω{M'ap
+ߘK5<ccs;
+3<E^#;O6NwK t{!xHzw< -G|C|?Dx ̅;cg>z?tzonݏlvjus67^&_|47xtVrF胻Tgo/53`͵D_(u5aM?uOT=Hb_s| P}W@H/S.LςڣqNG9F%jPs:"h?:@XsYkK3QCλEߡrM]RӉltOY:l/mS
++W!fiFXLL*:?iuo
+zP5Җ<9/ A@oe实e ~
+U;rmϘLGZ^DF^{y5| Jo G<h9%x+ClG8vY}?"vUSJ lm?~!SY)^~#M"隣{i_F㢣{C+zR7LrBڰTxI&>6= tᆬaͶ\, wg*ԉTMKI\o>W yu,Jendstream
endobj
-6160 0 obj <<
+6546 0 obj <<
/Type /Page
-/Contents 6161 0 R
-/Resources 6159 0 R
+/Contents 6547 0 R
+/Resources 6545 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6152 0 R
+/Parent 6551 0 R
>> endobj
-6162 0 obj <<
-/D [6160 0 R /XYZ 85.039 781.388 null]
+6548 0 obj <<
+/D [6546 0 R /XYZ 85.039 781.388 null]
>> endobj
-2242 0 obj <<
-/D [6160 0 R /XYZ 85.039 308.93 null]
+2274 0 obj <<
+/D [6546 0 R /XYZ 85.039 308.93 null]
>> endobj
-6163 0 obj <<
-/D [6160 0 R /XYZ 85.039 282.315 null]
+6549 0 obj <<
+/D [6546 0 R /XYZ 85.039 268.766 null]
>> endobj
-2246 0 obj <<
-/D [6160 0 R /XYZ 85.039 210.126 null]
+2278 0 obj <<
+/D [6546 0 R /XYZ 85.039 183.027 null]
>> endobj
-6164 0 obj <<
-/D [6160 0 R /XYZ 85.039 189.535 null]
+6550 0 obj <<
+/D [6546 0 R /XYZ 85.039 148.888 null]
>> endobj
-6159 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F14 2895 0 R >>
+6545 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6167 0 obj <<
-/Length 3429
+6554 0 obj <<
+/Length 3061
/Filter /FlateDecode
>>
stream
-xZ[~_7d;uc+OI*Do3V-07zz_ltnz~e
-]/f*Wf^iȮvwDz$: ֗/>ܭ}{|
-;o
-ɏ7tgtFʍB%Ǜ7p_Y ؄~8XmihG Zy_o(uz{Љ"Q聻jn_庯Nf GGKdί^c }?i۪u|,aMU#^K ^Az6>( ^jǖ&h?# ŷn.sVv#i|^.2 5gv
-|(jL(
-!KRs4r ,tY*1|JЖ_ph5<6Ùo9$~4Ƕ{8~\0 ęf(SnԈd[ʋMPJDO,>m$) i8-E:NR
-ykmŞȴ FiXC:̤d7-5C/a,ąPK ``dz!8W;)Ɍ8悇*;9}
-{qcOl(*@Z58. !' ӅD`b8DS.wKz3fL.-Ne-z?3 lOR=-t2-r-CG po
-:L^%rn0}m5FBaI[/d>ϻ(4h
-c+|9Ec99"CpW2坝/(ESь /2u3}ʭwƴp\w`g8tR?r 0PD<S? PZaT:uA5S^~6 :e$q[7u$<…f*?sjNxέɻ^T6B-D[y ~4
-]?K-=cTFlkE#M*4}|kTDdBUl ـ8K@Kig9]ԮIHEԏ0h &ȾiB BSYI&QxQ|[RrE
-mc vhN]-*`:400KX톿:O䅢|L͑gy?嘯l`>\= *J8
-jWHDC${)?aŸ.)Qy}7]A wFDQ{Y1-޻!
-VXJsqrYk3WM%7?ɫ @~?m)endstream
+xڥZK6ϯP8xԮS1"f IaeF_7Q4r [$r4]lo(X ʢy{ 幙-ۉOQX9?trGr$2 /KBx(r/L~]?K?u~]qGVk"+>.X|%e)39 t`( wu#+ jNKQQ\IE3j<7BRӇ y9e+cCO OTe瑼צ++?qU]¯78#Nj2v_~?qؔ =No]%M;BQlfZ[)TjFZxFES iD<XEͿu^B~vo0AH jdo˂N$}Wa2! Hnw#D`phBM0sܢW-hEkh/:g- Y~`SFl8B8L[k#O3 B燩D7͏o(PY&%p<G1ɉ PHnF(fǦx.\R* ef%ШK.G ^U-y~4SG"Xx셚maί'[ *|i#f=1 x
+DGX#Lӓ8V^4)fF6@F{<A: $(]3R%L5
+H99&.5qWApSO{v; R6勱ρ1<xZs^ڒEN
+a0vW˦[F[ZSz4j6mAbJx7ƞs)V&H%1k5f$Zm+;%Sr;Fj2YY!hq4N*ùЍ9 ΡZY </Z $qFE "xD
+A RǪ;#"B<Vώp0Owd
+{<-ޕ: _wJ; ^2ge
+@ٔ}(HlLaf07s}Z\)UҶȬaUSL}
+ 4F4 /`8 yj 96
+vY(mv.ٙ6j`{5*
+ IoT01^FLʅU
+սw9O,oaA6#w}edAQ|.o~$endstream
endobj
-6166 0 obj <<
+6553 0 obj <<
/Type /Page
-/Contents 6167 0 R
-/Resources 6165 0 R
+/Contents 6554 0 R
+/Resources 6552 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6152 0 R
-/Annots [ 6170 0 R ]
+/Parent 6551 0 R
+/Annots [ 6557 0 R ]
>> endobj
-6170 0 obj <<
+6557 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [391.093 600.62 591.389 613.522]
+/Rect [324.074 518.849 496.369 530.539]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://ftp.kernel.org/pub/linux/libs/pam/)>>
>> endobj
-6168 0 obj <<
-/D [6166 0 R /XYZ 85.039 781.388 null]
+6555 0 obj <<
+/D [6553 0 R /XYZ 85.039 781.388 null]
>> endobj
-2250 0 obj <<
-/D [6166 0 R /XYZ 85.039 652.037 null]
+2282 0 obj <<
+/D [6553 0 R /XYZ 85.039 596.758 null]
>> endobj
-6169 0 obj <<
-/D [6166 0 R /XYZ 85.039 628.715 null]
+6556 0 obj <<
+/D [6553 0 R /XYZ 85.039 559.887 null]
>> endobj
-6165 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F14 2895 0 R /F66 3242 0 R >>
+6552 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F35 2980 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6173 0 obj <<
-/Length 4036
-/Filter /FlateDecode
->>
-stream
-x[Y6~_1oҲDQ}p'vuI) nM`4cϿߺHQYl %Hu|UԄ :B?ʲ*>@WP>^=*aA~#g/߾fEbfM_&7 ?fz?z/ʼ_ݾ^T["FuիF:W?\a'\~g9<>]8c{}տ,ܧyԊ06з?˴JHݍJwrѡ~ lieo ǒ){mqgz4VZK;^5<QvUIAczm#TPv$-"+ hni[ ][o~ ?J/⤃>T 3q|ʺ
-T'Y@uCD)@6#(](c{V U4UYPf6
-win =.9.:i" h{J|5woBj;~WT5ϧ%Z\SuT,5b ڟ}f
-sQg{v_|8;&sRB -' r MӾ؃?xr=p' :]9ݣ[i =J
-;@Rxfj/j<SNETZ5o+edUDJ%Gs+͆_3C8:G:Nz.`2+`c;LcEu+Bcc3@W}&ֈNrĂPV vEZ{n!xp]tayN.ӁNW>~|#_U2|IW-ib/%)ypxFvGfȊ/-H{R0KwgY;+*
-GiaMb ȵP /?P4VIߌ_R dq)m$K@]nGdMxl;Y7~:vUA^;y!0e$@oFj_tYy_ (ʗQGJ6Ax<w2yR8HIH {wpV}<z+g!J"lQ'ԥac`/Ɏ|HC). OѠ~pP^:8
-lBisgeKme@k2
-wFCϳpduF02Yÿ0ᮭ2[7<D6ݔp-9X(4cbW9Q3 0ʡ̏A_YbAƈ v,  }:%WBߕhPOZxֈ&aFc2>I+M -"])4K
-}J7N[UxYHu#
-NY"o'$_AĴd'y@RZ@EЕ `Ǔp;1TS>F˧I#3HЀ b0gjӿ&=aan쵮</dHMi)x_bk8;"$d msBRUt SizkȸaAib5(e$pGn30͆~ծ|(X6!!{k:NE&A<Ù@W&8`ݲݦ{4|NW7w^˿̮mDEX]/F=~DE[仁ۊCQ5.7(G$R;.ۡxjm%Lj΁sׂ73t}-A(<B,TܙQ+JHf$}CU.:7Bƫ${,ՊtIGRhB% 1"_i3@\ \ǽt2+RXplQ]/C!92z}WxXu+ێeRzI%mmk@'Wa$!a5N@FñT_暔B+?q!i@ˏR|.b sUp5msL0
-sjS1>P>{j7 *F6ŪL{,zĸYRSLpjhɪ
-Ys2JN$UkaRPY^MR=weH;]wT
-8p?yRNҶ_e5JRvP-8ϕ2*K&Rɼp62Y h\ I сKsk-:٢먭Ӧ ΂L>\[ç{y!lo4uל㿗gnQr>h5I|BMe`! Mx\U;0qeV9EJ%STtdn)1Lr&,q;2`N]5e`hT(D+ZH`2ّ1 ?dn0<.lѧ\Zo:XaqES?8:V"Q}sߋm~%Z5Ygp'qo5d
-D&l#Eq
-xkkR?Nƪ/nG g.g/A·kzNY(ߎ}LL'&;we^+ * 5ƩM5?P%g BA
-v!~68\ b"6gvG2YTrS(īX8D
-:@ ykM,VwNR|N Hqć2x8I&`J-R
-Lh,$؏buɵiF"_럌`rڇ o~n̍&U~BHgxۀ 𩬋[I*g4d=hC+*AW'w:\ka
+6560 0 obj <<
+/Length 3927
+/Filter /FlateDecode
+>>
+stream
+xڥZ[o~ϯ[m`~yڶvs=-PVam)ߟfeI 0E9ڧ:O<?*<<=p(FA67W7'u{_\ޏ$^D׷Ww7Q[o,_H7o?[OzԸv;~o?p[R 3wrKQY쿯~ӿȯ{ n/#>\}]Jkĥ8L0F{y/AEAHL|/c8pXb?6@~o/
+8VXnt%bBW |Wli4Gb*
+kBÆ )2B`y gЂkO`el[AYj-lAizJ6d+tsߗ`kDZZ8JA{}%qKU8] xzD؇qT BRhlT7Vx_$eRm oD 7FYQH0ʦ
+gы"7<uGۮP6[!&lz"2=ݠ#Rl
+w.r#ٞ Ό:s0~mD
+]j* hΗqLĿ Wjw1:^S&eEDبlj饃ԛ{좱z ;~ۋ|GtTk~SϾom-LݪI"{DY'
+Qs U`%O}L(!˙6a1? |aħGc8`!߲36IPSGTK` Ar٫Y.Yd9gdIA(Ԗ(ELCWkL#QKomHԡNr'hQ hoAkb1*a%P
+T0RZKÌND!gȼ 4DI5E,҉Mʒd3R l1?RPQW eecxM
+#ǫDj`1Wf
+HaINS ƽѢU7~Dc%_dQXV
+T;`4tJW$ӭMCXTʆXHve+emA/c8VJ]ͧezsE|:-)eac~ʓmԜ,?QcA4+fɺ[z|)jWL]yaH39=dE0L"Ebr0+[%FA*Ȱ>-hRʌԻcyR跔Y+/GSzPYGHONr={ڛNֱXu gR4(2jHע|cnYuIqRs$[^df RCoLq}ЩROΣmNdrIe+el^s/b4. v1N ab1DŽ9s`vUu4 aj+]ߞ<pP E$-و+c{饇Gs[^O
+@)O}'U>I2cؼꐼ8> ӎp`.נ6xF0|{mKE</H]L6Kg55k-z^= f_e,עqR3/Y+SA$^A{ !'N8:cα9ztahH"7b3,&ٓv",6|"c
+v/]ڜuW5_s 5*ٰtR6
+~Ij r՛1E65`o{ꕘͳ6n6;,z|M1
endobj
-6172 0 obj <<
+6559 0 obj <<
/Type /Page
-/Contents 6173 0 R
-/Resources 6171 0 R
+/Contents 6560 0 R
+/Resources 6558 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6152 0 R
+/Parent 6551 0 R
>> endobj
-6174 0 obj <<
-/D [6172 0 R /XYZ 85.039 781.388 null]
+6561 0 obj <<
+/D [6559 0 R /XYZ 85.039 781.388 null]
>> endobj
-6171 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R /F14 2895 0 R >>
+6558 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F58 3365 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6177 0 obj <<
-/Length 3904
-/Filter /FlateDecode
->>
-stream
-xkoF,\ZCmk\C.%LIyr)>Es( }kgF2?u'aY8/Wr =_(.M v}s}\(,zC ^r2@'bey"7˟^/T- |TfT;(\Jo~~-\<?_y}/qkykoK4m~x!\I^Da\PBU abb7.f>sɣfeynVT2REn;PqQMy#5<`%ncG
-2kXDvjo0m/ ]5;O$ [ng8*eW}ځ
-TO̜LDVS߀t$4ၧbW͙3s M`_'*2.(JTDPRɟB&!~R
-A9lZDWqج4-^v'çRDS07*N˗:-@٦>lIռmT}p/Ke
-¦rs|a\,G0KTΒiB"Fh%#cq۽3wI8k)Uv 竁[H=UVZ ʧ;|xJ+:u/'lmv\l&HKbd#۹WblUHq|lؚ5Ϩ4p+,3h1s+HGb'=g.wߵӋ51)noW.'0&ao-\"lF2p}0\vg4q¦|ۭ{4<RXAپxkec:m6/=A74U)%[L/
-] F>7\ (\A.++yQ?koqyT;j& *z(9XL=Y?|MD#)
-')X'`r}<B=<uoF|8`q D#
-; 3]u<W 4/Av,P
-UbIcŎ)XWStYfZe*$iNL<o
-A_fZxnmYxӧ4퉫Z^#*ZwݳJ<^qɢo. ֎+փSE
-؍Rr؊kx$R3/Q/%e0`<K|RЋU՜U
-9~z{y ։`K];H8EJ7ڦj#<OYMU|Vy M_xX<?ٸ_NO
-HN]呝tqF*HpEaESqKm1^9]I#X>FE[Y7{ 
-ˢ/Jaۧ(,(jh؟S=A,h04i0 fch4Jȋ jQ=j ƣ"G}30ɵ/:Y@13B#
-+JJOƊ6PEN۷}^8Pl+MENXȮgxw<=V
-!zZ~&Ϙ <ϙ
-kOaQ6|/Ni:
-;L?K
-떿fP`?r>H1
-g<o}:v0t\+Ia[qn*9v䅇88Q0 W鶽-&43z%dgDŽ5ObUҘi=Ǔ4u,ii5&[5> ?8 u @bʋe͈݆~d wU,<nڗ1[S{GN{@3mYyK[cD*.>%Mz$ZñeKF ybr큫ӈIb ena\@ԥ|L0_s}rɟ0;*Sgp?*L|@VQ;K @-7&`9):'s2gwV"I.U!xL[pBđ}NrIC2k(zbK[I"u0 F#V@̊y 9f"^T[͇-"T1dg?P'q# 3M鉷ӽendstream
+6564 0 obj <<
+/Length 3900
+/Filter /FlateDecode
+>>
+stream
+x[KsFWfD0/<qMRl6VjI(L_Ap7a`_3=R!S B^Ɖ
+L\6Dž,{4__|.Uazy}qu:x߯q4, q,~J|?_-4^^dO{oWx"o1a)a\IGhכ 8ky}_-+~g/))9.1bR'&t`]ВvEcȋl-nW-V8jSov0j͔Օ_q}OyЮ,k~`*k
+$ˡE|[1j`2c@
+ځa@^KLiy.7eSʏ%Ve3h 3ͻEOu++nY{
+
+3a(7Q^hZ ~Rak#6C.NMaiBVMYmZi'榦EbG
+й/d؆z"qg9(VqAȦAjOZMmGDQ
+p4ƕY-MN\y(_KХ@yx^ h, 툽 n4 ΃Tx@
+8?8%9yP2yqbB]. Ln_Cs4{;!WvZ]l9vBR .[X&F)^!SzB*{ix^΂dA4Ƙ Q< Fd(]E܊BHV͡O'k΃i th8onq^Y]$H
+lC$ZMyXvbM9 @u`9]!T3 =yZA0L
+8D T0`::nz^PN WH80Q=Ru)V"3+םOƎW[ȷYz^@-T9y2@A5
+y
+"X^'`."\3ӝ
+p{ȝ5S4
+eYV,o21nkS+ yȐYB# naD{<QX.~R{[~dH /a]ĭ"վ<jbs)AS, /70pRjgQju3FgO8rf~w|9Gg`^B=q"5EX}y̬8S^rSnLNDz8r xXThH;i1hAINH]ϐ1#laTE8cMޗ}@ nѮUrF) oj/\r".OdTgWK%7[s&i-jV~K
+2𤮛48E14vB;8Hn szOQt6҆HaEc0H QhFqI;9D!؆t0#V65xi[l1l"wbeR3T~ޡjS;hMk}%
+i^r\BMeyftKN܈nF֭ވ7WY>X?jb5 g7!E!B2[0 ӳ=-.PiVoxC%p9d. 䦂zRӟ\9:tW{= 3 T]6H!Q{/`
+qF
+uD3*$D'UhnVF#NPo'ƝZze\qWu쨂@v/Uxm֎{.m¸={ ș.Gf4əvC{dY`c?b#>{{ӞE%㜧D΃ޤAʦ)me-I9[AQL1oj{Ԛ FbEl-,*~u߄ @8 (ñ>f8Kl;wsMcFEݛև$X<J;ݰ +̮
+mVxjv[\{xm/(rck +)tAT;0u))0~%oig}N񅓤ʋǍ:! vx ir|EG}ۿL>%r?ՃȡXt>rGOt*r̎#x10ԩ>h* 3^X K򁽽CRWbrL Ș8-5?p]>dZ^!Gt\<)xIȇ K֧{ O457qj${'R71xnDCv@wIƑ n4:zMR0* @ NQ—߳S.[ktҾv<]'xܪ-wEs {`74
+ )W{N$D 3@oImhDJ:)a)=?g!#㭥G3oC{!o|i!^RUvGXVu{ϲ~ŭG̬ w4-XhNp~G\^U@K5fQ L_Q6? ["𞸒ilҗ30Y t}z0:,
+[Fj_)Zl:ˌf$`d+A 9h oi*nӑŤmJ?Ggffdctǂ5.9!y
endobj
-6176 0 obj <<
+6563 0 obj <<
/Type /Page
-/Contents 6177 0 R
-/Resources 6175 0 R
+/Contents 6564 0 R
+/Resources 6562 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6152 0 R
+/Parent 6551 0 R
>> endobj
-6178 0 obj <<
-/D [6176 0 R /XYZ 85.039 781.388 null]
+6565 0 obj <<
+/D [6563 0 R /XYZ 85.039 781.388 null]
>> endobj
-6175 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F66 3242 0 R /F20 2865 0 R /F35 2880 0 R >>
+6562 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F41 2998 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6181 0 obj <<
-/Length 2199
+6568 0 obj <<
+/Length 3140
/Filter /FlateDecode
>>
stream
-xڥXo8^aX+")Y9 m.n>A*Kt,TWz<(Eoo}yfh1qpVA0 g+Ùpp\2z}4+,ٳ,pL}}}w3[\Xw0X~?7oz&75Zarܵ݅B5]?8nۅc0`" ')sgw;]#Ƙam;*Dz?Å\J/V8ujlؔM Xq!kah$+Fy ,u Ysܤ <cMf(LUUЛ L-h5rm6ڨ^8gҷ"nT{-+ީq(f]X
-ԡNBpZ
-Z{ҳUQZiCFcev]2uuz<~kurGIĄBd׳%<:7Y]<-tk'AWt<XDXWeΣhtUFW`BS.^M_Ss"\뻻gsS#C;zV B:Ł7L{N
-+#5 D`x
-*K(څ2t$t52FnEEA8ǴFB@#J( CT2fI˚,%ga@A$t_7:MYid~'G+|2Z.O@2zIq8Xs, w
->B)ۗ9R7%'vr H
-( aoG9 hWn1S4/֊ZXھE-K/]&C_!VXV@qde"ZFjdNNQ74<qV, Sj"(3)mtU$mL┮ר`Kq!j ͚ 7&?y#T<K }vaF$Sm{[2Ƃq\Rvս
-l ;zk|qejjLw"YH+٫u: ElW-FsfOp5]GiځNh`٣o//PH
-9s?F+I%<sN2P𿫡 endstream
+xڭَF}B/P!ˋY`8\+d`s$J"e﷮n<q>뮒$t=wUV+o|Xb0zllw |lj<ϼݛWsg>z70XNïXA/ZدpǫWKK LWl OsU̞`>l﯀n7J՛YTg|tA I/~*?
+ٍ~8QEDƶ;2+d}b(ZVade
+/Иnv] 7||zg$
+4.@
+K=Cl`̍Yo0F{xTGy&'%rѪW5_1s# ^F|MVmUڠ 64QNkf
+dE6vSS]5 z$wӼ yRde#L *
+;z$Ib)c:HYCKC*饬ş=e?1ҴHgU|WyC w>,ֆ
+ uؚSo(tB;Dd)Vzh궖?J$@uE];y.%jr4MZ|SY
+Es,W+c P75 BiJ!ۿּҷysiCcπr/+MoաӜhxRP"|Onۼ13Xew
+skqhQ+kxCy
+w:(X3jΫ:(挣#եp yRj
+Dό"盺^Mt3D{1,y*fWYo6if9
+`nH9\ԇ%i$м4MP 䚧7EH95a`+K? |o'G;GGޣ~!i)Y+;I}H`NJ++1KؘڊEodB(VK:3`5Cˊ
+SzC![endstream
endobj
-6180 0 obj <<
+6567 0 obj <<
/Type /Page
-/Contents 6181 0 R
-/Resources 6179 0 R
+/Contents 6568 0 R
+/Resources 6566 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6186 0 R
+/Parent 6551 0 R
>> endobj
-6182 0 obj <<
-/D [6180 0 R /XYZ 85.039 781.388 null]
+6569 0 obj <<
+/D [6567 0 R /XYZ 85.039 781.388 null]
>> endobj
-2254 0 obj <<
-/D [6180 0 R /XYZ 85.039 490.22 null]
+2286 0 obj <<
+/D [6567 0 R /XYZ 85.039 134.952 null]
>> endobj
-6183 0 obj <<
-/D [6180 0 R /XYZ 85.039 469.63 null]
+6570 0 obj <<
+/D [6567 0 R /XYZ 85.039 100.813 null]
>> endobj
-2258 0 obj <<
-/D [6180 0 R /XYZ 85.039 400.068 null]
+6566 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F35 2980 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6184 0 obj <<
-/D [6180 0 R /XYZ 85.039 379.777 null]
+6573 0 obj <<
+/Length 1924
+/Filter /FlateDecode
+>>
+stream
+xڥXmD_  ;W8BS Pql_s{ffo
+UuzwٙgfU1ϣj5Ooa3\;y- 9g^ <?uw.\)#oFyXK;?yp_[3n!V/;ZӴAuyh~33x5?Ayʌs#5e@`%/ă 3 OfJwp9jҩW8.7Eq;Rup2) k}9h[4GzROZ)F$&契]hkD!S-p )W%/#4;hlGvt99&TƜ{pneR_fSCR;'C>dA =M;bs<B)qC4)Cyy+HFߎ~--إEq1>``X@Y_~f CZHp%U0=!|Wa,h÷!Dd~10/w/] xưklj{rdzPPզѴra<0:r}<#󿏪!g ]c7P8}EZIwnd&2T4{P&=wIVL̂iu7`jPqUӖlE%-.׹}:E 3n,oOUNIPaꧯf&wBflS2G⌑UFQcvo@*7@
+:SR#(-uÎ7sZjK!)dDL
+#inCD-i^M̈ dD}bq![D.ޗ0NEe;^9șnS)Nѩbt`|ul gJ
+<!؛% q|@OKsM %RwyCĢ`pI#
+ח&B/n^&n41ֽw!?ZF\zi{"\ 3eB㩫wB"ouAsː۾^(`endstream
+endobj
+6572 0 obj <<
+/Type /Page
+/Contents 6573 0 R
+/Resources 6571 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6551 0 R
>> endobj
-2262 0 obj <<
-/D [6180 0 R /XYZ 85.039 149.846 null]
+6574 0 obj <<
+/D [6572 0 R /XYZ 85.039 781.388 null]
>> endobj
-6185 0 obj <<
-/D [6180 0 R /XYZ 85.039 127.13 null]
+2290 0 obj <<
+/D [6572 0 R /XYZ 85.039 719.731 null]
>> endobj
-6179 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F14 2895 0 R /F20 2865 0 R >>
+6575 0 obj <<
+/D [6572 0 R /XYZ 85.039 685.588 null]
+>> endobj
+2294 0 obj <<
+/D [6572 0 R /XYZ 85.039 442.27 null]
+>> endobj
+6576 0 obj <<
+/D [6572 0 R /XYZ 85.039 406.005 null]
+>> endobj
+6571 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6189 0 obj <<
-/Length 2180
+6579 0 obj <<
+/Length 1396
/Filter /FlateDecode
>>
stream
-xYK6W*jM"DZ'L*̦=$mF=
-7BY*>K!BexK"Oq0L
-Jp$
-6C'A;i9GOyCNJҚTs3?xEn :^ŕ]3@و=0|Bq̑
-)_Wz d$R[1+b6qN9;
-!9c\/|믮0ܭ ilqhaKPµƈ`+.&u_ ggmS :LpE
-˜stbM
+xXݏF_a Ulzoχ>pPW<Q:X©|gv֎sIt'Udwfvv>~3;FZH+P0j&p~I#a{",]|K
+Ȋ{=w=eGu|~n+!.|Kg7Ws^΅^mn`g$|9wB!~u.~y*b‰wOU<Z>VFhO73UZ;X .]nQ\NB8L;&OpO:L,.ն(ʐpni"};,- }[lVZSX6, ј{mT];.h}[؅6P֒5Rޘn=eC6=6] ypE/^\@=7 Fk&ۮGeK@D6hGWo;^Cf@PBcLTT 2;Xwu*֭'Τ W(G*{8eJHCM BR^T52J֗@lurʐ%2ZDGnP0 >E&Պ.NO+pw
+̽pWPO~|kK.tA@::Ɔ (et> -H-uyY֫b6m|)uǴx@ s_49tKGvTb-okҽLnzI>}|yj
+vu36]w
+JF]f2l$nt#={i_Q)#%Y۶u c\,_&xyPЦPMlO4'EZC7˞(;oYقP7~_6ɷU7)P݂{
+S*'"-䇨|HKaz[e޽,TyVq4@iT_j[XgyZzç6"!w2sëlPSoG'c5t"_PnzD:)0 &cQ5 laҵL|)O83 HhHMG
endobj
-6188 0 obj <<
+6578 0 obj <<
/Type /Page
-/Contents 6189 0 R
-/Resources 6187 0 R
+/Contents 6579 0 R
+/Resources 6577 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6186 0 R
+/Parent 6581 0 R
>> endobj
-6190 0 obj <<
-/D [6188 0 R /XYZ 85.039 781.388 null]
+6580 0 obj <<
+/D [6578 0 R /XYZ 85.039 781.388 null]
>> endobj
-6187 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F56 2890 0 R >>
+6577 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6193 0 obj <<
-/Length 3475
+6584 0 obj <<
+/Length 3316
/Filter /FlateDecode
>>
stream
-xڽZ[~_JE^[a}IvS ?$A1ک)R&]o}m5)Xr9`_bW"Oebw{*"$Ʈ%"[)~^͛RjjU-q7`k|:X@a/?n޼׫0[~+ƥ640͏Wo6S#/JϿn<[<@<_Xyq^]\ӭ}тgcPPegwTu-L[PMxyԇ5u TuS~K<UNKveיK>QwC N㹅]E5e{V{shu7i7*ν8Ofy~E,>]'A_y lT}i/17 i=\9sOnex~犻Ge:0= i1K^ۃ&~d3bj,A"P ]U Cu`YÀ>C{ʜS‹^)z܂҆SD ǩ6ݡh{˷=3r \͜
-q <6HD
-ZŢ@hbc\L$ƻ9
- T,O 1Vh_zEpLEh 6B#5AcZoKauH@;!O6-lŏ}D8씅#[P1(Fe$Q&$T sAKƼhs1s`)y(Y"9F'bp"_CsF^hvvjs
-n+ q3,kA
-Xz_Jta
-\$/h펼н2:5,"4
-sBb|CH]Z̐VnJ!碀V,v"Aa/&҉ku#PXwsDQ 0o"1HH -|8FBˋ99x$eぉNpnT-2B#dHuf9Y;x"#|p!5y{ vYcϛ:2 ČB<:0yi1hf}RP6mɧ8!ؗc3}r1eǝLvh(YVZ|7rW\\̮':fT,[ޤ.cErֱ:Cc;nޗ23肝3܌)`+l!Za;gۺud;Bn\y{I 04<_}L^6BS߄{`%@bzǻdw7l)@
-B~!KuS-)'bXq-;"d kY^oa
-'L. b=Ԥ ` oQ%$[L,S\,p ZBS`
-?L~"q|zAͿeNYE3'c<>bN<EYsYGsldhK)KGaqk2!Ŗ1h]mۉY [U>Y,O".I/C,<.֑̈́'\*H|ZO*L/A$f endstream
+xڥr]_U&H˖+8+nml?@D"AJ~>}
+z.2_0?*!IXMU4T6~p
+UtՐB %)&`x?NF Uڏɝ`ˊqx#8QcuG \r,
+ܠwiuMQI
+K[ƾMQ=7 5
+/໺e8_4δ Z-@T6cH[0f{ooɲ$!Qťɔ_`=Gjr}j"~PTj$ѥb^Sq5!wMVg҄`_5k:U*w߲\(uHL2x[9;Br.bp1*8(哻%neR!X&ΥXO^%? UU˯mKr[asC8dڝ,a'sI!Hh|<q:+v;`gO1Av/~Af? 3,O$OX6yc[NSc Vul͏3wU[@9̋yJ3_iEϹN I͒ qmIn"< ؏}ϿUחUQ8Nwudu=YT~p/@pKN~GŬ6`@F"onSUzJRglbr-Ӎ1.%dx]`=/
+/G۠@8;I8ؚ=G{wwTjUi!{zu#> aI1*N(/ʇ@I^?>I;SI=JIT9 3Y#?lzW7'
+1m9WjzQ[=>Nԯ8Ϋqq"+>;c#GN̏8M,&g$E B6Љ>#p';_.XIǥE ޣ &4N([/!KE&SՖgԠL=ԫ °LDx`WO\UlU+ɋę~4k"Dp@AQ9.Pe;-[<%0SլSr$kvK"Z37RgRS[09R/bFvǩڝ|JTAq
+E<n/~
+) ~ys-VnjٷF `]\)UbjRJ#0w\frofqKXAz& R W 9\ S!]i+]]Js RBNz{"&odۃ%}JERDJ'ŃUO<a*
+ҟHqmF_qK$ FK+7TG$r@~H_sj84O O,pl^_-ᏹUMUSB(҂j9FI%Oendstream
endobj
-6192 0 obj <<
+6583 0 obj <<
/Type /Page
-/Contents 6193 0 R
-/Resources 6191 0 R
+/Contents 6584 0 R
+/Resources 6582 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6186 0 R
-/Annots [ 6196 0 R 6197 0 R ]
+/Parent 6581 0 R
>> endobj
-6196 0 obj <<
+6585 0 obj <<
+/D [6583 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2298 0 obj <<
+/D [6583 0 R /XYZ 85.039 558.621 null]
+>> endobj
+6586 0 obj <<
+/D [6583 0 R /XYZ 85.039 526.404 null]
+>> endobj
+2302 0 obj <<
+/D [6583 0 R /XYZ 85.039 348.751 null]
+>> endobj
+6587 0 obj <<
+/D [6583 0 R /XYZ 85.039 314.006 null]
+>> endobj
+6582 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R >>
+/XObject << /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6590 0 obj <<
+/Length 3989
+/Filter /FlateDecode
+>>
+stream
+x[KsFWr
+'^IAy:re P&
+Y]?xqIRf(0/Btvסм
+ER&Urnt,` eCjwxymV&lj7Dwjwm~#iny7qM7s݋o%ߚvS7QXחXe{h8;DMf4 @$qH[W|B)B-4ۼ-#5pd"-m
+~pC:wϽhL̀[P>2ʂ6w7#7؄CwDEÊ&;%6aKnyYB7îneOI[ÈIzֻ|]ޕ)\=MCݐŗMͿKPu1QoqpEkG]嘴vzZ=SsA]Q6jwEL8}'"^+F^ C7Ɇ:,K@#)IMb3Rd, wdDs
+ZVá.*KOG& F1iW?ly <q-۹ǗY22',$LIk;wƀh& ښ`|9z\~.؞˾
+R!O"B3מpsbDEBx
+&C bKu;>!閕R9z}Etl/T.v 3س)E7mZ5lvz^Rwy;| cjŖ!Ha]'yռuTL\(N\ڐ"wɟT7ƂJNU\r6:
+zP9GΌhhK1
+=WtD`:V>(zWd(Δa*  DS$
+* #*!.
+kd 4 gy@B[+6>]08WnqaRLCI
+D?D(XQ5n |r#!iz-Gd+2R&<[<<ݷNN1|sBPv=Nc.vg0.^WozyTXtؾ7p+Xisx
+xfڕFxXúwe3rJ3mSaP
+W@K$DZ1TdTMNP?3)8"HTa(XEiMЀ <& 8#2*F d09|"/_հΫ$,DD<08t
+kP5K~g+
+_խؽ)dU˸WI-ZC;/eW{?v@imhK$tCzP*٪{S/HM`L3~T)pU!%{r^sDMr5nJ
+>`YW^|&I+
+JNP'l2DSR)̈Dؔ+PZ1ai,L/V<pUTu~f Ϯ޷nH垏-P7"j
+@38m=b>GrR
+RX@/H4<g\A(I:&M9gytϱ:9@Q\&?- rgwߙg]1呃#`;q<<A?-uI5']YVX2&4SoRBȇ yp۞M 'ΐGG-R=G+dXߥ _S!$endstream
+endobj
+6589 0 obj <<
+/Type /Page
+/Contents 6590 0 R
+/Resources 6588 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6581 0 R
+/Annots [ 6595 0 R 6596 0 R ]
+>> endobj
+6595 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [294.66 415.822 400.604 427.512]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#OBEYPAMRESTRICTIONS)>>
+/Rect [111.316 131.555 192.154 143.245]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:morgan@transmeta.com)>>
>> endobj
-6197 0 obj <<
+6596 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [366.309 334.527 485.694 346.217]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html#ENCRYPTPASSWORDS)>>
+/Rect [111.316 90.908 196.509 102.597]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:gafton@redhat.com)>>
>> endobj
-6194 0 obj <<
-/D [6192 0 R /XYZ 85.039 781.388 null]
+6591 0 obj <<
+/D [6589 0 R /XYZ 85.039 781.388 null]
>> endobj
-2266 0 obj <<
-/D [6192 0 R /XYZ 85.039 448.833 null]
+2306 0 obj <<
+/D [6589 0 R /XYZ 85.039 546.666 null]
>> endobj
-6195 0 obj <<
-/D [6192 0 R /XYZ 85.039 430.164 null]
+6592 0 obj <<
+/D [6589 0 R /XYZ 85.039 514.448 null]
>> endobj
-2270 0 obj <<
-/D [6192 0 R /XYZ 85.039 279.611 null]
+6593 0 obj <<
+/D [6589 0 R /XYZ 85.039 350.866 null]
>> endobj
-6198 0 obj <<
-/D [6192 0 R /XYZ 85.039 258.414 null]
+6594 0 obj <<
+/D [6589 0 R /XYZ 256.582 356.839 null]
>> endobj
-6191 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R >>
-/XObject << /Im1 3957 0 R >>
+6588 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R /F62 4052 0 R /F41 2998 0 R >>
+/XObject << /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6201 0 obj <<
-/Length 3267
+6599 0 obj <<
+/Length 1887
/Filter /FlateDecode
>>
stream
-x[s6_KN=8Mޥf>"%qL*IEqo
-'FA`(d fa pʴ>:57R(h8UȢ|O a&ɱh Mˍ7yVY2 HB Z4bfszrLJe3]egӘy_0'X?8 KٯNԜJptBʶhMd< ΛU: ,KH3s5uNqY`ws^^| )7CfE,
-ZCۍ˳Y
-u)wHjK:ʧƅd}h*N-(%LF!5bjNM2iZVol[3~/ܱ֜%tOrdy:5VP2k9-M7"?Z"Ҋ EgI
-㠌~<7b)@o8sÂA? 64DS6lJSB.7@%FEZs>XKX ARNUzQdO )kۆ PB B&+7jmNlP6l7pS N"Q~"eS{`es[2BUa-1Xc6m
-B9t71x}-&X޿ez[m)g(mVNM:|5 S4!ˮ=a4MRٷ_Q^s`)z)=u֘dqPn}TyolaLqPP[wxW%'lfƪ;> 5fDwj@dPmU 9WXt)71|4=BصKu~ށ;ʎ.Ipk6A1?Ѻend"c7\6܀VkK?[L!\o[i 79YmMyIѥAK[<r͔94s{` pDC02MzT"CPNdư{;+RKsE7Qu2
-P4dPՀu HЋ!B:uR^c5aP6'
-/\i Dq<k:Ħ`сRv4먴bFTR:~8
-[粗di)oMUnGQzYS<37h) 6!l~mLy) ww1MN 8QOoKntd5gуw8n|]AQIPW9̾ .2_u)OɈTg a$<vjel-X!mȑq38J$.N8•m=;> -L!4{Trf5Z^tufc̊xI`*kJ 'WXjЋ8ƣ}W`Y G_M
-uolY=R=\ɏ&sOLQE(tMvv:@D._>>3~aY(=@P[3/,Ȉ_kø2s@%h4Q{{4^
-j]~fϸ2^;<g.5aትD׼?|u?rE?u>3DwY<]2{w?Ŵ O{02!o
+xڵXmoH_ ΑztJ)w 8~T`;7/kIPNz3}fvvc @ Kc? q5HZ*fOl4}m
+dz֎q٧)4%&I'y6^ x31mO4|y1;{''0.f}9E Ň٬Ca!6ŷ#K0o`l p JGtX(DGRYBYnIEҶlZr*a(Xmy"PglA "Sm;B!,[ai>wܓw D
+;q,0C
+ٞ<
+J.TiRvMZ/tȔ|%y¹ɓQXF9O芇}2^$IBUyD];Zqi$ҋ8B*ߪо;!]z-|85.
+0 e4ӇY\@[ 1bQЧ6@r@ϳ]@vLrJudȃ@48yf($
+@m[7K
+mie[/2+YoBx$\w?r]4z}ٶ8C:8&K1*UTwȟB!K\
+%)oxV\U\G.:S-\ꤦ1 |y/ tۏ{<ާUaqrq\GG;:G9 n-I{1`U۰ca2n1214M: nhk˩F$
+Ӧ̭SИ^?"CÃg] کT9Pٌ5mo:
+߽$E\ݭEuZNwMC2(2ؒ AC_JnI
endobj
-6200 0 obj <<
+6598 0 obj <<
/Type /Page
-/Contents 6201 0 R
-/Resources 6199 0 R
+/Contents 6599 0 R
+/Resources 6597 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6186 0 R
+/Parent 6581 0 R
+/Annots [ 6601 0 R ]
>> endobj
-6202 0 obj <<
-/D [6200 0 R /XYZ 85.039 781.388 null]
+6601 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [111.316 747.387 182.161 759.076]
+/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:lkcl@switchboard.net)>>
>> endobj
-2274 0 obj <<
-/D [6200 0 R /XYZ 85.039 546.666 null]
+6600 0 obj <<
+/D [6598 0 R /XYZ 85.039 781.388 null]
>> endobj
-6203 0 obj <<
-/D [6200 0 R /XYZ 85.039 527.998 null]
+2310 0 obj <<
+/D [6598 0 R /XYZ 85.039 636.74 null]
>> endobj
-6204 0 obj <<
-/D [6200 0 R /XYZ 85.039 377.964 null]
+6602 0 obj <<
+/D [6598 0 R /XYZ 85.039 602.596 null]
>> endobj
-6205 0 obj <<
-/D [6200 0 R /XYZ 256.582 383.938 null]
+2314 0 obj <<
+/D [6598 0 R /XYZ 85.039 357.583 null]
>> endobj
-6199 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F56 2890 0 R /F35 2880 0 R >>
-/XObject << /Im2 4150 0 R >>
+6603 0 obj <<
+/D [6598 0 R /XYZ 85.039 321.318 null]
+>> endobj
+6597 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6208 0 obj <<
-/Length 2148
+6606 0 obj <<
+/Length 1514
/Filter /FlateDecode
>>
stream
-xڽYYo~ׯ\T1>(Xyj &)5Kde([In
- Ma9#w>?ל10X=6)bVoXeʵJyq%SORԺZENWa%++K8Q/ǷOh7+N7 gNQz H{"}֧O}*=n8Ak2 eh%lW0NyORn0YQAv AU U;[>kflb)iUP
-ikBv*3.Ox "RS~_E 4p#,(^j nyhVG.aIkX)2ghfh2
-epَJ#|9}?ڷ>A9<x(b:}U]r|nPU:U-
--mqmy%Z]SP םDxO*l6j;5&"Y;
-TZLp֤
-kRHOJceKR I2p>#
-ց԰c}@@o `
- ,@/MP' 7e }6%"jJ%5X[\_v5ɯe[O=a*T?JI%[RioTY:Rhtv98j
-QH^Qp8-v
-
-qщلfެdg{esT'#ۛ|b_.9<RHMYmaMjKT+ c}њ<uZeGB9} BcBn% |R>̮ K`}vӛN^ E]BeMd[r[Vy}&"{m=ľ8Ulʊj n :Rm_9 iI$j"qy5-y.io)cS!Qϸ3Z~M4g{ i@E'ᠿZf9hv-{ {
-O@XrE{BY[苺*4:m/sOSW?
-W,Њ4[ 3܀`."&J*{Mִ]i1&IWz:;s!~t;탔c HgA_̼@?Xn)=2S 5n5J=o9诈^i
-[u$!au٪Q%4) Vvs ]˗<@`R+7٦O]=wr~MxGY+}4-:4
+xڭX[oH~T2e >8nӪlJ+u,\~ϙE ssf‡𡯘#s&|8Kp 3x%aW"vKb2xB!wXboG1p2`]Nߍl!*6=ϷnGozĭ+| &#׷O^^\MM_vqjp=i"ob( Gg8_ &8L))dp71EsrHZ]U%lU+9Z4tJ*)GJB\*&J֛x*+,@0 n9 \f.1f뾊IVZa/cr#&vmaI"7/3ML)k4Ii
+ɃHa*OiHGgM7Zb7'qt]aYC p-#[hcV & ?0n@ȳ .#2gU{VkR:]E8}ϣf⒞᚞DUj=UDvaDS;ZӒF_rVw:`4 O ?c7MA' V])}͙a , S[-W<}i1 ,ɖ#tBX:rHm6˶8ͺz'YxL]̿!~ZTyq:W4=x_yQޣG=,@nmg}QQP|@'|}Z2` yV
+_GsB8+FAܮa02ZKb-m4דVL|{^(6r-s
+2`7= & I傹^7۵-e4kLs})P
+Ф5Ih*yrӄd, mNJCk$D
+_ډ> L&]80j}f{ v'
+TWHxt2<Cz܅\% KpkS@SDC͢%'͂bfL^τIzt?G6E=gf>)j2t2~K1 ~I9RԄpk̯"A/uT]^}" IFB}Lz~Ml2K
+͑󜈫 6s.L/ qəxvj𨌃=:hsϿGd&s}Hji< %^@^Ƶ*ΗYSKxD ,Z MƠl.
endobj
-6207 0 obj <<
+6605 0 obj <<
/Type /Page
-/Contents 6208 0 R
-/Resources 6206 0 R
+/Contents 6606 0 R
+/Resources 6604 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6186 0 R
-/Annots [ 6210 0 R 6211 0 R 6212 0 R ]
+/Parent 6581 0 R
>> endobj
-6210 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 733.837 217.411 745.527]
-/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:morgan@transmeta.com)>>
+6607 0 obj <<
+/D [6605 0 R /XYZ 85.039 781.388 null]
>> endobj
-6211 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 706.739 221.713 718.428]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:gafton@redhat.com)>>
+2318 0 obj <<
+/D [6605 0 R /XYZ 85.039 761.463 null]
>> endobj
-6212 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 679.641 210.209 691.33]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:lkcl@switchboard.net)>>
+6608 0 obj <<
+/D [6605 0 R /XYZ 85.039 741.337 null]
>> endobj
-6209 0 obj <<
-/D [6207 0 R /XYZ 85.039 781.388 null]
+2322 0 obj <<
+/D [6605 0 R /XYZ 85.039 494.868 null]
>> endobj
-2278 0 obj <<
-/D [6207 0 R /XYZ 85.039 597.626 null]
+6609 0 obj <<
+/D [6605 0 R /XYZ 85.039 458.603 null]
>> endobj
-6213 0 obj <<
-/D [6207 0 R /XYZ 85.039 577.031 null]
+2326 0 obj <<
+/D [6605 0 R /XYZ 85.039 210.96 null]
>> endobj
-2282 0 obj <<
-/D [6207 0 R /XYZ 85.039 357.66 null]
+6610 0 obj <<
+/D [6605 0 R /XYZ 85.039 168.675 null]
>> endobj
-6214 0 obj <<
-/D [6207 0 R /XYZ 85.039 334.945 null]
+2330 0 obj <<
+/D [6605 0 R /XYZ 85.039 110.641 null]
>> endobj
-6206 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+6611 0 obj <<
+/D [6605 0 R /XYZ 85.039 75.895 null]
+>> endobj
+6604 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6217 0 obj <<
-/Length 1547
+6614 0 obj <<
+/Length 1755
/Filter /FlateDecode
>>
stream
-xڽXY6~0P+%ȃ4nS,dIH:;3Kc8-񡫘%r&\wkYcS/Wc9,o84l\No>#!a+f5nMWzKIp94k|0}ssT5%afH29/0H,&<wŸ ӁT))~2jsrWu$cH<[u%yAl(& gJz{Zf!2d 6sSpB-pgZ\.*A43jy.l9m(bICb84@zFS _7EY?5mǘ/&3*++?I@-OZ*pT
-RaRqU+BG}S"QX1I)9z$OhЯw@Sj 
-C.1\htM?ߨ(rF<CR/C5ݑ#HZy-.&(?/)rp5|֖۸j 7/BJ:z%HXr2﷓#άw~o+һ}#<;;^+w(82_qWxe>˓|g/X[DxJzo'AΪw-mb.<$ P^*|\K?7J7et=
-bt;$w"@_h
-a~y:s"ۗ 5%4r-E|GNZlLIܡv! F0K99`CwnaK';8}i 'tڃtѺ tk l$X04pr:2l)q3{#iy2r ))~`J
+xڵX[s8~ϯȰ8Ʊ-_;Ӈ@Rf
+,a][IMm+Ґ"IvZ:::OGG3-6EbdWS2y^zضȊƋt=1^ƋWwp<s2 x7 ]c~8 8Lm i'4>.^Y9Z[frx=:]6utqiSp2E70Lmz|ag/1'B 0 o L7#ϣ0ms=zgTkU2,ϮfL*ku\|lY+Om+'n,d<&jWY̾ZnkyUuy56Akv'7ZVY"mbJb~EzrGB$_ߨ*Mw \a'}Ù mkY?j=:Qc)nxV&t2.i//KؗK$ `բJޣ&qdW3͵leUQ -kd5|u -ˁ$6UYrh_0!v ó^8u]xsӊXveJ]E= .frC2LmQ
+650oX:PIh6+WL$T+* m|q]x}yXd:9l;ȏ-k1&6KH)TbUU;Vw]W'k;# 3LYwmU d;e!fЖ u
+0C {qLls_> >endstream
endobj
-6216 0 obj <<
+6613 0 obj <<
/Type /Page
-/Contents 6217 0 R
-/Resources 6215 0 R
+/Contents 6614 0 R
+/Resources 6612 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6186 0 R
->> endobj
-6218 0 obj <<
-/D [6216 0 R /XYZ 85.039 781.388 null]
->> endobj
-2286 0 obj <<
-/D [6216 0 R /XYZ 85.039 761.463 null]
->> endobj
-6219 0 obj <<
-/D [6216 0 R /XYZ 85.039 741.337 null]
->> endobj
-2290 0 obj <<
-/D [6216 0 R /XYZ 85.039 521.967 null]
+/Parent 6581 0 R
>> endobj
-6220 0 obj <<
-/D [6216 0 R /XYZ 85.039 499.251 null]
->> endobj
-2294 0 obj <<
-/D [6216 0 R /XYZ 85.039 278.706 null]
->> endobj
-6221 0 obj <<
-/D [6216 0 R /XYZ 85.039 249.97 null]
+6615 0 obj <<
+/D [6613 0 R /XYZ 85.039 781.388 null]
>> endobj
-2298 0 obj <<
-/D [6216 0 R /XYZ 85.039 205.486 null]
+2334 0 obj <<
+/D [6613 0 R /XYZ 85.039 472.088 null]
>> endobj
-6222 0 obj <<
-/D [6216 0 R /XYZ 85.039 184.289 null]
+6616 0 obj <<
+/D [6613 0 R /XYZ 85.039 437.948 null]
>> endobj
-6215 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+6612 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6225 0 obj <<
-/Length 1146
+6619 0 obj <<
+/Length 633
/Filter /FlateDecode
>>
stream
-xڽVKoFWD.en i3
-lc)K(Py7R9~1:u6)V< #T]fu:JTN$lqy7]}|Dĸ<,^y}{ʽE_l<~]}nޠn22<>z*;EkLn.T~"N*M$Bmvyu^g A -1Aeە6UWݴ}YljM~ȋ'ѷ*]?+? XZdW4 #S"P ̡n qKnMeu6}[,ݢ{qPCW~~wjtЦ܁S(oK0BatʶY@
-#aWWMs˶cL6Q#iX,RAac=`cvpD>”nk=܈L`M@,w0t52<PE)|4x&mr(p'FLjK4ȥED f^fiqBFeŭ#P#[Μz!iu
+xڥT[O0~ϯȴli1ql'^e¨414Jh\4ms=MUs?V,h΄B <=G}HsdS<dibR dlte4BH1$&WTK2Grrsp2\[ƌO\FܘĜo 3 L2Eؿۻ^D !<͔^zSPfJ4 &T)KS4[HN<f9pcQx=p\ݻ^+,2yه| Ԓ"fQ,NI-E Ǔ3U;kd-@JE@bֹ9eV;QBMZ\Ţ.J
+ZQYb-V
+̀YP,@r2F=rK@d0o۱^γ=EX1rB]W,=S4o׈lcwt)аxdkdX#G԰&* tA:_g֠cS[,1<4ƀǚ%xc xMT[(K'} :s϶y
endobj
-6224 0 obj <<
+6618 0 obj <<
/Type /Page
-/Contents 6225 0 R
-/Resources 6223 0 R
+/Contents 6619 0 R
+/Resources 6617 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6227 0 R
+/Parent 6621 0 R
>> endobj
-6226 0 obj <<
-/D [6224 0 R /XYZ 85.039 781.388 null]
+6620 0 obj <<
+/D [6618 0 R /XYZ 85.039 781.388 null]
>> endobj
-6223 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
+6617 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6230 0 obj <<
-/Length 2301
+6624 0 obj <<
+/Length 2072
/Filter /FlateDecode
>>
stream
-xYKo8W20VKMgA ;afBd)#ɝUl+e
-RjVywF=p6_?,
-]4ّ'FWdXhטZ,擁.Ol"ĮG 'c4^Ny?z}U3ڱ~$xjF/kr!V_6Z~s`Mf<fϦGFAlsWóΫq/(x%SadXHUu'bS՜vYYf/O2r.ZEő %2&ۓ]b'30iZBk]3H{7&%ē~Qp{{1LYwaArK4p晭;m`̏s$N"k(Jh:T:av9[=K7Q.#?'$@&XbeUa-4`alA*Ѭ0GXJ֠JVWId<#a~ˏ(E*(4Y+4%#@mD;J =Ku7YP )icebK;VYznkR{[<GĿTɐ c{}Yƒn# /4`UR!ݷeLb%FsUAdP !
-+MsieiꍃGW\QtMM+l|u{d%9ᘅp[M׃_#a$˸h0/^$Zch%L>
-|ejH)`xfkb'ъ0κBЋNjwE&Q>w8\aԀ7fuQtb^N.\/DRb“*[
-Q.nN#ow,УK&l)C5qF.;8Z P*=MEWWa옋X#`Wlt}Bę@*
-qph$ޏH4[YRrAEp8vEx'ZO$no<ԧ#(]x5uޖƕT*f]ux Pe)J4|)@D\O KרbaxJ()n9!%SO ' Sp`V3y
-D(5L3%fRy)'1d΢0IVg+(/lgAJib'(r$Jx$v҇0
-^~g3kyP[1Zͷb"hH
+xڥXYoH ~ZKkz,\Iq>(b %4n<f$EhI@ 8:LF:˂n"55:͙ߝ%*&=K2HsDD$:X<xALDYշP%t"OeXrNg2,lt4t߯VիfEZH^کfzfc10"2" fD9|bw_W Qf*;!eeH"b}MR+(peG*oh^ox,ʖWHgؕ6޷j-;6 'Cxp'_.Aۊ`&GIVxlE3ɐE*<nhK.p ..Y0-[>jCO
+<sl$Y8W-TNv6 T,4([cǺ/{ھ
+UIͰ55MȆefh84\؃۷=BJEPwV'"y<XD2σ@"vnw &m)|xɏ
+J"q`2V0JcԪTOVtSn< Wˠ#о#gDQp8ޝaCf]-!nak'oڶ.bq {oa$#^Cqۚy׿3
+#rl2+nc煷RUeL&:Ubjf),/" {1/w Xz"'Z 8@[ Û[&ˍ'ľnN#=Ha\1\-
+2NYJ28s2oהbWBO܀>oq $Jth±펓ᯯ#@s8fr=^PPW2ptati" &X9@| Lb}y8vNyд;oeKJUchaߋ$4x7D RLfkyYygc,zܱ|[^[R+[x?$;IqI_.{8~mduog?਷.NFEzcb^`N89tc O aJDS%x@9x O
+BK@
endobj
-6229 0 obj <<
+6623 0 obj <<
/Type /Page
-/Contents 6230 0 R
-/Resources 6228 0 R
+/Contents 6624 0 R
+/Resources 6622 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6227 0 R
+/Parent 6621 0 R
>> endobj
-6231 0 obj <<
-/D [6229 0 R /XYZ 85.039 781.388 null]
+6625 0 obj <<
+/D [6623 0 R /XYZ 85.039 781.388 null]
>> endobj
-2302 0 obj <<
-/D [6229 0 R /XYZ 85.039 761.463 null]
+2338 0 obj <<
+/D [6623 0 R /XYZ 85.039 761.463 null]
>> endobj
-3028 0 obj <<
-/D [6229 0 R /XYZ 85.039 648.42 null]
+3131 0 obj <<
+/D [6623 0 R /XYZ 85.039 632.606 null]
>> endobj
-2306 0 obj <<
-/D [6229 0 R /XYZ 85.039 416.522 null]
+2342 0 obj <<
+/D [6623 0 R /XYZ 85.039 386.34 null]
>> endobj
-6232 0 obj <<
-/D [6229 0 R /XYZ 85.039 394.76 null]
+6626 0 obj <<
+/D [6623 0 R /XYZ 85.039 351.029 null]
>> endobj
-2310 0 obj <<
-/D [6229 0 R /XYZ 85.039 295.722 null]
+2346 0 obj <<
+/D [6623 0 R /XYZ 85.039 224.075 null]
>> endobj
-6233 0 obj <<
-/D [6229 0 R /XYZ 85.039 266.318 null]
+6627 0 obj <<
+/D [6623 0 R /XYZ 85.039 181.122 null]
>> endobj
-6228 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+6622 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6236 0 obj <<
-/Length 3170
+6630 0 obj <<
+/Length 2311
/Filter /FlateDecode
>>
stream
-xZs8_3*ԇsOimwIs{}PlT6ዔlK31B P$jF~$UNr{L0L G01~G8zqLTσdH,oޛwә c:KԻY}7U43\匿0> -p/>!?=/__LXzv1of|kTϳ&+ïg+_홉-ٿ3~k 3"_d?MFiɧ3Uz{7y=?Ը/X.ܾq8LUfN##F+DRN\νJ8*#n;.+ghLv6Sh9m:ԮPj,d?`Lo;ƶ Tmwt(%CgC`ˮh]<3}|A,
-..F
-
-BLU!>#ۄ5Y_CLJ!y,<&dG~ N!_x >k8P!m+` _t!;0S#o}ozƤS4\mȪ H0A Xꙓ;[Ez4D t]fWX |pdG2HѐJ~kcyLFC8 d1sʻ 䱈|j7_|6U>IMךfbr3~d@혜]%IF'1F'aΉG5խq?mt<Mic䙲 9/ +l E%
-;x@EI2+7phUS6<B j*ԂrbPష"'!+5LsK\ul#WDx;N~pu^8U‰BI 6V^SxV h% I@f+- ik퀸PPRD{eU˱5UnLW3î|>*yTf8F 4LF a4S8gqG& gqR->wv0[ #("BnBj
-tM."^܉FR|hM΃Ed?BoQ T4L/k4y}oo[LޜQqcҍS#'uȢ!%-`  wěw}]Ջ/#*H+.9-U@xP&00e;"eV@/V[HBjQ9oΕj3hɅ'n=~*/l\`RٟLʿ臝Avsw@
-3|5"Sl9Mft%rlN^M-s|L7{ټ?;2`PuՎ <Ux9ȈSVj
-#_2u].3^HرD4%X *sNhqH94Ր3  ~7C+"`K |sHв0Z:b(=9Pʻ@:fqy]pP y!kE^Z2W:B"@d)_>;9Og̖5 IP58"K
-=c8@k 9e@& 8" |-*ί
-
-&;>}-I,$QcNnqpQX{-, aE$Q`eliAgW1'aSݕ}}Qp\2MqgދC5^# /91Q
-JlFY4::M<zc{r} 9<
-bG3T0٦^_uLke~œD!,-; Rjҡt&:h)T`g}"uC dO"5ok)f$¡ÏxVUendstream
+xڥYYs6~#U
+0bw<}<hl<S>'7wfagtjGٯg̭4 _/,@_/'cI^]^}3/.i=cC4J v`@G g(V'S%߽Z$^TP;RzIi vґHM^`f0noUC&KNIzcӊ.+ܔ ӓ\;Kʸ_R%^ND}\f(Akw r8a~} =oY3B0mUZMfs$.hnxԿ~L7h寮Vs /<k;}? 蟊lpe
+G<;B[^<ֆ=6\eMOҕfUHD(`A.5ۚdnZȮzk^c3f [!;`8W9G)Qnf
++3[0w1r
+ 5[0IcX M7)eYdkdioYp[֍ἶw5) I^;qmx{:jaw8ŵB!ŷtHؔhy/eP TySVn$ 179JC}=Y͔zIkQH`ҶczݠY5Ӈt|@)e$ :2@ \lͰuUE?=fW}ZI>\r}#
+ mRv@aʟͶ2="~|o_U8
+?_hN"N
+WVk^ĉ*}~R^gZ;F
+Xv8^f P3RRΫќQT3 ;8WDZU{y>8J O?ðS|q{ڳi<}Vgj=vmT6GdGKx4dL[۵' \BYw*||hN/쿼mLMv6'rh+lQ`֔HiB{*0ILn
+%D[XR J7h(8d<ƞċSTLV
+iR֌*c Fz%F.&۞M3- :##Pf,
+~9A1ץ׳wT&bwڒL%=`&87UÆ~}yT_0M8cva0-Q2e;
+om6,ᥑڐɤBXf-}!ݧiJeS UsJNq8uQl4^¹,UĽbM#<sK]`c`dRkJx_)o )5jqB v.pl縷{lF;7 0y`#Mç0I|E01(S1F> RV'ӉS1*/l@Q? )/lˈ` @ %(KŐ5c^:ĂBO4Ymm7t1fm:1 ,Yl~DŽp%ox~P1̒Ó:CLD}ʉe/
+b:%RHu <UTO-)?V/^_ŧj@)OI+ }yu?#endstream
endobj
-6235 0 obj <<
+6629 0 obj <<
/Type /Page
-/Contents 6236 0 R
-/Resources 6234 0 R
+/Contents 6630 0 R
+/Resources 6628 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6227 0 R
+/Parent 6621 0 R
>> endobj
-6237 0 obj <<
-/D [6235 0 R /XYZ 85.039 781.388 null]
+6631 0 obj <<
+/D [6629 0 R /XYZ 85.039 781.388 null]
>> endobj
-2314 0 obj <<
-/D [6235 0 R /XYZ 85.039 664.197 null]
+2350 0 obj <<
+/D [6629 0 R /XYZ 85.039 558.485 null]
>> endobj
-6238 0 obj <<
-/D [6235 0 R /XYZ 85.039 633.996 null]
+6632 0 obj <<
+/D [6629 0 R /XYZ 85.039 514.734 null]
>> endobj
-2318 0 obj <<
-/D [6235 0 R /XYZ 85.039 550.674 null]
+2354 0 obj <<
+/D [6629 0 R /XYZ 85.039 361.848 null]
>> endobj
-6239 0 obj <<
-/D [6235 0 R /XYZ 85.039 527.601 null]
+6633 0 obj <<
+/D [6629 0 R /XYZ 85.039 327.044 null]
>> endobj
-6234 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F14 2895 0 R /F35 2880 0 R >>
+6628 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6242 0 obj <<
-/Length 1973
-/Filter /FlateDecode
->>
-stream
-xrF]_iYIi㸱:yHdQ#P
-gGy9&+ռ.
- %-}׎F'ZIأ='fO:pd)cmg`n0M1@PD } >@!Y|xH>cTj~֙ )W&m1q.3=\Z+`{P95%?VrJRV?;Sh/\1،>'2"<"\nA5P4pɠBNM;:0r,T{nO. JucrJ.2)XhȤa`K>:ã-oK.Q1お/1iR)ϺUwzVJhv+1]G4Sѵ;!ثhƫV%1A2ʡUǒ)6{ N@s'KcE ƬL~D(鱔fvNMqYo1hsFM;@~?)Grգi2(t惤4aP=U4{Z))`ifn}An`‹T iR%FF0yJɜ-N2UL!lI&<4tz:2 *۶[e)egP ǃ]F%HޤGLt yޮ7u5\#5g7Jt7B67Zn
-zOU&+jJ<i QnNJ3Ù>6pY: (wlP x3]-ԇ=ߢXM*Y7s+uh6|`*DdRTDJkㆶV߯;ڎJ/}Th{+`N; wo^,eexTiSʑD:`Ing*aiDŽ$Fy'y)3ΐYLJF
-Poic u6ku]lF/~"{$nRE&yG4 bƒMZ^IMĶEDB K➄JORLlĬy͊úȚK's3kHڄ<.詽9nDϧj(۾EuVӒ6v3Eڀs4Ś[:Ѻ*2
-Aj?M]3.Tc?ó*f ̡W+wsendstream
+6636 0 obj <<
+/Length 2885
+/Filter /FlateDecode
+>>
+stream
+xڥ]s6ݿBӗfjH=Iںwq|2DKBRuo
+|&~pǑQMxט|bqO#?"RY:+:Z?Uky6
+-.yPT *͐i4/e@ՉWd^!OUU}#w oiͳX9 SԪuD:4yᡳTKx <>$V#^ؕ Ј7ĴۉH6zb6@&뛬
+?0 հ!=WJ@bV}XvV᫔U8J'.9+J /+NPUßs)4Z,g׍ V30?P$ABE2- 4HJc-@!p,LNrGГzIS:/Z'nƼ)ΧBvx[!dCny/9q `G%Y8 %Ia{p:(A=[j) <z@xU龮7(ΤLҸIdKU8D-ش%8 uU$j[r~J0chOi<@J
+9CYǬ 4~dkty
+/[vKXPxv;p4z ĺW4p|{?Ctrj:_#,%'#Y9d(LJP{%T
+@
+J>XDpeZJEJH~P"4< qLd-*~$% 2_C=`8iAw1:YT
+@F{*{2ND@@XWd! (UoyzDjKvqu;
+rDn_QN m
+ĀN_8倫%"xO&J`բ͵$Cm`Oyc8"s 8v"Ky;+: b֨\a$!xhqGP1C Xߌ8o8YhP>S}:p +Tf}˦e\
+fl'BӈSr )F-rJt
+,,. k2@cU%G{fᦋH:xyb:- ע
+\
+6}:Kh]f9@wT"`.Y#Dbr֢ zlԄ^7u(oIx)
+{w
+Џ^$N.8'R CSKbCU;Ua\#o?"u0d]MsN,L2@q(L'K r+2Yt-K-P^nGDjnNHxn{s!v*qD~<_), Tu#=E=].G,,Mj!HZ[y}\=bc&%\wMd(L"ahMrҡ\td#O& ;봀uBk #J
+wÅ3IRɳkhl&w9VuRMٸ$Bs"LMC9 ~CW
+gM_?c2R00/4+>qL)6˖ B\+ua"$v^"k >yPt N2jSV"}mϴ ˟
+-/xtEendstream
endobj
-6241 0 obj <<
+6635 0 obj <<
/Type /Page
-/Contents 6242 0 R
-/Resources 6240 0 R
+/Contents 6636 0 R
+/Resources 6634 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6227 0 R
->> endobj
-6243 0 obj <<
-/D [6241 0 R /XYZ 85.039 781.388 null]
+/Parent 6621 0 R
>> endobj
-2322 0 obj <<
-/D [6241 0 R /XYZ 85.039 679.343 null]
->> endobj
-6244 0 obj <<
-/D [6241 0 R /XYZ 85.039 657.482 null]
+6637 0 obj <<
+/D [6635 0 R /XYZ 85.039 781.388 null]
>> endobj
-2326 0 obj <<
-/D [6241 0 R /XYZ 85.039 559.67 null]
+2358 0 obj <<
+/D [6635 0 R /XYZ 85.039 382.96 null]
>> endobj
-6245 0 obj <<
-/D [6241 0 R /XYZ 85.039 537.81 null]
+6638 0 obj <<
+/D [6635 0 R /XYZ 85.039 345.429 null]
>> endobj
-2330 0 obj <<
-/D [6241 0 R /XYZ 85.039 398.93 null]
+2362 0 obj <<
+/D [6635 0 R /XYZ 85.039 192.55 null]
>> endobj
-6246 0 obj <<
-/D [6241 0 R /XYZ 85.039 374.948 null]
+6639 0 obj <<
+/D [6635 0 R /XYZ 85.039 157.14 null]
>> endobj
-6240 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F14 2895 0 R >>
+6634 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6249 0 obj <<
-/Length 3232
+6642 0 obj <<
+/Length 2000
/Filter /FlateDecode
>>
stream
-xڥnF|ͥ52nQ/c+!Ɂi&VmE XŪWK== =rIڦ̚akLpjqv&eFV4Y"q:s]p|s: И-ox9 ]c1a'}}:,w
- l)z[gTS|EYּč`~#77~WY5%8"BnOfBF&ED!S}ClD%ﺰUc&'*_YӲUt1C?clSB@:@l}EtȈHTrn\e4,$-"r ^)Wb|N}z@qpZH>`SVMq0,c|7..<^[ b{YhLҽyFšS],G}v,KD5cYuEľO^ ƛW9sC1#Q4 IN:+ pLDŽuXėeS:+co#e~L/ AI :#FH9\m/}Ȑ|Ap.^*>ًJ+5aG('qfͳv }H`Ԫ;~\FP..ğ;O7ȝmr~i?< 7ϸK+5'cnj3s@Iz[(a :
-2B>dհXcpȔW|BA+}5 b-<Li<Mx FCEɻ[-Djm/S|yttƟgefj~Fq*;bŻ Y㟣;&8!F&-+CVf]a6Jj([k"uBSd4r B.xE!8gIҧ_D"O.~gK5sߴ¡_H2ReӆЫ!
-MX
-7桭%hKT}䦬F`Oy2TY]ejcB2!
- lĜZ_sΪk O
- A8`spoC=~ ~>NPsM3,2bMb0f 4{DP9%l.6a#i+EOA(\񒲥F
-@!x(7͜6긚l䝠d4'pt`ALlk]R}UwC7JlhdN@
-cfJkN5Dc XNUvlHsZPDE5ܓ]>@L~`ڡ=姟ww?X֏p^_ ؇I^}Q{(G`p#on"S&^m(!DӔ}ᔒc -.nz|?9B u.՜H
-[+
- MEaE.;+|pM˴^`_Mh*Ey.©?%9nIvwŕQ ؎V;n8<5ϹtNB=ABC~+
+xڥXK6ϯPy/T%H(^Ǚ<^|HrDjĘ"d2~!C ƃŃ< #5L8Ty>Xnn#ȡpo?eAh6|0`^ݧH)$p8N~0>s I|vw= ЇOzϲz/7^g 7_o+t_nPQ4T}}p?JҁP]O0չTv@YfQj[ GY?$`p&mdr8nb8J!8ouQB[v@Itk8+-mz@~Jg#(;*[a]vZmqkp nV]@ݵIYw_(.4#
+&8A*$}R2GEqu-,5ЖY].u"gO4Ԛ+mgQMXMfmM0EXh>] > nLqB>ÉSḺva"waE>m R-u]? Kak}6X+fSm)xl
+1BXn}n
+YH pWjh bPq4M2̅;Vv)9!RNҟzCady1SԶnQP~WƕJ^ܯ(ݠVGdoN,R@fOl&U,N!__6K-I$kL =%Q
+ %Gg%6>` 6Iq_r_
+$bW~;F1tD
endobj
-6248 0 obj <<
+6641 0 obj <<
/Type /Page
-/Contents 6249 0 R
-/Resources 6247 0 R
+/Contents 6642 0 R
+/Resources 6640 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6227 0 R
+/Parent 6621 0 R
>> endobj
-6250 0 obj <<
-/D [6248 0 R /XYZ 85.039 781.388 null]
+6643 0 obj <<
+/D [6641 0 R /XYZ 85.039 781.388 null]
>> endobj
-2334 0 obj <<
-/D [6248 0 R /XYZ 85.039 555.804 null]
+2366 0 obj <<
+/D [6641 0 R /XYZ 85.039 678.053 null]
>> endobj
-6251 0 obj <<
-/D [6248 0 R /XYZ 85.039 508.467 null]
+6644 0 obj <<
+/D [6641 0 R /XYZ 85.039 640.522 null]
>> endobj
-6247 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+6640 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6254 0 obj <<
-/Length 3621
-/Filter /FlateDecode
->>
-stream
-xڵkoB#(
-8>7]줶R܇DK<KBRq;]$*( yPȃ?Ů40F͙7Z3_0QzISofgD#ss/e͹xwqvy3a;iLgoǾss>Bg6~W^adΝ
--̍X t/`P(sh]/5ˮhV.**~SWL4u ~$O/t,cZ> Or8x[i
-&l#NOf= $P;5k#h}zXCG.jE)X-cdY^tϞ!-=WC8iFB`á
-MS綸UMY.JWKF!Y4_KmO|AͰ2=2cyyeS1/XlbQoY ^c,D=ό6-vF!ƕ9z@9Sx|gx
-uFYH.2dUJ\YAr4(]z"ɖ5a8fv%IMىn gp*#uZha?rZUm
-Wqa90XajaMF\ @[F5<Q./di61b$e6ڶD)$ENE_e+IWOpq
-1J!ڀfvoo(H8
-!O5.A SSW9h+@L
-ֲ~CaOX4H4Ǜj;0'
-h:lq$"j2d f>b}/V|Ð=[4OQ2&*~A9w"`CΑ
-̐BgwƤ# 8`D1(O "/]&%O<aD]
-<7ϹI<jj:J;h$7(umйtύM1J.~O37`igpIP
-"\gRsی/lno67
-o*ubvH4!R4¹
-ٷA}$􊇺i^_Y%`^ԻuY@44n[}=)v0
-^29]V$dÃ%.Pi [mTQsyeQg5Ì,()P0rL55.()`e9ˇ+`D}]$AX@Hٞ2-xAk;սi?qg\Qx_1~?v\&uj{aZ:}^+ \Frq8k[LUN`E,O dc8MO{GҺ*Le|lAYfY|UsF*~^6=g<(gyىDtL H1 p<4a^nz odn&?DrU ngos͏3~%T:IC?2ڣ*+Jc0!vιx3{_' G TqJ1!/ Sw`>C,Ј6zʈVN:1 a'(!3
-C:mAn#ӡ~YBh~(Qx4\IR'l4E}nWlι~g<*M^lBO^G*lX^J v!I
-6@),Q̺$5#J BSݘS Opݼn:
-"`D"-BlwTot s7_(
-/
+6647 0 obj <<
+/Length 3831
+/Filter /FlateDecode
+>>
+stream
+x[o8_aI>lp@m^J[YJ%7_d[vPp8q8CNIN'q:I&7GPɀ_a4=7A'ů7gf'ZkGE$jvz;ϦvfW?^\z;UQ*΁z޾gg?ϬV/E?7Y~>\&G\G Z,+n &kL?OTuniChsC/ P\w%(#Gm]9Y6_p#v)GU1 i~?RݢjyUM?n؍`{`Wn1vP`ZT$b'0 N ` %V1E2&_C`9 =s#Rl#s%)UO_@wgl+X()o7C snB!.P:!hS-r+7/jeue 
+ՕOx^תEf?ܾs<!ܻ:)MS_[;7E&c4~\| d/Li笄i;jif"yY%4dso7}sq4 ?ݞw}9)
+h v@9S6Qʒ~e?.^s` C2~f+Y Ցy7ґHK*pw/XC%ՀLF1 4a;3a]MY/ó \LejYMdIc"3gF<8h _YGboyOupw%
+ȜSM~W ,&l,DGHucw02j`pL6X3퉎;<Ꭶ e:sQg4dza^r֪Q!lηeI=f{Ba(٠X?ؠ{4̆W* wU!8{ޫ^qVcΙc7cp0֝SJMNP3TV`
+BvS$8 o07Ja<춥@PMlK)4[R PFVزe5lKB|S;hGx*h H߷P'Ps.}#Wn
+aT*u}vp7|squ~uvy뮓a*ֲFI(7A[ȁ" P&++0ۯS7NH
+zl=zPB+!?l/r5Do'6n)i? ð0ܧ.P*o"({lp1'!&
+*w{i0|WysN}?
+O׮zv'15Xn⩽NCX^m CuRųSS
+|(Nd?10kt>˿ ?iC:M\ !ڹd:*ZbFF00=!}7]E՚EJnkj*Kd;vG)p7lV! H0xCB3Ip>+Bd޾ŝBp;᳷جΚ'x19** 0^;xǔMdUɸi/־cߌzk=C@'n%LOl,ީ:zA N$z^|m89;)YD9,@5,VMJ#6V{OΧOOԻ4` 7_ey{\}krbϹ]5IARX͙ghhYSp%-NPh;aFP5~z_f(#RlVIXPccy,7$-8?q=
+ "<p. F9Zn+:`/ " mtaKNCKNJU
+s?l@lи([# ЉGo^̕Iɛ>5Jܰ+yi?Orx.cl( CUV]5=.3R▂tpO Js
+`Sau qkUjhh!59 >Nh >ИEtB&蜪T2j KD+e  PX6"<tR*,$5q4ñi;#:پ͜ gNpmj3z'Ю&VdXvxf3®,@ 63<@ :5k:5WPBkٖݖL󀼜6%-;dZܞP2R,[Ѡ8q79a茹L1Q1l6J
+rNƟpǝks:~otJJx$)dލZ&빐/"`*Ŷy×8qӊ]&t4l/O͓O%i6R@'i馘AR] d28\t[q3vv} ,EVI,k{ƙ(U%)`"ihTQn r`.a"R k.Ĺc\`֏EhbJ9뇩;?L-VVyPZyiJ<}e6,@%Rl͗D8PF,E 78£& Fk??eܚL 4P<Tỵ|ݑ=Wo_
+˷@**ȂJױںԉ&z[endstream
endobj
-6253 0 obj <<
+6646 0 obj <<
/Type /Page
-/Contents 6254 0 R
-/Resources 6252 0 R
+/Contents 6647 0 R
+/Resources 6645 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6227 0 R
+/Parent 6621 0 R
>> endobj
-6255 0 obj <<
-/D [6253 0 R /XYZ 85.039 781.388 null]
+6648 0 obj <<
+/D [6646 0 R /XYZ 85.039 781.388 null]
>> endobj
-2338 0 obj <<
-/D [6253 0 R /XYZ 85.039 420.88 null]
+2370 0 obj <<
+/D [6646 0 R /XYZ 85.039 761.463 null]
>> endobj
-6256 0 obj <<
-/D [6253 0 R /XYZ 85.039 402.614 null]
+6649 0 obj <<
+/D [6646 0 R /XYZ 85.039 736.911 null]
>> endobj
-2342 0 obj <<
-/D [6253 0 R /XYZ 85.039 222.638 null]
+6650 0 obj <<
+/D [6646 0 R /XYZ 85.039 559.639 null]
>> endobj
-6257 0 obj <<
-/D [6253 0 R /XYZ 85.039 203.766 null]
+6651 0 obj <<
+/D [6646 0 R /XYZ 286.152 565.612 null]
>> endobj
-6252 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F11 2898 0 R /F20 2865 0 R /F56 2890 0 R /F35 2880 0 R /F14 2895 0 R >>
+6652 0 obj <<
+/D [6646 0 R /XYZ 85.039 454.3 null]
+>> endobj
+6653 0 obj <<
+/D [6646 0 R /XYZ 310.417 460.274 null]
+>> endobj
+6645 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F38 3001 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6260 0 obj <<
-/Length 1739
+6656 0 obj <<
+/Length 2805
/Filter /FlateDecode
>>
stream
-xڥXmo:ί@åRɒ&I--LvueV⤔qb;ĐlմN1_kk~3\7|jx +?]n.:wМ-.[a6z<>pN;^=FNgɧ4>'z1Aٓ|u5û?/l_'p _ی`_-] Fnߴ1mefɿ|3twAN{#89tϻnםr|?dhXȃ
-Wk̒x7Ŋ4s?&[OED)oJvi<>J8~PDQ^zCQ#XL,  ,4] N)Q]1Xcԯ֛44c/F,p_
-A1JlHmb$# H4NZ
-
-[-3#JThX ϟf<Ebqh;F8+}g5[[C [ȸ#a_(طÉzZbesUqNSW\$ XX,lx_̄_7A<<>_߽5"c](ACѝ#.GƓ ӓhrK{~2VЉqĄ%EL7':7e ;#tHB 40\ݩAU*Cg тBAu38(\Jw!@)MΊ!m\m jy(6™0^v
-r f/$LJx42Jj7 'gWE=5a؂@v *I:U*x9/iبk [Gʄ媼d2j241fPB0Ro iѝVU8PC&xݫn/g+,H[#4APu<5K9RZ92*)C"ׄ!*/UD}\u(wRҲZWF?=Tej]B&U5
-im0nb \Zg6ͅykOս|zabf[@kK֩Tؔ.T#"13y)J,3!R+&S**ܬJs"EthoMRJ=@Ǒm\Rb k$`0ء#Vx
-gMSʩM[#Qg5բ
+xڥYs6_I^! R"n.RwhgTI(/D9
+}_ۙ$>09(T2.glE\xΫ؍bul ?0P乑Q<pr Q0u^$Oh;9G9r4Q8;mNtMފ]vd~:֖ћLxj^;H.CB١Hde2mM2wNh)CNWB$`XR4Sٌ^H ,?Pt)
+gGy̽K:2þ*/<9cnst&lGdwhˆg{ (^!a}lxf8l*5}frٿ;~ͣDWL<}#y ;h*ޡ]9p
+ͱƐ<KwY8Ŵ\1iNG,aS2v2;7FSlB_SU╇Q:~+ӹCq&!X 36 eqyavøiX; rQ!feK54CWkhn t AۋDhӀ$hEOYJcf9.a͇vL]/Iڂjx@RB)I+LXk-A[t-*(U :']6go/\8 9vj {r| FyʶI2qԗܬv6o֑`eԚlorc @;
+ qUSO/ػ:; ~S$PCT{#eHNؠ@
+/+ 2H$ͩ[bEneV(P
+N=Q(6b%T*wֈdpy\ I9֬=~%QZ^`ТG,9)MRrqE
+ l
+)Nr!n<1G%SVgI!B
+>: z8Lꔛǂ."Ta+zq$ O\SoȎ$U*pQsC{}τ<Sǎ$ ؝U
+ 33MuWqG(8MAzUТ `BυK3I$ap?qm+,[XJ@Nr_\ݨ`@Z4q#?4||H:]-.骎#O'3M+]>aQ`xE_#G4ȇe#HiɓEt^#C_.Яo>ߑ< Ydvz<7mJ89˚Y}w˅j~0o T< nw.;Q }y#jZ竵!~dK$wuTO.Cq唍8`϶F7I8x-yנ- )"ީٺiՙ*&U3HgYtveҀycM:+t98Fo!4VB"-oIU
+SV58J@h5=KObMiUr"MdS5Pw߉nkFil29+_Tˬğ6q[lm.71/'Ўց,ELpc (j)?q1endstream
endobj
-6259 0 obj <<
+6655 0 obj <<
/Type /Page
-/Contents 6260 0 R
-/Resources 6258 0 R
+/Contents 6656 0 R
+/Resources 6654 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6262 0 R
+/Parent 6660 0 R
>> endobj
-6261 0 obj <<
-/D [6259 0 R /XYZ 85.039 781.388 null]
+6657 0 obj <<
+/D [6655 0 R /XYZ 85.039 781.388 null]
>> endobj
-6258 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
+2374 0 obj <<
+/D [6655 0 R /XYZ 85.039 597.02 null]
+>> endobj
+6658 0 obj <<
+/D [6655 0 R /XYZ 85.039 565.205 null]
+>> endobj
+2378 0 obj <<
+/D [6655 0 R /XYZ 85.039 358.13 null]
+>> endobj
+6659 0 obj <<
+/D [6655 0 R /XYZ 85.039 325.708 null]
+>> endobj
+6654 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F62 4052 0 R /F41 2998 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6265 0 obj <<
-/Length 2568
-/Filter /FlateDecode
->>
-stream
-xڥkoF|&|rK:R(@I+TINk13^9ŁŮ⸷X_8Xy
-m' pjvq﹎8Io"w݇lt(,/(d6zwa?Vl<yO?غdԳ{D}}`h:x51b4o~P?/~- \8J3&Io}|%_-^{ Il'NzqPA=XW;mS:)7<Pۛۻ1mмՓx@Kpv#᜗4'uR/y몬hEXV,RwJ
-O3OyUߌ'n>_틫|oExقDznˬz̊rMBsgGL哀[OfSkӁ{ ^EfE-`YWV1L2Q)k
-;QBbOH 3:C>FJgSL!1I'/!{_e&bNΞio[YٞHlESy_tD'QWYJCo)tk+26:͑6ϏtOgI@V<\BXuxk Gzrm*qFi&YgEފɞ<כͽbqhCf@ؤ(.qO "M˗c*ӭ YI l}>?$]ˋl/R$-uy FخuAmh
-x8ևOkMg؍~O K= v5<#`)k zը]Z
-R6S3eƳx =s=jL~
-_dt6>~`nJ>w]lq }%:}jb/D`eW{
-2ǰn2,JҺp7U/Bp30
-A&_Bt_щ)A7?jS?j֏ -K
-&o"[
-7斻s;rKS,K]D tzE!~1|BhRCMB.d>|jhRֽ@v.o'_ɏ{ s_R#KF:.r\|Hɰ3m0#"A_3+>x؀:\\(FG4l(OkR9oh+xIqO㒋D31ɉ?37xy`.aZya&@ƶ>,mu=S/O{&@&17?8 jF_ӌ*l$w51/0qqҖ
-|j?0cZ-4_M̌@΍L?&{i㸗ȽZҮZĆeW![slr.?%ҟK:, LF>ĻnJ:g]h7 jKs[.i Kfw1 U;*q
-M8C1!?Fx˳1H|YR(11,r񐱩L0٬wSjAvƥ\ʦǶjO9DKch!rXa!i
--k5kGtAX۞o> .'{fb?wp$~lj#~MY77u\*/<hMy0S/|jIf﮸%
-)_
+6663 0 obj <<
+/Length 1642
+/Filter /FlateDecode
+>>
+stream
+xڥXmo:ί@åRB
+LӕhK;v[[m2k׎_B I;M[>ysl{Mqa?0h\/ O.>6b~s}m_}=Og ړ||{浟Fg=Loe}Lκz1g/kIfxn04P
+5p :%lGKxŅ 0lω8Vqe';u
+zS]KsSWu P8v'VGjs1NEdg,
+D0zhl'f֖m2X)]F.h F̊PQ
+ [q(lUlI : 3; |<;pFz4xaNfaIGPqjk8fB؁ӌgY(hGefD`$6
+h=KF,ICӐb
+)q8v|Fǹ} oѥADs<9kGF犒299&- 1nV[>E[Q.s3h-V),L:oΠ%`Uj^yp 7\" ws3gPpS~$S?r+NPH^X-nsvL!U37 X
+[Lu}e*q@,lVaff,~P|֩uésJLjy.\$VeW\'
+}O]?in%jw\zWAt=E,l+endstream
endobj
-6264 0 obj <<
+6662 0 obj <<
/Type /Page
-/Contents 6265 0 R
-/Resources 6263 0 R
+/Contents 6663 0 R
+/Resources 6661 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6262 0 R
+/Parent 6660 0 R
>> endobj
-6266 0 obj <<
-/D [6264 0 R /XYZ 85.039 781.388 null]
+6664 0 obj <<
+/D [6662 0 R /XYZ 85.039 781.388 null]
>> endobj
-2346 0 obj <<
-/D [6264 0 R /XYZ 85.039 491.353 null]
+6661 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6267 0 obj <<
-/D [6264 0 R /XYZ 85.039 470.36 null]
+6667 0 obj <<
+/Length 2464
+/Filter /FlateDecode
+>>
+stream
+xڥkoF~S$ 'vMqXI+dHnkI"}=ٙy,NNvdŮdsp&KA^]\&c'N2Y:>dz}˛(buvZo拷~ԋ{,n{u~mVx~zꗋU+s+ ȗ.~ÙlA_.OۅHl/-+ &L5dЏ0 
+;t2Џ 7wonWӼEy\gWa_Mɗ.
+p]^`atk^u(K:~ U:գx)Fy-ԛTeoR0IE>xؙeQ3U*
+<+6*鐏
+WϘwFT 0ʉJ] ݱQ!Tk0otT*˾1R]w9*RnTcUue(mdP3i'Y6&;nD
+=Pws;Y (sF~|g'7-!Wn|re] ߎ`"7j^<c?A'@1z1Ezu Z& N f){8pxlܽ% PwHKy[ԂpaBܭ"=0˱f*MֱIò*$MsXK?r)Cx>hz%%IK8l̑{&ܸz
+͉@5Ӫ@BY`̹P3H^ܢ@UjY漭l{ }f
+w#>b~i8")0k,.%ХWh{E$D8^cr-ׁ ILiu fA̺2胘_1l1/Km1V5? j\p0i3'L!A U1^G\7 FׁUVNm:q+3AtلCAspo3Mt-@LJ:C*
+
+)cw|"\R'yzdHAf23B8DE!v=Xm')ƒ
+xNlRV.q;4]1ơ+YJJ╫. y%ྡ hncECɺ˃G|wq+ϓ##7Ti/PYF'&Oہʩ,AI"!)kTHܑlE.=StkVSՊp5 0iݴN1 泈@pMr)yިy{o[
+endobj
+6666 0 obj <<
+/Type /Page
+/Contents 6667 0 R
+/Resources 6665 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6660 0 R
>> endobj
-2350 0 obj <<
-/D [6264 0 R /XYZ 85.039 386.44 null]
+6668 0 obj <<
+/D [6666 0 R /XYZ 85.039 781.388 null]
>> endobj
-6268 0 obj <<
-/D [6264 0 R /XYZ 85.039 364.031 null]
+2382 0 obj <<
+/D [6666 0 R /XYZ 85.039 559.099 null]
>> endobj
-2354 0 obj <<
-/D [6264 0 R /XYZ 85.039 240.576 null]
+6669 0 obj <<
+/D [6666 0 R /XYZ 85.039 524.557 null]
>> endobj
-6269 0 obj <<
-/D [6264 0 R /XYZ 85.039 219.38 null]
+2386 0 obj <<
+/D [6666 0 R /XYZ 85.039 438.819 null]
>> endobj
-6263 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R >>
+6670 0 obj <<
+/D [6666 0 R /XYZ 85.039 404.679 null]
+>> endobj
+2390 0 obj <<
+/D [6666 0 R /XYZ 85.039 267.675 null]
+>> endobj
+6671 0 obj <<
+/D [6666 0 R /XYZ 85.039 232.929 null]
+>> endobj
+6665 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6272 0 obj <<
-/Length 2425
+6674 0 obj <<
+/Length 2190
/Filter /FlateDecode
>>
stream
-xY[s~ׯ`RpFMGeG%9S=yHHn @r3mI=8D$FdQ8;pd3l'q}McN<ҒgOә뺖, #b~aȵgx.]Nud])_Uuu|xyg{_cq4yc8ھJ??:; a9D14:p<|[z]-wΟ
-+5ޒ֏i=l,uNfTF|*SDγWڊ_:AY!\J}d 5 e5 OWf=R6?0Zqi szAi6 PN
-2mMV݇YÈ| :ERD{A6Y
-^!95#"뾮yVQ<ũo dxҦ˫e|E*HSv 깣bRgc#9A`Q
-
-w=uQ rRthOTkկuͼFh!71p::Mrn-*$A2hIlLVTطSh$%!0Fߒܹ_MC˧EvEZ T
-`y vE!Q茮rFz zЋb5ݝT%%d󛺮6ѷk+orU7&ͧ r`ɫތZ
-
-.IEH]XA*,5U.e/~؁z
-iQ@:,3ۥuШT؋(17!0qy.{Mꮤ4~ !kYpjNa`RuM
-2}u6)Pm'8w1qmuMQ1pBb#p=|][&<1jw\Q%.~qWú^1,ǾL=S< 1{FuB,90ˉqWGwH:1+wUľǬ^:k^?Ӹb..]rT14.@#&i::)zKԮ^ fk^wdWhRCgPZn7u%4VfXXHEzʙ)TXԦʏĞ`@wٺࢬlT噒ך"LRu cW9% T1r9mݵ;FB2c7V 9/.0'LKA1}Z%a@덤 '0gl
+xڥkodEU(r^vc4b+=\IP/KN"KEZ,'g;2Ze.YaB0ĚA=6<);rʓ7端or}{к|^ *3zO/+7x7Z4_7/Bwg~Y8 -`;_
+^OA,OQiҢ&!`<Vk7ʪJȭpMNjp~8n+r OH*À4i7 ~*/Aꚶ'O;fsH`av@اUHP8XiX*,`͉4Z%j!0KӤix|~-Ȭh??@>J3 OFN(@;~Io=auwFQ-IXEF-E 9/Z|J>i ma7/ݽۋɐ`uf""x=>#il^z]Pd4-zrj]y:HǪ9vEv:sķCc&zmv-9B+"rc:!َ>r`kotXJaRu(
+Y0  R,K`^/] .s "Pyè~n1TeN'^ZpW;9>*DmIvt̊~j4?d `jR qqdH4ڞ my _ɏV4Ȕ pQs
+z#a:C8ʀ )f,!4؞NЃi jVα!{q&,9WOS0 /(#ۜ d`fSA5|2hbL\$p=K7ڨEWz[ڭw=3GJ;F#pČH-)<.8j&ՈOla0th9dX3-Y(fQ'F==Cr1P.qB[88J*8p$ zAnd_Cr'O'DyΛIhC |>IyB # Y
+k ;(N[Gqn,b[):c\fk0h̼) {D5Ř)Lqeӯ\M* zXeү;4QT\=gj^`G1лV@ڈz?mgN]| aA>M`kA1u;Ks`f[(Wr -
+ZNnBGT㴯9>3oF}=|̌9!@{Bt0]\ɝ?FACW9ϰMxh\qw\q{OIw9_>%n1Q)97{-q/:cPr|W-<YOq0E'^pnh@/&41S-T&MT!61cF*_CfSy#DZVǃ2uX~mzzv's֣C9o<׵]axAQe5,1_@fxendstream
endobj
-6271 0 obj <<
+6673 0 obj <<
/Type /Page
-/Contents 6272 0 R
-/Resources 6270 0 R
+/Contents 6674 0 R
+/Resources 6672 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6262 0 R
+/Parent 6660 0 R
+/Annots [ 6676 0 R 6677 0 R ]
>> endobj
-6273 0 obj <<
-/D [6271 0 R /XYZ 85.039 781.388 null]
+6676 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [392.693 682.027 539.579 693.717]
+/Subtype /Link
+/A << /S /GoTo /D (NetworkBrowsing) >>
>> endobj
-2358 0 obj <<
-/D [6271 0 R /XYZ 85.039 676.879 null]
+6677 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [84.043 668.478 100.581 679.878]
+/Subtype /Link
+/A << /S /GoTo /D (NetworkBrowsing) >>
>> endobj
-6274 0 obj <<
-/D [6271 0 R /XYZ 85.039 648.143 null]
+6675 0 obj <<
+/D [6673 0 R /XYZ 85.039 781.388 null]
>> endobj
-2362 0 obj <<
-/D [6271 0 R /XYZ 85.039 590.109 null]
+2394 0 obj <<
+/D [6673 0 R /XYZ 85.039 653.035 null]
>> endobj
-6275 0 obj <<
-/D [6271 0 R /XYZ 85.039 568.913 null]
+6678 0 obj <<
+/D [6673 0 R /XYZ 85.039 612.871 null]
>> endobj
-2366 0 obj <<
-/D [6271 0 R /XYZ 85.039 447.579 null]
+2398 0 obj <<
+/D [6673 0 R /XYZ 85.039 541.288 null]
>> endobj
-6276 0 obj <<
-/D [6271 0 R /XYZ 85.039 424.261 null]
+6679 0 obj <<
+/D [6673 0 R /XYZ 85.039 506.543 null]
>> endobj
-2370 0 obj <<
-/D [6271 0 R /XYZ 85.039 324.915 null]
+2402 0 obj <<
+/D [6673 0 R /XYZ 85.039 355.383 null]
>> endobj
-6277 0 obj <<
-/D [6271 0 R /XYZ 85.039 303.719 null]
+6680 0 obj <<
+/D [6673 0 R /XYZ 85.039 321.243 null]
>> endobj
-6270 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F14 2895 0 R >>
+2406 0 obj <<
+/D [6673 0 R /XYZ 85.039 140.602 null]
+>> endobj
+6681 0 obj <<
+/D [6673 0 R /XYZ 85.039 105.857 null]
+>> endobj
+6672 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6280 0 obj <<
-/Length 923
+6684 0 obj <<
+/Length 1472
/Filter /FlateDecode
>>
stream
-xڥVmO8_tڱ:@w!M
-k1BM2sp*DS-l@~UXyD;X= Q6Op\ s1 {l\CA;,- }<x 8+ ֭gEN5y2,+4
-Śuؔu~ڇC!5v=:#&_[@>e4T4XǐrBFFt(xYXzD
-؎P'!A"h ,ѰH4kd/:q'XX$EG*NA⬧|sPj@s=H3YuK 1(eSn/+~
+xڥWKs8 W(T,zvvvimb:9=(Rkj[YIi6~Xvn2H
+Z>Ŗ]J˓ў
+ ˀ+a+VYI@PܛchJ<-|"|OE~tR9и)!4B 4iB[<TWymY햴 5Kn!4QNI,r[ZnX)N_q-KR
+-
+س@{x^R-4{AY)jno*;>f/y jb\Bި;#K-G1b^'ëAD,"&0wIzJkbs q[ GKp%3[sSͿ~m&"MG>m
+*GA'uu
+?,d/c\@rV&5J0ڑwX`i0nWp᠛=o<qlQ3yS:15=7dM[9? .loNlC`w H R#L˻i!]D*j})
+ZhB?0?zendstream
endobj
-6279 0 obj <<
+6683 0 obj <<
/Type /Page
-/Contents 6280 0 R
-/Resources 6278 0 R
+/Contents 6684 0 R
+/Resources 6682 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6262 0 R
+/Parent 6660 0 R
>> endobj
-6281 0 obj <<
-/D [6279 0 R /XYZ 85.039 781.388 null]
+6685 0 obj <<
+/D [6683 0 R /XYZ 85.039 781.388 null]
>> endobj
-6278 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
+6682 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6284 0 obj <<
-/Length 3107
+6688 0 obj <<
+/Length 2548
/Filter /FlateDecode
>>
stream
-xڵZ[6~ϯʋX#-EM6-))ZBdi q﹑lyb
-f\iwY >0.0 !S$<u0M}+g!H2I%sDNDdDvUo[b#ukl:T 2˞%zm5[ݞH
-R02cGīf )}", hvf\mvpHq<V%thllZp<ؐ2A: (vI2Ď˧a4UkZVzb#M)/|<y CZl`]@{>C@*2 "7Gc = HTX[W5dϡ}Z砺=ByxkUtBSʙYq_W9:f_`jk$0+[5BX3IQ7<>;r?04+(X>
-0[dmM204tJA
-*ĭdnWl{HܚzК~"< sz_ <LeA?*l }i1u&#RcؑH |@e`ۤ@ ̃#ID֡E"ABWf;k.:6Ssfuf8=XM/pS)x"gW0ƗT˔v0щŋJ]a5݀\c]`/! {_PRMJ*n'$G:N=w)KaI {vm/ 5è l8Uik@}΋
-VFq"JrߣW/\2
-^
-)b.bx:w
-&Taq ѬqlNu1d*W?\+J:Xhi*i LAI+xccP8B<,U&CJ/^zV+ůe#뙃urimo98:1Ykz٘UcH=RT\:adAʕHJ8-X40)0k|"cja7WR׎37L*6tl6'%cAu .RȱD: J2];T\['
-d[nlJ[ 9@wNs*L^W?KKjIxv#RW>^}tBhqJR}}>ý9w~8ߢ|M loУE {>%Pu #lE7)Y!.#+̪"\RhRPdqr?qdAEV+YӶxB(m.ԗ:CRQ Ѕ
-,|͢ 4pDv+#4sLQO\:~k߹kO|w`aiøȗf<TGI1!z@DG״7Q,ǧ+ pCx$F45yzTlK&eZrxZ0f,IƂO,%8=i\}gЛQ2)ƅoD/|
-ROu[;ۀy), N
-o%ٕ>.ຐ]hbg3 dlzYӲ
+xڅk
+\uHPE$iRh6HN >΋lpfἇ6S< #]l\:7]wJ(LX wK02*Tjۧw~Mi7O/^4<O6O8 $_*;4(NGA
+H'P5q|
+D2 ~x6ݡ,ZJRT蚎@\Ur%bHh+<WED*۞;a/ݰGm㌘!>hj ?4-o65 }QySKWkt`T S,M#SqG᭧v-GW߼L/cl)=U5.f<,D0k:~.d_oJfT%|FsߒcA撩 8ENAxR]ާ)HRn%{2-PV<C.(P}TS0J-`J`*f`?^zdFܤ)Trʊ=J"$Z6 M _J}X*d2''&]Иs{ylVԓ
+PҸ8uG@av n|3?[Q:)װy $|+ѝ0ad:u<VTʻɍ `'ݮ/Ƥ*a,!Y9gt/5׶(cD)8WoW'k=Y{;cny௥gd1рv
+
+UfSw '^LSeRu?9-ZV7d JULO/$.iGET=/-c8ߴ4_4?լ"b3TqrX(y;GIm9lɜ
+s6= x]o?<[3q</Ϫy|>\4.zZL\z9K}[F%챘4XOG
endobj
-6283 0 obj <<
+6687 0 obj <<
/Type /Page
-/Contents 6284 0 R
-/Resources 6282 0 R
+/Contents 6688 0 R
+/Resources 6686 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6262 0 R
-/Annots [ 6288 0 R ]
+/Parent 6660 0 R
+/Annots [ 6691 0 R 6693 0 R ]
>> endobj
-6288 0 obj <<
+6691 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [425.738 282.402 509.276 294.091]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.unicode.org/)>>
+/Rect [246.134 503.717 355.794 515.406]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.openi18n.org/)>>
>> endobj
-6285 0 obj <<
-/D [6283 0 R /XYZ 85.039 781.388 null]
->> endobj
-2374 0 obj <<
-/D [6283 0 R /XYZ 85.039 761.463 null]
+6693 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [260.501 214.656 299.16 226.345]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.unicode.org/)>>
>> endobj
-3029 0 obj <<
-/D [6283 0 R /XYZ 85.039 665.896 null]
+6689 0 obj <<
+/D [6687 0 R /XYZ 85.039 781.388 null]
>> endobj
-2378 0 obj <<
-/D [6283 0 R /XYZ 85.039 665.896 null]
+2410 0 obj <<
+/D [6687 0 R /XYZ 85.039 761.463 null]
>> endobj
-6286 0 obj <<
-/D [6283 0 R /XYZ 85.039 642.326 null]
+3132 0 obj <<
+/D [6687 0 R /XYZ 85.039 652.347 null]
>> endobj
-2382 0 obj <<
-/D [6283 0 R /XYZ 85.039 488.273 null]
+2414 0 obj <<
+/D [6687 0 R /XYZ 85.039 652.347 null]
>> endobj
-6287 0 obj <<
-/D [6283 0 R /XYZ 85.039 461.659 null]
+6690 0 obj <<
+/D [6687 0 R /XYZ 85.039 615.228 null]
>> endobj
-2386 0 obj <<
-/D [6283 0 R /XYZ 85.039 174.236 null]
+2418 0 obj <<
+/D [6687 0 R /XYZ 85.039 447.626 null]
>> endobj
-6289 0 obj <<
-/D [6283 0 R /XYZ 85.039 145.5 null]
+6692 0 obj <<
+/D [6687 0 R /XYZ 85.039 407.462 null]
>> endobj
-6282 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R /F56 2890 0 R /F35 2880 0 R >>
+6686 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6292 0 obj <<
-/Length 2229
+6696 0 obj <<
+/Length 2774
/Filter /FlateDecode
>>
stream
-xYmo6_|XѢ(e|غnk7xw.p-jdɕ8o^(YM~i"pᐖC0Q0Pa8F~H =o}o(9p$5yfzad+,7#;BOW_5-t./崳 Wo_8BEpmG(VB{V
-yCc))Wm0x4hu{E5_#XemҾpϒ/YDEVj
-ܗp{>rk@г
-#Һydf0+NgQV:/F6LZ$foܙ';K&< C.L%'x\$Mh0 ;, XF(+a;&Q bF`DJW`j,vYRS6 ~'p(&|ꤪ7q 3Z7Cjb8Beݕh/8C4Ld]}ktpY`DcA*/R;1q/zFf͎A'[Guz 0f! ^ `M!)4_RknX9$XW)fu
-hx<|dhmJv؂`/t2`O
-VƣSl1U^܊ˤ)ԽȾfpt1p.?{GPRmVFFrg gEF.42׫PL*V/8T eXͦKLSE/v_&K% Cjnm*4@LqE*;ϔt«|X342=7e#2Vdv̟y4T +{iNM\
-fm) Ę(H57V|Hc(z8M:hO(о^;Jtp=za_1 [tyuJR{YkN[}}ukªzB..l_&["Kuߢ!u"Ǽ=y&fǸ,IP!\
+xڥZoF_!!Zq p\l\wh@KŚ"Ub]r)QtCp;ܙ̬"g.8JfQ,zwΞ`WRS,4¢au3Mf~@6:ן>|^|/R"b?of.%tfu?}uwuw[yl]B%cWHX][JWW5_P,d"/VD(NB"
+NsRH9izΕt&kK:лMJӐT21Dy>4̾zg^xFQ4h#\#:-y0>1/
+ximZ<
+m}hR]}\9*2"~B<ns6?=׮+}:GW5vȾjZQ^ڌVY8~cƍC?K~O_;iXYYDG4C[ݭ^,L=챚Ig_hQn<wiHē0řC ` ;
+|6bh p[qU`
+l2AT\)Q"sThxA]Ph
+Yۥ H/r,PQfMOkax8GA:k\ h&0o[-+b/9+LrM+zgӦP X[4v?It=Shʗnr|[Uڷ@%l>%Es\FGQCA9Eɇ&_rJ ϟ$2aSq&dz
+Z@)ʁF;
+}Zf~îCL=EV`Pq 4 1Ѵ[\g&;$)
+xB`^ ?"} b$r=̈́5ћ`-ׇ݂3ASQO#c2?,_[Ydl.a1Oo>Jf#~?Itn{s1te!$'ЗS{^]0p4 Ft
+I\-!^d-5@᎔v~<"mwib]?"/ߖ>[i (ojɏTl]qpg
+g(8PcjEO3n}Fr:9 YW{ 4*JN dX ?
endobj
-6291 0 obj <<
+6695 0 obj <<
/Type /Page
-/Contents 6292 0 R
-/Resources 6290 0 R
+/Contents 6696 0 R
+/Resources 6694 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6262 0 R
-/Annots [ 6296 0 R 6297 0 R ]
+/Parent 6704 0 R
+/Annots [ 6700 0 R 6702 0 R 6703 0 R ]
>> endobj
-6296 0 obj <<
+6700 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [361.406 338.821 512.306 351.723]
+/Rect [283.315 403.886 316.216 415.576]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://j3e.de/linux/convmv/)>>
+>> endobj
+6702 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [304.377 87.121 539.579 100.023]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html)>>
>> endobj
-6297 0 obj <<
+6703 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 325.575 308.034 337.567]
+/Rect [84.043 75.39 194.853 85.868]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html)>>
>> endobj
-6293 0 obj <<
-/D [6291 0 R /XYZ 85.039 781.388 null]
+6697 0 obj <<
+/D [6695 0 R /XYZ 85.039 781.388 null]
>> endobj
-2390 0 obj <<
-/D [6291 0 R /XYZ 85.039 691.296 null]
+2422 0 obj <<
+/D [6695 0 R /XYZ 85.039 761.463 null]
>> endobj
-6294 0 obj <<
-/D [6291 0 R /XYZ 85.039 664.681 null]
+6698 0 obj <<
+/D [6695 0 R /XYZ 85.039 739.701 null]
>> endobj
-2394 0 obj <<
-/D [6291 0 R /XYZ 85.039 550.67 null]
+2426 0 obj <<
+/D [6695 0 R /XYZ 85.039 528.463 null]
>> endobj
-6295 0 obj <<
-/D [6291 0 R /XYZ 85.039 521.872 null]
+6699 0 obj <<
+/D [6695 0 R /XYZ 85.039 488.299 null]
>> endobj
-6290 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F14 2895 0 R >>
+2430 0 obj <<
+/D [6695 0 R /XYZ 85.039 374.894 null]
+>> endobj
+6701 0 obj <<
+/D [6695 0 R /XYZ 85.039 331.941 null]
+>> endobj
+6694 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F41 2998 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6300 0 obj <<
-/Length 838
+6707 0 obj <<
+/Length 847
/Filter /FlateDecode
>>
stream
-xڵVn@+X2x~REj*Hf1!v1{aLdUeasYlF4,Ii:w,󐑠~8yi(k><<94 nijk<W'Ṣ($>`dUqPt<}Z$ vBT2A3M{e
-a2#_9#uouX ʲʦVEs%$xJ
-
-+]}J5`֕HuXG HªԚ2 : n$8=nedBzL? h{Y8Ӌ-S^mlzkb%+0}Yaj:yd !lyxhvy{ m~>vhѺ}^ܖBLyI0~1!ѪZYQ)UϐIj=HY$`pОY=ƀ#L;gk}k tT=Qk{VɶVFw# tKXNp(SfPSMpdF6^h:\dgƑ,B9Xj#=f9i҇UgObj;)[)Q8Gs`-{:8i}9^
-.Qm]Y]6 l]|رK_ɽ [m79pRװįYӴ>a^^ok"b~Te)2+R.Gنendstream
+xڥUo0~_NG6 < $m%͖4ݺJwߝ] .TgVrem<#1c\#wIc)x.x1\7۫T)ŒOYfُ/g_ߟO$;Jv zkvφCJ(cՇ旈2\6 g%rU:6")X;y׉H%שH#н9;km6J1׶H@3QKTG +u*癐x%ύ OJ&
+ (al^lNz~s$,YI(*ؽ+-K3E)IPۦY=}U`ܔ^K!ق*
+1ZnvD;RWw;4Ne
+\A 8' %)[Xgttc?/z 7KRq9 HM=?/Dnv;B=2rOJ$^pG<7ۖ$L
+ch]ވ
endobj
-6299 0 obj <<
+6706 0 obj <<
/Type /Page
-/Contents 6300 0 R
-/Resources 6298 0 R
+/Contents 6707 0 R
+/Resources 6705 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6304 0 R
+/Parent 6704 0 R
>> endobj
-6301 0 obj <<
-/D [6299 0 R /XYZ 85.039 781.388 null]
+6708 0 obj <<
+/D [6706 0 R /XYZ 85.039 781.388 null]
>> endobj
-2398 0 obj <<
-/D [6299 0 R /XYZ 85.039 761.463 null]
+2434 0 obj <<
+/D [6706 0 R /XYZ 85.039 761.463 null]
>> endobj
-3030 0 obj <<
-/D [6299 0 R /XYZ 85.039 667.044 null]
+6709 0 obj <<
+/D [6706 0 R /XYZ 85.039 739.701 null]
>> endobj
-2402 0 obj <<
-/D [6299 0 R /XYZ 85.039 667.044 null]
+2438 0 obj <<
+/D [6706 0 R /XYZ 85.039 739.701 null]
>> endobj
-6302 0 obj <<
-/D [6299 0 R /XYZ 85.039 642.326 null]
+6710 0 obj <<
+/D [6706 0 R /XYZ 85.039 705.159 null]
>> endobj
-2406 0 obj <<
-/D [6299 0 R /XYZ 85.039 582.512 null]
+6705 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6303 0 obj <<
-/D [6299 0 R /XYZ 85.039 556.503 null]
+6713 0 obj <<
+/Length 777
+/Filter /FlateDecode
+>>
+stream
+x}TM0Wp4Run=H==YP|4gI7Dy31hdeSiLT7,z˗ JK$XTP9GJ<<  FTF} FvCDkFǘ"NdǢ<L'sAlY%sԤ7(L%B*K\A)钸HqUN 'hר^wc\v#hEvm ]mUqXJXd*NмnWK#1~D!XSϖ˱󧱪EHo[ iX#ye:5^1k 5P"Gu{|j$&>_8B%zLd=}~m~kQ0|1)bzdl
+BŸB۸&.w̪B($ә#6
+*'ņK:;j%0zOܚ9ιBw(gZ8j۫9qӅ݆TnuRhRM|EHp uh;g ,|n?z0-b )>flp|R7|~Ew
+Ӏ}<{  =4eq[/-Hяu9?uHG^PlU)dÛ? SVɃ?&) =]_*q9 ۹Vs~wsi3h|P>"}O-k ɨZյ ?.d"Cji6r=?Lendstream
+endobj
+6712 0 obj <<
+/Type /Page
+/Contents 6713 0 R
+/Resources 6711 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6704 0 R
>> endobj
-6298 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+6714 0 obj <<
+/D [6712 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2442 0 obj <<
+/D [6712 0 R /XYZ 85.039 761.463 null]
+>> endobj
+3133 0 obj <<
+/D [6712 0 R /XYZ 85.039 653.495 null]
+>> endobj
+2446 0 obj <<
+/D [6712 0 R /XYZ 85.039 653.495 null]
+>> endobj
+6715 0 obj <<
+/D [6712 0 R /XYZ 85.039 615.228 null]
+>> endobj
+2450 0 obj <<
+/D [6712 0 R /XYZ 85.039 558.141 null]
+>> endobj
+6716 0 obj <<
+/D [6712 0 R /XYZ 85.039 515.856 null]
+>> endobj
+6711 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6307 0 obj <<
-/Length 387
+6719 0 obj <<
+/Length 393
/Filter /FlateDecode
>>
stream
-xڅSN0+|1N#H8mDIԺH=c'H2oY,Ok
-iqC.7>%QnNʴ~xendstream
+x}Rn0>\硽pz DT׋!Em;ޙم#L:YNhOچcGҒjB|NTv3rwT*<y F(LBeZ GI5O"4ߒ㯢&p'odmӑ%*\P*$j -37!L8d +o{$mu3s8r;*f W1We b'J@oW_>/:ٰR t؅h?n8u#($Oa]5!g#AİiX?1.`w 7NGta0pF_d15)ҊZZ\fyP(endstream
endobj
-6306 0 obj <<
+6718 0 obj <<
/Type /Page
-/Contents 6307 0 R
-/Resources 6305 0 R
+/Contents 6719 0 R
+/Resources 6717 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6304 0 R
+/Parent 6704 0 R
>> endobj
-6308 0 obj <<
-/D [6306 0 R /XYZ 85.039 781.388 null]
+6720 0 obj <<
+/D [6718 0 R /XYZ 85.039 781.388 null]
>> endobj
-2410 0 obj <<
-/D [6306 0 R /XYZ 85.039 761.463 null]
+2454 0 obj <<
+/D [6718 0 R /XYZ 85.039 761.463 null]
>> endobj
-3031 0 obj <<
-/D [6306 0 R /XYZ 85.039 667.044 null]
+3134 0 obj <<
+/D [6718 0 R /XYZ 85.039 653.495 null]
>> endobj
-2414 0 obj <<
-/D [6306 0 R /XYZ 85.039 667.044 null]
+2458 0 obj <<
+/D [6718 0 R /XYZ 85.039 653.495 null]
>> endobj
-6309 0 obj <<
-/D [6306 0 R /XYZ 85.039 642.326 null]
+6721 0 obj <<
+/D [6718 0 R /XYZ 85.039 615.228 null]
>> endobj
-6305 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+6717 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6312 0 obj <<
-/Length 228
+6724 0 obj <<
+/Length 243
/Filter /FlateDecode
>>
stream
-xmPN0 !&pV$@ !1P݊ r1*'GpTTfbVY!Ju@fI(uNOJJӳ~0z4d,o 'cQyw] sn2[8Y
-\endstream
+xuAK1 +rlIvҫ x,1ux/K@4#I^E^?:ɔWGʂ9%w(5rh^\u$ o{AsUg )|`e[
endobj
-6311 0 obj <<
+6723 0 obj <<
/Type /Page
-/Contents 6312 0 R
-/Resources 6310 0 R
+/Contents 6724 0 R
+/Resources 6722 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6304 0 R
+/Parent 6704 0 R
>> endobj
-6313 0 obj <<
-/D [6311 0 R /XYZ 85.039 781.388 null]
+6725 0 obj <<
+/D [6723 0 R /XYZ 85.039 781.388 null]
>> endobj
-2418 0 obj <<
-/D [6311 0 R /XYZ 85.039 542.44 null]
+2462 0 obj <<
+/D [6723 0 R /XYZ 85.039 542.44 null]
>> endobj
-6310 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+6722 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6316 0 obj <<
-/Length 1503
+6728 0 obj <<
+/Length 2227
/Filter /FlateDecode
>>
stream
-xXIo8W(5+nZtӤAۃ, jKQHYv8s||VO#ǧf̦IʙLiD%pGdZ)X,,RHHt&"Kz򝈦"bq, Ky]~ d™Q%.` ye g2NEliuoanIfí&~
-|&E,BI'c!;$=`.OX&\T VYz2
-ZjUyg,ԢG`G6Oʠه3v\"Ej^.*$I/f[Cu"&񰷐O!%6/VUM,y݆" 쵗wkb912kV)ᜋ+Z5F կYuG[%e`pP$hڎrC;*iφc[H@;EV>WЭHaj
-~Gh$c<A&Y,c:_iQ<D5Q?S_)r#
-cF5^M-jo]`qMgͮ[7$${08Xp! Y4̫cȗᵷ7[c#*o{܆G.Ֆ"'-Hi9ޔ㱢RЌ5hymoi .|ni];<Ȓ
-M
- pP8#FF3UQsCdU?uOm(C:hnX{H,F-nυ޸
-O;>E
-c*/D<>9|ȃ<'
-9
-u}.CN{ H^WUI~6ͬUYZE#ox]MKQ_R`~?O,I̝qcN1Lʶڙ4v6 J
+xڅYKsϯP퉮Z rgSNbMm9@"-sC.~
+LI<*7>wtFsg 8sX.4jm<U\i*I_4(cA)A Nq"U<:U%_|P';a2+W9uqI2I=Lă˪۱9a|aMh3B00pn.U{v]cӱk'-=Puv  %h{x|蜠R8^j:CȠ棧k3iFx1^YFǦ>'qx`pp><81SK }]8hcXW3l< l - fM Uq6b9f{b֚ί`z@sz ge %Ӏ;hi? 2Td^fXnٷ͈wî,xgM`{A8 Oz7yEϣxvV2&qfi{fAP0Uz^4X#,j%qF0}yaQ Vd͸[}jTAm20
+!sla82nen]?LXh{xi4\֘Y^i
+23f6`R#gyMSҁ]sUylx3n:Q05/LX:HMϸrn0~:"qaBs%WhP|}yTO-@:\Ŵ8&OvL
+*",Ȃ'۩^
+HŅwM؜DjF-aZf2z
+!+çI-\ a7ܿ:;)ʹ)b
+ws|ZtK9m 4e9N p!c3_gJŊ_hu4U운ٳg}y\IݠwGWr>wG^RwMXcMlOl W y`_xw5˿[_] k5+S8ڪO*)g>'X8`M
+|YXHη$[kœ=iOBzڀ[
endobj
-6315 0 obj <<
+6727 0 obj <<
/Type /Page
-/Contents 6316 0 R
-/Resources 6314 0 R
+/Contents 6728 0 R
+/Resources 6726 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6304 0 R
-/Annots [ 6320 0 R ]
+/Parent 6704 0 R
>> endobj
-6320 0 obj <<
+6729 0 obj <<
+/D [6727 0 R /XYZ 85.039 781.388 null]
+>> endobj
+6730 0 obj <<
+/D [6727 0 R /XYZ 85.039 761.463 null]
+>> endobj
+2466 0 obj <<
+/D [6727 0 R /XYZ 85.039 761.463 null]
+>> endobj
+3135 0 obj <<
+/D [6727 0 R /XYZ 85.039 632.606 null]
+>> endobj
+2470 0 obj <<
+/D [6727 0 R /XYZ 85.039 632.606 null]
+>> endobj
+6731 0 obj <<
+/D [6727 0 R /XYZ 85.039 590.321 null]
+>> endobj
+6732 0 obj <<
+/D [6727 0 R /XYZ 85.039 558.113 null]
+>> endobj
+6733 0 obj <<
+/D [6727 0 R /XYZ 85.039 516.859 null]
+>> endobj
+6734 0 obj <<
+/D [6727 0 R /XYZ 85.039 476.817 null]
+>> endobj
+6735 0 obj <<
+/D [6727 0 R /XYZ 85.039 422.621 null]
+>> endobj
+6736 0 obj <<
+/D [6727 0 R /XYZ 85.039 368.424 null]
+>> endobj
+6737 0 obj <<
+/D [6727 0 R /XYZ 85.039 300.678 null]
+>> endobj
+6738 0 obj <<
+/D [6727 0 R /XYZ 85.039 262.152 null]
+>> endobj
+6739 0 obj <<
+/D [6727 0 R /XYZ 85.039 219.383 null]
+>> endobj
+6740 0 obj <<
+/D [6727 0 R /XYZ 85.039 194.406 null]
+>> endobj
+6741 0 obj <<
+/D [6727 0 R /XYZ 85.039 164.58 null]
+>> endobj
+6742 0 obj <<
+/D [6727 0 R /XYZ 85.039 124.538 null]
+>> endobj
+6743 0 obj <<
+/D [6727 0 R /XYZ 85.039 97.44 null]
+>> endobj
+6726 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6746 0 obj <<
+/Length 1556
+/Filter /FlateDecode
+>>
+stream
+xڝY]6}o`UB}&i3fqg:ŬM
+x3HKХd2sUHdaiFͲl7887b[:< F9΃ݓ#i ~߽zҐbm4 H_{^?Dq}y'
+]Y`8F7$ FP4Fp2naKt##$F/іKkb
+{Я;\n2ɠGW>^tJHs$Z4F/YJ¦*
+9"=*반?rFJy_=iwQ}g.%&e|4NS3A66`Z[gGۧQWtvTeRU{^2/ȗ;X&l0w,furΝi:NB"8|Z9*`D2щMt)z9ȱs(HMph#B0˱ X<
+[Ӱhor|FRc#,Vԑm
+endobj
+6745 0 obj <<
+/Type /Page
+/Contents 6746 0 R
+/Resources 6744 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6751 0 R
+>> endobj
+6747 0 obj <<
+/D [6745 0 R /XYZ 85.039 781.388 null]
+>> endobj
+6748 0 obj <<
+/D [6745 0 R /XYZ 85.039 761.463 null]
+>> endobj
+2474 0 obj <<
+/D [6745 0 R /XYZ 85.039 701.856 null]
+>> endobj
+6749 0 obj <<
+/D [6745 0 R /XYZ 85.039 658.903 null]
+>> endobj
+2478 0 obj <<
+/D [6745 0 R /XYZ 85.039 603.053 null]
+>> endobj
+6750 0 obj <<
+/D [6745 0 R /XYZ 85.039 571.237 null]
+>> endobj
+6744 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6754 0 obj <<
+/Length 1358
+/Filter /FlateDecode
+>>
+stream
+xڥMs6<R D7Mfu$9"-q*Hٓ_
+O F^膑sv,R< *QuT/Ĉw|㦫i-B ?˔E&^N;cT`GyiIrQtdiU;BU U;utVX(͹SZnNҕ𪁷 AA4~((2LPlv'
+IzD!bda;,.Wk]lV!.\B>mi
+ GSG'@۱P)+`j~\Lt"B-Rע`ꀡI}Nr,Ymξ0֢`ҀIzNr<W
+/F-  MGw4 UPȷ#h 4A~7΍M |mx `EA0qtcL>n}Gi)JX\s
+endobj
+6753 0 obj <<
+/Type /Page
+/Contents 6754 0 R
+/Resources 6752 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6751 0 R
+>> endobj
+6755 0 obj <<
+/D [6753 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2482 0 obj <<
+/D [6753 0 R /XYZ 85.039 733.118 null]
+>> endobj
+6756 0 obj <<
+/D [6753 0 R /XYZ 85.039 700.697 null]
+>> endobj
+6752 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6759 0 obj <<
+/Length 1318
+/Filter /FlateDecode
+>>
+stream
+xڥKo8Z |{RM'q:](⨵-ǖ̿>$aK A(:%II
+0+ ENpwn&WzҜ/&<!LO9e%շ⏳/12</ү_$?|o]Oi}Wg|:#ٌwCblѦR6e;NV" F,oV"z3y9>J-A1"q8FnLPY2$1tQz;AΑpۑP}㸓o[9KSLhl4@^ Ȏ?帯"nkLӣrDQ˿를: d1d,M G2x5rJ
+z0/% h
+
+o", E1
+OދCqG=y]oEyCt=Ww@E
+WՖ& i A#$ vVzTj\MC0o/.Xjz!CP/q4gdi
+Mg1
+04G?DQEWJezS]}"'8՚!h͜ TaD}Xyn*&8"Jx31}AP?xendstream
+endobj
+6758 0 obj <<
+/Type /Page
+/Contents 6759 0 R
+/Resources 6757 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6751 0 R
+>> endobj
+6760 0 obj <<
+/D [6758 0 R /XYZ 85.039 781.388 null]
+>> endobj
+6757 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6763 0 obj <<
+/Length 1479
+/Filter /FlateDecode
+>>
+stream
+xڥK6V@<yud:3NU& mSMHe18:ҕf?dPiƈȲ`{\`WV(Fv4o6>$`469RkZ
+Juf >߾;}g᧏ۗۏ xYxO}viv-%4e~3sl)Wg Jˊg3Sq$2ae(}-]>&b ,ƹIJ$Gn1s1HLE0(KMH&y+AʑIבq"rK`~T̋' 9d. jF1'؎8gE S]~Kh %,e:HYs<9a =JZz͆gvWwm֩CuX hbhAL$+uy0^f)^|A3O]ǫ2lՐתa@")PV0E%1qpH<]? K^N۹Bx|Ab|Ɵ8;Wϭ=0.35ab hbhL+RW`2O[S-~ۜ@v8HbIh %tnE:>Z
+t
+J\7$ ,hbhYL,ǞE=IX_\j
+Xmp\Jg'"2NdgwXs R#AòVR/'IH@w|[wsN]N
+{
+F'g$^h;SG{wӶ}yLɌCuX5{`4_VAm:*3Z2B Ugu* *×ߎgDC n8sFuޛʡO*b`&F;E7C~T/cXآPy񵽣:b#ԩV0Ϻ$fIJ<hF1'Ԏ4mSn&wL 2 h17bhsOǶ25[oM*Vj8KgQݟ<W;wge2&؎fDCKm8%}ʆΪן57*ό㳻'5Ha#؝n%ƒ*˙*(iZ eqW.Ɍ Bш)"Oq|6s}l7[=L X8 J3wj5ø+VP՚En鵝5?i]rkdP,aanIꁍͣ|.a1L ֈ"qݩR­o;nw4YWPp Y(G;  G?b\dbfpK gC[WM+EFd&^7?X,endstream
+endobj
+6762 0 obj <<
+/Type /Page
+/Contents 6763 0 R
+/Resources 6761 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6751 0 R
+>> endobj
+6764 0 obj <<
+/D [6762 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2486 0 obj <<
+/D [6762 0 R /XYZ 85.039 407.937 null]
+>> endobj
+6765 0 obj <<
+/D [6762 0 R /XYZ 85.039 372.527 null]
+>> endobj
+6761 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+6768 0 obj <<
+/Length 3429
+/Filter /FlateDecode
+>>
+stream
+x[YsF~ׯVLćk_d+:YIV(IA+
+XJ
+l᯿B/^_`q\[ǃJ-xK|)YQmUs
+HL`g ߔx|<Cn]PXEű)nӌd_*K9Qv'딫$$K [KE9Nt Ee\ާjRฤxF-fRZ 9 snw\[L9*o½Gh >/JpG1{4yV3M;u44R5q["0[ыrxUu"uP[եJ}m[V9qT ls>~gcQ0)\3' ņ(2p
+? jq *:0D4H0 -BThALF@UfPbkN5̦M5B\VS-
+ BՂw<B*f~&+n?CiY1|rX>t|ʚz'~q|BGI~Y~:ʗobRBf& &C646v>93"iS
+|%*O ۆ /mNF2PCK;ܓImQzZKddM
+htr$OKZg7FS(م }<MK!矾p,v[@A-TeMlݟ8iz
+*{t]pƉURkɔ;'RZ͹P~e˗:J3![-,yɵC<taq%K$ d0pCZXaxWBӓ4r<rKa*cwC;]7(i ~oe\Kg
+In);{T6qs81S_6ebU6 O,>}ݣ zlΝoP%б?EZhѫشFl؀ձm/Nǒu΢tm
+l(
+f/4Nu_]X!\AcZR'6y#0nzd? *n mDMHոRѱ_iko:{Ĝ4d <9np:}{"Q˱эcC1-c0>>,Yk`0A#ggPM1M#pt<0*096 #&ZIqt-,$q)`8ք'&~Êmf/ _ilp{^>
+endobj
+6767 0 obj <<
+/Type /Page
+/Contents 6768 0 R
+/Resources 6766 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6751 0 R
+/Annots [ 6778 0 R ]
+>> endobj
+6778 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [111.316 573.654 192.49 585.344]
+/Rect [440.111 139.828 522.084 151.517]
/Subtype /Link
/A << /S /GoTo /D (unicode) >>
>> endobj
-6317 0 obj <<
-/D [6315 0 R /XYZ 85.039 781.388 null]
+6769 0 obj <<
+/D [6767 0 R /XYZ 85.039 781.388 null]
>> endobj
-6318 0 obj <<
-/D [6315 0 R /XYZ 85.039 761.463 null]
+2490 0 obj <<
+/D [6767 0 R /XYZ 85.039 761.463 null]
>> endobj
-2422 0 obj <<
-/D [6315 0 R /XYZ 85.039 761.463 null]
+6770 0 obj <<
+/D [6767 0 R /XYZ 85.039 736.911 null]
>> endobj
-3032 0 obj <<
-/D [6315 0 R /XYZ 85.039 646.155 null]
+2494 0 obj <<
+/D [6767 0 R /XYZ 85.039 736.911 null]
>> endobj
-2426 0 obj <<
-/D [6315 0 R /XYZ 85.039 646.155 null]
+6771 0 obj <<
+/D [6767 0 R /XYZ 85.039 705.159 null]
>> endobj
-6319 0 obj <<
-/D [6315 0 R /XYZ 85.039 617.419 null]
+6772 0 obj <<
+/D [6767 0 R /XYZ 85.039 620.547 null]
>> endobj
-2430 0 obj <<
-/D [6315 0 R /XYZ 85.039 558.211 null]
+6773 0 obj <<
+/D [6767 0 R /XYZ 289.364 626.52 null]
>> endobj
-6321 0 obj <<
-/D [6315 0 R /XYZ 85.039 528.807 null]
+2498 0 obj <<
+/D [6767 0 R /XYZ 85.039 444.95 null]
>> endobj
-2434 0 obj <<
-/D [6315 0 R /XYZ 85.039 388.105 null]
+6774 0 obj <<
+/D [6767 0 R /XYZ 85.039 410.204 null]
>> endobj
-6322 0 obj <<
-/D [6315 0 R /XYZ 85.039 361.49 null]
+6775 0 obj <<
+/D [6767 0 R /XYZ 85.039 368.892 null]
>> endobj
-6314 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R >>
+6776 0 obj <<
+/D [6767 0 R /XYZ 85.039 301.146 null]
+>> endobj
+2502 0 obj <<
+/D [6767 0 R /XYZ 85.039 216.014 null]
+>> endobj
+6777 0 obj <<
+/D [6767 0 R /XYZ 85.039 183.593 null]
+>> endobj
+6766 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6325 0 obj <<
-/Length 2578
+6781 0 obj <<
+/Length 2641
/Filter /FlateDecode
>>
stream
-xZIFWm( bȪ"E%cÃH aCI($՝y[q@W۾^M
-i?2&nv+?0K4j᫅+/Tp?jG=y,]^Wco7^SqOv`K>3ms_޿C7] LĉR='atf9d[8+6k
-(y|B(u{DOd~BMWV
-FȜ[T6i-.z3K턦(xib]d*uhp 6#od=I0 m&"&D vCGޡ@s@W& YX
-J\
-g^(lYecqC/
-eLVo{>SYh T#t8A8da~~O0h?HeR|
-HmG3D6Y ]4-myu6/&fc)݇GĊwOW8s`A
-Z{MVqh@X"80#m]$ר0i|vJAr>K9CV6!Mϻ`w`|(.1FPYpamR±ػO
-K'1mN 8 ukASA L*^,Gը!Ÿ юMTLY(Hs[40qlb4K-0
-&D*i:8/8̕Q~Nn2J$: dxXYe1?>|}f\"ca 6i"CL|HPoyhS@Ä gs:/<_MD?w]1$e=TGFSA[8M
-=ߎ/h29<FDIF/G%eB>Op
-rT2Ekjjގ^iv j{C|njmu\i['fS>K{Z_)f!P'9Jub?&S>L>G|%N>(7%^8e=6h&"
-4Gn@?1{ vvu9XjQTc<4%"fqz_F'}܈endstream
+xڥYܶ~"-EQUQ8lש; "{F+m΋M,Eyfg>gH&%Kr9w7VhXbB(i_~:{،|"Ff{Oo>jH˧}{;^zy,?@j"PهۅQ<pas
+tƢ>͍
+',Wlnq6j˷w[[uEuE]]R{UXx[8 LZ⩌6U֟x!GĬzm>+ᔭw2)ZMmLJ<9C6Ox^ְ8[oi;kN{D%}#%mt( E8II&4&I$fRôez~ց2:88 #G3(gx{4٦}B 0l
+4nixw?3όh
+B#T$ejMe0@"jCRxQyZqᣫBլ?^ D(0d0׶
+EȜK\HYl7}+U (~ջSAbd4.&(j̊i $f@6 @B֋{g!1{x*ʒGk!Ahc2 8vY"˻>+/ױA`'')W㠳F24y&̸i& tRNB[?e _<:L0}%[m!^<*$1e)5;P;i+"7[qfZJ;<3®m""D3Ibty +Mn-N7jմ< IO uV(Vq̴Es}r XQ{R< =] :/ Ђ_e\|e2DZ/i#LUj_iD0xRjO_=B\IQE]M{N#en0)HځW L
+|Q@Fw8{^\k{͏䢖q'^u!1q)G[GK a
+c^Ǚ
+Qp< ~-V~RQ/&pK5RR ҠN`OTs$fh(k<TGs]( a$>$asa2!mBs1N!A$`|77>?~$p*Hs1!5oE;ih9v`wTukٸ:|Am&ۋ+J+
+)^2T
+{p'[.#|3\68&D+c1D90oN1~;)hW<X+FχKGc
+%Cd7t (vf©PG3x,$dP:zg*yb!@'N4cQ 9%bԆ^U?`L /CUIdX[+2ȓH\ o߹ ;1@Yu3y*-}Us#`bC51@c9Sr;s;/ŋCҷ'cpnI ,47Gp-#˕v$m|q#;9ޜ_[s/
+T 9Ũ0~
endobj
-6324 0 obj <<
+6780 0 obj <<
/Type /Page
-/Contents 6325 0 R
-/Resources 6323 0 R
+/Contents 6781 0 R
+/Resources 6779 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6304 0 R
+/Parent 6751 0 R
+/Annots [ 6786 0 R 6788 0 R ]
>> endobj
-6326 0 obj <<
-/D [6324 0 R /XYZ 85.039 781.388 null]
+6786 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [131.073 531.126 368.701 542.815]
+/Subtype /Link
+/A << /S /GoTo /D (passdb) >>
>> endobj
-2438 0 obj <<
-/D [6324 0 R /XYZ 85.039 761.463 null]
+6788 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[1 0 0]
+/Rect [440.111 372.925 522.084 384.614]
+/Subtype /Link
+/A << /S /GoTo /D (unicode) >>
>> endobj
-3033 0 obj <<
-/D [6324 0 R /XYZ 85.039 646.155 null]
+6782 0 obj <<
+/D [6780 0 R /XYZ 85.039 781.388 null]
>> endobj
-2442 0 obj <<
-/D [6324 0 R /XYZ 85.039 602.617 null]
+2506 0 obj <<
+/D [6780 0 R /XYZ 85.039 761.463 null]
>> endobj
-6327 0 obj <<
-/D [6324 0 R /XYZ 85.039 571.092 null]
+6783 0 obj <<
+/D [6780 0 R /XYZ 85.039 743.459 null]
>> endobj
-2446 0 obj <<
-/D [6324 0 R /XYZ 85.039 461.651 null]
+6784 0 obj <<
+/D [6780 0 R /XYZ 85.039 699.822 null]
>> endobj
-6328 0 obj <<
-/D [6324 0 R /XYZ 85.039 440.454 null]
+6785 0 obj <<
+/D [6780 0 R /XYZ 85.039 632.076 null]
>> endobj
-6323 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F66 3242 0 R >>
+2510 0 obj <<
+/D [6780 0 R /XYZ 85.039 448.505 null]
+>> endobj
+6787 0 obj <<
+/D [6780 0 R /XYZ 85.039 416.69 null]
+>> endobj
+2514 0 obj <<
+/D [6780 0 R /XYZ 85.039 347.228 null]
+>> endobj
+6789 0 obj <<
+/D [6780 0 R /XYZ 85.039 312.685 null]
+>> endobj
+2518 0 obj <<
+/D [6780 0 R /XYZ 85.039 267.595 null]
+>> endobj
+6790 0 obj <<
+/D [6780 0 R /XYZ 85.039 236.178 null]
+>> endobj
+6779 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6331 0 obj <<
-/Length 3456
-/Filter /FlateDecode
->>
-stream
-xZY6~_GbxyYoybgRyH
-cNxR7|Z|߷|^8Oķ}~ZzrZ|>=>]L<HU`by"Ʊ4Y<ócinз_  5UyIV96Ws\i~ˣ^b-@#֡mKLx:~LB
-{^E4[&nWS,i>ER'1y{b% \V7C'%[W ,%<3 4ܽN`Nk'n3m!7]ߏg4\Dk:7R~xۣfz>![lh%KC;ežDZ͢;=VsDqciei=4=]:~W}6ug/X Qd[x-~6,ٶ WNn#<љճZԌ<$9q{6uSvQ9AK]|^?3XǯLN%+:B$^U6:P}*M=5w`EgbqC14fG6mq
-RFotX5 ~qo thpG
-q4Wl4BB3#^T1a
-Ke4w|_:Kx4L./EO4Q>h05ڪMߴQtiv3Ȼ?~/H k< bu`()wkHk Gջ{i+e|əq_uT 6*FNai~G/c"5D$>2#<xp`ܟj$֐!s)`&5j763?K͇[Ȼ஦d@6e ʸAңD7
-|6p:|
-(SPvZx6^v=E;Q @Gj^󋱷 @CTsq׬h%ĩav&cAϧСI_U^n4=͚,Kz&2$(2J [wд(xel*dEie 9zߑ=;*flU`&):KQ
-~LK_jFLWa:3}P>ބB 0*np`Wnn/:}2#q#8Nfxx,#DwaL{HXFX#Ȑp@s[ nQ0(kvl>5kkާKDx!@tBkxW|.ob&L\N5m$icƨb$(uHE.;g2迥HŴ
-s]D@7M%Kiā+])n .=\ 3guHH\ՆwtL7Zw<#y$Y[1CDG$\.ǨLj;Xy5Ǣ_[ 4GWp-p@vը ӫ6}.cAu^!+mȕvȓ0}aRr1=׉C= `0x[8{{L~ݏoa8|PV\;0QI\n&Fj!P!|y#g}1t)#^Kb22KJ}M;x:>;6BL: %PLp3YA<6PUrP@5p3p\NڪP<pW3|(e)2^L@•Rom+1OM:szx` 沶o*]RD[,Ou ICjDN^ُ j
-!EU;W}ɥh#:X-W^Yu=ԷIa0pN~+L%bTu|*MHfbWGtZj1a{a/щ
-ayF{L,9n/%JmGǍ/ɗq!rGI2G73@Rr?>d [#G_; Yo'4mOӟ %4#?|fB'G X[{V("˽NDtORC'"~}k"H x[kh
-c* J2YsR#g\сTlv]) GdC.c
-k*
-F%}ڸ^tfw!C+"gT/EȺǷD4RhfK){^k%ͱ "L\*Cc\C7>cM.u 9So'W}<endstream
+6793 0 obj <<
+/Length 2676
+/Filter /FlateDecode
+>>
+stream
+xڥko/j|qg Z%6#rEQt
+"_}(2"y:_S~r :(P9{B?+>37ìxRr g -|L
+
+;čuAJ/6Y ê>ݷEC;BAj@=Wi澫l |LhH@-4؅dC {g}njﲶe{ *|ʖ((
+!$A?(;
+oF̜WwO3,ޫAP9@JE:Hh,s)݆GͦhR6OLFyf[=xh ۾zlT}6GL="xA{5!'㼱 c&:"EΪw (Cmx.Ք@)8 &M06`b4]WAɶJ|B}ͷzVJsU7D9'mۅ %A&,a5z>$7n=9c_Q-Ɓn$=(GuX8T9gd$h~F8tkþȫ4 @U%l{~,3eaOd=Uu0Do:?dQe>?a42EVc6 L438j96Ec:<Ze`(XzD:^h=3^Qt
+>pN
+'‚95{A{ CAۦx0_y}^֎eƒ"}CMYaՁ~YovnȖfS^]7-fB
+]O?8.~|,Z%Ρ(`~dĂ9-X `)
+֦xlqv?3FEl+<F5F;Ei0BW@
+}`/q[B p I ajWX%+~S$.f^@XZ H63N&:P׉E@'t*ͽV-6Vݼvs"~L)G& uKt}(q:b-\cdo^Sjjuf$H/i΅|Z>HNSX=Tc`a~Z|myYrGo)=t&Q*Y­ɭS 1j0((nTe IܪYytEQkr(ˊKP!UAssw|'4mw^sԕ1 tʃܔ]e% uƒ:-'˚vJ(!ά-U*V nnnMs)`n
+Hݚi~׋lt5wd
+4qtgJ .XUHg4/Tސ__/<Tendstream
endobj
-6330 0 obj <<
+6792 0 obj <<
/Type /Page
-/Contents 6331 0 R
-/Resources 6329 0 R
+/Contents 6793 0 R
+/Resources 6791 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6304 0 R
+/Parent 6796 0 R
>> endobj
-6332 0 obj <<
-/D [6330 0 R /XYZ 85.039 781.388 null]
+6794 0 obj <<
+/D [6792 0 R /XYZ 85.039 781.388 null]
>> endobj
-2450 0 obj <<
-/D [6330 0 R /XYZ 85.039 470.214 null]
+2522 0 obj <<
+/D [6792 0 R /XYZ 85.039 432.047 null]
>> endobj
-6333 0 obj <<
-/D [6330 0 R /XYZ 85.039 449.619 null]
+6795 0 obj <<
+/D [6792 0 R /XYZ 85.039 397.903 null]
>> endobj
-2454 0 obj <<
-/D [6330 0 R /XYZ 85.039 138.556 null]
+6791 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F38 3001 0 R /F41 2998 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6334 0 obj <<
-/D [6330 0 R /XYZ 85.039 115.84 null]
+6799 0 obj <<
+/Length 949
+/Filter /FlateDecode
+>>
+stream
+xڥUn8}W}H] 6MMT@6:ʦVwfHq6A"g.ggią$ JSws oMg6b7<=Ɖx)7/o/o򷷞bJpO}vu|㕁.o=Ony /Ћ{;o
+JF߮z2vTLEG-@L2S~2FmlfsP3~}}#m1ݙS,}m_vȰ!PОSgI* %zs*9 P5}iök쌲@Z (Zm\dzTq  $ fhGA0h
+w\T@'r1GBl+3d/B1oH<$+ oC==Y(oQF88=hj-iN8'cTL nη?RZ<-
+p l/kfH#fćw+|Lu4櫹i 'ؐ|Fv6š}cOY3߇(}3Nx5I..g:]*l2ЍF*\r/u endstream
+endobj
+6798 0 obj <<
+/Type /Page
+/Contents 6799 0 R
+/Resources 6797 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6796 0 R
>> endobj
-6329 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R >>
+6800 0 obj <<
+/D [6798 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2526 0 obj <<
+/D [6798 0 R /XYZ 85.039 761.463 null]
+>> endobj
+6801 0 obj <<
+/D [6798 0 R /XYZ 85.039 741.337 null]
+>> endobj
+6797 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6337 0 obj <<
-/Length 3622
+6804 0 obj <<
+/Length 2079
/Filter /FlateDecode
>>
stream
-xڭr8Pe! "<73ښ-֔!);@Pڔģ4
-q2 TY#VW%U qB.j@bjZ/4HX96zNnQw'o0i_VD<40P͑Gp2gnӵ:ArF@ *¥:|u; lIZ*~hk޹p.*W@ ܶW"Fz.u5)Xɾâ$C`;FίZ^IjRwܲ|>'`LN/2cG.C#2AFNUgIqL&dh3[e|$\?P-j-v S+Ql$ygY;|]֏E8$bVCgj#`9TxTyx1g-h}B!D bh7-9[%!gDL$4PVlRH;_3T3>8mKt 7$!rt
-w'O~Y
-~Di<xk >< `=lvc(tp  AڝX ܞhG.h:iPL-`_^I{2X†/b{!'SkzZz5PM[lnzHz뉡l33# +`%SwmVW'u- ێܩX UAlD
-9b
-<tqqUȍ^& ,=v*
-QQFnb@rìg*TAB轕1#dI8NF1`C0w)gRBdQ8AAmp-lakTN@0z~9;Î׈͓`$! &M/Kh#-i!ıCao#8?eػdpzmT.(l9pЀd&XAbA֐a\YwEoK_zЬ4R1h)4OP̊g!9P6S /ljU AZbh|-/F'A`D2Uъ"P<Wˎn6-==rdT+|Tnf+k=Dr
-V-bar*XKBN˲ybvSne2?̢`YNO-`qILNT>
-fC:.5߁XНbΉd~A S!4LD%W 4wFR(ց$ڊE(Mn&˒#xT %O\WĶ!`8@}((P#6E[pClBS
-PDڔrgs8vHv )ήG9A:}&z͜٨Oneil]㋲mS0}[-Ġ%J ڨm " mސ9ƒ~t%+0Yk &:TȄv)_|56qmUuC
-| lⶌ;%/;%Aqf,@*~qN#. q % <j{{IK|CPפ8< mZ3O}:}Sa*7-EV
-Jкo,{0g+UY<pv.GYeɋUmּab29ihFXȆINR_6LS?/Ǝ%6T8ξ[m0x27'^
+xڅXI8ׯmpDFmzZb#=lc.@&!oLg\ZS<Xd<_l
+5h6 P+xCJqADd3@儃{%;G<.:- :7.R,`4)1Ğ3ޚ|<#@lbL6|$Ϝ=9O4qKb;~=h fIΉ'bR~yh0Z=X.A #|2>㹤㆙6r)SpPxrboOi{ cqbs"35 X:jdo8%FF12<ߊu5$rp&%qgG\ %gb%<w&*^pސDznp#i*s⾈jAc6Ytѳ.`{̱jN8ֵl se *n6 Q{[@$m$/0mErui$3ʗ_\d2k5<1)
+?{$iRQ"  eێD2 o?PѨiӦ-GlS݃m3-Y<*܈N'1$qF^D-}q8 Q̄A\65ٟTTkT!PپHF6lh(v<TݡYoND.T:ZOE^qyp!ч5zz,hYFsҜjKNMٵ9&,[|۲+UK
+v/" LŤZ#Жh7Ė(2yrqc@¥ާ3@
+U
+Qvm1 Q2E)⅍OUv56d+fƖWp :)4;q)nM9'A+ rU T٭>W7irRv^i؞z}U
+,Ig!rxCdރhNVC\_6棈sU&C.\eոS>o)XJO<jI:g5azj7hTapۙ2W.mz(1]-Ca|60U2LlFٍǘ9`#|vFŋv1SyD0O
++x!G)O*͞cI g
+(<z
+endstream
endobj
-6336 0 obj <<
+6803 0 obj <<
/Type /Page
-/Contents 6337 0 R
-/Resources 6335 0 R
+/Contents 6804 0 R
+/Resources 6802 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6342 0 R
+/Parent 6796 0 R
>> endobj
-6338 0 obj <<
-/D [6336 0 R /XYZ 85.039 781.388 null]
+6805 0 obj <<
+/D [6803 0 R /XYZ 85.039 781.388 null]
>> endobj
-2458 0 obj <<
-/D [6336 0 R /XYZ 85.039 475.683 null]
+2530 0 obj <<
+/D [6803 0 R /XYZ 85.039 761.463 null]
>> endobj
-6339 0 obj <<
-/D [6336 0 R /XYZ 85.039 455.088 null]
+3136 0 obj <<
+/D [6803 0 R /XYZ 85.039 632.606 null]
>> endobj
-2462 0 obj <<
-/D [6336 0 R /XYZ 85.039 277.233 null]
+2534 0 obj <<
+/D [6803 0 R /XYZ 85.039 575.519 null]
>> endobj
-6340 0 obj <<
-/D [6336 0 R /XYZ 85.039 256.032 null]
+6806 0 obj <<
+/D [6803 0 R /XYZ 85.039 530.445 null]
>> endobj
-2466 0 obj <<
-/D [6336 0 R /XYZ 85.039 173.627 null]
+2538 0 obj <<
+/D [6803 0 R /XYZ 85.039 407.454 null]
>> endobj
-6341 0 obj <<
-/D [6336 0 R /XYZ 85.039 153.033 null]
+6807 0 obj <<
+/D [6803 0 R /XYZ 85.039 372.708 null]
>> endobj
-6335 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R /F56 2890 0 R /F66 3242 0 R >>
+6802 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6345 0 obj <<
-/Length 2575
+6810 0 obj <<
+/Length 2342
/Filter /FlateDecode
>>
stream
-xYoݿB}@!(޳"(<-DV!Quo1r'Fr\H82F;Z̻ W#qS/g/HNƣ--~^fؖRZR8c; #k2ջHZ< kϝ
-۾5-yP/yśYJw@"\;ZMpG]Gh}+(_~~1Ws
-#5 ۬EĞZㅎJXXRq7.
- "^(Ɇ[ 4ZS9UZžÇT}>ȳy6|.B8!"t-MM t:~_a~^a.D3e]v7iK*)o5wq TEi=1􋷡ׁ1݊!(˱[y<0ɴf
-U{zAwC57z#c78A?&9yuʍ4om8rs?G2B;Ǚh4%ynPSva88z=|薵r
-ݠ&E'Fax{nq'"u7IE#,piY
-יM0י$˖+d^6jӲ&7\LedM
-JXy{e=`W;Ȗ#d@9z
-ߑ_:S_&T2DxO8*NsKȳ%FnqJk
-CryHj=;x mrnSG^%}تn9)5?V3ECB==z-zu
-߅FvSb>
+xڥY[sH~ׯ#1\˖$ޙl<P=6n\ˡOw}ڝ;vdŮ|w9GBFn3c8|s ?ol>|],}߷|^,(כE[_>ǯ /`>oK
+b;6<wyP6v v39Wh; _l=Wsj Џ0/arB`O^lep$S gNZk}'?Uٓ=6ï')S9|$T6@[^ǫ!GE @z+
+ʍ7WM)|2a_xզwyŵ^T5Q .K;P tc S T2nU:
+{vTWMuhýC: .g %
+G&9"2ʞ+^Sͽ& V%(g2؃7~j4駉aCsTuINt[5ع$tQ?OA%4$BtqH4wEEwB,x"W[k p</Ujy&JNu<fM3NVN1{E
+)WNtgEFmrj)RTU @1,DWA60ApY89Hb^7R0iGKX!†++mv2~XemS''9%n'jkiRyr?\|i%Tώ.xSjhxc 6(j/pCHq6)<*lxS7kgQŚƾ|BޔH5bC><+۟zgBʓyĴ|W3SLBAgglDk'!b[&?k\l?єW)]#=DDKŊ-BYAU[~%ZrHy,Q ^A"YfK$z􃃇(X`9Ud= QZCVPuY]5Z
+`o'Dө
+ إ78mߎ z'O~ņR,endstream
endobj
-6344 0 obj <<
+6809 0 obj <<
/Type /Page
-/Contents 6345 0 R
-/Resources 6343 0 R
+/Contents 6810 0 R
+/Resources 6808 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6342 0 R
+/Parent 6796 0 R
>> endobj
-6346 0 obj <<
-/D [6344 0 R /XYZ 85.039 781.388 null]
+6811 0 obj <<
+/D [6809 0 R /XYZ 85.039 781.388 null]
>> endobj
-2470 0 obj <<
-/D [6344 0 R /XYZ 85.039 761.463 null]
+6808 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6347 0 obj <<
-/D [6344 0 R /XYZ 85.039 741.134 null]
+6814 0 obj <<
+/Length 3626
+/Filter /FlateDecode
+>>
+stream
+xڥr6PDU9ܗْ8c9$9@Mv7Fl%m
+ڄ(풨*@
+HqŸ- *yhѨ{9,5,0O\GU0eOÌD
+%lˊ8*{ g:Xa7Y `3jH`64dr}"x "RzɥA;7yTN0W*VI=Q%H<28$޷<%d@؏el *#8ay<q3mV"/}-l466F7/0JK-V5'` CGxt[E .͉-ќYޘ :{Im&`Fr&/? U`<kLAמC<gWEhMx=V9}LȂ//4{S;r:99y8OK/ͅ(.5csNɌE'?MЖсhZMO<8YH Etx3FƏ$t$Fңx"cW*T 265y~WU["8e<)~7"uT2_$*Wpx)L6o%(b _쎈L늏4Fˌ V
+"o{Zu03FQYA0;=aҲ<K0zAXNBHIv=
+ƒC-&ÂBu;fU >
+(z:JbMn`F%tg/CL}F^mI|ʍ_ĝ&M;m
+C#IQ"J
+/  zL
+ڵ!LL@b@oVFd _*e|֌n}H^pr{Ӟırq7+["bi؛dS`,9 /׉kPSۻCSbE}Y
+T/k\/;{ubZ1G:iS=h$5\Ʀ
+.f{aG=~'[Zs;ijkO~lĥ;mF`% iLZEdKmآ!\, nsF~
+Jc 8L>⪈'"I@]IvjuYC܌v!$pᚓ`n:SNMK*c>g$.%T"=ʝ+HLϔ$?1%h7KQFSD3VK 0m3gM7̞fQI keD~Gu괚%QoտXyH\mȲ7BoGȖwha8Ț ȋljX`ܳ+r\(rFm*:iSP<zu&ŋ˦6V_˝Α˞O'p~lƂnbQK̆dqސLȏB 5Zto~Zė}<endstream
+endobj
+6813 0 obj <<
+/Type /Page
+/Contents 6814 0 R
+/Resources 6812 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6796 0 R
>> endobj
-6348 0 obj <<
-/D [6344 0 R /XYZ 85.039 669.735 null]
+6815 0 obj <<
+/D [6813 0 R /XYZ 85.039 781.388 null]
>> endobj
-6349 0 obj <<
-/D [6344 0 R /XYZ 85.039 654.065 null]
+2542 0 obj <<
+/D [6813 0 R /XYZ 85.039 761.463 null]
>> endobj
-6350 0 obj <<
-/D [6344 0 R /XYZ 85.039 639.909 null]
+6816 0 obj <<
+/D [6813 0 R /XYZ 85.039 741.337 null]
>> endobj
-6351 0 obj <<
-/D [6344 0 R /XYZ 85.039 626.966 null]
+2546 0 obj <<
+/D [6813 0 R /XYZ 85.039 443.66 null]
>> endobj
-6352 0 obj <<
-/D [6344 0 R /XYZ 85.039 612.811 null]
+6817 0 obj <<
+/D [6813 0 R /XYZ 85.039 407.395 null]
>> endobj
-6353 0 obj <<
-/D [6344 0 R /XYZ 85.039 599.262 null]
+6812 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6354 0 obj <<
-/D [6344 0 R /XYZ 85.039 586.319 null]
+6820 0 obj <<
+/Length 2713
+/Filter /FlateDecode
+>>
+stream
+xڥnH_fh.x=;X`fP﷮nc>뮖D&& #]LrBmd&KعP1s5x1&*
+̞G<iz2[\×˩:* /Upworgػ煇T OaI0kOO5/
+__.>'@{_dW"
+ua&0B ;L-%>uLJbTdI2H24JH <
+@ 4)Oݳ<xw5mQ^CJ\0ĕJpPgĔetϑ8,Jl`f , Tm]8V0e`=:A,k:/;A
+tl4sׯjT#Jv 7x[dͮgK:VdRPЮe#p^7)ӒCSU-UOҝzF Adx%Yj58&16*f>bBx`~^~Z[yx6p0%帍WhxJ
+>fô
+;NBxۆ _j[F&^)S(K96_4k=ۿI^.~$<j M;_6Nh9O8n(,P}vb'tl,RmKߔ``]yu:T'v8?ŮN<ϳ;œ͠ZLq!6dܒ<{_`BNn1?n#Bz bzN^ {[`U_ w;.0oC=bْM\t4rxƋ|bsӷ<*I (8ƈFTjsY0DQ&dVܯ?yt`XT1TQuܭqBO"ƒbSqI
+ hJ̺XՃڨ^x!WlQ=U)P;Dq"Yp!KxP5B;j9;D,qh^JBnxLi# 4q\ 9$S&B!!u)
+DxR:9 !c|9!C9cfsKҔf M`4&RԂ+j^^}
+CCN߮GPG!{CSQt3-=A+Z{GڤYWL5LU'7
+:_x0g)@3Gmx\ '#PcX%N }n4xNS#1"].[EW{8F7xTD5=:㩥{}7F< ^?=i5W.ᓾāWCy.OM懨)SPڢ oq!F5Ƴ@ i}u DK&=rh]F F=̡AAT *<ig{_޵-#{["}{%Yo;KGlls?Smuw Od# \bڙxU˷P yz: #bzw|^ICH]c_}><8ceyZKnF2?Dendstream
+endobj
+6819 0 obj <<
+/Type /Page
+/Contents 6820 0 R
+/Resources 6818 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6796 0 R
>> endobj
-6355 0 obj <<
-/D [6344 0 R /XYZ 85.039 572.163 null]
+6821 0 obj <<
+/D [6819 0 R /XYZ 85.039 781.388 null]
>> endobj
-6356 0 obj <<
-/D [6344 0 R /XYZ 85.039 559.22 null]
+2550 0 obj <<
+/D [6819 0 R /XYZ 85.039 761.463 null]
>> endobj
-6357 0 obj <<
-/D [6344 0 R /XYZ 85.039 545.065 null]
+6822 0 obj <<
+/D [6819 0 R /XYZ 85.039 741.337 null]
>> endobj
-6358 0 obj <<
-/D [6344 0 R /XYZ 85.039 532.122 null]
+2554 0 obj <<
+/D [6819 0 R /XYZ 85.039 563.482 null]
>> endobj
-6359 0 obj <<
-/D [6344 0 R /XYZ 85.039 518.573 null]
+6823 0 obj <<
+/D [6819 0 R /XYZ 85.039 528.732 null]
>> endobj
-6360 0 obj <<
-/D [6344 0 R /XYZ 85.039 505.023 null]
+2558 0 obj <<
+/D [6819 0 R /XYZ 85.039 419.229 null]
>> endobj
-6361 0 obj <<
-/D [6344 0 R /XYZ 85.039 490.868 null]
+6824 0 obj <<
+/D [6819 0 R /XYZ 85.039 385.085 null]
>> endobj
-6362 0 obj <<
-/D [6344 0 R /XYZ 85.039 477.925 null]
+2562 0 obj <<
+/D [6819 0 R /XYZ 85.039 288.524 null]
>> endobj
-6363 0 obj <<
-/D [6344 0 R /XYZ 85.039 464.376 null]
+6825 0 obj <<
+/D [6819 0 R /XYZ 85.039 253.779 null]
>> endobj
-6364 0 obj <<
-/D [6344 0 R /XYZ 85.039 450.221 null]
+6826 0 obj <<
+/D [6819 0 R /XYZ 85.039 128.183 null]
>> endobj
-6365 0 obj <<
-/D [6344 0 R /XYZ 85.039 437.277 null]
+6827 0 obj <<
+/D [6819 0 R /XYZ 85.039 98.963 null]
>> endobj
-6366 0 obj <<
-/D [6344 0 R /XYZ 85.039 423.728 null]
+6818 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R /F58 3365 0 R /F41 2998 0 R /F64 4117 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-2474 0 obj <<
-/D [6344 0 R /XYZ 85.039 380.191 null]
+6830 0 obj <<
+/Length 2269
+/Filter /FlateDecode
+>>
+stream
+xYoE
+$7vCۡٵ]t+]D1ޙٙq'FϸGa$luGsy&ĊL:2MHpx4}hhD))Ɠ0.Gʛ^\cz70wEDx:`klkozCcW]L Zߧ?6761ٯQ
+[3GGhs&`zuv3_+_ݞ,EszD_CILgQ9n~8b*T#'HJ5Ѩҁ6'3Nɔ;YM eF(Q&x>t&# \]_\qI'*_|^`]B3MRǴ4b2Zܯw@[ߎ|p̞~ѼKz_uhՋhLpюL/Nw{ :!G8'" y:A$[de&#ID Т7!V*1U^ufiANаs[hFdeE#|! }G-,iDIB"hϑ~U-Et5'*.21݈|n|Y@Nf($[BjQTV_|h&^!8^$JPucg[`rfŦ
+FFK> @n5uK+aF%,1.<
+03BPߩ.`kg>GO|{β VL+qS-6gevc|5&lY2dmeU;-Dl?6\v0-VIneqXƹ7nlU׵{E>v"u&Eo>/ҧnsfGs]<l$MKo C>3<u3OWJrP<_gfnO/O40͒~UWRg~D=5DibH[` s/FW_9woPā%Y}ф
+<&:Bфz6T颉a6켘ڣ1a)O\U҆e6+ڗ:pCd{ٔo\h^7HSb{5YdRne f5S:d2,
+S@ iweL A@V<{d[,({6H Z:{̫`&ucC+\,&~6_Jmd:fI8c5&U,VwA uoU}BvLD9i3]2DH2-(IY7yQd2b:ơN:N.Xc*dҐ2?q e$P74wSD,RmgB
+]#",8'`N#~># HlYI0U!DSBX_lņMאHum`p&o<HPc 2u|SC#IE;Kb`F$]@lc/{uC߳|" Mgc fBަƱ6˶b;>H7JPVf'y 0@/\;f
+O8TvK/C@?V;e!Kmnh#dnyE1L4YdhW4e)GS?Iz48^prrI7y!5N]w C~ۉYw~١if=1Ϲv\,YZ<6T,&OYZAN.ʖS'f\ZYle.)"/'ea]
+hg16*j]yܲ'8S_bh|1XM\pK bTLFz'UKXMjma2U_t}{7z瘰C1VpԹfY՗B?V7oGXuXN`r5G3crN&E>s /c\j[`+'g$Ll ia`:&G|]6IHzK8ўyњӂ&R=$"-8ܷW:4?fendstream
+endobj
+6829 0 obj <<
+/Type /Page
+/Contents 6830 0 R
+/Resources 6828 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6843 0 R
>> endobj
-6367 0 obj <<
-/D [6344 0 R /XYZ 85.039 350.786 null]
+6831 0 obj <<
+/D [6829 0 R /XYZ 85.039 781.388 null]
>> endobj
-6368 0 obj <<
-/D [6344 0 R /XYZ 85.039 296.062 null]
+6832 0 obj <<
+/D [6829 0 R /XYZ 85.039 761.463 null]
>> endobj
-6369 0 obj <<
-/D [6344 0 R /XYZ 285.909 302.036 null]
+6833 0 obj <<
+/D [6829 0 R /XYZ 85.039 748.383 null]
>> endobj
-2478 0 obj <<
-/D [6344 0 R /XYZ 85.039 144.973 null]
+6834 0 obj <<
+/D [6829 0 R /XYZ 85.039 721.284 null]
>> endobj
-6370 0 obj <<
-/D [6344 0 R /XYZ 85.039 123.777 null]
+6835 0 obj <<
+/D [6829 0 R /XYZ 85.039 694.186 null]
>> endobj
-6343 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R /F72 3966 0 R /F56 2890 0 R /F11 2898 0 R >>
+6836 0 obj <<
+/D [6829 0 R /XYZ 85.039 666.482 null]
+>> endobj
+6837 0 obj <<
+/D [6829 0 R /XYZ 85.039 421.205 null]
+>> endobj
+6838 0 obj <<
+/D [6829 0 R /XYZ 85.039 391.985 null]
+>> endobj
+2566 0 obj <<
+/D [6829 0 R /XYZ 85.039 322.225 null]
+>> endobj
+6839 0 obj <<
+/D [6829 0 R /XYZ 85.039 279.272 null]
+>> endobj
+6840 0 obj <<
+/D [6829 0 R /XYZ 85.039 226.407 null]
+>> endobj
+6841 0 obj <<
+/D [6829 0 R /XYZ 285.909 232.38 null]
+>> endobj
+2570 0 obj <<
+/D [6829 0 R /XYZ 85.039 123.284 null]
+>> endobj
+6842 0 obj <<
+/D [6829 0 R /XYZ 85.039 88.538 null]
+>> endobj
+6828 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F20 2965 0 R /F62 4052 0 R /F38 3001 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6373 0 obj <<
-/Length 2203
+6846 0 obj <<
+/Length 3110
/Filter /FlateDecode
>>
stream
-xZYoH~# +/ d=l`f6ْǐTI]d Zo?o8 I&YyNV0+܉p(ĩ7W?GbNꦓŒ,߬>.}AXL8N۩gݼ4&?Mغ[&-g |k|i훙0Q/cջpD ^;A_\'H<J@7W.2lN;p$VРX]}Z~~Z˞Xq\o-8TXZ/\OavsÑg=TYT->,c*Crz,Q[Ke{jpQQ%y}lqMbzU^||xPo<>3M6Y3E(+HjV-u";~j(g_ȓ|(IVEM! 4bd1f>$j-2P]uW9lI!Am|zQ+;Y
-9i 'EX0WbȨ4$șB>sd04-'D-j ~ 4Kn@Y"IxI>
-d FWwM ^%Nz?(C'ɁDJL'b
- 1c_7^lYK}1a 0ݶc ]K4qxq3[ zV~|]Ec@wLpo @nAjݑ5T.QvGJ΢|@AG) Xz, y֜+^rٗ)p$<f_a*FK; VbWiC1F0T YC%h4n`BCX~ UZ5e&! !KB6$5dð3Si 'y('6_ǃn*ȵdC#eU@dʄR_YT%@ZRqV`OP;~
+x[YoH~У>yq2Yb'+f恖h$jH*VlZj %Eu|U3,,IqDt]#x5R,w7xQlz#l}~/_KJhLt~_/)?ߪۿ~]dݨ ϙ|Y]yw&sŇRfB.~6o(Y:{(p{wrGQ{{qwO*uSSV2K4eaKrqĬ%v,3C$LP;(yوqID1q+;-OQ7%⨭|~a Ok|!R[ ľe"ÆhD' `nqpoZ)6= SۍG0~~ЖZ=RxV8( ֡mm]W㑭Wi \_qu;(RxH^խ}nq`X=" b,9߈pؗ\70~)WdX~1+
+ϼ-#|"s84ED')[Er8DfϟK#Ax]J)Uhm)|6AYpRph6D'm`dq&KU1d|_=Zsىj6D1Z9NjrP
+ΠfaSt4Sh0L18m
+2՛YmEvZК,Rj"|m2QdrUGmbRAި\ W{:$= @#>OIhDSVŘEYLF<ӮA|ᐪ9^ӭ2DjxK<2J{<X/(]F&3XBM3g&6oȺ}
+
+PB ʵ*C ) FP@D "!ZٌC~.BMS%Dz$b8v`vT8#ंڼ g.f8"́|IF#h"yWP
+?eqO2I0"a$P"$FCPig:QOc%8 Š)x{&:?6+l%3[' E?EsdG3xrPca]eYdh튍QQjes<s $c" Ay Hڏ,> |"XwG
+wn/FPŐiC=߫YDX+MhsSEۦ9TQzF0䛗m-ZQĠwjW?rWtRq<GqAz4PpWqR7JΡI%!M$p_wR5Mwm]m+V= ~8{ޠ9?uP M}
+kf\MI>9IQZj zF_t#JBjpҞ7H.hG۲UX,P B)wpSzcCs+W{ C&G +~)3лul~gr(Py5W99lS@ <="BjEE%.meznb֝@jt4_:b])Ď @]EEOZN͋kS'm~,u;gp!piejiv.L!7;fcBU-'S9 F#dE5Mog 7hE1v wNP
+"CIYLʉ_""L$ɒŞMt&vV ;Ȼ*ND4Qӌ8wVn#R{+2(ق]js挽!Гu:Ɩ'΢,'LLN2њrqڔs-RУ/mmOYv+_wd5e''̭N;њ{q+ L|Pi(E=@APy|i,ͻDjgZud[OrU\қ.)F J[<-(Ev7O2?[$$37ab(E :v ) r4n78v.F7/7&[q-?/ym6cwe0JYk9q,:U,8of-
+
endobj
-6372 0 obj <<
+6845 0 obj <<
/Type /Page
-/Contents 6373 0 R
-/Resources 6371 0 R
+/Contents 6846 0 R
+/Resources 6844 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6342 0 R
+/Parent 6843 0 R
>> endobj
-6374 0 obj <<
-/D [6372 0 R /XYZ 85.039 781.388 null]
+6847 0 obj <<
+/D [6845 0 R /XYZ 85.039 781.388 null]
>> endobj
-6375 0 obj <<
-/D [6372 0 R /XYZ 85.039 659.915 null]
+6848 0 obj <<
+/D [6845 0 R /XYZ 85.039 535.112 null]
>> endobj
-6376 0 obj <<
-/D [6372 0 R /XYZ 263.137 665.888 null]
+6849 0 obj <<
+/D [6845 0 R /XYZ 263.137 541.085 null]
>> endobj
-2482 0 obj <<
-/D [6372 0 R /XYZ 85.039 374.658 null]
+2574 0 obj <<
+/D [6845 0 R /XYZ 85.039 389.607 null]
>> endobj
-6377 0 obj <<
-/D [6372 0 R /XYZ 85.039 353.461 null]
+6850 0 obj <<
+/D [6845 0 R /XYZ 85.039 354.862 null]
>> endobj
-6371 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F56 2890 0 R /F20 2865 0 R /F35 2880 0 R >>
+6844 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6380 0 obj <<
-/Length 1040
+6853 0 obj <<
+/Length 1970
/Filter /FlateDecode
>>
stream
-xڭVK6Wp[j`Ǝg&1SIf2Ղ"#Àq|M_dl,Է-8
-LCd_o{[C3ur2iU[IR˪6ح_Q%8
-SRTRUي2ngX*Rs*D9g0~];-*1D;)E3v{S'}A- ,ZLpv]OKrr1`UK= &ɅoMVA-EGQF|Xݤkֈ#%eV2϶9E͹аQv Mq6ì_]mQ|,!qk
-?0T[*8yLԞe2vJZ 3㯝Cg4ٻ%$
-fGooO1c[K_u3?o^21M[ʷ
-]im1ƶdǨS9c^vK] /endstream
+xYKs6Wj& ;Iڱɓ$9В"sBHI}P EQ^: .vȱ 8qKx،Vލj%z>xcMsj<_~q~4*%dEs;w.'r>O/r`'>'SqW8.o__NOjo7&2A}掗p#W$?7#[h691CBE0PcWFJO(+o
+.[㔑<}''F5;џi])Hyf+jQw8\65^L-s{Oˠ
+
+#'-<x+[J0W\U,ύ%jI% hYuFĤLaީ&/x Ѳ^+V<s
+*#nT
+ VKdY02x<BhSOqvPJpn~G>WVUkC6t7, dK@-!*8gil%lKUyCLdf}%1XxWVFw]07M_}ݘ(Kn#ܶi |{_#>~&ll fc#t56jec[cgcxl̴Yar"{%V-:`EG
+W/hqiɜl# ^!YS
+"Dp[B3A&û{38&b})ym,CdL !F|E>/MkϢyA-|K?M3pG?:ӠXBkilhGZ%4]pj[tMG7~1zo3uأaQ[\
endobj
-6379 0 obj <<
+6852 0 obj <<
/Type /Page
-/Contents 6380 0 R
-/Resources 6378 0 R
+/Contents 6853 0 R
+/Resources 6851 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6342 0 R
+/Parent 6843 0 R
>> endobj
-6381 0 obj <<
-/D [6379 0 R /XYZ 85.039 781.388 null]
+6854 0 obj <<
+/D [6852 0 R /XYZ 85.039 781.388 null]
>> endobj
-6378 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R >>
+6851 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6384 0 obj <<
-/Length 2543
+6857 0 obj <<
+/Length 2375
/Filter /FlateDecode
>>
stream
-xڥَ}@^(`aym {I`zZCJbF#}jfb`GUuuRI#יi<?(#Ea;k{0AvAe>AyxN{q͎ 7WjEyGYuklL58+vu+b1˦\):3m#Dn c=`8~J:TWR|W;d]'2M
-R3&AྫྷJ
-UBL6Pt<F*H4^qW鎽 r`
-t]%3xQe.xs:FBZl
-K.A): ӓ䜜W!Ț}
-`yxoF,B"/U<a|0s?QV2Xni< ~, ӿŒ?zA
-[8*.Psd܀{n:VHgQD6@nOVI*vX73i~̘4EphtyykЧ+t\EuepiQEq&l%p$E3BJ@KY+uZR#ѩ`u -kg pl
-,ѮcȦ.K+  +X[F:GO
-/!q#bi=ID=/1$@¢@,ð$"b0J9M}qjP"G3<j <VTtZmojp  K8񓞇O^eDZF8Bʈc#O/%oI"9RlGHC(
-򾧃ho f0'Me3~FUSʜ&SbKM䐟~}
-LIZR>FQA64D )y9:uEvhvvzX6 d,B1OJ&J:xqyY3q
-DN0[Gc?au?zJГn= Gye{r8gF4ǡIys偣Ho&^uNy5TR#$OERL Tja7$jxKғy4pxVco!qm
-6b啱OA|1&*uٮHCŁk*K5e-L8>|{4m.
-0…r<P"V0Y>\)pkW ̛Mk@R__aNwhOmQ2@Y;B5/vQ -MI݈fGĩ:禨$GjHpsu|(m!qCPs~,^X/w^#LRp-%+Eb (iC Ҋ JioK88ioI04`0{' …
-|>
-.yq9wKϼX 29%Ɓ؁ڋmca6m{G(x Q>iϦy޵?ߖ{}dY=#J[MEU# [$rj۞Id~-)Oi%/vX`v{;ڋE©|7H_*_jfendstream
+xڥXY~_GE,v7E@l<Жl)G|CTX, OyyQe
+<SaOJ8$
+8ɵ]:.TDB^ա M#ugI0{-?V$ ?V?:J3?uŃm SUՆˮY)oy4s3/yqau{
+(~yu'%IPdg\Uv)g s޷F<}32Lҹ¯7}Ƀ$eOޚiC?1H{,ins-6!Sa@ay0vj<6,v3܌R
+&j<W#=
+|xG`*
+70chyl*P'C^
+ASmgVkk:i lŷv (;R9'5\Éhشxܶ4cg6fb= PK0JR5?<WK͟M>(:Ma5F]`H'tH Rl{+Y̷C;'4f|˰_AJa7$&.Di.Jo ~+] iC؆|73|cX)M1vq }C3TLݒJLi6PbyL#/֑xPt쫙cnMY9_>Qiޗ`wY9K%h&C֞d+:MGvN.XC6
+ջ`c쥋EǶ)rqJ̇'3P~<;=P$aQ,P: epy`ï€CzDEw?֜ƑyCjʆR%(P8%URXJfg~D( 2lg% ?X%^r~s겾Ps V9L9։\e;d #=@2@U9N &? !
+WN`nJrR~y0ދU{ {$P؝;I`eJJ8\;9r"QI/f\R<stR[s+JW;˹+|*my e<.He;71#rjFr@ѽ3*Rg'qY KG¾ .Pg5,;if0:q J $w#vy!@:ȶyw5|,SII5ή_YَZQPβ;͕D0a\E@N"cY xT
+RB/WB%)
+{j$a"?,LQMy$ G})U,ǁ+Yi)(P;^Nޚh٫
+β -
+Rm00L'endstream
endobj
-6383 0 obj <<
+6856 0 obj <<
/Type /Page
-/Contents 6384 0 R
-/Resources 6382 0 R
+/Contents 6857 0 R
+/Resources 6855 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6342 0 R
+/Parent 6843 0 R
>> endobj
-6385 0 obj <<
-/D [6383 0 R /XYZ 85.039 781.388 null]
+6858 0 obj <<
+/D [6856 0 R /XYZ 85.039 781.388 null]
>> endobj
-2486 0 obj <<
-/D [6383 0 R /XYZ 85.039 761.463 null]
+2578 0 obj <<
+/D [6856 0 R /XYZ 85.039 761.463 null]
>> endobj
-3034 0 obj <<
-/D [6383 0 R /XYZ 85.039 647.397 null]
+3167 0 obj <<
+/D [6856 0 R /XYZ 85.039 632.606 null]
>> endobj
-2490 0 obj <<
-/D [6383 0 R /XYZ 85.039 534.44 null]
+2582 0 obj <<
+/D [6856 0 R /XYZ 85.039 519.201 null]
>> endobj
-6386 0 obj <<
-/D [6383 0 R /XYZ 85.039 507.825 null]
+6859 0 obj <<
+/D [6856 0 R /XYZ 85.039 479.037 null]
>> endobj
-2494 0 obj <<
-/D [6383 0 R /XYZ 85.039 263.788 null]
+2586 0 obj <<
+/D [6856 0 R /XYZ 85.039 223.124 null]
>> endobj
-6387 0 obj <<
-/D [6383 0 R /XYZ 85.039 245.119 null]
+6860 0 obj <<
+/D [6856 0 R /XYZ 85.039 190.906 null]
>> endobj
-6382 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R /F56 2890 0 R >>
-/XObject << /Im1 3957 0 R >>
+6855 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F62 4052 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6390 0 obj <<
-/Length 2633
-/Filter /FlateDecode
->>
-stream
-xڭYmo8_a`?Qk^mm7v/uBd[,z%q~B*m p8<3 b+I Gd9s'+yu&4;7 pПId2_<`ŻԖRZsvl*۩ºҚߚ>R]yq÷}틗os5o `9 4o翞]{۾Gw~=sē=]G$ds | ^5"wǍ-]'NW2OS;+˛E]lBUydv{1V]z*ܥܼqmsJ٧-G͠:%1rD2pV1BUb'7y9+wfK<' {UBgتZ$ƾhCqgUsoqW}v hSXr*hLD ׵ )F-S{F^ti<݌اŀsNWUyՆI4eiVQ:cRc|FnБ+(TOLLM~?z9*+̏pZC'}CNj$GDBun @c;R0/ԋO_
-w,"ܻ4#͡aBbz6XBrS P![:COE U L' ͟9Bf )gHE? ӓ]ST+n4h% ;6 oHcɄwhZ N{z1px,nf~f
-xxRGaly1"S*4ij<v@Qںh33S(Hͧ@õvF pv()rkh[o
-J˒9ϘC2s[n¬mXKĚa2d
-܂`bZw. |cڌ8˙}ࡱFQu#90j(H
-#trgVhmՎ VzQuAװٚ"B
-_P*:#y| 6 :$b@
-$!tp~~9p8Iç聣EEy#o3+Ƃď/p=;5q(߀7K!:8 9"c>ُQ~G'^ Wl-Pީ+y`.
-^zZ3Rz..=0Hov ɆPhZI_RRLz9PCqPZNe3щ 707*,d;0MJl8UвU^s4k~WVwyM:WQJmKbj.KEq:
-.m8b 9*N5vX/ ȋLMOhA#^ȉ_>ÏʫR%oyhd
-n&ţg|8,>Ol3=^.iMb߫^jWMSe'7
-\nfAeBzMFo:FL-ηiwU,mP\pmүN,/ۑ?v U!(Ы=(j43J#yU٣
-6GaS?M@[I ~5N .{ׯ7u5IEx]bu!bٚtXkr`RV:ϣta0Advzz{}v=̦Ⱦȉ|Jp^iW`nm|s_\WrgA_7g\33rqkyѝufrJ c:L~M҅~z* e8
+6863 0 obj <<
+/Length 2356
+/Filter /FlateDecode
+>>
+stream
+xڥY[o~ЇR :S;ZJ 4 4EIR EJvb\Μg$Fȷ7( g.hIzvqcN<-||l۫u]˕x5 y,ƑkxzϚpxܾ
+ @%k=pT$olq_)/uuYe`E`"ځҾWUed5h 0 UqYE:-XVj =K^
+nhKAf3V؃R"{b@-iVɧW?у"mn\gp.֌BwF1UEVz^mz*l߭pt*T3
+S\X B?zKX 0>ЂZ6+tÖEBTrcQNFiv(jϜ1n%BB1(4%M6Ѽ<:%&)/-C8MIMV:aqKױX(i=;Ci%sZ UK#CK;tr9P $L?+SS:Vu (c=;;lb&X19޾PJ,MSlpc(`—qeR10 QD}iH@77Ęhxa)R
+ZN-[!`MAAeف14_Ti֏<#/@x~i  ^+.9݂jeKnk|{DKJ.SN*pZgSkn?u͡j" ^Ql@Ki/AXRf֘Y6\B_uYA`G2%4N'!ux:V.@"W|t$f>(͋\:l؄ p-Q%9fL) & #Yk@}ё6gb(SP=]WEt: <jr6}mn&Ln \\QqKM
+N ٻF+ֳPG개ǨB{05W}.gsn̪djIR/MBC(E'Ĺ#rn0&5v#sL@lNۋ W4{D&. HBIm5!GR~ێ#κF3??^+lҦ _#Ffm $~GWGC3r7c,/
+x!/^XQ" Jqe  k -Wf".|96Xmxwa8ԯ8A âWш)ay\+(&(z|Q-ՠdN ws grZTDb.5+.J*hQ &n!<$X~Ggˬ<s,>aThTonTGDsY(S=sF(z$mG~WzȆ''N- AʐKiBv7Ks3is<%/h%ozCgO y7Of2l C@޴D 1>oCؿ!'ױvWVؐ" RPi,x~pxͯ1'`}{gendstream
endobj
-6389 0 obj <<
+6862 0 obj <<
/Type /Page
-/Contents 6390 0 R
-/Resources 6388 0 R
+/Contents 6863 0 R
+/Resources 6861 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6342 0 R
-/Annots [ 6397 0 R ]
->> endobj
-6397 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [370.786 98.123 475.868 110.115]
-/Subtype/Link/A<</Type/Action/S/URI/URI(https://myhost:901)>>
->> endobj
-6391 0 obj <<
-/D [6389 0 R /XYZ 85.039 781.388 null]
->> endobj
-2498 0 obj <<
-/D [6389 0 R /XYZ 85.039 364.301 null]
+/Parent 6843 0 R
>> endobj
-6392 0 obj <<
-/D [6389 0 R /XYZ 85.039 343.104 null]
+6864 0 obj <<
+/D [6862 0 R /XYZ 85.039 781.388 null]
>> endobj
-6393 0 obj <<
-/D [6389 0 R /XYZ 85.039 289.111 null]
+2590 0 obj <<
+/D [6862 0 R /XYZ 85.039 209.282 null]
>> endobj
-6394 0 obj <<
-/D [6389 0 R /XYZ 85.039 275.561 null]
+6865 0 obj <<
+/D [6862 0 R /XYZ 85.039 174.536 null]
>> endobj
-6395 0 obj <<
-/D [6389 0 R /XYZ 85.039 196.388 null]
+6866 0 obj <<
+/D [6862 0 R /XYZ 85.039 104.005 null]
>> endobj
-6396 0 obj <<
-/D [6389 0 R /XYZ 85.039 180.111 null]
+6867 0 obj <<
+/D [6862 0 R /XYZ 85.039 76.906 null]
>> endobj
-6388 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F56 2890 0 R /F20 2865 0 R /F66 3242 0 R >>
+6861 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6400 0 obj <<
-/Length 3204
+6870 0 obj <<
+/Length 2424
/Filter /FlateDecode
>>
stream
-xZIsFWr* 4dٱJ) "Q
-I:njS0b*^67<D3a rbYWNNYh1v*3!n"(H±$
-GBLwjUs9Yj/rd ]-/kotGayar<2m&>sP =oCZ |lW57t˶<B$!sЊ^Te&$<}NfJVtdC]=tj1u\6vSi Xa%l178qy"#jGhW3^KW{k`ZTڰ!QYQG-5ؾ,y;]}?ˍK./9|zRM[mU:t
-B6[O? ^I/<x5/iF#,VO'ٻ?rkSf[,u=6 zb9жcܓ"3mJNX`vvy)W<t k-6g~ &WValˋBz
-ot`)b'.㖘Ң߹-e|jEkT#J[#;wKыXqs kͳg{݋8a4w(?WhiLBY^w>4t/rPt;g?po Znb#n DeYR(x׽itH@dz Hz#+޿~""l-gώ#0j
-a!OW @Na8q拴pz$!FXgŏ$*?J#ХC 8%>WREp@H ͍00=lfsL)Z56=K#$.NfkQ0$Y%6w(i+0BeGq b_o0!+(zBXF'I%dKGѡNęxVWԒ<3@]ǜ2o+Db#DԬf #\$2v5sP@.4&v!
-v[a~)CT
-BR_!:fHȗRrNd}rJ%]̇)1v(CD;>$'*P#|I,[ hcJfh3JD"actEqNF &=MLPѶYHcv
-2`'C/. \+mVIz,񨊇B.R l`j-”D2sO{;MN`
-k Z &$FM?O,휱vDϑGtϰo 2vIJ}XsR;Ҍ-V+)!o׺BUDtr@%}ŭ%0=4bϨ]꾞`d0n,a~ RqfA"yZ>xz 
-0JXmuPy2Ɯ}fg,l(3endstream
+xڥYs6ݿL #oN&q?[<$y$J愇BRv@Rg2d.{aOX:>NR'NPI,+Λ+i0<Mp^ίБ#}3_tr櫏ooyJ)WbqϤa&tofrO߾oĺ ?ϗy7|y}wbp
+*M'XBvu*]^_ {çNNDDO HZڦ7t]^/uו mɬi?5URE"6
+6| c1{E#AWXA"Ci ]*B@M!PAbQ ug%S*M;l& eHXɪ-I ieaBerd22qK5Jpq({SG|g
+-L ؛Ǚ=mT~ ZF&"1d56; v͢
+
+AgAskd6# ?v) l?4ߚԶgeא>QM ܨS7x7ipbhJƥ zs^L<_1N&h,o&pd `]I+zAe9:Օ ? P~i<AD$0~q?A r=Wn! ? `'LtJ|+Og 6 '%>E(S'
+7eIy<Z-Rf7Q&U jkc7'5e6yL2ŒEo ':7PZ$lFŒoK<7fn5[u8qth >3ӈOc'\;p·Tz^jdŠqӒz|`]f涍Ǣ@tT F$DĔ,\)<l/220?OM^N'{Wh&7eI lj\):!R8gG, EQ8X!\*Abx
+J\߶4[G
+'A2 ~'?ݺv߈l(ѐpۜ[#{qsm]뚺-Q1*7?f
+A),CÔIՁ/=~f˯
+{(ϗ"%
+e,lLM0C`ebsVD wV,yNtflQď|~<>| E$?ff2+"ؐSsCZjõm3̆>xߝAOK04>P)3T:Vz;Cy]~endstream
endobj
-6399 0 obj <<
+6869 0 obj <<
/Type /Page
-/Contents 6400 0 R
-/Resources 6398 0 R
+/Contents 6870 0 R
+/Resources 6868 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6406 0 R
-/Annots [ 6403 0 R ]
+/Parent 6843 0 R
+/Annots [ 6874 0 R 6876 0 R ]
>> endobj
-6403 0 obj <<
+6874 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [386.344 644.891 509.276 657.792]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.ethereal.com)>>
+/Rect [330.822 535.736 435.904 547.728]
+/Subtype/Link/A<</Type/Action/S/URI/URI(https://myhost:901)>>
>> endobj
-6401 0 obj <<
-/D [6399 0 R /XYZ 85.039 781.388 null]
+6876 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 353.13 129.884 362.698]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.ethereal.com/)>>
>> endobj
-2502 0 obj <<
-/D [6399 0 R /XYZ 85.039 761.463 null]
+6871 0 obj <<
+/D [6869 0 R /XYZ 85.039 781.388 null]
>> endobj
-6402 0 obj <<
-/D [6399 0 R /XYZ 85.039 741.134 null]
+6872 0 obj <<
+/D [6869 0 R /XYZ 85.039 693.604 null]
>> endobj
-2506 0 obj <<
-/D [6399 0 R /XYZ 85.039 473.996 null]
+6873 0 obj <<
+/D [6869 0 R /XYZ 85.039 663.778 null]
>> endobj
-6404 0 obj <<
-/D [6399 0 R /XYZ 85.039 455.327 null]
+2594 0 obj <<
+/D [6869 0 R /XYZ 85.039 508.49 null]
>> endobj
-2510 0 obj <<
-/D [6399 0 R /XYZ 85.039 152.856 null]
+6875 0 obj <<
+/D [6869 0 R /XYZ 85.039 473.744 null]
>> endobj
-6405 0 obj <<
-/D [6399 0 R /XYZ 85.039 134.187 null]
+2598 0 obj <<
+/D [6869 0 R /XYZ 85.039 177.656 null]
>> endobj
-6398 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F72 3966 0 R /F18 3969 0 R /F73 3992 0 R /F35 2880 0 R /F14 2895 0 R /F66 3242 0 R >>
-/XObject << /Im2 4150 0 R /Im1 3957 0 R >>
+6877 0 obj <<
+/D [6869 0 R /XYZ 85.039 145.438 null]
+>> endobj
+6868 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R /F62 4052 0 R /F64 4117 0 R /F18 4120 0 R /F65 4141 0 R /F41 2998 0 R /F58 3365 0 R >>
+/XObject << /Im3 4358 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6409 0 obj <<
-/Length 3231
+6880 0 obj <<
+/Length 2658
/Filter /FlateDecode
>>
stream
-xڽZK#X%" l9˲V0K`I@@ʯOf0X+T%{{m" #]Eꢸo-&mFY]onMQXF3 y~ w?Z@p"_*nU߾:{A-~V8;3a1NGYÇV>|;: LB]'(Ga\$ah77wp_r˳.hmG2,UziCkKKM}16Aqe4j݄fYp_cu k
-gNU;T^~V
-?XIZG
-fpf>rw$prrG~$#8M<1V'\jںCx%,{@_ \s~ (GXH %XY&M
-iq}$
-T-Fi'T!F\ QBuZ:bU> k~jƝLIk'BTMÂ`ϒnSh4 UfiWsD P h38.W"m&QvK3ZQ䕕"h8+.!u3Kƌ{LU&EzrpȖPl! < 5- t (+1qDŝ,9p5O8XDž4iZG0 )fiLfDJIxE@Er Q
-v˽܀5 D?X t?{ bsjQB:Ϭf)8]Gj+0^c:,ˢk.BT.ʘ
-<62+Mw.vXk'R
-2}h$_0B|;H3'!-&D9l!\622d6Ttn4OM8>fWgXUG=T|!sY2^ VO%"+ㇹLZDEg1.9w?sirXfCºa  k3I-Z
- $\ee8Ȅo>1a\2G?^dnᤅ6kvś/xׂKaD11Pa%iؘ=䥄n/22@&OEΩ$<{(`}1J)AIY&ʭhC8wAěs鏖` w2fbigK*A"mf*۽BV2W5a(5M ;[' re EV܊ BxJlj H?)͊ [-`XpfX(=w1= Ծk%(̊ڰC/ucCg;hQ$nٯ%QO@6߰966yE g,e<~"I{y߳=w3e_d - ?uY|ϰdOt_t<(0(M>!Fgendstream
+xYK6ϯ`
+oW7<Ƈ 77r~|}wo~
+l_Dğz>}槛wQQR=Ge~7lAny]
+FFR<fd;DZRdnXXѾFyUR #u*=NDdqxmxvVlǷ已nXe[Q<JadgZqX4l{<gcۀ_+
+m.
+Uhg ;x/9]/]W2㱪Ǐ+hpxS[,(ej1k5jVJED(۠D!)̏ieaK"ҡaͭiikE_=.W+!2ۊ<CUuE}5ZV˒K%Po
+0`GvQv^;n6NH81kӤtah2Ƙگ|š?gugSwUo]cW5䖍s: :YZ0+0gBB[WwH|:Z'uT;7+t$ jNn)>5 0Eg4xNeT"''H
+H8}LvSەLأ-%gL$Sgќ uP0XX0Nà܂dz&=}W skVͷCq'0EE7Ls24I2f竌8+:Q B@)c<Fܙb~n)kmt:Tb{
+ςP& <#J4X㴿ʯ&ObrW<1,I ɡWű Y5,N
+tf_wv @tvtlc V@E-'s.*c5Yzu(qjDzœb課\DW'"K^7;Wܯ
endobj
-6408 0 obj <<
+6879 0 obj <<
/Type /Page
-/Contents 6409 0 R
-/Resources 6407 0 R
+/Contents 6880 0 R
+/Resources 6878 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6406 0 R
+/Parent 6885 0 R
>> endobj
-6410 0 obj <<
-/D [6408 0 R /XYZ 85.039 781.388 null]
+6881 0 obj <<
+/D [6879 0 R /XYZ 85.039 781.388 null]
>> endobj
-2514 0 obj <<
-/D [6408 0 R /XYZ 85.039 761.463 null]
+2602 0 obj <<
+/D [6879 0 R /XYZ 85.039 496.119 null]
>> endobj
-6411 0 obj <<
-/D [6408 0 R /XYZ 85.039 741.134 null]
+6882 0 obj <<
+/D [6879 0 R /XYZ 85.039 463.901 null]
>> endobj
-2518 0 obj <<
-/D [6408 0 R /XYZ 85.039 633.349 null]
+2606 0 obj <<
+/D [6879 0 R /XYZ 85.039 340.446 null]
>> endobj
-6412 0 obj <<
-/D [6408 0 R /XYZ 85.039 612.356 null]
+6883 0 obj <<
+/D [6879 0 R /XYZ 85.039 305.7 null]
>> endobj
-2522 0 obj <<
-/D [6408 0 R /XYZ 85.039 431.773 null]
+2610 0 obj <<
+/D [6879 0 R /XYZ 85.039 182.245 null]
>> endobj
-6413 0 obj <<
-/D [6408 0 R /XYZ 85.039 411.183 null]
+6884 0 obj <<
+/D [6879 0 R /XYZ 85.039 149.824 null]
>> endobj
-2526 0 obj <<
-/D [6408 0 R /XYZ 85.039 274.178 null]
+6878 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F58 3365 0 R /F15 2976 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6414 0 obj <<
-/D [6408 0 R /XYZ 85.039 252.982 null]
+6888 0 obj <<
+/Length 2424
+/Filter /FlateDecode
+>>
+stream
+xڥYYsF~ׯ#X
+%WlT }!t8W3¤OQ/$SJھK7rq|]8q:}B;_,d@e@7LWi wc5RKp1}O8nP"I18fU
+!) 4aT"a]]Z\R9dWjO,E*6?q5Eܙ|g>D18Y]@U1]=FE\3fOcD5㋬_ :rZ H[
+twT pn%bVLXjG&)dUT˟Q(Vi;;Fv|Dk"vuA}h ;L>]j) cW,gL<:W&hv/0,uV;m+(ؽ`f
+"Fs㿠jbMDw6Ƥ1";"acKv\v!v Ui?]5 -KV Zxݕ& "QH"pQZ1K@W,`4;.Z:C@ųhHM cɚfR|ȰEP`%_-+knpֆ J=۪Ҳ%e"M欤 fdf8¼AJ~Ϝl;'DǤλ=oyNz<ys0%1cPyM̈ شÁ`qD}C+ǑUKj4Y@q]ֿA_Vb In5K3QJ=V@ijn&#Ǔ "{/`P- ,\olq• K_v쐨Bt[oZYЌl0&YVW'9HbzC1>C>oD [gVCLQD~?h7"
+v;. xH4w@~tjNJ CEe̼
+endobj
+6887 0 obj <<
+/Type /Page
+/Contents 6888 0 R
+/Resources 6886 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6885 0 R
>> endobj
-2530 0 obj <<
-/D [6408 0 R /XYZ 85.039 197.272 null]
+6889 0 obj <<
+/D [6887 0 R /XYZ 85.039 781.388 null]
>> endobj
-6415 0 obj <<
-/D [6408 0 R /XYZ 85.039 176.076 null]
+2614 0 obj <<
+/D [6887 0 R /XYZ 85.039 613.296 null]
>> endobj
-6407 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R >>
+6890 0 obj <<
+/D [6887 0 R /XYZ 85.039 576.429 null]
+>> endobj
+2618 0 obj <<
+/D [6887 0 R /XYZ 85.039 412.326 null]
+>> endobj
+6891 0 obj <<
+/D [6887 0 R /XYZ 85.039 377.581 null]
+>> endobj
+2622 0 obj <<
+/D [6887 0 R /XYZ 85.039 308.322 null]
+>> endobj
+6892 0 obj <<
+/D [6887 0 R /XYZ 85.039 273.576 null]
+>> endobj
+6886 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F58 3365 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6418 0 obj <<
-/Length 220
+6895 0 obj <<
+/Length 232
/Filter /FlateDecode
>>
stream
-xmN1 EIcqbHDE
-˂,Of1p{|umr9@6WUۀnە, s
-WP-AМ& ' ]®=h{WFۇȥkgZ'<Jf xmG "{/e8krv۵9J v8м#CK]&HdqcV&endstream
+xu;O1 )"Ə8$@h`xe%NDC{JsH}@5rّT@SRՄ8/kM.#,8.)h? B\ ~uMPjFfQiPI~F{h3 hvJ8̖Z-^VnKSE ۄ+(M<Z&؄z
+vN▜Ӎ߷\_endstream
endobj
-6417 0 obj <<
+6894 0 obj <<
/Type /Page
-/Contents 6418 0 R
-/Resources 6416 0 R
+/Contents 6895 0 R
+/Resources 6893 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6406 0 R
+/Parent 6885 0 R
>> endobj
-6419 0 obj <<
-/D [6417 0 R /XYZ 85.039 781.388 null]
+6896 0 obj <<
+/D [6894 0 R /XYZ 85.039 781.388 null]
>> endobj
-2534 0 obj <<
-/D [6417 0 R /XYZ 85.039 542.44 null]
+2626 0 obj <<
+/D [6894 0 R /XYZ 85.039 542.44 null]
>> endobj
-6416 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+6893 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6422 0 obj <<
-/Length 2363
+6899 0 obj <<
+/Length 1996
/Filter /FlateDecode
>>
stream
-xڥY[o6~ϯ02P3"k>Ltb:;xwQLAX.$O&Je-D!yxng>Y*ߦ8&l]Gy{#
-
-ςaQ+o!%}Tȕ ^xsiYENMyh#ki Ն
-S<{&OE G9)>9oIJ! @nyd;{k Cl6hM}'бyx2gA q"Ё|Kpd p'䪡WR<sS CMM$a3GQ=I;x?\y
-BA\Բ>;|Ȳdm ڲSyvjDfPRXv}ǠïdPm'c.ۦY0+osn ďٔ|XS g>N[KӉ.K
-T4@Q?ʜ'FTy)bIm= lxkJw"^ jҹyMA8MF4&PC +9ĘT>+bpF: ,^V^4(@=!!|5N{ȞyC0"n< M9Ɉ4Z^+u$ǘrl1oHޮ;Qphˌb{2ùbIŘNjǚZ] *'T6_8F -=T{8͍WqVa (ɯm4vqѨ 1+g;'Ȇ'f99OEclVR&p+K|{5*K-`߳|ا ߿[޽_1{]g߉wcKng%ߒh?x_K> X]Qen`Hh?I<ij.Q1.-ѺQ[F)h(:OxcH Jh*#6Z*rݢd$s\rZ+f/Ev֤@<Ժxj"|C &]HG2Kq&zgR #سq<`\F!Þ7;H` nF8Xύ'J'/ -8*11}}"YCHuSUy ?}^6k_-ʼp}e23b`9%o,֘ɟm |+&ghJ鬺a4~ys:8 Man9Y%T6E!Rk
-vUYi&7TD*^4f4IZIqnЀDQ(*kJ.G5^
-K c ~rqBYʌu5` wڻG|'5ȉ G u#$O~Z?\
--!LWXw @*$\
-0DJdZ%*5&j#M ;&t2аTʛ{$CT/M 0C/)_%B5TO\P͉_WAb==ZL6n25''ȞuWD_zO
-|yCp`A_s [eLBKsZN$Q"a4Y$
-".:pˇI3S.ʏr{ʣ8ix8-Py1)*U+&v‡o(Ke4xWgհNaq>ar 2endstream
+xڥXێ}W~1Dlvf kgca;9JV"ԎS( ;KuUu^
+l2+#6VΔe]/= 0Pql9J[>ƨ*}(+'c^/YHo?ŻhJw
+2IqHfa _\fZpVv(枏U72䆎<,&nDitL'm!@U-\ 3F0:xP|?2Ls*os\'ۮ%Zn~YFWPٱ379O/8< @qFIy&_#~9Zχ5epШ'Xp7{rvHrhr;*jS"aaR q E"3Ÿͣ 0di>yChܖeKxoH)/Ͱ =/-Flg@6rDuXp Ӹ npڰ $aU@\кk+g5 8Crܔ#YJp'ĻmiB<RBӔry v&!n۠P BH9)rGļ;°a(l8@b9U*
+xZb?E,(7mW~x\s
+tⅡQINŖ Z*
+7cēĤMwDoj'uuV
endobj
-6421 0 obj <<
+6898 0 obj <<
/Type /Page
-/Contents 6422 0 R
-/Resources 6420 0 R
+/Contents 6899 0 R
+/Resources 6897 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6406 0 R
+/Parent 6885 0 R
>> endobj
-6423 0 obj <<
-/D [6421 0 R /XYZ 85.039 781.388 null]
+6900 0 obj <<
+/D [6898 0 R /XYZ 85.039 781.388 null]
>> endobj
-6424 0 obj <<
-/D [6421 0 R /XYZ 85.039 761.463 null]
+6901 0 obj <<
+/D [6898 0 R /XYZ 85.039 761.463 null]
>> endobj
-2538 0 obj <<
-/D [6421 0 R /XYZ 85.039 761.463 null]
+2630 0 obj <<
+/D [6898 0 R /XYZ 85.039 761.463 null]
>> endobj
-3035 0 obj <<
-/D [6421 0 R /XYZ 85.039 671.062 null]
+3168 0 obj <<
+/D [6898 0 R /XYZ 85.039 657.513 null]
>> endobj
-2542 0 obj <<
-/D [6421 0 R /XYZ 85.039 671.062 null]
+2634 0 obj <<
+/D [6898 0 R /XYZ 85.039 657.513 null]
>> endobj
-6425 0 obj <<
-/D [6421 0 R /XYZ 85.039 642.326 null]
+6902 0 obj <<
+/D [6898 0 R /XYZ 85.039 615.228 null]
>> endobj
-2546 0 obj <<
-/D [6421 0 R /XYZ 85.039 488.273 null]
+2638 0 obj <<
+/D [6898 0 R /XYZ 85.039 434.077 null]
>> endobj
-6426 0 obj <<
-/D [6421 0 R /XYZ 85.039 458.869 null]
+6903 0 obj <<
+/D [6898 0 R /XYZ 85.039 391.123 null]
>> endobj
-6420 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R /F56 2890 0 R >>
-/XObject << /Im1 3957 0 R >>
+6904 0 obj <<
+/D [6898 0 R /XYZ 289.538 274.021 null]
+>> endobj
+6905 0 obj <<
+/D [6898 0 R /XYZ 85.039 178.043 null]
+>> endobj
+6897 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6429 0 obj <<
-/Length 3306
-/Filter /FlateDecode
->>
-stream
-xZK۸ϯP
-p۵&%P
-`7)I_dזwlH-꽰p I!J/`:P^)6ahк!yXi&Z9\bo,;inL 2 fq(-G|yl]to彫'<شI,@&D \
-*#sxc5֞+{ģ.d Σ>޶;\5lnQhb&e<̔2L6, ㇺ*<7@hqps*ȃ^}9(>e)jD
-c##J
-?H?f.zbI㒡1
-Zp6'<m# (oƛyb8 91^c7sΑ0ަ"7rp}\OH"Ra7S]·ZG Y&s9\'
-ȃJ+ZۖFMOY(_N:12pNcELߓ5拒FюmY/m:d
-"64B<ߚӾۆ)+~]QW]z1Oer8&ۓ)V؆Fb)_;ק#LPao
- @&C}HH&E@K2zLiY31d3w7!Ԇ X0m\sL|z^Ul:[N\88mc0XW{JhdʩA^6+Iğ\bW/E.CR]&#Z0h~dgSl<*P0w)
-u-Wct$BTlU5\)τ0E17D8ĚNpX~R*t\ ;MrgχDPozhVLF)TRqyY]ڀn=?G>T{#j=T
-턷ۭ֖D&fh6v`{{gt>a~;z|ٲAnݝ,{2kω6rs]ۗKAn43CD:Ag!SBt3>i$U%CQ;Ѩ[8 |&ihm(`OLY visqXA ߒ=~ڪlʢe?Rj[K7rc}{IzqKHINB`JMݸavo"~ï㏏NIKu`=7O
-ߥ7c<aH<~<;xB٨f
-Olxt\ʢ{-'6WK0&`Cc&`]h@ \/Q校(r<#2FSj>0t9ąVa[lA/^V,GG>B #ϷCQhgQzzƝ`W!S."[
-+5za\|0WjbyN慄 $8P`6:r"||0XedGf‰plj±Oz\t"MUR'P=6Epty])a#4SWY DLgW.;~*?SUTݽ@
-4z$cB=rg~ C~$$zew%m"09s4_&Pu}\6%~wv@-wt iNNm!xZ' I@orKvJma)-`0w_izl8H2\Q.On5|t'֤<+dendstream
+6908 0 obj <<
+/Length 2762
+/Filter /FlateDecode
+>>
+stream
+xڭY[oF~R
+(I6faDID(CR܆Z. s9sΙ3߹H-S,/L:U8̏WJ(VBrh^mod?f?(֋7O6o>.WZkOkJG>-wkE@+6?6?_ "@hZ|`
+|g{hǑ~}+jnӱ8ӗV̮vKGGǩw#2̼G'^e2 ^ox?j\V-tL3'uPv< SϜI[nq"<Vw 2*
+5SHۖAAyU&-pNxY5{WO'$bIfڮX3B&rMRZ>r1[CAZoQg7E/:|ϝ_t(lYbQǺAȎ_ܖ ɸ:JUʗ_EuL%@ "/.ruݙXBй x6> "xvVI*[fylodO`nb3M.n~2~2<>
+-X
+Yy7._FIgyHWS4.WjEpjD~(+|zDeńˊi^RrV̂/ґt͑o n)S5,MәZ~
+5~CA6v `o@Ba]eZQr% 30[ej$x`4wp/ s|5 vlĕ##< b!L0iX#|8ĉ8*(
+B8Ơx ^dl=*ld!DeLϑ2}3_zz{RAgq4K8Blq"!Pņ
+[<Yv8=/o• 80 ΁!ξL?.
+:+2.DۇL ܸ*Y5\5R r}U6`G\=j_.l<1pU[A10?֕4[$pn\WlйyaM%?Dd'E;Y[ҒַnOk.ZvKƪ X_:^–&'0>ZėavƲ$Jl w|Iw7µj`G$]2EИsc+ds{ qss8SI;) qZ9pI`#XP'K&ws|fq*:'Byy4«XwiϮJ _h̔ck A@e)96~M1OWt,⹊
+;C[9<_B7[DG] jܾ(Χi[@@OX s"%T@aSJIJ8=kbh(e@p2=4ѱhcd;$Rx}A24$=9X매xTqh\YHV^  L3UhXqOϬ*4,ae>X4gsM3g =} 3
+3}[%-@bC>s۔ ﻊ Uc"a|vb_+yNAĈ{I05vçJ|
+|/{K?:/z| * mO?^(Jendstream
endobj
-6428 0 obj <<
+6907 0 obj <<
/Type /Page
-/Contents 6429 0 R
-/Resources 6427 0 R
+/Contents 6908 0 R
+/Resources 6906 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6406 0 R
+/Parent 6885 0 R
>> endobj
-6430 0 obj <<
-/D [6428 0 R /XYZ 85.039 781.388 null]
+6909 0 obj <<
+/D [6907 0 R /XYZ 85.039 781.388 null]
>> endobj
-2550 0 obj <<
-/D [6428 0 R /XYZ 85.039 650.648 null]
+2642 0 obj <<
+/D [6907 0 R /XYZ 85.039 530.827 null]
>> endobj
-6431 0 obj <<
-/D [6428 0 R /XYZ 85.039 624.034 null]
+6910 0 obj <<
+/D [6907 0 R /XYZ 85.039 488.542 null]
>> endobj
-6432 0 obj <<
-/D [6428 0 R /XYZ 85.039 610.485 null]
+6911 0 obj <<
+/D [6907 0 R /XYZ 85.039 461.443 null]
>> endobj
-6433 0 obj <<
-/D [6428 0 R /XYZ 85.039 469.804 null]
+6912 0 obj <<
+/D [6907 0 R /XYZ 85.039 292.452 null]
>> endobj
-6434 0 obj <<
-/D [6428 0 R /XYZ 85.039 232.632 null]
+6906 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6427 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F20 2865 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+6915 0 obj <<
+/Length 2880
+/Filter /FlateDecode
+>>
+stream
+xڭZݏ6߿ȓ ZQ$͵];k˻BdɑE۠ (j83oE"OH,Wf-nˏWJ(VBh^ ET,ֻOD/߂7?Jkh.WYǥ
+^ ~ o+;^zTdB oD-hU"_8
+|_abW=of.mig0&6.N:u|Q\Fy<ɆEGB=R*M$RP*,OB,Lx ů-t@㖧Vɣ8Ty<*LQhƤ-~WZt1S<Ƥ=QI&[d* 3.WqlˮH}Հ|U{:EWM?غՁxm,6uupxSB~ºc=&:wǸGa*̛vۆȵko%w0a&]dJY~!jXfh?!+ŝg|%]x>=LqkXۜ~gAI<Z$7H&I<)PGVgfPQI8Is4ϋsQp28Qx ~o-n
+/Xk{#GȍJ࿘>Wx"8°X 3o:)o=5pq{E[rQ򣞂H|NķAʗeeQJqAO w;1f_& e=M$m
+6@nh7O2eUb~Awyl30Ey(+ؔ6MuNfecMĘ{]ɓָrd{^7jud 0㉯~ /qְ2pL笕 N25mEipDie_f&Ftn%
+: }hw<bϗ$$(!idXX0* 솣OB1`ٴؠA0E+7'&gpә`ͣ;+eP~^C>: 䡤ꄵ0XPr:rs' ҮSsy"T}Sq4LtLP.YqM%Ǿ_$s8td0y}QAPJ|)U^fJ2TE^Nȳ)iLh(rwdxL>fCVU` DrZwZC]BᄔLuo!6}eQ݁ f|V0>l81_hb(¹U/Y{ *dTl٠ΏXϱ["6yhAX.%#Ք(ojh0r ³;g!Jnn_"H1qp\}%ϱfM9 Lƒ]yL`*e$'xbY+{5!H y7,lNP?I C@_Bm*&n ?1\sS&G>D.m$)Q
+(̳BC~L+O0Cm]0OD@?b舔} S(C I+=s{&/(5qC9Qʆa&σR@@q@ha(HeeI*ϦHye=\3IK滙G"醊 Vtw!]u9nO*;~Rqm7
+8?‡3dԡ$s2
+
+ y*Yo>ٸ(&l\#`,#H1kkނXm& :
+h!
+0i)>)0VN<0&:\+endstream
+endobj
+6914 0 obj <<
+/Type /Page
+/Contents 6915 0 R
+/Resources 6913 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6885 0 R
+>> endobj
+6916 0 obj <<
+/D [6914 0 R /XYZ 85.039 781.388 null]
+>> endobj
+6917 0 obj <<
+/D [6914 0 R /XYZ 85.039 675.066 null]
+>> endobj
+6913 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F15 2976 0 R /F62 4052 0 R /F20 2965 0 R /F58 3365 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6437 0 obj <<
-/Length 3464
-/Filter /FlateDecode
->>
-stream
-xڭr6_H[M}ILfcVy%b"<$[}
-,X+KLQItM#-C
-~e0"LO(%Wб;wtwr[
-=`S|;eU!ܒV5 .GsW+d4kOMp͑ .E*3t'u٣e %c{Ӕ(]Woqt$[t { mXlV-1NO%M "Ft<ϫrК vNd2p״huE2Lg۲~[hzņQ[*oxGW{@
-u A|;V
-t—^v%bZ3)]:T_C%es B#1Zó+YiyWmM
-a;0>
-^2Am`Ζ(YqTlR=
-`( &؋>'Y' M䰾\G^LDəqlxY4J8ؓTQ 9RC>Jѱe Sٱ^D6A$srBTg.(ce S8(kϥ>cc[Gj4`&'۵wdd kq%S6*y<oyK՘8mGY16b*IuWQ\l:;H..iN UŸ,ΞLǩ aԛn 9(]>ް.₏tywskto-_|tXt[Md}A`ݸ p6l;AkCmxznPq!J>H{>%H
- I]$\ݮD=Q"p^BkDBNiȋju; Tj@Ə{r6CǼ:WR{*1¢%fؾ"?0
-UdE }:2n4qm3%TލD Ѹ$VQ Oǡ1qE:ՐgL0M|ыrEl$TMcCPLS20sŵg^
-bw8N-?B`^6ͨ7B\ GqbW
-q[imdpI97~f0JahTG4 O2`&Y%2 _fx>+VpxLdxvo7_vtFq # ?eҲ
-endstream
+6920 0 obj <<
+/Length 3150
+/Filter /FlateDecode
+>>
+stream
+xrF NVMR<2Jrh 0X,m
+@Ǫ@Ts/B8\Teې\Ap=":*
+i^L4W]GUm5Szp'^wKDxe(RVUQk<$o\wS*$[GfO{
+
+Ku0ђ6!I&BW"%FZ9FUv@y-"EJ2{D[Uk&~BPo*\W+SZhoNh=3(\9 hbWmYfZ3oo\]aӪe(lKx`<\xdGj ~Y<eo K)2tM[+1οMR,~@\
+<ģw&cBUuW\i_0&G.-tɱ^YD93CŵF_L5)`L?KN⻖g-E'I,$hd3rHSdGm̯a
+2$YYF;E9'b-ÄD콤vգ8ˀJ&yN9ZryA|Vۥ8p<`i0,K
+훀xxGV՗1ZV<*I4 5UW#ZSF HaNDrtpLe|MM
+jJ\3}Z UH GՀ=5 R^ װ}C|WKJ;}*]bw1`;|j||Hyiw.kD7elI;Q ng`Rc3v.^T۾xW+} ux[X8m4# GN%&@D_,oOK g"D\$(
+93R-Tx >x {.m1iOf ǽb`aSP^jS{jY }M{Ƀ`xכD Er Wi2H;h؃XK^cƹ&0 PlRhE?aXPsq/9QzS^gubq%4gM0) 4*]<_T"C|FH{ݸDSX=>s 7ngtKcӥ&X{0ǎʙ4{S
+@/$ޏDĢLy !Ŕ*,R^0dR)sD@@Q0&gw /pc5@Jw8k4]结kݶ]/E)]K3O{=9;i=\M }BsSz
endobj
-6436 0 obj <<
+6919 0 obj <<
/Type /Page
-/Contents 6437 0 R
-/Resources 6435 0 R
+/Contents 6920 0 R
+/Resources 6918 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6406 0 R
+/Parent 6926 0 R
>> endobj
-6438 0 obj <<
-/D [6436 0 R /XYZ 85.039 781.388 null]
+6921 0 obj <<
+/D [6919 0 R /XYZ 85.039 781.388 null]
>> endobj
-6439 0 obj <<
-/D [6436 0 R /XYZ 85.039 210.005 null]
+6922 0 obj <<
+/D [6919 0 R /XYZ 85.039 599.342 null]
>> endobj
-6440 0 obj <<
-/D [6436 0 R /XYZ 85.039 117.585 null]
+6923 0 obj <<
+/D [6919 0 R /XYZ 85.039 463.85 null]
>> endobj
-6435 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F66 3242 0 R /F56 2890 0 R >>
-/XObject << /Im1 3957 0 R >>
+6924 0 obj <<
+/D [6919 0 R /XYZ 85.039 371.126 null]
+>> endobj
+6925 0 obj <<
+/D [6919 0 R /XYZ 85.039 124.514 null]
+>> endobj
+6918 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6443 0 obj <<
-/Length 3729
-/Filter /FlateDecode
->>
-stream
-xZY~_!2<@xk{(HIHLR36@jvW_u|UjO͒L:$Wl-_^)f^.nL~ŚHޫ>{xv~mqx^s\y}3@_ͯ׿bb׋ַY`¾
-|&G(Jʆ߻Qθޮ|C~)e|X4T8?BD6 5a~mm[P0Vȴj97sx]5ֱWݟ\-zhemq)g o=:Bvn6P:*,$мYJCq-q*WYJJ\T
-ifŞPC.9۠Lz 1O^xRe;nū77o#>?s+Z'jƝhu\U^ҎW^ |
-7قUƟ P\Xe
-C}4z:C0`Q⑻HA~ٱVע,]
-IboW6-
-gf҉ߞ nl
-#?֡tlPdĵʇ9Ʀ<f8~2F_갞˦G"#)#K&*%X;PvC]pH@_hn{sD3]b:o׼H GR0:&0]CE!Av#^nN$ n,
-F9D#O ϛi)iay0>umr|+!oN82_CBP?:{ [j-EtduFQ?Ks#-= 奡3CCu(:bX !Ktݱi(aXL
-8gCr J<>VhYKy?
-בCD\ކRA4m}ZQꦿI ppx >/Fݞx7Œ!Uw}G='}(G(CVG^6y#QG3\m)6a鱂:8VC?N.sҡrS{KOsP0iW
-̩D~89 %ϳЎnLh "^墤ط\dbNw)$n?ȡ(HGypH9ƥB/iGA0 urw)dgLoT{z FDVi\D`Eo{_"A1Ѝ*CH/%5pjKtE@YȈ=V`X*7-ꚺ*,u0NR <v?M C+JyJGn=jwPwM9W/soͩ> {)T9\h1IգzՇ(ھ
- 4JW`8-/w{ӂ_W!;;'zoߨtϬnēGSUxj9R]
-% üR (DF.dL9R;@{wlιUnN]I:-Ĺ{
-.rs㷛؄k`Behx) 0ؖN<6x3#DgP?aendstream
+6929 0 obj <<
+/Length 2630
+/Filter /FlateDecode
+>>
+stream
+xڥkoq@
+h.|(pv6ީ$(XSBRϼKٙyPY.SV8N(Vckq'pb)  $nbm_\=|Z,ֶbEW>/wx_,<jǛUHO&7Zp$^ulo '𵼗7oգ=S.{E8_'cx;K!º\DC\@O=ŲTseUk"-$PJENxVyUT@;nV<B'~IfLעǽSk,]*
+B'#+L\'Cb.ZDvݶ9t5C)r~8m@< /WSDVWORt;9Xv :yS!eȇ-eI_pZW`f]kqeW{x
+_v{/?$21_/-߶ɻZ
+ (0)ܸN3ACII; T3#QenC{tȸJ(Mib` Ф,;3TzLxW7P'$5d,IBRRahȂ,8jL"+q-Ic8X%ܻ5@꽠Z3g_.@@2Q  WfE)DFX ˢLg5֊GBBP3 0
++U tl(N1#PCM >UMca]&^輇Eac nd:KttLr zaA m\2^ݤIװV0%5IQR%ʫE9ii\I
+#$tH;#O%h&pѬ9Sr]qƝ(C;Iyr *|fQ.)儾#7 к΋~
+R_S/^`/Sm)yXGcu\@<
+&gRFvG^hK>
+:",5nBvhUBoc 1SOPh؝@;'gHȵWTi4^b]huiM e vӧ,@Xx횣Xق]> &|rqA_mPSϼCa 6#^om0+L,CY(|Ibt.5O3QЙ@Ù2w.LԼ(|n79B
+hs <9Lʷ?DfSiV?>*߿fe쫱SG>3"{J)?V9(IH,@W܇ͻf!T`~ ~eu˛oLVp1&<N#⛐,Vp@W34h?
+\
+Zo)hQ
+hնe"sؘ 
+<=#{F]$ 0 aT:"'f٫E)_/s1-1&1g?[mdf^
+ld* ΍vX35:W!P$yC-]=f[G3e[SP%;I4O`N]'&2/|5 4$U4}G N
+ A6}UMb&G6kxlKH;+ff0WG%sA=3葇chBU}0JK$Բ4_$)5K.U0 Eq O}Gk'bay /('h >aendstream
endobj
-6442 0 obj <<
+6928 0 obj <<
/Type /Page
-/Contents 6443 0 R
-/Resources 6441 0 R
+/Contents 6929 0 R
+/Resources 6927 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6457 0 R
+/Parent 6926 0 R
>> endobj
-6444 0 obj <<
-/D [6442 0 R /XYZ 85.039 781.388 null]
+6930 0 obj <<
+/D [6928 0 R /XYZ 85.039 781.388 null]
>> endobj
-6445 0 obj <<
-/D [6442 0 R /XYZ 85.039 761.463 null]
+6931 0 obj <<
+/D [6928 0 R /XYZ 85.039 571.122 null]
>> endobj
-6446 0 obj <<
-/D [6442 0 R /XYZ 85.039 585.186 null]
+6932 0 obj <<
+/D [6928 0 R /XYZ 85.039 530.475 null]
>> endobj
-6447 0 obj <<
-/D [6442 0 R /XYZ 85.039 362.17 null]
+6933 0 obj <<
+/D [6928 0 R /XYZ 85.039 502.77 null]
>> endobj
-6448 0 obj <<
-/D [6442 0 R /XYZ 85.039 335.072 null]
+6934 0 obj <<
+/D [6928 0 R /XYZ 85.039 462.729 null]
>> endobj
-6449 0 obj <<
-/D [6442 0 R /XYZ 85.039 320.917 null]
+6935 0 obj <<
+/D [6928 0 R /XYZ 85.039 435.024 null]
>> endobj
-6450 0 obj <<
-/D [6442 0 R /XYZ 85.039 294.424 null]
+6936 0 obj <<
+/D [6928 0 R /XYZ 85.039 300.138 null]
>> endobj
-6451 0 obj <<
-/D [6442 0 R /XYZ 85.039 280.269 null]
+6937 0 obj <<
+/D [6928 0 R /XYZ 85.039 191.139 null]
>> endobj
-6452 0 obj <<
-/D [6442 0 R /XYZ 85.039 226.678 null]
+6938 0 obj <<
+/D [6928 0 R /XYZ 85.039 164.04 null]
>> endobj
-6453 0 obj <<
-/D [6442 0 R /XYZ 85.039 144.777 null]
+6939 0 obj <<
+/D [6928 0 R /XYZ 85.039 123.999 null]
>> endobj
-6454 0 obj <<
-/D [6442 0 R /XYZ 85.039 131.228 null]
+6940 0 obj <<
+/D [6928 0 R /XYZ 85.039 83.351 null]
>> endobj
-6455 0 obj <<
-/D [6442 0 R /XYZ 85.039 104.13 null]
+6927 0 obj <<
+/Font << /F56 3230 0 R /F64 4117 0 R /F18 4120 0 R /F15 2976 0 R /F38 3001 0 R /F58 3365 0 R /F35 2980 0 R /F62 4052 0 R /F41 2998 0 R >>
+/XObject << /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6456 0 obj <<
-/D [6442 0 R /XYZ 85.039 77.031 null]
+6943 0 obj <<
+/Length 3117
+/Filter /FlateDecode
+>>
+stream
+xڭZY8~_a%20%RyHLf'A6ilAmnm˒G~"E
+ɥG&](,bqPdqǫ7II./,~}#*xKi ~Kw8wvś+B ϋߢ4"
+"_A;
+L.@D:V<jn&C'V۵Rqx(4m,/" qtl+ȝnq|_ l^t[ngA-ӷ,wȧ8=$H^ȭƛu-^=;i)}_ )ȶyeV=]*<ςXfIjFyjjP#^ﲮW8<︢BRye}?֫CC`Xg%jOOBM~~~';hw7ݰ$}yw[&1?4 n:ˤ$ɎNq}hcF`t#]2վV*{1qF| H`oȍt<EWW
+6vjF}VAQT\Lv˱ <0_ڶZM
+fL)`& jq$~"Vӕ
+9 Zr(fM$w7
+Ր iZscNO6LkM7yǗpWpPݢ6^ KˢmDfrK 2rSؙ:d}i!֝Qu_u!];r[ȔGK^lrfp7l.Сܗ+ֵʖ;@d.` 
+ Ⱗ~[cAؤMt=|61}ǜ_wŭLV'ނK;6Ի)=#)!_S4]Uܝ#{?:rIoD1 6kPJN
+[<WX)ോ#)_/*t1Q?%[ʞw}gWO3[/[2Xĉiu.2iD@r֭gbMÞ˃b;`ŵb~M%kOB6[@-0IУ9GE&Y10an'YY8t37ANbv|0f=8k d&ɼlߙa[W~R)
+Vԑn/yաYa]ۑK;0dXK[SQٺvm-,QHNŸpdR<dȝ-@(Ԋb3aVib +I<G1'?( M` B Yl<r  J(8k{DInr.Qܰu\,-L,*%{K\fUw{tEe{)w!R%M/侖*Bh
+4B
+\n?t;6%Ƶ'?8c<
+OE6zE6m==6.^)Ztn
+? LX xI ^
+*a0(/agHˏ-"}` NqE8 PUZt&tKE:Ԉ`H<?`LN*,\r=ҺTyqmL_
+C4q_ܷO-o,syL2 51lOfRց/ikO=.ġ/p=w<.P[]><2q~ad|TiIH{SVxtp٧]{*M=ӑTXdCdb;5~ʣ?Z@XKOBlUiɕx"A2:xܘ9.yOo)Ƥa*tXُr! l.-KL*2EX$:~8{
+*5G/2+Gz/K0C AѠPCOPvW9õ-x,W0U<c0E}WGa\́ YO␑N<)oq+ 9T_/g
+Msendstream
+endobj
+6942 0 obj <<
+/Type /Page
+/Contents 6943 0 R
+/Resources 6941 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6926 0 R
>> endobj
-6441 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R /F11 2898 0 R /F66 3242 0 R /F14 2895 0 R >>
-/XObject << /Im1 3957 0 R >>
+6944 0 obj <<
+/D [6942 0 R /XYZ 85.039 781.388 null]
+>> endobj
+6945 0 obj <<
+/D [6942 0 R /XYZ 85.039 598.736 null]
+>> endobj
+6946 0 obj <<
+/D [6942 0 R /XYZ 85.039 423.202 null]
+>> endobj
+6947 0 obj <<
+/D [6942 0 R /XYZ 85.039 301.259 null]
+>> endobj
+6941 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6460 0 obj <<
-/Length 3332
+6950 0 obj <<
+/Length 2394
/Filter /FlateDecode
>>
stream
-xڵZoF_!\!ͥۦ%^hxHKKʢ33Z-"S< #],\:E %3 4AwW~"*W74j[~Xցreyp[Tw߽ƞofRϿ\"jOo&LhRqbtЎBUIt-?.L3 ^5#
-h+yn*ϲaAwζB9un$Aـxm5e]+0&z&\3,ΰF8r`EvmONw ?JW-xn\iBi Cl Ll{`Z}_dQeEt .
-/[r(!^7{EvDg=_Gnƨ;7>V"!!1: #Sz"n[;CɄ*u;GxXmcHC m9āYGr ۭ{ҹiYk.MVnw-ܹ2EvC7Hn㉗/t_qu7@g\: kkaG h+A3/NLDǒAGw.Dnt=ƠM &tV$8mtGn>tFΈIdu8[W7H'^Tw?z;H# wK| u\E{ڃ"۰2q>;k7pvR9 ;uP<^Ma_qWí^L-k4Mͮ"ӽUJvq˝1D;!5S{ i+g3חWP9ݜs1GkHHHذln6aS8i8AӸF$9aA 0ָuxM^cx9gXc2P]g
-T>;M.o gy=#E=^"9q2_DSTLƪvR3#BK{p U-gvtb"{.d^kvMб;FvM8,91eFk8gIaqر.ufC[4,g_eu f'>%1J^W
-FpndD<+0xo`şqRW2AF4Hi9m:~S띬oۓxD%vPgo&x 7 GUN/XcsٻNDqU7_ ̂LtM(@s2ϧ1\@$H/\KC}8ݘl@Gi㜋)$P4;5rޡ<}jU]'$\le<uWJ㦤&
- tim/Xj3:.Ky{WDqhTv~,|9CwZ@ Pz R~dx) 4.E5_g %L=~ȗ=%
-_7S4b~zֽ7:rL
-iA|dl#ϴ WrwX':IY\zl` @(ǁF|$
+xڅXߏ ~߿b
+Lm%N{vA8w#ˏ$CH(ȏMB?sS867YQlwME3~g#Yl&avJ$__3k܀燻w>MīUvs$.
+{sgbim}\0XwbVKd0#:i{'"3
+P,\X|< ߯ AO&rGiu3r쿝l
+m|ξLU#5{!h6zdenp`L-lGA)F7UA !wM+֍"]ۘcb^|RlhR;voiMZguVBtX-fFfؒo$z0F4/ؕS}G :Wr27Z0 aV,jٔ9_neo`ޱy'|2MO 4DEh۳8zh8<SF
+f ͶC)']ê|E*\7a3a7k
+Qq'$6̴XG`_Ԙcu`ف6Y&jM`K+!6Li8H 'aD9t<KaR{NԆU!:@ EV\=9nXFqH;zsYlD }J-trW:$*_1NV
+D'!kɲʤl_Đ@ީcJ:GƐ#0VWQϵzjUR-$z4Ҭ٢DʭoC9okrW6ץb tD{Qw'T*C8mXX(e/܉S:O}NVkNIa83VC="1t.&{mpgZ~ɮoHaτ:m5WF'/E5;DHIS0YZ1ޗo,`
+kAo8(Ngd?:<ŬNb/z0*I= k 9`܁bӀ Si<8Fh-` zDXЯ7{cLr^p!֯a.ʟl?HLHUKVPn3KHOıITX+Ueʓ%cwCqzK"؂S-2:t4Q'mќ"z)
+& :S^_U>ˏCGq* a:V)*TټIPĹ@b?8|px~w]2ۆ
endobj
-6459 0 obj <<
+6949 0 obj <<
/Type /Page
-/Contents 6460 0 R
-/Resources 6458 0 R
+/Contents 6950 0 R
+/Resources 6948 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6457 0 R
-/Annots [ 6466 0 R ]
+/Parent 6926 0 R
+/Annots [ 6955 0 R ]
>> endobj
-6466 0 obj <<
+6955 0 obj <<
/Type /Annot
-/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [212.407 214.44 369.551 226.13]
-/Subtype /Link
-/A << /S /GoTo /D (problems) >>
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 47.098 132.399 58.787]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.tcpdump.org/)>>
>> endobj
-6461 0 obj <<
-/D [6459 0 R /XYZ 85.039 781.388 null]
+6951 0 obj <<
+/D [6949 0 R /XYZ 85.039 781.388 null]
>> endobj
-6462 0 obj <<
-/D [6459 0 R /XYZ 85.039 625.834 null]
+2646 0 obj <<
+/D [6949 0 R /XYZ 85.039 761.463 null]
>> endobj
-6463 0 obj <<
-/D [6459 0 R /XYZ 85.039 479.52 null]
+3169 0 obj <<
+/D [6949 0 R /XYZ 85.039 653.963 null]
>> endobj
-6464 0 obj <<
-/D [6459 0 R /XYZ 85.039 382.554 null]
+2650 0 obj <<
+/D [6949 0 R /XYZ 85.039 585.392 null]
>> endobj
-2554 0 obj <<
-/D [6459 0 R /XYZ 85.039 257.722 null]
+6952 0 obj <<
+/D [6949 0 R /XYZ 85.039 542.439 null]
>> endobj
-6465 0 obj <<
-/D [6459 0 R /XYZ 85.039 228.317 null]
+2654 0 obj <<
+/D [6949 0 R /XYZ 85.039 460.265 null]
>> endobj
-6458 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F14 2895 0 R /F11 2898 0 R /F20 2865 0 R >>
+6953 0 obj <<
+/D [6949 0 R /XYZ 85.039 425.519 null]
+>> endobj
+2658 0 obj <<
+/D [6949 0 R /XYZ 85.039 111.856 null]
+>> endobj
+6954 0 obj <<
+/D [6949 0 R /XYZ 85.039 74.989 null]
+>> endobj
+6948 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F58 3365 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6469 0 obj <<
-/Length 2824
-/Filter /FlateDecode
->>
-stream
-xڭێ۸=_1Fb(oI&Yl;nٖm5A﹑mbsHVw,ߥuݭ7 ?Qڏs 'D%0Txx) O}bOGlǁ-^:I͕!
-uCE+_w3:4$L`)La:gY$cx x"k #;Yfg L_l:>l
-O+D0
-[#: /{p3< Tko[eJ'Lxց4 rwH3᱆F~緌T~T(9q6E˽G{km0 Ou}g&1cK6)6
-g$3*I<d`!Z9\R'v[u[!:5bX |E tXa(yUSg19)>8tq*2au{p>^i
-6HDՑ'eby 7,Gà0Zn{' y!=ȍm].,Q\j-(yQ /O Q%AM$92nDЄ'.mp'a[ԑwj2nmTQކa"k^!:.`eQյb#:jZ2yrRA/7jS-s
-D.Ňfpg0nUL$p
-AE\(jz(Y;b:]qL@8xXuND:WWC
-[ڽǂ[b2Qo>eP$QIHtk+v'WXunQ:,kctnW\J֏XE]s>WSp:1 ;(;u;FRZ챬0@S(].{ZH8"[D͋/0"M e_'
-6 ,Gۈ5ÈR1y;N'xS|{3V]ZKYM5.>X1LL_ϋe]ʹGjj(S0[<#:ĀrTp OUN J!+`C0^R=M1b4CMNI-G\v ́P:~#|5Y-SI$=&oG,SNQqko/eW_1z$TLV'KAdAo5sR9 !-YU]U%RȅA=#3(΄
-[\Kw;.[{:&p/!z
-|Gr.טbB.c]r%Jc!B)-u VcUꙔ$kg%:O' rd^)r{ 6"=W{фD*T2:qXV
-T6 x(˕ʋ'C698 qRIf4pH!,%~})/?C%|d,W5K}xG[e <o zl,e Mwsb|zAѴ$IC j/NŊ@li{Ҧi
-=UjN!VP~Fg#1D?<<<??saj\d޷$(
-Ю(c7=R1*Z;X
-kxUSIQK&T4c[ȹog;4z`
-ʦvTҮ*b=YYOt*!.9]ȴ?sZC 4>W
-i06}xe'p>YI
-t
-9&.R:Ɇh
-8+ϣ[Q egco"=T w.ѕ1OE2eE6=Џ 5>7t-UmQ05 FDO3z5a"#kxq]c`KL0'6#*I@~6Sv_
-V]j"i
-]E^ŖVd H5`XFORp}ꭌ;R HljWK T8PʇVkEWA]:
-\n6P
-YP{/Tg=ιS賎|"O
-C7endstream
+6958 0 obj <<
+/Length 2718
+/Filter /FlateDecode
+>>
+stream
+xڥr۶_NN
+W6M&0p|s6?=aw '
+{ ((Uy,-\\
+|=VEӸmۡi wl|_ VEQ79FMW<^eMƣRjk#ˁQҎRJ^` 2d1u# |!#g&'l c^$﹃i[#Ɖcӟ3VneM~Mua)7Ý.k@܈90:^r8J+I1"ٙ1RE8ı ZUMOfhQA`w {A~ŔʩՒp1HԆ- xYnTct8<He$@ͬe zj.+
+.2"TQBDeSr8sd 
+7{ciՊW ~2_
+.+snBB%TMapIO9 w7<hNBPb' *t0N;
+
+l ÷%%L.DXpɆ
+ ?{i7ϚSvcҦZN[,kRR3e3t-Jm K
+mHQJ%WTɗ+qwk0fFd
+32w8Z_iDB,4>4.7"K 3@-ܶ6LQTy 4vК i BjC,.M91aq ~\i P)Y\(ߧKoB4)pH1$;@8+1pN$>)a,s`HAw"
+/;XL}RA`ˎHqД[2fGE`=tCܽe~ ~r-upb*1h]1AߧE#DwO<1.9SÐtݬjߤgGnpٱ4:!9};O`J^"4B2|6 > 'e?s*
+ X|èGCFlálBAR+?RI$p(Xi6{?M7ֽ>On&J \mM8I2qM%z(?wrT'_f|eLB&n̆ʄ Ŵ^,ARsWq(:=qtHy)GR>yɗlޱVB_Y>crtk3iJE 7A32͐8TqL/G+k?Ԁ;y0ies/xH pN[ (ۻGݦ `J"лVgXwa
+7nQNq8NuݑA= <^n*BYo*wp_Lj{Oܫ0ucBj"n 'N- $p|{ 2&;$=~jKnTc,3zX?Ϳc@p Ye]-X#.m7C<d{kf
endobj
-6468 0 obj <<
+6957 0 obj <<
/Type /Page
-/Contents 6469 0 R
-/Resources 6467 0 R
+/Contents 6958 0 R
+/Resources 6956 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6457 0 R
-/Annots [ 6472 0 R 6473 0 R ]
->> endobj
-6472 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [389.071 266.098 509.276 279]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.tcpdump.org/)>>
+/Parent 6926 0 R
+/Annots [ 6961 0 R ]
>> endobj
-6473 0 obj <<
+6961 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [137.104 239 260.036 251.901]
+/Rect [84.043 669.875 126.217 682.776]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.ethereal.com/)>>
>> endobj
-6470 0 obj <<
-/D [6468 0 R /XYZ 85.039 781.388 null]
+6959 0 obj <<
+/D [6957 0 R /XYZ 85.039 781.388 null]
>> endobj
-2558 0 obj <<
-/D [6468 0 R /XYZ 85.039 761.463 null]
+2662 0 obj <<
+/D [6957 0 R /XYZ 85.039 733.118 null]
>> endobj
-3036 0 obj <<
-/D [6468 0 R /XYZ 85.039 642.137 null]
+6960 0 obj <<
+/D [6957 0 R /XYZ 85.039 700.697 null]
>> endobj
-2562 0 obj <<
-/D [6468 0 R /XYZ 85.039 586.947 null]
+2666 0 obj <<
+/D [6957 0 R /XYZ 85.039 549.94 null]
>> endobj
-6471 0 obj <<
-/D [6468 0 R /XYZ 85.039 557.543 null]
+6962 0 obj <<
+/D [6957 0 R /XYZ 85.039 515.397 null]
>> endobj
-2566 0 obj <<
-/D [6468 0 R /XYZ 85.039 131.44 null]
+2670 0 obj <<
+/D [6957 0 R /XYZ 85.039 391.739 null]
>> endobj
-6474 0 obj <<
-/D [6468 0 R /XYZ 85.039 84.771 null]
+6963 0 obj <<
+/D [6957 0 R /XYZ 85.039 355.473 null]
>> endobj
-6467 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+6956 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F62 4052 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6477 0 obj <<
-/Length 3469
+6966 0 obj <<
+/Length 2875
/Filter /FlateDecode
>>
stream
-x[YsF~ׯK`ʄ0ʛ^g-k2I<@H 4
-pN~;a?xn&*MO7': PRN'TM 6̵~ &P?eOar-Fڹ,Wq-W^oyvYW2
-.NQt8iŪm[lz&͸/l>bm-lFuNeUL]\5Q)%Ny͋iim5%$-6[%ƃ- +٭lU$/ \).DmmHXqieNVrJL­RwأP` qD\vPGd$*ҵbJZGqV3rH*5-%F-iFEsS"𷜉,AqN_iS!ա <$M-xQs4D,lxNq?q8 J1إ*hvNǒ]S~F1
-j!7S>\EEzƜ0HتGlʖ ;d-۠l BꪐYۋOe+dJ9KHaXo..߽yFk((qckڧ-v&'-OT
-EFΒ `qz"J1KIF
-mkn L~_h)7XpZT-Tv pm g 瓩
-G#)(UR1nx vڲh8P 98G?a;ڙ>y^
-sPR6&28
-N867NOhw/&NO :9Y)޾>w5&F>wض›$q7ES03JaR?M;^Bmfq 
-JX4(p[P|vS,
-y{Nxtz423VWNU6j԰!@U$6}ϥ$Q8dpjdhsjP6{Z39Z4OmϸeIi-]jȝ
-UrD KHg Fx˫`,y%{.䵲+M^Ym
-(%ق!Hj.4YM Oel=N_wn tٮ`W:ȺnEkNv`zC!U}$Ձ!loo@
+xڽZYs8~K*
+&
+I}
+HAәJ'/VSpO3ۗUݚ{\u9HJ&Cy.3j?/UD 1LYxʚ*')4Ø66`;|Uya\bzk ߱XE`$v_c+ D<r
+2'[FpàO24';n%ZǷ98^QnTB\WTNQ1agMp6R(TBiU^r`9}l9mƯ}Uh JEO\޿ GOvgtpZ|:W XA<-i1G9zd<ݦK6DsO]7bJ J D!iFJ dBiCm%#@S)}mAhF!L+rܞ ͈= ѣaسq؞-׵a&
+1-)WZbvԭ9LDM
+7D*|aa8ۗ&?h! z11>F  6!pm4m2 ;ɱQt2Sd3
+7
+lV `ۤ۴56
+H~GuB}ϩStဲ?K\iߧL` pp21&cGNNҲ*
+BҰ2tdk~ d#=d4gKp&i=܅ŘNZҦ*5ed^n%uo:L!͇sr6';1ES%aQ&->Z`L-ޗg͡Ӻ㥍D<g7KO{y:u.3_xɁ͛ K.x/mT! i ^k~c'0g|0_BD|j"~ˇ>As4" \H
+C%)zf&+
+(;oe{,lOB` AM_ ͬE4`Jc9S: ͈Gxa=~f6JخRӜM:MKW"勾*P{@M3"].[y+w 7D\/6/R{!ǔc8([<fT@-T\6@WUe{x.yLMA%㓶-Pq?nќM)ck2
+O |A5aؐpgn9@J#ex9:V\x001$YCL
+]lGY&D˂*ՠ#BOϹ{s]Y8Ku *!i2$xHP LVWΊMB{kiݲfBTu??Гq+X/n;7-_еyK+cK`ءs͌wa#TsyP~G^n̊}_3]1/ +x§;9uO p,G@'BQ6Գl<$~op]GМz::XѬ/A nT5L\@X*aܴrLoǺ \&15_".&HK&xj-+(̷z>0єݚ:[ެE*7Hju3`l|ئIiwEu}D;59U;^j )6lUsٷ*Eq&I.Xkќ,c9:gsTBRYk vRbAb͌˭gԷ{̎Z()n"| YN,ʼn \IfO᥾J6}HEiA9TQ]):
+ C]TM0EN"e2:ŽUAc6笅>dF~2ZY n:-Iw7}^ =yaMqq! 0]ѹW
+l+ ғ^_^&rendstream
endobj
-6476 0 obj <<
+6965 0 obj <<
/Type /Page
-/Contents 6477 0 R
-/Resources 6475 0 R
+/Contents 6966 0 R
+/Resources 6964 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6457 0 R
-/Annots [ 6480 0 R 6481 0 R 6482 0 R 6484 0 R 6485 0 R ]
+/Parent 6926 0 R
+/Annots [ 6970 0 R 6971 0 R 6972 0 R 6974 0 R 6975 0 R ]
>> endobj
-6480 0 obj <<
+6970 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [376.679 337.371 512.306 350.273]
+/Rect [371.404 348.137 539.579 361.038]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.skippy.net/linux/smb-howto.html)>>
>> endobj
-6481 0 obj <<
+6971 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 326.549 194.521 336.117]
+/Rect [111.316 337.315 167.248 346.883]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.skippy.net/linux/smb-howto.html)>>
>> endobj
-6482 0 obj <<
+6972 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [288.68 310.273 504.006 323.174]
+/Rect [261.407 307.489 476.733 320.391]
/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://ftp.microsoft.com/developr/drg/CIFS/)>>
>> endobj
-6484 0 obj <<
+6974 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [390.793 251.851 484.421 263.844]
+/Rect [375.124 221.969 468.752 233.962]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.org)>>
>> endobj
-6485 0 obj <<
+6975 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [335.18 211.204 480.851 223.196]
+/Rect [290.756 181.322 436.427 193.314]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.samba-tng.org/)>>
>> endobj
-6478 0 obj <<
-/D [6476 0 R /XYZ 85.039 781.388 null]
+6967 0 obj <<
+/D [6965 0 R /XYZ 85.039 781.388 null]
>> endobj
-2570 0 obj <<
-/D [6476 0 R /XYZ 85.039 381.258 null]
+2674 0 obj <<
+/D [6965 0 R /XYZ 85.039 539.573 null]
>> endobj
-6479 0 obj <<
-/D [6476 0 R /XYZ 85.039 354.644 null]
+6968 0 obj <<
+/D [6965 0 R /XYZ 85.039 503.308 null]
>> endobj
-2574 0 obj <<
-/D [6476 0 R /XYZ 85.039 294.83 null]
+2678 0 obj <<
+/D [6965 0 R /XYZ 85.039 421.243 null]
>> endobj
-6483 0 obj <<
-/D [6476 0 R /XYZ 85.039 266.032 null]
+6969 0 obj <<
+/D [6965 0 R /XYZ 85.039 378.958 null]
>> endobj
-6475 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F14 2895 0 R /F20 2865 0 R /F35 2880 0 R /F56 2890 0 R >>
+2682 0 obj <<
+/D [6965 0 R /XYZ 85.039 292.046 null]
+>> endobj
+6973 0 obj <<
+/D [6965 0 R /XYZ 85.039 249.699 null]
+>> endobj
+6964 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F20 2965 0 R /F35 2980 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6488 0 obj <<
-/Length 2327
+6978 0 obj <<
+/Length 2805
/Filter /FlateDecode
>>
stream
-xYIs6WhNMMEl\t:ՋT* c.
-I 8KS2<<<fYALQ͊*m`͕` q'z?ݚHV?x/{iȋ?_i]~7ϴox+n~|7WJynʻ~{ڻާyzbP޻z;۫wI|Olg*<=@;U+G~#WWW jX0QgD?%]cYx)ϻyy#.ԞiVܨQm~fő{vx퇲mx9rXvҮnU3Eo+|]= eX`hS|FQn
-So 8κx"ro:G^l&E[*rT󑤳fŭZޫyi{nDC]q6EKHᶧ ! \׋Ez~QUz옪U?W{%Y ֺc
-|G'WʫI6 G92/ہ)L4 Nħy9e3\zL;XVDsX秙saN`)Ki_}Jwr
-gӣ(p EPmgGʧ!!FjbZiL,#>9e:Z7RCCU:7n-`"/N$U'>6<KұpûZ1Dss>
- _S4eՆQaB_SU9Ǐ;z)@r."~'. deDh_˴Cٕ@P)B
+xڥZK`NSG.JdETJK$ @̯O ri1鞞ov6,@^bGyqXof>8BAOApla3(?wۯ-WY(/o<w7t_:緷t#Wh]{h}_xC/s/ ȗ|a/28/7x m[90U{/ooosWGS<[ű]u;Q-4*߶MOءxalvPӜqt*qGo[)9U`;>u\Ib=wC
+sm`FO\oMxyGN>r'ŕ93<T
+A]^+عvE%SEע>AK+-C7ȰB^wC눽,on]e쑨8j\Pf=45<@Yh;v96"eaH<ڒk/-AT%5šCj]WBf@kTA<ru;9zW}Pjk}ߖcZ()DEq=WtꂣI<;:eD/5L9κcg4В]pf ]Zt47o ԏ]WS܏<ɍJ{&02d+G,˫eY>b?QƶQ\ Pax{+W4/enŏA
+{E9trx|N6B+|u: dN[_#}M&@6W.f$9;
+:〹(P 9[b)RKiP_z {C* ȬI%X>4NϘ6Jxx`{ ӊ ֳQ|
+{]w抷ыr/cp$"K8V<QW9BꖆbbC6qW_el$yų~ƷeÖ!JȆXCHa?6ҝ"qToR_V~VbA(u &6X/,%!f)eKD/Y5L9Zq/_lnΟ cAOybz~x+T3*c@VVn-*gxgK~sYHKuH pQ@ C|orzϴOQu9+lY3v8R)>X( @%`@#@sخuC#;f 0'Рg |#lA"͆Ѿۢ,M!ԈZk Ϗ{~Ɉ}Jo7#<53LK.RdloUK`hG>-AK1Gs3uI0iNܭ:RD55H#%8( ŅQIG
+ܫ7\;y pnn v}EV("uyzpL\:Ȁ]{
+=GH-!,oZfP*4d>\(`ݪ!TYK{B#kKGy-q#bS3!e㐶v7~=!A6G9Fv!gM{h^+hhW>8o#<M'8
+$bJ<$QD/
+sw L֓jCHQo&ȶ8hJMlʒfluHT0-6Uw_yp`I<xcy@!V{=d4h.ۖ&zɶ1mkqֶL_{CXA~1#fn[ nv)H)N<:!ǻQDoՂgۉu' \dCv:!wsa"6tlJ:m޲`R>>1 Am@%gz06WikX["&˦W5By}Dn u+Wjx)>I9 |"Pʪ[u˪68Oсjk Ys=^:o9Xgxĭ0/Qc! tlH'AT@8
+Vnb~h,Đh}P3ۗXaZ$`ѽʩb[mduYH]oO1~2rD6%~0rL)WI)H@+۹4b D!?}t}\A!XĘ#4\38/cpeԑ$ +$}uE3cXĨ ؓ@'D/҆=> F9fM:F.ZCΡb ~{0G(Z)1pMKy !0O+F:^R:EBM9HT%r- w$CA ?J{endstream
endobj
-6487 0 obj <<
+6977 0 obj <<
/Type /Page
-/Contents 6488 0 R
-/Resources 6486 0 R
+/Contents 6978 0 R
+/Resources 6976 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6457 0 R
-/Annots [ 6491 0 R 6492 0 R ]
+/Parent 6982 0 R
+/Annots [ 6981 0 R ]
>> endobj
-6491 0 obj <<
+6981 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [218.97 417.072 325.417 429.974]
+/Rect [143.619 268.031 250.066 280.933]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://lists.samba.org/)>>
>> endobj
-6492 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 392.701 133.339 402.269]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://lists.samba.org/mailman/roster/samba-ntdom)>>
->> endobj
-6489 0 obj <<
-/D [6487 0 R /XYZ 85.039 781.388 null]
+6979 0 obj <<
+/D [6977 0 R /XYZ 85.039 781.388 null]
>> endobj
-2578 0 obj <<
-/D [6487 0 R /XYZ 85.039 474.509 null]
+2686 0 obj <<
+/D [6977 0 R /XYZ 85.039 352.566 null]
>> endobj
-6490 0 obj <<
-/D [6487 0 R /XYZ 85.039 445.105 null]
+6980 0 obj <<
+/D [6977 0 R /XYZ 85.039 309.613 null]
>> endobj
-6486 0 obj <<
-/Font << /F64 3112 0 R /F14 2895 0 R /F15 2876 0 R /F66 3242 0 R /F20 2865 0 R /F56 2890 0 R >>
+6976 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F58 3365 0 R /F20 2965 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6495 0 obj <<
-/Length 2797
+6985 0 obj <<
+/Length 2379
/Filter /FlateDecode
>>
stream
-xڵَ}@X%QԱ@`,6<ȶl+Ð|}")r!hEbn#U>Exv@>#*i
-BYFiaueD><9(2'̧?Z(yiVq0߸Zǁi` Y|<dZzl30
-p8Va9q48F2қq wi[7ĤtW[W|J0\P ryj5/1
--/4wޜp|I,ɅDfa 9rqyhLȴ30`tDvLko@z@x?>n}ó3#L=1T٭qp>v!2/2{D+S[W3g5]~.iL #lLP!=a"13XV05E
-ʔ%QK!U#E OcZrLET$
-1wV@8hnFډgÞp"WxgfCF`Յ]]DLJ~gv5r-(N &VP8HIWUq~>{4膱Ƀl8KH@0V-/V7l߄`o5+#{0eHz
-L"x 6lR q['`6< dC+)nǚvV`E5[ahZkˠm&#. kӊi D55L8/ ]0g;˾: 1dj $x_~ TKvF(U@nEi}z5B@š.õ#ndGÙ  "@筋y{cGM`k#$h+0A.0c(x`.֣ 3#Us-rё|+4OI,w:d56͎B9tyN$@RTT́QZᙧt|8{"ۍwn8Er"3,1B
-%WL*~6u(i)X!VfAJ<  |fQKEјSmp<zTI?."E>"K߭-u⛵e"g6zZ.}~?ˏ_97]c
-x1wUAr\+gż(lK΃np f
-߻Pel[V[SF=ݯ\ܣ3[Pڹֈbp<ƥǏJv:kRߌ8J"'8\kd9G/u{ךw"OLyPSHNI!q]$]
+xڅˎ>_a%2ֈ;d3Anb7-[B˦~}EJ4"bEMjSaM^PpmN%I4I`s,$_ő3v*C(?hGa1QX@vQVu*[mw*^pt, >4{ׇ?< lhu]3jRsU|c_2r:K?G<w٘p nTQ9c#-P%1=|N`i@#HFc\N Q:C\NˌW3{KݏOd۶掓$膓Y9C N9f0*UAI0-jFqsv#~Ff?"}e3gG&2knN Z* 2JEpm+CJk tkCYh-01S`W悼T;IRT o <\ >ԕfQE(9xQB#1 YEGC' u˳y`3m<!_ Qĭ@,d G^ ko]W !w
+)ƒBɣWCl #5W`HtEE_Zd > 2!SGˆ[٫HɼZ$vduL$ \V#:@ ~iږ5Ex'5"At]cH3UՅ
+6
+L) Ysd6
+v *\q{nA 5xDcY1 5" ٳlʬG,w;Ö,% >|zn 6%ok|6?U1V0SSkhSwGov{8ԔƏ{
endobj
-6494 0 obj <<
+6984 0 obj <<
/Type /Page
-/Contents 6495 0 R
-/Resources 6493 0 R
+/Contents 6985 0 R
+/Resources 6983 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6457 0 R
-/Annots [ 6498 0 R 6499 0 R 6501 0 R ]
+/Parent 6982 0 R
+/Annots [ 6988 0 R 6989 0 R 6991 0 R ]
>> endobj
-6498 0 obj <<
+6988 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [232.013 625.659 270.975 637.349]
+/Rect [204.74 585.012 243.702 596.701]
/Subtype/Link/A<</Type/Action/S/URI/URI(https://bugzilla.samba.org/)>>
>> endobj
-6499 0 obj <<
+6989 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [341.801 435.668 475.519 447.66]
+/Rect [243.558 367.922 377.277 379.914]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.org/samba/)>>
>> endobj
-6501 0 obj <<
+6991 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [250.165 336.599 295.309 348.288]
+/Rect [211.983 228.205 257.127 239.895]
/Subtype /Link
/A << /S /GoTo /D (diagnosis) >>
>> endobj
-6496 0 obj <<
-/D [6494 0 R /XYZ 85.039 781.388 null]
+6986 0 obj <<
+/D [6984 0 R /XYZ 85.039 781.388 null]
>> endobj
-2582 0 obj <<
-/D [6494 0 R /XYZ 85.039 761.463 null]
+2690 0 obj <<
+/D [6984 0 R /XYZ 85.039 761.463 null]
>> endobj
-3060 0 obj <<
-/D [6494 0 R /XYZ 85.039 667.044 null]
+3170 0 obj <<
+/D [6984 0 R /XYZ 85.039 653.495 null]
>> endobj
-2586 0 obj <<
-/D [6494 0 R /XYZ 85.039 667.044 null]
+2694 0 obj <<
+/D [6984 0 R /XYZ 85.039 653.495 null]
>> endobj
-6497 0 obj <<
-/D [6494 0 R /XYZ 85.039 642.326 null]
+6987 0 obj <<
+/D [6984 0 R /XYZ 85.039 615.228 null]
>> endobj
-2590 0 obj <<
-/D [6494 0 R /XYZ 85.039 420.224 null]
+2698 0 obj <<
+/D [6984 0 R /XYZ 85.039 352.478 null]
>> endobj
-6500 0 obj <<
-/D [6494 0 R /XYZ 85.039 393.913 null]
+6990 0 obj <<
+/D [6984 0 R /XYZ 85.039 312.618 null]
>> endobj
-2594 0 obj <<
-/D [6494 0 R /XYZ 85.039 282.629 null]
+2702 0 obj <<
+/D [6984 0 R /XYZ 85.039 172.114 null]
>> endobj
-6502 0 obj <<
-/D [6494 0 R /XYZ 85.039 251.104 null]
+6992 0 obj <<
+/D [6984 0 R /XYZ 85.039 129.161 null]
>> endobj
-6493 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+6983 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6505 0 obj <<
-/Length 3327
-/Filter /FlateDecode
->>
-stream
-xڵZo"
- \tHRv9M>0l+KHQh
-,`Qpuބ3vLoa( W;8atG
-戭.iCG7uwБƞp $IW
-:=ӘG_7ug?|`3५%
-!B$s5
-x5Whx(c <8DQbJXy-^3L6=Qgrmۦ lqC
- C&Y6+*mka#_Wm#jīvǓlpȞITͫf2DS
- |ӛˮ߶ w
-}IOZT5Ev ʐfiNЁg ̣/oP H}Mk>:I]H%onM3bx\ղbWnۮG_vmWDY\ڊof/0Epk3,'%tmOCPy\~W.LaO#˵']I"AW
-ϼ+"c/:~[Ɍ܍LhYHpV+U[48AX…Dg-Bpzw(b6eKZ5V7%1?K1x}ɱǣk)a iKB`Gy#I ."txHP
-!=)Z&-@@F'(ɒy`}?@ȃ9Pœ'G/?i}gߚLvX4e/1{gݕRZ2 (М9CmkǺ!H0;oDb8sg#|tb
-P`:aOA+_#dXr{3EHh3!P|/Lp*SyDlU4r!ؖ+6Myxl !l/k0+
-9Yv;vkcoRTTU-FD/ Q0^w~ޑ4^>Kcw!;9\g
-cU0'(ͯ*!% Cp!L[vi,W
-8ǝJYJS
-(u r{!3_{;B}9p^->y
-KGdn#>،Wi"p)?Ѷļ]Ap-oC0N H>B-K2ObR9W;^jK݊Ԗ3.xmDq?L
-3ӗ>+C"1]!K] iHAH%|Z++?*1P 0R\5昙iwnc`sXI)6J QZ޲cnkc)#:{ǷN%mG`sVg@RZHib*ɭvƒ8ҝ+˦ǯVSi3\8pqQ'1@y>7~,Sfot! <uS:;u%8mp?]|趲(dK윆+*Agcנ^ k$w?RXmq̿j
+6995 0 obj <<
+/Length 2829
+/Filter /FlateDecode
+>>
+stream
+xڭn]_1Y,(3@vHXlg0%9+SWG !꺫xߤltoM ;|k ͧ(y00RgyZ)^'I~ηoio} ﶿp~|B exW?mr+UYy\n*WwWP^SkTFzR?Zyi乑K﷩r:|E b'Gxl؝`V mNQ*0F6pݕR|
+a
+}Mo]Fxq%g<(8A5w-jαj (ge
+r*J
+Q F[*Ǔ8t3z,5*%T
+DU#*ȂA\O&+`` dƐ8;L0,
+,h >˺U@WrjѭsyˡĠ$@ȝ 홑ygBVTOX k=Lq=(o9Rʹj@UNQ|”ܡF^BM{#kI茞)ey01f`o HP#)BHRXqdp"S+sG:Y¡aAmͪOqO9h#e%D"/`Hq4"]X3?\Ŕ'^u_<$MS#(B5Ҩ %V$noV E솮
+c.纡I}!0x?}KD?黭pQ(LoR4\B:ˁY5aRR͟/_h<x{?ZA1R Tv9);bG&S`t0!Ldv̖zEV'7TeK̇U#Dӟ[z%h~|yT-2y+^Q6Хk]Tj}G9
+5#w$ 0mp$$4u)|eH#k$RdEKuw\qPdkNeΛp}t\bki jg@"Xr|4~JYSzCG&AG)IG?XE? :@;bU X[/I%qRYLy7jQzsXSd~[8lo&VfAQ+'!d[𢊺%Ldh}ngEGb(鈁Z-8ճf[ϝ}Ҿ>~VDEʲpf,ҬERz2rËXx|j!XO&G?xV_N=09tÔ|ȷ)[='W&=F;gl<O*eV &g =b8fϾ^kk$_CS
+ױ_2,'(2ΨIᵲξ\y-#%z0+(|&V#ell Vg -jsdN$pod7.6#C%w_hrL[|Nj|RvC*!! ,fkcΏsy_ )#ۣgd=At^K:) V&\tced%G!<9]
+O4[ͻPD́0prϦm^սZ
+qT1{SHr[ƅbxH=כ~"ӣbPe- 0.QLe/bd`bZ'՗c[kyn<(7Uz!
+7 -ȻO5?6"?gsendstream
endobj
-6504 0 obj <<
+6994 0 obj <<
/Type /Page
-/Contents 6505 0 R
-/Resources 6503 0 R
+/Contents 6995 0 R
+/Resources 6993 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6510 0 R
+/Parent 6982 0 R
>> endobj
-6506 0 obj <<
-/D [6504 0 R /XYZ 85.039 781.388 null]
+6996 0 obj <<
+/D [6994 0 R /XYZ 85.039 781.388 null]
>> endobj
-2598 0 obj <<
-/D [6504 0 R /XYZ 85.039 623.55 null]
+2706 0 obj <<
+/D [6994 0 R /XYZ 85.039 477.884 null]
>> endobj
-6507 0 obj <<
-/D [6504 0 R /XYZ 85.039 596.935 null]
+6997 0 obj <<
+/D [6994 0 R /XYZ 85.039 435.599 null]
>> endobj
-2602 0 obj <<
-/D [6504 0 R /XYZ 85.039 262.887 null]
+6993 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F35 2980 0 R /F62 4052 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6508 0 obj <<
-/D [6504 0 R /XYZ 85.039 231.362 null]
+7000 0 obj <<
+/Length 1187
+/Filter /FlateDecode
+>>
+stream
+xڥVKs6W7pd㘴̴Q@1E$X
+U<ND,D * Zj^ PAMwp؂~v!_ ]J<w
+D&Y98CFSo(AMMx򢔡xJ8q.9 y_\#r %v?a9y}b4*5%b#/;tL!QBiϔ ڑqŃ,!~N#sj@JLVlgNu-lkgjm0_(%[<w#1'=E\mXxr@r58=p\
+uj7 voSX,6
+[S|q57ITM AJ7U,o s8 4=p\8!oq-ۢeEg-"pO'sKx*u# %Mţ
+GД>M~*.k{i<ǀ#u2dP!ZH$/MPtv?Z΍P 5ơaf6pu,ν|0us[kږun֭X""
+בs6qpSۡ缰:;Cx5- .5|{snMTe;DQ)
+-kTJ}C}endstream
+endobj
+6999 0 obj <<
+/Type /Page
+/Contents 7000 0 R
+/Resources 6998 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 6982 0 R
>> endobj
-2606 0 obj <<
-/D [6504 0 R /XYZ 85.039 136.417 null]
+7001 0 obj <<
+/D [6999 0 R /XYZ 85.039 781.388 null]
>> endobj
-6509 0 obj <<
-/D [6504 0 R /XYZ 85.039 107.681 null]
+2710 0 obj <<
+/D [6999 0 R /XYZ 85.039 761.463 null]
>> endobj
-6503 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R /F56 2890 0 R >>
+7002 0 obj <<
+/D [6999 0 R /XYZ 85.039 736.911 null]
+>> endobj
+2714 0 obj <<
+/D [6999 0 R /XYZ 85.039 639.845 null]
+>> endobj
+7003 0 obj <<
+/D [6999 0 R /XYZ 85.039 599.682 null]
+>> endobj
+6998 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6513 0 obj <<
-/Length 210
+7006 0 obj <<
+/Length 221
/Filter /FlateDecode
>>
stream
-xm=O1 sĉ3R""Āh*`w|N}^)?
-RC11 oW;&
-hJ_:Դ8̠dȪuk%݄CS/?Ar7?X3'`$pp ~z~ ^b2zȴ i &m%A- RUendstream
+xu;KA )gyLQ`#bq߬.xL30?jHڠTFW-%W[ZmhIнn9٥a
+(V0aVoG9F%]oɄ)%8Ko_vSj xbNMnҖ؀  OI1xLp)*,=$X#endstream
endobj
-6512 0 obj <<
+7005 0 obj <<
/Type /Page
-/Contents 6513 0 R
-/Resources 6511 0 R
+/Contents 7006 0 R
+/Resources 7004 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6510 0 R
+/Parent 6982 0 R
>> endobj
-6514 0 obj <<
-/D [6512 0 R /XYZ 85.039 781.388 null]
+7007 0 obj <<
+/D [7005 0 R /XYZ 85.039 781.388 null]
>> endobj
-2610 0 obj <<
-/D [6512 0 R /XYZ 85.039 542.44 null]
+2718 0 obj <<
+/D [7005 0 R /XYZ 85.039 542.44 null]
>> endobj
-6511 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+7004 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6517 0 obj <<
-/Length 2803
+7010 0 obj <<
+/Length 2085
/Filter /FlateDecode
>>
stream
-xڽZKsWb*˧xػ[Vʒ
-JU> 4*6e*0~<}xwa=?VJ
-֡ב:W2:nˁsSI5imn@CA٠d}i?Le&A7nmSj=a] tX(~l6_jYaC _ڎ- )3#A&dfaa8'{;(`El7bU!_+X~ٚ]Z^U_<>v? i?#
- @O*%_d_7mrLQE^U1(ko˓`6. Na7;j;A' o`߃(x6ž묯gP'[ &cW6zhn%LbZC.qg{xx
-MxMIrU\KuQbϼ_[/*=McٹL"/\ ɛ5oPbHg ە/>jhZ$ {P~\eQLOW_vdN0O{wm?ϳ|~Fӕ3wwL
-knX1,a1r?c0.1$1)´,D.#Avqd(ahґKA[=8q5gnPul
-l7J2pBL hل![9lC<ȅN1"y'm(r?ˉ>,$}W~~6VK U5$tR=SpQi0JkAO}h eduf;6qgd3x_Ft;"|qtubn(@[|B^sٵ͉hOvm͹Kyq9[-Vz!y
-.}OłNԨklM=f &Zbyʸy0ǜ3#ISvZq|%3y
-Rݾ8 Q~NXP0`xK0HDž%/Q)jMJa*AjaY ^Zdy'ŀhչP~!<>LbW.Hrn
-%V8_X; |xb@0a݂p!X,<~`?ڙ&q}OE]>LU~˯Y%#I)s0?Y^G=-?$;KJ66'k ~3o;s@ EC&}eN]\8@V)4~tTY^fyS]:4ޯ TǗey6?XwQq*dx cJ?gٰ,9o2j{(J=nR>+j7 J"׽RU6~.|O\^khT$M]9:J'lsWW qs!,b3#'(ruÝ-oWiÒK(OR&W׍lI'xowsD`?Al_2ss?&Z$S#qymA0RH.P(o!U oZZifӰ#é^UcB)k(DM_ k?emו|r^*by0Eǁ_MgnC9td(h3IQͽa{eF Rx@)L<Y&MoK3F
+xڕXKFW| X7yWN޵]8~ pt0tt jO-L$Y7b+Q"aCʭ"6(#{b*ݯ:X"x:C$$\<lL/Wax7KD/Wkpyysx*ʫ
+^lßo~ywONdB.TA:U,{9iY̓f &Y)4ԱFR\ 6N1wCf؟v''9DܥNifR'hЫeO%dn[5ׄVA&D&(.cD,nyg{aA$AaV+
+#g M/udqq}l8aw|͇StdǓmZ47WhBE4OulGcr0&/99e6-s<
+
+U=RuhPoGu!(!\s(
+JȞzQ;t)'y)#+Esn-㿃C5Pyh"M4[m;4DkZ~3Yb
+}7qv6Io"4'a9%^BDO̮]\Y6&,<C6aY\i`ND
+(8"Cqʼz%Jib+ٔ#r+fVTm$E`AsMxq(d=:P$
+r
+OZc-m۷6##|Eu7%/ݐx7 MBB xL/s.P qB¹c x{sh`UЪi89ݞQ(BIT|yWzGhW? epD,Nw@^kȢqG**&82,CcCLJ| C Xu<ĥ{mNhe3Df.02z#re tvdb8'XwاpO>ŐQ%,T4D
+(~Cg 7'gra 0 A Ը; `4RI&K
+ymfOɥ[@: zݠ"y*pQ[7 _\?6[endstream
endobj
-6516 0 obj <<
+7009 0 obj <<
/Type /Page
-/Contents 6517 0 R
-/Resources 6515 0 R
+/Contents 7010 0 R
+/Resources 7008 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6510 0 R
-/Annots [ 6520 0 R 6523 0 R 6524 0 R 6527 0 R 6529 0 R 6530 0 R ]
+/Parent 6982 0 R
+/Annots [ 7013 0 R 7016 0 R 7017 0 R 7020 0 R ]
>> endobj
-6520 0 obj <<
+7013 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [316.138 654.568 386.484 666.258]
+/Rect [296.557 627.297 367.864 638.986]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.org/)>>
>> endobj
-6523 0 obj <<
+7016 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [435.86 506.864 512.306 518.857]
+/Rect [382.952 438.883 539.579 450.875]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.org/samba/cvs.html)>>
>> endobj
-6524 0 obj <<
+7017 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 493.315 216.398 505.307]
+/Rect [84.043 427.758 108.944 436.417]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.org/samba/cvs.html)>>
>> endobj
-6527 0 obj <<
+7020 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [195.316 312.928 375.35 324.921]
+/Rect [157.134 177.076 337.168 189.068]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.org/cgi-bin/cvsweb)>>
>> endobj
-6529 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [481.678 209.385 512.306 221.377]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cyclic.com/)>>
->> endobj
-6530 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 195.836 210.671 207.828]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cyclic.com/)>>
->> endobj
-6518 0 obj <<
-/D [6516 0 R /XYZ 85.039 781.388 null]
+7011 0 obj <<
+/D [7009 0 R /XYZ 85.039 781.388 null]
>> endobj
-6519 0 obj <<
-/D [6516 0 R /XYZ 85.039 761.463 null]
->> endobj
-2614 0 obj <<
-/D [6516 0 R /XYZ 85.039 761.463 null]
->> endobj
-3061 0 obj <<
-/D [6516 0 R /XYZ 85.039 667.217 null]
+7012 0 obj <<
+/D [7009 0 R /XYZ 85.039 761.463 null]
>> endobj
-2618 0 obj <<
-/D [6516 0 R /XYZ 85.039 625.638 null]
->> endobj
-6521 0 obj <<
-/D [6516 0 R /XYZ 85.039 599.024 null]
+2722 0 obj <<
+/D [7009 0 R /XYZ 85.039 761.463 null]
>> endobj
-2622 0 obj <<
-/D [6516 0 R /XYZ 85.039 599.024 null]
+3171 0 obj <<
+/D [7009 0 R /XYZ 85.039 653.495 null]
>> endobj
-6522 0 obj <<
-/D [6516 0 R /XYZ 85.039 578.031 null]
+2726 0 obj <<
+/D [7009 0 R /XYZ 85.039 598.304 null]
>> endobj
-2626 0 obj <<
-/D [6516 0 R /XYZ 85.039 479.108 null]
+7014 0 obj <<
+/D [7009 0 R /XYZ 85.039 558.141 null]
>> endobj
-6525 0 obj <<
-/D [6516 0 R /XYZ 85.039 458.215 null]
+2730 0 obj <<
+/D [7009 0 R /XYZ 85.039 558.141 null]
>> endobj
-2630 0 obj <<
-/D [6516 0 R /XYZ 85.039 402.568 null]
+7015 0 obj <<
+/D [7009 0 R /XYZ 85.039 523.598 null]
>> endobj
-6526 0 obj <<
-/D [6516 0 R /XYZ 85.039 384.095 null]
+2734 0 obj <<
+/D [7009 0 R /XYZ 85.039 413.489 null]
>> endobj
-2634 0 obj <<
-/D [6516 0 R /XYZ 85.039 298.722 null]
+7018 0 obj <<
+/D [7009 0 R /XYZ 85.039 376.622 null]
>> endobj
-6528 0 obj <<
-/D [6516 0 R /XYZ 85.039 280.551 null]
+2738 0 obj <<
+/D [7009 0 R /XYZ 85.039 307.363 null]
>> endobj
-6531 0 obj <<
-/D [6516 0 R /XYZ 85.039 104.412 null]
+7019 0 obj <<
+/D [7009 0 R /XYZ 85.039 275.341 null]
>> endobj
-6532 0 obj <<
-/D [6516 0 R /XYZ 85.039 75.192 null]
+2742 0 obj <<
+/D [7009 0 R /XYZ 85.039 162.807 null]
>> endobj
-6533 0 obj <<
-/D [6516 0 R /XYZ 85.039 61.037 null]
+7021 0 obj <<
+/D [7009 0 R /XYZ 85.039 131.088 null]
>> endobj
-6515 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F72 3966 0 R >>
+7008 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6536 0 obj <<
-/Length 2923
+7024 0 obj <<
+/Length 2660
/Filter /FlateDecode
>>
stream
-xڵZێF}BKƉc;A#QaITHcNU5ْ8 a/u9U??b Ineʛh͕$r$ԫh{n%/~qy{OYNYfA,?7?~;Zw?v{kYFI]7o}aM~OWQqjsuwEY5rY$nR#,h C GW(e,c78tM|ӭK4Bg^oә;bse /"- u
-fusK}A:#ʺZX%DPܯVf#p7%#jyEȘ̻9lʅd
-]QJfFb5T={Q
-ů^Un\lyhtՊ]H_Hpb7u8d I8$Hy ͱԔrQYi){:jԻŰ:\z`Qcff_)nIatMɴ7d%2gCDG:.]6R4!y3lpR?[o.(C[Vw#_&FHNƇUj<z~㝡@he *ذHf/[TƠ:;<2G[jskeˌ<0dcg%Qfz!/߶o/
-S0Am?(' c Cb\+4A;fGAc+~jAcq1Gx:C4VMq<av/DWacl4/T# @`>99ܐf@I @˶bP*"D0|[hT鍩ݴG5ԸFۏh2pK|7N/䥳rq$u$$k^YAK)h!4j_04ȬB\)VU*-$괝r`k3^iL!L؍$HҩވL1oY2eY_ׇ#{qY<Ń$ A0$ubW/8nC+C.<{qw?8́ 0܄l  iL\Ҟ%"[yGVΐW)>RqxwX͋9yX&<ը$ennB,/onE7lglֺn`ٮ'OH}VmݔҪvKq8I^1=Bs#/uޯh~ .ui+~STE=@58z0*ZG:՚k?'(]-jn.BdWIUHhdi)r8
-:VcrZDIj2WHo\ҋV|ezGˣAg%*FtOoKb7(/ ?u0|6G?LCP<V&75Ы]#1B&QQ*oT3Q"X
-La1f "V5aPt jyj J%xL( ;S6hjlVm
-0K4\ <ozk0(ΪRӴ}bNbCdvp"޸n=&щ
-fq誩D1ajgOZNW \H]IDܨZfVdAKkv[urX:ݫ9ekO׍v
-}}`: KR߫;<RcQ al51+ya-ueٓCY& ] 7@^;M-כ+ŝzV:`iŋ'kH`9g
-U= #د=H_oy0y߉axPS8NJ/!֚;;<=\5Akʔ@e"?n?Jw~)X/1?]v,Knd{ vSBw=@nG-ldc+eR{ڤ5b&b` _SձYmFX,SITEfj3,%:E2f_էendstream
+x]s6ݿBӗR3'?D4iI\^>-"*I p7s7Dbo
+c%(+wq|(_7o?ݿ\a腉Z{qS7 ?]~N0P?~_lA|fƾ
+`pb8
+{uwE ^unq8 3}~^Ro {z0WfrM7U
+Y핔N0>;+D=Em^7bP*(
+ŸUɿ-Y7^{_/V<˭_3p_|vopw<U4L\
+A-L-'
+q-r4!2Ŏu8fs;8>C{ZY!׶" "X-܇b@`y54*|V{lCN`R։aJAMD`h(F!BB)qyt[-+ id ;5<`Ghk1Oz(Z+Zpy2ΠMJ0VsC‡9BE{{=T2apjr^B{՞!C^;l9-ȫj$*Gc#;8H5''mL'ix,!fcՑ_4iM0jP@%VrKG[V`Un *G:]wkW5E[6"ZZ.@צ%4ur7М:jɩN^MUYv䐥ț%9oA~+qh]s@{SS( A4T98
+*\+Pӂ4NgYyvAU˦5=k9Ί0N]SJ3 z\yNL ˚2"'V`0W,pG7xU}dJ~EWL* y8M&8B}d3zͱL|*ϨEe; 7q֔ +N-SW;N[MÇsY邃;
+/+}[9v~tiS_,%6_DǖJS*UD:zpѓub=Jw] Ns>f>5%)sgKAΗ9Z0cg[tUsAƌ+S[j<p#Jl\
+E]C\߿Vev|$lQ6<ĀAԆz&yjIݶ0PqovT›%yu
+0\m_lR3&CxknY"JT\?QgZWc;K_֬!B6"v2#iu Zb8pM
+(k1{?N1)rL<~+
+DB;M$^iIFtw=kl ӍS)K5n`Vsgԛ]*^Isa)_0HTa}ʒZu,\Cܨ HNU ԼDiT2IfBJ`pp.69n]1.?/a=9!pNwR`(qVASrOHr鮻L8{>V5uu8/Q,QqgK,Nd6O\HtNm4tɥB_%:wla6Ra87NW 10cyt9+{O`oNuZnxzc{
+iT)::ppv=.00.*ѐ+~oy:҅ "bEءN_Tvca/*͗؏ Ͽ$X앃>}ID%>C_\GA8yVT~۱: 'Bn v,A[Ǚ8(,mCCL<Za^77Qt0N̗l{"fDxU5*6B(hu t=}I56Pvr>,A:SF '|{8y̒/GCDAd/ zA|[f2E4):l&=HQ?Uac;=L/j82:P폐8#_EBU-ݣTJjnRϾ%Pv>y[4fr6 \tb.$R}F5KyUsòtb&goi .J唣oLҦRwOX9= E*R{Y4NT5;ߒhYVs1Bm t|2 :G;@#B]iM%e1LBHD *ժendstream
endobj
-6535 0 obj <<
+7023 0 obj <<
/Type /Page
-/Contents 6536 0 R
-/Resources 6534 0 R
+/Contents 7024 0 R
+/Resources 7022 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6510 0 R
-/Annots [ 6541 0 R 6542 0 R 6543 0 R 6544 0 R ]
+/Parent 7039 0 R
+/Annots [ 7026 0 R 7027 0 R 7034 0 R 7035 0 R 7036 0 R 7037 0 R 7038 0 R ]
>> endobj
-6541 0 obj <<
+7026 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 553.795 319.488 565.787]
+/Rect [434.497 747.083 539.579 759.076]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cyclic.com/)>>
+>> endobj
+7027 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 733.231 108.944 746.133]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cyclic.com/)>>
+>> endobj
+7034 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [503.223 159.941 539.579 171.933]
/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://pserver.samba.org/pub/unpacked)>>
>> endobj
-6542 0 obj <<
+7035 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [475.95 553.795 512.306 565.787]
+/Rect [84.043 146.391 257.852 158.384]
+/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://pserver.samba.org/pub/unpacked)>>
+>> endobj
+7036 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [411.588 146.391 539.579 158.384]
/Subtype/Link/A<</Type/Action/S/URI/URI(rsync://pserver.samba.org/ftp/unpacked/)>>
>> endobj
-6543 0 obj <<
+7037 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 540.246 302.306 552.238]
+/Rect [84.043 132.842 183.398 144.835]
/Subtype/Link/A<</Type/Action/S/URI/URI(rsync://pserver.samba.org/ftp/unpacked/)>>
>> endobj
-6544 0 obj <<
+7038 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [130.71 527 227.642 538.689]
+/Rect [423.268 132.842 521.988 144.835]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://rsync.samba.org/)>>
>> endobj
-6537 0 obj <<
-/D [6535 0 R /XYZ 85.039 781.388 null]
+7025 0 obj <<
+/D [7023 0 R /XYZ 85.039 781.388 null]
>> endobj
-6538 0 obj <<
-/D [6535 0 R /XYZ 85.039 761.463 null]
+7028 0 obj <<
+/D [7023 0 R /XYZ 85.039 615.012 null]
>> endobj
-6539 0 obj <<
-/D [6535 0 R /XYZ 85.039 652.932 null]
+7029 0 obj <<
+/D [7023 0 R /XYZ 85.039 585.792 null]
>> endobj
-2638 0 obj <<
-/D [6535 0 R /XYZ 85.039 610.928 null]
+7030 0 obj <<
+/D [7023 0 R /XYZ 85.039 530.99 null]
>> endobj
-6540 0 obj <<
-/D [6535 0 R /XYZ 85.039 581.524 null]
+7031 0 obj <<
+/D [7023 0 R /XYZ 85.039 504.497 null]
>> endobj
-2642 0 obj <<
-/D [6535 0 R /XYZ 85.039 473.958 null]
->> endobj
-6545 0 obj <<
-/D [6535 0 R /XYZ 85.039 442.432 null]
+7032 0 obj <<
+/D [7023 0 R /XYZ 85.039 314.202 null]
>> endobj
-2646 0 obj <<
-/D [6535 0 R /XYZ 85.039 117.174 null]
+2746 0 obj <<
+/D [7023 0 R /XYZ 85.039 230.623 null]
>> endobj
-6546 0 obj <<
-/D [6535 0 R /XYZ 85.039 88.073 null]
+7033 0 obj <<
+/D [7023 0 R /XYZ 85.039 187.67 null]
>> endobj
-6534 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F35 2880 0 R /F20 2865 0 R >>
+7022 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F64 4117 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6549 0 obj <<
-/Length 2150
+7042 0 obj <<
+/Length 1698
/Filter /FlateDecode
>>
stream
-xYBM>"">gE%$B||ÉSp<~r(OȵUMׇ3&P8SvN=_N}cN<]nd~oy|0+,g0Y=_ܿy;sW_r͛7L^.{}_(<?8f*gh;J.<OyՈls lsQB`DȪ,ϑg_y/j!DuYq}q{4 ߝΏt:깋Ŵ+gsjxES4m[]"q;YzMr(MV.WPxrи U|߷81B?1'k2\e-<R__CGb?gHt҈(uE$UII"=B5_.Ӛ'ޠ@yA(8z,)kTY^V6׬,#.ũ"eH
-˜fg~
- INs̍+O5] ]xrwat/ mw3/<kWd
-*q3Zp<ȬV5W2(%000Q!:JN8rEr sS+gv~]5iMJ(^¡Xΐ35P/"vේq&\l3m%iO ҬN=/a\EAv` x
-s [DkǨ
-6Rœ6κ̝-ۚ1*
-xDx."GlZPq%tPGۃTe3x\I
-" 5be/B`VSd[{7"P ox.4ry=~ [9y@}Ҫo`W88d
-|<;._ߢg6#yR1+w(brŅ}!sͰ/N6R/JY9Iq9' P }g+[49>#־1Yr/XXS^nGpzbGy%AYҭ<
-\πC "RwF H6`?2 hE$3ZR QHʸJ]s/ϚQQz; GQaK;`</q3gH;@dcM՘#.{
-jATR@ϴtv;\c+`lSq 2''%/m󇥗|gD ,{G16_QN-r*P^0#B4Q2ϗ`Ə؄ >hS-ޙmfb ӻ (GfD*nNPn'P,#~SF`ԬUxM0?\>endstream
+xڥX[o6~0rYvEh>- ӥw.vn(Z<? m @l8Epa5Zeӹ&б̞ 竽@7ǟo/ƞY^(F4ލī;}}~X\z鎀Cg/0fp c[8 
+X/A*d6ׅwӍxܿr/z)TOn!wP]TjtÈd9IZ&ZFʶnJ,7XЅPfPa ޗtդe?butpɶx ⌍í83P 6EL* d)~PXVU5L pp(ۆ5U݅wVFF
+!^)S;(C}|+NAWos^In ٳ(~ ׏FJk'wrv)u#O8bS9CГGkzh_Wx~.1?rɕ2ĶJ!O u_F9FN
+.@f,*I׼yƙS@}kARhlaG\諲l~DJJ\*ۼP2^5K5
+ U=
+@:-t_nr)&sqy}(+|T)oL_`_,ƮYrhwk6u\
+eYr\`fJ|oz;;/.Dx> \]9D
endobj
-6548 0 obj <<
+7041 0 obj <<
/Type /Page
-/Contents 6549 0 R
-/Resources 6547 0 R
+/Contents 7042 0 R
+/Resources 7040 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6510 0 R
+/Parent 7039 0 R
>> endobj
-6550 0 obj <<
-/D [6548 0 R /XYZ 85.039 781.388 null]
+7043 0 obj <<
+/D [7041 0 R /XYZ 85.039 781.388 null]
>> endobj
-2650 0 obj <<
-/D [6548 0 R /XYZ 85.039 543.429 null]
+2750 0 obj <<
+/D [7041 0 R /XYZ 85.039 761.463 null]
>> endobj
-6551 0 obj <<
-/D [6548 0 R /XYZ 85.039 522.232 null]
+7044 0 obj <<
+/D [7041 0 R /XYZ 85.039 736.911 null]
>> endobj
-2654 0 obj <<
-/D [6548 0 R /XYZ 85.039 291.675 null]
+2754 0 obj <<
+/D [7041 0 R /XYZ 85.039 283.183 null]
>> endobj
-6552 0 obj <<
-/D [6548 0 R /XYZ 85.039 271.383 null]
+7045 0 obj <<
+/D [7041 0 R /XYZ 85.039 240.229 null]
>> endobj
-2658 0 obj <<
-/D [6548 0 R /XYZ 85.039 214.603 null]
+7040 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6553 0 obj <<
-/D [6548 0 R /XYZ 85.039 191.887 null]
+7048 0 obj <<
+/Length 1667
+/Filter /FlateDecode
+>>
+stream
+xڥX[o6~ڇ̈(K6.Y0ŠX#X\IN\m6HGCVpK|8_2FblD{ -;9ZZ ggh'Fķ.oGoɫ[~87oYcHhŷ0? lc[HxB(~yWZBk{ֶжK^y^uyde)zt^vOce ۟*I
+WVŗʚC%mpoVq\[3"E`- *y mY^ˌ&z-1yݤt.9`/`ѾOJxʣhquS:xoyQd2x,gL)|$:eF% ,`BDa~li=d-y i|2w qoN똣9a 4Yɣ+LWG=ծU={Ҟm-Z_<60z`BBc(,\SLc|@C7wW4jφa )-!m͹|<kbъWu}BcIJ$T1.K Z -]䘉!? ˪Gxups:V@R ߔ2
+(/zժhWCb5{CX5hƑk%7G⫴+toGN|-k 0}OڞRa-sq'R:BAXjftΰrQKmJ{uy1p_]\ _lm5!gM̿(G4oXHv{59bo5ҰA=T!  b.dQXHѬbA*a|d^oLJC ( iԴ2'Pc^D -j4A vS_w|Y]cħʢmzBqFn؉3' D8UWpKR6@ ⾵Cк9D#.+i#v4j'!E$4]>lF3Glhc |FEN^癹ۢcTwxEE>`tQ¬foҿ5ar[7$l$N㼍(}b T,U[^.Ax1YkvI7xd'qjʞ`_# 3DÈA?u9Q"\P(:$X8W:-V֖fɦи<n)5;j #D_3ʸ]A/ jQaXlkٴuugx:ƲR…/S,ۑi:y{vn
+?nq3:j6}6endstream
+endobj
+7047 0 obj <<
+/Type /Page
+/Contents 7048 0 R
+/Resources 7046 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 7039 0 R
>> endobj
-6547 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R /F14 2895 0 R >>
+7049 0 obj <<
+/D [7047 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2758 0 obj <<
+/D [7047 0 R /XYZ 85.039 441.212 null]
+>> endobj
+7050 0 obj <<
+/D [7047 0 R /XYZ 85.039 406.466 null]
+>> endobj
+2762 0 obj <<
+/D [7047 0 R /XYZ 85.039 114.443 null]
+>> endobj
+7051 0 obj <<
+/D [7047 0 R /XYZ 85.039 80.299 null]
+>> endobj
+7046 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6556 0 obj <<
-/Length 2444
+7054 0 obj <<
+/Length 2085
/Filter /FlateDecode
>>
stream
-xYIsFWpNքM4ܜؙ(؞HUTD"J eЂO)){}!"u*4"I2iTfseE*N}{}> ,;Zr-W\c*I( ~O:|W~/\O.]Yec~p~ClQ]XgF]V~Jg*ܚ(QQb`0A Yel<pwgϗ& ھo8 }دn-4
-2YyJ"d(rq4P݌~]&hpS2J#-W:ypf  M 7I'-og,\dּ6/N#;m*h
-B9$x?{Ffc>NbMLkh)aNG7yͣ˙Q ^or8BEe][i/=QIvd{+G~BR
-{ݤB4DډSQhXl( M}팅c X\Az"P9O:ae3"`ZEeɇqmSbFDpQ@4~n7lÌ
-6br0 |oT$AsoiM#;Ov0 ֆv p*`7tځ%RruU{*ktN %ʀ4Tȍ}[䭬Ao[[l Y8tʢ#z{"F!g[lA^rHyK?K:5T?rmC'BX =ClD (= Aʑ1lק%5'W~[:iuis@z7=d%,-YpȨX x;h3Dq/;dj|䁇pVg{7xjڂ[?,s8,!!.{rsw,tjǁ^=ru Y|U'@bpO4%A=Rb]ײwB<1FA^kL@,T $S=6p d)"UAbI4#w G Ft*->.
-mq /+x
-س-IyوP
-/)Wz*k6 #yߗ u{, ^4VFu*3V=N
-D/QT5cG\e
+xڥX[۶~P\QԵoil69YEAׂmɑl;7ʴW=X`M3ÏsX&L+enxߙ,Ӂʃ[rb[߽|i0&QEf0eǹo߿ݫx5sr4dTJs?@iX GF(^<5uh˱0ʲ:0q Y&D@A8aZgujԡ2:<ѸMEY}nhq<W+L/q4NѸWK 2=0x DF=R]<>rb m 4<Ia'?*a37/yVȉ˟@j]1\8af*yU@ ?4xXJ;hy{\]b{@TJ *deo _: <\vZ^S8:Iu5Z}d.`v<B
+SC3R.J ī&Q9AQaZrĶ&h$7޵hb6EdZ v}ab7a e\(:v1&הYt<(xjS$)lBVf/
+57
+H O\
+=:Ҭ "MCJV-"K b#^l{<dm 1d VU%ɯ'8H%yZs|?P.Sl,Xlk|u-8?EÁx8Saa,ÄQɊ$\
+ L2_q%
+ vn*̏β!TkͶ}C`*שfSbWú=gO)?8@To{%س4g |\4[ٻk;3,j*(خ[
+yNxx{4~'?БEЦ
++(__ۏ32O;l
+؂A~nol2g+­Sendstream
endobj
-6555 0 obj <<
+7053 0 obj <<
/Type /Page
-/Contents 6556 0 R
-/Resources 6554 0 R
+/Contents 7054 0 R
+/Resources 7052 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6510 0 R
+/Parent 7039 0 R
>> endobj
-6557 0 obj <<
-/D [6555 0 R /XYZ 85.039 781.388 null]
+7055 0 obj <<
+/D [7053 0 R /XYZ 85.039 781.388 null]
>> endobj
-2662 0 obj <<
-/D [6555 0 R /XYZ 85.039 761.463 null]
+2766 0 obj <<
+/D [7053 0 R /XYZ 85.039 708.141 null]
>> endobj
-6558 0 obj <<
-/D [6555 0 R /XYZ 85.039 736.911 null]
+7056 0 obj <<
+/D [7053 0 R /XYZ 85.039 671.875 null]
>> endobj
-2666 0 obj <<
-/D [6555 0 R /XYZ 85.039 600.648 null]
+2770 0 obj <<
+/D [7053 0 R /XYZ 85.039 486.868 null]
>> endobj
-6559 0 obj <<
-/D [6555 0 R /XYZ 85.039 579.451 null]
+7057 0 obj <<
+/D [7053 0 R /XYZ 85.039 443.915 null]
>> endobj
-6554 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+2774 0 obj <<
+/D [7053 0 R /XYZ 85.039 307.375 null]
+>> endobj
+7058 0 obj <<
+/D [7053 0 R /XYZ 85.039 272.63 null]
+>> endobj
+7052 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F15 2976 0 R /F20 2965 0 R /F64 4117 0 R /F18 4120 0 R /F35 2980 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6562 0 obj <<
-/Length 1970
+7061 0 obj <<
+/Length 1823
/Filter /FlateDecode
>>
stream
-xڥXo6B~V(zܗ6vSt{_Wh[u+ɛyP;JZ4!9 O8:q"|$ζ\V[8"K_o#OYz{KOJ_zqo-w~R7?_Z~z=S$g}|&=_S.V΋)56O8~&~ԩh:ZchS
-I"xCR$2z0J*vL:@@]釼$H? c>$F_2]uuj3uU |bZS3Ӌ@n|!n}ڊscuOc2Tڳ
-cP< Ɨ$I>>ɏ=hzg۱΄(rK6HL  _'ZaPj$5.' Ջ"#}a<q 4P=ўxX0jhFO<&vf 2Q "p +ߔWM]Yô
-x4
- øM5?Ee!Γ/@]! F#
-ڇ{B0ցY.BT@f)9%дDž瘬d Ii'|^3 =(a4L#a5 n$eDMGj7)nt t D:Zښ̺Av"؃[UL(;1 >2N(k[hy7 э-76M4]1;
- .HbM^ÌS۬zkUkʍarJ7uOuBp/Bu&WwsP;8WnsB%ԙ .݁/"B?]=ٗ+{5#ǜI نPs.}33S|bV-HEUc^h*ROـ4Tz!ʺdYƁ`"apg #%s+S^x‘*p)#'nbtOJ0@gJl|qřjiag:܅K;뾈/MAJSn'd
-fMy,v~jG>}:Δ`{ok}WlȚǓ@({K얼`Ň%9Wy3uJ|.N_Oc!QD@:9+zE?iVkl%uXnZ(x:7W] 0c,EJ a nVuy̹5FƓL['bg/5Z[6e
-=SRf[#y=60oB¾媰lc
-*"_F<^endstream
+xXݓ6_>ԙdIP@NCypbνw}CvKBo戴ZCە'+N8QB'fһgq%-SR2+2?yyu$A'0`5>y\/^>ǯ~|<et9*2A_fR4>X
+ h7~Ex9NMڞJa!_M<PJ_xwh♚^IL-n{~^C`;tYB b遰aȴFbp%w z[`*YT(Q7mQ0O[ج#h#tdh)]WZ"xܯw<Ym7Zvmve*[zUI(T$ Ȗ_y <z<v݋dpdsD,U9.lQ#jwW;1-LOÊin#?k11y?8ExvAr ln+sR7Ä.cI&Җ;t)i6 H0,}-㿃9]
+%9c}xoGG(Ehv^C]'Ȉ,q*#W-7};ܒ2WiI
+ֱВkï :𞕎ۤJؘ$z=%IS,1)~j@MoL䒦*
+SRbR]SAk /X~ȿF'[.!p
+5\)hAښ"oPj+bn
+1 (ԗp"26_0/ܭ[vs@zIv9ޫ#`dmvs5<q}
+endstream
endobj
-6561 0 obj <<
+7060 0 obj <<
/Type /Page
-/Contents 6562 0 R
-/Resources 6560 0 R
+/Contents 7061 0 R
+/Resources 7059 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6566 0 R
+/Parent 7039 0 R
>> endobj
-6563 0 obj <<
-/D [6561 0 R /XYZ 85.039 781.388 null]
+7062 0 obj <<
+/D [7060 0 R /XYZ 85.039 781.388 null]
>> endobj
-2670 0 obj <<
-/D [6561 0 R /XYZ 85.039 590.17 null]
+7059 0 obj <<
+/Font << /F56 3230 0 R /F35 2980 0 R /F15 2976 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R >>
+/XObject << /Im1 4101 0 R /Im3 4358 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-6564 0 obj <<
-/D [6561 0 R /XYZ 85.039 568.973 null]
+7065 0 obj <<
+/Length 1068
+/Filter /FlateDecode
+>>
+stream
+xڥVnF}W ˽ܾ98h$Zi(␔c}gv-A@sv!E'0l傩<`m!<"xy\$oL,j0mTz{ay)RJYgY=dEsz:!48y$|8]ND"_xp -8S63z4ϫl:]ǒJ}aRt&a$X̅10aII5]S Q,-ߕFmĭa7lk'ja3^e6Is&2d0GNYL.ePt 0,2fPvwxeGk=遬c-mvo`$lkve1\($9- vZƑA\P۔6eGYAX`mXmf<@\pkFTD
+ӊ^?%my$LɮxI_ԫ
+T1҄#iq|x "eW{YsvPT -Y&st 75T<u=>Zeu ΋qKrGօ$<c+O
+endobj
+7064 0 obj <<
+/Type /Page
+/Contents 7065 0 R
+/Resources 7063 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 7039 0 R
>> endobj
-2674 0 obj <<
-/D [6561 0 R /XYZ 85.039 292.426 null]
+7066 0 obj <<
+/D [7064 0 R /XYZ 85.039 781.388 null]
>> endobj
-6565 0 obj <<
-/D [6561 0 R /XYZ 85.039 270.664 null]
+2778 0 obj <<
+/D [7064 0 R /XYZ 85.039 761.463 null]
>> endobj
-6560 0 obj <<
-/Font << /F64 3112 0 R /F72 3966 0 R /F18 3969 0 R /F35 2880 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R >>
-/XObject << /Im2 4150 0 R /Im1 3957 0 R >>
+7067 0 obj <<
+/D [7064 0 R /XYZ 85.039 741.134 null]
+>> endobj
+7063 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R /F62 4052 0 R /F64 4117 0 R /F18 4120 0 R >>
+/XObject << /Im1 4101 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6569 0 obj <<
-/Length 2762
+7070 0 obj <<
+/Length 2265
/Filter /FlateDecode
>>
stream
-xڵ]6}>D %R_wOll& .hdKȒ+|QmmK, 6,N|ed]V^^aCBkX\E(m) VAlfTƿYU0|{;7/|/[s߫O?7{#%E:L
-/+YU+ ^CNp2/a %xu3a'C
-e(hvG/ddMoKf) -ec/E)DiGުCv>xF -q U=ʦUClkʊFcA$
-CիfW?Ezl3"||W>9j6eԉS?E+oa4lq뽻'WA I@zB1e+j8GB
-ZbD<r,Ja&MYu)5,F. sYc՘oZU0h6AC^߹c0F$
-yB48e yA/9$\ )sZY-6a#R3a-WC~x@g!yᣞv`4TDFտdef*>
-皹-کwADXp''J!21)EHre LFb(MRJԂܡz
-sJ޽W<uOt*<(/d&( ft [ gpp.($~{,qA 4u~ AQ x@ǡvQ Hv䋹"9.GPX
-.5s 4BY RP'^ UL*3d!9:4"V!<4lS#  &`  82#`r0 o$z Iջj`qkaw0yW-CrAxJ]Qƌpd**Es%iʙ9*}=#oyDIz5JVZW2OpY6BH* CHx ޻U#-,C |*g8$1
-69,!SO+U%
-|ky@G_|F< npʏ:C ;ێ3^ȃ@5ոq#M9 Q{#:`uqvԗ tt0!K?&:d81&b,*l䤸&>n!/H{C^D
-?.c1$ZI3>[`t@\^~d8?3;T= 4;sf^HYEC*KIV0Y@+\kbY"u[!s!NU$j @7S[ITná$ÌLvDH)e<]I :΍~0Gݽ*'-o
-')QeGj3fjQ[nʟH=A)})-\a1&8&r+~'GWrP
-Oʽ~kn± P_vendstream
+xڭXs6_P3L{w;m\i(8HIţ%Ɍ,ⷻI($(dq'kXx
+|ggvuz<r,҉2FoUah&U$]d}sL pNn:N()O75s~|y*+5!t0ѮJdq}R9NYә 'u7vUr&4i5<שW̽+nيžn#;
+O%
+,ym=D$YSE&@FU;%hѱ 9-)9 eݥ]@GD|c!ro]gHwRU6hP
+TȴμiC}X_2oQ@9NSX(ɂ`GYy!3ܷiӑ7LՅ b_EAp5F<6!EX$}k |?q>OK
+ <C<БC
+|zn \]oɁFF\Bahݎ"ˎLߵ<-h-^wFU]vo2f \8kz v*8>`[ɻ<m명Zq|7b)8P7t}Tbj3 Ҟ"1rh-y4a_V^lV6EcLJVȸ{F#iu0
+8/ C:#9H-.>
+BNꄼ_?z|u ftʙdq!ax %`1UX 㖧ʄыkvH{ۤl>`"À_; g 1[4Ⱥ@|ۆnxGZNO;ڞCn7W)LJSuП~".;
+AmwSLs4 ?!>?.O`iK,o2?*FB;.xMPqo;#zI@H'K_44~>=a|{E8?U2;wQ OO3ح
+Z{CC ZErvVWJUb9SK5dK'IXSaS{|y0q{qɾCL"!t>
+IL{噱'ݱTܗ.JQ_7ɠWOXHE|f-? l~r<v\a*ةcF]hCXwmyq* ո/pUQdPuu#I-OsR9d?
+?cSpF%Q
+=+ M{`U
endobj
-6568 0 obj <<
+7069 0 obj <<
/Type /Page
-/Contents 6569 0 R
-/Resources 6567 0 R
+/Contents 7070 0 R
+/Resources 7068 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6566 0 R
-/Annots [ 6573 0 R ]
+/Parent 7076 0 R
+/Annots [ 7074 0 R ]
>> endobj
-6573 0 obj <<
+7074 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [115.558 292.455 171.248 305.357]
+/Rect [480.859 184.061 536.549 196.963]
/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://ftp.sco.com/)>>
>> endobj
-6570 0 obj <<
-/D [6568 0 R /XYZ 85.039 781.388 null]
+7071 0 obj <<
+/D [7069 0 R /XYZ 85.039 781.388 null]
>> endobj
-2678 0 obj <<
-/D [6568 0 R /XYZ 85.039 761.463 null]
+2782 0 obj <<
+/D [7069 0 R /XYZ 85.039 761.463 null]
>> endobj
-3062 0 obj <<
-/D [6568 0 R /XYZ 85.039 667.044 null]
+3172 0 obj <<
+/D [7069 0 R /XYZ 85.039 653.495 null]
>> endobj
-2682 0 obj <<
-/D [6568 0 R /XYZ 85.039 611.854 null]
+2786 0 obj <<
+/D [7069 0 R /XYZ 85.039 584.755 null]
>> endobj
-6571 0 obj <<
-/D [6568 0 R /XYZ 85.039 585.239 null]
+7072 0 obj <<
+/D [7069 0 R /XYZ 85.039 544.591 null]
>> endobj
-2686 0 obj <<
-/D [6568 0 R /XYZ 85.039 390.539 null]
+2790 0 obj <<
+/D [7069 0 R /XYZ 85.039 309.244 null]
>> endobj
-6572 0 obj <<
-/D [6568 0 R /XYZ 85.039 363.924 null]
+7073 0 obj <<
+/D [7069 0 R /XYZ 85.039 269.08 null]
>> endobj
-2690 0 obj <<
-/D [6568 0 R /XYZ 85.039 277.012 null]
+2794 0 obj <<
+/D [7069 0 R /XYZ 85.039 155.069 null]
>> endobj
-6574 0 obj <<
-/D [6568 0 R /XYZ 85.039 251.003 null]
+7075 0 obj <<
+/D [7069 0 R /XYZ 85.039 115.511 null]
>> endobj
-6567 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+7068 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6577 0 obj <<
-/Length 1138
+7079 0 obj <<
+/Length 1158
/Filter /FlateDecode
>>
stream
-xڵWo8~߿%y
-C0q,VZe~t|).wqzu|~5_|>/.|XH _g?c'of8rAƈıS3jnwoŬ1çFFQz(pe_=pcrZA%꘸)<? y/9Sm-q<\zy$]&')0nuUkqhHN^赉;)8n5{ SE5 Q;HlknHɌ Vd(1$ hd"dmS4u8'[|&Z$}0Zhd<8ϩ<#u|뿕P$MZ NRTvG,s#M}<ӄ E֘ZvnKP4xVzpzo7L(k!
-9s*;^&T*dPAl*H5 *T'QGza["#(鄱[N!ؘӢ,KVW2nn5mMXh*j~`+mf|[2u3WJ%m^Yj5w4f]y-5u<1~Pΰ-+ GL{}[/ '{3lRGǢ"4֋G]1fs5;D wcu_zC< Nց}wf+]eX/nmf6;<VPM]5hE8_.\L=aZ (C x1 PԽ׶'4єkFʷrQZ @{:
-6;`RY"fg&^[?a[Md2HHe,kM";H{B9b- DFUɽ),[YfG(JoPHBDD0Esy<#C*P-b^endstream
+xWY6~*C%-j -VIv}g8lT39RŸ̼$L'[䧉U t.瓧j 2yb޼?ٻ R2aA$.A*9>]޼>_N8+ dz@s&@\O%Sc=2"YѬLJyBd8S<6^i7-d(f~̪m%fc߂,(9qAD*߃ivt?q-;$Η(oAJTwQ,J1 9D)FW7/(B1ͯ2P&
+5+Dv.0L YdO{A 's~ ςtLJt˚d&dxGER P͔zqK#m0+lx+&eꤺtWJk$.
+ :cтl sQxfQ<i"zI`^`
+lgfvwOy9JnBcٞ*ڤcv\#>? mwv
endobj
-6576 0 obj <<
+7078 0 obj <<
/Type /Page
-/Contents 6577 0 R
-/Resources 6575 0 R
+/Contents 7079 0 R
+/Resources 7077 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6566 0 R
+/Parent 7076 0 R
>> endobj
-6578 0 obj <<
-/D [6576 0 R /XYZ 85.039 781.388 null]
->> endobj
-2694 0 obj <<
-/D [6576 0 R /XYZ 85.039 178.747 null]
+7080 0 obj <<
+/D [7078 0 R /XYZ 85.039 781.388 null]
>> endobj
-6579 0 obj <<
-/D [6576 0 R /XYZ 85.039 150.011 null]
->> endobj
-6575 0 obj <<
-/Font << /F64 3112 0 R /F35 2880 0 R /F15 2876 0 R /F20 2865 0 R >>
+7077 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6582 0 obj <<
-/Length 2005
+7083 0 obj <<
+/Length 1727
/Filter /FlateDecode
>>
stream
-xڽXYoF~ׯ#=x͹ZI*"%QatHʊ}إJs99Vj,OPHD $f$+q,BF!n"x$򧫛XL8N~0I7W/]O|.Do2Y ۑ&M;Kta`ݎ~^0Sg
-oHWHgICo>mAG9-GměeL- =Ogp,OtB])GݭsV;yr3y, v-&'!QڲeZ[}FKIB;([ Qnh<]>o`iܡf+@fDSoU4<Mv4MHx ⑄u㓎@;'KU,VuWdHjofo Y)l20xқ55cp0MY8t@ ˅e=a[6陱m7<9kHBȮг!f݀]rNw@9ꇉ*/sViz!`L C#f聽`I:8c sxE4+]'ѫt,$:N0]?"2ѹ
--(T,އoG<8^!魉ܖD-CrL`
-E_g}/ DQ,yÀ
+xڥXێ6}W DZQu Їd:&@AA[-,9'߹PN"@ː<3<s8Z1vGqe<#(/#w_FXGWU0xQx|^z~~{? ~"wHZsfz7|CO2'udv(_~>h9̫T2rT$z(Ԁu듇wӛ_X:fyGU;ۋG*-dTvZNy Кײ۾t)OY?O:K3=?⭕}-aoM[_OIExS"eo};}C+DQnckzv[Ug%r5}!,Fs9:y e%⋙Գ!y0;z<S^$غO_hZwyƽ{tnH")VsEٜcH<sC7Z^s8{aP)%lA_Ts]c4LIyF *zU +ηզf]yN=M5:"N&q`~e[IަϜgIYA'[sX )ZCEM9䠂2*.x=̱i/'nW_t˔V%1!&4iH
+ U%$xH+stbWr(<6Q%b)pLfJ=:VipT&6etq ǍɈz?8#41#| Wa4/K>HpIۈ7W-b¢WqOi-LeOzRٲKatlʼt]'U#5K>;߬8:+/؉}pbzspP,rHqb4A"raa
+Ë}=B4DZ3+vGR5: !FJ]ٜepC'6|̓IUZrH Ijr & QۮDdF1 uZs\m!^YU O^vin ~3Vg ث:E]y@"Z.ke'*ՒY3BN`),,G |a6)~B{ԣq"<CU)J9ZjP'rv,j|P-AuKgm&gI<g]a"Ț ª+MCD(ƥN֕aZm'C? rWo=lyw|@i}TA!'z>SXbԟsAbzD5
+Đ/h])]T`I$1}l>&
+K: !d.-TMJ פEÒo.|E2y8 $ߋm?Futendstream
endobj
-6581 0 obj <<
+7082 0 obj <<
/Type /Page
-/Contents 6582 0 R
-/Resources 6580 0 R
+/Contents 7083 0 R
+/Resources 7081 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6566 0 R
+/Parent 7076 0 R
>> endobj
-6583 0 obj <<
-/D [6581 0 R /XYZ 85.039 781.388 null]
+7084 0 obj <<
+/D [7082 0 R /XYZ 85.039 781.388 null]
>> endobj
-2698 0 obj <<
-/D [6581 0 R /XYZ 85.039 679.868 null]
+2798 0 obj <<
+/D [7082 0 R /XYZ 85.039 559.519 null]
>> endobj
-6584 0 obj <<
-/D [6581 0 R /XYZ 85.039 651.132 null]
+7085 0 obj <<
+/D [7082 0 R /XYZ 85.039 517.234 null]
>> endobj
-2702 0 obj <<
-/D [6581 0 R /XYZ 85.039 651.132 null]
+2802 0 obj <<
+/D [7082 0 R /XYZ 85.039 330.106 null]
>> endobj
-6585 0 obj <<
-/D [6581 0 R /XYZ 85.039 627.814 null]
+7086 0 obj <<
+/D [7082 0 R /XYZ 85.039 289.942 null]
>> endobj
-2706 0 obj <<
-/D [6581 0 R /XYZ 85.039 584.48 null]
+2806 0 obj <<
+/D [7082 0 R /XYZ 85.039 289.942 null]
>> endobj
-6586 0 obj <<
-/D [6581 0 R /XYZ 85.039 557.865 null]
+7087 0 obj <<
+/D [7082 0 R /XYZ 85.039 253.075 null]
>> endobj
-2710 0 obj <<
-/D [6581 0 R /XYZ 85.039 557.865 null]
+2810 0 obj <<
+/D [7082 0 R /XYZ 85.039 209.741 null]
>> endobj
-6587 0 obj <<
-/D [6581 0 R /XYZ 85.039 534.548 null]
+7088 0 obj <<
+/D [7082 0 R /XYZ 85.039 169.577 null]
>> endobj
-2714 0 obj <<
-/D [6581 0 R /XYZ 85.039 343.346 null]
+2814 0 obj <<
+/D [7082 0 R /XYZ 85.039 169.577 null]
>> endobj
-5887 0 obj <<
-/D [6581 0 R /XYZ 85.039 324.475 null]
+7089 0 obj <<
+/D [7082 0 R /XYZ 85.039 132.71 null]
>> endobj
-6580 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R >>
+7081 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F35 2980 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6590 0 obj <<
-/Length 2975
+7092 0 obj <<
+/Length 1029
/Filter /FlateDecode
>>
stream
-xڵ]o~SKKsϩ;qvM(ZbL
-Iג:OšY+7t;[o`0pCa|`qlWttǏ\?
-ƾv0=3s'0tsjIr΃]f5p3+'-rdefyS*dxH &n⫎D)N$>,. '4k%U9c5HK3$n=j,q4ঌ0~i
-Uu9*tc9\'GHV[50\2w8+Ł^ YI!7g#?q^wO7 8^:~MY5/K#7<˨S_2=rC2u$+ȏ#FJ){
-mapEKQ#,5h%s75` !OxfZp5/8앉RAC'⛮DtHFک;/u x3ҊzG9E_=x
-49`jrqfl\X5 i
-'UQttcNKEZXd6mF4}py6d^rJwC_˗73m˼,rWp䥻lWŞzcj%ZtzW_OT\]KB7'E;MZ&:"M j.iajx#2%:yUb Xl(<=~)yĭfڭ2K[qfTfop"!T3*7XMw5;RrSEdkqJ?^a? tp
-1b|Z%p4e2,p zR0}JO AS2HFjacVaˮO&P^sQ 
-| bp(smȉ^\M'|P
- /
-X)CW
-u/mns.x]MJ߭ѩ_L[>* r',]]N$vJ'ym#O_=JrwO.*;s{0=%wvoL`1<-H
-.1'\
-=Q9<
->
-V9~d?h>p3hy9]o._QåOt< ]sa~[p'a}rB$ MIH3 q֎Z^9hqNLL:=aE0
-Gd!]ڦ}8>˴LB0\z;uz7àK7^ 8@0N BOT_@R3Tcrbf¨/_S!^ܯKdk2kу'~nj:~ʳM.l!_+{ĕfM@
+xڥVMs6W͔(><:6iN@I1E$eXd:=t<2۷d Op kka!{#.M)x* ۝q WOef:0I,,7ox-n1R7l!: .|X@Hn"b}"[ЮXBif*4
+ʮ\C=UEvrkXJy_65Z"Kw~Z5Gؒy e-r5xlX]=q{6\`
+O.M_U(WuZ؞?~n.0yg?VcP"#rW^cGm tꒋ?n@厞uRJD<5濕JuX,T![(,˗8,+jQH;B%,W1FJHDIځݾbK ;ؑi״eҨchkRf3N,ь2Tw'B@%Lcizz;ڢr|K=cɑc){9\8z*)?Rie}FG{fL`s1ْ^mJi fٶ;NPt:,g 8Xk)NGy[ߐH㦩238 Qe]~<(({Q0:VA<#s6u4᱊{M|`+J7CHb`_z]:ZbH' 20®q x%Mn˫`R.:SyX䐛K9c컻f7H:'4iؒcNkX <8}yS]c:k OCWtse9=)QS^ 3o)!0[=y/a^4TUx|_41sN* |#i[،!!d7:ԋ(fendstream
endobj
-6589 0 obj <<
+7091 0 obj <<
/Type /Page
-/Contents 6590 0 R
-/Resources 6588 0 R
+/Contents 7092 0 R
+/Resources 7090 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6566 0 R
-/Annots [ 6593 0 R 6594 0 R 6595 0 R 6596 0 R 6597 0 R 6600 0 R ]
+/Parent 7076 0 R
>> endobj
-6593 0 obj <<
+7093 0 obj <<
+/D [7091 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2818 0 obj <<
+/D [7091 0 R /XYZ 85.039 597.626 null]
+>> endobj
+6247 0 obj <<
+/D [7091 0 R /XYZ 85.039 565.205 null]
+>> endobj
+7090 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+7096 0 obj <<
+/Length 2306
+/Filter /FlateDecode
+>>
+stream
+xڍn}BQ}ڗvƁ́vA6XP-1H-I:)R=0`5뮒$IKxܾ'k㝴&"0g3J&:ci"m$])|z2r/8Wt, t;"tyiEnp7I7BoY䰓-5c=bZOLk_i&oTE&mlv**9, oMgp:[:×p~mťI)?t" h)=/0v:x%
+2F(x>+/|Fi+ŨrԌmm^)ʨw3 [EH Gke@Q
+lt̲>g z|Ϛ^U<O
+wZEOufuɦ{0 $7ßĉ2 Ch97:5GGYL[ dQKwpkL/^Hlrq@IRwō
+ObMDY*mNcwd{cλl$=OdwO$[e䧜>X]Q_
+Nsb Ha~B.J3@H
+endobj
+7095 0 obj <<
+/Type /Page
+/Contents 7096 0 R
+/Resources 7094 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 7076 0 R
+/Annots [ 7099 0 R 7100 0 R 7101 0 R 7102 0 R 7103 0 R ]
+>> endobj
+7099 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [135.619 595.065 177.399 607.966]
+/Rect [108.346 540.868 150.127 553.77]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.thursby.com/)>>
>> endobj
-6594 0 obj <<
+7100 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [364.771 595.065 397.369 607.966]
+/Rect [337.498 540.868 370.096 553.77]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.thursby.com/products/dave.html)>>
>> endobj
-6595 0 obj <<
+7101 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [445.251 487.277 488.456 498.967]
+/Rect [248.84 405.982 292.045 417.672]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.umich.edu/~rsug/netatalk/)>>
>> endobj
-6596 0 obj <<
+7102 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 473.728 136.793 485.418]
+/Rect [318.127 405.982 343.604 417.672]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.cs.mu.oz.au/appletalk/atalk.html)>>
>> endobj
-6597 0 obj <<
+7103 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [111.316 446.327 330.942 458.319]
+/Rect [208.892 378.278 428.518 391.179]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.eats.com/linux_mac_win.html)>>
>> endobj
-6600 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [377.921 352.358 620.096 365.26]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://carol.wins.uva.nl/~leeuw/samba/warp.html)>>
+7097 0 obj <<
+/D [7095 0 R /XYZ 85.039 781.388 null]
>> endobj
-6591 0 obj <<
-/D [6589 0 R /XYZ 85.039 781.388 null]
->> endobj
-2718 0 obj <<
-/D [6589 0 R /XYZ 85.039 761.463 null]
+2822 0 obj <<
+/D [7095 0 R /XYZ 85.039 761.463 null]
>> endobj
-3063 0 obj <<
-/D [6589 0 R /XYZ 85.039 671.062 null]
+3173 0 obj <<
+/D [7095 0 R /XYZ 85.039 657.513 null]
>> endobj
-2722 0 obj <<
-/D [6589 0 R /XYZ 85.039 638.952 null]
+2826 0 obj <<
+/D [7095 0 R /XYZ 85.039 611.854 null]
>> endobj
-6592 0 obj <<
-/D [6589 0 R /XYZ 85.039 612.337 null]
+7098 0 obj <<
+/D [7095 0 R /XYZ 85.039 571.69 null]
>> endobj
-2726 0 obj <<
-/D [6589 0 R /XYZ 85.039 430.884 null]
+2830 0 obj <<
+/D [7095 0 R /XYZ 85.039 335.736 null]
>> endobj
-6598 0 obj <<
-/D [6589 0 R /XYZ 85.039 404.572 null]
+7104 0 obj <<
+/D [7095 0 R /XYZ 85.039 296.178 null]
>> endobj
-2730 0 obj <<
-/D [6589 0 R /XYZ 85.039 404.572 null]
+2834 0 obj <<
+/D [7095 0 R /XYZ 85.039 296.178 null]
>> endobj
-6599 0 obj <<
-/D [6589 0 R /XYZ 85.039 369.631 null]
+7105 0 obj <<
+/D [7095 0 R /XYZ 85.039 258.647 null]
>> endobj
-6588 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+7094 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R /F35 2980 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6603 0 obj <<
-/Length 3291
-/Filter /FlateDecode
->>
-stream
-xڵn_R@4"9
-n:ki@̆"Y~{e$Zna@ss[I
-S? I0'R+̉#Lũ3Ld%ga:R2әrj_c\.>5<K^_W.Wfp<_IH~0 ڦpp\)\G~~{ sW̬P;KX pÎ%6Y0Y\ ?35THG7nT0d)rnsq*-#Ÿ+tMB@ʖǮʢH7
-5@|;Y(qXG)fnڦpC(?4tfp h@ڶm쀄RԐ&Tu>gSFVӆW<{ퟧ:ڤ5maǼ*bj&ZuG2ңu=f
-M9R6u=#>ONħ;ܸ*Ł p^(yH)ؖxm7e^s4`-y>+f_[p?fM9^?IƮ!Z Is~ @6$1n
-?(yNl{]@; C
-;FnʠJQmWE1ɵE&&BHyd}cp,"f,(!}IT;Q
-&qHI2rHtL |B65iD=]9Li
-bK3\|K=}bPL-IӷH;D.۷5x̨9GySA.:FR"۝$"w˄[```kE LvӪ%qDjO
-4/{jB-LYE/e}j ֲ_13ǁ0X{ ƹMDG[]і<|PJްQۤ-."o
-OVhdh,J
-Xn° RCkxΧ&D3xqbW
-(0|dh0;]mLɫ:Wb0(4iT*•Ηxߒ.&+Hn:$4шBPWp'h!W]Ck4<gnA ]+-G#FJdXG)f1z>WrL&*BV:zN %=BXWKMi4b N*u†N ap%ՖdXc1Wy2hه;?1lȔMŗ p
-WGt<pBK x@!q_*6UxQէTpo!^"Ǯ>^v:NO* d^U;WSm)_^b|aTѫKTY,T3Rt{L'n56ԅٚ$C~ VagF\z$FkYu=j25,k3`#ߤKc07׌\<g@'ZpmkShAҁhPq'>T`"G'vd96խ_<t-#.t췩 y }*@WӢw*2P^'Sxkt Κ%FF~d7ٶB-ƶƬ[Ҷ͠MRe0+Uf{AnAy%QbПHXL),ﵦO@Ρ%?vw$M2=s\l%GH;J(GrB1+NetTy
-%N*GaBQ'L/ xSdObgdFP!mZe^ݣ!⯃?}"Dpf`?rʪQq>*x۾GuiXy:Ê HWBӠ\*$zJ>iTk
-}Oa.))?HtFTOxFUyOנh k9u'<([e1Aׅt>JBٽ2dԣög3×th4^c:\`@ to!+g$-TYBmcM֪=:fMv|l{2#j%IKA6ȊPv*
-ҬMѾW<m\e|޷%ңkdK=EEmri weaMu]tg'eXO&*D Oq
-ђ^@-Z =S %_9|`
+7108 0 obj <<
+/Length 2860
+/Filter /FlateDecode
+>>
+stream
+xڥkOH;" DvF'`9Xin> qm_=$0{:GGqz2bߕq<Znv~+X0狣U|MdXxB7h}q.>/.)#cw<bg>g8g%<՜/n/oŧ˅!\$HџG_z t2G/0\7G@Rˣo#>uH
+CxW%}ן\ %v}7A1 GY҃DE`8?07D9w*ßt,1H,#yU1Q)ujf]|_!D (y3% X"ekB= *b &9;i!9pj#MMI`얏crV5 υ+ rQ:KV fW0?s!1<hpY+KHzbi'ie:%޶X6u[:wYo:hEBEa3LA*nQbS'nZ>i5bBN8O"/p# 5>}IҍNeQYr(3Ex#I( M" <}j0ȕQ@P@]T2<
+IL\/f _mi-b{Hz<.m=oG&aʻom!gߑV]ĆHiX'ŧ.y TsJHJv+(lt|v:}F["LgN<aQĔNr;
+uw2Q{^Cj{@ TVЦpy>X09.T|t=O8xO|Xa!߶̔h^nKn
+xn
+-=3!';MüOxn 鷴1O 9dn`/d(x {ITK ͸l̓G3
+QUv"[܆7z\A;>q{U4FTB1pq\ 怅C"6Y"
+( ᨪ|H닳 $8  LVSg<۳vȐy ~,~ē.DXmc!N͆AS`Wh`&p \rL;qH?tښAX^t5W*D&LUm ϭ-Y5|`?<qo!nTcz0D ۽n eG`>C]]1nˤpO^p ~w !MdU7aRO
+Ɓ כϦ3BB“ۗTyt;&F> Tֆa\g^gIuw@*J]E )&GŌ[e} ZN!1PG]S^,T%K#Ěx~
+i[l+7ӌ{*;(b5u9b!CE3Z@:_t̿=:k>
+a{jښMy@,~<W$_"H&PWf .= pendstream
endobj
-6602 0 obj <<
+7107 0 obj <<
/Type /Page
-/Contents 6603 0 R
-/Resources 6601 0 R
+/Contents 7108 0 R
+/Resources 7106 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6566 0 R
-/Annots [ 6606 0 R 6607 0 R 6608 0 R ]
+/Parent 7076 0 R
+/Annots [ 7111 0 R 7112 0 R ]
>> endobj
-6606 0 obj <<
+7111 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [443.558 712.238 717.944 725.14]
+/Rect [416.285 547.932 690.672 560.833]
/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/)>>
>> endobj
-6607 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [129.766 698.689 348.214 711.591]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://carol.wins.uva.nl/~leeuw/lanman.html)>>
->> endobj
-6608 0 obj <<
+7112 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [338.851 570.769 555.269 583.67]
+/Rect [272.007 392.913 488.424 405.815]
/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://ftp.cdrom.com/pub/os2/network/ndis/)>>
>> endobj
-6604 0 obj <<
-/D [6602 0 R /XYZ 85.039 781.388 null]
+7109 0 obj <<
+/D [7107 0 R /XYZ 85.039 781.388 null]
>> endobj
-2734 0 obj <<
-/D [6602 0 R /XYZ 85.039 761.463 null]
->> endobj
-6605 0 obj <<
-/D [6602 0 R /XYZ 85.039 729.511 null]
->> endobj
-2738 0 obj <<
-/D [6602 0 R /XYZ 85.039 545.678 null]
->> endobj
-6609 0 obj <<
-/D [6602 0 R /XYZ 85.039 521.696 null]
->> endobj
-2742 0 obj <<
-/D [6602 0 R /XYZ 85.039 316.435 null]
->> endobj
-6610 0 obj <<
-/D [6602 0 R /XYZ 85.039 287.031 null]
->> endobj
-2746 0 obj <<
-/D [6602 0 R /XYZ 85.039 287.031 null]
+2838 0 obj <<
+/D [7107 0 R /XYZ 85.039 611.175 null]
>> endobj
-6611 0 obj <<
-/D [6602 0 R /XYZ 85.039 265.839 null]
+7110 0 obj <<
+/D [7107 0 R /XYZ 85.039 575.765 null]
>> endobj
-2750 0 obj <<
-/D [6602 0 R /XYZ 85.039 145.169 null]
+2842 0 obj <<
+/D [7107 0 R /XYZ 85.039 378.644 null]
>> endobj
-6612 0 obj <<
-/D [6602 0 R /XYZ 85.039 121.851 null]
+7113 0 obj <<
+/D [7107 0 R /XYZ 85.039 343.84 null]
>> endobj
-6601 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F14 2895 0 R /F35 2880 0 R >>
+7106 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R /F41 2998 0 R /F35 2980 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6615 0 obj <<
-/Length 3159
+7116 0 obj <<
+/Length 2667
/Filter /FlateDecode
>>
stream
-xZIsW6TU`ab'lyRIXDƞ
-45%y$jx v p
-aMz<p M~S V]1kDXHTeS d-(30` %$@Zب
-}G<
-5>,Џ̾X[Jz,AJ'{ |r0<.=r@# mmm2p_[R&BQQ\H)2 V%wJxpwXL(r6gtn'F_ŮWuGʑJy[-+ep*o^)85̔|?dggVo_v$7*.5ÙNoǫ)0rҙF)tۏ׻ҽ8ǐ2AH,0LRX .Ɔ $V_ ʸJ 1CYu091~BeͻN
-LE g 7@a+h'Iņ_')cإ80p]W(a8:+L&ڑxNՄFQ–&ND]g G _&0 8 ʚe/se-ǡV ;P88u:`'+Ymڀ}#€k"!/8P*melI\k,5*oŦmm,`/9+AŮ,(B<S~ bJܺbO&3]9 ّM/ 4y)pXiR\IyP5Nn7|RD2E@~Й+TdS$c~c ~LQ&cx$*HܪsɜJ1|F{~N#ypq<0nWD\>SmLCqp45bl[֚<늖L mtz_
-0<3U\"4<.m^d*a@SxJG\]Ϧ
-{`̖(tI6@H>L :K>*a>`kHF۶
-[H[y0i04PpJBJXie_aGaʔ51MxLX&J_)CiO
-x1K[l^٨9̄DA+Tc52UNXYq,sЈ5!E$(MqvN-P4rbjxh^*17Q碱!Wb=l|Ϙ/7g.?M_IFoE|0Jѕ۬v{s:U)b1^x=EޢnSt$oIJ-=Q<+v}s`۳[] cE(|]Sw8],wQzU;~^coW՜?2}agivp'/!^ /S9 Ҟ4$Bxf3#p 4J4-xm~Q^-<5f)i %ޘb6:'|ұ % BR~ o8^)^J[_ 舺ʎ 3@(t:dE1kW6X: 
+xڥnFm) j{8{cM Ɂ);Td֫IJ>X]U]o zvQiFhGK8B DP&=OӋ;?i[v<.::|w4Mz~O\׵H'aYcm]=|Bg]=Opw |8}9v2^ _iR [q4V=Wſ[R|!U+) VIz|[GJߋYI˱xk۪pZ3<%
+Q–U>"/TA"[EDnb$*DQ΁D(o[a4cVòaQZ7H]k{g^uhIh<KCBv0Rv@2|36f%e6M X
+55dIU OxHfU3*I / ޵$v>~:<m֮BE"!Y3Ȓxvd% ajhF(-yAfoJ]eyVH:$)v~}oxVxU
+V2AI͖uT)r`x1('d\͗[˪rktf{z A{A}te3"~o\GedEF[yͿnD\Qa?lvxiK̊IҌXW(62TKo-r#l!~gfz#/׈ R~ǦS#o_Foi"38h}yԅ4:`y\aؙFXn8ݪ3!}_|t(g@$HWD”m-8Ѓě,L6=aN)CdIx@lFbGAA6=[zSLr"ASb_j+$Sʩ-Ɉa7$JR`앬F'y+$d r`C^e14c-+Rqt} "Yd Nn))%sIQ{o^]/* c
+]Mn?EYt`sm}F̏>5,Ys.ȴ& e犿/TR `b=ef0&tM&p{7ȋؗꆲC0uIQ
+KETwC{lr=lJ.7hB]GPCgsDoBټ!4MT ?\S-5J I7Rsz$QS
+#sdž
+J'ZsSEwpf
+d|{jAlqe-ښ#4/ES7bi`ԁzt_ )߷IKsPw6gYefnf@AffZ“p71 -W2pV @jT//j&@Mi@0{Zr |rMG5(m;Thce:Y*7+;>s%/jL)s5O}/ͱm烳?ZuhšrBf)ɲHvE#U#3
+uqy |sֽ' H4&{:'kNY'/Aڙ3jLƣ uIד!b;8*b뷮XʮQ7Q݄$
endobj
-6614 0 obj <<
+7115 0 obj <<
/Type /Page
-/Contents 6615 0 R
-/Resources 6613 0 R
+/Contents 7116 0 R
+/Resources 7114 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6623 0 R
-/Annots [ 6619 0 R ]
+/Parent 7124 0 R
>> endobj
-6619 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [394.325 552.321 452.136 565.223]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html)>>
+7117 0 obj <<
+/D [7115 0 R /XYZ 85.039 781.388 null]
>> endobj
-6616 0 obj <<
-/D [6614 0 R /XYZ 85.039 781.388 null]
+2846 0 obj <<
+/D [7115 0 R /XYZ 85.039 761.463 null]
>> endobj
-2754 0 obj <<
-/D [6614 0 R /XYZ 85.039 706.019 null]
+7118 0 obj <<
+/D [7115 0 R /XYZ 85.039 736.911 null]
>> endobj
-6617 0 obj <<
-/D [6614 0 R /XYZ 85.039 684.823 null]
+2850 0 obj <<
+/D [7115 0 R /XYZ 85.039 736.911 null]
>> endobj
-2758 0 obj <<
-/D [6614 0 R /XYZ 85.039 602.015 null]
+7119 0 obj <<
+/D [7115 0 R /XYZ 85.039 702.17 null]
>> endobj
-6618 0 obj <<
-/D [6614 0 R /XYZ 85.039 580.819 null]
+2854 0 obj <<
+/D [7115 0 R /XYZ 85.039 552.28 null]
>> endobj
-2762 0 obj <<
-/D [6614 0 R /XYZ 85.039 511.56 null]
+7120 0 obj <<
+/D [7115 0 R /XYZ 85.039 517.535 null]
>> endobj
-6620 0 obj <<
-/D [6614 0 R /XYZ 85.039 489.699 null]
+2858 0 obj <<
+/D [7115 0 R /XYZ 85.039 366.981 null]
>> endobj
-2766 0 obj <<
-/D [6614 0 R /XYZ 85.039 421.105 null]
+7121 0 obj <<
+/D [7115 0 R /XYZ 85.039 332.235 null]
>> endobj
-6621 0 obj <<
-/D [6614 0 R /XYZ 85.039 399.909 null]
+2862 0 obj <<
+/D [7115 0 R /XYZ 85.039 249.428 null]
>> endobj
-2770 0 obj <<
-/D [6614 0 R /XYZ 85.039 288.828 null]
+7122 0 obj <<
+/D [7115 0 R /XYZ 85.039 214.682 null]
>> endobj
-6622 0 obj <<
-/D [6614 0 R /XYZ 85.039 258.627 null]
+2866 0 obj <<
+/D [7115 0 R /XYZ 85.039 145.423 null]
>> endobj
-6613 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F14 2895 0 R /F35 2880 0 R /F56 2890 0 R >>
+7123 0 obj <<
+/D [7115 0 R /XYZ 85.039 110.013 null]
+>> endobj
+7114 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F41 2998 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6626 0 obj <<
-/Length 2764
+7127 0 obj <<
+/Length 2803
/Filter /FlateDecode
>>
stream
-xڵ]oFݿBK) Z/<8ӨW;nC<-H~}KJ];3;;;r'I(mId=ӓ5`~>sBO|
-N{߀0OBn
-`cnrd mix?K5/TX]Qx+J0t
-rޝKVVewS_|l%:4<t.![MB
-(vRF|aNNH6W3)>!FP<%ߠU'|=ٖm)G<!|gq psr2QVp1!sBNVB
-&R13׃l7QϯMRuno\N 0I |#no{aV V@W6gL񕊆,:⣵yA7sQ4Wgg'gl(t.M!fN)'2)yėmSM.(xQ]ZDuomj?֝D,=0Q畐0}9U+OI\ tώ`" | ڒ9|:Iv|쿸0C95Z8">?x̋3s)7vcd
-e2%2wyќȞ yq5b0- qրpIƚȮm/ ͫݰ&]d V_L\T,Z}]<.HBoL1ecr nANSqRدtf+VÑ Ý9͖Spb40$5  x¢u!3eQ¨ @cx[bpp0\$pvwL!kI>9$!l@6*7;
-]k5øPC bBw#lvQ jY+7T-`bū}*o$;Nɇ!8=F2J(C8> ^&9PyE˯Si+m
-mW.咲MʶGp{
+xڭYKs8W6T՚!@"jۙLlk-eShYD Iɿ~Jģh..az9L&lu\.a %WBrգezᣉ/UAz9]t?2tջz<{\a腉?o2P/8y<8fxfq7Fwm(_sځ`zu"&
+_^L.蒹)R\O9XQ:%iU~jL_I&M@/A=dV^V Ճ+Uo
+FrlSZ_ rv4$2Gb?İQ /bGy ɴ)]YjT
+Hw813K"# *Svl|%"o,s?+/1H"ϷC?
+)P6r]U,sHl
+2ZtƉ%
+eDJ&^y[xIXY@䋜ɒo )Wɫ}װW0!9c=`L D6MTbIөv`u̔%1ʷ,
+A7BsO5L6TI,:\V[J%,x})'ż( ƹ9@|r>ЄhI^KS}K{4'1*}AL5FAa5g:?l*D'}Ήۑ)9?
+&W
+lBj b0+ Y9>Nt-Fۘ!Q@eks{ܞjv2 A._nj>wcYj*$$F(=t\r5t
+N>B? Oh 0ڗ :[ρĻ:endstream
endobj
-6625 0 obj <<
+7126 0 obj <<
/Type /Page
-/Contents 6626 0 R
-/Resources 6624 0 R
+/Contents 7127 0 R
+/Resources 7125 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6623 0 R
-/Annots [ 6630 0 R 6632 0 R ]
+/Parent 7124 0 R
>> endobj
-6630 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [149.104 518.42 206.915 531.322]
-/Subtype/Link/A<</Type/Action/S/URI/URI(file:smb.conf.5.html)>>
+7128 0 obj <<
+/D [7126 0 R /XYZ 85.039 781.388 null]
>> endobj
-6632 0 obj <<
-/Type /Annot
-/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [165.346 77.186 348.339 88.876]
-/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;[LN];Q103765)>>
+2870 0 obj <<
+/D [7126 0 R /XYZ 85.039 761.463 null]
>> endobj
-6627 0 obj <<
-/D [6625 0 R /XYZ 85.039 781.388 null]
+7129 0 obj <<
+/D [7126 0 R /XYZ 85.039 741.134 null]
>> endobj
-2774 0 obj <<
-/D [6625 0 R /XYZ 85.039 761.463 null]
+2874 0 obj <<
+/D [7126 0 R /XYZ 85.039 616.695 null]
>> endobj
-6628 0 obj <<
-/D [6625 0 R /XYZ 85.039 741.134 null]
+7130 0 obj <<
+/D [7126 0 R /XYZ 85.039 572.945 null]
>> endobj
-2778 0 obj <<
-/D [6625 0 R /XYZ 85.039 684.25 null]
+2878 0 obj <<
+/D [7126 0 R /XYZ 85.039 330.859 null]
>> endobj
-6629 0 obj <<
-/D [6625 0 R /XYZ 85.039 657.636 null]
+7131 0 obj <<
+/D [7126 0 R /XYZ 85.039 296.113 null]
>> endobj
-2782 0 obj <<
-/D [6625 0 R /XYZ 85.039 129.164 null]
+2882 0 obj <<
+/D [7126 0 R /XYZ 85.039 227.992 null]
>> endobj
-6631 0 obj <<
-/D [6625 0 R /XYZ 85.039 107.402 null]
+7132 0 obj <<
+/D [7126 0 R /XYZ 85.039 185.707 null]
>> endobj
-6624 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R /F35 2880 0 R /F14 2895 0 R /F66 3242 0 R /F11 2898 0 R /F72 3966 0 R /F18 3969 0 R >>
-/XObject << /Im1 3957 0 R >>
+7125 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R /F62 4052 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6635 0 obj <<
-/Length 2795
+7135 0 obj <<
+/Length 1868
/Filter /FlateDecode
>>
stream
-xڽ˒_GJ0
-䤲2yIa[c"fk3$P czlƷPy!$yr>@࿑?j JwCoi1Y^g"cy& +f391>1y6ͼԹ` # XbecRdw2y6B"L[\ݶl--{IT:w9(#5rRS"k>4\mȹ(Q׭b
-Sy9 rHZ*lHǴ1ĥeΐfã}ɒ9+ʮg¹79;CI'7(+fًTW P
-':Tu\5|y _-~HJ)8c4O!~f_ogr
-5w*3'dJ @]517au)X=SۅlՕtX a.xk0Rj!kRÍ^jV
-(XN:'F&]G,t-4ur0mTI"RAj$tͮzɢ83TYR t3xsz\d[ z ȣaF@&ź5"m+D upo>l`Z_05N ĕ$Y邦m=p2Yr̵ϩu*r5^I+5j5QvK|}~ٻjZWE?
-b!B04u>]GYzq+ۻb'ϪdxIaF޿.g䫋"rLju~}]H
-r4S0%٥,XɴAG-mI5`K\ёGE q|M(
-8SJ!C
-Jy_&
-!
-ᧂmFi[Ro"!`ſB35b? .:I-/9xԝh++ƔWCt\@j繜CNϝ
-0hGL$6 dP!ۍ OFҧ3!Lta5nZT4Gzap[^ĦrߞaWy >;;cG}&Oa 8YṔ۷b2E:S& ~޽>Z/A@ %exc$R8՜LmT9qtb#㜒rRT3]]Xqkiߝ|4 +FALC!,8[c"z6lz5`2#dED+p9h^:k|ݽQk"/\%T_ Q/ #gVHendstream
+xڭXK6 Whr<sL;fa栕e[Hr7/@l;m
+Zϫuj0LoQgn9+ ll~
+:5W: |Ile"A"|
+ʖ||Ymz~AT_X"Y_Oj,RcO=X90yRA ,x+}7
+Xš#Θ^Z]@bxDb]a͍; v-
+zZ\j?.S&,
+zhÛ,~vQ,a S`Ю5`BSo
+J,`t% 3G2)>܎d,bRv'U_!
endobj
-6634 0 obj <<
+7134 0 obj <<
/Type /Page
-/Contents 6635 0 R
-/Resources 6633 0 R
+/Contents 7135 0 R
+/Resources 7133 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6623 0 R
+/Parent 7124 0 R
+/Annots [ 7140 0 R ]
>> endobj
-6636 0 obj <<
-/D [6634 0 R /XYZ 85.039 781.388 null]
+7140 0 obj <<
+/Type /Annot
+/Border[0 0 0]/H/I/C[0 1 1]
+/Rect [84.043 206.584 267.036 218.274]
+/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/default.aspx?scid=kb;Q103765)>>
>> endobj
-2786 0 obj <<
-/D [6634 0 R /XYZ 85.039 761.463 null]
+7136 0 obj <<
+/D [7134 0 R /XYZ 85.039 781.388 null]
>> endobj
-3064 0 obj <<
-/D [6634 0 R /XYZ 85.039 667.044 null]
+7137 0 obj <<
+/D [7134 0 R /XYZ 300.917 698.964 null]
>> endobj
-2790 0 obj <<
-/D [6634 0 R /XYZ 85.039 667.044 null]
+7138 0 obj <<
+/D [7134 0 R /XYZ 85.039 576.494 null]
>> endobj
-6637 0 obj <<
-/D [6634 0 R /XYZ 85.039 639.536 null]
+2886 0 obj <<
+/D [7134 0 R /XYZ 85.039 285.661 null]
>> endobj
-2794 0 obj <<
-/D [6634 0 R /XYZ 85.039 406.978 null]
+7139 0 obj <<
+/D [7134 0 R /XYZ 85.039 250.349 null]
>> endobj
-6638 0 obj <<
-/D [6634 0 R /XYZ 85.039 377.574 null]
+7133 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F41 2998 0 R /F58 3365 0 R /F38 3001 0 R /F64 4117 0 R /F18 4120 0 R /F20 2965 0 R >>
+/XObject << /Im1 4101 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-2798 0 obj <<
-/D [6634 0 R /XYZ 85.039 172.114 null]
+7143 0 obj <<
+/Length 2311
+/Filter /FlateDecode
+>>
+stream
+xڥɎ6^_ Ċ(j=t3(A˒mdɑ(Ѷ9 X\߾P-Ei|e!X`(~E0\UAT徎¼[?|c,OXo-!IY/*{1˕NRץV^-W۶8ٔ^wjp3n{OY2KoXi$x.3*0(d'ʽho@DҺOCDx?r8|DzbJ3dB SGؗ(2H:M/ ~+/|Mdްr0I so@!
+,m xY4o5\/WQ'B =`཮4u}1q*Z &:>tK]̡ d#Ns1(ڴ50x> P. u MUZB.`?!8 im)a;rE4 '_L_<|$o S?șGT~9FZd;3RVTM/Jի
+0)/h_vq,z伹!9*BEeӍA圢<"x &m߲TB4Ѧ!W"Hxe
+-$S} Dg ޖL_oB([TM}cf7jL°;e #r&V.xnʜI!iwdc?mA +m J Lz{8T~n7U'*,Ey8OeƉ=hl)!_ǐ3 0DѮgSփɆb>@::cѐ *6.$06?8!ZB O9ֶl(|ӄ8xbs507y*rVb$o^FW"Jd]Y0L}>Ԓ+
+ނa:p`QX^6q3[}dcQQfF|'e,7jl&.{2`w45GQo$sV.cl=w17m#TNa~4GMW9>!wR$ι봚dq CP@&[0讚rvkmc"uH;:%9aba`󜊓^\!u 9~^鶱[$RZ^_0S:LNBnb 'cMC F)*z~E5:lR'߫#}GbGuSP#l[ N wr ToRM-Sf_(?rM1^%5g?J)Ck7!~x~ה,6c9z~cblو44\YaQ,b/2\\\:pkiJK|WEEJH{HdQ¬buU+Wx3 U\,]ZY RG Tl, 7Y#/!WVE
+4PaaZ9nm =^8k@nAR_gI3,i.L*5<-aN Sɢ0
+endobj
+7142 0 obj <<
+/Type /Page
+/Contents 7143 0 R
+/Resources 7141 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 7124 0 R
>> endobj
-6639 0 obj <<
-/D [6634 0 R /XYZ 85.039 145.5 null]
+7144 0 obj <<
+/D [7142 0 R /XYZ 85.039 781.388 null]
>> endobj
-6633 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R /F35 2880 0 R >>
+2890 0 obj <<
+/D [7142 0 R /XYZ 85.039 761.463 null]
+>> endobj
+3174 0 obj <<
+/D [7142 0 R /XYZ 85.039 653.495 null]
+>> endobj
+2894 0 obj <<
+/D [7142 0 R /XYZ 85.039 653.495 null]
+>> endobj
+7145 0 obj <<
+/D [7142 0 R /XYZ 85.039 612.438 null]
+>> endobj
+2898 0 obj <<
+/D [7142 0 R /XYZ 85.039 379.88 null]
+>> endobj
+7146 0 obj <<
+/D [7142 0 R /XYZ 85.039 336.927 null]
+>> endobj
+7141 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6642 0 obj <<
-/Length 2694
-/Filter /FlateDecode
->>
-stream
-xZKsW-X0%9rE#ҕJ> w]ͯOf
-[*` qշ?m~wo?-WJ)Orw onw(~>~\WxnrJ:QxW,6 Wl |Q_XV\]^sz\rWIX2ngn{+*R]Ÿx\ꩄ?͖qH 2~R{ea
-߂P`=0DJEް+x Rh
-T
-@+iuA~v:JNZ
-r^b<*L[xBU1%4fD(
-vgI![3Xz~iSU-{-AÑB-o\yz\D+|fvp|? f\VR?JYN9͂$RS؜, qzPCSTb<*pGNm#4\%lΙiMmOLK\S4}m]
-VNFjr6)fUɛȪ^:LG%9$MW7,`cDxa5#.?q ?.'IԐy |Wq@[C,' &H8M5{*@c<cRcw<"ഋTN8wj<N| vm3/
- BY.HX^&JleuɲkleUζ=OH^vC0q{`Ӏ
-GGjr:8ɚSf]o "%Gf J֡t8+(Ӎ9tFē }#,r'߹lJ,z6-
- fr0ۘ."{)
-k+Fep^Yu+npsyۿV8_Sb˔
-Og H`л41mX<v܍ <®+!aFe4&(4dۣE⵴ti׼ DI/v.i^0$I1/W"0:_0@k8*Km"=֫lW1VùMїۦR,7<Ybf!\9W6S|ۈ(:#Hp*U%gAW2J$31 \9`imOИ":%ƻvz˹"mp # Yϧqzkse# #KۘFxcE<QeEc]8)uVxG1Qq886ȹ!e+P07n4Yjxb !Hb@6&n]/ՑA;;WdZDqrIMީo荢vDprHX^-a1l%\<q6^8} >8 5_3 c2$ v SH}ǴFD-S3w@ޙ18iJ\9܄9e3Rr9aڳAiEiju.*]k'ܱd:jd˅ ,NpLYWJK+pcQcrRNrֻY?VcDY̭uٻ tUY=QoqNE.CER #jUa
-} l3oW6S,@HGX] Oj2<=#3 x7vFhK᜿`EI'h.Ew Rr/Jl3cպ-μ::8
-y)t JT!r%?֪
+7149 0 obj <<
+/Length 2570
+/Filter /FlateDecode
+>>
+stream
+xڥr6m|<کIvR[T,Q|($5/E鲕 l4FGOͲ|̔elU-tc!( t?fq^ֿ{?ᗗO_((2{xz|@p_83_p|ϗ>X]p{ul |Q͎|'q$,)ދg|jJzPm ʏj(؏PI@)%sk s7*&ʈCdX*Ӏ+xP S#ڗ}?X =2o
+1u7~ޠbA_ MH~pF
+򀬇EkRn}`}'C ҕ Dr٫D= C/b[6B xf{N.yRf!l
+MּkMa mvat=Ĺi{o> 0 )<s/B 4gtU*|0h G*tSXZo$ ~璳ɲ"(oo-$<B$r{`\W쒀 cq"{cּqn7. 3, I_HG~GYV W%*}l`%2fY"vDtC,o3b:`AX͙1XuƊ)z>T{?ViN<E'8hgPCD]DZT!qdd2F>F(LV
+-WGm\J1ڜEQj1{Tc=:1ڰӃY$M85LP){ֆf  =5U'e<<(q{Uڵ9Dž I4VmK)E/pu%zBЕ>dBβ#$R#lTp`CcJB_w%(*=JwݝsLT⧶ό|f#\c\m0);$AwzJnhDtRJ2Mw!؁,b nLXSʍIg[PBsAv3MJ| # ݬ#IplXcHaT'Zk q8âg"#eW̳SbVgW8SaZ)5JM
+_<Ψ*ĈjL(z{_ZW-M>/K JQ̀.t)P
+0< WMt@[)7d
+}Oyej_c~#mnNĀugj.x1#· ?&^k%0,YD$LL/H/AeCKI!31g#JaLm0q8q+ zk-yl B*Nr+v1Wah&`R;cRZƩ˄S)W\W㌢X"Z71jL]nZdືϳ ֓C+m@
+. u39px|$!8@N\ee?UcwJE[!x2=vpƖʔby#i6[l88WKŠ3w5wJ;r]cN4 8W[I
+̾pu >0!)g2Y@ҔTO|<j0J$0^*=^QM#8hxDt1 LuKPPBCN 5W6oͺ
+`ͦ`wdv6UB)?x N_ ^91ma˲2J f|lg^=3y,D#w]˸>xcӱ19dS$9 U)- C?T\-?Dd% endstream
endobj
-6641 0 obj <<
+7148 0 obj <<
/Type /Page
-/Contents 6642 0 R
-/Resources 6640 0 R
+/Contents 7149 0 R
+/Resources 7147 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6623 0 R
+/Parent 7124 0 R
>> endobj
-6643 0 obj <<
-/D [6641 0 R /XYZ 85.039 781.388 null]
->> endobj
-2802 0 obj <<
-/D [6641 0 R /XYZ 85.039 664.197 null]
+7150 0 obj <<
+/D [7148 0 R /XYZ 85.039 781.388 null]
>> endobj
-6644 0 obj <<
-/D [6641 0 R /XYZ 85.039 637.583 null]
+2902 0 obj <<
+/D [7148 0 R /XYZ 85.039 761.463 null]
>> endobj
-2806 0 obj <<
-/D [6641 0 R /XYZ 85.039 483.53 null]
+7151 0 obj <<
+/D [7148 0 R /XYZ 85.039 739.701 null]
>> endobj
-6645 0 obj <<
-/D [6641 0 R /XYZ 85.039 454.126 null]
->> endobj
-2810 0 obj <<
-/D [6641 0 R /XYZ 85.039 397.708 null]
+2906 0 obj <<
+/D [7148 0 R /XYZ 85.039 545.001 null]
>> endobj
-6646 0 obj <<
-/D [6641 0 R /XYZ 85.039 371.093 null]
+7152 0 obj <<
+/D [7148 0 R /XYZ 85.039 504.837 null]
>> endobj
-2814 0 obj <<
-/D [6641 0 R /XYZ 85.039 257.688 null]
+2910 0 obj <<
+/D [7148 0 R /XYZ 85.039 323.686 null]
>> endobj
-6647 0 obj <<
-/D [6641 0 R /XYZ 85.039 231.074 null]
+7153 0 obj <<
+/D [7148 0 R /XYZ 85.039 280.733 null]
>> endobj
-2818 0 obj <<
-/D [6641 0 R /XYZ 85.039 144.767 null]
+2914 0 obj <<
+/D [7148 0 R /XYZ 85.039 210.765 null]
>> endobj
-6648 0 obj <<
-/D [6641 0 R /XYZ 85.039 115.363 null]
+7154 0 obj <<
+/D [7148 0 R /XYZ 85.039 170.601 null]
>> endobj
-6640 0 obj <<
-/Font << /F64 3112 0 R /F15 2876 0 R /F20 2865 0 R /F35 2880 0 R >>
+7147 0 obj <<
+/Font << /F56 3230 0 R /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6651 0 obj <<
-/Length 2566
+7157 0 obj <<
+/Length 2646
/Filter /FlateDecode
>>
stream
-xڵYKs8WhNf" =lٞTb'<[ H IY(ʒԔDƣX <S$t=D:I7A剒 p(ĦQ0PzO:>߿֎N(nOg(P{w~''l@Z__]_v7(pH| N<W`eUi:Xv@K8;ҍmlrd{T~x~>L;{:
-5K9뒬M'qj3Ķ5vUR̨xY$p.d<tIWBWUrbK a9i W)y)y7ճn/_;^͐Usfo~gA|}|~D 0RWCjY9~as1]8Wq5|b@p'SK(rkiM9!ꩶ@.5H~ u_ѲYdR`Q)
-;-[cf,3 +D~rvIFM ǐ .}71&߹8hxBƾ:Ls:j``jkk&uCGB%9M |2Hv>
-(QH1u֬{ X@m0%*9ﯽ`?s2k;{?hmr
-hKYzG}k1a,h/{̚+d 3FhL"+l9˰Vb,
-òZלyEW٠vV|%#!
-݀]a dD g
-6{e̹@ B\
-. .+>dKQ\Xu40mVNmN2qJ $ f(i_6v_wjjqx O/~NtOl̦I 9=J8%Zw9r~)(';z7-j0u\s~Q?rQ_'FǮJ=1^#WG/2fendstream
+xڥYIsFWb"@7dv%ĔR
+tD~v0zd ԓsه˩ѩ{9y/p8pBK8w_pr
+c5fV"잢8ݛ,@/<Wڞtua_^<\.s>ԉ&~x^@h ~-wb~N\<@sza7n@F0!+sknx$öPwȚkCrb';l]}؎{3<?~FY=R><%%Y3,%#i@=eyH(rvIU.'$ +F]_+^eh,߸e
+UX01ؚ`I{Ѳߘ0o$?.
+BN;&~!@5s*Rwhk6B&2ԧ Oa*]Ƌ6gg:'Xƍ,J
+7~"RFاt%17Dy4-^&YZk6Bli2ƘD0)k'(]-{bKSqD-i <1 ȢiH`0n aьκnY5hgj+Vw<.V"LUذv PtY^Rsk#7QY19B ?
+Kĉ=*_ܬ
+5'$ʍ$IF<d 0Xfm.j޴oVo/elutܴ<5dsrp P9׵Em:PyLB\ibR諱RjӒ)Eb皅X h\|,ќDV#{m
+K4{VGDZ%hN" rE%9:-+XD^Nb+4i pcNJU`AxkJ(9ZӺvyg>Y"} #]낽_;y/ОcͯZ7c :Ͳk! ݖ0DiZc
+I]Gr83ЯENrK6U 60п6; }D>aPSj& tD~5a^8OqV+N#IH=)U8R؋9/J()_hN 0׏ "}
+[dFԈy RhL%;C|$/)+Q IC`˨#2F4L$idG"+#EEi.==kSw*J%
+6A5rjSr4xSgZϓ`8 rP-u9( Mos{eLB#rpOޒۧgtgMA%s 'iG~9)LFkP&@
+^8^i `rʰ|&kan4k圛 O[pK} =TR)ȣX?Ɉ$j|5x=~q[腄pM ǘџyU [y+4<:=R!ѥ: \GOί˟JyT;i:Hde0vD^2n]཭6A-g47CϺduЂS:q\ZIrf?
+ԁ* kCi
+K˖@$ N$Dh67LS&bC*Lr<D!:Fzˋ9ղՉ$?~bS`cS[gtxݲ?!I?ѻʋrQL(Yᬲ48(J琝ʹ-~4m} В7\6!lKXy["eEJY:kSR^aI}X^J( EP„UivlxA%n4yS V%% DCe*O`.oI=;-Ky0Q;1`("<yŁҼ;_j=gP|,uz6ќL[}w0io!?mS. zSIS׋HNk7 #*@II>R0 ?G`eY/y'Av@vC% [GTo5ypmYIP^xGrC쭛7 n5=w)/> h3& FM8vL};ϯ߹̀
+K9GIm(H*]18GsTd'*UG-YQMFfPAYbkW?endstream
endobj
-6650 0 obj <<
+7156 0 obj <<
/Type /Page
-/Contents 6651 0 R
-/Resources 6649 0 R
+/Contents 7157 0 R
+/Resources 7155 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6623 0 R
-/Annots [ 6654 0 R ]
+/Parent 7124 0 R
+/Annots [ 7162 0 R ]
>> endobj
-6654 0 obj <<
+7162 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[1 0 0]
-/Rect [229.043 698.057 352.339 707.625]
+/Rect [130.467 370.097 253.763 379.665]
/Subtype /Link
/A << /S /GoTo /D (Other-Clients) >>
>> endobj
-6652 0 obj <<
-/D [6650 0 R /XYZ 85.039 781.388 null]
+7158 0 obj <<
+/D [7156 0 R /XYZ 85.039 781.388 null]
>> endobj
-2822 0 obj <<
-/D [6650 0 R /XYZ 85.039 761.463 null]
+2918 0 obj <<
+/D [7156 0 R /XYZ 85.039 718.394 null]
>> endobj
-6653 0 obj <<
-/D [6650 0 R /XYZ 85.039 736.911 null]
+7159 0 obj <<
+/D [7156 0 R /XYZ 85.039 678.231 null]
>> endobj
-2826 0 obj <<
-/D [6650 0 R /XYZ 85.039 682.614 null]
+2922 0 obj <<
+/D [7156 0 R /XYZ 85.039 564.826 null]
>> endobj
-6655 0 obj <<
-/D [6650 0 R /XYZ 85.039 651.089 null]
+7160 0 obj <<
+/D [7156 0 R /XYZ 85.039 521.872 null]
>> endobj
-2830 0 obj <<
-/D [6650 0 R /XYZ 85.039 486.277 null]
+2926 0 obj <<
+/D [7156 0 R /XYZ 85.039 465.454 null]
>> endobj
-6656 0 obj <<
-/D [6650 0 R /XYZ 85.039 456.872 null]
+7161 0 obj <<
+/D [7156 0 R /XYZ 85.039 422.5 null]
>> endobj
-6649 0 obj <<
-/Font << /F64 3112 0 R /F20 2865 0 R /F15 2876 0 R /F56 2890 0 R >>
+2930 0 obj <<
+/D [7156 0 R /XYZ 85.039 354.654 null]
+>> endobj
+7163 0 obj <<
+/D [7156 0 R /XYZ 85.039 309.579 null]
+>> endobj
+2934 0 obj <<
+/D [7156 0 R /XYZ 85.039 133.339 null]
+>> endobj
+7164 0 obj <<
+/D [7156 0 R /XYZ 85.039 88.265 null]
+>> endobj
+7155 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F20 2965 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6659 0 obj <<
-/Length 389
+7167 0 obj <<
+/Length 1035
/Filter /FlateDecode
>>
stream
-xڅSMS0+rL$@rժ3rSXhallH".J֒&dY$6xGo(.tz RR ܉qE7J%x
+xڥVoH ߿>uugX=6UҦMUuj
+"w lc"V)=Jӓ`Qfe?tIyrJV# ENEc~mf?
+ `%4x-=#+
+6oeDga\$ҵD;JeGO@
+Th_{m`B0?{GCU
endobj
-6658 0 obj <<
+7166 0 obj <<
/Type /Page
-/Contents 6659 0 R
-/Resources 6657 0 R
+/Contents 7167 0 R
+/Resources 7165 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6623 0 R
+/Parent 7169 0 R
>> endobj
-6660 0 obj <<
-/D [6658 0 R /XYZ 85.039 781.388 null]
+7168 0 obj <<
+/D [7166 0 R /XYZ 85.039 781.388 null]
>> endobj
-2834 0 obj <<
-/D [6658 0 R /XYZ 85.039 761.463 null]
+7165 0 obj <<
+/Font << /F56 3230 0 R /F15 2976 0 R /F62 4052 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-3065 0 obj <<
-/D [6658 0 R /XYZ 85.039 667.044 null]
+7172 0 obj <<
+/Length 398
+/Filter /FlateDecode
+>>
+stream
+x}RMS0+rL'jUg߄@et}eaÐQDè0m"6 TI+xƚSU',B2ϢGZl;
+1
+e;@IB'8,H՟4^40;yW5uUag=d-#KW"7hg[jjIgNOpl¼Wt҆쿘)ĀNؕ1gDb oOp ÝmC ̿ 7؆L5T'&r]voά[,~Be:]׵X/WrDNT_Eu1?ۅn|= \
+endobj
+7171 0 obj <<
+/Type /Page
+/Contents 7172 0 R
+/Resources 7170 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 7169 0 R
>> endobj
-2838 0 obj <<
-/D [6658 0 R /XYZ 85.039 667.044 null]
+7173 0 obj <<
+/D [7171 0 R /XYZ 85.039 781.388 null]
>> endobj
-6661 0 obj <<
-/D [6658 0 R /XYZ 85.039 642.326 null]
+2938 0 obj <<
+/D [7171 0 R /XYZ 85.039 761.463 null]
>> endobj
-6657 0 obj <<
-/Font << /F20 2865 0 R /F15 2876 0 R >>
+3175 0 obj <<
+/D [7171 0 R /XYZ 85.039 653.495 null]
+>> endobj
+2942 0 obj <<
+/D [7171 0 R /XYZ 85.039 653.495 null]
+>> endobj
+7174 0 obj <<
+/D [7171 0 R /XYZ 85.039 615.228 null]
+>> endobj
+7170 0 obj <<
+/Font << /F20 2965 0 R /F15 2976 0 R >>
/ProcSet [ /PDF /Text ]
>> endobj
-6664 0 obj <<
-/Length 2108
+7177 0 obj <<
+/Length 2178
/Filter /FlateDecode
>>
stream
-xZ]o8}02戤(J2hIw2-`gd[ڒWX
-DIs%+'؈@'Kx2߼ &KF„!H }mT" 7?_`Ezr@-B)1wkƟJoUTGֻ定gOo>= ;
-xqW{gRn6eXW.ՙo7U9о]·K5Yv^횼x¹*Rn䙯b {{YΠY޼=^ 0Q'"D%j}^ŒAkVM73H/Q>=`Ђ[4/ӴKny}=v C!t$!t͏]gh0E_]XaU~_#^M[B?/ LlЯuV
-_+WC0hzG6:|A, wЋ*{d>5f~~%`xڵhBߗ 1+m|Xzw.+w3n-!'qKgX?_?w.ƞtdU/DEmPQiWe˜7iAG8j7;XOh4NRGpP߱UaWaS.T!?/K\jU X0[mg+KnNyq&N)J(L!CqrH^:dM5$%=$7˔|dӧ(HzO xiS.qۿabƹYURZXzOhRģ(w }U˾Zr>.)lw 鳛EU4Y{~J"-2Rt`($f<'TNP&\շ oLe+HzT`Xjè1TYjQ6($7U^3a6acN_dv<,;CuMkmQ$r_fe:֥~Oso`:TR"xkU
-x>\{o"+f/y܏UF;[tOrA^PDI2d}ycV'l9>fߣفAM*t4R|+CnҊ&Su1Qm"dSO%B2z4*s|հV>'alS(V:s
-_DK>ԟ@h[8bfӄHˬMYvLz'obLg'/QW/ޕx^ /-.[ 4GƩF0bˇf~Yp@J bC~Ph?p(YP-@Y^)SYbIn)Aw#Y{F>Mp7n-?`_1.8;7]9xp=-Y{Z_[m9qݨ|iLӼo+q$#{1μptulw!x&
+xڵZ[o~ϯrHhý})I`+XD$R3)jM
+6/vf"X'3Sxڽfp ,D
+Ǟ\1 q14!\PyxE3lı-ֿp.e܆Ǫ4dU8Jw! 2rXCËo`fs lHʻGQ]L_
+ H{5MUn;Scz h06$R%d0IahTzu`Al:LNptIɛM?`k׽ fЬ6G 8pСp,r1‘3u6,?GX oKzw}D2a._&=:O} j(ZP*~NV q6>,/?]XX޲?HS^KS=?Ϫ+S/кg^"_} 3pA<0A`D]_&@O*͜aAUEOHF#9QZgS ցbIy1d*~pM'CM's9Q:`) B =>.u*>"Q&ZgS3сLjaddڢQw[U8zy/(Rx瞳^ji3fD&zDt0pN6  ׾wؼS
+k=)fZLRWͪ(#|߳j%-,`4[ږya2DyHF{t)$pgnR:7q!moC^šъg)dus&#¹1]ȭ ˿;uP"YQYAO1xkťc߭ekvVP|ӜH iN^UD!6F̵Φ2׃g}QWmƬYeԀQ
+
+'2ESDQ]Yg
+nZ!b#yLdg'?o?^nendstream
endobj
-6663 0 obj <<
+7176 0 obj <<
/Type /Page
-/Contents 6664 0 R
-/Resources 6662 0 R
+/Contents 7177 0 R
+/Resources 7175 0 R
/MediaBox [0 0 595.276 841.89]
-/Parent 6696 0 R
-/Annots [ 6667 0 R 6668 0 R 6669 0 R 6670 0 R 6671 0 R 6672 0 R 6673 0 R 6674 0 R 6675 0 R 6676 0 R 6677 0 R 6678 0 R 6679 0 R 6680 0 R 6681 0 R 6682 0 R 6683 0 R 6684 0 R 6685 0 R 6686 0 R 6687 0 R 6688 0 R 6689 0 R 6690 0 R 6692 0 R 6693 0 R 6694 0 R ]
+/Parent 7169 0 R
+/Annots [ 7180 0 R 7181 0 R 7182 0 R 7183 0 R 7184 0 R 7185 0 R 7186 0 R 7187 0 R 7188 0 R 7189 0 R 7190 0 R 7191 0 R 7192 0 R 7193 0 R 7194 0 R 7195 0 R 7196 0 R 7197 0 R 7198 0 R 7199 0 R 7200 0 R ]
>> endobj
-6667 0 obj <<
+7180 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 625.659 402.992 637.349]
+/Rect [111.316 585.012 375.719 596.701]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://hr.uoregon.edu/davidrl/cifs.txt)>>
>> endobj
-6668 0 obj <<
+7181 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 612.11 385.241 623.8]
+/Rect [111.316 557.913 361.605 569.603]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://afr.com/it/2002/10/01/FFXDF43AP6D.html)>>
>> endobj
-6669 0 obj <<
+7182 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 598.561 357.484 610.25]
+/Rect [111.316 530.815 333.847 542.504]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://ubiqx.org/cifs/)>>
>> endobj
-6670 0 obj <<
+7183 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 585.012 328.405 596.701]
+/Rect [111.316 503.717 304.768 515.406]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.anu.edu.au/cifs/docs/what-is-smb.html)>>
>> endobj
-6671 0 obj <<
+7184 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 571.463 370.677 583.152]
+/Rect [111.316 476.618 347.041 488.308]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linux-mag.com/1999-05/samba_01.html)>>
>> endobj
-6672 0 obj <<
+7185 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 557.913 289.975 569.603]
+/Rect [111.316 449.52 266.338 461.209]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.tldp.org/HOWTO/SMB-HOWTO.html)>>
>> endobj
-6673 0 obj <<
+7186 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 543.758 309.786 556.66]
+/Rect [111.316 421.815 286.15 434.717]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.phrack.org/phrack/60/p60-0x0b.txt)>>
>> endobj
-6674 0 obj <<
+7187 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 530.815 358.538 542.504]
+/Rect [111.316 395.323 334.902 407.012]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linux-mag.com/1999-09/samba_01.html)>>
>> endobj
-6675 0 obj <<
+7188 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 517.266 379.598 528.955]
+/Rect [111.316 368.225 355.962 379.914]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://hr.uoregon.edu/davidrl/samba/)>>
>> endobj
-6676 0 obj <<
+7189 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 503.717 460.925 515.406]
+/Rect [111.316 341.126 437.289 352.816]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linux-mag.com/2001-05/smb_01.html)>>
>> endobj
-6677 0 obj <<
+7190 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 490.167 350.768 501.857]
+/Rect [111.316 314.028 327.132 325.717]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linux-mag.com/2002-02/samba_01.html)>>
>> endobj
-6678 0 obj <<
+7191 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 476.618 512.306 488.308]
+/Rect [111.316 286.929 539.579 298.619]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://ru.samba.org/samba/ftp/docs/Samba24Hc13.pdf)>>
>> endobj
-6679 0 obj <<
+7192 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 462.463 512.306 475.365]
+/Rect [111.316 272.774 444.915 285.676]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://ru.samba.org/samba/ftp/docs/Samba24Hc13.pdf)>>
>> endobj
-6680 0 obj <<
+7193 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 449.52 356.69 461.209]
+/Rect [111.316 246.282 333.053 257.971]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://ru.samba.org/samba/ftp/slides/)>>
>> endobj
-6681 0 obj <<
+7194 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 435.365 492.684 448.266]
+/Rect [111.316 218.577 470.259 231.479]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html)>>
>> endobj
-6682 0 obj <<
+7195 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 422.421 512.306 434.111]
+/Rect [111.316 192.085 539.579 203.775]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linux-mag.com/2001-05/smb_01.html)>>
>> endobj
-6683 0 obj <<
+7196 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 408.872 420.309 420.562]
+/Rect [111.316 178.536 364.521 190.225]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.linux-mag.com/2001-05/smb_01.html)>>
>> endobj
-6684 0 obj <<
+7197 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 395.323 388.007 407.012]
+/Rect [111.316 151.437 364.371 163.127]
/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://ftp.stratus.com/pub/vos/customers/samba/)>>
>> endobj
-6685 0 obj <<
+7198 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 381.774 236.368 393.463]
+/Rect [111.316 124.339 212.732 136.029]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.org/samba/docs/10years.html)>>
>> endobj
-6686 0 obj <<
+7199 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 368.225 331.698 379.914]
+/Rect [111.316 97.241 308.062 108.93]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://tldp.org/HOWTO/Samba-Authenticated-Gateway-HOWTO.html)>>
>> endobj
-6687 0 obj <<
+7200 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 356.797 264.271 366.365]
+/Rect [111.316 72.263 240.635 81.832]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://samba.org/samba/docs/SambaIntro.html)>>
>> endobj
-6688 0 obj <<
+7178 0 obj <<
+/D [7176 0 R /XYZ 85.039 781.388 null]
+>> endobj
+2946 0 obj <<
+/D [7176 0 R /XYZ 85.039 761.463 null]
+>> endobj
+3183 0 obj <<
+/D [7176 0 R /XYZ 85.039 657.513 null]
+>> endobj
+2950 0 obj <<
+/D [7176 0 R /XYZ 85.039 657.513 null]
+>> endobj
+7179 0 obj <<
+/D [7176 0 R /XYZ 85.039 615.228 null]
+>> endobj
+7175 0 obj <<
+/Font << /F20 2965 0 R /F41 2998 0 R /F58 3365 0 R /F15 2976 0 R >>
+/ProcSet [ /PDF /Text ]
+>> endobj
+7203 0 obj <<
+/Length 873
+/Filter /FlateDecode
+>>
+stream
+xڥVKs0WVq^:IhӦ@C1%vj0ݵlp:pc׫O߷ ~<2r* ' `
+x.Qb 9p8Ti~w")%Qv8߱ +# t0"&Aixt;$3T0O,ۀQl9Zr
+](oS֕G$VfF31x8ULRy; چ`[MKKsA%aAҫko@mr#pz P/
+endobj
+7202 0 obj <<
+/Type /Page
+/Contents 7203 0 R
+/Resources 7201 0 R
+/MediaBox [0 0 595.276 841.89]
+/Parent 7169 0 R
+/Annots [ 7205 0 R 7206 0 R 7207 0 R 7209 0 R 7210 0 R 7211 0 R ]
+>> endobj
+7205 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 343.247 212.708 352.816]
+/Rect [111.316 749.508 189.072 759.076]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.samba.org/cifs/)>>
>> endobj
-6689 0 obj <<
+7206 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 327.577 512.306 339.267]
+/Rect [111.316 720.288 539.579 731.978]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/support/kb/articles/q92/5/88.asp)>>
>> endobj
-6690 0 obj <<
+7207 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 314.028 253.915 325.717]
+/Rect [111.316 706.739 164.127 718.428]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/support/kb/articles/q92/5/88.asp)>>
>> endobj
-6692 0 obj <<
+7209 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 255.304 403.258 266.993]
+/Rect [111.316 620.916 379.622 632.606]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/support/kb/articles/q92/5/88.asp)>>
>> endobj
-6693 0 obj <<
+7210 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 241.754 305.962 253.444]
+/Rect [111.316 593.818 282.325 605.507]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/support/kb/articles/q136/4/18.asp)>>
>> endobj
-6694 0 obj <<
+7211 0 obj <<
/Type /Annot
/Border[0 0 0]/H/I/C[0 1 1]
-/Rect [138.589 228.205 343.331 239.895]
+/Rect [111.316 566.719 319.695 578.409]
/Subtype/Link/A<</Type/Action/S/URI/URI(http://support.microsoft.com/support/kb/articles/q136/4/18.asp)>>
>> endobj
-6665 0 obj <<
-/D [6663 0 R /XYZ 85.039 781.388 null]
->> endobj
-2842 0 obj <<
-/D [6663 0 R /XYZ 85.039 761.463 null]
->> endobj
-3066 0 obj <<
-/D [6663 0 R /XYZ 85.039 671.062 null]
+7204 0 obj <<
+/D [7202 0 R /XYZ 85.039 781.388 null]
>> endobj
-2846 0 obj <<
-/D [6663 0 R /XYZ 85.039 671.062 null]
+2954 0 obj <<
+/D [7202 0 R /XYZ 85.039 691.296 null]
>> endobj
-6666 0 obj <<
-/D [6663 0 R /XYZ 85.039 642.326 null]
+7208 0 obj <<
+/D [7202 0 R /XYZ 85.039 648.343 null]
>> endobj
-2850 0 obj <<
-/D [6663 0 R /XYZ 85.039 298.585 null]
->> endobj
-6691 0 obj <<
-/D [6663 0 R /XYZ 85.039 269.181 null]
+7201 0 obj <<
+/Font << /F56 3230 0 R /F41 2998 0 R /F58 3365 0 R /F15 2976 0 R /F20 2965 0 R >>
+/ProcSet [ /PDF /Text ]
>> endobj
-2854 0 obj <<
-/D [6663 0 R /XYZ 85.039 212.762 null]
+7212 0 obj <<
+/Type /Encoding
+/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/exclam/quotedbl/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde/dieresis/visiblespace 129/.notdef 161/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/dieresis 197/.notdef]
>> endobj
-6695 0 obj <<
-/D [6663 0 R /XYZ 85.039 186.147 null]
+5857 0 obj <<
+/Length1 1934
+/Length2 10773
+/Length3 532
+/Length 11863
+/Filter /FlateDecode
+>>
+stream
+xUX\ҭqw wwwh!8
+JʯS}%+[J`uWkX]x02+yWx w0.f.'~^-/؏+a7avgd-Z` ؅Z'm8`]?[m` ؆+mx` _GO=WEE|9
+/ <QKJ *k
+*c5A!rCMb0a@1
+ b L+v}vL8&v\=Hk%ś $EZso)#IV2Dw >ioYgUHJCы(gBћ3D[epXPю ^+-CIx/F0pH
+P8 ,h ",-Zo"r 7eƩ˜^N.Zw"ZrtR#!2u)XPu%pEbpT!w /+jȾ~')X6
+S:-XxK܎ zw[SMBTnO[ {~r=N{J1DX~UMuE]s:bӒ` ggfha
+--xN=
+ >)>v%2WXÆD29ih[dc?T%VcОX [hxdqLm
+6|=2w<ș̡#@:<o `j~5 =ikUofy-Q6oO2\<>3uMZxPIiFE7OP7a])ŢLE ^Ɋ6%6rov7zJ + <QpKZ2ӡ %d9սqsOyh)&$} -y+  =Z-[Y=(9Ha3?&S$4Ѯ|*rG+"jչg5([#ǟEB㝕6idK&wO6<!Q&-otkX xڝYMy~n=#~` |'Yˁt0}R/JXwH9
+EhS 6^vJ3u9jMQTP򐔽3\\ARNr;.]灅)CN=UٕÏEGrK@B;FS"VY"v&.0?aه&\SSkCn#ަQ"2yQCI@Y486#v-
+s|,9&[Ҷb-b*Gg1cxJTHRlZ^LqO;!ڰU*$ ?e+v{9Q#yYoCt>Kv:oSC ̹>g_.7A"c đWAL,ܯ7R%J#/dmS| bC(V6?ՆM!R>:LCY=܍3^WNHe5k9Xr'vٞ)!
+|3.~/dvfp.4俌 a#WԭH)?GY#-~dY(ANZޜB'PA33Wfw/sx,kDBQDD˩2aᾳgboI'?~L(ţexP26;˯E}59hy4WXzw ]2+lF)c
+*N;C徆JJ~ K]NzK.8C
+c/{U(7N9$W'#GhRl혦MR#+'[)?Z[̛1iU8#Rnp![ "q3Ҹ* od(]dc<;h']ŝcd!oWH+O!N콑 3K?Z׋$<:0s׷DLr]=UEb_śp Od'sL⬩δhw޶m0ˬfZ, P.a=l
+SR?(. {KqO^ w{o .)Y|'\z},;~oڥBo@>uMu{9LPu@"`؈~`Ű"1eӬk->k'(9"],GPy^.T/ЭG"bq7v{:tZ+[U>/y0"~r5
+co o<^ᦨX*%/ke.IN Hh:1Md 3mꊅ51ʙ>m<($;| x>.t|J_;x קV-'А% )< 0#5>kw`t<kqs@7F3N7`Ѵy{PTܪ!GcB)-eo rD%pة'c8Gas:40A_T䜳>rMH1,u"8
+Pl'Kܻ1 a{<s@8ѯ@PCU/-Bea@;}1-6#ViҀ^
+8jq1+ xsdUiғ?Ɵf?8DRs<gkOX$Mmboy:jY_nRE\?, g cc&AJW/z~PPP 0&@bF:kgbv5E/r <kO}rO'%Z6-Zdžf ^^kWKЉ.$F~EQ-XEӋ+ `lQ`v\yz@H( ң>H.Bkˢ]Ge
+k6T]W &Q8l:j"~]K^! ǹ @p{2z Λ~[=ydBba%+c _hQ&ȏzJWX/5񀥓LR
+557{z_ )/"`)wK(F(j6ƆwU< \Uu
+f LɗNM
+!{)B232[E"[S/w&։6}B{m^HtGlM{kѷ U-!GMJ{aqyfdt[)/O=Na3bӪ0Tp$C:BEn =lYqT꽧(ȝDVubZYVlezcj *B`!iEE~|]}+<~9z[Uc(>z 3VBr؏{tf#ќ-@'ÖwpNuŴ[U͝IŅBy'x1  v]wiI\hF\w(?DG9yYz/a"Nps\q{A^_zC V\lg/ʮXB[lwfiw 0l/}8Gg+l?ٻt[x^|=-mS9]j{ʤ ,63ZYC>aaP@RH*WϠSK7d vk?;sH~A{#.F5a:sJ#o~?2_klW
+bښy0xڇQ'(8@Z".vb_UE)rYYŗfQhQ0 wP$y!Uʛ;׼a>R˪7OSA{wHXΎWd"Yp3_Ö NC?PyG<(ynq
+E'!D׈wW2("a ՄP 8
+~Eo
+ihЍ%\PzwTrȱMDban[9KڌIP2[G8ɡK(@|-ebbA-˗A{{tzB[kX@HnA;9;Z7SeZ΁n1⚏ք Ï$,z<B үH 6U"lM}B3iYt<dхd]dMO}[Ĝ@/*GU%3tê0F/;gkWH:~Sř!^|y }0`HIlV$kr-,~B%$wQ*vDŽR5SʊD] +EnW526I(2ݳ7w}
+/Uu{\jzn5NweIgi `Ac 76ސKK<BitG՛$[sV<6AU[9(8>8)ҡet5Wo5alRRN Z& L}ԑw'xe7kKFzXp~"s5.q0X,sѳ/$ՠfq?(>ni_CUTC"ֻRs
+!R>StK 1XЩ$s_OeX$&+-;j^^z#gje^qjkl!o' .$wC59zY-s25y }ĕ= ?}ime#,b-n){q3oֲ$.hc-It:ӡb\G7f`! k<':^^zx䖥T`g߁c(fQڴ7L2DYeL2Ut"]0 ,<OJ) gnS׈mo˵ s:V5‡`p.\p/P{ ?-m|U(FJ􋌱=a~!ٍ ;ҀK<rBm"Ea^V`cAJ$PWl
+{S ¿cX*C$wU/.DCbؚq~Po
+Bרe?m^~_YFsо+ ӎopr5NSslߞ}cP
+8z#N+6P]bjlSG5Nb#7Qӕ?M昕A8<G#8g7r깢!e
+S;_g1mM#fcɂ0Y cg"kPpfպSjR(ƣ,!j
+Mxy5]rA=fEKi1ϭۋ3ꈍg&`wVNDne~pu偿ֹƉ0̒4nSɸ 6ɽ |<R~R(
+T,&ܐ!,a1'9FȦdo
+Suܸ-)Ap|̥-_`=l} :c fS{ێB!Ў˅f04h_-Pz 9 C}Y_]r$GOzJӽڟx8~WΑ-iY=v@+RiPmVc DPۛhdrb8a^Mlq_rnW2VB٤\WeԹ)6Y:/y߅(χUbXT[Vf|Y8iWz#^_K<`HeφpOt=5YbbtO-ެ !s@r}qQg>Ul)}Kc)BvT+G|F .MudhWsqc,]rpK~aUا#X+1Io뤪\]C;ǸV ĺd zHh0i<RZ8y(eJ.0xe^u<_G7rx *l)fU@1nQ=zF\r\\3ڼ%Qn#
+L{gq2H %~_m1w!DZ4x@>i AS$λZ<<_]eT}|f c'[}Cn$. &Ǟ}1s
+NoꔂV;Cͥg]5A\_BjÉN v/r==I~}ioB:k;5d;o [p͋9/hTAbŴqNCI_?H=Q:ʌ"t7 !g%9&t⳰i.H| r>ٓ+%u c3˗_<bʚ]o'tI+('ReQ`f"]kPy^KO.zD>3]^)3_OޞMlźTfPpEZEKPC~g9@*;e<^Z`Hm
+oǀ~XRe4Gj7#*ZXfKwAJAGX;~{!, &j]JAc|(HoǎM>Y?.0B]Hd0N!UZ`UltDro$PLt$>7'&Ek0oRV+9NeXW@ 7š[ 5(`DYUO߂ @Gɔ+FI٘ؐ/>nNC9})Je3m(r^k"i_|w탓OTi@Tl2[k@hp0}cAS=͑M̴iOwGG,z3G ?9n, ʏD+!6Nl7 #ہ/(
+湒GU;/iM#,~L*Ox!~"ɨP /H *bmbze/eItv~ǘF0#?4=fDU;aNzpÕ=1@a=?Ai6Ap=1W|6'osSW1"}TmrkGD*6tʗKɯP>9.Z]ga;^ƒ-s OrpV(ڃ6ApZ0AV/hZ*9e錖Hz~~{q&RDY)Xh⇫2[ʯf g]^EK=Nܿ6W[مZUb}ƉyIK˼ۻ:PP}jYM/
+ L}-SئHܪA%T*=8=feKI}cf*SʑwaRQ-o'uAMT IFu+4XrcprAh)pvyGoW(WRfΆGT =DM-
+S% WUߝ2vc MgOik( Q G=r% ϗG/d{>x&n5
+ynMCFf)b*8CnKoq%CjBɿD(lTIs^8ћ #0È2z @L\bsPw``nz.w..Kd=ιY-t?֘Tq۞;WDž4)zyTa
+7fH\ߒ.pFC,XPѰJ?=]gJW Qa죦C='SA%e2cV$@x ^d$ 9jvK%wM$y"z f{ q&3F
+l$aenG%|(ُ9{w?qفvݜnEC0H;^8XavE
+y}E~|jCP[%iA;OqEE'gn~nhǿ)p!9@CՐlr:ԗ)$l\k5
+sASGs ᨮo)yG+GPuDjIqWd
+hBt>It3eS Pb2>%I ._<Rc{u9tf3n'|.eXLMR6ᵪ
+IzgR+3{ݦAXPnGEzbdflf݄foYOnTuo˅GtN6Y0XIHcga7z^[B<[t|+-~QO-r hcmZl,L{L=
+IV5hB^W%q/Q83!=]jDR;HI{8rtb6`Z'iւ//ӟ'[Y >tQ?{*@@,wԬ`dڻY8!>$vʘѶۜiUךJ`UMq4DodЙSNSspV{;|R 48֙K*m'd1z^WU;b5TI5тlq }K枺s'zGOj]˄
+endobj
+5858 0 obj <<
+/Type /Font
+/Subtype /Type1
+/Encoding 7212 0 R
+/FirstChar 33
+/LastChar 124
+/Widths 7213 0 R
+/BaseFont /ZVOMKA+CMTCSC10
+/FontDescriptor 5856 0 R
>> endobj
-6662 0 obj <<
-/Font << /F20 2865 0 R /F14 2895 0 R /F66 3242 0 R /F15 2876 0 R >>
-/ProcSet [ /PDF /Text ]
+5856 0 obj <<
+/Ascent 472
+/CapHeight 611
+/Descent 0
+/FontName /ZVOMKA+CMTCSC10
+/ItalicAngle 0
+/StemV 69
+/XHeight 431
+/FontBBox [4 -233 973 696]
+/Flags 4
+/CharSet (/exclam/quotedbl/numbersign/dollar/percent/quoteright/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/greater/A/B/C/D/E/H/I/K/L/M/N/O/P/R/S/T/U/V/W/X/bracketleft/backslash/bracketright/underscore/quoteleft/a/b/c/d/e/f/g/h/i/k/l/m/n/o/p/r/s/t/u/v/w/x/y/bar)
+/FontFile 5857 0 R
>> endobj
-6697 0 obj <<
+7213 0 obj
+[525 525 525 525 525 0 525 0 0 0 0 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 0 0 525 0 0 525 525 525 525 525 0 0 525 525 0 525 525 525 525 525 525 0 525 525 525 525 525 525 525 0 0 525 525 525 0 525 525 525 525 525 525 525 525 525 525 525 0 525 525 525 525 525 525 0 525 525 525 525 525 525 525 525 0 0 525 ]
+endobj
+7214 0 obj <<
/Type /Encoding
/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/alpha/beta/gamma/delta/epsilon1/zeta/eta/theta/iota/kappa/lambda/mu/nu/xi/pi/rho/sigma/tau/upsilon/phi/chi/psi/omega/epsilon/theta1/pi1/rho1/sigma1/phi1/arrowlefttophalf/arrowleftbothalf/arrowrighttophalf/arrowrightbothalf/arrowhookleft/arrowhookright/triangleright/triangleleft/zerooldstyle/oneoldstyle/twooldstyle/threeoldstyle/fouroldstyle/fiveoldstyle/sixoldstyle/sevenoldstyle/eightoldstyle/nineoldstyle/period/comma/less/slash/greater/star/partialdiff/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/flat/natural/sharp/slurbelow/slurabove/lscript/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/dotlessi/dotlessj/weierstrass/vector/tie/psi 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/alpha/beta/gamma/delta/epsilon1/zeta/eta/theta/iota/kappa/lambda/mu/nu/xi/pi/rho/sigma/tau/upsilon/phi/chi/psi/tie 197/.notdef]
>> endobj
-5446 0 obj <<
+5836 0 obj <<
/Length1 794
/Length2 1135
/Length3 532
@@ -31049,627 +34139,771 @@ endobj
/Filter /FlateDecode
>>
stream
-xRkTT# PALyĒa P^ށ 3w0S@DP4 E:X(: hJQJAueUzϟs$3
-1A8.ȤCD"6f`%e:  " ŰLn,@O^=2uͻalg&8d+ .<"r88
-b>~T@[7u; ZȲɿ
-hLA$M̑ t*[:[z[j&I=Sz +C_}bPq1([+ nN~b=k>O M޸.K1}͛{z6ykXq$bkڶpjvyTfھ;Mz%Y[HjRiL־XZ</[^댴6^QnQSMZc#^4Qj//mxt^4jtۜB1-y#C~5mZ:B OjexK:]e Ν6rf1M
-?oTaZzkɯ'?rtF՝ȏYntv~DiVD/ΖS_OArDሆ+*j;“Ԩ|R`&0|sQ5UU?4E  ƇӝMzjgP645=i[–v&3U*/ >g6Kdsz}1]&o6K_,:X-$x;<5r;#駬pUd/A3m9̩֑;*->rr0
-ZO[ecqgwmOWcfQScKxMdLCIWpC1],‰zE.J2xt+Aʔqb? OaN`F'<endstream
+xRkTT# PALyĒ2/CQCx qx)c{.;ܹ OYQC@!ЀB萬X(
+R#@xhA1@]Y՟}}lv ,a('$$$`2)66>8,$ 0ܜAB؎8q7DeHR2> 8" DH$RH(|LDxI$ 98
+c?FvI/ [)$BF^$_L*S0B0WQ;oLZ
+ꃌo#"42O&DP"<C/M!
+0L&_+P!h`sDžrHY,̠Ad09@ᔍwuf7- IG~7ooL
+Qbs^b1BF *XD R|Acߧ/;+
+nu+ ߹o5[=2)4IA.W,53 1gK,>pԤh|_oI &=W;˾_σX.,[zx`b,d=]ACp99O>3Aղ1#1t;^/u-y2(?뛜
+ʻ U|@C-l8\V(drU/r]^btg$x,Zy&fy7 ϝeۆ/9;owȉx.}#yQk?M*'V{6tc; zdtS|Qɝɀ"\OWC\rRV?̧ΝӸ gZ_6[!F]uOl|pL:U. =&ߎ3:|s|Hy.0ʛC7>c1qU%@@.ŊѺ}s#]Lzz4_~8l{IuL;ͲzRطv.tkbk%љ1f5j%nkit^KcZ%w5 VviR~ Qh,ip N<j EVm#sP?WǼV5?u$ U!MQ榺K=epɂzAAfysvQkN)Fȡ6*xZ{?eV{k"cgZ5wx\,֞+U~ .S@
+~*_sÀ+#|uɠS8 ʺy(zg߯[_ ן4<`]\W'ֲ}N ̙IN;ʺk[|+t2f4XGjb=$gEyt峾h32=_Z,Ɨz SxM:ጓ#E&F{{:23ZmlKQ~nk>Ϋ˥Q߻v'.nwGu/7`bV{@zىz3#AFY0,Ɖ:eJ{Q4.;~ӹԵA:q#l? OI`!N`R!J'fݎ)endstream
endobj
-5447 0 obj <<
+5837 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6697 0 R
+/Encoding 7214 0 R
/FirstChar 60
/LastChar 62
-/Widths 6698 0 R
-/BaseFont /ALBQED+CMMIB10
-/FontDescriptor 5445 0 R
+/Widths 7215 0 R
+/BaseFont /UOVLYR+CMMIB10
+/FontDescriptor 5835 0 R
>> endobj
-5445 0 obj <<
+5835 0 obj <<
/Ascent 694
/CapHeight 686
/Descent -194
-/FontName /ALBQED+CMMIB10
+/FontName /UOVLYR+CMMIB10
/ItalicAngle -14
/StemV 113
/XHeight 444
/FontBBox [-15 -250 1216 750]
/Flags 4
/CharSet (/less/greater)
-/FontFile 5446 0 R
+/FontFile 5836 0 R
>> endobj
-6698 0 obj
+7215 0 obj
[894 0 894 ]
endobj
-6699 0 obj <<
+7216 0 obj <<
/Type /Encoding
-/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/exclamdown/equal/questiondown/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef]
+/Differences [ 0 /minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/arrowright/arrowup/arrowdown/arrowboth/arrownortheast/arrowsoutheast/similarequal/arrowdblleft/arrowdblright/arrowdblup/arrowdbldown/arrowdblboth/arrownorthwest/arrowsouthwest/proportional/prime/infinity/element/owner/triangle/triangleinv/negationslash/mapsto/universal/existential/logicalnot/emptyset/Rfractur/Ifractur/latticetop/perpendicular/aleph/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/union/intersection/unionmulti/logicaland/logicalor/turnstileleft/turnstileright/floorleft/floorright/ceilingleft/ceilingright/braceleft/braceright/angbracketleft/angbracketright/bar/bardbl/arrowbothv/arrowdblbothv/backslash/wreathproduct/radical/coproduct/nabla/integral/unionsq/intersectionsq/subsetsqequal/supersetsqequal/section/dagger/daggerdbl/paragraph/club/diamond/heart/spade/arrowleft 129/.notdef 160/space/minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus 171/.notdef 173/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/spade 197/.notdef]
>> endobj
-5170 0 obj <<
-/Length1 800
-/Length2 1394
+4854 0 obj <<
+/Length1 826
+/Length2 1389
/Length3 532
-/Length 1979
+/Length 1989
/Filter /FlateDecode
>>
stream
-xR{<TN()\ڳs31fC.mDQfc13.CHؕ%#n
-BF%ʑJ.mVavgiy_wg~$fv<l섡b3nQ2^CbC 14",t"=&107mbpXp!A8B|"XBv|>̞,Q0B
-pS7ip< K
-iNVU{ ^2j=ӳiT2xϚr5=Fb<[P³Ӛ~OdUj{unC@~Z͒紜<՛+ē2~M(z瘁j^~l6wkFXFya#i!kNp%u 5w}*|p\fT3#{s9J.ݝ; v'_niרMߌZ|
-3}sUt~MhK勨Užԕ]/4S¶'=VM/v9]]3'
-SVyMџ%Uɔ823y)7V2 {ڍ^%߾zpbh\՟N<gZ-]ẕuqBmiRӚ8Jm*{\5>Yh\9`WVo+w/־rcz-(:V Ei{v=6jf(y1ߟuL 3 Wt6_ݮH7cStu'&1lACPA)p'߷WqKZ פSNeՄZi^[BIU^@nk<~&fCF#OXJ{,+m=_a]e[=Od9&i?L0iZ|pzswagW goI{FsV/v*^ DYsF&ae쌠Nȏ-;܋lT[GYP>&5훟Heʙ!M{jvc|KVTZ;٪Az]rX ?|aH(!aendstream
+xRiTSH#*E AQB@f Ԑ\4QVBpLP( UCAp
+ă jC\f>v|V`7r"`l,~+W J_8528 `{
+KEA>e|c6:/.I?CLO$G3@ryTH!
+8j
+VMg/]=v Uܪ*l/:lۂ!ku-$d:5$P#)UYvНe08jJnP.N61S:RAH8)^=zA#~ɭo*nc7f\yXPOt- -ԑRN8:J1kD[iSю/ijsڳgPLt[1' YB{:'3pPlzpxvRHbo˭.˂#G_IP6z7P^}T
+ZgX⅟Q^Lu9u&4HE)3XC4=a6gd^9ϬA3Z=zON+-8 t5WiYY1f/s-_
+ٺ6Ir{bXQ0lMHN'`<_s2̤)Ҩ7RmzvZŹ؇F4/cm5
+d,W']\lk@&Ӗ PM]qH߯ѿo!%Keq_ͽ&uYk*-$+W79r_pI]{lY˱lÉN]\3ymFEvkqMnWe3zUR7>m/8ɸ*3*NAEn fR`WmzkEPޙXv 1KkGƱ5QzUeVP!anuZm{heΟX;M%ք-)GTF~hn\/fyx%k5ciWy;$Y-}#o|Pb {Uuv"J9.UY>mY=
+ %G9S[d$`T
+:</ {%ލЄNiPwݘ%C$lJYo4rwbiyOSה9Z{zWEU 2Ig>.(CZG{j3a"ɯ.]d2 mɴhP>mEIot{6 $vM/ :wcsr+r^vh-g}b\Yy#!]b_o庣zOx]4KpNdk_.?/
+0aG?o*endstream
endobj
-5171 0 obj <<
+4855 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6699 0 R
+/Encoding 7216 0 R
+/FirstChar 102
+/LastChar 110
+/Widths 7217 0 R
+/BaseFont /QKJLBE+CMBSY10
+/FontDescriptor 4853 0 R
+>> endobj
+4853 0 obj <<
+/Ascent 750
+/CapHeight 686
+/Descent -194
+/FontName /QKJLBE+CMBSY10
+/ItalicAngle -14
+/StemV 85
+/XHeight 444
+/FontBBox [-27 -940 1332 825]
+/Flags 4
+/CharSet (/braceleft/braceright/backslash)
+/FontFile 4854 0 R
+>> endobj
+7217 0 obj
+[575 575 0 0 0 0 0 0 575 ]
+endobj
+7218 0 obj <<
+/Type /Encoding
+/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/exclamdown/equal/questiondown/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef]
+>> endobj
+4194 0 obj <<
+/Length1 1299
+/Length2 6824
+/Length3 532
+/Length 7625
+/Filter /FlateDecode
+>>
+stream
+xeTh S,hww)ݭŭPw^ܽJqYkڻ{?q/9g>gQiL!203 ;+
+*L)5+?>G+7>+;'h% ̬u8:cN@Ov X0g |$@s#_ٛ8BsRW_O_7$ ICN2Mpa )&?WQMp?^t\E!7+Mç@7`rA |8V okFvp?nu}@t@ ?nx9}07ON~ 7_ry߅ZP+(\Y@ `X0:.䋏tX
+#EꯓXDۂAEƕ*ݛ4g[([H"Z^;|H~r5Jh$=KSvߴ n:?FTXדqһJJsm
+Cߵ#=WW&V+4J'KW;8@PSX M.zV%JNۢy8ؕb@ G|`&^Hy 'DߤÔ]x W
+6r2Sg;˅ֹ6OnO70"e8vӡܫs eEjT?"$b{=Bf1 Z@B_WZđ1]/MXZ'f"~g2SVOv8ެ_z$NkF>}@!Vh*\?O`:KL3$Fpci(V->ͬYTى,(8! }jRiO_v8`,?T o(`-UV@(aLH%eȗjϪ?D@[FbDaQ} *Oq5þU9f7Rvr(.`:h]NC<v>RfyQ0ηqf0'ET52Lğ9| Op#'OO !'&(?N`<BP9`~ft6FڶًFdx@}2H$? R\
+bf|β悮q#i|$ekTM:}W=͇"^}z'M`ȖGnNfEKWs鳄tqU#5X4,6C
+I__sjL4Hs#e(KCs9P1n(A3-8Xb {q O6Y&k:k$yi47f(FZy-f=Lإyݺ4T.>+vɣ *-4z70?Fۯ\7F#
+[ezPpQΓ&~EA\@57^o
+4ShU:IF:űGoxvgcP,T ?ѼylʧY(vh5] 8$qpQmäEr7#=Lz{0f'ͨW}lo鲋o0hۅdohdrf]
+sCn#+c(\əo]Cwӳ1~È.o>菃JJ+ |`Vy
+ET5ZN>PޠI
+6#AT W>˲'AZBDډ6o1Eh>¿VB2-Xlx̻sx`vVe/r3L o+f##~\g{x:c#?;a|IbRz%ap֝'Ռw s#_nO0b+.
+u{B)[͜),4[ӻsDc^TI 0q͙H]RL ڃiI/S"&`"2k"Ws9NN
+7z積共6IGfծIR5?a+ ^|ލac._3v~`-c"5cOf a5 S!;L.eLPҁA޸Иڵ΄a3X%QYO=M`"jB<P;5ҷƱ9a5/6ݧPqKh8A
+pRDC?i)'Q^Yn:|rfY@ >ijЧz~J ϋqڤ& 03K<j5"yV ݞ㭢.
+VOHcJ{ݙNq.rۀWn>Yd!9 Hph0-0~L.'6U/ݝAT0FP\8BMT1vSSx>ܚde@A>@}%E4z#KwtLD3rmyqE:iE"u$u(!8X;9k,6X]YX XQ:@Q$\)=9gq TQ%eP bBYb4rު%$M̌W6K1OY,$z &$aL&صhH:Y"Q?[1.("'Sx?0!<Z (S]ޗhlrhrqYˠ]RwUoQDUXܤtz{(\?e+a^oYWSlOD4eѫ<j?attF™}c]^rש0V깭ŧzt{8iP{7ω)\1f]^lf!{w,]6+Q=~5̴^8 Ԟ"RїxO. ߺjR76y܌~c>#c.ቸRF8U5<hNGl:Ys`trٽjHց6QtD P'vsz'o4&w0Kͻ˯7`Mhd9̂?Ԍ#%)+Wg [zs;̵t(ԫEp;f(n
+@<%a7aɦ&Kk `[SWVnMLR3q>N.Ϧ_;23I@+v9ͲwړQй:3.6UPle
+"W!ֹwQ$TѤ}G*0IZ)꺤0C}y`F4֟0j(%.93j}Fx#nQA*#k)__*we:dxl,8>
+#mxcHru խ݆ 3 :d n_J AwHKť-uE
+B-η G^AHxd-պơd;L美;D@$wsi !UL6Z`ܧ[Ѷsv~K#./}:s{0l.JLXrV7a]p`mz}S*>c YIt)M¥:!aɸ9NVc;=#h?*7dh$P9xD_3>LH3Nʽr=4מr>Gn܌)VR[ל2_N"z (Wlݮ][w㌦nBuO<P<SWb g^%6ohOIuS[]}3x⁓[i#F#/(Ú<#E^ b }כtC o1<S(j!KT&egǾ{`ӕsS#ٯJp%hd+Yi%}͆ǜR}dw\׍ sÁb=HC4Oe;铙,">Sğ:y~=.!c0ɃAA^q6"lV)!޷yoQ!5}yLg4seU)
+7--Eƨ
+U HȳWEkUvZT~盾& 443`ď~9xMXSuӏc
+?
+g!wpq%U.V"xdNA<B+/d yC-L'Дk
+~Qu3]qRGNx 0;>[h
+|(`%Q%D\*\; nT"YDi~lÜgy Ië e Jx;ݾ5y Cwȋr 4Ga^1X^}X(-w5& WOpLf`򊡂xɷiM  yuzk|Qibe?LG䈴@y!޾N(x?(:y0mP=|hg<j,o^ lӓό/_-֣Q"'Xa鑸g}~AM7]$.OԘg
+endobj
+4195 0 obj <<
+/Type /Font
+/Subtype /Type1
+/Encoding 7218 0 R
/FirstChar 40
-/LastChar 97
-/Widths 6700 0 R
-/BaseFont /XJFPME+CMR9
-/FontDescriptor 5169 0 R
+/LastChar 121
+/Widths 7219 0 R
+/BaseFont /OHJNAR+CMR9
+/FontDescriptor 4193 0 R
>> endobj
-5169 0 obj <<
+4193 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /XJFPME+CMR9
+/FontName /OHJNAR+CMR9
/ItalicAngle 0
/StemV 74
/XHeight 431
/FontBBox [-39 -250 1036 750]
/Flags 4
-/CharSet (/parenleft/parenright/a)
-/FontFile 5170 0 R
+/CharSet (/parenleft/parenright/period/A/D/E/F/I/L/M/O/P/S/W/X/Y/a/b/c/e/f/g/h/i/k/l/m/n/o/p/r/s/t/u/v/w/y)
+/FontFile 4194 0 R
>> endobj
-6700 0 obj
-[400 400 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 514 ]
+7219 0 obj
+[400 400 0 0 0 0 286 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 771 0 0 785 699 671 0 0 371 0 0 642 942 0 799 699 0 0 571 0 0 0 1056 771 771 0 0 0 0 0 0 0 514 571 457 0 457 314 514 571 286 0 542 286 857 571 514 571 0 402 405 400 571 542 742 0 542 ]
endobj
-6701 0 obj <<
-/Type /Encoding
-/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/exclam/quotedbl/numbersign/sterling/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde/dieresis/visiblespace 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/dieresis 197/.notdef]
->> endobj
-5127 0 obj <<
-/Length1 966
-/Length2 3059
+4191 0 obj <<
+/Length1 773
+/Length2 1212
/Length3 532
-/Length 3717
-/Filter /FlateDecode
->>
-stream
-xy<T[dMԑ%YȾ/YCۘf33d,$ZDT4Y"E5{Td_ ﯞ~>_9uݟs]-%ne#» 8<Wt͍mm0
-ts'2?D6M` H#A41G FD4
-(I\n Ò1
- ,$)@fRYDq
-Br@-4'.nX ?jXC/ K&9&:3G@o߫dDj0h@)$HwLF qкTDXN\B8-`?i]"3 iB׹v!(((
-ɴ֙++cJ*
-@I
-_f.8I-1CP,&lmP0U?<Ӕ?Nl<sRfépuϔi9?/aF2k:, KKE Is(7.hrcYA΅rrq [c`dY\&{*owG~t b6SnT3h˵NkTzK'c#ޑ`x;s[웰9#)% ɵ2޴oC`E+FE5}jӨj%k׷gJ)2 V5
-}{xs{4|}U1lmc3j\c Es]*SY"G<
-*(ޕj$~Z?Sk1f+:{#;lW=(pϲfNҺ~Jː,g[w)'r-`v =7K2ӂj^lEct^Xe1F d0NWT^wjㅌ5>S8\[.r#3\c%$\}60%!&ONw*9 Ҽº\̷+F"፾; kc`+7j[փ,Lă:u<T3flvxڦ`2FY^!kDv/k
-0EyeؙaY*0F?ɜ}鰡j2#nV">=P'*27vm5ƤpHyv5Vȡ|2_c7LbΊ@ lT? X^:L):ӏ6;GK/a72EHB47*8F.rn9֯Rs:M_=4Y7%,n`$su°?
-n *gc[W͌ӣݭmts'%H95} DL:^!6ԣzV3ˆ2
-/_|ꌭ*acVg+'?mj`rX2ݻ3,V%=~,
-#! \ZpVFMKN .O{%˲IR'Z=d.ukEѱ/UE]8V”Wdb ]-
-ݻIɚ^?_Pm6fPc5ft@.g|է-g w.Jh m"4e"^<{Y:%Qz-38OlZƄ4x3Jk縚(k#IՕT,?=^g9W;]Z(75
-_=<3 o7 r 1K]Vˮԋ9kREAdۭؐe?TAGa5H3™^GyEԕc≒ sY{;"j$r{[=FAj'tɣqᏁW^,1Zvaq-c _%®gʞ{2G}~P"[^9gM}<s?`̱pR=m[,xV>9}wvȽ\uQ.K$acX5Ó >Tu>GJa*=z;x^KWP64 3Yoag?]׼o'
-*~~枢VG-&!QAKфΆٯ1Zd!=4*bk%VIufzaoyf|d9aWV^fʟY;e=$[2P7*8)Ds?7?
-ŢK_sJ#ZO>"wJ iWJGQ.B* 72|BYNo4RnohFR
-DeXf82|M ?juHVp
- >_D$ Xѓ_s|endstream
+/Length 1785
+/Filter /FlateDecode
+>>
+stream
+xR{<_9ig)Y`ƭ۸m0Ģ3̼̼\a-H.nk[J[-b[g}}>?=4fA$;/?* [."( G@vp ILuqp$Y *`.f$;@C"@B|\=(0%xoAbH ,d2`L A!Z-@({[fIZHI3[dOXhwAϛ_3CyQ@A" ` yc`& @z[balO -!ے+O@W\j0].aoFK>%DƉnUne>*`D  Q@  HDP ?H
+ hnA.rN%k{31>?|g[~'Lh2WӲ5z4_8#U/vbV} orG)fwaQ h簏1 w(i͗B۲#2}=!^1k({8@um|n ?Gmx]<9㣴ĵm%% U{>yu]Zɪ~7ljYRv,ò6\=[ʙs'OR~K}8o9V+.wɌb䟐 Z +⡣gʿ<kQ_ГW<t4+Z#>Ze[Yw9'5k9|2x3j~"IE_Sy:?/(M8ns6YiۉTK{] n뛲]W_lУq+Va?+" Ru$oyi<ޔ.֩X~|zSc>>WiXY^|5@6U,Q35fO^wzG1B{DzJɦkQ9*^gG9pɲ=>o=>!ij+MzCk(8;B!xZ oϫ[I;̩dM\Rq,PA>7q*H<f/ ܠQ}#Y1Oo5515liݹiG*PzM ;Y PϧE :-g,<6ΪtqE7;> hj9&/fZE ̬8YQV,ʯW
+z}qm g`7o+frj֠~
+NNdߕ&l؛¨AHaa f\?._
+&b0Ë@endstream
endobj
-5128 0 obj <<
+4192 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6701 0 R
-/FirstChar 46
-/LastChar 116
-/Widths 6702 0 R
-/BaseFont /DJAIEU+CMITT10
-/FontDescriptor 5126 0 R
+/Encoding 7218 0 R
+/FirstChar 49
+/LastChar 50
+/Widths 7220 0 R
+/BaseFont /KITNWD+CMR6
+/FontDescriptor 4190 0 R
>> endobj
-5126 0 obj <<
-/Ascent 611
-/CapHeight 611
-/Descent -222
-/FontName /DJAIEU+CMITT10
-/ItalicAngle -14
-/StemV 69
+4190 0 obj <<
+/Ascent 694
+/CapHeight 683
+/Descent -194
+/FontName /KITNWD+CMR6
+/ItalicAngle 0
+/StemV 83
/XHeight 431
-/FontBBox [11 -233 669 696]
+/FontBBox [-20 -250 1193 750]
/Flags 4
-/CharSet (/period/slash/a/b/c/d/e/f/m/n/o/p/s/t)
-/FontFile 5127 0 R
+/CharSet (/one/two)
+/FontFile 4191 0 R
>> endobj
-6702 0 obj
-[525 525 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 525 525 525 525 525 525 0 0 0 0 0 0 525 525 525 525 0 0 525 525 ]
+7220 0 obj
+[611 611 ]
endobj
-6703 0 obj <<
-/Type /Encoding
-/Differences [ 0 /minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/arrowright/arrowup/arrowdown/arrowboth/arrownortheast/arrowsoutheast/similarequal/arrowdblleft/arrowdblright/arrowdblup/arrowdbldown/arrowdblboth/arrownorthwest/arrowsouthwest/proportional/prime/infinity/element/owner/triangle/triangleinv/negationslash/mapsto/universal/existential/logicalnot/emptyset/Rfractur/Ifractur/latticetop/perpendicular/aleph/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/union/intersection/unionmulti/logicaland/logicalor/turnstileleft/turnstileright/floorleft/floorright/ceilingleft/ceilingright/braceleft/braceright/angbracketleft/angbracketright/bar/bardbl/arrowbothv/arrowdblbothv/backslash/wreathproduct/radical/coproduct/nabla/integral/unionsq/intersectionsq/subsetsqequal/supersetsqequal/section/dagger/daggerdbl/paragraph/club/diamond/heart/spade/arrowleft 129/.notdef 160/space/minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus 171/.notdef 173/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/spade 197/.notdef]
->> endobj
-4585 0 obj <<
-/Length1 779
-/Length2 1014
+4188 0 obj <<
+/Length1 773
+/Length2 1206
/Length3 532
-/Length 1584
+/Length 1774
/Filter /FlateDecode
>>
stream
-xiTWǡBԸXPBE<@ K 00ɠ=*"
- R n9.w1-*J`UjxO=*(!bS<
- YdH(PP B>K
-TBBJ
-8U
-}z Kv0X ēC#ZLjA~Tó~츊LV-C;Mo6v[s^ܿ1>89lZgʼ-2 GWϩs^stvpo_v>ػ^Lwqx<w錋mGիw
-ʢa\~aH_^9ʮETc{qE~/l^yv¦fHd!Cf`h9Y 1^#A?d
-b5$:p<mspڴlyΑqcBw+ l {T"zΦN^t^ys <nb 3'&Bh0fZ{Xf{tק_4u'XT$m,ȮzS"|HX]mkWX\t;Ĥ#Sgnƅs*cW̹ᶵp<шD)xi7lcMBңlRxN]ʑ˪aJVb;I߻NuBVJ+hծ U(VK7=sn_[ʫ?xN
-hy ݩ!e9FF_ ;&Y%wR2otuД`b̪Y14ȄYlĿ19 KXbplKɄGU۪\~PT ײh7 ;z_džh4cE_kwLYXn{)ZRt6y0oh ŠL` ~U\endstream
+xRm<k&Dӊ#/'lj0fxYi)Scfg<ݞr9BrH'dJn]BNCo!۔A!gRH[e ($2 X"E,d (66@
+q 6Q6 IB !LqH
+p`C!0B0[pQ@XZN[/p .ςp' Skŝ<;"g.G€ʁ0d-h bڮŃt$,t ,b.'VYkmՂ^w7\my`D-
+wSl08
+Id2'_"l#8XQ X|.pdb)
+F4+r!preZd2b y}\O 6#mWw"aoio.yǐ3ݯ=l(NW~wĮBUMJK_Ӛ<_̗}4|-pTk럟?7Us%;>U~J/QD1 xOY#*R,#s{ a*CofBG'o9+ eCyo]-K3
+Ϛ9Ze#gYԽ_f>Ӎ-J %>?Ui2jФIC!r%^nⓏz2αǕ+<#IOO7-^{JRxnZ{/ȭ\i_/_os+2x(횖E{QFY#~A5G=rҎM~>l6 ];A}uS!fT(]Pc)Osk㍯G?"EfSH7YwcvvXNUp-yh'kRY<,49ӘzWz Z7; ѱ?[a"W3&|w% ]x:B5U};Ji؇- 8H՗Sɟz*Ž2cw:a7\'|(Lή3gO{4<~ڤp4aN.k:Gv'ᾡ!i*T{Մ̭1JNI]]fV8O:FkJ [~H}YYq8UiR>djI뮔 /04^8M*^$Z]yIyKgkpHw`*T(!! TNpvՈU}4:s)Ƣ߾p9Qۓ{{%.y$}e5?IS";F-?7R^W>]<g-zMBW>D}TRm%qQF87X<s;<rqDUGr9uRw(U.Dw))G dr\/թ]Q>ff0yTL8˚e'T|Y?F$4Rmqϼ-`#zm #UPLPٜ!̇7-^Apjq4 55Y9,4&&Q;:>iů ߍPd|Ffaֽ;7b~wK6!,j >5&lD( Tendstream
endobj
-4586 0 obj <<
+4189 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6703 0 R
-/FirstChar 110
-/LastChar 110
-/Widths 6704 0 R
-/BaseFont /PJDRZZ+CMBSY10
-/FontDescriptor 4584 0 R
+/Encoding 7218 0 R
+/FirstChar 49
+/LastChar 50
+/Widths 7221 0 R
+/BaseFont /TWBENM+CMR8
+/FontDescriptor 4187 0 R
>> endobj
-4584 0 obj <<
-/Ascent 750
-/CapHeight 686
+4187 0 obj <<
+/Ascent 694
+/CapHeight 683
/Descent -194
-/FontName /PJDRZZ+CMBSY10
-/ItalicAngle -14
-/StemV 85
-/XHeight 444
-/FontBBox [-27 -940 1332 825]
+/FontName /TWBENM+CMR8
+/ItalicAngle 0
+/StemV 76
+/XHeight 431
+/FontBBox [-36 -250 1070 750]
/Flags 4
-/CharSet (/backslash)
-/FontFile 4585 0 R
+/CharSet (/one/two)
+/FontFile 4188 0 R
>> endobj
-6704 0 obj
-[575 ]
+7221 0 obj
+[531 531 ]
endobj
-3991 0 obj <<
-/Length1 1354
-/Length2 5076
+4140 0 obj <<
+/Length1 1352
+/Length2 5101
/Length3 532
-/Length 5900
-/Filter /FlateDecode
->>
-stream
-xW\Sۺ) @BEz( KGzDA("
-D ҫHGzSRn>go9>twe9spP6p/*j
-
-90U<u.L['FNCxsT uF#@~A*o8Lu
-@ @D6"npu%o;o'!p&PR#D<Y៚ʒmHQY_tQAYى1?ENSOcВ=K^%zޝ)YfZkb²NA}sd0tEAVhu6dSEM>{|!i,+Yҧe~:
-;wlfzKhF݁r8x;||M CB˳lLf9
-W,ܠMde fhCǎ_)U=dٟ$|OBN(mA8:uui˯-2},xl73hyOSVˬ9g."Sy[dV6W"#ޮƔj{+H BC>_W\~P*ŗ야H zynj6bf`L(OSniԚv ^ӊş)LOM9|fϘL^_E9Jmb Đ^K \!thdWinJv%wHaeS il({XZ_M>I}>@g.^I36{n?3QC?PtV}R꩕f#GGioم+
-9&/_ =u[+yT ϊTl ᡙ~V.(wFXqr-F@(<T֚C-QXB,6
- 4D&N;AkDEG;̰&;=*o [ ~jd<.'琰h
-Qr[ZO8W=WR A=pTWGk`?,e
-$DϹ",<T}y 3AB1d"}-MK)6rv.\e[{N|nmSh֪;_rF`
-hu[f ɇD^2ƹF7U:m̮{ 5ZH*)K o^&)SD.Ι
-sn%d4QxI<ey[$9~iytanZșBċc|Q |=9^jyd&O6T|#J3Ŏ'NA׃`d i@x`%#4@|J2F0 kIٯZrTK~愗x.>bA*b,r
-b[Rm
-}Wg*$Q%(.Rz'9:@.9)G;{IDNF
-Ed+sB!OTHb:مwOgw]@P5EL771A N^Lox<~H {#Xe\ARisQT0&7].6$a9b{O-s0M364h N'O%k~^^qS(]d 3DfG+k@QU1DsqH\MEoClT0ˑRo|@>qx{rc|-/_.P{y1IY@]ٸoɔ߉ڮGm@kVcQͻT5]%{
-d r^f7NѦR&7IP.JWvEMt1D&;j^3$4/QTjRyH202
-nh6UGث~ˈg@l<xbBFyCqE8<?m8CNytc2Apǣsu{Ws2I~[[tnITB C}*LnA
-fߎ߳=5(Im,VWeEUE,\gQPh-pſ
-sj$R/ J6pp/.$2OWCXj@'ᄆ+$giN]sr)=xWA^;WD
->._!X#dt縈 N~E2S ,moBq%tyK7EneM=:5(XUmyX8iCMSOrt7uW y9Ѹ^bĕqt)wjtif 'D1Pc؝\>{S
-(㋵r:yec͌}BkXP
-f
+/Length 5936
+/Filter /FlateDecode
+>>
+stream
+xi<mdzb,elٍ52HYlc1c-P$%lY}ߩd_Ng꾞<9;cD͡23Rˀej@(,DEupH хj@*Mpʓ!j
+j
+(Pssqu$l
+rMɿ^.2<~gd
+grw{DRBf^k
+?1uѳJ<K_w$l=~WڸΌo2o`H61pVGb!8i4wj=Oa9j1IiB1yDt-dr0@{B7D`ZLfN0zi9[zÊ&{g
+$#
+"7*B^{M~>#}Τ>+k<徏E>4$d |OfL|vn@92nX͕
+4ZS s5soX4o57&CjwD6E%6?`/$
+ 7oe }ncJ9E<-ds둫\ҼJJVcs컁pZ9B[f<."ifVDH#\awHQoǓ(rbӌ{;Ʒ׺ߟeG
+քj TϾL4+P// ĸ~@l2^A>ӧ Z|٫_+P^j!(q
+-fAgB׉6p>Q2MQGZlz4qﻨrWf- YTs qכN0YTJaTӢrLؕչ)}oZei$a+A:$`
+?K,#
+w'N.'FU(EcqNIj.ĉ}:]2Q%+B\/$<\U}h,7f\{BD]l7h;7<лV'`cmR</w ?p,Z5c}zk)#a«ڋO,{6Ԩ4)KͲ#'=/x٪*%/MVW`>1?2(Z}SMXz,[$>}x`M-_)(pe] :gG9ۯ8U;9~g44fe5u݆O:euZհ %etJ g
+D=`1-d2LHl@2a>}w=s*.QPo]Q1yID3v71qJ;I{u2Nܣd l"LP;y,gL]9jGsk+u3Fv~]F xqe cnmm8BN-=k bVy׆+]DgŋTuwB'~Lj g˘s~'GoNCMV,7tm%d9Rq s K!4#5
+ePOװwCFedSQ\{[ b7+V |% !6u€K
+Dv OȟhrO&&~uf|=b*_-bD_~5ʖ4,,U't.5j?uQeA{r;wy e.=?tVse U-楻TVevhԶ7o5Wjznҧ֬KB__.bB"8樽O*]/L8jWRU%'w}\_X@l7T w)9S"\H3gJTjٲB;sj%PI`}K9]:\y7{L;$I+.<|DOsc}Kc<< .eFtLDyRbO /^E -M*5j盩bho
+ 침ѓ0aS/b8 ᱞ0
endobj
-3992 0 obj <<
+4141 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6699 0 R
+/Encoding 7218 0 R
/FirstChar 12
-/LastChar 123
-/Widths 6705 0 R
-/BaseFont /GEHPXX+CMSSI10
-/FontDescriptor 3990 0 R
+/LastChar 121
+/Widths 7222 0 R
+/BaseFont /CSSNWG+CMSSI10
+/FontDescriptor 4139 0 R
>> endobj
-3990 0 obj <<
+4139 0 obj <<
/Ascent 694
/CapHeight 694
/Descent -194
-/FontName /GEHPXX+CMSSI10
+/FontName /CSSNWG+CMSSI10
/ItalicAngle -12
/StemV 80
/XHeight 444
/FontBBox [-97 -250 1077 759]
/Flags 4
-/CharSet (/fi/quoteright/hyphen/period/slash/C/D/E/F/G/O/P/S/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/l/m/n/o/p/r/s/t/u/v/w/y/endash)
-/FontFile 3991 0 R
+/CharSet (/fi/quoteright/comma/hyphen/period/slash/C/D/E/F/G/O/P/S/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/l/m/n/o/p/r/s/t/u/v/w/y)
+/FontFile 4140 0 R
>> endobj
-6705 0 obj
-[536 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 278 0 0 0 0 0 333 278 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 639 722 597 569 667 0 0 0 0 0 0 0 736 639 0 0 556 0 0 0 0 0 0 0 289 0 289 0 0 0 481 517 444 517 444 306 500 517 239 267 0 239 794 517 500 517 0 342 383 361 517 461 683 0 461 0 500 ]
+7222 0 obj
+[536 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 278 0 0 0 0 278 333 278 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 639 722 597 569 667 0 0 0 0 0 0 0 736 639 0 0 556 0 0 0 0 0 0 0 289 0 289 0 0 0 481 517 444 517 444 306 500 517 239 267 0 239 794 517 500 517 0 342 383 361 517 461 683 0 461 ]
endobj
-3968 0 obj <<
-/Length1 2113
-/Length2 9913
+4119 0 obj <<
+/Length1 2134
+/Length2 10127
/Length3 532
-/Length 11050
-/Filter /FlateDecode
->>
-stream
-xUX\˶=5XC7 Hpw@4;-8
-wt{1CbxM7s
-:-"
-|fn[
-ـ]q8Pqg:ө4}"hAz?Oհ+`B.
-UN6 T
-zlоbB@dP+1V. ZP+? ZyP+?wM[&m|}g6VV^B/
-V=fs3fSꂋ|Ǿ Ê[*WO<k[0D\{[E9ڰSlÖVW#i㫫}溩.XDY=H0oj:2sJjUQsPc:r,c%?[ An`X8qs`pm2T÷0S?Ru}w
- S8HN|B[:PGiµ X_Ą"e9yu.SJL2.O]_L~;ҡYoދ\jaULCݏo[֜>Jh4X 7ms*da{,lD!>h6n<&J0F$eYn
-p s/䄜,Ϧ;q8-H,u;6ԻܝXS؉U7ČӢ!Rч[څ{-fc
-Brƴb47Esz~G($}Dk-BNLmۄW do\s9<B-`ɮGn
-`?{ոQ$L
-Xńu%+Ҩ4TeR԰ViJ嚽Xm.6^cPp+w-xAeMz{VÚAo"U9&X=ל).hI8a0v"5*
-mzN҈&Fe^7g]J1]ꘄ\x;bߩ1T|D<Nw/9nDTܰ>w5K>x|t}Oc<
- FP M:Cj 4Ӟ 'sEhƞ
-
-** jD\B4!ko[q ;5v\Ϩ0SwSL'Gd[>}pl/!o}ɳ\ټ½zscV^vjcU`HlEHǥhKvJ&[ߞnYua;u},$6K[? bdg]^Өm}MQ7yp<&G仲@'G<jgBRV+uo9E"jg=kBQN&LF.KՖRHM? ģ%>I?lI}4&@`ҥPa:7})x;@[|v;yX%MğhD~-dTZnYh=rBEmr?Lcx$¾Vo]ۢ?+oF#Q̷Hs u:+:s5<l/.BoIFƾﹸnW=nsHOBAYN>^뜒`EPENyn~4/7cUp)[媏cۍQY@;t9>K)Nς
-;ʻqϪvmdi,Jy>9 i[v3
-Ki0FU12K{ c<~Yo?~Y0ϡuQɪ+Z8XЬD=oPjj'45*@,\pZ0I73͸5yӮ־b*
-GET5{V|w|BKS3kK:8cꐻר/A |Sҵ렋y;AmƜ3+)>& ʲHK0_~t lQt YI'0yAa
-$Ϥ9V[>뤡{1? _}Ò]~rд{tkkjed^x~Iiy@{#"/øY^D6zoy?{+H` #<*"R8\ej@1E|۾^51a(uSsaFi=V$@<RfV9<u\nZJ+zQtCDJN}[>u}?*W
+/Length 11275
+/Filter /FlateDecode
+>>
+stream
+xe\i)J;`KZ)I)inN);sϹtW޽wT`7dv,
+V 3!ߛ˸@ *@?K: WP;UO9e9W坁%`g$vͬ
+T͠
+d"jY;ANVO~
+K='}"X_&!DODOD&~Xu'UDODxD0'h=E`.:Os7;#\Z3VV
+>{{Ϲn_Ӱ a a-ktԬB_kìlX0+_ ̿fLB_r aV!r aV!/3gLP,6`#yv`7'/ 8&?~a-*d>75h6G:{^².Z}AEƥJX[H[nw$NގwN~r5Jl 9IVشT;u}i0N7'wԻmp)ytd!(q
+Cpb>X3-C]poQ3c .^DT ,LTL$;l]ݞ
+?_4}$*VNM[K|
+<e!7-ގAEaON' .uv3fD ZBheYDMUz+a٭X>FU\%1^Kħɼ'mto)YI\gG
+!ee6&u9]l< zUd7?#v: D(S"Nm.Q-r VIv;ukaRy3dZRk:?^{l\9۩onjL-WKxs2X>
+.%E<آ:c,vA:2HAsQtHq,-ݑ(/}*XzTE-۴`
+r[6@"T{ƺ>U315,?X&Y
-iGH!7enÅs{RutuptJpd9$y:f˿7ԏRDǤ8.KgAS0oz j^Mv?Ae(] )L봗q4"@f[=R'|6  \#1 n::
-W&݉%:vKg;IϤf}O"h"> ǚnܠV/0Ub%D'/ޱfpْi}2_( 5lM\
-cОǤ
-B4@8~n!Wx}vN }{m5oex5edST
-< sm70_Fg+"P修SQbot<=0C" y~;Ók\~Ez`T@mc0 5%FJ:CS"iX$%w>YPg s:5M?5Q{8""ɱσCC"{ R"'wMm=W*x֗,Ze5lIWY<-2IYJ@3=`s0SiXpÔ%[t*h6gL=8N{w/ox(dobGh֐\;5 =H"tgX\YRk4y8;=qls4ھ5bPb&}5{Zleo Qp- !ȝ<_:
-s^Wnxxm, ݌ޔcg'Q3"H<݃p=O^~}./]łλT-ަw"c* оbL8
-55:B^b˴Hj7pB˙>d39'2 9t:/0BWȽ<5Nq(dX##&8n階7d y>CG^V0vUfk&`C)!]yn-(QIz+6wyx!;s՛nUc{L(>Eq`U$.=osX,!TQLQe%9x_9Z8) > L|d}MEi(?de"#-Y'c\XAEYE Ëd
-8]: 4(RK'0UFz8pFV^Qz?0~QA;m#[5|؇^Az|EyĒl<ŁUj @cbC`FDZZL0S!z%EIr +hQfNpXp*VvڌiG|?*x
-k9?7`~Ѽ!>ݴQ(ICD/OI[& fsV[i*2&fl&5kk</$y^I|?r^bDMOs\cz,T# Ni5a
-/"_i)r}&VOr% .7ZO6d/l_l<&?G5=Cy2D4B;#yޡ.'uuqm]^֋+ 'Y'w3 UtXS,+pIF} 50l}WX\$[L+lm$헦sSfTo
-wz+:ܪF&ٳMbY֣$gb}jHi6fnGN ۤ{Ҏ ڛA-O<:C~f셽Tr<K5zoMkeu6z<=n>4)(O$dҕu ½]Vn@5nVΔjFٵ4otm<َW-"/WV8[y>8dȳ~mVjr~)_b
-.Ұg12%F߸ ~{.$RM`m*rG%I;o u9f*-oбBOZ)џ.準~|:m.+;ibMF)~&Ysӳ鹢>KJ0ttahc7 \g#2._sU_$j]͇h㚵D ϼN@*DqP3. YEy&
-0=w.-Z4083G5LL
-[
-0'ӋBvu8 d]!-63x݃%'S\%l흮 mܴmף\z4 zaN%j|KX|o6̅fղ
-ӴRι\o&I_2P9=O 6>B|`]3Ⴔ+&ɧ$yF )#QWʪ?ٴ$JcG1-O6H:9'}yU>+9h|3SD!`!~٥4uLa랺iB Pd{ژ7ߘF[uQ80d^u|{GLd8= P5ըbuhPu`~XYD 2T't+ﲅ0W$FbNUx)@{S'6F܍׬?6KȄY{TWIor>$&Y!=j_D!1ڏpt$$g>=qR9[X+Q ']󝉭Z':ff˱BBsIZWЧBnRՍǐ$rZy7mE#0*\.iF##i~]ĎԜ1'jW}d }7}·՝7Veo6%Z̺?pƛ1eOȏ/hk`gh򰒊wqVp{X6g{1 J\&<?]q!ᏑF|q>kI<9(fNVxbˀNJ?<>FvmBE ٟ5 rx&&#:",\MOk"fhϒʚ'm}YыZ\ܠ$!ޤͪPxDC[)r9Q,Z`-,:LΉ?)I~H0Q*^?.΅hP?C[<ǖi*<fwbm"N&orkW̜RzAwج>e]`9Sz,[\̳\xK>`["1~ ȰGu30[#M!|(6ЙE4ַ->5 OLWoҰ'aiZq>gE~giGg|\
-3u/4?kbF_6I}{`hMnܗR=zCRqQ#%IY։9`Kj-4t"R<UT5Ϗ ֿL#p^NNRWaͭ}@!7OWHd*ڞ|Z=>JZf-we9{XxύK8Mڅs(Z}r.Y_[fcZ0E:Hمort}0^{ }DЪ~.&gdN$3`hI
-el~L_3md cx3_<G<t@ڲ,pnWFgē%޻ B-qqE1mHe& Kvݱځ2tvP`XᏘ-!ַ<K~E/},TUy7. Bb?bVHMCQ,Gg[ 4bBb)鰦kƈ8(x*-@c/JЋmnk"_a,rYMB3i-$]eZt>TtP@PP|iOU4qY!"RKDa˥d7K:&Ci(U&^5MPaDͧS&*ԉ II=m&[ i!bl/wn& AZZrUOX9R&$w] mQI~$j?Na8kn"*r٠d
- m!Oh_
+*bbÎX\Q!X;ķ)?IN*ơB#:7 yf2%
+/d89+:8uPt)sxcY3ow83 8-AуBdm`yO-!J<WDBXf ËMCTX[<$],4A
+k
+ҏ1 [DthW8#U auf-G1GݥF@?bȺ{S[ _i\fK- D=* AVy݌ebU@>:zx5q}Yn[ƫȋbʐ&RvЮ]Z0RFU5,{;ppdlwBc37 䆟<{f'&2xOހn jCRlOgeΙa;m~PEF |4TMLiʈ]kJYD~$<\:nd2h+*MfGF:Īm
+H[3̻T^M]][j[>de{7A%q<o6Cc ?RZEQ,eKF\Zc[UzSHuY.s"S 
+=d YE,[}@ZS=K +/e`ˌ>QGK103b'Fv[j?/0[ϵ]*+dx ?* MY3V7 $P^9}+HKR7>nƖ!x߳@1t]<gUYݪl;dU`䷐%)jO0v{=dCrcZ Sz!]{R£N$S*u +b;>MGb%ZJzmޘ.O9 d4%x0>&LZ0s
+;Zـ}=P9p=N<OTe 'J\i/ܨy'©7g{с\9 $yڂ(:󦟖ӌJPK8>jrbJMݝ,+jN,!*W6ΨSi`sӕ;h\Jzk"څs@6>cP,-eX:\|wq[5(CoЮ7;} AXϯQ<9^<տ5hݨx9}=Tȵ_ڿI[ g<[ψf狭n]u^֚ch$iܥb|e-,}[/r^d,Z4 ,-g*J Y iUW"BftP"Z0?y^uvx595wUdXYfYaݔJ𞒀Sj
+L>=zԦ&\.C̱[OgaopI~µ$4NLœJ#[#"e\Aahd |BģxRoW]fS!Gp?3TPRJ02y6s]_^yph+gvl51)"{_[:yFBՇ
+-x4q\u+wXCxH@,4JŻ_ڒT]R7QjW)Ea%nL)2-ɮHش4௹Č:$@4]!l5c*m6*,(~p@)\HsXJx7>k?WbF|^wZ<+˦w*kh*6p#5E~"Z.}/.
+AA;Hr!z녇i7êzNI~% Aj-)»$
+YJwGx!mX~oJ((LjcV):HEwJE<ii[bH('brqu40Zn3|+]Ѝ70~D䥘[ax#%;zYUSM"s !3ۣFnGh_Pڦbsf<UJ;2![vLB
+ qxKVjiQ8&%jxI4=⦑7R61Pew~#2^eɏ9ltB\L 8JLK9`ǔ+n%zcQb[X{c5<dGL R6؞; .)P I2~:E9p@v; vuy;H%uYm %a]:\/'K3NO߻2}lM7q_Fș #gHr "/O;"S-<,j`
+<ւl 9Dd7[L \?Z᩺g.(6dk(jzEl^c!@d;;OjsFۀRu9Q6G72@#\nsypMjA
+I' |zHD*_9(KY_ȎևN;0Vd{i+9&;Tu-VV"uS^ aFXPr +c_Ԓu9' gpݧϫ,!-[wzEFny$iZ~&4_Ϋ_S6.n˞E1-l x"8 jkJoxsEOBtE;n/&$_?Ѱy#Lb47kȒn4op,"z0螯fJUm
+d\ߜ~S,|ܸcq6 ma62|C5YΐJN_)+}{g2josl!ζaj(ޛjId? vGMGv]˿ -a |OCWieTr\Hq\R{QaOR$w +yRv *nySB.p$)D5Wvd\#&ɖ7
+4R*>p;qjhy%Ai sK,B7~"CoؙX;1 -ǚq6;: 7Lr-:'PedOUfC\};B?^7]t!Aɽa #6a_
+؄]}.U|
+5uҕk'KР%>l+Y9Ο@=HE$'Yx ̽l:Al'tI3 W`.{Cu[1,?F泿'|DZ<!h7zʉaڶvS& >7v]|QPnQ8m 2%w=Ĕa?)5}@
+S5FA3 kN7ro\S4v5([#ZC+ꮭyF
+8YGZy>\sAF(.}FY s~i.Rif1\v+6΄KW;OIJ]S~ 'dWƪ2k2+9꡺
+ V–۲K[ytסs>V3㷹.iz+(~Pp;-P.`,{&=y^֞9ƍZ߶D~Rl*Wsf܆1].1ө-yc>%/fE50ӷkteeFlhI܋wWC&u,b&iKॢ~˹l}k\8rgi1)=&SGGkwh\0S5K-ቃs2%B{ۋgG>:1l<-f8> !%TaK:O40*Ѩ+3PxYvLDe\8(8ɑJܟXG OjK!v0C:3}H uW6Ev/F#4o\/Ǖ]G,-r-7>=C Z؟kBLNdFPJIqո?>$Is}ʝ5"]+SƈLf \aWByUp"dXt8{/cN2KHg6vUr XCXjخuZ܂ m!!2{k/ۮݿnR?.wJ,Z3W>\zNϵ&ުHgl7RRܪZ&C?3PLdABev7F9d诠VIc#JA~xǒNؽN0-N`}y
+;gݨEo)0 ="軕xk|CCz Y5{rv#ʯמWɦҠE*!s;
+`AB%Xyt"$3ZH̰Uy|6ۑLI@m7}s7RY:+jmH%SmM*kC߽s!"7d֏>g2K{IF#. idw@+p
+{. ͲT|SYSenjy aWcj4m7Qʹ1
+̓l1=ar2Žj+VVC\A&"K r
+|f?%2+$#-(ǯn$NoMQKG;ju净B.䥄~|Vˌ<.M uk<8ui(p#m2ugΆ>yGAC[^%uT&9T- q_̗͜y)OǒZ(371]}W| 8rX_]»W}Qע s
+t:3ͪHc}1'G=x27i떅޴$hvr%n3 th O>룋~H&”lxp HLcT2Ich2~|U8~Xy5C){ݑEϰknN|lCT.JwSf񲹗
+kp9WmI^3@׌EzK
+D/r<Ã_+ę+aآį}ZҤ--c޿Z`/@?xsdE#*G
+%m:u՗3H$-ɮ;~*y8Z,
+ɯn;)ZCcHJWmZ dxF!~Ztّ |&3;ȻB>r!M 0tI Xf~UW?5){y@c?AD<jPVa]>%Eq~3Z =u&=z M^N/&n$*w>~yc`aF 0L>Sfo"唛(-_j|/ȗ+"n
+H)l %:,0"A}!NkHU|hesiDB>_v1!гԘMf8>TLnb#O>g(ǰn!kQQS2xBP&o
+NdB1
+2ӧT?꼥pBHIfY "Fmffj8aL9[|aIZg|QIiQyqPhT};ؔS
+vG+S۾Zь,P c/LǟbKu xV,m??eC۳ܫS9SPB' rCFelh{y?uvҐ8ݗ(=.)FI2O l0-TLW[!z'wuδb^ŕ6NW7W{uIZg_>b˽fu?z2"y B
+fOE( F1cUg!Wl|&eLE/+O>ΎANma?F娽@cV(orHJjg<v+jO8?!~<,f
+AKgV{Ȑ`g6wHiY z'M}{_~4gQ]E*^МӿiP"R(lJx[ֻ'i1Νf6$0S]
+TP`fT໶hrWg# ޏ^-{<)yofj tA_2/endstream
endobj
-3969 0 obj <<
+4120 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6699 0 R
+/Encoding 7218 0 R
/FirstChar 11
/LastChar 123
-/Widths 6706 0 R
-/BaseFont /KISPVY+CMSS10
-/FontDescriptor 3967 0 R
+/Widths 7223 0 R
+/BaseFont /GOPIBS+CMSS10
+/FontDescriptor 4118 0 R
>> endobj
-3967 0 obj <<
+4118 0 obj <<
/Ascent 694
/CapHeight 694
/Descent -194
-/FontName /KISPVY+CMSS10
+/FontName /GOPIBS+CMSS10
/ItalicAngle 0
/StemV 78
/XHeight 444
/FontBBox [-61 -250 999 759]
/Flags 4
-/CharSet (/ff/fi/fl/ffi/exclam/quotedblright/dollar/percent/quoteright/parenleft/parenright/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/bracketleft/bracketright/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash)
-/FontFile 3968 0 R
+/CharSet (/ff/fi/fl/ffi/exclam/quotedblright/dollar/percent/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/bracketleft/bracketright/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash)
+/FontFile 4119 0 R
>> endobj
-6706 0 obj
-[583 536 536 814 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 319 500 0 500 833 0 278 389 389 0 778 278 333 278 500 500 500 500 500 500 500 500 500 500 500 278 278 0 778 0 472 0 667 667 639 722 597 569 667 708 278 0 694 542 875 708 736 639 736 646 556 681 688 667 944 667 667 0 289 0 289 0 0 278 481 517 444 517 444 306 500 517 239 267 489 239 794 517 500 517 517 342 383 361 517 461 683 461 461 435 500 ]
+7223 0 obj
+[583 536 536 814 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 319 500 0 500 833 0 278 389 389 500 778 278 333 278 500 500 500 500 500 500 500 500 500 500 500 278 278 0 778 0 472 0 667 667 639 722 597 569 667 708 278 0 694 542 875 708 736 639 736 646 556 681 688 667 944 667 667 0 289 0 289 0 0 278 481 517 444 517 444 306 500 517 239 267 489 239 794 517 500 517 517 342 383 361 517 461 683 461 461 435 500 ]
endobj
-6707 0 obj <<
+7224 0 obj <<
/Type /Encoding
/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef]
>> endobj
-3965 0 obj <<
-/Length1 1393
-/Length2 8137
+4116 0 obj <<
+/Length1 1841
+/Length2 11323
/Length3 532
-/Length 8964
-/Filter /FlateDecode
->>
-stream
-xeX)ZZxZ,]JqݵýݟO3gsf&4j,&P#4ƑC
-56;ĭ
-WC`{&
-;HM
-v
-‡?omL7*&Xۑo-7&Xu;!  0 ?fa4#잱0 Ӱav Li8>90+?f¬\~#'YӑzLX8y;Ӱ1sIxaD6[^b{`+mqj,`\T-;Q@Z0X*z&jƾa\L~ka^tPfAT/C-p;&CNʉ>@v7uf"Ŗmպs;R>W0 oK)&Ih[{1G2\b
-p?'+q:26 gG+5n&Ο>d'#Jl_J?,;JfMCFSAM&"fJ6-'n[RDLbhh݄^1o}F؀}WRG=r:иlmn8\sk~O]wˋ9] vM>__<nN!+$;E#40<L`&Jsoy ]t9g-TNN P1CҍQ3'p]r9__AI$ lF1D"EϏwo10}?2(<SxFz6J iO>u{0Iݞ2!n?8!mch،_cqd hTx
-0{/C=TG Ccwt ʟn_'0dI v2Bez?b5n[q{-WT'o-NIu#pV"T@MQd*-QSXB|8nA{MGj\j Q.1;KEdGYT
-1`:ٖ.ѵYkܐD#R/W,N,/s Ha9Z`JM4ML BA}{ȳ\wۯrn h 1-pwtcNN' 8xM>XS7!5MIbB]1t<GMcL/X t))1}mAHKƇC;tӾԩm8wùz~U2IuIw%bCJ} Aɺژ~Ë؅3FnMJ|Um]>F %cQ)WZiL%$vT<38{DJr{l'E/ zN?ȬOS~{OFPYYA%S!/zd* ;b1l>z.{4@HI$/Na&&ă?2"5]);fFbCYɱͲ"FXGߔQTBͪ,d= :ʚFph'6bN\ƈ{:ovd0-.:jFC1z-*Qzt<^7&=Ex΀>gX7}E
-ae"~|r0`~b{M /NU-1<4z^icM5[PO߾~bKirw7\u=#6|.YTGK.|˻5A1kQs flrK3qʩdSN5!LxcFaU+5=]CB7%ek4=d\JO~kajN+zkImi絘EgΫA3oY.3ߓBR߅I<hjkOzYr&0fS]2m F:."As.C .\xf ɓ;MТ]U]V若EKMMQrǡ&,(> _ XIbcƲ| ׎Dq+"g$R/Z)쟢)D2yoL#zXrrc=Г%,}Xe>&r3J.O_VK:#Y:5i}D NkG
-XTputGY{-Vgp̹fxa`U5N>?a-
-gݏѵ'M]'PGl&r#3&eS<ywO*{[HI[Y(R]DSGa3nѷ/|.oAvJ1f8&i}$"<䦊<9~?1$UF:B_NˡXbb^9׮R%ټ9P<uNpEِ^2-${!m nT Vxв UM+$̊\/`JCA(Tl #SƸuA \mkƽb!rgv3<Ҕӧ|cG۳-y]dUuo֏Hd?j]Gl!}oZjWvLCJ๱ߡ
-(_/Dx=Kr
-30:$=|G׷B4;Ŭ 4hٟAV$yOYMĞwP 1jgᐥVѿ\콭+,kK,v% aUl3ՇKL263}jR9.pބb38M7L#?!.H {ﺻݐ(cu,\&=hrGcSEt;T}FTiQ/C7)ph*gբOu)$_)ty^mg/p%:+ߟ̤MM~u7w$ѽ_2V Y8 .jd 'ui6
-c?ؽݞTM|
-#7%Īv˵yY 4U) ~ i8 ő _a hU2JKW6/tca/Ofݫe8&9A ,;Zςrm.j1[?Ş%?5Z.tXPh*”PRGJrc rW47%M|%E+W7']9tnHqΆ'#P^c yέA:ƇօUl`讕kZ$}NDED
-qY^apc1yJ
-d?(L
-f }af-]k57&ͫR*(ٻHծ?
-GTwR
-'3'[]6/?T+&zXM6&[$ ֚Em.U@ /#_W&+IrTVm&T𓒟}Js0U'n @e.q?KQX:^Ė>Ʈo7<jEhk}) ;?IITOUL%WmGj~91n +F~fa߬1~=Z<MblZ:őd1>軣e0dlihu]EQh|~o|%!\cTq?e}VB;^B7jV^YbQłN.CnÂ]NL5&]^\Bx%SrCeD/N5%+7[D^9FbO f*]fuќyu9Bij"Fțy}+kD'.5r3 Ca\k# #rN:qD(&= CT;2>g"pC=Ãf^ᓞXR(uAzP4//
- 90سv<։H}|ɥҡY4G^•LkτMDtvŐEao;Q_2@GST8*??OD⫪Ѐ`)-G5R7MX_BSQ)ŜxTb ̵[,TŜiO煝t,iNli~v<
-@,jƎ1D )PU9._b}  o97]TMFQf+t/G&۷Xثho{jl;
- H hچlFT{ח#fEŚliQSo.1?#?ګC@'uAS|X>|qDǺ涰K2)D\CjLn~ԅD ͌^mP~`k<\ 3TY%{9+sJc%x<a4B)ɺ-mY<*9eXR _O?[ԫu}fлh1ꇚgGY|{i\hqFTRØWzG71?&˫K\:.(*c&"5.q) S'{
-ʤӆH.$U@CS.;{V' (|ht<2AvbKtzǏ&'=ƱK.9zbm +_Pt)\I!d{X]h,- !Svã€=$8ۃ5 ЗNњ9ϹDz:ͽy hr}='))YvАd_34|Fl5ZYM˼Gi~mi]3UsoC\Գr"qQlu'-N6;"3:veoP By@o|UJ`Ӯi6Mع /PA×/o$">,cA`[Ohb8,OE^7w.N]tmҐIm
-v-wb{>+I}lA3å`r K~@Veem/8hpAxzyy2B~!˪k6E ]fޡz{Yj7UwPs>u+u2[jyzMN۲53e4`sp#e@R*M؇݇p9
-ҹ_;51vS"҅<;!KQ;Pv{#^q%k6+N*{`pdPa L<QV4$NyV8ܿPvI!6 Ocʷb]o
-{CfsO1{zq0wɧn'|i/Zg1<=l)co|xn#`q(ʣ='dcOPWޓC6a%:
-TL4>%9ٷlzq̖Pwzwn3͘QD L@VU3幤`,G̀3ŶsuxԜ".vsx-
-/MEs<8I~e*i?b3c!KYN$ܽis/R:wRFH&KB&%M:+vŢVkvҒ!\6沢F-%ui"ʝ2\e]vNXjK̦⭟ԍ4l"LW8w6Bp-)0m{/=yUޗTʊVY|Ah?tټeH6#?<@Ƥ[tpyO*})Wov
-CkR?.!'UR
-dǒP:3ONi'~naѕ [,^զ[D3ݦf)#ulw#ު#"naŇ"EHW%Jf1{nj{{vK
-Q =۫ f_ߔE< `sxqb$%i=Qk1#`tNC|sZ!wfwx.YrGcBcq9HrXR{U,\+hWgt
-k -C6[+aCEه8}PbEckOP
-?23iͶ(|2߆,kr+7X 4-9yA ?d[3tendstream
+/Length 12353
+/Filter /FlateDecode
+>>
+stream
+xU\]q]]6݂݂'X9Oro?v?o\sYVAM,j`rwefga+YؐŝA@W+{ +u
+9Z\X
+vV^S`
+r(8T t
+ 3+7^qZ[؂
+k(/oLRߟ gAIDb1tND/ 3ܚìK/V}4 :2Mi;2;+&׆VvhSmJKUPܼF:"ZIⷨE
+o
+/q ZκJ;!9,~_q;&pp>Dސ0 hWnچ:}_P@j~m=K 0mVa7QP<!Mf
+_Uw/'26i95lc=qrr//Rj=/oNj4hYbgЉ ^8 :v.$ab % $D}Tū5? zt#[89B$u Qφ".{:{Ƀ(}fNPPkiuRs
+aSJ$#-|&D
+/} ETZS,!C7)^$k0.G#0dS4p£#Bx*k`l۽{fĝlX
+PÙғD>DjKvl!b&mP%mٌ# bs k.ܠjH%)94r!Ԧ&jq4վǩ;$ffG3V>\&rL<w }9Ay`м栜|nYсfv4hccSy8$!!JC.&N՟:/_хS`Ry=|L4zN ?1x@:ބJLԤ!^t % mVqq@\D(
+| C"{,_#p0C(UiΔ^ЬS1++bgvM<zI E"%wq]aA/xa.AO
+PﴠQ\N9vNMԐ]NmD T 9arYV,"ʒiz~CkQ}[I.Nt@c<.DG-{N]T,pkX񹣥Z3`ϙƢ8o۽iz&6_~~@ׇ|cv&-5~Y߰C"qhE=)|+mMm"1 ݜT q扸 U6?-['@[цmbZ؄Wṭ~KaclH|CMK6CJA>Έ11cRk Ǩ{: Q)4 H, JT!B54y7}z&g}+OK{V>I+ww&t#[ph"Hx/'V1߾fp1{!JTl}Ca},*9|b , ;-(ek\oC WZ1W= gdtl?fi<~QWi |V؊ Ln!mVbw%F,^?ܒ2 ֽꜾ(:M\5 /{x{9UG, g_`?n=r%\ \I'o՝T*7/i,}V >9S( jbˏ
+T˞v 8woԷY/OϤWj\)~.dZTa^~um/ K7$;;=CbYp([[);&!U_D1r{lt}%|.f4;n(jYJR.wǖ.XwɈJ_*fOͱW(ߵ?A&Nv&7 _{6P/% hraJ71mKR&-ԋ}ucZ.˱΂뇜 &)?or>~V OVMAG"M_9Zb(rFv}<-YB`\'YH"M
+4ҵ5峖)MPhitU!kv
+/Gva۵GQbQ
+_[t2p\
+F=!)\%VGO~j,c 5. dG&7V[ ,H"E (9OjZh:秇E|>K6xh!Ȯ;Q={NTVBvZTD!!k)]-6j- l
+M<mg/(X&> 3zvcZgذ]bO9x;<܊ԓr~{
+l8"E^t
+LEbthoE E1a</\L(li[y b6TYhi!h1tf/8|Lݬzd2Gtlo{
+ކ ,|O0SW]`T_; |lUU˃h=+ *l{)|V0gոn;9 <U:#B2jJqQY|- ߈2H~_ݏ0Hbo,ϭ~5}04$|y0V(S|e rqX¥JDCyi!5lLg451 `T`$s$>@.ٖT  3&\%^K^ZbW%>Ów4.\1̉ YB}k$N-ԝ
+{9<u:Eq}Qwo~yW <ijPS
+DT#) *%F\nyz 益k!F|W6 {^
+~9&%u i| Q%vudf>H({|^?fcع]+3S:jZjD5WJ#-W"9Dĥ|ƱdžI؝5$> ČhM_5sY@x.ߑ;j?JC4|x\N,M2o(1@  v1
+AC͞JKxeȂCnr!UYp"% TclcBsr:w׀vcu쳄ŰDNô
+n&g;T݁ƥCM<%(cbE;Bج|;KJٜxOB#r?ֹ+5QDڙ"[:S<$&IXX7biqwjFX$$˜D{ a`~|)}B8eW; ߅C|[>wmI<eGYk2]y]OuBИx>ug LpP3V\¿,+lS~&jt,o.wa߄`3'}+1N*U]:^n6̛JPAIՂ8|+lsPq1,k1Tu&8RQ2ѳ>p"Aґb_#(50Bdfᄏ?..7:Y#J2Hp,H )j^>yM\q& lvC(+Dל\C.<A̔w?y|]3_]&2?*.Q޼l^:PaPP).=UY)9bݪs=2G:ݭ"7Y
+,榪l?꽽(WWl]$ n8d'gAurC7QUESz->x[(!Gt}ǢڷMźȍv/3DbJԫjxOϛȏcD%%w'BT?h3p%VW/}3Q>=a"?;\g4Fpgj )?CH`GJ/<g^Vן3M<
+x_9ɐa~C.%}Ƃg;\\Etg%xH!kB|~9aS hIʈbA3~儱G(ZY[8E;+Fn@zDnOS-0FA!bP4zO_p([Y cYw4W9U"IZꞮ,/ =j $.]{?d>|>L ;y;,7
+D[QS+=SY4W
+MD )
+BxY|߫.
+OY#0=U3 L
+e:&rH覨FDZc@+| !E#˞9˳i]RbyG^JՅpRON ZkG,"ً7I[ r:-bcnIPD2n]*)ƭ4
+E TGSy&IAޣ6_T\~_}rѯb㬃'LRC wYG;dI#@d^'R43bEļCWb*^hN~(*a RE03~
+~wwB͆@ɚil̻9Ώڟav
+̝߀^a:gҴާ~1bni14(dX1U[W=0Vo>nnv?dL7,~}7[8|SQd ۊFn_3Z]4 4d'YAJ e_
+-q"__
+*-"3951@7|KoJ\\-*_j0'(_{DbM3[
+eŝ=cD3گE'Z2"zZ%0#޹3+O \/m0#X2]ëY[*)-F\l.Z|-Jj v*!w'6u "3qctѡ
+Oz}I|Iӫ5^]p._kEtf*Qk
+?g(4kFUwϟ98H=%~ˠtA(
+}+Zt~
+~ J/ -LuLIh.yZ-=n/q =}!0:`{b`ա>O^REf*Rʉ,KE1'Fͧl 98`>`rJ:H<eCOs+K '$O[q\?qSIWRY԰w{ÓR=9skbW>! *!ub9Y<h-}\/ k&SnH{s+7UqmE1'kH}
+s)P~5IpBN;u*6a>_Tbrj`"
+"]V8 v5ʾPZfdӢr@;a j1{OKmjݶ@4m!{#">.@|H\,I@+$Ь$Оq2s}G<VGGu|C6$5jI+v
+@edm"9!̷ԝW9;7ۜ+9>2v|6\Qe$#ڳPM\pAWVWXjf'
+kn121qu)ԑ:y s X!V4-3M' XBt=^\'ڂήv@gendstream
endobj
-3966 0 obj <<
+4117 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6707 0 R
-/FirstChar 52
+/Encoding 7224 0 R
+/FirstChar 33
/LastChar 121
-/Widths 6708 0 R
-/BaseFont /IDXUGX+CMCSC10
-/FontDescriptor 3964 0 R
+/Widths 7225 0 R
+/BaseFont /OOFXSS+CMCSC10
+/FontDescriptor 4115 0 R
>> endobj
-3964 0 obj <<
+4115 0 obj <<
/Ascent 514
/CapHeight 683
/Descent 0
-/FontName /IDXUGX+CMCSC10
+/FontName /OOFXSS+CMCSC10
/ItalicAngle 0
/StemV 72
/XHeight 431
/FontBBox [14 -250 1077 750]
/Flags 4
-/CharSet (/four/colon/A/B/C/D/E/F/G/I/J/M/N/O/P/R/S/T/V/W/a/b/c/d/e/f/g/h/i/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y)
-/FontFile 3965 0 R
+/CharSet (/exclam/quotedblright/quoteright/parenleft/parenright/comma/hyphen/period/slash/one/two/three/four/five/six/eight/colon/semicolon/equal/A/B/C/D/E/F/H/I/J/L/M/N/O/P/R/S/T/U/V/W/X/Y/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y)
+/FontFile 4116 0 R
>> endobj
-6708 0 obj
-[553 0 0 0 0 0 319 0 0 0 0 0 0 814 771 786 829 742 713 851 0 406 567 0 0 989 814 844 742 0 800 611 786 0 814 1106 0 0 0 0 0 0 0 0 0 613 580 591 624 558 536 641 613 302 0 636 513 747 613 636 558 636 602 458 591 613 613 836 613 613 ]
+7225 0 obj
+[319 553 0 0 0 0 319 436 436 0 0 319 378 319 553 0 553 553 553 553 553 553 0 553 0 319 319 0 844 0 0 0 814 771 786 829 742 713 0 814 406 567 0 683 989 814 844 742 0 800 611 786 814 814 1106 814 814 0 319 0 319 0 0 0 613 580 591 624 558 536 641 613 302 424 636 513 747 613 636 558 636 602 458 591 613 613 836 613 613 ]
endobj
-6709 0 obj <<
+4051 0 obj <<
+/Length1 2055
+/Length2 14045
+/Length3 532
+/Length 15183
+/Filter /FlateDecode
+>>
+stream
+xUX\ݺ%hPCp ww 4 ֚\6[_z"S`t2J;931$uXl̬TT@3w;?8Y
+'dȹك,
+
+GWD `:prݽ<vqUOg<V{U^38%eG#QAgN0T.ous_%XMM<H!p'dVOOTM`??SC`??k!!LsW3 ;^> g9^[!-MlZ_^ 1BmBA!8_dCT6S9T?/r !8_NSyT^/ ->l,@ku..n;;q8R>Prہ|@Q-<\יBV 7  @d!n1PtRܺ=Yyk/Rj
+}Ť VSM.3[lڌUKr둧Qo'Mϡ3ϰhmw\* [SF>^J+y A1h2ͣ+kDA13j ==fs.,6]SS黢WG 87w$ BЀ&>Om[gXw%: )ZH%7'jBWƴ^sn,;Q'sNsfRk]FPZfA'zpc"[" mNũ w6.>OrŴq=bGʳÅ\ŒP ` Dؘd@&U3Cx|VJZjwk2/!m&Po^4Hfeڮu"C
+:]MUp|%(WiZeGvzp9N],Lj.l'iMKؽ"#G1ϸ_*3~ᔳ˺
+T*%q6YT{14=Јڰ_{1SPc1dlO HƩdĕaLJ{v
+N&6aEv"i&QVxHIY}`R:hM/ݩc4U/DRoq`Ū anH|p0(cA/mBr 9+*`r}B)eVka)nØV7bld+3;B;E{d݅'KJ5ˏ>Rz t{sPj$#/8yd_= [$YʡÒܸ6<bFLj_!Gߗv-O|=U/
+V ДEDžY`NJOBe͓1C/eLڎ%_kfGQz/OAQ7Ϥ~@BZS2 7hQ@w:^˜h[,-(c|@c9H^tu@8s h_Uqn!=s
+kʘճ%$}/Z.'w1\"캊 9=__鯢KN
+U<qPCMp7*ɥ@|ptPzQ *w&)"|c׸WƘо`v5Bxh[);&]{zn;\ ݹd~}'!n>3&]DN.AWo(nH_K${#?aR[tY8j/]vg+$z%Z4̥jv}Zs Q vZRoF']%uL2S4AP%tLxQ
+GSC;KxuYc-3RPơn[r‰+>@M>Mq!ZPy$+p 7yD7Me3Z^ƤP~oIo(0|QF +!R5ar5NB{t`\)Bp^mO ;-dF|
+5ü*\Xl6
+G-Kgllv)RINdD !vnnK1LETYu.Sdé(va4} yoDttaviSOdԁ
+c88"P7Y1׎8zz}eQ8(G 2fy"$vARkIɤpZ>4-rXݪ1%bKo|#t,5CjMa̽vg/eh1LWt e/1_+hṂȹ6;qϠ"8Ťr}yy`8}:=a:K)>>NKs
+l{b^"Em[eUs` Kcpz}#Bw瞕q;O;q,_sR+ 3=?!0a`"ݹGw z0/@-%#Ԫ q1C|[_#2A}O,(݁Wq"Gdz8,H˕dZv!{eT.=x9 J_S<#R Zy (75⭖ +s,Q#H`_*&;4cuvU:o%F_#5kKʏ}Z΂1Pf쎦Κ|~`0a#ApO&"2p2{;L;ԉd:9Lj{˫
+S{u_ u#񎩄/,4Ve)YLQ8bXD(bzX(lEy[(0b_Ɨ0|c_n$zF%uwzA-u\{nt?S/y 04&{M6$@-.5`ֈ]ף/iI},gF!LK
+$vA㉸׵5@=[]fĚƙ OC`
+Xp<Ds,_^0ڐYGwS0WM͋ 'WՊm̍{ug/ŚY=, x9)_\dX#4n4_Sc ?&&]7Jx$h$Fg0 DH}*tBmCef^:R8/:g">l4tG " 7ڠK|~c1#@xj.1 k3vL|B6F3 Ja?{\2PNzZd䜜U *ij-"qوR"c'[HBpw,A_Mٛ^_+=EĢ{ܜS <mxaU~azkEueNQ="uau#9;TL_g^[†-/ZErdv;80vM[Ɓo< 7[nW;& {
+hi=F3b_lRktqer̟vFtV &JνNf3[&1{"쑆Vu*`s* .&^EDIܑ,nx}]d¤"!튫e
+yQ6BRe-}yo^|Jt  "5Q1_ZM-ulsmN-l kh~
+q0VoeZ^h4,
+ ATꃭ몐b*rΪ(
+cg~hj/]8E ǀBPG&/;8Xm {]
+'<l
+ lZHNhmH w°F!-M޷߉5L8<B tzViB4%?Ԧm4IyZ$"0rVS@0aki
+`;#ő-q20Jz8&,|D?_{t%0WY)n1dJ&ch$v)Ovq:[ZvyYZ7{ ^ӗ_[J[> 7?)%W9v.՝'9YEQՇbm@Ӫb/-vǤ Z:::Y1#M8u"QUvQIG
+H]wkW=.08҄D3_);1UbSn{F3|Mpώ+UlIJʆDsYr# bV;Jyv8yV eub
+s,Xaeu)"#yz:{ ޭt+IA?fxr/\`MKROFvC?#;<8YRco I~a<RZ<}'4nFg.pW۶kdԈLR.R%et˺1ۨ~|2g=|gyzwm]
+` tJPKIȖq#ѐhpN$J^_ ֏~4R^ 됳GS:Iy7ю#{k[Ub$:"M];TZ$wӯ -MȒA|[ J"ZOS
+J -
+RȑW:98
+ GbYlqO)Z`HRlD4चh:,sq1@+ԑFD<m6f=QJA=HoV?cٮ8 KIjn.^ 4F>Ya9!ۊv :&TX)+p9x)9ۂ|sQ`E\~p.F04e
+P"C@@>du5:|iw-J[WͶ3G#'QbDj" i>$khŁF!6e+>E-FʱӯeZxS =rP 7^x!X` &<t[!;{dbۉD!@{7}sw# _6K{#-۔(ǻ~AȏԘ 8CeX!)A۷!DLMxqOo{wGP\j4Hs~k`WۭxLb
+<Hʨlan/j*MD"7~|gq
+:5R\qjzp-5: 5+ޙ1EO!f=?"GA ڵp>*q1.#%T}yHsV{8pqw!-lc[9vΰZK
+
+#a7% Qe~.xۖտӣ}݉Ojc|(SuXcGL*
+~m-Հ<*Vt5d Jntݛ.~Gr˨ܯ;on0AK7p86bTP}{3+&.nӷe,`.&K)Jb.w
+|{E}joY^s֩ĭ5tN#IOUŨbek$ <>>a\1i)<X'2OͧjB~X/rAx
+8F)Ju7f1^48SJzpVI7YP!jqi d4E[lLʠ]£XnEMOckQ_#<ld [&Z] :*b\W(0qϟh:|iYa8}k&7c̙I`}8#(2λ8ឤɹ,62h8
+%nu`uOMU꟮r"V#rudMhÈ Z7sL92AlN+!YJvi4F$H3_TBtH06#b-ٰ鼢T
+D1Jb"Ҳ& %n /˓7FV* wťĜ~/
+*q4ns#xSǟY:/BB0Z]eQuqBMNw5o}Rkq᝛zY m3>"Kh@m-$9gN/h:k/ GX*? x]srXbFmgr3#4.fO{iXv*6x6ڍ{Pl+,'J?QZ Α_Cyd
+s_hK^KĖ2Iy
+[ u<~0-8u4&gLV `<.-)x !6
+ĪR4Je<G6"bN4@o~sn4|5ԒϋZD|Y*Q Z>_$I
+4;WT9;Air(om9^Ix^mVg_b .H{͌(,a|MT%a,fNfvKendstream
+endobj
+4052 0 obj <<
+/Type /Font
+/Subtype /Type1
+/Encoding 7218 0 R
+/FirstChar 12
+/LastChar 124
+/Widths 7226 0 R
+/BaseFont /OUYGEX+CMBX10
+/FontDescriptor 4050 0 R
+>> endobj
+4050 0 obj <<
+/Ascent 694
+/CapHeight 686
+/Descent -194
+/FontName /OUYGEX+CMBX10
+/ItalicAngle 0
+/StemV 114
+/XHeight 444
+/FontBBox [-301 -250 1164 946]
+/Flags 4
+/CharSet (/fi/exclam/quotedblright/dollar/percent/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/A/B/C/D/E/F/H/I/K/L/M/N/O/P/R/S/T/U/V/W/X/bracketleft/bracketright/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/endash/emdash)
+/FontFile 4051 0 R
+>> endobj
+7226 0 obj
+[639 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 350 603 0 575 958 0 319 447 447 575 894 319 383 319 575 575 575 575 575 575 575 575 575 575 575 319 319 0 894 0 543 0 869 818 831 882 756 724 0 900 436 0 901 692 1092 900 864 786 0 863 639 800 885 869 1189 869 0 0 319 0 319 0 0 319 559 639 511 639 527 351 575 639 319 351 607 319 958 639 575 639 607 474 454 447 639 607 831 607 607 0 575 1150 ]
+endobj
+7227 0 obj <<
/Type /Encoding
/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/sterling/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/exclamdown/equal/questiondown/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef]
>> endobj
-3241 0 obj <<
-/Length1 2090
-/Length2 17727
+3364 0 obj <<
+/Length1 2084
+/Length2 17900
/Length3 532
-/Length 18922
-/Filter /FlateDecode
->>
-stream
-xڬeX\ͶpC x-8];k܂kp]wsv>?z̪9jV(Hl b6
-JI
-@/Mj
-Q]?`e-oeMş HJO hjk
-b!VH hg'
-sƳiCb{mPz^],ǝxqET
-h
-}"PwZ4ۢe=(U.%}bee}Kc&y\MCUPrB{?vdF_1S4j+wr vZ*H!X$ݭ'.DXᅌ *@F[#မ$?:}ɽh9=PUepjs)ʀclPon_Uu2FKgk
-~]S!wGxjF B*۬'O?ދigWAxrAb^-ih<DphXx͌!Ԇ^ʗ ha5ྨFP/~]|m4FBʬ)7LZxO~qu#`]Zw7 )9
-q^fC"be[ӊaL0 lKmHX#D8,]-r tBHm+n*~ע2{i_azڏN^k& =gtKt}R6mEμH2RE`ؾmVY
-eq]xmihboILOj
-2ukt^qIK#1X~ EoYP!Nӹ1^#@Z *?JPEBQ: vG/-g?zG k#熰-gٛ҂\~akKl>tGטs!Vw[<ܷgA41xvCj(1Yor>?5| >o-48[6EuU' As)4y6a/bJY&zR⤄ ͹S`YKn'x4XyAV]w<+X͓+֤< w{_H(~c+߁ArL~54E&6`>ڦ!= byuh ;NqF!^O*1*:4cՎuЭa' y}:~tʻw#N䍜TH`eIӴX̌83$.~
-ŚnYzO-| 0 ,QB~GaJqx?t!͒_Q|aR[wxk1%. >ym+>eߞ7l7ttC
-r$uN٧,G_(=,|s3%v9,-s4< 3Zs3횭 leПrƃ๦yĐ؃uЮIWdǭvB
-4mNV.t'eP|?鼙VQxdΐ!̿rBzq,>(vw.T}R&i,̈́:t(Tz5<,*G\S9xB)[@ZBT_,iv 3e̘F Ș6 p[PL4.vev vٍLUAl JD,|Zs:/as^)VD2+\pvM:Zh,| *_|:*-ܮd:Nƌ]Q.o·i}k"Zոo&"!6`IT
-rDO2HjXjɏ^yǣK^abo݃2Y
-o%XlfV'o+y^
-U~A˧mQ.*rє:26埸p_8Xg>a3}Ecb98Ww?^\{QKd|7Mer^q2#WLcn[(_# ̠hP5vmQdcNx/es<Ga >m},%tRlpoStw, P\rzգfޘrP~a藎ǷZl3`$/o#atg{BT* MɓEܡT0ƨ}4!3ցux.#'7Hչ x
-Qx2{Z^ρ@;ڰҒ 2w-S@&OȘmÌ
-YAִqz[fgh2-Wʼ8v~HJ\ mˆ1;dz()&iPqU9 ebޓpSc4ccs$;`^ )0p]%VkDwU4
-^ozvZ|>J{nDJ:N {}5G'|KuNum.[c>`$M237R)OB(gIýQ_슷!~!m񘻔y3sCkVV7pZb Yx^;Y40:[)蜬'c!~?}im<_\]e~zXX9Rbicc!I@|3x/R)0zluaP$16U~ٛ(٩1l~f_צ~aYnsv?nvr[&m~cW`OiA^l?fjˁw,>]+BJOΚ@"^Y@]Ő"е$e>g6*lN_90SC5aq^Xb ׅA/_W{xR]
-ƮX)o>kMْyǼwY+碘W|[9w6^~gIÂzV2Dsm{ĩ+ǧɨ,WSL $t{Anz<<z&PxApѣTq aN5NQGMO^cblE&)5Z3Gv0#?δI# c 8N
-0U Jjt>-C(T
-]2BB/w^lj>PoF>%getPϤ,΅^gŀ@٠hHC o.Xgѡ^ IڬKo=ݜtf(h/ˑDFT35hQK-UC; 9,g.5$8&3 c>`g0"udqXٴBNڕށ]ʃ~8mEoz#fC},Eo^ $
-j9n/])BcH<=@lt~b  {U|%S澉 +eE<ٳ.-/߁oz2+r0'#1)!iK4;nH^뛴]5IX?0Eide\V9elG[IW٨¤u |C"iKkF28ZC[lyt<޳82~5:{H~2Ԗ^fzolfB$~ڎlxL%"S.v7fM[8ʈVA1{"L~ VsEc^C&9IlG\&0`'94K巰;<Ia
-#g:C׀TD.ٖO# iBkn$\VHGk{2 1g
-<Y,ORe.ΖDUn}q"}qxؗsũ/&@4"y(c+3-7,5><6#Sp8c*}aO]k#>l@$jߟ]zXU"1^dޒZw V0ע ^BҕraD,` P7>r\EI^,J"zk6͎VYpjЯ h l͐,>(|U *mȊ?WK b^X wUGUOFo3H\]>}15n~uy-_ l ʍmE*~5 T$hF*9 ?3+Rg 6(;Q^ᗆ(=~ZGOhMD6iVcUQK/6:G+^Kyq"pa|5ʚqkOOb쾞dHnQAC)ݱŀ`P?Nb
-q7겓ňH99VKJ(.5޻+a}oo<ua 0 /{4Ks}0 ,3٤ n3jПԊ3L(JG{̩9srg¿ 8a
-& HrWx-G+ gQY?OowѶ:)|{}~bgt.U&Zvfĩ"< Ry~P֍~&Rh")1E|O:*AzE #Xd8_"h ;I a
-Hex-h2C,2=6 NpsdUcqf(JnqBqI +bHEolKb{EZH06$٨9RXx`icUiwIHIvق62ĴEayLa؟ !wf.!R 1ѩ?U8q lU{?
-_-akf|-[J.Jb z`P h
-hn1R mErȤ_+/KU|c2iqS-rrIÊܩvb EGok~;'J[ oFsBbX8à[W2\wUl<>p.S"gBns
-|z˄LM +ڟ
-UӎGҷTW}|b7F"m`y3pLN fqNަ̯d#.ef3Uw޵߃F]uCP(6^oR!pԕy
-!koi>$yl|MlV_7!Bi: KT9 fRYRt$]WҼ;pAw}YP :ui.r.L?V%(k"x>Q ضlU5Mȿ
-onʹ*~Jb
-*ȟm_-ejdD kp
-+͕fo+i甡;@n(T9TVy/uHF7jRcrEƐ?s:J],-"C8qc5#y)j[$wA㠖$oBX_%'`!3%D(^bp珉tsRMWqv?vX"''́/hR4=<LmqO(fD\t2Y_1XJI6 &F#f$ddͦ\QmĨKJ3+:#eQH u<xYF *
-ǰ~v/X
-P_xWE/x#G(g46⎫x'.S>X]i2KhMV49Km(B_92_smxHhyo4/ĝG̯ڝTƒ2B]dIol5犼غO;3+Qr(}| #79mk9Z%Rִ-(â)c(=*7 v1
-P~K/)y76X=\Y..W?KSsJR݄Фİv[8Dgr` x(0T<EF>&hQ7Gd l9D@ ;iU{MQ'_LU<pK+WM4fMUUM0@XmwDX*Òr-D]4c9.G]#:+:*aBNs7K{CQ'/?==F}r+_'YB8OG5#wlx݃'cR#|XTWt[qWS->YMq*fyz6
-R<G楤Tx!/
-{#[vKkGHxx 6~~֠'=bȃ#40,$)z=ލpK:3m
-kCq]~܅0)T[:oS팟 fr[{*t2Y?,-zpaV$'s7,P+GȝHm ^}Z+WyxE6DFroI9h?U0HLzmI@IN nhU_('RqJ]J@woe'EYv 5B?}`Ռ
-:чާKMЏ](\Չ'/Y!HbAX0,jo 7Q bOxյM
-c}R <죅Hi
-'ɿ'L{qaʺR,ceW6 =ߏLϪwGbo C!l36G_(~G(`54ECS&5{i!ʐoF|t&鶈S671 hd.DRփkQ$/z^6Xtg˦ 0' ;FO.\!I+}6D69qKm!(>;|J0޴^q񟫸ac!R68e<:&;[XGmM}YKMc%@+zjS7sL( 6 M^9*zrM7%:̹|&Ki
-U;b%IB׏O^xFd^Ly3{dv-g<(\1znQ /58!=^ݳ8&.jW F1"phdBkicC$, v& ZCMV`N3Kk{ްRArxהX[U;`&>25ݐ\u]1B4z?WTt}QɡO FJ˘tuHY]% +Յg0#0>ˁ_bZjj]${scl1\nM[`0G0\y"]b|aٔرI5I#%4튢Z)qۼrN3W-O&xVĔ Kvm`5B֛27ǕQ10o"}7b|3`ۥ.IEuu:B~fW x gn)rqĥF ;/*!!(籰X۱s2ժri\橊#4c-.Dl;8aw smC7M+Hb!X۳~ͦ<..ԾKjL>cF~LVה5cf
-)fCؗPE&ܵ.j9| yh:/*`):i; o?>gr;i1[io2Fku?x[׏EQ*A3k(P~ڣbtaڂ$s` PךTQ*J6@~7J[B C0mqP\!ԊQ
-3
-I96ܡf11oӏd] -dY#;mg1Q2ìr-
-1:%-U-LENIW-$Vͷם'l%
-SVF)eْǤ0 :۟Tt["t&o79Q^jqVxɄ$MhLH sbpd H.W\x=R!||ts[+\YWrK2DJ_23LC5Hp,U*v?%;D3sHP=ЅBw $ [,-UPiH"9(sβ2%V"ZG*``Gvњ}~&ꮤ<a
-?
-ϸor7Ds誥"YY%2~ıJX$Q.vw-𭶛BKsɬ Vnu^ȩvt;0|fs =\描q|Goah\IJYX䪡ˑmēMç]W~_@Iv(dC! {J|̬#q@.
-'Cۻqy4#dtT-g
-!l'|afj:$jeHlITk/UZV*jÏNpS ZHȠ]P]<LO%&5T3ڦfzP 5 RXJ¤X"& CSz1CKL0.pBMUX&l+1g)z q;F +N#ާlE9NUgÞK5ɳ* @q*~/\ ;r T-/ro<ʄ{^(G0qs)WqKLдBppg>x2dTw:+{\Fqs|XF`qiTpݵE+8
-
-n0IԀ,]*!f
-AfkՓ{\7cMpj0Q֨{^&Q٩d)YtDQ0|jQg%s^M<55Hmȱ]CH>gTԊDFJ֪),6[*3.)]\ijgV@>BjM@[ˌE4@ܴZ[Dh-B= DhZ o*ˠIwi#;S}&sӇw'AI9OMn%ϰxJ6zͮKף>
-%<猍+ o{!MVbhzC8_0>0*+̑t@KUKW+MPJ}v}5}i!M]~߉HJ# _4Ma]EgNZk@njUѩ23,AU殀à :gۺL1
-?49Fdkn&SvEPrК?7He3D4zq
-"kN}z Z7UΠ&Mc|dž=G#[ƘSTD0 olo,Xxv>>jze8Mj 929g~YUMEЙKr)Q~˗B|?H^J.:tǠvע~7<ٷ 3u:]fޜzKDF3m}n?(#;-84y$Fq7^#2 <eR½濎/vv=; rq|I{,.~'.tnZ/h~>vf$&E|w0q??fP6A,5`b`UO@^2y$0Z! @Z6%lT3Y8ݯ ]srcs$j:zCzs G4c*Ɗr^E&O,~G6 $1 [kK$] K6?R_ cC VzgNSſz&l~me.G߳=Fi]dUIhy|hhٟh=Ё$c{ޮN7$]ryRzFreH,)6d9i{sȚ̲@Zύq(I?P)ER{ET@tZ~8yRZuAp-317HWVr[QGh{jg$o1iqi0m3e#C,XEt^_8%
-dwL<!xw8b[߱I+a{£r!1G [t84"ΘmIxŸ@ܶ9PJr,R!@YQl'^c<Glw[+_gJgTk)|yhAyBM_ð$bUW?Ep>gV4^1R1h; zk~IifdaڪR>BޓRP뉼67
- X_;No 
-x Bek\JwP9m_'V݁FyN&R;p{\?r94֗Ґ|3 
+/Length 19094
+/Filter /FlateDecode
+>>
+stream
+xڬc|]ݺIcƶF+m6il۶ilXz9g{>c$UT23:330
+4a@`fX;f8Iٚ8'lbM@G'ӿ4 I;[k Q rCw7gUi7v6.@G j
+&.(!!!h!hA.bhhlt nq5g's!P"? /gv_Jhfn׍_r AR!U mB_ ٟ!/Y9 +d\B_W/Yy +{ ۹{3N= 9
+얋qto1ߖX!qGAΧ3Qn#0gX,kfsK62.(-#s8@#!=>Pmtc ؘPU#M
+Lf r B}{[0#xevGUK۫#?1|gLZUJLJ*]A11bŦ)Jaf\U}ˢW)5a^ϸ>_Jxlʼ]`,Y|r6~(_6^3b:ݑ<ĠO؅jjF[y PSQQՠ|8Z~}&Cx5l%KAJ+x>)UV 9W-Ob9$^_3z3
+#v46 ^;b[SpҪmՌ?c@_.q߼,P?I
+az6B<b3Olq'ќȯbdG=6S&p(aC20{Ddu+Z-So%mpKڶS.;&鏇 'oGtdC@x=rxbsA$r0K}@T%$1fEL763]TfViDz2$jI\y02tTTCr5AD~m3"ꎠ $y8ssGg&vW̃l; V5lˌ7u#٭{61:*
+alA#BVZXyI +$A0GCd VojXu0
+;]Fwpu{F.5Qbmo̩+CR=<HdaJ=>$%Oy=K0I,1˝_%a*Bn>t7!S(&^S~ct~w#) ;}혡,?i5s`2ih:q9?R^eDoڢo2qF Yʜ!6gn}1,8=,bs;v>,-s "1 'V
+Woz' {Q՜7_)gC8뉡=
+ZAO}^2QDf2hB<7bTrR|=n]/wI'Jf vv'W?nxJ5Wds[+VZD(]?rH9[h-} ^|VQTjh>Iƌ\[S8dŏs[<W<ta:;H XƴhP*tZfẁ kf3&=NC/㶎ݧ(U{T<B
+\zR/+<RB/sY 8Pb=Lln^&/0KF@2' d&wI&ٖ77ĩnٵ1*É>irWGA#]':<D|MC4^洓ߨTKplaܿ֨ Y?3HlCOo=bWMŃÃ6次ak@ 0ÄgP@g[r#R'xu̐nc+䬼bF:%ѵ2]$NN]#MMn,E<^^lw@a | 7(iѽ^(4I[sׁ5֌MƇb=gj[/Í#UqaFJ)(3~F՞R[2_V餉6MU)u0F*|j6ivygio%|Es
+{'پIKɏ]qRl'}s
+rNZty9j*.fu'ݢUt< 2:TDޫgc !Dje$Q҃j&GbGy&3&mcVvJ`*bsN9@E(DSӪi7f
+
+f'qܗF6@}ݍiMADGo"{_QH]8D/%Ӣw ))R0',l^xawV!$^v`O'5^xWin|[!y -a ?}gg mxB;&k@UxKj$cM, U:lƊa)BO/~|hA;/fi>^Ol(\ɧ H
+B,׸8$;Qz):M*mb?(U
+=ȏs]2Q"H$.S"ƇLBRdqMJkF5ڧΓP7ayqqLp6y@AzPx}j'^bӅ](7Qh
+{@JdVK;0wcg4,P^~=9T_4y]6
+R= JWc|p(
+Zjt%qPM'9 ?钘p
+= rCB窷 ]\
+cQѮ~OKX6+pFQǏ}CƠKgk k6llp'?
+gFİ}M+YnW,ēNֵA#ڱ[1ð^1X,.:XP(+DLNK>26Bd񫆄O1Y:zfaJڲW ґT'ݕ+xzU`"3u[ug4),U..XaR^ /
+c ;R ߷1caeu[4e9NPF5|!{}$!#⻓"ſ/q'¢y;*RC#\;MM#8~Z=4eBR(XD=Ga{o~G6aRys<p+Y"'` MBXC-?HZOrƴ=N-ryAYnƲeP>ej
+B~+i w5 ikä!VJȆ惡Edgֱs6+MGtJ$swװբxȹ:M냞h8-۷H&\1>1x1'pKӍ(u<$FM-pWG!8儈UUƕx_vƑeK.̲eb/tlrBŻG3(D+P>y
+OڋJa(I0td%D'FU턍`'q
+5]rFOg/ef~ieuSF̨[k d')S89n \bVn}'־o{jB> OsU¿{tEȸ
+lBEYgr 3 CQ'ݚ?dg oe) ^$!VS^81٧0.[ssEJNJ;NW}GDj`*gZƀP~bKIx\ ަDUf۔z~]&킆: ůDro_,6-\iN}G:8ʣZPhRD/w_BuRphZ9KaAF[][ʨӒڹQiGw<FHlrWhmJB_aR-H2DyOf"
+l[e4
+YIS-]j^xaP_
+PT(D8a 9
+/"
+J7jDZ{PPHxZc?&7i6 D"
+¤ui~tV(z{q\!UmyXXY\<hmkȓ<"An;V`Q=[z+w{uap1 R` /RcKvF\4tr5ۃnXVbꥅv@4k@->/ CQeLKzCڔ2BѦX4!9!&-@Y)wrpgV}K1pc;WF²t/^(=?8lg{̻ZP|}pG+!z^D1}KPlNO.9fBYiG7x/GpD/қOF!eO9|N7CJDTtTiX.(j]8?޹2nyw#g#kM Q8@N{Ew~̞b9yùʡ 5nUx״ eꭗ ؠButη8H<6-QS>C_$H":@giˑ$wG(^H\gٷݘ Jf~tq%x9ym|b:ƆTB$\|w:?+_0pR4g!N $^^)^UjX;y6[0_,;vGʅ}YTu'v+LC!?(o#,^8a?cG}CDqv>T,*髆0-?X<`j#j{|x!Wqikצl9S=Q
+~)yUCI?%>ϿJɑ\Qy'*C5S5ɱ kK~k }SMgo4Z*1
+Nj}߰DƝә d-ЋTS6&EZrѰۣmːP1
+>!7+q0U܍kL
+JmiL_\Hq+*I߸a&r^wj!>x*fddwL7v$ў.|tU[ǯW8`NÉBo1<h&E+V)/3zζOq])bg*>b{`4Tyyx|iY}wN?c{BW
+|V.UǁQ 5qvwJ6Dͤݘ)Sb%hhNr:XYqc Utmh(+e}_i
+('c"}-ȧϲיqVJ?f#ݴ[X882'vꡦI T^YyZW g\ HfR`{{2P~ =a qL\`R,PngLϷDu)d(Yo֠Uu9:$O93mç#9Qg o}z8$Kc4`Oi`Nti}Ag>!(V"F%>EazLMzG^CzV?D3 mlS@WfD\sۉ
+(zG8@8ruIgCV =a954\4 Vdsٜ{G+5 ݨzƱwǸ!OBZR_ǡ cZZ :d |g-K_U#Y\=_T_
+I(rlf?
+}S^.%~7$Ab5 4@3g@M9B(I1A26e޽+9 x(W ~k7<0-0'>%s!ɀo8xs VrM! ֤u*nN%!1bGɗS;dU DTLjXsSї ?F|fxy_>*x4
+dLB_՘ qqZ'uɐC9U֩,Vjee
+/.GMx^TO|?"'=!a=Tt<-ש{;}8wZc4 wON lș&E>?jҪj^Ǡv(G犨OYnibr%4tc)~ۭ^˼o$/M|Y5\aTǟrVn
+]함( Qy~AH\380P<EJ'JJYys$n~\뇡.֭ϱl\fd5I8kEJ%Yb> Eb7UDt^W+Re $v,]0Ylۓ I9VSG.`ӉQR6D|Y\Iߒʲi=^Mizv??,f@eP58F
+,PCVhvē2aR[5
+!Cx=nmn~Ȓ9^k_ JTAFㄋ}5;K[5 ݼ*A2 Ēto~)Ɠzhj6=K19*O]1odJY]!k[ҟ'_Nrbh5DMˬ3=>M'cVB[:?9ugrZC&Mƹ{b}4r=>3lh94'Z9إb%9o㎳5iͫ\s"xqAai+6 *GiOo(,L奷DRCh7|0ĂMVCMQyOk {8`0B2~´&? )D{1fwܿI%c\!+ deES\Ա5\gYˆ׹׊f\/ QEyBi^^];(;߷F,潀 m%kbxn/CqLǪ-\V[4 }gH:}"nol׳+L5 O8n<N=Ѿ,4sIʊDȜ0q_L=-n\5V} [HєdGꛮ(
+r0Bn==bQ
+4 D>/wAZcOj2W6v54SR}`E^Q|aypb6;D;b3 H4yHŸ rT~E^qz ZJhz&uF\E4L7Ř,v6~!(V\pή(
+T<?t9%aMV
+No^r}bwVSє{&-߻q{beq6VdQ} %fAn6-YfS%z-)-KLځr:GD.ĜYnt6*06E?qwO%n
+̡)zO9o@*ŪFS>5Е4uu Wj
+󈌯Z0B7gi!wֹjmv =ĜեD Ӹu"u6s#)tPO但h9/I
+=w?KNI+,\s"%!]8fyD^]i.;̡I.ĴWVesoˊq|TK57K:hƙ'^88A_W > Q&GtZcz,kE2yēфH<.lZ_z;~@'1ђ"#kˉ!gRҏe{}q:,>K6TU r˅T;S]
+;I~Ng|
+rC]Ɂ,e6F|#-Ys
+v_/ UU5`ߕrQ:UX ;:Lm0Cm Px
+<H[` ޖ"-4vR|exBgDee*
+)_ېAn&^ѵ9'[yڱhb-lEoiM?<P)ljХ38Q?eF4ߞDkJo'쓥v.k\*;l 㐏Av&{0fcc ˬ/smum۲7YEZVQ836!cw@i>x~A~.ag}W!cvhW1;>@{?fl$]zf}\Y6$wq%xvJ]XoΤJ
+3~/lrv$PV_;oRPk>d3
+9K' /pendstream
endobj
-3242 0 obj <<
+3365 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6709 0 R
+/Encoding 7227 0 R
/FirstChar 11
-/LastChar 123
-/Widths 6710 0 R
-/BaseFont /FXDGPM+CMTI10
-/FontDescriptor 3240 0 R
+/LastChar 122
+/Widths 7228 0 R
+/BaseFont /PDNHJW+CMTI10
+/FontDescriptor 3363 0 R
>> endobj
-3240 0 obj <<
+3363 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /FXDGPM+CMTI10
+/FontName /PDNHJW+CMTI10
/ItalicAngle -14
/StemV 68
/XHeight 431
/FontBBox [-163 -250 1146 969]
/Flags 4
-/CharSet (/ff/fi/ffi/exclam/quotedblright/percent/ampersand/quoteright/parenleft/parenright/asterisk/comma/hyphen/period/slash/zero/one/two/three/four/five/six/eight/nine/colon/semicolon/equal/question/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash)
-/FontFile 3241 0 R
+/CharSet (/ff/fi/ffi/exclam/quotedblright/percent/ampersand/quoteright/parenleft/parenright/asterisk/comma/hyphen/period/slash/zero/one/two/three/four/five/six/eight/nine/colon/semicolon/equal/question/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z)
+/FontFile 3364 0 R
>> endobj
-6710 0 obj
-[613 562 0 882 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 307 514 0 0 818 767 307 409 409 511 0 307 358 307 511 511 511 511 511 511 511 511 0 511 511 307 307 0 767 0 511 0 743 704 716 755 678 653 774 743 386 525 769 627 897 743 767 678 0 729 562 716 743 743 999 743 743 613 307 0 307 0 0 0 511 460 460 511 460 307 460 511 307 307 460 256 818 562 511 511 460 422 409 332 537 460 664 464 486 409 511 ]
+7228 0 obj
+[613 562 0 882 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 307 514 0 0 818 767 307 409 409 511 0 307 358 307 511 511 511 511 511 511 511 511 0 511 511 307 307 0 767 0 511 0 743 704 716 755 678 653 774 743 386 525 769 627 897 743 767 678 767 729 562 716 743 743 999 743 743 613 307 0 307 0 0 0 511 460 460 511 460 307 460 511 307 307 460 256 818 562 511 511 460 422 409 332 537 460 664 464 486 409 ]
endobj
-3111 0 obj <<
-/Length1 1411
-/Length2 8632
+3229 0 obj <<
+/Length1 1429
+/Length2 8725
/Length3 532
-/Length 9503
-/Filter /FlateDecode
->>
-stream
-xU\ڲq
- }9n9
-k _*#E[ LbgI`7#L= o v
-g+<L]`JSW~&ʿL0=gi<eSz&3u L0ul< ;e]?&/IRÛ N.X}B-(,/ (vv>fNN``Wlk0l0go&l9L'dFgѮt!U! M09~5/H
-hnNYg[
-Qnb2XZ}BKÌH{V,c D*!Φ<3zXlapdP-&1Π-#'/̌"J_ܥ~9үD[3H
-֌| 4l18;uv2|2_
-{l  %.
-Ygxv>hr[lb=
-V[xD6,F< 2?FZ4 U_z|uygTW\N =Q<gF OXlFܔF?ha֢ & JmBhk
-U@(>KNʛ`.>U
-QBעtz^U$`ڵ!Q`-cnl|>6An>m;~)s/tP}xU)Dm㠷ԡ2ޓDQQoC\&CUќ%E9|y}ʡ50V]P/ˑ[3+7QNF& SU8Kpc%rɓ*UЗi3.{aލ-Ĭ2ěsv03f|M^0nu-y=#Tp+)J *T -6#;(S1}j7#!=$FS
-EZD0Ѱ6]R}?IDבb&FNF7[4ҭ Ң@Gmq[~ĥm\xka)
-^ojc(xGbէϜ+XdcpD)! ݲUIBC D@U*/ڢd2I/%>rj WTzo/}P;YՙH:^]p.eQ '"
-yɸIؕ^Uc+k(0MQTKęUP.]
-.ٱ9fĶlYmmF#TlTY-8l#3u餼W;;L-h|ipxDgB /_m}'ys? xl]L0A}, ܱ8 \X܍WXh8!LPcs}# %(mCJ$ m$R,f(E3TL9p+êrPm7]EG[VR&w46/X }s%2sfŜ~߽'E{ ~bJvNA 7%H,t|u~6뤈k='Ӿr^aMizHf9's'8yn h!pyK+Z {*WtIKL=eEΕ3?iVZ
-i,êW<5$nt>E+Z<Uh0j0d9SNINPHpǴz(r{ܳ2FoBBFlJ%'IDѯ`4툩g"gG13WȢ74q_4x)̹d/f2vNyph8ڍR+j 
-Q&<B7;BT?a?:g~dU|Ƶ8}4CًVTo|; ?zF!׿Wcu4mP9<߽.iL4۩J3-߂nv9W-P׎s{}@]Xaý`VYuA[&8\'}"Y~;a-< qS߉eTj0eX5lI*l[e]ٳ!l2c7b03p
-w`~vy@lwG{ mp A^3(`VjѼ3g:@b@R'elz 'Rw]4΂D.=29!̲5>WƓS7DnCυo&@cJLǻOO_ \S
-p~ǥmr)J2Ǻߎ^槤.{~F= qTq]5jgxa6י{']j[>1O
-VWuxQ`֦eM_ayz{婲~e㗱G
-KP/˧uX_sҊXQLsi8s84q_2ɷ "kCT% df|[t#jTjR7^\'`n' 8y\㐅xEH~)y {h\nٯ2bF
-k;=(nx?WXSG.YM|`)f2e0Ua֐'|kœ MV̌ТhK8!gʏa7UC%cP00("F,EJ+0eb](OĴZ)+jpmb,#`kfU#ա+T W7ɱKw;^puҿD pwt?DHпn(+55Xv9>+6BZ!Qֶ@Ku0j<šabN4ׯ鿮̢\G:(}9bA5$Q+)3uVu!1
-χ#ўI#iw;~iI=<ܮ%XGE*j7=je :+-RHsȡZ,2^W`SAꁣ\A+S^al&l~xUj2$ oh~@[R`B"mLw3yzzB=)cgґ/jz_#L>xX^K1Jg%ϝpͩb 9gZ5>/<Jf$ 8*Y[ 4Ks-MlB1\5*^ԥ7AQAJW)]/bdYX2j>iJ
-M5"ha׀3Vh>RN@z}5ӸN
-F9OmN
-ҚtTk9aho ?n+~!'nJ1;tlud;L˵6ӯB|l[ [
-P
-I ?>&蕜X |d#V[8*Mfe(ҝQ퇚/aY%bu*U#ߖhŜ+cOjSD{tJRټPN 7}u6ƈ vU`A(w382sv^}YUp9i!;m#̞lda머dl>˻ $\8R>.78uEngC:D2+( /44II}_\KhE D65]ⲯ[с $%l:[9xM6ypAi^-n]$dz- %Xɢ'hvͪ_a69kVwݫ(~R_52s&8Qu06Cp•8{F2v)(UaTSx++"5 ܡz﫭{:q"DҷoU%,.Z8 Rq,|X׵w
-p܎"s&ykp@Z3Yf}ѹ w%Jy7;WCXvZۨbq?/xXFè>}\h-E}}RN@s'M_S|x
-dž5p>(7:dN6d $|Qxآ4=HtW42 sB-wkѩ,KIP*2^WL.FOC|8|IZGq7;fy*_;!ҼW?RNc`=ƒ4b٠-z 6G۾JG.GodYC~&g7_7NbT<l[6-սa>b^.#5/ѡ nxƘTe15̀ z*׼!Ve_/wjǾ٘Nv+G4G84,E/~ӯ'u6yTeMatU_Js}>T<koX?Fپ4=IWV]ʡN-nFT6g\p;O-;8׊+M+N^4HOM_/:u==:z6j f,/Mg|Rsa! U)"0a̯n"E!RbȌtNn27EN.b4^j!Z3[\ٴZ>Gܢ rƯ+(E/<ѕB%J U>fn6&Y Y֑1jx!FTTt.#0~s\(hQ˨ |[6dc ^1]$pGzWb/nQ4ڥelQMo>'ंϧ r L_Y($C8iʤ.Yzp0ْVdnNacȾ M{Bc򄢔!y*SSܳצ3؎ fnVt\#{KVD#*/rT .d=#"~UDE:5ѮлX0vD<]íDGZo%ΞBy=Ozأ6~ c\ļU)_35;"˸%Byb{< Ң!Mf7=2ul&
-eZ.7%@
-IRamj=BrK4-{JQMt)lӾuW8Wԝ}_Hu›nWSᛱBG1==nZ d9EVDNhL<osHvZ~*rmD%c 0IwMuG]9m#04~-J[ƢFï*Cm$G^"^.CWvr ^qPӉI8J/I!gpX{3:`}\͓j}m)YF2qǂ̲~:E
-*!9uZ?pqmoaѝTGp
-g抈4e'qx? YRi٤InᆱzS|NZMWbu "1v?N[B3hU>dc ?!R~$L3eitɪY][KE9CZ qJwrg۠S`+>+cJw2 ~?21egn P.F꼙QE{@#ِ
-ն)o"%,oPP㢹?XZi_ y|3<3ejoPߒ:OIPgs6;uuSȇH|ʞbn 6; g
-\䈋l>}<G&
-)j=SXֳη?Ҷ>$. nŒ.CH_ĆP"ZM 3Gl- _d'x`&7
-kI%_ph:pFGK4x>2~0Ol`f 9ہl0#endstream
+/Length 9604
+/Filter /FlateDecode
+>>
+stream
+xU\ڲ<$48AkiONpww !Þsg7/U߷jՔ*BF`8ڞS
+= Y99f- M,A
+h|Z}yy~CFUA0}1͊0dJ9V
+~WaEáHRA<1<уK@J ܙ#ٴ?'\qlE(re?
+zU03xn1:`D$ R];
+nO"- gͣ+90?JC~-~v8juVŪ7yN/'c=ö7WGrXrso\އBeL %q}}\W;I 2F<86:Wx:ƫ[[-\Sz?+@ԟ^LnVLfo{zn
+8*b)J + [EYV*:uDttzy3W]U,z}AFemȐNrC >gR9nPDL\CE&T{/WGcbzB %ݑDMh/ձ_/^K8^K-ԼcU9Y7j˧dRb#RΛzgEi?9 T#ӵ"Ne 4`o1t}-{8} ݇3/𚎍zi K6GRyip&s0̥|q3]AQ`p*r~>k2jcZ#Շ,L k^W ESbA#vrw6ת밉L]$7lߊ`tᮤhaװw6`xvO_o|>s"<-T%䝜ϴQ3u#Y!nm2?!%k9(.;%R ['AA>h0)GBUYk/ j36%ޚJ\(./'4ټF &p -u6Sg۶P/\§Hdp#iÉCGZ(cH`L"pG%H؄r#b -a})ecrvUUv͚|)( bk.ԛB?-#ՄC.̣v7Xwn$ UᬏZ!B3ǴPxfuS<ҏ+RzM? }|
+`CP㏤{>׏2$c!d.Ha8&u&a!. ۍ;e벺aدDfa4Czx5*Zol]汤|a
+&ζ#]RatrQih)>A `r*CDf
+Co+h$wqchSj9ϷL}F zQ[kO:Y$7Q';7$
++Y4Җ<ҽ>r io,+slFHXrK$!uBBA>!&m Kꓙo:ַ {#R-focܮ[SZ(_B~j;G5۵/6CvSz@
+n2] Ju)$<ķN".<ZKD']]Paȣ0t?t3bFa`oPҲ49E}ξcW+:~C> DytWh[-6p"D@[]VQdB!S [)]Am'\n<<i!Ǎ{7#Hy\`Qr)] #um}D|UTf(I\ǚ I
+pD;ck л-b<z,mmzӌ,'F"$(a)ZHNQ>92<st_ ҈!0QOj_p.[uJ?cŕ2u>)}IP%)ܫ
+x=%Q$c×nAOH46ʲ*DzDhk5ЩƃU PFC`\t@QoYԫ$w+$3ʰgT&5p{C -ouܰ +EBwӣJ2WyHipWcw$B}Mʘs5x #ȭ]}0rvIo6ۏˏ)mNP>,õWrwu$C+]N>9s'ry+5ڌKeLF:
+Kj<f`!^ΙNU0Btj94[h&93X#OKc:&83aϷSǾs,YJe MF4Me7W9KS}(7x e{YX=01yȚΏRTE:
+6cDi<ddSTDhjqF[StH3.o?edݥ>aޙ=-W.\ӳ6RRXKj4"h=_PAmk
+r:ز<IlxUZH7 @B?ᶋxE1kq1K:AM?)}#rP$UعlS`OEr~M$ЬÆtl YaS0>֐ /e6&)IIURei tGi[Z:"öO
+'ǃ=1N/96;ƏfOd&ӽE pՈNIrhU$w~n3G^>ږ²qeaOPv#!*+.bt˔mmCξ;yBj/ϾE71T~HwdrNKe,6jz$~RE*c{¯>/~aVmxȢ:?IbG G(_PDd)ߖEN(Zd[Y:NieH*@gf[g֧i`ZlocSGr^
+et
+Ȍ
+R(:Ophp#rOۧRD@m*dOĢtv1^M@W'n9Fw~{izC7:xg&fCMyFG}[&G{SZ%HEYx=;5ja7LN7KG~Nj R _!glae拷>
+RR&ti[:YV6?JLz%?-N\}KVBo+orUt QMRτR7HJ.qa{yT|o>HIiL>}wu} {E~H`>7<Rs( (!; ZTX߯'N슠>d3n㽺l5Ŧmt3\Ǻb"V3D|a%=@Rblzt w_Dn\>ӽwBDV ̏4MtVQ\۱c3D;x,vAguw6&ENeNst;Q1ؤubWbM?$A)欳[ z͵iEu-$) iր=9c#=
+_i5-<t GSfpi VפLy2Ca:܃`JJVyD|`uZ@R٫)%Fv^X89Q{e) 3VT
+T Ӌ= o=L\o[Nl:XR}nEZzĵV4?ey6Qq9bn{!NFnvj-eqGOj?89{NMs7ܥ ~lb{Bݦhw +J 31nƋt,64Lx0^3vgAŒ}
+դ^dGzȮ(ƚ=:Un/# _&=+Ͼe-XW
+:֛؝քƃ=] LFċ8/6>Z>d`
+F<gܞhtGYӜb!ѝFV#j(9[zuSsFV'>]j'S"r-Ԍg JSk(@4K
+VQmw43c8/ƊVߖF$P{U|lnំGyMa[%#R2nw6iʢ}LPhUqДn=5@c+ScSW7kU?TjͶ[}ȱ@/=_dű g\Ǒn$St`cce+}zW7ۤS30̰lZ
+Sc)(?œ, EEMs#0,L:42mAfεO>Qh)AطYQnidM"A#!FR3kRJo뷷LOp}l6'ZTj >IbّDE7;QJ=1£>MX<y9Gie?L!=1AI곀5AQүԥ/YeJx
+=?JdQG?:kTܜQ䢄Y ͼg 𭋃X(fĬc$֟!de_iiSEK?W3~RzrkgA<F W<e汁 Ķ2E^*v'$StՓ*ubfM{tX2{Χt2Tx-8J3͕}s1չɱ|7o +mIV:a/VqvyiNW`ţre!S|6-)h>Qp4tv~ |Бٙ:/Պp/KuDlvO5j}[UP#ilBr|4^VeIjOo#n9 Ѧz9M[~"<(_5SX"}ׇKۉVoL<3Id|#9s mZU'Bm|uOa:a^9B-WWL>$eګɚM_N{ywQ`Ym44Y,'-̻3,Dr~Qo,GbFYWHA
+mQG20ī [o3PQDT>o&Yp:΍sl5f0RZc{K̜a  GSGoz'S!:2Qtp9#(6e>[aP6RtkϚq!\lB1z0Gj4iik1˦CD
+?-i: ge~5eJޚz*|ss^~VVԿrQ67|P 62GLE3A0w?3bMĤ^k!5wh:
+w"t; kLq:Sql]W㯂QD㓓ܬٟdhn|'nPE_N.k;m5yϲ^Fqk!!#.UX';iFÕe2sm i],u"<Cծ(ҠLۥ~l{XwJnj}Fs%Y]l(?M=NIpbjwUR$3~=.5oFB؏ JW;CMGm"/8nk}wV5U)k+S< %W.+X1է,:5oXtnp=H}IBzsd@/:{ſD6'~08
+5I9Q<ޞ7lNq`TR4lncva<o
endobj
-3112 0 obj <<
+3230 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6699 0 R
+/Encoding 7218 0 R
/FirstChar 36
/LastChar 116
-/Widths 6711 0 R
-/BaseFont /PHNWOU+CMSL10
-/FontDescriptor 3110 0 R
+/Widths 7229 0 R
+/BaseFont /ICGJSP+CMSL10
+/FontDescriptor 3228 0 R
>> endobj
-3110 0 obj <<
+3228 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /PHNWOU+CMSL10
+/FontName /ICGJSP+CMSL10
/ItalicAngle -9
/StemV 79
/XHeight 431
/FontBBox [-62 -250 1123 750]
/Flags 4
-/CharSet (/dollar/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/R/S/T/U/V/W/X/Y/e/n/o/s/t)
-/FontFile 3111 0 R
+/CharSet (/dollar/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/R/S/T/U/V/W/X/Y/e/n/o/s/t)
+/FontFile 3229 0 R
>> endobj
-6711 0 obj
-[500 0 0 0 0 0 0 0 278 333 278 500 500 500 500 500 500 500 500 500 500 500 0 0 0 0 0 0 0 750 708 722 764 681 653 785 750 361 0 778 625 917 750 778 681 0 736 556 722 750 750 1028 750 750 0 0 0 0 0 0 0 0 0 0 0 444 0 0 0 0 0 0 0 0 556 500 0 0 0 394 389 ]
+7229 0 obj
+[500 0 0 0 0 0 0 0 278 333 278 500 500 500 500 500 500 500 500 500 500 500 278 0 0 0 0 0 0 750 708 722 764 681 653 785 750 361 0 778 625 917 750 778 681 0 736 556 722 750 750 1028 750 750 0 0 0 0 0 0 0 0 0 0 0 444 0 0 0 0 0 0 0 0 556 500 0 0 0 394 389 ]
endobj
-2897 0 obj <<
+3000 0 obj <<
/Length1 793
/Length2 1151
/Length3 532
-/Length 1728
+/Length 1727
/Filter /FlateDecode
>>
stream
-xRiTS2j=,y11
-Q7^@R*ʲ.EEXWCVE]ҟzog|g"d mC0`p!J%6 l6F a9`h#xUZ5z6_8"G}" #
-9
-rBk
-0z&` ΀LbR8
-lSš$A࿃!mT&gǔL: EBVRXk0LjoȚ^<DVk&O9\30Mq GScw0h5ӳBF"4U gd :@
-( x
-Qhҿ)ȵb_;#(OT#&MH`3lI$SҴfbTA
-<o qB@6 (
+xRiTS2j=,4#P
+##0͞ǔIqå~{JL)qӨ!">0pA:J1$uPdN&Ջ(6x<1{{ؿ LO`T+2o sIĐ ZXo7Uj ɡl{iJSj%UG~nP5?+ }SLAcour'@98RY[{S=N9뺕Jp7^>Ngr,%^N!xn47~SW&z[%‚28:U?e)TB.9ZTy xץ$Ư)Ĺ.wKɻܬhiȼʚyoH5o]ۢ.W:w|{k^2Xc{.<P\,O1Ρ[_Pq,/hߟ<*19N7|j4{?ɸ;^^>|Ŗޤ37=.6
+r͛`l
+Z48g8;Mug3c t88|kAy);Y#:V=a~ΒPD&sޔc5a54GY{
+r3>7}*#
+A[ƧK.>"
+ßW&X3-yg>^O~wxjî\`:Ȧg@HO|ZzHO^g-}"|7~-._٫" 4#߲5WjjR"l9~+}S C/OTG=Oz+G+E|b飏OM
+wB*׎T8^L%{'ߓ4Wuh*gW dm9s
+7Y!VIáo,ۮ9^ p7G ugGb:r_Ao
+׍Յ츘~[selT`eY!ȡQX_BeGQh QlyŐ.܃̢y3ӣ%/G uaN J$ߕf>=렑Eϔ=7{O{I.wofvMեyekֽbw誝v1ūK'r ̀-xF6VN4aubCǵHy}j,ndۯmPh5Wb?&Z00z^Ғp;/L lB\͟cZ$#Pn. OP qH kendstream
endobj
-2898 0 obj <<
+3001 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6697 0 R
+/Encoding 7214 0 R
/FirstChar 60
/LastChar 62
-/Widths 6712 0 R
-/BaseFont /QDQOEA+CMMI10
-/FontDescriptor 2896 0 R
+/Widths 7230 0 R
+/BaseFont /KPFGKC+CMMI10
+/FontDescriptor 2999 0 R
>> endobj
-2896 0 obj <<
+2999 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /QDQOEA+CMMI10
+/FontName /KPFGKC+CMMI10
/ItalicAngle -14
/StemV 72
/XHeight 431
/FontBBox [-32 -250 1048 750]
/Flags 4
/CharSet (/less/greater)
-/FontFile 2897 0 R
+/FontFile 3000 0 R
>> endobj
-6712 0 obj
+7230 0 obj
[778 0 778 ]
endobj
-6713 0 obj <<
+7231 0 obj <<
/Type /Encoding
/Differences [ 0 /minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/arrowright/arrowup/arrowdown/arrowboth/arrownortheast/arrowsoutheast/similarequal/arrowdblleft/arrowdblright/arrowdblup/arrowdbldown/arrowdblboth/arrownorthwest/arrowsouthwest/proportional/prime/infinity/element/owner/triangle/triangleinv/negationslash/mapsto/universal/existential/logicalnot/emptyset/Rfractur/Ifractur/latticetop/perpendicular/aleph/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/union/intersection/unionmulti/logicaland/logicalor/turnstileleft/turnstileright/floorleft/floorright/ceilingleft/ceilingright/braceleft/braceright/angbracketleft/angbracketright/bar/bardbl/arrowbothv/arrowdblbothv/backslash/wreathproduct/radical/coproduct/nabla/integral/unionsq/intersectionsq/subsetsqequal/supersetsqequal/section/dagger/daggerdbl/paragraph/club/diamond/heart/spade/arrowleft 129/.notdef 161/minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus 171/.notdef 173/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/spade 197/.notdef]
>> endobj
-2894 0 obj <<
+2997 0 obj <<
/Length1 842
/Length2 1048
/Length3 532
@@ -31677,137 +34911,41 @@ endobj
/Filter /FlateDecode
>>
stream
-xRkXgu*XE@hPB bm-;$0`2
-lL
-߼6?:0l\"]$@?kJI@ Ă "R﫯݋.ǥ 
-~6-jx찅 SHgSLIeE=25Y4ۺ{y,C/k& sGٌo7_`Zbmwi9ۓhokŽU^KWͦIN !yZe௓׶1ٟdC4پE+6&'ȱ 3^\3v-), 6tֹ|{ݡ[]bD 89t}&M\+[B>JcF፛fN캯}j\P\y* &1eWHs :.ziɆ-{yǾ T&B/a6D0Dӷ|W4;#fZ}zAr흥q))r'\*v!/#t>Ycrzt-|'{;Ff\ywC2,H]gvUK'u7MG.WxpkV1smkv+NHuN|n0~<Ukq -7Dd?zcI_UB]QuYVt|FݘU\7l4 M3PP6UqA7lUwi]{ t__M/LOq`ԋr-By(+*550cXkq-ҽ\j
-1~|zig{_nur~| j(ձf//ӲIOu(bMtѩ>s "! U$T:Ovendstream
+xRkXgu*5*G1hPB bm-;$0$
+߼vĮh/\"5I(~bO5@ A0EW_]K +
+I+N8*ZT3/@HD*QÛ^ N;&:~ynyzP`x$Jpl.A[8 H$=~U1j<(CBVfBa})ؖ檇- bL* sPhL#%umĎ5;oblsB;qQY}4tnWb߼puy3^7N8Geþ'Xt M;^o_f>Z!t߂"Z!*n[6=<FЃ11oc}T4/&Y0;<}?Ԓl~v[v^z@}ZM3vfא)MKkl%|#9{7;lagT)|{5z?0sR닢۬zWmݽc!חgsu lෛ0OW-y?lyZN("x<u$r=|ۚcU:WRUi73‚~oH^O_Wu6;w{>?B]Ș9“w}9vaK^kҮ%E%Ćv{zͷeZ/x,lHd#KgǬj$k5+$sJ:d޸ʘKFlaڧŅmkZz4@g}_Wlزy;@E`o+v`jFIS4}wO33bv\w1MԬ4.%qYՖ?\.eWו23kwTN_C;slXaf ΕaOoy?D<N)Â$ul[տA_RwӴ>yrŌ5'f8hqzz^d`4ύϝjm29ޚF>즢҇=>ԏU% z3DBz{}u<nZ*+ )'Km]O}509<{qNj[7S/:ɵ+~=RuHp dcgƅ6Jv<d})'Mjm*~d~5%򁨅^Q0qcY>6Q_T_eJ~EPŚ踣SI} 6@CEB@DRC2Oendstream
endobj
-2895 0 obj <<
+2998 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6713 0 R
+/Encoding 7231 0 R
/FirstChar 15
/LastChar 110
-/Widths 6714 0 R
-/BaseFont /CZKQJI+CMSY10
-/FontDescriptor 2893 0 R
+/Widths 7232 0 R
+/BaseFont /WTZFBC+CMSY10
+/FontDescriptor 2996 0 R
>> endobj
-2893 0 obj <<
+2996 0 obj <<
/Ascent 750
/CapHeight 683
/Descent -194
-/FontName /CZKQJI+CMSY10
+/FontName /WTZFBC+CMSY10
/ItalicAngle -14
/StemV 85
/XHeight 431
/FontBBox [-29 -960 1116 775]
/Flags 4
/CharSet (/bullet/braceleft/braceright/backslash)
-/FontFile 2894 0 R
+/FontFile 2997 0 R
>> endobj
-6714 0 obj
+7232 0 obj
[500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 500 500 0 0 0 0 0 0 500 ]
endobj
-2889 0 obj <<
-/Length1 2066
-/Length2 14415
-/Length3 532
-/Length 15551
-/Filter /FlateDecode
->>
-stream
-xUX̶k
-0ss
-+Z$N oj ajl Pu0z1
-
- ]K #NZO(/.QNoFmZW^{'s73eڅ?O`WI7~
-ԒȴUd%QAKw*` _@KNZ krT
-芈@0ȯmGNA沦 yj=O/mwzd;DO;bk|AKokw2Ү`E(C_B2
-IoQoU]lׅr=Р@~gx#>A /D#&rH6Rtد
-մ9l{noD әN )+uc诨ah'hhp#`dr
--L3G`J$iOY}!?-NG{BCЩ{E|pVǫ2,$?·2}AY:l_/doeDf.5p\W{IG9TzFw,t!h]e\&WBVt>n㏚[<Kl(g-!W' Ӗ`@h7Y-g@ūѲrv,A燸gDe+z$$Fp"| nPZOhd6gcƂƵDGڃ4!C6;QkRe`^#~y_(- 0?Jlɏb`tM=|qjJΞ36 X{s/͊~Vj؅ÇXШ ^U"=ɒMe7Ɠ֚/5y$64WkP2x:uvI
-魂Sdo^}'̝(K]I:.CH9imqGȦuސۏW% M$1>Ĵd7|i;9V,|q:gA[f4`4Ԝ&n[~^icjTG 2}";3i8E(3%GFO|eԚw˛z|YrVDmy>'p BryT
-SKנ[\.w1[4H 0Z(TwҵPq~ ʦfk==`wg~i9D-iftU{G$z$a/967査z-p!E ?9sekXݷZx6 *£= /y[iu) F^';)k?uj2HӼ⑍1{tM!|~w&lO3D=Z|Zj;6B_{3LD5e?%F hMSHEnb+(+R[iD^"~Lus2` ق1ީQu$:21/^Q> Dfij; ݌-Ľcty5mxYtxkZM^ DQxԀ;,w
-Fr",mx0~;#zh=Qj`Gӆ`äˮ79U Ou$}OtU޺'
-g&a{ȫ FPd$1?RrFB?\4-ٺ_*[dBd=B) +6
-Н:s(/ij7x H>%@Vq} U";H^IDR_2@. 8kuך&kW=.UC{FBj
-o) Du+y7ͶEȪM\
-q(j2ea]D]x)8G%moS:g\.~mZ6?
-DV({[\:pwJQ<իBŚll?`-ֵq7ϖ!3g%.)s†ZrsO1[ \8$zSP{bC2+2R s7lj@AN,d.&@s"DSW[X'V+7)~-9){@eZ>fۖ*'] ÍhwzpM7:#\S&Giښ $Gጻ!uL"uT~<fs>*4nnơ~Oމ WyJKVߔʚ7dAXrAf3,ŴS ;ǒgi3ɐjSN^MD]n} JZ[3 pYQ%
-/7삖{)
-Z )ABc_W6h8>$Hh}&6 +>|SRv ޥʒnb˶{En_w:m*.f$+w!4ġ'q{4
-,nLQ8/-ig0p| { a[rUγj~xJԟa#oUqEZj=9:ToL:+ ݘ/{m
-ִyu5lGT:$,3== p~e.!aySW>2[PZ&_ôM?x|
-5[[ pϪ?U'Ց:u:nTz4Hnl@Y*#dNEY Wo3;8l[Rkl)Lh*7C)\}; :UNɳnP\tu߂5SS }_>x{1kx˅i
-{֬ьluxp]WE6Fr8Hnk-racCuc2 o IhydpH xU_N^{~Hh (!#R߱4zay%56%f[җ,HO<~Т(2r}H0(K 0zt,K*r8Dd1cAv!Ψ>e&++yBgueUE&b$aʭH'_$GgR s47}FsBxBw;M(+ /2Y֨l֠KO"0\{S~^V:ӿExZhSFQm׳teac:άB􂊯_(A;ԱCJS
-%ij/ً&OזB=- pmy%fiћauI*0
-~鮰x/ }W1QE6t4U|<!(׹0l y
-KK->C9]Bo۔>"e0o__Nȧ[Lx0
-k`p uZ=j?2x =dDW<̤PB 9y|pr 7*tJ_,$bqN} XGUFhUoS_e݄\@Ӳ<~G=lxN6VxcPr<^a9F%Cz/
-e1x>vכ(,8LniXzSX̪~ (FZUB=Nw#<|[aLb!Aѻ
-C>I ,~Ziݮ}|wˎ[f yλ6[DABcPCD|J@eMEfvd7Fُ/%Ւ0KOedv@6FqBƳs)*h)`gs=AyמUαǖXYd!SIuBOx`G W2KSL^4?FpA`:r=(I(X3$Ƣ%."<y䊮φ,Of
-Z^UUd*R6tUm5do guD\ IcMYXtIOY-ǷB~NkL-`TC{3$q)QH|\-$ՠX!4v:|q<ٴWދ\xv!7q)Qi2> $ rSb [`Ng^-QoIJíV(RT$/WpyNpDPHduܔrUխ 1YbϿxZP"rbP,6\;#- )X?C1 >[qG9*_܇s`O}@o}v$oV )D!2XJ *Kr0?!ΞMgE4w#9Y 4&_K)CQڳV1&DJajQB<v=>Tǫh'3ȉ`›N!Ϝ?YjLx[%%r2<A7111;S Jl?|MS!:}Sf*urMmU#+QnO *B8 ȃc}ӥHPJL;P#L7-̈́
-"ިN*YXxŨA*3>q 7B+q"xSuGK'k"T€}WouN|{ႛ:fĒ39O[%z啀bhHɛp(!'<u}pytzkfla{zro{O=V}
-sŧe4I~p&ؿ#h>&kroչ@FƒVWVں6B`ݽex._A2*\ۮ}J'AWvb,SCBfƷ^>1KcxYF7it/iaǾmfrfzS*ځ$%BZ7P}3eXNC[)&A$+B$?^b*k<â4K#DܴNC ~$ڬϳ}aA>->2wL#>ڰL޵Ύ),s8+c0_|JRd1XxC5&˂Gi"q7XP@j$Hs5uHpH$2.sqm7_vtb09YMg`sk6" A)|gYsfm g6ii]ԉw S(;uޝ3{܋s
-li頪#Iw\N>e -V @mFV5 mk^|/koY ԏ0SXgAK\Y(+ .?^kР\#w16y V/"Sx-\SEq11#Xlj<
-zEL"箐5ćP=K(Z!Xp8xA5\RC_S
-7QQLL=+(8RѶSI=Q[&6}YimG k$ ʫyv1R Zн|Dk;_c+6euPm#:`9&B.B)E(B])Υ.uTͺP ,isYAۇg$/"*1/ψ]4[D!UtXuHllN}1~笑\ ʿ`y뇘ՈF@Mwb-ox38k>[qZ KKF%*/i<C'IJX c( OfWeN j'ﰥclygspOJfc?H3@t
-%[+>>[)h3YkU x5yi(#'w F>)Kn'(nNJ]F9h?R+Ox\ ޳ȆSN볰췡pB*y*cB>"P SW&dYܞp<
-(s4ovx^V(6 \aߖIɺ$pF6
-8](p3EhElV%i3&x[0.7~BWUZ˲.<do[kU7O _?!2! (ګ4`׉2O%@ טƫ ]#
-g.w#z%H0 C(0{rё!_BV760?dTF.}*8y2JBP-spXEX Gc\ o>2lm.TkW(˓!kcJO:=DQ
-"HGPk.'59΅_e6!W<,p;p^4{Nl$՞yn VQ,F
-^TJa0xgT3QK>ި^0xծ$k^P-(J6(bיD#kA^O "YS9zl:)C=)DzL(ȍo.(CPHʬ`R<=⮇/"<ސ ū(8aS9,x"Z%`[!e񅽶=ROaa
-4ȝjE
-zu;{-mh\jH3G7}V4 EK*%|gPjy|k޻jޯ|gR3IQ_\ZL=_mg#mBiX8=Rxzn4 N$O\?%0T1Uk0 d[D'|+ʼISRbP j q{l9"L
-Qngx@2ѯLa&Hd5HfȠ{EK!m [Rp/3e3@^o!X"lqpV&ag0Y#OީV55Xe_oqHi q.8 ^ýW)?5llK{
-/#+Q!b2?Z^;4"fvcV]=~"K;m7*}Ls}%_r%U\X͍
-+~Z)<{ݰ.垂JJYw]h RP.cg@05tn2D jיmyU 1!d*T ^
-XC2h _N2.K%{R20L{ehfLvFI)&yTDIJ#2lW9Z)Au^љbb!S\2{fR!`|! ,94YR80uTBeWk^*v;8]b"ˋt>fNsHI=~㵫e>TRkBTF J.Llcʋ9/X~6&bUibu$wڀSk)J\qw\ih"|^Y2*&,/E2)KHU5Yv~=~P?oAP_}XQL>kr*C¾z_rAیR(J~X+Nȏ<. ȣW2/E%սsP-7 +gi<i{eLE'OoطZIf2"Ý't
-}m).|]~ /E&z醌 ވZ\Θfϲ݇ak5z;ҲPtXFH7wUjeXAI8y#-'Q%54T-ڔTt8ɴOYEeo:npj&pv?e8Q!RI*=myO
-[f>̮d 9jUYJGmharbw[݅)a9Gr]gV[:T>:oWg/߆GPε52.F0J[poiou"/h~fs-L_vbP 3>:~r`)̒sf KhPt~qnwBx֕7¾]UM`rz2c;f33#yŽFj]Ex|kBP4sa"6J1RGٙU!dN
-r(KY'YR,}{|98>Mz1
-ᯣ\lCB]2UO r}&r"́pP%RFO:A :)ThZH&ջͩϠ EL{Obwt*کlzD(4Rߖ~eAtH]lJ GQ~KڊrGǴԦ_p6e9.u8ܫ\Xn/]HbrZcT;C-( +GL'f_jd493] ⷞy[?.s<8caH| ™h[\1LHdL ,7
-l mB OF iఓ`8VWjN%MciS~۬-Ԭ^7v?`t Y6J6<VOupҴrJ}S˭R~1" (E֙ˋE:[c~˧d6>;>YU'=u0T)B#嵨#A@{q[73B͑ἦ\ݒ뤟J.z^@
-&sP}y"Pems6pkf]h4пl7.X4 gVpAțfbx ~YLZY^醎w8㳒ߺ)CΌE&^DI,t-<nA!4]&ְrjR !!X\+^!^ȴ4ncAC"(kUУӛaW+tGqq=&FO?ʐ%H&:5%wY>SDZ uL$D
-fo=cP\IUs# ':aSmU=&0SkQ72m>KzNيNK`Y+cg9bã[ss&U~1X!k(g|oǎPY+~vG"⧡m6:Lau
-]]5`.AcP[\G>\vT-QwCg+b8x^ﹳkc[I0k}7s"׆X) ^y
-$Y[NPy5"K3d?,j1DR jSALjAjdUMIZgn[(@8DQvT*,e(O`)GKAT9pAw& Pms^׃q|J Y2:(ԧ wH1g9ЫH~$rQ+=:ߞYҢ~k{-'gLq޳ [:բ~%"a(s$uD2 ]gcR?Prdo7GiԔ|zU3ڭ'p$
-0K.KlH;\Fix1XRw44Sp*O~ĝ*LosuIIs)ܦuT^d׳6Q]ElYQ"3`
-Kendstream
-endobj
-2890 0 obj <<
-/Type /Font
-/Subtype /Type1
-/Encoding 6699 0 R
-/FirstChar 12
-/LastChar 124
-/Widths 6715 0 R
-/BaseFont /DFZSQU+CMBX10
-/FontDescriptor 2888 0 R
->> endobj
-2888 0 obj <<
-/Ascent 694
-/CapHeight 686
-/Descent -194
-/FontName /DFZSQU+CMBX10
-/ItalicAngle 0
-/StemV 114
-/XHeight 444
-/FontBBox [-301 -250 1164 946]
-/Flags 4
-/CharSet (/fi/ffi/exclam/quotedblright/dollar/percent/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/A/B/C/D/E/F/H/I/K/L/M/N/O/P/R/S/T/U/V/W/X/bracketleft/bracketright/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/emdash)
-/FontFile 2889 0 R
->> endobj
-6715 0 obj
-[639 0 958 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 350 603 0 575 958 0 319 447 447 575 894 319 383 319 575 575 575 575 575 575 575 575 575 575 575 319 319 0 894 0 543 0 869 818 831 882 756 724 0 900 436 0 901 692 1092 900 864 786 0 862 639 800 885 869 1189 869 0 0 319 0 319 0 0 319 559 639 511 639 527 351 575 639 319 351 607 319 958 639 575 639 607 474 454 447 639 607 831 607 607 511 0 1150 ]
-endobj
-6716 0 obj <<
+7233 0 obj <<
/Type /Encoding
/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/exclam/quotedbl/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde/dieresis/visiblespace 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/dieresis 197/.notdef]
>> endobj
-2879 0 obj <<
+2979 0 obj <<
/Length1 2332
/Length2 15237
/Length3 532
@@ -31815,92 +34953,92 @@ endobj
/Filter /FlateDecode
>>
stream
-xS|ohϤm463m7llۍnضw>ڿ`^\ 92P֙ "`f`bF 'q:[ي:y
+xS|ohϤm463F ۶nضw>ڿ`^\ 92P֙ "`f`bF 'q:[ي:y
`5[hbd'`u1gl9
-?ljl@w1Ҽ1oeJShXt94 Ys|}l'bb<uw(n/N_&/R] =[5<INPۛ~ݞ+̬%jd])Rj6fspj[|`%QBKu( g [sCK6kBre
-g@ twB F.fSf]Xµh)too5pS)Xr7Ty'Dz|ٳ|-׌) ˏආr~ҐZyd%J0Tw!H3-b:"<lVFdv;p9ٖD<~(<|C!*Fe3tN##٘^|'";8:.厥Ykuu^ay. ?P
- db jrY-i4kЬIAA gF!'TyKb$? %E+x@? C9+ .X[Q҅N[ x? RTd(rRowm&!K5
- ч>XgLITρ IK<!PO;ׄ3*`Ž#WG,_N;BHf~ X,Tu%OW\X;5-Ϣ)8qlD[{Z r[ <?Mgސ[j9u*?7ώ2Br} iXA -I-8.r%4%{sU^N=%Fʟ`p[`7F~ㆥE)«>`$Qw610{fӅ{;: 5ݣQIt8{)*0b(e]R܊?On˽<sHh눀G 8kApj'@歎^VFۯя
-S;Ԅ".?˱Mqzr`j򒞐VݲOH͟q]
-h`L8F0hg7Ѣd۴SKȻJcE'q>gAi n'GFW[[ǾFM횾Ww8ۜ27RvSWl[Y(dYV 7"dXsʙcȳوB>|/oAvQ۰/ }c. n o0_DrNDzWyd;\wv=у=Si!ucb~ltE
-{lŒK$_k0${~#
-Buh_Y&N;m8p>`гlIzg tpP0~ĪA*}*AUt׭%ͤ#q{ڠGh:ޟvQ#SEW
-<Ubⓑuα7پݽ>V=?6g*u~1
-\ǟ[l$`l괬YI ƮuZ%Zı&Iј.
-mF*$ ,_Mgٍ1)\XMo\F1ɓ!V> Rn}j . g>pCYJג0
-$P{o5GSҎHJP> yS4TH 4, (k9/jj!JVhQg*byfTJl2vΌr-dk7 sN|+Ovց ]y 5\D.Sy;HKr>XaA3nzj,_ju[J;ObjPicwZ.Ye& 8-=A8(UJRa f'Myez濪H J_!CNRxp//58ޓH`)Fټ%?G#"#B!|jc|NP'cD\7_Sia.7uBdyB0nХ5[Gkf4R}`e(>ܮ:\^=q rCdό?ܱOR%uB(_O ܨdڒsV`Hj=yRҶݮν+W}' xE_}YZOoT svʒ
-2w tNKNUTҊdX~>OXӛA_U%MМ`ߣ~ZIf.@l{Yon!ͣϑ%GqceZ2bMpp
-4y@z^pd+|yk%w /<;:oB&[ƐQۨfKFfy!ҝ34SUIgb=aUk`ht4;)^+%vw >;~t퉴@̜QXw`alV/$*E$=V V*J17#C2i"s
-ErĂ&)
-ە VukW[h=Jщ[#cjCFݤ-kH I#?3ڝ(s"P +蠩 6&9|"_3;2>ׁIH4M*u,/lmnc?Ni[u4]3֢M
-sZI0Ck flS?E+~6zEm'nJBEfQq-4*Ծ>rZTU&m
-NO/b43tT5ѧ'AN_/(JÂ;kCk
-()hX,(j%xi$NdkO4 > l(=Y!id{B~S{}uk_Fc
-5œv=sN[ӰZIޒ1gE4Cbާ6}h^ z\IߗʻVscI"}dcaw{w#[ 3#HH龋lypwa?mPut]IdzIgv$g*Dn۱}ę!5}fاfd8ᵻ0d q/T@_@1pTP18MKKW—%,pw{:(Z;8{c
-oI`Iiw0moT֓ۮ Iץ*k|[:Z(5ndJ{eH0z5N5E=)]kz+P[*$fgBk*A> kkͧx QBWokwso6F3|3](E5&D.
-HVN 놥.s]?p=o6Uk;iPÙQLz;T8;*>Ah*<2a[}uKi
- Kg̃<Yݝ& l{?A-V`'ђ+K
-j<;inYlzGԖ0LLu-o`!t耩r^s/XqBiDVÁע*ώ7DZlܕ kӎmΤ2b!H;۷l=wLp, ._x!XKqk6}@zhU5WP
-QŅ.,Piɀ#.?$v `L#x֔nÓvBms!oNf@Xj̋nzcNkSྌ4+X Y˺
-i{eM^kU O
-BQѣvJ Dvo-@mXþ }lm$Q
-QK8 lcZf[&5
- BoٹhΞ"l@NÜa뱒Q +Hxæ'L7 uqcF7.͹~)we:luHv蠸'l@+c?#@?G;3@b0}sw!b'>x`4r/eǫLP5OA=8⒂wWp;u ((ږ
-~XZ۹'̈́vyNLX`P,MSP0_$tFr2tgD`ɕҸ"]ҍ>2Ig?if8_i*R!1Tt""ck} <7qI$wo &[XӖr,~SDpJylWDI4OmRshť}O+@(ň|Q(A_oq9#].dSD#҃I+$[g2zĄJ2&IC{gB.e6"3 9xb$RkĀ+̓𱒩f^/xa(d0vBi؆sLyZR j]Mi g:b:Q1ƴiVZ
-gS'q#+`cع{~3r;~u u2K{
-
-k6h?$թڗNy0Ŀ0~ظ>?wYoc"TeՌ|$'*跧e$E{2ip;BfѢIQ߾:d֞JMnA͠ڊ(
-,'++dDMO$͟ǝK>/ױ-eE惺NBz%dKoDTku {_.'j/B5a$cDO5GH2 I,zGeؒX{ӽ(M;>^{ğ:zzִ^ޑA孈\l'R`^Hohux]ˈb[6܇&Uf᫾ah ;ͬ^AM̒0^^/
-j<k?}[9k=QqR g漅 t,qINe6h UuXKw` и#w&O.hUye(WތF8P2b!}s呸F[#( k8ii|ȝ,aφ OFZh]6Mվ} 諭z4V1,C}d5""c.pwզ-kGFܶnas?}'Boi@0YS64&) UySk?|93Z
- 3 ̆]h&Y]Xt7d.;$ڌdžDžM%Օݷ JImz0(ox5n띴£ M
-?ASG[FB_7(5j#01oxZH/q=jdt4ZȸLnn쩰!,Αb{s-,4p?!w63ޗo-+yqot`h-l[<cň_w&̍b+!60L8JP W5WWU JR0`uYPWzu#L_GGZHծ} |!qK/t7=3#k)]IDߕ"L󇟍mj//*&u`S98 !+@ݟזDr +rTlԍ\L5X <RIU'QеÙ[D^FRC!6y_NR$@cѲjT1ozd԰0
-|7LWf4,-^1nev M/1Lq [ﭮ̎VV֎lb{ G֣o{^𻕙5d3ƥ! leD߹>p 9'<>b}{^3hxOb rW+h_\\s`۱ w
-o0Xhw?[z=e14amsi_;ܨiϱɨ
-ZP$U3/AC830ҮWưR{q ]B#/EP!d,2F‰(;Ԕ[% FF;Ρ3eL?/LFk
-Z_܀sgMo
-샂!NrE~+#m‹;tRtE 7{B V8ʔ9y
-ĉTRUl-74c/i7jG"gCt
-T4Y =nV.+pwҠ89COb#.c7(@D%:ʯ_BvZupH%٢*b|]Y`{{R'槠r0ŸS
- u|2&M|*bi&:"wh!!G" DyMS/B$TdvWM\`*k ™PeFBT,{$;s|
- xd+N`_]Nae\e=z2Ї|&I=
-/v
-)т;Lac9Kd8Nqr#KMfl@8\2ǕW,!O.MY *K}6uSAz=sQi1L#2X-;]@Qc4VXWWO zOe*GthEm4q_() $-44-GK Z!gFS: 74)^y%MT;BfӗB=k{si`JR몌1UXZL- EO |Sg]xGհĜW;׏~/Wom*e<VGyFm\fj7m6l
-7Q>(EtisNđO, BU|<Ggr?kfĕ-#Pa?^9!>FH1DHim)7wkF[{W؟6E1-Au~WI͗MuE
-{ݽh>v
-?:=]79($7b!q,kxfAC^Dgƴ[`ԯ)*ulLP-Js{7/?.RT[ЀNBS렓s8/S7'ڧ#Q)QiVԁPg6V1.OoS!BC@0 `#z
-͉LQwg:%L5 !K@Wl6cC2-mo dC dEJ)ݐ@*\0ƨI&ԠcC\c'Ίw_~i q Y5$ZT~Ii!o55)Wu<q%W%"vRtlr~櫢&]I"nR+\ZT, /<X[Άsu$zM85s jU`^<%r)  i`JmdF纑\Ɇ%+G#pAP[V<<6]mkڳ
-Ex"Qu2s4ݥģUM#v ދgX5
-yq
-s^zs3Q9$Ҥl[ 5VTDeIqkj;";e]T>[d׾)QWxlGo"/0XxoZnv2
-
-endobj
-2880 0 obj <<
+?ljl@w1Ҽ1oerSHXt4 Ys|}l'bbuѨz4L}}b|/)soiir{A'MnOfJ4 2/OrDU`WIz]zӃ985ӬUCQ(8%|Z
+ k]pd -E8kyʒ?4kMGi-R
+94+' ɯL,b8
+g@ dʒtwB F8I]ͦ1>5k^S-oO ;0YoѧO{worOwɟ>Rg [["S*'Bm se!9H#+M`Er7BF/fZ.$tDxE٬:-ڥwrڳ-!yPxz1MUg"6zG<G1#";8:.ᎡYkuu^ay.?P
+SB7fGVs} ?212A]\g7nrqJ1nQ،BSP3=Wlˬٮ_ |ܔBQ
+*`L=P<PB ` b
+._4M6&M|B[v:Epۋ%>mLw<i,jr"'A;zU9U=Yk!K`$ aWo!I1k$28,^_ùbMl...g}Cԩ=&Rn޶n
+S\AsF-> X7њ%$p=`naEɶiwO|܃4Ҙa$O`&#//d񌮶}'};9p IdIU_[HYL]wfme^fY7`ވ0`qOu*fz!2vdCC  5"En
+2􅌹70h1m$|>ՓB_pE߁݅3CjxLilgԍoScTWfK/;NJ]bb(PykߵsOg!BH
+ (GΤlTySkE!#ļ=wpYкkGv-;ِXB/MxPڛ.u
+~d2GbLT6gE'Fq=e9a</*&m#NF?v56?R P|Qk(!H9FUz̋mx)]{N/qBˌ0+ V@TǷ@W$#iaŻY׭^TH 1Nw1.x$IUbꛃID9g Gp[+*+
+\mѾMr wF<p7ug+ْ`~s{3U'TTT[=JlIGt=xAm!,>Xu?Xg F0ƧNjH
+#{~mԕcB) N\J9.#PK{8yOG9{oÐ9˟Γ]د8~,`MܞuH u۾v]1CMҎb'J_}T3klnHteHUaqtY({JWț.lZ8x?8٭Pֿ^`@;ͮ`_
+S6jq SȜqp+ߺ6vhrd~H"5~6ţb
+&LU{,U4ywv\eUF&/5NuQ.Fj>xe~L 7S`t|m?8ءXn6e 㽴,)"oWuM$.?%<A3:aհq¯%oeRk=Ct$M+wCۊu ړӄ<ŏ=$ |=fś'iH6†`7;c%sfKJ
+7ꯒϋC$;G1&BsD aѭe W"tPz/`x@}Q[Ul1pH*U2bdˉ촻4_~=xy뻄d^n/\0
+cA]5-JL104k5,C,?P$TiM_([\u'PӨ^YHԻ0ы т2,J-z.d,ǫ! fcsFxF焤]
+ Ǔs䞐QsJ '|#i_B~<X1].9%|4^586*.cFr#WYyqlx.{cW1M썑Bڕ(Ѫڰc/g @-Y8LZϳٱYqVN`#o0xIYNH&(}Mh5(aɶsz>B"X*zk>npio! Ӳ޿f&.cĥz*zcFjh:pf`ǚ$5Fc(w~55e7e p`5yq$OjXE(.J՛\h'nvOœ3Vů%Sa
+b> oUzk}g'ԏ:gż
+"/^mET>AW8ԥn.HfO
+eܽ9˝QQ݈n]q]/ҎmJ {ZA_ws^i+`e]uHfS-w&c%9xCJyr#)}w 쬴)$v>E$!q‰!|ǒe:nvz;̜10'^瘖(VK)-,*:osQT0А2ݴh9 @ԸTX"<|^Fheb2LVuing1ˏL<'e̱tye~
+$P{m5SҎp}u/FDie/*)>ŕLA/n XP?O9J^s_6Be JѢϪ/T̨<d82e?
+KӃ c;W䟓}5̑x890<Y.tq}L$R@"-Wm~sθ驱d~m)rN>h?>%WA^ ihd›S T*I}1|3 4"M/(}[ 9!J}jHE [rw Vo`XzO"'AghS{e `p
+ ُ Rd;^Rmor|m2O |98}e5Oìs4ڻCGlQH.ov!x8sr}/{ n4ljV4 }>3ZXhs?IQ aꢸ~Ʌ?%sjKd^]"_CsxINSvv;S' xE_}YZOoT uvʔ
+4w tNMNQTԊ`X~:OXӛA_U%M ל`ߣ~ZIf*@l{Yon!ͣϑœɇqce}Z2bwp
+4y@z^pd+xyk%w /<;:o|[Qۨf%KzfY!ҝ34Se8IgB=aUk`ht;)^+%vw >kx}P^:Diq f(;G6b{ _iB+%ڏ_2i"r
+
+}!Y5YkRGK
+ܒYFhQ@9
+p[9{[{TQDAg:bWQf$t] WD1lvE%oUn~*p Y :qkP7Zct5}h v5c?R>qxG~FeNdjj`6at49AؘƤ=G{CDk^ctGF:0
+ܗ1>f8p/񬻺 %^({
+BQvJ DVox-@Mhþ }lmQ
+ BY95hΞ"l%)@Nߡ1 )+Hxæ'L7 uqF7.͹~)ue8luHv蠸o@+c?#@?G;7@b
+7}sw&b'>x`4r/eǫTP5OA=8 ⒂wهWp;uтtH(xږ
+~XZ9'̈́uO<',0lN&h{m{#9A3"J Xmq.iFFz[4\Q3ʾ4d(:s>~{<7qI$sg &[Pݖ|,~SHpJylWDI0OmRshɥ}G+@(ň|Q A_oq9
+ <6],[@2q矤T&o.P['EJ~? {)) K04rA[?TG,CIf4_#8#5N͵oXcIKCd1#|dX"6jdGiTLۨm8}WU%У f%sk6l _80
+ ybfaNCИ6_W L@]\hV8Wh4 v: 7]m29>$"/MF@ŽϩEf[03;FE,N$= &"*/@n3,X36?wћ,f](B]]w>3H  g7J+Wo `/:D 6ȋP ? %J5;i!G
+;FSG[FB_;(5j#01oxZH/q=jdt4ZLnn쩰!,u#o"68$
+LbqCW&?C-W(ơ=j2Lm>yN#LOk3*߅% Cl|*R_dKxPjygQFK#.P둕P s>({vt~2^7GѰ xƔ5wڝ/0|02,h2;{XZY;9n/XYue{Vft;e
+rqs}@r^Oy}N(Ivg? #RЎ8:cd
+ "C LeeA9h$c]$&z]K`@L'SSv(EgdbO[[oЄΥrpNt<&j$+hPL}HptV  e@t_8Hƒ_J ǁt
+<5bCpn:oK7'pBS2wzf&r, x8T[~1Ў憾3 )h~r:zϝ]?>2FXv-`C,n=gi}~tF{S( =_FeRmTE  -[*>^gkf$ӰewZ/Z͘]i.^ߡ㕢b=,
+Umؾk
+d01X6FnS`pJ`pk4%D MAަ/ն&e1 F>N]t
+vT
+ xP%"M7?HL ǭGOʛ-z&,9򶣗cheM֔%33_07 Mq{e^bX} ]r6'Xk©^TWsp
+)kNOk܏ghH+SmC k6*Ǎw,N,1^I)5"=ቷj[Ӟ(o ?.]>& .h#\hg^<#ǨQ̻ݸQƆOS+yͅDfC `Jbm5TO,ZU3S;&WĦ4vYWxn]X\U5@gZCcmi<
+я[_>30y\tgsʜҢJ-0D[1)yF)eg0nl )7 H WG!ұWLŒ> ?cf6"si_at/gD4 .`7 !'X!ـvi`h3N~-n-8vd2W8k(b}">wڕ|
+gcp DgQBmkp;V[}efiϐo ,{oQ*s>7uMx)Zћ3\Y=8CD@5ɚ[_t. 8C-GHK!pc/8Cӿ)6.wPR$P%ެ;ubWŔuWܗ[|d
+<'@ `+qX |
+!62;2Fe^
+GbrG{amYW #@X3#d#f7R3=G]WbBZ]ſII秜 _7y=CI!W|4/h"F
+çDVʃpUwl߆ 2;A#g귤P7$y^ oGxMm]Y*5gQgcxU=d mh`4BVO6_C (tlCI:Pdz gUW-sRb_%y(jc=Ҏ4Vɉ jnS7Zw!6o'zUwm<S ~H9Ak"Vm=pjWI%Z?9=~r{?di8{";(VAlC;PRH Vb.wb%EbV0*ieB(-njK(AE6)l
+fu!%9bti
+Y^Rsy9ZQ˹+Ҍn^uhT- AKTP>r$N!Z7J#B6Ű/v='ߋm[ty$\ֻ9. |F*gu\T\'4iIm2ń( 0N,"Gyxm~&׉K/caBs3g
+
+endobj
+2980 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6716 0 R
+/Encoding 7233 0 R
/FirstChar 33
/LastChar 126
-/Widths 6717 0 R
-/BaseFont /VMHYIJ+CMTT10
-/FontDescriptor 2878 0 R
+/Widths 7234 0 R
+/BaseFont /GXJVNP+CMTT10
+/FontDescriptor 2978 0 R
>> endobj
-2878 0 obj <<
+2978 0 obj <<
/Ascent 611
/CapHeight 611
/Descent -222
-/FontName /VMHYIJ+CMTT10
+/FontName /GXJVNP+CMTT10
/ItalicAngle 0
/StemV 69
/XHeight 431
/FontBBox [-4 -235 731 800]
/Flags 4
/CharSet (/exclam/quotedbl/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde)
-/FontFile 2879 0 R
+/FontFile 2979 0 R
>> endobj
-6717 0 obj
+7234 0 obj
[525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 ]
endobj
-2875 0 obj <<
+2975 0 obj <<
/Length1 2307
/Length2 17225
/Length3 532
@@ -31908,7 +35046,7 @@ endobj
/Filter /FlateDecode
>>
stream
-xڬeT]Mpk;%w  n]tI7`0\UUk} 'VR6s0H8ػ330ʫ031301:]Ō]<D,D
+xڬeT]Mpk;%w  n]tI7`0\UUk} 'VR6s0H8ػ330ʫ031301:]Ō]<D,D
̞bK5Nsrsp3NhfgO9Y s19
܌?p ܎$:""b &KM$0MR$22".r".
(!!!h!h!.&Ʀ6
@@ -31973,875 +35111,1123 @@ kֈFW*@+]{=h׼{; JsS=Xe( 4@%lsK8K%aq
R-+[~[ٗ]`
7b!]w`LߐJc6?@BŔxc!gY8?ڈ .0f(%#.(8[YcM: ? G4SuZԪ!?@k}w0̲>N]| 3rxg/BleOk\g,UiQXBbGH!A}z|טd]Nլqz͢W
->X` N[5|1^˿|ǠחPפV;_k, wȓOOyU+#S۲'ڻ:\v@uFS26u`}D$*{6rOdeRוlEUm2güu5]L1Ż:/bJ$z=kY>Li6[Gzm}ȽVwgI$MbHYTd+^DXQ_Wuv4&"BҨo \2!a _f}8c,-X&ė&"CUqV{1'!rUw3І`6X] 2-
+>X` N[5|1^˿|ǠחPפV;_k, wȓOOyU+#S۲'ڻ:\v@uFS26u`}D$*{6rOdeRוlEUm2güu5]L1Ż:/bJ$z=kY>Li6[Gzm}ȽVwgI$MbHYTd+^DXQ_Wuv4&"BҨo \2!a _f}8c,-X&ė&"CUqV{1'!rUw3І`6X] 2-
endobj
-2876 0 obj <<
+2976 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6699 0 R
+/Encoding 7218 0 R
/FirstChar 11
/LastChar 126
-/Widths 6718 0 R
-/BaseFont /VXQJPH+CMR10
-/FontDescriptor 2874 0 R
+/Widths 7235 0 R
+/BaseFont /YEGZHB+CMR10
+/FontDescriptor 2974 0 R
>> endobj
-2874 0 obj <<
+2974 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /VXQJPH+CMR10
+/FontName /YEGZHB+CMR10
/ItalicAngle 0
/StemV 69
/XHeight 431
/FontBBox [-251 -250 1009 969]
/Flags 4
/CharSet (/ff/fi/fl/ffi/cedilla/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/circumflex/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/tilde)
-/FontFile 2875 0 R
+/FontFile 2975 0 R
>> endobj
-6718 0 obj
+7235 0 obj
[583 556 556 833 0 0 0 0 0 0 0 0 0 444 0 0 0 0 0 0 0 0 278 500 833 500 833 778 278 389 389 500 778 278 333 278 500 500 500 500 500 500 500 500 500 500 500 278 278 0 778 0 472 778 750 708 722 764 681 653 785 750 361 514 778 625 917 750 778 681 778 736 556 722 750 750 1028 750 750 611 278 0 278 500 0 278 500 556 444 556 444 306 500 556 278 306 528 278 833 556 500 556 528 392 394 389 556 528 722 528 528 444 500 1000 0 500 ]
endobj
-2867 0 obj <<
+2967 0 obj <<
/Length1 916
-/Length2 2588
+/Length2 2862
/Length3 532
-/Length 3227
-/Filter /FlateDecode
->>
-stream
-xRy< 9!K]ccdϱ!1 3cc˾f/H"{Y!eeNFٳrĝӹ?~>=~',mN.!O>4=3k
-T55pI@I!b]1d@FOH
-c՘a:xW@QX!DYbH FHWģ~ AffM kœ/P<r"a1}:Dp
-Bat!^x$/\@
-fx~<L?g D/TQA"
-e@N
-pJJC]PCUgzy߀B4THo"ē^ih,} "9FH_nքP31>J0l|r(U"#Kn~8'.3MwWt!p%+!}xs_+liF
-]யX3Z Lw8>_ȳѿ0:yOUs֯j8ۈ
-)<^E*S<)ILSAnl'>ywl6> ğ=Ōx0*b1ԸںݝlE>tЙdc7BU9ACaM} ҤC3pg>k f76_a,SxO.c5jlAbԚDoUG̤ 8Ӎy S[SNGK3nU@/%-Tugyb84^d9p0PTy8OG^1hm”wՈ?RPk&谟O-:۫
-h
-xZ~.XJv8g 6HeR]Dj|crԶ_:{k?t)Rq͆v`OrfOˍ^-sH6"ՠl=tK܁ͥA?&r-m >+~{Cfщvorؼ+u$xH ;}Rs|ڍ%HwtuVM۵heJryVPY=7*,y
-yn=p3FtN);>Zce/0sŲmڸqWZ/T+"y1Z3tbHӭ+cCM;f|j>4Yg-ʁz/u,gvo*:W 2?k{xHLo"VQVY3X^K-X~ur#@~+Otn0Hfˬޡ#&;<"#ݘ(>Sݱ|et Lu>W6n:5^rA5wX=/H,W[xQno R;?L_}LyBͰ~}M)R/}PNj9H04|'E9?VqZ^iy. Y(tUPn˫㹅ǟFqi\ <OCmRS5^O&I B^g t䌡rYD^۸c]6<=~YV1ѦdO.&QuRL:kF2Uq[G .!UqAm.w>ˍ>@*FY~y_y1\NGQd89LZOGcUZ`p,;w cTcHYٽ ifNCQ"CF9Lͩca\(,y w,%\o#n+v j֋8x8G2L llmm.WgeKh<ii^̎2DgՇ$kBusL"ѧ.5KmCbzj1LZ3-Y8<&nh]2_\dob'T!porw#y8*\X*p[`-"eV72`+0{>_ ^SՐ7(GU@͑*9R Y'+ԗ
->|I;wX>z$iv0HI\Nk4ןff>$";H% Ck?rwCqne|,ļ-˛8,詭C]$s,f<9|: RfubsZaT`5.W$c׈F6,WY{zh+1w7?ht,}g@NT#Hz59:9VǶ.zխՔ`L~'4p"{xR<֨g$lc\TI앃ηf'<U~6|_̥&ԐwT~3G0{%!K}CiCQ|~C ymδH.&da#z3.k;+b.;<Q<X`E1`ocͨ,S7!KsnJ< d^qo;A#Wf!Fleoc"R-D?&Fh|^59l:Mh8ΗhnAX)oB3A*>P^{3u}C4d 껹.Ϛ)[l{Lh&Ρ#!v@apC
+/Length 3504
+/Filter /FlateDecode
+>>
+stream
+xRy<T}&)k&"Qe씱˝}9,3cdIٳfle) e,-H-Q*-L~s9~:WZNYKMHD2
+ -lQG
+ȱBX`Ao%uJWs*o!|ޤ1pJɀ J,@,D%Z5`>ȟoA5D?_C#򸓅yYc ">쟮?0/H8b Y_eL"a!"k! am A(
+ YsVuƽk' Q!0|\If/^"*^\t۝]}UR+맛J)]
+;_y橜?2ƴH+4WF~_ K#z2nk JP\g!;ULo`EhWsZ>:hiР0Tѝd&+I?K
+\Z/u\˪k1TЩ z꧰.d^@om=]㣓`;_Tƴ>p^4q5-'bETZ9#l[]1;f:R]n!ݖ!~9
+]ߴXdj7 wnAbykRnM6:OGjTEWk.^Vn%=OV@4teK9UM;w?=KbBg|T[kMdն\
+*. (Y]"B[sşTY
+
+)+q.A?
+=^k,.8} cxƬngF)
+e;8 ̿.Wm>ذMOo䷷I2r{U,m& _N5~i
+Kr2;ܴI5ac~zt6
+q;g_VMY~
+:`#퀳ylW+9/7ӛtew_ѽ;-AprbG 6ƍU c`U:.2Y-`3rUl!^j.Ufy^ឤZE&m<B#LU ~1ӉoAҵmJxQ \lO?:||>UotNtPp㹨J
+FBG!dk+H8'5Ed}kNqܛlsi,p秋Hmݹp|%Jm ^ݙxThU?U%o!&ݣ8Ix%iB7?s_*˜o~M+unjl%-8ŧn'DÇ OxA B"`Ⱦ<endstream
endobj
-2868 0 obj <<
+2968 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6699 0 R
+/Encoding 7218 0 R
/FirstChar 48
-/LastChar 121
-/Widths 6719 0 R
-/BaseFont /MPMHLE+CMR12
-/FontDescriptor 2866 0 R
+/LastChar 117
+/Widths 7236 0 R
+/BaseFont /UNHWME+CMR12
+/FontDescriptor 2966 0 R
>> endobj
-2866 0 obj <<
+2966 0 obj <<
/Ascent 694
/CapHeight 683
/Descent -194
-/FontName /MPMHLE+CMR12
+/FontName /UNHWME+CMR12
/ItalicAngle 0
/StemV 65
/XHeight 431
/FontBBox [-34 -251 988 750]
/Flags 4
-/CharSet (/zero/one/two/three/five/J/h/l/t/u/y)
-/FontFile 2867 0 R
+/CharSet (/zero/one/two/three/five/A/g/h/s/t/u)
+/FontFile 2967 0 R
>> endobj
-6719 0 obj
-[490 490 490 490 0 490 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 503 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 544 0 0 0 272 0 0 0 0 0 0 0 381 544 0 0 0 517 ]
+7236 0 obj
+[490 490 490 490 0 490 0 0 0 0 0 0 0 0 0 0 0 734 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 490 544 0 0 0 0 0 0 0 0 0 0 386 381 544 ]
endobj
-2864 0 obj <<
-/Length1 2124
-/Length2 13008
+2964 0 obj <<
+/Length1 2140
+/Length2 13309
/Length3 532
-/Length 14161
-/Filter /FlateDecode
->>
-stream
-xUX\Ͷw XpݽqwܝwwoY<<w19j̆DA^(fgL UV`f030SP; -lE
-ttI@
-(g 2C.bm-gh]+sl]
-/FqMMEY.+Z:x{ ;@ok:Q[c; [Ц`
-gPI8à)M-@' h 4ogdR+7Y
-MDZ#>d}
-
--Ң t)&^2c" &uns=%]dU2G̜?"J_}6RLf$7bGO
-ptn1^z֦VR"e!RWKнtȽvDlK17"W1[sIݕbsY4U(JYcpll
-Uh룣~?"bn\󱨌m rg /(`3(m5EK6cDC,ʵmClI[]*qK0h*}؁&MLx
-c8tBqLT#>aDqĖơlAe.:.:$&18Ox!/* `WT?-?dGkQGxUQ2Q5;4s[<)H@3U/-q4e9(U뇖/(w@D
-+FS˕Y0N)>LxIg,O~0r"58wӭϵ~%`!;7>
-JWD|ϸ<Nֳ}#rbR䞌sՒ:0]y í;
-AwbUL}9U4
-فzRpP:cic7,' A.Uw1>"r:܏y|"d$ 0,i+WDͯZdj@w"/s_~]: Siީj\h F^K7t"'7בVǰSꖬP w3a %;4ג.=(\As~
-ދK>3lkcFVя-N2'@4LZ EȐb!hO2j0E7!.sȽ^wG csI͡,YWWMn@ HIyY귩/4GQa؏u+\pX{s+vencbQ,Q47 g[tvQ>
-"/Py|hEzڄ[쳭 ec\l_S]\/,ϔ2&>o6 *HkWvr槆Y?.Lj HWaJfY?.M 68 [XclpyjwN{ðIa[#l<]cs78 %E$ hT%a3ٍuӵ{;;?ݮrɄާxsZ(Ӣu(ʨ3>4i/@
-??FU+KE;:/H2 <*s ,ҙur¯%`a)ZܗDlKZ3f: BhS |-^ ѝهxW/-`!ANՓ.@íu cJT▱N0lNyPOagibUmr'Gu* &eUQmhny`)7룺U_j=ؚ {
-VW7 7N ɌDQ<C>4Bq8M!a<u?8GXN2*q\>bZ.il}#zϴPa)EC2ؙs
-޼TbqS9/fnjj쑭&:tkwY\v$HF$c2ɤvVu.vbGTw<V0A|J3U} Vyze=Z ݣ+L9ZBuia; l8=*St_r*ՠ'ְ#:n2zcx8&
-['ר<옆f7mq́V-M*<qkv cnlvJ?Ƥd@ (mDnb~9.BT%;/ܧc)grr5dȵ:[ׁL,CkI'nzǦ+ UUW%*^7j47 h6#H$;G=S[7HDUv|Z!ku^4&v5<đWTdDb/M_7#Z#K8wtd-ΰ O
-~4
- 5^ 5uF!҉Re)w8
-q UiY[TsfM7eeb*iw wg\Ƶ-^
-wrdD=7Sx\79=7$p6r8;\K;=2GnG0&㇤q8Avb֑|MXΣpKE۸=J=N $BE\2UF_#KMW1rl !.TďK }s,U'bK4O>+JYyC0gŚX@9` QRЅ*uÝc-5=2%jyL+esGM8-=MkM$I :GB%.Sk kjhnmXdpS5{#,5 d:YVFVz
-
-OFXR=Yn6 F2*`=?ߓ"x$踐*IQ`(zfJԔ5]M@pɬQ€io6yOzzs$vg~#5EQL֟KӉtb)D%{ a \}[R`ϫ۷0rfJ#^Fepk QݤyZ/`YV/$0&Z} i1V$8|)̎}<EkyN_v-0^a b "F9=gț gWJ+_E aj>'Ғ| >r@BĨ'Ո7&`<|`A![Zkཬ-' aVcFEry/)D@H-νin_R L >>0ly^Ӿ!3dbEh/r7ph*(g"16_Pb^
-ʹD,,3meP67rIyl3 0c+$HiJ;+o^s_wqT\ч쒌NSeh
-e/wOԋkrnxd8m(<&X8՜@y4`}AN
-c Dx<^3QzkXMЭYDfL+??;ķC^=,TL"ok6iG{0#Wsgy枑~C:/r `DJ\!y6]rC2?~Lȃ˨[\K_`4K8ʩ#]D,-4\ԕOPY~<Sd@
-ȋ8H)X<VM~^bʛ]LjeGa\U3VupM$3h,|j]ˤOe}Q=GirCy2!ijMӄ p%!vR ߨb.T*D5{åly[F+-H$"yߤ읪8AF6z5O.(F|6
-Yk5=8Mg_
-!VB2G镙<vyMҷ٨82 \$,YBC3̞~[mP&Ƽ-'$6797U9rzu$GD)oG:qҶz {X9 #Aa?&v G4LجMfoq"]_UfF]N.sFf5us&XScaW!=$aUjI'o㉴*;Dv/:++o7N^\y+%onet_ʇy(:%DJ4ED6U8.R?m崑>1{Zk;d˝8n
-8+Tx;VlVY~P6xdxѺdsqo2mvq8 Ii2xB`)bz8#{$ ㉮
-NO :oԴ<ՌԈ0Dpqö|@ͧђZ9A]Go wv[#&_(/I:- vgvHuk ^fں,J//Rnkx<8Y.F6 ߖ>Ɨ+D-=;sxg l&j3κG`0r79S=.+X:NLs!x_ NZ[kM/FGuKNOd[+`NۣSmM; ?FzNjCfaZ"[΀(N|+87<?>ӂěj(a$#<HN֋MDz)e#֧㘞G
-r0YTf/T]hD˜,<J
-ޭ Tz t PwG_6TT׃r_nf|7kKvyk1b2̎l0. eP{/]WىC۵Au Y6Djr
-{YCRUR؝|(Cj` ?4MRŇnyN; y\R/9^j4-Op0=VMK8YJ`cx(+:5{X*g1F߄fF~]P*r.t
-
-ˉx
-&||B˜ TF63^jGbFGx(Mڇ+2:a|iˣ-7߄yQf-92<{ķfIB{G
-V eեC9]š'Pͣߔ[DGa\o >Dhȫ<i8#m4.i!>I?UQܶX[\Fװ"ٟ8<_ŊD[4,\mysbӤZO60-U},.\&ZP5jlb+jwO,(^E
-yyja s>OICfCFn
-tH<v d~r~U6>p9+9ncz!VG)vHje\a:(ݠI}3zM"cY _؀Ni#Y
-+[P"?~? V9DY">BZqpmYC<X2{CsT_Uύ,=l*n'+|۔ccΏ܈fl(ň,rKTU!V)F+?khyO!KR2S<E>QPɰ)qMQh !q!r2RėoH*%N^[z_HqVلt׿k9RJ3}(VsQ \AGAkwr!`X&O{JQt<']`tb!%^ip#6c<I!FNQÆ`3)Y8U/|K>gI"_w [3ҏW~Y?/\@>eʠNmxΏ>Mis)﷌>oyI8I9?s4ǎ 3D&*$5$BVzHHj7+,N7 ~0X; 'zX{.6!OꞿM1ʢyJċeZ`T^?q.σ`<<M^j
-ag-#+?SEfg] e<
- Zކ;h2(34KˢTQ"6B̈́e7 OڛLi[y΁ᆌEWYW}t iT)U 7<TIv9&%a%YjΔb;0* r%.;cIY'. _~qф);TMDR5lM<|Q?;o(gH{A
-H
--?d酑^r⢧B9L!krV6r3^ŸICHHM gUc r*Z]R)L %;]jصfli tCfɛBUJUm?OLH(SجiֶG#0#X;OuD q5/!3
-SHc.|#9a0p=JMI J}IW"u\5{yd ,oO(;HbVOCl*
-yԭ**zX! &IXc2L9}?a<`5ΌwknPgM`.`trW3v%\vmY-acL7P qM)&~㸥I$fOJ>.`fNtIX
-U*Bk CJnESdWOfC{90&+TٟReAmI65b6TNޜ:'
-X!ZcmhAtv<eikJs\ywԬZ8<%lVHLoƘ&<8 '!FVr,1g5%Yԣ~b@fMy [fp{GTu'tcdIcn8?v0,05IJix71V
-;O"U0frlrD)LrdaO͏wjMidvu{/o榡VߞUe|}%< lu|{ `؝:-Pܿ}7]1.3vNCYYH(]*'>E,ލ%9WX$~;qίcujo :57at
- xɟx恭FWVR)؏6 K%MބypCM8mgd/,%@&
-L\dZP՝U:0YɁpݔA.'vrJQx{E>&I MH5Kԛh}gpx'F
-ޭڹOvaO?'`"p'J&
- #vd`wU&INPib}g/ˬO )*yO+&7n
-?R1Tkwccd;WRMo0黓1%tε23h}'=r i&pIl4f)U@^}Ld_S}B9mL|(cjҼ#<;N+"L.+$Qo]!LL-8 d¦k5-G㷵)20@LWSyϵ"Mk3?Ĺ%Aδ0tXSm Ө[nU58\oj2jZhB9n&{IWSO\[^>y)*yqŎx6RHmwbB[S׫HjfQtG*bxIJݘBW?h.To7xmD`,6!Ί^yFl(LW0 Y5;J\êo3s- WLK3
-L$#']98f4d#:.uXߠiCLdԮDC\c/_tҽxZe& dE;vYπ*yW(`i:uQjٵ*iIxAn]Ѱ}W|a\TDі/.0FPãmq7:hv{,JVKZ'0 ]F@32 چx MqsQ|Ҋs:!O15:@藵i?Q2L%{29xP]Cһ6u]U0v|5sWd8R?{iA#t#ȁyg|uw@pMiyV
-S ͝$(kWBqP=%BSl'7-Q1A<JiY~uY{{qzlr@Gc9q҂<?'0:::Z&Zendstream
-endobj
-2865 0 obj <<
+/Length 14465
+/Filter /FlateDecode
+>>
+stream
+xUXͶpKиC;A5ڸk { wMpoY<<nfWU|*2e5&S;c33?@LAMM+Jhlig+n D\qn~N~Vn$*3V$ `labٙX=" @O8TN@GW)3` 4EbI_aSr::
+z"lnbB_u V?_r V.!/[V!/[y4G[KBT݋ |=\>dD [K(#n+5qqAKY_W@;iaD *!W`Ή8$p#.MpU
+3iٖ-ʰѺ(6%4mrp
+ gŦܢƔbg<aA\:<5?\-VջĶ8GaB)%ە<p밉>Osml`#&JImzV;54S{lquD4b"'y^uƠ}ou0HҘ}dߥ@!I2[z|o5[:Z8 )UEh2急?bx:+ 3Rb }PGA0 ,О^ J9+J4۪"9dYIJ ~=a+O\N}_ HH[>BAjir$!GVϹ♐WA1{8Eqx7bO_Bp `k2r(7x I" y Yv(z6nB{M˜S|CtZ0^'xC}Xp>-t Y1 =݃ŁgwO2P=tF.)牳@˜HDU_y8h>~%xՈ3uy<f rR*Z)%.j.Krcb"8]E/ '(5i%G #+î+K׎H$<gkgI/4Kޝ:ו6ExoCg';9omf/hT]5ZgoMr%="SȟHPQ{xb1-YMUuۨR)HsV\pB<4ݭl=K rt:_*ȣeHR'5Vs[.11<M% =b) ĶrĈRqR|7_&؋OEOx1kukrH"Nc]cI:B먺wxO ..%,<6yHEQ"Еra-O̿柌lXbйWpn3z v’JS[{}hy([Oek/eU(ο!oZXRi7{W1ub>=EnΆv}{3i6v5w~GqmNw..;?8:2\ stILњqڸzc@2+ {p(o&21뤲H$+ˢi^,FO)&PmXk;eTk҈l:R=q O6>+|m1E~$x4w]݇\k0:^!ÄIlDDeenWkO^1X+^9 \Zej{:+SyvCc8Z.[0nEא:r
+d.~<7fHLw9ßW~Nd{ bc-"kY‹佯V$,Ұ^ ZBEU]i3!n"B@?
+*4)JTk >w9'v;9?.!q6׎K2ezL9+gWwICķIQb6m(Iq40y*Au;eA
+5'z[.dzM{lʛƥ>X [qثw1Ķ=h|,D3V[[Et֗q'Jq!ˑM]QP1L@"Q8NnuW򨄛|E?EwyԌg2qIЕK%[LrGe\קI(n.}V5$H6xbGkY
+$T?{xX1-hO ԪUD~3j^xPx`N_ۦ`bHa'/>BJ%~^,\A)r,d(ˆ˳:BXECr?ǒ&*zoKg1f.P:"rXL[*5_b![E=Y)҆dL0DCcF笲YK)Z}!w{%#S_sJ9ہG~g>k/@2VJT])<-:MIc zx,om)σEgzTf8a*::s3IY5"O1;_^O٘Jxd)"`Ք:Ǯ PR: [ɖ#aBv tL7ӭZݫn+ء9^J4cǣb\RvqoE#K[9^]k,D֍HvwKx"#2
+4TEWH{S:ۡ.3ZOedօ̷iSyTLٲg#^crg=9
+Ә 9fAjq_yRԱUIY3 ~.?DeJ'I0-N]QO@Nq:`><b,!ԆnbL'p^=('K=gH
+̮&Ճ}bd bf1pIx=?ܻo;OA {Q y~8~PPS!+d
+Y %-}F1XjڅaVzZC֗c.UN\YJ.NxbN=vހ'SywgQVjEg̍|b6:.?~cfX!@p^~N`8EjYyHY} L< O!+`6s ņGӂcNmѪ0LV ~'(n30F2J+WY%)/kmf6O7H❭P3<ar'АgՏf8gWWd=eJ> Wљ*rÑ_+1 m?! #Oa;6۝snov
+{uYߑU~FGա[d$!sZ&PAlgʖ4xȪgˎ-DתR
+UpOήff9g2|'Ŋ`V^_ YNu9"P.aŌSa_D
+P\(aB& }Bѧ cmaHGgL\\ympcM%;'0$rJw$LCTǒ|]AD*쾙NĠTN:*{js2M<l->복*Njf*iL5E2! y0%nlV
+(Ffhʿ/|&=ė]0u#?sj y
+LC
+BSijL=~ΐՂz
+%X 5fy/~}.cT߂TڛuT4l_K&"c؎ר
+޷YhA.TzDŠdP~ܿO ۢ|W/|b)V%&Wdd
+sFAfE;hSKJ}>w (oByZɺp9Q
+)# q(
+:Nb&yTEKyӒAu
+{?ɴȹ&juۿa`NħUeT 3Cv%y瑟_@q#r6j*'I4BXPUq@;c) 6B Of</D&6Кa( Mjɐ&
+Ͼa3ޯeP5=̵Kͣ1l0F FGb@e2g
+x "Α嗉Y/U[~{붐i?Ũ)} #*J>YO;'JOeE.C Q<z} a#G2D8PuxVK?~|U1[[MVcUzx4)QB Pf,Y?}k2L6`,-o?Ce`VԂ5߶;?vi) ()VTaKq CB JvtX0kMEn.x|_k5!ŗT$i~O >ۊ'D)L{X4-KY/n4Z82Ob UP8ZӴe4w%f$TVgܷg<$$E8պW:<~0XvACVw}8']j4<;oJYEGuz7Pvs#gDRQJΚPat
+,YxUų^%
+/wdֹUF"@ٷض—^Y)qgyF;Vsg>s>VD (NjG KLrr
+M!DUu 㤈8 jʎ6HPTLIt^72[󵟹g!'\ 4oy.5.g 'J\EBT^yw1m-^eY\ƨ+a{4zܞ%-b/m}:ȸ?v,(
+,O\#؛Ɨnm=Ϊ n/9Y-Mq5iӍhd~37Qq
+L"}X|n@O]'mĚ$pU/VٕbPCp2{1}Q,vM*Ϡ"Fwbi!)^^%\|}<92dJ(B\Ar:7EՕԝi쒝
+߯ ;Ӄ>]|: ͨ[b ^}qjbX@.o*X4U+}z%S
+:] Ug5/uYC@߯;q=)v|C ֮ISڈ:SB):Gy43:Oc煮SqJSU Ǧtӥq
+ j&hѵx|;+/0^X1u SNb{pajO\s.bT%ؘ}8лtRh44G+m0,:~i`,'dȾnH$.
+Mw,[BfAP.UjUR$5(YxZ0lRd+2K~VVѢxV*EՇxΉ3+H)Bg?v 4!;ymrU#K9e E_3E>uT<Y4A{f1uݬ㈡r#R9#Pȴp9Ut{h6:%
+2S?ə欽Sa+)
+r<ޏIfq
+$ FPϘ A\։YOO_\}uasOQFͨ(IG@X!]x-їJՠ{S*T zFTͦhce
+Oځzc߃j!wޝҤ~K{
+ꨵ5Bٻ0{ofqvyyWf}$S3>C!¯[_[L|MAހkQ.]F%N:͉dTEF8uB(ַ/0Z!Qd]9 ]WY+k4 ɝ~Ev{Q[Ņsn (\ntY`iUyT#]r*U5t}oCs+ET-1Dta3*E;Qwi]x7jBOu2 CK'ASm_T~D7
+^U"Y y/Ve=bzٴY=$gmrm{9?PzL{UBdēn6gݽԵXdKX4yofz4 YC^FG}.JK'v;xޛZA+VegZ!\-
+$Ǥ4(GH~[\B ט9zʥҐhԪrB9-w\HRT kZ+=InRT~%G,A<֏Xɫ}r9,d1(/iEvqb+n«qsg{ l(BH2-ֳ/ӺF o2FXajӈ*57I/3~fy}qZp:c2zަQ=m١E[_7k0EwRl5$pQx`~6](,jcHwuvw˒|5}O%g T,y59?BA9=%2ĺLWE~.Hg,kM'f׻ &-q$Xc6ɼsVib~6aFz9_Ձa돟ZM3XрwѠNFh(˚$P
+akl۔OHvc/[hSԮ+K~-m%C0:lAB7Sv o|%432' 1Z>1@zmf|Kjk:t; |s
+Ƹ6Ef>]ų+,sζvЌ`?MeoqؒN24cbق</k0LJԂ[_y1԰=Yv6-c6Z} EѶ 'm3uk\E]aF;NV W|ovN],Ic9[}/ $Z)_~f%r9Rep>)?2b^أFK>'7Ne |W2b1htu^;D؍?#K$fo%%cz~LzѨ
+?f*¿2^*iPg]c*)"e&jC)?|Z1 r (%xΟ5dYF7cjɽ!1O#ظRԷ#Q@1rHep
+= Ȥ!"Յ7޳gb}4r}e4\5[}dl/vMS餇C猦_ߤ_6vd<IU>vX!*Tz۽N'%Z,!Ux_g]
+Kp {%
+U/T=|j`l|4<U9) d*,ƷX4L%(# |n3ehȢD`/w uȗVZ:d˽ݗ.ZQoaLӇf>C
+cDryŎ#ЕqVʾZ/f]!QNhARX_0QUDFH}(Qɦ.M]r, qh?M eF>i=oO('Uɢ$1 o ;@uM#xy}JY&Db0 ̖'<Gr^xhf@G"ΣqCc#^ X/ omlbm3HJ{,_ ;'s|ϊjO^p;L@SXHr^hU_2TMFN2eU
+NmK?t`j{f$.  s@9{]ezAq=jtUw 5?
+endobj
+2965 0 obj <<
/Type /Font
/Subtype /Type1
-/Encoding 6699 0 R
+/Encoding 7218 0 R
/FirstChar 11
/LastChar 123
-/Widths 6720 0 R
-/BaseFont /GYYQTM+CMSSBX10
-/FontDescriptor 2863 0 R
+/Widths 7237 0 R
+/BaseFont /AVPTWX+CMSSBX10
+/FontDescriptor 2963 0 R
>> endobj
-2863 0 obj <<
+2963 0 obj <<
/Ascent 694
/CapHeight 694
/Descent -194
-/FontName /GYYQTM+CMSSBX10
+/FontName /AVPTWX+CMSSBX10
/ItalicAngle 0
/StemV 136
/XHeight 458
/FontBBox [-71 -250 1099 780]
/Flags 4
-/CharSet (/ff/fi/fl/exclam/quotedblright/dollar/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash)
-/FontFile 2864 0 R
+/CharSet (/ff/fi/fl/ffi/exclam/quotedblright/dollar/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash)
+/FontFile 2964 0 R
>> endobj
-6720 0 obj
-[642 586 586 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 367 558 0 550 0 0 306 428 428 550 856 306 367 306 550 550 550 550 550 550 550 550 550 550 550 306 306 0 856 0 519 733 733 733 703 794 642 611 733 794 331 519 764 581 978 794 794 703 794 703 611 733 764 733 1039 733 733 672 343 0 343 0 0 0 525 561 489 561 511 336 550 561 256 286 531 256 867 561 550 561 561 372 422 404 561 500 744 500 500 476 550 ]
+7237 0 obj
+[642 586 586 892 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 367 558 0 550 0 0 306 428 428 550 856 306 367 306 550 550 550 550 550 550 550 550 550 550 550 306 306 0 856 0 519 733 733 733 703 794 642 611 733 794 331 519 764 581 978 794 794 703 794 703 611 733 764 733 1039 733 733 672 343 0 343 0 0 0 525 561 489 561 511 336 550 561 256 286 531 256 867 561 550 561 561 372 422 404 561 500 744 500 500 476 550 ]
endobj
-2869 0 obj <<
+2969 0 obj <<
/Type /Pages
/Count 6
-/Parent 6721 0 R
-/Kids [2858 0 R 2871 0 R 2885 0 R 2963 0 R 3038 0 R 3068 0 R]
+/Parent 7238 0 R
+/Kids [2958 0 R 2971 0 R 2985 0 R 2991 0 R 3029 0 R 3064 0 R]
>> endobj
-3158 0 obj <<
+3126 0 obj <<
/Type /Pages
/Count 6
-/Parent 6721 0 R
-/Kids [3107 0 R 3160 0 R 3210 0 R 3265 0 R 3318 0 R 3368 0 R]
+/Parent 7238 0 R
+/Kids [3100 0 R 3138 0 R 3177 0 R 3185 0 R 3225 0 R 3278 0 R]
>> endobj
-3471 0 obj <<
+3386 0 obj <<
/Type /Pages
/Count 6
-/Parent 6721 0 R
-/Kids [3421 0 R 3473 0 R 3525 0 R 3571 0 R 3624 0 R 3676 0 R]
+/Parent 7238 0 R
+/Kids [3330 0 R 3388 0 R 3438 0 R 3493 0 R 3548 0 R 3601 0 R]
>> endobj
-3770 0 obj <<
+3706 0 obj <<
/Type /Pages
/Count 6
-/Parent 6721 0 R
-/Kids [3727 0 R 3772 0 R 3820 0 R 3855 0 R 3859 0 R 3866 0 R]
+/Parent 7238 0 R
+/Kids [3655 0 R 3708 0 R 3759 0 R 3814 0 R 3861 0 R 3910 0 R]
>> endobj
-3881 0 obj <<
+3995 0 obj <<
/Type /Pages
/Count 6
-/Parent 6721 0 R
-/Kids [3872 0 R 3883 0 R 3889 0 R 3900 0 R 3913 0 R 3919 0 R]
+/Parent 7238 0 R
+/Kids [3958 0 R 3997 0 R 4001 0 R 4007 0 R 4012 0 R 4020 0 R]
>> endobj
-3928 0 obj <<
+4039 0 obj <<
/Type /Pages
/Count 6
-/Parent 6721 0 R
-/Kids [3924 0 R 3930 0 R 3934 0 R 3941 0 R 3949 0 R 3959 0 R]
+/Parent 7238 0 R
+/Kids [4028 0 R 4041 0 R 4054 0 R 4064 0 R 4071 0 R 4076 0 R]
>> endobj
-3984 0 obj <<
+4085 0 obj <<
/Type /Pages
/Count 6
-/Parent 6722 0 R
-/Kids [3977 0 R 3987 0 R 3996 0 R 4002 0 R 4010 0 R 4015 0 R]
+/Parent 7239 0 R
+/Kids [4080 0 R 4087 0 R 4093 0 R 4103 0 R 4112 0 R 4130 0 R]
>> endobj
-4028 0 obj <<
+4144 0 obj <<
/Type /Pages
/Count 6
-/Parent 6722 0 R
-/Kids [4022 0 R 4030 0 R 4035 0 R 4043 0 R 4051 0 R 4055 0 R]
+/Parent 7239 0 R
+/Kids [4136 0 R 4146 0 R 4151 0 R 4161 0 R 4165 0 R 4172 0 R]
>> endobj
-4069 0 obj <<
+4197 0 obj <<
/Type /Pages
/Count 6
-/Parent 6722 0 R
-/Kids [4064 0 R 4071 0 R 4083 0 R 4091 0 R 4098 0 R 4105 0 R]
+/Parent 7239 0 R
+/Kids [4184 0 R 4199 0 R 4206 0 R 4215 0 R 4226 0 R 4231 0 R]
>> endobj
-4118 0 obj <<
+4246 0 obj <<
/Type /Pages
/Count 6
-/Parent 6722 0 R
-/Kids [4111 0 R 4120 0 R 4127 0 R 4135 0 R 4140 0 R 4146 0 R]
+/Parent 7239 0 R
+/Kids [4238 0 R 4248 0 R 4259 0 R 4266 0 R 4274 0 R 4281 0 R]
>> endobj
-4163 0 obj <<
+4292 0 obj <<
/Type /Pages
/Count 6
-/Parent 6722 0 R
-/Kids [4152 0 R 4165 0 R 4177 0 R 4189 0 R 4197 0 R 4205 0 R]
+/Parent 7239 0 R
+/Kids [4286 0 R 4294 0 R 4302 0 R 4308 0 R 4312 0 R 4323 0 R]
>> endobj
-4224 0 obj <<
+4337 0 obj <<
/Type /Pages
/Count 6
-/Parent 6722 0 R
-/Kids [4217 0 R 4226 0 R 4230 0 R 4236 0 R 4248 0 R 4253 0 R]
+/Parent 7239 0 R
+/Kids [4331 0 R 4339 0 R 4345 0 R 4350 0 R 4354 0 R 4360 0 R]
>> endobj
-4261 0 obj <<
+4382 0 obj <<
/Type /Pages
/Count 6
-/Parent 6723 0 R
-/Kids [4258 0 R 4263 0 R 4269 0 R 4274 0 R 4281 0 R 4293 0 R]
+/Parent 7240 0 R
+/Kids [4375 0 R 4384 0 R 4395 0 R 4399 0 R 4407 0 R 4414 0 R]
>> endobj
-4302 0 obj <<
+4431 0 obj <<
/Type /Pages
/Count 6
-/Parent 6723 0 R
-/Kids [4298 0 R 4304 0 R 4310 0 R 4322 0 R 4329 0 R 4334 0 R]
+/Parent 7240 0 R
+/Kids [4425 0 R 4433 0 R 4439 0 R 4445 0 R 4454 0 R 4464 0 R]
>> endobj
-4346 0 obj <<
+4474 0 obj <<
/Type /Pages
/Count 6
-/Parent 6723 0 R
-/Kids [4341 0 R 4348 0 R 4354 0 R 4360 0 R 4365 0 R 4373 0 R]
+/Parent 7240 0 R
+/Kids [4470 0 R 4476 0 R 4480 0 R 4486 0 R 4491 0 R 4497 0 R]
>> endobj
-4390 0 obj <<
+4513 0 obj <<
/Type /Pages
/Count 6
-/Parent 6723 0 R
-/Kids [4384 0 R 4392 0 R 4397 0 R 4402 0 R 4407 0 R 4414 0 R]
+/Parent 7240 0 R
+/Kids [4509 0 R 4515 0 R 4521 0 R 4532 0 R 4540 0 R 4550 0 R]
>> endobj
-4426 0 obj <<
+4562 0 obj <<
/Type /Pages
/Count 6
-/Parent 6723 0 R
-/Kids [4421 0 R 4429 0 R 4438 0 R 4453 0 R 4458 0 R 4463 0 R]
+/Parent 7240 0 R
+/Kids [4558 0 R 4564 0 R 4569 0 R 4576 0 R 4582 0 R 4588 0 R]
>> endobj
-4482 0 obj <<
+4600 0 obj <<
/Type /Pages
/Count 6
-/Parent 6723 0 R
-/Kids [4478 0 R 4484 0 R 4492 0 R 4498 0 R 4506 0 R 4515 0 R]
+/Parent 7240 0 R
+/Kids [4594 0 R 4603 0 R 4611 0 R 4621 0 R 4632 0 R 4636 0 R]
>> endobj
-4525 0 obj <<
+4646 0 obj <<
/Type /Pages
/Count 6
-/Parent 6724 0 R
-/Kids [4520 0 R 4527 0 R 4533 0 R 4539 0 R 4545 0 R 4553 0 R]
+/Parent 7241 0 R
+/Kids [4642 0 R 4649 0 R 4655 0 R 4662 0 R 4669 0 R 4678 0 R]
>> endobj
-4568 0 obj <<
+4689 0 obj <<
/Type /Pages
/Count 6
-/Parent 6724 0 R
-/Kids [4562 0 R 4570 0 R 4575 0 R 4581 0 R 4592 0 R 4596 0 R]
+/Parent 7241 0 R
+/Kids [4683 0 R 4692 0 R 4700 0 R 4710 0 R 4721 0 R 4726 0 R]
>> endobj
-4612 0 obj <<
+4736 0 obj <<
/Type /Pages
/Count 6
-/Parent 6724 0 R
-/Kids [4605 0 R 4614 0 R 4621 0 R 4631 0 R 4640 0 R 4647 0 R]
+/Parent 7241 0 R
+/Kids [4731 0 R 4738 0 R 4745 0 R 4752 0 R 4759 0 R 4765 0 R]
>> endobj
-4662 0 obj <<
+4779 0 obj <<
/Type /Pages
/Count 6
-/Parent 6724 0 R
-/Kids [4654 0 R 4664 0 R 4673 0 R 4681 0 R 4686 0 R 4692 0 R]
+/Parent 7241 0 R
+/Kids [4773 0 R 4781 0 R 4790 0 R 4796 0 R 4801 0 R 4811 0 R]
>> endobj
-4700 0 obj <<
+4825 0 obj <<
/Type /Pages
/Count 6
-/Parent 6724 0 R
-/Kids [4697 0 R 4702 0 R 4711 0 R 4719 0 R 4724 0 R 4731 0 R]
+/Parent 7241 0 R
+/Kids [4817 0 R 4827 0 R 4835 0 R 4839 0 R 4844 0 R 4850 0 R]
>> endobj
-4739 0 obj <<
+4866 0 obj <<
/Type /Pages
/Count 6
-/Parent 6724 0 R
-/Kids [4736 0 R 4741 0 R 4747 0 R 4753 0 R 4766 0 R 4774 0 R]
+/Parent 7241 0 R
+/Kids [4858 0 R 4869 0 R 4877 0 R 4887 0 R 4896 0 R 4908 0 R]
>> endobj
-4786 0 obj <<
+4920 0 obj <<
/Type /Pages
/Count 6
-/Parent 6725 0 R
-/Kids [4781 0 R 4788 0 R 4797 0 R 4803 0 R 4812 0 R 4817 0 R]
+/Parent 7242 0 R
+/Kids [4915 0 R 4922 0 R 4929 0 R 4934 0 R 4939 0 R 4948 0 R]
>> endobj
-4830 0 obj <<
+4960 0 obj <<
/Type /Pages
/Count 6
-/Parent 6725 0 R
-/Kids [4823 0 R 4832 0 R 4837 0 R 4843 0 R 4857 0 R 4863 0 R]
+/Parent 7242 0 R
+/Kids [4955 0 R 4962 0 R 4968 0 R 4973 0 R 4977 0 R 4984 0 R]
>> endobj
-4873 0 obj <<
+4997 0 obj <<
/Type /Pages
/Count 6
-/Parent 6725 0 R
-/Kids [4869 0 R 4875 0 R 4880 0 R 4885 0 R 4893 0 R 4899 0 R]
+/Parent 7242 0 R
+/Kids [4992 0 R 4999 0 R 5004 0 R 5011 0 R 5020 0 R 5024 0 R]
>> endobj
-4909 0 obj <<
+5034 0 obj <<
/Type /Pages
/Count 6
-/Parent 6725 0 R
-/Kids [4904 0 R 4911 0 R 4917 0 R 4922 0 R 4930 0 R 4936 0 R]
+/Parent 7242 0 R
+/Kids [5029 0 R 5036 0 R 5042 0 R 5061 0 R 5068 0 R 5075 0 R]
>> endobj
-4945 0 obj <<
+5089 0 obj <<
/Type /Pages
/Count 6
-/Parent 6725 0 R
-/Kids [4941 0 R 4947 0 R 4953 0 R 4963 0 R 4967 0 R 4973 0 R]
+/Parent 7242 0 R
+/Kids [5081 0 R 5091 0 R 5096 0 R 5102 0 R 5110 0 R 5118 0 R]
>> endobj
-4982 0 obj <<
+5130 0 obj <<
/Type /Pages
/Count 6
-/Parent 6725 0 R
-/Kids [4978 0 R 4984 0 R 4989 0 R 4995 0 R 5000 0 R 5006 0 R]
+/Parent 7242 0 R
+/Kids [5124 0 R 5132 0 R 5137 0 R 5145 0 R 5150 0 R 5156 0 R]
>> endobj
-5016 0 obj <<
+5176 0 obj <<
/Type /Pages
/Count 6
-/Parent 6726 0 R
-/Kids [5011 0 R 5018 0 R 5039 0 R 5044 0 R 5048 0 R 5054 0 R]
+/Parent 7243 0 R
+/Kids [5169 0 R 5178 0 R 5183 0 R 5188 0 R 5192 0 R 5202 0 R]
>> endobj
-5062 0 obj <<
+5210 0 obj <<
/Type /Pages
/Count 6
-/Parent 6726 0 R
-/Kids [5059 0 R 5064 0 R 5068 0 R 5078 0 R 5088 0 R 5094 0 R]
+/Parent 7243 0 R
+/Kids [5207 0 R 5212 0 R 5217 0 R 5223 0 R 5229 0 R 5234 0 R]
>> endobj
-5108 0 obj <<
+5246 0 obj <<
/Type /Pages
/Count 6
-/Parent 6726 0 R
-/Kids [5100 0 R 5110 0 R 5120 0 R 5131 0 R 5136 0 R 5143 0 R]
+/Parent 7243 0 R
+/Kids [5242 0 R 5248 0 R 5256 0 R 5261 0 R 5266 0 R 5275 0 R]
>> endobj
-5154 0 obj <<
+5285 0 obj <<
/Type /Pages
/Count 6
-/Parent 6726 0 R
-/Kids [5149 0 R 5157 0 R 5164 0 R 5176 0 R 5186 0 R 5195 0 R]
+/Parent 7243 0 R
+/Kids [5281 0 R 5287 0 R 5292 0 R 5297 0 R 5302 0 R 5307 0 R]
>> endobj
-5208 0 obj <<
+5317 0 obj <<
/Type /Pages
/Count 6
-/Parent 6726 0 R
-/Kids [5200 0 R 5210 0 R 5218 0 R 5223 0 R 5231 0 R 5241 0 R]
+/Parent 7243 0 R
+/Kids [5312 0 R 5319 0 R 5325 0 R 5330 0 R 5334 0 R 5340 0 R]
>> endobj
-5257 0 obj <<
+5365 0 obj <<
/Type /Pages
/Count 6
-/Parent 6726 0 R
-/Kids [5251 0 R 5261 0 R 5272 0 R 5277 0 R 5282 0 R 5290 0 R]
+/Parent 7243 0 R
+/Kids [5356 0 R 5370 0 R 5375 0 R 5380 0 R 5385 0 R 5390 0 R]
>> endobj
-5300 0 obj <<
+5397 0 obj <<
/Type /Pages
/Count 6
-/Parent 6727 0 R
-/Kids [5295 0 R 5302 0 R 5309 0 R 5321 0 R 5333 0 R 5341 0 R]
+/Parent 7244 0 R
+/Kids [5394 0 R 5399 0 R 5409 0 R 5418 0 R 5426 0 R 5430 0 R]
>> endobj
-5357 0 obj <<
+5444 0 obj <<
/Type /Pages
/Count 6
-/Parent 6727 0 R
-/Kids [5349 0 R 5359 0 R 5366 0 R 5373 0 R 5378 0 R 5385 0 R]
+/Parent 7244 0 R
+/Kids [5437 0 R 5446 0 R 5456 0 R 5462 0 R 5470 0 R 5478 0 R]
>> endobj
-5398 0 obj <<
+5489 0 obj <<
/Type /Pages
/Count 6
-/Parent 6727 0 R
-/Kids [5390 0 R 5400 0 R 5405 0 R 5410 0 R 5420 0 R 5430 0 R]
+/Parent 7244 0 R
+/Kids [5485 0 R 5491 0 R 5498 0 R 5509 0 R 5515 0 R 5528 0 R]
>> endobj
-5448 0 obj <<
+5540 0 obj <<
/Type /Pages
/Count 6
-/Parent 6727 0 R
-/Kids [5436 0 R 5450 0 R 5456 0 R 5461 0 R 5469 0 R 5475 0 R]
+/Parent 7244 0 R
+/Kids [5533 0 R 5542 0 R 5550 0 R 5555 0 R 5562 0 R 5578 0 R]
>> endobj
-5487 0 obj <<
+5598 0 obj <<
/Type /Pages
/Count 6
-/Parent 6727 0 R
-/Kids [5482 0 R 5489 0 R 5496 0 R 5503 0 R 5511 0 R 5518 0 R]
+/Parent 7244 0 R
+/Kids [5589 0 R 5601 0 R 5609 0 R 5617 0 R 5623 0 R 5630 0 R]
>> endobj
-5548 0 obj <<
+5641 0 obj <<
/Type /Pages
/Count 6
-/Parent 6727 0 R
-/Kids [5532 0 R 5550 0 R 5564 0 R 5578 0 R 5605 0 R 5615 0 R]
+/Parent 7244 0 R
+/Kids [5634 0 R 5644 0 R 5654 0 R 5664 0 R 5677 0 R 5689 0 R]
>> endobj
-5629 0 obj <<
+5707 0 obj <<
/Type /Pages
/Count 6
-/Parent 6728 0 R
-/Kids [5624 0 R 5631 0 R 5637 0 R 5644 0 R 5654 0 R 5660 0 R]
+/Parent 7245 0 R
+/Kids [5699 0 R 5711 0 R 5721 0 R 5728 0 R 5737 0 R 5744 0 R]
>> endobj
-5668 0 obj <<
+5756 0 obj <<
/Type /Pages
/Count 6
-/Parent 6728 0 R
-/Kids [5665 0 R 5670 0 R 5674 0 R 5678 0 R 5682 0 R 5686 0 R]
+/Parent 7245 0 R
+/Kids [5752 0 R 5758 0 R 5763 0 R 5770 0 R 5780 0 R 5786 0 R]
>> endobj
-5694 0 obj <<
+5799 0 obj <<
/Type /Pages
/Count 6
-/Parent 6728 0 R
-/Kids [5691 0 R 5696 0 R 5716 0 R 5721 0 R 5729 0 R 5737 0 R]
+/Parent 7245 0 R
+/Kids [5790 0 R 5802 0 R 5812 0 R 5821 0 R 5826 0 R 5839 0 R]
>> endobj
-5751 0 obj <<
+5849 0 obj <<
/Type /Pages
/Count 6
-/Parent 6728 0 R
-/Kids [5745 0 R 5754 0 R 5762 0 R 5770 0 R 5777 0 R 5785 0 R]
+/Parent 7245 0 R
+/Kids [5845 0 R 5851 0 R 5862 0 R 5869 0 R 5876 0 R 5882 0 R]
>> endobj
-5801 0 obj <<
+5895 0 obj <<
/Type /Pages
/Count 6
-/Parent 6728 0 R
-/Kids [5791 0 R 5803 0 R 5815 0 R 5822 0 R 5829 0 R 5836 0 R]
+/Parent 7245 0 R
+/Kids [5891 0 R 5897 0 R 5905 0 R 5912 0 R 5925 0 R 5942 0 R]
>> endobj
-5852 0 obj <<
+5966 0 obj <<
/Type /Pages
/Count 6
-/Parent 6728 0 R
-/Kids [5845 0 R 5854 0 R 5860 0 R 5870 0 R 5877 0 R 5881 0 R]
+/Parent 7245 0 R
+/Kids [5954 0 R 5968 0 R 5993 0 R 6001 0 R 6008 0 R 6015 0 R]
>> endobj
-5897 0 obj <<
+6026 0 obj <<
/Type /Pages
/Count 6
-/Parent 6729 0 R
-/Kids [5889 0 R 5899 0 R 5905 0 R 5909 0 R 5915 0 R 5927 0 R]
+/Parent 7246 0 R
+/Kids [6021 0 R 6028 0 R 6034 0 R 6041 0 R 6048 0 R 6053 0 R]
>> endobj
-5939 0 obj <<
+6071 0 obj <<
/Type /Pages
/Count 6
-/Parent 6729 0 R
-/Kids [5934 0 R 5941 0 R 5945 0 R 5955 0 R 5961 0 R 5968 0 R]
+/Parent 7246 0 R
+/Kids [6063 0 R 6073 0 R 6083 0 R 6104 0 R 6113 0 R 6118 0 R]
>> endobj
-5983 0 obj <<
+6131 0 obj <<
/Type /Pages
/Count 6
-/Parent 6729 0 R
-/Kids [5975 0 R 5985 0 R 5999 0 R 6008 0 R 6016 0 R 6023 0 R]
+/Parent 7246 0 R
+/Kids [6125 0 R 6134 0 R 6142 0 R 6154 0 R 6160 0 R 6170 0 R]
>> endobj
-6039 0 obj <<
+6180 0 obj <<
/Type /Pages
/Count 6
-/Parent 6729 0 R
-/Kids [6030 0 R 6041 0 R 6057 0 R 6061 0 R 6083 0 R 6097 0 R]
+/Parent 7246 0 R
+/Kids [6175 0 R 6182 0 R 6190 0 R 6196 0 R 6204 0 R 6211 0 R]
>> endobj
-6112 0 obj <<
+6227 0 obj <<
/Type /Pages
/Count 6
-/Parent 6729 0 R
-/Kids [6105 0 R 6114 0 R 6122 0 R 6131 0 R 6135 0 R 6143 0 R]
+/Parent 7246 0 R
+/Kids [6217 0 R 6229 0 R 6234 0 R 6241 0 R 6249 0 R 6253 0 R]
>> endobj
-6152 0 obj <<
+6265 0 obj <<
/Type /Pages
/Count 6
-/Parent 6729 0 R
-/Kids [6149 0 R 6154 0 R 6160 0 R 6166 0 R 6172 0 R 6176 0 R]
+/Parent 7246 0 R
+/Kids [6262 0 R 6267 0 R 6273 0 R 6279 0 R 6284 0 R 6294 0 R]
>> endobj
-6186 0 obj <<
+6308 0 obj <<
/Type /Pages
/Count 6
-/Parent 6730 0 R
-/Kids [6180 0 R 6188 0 R 6192 0 R 6200 0 R 6207 0 R 6216 0 R]
+/Parent 7247 0 R
+/Kids [6302 0 R 6310 0 R 6314 0 R 6322 0 R 6328 0 R 6334 0 R]
>> endobj
-6227 0 obj <<
+6347 0 obj <<
/Type /Pages
/Count 6
-/Parent 6730 0 R
-/Kids [6224 0 R 6229 0 R 6235 0 R 6241 0 R 6248 0 R 6253 0 R]
+/Parent 7247 0 R
+/Kids [6342 0 R 6349 0 R 6358 0 R 6364 0 R 6377 0 R 6386 0 R]
>> endobj
-6262 0 obj <<
+6398 0 obj <<
/Type /Pages
/Count 6
-/Parent 6730 0 R
-/Kids [6259 0 R 6264 0 R 6271 0 R 6279 0 R 6283 0 R 6291 0 R]
+/Parent 7247 0 R
+/Kids [6393 0 R 6400 0 R 6406 0 R 6414 0 R 6423 0 R 6434 0 R]
>> endobj
-6304 0 obj <<
+6465 0 obj <<
/Type /Pages
/Count 6
-/Parent 6730 0 R
-/Kids [6299 0 R 6306 0 R 6311 0 R 6315 0 R 6324 0 R 6330 0 R]
+/Parent 7247 0 R
+/Kids [6448 0 R 6467 0 R 6481 0 R 6488 0 R 6495 0 R 6504 0 R]
>> endobj
-6342 0 obj <<
+6516 0 obj <<
/Type /Pages
/Count 6
-/Parent 6730 0 R
-/Kids [6336 0 R 6344 0 R 6372 0 R 6379 0 R 6383 0 R 6389 0 R]
+/Parent 7247 0 R
+/Kids [6513 0 R 6518 0 R 6524 0 R 6531 0 R 6536 0 R 6540 0 R]
>> endobj
-6406 0 obj <<
+6551 0 obj <<
/Type /Pages
/Count 6
-/Parent 6730 0 R
-/Kids [6399 0 R 6408 0 R 6417 0 R 6421 0 R 6428 0 R 6436 0 R]
+/Parent 7247 0 R
+/Kids [6546 0 R 6553 0 R 6559 0 R 6563 0 R 6567 0 R 6572 0 R]
>> endobj
-6457 0 obj <<
+6581 0 obj <<
/Type /Pages
/Count 6
-/Parent 6731 0 R
-/Kids [6442 0 R 6459 0 R 6468 0 R 6476 0 R 6487 0 R 6494 0 R]
+/Parent 7248 0 R
+/Kids [6578 0 R 6583 0 R 6589 0 R 6598 0 R 6605 0 R 6613 0 R]
>> endobj
-6510 0 obj <<
+6621 0 obj <<
/Type /Pages
/Count 6
-/Parent 6731 0 R
-/Kids [6504 0 R 6512 0 R 6516 0 R 6535 0 R 6548 0 R 6555 0 R]
+/Parent 7248 0 R
+/Kids [6618 0 R 6623 0 R 6629 0 R 6635 0 R 6641 0 R 6646 0 R]
>> endobj
-6566 0 obj <<
+6660 0 obj <<
/Type /Pages
/Count 6
-/Parent 6731 0 R
-/Kids [6561 0 R 6568 0 R 6576 0 R 6581 0 R 6589 0 R 6602 0 R]
+/Parent 7248 0 R
+/Kids [6655 0 R 6662 0 R 6666 0 R 6673 0 R 6683 0 R 6687 0 R]
>> endobj
-6623 0 obj <<
+6704 0 obj <<
/Type /Pages
/Count 6
-/Parent 6731 0 R
-/Kids [6614 0 R 6625 0 R 6634 0 R 6641 0 R 6650 0 R 6658 0 R]
+/Parent 7248 0 R
+/Kids [6695 0 R 6706 0 R 6712 0 R 6718 0 R 6723 0 R 6727 0 R]
>> endobj
-6696 0 obj <<
+6751 0 obj <<
/Type /Pages
-/Count 1
-/Parent 6731 0 R
-/Kids [6663 0 R]
+/Count 6
+/Parent 7248 0 R
+/Kids [6745 0 R 6753 0 R 6758 0 R 6762 0 R 6767 0 R 6780 0 R]
>> endobj
-6721 0 obj <<
+6796 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 7248 0 R
+/Kids [6792 0 R 6798 0 R 6803 0 R 6809 0 R 6813 0 R 6819 0 R]
+>> endobj
+6843 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 7249 0 R
+/Kids [6829 0 R 6845 0 R 6852 0 R 6856 0 R 6862 0 R 6869 0 R]
+>> endobj
+6885 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 7249 0 R
+/Kids [6879 0 R 6887 0 R 6894 0 R 6898 0 R 6907 0 R 6914 0 R]
+>> endobj
+6926 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 7249 0 R
+/Kids [6919 0 R 6928 0 R 6942 0 R 6949 0 R 6957 0 R 6965 0 R]
+>> endobj
+6982 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 7249 0 R
+/Kids [6977 0 R 6984 0 R 6994 0 R 6999 0 R 7005 0 R 7009 0 R]
+>> endobj
+7039 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 7249 0 R
+/Kids [7023 0 R 7041 0 R 7047 0 R 7053 0 R 7060 0 R 7064 0 R]
+>> endobj
+7076 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 7249 0 R
+/Kids [7069 0 R 7078 0 R 7082 0 R 7091 0 R 7095 0 R 7107 0 R]
+>> endobj
+7124 0 obj <<
+/Type /Pages
+/Count 6
+/Parent 7250 0 R
+/Kids [7115 0 R 7126 0 R 7134 0 R 7142 0 R 7148 0 R 7156 0 R]
+>> endobj
+7169 0 obj <<
+/Type /Pages
+/Count 4
+/Parent 7250 0 R
+/Kids [7166 0 R 7171 0 R 7176 0 R 7202 0 R]
+>> endobj
+7238 0 obj <<
/Type /Pages
/Count 36
-/Parent 6732 0 R
-/Kids [2869 0 R 3158 0 R 3471 0 R 3770 0 R 3881 0 R 3928 0 R]
+/Parent 7251 0 R
+/Kids [2969 0 R 3126 0 R 3386 0 R 3706 0 R 3995 0 R 4039 0 R]
>> endobj
-6722 0 obj <<
+7239 0 obj <<
/Type /Pages
/Count 36
-/Parent 6732 0 R
-/Kids [3984 0 R 4028 0 R 4069 0 R 4118 0 R 4163 0 R 4224 0 R]
+/Parent 7251 0 R
+/Kids [4085 0 R 4144 0 R 4197 0 R 4246 0 R 4292 0 R 4337 0 R]
>> endobj
-6723 0 obj <<
+7240 0 obj <<
/Type /Pages
/Count 36
-/Parent 6732 0 R
-/Kids [4261 0 R 4302 0 R 4346 0 R 4390 0 R 4426 0 R 4482 0 R]
+/Parent 7251 0 R
+/Kids [4382 0 R 4431 0 R 4474 0 R 4513 0 R 4562 0 R 4600 0 R]
>> endobj
-6724 0 obj <<
+7241 0 obj <<
/Type /Pages
/Count 36
-/Parent 6732 0 R
-/Kids [4525 0 R 4568 0 R 4612 0 R 4662 0 R 4700 0 R 4739 0 R]
+/Parent 7251 0 R
+/Kids [4646 0 R 4689 0 R 4736 0 R 4779 0 R 4825 0 R 4866 0 R]
>> endobj
-6725 0 obj <<
+7242 0 obj <<
/Type /Pages
/Count 36
-/Parent 6732 0 R
-/Kids [4786 0 R 4830 0 R 4873 0 R 4909 0 R 4945 0 R 4982 0 R]
+/Parent 7251 0 R
+/Kids [4920 0 R 4960 0 R 4997 0 R 5034 0 R 5089 0 R 5130 0 R]
>> endobj
-6726 0 obj <<
+7243 0 obj <<
/Type /Pages
/Count 36
-/Parent 6732 0 R
-/Kids [5016 0 R 5062 0 R 5108 0 R 5154 0 R 5208 0 R 5257 0 R]
+/Parent 7251 0 R
+/Kids [5176 0 R 5210 0 R 5246 0 R 5285 0 R 5317 0 R 5365 0 R]
>> endobj
-6727 0 obj <<
+7244 0 obj <<
/Type /Pages
/Count 36
-/Parent 6733 0 R
-/Kids [5300 0 R 5357 0 R 5398 0 R 5448 0 R 5487 0 R 5548 0 R]
+/Parent 7252 0 R
+/Kids [5397 0 R 5444 0 R 5489 0 R 5540 0 R 5598 0 R 5641 0 R]
>> endobj
-6728 0 obj <<
+7245 0 obj <<
/Type /Pages
/Count 36
-/Parent 6733 0 R
-/Kids [5629 0 R 5668 0 R 5694 0 R 5751 0 R 5801 0 R 5852 0 R]
+/Parent 7252 0 R
+/Kids [5707 0 R 5756 0 R 5799 0 R 5849 0 R 5895 0 R 5966 0 R]
>> endobj
-6729 0 obj <<
+7246 0 obj <<
/Type /Pages
/Count 36
-/Parent 6733 0 R
-/Kids [5897 0 R 5939 0 R 5983 0 R 6039 0 R 6112 0 R 6152 0 R]
+/Parent 7252 0 R
+/Kids [6026 0 R 6071 0 R 6131 0 R 6180 0 R 6227 0 R 6265 0 R]
>> endobj
-6730 0 obj <<
+7247 0 obj <<
/Type /Pages
/Count 36
-/Parent 6733 0 R
-/Kids [6186 0 R 6227 0 R 6262 0 R 6304 0 R 6342 0 R 6406 0 R]
+/Parent 7252 0 R
+/Kids [6308 0 R 6347 0 R 6398 0 R 6465 0 R 6516 0 R 6551 0 R]
>> endobj
-6731 0 obj <<
+7248 0 obj <<
/Type /Pages
-/Count 25
-/Parent 6733 0 R
-/Kids [6457 0 R 6510 0 R 6566 0 R 6623 0 R 6696 0 R]
+/Count 36
+/Parent 7252 0 R
+/Kids [6581 0 R 6621 0 R 6660 0 R 6704 0 R 6751 0 R 6796 0 R]
>> endobj
-6732 0 obj <<
+7249 0 obj <<
+/Type /Pages
+/Count 36
+/Parent 7252 0 R
+/Kids [6843 0 R 6885 0 R 6926 0 R 6982 0 R 7039 0 R 7076 0 R]
+>> endobj
+7250 0 obj <<
+/Type /Pages
+/Count 10
+/Parent 7253 0 R
+/Kids [7124 0 R 7169 0 R]
+>> endobj
+7251 0 obj <<
/Type /Pages
/Count 216
-/Parent 6734 0 R
-/Kids [6721 0 R 6722 0 R 6723 0 R 6724 0 R 6725 0 R 6726 0 R]
+/Parent 7254 0 R
+/Kids [7238 0 R 7239 0 R 7240 0 R 7241 0 R 7242 0 R 7243 0 R]
>> endobj
-6733 0 obj <<
+7252 0 obj <<
/Type /Pages
-/Count 169
-/Parent 6734 0 R
-/Kids [6727 0 R 6728 0 R 6729 0 R 6730 0 R 6731 0 R]
+/Count 216
+/Parent 7254 0 R
+/Kids [7244 0 R 7245 0 R 7246 0 R 7247 0 R 7248 0 R 7249 0 R]
>> endobj
-6734 0 obj <<
+7253 0 obj <<
/Type /Pages
-/Count 385
-/Kids [6732 0 R 6733 0 R]
+/Count 10
+/Parent 7254 0 R
+/Kids [7250 0 R]
>> endobj
-6735 0 obj <<
+7254 0 obj <<
+/Type /Pages
+/Count 442
+/Kids [7251 0 R 7252 0 R 7253 0 R]
+>> endobj
+7255 0 obj <<
/Type /Outlines
/First 7 0 R
-/Last 2611 0 R
+/Last 2719 0 R
/Count 6
>> endobj
+2955 0 obj <<
+/Title 2956 0 R
+/A 2953 0 R
+/Parent 2947 0 R
+/Prev 2951 0 R
+>> endobj
+2951 0 obj <<
+/Title 2952 0 R
+/A 2949 0 R
+/Parent 2947 0 R
+/Next 2955 0 R
+>> endobj
+2947 0 obj <<
+/Title 2948 0 R
+/A 2945 0 R
+/Parent 2719 0 R
+/Prev 2939 0 R
+/First 2951 0 R
+/Last 2955 0 R
+/Count -2
+>> endobj
+2943 0 obj <<
+/Title 2944 0 R
+/A 2941 0 R
+/Parent 2939 0 R
+>> endobj
+2939 0 obj <<
+/Title 2940 0 R
+/A 2937 0 R
+/Parent 2719 0 R
+/Prev 2891 0 R
+/Next 2947 0 R
+/First 2943 0 R
+/Last 2943 0 R
+/Count -1
+>> endobj
+2935 0 obj <<
+/Title 2936 0 R
+/A 2933 0 R
+/Parent 2891 0 R
+/Prev 2931 0 R
+>> endobj
+2931 0 obj <<
+/Title 2932 0 R
+/A 2929 0 R
+/Parent 2891 0 R
+/Prev 2927 0 R
+/Next 2935 0 R
+>> endobj
+2927 0 obj <<
+/Title 2928 0 R
+/A 2925 0 R
+/Parent 2891 0 R
+/Prev 2923 0 R
+/Next 2931 0 R
+>> endobj
+2923 0 obj <<
+/Title 2924 0 R
+/A 2921 0 R
+/Parent 2891 0 R
+/Prev 2919 0 R
+/Next 2927 0 R
+>> endobj
+2919 0 obj <<
+/Title 2920 0 R
+/A 2917 0 R
+/Parent 2891 0 R
+/Prev 2915 0 R
+/Next 2923 0 R
+>> endobj
+2915 0 obj <<
+/Title 2916 0 R
+/A 2913 0 R
+/Parent 2891 0 R
+/Prev 2911 0 R
+/Next 2919 0 R
+>> endobj
+2911 0 obj <<
+/Title 2912 0 R
+/A 2909 0 R
+/Parent 2891 0 R
+/Prev 2907 0 R
+/Next 2915 0 R
+>> endobj
+2907 0 obj <<
+/Title 2908 0 R
+/A 2905 0 R
+/Parent 2891 0 R
+/Prev 2903 0 R
+/Next 2911 0 R
+>> endobj
+2903 0 obj <<
+/Title 2904 0 R
+/A 2901 0 R
+/Parent 2891 0 R
+/Prev 2899 0 R
+/Next 2907 0 R
+>> endobj
+2899 0 obj <<
+/Title 2900 0 R
+/A 2897 0 R
+/Parent 2891 0 R
+/Prev 2895 0 R
+/Next 2903 0 R
+>> endobj
+2895 0 obj <<
+/Title 2896 0 R
+/A 2893 0 R
+/Parent 2891 0 R
+/Next 2899 0 R
+>> endobj
+2891 0 obj <<
+/Title 2892 0 R
+/A 2889 0 R
+/Parent 2719 0 R
+/Prev 2823 0 R
+/Next 2939 0 R
+/First 2895 0 R
+/Last 2935 0 R
+/Count -11
+>> endobj
+2887 0 obj <<
+/Title 2888 0 R
+/A 2885 0 R
+/Parent 2823 0 R
+/Prev 2883 0 R
+>> endobj
+2883 0 obj <<
+/Title 2884 0 R
+/A 2881 0 R
+/Parent 2823 0 R
+/Prev 2875 0 R
+/Next 2887 0 R
+>> endobj
+2879 0 obj <<
+/Title 2880 0 R
+/A 2877 0 R
+/Parent 2875 0 R
+>> endobj
+2875 0 obj <<
+/Title 2876 0 R
+/A 2873 0 R
+/Parent 2823 0 R
+/Prev 2847 0 R
+/Next 2883 0 R
+/First 2879 0 R
+/Last 2879 0 R
+/Count -1
+>> endobj
+2871 0 obj <<
+/Title 2872 0 R
+/A 2869 0 R
+/Parent 2847 0 R
+/Prev 2867 0 R
+>> endobj
+2867 0 obj <<
+/Title 2868 0 R
+/A 2865 0 R
+/Parent 2847 0 R
+/Prev 2863 0 R
+/Next 2871 0 R
+>> endobj
+2863 0 obj <<
+/Title 2864 0 R
+/A 2861 0 R
+/Parent 2847 0 R
+/Prev 2859 0 R
+/Next 2867 0 R
+>> endobj
+2859 0 obj <<
+/Title 2860 0 R
+/A 2857 0 R
+/Parent 2847 0 R
+/Prev 2855 0 R
+/Next 2863 0 R
+>> endobj
2855 0 obj <<
/Title 2856 0 R
/A 2853 0 R
-/Parent 2843 0 R
+/Parent 2847 0 R
/Prev 2851 0 R
+/Next 2859 0 R
>> endobj
2851 0 obj <<
/Title 2852 0 R
/A 2849 0 R
-/Parent 2843 0 R
-/Prev 2847 0 R
+/Parent 2847 0 R
/Next 2855 0 R
>> endobj
2847 0 obj <<
/Title 2848 0 R
/A 2845 0 R
-/Parent 2843 0 R
-/Next 2851 0 R
+/Parent 2823 0 R
+/Prev 2831 0 R
+/Next 2875 0 R
+/First 2851 0 R
+/Last 2871 0 R
+/Count -6
>> endobj
2843 0 obj <<
/Title 2844 0 R
/A 2841 0 R
-/Parent 2611 0 R
-/Prev 2835 0 R
-/First 2847 0 R
-/Last 2855 0 R
-/Count -3
+/Parent 2831 0 R
+/Prev 2839 0 R
>> endobj
2839 0 obj <<
/Title 2840 0 R
/A 2837 0 R
-/Parent 2835 0 R
+/Parent 2831 0 R
+/Prev 2835 0 R
+/Next 2843 0 R
>> endobj
2835 0 obj <<
/Title 2836 0 R
/A 2833 0 R
-/Parent 2611 0 R
-/Prev 2787 0 R
-/Next 2843 0 R
-/First 2839 0 R
-/Last 2839 0 R
-/Count -1
+/Parent 2831 0 R
+/Next 2839 0 R
>> endobj
2831 0 obj <<
/Title 2832 0 R
/A 2829 0 R
-/Parent 2787 0 R
+/Parent 2823 0 R
/Prev 2827 0 R
+/Next 2847 0 R
+/First 2835 0 R
+/Last 2843 0 R
+/Count -3
>> endobj
2827 0 obj <<
/Title 2828 0 R
/A 2825 0 R
-/Parent 2787 0 R
-/Prev 2823 0 R
+/Parent 2823 0 R
/Next 2831 0 R
>> endobj
2823 0 obj <<
/Title 2824 0 R
/A 2821 0 R
-/Parent 2787 0 R
-/Prev 2819 0 R
-/Next 2827 0 R
+/Parent 2719 0 R
+/Prev 2783 0 R
+/Next 2891 0 R
+/First 2827 0 R
+/Last 2887 0 R
+/Count -6
>> endobj
2819 0 obj <<
/Title 2820 0 R
/A 2817 0 R
-/Parent 2787 0 R
+/Parent 2811 0 R
/Prev 2815 0 R
-/Next 2823 0 R
>> endobj
2815 0 obj <<
/Title 2816 0 R
/A 2813 0 R
-/Parent 2787 0 R
-/Prev 2811 0 R
+/Parent 2811 0 R
/Next 2819 0 R
>> endobj
2811 0 obj <<
/Title 2812 0 R
/A 2809 0 R
-/Parent 2787 0 R
-/Prev 2807 0 R
-/Next 2815 0 R
+/Parent 2783 0 R
+/Prev 2803 0 R
+/First 2815 0 R
+/Last 2819 0 R
+/Count -2
>> endobj
2807 0 obj <<
/Title 2808 0 R
/A 2805 0 R
-/Parent 2787 0 R
-/Prev 2803 0 R
-/Next 2811 0 R
+/Parent 2803 0 R
>> endobj
2803 0 obj <<
/Title 2804 0 R
/A 2801 0 R
-/Parent 2787 0 R
+/Parent 2783 0 R
/Prev 2799 0 R
-/Next 2807 0 R
+/Next 2811 0 R
+/First 2807 0 R
+/Last 2807 0 R
+/Count -1
>> endobj
2799 0 obj <<
/Title 2800 0 R
/A 2797 0 R
-/Parent 2787 0 R
+/Parent 2783 0 R
/Prev 2795 0 R
/Next 2803 0 R
>> endobj
2795 0 obj <<
/Title 2796 0 R
/A 2793 0 R
-/Parent 2787 0 R
+/Parent 2783 0 R
/Prev 2791 0 R
/Next 2799 0 R
>> endobj
2791 0 obj <<
/Title 2792 0 R
/A 2789 0 R
-/Parent 2787 0 R
+/Parent 2783 0 R
+/Prev 2787 0 R
/Next 2795 0 R
>> endobj
2787 0 obj <<
/Title 2788 0 R
/A 2785 0 R
-/Parent 2611 0 R
-/Prev 2719 0 R
-/Next 2835 0 R
-/First 2791 0 R
-/Last 2831 0 R
-/Count -11
+/Parent 2783 0 R
+/Next 2791 0 R
>> endobj
2783 0 obj <<
/Title 2784 0 R
/A 2781 0 R
/Parent 2719 0 R
-/Prev 2779 0 R
+/Prev 2723 0 R
+/Next 2823 0 R
+/First 2787 0 R
+/Last 2811 0 R
+/Count -6
>> endobj
2779 0 obj <<
/Title 2780 0 R
/A 2777 0 R
-/Parent 2719 0 R
-/Prev 2771 0 R
-/Next 2783 0 R
+/Parent 2771 0 R
+/Prev 2775 0 R
>> endobj
2775 0 obj <<
/Title 2776 0 R
/A 2773 0 R
/Parent 2771 0 R
+/Next 2779 0 R
>> endobj
2771 0 obj <<
/Title 2772 0 R
/A 2769 0 R
-/Parent 2719 0 R
-/Prev 2743 0 R
-/Next 2779 0 R
+/Parent 2723 0 R
+/Prev 2755 0 R
/First 2775 0 R
-/Last 2775 0 R
-/Count -1
+/Last 2779 0 R
+/Count -2
>> endobj
2767 0 obj <<
/Title 2768 0 R
/A 2765 0 R
-/Parent 2743 0 R
+/Parent 2759 0 R
/Prev 2763 0 R
>> endobj
2763 0 obj <<
/Title 2764 0 R
/A 2761 0 R
-/Parent 2743 0 R
-/Prev 2759 0 R
+/Parent 2759 0 R
/Next 2767 0 R
>> endobj
2759 0 obj <<
/Title 2760 0 R
/A 2757 0 R
-/Parent 2743 0 R
-/Prev 2755 0 R
-/Next 2763 0 R
+/Parent 2755 0 R
+/First 2763 0 R
+/Last 2767 0 R
+/Count -2
>> endobj
2755 0 obj <<
/Title 2756 0 R
/A 2753 0 R
-/Parent 2743 0 R
+/Parent 2723 0 R
/Prev 2751 0 R
-/Next 2759 0 R
+/Next 2771 0 R
+/First 2759 0 R
+/Last 2759 0 R
+/Count -1
>> endobj
2751 0 obj <<
/Title 2752 0 R
/A 2749 0 R
-/Parent 2743 0 R
+/Parent 2723 0 R
/Prev 2747 0 R
/Next 2755 0 R
>> endobj
2747 0 obj <<
/Title 2748 0 R
/A 2745 0 R
-/Parent 2743 0 R
+/Parent 2723 0 R
+/Prev 2727 0 R
/Next 2751 0 R
>> endobj
2743 0 obj <<
/Title 2744 0 R
/A 2741 0 R
-/Parent 2719 0 R
-/Prev 2727 0 R
-/Next 2771 0 R
-/First 2747 0 R
-/Last 2767 0 R
-/Count -6
+/Parent 2735 0 R
+/Prev 2739 0 R
>> endobj
2739 0 obj <<
/Title 2740 0 R
/A 2737 0 R
-/Parent 2727 0 R
-/Prev 2735 0 R
+/Parent 2735 0 R
+/Next 2743 0 R
>> endobj
2735 0 obj <<
/Title 2736 0 R
/A 2733 0 R
/Parent 2727 0 R
/Prev 2731 0 R
-/Next 2739 0 R
+/First 2739 0 R
+/Last 2743 0 R
+/Count -2
>> endobj
2731 0 obj <<
/Title 2732 0 R
@@ -32852,135 +36238,133 @@ endobj
2727 0 obj <<
/Title 2728 0 R
/A 2725 0 R
-/Parent 2719 0 R
-/Prev 2723 0 R
-/Next 2743 0 R
+/Parent 2723 0 R
+/Next 2747 0 R
/First 2731 0 R
-/Last 2739 0 R
-/Count -3
+/Last 2735 0 R
+/Count -2
>> endobj
2723 0 obj <<
/Title 2724 0 R
/A 2721 0 R
/Parent 2719 0 R
-/Next 2727 0 R
+/Next 2783 0 R
+/First 2727 0 R
+/Last 2771 0 R
+/Count -5
>> endobj
2719 0 obj <<
/Title 2720 0 R
/A 2717 0 R
-/Parent 2611 0 R
-/Prev 2679 0 R
-/Next 2787 0 R
+/Parent 7255 0 R
+/Prev 2627 0 R
/First 2723 0 R
-/Last 2783 0 R
+/Last 2947 0 R
/Count -6
>> endobj
2715 0 obj <<
/Title 2716 0 R
/A 2713 0 R
-/Parent 2707 0 R
+/Parent 2691 0 R
/Prev 2711 0 R
>> endobj
2711 0 obj <<
/Title 2712 0 R
/A 2709 0 R
-/Parent 2707 0 R
+/Parent 2691 0 R
+/Prev 2707 0 R
/Next 2715 0 R
>> endobj
2707 0 obj <<
/Title 2708 0 R
/A 2705 0 R
-/Parent 2679 0 R
-/Prev 2699 0 R
-/First 2711 0 R
-/Last 2715 0 R
-/Count -2
+/Parent 2691 0 R
+/Prev 2703 0 R
+/Next 2711 0 R
>> endobj
2703 0 obj <<
/Title 2704 0 R
/A 2701 0 R
-/Parent 2699 0 R
+/Parent 2691 0 R
+/Prev 2699 0 R
+/Next 2707 0 R
>> endobj
2699 0 obj <<
/Title 2700 0 R
/A 2697 0 R
-/Parent 2679 0 R
+/Parent 2691 0 R
/Prev 2695 0 R
-/Next 2707 0 R
-/First 2703 0 R
-/Last 2703 0 R
-/Count -1
+/Next 2703 0 R
>> endobj
2695 0 obj <<
/Title 2696 0 R
/A 2693 0 R
-/Parent 2679 0 R
-/Prev 2691 0 R
+/Parent 2691 0 R
/Next 2699 0 R
>> endobj
2691 0 obj <<
/Title 2692 0 R
/A 2689 0 R
-/Parent 2679 0 R
-/Prev 2687 0 R
-/Next 2695 0 R
+/Parent 2627 0 R
+/Prev 2647 0 R
+/First 2695 0 R
+/Last 2715 0 R
+/Count -6
>> endobj
2687 0 obj <<
/Title 2688 0 R
/A 2685 0 R
-/Parent 2679 0 R
+/Parent 2647 0 R
/Prev 2683 0 R
-/Next 2691 0 R
>> endobj
2683 0 obj <<
/Title 2684 0 R
/A 2681 0 R
-/Parent 2679 0 R
+/Parent 2647 0 R
+/Prev 2679 0 R
/Next 2687 0 R
>> endobj
2679 0 obj <<
/Title 2680 0 R
/A 2677 0 R
-/Parent 2611 0 R
-/Prev 2615 0 R
-/Next 2719 0 R
-/First 2683 0 R
-/Last 2707 0 R
-/Count -6
+/Parent 2647 0 R
+/Prev 2651 0 R
+/Next 2683 0 R
>> endobj
2675 0 obj <<
/Title 2676 0 R
/A 2673 0 R
-/Parent 2615 0 R
-/Prev 2663 0 R
+/Parent 2667 0 R
+/Prev 2671 0 R
>> endobj
2671 0 obj <<
/Title 2672 0 R
/A 2669 0 R
-/Parent 2663 0 R
-/Prev 2667 0 R
+/Parent 2667 0 R
+/Next 2675 0 R
>> endobj
2667 0 obj <<
/Title 2668 0 R
/A 2665 0 R
-/Parent 2663 0 R
-/Next 2671 0 R
+/Parent 2651 0 R
+/Prev 2663 0 R
+/First 2671 0 R
+/Last 2675 0 R
+/Count -2
>> endobj
2663 0 obj <<
/Title 2664 0 R
/A 2661 0 R
-/Parent 2615 0 R
-/Prev 2647 0 R
-/Next 2675 0 R
-/First 2667 0 R
-/Last 2671 0 R
-/Count -2
+/Parent 2651 0 R
+/Prev 2659 0 R
+/Next 2667 0 R
>> endobj
2659 0 obj <<
/Title 2660 0 R
/A 2657 0 R
/Parent 2651 0 R
/Prev 2655 0 R
+/Next 2663 0 R
>> endobj
2655 0 obj <<
/Title 2656 0 R
@@ -32992,93 +36376,92 @@ endobj
/Title 2652 0 R
/A 2649 0 R
/Parent 2647 0 R
+/Next 2679 0 R
/First 2655 0 R
-/Last 2659 0 R
-/Count -2
+/Last 2667 0 R
+/Count -4
>> endobj
2647 0 obj <<
/Title 2648 0 R
/A 2645 0 R
-/Parent 2615 0 R
-/Prev 2643 0 R
-/Next 2663 0 R
+/Parent 2627 0 R
+/Prev 2631 0 R
+/Next 2691 0 R
/First 2651 0 R
-/Last 2651 0 R
-/Count -1
+/Last 2687 0 R
+/Count -4
>> endobj
2643 0 obj <<
/Title 2644 0 R
/A 2641 0 R
-/Parent 2615 0 R
+/Parent 2631 0 R
/Prev 2639 0 R
-/Next 2647 0 R
>> endobj
2639 0 obj <<
/Title 2640 0 R
/A 2637 0 R
-/Parent 2615 0 R
-/Prev 2619 0 R
+/Parent 2631 0 R
+/Prev 2635 0 R
/Next 2643 0 R
>> endobj
2635 0 obj <<
/Title 2636 0 R
/A 2633 0 R
-/Parent 2627 0 R
-/Prev 2631 0 R
+/Parent 2631 0 R
+/Next 2639 0 R
>> endobj
2631 0 obj <<
/Title 2632 0 R
/A 2629 0 R
/Parent 2627 0 R
-/Next 2635 0 R
+/Next 2647 0 R
+/First 2635 0 R
+/Last 2643 0 R
+/Count -3
>> endobj
2627 0 obj <<
/Title 2628 0 R
/A 2625 0 R
-/Parent 2619 0 R
-/Prev 2623 0 R
+/Parent 7255 0 R
+/Prev 2463 0 R
+/Next 2719 0 R
/First 2631 0 R
-/Last 2635 0 R
-/Count -2
+/Last 2691 0 R
+/Count -3
>> endobj
2623 0 obj <<
/Title 2624 0 R
/A 2621 0 R
-/Parent 2619 0 R
-/Next 2627 0 R
+/Parent 2583 0 R
+/Prev 2619 0 R
>> endobj
2619 0 obj <<
/Title 2620 0 R
/A 2617 0 R
-/Parent 2615 0 R
-/Next 2639 0 R
-/First 2623 0 R
-/Last 2627 0 R
-/Count -2
+/Parent 2583 0 R
+/Prev 2615 0 R
+/Next 2623 0 R
>> endobj
2615 0 obj <<
/Title 2616 0 R
/A 2613 0 R
-/Parent 2611 0 R
-/Next 2679 0 R
-/First 2619 0 R
-/Last 2675 0 R
-/Count -6
+/Parent 2583 0 R
+/Prev 2611 0 R
+/Next 2619 0 R
>> endobj
2611 0 obj <<
/Title 2612 0 R
/A 2609 0 R
-/Parent 6735 0 R
-/Prev 2535 0 R
-/First 2615 0 R
-/Last 2843 0 R
-/Count -6
+/Parent 2583 0 R
+/Prev 2607 0 R
+/Next 2615 0 R
>> endobj
2607 0 obj <<
/Title 2608 0 R
/A 2605 0 R
/Parent 2583 0 R
/Prev 2603 0 R
+/Next 2611 0 R
>> endobj
2603 0 obj <<
/Title 2604 0 R
@@ -33117,60 +36500,59 @@ endobj
2583 0 obj <<
/Title 2584 0 R
/A 2581 0 R
-/Parent 2535 0 R
-/Prev 2559 0 R
+/Parent 2579 0 R
/First 2587 0 R
-/Last 2607 0 R
-/Count -6
+/Last 2623 0 R
+/Count -10
>> endobj
2579 0 obj <<
/Title 2580 0 R
/A 2577 0 R
-/Parent 2559 0 R
-/Prev 2575 0 R
+/Parent 2463 0 R
+/Prev 2531 0 R
+/First 2583 0 R
+/Last 2583 0 R
+/Count -1
>> endobj
2575 0 obj <<
/Title 2576 0 R
/A 2573 0 R
-/Parent 2559 0 R
+/Parent 2567 0 R
/Prev 2571 0 R
-/Next 2579 0 R
>> endobj
2571 0 obj <<
/Title 2572 0 R
/A 2569 0 R
-/Parent 2559 0 R
-/Prev 2567 0 R
+/Parent 2567 0 R
/Next 2575 0 R
>> endobj
2567 0 obj <<
/Title 2568 0 R
/A 2565 0 R
-/Parent 2559 0 R
-/Prev 2563 0 R
-/Next 2571 0 R
+/Parent 2531 0 R
+/Prev 2535 0 R
+/First 2571 0 R
+/Last 2575 0 R
+/Count -2
>> endobj
2563 0 obj <<
/Title 2564 0 R
/A 2561 0 R
-/Parent 2559 0 R
-/Next 2567 0 R
+/Parent 2535 0 R
+/Prev 2539 0 R
>> endobj
2559 0 obj <<
/Title 2560 0 R
/A 2557 0 R
-/Parent 2535 0 R
-/Prev 2539 0 R
-/Next 2583 0 R
-/First 2563 0 R
-/Last 2579 0 R
-/Count -5
+/Parent 2539 0 R
+/Prev 2555 0 R
>> endobj
2555 0 obj <<
/Title 2556 0 R
/A 2553 0 R
/Parent 2539 0 R
/Prev 2551 0 R
+/Next 2559 0 R
>> endobj
2551 0 obj <<
/Title 2552 0 R
@@ -33196,46 +36578,47 @@ endobj
/Title 2540 0 R
/A 2537 0 R
/Parent 2535 0 R
-/Next 2559 0 R
+/Next 2563 0 R
/First 2543 0 R
-/Last 2555 0 R
-/Count -4
+/Last 2559 0 R
+/Count -5
>> endobj
2535 0 obj <<
/Title 2536 0 R
/A 2533 0 R
-/Parent 6735 0 R
-/Prev 2419 0 R
-/Next 2611 0 R
+/Parent 2531 0 R
+/Next 2567 0 R
/First 2539 0 R
-/Last 2583 0 R
-/Count -3
+/Last 2563 0 R
+/Count -2
>> endobj
2531 0 obj <<
/Title 2532 0 R
/A 2529 0 R
-/Parent 2491 0 R
-/Prev 2527 0 R
+/Parent 2463 0 R
+/Prev 2467 0 R
+/Next 2579 0 R
+/First 2535 0 R
+/Last 2567 0 R
+/Count -2
>> endobj
2527 0 obj <<
/Title 2528 0 R
/A 2525 0 R
-/Parent 2491 0 R
+/Parent 2515 0 R
/Prev 2523 0 R
-/Next 2531 0 R
>> endobj
2523 0 obj <<
/Title 2524 0 R
/A 2521 0 R
-/Parent 2491 0 R
+/Parent 2515 0 R
/Prev 2519 0 R
/Next 2527 0 R
>> endobj
2519 0 obj <<
/Title 2520 0 R
/A 2517 0 R
-/Parent 2491 0 R
-/Prev 2515 0 R
+/Parent 2515 0 R
/Next 2523 0 R
>> endobj
2515 0 obj <<
@@ -33243,7 +36626,9 @@ endobj
/A 2513 0 R
/Parent 2491 0 R
/Prev 2511 0 R
-/Next 2519 0 R
+/First 2519 0 R
+/Last 2527 0 R
+/Count -3
>> endobj
2511 0 obj <<
/Title 2512 0 R
@@ -33282,25 +36667,24 @@ endobj
2491 0 obj <<
/Title 2492 0 R
/A 2489 0 R
-/Parent 2487 0 R
+/Parent 2467 0 R
+/Prev 2475 0 R
/First 2495 0 R
-/Last 2531 0 R
-/Count -10
+/Last 2515 0 R
+/Count -6
>> endobj
2487 0 obj <<
/Title 2488 0 R
/A 2485 0 R
-/Parent 2419 0 R
-/Prev 2439 0 R
-/First 2491 0 R
-/Last 2491 0 R
-/Count -1
+/Parent 2475 0 R
+/Prev 2483 0 R
>> endobj
2483 0 obj <<
/Title 2484 0 R
/A 2481 0 R
/Parent 2475 0 R
/Prev 2479 0 R
+/Next 2487 0 R
>> endobj
2479 0 obj <<
/Title 2480 0 R
@@ -33311,584 +36695,588 @@ endobj
2475 0 obj <<
/Title 2476 0 R
/A 2473 0 R
-/Parent 2439 0 R
-/Prev 2443 0 R
+/Parent 2467 0 R
+/Prev 2471 0 R
+/Next 2491 0 R
/First 2479 0 R
-/Last 2483 0 R
-/Count -2
+/Last 2487 0 R
+/Count -3
>> endobj
2471 0 obj <<
/Title 2472 0 R
/A 2469 0 R
-/Parent 2443 0 R
-/Prev 2447 0 R
+/Parent 2467 0 R
+/Next 2475 0 R
>> endobj
2467 0 obj <<
/Title 2468 0 R
/A 2465 0 R
-/Parent 2447 0 R
-/Prev 2463 0 R
+/Parent 2463 0 R
+/Next 2531 0 R
+/First 2471 0 R
+/Last 2491 0 R
+/Count -3
>> endobj
2463 0 obj <<
/Title 2464 0 R
/A 2461 0 R
-/Parent 2447 0 R
-/Prev 2459 0 R
-/Next 2467 0 R
+/Parent 7255 0 R
+/Prev 467 0 R
+/Next 2627 0 R
+/First 2467 0 R
+/Last 2579 0 R
+/Count -3
>> endobj
2459 0 obj <<
/Title 2460 0 R
/A 2457 0 R
-/Parent 2447 0 R
-/Prev 2455 0 R
-/Next 2463 0 R
+/Parent 2455 0 R
>> endobj
2455 0 obj <<
/Title 2456 0 R
/A 2453 0 R
-/Parent 2447 0 R
-/Prev 2451 0 R
-/Next 2459 0 R
+/Parent 467 0 R
+/Prev 2443 0 R
+/First 2459 0 R
+/Last 2459 0 R
+/Count -1
>> endobj
2451 0 obj <<
/Title 2452 0 R
/A 2449 0 R
-/Parent 2447 0 R
-/Next 2455 0 R
+/Parent 2443 0 R
+/Prev 2447 0 R
>> endobj
2447 0 obj <<
/Title 2448 0 R
/A 2445 0 R
/Parent 2443 0 R
-/Next 2471 0 R
-/First 2451 0 R
-/Last 2467 0 R
-/Count -5
+/Next 2451 0 R
>> endobj
2443 0 obj <<
/Title 2444 0 R
/A 2441 0 R
-/Parent 2439 0 R
-/Next 2475 0 R
+/Parent 467 0 R
+/Prev 2411 0 R
+/Next 2455 0 R
/First 2447 0 R
-/Last 2471 0 R
+/Last 2451 0 R
/Count -2
>> endobj
2439 0 obj <<
/Title 2440 0 R
/A 2437 0 R
-/Parent 2419 0 R
-/Prev 2423 0 R
-/Next 2487 0 R
-/First 2443 0 R
-/Last 2475 0 R
-/Count -2
+/Parent 2435 0 R
>> endobj
2435 0 obj <<
/Title 2436 0 R
/A 2433 0 R
-/Parent 2423 0 R
+/Parent 2411 0 R
/Prev 2431 0 R
+/First 2439 0 R
+/Last 2439 0 R
+/Count -1
>> endobj
2431 0 obj <<
/Title 2432 0 R
/A 2429 0 R
-/Parent 2423 0 R
+/Parent 2411 0 R
/Prev 2427 0 R
/Next 2435 0 R
>> endobj
2427 0 obj <<
/Title 2428 0 R
/A 2425 0 R
-/Parent 2423 0 R
+/Parent 2411 0 R
+/Prev 2423 0 R
/Next 2431 0 R
>> endobj
2423 0 obj <<
/Title 2424 0 R
/A 2421 0 R
-/Parent 2419 0 R
-/Next 2439 0 R
-/First 2427 0 R
-/Last 2435 0 R
-/Count -3
+/Parent 2411 0 R
+/Prev 2419 0 R
+/Next 2427 0 R
>> endobj
2419 0 obj <<
/Title 2420 0 R
/A 2417 0 R
-/Parent 6735 0 R
-/Prev 455 0 R
-/Next 2535 0 R
-/First 2423 0 R
-/Last 2487 0 R
-/Count -3
+/Parent 2411 0 R
+/Prev 2415 0 R
+/Next 2423 0 R
>> endobj
2415 0 obj <<
/Title 2416 0 R
/A 2413 0 R
/Parent 2411 0 R
+/Next 2419 0 R
>> endobj
2411 0 obj <<
/Title 2412 0 R
/A 2409 0 R
-/Parent 455 0 R
-/Prev 2399 0 R
+/Parent 467 0 R
+/Prev 2339 0 R
+/Next 2443 0 R
/First 2415 0 R
-/Last 2415 0 R
-/Count -1
+/Last 2435 0 R
+/Count -6
>> endobj
2407 0 obj <<
/Title 2408 0 R
/A 2405 0 R
-/Parent 2399 0 R
+/Parent 2395 0 R
/Prev 2403 0 R
>> endobj
2403 0 obj <<
/Title 2404 0 R
/A 2401 0 R
-/Parent 2399 0 R
+/Parent 2395 0 R
+/Prev 2399 0 R
/Next 2407 0 R
>> endobj
2399 0 obj <<
/Title 2400 0 R
/A 2397 0 R
-/Parent 455 0 R
-/Prev 2375 0 R
-/Next 2411 0 R
-/First 2403 0 R
-/Last 2407 0 R
-/Count -2
+/Parent 2395 0 R
+/Next 2403 0 R
>> endobj
2395 0 obj <<
/Title 2396 0 R
/A 2393 0 R
-/Parent 2375 0 R
-/Prev 2391 0 R
+/Parent 2339 0 R
+/Prev 2371 0 R
+/First 2399 0 R
+/Last 2407 0 R
+/Count -3
>> endobj
2391 0 obj <<
/Title 2392 0 R
/A 2389 0 R
-/Parent 2375 0 R
+/Parent 2371 0 R
/Prev 2387 0 R
-/Next 2395 0 R
>> endobj
2387 0 obj <<
/Title 2388 0 R
/A 2385 0 R
-/Parent 2375 0 R
+/Parent 2371 0 R
/Prev 2383 0 R
/Next 2391 0 R
>> endobj
2383 0 obj <<
/Title 2384 0 R
/A 2381 0 R
-/Parent 2375 0 R
+/Parent 2371 0 R
/Prev 2379 0 R
/Next 2387 0 R
>> endobj
2379 0 obj <<
/Title 2380 0 R
/A 2377 0 R
-/Parent 2375 0 R
+/Parent 2371 0 R
+/Prev 2375 0 R
/Next 2383 0 R
>> endobj
2375 0 obj <<
/Title 2376 0 R
/A 2373 0 R
-/Parent 455 0 R
-/Prev 2303 0 R
-/Next 2399 0 R
-/First 2379 0 R
-/Last 2395 0 R
-/Count -5
+/Parent 2371 0 R
+/Next 2379 0 R
>> endobj
2371 0 obj <<
/Title 2372 0 R
/A 2369 0 R
-/Parent 2359 0 R
-/Prev 2367 0 R
+/Parent 2339 0 R
+/Prev 2351 0 R
+/Next 2395 0 R
+/First 2375 0 R
+/Last 2391 0 R
+/Count -5
>> endobj
2367 0 obj <<
/Title 2368 0 R
/A 2365 0 R
-/Parent 2359 0 R
+/Parent 2351 0 R
/Prev 2363 0 R
-/Next 2371 0 R
>> endobj
2363 0 obj <<
/Title 2364 0 R
/A 2361 0 R
-/Parent 2359 0 R
+/Parent 2351 0 R
+/Prev 2359 0 R
/Next 2367 0 R
>> endobj
2359 0 obj <<
/Title 2360 0 R
/A 2357 0 R
-/Parent 2303 0 R
-/Prev 2335 0 R
-/First 2363 0 R
-/Last 2371 0 R
-/Count -3
+/Parent 2351 0 R
+/Prev 2355 0 R
+/Next 2363 0 R
>> endobj
2355 0 obj <<
/Title 2356 0 R
/A 2353 0 R
-/Parent 2335 0 R
-/Prev 2351 0 R
+/Parent 2351 0 R
+/Next 2359 0 R
>> endobj
2351 0 obj <<
/Title 2352 0 R
/A 2349 0 R
-/Parent 2335 0 R
+/Parent 2339 0 R
/Prev 2347 0 R
-/Next 2355 0 R
+/Next 2371 0 R
+/First 2355 0 R
+/Last 2367 0 R
+/Count -4
>> endobj
2347 0 obj <<
/Title 2348 0 R
/A 2345 0 R
-/Parent 2335 0 R
+/Parent 2339 0 R
/Prev 2343 0 R
/Next 2351 0 R
>> endobj
2343 0 obj <<
/Title 2344 0 R
/A 2341 0 R
-/Parent 2335 0 R
-/Prev 2339 0 R
+/Parent 2339 0 R
/Next 2347 0 R
>> endobj
2339 0 obj <<
/Title 2340 0 R
/A 2337 0 R
-/Parent 2335 0 R
-/Next 2343 0 R
+/Parent 467 0 R
+/Prev 2267 0 R
+/Next 2411 0 R
+/First 2343 0 R
+/Last 2395 0 R
+/Count -5
>> endobj
2335 0 obj <<
/Title 2336 0 R
/A 2333 0 R
-/Parent 2303 0 R
-/Prev 2315 0 R
-/Next 2359 0 R
-/First 2339 0 R
-/Last 2355 0 R
-/Count -5
+/Parent 2327 0 R
+/Prev 2331 0 R
>> endobj
2331 0 obj <<
/Title 2332 0 R
/A 2329 0 R
-/Parent 2315 0 R
-/Prev 2327 0 R
+/Parent 2327 0 R
+/Next 2335 0 R
>> endobj
2327 0 obj <<
/Title 2328 0 R
/A 2325 0 R
-/Parent 2315 0 R
-/Prev 2323 0 R
-/Next 2331 0 R
+/Parent 2267 0 R
+/Prev 2275 0 R
+/First 2331 0 R
+/Last 2335 0 R
+/Count -2
>> endobj
2323 0 obj <<
/Title 2324 0 R
/A 2321 0 R
-/Parent 2315 0 R
+/Parent 2307 0 R
/Prev 2319 0 R
-/Next 2327 0 R
>> endobj
2319 0 obj <<
/Title 2320 0 R
/A 2317 0 R
-/Parent 2315 0 R
+/Parent 2307 0 R
+/Prev 2315 0 R
/Next 2323 0 R
>> endobj
2315 0 obj <<
/Title 2316 0 R
/A 2313 0 R
-/Parent 2303 0 R
+/Parent 2307 0 R
/Prev 2311 0 R
-/Next 2335 0 R
-/First 2319 0 R
-/Last 2331 0 R
-/Count -4
+/Next 2319 0 R
>> endobj
2311 0 obj <<
/Title 2312 0 R
/A 2309 0 R
-/Parent 2303 0 R
-/Prev 2307 0 R
+/Parent 2307 0 R
/Next 2315 0 R
>> endobj
2307 0 obj <<
/Title 2308 0 R
/A 2305 0 R
-/Parent 2303 0 R
-/Next 2311 0 R
+/Parent 2275 0 R
+/Prev 2303 0 R
+/First 2311 0 R
+/Last 2323 0 R
+/Count -4
>> endobj
2303 0 obj <<
/Title 2304 0 R
/A 2301 0 R
-/Parent 455 0 R
-/Prev 2235 0 R
-/Next 2375 0 R
-/First 2307 0 R
-/Last 2359 0 R
-/Count -5
+/Parent 2275 0 R
+/Prev 2299 0 R
+/Next 2307 0 R
>> endobj
2299 0 obj <<
/Title 2300 0 R
/A 2297 0 R
-/Parent 2295 0 R
+/Parent 2275 0 R
+/Prev 2287 0 R
+/Next 2303 0 R
>> endobj
2295 0 obj <<
/Title 2296 0 R
/A 2293 0 R
-/Parent 2235 0 R
-/Prev 2243 0 R
-/First 2299 0 R
-/Last 2299 0 R
-/Count -1
+/Parent 2287 0 R
+/Prev 2291 0 R
>> endobj
2291 0 obj <<
/Title 2292 0 R
/A 2289 0 R
-/Parent 2275 0 R
-/Prev 2287 0 R
+/Parent 2287 0 R
+/Next 2295 0 R
>> endobj
2287 0 obj <<
/Title 2288 0 R
/A 2285 0 R
/Parent 2275 0 R
-/Prev 2283 0 R
-/Next 2291 0 R
+/Prev 2279 0 R
+/Next 2299 0 R
+/First 2291 0 R
+/Last 2295 0 R
+/Count -2
>> endobj
2283 0 obj <<
/Title 2284 0 R
/A 2281 0 R
-/Parent 2275 0 R
-/Prev 2279 0 R
-/Next 2287 0 R
+/Parent 2279 0 R
>> endobj
2279 0 obj <<
/Title 2280 0 R
/A 2277 0 R
/Parent 2275 0 R
-/Next 2283 0 R
+/Next 2287 0 R
+/First 2283 0 R
+/Last 2283 0 R
+/Count -1
>> endobj
2275 0 obj <<
/Title 2276 0 R
/A 2273 0 R
-/Parent 2243 0 R
+/Parent 2267 0 R
/Prev 2271 0 R
+/Next 2327 0 R
/First 2279 0 R
-/Last 2291 0 R
-/Count -4
+/Last 2307 0 R
+/Count -5
>> endobj
2271 0 obj <<
/Title 2272 0 R
/A 2269 0 R
-/Parent 2243 0 R
-/Prev 2267 0 R
+/Parent 2267 0 R
/Next 2275 0 R
>> endobj
2267 0 obj <<
/Title 2268 0 R
/A 2265 0 R
-/Parent 2243 0 R
-/Prev 2255 0 R
-/Next 2271 0 R
+/Parent 467 0 R
+/Prev 2151 0 R
+/Next 2339 0 R
+/First 2271 0 R
+/Last 2327 0 R
+/Count -3
>> endobj
2263 0 obj <<
/Title 2264 0 R
/A 2261 0 R
-/Parent 2255 0 R
+/Parent 2251 0 R
/Prev 2259 0 R
>> endobj
2259 0 obj <<
/Title 2260 0 R
/A 2257 0 R
-/Parent 2255 0 R
+/Parent 2251 0 R
+/Prev 2255 0 R
/Next 2263 0 R
>> endobj
2255 0 obj <<
/Title 2256 0 R
/A 2253 0 R
-/Parent 2243 0 R
-/Prev 2247 0 R
-/Next 2267 0 R
-/First 2259 0 R
-/Last 2263 0 R
-/Count -2
+/Parent 2251 0 R
+/Next 2259 0 R
>> endobj
2251 0 obj <<
/Title 2252 0 R
/A 2249 0 R
-/Parent 2247 0 R
+/Parent 2151 0 R
+/Prev 2231 0 R
+/First 2255 0 R
+/Last 2263 0 R
+/Count -3
>> endobj
2247 0 obj <<
/Title 2248 0 R
/A 2245 0 R
-/Parent 2243 0 R
-/Next 2255 0 R
-/First 2251 0 R
-/Last 2251 0 R
-/Count -1
+/Parent 2231 0 R
+/Prev 2243 0 R
>> endobj
2243 0 obj <<
/Title 2244 0 R
/A 2241 0 R
-/Parent 2235 0 R
-/Prev 2239 0 R
-/Next 2295 0 R
-/First 2247 0 R
-/Last 2275 0 R
-/Count -5
+/Parent 2231 0 R
+/Prev 2235 0 R
+/Next 2247 0 R
>> endobj
2239 0 obj <<
/Title 2240 0 R
/A 2237 0 R
/Parent 2235 0 R
-/Next 2243 0 R
>> endobj
2235 0 obj <<
/Title 2236 0 R
/A 2233 0 R
-/Parent 455 0 R
-/Prev 2119 0 R
-/Next 2303 0 R
+/Parent 2231 0 R
+/Next 2243 0 R
/First 2239 0 R
-/Last 2295 0 R
-/Count -3
+/Last 2239 0 R
+/Count -1
>> endobj
2231 0 obj <<
/Title 2232 0 R
/A 2229 0 R
-/Parent 2219 0 R
+/Parent 2151 0 R
/Prev 2227 0 R
+/Next 2251 0 R
+/First 2235 0 R
+/Last 2247 0 R
+/Count -3
>> endobj
2227 0 obj <<
/Title 2228 0 R
/A 2225 0 R
-/Parent 2219 0 R
+/Parent 2151 0 R
/Prev 2223 0 R
/Next 2231 0 R
>> endobj
2223 0 obj <<
/Title 2224 0 R
/A 2221 0 R
-/Parent 2219 0 R
+/Parent 2151 0 R
+/Prev 2159 0 R
/Next 2227 0 R
>> endobj
2219 0 obj <<
/Title 2220 0 R
/A 2217 0 R
-/Parent 2119 0 R
-/Prev 2199 0 R
-/First 2223 0 R
-/Last 2231 0 R
-/Count -3
+/Parent 2203 0 R
+/Prev 2215 0 R
>> endobj
2215 0 obj <<
/Title 2216 0 R
/A 2213 0 R
-/Parent 2199 0 R
+/Parent 2203 0 R
/Prev 2211 0 R
+/Next 2219 0 R
>> endobj
2211 0 obj <<
/Title 2212 0 R
/A 2209 0 R
-/Parent 2199 0 R
-/Prev 2203 0 R
+/Parent 2203 0 R
+/Prev 2207 0 R
/Next 2215 0 R
>> endobj
2207 0 obj <<
/Title 2208 0 R
/A 2205 0 R
/Parent 2203 0 R
+/Next 2211 0 R
>> endobj
2203 0 obj <<
/Title 2204 0 R
/A 2201 0 R
-/Parent 2199 0 R
-/Next 2211 0 R
+/Parent 2159 0 R
+/Prev 2199 0 R
/First 2207 0 R
-/Last 2207 0 R
-/Count -1
+/Last 2219 0 R
+/Count -4
>> endobj
2199 0 obj <<
/Title 2200 0 R
/A 2197 0 R
-/Parent 2119 0 R
-/Prev 2195 0 R
-/Next 2219 0 R
-/First 2203 0 R
-/Last 2215 0 R
-/Count -3
+/Parent 2159 0 R
+/Prev 2183 0 R
+/Next 2203 0 R
>> endobj
2195 0 obj <<
/Title 2196 0 R
/A 2193 0 R
-/Parent 2119 0 R
+/Parent 2183 0 R
/Prev 2191 0 R
-/Next 2199 0 R
>> endobj
2191 0 obj <<
/Title 2192 0 R
/A 2189 0 R
-/Parent 2119 0 R
-/Prev 2127 0 R
+/Parent 2183 0 R
+/Prev 2187 0 R
/Next 2195 0 R
>> endobj
2187 0 obj <<
/Title 2188 0 R
/A 2185 0 R
-/Parent 2171 0 R
-/Prev 2183 0 R
+/Parent 2183 0 R
+/Next 2191 0 R
>> endobj
2183 0 obj <<
/Title 2184 0 R
/A 2181 0 R
-/Parent 2171 0 R
-/Prev 2179 0 R
-/Next 2187 0 R
+/Parent 2159 0 R
+/Prev 2163 0 R
+/Next 2199 0 R
+/First 2187 0 R
+/Last 2195 0 R
+/Count -3
>> endobj
2179 0 obj <<
/Title 2180 0 R
/A 2177 0 R
-/Parent 2171 0 R
+/Parent 2163 0 R
/Prev 2175 0 R
-/Next 2183 0 R
>> endobj
2175 0 obj <<
/Title 2176 0 R
/A 2173 0 R
-/Parent 2171 0 R
+/Parent 2163 0 R
+/Prev 2171 0 R
/Next 2179 0 R
>> endobj
2171 0 obj <<
/Title 2172 0 R
/A 2169 0 R
-/Parent 2127 0 R
+/Parent 2163 0 R
/Prev 2167 0 R
-/First 2175 0 R
-/Last 2187 0 R
-/Count -4
+/Next 2175 0 R
>> endobj
2167 0 obj <<
/Title 2168 0 R
/A 2165 0 R
-/Parent 2127 0 R
-/Prev 2151 0 R
+/Parent 2163 0 R
/Next 2171 0 R
>> endobj
2163 0 obj <<
/Title 2164 0 R
/A 2161 0 R
-/Parent 2151 0 R
-/Prev 2159 0 R
+/Parent 2159 0 R
+/Next 2183 0 R
+/First 2167 0 R
+/Last 2179 0 R
+/Count -4
>> endobj
2159 0 obj <<
/Title 2160 0 R
/A 2157 0 R
/Parent 2151 0 R
/Prev 2155 0 R
-/Next 2163 0 R
+/Next 2223 0 R
+/First 2163 0 R
+/Last 2203 0 R
+/Count -4
>> endobj
2155 0 obj <<
/Title 2156 0 R
@@ -33899,107 +37287,107 @@ endobj
2151 0 obj <<
/Title 2152 0 R
/A 2149 0 R
-/Parent 2127 0 R
-/Prev 2131 0 R
-/Next 2167 0 R
+/Parent 467 0 R
+/Prev 2091 0 R
+/Next 2267 0 R
/First 2155 0 R
-/Last 2163 0 R
-/Count -3
+/Last 2251 0 R
+/Count -6
>> endobj
2147 0 obj <<
/Title 2148 0 R
/A 2145 0 R
-/Parent 2131 0 R
-/Prev 2143 0 R
+/Parent 2143 0 R
>> endobj
2143 0 obj <<
/Title 2144 0 R
/A 2141 0 R
-/Parent 2131 0 R
+/Parent 2091 0 R
/Prev 2139 0 R
-/Next 2147 0 R
+/First 2147 0 R
+/Last 2147 0 R
+/Count -1
>> endobj
2139 0 obj <<
/Title 2140 0 R
/A 2137 0 R
-/Parent 2131 0 R
-/Prev 2135 0 R
+/Parent 2091 0 R
+/Prev 2123 0 R
/Next 2143 0 R
>> endobj
2135 0 obj <<
/Title 2136 0 R
/A 2133 0 R
-/Parent 2131 0 R
-/Next 2139 0 R
+/Parent 2123 0 R
+/Prev 2131 0 R
>> endobj
2131 0 obj <<
/Title 2132 0 R
/A 2129 0 R
-/Parent 2127 0 R
-/Next 2151 0 R
-/First 2135 0 R
-/Last 2147 0 R
-/Count -4
+/Parent 2123 0 R
+/Prev 2127 0 R
+/Next 2135 0 R
>> endobj
2127 0 obj <<
/Title 2128 0 R
/A 2125 0 R
-/Parent 2119 0 R
-/Prev 2123 0 R
-/Next 2191 0 R
-/First 2131 0 R
-/Last 2171 0 R
-/Count -4
+/Parent 2123 0 R
+/Next 2131 0 R
>> endobj
2123 0 obj <<
/Title 2124 0 R
/A 2121 0 R
-/Parent 2119 0 R
-/Next 2127 0 R
+/Parent 2091 0 R
+/Prev 2099 0 R
+/Next 2139 0 R
+/First 2127 0 R
+/Last 2135 0 R
+/Count -3
>> endobj
2119 0 obj <<
/Title 2120 0 R
/A 2117 0 R
-/Parent 455 0 R
-/Prev 2059 0 R
-/Next 2235 0 R
-/First 2123 0 R
-/Last 2219 0 R
-/Count -6
+/Parent 2115 0 R
>> endobj
2115 0 obj <<
/Title 2116 0 R
/A 2113 0 R
-/Parent 2111 0 R
+/Parent 2099 0 R
+/Prev 2107 0 R
+/First 2119 0 R
+/Last 2119 0 R
+/Count -1
>> endobj
2111 0 obj <<
/Title 2112 0 R
/A 2109 0 R
-/Parent 2059 0 R
-/Prev 2107 0 R
-/First 2115 0 R
-/Last 2115 0 R
-/Count -1
+/Parent 2107 0 R
>> endobj
2107 0 obj <<
/Title 2108 0 R
/A 2105 0 R
-/Parent 2059 0 R
-/Prev 2091 0 R
-/Next 2111 0 R
+/Parent 2099 0 R
+/Prev 2103 0 R
+/Next 2115 0 R
+/First 2111 0 R
+/Last 2111 0 R
+/Count -1
>> endobj
2103 0 obj <<
/Title 2104 0 R
/A 2101 0 R
-/Parent 2091 0 R
-/Prev 2099 0 R
+/Parent 2099 0 R
+/Next 2107 0 R
>> endobj
2099 0 obj <<
/Title 2100 0 R
/A 2097 0 R
/Parent 2091 0 R
/Prev 2095 0 R
-/Next 2103 0 R
+/Next 2123 0 R
+/First 2103 0 R
+/Last 2115 0 R
+/Count -3
>> endobj
2095 0 obj <<
/Title 2096 0 R
@@ -34010,57 +37398,55 @@ endobj
2091 0 obj <<
/Title 2092 0 R
/A 2089 0 R
-/Parent 2059 0 R
-/Prev 2067 0 R
-/Next 2107 0 R
+/Parent 467 0 R
+/Prev 2059 0 R
+/Next 2151 0 R
/First 2095 0 R
-/Last 2103 0 R
-/Count -3
+/Last 2143 0 R
+/Count -5
>> endobj
2087 0 obj <<
/Title 2088 0 R
/A 2085 0 R
-/Parent 2083 0 R
+/Parent 2059 0 R
+/Prev 2079 0 R
>> endobj
2083 0 obj <<
/Title 2084 0 R
/A 2081 0 R
-/Parent 2067 0 R
-/Prev 2075 0 R
-/First 2087 0 R
-/Last 2087 0 R
-/Count -1
+/Parent 2079 0 R
>> endobj
2079 0 obj <<
/Title 2080 0 R
/A 2077 0 R
-/Parent 2075 0 R
+/Parent 2059 0 R
+/Prev 2071 0 R
+/Next 2087 0 R
+/First 2083 0 R
+/Last 2083 0 R
+/Count -1
>> endobj
2075 0 obj <<
/Title 2076 0 R
/A 2073 0 R
-/Parent 2067 0 R
-/Prev 2071 0 R
-/Next 2083 0 R
-/First 2079 0 R
-/Last 2079 0 R
-/Count -1
+/Parent 2071 0 R
>> endobj
2071 0 obj <<
/Title 2072 0 R
/A 2069 0 R
-/Parent 2067 0 R
-/Next 2075 0 R
+/Parent 2059 0 R
+/Prev 2067 0 R
+/Next 2079 0 R
+/First 2075 0 R
+/Last 2075 0 R
+/Count -1
>> endobj
2067 0 obj <<
/Title 2068 0 R
/A 2065 0 R
/Parent 2059 0 R
/Prev 2063 0 R
-/Next 2091 0 R
-/First 2071 0 R
-/Last 2083 0 R
-/Count -3
+/Next 2071 0 R
>> endobj
2063 0 obj <<
/Title 2064 0 R
@@ -34071,204 +37457,206 @@ endobj
2059 0 obj <<
/Title 2060 0 R
/A 2057 0 R
-/Parent 455 0 R
-/Prev 2027 0 R
-/Next 2119 0 R
+/Parent 467 0 R
+/Prev 1955 0 R
+/Next 2091 0 R
/First 2063 0 R
-/Last 2111 0 R
+/Last 2087 0 R
/Count -5
>> endobj
2055 0 obj <<
/Title 2056 0 R
/A 2053 0 R
-/Parent 2027 0 R
-/Prev 2047 0 R
+/Parent 2051 0 R
>> endobj
2051 0 obj <<
/Title 2052 0 R
/A 2049 0 R
-/Parent 2047 0 R
+/Parent 1955 0 R
+/Prev 2047 0 R
+/First 2055 0 R
+/Last 2055 0 R
+/Count -1
>> endobj
2047 0 obj <<
/Title 2048 0 R
/A 2045 0 R
-/Parent 2027 0 R
-/Prev 2039 0 R
-/Next 2055 0 R
-/First 2051 0 R
-/Last 2051 0 R
-/Count -1
+/Parent 1955 0 R
+/Prev 2003 0 R
+/Next 2051 0 R
>> endobj
2043 0 obj <<
/Title 2044 0 R
/A 2041 0 R
-/Parent 2039 0 R
+/Parent 2015 0 R
+/Prev 2039 0 R
>> endobj
2039 0 obj <<
/Title 2040 0 R
/A 2037 0 R
-/Parent 2027 0 R
+/Parent 2015 0 R
/Prev 2035 0 R
-/Next 2047 0 R
-/First 2043 0 R
-/Last 2043 0 R
-/Count -1
+/Next 2043 0 R
>> endobj
2035 0 obj <<
/Title 2036 0 R
/A 2033 0 R
-/Parent 2027 0 R
+/Parent 2015 0 R
/Prev 2031 0 R
/Next 2039 0 R
>> endobj
2031 0 obj <<
/Title 2032 0 R
/A 2029 0 R
-/Parent 2027 0 R
+/Parent 2015 0 R
+/Prev 2027 0 R
/Next 2035 0 R
>> endobj
2027 0 obj <<
/Title 2028 0 R
/A 2025 0 R
-/Parent 455 0 R
-/Prev 1923 0 R
-/Next 2059 0 R
-/First 2031 0 R
-/Last 2055 0 R
-/Count -5
+/Parent 2015 0 R
+/Prev 2023 0 R
+/Next 2031 0 R
>> endobj
2023 0 obj <<
/Title 2024 0 R
/A 2021 0 R
-/Parent 1923 0 R
+/Parent 2015 0 R
/Prev 2019 0 R
+/Next 2027 0 R
>> endobj
2019 0 obj <<
/Title 2020 0 R
/A 2017 0 R
-/Parent 1923 0 R
-/Prev 1971 0 R
+/Parent 2015 0 R
/Next 2023 0 R
>> endobj
2015 0 obj <<
/Title 2016 0 R
/A 2013 0 R
-/Parent 1983 0 R
+/Parent 2003 0 R
/Prev 2011 0 R
+/First 2019 0 R
+/Last 2043 0 R
+/Count -7
>> endobj
2011 0 obj <<
/Title 2012 0 R
/A 2009 0 R
-/Parent 1983 0 R
+/Parent 2003 0 R
/Prev 2007 0 R
/Next 2015 0 R
>> endobj
2007 0 obj <<
/Title 2008 0 R
/A 2005 0 R
-/Parent 1983 0 R
-/Prev 2003 0 R
+/Parent 2003 0 R
/Next 2011 0 R
>> endobj
2003 0 obj <<
/Title 2004 0 R
/A 2001 0 R
-/Parent 1983 0 R
-/Prev 1999 0 R
-/Next 2007 0 R
+/Parent 1955 0 R
+/Prev 1975 0 R
+/Next 2047 0 R
+/First 2007 0 R
+/Last 2015 0 R
+/Count -3
>> endobj
1999 0 obj <<
/Title 2000 0 R
/A 1997 0 R
-/Parent 1983 0 R
+/Parent 1975 0 R
/Prev 1995 0 R
-/Next 2003 0 R
>> endobj
1995 0 obj <<
/Title 1996 0 R
/A 1993 0 R
-/Parent 1983 0 R
+/Parent 1975 0 R
/Prev 1991 0 R
/Next 1999 0 R
>> endobj
1991 0 obj <<
/Title 1992 0 R
/A 1989 0 R
-/Parent 1983 0 R
+/Parent 1975 0 R
/Prev 1987 0 R
/Next 1995 0 R
>> endobj
1987 0 obj <<
/Title 1988 0 R
/A 1985 0 R
-/Parent 1983 0 R
+/Parent 1975 0 R
+/Prev 1983 0 R
/Next 1991 0 R
>> endobj
1983 0 obj <<
/Title 1984 0 R
/A 1981 0 R
-/Parent 1971 0 R
+/Parent 1975 0 R
/Prev 1979 0 R
-/First 1987 0 R
-/Last 2015 0 R
-/Count -8
+/Next 1987 0 R
>> endobj
1979 0 obj <<
/Title 1980 0 R
/A 1977 0 R
-/Parent 1971 0 R
-/Prev 1975 0 R
+/Parent 1975 0 R
/Next 1983 0 R
>> endobj
1975 0 obj <<
/Title 1976 0 R
/A 1973 0 R
-/Parent 1971 0 R
-/Next 1979 0 R
+/Parent 1955 0 R
+/Prev 1967 0 R
+/Next 2003 0 R
+/First 1979 0 R
+/Last 1999 0 R
+/Count -6
>> endobj
1971 0 obj <<
/Title 1972 0 R
/A 1969 0 R
-/Parent 1923 0 R
-/Prev 1943 0 R
-/Next 2019 0 R
-/First 1975 0 R
-/Last 1983 0 R
-/Count -3
+/Parent 1967 0 R
>> endobj
1967 0 obj <<
/Title 1968 0 R
/A 1965 0 R
-/Parent 1943 0 R
+/Parent 1955 0 R
/Prev 1963 0 R
+/Next 1975 0 R
+/First 1971 0 R
+/Last 1971 0 R
+/Count -1
>> endobj
1963 0 obj <<
/Title 1964 0 R
/A 1961 0 R
-/Parent 1943 0 R
+/Parent 1955 0 R
/Prev 1959 0 R
/Next 1967 0 R
>> endobj
1959 0 obj <<
/Title 1960 0 R
/A 1957 0 R
-/Parent 1943 0 R
-/Prev 1955 0 R
+/Parent 1955 0 R
/Next 1963 0 R
>> endobj
1955 0 obj <<
/Title 1956 0 R
/A 1953 0 R
-/Parent 1943 0 R
-/Prev 1951 0 R
-/Next 1959 0 R
+/Parent 467 0 R
+/Prev 1907 0 R
+/Next 2059 0 R
+/First 1959 0 R
+/Last 2051 0 R
+/Count -7
>> endobj
1951 0 obj <<
/Title 1952 0 R
/A 1949 0 R
/Parent 1943 0 R
/Prev 1947 0 R
-/Next 1955 0 R
>> endobj
1947 0 obj <<
/Title 1948 0 R
@@ -34279,62 +37667,61 @@ endobj
1943 0 obj <<
/Title 1944 0 R
/A 1941 0 R
-/Parent 1923 0 R
-/Prev 1935 0 R
-/Next 1971 0 R
+/Parent 1907 0 R
+/Prev 1919 0 R
/First 1947 0 R
-/Last 1967 0 R
-/Count -6
+/Last 1951 0 R
+/Count -2
>> endobj
1939 0 obj <<
/Title 1940 0 R
/A 1937 0 R
-/Parent 1935 0 R
+/Parent 1919 0 R
+/Prev 1935 0 R
>> endobj
1935 0 obj <<
/Title 1936 0 R
/A 1933 0 R
-/Parent 1923 0 R
+/Parent 1919 0 R
/Prev 1931 0 R
-/Next 1943 0 R
-/First 1939 0 R
-/Last 1939 0 R
-/Count -1
+/Next 1939 0 R
>> endobj
1931 0 obj <<
/Title 1932 0 R
/A 1929 0 R
-/Parent 1923 0 R
+/Parent 1919 0 R
/Prev 1927 0 R
/Next 1935 0 R
>> endobj
1927 0 obj <<
/Title 1928 0 R
/A 1925 0 R
-/Parent 1923 0 R
+/Parent 1919 0 R
+/Prev 1923 0 R
/Next 1931 0 R
>> endobj
1923 0 obj <<
/Title 1924 0 R
/A 1921 0 R
-/Parent 455 0 R
-/Prev 1871 0 R
-/Next 2027 0 R
-/First 1927 0 R
-/Last 2023 0 R
-/Count -7
+/Parent 1919 0 R
+/Next 1927 0 R
>> endobj
1919 0 obj <<
/Title 1920 0 R
/A 1917 0 R
-/Parent 1871 0 R
-/Prev 1907 0 R
+/Parent 1907 0 R
+/Prev 1915 0 R
+/Next 1943 0 R
+/First 1923 0 R
+/Last 1939 0 R
+/Count -5
>> endobj
1915 0 obj <<
/Title 1916 0 R
/A 1913 0 R
/Parent 1907 0 R
/Prev 1911 0 R
+/Next 1919 0 R
>> endobj
1911 0 obj <<
/Title 1912 0 R
@@ -34345,646 +37732,644 @@ endobj
1907 0 obj <<
/Title 1908 0 R
/A 1905 0 R
-/Parent 1871 0 R
-/Prev 1883 0 R
-/Next 1919 0 R
+/Parent 467 0 R
+/Prev 1367 0 R
+/Next 1955 0 R
/First 1911 0 R
-/Last 1915 0 R
-/Count -2
+/Last 1943 0 R
+/Count -4
>> endobj
1903 0 obj <<
/Title 1904 0 R
/A 1901 0 R
-/Parent 1883 0 R
-/Prev 1899 0 R
+/Parent 1367 0 R
+/Prev 1823 0 R
>> endobj
1899 0 obj <<
/Title 1900 0 R
/A 1897 0 R
-/Parent 1883 0 R
+/Parent 1823 0 R
/Prev 1895 0 R
-/Next 1903 0 R
>> endobj
1895 0 obj <<
/Title 1896 0 R
/A 1893 0 R
-/Parent 1883 0 R
+/Parent 1823 0 R
/Prev 1891 0 R
/Next 1899 0 R
>> endobj
1891 0 obj <<
/Title 1892 0 R
/A 1889 0 R
-/Parent 1883 0 R
+/Parent 1823 0 R
/Prev 1887 0 R
/Next 1895 0 R
>> endobj
1887 0 obj <<
/Title 1888 0 R
/A 1885 0 R
-/Parent 1883 0 R
+/Parent 1823 0 R
+/Prev 1883 0 R
/Next 1891 0 R
>> endobj
1883 0 obj <<
/Title 1884 0 R
/A 1881 0 R
-/Parent 1871 0 R
+/Parent 1823 0 R
/Prev 1879 0 R
-/Next 1907 0 R
-/First 1887 0 R
-/Last 1903 0 R
-/Count -5
+/Next 1887 0 R
>> endobj
1879 0 obj <<
/Title 1880 0 R
/A 1877 0 R
-/Parent 1871 0 R
+/Parent 1823 0 R
/Prev 1875 0 R
/Next 1883 0 R
>> endobj
1875 0 obj <<
/Title 1876 0 R
/A 1873 0 R
-/Parent 1871 0 R
+/Parent 1823 0 R
+/Prev 1871 0 R
/Next 1879 0 R
>> endobj
1871 0 obj <<
/Title 1872 0 R
/A 1869 0 R
-/Parent 455 0 R
-/Prev 1327 0 R
-/Next 1923 0 R
-/First 1875 0 R
-/Last 1919 0 R
-/Count -5
+/Parent 1823 0 R
+/Prev 1867 0 R
+/Next 1875 0 R
>> endobj
1867 0 obj <<
/Title 1868 0 R
/A 1865 0 R
-/Parent 1851 0 R
+/Parent 1823 0 R
/Prev 1863 0 R
+/Next 1871 0 R
>> endobj
1863 0 obj <<
/Title 1864 0 R
/A 1861 0 R
-/Parent 1851 0 R
+/Parent 1823 0 R
/Prev 1859 0 R
/Next 1867 0 R
>> endobj
1859 0 obj <<
/Title 1860 0 R
/A 1857 0 R
-/Parent 1851 0 R
+/Parent 1823 0 R
/Prev 1855 0 R
/Next 1863 0 R
>> endobj
1855 0 obj <<
/Title 1856 0 R
/A 1853 0 R
-/Parent 1851 0 R
+/Parent 1823 0 R
+/Prev 1851 0 R
/Next 1859 0 R
>> endobj
1851 0 obj <<
/Title 1852 0 R
/A 1849 0 R
-/Parent 1327 0 R
-/Prev 1835 0 R
-/First 1855 0 R
-/Last 1867 0 R
-/Count -4
+/Parent 1823 0 R
+/Prev 1847 0 R
+/Next 1855 0 R
>> endobj
1847 0 obj <<
/Title 1848 0 R
/A 1845 0 R
-/Parent 1835 0 R
+/Parent 1823 0 R
/Prev 1843 0 R
+/Next 1851 0 R
>> endobj
1843 0 obj <<
/Title 1844 0 R
/A 1841 0 R
-/Parent 1835 0 R
+/Parent 1823 0 R
/Prev 1839 0 R
/Next 1847 0 R
>> endobj
1839 0 obj <<
/Title 1840 0 R
/A 1837 0 R
-/Parent 1835 0 R
+/Parent 1823 0 R
+/Prev 1835 0 R
/Next 1843 0 R
>> endobj
1835 0 obj <<
/Title 1836 0 R
/A 1833 0 R
-/Parent 1327 0 R
+/Parent 1823 0 R
/Prev 1831 0 R
-/Next 1851 0 R
-/First 1839 0 R
-/Last 1847 0 R
-/Count -3
+/Next 1839 0 R
>> endobj
1831 0 obj <<
/Title 1832 0 R
/A 1829 0 R
-/Parent 1327 0 R
-/Prev 1815 0 R
+/Parent 1823 0 R
+/Prev 1827 0 R
/Next 1835 0 R
>> endobj
1827 0 obj <<
/Title 1828 0 R
/A 1825 0 R
-/Parent 1815 0 R
-/Prev 1823 0 R
+/Parent 1823 0 R
+/Next 1831 0 R
>> endobj
1823 0 obj <<
/Title 1824 0 R
/A 1821 0 R
-/Parent 1815 0 R
+/Parent 1367 0 R
/Prev 1819 0 R
-/Next 1827 0 R
+/Next 1903 0 R
+/First 1827 0 R
+/Last 1899 0 R
+/Count -19
>> endobj
1819 0 obj <<
/Title 1820 0 R
/A 1817 0 R
-/Parent 1815 0 R
+/Parent 1367 0 R
+/Prev 1815 0 R
/Next 1823 0 R
>> endobj
1815 0 obj <<
/Title 1816 0 R
/A 1813 0 R
-/Parent 1327 0 R
+/Parent 1367 0 R
/Prev 1811 0 R
-/Next 1831 0 R
-/First 1819 0 R
-/Last 1827 0 R
-/Count -3
+/Next 1819 0 R
>> endobj
1811 0 obj <<
/Title 1812 0 R
/A 1809 0 R
-/Parent 1327 0 R
-/Prev 1779 0 R
+/Parent 1367 0 R
+/Prev 1795 0 R
/Next 1815 0 R
>> endobj
1807 0 obj <<
/Title 1808 0 R
/A 1805 0 R
-/Parent 1779 0 R
+/Parent 1795 0 R
/Prev 1803 0 R
>> endobj
1803 0 obj <<
/Title 1804 0 R
/A 1801 0 R
-/Parent 1779 0 R
+/Parent 1795 0 R
/Prev 1799 0 R
/Next 1807 0 R
>> endobj
1799 0 obj <<
/Title 1800 0 R
/A 1797 0 R
-/Parent 1779 0 R
-/Prev 1795 0 R
+/Parent 1795 0 R
/Next 1803 0 R
>> endobj
1795 0 obj <<
/Title 1796 0 R
/A 1793 0 R
-/Parent 1779 0 R
+/Parent 1367 0 R
/Prev 1791 0 R
-/Next 1799 0 R
+/Next 1811 0 R
+/First 1799 0 R
+/Last 1807 0 R
+/Count -3
>> endobj
1791 0 obj <<
/Title 1792 0 R
/A 1789 0 R
-/Parent 1779 0 R
-/Prev 1787 0 R
+/Parent 1367 0 R
+/Prev 1759 0 R
/Next 1795 0 R
>> endobj
1787 0 obj <<
/Title 1788 0 R
/A 1785 0 R
-/Parent 1779 0 R
+/Parent 1759 0 R
/Prev 1783 0 R
-/Next 1791 0 R
>> endobj
1783 0 obj <<
/Title 1784 0 R
/A 1781 0 R
-/Parent 1779 0 R
+/Parent 1759 0 R
+/Prev 1779 0 R
/Next 1787 0 R
>> endobj
1779 0 obj <<
/Title 1780 0 R
/A 1777 0 R
-/Parent 1327 0 R
-/Prev 1735 0 R
-/Next 1811 0 R
-/First 1783 0 R
-/Last 1807 0 R
-/Count -7
+/Parent 1759 0 R
+/Prev 1775 0 R
+/Next 1783 0 R
>> endobj
1775 0 obj <<
/Title 1776 0 R
/A 1773 0 R
-/Parent 1735 0 R
-/Prev 1739 0 R
+/Parent 1759 0 R
+/Prev 1771 0 R
+/Next 1779 0 R
>> endobj
1771 0 obj <<
/Title 1772 0 R
/A 1769 0 R
-/Parent 1739 0 R
+/Parent 1759 0 R
/Prev 1767 0 R
+/Next 1775 0 R
>> endobj
1767 0 obj <<
/Title 1768 0 R
/A 1765 0 R
-/Parent 1739 0 R
+/Parent 1759 0 R
/Prev 1763 0 R
/Next 1771 0 R
>> endobj
1763 0 obj <<
/Title 1764 0 R
/A 1761 0 R
-/Parent 1739 0 R
-/Prev 1759 0 R
+/Parent 1759 0 R
/Next 1767 0 R
>> endobj
1759 0 obj <<
/Title 1760 0 R
/A 1757 0 R
-/Parent 1739 0 R
-/Prev 1755 0 R
-/Next 1763 0 R
+/Parent 1367 0 R
+/Prev 1715 0 R
+/Next 1791 0 R
+/First 1763 0 R
+/Last 1787 0 R
+/Count -7
>> endobj
1755 0 obj <<
/Title 1756 0 R
/A 1753 0 R
-/Parent 1739 0 R
-/Prev 1751 0 R
-/Next 1759 0 R
+/Parent 1715 0 R
+/Prev 1719 0 R
>> endobj
1751 0 obj <<
/Title 1752 0 R
/A 1749 0 R
-/Parent 1739 0 R
+/Parent 1719 0 R
/Prev 1747 0 R
-/Next 1755 0 R
>> endobj
1747 0 obj <<
/Title 1748 0 R
/A 1745 0 R
-/Parent 1739 0 R
+/Parent 1719 0 R
/Prev 1743 0 R
/Next 1751 0 R
>> endobj
1743 0 obj <<
/Title 1744 0 R
/A 1741 0 R
-/Parent 1739 0 R
+/Parent 1719 0 R
+/Prev 1739 0 R
/Next 1747 0 R
>> endobj
1739 0 obj <<
/Title 1740 0 R
/A 1737 0 R
-/Parent 1735 0 R
-/Next 1775 0 R
-/First 1743 0 R
-/Last 1771 0 R
-/Count -8
+/Parent 1719 0 R
+/Prev 1735 0 R
+/Next 1743 0 R
>> endobj
1735 0 obj <<
/Title 1736 0 R
/A 1733 0 R
-/Parent 1327 0 R
-/Prev 1715 0 R
-/Next 1779 0 R
-/First 1739 0 R
-/Last 1775 0 R
-/Count -2
+/Parent 1719 0 R
+/Prev 1731 0 R
+/Next 1739 0 R
>> endobj
1731 0 obj <<
/Title 1732 0 R
/A 1729 0 R
-/Parent 1715 0 R
+/Parent 1719 0 R
/Prev 1727 0 R
+/Next 1735 0 R
>> endobj
1727 0 obj <<
/Title 1728 0 R
/A 1725 0 R
-/Parent 1715 0 R
+/Parent 1719 0 R
/Prev 1723 0 R
/Next 1731 0 R
>> endobj
1723 0 obj <<
/Title 1724 0 R
/A 1721 0 R
-/Parent 1715 0 R
-/Prev 1719 0 R
+/Parent 1719 0 R
/Next 1727 0 R
>> endobj
1719 0 obj <<
/Title 1720 0 R
/A 1717 0 R
/Parent 1715 0 R
-/Next 1723 0 R
+/Next 1755 0 R
+/First 1723 0 R
+/Last 1751 0 R
+/Count -8
>> endobj
1715 0 obj <<
/Title 1716 0 R
/A 1713 0 R
-/Parent 1327 0 R
-/Prev 1627 0 R
-/Next 1735 0 R
+/Parent 1367 0 R
+/Prev 1695 0 R
+/Next 1759 0 R
/First 1719 0 R
-/Last 1731 0 R
-/Count -4
+/Last 1755 0 R
+/Count -2
>> endobj
1711 0 obj <<
/Title 1712 0 R
/A 1709 0 R
-/Parent 1627 0 R
-/Prev 1647 0 R
+/Parent 1695 0 R
+/Prev 1707 0 R
>> endobj
1707 0 obj <<
/Title 1708 0 R
/A 1705 0 R
-/Parent 1647 0 R
+/Parent 1695 0 R
/Prev 1703 0 R
+/Next 1711 0 R
>> endobj
1703 0 obj <<
/Title 1704 0 R
/A 1701 0 R
-/Parent 1647 0 R
+/Parent 1695 0 R
/Prev 1699 0 R
/Next 1707 0 R
>> endobj
1699 0 obj <<
/Title 1700 0 R
/A 1697 0 R
-/Parent 1647 0 R
-/Prev 1695 0 R
+/Parent 1695 0 R
/Next 1703 0 R
>> endobj
1695 0 obj <<
/Title 1696 0 R
/A 1693 0 R
-/Parent 1647 0 R
-/Prev 1691 0 R
-/Next 1699 0 R
+/Parent 1367 0 R
+/Prev 1667 0 R
+/Next 1715 0 R
+/First 1699 0 R
+/Last 1711 0 R
+/Count -4
>> endobj
1691 0 obj <<
/Title 1692 0 R
/A 1689 0 R
-/Parent 1647 0 R
+/Parent 1667 0 R
/Prev 1687 0 R
-/Next 1695 0 R
>> endobj
1687 0 obj <<
/Title 1688 0 R
/A 1685 0 R
-/Parent 1647 0 R
+/Parent 1667 0 R
/Prev 1683 0 R
/Next 1691 0 R
>> endobj
1683 0 obj <<
/Title 1684 0 R
/A 1681 0 R
-/Parent 1647 0 R
+/Parent 1667 0 R
/Prev 1679 0 R
/Next 1687 0 R
>> endobj
1679 0 obj <<
/Title 1680 0 R
/A 1677 0 R
-/Parent 1647 0 R
+/Parent 1667 0 R
/Prev 1675 0 R
/Next 1683 0 R
>> endobj
1675 0 obj <<
/Title 1676 0 R
/A 1673 0 R
-/Parent 1647 0 R
+/Parent 1667 0 R
/Prev 1671 0 R
/Next 1679 0 R
>> endobj
1671 0 obj <<
/Title 1672 0 R
/A 1669 0 R
-/Parent 1647 0 R
-/Prev 1667 0 R
+/Parent 1667 0 R
/Next 1675 0 R
>> endobj
1667 0 obj <<
/Title 1668 0 R
/A 1665 0 R
-/Parent 1647 0 R
-/Prev 1663 0 R
-/Next 1671 0 R
+/Parent 1367 0 R
+/Prev 1599 0 R
+/Next 1695 0 R
+/First 1671 0 R
+/Last 1691 0 R
+/Count -6
>> endobj
1663 0 obj <<
/Title 1664 0 R
/A 1661 0 R
-/Parent 1647 0 R
+/Parent 1599 0 R
/Prev 1659 0 R
-/Next 1667 0 R
>> endobj
1659 0 obj <<
/Title 1660 0 R
/A 1657 0 R
-/Parent 1647 0 R
+/Parent 1599 0 R
/Prev 1655 0 R
/Next 1663 0 R
>> endobj
1655 0 obj <<
/Title 1656 0 R
/A 1653 0 R
-/Parent 1647 0 R
+/Parent 1599 0 R
/Prev 1651 0 R
/Next 1659 0 R
>> endobj
1651 0 obj <<
/Title 1652 0 R
/A 1649 0 R
-/Parent 1647 0 R
+/Parent 1599 0 R
+/Prev 1647 0 R
/Next 1655 0 R
>> endobj
1647 0 obj <<
/Title 1648 0 R
/A 1645 0 R
-/Parent 1627 0 R
+/Parent 1599 0 R
/Prev 1643 0 R
-/Next 1711 0 R
-/First 1651 0 R
-/Last 1707 0 R
-/Count -15
+/Next 1651 0 R
>> endobj
1643 0 obj <<
/Title 1644 0 R
/A 1641 0 R
-/Parent 1627 0 R
+/Parent 1599 0 R
/Prev 1639 0 R
/Next 1647 0 R
>> endobj
1639 0 obj <<
/Title 1640 0 R
/A 1637 0 R
-/Parent 1627 0 R
+/Parent 1599 0 R
/Prev 1635 0 R
/Next 1643 0 R
>> endobj
1635 0 obj <<
/Title 1636 0 R
/A 1633 0 R
-/Parent 1627 0 R
+/Parent 1599 0 R
/Prev 1631 0 R
/Next 1639 0 R
>> endobj
1631 0 obj <<
/Title 1632 0 R
/A 1629 0 R
-/Parent 1627 0 R
+/Parent 1599 0 R
+/Prev 1627 0 R
/Next 1635 0 R
>> endobj
1627 0 obj <<
/Title 1628 0 R
/A 1625 0 R
-/Parent 1327 0 R
-/Prev 1559 0 R
-/Next 1715 0 R
-/First 1631 0 R
-/Last 1711 0 R
-/Count -6
+/Parent 1599 0 R
+/Prev 1623 0 R
+/Next 1631 0 R
>> endobj
1623 0 obj <<
/Title 1624 0 R
/A 1621 0 R
-/Parent 1559 0 R
+/Parent 1599 0 R
/Prev 1619 0 R
+/Next 1627 0 R
>> endobj
1619 0 obj <<
/Title 1620 0 R
/A 1617 0 R
-/Parent 1559 0 R
+/Parent 1599 0 R
/Prev 1615 0 R
/Next 1623 0 R
>> endobj
1615 0 obj <<
/Title 1616 0 R
/A 1613 0 R
-/Parent 1559 0 R
+/Parent 1599 0 R
/Prev 1611 0 R
/Next 1619 0 R
>> endobj
1611 0 obj <<
/Title 1612 0 R
/A 1609 0 R
-/Parent 1559 0 R
+/Parent 1599 0 R
/Prev 1607 0 R
/Next 1615 0 R
>> endobj
1607 0 obj <<
/Title 1608 0 R
/A 1605 0 R
-/Parent 1559 0 R
+/Parent 1599 0 R
/Prev 1603 0 R
/Next 1611 0 R
>> endobj
1603 0 obj <<
/Title 1604 0 R
/A 1601 0 R
-/Parent 1559 0 R
-/Prev 1599 0 R
+/Parent 1599 0 R
/Next 1607 0 R
>> endobj
1599 0 obj <<
/Title 1600 0 R
/A 1597 0 R
-/Parent 1559 0 R
-/Prev 1595 0 R
-/Next 1603 0 R
+/Parent 1367 0 R
+/Prev 1579 0 R
+/Next 1667 0 R
+/First 1603 0 R
+/Last 1663 0 R
+/Count -16
>> endobj
1595 0 obj <<
/Title 1596 0 R
/A 1593 0 R
-/Parent 1559 0 R
+/Parent 1579 0 R
/Prev 1591 0 R
-/Next 1599 0 R
>> endobj
1591 0 obj <<
/Title 1592 0 R
/A 1589 0 R
-/Parent 1559 0 R
+/Parent 1579 0 R
/Prev 1587 0 R
/Next 1595 0 R
>> endobj
1587 0 obj <<
/Title 1588 0 R
/A 1585 0 R
-/Parent 1559 0 R
+/Parent 1579 0 R
/Prev 1583 0 R
/Next 1591 0 R
>> endobj
1583 0 obj <<
/Title 1584 0 R
/A 1581 0 R
-/Parent 1559 0 R
-/Prev 1579 0 R
+/Parent 1579 0 R
/Next 1587 0 R
>> endobj
1579 0 obj <<
/Title 1580 0 R
/A 1577 0 R
-/Parent 1559 0 R
-/Prev 1575 0 R
-/Next 1583 0 R
+/Parent 1367 0 R
+/Prev 1567 0 R
+/Next 1599 0 R
+/First 1583 0 R
+/Last 1595 0 R
+/Count -4
>> endobj
1575 0 obj <<
/Title 1576 0 R
/A 1573 0 R
-/Parent 1559 0 R
+/Parent 1567 0 R
/Prev 1571 0 R
-/Next 1579 0 R
>> endobj
1571 0 obj <<
/Title 1572 0 R
/A 1569 0 R
-/Parent 1559 0 R
-/Prev 1567 0 R
+/Parent 1567 0 R
/Next 1575 0 R
>> endobj
1567 0 obj <<
/Title 1568 0 R
/A 1565 0 R
-/Parent 1559 0 R
-/Prev 1563 0 R
-/Next 1571 0 R
+/Parent 1367 0 R
+/Prev 1555 0 R
+/Next 1579 0 R
+/First 1571 0 R
+/Last 1575 0 R
+/Count -2
>> endobj
1563 0 obj <<
/Title 1564 0 R
/A 1561 0 R
-/Parent 1559 0 R
-/Next 1567 0 R
+/Parent 1555 0 R
+/Prev 1559 0 R
>> endobj
1559 0 obj <<
/Title 1560 0 R
/A 1557 0 R
-/Parent 1327 0 R
-/Prev 1539 0 R
-/Next 1627 0 R
-/First 1563 0 R
-/Last 1623 0 R
-/Count -16
+/Parent 1555 0 R
+/Next 1563 0 R
>> endobj
1555 0 obj <<
/Title 1556 0 R
/A 1553 0 R
-/Parent 1539 0 R
-/Prev 1551 0 R
+/Parent 1367 0 R
+/Prev 1539 0 R
+/Next 1567 0 R
+/First 1559 0 R
+/Last 1563 0 R
+/Count -2
>> endobj
1551 0 obj <<
/Title 1552 0 R
/A 1549 0 R
/Parent 1539 0 R
/Prev 1547 0 R
-/Next 1555 0 R
>> endobj
1547 0 obj <<
/Title 1548 0 R
@@ -35002,267 +38387,266 @@ endobj
1539 0 obj <<
/Title 1540 0 R
/A 1537 0 R
-/Parent 1327 0 R
-/Prev 1527 0 R
-/Next 1559 0 R
+/Parent 1367 0 R
+/Prev 1459 0 R
+/Next 1555 0 R
/First 1543 0 R
-/Last 1555 0 R
-/Count -4
+/Last 1551 0 R
+/Count -3
>> endobj
1535 0 obj <<
/Title 1536 0 R
/A 1533 0 R
-/Parent 1527 0 R
+/Parent 1459 0 R
/Prev 1531 0 R
>> endobj
1531 0 obj <<
/Title 1532 0 R
/A 1529 0 R
-/Parent 1527 0 R
+/Parent 1459 0 R
+/Prev 1527 0 R
/Next 1535 0 R
>> endobj
1527 0 obj <<
/Title 1528 0 R
/A 1525 0 R
-/Parent 1327 0 R
-/Prev 1515 0 R
-/Next 1539 0 R
-/First 1531 0 R
-/Last 1535 0 R
-/Count -2
+/Parent 1459 0 R
+/Prev 1523 0 R
+/Next 1531 0 R
>> endobj
1523 0 obj <<
/Title 1524 0 R
/A 1521 0 R
-/Parent 1515 0 R
+/Parent 1459 0 R
/Prev 1519 0 R
+/Next 1527 0 R
>> endobj
1519 0 obj <<
/Title 1520 0 R
/A 1517 0 R
-/Parent 1515 0 R
+/Parent 1459 0 R
+/Prev 1515 0 R
/Next 1523 0 R
>> endobj
1515 0 obj <<
/Title 1516 0 R
/A 1513 0 R
-/Parent 1327 0 R
-/Prev 1499 0 R
-/Next 1527 0 R
-/First 1519 0 R
-/Last 1523 0 R
-/Count -2
+/Parent 1459 0 R
+/Prev 1511 0 R
+/Next 1519 0 R
>> endobj
1511 0 obj <<
/Title 1512 0 R
/A 1509 0 R
-/Parent 1499 0 R
+/Parent 1459 0 R
/Prev 1507 0 R
+/Next 1515 0 R
>> endobj
1507 0 obj <<
/Title 1508 0 R
/A 1505 0 R
-/Parent 1499 0 R
+/Parent 1459 0 R
/Prev 1503 0 R
/Next 1511 0 R
>> endobj
1503 0 obj <<
/Title 1504 0 R
/A 1501 0 R
-/Parent 1499 0 R
+/Parent 1459 0 R
+/Prev 1499 0 R
/Next 1507 0 R
>> endobj
1499 0 obj <<
/Title 1500 0 R
/A 1497 0 R
-/Parent 1327 0 R
-/Prev 1419 0 R
-/Next 1515 0 R
-/First 1503 0 R
-/Last 1511 0 R
-/Count -3
+/Parent 1459 0 R
+/Prev 1495 0 R
+/Next 1503 0 R
>> endobj
1495 0 obj <<
/Title 1496 0 R
/A 1493 0 R
-/Parent 1419 0 R
+/Parent 1459 0 R
/Prev 1491 0 R
+/Next 1499 0 R
>> endobj
1491 0 obj <<
/Title 1492 0 R
/A 1489 0 R
-/Parent 1419 0 R
+/Parent 1459 0 R
/Prev 1487 0 R
/Next 1495 0 R
>> endobj
1487 0 obj <<
/Title 1488 0 R
/A 1485 0 R
-/Parent 1419 0 R
+/Parent 1459 0 R
/Prev 1483 0 R
/Next 1491 0 R
>> endobj
1483 0 obj <<
/Title 1484 0 R
/A 1481 0 R
-/Parent 1419 0 R
+/Parent 1459 0 R
/Prev 1479 0 R
/Next 1487 0 R
>> endobj
1479 0 obj <<
/Title 1480 0 R
/A 1477 0 R
-/Parent 1419 0 R
+/Parent 1459 0 R
/Prev 1475 0 R
/Next 1483 0 R
>> endobj
1475 0 obj <<
/Title 1476 0 R
/A 1473 0 R
-/Parent 1419 0 R
+/Parent 1459 0 R
/Prev 1471 0 R
/Next 1479 0 R
>> endobj
1471 0 obj <<
/Title 1472 0 R
/A 1469 0 R
-/Parent 1419 0 R
+/Parent 1459 0 R
/Prev 1467 0 R
/Next 1475 0 R
>> endobj
1467 0 obj <<
/Title 1468 0 R
/A 1465 0 R
-/Parent 1419 0 R
+/Parent 1459 0 R
/Prev 1463 0 R
/Next 1471 0 R
>> endobj
1463 0 obj <<
/Title 1464 0 R
/A 1461 0 R
-/Parent 1419 0 R
-/Prev 1459 0 R
+/Parent 1459 0 R
/Next 1467 0 R
>> endobj
1459 0 obj <<
/Title 1460 0 R
/A 1457 0 R
-/Parent 1419 0 R
-/Prev 1455 0 R
-/Next 1463 0 R
+/Parent 1367 0 R
+/Prev 1423 0 R
+/Next 1539 0 R
+/First 1463 0 R
+/Last 1535 0 R
+/Count -19
>> endobj
1455 0 obj <<
/Title 1456 0 R
/A 1453 0 R
-/Parent 1419 0 R
+/Parent 1423 0 R
/Prev 1451 0 R
-/Next 1459 0 R
>> endobj
1451 0 obj <<
/Title 1452 0 R
/A 1449 0 R
-/Parent 1419 0 R
+/Parent 1423 0 R
/Prev 1447 0 R
/Next 1455 0 R
>> endobj
1447 0 obj <<
/Title 1448 0 R
/A 1445 0 R
-/Parent 1419 0 R
+/Parent 1423 0 R
/Prev 1443 0 R
/Next 1451 0 R
>> endobj
1443 0 obj <<
/Title 1444 0 R
/A 1441 0 R
-/Parent 1419 0 R
+/Parent 1423 0 R
/Prev 1439 0 R
/Next 1447 0 R
>> endobj
1439 0 obj <<
/Title 1440 0 R
/A 1437 0 R
-/Parent 1419 0 R
+/Parent 1423 0 R
/Prev 1435 0 R
/Next 1443 0 R
>> endobj
1435 0 obj <<
/Title 1436 0 R
/A 1433 0 R
-/Parent 1419 0 R
+/Parent 1423 0 R
/Prev 1431 0 R
/Next 1439 0 R
>> endobj
1431 0 obj <<
/Title 1432 0 R
/A 1429 0 R
-/Parent 1419 0 R
+/Parent 1423 0 R
/Prev 1427 0 R
/Next 1435 0 R
>> endobj
1427 0 obj <<
/Title 1428 0 R
/A 1425 0 R
-/Parent 1419 0 R
-/Prev 1423 0 R
+/Parent 1423 0 R
/Next 1431 0 R
>> endobj
1423 0 obj <<
/Title 1424 0 R
/A 1421 0 R
-/Parent 1419 0 R
-/Next 1427 0 R
+/Parent 1367 0 R
+/Prev 1399 0 R
+/Next 1459 0 R
+/First 1427 0 R
+/Last 1455 0 R
+/Count -8
>> endobj
1419 0 obj <<
/Title 1420 0 R
/A 1417 0 R
-/Parent 1327 0 R
-/Prev 1383 0 R
-/Next 1499 0 R
-/First 1423 0 R
-/Last 1495 0 R
-/Count -19
+/Parent 1399 0 R
+/Prev 1415 0 R
>> endobj
1415 0 obj <<
/Title 1416 0 R
/A 1413 0 R
-/Parent 1383 0 R
+/Parent 1399 0 R
/Prev 1411 0 R
+/Next 1419 0 R
>> endobj
1411 0 obj <<
/Title 1412 0 R
/A 1409 0 R
-/Parent 1383 0 R
+/Parent 1399 0 R
/Prev 1407 0 R
/Next 1415 0 R
>> endobj
1407 0 obj <<
/Title 1408 0 R
/A 1405 0 R
-/Parent 1383 0 R
+/Parent 1399 0 R
/Prev 1403 0 R
/Next 1411 0 R
>> endobj
1403 0 obj <<
/Title 1404 0 R
/A 1401 0 R
-/Parent 1383 0 R
-/Prev 1399 0 R
+/Parent 1399 0 R
/Next 1407 0 R
>> endobj
1399 0 obj <<
/Title 1400 0 R
/A 1397 0 R
-/Parent 1383 0 R
-/Prev 1395 0 R
-/Next 1403 0 R
+/Parent 1367 0 R
+/Prev 1383 0 R
+/Next 1423 0 R
+/First 1403 0 R
+/Last 1419 0 R
+/Count -5
>> endobj
1395 0 obj <<
/Title 1396 0 R
/A 1393 0 R
/Parent 1383 0 R
/Prev 1391 0 R
-/Next 1399 0 R
>> endobj
1391 0 obj <<
/Title 1392 0 R
@@ -35280,263 +38664,262 @@ endobj
1383 0 obj <<
/Title 1384 0 R
/A 1381 0 R
-/Parent 1327 0 R
-/Prev 1359 0 R
-/Next 1419 0 R
+/Parent 1367 0 R
+/Prev 1371 0 R
+/Next 1399 0 R
/First 1387 0 R
-/Last 1415 0 R
-/Count -8
+/Last 1395 0 R
+/Count -3
>> endobj
1379 0 obj <<
/Title 1380 0 R
/A 1377 0 R
-/Parent 1359 0 R
+/Parent 1371 0 R
/Prev 1375 0 R
>> endobj
1375 0 obj <<
/Title 1376 0 R
/A 1373 0 R
-/Parent 1359 0 R
-/Prev 1371 0 R
+/Parent 1371 0 R
/Next 1379 0 R
>> endobj
1371 0 obj <<
/Title 1372 0 R
/A 1369 0 R
-/Parent 1359 0 R
-/Prev 1367 0 R
-/Next 1375 0 R
+/Parent 1367 0 R
+/Next 1383 0 R
+/First 1375 0 R
+/Last 1379 0 R
+/Count -2
>> endobj
1367 0 obj <<
/Title 1368 0 R
/A 1365 0 R
-/Parent 1359 0 R
-/Prev 1363 0 R
-/Next 1371 0 R
+/Parent 467 0 R
+/Prev 1127 0 R
+/Next 1907 0 R
+/First 1371 0 R
+/Last 1903 0 R
+/Count -21
>> endobj
1363 0 obj <<
/Title 1364 0 R
/A 1361 0 R
-/Parent 1359 0 R
-/Next 1367 0 R
+/Parent 1355 0 R
+/Prev 1359 0 R
>> endobj
1359 0 obj <<
/Title 1360 0 R
/A 1357 0 R
-/Parent 1327 0 R
-/Prev 1343 0 R
-/Next 1383 0 R
-/First 1363 0 R
-/Last 1379 0 R
-/Count -5
+/Parent 1355 0 R
+/Next 1363 0 R
>> endobj
1355 0 obj <<
/Title 1356 0 R
/A 1353 0 R
-/Parent 1343 0 R
+/Parent 1127 0 R
/Prev 1351 0 R
+/First 1359 0 R
+/Last 1363 0 R
+/Count -2
>> endobj
1351 0 obj <<
/Title 1352 0 R
/A 1349 0 R
-/Parent 1343 0 R
+/Parent 1127 0 R
/Prev 1347 0 R
/Next 1355 0 R
>> endobj
1347 0 obj <<
/Title 1348 0 R
/A 1345 0 R
-/Parent 1343 0 R
+/Parent 1127 0 R
+/Prev 1343 0 R
/Next 1351 0 R
>> endobj
1343 0 obj <<
/Title 1344 0 R
/A 1341 0 R
-/Parent 1327 0 R
-/Prev 1331 0 R
-/Next 1359 0 R
-/First 1347 0 R
-/Last 1355 0 R
-/Count -3
+/Parent 1127 0 R
+/Prev 1339 0 R
+/Next 1347 0 R
>> endobj
1339 0 obj <<
/Title 1340 0 R
/A 1337 0 R
-/Parent 1331 0 R
-/Prev 1335 0 R
+/Parent 1127 0 R
+/Prev 1319 0 R
+/Next 1343 0 R
>> endobj
1335 0 obj <<
/Title 1336 0 R
/A 1333 0 R
-/Parent 1331 0 R
-/Next 1339 0 R
+/Parent 1319 0 R
+/Prev 1331 0 R
>> endobj
1331 0 obj <<
/Title 1332 0 R
/A 1329 0 R
-/Parent 1327 0 R
-/Next 1343 0 R
-/First 1335 0 R
-/Last 1339 0 R
-/Count -2
+/Parent 1319 0 R
+/Prev 1327 0 R
+/Next 1335 0 R
>> endobj
1327 0 obj <<
/Title 1328 0 R
/A 1325 0 R
-/Parent 455 0 R
-/Prev 1079 0 R
-/Next 1871 0 R
-/First 1331 0 R
-/Last 1851 0 R
-/Count -19
+/Parent 1319 0 R
+/Prev 1323 0 R
+/Next 1331 0 R
>> endobj
1323 0 obj <<
/Title 1324 0 R
/A 1321 0 R
-/Parent 1315 0 R
-/Prev 1319 0 R
+/Parent 1319 0 R
+/Next 1327 0 R
>> endobj
1319 0 obj <<
/Title 1320 0 R
/A 1317 0 R
-/Parent 1315 0 R
-/Next 1323 0 R
+/Parent 1127 0 R
+/Prev 1287 0 R
+/Next 1339 0 R
+/First 1323 0 R
+/Last 1335 0 R
+/Count -4
>> endobj
1315 0 obj <<
/Title 1316 0 R
/A 1313 0 R
-/Parent 1079 0 R
+/Parent 1287 0 R
/Prev 1311 0 R
-/First 1319 0 R
-/Last 1323 0 R
-/Count -2
>> endobj
1311 0 obj <<
/Title 1312 0 R
/A 1309 0 R
-/Parent 1079 0 R
+/Parent 1287 0 R
/Prev 1307 0 R
/Next 1315 0 R
>> endobj
1307 0 obj <<
/Title 1308 0 R
/A 1305 0 R
-/Parent 1079 0 R
+/Parent 1287 0 R
/Prev 1303 0 R
/Next 1311 0 R
>> endobj
1303 0 obj <<
/Title 1304 0 R
/A 1301 0 R
-/Parent 1079 0 R
+/Parent 1287 0 R
/Prev 1299 0 R
/Next 1307 0 R
>> endobj
1299 0 obj <<
/Title 1300 0 R
/A 1297 0 R
-/Parent 1079 0 R
-/Prev 1279 0 R
+/Parent 1287 0 R
+/Prev 1295 0 R
/Next 1303 0 R
>> endobj
1295 0 obj <<
/Title 1296 0 R
/A 1293 0 R
-/Parent 1279 0 R
+/Parent 1287 0 R
/Prev 1291 0 R
+/Next 1299 0 R
>> endobj
1291 0 obj <<
/Title 1292 0 R
/A 1289 0 R
-/Parent 1279 0 R
-/Prev 1287 0 R
+/Parent 1287 0 R
/Next 1295 0 R
>> endobj
1287 0 obj <<
/Title 1288 0 R
/A 1285 0 R
-/Parent 1279 0 R
-/Prev 1283 0 R
-/Next 1291 0 R
+/Parent 1127 0 R
+/Prev 1267 0 R
+/Next 1319 0 R
+/First 1291 0 R
+/Last 1315 0 R
+/Count -7
>> endobj
1283 0 obj <<
/Title 1284 0 R
/A 1281 0 R
-/Parent 1279 0 R
-/Next 1287 0 R
+/Parent 1267 0 R
+/Prev 1279 0 R
>> endobj
1279 0 obj <<
/Title 1280 0 R
/A 1277 0 R
-/Parent 1079 0 R
-/Prev 1247 0 R
-/Next 1299 0 R
-/First 1283 0 R
-/Last 1295 0 R
-/Count -4
+/Parent 1267 0 R
+/Prev 1275 0 R
+/Next 1283 0 R
>> endobj
1275 0 obj <<
/Title 1276 0 R
/A 1273 0 R
-/Parent 1247 0 R
+/Parent 1267 0 R
/Prev 1271 0 R
+/Next 1279 0 R
>> endobj
1271 0 obj <<
/Title 1272 0 R
/A 1269 0 R
-/Parent 1247 0 R
-/Prev 1267 0 R
+/Parent 1267 0 R
/Next 1275 0 R
>> endobj
1267 0 obj <<
/Title 1268 0 R
/A 1265 0 R
-/Parent 1247 0 R
-/Prev 1263 0 R
-/Next 1271 0 R
+/Parent 1127 0 R
+/Prev 1219 0 R
+/Next 1287 0 R
+/First 1271 0 R
+/Last 1283 0 R
+/Count -4
>> endobj
1263 0 obj <<
/Title 1264 0 R
/A 1261 0 R
-/Parent 1247 0 R
+/Parent 1227 0 R
/Prev 1259 0 R
-/Next 1267 0 R
>> endobj
1259 0 obj <<
/Title 1260 0 R
/A 1257 0 R
-/Parent 1247 0 R
+/Parent 1227 0 R
/Prev 1255 0 R
/Next 1263 0 R
>> endobj
1255 0 obj <<
/Title 1256 0 R
/A 1253 0 R
-/Parent 1247 0 R
+/Parent 1227 0 R
/Prev 1251 0 R
/Next 1259 0 R
>> endobj
1251 0 obj <<
/Title 1252 0 R
/A 1249 0 R
-/Parent 1247 0 R
+/Parent 1227 0 R
+/Prev 1247 0 R
/Next 1255 0 R
>> endobj
1247 0 obj <<
/Title 1248 0 R
/A 1245 0 R
-/Parent 1079 0 R
-/Prev 1227 0 R
-/Next 1279 0 R
-/First 1251 0 R
-/Last 1275 0 R
-/Count -7
+/Parent 1227 0 R
+/Prev 1243 0 R
+/Next 1251 0 R
>> endobj
1243 0 obj <<
/Title 1244 0 R
/A 1241 0 R
/Parent 1227 0 R
/Prev 1239 0 R
+/Next 1247 0 R
>> endobj
1239 0 obj <<
/Title 1240 0 R
@@ -35561,167 +38944,167 @@ endobj
1227 0 obj <<
/Title 1228 0 R
/A 1225 0 R
-/Parent 1079 0 R
-/Prev 1179 0 R
-/Next 1247 0 R
+/Parent 1219 0 R
+/Prev 1223 0 R
/First 1231 0 R
-/Last 1243 0 R
-/Count -4
+/Last 1263 0 R
+/Count -9
>> endobj
1223 0 obj <<
/Title 1224 0 R
/A 1221 0 R
-/Parent 1187 0 R
-/Prev 1219 0 R
+/Parent 1219 0 R
+/Next 1227 0 R
>> endobj
1219 0 obj <<
/Title 1220 0 R
/A 1217 0 R
-/Parent 1187 0 R
-/Prev 1215 0 R
-/Next 1223 0 R
+/Parent 1127 0 R
+/Prev 1195 0 R
+/Next 1267 0 R
+/First 1223 0 R
+/Last 1227 0 R
+/Count -2
>> endobj
1215 0 obj <<
/Title 1216 0 R
/A 1213 0 R
-/Parent 1187 0 R
+/Parent 1195 0 R
/Prev 1211 0 R
-/Next 1219 0 R
>> endobj
1211 0 obj <<
/Title 1212 0 R
/A 1209 0 R
-/Parent 1187 0 R
+/Parent 1195 0 R
/Prev 1207 0 R
/Next 1215 0 R
>> endobj
1207 0 obj <<
/Title 1208 0 R
/A 1205 0 R
-/Parent 1187 0 R
+/Parent 1195 0 R
/Prev 1203 0 R
/Next 1211 0 R
>> endobj
1203 0 obj <<
/Title 1204 0 R
/A 1201 0 R
-/Parent 1187 0 R
+/Parent 1195 0 R
/Prev 1199 0 R
/Next 1207 0 R
>> endobj
1199 0 obj <<
/Title 1200 0 R
/A 1197 0 R
-/Parent 1187 0 R
-/Prev 1195 0 R
+/Parent 1195 0 R
/Next 1203 0 R
>> endobj
1195 0 obj <<
/Title 1196 0 R
/A 1193 0 R
-/Parent 1187 0 R
-/Prev 1191 0 R
-/Next 1199 0 R
+/Parent 1127 0 R
+/Prev 1167 0 R
+/Next 1219 0 R
+/First 1199 0 R
+/Last 1215 0 R
+/Count -5
>> endobj
1191 0 obj <<
/Title 1192 0 R
/A 1189 0 R
-/Parent 1187 0 R
-/Next 1195 0 R
+/Parent 1167 0 R
+/Prev 1187 0 R
>> endobj
1187 0 obj <<
/Title 1188 0 R
/A 1185 0 R
-/Parent 1179 0 R
+/Parent 1167 0 R
/Prev 1183 0 R
-/First 1191 0 R
-/Last 1223 0 R
-/Count -9
+/Next 1191 0 R
>> endobj
1183 0 obj <<
/Title 1184 0 R
/A 1181 0 R
-/Parent 1179 0 R
+/Parent 1167 0 R
+/Prev 1179 0 R
/Next 1187 0 R
>> endobj
1179 0 obj <<
/Title 1180 0 R
/A 1177 0 R
-/Parent 1079 0 R
-/Prev 1155 0 R
-/Next 1227 0 R
-/First 1183 0 R
-/Last 1187 0 R
-/Count -2
+/Parent 1167 0 R
+/Prev 1175 0 R
+/Next 1183 0 R
>> endobj
1175 0 obj <<
/Title 1176 0 R
/A 1173 0 R
-/Parent 1155 0 R
+/Parent 1167 0 R
/Prev 1171 0 R
+/Next 1179 0 R
>> endobj
1171 0 obj <<
/Title 1172 0 R
/A 1169 0 R
-/Parent 1155 0 R
-/Prev 1167 0 R
+/Parent 1167 0 R
/Next 1175 0 R
>> endobj
1167 0 obj <<
/Title 1168 0 R
/A 1165 0 R
-/Parent 1155 0 R
+/Parent 1127 0 R
/Prev 1163 0 R
-/Next 1171 0 R
+/Next 1195 0 R
+/First 1171 0 R
+/Last 1191 0 R
+/Count -6
>> endobj
1163 0 obj <<
/Title 1164 0 R
/A 1161 0 R
-/Parent 1155 0 R
-/Prev 1159 0 R
+/Parent 1127 0 R
+/Prev 1151 0 R
/Next 1167 0 R
>> endobj
1159 0 obj <<
/Title 1160 0 R
/A 1157 0 R
-/Parent 1155 0 R
-/Next 1163 0 R
+/Parent 1151 0 R
+/Prev 1155 0 R
>> endobj
1155 0 obj <<
/Title 1156 0 R
/A 1153 0 R
-/Parent 1079 0 R
-/Prev 1127 0 R
-/Next 1179 0 R
-/First 1159 0 R
-/Last 1175 0 R
-/Count -5
+/Parent 1151 0 R
+/Next 1159 0 R
>> endobj
1151 0 obj <<
/Title 1152 0 R
/A 1149 0 R
/Parent 1127 0 R
-/Prev 1147 0 R
+/Prev 1135 0 R
+/Next 1163 0 R
+/First 1155 0 R
+/Last 1159 0 R
+/Count -2
>> endobj
1147 0 obj <<
/Title 1148 0 R
/A 1145 0 R
-/Parent 1127 0 R
+/Parent 1135 0 R
/Prev 1143 0 R
-/Next 1151 0 R
>> endobj
1143 0 obj <<
/Title 1144 0 R
/A 1141 0 R
-/Parent 1127 0 R
+/Parent 1135 0 R
/Prev 1139 0 R
/Next 1147 0 R
>> endobj
1139 0 obj <<
/Title 1140 0 R
/A 1137 0 R
-/Parent 1127 0 R
-/Prev 1135 0 R
+/Parent 1135 0 R
/Next 1143 0 R
>> endobj
1135 0 obj <<
@@ -35729,7 +39112,10 @@ endobj
/A 1133 0 R
/Parent 1127 0 R
/Prev 1131 0 R
-/Next 1139 0 R
+/Next 1151 0 R
+/First 1139 0 R
+/Last 1147 0 R
+/Count -3
>> endobj
1131 0 obj <<
/Title 1132 0 R
@@ -35740,84 +39126,82 @@ endobj
1127 0 obj <<
/Title 1128 0 R
/A 1125 0 R
-/Parent 1079 0 R
-/Prev 1123 0 R
-/Next 1155 0 R
+/Parent 467 0 R
+/Prev 1115 0 R
+/Next 1367 0 R
/First 1131 0 R
-/Last 1151 0 R
-/Count -6
+/Last 1355 0 R
+/Count -15
>> endobj
1123 0 obj <<
/Title 1124 0 R
/A 1121 0 R
-/Parent 1079 0 R
-/Prev 1111 0 R
-/Next 1127 0 R
+/Parent 1115 0 R
+/Prev 1119 0 R
>> endobj
1119 0 obj <<
/Title 1120 0 R
/A 1117 0 R
-/Parent 1111 0 R
-/Prev 1115 0 R
+/Parent 1115 0 R
+/Next 1123 0 R
>> endobj
1115 0 obj <<
/Title 1116 0 R
/A 1113 0 R
-/Parent 1111 0 R
-/Next 1119 0 R
+/Parent 467 0 R
+/Prev 1067 0 R
+/Next 1127 0 R
+/First 1119 0 R
+/Last 1123 0 R
+/Count -2
>> endobj
1111 0 obj <<
/Title 1112 0 R
/A 1109 0 R
-/Parent 1079 0 R
-/Prev 1087 0 R
-/Next 1123 0 R
-/First 1115 0 R
-/Last 1119 0 R
-/Count -2
+/Parent 1067 0 R
+/Prev 1107 0 R
>> endobj
1107 0 obj <<
/Title 1108 0 R
/A 1105 0 R
-/Parent 1087 0 R
-/Prev 1103 0 R
+/Parent 1067 0 R
+/Prev 1095 0 R
+/Next 1111 0 R
>> endobj
1103 0 obj <<
/Title 1104 0 R
/A 1101 0 R
-/Parent 1087 0 R
+/Parent 1095 0 R
/Prev 1099 0 R
-/Next 1107 0 R
>> endobj
1099 0 obj <<
/Title 1100 0 R
/A 1097 0 R
-/Parent 1087 0 R
-/Prev 1095 0 R
+/Parent 1095 0 R
/Next 1103 0 R
>> endobj
1095 0 obj <<
/Title 1096 0 R
/A 1093 0 R
-/Parent 1087 0 R
-/Prev 1091 0 R
-/Next 1099 0 R
+/Parent 1067 0 R
+/Prev 1079 0 R
+/Next 1107 0 R
+/First 1099 0 R
+/Last 1103 0 R
+/Count -2
>> endobj
1091 0 obj <<
/Title 1092 0 R
/A 1089 0 R
-/Parent 1087 0 R
-/Next 1095 0 R
+/Parent 1079 0 R
+/Prev 1087 0 R
>> endobj
1087 0 obj <<
/Title 1088 0 R
/A 1085 0 R
/Parent 1079 0 R
/Prev 1083 0 R
-/Next 1111 0 R
-/First 1091 0 R
-/Last 1107 0 R
-/Count -5
+/Next 1091 0 R
>> endobj
1083 0 obj <<
/Title 1084 0 R
@@ -35828,18 +39212,19 @@ endobj
1079 0 obj <<
/Title 1080 0 R
/A 1077 0 R
-/Parent 455 0 R
-/Prev 1067 0 R
-/Next 1327 0 R
+/Parent 1067 0 R
+/Prev 1075 0 R
+/Next 1095 0 R
/First 1083 0 R
-/Last 1315 0 R
-/Count -15
+/Last 1091 0 R
+/Count -3
>> endobj
1075 0 obj <<
/Title 1076 0 R
/A 1073 0 R
/Parent 1067 0 R
/Prev 1071 0 R
+/Next 1079 0 R
>> endobj
1071 0 obj <<
/Title 1072 0 R
@@ -35850,59 +39235,59 @@ endobj
1067 0 obj <<
/Title 1068 0 R
/A 1065 0 R
-/Parent 455 0 R
-/Prev 1023 0 R
-/Next 1079 0 R
+/Parent 467 0 R
+/Prev 1011 0 R
+/Next 1115 0 R
/First 1071 0 R
-/Last 1075 0 R
-/Count -2
+/Last 1111 0 R
+/Count -6
>> endobj
1063 0 obj <<
/Title 1064 0 R
/A 1061 0 R
-/Parent 1059 0 R
+/Parent 1055 0 R
+/Prev 1059 0 R
>> endobj
1059 0 obj <<
/Title 1060 0 R
/A 1057 0 R
-/Parent 1023 0 R
-/Prev 1047 0 R
-/First 1063 0 R
-/Last 1063 0 R
-/Count -1
+/Parent 1055 0 R
+/Next 1063 0 R
>> endobj
1055 0 obj <<
/Title 1056 0 R
/A 1053 0 R
-/Parent 1047 0 R
+/Parent 1011 0 R
/Prev 1051 0 R
+/First 1059 0 R
+/Last 1063 0 R
+/Count -2
>> endobj
1051 0 obj <<
/Title 1052 0 R
/A 1049 0 R
-/Parent 1047 0 R
+/Parent 1011 0 R
+/Prev 1023 0 R
/Next 1055 0 R
>> endobj
1047 0 obj <<
/Title 1048 0 R
/A 1045 0 R
/Parent 1023 0 R
-/Prev 1035 0 R
-/Next 1059 0 R
-/First 1051 0 R
-/Last 1055 0 R
-/Count -2
+/Prev 1043 0 R
>> endobj
1043 0 obj <<
/Title 1044 0 R
/A 1041 0 R
-/Parent 1035 0 R
+/Parent 1023 0 R
/Prev 1039 0 R
+/Next 1047 0 R
>> endobj
1039 0 obj <<
/Title 1040 0 R
/A 1037 0 R
-/Parent 1035 0 R
+/Parent 1023 0 R
+/Prev 1035 0 R
/Next 1043 0 R
>> endobj
1035 0 obj <<
@@ -35910,10 +39295,7 @@ endobj
/A 1033 0 R
/Parent 1023 0 R
/Prev 1031 0 R
-/Next 1047 0 R
-/First 1039 0 R
-/Last 1043 0 R
-/Count -2
+/Next 1039 0 R
>> endobj
1031 0 obj <<
/Title 1032 0 R
@@ -35931,18 +39313,19 @@ endobj
1023 0 obj <<
/Title 1024 0 R
/A 1021 0 R
-/Parent 455 0 R
-/Prev 967 0 R
-/Next 1067 0 R
+/Parent 1011 0 R
+/Prev 1019 0 R
+/Next 1051 0 R
/First 1027 0 R
-/Last 1059 0 R
-/Count -5
+/Last 1047 0 R
+/Count -6
>> endobj
1019 0 obj <<
/Title 1020 0 R
/A 1017 0 R
/Parent 1011 0 R
/Prev 1015 0 R
+/Next 1023 0 R
>> endobj
1015 0 obj <<
/Title 1016 0 R
@@ -35953,336 +39336,337 @@ endobj
1011 0 obj <<
/Title 1012 0 R
/A 1009 0 R
-/Parent 967 0 R
-/Prev 1007 0 R
+/Parent 467 0 R
+/Prev 907 0 R
+/Next 1067 0 R
/First 1015 0 R
-/Last 1019 0 R
-/Count -2
+/Last 1055 0 R
+/Count -5
>> endobj
1007 0 obj <<
/Title 1008 0 R
/A 1005 0 R
-/Parent 967 0 R
-/Prev 979 0 R
-/Next 1011 0 R
+/Parent 907 0 R
+/Prev 991 0 R
>> endobj
1003 0 obj <<
/Title 1004 0 R
/A 1001 0 R
-/Parent 979 0 R
+/Parent 991 0 R
/Prev 999 0 R
>> endobj
999 0 obj <<
/Title 1000 0 R
/A 997 0 R
-/Parent 979 0 R
+/Parent 991 0 R
/Prev 995 0 R
/Next 1003 0 R
>> endobj
995 0 obj <<
/Title 996 0 R
/A 993 0 R
-/Parent 979 0 R
-/Prev 991 0 R
+/Parent 991 0 R
/Next 999 0 R
>> endobj
991 0 obj <<
/Title 992 0 R
/A 989 0 R
-/Parent 979 0 R
+/Parent 907 0 R
/Prev 987 0 R
-/Next 995 0 R
+/Next 1007 0 R
+/First 995 0 R
+/Last 1003 0 R
+/Count -3
>> endobj
987 0 obj <<
/Title 988 0 R
/A 985 0 R
-/Parent 979 0 R
-/Prev 983 0 R
+/Parent 907 0 R
+/Prev 975 0 R
/Next 991 0 R
>> endobj
983 0 obj <<
/Title 984 0 R
/A 981 0 R
-/Parent 979 0 R
-/Next 987 0 R
+/Parent 975 0 R
+/Prev 979 0 R
>> endobj
979 0 obj <<
/Title 980 0 R
/A 977 0 R
-/Parent 967 0 R
-/Prev 975 0 R
-/Next 1007 0 R
-/First 983 0 R
-/Last 1003 0 R
-/Count -6
+/Parent 975 0 R
+/Next 983 0 R
>> endobj
975 0 obj <<
/Title 976 0 R
/A 973 0 R
-/Parent 967 0 R
-/Prev 971 0 R
-/Next 979 0 R
+/Parent 907 0 R
+/Prev 959 0 R
+/Next 987 0 R
+/First 979 0 R
+/Last 983 0 R
+/Count -2
>> endobj
971 0 obj <<
/Title 972 0 R
/A 969 0 R
-/Parent 967 0 R
-/Next 975 0 R
+/Parent 963 0 R
+/Prev 967 0 R
>> endobj
967 0 obj <<
/Title 968 0 R
/A 965 0 R
-/Parent 455 0 R
-/Prev 871 0 R
-/Next 1023 0 R
-/First 971 0 R
-/Last 1011 0 R
-/Count -5
+/Parent 963 0 R
+/Next 971 0 R
>> endobj
963 0 obj <<
/Title 964 0 R
/A 961 0 R
-/Parent 871 0 R
-/Prev 955 0 R
+/Parent 959 0 R
+/First 967 0 R
+/Last 971 0 R
+/Count -2
>> endobj
959 0 obj <<
/Title 960 0 R
/A 957 0 R
-/Parent 955 0 R
+/Parent 907 0 R
+/Prev 915 0 R
+/Next 975 0 R
+/First 963 0 R
+/Last 963 0 R
+/Count -1
>> endobj
955 0 obj <<
/Title 956 0 R
/A 953 0 R
-/Parent 871 0 R
+/Parent 919 0 R
/Prev 951 0 R
-/Next 963 0 R
-/First 959 0 R
-/Last 959 0 R
-/Count -1
>> endobj
951 0 obj <<
/Title 952 0 R
/A 949 0 R
-/Parent 871 0 R
-/Prev 939 0 R
+/Parent 919 0 R
+/Prev 947 0 R
/Next 955 0 R
>> endobj
947 0 obj <<
/Title 948 0 R
/A 945 0 R
-/Parent 939 0 R
+/Parent 919 0 R
/Prev 943 0 R
+/Next 951 0 R
>> endobj
943 0 obj <<
/Title 944 0 R
/A 941 0 R
-/Parent 939 0 R
+/Parent 919 0 R
+/Prev 939 0 R
/Next 947 0 R
>> endobj
939 0 obj <<
/Title 940 0 R
/A 937 0 R
-/Parent 871 0 R
-/Prev 923 0 R
-/Next 951 0 R
-/First 943 0 R
-/Last 947 0 R
-/Count -2
+/Parent 919 0 R
+/Prev 935 0 R
+/Next 943 0 R
>> endobj
935 0 obj <<
/Title 936 0 R
/A 933 0 R
-/Parent 927 0 R
+/Parent 919 0 R
/Prev 931 0 R
+/Next 939 0 R
>> endobj
931 0 obj <<
/Title 932 0 R
/A 929 0 R
-/Parent 927 0 R
+/Parent 919 0 R
+/Prev 927 0 R
/Next 935 0 R
>> endobj
927 0 obj <<
/Title 928 0 R
/A 925 0 R
-/Parent 923 0 R
-/First 931 0 R
-/Last 935 0 R
-/Count -2
+/Parent 919 0 R
+/Prev 923 0 R
+/Next 931 0 R
>> endobj
923 0 obj <<
/Title 924 0 R
/A 921 0 R
-/Parent 871 0 R
-/Prev 879 0 R
-/Next 939 0 R
-/First 927 0 R
-/Last 927 0 R
-/Count -1
+/Parent 919 0 R
+/Next 927 0 R
>> endobj
919 0 obj <<
/Title 920 0 R
/A 917 0 R
-/Parent 883 0 R
-/Prev 915 0 R
+/Parent 915 0 R
+/First 923 0 R
+/Last 955 0 R
+/Count -9
>> endobj
915 0 obj <<
/Title 916 0 R
/A 913 0 R
-/Parent 883 0 R
+/Parent 907 0 R
/Prev 911 0 R
-/Next 919 0 R
+/Next 959 0 R
+/First 919 0 R
+/Last 919 0 R
+/Count -1
>> endobj
911 0 obj <<
/Title 912 0 R
/A 909 0 R
-/Parent 883 0 R
-/Prev 907 0 R
+/Parent 907 0 R
/Next 915 0 R
>> endobj
907 0 obj <<
/Title 908 0 R
/A 905 0 R
-/Parent 883 0 R
-/Prev 903 0 R
-/Next 911 0 R
+/Parent 467 0 R
+/Prev 795 0 R
+/Next 1011 0 R
+/First 911 0 R
+/Last 1007 0 R
+/Count -7
>> endobj
903 0 obj <<
/Title 904 0 R
/A 901 0 R
-/Parent 883 0 R
+/Parent 891 0 R
/Prev 899 0 R
-/Next 907 0 R
>> endobj
899 0 obj <<
/Title 900 0 R
/A 897 0 R
-/Parent 883 0 R
+/Parent 891 0 R
/Prev 895 0 R
/Next 903 0 R
>> endobj
895 0 obj <<
/Title 896 0 R
/A 893 0 R
-/Parent 883 0 R
-/Prev 891 0 R
+/Parent 891 0 R
/Next 899 0 R
>> endobj
891 0 obj <<
/Title 892 0 R
/A 889 0 R
-/Parent 883 0 R
-/Prev 887 0 R
-/Next 895 0 R
+/Parent 795 0 R
+/Prev 851 0 R
+/First 895 0 R
+/Last 903 0 R
+/Count -3
>> endobj
887 0 obj <<
/Title 888 0 R
/A 885 0 R
-/Parent 883 0 R
-/Next 891 0 R
+/Parent 851 0 R
+/Prev 883 0 R
>> endobj
883 0 obj <<
/Title 884 0 R
/A 881 0 R
-/Parent 879 0 R
-/First 887 0 R
-/Last 919 0 R
-/Count -9
+/Parent 851 0 R
+/Prev 879 0 R
+/Next 887 0 R
>> endobj
879 0 obj <<
/Title 880 0 R
/A 877 0 R
-/Parent 871 0 R
-/Prev 875 0 R
-/Next 923 0 R
-/First 883 0 R
-/Last 883 0 R
-/Count -1
+/Parent 851 0 R
+/Prev 867 0 R
+/Next 883 0 R
>> endobj
875 0 obj <<
/Title 876 0 R
/A 873 0 R
-/Parent 871 0 R
-/Next 879 0 R
+/Parent 867 0 R
+/Prev 871 0 R
>> endobj
871 0 obj <<
/Title 872 0 R
/A 869 0 R
-/Parent 455 0 R
-/Prev 763 0 R
-/Next 967 0 R
-/First 875 0 R
-/Last 963 0 R
-/Count -7
+/Parent 867 0 R
+/Next 875 0 R
>> endobj
867 0 obj <<
/Title 868 0 R
/A 865 0 R
-/Parent 859 0 R
+/Parent 851 0 R
/Prev 863 0 R
+/Next 879 0 R
+/First 871 0 R
+/Last 875 0 R
+/Count -2
>> endobj
863 0 obj <<
/Title 864 0 R
/A 861 0 R
-/Parent 859 0 R
+/Parent 851 0 R
+/Prev 859 0 R
/Next 867 0 R
>> endobj
859 0 obj <<
/Title 860 0 R
/A 857 0 R
-/Parent 763 0 R
-/Prev 819 0 R
-/First 863 0 R
-/Last 867 0 R
-/Count -2
+/Parent 851 0 R
+/Prev 855 0 R
+/Next 863 0 R
>> endobj
855 0 obj <<
/Title 856 0 R
/A 853 0 R
-/Parent 819 0 R
-/Prev 851 0 R
+/Parent 851 0 R
+/Next 859 0 R
>> endobj
851 0 obj <<
/Title 852 0 R
/A 849 0 R
-/Parent 819 0 R
-/Prev 847 0 R
-/Next 855 0 R
+/Parent 795 0 R
+/Prev 835 0 R
+/Next 891 0 R
+/First 855 0 R
+/Last 887 0 R
+/Count -7
>> endobj
847 0 obj <<
/Title 848 0 R
/A 845 0 R
-/Parent 819 0 R
-/Prev 835 0 R
-/Next 851 0 R
+/Parent 839 0 R
+/Prev 843 0 R
>> endobj
843 0 obj <<
/Title 844 0 R
/A 841 0 R
-/Parent 835 0 R
-/Prev 839 0 R
+/Parent 839 0 R
+/Next 847 0 R
>> endobj
839 0 obj <<
/Title 840 0 R
/A 837 0 R
/Parent 835 0 R
-/Next 843 0 R
+/First 843 0 R
+/Last 847 0 R
+/Count -2
>> endobj
835 0 obj <<
/Title 836 0 R
/A 833 0 R
-/Parent 819 0 R
-/Prev 831 0 R
-/Next 847 0 R
+/Parent 795 0 R
+/Prev 819 0 R
+/Next 851 0 R
/First 839 0 R
-/Last 843 0 R
-/Count -2
+/Last 839 0 R
+/Count -1
>> endobj
831 0 obj <<
/Title 832 0 R
/A 829 0 R
/Parent 819 0 R
/Prev 827 0 R
-/Next 835 0 R
>> endobj
827 0 obj <<
/Title 828 0 R
@@ -36300,122 +39684,122 @@ endobj
819 0 obj <<
/Title 820 0 R
/A 817 0 R
-/Parent 763 0 R
+/Parent 795 0 R
/Prev 803 0 R
-/Next 859 0 R
+/Next 835 0 R
/First 823 0 R
-/Last 855 0 R
-/Count -7
+/Last 831 0 R
+/Count -3
>> endobj
815 0 obj <<
/Title 816 0 R
/A 813 0 R
-/Parent 807 0 R
+/Parent 803 0 R
/Prev 811 0 R
>> endobj
811 0 obj <<
/Title 812 0 R
/A 809 0 R
-/Parent 807 0 R
+/Parent 803 0 R
+/Prev 807 0 R
/Next 815 0 R
>> endobj
807 0 obj <<
/Title 808 0 R
/A 805 0 R
/Parent 803 0 R
-/First 811 0 R
-/Last 815 0 R
-/Count -2
+/Next 811 0 R
>> endobj
803 0 obj <<
/Title 804 0 R
/A 801 0 R
-/Parent 763 0 R
-/Prev 787 0 R
+/Parent 795 0 R
+/Prev 799 0 R
/Next 819 0 R
/First 807 0 R
-/Last 807 0 R
-/Count -1
+/Last 815 0 R
+/Count -3
>> endobj
799 0 obj <<
/Title 800 0 R
/A 797 0 R
-/Parent 787 0 R
-/Prev 795 0 R
+/Parent 795 0 R
+/Next 803 0 R
>> endobj
795 0 obj <<
/Title 796 0 R
/A 793 0 R
-/Parent 787 0 R
-/Prev 791 0 R
-/Next 799 0 R
+/Parent 467 0 R
+/Prev 751 0 R
+/Next 907 0 R
+/First 799 0 R
+/Last 891 0 R
+/Count -6
>> endobj
791 0 obj <<
/Title 792 0 R
/A 789 0 R
-/Parent 787 0 R
-/Next 795 0 R
+/Parent 779 0 R
+/Prev 787 0 R
>> endobj
787 0 obj <<
/Title 788 0 R
/A 785 0 R
-/Parent 763 0 R
-/Prev 771 0 R
-/Next 803 0 R
-/First 791 0 R
-/Last 799 0 R
-/Count -3
+/Parent 779 0 R
+/Prev 783 0 R
+/Next 791 0 R
>> endobj
783 0 obj <<
/Title 784 0 R
/A 781 0 R
-/Parent 771 0 R
-/Prev 779 0 R
+/Parent 779 0 R
+/Next 787 0 R
>> endobj
779 0 obj <<
/Title 780 0 R
/A 777 0 R
-/Parent 771 0 R
-/Prev 775 0 R
-/Next 783 0 R
+/Parent 751 0 R
+/Prev 767 0 R
+/First 783 0 R
+/Last 791 0 R
+/Count -3
>> endobj
775 0 obj <<
/Title 776 0 R
/A 773 0 R
-/Parent 771 0 R
-/Next 779 0 R
+/Parent 767 0 R
+/Prev 771 0 R
>> endobj
771 0 obj <<
/Title 772 0 R
/A 769 0 R
-/Parent 763 0 R
-/Prev 767 0 R
-/Next 787 0 R
-/First 775 0 R
-/Last 783 0 R
-/Count -3
+/Parent 767 0 R
+/Next 775 0 R
>> endobj
767 0 obj <<
/Title 768 0 R
/A 765 0 R
-/Parent 763 0 R
-/Next 771 0 R
+/Parent 751 0 R
+/Prev 759 0 R
+/Next 779 0 R
+/First 771 0 R
+/Last 775 0 R
+/Count -2
>> endobj
763 0 obj <<
/Title 764 0 R
/A 761 0 R
-/Parent 455 0 R
-/Prev 723 0 R
-/Next 871 0 R
-/First 767 0 R
-/Last 859 0 R
-/Count -6
+/Parent 759 0 R
>> endobj
759 0 obj <<
/Title 760 0 R
/A 757 0 R
/Parent 751 0 R
/Prev 755 0 R
+/Next 767 0 R
+/First 763 0 R
+/Last 763 0 R
+/Count -1
>> endobj
755 0 obj <<
/Title 756 0 R
@@ -36426,196 +39810,196 @@ endobj
751 0 obj <<
/Title 752 0 R
/A 749 0 R
-/Parent 723 0 R
-/Prev 739 0 R
+/Parent 467 0 R
+/Prev 599 0 R
+/Next 795 0 R
/First 755 0 R
-/Last 759 0 R
-/Count -2
+/Last 779 0 R
+/Count -4
>> endobj
747 0 obj <<
/Title 748 0 R
/A 745 0 R
-/Parent 739 0 R
+/Parent 735 0 R
/Prev 743 0 R
>> endobj
743 0 obj <<
/Title 744 0 R
/A 741 0 R
-/Parent 739 0 R
+/Parent 735 0 R
+/Prev 739 0 R
/Next 747 0 R
>> endobj
739 0 obj <<
/Title 740 0 R
/A 737 0 R
-/Parent 723 0 R
-/Prev 731 0 R
-/Next 751 0 R
-/First 743 0 R
-/Last 747 0 R
-/Count -2
+/Parent 735 0 R
+/Next 743 0 R
>> endobj
735 0 obj <<
/Title 736 0 R
/A 733 0 R
-/Parent 731 0 R
+/Parent 599 0 R
+/Prev 651 0 R
+/First 739 0 R
+/Last 747 0 R
+/Count -3
>> endobj
731 0 obj <<
/Title 732 0 R
/A 729 0 R
-/Parent 723 0 R
-/Prev 727 0 R
-/Next 739 0 R
-/First 735 0 R
-/Last 735 0 R
-/Count -1
+/Parent 651 0 R
+/Prev 711 0 R
>> endobj
727 0 obj <<
/Title 728 0 R
/A 725 0 R
-/Parent 723 0 R
-/Next 731 0 R
+/Parent 711 0 R
+/Prev 723 0 R
>> endobj
723 0 obj <<
/Title 724 0 R
/A 721 0 R
-/Parent 455 0 R
-/Prev 583 0 R
-/Next 763 0 R
-/First 727 0 R
-/Last 751 0 R
-/Count -4
+/Parent 711 0 R
+/Prev 719 0 R
+/Next 727 0 R
>> endobj
719 0 obj <<
/Title 720 0 R
/A 717 0 R
-/Parent 707 0 R
+/Parent 711 0 R
/Prev 715 0 R
+/Next 723 0 R
>> endobj
715 0 obj <<
/Title 716 0 R
/A 713 0 R
-/Parent 707 0 R
-/Prev 711 0 R
+/Parent 711 0 R
/Next 719 0 R
>> endobj
711 0 obj <<
/Title 712 0 R
/A 709 0 R
-/Parent 707 0 R
-/Next 715 0 R
+/Parent 651 0 R
+/Prev 667 0 R
+/Next 731 0 R
+/First 715 0 R
+/Last 727 0 R
+/Count -4
>> endobj
707 0 obj <<
/Title 708 0 R
/A 705 0 R
-/Parent 583 0 R
-/Prev 623 0 R
-/First 711 0 R
-/Last 719 0 R
-/Count -3
+/Parent 667 0 R
+/Prev 703 0 R
>> endobj
703 0 obj <<
/Title 704 0 R
/A 701 0 R
-/Parent 623 0 R
-/Prev 683 0 R
+/Parent 667 0 R
+/Prev 699 0 R
+/Next 707 0 R
>> endobj
699 0 obj <<
/Title 700 0 R
/A 697 0 R
-/Parent 683 0 R
+/Parent 667 0 R
/Prev 695 0 R
+/Next 703 0 R
>> endobj
695 0 obj <<
/Title 696 0 R
/A 693 0 R
-/Parent 683 0 R
+/Parent 667 0 R
/Prev 691 0 R
/Next 699 0 R
>> endobj
691 0 obj <<
/Title 692 0 R
/A 689 0 R
-/Parent 683 0 R
+/Parent 667 0 R
/Prev 687 0 R
/Next 695 0 R
>> endobj
687 0 obj <<
/Title 688 0 R
/A 685 0 R
-/Parent 683 0 R
+/Parent 667 0 R
+/Prev 683 0 R
/Next 691 0 R
>> endobj
683 0 obj <<
/Title 684 0 R
/A 681 0 R
-/Parent 623 0 R
-/Prev 639 0 R
-/Next 703 0 R
-/First 687 0 R
-/Last 699 0 R
-/Count -4
+/Parent 667 0 R
+/Prev 679 0 R
+/Next 687 0 R
>> endobj
679 0 obj <<
/Title 680 0 R
/A 677 0 R
-/Parent 639 0 R
+/Parent 667 0 R
/Prev 675 0 R
+/Next 683 0 R
>> endobj
675 0 obj <<
/Title 676 0 R
/A 673 0 R
-/Parent 639 0 R
+/Parent 667 0 R
/Prev 671 0 R
/Next 679 0 R
>> endobj
671 0 obj <<
/Title 672 0 R
/A 669 0 R
-/Parent 639 0 R
-/Prev 667 0 R
+/Parent 667 0 R
/Next 675 0 R
>> endobj
667 0 obj <<
/Title 668 0 R
/A 665 0 R
-/Parent 639 0 R
+/Parent 651 0 R
/Prev 663 0 R
-/Next 671 0 R
+/Next 711 0 R
+/First 671 0 R
+/Last 707 0 R
+/Count -10
>> endobj
663 0 obj <<
/Title 664 0 R
/A 661 0 R
-/Parent 639 0 R
+/Parent 651 0 R
/Prev 659 0 R
/Next 667 0 R
>> endobj
659 0 obj <<
/Title 660 0 R
/A 657 0 R
-/Parent 639 0 R
+/Parent 651 0 R
/Prev 655 0 R
/Next 663 0 R
>> endobj
655 0 obj <<
/Title 656 0 R
/A 653 0 R
-/Parent 639 0 R
-/Prev 651 0 R
+/Parent 651 0 R
/Next 659 0 R
>> endobj
651 0 obj <<
/Title 652 0 R
/A 649 0 R
-/Parent 639 0 R
-/Prev 647 0 R
-/Next 655 0 R
+/Parent 599 0 R
+/Prev 639 0 R
+/Next 735 0 R
+/First 655 0 R
+/Last 731 0 R
+/Count -6
>> endobj
647 0 obj <<
/Title 648 0 R
/A 645 0 R
/Parent 639 0 R
/Prev 643 0 R
-/Next 651 0 R
>> endobj
643 0 obj <<
/Title 644 0 R
@@ -36626,101 +40010,100 @@ endobj
639 0 obj <<
/Title 640 0 R
/A 637 0 R
-/Parent 623 0 R
-/Prev 635 0 R
-/Next 683 0 R
+/Parent 599 0 R
+/Prev 615 0 R
+/Next 651 0 R
/First 643 0 R
-/Last 679 0 R
-/Count -10
+/Last 647 0 R
+/Count -2
>> endobj
635 0 obj <<
/Title 636 0 R
/A 633 0 R
-/Parent 623 0 R
+/Parent 615 0 R
/Prev 631 0 R
-/Next 639 0 R
>> endobj
631 0 obj <<
/Title 632 0 R
/A 629 0 R
-/Parent 623 0 R
-/Prev 627 0 R
+/Parent 615 0 R
+/Prev 619 0 R
/Next 635 0 R
>> endobj
627 0 obj <<
/Title 628 0 R
/A 625 0 R
-/Parent 623 0 R
-/Next 631 0 R
+/Parent 619 0 R
+/Prev 623 0 R
>> endobj
623 0 obj <<
/Title 624 0 R
/A 621 0 R
-/Parent 583 0 R
-/Prev 611 0 R
-/Next 707 0 R
-/First 627 0 R
-/Last 703 0 R
-/Count -6
+/Parent 619 0 R
+/Next 627 0 R
>> endobj
619 0 obj <<
/Title 620 0 R
/A 617 0 R
-/Parent 611 0 R
-/Prev 615 0 R
+/Parent 615 0 R
+/Next 631 0 R
+/First 623 0 R
+/Last 627 0 R
+/Count -2
>> endobj
615 0 obj <<
/Title 616 0 R
/A 613 0 R
-/Parent 611 0 R
-/Next 619 0 R
+/Parent 599 0 R
+/Prev 603 0 R
+/Next 639 0 R
+/First 619 0 R
+/Last 635 0 R
+/Count -3
>> endobj
611 0 obj <<
/Title 612 0 R
/A 609 0 R
-/Parent 583 0 R
-/Prev 591 0 R
-/Next 623 0 R
-/First 615 0 R
-/Last 619 0 R
-/Count -2
+/Parent 603 0 R
+/Prev 607 0 R
>> endobj
607 0 obj <<
/Title 608 0 R
/A 605 0 R
-/Parent 591 0 R
-/Prev 595 0 R
+/Parent 603 0 R
+/Next 611 0 R
>> endobj
603 0 obj <<
/Title 604 0 R
/A 601 0 R
-/Parent 595 0 R
-/Prev 599 0 R
+/Parent 599 0 R
+/Next 615 0 R
+/First 607 0 R
+/Last 611 0 R
+/Count -2
>> endobj
599 0 obj <<
/Title 600 0 R
/A 597 0 R
-/Parent 595 0 R
-/Next 603 0 R
+/Parent 467 0 R
+/Prev 471 0 R
+/Next 751 0 R
+/First 603 0 R
+/Last 735 0 R
+/Count -5
>> endobj
595 0 obj <<
/Title 596 0 R
/A 593 0 R
-/Parent 591 0 R
-/Next 607 0 R
-/First 599 0 R
-/Last 603 0 R
-/Count -2
+/Parent 583 0 R
+/Prev 591 0 R
>> endobj
591 0 obj <<
/Title 592 0 R
/A 589 0 R
/Parent 583 0 R
/Prev 587 0 R
-/Next 611 0 R
-/First 595 0 R
-/Last 607 0 R
-/Count -2
+/Next 595 0 R
>> endobj
587 0 obj <<
/Title 588 0 R
@@ -36731,54 +40114,54 @@ endobj
583 0 obj <<
/Title 584 0 R
/A 581 0 R
-/Parent 455 0 R
-/Prev 459 0 R
-/Next 723 0 R
+/Parent 471 0 R
+/Prev 563 0 R
/First 587 0 R
-/Last 707 0 R
-/Count -5
+/Last 595 0 R
+/Count -3
>> endobj
579 0 obj <<
/Title 580 0 R
/A 577 0 R
-/Parent 571 0 R
-/Prev 575 0 R
+/Parent 575 0 R
>> endobj
575 0 obj <<
/Title 576 0 R
/A 573 0 R
-/Parent 571 0 R
-/Next 579 0 R
+/Parent 563 0 R
+/Prev 571 0 R
+/First 579 0 R
+/Last 579 0 R
+/Count -1
>> endobj
571 0 obj <<
/Title 572 0 R
/A 569 0 R
-/Parent 459 0 R
-/Prev 551 0 R
-/First 575 0 R
-/Last 579 0 R
-/Count -2
+/Parent 563 0 R
+/Prev 567 0 R
+/Next 575 0 R
>> endobj
567 0 obj <<
/Title 568 0 R
/A 565 0 R
/Parent 563 0 R
+/Next 571 0 R
>> endobj
563 0 obj <<
/Title 564 0 R
/A 561 0 R
-/Parent 551 0 R
-/Prev 559 0 R
+/Parent 471 0 R
+/Prev 551 0 R
+/Next 583 0 R
/First 567 0 R
-/Last 567 0 R
-/Count -1
+/Last 575 0 R
+/Count -3
>> endobj
559 0 obj <<
/Title 560 0 R
/A 557 0 R
/Parent 551 0 R
/Prev 555 0 R
-/Next 563 0 R
>> endobj
555 0 obj <<
/Title 556 0 R
@@ -36789,133 +40172,134 @@ endobj
551 0 obj <<
/Title 552 0 R
/A 549 0 R
-/Parent 459 0 R
-/Prev 539 0 R
-/Next 571 0 R
+/Parent 471 0 R
+/Prev 535 0 R
+/Next 563 0 R
/First 555 0 R
-/Last 563 0 R
-/Count -3
+/Last 559 0 R
+/Count -2
>> endobj
547 0 obj <<
/Title 548 0 R
/A 545 0 R
-/Parent 539 0 R
+/Parent 535 0 R
/Prev 543 0 R
>> endobj
543 0 obj <<
/Title 544 0 R
/A 541 0 R
-/Parent 539 0 R
+/Parent 535 0 R
+/Prev 539 0 R
/Next 547 0 R
>> endobj
539 0 obj <<
/Title 540 0 R
/A 537 0 R
-/Parent 459 0 R
-/Prev 523 0 R
-/Next 551 0 R
-/First 543 0 R
-/Last 547 0 R
-/Count -2
+/Parent 535 0 R
+/Next 543 0 R
>> endobj
535 0 obj <<
/Title 536 0 R
/A 533 0 R
-/Parent 523 0 R
-/Prev 531 0 R
+/Parent 471 0 R
+/Prev 499 0 R
+/Next 551 0 R
+/First 539 0 R
+/Last 547 0 R
+/Count -3
>> endobj
531 0 obj <<
/Title 532 0 R
/A 529 0 R
-/Parent 523 0 R
+/Parent 499 0 R
/Prev 527 0 R
-/Next 535 0 R
>> endobj
527 0 obj <<
/Title 528 0 R
/A 525 0 R
-/Parent 523 0 R
+/Parent 499 0 R
+/Prev 523 0 R
/Next 531 0 R
>> endobj
523 0 obj <<
/Title 524 0 R
/A 521 0 R
-/Parent 459 0 R
-/Prev 487 0 R
-/Next 539 0 R
-/First 527 0 R
-/Last 535 0 R
-/Count -3
+/Parent 499 0 R
+/Prev 519 0 R
+/Next 527 0 R
>> endobj
519 0 obj <<
/Title 520 0 R
/A 517 0 R
-/Parent 487 0 R
+/Parent 499 0 R
/Prev 515 0 R
+/Next 523 0 R
>> endobj
515 0 obj <<
/Title 516 0 R
/A 513 0 R
-/Parent 487 0 R
+/Parent 499 0 R
/Prev 511 0 R
/Next 519 0 R
>> endobj
511 0 obj <<
/Title 512 0 R
/A 509 0 R
-/Parent 487 0 R
+/Parent 499 0 R
/Prev 507 0 R
/Next 515 0 R
>> endobj
507 0 obj <<
/Title 508 0 R
/A 505 0 R
-/Parent 487 0 R
+/Parent 499 0 R
/Prev 503 0 R
/Next 511 0 R
>> endobj
503 0 obj <<
/Title 504 0 R
/A 501 0 R
-/Parent 487 0 R
-/Prev 499 0 R
+/Parent 499 0 R
/Next 507 0 R
>> endobj
499 0 obj <<
/Title 500 0 R
/A 497 0 R
-/Parent 487 0 R
-/Prev 495 0 R
-/Next 503 0 R
+/Parent 471 0 R
+/Prev 483 0 R
+/Next 535 0 R
+/First 503 0 R
+/Last 531 0 R
+/Count -8
>> endobj
495 0 obj <<
/Title 496 0 R
/A 493 0 R
-/Parent 487 0 R
+/Parent 483 0 R
/Prev 491 0 R
-/Next 499 0 R
>> endobj
491 0 obj <<
/Title 492 0 R
/A 489 0 R
-/Parent 487 0 R
+/Parent 483 0 R
+/Prev 487 0 R
/Next 495 0 R
>> endobj
487 0 obj <<
/Title 488 0 R
/A 485 0 R
-/Parent 459 0 R
-/Prev 471 0 R
-/Next 523 0 R
-/First 491 0 R
-/Last 519 0 R
-/Count -8
+/Parent 483 0 R
+/Next 491 0 R
>> endobj
483 0 obj <<
/Title 484 0 R
/A 481 0 R
/Parent 471 0 R
/Prev 479 0 R
+/Next 499 0 R
+/First 487 0 R
+/Last 495 0 R
+/Count -3
>> endobj
479 0 obj <<
/Title 480 0 R
@@ -36933,70 +40317,70 @@ endobj
471 0 obj <<
/Title 472 0 R
/A 469 0 R
-/Parent 459 0 R
-/Prev 467 0 R
-/Next 487 0 R
+/Parent 467 0 R
+/Next 599 0 R
/First 475 0 R
-/Last 483 0 R
-/Count -3
+/Last 583 0 R
+/Count -8
>> endobj
467 0 obj <<
/Title 468 0 R
/A 465 0 R
-/Parent 459 0 R
-/Prev 463 0 R
-/Next 471 0 R
+/Parent 7255 0 R
+/Prev 103 0 R
+/Next 2463 0 R
+/First 471 0 R
+/Last 2455 0 R
+/Count -20
>> endobj
463 0 obj <<
/Title 464 0 R
/A 461 0 R
/Parent 459 0 R
-/Next 467 0 R
>> endobj
459 0 obj <<
/Title 460 0 R
/A 457 0 R
-/Parent 455 0 R
-/Next 583 0 R
+/Parent 103 0 R
+/Prev 431 0 R
/First 463 0 R
-/Last 571 0 R
-/Count -8
+/Last 463 0 R
+/Count -1
>> endobj
455 0 obj <<
/Title 456 0 R
/A 453 0 R
-/Parent 6735 0 R
-/Prev 99 0 R
-/Next 2419 0 R
-/First 459 0 R
-/Last 2411 0 R
-/Count -20
+/Parent 431 0 R
+/Prev 443 0 R
>> endobj
451 0 obj <<
/Title 452 0 R
/A 449 0 R
-/Parent 447 0 R
+/Parent 443 0 R
+/Prev 447 0 R
>> endobj
447 0 obj <<
/Title 448 0 R
/A 445 0 R
-/Parent 99 0 R
-/Prev 419 0 R
-/First 451 0 R
-/Last 451 0 R
-/Count -1
+/Parent 443 0 R
+/Next 451 0 R
>> endobj
443 0 obj <<
/Title 444 0 R
/A 441 0 R
-/Parent 419 0 R
-/Prev 431 0 R
+/Parent 431 0 R
+/Prev 439 0 R
+/Next 455 0 R
+/First 447 0 R
+/Last 451 0 R
+/Count -2
>> endobj
439 0 obj <<
/Title 440 0 R
/A 437 0 R
/Parent 431 0 R
/Prev 435 0 R
+/Next 443 0 R
>> endobj
435 0 obj <<
/Title 436 0 R
@@ -37007,170 +40391,167 @@ endobj
431 0 obj <<
/Title 432 0 R
/A 429 0 R
-/Parent 419 0 R
-/Prev 427 0 R
-/Next 443 0 R
+/Parent 103 0 R
+/Prev 331 0 R
+/Next 459 0 R
/First 435 0 R
-/Last 439 0 R
-/Count -2
+/Last 455 0 R
+/Count -4
>> endobj
427 0 obj <<
/Title 428 0 R
/A 425 0 R
-/Parent 419 0 R
+/Parent 415 0 R
/Prev 423 0 R
-/Next 431 0 R
>> endobj
423 0 obj <<
/Title 424 0 R
/A 421 0 R
-/Parent 419 0 R
+/Parent 415 0 R
+/Prev 419 0 R
/Next 427 0 R
>> endobj
419 0 obj <<
/Title 420 0 R
/A 417 0 R
-/Parent 99 0 R
-/Prev 323 0 R
-/Next 447 0 R
-/First 423 0 R
-/Last 443 0 R
-/Count -4
+/Parent 415 0 R
+/Next 423 0 R
>> endobj
415 0 obj <<
/Title 416 0 R
/A 413 0 R
-/Parent 407 0 R
-/Prev 411 0 R
+/Parent 331 0 R
+/Prev 383 0 R
+/First 419 0 R
+/Last 427 0 R
+/Count -3
>> endobj
411 0 obj <<
/Title 412 0 R
/A 409 0 R
-/Parent 407 0 R
-/Next 415 0 R
+/Parent 383 0 R
+/Prev 407 0 R
>> endobj
407 0 obj <<
/Title 408 0 R
/A 405 0 R
-/Parent 323 0 R
-/Prev 375 0 R
-/First 411 0 R
-/Last 415 0 R
-/Count -2
+/Parent 383 0 R
+/Prev 403 0 R
+/Next 411 0 R
>> endobj
403 0 obj <<
/Title 404 0 R
/A 401 0 R
-/Parent 375 0 R
-/Prev 399 0 R
+/Parent 383 0 R
+/Prev 395 0 R
+/Next 407 0 R
>> endobj
399 0 obj <<
/Title 400 0 R
/A 397 0 R
-/Parent 375 0 R
-/Prev 395 0 R
-/Next 403 0 R
+/Parent 395 0 R
>> endobj
395 0 obj <<
/Title 396 0 R
/A 393 0 R
-/Parent 375 0 R
-/Prev 387 0 R
-/Next 399 0 R
+/Parent 383 0 R
+/Prev 391 0 R
+/Next 403 0 R
+/First 399 0 R
+/Last 399 0 R
+/Count -1
>> endobj
391 0 obj <<
/Title 392 0 R
/A 389 0 R
-/Parent 387 0 R
+/Parent 383 0 R
+/Prev 387 0 R
+/Next 395 0 R
>> endobj
387 0 obj <<
/Title 388 0 R
/A 385 0 R
-/Parent 375 0 R
-/Prev 383 0 R
-/Next 395 0 R
-/First 391 0 R
-/Last 391 0 R
-/Count -1
+/Parent 383 0 R
+/Next 391 0 R
>> endobj
383 0 obj <<
/Title 384 0 R
/A 381 0 R
-/Parent 375 0 R
-/Prev 379 0 R
-/Next 387 0 R
+/Parent 331 0 R
+/Prev 371 0 R
+/Next 415 0 R
+/First 387 0 R
+/Last 411 0 R
+/Count -6
>> endobj
379 0 obj <<
/Title 380 0 R
/A 377 0 R
-/Parent 375 0 R
-/Next 383 0 R
+/Parent 371 0 R
+/Prev 375 0 R
>> endobj
375 0 obj <<
/Title 376 0 R
/A 373 0 R
-/Parent 323 0 R
-/Prev 363 0 R
-/Next 407 0 R
-/First 379 0 R
-/Last 403 0 R
-/Count -6
+/Parent 371 0 R
+/Next 379 0 R
>> endobj
371 0 obj <<
/Title 372 0 R
/A 369 0 R
-/Parent 363 0 R
-/Prev 367 0 R
+/Parent 331 0 R
+/Prev 339 0 R
+/Next 383 0 R
+/First 375 0 R
+/Last 379 0 R
+/Count -2
>> endobj
367 0 obj <<
/Title 368 0 R
/A 365 0 R
-/Parent 363 0 R
-/Next 371 0 R
+/Parent 355 0 R
+/Prev 363 0 R
>> endobj
363 0 obj <<
/Title 364 0 R
/A 361 0 R
-/Parent 323 0 R
-/Prev 331 0 R
-/Next 375 0 R
-/First 367 0 R
-/Last 371 0 R
-/Count -2
+/Parent 355 0 R
+/Prev 359 0 R
+/Next 367 0 R
>> endobj
359 0 obj <<
/Title 360 0 R
/A 357 0 R
-/Parent 347 0 R
-/Prev 355 0 R
+/Parent 355 0 R
+/Next 363 0 R
>> endobj
355 0 obj <<
/Title 356 0 R
/A 353 0 R
-/Parent 347 0 R
+/Parent 339 0 R
/Prev 351 0 R
-/Next 359 0 R
+/First 359 0 R
+/Last 367 0 R
+/Count -3
>> endobj
351 0 obj <<
/Title 352 0 R
/A 349 0 R
-/Parent 347 0 R
+/Parent 339 0 R
+/Prev 347 0 R
/Next 355 0 R
>> endobj
347 0 obj <<
/Title 348 0 R
/A 345 0 R
-/Parent 331 0 R
+/Parent 339 0 R
/Prev 343 0 R
-/First 351 0 R
-/Last 359 0 R
-/Count -3
+/Next 351 0 R
>> endobj
343 0 obj <<
/Title 344 0 R
/A 341 0 R
-/Parent 331 0 R
-/Prev 339 0 R
+/Parent 339 0 R
/Next 347 0 R
>> endobj
339 0 obj <<
@@ -37178,7 +40559,10 @@ endobj
/A 337 0 R
/Parent 331 0 R
/Prev 335 0 R
-/Next 343 0 R
+/Next 371 0 R
+/First 343 0 R
+/Last 355 0 R
+/Count -4
>> endobj
335 0 obj <<
/Title 336 0 R
@@ -37189,460 +40573,458 @@ endobj
331 0 obj <<
/Title 332 0 R
/A 329 0 R
-/Parent 323 0 R
-/Prev 327 0 R
-/Next 363 0 R
+/Parent 103 0 R
+/Prev 271 0 R
+/Next 431 0 R
/First 335 0 R
-/Last 347 0 R
-/Count -4
+/Last 415 0 R
+/Count -5
>> endobj
327 0 obj <<
/Title 328 0 R
/A 325 0 R
-/Parent 323 0 R
-/Next 331 0 R
+/Parent 311 0 R
+/Prev 323 0 R
>> endobj
323 0 obj <<
/Title 324 0 R
/A 321 0 R
-/Parent 99 0 R
-/Prev 263 0 R
-/Next 419 0 R
-/First 327 0 R
-/Last 407 0 R
-/Count -5
+/Parent 311 0 R
+/Prev 319 0 R
+/Next 327 0 R
>> endobj
319 0 obj <<
/Title 320 0 R
/A 317 0 R
-/Parent 303 0 R
+/Parent 311 0 R
/Prev 315 0 R
+/Next 323 0 R
>> endobj
315 0 obj <<
/Title 316 0 R
/A 313 0 R
-/Parent 303 0 R
-/Prev 311 0 R
+/Parent 311 0 R
/Next 319 0 R
>> endobj
311 0 obj <<
/Title 312 0 R
/A 309 0 R
-/Parent 303 0 R
-/Prev 307 0 R
-/Next 315 0 R
+/Parent 271 0 R
+/Prev 303 0 R
+/First 315 0 R
+/Last 327 0 R
+/Count -4
>> endobj
307 0 obj <<
/Title 308 0 R
/A 305 0 R
/Parent 303 0 R
-/Next 311 0 R
>> endobj
303 0 obj <<
/Title 304 0 R
/A 301 0 R
-/Parent 263 0 R
-/Prev 295 0 R
+/Parent 271 0 R
+/Prev 279 0 R
+/Next 311 0 R
/First 307 0 R
-/Last 319 0 R
-/Count -4
+/Last 307 0 R
+/Count -1
>> endobj
299 0 obj <<
/Title 300 0 R
/A 297 0 R
-/Parent 295 0 R
+/Parent 279 0 R
+/Prev 295 0 R
>> endobj
295 0 obj <<
/Title 296 0 R
/A 293 0 R
-/Parent 263 0 R
-/Prev 271 0 R
-/Next 303 0 R
-/First 299 0 R
-/Last 299 0 R
-/Count -1
+/Parent 279 0 R
+/Prev 291 0 R
+/Next 299 0 R
>> endobj
291 0 obj <<
/Title 292 0 R
/A 289 0 R
-/Parent 271 0 R
-/Prev 287 0 R
+/Parent 279 0 R
+/Prev 283 0 R
+/Next 295 0 R
>> endobj
287 0 obj <<
/Title 288 0 R
/A 285 0 R
-/Parent 271 0 R
-/Prev 283 0 R
-/Next 291 0 R
+/Parent 283 0 R
>> endobj
283 0 obj <<
/Title 284 0 R
/A 281 0 R
-/Parent 271 0 R
-/Prev 275 0 R
-/Next 287 0 R
+/Parent 279 0 R
+/Next 291 0 R
+/First 287 0 R
+/Last 287 0 R
+/Count -1
>> endobj
279 0 obj <<
/Title 280 0 R
/A 277 0 R
-/Parent 275 0 R
+/Parent 271 0 R
+/Prev 275 0 R
+/Next 303 0 R
+/First 283 0 R
+/Last 299 0 R
+/Count -4
>> endobj
275 0 obj <<
/Title 276 0 R
/A 273 0 R
/Parent 271 0 R
-/Next 283 0 R
-/First 279 0 R
-/Last 279 0 R
-/Count -1
+/Next 279 0 R
>> endobj
271 0 obj <<
/Title 272 0 R
/A 269 0 R
-/Parent 263 0 R
-/Prev 267 0 R
-/Next 295 0 R
+/Parent 103 0 R
+/Prev 187 0 R
+/Next 331 0 R
/First 275 0 R
-/Last 291 0 R
+/Last 311 0 R
/Count -4
>> endobj
267 0 obj <<
/Title 268 0 R
/A 265 0 R
-/Parent 263 0 R
-/Next 271 0 R
+/Parent 239 0 R
+/Prev 263 0 R
>> endobj
263 0 obj <<
/Title 264 0 R
/A 261 0 R
-/Parent 99 0 R
-/Prev 183 0 R
-/Next 323 0 R
-/First 267 0 R
-/Last 303 0 R
-/Count -4
+/Parent 239 0 R
+/Prev 259 0 R
+/Next 267 0 R
>> endobj
259 0 obj <<
/Title 260 0 R
/A 257 0 R
-/Parent 235 0 R
+/Parent 239 0 R
/Prev 255 0 R
+/Next 263 0 R
>> endobj
255 0 obj <<
/Title 256 0 R
/A 253 0 R
-/Parent 235 0 R
+/Parent 239 0 R
/Prev 251 0 R
/Next 259 0 R
>> endobj
251 0 obj <<
/Title 252 0 R
/A 249 0 R
-/Parent 235 0 R
+/Parent 239 0 R
/Prev 247 0 R
/Next 255 0 R
>> endobj
247 0 obj <<
/Title 248 0 R
/A 245 0 R
-/Parent 235 0 R
+/Parent 239 0 R
/Prev 243 0 R
/Next 251 0 R
>> endobj
243 0 obj <<
/Title 244 0 R
/A 241 0 R
-/Parent 235 0 R
-/Prev 239 0 R
+/Parent 239 0 R
/Next 247 0 R
>> endobj
239 0 obj <<
/Title 240 0 R
/A 237 0 R
-/Parent 235 0 R
-/Next 243 0 R
+/Parent 187 0 R
+/Prev 215 0 R
+/First 243 0 R
+/Last 267 0 R
+/Count -7
>> endobj
235 0 obj <<
/Title 236 0 R
/A 233 0 R
-/Parent 183 0 R
-/Prev 211 0 R
-/First 239 0 R
-/Last 259 0 R
-/Count -6
+/Parent 215 0 R
+/Prev 219 0 R
>> endobj
231 0 obj <<
/Title 232 0 R
/A 229 0 R
-/Parent 211 0 R
-/Prev 215 0 R
+/Parent 219 0 R
+/Prev 227 0 R
>> endobj
227 0 obj <<
/Title 228 0 R
/A 225 0 R
-/Parent 215 0 R
+/Parent 219 0 R
/Prev 223 0 R
+/Next 231 0 R
>> endobj
223 0 obj <<
/Title 224 0 R
/A 221 0 R
-/Parent 215 0 R
-/Prev 219 0 R
+/Parent 219 0 R
/Next 227 0 R
>> endobj
219 0 obj <<
/Title 220 0 R
/A 217 0 R
/Parent 215 0 R
-/Next 223 0 R
+/Next 235 0 R
+/First 223 0 R
+/Last 231 0 R
+/Count -3
>> endobj
215 0 obj <<
/Title 216 0 R
/A 213 0 R
-/Parent 211 0 R
-/Next 231 0 R
+/Parent 187 0 R
+/Prev 211 0 R
+/Next 239 0 R
/First 219 0 R
-/Last 227 0 R
-/Count -3
+/Last 235 0 R
+/Count -2
>> endobj
211 0 obj <<
/Title 212 0 R
/A 209 0 R
-/Parent 183 0 R
+/Parent 187 0 R
/Prev 207 0 R
-/Next 235 0 R
-/First 215 0 R
-/Last 231 0 R
-/Count -2
+/Next 215 0 R
>> endobj
207 0 obj <<
/Title 208 0 R
/A 205 0 R
-/Parent 183 0 R
-/Prev 203 0 R
+/Parent 187 0 R
+/Prev 195 0 R
/Next 211 0 R
>> endobj
203 0 obj <<
/Title 204 0 R
/A 201 0 R
-/Parent 183 0 R
-/Prev 191 0 R
-/Next 207 0 R
+/Parent 195 0 R
+/Prev 199 0 R
>> endobj
199 0 obj <<
/Title 200 0 R
/A 197 0 R
-/Parent 191 0 R
-/Prev 195 0 R
+/Parent 195 0 R
+/Next 203 0 R
>> endobj
195 0 obj <<
/Title 196 0 R
/A 193 0 R
-/Parent 191 0 R
-/Next 199 0 R
+/Parent 187 0 R
+/Prev 191 0 R
+/Next 207 0 R
+/First 199 0 R
+/Last 203 0 R
+/Count -2
>> endobj
191 0 obj <<
/Title 192 0 R
/A 189 0 R
-/Parent 183 0 R
-/Prev 187 0 R
-/Next 203 0 R
-/First 195 0 R
-/Last 199 0 R
-/Count -2
+/Parent 187 0 R
+/Next 195 0 R
>> endobj
187 0 obj <<
/Title 188 0 R
/A 185 0 R
-/Parent 183 0 R
-/Next 191 0 R
+/Parent 103 0 R
+/Prev 107 0 R
+/Next 271 0 R
+/First 191 0 R
+/Last 239 0 R
+/Count -6
>> endobj
183 0 obj <<
/Title 184 0 R
/A 181 0 R
-/Parent 99 0 R
-/Prev 103 0 R
-/Next 263 0 R
-/First 187 0 R
-/Last 235 0 R
-/Count -6
+/Parent 167 0 R
+/Prev 179 0 R
>> endobj
179 0 obj <<
/Title 180 0 R
/A 177 0 R
-/Parent 163 0 R
+/Parent 167 0 R
/Prev 175 0 R
+/Next 183 0 R
>> endobj
175 0 obj <<
/Title 176 0 R
/A 173 0 R
-/Parent 163 0 R
+/Parent 167 0 R
/Prev 171 0 R
/Next 179 0 R
>> endobj
171 0 obj <<
/Title 172 0 R
/A 169 0 R
-/Parent 163 0 R
-/Prev 167 0 R
+/Parent 167 0 R
/Next 175 0 R
>> endobj
167 0 obj <<
/Title 168 0 R
/A 165 0 R
-/Parent 163 0 R
-/Next 171 0 R
+/Parent 107 0 R
+/Prev 163 0 R
+/First 171 0 R
+/Last 183 0 R
+/Count -4
>> endobj
163 0 obj <<
/Title 164 0 R
/A 161 0 R
-/Parent 103 0 R
-/Prev 159 0 R
-/First 167 0 R
-/Last 179 0 R
-/Count -4
+/Parent 107 0 R
+/Prev 119 0 R
+/Next 167 0 R
>> endobj
159 0 obj <<
/Title 160 0 R
/A 157 0 R
-/Parent 103 0 R
-/Prev 115 0 R
-/Next 163 0 R
+/Parent 155 0 R
>> endobj
155 0 obj <<
/Title 156 0 R
/A 153 0 R
-/Parent 151 0 R
+/Parent 119 0 R
+/Prev 147 0 R
+/First 159 0 R
+/Last 159 0 R
+/Count -1
>> endobj
151 0 obj <<
/Title 152 0 R
/A 149 0 R
-/Parent 115 0 R
-/Prev 143 0 R
-/First 155 0 R
-/Last 155 0 R
-/Count -1
+/Parent 147 0 R
>> endobj
147 0 obj <<
/Title 148 0 R
/A 145 0 R
-/Parent 143 0 R
+/Parent 119 0 R
+/Prev 139 0 R
+/Next 155 0 R
+/First 151 0 R
+/Last 151 0 R
+/Count -1
>> endobj
143 0 obj <<
/Title 144 0 R
/A 141 0 R
-/Parent 115 0 R
-/Prev 135 0 R
-/Next 151 0 R
-/First 147 0 R
-/Last 147 0 R
-/Count -1
+/Parent 139 0 R
>> endobj
139 0 obj <<
/Title 140 0 R
/A 137 0 R
-/Parent 135 0 R
+/Parent 119 0 R
+/Prev 131 0 R
+/Next 147 0 R
+/First 143 0 R
+/Last 143 0 R
+/Count -1
>> endobj
135 0 obj <<
/Title 136 0 R
/A 133 0 R
-/Parent 115 0 R
-/Prev 127 0 R
-/Next 143 0 R
-/First 139 0 R
-/Last 139 0 R
-/Count -1
+/Parent 131 0 R
>> endobj
131 0 obj <<
/Title 132 0 R
/A 129 0 R
-/Parent 127 0 R
+/Parent 119 0 R
+/Prev 123 0 R
+/Next 139 0 R
+/First 135 0 R
+/Last 135 0 R
+/Count -1
>> endobj
127 0 obj <<
/Title 128 0 R
/A 125 0 R
-/Parent 115 0 R
-/Prev 119 0 R
-/Next 135 0 R
-/First 131 0 R
-/Last 131 0 R
-/Count -1
+/Parent 123 0 R
>> endobj
123 0 obj <<
/Title 124 0 R
/A 121 0 R
/Parent 119 0 R
+/Next 131 0 R
+/First 127 0 R
+/Last 127 0 R
+/Count -1
>> endobj
119 0 obj <<
/Title 120 0 R
/A 117 0 R
-/Parent 115 0 R
-/Next 127 0 R
+/Parent 107 0 R
+/Prev 115 0 R
+/Next 163 0 R
/First 123 0 R
-/Last 123 0 R
-/Count -1
+/Last 155 0 R
+/Count -5
>> endobj
115 0 obj <<
/Title 116 0 R
/A 113 0 R
-/Parent 103 0 R
+/Parent 107 0 R
/Prev 111 0 R
-/Next 159 0 R
-/First 119 0 R
-/Last 151 0 R
-/Count -5
+/Next 119 0 R
>> endobj
111 0 obj <<
/Title 112 0 R
/A 109 0 R
-/Parent 103 0 R
-/Prev 107 0 R
+/Parent 107 0 R
/Next 115 0 R
>> endobj
107 0 obj <<
/Title 108 0 R
/A 105 0 R
/Parent 103 0 R
-/Next 111 0 R
+/Next 187 0 R
+/First 111 0 R
+/Last 167 0 R
+/Count -5
>> endobj
103 0 obj <<
/Title 104 0 R
/A 101 0 R
-/Parent 99 0 R
-/Next 183 0 R
+/Parent 7255 0 R
+/Prev 7 0 R
+/Next 467 0 R
/First 107 0 R
-/Last 163 0 R
-/Count -5
+/Last 459 0 R
+/Count -6
>> endobj
99 0 obj <<
/Title 100 0 R
/A 97 0 R
-/Parent 6735 0 R
-/Prev 7 0 R
-/Next 455 0 R
-/First 103 0 R
-/Last 447 0 R
-/Count -6
+/Parent 95 0 R
>> endobj
95 0 obj <<
/Title 96 0 R
/A 93 0 R
-/Parent 91 0 R
+/Parent 7 0 R
+/Prev 39 0 R
+/First 99 0 R
+/Last 99 0 R
+/Count -1
>> endobj
91 0 obj <<
/Title 92 0 R
/A 89 0 R
-/Parent 7 0 R
-/Prev 39 0 R
-/First 95 0 R
-/Last 95 0 R
-/Count -1
+/Parent 79 0 R
+/Prev 87 0 R
>> endobj
87 0 obj <<
/Title 88 0 R
/A 85 0 R
/Parent 79 0 R
/Prev 83 0 R
+/Next 91 0 R
>> endobj
83 0 obj <<
/Title 84 0 R
@@ -37656,8 +41038,8 @@ endobj
/Parent 39 0 R
/Prev 75 0 R
/First 83 0 R
-/Last 87 0 R
-/Count -2
+/Last 91 0 R
+/Count -3
>> endobj
75 0 obj <<
/Title 76 0 R
@@ -37728,7 +41110,7 @@ endobj
/A 37 0 R
/Parent 7 0 R
/Prev 11 0 R
-/Next 91 0 R
+/Next 95 0 R
/First 43 0 R
/Last 79 0 R
/Count -7
@@ -37785,6786 +41167,7304 @@ endobj
7 0 obj <<
/Title 8 0 R
/A 5 0 R
-/Parent 6735 0 R
-/Next 99 0 R
+/Parent 7255 0 R
+/Next 103 0 R
/First 11 0 R
-/Last 91 0 R
+/Last 95 0 R
/Count -3
>> endobj
-6736 0 obj <<
-/Names [(AccessControls) 2959 0 R (AdvancedNetworkManagement) 3024 0 R (Appendixes) 6519 0 R (Backup) 3030 0 R (CUPS-printing) 3021 0 R (ClientConfig) 2955 0 R (DNSDHCP) 3065 0 R (Doc-Start) 2862 0 R (FastStart) 2949 0 R (Further-Resources) 3066 0 R (InterdomainTrusts) 3018 0 R (IntroSMB) 2947 0 R (Item.1) 3946 0 R (Item.10) 4079 0 R (Item.100) 5705 0 R (Item.101) 5706 0 R (Item.102) 5707 0 R (Item.103) 5708 0 R (Item.104) 5709 0 R (Item.105) 5710 0 R (Item.106) 5711 0 R (Item.107) 5712 0 R (Item.108) 5713 0 R (Item.109) 5978 0 R (Item.11) 4080 0 R (Item.110) 5979 0 R (Item.111) 5980 0 R (Item.112) 5981 0 R (Item.113) 5992 0 R (Item.114) 5993 0 R (Item.115) 5994 0 R (Item.116) 5995 0 R (Item.117) 5996 0 R (Item.118) 5997 0 R (Item.119) 6002 0 R (Item.12) 4157 0 R (Item.120) 6003 0 R (Item.121) 6004 0 R (Item.122) 6028 0 R (Item.123) 6033 0 R (Item.124) 6034 0 R (Item.125) 6035 0 R (Item.126) 6036 0 R (Item.127) 6037 0 R (Item.128) 6038 0 R (Item.129) 6046 0 R (Item.13) 4158 0 R (Item.130) 6047 0 R (Item.131) 6048 0 R (Item.132) 6049 0 R (Item.133) 6050 0 R (Item.134) 6051 0 R (Item.135) 6052 0 R (Item.136) 6053 0 R (Item.137) 6054 0 R (Item.138) 6055 0 R (Item.139) 6064 0 R (Item.14) 4159 0 R (Item.140) 6065 0 R (Item.141) 6066 0 R (Item.142) 6067 0 R (Item.143) 6068 0 R (Item.144) 6069 0 R (Item.145) 6070 0 R (Item.146) 6071 0 R (Item.147) 6072 0 R (Item.148) 6073 0 R (Item.149) 6074 0 R (Item.15) 4160 0 R (Item.150) 6075 0 R (Item.151) 6076 0 R (Item.152) 6077 0 R (Item.153) 6078 0 R (Item.154) 6079 0 R (Item.155) 6080 0 R (Item.156) 6088 0 R (Item.157) 6089 0 R (Item.158) 6090 0 R (Item.159) 6091 0 R (Item.16) 4161 0 R (Item.160) 6092 0 R (Item.161) 6093 0 R (Item.162) 6094 0 R (Item.163) 6117 0 R (Item.164) 6118 0 R (Item.165) 6119 0 R (Item.166) 6120 0 R (Item.167) 6348 0 R (Item.168) 6349 0 R (Item.169) 6350 0 R (Item.17) 4162 0 R (Item.170) 6351 0 R (Item.171) 6352 0 R (Item.172) 6353 0 R (Item.173) 6354 0 R (Item.174) 6355 0 R (Item.175) 6356 0 R (Item.176) 6357 0 R (Item.177) 6358 0 R (Item.178) 6359 0 R (Item.179) 6360 0 R (Item.18) 4242 0 R (Item.180) 6361 0 R (Item.181) 6362 0 R (Item.182) 6363 0 R (Item.183) 6364 0 R (Item.184) 6365 0 R (Item.185) 6366 0 R (Item.186) 6393 0 R (Item.187) 6394 0 R (Item.188) 6395 0 R (Item.189) 6396 0 R (Item.19) 4243 0 R (Item.190) 6432 0 R (Item.191) 6433 0 R (Item.192) 6434 0 R (Item.193) 6439 0 R (Item.194) 6440 0 R (Item.195) 6445 0 R (Item.196) 6446 0 R (Item.197) 6447 0 R (Item.198) 6448 0 R (Item.199) 6449 0 R (Item.2) 3947 0 R (Item.20) 4245 0 R (Item.200) 6450 0 R (Item.201) 6451 0 R (Item.202) 6452 0 R (Item.203) 6453 0 R (Item.204) 6454 0 R (Item.205) 6455 0 R (Item.206) 6456 0 R (Item.207) 6462 0 R (Item.208) 6463 0 R (Item.209) 6464 0 R (Item.21) 4246 0 R (Item.210) 6531 0 R (Item.211) 6532 0 R (Item.212) 6533 0 R (Item.213) 6538 0 R (Item.214) 6539 0 R (Item.22) 4284 0 R (Item.23) 4285 0 R (Item.24) 4286 0 R (Item.25) 4287 0 R (Item.26) 4288 0 R (Item.27) 4289 0 R (Item.28) 4314 0 R (Item.29) 4315 0 R (Item.3) 3962 0 R (Item.30) 4316 0 R (Item.31) 4317 0 R (Item.32) 4380 0 R (Item.33) 4381 0 R (Item.34) 4382 0 R (Item.35) 4548 0 R (Item.36) 4549 0 R (Item.37) 4550 0 R (Item.38) 4627 0 R (Item.39) 4628 0 R (Item.4) 3963 0 R (Item.40) 4634 0 R (Item.41) 4635 0 R (Item.42) 4636 0 R (Item.43) 4670 0 R (Item.44) 4671 0 R (Item.45) 4676 0 R (Item.46) 4677 0 R (Item.47) 4678 0 R (Item.48) 4679 0 R (Item.49) 4847 0 R (Item.5) 4074 0 R (Item.50) 4848 0 R (Item.51) 4849 0 R (Item.52) 4850 0 R (Item.53) 4851 0 R (Item.54) 4852 0 R (Item.55) 4853 0 R (Item.56) 4957 0 R (Item.57) 4958 0 R (Item.58) 4959 0 R (Item.59) 4960 0 R (Item.6) 4075 0 R (Item.60) 5023 0 R (Item.61) 5024 0 R (Item.62) 5025 0 R (Item.63) 5026 0 R (Item.64) 5027 0 R (Item.65) 5028 0 R (Item.66) 5029 0 R (Item.67) 5030 0 R (Item.68) 5031 0 R (Item.69) 5032 0 R (Item.7) 4076 0 R (Item.70) 5033 0 R (Item.71) 5034 0 R (Item.72) 5035 0 R (Item.73) 5036 0 R (Item.74) 5037 0 R (Item.75) 5084 0 R (Item.76) 5085 0 R (Item.77) 5086 0 R (Item.78) 5393 0 R (Item.79) 5394 0 R (Item.8) 4077 0 R (Item.80) 5395 0 R (Item.81) 5396 0 R (Item.82) 5414 0 R (Item.83) 5415 0 R (Item.84) 5416 0 R (Item.85) 5417 0 R (Item.86) 5418 0 R (Item.87) 5424 0 R (Item.88) 5425 0 R (Item.89) 5426 0 R (Item.9) 4078 0 R (Item.90) 5440 0 R (Item.91) 5441 0 R (Item.92) 5442 0 R (Item.93) 5443 0 R (Item.94) 5699 0 R (Item.95) 5700 0 R (Item.96) 5701 0 R (Item.97) 5702 0 R (Item.98) 5703 0 R (Item.99) 5704 0 R (NT4Migration) 3033 0 R (NetworkBrowsing) 2956 0 R (Other-Clients) 3063 0 R (PolicyMgmt) 3025 0 R (Portability) 3062 0 R (ProfileMgmt) 3026 0 R (SWAT) 3034 0 R (SambaHA) 3031 0 R (ServerType) 2950 0 R (StandAloneServer) 2954 0 R (VFS) 3022 0 R (XMLpassdb) 4427 0 R (ads-create-machine-account) 4212 0 R (ads-member) 3985 0 R (ads-test-server) 4214 0 R (ads-test-smbclient) 4215 0 R (browse-force-master) 4308 0 R (bugreport) 3060 0 R (chapter*.1) 3071 0 R (chapter.1) 10 0 R (chapter.10) 458 0 R (chapter.11) 582 0 R (chapter.12) 722 0 R (chapter.13) 762 0 R (chapter.14) 870 0 R (chapter.15) 966 0 R (chapter.16) 1022 0 R (chapter.17) 1066 0 R (chapter.18) 1078 0 R (chapter.19) 1326 0 R (chapter.2) 38 0 R (chapter.20) 1870 0 R (chapter.21) 1922 0 R (chapter.22) 2026 0 R (chapter.23) 2058 0 R (chapter.24) 2118 0 R (chapter.25) 2234 0 R (chapter.26) 2302 0 R (chapter.27) 2374 0 R (chapter.28) 2398 0 R (chapter.29) 2410 0 R (chapter.3) 90 0 R (chapter.30) 2422 0 R (chapter.31) 2438 0 R (chapter.32) 2486 0 R (chapter.33) 2538 0 R (chapter.34) 2558 0 R (chapter.35) 2582 0 R (chapter.36) 2614 0 R (chapter.37) 2678 0 R (chapter.38) 2718 0 R (chapter.39) 2786 0 R (chapter.4) 102 0 R (chapter.40) 2834 0 R (chapter.41) 2842 0 R (chapter.5) 182 0 R (chapter.6) 262 0 R (chapter.7) 322 0 R (chapter.8) 418 0 R (chapter.9) 446 0 R (compiling) 3061 0 R (diagnosis) 3035 0 R (domain-member) 2953 0 R (domain-member-server) 4175 0 R (example.12.3.1) 4558 0 R (example.13.2.1) 4599 0 R (figure.19.1) 5172 0 R (figure.19.10) 5742 0 R (figure.19.11) 5750 0 R (figure.19.12) 5759 0 R (figure.19.13) 5767 0 R (figure.19.14) 5775 0 R (figure.19.15) 5782 0 R (figure.19.2) 5182 0 R (figure.19.3) 5192 0 R (figure.19.4) 5236 0 R (figure.19.5) 5246 0 R (figure.19.6) 5256 0 R (figure.19.7) 5266 0 R (figure.19.8) 5726 0 R (figure.19.9) 5734 0 R (groupmapping) 2958 0 R (id2805466) 3870 0 R (id2805534) 3877 0 R (id2805621) 3880 0 R (id2805695) 3887 0 R (id2805770) 3907 0 R (id2805872) 3908 0 R (id2805933) 3909 0 R (id2805962) 3916 0 R (id2805975) 3917 0 R (id2806076) 3896 0 R (id2806167) 3898 0 R (id2806220) 3903 0 R (id2806264) 3906 0 R (id2806461) 3892 0 R (id2806503) 3895 0 R (id2806689) 3863 0 R (id2806743) 3864 0 R (id2807354) 3922 0 R (id2807478) 3945 0 R (id2807572) 3952 0 R (id2807611) 3953 0 R (id2807691) 3954 0 R (id2807803) 3927 0 R (id2808680) 3955 0 R (id2808702) 3956 0 R (id2808922) 3972 0 R (id2808952) 3980 0 R (id2809005) 3983 0 R (id2809163) 3993 0 R (id2809231) 3994 0 R (id2809408) 3999 0 R (id2809436) 4000 0 R (id2809468) 4005 0 R (id2809497) 4006 0 R (id2810876) 3938 0 R (id2810967) 3939 0 R (id2811049) 3944 0 R (id2811409) 4008 0 R (id2811638) 4026 0 R (id2811653) 4027 0 R (id2811853) 4033 0 R (id2812167) 4049 0 R (id2812463) 4059 0 R (id2812486) 4060 0 R (id2812501) 4061 0 R (id2812534) 4062 0 R (id2812553) 4067 0 R (id2812588) 4068 0 R (id2814040) 4013 0 R (id2815227) 4081 0 R (id2815332) 4086 0 R (id2815339) 4087 0 R (id2815377) 4088 0 R (id2815427) 4089 0 R (id2815498) 4094 0 R (id2815561) 4095 0 R (id2815588) 4096 0 R (id2815715) 4114 0 R (id2815785) 4116 0 R (id2815806) 4117 0 R (id2815829) 4123 0 R (id2815855) 4124 0 R (id2815956) 4125 0 R (id2816006) 4130 0 R (id2816020) 4131 0 R (id2816052) 4132 0 R (id2816085) 4133 0 R (id2816130) 4138 0 R (id2816226) 4144 0 R (id2816386) 4149 0 R (id2816655) 4143 0 R (id2817633) 4102 0 R (id2817797) 4108 0 R (id2817825) 4109 0 R (id2818170) 4156 0 R (id2818367) 4168 0 R (id2818422) 4170 0 R (id2818435) 4171 0 R (id2818503) 4172 0 R (id2818544) 4173 0 R (id2818619) 4181 0 R (id2818629) 4182 0 R (id2821295) 4193 0 R (id2821434) 4202 0 R (id2821517) 4203 0 R (id2821714) 4213 0 R (id2821865) 4220 0 R (id2821887) 4221 0 R (id2821914) 4222 0 R (id2821946) 4223 0 R (id2822096) 4240 0 R (id2822144) 4241 0 R (id2822356) 4251 0 R (id2822409) 4290 0 R (id2822542) 4291 0 R (id2822668) 4296 0 R (id2822724) 4256 0 R (id2823077) 4267 0 R (id2823156) 4272 0 R (id2823388) 4233 0 R (id2823426) 4234 0 R (id2823494) 4239 0 R (id2824054) 4301 0 R (id2824319) 4313 0 R (id2824475) 4318 0 R (id2824493) 4319 0 R (id2827261) 4277 0 R (id2827277) 4278 0 R (id2827439) 4279 0 R (id2827994) 4320 0 R (id2828102) 4325 0 R (id2828163) 4326 0 R (id2828322) 4332 0 R (id2828516) 4337 0 R (id2828542) 4338 0 R (id2828626) 4339 0 R (id2828639) 4344 0 R (id2828706) 4345 0 R (id2828844) 4351 0 R (id2828890) 4352 0 R (id2828997) 4357 0 R (id2829077) 4358 0 R (id2829126) 4363 0 R (id2829241) 4368 0 R (id2829351) 4370 0 R (id2829450) 4376 0 R (id2829550) 4378 0 R (id2829692) 4387 0 R (id2829707) 4388 0 R (id2829736) 4389 0 R (id2830003) 4400 0 R (id2830066) 4405 0 R (id2830219) 4410 0 R (id2830273) 4411 0 R (id2830310) 4412 0 R (id2830366) 4417 0 R (id2830397) 4418 0 R (id2830663) 4419 0 R (id2830797) 4425 0 R (id2830832) 4432 0 R (id2830872) 4433 0 R (id2833113) 4395 0 R (id2835315) 4435 0 R (id2835343) 4436 0 R (id2835492) 4448 0 R (id2835517) 4450 0 R (id2835626) 4456 0 R (id2835814) 4461 0 R (id2835943) 4466 0 R (id2836121) 4481 0 R (id2836158) 4487 0 R (id2836293) 4489 0 R (id2836309) 4523 0 R (id2836656) 4495 0 R (id2836718) 4496 0 R (id2836831) 4502 0 R (id2836852) 4503 0 R (id2836916) 4504 0 R (id2836992) 4530 0 R (id2837117) 4536 0 R (id2837498) 4509 0 R (id2837529) 4510 0 R (id2837637) 4511 0 R (id2837644) 4512 0 R (id2837659) 4513 0 R (id2837719) 4518 0 R (id2837891) 4542 0 R (id2837992) 4543 0 R (id2838180) 4551 0 R (id2838246) 4556 0 R (id2838260) 4557 0 R (id2838282) 4559 0 R (id2838327) 4560 0 R (id2838401) 4565 0 R (id2838417) 4566 0 R (id2838477) 4567 0 R (id2838722) 4587 0 R (id2838740) 4588 0 R (id2838818) 4590 0 R (id2839145) 4600 0 R (id2839224) 4601 0 R (id2839252) 4602 0 R (id2839310) 4608 0 R (id2839524) 4603 0 R (id2839543) 4617 0 R (id2839770) 4610 0 R (id2839791) 4624 0 R (id2841663) 4573 0 R (id2841788) 4578 0 R (id2841806) 4579 0 R (id2844354) 4611 0 R (id2844426) 4619 0 R (id2844439) 4626 0 R (id2844522) 4629 0 R (id2844725) 4637 0 R (id2844733) 4638 0 R (id2844771) 4643 0 R (id2844850) 4644 0 R (id2844972) 4645 0 R (id2845063) 4650 0 R (id2845155) 4651 0 R (id2845200) 4652 0 R (id2845352) 4657 0 R (id2845682) 4667 0 R (id2845757) 4668 0 R (id2845771) 4669 0 R (id2846150) 4684 0 R (id2846491) 4705 0 R (id2846516) 4706 0 R (id2846545) 4707 0 R (id2846571) 4708 0 R (id2846604) 4709 0 R (id2846626) 4714 0 R (id2846653) 4715 0 R (id2846730) 4716 0 R (id2846773) 4717 0 R (id2846832) 4722 0 R (id2846941) 4727 0 R (id2846954) 4728 0 R (id2847016) 4729 0 R (id2847200) 4734 0 R (id2848271) 4689 0 R (id2848326) 4690 0 R (id2848457) 4695 0 R (id2849637) 4744 0 R (id2849664) 4745 0 R (id2849743) 4750 0 R (id2849774) 4751 0 R (id2849847) 4756 0 R (id2849877) 4757 0 R (id2849995) 4771 0 R (id2850013) 4772 0 R (id2850082) 4777 0 R (id2850133) 4778 0 R (id2850183) 4779 0 R (id2850240) 4784 0 R (id2850305) 4785 0 R (id2850344) 4791 0 R (id2850367) 4793 0 R (id2850386) 4794 0 R (id2850411) 4795 0 R (id2850597) 4820 0 R (id2850612) 4821 0 R (id2850710) 4826 0 R (id2850929) 4800 0 R (id2850957) 4801 0 R (id2851041) 4806 0 R (id2851053) 4807 0 R (id2851302) 4769 0 R (id2851335) 4770 0 R (id2852120) 4835 0 R (id2852282) 4860 0 R (id2852390) 4861 0 R (id2852483) 4866 0 R (id2853028) 4808 0 R (id2853065) 4809 0 R (id2853092) 4810 0 R (id2853219) 4815 0 R (id2853641) 4840 0 R (id2853706) 4841 0 R (id2853742) 4846 0 R (id2853812) 4854 0 R (id2854489) 4867 0 R (id2854572) 4872 0 R (id2854879) 4883 0 R (id2854971) 4896 0 R (id2854984) 4897 0 R (id2856922) 4855 0 R (id2864445) 4902 0 R (id2864774) 4907 0 R (id2864994) 4908 0 R (id2865046) 4914 0 R (id2865094) 4915 0 R (id2865571) 4920 0 R (id2865848) 4925 0 R (id2866003) 4928 0 R (id2866154) 4933 0 R (id2866267) 4934 0 R (id2866338) 4939 0 R (id2866558) 4944 0 R (id2866720) 4950 0 R (id2866814) 4951 0 R (id2866998) 4956 0 R (id2867106) 4961 0 R (id2867434) 4970 0 R (id2867587) 4971 0 R (id2867790) 4976 0 R (id2867906) 4981 0 R (id2868005) 4987 0 R (id2868129) 4992 0 R (id2868333) 4993 0 R (id2868444) 4998 0 R (id2868596) 5003 0 R (id2868617) 5004 0 R (id2868814) 5009 0 R (id2869104) 5014 0 R (id2869199) 5015 0 R (id2869341) 5021 0 R (id2869374) 5022 0 R (id2869808) 5042 0 R (id2870110) 5051 0 R (id2870354) 5052 0 R (id2870452) 5057 0 R (id2870723) 5071 0 R (id2870793) 5072 0 R (id2870816) 5073 0 R (id2870861) 5076 0 R (id2870902) 5081 0 R (id2870921) 5082 0 R (id2870946) 5083 0 R (id2871098) 5091 0 R (id2871427) 5097 0 R (id2871472) 5098 0 R (id2871641) 5104 0 R (id2871655) 5105 0 R (id2871668) 5106 0 R (id2871702) 5107 0 R (id2871820) 5129 0 R (id2871881) 5134 0 R (id2871980) 5139 0 R (id2871999) 5140 0 R (id2872026) 5141 0 R (id2872063) 5146 0 R (id2872121) 5147 0 R (id2872282) 5152 0 R (id2872376) 5153 0 R (id2872451) 5160 0 R (id2872495) 5161 0 R (id2872560) 5167 0 R (id2872594) 5162 0 R (id2872665) 5179 0 R (id2872712) 5180 0 R (id2872762) 5189 0 R (id2872792) 5190 0 R (id2872858) 5198 0 R (id2878722) 5113 0 R (id2878729) 5114 0 R (id2878777) 5116 0 R (id2878829) 5118 0 R (id2878908) 5125 0 R (id2885674) 5203 0 R (id2885764) 5206 0 R (id2885786) 5207 0 R (id2885924) 5216 0 R (id2886112) 5221 0 R (id2886228) 5226 0 R (id2886398) 5227 0 R (id2886448) 5234 0 R (id2886482) 5237 0 R (id2886513) 5244 0 R (id2886585) 5247 0 R (id2886615) 5254 0 R (id2886667) 5264 0 R (id2886741) 5267 0 R (id2886762) 5724 0 R (id2886796) 5268 0 R (id2886847) 5732 0 R (id2886881) 5275 0 R (id2887195) 5280 0 R (id2887298) 5285 0 R (id2887313) 5286 0 R (id2887366) 5287 0 R (id2887421) 5288 0 R (id2887636) 5298 0 R (id2887863) 5299 0 R (id2887914) 5740 0 R (id2888020) 5307 0 R (id2888249) 5312 0 R (id2888374) 5324 0 R (id2888436) 5327 0 R (id2888452) 5328 0 R (id2888491) 5329 0 R (id2888516) 5748 0 R (id2888550) 5336 0 R (id2888572) 5757 0 R (id2888613) 5337 0 R (id2888634) 5338 0 R (id2888760) 5765 0 R (id2888794) 5339 0 R (id2888872) 5344 0 R (id2888927) 5346 0 R (id2888968) 5347 0 R (id2889034) 5352 0 R (id2889051) 5353 0 R (id2889085) 5354 0 R (id2889106) 5355 0 R (id2889133) 5356 0 R (id2889167) 5362 0 R (id2889186) 5363 0 R (id2889278) 5364 0 R (id2889324) 5369 0 R (id2889521) 5376 0 R (id2889579) 5381 0 R (id2889612) 5382 0 R (id2889662) 5388 0 R (id2889883) 5397 0 R (id2890064) 5403 0 R (id2890165) 5408 0 R (id2890308) 5413 0 R (id2890402) 5423 0 R (id2890490) 5427 0 R (id2890524) 5428 0 R (id2890541) 5773 0 R (id2890575) 5433 0 R (id2890690) 5434 0 R (id2890824) 5439 0 R (id2890939) 5444 0 R (id2891051) 5453 0 R (id2891130) 5454 0 R (id2891220) 5459 0 R (id2891382) 5464 0 R (id2891399) 5465 0 R (id2891429) 5466 0 R (id2891492) 5467 0 R (id2891530) 5472 0 R (id2891582) 5473 0 R (id2891619) 5478 0 R (id2891674) 5479 0 R (id2891707) 5480 0 R (id2891740) 5485 0 R (id2891791) 5486 0 R (id2891847) 5492 0 R (id2891908) 5493 0 R (id2891939) 5494 0 R (id2891964) 5499 0 R (id2891982) 5500 0 R (id2892002) 5501 0 R (id2892104) 5506 0 R (id2892207) 5507 0 R (id2892278) 5508 0 R (id2892340) 5509 0 R (id2892398) 5514 0 R (id2892460) 5515 0 R (id2892566) 5523 0 R (id2892621) 5527 0 R (id2892646) 5528 0 R (id2892691) 5535 0 R (id2892758) 5536 0 R (id2892890) 5553 0 R (id2892978) 5559 0 R (id2893056) 5567 0 R (id2893129) 5572 0 R (id2893194) 5575 0 R (id2893652) 5613 0 R (id2893683) 5618 0 R (id2893714) 5619 0 R (id2893755) 5621 0 R (id2893827) 5622 0 R (id2893929) 5627 0 R (id2894000) 5628 0 R (id2894048) 5634 0 R (id2894063) 5635 0 R (id2894257) 5640 0 R (id2894302) 5641 0 R (id2894384) 5642 0 R (id2894445) 5647 0 R (id2894463) 5648 0 R (id2894481) 5649 0 R (id2894516) 5650 0 R (id2894528) 5651 0 R (id2894541) 5652 0 R (id2894555) 5657 0 R (id2894562) 5658 0 R (id2894756) 5663 0 R (id2895010) 5689 0 R (id2896116) 5719 0 R (id2896127) 5780 0 R (id2896229) 5794 0 R (id2896236) 5795 0 R (id2896275) 5796 0 R (id2896314) 5797 0 R (id2896396) 5799 0 R (id2896416) 5800 0 R (id2896554) 5806 0 R (id2896600) 5807 0 R (id2896622) 5808 0 R (id2896677) 5811 0 R (id2896706) 5813 0 R (id2896747) 5834 0 R (id2896818) 5839 0 R (id2896853) 5840 0 R (id2896881) 5841 0 R (id2896909) 5843 0 R (id2896984) 5848 0 R (id2897201) 5818 0 R (id2897229) 5819 0 R (id2897535) 5788 0 R (id2897553) 5789 0 R (id2898260) 5850 0 R (id2898322) 5851 0 R (id2898434) 5857 0 R (id2898641) 5858 0 R (id2898713) 5866 0 R (id2898826) 5867 0 R (id2899263) 5820 0 R (id2899322) 5825 0 R (id2899353) 5826 0 R (id2899381) 5827 0 R (id2899414) 5832 0 R (id2899437) 5833 0 R (id2901722) 5868 0 R (id2901963) 5873 0 R (id2901970) 5875 0 R (id2902116) 5885 0 R (id2902204) 5893 0 R (id2902241) 5894 0 R (id2902347) 5896 0 R (id2902570) 5903 0 R (id2902662) 5912 0 R (id2902681) 5913 0 R (id2902769) 5924 0 R (id2902785) 5925 0 R (id2902985) 5937 0 R (id2903180) 5951 0 R (id2903212) 5953 0 R (id2903321) 5966 0 R (id2903430) 5971 0 R (id2903454) 5972 0 R (id2903555) 5973 0 R (id2903610) 5958 0 R (id2903662) 5959 0 R (id2903773) 5965 0 R (id2904055) 5918 0 R (id2904086) 5919 0 R (id2904897) 5982 0 R (id2904998) 5988 0 R (id2905018) 5989 0 R (id2905039) 5990 0 R (id2905084) 5991 0 R (id2905230) 6005 0 R (id2905244) 6006 0 R (id2905347) 6011 0 R (id2905381) 6012 0 R (id2905421) 6013 0 R (id2905434) 6014 0 R (id2905524) 6019 0 R (id2906992) 6044 0 R (id2907150) 6045 0 R (id2910597) 6020 0 R (id2910633) 6021 0 R (id2910783) 6026 0 R (id2910790) 6027 0 R (id2911720) 6081 0 R (id2911784) 6086 0 R (id2911801) 6087 0 R (id2911965) 6095 0 R (id2911986) 6100 0 R (id2912003) 6101 0 R (id2912044) 6102 0 R (id2912102) 6103 0 R (id2912148) 6108 0 R (id2912168) 6109 0 R (id2912265) 6110 0 R (id2912316) 6111 0 R (id2912663) 6125 0 R (id2912808) 6127 0 R (id2912869) 6129 0 R (id2913062) 6138 0 R (id2913374) 6140 0 R (id2913386) 6141 0 R (id2913449) 6146 0 R (id2913668) 6147 0 R (id2913980) 6163 0 R (id2913996) 6164 0 R (id2914052) 6169 0 R (id2914662) 6183 0 R (id2914692) 6184 0 R (id2914719) 6185 0 R (id2915125) 6158 0 R (id2917094) 6195 0 R (id2917151) 6198 0 R (id2917235) 6203 0 R (id2917266) 6204 0 R (id2917467) 6213 0 R (id2917500) 6214 0 R (id2917536) 6219 0 R (id2917567) 6220 0 R (id2917602) 6221 0 R (id2917615) 6222 0 R (id2917754) 6245 0 R (id2917796) 6246 0 R (id2917885) 6251 0 R (id2918010) 6256 0 R (id2918055) 6257 0 R (id2918169) 6267 0 R (id2918201) 6268 0 R (id2918226) 6269 0 R (id2918297) 6274 0 R (id2918312) 6275 0 R (id2918344) 6276 0 R (id2918395) 6277 0 R (id2918550) 6286 0 R (id2918592) 6287 0 R (id2918660) 6289 0 R (id2918761) 6294 0 R (id2918807) 6295 0 R (id2919359) 6232 0 R (id2919384) 6233 0 R (id2919428) 6238 0 R (id2919480) 6239 0 R (id2919604) 6244 0 R (id2920614) 6333 0 R (id2920668) 6334 0 R (id2920729) 6339 0 R (id2920786) 6340 0 R (id2920815) 6341 0 R (id2920840) 6347 0 R (id2921233) 6309 0 R (id2921402) 6302 0 R (id2921422) 6303 0 R (id2921888) 6327 0 R (id2921912) 6328 0 R (id2922568) 6319 0 R (id2922591) 6321 0 R (id2922644) 6322 0 R (id2923057) 6367 0 R (id2923072) 6368 0 R (id2923138) 6370 0 R (id2923209) 6375 0 R (id2923380) 6377 0 R (id2923536) 6387 0 R (id2923686) 6386 0 R (id2924426) 6392 0 R (id2924538) 6402 0 R (id2924602) 6404 0 R (id2924707) 6405 0 R (id2924772) 6411 0 R (id2924837) 6412 0 R (id2924884) 6413 0 R (id2924936) 6414 0 R (id2924959) 6415 0 R (id2925080) 6425 0 R (id2925114) 6426 0 R (id2925287) 6431 0 R (id2928839) 6465 0 R (id2928958) 6474 0 R (id2929241) 6479 0 R (id2929285) 6483 0 R (id2929438) 6490 0 R (id2929553) 6509 0 R (id2929670) 6521 0 R (id2929677) 6522 0 R (id2929706) 6525 0 R (id2929721) 6526 0 R (id2929752) 6528 0 R (id2929943) 6507 0 R (id2930051) 6508 0 R (id2930232) 6471 0 R (id2931174) 6540 0 R (id2931222) 6545 0 R (id2931358) 6546 0 R (id2931495) 6551 0 R (id2931751) 6497 0 R (id2931811) 6500 0 R (id2931847) 6502 0 R (id2932304) 6552 0 R (id2932337) 6553 0 R (id2932390) 6558 0 R (id2932482) 6559 0 R (id2932686) 6564 0 R (id2932780) 6565 0 R (id2934060) 6571 0 R (id2934145) 6572 0 R (id2934173) 6574 0 R (id2934342) 6579 0 R (id2934386) 6584 0 R (id2934393) 6585 0 R (id2934419) 6586 0 R (id2934426) 6587 0 R (id2934515) 6611 0 R (id2934605) 6612 0 R (id2934636) 6617 0 R (id2934681) 6618 0 R (id2934711) 6620 0 R (id2934729) 6621 0 R (id2934775) 6622 0 R (id2934897) 6605 0 R (id2934956) 6609 0 R (id2935054) 6610 0 R (id2935202) 6592 0 R (id2935274) 6598 0 R (id2935281) 6599 0 R (id2935805) 6628 0 R (id2935829) 6629 0 R (id2935939) 6631 0 R (id2935991) 6638 0 R (id2936061) 6639 0 R (id2936105) 6644 0 R (id2936158) 6645 0 R (id2936181) 6646 0 R (id2936237) 6647 0 R (id2936279) 6648 0 R (id2937187) 6653 0 R (id2937210) 6655 0 R (id2937243) 6656 0 R (id2937381) 6666 0 R (id2937764) 6691 0 R (id2937832) 6695 0 R (id2937961) 6661 0 R (id2938151) 6637 0 R (install) 2948 0 R (integrate-ms-networks) 3028 0 R (introduction) 3862 0 R (locking) 2960 0 R (migration) 6318 0 R (msdfs) 3019 0 R (optional) 4266 0 R (page.1) 2861 0 R (page.10) 3267 0 R (page.100) 4455 0 R (page.101) 4460 0 R (page.102) 4465 0 R (page.103) 4480 0 R (page.104) 4486 0 R (page.105) 4494 0 R (page.106) 4500 0 R (page.107) 4508 0 R (page.108) 4517 0 R (page.109) 4522 0 R (page.11) 3320 0 R (page.110) 4529 0 R (page.111) 4535 0 R (page.112) 4541 0 R (page.113) 4547 0 R (page.114) 4555 0 R (page.115) 4564 0 R (page.116) 4572 0 R (page.117) 4577 0 R (page.118) 4583 0 R (page.119) 4594 0 R (page.12) 3370 0 R (page.120) 4598 0 R (page.121) 4607 0 R (page.122) 4616 0 R (page.123) 4623 0 R (page.124) 4633 0 R (page.125) 4642 0 R (page.126) 4649 0 R (page.127) 4656 0 R (page.128) 4666 0 R (page.129) 4675 0 R (page.13) 3423 0 R (page.130) 4683 0 R (page.131) 4688 0 R (page.132) 4694 0 R (page.133) 4699 0 R (page.134) 4704 0 R (page.135) 4713 0 R (page.136) 4721 0 R (page.137) 4726 0 R (page.138) 4733 0 R (page.139) 4738 0 R (page.14) 3475 0 R (page.140) 4743 0 R (page.141) 4749 0 R (page.142) 4755 0 R (page.143) 4768 0 R (page.144) 4776 0 R (page.145) 4783 0 R (page.146) 4790 0 R (page.147) 4799 0 R (page.148) 4805 0 R (page.149) 4814 0 R (page.15) 3527 0 R (page.150) 4819 0 R (page.151) 4825 0 R (page.152) 4834 0 R (page.153) 4839 0 R (page.154) 4845 0 R (page.155) 4859 0 R (page.156) 4865 0 R (page.157) 4871 0 R (page.158) 4877 0 R (page.159) 4882 0 R (page.16) 3573 0 R (page.160) 4887 0 R (page.161) 4895 0 R (page.162) 4901 0 R (page.163) 4906 0 R (page.164) 4913 0 R (page.165) 4919 0 R (page.166) 4924 0 R (page.167) 4932 0 R (page.168) 4938 0 R (page.169) 4943 0 R (page.17) 3626 0 R (page.170) 4949 0 R (page.171) 4955 0 R (page.172) 4965 0 R (page.173) 4969 0 R (page.174) 4975 0 R (page.175) 4980 0 R (page.176) 4986 0 R (page.177) 4991 0 R (page.178) 4997 0 R (page.179) 5002 0 R (page.18) 3678 0 R (page.180) 5008 0 R (page.181) 5013 0 R (page.182) 5020 0 R (page.183) 5041 0 R (page.184) 5046 0 R (page.185) 5050 0 R (page.186) 5056 0 R (page.187) 5061 0 R (page.188) 5066 0 R (page.189) 5070 0 R (page.19) 3729 0 R (page.190) 5080 0 R (page.191) 5090 0 R (page.192) 5096 0 R (page.193) 5102 0 R (page.194) 5112 0 R (page.195) 5122 0 R (page.196) 5133 0 R (page.197) 5138 0 R (page.198) 5145 0 R (page.199) 5151 0 R (page.2) 2873 0 R (page.20) 3774 0 R (page.200) 5159 0 R (page.201) 5166 0 R (page.202) 5178 0 R (page.203) 5188 0 R (page.204) 5197 0 R (page.205) 5202 0 R (page.206) 5212 0 R (page.207) 5220 0 R (page.208) 5225 0 R (page.209) 5233 0 R (page.21) 3822 0 R (page.210) 5243 0 R (page.211) 5253 0 R (page.212) 5263 0 R (page.213) 5274 0 R (page.214) 5279 0 R (page.215) 5284 0 R (page.216) 5292 0 R (page.217) 5297 0 R (page.218) 5304 0 R (page.219) 5311 0 R (page.22) 3857 0 R (page.220) 5323 0 R (page.221) 5335 0 R (page.222) 5343 0 R (page.223) 5351 0 R (page.224) 5361 0 R (page.225) 5368 0 R (page.226) 5375 0 R (page.227) 5380 0 R (page.228) 5387 0 R (page.229) 5392 0 R (page.23) 3861 0 R (page.230) 5402 0 R (page.231) 5407 0 R (page.232) 5412 0 R (page.233) 5422 0 R (page.234) 5432 0 R (page.235) 5438 0 R (page.236) 5452 0 R (page.237) 5458 0 R (page.238) 5463 0 R (page.239) 5471 0 R (page.24) 3868 0 R (page.240) 5477 0 R (page.241) 5484 0 R (page.242) 5491 0 R (page.243) 5498 0 R (page.244) 5505 0 R (page.245) 5513 0 R (page.246) 5520 0 R (page.247) 5534 0 R (page.248) 5552 0 R (page.249) 5566 0 R (page.25) 3874 0 R (page.250) 5580 0 R (page.251) 5607 0 R (page.252) 5617 0 R (page.253) 5626 0 R (page.254) 5633 0 R (page.255) 5639 0 R (page.256) 5646 0 R (page.257) 5656 0 R (page.258) 5662 0 R (page.259) 5667 0 R (page.26) 3885 0 R (page.260) 5672 0 R (page.261) 5676 0 R (page.262) 5680 0 R (page.263) 5684 0 R (page.264) 5688 0 R (page.265) 5693 0 R (page.266) 5698 0 R (page.267) 5718 0 R (page.268) 5723 0 R (page.269) 5731 0 R (page.27) 3891 0 R (page.270) 5739 0 R (page.271) 5747 0 R (page.272) 5756 0 R (page.273) 5764 0 R (page.274) 5772 0 R (page.275) 5779 0 R (page.276) 5787 0 R (page.277) 5793 0 R (page.278) 5805 0 R (page.279) 5817 0 R (page.28) 3902 0 R (page.280) 5824 0 R (page.281) 5831 0 R (page.282) 5838 0 R (page.283) 5847 0 R (page.284) 5856 0 R (page.285) 5862 0 R (page.286) 5872 0 R (page.287) 5879 0 R (page.288) 5883 0 R (page.289) 5891 0 R (page.29) 3915 0 R (page.290) 5901 0 R (page.291) 5907 0 R (page.292) 5911 0 R (page.293) 5917 0 R (page.294) 5929 0 R (page.295) 5936 0 R (page.296) 5943 0 R (page.297) 5947 0 R (page.298) 5957 0 R (page.299) 5963 0 R (page.3) 2887 0 R (page.30) 3921 0 R (page.300) 5970 0 R (page.301) 5977 0 R (page.302) 5987 0 R (page.303) 6001 0 R (page.304) 6010 0 R (page.305) 6018 0 R (page.306) 6025 0 R (page.307) 6032 0 R (page.308) 6043 0 R (page.309) 6059 0 R (page.31) 3926 0 R (page.310) 6063 0 R (page.311) 6085 0 R (page.312) 6099 0 R (page.313) 6107 0 R (page.314) 6116 0 R (page.315) 6124 0 R (page.316) 6133 0 R (page.317) 6137 0 R (page.318) 6145 0 R (page.319) 6151 0 R (page.32) 3932 0 R (page.320) 6156 0 R (page.321) 6162 0 R (page.322) 6168 0 R (page.323) 6174 0 R (page.324) 6178 0 R (page.325) 6182 0 R (page.326) 6190 0 R (page.327) 6194 0 R (page.328) 6202 0 R (page.329) 6209 0 R (page.33) 3936 0 R (page.330) 6218 0 R (page.331) 6226 0 R (page.332) 6231 0 R (page.333) 6237 0 R (page.334) 6243 0 R (page.335) 6250 0 R (page.336) 6255 0 R (page.337) 6261 0 R (page.338) 6266 0 R (page.339) 6273 0 R (page.34) 3943 0 R (page.340) 6281 0 R (page.341) 6285 0 R (page.342) 6293 0 R (page.343) 6301 0 R (page.344) 6308 0 R (page.345) 6313 0 R (page.346) 6317 0 R (page.347) 6326 0 R (page.348) 6332 0 R (page.349) 6338 0 R (page.35) 3951 0 R (page.350) 6346 0 R (page.351) 6374 0 R (page.352) 6381 0 R (page.353) 6385 0 R (page.354) 6391 0 R (page.355) 6401 0 R (page.356) 6410 0 R (page.357) 6419 0 R (page.358) 6423 0 R (page.359) 6430 0 R (page.36) 3961 0 R (page.360) 6438 0 R (page.361) 6444 0 R (page.362) 6461 0 R (page.363) 6470 0 R (page.364) 6478 0 R (page.365) 6489 0 R (page.366) 6496 0 R (page.367) 6506 0 R (page.368) 6514 0 R (page.369) 6518 0 R (page.37) 3979 0 R (page.370) 6537 0 R (page.371) 6550 0 R (page.372) 6557 0 R (page.373) 6563 0 R (page.374) 6570 0 R (page.375) 6578 0 R (page.376) 6583 0 R (page.377) 6591 0 R (page.378) 6604 0 R (page.379) 6616 0 R (page.38) 3989 0 R (page.380) 6627 0 R (page.381) 6636 0 R (page.382) 6643 0 R (page.383) 6652 0 R (page.384) 6660 0 R (page.385) 6665 0 R (page.39) 3998 0 R (page.4) 2965 0 R (page.40) 4004 0 R (page.41) 4012 0 R (page.42) 4017 0 R (page.43) 4024 0 R (page.44) 4032 0 R (page.45) 4037 0 R (page.46) 4045 0 R (page.47) 4053 0 R (page.48) 4057 0 R (page.49) 4066 0 R (page.5) 3040 0 R (page.50) 4073 0 R (page.51) 4085 0 R (page.52) 4093 0 R (page.53) 4100 0 R (page.54) 4107 0 R (page.55) 4113 0 R (page.56) 4122 0 R (page.57) 4129 0 R (page.58) 4137 0 R (page.59) 4142 0 R (page.6) 3070 0 R (page.60) 4148 0 R (page.61) 4154 0 R (page.62) 4167 0 R (page.63) 4179 0 R (page.64) 4191 0 R (page.65) 4199 0 R (page.66) 4207 0 R (page.67) 4219 0 R (page.68) 4228 0 R (page.69) 4232 0 R (page.7) 3109 0 R (page.70) 4238 0 R (page.71) 4250 0 R (page.72) 4255 0 R (page.73) 4260 0 R (page.74) 4265 0 R (page.75) 4271 0 R (page.76) 4276 0 R (page.77) 4283 0 R (page.78) 4295 0 R (page.79) 4300 0 R (page.8) 3162 0 R (page.80) 4306 0 R (page.81) 4312 0 R (page.82) 4324 0 R (page.83) 4331 0 R (page.84) 4336 0 R (page.85) 4343 0 R (page.86) 4350 0 R (page.87) 4356 0 R (page.88) 4362 0 R (page.89) 4367 0 R (page.9) 3212 0 R (page.90) 4375 0 R (page.91) 4386 0 R (page.92) 4394 0 R (page.93) 4399 0 R (page.94) 4404 0 R (page.95) 4409 0 R (page.96) 4416 0 R (page.97) 4423 0 R (page.98) 4431 0 R (page.99) 4440 0 R (pam) 3027 0 R (part.1) 6 0 R (part.2) 98 0 R (part.3) 454 0 R (part.4) 2418 0 R (part.5) 2534 0 R (part.6) 2610 0 R (passdb) 2957 0 R (printing) 3020 0 R (problems) 3036 0 R (samba-bdc) 2952 0 R (samba-pdc) 2951 0 R (section*.2) 5874 0 R (section*.3) 5884 0 R (section*.4) 5892 0 R (section*.5) 5895 0 R (section*.6) 5902 0 R (section.1.1) 14 0 R (section.1.2) 18 0 R (section.1.3) 22 0 R (section.1.4) 26 0 R (section.1.5) 30 0 R (section.1.6) 34 0 R (section.10.1) 462 0 R (section.10.2) 466 0 R (section.10.3) 470 0 R (section.10.4) 486 0 R (section.10.5) 522 0 R (section.10.6) 538 0 R (section.10.7) 550 0 R (section.10.8) 570 0 R (section.11.1) 586 0 R (section.11.2) 590 0 R (section.11.3) 610 0 R (section.11.4) 622 0 R (section.11.5) 706 0 R (section.12.1) 726 0 R (section.12.2) 730 0 R (section.12.3) 738 0 R (section.12.4) 750 0 R (section.13.1) 766 0 R (section.13.2) 770 0 R (section.13.3) 786 0 R (section.13.4) 802 0 R (section.13.5) 818 0 R (section.13.6) 858 0 R (section.14.1) 874 0 R (section.14.2) 878 0 R (section.14.3) 922 0 R (section.14.4) 938 0 R (section.14.5) 950 0 R (section.14.6) 954 0 R (section.14.7) 962 0 R (section.15.1) 970 0 R (section.15.2) 974 0 R (section.15.3) 978 0 R (section.15.4) 1006 0 R (section.15.5) 1010 0 R (section.16.1) 1026 0 R (section.16.2) 1030 0 R (section.16.3) 1034 0 R (section.16.4) 1046 0 R (section.16.5) 1058 0 R (section.17.1) 1070 0 R (section.17.2) 1074 0 R (section.18.1) 1082 0 R (section.18.10) 1278 0 R (section.18.11) 1298 0 R (section.18.12) 1302 0 R (section.18.13) 1306 0 R (section.18.14) 1310 0 R (section.18.15) 1314 0 R (section.18.2) 1086 0 R (section.18.3) 1110 0 R (section.18.4) 1122 0 R (section.18.5) 1126 0 R (section.18.6) 1154 0 R (section.18.7) 1178 0 R (section.18.8) 1226 0 R (section.18.9) 1246 0 R (section.19.1) 1330 0 R (section.19.10) 1558 0 R (section.19.11) 1626 0 R (section.19.12) 1714 0 R (section.19.13) 1734 0 R (section.19.14) 1778 0 R (section.19.15) 1810 0 R (section.19.16) 1814 0 R (section.19.17) 1830 0 R (section.19.18) 1834 0 R (section.19.19) 1850 0 R (section.19.2) 1342 0 R (section.19.3) 1358 0 R (section.19.4) 1382 0 R (section.19.5) 1418 0 R (section.19.6) 1498 0 R (section.19.7) 1514 0 R (section.19.8) 1526 0 R (section.19.9) 1538 0 R (section.2.1) 42 0 R (section.2.2) 46 0 R (section.2.3) 62 0 R (section.2.4) 66 0 R (section.2.5) 70 0 R (section.2.6) 74 0 R (section.2.7) 78 0 R (section.20.1) 1874 0 R (section.20.2) 1878 0 R (section.20.3) 1882 0 R (section.20.4) 1906 0 R (section.20.5) 1918 0 R (section.21.1) 1926 0 R (section.21.2) 1930 0 R (section.21.3) 1934 0 R (section.21.4) 1942 0 R (section.21.5) 1970 0 R (section.21.6) 2018 0 R (section.21.7) 2022 0 R (section.22.1) 2030 0 R (section.22.2) 2034 0 R (section.22.3) 2038 0 R (section.22.4) 2046 0 R (section.22.5) 2054 0 R (section.23.1) 2062 0 R (section.23.2) 2066 0 R (section.23.3) 2090 0 R (section.23.4) 2106 0 R (section.23.5) 2110 0 R (section.24.1) 2122 0 R (section.24.2) 2126 0 R (section.24.3) 2190 0 R (section.24.4) 2194 0 R (section.24.5) 2198 0 R (section.24.6) 2218 0 R (section.25.1) 2238 0 R (section.25.2) 2242 0 R (section.25.3) 2294 0 R (section.26.1) 2306 0 R (section.26.2) 2310 0 R (section.26.3) 2314 0 R (section.26.4) 2334 0 R (section.26.5) 2358 0 R (section.27.1) 2378 0 R (section.27.2) 2382 0 R (section.27.3) 2386 0 R (section.27.4) 2390 0 R (section.27.5) 2394 0 R (section.28.1) 2402 0 R (section.28.2) 2406 0 R (section.29.1) 2414 0 R (section.3.1) 94 0 R (section.30.1) 2426 0 R (section.30.2) 2430 0 R (section.30.3) 2434 0 R (section.31.1) 2442 0 R (section.31.2) 2474 0 R (section.32.1) 2490 0 R (section.33.1) 2542 0 R (section.33.2) 2546 0 R (section.33.3) 2550 0 R (section.33.4) 2554 0 R (section.34.1) 2562 0 R (section.34.2) 2566 0 R (section.34.3) 2570 0 R (section.34.4) 2574 0 R (section.34.5) 2578 0 R (section.35.1) 2586 0 R (section.35.2) 2590 0 R (section.35.3) 2594 0 R (section.35.4) 2598 0 R (section.35.5) 2602 0 R (section.35.6) 2606 0 R (section.36.1) 2618 0 R (section.36.2) 2638 0 R (section.36.3) 2642 0 R (section.36.4) 2646 0 R (section.36.5) 2662 0 R (section.36.6) 2674 0 R (section.37.1) 2682 0 R (section.37.2) 2686 0 R (section.37.3) 2690 0 R (section.37.4) 2694 0 R (section.37.5) 2698 0 R (section.37.6) 2706 0 R (section.38.1) 2722 0 R (section.38.2) 2726 0 R (section.38.3) 2742 0 R (section.38.4) 2770 0 R (section.38.5) 2778 0 R (section.38.6) 2782 0 R (section.39.1) 2790 0 R (section.39.10) 2826 0 R (section.39.11) 2830 0 R (section.39.2) 2794 0 R (section.39.3) 2798 0 R (section.39.4) 2802 0 R (section.39.5) 2806 0 R (section.39.6) 2810 0 R (section.39.7) 2814 0 R (section.39.8) 2818 0 R (section.39.9) 2822 0 R (section.4.1) 106 0 R (section.4.2) 110 0 R (section.4.3) 114 0 R (section.4.4) 158 0 R (section.4.5) 162 0 R (section.40.1) 2838 0 R (section.41.1) 2846 0 R (section.41.2) 2850 0 R (section.41.3) 2854 0 R (section.5.1) 186 0 R (section.5.2) 190 0 R (section.5.3) 202 0 R (section.5.4) 206 0 R (section.5.5) 210 0 R (section.5.6) 234 0 R (section.6.1) 266 0 R (section.6.2) 270 0 R (section.6.3) 294 0 R (section.6.4) 302 0 R (section.7.1) 326 0 R (section.7.2) 330 0 R (section.7.3) 362 0 R (section.7.4) 374 0 R (section.7.5) 406 0 R (section.8.1) 422 0 R (section.8.2) 426 0 R (section.8.3) 430 0 R (section.8.4) 442 0 R (section.9.1) 450 0 R (securing-samba) 2961 0 R (speed) 3064 0 R (subfigure.19.1.1) 5168 0 R (subfigure.19.10.1) 5741 0 R (subfigure.19.11.1) 5749 0 R (subfigure.19.12.1) 5758 0 R (subfigure.19.13.1) 5766 0 R (subfigure.19.14.1) 5774 0 R (subfigure.19.15.1) 5781 0 R (subfigure.19.2.1) 5181 0 R (subfigure.19.3.1) 5191 0 R (subfigure.19.4.1) 5235 0 R (subfigure.19.5.1) 5245 0 R (subfigure.19.6.1) 5255 0 R (subfigure.19.7.1) 5265 0 R (subfigure.19.8.1) 5725 0 R (subfigure.19.9.1) 5733 0 R (subsection.10.3.1) 474 0 R (subsection.10.3.2) 478 0 R (subsection.10.3.3) 482 0 R (subsection.10.4.1) 490 0 R (subsection.10.4.2) 494 0 R (subsection.10.4.3) 498 0 R (subsection.10.4.4) 502 0 R (subsection.10.4.5) 506 0 R (subsection.10.4.6) 510 0 R (subsection.10.4.7) 514 0 R (subsection.10.4.8) 518 0 R (subsection.10.5.1) 526 0 R (subsection.10.5.2) 530 0 R (subsection.10.5.3) 534 0 R (subsection.10.6.1) 542 0 R (subsection.10.6.2) 546 0 R (subsection.10.7.1) 554 0 R (subsection.10.7.2) 558 0 R (subsection.10.7.3) 562 0 R (subsection.10.8.1) 574 0 R (subsection.10.8.2) 578 0 R (subsection.11.2.1) 594 0 R (subsection.11.2.2) 606 0 R (subsection.11.3.1) 614 0 R (subsection.11.3.2) 618 0 R (subsection.11.4.1) 626 0 R (subsection.11.4.2) 630 0 R (subsection.11.4.3) 634 0 R (subsection.11.4.4) 638 0 R (subsection.11.4.5) 682 0 R (subsection.11.4.6) 702 0 R (subsection.11.5.1) 710 0 R (subsection.11.5.2) 714 0 R (subsection.11.5.3) 718 0 R (subsection.12.2.1) 734 0 R (subsection.12.3.1) 742 0 R (subsection.12.3.2) 746 0 R (subsection.12.4.1) 754 0 R (subsection.12.4.2) 758 0 R (subsection.13.2.1) 774 0 R (subsection.13.2.2) 778 0 R (subsection.13.2.3) 782 0 R (subsection.13.3.1) 790 0 R (subsection.13.3.2) 794 0 R (subsection.13.3.3) 798 0 R (subsection.13.4.1) 806 0 R (subsection.13.5.1) 822 0 R (subsection.13.5.2) 826 0 R (subsection.13.5.3) 830 0 R (subsection.13.5.4) 834 0 R (subsection.13.5.5) 846 0 R (subsection.13.5.6) 850 0 R (subsection.13.5.7) 854 0 R (subsection.13.6.1) 862 0 R (subsection.13.6.2) 866 0 R (subsection.14.2.1) 882 0 R (subsection.14.3.1) 926 0 R (subsection.14.4.1) 942 0 R (subsection.14.4.2) 946 0 R (subsection.14.6.1) 958 0 R (subsection.15.3.1) 982 0 R (subsection.15.3.2) 986 0 R (subsection.15.3.3) 990 0 R (subsection.15.3.4) 994 0 R (subsection.15.3.5) 998 0 R (subsection.15.3.6) 1002 0 R (subsection.15.5.1) 1014 0 R (subsection.15.5.2) 1018 0 R (subsection.16.3.1) 1038 0 R (subsection.16.3.2) 1042 0 R (subsection.16.4.1) 1050 0 R (subsection.16.4.2) 1054 0 R (subsection.16.5.1) 1062 0 R (subsection.18.10.1) 1282 0 R (subsection.18.10.2) 1286 0 R (subsection.18.10.3) 1290 0 R (subsection.18.10.4) 1294 0 R (subsection.18.15.1) 1318 0 R (subsection.18.15.2) 1322 0 R (subsection.18.2.1) 1090 0 R (subsection.18.2.2) 1094 0 R (subsection.18.2.3) 1098 0 R (subsection.18.2.4) 1102 0 R (subsection.18.2.5) 1106 0 R (subsection.18.3.1) 1114 0 R (subsection.18.3.2) 1118 0 R (subsection.18.5.1) 1130 0 R (subsection.18.5.2) 1134 0 R (subsection.18.5.3) 1138 0 R (subsection.18.5.4) 1142 0 R (subsection.18.5.5) 1146 0 R (subsection.18.5.6) 1150 0 R (subsection.18.6.1) 1158 0 R (subsection.18.6.2) 1162 0 R (subsection.18.6.3) 1166 0 R (subsection.18.6.4) 1170 0 R (subsection.18.6.5) 1174 0 R (subsection.18.7.1) 1182 0 R (subsection.18.7.2) 1186 0 R (subsection.18.8.1) 1230 0 R (subsection.18.8.2) 1234 0 R (subsection.18.8.3) 1238 0 R (subsection.18.8.4) 1242 0 R (subsection.18.9.1) 1250 0 R (subsection.18.9.2) 1254 0 R (subsection.18.9.3) 1258 0 R (subsection.18.9.4) 1262 0 R (subsection.18.9.5) 1266 0 R (subsection.18.9.6) 1270 0 R (subsection.18.9.7) 1274 0 R (subsection.19.1.1) 1334 0 R (subsection.19.1.2) 1338 0 R (subsection.19.10.1) 1562 0 R (subsection.19.10.10) 1598 0 R (subsection.19.10.11) 1602 0 R (subsection.19.10.12) 1606 0 R (subsection.19.10.13) 1610 0 R (subsection.19.10.14) 1614 0 R (subsection.19.10.15) 1618 0 R (subsection.19.10.16) 1622 0 R (subsection.19.10.2) 1566 0 R (subsection.19.10.3) 1570 0 R (subsection.19.10.4) 1574 0 R (subsection.19.10.5) 1578 0 R (subsection.19.10.6) 1582 0 R (subsection.19.10.7) 1586 0 R (subsection.19.10.8) 1590 0 R (subsection.19.10.9) 1594 0 R (subsection.19.11.1) 1630 0 R (subsection.19.11.2) 1634 0 R (subsection.19.11.3) 1638 0 R (subsection.19.11.4) 1642 0 R (subsection.19.11.5) 1646 0 R (subsection.19.11.6) 1710 0 R (subsection.19.12.1) 1718 0 R (subsection.19.12.2) 1722 0 R (subsection.19.12.3) 1726 0 R (subsection.19.12.4) 1730 0 R (subsection.19.13.1) 1738 0 R (subsection.19.13.2) 1774 0 R (subsection.19.14.1) 1782 0 R (subsection.19.14.2) 1786 0 R (subsection.19.14.3) 1790 0 R (subsection.19.14.4) 1794 0 R (subsection.19.14.5) 1798 0 R (subsection.19.14.6) 1802 0 R (subsection.19.14.7) 1806 0 R (subsection.19.16.1) 1818 0 R (subsection.19.16.2) 1822 0 R (subsection.19.16.3) 1826 0 R (subsection.19.18.1) 1838 0 R (subsection.19.18.2) 1842 0 R (subsection.19.18.3) 1846 0 R (subsection.19.19.1) 1854 0 R (subsection.19.19.2) 1858 0 R (subsection.19.19.3) 1862 0 R (subsection.19.19.4) 1866 0 R (subsection.19.2.1) 1346 0 R (subsection.19.2.2) 1350 0 R (subsection.19.2.3) 1354 0 R (subsection.19.3.1) 1362 0 R (subsection.19.3.2) 1366 0 R (subsection.19.3.3) 1370 0 R (subsection.19.3.4) 1374 0 R (subsection.19.3.5) 1378 0 R (subsection.19.4.1) 1386 0 R (subsection.19.4.2) 1390 0 R (subsection.19.4.3) 1394 0 R (subsection.19.4.4) 1398 0 R (subsection.19.4.5) 1402 0 R (subsection.19.4.6) 1406 0 R (subsection.19.4.7) 1410 0 R (subsection.19.4.8) 1414 0 R (subsection.19.5.1) 1422 0 R (subsection.19.5.10) 1458 0 R (subsection.19.5.11) 1462 0 R (subsection.19.5.12) 1466 0 R (subsection.19.5.13) 1470 0 R (subsection.19.5.14) 1474 0 R (subsection.19.5.15) 1478 0 R (subsection.19.5.16) 1482 0 R (subsection.19.5.17) 1486 0 R (subsection.19.5.18) 1490 0 R (subsection.19.5.19) 1494 0 R (subsection.19.5.2) 1426 0 R (subsection.19.5.3) 1430 0 R (subsection.19.5.4) 1434 0 R (subsection.19.5.5) 1438 0 R (subsection.19.5.6) 1442 0 R (subsection.19.5.7) 1446 0 R (subsection.19.5.8) 1450 0 R (subsection.19.5.9) 1454 0 R (subsection.19.6.1) 1502 0 R (subsection.19.6.2) 1506 0 R (subsection.19.6.3) 1510 0 R (subsection.19.7.1) 1518 0 R (subsection.19.7.2) 1522 0 R (subsection.19.8.1) 1530 0 R (subsection.19.8.2) 1534 0 R (subsection.19.9.1) 1542 0 R (subsection.19.9.2) 1546 0 R (subsection.19.9.3) 1550 0 R (subsection.19.9.4) 1554 0 R (subsection.2.2.1) 50 0 R (subsection.2.2.2) 58 0 R (subsection.2.7.1) 82 0 R (subsection.2.7.2) 86 0 R (subsection.20.3.1) 1886 0 R (subsection.20.3.2) 1890 0 R (subsection.20.3.3) 1894 0 R (subsection.20.3.4) 1898 0 R (subsection.20.3.5) 1902 0 R (subsection.20.4.1) 1910 0 R (subsection.20.4.2) 1914 0 R (subsection.21.3.1) 1938 0 R (subsection.21.4.1) 1946 0 R (subsection.21.4.2) 1950 0 R (subsection.21.4.3) 1954 0 R (subsection.21.4.4) 1958 0 R (subsection.21.4.5) 1962 0 R (subsection.21.4.6) 1966 0 R (subsection.21.5.1) 1974 0 R (subsection.21.5.2) 1978 0 R (subsection.21.5.3) 1982 0 R (subsection.22.3.1) 2042 0 R (subsection.22.4.1) 2050 0 R (subsection.23.2.1) 2070 0 R (subsection.23.2.2) 2074 0 R (subsection.23.2.3) 2082 0 R (subsection.23.3.1) 2094 0 R (subsection.23.3.2) 2098 0 R (subsection.23.3.3) 2102 0 R (subsection.23.5.1) 2114 0 R (subsection.24.2.1) 2130 0 R (subsection.24.2.2) 2150 0 R (subsection.24.2.3) 2166 0 R (subsection.24.2.4) 2170 0 R (subsection.24.5.1) 2202 0 R (subsection.24.5.2) 2210 0 R (subsection.24.5.3) 2214 0 R (subsection.24.6.1) 2222 0 R (subsection.24.6.2) 2226 0 R (subsection.24.6.3) 2230 0 R (subsection.25.2.1) 2246 0 R (subsection.25.2.2) 2254 0 R (subsection.25.2.3) 2266 0 R (subsection.25.2.4) 2270 0 R (subsection.25.2.5) 2274 0 R (subsection.25.3.1) 2298 0 R (subsection.26.3.1) 2318 0 R (subsection.26.3.2) 2322 0 R (subsection.26.3.3) 2326 0 R (subsection.26.3.4) 2330 0 R (subsection.26.4.1) 2338 0 R (subsection.26.4.2) 2342 0 R (subsection.26.4.3) 2346 0 R (subsection.26.4.4) 2350 0 R (subsection.26.4.5) 2354 0 R (subsection.26.5.1) 2362 0 R (subsection.26.5.2) 2366 0 R (subsection.26.5.3) 2370 0 R (subsection.31.1.1) 2446 0 R (subsection.31.1.2) 2470 0 R (subsection.31.2.1) 2478 0 R (subsection.31.2.2) 2482 0 R (subsection.32.1.1) 2494 0 R (subsection.32.1.10) 2530 0 R (subsection.32.1.2) 2498 0 R (subsection.32.1.3) 2502 0 R (subsection.32.1.4) 2506 0 R (subsection.32.1.5) 2510 0 R (subsection.32.1.6) 2514 0 R (subsection.32.1.7) 2518 0 R (subsection.32.1.8) 2522 0 R (subsection.32.1.9) 2526 0 R (subsection.36.1.1) 2622 0 R (subsection.36.1.2) 2626 0 R (subsection.36.4.1) 2650 0 R (subsection.36.5.1) 2666 0 R (subsection.36.5.2) 2670 0 R (subsection.37.5.1) 2702 0 R (subsection.37.6.1) 2710 0 R (subsection.37.6.2) 2714 0 R (subsection.38.2.1) 2730 0 R (subsection.38.2.2) 2734 0 R (subsection.38.2.3) 2738 0 R (subsection.38.3.1) 2746 0 R (subsection.38.3.2) 2750 0 R (subsection.38.3.3) 2754 0 R (subsection.38.3.4) 2758 0 R (subsection.38.3.5) 2762 0 R (subsection.38.3.6) 2766 0 R (subsection.38.4.1) 2774 0 R (subsection.4.3.1) 118 0 R (subsection.4.3.2) 126 0 R (subsection.4.3.3) 134 0 R (subsection.4.3.4) 142 0 R (subsection.4.3.5) 150 0 R (subsection.4.5.1) 166 0 R (subsection.4.5.2) 170 0 R (subsection.4.5.3) 174 0 R (subsection.4.5.4) 178 0 R (subsection.5.2.1) 194 0 R (subsection.5.2.2) 198 0 R (subsection.5.5.1) 214 0 R (subsection.5.5.2) 230 0 R (subsection.5.6.1) 238 0 R (subsection.5.6.2) 242 0 R (subsection.5.6.3) 246 0 R (subsection.5.6.4) 250 0 R (subsection.5.6.5) 254 0 R (subsection.5.6.6) 258 0 R (subsection.6.2.1) 274 0 R (subsection.6.2.2) 282 0 R (subsection.6.2.3) 286 0 R (subsection.6.2.4) 290 0 R (subsection.6.3.1) 298 0 R (subsection.6.4.1) 306 0 R (subsection.6.4.2) 310 0 R (subsection.6.4.3) 314 0 R (subsection.6.4.4) 318 0 R (subsection.7.2.1) 334 0 R (subsection.7.2.2) 338 0 R (subsection.7.2.3) 342 0 R (subsection.7.2.4) 346 0 R (subsection.7.3.1) 366 0 R (subsection.7.3.2) 370 0 R (subsection.7.4.1) 378 0 R (subsection.7.4.2) 382 0 R (subsection.7.4.3) 386 0 R (subsection.7.4.4) 394 0 R (subsection.7.4.5) 398 0 R (subsection.7.4.6) 402 0 R (subsection.7.5.1) 410 0 R (subsection.7.5.2) 414 0 R (subsection.8.3.1) 434 0 R (subsection.8.3.2) 438 0 R (subsubsection.10.7.3.1) 566 0 R (subsubsection.11.2.1.1) 598 0 R (subsubsection.11.2.1.2) 602 0 R (subsubsection.11.4.4.1) 642 0 R (subsubsection.11.4.4.10) 678 0 R (subsubsection.11.4.4.2) 646 0 R (subsubsection.11.4.4.3) 650 0 R (subsubsection.11.4.4.4) 654 0 R (subsubsection.11.4.4.5) 658 0 R (subsubsection.11.4.4.6) 662 0 R (subsubsection.11.4.4.7) 666 0 R (subsubsection.11.4.4.8) 670 0 R (subsubsection.11.4.4.9) 674 0 R (subsubsection.11.4.5.1) 686 0 R (subsubsection.11.4.5.2) 690 0 R (subsubsection.11.4.5.3) 694 0 R (subsubsection.11.4.5.4) 698 0 R (subsubsection.13.4.1.1) 810 0 R (subsubsection.13.4.1.2) 814 0 R (subsubsection.13.5.4.1) 838 0 R (subsubsection.13.5.4.2) 842 0 R (subsubsection.14.2.1.1) 886 0 R (subsubsection.14.2.1.2) 890 0 R (subsubsection.14.2.1.3) 894 0 R (subsubsection.14.2.1.4) 898 0 R (subsubsection.14.2.1.5) 902 0 R (subsubsection.14.2.1.6) 906 0 R (subsubsection.14.2.1.7) 910 0 R (subsubsection.14.2.1.8) 914 0 R (subsubsection.14.2.1.9) 918 0 R (subsubsection.14.3.1.1) 930 0 R (subsubsection.14.3.1.2) 934 0 R (subsubsection.18.7.2.1) 1190 0 R (subsubsection.18.7.2.2) 1194 0 R (subsubsection.18.7.2.3) 1198 0 R (subsubsection.18.7.2.4) 1202 0 R (subsubsection.18.7.2.5) 1206 0 R (subsubsection.18.7.2.6) 1210 0 R (subsubsection.18.7.2.7) 1214 0 R (subsubsection.18.7.2.8) 1218 0 R (subsubsection.18.7.2.9) 1222 0 R (subsubsection.19.11.5.1) 1650 0 R (subsubsection.19.11.5.10) 1686 0 R (subsubsection.19.11.5.11) 1690 0 R (subsubsection.19.11.5.12) 1694 0 R (subsubsection.19.11.5.13) 1698 0 R (subsubsection.19.11.5.14) 1702 0 R (subsubsection.19.11.5.15) 1706 0 R (subsubsection.19.11.5.2) 1654 0 R (subsubsection.19.11.5.3) 1658 0 R (subsubsection.19.11.5.4) 1662 0 R (subsubsection.19.11.5.5) 1666 0 R (subsubsection.19.11.5.6) 1670 0 R (subsubsection.19.11.5.7) 1674 0 R (subsubsection.19.11.5.8) 1678 0 R (subsubsection.19.11.5.9) 1682 0 R (subsubsection.19.13.1.1) 1742 0 R (subsubsection.19.13.1.2) 1746 0 R (subsubsection.19.13.1.3) 1750 0 R (subsubsection.19.13.1.4) 1754 0 R (subsubsection.19.13.1.5) 1758 0 R (subsubsection.19.13.1.6) 1762 0 R (subsubsection.19.13.1.7) 1766 0 R (subsubsection.19.13.1.8) 1770 0 R (subsubsection.2.2.1.1) 54 0 R (subsubsection.21.5.3.1) 1986 0 R (subsubsection.21.5.3.2) 1990 0 R (subsubsection.21.5.3.3) 1994 0 R (subsubsection.21.5.3.4) 1998 0 R (subsubsection.21.5.3.5) 2002 0 R (subsubsection.21.5.3.6) 2006 0 R (subsubsection.21.5.3.7) 2010 0 R (subsubsection.21.5.3.8) 2014 0 R (subsubsection.23.2.2.1) 2078 0 R (subsubsection.23.2.3.1) 2086 0 R (subsubsection.24.2.1.1) 2134 0 R (subsubsection.24.2.1.2) 2138 0 R (subsubsection.24.2.1.3) 2142 0 R (subsubsection.24.2.1.4) 2146 0 R (subsubsection.24.2.2.1) 2154 0 R (subsubsection.24.2.2.2) 2158 0 R (subsubsection.24.2.2.3) 2162 0 R (subsubsection.24.2.4.1) 2174 0 R (subsubsection.24.2.4.2) 2178 0 R (subsubsection.24.2.4.3) 2182 0 R (subsubsection.24.2.4.4) 2186 0 R (subsubsection.24.5.1.1) 2206 0 R (subsubsection.25.2.1.1) 2250 0 R (subsubsection.25.2.2.1) 2258 0 R (subsubsection.25.2.2.2) 2262 0 R (subsubsection.25.2.5.1) 2278 0 R (subsubsection.25.2.5.2) 2282 0 R (subsubsection.25.2.5.3) 2286 0 R (subsubsection.25.2.5.4) 2290 0 R (subsubsection.31.1.1.1) 2450 0 R (subsubsection.31.1.1.2) 2454 0 R (subsubsection.31.1.1.3) 2458 0 R (subsubsection.31.1.1.4) 2462 0 R (subsubsection.31.1.1.5) 2466 0 R (subsubsection.36.1.2.1) 2630 0 R (subsubsection.36.1.2.2) 2634 0 R (subsubsection.36.4.1.1) 2654 0 R (subsubsection.36.4.1.2) 2658 0 R (subsubsection.4.3.1.1) 122 0 R (subsubsection.4.3.2.1) 130 0 R (subsubsection.4.3.3.1) 138 0 R (subsubsection.4.3.4.1) 146 0 R (subsubsection.4.3.5.1) 154 0 R (subsubsection.5.5.1.1) 218 0 R (subsubsection.5.5.1.2) 222 0 R (subsubsection.5.5.1.3) 226 0 R (subsubsection.6.2.1.1) 278 0 R (subsubsection.7.2.4.1) 350 0 R (subsubsection.7.2.4.2) 354 0 R (subsubsection.7.2.4.3) 358 0 R (subsubsection.7.4.3.1) 390 0 R (table.10.1) 4369 0 R (table.10.2) 4371 0 R (table.10.3) 4377 0 R (table.10.4) 4379 0 R (table.11.1) 4524 0 R (table.11.2) 4531 0 R (table.11.3) 4537 0 R (table.13.1) 4589 0 R (table.13.2) 4609 0 R (table.13.3) 4618 0 R (table.13.4) 4625 0 R (table.20.1) 5798 0 R (table.24.1) 6126 0 R (table.24.2) 6128 0 R (table.24.3) 6139 0 R (table.25.1) 6205 0 R (table.31.1) 6369 0 R (table.31.2) 6376 0 R (table.7.1) 4183 0 R (troubleshooting) 6424 0 R (type) 3937 0 R (unicode) 3029 0 R (upgrading-to-3.0) 3032 0 R (winbind) 3023 0 R (winbind-solaris9) 5887 0 R]
+7256 0 obj <<
+/Names [(AccessControls) 3062 0 R (AdvancedNetworkManagement) 3127 0 R (Appendixes) 7012 0 R (Backup) 3133 0 R (CUPS-printing) 3097 0 R (ClientConfig) 3058 0 R (DMB) 4264 0 R (DNSDHCP) 3175 0 R (Doc-Start) 2962 0 R (FastStart) 3023 0 R (Further-Resources) 3183 0 R (InterdomainTrusts) 3094 0 R (IntroSMB) 3021 0 R (Item.1) 4097 0 R (Item.10) 4256 0 R (Item.100) 5865 0 R (Item.101) 5866 0 R (Item.102) 5867 0 R (Item.103) 5872 0 R (Item.104) 5873 0 R (Item.105) 5874 0 R (Item.106) 5879 0 R (Item.107) 5880 0 R (Item.108) 5885 0 R (Item.109) 5886 0 R (Item.11) 4257 0 R (Item.110) 5887 0 R (Item.111) 5888 0 R (Item.112) 6087 0 R (Item.113) 6088 0 R (Item.114) 6089 0 R (Item.115) 6090 0 R (Item.116) 6091 0 R (Item.117) 6092 0 R (Item.118) 6093 0 R (Item.119) 6094 0 R (Item.12) 4368 0 R (Item.120) 6095 0 R (Item.121) 6096 0 R (Item.122) 6097 0 R (Item.123) 6098 0 R (Item.124) 6099 0 R (Item.125) 6100 0 R (Item.126) 6101 0 R (Item.127) 6353 0 R (Item.128) 6354 0 R (Item.129) 6355 0 R (Item.13) 4369 0 R (Item.130) 6356 0 R (Item.131) 6370 0 R (Item.132) 6371 0 R (Item.133) 6372 0 R (Item.134) 6373 0 R (Item.135) 6374 0 R (Item.136) 6375 0 R (Item.137) 6380 0 R (Item.138) 6381 0 R (Item.139) 6382 0 R (Item.14) 4370 0 R (Item.140) 6411 0 R (Item.141) 6412 0 R (Item.142) 6417 0 R (Item.143) 6418 0 R (Item.144) 6419 0 R (Item.145) 6420 0 R (Item.146) 6421 0 R (Item.147) 6428 0 R (Item.148) 6429 0 R (Item.149) 6430 0 R (Item.15) 4371 0 R (Item.150) 6431 0 R (Item.151) 6432 0 R (Item.152) 6437 0 R (Item.153) 6438 0 R (Item.154) 6439 0 R (Item.155) 6440 0 R (Item.156) 6441 0 R (Item.157) 6442 0 R (Item.158) 6443 0 R (Item.159) 6444 0 R (Item.16) 4372 0 R (Item.160) 6445 0 R (Item.161) 6446 0 R (Item.162) 6451 0 R (Item.163) 6452 0 R (Item.164) 6453 0 R (Item.165) 6454 0 R (Item.166) 6455 0 R (Item.167) 6456 0 R (Item.168) 6457 0 R (Item.169) 6458 0 R (Item.17) 4373 0 R (Item.170) 6459 0 R (Item.171) 6460 0 R (Item.172) 6461 0 R (Item.173) 6462 0 R (Item.174) 6471 0 R (Item.175) 6472 0 R (Item.176) 6473 0 R (Item.177) 6474 0 R (Item.178) 6475 0 R (Item.179) 6476 0 R (Item.18) 4457 0 R (Item.180) 6477 0 R (Item.181) 6499 0 R (Item.182) 6500 0 R (Item.183) 6501 0 R (Item.184) 6502 0 R (Item.185) 6732 0 R (Item.186) 6733 0 R (Item.187) 6734 0 R (Item.188) 6735 0 R (Item.189) 6736 0 R (Item.19) 4458 0 R (Item.190) 6737 0 R (Item.191) 6738 0 R (Item.192) 6739 0 R (Item.193) 6740 0 R (Item.194) 6741 0 R (Item.195) 6742 0 R (Item.196) 6743 0 R (Item.197) 6748 0 R (Item.198) 6775 0 R (Item.199) 6776 0 R (Item.2) 4098 0 R (Item.20) 4460 0 R (Item.200) 6784 0 R (Item.201) 6785 0 R (Item.202) 6826 0 R (Item.203) 6827 0 R (Item.204) 6832 0 R (Item.205) 6833 0 R (Item.206) 6834 0 R (Item.207) 6835 0 R (Item.208) 6836 0 R (Item.209) 6837 0 R (Item.21) 4461 0 R (Item.210) 6838 0 R (Item.211) 6866 0 R (Item.212) 6867 0 R (Item.213) 6872 0 R (Item.214) 6873 0 R (Item.215) 6911 0 R (Item.216) 6912 0 R (Item.217) 6917 0 R (Item.218) 6922 0 R (Item.219) 6923 0 R (Item.22) 4501 0 R (Item.220) 6924 0 R (Item.221) 6925 0 R (Item.222) 6931 0 R (Item.223) 6932 0 R (Item.224) 6933 0 R (Item.225) 6934 0 R (Item.226) 6935 0 R (Item.227) 6936 0 R (Item.228) 6937 0 R (Item.229) 6938 0 R (Item.23) 4502 0 R (Item.230) 6939 0 R (Item.231) 6940 0 R (Item.232) 6945 0 R (Item.233) 6946 0 R (Item.234) 6947 0 R (Item.235) 7028 0 R (Item.236) 7029 0 R (Item.237) 7030 0 R (Item.238) 7031 0 R (Item.239) 7032 0 R (Item.24) 4503 0 R (Item.25) 4504 0 R (Item.26) 4505 0 R (Item.27) 4506 0 R (Item.28) 4544 0 R (Item.29) 4545 0 R (Item.3) 4109 0 R (Item.30) 4546 0 R (Item.31) 4547 0 R (Item.32) 4624 0 R (Item.33) 4625 0 R (Item.34) 4626 0 R (Item.35) 4687 0 R (Item.36) 4688 0 R (Item.37) 4695 0 R (Item.38) 4808 0 R (Item.39) 4809 0 R (Item.4) 4110 0 R (Item.40) 4814 0 R (Item.41) 4901 0 R (Item.42) 4902 0 R (Item.43) 4904 0 R (Item.44) 4905 0 R (Item.45) 4906 0 R (Item.46) 4944 0 R (Item.47) 4945 0 R (Item.48) 4946 0 R (Item.49) 4951 0 R (Item.5) 4251 0 R (Item.50) 4952 0 R (Item.51) 4953 0 R (Item.52) 5160 0 R (Item.53) 5161 0 R (Item.54) 5162 0 R (Item.55) 5163 0 R (Item.56) 5164 0 R (Item.57) 5165 0 R (Item.58) 5166 0 R (Item.59) 5271 0 R (Item.6) 4252 0 R (Item.60) 5272 0 R (Item.61) 5273 0 R (Item.62) 5278 0 R (Item.63) 5345 0 R (Item.64) 5346 0 R (Item.65) 5347 0 R (Item.66) 5348 0 R (Item.67) 5349 0 R (Item.68) 5350 0 R (Item.69) 5351 0 R (Item.7) 4253 0 R (Item.70) 5352 0 R (Item.71) 5353 0 R (Item.72) 5359 0 R (Item.73) 5360 0 R (Item.74) 5361 0 R (Item.75) 5362 0 R (Item.76) 5363 0 R (Item.77) 5364 0 R (Item.78) 5415 0 R (Item.79) 5416 0 R (Item.8) 4254 0 R (Item.80) 5421 0 R (Item.81) 5773 0 R (Item.82) 5774 0 R (Item.83) 5775 0 R (Item.84) 5776 0 R (Item.85) 5794 0 R (Item.86) 5795 0 R (Item.87) 5796 0 R (Item.88) 5797 0 R (Item.89) 5798 0 R (Item.9) 4255 0 R (Item.90) 5806 0 R (Item.91) 5807 0 R (Item.92) 5808 0 R (Item.93) 5830 0 R (Item.94) 5831 0 R (Item.95) 5832 0 R (Item.96) 5833 0 R (Item.97) 5855 0 R (Item.98) 5859 0 R (Item.99) 5860 0 R (NT4Migration) 3136 0 R (NetworkBrowsing) 3059 0 R (Other-Clients) 3173 0 R (PolicyMgmt) 3128 0 R (Portability) 3172 0 R (ProfileMgmt) 3129 0 R (RefDocServer) 4449 0 R (SWAT) 3167 0 R (SambaHA) 3134 0 R (ServerType) 3024 0 R (SimplePrintServer) 4452 0 R (StandAloneServer) 3057 0 R (VFS) 3098 0 R (XMLpassdb) 4690 0 R (a_small) 6128 0 R (access1) 4867 0 R (acctmgmttools) 4675 0 R (ads-create-machine-account) 4420 0 R (ads-member) 4410 0 R (ads-test-server) 4423 0 R (ads-test-smbclient) 4422 0 R (browse-force-master) 4530 0 R (browsing1) 4601 0 R (bugreport) 3170 0 R (chapter*.1) 2988 0 R (chapter*.2) 2994 0 R (chapter*.3) 3188 0 R (chapter.1) 10 0 R (chapter.10) 470 0 R (chapter.11) 598 0 R (chapter.12) 750 0 R (chapter.13) 794 0 R (chapter.14) 906 0 R (chapter.15) 1010 0 R (chapter.16) 1066 0 R (chapter.17) 1114 0 R (chapter.18) 1126 0 R (chapter.19) 1366 0 R (chapter.2) 38 0 R (chapter.20) 1906 0 R (chapter.21) 1954 0 R (chapter.22) 2058 0 R (chapter.23) 2090 0 R (chapter.24) 2150 0 R (chapter.25) 2266 0 R (chapter.26) 2338 0 R (chapter.27) 2410 0 R (chapter.28) 2442 0 R (chapter.29) 2454 0 R (chapter.3) 94 0 R (chapter.30) 2466 0 R (chapter.31) 2530 0 R (chapter.32) 2578 0 R (chapter.33) 2630 0 R (chapter.34) 2646 0 R (chapter.35) 2690 0 R (chapter.36) 2722 0 R (chapter.37) 2782 0 R (chapter.38) 2822 0 R (chapter.39) 2890 0 R (chapter.4) 106 0 R (chapter.40) 2938 0 R (chapter.41) 2946 0 R (chapter.5) 186 0 R (chapter.6) 270 0 R (chapter.7) 330 0 R (chapter.8) 430 0 R (chapter.9) 458 0 R (compiling) 3171 0 R (cups1) 6056 0 R (cups2) 6121 0 R (diagnosis) 3168 0 R (domain-example) 4289 0 R (domain-member) 3027 0 R (domain-member-server) 4389 0 R (example.10.4.1) 4518 0 R (example.10.4.2) 4524 0 R (example.10.4.3) 4526 0 R (example.10.4.4) 4535 0 R (example.10.4.5) 4537 0 R (example.11.2.1) 4673 0 R (example.11.4.1) 4741 0 R (example.12.3.1) 4822 0 R (example.13.2.1) 4874 0 R (example.14.3.1) 5014 0 R (example.14.3.2) 5016 0 R (example.17.1.1) 5142 0 R (example.18.3.1) 5174 0 R (example.18.4.1) 5205 0 R (example.18.6.1) 5252 0 R (example.19.10.1) 5747 0 R (example.19.2.1) 5466 0 R (example.19.2.2) 5473 0 R (example.2.2.1) 4037 0 R (example.20.2.1) 6139 0 R (example.20.2.2) 6145 0 R (example.21.5.1) 6224 0 R (example.33.2.1) 6904 0 R (example.38.5.1) 7137 0 R (example.5.3.1) 4229 0 R (example.5.5.1) 4241 0 R (example.6.2.1) 4316 0 R (example.6.3.1) 4328 0 R (example.8.3.1) 4450 0 R (example.8.3.2) 4467 0 R (extbsdpr) 5199 0 R (figure.10.1) 4607 0 R (figure.11.1) 4660 0 R (figure.12.1) 4806 0 R (figure.13.1) 4873 0 R (figure.16.1) 5116 0 R (figure.19.1) 5504 0 R (figure.19.10) 5649 0 R (figure.19.11) 5661 0 R (figure.19.12) 5670 0 R (figure.19.13) 5695 0 R (figure.19.14) 5704 0 R (figure.19.15) 5716 0 R (figure.19.16) 5817 0 R (figure.19.17) 6058 0 R (figure.19.18) 6123 0 R (figure.19.19) 6130 0 R (figure.19.2) 5520 0 R (figure.19.3) 5524 0 R (figure.19.4) 5568 0 R (figure.19.5) 5572 0 R (figure.19.6) 5584 0 R (figure.19.7) 5594 0 R (figure.19.8) 5606 0 R (figure.19.9) 5614 0 R (figure.5.1) 4291 0 R (gdipost) 5495 0 R (groupmapping) 3061 0 R (id2725811) 4005 0 R (id2725870) 4010 0 R (id2726061) 4016 0 R (id2726129) 4018 0 R (id2726238) 4024 0 R (id2726322) 4026 0 R (id2791776) 4031 0 R (id2791819) 4035 0 R (id2791858) 4036 0 R (id2791881) 4038 0 R (id2791997) 4046 0 R (id2792050) 4047 0 R (id2792095) 4049 0 R (id2792153) 4057 0 R (id2792270) 4058 0 R (id2792353) 4059 0 R (id2792386) 4062 0 R (id2792399) 4067 0 R (id2792498) 4068 0 R (id2792519) 4069 0 R (id2792646) 4074 0 R (id2792836) 4084 0 R (id2792930) 4090 0 R (id2793016) 4091 0 R (id2793135) 4096 0 R (id2793227) 4099 0 R (id2793273) 4100 0 R (id2793361) 4106 0 R (id2793410) 4107 0 R (id2793440) 4108 0 R (id2793667) 4123 0 R (id2793697) 4124 0 R (id2793768) 4134 0 R (id2793958) 4142 0 R (id2794049) 4143 0 R (id2794244) 4149 0 R (id2794271) 4154 0 R (id2794312) 4155 0 R (id2794348) 4156 0 R (id2794387) 4158 0 R (id2794719) 4168 0 R (id2794934) 4180 0 R (id2794949) 4181 0 R (id2795194) 4202 0 R (id2795576) 4218 0 R (id2796064) 4234 0 R (id2796116) 4235 0 R (id2796131) 4236 0 R (id2796180) 4243 0 R (id2796186) 4242 0 R (id2796271) 4244 0 R (id2796309) 4245 0 R (id2796562) 4262 0 R (id2796709) 4269 0 R (id2796716) 4270 0 R (id2796775) 4271 0 R (id2796834) 4272 0 R (id2796918) 4277 0 R (id2796990) 4278 0 R (id2797023) 4279 0 R (id2797046) 4284 0 R (id2797206) 4299 0 R (id2797395) 4305 0 R (id2797424) 4306 0 R (id2797574) 4315 0 R (id2797606) 4317 0 R (id2797675) 4319 0 R (id2797696) 4320 0 R (id2797722) 4321 0 R (id2797767) 4326 0 R (id2797870) 4327 0 R (id2797884) 4329 0 R (id2798026) 4334 0 R (id2798040) 4335 0 R (id2798071) 4336 0 R (id2798097) 4342 0 R (id2798142) 4343 0 R (id2798349) 4348 0 R (id2798681) 4357 0 R (id2798985) 4363 0 R (id2799200) 4378 0 R (id2799272) 4379 0 R (id2799285) 4380 0 R (id2799361) 4381 0 R (id2799402) 4387 0 R (id2799483) 4391 0 R (id2799494) 4392 0 R (id2799920) 4402 0 R (id2800104) 4411 0 R (id2800232) 4412 0 R (id2800451) 4421 0 R (id2800610) 4428 0 R (id2800632) 4429 0 R (id2800675) 4430 0 R (id2800706) 4436 0 R (id2800851) 4437 0 R (id2800938) 4442 0 R (id2800976) 4443 0 R (id2801050) 4448 0 R (id2801096) 4451 0 R (id2801416) 4468 0 R (id2801573) 4462 0 R (id2801637) 4473 0 R (id2801790) 4484 0 R (id2801878) 4489 0 R (id2802192) 4494 0 R (id2802208) 4495 0 R (id2802444) 4500 0 R (id2802609) 4507 0 R (id2802756) 4512 0 R (id2803020) 4519 0 R (id2803110) 4525 0 R (id2803248) 4527 0 R (id2803305) 4528 0 R (id2803354) 4536 0 R (id2803471) 4538 0 R (id2803704) 4543 0 R (id2803881) 4548 0 R (id2803904) 4553 0 R (id2803940) 4554 0 R (id2804099) 4555 0 R (id2804176) 4561 0 R (id2804365) 4567 0 R (id2804621) 4572 0 R (id2804646) 4573 0 R (id2804735) 4574 0 R (id2804747) 4579 0 R (id2804826) 4580 0 R (id2804993) 4585 0 R (id2805047) 4586 0 R (id2805168) 4591 0 R (id2805256) 4597 0 R (id2805305) 4598 0 R (id2805439) 4608 0 R (id2805552) 4614 0 R (id2805665) 4616 0 R (id2805782) 4618 0 R (id2805937) 4627 0 R (id2805952) 4628 0 R (id2805981) 4629 0 R (id2806026) 4630 0 R (id2806306) 4639 0 R (id2806319) 4640 0 R (id2806422) 4645 0 R (id2806609) 4652 0 R (id2806734) 4653 0 R (id2806927) 4665 0 R (id2806988) 4666 0 R (id2807024) 4667 0 R (id2807211) 4676 0 R (id2807482) 4681 0 R (id2807720) 4696 0 R (id2807761) 4697 0 R (id2807802) 4698 0 R (id2807915) 4703 0 R (id2807949) 4704 0 R (id2808104) 4716 0 R (id2808129) 4718 0 R (id2808240) 4724 0 R (id2808436) 4729 0 R (id2808564) 4734 0 R (id2808740) 4742 0 R (id2808965) 4735 0 R (id2809001) 4743 0 R (id2809162) 4749 0 R (id2809179) 4755 0 R (id2809618) 4757 0 R (id2809684) 4762 0 R (id2809802) 4763 0 R (id2809823) 4768 0 R (id2809891) 4769 0 R (id2809990) 4770 0 R (id2810121) 4776 0 R (id2810510) 4778 0 R (id2810540) 4784 0 R (id2810650) 4785 0 R (id2810658) 4786 0 R (id2810702) 4788 0 R (id2810813) 4793 0 R (id2811042) 4799 0 R (id2811277) 4807 0 R (id2811513) 4815 0 R (id2811580) 4820 0 R (id2811593) 4821 0 R (id2811616) 4823 0 R (id2811678) 4824 0 R (id2811761) 4830 0 R (id2811776) 4831 0 R (id2811845) 4832 0 R (id2811871) 4833 0 R (id2812127) 4842 0 R (id2812256) 4847 0 R (id2812292) 4848 0 R (id2812597) 4861 0 R (id2812616) 4862 0 R (id2812691) 4864 0 R (id2812827) 4875 0 R (id2812902) 4880 0 R (id2812931) 4881 0 R (id2813019) 4882 0 R (id2813354) 4884 0 R (id2813374) 4890 0 R (id2813732) 4885 0 R (id2813755) 4892 0 R (id2814113) 4894 0 R (id2814185) 4899 0 R (id2814197) 4900 0 R (id2814281) 4903 0 R (id2814485) 4911 0 R (id2814493) 4912 0 R (id2814537) 4913 0 R (id2814616) 4918 0 R (id2814748) 4919 0 R (id2814848) 4925 0 R (id2814950) 4926 0 R (id2814993) 4927 0 R (id2815158) 4932 0 R (id2815554) 4937 0 R (id2815650) 4942 0 R (id2815664) 4943 0 R (id2816093) 4958 0 R (id2816146) 4959 0 R (id2816393) 4965 0 R (id2816450) 4966 0 R (id2816593) 4971 0 R (id2816923) 4980 0 R (id2816947) 4981 0 R (id2816976) 4982 0 R (id2817003) 4987 0 R (id2817036) 4988 0 R (id2817066) 4989 0 R (id2817092) 4990 0 R (id2817184) 4995 0 R (id2817244) 4996 0 R (id2817310) 5002 0 R (id2817431) 5007 0 R (id2817444) 5008 0 R (id2817541) 5009 0 R (id2817634) 5015 0 R (id2817792) 5017 0 R (id2817845) 5018 0 R (id2818069) 5027 0 R (id2818098) 5032 0 R (id2818178) 5033 0 R (id2818206) 5039 0 R (id2818280) 5040 0 R (id2818319) 5045 0 R (id2818341) 5048 0 R (id2818373) 5051 0 R (id2818548) 5064 0 R (id2818584) 5065 0 R (id2818658) 5066 0 R (id2818678) 5071 0 R (id2818777) 5072 0 R (id2818837) 5073 0 R (id2818904) 5078 0 R (id2818961) 5079 0 R (id2819049) 5084 0 R (id2819109) 5085 0 R (id2819133) 5087 0 R (id2819151) 5088 0 R (id2819175) 5094 0 R (id2819466) 5099 0 R (id2819494) 5100 0 R (id2819583) 5105 0 R (id2819611) 5106 0 R (id2819683) 5107 0 R (id2819730) 5113 0 R (id2819908) 5121 0 R (id2820093) 5127 0 R (id2820231) 5128 0 R (id2820338) 5135 0 R (id2820408) 5140 0 R (id2820518) 5143 0 R (id2820682) 5148 0 R (id2820802) 5153 0 R (id2820907) 5154 0 R (id2820945) 5159 0 R (id2821017) 5167 0 R (id2821113) 5172 0 R (id2821579) 5173 0 R (id2821607) 5175 0 R (id2821744) 5181 0 R (id2821871) 5186 0 R (id2822231) 5195 0 R (id2822562) 5197 0 R (id2822576) 5198 0 R (id2823106) 5215 0 R (id2823566) 5220 0 R (id2823886) 5221 0 R (id2823970) 5226 0 R (id2824040) 5227 0 R (id2824652) 5232 0 R (id2824992) 5237 0 R (id2825152) 5240 0 R (id2825314) 5245 0 R (id2825426) 5251 0 R (id2825474) 5253 0 R (id2825617) 5254 0 R (id2825925) 5259 0 R (id2826100) 5264 0 R (id2826194) 5269 0 R (id2826392) 5270 0 R (id2826500) 5279 0 R (id2826864) 5284 0 R (id2827013) 5290 0 R (id2827208) 5295 0 R (id2827325) 5300 0 R (id2827438) 5305 0 R (id2827606) 5310 0 R (id2827814) 5315 0 R (id2827949) 5316 0 R (id2828102) 5322 0 R (id2828121) 5323 0 R (id2828324) 5328 0 R (id2828624) 5337 0 R (id2828718) 5338 0 R (id2828890) 5343 0 R (id2828924) 5344 0 R (id2829391) 5373 0 R (id2829703) 5378 0 R (id2829997) 5383 0 R (id2830097) 5388 0 R (id2830456) 5402 0 R (id2830549) 5403 0 R (id2830573) 5404 0 R (id2830630) 5407 0 R (id2830671) 5412 0 R (id2830690) 5413 0 R (id2830714) 5414 0 R (id2830869) 5422 0 R (id2831202) 5433 0 R (id2831248) 5434 0 R (id2831422) 5440 0 R (id2831436) 5441 0 R (id2831442) 5442 0 R (id2831476) 5443 0 R (id2831610) 5449 0 R (id2831618) 5450 0 R (id2831672) 5452 0 R (id2831741) 5454 0 R (id2831833) 5460 0 R (id2832075) 5465 0 R (id2832102) 5467 0 R (id2832257) 5468 0 R (id2832288) 5474 0 R (id2832611) 5475 0 R (id2832631) 5476 0 R (id2832687) 5481 0 R (id2832756) 5482 0 R (id2832832) 5483 0 R (id2833037) 5488 0 R (id2833177) 5494 0 R (id2833358) 5501 0 R (id2833512) 5505 0 R (id2833812) 5521 0 R (id2833955) 5531 0 R (id2834040) 5536 0 R (id2834146) 5539 0 R (id2834169) 5545 0 R (id2834362) 5548 0 R (id2834569) 5553 0 R (id2834724) 5558 0 R (id2834905) 5565 0 R (id2835016) 5569 0 R (id2835126) 5581 0 R (id2835320) 5595 0 R (id2835384) 5596 0 R (id2835535) 5597 0 R (id2835885) 5620 0 R (id2836030) 5621 0 R (id2836045) 5626 0 R (id2836108) 5627 0 R (id2836197) 5628 0 R (id2836444) 5637 0 R (id2836528) 5638 0 R (id2836711) 5640 0 R (id2836946) 5657 0 R (id2837282) 5671 0 R (id2837431) 5682 0 R (id2837531) 5684 0 R (id2837542) 5685 0 R (id2837602) 5692 0 R (id2837679) 5696 0 R (id2837799) 5705 0 R (id2837819) 5706 0 R (id2838031) 5717 0 R (id2838118) 5718 0 R (id2838206) 5725 0 R (id2838262) 5726 0 R (id2838338) 5731 0 R (id2838356) 5732 0 R (id2838401) 5733 0 R (id2838422) 5734 0 R (id2838476) 5735 0 R (id2838499) 5740 0 R (id2838554) 5741 0 R (id2838673) 5742 0 R (id2838701) 5748 0 R (id2838892) 5749 0 R (id2839179) 5755 0 R (id2839323) 5761 0 R (id2839356) 5766 0 R (id2839427) 5768 0 R (id2839701) 5778 0 R (id2839916) 5783 0 R (id2840042) 5784 0 R (id2840265) 5793 0 R (id2840414) 5805 0 R (id2840498) 5809 0 R (id2840578) 5810 0 R (id2840653) 5818 0 R (id2840816) 5824 0 R (id2840950) 5829 0 R (id2841153) 5834 0 R (id2841267) 5842 0 R (id2841370) 5843 0 R (id2841538) 5848 0 R (id2841753) 5854 0 R (id2842822) 5889 0 R (id2842982) 5894 0 R (id2843227) 5900 0 R (id2843319) 5901 0 R (id2843384) 5902 0 R (id2843442) 5903 0 R (id2843578) 5908 0 R (id2843734) 5916 0 R (id2843805) 5920 0 R (id2843838) 5921 0 R (id2843885) 5928 0 R (id2843987) 5929 0 R (id2844167) 5945 0 R (id2844272) 5949 0 R (id2844353) 5957 0 R (id2844429) 5962 0 R (id2844504) 5965 0 R (id2845005) 6004 0 R (id2845056) 6005 0 R (id2845122) 6006 0 R (id2845167) 6012 0 R (id2845262) 6013 0 R (id2845379) 6018 0 R (id2845455) 6019 0 R (id2845511) 6024 0 R (id2845526) 6025 0 R (id2845775) 6031 0 R (id2845838) 6032 0 R (id2845932) 6037 0 R (id2846090) 6038 0 R (id2846149) 6039 0 R (id2846220) 6044 0 R (id2846520) 6051 0 R (id2846622) 6059 0 R (id2846629) 6060 0 R (id2846651) 6061 0 R (id2846700) 6066 0 R (id2846757) 6067 0 R (id2846786) 6068 0 R (id2847013) 6069 0 R (id2847068) 6070 0 R (id2847085) 6076 0 R (id2847114) 6077 0 R (id2847122) 6078 0 R (id2847161) 6079 0 R (id2847196) 6080 0 R (id2847218) 6081 0 R (id2847263) 6086 0 R (id2847553) 6107 0 R (id2847598) 6108 0 R (id2847660) 6109 0 R (id2847769) 6110 0 R (id2847816) 6111 0 R (id2847872) 6116 0 R (id2848042) 6137 0 R (id2848059) 6138 0 R (id2848097) 6140 0 R (id2848197) 6146 0 R (id2848288) 6147 0 R (id2848295) 6148 0 R (id2848338) 6149 0 R (id2848385) 6150 0 R (id2848468) 6152 0 R (id2848487) 6157 0 R (id2848662) 6158 0 R (id2848707) 6163 0 R (id2848729) 6164 0 R (id2848784) 6167 0 R (id2849013) 6173 0 R (id2849109) 6178 0 R (id2849187) 6179 0 R (id2849263) 6185 0 R (id2849294) 6186 0 R (id2849323) 6187 0 R (id2849357) 6188 0 R (id2849379) 6193 0 R (id2849515) 6194 0 R (id2849587) 6199 0 R (id2849620) 6200 0 R (id2849648) 6201 0 R (id2849656) 6202 0 R (id2849723) 6207 0 R (id2849817) 6209 0 R (id2849879) 6214 0 R (id2850087) 6215 0 R (id2850166) 6223 0 R (id2850212) 6225 0 R (id2850324) 6226 0 R (id2850380) 6232 0 R (id2850629) 6237 0 R (id2850636) 6239 0 R (id2850805) 6245 0 R (id2850917) 6257 0 R (id2850953) 6258 0 R (id2851059) 6260 0 R (id2851300) 6271 0 R (id2851424) 6276 0 R (id2851443) 6277 0 R (id2851496) 6282 0 R (id2851604) 6287 0 R (id2851635) 6288 0 R (id2851734) 6297 0 R (id2851752) 6298 0 R (id2851992) 6306 0 R (id2852232) 6320 0 R (id2852265) 6326 0 R (id2852343) 6331 0 R (id2852402) 6332 0 R (id2852516) 6339 0 R (id2852612) 6340 0 R (id2852721) 6345 0 R (id2852744) 6346 0 R (id2852845) 6352 0 R (id2852996) 6361 0 R (id2853102) 6362 0 R (id2853141) 6367 0 R (id2853165) 6368 0 R (id2853210) 6369 0 R (id2853360) 6383 0 R (id2853375) 6384 0 R (id2853475) 6389 0 R (id2853508) 6390 0 R (id2853549) 6391 0 R (id2853563) 6396 0 R (id2853671) 6397 0 R (id2853802) 6403 0 R (id2853870) 6404 0 R (id2854041) 6409 0 R (id2854048) 6410 0 R (id2854590) 6426 0 R (id2854775) 6427 0 R (id2855291) 6463 0 R (id2855375) 6464 0 R (id2855392) 6470 0 R (id2855562) 6478 0 R (id2855577) 6479 0 R (id2855593) 6484 0 R (id2855634) 6485 0 R (id2855692) 6486 0 R (id2855737) 6491 0 R (id2855757) 6492 0 R (id2855860) 6493 0 R (id2855909) 6498 0 R (id2856260) 6507 0 R (id2856405) 6509 0 R (id2856464) 6511 0 R (id2856666) 6521 0 R (id2856982) 6527 0 R (id2856995) 6528 0 R (id2857064) 6529 0 R (id2857277) 6534 0 R (id2857559) 6544 0 R (id2857806) 6549 0 R (id2857823) 6550 0 R (id2857882) 6556 0 R (id2858489) 6570 0 R (id2858520) 6575 0 R (id2858546) 6576 0 R (id2858792) 6586 0 R (id2858870) 6587 0 R (id2858954) 6592 0 R (id2858986) 6593 0 R (id2859203) 6602 0 R (id2859236) 6603 0 R (id2859272) 6608 0 R (id2859304) 6609 0 R (id2859338) 6610 0 R (id2859351) 6611 0 R (id2859439) 6616 0 R (id2859676) 6626 0 R (id2859702) 6627 0 R (id2859766) 6632 0 R (id2859823) 6633 0 R (id2859972) 6638 0 R (id2860016) 6639 0 R (id2860067) 6644 0 R (id2860182) 6649 0 R (id2860235) 6650 0 R (id2860305) 6652 0 R (id2860492) 6658 0 R (id2860556) 6659 0 R (id2860717) 6669 0 R (id2860750) 6670 0 R (id2860782) 6671 0 R (id2860898) 6678 0 R (id2860914) 6679 0 R (id2860949) 6680 0 R (id2861001) 6681 0 R (id2861205) 6690 0 R (id2861249) 6692 0 R (id2861319) 6698 0 R (id2861446) 6699 0 R (id2861476) 6701 0 R (id2861614) 6709 0 R (id2861621) 6710 0 R (id2861735) 6715 0 R (id2861749) 6716 0 R (id2861819) 6721 0 R (id2861957) 6731 0 R (id2862092) 6749 0 R (id2862108) 6750 0 R (id2862234) 6756 0 R (id2862630) 6765 0 R (id2862705) 6770 0 R (id2862712) 6771 0 R (id2862731) 6772 0 R (id2862946) 6774 0 R (id2862996) 6777 0 R (id2863020) 6783 0 R (id2863138) 6787 0 R (id2863162) 6789 0 R (id2863174) 6790 0 R (id2863296) 6795 0 R (id2863363) 6801 0 R (id2863507) 6806 0 R (id2863532) 6807 0 R (id2863743) 6816 0 R (id2863794) 6817 0 R (id2863854) 6822 0 R (id2863917) 6823 0 R (id2863947) 6824 0 R (id2863971) 6825 0 R (id2864187) 6839 0 R (id2864202) 6840 0 R (id2864278) 6842 0 R (id2864348) 6848 0 R (id2864533) 6850 0 R (id2864894) 6859 0 R (id2864942) 6860 0 R (id2865180) 6865 0 R (id2865291) 6875 0 R (id2865357) 6877 0 R (id2865464) 6882 0 R (id2865528) 6883 0 R (id2865593) 6884 0 R (id2865640) 6890 0 R (id2865692) 6891 0 R (id2865716) 6892 0 R (id2865845) 6902 0 R (id2865885) 6903 0 R (id2865935) 6905 0 R (id2866112) 6910 0 R (id2867609) 6952 0 R (id2867630) 6953 0 R (id2867756) 6954 0 R (id2867778) 6960 0 R (id2867829) 6962 0 R (id2867851) 6963 0 R (id2868121) 6968 0 R (id2868148) 6969 0 R (id2868189) 6973 0 R (id2868348) 6980 0 R (id2868475) 6987 0 R (id2868544) 6990 0 R (id2868581) 6992 0 R (id2868789) 6997 0 R (id2868924) 7002 0 R (id2868970) 7003 0 R (id2869129) 7014 0 R (id2869146) 7015 0 R (id2869184) 7018 0 R (id2869200) 7019 0 R (id2869247) 7021 0 R (id2869444) 7033 0 R (id2869509) 7044 0 R (id2869663) 7045 0 R (id2869842) 7050 0 R (id2869923) 7051 0 R (id2869955) 7056 0 R (id2870009) 7057 0 R (id2870117) 7058 0 R (id2870363) 7067 0 R (id2870525) 7072 0 R (id2870614) 7073 0 R (id2870644) 7075 0 R (id2870817) 7085 0 R (id2870861) 7086 0 R (id2870868) 7087 0 R (id2870894) 7088 0 R (id2870901) 7089 0 R (id2871054) 7098 0 R (id2871132) 7104 0 R (id2871139) 7105 0 R (id2871223) 7110 0 R (id2871276) 7113 0 R (id2871376) 7118 0 R (id2871384) 7119 0 R (id2871474) 7120 0 R (id2871504) 7121 0 R (id2871557) 7122 0 R (id2871595) 7123 0 R (id2871611) 7129 0 R (id2871658) 7130 0 R (id2871732) 7131 0 R (id2871756) 7132 0 R (id2871828) 7138 0 R (id2871943) 7139 0 R (id2872074) 7145 0 R (id2872118) 7146 0 R (id2872208) 7151 0 R (id2872257) 7152 0 R (id2872318) 7153 0 R (id2872348) 7154 0 R (id2872432) 7159 0 R (id2872495) 7160 0 R (id2872524) 7161 0 R (id2872549) 7163 0 R (id2872581) 7164 0 R (id2872686) 7174 0 R (id2872753) 7179 0 R (id2873144) 7208 0 R (idmap-diag) 4658 0 R (idmap-group-diag) 4804 0 R (idmapbackend) 4672 0 R (idmapbackendexample) 4674 0 R (install) 3022 0 R (integrate-ms-networks) 3131 0 R (introduction) 4004 0 R (locking) 3092 0 R (machine-trust-accounts) 4182 0 R (migration) 6730 0 R (msdfs) 3095 0 R (optional) 4483 0 R (page.1) 2961 0 R (page.10) 3187 0 R (page.100) 4578 0 R (page.101) 4584 0 R (page.102) 4590 0 R (page.103) 4596 0 R (page.104) 4605 0 R (page.105) 4613 0 R (page.106) 4623 0 R (page.107) 4634 0 R (page.108) 4638 0 R (page.109) 4644 0 R (page.11) 3227 0 R (page.110) 4651 0 R (page.111) 4657 0 R (page.112) 4664 0 R (page.113) 4671 0 R (page.114) 4680 0 R (page.115) 4685 0 R (page.116) 4694 0 R (page.117) 4702 0 R (page.118) 4712 0 R (page.119) 4723 0 R (page.12) 3280 0 R (page.120) 4728 0 R (page.121) 4733 0 R (page.122) 4740 0 R (page.123) 4747 0 R (page.124) 4754 0 R (page.125) 4761 0 R (page.126) 4767 0 R (page.127) 4775 0 R (page.128) 4783 0 R (page.129) 4792 0 R (page.13) 3332 0 R (page.130) 4798 0 R (page.131) 4803 0 R (page.132) 4813 0 R (page.133) 4819 0 R (page.134) 4829 0 R (page.135) 4837 0 R (page.136) 4841 0 R (page.137) 4846 0 R (page.138) 4852 0 R (page.139) 4860 0 R (page.14) 3390 0 R (page.140) 4871 0 R (page.141) 4879 0 R (page.142) 4889 0 R (page.143) 4898 0 R (page.144) 4910 0 R (page.145) 4917 0 R (page.146) 4924 0 R (page.147) 4931 0 R (page.148) 4936 0 R (page.149) 4941 0 R (page.15) 3440 0 R (page.150) 4950 0 R (page.151) 4957 0 R (page.152) 4964 0 R (page.153) 4970 0 R (page.154) 4975 0 R (page.155) 4979 0 R (page.156) 4986 0 R (page.157) 4994 0 R (page.158) 5001 0 R (page.159) 5006 0 R (page.16) 3495 0 R (page.160) 5013 0 R (page.161) 5022 0 R (page.162) 5026 0 R (page.163) 5031 0 R (page.164) 5038 0 R (page.165) 5044 0 R (page.166) 5063 0 R (page.167) 5070 0 R (page.168) 5077 0 R (page.169) 5083 0 R (page.17) 3550 0 R (page.170) 5093 0 R (page.171) 5098 0 R (page.172) 5104 0 R (page.173) 5112 0 R (page.174) 5120 0 R (page.175) 5126 0 R (page.176) 5134 0 R (page.177) 5139 0 R (page.178) 5147 0 R (page.179) 5152 0 R (page.18) 3603 0 R (page.180) 5158 0 R (page.181) 5171 0 R (page.182) 5180 0 R (page.183) 5185 0 R (page.184) 5190 0 R (page.185) 5194 0 R (page.186) 5204 0 R (page.187) 5209 0 R (page.188) 5214 0 R (page.189) 5219 0 R (page.19) 3657 0 R (page.190) 5225 0 R (page.191) 5231 0 R (page.192) 5236 0 R (page.193) 5244 0 R (page.194) 5250 0 R (page.195) 5258 0 R (page.196) 5263 0 R (page.197) 5268 0 R (page.198) 5277 0 R (page.199) 5283 0 R (page.2) 2973 0 R (page.20) 3710 0 R (page.200) 5289 0 R (page.201) 5294 0 R (page.202) 5299 0 R (page.203) 5304 0 R (page.204) 5309 0 R (page.205) 5314 0 R (page.206) 5321 0 R (page.207) 5327 0 R (page.208) 5332 0 R (page.209) 5336 0 R (page.21) 3761 0 R (page.210) 5342 0 R (page.211) 5358 0 R (page.212) 5372 0 R (page.213) 5377 0 R (page.214) 5382 0 R (page.215) 5387 0 R (page.216) 5392 0 R (page.217) 5396 0 R (page.218) 5401 0 R (page.219) 5411 0 R (page.22) 3816 0 R (page.220) 5420 0 R (page.221) 5428 0 R (page.222) 5432 0 R (page.223) 5439 0 R (page.224) 5448 0 R (page.225) 5458 0 R (page.226) 5464 0 R (page.227) 5472 0 R (page.228) 5480 0 R (page.229) 5487 0 R (page.23) 3863 0 R (page.230) 5493 0 R (page.231) 5500 0 R (page.232) 5511 0 R (page.233) 5517 0 R (page.234) 5530 0 R (page.235) 5535 0 R (page.236) 5544 0 R (page.237) 5552 0 R (page.238) 5557 0 R (page.239) 5564 0 R (page.24) 3912 0 R (page.240) 5580 0 R (page.241) 5591 0 R (page.242) 5603 0 R (page.243) 5611 0 R (page.244) 5619 0 R (page.245) 5625 0 R (page.246) 5632 0 R (page.247) 5636 0 R (page.248) 5646 0 R (page.249) 5656 0 R (page.25) 3960 0 R (page.250) 5666 0 R (page.251) 5679 0 R (page.252) 5691 0 R (page.253) 5701 0 R (page.254) 5713 0 R (page.255) 5723 0 R (page.256) 5730 0 R (page.257) 5739 0 R (page.258) 5746 0 R (page.259) 5754 0 R (page.26) 3999 0 R (page.260) 5760 0 R (page.261) 5765 0 R (page.262) 5772 0 R (page.263) 5782 0 R (page.264) 5788 0 R (page.265) 5792 0 R (page.266) 5804 0 R (page.267) 5814 0 R (page.268) 5823 0 R (page.269) 5828 0 R (page.27) 4003 0 R (page.270) 5841 0 R (page.271) 5847 0 R (page.272) 5853 0 R (page.273) 5864 0 R (page.274) 5871 0 R (page.275) 5878 0 R (page.276) 5884 0 R (page.277) 5893 0 R (page.278) 5899 0 R (page.279) 5907 0 R (page.28) 4009 0 R (page.280) 5914 0 R (page.281) 5927 0 R (page.282) 5944 0 R (page.283) 5956 0 R (page.284) 5970 0 R (page.285) 5995 0 R (page.286) 6003 0 R (page.287) 6010 0 R (page.288) 6017 0 R (page.289) 6023 0 R (page.29) 4014 0 R (page.290) 6030 0 R (page.291) 6036 0 R (page.292) 6043 0 R (page.293) 6050 0 R (page.294) 6055 0 R (page.295) 6065 0 R (page.296) 6075 0 R (page.297) 6085 0 R (page.298) 6106 0 R (page.299) 6115 0 R (page.3) 2987 0 R (page.30) 4022 0 R (page.300) 6120 0 R (page.301) 6127 0 R (page.302) 6136 0 R (page.303) 6144 0 R (page.304) 6156 0 R (page.305) 6162 0 R (page.306) 6172 0 R (page.307) 6177 0 R (page.308) 6184 0 R (page.309) 6192 0 R (page.31) 4030 0 R (page.310) 6198 0 R (page.311) 6206 0 R (page.312) 6213 0 R (page.313) 6219 0 R (page.314) 6231 0 R (page.315) 6236 0 R (page.316) 6243 0 R (page.317) 6251 0 R (page.318) 6255 0 R (page.319) 6264 0 R (page.32) 4043 0 R (page.320) 6269 0 R (page.321) 6275 0 R (page.322) 6281 0 R (page.323) 6286 0 R (page.324) 6296 0 R (page.325) 6304 0 R (page.326) 6312 0 R (page.327) 6316 0 R (page.328) 6324 0 R (page.329) 6330 0 R (page.33) 4056 0 R (page.330) 6336 0 R (page.331) 6344 0 R (page.332) 6351 0 R (page.333) 6360 0 R (page.334) 6366 0 R (page.335) 6379 0 R (page.336) 6388 0 R (page.337) 6395 0 R (page.338) 6402 0 R (page.339) 6408 0 R (page.34) 4066 0 R (page.340) 6416 0 R (page.341) 6425 0 R (page.342) 6436 0 R (page.343) 6450 0 R (page.344) 6469 0 R (page.345) 6483 0 R (page.346) 6490 0 R (page.347) 6497 0 R (page.348) 6506 0 R (page.349) 6515 0 R (page.35) 4073 0 R (page.350) 6520 0 R (page.351) 6526 0 R (page.352) 6533 0 R (page.353) 6538 0 R (page.354) 6542 0 R (page.355) 6548 0 R (page.356) 6555 0 R (page.357) 6561 0 R (page.358) 6565 0 R (page.359) 6569 0 R (page.36) 4078 0 R (page.360) 6574 0 R (page.361) 6580 0 R (page.362) 6585 0 R (page.363) 6591 0 R (page.364) 6600 0 R (page.365) 6607 0 R (page.366) 6615 0 R (page.367) 6620 0 R (page.368) 6625 0 R (page.369) 6631 0 R (page.37) 4082 0 R (page.370) 6637 0 R (page.371) 6643 0 R (page.372) 6648 0 R (page.373) 6657 0 R (page.374) 6664 0 R (page.375) 6668 0 R (page.376) 6675 0 R (page.377) 6685 0 R (page.378) 6689 0 R (page.379) 6697 0 R (page.38) 4089 0 R (page.380) 6708 0 R (page.381) 6714 0 R (page.382) 6720 0 R (page.383) 6725 0 R (page.384) 6729 0 R (page.385) 6747 0 R (page.386) 6755 0 R (page.387) 6760 0 R (page.388) 6764 0 R (page.389) 6769 0 R (page.39) 4095 0 R (page.390) 6782 0 R (page.391) 6794 0 R (page.392) 6800 0 R (page.393) 6805 0 R (page.394) 6811 0 R (page.395) 6815 0 R (page.396) 6821 0 R (page.397) 6831 0 R (page.398) 6847 0 R (page.399) 6854 0 R (page.4) 2993 0 R (page.40) 4105 0 R (page.400) 6858 0 R (page.401) 6864 0 R (page.402) 6871 0 R (page.403) 6881 0 R (page.404) 6889 0 R (page.405) 6896 0 R (page.406) 6900 0 R (page.407) 6909 0 R (page.408) 6916 0 R (page.409) 6921 0 R (page.41) 4114 0 R (page.410) 6930 0 R (page.411) 6944 0 R (page.412) 6951 0 R (page.413) 6959 0 R (page.414) 6967 0 R (page.415) 6979 0 R (page.416) 6986 0 R (page.417) 6996 0 R (page.418) 7001 0 R (page.419) 7007 0 R (page.42) 4132 0 R (page.420) 7011 0 R (page.421) 7025 0 R (page.422) 7043 0 R (page.423) 7049 0 R (page.424) 7055 0 R (page.425) 7062 0 R (page.426) 7066 0 R (page.427) 7071 0 R (page.428) 7080 0 R (page.429) 7084 0 R (page.43) 4138 0 R (page.430) 7093 0 R (page.431) 7097 0 R (page.432) 7109 0 R (page.433) 7117 0 R (page.434) 7128 0 R (page.435) 7136 0 R (page.436) 7144 0 R (page.437) 7150 0 R (page.438) 7158 0 R (page.439) 7168 0 R (page.44) 4148 0 R (page.440) 7173 0 R (page.441) 7178 0 R (page.442) 7204 0 R (page.45) 4153 0 R (page.46) 4163 0 R (page.47) 4167 0 R (page.48) 4174 0 R (page.49) 4186 0 R (page.5) 3031 0 R (page.50) 4201 0 R (page.51) 4208 0 R (page.52) 4217 0 R (page.53) 4228 0 R (page.54) 4233 0 R (page.55) 4240 0 R (page.56) 4250 0 R (page.57) 4261 0 R (page.58) 4268 0 R (page.59) 4276 0 R (page.6) 3066 0 R (page.60) 4283 0 R (page.61) 4288 0 R (page.62) 4296 0 R (page.63) 4304 0 R (page.64) 4310 0 R (page.65) 4314 0 R (page.66) 4325 0 R (page.67) 4333 0 R (page.68) 4341 0 R (page.69) 4347 0 R (page.7) 3102 0 R (page.70) 4352 0 R (page.71) 4356 0 R (page.72) 4362 0 R (page.73) 4377 0 R (page.74) 4386 0 R (page.75) 4397 0 R (page.76) 4401 0 R (page.77) 4409 0 R (page.78) 4416 0 R (page.79) 4427 0 R (page.8) 3140 0 R (page.80) 4435 0 R (page.81) 4441 0 R (page.82) 4447 0 R (page.83) 4456 0 R (page.84) 4466 0 R (page.85) 4472 0 R (page.86) 4478 0 R (page.87) 4482 0 R (page.88) 4488 0 R (page.89) 4493 0 R (page.9) 3179 0 R (page.90) 4499 0 R (page.91) 4511 0 R (page.92) 4517 0 R (page.93) 4523 0 R (page.94) 4534 0 R (page.95) 4542 0 R (page.96) 4552 0 R (page.97) 4560 0 R (page.98) 4566 0 R (page.99) 4571 0 R (pam) 3130 0 R (part.1) 6 0 R (part.2) 102 0 R (part.3) 466 0 R (part.4) 2462 0 R (part.5) 2626 0 R (part.6) 2718 0 R (passdb) 3060 0 R (pdc-example) 4224 0 R (pdftoepsonusb) 5668 0 R (pdftosocket) 5659 0 R (post-and-ghost) 5512 0 R (printing) 3096 0 R (problems) 3169 0 R (samba-bdc) 3026 0 R (samba-pdc) 3025 0 R (samba-trusted-domain) 5122 0 R (section*.4) 6238 0 R (section*.5) 6244 0 R (section*.6) 6256 0 R (section*.7) 6259 0 R (section*.8) 6270 0 R (section.1.1) 14 0 R (section.1.2) 18 0 R (section.1.3) 22 0 R (section.1.4) 26 0 R (section.1.5) 30 0 R (section.1.6) 34 0 R (section.10.1) 474 0 R (section.10.2) 478 0 R (section.10.3) 482 0 R (section.10.4) 498 0 R (section.10.5) 534 0 R (section.10.6) 550 0 R (section.10.7) 562 0 R (section.10.8) 582 0 R (section.11.1) 602 0 R (section.11.2) 614 0 R (section.11.3) 638 0 R (section.11.4) 650 0 R (section.11.5) 734 0 R (section.12.1) 754 0 R (section.12.2) 758 0 R (section.12.3) 766 0 R (section.12.4) 778 0 R (section.13.1) 798 0 R (section.13.2) 802 0 R (section.13.3) 818 0 R (section.13.4) 834 0 R (section.13.5) 850 0 R (section.13.6) 890 0 R (section.14.1) 910 0 R (section.14.2) 914 0 R (section.14.3) 958 0 R (section.14.4) 974 0 R (section.14.5) 986 0 R (section.14.6) 990 0 R (section.14.7) 1006 0 R (section.15.1) 1014 0 R (section.15.2) 1018 0 R (section.15.3) 1022 0 R (section.15.4) 1050 0 R (section.15.5) 1054 0 R (section.16.1) 1070 0 R (section.16.2) 1074 0 R (section.16.3) 1078 0 R (section.16.4) 1094 0 R (section.16.5) 1106 0 R (section.16.6) 1110 0 R (section.17.1) 1118 0 R (section.17.2) 1122 0 R (section.18.1) 1130 0 R (section.18.10) 1318 0 R (section.18.11) 1338 0 R (section.18.12) 1342 0 R (section.18.13) 1346 0 R (section.18.14) 1350 0 R (section.18.15) 1354 0 R (section.18.2) 1134 0 R (section.18.3) 1150 0 R (section.18.4) 1162 0 R (section.18.5) 1166 0 R (section.18.6) 1194 0 R (section.18.7) 1218 0 R (section.18.8) 1266 0 R (section.18.9) 1286 0 R (section.19.1) 1370 0 R (section.19.10) 1598 0 R (section.19.11) 1666 0 R (section.19.12) 1694 0 R (section.19.13) 1714 0 R (section.19.14) 1758 0 R (section.19.15) 1790 0 R (section.19.16) 1794 0 R (section.19.17) 1810 0 R (section.19.18) 1814 0 R (section.19.19) 1818 0 R (section.19.2) 1382 0 R (section.19.20) 1822 0 R (section.19.21) 1902 0 R (section.19.3) 1398 0 R (section.19.4) 1422 0 R (section.19.5) 1458 0 R (section.19.6) 1538 0 R (section.19.7) 1554 0 R (section.19.8) 1566 0 R (section.19.9) 1578 0 R (section.2.1) 42 0 R (section.2.2) 46 0 R (section.2.3) 62 0 R (section.2.4) 66 0 R (section.2.5) 70 0 R (section.2.6) 74 0 R (section.2.7) 78 0 R (section.20.1) 1910 0 R (section.20.2) 1914 0 R (section.20.3) 1918 0 R (section.20.4) 1942 0 R (section.21.1) 1958 0 R (section.21.2) 1962 0 R (section.21.3) 1966 0 R (section.21.4) 1974 0 R (section.21.5) 2002 0 R (section.21.6) 2046 0 R (section.21.7) 2050 0 R (section.22.1) 2062 0 R (section.22.2) 2066 0 R (section.22.3) 2070 0 R (section.22.4) 2078 0 R (section.22.5) 2086 0 R (section.23.1) 2094 0 R (section.23.2) 2098 0 R (section.23.3) 2122 0 R (section.23.4) 2138 0 R (section.23.5) 2142 0 R (section.24.1) 2154 0 R (section.24.2) 2158 0 R (section.24.3) 2222 0 R (section.24.4) 2226 0 R (section.24.5) 2230 0 R (section.24.6) 2250 0 R (section.25.1) 2270 0 R (section.25.2) 2274 0 R (section.25.3) 2326 0 R (section.26.1) 2342 0 R (section.26.2) 2346 0 R (section.26.3) 2350 0 R (section.26.4) 2370 0 R (section.26.5) 2394 0 R (section.27.1) 2414 0 R (section.27.2) 2418 0 R (section.27.3) 2422 0 R (section.27.4) 2426 0 R (section.27.5) 2430 0 R (section.27.6) 2434 0 R (section.28.1) 2446 0 R (section.28.2) 2450 0 R (section.29.1) 2458 0 R (section.3.1) 98 0 R (section.30.1) 2470 0 R (section.30.2) 2474 0 R (section.30.3) 2490 0 R (section.31.1) 2534 0 R (section.31.2) 2566 0 R (section.32.1) 2582 0 R (section.33.1) 2634 0 R (section.33.2) 2638 0 R (section.33.3) 2642 0 R (section.34.1) 2650 0 R (section.34.2) 2678 0 R (section.34.3) 2682 0 R (section.34.4) 2686 0 R (section.35.1) 2694 0 R (section.35.2) 2698 0 R (section.35.3) 2702 0 R (section.35.4) 2706 0 R (section.35.5) 2710 0 R (section.35.6) 2714 0 R (section.36.1) 2726 0 R (section.36.2) 2746 0 R (section.36.3) 2750 0 R (section.36.4) 2754 0 R (section.36.5) 2770 0 R (section.37.1) 2786 0 R (section.37.2) 2790 0 R (section.37.3) 2794 0 R (section.37.4) 2798 0 R (section.37.5) 2802 0 R (section.37.6) 2810 0 R (section.38.1) 2826 0 R (section.38.2) 2830 0 R (section.38.3) 2846 0 R (section.38.4) 2874 0 R (section.38.5) 2882 0 R (section.38.6) 2886 0 R (section.39.1) 2894 0 R (section.39.10) 2930 0 R (section.39.11) 2934 0 R (section.39.2) 2898 0 R (section.39.3) 2902 0 R (section.39.4) 2906 0 R (section.39.5) 2910 0 R (section.39.6) 2914 0 R (section.39.7) 2918 0 R (section.39.8) 2922 0 R (section.39.9) 2926 0 R (section.4.1) 110 0 R (section.4.2) 114 0 R (section.4.3) 118 0 R (section.4.4) 162 0 R (section.4.5) 166 0 R (section.40.1) 2942 0 R (section.41.1) 2950 0 R (section.41.2) 2954 0 R (section.5.1) 190 0 R (section.5.2) 194 0 R (section.5.3) 206 0 R (section.5.4) 210 0 R (section.5.5) 214 0 R (section.5.6) 238 0 R (section.6.1) 274 0 R (section.6.2) 278 0 R (section.6.3) 302 0 R (section.6.4) 310 0 R (section.7.1) 334 0 R (section.7.2) 338 0 R (section.7.3) 370 0 R (section.7.4) 382 0 R (section.7.5) 414 0 R (section.8.1) 434 0 R (section.8.2) 438 0 R (section.8.3) 442 0 R (section.8.4) 454 0 R (section.9.1) 462 0 R (securing-samba) 3093 0 R (small1) 5502 0 R (small10) 5647 0 R (small11) 5693 0 R (small12) 5702 0 R (small13) 5714 0 R (small14) 5815 0 R (small2) 5518 0 R (small3) 5522 0 R (small4) 5566 0 R (small5) 5570 0 R (small6) 5582 0 R (small7) 5592 0 R (small8) 5604 0 R (small9) 5612 0 R (speed) 3174 0 R (subfigure.10.1.1) 4606 0 R (subfigure.11.1.1) 4659 0 R (subfigure.12.1.1) 4805 0 R (subfigure.13.1.1) 4872 0 R (subfigure.16.1.1) 5115 0 R (subfigure.19.1.1) 5503 0 R (subfigure.19.10.1) 5648 0 R (subfigure.19.11.1) 5660 0 R (subfigure.19.12.1) 5669 0 R (subfigure.19.13.1) 5694 0 R (subfigure.19.14.1) 5703 0 R (subfigure.19.15.1) 5715 0 R (subfigure.19.16.1) 5816 0 R (subfigure.19.17.1) 6057 0 R (subfigure.19.18.1) 6122 0 R (subfigure.19.19.1) 6129 0 R (subfigure.19.2.1) 5519 0 R (subfigure.19.3.1) 5523 0 R (subfigure.19.4.1) 5567 0 R (subfigure.19.5.1) 5571 0 R (subfigure.19.6.1) 5583 0 R (subfigure.19.7.1) 5593 0 R (subfigure.19.8.1) 5605 0 R (subfigure.19.9.1) 5613 0 R (subfigure.5.1.1) 4290 0 R (subsection.10.3.1) 486 0 R (subsection.10.3.2) 490 0 R (subsection.10.3.3) 494 0 R (subsection.10.4.1) 502 0 R (subsection.10.4.2) 506 0 R (subsection.10.4.3) 510 0 R (subsection.10.4.4) 514 0 R (subsection.10.4.5) 518 0 R (subsection.10.4.6) 522 0 R (subsection.10.4.7) 526 0 R (subsection.10.4.8) 530 0 R (subsection.10.5.1) 538 0 R (subsection.10.5.2) 542 0 R (subsection.10.5.3) 546 0 R (subsection.10.6.1) 554 0 R (subsection.10.6.2) 558 0 R (subsection.10.7.1) 566 0 R (subsection.10.7.2) 570 0 R (subsection.10.7.3) 574 0 R (subsection.10.8.1) 586 0 R (subsection.10.8.2) 590 0 R (subsection.10.8.3) 594 0 R (subsection.11.1.1) 606 0 R (subsection.11.1.2) 610 0 R (subsection.11.2.1) 618 0 R (subsection.11.2.2) 630 0 R (subsection.11.2.3) 634 0 R (subsection.11.3.1) 642 0 R (subsection.11.3.2) 646 0 R (subsection.11.4.1) 654 0 R (subsection.11.4.2) 658 0 R (subsection.11.4.3) 662 0 R (subsection.11.4.4) 666 0 R (subsection.11.4.5) 710 0 R (subsection.11.4.6) 730 0 R (subsection.11.5.1) 738 0 R (subsection.11.5.2) 742 0 R (subsection.11.5.3) 746 0 R (subsection.12.2.1) 762 0 R (subsection.12.3.1) 770 0 R (subsection.12.3.2) 774 0 R (subsection.12.4.1) 782 0 R (subsection.12.4.2) 786 0 R (subsection.12.4.3) 790 0 R (subsection.13.2.1) 806 0 R (subsection.13.2.2) 810 0 R (subsection.13.2.3) 814 0 R (subsection.13.3.1) 822 0 R (subsection.13.3.2) 826 0 R (subsection.13.3.3) 830 0 R (subsection.13.4.1) 838 0 R (subsection.13.5.1) 854 0 R (subsection.13.5.2) 858 0 R (subsection.13.5.3) 862 0 R (subsection.13.5.4) 866 0 R (subsection.13.5.5) 878 0 R (subsection.13.5.6) 882 0 R (subsection.13.5.7) 886 0 R (subsection.13.6.1) 894 0 R (subsection.13.6.2) 898 0 R (subsection.13.6.3) 902 0 R (subsection.14.2.1) 918 0 R (subsection.14.3.1) 962 0 R (subsection.14.4.1) 978 0 R (subsection.14.4.2) 982 0 R (subsection.14.6.1) 994 0 R (subsection.14.6.2) 998 0 R (subsection.14.6.3) 1002 0 R (subsection.15.3.1) 1026 0 R (subsection.15.3.2) 1030 0 R (subsection.15.3.3) 1034 0 R (subsection.15.3.4) 1038 0 R (subsection.15.3.5) 1042 0 R (subsection.15.3.6) 1046 0 R (subsection.15.5.1) 1058 0 R (subsection.15.5.2) 1062 0 R (subsection.16.3.1) 1082 0 R (subsection.16.3.2) 1086 0 R (subsection.16.3.3) 1090 0 R (subsection.16.4.1) 1098 0 R (subsection.16.4.2) 1102 0 R (subsection.18.10.1) 1322 0 R (subsection.18.10.2) 1326 0 R (subsection.18.10.3) 1330 0 R (subsection.18.10.4) 1334 0 R (subsection.18.15.1) 1358 0 R (subsection.18.15.2) 1362 0 R (subsection.18.2.1) 1138 0 R (subsection.18.2.2) 1142 0 R (subsection.18.2.3) 1146 0 R (subsection.18.3.1) 1154 0 R (subsection.18.3.2) 1158 0 R (subsection.18.5.1) 1170 0 R (subsection.18.5.2) 1174 0 R (subsection.18.5.3) 1178 0 R (subsection.18.5.4) 1182 0 R (subsection.18.5.5) 1186 0 R (subsection.18.5.6) 1190 0 R (subsection.18.6.1) 1198 0 R (subsection.18.6.2) 1202 0 R (subsection.18.6.3) 1206 0 R (subsection.18.6.4) 1210 0 R (subsection.18.6.5) 1214 0 R (subsection.18.7.1) 1222 0 R (subsection.18.7.2) 1226 0 R (subsection.18.8.1) 1270 0 R (subsection.18.8.2) 1274 0 R (subsection.18.8.3) 1278 0 R (subsection.18.8.4) 1282 0 R (subsection.18.9.1) 1290 0 R (subsection.18.9.2) 1294 0 R (subsection.18.9.3) 1298 0 R (subsection.18.9.4) 1302 0 R (subsection.18.9.5) 1306 0 R (subsection.18.9.6) 1310 0 R (subsection.18.9.7) 1314 0 R (subsection.19.1.1) 1374 0 R (subsection.19.1.2) 1378 0 R (subsection.19.10.1) 1602 0 R (subsection.19.10.10) 1638 0 R (subsection.19.10.11) 1642 0 R (subsection.19.10.12) 1646 0 R (subsection.19.10.13) 1650 0 R (subsection.19.10.14) 1654 0 R (subsection.19.10.15) 1658 0 R (subsection.19.10.16) 1662 0 R (subsection.19.10.2) 1606 0 R (subsection.19.10.3) 1610 0 R (subsection.19.10.4) 1614 0 R (subsection.19.10.5) 1618 0 R (subsection.19.10.6) 1622 0 R (subsection.19.10.7) 1626 0 R (subsection.19.10.8) 1630 0 R (subsection.19.10.9) 1634 0 R (subsection.19.11.1) 1670 0 R (subsection.19.11.2) 1674 0 R (subsection.19.11.3) 1678 0 R (subsection.19.11.4) 1682 0 R (subsection.19.11.5) 1686 0 R (subsection.19.11.6) 1690 0 R (subsection.19.12.1) 1698 0 R (subsection.19.12.2) 1702 0 R (subsection.19.12.3) 1706 0 R (subsection.19.12.4) 1710 0 R (subsection.19.13.1) 1718 0 R (subsection.19.13.2) 1754 0 R (subsection.19.14.1) 1762 0 R (subsection.19.14.2) 1766 0 R (subsection.19.14.3) 1770 0 R (subsection.19.14.4) 1774 0 R (subsection.19.14.5) 1778 0 R (subsection.19.14.6) 1782 0 R (subsection.19.14.7) 1786 0 R (subsection.19.16.1) 1798 0 R (subsection.19.16.2) 1802 0 R (subsection.19.16.3) 1806 0 R (subsection.19.2.1) 1386 0 R (subsection.19.2.2) 1390 0 R (subsection.19.2.3) 1394 0 R (subsection.19.20.1) 1826 0 R (subsection.19.20.10) 1862 0 R (subsection.19.20.11) 1866 0 R (subsection.19.20.12) 1870 0 R (subsection.19.20.13) 1874 0 R (subsection.19.20.14) 1878 0 R (subsection.19.20.15) 1882 0 R (subsection.19.20.16) 1886 0 R (subsection.19.20.17) 1890 0 R (subsection.19.20.18) 1894 0 R (subsection.19.20.19) 1898 0 R (subsection.19.20.2) 1830 0 R (subsection.19.20.3) 1834 0 R (subsection.19.20.4) 1838 0 R (subsection.19.20.5) 1842 0 R (subsection.19.20.6) 1846 0 R (subsection.19.20.7) 1850 0 R (subsection.19.20.8) 1854 0 R (subsection.19.20.9) 1858 0 R (subsection.19.3.1) 1402 0 R (subsection.19.3.2) 1406 0 R (subsection.19.3.3) 1410 0 R (subsection.19.3.4) 1414 0 R (subsection.19.3.5) 1418 0 R (subsection.19.4.1) 1426 0 R (subsection.19.4.2) 1430 0 R (subsection.19.4.3) 1434 0 R (subsection.19.4.4) 1438 0 R (subsection.19.4.5) 1442 0 R (subsection.19.4.6) 1446 0 R (subsection.19.4.7) 1450 0 R (subsection.19.4.8) 1454 0 R (subsection.19.5.1) 1462 0 R (subsection.19.5.10) 1498 0 R (subsection.19.5.11) 1502 0 R (subsection.19.5.12) 1506 0 R (subsection.19.5.13) 1510 0 R (subsection.19.5.14) 1514 0 R (subsection.19.5.15) 1518 0 R (subsection.19.5.16) 1522 0 R (subsection.19.5.17) 1526 0 R (subsection.19.5.18) 1530 0 R (subsection.19.5.19) 1534 0 R (subsection.19.5.2) 1466 0 R (subsection.19.5.3) 1470 0 R (subsection.19.5.4) 1474 0 R (subsection.19.5.5) 1478 0 R (subsection.19.5.6) 1482 0 R (subsection.19.5.7) 1486 0 R (subsection.19.5.8) 1490 0 R (subsection.19.5.9) 1494 0 R (subsection.19.6.1) 1542 0 R (subsection.19.6.2) 1546 0 R (subsection.19.6.3) 1550 0 R (subsection.19.7.1) 1558 0 R (subsection.19.7.2) 1562 0 R (subsection.19.8.1) 1570 0 R (subsection.19.8.2) 1574 0 R (subsection.19.9.1) 1582 0 R (subsection.19.9.2) 1586 0 R (subsection.19.9.3) 1590 0 R (subsection.19.9.4) 1594 0 R (subsection.2.2.1) 50 0 R (subsection.2.2.2) 58 0 R (subsection.2.7.1) 82 0 R (subsection.2.7.2) 86 0 R (subsection.2.7.3) 90 0 R (subsection.20.3.1) 1922 0 R (subsection.20.3.2) 1926 0 R (subsection.20.3.3) 1930 0 R (subsection.20.3.4) 1934 0 R (subsection.20.3.5) 1938 0 R (subsection.20.4.1) 1946 0 R (subsection.20.4.2) 1950 0 R (subsection.21.3.1) 1970 0 R (subsection.21.4.1) 1978 0 R (subsection.21.4.2) 1982 0 R (subsection.21.4.3) 1986 0 R (subsection.21.4.4) 1990 0 R (subsection.21.4.5) 1994 0 R (subsection.21.4.6) 1998 0 R (subsection.21.5.1) 2006 0 R (subsection.21.5.2) 2010 0 R (subsection.21.5.3) 2014 0 R (subsection.21.7.1) 2054 0 R (subsection.22.3.1) 2074 0 R (subsection.22.4.1) 2082 0 R (subsection.23.2.1) 2102 0 R (subsection.23.2.2) 2106 0 R (subsection.23.2.3) 2114 0 R (subsection.23.3.1) 2126 0 R (subsection.23.3.2) 2130 0 R (subsection.23.3.3) 2134 0 R (subsection.23.5.1) 2146 0 R (subsection.24.2.1) 2162 0 R (subsection.24.2.2) 2182 0 R (subsection.24.2.3) 2198 0 R (subsection.24.2.4) 2202 0 R (subsection.24.5.1) 2234 0 R (subsection.24.5.2) 2242 0 R (subsection.24.5.3) 2246 0 R (subsection.24.6.1) 2254 0 R (subsection.24.6.2) 2258 0 R (subsection.24.6.3) 2262 0 R (subsection.25.2.1) 2278 0 R (subsection.25.2.2) 2286 0 R (subsection.25.2.3) 2298 0 R (subsection.25.2.4) 2302 0 R (subsection.25.2.5) 2306 0 R (subsection.25.3.1) 2330 0 R (subsection.25.3.2) 2334 0 R (subsection.26.3.1) 2354 0 R (subsection.26.3.2) 2358 0 R (subsection.26.3.3) 2362 0 R (subsection.26.3.4) 2366 0 R (subsection.26.4.1) 2374 0 R (subsection.26.4.2) 2378 0 R (subsection.26.4.3) 2382 0 R (subsection.26.4.4) 2386 0 R (subsection.26.4.5) 2390 0 R (subsection.26.5.1) 2398 0 R (subsection.26.5.2) 2402 0 R (subsection.26.5.3) 2406 0 R (subsection.27.6.1) 2438 0 R (subsection.30.2.1) 2478 0 R (subsection.30.2.2) 2482 0 R (subsection.30.2.3) 2486 0 R (subsection.30.3.1) 2494 0 R (subsection.30.3.2) 2498 0 R (subsection.30.3.3) 2502 0 R (subsection.30.3.4) 2506 0 R (subsection.30.3.5) 2510 0 R (subsection.30.3.6) 2514 0 R (subsection.31.1.1) 2538 0 R (subsection.31.1.2) 2562 0 R (subsection.31.2.1) 2570 0 R (subsection.31.2.2) 2574 0 R (subsection.32.1.1) 2586 0 R (subsection.32.1.10) 2622 0 R (subsection.32.1.2) 2590 0 R (subsection.32.1.3) 2594 0 R (subsection.32.1.4) 2598 0 R (subsection.32.1.5) 2602 0 R (subsection.32.1.6) 2606 0 R (subsection.32.1.7) 2610 0 R (subsection.32.1.8) 2614 0 R (subsection.32.1.9) 2618 0 R (subsection.34.1.1) 2654 0 R (subsection.34.1.2) 2658 0 R (subsection.34.1.3) 2662 0 R (subsection.34.1.4) 2666 0 R (subsection.36.1.1) 2730 0 R (subsection.36.1.2) 2734 0 R (subsection.36.4.1) 2758 0 R (subsection.36.5.1) 2774 0 R (subsection.36.5.2) 2778 0 R (subsection.37.5.1) 2806 0 R (subsection.37.6.1) 2814 0 R (subsection.37.6.2) 2818 0 R (subsection.38.2.1) 2834 0 R (subsection.38.2.2) 2838 0 R (subsection.38.2.3) 2842 0 R (subsection.38.3.1) 2850 0 R (subsection.38.3.2) 2854 0 R (subsection.38.3.3) 2858 0 R (subsection.38.3.4) 2862 0 R (subsection.38.3.5) 2866 0 R (subsection.38.3.6) 2870 0 R (subsection.38.4.1) 2878 0 R (subsection.4.3.1) 122 0 R (subsection.4.3.2) 130 0 R (subsection.4.3.3) 138 0 R (subsection.4.3.4) 146 0 R (subsection.4.3.5) 154 0 R (subsection.4.5.1) 170 0 R (subsection.4.5.2) 174 0 R (subsection.4.5.3) 178 0 R (subsection.4.5.4) 182 0 R (subsection.5.2.1) 198 0 R (subsection.5.2.2) 202 0 R (subsection.5.5.1) 218 0 R (subsection.5.5.2) 234 0 R (subsection.5.6.1) 242 0 R (subsection.5.6.2) 246 0 R (subsection.5.6.3) 250 0 R (subsection.5.6.4) 254 0 R (subsection.5.6.5) 258 0 R (subsection.5.6.6) 262 0 R (subsection.5.6.7) 266 0 R (subsection.6.2.1) 282 0 R (subsection.6.2.2) 290 0 R (subsection.6.2.3) 294 0 R (subsection.6.2.4) 298 0 R (subsection.6.3.1) 306 0 R (subsection.6.4.1) 314 0 R (subsection.6.4.2) 318 0 R (subsection.6.4.3) 322 0 R (subsection.6.4.4) 326 0 R (subsection.7.2.1) 342 0 R (subsection.7.2.2) 346 0 R (subsection.7.2.3) 350 0 R (subsection.7.2.4) 354 0 R (subsection.7.3.1) 374 0 R (subsection.7.3.2) 378 0 R (subsection.7.4.1) 386 0 R (subsection.7.4.2) 390 0 R (subsection.7.4.3) 394 0 R (subsection.7.4.4) 402 0 R (subsection.7.4.5) 406 0 R (subsection.7.4.6) 410 0 R (subsection.7.5.1) 418 0 R (subsection.7.5.2) 422 0 R (subsection.7.5.3) 426 0 R (subsection.8.3.1) 446 0 R (subsection.8.3.2) 450 0 R (subsubsection.10.7.3.1) 578 0 R (subsubsection.11.2.1.1) 622 0 R (subsubsection.11.2.1.2) 626 0 R (subsubsection.11.4.4.1) 670 0 R (subsubsection.11.4.4.10) 706 0 R (subsubsection.11.4.4.2) 674 0 R (subsubsection.11.4.4.3) 678 0 R (subsubsection.11.4.4.4) 682 0 R (subsubsection.11.4.4.5) 686 0 R (subsubsection.11.4.4.6) 690 0 R (subsubsection.11.4.4.7) 694 0 R (subsubsection.11.4.4.8) 698 0 R (subsubsection.11.4.4.9) 702 0 R (subsubsection.11.4.5.1) 714 0 R (subsubsection.11.4.5.2) 718 0 R (subsubsection.11.4.5.3) 722 0 R (subsubsection.11.4.5.4) 726 0 R (subsubsection.13.4.1.1) 842 0 R (subsubsection.13.4.1.2) 846 0 R (subsubsection.13.5.4.1) 870 0 R (subsubsection.13.5.4.2) 874 0 R (subsubsection.14.2.1.1) 922 0 R (subsubsection.14.2.1.2) 926 0 R (subsubsection.14.2.1.3) 930 0 R (subsubsection.14.2.1.4) 934 0 R (subsubsection.14.2.1.5) 938 0 R (subsubsection.14.2.1.6) 942 0 R (subsubsection.14.2.1.7) 946 0 R (subsubsection.14.2.1.8) 950 0 R (subsubsection.14.2.1.9) 954 0 R (subsubsection.14.3.1.1) 966 0 R (subsubsection.14.3.1.2) 970 0 R (subsubsection.18.7.2.1) 1230 0 R (subsubsection.18.7.2.2) 1234 0 R (subsubsection.18.7.2.3) 1238 0 R (subsubsection.18.7.2.4) 1242 0 R (subsubsection.18.7.2.5) 1246 0 R (subsubsection.18.7.2.6) 1250 0 R (subsubsection.18.7.2.7) 1254 0 R (subsubsection.18.7.2.8) 1258 0 R (subsubsection.18.7.2.9) 1262 0 R (subsubsection.19.13.1.1) 1722 0 R (subsubsection.19.13.1.2) 1726 0 R (subsubsection.19.13.1.3) 1730 0 R (subsubsection.19.13.1.4) 1734 0 R (subsubsection.19.13.1.5) 1738 0 R (subsubsection.19.13.1.6) 1742 0 R (subsubsection.19.13.1.7) 1746 0 R (subsubsection.19.13.1.8) 1750 0 R (subsubsection.2.2.1.1) 54 0 R (subsubsection.21.5.3.1) 2018 0 R (subsubsection.21.5.3.2) 2022 0 R (subsubsection.21.5.3.3) 2026 0 R (subsubsection.21.5.3.4) 2030 0 R (subsubsection.21.5.3.5) 2034 0 R (subsubsection.21.5.3.6) 2038 0 R (subsubsection.21.5.3.7) 2042 0 R (subsubsection.23.2.2.1) 2110 0 R (subsubsection.23.2.3.1) 2118 0 R (subsubsection.24.2.1.1) 2166 0 R (subsubsection.24.2.1.2) 2170 0 R (subsubsection.24.2.1.3) 2174 0 R (subsubsection.24.2.1.4) 2178 0 R (subsubsection.24.2.2.1) 2186 0 R (subsubsection.24.2.2.2) 2190 0 R (subsubsection.24.2.2.3) 2194 0 R (subsubsection.24.2.4.1) 2206 0 R (subsubsection.24.2.4.2) 2210 0 R (subsubsection.24.2.4.3) 2214 0 R (subsubsection.24.2.4.4) 2218 0 R (subsubsection.24.5.1.1) 2238 0 R (subsubsection.25.2.1.1) 2282 0 R (subsubsection.25.2.2.1) 2290 0 R (subsubsection.25.2.2.2) 2294 0 R (subsubsection.25.2.5.1) 2310 0 R (subsubsection.25.2.5.2) 2314 0 R (subsubsection.25.2.5.3) 2318 0 R (subsubsection.25.2.5.4) 2322 0 R (subsubsection.30.3.6.1) 2518 0 R (subsubsection.30.3.6.2) 2522 0 R (subsubsection.30.3.6.3) 2526 0 R (subsubsection.31.1.1.1) 2542 0 R (subsubsection.31.1.1.2) 2546 0 R (subsubsection.31.1.1.3) 2550 0 R (subsubsection.31.1.1.4) 2554 0 R (subsubsection.31.1.1.5) 2558 0 R (subsubsection.34.1.4.1) 2670 0 R (subsubsection.34.1.4.2) 2674 0 R (subsubsection.36.1.2.1) 2738 0 R (subsubsection.36.1.2.2) 2742 0 R (subsubsection.36.4.1.1) 2762 0 R (subsubsection.36.4.1.2) 2766 0 R (subsubsection.4.3.1.1) 126 0 R (subsubsection.4.3.2.1) 134 0 R (subsubsection.4.3.3.1) 142 0 R (subsubsection.4.3.4.1) 150 0 R (subsubsection.4.3.5.1) 158 0 R (subsubsection.5.5.1.1) 222 0 R (subsubsection.5.5.1.2) 226 0 R (subsubsection.5.5.1.3) 230 0 R (subsubsection.6.2.1.1) 286 0 R (subsubsection.7.2.4.1) 358 0 R (subsubsection.7.2.4.2) 362 0 R (subsubsection.7.2.4.3) 366 0 R (subsubsection.7.4.3.1) 398 0 R (table.10.1) 4609 0 R (table.10.2) 4615 0 R (table.10.3) 4617 0 R (table.10.4) 4619 0 R (table.11.1) 4756 0 R (table.11.2) 4771 0 R (table.11.3) 4777 0 R (table.13.1) 4863 0 R (table.13.2) 4883 0 R (table.13.3) 4891 0 R (table.13.4) 4893 0 R (table.19.1) 5639 0 R (table.20.1) 6151 0 R (table.24.1) 6508 0 R (table.24.2) 6510 0 R (table.24.3) 6522 0 R (table.25.1) 6594 0 R (table.26.1) 6651 0 R (table.26.2) 6653 0 R (table.30.1) 6773 0 R (table.31.1) 6841 0 R (table.31.2) 6849 0 R (table.7.1) 4393 0 R (troubleshooting) 6901 0 R (trusts1) 5114 0 R (type) 4083 0 R (unicode) 3132 0 R (upgrading-to-3.0) 3135 0 R (winbind) 4128 0 R (winbind-solaris9) 6247 0 R]
/Limits [(AccessControls) (winbind-solaris9)]
>> endobj
-6737 0 obj <<
-/Kids [6736 0 R]
+7257 0 obj <<
+/Kids [7256 0 R]
>> endobj
-6738 0 obj <<
-/Dests 6737 0 R
+7258 0 obj <<
+/Dests 7257 0 R
>> endobj
-6739 0 obj <<
+7259 0 obj <<
/Type /Catalog
-/Pages 6734 0 R
-/Outlines 6735 0 R
-/Names 6738 0 R
+/Pages 7254 0 R
+/Outlines 7255 0 R
+/Names 7258 0 R
/PageMode /UseOutlines /URI<</Base()>> /ViewerPreferences<<>>
-/OpenAction 2857 0 R
-/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10a)
+/OpenAction 2957 0 R
+/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10b)
>> endobj
-6740 0 obj <<
-/Producer (pdfTeX-1.10a)
-/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10a)/Keywords()
-/Creator (TeX)
-/CreationDate (D:20030715231600)
+7260 0 obj <<
+/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10b)/Keywords()
+/CreationDate (D:20030815195700)
>> endobj
xref
-0 6741
+0 7261
0000000001 65535 f
0000000002 00000 f
0000000003 00000 f
0000000004 00000 f
0000000000 00000 f
0000000009 00000 n
-0000272800 00000 n
-0002193172 00000 n
+0000304651 00000 n
+0002541919 00000 n
0000000051 00000 n
0000000091 00000 n
-0000276621 00000 n
-0002193063 00000 n
+0000307949 00000 n
+0002541810 00000 n
0000000136 00000 n
0000000178 00000 n
-0000276745 00000 n
-0002192989 00000 n
+0000308073 00000 n
+0002541736 00000 n
0000000226 00000 n
0000000259 00000 n
-0000276867 00000 n
-0002192902 00000 n
+0000311976 00000 n
+0002541649 00000 n
0000000307 00000 n
0000000341 00000 n
-0000281348 00000 n
-0002192815 00000 n
+0000316031 00000 n
+0002541562 00000 n
0000000389 00000 n
0000000428 00000 n
-0000286422 00000 n
-0002192728 00000 n
+0000316155 00000 n
+0002541475 00000 n
0000000476 00000 n
0000000514 00000 n
-0000286546 00000 n
-0002192641 00000 n
+0000320252 00000 n
+0002541388 00000 n
0000000562 00000 n
0000000593 00000 n
-0000288690 00000 n
-0002192567 00000 n
+0000320376 00000 n
+0002541314 00000 n
0000000641 00000 n
0000000677 00000 n
-0000292235 00000 n
-0002192444 00000 n
+0000323526 00000 n
+0002541191 00000 n
0000000723 00000 n
0000000773 00000 n
-0000292359 00000 n
-0002192370 00000 n
+0000323650 00000 n
+0002541117 00000 n
0000000821 00000 n
0000000874 00000 n
-0000292482 00000 n
-0002192246 00000 n
+0000323774 00000 n
+0002540993 00000 n
0000000922 00000 n
0000000975 00000 n
-0000292606 00000 n
-0002192135 00000 n
+0000323898 00000 n
+0002540882 00000 n
0000001028 00000 n
0000001074 00000 n
-0000292730 00000 n
-0002192074 00000 n
+0000327472 00000 n
+0002540821 00000 n
0000001132 00000 n
0000001194 00000 n
-0000296871 00000 n
-0002192000 00000 n
+0000327595 00000 n
+0002540747 00000 n
0000001247 00000 n
0000001276 00000 n
-0000296995 00000 n
-0002191913 00000 n
+0000327718 00000 n
+0002540660 00000 n
0000001324 00000 n
0000001394 00000 n
-0000297118 00000 n
-0002191826 00000 n
+0000330142 00000 n
+0002540573 00000 n
0000001442 00000 n
0000001500 00000 n
-0000297242 00000 n
-0002191739 00000 n
+0000330266 00000 n
+0002540486 00000 n
0000001548 00000 n
-0000001644 00000 n
-0000297366 00000 n
-0002191652 00000 n
-0000001692 00000 n
-0000001741 00000 n
-0000300168 00000 n
-0002191541 00000 n
-0000001789 00000 n
-0000001825 00000 n
-0000300292 00000 n
-0002191467 00000 n
-0000001878 00000 n
-0000001948 00000 n
-0000301418 00000 n
-0002191393 00000 n
-0000002001 00000 n
-0000002160 00000 n
-0000302295 00000 n
-0002191283 00000 n
-0000002206 00000 n
-0000002255 00000 n
-0000302419 00000 n
-0002191222 00000 n
-0000002303 00000 n
-0000002330 00000 n
-0000303136 00000 n
-0002191093 00000 n
-0000002373 00000 n
-0000002423 00000 n
-0000306555 00000 n
-0002190976 00000 n
-0000002470 00000 n
-0000002523 00000 n
-0000306680 00000 n
-0002190897 00000 n
-0000002572 00000 n
-0000002617 00000 n
-0000306805 00000 n
-0002190804 00000 n
-0000002666 00000 n
-0000002702 00000 n
-0000310863 00000 n
-0002190672 00000 n
-0000002751 00000 n
-0000002795 00000 n
-0000310987 00000 n
-0002190554 00000 n
-0000002849 00000 n
-0000002894 00000 n
-0000314487 00000 n
-0002190489 00000 n
-0000002953 00000 n
-0000003002 00000 n
-0000314612 00000 n
-0002190357 00000 n
-0000003056 00000 n
-0000003102 00000 n
-0000314737 00000 n
-0002190292 00000 n
-0000003161 00000 n
-0000003210 00000 n
-0000314862 00000 n
-0002190160 00000 n
-0000003264 00000 n
-0000003334 00000 n
-0000314987 00000 n
-0002190095 00000 n
-0000003393 00000 n
-0000003442 00000 n
-0000320408 00000 n
-0002189963 00000 n
-0000003496 00000 n
-0000003563 00000 n
-0000324078 00000 n
-0002189898 00000 n
-0000003622 00000 n
-0000003671 00000 n
-0000324203 00000 n
-0002189780 00000 n
-0000003725 00000 n
-0000003790 00000 n
-0000327847 00000 n
-0002189715 00000 n
-0000003849 00000 n
-0000003898 00000 n
-0000327972 00000 n
-0002189622 00000 n
-0000003947 00000 n
-0000004007 00000 n
-0000331905 00000 n
-0002189504 00000 n
-0000004056 00000 n
-0000004093 00000 n
-0000332030 00000 n
-0002189425 00000 n
-0000004147 00000 n
-0000004199 00000 n
-0000334568 00000 n
-0002189332 00000 n
-0000004253 00000 n
-0000004316 00000 n
-0000334692 00000 n
-0002189239 00000 n
-0000004370 00000 n
-0000004429 00000 n
-0000334817 00000 n
-0002189160 00000 n
-0000004483 00000 n
-0000004557 00000 n
-0000338495 00000 n
-0002189029 00000 n
-0000004604 00000 n
-0000004640 00000 n
-0000338620 00000 n
-0002188950 00000 n
-0000004689 00000 n
-0000004734 00000 n
-0000347147 00000 n
-0002188818 00000 n
-0000004783 00000 n
-0000004831 00000 n
-0000347272 00000 n
-0002188739 00000 n
-0000004885 00000 n
-0000004934 00000 n
-0000351642 00000 n
-0002188660 00000 n
-0000004988 00000 n
-0000005042 00000 n
-0000359798 00000 n
-0002188567 00000 n
-0000005091 00000 n
-0000005153 00000 n
-0000364252 00000 n
-0002188474 00000 n
-0000005202 00000 n
-0000005250 00000 n
-0000364375 00000 n
-0002188342 00000 n
-0000005299 00000 n
-0000005361 00000 n
-0000364500 00000 n
-0002188224 00000 n
-0000005415 00000 n
-0000005469 00000 n
-0000364625 00000 n
-0002188145 00000 n
-0000005528 00000 n
-0000005577 00000 n
-0000368206 00000 n
-0002188052 00000 n
-0000005636 00000 n
-0000005710 00000 n
-0000368331 00000 n
-0002187973 00000 n
-0000005769 00000 n
-0000005832 00000 n
-0000373236 00000 n
-0002187894 00000 n
-0000005886 00000 n
-0000005945 00000 n
-0000377086 00000 n
-0002187776 00000 n
-0000005994 00000 n
-0000006044 00000 n
-0000377210 00000 n
-0002187697 00000 n
-0000006098 00000 n
-0000006167 00000 n
-0000377335 00000 n
-0002187604 00000 n
-0000006221 00000 n
-0000006428 00000 n
-0000377460 00000 n
-0002187511 00000 n
-0000006482 00000 n
-0000006554 00000 n
-0000379964 00000 n
-0002187418 00000 n
-0000006608 00000 n
-0000006721 00000 n
-0000380089 00000 n
-0002187325 00000 n
-0000006775 00000 n
-0000006919 00000 n
-0000380214 00000 n
-0002187246 00000 n
-0000006973 00000 n
-0000007097 00000 n
-0000384299 00000 n
-0002187115 00000 n
-0000007144 00000 n
-0000007187 00000 n
-0000384424 00000 n
-0002187036 00000 n
-0000007236 00000 n
-0000007281 00000 n
-0000388401 00000 n
-0002186904 00000 n
-0000007330 00000 n
-0000007386 00000 n
-0000388526 00000 n
-0002186786 00000 n
-0000007440 00000 n
-0000007501 00000 n
-0000392711 00000 n
-0002186721 00000 n
-0000007560 00000 n
-0000007613 00000 n
-0000392836 00000 n
-0002186628 00000 n
-0000007667 00000 n
-0000007724 00000 n
-0000392961 00000 n
-0002186535 00000 n
-0000007778 00000 n
-0000007854 00000 n
-0000396810 00000 n
-0002186456 00000 n
-0000007908 00000 n
-0000007984 00000 n
-0000396935 00000 n
-0002186324 00000 n
-0000008033 00000 n
-0000008095 00000 n
-0000397060 00000 n
-0002186259 00000 n
-0000008149 00000 n
-0000008196 00000 n
-0000400851 00000 n
-0002186141 00000 n
-0000008245 00000 n
-0000008282 00000 n
-0000400976 00000 n
-0002186062 00000 n
-0000008336 00000 n
-0000008408 00000 n
-0000401100 00000 n
-0002185969 00000 n
-0000008462 00000 n
-0000008542 00000 n
-0000401225 00000 n
-0002185876 00000 n
-0000008596 00000 n
+0000001609 00000 n
+0000330390 00000 n
+0002540399 00000 n
+0000001657 00000 n
+0000001706 00000 n
+0000330514 00000 n
+0002540288 00000 n
+0000001754 00000 n
+0000001790 00000 n
+0000333145 00000 n
+0002540214 00000 n
+0000001843 00000 n
+0000001898 00000 n
+0000333269 00000 n
+0002540127 00000 n
+0000001951 00000 n
+0000002086 00000 n
+0000333393 00000 n
+0002540053 00000 n
+0000002139 00000 n
+0000002198 00000 n
+0000334296 00000 n
+0002539943 00000 n
+0000002244 00000 n
+0000002293 00000 n
+0000334420 00000 n
+0002539881 00000 n
+0000002341 00000 n
+0000002369 00000 n
+0000335151 00000 n
+0002539750 00000 n
+0000002413 00000 n
+0000002463 00000 n
+0000338333 00000 n
+0002539632 00000 n
+0000002510 00000 n
+0000002563 00000 n
+0000338458 00000 n
+0002539553 00000 n
+0000002612 00000 n
+0000002657 00000 n
+0000341832 00000 n
+0002539460 00000 n
+0000002706 00000 n
+0000002742 00000 n
+0000341956 00000 n
+0002539328 00000 n
+0000002791 00000 n
+0000002835 00000 n
+0000345568 00000 n
+0002539210 00000 n
+0000002889 00000 n
+0000002934 00000 n
+0000345819 00000 n
+0002539145 00000 n
+0000002993 00000 n
+0000003042 00000 n
+0000345943 00000 n
+0002539013 00000 n
+0000003096 00000 n
+0000003142 00000 n
+0000348657 00000 n
+0002538948 00000 n
+0000003201 00000 n
+0000003250 00000 n
+0000348782 00000 n
+0002538816 00000 n
+0000003304 00000 n
+0000003374 00000 n
+0000348907 00000 n
+0002538751 00000 n
+0000003433 00000 n
+0000003482 00000 n
+0000353974 00000 n
+0002538619 00000 n
+0000003536 00000 n
+0000003603 00000 n
+0000354099 00000 n
+0002538554 00000 n
+0000003662 00000 n
+0000003711 00000 n
+0000357531 00000 n
+0002538436 00000 n
+0000003765 00000 n
+0000003830 00000 n
+0000361053 00000 n
+0002538371 00000 n
+0000003889 00000 n
+0000003938 00000 n
+0000361178 00000 n
+0002538278 00000 n
+0000003987 00000 n
+0000004028 00000 n
+0000364954 00000 n
+0002538160 00000 n
+0000004077 00000 n
+0000004114 00000 n
+0000367906 00000 n
+0002538081 00000 n
+0000004168 00000 n
+0000004220 00000 n
+0000368031 00000 n
+0002537988 00000 n
+0000004274 00000 n
+0000004337 00000 n
+0000368155 00000 n
+0002537895 00000 n
+0000004391 00000 n
+0000004450 00000 n
+0000368280 00000 n
+0002537816 00000 n
+0000004504 00000 n
+0000004578 00000 n
+0000371334 00000 n
+0002537684 00000 n
+0000004625 00000 n
+0000004661 00000 n
+0000375453 00000 n
+0002537605 00000 n
+0000004710 00000 n
+0000004755 00000 n
+0000380020 00000 n
+0002537473 00000 n
+0000004804 00000 n
+0000004852 00000 n
+0000380145 00000 n
+0002537394 00000 n
+0000004906 00000 n
+0000004955 00000 n
+0000388331 00000 n
+0002537315 00000 n
+0000005009 00000 n
+0000005063 00000 n
+0000397008 00000 n
+0002537222 00000 n
+0000005112 00000 n
+0000005174 00000 n
+0000402970 00000 n
+0002537129 00000 n
+0000005223 00000 n
+0000005271 00000 n
+0000403095 00000 n
+0002536997 00000 n
+0000005320 00000 n
+0000005382 00000 n
+0000403220 00000 n
+0002536879 00000 n
+0000005436 00000 n
+0000005490 00000 n
+0000406460 00000 n
+0002536800 00000 n
+0000005549 00000 n
+0000005598 00000 n
+0000406585 00000 n
+0002536707 00000 n
+0000005657 00000 n
+0000005731 00000 n
+0000406710 00000 n
+0002536628 00000 n
+0000005790 00000 n
+0000005853 00000 n
+0000414818 00000 n
+0002536549 00000 n
+0000005907 00000 n
+0000005966 00000 n
+0000417974 00000 n
+0002536431 00000 n
+0000006015 00000 n
+0000006052 00000 n
+0000418099 00000 n
+0002536352 00000 n
+0000006106 00000 n
+0000006173 00000 n
+0000418224 00000 n
+0002536259 00000 n
+0000006227 00000 n
+0000006309 00000 n
+0000418349 00000 n
+0002536166 00000 n
+0000006363 00000 n
+0000006435 00000 n
+0000421325 00000 n
+0002536073 00000 n
+0000006489 00000 n
+0000006555 00000 n
+0000421450 00000 n
+0002535980 00000 n
+0000006609 00000 n
+0000006651 00000 n
+0000421574 00000 n
+0002535887 00000 n
+0000006705 00000 n
+0000006760 00000 n
+0000423595 00000 n
+0002535808 00000 n
+0000006814 00000 n
+0000006903 00000 n
+0000454481 00000 n
+0002535676 00000 n
+0000006950 00000 n
+0000006993 00000 n
+0000454606 00000 n
+0002535597 00000 n
+0000007042 00000 n
+0000007087 00000 n
+0000457844 00000 n
+0002535465 00000 n
+0000007136 00000 n
+0000007192 00000 n
+0000457969 00000 n
+0002535347 00000 n
+0000007246 00000 n
+0000007307 00000 n
+0000465504 00000 n
+0002535282 00000 n
+0000007366 00000 n
+0000007419 00000 n
+0000465756 00000 n
+0002535189 00000 n
+0000007473 00000 n
+0000007530 00000 n
+0000465881 00000 n
+0002535096 00000 n
+0000007584 00000 n
+0000007660 00000 n
+0000466006 00000 n
+0002535017 00000 n
+0000007714 00000 n
+0000007790 00000 n
+0000469482 00000 n
+0002534885 00000 n
+0000007839 00000 n
+0000007901 00000 n
+0000469607 00000 n
+0002534820 00000 n
+0000007955 00000 n
+0000008002 00000 n
+0000473137 00000 n
+0002534702 00000 n
+0000008051 00000 n
+0000008088 00000 n
+0000473261 00000 n
+0002534623 00000 n
+0000008142 00000 n
+0000008214 00000 n
+0000473385 00000 n
+0002534530 00000 n
+0000008268 00000 n
+0000008348 00000 n
+0000475595 00000 n
+0002534437 00000 n
+0000008402 00000 n
+0000008466 00000 n
+0000475720 00000 n
+0002534358 00000 n
+0000008520 00000 n
+0000008574 00000 n
+0000478630 00000 n
+0002534226 00000 n
+0000008621 00000 n
0000008660 00000 n
-0000402722 00000 n
-0002185797 00000 n
-0000008714 00000 n
-0000008768 00000 n
-0000406117 00000 n
-0002185666 00000 n
-0000008815 00000 n
-0000008854 00000 n
-0000406242 00000 n
-0002185587 00000 n
-0000008903 00000 n
-0000008948 00000 n
-0000406367 00000 n
-0002185455 00000 n
-0000008997 00000 n
-0000009073 00000 n
-0000410626 00000 n
-0002185376 00000 n
-0000009127 00000 n
-0000009194 00000 n
-0000415448 00000 n
-0002185283 00000 n
-0000009248 00000 n
-0000009336 00000 n
-0000419889 00000 n
-0002185190 00000 n
-0000009390 00000 n
-0000009463 00000 n
-0000420014 00000 n
-0002185072 00000 n
-0000009517 00000 n
-0000009601 00000 n
-0000420139 00000 n
-0002184993 00000 n
-0000009660 00000 n
-0000009716 00000 n
-0000420264 00000 n
-0002184900 00000 n
-0000009775 00000 n
-0000009814 00000 n
-0000420389 00000 n
-0002184821 00000 n
-0000009873 00000 n
-0000009906 00000 n
-0000424737 00000 n
-0002184689 00000 n
-0000009955 00000 n
-0000009999 00000 n
-0000424862 00000 n
-0002184610 00000 n
-0000010053 00000 n
-0000010118 00000 n
-0000429618 00000 n
-0002184531 00000 n
-0000010172 00000 n
-0000010240 00000 n
-0000432578 00000 n
-0002184399 00000 n
-0000010289 00000 n
-0000010340 00000 n
-0000432703 00000 n
-0002184320 00000 n
-0000010394 00000 n
-0000010439 00000 n
-0000432828 00000 n
-0002184227 00000 n
-0000010493 00000 n
-0000010544 00000 n
-0000436847 00000 n
-0002184095 00000 n
-0000010598 00000 n
-0000010651 00000 n
-0000436972 00000 n
-0002184030 00000 n
-0000010710 00000 n
-0000010753 00000 n
-0000437097 00000 n
-0002183937 00000 n
-0000010807 00000 n
-0000010855 00000 n
-0000440786 00000 n
-0002183844 00000 n
-0000010909 00000 n
-0000010957 00000 n
-0000440911 00000 n
-0002183765 00000 n
-0000011011 00000 n
-0000011042 00000 n
-0000441035 00000 n
-0002183647 00000 n
-0000011091 00000 n
-0000011128 00000 n
-0000441160 00000 n
-0002183568 00000 n
-0000011182 00000 n
-0000011242 00000 n
-0000441285 00000 n
-0002183489 00000 n
-0000011296 00000 n
-0000011352 00000 n
-0000446312 00000 n
-0002183358 00000 n
-0000011399 00000 n
-0000011440 00000 n
-0000446437 00000 n
-0002183279 00000 n
-0000011489 00000 n
+0000478755 00000 n
+0002534147 00000 n
+0000008709 00000 n
+0000008754 00000 n
+0000482357 00000 n
+0002534015 00000 n
+0000008803 00000 n
+0000008879 00000 n
+0000485110 00000 n
+0002533936 00000 n
+0000008933 00000 n
+0000009000 00000 n
+0000490323 00000 n
+0002533843 00000 n
+0000009054 00000 n
+0000009142 00000 n
+0000493891 00000 n
+0002533750 00000 n
+0000009196 00000 n
+0000009269 00000 n
+0000494016 00000 n
+0002533632 00000 n
+0000009323 00000 n
+0000009407 00000 n
+0000494141 00000 n
+0002533553 00000 n
+0000009466 00000 n
+0000009522 00000 n
+0000494266 00000 n
+0002533460 00000 n
+0000009581 00000 n
+0000009620 00000 n
+0000497952 00000 n
+0002533381 00000 n
+0000009679 00000 n
+0000009712 00000 n
+0000498077 00000 n
+0002533249 00000 n
+0000009761 00000 n
+0000009805 00000 n
+0000498202 00000 n
+0002533170 00000 n
+0000009859 00000 n
+0000009924 00000 n
+0000504979 00000 n
+0002533091 00000 n
+0000009978 00000 n
+0000010046 00000 n
+0000507246 00000 n
+0002532959 00000 n
+0000010095 00000 n
+0000010146 00000 n
+0000507371 00000 n
+0002532880 00000 n
+0000010200 00000 n
+0000010245 00000 n
+0000507495 00000 n
+0002532787 00000 n
+0000010299 00000 n
+0000010350 00000 n
+0000511048 00000 n
+0002532655 00000 n
+0000010404 00000 n
+0000010457 00000 n
+0000511173 00000 n
+0002532590 00000 n
+0000010516 00000 n
+0000010559 00000 n
+0000514515 00000 n
+0002532497 00000 n
+0000010613 00000 n
+0000010661 00000 n
+0000514640 00000 n
+0002532404 00000 n
+0000010715 00000 n
+0000010763 00000 n
+0000514765 00000 n
+0002532325 00000 n
+0000010817 00000 n
+0000010848 00000 n
+0000514890 00000 n
+0002532207 00000 n
+0000010897 00000 n
+0000010934 00000 n
+0000515015 00000 n
+0002532128 00000 n
+0000010988 00000 n
+0000011048 00000 n
+0000517587 00000 n
+0002532035 00000 n
+0000011102 00000 n
+0000011158 00000 n
+0000517712 00000 n
+0002531956 00000 n
+0000011212 00000 n
+0000011269 00000 n
+0000520850 00000 n
+0002531824 00000 n
+0000011316 00000 n
+0000011357 00000 n
+0000520975 00000 n
+0002531745 00000 n
+0000011406 00000 n
+0000011451 00000 n
+0000521100 00000 n
+0002531652 00000 n
+0000011500 00000 n
0000011534 00000 n
-0000446562 00000 n
-0002183186 00000 n
+0000524054 00000 n
+0002531520 00000 n
0000011583 00000 n
-0000011617 00000 n
-0000449846 00000 n
-0002183054 00000 n
-0000011666 00000 n
-0000011711 00000 n
-0000449971 00000 n
-0002182975 00000 n
-0000011765 00000 n
-0000011821 00000 n
-0000450095 00000 n
-0002182896 00000 n
-0000011875 00000 n
-0000011922 00000 n
-0000452304 00000 n
-0002182817 00000 n
-0000011971 00000 n
-0000012008 00000 n
-0000453254 00000 n
-0002182700 00000 n
-0000012055 00000 n
-0000012115 00000 n
-0000453379 00000 n
-0002182635 00000 n
-0000012164 00000 n
-0000012192 00000 n
-0000454094 00000 n
-0002182500 00000 n
-0000012236 00000 n
-0000012282 00000 n
-0000457514 00000 n
-0002182382 00000 n
-0000012330 00000 n
-0000012394 00000 n
-0000457639 00000 n
-0002182303 00000 n
-0000012444 00000 n
-0000012490 00000 n
-0000460408 00000 n
-0002182210 00000 n
-0000012540 00000 n
-0000012582 00000 n
-0000464530 00000 n
-0002182078 00000 n
-0000012632 00000 n
-0000012667 00000 n
-0000464655 00000 n
-0002181999 00000 n
-0000012722 00000 n
-0000012768 00000 n
-0000464778 00000 n
-0002181906 00000 n
-0000012823 00000 n
-0000012874 00000 n
-0000468950 00000 n
-0002181827 00000 n
-0000012929 00000 n
-0000012980 00000 n
-0000469074 00000 n
-0002181695 00000 n
-0000013030 00000 n
-0000013077 00000 n
-0000473430 00000 n
-0002181616 00000 n
-0000013132 00000 n
-0000013188 00000 n
-0000476347 00000 n
-0002181523 00000 n
-0000013243 00000 n
-0000013296 00000 n
-0000480091 00000 n
-0002181430 00000 n
-0000013351 00000 n
-0000013408 00000 n
-0000483685 00000 n
-0002181337 00000 n
-0000013463 00000 n
-0000013520 00000 n
-0000484062 00000 n
-0002181244 00000 n
-0000013575 00000 n
-0000013632 00000 n
-0000484186 00000 n
-0002181151 00000 n
-0000013687 00000 n
-0000013733 00000 n
-0000484311 00000 n
-0002181058 00000 n
-0000013788 00000 n
-0000013851 00000 n
-0000488226 00000 n
-0002180979 00000 n
-0000013906 00000 n
-0000013972 00000 n
-0000488350 00000 n
-0002180847 00000 n
-0000014022 00000 n
-0000014093 00000 n
-0000492976 00000 n
-0002180768 00000 n
-0000014148 00000 n
-0000014199 00000 n
-0000496392 00000 n
-0002180675 00000 n
-0000014254 00000 n
-0000014297 00000 n
-0000496515 00000 n
-0002180596 00000 n
-0000014352 00000 n
-0000014398 00000 n
-0000496640 00000 n
-0002180464 00000 n
-0000014448 00000 n
-0000014486 00000 n
-0000500201 00000 n
-0002180385 00000 n
-0000014541 00000 n
-0000014596 00000 n
-0000500326 00000 n
-0002180306 00000 n
-0000014651 00000 n
-0000014699 00000 n
-0000503699 00000 n
-0002180174 00000 n
-0000014749 00000 n
-0000014804 00000 n
-0000503823 00000 n
-0002180095 00000 n
-0000014859 00000 n
-0000014911 00000 n
-0000507990 00000 n
-0002180002 00000 n
-0000014966 00000 n
-0000015011 00000 n
-0000508115 00000 n
-0002179884 00000 n
-0000015066 00000 n
-0000015116 00000 n
-0000511873 00000 n
-0002179819 00000 n
-0000015176 00000 n
-0000015242 00000 n
-0000521308 00000 n
-0002179701 00000 n
-0000015292 00000 n
-0000015330 00000 n
-0000521433 00000 n
-0002179622 00000 n
-0000015385 00000 n
-0000015484 00000 n
-0000521557 00000 n
-0002179543 00000 n
-0000015539 00000 n
-0000015640 00000 n
-0000525084 00000 n
-0002179411 00000 n
-0000015688 00000 n
-0000015740 00000 n
-0000525209 00000 n
-0002179332 00000 n
-0000015790 00000 n
-0000015836 00000 n
-0000529520 00000 n
-0002179200 00000 n
-0000015886 00000 n
-0000015932 00000 n
-0000533418 00000 n
-0002179082 00000 n
-0000015987 00000 n
-0000016044 00000 n
-0000537224 00000 n
-0002179003 00000 n
-0000016104 00000 n
-0000016166 00000 n
-0000537349 00000 n
-0002178924 00000 n
-0000016226 00000 n
-0000016292 00000 n
-0000537474 00000 n
-0002178845 00000 n
-0000016347 00000 n
-0000016426 00000 n
-0000540836 00000 n
-0002178713 00000 n
+0000011628 00000 n
+0000524179 00000 n
+0002531441 00000 n
+0000011682 00000 n
+0000011738 00000 n
+0000524431 00000 n
+0002531362 00000 n
+0000011792 00000 n
+0000011839 00000 n
+0000527488 00000 n
+0002531283 00000 n
+0000011888 00000 n
+0000011925 00000 n
+0000529725 00000 n
+0002531165 00000 n
+0000011972 00000 n
+0000012032 00000 n
+0000529850 00000 n
+0002531100 00000 n
+0000012081 00000 n
+0000012109 00000 n
+0000530579 00000 n
+0002530964 00000 n
+0000012153 00000 n
+0000012199 00000 n
+0000533825 00000 n
+0002530846 00000 n
+0000012247 00000 n
+0000012311 00000 n
+0000533950 00000 n
+0002530767 00000 n
+0000012361 00000 n
+0000012407 00000 n
+0000537044 00000 n
+0002530674 00000 n
+0000012457 00000 n
+0000012499 00000 n
+0000540547 00000 n
+0002530542 00000 n
+0000012549 00000 n
+0000012584 00000 n
+0000540672 00000 n
+0002530463 00000 n
+0000012639 00000 n
+0000012685 00000 n
+0000544119 00000 n
+0002530370 00000 n
+0000012740 00000 n
+0000012791 00000 n
+0000544622 00000 n
+0002530291 00000 n
+0000012846 00000 n
+0000012897 00000 n
+0000548230 00000 n
+0002530159 00000 n
+0000012947 00000 n
+0000012994 00000 n
+0000551734 00000 n
+0002530080 00000 n
+0000013049 00000 n
+0000013105 00000 n
+0000555319 00000 n
+0002529987 00000 n
+0000013160 00000 n
+0000013213 00000 n
+0000558588 00000 n
+0002529894 00000 n
+0000013268 00000 n
+0000013325 00000 n
+0000561930 00000 n
+0002529801 00000 n
+0000013380 00000 n
+0000013437 00000 n
+0000562306 00000 n
+0002529708 00000 n
+0000013492 00000 n
+0000013549 00000 n
+0000565020 00000 n
+0002529615 00000 n
+0000013604 00000 n
+0000013650 00000 n
+0000565145 00000 n
+0002529522 00000 n
+0000013705 00000 n
+0000013768 00000 n
+0000565270 00000 n
+0002529443 00000 n
+0000013823 00000 n
+0000013889 00000 n
+0000569904 00000 n
+0002529311 00000 n
+0000013939 00000 n
+0000014010 00000 n
+0000573396 00000 n
+0002529232 00000 n
+0000014065 00000 n
+0000014116 00000 n
+0000575658 00000 n
+0002529139 00000 n
+0000014171 00000 n
+0000014214 00000 n
+0000575783 00000 n
+0002529060 00000 n
+0000014269 00000 n
+0000014315 00000 n
+0000575907 00000 n
+0002528928 00000 n
+0000014365 00000 n
+0000014403 00000 n
+0000579187 00000 n
+0002528849 00000 n
+0000014458 00000 n
+0000014513 00000 n
+0000579312 00000 n
+0002528770 00000 n
+0000014568 00000 n
+0000014616 00000 n
+0000582699 00000 n
+0002528638 00000 n
+0000014666 00000 n
+0000014721 00000 n
+0000582824 00000 n
+0002528559 00000 n
+0000014776 00000 n
+0000014828 00000 n
+0000586350 00000 n
+0002528466 00000 n
+0000014883 00000 n
+0000014928 00000 n
+0000590841 00000 n
+0002528348 00000 n
+0000014983 00000 n
+0000015033 00000 n
+0000590966 00000 n
+0002528283 00000 n
+0000015093 00000 n
+0000015159 00000 n
+0000619637 00000 n
+0002528165 00000 n
+0000015209 00000 n
+0000015247 00000 n
+0000619762 00000 n
+0002528086 00000 n
+0000015302 00000 n
+0000015401 00000 n
+0000619886 00000 n
+0002527993 00000 n
+0000015456 00000 n
+0000015557 00000 n
+0000620011 00000 n
+0002527914 00000 n
+0000015612 00000 n
+0000015682 00000 n
+0000624201 00000 n
+0002527782 00000 n
+0000015730 00000 n
+0000015782 00000 n
+0000624326 00000 n
+0002527664 00000 n
+0000015832 00000 n
+0000015878 00000 n
+0000624451 00000 n
+0002527585 00000 n
+0000015933 00000 n
+0000015992 00000 n
+0000628268 00000 n
+0002527506 00000 n
+0000016047 00000 n
+0000016086 00000 n
+0000632049 00000 n
+0002527374 00000 n
+0000016136 00000 n
+0000016182 00000 n
+0000632174 00000 n
+0002527256 00000 n
+0000016237 00000 n
+0000016294 00000 n
+0000644129 00000 n
+0002527177 00000 n
+0000016354 00000 n
+0000016416 00000 n
+0000644254 00000 n
+0002527098 00000 n
0000016476 00000 n
-0000016525 00000 n
-0000540961 00000 n
-0002178634 00000 n
-0000016580 00000 n
-0000016628 00000 n
-0000541086 00000 n
-0002178555 00000 n
-0000016683 00000 n
-0000016729 00000 n
-0000543840 00000 n
-0002178423 00000 n
-0000016779 00000 n
-0000016821 00000 n
-0000548050 00000 n
-0002178344 00000 n
-0000016876 00000 n
-0000016913 00000 n
-0000548175 00000 n
-0002178251 00000 n
-0000016968 00000 n
-0000017034 00000 n
-0000548300 00000 n
-0002178158 00000 n
-0000017089 00000 n
-0000017122 00000 n
-0000548424 00000 n
-0002178025 00000 n
-0000017177 00000 n
-0000017211 00000 n
-0000553983 00000 n
-0002177946 00000 n
-0000017271 00000 n
-0000017322 00000 n
-0000554108 00000 n
-0002177853 00000 n
-0000017382 00000 n
-0000017463 00000 n
-0000557237 00000 n
-0002177760 00000 n
-0000017523 00000 n
-0000017574 00000 n
-0000559054 00000 n
-0002177667 00000 n
-0000017634 00000 n
-0000017691 00000 n
-0000563433 00000 n
-0002177574 00000 n
-0000017751 00000 n
-0000017797 00000 n
-0000565947 00000 n
-0002177481 00000 n
-0000017857 00000 n
-0000017916 00000 n
-0000570093 00000 n
-0002177388 00000 n
-0000017976 00000 n
-0000018033 00000 n
-0000570218 00000 n
-0002177295 00000 n
-0000018093 00000 n
-0000018166 00000 n
-0000572147 00000 n
-0002177202 00000 n
-0000018226 00000 n
-0000018297 00000 n
-0000572272 00000 n
-0002177123 00000 n
-0000018358 00000 n
-0000018412 00000 n
-0000576224 00000 n
-0002176991 00000 n
-0000018467 00000 n
-0000018499 00000 n
-0000576348 00000 n
-0002176912 00000 n
-0000018559 00000 n
-0000018609 00000 n
-0000576472 00000 n
-0002176819 00000 n
-0000018669 00000 n
-0000018709 00000 n
-0000579346 00000 n
-0002176726 00000 n
-0000018769 00000 n
-0000018845 00000 n
-0000579471 00000 n
-0002176647 00000 n
-0000018905 00000 n
-0000018972 00000 n
-0000579596 00000 n
-0002176568 00000 n
-0000019027 00000 n
-0000019057 00000 n
-0000579721 00000 n
-0002176450 00000 n
-0000019107 00000 n
-0000019145 00000 n
-0000579846 00000 n
-0002176371 00000 n
-0000019200 00000 n
-0000019271 00000 n
-0000579971 00000 n
-0002176278 00000 n
-0000019326 00000 n
-0000019404 00000 n
-0000581194 00000 n
-0002176199 00000 n
-0000019459 00000 n
-0000019512 00000 n
-0000591333 00000 n
-0002176067 00000 n
-0000019560 00000 n
-0000019617 00000 n
-0000591458 00000 n
-0002175988 00000 n
-0000019667 00000 n
-0000019713 00000 n
-0000591583 00000 n
-0002175856 00000 n
-0000019763 00000 n
-0000019798 00000 n
-0000594993 00000 n
-0002175791 00000 n
-0000019853 00000 n
-0000019901 00000 n
-0000597139 00000 n
-0002175659 00000 n
-0000019951 00000 n
-0000019997 00000 n
-0000597264 00000 n
-0002175580 00000 n
-0000020052 00000 n
-0000020111 00000 n
-0000597516 00000 n
-0002175501 00000 n
-0000020166 00000 n
-0000020226 00000 n
-0000599976 00000 n
-0002175383 00000 n
-0000020276 00000 n
-0000020314 00000 n
-0000600101 00000 n
-0002175304 00000 n
-0000020369 00000 n
-0000020415 00000 n
-0000600225 00000 n
-0002175225 00000 n
-0000020470 00000 n
-0000020548 00000 n
-0000603815 00000 n
-0002175093 00000 n
-0000020596 00000 n
-0000020660 00000 n
-0000603940 00000 n
-0002175014 00000 n
-0000020710 00000 n
-0000020756 00000 n
-0000608214 00000 n
-0002174882 00000 n
-0000020806 00000 n
-0000020858 00000 n
-0000608339 00000 n
-0002174803 00000 n
-0000020913 00000 n
-0000020989 00000 n
-0000612711 00000 n
-0002174710 00000 n
-0000021044 00000 n
-0000021091 00000 n
-0000612963 00000 n
-0002174631 00000 n
-0000021146 00000 n
-0000021206 00000 n
-0000619178 00000 n
-0002174499 00000 n
-0000021256 00000 n
-0000021313 00000 n
-0000619303 00000 n
-0002174420 00000 n
-0000021368 00000 n
-0000021424 00000 n
-0000619428 00000 n
-0002174327 00000 n
-0000021479 00000 n
-0000021551 00000 n
-0000622979 00000 n
-0002174248 00000 n
-0000021606 00000 n
-0000021655 00000 n
-0000623103 00000 n
-0002174116 00000 n
-0000021705 00000 n
-0000021755 00000 n
-0000626677 00000 n
-0002174012 00000 n
-0000021810 00000 n
-0000021865 00000 n
-0000630442 00000 n
-0002173933 00000 n
-0000021925 00000 n
-0000021984 00000 n
-0000630693 00000 n
-0002173854 00000 n
-0000022044 00000 n
-0000022088 00000 n
-0000634410 00000 n
-0002173722 00000 n
-0000022138 00000 n
-0000022220 00000 n
-0000634535 00000 n
-0002173643 00000 n
-0000022275 00000 n
-0000022353 00000 n
-0000638763 00000 n
-0002173550 00000 n
-0000022408 00000 n
-0000022473 00000 n
-0000638888 00000 n
-0002173457 00000 n
-0000022528 00000 n
-0000022577 00000 n
-0000639012 00000 n
-0002173325 00000 n
-0000022632 00000 n
-0000022696 00000 n
-0000643316 00000 n
-0002173246 00000 n
-0000022756 00000 n
-0000022801 00000 n
-0000643441 00000 n
-0002173167 00000 n
-0000022861 00000 n
-0000022911 00000 n
-0000643565 00000 n
-0002173074 00000 n
-0000022966 00000 n
-0000023032 00000 n
-0000648430 00000 n
-0002172981 00000 n
-0000023087 00000 n
-0000023172 00000 n
-0000652109 00000 n
-0002172902 00000 n
-0000023227 00000 n
-0000023312 00000 n
-0000652234 00000 n
-0002172784 00000 n
-0000023362 00000 n
-0000023400 00000 n
-0000652359 00000 n
-0002172705 00000 n
-0000023455 00000 n
-0000023519 00000 n
-0000656091 00000 n
-0002172626 00000 n
-0000023574 00000 n
-0000023685 00000 n
-0000659592 00000 n
-0002172494 00000 n
-0000023733 00000 n
-0000023779 00000 n
-0000659717 00000 n
-0002172415 00000 n
-0000023829 00000 n
-0000023875 00000 n
-0000659842 00000 n
-0002172283 00000 n
-0000023925 00000 n
-0000023960 00000 n
-0000664461 00000 n
-0002172179 00000 n
-0000024015 00000 n
-0000024072 00000 n
-0000672474 00000 n
-0002172100 00000 n
-0000024132 00000 n
-0000024188 00000 n
-0000672599 00000 n
-0002172007 00000 n
-0000024248 00000 n
-0000024310 00000 n
-0000672723 00000 n
-0002171914 00000 n
-0000024370 00000 n
-0000024432 00000 n
-0000672848 00000 n
-0002171821 00000 n
-0000024492 00000 n
-0000024552 00000 n
-0000672973 00000 n
-0002171728 00000 n
-0000024612 00000 n
-0000024661 00000 n
-0000676943 00000 n
-0002171635 00000 n
-0000024721 00000 n
-0000024765 00000 n
-0000677068 00000 n
-0002171542 00000 n
-0000024825 00000 n
-0000024874 00000 n
-0000677192 00000 n
-0002171449 00000 n
-0000024934 00000 n
-0000025010 00000 n
-0000677316 00000 n
-0002171370 00000 n
-0000025070 00000 n
-0000025133 00000 n
-0000681778 00000 n
-0002171238 00000 n
-0000025183 00000 n
-0000025243 00000 n
-0000684892 00000 n
-0002171134 00000 n
-0000025298 00000 n
-0000025346 00000 n
-0000685017 00000 n
-0002171055 00000 n
-0000025406 00000 n
-0000025452 00000 n
-0000685141 00000 n
-0002170976 00000 n
-0000025512 00000 n
-0000025565 00000 n
-0000688438 00000 n
-0002170844 00000 n
-0000025615 00000 n
-0000025693 00000 n
-0000693589 00000 n
-0002170765 00000 n
-0000025748 00000 n
-0000025802 00000 n
-0000693714 00000 n
-0002170686 00000 n
-0000025857 00000 n
-0000025906 00000 n
-0000697460 00000 n
-0002170593 00000 n
-0000025956 00000 n
-0000026007 00000 n
-0000697584 00000 n
-0002170461 00000 n
-0000026057 00000 n
-0000026095 00000 n
-0000701882 00000 n
-0002170396 00000 n
-0000026150 00000 n
-0000026203 00000 n
-0000702007 00000 n
-0002170317 00000 n
-0000026253 00000 n
-0000026296 00000 n
-0000705417 00000 n
-0002170183 00000 n
-0000026344 00000 n
-0000026381 00000 n
-0000705542 00000 n
-0002170104 00000 n
-0000026431 00000 n
-0000026468 00000 n
-0000705667 00000 n
-0002170011 00000 n
-0000026518 00000 n
-0000026564 00000 n
-0000705792 00000 n
-0002169877 00000 n
-0000026614 00000 n
-0000026693 00000 n
-0000705917 00000 n
-0002169798 00000 n
-0000026748 00000 n
-0000026802 00000 n
-0000709200 00000 n
-0002169705 00000 n
-0000026857 00000 n
-0000026905 00000 n
-0000709325 00000 n
-0002169612 00000 n
-0000026960 00000 n
-0000027013 00000 n
-0000709450 00000 n
-0002169519 00000 n
-0000027068 00000 n
-0000027111 00000 n
-0000712154 00000 n
-0002169424 00000 n
-0000027166 00000 n
-0000027220 00000 n
-0000712278 00000 n
-0002169342 00000 n
-0000027276 00000 n
-0000027319 00000 n
-0000716070 00000 n
-0002169245 00000 n
-0000027370 00000 n
-0000027411 00000 n
-0000716196 00000 n
-0002169121 00000 n
-0000027462 00000 n
-0000027501 00000 n
-0000716322 00000 n
-0002169037 00000 n
-0000027557 00000 n
-0000027638 00000 n
-0000716448 00000 n
-0002168953 00000 n
-0000027694 00000 n
-0000027775 00000 n
-0000720136 00000 n
-0002168815 00000 n
-0000027824 00000 n
-0000027879 00000 n
-0000720262 00000 n
-0002168731 00000 n
-0000027930 00000 n
-0000027977 00000 n
-0000720387 00000 n
-0002168632 00000 n
-0000028028 00000 n
-0000028083 00000 n
-0000724260 00000 n
-0002168492 00000 n
-0000028134 00000 n
-0000028202 00000 n
-0000724384 00000 n
-0002168408 00000 n
-0000028258 00000 n
-0000028349 00000 n
-0000724510 00000 n
-0002168324 00000 n
-0000028405 00000 n
-0000028502 00000 n
-0000724635 00000 n
-0002168184 00000 n
-0000028553 00000 n
-0000028619 00000 n
-0000724761 00000 n
-0002168100 00000 n
-0000028675 00000 n
-0000028733 00000 n
-0000728649 00000 n
-0002168016 00000 n
-0000028789 00000 n
-0000028846 00000 n
-0000731008 00000 n
-0002167891 00000 n
-0000028897 00000 n
-0000028936 00000 n
-0000731134 00000 n
-0002167822 00000 n
-0000028992 00000 n
-0000029065 00000 n
-0000734745 00000 n
-0002167683 00000 n
-0000029114 00000 n
-0000029195 00000 n
-0000734871 00000 n
-0002167599 00000 n
-0000029246 00000 n
-0000029293 00000 n
-0000736769 00000 n
-0002167515 00000 n
-0000029344 00000 n
-0000029383 00000 n
-0000740482 00000 n
-0002167375 00000 n
-0000029432 00000 n
-0000029482 00000 n
-0000740608 00000 n
-0002167291 00000 n
-0000029533 00000 n
-0000029580 00000 n
-0000740734 00000 n
-0002167151 00000 n
-0000029631 00000 n
-0000029679 00000 n
-0000744105 00000 n
-0002167067 00000 n
-0000029735 00000 n
-0000029807 00000 n
-0000744671 00000 n
-0002166968 00000 n
-0000029863 00000 n
-0000029932 00000 n
-0000744797 00000 n
-0002166869 00000 n
-0000029988 00000 n
-0000030046 00000 n
-0000747789 00000 n
-0002166770 00000 n
-0000030102 00000 n
-0000030168 00000 n
-0000747914 00000 n
-0002166686 00000 n
-0000030224 00000 n
-0000030279 00000 n
-0000751197 00000 n
-0002166546 00000 n
-0000030330 00000 n
-0000030400 00000 n
-0000751323 00000 n
-0002166462 00000 n
-0000030456 00000 n
-0000030531 00000 n
-0000753651 00000 n
-0002166378 00000 n
-0000030587 00000 n
-0000030646 00000 n
-0000759250 00000 n
-0002166279 00000 n
-0000030697 00000 n
-0000030774 00000 n
-0000770123 00000 n
-0002166139 00000 n
-0000030825 00000 n
-0000030897 00000 n
-0000770249 00000 n
-0002166055 00000 n
-0000030953 00000 n
+0000016542 00000 n
+0000644379 00000 n
+0002527005 00000 n
+0000016597 00000 n
+0000016676 00000 n
+0000647862 00000 n
+0002526926 00000 n
+0000016731 00000 n
+0000016806 00000 n
+0000648114 00000 n
+0002526794 00000 n
+0000016856 00000 n
+0000016905 00000 n
+0000648238 00000 n
+0002526715 00000 n
+0000016960 00000 n
+0000017008 00000 n
+0000650732 00000 n
+0002526636 00000 n
+0000017063 00000 n
+0000017109 00000 n
+0000656928 00000 n
+0002526504 00000 n
+0000017159 00000 n
+0000017201 00000 n
+0000657053 00000 n
+0002526425 00000 n
+0000017256 00000 n
+0000017293 00000 n
+0000657178 00000 n
+0002526332 00000 n
+0000017348 00000 n
+0000017414 00000 n
+0000661387 00000 n
+0002526239 00000 n
+0000017469 00000 n
+0000017502 00000 n
+0000661512 00000 n
+0002526106 00000 n
+0000017557 00000 n
+0000017591 00000 n
+0000666045 00000 n
+0002526027 00000 n
+0000017651 00000 n
+0000017702 00000 n
+0000666170 00000 n
+0002525934 00000 n
+0000017762 00000 n
+0000017843 00000 n
+0000668405 00000 n
+0002525841 00000 n
+0000017903 00000 n
+0000017954 00000 n
+0000670059 00000 n
+0002525748 00000 n
+0000018014 00000 n
+0000018071 00000 n
+0000672547 00000 n
+0002525655 00000 n
+0000018131 00000 n
+0000018177 00000 n
+0000672672 00000 n
+0002525562 00000 n
+0000018237 00000 n
+0000018296 00000 n
+0000675726 00000 n
+0002525469 00000 n
+0000018356 00000 n
+0000018413 00000 n
+0000679507 00000 n
+0002525376 00000 n
+0000018473 00000 n
+0000018546 00000 n
+0000683937 00000 n
+0002525283 00000 n
+0000018606 00000 n
+0000018677 00000 n
+0000686540 00000 n
+0002525204 00000 n
+0000018738 00000 n
+0000018792 00000 n
+0000686665 00000 n
+0002525072 00000 n
+0000018847 00000 n
+0000018879 00000 n
+0000690004 00000 n
+0002524993 00000 n
+0000018939 00000 n
+0000018989 00000 n
+0000690128 00000 n
+0002524900 00000 n
+0000019049 00000 n
+0000019089 00000 n
+0000694557 00000 n
+0002524807 00000 n
+0000019149 00000 n
+0000019225 00000 n
+0000697311 00000 n
+0002524728 00000 n
+0000019285 00000 n
+0000019352 00000 n
+0000697436 00000 n
+0002524649 00000 n
+0000019407 00000 n
+0000019437 00000 n
+0000697561 00000 n
+0002524531 00000 n
+0000019487 00000 n
+0000019525 00000 n
+0000697686 00000 n
+0002524452 00000 n
+0000019580 00000 n
+0000019626 00000 n
+0000697811 00000 n
+0002524359 00000 n
+0000019681 00000 n
+0000019751 00000 n
+0000699104 00000 n
+0002524280 00000 n
+0000019806 00000 n
+0000019859 00000 n
+0000702417 00000 n
+0002524148 00000 n
+0000019907 00000 n
+0000019964 00000 n
+0000702542 00000 n
+0002524069 00000 n
+0000020014 00000 n
+0000020060 00000 n
+0000712277 00000 n
+0002523937 00000 n
+0000020110 00000 n
+0000020145 00000 n
+0000714984 00000 n
+0002523872 00000 n
+0000020200 00000 n
+0000020248 00000 n
+0000717186 00000 n
+0002523740 00000 n
+0000020298 00000 n
+0000020344 00000 n
+0000717311 00000 n
+0002523661 00000 n
+0000020399 00000 n
+0000020458 00000 n
+0000717563 00000 n
+0002523582 00000 n
+0000020513 00000 n
+0000020573 00000 n
+0000720190 00000 n
+0002523464 00000 n
+0000020623 00000 n
+0000020661 00000 n
+0000720315 00000 n
+0002523385 00000 n
+0000020716 00000 n
+0000020762 00000 n
+0000720440 00000 n
+0002523292 00000 n
+0000020817 00000 n
+0000020895 00000 n
+0000720564 00000 n
+0002523213 00000 n
+0000020950 00000 n
+0000021021 00000 n
+0000725524 00000 n
+0002523081 00000 n
+0000021069 00000 n
+0000021133 00000 n
+0000725649 00000 n
+0002523002 00000 n
+0000021183 00000 n
+0000021229 00000 n
+0000729367 00000 n
+0002522870 00000 n
+0000021279 00000 n
+0000021331 00000 n
+0000729492 00000 n
+0002522791 00000 n
+0000021386 00000 n
+0000021462 00000 n
+0000736865 00000 n
+0002522698 00000 n
+0000021517 00000 n
+0000021564 00000 n
+0000737117 00000 n
+0002522619 00000 n
+0000021619 00000 n
+0000021679 00000 n
+0000752605 00000 n
+0002522487 00000 n
+0000021729 00000 n
+0000021786 00000 n
+0000752730 00000 n
+0002522408 00000 n
+0000021841 00000 n
+0000021897 00000 n
+0000752981 00000 n
+0002522315 00000 n
+0000021952 00000 n
+0000022024 00000 n
+0000753106 00000 n
+0002522236 00000 n
+0000022079 00000 n
+0000022128 00000 n
+0000758576 00000 n
+0002522104 00000 n
+0000022178 00000 n
+0000022228 00000 n
+0000762209 00000 n
+0002522000 00000 n
+0000022283 00000 n
+0000022338 00000 n
+0000762334 00000 n
+0002521921 00000 n
+0000022398 00000 n
+0000022457 00000 n
+0000762584 00000 n
+0002521842 00000 n
+0000022517 00000 n
+0000022561 00000 n
+0000766242 00000 n
+0002521710 00000 n
+0000022611 00000 n
+0000022693 00000 n
+0000766367 00000 n
+0002521631 00000 n
+0000022748 00000 n
+0000022826 00000 n
+0000766492 00000 n
+0002521538 00000 n
+0000022881 00000 n
+0000022946 00000 n
+0000769531 00000 n
+0002521445 00000 n
+0000023001 00000 n
+0000023050 00000 n
+0000769656 00000 n
+0002521313 00000 n
+0000023105 00000 n
+0000023169 00000 n
+0000773427 00000 n
+0002521234 00000 n
+0000023229 00000 n
+0000023274 00000 n
+0000773552 00000 n
+0002521155 00000 n
+0000023334 00000 n
+0000023384 00000 n
+0000773676 00000 n
+0002521062 00000 n
+0000023439 00000 n
+0000023505 00000 n
+0000777175 00000 n
+0002520969 00000 n
+0000023560 00000 n
+0000023645 00000 n
+0000780478 00000 n
+0002520890 00000 n
+0000023700 00000 n
+0000023785 00000 n
+0000782857 00000 n
+0002520772 00000 n
+0000023835 00000 n
+0000023873 00000 n
+0000782982 00000 n
+0002520693 00000 n
+0000023928 00000 n
+0000023992 00000 n
+0000787969 00000 n
+0002520600 00000 n
+0000024047 00000 n
+0000024158 00000 n
+0000788094 00000 n
+0002520521 00000 n
+0000024213 00000 n
+0000024280 00000 n
+0000790979 00000 n
+0002520387 00000 n
+0000024328 00000 n
+0000024374 00000 n
+0000791104 00000 n
+0002520308 00000 n
+0000024424 00000 n
+0000024470 00000 n
+0000791229 00000 n
+0002520176 00000 n
+0000024520 00000 n
+0000024555 00000 n
+0000795470 00000 n
+0002520072 00000 n
+0000024610 00000 n
+0000024667 00000 n
+0000803361 00000 n
+0002519993 00000 n
+0000024727 00000 n
+0000024783 00000 n
+0000803486 00000 n
+0002519900 00000 n
+0000024843 00000 n
+0000024905 00000 n
+0000803611 00000 n
+0002519807 00000 n
+0000024965 00000 n
+0000025027 00000 n
+0000807279 00000 n
+0002519714 00000 n
+0000025087 00000 n
+0000025147 00000 n
+0000807404 00000 n
+0002519621 00000 n
+0000025207 00000 n
+0000025256 00000 n
+0000807529 00000 n
+0002519528 00000 n
+0000025316 00000 n
+0000025360 00000 n
+0000807654 00000 n
+0002519435 00000 n
+0000025420 00000 n
+0000025469 00000 n
+0000811211 00000 n
+0002519342 00000 n
+0000025529 00000 n
+0000025605 00000 n
+0000811335 00000 n
+0002519263 00000 n
+0000025665 00000 n
+0000025728 00000 n
+0000815236 00000 n
+0002519131 00000 n
+0000025778 00000 n
+0000025838 00000 n
+0000818295 00000 n
+0002519027 00000 n
+0000025893 00000 n
+0000025941 00000 n
+0000818420 00000 n
+0002518948 00000 n
+0000026001 00000 n
+0000026047 00000 n
+0000818545 00000 n
+0002518869 00000 n
+0000026107 00000 n
+0000026160 00000 n
+0000822110 00000 n
+0002518737 00000 n
+0000026210 00000 n
+0000026288 00000 n
+0000827089 00000 n
+0002518658 00000 n
+0000026343 00000 n
+0000026397 00000 n
+0000829399 00000 n
+0002518579 00000 n
+0000026452 00000 n
+0000026501 00000 n
+0000829524 00000 n
+0002518486 00000 n
+0000026551 00000 n
+0000026602 00000 n
+0000833201 00000 n
+0002518352 00000 n
+0000026652 00000 n
+0000026690 00000 n
+0000833326 00000 n
+0002518273 00000 n
+0000026745 00000 n
+0000026798 00000 n
+0000838719 00000 n
+0002518178 00000 n
+0000026853 00000 n
+0000026929 00000 n
+0000838844 00000 n
+0002518096 00000 n
+0000026985 00000 n
+0000027064 00000 n
+0000838969 00000 n
+0002518014 00000 n
+0000027115 00000 n
+0000027159 00000 n
+0000842063 00000 n
+0002517876 00000 n
+0000027208 00000 n
+0000027246 00000 n
+0000842189 00000 n
+0002517792 00000 n
+0000027297 00000 n
+0000027335 00000 n
+0000842315 00000 n
+0002517693 00000 n
+0000027386 00000 n
+0000027433 00000 n
+0000842441 00000 n
+0002517553 00000 n
+0000027484 00000 n
+0000027564 00000 n
+0000845377 00000 n
+0002517469 00000 n
+0000027620 00000 n
+0000027675 00000 n
+0000845503 00000 n
+0002517370 00000 n
+0000027731 00000 n
+0000027780 00000 n
+0000845629 00000 n
+0002517271 00000 n
+0000027836 00000 n
+0000027890 00000 n
+0000848531 00000 n
+0002517172 00000 n
+0000027946 00000 n
+0000027990 00000 n
+0000848657 00000 n
+0002517073 00000 n
+0000028046 00000 n
+0000028100 00000 n
+0000851602 00000 n
+0002516989 00000 n
+0000028156 00000 n
+0000028199 00000 n
+0000851728 00000 n
+0002516890 00000 n
+0000028250 00000 n
+0000028291 00000 n
+0000851854 00000 n
+0002516765 00000 n
+0000028342 00000 n
+0000028381 00000 n
+0000851979 00000 n
+0002516681 00000 n
+0000028437 00000 n
+0000028518 00000 n
+0000854311 00000 n
+0002516597 00000 n
+0000028574 00000 n
+0000028655 00000 n
+0000857666 00000 n
+0002516458 00000 n
+0000028704 00000 n
+0000028759 00000 n
+0000857792 00000 n
+0002516374 00000 n
+0000028810 00000 n
+0000028857 00000 n
+0000857918 00000 n
+0002516275 00000 n
+0000028908 00000 n
+0000028963 00000 n
+0000861271 00000 n
+0002516135 00000 n
+0000029014 00000 n
+0000029082 00000 n
+0000861397 00000 n
+0002516051 00000 n
+0000029138 00000 n
+0000029194 00000 n
+0000861523 00000 n
+0002515952 00000 n
+0000029250 00000 n
+0000029308 00000 n
+0000872458 00000 n
+0002515868 00000 n
+0000029364 00000 n
+0000029421 00000 n
+0000876136 00000 n
+0002515728 00000 n
+0000029472 00000 n
+0000029538 00000 n
+0000876262 00000 n
+0002515644 00000 n
+0000029594 00000 n
+0000029649 00000 n
+0000880004 00000 n
+0002515560 00000 n
+0000029705 00000 n
+0000029761 00000 n
+0000880130 00000 n
+0002515461 00000 n
+0000029812 00000 n
+0000029879 00000 n
+0000882246 00000 n
+0002515377 00000 n
+0000029930 00000 n
+0000029969 00000 n
+0000885161 00000 n
+0002515238 00000 n
+0000030018 00000 n
+0000030099 00000 n
+0000885287 00000 n
+0002515154 00000 n
+0000030150 00000 n
+0000030197 00000 n
+0000887662 00000 n
+0002515070 00000 n
+0000030248 00000 n
+0000030287 00000 n
+0000890987 00000 n
+0002514930 00000 n
+0000030336 00000 n
+0000030386 00000 n
+0000891113 00000 n
+0002514846 00000 n
+0000030437 00000 n
+0000030484 00000 n
+0000891239 00000 n
+0002514706 00000 n
+0000030535 00000 n
+0000030583 00000 n
+0000894715 00000 n
+0002514622 00000 n
+0000030639 00000 n
+0000030711 00000 n
+0000895281 00000 n
+0002514523 00000 n
+0000030767 00000 n
+0000030836 00000 n
+0000898699 00000 n
+0002514439 00000 n
+0000030892 00000 n
+0000030950 00000 n
+0000898825 00000 n
+0002514299 00000 n
0000031001 00000 n
-0000775104 00000 n
-0002165956 00000 n
-0000031057 00000 n
-0000031107 00000 n
-0000779737 00000 n
-0002165857 00000 n
-0000031163 00000 n
-0000031226 00000 n
-0000779863 00000 n
-0002165758 00000 n
-0000031282 00000 n
-0000031324 00000 n
-0000784009 00000 n
-0002165659 00000 n
-0000031380 00000 n
-0000031464 00000 n
-0000788231 00000 n
-0002165575 00000 n
-0000031520 00000 n
-0000031582 00000 n
-0000793108 00000 n
-0002165435 00000 n
-0000031633 00000 n
-0000031698 00000 n
-0000793234 00000 n
-0002165351 00000 n
-0000031754 00000 n
-0000031830 00000 n
-0000797384 00000 n
-0002165252 00000 n
-0000031886 00000 n
-0000031963 00000 n
-0000797509 00000 n
-0002165153 00000 n
-0000032019 00000 n
-0000032077 00000 n
-0000801238 00000 n
-0002165054 00000 n
-0000032133 00000 n
-0000032198 00000 n
-0000804695 00000 n
-0002164970 00000 n
-0000032254 00000 n
-0000032319 00000 n
-0000809301 00000 n
-0002164830 00000 n
-0000032370 00000 n
-0000032431 00000 n
-0000809427 00000 n
-0002164746 00000 n
-0000032487 00000 n
-0000032570 00000 n
-0000813951 00000 n
-0002164621 00000 n
-0000032626 00000 n
-0000032706 00000 n
-0000814328 00000 n
-0002164537 00000 n
-0000032767 00000 n
-0000032825 00000 n
-0000820764 00000 n
-0002164438 00000 n
-0000032886 00000 n
-0000032983 00000 n
-0000820890 00000 n
-0002164339 00000 n
-0000033044 00000 n
-0000033118 00000 n
-0000823649 00000 n
-0002164240 00000 n
-0000033179 00000 n
-0000033263 00000 n
-0000826347 00000 n
-0002164141 00000 n
-0000033324 00000 n
-0000033386 00000 n
-0000829088 00000 n
-0002164042 00000 n
-0000033447 00000 n
-0000033540 00000 n
-0000833392 00000 n
-0002163943 00000 n
-0000033601 00000 n
-0000033673 00000 n
-0000833518 00000 n
-0002163844 00000 n
-0000033734 00000 n
-0000033819 00000 n
-0000836017 00000 n
-0002163760 00000 n
-0000033880 00000 n
-0000033960 00000 n
-0000840196 00000 n
-0002163620 00000 n
-0000034011 00000 n
-0000034118 00000 n
-0000840322 00000 n
-0002163536 00000 n
-0000034174 00000 n
-0000034238 00000 n
-0000844877 00000 n
-0002163437 00000 n
-0000034294 00000 n
-0000034369 00000 n
-0000849081 00000 n
-0002163338 00000 n
-0000034425 00000 n
-0000034493 00000 n
-0000849207 00000 n
-0002163254 00000 n
-0000034549 00000 n
-0000034639 00000 n
-0000853653 00000 n
-0002163114 00000 n
-0000034690 00000 n
-0000034729 00000 n
-0000853779 00000 n
-0002163030 00000 n
-0000034785 00000 n
-0000034865 00000 n
-0000858260 00000 n
-0002162931 00000 n
-0000034921 00000 n
-0000034985 00000 n
-0000863367 00000 n
-0002162832 00000 n
-0000035041 00000 n
-0000035112 00000 n
-0000863493 00000 n
-0002162733 00000 n
-0000035168 00000 n
-0000035253 00000 n
-0000867700 00000 n
-0002162634 00000 n
-0000035309 00000 n
-0000035376 00000 n
-0000875074 00000 n
-0002162535 00000 n
-0000035432 00000 n
-0000035483 00000 n
-0000875200 00000 n
-0002162451 00000 n
-0000035539 00000 n
-0000035630 00000 n
-0000875326 00000 n
-0002162311 00000 n
-0000035682 00000 n
-0000035729 00000 n
-0000875452 00000 n
-0002162227 00000 n
-0000035786 00000 n
-0000035832 00000 n
-0000879240 00000 n
-0002162128 00000 n
-0000035889 00000 n
-0000035950 00000 n
-0000879366 00000 n
-0002162029 00000 n
-0000036007 00000 n
-0000036055 00000 n
-0000879492 00000 n
-0002161945 00000 n
-0000036112 00000 n
-0000036164 00000 n
-0000884098 00000 n
-0002161846 00000 n
-0000036216 00000 n
-0000036297 00000 n
-0000888318 00000 n
-0002161747 00000 n
-0000036349 00000 n
-0000036398 00000 n
-0000888444 00000 n
-0002161648 00000 n
-0000036450 00000 n
-0000036521 00000 n
-0000891437 00000 n
-0002161549 00000 n
-0000036573 00000 n
-0000036658 00000 n
-0000891563 00000 n
-0002161424 00000 n
-0000036710 00000 n
-0000036763 00000 n
-0000891689 00000 n
-0002161340 00000 n
-0000036820 00000 n
-0000036895 00000 n
-0000891815 00000 n
-0002161256 00000 n
-0000036952 00000 n
-0000037052 00000 n
-0000896154 00000 n
-0002161116 00000 n
-0000037101 00000 n
-0000037159 00000 n
-0000896280 00000 n
-0002160991 00000 n
-0000037210 00000 n
-0000037248 00000 n
-0000896406 00000 n
-0002160907 00000 n
-0000037304 00000 n
-0000037353 00000 n
-0000896532 00000 n
-0002160823 00000 n
-0000037409 00000 n
-0000037445 00000 n
-0000896657 00000 n
-0002160683 00000 n
-0000037496 00000 n
-0000037557 00000 n
-0000900609 00000 n
-0002160599 00000 n
-0000037613 00000 n
-0000037672 00000 n
-0000900735 00000 n
-0002160500 00000 n
-0000037728 00000 n
-0000037789 00000 n
-0000903178 00000 n
-0002160416 00000 n
-0000037845 00000 n
-0000037912 00000 n
-0000906749 00000 n
-0002160276 00000 n
-0000037963 00000 n
-0000038011 00000 n
-0000906875 00000 n
-0002160192 00000 n
-0000038067 00000 n
-0000038139 00000 n
-0000907001 00000 n
-0002160093 00000 n
-0000038195 00000 n
-0000038322 00000 n
-0000910364 00000 n
-0002159994 00000 n
-0000038378 00000 n
-0000038452 00000 n
-0000910489 00000 n
-0002159895 00000 n
-0000038508 00000 n
-0000038598 00000 n
-0000914725 00000 n
-0002159811 00000 n
-0000038654 00000 n
-0000038737 00000 n
-0000914851 00000 n
-0002159671 00000 n
-0000038788 00000 n
-0000038905 00000 n
-0000919138 00000 n
-0002159587 00000 n
-0000038961 00000 n
-0000039025 00000 n
-0000919264 00000 n
-0002159488 00000 n
-0000039081 00000 n
-0000039137 00000 n
-0000919390 00000 n
-0002159389 00000 n
-0000039193 00000 n
-0000039261 00000 n
-0000952468 00000 n
-0002159290 00000 n
-0000039317 00000 n
-0000039371 00000 n
-0000966731 00000 n
-0002159191 00000 n
-0000039427 00000 n
-0000039514 00000 n
-0000970922 00000 n
-0002159092 00000 n
-0000039570 00000 n
-0000039650 00000 n
-0000974921 00000 n
-0002158993 00000 n
-0000039706 00000 n
-0000039780 00000 n
-0000975047 00000 n
-0002158909 00000 n
-0000039836 00000 n
-0000039911 00000 n
-0000975173 00000 n
-0002158768 00000 n
-0000039962 00000 n
-0000040019 00000 n
-0000980028 00000 n
-0002158684 00000 n
-0000040075 00000 n
-0000040130 00000 n
-0000983097 00000 n
-0002158585 00000 n
-0000040186 00000 n
-0000040240 00000 n
-0000986118 00000 n
-0002158486 00000 n
-0000040296 00000 n
-0000040343 00000 n
-0000986244 00000 n
-0002158387 00000 n
-0000040399 00000 n
-0000040437 00000 n
-0001006193 00000 n
-0002158288 00000 n
-0000040493 00000 n
-0000040527 00000 n
-0001030552 00000 n
-0002158189 00000 n
-0000040583 00000 n
-0000040621 00000 n
-0001086326 00000 n
-0002158090 00000 n
-0000040677 00000 n
-0000040732 00000 n
-0001086452 00000 n
-0002157991 00000 n
-0000040788 00000 n
-0000040844 00000 n
-0001091098 00000 n
-0002157892 00000 n
-0000040900 00000 n
-0000040941 00000 n
-0001094730 00000 n
-0002157793 00000 n
-0000040998 00000 n
-0000041083 00000 n
-0001098388 00000 n
-0002157694 00000 n
-0000041140 00000 n
-0000041189 00000 n
-0001098514 00000 n
-0002157595 00000 n
-0000041246 00000 n
-0000041285 00000 n
-0001098640 00000 n
-0002157496 00000 n
-0000041342 00000 n
-0000041385 00000 n
-0001098765 00000 n
-0002157397 00000 n
-0000041442 00000 n
-0000041506 00000 n
-0001105575 00000 n
-0002157298 00000 n
-0000041563 00000 n
-0000041652 00000 n
-0001105700 00000 n
-0002157199 00000 n
-0000041709 00000 n
-0000041805 00000 n
-0001110226 00000 n
-0002157100 00000 n
-0000041862 00000 n
-0000041920 00000 n
-0001115371 00000 n
-0002157001 00000 n
-0000041977 00000 n
-0000042036 00000 n
-0001119469 00000 n
-0002156917 00000 n
-0000042093 00000 n
-0000042153 00000 n
-0001119595 00000 n
-0002156777 00000 n
-0000042204 00000 n
-0000042265 00000 n
-0001119721 00000 n
-0002156693 00000 n
-0000042321 00000 n
-0000042391 00000 n
-0001119846 00000 n
-0002156594 00000 n
-0000042447 00000 n
-0000042505 00000 n
-0001123852 00000 n
-0002156510 00000 n
-0000042561 00000 n
-0000042619 00000 n
-0001123977 00000 n
-0002156370 00000 n
-0000042670 00000 n
-0000042760 00000 n
-0001124103 00000 n
-0002156286 00000 n
-0000042816 00000 n
-0000042893 00000 n
-0001124229 00000 n
-0002156202 00000 n
-0000042949 00000 n
-0000043026 00000 n
-0001128650 00000 n
-0002156062 00000 n
-0000043077 00000 n
-0000043197 00000 n
-0001128776 00000 n
-0002155978 00000 n
-0000043253 00000 n
-0000043313 00000 n
-0001128902 00000 n
-0002155894 00000 n
-0000043369 00000 n
-0000043432 00000 n
-0001132929 00000 n
-0002155754 00000 n
-0000043483 00000 n
-0000043557 00000 n
-0001133055 00000 n
-0002155670 00000 n
-0000043613 00000 n
-0000043701 00000 n
-0001133181 00000 n
-0002155571 00000 n
-0000043757 00000 n
-0000043821 00000 n
-0001133306 00000 n
-0002155472 00000 n
-0000043877 00000 n
-0000043929 00000 n
-0001133431 00000 n
-0002155388 00000 n
-0000043985 00000 n
-0000044077 00000 n
-0001137021 00000 n
-0002155247 00000 n
-0000044129 00000 n
-0000044191 00000 n
-0001137147 00000 n
-0002155163 00000 n
-0000044248 00000 n
-0000044308 00000 n
-0001137273 00000 n
-0002155064 00000 n
-0000044365 00000 n
-0000044430 00000 n
-0001139823 00000 n
-0002154965 00000 n
-0000044487 00000 n
-0000044567 00000 n
-0001142436 00000 n
-0002154866 00000 n
-0000044624 00000 n
-0000044689 00000 n
-0001145955 00000 n
-0002154767 00000 n
-0000044746 00000 n
-0000044807 00000 n
-0001146081 00000 n
-0002154668 00000 n
-0000044864 00000 n
-0000044953 00000 n
-0001148166 00000 n
-0002154569 00000 n
-0000045010 00000 n
-0000045063 00000 n
-0001152471 00000 n
-0002154470 00000 n
-0000045120 00000 n
-0000045262 00000 n
-0001156584 00000 n
-0002154371 00000 n
-0000045319 00000 n
-0000045379 00000 n
-0001159008 00000 n
-0002154272 00000 n
-0000045437 00000 n
-0000045503 00000 n
-0001161945 00000 n
-0002154173 00000 n
-0000045561 00000 n
-0000045615 00000 n
-0001165382 00000 n
-0002154074 00000 n
-0000045673 00000 n
-0000045755 00000 n
-0001165697 00000 n
-0002153975 00000 n
-0000045813 00000 n
-0000045870 00000 n
-0001165822 00000 n
-0002153876 00000 n
-0000045928 00000 n
-0000045978 00000 n
-0001169885 00000 n
-0002153777 00000 n
-0000046036 00000 n
-0000046110 00000 n
-0001170011 00000 n
-0002153693 00000 n
-0000046168 00000 n
-0000046256 00000 n
-0001173751 00000 n
-0002153553 00000 n
-0000046308 00000 n
-0000046398 00000 n
-0001174128 00000 n
-0002153469 00000 n
-0000046455 00000 n
-0000046517 00000 n
-0001177828 00000 n
-0002153370 00000 n
-0000046574 00000 n
-0000046639 00000 n
-0001177954 00000 n
-0002153271 00000 n
-0000046696 00000 n
-0000046771 00000 n
-0001181296 00000 n
-0002153172 00000 n
-0000046828 00000 n
-0000046912 00000 n
-0001184300 00000 n
-0002153031 00000 n
-0000046969 00000 n
-0000047055 00000 n
-0001184426 00000 n
-0002152947 00000 n
-0000047117 00000 n
-0000047187 00000 n
-0001184551 00000 n
-0002152848 00000 n
-0000047249 00000 n
-0000047349 00000 n
-0001184677 00000 n
-0002152749 00000 n
-0000047411 00000 n
-0000047512 00000 n
-0001187194 00000 n
-0002152650 00000 n
-0000047574 00000 n
-0000047672 00000 n
-0001187320 00000 n
-0002152551 00000 n
-0000047734 00000 n
-0000047814 00000 n
-0001189728 00000 n
-0002152452 00000 n
-0000047876 00000 n
-0000047971 00000 n
-0001189854 00000 n
-0002152353 00000 n
-0000048033 00000 n
-0000048115 00000 n
-0001189980 00000 n
-0002152254 00000 n
-0000048177 00000 n
-0000048275 00000 n
-0001192019 00000 n
-0002152155 00000 n
-0000048337 00000 n
-0000048448 00000 n
-0001192145 00000 n
-0002152056 00000 n
-0000048511 00000 n
-0000048615 00000 n
-0001195038 00000 n
-0002151957 00000 n
-0000048678 00000 n
-0000048782 00000 n
-0001195164 00000 n
-0002151858 00000 n
-0000048845 00000 n
+0000031058 00000 n
+0000901173 00000 n
+0002514215 00000 n
+0000031114 00000 n
+0000031189 00000 n
+0000903650 00000 n
+0002514131 00000 n
+0000031245 00000 n
+0000031304 00000 n
+0000909905 00000 n
+0002514032 00000 n
+0000031355 00000 n
+0000031419 00000 n
+0000910031 00000 n
+0002513892 00000 n
+0000031470 00000 n
+0000031542 00000 n
+0000910157 00000 n
+0002513808 00000 n
+0000031598 00000 n
+0000031646 00000 n
+0000922258 00000 n
+0002513709 00000 n
+0000031702 00000 n
+0000031752 00000 n
+0000926295 00000 n
+0002513610 00000 n
+0000031808 00000 n
+0000031871 00000 n
+0000926420 00000 n
+0002513511 00000 n
+0000031927 00000 n
+0000031969 00000 n
+0000930855 00000 n
+0002513412 00000 n
+0000032025 00000 n
+0000032109 00000 n
+0000934794 00000 n
+0002513328 00000 n
+0000032165 00000 n
+0000032227 00000 n
+0000939246 00000 n
+0002513188 00000 n
+0000032278 00000 n
+0000032343 00000 n
+0000939372 00000 n
+0002513104 00000 n
+0000032399 00000 n
+0000032475 00000 n
+0000943425 00000 n
+0002513005 00000 n
+0000032531 00000 n
+0000032608 00000 n
+0000946623 00000 n
+0002512906 00000 n
+0000032664 00000 n
+0000032722 00000 n
+0000946875 00000 n
+0002512807 00000 n
+0000032778 00000 n
+0000032843 00000 n
+0000950674 00000 n
+0002512723 00000 n
+0000032899 00000 n
+0000032964 00000 n
+0000953987 00000 n
+0002512583 00000 n
+0000033015 00000 n
+0000033076 00000 n
+0000958112 00000 n
+0002512499 00000 n
+0000033132 00000 n
+0000033215 00000 n
+0000958238 00000 n
+0002512374 00000 n
+0000033271 00000 n
+0000033351 00000 n
+0000962577 00000 n
+0002512290 00000 n
+0000033412 00000 n
+0000033470 00000 n
+0000965773 00000 n
+0002512191 00000 n
+0000033531 00000 n
+0000033628 00000 n
+0000969055 00000 n
+0002512092 00000 n
+0000033689 00000 n
+0000033763 00000 n
+0000971537 00000 n
+0002511993 00000 n
+0000033824 00000 n
+0000033908 00000 n
+0000974160 00000 n
+0002511894 00000 n
+0000033969 00000 n
+0000034031 00000 n
+0000976909 00000 n
+0002511795 00000 n
+0000034092 00000 n
+0000034185 00000 n
+0000980449 00000 n
+0002511696 00000 n
+0000034246 00000 n
+0000034318 00000 n
+0000983588 00000 n
+0002511597 00000 n
+0000034379 00000 n
+0000034464 00000 n
+0000983714 00000 n
+0002511513 00000 n
+0000034525 00000 n
+0000034587 00000 n
+0000986859 00000 n
+0002511373 00000 n
+0000034638 00000 n
+0000034695 00000 n
+0000986985 00000 n
+0002511289 00000 n
+0000034751 00000 n
+0000034815 00000 n
+0000990957 00000 n
+0002511190 00000 n
+0000034871 00000 n
+0000034946 00000 n
+0000998197 00000 n
+0002511091 00000 n
+0000035002 00000 n
+0000035070 00000 n
+0000998323 00000 n
+0002511007 00000 n
+0000035126 00000 n
+0000035216 00000 n
+0001002057 00000 n
+0002510867 00000 n
+0000035267 00000 n
+0000035306 00000 n
+0001002182 00000 n
+0002510783 00000 n
+0000035362 00000 n
+0000035442 00000 n
+0001012451 00000 n
+0002510684 00000 n
+0000035498 00000 n
+0000035562 00000 n
+0001014629 00000 n
+0002510585 00000 n
+0000035618 00000 n
+0000035689 00000 n
+0001018386 00000 n
+0002510486 00000 n
+0000035745 00000 n
+0000035830 00000 n
+0001022174 00000 n
+0002510387 00000 n
+0000035886 00000 n
+0000035953 00000 n
+0001029178 00000 n
+0002510288 00000 n
+0000036009 00000 n
+0000036060 00000 n
+0001029304 00000 n
+0002510204 00000 n
+0000036116 00000 n
+0000036207 00000 n
+0001029430 00000 n
+0002510064 00000 n
+0000036259 00000 n
+0000036306 00000 n
+0001029556 00000 n
+0002509980 00000 n
+0000036363 00000 n
+0000036409 00000 n
+0001032629 00000 n
+0002509881 00000 n
+0000036466 00000 n
+0000036527 00000 n
+0001032755 00000 n
+0002509782 00000 n
+0000036584 00000 n
+0000036632 00000 n
+0001032881 00000 n
+0002509698 00000 n
+0000036689 00000 n
+0000036741 00000 n
+0001037153 00000 n
+0002509599 00000 n
+0000036793 00000 n
+0000036874 00000 n
+0001044865 00000 n
+0002509500 00000 n
+0000036926 00000 n
+0000036975 00000 n
+0001044991 00000 n
+0002509401 00000 n
+0000037027 00000 n
+0000037096 00000 n
+0001046953 00000 n
+0002509302 00000 n
+0000037148 00000 n
+0000037233 00000 n
+0001047079 00000 n
+0002509177 00000 n
+0000037285 00000 n
+0000037325 00000 n
+0001047205 00000 n
+0002509093 00000 n
+0000037382 00000 n
+0000037457 00000 n
+0001047331 00000 n
+0002509009 00000 n
+0000037514 00000 n
+0000037614 00000 n
+0001051138 00000 n
+0002508869 00000 n
+0000037663 00000 n
+0000037721 00000 n
+0001051264 00000 n
+0002508744 00000 n
+0000037772 00000 n
+0000037810 00000 n
+0001051390 00000 n
+0002508660 00000 n
+0000037866 00000 n
+0000037915 00000 n
+0001051516 00000 n
+0002508576 00000 n
+0000037971 00000 n
+0000038007 00000 n
+0001051642 00000 n
+0002508436 00000 n
+0000038058 00000 n
+0000038119 00000 n
+0001055277 00000 n
+0002508352 00000 n
+0000038175 00000 n
+0000038234 00000 n
+0001058475 00000 n
+0002508253 00000 n
+0000038290 00000 n
+0000038351 00000 n
+0001058728 00000 n
+0002508169 00000 n
+0000038407 00000 n
+0000038474 00000 n
+0001061725 00000 n
+0002508029 00000 n
+0000038525 00000 n
+0000038573 00000 n
+0001061851 00000 n
+0002507945 00000 n
+0000038629 00000 n
+0000038701 00000 n
+0001065296 00000 n
+0002507846 00000 n
+0000038757 00000 n
+0000038884 00000 n
+0001065422 00000 n
+0002507747 00000 n
+0000038940 00000 n
+0000039014 00000 n
+0001065548 00000 n
+0002507648 00000 n
+0000039070 00000 n
+0000039160 00000 n
+0001069025 00000 n
+0002507564 00000 n
+0000039216 00000 n
+0000039299 00000 n
+0001072793 00000 n
+0002507424 00000 n
+0000039350 00000 n
+0000039467 00000 n
+0001072919 00000 n
+0002507340 00000 n
+0000039523 00000 n
+0000039587 00000 n
+0001092249 00000 n
+0002507241 00000 n
+0000039643 00000 n
+0000039699 00000 n
+0001092565 00000 n
+0002507142 00000 n
+0000039755 00000 n
+0000039823 00000 n
+0001096963 00000 n
+0002507043 00000 n
+0000039879 00000 n
+0000039933 00000 n
+0001122476 00000 n
+0002506944 00000 n
+0000039989 00000 n
+0000040076 00000 n
+0001126698 00000 n
+0002506845 00000 n
+0000040132 00000 n
+0000040212 00000 n
+0001130481 00000 n
+0002506746 00000 n
+0000040268 00000 n
+0000040342 00000 n
+0001130607 00000 n
+0002506662 00000 n
+0000040398 00000 n
+0000040473 00000 n
+0001135306 00000 n
+0002506521 00000 n
+0000040524 00000 n
+0000040581 00000 n
+0001135432 00000 n
+0002506437 00000 n
+0000040637 00000 n
+0000040692 00000 n
+0001138687 00000 n
+0002506338 00000 n
+0000040748 00000 n
+0000040802 00000 n
+0001141759 00000 n
+0002506239 00000 n
+0000040858 00000 n
+0000040905 00000 n
+0001184169 00000 n
+0002506140 00000 n
+0000040961 00000 n
+0000040999 00000 n
+0001184484 00000 n
+0002506041 00000 n
+0000041055 00000 n
+0000041089 00000 n
+0001214804 00000 n
+0002505942 00000 n
+0000041145 00000 n
+0000041183 00000 n
+0001242539 00000 n
+0002505843 00000 n
+0000041239 00000 n
+0000041294 00000 n
+0001242665 00000 n
+0002505744 00000 n
+0000041350 00000 n
+0000041406 00000 n
+0001242791 00000 n
+0002505645 00000 n
+0000041462 00000 n
+0000041503 00000 n
+0001314057 00000 n
+0002505546 00000 n
+0000041560 00000 n
+0000041645 00000 n
+0001314182 00000 n
+0002505447 00000 n
+0000041702 00000 n
+0000041751 00000 n
+0001317753 00000 n
+0002505348 00000 n
+0000041808 00000 n
+0000041847 00000 n
+0001317879 00000 n
+0002505249 00000 n
+0000041904 00000 n
+0000041947 00000 n
+0001318005 00000 n
+0002505150 00000 n
+0000042004 00000 n
+0000042068 00000 n
+0001324801 00000 n
+0002505051 00000 n
+0000042125 00000 n
+0000042214 00000 n
+0001325052 00000 n
+0002504952 00000 n
+0000042271 00000 n
+0000042367 00000 n
+0001372189 00000 n
+0002504853 00000 n
+0000042424 00000 n
+0000042482 00000 n
+0001380526 00000 n
+0002504754 00000 n
+0000042539 00000 n
+0000042598 00000 n
+0001384567 00000 n
+0002504670 00000 n
+0000042655 00000 n
+0000042715 00000 n
+0001384693 00000 n
+0002504530 00000 n
+0000042766 00000 n
+0000042827 00000 n
+0001384818 00000 n
+0002504446 00000 n
+0000042883 00000 n
+0000042953 00000 n
+0001410010 00000 n
+0002504347 00000 n
+0000043009 00000 n
+0000043067 00000 n
+0001410325 00000 n
+0002504263 00000 n
+0000043123 00000 n
+0000043181 00000 n
+0001437305 00000 n
+0002504123 00000 n
+0000043232 00000 n
+0000043322 00000 n
+0001437431 00000 n
+0002504039 00000 n
+0000043378 00000 n
+0000043455 00000 n
+0001464826 00000 n
+0002503955 00000 n
+0000043511 00000 n
+0000043588 00000 n
+0001464952 00000 n
+0002503815 00000 n
+0000043639 00000 n
+0000043759 00000 n
+0001468893 00000 n
+0002503731 00000 n
+0000043815 00000 n
+0000043875 00000 n
+0001469019 00000 n
+0002503647 00000 n
+0000043931 00000 n
+0000043994 00000 n
+0001472914 00000 n
+0002503507 00000 n
+0000044045 00000 n
+0000044119 00000 n
+0001473040 00000 n
+0002503423 00000 n
+0000044175 00000 n
+0000044263 00000 n
+0001473166 00000 n
+0002503324 00000 n
+0000044319 00000 n
+0000044383 00000 n
+0001473292 00000 n
+0002503225 00000 n
+0000044439 00000 n
+0000044491 00000 n
+0001473418 00000 n
+0002503141 00000 n
+0000044547 00000 n
+0000044639 00000 n
+0001476941 00000 n
+0002503000 00000 n
+0000044691 00000 n
+0000044753 00000 n
+0001477067 00000 n
+0002502916 00000 n
+0000044810 00000 n
+0000044870 00000 n
+0001477193 00000 n
+0002502817 00000 n
+0000044927 00000 n
+0000044992 00000 n
+0001479825 00000 n
+0002502718 00000 n
+0000045049 00000 n
+0000045129 00000 n
+0001482377 00000 n
+0002502619 00000 n
+0000045186 00000 n
+0000045251 00000 n
+0001485179 00000 n
+0002502520 00000 n
+0000045308 00000 n
+0000045369 00000 n
+0001488437 00000 n
+0002502421 00000 n
+0000045426 00000 n
+0000045515 00000 n
+0001488562 00000 n
+0002502322 00000 n
+0000045572 00000 n
+0000045625 00000 n
+0001493401 00000 n
+0002502223 00000 n
+0000045682 00000 n
+0000045798 00000 n
+0001497446 00000 n
+0002502124 00000 n
+0000045855 00000 n
+0000045915 00000 n
+0001497572 00000 n
+0002502025 00000 n
+0000045973 00000 n
+0000046039 00000 n
+0001502334 00000 n
+0002501926 00000 n
+0000046097 00000 n
+0000046151 00000 n
+0001505607 00000 n
+0002501827 00000 n
+0000046209 00000 n
+0000046292 00000 n
+0001505920 00000 n
+0002501728 00000 n
+0000046350 00000 n
+0000046407 00000 n
+0001506046 00000 n
+0002501629 00000 n
+0000046465 00000 n
+0000046515 00000 n
+0001553301 00000 n
+0002501530 00000 n
+0000046573 00000 n
+0000046647 00000 n
+0001556941 00000 n
+0002501446 00000 n
+0000046705 00000 n
+0000046793 00000 n
+0001560262 00000 n
+0002501306 00000 n
+0000046845 00000 n
+0000046935 00000 n
+0001560640 00000 n
+0002501222 00000 n
+0000046992 00000 n
+0000047054 00000 n
+0001564298 00000 n
+0002501123 00000 n
+0000047111 00000 n
+0000047176 00000 n
+0001564424 00000 n
+0002501024 00000 n
+0000047233 00000 n
+0000047308 00000 n
+0001567506 00000 n
+0002500925 00000 n
+0000047365 00000 n
+0000047449 00000 n
+0001570884 00000 n
+0002500826 00000 n
+0000047506 00000 n
+0000047573 00000 n
+0001581409 00000 n
+0002500742 00000 n
+0000047630 00000 n
+0000047684 00000 n
+0001583793 00000 n
+0002500602 00000 n
+0000047736 00000 n
+0000047787 00000 n
+0001587125 00000 n
+0002500518 00000 n
+0000047844 00000 n
+0000047895 00000 n
+0001587251 00000 n
+0002500419 00000 n
+0000047952 00000 n
+0000047994 00000 n
+0001587377 00000 n
+0002500320 00000 n
+0000048051 00000 n
+0000048098 00000 n
+0001587503 00000 n
+0002500236 00000 n
+0000048155 00000 n
+0000048199 00000 n
+0001590256 00000 n
+0002500096 00000 n
+0000048251 00000 n
+0000048319 00000 n
+0001595795 00000 n
+0002499971 00000 n
+0000048376 00000 n
+0000048440 00000 n
+0001595920 00000 n
+0002499887 00000 n
+0000048502 00000 n
+0000048555 00000 n
+0001596046 00000 n
+0002499788 00000 n
+0000048617 00000 n
+0000048687 00000 n
+0001603039 00000 n
+0002499689 00000 n
+0000048749 00000 n
+0000048803 00000 n
+0001603165 00000 n
+0002499590 00000 n
+0000048865 00000 n
0000048942 00000 n
-0001195288 00000 n
-0002151759 00000 n
-0000049005 00000 n
-0000049084 00000 n
-0001197869 00000 n
-0002151660 00000 n
-0000049147 00000 n
-0000049231 00000 n
-0001197993 00000 n
-0002151576 00000 n
-0000049294 00000 n
-0000049392 00000 n
-0001198119 00000 n
-0002151492 00000 n
-0000049449 00000 n
-0000049503 00000 n
-0001201827 00000 n
-0002151352 00000 n
-0000049555 00000 n
-0000049606 00000 n
-0001201953 00000 n
-0002151268 00000 n
-0000049663 00000 n
-0000049714 00000 n
-0001202079 00000 n
-0002151169 00000 n
-0000049771 00000 n
-0000049813 00000 n
-0001202205 00000 n
-0002151070 00000 n
-0000049870 00000 n
-0000049917 00000 n
-0001205203 00000 n
-0002150986 00000 n
-0000049974 00000 n
-0000050018 00000 n
-0001205329 00000 n
-0002150846 00000 n
-0000050070 00000 n
-0000050138 00000 n
-0001210971 00000 n
-0002150721 00000 n
-0000050195 00000 n
-0000050259 00000 n
-0001211097 00000 n
-0002150637 00000 n
-0000050321 00000 n
-0000050374 00000 n
-0001211223 00000 n
-0002150538 00000 n
-0000050436 00000 n
-0000050506 00000 n
-0001217924 00000 n
-0002150439 00000 n
-0000050568 00000 n
-0000050622 00000 n
-0001218050 00000 n
-0002150340 00000 n
-0000050684 00000 n
-0000050761 00000 n
-0001224248 00000 n
-0002150241 00000 n
-0000050823 00000 n
-0000050896 00000 n
-0001224374 00000 n
-0002150142 00000 n
-0000050958 00000 n
-0000051015 00000 n
-0001230228 00000 n
-0002150043 00000 n
-0000051077 00000 n
-0000051185 00000 n
-0001230354 00000 n
-0002149959 00000 n
-0000051247 00000 n
-0000051310 00000 n
-0001230479 00000 n
-0002149875 00000 n
-0000051367 00000 n
-0000051451 00000 n
-0001244853 00000 n
-0002149735 00000 n
-0000051503 00000 n
-0000051555 00000 n
-0001248710 00000 n
-0002149651 00000 n
-0000051612 00000 n
-0000051658 00000 n
-0001248836 00000 n
-0002149552 00000 n
-0000051715 00000 n
-0000051776 00000 n
-0001248962 00000 n
-0002149453 00000 n
-0000051833 00000 n
-0000051915 00000 n
-0001249088 00000 n
-0002149354 00000 n
-0000051972 00000 n
-0000052028 00000 n
-0001252304 00000 n
-0002149255 00000 n
-0000052085 00000 n
-0000052135 00000 n
-0001252429 00000 n
-0002149156 00000 n
-0000052192 00000 n
-0000052240 00000 n
-0001255755 00000 n
-0002149072 00000 n
-0000052297 00000 n
-0000052348 00000 n
-0001255881 00000 n
-0002148973 00000 n
-0000052400 00000 n
-0000052446 00000 n
-0001259919 00000 n
-0002148833 00000 n
-0000052498 00000 n
-0000052574 00000 n
-0001260045 00000 n
-0002148749 00000 n
-0000052631 00000 n
-0000052697 00000 n
-0001260171 00000 n
-0002148650 00000 n
-0000052754 00000 n
-0000052797 00000 n
-0001262533 00000 n
-0002148566 00000 n
-0000052854 00000 n
-0000052903 00000 n
-0001262659 00000 n
-0002148467 00000 n
-0000052955 00000 n
-0000053020 00000 n
-0001262784 00000 n
-0002148327 00000 n
-0000053072 00000 n
-0000053122 00000 n
-0001262910 00000 n
-0002148243 00000 n
-0000053179 00000 n
-0000053235 00000 n
-0001263035 00000 n
-0002148144 00000 n
-0000053292 00000 n
-0000053340 00000 n
-0001263161 00000 n
-0002148060 00000 n
-0000053397 00000 n
-0000053444 00000 n
-0001266285 00000 n
-0002147935 00000 n
-0000053496 00000 n
-0000053531 00000 n
-0001266411 00000 n
-0002147851 00000 n
-0000053588 00000 n
-0000053664 00000 n
-0001269044 00000 n
-0002147752 00000 n
-0000053721 00000 n
-0000053776 00000 n
-0001279525 00000 n
-0002147653 00000 n
-0000053833 00000 n
+0001608906 00000 n
+0002499491 00000 n
+0000049004 00000 n
+0000049068 00000 n
+0001609032 00000 n
+0002499392 00000 n
+0000049130 00000 n
+0000049187 00000 n
+0001614571 00000 n
+0002499293 00000 n
+0000049249 00000 n
+0000049357 00000 n
+0001614697 00000 n
+0002499209 00000 n
+0000049419 00000 n
+0000049482 00000 n
+0001614823 00000 n
+0002499125 00000 n
+0000049539 00000 n
+0000049623 00000 n
+0001631265 00000 n
+0002498985 00000 n
+0000049675 00000 n
+0000049727 00000 n
+0001631391 00000 n
+0002498901 00000 n
+0000049784 00000 n
+0000049830 00000 n
+0001631516 00000 n
+0002498802 00000 n
+0000049887 00000 n
+0000049948 00000 n
+0001634951 00000 n
+0002498703 00000 n
+0000050005 00000 n
+0000050087 00000 n
+0001635077 00000 n
+0002498604 00000 n
+0000050144 00000 n
+0000050200 00000 n
+0001638244 00000 n
+0002498505 00000 n
+0000050257 00000 n
+0000050307 00000 n
+0001638370 00000 n
+0002498406 00000 n
+0000050364 00000 n
+0000050412 00000 n
+0001641762 00000 n
+0002498322 00000 n
+0000050469 00000 n
+0000050520 00000 n
+0001641888 00000 n
+0002498223 00000 n
+0000050572 00000 n
+0000050618 00000 n
+0001645528 00000 n
+0002498083 00000 n
+0000050670 00000 n
+0000050746 00000 n
+0001645654 00000 n
+0002497999 00000 n
+0000050803 00000 n
+0000050869 00000 n
+0001648305 00000 n
+0002497900 00000 n
+0000050926 00000 n
+0000050969 00000 n
+0001648430 00000 n
+0002497816 00000 n
+0000051026 00000 n
+0000051075 00000 n
+0001648556 00000 n
+0002497717 00000 n
+0000051127 00000 n
+0000051177 00000 n
+0001651630 00000 n
+0002497618 00000 n
+0000051229 00000 n
+0000051303 00000 n
+0001654539 00000 n
+0002497519 00000 n
+0000051355 00000 n
+0000051408 00000 n
+0001686858 00000 n
+0002497378 00000 n
+0000051460 00000 n
+0000051500 00000 n
+0001686984 00000 n
+0002497294 00000 n
+0000051557 00000 n
+0000051619 00000 n
+0001687110 00000 n
+0002497195 00000 n
+0000051676 00000 n
+0000051768 00000 n
+0001690993 00000 n
+0002497096 00000 n
+0000051825 00000 n
+0000051935 00000 n
+0001691119 00000 n
+0002496997 00000 n
+0000051992 00000 n
+0000052058 00000 n
+0001691244 00000 n
+0002496898 00000 n
+0000052115 00000 n
+0000052200 00000 n
+0001691370 00000 n
+0002496799 00000 n
+0000052257 00000 n
+0000052347 00000 n
+0001691496 00000 n
+0002496700 00000 n
+0000052404 00000 n
+0000052512 00000 n
+0001695014 00000 n
+0002496601 00000 n
+0000052569 00000 n
+0000052651 00000 n
+0001695140 00000 n
+0002496502 00000 n
+0000052708 00000 n
+0000052780 00000 n
+0001695265 00000 n
+0002496403 00000 n
+0000052838 00000 n
+0000052902 00000 n
+0001695391 00000 n
+0002496304 00000 n
+0000052960 00000 n
+0000053065 00000 n
+0001695517 00000 n
+0002496205 00000 n
+0000053123 00000 n
+0000053198 00000 n
+0001695643 00000 n
+0002496106 00000 n
+0000053256 00000 n
+0000053295 00000 n
+0001699043 00000 n
+0002496007 00000 n
+0000053353 00000 n
+0000053435 00000 n
+0001704126 00000 n
+0002495908 00000 n
+0000053493 00000 n
+0000053581 00000 n
+0001704252 00000 n
+0002495809 00000 n
+0000053639 00000 n
+0000053722 00000 n
+0001704378 00000 n
+0002495710 00000 n
+0000053780 00000 n
+0000053870 00000 n
+0001704504 00000 n
+0002495611 00000 n
0000053928 00000 n
-0001294070 00000 n
-0002147569 00000 n
-0000053985 00000 n
-0000054056 00000 n
-0001572054 00000 n
-0002147430 00000 n
-0000054105 00000 n
-0000054150 00000 n
-0001572180 00000 n
-0002147346 00000 n
+0000054045 00000 n
+0001704630 00000 n
+0002495527 00000 n
+0000054103 00000 n
0000054201 00000 n
-0000054248 00000 n
-0001572306 00000 n
-0002147247 00000 n
-0000054299 00000 n
-0000054335 00000 n
-0001575130 00000 n
-0002147107 00000 n
-0000054386 00000 n
-0000054428 00000 n
-0001575256 00000 n
-0002147023 00000 n
-0000054484 00000 n
-0000054517 00000 n
-0001575382 00000 n
-0002146924 00000 n
-0000054573 00000 n
-0000054614 00000 n
-0001575634 00000 n
-0002146825 00000 n
-0000054670 00000 n
-0000054711 00000 n
-0001575760 00000 n
-0002146726 00000 n
-0000054767 00000 n
-0000054802 00000 n
-0001579377 00000 n
-0002146642 00000 n
-0000054858 00000 n
-0000054894 00000 n
-0001579503 00000 n
-0002146502 00000 n
-0000054945 00000 n
-0000055002 00000 n
-0001579629 00000 n
-0002146418 00000 n
-0000055058 00000 n
-0000055096 00000 n
-0001579755 00000 n
-0002146334 00000 n
-0000055152 00000 n
-0000055185 00000 n
-0001579881 00000 n
-0002146250 00000 n
-0000055236 00000 n
-0000055275 00000 n
-0001583155 00000 n
-0002146111 00000 n
+0001705528 00000 n
+0002495443 00000 n
+0000054253 00000 n
+0000054322 00000 n
+0001837826 00000 n
+0002495304 00000 n
+0000054371 00000 n
+0000054416 00000 n
+0001837952 00000 n
+0002495220 00000 n
+0000054467 00000 n
+0000054514 00000 n
+0001838078 00000 n
+0002495121 00000 n
+0000054565 00000 n
+0000054601 00000 n
+0001841119 00000 n
+0002494981 00000 n
+0000054652 00000 n
+0000054694 00000 n
+0001841245 00000 n
+0002494897 00000 n
+0000054750 00000 n
+0000054783 00000 n
+0001841371 00000 n
+0002494798 00000 n
+0000054839 00000 n
+0000054880 00000 n
+0001841624 00000 n
+0002494699 00000 n
+0000054936 00000 n
+0000054977 00000 n
+0001844683 00000 n
+0002494600 00000 n
+0000055033 00000 n
+0000055068 00000 n
+0001844809 00000 n
+0002494516 00000 n
+0000055124 00000 n
+0000055160 00000 n
+0001847978 00000 n
+0002494391 00000 n
+0000055211 00000 n
+0000055268 00000 n
+0001848104 00000 n
+0002494307 00000 n
0000055324 00000 n
-0000055386 00000 n
-0001583279 00000 n
-0002146027 00000 n
-0000055437 00000 n
-0000055484 00000 n
-0001583403 00000 n
-0002145928 00000 n
-0000055535 00000 n
-0000055573 00000 n
-0001583529 00000 n
-0002145788 00000 n
-0000055624 00000 n
-0000055671 00000 n
-0001587462 00000 n
-0002145719 00000 n
-0000055727 00000 n
-0000055766 00000 n
-0001587588 00000 n
-0002145579 00000 n
-0000055817 00000 n
-0000055860 00000 n
-0001587714 00000 n
-0002145495 00000 n
-0000055916 00000 n
-0000055976 00000 n
-0001591784 00000 n
-0002145396 00000 n
-0000056032 00000 n
-0000056095 00000 n
-0001591910 00000 n
-0002145297 00000 n
-0000056151 00000 n
-0000056198 00000 n
-0001592036 00000 n
-0002145198 00000 n
-0000056254 00000 n
-0000056314 00000 n
-0001596256 00000 n
-0002145099 00000 n
-0000056370 00000 n
-0000056426 00000 n
-0001596382 00000 n
-0002145015 00000 n
-0000056482 00000 n
-0000056524 00000 n
-0001596508 00000 n
-0002144875 00000 n
-0000056575 00000 n
-0000056631 00000 n
-0001596634 00000 n
-0002144791 00000 n
-0000056687 00000 n
-0000056727 00000 n
-0001601035 00000 n
-0002144692 00000 n
-0000056783 00000 n
-0000056823 00000 n
-0001601161 00000 n
-0002144567 00000 n
-0000056879 00000 n
-0000056925 00000 n
-0001601285 00000 n
-0002144483 00000 n
-0000056986 00000 n
-0000057043 00000 n
-0001604017 00000 n
-0002144384 00000 n
-0000057104 00000 n
-0000057204 00000 n
-0001604143 00000 n
-0002144285 00000 n
-0000057265 00000 n
-0000057313 00000 n
-0001608218 00000 n
-0002144186 00000 n
-0000057374 00000 n
-0000057422 00000 n
-0001608344 00000 n
-0002144087 00000 n
-0000057483 00000 n
-0000057552 00000 n
-0001608469 00000 n
-0002143988 00000 n
-0000057613 00000 n
-0000057684 00000 n
-0001611241 00000 n
-0002143889 00000 n
-0000057745 00000 n
-0000057805 00000 n
-0001617830 00000 n
-0002143805 00000 n
-0000057866 00000 n
-0000057921 00000 n
-0001624489 00000 n
-0002143706 00000 n
+0000055362 00000 n
+0001848229 00000 n
+0002494223 00000 n
+0000055418 00000 n
+0000055451 00000 n
+0001850978 00000 n
+0002494084 00000 n
+0000055500 00000 n
+0000055555 00000 n
+0001851104 00000 n
+0002494000 00000 n
+0000055606 00000 n
+0000055653 00000 n
+0001854647 00000 n
+0002493901 00000 n
+0000055704 00000 n
+0000055742 00000 n
+0001854773 00000 n
+0002493761 00000 n
+0000055793 00000 n
+0000055840 00000 n
+0001858320 00000 n
+0002493692 00000 n
+0000055896 00000 n
+0000055935 00000 n
+0001858446 00000 n
+0002493552 00000 n
+0000055986 00000 n
+0000056029 00000 n
+0001858572 00000 n
+0002493468 00000 n
+0000056085 00000 n
+0000056145 00000 n
+0001858697 00000 n
+0002493369 00000 n
+0000056201 00000 n
+0000056264 00000 n
+0001862384 00000 n
+0002493270 00000 n
+0000056320 00000 n
+0000056367 00000 n
+0001862510 00000 n
+0002493171 00000 n
+0000056423 00000 n
+0000056483 00000 n
+0001866315 00000 n
+0002493072 00000 n
+0000056539 00000 n
+0000056595 00000 n
+0001866441 00000 n
+0002492988 00000 n
+0000056651 00000 n
+0000056693 00000 n
+0001866567 00000 n
+0002492848 00000 n
+0000056744 00000 n
+0000056800 00000 n
+0001866693 00000 n
+0002492764 00000 n
+0000056856 00000 n
+0000056896 00000 n
+0001870473 00000 n
+0002492665 00000 n
+0000056952 00000 n
+0000056992 00000 n
+0001870599 00000 n
+0002492540 00000 n
+0000057048 00000 n
+0000057094 00000 n
+0001873011 00000 n
+0002492456 00000 n
+0000057155 00000 n
+0000057255 00000 n
+0001873137 00000 n
+0002492357 00000 n
+0000057316 00000 n
+0000057364 00000 n
+0001876796 00000 n
+0002492258 00000 n
+0000057425 00000 n
+0000057473 00000 n
+0001877049 00000 n
+0002492159 00000 n
+0000057534 00000 n
+0000057603 00000 n
+0001879329 00000 n
+0002492060 00000 n
+0000057664 00000 n
+0000057735 00000 n
+0001881487 00000 n
+0002491961 00000 n
+0000057796 00000 n
+0000057856 00000 n
+0001887749 00000 n
+0002491877 00000 n
+0000057917 00000 n
0000057972 00000 n
-0000058008 00000 n
-0001624614 00000 n
-0002143622 00000 n
+0001894381 00000 n
+0002491778 00000 n
+0000058023 00000 n
0000058059 00000 n
-0000058098 00000 n
-0001628554 00000 n
-0002143483 00000 n
-0000058147 00000 n
-0000058198 00000 n
-0001628680 00000 n
-0002143399 00000 n
-0000058249 00000 n
-0000058296 00000 n
-0001628806 00000 n
-0002143300 00000 n
-0000058347 00000 n
-0000058401 00000 n
-0001628931 00000 n
-0002143160 00000 n
-0000058452 00000 n
-0000058503 00000 n
-0001629057 00000 n
-0002143091 00000 n
-0000058559 00000 n
-0000058624 00000 n
-0001636765 00000 n
-0002142951 00000 n
-0000058675 00000 n
-0000058727 00000 n
-0001640892 00000 n
-0002142882 00000 n
-0000058783 00000 n
-0000058852 00000 n
-0001641018 00000 n
-0002142798 00000 n
-0000058903 00000 n
-0000058942 00000 n
-0001644811 00000 n
-0002142659 00000 n
-0000058991 00000 n
-0000059042 00000 n
-0001644937 00000 n
-0002142575 00000 n
-0000059093 00000 n
-0000059140 00000 n
-0001645062 00000 n
-0002142435 00000 n
-0000059191 00000 n
-0000059254 00000 n
-0001650080 00000 n
-0002142351 00000 n
-0000059310 00000 n
-0000059360 00000 n
-0001650206 00000 n
-0002142211 00000 n
-0000059416 00000 n
-0000059474 00000 n
-0001654651 00000 n
-0002142142 00000 n
-0000059535 00000 n
-0000059582 00000 n
-0001654777 00000 n
-0002142017 00000 n
-0000059638 00000 n
-0000059708 00000 n
-0001654903 00000 n
-0002141948 00000 n
-0000059769 00000 n
-0000059836 00000 n
-0001659422 00000 n
-0002141808 00000 n
-0000059887 00000 n
-0000059943 00000 n
-0001662932 00000 n
-0002141724 00000 n
-0000059999 00000 n
-0000060048 00000 n
-0001663058 00000 n
-0002141625 00000 n
-0000060104 00000 n
-0000060148 00000 n
-0001663184 00000 n
-0002141541 00000 n
-0000060204 00000 n
-0000060241 00000 n
-0001663310 00000 n
-0002141442 00000 n
-0000060292 00000 n
-0000060362 00000 n
-0001666284 00000 n
-0002141317 00000 n
-0000060413 00000 n
-0000060452 00000 n
-0001666410 00000 n
-0002141248 00000 n
-0000060508 00000 n
-0000060556 00000 n
-0001669208 00000 n
-0002141109 00000 n
-0000060605 00000 n
-0000060655 00000 n
-0001669334 00000 n
-0002141025 00000 n
-0000060706 00000 n
-0000060753 00000 n
-0001669460 00000 n
-0002140885 00000 n
-0000060804 00000 n
-0000060846 00000 n
-0001669586 00000 n
-0002140760 00000 n
-0000060902 00000 n
-0000060970 00000 n
-0001669712 00000 n
-0002140676 00000 n
-0000061031 00000 n
-0000061083 00000 n
-0001673019 00000 n
-0002140577 00000 n
-0000061144 00000 n
-0000061203 00000 n
-0001673145 00000 n
-0002140478 00000 n
-0000061264 00000 n
-0000061350 00000 n
-0001673271 00000 n
-0002140394 00000 n
-0000061411 00000 n
-0000061474 00000 n
-0001676917 00000 n
-0002140254 00000 n
-0000061530 00000 n
-0000061606 00000 n
-0001677043 00000 n
-0002140170 00000 n
-0000061667 00000 n
-0000061726 00000 n
-0001685965 00000 n
-0002140071 00000 n
-0000061787 00000 n
-0000061840 00000 n
-0001686091 00000 n
-0002139987 00000 n
-0000061901 00000 n
-0000061959 00000 n
-0001691807 00000 n
-0002139888 00000 n
-0000062015 00000 n
-0000062103 00000 n
-0001695416 00000 n
-0002139763 00000 n
-0000062159 00000 n
-0000062242 00000 n
-0001695542 00000 n
-0002139679 00000 n
-0000062303 00000 n
-0000062369 00000 n
-0001696108 00000 n
-0002139580 00000 n
-0000062430 00000 n
-0000062474 00000 n
-0001699839 00000 n
-0002139481 00000 n
-0000062535 00000 n
-0000062577 00000 n
-0001699965 00000 n
-0002139397 00000 n
-0000062638 00000 n
-0000062675 00000 n
-0001700091 00000 n
-0002139298 00000 n
-0000062726 00000 n
-0000062770 00000 n
-0001700217 00000 n
-0002139199 00000 n
-0000062821 00000 n
-0000062879 00000 n
-0001704172 00000 n
-0002139059 00000 n
-0000062930 00000 n
-0000062989 00000 n
-0001704298 00000 n
-0002138934 00000 n
-0000063045 00000 n
-0000063089 00000 n
-0001704424 00000 n
-0002138865 00000 n
-0000063150 00000 n
-0000063229 00000 n
-0001704550 00000 n
-0002138766 00000 n
-0000063285 00000 n
-0000063339 00000 n
-0001712341 00000 n
-0002138682 00000 n
-0000063395 00000 n
-0000063441 00000 n
-0001719911 00000 n
-0002138557 00000 n
-0000063492 00000 n
-0000063531 00000 n
-0001720037 00000 n
-0002138473 00000 n
-0000063587 00000 n
-0000063696 00000 n
-0001723740 00000 n
-0002138374 00000 n
-0000063752 00000 n
-0000063808 00000 n
-0001723866 00000 n
-0002138290 00000 n
-0000063864 00000 n
-0000063920 00000 n
-0001729430 00000 n
-0002138151 00000 n
-0000063969 00000 n
-0000064029 00000 n
-0001729556 00000 n
-0002138067 00000 n
-0000064080 00000 n
-0000064127 00000 n
-0001733500 00000 n
-0002137927 00000 n
-0000064178 00000 n
-0000064224 00000 n
-0001733625 00000 n
-0002137802 00000 n
-0000064280 00000 n
-0000064332 00000 n
-0001737787 00000 n
-0002137733 00000 n
-0000064393 00000 n
-0000064452 00000 n
-0001749271 00000 n
-0002137593 00000 n
-0000064508 00000 n
-0000064565 00000 n
-0001749395 00000 n
-0002137509 00000 n
-0000064626 00000 n
-0000064682 00000 n
-0001749521 00000 n
-0002137425 00000 n
-0000064743 00000 n
-0000064804 00000 n
-0001756485 00000 n
-0002137326 00000 n
-0000064860 00000 n
-0000064914 00000 n
-0001756611 00000 n
-0002137227 00000 n
-0000064970 00000 n
-0000065042 00000 n
-0001760458 00000 n
-0002137102 00000 n
-0000065098 00000 n
-0000065174 00000 n
-0001763872 00000 n
-0002137018 00000 n
-0000065235 00000 n
-0000065303 00000 n
-0001763998 00000 n
-0002136919 00000 n
-0000065364 00000 n
-0000065426 00000 n
-0001766053 00000 n
-0002136820 00000 n
-0000065487 00000 n
-0000065546 00000 n
-0001766179 00000 n
-0002136736 00000 n
-0000065607 00000 n
-0000065680 00000 n
-0001766305 00000 n
-0002136611 00000 n
-0000065731 00000 n
-0000065770 00000 n
-0001766430 00000 n
-0002136542 00000 n
-0000065826 00000 n
-0000065876 00000 n
-0001770755 00000 n
-0002136403 00000 n
-0000065925 00000 n
-0000065991 00000 n
-0001770880 00000 n
-0002136319 00000 n
-0000066042 00000 n
-0000066089 00000 n
-0001771005 00000 n
-0002136220 00000 n
-0000066140 00000 n
-0000066188 00000 n
-0001774713 00000 n
-0002136080 00000 n
-0000066239 00000 n
-0000066307 00000 n
-0001774839 00000 n
-0002135996 00000 n
-0000066363 00000 n
-0000066401 00000 n
-0001777335 00000 n
-0002135897 00000 n
-0000066457 00000 n
-0000066501 00000 n
-0001777461 00000 n
-0002135798 00000 n
-0000066557 00000 n
-0000066599 00000 n
-0001777585 00000 n
-0002135714 00000 n
-0000066655 00000 n
-0000066701 00000 n
-0001781339 00000 n
-0002135574 00000 n
-0000066752 00000 n
-0000066830 00000 n
-0001785469 00000 n
-0002135490 00000 n
-0000066886 00000 n
-0000066936 00000 n
-0001785594 00000 n
-0002135391 00000 n
-0000066992 00000 n
-0000067036 00000 n
-0001790821 00000 n
-0002135292 00000 n
-0000067092 00000 n
-0000067130 00000 n
-0001790946 00000 n
-0002135193 00000 n
-0000067186 00000 n
-0000067224 00000 n
-0001791071 00000 n
-0002135109 00000 n
-0000067280 00000 n
-0000067319 00000 n
-0001794018 00000 n
-0002134984 00000 n
-0000067370 00000 n
-0000067409 00000 n
-0001794144 00000 n
-0002134900 00000 n
-0000067465 00000 n
-0000067521 00000 n
-0001794270 00000 n
-0002134801 00000 n
-0000067577 00000 n
-0000067634 00000 n
-0001794396 00000 n
-0002134717 00000 n
-0000067690 00000 n
-0000067750 00000 n
-0001799511 00000 n
-0002134578 00000 n
-0000067799 00000 n
-0000067839 00000 n
-0001799637 00000 n
-0002134494 00000 n
-0000067890 00000 n
-0000067937 00000 n
-0001799763 00000 n
-0002134395 00000 n
-0000067988 00000 n
-0000068044 00000 n
-0001799889 00000 n
-0002134296 00000 n
-0000068095 00000 n
-0000068139 00000 n
-0001803087 00000 n
-0002134197 00000 n
-0000068190 00000 n
-0000068241 00000 n
-0001803213 00000 n
-0002134113 00000 n
-0000068292 00000 n
-0000068335 00000 n
-0001804587 00000 n
-0002133974 00000 n
-0000068384 00000 n
-0000068431 00000 n
-0001804713 00000 n
-0002133890 00000 n
-0000068482 00000 n
-0000068512 00000 n
-0001804839 00000 n
-0002133806 00000 n
-0000068563 00000 n
-0000068610 00000 n
-0001805707 00000 n
-0002133682 00000 n
-0000068659 00000 n
-0000068708 00000 n
-0001805833 00000 n
-0002133613 00000 n
-0000068759 00000 n
-0000068789 00000 n
-0001806542 00000 n
-0002133474 00000 n
-0000068834 00000 n
-0000068880 00000 n
-0001808696 00000 n
-0002133349 00000 n
-0000068929 00000 n
-0000068992 00000 n
-0001808822 00000 n
-0002133265 00000 n
-0000069043 00000 n
-0000069077 00000 n
-0001808948 00000 n
-0002133166 00000 n
-0000069128 00000 n
-0000069184 00000 n
-0001809074 00000 n
-0002133082 00000 n
-0000069235 00000 n
-0000069277 00000 n
-0001812146 00000 n
-0002132942 00000 n
-0000069326 00000 n
+0001894506 00000 n
+0002491653 00000 n
+0000058110 00000 n
+0000058149 00000 n
+0001895895 00000 n
+0002491584 00000 n
+0000058205 00000 n
+0000058253 00000 n
+0001899258 00000 n
+0002491445 00000 n
+0000058302 00000 n
+0000058353 00000 n
+0001899384 00000 n
+0002491361 00000 n
+0000058404 00000 n
+0000058451 00000 n
+0001899510 00000 n
+0002491262 00000 n
+0000058502 00000 n
+0000058556 00000 n
+0001903106 00000 n
+0002491122 00000 n
+0000058607 00000 n
+0000058658 00000 n
+0001903232 00000 n
+0002491053 00000 n
+0000058714 00000 n
+0000058779 00000 n
+0001907262 00000 n
+0002490913 00000 n
+0000058830 00000 n
+0000058882 00000 n
+0001911775 00000 n
+0002490844 00000 n
+0000058938 00000 n
+0000059007 00000 n
+0001913306 00000 n
+0002490760 00000 n
+0000059058 00000 n
+0000059097 00000 n
+0001916652 00000 n
+0002490621 00000 n
+0000059146 00000 n
+0000059197 00000 n
+0001916778 00000 n
+0002490537 00000 n
+0000059248 00000 n
+0000059295 00000 n
+0001916904 00000 n
+0002490397 00000 n
+0000059346 00000 n
+0000059409 00000 n
+0001921294 00000 n
+0002490313 00000 n
+0000059465 00000 n
+0000059515 00000 n
+0001921420 00000 n
+0002490173 00000 n
+0000059571 00000 n
+0000059629 00000 n
+0001925791 00000 n
+0002490104 00000 n
+0000059690 00000 n
+0000059737 00000 n
+0001925917 00000 n
+0002489979 00000 n
+0000059793 00000 n
+0000059863 00000 n
+0001929744 00000 n
+0002489910 00000 n
+0000059924 00000 n
+0000059991 00000 n
+0001933797 00000 n
+0002489770 00000 n
+0000060042 00000 n
+0000060098 00000 n
+0001933923 00000 n
+0002489686 00000 n
+0000060154 00000 n
+0000060203 00000 n
+0001937194 00000 n
+0002489587 00000 n
+0000060259 00000 n
+0000060303 00000 n
+0001937319 00000 n
+0002489503 00000 n
+0000060359 00000 n
+0000060396 00000 n
+0001937445 00000 n
+0002489404 00000 n
+0000060447 00000 n
+0000060517 00000 n
+0001940473 00000 n
+0002489279 00000 n
+0000060568 00000 n
+0000060607 00000 n
+0001940599 00000 n
+0002489210 00000 n
+0000060663 00000 n
+0000060711 00000 n
+0001943171 00000 n
+0002489071 00000 n
+0000060760 00000 n
+0000060810 00000 n
+0001943297 00000 n
+0002488987 00000 n
+0000060861 00000 n
+0000060908 00000 n
+0001943423 00000 n
+0002488847 00000 n
+0000060959 00000 n
+0000061001 00000 n
+0001943549 00000 n
+0002488722 00000 n
+0000061057 00000 n
+0000061125 00000 n
+0001946645 00000 n
+0002488638 00000 n
+0000061186 00000 n
+0000061238 00000 n
+0001946771 00000 n
+0002488539 00000 n
+0000061299 00000 n
+0000061358 00000 n
+0001949352 00000 n
+0002488440 00000 n
+0000061419 00000 n
+0000061505 00000 n
+0001949478 00000 n
+0002488356 00000 n
+0000061566 00000 n
+0000061629 00000 n
+0001953445 00000 n
+0002488216 00000 n
+0000061685 00000 n
+0000061761 00000 n
+0001953571 00000 n
+0002488132 00000 n
+0000061822 00000 n
+0000061881 00000 n
+0001960959 00000 n
+0002488033 00000 n
+0000061942 00000 n
+0000061995 00000 n
+0001961083 00000 n
+0002487949 00000 n
+0000062056 00000 n
+0000062114 00000 n
+0001969064 00000 n
+0002487850 00000 n
+0000062170 00000 n
+0000062258 00000 n
+0001969190 00000 n
+0002487725 00000 n
+0000062314 00000 n
+0000062397 00000 n
+0001971954 00000 n
+0002487641 00000 n
+0000062458 00000 n
+0000062524 00000 n
+0001972520 00000 n
+0002487542 00000 n
+0000062585 00000 n
+0000062629 00000 n
+0001972646 00000 n
+0002487443 00000 n
+0000062690 00000 n
+0000062732 00000 n
+0001976143 00000 n
+0002487359 00000 n
+0000062793 00000 n
+0000062830 00000 n
+0001976269 00000 n
+0002487260 00000 n
+0000062881 00000 n
+0000062925 00000 n
+0001976395 00000 n
+0002487161 00000 n
+0000062976 00000 n
+0000063034 00000 n
+0001980249 00000 n
+0002487021 00000 n
+0000063085 00000 n
+0000063144 00000 n
+0001980375 00000 n
+0002486896 00000 n
+0000063200 00000 n
+0000063244 00000 n
+0001980499 00000 n
+0002486827 00000 n
+0000063305 00000 n
+0000063384 00000 n
+0001984300 00000 n
+0002486728 00000 n
+0000063440 00000 n
+0000063494 00000 n
+0001988312 00000 n
+0002486644 00000 n
+0000063550 00000 n
+0000063596 00000 n
+0001998779 00000 n
+0002486519 00000 n
+0000063647 00000 n
+0000063686 00000 n
+0001998905 00000 n
+0002486435 00000 n
+0000063742 00000 n
+0000063831 00000 n
+0001999031 00000 n
+0002486336 00000 n
+0000063887 00000 n
+0000063943 00000 n
+0002002432 00000 n
+0002486252 00000 n
+0000063999 00000 n
+0000064055 00000 n
+0002007954 00000 n
+0002486113 00000 n
+0000064104 00000 n
+0000064164 00000 n
+0002008080 00000 n
+0002486029 00000 n
+0000064215 00000 n
+0000064262 00000 n
+0002012111 00000 n
+0002485889 00000 n
+0000064313 00000 n
+0000064359 00000 n
+0002012236 00000 n
+0002485764 00000 n
+0000064415 00000 n
+0000064467 00000 n
+0002016003 00000 n
+0002485695 00000 n
+0000064528 00000 n
+0000064587 00000 n
+0002028301 00000 n
+0002485555 00000 n
+0000064643 00000 n
+0000064700 00000 n
+0002030762 00000 n
+0002485471 00000 n
+0000064761 00000 n
+0000064817 00000 n
+0002030888 00000 n
+0002485387 00000 n
+0000064878 00000 n
+0000064939 00000 n
+0002036491 00000 n
+0002485288 00000 n
+0000064995 00000 n
+0000065049 00000 n
+0002036617 00000 n
+0002485189 00000 n
+0000065105 00000 n
+0000065177 00000 n
+0002041550 00000 n
+0002485064 00000 n
+0000065233 00000 n
+0000065309 00000 n
+0002044341 00000 n
+0002484980 00000 n
+0000065370 00000 n
+0000065438 00000 n
+0002044466 00000 n
+0002484881 00000 n
+0000065499 00000 n
+0000065561 00000 n
+0002046503 00000 n
+0002484782 00000 n
+0000065622 00000 n
+0000065681 00000 n
+0002046629 00000 n
+0002484698 00000 n
+0000065742 00000 n
+0000065815 00000 n
+0002046755 00000 n
+0002484573 00000 n
+0000065866 00000 n
+0000065905 00000 n
+0002046880 00000 n
+0002484489 00000 n
+0000065961 00000 n
+0000066011 00000 n
+0002049143 00000 n
+0002484405 00000 n
+0000066067 00000 n
+0000066136 00000 n
+0002052754 00000 n
+0002484266 00000 n
+0000066185 00000 n
+0000066251 00000 n
+0002052880 00000 n
+0002484182 00000 n
+0000066302 00000 n
+0000066349 00000 n
+0002053005 00000 n
+0002484083 00000 n
+0000066400 00000 n
+0000066448 00000 n
+0002055854 00000 n
+0002483943 00000 n
+0000066499 00000 n
+0000066567 00000 n
+0002055980 00000 n
+0002483859 00000 n
+0000066623 00000 n
+0000066661 00000 n
+0002059445 00000 n
+0002483760 00000 n
+0000066717 00000 n
+0000066761 00000 n
+0002059570 00000 n
+0002483661 00000 n
+0000066817 00000 n
+0000066859 00000 n
+0002062091 00000 n
+0002483577 00000 n
+0000066915 00000 n
+0000066961 00000 n
+0002066431 00000 n
+0002483437 00000 n
+0000067012 00000 n
+0000067090 00000 n
+0002070011 00000 n
+0002483353 00000 n
+0000067146 00000 n
+0000067196 00000 n
+0002070136 00000 n
+0002483254 00000 n
+0000067252 00000 n
+0000067296 00000 n
+0002075147 00000 n
+0002483155 00000 n
+0000067352 00000 n
+0000067390 00000 n
+0002075273 00000 n
+0002483056 00000 n
+0000067446 00000 n
+0000067484 00000 n
+0002075399 00000 n
+0002482972 00000 n
+0000067540 00000 n
+0000067579 00000 n
+0002078459 00000 n
+0002482847 00000 n
+0000067630 00000 n
+0000067669 00000 n
+0002078585 00000 n
+0002482763 00000 n
+0000067725 00000 n
+0000067782 00000 n
+0002078711 00000 n
+0002482664 00000 n
+0000067838 00000 n
+0000067895 00000 n
+0002078837 00000 n
+0002482580 00000 n
+0000067951 00000 n
+0000068011 00000 n
+0002084123 00000 n
+0002482441 00000 n
+0000068060 00000 n
+0000068100 00000 n
+0002084249 00000 n
+0002482357 00000 n
+0000068151 00000 n
+0000068198 00000 n
+0002084375 00000 n
+0002482258 00000 n
+0000068249 00000 n
+0000068305 00000 n
+0002088286 00000 n
+0002482159 00000 n
+0000068356 00000 n
+0000068400 00000 n
+0002088412 00000 n
+0002482060 00000 n
+0000068451 00000 n
+0000068502 00000 n
+0002088538 00000 n
+0002481961 00000 n
+0000068553 00000 n
+0000068596 00000 n
+0002089922 00000 n
+0002481836 00000 n
+0000068647 00000 n
+0000068686 00000 n
+0002090048 00000 n
+0002481767 00000 n
+0000068742 00000 n
+0000068793 00000 n
+0002091320 00000 n
+0002481628 00000 n
+0000068842 00000 n
+0000068889 00000 n
+0002091446 00000 n
+0002481544 00000 n
+0000068940 00000 n
+0000068970 00000 n
+0002091572 00000 n
+0002481460 00000 n
+0000069021 00000 n
+0000069068 00000 n
+0002092446 00000 n
+0002481336 00000 n
+0000069117 00000 n
+0000069166 00000 n
+0002092572 00000 n
+0002481267 00000 n
+0000069217 00000 n
+0000069247 00000 n
+0002093296 00000 n
+0002481128 00000 n
+0000069292 00000 n
+0000069338 00000 n
+0002096003 00000 n
+0002481003 00000 n
0000069387 00000 n
-0001812272 00000 n
-0002132817 00000 n
-0000069438 00000 n
-0000069492 00000 n
-0001812398 00000 n
-0002132692 00000 n
-0000069548 00000 n
-0000069586 00000 n
-0001816349 00000 n
-0002132608 00000 n
-0000069647 00000 n
-0000069690 00000 n
-0001816475 00000 n
-0002132509 00000 n
-0000069751 00000 n
-0000069814 00000 n
-0001820591 00000 n
-0002132410 00000 n
-0000069875 00000 n
-0000069918 00000 n
-0001820717 00000 n
-0002132311 00000 n
-0000069979 00000 n
-0000070035 00000 n
-0001820843 00000 n
-0002132227 00000 n
-0000070096 00000 n
-0000070149 00000 n
-0001823955 00000 n
-0002132143 00000 n
-0000070205 00000 n
-0000070259 00000 n
-0001825277 00000 n
-0002132018 00000 n
-0000070310 00000 n
-0000070353 00000 n
-0001825530 00000 n
-0002131934 00000 n
-0000070409 00000 n
-0000070457 00000 n
-0001828411 00000 n
-0002131850 00000 n
-0000070513 00000 n
-0000070569 00000 n
-0001832900 00000 n
-0002131725 00000 n
-0000070618 00000 n
-0000070682 00000 n
-0001833026 00000 n
-0002131614 00000 n
-0000070733 00000 n
-0000070780 00000 n
-0001833151 00000 n
-0002131530 00000 n
-0000070836 00000 n
-0000070885 00000 n
-0001836537 00000 n
-0002131431 00000 n
-0000070941 00000 n
-0000070994 00000 n
-0001840723 00000 n
-0002131332 00000 n
-0000071050 00000 n
-0000071096 00000 n
-0001840849 00000 n
-0002131233 00000 n
+0000069450 00000 n
+0002096129 00000 n
+0002480919 00000 n
+0000069501 00000 n
+0000069550 00000 n
+0002098982 00000 n
+0002480779 00000 n
+0000069601 00000 n
+0000069658 00000 n
+0002099108 00000 n
+0002480695 00000 n
+0000069714 00000 n
+0000069760 00000 n
+0002100975 00000 n
+0002480596 00000 n
+0000069816 00000 n
+0000069858 00000 n
+0002104650 00000 n
+0002480512 00000 n
+0000069914 00000 n
+0000069986 00000 n
+0002108760 00000 n
+0002480387 00000 n
+0000070037 00000 n
+0000070080 00000 n
+0002108886 00000 n
+0002480303 00000 n
+0000070136 00000 n
+0000070173 00000 n
+0002109138 00000 n
+0002480204 00000 n
+0000070229 00000 n
+0000070276 00000 n
+0002109389 00000 n
+0002480105 00000 n
+0000070332 00000 n
+0000070368 00000 n
+0002112884 00000 n
+0002480006 00000 n
+0000070424 00000 n
+0000070486 00000 n
+0002113136 00000 n
+0002479907 00000 n
+0000070542 00000 n
+0000070578 00000 n
+0002113261 00000 n
+0002479782 00000 n
+0000070634 00000 n
+0000070666 00000 n
+0002113387 00000 n
+0002479698 00000 n
+0000070727 00000 n
+0000070767 00000 n
+0002116572 00000 n
+0002479599 00000 n
+0000070828 00000 n
+0000070882 00000 n
+0002118044 00000 n
+0002479515 00000 n
+0000070943 00000 n
+0000070991 00000 n
+0002120618 00000 n
+0002479375 00000 n
+0000071040 00000 n
+0000071101 00000 n
+0002120744 00000 n
+0002479250 00000 n
0000071152 00000 n
-0000071195 00000 n
-0001840975 00000 n
-0002131134 00000 n
-0000071251 00000 n
-0000071293 00000 n
-0001844842 00000 n
-0002131035 00000 n
-0000071349 00000 n
-0000071394 00000 n
-0001844968 00000 n
-0002130936 00000 n
-0000071450 00000 n
-0000071493 00000 n
-0001845094 00000 n
-0002130837 00000 n
-0000071549 00000 n
-0000071592 00000 n
-0001845220 00000 n
-0002130738 00000 n
-0000071648 00000 n
-0000071689 00000 n
-0001845346 00000 n
-0002130654 00000 n
-0000071746 00000 n
-0000071799 00000 n
-0001846089 00000 n
-0002130514 00000 n
-0000071844 00000 n
-0000071882 00000 n
-0001848932 00000 n
-0002130389 00000 n
-0000071931 00000 n
-0000071974 00000 n
-0001849058 00000 n
-0002130305 00000 n
-0000072025 00000 n
-0000072063 00000 n
-0001849184 00000 n
-0002130206 00000 n
-0000072114 00000 n
-0000072151 00000 n
-0001853056 00000 n
-0002130107 00000 n
-0000072202 00000 n
-0000072237 00000 n
-0001866538 00000 n
-0002130023 00000 n
-0000072288 00000 n
-0000072336 00000 n
-0001870280 00000 n
-0002129883 00000 n
-0000072385 00000 n
-0000072445 00000 n
-0001870406 00000 n
-0002129799 00000 n
+0000071206 00000 n
+0002120870 00000 n
+0002479125 00000 n
+0000071262 00000 n
+0000071300 00000 n
+0002127716 00000 n
+0002479041 00000 n
+0000071361 00000 n
+0000071404 00000 n
+0002127842 00000 n
+0002478942 00000 n
+0000071465 00000 n
+0000071528 00000 n
+0002131049 00000 n
+0002478843 00000 n
+0000071589 00000 n
+0000071632 00000 n
+0002131175 00000 n
+0002478744 00000 n
+0000071693 00000 n
+0000071749 00000 n
+0002131301 00000 n
+0002478660 00000 n
+0000071810 00000 n
+0000071863 00000 n
+0002131427 00000 n
+0002478576 00000 n
+0000071919 00000 n
+0000071973 00000 n
+0002134813 00000 n
+0002478451 00000 n
+0000072024 00000 n
+0000072067 00000 n
+0002135065 00000 n
+0002478367 00000 n
+0000072123 00000 n
+0000072171 00000 n
+0002138838 00000 n
+0002478283 00000 n
+0000072227 00000 n
+0000072285 00000 n
+0002144089 00000 n
+0002478158 00000 n
+0000072334 00000 n
+0000072398 00000 n
+0002144215 00000 n
+0002478047 00000 n
+0000072449 00000 n
0000072496 00000 n
-0000072539 00000 n
-0001870532 00000 n
-0002129700 00000 n
-0000072590 00000 n
-0000072685 00000 n
-0001875461 00000 n
-0002129601 00000 n
-0000072736 00000 n
-0000072773 00000 n
-0001875587 00000 n
-0002129502 00000 n
-0000072824 00000 n
-0000072885 00000 n
-0001878849 00000 n
-0002129418 00000 n
-0000072936 00000 n
-0000072994 00000 n
-0001882722 00000 n
-0002129293 00000 n
-0000073043 00000 n
-0000073081 00000 n
-0001882848 00000 n
-0002129209 00000 n
-0000073132 00000 n
-0000073170 00000 n
-0001882974 00000 n
-0002129110 00000 n
-0000073221 00000 n
-0000073259 00000 n
-0001883100 00000 n
-0002129011 00000 n
-0000073310 00000 n
-0000073348 00000 n
-0001886922 00000 n
-0002128912 00000 n
-0000073399 00000 n
-0000073440 00000 n
-0001887047 00000 n
-0002128813 00000 n
-0000073491 00000 n
-0000073547 00000 n
-0001887173 00000 n
-0002128729 00000 n
+0002144341 00000 n
+0002477963 00000 n
+0000072552 00000 n
+0000072601 00000 n
+0002147249 00000 n
+0002477864 00000 n
+0000072657 00000 n
+0000072710 00000 n
+0002150829 00000 n
+0002477765 00000 n
+0000072766 00000 n
+0000072812 00000 n
+0002150954 00000 n
+0002477666 00000 n
+0000072868 00000 n
+0000072911 00000 n
+0002154234 00000 n
+0002477567 00000 n
+0000072967 00000 n
+0000073009 00000 n
+0002154360 00000 n
+0002477468 00000 n
+0000073065 00000 n
+0000073110 00000 n
+0002154484 00000 n
+0002477369 00000 n
+0000073166 00000 n
+0000073209 00000 n
+0002157488 00000 n
+0002477270 00000 n
+0000073265 00000 n
+0000073308 00000 n
+0002157614 00000 n
+0002477171 00000 n
+0000073364 00000 n
+0000073405 00000 n
+0002157740 00000 n
+0002477087 00000 n
+0000073462 00000 n
+0000073515 00000 n
+0002158481 00000 n
+0002476947 00000 n
+0000073560 00000 n
0000073598 00000 n
-0000073631 00000 n
-0001887906 00000 n
-0002128604 00000 n
-0000073676 00000 n
-0000073710 00000 n
-0001892301 00000 n
-0002128479 00000 n
-0000073759 00000 n
-0000073803 00000 n
-0001892427 00000 n
-0002128354 00000 n
-0000073854 00000 n
-0000073912 00000 n
-0001892553 00000 n
-0002128270 00000 n
-0000073968 00000 n
-0000074008 00000 n
-0001892679 00000 n
-0002128145 00000 n
-0000074064 00000 n
-0000074115 00000 n
-0001892805 00000 n
-0002128061 00000 n
-0000074176 00000 n
-0000074223 00000 n
-0001892931 00000 n
-0002127977 00000 n
-0000074284 00000 n
-0000074328 00000 n
-0001897451 00000 n
-0002127878 00000 n
-0000074379 00000 n
+0002160957 00000 n
+0002476822 00000 n
+0000073647 00000 n
+0000073690 00000 n
+0002161083 00000 n
+0002476738 00000 n
+0000073741 00000 n
+0000073779 00000 n
+0002161209 00000 n
+0002476639 00000 n
+0000073830 00000 n
+0000073867 00000 n
+0002164636 00000 n
+0002476555 00000 n
+0000073918 00000 n
+0000073953 00000 n
+0002182493 00000 n
+0002476415 00000 n
+0000074002 00000 n
+0000074062 00000 n
+0002182619 00000 n
+0002476290 00000 n
+0000074113 00000 n
+0000074156 00000 n
+0002182745 00000 n
+0002476206 00000 n
+0000074212 00000 n
+0000074267 00000 n
+0002182871 00000 n
+0002476107 00000 n
+0000074323 00000 n
+0000074358 00000 n
+0002186290 00000 n
+0002476008 00000 n
+0000074414 00000 n
0000074450 00000 n
-0001897577 00000 n
-0002127779 00000 n
-0000074501 00000 n
-0000074558 00000 n
-0001897703 00000 n
-0002127639 00000 n
-0000074609 00000 n
-0000074656 00000 n
-0001900361 00000 n
-0002127529 00000 n
-0000074712 00000 n
-0000074785 00000 n
-0001900487 00000 n
-0002127445 00000 n
-0000074846 00000 n
-0000074919 00000 n
-0001900613 00000 n
-0002127361 00000 n
+0002186416 00000 n
+0002475883 00000 n
+0000074506 00000 n
+0000074561 00000 n
+0002186541 00000 n
+0002475799 00000 n
+0000074622 00000 n
+0000074701 00000 n
+0002190908 00000 n
+0002475715 00000 n
+0000074762 00000 n
+0000074841 00000 n
+0002191034 00000 n
+0002475616 00000 n
+0000074892 00000 n
+0000074929 00000 n
+0002191160 00000 n
+0002475517 00000 n
0000074980 00000 n
-0000075053 00000 n
-0001903580 00000 n
-0002127221 00000 n
-0000075104 00000 n
-0000075156 00000 n
-0001903706 00000 n
-0002127137 00000 n
-0000075212 00000 n
-0000075264 00000 n
-0001906242 00000 n
-0002127053 00000 n
-0000075320 00000 n
-0000075384 00000 n
-0001906367 00000 n
-0002126969 00000 n
-0000075435 00000 n
-0000075474 00000 n
-0001909911 00000 n
-0002126829 00000 n
-0000075523 00000 n
-0000075558 00000 n
-0001910037 00000 n
-0002126745 00000 n
-0000075609 00000 n
-0000075639 00000 n
-0001910163 00000 n
-0002126646 00000 n
-0000075690 00000 n
-0000075724 00000 n
-0001910289 00000 n
-0002126547 00000 n
-0000075775 00000 n
-0000075805 00000 n
-0001911922 00000 n
-0002126448 00000 n
-0000075856 00000 n
-0000075907 00000 n
-0001914436 00000 n
-0002126308 00000 n
-0000075958 00000 n
-0000075987 00000 n
-0001914562 00000 n
-0002126239 00000 n
-0000076043 00000 n
-0000076092 00000 n
-0001914688 00000 n
-0002126114 00000 n
-0000076143 00000 n
-0000076176 00000 n
-0001914813 00000 n
-0002126030 00000 n
-0000076232 00000 n
-0000076280 00000 n
-0001914939 00000 n
-0002125946 00000 n
-0000076336 00000 n
-0000076384 00000 n
-0001919596 00000 n
-0002125806 00000 n
-0000076433 00000 n
-0000076485 00000 n
-0001919722 00000 n
-0002125722 00000 n
-0000076536 00000 n
-0000076580 00000 n
-0001919848 00000 n
-0002125582 00000 n
-0000076631 00000 n
-0000076667 00000 n
-0001919974 00000 n
-0002125498 00000 n
-0000076723 00000 n
-0000076826 00000 n
-0001924378 00000 n
-0002125399 00000 n
-0000076882 00000 n
-0000076990 00000 n
-0001924504 00000 n
-0002125315 00000 n
-0000077046 00000 n
+0000075041 00000 n
+0002194695 00000 n
+0002475433 00000 n
+0000075092 00000 n
+0000075150 00000 n
+0002198150 00000 n
+0002475308 00000 n
+0000075199 00000 n
+0000075237 00000 n
+0002198276 00000 n
+0002475224 00000 n
+0000075288 00000 n
+0000075326 00000 n
+0002198402 00000 n
+0002475125 00000 n
+0000075377 00000 n
+0000075415 00000 n
+0002198528 00000 n
+0002475026 00000 n
+0000075466 00000 n
+0000075504 00000 n
+0002201852 00000 n
+0002474927 00000 n
+0000075555 00000 n
+0000075596 00000 n
+0002203562 00000 n
+0002474828 00000 n
+0000075647 00000 n
+0000075703 00000 n
+0002203688 00000 n
+0002474744 00000 n
+0000075754 00000 n
+0000075787 00000 n
+0002204418 00000 n
+0002474619 00000 n
+0000075832 00000 n
+0000075866 00000 n
+0002207736 00000 n
+0002474494 00000 n
+0000075915 00000 n
+0000075959 00000 n
+0002207862 00000 n
+0002474369 00000 n
+0000076010 00000 n
+0000076068 00000 n
+0002207988 00000 n
+0002474285 00000 n
+0000076124 00000 n
+0000076164 00000 n
+0002208114 00000 n
+0002474160 00000 n
+0000076220 00000 n
+0000076271 00000 n
+0002208240 00000 n
+0002474076 00000 n
+0000076332 00000 n
+0000076379 00000 n
+0002208366 00000 n
+0002473992 00000 n
+0000076440 00000 n
+0000076484 00000 n
+0002213167 00000 n
+0002473893 00000 n
+0000076535 00000 n
+0000076606 00000 n
+0002215387 00000 n
+0002473794 00000 n
+0000076657 00000 n
+0000076714 00000 n
+0002215513 00000 n
+0002473654 00000 n
+0000076765 00000 n
+0000076812 00000 n
+0002217689 00000 n
+0002473544 00000 n
+0000076868 00000 n
+0000076941 00000 n
+0002217815 00000 n
+0002473460 00000 n
+0000077002 00000 n
+0000077075 00000 n
+0002220422 00000 n
+0002473376 00000 n
0000077136 00000 n
-0001924630 00000 n
-0002125175 00000 n
-0000077187 00000 n
-0000077235 00000 n
-0001924756 00000 n
-0002125091 00000 n
-0000077291 00000 n
-0000077357 00000 n
-0001924882 00000 n
-0002124992 00000 n
-0000077413 00000 n
-0000077480 00000 n
-0001928754 00000 n
-0002124893 00000 n
-0000077536 00000 n
-0000077595 00000 n
-0001928880 00000 n
-0002124794 00000 n
-0000077651 00000 n
+0000077209 00000 n
+0002220548 00000 n
+0002473251 00000 n
+0000077260 00000 n
+0000077312 00000 n
+0002220674 00000 n
+0002473167 00000 n
+0000077368 00000 n
+0000077420 00000 n
+0002224598 00000 n
+0002473083 00000 n
+0000077476 00000 n
+0000077540 00000 n
+0002227631 00000 n
+0002472943 00000 n
+0000077589 00000 n
+0000077624 00000 n
+0002227757 00000 n
+0002472859 00000 n
+0000077675 00000 n
0000077705 00000 n
-0001929006 00000 n
-0002124695 00000 n
-0000077761 00000 n
-0000077819 00000 n
-0001929131 00000 n
-0002124611 00000 n
-0000077875 00000 n
-0000077920 00000 n
-0001929257 00000 n
-0002124471 00000 n
-0000077971 00000 n
-0000078012 00000 n
-0001932965 00000 n
-0002124402 00000 n
-0000078068 00000 n
-0000078113 00000 n
-0001933091 00000 n
-0002124303 00000 n
-0000078164 00000 n
-0000078217 00000 n
-0001933216 00000 n
-0002124219 00000 n
-0000078268 00000 n
-0000078308 00000 n
-0001936633 00000 n
-0002124078 00000 n
-0000078357 00000 n
-0000078405 00000 n
-0001936759 00000 n
-0002123994 00000 n
-0000078456 00000 n
-0000078493 00000 n
-0001936885 00000 n
-0002123895 00000 n
-0000078544 00000 n
-0000078584 00000 n
-0001937011 00000 n
-0002123796 00000 n
-0000078635 00000 n
-0000078670 00000 n
-0001940198 00000 n
-0002123697 00000 n
-0000078721 00000 n
-0000078755 00000 n
-0001940324 00000 n
-0002123598 00000 n
-0000078806 00000 n
-0000078841 00000 n
-0001940449 00000 n
-0002123499 00000 n
-0000078892 00000 n
-0000078926 00000 n
-0001940575 00000 n
-0002123400 00000 n
-0000078977 00000 n
-0000079012 00000 n
-0001940701 00000 n
-0002123301 00000 n
-0000079063 00000 n
-0000079100 00000 n
-0001943954 00000 n
-0002123202 00000 n
-0000079151 00000 n
-0000079190 00000 n
-0001944080 00000 n
-0002123103 00000 n
-0000079242 00000 n
-0000079314 00000 n
-0001944206 00000 n
-0002123019 00000 n
-0000079366 00000 n
-0000079410 00000 n
-0001945104 00000 n
-0002122879 00000 n
-0000079459 00000 n
-0000079515 00000 n
-0001945230 00000 n
-0002122810 00000 n
-0000079566 00000 n
-0000079596 00000 n
-0001953354 00000 n
-0002122685 00000 n
-0000079645 00000 n
-0000079686 00000 n
-0001953480 00000 n
-0002122601 00000 n
-0000079737 00000 n
-0000079771 00000 n
-0001953606 00000 n
-0002122502 00000 n
-0000079822 00000 n
-0000079878 00000 n
-0001953732 00000 n
-0002122418 00000 n
-0000079929 00000 n
-0000079960 00000 n
-0000080318 00000 n
-0000080567 00000 n
-0000080014 00000 n
-0000080441 00000 n
-0000080504 00000 n
-0002111617 00000 n
-0002097165 00000 n
-0002111449 00000 n
-0002096742 00000 n
-0002093229 00000 n
-0002096577 00000 n
-0002112565 00000 n
-0000083023 00000 n
-0000082109 00000 n
-0000080655 00000 n
-0000082960 00000 n
-0002092184 00000 n
-0002073369 00000 n
-0002092019 00000 n
-0000082280 00000 n
-0002072347 00000 n
-0002055554 00000 n
-0002072181 00000 n
-0000082449 00000 n
-0000082621 00000 n
-0000082789 00000 n
-0000094252 00000 n
-0000085332 00000 n
-0000083111 00000 n
-0000094189 00000 n
-0002053593 00000 n
-0002037753 00000 n
-0002053427 00000 n
-0000085917 00000 n
-0000086101 00000 n
-0002037294 00000 n
-0002035352 00000 n
-0002037128 00000 n
-0002033450 00000 n
-0002031436 00000 n
-0002033285 00000 n
-0000086251 00000 n
-0000086423 00000 n
-0000086573 00000 n
-0000086741 00000 n
-0000086912 00000 n
-0000087081 00000 n
-0000087234 00000 n
-0000087403 00000 n
-0000087555 00000 n
-0000087723 00000 n
-0000087895 00000 n
-0000088064 00000 n
-0000088217 00000 n
-0000088386 00000 n
-0000088557 00000 n
-0000088730 00000 n
-0000088883 00000 n
-0000089051 00000 n
-0000089230 00000 n
-0000089387 00000 n
-0000089556 00000 n
-0000089724 00000 n
-0000089895 00000 n
-0000090062 00000 n
-0000090234 00000 n
-0000090394 00000 n
-0000090563 00000 n
-0000090719 00000 n
-0000090888 00000 n
-0000091047 00000 n
-0000091216 00000 n
-0000091366 00000 n
-0000091538 00000 n
-0000091709 00000 n
-0000091878 00000 n
-0000092046 00000 n
-0000092217 00000 n
-0000092373 00000 n
-0000092543 00000 n
-0000092712 00000 n
-0000092870 00000 n
-0000093039 00000 n
-0000093208 00000 n
-0000093358 00000 n
-0000093527 00000 n
-0000093697 00000 n
-0000093864 00000 n
-0000094035 00000 n
-0000276682 00000 n
-0000292296 00000 n
-0000302356 00000 n
-0000306617 00000 n
-0000338557 00000 n
-0000384361 00000 n
-0000406179 00000 n
-0000446374 00000 n
-0000453316 00000 n
-0000457576 00000 n
-0000525146 00000 n
-0000591395 00000 n
-0000603877 00000 n
-0000659654 00000 n
-0000705479 00000 n
-0000105993 00000 n
-0000096793 00000 n
-0000094396 00000 n
-0000105930 00000 n
-0000097396 00000 n
-0000097564 00000 n
-0000097733 00000 n
-0000097894 00000 n
-0000098063 00000 n
-0000098234 00000 n
-0000098383 00000 n
-0000098554 00000 n
-0000098706 00000 n
-0000098879 00000 n
-0000099049 00000 n
-0000099205 00000 n
-0000099378 00000 n
-0000099551 00000 n
-0000099697 00000 n
-0000099869 00000 n
-0000100038 00000 n
-0000100187 00000 n
-0000100355 00000 n
-0000100523 00000 n
-0000100698 00000 n
-0000100870 00000 n
-0000101039 00000 n
-0000101208 00000 n
-0000101377 00000 n
-0000101531 00000 n
-0000101700 00000 n
-0000101854 00000 n
-0000102023 00000 n
-0000102169 00000 n
-0000102338 00000 n
-0000102515 00000 n
-0000102679 00000 n
-0000102847 00000 n
-0000102997 00000 n
-0000103169 00000 n
-0000103342 00000 n
-0000103490 00000 n
-0000103659 00000 n
-0000103810 00000 n
-0000103979 00000 n
-0000104139 00000 n
-0000104311 00000 n
-0000104466 00000 n
-0000104634 00000 n
-0000104782 00000 n
-0000104951 00000 n
-0000105104 00000 n
-0000105272 00000 n
-0000105442 00000 n
-0000105592 00000 n
-0000105761 00000 n
-0000720199 00000 n
-0000734808 00000 n
-0000740545 00000 n
-0000896217 00000 n
-0001572117 00000 n
-0001583218 00000 n
-0001628617 00000 n
-0001644874 00000 n
-0001669271 00000 n
-0001729493 00000 n
-0001770818 00000 n
-0001799574 00000 n
-0001804650 00000 n
-0001805770 00000 n
-0001808759 00000 n
-0001812209 00000 n
-0001832963 00000 n
-0001848995 00000 n
-0001870343 00000 n
-0000110765 00000 n
-0000107257 00000 n
-0000106109 00000 n
-0000110702 00000 n
-0000107563 00000 n
-0000107736 00000 n
-0000107889 00000 n
-0000108061 00000 n
-0000108214 00000 n
-0000108386 00000 n
-0000108541 00000 n
-0000108713 00000 n
-0000108870 00000 n
-0000109039 00000 n
-0000109211 00000 n
-0000109360 00000 n
-0000109537 00000 n
-0000109709 00000 n
-0000109878 00000 n
-0000110028 00000 n
-0000110197 00000 n
-0000110358 00000 n
-0000110530 00000 n
-0001882785 00000 n
-0001892364 00000 n
-0001909974 00000 n
-0001919659 00000 n
-0001936696 00000 n
-0001945167 00000 n
-0001953417 00000 n
-0000118717 00000 n
-0000112838 00000 n
-0000110881 00000 n
-0000118591 00000 n
-0000118654 00000 n
-0000113279 00000 n
-0000113429 00000 n
-0000113582 00000 n
-0000113737 00000 n
-0000113891 00000 n
-0000114046 00000 n
-0000114201 00000 n
-0000114355 00000 n
-0000114509 00000 n
-0000114661 00000 n
-0000114816 00000 n
-0000114971 00000 n
-0000115131 00000 n
-0000115296 00000 n
-0000115456 00000 n
-0000115610 00000 n
-0000115765 00000 n
-0000115920 00000 n
-0000116074 00000 n
-0000116229 00000 n
-0000116389 00000 n
-0000116549 00000 n
-0000116702 00000 n
-0000116857 00000 n
-0000117007 00000 n
-0000117160 00000 n
-0000117315 00000 n
-0000117469 00000 n
-0000117623 00000 n
-0000117783 00000 n
-0000117948 00000 n
-0000118107 00000 n
-0000118270 00000 n
-0000118428 00000 n
-0000129083 00000 n
-0000121338 00000 n
-0000118805 00000 n
-0000129020 00000 n
-0002030828 00000 n
-0002021037 00000 n
-0002030662 00000 n
-0000121878 00000 n
-0000122038 00000 n
-0000122203 00000 n
-0000122363 00000 n
-0000122528 00000 n
-0000122683 00000 n
-0000122838 00000 n
-0000122998 00000 n
-0000123158 00000 n
-0000123317 00000 n
-0000123477 00000 n
-0000123629 00000 n
-0000123784 00000 n
-0000123939 00000 n
-0000124099 00000 n
-0000124259 00000 n
-0000124414 00000 n
-0000124569 00000 n
-0000124724 00000 n
-0000124884 00000 n
-0000125048 00000 n
-0000125213 00000 n
-0000125378 00000 n
-0000125537 00000 n
-0000125691 00000 n
-0000125851 00000 n
-0000126011 00000 n
-0000126171 00000 n
-0000126331 00000 n
-0000126490 00000 n
-0000126650 00000 n
-0000126803 00000 n
-0000126958 00000 n
-0000127113 00000 n
-0000127273 00000 n
-0000127438 00000 n
-0000127598 00000 n
-0000127758 00000 n
-0000127918 00000 n
-0000128072 00000 n
-0000128232 00000 n
-0000128387 00000 n
-0000128546 00000 n
-0000128704 00000 n
-0000128862 00000 n
-0002112690 00000 n
-0000139261 00000 n
-0000131380 00000 n
-0000129185 00000 n
-0000139198 00000 n
-0000131929 00000 n
-0000132082 00000 n
-0000132237 00000 n
-0000132392 00000 n
-0000132552 00000 n
-0000132712 00000 n
-0000132872 00000 n
-0000133031 00000 n
-0000133196 00000 n
-0000133361 00000 n
-0000133525 00000 n
-0000133680 00000 n
-0000133840 00000 n
-0000134000 00000 n
-0000134155 00000 n
-0000134315 00000 n
-0000134475 00000 n
-0000134635 00000 n
-0000134800 00000 n
-0000134959 00000 n
-0000135119 00000 n
-0000135279 00000 n
-0000135434 00000 n
-0000135593 00000 n
-0000135753 00000 n
-0000135906 00000 n
-0000136061 00000 n
-0000136216 00000 n
-0000136371 00000 n
-0000136531 00000 n
-0000136690 00000 n
-0000136844 00000 n
-0000136997 00000 n
-0000137151 00000 n
-0000137301 00000 n
-0000137455 00000 n
-0000137611 00000 n
-0000137766 00000 n
-0000137922 00000 n
-0000138083 00000 n
-0000138244 00000 n
-0000138405 00000 n
-0000138561 00000 n
-0000138722 00000 n
-0000138881 00000 n
-0000139040 00000 n
-0000150148 00000 n
-0000141785 00000 n
-0000139363 00000 n
-0000150085 00000 n
-0000142352 00000 n
-0000142513 00000 n
-0000142674 00000 n
-0000142835 00000 n
-0000142996 00000 n
-0000143152 00000 n
-0000143313 00000 n
-0000143474 00000 n
-0000143635 00000 n
-0000143790 00000 n
-0000143951 00000 n
-0000144112 00000 n
-0000144267 00000 n
-0000144428 00000 n
-0000144589 00000 n
-0000144750 00000 n
-0000144916 00000 n
-0000145072 00000 n
-0000145233 00000 n
-0000145393 00000 n
-0000145547 00000 n
-0000145702 00000 n
-0000145857 00000 n
-0000146018 00000 n
-0000146184 00000 n
-0000146350 00000 n
-0000146511 00000 n
-0002020100 00000 n
-0002000889 00000 n
-0002019934 00000 n
-0000146667 00000 n
-0000146828 00000 n
-0000146989 00000 n
-0000147144 00000 n
-0000147304 00000 n
-0000147465 00000 n
-0000147626 00000 n
-0000147786 00000 n
-0000147952 00000 n
-0000148118 00000 n
-0000148283 00000 n
-0000148448 00000 n
-0000148613 00000 n
-0000148778 00000 n
-0000148943 00000 n
-0000149106 00000 n
-0000149271 00000 n
-0000149437 00000 n
-0000149596 00000 n
-0000149759 00000 n
-0000149922 00000 n
-0000161064 00000 n
-0000152651 00000 n
-0000150264 00000 n
-0000161001 00000 n
-0000153227 00000 n
-0000153392 00000 n
-0000153552 00000 n
-0000153707 00000 n
-0000153867 00000 n
-0000154027 00000 n
-0000154187 00000 n
-0000154341 00000 n
-0000154495 00000 n
-0000154650 00000 n
-0000154810 00000 n
-0000154964 00000 n
-0000155124 00000 n
-0000155284 00000 n
-0000155439 00000 n
-0000155599 00000 n
-0000155759 00000 n
-0000155913 00000 n
-0000156068 00000 n
-0000156222 00000 n
-0000156382 00000 n
-0000156542 00000 n
-0000156700 00000 n
-0000156854 00000 n
-0000157014 00000 n
-0000157174 00000 n
-0000157334 00000 n
-0000157489 00000 n
-0000157649 00000 n
-0000157814 00000 n
-0000157979 00000 n
-0000158133 00000 n
-0000158292 00000 n
-0000158452 00000 n
-0000158612 00000 n
-0000158771 00000 n
-0000158936 00000 n
-0000159101 00000 n
-0000159261 00000 n
-0000159421 00000 n
-0000159581 00000 n
-0000159736 00000 n
-0000159896 00000 n
-0000160055 00000 n
-0000160209 00000 n
-0000160363 00000 n
-0000160517 00000 n
-0000160675 00000 n
-0000160838 00000 n
-0000171313 00000 n
-0000163409 00000 n
-0000161180 00000 n
-0000171250 00000 n
-0000163958 00000 n
-0000164123 00000 n
-0000164288 00000 n
-0000164453 00000 n
-0000164618 00000 n
-0000164783 00000 n
-0000164948 00000 n
-0000165113 00000 n
-0000165268 00000 n
-0000165427 00000 n
-0000165592 00000 n
-0000165757 00000 n
-0000165911 00000 n
-0000166071 00000 n
-0000166231 00000 n
-0000166386 00000 n
-0000166541 00000 n
-0000166701 00000 n
-0000166856 00000 n
-0000167010 00000 n
-0000167164 00000 n
-0000167319 00000 n
-0000167474 00000 n
-0000167633 00000 n
-0000167792 00000 n
-0000167952 00000 n
-0000168112 00000 n
-0000168272 00000 n
-0000168432 00000 n
-0000168587 00000 n
-0000168742 00000 n
-0000168902 00000 n
-0000169061 00000 n
-0000169215 00000 n
-0000169370 00000 n
-0000169524 00000 n
-0000169679 00000 n
-0000169839 00000 n
-0000169999 00000 n
-0000170154 00000 n
-0000170314 00000 n
-0000170474 00000 n
-0000170629 00000 n
-0000170788 00000 n
-0000170942 00000 n
-0000171096 00000 n
-0000182689 00000 n
-0000174231 00000 n
-0000171415 00000 n
-0000182626 00000 n
-0000174807 00000 n
-0000174961 00000 n
-0000175116 00000 n
-0000175271 00000 n
-0000175431 00000 n
-0000175591 00000 n
-0000175751 00000 n
-0000175911 00000 n
-0000176071 00000 n
-0000176225 00000 n
-0000176385 00000 n
-0000176545 00000 n
-0000176699 00000 n
-0000176854 00000 n
-0000177014 00000 n
-0000177174 00000 n
-0000177334 00000 n
-0000177494 00000 n
-0000177654 00000 n
-0000177814 00000 n
-0000177969 00000 n
-0000178128 00000 n
-0000178288 00000 n
-0000178448 00000 n
-0000178608 00000 n
-0000178767 00000 n
-0000178922 00000 n
-0000179082 00000 n
-0000179242 00000 n
-0000179407 00000 n
-0000179572 00000 n
-0000179737 00000 n
-0000179902 00000 n
-0000180066 00000 n
-0000180231 00000 n
-0000180395 00000 n
-0000180560 00000 n
-0000180725 00000 n
-0000180880 00000 n
-0000181040 00000 n
-0000181200 00000 n
-0000181360 00000 n
-0000181520 00000 n
-0000181674 00000 n
-0000181834 00000 n
+0002227883 00000 n
+0002472760 00000 n
+0000077756 00000 n
+0000077790 00000 n
+0002228008 00000 n
+0002472661 00000 n
+0000077841 00000 n
+0000077871 00000 n
+0002231743 00000 n
+0002472562 00000 n
+0000077922 00000 n
+0000077973 00000 n
+0002231869 00000 n
+0002472422 00000 n
+0000078024 00000 n
+0000078053 00000 n
+0002231995 00000 n
+0002472353 00000 n
+0000078109 00000 n
+0000078158 00000 n
+0002232121 00000 n
+0002472228 00000 n
+0000078209 00000 n
+0000078242 00000 n
+0002232247 00000 n
+0002472144 00000 n
+0000078298 00000 n
+0000078346 00000 n
+0002233784 00000 n
+0002472060 00000 n
+0000078402 00000 n
+0000078450 00000 n
+0002237565 00000 n
+0002471920 00000 n
+0000078499 00000 n
+0000078551 00000 n
+0002237691 00000 n
+0002471836 00000 n
+0000078602 00000 n
+0000078646 00000 n
+0002237816 00000 n
+0002471696 00000 n
+0000078697 00000 n
+0000078733 00000 n
+0002237942 00000 n
+0002471612 00000 n
+0000078789 00000 n
+0000078883 00000 n
+0002241730 00000 n
+0002471513 00000 n
+0000078939 00000 n
+0000079038 00000 n
+0002241856 00000 n
+0002471429 00000 n
+0000079094 00000 n
+0000079167 00000 n
+0002245045 00000 n
+0002471289 00000 n
+0000079218 00000 n
+0000079266 00000 n
+0002245171 00000 n
+0002471205 00000 n
+0000079322 00000 n
+0000079384 00000 n
+0002245296 00000 n
+0002471106 00000 n
+0000079440 00000 n
+0000079507 00000 n
+0002245421 00000 n
+0002471007 00000 n
+0000079563 00000 n
+0000079624 00000 n
+0002245547 00000 n
+0002470908 00000 n
+0000079680 00000 n
+0000079734 00000 n
+0002245673 00000 n
+0002470809 00000 n
+0000079790 00000 n
+0000079848 00000 n
+0002248985 00000 n
+0002470725 00000 n
+0000079904 00000 n
+0000079949 00000 n
+0002249111 00000 n
+0002470585 00000 n
+0000080000 00000 n
+0000080041 00000 n
+0002249237 00000 n
+0002470516 00000 n
+0000080097 00000 n
+0000080142 00000 n
+0002249363 00000 n
+0002470417 00000 n
+0000080193 00000 n
+0000080246 00000 n
+0002252093 00000 n
+0002470333 00000 n
+0000080297 00000 n
+0000080337 00000 n
+0002254998 00000 n
+0002470192 00000 n
+0000080386 00000 n
+0000080434 00000 n
+0002255124 00000 n
+0002470108 00000 n
+0000080485 00000 n
+0000080522 00000 n
+0002255250 00000 n
+0002470009 00000 n
+0000080573 00000 n
+0000080613 00000 n
+0002258300 00000 n
+0002469910 00000 n
+0000080664 00000 n
+0000080699 00000 n
+0002258426 00000 n
+0002469811 00000 n
+0000080750 00000 n
+0000080784 00000 n
+0002258552 00000 n
+0002469712 00000 n
+0000080835 00000 n
+0000080870 00000 n
+0002258678 00000 n
+0002469613 00000 n
+0000080921 00000 n
+0000080955 00000 n
+0002261997 00000 n
+0002469514 00000 n
+0000081006 00000 n
+0000081041 00000 n
+0002262123 00000 n
+0002469415 00000 n
+0000081092 00000 n
+0000081129 00000 n
+0002262249 00000 n
+0002469316 00000 n
+0000081180 00000 n
+0000081219 00000 n
+0002262373 00000 n
+0002469217 00000 n
+0000081271 00000 n
+0000081343 00000 n
+0002262499 00000 n
+0002469133 00000 n
+0000081395 00000 n
+0000081439 00000 n
+0002264795 00000 n
+0002468993 00000 n
+0000081488 00000 n
+0000081544 00000 n
+0002264921 00000 n
+0002468924 00000 n
+0000081595 00000 n
+0000081625 00000 n
+0002271835 00000 n
+0002468799 00000 n
+0000081674 00000 n
+0000081715 00000 n
+0002271961 00000 n
+0002468715 00000 n
+0000081766 00000 n
+0000081800 00000 n
+0002274636 00000 n
+0002468631 00000 n
+0000081851 00000 n
+0000081907 00000 n
+0000082278 00000 n
+0000082527 00000 n
+0000081961 00000 n
+0000082401 00000 n
+0000082464 00000 n
+0002456348 00000 n
+0002441592 00000 n
+0002456180 00000 n
+0002441177 00000 n
+0002437387 00000 n
+0002441012 00000 n
+0002457302 00000 n
+0000085061 00000 n
+0000084147 00000 n
+0000082615 00000 n
+0000084998 00000 n
+0002436342 00000 n
+0002417527 00000 n
+0002436177 00000 n
+0000084318 00000 n
+0002416505 00000 n
+0002399712 00000 n
+0002416339 00000 n
+0000084487 00000 n
+0000084659 00000 n
+0000084827 00000 n
+0000086206 00000 n
+0000085753 00000 n
+0000085149 00000 n
+0000086080 00000 n
+0000086143 00000 n
+0000085897 00000 n
+0000091841 00000 n
+0000088115 00000 n
+0000086308 00000 n
+0000091715 00000 n
+0000091778 00000 n
+0000088430 00000 n
+0002398234 00000 n
+0002396292 00000 n
+0002398068 00000 n
+0002394390 00000 n
+0002392377 00000 n
+0002394225 00000 n
+0000088580 00000 n
+0000088752 00000 n
+0000088902 00000 n
+0000089074 00000 n
+0000089246 00000 n
+0000089415 00000 n
+0000089566 00000 n
+0000089735 00000 n
+0000089888 00000 n
+0000090060 00000 n
+0000090232 00000 n
+0000090401 00000 n
+0000090552 00000 n
+0000090720 00000 n
+0000090891 00000 n
+0000091064 00000 n
+0000091215 00000 n
+0000091384 00000 n
+0000091563 00000 n
+0000308010 00000 n
+0000323587 00000 n
+0000334357 00000 n
+0000338395 00000 n
+0000371396 00000 n
+0000454543 00000 n
+0000478692 00000 n
+0000098676 00000 n
+0000094093 00000 n
+0000091957 00000 n
+0000098613 00000 n
+0000094453 00000 n
+0000094621 00000 n
+0000094790 00000 n
+0000094961 00000 n
+0000095133 00000 n
+0000095305 00000 n
+0000095464 00000 n
+0000095633 00000 n
+0000095787 00000 n
+0000095956 00000 n
+0000096113 00000 n
+0000096282 00000 n
+0000096454 00000 n
+0000096602 00000 n
+0000096773 00000 n
+0000096944 00000 n
+0000097113 00000 n
+0000097282 00000 n
+0000097453 00000 n
+0000097608 00000 n
+0000097779 00000 n
+0000097948 00000 n
+0000098105 00000 n
+0000098274 00000 n
+0000098443 00000 n
+0000520912 00000 n
+0000529787 00000 n
+0000533887 00000 n
+0000624263 00000 n
+0000702479 00000 n
+0000725586 00000 n
+0000105667 00000 n
+0000101099 00000 n
+0000098778 00000 n
+0000105604 00000 n
+0000101459 00000 n
+0000101607 00000 n
+0000101776 00000 n
+0000101948 00000 n
+0000102117 00000 n
+0000102291 00000 n
+0000102448 00000 n
+0000102620 00000 n
+0000102788 00000 n
+0000102948 00000 n
+0000103117 00000 n
+0000103288 00000 n
+0000103460 00000 n
+0000103637 00000 n
+0000103784 00000 n
+0000103953 00000 n
+0000104103 00000 n
+0000104275 00000 n
+0000104446 00000 n
+0000104602 00000 n
+0000104772 00000 n
+0000104945 00000 n
+0000105117 00000 n
+0000105263 00000 n
+0000105435 00000 n
+0000791041 00000 n
+0000842126 00000 n
+0000857729 00000 n
+0000885224 00000 n
+0000891050 00000 n
+0001051201 00000 n
+0001837889 00000 n
+0000112144 00000 n
+0000107978 00000 n
+0000105769 00000 n
+0000112081 00000 n
+0000108320 00000 n
+0000108488 00000 n
+0000108657 00000 n
+0000108810 00000 n
+0000108979 00000 n
+0000109132 00000 n
+0000109301 00000 n
+0000109447 00000 n
+0000109616 00000 n
+0000109793 00000 n
+0000109957 00000 n
+0000110125 00000 n
+0000110275 00000 n
+0000110447 00000 n
+0000110623 00000 n
+0000110772 00000 n
+0000110941 00000 n
+0000111089 00000 n
+0000111258 00000 n
+0000111417 00000 n
+0000111589 00000 n
+0000111758 00000 n
+0000111929 00000 n
+0002457427 00000 n
+0001899321 00000 n
+0001916715 00000 n
+0001943234 00000 n
+0002008017 00000 n
+0002052817 00000 n
+0002084186 00000 n
+0002091383 00000 n
+0002092509 00000 n
+0002096066 00000 n
+0002120681 00000 n
+0000119067 00000 n
+0000114363 00000 n
+0000112246 00000 n
+0000119004 00000 n
+0000114732 00000 n
+0000114900 00000 n
+0000115047 00000 n
+0000115216 00000 n
+0000115368 00000 n
+0000115540 00000 n
+0000115712 00000 n
+0000115863 00000 n
+0000116034 00000 n
+0000116206 00000 n
+0000116379 00000 n
+0000116531 00000 n
+0000116703 00000 n
+0000116875 00000 n
+0000117026 00000 n
+0000117198 00000 n
+0000117370 00000 n
+0000117523 00000 n
+0000117695 00000 n
+0000117850 00000 n
+0000118020 00000 n
+0000118191 00000 n
+0000118339 00000 n
+0000118516 00000 n
+0000118688 00000 n
+0000118857 00000 n
+0002144152 00000 n
+0002161020 00000 n
+0002182556 00000 n
+0002198213 00000 n
+0002207799 00000 n
+0002227694 00000 n
+0002237628 00000 n
+0002255061 00000 n
+0002264858 00000 n
+0000120477 00000 n
+0000119752 00000 n
+0000119169 00000 n
+0000120414 00000 n
+0000119914 00000 n
+0000120082 00000 n
+0000120242 00000 n
+0002271898 00000 n
+0000129394 00000 n
+0000123345 00000 n
+0000120579 00000 n
+0000129268 00000 n
+0000129331 00000 n
+0000123795 00000 n
+0000123945 00000 n
+0000124098 00000 n
+0000124252 00000 n
+0000124407 00000 n
+0000124562 00000 n
+0000124716 00000 n
+0000124870 00000 n
+0000125025 00000 n
+0000125178 00000 n
+0000125333 00000 n
+0000125488 00000 n
+0000125648 00000 n
+0000125813 00000 n
+0000125972 00000 n
+0000126127 00000 n
+0000126282 00000 n
+0000126437 00000 n
+0000126591 00000 n
+0000126746 00000 n
+0000126906 00000 n
+0000127066 00000 n
+0000127226 00000 n
+0000127379 00000 n
+0000127534 00000 n
+0000127684 00000 n
+0000127837 00000 n
+0000127992 00000 n
+0000128146 00000 n
+0000128300 00000 n
+0000128460 00000 n
+0000128625 00000 n
+0000128784 00000 n
+0000128947 00000 n
+0000129105 00000 n
+0000140629 00000 n
+0000132708 00000 n
+0000129482 00000 n
+0000140566 00000 n
+0002391761 00000 n
+0002381869 00000 n
+0002391595 00000 n
+0000133257 00000 n
+0000133417 00000 n
+0000133582 00000 n
+0000133742 00000 n
+0000133907 00000 n
+0000134062 00000 n
+0000134217 00000 n
+0000134377 00000 n
+0000134537 00000 n
+0000134696 00000 n
+0000134856 00000 n
+0000135008 00000 n
+0000135163 00000 n
+0000135318 00000 n
+0000135478 00000 n
+0000135638 00000 n
+0000135793 00000 n
+0000135948 00000 n
+0000136103 00000 n
+0000136263 00000 n
+0000136427 00000 n
+0000136592 00000 n
+0000136757 00000 n
+0000136916 00000 n
+0000137070 00000 n
+0000137230 00000 n
+0000137390 00000 n
+0000137550 00000 n
+0000137710 00000 n
+0000137870 00000 n
+0000138030 00000 n
+0000138190 00000 n
+0000138343 00000 n
+0000138498 00000 n
+0000138653 00000 n
+0000138812 00000 n
+0000138977 00000 n
+0000139137 00000 n
+0000139297 00000 n
+0000139457 00000 n
+0000139612 00000 n
+0000139772 00000 n
+0000139927 00000 n
+0000140087 00000 n
+0000140246 00000 n
+0000140406 00000 n
+0000152317 00000 n
+0000144096 00000 n
+0000140731 00000 n
+0000152254 00000 n
+0000144663 00000 n
+0000144816 00000 n
+0000144971 00000 n
+0000145126 00000 n
+0000145286 00000 n
+0000145446 00000 n
+0000145606 00000 n
+0000145766 00000 n
+0000145931 00000 n
+0000146095 00000 n
+0000146260 00000 n
+0000146415 00000 n
+0000146574 00000 n
+0000146734 00000 n
+0000146889 00000 n
+0000147049 00000 n
+0000147209 00000 n
+0000147369 00000 n
+0000147534 00000 n
+0000147694 00000 n
+0000147854 00000 n
+0000148013 00000 n
+0000148168 00000 n
+0000148328 00000 n
+0000148488 00000 n
+0000148647 00000 n
+0000148799 00000 n
+0000148954 00000 n
+0000149109 00000 n
+0000149264 00000 n
+0000149424 00000 n
+0000149584 00000 n
+0000149738 00000 n
+0000149891 00000 n
+0000150046 00000 n
+0000150196 00000 n
+0000150350 00000 n
+0000150506 00000 n
+0000150662 00000 n
+0000150817 00000 n
+0000150978 00000 n
+0000151139 00000 n
+0000151300 00000 n
+0000151456 00000 n
+0000151617 00000 n
+0000151778 00000 n
+0000151937 00000 n
+0000152096 00000 n
+0000164733 00000 n
+0000156022 00000 n
+0000152419 00000 n
+0000164670 00000 n
+0000156607 00000 n
+0000156768 00000 n
+0000156929 00000 n
+0000157090 00000 n
+0000157246 00000 n
+0000157407 00000 n
+0000157568 00000 n
+0000157729 00000 n
+0000157885 00000 n
+0000158045 00000 n
+0000158206 00000 n
+0000158362 00000 n
+0000158522 00000 n
+0000158683 00000 n
+0000158844 00000 n
+0000159010 00000 n
+0000159166 00000 n
+0000159327 00000 n
+0000159488 00000 n
+0000159649 00000 n
+0000159803 00000 n
+0000159959 00000 n
+0000160119 00000 n
+0000160279 00000 n
+0000160435 00000 n
+0000160596 00000 n
+0000160762 00000 n
+0000160928 00000 n
+0000161089 00000 n
+0000161250 00000 n
+0002380939 00000 n
+0002361556 00000 n
+0002380773 00000 n
+0000161406 00000 n
+0000161566 00000 n
+0000161726 00000 n
+0000161882 00000 n
+0000162043 00000 n
+0000162203 00000 n
+0000162364 00000 n
+0000162525 00000 n
+0000162691 00000 n
+0000162857 00000 n
+0000163023 00000 n
+0000163189 00000 n
+0000163355 00000 n
+0000163521 00000 n
+0000163685 00000 n
+0000163851 00000 n
+0000164017 00000 n
+0000164183 00000 n
+0000164342 00000 n
+0000164506 00000 n
+0002457552 00000 n
+0000176252 00000 n
+0000168282 00000 n
+0000164849 00000 n
+0000176189 00000 n
+0000168831 00000 n
+0000168997 00000 n
+0000169163 00000 n
+0000169324 00000 n
+0000169480 00000 n
+0000169641 00000 n
+0000169802 00000 n
+0000169963 00000 n
+0000170117 00000 n
+0000170273 00000 n
+0000170429 00000 n
+0000170589 00000 n
+0000170745 00000 n
+0000170906 00000 n
+0000171067 00000 n
+0000171223 00000 n
+0000171384 00000 n
+0000171545 00000 n
+0000171706 00000 n
+0000171860 00000 n
+0000172016 00000 n
+0000172172 00000 n
+0000172331 00000 n
+0000172491 00000 n
+0000172652 00000 n
+0000172808 00000 n
+0000172969 00000 n
+0000173130 00000 n
+0000173291 00000 n
+0000173447 00000 n
+0000173608 00000 n
+0000173773 00000 n
+0000173938 00000 n
+0000174094 00000 n
+0000174255 00000 n
+0000174415 00000 n
+0000174576 00000 n
+0000174737 00000 n
+0000174903 00000 n
+0000175069 00000 n
+0000175230 00000 n
+0000175391 00000 n
+0000175552 00000 n
+0000175708 00000 n
+0000175868 00000 n
+0000176029 00000 n
+0000188744 00000 n
+0000179944 00000 n
+0000176368 00000 n
+0000188681 00000 n
+0000180538 00000 n
+0000180692 00000 n
+0000180848 00000 n
+0000181004 00000 n
+0000181165 00000 n
+0000181331 00000 n
+0000181497 00000 n
+0000181663 00000 n
+0000181829 00000 n
0000181994 00000 n
-0000182153 00000 n
-0000182310 00000 n
-0000182468 00000 n
-0000193565 00000 n
-0000185489 00000 n
-0000182805 00000 n
-0000193502 00000 n
-0000186047 00000 n
-0000186207 00000 n
-0000186363 00000 n
-0000186524 00000 n
-0000186685 00000 n
-0000186846 00000 n
-0000187007 00000 n
-0000187163 00000 n
-0000187318 00000 n
-0000187474 00000 n
-0000187630 00000 n
-0000187785 00000 n
-0000187946 00000 n
-0000188107 00000 n
-0000188261 00000 n
-0000188416 00000 n
-0000188576 00000 n
-0000188736 00000 n
-0000188890 00000 n
-0000189050 00000 n
-0000189210 00000 n
-0000189369 00000 n
-0000189523 00000 n
-0000189683 00000 n
-0000189843 00000 n
-0000190003 00000 n
-0000190163 00000 n
-0000190323 00000 n
-0000190477 00000 n
-0000190636 00000 n
-0000190796 00000 n
-0000190956 00000 n
-0000191115 00000 n
-0000191275 00000 n
-0000191435 00000 n
-0000191595 00000 n
-0000191755 00000 n
-0000191910 00000 n
-0000192070 00000 n
-0000192230 00000 n
-0000192390 00000 n
-0000192548 00000 n
-0000192708 00000 n
-0000192868 00000 n
-0000193027 00000 n
-0000193185 00000 n
-0000193343 00000 n
-0002112815 00000 n
-0000204804 00000 n
-0000196494 00000 n
-0000193681 00000 n
-0000204741 00000 n
-0000197061 00000 n
-0000197222 00000 n
-0000197383 00000 n
-0000197544 00000 n
-0000197705 00000 n
-0000197866 00000 n
-0000198027 00000 n
-0000198188 00000 n
-0000198348 00000 n
-0000198509 00000 n
-0000198664 00000 n
-0000198823 00000 n
-0000198983 00000 n
-0000199143 00000 n
-0000199298 00000 n
+0000182160 00000 n
+0000182326 00000 n
+0000182491 00000 n
+0000182657 00000 n
+0000182813 00000 n
+0000182974 00000 n
+0000183140 00000 n
+0000183306 00000 n
+0000183462 00000 n
+0000183623 00000 n
+0000183784 00000 n
+0000183939 00000 n
+0000184095 00000 n
+0000184256 00000 n
+0000184417 00000 n
+0000184577 00000 n
+0000184733 00000 n
+0000184887 00000 n
+0000185043 00000 n
+0000185199 00000 n
+0000185355 00000 n
+0000185516 00000 n
+0000185676 00000 n
+0000185836 00000 n
+0000185997 00000 n
+0000186158 00000 n
+0000186318 00000 n
+0000186474 00000 n
+0000186630 00000 n
+0000186791 00000 n
+0000186952 00000 n
+0000187106 00000 n
+0000187262 00000 n
+0000187418 00000 n
+0000187573 00000 n
+0000187734 00000 n
+0000187895 00000 n
+0000188055 00000 n
+0000188209 00000 n
+0000188368 00000 n
+0000188527 00000 n
+0000201599 00000 n
+0000192780 00000 n
+0000188846 00000 n
+0000201536 00000 n
+0000193374 00000 n
+0000193530 00000 n
+0000193684 00000 n
+0000193840 00000 n
+0000193996 00000 n
+0000194150 00000 n
+0000194305 00000 n
+0000194460 00000 n
+0000194621 00000 n
+0000194782 00000 n
+0000194942 00000 n
+0000195098 00000 n
+0000195259 00000 n
+0000195420 00000 n
+0000195576 00000 n
+0000195732 00000 n
+0000195893 00000 n
+0000196054 00000 n
+0000196215 00000 n
+0000196375 00000 n
+0000196536 00000 n
+0000196697 00000 n
+0000196851 00000 n
+0000197011 00000 n
+0000197172 00000 n
+0000197333 00000 n
+0000197494 00000 n
+0000197655 00000 n
+0000197811 00000 n
+0000197972 00000 n
+0000198133 00000 n
+0000198298 00000 n
+0000198463 00000 n
+0000198629 00000 n
+0000198795 00000 n
+0000198960 00000 n
+0000199126 00000 n
+0000199292 00000 n
0000199458 00000 n
-0000199618 00000 n
-0000199773 00000 n
-0000199933 00000 n
-0000200092 00000 n
-0000200247 00000 n
-0000200407 00000 n
-0000200567 00000 n
-0000200726 00000 n
-0000200886 00000 n
-0000201042 00000 n
-0000201203 00000 n
-0000201364 00000 n
-0000201525 00000 n
-0000201686 00000 n
-0000201847 00000 n
-0000202007 00000 n
-0000202168 00000 n
-0000202328 00000 n
-0000202489 00000 n
-0000202651 00000 n
-0000202813 00000 n
-0000202975 00000 n
-0000203137 00000 n
-0000203299 00000 n
-0000203461 00000 n
-0000203623 00000 n
-0000203778 00000 n
-0000203939 00000 n
-0000204100 00000 n
-0000204260 00000 n
-0000204418 00000 n
-0000204577 00000 n
-0000215006 00000 n
-0000207593 00000 n
-0000204906 00000 n
-0000214943 00000 n
-0000208106 00000 n
-0000208272 00000 n
-0000208438 00000 n
-0000208604 00000 n
-0000208770 00000 n
-0000208935 00000 n
-0000209101 00000 n
-0000209266 00000 n
-0000209432 00000 n
-0000209599 00000 n
-0000209766 00000 n
-0000209932 00000 n
-0000210099 00000 n
-0000210265 00000 n
-0000210432 00000 n
-0000210593 00000 n
-0000210748 00000 n
-0000210909 00000 n
-0000211070 00000 n
-0000211231 00000 n
-0000211392 00000 n
-0000211548 00000 n
-0000211709 00000 n
-0000211875 00000 n
-0000212041 00000 n
-0000212206 00000 n
-0000212372 00000 n
-0000212538 00000 n
-0000212703 00000 n
-0000212869 00000 n
-0000213035 00000 n
-0000213196 00000 n
-0000213352 00000 n
-0000213513 00000 n
-0000213674 00000 n
-0000213835 00000 n
-0000213995 00000 n
-0000214156 00000 n
-0000214317 00000 n
-0000214477 00000 n
-0000214630 00000 n
-0000214784 00000 n
-0000225860 00000 n
-0000217423 00000 n
-0000215108 00000 n
-0000225797 00000 n
-0000217999 00000 n
-0000218160 00000 n
-0000218321 00000 n
-0000218477 00000 n
-0000218633 00000 n
-0000218794 00000 n
-0000218955 00000 n
-0000219116 00000 n
-0000219272 00000 n
-0000219432 00000 n
+0000199624 00000 n
+0000199780 00000 n
+0000199941 00000 n
+0000200102 00000 n
+0000200263 00000 n
+0000200423 00000 n
+0000200579 00000 n
+0000200740 00000 n
+0000200900 00000 n
+0000201059 00000 n
+0000201218 00000 n
+0000201377 00000 n
+0000214095 00000 n
+0000205630 00000 n
+0000201715 00000 n
+0000214032 00000 n
+0000206206 00000 n
+0000206367 00000 n
+0000206524 00000 n
+0000206686 00000 n
+0000206848 00000 n
+0000207010 00000 n
+0000207172 00000 n
+0000207329 00000 n
+0000207486 00000 n
+0000207642 00000 n
+0000207799 00000 n
+0000207956 00000 n
+0000208117 00000 n
+0000208279 00000 n
+0000208433 00000 n
+0000208589 00000 n
+0000208750 00000 n
+0000208911 00000 n
+0000209067 00000 n
+0000209228 00000 n
+0000209388 00000 n
+0000209549 00000 n
+0000209705 00000 n
+0000209865 00000 n
+0000210026 00000 n
+0000210187 00000 n
+0000210348 00000 n
+0000210509 00000 n
+0000210665 00000 n
+0000210826 00000 n
+0000210986 00000 n
+0000211146 00000 n
+0000211307 00000 n
+0000211468 00000 n
+0000211628 00000 n
+0000211789 00000 n
+0000211950 00000 n
+0000212106 00000 n
+0000212267 00000 n
+0000212428 00000 n
+0000212589 00000 n
+0000212750 00000 n
+0000212911 00000 n
+0000213070 00000 n
+0000213231 00000 n
+0000213392 00000 n
+0000213552 00000 n
+0000213712 00000 n
+0000213872 00000 n
+0000226888 00000 n
+0000218198 00000 n
+0000214211 00000 n
+0000226825 00000 n
+0000218783 00000 n
+0000218945 00000 n
+0000219107 00000 n
+0000219269 00000 n
+0000219431 00000 n
0000219593 00000 n
-0000219753 00000 n
-0000219914 00000 n
-0000220068 00000 n
-0000220223 00000 n
-0000220378 00000 n
-0000220533 00000 n
-0000220693 00000 n
-0000220853 00000 n
-0000221012 00000 n
-0000221172 00000 n
-0000221332 00000 n
-0000221486 00000 n
-0000221645 00000 n
-0000221805 00000 n
-0000221960 00000 n
-0000222114 00000 n
-0000222269 00000 n
-0000222424 00000 n
-0000222579 00000 n
-0000222738 00000 n
-0000222892 00000 n
-0000223052 00000 n
-0000223212 00000 n
-0000223371 00000 n
-0000223531 00000 n
-0000223691 00000 n
-0000223851 00000 n
-0000224006 00000 n
-0000224166 00000 n
-0000224326 00000 n
-0000224486 00000 n
-0000224651 00000 n
-0000224816 00000 n
-0000224981 00000 n
-0000225145 00000 n
-0000225308 00000 n
-0000225471 00000 n
-0000225634 00000 n
-0000236332 00000 n
-0000228072 00000 n
-0000225976 00000 n
-0000236269 00000 n
-0000228639 00000 n
-0000228794 00000 n
-0000228949 00000 n
-0000229103 00000 n
-0000229258 00000 n
-0000229413 00000 n
-0000229568 00000 n
-0000229728 00000 n
-0000229882 00000 n
-0000230042 00000 n
-0000230197 00000 n
-0000230351 00000 n
-0000230506 00000 n
-0000230661 00000 n
-0000230821 00000 n
-0000230981 00000 n
-0000231146 00000 n
-0000231306 00000 n
-0000231471 00000 n
-0000231625 00000 n
-0000231785 00000 n
-0000231945 00000 n
-0000232103 00000 n
-0000232257 00000 n
-0000232412 00000 n
-0000232572 00000 n
-0000232726 00000 n
-0000232881 00000 n
-0000233036 00000 n
-0000233196 00000 n
-0000233360 00000 n
-0000233525 00000 n
-0000233690 00000 n
-0000233853 00000 n
-0000234013 00000 n
-0000234178 00000 n
-0000234343 00000 n
-0000234508 00000 n
-0000234668 00000 n
-0000234828 00000 n
-0000234993 00000 n
-0000235157 00000 n
-0000235322 00000 n
-0000235487 00000 n
-0000235641 00000 n
-0000235795 00000 n
-0000235948 00000 n
-0000236106 00000 n
-0000246751 00000 n
-0000238675 00000 n
-0000236434 00000 n
-0000246688 00000 n
-0000239233 00000 n
-0000239393 00000 n
-0000239553 00000 n
-0000239708 00000 n
-0000239868 00000 n
-0000240028 00000 n
-0000240188 00000 n
-0000240342 00000 n
-0000240497 00000 n
-0000240652 00000 n
-0000240811 00000 n
-0000240976 00000 n
-0000241136 00000 n
-0000241301 00000 n
-0000241466 00000 n
-0000241626 00000 n
-0000241786 00000 n
-0000241946 00000 n
-0000242111 00000 n
-0000242275 00000 n
-0000242440 00000 n
-0000242605 00000 n
-0000242759 00000 n
-0000242918 00000 n
-0000243071 00000 n
-0000243226 00000 n
-0000243381 00000 n
-0000243536 00000 n
-0000243696 00000 n
-0000243856 00000 n
-0000244015 00000 n
-0000244174 00000 n
-0000244329 00000 n
-0000244489 00000 n
-0000244648 00000 n
-0000244808 00000 n
-0000244968 00000 n
-0000245128 00000 n
-0000245283 00000 n
-0000245443 00000 n
-0000245603 00000 n
-0000245763 00000 n
-0000245917 00000 n
-0000246072 00000 n
-0000246227 00000 n
-0000246381 00000 n
-0000246535 00000 n
-0000255499 00000 n
-0000248640 00000 n
-0000246853 00000 n
-0000255436 00000 n
-0000249135 00000 n
-0000249289 00000 n
-0000249444 00000 n
-0000249599 00000 n
-0000249753 00000 n
-0000249908 00000 n
-0000250058 00000 n
-0000250212 00000 n
-0000250367 00000 n
-0000250522 00000 n
-0000250677 00000 n
-0000250831 00000 n
-0000250986 00000 n
-0000251146 00000 n
-0000251310 00000 n
-0000251475 00000 n
-0000251640 00000 n
-0000251805 00000 n
-0000251970 00000 n
-0000252130 00000 n
-0000252285 00000 n
-0000252445 00000 n
-0000252605 00000 n
-0000252759 00000 n
-0000252914 00000 n
-0000253073 00000 n
-0000253233 00000 n
-0000253393 00000 n
-0000253553 00000 n
-0000253713 00000 n
-0000253873 00000 n
-0000254033 00000 n
-0000254193 00000 n
-0000254353 00000 n
-0000254513 00000 n
-0000254663 00000 n
-0000254817 00000 n
-0000254972 00000 n
-0000255126 00000 n
-0000255281 00000 n
-0002112940 00000 n
-0000265212 00000 n
-0000257731 00000 n
-0000255601 00000 n
-0000265149 00000 n
-0000258262 00000 n
-0000258416 00000 n
-0000258571 00000 n
-0000258726 00000 n
-0000258881 00000 n
-0000259036 00000 n
-0000259191 00000 n
-0000259345 00000 n
-0000259500 00000 n
-0000259655 00000 n
-0000259809 00000 n
-0000259964 00000 n
-0000260119 00000 n
-0000260274 00000 n
-0000260424 00000 n
-0000260578 00000 n
-0000260733 00000 n
-0000260893 00000 n
-0000261053 00000 n
-0000261218 00000 n
-0000261383 00000 n
-0000261538 00000 n
-0000261693 00000 n
-0000261847 00000 n
-0000262007 00000 n
-0000262172 00000 n
-0000262336 00000 n
-0000262490 00000 n
-0000262650 00000 n
-0000262810 00000 n
-0000262965 00000 n
-0000263119 00000 n
-0000263274 00000 n
-0000263429 00000 n
-0000263583 00000 n
-0000263738 00000 n
-0000263893 00000 n
-0000264053 00000 n
-0000264207 00000 n
-0000264367 00000 n
-0000264527 00000 n
-0000264681 00000 n
-0000264836 00000 n
-0000264991 00000 n
-0000272205 00000 n
-0000266885 00000 n
-0000265314 00000 n
-0000272142 00000 n
-0000267299 00000 n
-0000267459 00000 n
-0000267619 00000 n
-0000267774 00000 n
-0000267934 00000 n
-0000268094 00000 n
-0000268254 00000 n
-0000268414 00000 n
-0000268573 00000 n
-0000268733 00000 n
-0000268888 00000 n
-0000269047 00000 n
-0000269202 00000 n
-0000269357 00000 n
-0000269511 00000 n
-0000269666 00000 n
-0000269821 00000 n
-0000269976 00000 n
-0000270131 00000 n
-0000270285 00000 n
-0000270440 00000 n
-0000270595 00000 n
-0000270749 00000 n
-0000270903 00000 n
-0000271059 00000 n
-0000271215 00000 n
-0000271369 00000 n
-0000271524 00000 n
-0000271678 00000 n
-0000271832 00000 n
-0000271987 00000 n
-0000272860 00000 n
-0000272614 00000 n
-0000272307 00000 n
-0000272737 00000 n
-0000276990 00000 n
-0000276372 00000 n
-0000272948 00000 n
-0000276495 00000 n
-0000276558 00000 n
-0000276804 00000 n
-0000276928 00000 n
-0000281471 00000 n
-0000280972 00000 n
-0000277106 00000 n
-0000281285 00000 n
-0000281116 00000 n
-0000281408 00000 n
-0000286669 00000 n
-0000285429 00000 n
-0000281587 00000 n
-0000286359 00000 n
-0000285600 00000 n
-0000285771 00000 n
-0000286483 00000 n
-0000285943 00000 n
-0000286151 00000 n
-0000286606 00000 n
-0002113065 00000 n
-0000288814 00000 n
-0000288296 00000 n
-0000286785 00000 n
-0000288627 00000 n
-0000288440 00000 n
-0000288751 00000 n
-0000292854 00000 n
-0000291533 00000 n
-0000288916 00000 n
-0000292172 00000 n
-0000292420 00000 n
-0000291695 00000 n
-0000291861 00000 n
-0000292543 00000 n
-0000292667 00000 n
-0000292014 00000 n
-0000292791 00000 n
-0000297489 00000 n
-0000295994 00000 n
-0000292956 00000 n
-0000296808 00000 n
-0000296932 00000 n
-0000296165 00000 n
-0000296335 00000 n
-0000297055 00000 n
-0000297179 00000 n
-0000297303 00000 n
-0000297426 00000 n
-0000296505 00000 n
-0000296657 00000 n
-0000300415 00000 n
-0000299982 00000 n
-0000297647 00000 n
-0000300105 00000 n
-0000300229 00000 n
-0000300352 00000 n
-0000301542 00000 n
-0000301232 00000 n
-0000300545 00000 n
-0000301355 00000 n
-0000301479 00000 n
-0000302543 00000 n
-0000302109 00000 n
-0000301644 00000 n
-0000302232 00000 n
-0000302480 00000 n
-0002113190 00000 n
-0000303197 00000 n
-0000302950 00000 n
-0000302631 00000 n
-0000303073 00000 n
-0000306929 00000 n
-0000306306 00000 n
-0000303285 00000 n
-0000306429 00000 n
-0000306492 00000 n
-0000306742 00000 n
-0000306867 00000 n
-0000311238 00000 n
-0000310677 00000 n
-0000307031 00000 n
-0000310800 00000 n
-0000310924 00000 n
-0000311049 00000 n
-0000311112 00000 n
-0000311175 00000 n
-0000315111 00000 n
-0000314301 00000 n
-0000311368 00000 n
-0000314424 00000 n
-0000314549 00000 n
-0000314674 00000 n
-0000314799 00000 n
-0000314924 00000 n
-0000315049 00000 n
-0000318383 00000 n
-0000320532 00000 n
-0000318230 00000 n
-0000315241 00000 n
-0000320219 00000 n
-0000320282 00000 n
-0000320345 00000 n
-0001999400 00000 n
-0001990147 00000 n
-0001999233 00000 n
-0001988190 00000 n
-0001976852 00000 n
-0001988024 00000 n
-0000319913 00000 n
-0000320063 00000 n
-0000320469 00000 n
-0000319742 00000 n
-0000319800 00000 n
-0000319890 00000 n
-0000324328 00000 n
-0000323553 00000 n
-0000320705 00000 n
-0000324015 00000 n
-0000324140 00000 n
-0000323706 00000 n
-0000323862 00000 n
-0000324265 00000 n
-0002113315 00000 n
-0000432640 00000 n
-0000328097 00000 n
-0000327661 00000 n
-0000324458 00000 n
-0000327784 00000 n
-0001976204 00000 n
-0001970015 00000 n
-0001976037 00000 n
-0000327909 00000 n
-0000328034 00000 n
-0000332153 00000 n
-0000331719 00000 n
-0000328312 00000 n
-0000331842 00000 n
-0000331967 00000 n
-0000332092 00000 n
-0000334942 00000 n
-0000334204 00000 n
-0000332283 00000 n
-0000334505 00000 n
-0000334630 00000 n
-0000334754 00000 n
-0000334348 00000 n
-0000334879 00000 n
-0000338745 00000 n
-0000338309 00000 n
-0000335072 00000 n
-0000338432 00000 n
-0000338682 00000 n
-0000343115 00000 n
-0000342421 00000 n
-0000338861 00000 n
-0000343052 00000 n
-0000342583 00000 n
-0000342740 00000 n
-0000342896 00000 n
-0000347397 00000 n
-0000346790 00000 n
-0000343288 00000 n
-0000347084 00000 n
-0000346934 00000 n
-0000347209 00000 n
-0000347334 00000 n
-0002113440 00000 n
-0000351767 00000 n
-0000351456 00000 n
-0000347598 00000 n
-0000351579 00000 n
-0000351704 00000 n
-0000355956 00000 n
-0000355086 00000 n
-0000351897 00000 n
-0000355893 00000 n
-0000355257 00000 n
-0000355414 00000 n
-0000355571 00000 n
-0000355729 00000 n
-0000359922 00000 n
-0000359109 00000 n
-0000356115 00000 n
-0000359735 00000 n
-0000359271 00000 n
-0000359426 00000 n
-0000359581 00000 n
-0000359859 00000 n
-0000361170 00000 n
-0000360984 00000 n
-0000360123 00000 n
-0000361107 00000 n
-0000364750 00000 n
-0000363896 00000 n
-0000361272 00000 n
-0000364189 00000 n
-0000364040 00000 n
-0000364314 00000 n
-0000364437 00000 n
-0000364562 00000 n
-0000364687 00000 n
-0000368456 00000 n
-0000368020 00000 n
-0000364951 00000 n
-0000368143 00000 n
-0000368268 00000 n
-0000368393 00000 n
-0002113565 00000 n
-0000373361 00000 n
-0000372609 00000 n
-0000368629 00000 n
-0000372732 00000 n
-0000372795 00000 n
-0000372858 00000 n
-0000372921 00000 n
-0000372984 00000 n
-0000373047 00000 n
-0000373110 00000 n
-0000373173 00000 n
-0000373298 00000 n
-0000377585 00000 n
-0000376900 00000 n
-0000373519 00000 n
-0000377023 00000 n
-0000377147 00000 n
-0000377272 00000 n
-0000377397 00000 n
-0000377522 00000 n
-0000380339 00000 n
-0000379778 00000 n
-0000377715 00000 n
-0000379901 00000 n
-0000380026 00000 n
-0000380151 00000 n
-0000380276 00000 n
-0000384549 00000 n
-0000383762 00000 n
-0000380455 00000 n
-0000384236 00000 n
-0000383915 00000 n
-0000384486 00000 n
-0000384068 00000 n
-0000388649 00000 n
-0000388215 00000 n
-0000384665 00000 n
-0000388338 00000 n
-0000388463 00000 n
-0000388586 00000 n
-0000393085 00000 n
-0000392351 00000 n
-0000388779 00000 n
-0000392648 00000 n
-0000392773 00000 n
-0000392495 00000 n
-0000392898 00000 n
-0000393023 00000 n
-0002113690 00000 n
-0000397184 00000 n
-0000396624 00000 n
-0000393243 00000 n
-0000396747 00000 n
-0000396872 00000 n
-0000396997 00000 n
-0000397122 00000 n
-0000401350 00000 n
-0000400665 00000 n
-0000397328 00000 n
-0000400788 00000 n
-0000400913 00000 n
-0000401038 00000 n
-0000401162 00000 n
-0000401287 00000 n
-0000402847 00000 n
-0000402536 00000 n
-0000401494 00000 n
-0000402659 00000 n
+0000219755 00000 n
+0000219917 00000 n
+0000220073 00000 n
+0000220233 00000 n
+0000220394 00000 n
+0000220555 00000 n
+0000220710 00000 n
+0000220871 00000 n
+0000221032 00000 n
+0000221188 00000 n
+0000221349 00000 n
+0000221510 00000 n
+0000221666 00000 n
+0000221827 00000 n
+0000221987 00000 n
+0000222148 00000 n
+0000222309 00000 n
+0000222466 00000 n
+0000222627 00000 n
+0000222789 00000 n
+0000222951 00000 n
+0000223113 00000 n
+0000223275 00000 n
+0000223437 00000 n
+0000223599 00000 n
+0000223761 00000 n
+0000223922 00000 n
+0000224085 00000 n
+0000224248 00000 n
+0000224410 00000 n
+0000224573 00000 n
+0000224736 00000 n
+0000224899 00000 n
+0000225062 00000 n
+0000225219 00000 n
+0000225381 00000 n
+0000225543 00000 n
+0000225705 00000 n
+0000225866 00000 n
+0000226028 00000 n
+0000226190 00000 n
+0000226346 00000 n
+0000226505 00000 n
+0000226665 00000 n
+0000239513 00000 n
+0000231109 00000 n
+0000226990 00000 n
+0000239450 00000 n
+0000231676 00000 n
+0000231838 00000 n
+0000231995 00000 n
+0000232157 00000 n
+0000232324 00000 n
+0000232491 00000 n
+0000232658 00000 n
+0000232825 00000 n
+0000232992 00000 n
+0000233158 00000 n
+0000233325 00000 n
+0000233491 00000 n
+0000233653 00000 n
+0000233810 00000 n
+0000233972 00000 n
+0000234134 00000 n
+0000234296 00000 n
+0000234458 00000 n
+0000234620 00000 n
+0000234782 00000 n
+0000234943 00000 n
+0000235100 00000 n
+0000235257 00000 n
+0000235419 00000 n
+0000235580 00000 n
+0000235742 00000 n
+0000235899 00000 n
+0000236056 00000 n
+0000236213 00000 n
+0000236370 00000 n
+0000236532 00000 n
+0000236694 00000 n
+0000236855 00000 n
+0000237017 00000 n
+0000237179 00000 n
+0000237340 00000 n
+0000237502 00000 n
+0000237664 00000 n
+0000237826 00000 n
+0000237989 00000 n
+0000238152 00000 n
+0000238315 00000 n
+0000238478 00000 n
+0000238640 00000 n
+0000238803 00000 n
+0000238966 00000 n
+0000239128 00000 n
+0000239289 00000 n
+0002457677 00000 n
+0000251015 00000 n
+0000242911 00000 n
+0000239615 00000 n
+0000250952 00000 n
+0000243469 00000 n
+0000243626 00000 n
+0000243780 00000 n
+0000243936 00000 n
+0000244092 00000 n
+0000244248 00000 n
+0000244409 00000 n
+0000244570 00000 n
+0000244730 00000 n
+0000244891 00000 n
+0000245052 00000 n
+0000245207 00000 n
+0000245368 00000 n
+0000245529 00000 n
+0000245683 00000 n
+0000245839 00000 n
+0000245995 00000 n
+0000246151 00000 n
+0000246312 00000 n
+0000246467 00000 n
+0000246628 00000 n
+0000246789 00000 n
+0000246948 00000 n
+0000247108 00000 n
+0000247269 00000 n
+0000247430 00000 n
+0000247586 00000 n
+0000247747 00000 n
+0000247908 00000 n
+0000248069 00000 n
+0000248234 00000 n
+0000248399 00000 n
+0000248565 00000 n
+0000248731 00000 n
+0000248896 00000 n
+0000249062 00000 n
+0000249228 00000 n
+0000249384 00000 n
+0000249540 00000 n
+0000249701 00000 n
+0000249855 00000 n
+0000250011 00000 n
+0000250166 00000 n
+0000250322 00000 n
+0000250483 00000 n
+0000250638 00000 n
+0000250798 00000 n
+0000263376 00000 n
+0000254531 00000 n
+0000251117 00000 n
+0000263313 00000 n
+0000255125 00000 n
+0000255279 00000 n
+0000255435 00000 n
+0000255591 00000 n
+0000255752 00000 n
+0000255913 00000 n
+0000256079 00000 n
+0000256240 00000 n
+0000256406 00000 n
+0000256561 00000 n
+0000256722 00000 n
+0000256883 00000 n
+0000257043 00000 n
+0000257199 00000 n
+0000257355 00000 n
+0000257516 00000 n
+0000257670 00000 n
+0000257826 00000 n
+0000257982 00000 n
+0000258143 00000 n
+0000258308 00000 n
+0000258474 00000 n
+0000258640 00000 n
+0000258805 00000 n
+0000258965 00000 n
+0000259131 00000 n
+0000259297 00000 n
+0000259463 00000 n
+0000259624 00000 n
+0000259785 00000 n
+0000259951 00000 n
+0000260117 00000 n
+0000260282 00000 n
+0000260447 00000 n
+0000260603 00000 n
+0000260759 00000 n
+0000260914 00000 n
+0000261075 00000 n
+0000261241 00000 n
+0000261402 00000 n
+0000261563 00000 n
+0000261719 00000 n
+0000261880 00000 n
+0000262041 00000 n
+0000262202 00000 n
+0000262356 00000 n
+0000262512 00000 n
+0000262667 00000 n
+0000262826 00000 n
+0000262990 00000 n
+0000263149 00000 n
+0000273947 00000 n
+0000266537 00000 n
+0000263478 00000 n
+0000273884 00000 n
+0000267059 00000 n
+0000267225 00000 n
+0000267386 00000 n
+0000267547 00000 n
+0000267708 00000 n
+0000267874 00000 n
+0000268040 00000 n
+0000268206 00000 n
+0000268372 00000 n
+0000268527 00000 n
+0000268688 00000 n
+0000268849 00000 n
+0000269003 00000 n
+0000269159 00000 n
+0000269315 00000 n
+0000269471 00000 n
+0000269632 00000 n
+0000269793 00000 n
+0000269954 00000 n
+0000270115 00000 n
+0000270270 00000 n
+0000270431 00000 n
+0000270592 00000 n
+0000270752 00000 n
+0000270912 00000 n
+0000271073 00000 n
+0000271229 00000 n
+0000271390 00000 n
+0000271551 00000 n
+0000271712 00000 n
+0000271866 00000 n
+0000272021 00000 n
+0000272176 00000 n
+0000272332 00000 n
+0000272488 00000 n
+0000272643 00000 n
+0000272799 00000 n
+0000272960 00000 n
+0000273114 00000 n
+0000273270 00000 n
+0000273426 00000 n
+0000273580 00000 n
+0000273735 00000 n
+0000284915 00000 n
+0000277119 00000 n
+0000274049 00000 n
+0000284852 00000 n
+0000277659 00000 n
+0000277813 00000 n
+0000277969 00000 n
+0000278125 00000 n
+0000278286 00000 n
+0000278447 00000 n
+0000278608 00000 n
+0000278764 00000 n
+0000278925 00000 n
+0000279085 00000 n
+0000279246 00000 n
+0000279407 00000 n
+0000279567 00000 n
+0000279728 00000 n
+0000279894 00000 n
+0000280060 00000 n
+0000280226 00000 n
+0000280380 00000 n
+0000280536 00000 n
+0000280697 00000 n
+0000280862 00000 n
+0000281028 00000 n
+0000281194 00000 n
+0000281359 00000 n
+0000281524 00000 n
+0000281685 00000 n
+0000281841 00000 n
+0000282002 00000 n
+0000282163 00000 n
+0000282317 00000 n
+0000282473 00000 n
+0000282633 00000 n
+0000282793 00000 n
+0000282954 00000 n
+0000283115 00000 n
+0000283275 00000 n
+0000283436 00000 n
+0000283597 00000 n
+0000283758 00000 n
+0000283919 00000 n
+0000284081 00000 n
+0000284230 00000 n
+0000284384 00000 n
+0000284540 00000 n
+0000284696 00000 n
+0000295655 00000 n
+0000288097 00000 n
+0000285017 00000 n
+0000295592 00000 n
+0000288628 00000 n
+0000288782 00000 n
+0000288938 00000 n
+0000289099 00000 n
+0000289260 00000 n
+0000289421 00000 n
+0000289582 00000 n
+0000289748 00000 n
+0000289914 00000 n
+0000290069 00000 n
+0000290225 00000 n
+0000290381 00000 n
+0000290535 00000 n
+0000290691 00000 n
+0000290847 00000 n
+0000291003 00000 n
+0000291159 00000 n
+0000291315 00000 n
+0000291471 00000 n
+0000291620 00000 n
+0000291774 00000 n
+0000291930 00000 n
+0000292091 00000 n
+0000292252 00000 n
+0000292417 00000 n
+0000292583 00000 n
+0000292739 00000 n
+0000292894 00000 n
+0000293049 00000 n
+0000293210 00000 n
+0000293376 00000 n
+0000293542 00000 n
+0000293698 00000 n
+0000293859 00000 n
+0000294020 00000 n
+0000294174 00000 n
+0000294330 00000 n
+0000294486 00000 n
+0000294642 00000 n
+0000294797 00000 n
+0000294953 00000 n
+0000295114 00000 n
+0000295270 00000 n
+0000295431 00000 n
+0000304041 00000 n
+0000298197 00000 n
+0000295757 00000 n
+0000303978 00000 n
+0000298638 00000 n
+0000298792 00000 n
+0000298948 00000 n
+0000299104 00000 n
+0000299265 00000 n
+0000299426 00000 n
+0000299587 00000 n
+0000299743 00000 n
+0000299904 00000 n
+0000300064 00000 n
+0000300225 00000 n
+0000300386 00000 n
+0000300546 00000 n
+0000300707 00000 n
+0000300863 00000 n
+0000301024 00000 n
+0000301180 00000 n
+0000301336 00000 n
+0000301490 00000 n
+0000301646 00000 n
+0000301801 00000 n
+0000301957 00000 n
+0000302113 00000 n
+0000302268 00000 n
+0000302423 00000 n
+0000302579 00000 n
+0000302735 00000 n
+0000302891 00000 n
+0000303048 00000 n
+0000303205 00000 n
+0000303359 00000 n
+0000303514 00000 n
+0000303668 00000 n
+0000303824 00000 n
+0002457802 00000 n
+0000304711 00000 n
+0000304465 00000 n
+0000304143 00000 n
+0000304588 00000 n
+0000308197 00000 n
+0000307700 00000 n
+0000304799 00000 n
+0000307823 00000 n
+0000307886 00000 n
+0000308134 00000 n
+0000312100 00000 n
+0000311790 00000 n
+0000308299 00000 n
+0000311913 00000 n
+0000312037 00000 n
+0000316279 00000 n
+0000315474 00000 n
+0000312216 00000 n
+0000315968 00000 n
+0000315627 00000 n
+0000316092 00000 n
+0000315796 00000 n
+0000316216 00000 n
+0000320499 00000 n
+0000319642 00000 n
+0000316395 00000 n
+0000320189 00000 n
+0000319795 00000 n
+0000320313 00000 n
+0000320003 00000 n
+0000320436 00000 n
+0000324148 00000 n
+0000322830 00000 n
+0000320615 00000 n
+0000323463 00000 n
+0000323711 00000 n
+0000322992 00000 n
+0000323158 00000 n
+0000323311 00000 n
+0000323835 00000 n
+0000323959 00000 n
+0000324022 00000 n
+0000324086 00000 n
+0002457927 00000 n
+0000327842 00000 n
+0000326762 00000 n
+0000324236 00000 n
+0000327409 00000 n
+0000326924 00000 n
+0000327082 00000 n
+0000327533 00000 n
+0000327655 00000 n
+0000327239 00000 n
+0000327779 00000 n
+0002359666 00000 n
+0002344194 00000 n
+0002359500 00000 n
+0000330638 00000 n
+0000329624 00000 n
+0000327972 00000 n
+0000330079 00000 n
+0000330203 00000 n
+0000330327 00000 n
+0000330451 00000 n
+0000329777 00000 n
+0000329928 00000 n
+0000330575 00000 n
+0000333517 00000 n
+0000332959 00000 n
+0000330754 00000 n
+0000333082 00000 n
+0000333206 00000 n
+0000333330 00000 n
+0000333454 00000 n
+0000334544 00000 n
+0000334110 00000 n
+0000333633 00000 n
+0000334233 00000 n
+0000334481 00000 n
+0000335213 00000 n
+0000334965 00000 n
+0000334632 00000 n
+0000335088 00000 n
+0000338583 00000 n
+0000338084 00000 n
+0000335301 00000 n
+0000338207 00000 n
+0000338270 00000 n
+0000338520 00000 n
+0002458052 00000 n
+0000342080 00000 n
+0000341646 00000 n
+0000338685 00000 n
+0000341769 00000 n
+0000341893 00000 n
+0000342018 00000 n
+0000346068 00000 n
+0000345382 00000 n
+0000342224 00000 n
+0000345505 00000 n
+0000345630 00000 n
+0000345693 00000 n
+0000345756 00000 n
+0000345881 00000 n
+0000346005 00000 n
+0000352074 00000 n
+0000349157 00000 n
+0000348471 00000 n
+0000346184 00000 n
+0000348594 00000 n
+0000348719 00000 n
+0000348844 00000 n
+0000348968 00000 n
+0000349031 00000 n
+0000349094 00000 n
+0000354224 00000 n
+0000351921 00000 n
+0000349287 00000 n
+0000353911 00000 n
+0002343409 00000 n
+0002330766 00000 n
+0002343242 00000 n
+0002328798 00000 n
+0002317234 00000 n
+0002328632 00000 n
+0000353604 00000 n
+0000353754 00000 n
+0000354036 00000 n
+0000354161 00000 n
+0000353433 00000 n
+0000353491 00000 n
+0000353581 00000 n
+0001851041 00000 n
+0000357656 00000 n
+0000357167 00000 n
+0000354397 00000 n
+0000357468 00000 n
+0000357311 00000 n
+0000357593 00000 n
+0000361303 00000 n
+0000360867 00000 n
+0000357786 00000 n
+0000360990 00000 n
+0002316591 00000 n
+0002310366 00000 n
+0002316424 00000 n
+0000361115 00000 n
+0000361240 00000 n
+0002458177 00000 n
+0000365078 00000 n
+0000364768 00000 n
+0000361504 00000 n
+0000364891 00000 n
+0000365015 00000 n
+0000368405 00000 n
+0000367542 00000 n
+0000365194 00000 n
+0000367843 00000 n
+0000367968 00000 n
+0000368092 00000 n
+0000368217 00000 n
+0000367686 00000 n
+0000368342 00000 n
+0000424522 00000 n
+0000371459 00000 n
+0000371148 00000 n
+0000368521 00000 n
+0000371271 00000 n
+0000375578 00000 n
+0000374924 00000 n
+0000371589 00000 n
+0000375390 00000 n
+0000375515 00000 n
+0000375077 00000 n
+0000375233 00000 n
+0000380269 00000 n
+0000378994 00000 n
+0000375765 00000 n
+0000379957 00000 n
+0000379174 00000 n
+0000379328 00000 n
+0000379494 00000 n
+0000379659 00000 n
+0000379809 00000 n
+0000380082 00000 n
+0000380206 00000 n
+0000482419 00000 n
+0000384412 00000 n
+0000384058 00000 n
+0000380399 00000 n
+0000384349 00000 n
+0002310133 00000 n
+0002308075 00000 n
+0002309970 00000 n
+0002307842 00000 n
+0002305773 00000 n
+0002307679 00000 n
+0002305221 00000 n
+0002297310 00000 n
+0002305057 00000 n
+0000384202 00000 n
+0002458302 00000 n
+0000388456 00000 n
+0000387801 00000 n
+0000384570 00000 n
+0000388268 00000 n
+0000388393 00000 n
+0000387954 00000 n
+0000388111 00000 n
+0000392248 00000 n
+0000391218 00000 n
+0000388643 00000 n
+0000392185 00000 n
+0000391398 00000 n
+0000391557 00000 n
+0000391722 00000 n
+0000391877 00000 n
+0000392031 00000 n
+0000397133 00000 n
+0000396001 00000 n
+0000392407 00000 n
+0000396945 00000 n
+0000397070 00000 n
+0000396181 00000 n
+0000396336 00000 n
+0000396490 00000 n
+0000396640 00000 n
+0000396789 00000 n
+0000399952 00000 n
+0000400015 00000 n
+0000399703 00000 n
+0000397305 00000 n
+0000399826 00000 n
+0000399889 00000 n
+0000403345 00000 n
0000402784 00000 n
-0000406491 00000 n
-0000405931 00000 n
-0000402963 00000 n
-0000406054 00000 n
-0000406304 00000 n
-0000406429 00000 n
-0000410750 00000 n
-0000410440 00000 n
-0000406621 00000 n
-0000410563 00000 n
-0000410687 00000 n
-0000414402 00000 n
-0000415950 00000 n
-0000414258 00000 n
-0000410908 00000 n
-0000415385 00000 n
-0000415215 00000 n
-0000415510 00000 n
-0000415573 00000 n
-0000415636 00000 n
-0000415699 00000 n
-0000415762 00000 n
-0000415825 00000 n
-0000415888 00000 n
-0002113815 00000 n
-0000420513 00000 n
-0000419327 00000 n
-0000416137 00000 n
-0000419826 00000 n
-0000419951 00000 n
-0000419480 00000 n
-0000420076 00000 n
-0000420201 00000 n
-0000420326 00000 n
-0000420451 00000 n
-0000419666 00000 n
-0000424799 00000 n
-0000425114 00000 n
-0000423619 00000 n
-0000420643 00000 n
-0000424674 00000 n
-0000423799 00000 n
-0000424924 00000 n
-0000424987 00000 n
-0000425050 00000 n
-0000423952 00000 n
-0000424129 00000 n
-0000424307 00000 n
-0000424492 00000 n
-0000429743 00000 n
-0000428889 00000 n
-0000425258 00000 n
-0000429555 00000 n
-0000429051 00000 n
-0000429680 00000 n
-0000429214 00000 n
-0000429404 00000 n
-0000432953 00000 n
-0000431975 00000 n
-0000429873 00000 n
-0000432515 00000 n
-0000432128 00000 n
-0000432302 00000 n
-0000432765 00000 n
-0000432890 00000 n
-0000437221 00000 n
-0000435969 00000 n
-0000433140 00000 n
-0000436784 00000 n
-0000436140 00000 n
-0000436301 00000 n
-0000436461 00000 n
-0000436629 00000 n
-0000436909 00000 n
-0000437034 00000 n
-0000437159 00000 n
-0000440848 00000 n
-0000441410 00000 n
-0000440600 00000 n
-0000437394 00000 n
-0000440723 00000 n
-0000440972 00000 n
-0000441097 00000 n
-0000441222 00000 n
-0000441347 00000 n
-0002113940 00000 n
-0000442884 00000 n
-0000442698 00000 n
-0000441554 00000 n
-0000442821 00000 n
-0000446687 00000 n
-0000446126 00000 n
-0000443028 00000 n
-0000446249 00000 n
-0000446499 00000 n
-0000446624 00000 n
-0000450472 00000 n
-0000449483 00000 n
-0000446803 00000 n
-0000449783 00000 n
-0000449908 00000 n
-0000450032 00000 n
-0000450157 00000 n
-0000450220 00000 n
-0000450283 00000 n
-0000449627 00000 n
-0000450346 00000 n
-0000450409 00000 n
-0000452429 00000 n
-0000452118 00000 n
-0000450602 00000 n
-0000452241 00000 n
-0000452366 00000 n
-0000453504 00000 n
-0000453068 00000 n
-0000452573 00000 n
-0000453191 00000 n
-0000453441 00000 n
-0000454156 00000 n
-0000453908 00000 n
-0000453592 00000 n
-0000454031 00000 n
-0002114065 00000 n
-0000457764 00000 n
-0000457265 00000 n
-0000454244 00000 n
-0000457388 00000 n
-0000457451 00000 n
-0000457701 00000 n
-0000460533 00000 n
-0000460222 00000 n
-0000457923 00000 n
-0000460345 00000 n
-0000460470 00000 n
-0000464902 00000 n
-0000464344 00000 n
-0000460649 00000 n
-0000464467 00000 n
-0000464592 00000 n
-0000464717 00000 n
-0000464840 00000 n
-0000469199 00000 n
-0000468387 00000 n
-0000465032 00000 n
-0000468510 00000 n
-0000468573 00000 n
-0000468636 00000 n
-0000468699 00000 n
-0000468761 00000 n
-0000468824 00000 n
-0000468887 00000 n
-0000469012 00000 n
-0000469136 00000 n
-0000473555 00000 n
-0000473244 00000 n
-0000469357 00000 n
-0000473367 00000 n
-0000473492 00000 n
-0000476471 00000 n
-0000476161 00000 n
-0000473685 00000 n
-0000476284 00000 n
-0000476408 00000 n
-0002114190 00000 n
-0000480216 00000 n
-0000479721 00000 n
-0000476615 00000 n
-0000480028 00000 n
-0000479865 00000 n
-0000480153 00000 n
-0000484436 00000 n
-0000483499 00000 n
-0000480332 00000 n
-0000483622 00000 n
-0000483747 00000 n
-0000483810 00000 n
-0000483873 00000 n
-0000483936 00000 n
-0000483999 00000 n
-0000484124 00000 n
-0000484248 00000 n
-0000484373 00000 n
-0000488474 00000 n
-0000488040 00000 n
-0000484580 00000 n
-0000488163 00000 n
-0000488288 00000 n
-0000488412 00000 n
-0000492098 00000 n
-0000493101 00000 n
-0000491975 00000 n
-0000488604 00000 n
-0000492913 00000 n
-0000493038 00000 n
-0000496764 00000 n
-0000496206 00000 n
-0000493288 00000 n
-0000496329 00000 n
-0000496454 00000 n
-0000496577 00000 n
-0000496702 00000 n
-0000500451 00000 n
-0000500015 00000 n
-0000496894 00000 n
-0000500138 00000 n
-0000500263 00000 n
-0000500388 00000 n
-0002114315 00000 n
-0000503948 00000 n
-0000503513 00000 n
-0000500638 00000 n
-0000503636 00000 n
-0000503760 00000 n
-0000503885 00000 n
-0000508240 00000 n
-0000507804 00000 n
-0000504064 00000 n
-0000507927 00000 n
-0000508052 00000 n
-0000508177 00000 n
-0000511997 00000 n
-0000511687 00000 n
-0000508441 00000 n
-0000511810 00000 n
-0000511935 00000 n
-0000515863 00000 n
-0000515423 00000 n
-0000512113 00000 n
-0000515546 00000 n
-0000515609 00000 n
-0000515672 00000 n
-0000515736 00000 n
-0000515799 00000 n
-0000519128 00000 n
-0000518500 00000 n
-0000515979 00000 n
-0000518623 00000 n
-0000518686 00000 n
-0000518749 00000 n
-0000518812 00000 n
-0000518875 00000 n
-0000518939 00000 n
-0000519002 00000 n
-0000519065 00000 n
-0000521682 00000 n
-0000521122 00000 n
-0000519230 00000 n
-0000521245 00000 n
-0000521370 00000 n
-0000521494 00000 n
-0000521619 00000 n
-0002114440 00000 n
-0000525334 00000 n
-0000524898 00000 n
-0000521798 00000 n
-0000525021 00000 n
-0000525271 00000 n
-0000529644 00000 n
-0000529334 00000 n
-0000525507 00000 n
-0000529457 00000 n
-0000529582 00000 n
-0000533543 00000 n
-0000533232 00000 n
-0000529802 00000 n
-0000533355 00000 n
-0000533480 00000 n
-0000537599 00000 n
-0000537038 00000 n
-0000533716 00000 n
-0000537161 00000 n
-0000537286 00000 n
-0000537411 00000 n
-0000537536 00000 n
-0000541210 00000 n
-0000540650 00000 n
-0000537743 00000 n
-0000540773 00000 n
-0000540898 00000 n
-0000541023 00000 n
-0000541148 00000 n
-0000543965 00000 n
-0000543481 00000 n
-0000541354 00000 n
-0000543777 00000 n
-0000543625 00000 n
-0000543902 00000 n
-0002114565 00000 n
-0000579658 00000 n
-0000548548 00000 n
-0000547658 00000 n
-0000544095 00000 n
-0000547987 00000 n
-0000548112 00000 n
-0000548237 00000 n
-0000547802 00000 n
-0000548362 00000 n
-0000548485 00000 n
-0000554233 00000 n
-0000552121 00000 n
-0000548692 00000 n
-0000553920 00000 n
-0000552337 00000 n
-0000552506 00000 n
-0000552675 00000 n
-0000552869 00000 n
-0000553041 00000 n
-0000553226 00000 n
-0000553428 00000 n
-0000554045 00000 n
-0000553598 00000 n
-0000554170 00000 n
-0000553751 00000 n
-0000557361 00000 n
-0000557051 00000 n
-0000554420 00000 n
-0000557174 00000 n
-0000557298 00000 n
-0000559178 00000 n
-0000558868 00000 n
-0000557477 00000 n
-0000558991 00000 n
-0000559116 00000 n
-0000563558 00000 n
-0000561329 00000 n
-0000559294 00000 n
-0000563370 00000 n
-0000563495 00000 n
-0000561554 00000 n
-0000561737 00000 n
-0000561913 00000 n
-0000562094 00000 n
-0000562274 00000 n
-0000562454 00000 n
-0000562640 00000 n
-0000562824 00000 n
-0000563005 00000 n
-0000563188 00000 n
-0000566072 00000 n
-0000565761 00000 n
-0000563759 00000 n
-0000565884 00000 n
-0000566009 00000 n
-0002114690 00000 n
-0000570343 00000 n
-0000569575 00000 n
-0000566188 00000 n
-0000570030 00000 n
-0000570155 00000 n
-0000569728 00000 n
-0000570280 00000 n
-0000569877 00000 n
-0000572397 00000 n
-0000571961 00000 n
-0000570487 00000 n
-0000572084 00000 n
-0000572209 00000 n
-0000572334 00000 n
-0000576597 00000 n
-0000575835 00000 n
-0000572513 00000 n
-0000576161 00000 n
-0000575979 00000 n
-0000576286 00000 n
-0000576410 00000 n
-0000576534 00000 n
-0000580096 00000 n
-0000579160 00000 n
-0000576770 00000 n
-0000579283 00000 n
-0000579408 00000 n
-0000579533 00000 n
-0000579783 00000 n
-0000579908 00000 n
-0000580033 00000 n
-0000581319 00000 n
-0000581008 00000 n
-0000580240 00000 n
-0000581131 00000 n
-0000581256 00000 n
-0000584734 00000 n
-0000584421 00000 n
-0000581435 00000 n
-0000584544 00000 n
-0000584607 00000 n
-0000584670 00000 n
-0002114815 00000 n
-0000586017 00000 n
-0000585705 00000 n
-0000584864 00000 n
-0000585828 00000 n
-0000585891 00000 n
-0000585953 00000 n
-0000588173 00000 n
-0000587860 00000 n
-0000586119 00000 n
-0000587983 00000 n
-0000588046 00000 n
-0000588109 00000 n
-0000591708 00000 n
-0000591147 00000 n
-0000588275 00000 n
-0000591270 00000 n
-0000591520 00000 n
-0000591645 00000 n
-0000595118 00000 n
-0000594619 00000 n
-0000591881 00000 n
-0000594742 00000 n
-0000594805 00000 n
-0000594868 00000 n
-0000594930 00000 n
-0000595055 00000 n
-0000597639 00000 n
-0000596953 00000 n
-0000595248 00000 n
-0000597076 00000 n
-0000597201 00000 n
-0000597326 00000 n
-0000597389 00000 n
-0000597453 00000 n
-0000597578 00000 n
-0000600349 00000 n
-0000599790 00000 n
-0000597769 00000 n
-0000599913 00000 n
-0000600038 00000 n
-0000600162 00000 n
-0000600286 00000 n
-0002114940 00000 n
-0000604065 00000 n
-0000603629 00000 n
-0000600479 00000 n
-0000603752 00000 n
-0000604002 00000 n
-0000608464 00000 n
-0000608028 00000 n
-0000604195 00000 n
-0000608151 00000 n
-0000608276 00000 n
-0000608401 00000 n
-0000613087 00000 n
-0000612525 00000 n
-0000608622 00000 n
-0000612648 00000 n
-0001969779 00000 n
-0001967906 00000 n
-0001969611 00000 n
-0000612773 00000 n
-0000612836 00000 n
-0000612899 00000 n
-0000613024 00000 n
-0000615260 00000 n
-0000615074 00000 n
-0000613245 00000 n
-0000615197 00000 n
-0000619552 00000 n
-0000618866 00000 n
-0000615362 00000 n
-0000618989 00000 n
-0000619052 00000 n
-0000619115 00000 n
-0000619240 00000 n
-0000619365 00000 n
-0000619490 00000 n
-0000623227 00000 n
-0000622667 00000 n
-0000619668 00000 n
-0000622790 00000 n
-0000622853 00000 n
-0000622916 00000 n
-0000623040 00000 n
-0000623164 00000 n
-0002115065 00000 n
-0000626801 00000 n
-0000626365 00000 n
-0000623357 00000 n
-0000626488 00000 n
-0000626551 00000 n
-0000626614 00000 n
-0000626739 00000 n
-0000630815 00000 n
-0000630130 00000 n
-0000626931 00000 n
-0000630253 00000 n
-0000630316 00000 n
-0000630379 00000 n
-0000630504 00000 n
-0000630567 00000 n
-0000630630 00000 n
-0000630754 00000 n
-0000634660 00000 n
-0000634035 00000 n
-0000630945 00000 n
-0000634158 00000 n
-0000634221 00000 n
-0000634284 00000 n
-0000634347 00000 n
-0000634472 00000 n
-0000634597 00000 n
-0000639136 00000 n
-0000638577 00000 n
-0000634875 00000 n
-0000638700 00000 n
-0000638825 00000 n
-0000638950 00000 n
-0000639074 00000 n
-0000643689 00000 n
-0000643130 00000 n
-0000639351 00000 n
-0000643253 00000 n
-0000643378 00000 n
-0000643502 00000 n
-0000643626 00000 n
-0000648554 00000 n
-0000647462 00000 n
-0000643819 00000 n
-0000648367 00000 n
-0000648492 00000 n
-0000647633 00000 n
-0000647815 00000 n
-0000647995 00000 n
-0000648182 00000 n
-0002115190 00000 n
-0000652610 00000 n
-0000651923 00000 n
-0000648698 00000 n
-0000652046 00000 n
-0000652171 00000 n
-0000652296 00000 n
-0000652421 00000 n
-0000652484 00000 n
-0000652547 00000 n
-0000654569 00000 n
-0000654132 00000 n
-0000652740 00000 n
-0000654255 00000 n
-0000654318 00000 n
-0000654380 00000 n
-0000654443 00000 n
-0000654506 00000 n
-0000656214 00000 n
-0000655905 00000 n
-0000654728 00000 n
-0000656028 00000 n
-0000656152 00000 n
-0000659967 00000 n
-0000659406 00000 n
-0000656415 00000 n
-0000659529 00000 n
-0000659779 00000 n
-0000659904 00000 n
-0000664586 00000 n
-0000664275 00000 n
-0000660126 00000 n
-0000664398 00000 n
-0000664523 00000 n
-0000668926 00000 n
-0000668740 00000 n
-0000664730 00000 n
-0000668863 00000 n
-0002115315 00000 n
-0000673098 00000 n
-0000672288 00000 n
-0000669028 00000 n
-0000672411 00000 n
-0000672536 00000 n
-0000672660 00000 n
-0000672785 00000 n
-0000672910 00000 n
-0000673035 00000 n
-0000677441 00000 n
-0000676757 00000 n
-0000673200 00000 n
-0000676880 00000 n
-0000677005 00000 n
-0000677130 00000 n
-0000677254 00000 n
-0000677378 00000 n
-0000681902 00000 n
-0000681592 00000 n
-0000677571 00000 n
-0000681715 00000 n
-0000681840 00000 n
-0000685266 00000 n
-0000684706 00000 n
-0000682018 00000 n
-0000684829 00000 n
-0000684954 00000 n
-0000685079 00000 n
-0000685203 00000 n
-0000688563 00000 n
-0000688252 00000 n
-0000685382 00000 n
-0000688375 00000 n
-0000688500 00000 n
-0000690856 00000 n
-0000690670 00000 n
-0000688693 00000 n
-0000690793 00000 n
-0002115440 00000 n
-0000693839 00000 n
-0000693403 00000 n
-0000691015 00000 n
-0000693526 00000 n
-0000693651 00000 n
-0000693776 00000 n
-0000697709 00000 n
-0000697274 00000 n
-0000693969 00000 n
-0000697397 00000 n
-0000697521 00000 n
-0000697646 00000 n
-0000702130 00000 n
-0000700139 00000 n
-0000697839 00000 n
-0000701819 00000 n
-0000701944 00000 n
-0000702067 00000 n
-0000700337 00000 n
-0000700548 00000 n
-0000700760 00000 n
-0000700972 00000 n
-0000701184 00000 n
-0000701396 00000 n
-0000701607 00000 n
-0000706041 00000 n
-0000705231 00000 n
-0000702260 00000 n
-0000705354 00000 n
-0000705604 00000 n
-0000705729 00000 n
-0000705854 00000 n
-0000705979 00000 n
-0000709575 00000 n
-0000709014 00000 n
-0000706143 00000 n
-0000709137 00000 n
-0000709262 00000 n
-0000709387 00000 n
-0000709512 00000 n
-0000712403 00000 n
-0000711968 00000 n
-0000709705 00000 n
-0000712091 00000 n
-0000712216 00000 n
-0000712341 00000 n
-0002115565 00000 n
-0000716574 00000 n
-0000715694 00000 n
-0000712519 00000 n
-0000716007 00000 n
-0000716133 00000 n
-0000715838 00000 n
-0000716259 00000 n
-0000716385 00000 n
-0000716511 00000 n
-0000720513 00000 n
-0000719950 00000 n
-0000716690 00000 n
-0000720073 00000 n
-0000720324 00000 n
-0000720450 00000 n
-0000724885 00000 n
-0000724074 00000 n
-0000720615 00000 n
-0000724197 00000 n
-0000724323 00000 n
-0000724447 00000 n
-0000724572 00000 n
-0000724698 00000 n
-0000724823 00000 n
-0000728774 00000 n
-0000728463 00000 n
-0000724987 00000 n
-0000728586 00000 n
-0000728711 00000 n
-0000731260 00000 n
-0000730822 00000 n
-0000728890 00000 n
-0000730945 00000 n
-0000731071 00000 n
-0000731197 00000 n
-0000734997 00000 n
-0000733926 00000 n
-0000731433 00000 n
-0000734682 00000 n
-0000734934 00000 n
-0000734088 00000 n
-0000734324 00000 n
-0000734503 00000 n
-0002115690 00000 n
-0000736895 00000 n
-0000736583 00000 n
-0000735127 00000 n
-0000736706 00000 n
-0000736832 00000 n
-0000740860 00000 n
-0000740296 00000 n
-0000737011 00000 n
-0000740419 00000 n
-0000740671 00000 n
-0000740797 00000 n
-0000744923 00000 n
-0000743919 00000 n
-0000741005 00000 n
-0000744042 00000 n
-0000744168 00000 n
-0000744231 00000 n
-0000744294 00000 n
-0000744357 00000 n
-0000744420 00000 n
-0000744483 00000 n
-0000744546 00000 n
-0000744609 00000 n
-0000744734 00000 n
-0000744860 00000 n
-0000748040 00000 n
-0000747603 00000 n
-0000745138 00000 n
-0000747726 00000 n
-0000747851 00000 n
-0000747977 00000 n
-0000751448 00000 n
-0000751011 00000 n
-0000748212 00000 n
-0000751134 00000 n
-0000751260 00000 n
-0000751385 00000 n
-0000753776 00000 n
-0000753465 00000 n
-0000751578 00000 n
-0000753588 00000 n
-0000753714 00000 n
-0002115815 00000 n
-0000756458 00000 n
-0000756272 00000 n
-0000753963 00000 n
-0000756395 00000 n
-0000761581 00000 n
-0000759376 00000 n
-0000759064 00000 n
-0000756602 00000 n
-0000759187 00000 n
-0000759313 00000 n
-0000765058 00000 n
-0000761458 00000 n
-0000759520 00000 n
-0000764995 00000 n
-0000764824 00000 n
-0000764882 00000 n
-0000764972 00000 n
-0000769247 00000 n
-0000770375 00000 n
-0000769124 00000 n
-0000765245 00000 n
-0000770060 00000 n
-0000770186 00000 n
-0000770312 00000 n
-0000775229 00000 n
-0000774918 00000 n
-0000770576 00000 n
-0000775041 00000 n
-0000775167 00000 n
-0000779988 00000 n
-0000779551 00000 n
-0000775373 00000 n
-0000779674 00000 n
-0000779800 00000 n
-0000779926 00000 n
-0002115940 00000 n
-0000784198 00000 n
-0000783823 00000 n
-0000780104 00000 n
-0000783946 00000 n
-0000784072 00000 n
-0000784135 00000 n
-0000788357 00000 n
-0000788045 00000 n
-0000784342 00000 n
-0000788168 00000 n
-0000788294 00000 n
-0000793360 00000 n
-0000792537 00000 n
-0000788501 00000 n
-0000793045 00000 n
-0000793171 00000 n
-0000792690 00000 n
-0000792870 00000 n
-0000793297 00000 n
-0000797635 00000 n
-0000797198 00000 n
-0000793504 00000 n
-0000797321 00000 n
-0000797447 00000 n
-0000797572 00000 n
-0000801364 00000 n
-0000801052 00000 n
-0000797793 00000 n
-0000801175 00000 n
-0000801301 00000 n
-0000804821 00000 n
-0000804509 00000 n
-0000801565 00000 n
-0000804632 00000 n
-0000804758 00000 n
-0002116065 00000 n
-0000809552 00000 n
-0000809115 00000 n
-0000805022 00000 n
-0000809238 00000 n
-0000809364 00000 n
-0000809490 00000 n
-0000814454 00000 n
-0000813765 00000 n
-0000809710 00000 n
-0000813888 00000 n
-0000814014 00000 n
-0000814077 00000 n
-0000814140 00000 n
-0000814203 00000 n
-0000814265 00000 n
-0000814391 00000 n
-0000817169 00000 n
-0000816983 00000 n
-0000814612 00000 n
-0000817106 00000 n
-0000821016 00000 n
-0000820578 00000 n
-0000817356 00000 n
-0000820701 00000 n
-0000820827 00000 n
-0000820953 00000 n
-0000823775 00000 n
-0000823463 00000 n
-0000821174 00000 n
-0000823586 00000 n
-0000823712 00000 n
-0000826473 00000 n
-0000826161 00000 n
-0000823919 00000 n
-0000826284 00000 n
-0000826410 00000 n
-0002116190 00000 n
-0000829214 00000 n
-0000828902 00000 n
-0000826617 00000 n
-0000829025 00000 n
-0000829151 00000 n
-0000833644 00000 n
-0000833206 00000 n
-0000829344 00000 n
-0000833329 00000 n
-0000833455 00000 n
+0000400145 00000 n
+0000402907 00000 n
+0000403032 00000 n
+0000403157 00000 n
+0000403282 00000 n
+0000406835 00000 n
+0000406148 00000 n
+0000403518 00000 n
+0000406271 00000 n
+0000406334 00000 n
+0000406397 00000 n
+0000406522 00000 n
+0000406647 00000 n
+0000406772 00000 n
+0002458427 00000 n
+0000411076 00000 n
+0000410450 00000 n
+0000406994 00000 n
+0000410573 00000 n
+0000410636 00000 n
+0000410699 00000 n
+0000410761 00000 n
+0000410824 00000 n
+0000410887 00000 n
+0000410950 00000 n
+0000411013 00000 n
+0000414943 00000 n
+0000414464 00000 n
+0000411206 00000 n
+0000414755 00000 n
+0000414880 00000 n
+0000414608 00000 n
+0000551796 00000 n
+0000418474 00000 n
+0000417788 00000 n
+0000415130 00000 n
+0000417911 00000 n
+0000418036 00000 n
+0000418161 00000 n
+0000418286 00000 n
+0000418411 00000 n
+0000421698 00000 n
+0000421139 00000 n
+0000418661 00000 n
+0000421262 00000 n
+0000421387 00000 n
+0000421512 00000 n
+0000421636 00000 n
+0000423720 00000 n
+0000423409 00000 n
+0000421814 00000 n
+0000423532 00000 n
+0000423657 00000 n
+0000450651 00000 n
+0000424399 00000 n
+0000423850 00000 n
+0000450399 00000 n
+0000450462 00000 n
+0000450525 00000 n
+0000450588 00000 n
+0002458552 00000 n
+0000454730 00000 n
+0000453785 00000 n
+0000450804 00000 n
+0000454418 00000 n
+0000453947 00000 n
+0000454098 00000 n
+0000454667 00000 n
+0000454249 00000 n
+0000458093 00000 n
+0000457658 00000 n
+0000454846 00000 n
+0000457781 00000 n
+0000457906 00000 n
+0000458031 00000 n
+0000462001 00000 n
+0000461815 00000 n
+0000458223 00000 n
+0000461938 00000 n
+0000466131 00000 n
+0000465144 00000 n
+0000462117 00000 n
+0000465441 00000 n
+0000465566 00000 n
+0000465629 00000 n
+0000465693 00000 n
+0000465288 00000 n
+0000465818 00000 n
+0000465943 00000 n
+0000466068 00000 n
+0000469859 00000 n
+0000469296 00000 n
+0000466247 00000 n
+0000469419 00000 n
+0000469544 00000 n
+0000469669 00000 n
+0000469732 00000 n
+0000469796 00000 n
+0000473510 00000 n
+0000472951 00000 n
+0000470003 00000 n
+0000473074 00000 n
+0000473199 00000 n
+0000473323 00000 n
+0000473447 00000 n
+0002458677 00000 n
+0000475845 00000 n
+0000475409 00000 n
+0000473683 00000 n
+0000475532 00000 n
+0000475657 00000 n
+0000475782 00000 n
+0000478880 00000 n
+0000478444 00000 n
+0000475961 00000 n
+0000478567 00000 n
+0000478817 00000 n
+0000482482 00000 n
+0000482171 00000 n
+0000478996 00000 n
+0000482294 00000 n
+0000485235 00000 n
+0000484924 00000 n
+0000482612 00000 n
+0000485047 00000 n
+0000485172 00000 n
+0000488606 00000 n
+0000490824 00000 n
+0000488435 00000 n
+0000485379 00000 n
+0000490260 00000 n
+0000490384 00000 n
+0000489419 00000 n
+0000489630 00000 n
+0000489839 00000 n
+0000490050 00000 n
+0000490447 00000 n
+0000490510 00000 n
+0000490573 00000 n
+0000490636 00000 n
+0000490699 00000 n
+0000490762 00000 n
+0000494391 00000 n
+0000493705 00000 n
+0000491011 00000 n
+0000493828 00000 n
+0000493953 00000 n
+0000494078 00000 n
+0000494203 00000 n
+0000494328 00000 n
+0002458802 00000 n
+0000498454 00000 n
+0000497421 00000 n
+0000494521 00000 n
+0000497889 00000 n
+0000498014 00000 n
+0000497574 00000 n
+0000498139 00000 n
+0000497738 00000 n
+0000498264 00000 n
+0000498327 00000 n
+0000498390 00000 n
+0000501377 00000 n
+0000501191 00000 n
+0000498584 00000 n
+0000501314 00000 n
+0000505104 00000 n
+0000504218 00000 n
+0000501493 00000 n
+0000504916 00000 n
+0000505041 00000 n
+0000504380 00000 n
+0000504530 00000 n
+0000504703 00000 n
+0000507620 00000 n
+0000507060 00000 n
+0000505291 00000 n
+0000507183 00000 n
+0000507308 00000 n
+0000507432 00000 n
+0000507557 00000 n
+0000511298 00000 n
+0000510332 00000 n
+0000507807 00000 n
+0000510985 00000 n
+0000510494 00000 n
+0000510656 00000 n
+0000510826 00000 n
+0000511110 00000 n
+0000511235 00000 n
+0000514702 00000 n
+0000514577 00000 n
+0000515140 00000 n
+0000514329 00000 n
+0000511471 00000 n
+0000514452 00000 n
+0000514827 00000 n
+0000514952 00000 n
+0000515077 00000 n
+0002458927 00000 n
+0000517837 00000 n
+0000517401 00000 n
+0000515256 00000 n
+0000517524 00000 n
+0000517649 00000 n
+0000517774 00000 n
+0000521225 00000 n
+0000520664 00000 n
+0000517981 00000 n
+0000520787 00000 n
+0000521037 00000 n
+0000521162 00000 n
+0000524556 00000 n
+0000523868 00000 n
+0000521327 00000 n
+0000523991 00000 n
+0000524116 00000 n
+0000524241 00000 n
+0000524304 00000 n
+0000524368 00000 n
+0000524493 00000 n
+0000527612 00000 n
+0000526872 00000 n
+0000524672 00000 n
+0000527173 00000 n
+0000527236 00000 n
+0000527299 00000 n
+0000527016 00000 n
+0000527362 00000 n
+0000527425 00000 n
+0000527549 00000 n
+0000528945 00000 n
+0000528635 00000 n
+0000527770 00000 n
+0000528758 00000 n
+0000528821 00000 n
+0000528883 00000 n
+0000529975 00000 n
+0000529539 00000 n
+0000529033 00000 n
+0000529662 00000 n
+0000529912 00000 n
+0002459052 00000 n
+0000530641 00000 n
+0000530393 00000 n
+0000530063 00000 n
+0000530516 00000 n
+0000534075 00000 n
+0000533576 00000 n
+0000530729 00000 n
+0000533699 00000 n
+0000533762 00000 n
+0000534012 00000 n
+0000537169 00000 n
+0000536858 00000 n
+0000534234 00000 n
+0000536981 00000 n
+0000537106 00000 n
+0000540797 00000 n
+0000540361 00000 n
+0000537285 00000 n
+0000540484 00000 n
+0000540609 00000 n
+0000540734 00000 n
+0000544747 00000 n
+0000543933 00000 n
+0000540899 00000 n
+0000544056 00000 n
+0000544181 00000 n
+0000544244 00000 n
+0000544307 00000 n
+0000544370 00000 n
+0000544433 00000 n
+0000544496 00000 n
+0000544559 00000 n
+0000544684 00000 n
+0000548354 00000 n
+0000548044 00000 n
+0000544891 00000 n
+0000548167 00000 n
+0000548291 00000 n
+0002459177 00000 n
+0000551986 00000 n
+0000551548 00000 n
+0000548484 00000 n
+0000551671 00000 n
+0000551859 00000 n
+0000551923 00000 n
+0000555444 00000 n
+0000554699 00000 n
+0000552088 00000 n
+0000555004 00000 n
+0000555067 00000 n
+0000555129 00000 n
+0000555192 00000 n
+0000555256 00000 n
+0000555381 00000 n
+0000554843 00000 n
+0000558650 00000 n
+0000558712 00000 n
+0000558149 00000 n
+0000555560 00000 n
+0000558272 00000 n
+0000558335 00000 n
+0000558398 00000 n
+0000558461 00000 n
+0000558525 00000 n
+0000562431 00000 n
+0000561744 00000 n
+0000558828 00000 n
+0000561867 00000 n
+0000561992 00000 n
+0000562055 00000 n
+0000562118 00000 n
+0000562181 00000 n
+0000562244 00000 n
+0000562368 00000 n
+0000565395 00000 n
+0000564834 00000 n
+0000562547 00000 n
+0000564957 00000 n
+0000565082 00000 n
+0000565207 00000 n
+0000565332 00000 n
+0000569026 00000 n
+0000570029 00000 n
+0000568903 00000 n
+0000565511 00000 n
+0000569841 00000 n
+0000569966 00000 n
+0002459302 00000 n
+0000573521 00000 n
+0000573210 00000 n
+0000570202 00000 n
+0000573333 00000 n
+0000573458 00000 n
+0000576032 00000 n
+0000575472 00000 n
+0000573637 00000 n
+0000575595 00000 n
+0000575720 00000 n
+0000575844 00000 n
+0000575969 00000 n
+0000579437 00000 n
+0000579001 00000 n
+0000576148 00000 n
+0000579124 00000 n
+0000579249 00000 n
+0000579374 00000 n
+0000582949 00000 n
+0000582513 00000 n
+0000579624 00000 n
+0000582636 00000 n
+0000582761 00000 n
+0000582886 00000 n
+0000586475 00000 n
+0000586164 00000 n
+0000583079 00000 n
+0000586287 00000 n
+0000586412 00000 n
+0000593933 00000 n
+0000591091 00000 n
+0000590481 00000 n
+0000586662 00000 n
+0000590778 00000 n
+0000590903 00000 n
+0000591028 00000 n
+0000590625 00000 n
+0002459427 00000 n
+0000610389 00000 n
+0000610706 00000 n
+0000593810 00000 n
+0000591193 00000 n
+0000610326 00000 n
+0000610452 00000 n
+0000610515 00000 n
+0000610579 00000 n
+0000610642 00000 n
+0000616334 00000 n
+0000615767 00000 n
+0000610873 00000 n
+0000615890 00000 n
+0000615953 00000 n
+0000616016 00000 n
+0000616080 00000 n
+0000616143 00000 n
+0000616207 00000 n
+0000616270 00000 n
+0000620136 00000 n
+0000619263 00000 n
+0000616436 00000 n
+0000619386 00000 n
+0000619449 00000 n
+0000619512 00000 n
+0000619574 00000 n
+0000619699 00000 n
+0000619824 00000 n
+0000619948 00000 n
+0000620073 00000 n
+0000621102 00000 n
+0000620916 00000 n
+0000620252 00000 n
+0000621039 00000 n
+0000624576 00000 n
+0000624015 00000 n
+0000621204 00000 n
+0000624138 00000 n
+0000624388 00000 n
+0000624513 00000 n
+0000628393 00000 n
+0000628082 00000 n
+0000624735 00000 n
+0000628205 00000 n
+0000628330 00000 n
+0002459552 00000 n
+0000633988 00000 n
+0000632299 00000 n
+0000631863 00000 n
+0000628509 00000 n
+0000631986 00000 n
+0000632111 00000 n
+0000632236 00000 n
+0000640762 00000 n
+0000633865 00000 n
+0000632415 00000 n
+0000640511 00000 n
+0000640574 00000 n
+0000640637 00000 n
+0000640700 00000 n
+0000644504 00000 n
+0000643943 00000 n
+0000640971 00000 n
+0000644066 00000 n
+0000644191 00000 n
+0000644316 00000 n
+0000644441 00000 n
+0000648363 00000 n
+0000647676 00000 n
+0000644634 00000 n
+0000647799 00000 n
+0000647924 00000 n
+0000647987 00000 n
+0000648051 00000 n
+0000648176 00000 n
+0000648300 00000 n
+0000650856 00000 n
+0000650546 00000 n
+0000648493 00000 n
+0000650669 00000 n
+0000650794 00000 n
+0000653452 00000 n
+0000652966 00000 n
+0000651014 00000 n
+0000653263 00000 n
+0000653110 00000 n
+0000653326 00000 n
+0000653389 00000 n
+0002459677 00000 n
+0000697498 00000 n
+0000657303 00000 n
+0000656679 00000 n
+0000653582 00000 n
+0000656802 00000 n
+0000656865 00000 n
+0000656990 00000 n
+0000657115 00000 n
+0000657240 00000 n
+0000661637 00000 n
+0000660425 00000 n
+0000657433 00000 n
+0000661324 00000 n
+0000661449 00000 n
+0000661574 00000 n
+0000660596 00000 n
+0000660764 00000 n
+0000660959 00000 n
+0000661153 00000 n
+0000666294 00000 n
+0000664919 00000 n
+0000661824 00000 n
+0000665982 00000 n
+0000665099 00000 n
+0000665285 00000 n
+0000665485 00000 n
+0000666107 00000 n
+0000665658 00000 n
+0000666232 00000 n
+0000665811 00000 n
+0000668530 00000 n
+0000668219 00000 n
+0000666424 00000 n
+0000668342 00000 n
+0000668467 00000 n
+0000670184 00000 n
+0000669873 00000 n
+0000668646 00000 n
+0000669996 00000 n
+0000670121 00000 n
+0000672795 00000 n
+0000672361 00000 n
+0000670300 00000 n
+0000672484 00000 n
+0000672609 00000 n
+0000672733 00000 n
+0002459802 00000 n
+0000675851 00000 n
+0000675415 00000 n
+0000672982 00000 n
+0000675538 00000 n
+0000675601 00000 n
+0000675664 00000 n
+0000675788 00000 n
+0000679632 00000 n
+0000678990 00000 n
+0000675953 00000 n
+0000679444 00000 n
+0000679143 00000 n
+0000679569 00000 n
+0000679291 00000 n
+0000684062 00000 n
+0000683624 00000 n
+0000679776 00000 n
+0000683747 00000 n
+0000683810 00000 n
+0000683873 00000 n
+0000683999 00000 n
+0000686790 00000 n
+0000686354 00000 n
+0000684206 00000 n
+0000686477 00000 n
+0000686602 00000 n
+0000686727 00000 n
+0000690380 00000 n
+0000689818 00000 n
+0000686948 00000 n
+0000689941 00000 n
+0000690066 00000 n
+0000690190 00000 n
+0000690253 00000 n
+0000690316 00000 n
+0000694682 00000 n
+0000694244 00000 n
+0000690567 00000 n
+0000694367 00000 n
+0000694430 00000 n
+0000694493 00000 n
+0000694619 00000 n
+0002459927 00000 n
+0000697935 00000 n
+0000696949 00000 n
+0000694798 00000 n
+0000697248 00000 n
+0000697373 00000 n
+0000697623 00000 n
+0000697748 00000 n
+0000697093 00000 n
+0000697872 00000 n
+0000699229 00000 n
+0000698918 00000 n
+0000698065 00000 n
+0000699041 00000 n
+0000699166 00000 n
+0000704825 00000 n
+0000702667 00000 n
+0000702231 00000 n
+0000699345 00000 n
+0000702354 00000 n
+0000702604 00000 n
+0000712527 00000 n
+0000704702 00000 n
+0000702840 00000 n
+0000712024 00000 n
+0000712087 00000 n
+0000712150 00000 n
+0000712213 00000 n
+0000712339 00000 n
+0000712402 00000 n
+0000712465 00000 n
+0000715109 00000 n
+0000714735 00000 n
+0000712694 00000 n
+0000714858 00000 n
+0000714921 00000 n
+0000715046 00000 n
+0000717688 00000 n
+0000717000 00000 n
+0000715239 00000 n
+0000717123 00000 n
+0000717248 00000 n
+0000717373 00000 n
+0000717436 00000 n
+0000717500 00000 n
+0000717625 00000 n
+0002460052 00000 n
+0000720687 00000 n
+0000720004 00000 n
+0000717818 00000 n
+0000720127 00000 n
+0000720252 00000 n
+0000720377 00000 n
+0000720502 00000 n
+0000720625 00000 n
+0000722370 00000 n
+0000722184 00000 n
+0000720817 00000 n
+0000722307 00000 n
+0000725774 00000 n
+0000725338 00000 n
+0000722486 00000 n
+0000725461 00000 n
+0000725711 00000 n
+0000729617 00000 n
+0000729181 00000 n
+0000725904 00000 n
+0000729304 00000 n
+0000729429 00000 n
+0000729554 00000 n
+0000733777 00000 n
+0000733591 00000 n
+0000729761 00000 n
+0000733714 00000 n
+0002296086 00000 n
+0002293808 00000 n
+0002295918 00000 n
+0000739811 00000 n
+0000737242 00000 n
+0000736507 00000 n
+0000733921 00000 n
+0000736802 00000 n
+0000736927 00000 n
+0000736990 00000 n
+0000737053 00000 n
+0000737179 00000 n
+0000736651 00000 n
+0002460177 00000 n
+0000747959 00000 n
+0000748276 00000 n
+0000739688 00000 n
+0000737372 00000 n
+0000747896 00000 n
+0000748022 00000 n
+0000748085 00000 n
+0000748149 00000 n
+0000748213 00000 n
+0000753231 00000 n
+0000752419 00000 n
+0000748443 00000 n
+0000752542 00000 n
+0000752667 00000 n
+0000752791 00000 n
+0000752854 00000 n
+0000752917 00000 n
+0000753043 00000 n
+0000753168 00000 n
+0000758701 00000 n
+0000758137 00000 n
+0000753347 00000 n
+0000758260 00000 n
+0000758323 00000 n
+0000758386 00000 n
+0000758449 00000 n
+0000758512 00000 n
+0000758638 00000 n
+0000762896 00000 n
+0000762023 00000 n
+0000758817 00000 n
+0000762146 00000 n
+0000762271 00000 n
+0000762396 00000 n
+0000762459 00000 n
+0000762521 00000 n
+0000762646 00000 n
+0000762708 00000 n
+0000762771 00000 n
+0000762833 00000 n
+0000766616 00000 n
+0000766056 00000 n
+0000763040 00000 n
+0000766179 00000 n
+0000766304 00000 n
+0000766429 00000 n
+0000766553 00000 n
+0000769781 00000 n
+0000769345 00000 n
+0000766803 00000 n
+0000769468 00000 n
+0000769593 00000 n
+0000769718 00000 n
+0002460302 00000 n
+0000773801 00000 n
+0000773241 00000 n
+0000769925 00000 n
+0000773364 00000 n
+0000773489 00000 n
+0000773613 00000 n
+0000773738 00000 n
+0000777300 00000 n
+0000776989 00000 n
+0000773917 00000 n
+0000777112 00000 n
+0000777237 00000 n
+0000780603 00000 n
+0000780292 00000 n
+0000777444 00000 n
+0000780415 00000 n
+0000780540 00000 n
+0000783295 00000 n
+0000782671 00000 n
+0000780762 00000 n
+0000782794 00000 n
+0000782919 00000 n
+0000783043 00000 n
+0000783106 00000 n
+0000783169 00000 n
+0000783232 00000 n
+0000784948 00000 n
+0000784573 00000 n
+0000783468 00000 n
+0000784696 00000 n
+0000784759 00000 n
+0000784822 00000 n
+0000784885 00000 n
+0000788219 00000 n
+0000787783 00000 n
+0000785107 00000 n
+0000787906 00000 n
+0000788031 00000 n
+0000788156 00000 n
+0002460427 00000 n
+0000791353 00000 n
+0000790793 00000 n
+0000788420 00000 n
+0000790916 00000 n
+0000791166 00000 n
+0000791291 00000 n
+0000795594 00000 n
+0000795284 00000 n
+0000791512 00000 n
+0000795407 00000 n
+0000795531 00000 n
+0000799887 00000 n
+0000799701 00000 n
+0000795738 00000 n
+0000799824 00000 n
+0000803734 00000 n
+0000803175 00000 n
+0000800003 00000 n
+0000803298 00000 n
+0000803423 00000 n
+0000803548 00000 n
+0000803673 00000 n
+0000807779 00000 n
+0000807093 00000 n
+0000803836 00000 n
+0000807216 00000 n
+0000807341 00000 n
+0000807466 00000 n
+0000807591 00000 n
+0000807716 00000 n
+0000811460 00000 n
+0000811025 00000 n
+0000807881 00000 n
+0000811148 00000 n
+0000811272 00000 n
+0000811397 00000 n
+0002460552 00000 n
+0000815361 00000 n
+0000815050 00000 n
+0000811576 00000 n
+0000815173 00000 n
+0000815298 00000 n
+0000818670 00000 n
+0000818109 00000 n
+0000815477 00000 n
+0000818232 00000 n
+0000818357 00000 n
+0000818482 00000 n
+0000818607 00000 n
+0000822235 00000 n
+0000821672 00000 n
+0000818772 00000 n
+0000821795 00000 n
+0000821858 00000 n
+0000821921 00000 n
+0000821984 00000 n
+0000822048 00000 n
+0000822172 00000 n
+0000824456 00000 n
+0000824270 00000 n
+0000822351 00000 n
+0000824393 00000 n
+0000827214 00000 n
+0000826903 00000 n
+0000824615 00000 n
+0000827026 00000 n
+0000827151 00000 n
+0000829649 00000 n
+0000829213 00000 n
+0000827401 00000 n
+0000829336 00000 n
+0000829461 00000 n
+0000829586 00000 n
+0002460677 00000 n
+0000833451 00000 n
+0000833015 00000 n
+0000829765 00000 n
+0000833138 00000 n
+0000833263 00000 n
+0000833388 00000 n
+0000839094 00000 n
+0000835973 00000 n
0000833581 00000 n
-0000836143 00000 n
-0000835831 00000 n
-0000833802 00000 n
-0000835954 00000 n
-0000836080 00000 n
-0000840448 00000 n
-0000840010 00000 n
-0000836287 00000 n
-0000840133 00000 n
-0000840259 00000 n
-0000840385 00000 n
-0000845003 00000 n
-0000844691 00000 n
-0000840649 00000 n
-0000844814 00000 n
-0000844940 00000 n
-0000849333 00000 n
-0000848895 00000 n
-0000845147 00000 n
-0000849018 00000 n
-0000849144 00000 n
-0000849270 00000 n
-0002116315 00000 n
-0000854847 00000 n
-0000853467 00000 n
-0000849463 00000 n
-0000853590 00000 n
-0000853716 00000 n
-0000853842 00000 n
-0000853905 00000 n
-0000853968 00000 n
-0000854029 00000 n
-0000854091 00000 n
-0000854154 00000 n
-0000854217 00000 n
-0000854280 00000 n
-0000854343 00000 n
-0000854406 00000 n
-0000854469 00000 n
-0000854532 00000 n
-0000854595 00000 n
-0000854658 00000 n
-0000854721 00000 n
-0000854784 00000 n
-0000858386 00000 n
-0000858074 00000 n
-0000854977 00000 n
-0000858197 00000 n
-0000858323 00000 n
-0000859671 00000 n
-0000859485 00000 n
-0000858587 00000 n
-0000859608 00000 n
-0000863618 00000 n
-0000863181 00000 n
-0000859787 00000 n
-0000863304 00000 n
-0000863430 00000 n
-0000863556 00000 n
-0000867826 00000 n
-0000867514 00000 n
-0000863833 00000 n
-0000867637 00000 n
-0000867763 00000 n
-0000869197 00000 n
-0000869011 00000 n
-0000867998 00000 n
-0000869134 00000 n
-0002116440 00000 n
-0000870871 00000 n
-0000870685 00000 n
-0000869299 00000 n
-0000870808 00000 n
-0000875577 00000 n
-0000874496 00000 n
-0000870973 00000 n
-0000875011 00000 n
-0000875137 00000 n
-0000875263 00000 n
-0000875389 00000 n
-0000874649 00000 n
-0000874830 00000 n
-0000875515 00000 n
-0000879806 00000 n
-0000879054 00000 n
-0000875721 00000 n
-0000879177 00000 n
-0000879303 00000 n
-0000879429 00000 n
-0000879555 00000 n
-0000879617 00000 n
-0000879680 00000 n
-0000879743 00000 n
-0000884224 00000 n
-0000883680 00000 n
-0000879950 00000 n
-0000884035 00000 n
-0000884161 00000 n
-0000883824 00000 n
-0000888569 00000 n
-0000888132 00000 n
-0000884382 00000 n
-0000888255 00000 n
-0000888381 00000 n
-0000888506 00000 n
-0000891940 00000 n
-0000891049 00000 n
-0000888727 00000 n
-0000891374 00000 n
-0000891193 00000 n
-0000891500 00000 n
-0000891626 00000 n
-0000891752 00000 n
-0000891877 00000 n
-0002116565 00000 n
-0000896782 00000 n
-0000895597 00000 n
-0000892098 00000 n
-0000896091 00000 n
-0000896343 00000 n
-0000896469 00000 n
-0000895750 00000 n
-0000896595 00000 n
-0000895918 00000 n
-0000896719 00000 n
-0000900861 00000 n
-0000900018 00000 n
-0000896898 00000 n
-0000900546 00000 n
-0000900171 00000 n
-0000900358 00000 n
-0000900672 00000 n
-0001965815 00000 n
-0001961810 00000 n
-0001965648 00000 n
-0000900798 00000 n
-0000903304 00000 n
-0000902992 00000 n
-0000901090 00000 n
-0000903115 00000 n
-0000903241 00000 n
-0000907127 00000 n
-0000906563 00000 n
-0000903420 00000 n
-0000906686 00000 n
-0000906812 00000 n
-0000906938 00000 n
-0000907064 00000 n
-0000910615 00000 n
-0000910178 00000 n
-0000907257 00000 n
-0000910301 00000 n
-0000910426 00000 n
-0000910552 00000 n
-0000914977 00000 n
-0000914539 00000 n
-0000910830 00000 n
-0000914662 00000 n
-0000914788 00000 n
-0000914914 00000 n
-0002116690 00000 n
-0000922240 00000 n
-0000919516 00000 n
-0000918952 00000 n
-0000915121 00000 n
-0000919075 00000 n
-0000919201 00000 n
-0000919327 00000 n
-0000919453 00000 n
-0000938532 00000 n
-0000922117 00000 n
-0000919703 00000 n
-0000938279 00000 n
-0000938342 00000 n
-0000938405 00000 n
-0001960427 00000 n
-0001958164 00000 n
-0001960264 00000 n
-0000938468 00000 n
-0000938091 00000 n
-0000941030 00000 n
-0000952784 00000 n
-0000940907 00000 n
-0000938707 00000 n
-0000952405 00000 n
-0000952531 00000 n
-0000952594 00000 n
-0000952657 00000 n
-0000952720 00000 n
-0000952220 00000 n
-0000954547 00000 n
-0000967046 00000 n
-0000954424 00000 n
-0000953015 00000 n
-0000966668 00000 n
-0000966793 00000 n
-0000966856 00000 n
-0000966919 00000 n
-0000966982 00000 n
-0000966482 00000 n
-0000971048 00000 n
-0000970736 00000 n
-0000967235 00000 n
-0000970859 00000 n
-0000970985 00000 n
-0000975298 00000 n
-0000974345 00000 n
-0000971235 00000 n
-0000974858 00000 n
-0000974984 00000 n
-0000974498 00000 n
-0000974678 00000 n
-0000975110 00000 n
-0000975236 00000 n
-0002116815 00000 n
-0000980154 00000 n
-0000979266 00000 n
-0000975527 00000 n
-0000979965 00000 n
-0000979428 00000 n
-0000979610 00000 n
-0000979787 00000 n
-0000980091 00000 n
-0000983223 00000 n
-0000982911 00000 n
-0000980326 00000 n
-0000983034 00000 n
-0000983160 00000 n
-0000986369 00000 n
-0000985932 00000 n
-0000983438 00000 n
-0000986055 00000 n
-0000986181 00000 n
-0000986307 00000 n
-0000988408 00000 n
-0001008075 00000 n
-0001006318 00000 n
-0000988285 00000 n
-0000986570 00000 n
-0001005941 00000 n
-0001006004 00000 n
-0001006067 00000 n
-0001006130 00000 n
-0001006256 00000 n
-0001005755 00000 n
-0001032758 00000 n
-0001030677 00000 n
-0001007952 00000 n
-0001006507 00000 n
-0001030299 00000 n
-0001030362 00000 n
-0001030425 00000 n
-0001030488 00000 n
-0001030615 00000 n
-0001030111 00000 n
-0001061730 00000 n
-0001059633 00000 n
-0001032635 00000 n
-0001030895 00000 n
-0001059380 00000 n
-0001059443 00000 n
-0001059506 00000 n
-0001059569 00000 n
-0002116940 00000 n
-0001059192 00000 n
-0001295014 00000 n
-0001086577 00000 n
-0001061607 00000 n
-0001059809 00000 n
-0001086073 00000 n
-0001086136 00000 n
-0001086199 00000 n
-0001086262 00000 n
-0001086389 00000 n
-0001086515 00000 n
-0001085885 00000 n
-0001332745 00000 n
-0001091224 00000 n
-0001090912 00000 n
-0001086753 00000 n
-0001091035 00000 n
-0001091161 00000 n
-0001094856 00000 n
-0001094544 00000 n
-0001091368 00000 n
-0001094667 00000 n
-0001094793 00000 n
-0001098891 00000 n
-0001098202 00000 n
-0001094986 00000 n
-0001098325 00000 n
-0001098451 00000 n
-0001098577 00000 n
-0001098703 00000 n
-0001098828 00000 n
-0001101915 00000 n
-0001101729 00000 n
-0001099092 00000 n
-0001101852 00000 n
-0001359132 00000 n
-0001105826 00000 n
-0001105389 00000 n
-0001102130 00000 n
-0001105512 00000 n
-0001105638 00000 n
-0001105763 00000 n
-0002117065 00000 n
-0001110352 00000 n
-0001109644 00000 n
-0001105956 00000 n
-0001110163 00000 n
-0001109797 00000 n
-0001109980 00000 n
-0001110289 00000 n
-0001115497 00000 n
-0001114011 00000 n
-0001110496 00000 n
-0001115308 00000 n
-0001115434 00000 n
-0001114200 00000 n
-0001114381 00000 n
-0001114564 00000 n
-0001114739 00000 n
-0001114950 00000 n
-0001115131 00000 n
-0001398788 00000 n
-0001119972 00000 n
-0001118830 00000 n
-0001115641 00000 n
-0001119406 00000 n
-0001119532 00000 n
-0001118983 00000 n
-0001119195 00000 n
-0001119658 00000 n
-0001119784 00000 n
-0001119909 00000 n
-0001422372 00000 n
-0001447456 00000 n
-0001124355 00000 n
-0001123666 00000 n
-0001120173 00000 n
-0001123789 00000 n
-0001123914 00000 n
-0001124040 00000 n
-0001124166 00000 n
-0001124292 00000 n
-0001129028 00000 n
-0001128264 00000 n
-0001124499 00000 n
-0001128587 00000 n
-0001128713 00000 n
-0001128408 00000 n
-0001128839 00000 n
-0001128965 00000 n
-0001133556 00000 n
-0001132743 00000 n
-0001129186 00000 n
-0001132866 00000 n
-0001132992 00000 n
-0001133118 00000 n
-0001133243 00000 n
-0001133369 00000 n
-0001133494 00000 n
-0002117190 00000 n
-0001137399 00000 n
-0001136835 00000 n
-0001133672 00000 n
-0001136958 00000 n
-0001137084 00000 n
-0001137210 00000 n
-0001137336 00000 n
-0001139949 00000 n
-0001139245 00000 n
-0001137543 00000 n
-0001139760 00000 n
-0001139886 00000 n
-0001139398 00000 n
-0001139578 00000 n
-0001142560 00000 n
-0001142250 00000 n
-0001140079 00000 n
-0001142373 00000 n
-0001142499 00000 n
-0001146207 00000 n
-0001145564 00000 n
-0001142747 00000 n
-0001145892 00000 n
-0001146018 00000 n
-0001146144 00000 n
-0001145708 00000 n
-0001148292 00000 n
-0001147980 00000 n
-0001146394 00000 n
-0001148103 00000 n
-0001148229 00000 n
-0001152597 00000 n
-0001152029 00000 n
-0001148507 00000 n
-0001152152 00000 n
-0001152215 00000 n
-0001152279 00000 n
-0001152343 00000 n
-0001152407 00000 n
-0001152534 00000 n
-0002117315 00000 n
-0001156710 00000 n
-0001156398 00000 n
-0001152826 00000 n
-0001156521 00000 n
-0001156647 00000 n
-0001159134 00000 n
-0001158822 00000 n
-0001156868 00000 n
-0001158945 00000 n
-0001159071 00000 n
-0001162384 00000 n
-0001161759 00000 n
-0001159321 00000 n
+0000838656 00000 n
+0000838781 00000 n
+0000836216 00000 n
+0000836404 00000 n
+0000838907 00000 n
+0000836591 00000 n
+0000836779 00000 n
+0000839031 00000 n
+0000836966 00000 n
+0000837178 00000 n
+0000837389 00000 n
+0000837601 00000 n
+0000837811 00000 n
+0000838023 00000 n
+0000838234 00000 n
+0000838445 00000 n
+0000842567 00000 n
+0000841877 00000 n
+0000839224 00000 n
+0000842000 00000 n
+0000842252 00000 n
+0000842378 00000 n
+0000842504 00000 n
+0000845755 00000 n
+0000845191 00000 n
+0000842669 00000 n
+0000845314 00000 n
+0000845440 00000 n
+0000845566 00000 n
+0000845692 00000 n
+0000848783 00000 n
+0000848345 00000 n
+0000845871 00000 n
+0000848468 00000 n
+0000848594 00000 n
+0000848720 00000 n
+0000852105 00000 n
+0000851225 00000 n
+0000848885 00000 n
+0000851539 00000 n
+0000851665 00000 n
+0000851791 00000 n
+0000851369 00000 n
+0000851916 00000 n
+0000852042 00000 n
+0002460802 00000 n
+0000854437 00000 n
+0000854125 00000 n
+0000852221 00000 n
+0000854248 00000 n
+0000854374 00000 n
+0000858044 00000 n
+0000857480 00000 n
+0000854539 00000 n
+0000857603 00000 n
+0000857855 00000 n
+0000857981 00000 n
+0000861649 00000 n
+0000861085 00000 n
+0000858146 00000 n
+0000861208 00000 n
+0000861334 00000 n
+0000861460 00000 n
+0000861586 00000 n
+0000863879 00000 n
+0000872773 00000 n
+0000863756 00000 n
+0000861751 00000 n
+0000872395 00000 n
+0000872521 00000 n
+0000872584 00000 n
+0000872647 00000 n
+0000872710 00000 n
+0000876388 00000 n
+0000875950 00000 n
+0000872954 00000 n
+0000876073 00000 n
+0000876199 00000 n
+0000876325 00000 n
+0000880256 00000 n
+0000879635 00000 n
+0000876518 00000 n
+0000879941 00000 n
+0000880067 00000 n
+0000880193 00000 n
+0000879779 00000 n
+0002460927 00000 n
+0000882371 00000 n
+0000882060 00000 n
+0000880415 00000 n
+0000882183 00000 n
+0000882309 00000 n
+0000885540 00000 n
+0000884719 00000 n
+0000882473 00000 n
+0000885098 00000 n
+0000885350 00000 n
+0000884863 00000 n
+0000885413 00000 n
+0000885477 00000 n
+0000887788 00000 n
+0000887476 00000 n
+0000885670 00000 n
+0000887599 00000 n
+0000887725 00000 n
+0000891365 00000 n
+0000890801 00000 n
+0000887918 00000 n
+0000890924 00000 n
+0000891176 00000 n
+0000891302 00000 n
+0000895407 00000 n
+0000894529 00000 n
+0000891510 00000 n
+0000894652 00000 n
+0000894777 00000 n
+0000894840 00000 n
+0000894903 00000 n
+0000894966 00000 n
+0000895029 00000 n
+0000895092 00000 n
+0000895155 00000 n
+0000895218 00000 n
+0000895344 00000 n
+0000899077 00000 n
+0000898513 00000 n
+0000895580 00000 n
+0000898636 00000 n
+0000898762 00000 n
+0000898888 00000 n
+0000898951 00000 n
+0000899014 00000 n
+0002461052 00000 n
+0000901299 00000 n
+0000900987 00000 n
+0000899193 00000 n
+0000901110 00000 n
+0000901236 00000 n
+0000903775 00000 n
+0000903464 00000 n
+0000901415 00000 n
+0000903587 00000 n
+0000903712 00000 n
+0000906104 00000 n
+0000905918 00000 n
+0000903962 00000 n
+0000906041 00000 n
+0000910283 00000 n
+0000909547 00000 n
+0000906248 00000 n
+0000909842 00000 n
+0000909968 00000 n
+0000909691 00000 n
+0000910094 00000 n
+0000910220 00000 n
+0000912615 00000 n
+0000916984 00000 n
+0000912678 00000 n
+0000912365 00000 n
+0000910427 00000 n
+0000912488 00000 n
+0000912551 00000 n
+0000917860 00000 n
+0000916861 00000 n
+0000912780 00000 n
+0000917797 00000 n
+0002461177 00000 n
+0000922383 00000 n
+0000922072 00000 n
+0000918048 00000 n
+0000922195 00000 n
+0000922321 00000 n
+0000926546 00000 n
+0000926109 00000 n
+0000922513 00000 n
+0000926232 00000 n
+0000926358 00000 n
+0000926483 00000 n
+0000931044 00000 n
+0000930669 00000 n
+0000926648 00000 n
+0000930792 00000 n
+0000930918 00000 n
+0000930981 00000 n
+0000934920 00000 n
+0000934608 00000 n
+0000931174 00000 n
+0000934731 00000 n
+0000934857 00000 n
+0000939498 00000 n
+0000938675 00000 n
+0000935064 00000 n
+0000939183 00000 n
+0000939309 00000 n
+0000938828 00000 n
+0000939009 00000 n
+0000939435 00000 n
+0000943551 00000 n
+0000943239 00000 n
+0000939628 00000 n
+0000943362 00000 n
+0000943488 00000 n
+0002461302 00000 n
+0000947001 00000 n
+0000946437 00000 n
+0000943695 00000 n
+0000946560 00000 n
+0000946686 00000 n
+0000946748 00000 n
+0000946812 00000 n
+0000946938 00000 n
+0000950799 00000 n
+0000950488 00000 n
+0000947131 00000 n
+0000950611 00000 n
+0000950736 00000 n
+0000954112 00000 n
+0000953801 00000 n
+0000950972 00000 n
+0000953924 00000 n
+0000954049 00000 n
+0000958552 00000 n
+0000957926 00000 n
+0000954341 00000 n
+0000958049 00000 n
+0000958175 00000 n
+0000958301 00000 n
+0000958364 00000 n
+0000958427 00000 n
+0000958490 00000 n
+0000962703 00000 n
+0000962328 00000 n
+0000958696 00000 n
+0000962451 00000 n
+0000962514 00000 n
+0000962640 00000 n
+0000965899 00000 n
+0000965587 00000 n
+0000962861 00000 n
+0000965710 00000 n
+0000965836 00000 n
+0002461427 00000 n
+0000969180 00000 n
+0000968869 00000 n
+0000966100 00000 n
+0000968992 00000 n
+0000969117 00000 n
+0000971663 00000 n
+0000971351 00000 n
+0000969338 00000 n
+0000971474 00000 n
+0000971600 00000 n
+0000974286 00000 n
+0000973974 00000 n
+0000971807 00000 n
+0000974097 00000 n
+0000974223 00000 n
+0000977035 00000 n
+0000976723 00000 n
+0000974430 00000 n
+0000976846 00000 n
+0000976972 00000 n
+0000980573 00000 n
+0000980263 00000 n
+0000977165 00000 n
+0000980386 00000 n
+0000980512 00000 n
+0000983840 00000 n
+0000983402 00000 n
+0000980717 00000 n
+0000983525 00000 n
+0000983651 00000 n
+0000983777 00000 n
+0002461552 00000 n
+0000987110 00000 n
+0000986673 00000 n
+0000983984 00000 n
+0000986796 00000 n
+0000986922 00000 n
+0000987048 00000 n
+0000991083 00000 n
+0000990771 00000 n
+0000987311 00000 n
+0000990894 00000 n
+0000991020 00000 n
+0000994801 00000 n
+0000994615 00000 n
+0000991227 00000 n
+0000994738 00000 n
+0000998449 00000 n
+0000998011 00000 n
+0000994931 00000 n
+0000998134 00000 n
+0000998260 00000 n
+0000998386 00000 n
+0001002873 00000 n
+0001001871 00000 n
+0000998593 00000 n
+0001001994 00000 n
+0001002119 00000 n
+0001002245 00000 n
+0001002308 00000 n
+0001002370 00000 n
+0001002433 00000 n
+0001002496 00000 n
+0001002559 00000 n
+0001002622 00000 n
+0001002685 00000 n
+0001002748 00000 n
+0001002811 00000 n
+0001006421 00000 n
+0001010276 00000 n
+0001006298 00000 n
+0001003003 00000 n
+0001009835 00000 n
+0001009898 00000 n
+0001009961 00000 n
+0001010024 00000 n
+0001010087 00000 n
+0001010150 00000 n
+0001010213 00000 n
+0002461677 00000 n
+0001009664 00000 n
+0001009722 00000 n
+0001009812 00000 n
+0001012577 00000 n
+0001012265 00000 n
+0001010464 00000 n
+0001012388 00000 n
+0001012514 00000 n
+0001014755 00000 n
+0001014443 00000 n
+0001012707 00000 n
+0001014566 00000 n
+0001014692 00000 n
+0001018512 00000 n
+0001018200 00000 n
+0001014913 00000 n
+0001018323 00000 n
+0001018449 00000 n
+0001022300 00000 n
+0001021988 00000 n
+0001018714 00000 n
+0001022111 00000 n
+0001022237 00000 n
+0001023673 00000 n
+0001023487 00000 n
+0001022458 00000 n
+0001023610 00000 n
+0001025346 00000 n
+0001025160 00000 n
+0001023775 00000 n
+0001025283 00000 n
+0002461802 00000 n
+0001029682 00000 n
+0001028601 00000 n
+0001025448 00000 n
+0001029115 00000 n
+0001029241 00000 n
+0001029367 00000 n
+0001029493 00000 n
+0001028754 00000 n
+0001028935 00000 n
+0001029619 00000 n
+0001033131 00000 n
+0001032443 00000 n
+0001029812 00000 n
+0001032566 00000 n
+0001032692 00000 n
+0001032818 00000 n
+0001032943 00000 n
+0001033006 00000 n
+0001033069 00000 n
+0001037279 00000 n
+0001036454 00000 n
+0001033261 00000 n
+0001037027 00000 n
+0001037090 00000 n
+0001037216 00000 n
+0001036607 00000 n
+0001036818 00000 n
+0001040905 00000 n
+0001040719 00000 n
+0001037423 00000 n
+0001040842 00000 n
+0001045117 00000 n
+0001044478 00000 n
+0001041049 00000 n
+0001044802 00000 n
+0001044928 00000 n
+0001045054 00000 n
+0001044622 00000 n
+0001047457 00000 n
+0001046767 00000 n
+0001045275 00000 n
+0001046890 00000 n
+0001047016 00000 n
+0001047142 00000 n
+0001047268 00000 n
+0001047394 00000 n
+0002461927 00000 n
+0001051767 00000 n
+0001050581 00000 n
+0001047587 00000 n
+0001051075 00000 n
+0001051327 00000 n
+0001051453 00000 n
+0001050734 00000 n
+0001051579 00000 n
+0001050903 00000 n
+0001051705 00000 n
+0001055403 00000 n
+0001054882 00000 n
+0001051869 00000 n
+0001055214 00000 n
+0001055026 00000 n
+0001055340 00000 n
+0001058854 00000 n
+0001058289 00000 n
+0001055619 00000 n
+0001058412 00000 n
+0001058538 00000 n
+0001058601 00000 n
+0001058665 00000 n
+0001058791 00000 n
+0001061977 00000 n
+0001061412 00000 n
+0001058956 00000 n
+0001061535 00000 n
+0001061598 00000 n
+0001061662 00000 n
+0001061788 00000 n
+0001061914 00000 n
+0001065674 00000 n
+0001065110 00000 n
+0001062121 00000 n
+0001065233 00000 n
+0001065359 00000 n
+0001065485 00000 n
+0001065611 00000 n
+0001069151 00000 n
+0001068839 00000 n
+0001065818 00000 n
+0001068962 00000 n
+0001069088 00000 n
+0002462052 00000 n
+0001073045 00000 n
+0001072607 00000 n
+0001069380 00000 n
+0001072730 00000 n
+0001072856 00000 n
+0001072982 00000 n
+0001076147 00000 n
+0001092691 00000 n
+0001076024 00000 n
+0001073175 00000 n
+0001092186 00000 n
+0001092312 00000 n
+0001092375 00000 n
+0001092438 00000 n
+0001092501 00000 n
+0001092628 00000 n
+0001091998 00000 n
+0001098728 00000 n
+0001097089 00000 n
+0001096777 00000 n
+0001092937 00000 n
+0001096900 00000 n
+0001097026 00000 n
+0001110103 00000 n
+0001122791 00000 n
+0001098605 00000 n
+0001097276 00000 n
+0001122224 00000 n
+0001122287 00000 n
+0001122350 00000 n
+0001122413 00000 n
+0001122539 00000 n
+0001122602 00000 n
+0001122665 00000 n
+0001122728 00000 n
+0001109918 00000 n
+0001122038 00000 n
+0001126824 00000 n
+0001126512 00000 n
+0001122996 00000 n
+0001126635 00000 n
+0001126761 00000 n
+0001130733 00000 n
+0001129905 00000 n
+0001127012 00000 n
+0001130418 00000 n
+0001130544 00000 n
+0001130058 00000 n
+0001130238 00000 n
+0001130670 00000 n
+0002462177 00000 n
+0001135558 00000 n
+0001134728 00000 n
+0001130963 00000 n
+0001135243 00000 n
+0001135369 00000 n
+0001134881 00000 n
+0001135065 00000 n
+0001135495 00000 n
+0001138813 00000 n
+0001138501 00000 n
+0001135716 00000 n
+0001138624 00000 n
+0001138750 00000 n
+0001141885 00000 n
+0001141573 00000 n
+0001139042 00000 n
+0001141696 00000 n
+0001141822 00000 n
+0001144349 00000 n
0001161882 00000 n
-0001162007 00000 n
-0001162069 00000 n
-0001162132 00000 n
-0001162195 00000 n
-0001162258 00000 n
-0001162321 00000 n
-0001165947 00000 n
-0001165196 00000 n
-0001162500 00000 n
-0001165319 00000 n
-0001165445 00000 n
-0001165508 00000 n
-0001165571 00000 n
-0001165634 00000 n
-0001165760 00000 n
-0001165885 00000 n
-0001170137 00000 n
-0001169699 00000 n
-0001166134 00000 n
-0001169822 00000 n
-0001169948 00000 n
-0001170074 00000 n
-0001174254 00000 n
-0001173565 00000 n
-0001170338 00000 n
-0001173688 00000 n
-0001173814 00000 n
-0001173877 00000 n
-0001173940 00000 n
-0001174002 00000 n
-0001174065 00000 n
-0001174191 00000 n
-0001956971 00000 n
-0001954970 00000 n
-0001956805 00000 n
-0002117440 00000 n
-0001178079 00000 n
-0001177642 00000 n
-0001174426 00000 n
-0001177765 00000 n
-0001177891 00000 n
-0001178016 00000 n
-0001181422 00000 n
-0001181110 00000 n
-0001178265 00000 n
-0001181233 00000 n
-0001181359 00000 n
-0001184803 00000 n
-0001184114 00000 n
-0001181594 00000 n
-0001184237 00000 n
-0001184363 00000 n
-0001184489 00000 n
-0001184614 00000 n
-0001184740 00000 n
-0001187446 00000 n
-0001187008 00000 n
-0001184947 00000 n
-0001187131 00000 n
-0001187257 00000 n
-0001187383 00000 n
-0001190106 00000 n
-0001189542 00000 n
-0001187590 00000 n
-0001189665 00000 n
-0001189791 00000 n
-0001189917 00000 n
-0001190043 00000 n
-0001192271 00000 n
-0001191833 00000 n
-0001190222 00000 n
-0001191956 00000 n
-0001192082 00000 n
-0001192208 00000 n
-0002117565 00000 n
-0001195412 00000 n
-0001194852 00000 n
-0001192401 00000 n
-0001194975 00000 n
-0001195101 00000 n
-0001195226 00000 n
-0001195350 00000 n
-0001198245 00000 n
-0001197683 00000 n
-0001195570 00000 n
-0001197806 00000 n
-0001197932 00000 n
-0001198056 00000 n
-0001198182 00000 n
-0001202331 00000 n
-0001201641 00000 n
-0001198389 00000 n
-0001201764 00000 n
-0001201890 00000 n
-0001202016 00000 n
-0001202142 00000 n
-0001202268 00000 n
-0001205455 00000 n
-0001204804 00000 n
-0001202475 00000 n
-0001205140 00000 n
-0001205266 00000 n
-0001205392 00000 n
-0001204948 00000 n
-0001211349 00000 n
-0001209355 00000 n
-0001205571 00000 n
-0001210908 00000 n
-0001209553 00000 n
-0001209746 00000 n
-0001211034 00000 n
-0001209939 00000 n
-0001210145 00000 n
-0001210335 00000 n
-0001211160 00000 n
-0001211286 00000 n
-0001210528 00000 n
-0001210713 00000 n
-0001218176 00000 n
-0001215520 00000 n
-0001211536 00000 n
-0001217861 00000 n
-0001217987 00000 n
-0001218113 00000 n
-0001215754 00000 n
-0001215972 00000 n
-0001216189 00000 n
-0001216406 00000 n
-0001216587 00000 n
-0001216764 00000 n
-0001216931 00000 n
-0001217110 00000 n
-0001217286 00000 n
-0001217471 00000 n
-0001217641 00000 n
-0002117690 00000 n
-0001224500 00000 n
-0001222188 00000 n
-0001218306 00000 n
-0001224185 00000 n
-0001224311 00000 n
-0001222395 00000 n
-0001222627 00000 n
-0001222859 00000 n
-0001223091 00000 n
-0001223360 00000 n
-0001224437 00000 n
-0001223629 00000 n
-0001223839 00000 n
-0001224011 00000 n
-0001230605 00000 n
-0001228579 00000 n
-0001224616 00000 n
-0001230165 00000 n
-0001230291 00000 n
-0001228777 00000 n
-0001228992 00000 n
-0001229181 00000 n
-0001229365 00000 n
-0001230416 00000 n
-0001229599 00000 n
-0001229795 00000 n
-0001230542 00000 n
-0001229973 00000 n
-0001239808 00000 n
-0001234577 00000 n
-0001230806 00000 n
-0001239745 00000 n
-0001234919 00000 n
-0001235125 00000 n
-0001235331 00000 n
-0001235551 00000 n
-0001235771 00000 n
-0001235977 00000 n
-0001236183 00000 n
-0001236372 00000 n
-0001236562 00000 n
-0001236752 00000 n
-0001236941 00000 n
-0001237131 00000 n
-0001237321 00000 n
-0001237511 00000 n
-0001237704 00000 n
-0001237896 00000 n
-0001238135 00000 n
-0001238375 00000 n
-0001238615 00000 n
-0001238853 00000 n
-0001239093 00000 n
-0001239333 00000 n
-0001239539 00000 n
-0001244979 00000 n
-0001243456 00000 n
-0001239938 00000 n
-0001244790 00000 n
-0001243636 00000 n
-0001243866 00000 n
-0001244097 00000 n
-0001244328 00000 n
-0001244559 00000 n
-0001244916 00000 n
-0001249214 00000 n
-0001248309 00000 n
-0001245137 00000 n
-0001248647 00000 n
-0001248773 00000 n
-0001248899 00000 n
-0001248453 00000 n
-0001249025 00000 n
-0001249151 00000 n
-0001252555 00000 n
-0001252118 00000 n
-0001249358 00000 n
-0001252241 00000 n
-0001252367 00000 n
-0001252492 00000 n
-0002117815 00000 n
-0001256007 00000 n
-0001255569 00000 n
-0001252699 00000 n
-0001255692 00000 n
-0001255818 00000 n
-0001255944 00000 n
-0001260297 00000 n
-0001259733 00000 n
-0001256137 00000 n
-0001259856 00000 n
-0001259982 00000 n
-0001260108 00000 n
-0001260234 00000 n
-0001263285 00000 n
-0001262347 00000 n
-0001260441 00000 n
-0001262470 00000 n
-0001262596 00000 n
-0001262722 00000 n
-0001262847 00000 n
-0001262973 00000 n
-0001263098 00000 n
-0001263224 00000 n
-0001266537 00000 n
-0001266099 00000 n
-0001263458 00000 n
-0001266222 00000 n
-0001266348 00000 n
-0001266474 00000 n
-0001269170 00000 n
-0001268858 00000 n
-0001266681 00000 n
-0001268981 00000 n
-0001269107 00000 n
-0001270528 00000 n
-0001270342 00000 n
-0001269314 00000 n
-0001270465 00000 n
-0002117940 00000 n
-0001271926 00000 n
-0001271740 00000 n
-0001270630 00000 n
-0001271863 00000 n
-0001273187 00000 n
-0001273001 00000 n
-0001272028 00000 n
-0001273124 00000 n
-0001274355 00000 n
-0001274169 00000 n
-0001273289 00000 n
-0001274292 00000 n
-0001275925 00000 n
-0001275739 00000 n
-0001274457 00000 n
-0001275862 00000 n
-0001279650 00000 n
-0001279339 00000 n
-0001276027 00000 n
-0001279462 00000 n
-0001279587 00000 n
-0001284687 00000 n
-0001284501 00000 n
-0001279822 00000 n
-0001284624 00000 n
-0002118065 00000 n
-0001290372 00000 n
-0001289242 00000 n
-0001284873 00000 n
-0001289365 00000 n
-0001289428 00000 n
-0001289491 00000 n
-0001289554 00000 n
-0001289616 00000 n
-0001289679 00000 n
-0001289742 00000 n
-0001289805 00000 n
-0001289868 00000 n
-0001289931 00000 n
-0001289994 00000 n
-0001290057 00000 n
-0001290120 00000 n
-0001290183 00000 n
-0001290246 00000 n
-0001290309 00000 n
-0001473858 00000 n
-0001294196 00000 n
-0001293884 00000 n
-0001290516 00000 n
-0001294007 00000 n
-0001294133 00000 n
-0001331906 00000 n
-0001294891 00000 n
-0001294340 00000 n
-0001331654 00000 n
-0001331717 00000 n
-0001331780 00000 n
-0001331843 00000 n
-0001331466 00000 n
-0001358288 00000 n
-0001332622 00000 n
-0001332068 00000 n
-0001358036 00000 n
-0001358099 00000 n
-0001358162 00000 n
-0001358225 00000 n
-0001357848 00000 n
-0001397952 00000 n
-0001359009 00000 n
-0001358450 00000 n
-0001397700 00000 n
-0001397763 00000 n
-0001397826 00000 n
-0001397889 00000 n
-0001397512 00000 n
-0001421538 00000 n
-0001398665 00000 n
-0001398114 00000 n
-0001421285 00000 n
-0001421348 00000 n
-0001421411 00000 n
-0001421474 00000 n
-0002118190 00000 n
-0001421099 00000 n
-0001446620 00000 n
-0001422249 00000 n
-0001421700 00000 n
-0001446367 00000 n
-0001446430 00000 n
-0001446493 00000 n
-0001446556 00000 n
-0001446179 00000 n
-0001471968 00000 n
-0001447333 00000 n
-0001446782 00000 n
-0001471716 00000 n
-0001471779 00000 n
-0001471842 00000 n
-0001471905 00000 n
-0001471528 00000 n
-0001473042 00000 n
-0001472667 00000 n
-0001472130 00000 n
-0001472790 00000 n
-0001472853 00000 n
-0001472916 00000 n
-0001472979 00000 n
-0001569839 00000 n
-0001473735 00000 n
-0001473203 00000 n
-0001569585 00000 n
-0001569648 00000 n
-0001569711 00000 n
-0001569774 00000 n
-0001569397 00000 n
-0001572431 00000 n
-0001571868 00000 n
-0001570001 00000 n
-0001571991 00000 n
-0001572243 00000 n
-0001572368 00000 n
-0001575886 00000 n
-0001574944 00000 n
-0001572561 00000 n
-0001575067 00000 n
-0001575193 00000 n
-0001575319 00000 n
-0001575444 00000 n
-0001575507 00000 n
-0001575570 00000 n
-0001575697 00000 n
-0001575823 00000 n
-0002118315 00000 n
-0001580007 00000 n
-0001578588 00000 n
-0001576030 00000 n
-0001579314 00000 n
-0001579440 00000 n
-0001579566 00000 n
-0001579692 00000 n
-0001578750 00000 n
-0001578956 00000 n
-0001579818 00000 n
-0001579136 00000 n
-0001579944 00000 n
-0001583655 00000 n
-0001582969 00000 n
-0001580123 00000 n
-0001583092 00000 n
-0001583340 00000 n
-0001583466 00000 n
-0001583592 00000 n
-0001587840 00000 n
-0001587276 00000 n
-0001583771 00000 n
-0001587399 00000 n
-0001587525 00000 n
-0001587651 00000 n
-0001587777 00000 n
-0001592161 00000 n
-0001591598 00000 n
-0001587970 00000 n
-0001591721 00000 n
-0001591847 00000 n
-0001591973 00000 n
-0001592099 00000 n
-0001596759 00000 n
-0001595870 00000 n
-0001592277 00000 n
-0001596193 00000 n
-0001596319 00000 n
-0001596445 00000 n
-0001596571 00000 n
-0001596014 00000 n
-0001596697 00000 n
-0001601409 00000 n
-0001600662 00000 n
-0001596875 00000 n
-0001600972 00000 n
-0001601098 00000 n
-0001600806 00000 n
-0001601224 00000 n
-0001601348 00000 n
-0002118440 00000 n
-0001604269 00000 n
-0001603831 00000 n
-0001601567 00000 n
-0001603954 00000 n
-0001604080 00000 n
-0001604206 00000 n
-0001608595 00000 n
-0001607279 00000 n
-0001604399 00000 n
-0001608155 00000 n
-0001607441 00000 n
-0001607680 00000 n
-0001607919 00000 n
-0001608281 00000 n
-0001608407 00000 n
-0001608532 00000 n
-0001611493 00000 n
-0001611055 00000 n
-0001608711 00000 n
-0001611178 00000 n
-0001611304 00000 n
-0001611367 00000 n
-0001611430 00000 n
-0001612794 00000 n
-0001612608 00000 n
-0001611609 00000 n
-0001612731 00000 n
-0001614753 00000 n
-0001614260 00000 n
-0001612896 00000 n
-0001614564 00000 n
-0001614627 00000 n
-0001614690 00000 n
-0001614404 00000 n
-0001915002 00000 n
-0001618082 00000 n
-0001617518 00000 n
-0001614869 00000 n
-0001617641 00000 n
-0001617704 00000 n
-0001617767 00000 n
-0001617893 00000 n
-0001617956 00000 n
-0001618019 00000 n
-0002118565 00000 n
-0001620756 00000 n
-0001620444 00000 n
-0001618198 00000 n
-0001620567 00000 n
-0001620630 00000 n
-0001620693 00000 n
-0001621933 00000 n
-0001621747 00000 n
-0001620886 00000 n
-0001621870 00000 n
-0001624739 00000 n
-0001624303 00000 n
-0001622035 00000 n
-0001624426 00000 n
-0001624551 00000 n
-0001624676 00000 n
-0001629183 00000 n
-0001627520 00000 n
-0001624869 00000 n
-0001628491 00000 n
-0001628743 00000 n
-0001628869 00000 n
-0001627691 00000 n
-0001627889 00000 n
-0001628088 00000 n
-0001628290 00000 n
-0001628994 00000 n
-0001629120 00000 n
-0001633621 00000 n
-0001632861 00000 n
-0001629299 00000 n
-0001633558 00000 n
-0001633023 00000 n
-0001633197 00000 n
-0001633371 00000 n
-0001636891 00000 n
-0001636389 00000 n
-0001633737 00000 n
-0001636702 00000 n
-0001636828 00000 n
-0001636533 00000 n
-0002118690 00000 n
-0001638400 00000 n
-0001638214 00000 n
-0001637021 00000 n
-0001638337 00000 n
-0001641143 00000 n
-0001639879 00000 n
-0001638502 00000 n
-0001640829 00000 n
-0001640050 00000 n
-0001640241 00000 n
-0001640410 00000 n
-0001640955 00000 n
-0001640619 00000 n
-0001641081 00000 n
-0001645187 00000 n
-0001644625 00000 n
-0001641259 00000 n
-0001644748 00000 n
-0001645000 00000 n
-0001645125 00000 n
-0001650332 00000 n
-0001649641 00000 n
-0001645331 00000 n
-0001650017 00000 n
-0001649785 00000 n
-0001650143 00000 n
-0001650269 00000 n
-0001655028 00000 n
-0001654465 00000 n
-0001650490 00000 n
-0001654588 00000 n
-0001654714 00000 n
-0001654840 00000 n
-0001654966 00000 n
-0001659548 00000 n
-0001658984 00000 n
-0001655172 00000 n
-0001659107 00000 n
-0001659170 00000 n
-0001659233 00000 n
-0001659296 00000 n
-0001659359 00000 n
-0001659485 00000 n
-0002118815 00000 n
-0001663813 00000 n
-0001662746 00000 n
-0001659735 00000 n
-0001662869 00000 n
-0001662995 00000 n
-0001663121 00000 n
-0001663247 00000 n
-0001663373 00000 n
-0001663435 00000 n
-0001663498 00000 n
-0001663561 00000 n
-0001663624 00000 n
-0001663687 00000 n
-0001663750 00000 n
-0001666532 00000 n
-0001665910 00000 n
-0001663929 00000 n
-0001666033 00000 n
-0001666096 00000 n
-0001666159 00000 n
-0001666222 00000 n
-0001666347 00000 n
-0001666469 00000 n
-0001669838 00000 n
-0001669022 00000 n
-0001666662 00000 n
-0001669145 00000 n
-0001669397 00000 n
-0001669523 00000 n
-0001669649 00000 n
-0001669775 00000 n
-0001673397 00000 n
-0001672833 00000 n
-0001669997 00000 n
-0001672956 00000 n
-0001673082 00000 n
-0001673208 00000 n
-0001673334 00000 n
-0001677231 00000 n
-0001676731 00000 n
-0001673598 00000 n
-0001676854 00000 n
-0001676980 00000 n
-0001677106 00000 n
-0001677169 00000 n
-0001682160 00000 n
-0001681597 00000 n
-0001677432 00000 n
-0001681720 00000 n
-0001681783 00000 n
-0001681846 00000 n
-0001681909 00000 n
-0001681972 00000 n
-0001682035 00000 n
-0001682097 00000 n
-0002118940 00000 n
-0001686847 00000 n
-0001685779 00000 n
-0001682318 00000 n
-0001685902 00000 n
-0001686028 00000 n
-0001686154 00000 n
-0001686217 00000 n
-0001686280 00000 n
-0001686343 00000 n
-0001686406 00000 n
-0001686469 00000 n
-0001686532 00000 n
-0001686595 00000 n
-0001686658 00000 n
-0001686721 00000 n
-0001686784 00000 n
-0001687869 00000 n
-0001687683 00000 n
-0001687062 00000 n
-0001687806 00000 n
-0001691932 00000 n
-0001690538 00000 n
-0001688014 00000 n
-0001690661 00000 n
-0001690724 00000 n
-0001690788 00000 n
-0001690851 00000 n
-0001690915 00000 n
-0001690979 00000 n
-0001691043 00000 n
-0001691107 00000 n
-0001691171 00000 n
-0001691235 00000 n
-0001691298 00000 n
-0001691362 00000 n
-0001691426 00000 n
-0001691488 00000 n
-0001691552 00000 n
-0001691616 00000 n
-0001691679 00000 n
-0001691743 00000 n
-0001691870 00000 n
-0001696234 00000 n
-0001695230 00000 n
-0001692119 00000 n
-0001695353 00000 n
-0001695479 00000 n
-0001695604 00000 n
-0001695667 00000 n
-0001695730 00000 n
-0001695793 00000 n
-0001695856 00000 n
-0001695919 00000 n
-0001695982 00000 n
-0001696045 00000 n
-0001696171 00000 n
-0001700343 00000 n
-0001699653 00000 n
-0001696421 00000 n
-0001699776 00000 n
-0001699902 00000 n
-0001700028 00000 n
-0001700154 00000 n
-0001700280 00000 n
-0001704675 00000 n
-0001703986 00000 n
-0001700544 00000 n
-0001704109 00000 n
-0001704235 00000 n
-0001704361 00000 n
-0001704487 00000 n
-0001704613 00000 n
-0002119065 00000 n
-0001709188 00000 n
-0001708750 00000 n
-0001704890 00000 n
-0001708873 00000 n
-0001708936 00000 n
-0001708999 00000 n
-0001709062 00000 n
-0001709125 00000 n
-0001712467 00000 n
-0001711905 00000 n
-0001709318 00000 n
-0001712028 00000 n
-0001712091 00000 n
-0001712154 00000 n
-0001712214 00000 n
-0001712277 00000 n
-0001712404 00000 n
-0001716480 00000 n
-0001716294 00000 n
-0001712668 00000 n
-0001716417 00000 n
-0001720163 00000 n
-0001719602 00000 n
-0001716653 00000 n
-0001719725 00000 n
-0001719788 00000 n
-0001719851 00000 n
-0001719974 00000 n
-0001720100 00000 n
-0001723991 00000 n
-0001723554 00000 n
-0001720321 00000 n
-0001723677 00000 n
-0001723803 00000 n
-0001723928 00000 n
-0001725911 00000 n
-0001725725 00000 n
-0001724093 00000 n
-0001725848 00000 n
-0002119190 00000 n
-0001729682 00000 n
-0001729072 00000 n
-0001726084 00000 n
-0001729367 00000 n
-0001729216 00000 n
-0001729619 00000 n
-0001733751 00000 n
-0001733314 00000 n
-0001729855 00000 n
-0001733437 00000 n
-0001733562 00000 n
-0001733688 00000 n
-0001737913 00000 n
-0001737391 00000 n
-0001733881 00000 n
-0001737724 00000 n
-0001737850 00000 n
-0001737535 00000 n
-0001742360 00000 n
-0001742174 00000 n
-0001738057 00000 n
-0001742297 00000 n
-0001746661 00000 n
-0001746475 00000 n
-0001742490 00000 n
-0001746598 00000 n
-0001749646 00000 n
-0001749085 00000 n
-0001746805 00000 n
-0001749208 00000 n
-0001749333 00000 n
-0001749458 00000 n
-0001749584 00000 n
-0002119315 00000 n
-0001752223 00000 n
-0001752037 00000 n
-0001749776 00000 n
-0001752160 00000 n
-0001756737 00000 n
-0001755895 00000 n
-0001752339 00000 n
-0001756422 00000 n
-0001756548 00000 n
-0001756048 00000 n
-0001756236 00000 n
-0001756674 00000 n
-0001760711 00000 n
-0001760272 00000 n
-0001756924 00000 n
-0001760395 00000 n
-0001760521 00000 n
-0001760584 00000 n
-0001760647 00000 n
-0001764123 00000 n
-0001763127 00000 n
-0001760898 00000 n
-0001763809 00000 n
-0001763289 00000 n
-0001763465 00000 n
-0001763636 00000 n
-0001763935 00000 n
-0001764060 00000 n
-0001766556 00000 n
-0001765867 00000 n
-0001764239 00000 n
-0001765990 00000 n
-0001766116 00000 n
-0001766242 00000 n
-0001766368 00000 n
-0001766493 00000 n
-0001768085 00000 n
-0001767899 00000 n
-0001766672 00000 n
-0001768022 00000 n
-0002119440 00000 n
-0001771131 00000 n
-0001770569 00000 n
-0001768187 00000 n
-0001770692 00000 n
-0001770943 00000 n
-0001771068 00000 n
-0001774965 00000 n
-0001774527 00000 n
-0001771276 00000 n
-0001774650 00000 n
-0001774776 00000 n
-0001774902 00000 n
-0001777710 00000 n
-0001777149 00000 n
-0001775095 00000 n
-0001777272 00000 n
-0001777398 00000 n
-0001777523 00000 n
-0001777647 00000 n
-0001781465 00000 n
-0001781153 00000 n
-0001777840 00000 n
-0001781276 00000 n
-0001781402 00000 n
-0001785720 00000 n
-0001785283 00000 n
-0001781581 00000 n
-0001785406 00000 n
-0001785531 00000 n
-0001785657 00000 n
-0001787884 00000 n
-0001787698 00000 n
-0001785878 00000 n
-0001787821 00000 n
-0002119565 00000 n
-0001791196 00000 n
-0001790635 00000 n
-0001787986 00000 n
-0001790758 00000 n
-0001790884 00000 n
-0001791008 00000 n
-0001791134 00000 n
-0001794522 00000 n
-0001793832 00000 n
-0001791326 00000 n
-0001793955 00000 n
-0001794081 00000 n
-0001794207 00000 n
-0001794333 00000 n
-0001794459 00000 n
-0001795842 00000 n
-0001795656 00000 n
-0001794652 00000 n
-0001795779 00000 n
-0001800013 00000 n
-0001799132 00000 n
-0001795944 00000 n
-0001799448 00000 n
-0001799700 00000 n
-0001799826 00000 n
-0001799276 00000 n
-0001799952 00000 n
-0001803338 00000 n
-0001802453 00000 n
-0001800143 00000 n
-0001803024 00000 n
-0001803150 00000 n
-0001803275 00000 n
-0001802606 00000 n
-0001802815 00000 n
-0001804965 00000 n
-0001804401 00000 n
-0001803482 00000 n
-0001804524 00000 n
-0001804776 00000 n
-0001804902 00000 n
-0002119690 00000 n
-0001805959 00000 n
-0001805521 00000 n
-0001805053 00000 n
-0001805644 00000 n
-0001805896 00000 n
-0001806604 00000 n
-0001806356 00000 n
-0001806047 00000 n
-0001806479 00000 n
-0001809199 00000 n
-0001808276 00000 n
-0001806692 00000 n
-0001808570 00000 n
-0001808633 00000 n
-0001808885 00000 n
-0001808420 00000 n
-0001809011 00000 n
-0001809137 00000 n
-0001812524 00000 n
-0001811960 00000 n
-0001809301 00000 n
-0001812083 00000 n
-0001812335 00000 n
-0001812461 00000 n
-0001816600 00000 n
-0001816163 00000 n
-0001812626 00000 n
-0001816286 00000 n
-0001816412 00000 n
-0001816538 00000 n
-0001820969 00000 n
-0001820405 00000 n
-0001816702 00000 n
-0001820528 00000 n
-0001820654 00000 n
-0001820780 00000 n
-0001820906 00000 n
-0002119815 00000 n
-0001825656 00000 n
-0001823769 00000 n
-0001821113 00000 n
-0001823892 00000 n
-0001824018 00000 n
-0001824081 00000 n
-0001824144 00000 n
-0001824207 00000 n
-0001824270 00000 n
-0001824333 00000 n
-0001824396 00000 n
-0001824459 00000 n
-0001824522 00000 n
-0001824585 00000 n
-0001824647 00000 n
-0001824710 00000 n
-0001824773 00000 n
-0001824836 00000 n
-0001824899 00000 n
-0001824962 00000 n
-0001825025 00000 n
-0001825088 00000 n
-0001825151 00000 n
-0001825214 00000 n
-0001825340 00000 n
-0001825403 00000 n
-0001825466 00000 n
-0001825593 00000 n
-0001828537 00000 n
-0001828098 00000 n
-0001825814 00000 n
-0001828221 00000 n
-0001828284 00000 n
-0001828347 00000 n
-0001828474 00000 n
-0001829988 00000 n
-0001829802 00000 n
-0001828681 00000 n
-0001829925 00000 n
-0001833277 00000 n
-0001832714 00000 n
-0001830090 00000 n
-0001832837 00000 n
-0001833088 00000 n
-0001833214 00000 n
-0001836915 00000 n
-0001836164 00000 n
-0001833450 00000 n
-0001836474 00000 n
-0001836600 00000 n
-0001836663 00000 n
-0001836726 00000 n
-0001836789 00000 n
-0001836852 00000 n
-0001836308 00000 n
-0001841101 00000 n
-0001840344 00000 n
-0001837059 00000 n
-0001840660 00000 n
-0001840786 00000 n
-0001840488 00000 n
-0001840912 00000 n
-0001841038 00000 n
-0002119940 00000 n
-0001845472 00000 n
-0001844656 00000 n
-0001841344 00000 n
-0001844779 00000 n
-0001844905 00000 n
-0001845031 00000 n
-0001845157 00000 n
-0001845283 00000 n
-0001845409 00000 n
-0001846151 00000 n
-0001845903 00000 n
-0001845602 00000 n
-0001846026 00000 n
-0001849310 00000 n
-0001848683 00000 n
-0001846239 00000 n
-0001848806 00000 n
-0001848869 00000 n
-0001849121 00000 n
-0001849247 00000 n
-0001853371 00000 n
-0001852870 00000 n
-0001849483 00000 n
-0001852993 00000 n
-0001853119 00000 n
-0001853182 00000 n
-0001853245 00000 n
-0001853308 00000 n
-0001857415 00000 n
-0001857103 00000 n
-0001853558 00000 n
-0001857226 00000 n
-0001857289 00000 n
-0001857352 00000 n
-0001862365 00000 n
-0001861426 00000 n
-0001857616 00000 n
-0001861549 00000 n
-0001861612 00000 n
-0001861675 00000 n
-0001861738 00000 n
-0001861800 00000 n
-0001861863 00000 n
-0001861926 00000 n
-0001861989 00000 n
-0001862052 00000 n
-0001862115 00000 n
-0001862178 00000 n
-0001862241 00000 n
-0001862303 00000 n
-0002120065 00000 n
-0001866664 00000 n
-0001865993 00000 n
-0001862580 00000 n
-0001866287 00000 n
-0001866350 00000 n
-0001866413 00000 n
-0001866475 00000 n
-0001866601 00000 n
-0001866137 00000 n
-0001870656 00000 n
-0001869727 00000 n
-0001866822 00000 n
-0001870217 00000 n
-0001870469 00000 n
-0001869880 00000 n
-0001870048 00000 n
-0001870594 00000 n
-0001875712 00000 n
-0001874308 00000 n
-0001870758 00000 n
-0001875398 00000 n
-0001875524 00000 n
-0001874488 00000 n
-0001874679 00000 n
-0001874870 00000 n
-0001875649 00000 n
-0001875060 00000 n
-0001875225 00000 n
-0001878975 00000 n
-0001878264 00000 n
-0001875856 00000 n
-0001878786 00000 n
-0001878912 00000 n
-0001878417 00000 n
-0001878588 00000 n
-0001883226 00000 n
-0001881997 00000 n
-0001879119 00000 n
-0001882659 00000 n
-0001882911 00000 n
-0001882159 00000 n
-0001882335 00000 n
-0001883037 00000 n
-0001882506 00000 n
-0001883163 00000 n
-0001887299 00000 n
-0001886736 00000 n
-0001883328 00000 n
-0001886859 00000 n
-0001886984 00000 n
-0001887110 00000 n
-0001887236 00000 n
-0002120190 00000 n
-0001887968 00000 n
-0001887720 00000 n
-0001887429 00000 n
-0001887843 00000 n
-0001893244 00000 n
-0001890940 00000 n
-0001888056 00000 n
-0001892175 00000 n
-0001892238 00000 n
-0001891129 00000 n
-0001892490 00000 n
-0001892616 00000 n
-0001891295 00000 n
-0001891474 00000 n
-0001892742 00000 n
-0001892868 00000 n
-0001891654 00000 n
-0001892994 00000 n
-0001891833 00000 n
-0001892004 00000 n
-0001893057 00000 n
-0001893120 00000 n
-0001893182 00000 n
-0001897828 00000 n
-0001896364 00000 n
-0001893360 00000 n
-0001897262 00000 n
-0001897325 00000 n
-0001897388 00000 n
-0001897514 00000 n
-0001896535 00000 n
-0001896720 00000 n
-0001896907 00000 n
-0001897095 00000 n
-0001897640 00000 n
-0001897766 00000 n
-0001900739 00000 n
-0001900175 00000 n
-0001897944 00000 n
-0001900298 00000 n
-0001900424 00000 n
-0001900550 00000 n
-0001900676 00000 n
-0001903832 00000 n
-0001903394 00000 n
-0001900869 00000 n
-0001903517 00000 n
-0001903643 00000 n
-0001903769 00000 n
-0001906493 00000 n
-0001906056 00000 n
-0001904005 00000 n
-0001906179 00000 n
-0001906304 00000 n
-0001906430 00000 n
-0002120315 00000 n
-0001910415 00000 n
-0001909537 00000 n
-0001906694 00000 n
-0001909848 00000 n
-0001910100 00000 n
-0001910226 00000 n
-0001909681 00000 n
-0001910352 00000 n
-0001912048 00000 n
-0001911736 00000 n
-0001910517 00000 n
-0001911859 00000 n
-0001911985 00000 n
-0001915065 00000 n
-0001914250 00000 n
-0001912164 00000 n
-0001914373 00000 n
-0001914499 00000 n
-0001914625 00000 n
-0001914750 00000 n
-0001914876 00000 n
-0001920100 00000 n
-0001918223 00000 n
-0001915167 00000 n
-0001919533 00000 n
-0001919785 00000 n
-0001918412 00000 n
-0001918584 00000 n
-0001918774 00000 n
-0001918959 00000 n
-0001919151 00000 n
-0001919911 00000 n
-0001920037 00000 n
-0001919338 00000 n
-0001925008 00000 n
-0001923574 00000 n
-0001920202 00000 n
-0001924315 00000 n
-0001924441 00000 n
-0001923736 00000 n
-0001923934 00000 n
-0001924126 00000 n
-0001924567 00000 n
-0001924693 00000 n
-0001924819 00000 n
-0001924945 00000 n
-0001929383 00000 n
-0001928378 00000 n
-0001925138 00000 n
-0001928691 00000 n
-0001928817 00000 n
-0001928943 00000 n
-0001928522 00000 n
-0001929068 00000 n
-0001929194 00000 n
-0001929320 00000 n
-0002120440 00000 n
-0001933342 00000 n
-0001932372 00000 n
-0001929527 00000 n
-0001932902 00000 n
-0001933028 00000 n
-0001933153 00000 n
-0001932525 00000 n
-0001933279 00000 n
-0001932693 00000 n
-0001937135 00000 n
-0001936447 00000 n
-0001933571 00000 n
-0001936570 00000 n
-0001936822 00000 n
-0001936948 00000 n
-0001937074 00000 n
-0001940827 00000 n
-0001940012 00000 n
-0001937237 00000 n
-0001940135 00000 n
-0001940261 00000 n
-0001940386 00000 n
-0001940512 00000 n
-0001940638 00000 n
-0001940764 00000 n
-0001944332 00000 n
-0001943590 00000 n
-0001940943 00000 n
-0001943891 00000 n
-0001944017 00000 n
-0001943734 00000 n
-0001944143 00000 n
-0001944269 00000 n
-0001945356 00000 n
-0001944918 00000 n
-0001944448 00000 n
-0001945041 00000 n
-0001945293 00000 n
-0001953858 00000 n
-0001947633 00000 n
-0001945444 00000 n
-0001953291 00000 n
-0001953543 00000 n
-0001948011 00000 n
-0001948198 00000 n
-0001948389 00000 n
-0001948559 00000 n
-0001948758 00000 n
-0001948953 00000 n
-0001949142 00000 n
-0001949334 00000 n
-0001949529 00000 n
-0001949714 00000 n
-0001949907 00000 n
-0001950102 00000 n
-0001950301 00000 n
-0001950500 00000 n
-0001950684 00000 n
-0001950893 00000 n
-0001951086 00000 n
-0001951279 00000 n
-0001951474 00000 n
-0001951663 00000 n
-0001951872 00000 n
-0001952064 00000 n
-0001952239 00000 n
-0001952449 00000 n
-0001953669 00000 n
-0001952659 00000 n
-0001952869 00000 n
-0001953080 00000 n
-0001953795 00000 n
-0002120565 00000 n
-0001953974 00000 n
-0001957186 00000 n
-0001957217 00000 n
-0001960646 00000 n
-0001960789 00000 n
-0001966051 00000 n
-0001966242 00000 n
-0001969990 00000 n
-0001976531 00000 n
-0001988722 00000 n
-0001989137 00000 n
-0001999690 00000 n
-0001999940 00000 n
-0002020626 00000 n
-0002031166 00000 n
-0002033663 00000 n
-0002033694 00000 n
-0002037532 00000 n
-0002054125 00000 n
-0002054535 00000 n
-0002072972 00000 n
+0001184800 00000 n
+0001144226 00000 n
+0001142087 00000 n
+0001184106 00000 n
+0001184232 00000 n
+0001184295 00000 n
+0001184358 00000 n
+0001184421 00000 n
+0001184547 00000 n
+0001184610 00000 n
+0001184673 00000 n
+0001184736 00000 n
+0001161696 00000 n
+0001183918 00000 n
+0001188119 00000 n
+0001217944 00000 n
+0001215120 00000 n
+0001187996 00000 n
+0001185005 00000 n
+0001214741 00000 n
+0001214867 00000 n
+0001214930 00000 n
+0001214993 00000 n
+0001215056 00000 n
+0001214553 00000 n
+0001245309 00000 n
+0001285067 00000 n
+0001242917 00000 n
+0001217821 00000 n
+0001215324 00000 n
+0001242287 00000 n
+0001242350 00000 n
+0001242413 00000 n
+0001242476 00000 n
+0001242602 00000 n
+0001242728 00000 n
+0001242854 00000 n
+0002462302 00000 n
+0001242099 00000 n
+0001282201 00000 n
+0001245186 00000 n
+0001243093 00000 n
+0001281949 00000 n
+0001282012 00000 n
+0001282075 00000 n
+0001282138 00000 n
+0001281761 00000 n
+0001310610 00000 n
+0001284944 00000 n
+0001282377 00000 n
+0001310358 00000 n
+0001310421 00000 n
+0001310484 00000 n
+0001310547 00000 n
+0001310170 00000 n
+0001314308 00000 n
+0001313871 00000 n
+0001310814 00000 n
+0001313994 00000 n
+0001314120 00000 n
+0001314245 00000 n
+0001318131 00000 n
+0001317567 00000 n
+0001314438 00000 n
+0001317690 00000 n
+0001317816 00000 n
+0001317942 00000 n
+0001318068 00000 n
+0001321007 00000 n
+0001320821 00000 n
+0001318333 00000 n
+0001320944 00000 n
+0001325178 00000 n
+0001324615 00000 n
+0001321222 00000 n
+0001324738 00000 n
+0001324864 00000 n
+0001324926 00000 n
+0001324988 00000 n
+0001325115 00000 n
+0002462427 00000 n
+0001327958 00000 n
+0001366961 00000 n
+0001327814 00000 n
+0001325308 00000 n
+0001366708 00000 n
+0001366771 00000 n
+0001366834 00000 n
+0001366897 00000 n
+0001366526 00000 n
+0001366338 00000 n
+0001370191 00000 n
+0001372505 00000 n
+0001370047 00000 n
+0001367165 00000 n
+0001372126 00000 n
+0001372252 00000 n
+0001371972 00000 n
+0001372315 00000 n
+0001372378 00000 n
+0001372441 00000 n
+0001376058 00000 n
+0001380652 00000 n
+0001375878 00000 n
+0001372701 00000 n
+0001380273 00000 n
+0001379367 00000 n
+0001380336 00000 n
+0001380399 00000 n
+0001380462 00000 n
+0001380589 00000 n
+0001379524 00000 n
+0001379705 00000 n
+0001379888 00000 n
+0001380063 00000 n
+0001384941 00000 n
+0001383772 00000 n
+0001380848 00000 n
+0001384504 00000 n
+0001383934 00000 n
+0001384114 00000 n
+0001384630 00000 n
+0001384292 00000 n
+0001384755 00000 n
+0001384879 00000 n
+0001387450 00000 n
+0001413058 00000 n
+0001410450 00000 n
+0001387327 00000 n
+0001385142 00000 n
+0001409947 00000 n
+0001410073 00000 n
+0001410136 00000 n
+0001410199 00000 n
+0001410262 00000 n
+0001410388 00000 n
+0001409761 00000 n
+0001437555 00000 n
+0001412935 00000 n
+0001410640 00000 n
+0001437053 00000 n
+0001437116 00000 n
+0001437179 00000 n
+0001437242 00000 n
+0001437368 00000 n
+0001437493 00000 n
+0002462552 00000 n
+0001436865 00000 n
+0001440313 00000 n
+0001465078 00000 n
+0001440190 00000 n
+0001437759 00000 n
+0001464573 00000 n
+0001464636 00000 n
+0001464699 00000 n
+0001464762 00000 n
+0001464889 00000 n
+0001465015 00000 n
+0001464385 00000 n
+0001469145 00000 n
+0001468507 00000 n
+0001465268 00000 n
+0001468830 00000 n
+0001468651 00000 n
+0001468956 00000 n
+0001469082 00000 n
+0001473544 00000 n
+0001472728 00000 n
+0001469303 00000 n
+0001472851 00000 n
+0001472977 00000 n
+0001473103 00000 n
+0001473229 00000 n
+0001473355 00000 n
+0001473481 00000 n
+0001477319 00000 n
+0001476755 00000 n
+0001473646 00000 n
+0001476878 00000 n
+0001477004 00000 n
+0001477130 00000 n
+0001477256 00000 n
+0001479951 00000 n
+0001479309 00000 n
+0001477449 00000 n
+0001479635 00000 n
+0001479698 00000 n
+0001479762 00000 n
+0001479888 00000 n
+0001479453 00000 n
+0001482503 00000 n
+0001482191 00000 n
+0001480081 00000 n
+0001482314 00000 n
+0001482440 00000 n
+0002462677 00000 n
+0001485305 00000 n
+0001484993 00000 n
+0001482704 00000 n
+0001485116 00000 n
+0001485242 00000 n
+0001488688 00000 n
+0001488047 00000 n
+0001485478 00000 n
+0001488374 00000 n
+0001488500 00000 n
+0001488191 00000 n
+0001488625 00000 n
+0001493526 00000 n
+0001492786 00000 n
+0001488904 00000 n
+0001493082 00000 n
+0001493145 00000 n
+0001493209 00000 n
+0001493273 00000 n
+0001493337 00000 n
+0001492930 00000 n
+0001493463 00000 n
+0001497698 00000 n
+0001497260 00000 n
+0001493741 00000 n
+0001497383 00000 n
+0001497509 00000 n
+0001497635 00000 n
+0001499458 00000 n
+0001499272 00000 n
+0001497842 00000 n
+0001499395 00000 n
+0001502773 00000 n
+0001502148 00000 n
+0001499617 00000 n
+0001502271 00000 n
+0001502396 00000 n
+0001502458 00000 n
+0001502521 00000 n
+0001502584 00000 n
+0001502647 00000 n
+0001502710 00000 n
+0002462802 00000 n
+0001508414 00000 n
+0001506172 00000 n
+0001505421 00000 n
+0001502889 00000 n
+0001505544 00000 n
+0001505670 00000 n
+0001505733 00000 n
+0001505796 00000 n
+0001505859 00000 n
+0001505983 00000 n
+0001506109 00000 n
+0001553427 00000 n
+0001508291 00000 n
+0001506359 00000 n
+0001553049 00000 n
+0001553112 00000 n
+0001553175 00000 n
+0001553238 00000 n
+0001553364 00000 n
+0001552861 00000 n
+0001557067 00000 n
+0001556755 00000 n
+0001553631 00000 n
+0001556878 00000 n
+0001557004 00000 n
+0001560766 00000 n
+0001560076 00000 n
+0001557268 00000 n
+0001560199 00000 n
+0001560325 00000 n
+0001560388 00000 n
+0001560451 00000 n
+0001560514 00000 n
+0001560577 00000 n
+0001560703 00000 n
+0002291898 00000 n
+0002289897 00000 n
+0002291732 00000 n
+0001564549 00000 n
+0001564112 00000 n
+0001560910 00000 n
+0001564235 00000 n
+0001564361 00000 n
+0001564486 00000 n
+0001567632 00000 n
+0001567320 00000 n
+0001564735 00000 n
+0001567443 00000 n
+0001567569 00000 n
+0002462927 00000 n
+0001571199 00000 n
+0001570698 00000 n
+0001567804 00000 n
+0001570821 00000 n
+0001570947 00000 n
+0001571010 00000 n
+0002288059 00000 n
+0002275905 00000 n
+0002287891 00000 n
+0001571073 00000 n
+0001571136 00000 n
+0001573779 00000 n
+0001573405 00000 n
+0001571371 00000 n
+0001573528 00000 n
+0001573591 00000 n
+0001573654 00000 n
+0001573717 00000 n
+0001576280 00000 n
+0001575905 00000 n
+0001573923 00000 n
+0001576028 00000 n
+0001576091 00000 n
+0001576154 00000 n
+0001576217 00000 n
+0001578337 00000 n
+0001578026 00000 n
+0001576396 00000 n
+0001578149 00000 n
+0001578212 00000 n
+0001578275 00000 n
+0001581535 00000 n
+0001580972 00000 n
+0001578467 00000 n
+0001581095 00000 n
+0001581158 00000 n
+0001581221 00000 n
+0001581284 00000 n
+0001581347 00000 n
+0001581472 00000 n
+0001583919 00000 n
+0001583607 00000 n
+0001581679 00000 n
+0001583730 00000 n
+0001583856 00000 n
+0002463052 00000 n
+0001587629 00000 n
+0001586939 00000 n
+0001584063 00000 n
+0001587062 00000 n
+0001587188 00000 n
+0001587314 00000 n
+0001587440 00000 n
+0001587566 00000 n
+0001590382 00000 n
+0001589654 00000 n
+0001587773 00000 n
+0001590193 00000 n
+0001590319 00000 n
+0001589807 00000 n
+0001590000 00000 n
+0001596172 00000 n
+0001594379 00000 n
+0001590498 00000 n
+0001595732 00000 n
+0001594568 00000 n
+0001595858 00000 n
+0001594761 00000 n
+0001594967 00000 n
+0001595158 00000 n
+0001595983 00000 n
+0001596109 00000 n
+0001595351 00000 n
+0001595536 00000 n
+0001603291 00000 n
+0001600637 00000 n
+0001596359 00000 n
+0001602976 00000 n
+0001603102 00000 n
+0001603228 00000 n
+0001600871 00000 n
+0001601088 00000 n
+0001601303 00000 n
+0001601518 00000 n
+0001601701 00000 n
+0001601878 00000 n
+0001602047 00000 n
+0001602228 00000 n
+0001602404 00000 n
+0001602588 00000 n
+0001602757 00000 n
+0001609158 00000 n
+0001607366 00000 n
+0001603421 00000 n
+0001608843 00000 n
+0001608969 00000 n
+0001607555 00000 n
+0001607785 00000 n
+0001608017 00000 n
+0001609095 00000 n
+0001608286 00000 n
+0001608497 00000 n
+0001608669 00000 n
+0001614949 00000 n
+0001613123 00000 n
+0001609274 00000 n
+0001614508 00000 n
+0001614634 00000 n
+0001613312 00000 n
+0001613527 00000 n
+0001613716 00000 n
+0001613901 00000 n
+0001614760 00000 n
+0001614135 00000 n
+0001614330 00000 n
+0001614886 00000 n
+0002463177 00000 n
+0001623313 00000 n
+0001618579 00000 n
+0001615122 00000 n
+0001623250 00000 n
+0001618903 00000 n
+0001619095 00000 n
+0001619301 00000 n
+0001619504 00000 n
+0001619724 00000 n
+0001619944 00000 n
+0001620150 00000 n
+0001620355 00000 n
+0001620545 00000 n
+0001620736 00000 n
+0001620926 00000 n
+0001621116 00000 n
+0001621306 00000 n
+0001621496 00000 n
+0001621686 00000 n
+0001621878 00000 n
+0001622118 00000 n
+0001622358 00000 n
+0001622598 00000 n
+0001622838 00000 n
+0001623044 00000 n
+0001628156 00000 n
+0001627001 00000 n
+0001623443 00000 n
+0001628093 00000 n
+0001627172 00000 n
+0001627402 00000 n
+0001627631 00000 n
+0001627862 00000 n
+0001631642 00000 n
+0001631079 00000 n
+0001628300 00000 n
+0001631202 00000 n
+0001631328 00000 n
+0001631453 00000 n
+0001631579 00000 n
+0001635203 00000 n
+0001634551 00000 n
+0001631786 00000 n
+0001634888 00000 n
+0001634695 00000 n
+0001635014 00000 n
+0001635140 00000 n
+0001638495 00000 n
+0001638058 00000 n
+0001635333 00000 n
+0001638181 00000 n
+0001638307 00000 n
+0001638432 00000 n
+0001642014 00000 n
+0001641576 00000 n
+0001638639 00000 n
+0001641699 00000 n
+0001641825 00000 n
+0001641951 00000 n
+0002463302 00000 n
+0001645780 00000 n
+0001645342 00000 n
+0001642158 00000 n
+0001645465 00000 n
+0001645591 00000 n
+0001645717 00000 n
+0001648682 00000 n
+0001648119 00000 n
+0001645910 00000 n
+0001648242 00000 n
+0001648368 00000 n
+0001648493 00000 n
+0001648619 00000 n
+0001651756 00000 n
+0001651444 00000 n
+0001648869 00000 n
+0001651567 00000 n
+0001651693 00000 n
+0001656478 00000 n
+0001706471 00000 n
+0001654665 00000 n
+0001654353 00000 n
+0001651886 00000 n
+0001654476 00000 n
+0001654602 00000 n
+0001687236 00000 n
+0001656355 00000 n
+0001654880 00000 n
+0001686605 00000 n
+0001686668 00000 n
+0001686731 00000 n
+0001686794 00000 n
+0001686921 00000 n
+0001687047 00000 n
+0001687173 00000 n
+0001691622 00000 n
+0001690807 00000 n
+0001687404 00000 n
+0001690930 00000 n
+0001691056 00000 n
+0001691181 00000 n
+0001691307 00000 n
+0001691433 00000 n
+0001691559 00000 n
+0002463427 00000 n
+0001695769 00000 n
+0001694828 00000 n
+0001691780 00000 n
+0001694951 00000 n
+0001695077 00000 n
+0001695203 00000 n
+0001695328 00000 n
+0001695454 00000 n
+0001695580 00000 n
+0001695706 00000 n
+0001700113 00000 n
+0001698857 00000 n
+0001695913 00000 n
+0001698980 00000 n
+0001699106 00000 n
+0001699168 00000 n
+0001699231 00000 n
+0001699294 00000 n
+0001699357 00000 n
+0001699420 00000 n
+0001699483 00000 n
+0001699546 00000 n
+0001699609 00000 n
+0001699672 00000 n
+0001699735 00000 n
+0001699798 00000 n
+0001699861 00000 n
+0001699924 00000 n
+0001699987 00000 n
+0001700050 00000 n
+0001739583 00000 n
+0001704756 00000 n
+0001703940 00000 n
+0001700229 00000 n
+0001704063 00000 n
+0001704189 00000 n
+0001704315 00000 n
+0001704441 00000 n
+0001704567 00000 n
+0001704693 00000 n
+0001705654 00000 n
+0001705342 00000 n
+0001704914 00000 n
+0001705465 00000 n
+0001705591 00000 n
+0001738726 00000 n
+0001706348 00000 n
+0001705756 00000 n
+0001738474 00000 n
+0001738537 00000 n
+0001738600 00000 n
+0001738663 00000 n
+0001835563 00000 n
+0001739460 00000 n
+0001738880 00000 n
+0001835310 00000 n
+0001835373 00000 n
+0001835436 00000 n
+0001835499 00000 n
+0002463552 00000 n
+0001835122 00000 n
+0001838330 00000 n
+0001837640 00000 n
+0001835725 00000 n
+0001837763 00000 n
+0001838015 00000 n
+0001838141 00000 n
+0001838204 00000 n
+0001838267 00000 n
+0001841748 00000 n
+0001840806 00000 n
+0001838432 00000 n
+0001840929 00000 n
+0001840992 00000 n
+0001841056 00000 n
+0001841182 00000 n
+0001841308 00000 n
+0001841434 00000 n
+0001841497 00000 n
+0001841560 00000 n
+0001841687 00000 n
+0001844935 00000 n
+0001844497 00000 n
+0001841892 00000 n
+0001844620 00000 n
+0001844746 00000 n
+0001844872 00000 n
+0001848355 00000 n
+0001847192 00000 n
+0001845051 00000 n
+0001847915 00000 n
+0001848041 00000 n
+0001848166 00000 n
+0001847354 00000 n
+0001847558 00000 n
+0001848292 00000 n
+0001847738 00000 n
+0001851230 00000 n
+0001850792 00000 n
+0001848471 00000 n
+0001850915 00000 n
+0001851167 00000 n
+0001854899 00000 n
+0001854461 00000 n
+0001851403 00000 n
+0001854584 00000 n
+0001854710 00000 n
+0001854836 00000 n
+0002463677 00000 n
+0001858823 00000 n
+0001858134 00000 n
+0001855015 00000 n
+0001858257 00000 n
+0001858383 00000 n
+0001858509 00000 n
+0001858635 00000 n
+0001858760 00000 n
+0001862636 00000 n
+0001862198 00000 n
+0001858939 00000 n
+0001862321 00000 n
+0001862447 00000 n
+0001862573 00000 n
+0001866819 00000 n
+0001866129 00000 n
+0001862752 00000 n
+0001866252 00000 n
+0001866378 00000 n
+0001866504 00000 n
+0001866630 00000 n
+0001866756 00000 n
+0001870725 00000 n
+0001870100 00000 n
+0001866921 00000 n
+0001870410 00000 n
+0001870536 00000 n
+0001870244 00000 n
+0001870662 00000 n
+0001873263 00000 n
+0001872825 00000 n
+0001870855 00000 n
+0001872948 00000 n
+0001873074 00000 n
+0001873200 00000 n
+0001877175 00000 n
+0001875858 00000 n
+0001873393 00000 n
+0001876733 00000 n
+0001876020 00000 n
+0001876259 00000 n
+0001876497 00000 n
+0001876859 00000 n
+0001876922 00000 n
+0001876986 00000 n
+0001877112 00000 n
+0002463802 00000 n
+0001879455 00000 n
+0001879143 00000 n
+0001877291 00000 n
+0001879266 00000 n
+0001879392 00000 n
+0001881733 00000 n
+0001881301 00000 n
+0001879571 00000 n
+0001881424 00000 n
+0001881550 00000 n
+0001881611 00000 n
+0001881672 00000 n
+0001883694 00000 n
+0001883202 00000 n
+0001881849 00000 n
+0001883505 00000 n
+0001883568 00000 n
+0001883631 00000 n
+0001883346 00000 n
+0002233847 00000 n
+0001885008 00000 n
+0001884822 00000 n
+0001883810 00000 n
+0001884945 00000 n
+0001888001 00000 n
+0001887437 00000 n
+0001885110 00000 n
+0001887560 00000 n
+0001887623 00000 n
+0001887686 00000 n
+0001887812 00000 n
+0001887875 00000 n
+0001887938 00000 n
+0001889831 00000 n
+0001889645 00000 n
+0001888117 00000 n
+0001889768 00000 n
+0002463927 00000 n
+0001891585 00000 n
+0001891273 00000 n
+0001889947 00000 n
+0001891396 00000 n
+0001891459 00000 n
+0001891522 00000 n
+0001894631 00000 n
+0001894195 00000 n
+0001891701 00000 n
+0001894318 00000 n
+0001894443 00000 n
+0001894568 00000 n
+0001896021 00000 n
+0001895709 00000 n
+0001894761 00000 n
+0001895832 00000 n
+0001895958 00000 n
+0001899636 00000 n
+0001898225 00000 n
+0001896194 00000 n
+0001899195 00000 n
+0001899447 00000 n
+0001899573 00000 n
+0001898396 00000 n
+0001898595 00000 n
+0001898792 00000 n
+0001898994 00000 n
+0001903358 00000 n
+0001902543 00000 n
+0001899752 00000 n
+0001903043 00000 n
+0001903169 00000 n
+0001903295 00000 n
+0001902696 00000 n
+0001902870 00000 n
+0001907387 00000 n
+0001906693 00000 n
+0001903474 00000 n
+0001907199 00000 n
+0001906846 00000 n
+0001907324 00000 n
+0001907030 00000 n
+0002464052 00000 n
+0001909418 00000 n
+0001909232 00000 n
+0001907517 00000 n
+0001909355 00000 n
+0001911901 00000 n
+0001910981 00000 n
+0001909520 00000 n
+0001911712 00000 n
+0001911143 00000 n
+0001911333 00000 n
+0001911503 00000 n
+0001911838 00000 n
+0001913431 00000 n
+0001912889 00000 n
+0001912017 00000 n
+0001913243 00000 n
+0001913033 00000 n
+0001913369 00000 n
+0001917030 00000 n
+0001916466 00000 n
+0001913533 00000 n
+0001916589 00000 n
+0001916841 00000 n
+0001916967 00000 n
+0001921545 00000 n
+0001920615 00000 n
+0001917132 00000 n
+0001921231 00000 n
+0001920768 00000 n
+0001921000 00000 n
+0001921357 00000 n
+0001921483 00000 n
+0001926043 00000 n
+0001925605 00000 n
+0001921703 00000 n
+0001925728 00000 n
+0001925854 00000 n
+0001925980 00000 n
+0002464177 00000 n
+0001930121 00000 n
+0001929558 00000 n
+0001926187 00000 n
+0001929681 00000 n
+0001929807 00000 n
+0001929870 00000 n
+0001929932 00000 n
+0001929995 00000 n
+0001930058 00000 n
+0001934048 00000 n
+0001933611 00000 n
+0001930308 00000 n
+0001933734 00000 n
+0001933860 00000 n
+0001933986 00000 n
+0001937949 00000 n
+0001937008 00000 n
+0001934192 00000 n
+0001937131 00000 n
+0001937257 00000 n
+0001937382 00000 n
+0001937508 00000 n
+0001937571 00000 n
+0001937634 00000 n
+0001937697 00000 n
+0001937760 00000 n
+0001937823 00000 n
+0001937886 00000 n
+0001940725 00000 n
+0001940102 00000 n
+0001938079 00000 n
+0001940225 00000 n
+0001940288 00000 n
+0001940351 00000 n
+0001940414 00000 n
+0001940536 00000 n
+0001940662 00000 n
+0001943674 00000 n
+0001942985 00000 n
+0001940855 00000 n
+0001943108 00000 n
+0001943360 00000 n
+0001943486 00000 n
+0001943612 00000 n
+0001946897 00000 n
+0001946459 00000 n
+0001943819 00000 n
+0001946582 00000 n
+0001946708 00000 n
+0001946834 00000 n
+0002464302 00000 n
+0001949604 00000 n
+0001949166 00000 n
+0001947084 00000 n
+0001949289 00000 n
+0001949415 00000 n
+0001949541 00000 n
+0001953823 00000 n
+0001953259 00000 n
+0001949734 00000 n
+0001953382 00000 n
+0001953508 00000 n
+0001953634 00000 n
+0001953697 00000 n
+0001953760 00000 n
+0001957591 00000 n
+0001957091 00000 n
+0001954010 00000 n
+0001957214 00000 n
+0001957277 00000 n
+0001957340 00000 n
+0001957403 00000 n
+0001957466 00000 n
+0001957529 00000 n
+0001961523 00000 n
+0001960773 00000 n
+0001957778 00000 n
+0001960896 00000 n
+0001961022 00000 n
+0001961146 00000 n
+0001961209 00000 n
+0001961272 00000 n
+0001961335 00000 n
+0001961398 00000 n
+0001961461 00000 n
+0001965210 00000 n
+0001964396 00000 n
+0001961653 00000 n
+0001964519 00000 n
+0001964582 00000 n
+0001964645 00000 n
+0001964708 00000 n
+0001964771 00000 n
+0001964834 00000 n
+0001964897 00000 n
+0001964960 00000 n
+0001965023 00000 n
+0001965086 00000 n
+0001965148 00000 n
+0001969316 00000 n
+0001968123 00000 n
+0001965397 00000 n
+0001968246 00000 n
+0001968309 00000 n
+0001968372 00000 n
+0001968435 00000 n
+0001968498 00000 n
+0001968561 00000 n
+0001968624 00000 n
+0001968686 00000 n
+0001968749 00000 n
+0001968812 00000 n
+0001968875 00000 n
+0001968938 00000 n
+0001969001 00000 n
+0001969127 00000 n
+0001969253 00000 n
+0002464427 00000 n
+0001972772 00000 n
+0001971768 00000 n
+0001969418 00000 n
+0001971891 00000 n
+0001972017 00000 n
+0001972080 00000 n
+0001972143 00000 n
+0001972206 00000 n
+0001972269 00000 n
+0001972331 00000 n
+0001972394 00000 n
+0001972457 00000 n
+0001972583 00000 n
+0001972709 00000 n
+0001976521 00000 n
+0001975957 00000 n
+0001972945 00000 n
+0001976080 00000 n
+0001976206 00000 n
+0001976332 00000 n
+0001976458 00000 n
+0001980625 00000 n
+0001980063 00000 n
+0001976708 00000 n
+0001980186 00000 n
+0001980312 00000 n
+0001980437 00000 n
+0001980562 00000 n
+0001984678 00000 n
+0001984114 00000 n
+0001980826 00000 n
+0001984237 00000 n
+0001984363 00000 n
+0001984426 00000 n
+0001984489 00000 n
+0001984552 00000 n
+0001984615 00000 n
+0001988438 00000 n
+0001987878 00000 n
+0001984822 00000 n
+0001988001 00000 n
+0001988064 00000 n
+0001988127 00000 n
+0001988187 00000 n
+0001988248 00000 n
+0001988375 00000 n
+0001992013 00000 n
+0001991827 00000 n
+0001988568 00000 n
+0001991950 00000 n
+0002464552 00000 n
+0001995893 00000 n
+0001995584 00000 n
+0001992172 00000 n
+0001995707 00000 n
+0001995770 00000 n
+0001995833 00000 n
+0001999157 00000 n
+0001998593 00000 n
+0001996009 00000 n
+0001998716 00000 n
+0001998842 00000 n
+0001998968 00000 n
+0001999094 00000 n
+0002002557 00000 n
+0002002246 00000 n
+0001999301 00000 n
+0002002369 00000 n
+0002002495 00000 n
+0002004593 00000 n
+0002004407 00000 n
+0002002687 00000 n
+0002004530 00000 n
+0002008206 00000 n
+0002007596 00000 n
+0002004752 00000 n
+0002007891 00000 n
+0002007740 00000 n
+0002008143 00000 n
+0002012362 00000 n
+0002011925 00000 n
+0002008365 00000 n
+0002012048 00000 n
+0002012173 00000 n
+0002012299 00000 n
+0002464677 00000 n
+0002016129 00000 n
+0002015606 00000 n
+0002012464 00000 n
+0002015940 00000 n
+0002016066 00000 n
+0002015750 00000 n
+0002020467 00000 n
+0002020281 00000 n
+0002016273 00000 n
+0002020404 00000 n
+0002024764 00000 n
+0002024578 00000 n
+0002020597 00000 n
+0002024701 00000 n
+0002028427 00000 n
+0002028115 00000 n
+0002024894 00000 n
+0002028238 00000 n
+0002028364 00000 n
+0002031013 00000 n
+0002030576 00000 n
+0002028571 00000 n
+0002030699 00000 n
+0002030825 00000 n
+0002030950 00000 n
+0002032792 00000 n
+0002032606 00000 n
+0002031129 00000 n
+0002032729 00000 n
+0002464802 00000 n
+0002036743 00000 n
+0002036305 00000 n
+0002032908 00000 n
+0002036428 00000 n
+0002036554 00000 n
+0002036680 00000 n
+0002041803 00000 n
+0002040986 00000 n
+0002036916 00000 n
+0002041487 00000 n
+0002041613 00000 n
+0002041676 00000 n
+0002041739 00000 n
+0002041139 00000 n
+0002041315 00000 n
+0002044592 00000 n
+0002043958 00000 n
+0002041990 00000 n
+0002044278 00000 n
+0002044102 00000 n
+0002044403 00000 n
+0002044529 00000 n
+0002047005 00000 n
+0002046317 00000 n
+0002044722 00000 n
+0002046440 00000 n
+0002046566 00000 n
+0002046692 00000 n
+0002046817 00000 n
+0002046943 00000 n
+0002049269 00000 n
+0002048957 00000 n
+0002047121 00000 n
+0002049080 00000 n
+0002049206 00000 n
+0002050299 00000 n
+0002050113 00000 n
+0002049399 00000 n
+0002050236 00000 n
+0002464927 00000 n
+0002053131 00000 n
+0002052568 00000 n
+0002050415 00000 n
+0002052691 00000 n
+0002052942 00000 n
+0002053068 00000 n
+0002056106 00000 n
+0002055668 00000 n
+0002053276 00000 n
+0002055791 00000 n
+0002055917 00000 n
+0002056043 00000 n
+0002059694 00000 n
+0002059259 00000 n
+0002056293 00000 n
+0002059382 00000 n
+0002059507 00000 n
+0002059632 00000 n
+0002062217 00000 n
+0002061905 00000 n
+0002059824 00000 n
+0002062028 00000 n
+0002062154 00000 n
+0002066809 00000 n
+0002066245 00000 n
+0002062333 00000 n
+0002066368 00000 n
+0002066494 00000 n
+0002066557 00000 n
+0002066620 00000 n
+0002066684 00000 n
+0002066745 00000 n
+0002070261 00000 n
+0002069825 00000 n
+0002066939 00000 n
+0002069948 00000 n
+0002070073 00000 n
+0002070198 00000 n
+0002465052 00000 n
+0002072314 00000 n
+0002072128 00000 n
+0002070405 00000 n
+0002072251 00000 n
+0002075525 00000 n
+0002074961 00000 n
+0002072416 00000 n
+0002075084 00000 n
+0002075210 00000 n
+0002075336 00000 n
+0002075462 00000 n
+0002078963 00000 n
+0002077926 00000 n
+0002075655 00000 n
+0002078396 00000 n
+0002078079 00000 n
+0002078238 00000 n
+0002078522 00000 n
+0002078648 00000 n
+0002078774 00000 n
+0002078900 00000 n
+0002080818 00000 n
+0002080632 00000 n
+0002079079 00000 n
+0002080755 00000 n
+0002084501 00000 n
+0002083563 00000 n
+0002080934 00000 n
+0002084060 00000 n
+0002084312 00000 n
+0002083716 00000 n
+0002084438 00000 n
+0002083889 00000 n
+0002088664 00000 n
+0002087472 00000 n
+0002084617 00000 n
+0002088223 00000 n
+0002088349 00000 n
+0002088475 00000 n
+0002087634 00000 n
+0002088601 00000 n
+0002087810 00000 n
+0002088018 00000 n
+0002465177 00000 n
+0002090174 00000 n
+0002089736 00000 n
+0002088808 00000 n
+0002089859 00000 n
+0002089985 00000 n
+0002090111 00000 n
+0002091698 00000 n
+0002091134 00000 n
+0002090276 00000 n
+0002091257 00000 n
+0002091509 00000 n
+0002091635 00000 n
+0002092698 00000 n
+0002092260 00000 n
+0002091786 00000 n
+0002092383 00000 n
+0002092635 00000 n
+0002093358 00000 n
+0002093110 00000 n
0002092786 00000 n
-0002096974 00000 n
-0002112147 00000 n
-0002120645 00000 n
-0002120771 00000 n
-0002120897 00000 n
-0002121023 00000 n
-0002121149 00000 n
-0002121275 00000 n
-0002121401 00000 n
-0002121527 00000 n
-0002121653 00000 n
-0002121779 00000 n
-0002121905 00000 n
-0002122022 00000 n
-0002122149 00000 n
-0002122267 00000 n
-0002122341 00000 n
-0002193282 00000 n
-0002242071 00000 n
-0002242112 00000 n
-0002242152 00000 n
-0002242384 00000 n
+0002093233 00000 n
+0002097008 00000 n
+0002095754 00000 n
+0002093446 00000 n
+0002095877 00000 n
+0002095940 00000 n
+0002096192 00000 n
+0002096255 00000 n
+0002096318 00000 n
+0002096381 00000 n
+0002096444 00000 n
+0002096507 00000 n
+0002096570 00000 n
+0002096633 00000 n
+0002096696 00000 n
+0002096759 00000 n
+0002096822 00000 n
+0002096884 00000 n
+0002096947 00000 n
+0002099234 00000 n
+0002098733 00000 n
+0002097096 00000 n
+0002098856 00000 n
+0002098919 00000 n
+0002099045 00000 n
+0002099171 00000 n
+0002465302 00000 n
+0002101101 00000 n
+0002100789 00000 n
+0002099350 00000 n
+0002100912 00000 n
+0002101038 00000 n
+0002102802 00000 n
+0002102616 00000 n
+0002101217 00000 n
+0002102739 00000 n
+0002104776 00000 n
+0002104464 00000 n
+0002102904 00000 n
+0002104587 00000 n
+0002104713 00000 n
+0002109515 00000 n
+0002108402 00000 n
+0002104892 00000 n
+0002108697 00000 n
+0002108823 00000 n
+0002108949 00000 n
+0002109012 00000 n
+0002109075 00000 n
+0002109200 00000 n
+0002109263 00000 n
+0002109326 00000 n
+0002109452 00000 n
+0002108546 00000 n
+0002113513 00000 n
+0002112367 00000 n
+0002109645 00000 n
+0002112821 00000 n
+0002112947 00000 n
+0002113010 00000 n
+0002113073 00000 n
+0002112520 00000 n
+0002113199 00000 n
+0002112670 00000 n
+0002113324 00000 n
+0002113450 00000 n
+0002116698 00000 n
+0002116386 00000 n
+0002113629 00000 n
+0002116509 00000 n
+0002116635 00000 n
+0002465427 00000 n
+0002118170 00000 n
+0002117858 00000 n
+0002116828 00000 n
+0002117981 00000 n
+0002118107 00000 n
+0002120996 00000 n
+0002120432 00000 n
+0002118272 00000 n
+0002120555 00000 n
+0002120807 00000 n
+0002120933 00000 n
+0002123721 00000 n
+0002123535 00000 n
+0002121112 00000 n
+0002123658 00000 n
+0002127967 00000 n
+0002127530 00000 n
+0002123823 00000 n
+0002127653 00000 n
+0002127779 00000 n
+0002127904 00000 n
+0002131678 00000 n
+0002130863 00000 n
+0002128069 00000 n
+0002130986 00000 n
+0002131112 00000 n
+0002131238 00000 n
+0002131364 00000 n
+0002131490 00000 n
+0002131553 00000 n
+0002131616 00000 n
+0002135190 00000 n
+0002134186 00000 n
+0002131836 00000 n
+0002134309 00000 n
+0002134372 00000 n
+0002134435 00000 n
+0002134498 00000 n
+0002134561 00000 n
+0002134624 00000 n
+0002134687 00000 n
+0002134750 00000 n
+0002134876 00000 n
+0002134939 00000 n
+0002135002 00000 n
+0002135128 00000 n
+0002465552 00000 n
+0002138964 00000 n
+0002138525 00000 n
+0002135334 00000 n
+0002138648 00000 n
+0002138711 00000 n
+0002138774 00000 n
+0002138901 00000 n
+0002141331 00000 n
+0002141145 00000 n
+0002139094 00000 n
+0002141268 00000 n
+0002144467 00000 n
+0002143903 00000 n
+0002141447 00000 n
+0002144026 00000 n
+0002144278 00000 n
+0002144404 00000 n
+0002147500 00000 n
+0002147063 00000 n
+0002144626 00000 n
+0002147186 00000 n
+0002147312 00000 n
+0002147375 00000 n
+0002147438 00000 n
+0002151080 00000 n
+0002150149 00000 n
+0002147644 00000 n
+0002150640 00000 n
+0002150703 00000 n
+0002150766 00000 n
+0002150302 00000 n
+0002150891 00000 n
+0002150469 00000 n
+0002151017 00000 n
+0002154610 00000 n
+0002154048 00000 n
+0002151309 00000 n
+0002154171 00000 n
+0002154297 00000 n
+0002154423 00000 n
+0002154547 00000 n
+0002465677 00000 n
+0002157866 00000 n
+0002157302 00000 n
+0002154797 00000 n
+0002157425 00000 n
+0002157551 00000 n
+0002157677 00000 n
+0002157803 00000 n
+0002158543 00000 n
+0002158295 00000 n
+0002157982 00000 n
+0002158418 00000 n
+0002161462 00000 n
+0002160708 00000 n
+0002158631 00000 n
+0002160831 00000 n
+0002160894 00000 n
+0002161146 00000 n
+0002161272 00000 n
+0002161335 00000 n
+0002161399 00000 n
+0002164888 00000 n
+0002164450 00000 n
+0002161607 00000 n
+0002164573 00000 n
+0002164699 00000 n
+0002164762 00000 n
+0002164825 00000 n
+0002168271 00000 n
+0002168022 00000 n
+0002165061 00000 n
+0002168145 00000 n
+0002168208 00000 n
+0002172126 00000 n
+0002171689 00000 n
+0002168458 00000 n
+0002171812 00000 n
+0002171875 00000 n
+0002171938 00000 n
+0002172000 00000 n
+0002172063 00000 n
+0002465802 00000 n
+0002175738 00000 n
+0002174925 00000 n
+0002172214 00000 n
+0002175048 00000 n
+0002175111 00000 n
+0002175174 00000 n
+0002175237 00000 n
+0002175299 00000 n
+0002175362 00000 n
+0002175425 00000 n
+0002175488 00000 n
+0002175551 00000 n
+0002175613 00000 n
+0002175676 00000 n
+0002179526 00000 n
+0002179151 00000 n
+0002175953 00000 n
+0002179274 00000 n
+0002179337 00000 n
+0002179400 00000 n
+0002179463 00000 n
+0002182996 00000 n
+0002182117 00000 n
+0002179642 00000 n
+0002182430 00000 n
+0002182682 00000 n
+0002182808 00000 n
+0002182934 00000 n
+0002182261 00000 n
+0002186667 00000 n
+0002185911 00000 n
+0002183112 00000 n
+0002186227 00000 n
+0002186353 00000 n
+0002186055 00000 n
+0002186478 00000 n
+0002186604 00000 n
+0002191286 00000 n
+0002189753 00000 n
+0002186797 00000 n
+0002190845 00000 n
+0002190971 00000 n
+0002191097 00000 n
+0002189933 00000 n
+0002190124 00000 n
+0002190315 00000 n
+0002191223 00000 n
+0002190506 00000 n
+0002190671 00000 n
+0002194821 00000 n
+0002194316 00000 n
+0002191430 00000 n
+0002194632 00000 n
+0002194758 00000 n
+0002194460 00000 n
+0002465927 00000 n
+0002198654 00000 n
+0002197425 00000 n
+0002194965 00000 n
+0002198087 00000 n
+0002198339 00000 n
+0002197587 00000 n
+0002197762 00000 n
+0002198465 00000 n
+0002197934 00000 n
+0002198591 00000 n
+0002201978 00000 n
+0002201666 00000 n
+0002198756 00000 n
+0002201789 00000 n
+0002201915 00000 n
+0002203814 00000 n
+0002203376 00000 n
+0002202108 00000 n
+0002203499 00000 n
+0002203625 00000 n
+0002203751 00000 n
+0002204480 00000 n
+0002204232 00000 n
+0002203930 00000 n
+0002204355 00000 n
+0002208492 00000 n
+0002206734 00000 n
+0002204568 00000 n
+0002207610 00000 n
+0002207673 00000 n
+0002206905 00000 n
+0002207925 00000 n
+0002208051 00000 n
+0002207071 00000 n
+0002207251 00000 n
+0002208177 00000 n
+0002208303 00000 n
+0002207430 00000 n
+0002208429 00000 n
+0002213292 00000 n
+0002211335 00000 n
+0002208594 00000 n
+0002212790 00000 n
+0002211533 00000 n
+0002211704 00000 n
+0002212853 00000 n
+0002212916 00000 n
+0002212979 00000 n
+0002213041 00000 n
+0002213104 00000 n
+0002213230 00000 n
+0002211874 00000 n
+0002212059 00000 n
+0002212243 00000 n
+0002212431 00000 n
+0002212618 00000 n
+0002466052 00000 n
+0002215639 00000 n
+0002215201 00000 n
+0002213422 00000 n
+0002215324 00000 n
+0002215450 00000 n
+0002215576 00000 n
+0002217940 00000 n
+0002217503 00000 n
+0002215755 00000 n
+0002217626 00000 n
+0002217752 00000 n
+0002217878 00000 n
+0002220799 00000 n
+0002220236 00000 n
+0002218070 00000 n
+0002220359 00000 n
+0002220485 00000 n
+0002220611 00000 n
+0002220737 00000 n
+0002223076 00000 n
+0002222890 00000 n
+0002220986 00000 n
+0002223013 00000 n
+0002224724 00000 n
+0002224412 00000 n
+0002223263 00000 n
+0002224535 00000 n
+0002224661 00000 n
+0002228134 00000 n
+0002227257 00000 n
+0002224911 00000 n
+0002227568 00000 n
+0002227820 00000 n
+0002227946 00000 n
+0002227401 00000 n
+0002228071 00000 n
+0002466177 00000 n
+0002229647 00000 n
+0002229461 00000 n
+0002228222 00000 n
+0002229584 00000 n
+0002232372 00000 n
+0002231557 00000 n
+0002229749 00000 n
+0002231680 00000 n
+0002231806 00000 n
+0002231932 00000 n
+0002232058 00000 n
+0002232184 00000 n
+0002232310 00000 n
+0002233910 00000 n
+0002233598 00000 n
+0002232488 00000 n
+0002233721 00000 n
+0002238068 00000 n
+0002236399 00000 n
+0002234012 00000 n
+0002237502 00000 n
+0002237754 00000 n
+0002236579 00000 n
+0002236750 00000 n
+0002236939 00000 n
+0002237123 00000 n
+0002237315 00000 n
+0002237879 00000 n
+0002238005 00000 n
+0002241981 00000 n
+0002241125 00000 n
+0002238184 00000 n
+0002241667 00000 n
+0002241793 00000 n
+0002241278 00000 n
+0002241477 00000 n
+0002241919 00000 n
+0002245799 00000 n
+0002244859 00000 n
+0002242111 00000 n
+0002244982 00000 n
+0002245108 00000 n
+0002245234 00000 n
+0002245358 00000 n
+0002245484 00000 n
+0002245610 00000 n
+0002245736 00000 n
+0002466302 00000 n
+0002249489 00000 n
+0002248799 00000 n
+0002245915 00000 n
+0002248922 00000 n
+0002249048 00000 n
+0002249174 00000 n
+0002249300 00000 n
+0002249426 00000 n
+0002252219 00000 n
+0002251554 00000 n
+0002249605 00000 n
+0002251903 00000 n
+0002251966 00000 n
+0002252030 00000 n
+0002252156 00000 n
+0002251698 00000 n
+0002255375 00000 n
+0002254812 00000 n
+0002252420 00000 n
+0002254935 00000 n
+0002255187 00000 n
+0002255312 00000 n
+0002258804 00000 n
+0002258114 00000 n
+0002255463 00000 n
+0002258237 00000 n
+0002258363 00000 n
+0002258489 00000 n
+0002258615 00000 n
+0002258741 00000 n
+0002262624 00000 n
+0002261633 00000 n
+0002258906 00000 n
+0002261934 00000 n
+0002262060 00000 n
+0002262186 00000 n
+0002262312 00000 n
+0002261777 00000 n
+0002262436 00000 n
+0002262562 00000 n
+0002264028 00000 n
+0002263842 00000 n
+0002262726 00000 n
+0002263965 00000 n
+0002466427 00000 n
+0002265047 00000 n
+0002264609 00000 n
+0002264130 00000 n
+0002264732 00000 n
+0002264984 00000 n
+0002272087 00000 n
+0002267394 00000 n
+0002265135 00000 n
+0002271772 00000 n
+0002272024 00000 n
+0002267718 00000 n
+0002267905 00000 n
+0002268099 00000 n
+0002268270 00000 n
+0002268469 00000 n
+0002268664 00000 n
+0002268852 00000 n
+0002269044 00000 n
+0002269239 00000 n
+0002269424 00000 n
+0002269617 00000 n
+0002269812 00000 n
+0002270011 00000 n
+0002270210 00000 n
+0002270396 00000 n
+0002270605 00000 n
+0002270798 00000 n
+0002270991 00000 n
+0002271186 00000 n
+0002271375 00000 n
+0002271582 00000 n
+0002274762 00000 n
+0002273157 00000 n
+0002272203 00000 n
+0002274573 00000 n
+0002273346 00000 n
+0002273521 00000 n
+0002273731 00000 n
+0002274699 00000 n
+0002273941 00000 n
+0002274151 00000 n
+0002274362 00000 n
+0002274892 00000 n
+0002288552 00000 n
+0002288901 00000 n
+0002292113 00000 n
+0002292144 00000 n
+0002296318 00000 n
+0002296363 00000 n
+0002305513 00000 n
+0002308046 00000 n
+0002310337 00000 n
+0002316917 00000 n
+0002329339 00000 n
+0002329756 00000 n
+0002343858 00000 n
+0002360199 00000 n
+0002360607 00000 n
+0002381460 00000 n
+0002392105 00000 n
+0002394603 00000 n
+0002394634 00000 n
+0002398472 00000 n
+0002398693 00000 n
+0002417130 00000 n
+0002436944 00000 n
+0002441409 00000 n
+0002456882 00000 n
+0002466534 00000 n
+0002466660 00000 n
+0002466786 00000 n
+0002466912 00000 n
+0002467038 00000 n
+0002467164 00000 n
+0002467290 00000 n
+0002467416 00000 n
+0002467542 00000 n
+0002467668 00000 n
+0002467794 00000 n
+0002467920 00000 n
+0002468046 00000 n
+0002468136 00000 n
+0002468263 00000 n
+0002468390 00000 n
+0002468471 00000 n
+0002468554 00000 n
+0002542030 00000 n
+0002595929 00000 n
+0002595970 00000 n
+0002596010 00000 n
+0002596242 00000 n
trailer
<<
-/Size 6741
-/Root 6739 0 R
-/Info 6740 0 R
+/Size 7261
+/Root 7259 0 R
+/Info 7260 0 R
>>
startxref
-2242580
+2596398
%%EOF
diff --git a/docs/faq/samba-faq.html b/docs/faq/samba-faq.html
index df6205c1389..9912a4982e0 100644
--- a/docs/faq/samba-faq.html
+++ b/docs/faq/samba-faq.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Samba FAQ</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="next" href="FAQ-general.html" title="Chapter1.General Information"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Samba FAQ</th></tr><tr><td width="20%" align="left"></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-general.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-FAQ"></a>Samba FAQ</h1></div><div><div class="author"><h3 class="author"><span class="surname">Samba Team</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div><hr></div><div class="dedication" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2881437"></a>Dedication</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Samba FAQ</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-faq.html" title="Samba FAQ"><link rel="next" href="FAQ-general.html" title="Chapter1.General Information"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Samba FAQ</th></tr><tr><td width="20%" align="left"></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="FAQ-general.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-FAQ"></a>Samba FAQ</h1></div><div><div class="author"><h3 class="author"><span class="surname">Samba Team</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div><hr></div><div class="dedication" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2882410"></a>Dedication</h2></div></div><div></div></div><p>
This is the Frequently Asked Questions (FAQ) document for
Samba, the free and very popular SMB server product. An SMB server
allows file and printer connections from clients such as Windows,
@@ -8,4 +7,4 @@ corrections to the samba documentation mailinglist at
<a href="mailto:samba-doc@samba.org" target="_top">samba-doc@samba.org</a>.
This FAQ was based on the old Samba FAQ by Dan Shearer and Paul Blackman,
and the old samba text documents which were mostly written by John Terpstra.
-</p></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="FAQ-general.html">General Information</a></dt><dd><dl><dt><a href="FAQ-general.html#id2815526">What do the version numbers mean?</a></dt><dt><a href="FAQ-general.html#id2815894">What platforms are supported?</a></dt><dt><a href="FAQ-general.html#id2816167">How do I subscribe to the Samba Mailing Lists?</a></dt></dl></dd><dt>2. <a href="FAQ-Install.html">Compiling and installing Samba on a Unix host</a></dt><dd><dl><dt><a href="FAQ-Install.html#id2816194">My client reports &quot;cannot locate specified share name&quot; or similar</a></dt><dt><a href="FAQ-Install.html#id2816881">Why are my file's timestamps off by an hour, or by a few hours?</a></dt></dl></dd><dt>3. <a href="FAQ-ClientApp.html">Specific client application problems</a></dt><dd><dl><dt><a href="FAQ-ClientApp.html#id2816576">MS Office Setup reports &quot;Cannot change properties of '\\MSOFFICE\\SETUP.INI'&quot;</a></dt><dt><a href="FAQ-ClientApp.html#id2815108">How to use a Samba share as an administrative share for MS Office, etc.</a></dt><dt><a href="FAQ-ClientApp.html#id2816253">Microsoft Access database opening errors</a></dt></dl></dd><dt>4. <a href="FAQ-errors.html">Common errors</a></dt><dd><dl><dt><a href="FAQ-errors.html#id2815002">Not listening for calling name</a></dt><dt><a href="FAQ-errors.html#id2816347">System Error 1240</a></dt><dt><a href="FAQ-errors.html#id2816385">smbclient ignores -N !</a></dt><dt><a href="FAQ-errors.html#id2816438">The data on the CD-Drive I've shared seems to be corrupted!</a></dt></dl></dd><dt>5. <a href="FAQ-features.html">Features</a></dt><dd><dl><dt><a href="FAQ-features.html#id2816464">How can I use samba as a fax server?</a></dt><dd><dl><dt><a href="FAQ-features.html#id2814278">Tools for printing faxes</a></dt><dt><a href="FAQ-features.html#id2814327">Making the fax-server</a></dt><dt><a href="FAQ-features.html#id2814420">Installing the client drivers</a></dt><dt><a href="FAQ-features.html#id2814505">Example smb.conf</a></dt></dl></dd><dt><a href="FAQ-features.html#id2814704">Samba doesn't work well together with DHCP!</a></dt><dt><a href="FAQ-features.html#id2814830">How can I assign NetBIOS names to clients with DHCP?</a></dt><dt><a href="FAQ-features.html#id2814877">How do I convert between unix and dos text formats?</a></dt><dt><a href="FAQ-features.html#id2814906">Does samba have wins replication support?</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"></td><td width="20%" align="center"></td><td width="40%" align="right"><a accesskey="n" href="FAQ-general.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top"></td><td width="20%" align="center"></td><td width="40%" align="right" valign="top">Chapter1.General Information</td></tr></table></div></body></html>
+</p></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="FAQ-general.html">General Information</a></dt><dd><dl><dt><a href="FAQ-general.html#id2868480">What do the version numbers mean?</a></dt><dt><a href="FAQ-general.html#id2814037">What platforms are supported?</a></dt><dt><a href="FAQ-general.html#id2814530">How do I subscribe to the Samba Mailing Lists?</a></dt></dl></dd><dt>2. <a href="FAQ-Install.html">Compiling and installing Samba on a Unix host</a></dt><dd><dl><dt><a href="FAQ-Install.html#id2815348">My client reports &quot;cannot locate specified share name&quot; or similar</a></dt><dt><a href="FAQ-Install.html#id2815254">Why are my file's timestamps off by an hour, or by a few hours?</a></dt></dl></dd><dt>3. <a href="FAQ-ClientApp.html">Specific client application problems</a></dt><dd><dl><dt><a href="FAQ-ClientApp.html#id2817040">MS Office Setup reports &quot;Cannot change properties of '\\MSOFFICE\\SETUP.INI'&quot;</a></dt><dt><a href="FAQ-ClientApp.html#id2817072">How to use a Samba share as an administrative share for MS Office, etc.</a></dt><dt><a href="FAQ-ClientApp.html#id2882489">Microsoft Access database opening errors</a></dt></dl></dd><dt>4. <a href="FAQ-errors.html">Common errors</a></dt><dd><dl><dt><a href="FAQ-errors.html#id2817005">Not listening for calling name</a></dt><dt><a href="FAQ-errors.html#id2816337">System Error 1240</a></dt><dt><a href="FAQ-errors.html#id2816376">smbclient ignores -N !</a></dt><dt><a href="FAQ-errors.html#id2816431">The data on the CD-Drive I've shared seems to be corrupted!</a></dt></dl></dd><dt>5. <a href="FAQ-features.html">Features</a></dt><dd><dl><dt><a href="FAQ-features.html#id2816716">How can I use samba as a fax server?</a></dt><dd><dl><dt><a href="FAQ-features.html#id2816664">Tools for printing faxes</a></dt><dt><a href="FAQ-features.html#id2883185">Making the fax-server</a></dt><dt><a href="FAQ-features.html#id2883278">Installing the client drivers</a></dt><dt><a href="FAQ-features.html#id2883362">Example smb.conf</a></dt></dl></dd><dt><a href="FAQ-features.html#id2883387">Samba doesn't work well together with DHCP!</a></dt><dt><a href="FAQ-features.html#id2883513">How can I assign NetBIOS names to clients with DHCP?</a></dt><dt><a href="FAQ-features.html#id2883561">How do I convert between unix and dos text formats?</a></dt><dt><a href="FAQ-features.html#id2883589">Does samba have wins replication support?</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"></td><td width="20%" align="center"></td><td width="40%" align="right"><a accesskey="n" href="FAQ-general.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top"></td><td width="20%" align="center"></td><td width="40%" align="right" valign="top">Chapter1.General Information</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/AccessControls.html b/docs/htmldocs/AccessControls.html
index 3b89cb22d05..7330836f361 100644
--- a/docs/htmldocs/AccessControls.html
+++ b/docs/htmldocs/AccessControls.html
@@ -1,24 +1,20 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter13.File, Directory and Share Access Controls</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="groupmapping.html" title="Chapter12.Mapping MS Windows and Unix Groups"><link rel="next" href="locking.html" title="Chapter14.File and Record Locking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter13.File, Directory and Share Access Controls</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="groupmapping.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="locking.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AccessControls"></a>Chapter13.File, Directory and Share Access Controls</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 10, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="AccessControls.html#id2920239">Features and Benefits</a></dt><dt><a href="AccessControls.html#id2920364">File System Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920382">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="AccessControls.html#id2917299">Managing Directories</a></dt><dt><a href="AccessControls.html#id2917394">File and Directory Access Control</a></dt></dl></dd><dt><a href="AccessControls.html#id2917800">Share Definition Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2917828">User and Group Based Controls</a></dt><dt><a href="AccessControls.html#id2918100">File and Directory Permissions Based Controls</a></dt><dt><a href="AccessControls.html#id2918346">Miscellaneous Controls</a></dt></dl></dd><dt><a href="AccessControls.html#id2922930">Access Controls on Shares</a></dt><dd><dl><dt><a href="AccessControls.html#id2923002">Share Permissions Management</a></dt></dl></dd><dt><a href="AccessControls.html#id2923301">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="AccessControls.html#id2923309">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="AccessControls.html#id2923347">Viewing File Security on a Samba Share</a></dt><dt><a href="AccessControls.html#id2923426">Viewing file ownership</a></dt><dt><a href="AccessControls.html#id2923548">Viewing File or Directory Permissions</a></dt><dt><a href="AccessControls.html#id2923776">Modifying file or directory permissions</a></dt><dt><a href="AccessControls.html#id2923928">Interaction with the standard Samba create mask
- parameters</a></dt><dt><a href="AccessControls.html#id2924258">Interaction with the standard Samba file attribute
- mapping</a></dt></dl></dd><dt><a href="AccessControls.html#id2924333">Common Errors</a></dt><dd><dl><dt><a href="AccessControls.html#id2924347">Users can not write to a public share</a></dt><dt><a href="AccessControls.html#id2924726">I have set force user and Samba still makes root the owner of all the files
- I touch!</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter13.File, Directory and Share Access Controls</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="groupmapping.html" title="Chapter12.Mapping MS Windows and UNIX Groups"><link rel="next" href="locking.html" title="Chapter14.File and Record Locking"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter13.File, Directory and Share Access Controls</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="groupmapping.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="locking.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AccessControls"></a>Chapter13.File, Directory and Share Access Controls</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><span class="contrib">drawing</span><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 10, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="AccessControls.html#id2904266">Features and Benefits</a></dt><dt><a href="AccessControls.html#id2904395">File System Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2904431">MS Windows NTFS Comparison with UNIX File Systems</a></dt><dt><a href="AccessControls.html#id2904735">Managing Directories</a></dt><dt><a href="AccessControls.html#id2904829">File and Directory Access Control</a></dt></dl></dd><dt><a href="AccessControls.html#id2905040">Share Definition Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2905070">User and Group Based Controls</a></dt><dt><a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a></dt><dt><a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt></dl></dd><dt><a href="AccessControls.html#id2906251">Access Controls on Shares</a></dt><dd><dl><dt><a href="AccessControls.html#id2906323">Share Permissions Management</a></dt></dl></dd><dt><a href="AccessControls.html#id2906623">MS Windows Access Control Lists and UNIX Interoperability</a></dt><dd><dl><dt><a href="AccessControls.html#id2906631">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="AccessControls.html#id2906675">Viewing File Security on a Samba Share</a></dt><dt><a href="AccessControls.html#id2906755">Viewing file ownership</a></dt><dt><a href="AccessControls.html#id2906887">Viewing File or Directory Permissions</a></dt><dt><a href="AccessControls.html#id2907132">Modifying file or directory permissions</a></dt><dt><a href="AccessControls.html#id2907296">Interaction with the standard Samba create mask
+ parameters</a></dt><dt><a href="AccessControls.html#id2907693">Interaction with the standard Samba file attribute mapping</a></dt></dl></dd><dt><a href="AccessControls.html#id2907788">Common Errors</a></dt><dd><dl><dt><a href="AccessControls.html#id2907802">Users can not write to a public share</a></dt><dt><a href="AccessControls.html#id2908232">I have set force user but Samba still makes root the owner of all the files I touch!</a></dt><dt><a href="AccessControls.html#id2908284">MS Word with Samba changes owner of file</a></dt></dl></dd></dl></div><a class="indexterm" name="id2904188"></a><p>
Advanced MS Windows users are frequently perplexed when file, directory and share manipulation of
resources shared via Samba do not behave in the manner they might expect. MS Windows network
-administrators are often confused regarding network access controls and what is the best way to
-provide users with the type of access they need while protecting resources from the consequences
-of untoward access capabilities.
+administrators are often confused regarding network access controls and how to
+provide users with the access they need while protecting resources from unauthorised access.
</p><p>
-Unix administrators frequently are not familiar with the MS Windows environment and in particular
+Many UNIX administrators are unfamiliar with the MS Windows environment and in particular
have difficulty in visualizing what the MS Windows user wishes to achieve in attempts to set file
and directory access permissions.
</p><p>
The problem lies in the differences in how file and directory permissions and controls work
between the two environments. This difference is one that Samba can not completely hide, even
-though it does try to make the chasm transparent.
-</p><p>
+though it does try to bridge the chasm to a degree.
+</p><a class="indexterm" name="id2904225"></a><p>
POSIX Access Control List technology has been available (along with Extended Attributes)
-for Unix for many years, yet there is little evidence today of any significant use. This
+for UNIX for many years, yet there is little evidence today of any significant use. This
explains to some extent the slow adoption of ACLs into commercial Linux products. MS Windows
administrators are astounded at this given that ACLs were a foundational capability of the now
decade old MS Windows NT operating system.
@@ -27,25 +23,24 @@ The purpose of this chapter is to present each of the points of control that are
Samba-3 in the hope that this will help the network administrator to find the optimum method
for delivering the best environment for MS Windows desktop users.
</p><p>
-This is an opportune point to mention that it should be borne in mind that Samba was created to
-provide a means of interoperability and interchange of data between two operating environments
-that are quite different. It was never the intent to make Unix/Linux like MS Windows NT. Instead
-the purpose was an is to provide a sufficient level of exchange of data between the two environments.
-What is available today extends well beyond early plans and expectations, yet the gap continues to
-shrink.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920239"></a>Features and Benefits</h2></div></div><div></div></div><p>
+This is an opportune point to mention that Samba was created to provide a means of interoperability
+and interchange of data between differing operating environments. Samba has no intent change
+UNIX/Linux into a platform like MS Windows. Instead the purpose was and is to provide a sufficient
+level of exchange of data between the two environments. What is available today extends well
+beyond early plans and expectations, yet the gap continues to shrink.
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2904266"></a>Features and Benefits</h2></div></div><div></div></div><p>
Samba offers a lot of flexibility in file system access management. These are the key access control
facilities present in Samba today:
</p><div class="itemizedlist"><p class="title"><b>Samba Access Control Facilities</b></p><ul type="disc"><li><p>
- <span class="emphasis"><em>Unix File and Directory Permissions</em></span>
+ <span class="emphasis"><em>UNIX File and Directory Permissions</em></span>
</p><p>
- Samba honours and implements Unix file system access controls. Users
+ Samba honours and implements UNIX file system access controls. Users
who access a Samba server will do so as a particular MS Windows user.
This information is passed to the Samba server as part of the logon or
connection setup process. Samba uses this user identity to validate
whether or not the user should be given access to file system resources
(files and directories). This chapter provides an overview for those
- to whom the Unix permissions and controls are a little strange or unknown.
+ to whom the UNIX permissions and controls are a little strange or unknown.
</p></li><li><p>
<span class="emphasis"><em>Samba Share Definitions</em></span>
</p><p>
@@ -64,22 +59,22 @@ shrink.
easiest ways to affect access controls (restrictions) and can often
do so with minimum invasiveness compared with other methods.
</p></li><li><p>
- <span class="emphasis"><em>MS Windows ACLs through Unix POSIX ACLs</em></span>
+ <span class="emphasis"><em>MS Windows ACLs through UNIX POSIX ACLs</em></span>
</p><p>
- The use of POSIX ACLs on Unix/Linux is possible ONLY if the underlying
+ The use of POSIX ACLs on UNIX/Linux is possible ONLY if the underlying
operating system supports them. If not, then this option will not be
- available to you. Current Unix technology platforms have native support
+ available to you. Current UNIX technology platforms have native support
for POSIX ACLs. There are patches for the Linux kernel that provide
this also. Sadly, few Linux platforms ship today with native ACLs and
Extended Attributes enabled. This chapter has pertinent information
for users of platforms that support them.
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920364"></a>File System Access Controls</h2></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2904395"></a>File System Access Controls</h2></div></div><div></div></div><p>
Perhaps the most important recognition to be made is the simple fact that MS Windows NT4 / 200x / XP
-implement a totally divergent file system technology from what is provided in the Unix operating system
+implement a totally divergent file system technology from what is provided in the UNIX operating system
environment. Firstly we should consider what the most significant differences are, then we shall look
at how Samba helps to bridge the differences.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920382"></a>MS Windows NTFS Comparison with Unix File Systems</h3></div></div><div></div></div><p>
- Samba operates on top of the Unix file system. This means it is subject to Unix file system conventions
+</p><a class="indexterm" name="id2904414"></a><a class="indexterm" name="id2904423"></a><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904431"></a>MS Windows NTFS Comparison with UNIX File Systems</h3></div></div><div></div></div><p>
+ Samba operates on top of the UNIX file system. This means it is subject to UNIX file system conventions
and permissions. It also means that if the MS Windows networking environment requires file system
behaviour that differs from unix file system behaviour then somehow Samba is responsible for emulating
that in a transparent and consistent manner.
@@ -89,128 +84,108 @@ at how Samba helps to bridge the differences.
but for the greater part we will stay within the bounds of default behaviour. Those wishing to explore
to depths of control ability should review the <tt class="filename">smb.conf</tt> man page.
</p><div class="variablelist"><p class="title"><b>File System Feature Comparison</b></p><dl><dt><span class="term">Name Space</span></dt><dd><p>
- MS Windows NT4 / 200x/ XP files names may be up to 254 characters long, Unix file names
+ MS Windows NT4 / 200x/ XP files names may be up to 254 characters long, UNIX file names
may be 1023 characters long. In MS Windows file extensions indicate particular file types,
- in Unix this is not so rigorously observed as all names are considered arbitrary.
+ in UNIX this is not so rigorously observed as all names are considered arbitrary.
</p><p>
- What MS Windows calls a Folder, Unix calls a directory,
+ What MS Windows calls a Folder, UNIX calls a directory.
</p></dd><dt><span class="term">Case Sensitivity</span></dt><dd><p>
- MS Windows file names are generally Upper Case if made up of 8.3 (ie: 8 character file name
+ <a class="indexterm" name="id2904517"></a>
+ MS Windows file names are generally upper case if made up of 8.3 (ie: 8 character file name
and 3 character extension. If longer than 8.3 file names are Case Preserving, and Case
Insensitive.
</p><p>
- Unix file and directory names are Case Sensitive and Case Preserving. Samba implements the
- MS Windows file name behaviour, but it does so as a user application. The Unix file system
+ UNIX file and directory names are case sensitive and case preserving. Samba implements the
+ MS Windows file name behaviour, but it does so as a user application. The UNIX file system
provides no mechanism to perform case insensitive file name lookups. MS Windows does this
by default. This means that Samba has to carry the processing overhead to provide features
- that are NOT native to the Unix operating system environment.
+ that are NOT native to the UNIX operating system environment.
</p><p>
- Consider the following, all are unique Unix names but one single MS Windows file name:
+ Consider the following, all are unique UNIX names but one single MS Windows file name:
<tt class="computeroutput">
MYFILE.TXT
MyFile.txt
myfile.txt
</tt>
- So clearly, In an MS Windows file name space these three files CAN NOT co-exist! But in Unix
+ So clearly, In an MS Windows file name space these three files CAN NOT co-exist! But in UNIX
they can. So what should Samba do if all three are present? Answer, the one that is lexically
first will be accessible to MS Windows users, the others are invisible and unaccessible - any
other solution would be suicidal.
</p></dd><dt><span class="term">Directory Separators</span></dt><dd><p>
- MS Windows and DOS uses the back-slash '\' as a directory delimiter, Unix uses the forward-slash '/'
+ MS Windows and DOS uses the back-slash '\' as a directory delimiter, UNIX uses the forward-slash '/'
as it's directory delimiter. This is transparently handled by Samba.
</p></dd><dt><span class="term">Drive Identification</span></dt><dd><p>
MS Windows products support a notion of drive letters, like <b class="command">C:</b> to represent
- disk partitions. Unix has NO concept if separate identifiers for file partitions since each
+ disk partitions. UNIX has NO concept if separate identifiers for file partitions since each
such file system is <tt class="filename">mounted</tt> to become part of the over-all directory tree.
- The Unix directory tree begins at '/', just like the root of a DOS drive is specified like
+ The UNIX directory tree begins at '/', just like the root of a DOS drive is specified like
<b class="command">C:\</b>.
</p></dd><dt><span class="term">File Naming Conventions</span></dt><dd><p>
- MS Windows generally never experiences file names that begin with a '.', while in Unix these
+ MS Windows generally never experiences file names that begin with a '.', while in UNIX these
are commonly found in a user's home directory. Files that begin with a '.' are typically
- either start up files for various Unix applications, or they may be files that contain
+ either start up files for various UNIX applications, or they may be files that contain
start-up configuration data.
</p></dd><dt><span class="term">Links and Short-Cuts</span></dt><dd><p>
+ <a class="indexterm" name="id2904667"></a>
+ <a class="indexterm" name="id2904678"></a>
+ <a class="indexterm" name="id2904689"></a>
+
MS Windows make use of &quot;links and Short-Cuts&quot; that are actually special types of files that will
- redirect an attempt to execute the file to the real location of the file. Unix knows of file and directory
+ redirect an attempt to execute the file to the real location of the file. UNIX knows of file and directory
links, but they are entirely different from what MS Windows users are used to.
</p><p>
- Symbolic links are files in Unix that contain the actual location of the data (file OR directory). An
+ Symbolic links are files in UNIX that contain the actual location of the data (file OR directory). An
operation (like read or write) will operate directly on the file referenced. Symbolic links are also
referred to as 'soft links'. A hard link is something that MS Windows is NOT familiar with. It allows
one physical file to be known simultaneously by more than one file name.
</p></dd></dl></div><p>
There are many other subtle differences that may cause the MS Windows administrator some temporary discomfort
- in the process of becoming familiar with Unix/Linux. These are best left for a text that is dedicated to the
- purpose of Unix/Linux training/education.
- </p></div><div xmlns:ns30="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917299"></a>Managing Directories</h3></div></div><div></div></div><ns30:p>
+ in the process of becoming familiar with UNIX/Linux. These are best left for a text that is dedicated to the
+ purpose of UNIX/Linux training/education.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904735"></a>Managing Directories</h3></div></div><div></div></div><p>
There are three basic operations for managing directories, <b class="command">create, delete, rename</b>.
- </ns30:p><div class="table"><a name="id2917317"></a><p class="title"><b>Table13.1.Managing directories with unix and windows</b></p><table summary="Managing directories with unix and windows" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="center">Action</th><th align="center">MS Windows Command</th><th align="center">Unix Command</th></tr></thead><tbody><tr><td align="center">create</td><td align="center">md folder</td><td align="center">mkdir folder</td></tr><tr><td align="center">delete</td><td align="center">rd folder</td><td align="center">rmdir folder</td></tr><tr><td align="center">rename</td><td align="center">rename oldname newname</td><td align="center">mv oldname newname</td></tr></tbody></table></div><ns30:p>
- </ns30:p></div><div xmlns:ns31="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917394"></a>File and Directory Access Control</h3></div></div><div></div></div><p>
+ </p><div class="table"><a name="id2904754"></a><p class="title"><b>Table13.1.Managing directories with unix and windows</b></p><table summary="Managing directories with unix and windows" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="center">Action</th><th align="center">MS Windows Command</th><th align="center">UNIX Command</th></tr></thead><tbody><tr><td align="center">create</td><td align="center">md folder</td><td align="center">mkdir folder</td></tr><tr><td align="center">delete</td><td align="center">rd folder</td><td align="center">rmdir folder</td></tr><tr><td align="center">rename</td><td align="center">rename oldname newname</td><td align="center">mv oldname newname</td></tr></tbody></table></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904829"></a>File and Directory Access Control</h3></div></div><div></div></div><p>
The network administrator is strongly advised to read foundational training manuals and reference materials
- regarding file and directory permissions maintenance. Much can be achieved with the basic Unix permissions
+ regarding file and directory permissions maintenance. Much can be achieved with the basic UNIX permissions
without having to resort to more complex facilities like POSIX Access Control Lists (ACLs) or Extended
Attributes (EAs).
- </p><ns31:p>
- Unix/Linux file and directory access permissions involves setting three (3) primary sets of data and one (1) control set.
- A Unix file listing looks as follows:-
-
- </ns31:p><pre class="screen">
- <tt class="prompt">jht@frodo:~/stuff&gt; </tt><b class="userinput"><tt>ls -la</tt></b>
- total 632
- drwxr-xr-x 13 jht users 816 2003-05-12 22:56 .
- drwxr-xr-x 37 jht users 3800 2003-05-12 22:29 ..
- d--------- 2 jht users 48 2003-05-12 22:29 muchado00
- d--x--x--x 2 jht users 48 2003-05-12 22:29 muchado01
- dr-xr-xr-x 2 jht users 48 2003-05-12 22:29 muchado02
- drwxrwxrwx 2 jht users 48 2003-05-12 22:29 muchado03
- drw-rw-rw- 2 jht users 48 2003-05-12 22:29 muchado04
- d-w--w--w- 2 jht users 48 2003-05-12 22:29 muchado05
- dr--r--r-- 2 jht users 48 2003-05-12 22:29 muchado06
- drwxrwxrwt 2 jht users 48 2003-05-12 22:29 muchado07
- drwsrwsrwx 2 jht users 48 2003-05-12 22:29 muchado08
- ---------- 1 jht users 1242 2003-05-12 22:31 mydata00.lst
- ---x--x--x 1 jht users 1674 2003-05-12 22:33 mydata01.lst
- --w--w--w- 1 jht users 7754 2003-05-12 22:33 mydata02.lst
- --wx-wx-wx 1 jht users 260179 2003-05-12 22:33 mydata03.lst
- -r--r--r-- 1 jht users 21017 2003-05-12 22:32 mydata04.lst
- -r-xr-xr-x 1 jht users 206339 2003-05-12 22:32 mydata05.lst
- -rw-rw-rw- 1 jht users 41105 2003-05-12 22:32 mydata06.lst
- -rwxrwxrwx 1 jht users 19312 2003-05-12 22:32 mydata07.lst
- <tt class="prompt">jht@frodo:~/stuff&gt;</tt>
- </pre><ns31:p>
- </ns31:p><p>
- The columns above represent (from left to right): permissions, no blocks used, owner, group, size (bytes), access date, access time, file name.
- </p><ns31:p>
- The permissions field is made up of:
+ </p><p>
+ UNIX/Linux file and directory access permissions involves setting three (3) primary sets of data and one (1) control set.
+ A UNIX file listing looks as follows:-
- </ns31:p><pre class="programlisting">
- <i><span class="comment"> JRV: Put this into a diagram of some sort</span></i>
- [ type ] [ users ] [ group ] [ others ] [File, Directory Permissions]
- [ d | l ] [ r w x ] [ r w x ] [ r w x ]
- | | | | | | | | | | |
- | | | | | | | | | | |-----&gt; Can Execute, List files
- | | | | | | | | | |-------&gt; Can Write, Create files
- | | | | | | | | |---------&gt; Can Read, Read files
- | | | | | | | |---------------&gt; Can Execute, List files
- | | | | | | |-----------------&gt; Can Write, Create files
- | | | | | |-------------------&gt; Can Read, Read files
- | | | | |-------------------------&gt; Can Execute, List files
- | | | |---------------------------&gt; Can Write, Create files
- | | |-----------------------------&gt; Can Read, Read files
- | |-----------------------------------&gt; Is a symbolic Link
- |---------------------------------------&gt; Is a directory
- </pre><ns31:p>
- </ns31:p><ns31:p>
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>ls -la</tt></b>
+total 632
+drwxr-xr-x 13 maryo gnomes 816 2003-05-12 22:56 .
+drwxrwxr-x 37 maryo gnomes 3800 2003-05-12 22:29 ..
+dr-xr-xr-x 2 maryo gnomes 48 2003-05-12 22:29 muchado02
+drwxrwxrwx 2 maryo gnomes 48 2003-05-12 22:29 muchado03
+drw-rw-rw- 2 maryo gnomes 48 2003-05-12 22:29 muchado04
+d-w--w--w- 2 maryo gnomes 48 2003-05-12 22:29 muchado05
+dr--r--r-- 2 maryo gnomes 48 2003-05-12 22:29 muchado06
+drwsrwsrwx 2 maryo gnomes 48 2003-05-12 22:29 muchado08
+---------- 1 maryo gnomes 1242 2003-05-12 22:31 mydata00.lst
+--w--w--w- 1 maryo gnomes 7754 2003-05-12 22:33 mydata02.lst
+-r--r--r-- 1 maryo gnomes 21017 2003-05-12 22:32 mydata04.lst
+-rw-rw-rw- 1 maryo gnomes 41105 2003-05-12 22:32 mydata06.lst
+<tt class="prompt">$ </tt>
+</pre><p>
+ </p><p>
+ The columns above represent (from left to right): permissions, number of hard links to file, owner, group, size (bytes), access date, access time, file name.
+ </p><p>
+ An overview of the permissions field can be found in <a href="AccessControls.html#access1" title="Figure13.1.Overview of unix permissions field">the image below</a>.
+ </p><div class="figure"><a name="access1"></a><p class="title"><b>Figure13.1.Overview of unix permissions field</b></p><div class="mediaobject"><img src="projdoc/imagefiles/access1.png" width="270" alt="Overview of unix permissions field"></div></div><p>
Any bit flag may be unset. An unset bit flag is the equivalent of 'Can NOT' and is represented as a '-' character.
- </ns31:p><div class="example"><a name="id2917721"></a><p class="title"><b>Example13.1.Example File</b></p><pre class="programlisting">
+ </p><div class="example"><a name="id2904965"></a><p class="title"><b>Example13.1.Example File</b></p><pre class="programlisting">
-rwxr-x--- Means: The owner (user) can read, write, execute
the group can read and execute
everyone else can NOT do anything with it
- </pre></div><ns31:p>
+ </pre></div><p>
- </ns31:p><p>
- Additional possibilities in the [type] field are: c = character device, b = block device, p = pipe device, s = Unix Domain Socket.
+ </p><p>
+ Additional possibilities in the [type] field are: c = character device, b = block device, p = pipe device, s = UNIX Domain Socket.
</p><p>
The letters `rwxXst' set permissions for the user, group and others as: read (r), write (w), execute (or access for directories) (x),
execute only if the file is a directory or already has execute permission for some user (X), set user or group ID on execution (s),
@@ -229,101 +204,101 @@ at how Samba helps to bridge the differences.
the (x) execute flags are not set files can not be listed (seen) in the directory by anyone. The group can read files in the
directory but can NOT create new files. NOTE: If files in the directory are set to be readable and writable for the group, then
group members will be able to write to (or delete) them.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2917800"></a>Share Definition Access Controls</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905040"></a>Share Definition Access Controls</h2></div></div><div></div></div><p>
The following parameters in the <tt class="filename">smb.conf</tt> file sections that define a share control or affect access controls.
Before using any of the following options please refer to the man page for <tt class="filename">smb.conf</tt>.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917828"></a>User and Group Based Controls</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905070"></a>User and Group Based Controls</h3></div></div><div></div></div><p>
User and group based controls can prove very useful. In some situations it is distinctly desirable to affect all
- file system operations as if a single user is doing this, the use of the <i class="parameter"><tt>force user</tt></i> and
- <i class="parameter"><tt>force group</tt></i> behaviour will achieve this. In other situations it may be necessary to affect a
+ file system operations as if a single user is doing this, the use of the <a class="indexterm" name="id2905084"></a><i class="parameter"><tt>force user</tt></i> and
+ <a class="indexterm" name="id2905097"></a><i class="parameter"><tt>force group</tt></i> behaviour will achieve this. In other situations it may be necessary to affect a
paranoia level of control to ensure that only particular authorised persons will be able to access a share or
- it's contents, here the use of the <i class="parameter"><tt>valid users</tt></i> or the <i class="parameter"><tt>invalid users</tt></i> may
+ it's contents, here the use of the <a class="indexterm" name="id2905115"></a><i class="parameter"><tt>valid users</tt></i> or the <a class="indexterm" name="id2905129"></a><i class="parameter"><tt>invalid users</tt></i> may
be most useful.
</p><p>
As always, it is highly advisable to use the least difficult to maintain and the least ambiguous method for
controlling access. Remember, that when you leave the scene someone else will need to provide assistance and
if that person finds too great a mess, or if they do not understand what you have done then there is risk of
Samba being removed and an alternative solution being adopted.
- </p><div class="table"><a name="id2917887"></a><p class="title"><b>Table13.2.User and Group Based Controls</b></p><table summary="User and Group Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>admin users</td><td><p>
+ </p><div class="table"><a name="id2905157"></a><p class="title"><b>Table13.2.User and Group Based Controls</b></p><table summary="User and Group Based Controls" border="1"><colgroup><col align="left"><col align="justify"></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td align="left"><a class="indexterm" name="id2905214"></a><i class="parameter"><tt>admin users</tt></i></td><td align="justify"><p>
List of users who will be granted administrative privileges on the share.
They will do all file operations as the super-user (root).
Any user in this list will be able to do anything they like on the share,
irrespective of file permissions.
- </p></td></tr><tr><td>force group</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905244"></a><i class="parameter"><tt>force group</tt></i></td><td align="justify"><p>
Specifies a UNIX group name that will be assigned as the default primary group
for all users connecting to this service.
- </p></td></tr><tr><td>force user</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905271"></a><i class="parameter"><tt>force user</tt></i></td><td align="justify"><p>
Specifies a UNIX user name that will be assigned as the default user for all users connecting to this service.
This is useful for sharing files. Incorrect use can cause security problems.
- </p></td></tr><tr><td>guest ok</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905299"></a><i class="parameter"><tt>guest ok</tt></i></td><td align="justify"><p>
If this parameter is set for a service, then no password is required to connect to the service. Privileges will be
those of the guest account.
- </p></td></tr><tr><td>invalid users</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905326"></a><i class="parameter"><tt>invalid users</tt></i></td><td align="justify"><p>
List of users that should not be allowed to login to this service.
- </p></td></tr><tr><td>only user</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905353"></a><i class="parameter"><tt>only user</tt></i></td><td align="justify"><p>
Controls whether connections with usernames not in the user list will be allowed.
- </p></td></tr><tr><td>read list</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905379"></a><i class="parameter"><tt>read list</tt></i></td><td align="justify"><p>
List of users that are given read-only access to a service. Users in this list
will not be given write access, no matter what the read only option is set to.
- </p></td></tr><tr><td>username</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905406"></a><i class="parameter"><tt>username</tt></i></td><td align="justify"><p>
Refer to the <tt class="filename">smb.conf</tt> man page for more information - this is a complex and potentially misused parameter.
- </p></td></tr><tr><td>valid users</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905440"></a><i class="parameter"><tt>valid users</tt></i></td><td align="justify"><p>
List of users that should be allowed to login to this service.
- </p></td></tr><tr><td>write list</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905466"></a><i class="parameter"><tt>write list</tt></i></td><td align="justify"><p>
List of users that are given read-write access to a service.
- </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918100"></a>File and Directory Permissions Based Controls</h3></div></div><div></div></div><p>
+ </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905491"></a>File and Directory Permissions Based Controls</h3></div></div><div></div></div><p>
The following file and directory permission based controls, if misused, can result in considerable difficulty to
diagnose the cause of mis-configuration. Use them sparingly and carefully. By gradually introducing each one by one
undesirable side-effects may be detected. In the event of a problem, always comment all of them out and then gradually
re-introduce them in a controlled fashion.
- </p><div class="table"><a name="id2918120"></a><p class="title"><b>Table13.3.File and Directory Permission Based Controls</b></p><table summary="File and Directory Permission Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>create mask</td><td><p>
+ </p><div class="table"><a name="id2905512"></a><p class="title"><b>Table13.3.File and Directory Permission Based Controls</b></p><table summary="File and Directory Permission Based Controls" border="1"><colgroup><col align="left"><col align="justify"></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td align="left"><a class="indexterm" name="id2905567"></a><i class="parameter"><tt>create mask</tt></i></td><td align="justify"><p>
Refer to the <tt class="filename">smb.conf</tt> man page.
- </p></td></tr><tr><td>directory mask</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905599"></a><i class="parameter"><tt>directory mask</tt></i></td><td align="justify"><p>
The octal modes used when converting DOS modes to UNIX modes when creating UNIX directories.
See also: directory security mask.
- </p></td></tr><tr><td>dos filemode</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905626"></a><i class="parameter"><tt>dos filemode</tt></i></td><td align="justify"><p>
Enabling this parameter allows a user who has write access to the file to modify the permissions on it.
- </p></td></tr><tr><td>force create mode</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905652"></a><i class="parameter"><tt>force create mode</tt></i></td><td align="justify"><p>
This parameter specifies a set of UNIX mode bit permissions that will always be set on a file created by Samba.
- </p></td></tr><tr><td>force directory mode</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905680"></a><i class="parameter"><tt>force directory mode</tt></i></td><td align="justify"><p>
This parameter specifies a set of UNIX mode bit permissions that will always be set on a directory created by Samba.
- </p></td></tr><tr><td>force directory security mode</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905708"></a><i class="parameter"><tt>force directory security mode</tt></i></td><td align="justify"><p>
Controls UNIX permission bits modified when a Windows NT client is manipulating UNIX permissions on a directory
- </p></td></tr><tr><td>force security mode</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905736"></a><i class="parameter"><tt>force security mode</tt></i></td><td align="justify"><p>
Controls UNIX permission bits modified when a Windows NT client manipulates UNIX permissions.
- </p></td></tr><tr><td>hide unreadable</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905762"></a><i class="parameter"><tt>hide unreadable</tt></i></td><td align="justify"><p>
Prevents clients from seeing the existence of files that cannot be read.
- </p></td></tr><tr><td>hide unwriteable files</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905789"></a><i class="parameter"><tt>hide unwriteable files</tt></i></td><td align="justify"><p>
Prevents clients from seeing the existence of files that cannot be written to. Unwriteable directories are shown as usual.
- </p></td></tr><tr><td>nt acl support</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905817"></a><i class="parameter"><tt>nt acl support</tt></i></td><td align="justify"><p>
This parameter controls whether smbd will attempt to map UNIX permissions into Windows NT access control lists.
- </p></td></tr><tr><td>security mask</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2905844"></a><i class="parameter"><tt>security mask</tt></i></td><td align="justify"><p>
Controls UNIX permission bits modified when a Windows NT client is manipulating the UNIX permissions on a file.
- </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918346"></a>Miscellaneous Controls</h3></div></div><div></div></div><p>
- The following are documented because of the prevalence of administrators creating inadvertant barriers to file
+ </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905871"></a>Miscellaneous Controls</h3></div></div><div></div></div><p>
+ The following are documented because of the prevalence of administrators creating inadvertent barriers to file
access by not understanding the full implications of <tt class="filename">smb.conf</tt> file settings.
- </p><div class="table"><a name="id2918367"></a><p class="title"><b>Table13.4.Other Controls</b></p><table summary="Other Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>case sensitive, default case, short preserve case</td><td><p>
+ </p><div class="table"><a name="id2905893"></a><p class="title"><b>Table13.4.Other Controls</b></p><table summary="Other Controls" border="1"><colgroup><col align="justify"><col align="justify"></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td align="justify"><a class="indexterm" name="id2905948"></a><i class="parameter"><tt>case sensitive</tt></i>, <a class="indexterm" name="id2905962"></a><i class="parameter"><tt>default case</tt></i>, <a class="indexterm" name="id2905976"></a><i class="parameter"><tt>short preserve case</tt></i></td><td align="justify"><p>
This means that all file name lookup will be done in a case sensitive manner.
Files will be created with the precise filename Samba received from the MS Windows client.
- </p></td></tr><tr><td>csc policy</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2906004"></a><i class="parameter"><tt>csc policy</tt></i></td><td align="justify"><p>
Client Side Caching Policy - parallels MS Windows client side file caching capabilities.
- </p></td></tr><tr><td>dont descend</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2906031"></a><i class="parameter"><tt>dont descend</tt></i></td><td align="justify"><p>
Allows to specify a comma-delimited list of directories that the server should always show as empty.
- </p></td></tr><tr><td>dos filetime resolution</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2906058"></a><i class="parameter"><tt>dos filetime resolution</tt></i></td><td align="justify"><p>
This option is mainly used as a compatibility option for Visual C++ when used against Samba shares.
- </p></td></tr><tr><td>dos filetimes</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2906085"></a><i class="parameter"><tt>dos filetimes</tt></i></td><td align="justify"><p>
DOS and Windows allows users to change file time stamps if they can write to the file. POSIX semantics prevent this.
This options allows DOS and Windows behaviour.
- </p></td></tr><tr><td>fake oplocks</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2906112"></a><i class="parameter"><tt>fake oplocks</tt></i></td><td align="justify"><p>
Oplocks are the way that SMB clients get permission from a server to locally cache file operations. If a server grants an
oplock then the client is free to assume that it is the only one accessing the file and it will aggressively cache file data.
- </p></td></tr><tr><td>hide dot files, hide files, veto files</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2906143"></a><i class="parameter"><tt>hide dot files</tt></i>, <a class="indexterm" name="id2906157"></a><i class="parameter"><tt>hide files</tt></i>, <a class="indexterm" name="id2906171"></a><i class="parameter"><tt>veto files</tt></i></td><td align="justify"><p>
Note: MS Windows Explorer allows over-ride of files marked as hidden so they will still be visible.
- </p></td></tr><tr><td>read only</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2906196"></a><i class="parameter"><tt>read only</tt></i></td><td align="justify"><p>
If this parameter is yes, then users of a service may not create or modify files in the service's directory.
- </p></td></tr><tr><td>veto files</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2906224"></a><i class="parameter"><tt>veto files</tt></i></td><td align="justify"><p>
List of files and directories that are neither visible nor accessible.
- </p></td></tr></tbody></table></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2922930"></a>Access Controls on Shares</h2></div></div><div></div></div><p>
+ </p></td></tr></tbody></table></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906251"></a>Access Controls on Shares</h2></div></div><div></div></div><p>
This section deals with how to configure Samba per share access control restrictions.
By default, Samba sets no restrictions on the share itself. Restrictions on the share itself
can be set on MS Windows NT4/200x/XP shares. This can be a very effective way to limit who can
@@ -340,9 +315,9 @@ Before using any of the following options please refer to the man page for <tt c
for Samba's tdb files is under <tt class="filename">/usr/local/samba/var</tt>. If the <tt class="filename">tdbdump</tt>
utility has been compiled and installed on your system, then you can examine the contents of this file
by: <b class="userinput"><tt>tdbdump share_info.tdb</tt></b>.
- </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923002"></a>Share Permissions Management</h3></div></div><div></div></div><p>
+ </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906323"></a>Share Permissions Management</h3></div></div><div></div></div><p>
The best tool for the task is platform dependant. Choose the best tool for your environment.
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923015"></a>Windows NT4 Workstation/Server</h4></div></div><div></div></div><p>
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2906336"></a>Windows NT4 Workstation/Server</h4></div></div><div></div></div><p>
The tool you need to use to manage share permissions on a Samba server is the NT Server Manager.
Server Manager is shipped with Windows NT4 Server products but not with Windows NT4 Workstation.
You can obtain the NT Server Manager for MS Windows NT4 Workstation from Microsoft - see details below.
@@ -352,9 +327,9 @@ Before using any of the following options please refer to the man page for <tt c
</p></li><li><p>
Now click on the share that you wish to manage, then click on the <span class="guilabel">Properties</span> tab, next click on
the <span class="guilabel">Permissions</span> tab. Now you can add or change access control settings as you wish.
- </p></li></ol></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923098"></a>Windows 200x/XP</h4></div></div><div></div></div><p>
+ </p></li></ol></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2906419"></a>Windows 200x/XP</h4></div></div><div></div></div><p>
On <span class="application">MS Windows NT4/200x/XP</span> system access control lists on the share itself are set using native
- tools, usually from filemanager. For example, in Windows 200x: right click on the shared folder,
+ tools, usually from file manager. For example, in Windows 200x: right click on the shared folder,
then select <span class="guimenuitem">Sharing</span>, then click on <span class="guilabel">Permissions</span>. The default
Windows NT4/200x permission allows <span class="emphasis"><em>Everyone</em></span> Full Control on the Share.
</p><p>
@@ -381,71 +356,70 @@ Before using any of the following options please refer to the man page for <tt c
then effectively no user will be able to access the share. This is a result of what is known as
ACL precedence. ie: Everyone with <span class="emphasis"><em>no access</em></span> means that MaryK who is part of the group
<tt class="constant">Everyone</tt> will have no access even if this user is given explicit full control access.
- </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923301"></a>MS Windows Access Control Lists and Unix Interoperability</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923309"></a>Managing UNIX permissions Using NT Security Dialogs</h3></div></div><div></div></div><p>Windows NT clients can use their native security settings
- dialog box to view and modify the underlying UNIX permissions.</p><p>Note that this ability is careful not to compromise
- the security of the UNIX host Samba is running on, and
- still obeys all the file permission rules that a Samba
- administrator can set.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
- All access to Unix/Linux system file via Samba is controlled at
- the operating system file access control level. When trying to
- figure out file access problems it is vitally important to identify
- the identity of the Windows user as it is presented by Samba at
- the point of file access. This can best be determined from the
+ </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906623"></a>MS Windows Access Control Lists and UNIX Interoperability</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906631"></a>Managing UNIX permissions Using NT Security Dialogs</h3></div></div><div></div></div><p>
+ Windows NT clients can use their native security settings dialog box to view and modify the
+ underlying UNIX permissions.
+ </p><p>
+ Note that this ability is careful not to compromise the security of the UNIX host Samba is running on, and
+ still obeys all the file permission rules that a Samba administrator can set.
+ </p><p>
+ Samba does not attempt to go beyond POSIX ACLs, so that the various finer-grained access control
+ options provided in Windows are actually ignore.
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ All access to UNIX/Linux system files via Samba is controlled by the operating system file access controls.
+ When trying to figure out file access problems it is vitally important to find the identity of the Windows
+ user as it is presented by Samba at the point of file access. This can best be determined from the
Samba log files.
- </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923347"></a>Viewing File Security on a Samba Share</h3></div></div><div></div></div><p>From an NT4/2000/XP client, single-click with the right
- mouse button on any file or directory in a Samba mounted
- drive letter or UNC path. When the menu pops-up, click
- on the <span class="guilabel">Properties</span> entry at the bottom of
- the menu. This brings up the file properties dialog
- box. Click on the tab <span class="guilabel">Security</span> and you
- will see three buttons, <span class="guibutton">Permissions</span>,
- <span class="guibutton">Auditing</span>, and <span class="guibutton">Ownership</span>.
- The <span class="guibutton">Auditing</span> button will cause either
- an error message <span class="errorname">A requested privilege is not held
- by the client</span> to appear if the user is not the
- NT Administrator, or a dialog which is intended to allow an
- Administrator to add auditing requirements to a file if the
- user is logged on as the NT Administrator. This dialog is
- non-functional with a Samba share at this time, as the only
- useful button, the <span class="guibutton">Add</span> button will not currently
- allow a list of users to be seen.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923426"></a>Viewing file ownership</h3></div></div><div></div></div><p>Clicking on the <span class="guibutton">Ownership</span> button
- brings up a dialog box telling you who owns the given file. The
- owner name will be of the form :</p><p><b class="command">&quot;SERVER\user (Long name)&quot;</b></p><p>Where <i class="replaceable"><tt>SERVER</tt></i> is the NetBIOS name of
- the Samba server, <i class="replaceable"><tt>user</tt></i> is the user name of
- the UNIX user who owns the file, and <i class="replaceable"><tt>(Long name)</tt></i>
- is the descriptive string identifying the user (normally found in the
- GECOS field of the UNIX password database). Click on the
- <span class="guibutton">Close </span> button to remove this dialog.</p><p>If the parameter <i class="parameter"><tt>nt acl support</tt></i>
- is set to <tt class="constant">false</tt> then the file owner will
- be shown as the NT user <tt class="constant">&quot;Everyone&quot;</tt>.</p><p>The <span class="guibutton">Take Ownership</span> button will not allow
- you to change the ownership of this file to yourself (clicking on
- it will display a dialog box complaining that the user you are
- currently logged onto the NT client cannot be found). The reason
- for this is that changing the ownership of a file is a privileged
- operation in UNIX, available only to the <span class="emphasis"><em>root</em></span>
- user. As clicking on this button causes NT to attempt to change
- the ownership of a file to the current user logged into the NT
- client this will not work with Samba at this time.</p><p>There is an NT chown command that will work with Samba
- and allow a user with Administrator privilege connected
- to a Samba server as root to change the ownership of
- files on both a local NTFS filesystem or remote mounted NTFS
- or Samba drive. This is available as part of the <span class="application">Seclib
- </span> NT security library written by Jeremy Allison of
- the Samba Team, available from the main Samba ftp site.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923548"></a>Viewing File or Directory Permissions</h3></div></div><div></div></div><p>The third button is the <span class="guibutton">Permissions</span>
- button. Clicking on this brings up a dialog box that shows both
- the permissions and the UNIX owner of the file or directory.
- The owner is displayed in the form :</p><p><b class="command">&quot;<i class="replaceable"><tt>SERVER</tt></i>\
+ </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906675"></a>Viewing File Security on a Samba Share</h3></div></div><div></div></div><p>
+ From an NT4/2000/XP client, single-click with the right mouse button on any file or directory in a Samba
+ mounted drive letter or UNC path. When the menu pops-up, click on the <span class="guilabel">Properties</span>
+ entry at the bottom of the menu. This brings up the file properties dialog box. Click on the tab
+ <span class="guilabel">Security</span> and you will see three buttons, <span class="guibutton">Permissions</span>,
+ <span class="guibutton">Auditing</span>, and <span class="guibutton">Ownership</span>. The <span class="guibutton">Auditing</span>
+ button will cause either an error message <span class="errorname">A requested privilege is not held by the client</span>
+ to appear if the user is not the NT Administrator, or a dialog which is intended to allow an Administrator
+ to add auditing requirements to a file if the user is logged on as the NT Administrator. This dialog is
+ non-functional with a Samba share at this time, as the only useful button, the <span class="guibutton">Add</span>
+ button will not currently allow a list of users to be seen.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906755"></a>Viewing file ownership</h3></div></div><div></div></div><p>
+ Clicking on the <span class="guibutton">Ownership</span> button brings up a dialog box telling you who owns
+ the given file. The owner name will be of the form:
+ </p><p>
+ <b class="command">&quot;SERVER\user (Long name)&quot;</b>
+ </p><p>
+ Where <i class="replaceable"><tt>SERVER</tt></i> is the NetBIOS name of the Samba server, <i class="replaceable"><tt>user</tt></i>
+ is the user name of the UNIX user who owns the file, and <i class="replaceable"><tt>(Long name)</tt></i> is the
+ descriptive string identifying the user (normally found in the GECOS field of the UNIX password database).
+ Click on the <span class="guibutton">Close </span> button to remove this dialog.
+ </p><p>
+ If the parameter <a class="indexterm" name="id2906818"></a><i class="parameter"><tt>nt acl support</tt></i> is set to <tt class="constant">false</tt>
+ then the file owner will be shown as the NT user <tt class="constant">&quot;Everyone&quot;</tt>.
+ </p><p>
+ The <span class="guibutton">Take Ownership</span> button will not allow you to change the ownership of this file to
+ yourself (clicking on it will display a dialog box complaining that the user you are currently logged onto
+ the NT client cannot be found). The reason for this is that changing the ownership of a file is a privileged
+ operation in UNIX, available only to the <span class="emphasis"><em>root</em></span> user. As clicking on this button causes
+ NT to attempt to change the ownership of a file to the current user logged into the NT client this will
+ not work with Samba at this time.</p><p>
+ There is an NT chown command that will work with Samba and allow a user with Administrator privilege connected
+ to a Samba server as root to change the ownership of files on both a local NTFS filesystem or remote mounted NTFS
+ or Samba drive. This is available as part of the <span class="application">Seclib</span> NT security library written
+ by Jeremy Allison of the Samba-Team, available from the main Samba FTP site.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906887"></a>Viewing File or Directory Permissions</h3></div></div><div></div></div><p>
+ The third button is the <span class="guibutton">Permissions</span> button. Clicking on this brings up a dialog box
+ that shows both the permissions and the UNIX owner of the file or directory. The owner is displayed in the form:
+ </p><p><b class="command">&quot;<i class="replaceable"><tt>SERVER</tt></i>\
<i class="replaceable"><tt>user</tt></i>
- <i class="replaceable"><tt>(Long name)</tt></i>&quot;</b></p><p>Where <i class="replaceable"><tt>SERVER</tt></i> is the NetBIOS name of
- the Samba server, <i class="replaceable"><tt>user</tt></i> is the user name of
- the UNIX user who owns the file, and <i class="replaceable"><tt>(Long name)</tt></i>
- is the descriptive string identifying the user (normally found in the
- GECOS field of the UNIX password database).</p><p>If the parameter <i class="parameter"><tt>nt acl support</tt></i>
- is set to <tt class="constant">false</tt> then the file owner will
- be shown as the NT user <tt class="constant">&quot;Everyone&quot;</tt> and the
- permissions will be shown as NT &quot;Full Control&quot;.</p><p>The permissions field is displayed differently for files
- and directories, so I'll describe the way file permissions
- are displayed first.</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923639"></a>File Permissions</h4></div></div><div></div></div><p>The standard UNIX user/group/world triplet and
+ <i class="replaceable"><tt>(Long name)</tt></i>&quot;</b></p><p>Where <i class="replaceable"><tt>SERVER</tt></i> is the NetBIOS name of the Samba server,
+ <i class="replaceable"><tt>user</tt></i> is the user name of the UNIX user who owns the file, and
+ <i class="replaceable"><tt>(Long name)</tt></i> is the descriptive string identifying the user (normally found in the
+ GECOS field of the UNIX password database).</p><p>
+ If the parameter <a class="indexterm" name="id2906953"></a><i class="parameter"><tt>nt acl support</tt></i> is set to <tt class="constant">false</tt>
+ then the file owner will be shown as the NT user <tt class="constant">&quot;Everyone&quot;</tt> and the permissions will be
+ shown as NT &quot;Full Control&quot;.
+ </p><p>
+ The permissions field is displayed differently for files and directories, so I'll describe the way file permissions
+ are displayed first.
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2906986"></a>File Permissions</h4></div></div><div></div></div><p>The standard UNIX user/group/world triplet and
the corresponding &quot;read&quot;, &quot;write&quot;, &quot;execute&quot; permissions
triplets are mapped by Samba into a three element NT ACL
with the 'r', 'w', and 'x' bits mapped into the corresponding
@@ -460,14 +434,14 @@ Before using any of the following options please refer to the man page for <tt c
&quot;change&quot;</tt> or <tt class="constant">full control</tt> then
usually the permissions will be prefixed by the words <tt class="constant">
&quot;Special Access&quot;</tt> in the NT display list.</p><p>But what happens if the file has no permissions allowed
- for a particular UNIX user group or world component ? In order
+ for a particular UNIX user group or world component? In order
to allow &quot;no permissions&quot; to be seen and modified then Samba
overloads the NT <b class="command">&quot;Take Ownership&quot;</b> ACL attribute
(which has no meaning in UNIX) and reports a component with
no permissions as having the NT <b class="command">&quot;O&quot;</b> bit set.
This was chosen of course to make it look like a zero, meaning
zero permissions. More details on the decision behind this will
- be given below.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2923731"></a>Directory Permissions</h4></div></div><div></div></div><p>Directories on an NT NTFS file system have two
+ be given below.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907088"></a>Directory Permissions</h4></div></div><div></div></div><p>Directories on an NT NTFS file system have two
different sets of permissions. The first set of permissions
is the ACL set on the directory itself, this is usually displayed
in the first set of parentheses in the normal <tt class="constant">&quot;RW&quot;</tt>
@@ -478,12 +452,12 @@ Before using any of the following options please refer to the man page for <tt c
inherited</tt> permissions that any file created within
this directory would inherit.</p><p>Samba synthesises these inherited permissions for NT by
returning as an NT ACL the UNIX permission mode that a new file
- created by Samba on this share would receive.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923776"></a>Modifying file or directory permissions</h3></div></div><div></div></div><p>Modifying file and directory permissions is as simple
+ created by Samba on this share would receive.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907132"></a>Modifying file or directory permissions</h3></div></div><div></div></div><p>Modifying file and directory permissions is as simple
as changing the displayed permissions in the dialog box, and
clicking the <span class="guibutton">OK</span> button. However, there are
limitations that a user needs to be aware of, and also interactions
with the standard Samba permission masks and mapping of DOS
- attributes that need to also be taken into account.</p><p>If the parameter <i class="parameter"><tt>nt acl support</tt></i>
+ attributes that need to also be taken into account.</p><p>If the parameter <a class="indexterm" name="id2907161"></a><i class="parameter"><tt>nt acl support</tt></i>
is set to <tt class="constant">false</tt> then any attempt to set
security permissions will fail with an <span class="errorname">&quot;Access Denied&quot;
</span> message.</p><p>The first thing to note is that the <span class="guibutton">&quot;Add&quot;</span>
@@ -512,59 +486,56 @@ Before using any of the following options please refer to the man page for <tt c
component and click the <span class="guibutton">Remove</span> button,
or set the component to only have the special <tt class="constant">Take
Ownership</tt> permission (displayed as <b class="command">&quot;O&quot;
- </b>) highlighted.</p></div><div xmlns:ns32="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923928"></a>Interaction with the standard Samba create mask
- parameters</h3></div></div><div></div></div><ns32:p>There are four parameters
+ </b>) highlighted.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907296"></a>Interaction with the standard Samba create mask
+ parameters</h3></div></div><div></div></div><p>There are four parameters
to control interaction with the standard Samba create mask parameters.
These are :
- </ns32:p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode</tt></i></td></tr></table><ns32:p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p><a class="indexterm" name="id2907315"></a><i class="parameter"><tt>security mask</tt></i></p></li><li><p><a class="indexterm" name="id2907333"></a><i class="parameter"><tt>force security mode</tt></i></p></li><li><p><a class="indexterm" name="id2907350"></a><i class="parameter"><tt>directory security mask</tt></i></p></li><li><p><a class="indexterm" name="id2907367"></a><i class="parameter"><tt>force directory security mode</tt></i></p></li></ul></div><p>
- </ns32:p><p>Once a user clicks <span class="guibutton">OK</span> to apply the
+ </p><p>Once a user clicks <span class="guibutton">OK</span> to apply the
permissions Samba maps the given permissions into a user/group/world
r/w/x triplet set, and then will check the changed permissions for a
- file against the bits set in the <a href="smb.conf.5.html#SECURITYMASK" target="_top">
- <i class="parameter"><tt>security mask</tt></i></a> parameter. Any bits that
+ file against the bits set in the
+ <a class="indexterm" name="id2907397"></a><i class="parameter"><tt>security mask</tt></i> parameter. Any bits that
were changed that are not set to '1' in this parameter are left alone
- in the file permissions.</p><p>Essentially, zero bits in the <i class="parameter"><tt>security mask</tt></i>
+ in the file permissions.</p><p>Essentially, zero bits in the <a class="indexterm" name="id2907418"></a><i class="parameter"><tt>security mask</tt></i>
mask may be treated as a set of bits the user is <span class="emphasis"><em>not</em></span>
allowed to change, and one bits are those the user is allowed to change.
</p><p>If not set explicitly this parameter is set to the same value as
- the <a href="smb.conf.5.html#CREATEMASK" target="_top"><i class="parameter"><tt>create mask
- </tt></i></a> parameter. To allow a user to modify all the
+ the <a class="indexterm" name="id2907443"></a><i class="parameter"><tt>create mask</tt></i> parameter. To allow a user to modify all the
user/group/world permissions on a file, set this parameter
to 0777.</p><p>Next Samba checks the changed permissions for a file against
- the bits set in the <a href="smb.conf.5.html#FORCESECURITYMODE" target="_top">
- <i class="parameter"><tt>force security mode</tt></i></a> parameter. Any bits
+ the bits set in the
+ <a class="indexterm" name="id2907465"></a><i class="parameter"><tt>force security mode</tt></i> parameter. Any bits
that were changed that correspond to bits set to '1' in this parameter
are forced to be set.</p><p>Essentially, bits set in the <i class="parameter"><tt>force security mode
</tt></i> parameter may be treated as a set of bits that, when
modifying security on a file, the user has always set to be 'on'.</p><p>If not set explicitly this parameter is set to the same value
- as the <a href="smb.conf.5.html#FORCECREATEMODE" target="_top"><i class="parameter"><tt>force
- create mode</tt></i></a> parameter.
+ as the <a class="indexterm" name="id2907500"></a><i class="parameter"><tt>force create mode</tt></i> parameter.
To allow a user to modify all the user/group/world permissions on a file
- with no restrictions set this parameter to 000.</p><p>The <i class="parameter"><tt>security mask</tt></i> and <i class="parameter"><tt>force
+ with no restrictions set this parameter to 000.</p><p>The <a class="indexterm" name="id2907521"></a><i class="parameter"><tt>security mask</tt></i> and <i class="parameter"><tt>force
security mode</tt></i> parameters are applied to the change
request in that order.</p><p>For a directory Samba will perform the same operations as
described above for a file except using the parameter <i class="parameter"><tt>
directory security mask</tt></i> instead of <i class="parameter"><tt>security
mask</tt></i>, and <i class="parameter"><tt>force directory security mode
</tt></i> parameter instead of <i class="parameter"><tt>force security mode
- </tt></i>.</p><p>The <i class="parameter"><tt>directory security mask</tt></i> parameter
+ </tt></i>.</p><p>The <a class="indexterm" name="id2907582"></a><i class="parameter"><tt>directory security mask</tt></i> parameter
by default is set to the same value as the <i class="parameter"><tt>directory mask
</tt></i> parameter and the <i class="parameter"><tt>force directory security
mode</tt></i> parameter by default is set to the same value as
- the <i class="parameter"><tt>force directory mode</tt></i> parameter. </p><p>In this way Samba enforces the permission restrictions that
+ the <a class="indexterm" name="id2907613"></a><i class="parameter"><tt>force directory mode</tt></i> parameter. </p><p>In this way Samba enforces the permission restrictions that
an administrator can set on a Samba share, whilst still allowing users
to modify the permission bits within that restriction.</p><p>If you want to set up a share that allows users full control
in modifying the permission bits on their files and directories and
doesn't force any particular bits to be set 'on', then set the following
parameters in the <tt class="filename">smb.conf</tt> file in that share specific section :
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode = 0</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode = 0</tt></i></td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924258"></a>Interaction with the standard Samba file attribute
- mapping</h3></div></div><div></div></div><p>Samba maps some of the DOS attribute bits (such as &quot;read
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode = 0</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode = 0</tt></i></td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907693"></a>Interaction with the standard Samba file attribute mapping</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Samba maps some of the DOS attribute bits (such as &quot;read
only&quot;) into the UNIX permissions of a file. This means there can
be a conflict between the permission bits set via the security
dialog and the permission bits set by the file attribute mapping.
- </p><p>One way this can show up is if a file has no UNIX read access
+ </p></div><p>One way this can show up is if a file has no UNIX read access
for the owner it will show up as &quot;read only&quot; in the standard
file attributes tabbed dialog. Unfortunately this dialog is
the same one that contains the security info in another tab.</p><p>What this can mean is that if the owner changes the permissions
@@ -576,10 +547,10 @@ Before using any of the following options please refer to the man page for <tt c
permissions and clicking <span class="guibutton">OK</span> to get back to the
attributes dialog you should always hit <span class="guibutton">Cancel</span>
rather than <span class="guibutton">OK</span> to ensure that your changes
- are not overridden.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2924333"></a>Common Errors</h2></div></div><div></div></div><p>
+ are not overridden.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2907788"></a>Common Errors</h2></div></div><div></div></div><p>
File, Directory and Share access problems are very common on the mailing list. The following
are examples taken from the mailing list in recent times.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924347"></a>Users can not write to a public share</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907802"></a>Users can not write to a public share</h3></div></div><div></div></div><p>
&#8220;<span class="quote">
We are facing some troubles with file / directory permissions. I can log on the domain as admin user(root),
and there's a public share, on which everyone needs to have permission to create / modify files, but only
@@ -588,74 +559,83 @@ are examples taken from the mailing list in recent times.
</span>&#8221;
</p><p>
There are many ways to solve this problem, here are a few hints:
- </p><div class="procedure"><p class="title"><b>Procedure13.3.Example Solution:</b></p><ol type="1"><li><p>
+ </p><div class="procedure"><ol type="1"><li><p>
Go to the top of the directory that is shared
- </p></li><li xmlns:ns33=""><ns33:p>
+ </p></li><li><p>
Set the ownership to what ever public owner and group you want
- </ns33:p><pre class="programlisting">
- find 'directory_name' -type d -exec chown user.group {}\;
- find 'directory_name' -type d -exec chmod 6775 'directory_name'
- find 'directory_name' -type f -exec chmod 0775 {} \;
- find 'directory_name' -type f -exec chown user.group {}\;
- </pre><ns33:p>
- </ns33:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><pre class="screen">
+<tt class="prompt">$ </tt>find 'directory_name' -type d -exec chown user.group {}\;
+<tt class="prompt">$ </tt>find 'directory_name' -type d -exec chmod 6775 'directory_name'
+<tt class="prompt">$ </tt>find 'directory_name' -type f -exec chmod 0775 {} \;
+<tt class="prompt">$ </tt>find 'directory_name' -type f -exec chown user.group {}\;
+</pre><p>
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The above will set the 'sticky bit' on all directories. Read your
- Unix/Linux man page on what that does. It causes the OS to assign
+ UNIX/Linux man page on what that does. It causes the OS to assign
to all files created in the directories the ownership of the
directory.
- </p></div></li><li xmlns:ns34=""><ns34:p>
+ </p></div></li><li><p>
Directory is: <i class="replaceable"><tt>/foodbar</tt></i>
- </ns34:p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>chown jack.engr /foodbar</tt></b>
- </pre><ns34:p>
- </ns34:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns34:p>
- </ns34:p><p>This is the same as doing:</p><ns34:p>
- </ns34:p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>chown jack /foodbar</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>chgrp engr /foodbar</tt></b>
- </pre><ns34:p>
- </ns34:p></div></li><li xmlns:ns35=""><ns35:p>Now do:
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>chown jack.engr /foodbar</tt></b>
+</pre><p>
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This is the same as doing:</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>chown jack /foodbar</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>chgrp engr /foodbar</tt></b>
+</pre></div></li><li><p>Now do:
- </ns35:p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>chmod 6775 /foodbar</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>ls -al /foodbar/..</tt></b>
- </pre><ns35:p>
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>chmod 6775 /foodbar</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>ls -al /foodbar/..</tt></b>
+</pre><p>
- </ns35:p><ns35:p>You should see:
- </ns35:p><pre class="screen">
- drwsrwsr-x 2 jack engr 48 2003-02-04 09:55 foodbar
- </pre><ns35:p>
- </ns35:p></li><li xmlns:ns36=""><ns36:p>Now do:
- </ns36:p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>su - jill</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>cd /foodbar</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>touch Afile</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>ls -al</tt></b>
- </pre><ns36:p>
- </ns36:p><ns36:p>
+ </p><p>You should see:
+</p><pre class="screen">
+drwsrwsr-x 2 jack engr 48 2003-02-04 09:55 foodbar
+</pre><p>
+ </p></li><li><p>Now do:
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>su - jill</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>cd /foodbar</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>touch Afile</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>ls -al</tt></b>
+</pre><p>
+ </p><p>
You should see that the file <tt class="filename">Afile</tt> created by Jill will have ownership
and permissions of Jack, as follows:
- </ns36:p><pre class="screen">
- -rw-r--r-- 1 jack engr 0 2003-02-04 09:57 Afile
- </pre><ns36:p>
- </ns36:p></li><li xmlns:ns37=""><ns37:p>
+</p><pre class="screen">
+-rw-r--r-- 1 jack engr 0 2003-02-04 09:57 Afile
+</pre><p>
+ </p></li><li><p>
Now in your <tt class="filename">smb.conf</tt> for the share add:
- </ns37:p><pre class="programlisting">
- force create mode = 0775
- force directory mode = 6775
- </pre><ns37:p>
- </ns37:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>force create mode = 0775</tt></i></td></tr><tr><td><i class="parameter"><tt>force direcrtory mode = 6775</tt></i></td></tr></table><p>
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The above are only needed <span class="emphasis"><em>if</em></span> your users are <span class="emphasis"><em>not</em></span> members of the group
you have used. ie: Within the OS do not have write permission on the directory.
- </p></div><ns37:p>
+ </p></div><p>
An alternative is to set in the <tt class="filename">smb.conf</tt> entry for the share:
- </ns37:p><pre class="programlisting">
- force user = jack
- force group = engr
- </pre><ns37:p>
- </ns37:p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924726"></a>I have set force user and Samba still makes <span class="emphasis"><em>root</em></span> the owner of all the files
- I touch!</h3></div></div><div></div></div><p>
- When you have a user in 'admin users', Samba will always do file operations for
- this user as <span class="emphasis"><em>root</em></span>, even if <i class="parameter"><tt>force user</tt></i> has been set.
- </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="groupmapping.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="locking.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter12.Mapping MS Windows and Unix Groups</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter14.File and Record Locking</td></tr></table></div></body></html>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>force user = jack</tt></i></td></tr><tr><td><i class="parameter"><tt>force group = engr</tt></i></td></tr></table><p>
+ </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908232"></a>I have set force user but Samba still makes <span class="emphasis"><em>root</em></span> the owner of all the files I touch!</h3></div></div><div></div></div><p>
+ When you have a user in <a class="indexterm" name="id2908248"></a><i class="parameter"><tt>admin users</tt></i>, samba will always do file operations for
+ this user as <span class="emphasis"><em>root</em></span>, even if <a class="indexterm" name="id2908268"></a><i class="parameter"><tt>force user</tt></i> has been set.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908284"></a>MS Word with Samba changes owner of file</h3></div></div><div></div></div><p>
+ <span class="emphasis"><em>Question:</em></span> &#8220;<span class="quote">When userB saves a word document that is owned by userA the updated file is now owned by userB.
+ Why is Samba doing this? How do I fix this?</span>&#8221;
+ </p><p>
+ <span class="emphasis"><em>Answer:</em></span> Word does the following when you modify/change a Word document: Word Creates a NEW document with
+ a temporary name, Word then closes the old document and deletes it, Word then renames the new document to the original document name.
+ There is NO mechanism by which Samba CAN IN ANY WAY know that the new document really should be owned by the owners
+ of the original file. Samba has no way of knowing that the file will be renamed by MS Word. As far as Samba is able
+ to tell, the file that gets created is a NEW file, not one that the application (Word) is updating.
+ </p><p>
+ There is a work-around to solve the permissions problem. That work-around involves understanding how you can manage file
+ system behaviour from within the <tt class="filename">smb.conf</tt> file, as well as understanding how Unix file systems work. Set on the directory
+ in which you are changing word documents: <b class="command">chmod g+s 'directory_name'</b> This ensures that all files will
+ be created with the group that owns the directory. In smb.conf share declaration section set:
+ </p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>force create mode = 0660</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory mode = 0770</tt></i></td></tr></table><p>
+ </p><p>
+ These two settings will ensure that all directories and files that get created in the share will be read/writable by the
+ owner and group set on the directory itself.
+ </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="groupmapping.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="locking.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter12.Mapping MS Windows and UNIX Groups</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter14.File and Record Locking</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/AdvancedNetworkManagement.html b/docs/htmldocs/AdvancedNetworkManagement.html
index 7cddecd38c1..1052f45e92c 100644
--- a/docs/htmldocs/AdvancedNetworkManagement.html
+++ b/docs/htmldocs/AdvancedNetworkManagement.html
@@ -1,9 +1,8 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter22.Advanced Network Management</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind"><link rel="next" href="PolicyMgmt.html" title="Chapter23.System and Account Policies"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter22.Advanced Network Management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="winbind.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="PolicyMgmt.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AdvancedNetworkManagement"></a>Chapter22.Advanced Network Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="AdvancedNetworkManagement.html#id2982630">Features and Benefits</a></dt><dt><a href="AdvancedNetworkManagement.html#id2982661">Remote Server Administration</a></dt><dt><a href="AdvancedNetworkManagement.html#id2981342">Remote Desktop Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2981359">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2981560">Network Logon Script Magic</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2981755">Adding printers without user intervention</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2981788">Common Errors</a></dt></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter22.Advanced Network Management</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="winbind.html" title="Chapter21.Winbind: Use of Domain Accounts"><link rel="next" href="PolicyMgmt.html" title="Chapter23.System and Account Policies"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter22.Advanced Network Management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="winbind.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="PolicyMgmt.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AdvancedNetworkManagement"></a>Chapter22.Advanced Network Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="AdvancedNetworkManagement.html#id2943742">Features and Benefits</a></dt><dt><a href="AdvancedNetworkManagement.html#id2943772">Remote Server Administration</a></dt><dt><a href="AdvancedNetworkManagement.html#id2943871">Remote Desktop Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2943888">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2944129">Network Logon Script Magic</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2944368">Adding printers without user intervention</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2944401">Common Errors</a></dt></dl></div><p>
This section documents peripheral issues that are of great importance to network
administrators who want to improve network resource access control, to automate the user
environment, and to make their lives a little easier.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982630"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943742"></a>Features and Benefits</h2></div></div><div></div></div><p>
Often the difference between a working network environment and a well appreciated one can
best be measured by the <span class="emphasis"><em>little things</em></span> that makes everything work more
harmoniously. A key part of every network environment solution is the ability to remotely
@@ -13,7 +12,7 @@ network operations.
</p><p>
This chapter presents information on each of these area. They are placed here, and not in
other chapters, for ease of reference.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982661"></a>Remote Server Administration</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943772"></a>Remote Server Administration</h2></div></div><div></div></div><p>
<span class="emphasis"><em>How do I get 'User Manager' and 'Server Manager'?</em></span>
</p><p>
Since I don't need to buy an <span class="application">NT4 Server</span>, how do I get the 'User Manager for Domains',
@@ -27,17 +26,17 @@ Click here to download the archived file <a href="ftp://ftp.microsoft.com/Softli
The <span class="application">Windows NT 4.0</span> version of the 'User Manager for
Domains' and 'Server Manager' are available from Microsoft via ftp
from <a href="ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE" target="_top">ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE</a>
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2981342"></a>Remote Desktop Management</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943871"></a>Remote Desktop Management</h2></div></div><div></div></div><p>
There are a number of possible remote desktop management solutions that range from free
through costly. Do not let that put you off. Sometimes the most costly solutions is the
most cost effective. In any case, you will need to draw your own conclusions as to which
is the best tool in your network environment.
-</p><div xmlns:ns78="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2981359"></a>Remote Management from NoMachines.Com</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943888"></a>Remote Management from NoMachines.Com</h3></div></div><div></div></div><p>
The following information was posted to the Samba mailing list at Apr 3 23:33:50 GMT 2003.
It is presented in slightly edited form (with author details omitted for privacy reasons).
The entire answer is reproduced below with some comments removed.
- </p><ns78:p>
-</ns78:p><pre class="screen">
+ </p><p>
+</p><pre class="screen">
&gt; I have a wonderful linux/samba server running as PDC for a network.
&gt; Now I would like to add remote desktop capabilities so that
&gt; users outside could login to the system and get their desktop up from
@@ -49,8 +48,8 @@ is the best tool in your network environment.
&gt; even if the computer is in a domain?
&gt;
&gt; Any ideas/experience would be appreciated :)
-</pre><ns78:p>
-</ns78:p><p>
+</pre><p>
+</p><p>
Answer provided: Check out the new offer from NoMachine, &quot;NX&quot; software:
<a href="http://www.nomachine.com/" target="_top">http://www.nomachine.com/</a>.
</p><p>
@@ -120,7 +119,7 @@ is the best tool in your network environment.
NoMachine are encouraging and offering help to OSS/Free Software implementations
for such a frontend too, even if it means competition to them (they have written
to this effect even to the LTSP, KDE and GNOME developer mailing lists)
- </p></li></ul></div></div></div><div xmlns:ns79="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2981560"></a>Network Logon Script Magic</h2></div></div><div></div></div><p>
+ </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944129"></a>Network Logon Script Magic</h2></div></div><div></div></div><p>
This section needs work. Volunteer contributions most welcome. Please send your patches or updates
to <a href="mailto:jht@samba.org" target="_top">John Terpstra</a>.
</p><p>
@@ -132,10 +131,10 @@ See <tt class="filename">examples</tt> directory <tt class="filename">genlogon</
<tt class="filename">ntlogon</tt> subdirectories.
</p><p>
The following listings are from the genlogon directory.
-</p><ns79:p>
+</p><p>
This is the <tt class="filename">genlogon.pl</tt> file:
-</ns79:p><pre class="programlisting">
+</p><pre class="programlisting">
#!/usr/bin/perl
#
# genlogon.pl
@@ -207,19 +206,19 @@ This is the <tt class="filename">genlogon.pl</tt> file:
# All done! Close the output file.
close LOGON;
-</pre><ns79:p>
-</ns79:p><p>
+</pre><p>
+</p><p>
Those wishing to use more elaborate or capable logon processing system should check out the following sites:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="http://www.craigelachie.org/rhacer/ntlogon" target="_top">http://www.craigelachie.org/rhacer/ntlogon</a></td></tr><tr><td><a href="http://www.kixtart.org" target="_top">http://www.kixtart.org</a></td></tr><tr><td><a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.asp?scid=kb;en-us;189105</a></td></tr></table><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2981755"></a>Adding printers without user intervention</h3></div></div><div></div></div><ns79:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="http://www.craigelachie.org/rhacer/ntlogon" target="_top">http://www.craigelachie.org/rhacer/ntlogon</a></td></tr><tr><td><a href="http://www.kixtart.org" target="_top">http://www.kixtart.org</a></td></tr><tr><td><a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.asp?scid=kb;en-us;189105</a></td></tr></table><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944368"></a>Adding printers without user intervention</h3></div></div><div></div></div><p>
Printers may be added automatically during logon script processing through the use of:
-</ns79:p><pre class="programlisting">
+</p><pre class="programlisting">
rundll32 printui.dll,PrintUIEntry /?
-</pre><ns79:p>
+</pre><p>
See the documentation in the <a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">Microsoft knowledgebase article no: 189105</a>.
-</ns79:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2981788"></a>Common Errors</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944401"></a>Common Errors</h2></div></div><div></div></div><p>
The information provided in this chapter has been reproduced from postings on the samba@samba.org
mailing list. No implied endorsement or recommendation is offered. Administrators should conduct
their own evaluation of alternatives and are encouraged to draw their own conclusions.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="winbind.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="PolicyMgmt.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter21.Integrated Logon Support using Winbind</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter23.System and Account Policies</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="winbind.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="PolicyMgmt.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter21.Winbind: Use of Domain Accounts</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter23.System and Account Policies</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/Appendixes.html b/docs/htmldocs/Appendixes.html
index ab96964c134..6d77a0ba65e 100644
--- a/docs/htmldocs/Appendixes.html
+++ b/docs/htmldocs/Appendixes.html
@@ -1,5 +1,3 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartVI.Appendixes</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="bugreport.html" title="Chapter35.Reporting Bugs"><link rel="next" href="compiling.html" title="Chapter36.How to compile SAMBA"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartVI.Appendixes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="bugreport.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="compiling.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Appendixes"></a>Appendixes</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>36. <a href="compiling.html">How to compile SAMBA</a></dt><dd><dl><dt><a href="compiling.html#id3008244">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="compiling.html#id3008251">Introduction</a></dt><dt><a href="compiling.html#id3008280">CVS Access to samba.org</a></dt></dl></dd><dt><a href="compiling.html#id3009749">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="compiling.html#id3009796">Verifying Samba's PGP signature</a></dt><dt><a href="compiling.html#id3009932">Building the Binaries</a></dt><dd><dl><dt><a href="compiling.html#id3010069">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="compiling.html#id3010964">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="compiling.html#id3011056">Starting from inetd.conf</a></dt><dt><a href="compiling.html#id3011260">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="compiling.html#id3011355">Common Errors</a></dt></dl></dd><dt>37. <a href="Portability.html">Portability</a></dt><dd><dl><dt><a href="Portability.html#id3012634">HPUX</a></dt><dt><a href="Portability.html#id3012719">SCO Unix</a></dt><dt><a href="Portability.html#id3012747">DNIX</a></dt><dt><a href="Portability.html#id3012917">RedHat Linux Rembrandt-II</a></dt><dt><a href="Portability.html#id3012960">AIX</a></dt><dd><dl><dt><a href="Portability.html#id3012967">Sequential Read Ahead</a></dt></dl></dd><dt><a href="Portability.html#id3012993">Solaris</a></dt><dd><dl><dt><a href="Portability.html#id3013000">Locking improvements</a></dt><dt><a href="Portability.html#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="Other-Clients.html">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013776">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id3013848">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013855">How can I configure OS/2 Warp Connect or
- OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="Other-Clients.html#id3013471">How can I configure OS/2 Warp 3 (not Connect),
- OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="Other-Clients.html#id3013530">How do I get printer driver download working
- for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013628">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013090">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id3013179">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id3013210">Configure WfW password handling</a></dt><dt><a href="Other-Clients.html#id3013255">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id3013285">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id3013303">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013349">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id3014379">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3014403">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id3014514">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="speed.html">Samba Performance Tuning</a></dt><dd><dl><dt><a href="speed.html#id3016725">Comparisons</a></dt><dt><a href="speed.html#id3014565">Socket options</a></dt><dt><a href="speed.html#id3014636">Read size</a></dt><dt><a href="speed.html#id3014680">Max xmit</a></dt><dt><a href="speed.html#id3014732">Log level</a></dt><dt><a href="speed.html#id3014755">Read raw</a></dt><dt><a href="speed.html#id3014811">Write raw</a></dt><dt><a href="speed.html#id3014853">Slow Logins</a></dt><dt><a href="speed.html#id3015761">Client tuning</a></dt><dt><a href="speed.html#id3015784">Samba performance problem due changing kernel</a></dt><dt><a href="speed.html#id3015817">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="DNSDHCP.html">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="DNSDHCP.html#id3016535">Note</a></dt></dl></dd><dt>41. <a href="Further-Resources.html">Further Resources</a></dt><dd><dl><dt><a href="Further-Resources.html#id3015954">Websites</a></dt><dt><a href="Further-Resources.html#id3016336">Related updates from Microsoft</a></dt><dt><a href="Further-Resources.html#id3016404">Books</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="bugreport.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="compiling.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter35.Reporting Bugs</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter36.How to compile SAMBA</td></tr></table></div></body></html>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartVI.Appendixes</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="previous" href="bugreport.html" title="Chapter35.Reporting Bugs"><link rel="next" href="compiling.html" title="Chapter36.How to compile Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartVI.Appendixes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="bugreport.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="compiling.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Appendixes"></a>Appendixes</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>36. <a href="compiling.html">How to compile Samba</a></dt><dd><dl><dt><a href="compiling.html#id2961265">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="compiling.html#id2961282">Introduction</a></dt><dt><a href="compiling.html#id2961320">CVS Access to samba.org</a></dt></dl></dd><dt><a href="compiling.html#id2961581">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="compiling.html#id2961644">Verifying Samba's PGP signature</a></dt><dt><a href="compiling.html#id2961798">Building the Binaries</a></dt><dd><dl><dt><a href="compiling.html#id2961978">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="compiling.html#id2962144">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="compiling.html#id2962252">Starting from inetd.conf</a></dt><dt><a href="compiling.html#id2962499">Alternative: starting it as a daemon</a></dt></dl></dd></dl></dd><dt>37. <a href="Portability.html">Portability</a></dt><dd><dl><dt><a href="Portability.html#id2962662">HPUX</a></dt><dt><a href="Portability.html#id2962750">SCO UNIX</a></dt><dt><a href="Portability.html#id2962780">DNIX</a></dt><dt><a href="Portability.html#id2962953">RedHat Linux Rembrandt-II</a></dt><dt><a href="Portability.html#id2962995">AIX</a></dt><dd><dl><dt><a href="Portability.html#id2963002">Sequential Read Ahead</a></dt></dl></dd><dt><a href="Portability.html#id2963029">Solaris</a></dt><dd><dl><dt><a href="Portability.html#id2963036">Locking improvements</a></dt><dt><a href="Portability.html#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="Other-Clients.html">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="Other-Clients.html#id2963189">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id2963267">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id2963275">Configuring OS/2 Warp Connect or
+ OS/2 Warp 4 as a client for Samba</a></dt><dt><a href="Other-Clients.html#id2963359">Configuring OS/2 Warp 3 (not Connect),
+ OS/2 1.2, 1.3 or 2.x for Samba</a></dt><dt><a href="Other-Clients.html#id2963411">Printer driver download for for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id2963512">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id2963519">Latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id2963610">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id2963639">Configuring WfW password handling</a></dt><dt><a href="Other-Clients.html#id2963692">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id2963730">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id2963747">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id2963794">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id2963867">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id2963891">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id2964079">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="speed.html">Samba Performance Tuning</a></dt><dd><dl><dt><a href="speed.html#id2964209">Comparisons</a></dt><dt><a href="speed.html#id2964253">Socket options</a></dt><dt><a href="speed.html#id2964343">Read size</a></dt><dt><a href="speed.html#id2964393">Max xmit</a></dt><dt><a href="speed.html#id2964453">Log level</a></dt><dt><a href="speed.html#id2964483">Read raw</a></dt><dt><a href="speed.html#id2964567">Write raw</a></dt><dt><a href="speed.html#id2964630">Slow Logins</a></dt><dt><a href="speed.html#id2964659">Client tuning</a></dt><dt><a href="speed.html#id2964684">Samba performance problem due changing kernel</a></dt><dt><a href="speed.html#id2964716">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="DNSDHCP.html">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="DNSDHCP.html#id2964821">Note</a></dt></dl></dd><dt>41. <a href="Further-Resources.html">Further Resources</a></dt><dd><dl><dt><a href="Further-Resources.html#id2964888">Websites</a></dt><dt><a href="Further-Resources.html#id2965278">Related updates from Microsoft</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="bugreport.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-doc.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="compiling.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter35.Reporting Bugs</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter36.How to compile Samba</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/Backup.html b/docs/htmldocs/Backup.html
index 392e14c6451..f19bd6d2b3c 100644
--- a/docs/htmldocs/Backup.html
+++ b/docs/htmldocs/Backup.html
@@ -1,14 +1,11 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter28.Samba Backup Techniques</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="unicode.html" title="Chapter27.Unicode/Charsets"><link rel="next" href="SambaHA.html" title="Chapter29.High Availability Options"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter28.Samba Backup Techniques</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="unicode.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="SambaHA.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Backup"></a>Chapter28.Samba Backup Techniques</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Backup.html#id2999976">Note</a></dt><dt><a href="Backup.html#id2999997">Features and Benefits</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999976"></a>Note</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter28.Samba Backup Techniques</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="unicode.html" title="Chapter27.Unicode/Charsets"><link rel="next" href="SambaHA.html" title="Chapter29.High Availability Options"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter28.Samba Backup Techniques</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="unicode.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="SambaHA.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Backup"></a>Chapter28.Samba Backup Techniques</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Backup.html#id2953871">Note</a></dt><dt><a href="Backup.html#id2953885">Features and Benefits</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953871"></a>Note</h2></div></div><div></div></div><p>
This chapter did not make it into this release.
It is planned for the published release of this document.
-If you have something to contribute for this section please email it to
-<a href="">jht@samba.org</a>/
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999997"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953885"></a>Features and Benefits</h2></div></div><div></div></div><p>
We need feedback from people who are backing up samba servers.
We would like to know what software tools you are using to backup
your samba server/s.
</p><p>
In particular, if you have any success and / or failure stories you could
share with other users this would be appreciated.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="unicode.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="SambaHA.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter27.Unicode/Charsets</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter29.High Availability Options</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="unicode.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="SambaHA.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter27.Unicode/Charsets</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter29.High Availability Options</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/CUPS-printing.html b/docs/htmldocs/CUPS-printing.html
index dff70b17265..8bfe11405f8 100644
--- a/docs/htmldocs/CUPS-printing.html
+++ b/docs/htmldocs/CUPS-printing.html
@@ -1,55 +1,59 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter19.CUPS Printing Support in Samba 3.0</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="printing.html" title="Chapter18.Classical Printing Support"><link rel="next" href="VFS.html" title="Chapter20.Stackable VFS modules"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter19.CUPS Printing Support in Samba 3.0</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="printing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="VFS.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="CUPS-printing"></a>Chapter19.CUPS Printing Support in Samba 3.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Ciprian</span> <span class="surname">Vizitiu</span></h3><span class="contrib">drawings</span><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:CVizitiu@gbif.org">CVizitiu@gbif.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> (3 June 2003) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="CUPS-printing.html#id2957297">Introduction</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957304">Features and Benefits</a></dt><dt><a href="CUPS-printing.html#id2957352">Overview</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2957404">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957483">Linking of smbd with libcups.so</a></dt><dt><a href="CUPS-printing.html#id2950396">Simple smb.conf Settings for CUPS</a></dt><dt><a href="CUPS-printing.html#id2957550">More complex smb.conf Settings for
-CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2950555">Advanced Configuration</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2950575">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2950602">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
-with Vendor Drivers on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2950639">Driver Installation Methods on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2950697">Explicitly enable &quot;raw&quot; printing for
-application/octet-stream!</a></dt><dt><a href="CUPS-printing.html#id2950858">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2950951">Using CUPS/Samba in an advanced Way -- intelligent printing
-with PostScript Driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2951026">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="CUPS-printing.html#id2951071">Windows Drivers, GDI and EMF</a></dt><dt><a href="CUPS-printing.html#id2951170">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="CUPS-printing.html#id2951241">PostScript and Ghostscript</a></dt><dt><a href="CUPS-printing.html#id2951338">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="CUPS-printing.html#id2951433">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="CUPS-printing.html#id2964250">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="CUPS-printing.html#id2964339">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2964362">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964500">MIME types and CUPS Filters</a></dt><dt><a href="CUPS-printing.html#id2964688">MIME type Conversion Rules</a></dt><dt><a href="CUPS-printing.html#id2964804">Filter Requirements</a></dt><dt><a href="CUPS-printing.html#id2964973">Prefilters</a></dt><dt><a href="CUPS-printing.html#id2965058">pstops</a></dt><dt><a href="CUPS-printing.html#id2965161">pstoraster</a></dt><dt><a href="CUPS-printing.html#id2965317">imagetops and imagetoraster</a></dt><dt><a href="CUPS-printing.html#id2965372">rasterto [printers specific]</a></dt><dt><a href="CUPS-printing.html#id2965457">CUPS Backends</a></dt><dt><a href="CUPS-printing.html#id2965771">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="CUPS-printing.html#id2965874">The Complete Picture</a></dt><dt><a href="CUPS-printing.html#id2965889">mime.convs</a></dt><dt><a href="CUPS-printing.html#id2965942">&quot;Raw&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2965996">&quot;application/octet-stream&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2966212">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="CUPS-printing.html#id2966439">Difference between cupsomatic/foomatic-rip and
-native CUPS printing</a></dt><dt><a href="CUPS-printing.html#id2966596">Examples for filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2966825">Sources of CUPS drivers / PPDs</a></dt><dt><a href="CUPS-printing.html#id2966950">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967012">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967028">From Windows Clients to an NT Print Server</a></dt><dt><a href="CUPS-printing.html#id2967067">Driver Execution on the Client</a></dt><dt><a href="CUPS-printing.html#id2967126">Driver Execution on the Server</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967189">Network Printing (Windows clients -- UNIX/Samba Print
-Servers)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967210">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="CUPS-printing.html#id2967370">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967448">Network PostScript RIP: CUPS Filters on Server -- clients use
-PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967503">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="CUPS-printing.html#id2967544">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967609">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967626">Printer Drivers running in &quot;Kernel Mode&quot; cause many
-Problems</a></dt><dt><a href="CUPS-printing.html#id2967661">Workarounds impose Heavy Limitations</a></dt><dt><a href="CUPS-printing.html#id2967682">CUPS: a &quot;Magical Stone&quot;?</a></dt><dt><a href="CUPS-printing.html#id2967709">PostScript Drivers with no major problems -- even in Kernel
-Mode</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967743"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967762">cupsaddsmb: the unknown Utility</a></dt><dt><a href="CUPS-printing.html#id2967853">Prepare your smb.conf for
-cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2967900">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt><a href="CUPS-printing.html#id2968097">Recognize the different Driver Files</a></dt><dt><a href="CUPS-printing.html#id2968155">Acquiring the Adobe Driver Files</a></dt><dt><a href="CUPS-printing.html#id2968188">ESP Print Pro Package of &quot;PostScript Driver for
-WinNT/2k/XP&quot;</a></dt><dt><a href="CUPS-printing.html#id2968238">Caveats to be considered</a></dt><dt><a href="CUPS-printing.html#id2968459">What are the Benefits of using the &quot;CUPS PostScript Driver for
-Windows NT/2k/XP&quot; as compared to the Adobe Driver?</a></dt><dt><a href="CUPS-printing.html#id2968640">Run &quot;cupsaddsmb&quot; (quiet Mode)</a></dt><dt><a href="CUPS-printing.html#id2968741">Run &quot;cupsaddsmb&quot; with verbose Output</a></dt><dt><a href="CUPS-printing.html#id2968884">Understanding cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2968978">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="CUPS-printing.html#id2969065">cupsaddsmb with a Samba PDC</a></dt><dt><a href="CUPS-printing.html#id2969100">cupsaddsmb Flowchart</a></dt><dt><a href="CUPS-printing.html#id2969151">Installing the PostScript Driver on a Client</a></dt><dt><a href="CUPS-printing.html#id2969266">Avoiding critical PostScript Driver Settings on the
-Client</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2969400">Installing PostScript Driver Files manually (using
-rpcclient)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2969515">A Check of the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2969627">Understanding the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2969706">Producing an Example by querying a Windows Box</a></dt><dt><a href="CUPS-printing.html#id2969796">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="CUPS-printing.html#id2969958">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="CUPS-printing.html#id2970578">Troubleshooting revisited</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2970680">The printing *.tdb Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2970783">Trivial DataBase Files</a></dt><dt><a href="CUPS-printing.html#id2970853">Binary Format</a></dt><dt><a href="CUPS-printing.html#id2970915">Losing *.tdb Files</a></dt><dt><a href="CUPS-printing.html#id2970974">Using tdbbackup</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2971036">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2971142">foomatic-rip and Foomatic explained</a></dt><dt><a href="CUPS-printing.html#id2971770">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2972228">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2972259">Setting up Quotas</a></dt><dt><a href="CUPS-printing.html#id2972290">Correct and incorrect Accounting</a></dt><dt><a href="CUPS-printing.html#id2972331">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2972403">The page_log File Syntax</a></dt><dt><a href="CUPS-printing.html#id2972504">Possible Shortcomings</a></dt><dt><a href="CUPS-printing.html#id2972576">Future Developments</a></dt><dt><a href="CUPS-printing.html#id2972624">Other Accounting Tools</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2972639">Additional Material</a></dt><dt><a href="CUPS-printing.html#id2972832">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2972878">CUPS Configuration Settings explained</a></dt><dt><a href="CUPS-printing.html#id2972960">Pre-conditions</a></dt><dt><a href="CUPS-printing.html#id2973021">Manual Configuration</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2973039">When not to use Samba to print to
-CUPS</a></dt><dt><a href="CUPS-printing.html#id2973056">In Case of Trouble.....</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2973091">Where to find Documentation</a></dt><dt><a href="CUPS-printing.html#id2973104">How to ask for Help</a></dt><dt><a href="CUPS-printing.html#id2973117">Where to find Help</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2973131">Appendix</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2973138">Printing from CUPS to Windows attached
-Printers</a></dt><dt><a href="CUPS-printing.html#id2973332">More CUPS filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2973586">Trouble Shooting Guidelines to fix typical Samba printing
-Problems</a></dt><dt><a href="CUPS-printing.html#id2974692">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957297"></a>Introduction</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957304"></a>Features and Benefits</h3></div></div><div></div></div><p>
- The Common Unix Print System (<a href="http://www.cups.org/" target="_top">CUPS</a>) has become very popular. All
- big Linux distributions now ship it as their default printing
- system. But to many it is still a very mystical tool. Normally it
- &quot;just works&quot; (TM). People tend to regard it as a sort of &quot;black box&quot;,
- which they don't want to look into, as long as it works OK. But once
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter19.CUPS Printing Support in Samba 3.0</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="printing.html" title="Chapter18.Classical Printing Support"><link rel="next" href="VFS.html" title="Chapter20.Stackable VFS modules"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter19.CUPS Printing Support in Samba 3.0</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="printing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="VFS.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="CUPS-printing"></a>Chapter19.CUPS Printing Support in Samba 3.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname">Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Ciprian</span> <span class="surname">Vizitiu</span></h3><span class="contrib">drawings</span><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:CVizitiu@gbif.org">CVizitiu@gbif.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><span class="contrib">drawings</span><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> (3 June 2003) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="CUPS-printing.html#id2923750">Introduction</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2923756">Features and Benefits</a></dt><dt><a href="CUPS-printing.html#id2923811">Overview</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2923880">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a></dt><dt><a href="CUPS-printing.html#id2924213">Simple smb.conf Settings for CUPS</a></dt><dt><a href="CUPS-printing.html#id2924395">More complex smb.conf Settings for
+CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2924750">Advanced Configuration</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2924770">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2924825">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2924894">Driver Installation Methods on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2924971">Explicitly enable &quot;raw&quot; printing for
+application/octet-stream!</a></dt><dt><a href="CUPS-printing.html#id2925177">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2925317">Using CUPS/Samba in an advanced Way -- intelligent printing
+with PostScript Driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#gdipost">GDI on Windows -- PostScript on UNIX</a></dt><dt><a href="CUPS-printing.html#id2925497">Windows Drivers, GDI and EMF</a></dt><dt><a href="CUPS-printing.html#id2925650">UNIX Printfile Conversion and GUI Basics</a></dt><dt><a href="CUPS-printing.html#post-and-ghost">PostScript and Ghostscript</a></dt><dt><a href="CUPS-printing.html#id2925951">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="CUPS-printing.html#id2926092">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="CUPS-printing.html#id2926179">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="CUPS-printing.html#id2926285">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2926306">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2926501">MIME types and CUPS Filters</a></dt><dt><a href="CUPS-printing.html#id2926707">MIME type Conversion Rules</a></dt><dt><a href="CUPS-printing.html#id2926862">Filter Requirements</a></dt><dt><a href="CUPS-printing.html#id2927043">Prefilters</a></dt><dt><a href="CUPS-printing.html#id2927153">pstops</a></dt><dt><a href="CUPS-printing.html#id2927264">pstoraster</a></dt><dt><a href="CUPS-printing.html#id2927459">imagetops and imagetoraster</a></dt><dt><a href="CUPS-printing.html#id2927523">rasterto [printers specific]</a></dt><dt><a href="CUPS-printing.html#id2927675">CUPS Backends</a></dt><dt><a href="CUPS-printing.html#id2928022">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="CUPS-printing.html#id2928168">The Complete Picture</a></dt><dt><a href="CUPS-printing.html#id2928183">mime.convs</a></dt><dt><a href="CUPS-printing.html#id2928246">&quot;Raw&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2928335">&quot;application/octet-stream&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2928581">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="CUPS-printing.html#id2928848">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a></dt><dt><a href="CUPS-printing.html#id2929083">Examples for filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2929420">Sources of CUPS drivers / PPDs</a></dt><dt><a href="CUPS-printing.html#id2929572">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2929667">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2929677">From Windows Clients to an NT Print Server</a></dt><dt><a href="CUPS-printing.html#id2929741">Driver Execution on the Client</a></dt><dt><a href="CUPS-printing.html#id2929818">Driver Execution on the Server</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2929936">Network Printing (Windows clients -- UNIX/Samba Print
+Servers)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2929956">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="CUPS-printing.html#id2930169">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2930255">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2930344">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="CUPS-printing.html#id2930400">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2930476">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2930493">Printer Drivers running in &quot;Kernel Mode&quot; cause many
+Problems</a></dt><dt><a href="CUPS-printing.html#id2930538">Workarounds impose Heavy Limitations</a></dt><dt><a href="CUPS-printing.html#id2930560">CUPS: a &quot;Magical Stone&quot;?</a></dt><dt><a href="CUPS-printing.html#id2930614">PostScript Drivers with no major problems -- even in Kernel
+Mode</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2930637">Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2930710">cupsaddsmb: the unknown Utility</a></dt><dt><a href="CUPS-printing.html#id2930811">Prepare your smb.conf for cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2931030">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt><a href="CUPS-printing.html#id2931268">Recognize the different Driver Files</a></dt><dt><a href="CUPS-printing.html#id2931460">Acquiring the Adobe Driver Files</a></dt><dt><a href="CUPS-printing.html#id2931493">ESP Print Pro Package of &quot;PostScript Driver for
+WinNT/2k/XP&quot;</a></dt><dt><a href="CUPS-printing.html#id2931562">Caveats to be considered</a></dt><dt><a href="CUPS-printing.html#id2931837">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a></dt><dt><a href="CUPS-printing.html#id2932052">Run &quot;cupsaddsmb&quot; (quiet Mode)</a></dt><dt><a href="CUPS-printing.html#id2932180">Run &quot;cupsaddsmb&quot; with verbose Output</a></dt><dt><a href="CUPS-printing.html#id2932401">Understanding cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2932551">How to recognize if cupsaddsmb completed successfully</a></dt><dt><a href="CUPS-printing.html#id2932633">cupsaddsmb with a Samba PDC</a></dt><dt><a href="CUPS-printing.html#id2932714">cupsaddsmb Flowchart</a></dt><dt><a href="CUPS-printing.html#id2932789">Installing the PostScript Driver on a Client</a></dt><dt><a href="CUPS-printing.html#id2932953">Avoiding critical PostScript Driver Settings on the
+Client</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2933086">Installing PostScript Driver Files manually (using
+rpcclient)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2933288">A Check of the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2933403">Understanding the rpcclient man page</a></dt><dt><a href="CUPS-printing.html#id2933506">Producing an Example by querying a Windows Box</a></dt><dt><a href="CUPS-printing.html#id2933674">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="CUPS-printing.html#id2933889">Manual Driver Installation in 15 Steps</a></dt><dt><a href="CUPS-printing.html#id2934958">Troubleshooting revisited</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2935364">Trivial DataBase Files</a></dt><dt><a href="CUPS-printing.html#id2935456">Binary Format</a></dt><dt><a href="CUPS-printing.html#id2935520">Losing *.tdb Files</a></dt><dt><a href="CUPS-printing.html#id2935579">Using tdbbackup</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2935716">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2935871">foomatic-rip and Foomatic explained</a></dt><dt><a href="CUPS-printing.html#id2936640">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2937141">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2937193">Setting up Quotas</a></dt><dt><a href="CUPS-printing.html#id2937258">Correct and incorrect Accounting</a></dt><dt><a href="CUPS-printing.html#id2937303">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2937398">The page_log File Syntax</a></dt><dt><a href="CUPS-printing.html#id2937516">Possible Shortcomings</a></dt><dt><a href="CUPS-printing.html#id2937592">Future Developments</a></dt><dt><a href="CUPS-printing.html#id2937648">Other Accounting Tools</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2937662">Additional Material</a></dt><dt><a href="CUPS-printing.html#id2937912">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2937974">CUPS Configuration Settings explained</a></dt><dt><a href="CUPS-printing.html#id2938069">Pre-conditions</a></dt><dt><a href="CUPS-printing.html#id2938226">Manual Configuration</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2938284">In Case of Trouble.....</a></dt><dt><a href="CUPS-printing.html#id2938356">Printing from CUPS to Windows attached
+Printers</a></dt><dt><a href="CUPS-printing.html#id2938656">More CUPS filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2938758">Common Errors</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2938765">Win9x client can't install driver</a></dt><dt><a href="CUPS-printing.html#id2938787">&quot;cupsaddsmb&quot; keeps asking for root password in
+ neverending loop</a></dt><dt><a href="CUPS-printing.html#id2938835">&quot;cupsaddsmb&quot; gives &quot;No PPD file for printer...&quot;
+ message while PPD file is present</a></dt><dt><a href="CUPS-printing.html#id2938893">Client can't connect to Samba printer</a></dt><dt><a href="CUPS-printing.html#id2938921">Can't reconnect to Samba under new account
+ from Win2K/XP</a></dt><dt><a href="CUPS-printing.html#id2939149">Avoid being connected to the Samba server as the
+ &quot;wrong&quot; user</a></dt><dt><a href="CUPS-printing.html#id2939202">Upgrading to CUPS drivers from Adobe drivers on
+ NT/2K/XP clients gives problems</a></dt><dt><a href="CUPS-printing.html#id2939219">Can't use &quot;cupsaddsmb&quot; on Samba server which is
+ a PDC</a></dt><dt><a href="CUPS-printing.html#id2939249">Deleted Win2K printer driver is still shown</a></dt><dt><a href="CUPS-printing.html#id2939258">Win2K/XP &quot;Local Security
+ Policies&quot;</a></dt><dt><a href="CUPS-printing.html#id2939297">WinXP clients: &quot;Administrator can not install
+ printers for all local users&quot;</a></dt><dt><a href="CUPS-printing.html#id2939331">&quot;Print Change Notify&quot; functions on
+ NT-clients</a></dt><dt><a href="CUPS-printing.html#id2939354">WinXP-SP1</a></dt><dt><a href="CUPS-printing.html#id2939398">Print options for all users can't be set on Win2K/XP</a></dt><dt><a href="CUPS-printing.html#id2939689">Most common blunders in driver
+ settings on Windows clients</a></dt><dt><a href="CUPS-printing.html#id2939734">cupsaddsmb does not work
+ with newly installed printer</a></dt><dt><a href="CUPS-printing.html#id2939796">Permissions on
+/var/spool/samba/ get reset after each
+reboot</a></dt><dt><a href="CUPS-printing.html#id2939905">Printer named &quot;lp&quot;
+intermittently swallows jobs and spits out completely different
+ones</a></dt><dt><a href="CUPS-printing.html#id2939953">Location of Adobe PostScript driver files necessary for &quot;cupsaddsmb&quot;</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2940008">An Overview of the CUPS Printing Processes</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923750"></a>Introduction</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923756"></a>Features and Benefits</h3></div></div><div></div></div><p>
+ The Common UNIX Print System (<a href="http://www.cups.org/" target="_top">CUPS</a>) has become very popular. All
+ major Linux distributions now ship it as their default printing
+ system. To many it is still a very mystical tool. Mostly, it
+ &quot;just works&quot; (TM). People tend to regard it as a &quot;black box&quot;
+ which they don't want to look into, as long as it works. But once
there is a little problem, they are in trouble to find out where to
- start debugging it. Also, even the most recent and otherwise excellent
- printed Samba documentation has only limited attention paid to CUPS
- printing, leaving out important pieces or even writing plain wrong
- things about it. This demands rectification. But before you dive into
- this chapter, make sure that you don't forget to refer to the
- &quot;Classical Printing&quot; chapter also. It contains a lot of information
- that is relevant for CUPS too.
+ start debugging it. Refer to the &quot;Classical Printing&quot; chapter also, it
+ contains a lot of information that is relevant for CUPS.
</p><p>
CUPS sports quite a few unique and powerful features. While their
basic functions may be grasped quite easily, they are also
new. Because they are different from other, more traditional printing
systems, it is best to try and not apply any prior knowledge about
- printing upon this new system. Rather try to start understand CUPS
- from the beginning. This documentation will lead you here to a
- complete understanding of CUPS, if you study all of the material
- contained. But lets start with the most basic things first. Maybe this
- is all you need for now. Then you can skip most of the other
- paragraphs.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957352"></a>Overview</h3></div></div><div></div></div><p>
+ printing upon this new system. Rather, try to understand CUPS
+ from the beginning. This documentation will lead you to a
+ complete understanding of CUPS. Let's start with the most basic
+ things first.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923811"></a>Overview</h3></div></div><div></div></div><p>
CUPS is more than just a print spooling system. It is a complete
printer management system that complies with the new IPP
(<span class="emphasis"><em>Internet Printing Protocol</em></span>). IPP is an industry
and IETF (<span class="emphasis"><em>Internet Engineering Task Force</em></span>)
standard for network printing. Many of its functions can be managed
remotely (or locally) via a web browser (giving you a
- platform-independent access to the CUPS print server). In addition it
- has the traditional commandline and several more modern GUI interfaces
+ platform-independent access to the CUPS print server). Additionally, it
+ has the traditional command line and several more modern GUI interfaces
(GUI interfaces developed by 3rd parties, like KDE's
overwhelming <a href="http://printing.kde.org/" target="_top">KDEPrint</a>).
</p><p>
@@ -61,80 +65,53 @@ Problems</a></dt><dt><a href="CUPS-printing.html#id2974692">An Overview of the C
argue that CUPS is better! In any case, let us now move on to
explore how one may configure CUPS for interfacing with MS Windows
print clients via Samba.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957404"></a>Basic Configuration of CUPS support</h2></div></div><div></div></div><p>
- Printing with CUPS in the most basic <tt class="filename">smb.conf</tt>
- setup in Samba 3.0 (as was true for 2.2.x) only needs two
- settings: <i class="parameter"><tt>printing = cups</tt></i> and <i class="parameter"><tt>printcap
- = cups</tt></i>. CUPS itself doesn't need a printcap file
- anymore. However, the <tt class="filename">cupsd.conf</tt> configuration
- file knows two related directives: they control if such a file should
- be automatically created and maintained by CUPS for the convenience of
- third party applications (example: <i class="parameter"><tt>Printcap
- /etc/printcap</tt></i> and <i class="parameter"><tt>PrintcapFormat
- BSD</tt></i>). These legacy programs often require the existence of
- printcap file containing printernames or they will refuse to
- print. Make sure CUPS is set to generate and maintain a printcap! For
- details see <b class="command">man cupsd.conf</b> and other CUPS-related
- documentation, like the wealth of documents on your CUPS server
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923880"></a>Basic Configuration of CUPS support</h2></div></div><div></div></div><p>
+ Printing with CUPS in the most basic <tt class="filename">smb.conf</tt> setup in Samba 3.0 (as was true for 2.2.x) only needs two
+ settings: <a class="indexterm" name="id2923898"></a><i class="parameter"><tt>printing</tt></i> = cups and
+ <a class="indexterm" name="id2923912"></a><i class="parameter"><tt>printcap</tt></i> = cups. CUPS does not need a printcap file.
+ However, the <tt class="filename">cupsd.conf</tt> configuration file knows of two related directives that control
+ how such a file will be automatically created and maintained by CUPS for the convenience of third party
+ applications (example: <i class="parameter"><tt>Printcap /etc/printcap</tt></i> and <i class="parameter"><tt>PrintcapFormat BSD</tt></i>).
+ Legacy programs often require the existence of a printcap file containing printer names or they will refuse to
+ print. Make sure CUPS is set to generate and maintain a printcap file! For details see
+ <b class="command">man cupsd.conf</b> and other CUPS-related documentation, like the wealth of documents on your CUPS server
itself: <a href="http://localhost:631/documentation.html" target="_top">http://localhost:631/documentation.html</a>.
- </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957483"></a>Linking of smbd with libcups.so</h3></div></div><div></div></div><p>
- Samba has a very special relationship to CUPS. The reason is: Samba
- can be compiled with CUPS library support. Most recent installations
- have this support enabled, and per default CUPS linking is compiled
+ </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923972"></a>Linking of smbd with libcups.so</h3></div></div><div></div></div><p>
+ Samba has a very special relationship to CUPS. Samba can be compiled with CUPS library support.
+ Most recent installations have this support enabled. Per default CUPS linking is compiled
into smbd and other Samba binaries. Of course, you can use CUPS even
if Samba is not linked against <tt class="filename">libcups.so</tt> -- but
there are some differences in required or supported configuration
then.
</p><p>
- If SAMBA is compiled against libcups, then <i class="parameter"><tt>printcap =
- cups</tt></i> uses the CUPS API to list printers, submit jobs,
- query queues, etc. Otherwise it maps to the System V commands with an
- additional <b class="command">-oraw</b> option for printing. On a Linux
- system, you can use the <b class="command">ldd</b> utility to find out
- details (ldd may not be present on other OS platforms, or its function
- may be embodied by a different command):
- </p><pre class="screen">
- transmeta:/home/kurt # ldd `which smbd`
- libssl.so.0.9.6 =&gt; /usr/lib/libssl.so.0.9.6 (0x4002d000)
- libcrypto.so.0.9.6 =&gt; /usr/lib/libcrypto.so.0.9.6 (0x4005a000)
- libcups.so.2 =&gt; /usr/lib/libcups.so.2 (0x40123000)
- [....]
- </pre><p>
- The line <tt class="computeroutput">libcups.so.2 =&gt; /usr/lib/libcups.so.2
- (0x40123000)</tt> shows there is CUPS support compiled
- into this version of Samba. If this is the case, and printing = cups
- is set, then <span class="emphasis"><em>any otherwise manually set print command in
- <tt class="filename">smb.conf</tt> is ignored</em></span>. This is an
- important point to remember!
- </p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p> Should you require -- for any reason -- to set your own
- print commands, you can still do this by setting <i class="parameter"><tt>printing =
- sysv</tt></i>. However, you'll loose all the benefits from the
- close CUPS/Samba integration. You are on your own then to manually
- configure the rest of the printing system commands (most important:
- <i class="parameter"><tt>print command</tt></i>; other commands are
- <i class="parameter"><tt>lppause command, lpresume command, lpq command, lprm
- command, queuepause command </tt></i> and <i class="parameter"><tt>queue resume
- command</tt></i>).</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950396"></a>Simple <tt class="filename">smb.conf</tt> Settings for CUPS</h3></div></div><div></div></div><p>
- To summarize, here is the simplest printing-related setup
- for <tt class="filename">smb.conf</tt> to enable basic CUPS support:
+ When Samba is compiled against libcups, <a class="indexterm" name="id2924002"></a><i class="parameter"><tt>printcap</tt></i> = cups
+ uses the CUPS API to list printers, submit jobs, query queues, etc. Otherwise it maps to the System V
+ commands with an additional <b class="command">-oraw</b> option for printing. On a Linux
+ system, you can use the <b class="command">ldd</b> utility to find out details (ldd may not be present on
+ other OS platforms, or its function may be embodied by a different command):
</p><pre class="screen">
-
- [global]
- load printers = yes
- printing = cups
- printcap name = cups
-
- [printers]
- comment = All Printers
- path = /var/spool/samba
- browseable = no
- public = yes
- guest ok = yes
- writable = no
- printable = yes
- printer admin = root, @ntadmins
-
- </pre><p>
+<tt class="prompt">root# </tt><b class="userinput"><tt>ldd `which smbd`</tt></b>
+libssl.so.0.9.6 =&gt; /usr/lib/libssl.so.0.9.6 (0x4002d000)
+libcrypto.so.0.9.6 =&gt; /usr/lib/libcrypto.so.0.9.6 (0x4005a000)
+libcups.so.2 =&gt; /usr/lib/libcups.so.2 (0x40123000)
+[....]
+</pre><p>
+ The line <tt class="computeroutput">libcups.so.2 =&gt; /usr/lib/libcups.so.2 (0x40123000)</tt> shows
+ there is CUPS support compiled into this version of Samba. If this is the case, and printing = cups
+ is set, then <span class="emphasis"><em>any otherwise manually set print command in <tt class="filename">smb.conf</tt> is ignored</em></span>.
+ This is an important point to remember!
+ </p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p> Should it be necessary, for any reason, to set your own print commands, you can do this by setting
+ <a class="indexterm" name="id2924097"></a><i class="parameter"><tt>printing</tt></i> = sysv. However, you will loose all the benefits
+ of tight CUPS/Samba integration. When you do this you must manually configure the printing system commands
+ (most important: <a class="indexterm" name="id2924114"></a><i class="parameter"><tt>print command</tt></i>; other commands are
+ <a class="indexterm" name="id2924128"></a><i class="parameter"><tt>lppause command</tt></i>,
+ <a class="indexterm" name="id2924142"></a><i class="parameter"><tt>lpresume command</tt></i>,
+ <a class="indexterm" name="id2924155"></a><i class="parameter"><tt>lpq command</tt></i>,
+ <a class="indexterm" name="id2924169"></a><i class="parameter"><tt>lprm command</tt></i>,
+ <a class="indexterm" name="id2924183"></a><i class="parameter"><tt>queuepause command</tt></i> and
+ <a class="indexterm" name="id2924197"></a><i class="parameter"><tt>queue resume command</tt></i>).</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924213"></a>Simple <tt class="filename">smb.conf</tt> Settings for CUPS</h3></div></div><div></div></div><p>
+ To summarize, here is the simplest printing-related setup for <tt class="filename">smb.conf</tt> to enable basic CUPS support:
+ </p><div class="example"><a name="id2924241"></a><p class="title"><b>Example19.1.Simplest printing-related smb.conf</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>load printers = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = cups</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap name = cups</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = All Printers</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>public = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = root, @ntadmins</tt></i></td></tr></table></div><p>
This is all you need for basic printing setup for CUPS. It will print
all Graphic, Text, PDF and PostScript file submitted from Windows
clients. However, most of your Windows users would not know how to
@@ -149,67 +126,29 @@ Problems</a></dt><dt><a href="CUPS-printing.html#id2974692">An Overview of the C
printer is not a PostScript device, the print data stream is &quot;binary&quot;,
sensible only for the target printer. Read on to learn which problem
this may cause and how to avoid it.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957550"></a>More complex <tt class="filename">smb.conf</tt> Settings for
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924395"></a>More complex <tt class="filename">smb.conf</tt> Settings for
CUPS</h3></div></div><div></div></div><p>
Here is a slightly more complex printing-related setup
for <tt class="filename">smb.conf</tt>. It enables general CUPS printing
support for all printers, but defines one printer share which is set
up differently.
-</p><pre class="screen">
-
- [global]
- printing = cups
- printcap name = cups
- load printers = yes
-
- [printers]
- comment = All Printers
- path = /var/spool/samba
- public = yes
- guest ok = yes
- writable = no
- printable = yes
- printer admin = root, @ntadmins
-
- [special_printer]
- comment = A special printer with his own settings
- path = /var/spool/samba-special
- printing = sysv
- printcap = lpstat
- print command = echo &quot;NEW: `date`: printfile %f&quot; &gt;&gt; /tmp/smbprn.log ;\
- echo &quot; `date`: p-%p s-%s f-%f&quot; &gt;&gt; /tmp/smbprn.log ;\
- echo &quot; `date`: j-%j J-%J z-%z c-%c&quot; &gt;&gt; /tmp/smbprn.log :\
- rm %f
- public = no
- guest ok = no
- writeable = no
- printable = yes
- printer admin = kurt
- hosts deny = 0.0.0.0
- hosts allow = turbo_xp, 10.160.50.23, 10.160.51.60
-
-</pre><p>
-This special share is only there for my testing purposes. It doesn't
-even write the print job to a file. It just logs the job parameters
-known to Samba into the <tt class="filename">/tmp/smbprn.log</tt> file and
-deletes the jobfile. Moreover, the <i class="parameter"><tt>printer
-admin</tt></i> of this share is &quot;kurt&quot; (not the &quot;@ntadmins&quot; group);
-guest access is not allowed; the share isn't announced in Network
-Neighbourhood (so you need to know it is there), and it is only
-allowing access from three hosts. To prevent CUPS kicking in and
-taking over the print jobs for that share, we need to set
-<i class="parameter"><tt>printing = sysv</tt></i> and <i class="parameter"><tt>printcap =
-lpstat</tt></i>.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950555"></a>Advanced Configuration</h2></div></div><div></div></div><p>
-Before we dive into all the configuration options, let's clarify a few
+</p><div class="example"><a name="id2924426"></a><p class="title"><b>Example19.2.Overriding global CUPS settings for one printer</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = cups</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap name = cups</tt></i></td></tr><tr><td><i class="parameter"><tt>load printers = yes</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = All Printers</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>public = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = root, @ntadmins</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[special_printer]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = A special printer with his own settings</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba-special</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = sysv</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap = lpstat</tt></i></td></tr><tr><td><i class="parameter"><tt>print command = echo &quot;NEW: `date`: printfile %f&quot; &gt;&gt; /tmp/smbprn.log ; \</tt></i></td></tr><tr><td><i class="parameter"><tt>echo &quot; `date`: p-%p s-%s f-%f&quot; &gt;&gt; /tmp/smbprn.log ; \</tt></i></td></tr><tr><td><i class="parameter"><tt>echo &quot; `date`: j-%j J-%J z-%z c-%c&quot; &gt;&gt; /tmp/smbprn.log : rm %f</tt></i></td></tr><tr><td><i class="parameter"><tt>public = no</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = no</tt></i></td></tr><tr><td><i class="parameter"><tt>writeable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = kurt</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts deny = 0.0.0.0</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts allow = turbo_xp, 10.160.50.23, 10.160.51.60</tt></i></td></tr></table></div><p>
+This special share is only there for testing purposes. It does not write the print job to a file. It just logs the job parameters
+known to Samba into the <tt class="filename">/tmp/smbprn.log</tt> file and deletes the jobfile. Moreover, the
+<a class="indexterm" name="id2924692"></a><i class="parameter"><tt>printer admin</tt></i> of this share is &quot;kurt&quot; (not the &quot;@ntadmins&quot; group);
+guest access is not allowed; the share isn not published to the Network Neighbourhood (so you need to know it is there), and it only
+allows access from only three hosts. To prevent CUPS kicking in and taking over the print jobs for that share, we need to set
+<a class="indexterm" name="id2924720"></a><i class="parameter"><tt>printing</tt></i> = sysv and
+<a class="indexterm" name="id2924733"></a><i class="parameter"><tt>printcap</tt></i> = lpstat.
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2924750"></a>Advanced Configuration</h2></div></div><div></div></div><p>
+Before we delve into all the configuration options, let us clarify a few
points. <span class="emphasis"><em>Network printing needs to be organized and setup
correctly</em></span>. Often this is not done correctly. Legacy systems
-or small LANs in business environments often lack a clear design and
-good housekeeping.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950575"></a>Central spooling vs. &quot;Peer-to-Peer&quot; printing</h3></div></div><div></div></div><p>
+or small business LAN environments often lack design and good housekeeping.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924770"></a>Central spooling vs. &quot;Peer-to-Peer&quot; printing</h3></div></div><div></div></div><a class="indexterm" name="id2924780"></a><a class="indexterm" name="id2924790"></a><p>
Many small office or home networks, as well as badly organized larger
environments, allow each client a direct access to available network
-printers. Generally, this is a bad idea. It often blocks one client's
+printers. This is generally a bad idea. It often blocks one client's
access to the printer when another client's job is printing. It also
might freeze the first client's application while it is waiting to get
rid of the job. Also, there are frequent complaints about various jobs
@@ -218,18 +157,18 @@ is the usage of a &quot;print server&quot;: it routes all jobs through one
central system, which responds immediately, takes jobs from multiple
concurrent clients at the same time and in turn transfers them to the
printer(s) in the correct order.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950602"></a>CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
-with Vendor Drivers on Windows Clients</h3></div></div><div></div></div><p>
-Most traditionally configured Unix print servers acting on behalf of
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924825"></a>CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</h3></div></div><div></div></div><a class="indexterm" name="id2924835"></a><a class="indexterm" name="id2924844"></a><p>
+Most traditionally configured UNIX print servers acting on behalf of
Samba's Windows clients represented a really simple setup. Their only
task was to manage the &quot;raw&quot; spooling of all jobs handed to them by
Samba. This approach meant that the Windows clients were expected to
-prepare the print job file in such a way that it became fit to be fed to
-the printing device. Here a native (vendor-supplied) Windows printer
+prepare the print job file that it s ready to be sent to the printing
+device. Here a native (vendor-supplied) Windows printer
driver for the target device needed to be installed on each and every
client.
</p><p>
-Of course you can setup CUPS, Samba and your Windows clients in the
+It is possible to configure CUPS, Samba and your Windows clients in the
same, traditional and simple way. When CUPS printers are configured
for RAW print-through mode operation it is the responsibility of the
Samba client to fully render the print job (file). The file must be
@@ -237,21 +176,23 @@ sent in a format that is suitable for direct delivery to the
printer. Clients need to run the vendor-provided drivers to do
this. In this case CUPS will NOT do any print file format conversion
work.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950639"></a>Driver Installation Methods on Windows Clients</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924894"></a>Driver Installation Methods on Windows Clients</h3></div></div><div></div></div><p>
The printer drivers on the Windows clients may be installed
in two functionally different ways:
</p><div class="itemizedlist"><ul type="disc"><li><p>manually install the drivers locally on each client,
one by one; this yields the old <span class="emphasis"><em>LanMan</em></span> style
printing; it uses a <tt class="filename">\\sambaserver\printershare</tt>
-type of connection.</p></li><li><p>deposit and prepare the drivers (for later download) on
+type of connection.</p></li><li><p>
+<a class="indexterm" name="id2924937"></a>
+ deposit and prepare the drivers (for later download) on
the print server (Samba); this enables the clients to use
-&quot;Point'n'Print&quot; to get drivers semi-automatically installed the
+&quot;Point and Print&quot; to get drivers semi-automatically installed the
first time they access the printer; with this method NT/2K/XP
clients use the <span class="emphasis"><em>SPOOLSS/MS-RPC</em></span>
type printing calls.</p></li></ul></div><p>
The second method is recommended for use over the first.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950697"></a>Explicitly enable &quot;raw&quot; printing for
-<span class="emphasis"><em>application/octet-stream</em></span>!</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924971"></a>Explicitly enable &quot;raw&quot; printing for
+<span class="emphasis"><em>application/octet-stream</em></span>!</h3></div></div><div></div></div><a class="indexterm" name="id2924984"></a><p>
If you use the first option (drivers are installed on the client
side), there is one setting to take care of: CUPS needs to be told
that it should allow &quot;raw&quot; printing of deliberate (binary) file
@@ -264,16 +205,12 @@ be uncommented to allow RAW mode operation.
In<tt class="filename">/etc/cups/mime.types</tt> make sure this line is
present:
</p><pre class="screen">
-
application/octet-stream
-
</pre><p>
In <tt class="filename">/etc/cups/mime.convs</tt>,
have this line:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2925053"></a><pre class="screen">
application/octet-stream application/vnd.cups-raw 0 -
-
</pre><p>
If these two files are not set up correctly for raw Windows client
printing, you may encounter the dreaded <tt class="computeroutput">Unable to
@@ -282,7 +219,7 @@ convert file 0</tt> in your CUPS error_log file.
<tt class="filename">mime.types</tt> file does not
<span class="emphasis"><em>enforce</em></span> &quot;raw&quot; printing, it only
<span class="emphasis"><em>allows</em></span> it.
-</p></div><p><b>Background.</b>
+</p></div><p><b>Background.</b><a class="indexterm" name="id2925119"></a>
CUPS being a more security-aware printing system than traditional ones
does not by default allow a user to send deliberate (possibly binary)
data to printing devices. This could be easily abused to launch a
@@ -299,7 +236,7 @@ This is all you need to know to get the CUPS/Samba combo printing
locally installed. If you are not interested in background information about
more advanced CUPS/Samba printing, simply skip the remaining sections
of this chapter.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950858"></a>Three familiar Methods for driver upload plus a new one</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925177"></a>Three familiar Methods for driver upload plus a new one</h3></div></div><div></div></div><a class="indexterm" name="id2925185"></a><p>
If you want to use the MS-RPC type printing, you must upload the
drivers onto the Samba server first (<i class="parameter"><tt>[print$]</tt></i>
share). For a discussion on how to deposit printer drivers on the
@@ -307,23 +244,25 @@ Samba host (so that the Windows clients can download and use them via
&quot;Point'n'Print&quot;) please also refer to the previous chapter of this
HOWTO Collection. There you will find a description or reference to
three methods of preparing the client drivers on the Samba server:
-</p><div class="itemizedlist"><ul type="disc"><li><p>the GUI, &quot;Add Printer Wizard&quot;
+</p><a class="indexterm" name="id2925224"></a><div class="itemizedlist"><ul type="disc"><li><p>the GUI, &quot;Add Printer Wizard&quot;
<span class="emphasis"><em>upload-from-a-Windows-client</em></span>
method;</p></li><li><p>the commandline, &quot;smbclient/rpcclient&quot;
<span class="emphasis"><em>upload-from-a-UNIX-workstation</em></span>
-method;</p></li><li><p>the <span class="emphasis"><em>Imprints</em></span> Toolset
+method;</p></li><li><p>
+<a class="indexterm" name="id2925264"></a>
+ the <span class="emphasis"><em>Imprints</em></span> Toolset
method.</p></li></ul></div><p>
These 3 methods apply to CUPS all the same. A new and more
convenient way to load the Windows drivers into Samba is provided
-provided if you use CUPS:
-</p><div class="itemizedlist"><ul type="disc"><li><p>the <span class="emphasis"><em>cupsaddsmb</em></span>
+if you use CUPS:
+</p><a class="indexterm" name="id2925285"></a><div class="itemizedlist"><ul type="disc"><li><p>the <span class="emphasis"><em>cupsaddsmb</em></span>
utility.</p></li></ul></div><p>
cupsaddsmb is discussed in much detail further below. But we will
first explore the CUPS filtering system and compare the Windows and
UNIX printing architectures.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950951"></a>Using CUPS/Samba in an advanced Way -- intelligent printing
-with PostScript Driver Download</h2></div></div><div></div></div><p>
-Still reading on? Good. Let's go into more detail then. We now know
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2925317"></a>Using CUPS/Samba in an advanced Way -- intelligent printing
+with PostScript Driver Download</h2></div></div><div></div></div><a class="indexterm" name="id2925326"></a><p>
+Are you still following this? Good. Let's go into more detail then. We now know
how to set up a &quot;dump&quot; printserver, that is, a server which is spooling
printjobs &quot;raw&quot;, leaving the print data untouched.
</p><p>
@@ -344,13 +283,13 @@ server meeting these requirements, you'll first need to learn about
how CUPS works and how you can enable its features.
</p><p>
What follows is the comparison of some fundamental concepts for
-Windows and Unix printing; then is the time for a description of the
+Windows and UNIX printing; then is the time for a description of the
CUPS filtering system, how it works and how you can tweak it.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951026"></a>GDI on Windows -- PostScript on Unix</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="gdipost"></a>GDI on Windows -- PostScript on UNIX</h3></div></div><div></div></div><a class="indexterm" name="id2925423"></a><a class="indexterm" name="id2925431"></a><p>
Network printing is one of the most complicated and error-prone
day-to-day tasks any user or an administrator may encounter. This is
true for all OS platforms. And there are reasons for this.
-</p><p>
+</p><a class="indexterm" name="id2925447"></a><a class="indexterm" name="id2925456"></a><p>
You can't expect for most file formats to just throw them towards
printers and they get printed. There needs to be a file format
conversion in between. The problem is: there is no common standard for
@@ -362,7 +301,7 @@ into semi-official &quot;standards&quot;, by being the most widely used PDLs
many manufacturers who &quot;roll their own&quot; (their reasons may be
unacceptable license fees for using printer-embedded PostScript
interpreters, etc.).
-</p></div><div xmlns:ns52="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951071"></a>Windows Drivers, GDI and EMF</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925497"></a>Windows Drivers, GDI and EMF</h3></div></div><div></div></div><a class="indexterm" name="id2925505"></a><a class="indexterm" name="id2925514"></a><a class="indexterm" name="id2925522"></a><p>
In Windows OS, the format conversion job is done by the printer
drivers. On MS Windows OS platforms all application programmers have
at their disposal a built-in API, the GDI (<span class="emphasis"><em>Graphical Device
@@ -379,16 +318,17 @@ the GDI, produces often a file format called EMF (<span class="emphasis"><em>Enh
MetaFile</em></span>). The EMF is processed by the printer driver and
converted to the printer-specific file format.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2925583"></a>
To the GDI foundation in MS Windows, Apple has chosen to
put paper and screen output on a common foundation for their
-(BSD-Unix-based, did you know??) Mac OS X and Darwin Operating
-Systems.Their <span class="emphasis"><em>Core Graphic Engine</em></span> uses a
-<span class="emphasis"><em>PDF</em></span> derivate for all display work.
-</p></div><ns52:p>
+(BSD-UNIX-based, did you know??) Mac OS X and Darwin Operating
+Systems. Their <span class="emphasis"><em>Core Graphic Engine</em></span> uses a
+<span class="emphasis"><em>PDF</em></span> derivative for all display work.
+</p></div><p>
-</ns52:p><div class="figure"><a name="id2951136"></a><p class="title"><b>Figure19.1.Windows Printing to a local Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="Windows Printing to a local Printer"></div></div><ns52:p>
-</ns52:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951170"></a>Unix Printfile Conversion and GUI Basics</h3></div></div><div></div></div><p>
-In Unix and Linux, there is no comparable layer built into the OS
+</p><div class="figure"><a name="small1"></a><p class="title"><b>Figure19.1.Windows Printing to a local Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" width="270" alt="Windows Printing to a local Printer"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925650"></a>UNIX Printfile Conversion and GUI Basics</h3></div></div><div></div></div><a class="indexterm" name="id2925657"></a><a class="indexterm" name="id2925665"></a><a class="indexterm" name="id2925673"></a><a class="indexterm" name="id2925682"></a><p>
+In UNIX and Linux, there is no comparable layer built into the OS
kernel(s) or the X (screen display) server. Every application is
responsible for itself to create its print output. Fortunately, most
use PostScript. That gives at least some common ground. Unfortunately,
@@ -407,7 +347,7 @@ ready for prime time.) You can see this unfavorable inheritance up to
the present day by looking into the various &quot;font&quot; directories on your
system; there are separate ones for fonts used for X display and fonts
to be used on paper.
-</p><p><b>Background.</b>
+</p><p><b>Background.</b><a class="indexterm" name="id2925741"></a>
The PostScript programming language is an &quot;invention&quot; by Adobe Inc.,
but its specifications have been published to the full. Its strength
lies in its powerful abilities to describe graphical objects (fonts,
@@ -423,9 +363,9 @@ form and you will be reading its PostScript code, the language
instructions which need to be interpreted by a rasterizer. Rasterizers
produce pixel images, which may be displayed on screen by a viewer
program or on paper by a printer.
-</p></div><div xmlns:ns53="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951241"></a>PostScript and Ghostscript</h3></div></div><div></div></div><p>
-So, Unix is lacking a common ground for printing on paper and
-displaying on screen. Despite this unfavorable legacy for Unix, basic
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="post-and-ghost"></a>PostScript and Ghostscript</h3></div></div><div></div></div><a class="indexterm" name="id2925792"></a><a class="indexterm" name="id2925800"></a><a class="indexterm" name="id2925811"></a><p>
+So, UNIX is lacking a common ground for printing on paper and
+displaying on screen. Despite this unfavorable legacy for UNIX, basic
printing is fairly easy: if you have PostScript printers at your
disposal! The reason is: these devices have a built-in PostScript
language &quot;interpreter&quot;, also called a <span class="emphasis"><em>Raster Image
@@ -435,34 +375,36 @@ spit out your printed pages. Their RIP is doing all the hard work of
converting the PostScript drawing commands into a bitmap picture as
you see it on paper, in a resolution as done by your printer. This is
no different to PostScript printing of a file from a Windows origin.
-</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Traditional Unix programs and printing systems -- while
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2925853"></a>
+Traditional UNIX programs and printing systems -- while
using PostScript -- are largely not PPD-aware. PPDs are &quot;PostScript
Printer Description&quot; files. They enable you to specify and control all
options a printer supports: duplexing, stapling, punching... Therefore
-Unix users for a long time couldn't choose many of the supported
+UNIX users for a long time couldn't choose many of the supported
device and job options, unlike Windows or Apple users. But now there
-is CUPS.... ;-)
-</p></div><ns53:p>
-</ns53:p><div class="figure"><a name="id2951288"></a><p class="title"><b>Figure19.2.Printing to a Postscript Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/2small.png" alt="Printing to a Postscript Printer"></div></div><ns53:p>
-</ns53:p><p>
+is CUPS....
+</p></div><p>
+ </p><div class="figure"><a name="small2"></a><p class="title"><b>Figure19.2.Printing to a Postscript Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/2small.png" width="270" alt="Printing to a Postscript Printer"></div></div><p>
+</p><a class="indexterm" name="id2925928"></a><p>
However, there are other types of printers out there. These don't know
how to print PostScript. They use their own <span class="emphasis"><em>Page Description
Language</em></span> (PDL, often proprietary). To print to them is much
-more demanding. Since your Unix applications mostly produce
+more demanding. Since your UNIX applications mostly produce
PostScript, and since these devices don't understand PostScript, you
need to convert the printfiles to a format suitable for your printer
on the host, before you can send it away.
-</p></div><div xmlns:ns54="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951338"></a>Ghostscript -- the Software RIP for non-PostScript Printers</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925951"></a>Ghostscript -- the Software RIP for non-PostScript Printers</h3></div></div><div></div></div><a class="indexterm" name="id2925960"></a><p>
Here is where <span class="emphasis"><em>Ghostscript</em></span> kicks in. Ghostscript is
the traditional (and quite powerful) PostScript interpreter used on
-Unix platforms. It is a RIP in software, capable to do a
+UNIX platforms. It is a RIP in software, capable to do a
<span class="emphasis"><em>lot</em></span> of file format conversions, for a very broad
spectrum of hardware devices as well as software file formats.
Ghostscript technology and drivers is what enables PostScript printing
to non-PostScript hardware.
-</p><ns54:p>
-</ns54:p><div class="figure"><a name="id2951368"></a><p class="title"><b>Figure19.3.Ghostscript as a RIP for non-postscript printers</b></p><div class="mediaobject"><img src="projdoc/imagefiles/3small.png" alt="Ghostscript as a RIP for non-postscript printers"></div></div><ns54:p>
-</ns54:p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>
+</p><p>
+ </p><div class="figure"><a name="small3"></a><p class="title"><b>Figure19.3.Ghostscript as a RIP for non-postscript printers</b></p><div class="mediaobject"><img src="projdoc/imagefiles/3small.png" width="270" alt="Ghostscript as a RIP for non-postscript printers"></div></div><p>
+</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>
Use the &quot;gs -h&quot; command to check for all built-in &quot;devices&quot; of your
Ghostscript version. If you specify e.g. a parameter of
<i class="parameter"><tt>-sDEVICE=png256</tt></i> on your Ghostscript command
@@ -474,12 +416,12 @@ intervals, now by artofcode LLC. They are initially put under the
&quot;AFPL&quot; license, but re-released under the GNU GPL as soon as the next
AFPL version appears. GNU Ghostscript is probably the version
installed on most Samba systems. But it has got some
-deficiencies. Therefore ESP Ghostscript was developed as an
+deficiencies. <a class="indexterm" name="id2926066"></a>Therefore ESP Ghostscript was developed as an
enhancement over GNU Ghostscript, with lots of bug-fixes, additional
devices and improvements. It is jointly maintained by developers from
CUPS, Gimp-Print, MandrakeSoft, SuSE, RedHat and Debian. It includes
the &quot;cups&quot; device (essential to print to non-PS printers from CUPS).
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951433"></a>PostScript Printer Description (PPD) Specification</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926092"></a>PostScript Printer Description (PPD) Specification</h3></div></div><div></div></div><a class="indexterm" name="id2926100"></a><p>
While PostScript in essence is a <span class="emphasis"><em>Page Description
Language</em></span> (PDL) to represent the page layout in a
<span class="emphasis"><em>device independent</em></span> way, real world print jobs are
@@ -505,15 +447,16 @@ user selections are somehow written (in the form of special
PostScript, PJL, JCL or vendor-dependent commands) into the PostScript
file created by the driver.
</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+<a class="indexterm" name="id2926162"></a>
A PostScript file that was created to contain device-specific commands
for achieving a certain print job output (e.g. duplexed, stapled and
punched) on a specific target machine, may not print as expected, or
may not be printable at all on other models; it also may not be fit
for further processing by software (e.g. by a PDF distilling program).
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964250"></a>CUPS can use all Windows-formatted Vendor PPDs</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926179"></a>CUPS can use all Windows-formatted Vendor PPDs</h3></div></div><div></div></div><p>
CUPS can handle all spec-compliant PPDs as supplied by the
manufacturers for their PostScript models. Even if a
-Unix/Linux-illiterate vendor might not have mentioned our favorite
+UNIX/Linux-illiterate vendor might not have mentioned our favorite
OS in his manuals and brochures -- you can safely trust this:
<span class="emphasis"><em>if you get hold of the Windows NT version of the PPD, you
can use it unchanged in CUPS</em></span> and thus access the full
@@ -525,6 +468,8 @@ immediately. CUPS in all versions after 1.1.19 has a much more strict
internal PPD parsing and checking code enabled; in case of printing
trouble this online resource should be one of your first pitstops.
</p></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+<a class="indexterm" name="id2926227"></a>
+<a class="indexterm" name="id2926235"></a>
For real PostScript printers <span class="emphasis"><em>don't</em></span> use the
<span class="emphasis"><em>Foomatic</em></span> or <span class="emphasis"><em>cupsomatic</em></span>
PPDs from Linuxprinting.org. With these devices the original
@@ -537,7 +482,7 @@ your LAN has the PostScript driver installed, just use
access the Windows directory where all printer driver files are
stored. First look in the <tt class="filename">W32X86/2</tt> subdir for
the PPD you are seeking.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964339"></a>CUPS also uses PPDs for non-PostScript Printers</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926285"></a>CUPS also uses PPDs for non-PostScript Printers</h3></div></div><div></div></div><p>
CUPS also uses specially crafted PPDs to handle non-PostScript
printers. These PPDs are usually not available from the vendors (and
no, you can't just take the PPD of a Postscript printer with the same
@@ -545,7 +490,7 @@ model name and hope it works for the non-PostScript version too). To
understand how these PPDs work for non-PS printers we first need to
dive deeply into the CUPS filtering and file format conversion
architecture. Stay tuned.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964362"></a>The CUPS Filtering Architecture</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926306"></a>The CUPS Filtering Architecture</h2></div></div><div></div></div><p>
The core of the CUPS filtering system is based on
<span class="emphasis"><em>Ghostscript</em></span>. In addition to Ghostscript, CUPS
uses some other filters of its own. You (or your OS vendor) may have
@@ -571,23 +516,27 @@ Make sure your Ghostscript version has the &quot;cups&quot; device compiled in
may encounter the dreaded <tt class="computeroutput">Unable to convert file
0</tt> in your CUPS error_log file. To have &quot;cups&quot; as a
device in your Ghostscript, you either need to <span class="emphasis"><em>patch GNU
-Ghostscript</em></span> and re-compile or use <a href="http://www.cups.org/ghostscript.php" target="_top">ESP Ghostscript</a>. The
+Ghostscript</em></span> and re-compile or use <a class="indexterm" name="id2926410"></a><a href="http://www.cups.org/ghostscript.php" target="_top">ESP Ghostscript</a>. The
superior alternative is ESP Ghostscript: it supports not just CUPS,
but 300 other devices too (while GNU Ghostscript supports only about
180). Because of this broad output device support, ESP Ghostscript is
the first choice for non-CUPS spoolers too. It is now recommended by
Linuxprinting.org for all spoolers.
</p><p>
+<a class="indexterm" name="id2926437"></a>
+<a class="indexterm" name="id2926446"></a>
CUPS printers may be setup to use <span class="emphasis"><em>external</em></span>
rendering paths. One of the most common ones is provided by the
<span class="emphasis"><em>Foomatic/cupsomatic</em></span> concept, from <a href="http://www.linuxprinting.org/" target="_top">Linuxprinting.org</a>. This
uses the classical Ghostscript approach, doing everything in one
step. It doesn't use the &quot;cups&quot; device, but one of the many
others. However, even for Foomatic/cupsomatic usage, best results and
+<a class="indexterm" name="id2926483"></a>
broadest printer model support is provided by ESP Ghostscript (more
about cupsomatic/Foomatic, particularly the new version called now
<span class="emphasis"><em>foomatic-rip</em></span>, follows below).
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964500"></a>MIME types and CUPS Filters</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926501"></a>MIME types and CUPS Filters</h3></div></div><div></div></div><p>
+ <a class="indexterm" name="id2926512"></a>
CUPS reads the file <tt class="filename">/etc/cups/mime.types</tt>
(and all other files carrying a <tt class="filename">*.types</tt> suffix
in the same directory) upon startup. These files contain the MIME
@@ -596,10 +545,10 @@ auto-typing routines. The rule syntax is explained in the man page
for <tt class="filename">mime.types</tt> and in the comments section of the
<tt class="filename">mime.types</tt> file itself. A simple rule reads
like this:
+</p><p>
+<a class="indexterm" name="id2926558"></a>
</p><pre class="screen">
-
application/pdf pdf string(0,%PDF)
-
</pre><p>
This means: if a filename has either a
<tt class="filename">.pdf</tt> suffix, or if the magic
@@ -608,9 +557,7 @@ beginning of the file itself (offset 0 from the start), then it is
a PDF file (<span class="emphasis"><em>application/pdf</em></span>).
Another rule is this:
</p><pre class="screen">
-
application/postscript ai eps ps string(0,%!) string(0,&lt;04&gt;%!)
-
</pre><p>
Its meaning: if the filename has one of the suffixes
<tt class="filename">.ai</tt>, <tt class="filename">.eps</tt>,
@@ -640,7 +587,7 @@ CUPS can handle ASCII text, HP-GL, PDF, PostScript, DVI and a
lot of image formats (GIF. PNG, TIFF, JPEG, Photo-CD, SUN-Raster,
PNM, PBM, SGI-RGB and some more) and their associated MIME types
with its filters.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964688"></a>MIME type Conversion Rules</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926707"></a>MIME type Conversion Rules</h3></div></div><div></div></div><a class="indexterm" name="id2926716"></a><p>
CUPS reads the file <tt class="filename">/etc/cups/mime.convs</tt>
(and all other files named with a <tt class="filename">*.convs</tt>
suffix in the same directory) upon startup. These files contain
@@ -649,39 +596,31 @@ conversion filter which can produce the output from the input type
and virtual costs associated with this conversion. One example line
reads like this:
</p><pre class="screen">
-
application/pdf application/postscript 33 pdftops
-
</pre><p>
This means that the <span class="emphasis"><em>pdftops</em></span> filter will take
<span class="emphasis"><em>application/pdf</em></span> as input and produce
<span class="emphasis"><em>application/postscript</em></span> as output, the virtual
cost of this operation is 33 CUPS-$. The next filter is more
expensive, costing 66 CUPS-$:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2926777"></a><pre class="screen">
application/vnd.hp-HPGL application/postscript 66 hpgltops
-
</pre><p>
This is the <span class="emphasis"><em>hpgltops</em></span>, which processes HP-GL
plotter files to PostScript.
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2926804"></a><pre class="screen">
application/octet-stream
-
</pre><p>
Here are two more examples:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2926827"></a><pre class="screen">
application/x-shell application/postscript 33 texttops
text/plain application/postscript 33 texttops
-
</pre><p>
The last two examples name the <span class="emphasis"><em>texttops</em></span> filter
to work on &quot;text/plain&quot; as well as on &quot;application/x-shell&quot;. (Hint:
this differentiation is needed for the syntax highlighting feature of
&quot;texttops&quot;).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964804"></a>Filter Requirements</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926862"></a>Filter Requirements</h3></div></div><div></div></div><a class="indexterm" name="id2926870"></a><p>
There are many more combinations named in mime.convs. However, you
are not limited to use the ones pre-defined there. You can plug in any
filter you like into the CUPS framework. It must meet, or must be made
@@ -697,13 +636,13 @@ filenames or <tt class="filename">stdin</tt> as input and write to
<span class="emphasis"><em>printer job user title copies options [filename]</em></span>
</p><div class="variablelist"><dl><dt><span class="term">Printer</span></dt><dd><p>The name of the printer queue (normally this is the
name of the filter being run)</p></dd><dt><span class="term">job</span></dt><dd><p>The numeric job ID for the job being
-printed</p></dd><dt><span class="term">Printer</span></dt><dd><p>The string from the originating-user-name
-attribute</p></dd><dt><span class="term">Printer</span></dt><dd><p>The string from the job-name attribute</p></dd><dt><span class="term">Printer</span></dt><dd><p>The numeric value from the number-copies
-attribute</p></dd><dt><span class="term">Printer</span></dt><dd><p>The job options</p></dd><dt><span class="term">Printer</span></dt><dd><p>(Optionally) The print request file (if missing,
+printed</p></dd><dt><span class="term">user</span></dt><dd><p>The string from the originating-user-name
+attribute</p></dd><dt><span class="term">title</span></dt><dd><p>The string from the job-name attribute</p></dd><dt><span class="term">copies</span></dt><dd><p>The numeric value from the number-copies
+attribute</p></dd><dt><span class="term">options</span></dt><dd><p>The job options</p></dd><dt><span class="term">filename</span></dt><dd><p>(Optionally) The print request file (if missing,
filters expected data fed through <tt class="filename">stdin</tt>). In most
cases it is very easy to write a simple wrapper script around existing
-filters to make them work with CUPS.</p></dd></dl></div></div></div><div xmlns:ns55="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964973"></a>Prefilters</h3></div></div><div></div></div><p>
-As was said, PostScript is the central file format to any Unix based
+filters to make them work with CUPS.</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927043"></a>Prefilters</h3></div></div><div></div></div><a class="indexterm" name="id2927050"></a><p>
+As was said, PostScript is the central file format to any UNIX based
printing system. From PostScript, CUPS generates raster data to feed
non-PostScript printers.
</p><p>
@@ -719,18 +658,18 @@ the <span class="emphasis"><em>imagetops</em></span> filter. Its outcome is alwa
MIME type <span class="emphasis"><em>application/vnd.cups-postscript</em></span>
(<span class="emphasis"><em>not</em></span> application/postscript), meaning it has the
print options already embedded into the file.
-</p><ns55:p>
-</ns55:p><div class="figure"><a name="id2965024"></a><p class="title"><b>Figure19.4.Prefiltering in CUPS to form Postscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/4small.png" alt="Prefiltering in CUPS to form Postscript"></div></div><ns55:p>
-</ns55:p></div><div xmlns:ns56="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965058"></a>pstops</h3></div></div><div></div></div><p>
+</p><p>
+ </p><div class="figure"><a name="small4"></a><p class="title"><b>Figure19.4.Prefiltering in CUPS to form Postscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/4small.png" width="270" alt="Prefiltering in CUPS to form Postscript"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927153"></a>pstops</h3></div></div><div></div></div><p>
<span class="emphasis"><em>pstops</em></span>is the filter to convert
<span class="emphasis"><em>application/postscript</em></span> to
<span class="emphasis"><em>application/vnd.cups-postscript</em></span>. It was said
above that this filter inserts all device-specific print options
(commands to the printer to ask for the duplexing of output, or
stapling an punching it, etc.) into the PostScript file.
-</p><ns56:p>
-</ns56:p><div class="figure"><a name="id2965089"></a><p class="title"><b>Figure19.5.Adding Device-specific Print Options</b></p><div class="mediaobject"><img src="projdoc/imagefiles/5small.png" alt="Adding Device-specific Print Options"></div></div><ns56:p>
-</ns56:p><p>
+</p><p>
+ </p><div class="figure"><a name="small5"></a><p class="title"><b>Figure19.5.Adding Device-specific Print Options</b></p><div class="mediaobject"><img src="projdoc/imagefiles/5small.png" width="270" alt="Adding Device-specific Print Options"></div></div><p>
+</p><p>
This is not all: other tasks performed by it are:
</p><div class="itemizedlist"><ul type="disc"><li><p>
selecting the range of pages to be printed (if you choose to
@@ -741,7 +680,7 @@ putting 2 or more logical pages on one sheet of paper (the
so-called &quot;number-up&quot; function)
</p></li><li><p>counting the pages of the job to insert the accounting
information into the <tt class="filename">/var/log/cups/page_log</tt>
-</p></li></ul></div></div><div xmlns:ns57="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965161"></a>pstoraster</h3></div></div><div></div></div><p>
+</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927264"></a>pstoraster</h3></div></div><div></div></div><p>
<span class="emphasis"><em>pstoraster</em></span> is at the core of the CUPS filtering
system. It is responsible for the first stage of the rasterization
process. Its input is of MIME type application/vnd.cups-postscript;
@@ -749,22 +688,22 @@ its output is application/vnd.cups-raster. This output format is not
yet meant to be printable. Its aim is to serve as a general purpose
input format for more specialized <span class="emphasis"><em>raster drivers</em></span>,
that are able to generate device-specific printer data.
-</p><ns57:p>
-</ns57:p><div class="figure"><a name="id2965191"></a><p class="title"><b>Figure19.6.Postscript to intermediate Raster format</b></p><div class="mediaobject"><img src="projdoc/imagefiles/6small.png" alt="Postscript to intermediate Raster format"></div></div><ns57:p>
-</ns57:p><p>
+</p><p>
+ </p><div class="figure"><a name="small6"></a><p class="title"><b>Figure19.6.Postscript to intermediate Raster format</b></p><div class="mediaobject"><img src="projdoc/imagefiles/6small.png" width="270" alt="Postscript to intermediate Raster format"></div></div><p>
+</p><p>
CUPS raster is a generic raster format with powerful features. It is
able to include per-page information, color profiles and more to be
used by the following downstream raster drivers. Its MIME type is
registered with IANA and its specification is of course completely
open. It is designed to make it very easy and inexpensive for
-manufacturers to develop Linux and Unix raster drivers for their
+manufacturers to develop Linux and UNIX raster drivers for their
printer models, should they choose to do so. CUPS always takes care
for the first stage of rasterization so these vendors don't need to care
about Ghostscript complications (in fact, there is currently more
than one vendor financing the development of CUPS raster drivers).
-</p><ns57:p>
-</ns57:p><div class="figure"><a name="id2965243"></a><p class="title"><b>Figure19.7.CUPS-raster production using Ghostscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/7small.png" alt="CUPS-raster production using Ghostscript"></div></div><ns57:p>
-</ns57:p><p>
+</p><p>
+ </p><div class="figure"><a name="small7"></a><p class="title"><b>Figure19.7.CUPS-raster production using Ghostscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/7small.png" width="270" alt="CUPS-raster production using Ghostscript"></div></div><p>
+</p><p>
CUPS versions before version 1.1.15 were shipping a binary (or source
code) standalone filter, named &quot;pstoraster&quot;. pstoraster was derived
from GNU Ghostscript 5.50, and could be installed besides and in
@@ -777,30 +716,30 @@ integrated back into Ghostscript (now based on GNU Ghostscript version
parameter. If your Ghostscript doesn't show a success on asking for
<b class="command">gs -h |grep cups</b>, you might not be able to
print. Update your Ghostscript then!
-</p></div><div xmlns:ns58="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965317"></a>imagetops and imagetoraster</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927459"></a>imagetops and imagetoraster</h3></div></div><div></div></div><p>
Above in the section about prefilters, we mentioned the prefilter
that generates PostScript from image formats. The imagetoraster
filter is used to convert directly from image to raster, without the
intermediate PostScript stage. It is used more often than the above
mentioned prefilters. Here is a summarizing flowchart of image file
filtering:
-</p><ns58:p>
-</ns58:p><div class="figure"><a name="id2965338"></a><p class="title"><b>Figure19.8.Image format to CUPS-raster format conversion</b></p><div class="mediaobject"><img src="projdoc/imagefiles/8small.png" alt="Image format to CUPS-raster format conversion"></div></div><ns58:p>
-</ns58:p></div><div xmlns:ns59="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965372"></a>rasterto [printers specific]</h3></div></div><div></div></div><p>
+</p><p>
+ </p><div class="figure"><a name="small8"></a><p class="title"><b>Figure19.8.Image format to CUPS-raster format conversion</b></p><div class="mediaobject"><img src="projdoc/imagefiles/8small.png" width="270" alt="Image format to CUPS-raster format conversion"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927523"></a>rasterto [printers specific]</h3></div></div><div></div></div><p>
CUPS ships with quite some different raster drivers processing CUPS
raster. On my system I find in /usr/lib/cups/filter/ these:
-<i class="parameter"><tt>rastertoalps, rastertobj, rastertoepson, rastertoescp,
-rastertopcl, rastertoturboprint, rastertoapdk, rastertodymo,
-rastertoescp, rastertohp</tt></i> and
+<i class="parameter"><tt>rastertoalps</tt></i>, <i class="parameter"><tt>rastertobj</tt></i>, <i class="parameter"><tt>rastertoepson</tt></i>, <i class="parameter"><tt>rastertoescp</tt></i>,
+<i class="parameter"><tt>rastertopcl</tt></i>, <i class="parameter"><tt>rastertoturboprint</tt></i>, <i class="parameter"><tt>rastertoapdk</tt></i>, <i class="parameter"><tt>rastertodymo</tt></i>,
+<i class="parameter"><tt>rastertoescp</tt></i>, <i class="parameter"><tt>rastertohp</tt></i> and
<i class="parameter"><tt>rastertoprinter</tt></i>. Don't worry if you have less
than this; some of these are installed by commercial add-ons to CUPS
(like <i class="parameter"><tt>rastertoturboprint</tt></i>), others (like
<i class="parameter"><tt>rastertoprinter</tt></i>) by 3rd party driver
development projects (such as Gimp-Print) wanting to cooperate as
closely as possible with CUPS.
-</p><ns59:p>
-</ns59:p><div class="figure"><a name="id2965423"></a><p class="title"><b>Figure19.9.Raster to Printer Specific formats</b></p><div class="mediaobject"><img src="projdoc/imagefiles/9small.png" alt="Raster to Printer Specific formats"></div></div><ns59:p>
-</ns59:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965457"></a>CUPS Backends</h3></div></div><div></div></div><p>
+</p><p>
+ </p><div class="figure"><a name="small9"></a><p class="title"><b>Figure19.9.Raster to Printer Specific formats</b></p><div class="mediaobject"><img src="projdoc/imagefiles/9small.png" width="270" alt="Raster to Printer Specific formats"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927675"></a>CUPS Backends</h3></div></div><div></div></div><p>
The last part of any CUPS filtering chain is a &quot;backend&quot;. Backends
are special programs that send the print-ready file to the final
device. There is a separate backend program for any transfer
@@ -855,7 +794,7 @@ This backend sends printfiles to printers shared by a Windows
host. An example for CUPS device-URIs to use are:
<tt class="filename">smb://workgroup/server/printersharename</tt>
Or
-<tt class="filename">Smb://server/printersharename</tt>
+<tt class="filename">smb://server/printersharename</tt>
or
<tt class="filename">smb://username:password@workgroup/server/printersharename</tt>
or
@@ -881,13 +820,11 @@ printername).
Not all of the mentioned backends may be present on your system or
usable (depending on your hardware configuration). One test for all
available CUPS backends is provided by the <span class="emphasis"><em>lpinfo</em></span>
-utility. Used with the <i class="parameter"><tt>-v</tt></i> parameter, it lists
+utility. Used with the <tt class="option">-v</tt> parameter, it lists
all available backends:
</p><pre class="screen">
-
- lpinfo -v
-
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965771"></a>cupsomatic/Foomatic -- how do they fit into the Picture?</h3></div></div><div></div></div><p>
+<tt class="prompt">$ </tt><b class="userinput"><tt>lpinfo -v</tt></b>
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928022"></a>cupsomatic/Foomatic -- how do they fit into the Picture?</h3></div></div><div></div></div><a class="indexterm" name="id2928030"></a><a class="indexterm" name="id2928038"></a><p>
&quot;cupsomatic&quot; filters may be the most widely used on CUPS
installations. You must be clear about the fact that these were not
developed by the CUPS people. They are a &quot;Third Party&quot; add-on to
@@ -901,9 +838,7 @@ Printer &amp; Driver Database at Linuxprinting.org.
You can recognize these PPDs from the line calling the
<span class="emphasis"><em>cupsomatic</em></span> filter:
</p><pre class="screen">
-
*cupsFilter: &quot;application/vnd.cups-postscript 0 cupsomatic&quot;
-
</pre><p>
This line you may find amongst the first 40 or so lines of the PPD
file. If you have such a PPD installed, the printer shows up in the
@@ -912,7 +847,7 @@ the driver description. cupsomatic is a Perl script that runs
Ghostscript, with all the complicated commandline options
auto-constructed from the selected PPD and commandline options give to
the printjob.
-</p><p>
+</p><a class="indexterm" name="id2928111"></a><p>
However, cupsomatic is now deprecated. Its PPDs (especially the first
generation of them, still in heavy use out there) are not meeting the
Adobe specifications. You might also suffer difficulties when you try
@@ -937,11 +872,11 @@ print-options from page to page, in the middle of a job. And the
best thing is: the new foomatic-rip now works seamlessly with all
legacy spoolers too (like LPRng, BSD-LPD, PDQ, PPR etc.), providing
for them access to use PPDs for their printing!
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965874"></a>The Complete Picture</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928168"></a>The Complete Picture</h3></div></div><div></div></div><p>
If you want to see an overview over all the filters and how they
relate to each other, the complete picture of the puzzle is at the end
of this document.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965889"></a><tt class="filename">mime.convs</tt></h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928183"></a><tt class="filename">mime.convs</tt></h3></div></div><div></div></div><p>
CUPS auto-constructs all possible filtering chain paths for any given
MIME type, and every printer installed. But how does it decide in
favor or against a specific alternative? (There may often be cases,
@@ -958,7 +893,7 @@ cost. This is a very efficient way to limit the load of any CUPS
server by setting an appropriate &quot;FilterLimit&quot; value. A FilterLimit of
200 allows roughly 1 job at a time, while a FilterLimit of 1000 allows
approximately 5 jobs maximum at a time.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965942"></a>&quot;Raw&quot; printing</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928246"></a>&quot;Raw&quot; printing</h3></div></div><div></div></div><p>
You can tell CUPS to print (nearly) any file &quot;raw&quot;. &quot;Raw&quot; means it
will not be filtered. CUPS will send the file to the printer &quot;as is&quot;
without bothering if the printer is able to digest it. Users need to
@@ -967,9 +902,7 @@ printing can happen on any queue if the &quot;-o raw&quot; option is specified
on the command line. You can also set up raw-only queues by simply not
associating any PPD with it. This command:
</p><pre class="screen">
-
- lpadmin -P rawprinter -v socket://11.12.13.14:9100 -E
-
+<tt class="prompt">$ </tt><b class="userinput"><tt>lpadmin -P rawprinter -v socket://11.12.13.14:9100 -E</tt></b>
</pre><p>
sets up a queue named &quot;rawprinter&quot;, connected via the &quot;socket&quot;
protocol (a.k.a. &quot;HP JetDirect&quot;) to the device at IP address
@@ -981,7 +914,7 @@ CUPS will automatically treat each job sent to a queue as a &quot;raw&quot; one,
if it can't find a PPD associated with the queue. However, CUPS will
only send known MIME types (as defined in its own mime.types file) and
refuse others.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2965996"></a>&quot;application/octet-stream&quot; printing</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928335"></a>&quot;application/octet-stream&quot; printing</h3></div></div><div></div></div><p>
Any MIME type with no rule in the
<tt class="filename">/etc/cups/mime.types</tt> file is regarded as unknown
or <span class="emphasis"><em>application/octet-stream</em></span> and will not be
@@ -990,9 +923,7 @@ you will probably have experienced the fact that printjobs originating
from Windows clients were not printed. You may have found an error
message in your CUPS logs like:
</p><pre class="screen">
-
Unable to convert file 0 to printable format for job
-
</pre><p>
To enable the printing of &quot;application/octet-stream&quot; files, edit
these two files:
@@ -1001,20 +932,16 @@ Both contain entries (at the end of the respective files) which must
be uncommented to allow RAW mode operation for
application/octet-stream. In <tt class="filename">/etc/cups/mime.types</tt>
make sure this line is present:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2928420"></a><pre class="screen">
application/octet-stream
-
</pre><p>
This line (with no specific auto-typing rule set) makes all files
not otherwise auto-typed a member of application/octet-stream. In
<tt class="filename">/etc/cups/mime.convs</tt>, have this
line:
</p><pre class="screen">
-
application/octet-stream application/vnd.cups-raw 0 -
-
-</pre><p>
+</pre><a class="indexterm" name="id2928460"></a><p>
This line tells CUPS to use the <span class="emphasis"><em>Null Filter</em></span>
(denoted as &quot;-&quot;, doing... nothing at all) on
<span class="emphasis"><em>application/octet-stream</em></span>, and tag the result as
@@ -1039,7 +966,7 @@ be one that is known to CUPS and an allowed one. The file
recognizes MIME types. The file
<tt class="filename">/etc/cups/mime.convs</tt> decides which file
conversion filter(s) may be applied to which MIME types.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966212"></a>PostScript Printer Descriptions (PPDs) for non-PS Printers</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928581"></a>PostScript Printer Descriptions (PPDs) for non-PS Printers</h3></div></div><div></div></div><a class="indexterm" name="id2928590"></a><p>
Originally PPDs were meant to be used for PostScript printers
only. Here, they help to send device-specific commands and settings
to the RIP which processes the jobfile. CUPS has extended this
@@ -1052,10 +979,8 @@ printers the Ghostscript RIP runs on the host computer.
</p><p>
PPDs for a non-PS printer have a few lines that are unique to
CUPS. The most important one looks similar to this:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2928619"></a><pre class="screen">
*cupsFilter: application/vnd.cups-raster 66 rastertoprinter
-
</pre><p>
It is the last piece in the CUPS filtering puzzle. This line tells the
CUPS daemon to use as a last filter &quot;rastertoprinter&quot;. This filter
@@ -1071,24 +996,12 @@ CUPS by default ships only a few generic PPDs, but they are good for
several hundred printer models. You may not be able to control
different paper trays, or you may get larger margins than your
specific model supports):
-</p><div class="variablelist"><dl><dt><span class="term">deskjet.ppd</span></dt><dd><p>older HP inkjet printers and compatible
-</p></dd><dt><span class="term">deskjet2.ppd</span></dt><dd><p>newer HP inkjet printers and compatible
-</p></dd><dt><span class="term">dymo.ppd</span></dt><dd><p>label printers
-</p></dd><dt><span class="term">epson9.ppd</span></dt><dd><p>Epson 24pin impact printers and compatible
-</p></dd><dt><span class="term">epson24.ppd</span></dt><dd><p>Epson 24pin impact printers and compatible
-</p></dd><dt><span class="term">okidata9.ppd</span></dt><dd><p>Okidata 9pin impact printers and compatible
-</p></dd><dt><span class="term">okidat24.ppd</span></dt><dd><p>Okidata 24pin impact printers and compatible
-</p></dd><dt><span class="term">stcolor.ppd</span></dt><dd><p>older Epson Stylus Color printers
-</p></dd><dt><span class="term">stcolor2.ppd</span></dt><dd><p>newer Epson Stylus Color printers
-</p></dd><dt><span class="term">stphoto.ppd</span></dt><dd><p>older Epson Stylus Photo printers
-</p></dd><dt><span class="term">stphoto2.ppd</span></dt><dd><p>newer Epson Stylus Photo printers
-</p></dd><dt><span class="term">laserjet.ppd</span></dt><dd><p>all PCL printers. Further below is a discussion
-of several other driver/PPD-packages suitable fur use with CUPS.
-</p></dd></dl></div></div><div xmlns:ns60="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966439"></a>Difference between <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span> and
-<span class="emphasis"><em>native CUPS</em></span> printing</h3></div></div><div></div></div><p>
+</p><div class="table"><a name="id2928665"></a><p class="title"><b>Table19.1.PPD's shipped with CUPS</b></p><table summary="PPD's shipped with CUPS" border="1"><colgroup><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">PPD file</th><th align="justify">Printer type</th></tr></thead><tbody><tr><td align="left">deskjet.ppd</td><td align="justify">older HP inkjet printers and compatible</td></tr><tr><td align="left">deskjet2.ppd</td><td align="justify">newer HP inkjet printers and compatible </td></tr><tr><td align="left">dymo.ppd</td><td align="justify">label printers </td></tr><tr><td align="left">epson9.ppd</td><td align="justify">Epson 24pin impact printers and compatible </td></tr><tr><td align="left">epson24.ppd</td><td align="justify">Epson 24pin impact printers and compatible </td></tr><tr><td align="left">okidata9.ppd</td><td align="justify">Okidata 9pin impact printers and compatible </td></tr><tr><td align="left">okidat24.ppd</td><td align="justify">Okidata 24pin impact printers and compatible </td></tr><tr><td align="left">stcolor.ppd</td><td align="justify">older Epson Stylus Color printers </td></tr><tr><td align="left">stcolor2.ppd</td><td align="justify">newer Epson Stylus Color printers </td></tr><tr><td align="left">stphoto.ppd</td><td align="justify">older Epson Stylus Photo printers </td></tr><tr><td align="left">stphoto2.ppd</td><td align="justify">newer Epson Stylus Photo printers </td></tr><tr><td align="left">laserjet.ppd</td><td align="justify">all PCL printers. Further below is a discussion of several other driver/PPD-packages suitable for use with CUPS. </td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928848"></a>Difference between <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span> and
+<span class="emphasis"><em>native CUPS</em></span> printing</h3></div></div><div></div></div><a class="indexterm" name="id2928866"></a><a class="indexterm" name="id2928874"></a><p>
Native CUPS rasterization works in two steps.
</p><div class="itemizedlist"><ul type="disc"><li><p>
First is the &quot;pstoraster&quot; step. It uses the special &quot;cups&quot;
+<a class="indexterm" name="id2928898"></a>
device from ESP Ghostscript 7.05.x as its tool
</p></li><li><p>
Second comes the &quot;rasterdriver&quot; step. It uses various
@@ -1097,9 +1010,9 @@ quality filters for this step, some are Free Software, some are
Shareware/Non-Free, some are proprietary.</p></li></ul></div><p>
Often this produces better quality (and has several more
advantages) than other methods.
-</p><ns60:p>
-</ns60:p><div class="figure"><a name="id2966490"></a><p class="title"><b>Figure19.10.cupsomatic/foomatic processing versus Native CUPS</b></p><div class="mediaobject"><img src="projdoc/imagefiles/10small.png" alt="cupsomatic/foomatic processing versus Native CUPS"></div></div><ns60:p>
-</ns60:p><p>
+</p><p>
+ </p><div class="figure"><a name="small10"></a><p class="title"><b>Figure19.10.cupsomatic/foomatic processing versus Native CUPS</b></p><div class="mediaobject"><img src="projdoc/imagefiles/10small.png" width="270" alt="cupsomatic/foomatic processing versus Native CUPS"></div></div><p>
+</p><p>
One other method is the <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span>
way. Note that cupsomatic is <span class="emphasis"><em>not</em></span> made by the CUPS
developers. It is an independent contribution to printing development,
@@ -1112,6 +1025,8 @@ other (non-CUPS) spoolers. An upgrade to foomatic-rip is strongly
advised, especially if you are upgrading to a recent version of CUPS
too.
</p><p>
+ <a class="indexterm" name="id2929012"></a>
+ <a class="indexterm" name="id2929021"></a>
Both the cupsomatic (old) and the foomatic-rip (new) methods from
Linuxprinting.org use the traditional Ghostscript print file
processing, doing everything in a single step. It therefore relies on
@@ -1133,7 +1048,7 @@ installation: Therefore the printfile bypasses the &quot;pstoraster&quot; filter
cupsomatic hands the rendered file directly to the CUPS backend. The
flowchart above illustrates the difference between native CUPS
rendering and the Foomatic/cupsomatic method.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966596"></a>Examples for filtering Chains</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929083"></a>Examples for filtering Chains</h3></div></div><div></div></div><p>
Here are a few examples of commonly occurring filtering chains to
illustrate the workings of CUPS.
</p><p>
@@ -1153,10 +1068,8 @@ PPD) into the new PostScript file; the file now is of PostScript MIME
type
<span class="emphasis"><em>application/vnd.cups-postscript</em></span>;</p></li><li><p>the file goes to the <span class="emphasis"><em>socket</em></span>
backend, which transfers the job to the printers.</p></li></ul></div><p>
-The resulting filter chain therefore is:
-</p><pre class="screen">
-pdftops --&gt; pstops --&gt; socket
-</pre><p>
+ The resulting filter chain therefore is as drawn in <a href="CUPS-printing.html#pdftosocket" title="Figure19.11.PDF to socket chain">the image below</a>.
+</p><div class="figure"><a name="pdftosocket"></a><p class="title"><b>Figure19.11.PDF to socket chain</b></p><div class="mediaobject"><img src="projdoc/imagefiles/pdftosocket.png" width="270" alt="PDF to socket chain"></div></div><p>
Assume your want to print the same filter to an USB-connected
Epson Stylus Photo printer, installed with the CUPS
<tt class="filename">stphoto2.ppd</tt>. The first few filtering stages
@@ -1180,45 +1093,43 @@ does its work (as is indicated in the printer's PPD), creating the
printer-specific raster data and embedding any user-selected
print-options into the print data stream;</p></li><li><p>the file goes to the <span class="emphasis"><em>usb</em></span> backend,
which transfers the job to the printers.</p></li></ul></div><p>
-The resulting filter chain therefore is:
-</p><pre class="screen">
-pdftops --&gt; pstops --&gt; pstoraster --&gt; rastertoepson --&gt; usb
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966825"></a>Sources of CUPS drivers / PPDs</h3></div></div><div></div></div><p>
+ The resulting filter chain therefore is as drawn in <a href="CUPS-printing.html#pdftoepsonusb" title="Figure19.12.PDF to USB chain">the image below</a>.
+</p><div class="figure"><a name="pdftoepsonusb"></a><p class="title"><b>Figure19.12.PDF to USB chain</b></p><div class="mediaobject"><img src="projdoc/imagefiles/pdftoepsonusb.png" width="270" alt="PDF to USB chain"></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929420"></a>Sources of CUPS drivers / PPDs</h3></div></div><div></div></div><p>
On the internet you can find now many thousand CUPS-PPD files
(with their companion filters), in many national languages,
supporting more than 1000 non-PostScript models.
-</p><div class="itemizedlist"><ul type="disc"><li><p><a href="http://wwwl.easysw.com/printpro/" target="_top">ESP
-PrintPro (http://wwwl.easysw.com/printpro/)</a> (commercial,
+</p><div class="itemizedlist"><a class="indexterm" name="id2929436"></a><a class="indexterm" name="id2929448"></a><ul type="disc"><li><p><a href="http://wwwl.easysw.com/printpro/" target="_top">ESP
+PrintPro</a> (commercial,
non-Free) is packaged with more than 3000 PPDs, ready for
successful use &quot;out of the box&quot; on Linux, Mac OS X, IBM-AIX,
-HP-UX, Sun-Solaris, SGI-IRIX, Compaq Tru64, Digital Unix and some
+HP-UX, Sun-Solaris, SGI-IRIX, Compaq Tru64, Digital UNIX and some
more commercial Unices (it is written by the CUPS developers
themselves and its sales help finance the further development of
CUPS, as they feed their creators).</p></li><li><p>the <a href="http://gimp-print.sourceforge.net/" target="_top">Gimp-Print-Project
-(http://gimp-print.sourceforge.net/)</a> (GPL, Free Software)
+</a> (GPL, Free Software)
provides around 140 PPDs (supporting nearly 400 printers, many driven
to photo quality output), to be used alongside the Gimp-Print CUPS
filters;</p></li><li><p><a href="http://www.turboprint.com/" target="_top">TurboPrint
-(http://www.turboprint.com/)</a> (Shareware, non-Free) supports
+</a> (Shareware, non-Free) supports
roughly the same amount of printers in excellent
quality;</p></li><li><p><a href="http://www-124.ibm.com/developerworks/oss/linux/projects/omni/" target="_top">OMNI
-(http://www-124.ibm.com/developerworks/oss/linux/projects/omni/)</a>
+</a>
(LPGL, Free) is a package made by IBM, now containing support for more
than 400 printers, stemming from the inheritance of IBM OS/2 Know-How
ported over to Linux (CUPS support is in a Beta-stage at
present);</p></li><li><p><a href="http://hpinkjet.sourceforge.net/" target="_top">HPIJS
-(http://hpinkjet.sourceforge.net/)</a> (BSD-style licenses, Free)
+</a> (BSD-style licenses, Free)
supports around 150 of HP's own printers and is also providing
excellent print quality now (currently available only via the Foomatic
path);</p></li><li><p><a href="http://www.linuxprinting.org/" target="_top">Foomatic/cupsomatic
-(http://www.linuxprinting.org/)</a> (LPGL, Free) from
+</a> (LPGL, Free) from
Linuxprinting.org are providing PPDs for practically every Ghostscript
filter known to the world (including Omni, Gimp-Print and
HPIJS).</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The cupsomatic/Foomatic trick from Linuxprinting.org works
differently from the other drivers. This is explained elsewhere in this
document.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966950"></a>Printing with Interface Scripts</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929572"></a>Printing with Interface Scripts</h3></div></div><div></div></div><p>
CUPS also supports the usage of &quot;interface scripts&quot; as known from
System V AT&amp;T printing systems. These are often used for PCL
printers, from applications that generate PCL print jobs. Interface
@@ -1231,61 +1142,60 @@ realm. On HP-UX platforms they are more often used. You can use any
working interface script on CUPS too. Just install the printer with
the <b class="command">-i</b> option:
</p><pre class="screen">
-
- lpadmin -p pclprinter -v socket://11.12.13.14:9100 -i /path/to/interface-script
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p pclprinter -v socket://11.12.13.14:9100 \
+ -i /path/to/interface-script</tt></b>
</pre><p>
Interface scripts might be the &quot;unknown animal&quot; to many. However,
with CUPS they provide the most easy way to plug in your own
custom-written filtering script or program into one specific print
queue (some information about the traditional usage of interface scripts is
to be found at <a href="http://playground.sun.com/printing/documentation/interface.html" target="_top">http://playground.sun.com/printing/documentation/interface.html</a>).
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967012"></a>Network printing (purely Windows)</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929667"></a>Network printing (purely Windows)</h2></div></div><div></div></div><p>
Network printing covers a lot of ground. To understand what exactly
goes on with Samba when it is printing on behalf of its Windows
clients, let's first look at a &quot;purely Windows&quot; setup: Windows clients
with a Windows NT print server.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967028"></a>From Windows Clients to an NT Print Server</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929677"></a>From Windows Clients to an NT Print Server</h3></div></div><div></div></div><p>
Windows clients printing to an NT-based print server have two
options. They may
-</p><div class="itemizedlist"><ul type="disc"><li><p>execute the driver locally and render the GDI output
+</p><a class="indexterm" name="id2929699"></a><a class="indexterm" name="id2929707"></a><div class="itemizedlist"><ul type="disc"><li><p>execute the driver locally and render the GDI output
(EMF) into the printer specific format on their own,
or</p></li><li><p>send the GDI output (EMF) to the server, where the
driver is executed to render the printer specific
output.</p></li></ul></div><p>
Both print paths are shown in the flowcharts below.
-</p></div><div xmlns:ns61="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967067"></a>Driver Execution on the Client</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929741"></a>Driver Execution on the Client</h3></div></div><div></div></div><p>
In the first case the print server must spool the file as &quot;raw&quot;,
meaning it shouldn't touch the jobfile and try to convert it in any
-way. This is what traditional Unix-based print server can do too; and
+way. This is what traditional UNIX-based print server can do too; and
at a better performance and more reliably than NT print server. This
is what most Samba administrators probably are familiar with. One
advantage of this setup is that this &quot;spooling-only&quot; print server may
-be used even if no driver(s) for Unix are available it is sufficient
+be used even if no driver(s) for UNIX are available it is sufficient
to have the Windows client drivers available and installed on the
clients.
-</p><ns61:p>
-</ns61:p><div class="figure"><a name="id2967092"></a><p class="title"><b>Figure19.11.Print Driver execution on the Client</b></p><div class="mediaobject"><img src="projdoc/imagefiles/11small.png" alt="Print Driver execution on the Client"></div></div><ns61:p>
-</ns61:p></div><div xmlns:ns62="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967126"></a>Driver Execution on the Server</h3></div></div><div></div></div><p>
+</p><p>
+ </p><div class="figure"><a name="small11"></a><p class="title"><b>Figure19.13.Print Driver execution on the Client</b></p><div class="mediaobject"><img src="projdoc/imagefiles/11small.png" width="270" alt="Print Driver execution on the Client"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929818"></a>Driver Execution on the Server</h3></div></div><div></div></div><a class="indexterm" name="id2929822"></a><a class="indexterm" name="id2929831"></a><a class="indexterm" name="id2929839"></a><a class="indexterm" name="id2929847"></a><a class="indexterm" name="id2929855"></a><p>
The other path executes the printer driver on the server. The clients
transfers print files in EMF format to the server. The server uses the
PostScript, PCL, ESC/P or other driver to convert the EMF file into
-the printer-specific language. It is not possible for Unix to do the
+the printer-specific language. It is not possible for UNIX to do the
same. Currently there is no program or method to convert a Windows
-client's GDI output on a Unix server into something a printer could
+client's GDI output on a UNIX server into something a printer could
understand.
-</p><ns62:p>
-</ns62:p><div class="figure"><a name="id2967148"></a><p class="title"><b>Figure19.12.Print Driver execution on the Server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/12small.png" alt="Print Driver execution on the Server"></div></div><ns62:p>
-</ns62:p><p>
+</p><p>
+ </p><div class="figure"><a name="small12"></a><p class="title"><b>Figure19.14.Print Driver execution on the Server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/12small.png" width="270" alt="Print Driver execution on the Server"></div></div><p>
+</p><p>
However, there is something similar possible with CUPS. Read on...
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967189"></a>Network Printing (Windows clients -- UNIX/Samba Print
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929936"></a>Network Printing (Windows clients -- UNIX/Samba Print
Servers)</h2></div></div><div></div></div><p>
Since UNIX print servers <span class="emphasis"><em>cannot</em></span> execute the Win32
program code on their platform, the picture is somewhat
different. However, this doesn't limit your options all that
much. In the contrary, you may have a way here to implement printing
features which are not possible otherwise.
-</p><div xmlns:ns63="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967210"></a>From Windows Clients to a CUPS/Samba Print Server</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929956"></a>From Windows Clients to a CUPS/Samba Print Server</h3></div></div><div></div></div><p>
Here is a simple recipe showing how you can take advantage of CUPS
powerful features for the benefit of your Windows network printing
clients:
@@ -1297,12 +1207,11 @@ printer is a non-PostScript model. It also requires that you have a
&quot;driver&quot; on the CUPS server.
</p><p>
Firstly, to enable CUPS based printing through Samba the
-following options should be set in your <tt class="filename">smb.conf</tt> file [globals]
+following options should be set in your <tt class="filename">smb.conf</tt> file [global]
section:
-</p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>printing = CUPS</tt></i></p></li><li><p><i class="parameter"><tt>printcap = CUPS</tt></i></p></li></ul></div><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p><a class="indexterm" name="id2930017"></a><i class="parameter"><tt>printing</tt></i> = cups</p></li><li><p><a class="indexterm" name="id2930035"></a><i class="parameter"><tt>printcap</tt></i> = cups</p></li></ul></div><p>
When these parameters are specified, all manually set print directives
-(like <i class="parameter"><tt>print command =...</tt></i>, or <i class="parameter"><tt>lppause
-command =...</tt></i>) in <tt class="filename">smb.conf</tt> (as well as
+(like <a class="indexterm" name="id2930055"></a><i class="parameter"><tt>print command</tt></i>, or <a class="indexterm" name="id2930069"></a><i class="parameter"><tt>lppause command</tt></i>) in <tt class="filename">smb.conf</tt> (as well as
in samba itself) will be ignored. Instead, Samba will directly
interface with CUPS through it's application program interface (API) -
as long as Samba has been compiled with CUPS library (libcups)
@@ -1311,12 +1220,12 @@ other print commands are set up, then printing will use the
<span class="emphasis"><em>System V</em></span> AT&amp;T command set, with the -oraw
option automatically passing through (if you want your own defined
print commands to work with a Samba that has CUPS support compiled in,
-simply use <i class="parameter"><tt>printing = sysv</tt></i>).
-</p><ns63:p>
-</ns63:p><div class="figure"><a name="id2967336"></a><p class="title"><b>Figure19.13.Printing via CUPS/samba server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/13small.png" alt="Printing via CUPS/samba server"></div></div><ns63:p>
-</ns63:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967370"></a>Samba receiving Jobfiles and passing them to CUPS</h3></div></div><div></div></div><p>
+simply use <a class="indexterm" name="id2930107"></a><i class="parameter"><tt>printing</tt></i> = sysv).
+</p><p>
+</p><div class="figure"><a name="small13"></a><p class="title"><b>Figure19.15.Printing via CUPS/samba server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/13small.png" width="270" alt="Printing via CUPS/samba server"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930169"></a>Samba receiving Jobfiles and passing them to CUPS</h3></div></div><div></div></div><p>
Samba <span class="emphasis"><em>must</em></span> use its own spool directory (it is set
-by a line similar to <i class="parameter"><tt>path = /var/spool/samba</tt></i>,
+by a line similar to <a class="indexterm" name="id2930184"></a><i class="parameter"><tt>path</tt></i> = /var/spool/samba,
in the <i class="parameter"><tt>[printers]</tt></i> or
<i class="parameter"><tt>[printername]</tt></i> section of
<tt class="filename">smb.conf</tt>). Samba receives the job in its own
@@ -1332,8 +1241,8 @@ A Windows user authenticates only to Samba (by whatever means is
configured). If Samba runs on the same host as CUPS, you only need to
allow &quot;localhost&quot; to print. If they run on different machines, you
need to make sure the Samba host gets access to printing on CUPS.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967448"></a>Network PostScript RIP: CUPS Filters on Server -- clients use
-PostScript Driver with CUPS-PPDs</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2930255"></a>Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</h2></div></div><div></div></div><a class="indexterm" name="id2930265"></a><a class="indexterm" name="id2930273"></a><a class="indexterm" name="id2930282"></a><p>
PPDs can control all print device options. They are usually provided
by the manufacturer; if you own a PostScript printer, that is. PPD
files (PostScript Printer Descriptions) are always a component of
@@ -1352,7 +1261,7 @@ or see if you have lphelp on your system). There are also some
different GUI frontends on Linux/UNIX, which can present PPD options
to users. PPD options are normally meant to be evaluated by the
PostScript RIP on the real PostScript printer.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967503"></a>PPDs for non-PS Printers on UNIX</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930344"></a>PPDs for non-PS Printers on UNIX</h3></div></div><div></div></div><a class="indexterm" name="id2930352"></a><p>
CUPS doesn't limit itself to &quot;real&quot; PostScript printers in its usage
of PPDs. The CUPS developers have extended the scope of the PPD
concept, to also describe available device and driver options for
@@ -1369,7 +1278,7 @@ the supplied PostScript. Thus CUPS lets all its printers appear as
PostScript devices to its clients, because it can act as a PostScript
RIP for those printers, processing the received PostScript code into a
proper raster print format.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967544"></a>PPDs for non-PS Printers on Windows</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930400"></a>PPDs for non-PS Printers on Windows</h3></div></div><div></div></div><a class="indexterm" name="id2930408"></a><p>
CUPS-PPDs can also be used on Windows-Clients, on top of a
&quot;core&quot; PostScript driver (now recommended is the &quot;CUPS PostScript
Driver for WindowsNT/2K/XP&quot;; you can also use the Adobe one, with
@@ -1385,13 +1294,13 @@ which always remain unfiltered per definition;</p></li><li><p>enable clients to
driver, even for many different target printers.</p></li></ul></div><p>
Using CUPS PPDs on Windows clients enables these to control
all print job settings just as a UNIX client can do too.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967609"></a>Windows Terminal Servers (WTS) as CUPS Clients</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2930476"></a>Windows Terminal Servers (WTS) as CUPS Clients</h2></div></div><div></div></div><p>
This setup may be of special interest to people experiencing major
problems in WTS environments. WTS need often a multitude of
non-PostScript drivers installed to run their clients' variety of
different printer models. This often imposes the price of much
increased instability.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967626"></a>Printer Drivers running in &quot;Kernel Mode&quot; cause many
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930493"></a>Printer Drivers running in &quot;Kernel Mode&quot; cause many
Problems</h3></div></div><div></div></div><p>
The reason is that in Win NT printer drivers run in &quot;Kernel
Mode&quot;, this introduces a high risk for the stability of the system
@@ -1405,10 +1314,10 @@ of Death&quot; on a regular basis?
PostScript drivers generally are very well tested. They are not known
to cause any problems, even though they run in Kernel Mode too. This
might be because there have so far only been 2 different PostScript
-drivers the ones from Adobe and the one from Microsoft. Both are
+drivers: the ones from Adobe and the one from Microsoft. Both are
very well tested and are as stable as you ever can imagine on
Windows. The CUPS driver is derived from the Microsoft one.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967661"></a>Workarounds impose Heavy Limitations</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930538"></a>Workarounds impose Heavy Limitations</h3></div></div><div></div></div><p>
In many cases, in an attempt to work around this problem, site
administrators have resorted to restrict the allowed drivers installed
on their WTS to one generic PCL- and one PostScript driver. This
@@ -1416,7 +1325,7 @@ however restricts the clients in the amount of printer options
available for them; often they can't get out more than simplex
prints from one standard paper tray, while their devices could do much
better, if driven by a different driver! )
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967682"></a>CUPS: a &quot;Magical Stone&quot;?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930560"></a>CUPS: a &quot;Magical Stone&quot;?</h3></div></div><div></div></div><a class="indexterm" name="id2930569"></a><a class="indexterm" name="id2930577"></a><p>
Using a PostScript driver, enabled with a CUPS-PPD, seems to be a very
elegant way to overcome all these shortcomings. There are, depending
on the version of Windows OS you use, up to 3 different PostScript
@@ -1428,8 +1337,8 @@ is a certain price for this too: a CUPS server acting as a PostScript
RIP for its clients requires more CPU and RAM than when just acting as
a &quot;raw spooling&quot; device. Plus, this setup is not yet widely tested,
although the first feedbacks look very promising.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967709"></a>PostScript Drivers with no major problems -- even in Kernel
-Mode</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930614"></a>PostScript Drivers with no major problems -- even in Kernel
+Mode</h3></div></div><div></div></div><a class="indexterm" name="id2930623"></a><p>
More recent printer drivers on W2K and XP don't run in Kernel mode
(unlike Win NT) any more. However, both operating systems can still
use the NT drivers, running in Kernel mode (you can roughly tell which
@@ -1445,14 +1354,14 @@ development efforts. This is what the CUPS people have done. The
license doesn't allow them to publish the whole of the source code.
However, they have released the &quot;diff&quot; under the GPL, and if you are
owner of an &quot;MS DDK for Win NT&quot;, you can check the driver yourself.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2967743"></a> Setting up CUPS for driver Download</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2930637"></a>Setting up CUPS for driver Download</h2></div></div><div></div></div><p>
As we have said before: all previously known methods to prepare client
printer drivers on the Samba server for download and &quot;Point'n'Print&quot;
convenience of Windows workstations are working with CUPS too. These
methods were described in the previous chapter. In reality, this is a
pure Samba business, and only relates to the Samba/Win client
relationship.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967762"></a><span class="emphasis"><em>cupsaddsmb</em></span>: the unknown Utility</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930710"></a><span class="emphasis"><em>cupsaddsmb</em></span>: the unknown Utility</h3></div></div><div></div></div><a class="indexterm" name="id2930721"></a><p>
The cupsaddsmb utility (shipped with all current CUPS versions) is an
alternative method to transfer printer drivers into the Samba
<i class="parameter"><tt>[print$]</tt></i> share. Remember, this share is where
@@ -1477,53 +1386,26 @@ job-billing)</p></li></ul></div><p>
However, currently only Windows NT, 2000, and XP are supported by the
CUPS drivers. You will need to get the respective part of Adobe driver
too if you need to support Windows 95, 98, and ME clients.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967853"></a>Prepare your <tt class="filename">smb.conf</tt> for
-cupsaddsmb</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930811"></a>Prepare your <tt class="filename">smb.conf</tt> for cupsaddsmb</h3></div></div><div></div></div><p>
Prior to running cupsaddsmb, you need the following settings in
<tt class="filename">smb.conf</tt>:
-</p><pre class="screen">
-
- [global]
- load printers = yes
- printing = cups
- printcap name = cups
-
- [printers]
- comment = All Printers
- path = /var/spool/samba
- browseable = no
- public = yes
- guest ok = yes # setting depends on your requirements
- writable = no
- printable = yes
- printer admin = root
-
- [print$]
- comment = Printer Drivers
- path = /etc/samba/drivers
- browseable = yes
- guest ok = no
- read only = yes
- write list = root
-
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2967900"></a>CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</h3></div></div><div></div></div><p>
-CUPS users may get the exactly same packages from<a href="http://www.cups.org/software.html" target="_top"><span class="emphasis"><em>http://www.cups.org/software.html</em></span></a>.
+</p><div class="example"><a name="id2930838"></a><p class="title"><b>Example19.3.smb.conf for cupsaddsmb usage</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>load printers = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = cups</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap name = cups</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = All Printers</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>public = yes</tt></i></td></tr><tr><td># setting depends on your requirements</td></tr><tr><td><i class="parameter"><tt>guest ok = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = root</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[print$]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Printer Drivers</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /etc/samba/drivers</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = no</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>write list = root</tt></i></td></tr></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931030"></a>CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</h3></div></div><div></div></div><a class="indexterm" name="id2931040"></a><p>
+CUPS users may get the exactly same packages from <a href="http://www.cups.org/software.html" target="_top">http://www.cups.org/software.html</a>.
It is a separate package from the CUPS base software files, tagged as
-<span class="emphasis"><em>CUPS 1.1.x Windows NT/2k/XP Printer Driver for SAMBA
+<span class="emphasis"><em>CUPS 1.1.x Windows NT/2k/XP Printer Driver for Samba
(tar.gz, 192k)</em></span>. The filename to download is
<tt class="filename">cups-samba-1.1.x.tar.gz</tt>. Upon untar-/unzip-ing,
it will reveal these files:
</p><pre class="screen">
-
-# tar xvzf cups-samba-1.1.19.tar.gz
-
- cups-samba.install
- cups-samba.license
- cups-samba.readme
- cups-samba.remove
- cups-samba.ss
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>tar xvzf cups-samba-1.1.19.tar.gz</tt></b>
+cups-samba.install
+cups-samba.license
+cups-samba.readme
+cups-samba.remove
+cups-samba.ss
</pre><p>
+<a class="indexterm" name="id2931102"></a>
+<a class="indexterm" name="id2931113"></a>
These have been packaged with the ESP meta packager software
&quot;EPM&quot;. The <tt class="filename">*.install</tt> and
<tt class="filename">*.remove</tt> files are simple shell scripts, which
@@ -1533,26 +1415,20 @@ too). Then it puts the content into
<tt class="filename">/usr/share/cups/drivers/</tt>. This content includes 3
files:
</p><pre class="screen">
-
-# tar tv cups-samba.ss
-
- cupsdrvr.dll
- cupsui.dll
- cups.hlp
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>tar tv cups-samba.ss</tt></b>
+cupsdrvr.dll
+cupsui.dll
+cups.hlp
</pre><p>
The <span class="emphasis"><em>cups-samba.install</em></span> shell scripts is easy to
handle:
</p><pre class="screen">
-
-# ./cups-samba.install
-
- [....]
- Installing software...
- Updating file permissions...
- Running post-install commands...
- Installation is complete.
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>./cups-samba.install</tt></b>
+[....]
+Installing software...
+Updating file permissions...
+Running post-install commands...
+Installation is complete.
</pre><p>
The script should automatically put the driver files into the
<tt class="filename">/usr/share/cups/drivers/</tt> directory.
@@ -1565,10 +1441,8 @@ copy/move the file (after running the
<b class="command">./cups-samba.install</b> script) manually to the
right place.
</p></div><pre class="screen">
-
- cp /usr/share/drivers/cups.hlp /usr/share/cups/drivers/
-
-</pre><p>
+<tt class="prompt">root# </tt><b class="userinput"><tt>cp /usr/share/drivers/cups.hlp /usr/share/cups/drivers/</tt></b>
+</pre><a class="indexterm" name="id2931290"></a><p>
This new CUPS PostScript driver is currently binary-only, but free of
charge. No complete source code is provided (yet). The reason is this:
it has been developed with the help of the <span class="emphasis"><em>Microsoft Driver
@@ -1577,42 +1451,27 @@ Studio 6. Driver developers are not allowed to distribute the whole of
the source code as Free Software. However, CUPS developers released
the &quot;diff&quot; in source code under the GPL, so anybody with a license of
Visual Studio and a DDK will be able to compile for him/herself.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968097"></a>Recognize the different Driver Files</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931268"></a>Recognize the different Driver Files</h3></div></div><div></div></div><p>
The CUPS drivers don't support the &quot;older&quot; Windows 95/98/ME, but only
the Windows NT/2000/XP client:
-</p><pre class="screen">
-
- [Windows NT, 2000, and XP are supported by:]
- cups.hlp
- cupsdrvr.dll
- cupsui.dll
-
-</pre><p>
+</p><p>Windows NT, 2000, and XP are supported by:</p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>cups.hlp</p></li><li><p>cupsdrvr.dll</p></li><li><p>cupsui.dll</p></li></ul></div><p>
+</p><p>
Adobe drivers are available for the older Windows 95/98/ME as well as
the Windows NT/2000/XP clients. The set of files is different for the
different platforms.
-</p><pre class="screen">
-
- [Windows 95, 98, and Me are supported by:]
- ADFONTS.MFM
- ADOBEPS4.DRV
- ADOBEPS4.HLP
- DEFPRTR2.PPD
- ICONLIB.DLL
- PSMON.DLL
-
- [Windows NT, 2000, and XP are supported by:]
- ADOBEPS5.DLL
- ADOBEPSU.DLL
- ADOBEPSU.HLP
+</p><p>Windows 95, 98, and Me are supported by:</p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>ADFONTS.MFM</p></li><li><p>ADOBEPS4.DRV</p></li><li><p>ADOBEPS4.HLP</p></li><li><p>DEFPRTR2.PPD</p></li><li><p>ICONLIB.DLL</p></li><li><p>PSMON.DLL</p></li></ul></div><p>
+</p><p>Windows NT, 2000, and XP are supported by:</p><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>ADOBEPS5.DLL</p></li><li><p>ADOBEPSU.DLL</p></li><li><p>ADOBEPSU.HLP</p></li></ul></div><p>
-</pre><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
If both, the Adobe driver files and the CUPS driver files for the
support of WinNT/2k/XP are present in , the Adobe ones will be ignored
and the CUPS ones will be used. If you prefer -- for whatever reason
-- to use Adobe-only drivers, move away the 3 CUPS driver files. The
Win95/98/ME clients use the Adobe drivers in any case.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968155"></a>Acquiring the Adobe Driver Files</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931460"></a>Acquiring the Adobe Driver Files</h3></div></div><div></div></div><p>
Acquiring the Adobe driver files seems to be unexpectedly difficult
for many users. They are not available on the Adobe website as single
files and the self-extracting and/or self-installing Windows-exe is
@@ -1625,12 +1484,12 @@ Generic PostScript printer. After this, the client's
where you can get them with smbclient from the CUPS host. A more
detailed description about this is in the next (the CUPS printing)
chapter.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968188"></a>ESP Print Pro Package of &quot;PostScript Driver for
-WinNT/2k/XP&quot;</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931493"></a>ESP Print Pro Package of &quot;PostScript Driver for
+WinNT/2k/XP&quot;</h3></div></div><div></div></div><a class="indexterm" name="id2931506"></a><p>
Users of the ESP Print Pro software are able to install their &quot;Samba
Drivers&quot; package for this purpose with no problem. Retrieve the driver
files from the normal download area of the ESP Print Pro software
-at<a href="http://www.easysw.com/software.html" target="_top">http://www.easysw.com/software.html</a>.
+at <a href="http://www.easysw.com/software.html" target="_top">http://www.easysw.com/software.html</a>.
You need to locate the link labelled &quot;SAMBA&quot; amongst the
<span class="emphasis"><em>Download Printer Drivers for ESP Print Pro 4.x</em></span>
area and download the package. Once installed, you can prepare any
@@ -1641,7 +1500,7 @@ driver files; i.e. mainly setup the <i class="parameter"><tt>[print$]</tt></i>
share, etc. The ESP Print Pro package includes the CUPS driver files
as well as a (licensed) set of Adobe drivers for the Windows 95/98/ME
client family.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968238"></a>Caveats to be considered</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931562"></a>Caveats to be considered</h3></div></div><div></div></div><a class="indexterm" name="id2931572"></a><p>
Once you have run the install script (and possibly manually
moved the <tt class="filename">cups.hlp</tt> file to
<tt class="filename">/usr/share/cups/drivers/</tt>), the driver is
@@ -1652,6 +1511,7 @@ tree with <span class="emphasis"><em>WIN40</em></span> and
&quot;cupsaddsmb&quot; (see also <b class="command">man cupsaddsmb</b> for
CUPS since release 1.1.16).
</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>
+<a class="indexterm" name="id2931636"></a>
You may need to put root into the smbpasswd file by running
<b class="command">smbpasswd</b>; this is especially important if you
should run this whole procedure for the first time, and are not
@@ -1661,8 +1521,8 @@ working in an environment where everything is configured for
Once the driver files are in the <i class="parameter"><tt>[print$]</tt></i> share
and are initialized, they are ready to be downloaded and installed by
the Win NT/2k/XP clients.
-</p><div xmlns:ns64="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns64:p>
-</ns64:p><div class="orderedlist"><ol type="1"><li><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="orderedlist"><ol type="1"><li><p>
Win 9x/ME clients won't work with the CUPS PostScript driver. For
these you'd still need to use the <tt class="filename">ADOBE*.*</tt>
drivers as previously.
@@ -1673,6 +1533,7 @@ installations in the <tt class="filename">/usr/share/cups/drivers/</tt>
directory. The new <span class="emphasis"><em>cupsaddsmb</em></span> (from 1.1.16) will
automatically prefer &quot;its own&quot; drivers if it finds both.
</p></li><li><p>
+<a class="indexterm" name="id2931734"></a>
Should your Win clients have had the old <tt class="filename">ADOBE*.*</tt>
files for the Adobe PostScript driver installed, the download and
installation of the new CUPS PostScript driver for Windows NT/2k/XP
@@ -1680,8 +1541,7 @@ will fail at first. You need to wipe the old driver from the clients
first. It is not enough to &quot;delete&quot; the printer, as the driver files
will still be kept by the clients and re-used if you try to re-install
the printer. To really get rid of the Adobe driver files on the
-clients, open the &quot;Printers&quot; folder (possibly via <span class="emphasis"><em>Start
---&gt; Settings --&gt; Control Panel --&gt; Printers</em></span>),
+clients, open the &quot;Printers&quot; folder (possibly via <span class="emphasis"><em>Start, Settings, Control Panel, Printers</em></span>),
right-click onto the folder background and select <span class="emphasis"><em>Server
Properties</em></span>. When the new dialog opens, select the
<span class="emphasis"><em>Drivers</em></span> tab. On the list select the driver you
@@ -1691,20 +1551,23 @@ which uses that particular driver. You need to &quot;delete&quot; all printers
using this driver in the &quot;Printers&quot; folder first. You will need
Administrator privileges to do this.
</p></li><li><p>
+<a class="indexterm" name="id2931795"></a>
Once you have successfully downloaded the CUPS PostScript driver to a
client, you can easily switch all printers to this one by proceeding
-as described elsewhere in the &quot;Samba HOWTO Collection&quot;: either change
+as described in <a href="printing.html" title="Chapter18.Classical Printing Support">the printing chapter</a>: either change
a driver for an existing printer by running the &quot;Printer Properties&quot;
dialog, or use <b class="command">rpcclient</b> with the
<b class="command">setdriver</b> sub-command.
-</p></li></ol></div><ns64:p>
-</ns64:p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968459"></a>What are the Benefits of using the &quot;CUPS PostScript Driver for
-Windows NT/2k/XP&quot; as compared to the Adobe Driver?</h3></div></div><div></div></div><p>
+</p></li></ol></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931837"></a>Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</h3></div></div><div></div></div><p>
You are interested in a comparison between the CUPS and the Adobe
PostScript drivers? For our purposes these are the most important
items which weigh in favor of the CUPS ones:
</p><div class="itemizedlist"><ul type="disc"><li><p>no hassle with the Adobe EULA</p></li><li><p>no hassle with the question &#8220;<span class="quote">Where do I
-get the ADOBE*.* driver files from?</span>&#8221;</p></li><li><p>the Adobe drivers (on request of the printer PPD
+get the ADOBE*.* driver files from?</span>&#8221;</p></li><li><p>
+<a class="indexterm" name="id2931878"></a>
+ the Adobe drivers (on request of the printer PPD
associated with them) often put a PJL header in front of the main
PostScript part of the print file. Thus the printfile starts with
<i class="parameter"><tt>&lt;1B &gt;%-12345X</tt></i> or
@@ -1713,8 +1576,10 @@ of <i class="parameter"><tt>%!PS</tt></i>). This leads to the
CUPS daemon auto-typing the incoming file as a print-ready file,
not initiating a pass through the &quot;pstops&quot; filter (to speak more
technically, it is not regarded as the generic MIME type
+<a class="indexterm" name="id2931916"></a>
<span class="emphasis"><em>application/postscript</em></span>, but as
the more special MIME type
+<a class="indexterm" name="id2931930"></a>
<span class="emphasis"><em>application/cups.vnd-postscript</em></span>),
which therefore also leads to the page accounting in
<span class="emphasis"><em>/var/log/cups/page_log</em></span> not
@@ -1744,7 +1609,7 @@ not disturb any other applications as they will regard it as a comment
and simply ignore it).</p></li><li><p>the CUPS PostScript driver will be the heart of the
fully fledged CUPS IPP client for Windows NT/2K/XP to be released soon
(probably alongside the first Beta release for CUPS
-1.2).</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968640"></a>Run &quot;cupsaddsmb&quot; (quiet Mode)</h3></div></div><div></div></div><p>
+1.2).</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932052"></a>Run &quot;cupsaddsmb&quot; (quiet Mode)</h3></div></div><div></div></div><a class="indexterm" name="id2932062"></a><a class="indexterm" name="id2932070"></a><p>
The cupsaddsmb command copies the needed files into your
<i class="parameter"><tt>[print$]</tt></i> share. Additionally, the PPD
associated with this printer is copied from
@@ -1753,124 +1618,111 @@ associated with this printer is copied from
Windows client installations via Point'n'Print. Before we can run the
command successfully, we need to be sure that we can authenticate
towards Samba. If you have a small network you are probably using user
-level security (<i class="parameter"><tt>security = user</tt></i>). Probably your
-root has already a Samba account. Otherwise, create it now, using
-<b class="command">smbpasswd</b>:
-</p><pre class="screen">
-
- # smbpasswd -a root
- New SMB password: [type in password 'secret']
- Retype new SMB password: [type in password 'secret']
-
-</pre><p>
+level security (<a class="indexterm" name="id2932107"></a><i class="parameter"><tt>security</tt></i> = user).
+</p><p>
Here is an example of a successfully run cupsaddsmb command.
</p><pre class="screen">
-
- # cupsaddsmb -U root infotec_IS2027
- Password for root required to access localhost via SAMBA: [type in password 'secret']
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -U root infotec_IS2027</tt></b>
+Password for root required to access localhost via Samba: <b class="userinput"><tt>['secret']</tt></b>
</pre><p>
To share <span class="emphasis"><em>all</em></span> printers and drivers, use the
-<i class="parameter"><tt>-a</tt></i> parameter instead of a printer name. Since
+<tt class="option">-a</tt> parameter instead of a printer name. Since
cupsaddsmb &quot;exports&quot; the printer drivers to Samba, it should be
obvious that it only works for queues with a CUPS driver associated.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968741"></a>Run &quot;cupsaddsmb&quot; with verbose Output</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932180"></a>Run &quot;cupsaddsmb&quot; with verbose Output</h3></div></div><div></div></div><a class="indexterm" name="id2932188"></a><p>
Probably you want to see what's going on. Use the
-<i class="parameter"><tt>-v</tt></i> parameter to get a more verbose output. The
+<tt class="option">-v</tt> parameter to get a more verbose output. The
output below was edited for better readability: all &quot;\&quot; at the end of
a line indicate that I inserted an artificial line break plus some
indentation here:
</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
You will see the root password for the Samba account printed on
-screen. If you use remote access, the password will go over the wire
-unencrypted!
-</p></div><pre class="screen">
-
- # cupsaddsmb -U root -v infotec_2105
- Password for root required to access localhost via SAMBA:
- Running command: smbclient //localhost/print\$ -N -U'root%secret' -c 'mkdir W32X86;put \
- /var/spool/cups/tmp/3e98bf2d333b5 W32X86/infotec_2105.ppd;put \
- /usr/share/cups/drivers/cupsdrvr.dll W32X86/cupsdrvr.dll;put \
- /usr/share/cups/drivers/cupsui.dll W32X86/cupsui.dll;put \
- /usr/share/cups/drivers/cups.hlp W32X86/cups.hlp'
- added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
- Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
- NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
- putting file /var/spool/cups/tmp/3e98bf2d333b5 as \W32X86/infotec_2105.ppd (2328.8 kb/s) \
- (average 2328.8 kb/s)
- putting file /usr/share/cups/drivers/cupsdrvr.dll as \W32X86/cupsdrvr.dll (9374.3 kb/s) \
- (average 5206.6 kb/s)
- putting file /usr/share/cups/drivers/cupsui.dll as \W32X86/cupsui.dll (8107.2 kb/s) \
- (average 5984.1 kb/s)
- putting file /usr/share/cups/drivers/cups.hlp as \W32X86/cups.hlp (3475.0 kb/s) \
- (average 5884.7 kb/s)
+screen.
+</p></div><a class="indexterm" name="id2932223"></a><a class="indexterm" name="id2932234"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -U root -v infotec_2105</tt></b>
+Password for root required to access localhost via GANDALF:
+Running command: smbclient //localhost/print\$ -N -U'root%secret' \
+ -c 'mkdir W32X86; \
+ put /var/spool/cups/tmp/3e98bf2d333b5 W32X86/infotec_2105.ppd; \
+ put /usr/share/cups/drivers/cupsdrvr.dll W32X86/cupsdrvr.dll; \
+ put /usr/share/cups/drivers/cupsui.dll W32X86/cupsui.dll; \
+ put /usr/share/cups/drivers/cups.hlp W32X86/cups.hlp'
+added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
+Domain=[CUPS-PRINT] OS=[UNIX] Server=[Samba 2.2.7a]
+NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
+putting file /var/spool/cups/tmp/3e98bf2d333b5 as \W32X86/infotec_2105.ppd
+putting file /usr/share/cups/drivers/cupsdrvr.dll as \W32X86/cupsdrvr.dll
+putting file /usr/share/cups/drivers/cupsui.dll as \W32X86/cupsui.dll
+putting file /usr/share/cups/drivers/cups.hlp as \W32X86/cups.hlp
- Running command: rpcclient localhost -N -U'root%secret' -c 'adddriver &quot;Windows NT x86&quot; \
- &quot;infotec_2105:cupsdrvr.dll:infotec_2105.ppd:cupsui.dll:cups.hlp:NULL: \
- RAW:NULL&quot;'
- cmd = adddriver &quot;Windows NT x86&quot; &quot;infotec_2105:cupsdrvr.dll:infotec_2105.ppd:cupsui.dll: \
- cups.hlp:NULL:RAW:NULL&quot;
- Printer Driver infotec_2105 successfully installed.
+Running command: rpcclient localhost -N -U'root%secret'
+ -c 'adddriver &quot;Windows NT x86&quot; \
+ &quot;infotec_2105:cupsdrvr.dll:infotec_2105.ppd:cupsui.dll:cups.hlp:NULL: \
+ RAW:NULL&quot;'
+cmd = adddriver &quot;Windows NT x86&quot; \
+ &quot;infotec_2105:cupsdrvr.dll:infotec_2105.ppd:cupsui.dll:cups.hlp:NULL:RAW:NULL&quot;
+Printer Driver infotec_2105 successfully installed.
- Running command: smbclient //localhost/print\$ -N -U'root%secret' -c 'mkdir WIN40;put \
- /var/spool/cups/tmp/3e98bf2d333b5 WIN40/infotec_2105.PPD; put \
- /usr/share/cups/drivers/ADFONTS.MFM WIN40/ADFONTS.MFM;put \
- /usr/share/cups/drivers/ADOBEPS4.DRV WIN40/ADOBEPS4.DRV;put \
- /usr/share/cups/drivers/ADOBEPS4.HLP WIN40/ADOBEPS4.HLP;put \
- /usr/share/cups/drivers/DEFPRTR2.PPD WIN40/DEFPRTR2.PPD;put \
- /usr/share/cups/drivers/ICONLIB.DLL
- WIN40/ICONLIB.DLL;put /usr/share/cups/drivers/PSMON.DLL WIN40/PSMON.DLL;'
+Running command: smbclient //localhost/print\$ -N -U'root%secret' \
+-c 'mkdir WIN40; \
+ put /var/spool/cups/tmp/3e98bf2d333b5 WIN40/infotec_2105.PPD; \
+ put /usr/share/cups/drivers/ADFONTS.MFM WIN40/ADFONTS.MFM; \
+ put /usr/share/cups/drivers/ADOBEPS4.DRV WIN40/ADOBEPS4.DRV; \
+ put /usr/share/cups/drivers/ADOBEPS4.HLP WIN40/ADOBEPS4.HLP; \
+ put /usr/share/cups/drivers/DEFPRTR2.PPD WIN40/DEFPRTR2.PPD; \
+ put /usr/share/cups/drivers/ICONLIB.DLL WIN40/ICONLIB.DLL; \
+ put /usr/share/cups/drivers/PSMON.DLL WIN40/PSMON.DLL;'
added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
- Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
+ Domain=[CUPS-PRINT] OS=[UNIX] Server=[Samba 2.2.7a]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
- putting file /var/spool/cups/tmp/3e98bf2d333b5 as \WIN40/infotec_2105.PPD (2328.8 kb/s) \
- (average 2328.8 kb/s)
- putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM (9368.0 kb/s) \
- (average 6469.6 kb/s)
- putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV (9958.2 kb/s) \
- (average 8404.3 kb/s)
- putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP (8341.5 kb/s) \
- (average 8398.6 kb/s)
- putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD (2195.9 kb/s) \
- (average 8254.3 kb/s)
- putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL (8239.9 kb/s) \
- (average 8253.6 kb/s)
- putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL (6222.2 kb/s) \
- (average 8188.5 kb/s)
+ putting file /var/spool/cups/tmp/3e98bf2d333b5 as \WIN40/infotec_2105.PPD
+ putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM
+ putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV
+ putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP
+ putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD
+ putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL
+ putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL
- Running command: rpcclient localhost -N -U'root%secret' -c 'adddriver &quot;Windows 4.0&quot; \
- &quot;infotec_2105:ADOBEPS4.DRV:infotec_2105.PPD:NULL:ADOBEPS4.HLP: \
- PSMON.DLL:RAW:ADOBEPS4.DRV,infotec_2105.PPD,ADOBEPS4.HLP,PSMON.DLL, \
- ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL&quot;'
+ Running command: rpcclient localhost -N -U'root%secret' \
+ -c 'adddriver &quot;Windows 4.0&quot; \
+ &quot;infotec_2105:ADOBEPS4.DRV:infotec_2105.PPD:NULL:ADOBEPS4.HLP: \
+ PSMON.DLL:RAW:ADOBEPS4.DRV,infotec_2105.PPD,ADOBEPS4.HLP,PSMON.DLL, \
+ ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL&quot;'
cmd = adddriver &quot;Windows 4.0&quot; &quot;infotec_2105:ADOBEPS4.DRV:infotec_2105.PPD:NULL: \
- ADOBEPS4.HLP:PSMON.DLL:RAW:ADOBEPS4.DRV,infotec_2105.PPD,ADOBEPS4.HLP, \
+ ADOBEPS4.HLP:PSMON.DLL:RAW:ADOBEPS4.DRV,infotec_2105.PPD,ADOBEPS4.HLP, \
PSMON.DLL,ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL&quot;
Printer Driver infotec_2105 successfully installed.
- Running command: rpcclient localhost -N -U'root%secret' \
- -c 'setdriver infotec_2105 infotec_2105'
+ Running command: rpcclient localhost -N -U'root%secret' \
+ -c 'setdriver infotec_2105 infotec_2105'
cmd = setdriver infotec_2105 infotec_2105
Successfully set infotec_2105 to driver infotec_2105.
</pre><p>
-If you look closely, you'll discover your root password was transfered
+If you look closely, you'll discover your root password was transferred
unencrypted over the wire, so beware! Also, if you look further her,
you'll discover error messages like NT_STATUS_OBJECT_NAME_COLLISION in
between. They occur, because the directories WIN40 and W32X86 already
existed in the <i class="parameter"><tt>[print$]</tt></i> driver download share
(from a previous driver installation). They are harmless here.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968884"></a>Understanding cupsaddsmb</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932401"></a>Understanding cupsaddsmb</h3></div></div><div></div></div><a class="indexterm" name="id2932410"></a><p>
What has happened? What did cupsaddsmb do? There are five stages of
the procedure
-</p><div class="orderedlist"><ol type="1"><li><p>call the CUPS server via IPP and request the
+</p><div class="orderedlist"><ol type="1"><li><p>
+ <a class="indexterm" name="id2932438"></a>
+ call the CUPS server via IPP and request the
driver files and the PPD file for the named printer;</p></li><li><p>store the files temporarily in the local
TEMPDIR (as defined in
<tt class="filename">cupsd.conf</tt>);</p></li><li><p>connect via smbclient to the Samba server's
<i class="parameter"><tt>[print$]</tt></i> share and put the files into the
share's WIN40 (for Win95/98/ME) and W32X86/ (for WinNT/2k/XP) sub
- directories;</p></li><li><p>connect via rpcclient to the Samba server and
+ directories;</p></li><li><p>
+<a class="indexterm" name="id2932482"></a>
+ connect via rpcclient to the Samba server and
execute the &quot;adddriver&quot; command with the correct
-parameters;</p></li><li><p>connect via rpcclient to the Samba server a second
+parameters;</p></li><li><p>
+<a class="indexterm" name="id2932501"></a>
+ connect via rpcclient to the Samba server a second
time and execute the &quot;setdriver&quot; command.</p></li></ol></div><p>
Note, that you can run the cupsaddsmb utility with parameters to
specify one remote host as Samba host and a second remote host as CUPS
@@ -1879,10 +1731,8 @@ good idea try it and see more clearly what is going on (though in real
life most people will have their CUPS and Samba servers run on the
same host):
</p><pre class="screen">
-
- # cupsaddsmb -H sambaserver -h cupsserver -v printername
-
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2968978"></a>How to recognize if cupsaddsm completed successfully</h3></div></div><div></div></div><p>
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -H sambaserver -h cupsserver -v printername</tt></b>
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932551"></a>How to recognize if cupsaddsmb completed successfully</h3></div></div><div></div></div><p>
You <span class="emphasis"><em>must</em></span> always check if the utility completed
successfully in all fields. You need as a minimum these 3 messages
amongst the output:
@@ -1893,7 +1743,7 @@ installed.</em></span> # (for the WIN40 == Win9x/ME
architecture...)</p></li><li><p><span class="emphasis"><em>Successfully set [printerXPZ] to driver
[printerXYZ].</em></span></p></li></ol></div><p>
These messages probably not easily recognized in the general
-output. If you run cupsaddsmb with the <i class="parameter"><tt>-a</tt></i>
+output. If you run cupsaddsmb with the <tt class="option">-a</tt>
parameter (which tries to prepare <span class="emphasis"><em>all</em></span> active CUPS
printer drivers for download), you might miss if individual printers
drivers had problems to install properly. Here a redirection of the
@@ -1903,32 +1753,30 @@ It is impossible to see any diagnostic output if you don't run
cupsaddsmb in verbose mode. Therefore we strongly recommend to not
use the default quiet mode. It will hide any problems from you which
might occur.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969065"></a>cupsaddsmb with a Samba PDC</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932633"></a>cupsaddsmb with a Samba PDC</h3></div></div><div></div></div><a class="indexterm" name="id2932642"></a><p>
You can't get the standard cupsaddsmb command to run on a Samba PDC?
You are asked for the password credential all over again and again and
the command just will not take off at all? Try one of these
variations:
</p><pre class="screen">
-
- # cupsaddsmb -U DOMAINNAME\\root -v printername
- # cupsaddsmb -H SAMBA-PDC -U DOMAINNAME\\root -v printername
- # cupsaddsmb -H SAMBA-PDC -U DOMAINNAME\\root -h cups-server -v printername
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -U MIDEARTH\\root -v printername</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -H SAURON -U MIDEARTH\\root -v printername</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -H SAURON -U MIDEARTH\\root -h cups-server -v printername</tt></b>
</pre><p>
(Note the two backslashes: the first one is required to
&quot;escape&quot; the second one).
-</p></div><div xmlns:ns65="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969100"></a>cupsaddsmb Flowchart</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932714"></a>cupsaddsmb Flowchart</h3></div></div><div></div></div><a class="indexterm" name="id2932722"></a><p>
Here is a chart about the procedures, commandflows and
dataflows of the &quot;cupaddsmb&quot; command. Note again: cupsaddsmb is
not intended to, and does not work with, &quot;raw&quot; queues!
-</p><ns65:p>
-</ns65:p><div class="figure"><a name="id2969117"></a><p class="title"><b>Figure19.14.cupsaddsmb flowchart</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="cupsaddsmb flowchart"></div></div><ns65:p>
-</ns65:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969151"></a>Installing the PostScript Driver on a Client</h3></div></div><div></div></div><p>
+</p><p>
+ </p><div class="figure"><a name="small14"></a><p class="title"><b>Figure19.16.cupsaddsmb flowchart</b></p><div class="mediaobject"><img src="projdoc/imagefiles/14small.png" width="270" alt="cupsaddsmb flowchart"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932789"></a>Installing the PostScript Driver on a Client</h3></div></div><div></div></div><a class="indexterm" name="id2932796"></a><p>
After cupsaddsmb completed, your driver is prepared for the clients to
use. Here are the steps you must perform to download and install it
via &quot;Point'n'Print&quot;. From a Windows client, browse to the CUPS/Samba
server;
-</p><div class="itemizedlist"><ul type="disc"><li><p>open the <span class="emphasis"><em>Printers</em></span>
+</p><div class="itemizedlist"><a class="indexterm" name="id2932816"></a><ul type="disc"><li><p>open the <span class="emphasis"><em>Printers</em></span>
share of Samba in Network Neighbourhood;</p></li><li><p>right-click on the printer in
question;</p></li><li><p>from the opening context-menu select
<span class="emphasis"><em>Install...</em></span> or
@@ -1943,6 +1791,7 @@ an application like Winword, the new printer will appears in a
<tt class="filename">\\SambaServer\PrinterName</tt> entry in the
dropdown list of available printers.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2932893"></a>
cupsaddsmb will only reliably work with CUPS version 1.1.15 or higher
and Samba from 2.2.4. If it doesn't work, or if the automatic printer
driver download to the clients doesn't succeed, you can still manually
@@ -1950,16 +1799,14 @@ install the CUPS printer PPD on top of the Adobe PostScript driver on
clients. Then point the client's printer queue to the Samba printer
share for a UNC type of connection:
</p></div><pre class="screen">
-
- net use lpt1: \\sambaserver\printershare /user:ntadmin
-
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>net use lpt1: \\sambaserver\printershare /user:ntadmin</tt></b>
</pre><p>
should you desire to use the CUPS networked PostScript RIP
functions. (Note that user &quot;ntadmin&quot; needs to be a valid Samba user
with the required privileges to access the printershare) This would
set up the printer connection in the traditional
<span class="emphasis"><em>LanMan</em></span> way (not using MS-RPC).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969266"></a>Avoiding critical PostScript Driver Settings on the
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932953"></a>Avoiding critical PostScript Driver Settings on the
Client</h3></div></div><div></div></div><p>
Soooo: printing works, but there are still problems. Most jobs print
well, some don't print at all. Some jobs have problems with fonts,
@@ -1985,7 +1832,7 @@ get a printout at all) (Adobe)</p></li><li><p>Sometimes you can choose <span cla
Level</em></span>: in case of problems try <span class="emphasis"><em>2</em></span>
instead of <span class="emphasis"><em>3</em></span> (the latest ESP Ghostscript package
handles Level 3 PostScript very well) (Adobe).</p></li><li><p>Say <span class="emphasis"><em>Yes</em></span> to <span class="emphasis"><em>PostScript
-Error Handler</em></span> (Adobe)</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2969400"></a>Installing PostScript Driver Files manually (using
+Error Handler</em></span> (Adobe)</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933086"></a>Installing PostScript Driver Files manually (using
rpcclient)</h2></div></div><div></div></div><p>
Of course you can run all the commands which are embedded into the
cupsaddsmb convenience utility yourself, one by one, and hereby upload
@@ -1993,9 +1840,18 @@ and prepare the driver files for future client downloads.
</p><div class="orderedlist"><ol type="1"><li><p>prepare Samba (a CUPS printqueue with the name of the
printer should be there. We are providing the driver
now);</p></li><li><p>copy all files to
-<i class="parameter"><tt>[print$]:</tt></i></p></li><li><p>run <b class="command">rpcclient adddriver</b>
-(for each client architecture you want to support):</p></li><li><p>run <b class="command">rpcclient
+ <i class="parameter"><tt>[print$]</tt></i></p></li><li><p>
+<a class="indexterm" name="id2933136"></a>
+ run <b class="command">rpcclient adddriver</b>
+(for each client architecture you want to support):</p></li><li><p>
+<a class="indexterm" name="id2933160"></a>
+ run <b class="command">rpcclient
setdriver.</b></p></li></ol></div><p>
+<a class="indexterm" name="id2933182"></a>
+<a class="indexterm" name="id2933193"></a>
+<a class="indexterm" name="id2933204"></a>
+<a class="indexterm" name="id2933215"></a>
+<a class="indexterm" name="id2933226"></a>
We are going to do this now. First, read the man page on &quot;rpcclient&quot;
to get a first idea. Look at all the printing related
sub-commands. <b class="command">enumprinters</b>,
@@ -2006,7 +1862,7 @@ the MS-RPC protocol. You can use it to query (and command) a Win NT
(or 2K/XP) PC too. MS-RPC is used by Windows clients, amongst other
things, to benefit from the &quot;Point'n'Print&quot; features. Samba can now
mimic this too.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969515"></a>A Check of the rpcclient man Page</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933288"></a>A Check of the rpcclient man Page</h3></div></div><div></div></div><p>
First let's have a little check of the rpcclient man page. Here are
two relevant passages:
</p><p>
@@ -2039,18 +1895,16 @@ printer driver associated with an installed printer. The printer
driver must already be correctly installed on the print server.
</p><p> See also the enumprinters and enumdrivers commands for
obtaining a list of installed printers and drivers.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969627"></a>Understanding the rpcclient man Page</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933403"></a>Understanding the rpcclient man page</h3></div></div><div></div></div><p>
The <span class="emphasis"><em>exact</em></span> format isn't made too clear by the man
page, since you have to deal with some parameters containing
spaces. Here is a better description for it. We have line-broken the
command and indicated the breaks with &quot;\&quot;. Usually you would type the
command in one line without the linebreaks:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2933427"></a><pre class="screen">
adddriver &quot;Architecture&quot; \
&quot;LongPrinterName:DriverFile:DataFile:ConfigFile:HelpFile:\
LanguageMonitorFile:DataType:ListOfFiles,Comma-separated&quot;
-
</pre><p>
What the man pages denotes as a simple &lt;config&gt;
keyword, does in reality consist of 8 colon-separated fields. The
@@ -2075,22 +1929,22 @@ box now, and access it from a UNIX workstation. We will query it
with <b class="command">rpcclient</b> to see what it tells us and
try to understand the man page more clearly which we've read just
now.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969706"></a>Producing an Example by querying a Windows Box</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933506"></a>Producing an Example by querying a Windows Box</h3></div></div><div></div></div><p>
+ <a class="indexterm" name="id2933518"></a>
+ <a class="indexterm" name="id2933528"></a>
We could run <b class="command">rpcclient</b> with a
<b class="command">getdriver</b> or a <b class="command">getprinter</b>
subcommand (in level 3 verbosity) against it. Just sit down at UNIX or
Linux workstation with the Samba utilities installed. Then type the
following command:
</p><pre class="screen">
-
- rpcclient -U'USERNAME%PASSWORD' NT-SERVER-NAME -c 'getdriver printername 3'
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U'USERNAME%PASSWORD' NT-SERVER-NAME -c 'getdriver printername 3'</tt></b>
</pre><p>
From the result it should become clear which is which. Here is an
example from my installation:
-</p><pre class="screen">
-
-# rpcclient -U'Danka%xxxx' W2KSERVER -c'getdriver &quot;DANKA InfoStream Virtual Printer&quot; 3'
+</p><a class="indexterm" name="id2933591"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U'Danka%xxxx' W2KSERVER \
+ -c'getdriver &quot;DANKA InfoStream Virtual Printer&quot; 3'</tt></b>
cmd = getdriver &quot;DANKA InfoStream Virtual Printer&quot; 3
[Windows NT x86]
@@ -2120,15 +1974,16 @@ Some printer drivers list additional files under the label
<span class="emphasis"><em>ListOfFiles,Comma-separated</em></span>. For the CUPS
PostScript drivers we don't need any (nor would we for the Adobe
PostScript driver): therefore the field will get a &quot;NULL&quot; entry.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969796"></a>What is required for adddriver and setdriver to succeed</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933674"></a>What is required for adddriver and setdriver to succeed</h3></div></div><div></div></div><p>
From the manpage (and from the quoted output
of <span class="emphasis"><em>cupsaddsmb</em></span>, above) it becomes clear that you
need to have certain conditions in order to make the manual uploading
and initializing of the driver files succeed. The two rpcclient
+<a class="indexterm" name="id2933693"></a>
subcommands (<b class="command">adddriver</b> and
<b class="command">setdriver</b>) need to encounter the following
pre-conditions to complete successfully:
-</p><div class="itemizedlist"><ul type="disc"><li><p>you are connected as &quot;printer admin&quot;, or root (note,
+</p><div class="itemizedlist"><ul type="disc"><li><p>you are connected as <a class="indexterm" name="id2933728"></a><i class="parameter"><tt>printer admin</tt></i>, or root (note,
that this is <span class="emphasis"><em>not</em></span> the &quot;Printer Operators&quot; group in
NT, but the <span class="emphasis"><em>printer admin</em></span> group, as defined in
the <i class="parameter"><tt>[global]</tt></i> section of
@@ -2143,7 +1998,10 @@ to escape the &quot;$&quot;: <b class="command">smbclient //sambaserver/print\$
root</b>);</p></li><li><p>the user you're connecting as must be able to write to
the <i class="parameter"><tt>[print$]</tt></i> share and create
subdirectories;</p></li><li><p>the printer you are going to setup for the Windows
-clients, needs to be installed in CUPS already;</p></li><li><p>the CUPS printer must be known to Samba, otherwise the
+clients, needs to be installed in CUPS already;</p></li><li><p>
+ <a class="indexterm" name="id2933842"></a>
+ <a class="indexterm" name="id2933853"></a>
+ the CUPS printer must be known to Samba, otherwise the
<b class="command">setdriver</b> subcommand fails with an
NT_STATUS_UNSUCCESSFUL error. To check if the printer is known by
Samba you may use the <b class="command">enumprinters</b> subcommand to
@@ -2151,30 +2009,25 @@ rpcclient. A long-standing bug prevented a proper update of the
printer list until every smbd process had received a SIGHUP or was
restarted. Remember this in case you've created the CUPS printer just
shortly ago and encounter problems: try restarting
-Samba.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2969958"></a>Manual Commandline Driver Installation in 15 little Steps</h3></div></div><div></div></div><p>
+Samba.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933889"></a>Manual Driver Installation in 15 Steps</h3></div></div><div></div></div><p>
We are going to install a printer driver now by manually executing all
required commands. As this may seem a rather complicated process at
first, we go through the procedure step by step, explaining every
single action item as it comes up.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2969975"></a>First Step: Install the Printer on CUPS</h4></div></div><div></div></div><pre class="screen">
-
-# lpadmin -p mysmbtstprn -v socket://10.160.51.131:9100 -E -P /home/kurt/canonIR85.ppd
-
+</p><div class="procedure"><p class="title"><b>Procedure19.1.Manual Driver Installation installation</b></p><ol type="1"><li><p class="title"><b>Install the Printer on CUPS</b></p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p mysmbtstprn -v socket://10.160.51.131:9100 -E -P canonIR85.ppd</tt></b>
</pre><p>
This installs printer with the name <span class="emphasis"><em>mysmbtstprn</em></span>
to the CUPS system. The printer is accessed via a socket
(a.k.a. JetDirect or Direct TCP/IP) connection. You need to be root
for this step
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970005"></a>Second Step (optional): Check if the Printer is recognized by
-Samba</h4></div></div><div></div></div><pre class="screen">
-
- # rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep -C2 mysmbtstprn
-
- flags:[0x800000]
- name:[\\kde-bitshop\mysmbtstprn]
- description:[\\kde-bitshop\mysmbtstprn,,mysmbtstprn]
- comment:[mysmbtstprn]
-
+</p></li><li><p class="title"><b>(optional) Check if the Printer is recognized by
+Samba</b></p><a class="indexterm" name="id2933968"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep -C2 mysmbtstprn</tt></b>
+flags:[0x800000]
+name:[\\kde-bitshop\mysmbtstprn]
+description:[\\kde-bitshop\mysmbtstprn,,mysmbtstprn]
+comment:[mysmbtstprn]
</pre><p>
This should show the printer in the list. If not, stop and re-start
the Samba daemon (smbd), or send a HUP signal: <b class="command">kill -HUP
@@ -2186,24 +2039,25 @@ already. You need to know root's Samba password (as set by the
following steps. Alternatively you can authenticate as one of the
users from the &quot;write list&quot; as defined in <tt class="filename">smb.conf</tt> for
<i class="parameter"><tt>[print$]</tt></i>.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970068"></a>Third Step (optional): Check if Samba knows a Driver for the
-Printer</h4></div></div><div></div></div><pre class="screen">
-
-# rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver
- drivername:[]
+</p></li><li><p class="title"><b>(optional) Check if Samba knows a Driver for the
+Printer</b></p><a class="indexterm" name="id2934063"></a><a class="indexterm" name="id2934074"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost \
+ | grep driver </tt></b>
+drivername:[]
+
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost \
+ | grep -C4 driv</tt></b>
+servername:[\\kde-bitshop]
+printername:[\\kde-bitshop\mysmbtstprn]
+sharename:[mysmbtstprn]
+portname:[Samba Printer Port]
+drivername:[]
+comment:[mysmbtstprn]
+location:[]
+sepfile:[]
+printprocessor:[winprint]
-# rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep -C4 driv
- servername:[\\kde-bitshop]
- printername:[\\kde-bitshop\mysmbtstprn]
- sharename:[mysmbtstprn]
- portname:[Samba Printer Port]
- drivername:[]
- comment:[mysmbtstprn]
- location:[]
- sepfile:[]
- printprocessor:[winprint]
-
-# rpcclient -U root%xxxx -c 'getdriver mysmbtstprn' localhost
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U root%xxxx -c 'getdriver mysmbtstprn' localhost</tt></b>
result was WERR_UNKNOWN_PRINTER_DRIVER
</pre><p>
@@ -2212,16 +2066,14 @@ This step was done for the purpose of demonstrating this condition. An
attempt to connect to the printer at this stage will prompt the
message along the lines: &quot;The server has not the required printer
driver installed&quot;.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970106"></a>Fourth Step: Put all required Driver Files into Samba's
-[print$]</h4></div></div><div></div></div><pre class="screen">
-
-# smbclient //localhost/print\$ -U 'root%xxxx' \
- -c 'cd W32X86; \
- put /etc/cups/ppd/mysmbtstprn.ppd mysmbtstprn.PPD; \
- put /usr/share/cups/drivers/cupsui.dll cupsui.dll; \
- put /usr/share/cups/drivers/cupsdrvr.dll cupsdrvr.dll; \
- put /usr/share/cups/drivers/cups.hlp cups.hlp'
-
+</p></li><li><p class="title"><b>Put all required Driver Files into Samba's
+[print$]</b></p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //localhost/print\$ -U 'root%xxxx' \
+ -c 'cd W32X86; \
+ put /etc/cups/ppd/mysmbtstprn.ppd mysmbtstprn.PPD; \
+ put /usr/share/cups/drivers/cupsui.dll cupsui.dll; \
+ put /usr/share/cups/drivers/cupsdrvr.dll cupsdrvr.dll; \
+ put /usr/share/cups/drivers/cups.hlp cups.hlp'</tt></b>
</pre><p>
(Note that this command should be entered in one long single
line. Line-breaks and the line-end indicating &quot;\&quot; has been inserted
@@ -2231,31 +2083,26 @@ present in the <i class="parameter"><tt>[print$]</tt></i> share. However, client
would still not be able to install them, because Samba does not yet
treat them as driver files. A client asking for the driver would still
be presented with a &quot;not installed here&quot; message.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970157"></a>Fifth Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen">
-
-# ls -l /etc/samba/drivers/W32X86/
- total 669
- drwxr-sr-x 2 root ntadmin 532 May 25 23:08 2
- drwxr-sr-x 2 root ntadmin 670 May 16 03:15 3
- -rwxr--r-- 1 root ntadmin 14234 May 25 23:21 cups.hlp
- -rwxr--r-- 1 root ntadmin 278380 May 25 23:21 cupsdrvr.dll
- -rwxr--r-- 1 root ntadmin 215848 May 25 23:21 cupsui.dll
- -rwxr--r-- 1 root ntadmin 169458 May 25 23:21 mysmbtstprn.PPD
-
+</p></li><li><p class="title"><b>Verify where the Driver Files are now</b></p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l /etc/samba/drivers/W32X86/</tt></b>
+total 669
+drwxr-sr-x 2 root ntadmin 532 May 25 23:08 2
+drwxr-sr-x 2 root ntadmin 670 May 16 03:15 3
+-rwxr--r-- 1 root ntadmin 14234 May 25 23:21 cups.hlp
+-rwxr--r-- 1 root ntadmin 278380 May 25 23:21 cupsdrvr.dll
+-rwxr--r-- 1 root ntadmin 215848 May 25 23:21 cupsui.dll
+-rwxr--r-- 1 root ntadmin 169458 May 25 23:21 mysmbtstprn.PPD
</pre><p>
The driver files now are in the W32X86 architecture &quot;root&quot; of
<i class="parameter"><tt>[print$]</tt></i>.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970195"></a>Sixth Step: Tell Samba that these are
+</p></li><li><p class="title"><b>Tell Samba that these are
<span class="emphasis"><em>Driver</em></span> Files
-(<b class="command">adddriver</b>)</h4></div></div><div></div></div><pre class="screen">
-
-# rpcclient -Uroot%xxxx -c `adddriver &quot;Windows NT x86&quot; &quot;mydrivername: \
- cupsdrvr.dll:mysmbtstprn.PPD: \
- cupsui.dll:cups.hlp:NULL:RAW[<span class="citation">:</span>]NULL&quot; \
- localhost
-
- Printer Driver mydrivername successfully installed.
-
+(<b class="command">adddriver</b>)</b></p><a class="indexterm" name="id2934292"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c `adddriver &quot;Windows NT x86&quot; &quot;mydrivername: \
+ cupsdrvr.dll:mysmbtstprn.PPD: \
+ cupsui.dll:cups.hlp:NULL:RAW:NULL&quot; \
+ localhost</tt></b>
+Printer Driver mydrivername successfully installed.
</pre><p>
Note that your cannot repeat this step if it fails. It could fail even
as a result of a simple typo. It will most likely have moved a part of
@@ -2266,49 +2113,41 @@ driver. It is normally a good idea to use the same name as is used for
the printername; however, in big installations you may use this driver
for a number of printers which have obviously different names. So the
name of the driver is not fixed.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970250"></a>Seventh Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen">
-
-# ls -l /etc/samba/drivers/W32X86/
- total 1
- drwxr-sr-x 2 root ntadmin 532 May 25 23:22 2
- drwxr-sr-x 2 root ntadmin 670 May 16 03:15 3
-
-
-# ls -l /etc/samba/drivers/W32X86/2
- total 5039
- [....]
- -rwxr--r-- 1 root ntadmin 14234 May 25 23:21 cups.hlp
- -rwxr--r-- 1 root ntadmin 278380 May 13 13:53 cupsdrvr.dll
- -rwxr--r-- 1 root ntadmin 215848 May 13 13:53 cupsui.dll
- -rwxr--r-- 1 root ntadmin 169458 May 25 23:21 mysmbtstprn.PPD
-
+</p></li><li><p class="title"><b>Verify where the Driver Files are now</b></p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l /etc/samba/drivers/W32X86/</tt></b>
+total 1
+drwxr-sr-x 2 root ntadmin 532 May 25 23:22 2
+drwxr-sr-x 2 root ntadmin 670 May 16 03:15 3
+
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l /etc/samba/drivers/W32X86/2</tt></b>
+total 5039
+[....]
+-rwxr--r-- 1 root ntadmin 14234 May 25 23:21 cups.hlp
+-rwxr--r-- 1 root ntadmin 278380 May 13 13:53 cupsdrvr.dll
+-rwxr--r-- 1 root ntadmin 215848 May 13 13:53 cupsui.dll
+-rwxr--r-- 1 root ntadmin 169458 May 25 23:21 mysmbtstprn.PPD
</pre><p>
Notice how step 6 did also move the driver files to the appropriate
subdirectory. Compare with the situation after step 5.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970283"></a>Eighth Step (optional): Verify if Samba now recognizes the
-Driver</h4></div></div><div></div></div><pre class="screen">
-
-# rpcclient -Uroot%xxxx -c 'enumdrivers 3' localhost | grep -B2 -A5 mydrivername
-
- Printer Driver Info 3:
- Version: [2]
- Driver Name: [mydrivername]
- Architecture: [Windows NT x86]
- Driver Path: [\\kde-bitshop\print$\W32X86\2\cupsdrvr.dll]
- Datafile: [\\kde-bitshop\print$\W32X86\2\mysmbtstprn.PPD]
- Configfile: [\\kde-bitshop\print$\W32X86\2\cupsui.dll]
- Helpfile: [\\kde-bitshop\print$\W32X86\2\cups.hlp]
-
+</p></li><li><p class="title"><b>(optional) Verify if Samba now recognizes the
+Driver</b></p><a class="indexterm" name="id2934435"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'enumdrivers 3' localhost \
+ | grep -B2 -A5 mydrivername</tt></b>
+Printer Driver Info 3:
+Version: [2]
+Driver Name: [mydrivername]
+Architecture: [Windows NT x86]
+Driver Path: [\\kde-bitshop\print$\W32X86\2\cupsdrvr.dll]
+Datafile: [\\kde-bitshop\print$\W32X86\2\mysmbtstprn.PPD]
+Configfile: [\\kde-bitshop\print$\W32X86\2\cupsui.dll]
+Helpfile: [\\kde-bitshop\print$\W32X86\2\cups.hlp]
</pre><p>
Remember, this command greps for the name you did choose for the
driver in step Six. This command must succeed before you can proceed.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970316"></a>Ninth Step: Tell Samba which Printer should use these Driver
-Files (<b class="command">setdriver</b>)</h4></div></div><div></div></div><pre class="screen">
-
-# rpcclient -Uroot%xxxx -c 'setdriver mysmbtstprn mydrivername' localhost
-
- Successfully set mysmbtstprn to driver mydrivername
-
+</p></li><li><p class="title"><b>Tell Samba which Printer should use these Driver
+Files (<b class="command">setdriver</b>)</b></p><a class="indexterm" name="id2934499"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'setdriver mysmbtstprn mydrivername' localhost</tt></b>
+Successfully set mysmbtstprn to driver mydrivername
</pre><p>
Since you can bind any printername (=printqueue) to any driver, this
is a very convenient way to setup many queues which use the same
@@ -2316,50 +2155,53 @@ driver. You don't need to repeat all the previous steps for the
setdriver command to succeed. The only pre-conditions are:
<b class="command">enumdrivers</b> must find the driver and
<b class="command">enumprinters</b> must find the printer.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970366"></a>Tenth Step (optional): Verify if Samba has this Association
-recognized</h4></div></div><div></div></div><pre class="screen">
-
-# rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver
- drivername:[mydrivername]
+</p></li><li><p class="title"><b>(optional) Verify if Samba has this Association
+recognized</b></p><a class="indexterm" name="id2934568"></a><a class="indexterm" name="id2934579"></a><a class="indexterm" name="id2934590"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost \
+ | grep driver</tt></b>
+drivername:[mydrivername]
-# rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep -C4 driv
- servername:[\\kde-bitshop]
- printername:[\\kde-bitshop\mysmbtstprn]
- sharename:[mysmbtstprn]
- portname:[Done]
- drivername:[mydrivername]
- comment:[mysmbtstprn]
- location:[]
- sepfile:[]
- printprocessor:[winprint]
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost \
+ | grep -C4 driv</tt></b>
+servername:[\\kde-bitshop]
+printername:[\\kde-bitshop\mysmbtstprn]
+sharename:[mysmbtstprn]
+portname:[Done]
+drivername:[mydrivername]
+comment:[mysmbtstprn]
+location:[]
+sepfile:[]
+printprocessor:[winprint]
-# rpcclient -U root%xxxx -c 'getdriver mysmbtstprn' localhost
- [Windows NT x86]
- Printer Driver Info 3:
- Version: [2]
- Driver Name: [mydrivername]
- Architecture: [Windows NT x86]
- Driver Path: [\\kde-bitshop\print$\W32X86\2\cupsdrvr.dll]
- Datafile: [\\kde-bitshop\print$\W32X86\2\mysmbtstprn.PPD]
- Configfile: [\\kde-bitshop\print$\W32X86\2\cupsui.dll]
- Helpfile: [\\kde-bitshop\print$\W32X86\2\cups.hlp]
- Monitorname: []
- Defaultdatatype: [RAW]
- Monitorname: []
- Defaultdatatype: [RAW]
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U root%xxxx -c 'getdriver mysmbtstprn' localhost</tt></b>
+[Windows NT x86]
+Printer Driver Info 3:
+ Version: [2]
+ Driver Name: [mydrivername]
+ Architecture: [Windows NT x86]
+ Driver Path: [\\kde-bitshop\print$\W32X86\2\cupsdrvr.dll]
+ Datafile: [\\kde-bitshop\print$\W32X86\2\mysmbtstprn.PPD]
+ Configfile: [\\kde-bitshop\print$\W32X86\2\cupsui.dll]
+ Helpfile: [\\kde-bitshop\print$\W32X86\2\cups.hlp]
+ Monitorname: []
+ Defaultdatatype: [RAW]
+ Monitorname: []
+ Defaultdatatype: [RAW]
-# rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep mysmbtstprn
- name:[\\kde-bitshop\mysmbtstprn]
- description:[\\kde-bitshop\mysmbtstprn,mydrivername,mysmbtstprn]
- comment:[mysmbtstprn]
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep mysmbtstprn</tt></b>
+ name:[\\kde-bitshop\mysmbtstprn]
+ description:[\\kde-bitshop\mysmbtstprn,mydrivername,mysmbtstprn]
+ comment:[mysmbtstprn]
</pre><p>
+<a class="indexterm" name="id2934682"></a>
Compare these results with the ones from steps 2 and 3. Note that
every single of these commands show the driver is installed. Even
the <b class="command">enumprinters</b> command now lists the driver
on the &quot;description&quot; line.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970422"></a>Eleventh Step (optional): Tickle the Driver into a correct
-Device Mode</h4></div></div><div></div></div><p>
+</p></li><li><p class="title"><b>(optional) Tickle the Driver into a correct
+Device Mode</b></p><p>
+<a class="indexterm" name="id2934720"></a>
You certainly know how to install the driver on the client. In case
you are not particularly familiar with Windows, here is a short
recipe: browse the Network Neighbourhood, go to the Samba server, look
@@ -2376,39 +2218,32 @@ It is important that you execute this step as a Samba printer admin
to do this on Windows XP. It uses a commandline, which you may type
into the &quot;DOS box&quot; (type root's smbpassword when prompted):
</p><pre class="screen">
-
- C:\&gt; runas /netonly /user:root &quot;rundll32 printui.dll,PrintUIEntry /in /n \\sambacupsserver\mysmbtstprn&quot;
-
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>runas /netonly /user:root &quot;rundll32 printui.dll,PrintUIEntry /in /n\
+ \\sambacupsserver\mysmbtstprn&quot;</tt></b>
</pre><p>
-Change any printer setting once (like <span class="emphasis"><em>&quot;portrait&quot;
---&gt; &quot;landscape&quot;</em></span>), click &quot;Apply&quot;; change the setting
+Change any printer setting once (like changing <span class="emphasis"><em>&quot;portrait&quot; to
+ &quot;landscape&quot;</em></span>), click <span class="guibutton">Apply</span>; change the setting
back.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970484"></a>Twelfth Step: Install the Printer on a Client
-(&quot;Point'n'Print&quot;)</h4></div></div><div></div></div><pre class="screen">
-
- C:\&gt; rundll32 printui.dll,PrintUIEntry /in /n &quot;\\sambacupsserver\mysmbtstprn&quot;
-
+</p></li><li><p class="title"><b>Install the Printer on a Client
+(&quot;Point'n'Print&quot;)</b></p><a class="indexterm" name="id2934817"></a><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>rundll32 printui.dll,PrintUIEntry /in /n &quot;\\sambacupsserver\mysmbtstprn&quot;</tt></b>
</pre><p>
If it doesn't work it could be a permission problem with the
<i class="parameter"><tt>[print$]</tt></i> share.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970515"></a>Thirteenth Step (optional): Print a Test Page</h4></div></div><div></div></div><pre class="screen">
-
- C:\&gt; rundll32 printui.dll,PrintUIEntry /p /n &quot;\\sambacupsserver\mysmbtstprn&quot;
-
+</p></li><li><p class="title"><b>Thirteenth Step (optional): Print a Test Page</b></p><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>rundll32 printui.dll,PrintUIEntry /p /n &quot;\\sambacupsserver\mysmbtstprn&quot;</tt></b>
</pre><p>
Then hit [TAB] 5 times, [ENTER] twice, [TAB] once and [ENTER] again
and march to the printer.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970540"></a>Fourteenth Step (recommended): Study the Test Page</h4></div></div><div></div></div><p>
+</p></li><li><p class="title"><b>Fourteenth Step (recommended): Study the Test Page</b></p><p>
Hmmm.... just kidding! By now you know everything about printer
installations and you don't need to read a word. Just put it in a
frame and bolt it to the wall with the heading &quot;MY FIRST
RPCCLIENT-INSTALLED PRINTER&quot; - why not just throw it away!
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2970558"></a>Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your
-Success</h4></div></div><div></div></div><pre class="screen">
-
-# echo &quot;Cheeeeerioooooo! Success...&quot; &gt;&gt; /var/log/samba/log.smbd
-
-</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2970578"></a>Troubleshooting revisited</h3></div></div><div></div></div><p>
+</p></li><li><p class="title"><b>Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your
+Success</b></p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>echo &quot;Cheeeeerioooooo! Success...&quot; &gt;&gt; /var/log/samba/log.smbd</tt></b>
+</pre></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2934958"></a>Troubleshooting revisited</h3></div></div><div></div></div><p>
The setdriver command will fail, if in Samba's mind the queue is not
already there. You had promising messages about the:
</p><pre class="screen">
@@ -2423,7 +2258,8 @@ a disappointing message like this one beneath?
result was NT_STATUS_UNSUCCESSFUL
</pre><p>
-It is not good enough that <span class="emphasis"><em>you</em></span>
+<a class="indexterm" name="id2935002"></a>
+It is not good enough that you
can see the queue <span class="emphasis"><em>in CUPS</em></span>, using
the <b class="command">lpstat -p ir85wm</b> command. A
bug in most recent versions of Samba prevents the proper update of
@@ -2432,26 +2268,35 @@ fails unless you re-start Samba or send a HUP to all smbd
processes. To verify if this is the reason why Samba doesn't
execute the setdriver command successfully, check if Samba &quot;sees&quot;
the printer:
-</p><pre class="screen">
-
-# rpcclient transmeta -N -U'root%secret' -c 'enumprinters 0'| grep ir85wm
+</p><a class="indexterm" name="id2935035"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient transmeta -N -U'root%secret' -c 'enumprinters 0'| grep ir85wm</tt></b>
printername:[ir85wm]
-
</pre><p>
An alternative command could be this:
-</p><pre class="screen">
-
-# rpcclient transmeta -N -U'root%secret' -c 'getprinter ir85wm'
+</p><a class="indexterm" name="id2935074"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient transmeta -N -U'root%secret' -c 'getprinter ir85wm' </tt></b>
cmd = getprinter ir85wm
flags:[0x800000]
name:[\\transmeta\ir85wm]
description:[\\transmeta\ir85wm,ir85wm,DPD]
comment:[CUPS PostScript-Treiber for WinNT/2K/XP]
-
</pre><p>
BTW, you can use these commands, plus a few more, of course,
to install drivers on remote Windows NT print servers too!
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2970680"></a>The printing <tt class="filename">*.tdb</tt> Files</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2935118"></a>The printing <tt class="filename">*.tdb</tt> Files</h2></div></div><div></div></div><p>
+<a class="indexterm" name="id2935136"></a>
+<a class="indexterm" name="id2935144"></a>
+<a class="indexterm" name="id2935155"></a>
+<a class="indexterm" name="id2935166"></a>
+<a class="indexterm" name="id2935178"></a>
+<a class="indexterm" name="id2935189"></a>
+<a class="indexterm" name="id2935200"></a>
+<a class="indexterm" name="id2935211"></a>
+<a class="indexterm" name="id2935222"></a>
+<a class="indexterm" name="id2935233"></a>
+<a class="indexterm" name="id2935245"></a>
+<a class="indexterm" name="id2935256"></a>
+<a class="indexterm" name="id2935267"></a>
Some mystery is associated with the series of files with a
tdb-suffix appearing in every Samba installation. They are
<tt class="filename">connections.tdb</tt>,
@@ -2466,12 +2311,12 @@ tdb-suffix appearing in every Samba installation. They are
<tt class="filename">ntprinters.tdb</tt>,
<tt class="filename">sessionid.tdb</tt> and
<tt class="filename">secrets.tdb</tt>. What is their purpose?
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2970783"></a>Trivial DataBase Files</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935364"></a>Trivial DataBase Files</h3></div></div><div></div></div><a class="indexterm" name="id2935372"></a><p>
A Windows NT (Print) Server keeps track of all information needed to serve
its duty toward its clients by storing entries in the Windows
&quot;Registry&quot;. Client queries are answered by reading from the registry,
Administrator or user configuration settings are saved by writing into
-the Registry. Samba and Unix obviously don't have such a kind of
+the Registry. Samba and UNIX obviously don't have such a kind of
Registry. Samba instead keeps track of all client related information in a
series of <tt class="filename">*.tdb</tt> files. (TDB = Trivial Data
Base). These are often located in <tt class="filename">/var/lib/samba/</tt>
@@ -2479,7 +2324,7 @@ or <tt class="filename">/var/lock/samba/</tt> . The printing related files
are <tt class="filename">ntprinters.tdb</tt>,
<tt class="filename">printing.tdb</tt>,<tt class="filename">ntforms.tdb</tt> and
<tt class="filename">ntdrivers.tdb</tt>.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2970853"></a>Binary Format</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935456"></a>Binary Format</h3></div></div><div></div></div><p>
<tt class="filename">*.tdb</tt> files are not human readable. They are
written in a binary format. &quot;Why not ASCII?&quot;, you may ask. &quot;After all,
ASCII configuration files are a good and proofed tradition on UNIX.&quot;
@@ -2492,7 +2337,7 @@ same time</em></span>. The file format of Samba's
<tt class="filename">*.tdb</tt> files allows for this provision. Many smbd
processes may write to the same <tt class="filename">*.tdb</tt> file at the
same time. This wouldn't be possible with pure ASCII files.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2970915"></a>Losing <tt class="filename">*.tdb</tt> Files</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935520"></a>Losing <tt class="filename">*.tdb</tt> Files</h3></div></div><div></div></div><p>
It is very important that all <tt class="filename">*.tdb</tt> files remain
consistent over all write and read accesses. However, it may happen
that these files <span class="emphasis"><em>do</em></span> get corrupted. (A
@@ -2502,13 +2347,12 @@ etc.). In cases of trouble, a deletion of the old printing-related
<tt class="filename">*.tdb</tt> files may be the only option. You need to
re-create all print related setup after that. Or you have made a
backup of the <tt class="filename">*.tdb</tt> files in time.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2970974"></a>Using <span class="emphasis"><em>tdbbackup</em></span></h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935579"></a>Using <span class="emphasis"><em>tdbbackup</em></span></h3></div></div><div></div></div><a class="indexterm" name="id2935589"></a><a class="indexterm" name="id2935603"></a><p>
Samba ships with a little utility which helps the root user of your
system to back up your <tt class="filename">*.tdb</tt> files. If you run it
with no argument, it prints a little usage message:
</p><pre class="screen">
-
-# tdbbackup
+<tt class="prompt">root# </tt><b class="userinput"><tt>tdbbackup</tt></b>
Usage: tdbbackup [options] &lt;fname...&gt;
Version:3.0a
@@ -2519,32 +2363,30 @@ with no argument, it prints a little usage message:
</pre><p>
Here is how I backed up my printing.tdb file:
</p><pre class="screen">
-
-# ls
- . browse.dat locking.tdb ntdrivers.tdb printing.tdb share_info.tdb
- .. connections.tdb messages.tdb ntforms.tdb printing.tdbkp unexpected.tdb
- brlock.tdb gmon.out namelist.debug ntprinters.tdb sessionid.tdb
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls</tt></b>
+. browse.dat locking.tdb ntdrivers.tdb printing.tdb
+.. share_info.tdb connections.tdb messages.tdb ntforms.tdb
+printing.tdbkp unexpected.tdb brlock.tdb gmon.out namelist.debug
+ntprinters.tdb sessionid.tdb
- kde-bitshop:/var/lock/samba # tdbbackup -s .bak printing.tdb
+<tt class="prompt">root# </tt><b class="userinput"><tt>tdbbackup -s .bak printing.tdb</tt></b>
printing.tdb : 135 records
- kde-bitshop:/var/lock/samba # ls -l printing.tdb*
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l printing.tdb*</tt></b>
-rw------- 1 root root 40960 May 2 03:44 printing.tdb
-rw------- 1 root root 40960 May 2 03:44 printing.tdb.bak
-</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2971036"></a>CUPS Print Drivers from Linuxprinting.org</h2></div></div><div></div></div><p>
+</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2935716"></a>CUPS Print Drivers from Linuxprinting.org</h2></div></div><div></div></div><a class="indexterm" name="id2935724"></a><p>
CUPS ships with good support for HP LaserJet type printers. You can
install the generic driver as follows:
-</p><pre class="screen">
-
-lpadmin -p laserjet4plus -v parallel:/dev/lp0 -E -m laserjet.ppd
-
+</p><a class="indexterm" name="id2935737"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p laserjet4plus -v parallel:/dev/lp0 -E -m laserjet.ppd</tt></b>
</pre><p>
-The <i class="parameter"><tt>-m</tt></i> switch will retrieve the
+The <tt class="option">-m</tt> switch will retrieve the
<tt class="filename">laserjet.ppd</tt> from the standard repository for
not-yet-installed-PPDs, which CUPS typically stores in
<tt class="filename">/usr/share/cups/model</tt>. Alternatively, you may use
-<i class="parameter"><tt>-P /path/to/your.ppd</tt></i>.
+<tt class="option">-P /path/to/your.ppd</tt>.
</p><p>
The generic laserjet.ppd however does not support every special option
for every LaserJet-compatible model. It constitutes a sort of &quot;least
@@ -2556,6 +2398,7 @@ best used for each printer. Its database is kept current by the
tireless work of Till Kamppeter from MandrakeSoft, who is also the
principal author of the foomatic-rip utility.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2935835"></a>
The former &quot;cupsomatic&quot; concept is now be replaced by the new, much
more powerful &quot;foomatic-rip&quot;. foomatic-rip is the successor of
cupsomatic. cupsomatic is no longer maintained. Here is the new URL
@@ -2566,7 +2409,7 @@ not work with PPDs generated for the old cupsomatic. The new-style
PPDs are 100% compliant to the Adobe PPD specification. They are
intended to be used by Samba and the cupsaddsmb utility also, to
provide the driver files for the Windows clients also!
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2971142"></a>foomatic-rip and Foomatic explained</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935871"></a>foomatic-rip and Foomatic explained</h3></div></div><div></div></div><a class="indexterm" name="id2935879"></a><a class="indexterm" name="id2935887"></a><p>
Nowadays most Linux distros rely on the utilities of Linuxprinting.org
to create their printing related software (which, BTW, works on all
UNIXes and on Mac OS X or Darwin too). It is not known as well as it
@@ -2583,7 +2426,7 @@ its <a href="http://www.linuxprinting.org/foomatic.html" target="_top">Foomatic<
database. Currently there are <a href="http://www.linuxprinting.org/driver_list.cgi" target="_top">245 drivers</a>
in the database: many drivers support various models, and many models
may be driven by different drivers; it's your choice!
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971197"></a>690 &quot;perfect&quot; Printers</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2935943"></a>690 &quot;perfect&quot; Printers</h4></div></div><div></div></div><p>
At present there are 690 devices dubbed as working &quot;perfectly&quot;, 181
&quot;mostly&quot;, 96 &quot;partially&quot; and 46 are &quot;Paperweights&quot;. Keeping in mind
that most of these are non-PostScript models (PostScript printers are
@@ -2594,7 +2437,7 @@ doesn't also scan and copy and fax under GNU/Linux: then this is a
truly astonishing achievement. Three years ago the number was not
more than 500, and Linux or UNIX &quot;printing&quot; at the time wasn't
anywhere near the quality it is today!
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971222"></a>How the &quot;Printing HOWTO&quot; started it all</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2935974"></a>How the &quot;Printing HOWTO&quot; started it all</h4></div></div><div></div></div><p>
A few years ago <a href="http://www2.picante.com:81/~gtaylor/" target="_top">Grant Taylor</a>
started it all. The roots of today's Linuxprinting.org are in the
first <a href="http://www.linuxprinting.org/foomatic2.9/howto/" target="_top">Linux Printing
@@ -2608,7 +2451,7 @@ hardware and driver zoo that made up Linux printing of the time. This
database became the core component of today's Foomatic collection of
tools and data. In the meantime it has moved to an XML representation
of the data.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971267"></a>Foomatic's strange Name</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2936022"></a>Foomatic's strange Name</h4></div></div><div></div></div><a class="indexterm" name="id2936030"></a><p>
&quot;Why the funny name?&quot;, you ask. When it really took off, around spring
2000, CUPS was far less popular than today, and most systems used LPD,
LPRng or even PDQ to print. CUPS shipped with a few generic &quot;drivers&quot;
@@ -2631,7 +2474,7 @@ developments available for CUPS;</p></li><li><p>It made available a lot of addit
to CUPS users (because often the &quot;traditional&quot; Ghostscript way of
printing was the only one available);</p></li><li><p>It gave all the advanced CUPS options (web interface,
GUI driver configurations) to users wanting (or needing) to use
-Ghostscript filters.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971334"></a>cupsomatic, pdqomatic, lpdomatic, directomatic</h4></div></div><div></div></div><p>
+Ghostscript filters.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2936123"></a>cupsomatic, pdqomatic, lpdomatic, directomatic</h4></div></div><div></div></div><a class="indexterm" name="id2936133"></a><a class="indexterm" name="id2936141"></a><a class="indexterm" name="id2936149"></a><p>
CUPS worked through a quickly-hacked up filter script named <a href="http://www.linuxprinting.org/download.cgi?filename=cupsomatic&amp;show=0" target="_top">cupsomatic</a>.
cupsomatic ran the printfile through Ghostscript, constructing
automatically the rather complicated command line needed. It just
@@ -2665,8 +2508,8 @@ Foomatic up to versions 2.0.x required (ugly) Perl data structures
attached the Linuxprinting.org PPDs for CUPS. It had a different
&quot;*omatic&quot; script for every spooler, as well as different printer
configuration files..
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971466"></a>7.13.1.5.The <span class="emphasis"><em>Grand Unification</em></span>
-achieved...</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2936304"></a>The <span class="emphasis"><em>Grand Unification</em></span>
+achieved...</h4></div></div><div></div></div><a class="indexterm" name="id2936316"></a><p>
This all has changed in Foomatic versions 2.9 (Beta) and released as
&quot;stable&quot; 3.0. This has now achieved the convergence of all *omatic
scripts: it is called the <a href="http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&amp;show=0" target="_top">foomatic-rip</a>.
@@ -2701,7 +2544,7 @@ sizes for many printers; and it will support printing on media drawn
from different paper trays within the same job (in both cases: even
where there is no support for this from Windows-based vendor printer
drivers).
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971554"></a>Driver Development outside</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2936409"></a>Driver Development outside</h4></div></div><div></div></div><p>
Most driver development itself does not happen within
Linuxprinting.org. Drivers are written by independent maintainers.
Linuxprinting.org just pools all the information, and stores it in its
@@ -2714,7 +2557,7 @@ the work is currently done in three projects. These are:
</p><div class="itemizedlist"><ul type="disc"><li><p><a href="http://www-124.ibm.com/developerworks/oss/linux/projects/omni/" target="_top">Omni</a>
-- a Free Software project by IBM which tries to convert their printer
driver knowledge from good-ol' OS/2 times into a modern, modular,
-universal driver architecture for Linux/Unix (still Beta). This
+universal driver architecture for Linux/UNIX (still Beta). This
currently supports 437 models.</p></li><li><p><a href="http://hpinkjet.sf.net/" target="_top">HPIJS</a> --
a Free Software project by HP to provide the support for their own
range of models (very mature, printing in most cases is perfect and
@@ -2724,8 +2567,8 @@ effort, started by Michael Sweet (also lead developer for CUPS), now
directed by Robert Krawitz, which has achieved an amazing level of
photo print quality (many Epson users swear that its quality is
better than the vendor drivers provided by Epson for the Microsoft
-platforms). This currently supports 522 models.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971632"></a>Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and
-commercial Unix</h4></div></div><div></div></div><p>
+platforms). This currently supports 522 models.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2936490"></a>Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and
+commercial UNIX</h4></div></div><div></div></div><p>
Linuxprinting.org today is the one-stop &quot;shop&quot; to download printer
drivers. Look for printer information and <a href="http://www.linuxprinting.org//kpfeifle/LinuxKongress2002/Tutorial/" target="_top">tutorials</a>
or solve printing problems in its popular <a href="http://www.linuxprinting.org/newsportal/" target="_top">forums</a>. But
@@ -2745,7 +2588,7 @@ of the Foomatic project.
Till Kamppeter from MandrakeSoft is doing an excellent job in his
spare time to maintain Linuxprinting.org and Foomatic. So if you use
it often, please send him a note showing your appreciation.
-</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971705"></a>Foomatic Database generated PPDs</h4></div></div><div></div></div><p>
+</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2936564"></a>Foomatic Database generated PPDs</h4></div></div><div></div></div><p>
The Foomatic database is an amazing piece of ingenuity in itself. Not
only does it keep the printer and driver information, but it is
organized in a way that it can generate &quot;PPD&quot; files &quot;on the fly&quot; from
@@ -2770,7 +2613,7 @@ GUI tools (like KDE's marvellous <a href="http://printing.kde.org/overview/kprin
or the GNOME <a href="http://gtklp.sourceforge.net/" target="_top">&quot;gtklp&quot;</a>, &quot;xpp&quot; and the CUPS
web interface) read the PPD too and use this information to present
the available settings to the user as an intuitive menu selection.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2971770"></a>foomatic-rip and Foomatic-PPD Download and Installation</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936640"></a>foomatic-rip and Foomatic-PPD Download and Installation</h3></div></div><div></div></div><p>
Here are the steps to install a foomatic-rip driven &quot;LaserJet 4 Plus&quot;
compatible printer in CUPS (note that recent distributions of SuSE,
UnitedLinux and Mandrake may ship with a complete package of
@@ -2784,11 +2627,11 @@ link.</p></li><li><p>You'll arrive at a page listing all drivers working
with this model (for all printers, there will always be
<span class="emphasis"><em>one</em></span> recommended driver. Try this one
first).</p></li><li><p>In our case (&quot;HP LaserJet 4 Plus&quot;), we'll arrive here:
-<a href="http://www.linuxprinting.org/show_printer.cgi?recnum=HP-LaserJet_4_Plus" target="_top">http://www.linuxprinting.org/show_printer.cgi?recnum=HP-LaserJet_4_Plus</a>
+ <a href="http://www.linuxprinting.org/show_printer.cgi?recnum=HP-LaserJet_4_Plus" target="_top">http://www.linuxprinting.org/show_printer.cgi?recnum=HP-LaserJet_4_Plus</a>
</p></li><li><p>The recommended driver is &quot;ljet4&quot;.</p></li><li><p>There are several links provided here. You should
visit them all, if you are not familiar with the Linuxprinting.org
database.</p></li><li><p>There is a link to the database page for the &quot;ljet4&quot;:
-<a href="http://www.linuxprinting.org/show_driver.cgi?driver=ljet4" target="_top">http://www.linuxprinting.org/show_driver.cgi?driver=ljet4</a>
+ <a href="http://www.linuxprinting.org/show_driver.cgi?driver=ljet4" target="_top">http://www.linuxprinting.org/show_driver.cgi?driver=ljet4</a>
On the driver's page, you'll find important and detailed information
about how to use that driver within the various available
spoolers.</p></li><li><p>Another link may lead you to the homepage of the
@@ -2829,9 +2672,7 @@ the <tt class="filename">/usr/share/cups/model/</tt> path and re-start
cupsd).</p></li><li><p>Then install the printer with a suitable commandline,
e.g.:
</p><pre class="screen">
-
-lpadmin -p laserjet4plus -v parallel:/dev/lp0 -E -P path/to/my-printer.ppd
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p laserjet4plus -v parallel:/dev/lp0 -E -P path/to/my-printer.ppd</tt></b>
</pre></li><li><p>Note again this: for all the new-style &quot;Foomatic-PPDs&quot;
from Linuxprinting.org, you also need a special &quot;CUPS filter&quot; named
&quot;foomatic-rip&quot;.Get the latest version of &quot;foomatic-rip&quot; from: <a href="http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&amp;show=0" target="_top">http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&amp;show=0</a>
@@ -2869,7 +2710,7 @@ the driver/model) contain support for a certain &quot;device&quot;, representing
the selected &quot;driver&quot; for your model (as shown by &quot;gs
-h&quot;)</p></li><li><p>foomatic-rip needs a new version of PPDs (PPD versions
produced for cupsomatic don't work with
-foomatic-rip).</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2972228"></a>Page Accounting with CUPS</h2></div></div><div></div></div><p>
+foomatic-rip).</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2937141"></a>Page Accounting with CUPS</h2></div></div><div></div></div><a class="indexterm" name="id2937150"></a><p>
Often there are questions regarding &quot;print quotas&quot; wherein Samba users
(that is, Windows clients) should not be able to print beyond a
certain amount of pages or data volume per day, week or month. This
@@ -2882,18 +2723,17 @@ Of course one could &quot;hack&quot; things with one's own scripts. But then
there is CUPS. CUPS supports &quot;quotas&quot; which can be based on sizes of
jobs or on the number of pages or both, and are spanning any time
period you want.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972259"></a>Setting up Quotas</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937193"></a>Setting up Quotas</h3></div></div><div></div></div><a class="indexterm" name="id2937200"></a><p>
This is an example command how root would set a print quota in CUPS,
assuming an existing printer named &quot;quotaprinter&quot;:
-</p><pre class="screen">
-
- lpadmin -p quotaprinter -o job-quota-period=604800 -o job-k-limit=1024 -o job-page-limit=100
-
+</p><a class="indexterm" name="id2937220"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p quotaprinter -o job-quota-period=604800 \
+ -o job-k-limit=1024 -o job-page-limit=100</tt></b>
</pre><p>
This would limit every single user to print 100 pages or 1024 KB of
data (whichever comes first) within the last 604,800 seconds ( = 1
week).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972290"></a>Correct and incorrect Accounting</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937258"></a>Correct and incorrect Accounting</h3></div></div><div></div></div><p>
For CUPS to count correctly, the printfile needs to pass the CUPS
&quot;pstops&quot; filter, otherwise it uses a &quot;dummy&quot; count of &quot;1&quot;. Some
printfiles don't pass it (eg: image files) but then those are mostly 1
@@ -2907,8 +2747,8 @@ driver there) to have the chance to get accounting done. If the
printer is a non-PostScript model, you need to let CUPS do the job to
convert the file to a print-ready format for the target printer. This
will be working for currently about 1,000 different printer models,
-see <a href="http://www.linuxprinting.org/printer_list.cgi" target="_top">http://www.linuxprinting.org/printer_list.cgi</a>).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972331"></a>Adobe and CUPS PostScript Drivers for Windows Clients</h3></div></div><div></div></div><p>
+see <a href="http://www.linuxprinting.org/printer_list.cgi" target="_top">the driver list at linuxprinting.org/</a>.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937303"></a>Adobe and CUPS PostScript Drivers for Windows Clients</h3></div></div><div></div></div><p>
Before CUPS-1.1.16 your only option was to use the Adobe PostScript
Driver on the Windows clients. The output of this driver was not
always passed through the &quot;pstops&quot; filter on the CUPS/Samba side, and
@@ -2921,14 +2761,14 @@ From CUPS-1.1.16 onward you can use the &quot;CUPS PostScript Driver for
Windows NT/2K/XP clients&quot; (which is tagged in the download area of
http://www.cups.org/ as the &quot;cups-samba-1.1.16.tar.gz&quot; package). It does
<span class="emphasis"><em>not</em></span> work for Win9x/ME clients. But it guarantees:
-</p><div class="itemizedlist"><ul type="disc"><li><p>to not write an PJL-header</p></li><li><p>to still read and support all PJL-options named in the
+</p><div class="itemizedlist"><a class="indexterm" name="id2937350"></a><ul type="disc"><li><p>to not write an PJL-header</p></li><li><p>to still read and support all PJL-options named in the
driver PPD with its own means</p></li><li><p> that the file will pass through the &quot;pstops&quot; filter
on the CUPS/Samba server</p></li><li><p>to page-count correctly the
printfile</p></li></ul></div><p>
You can read more about the setup of this combination in the manpage
for &quot;cupsaddsmb&quot; (which is only present with CUPS installed, and only
current from CUPS 1.1.16).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972403"></a>The page_log File Syntax</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937398"></a>The page_log File Syntax</h3></div></div><div></div></div><a class="indexterm" name="id2937407"></a><p>
These are the items CUPS logs in the &quot;page_log&quot; for every
single <span class="emphasis"><em>page</em></span> of a job:
</p><div class="itemizedlist"><ul type="disc"><li><p>Printer name</p></li><li><p>User name</p></li><li><p>Job ID</p></li><li><p>Time of printing</p></li><li><p>the page number</p></li><li><p>the number of copies</p></li><li><p>a billing information string
@@ -2937,20 +2777,18 @@ single <span class="emphasis"><em>page</em></span> of a job:
Here is an extract of my CUPS server's page_log file to illustrate the
format and included items:
</p><pre class="screen">
-
- infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 1 3 #marketing 10.160.50.13
- infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 2 3 #marketing 10.160.50.13
- infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 3 3 #marketing 10.160.50.13
- infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 4 3 #marketing 10.160.50.13
- DigiMaster9110 boss 402 [22/Apr/2003:10:33:22 +0100] 1 440 finance-dep 10.160.51.33
-
+infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 1 3 #marketing 10.160.50.13
+infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 2 3 #marketing 10.160.50.13
+infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 3 3 #marketing 10.160.50.13
+infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 4 3 #marketing 10.160.50.13
+DigiMaster9110 boss 402 [22/Apr/2003:10:33:22 +0100] 1 440 finance-dep 10.160.51.33
</pre><p>
This was job ID &quot;401&quot;, printed on &quot;infotec_IS2027&quot; by user &quot;kurt&quot;, a
64-page job printed in 3 copies and billed to &quot;#marketing&quot;, sent
from IP address 10.160.50.13. The next job had ID &quot;402&quot;, was sent by
user &quot;boss&quot; from IP address 10.160.51.33,printed from one page 440
copies and is set to be billed to &quot;finance-dep&quot;.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972504"></a>Possible Shortcomings</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937516"></a>Possible Shortcomings</h3></div></div><div></div></div><p>
What flaws or shortcomings are there with this quota system?
</p><div class="itemizedlist"><ul type="disc"><li><p>the ones named above (wrongly logged job in case of
printer hardware failure, etc.)</p></li><li><p>in reality, CUPS counts the job pages that are being
@@ -2959,12 +2797,12 @@ processed in <span class="emphasis"><em>software</em></span> (that is, going thr
printing device. Thus if there is a jam while printing the 5th sheet out
of 1000 and the job is aborted by the printer, the &quot;page count&quot; will
still show the figure of 1000 for that job</p></li><li><p>all quotas are the same for all users (no flexibility
-to give the boss a higher quota than the clerk) no support for
+to give the boss a higher quota than the clerk), no support for
groups</p></li><li><p>no means to read out the current balance or the
&quot;used-up&quot; number of current quota</p></li><li><p>a user having used up 99 sheets of 100 quota will
still be able to send and print a 1,000 sheet job</p></li><li><p>a user being denied a job because of a filled-up quota
doesn't get a meaningful error message from CUPS other than
-&quot;client-error-not-possible&quot;.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972576"></a>Future Developments</h3></div></div><div></div></div><p>
+&quot;client-error-not-possible&quot;.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937592"></a>Future Developments</h3></div></div><div></div></div><p>
This is the best system currently available, and there are huge
improvements under development for CUPS 1.2:
</p><div class="itemizedlist"><ul type="disc"><li><p>page counting will go into the &quot;backends&quot; (these talk
@@ -2972,9 +2810,9 @@ directly to the printer and will increase the count in sync with the
actual printing process: thus a jam at the 5th sheet will lead to a
stop in the counting)</p></li><li><p>quotas will be handled more flexibly</p></li><li><p>probably there will be support for users to inquire
their &quot;accounts&quot; in advance</p></li><li><p>probably there will be support for some other tools
-around this topic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972624"></a>Other Accounting Tools</h3></div></div><div></div></div><p>
+around this topic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937648"></a>Other Accounting Tools</h3></div></div><div></div></div><p>
PrintAnalyzer, pyKota, printbill, LogReport.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2972639"></a>Additional Material</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2937662"></a>Additional Material</h2></div></div><div></div></div><p>
A printer queue with <span class="emphasis"><em>no</em></span> PPD associated to it is a
&quot;raw&quot; printer and all files will go directly there as received by the
spooler. The exceptions are file types &quot;application/octet-stream&quot;
@@ -2995,10 +2833,8 @@ where &quot;normally&quot; the native CUPS &quot;pstoraster&quot; filter would k
in. cupsomatic by-passes pstoraster, &quot;kidnaps&quot; the printfile from CUPS
away and re-directs it to go through Ghostscript. CUPS accepts this,
because the associated CUPS-O-Matic-/Foomatic-PPD specifies:
-</p><pre class="screen">
-
- *cupsFilter: &quot;application/vnd.cups-postscript 0 cupsomatic&quot;
-
+</p><pre class="programlisting">
+ *cupsFilter: &quot;application/vnd.cups-postscript 0 cupsomatic&quot;
</pre><p>
This line persuades CUPS to hand the file to cupsomatic, once it has
successfully converted it to the MIME type
@@ -3010,30 +2846,24 @@ Jobs arriving from Windows which are auto-typed
CUPS is widely configurable and flexible, even regarding its filtering
mechanism. Another workaround in some situations would be to have in
<tt class="filename">/etc/cups/mime.types</tt> entries as follows:
-</p><pre class="screen">
-
- application/postscript application/vnd.cups-raw 0 -
- application/vnd.cups-postscript application/vnd.cups-raw 0 -
-
+</p><pre class="programlisting">
+ application/postscript application/vnd.cups-raw 0 -
+ application/vnd.cups-postscript application/vnd.cups-raw 0 -
</pre><p>
This would prevent all Postscript files from being filtered (rather,
they will through the virtual <span class="emphasis"><em>nullfilter</em></span>
denoted with &quot;-&quot;). This could only be useful for PS printers. If you
want to print PS code on non-PS printers (provided they support ASCII
text printing) an entry as follows could be useful:
-</p><pre class="screen">
-
- */* application/vnd.cups-raw 0 -
-
+</p><pre class="programlisting">
+ */* application/vnd.cups-raw 0 -
</pre><p>
and would effectively send <span class="emphasis"><em>all</em></span> files to the
backend without further processing.
</p><p>
Lastly, you could have the following entry:
-</p><pre class="screen">
-
- application/vnd.cups-postscript application/vnd.cups-raw 0 my_PJL_stripping_filter
-
+</p><pre class="programlisting">
+application/vnd.cups-postscript application/vnd.cups-raw 0 my_PJL_stripping_filter
</pre><p>
You will need to write a <span class="emphasis"><em>my_PJL_stripping_filter</em></span>
(could be a shellscript) that parses the PostScript and removes the
@@ -3052,16 +2882,15 @@ the jobs of hundreds of users on some big machine, where no user is
allowed to have direct access (such as when the operators often need
to load the proper paper type before running the 10,000 page job
requested by marketing for the mailing, etc.).
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2972832"></a>Auto-Deletion or Preservation of CUPS Spool Files</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2937912"></a>Auto-Deletion or Preservation of CUPS Spool Files</h2></div></div><div></div></div><p>
Samba print files pass through two &quot;spool&quot; directories. One is the
-incoming directory managed by Samba, (set in the <span class="emphasis"><em>path =
-/var/spool/samba</em></span> directive in the
-<span class="emphasis"><em>[printers]</em></span> section of
+incoming directory managed by Samba, (set in the <a class="indexterm" name="id2937929"></a><i class="parameter"><tt>path</tt></i> = /var/spool/samba directive in the
+<i class="parameter"><tt>[printers]</tt></i> section of
<tt class="filename">smb.conf</tt>). The other is the spool directory of
your UNIX print subsystem. For CUPS it is normally
<tt class="filename">/var/spool/cups/</tt>, as set by the cupsd.conf
directive <tt class="filename">RequestRoot /var/spool/cups</tt>.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972878"></a>CUPS Configuration Settings explained</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937974"></a>CUPS Configuration Settings explained</h3></div></div><div></div></div><p>
Some important parameter settings in the CUPS configuration file
<tt class="filename">cupsd.conf</tt> are:
</p><div class="variablelist"><dl><dt><span class="term">PreserveJobHistory Yes</span></dt><dd><p>
@@ -3085,34 +2914,32 @@ maximum to 0 disables this functionality. The default setting is
</p></dd></dl></div><p>
(There are also additional settings for &quot;MaxJobsPerUser&quot; and
&quot;MaxJobsPerPrinter&quot;...)
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972960"></a>Pre-conditions</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938069"></a>Pre-conditions</h3></div></div><div></div></div><p>
For everything to work as announced, you need to have three
things:
</p><div class="itemizedlist"><ul type="disc"><li><p>a Samba-smbd which is compiled against &quot;libcups&quot; (Check
on Linux by running &quot;ldd `which smbd`&quot;)</p></li><li><p>a Samba-<tt class="filename">smb.conf</tt> setting of
-&quot;printing = cups&quot;</p></li><li><p>another Samba-<tt class="filename">smb.conf</tt> setting of
-&quot;printcap = cups&quot;</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ <a class="indexterm" name="id2938105"></a><i class="parameter"><tt>printing</tt></i> = cups</p></li><li><p>another Samba-<tt class="filename">smb.conf</tt> setting of
+ <a class="indexterm" name="id2938131"></a><i class="parameter"><tt>printcap</tt></i> = cups</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
In this case all other manually set printing-related commands (like
-&quot;print command&quot;, &quot;lpq command&quot;, &quot;lprm command&quot;, &quot;lppause command&quot; or
-&quot;lpresume command&quot;) are ignored and they should normally have no
+<a class="indexterm" name="id2938153"></a><i class="parameter"><tt>print command</tt></i>,
+<a class="indexterm" name="id2938167"></a><i class="parameter"><tt>lpq command</tt></i>,
+<a class="indexterm" name="id2938180"></a><i class="parameter"><tt>lprm command</tt></i>,
+<a class="indexterm" name="id2938194"></a><i class="parameter"><tt>lppause command</tt></i> or
+<a class="indexterm" name="id2938208"></a><i class="parameter"><tt>lpresume command</tt></i>) are ignored and they should normally have no
influence what-so-ever on your printing.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973021"></a>Manual Configuration</h3></div></div><div></div></div><p>
-If you want to do things manually, replace the &quot;printing =
-cups&quot; by &quot;printing = bsd&quot;. Then your manually set commands may work
-(haven't tested this), and a &quot;print command = lp -d %P %s; rm %s&quot;
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938226"></a>Manual Configuration</h3></div></div><div></div></div><p>
+If you want to do things manually, replace the <a class="indexterm" name="id2938237"></a><i class="parameter"><tt>printing</tt></i> = cups
+by <a class="indexterm" name="id2938250"></a><i class="parameter"><tt>printing</tt></i> = bsd. Then your manually set commands may work
+(haven't tested this), and a <a class="indexterm" name="id2938266"></a><i class="parameter"><tt>print command</tt></i> = lp -d %P %s; rm %s&quot;
may do what you need.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973039"></a>When <span class="emphasis"><em>not</em></span> to use Samba to print to
-CUPS</h2></div></div><div></div></div><p>
-[TO BE DONE]
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973056"></a>In Case of Trouble.....</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2938284"></a>In Case of Trouble.....</h2></div></div><div></div></div><p>
If you have more problems, post the output of these commands
to the CUPS or Samba mailing lists (choose the one which seems more
relevant to your problem):
</p><pre class="screen">
-
- grep -v ^# /etc/cups/cupsd.conf | grep -v ^$
- grep -v ^# /etc/samba/smb.conf | grep -v ^$ | grep -v &quot;^;&quot;
-
+<tt class="prompt">$ </tt><b class="userinput"><tt>grep -v ^# /etc/cups/cupsd.conf | grep -v ^$</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>grep -v ^# /etc/samba/smb.conf | grep -v ^$ | grep -v &quot;^;&quot;</tt></b>
</pre><p>
(adapt paths as needed). These commands leave out the empty
lines and lines with comments, providing the &quot;naked settings&quot; in a
@@ -3120,18 +2947,12 @@ compact way. Don't forget to name the CUPS and Samba versions you
are using! This saves bandwidth and makes for easier readability
for experts (and you are expecting experts to read them, right?
;-)
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973091"></a>Where to find Documentation</h3></div></div><div></div></div><p>
-[TO BE DONE]
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973104"></a>How to ask for Help</h3></div></div><div></div></div><p>
-[TO BE DONE]
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973117"></a>Where to find Help</h3></div></div><div></div></div><p>
-[TO BE DONE]
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973131"></a>Appendix</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973138"></a>Printing <span class="emphasis"><em>from</em></span> CUPS to Windows attached
-Printers</h3></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2938356"></a>Printing <span class="emphasis"><em>from</em></span> CUPS to Windows attached
+Printers</h2></div></div><div></div></div><p>
From time to time the question arises, how you can print
<span class="emphasis"><em>to</em></span> a Windows attached printer
<span class="emphasis"><em>from</em></span> Samba. Normally the local connection
-&quot;Windows host &lt;--&gt; printer&quot; would be done by USB or parallel
+from Windows host to printer would be done by USB or parallel
cable, but this doesn't matter to Samba. From here only an SMB
connection needs to be opened to the Windows host. Of course, this
printer must be &quot;shared&quot; first. As you have learned by now, CUPS uses
@@ -3143,33 +2964,29 @@ is in the CUPS backend directory. This resides usually in
file there. It should be a symlink to <tt class="filename">smbspool</tt>
which file must exist and be executable:
</p><pre class="screen">
-
- # ls -l /usr/lib/cups/backend/
- total 253
- drwxr-xr-x 3 root root 720 Apr 30 19:04 .
- drwxr-xr-x 6 root root 125 Dec 19 17:13 ..
- -rwxr-xr-x 1 root root 10692 Feb 16 21:29 canon
- -rwxr-xr-x 1 root root 10692 Feb 16 21:29 epson
- lrwxrwxrwx 1 root root 3 Apr 17 22:50 http -&gt; ipp
- -rwxr-xr-x 1 root root 17316 Apr 17 22:50 ipp
- -rwxr-xr-x 1 root root 15420 Apr 20 17:01 lpd
- -rwxr-xr-x 1 root root 8656 Apr 20 17:01 parallel
- -rwxr-xr-x 1 root root 2162 Mar 31 23:15 pdfdistiller
- lrwxrwxrwx 1 root root 25 Apr 30 19:04 ptal -&gt; /usr/local/sbin/ptal-cups
- -rwxr-xr-x 1 root root 6284 Apr 20 17:01 scsi
- lrwxrwxrwx 1 root root 17 Apr 2 03:11 smb -&gt; /usr/bin/smbspool
- -rwxr-xr-x 1 root root 7912 Apr 20 17:01 socket
- -rwxr-xr-x 1 root root 9012 Apr 20 17:01 usb
-
-# ls -l `which smbspool`
- -rwxr-xr-x 1 root root 563245 Dec 28 14:49 /usr/bin/smbspool
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l /usr/lib/cups/backend/</tt></b>
+total 253
+drwxr-xr-x 3 root root 720 Apr 30 19:04 .
+drwxr-xr-x 6 root root 125 Dec 19 17:13 ..
+-rwxr-xr-x 1 root root 10692 Feb 16 21:29 canon
+-rwxr-xr-x 1 root root 10692 Feb 16 21:29 epson
+lrwxrwxrwx 1 root root 3 Apr 17 22:50 http -&gt; ipp
+-rwxr-xr-x 1 root root 17316 Apr 17 22:50 ipp
+-rwxr-xr-x 1 root root 15420 Apr 20 17:01 lpd
+-rwxr-xr-x 1 root root 8656 Apr 20 17:01 parallel
+-rwxr-xr-x 1 root root 2162 Mar 31 23:15 pdfdistiller
+lrwxrwxrwx 1 root root 25 Apr 30 19:04 ptal -&gt; /usr/sbin/ptal-cups
+-rwxr-xr-x 1 root root 6284 Apr 20 17:01 scsi
+lrwxrwxrwx 1 root root 17 Apr 2 03:11 smb -&gt; /usr/bin/smbspool
+-rwxr-xr-x 1 root root 7912 Apr 20 17:01 socket
+-rwxr-xr-x 1 root root 9012 Apr 20 17:01 usb
+
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l `which smbspool`</tt></b>
+-rwxr-xr-x 1 root root 563245 Dec 28 14:49 /usr/bin/smbspool
</pre><p>
If this symlink doesn't exist, create it:
</p><pre class="screen">
-
-# ln -s `which smbspool` /usr/lib/cups/backend/smb
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>ln -s `which smbspool` /usr/lib/cups/backend/smb</tt></b>
</pre><p>
smbspool has been written by Mike Sweet from the CUPS folks. It is
included and ships with Samba. It may also be used with print
@@ -3186,9 +3003,8 @@ the Windows host, etc.
</p><p>
To install a printer with the smb backend on CUPS, use this command:
</p><pre class="screen">
-
-# lpadmin -p winprinter -v smb://WINDOWSNETBIOSNAME/printersharename -P /path/to/PPD
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p winprinter -v smb://WINDOWSNETBIOSNAME/printersharename \
+ -P /path/to/PPD</tt></b>
</pre><p>
The <span class="emphasis"><em>PPD</em></span> must be able to direct CUPS to generate
the print data for the target model. For PostScript printers just use
@@ -3197,13 +3013,7 @@ what can you do if the printer is only accessible with a password? Or
if the printer's host is part of another workgroup? This is provided
for: you can include the required parameters as part of the
<tt class="filename">smb://</tt> device-URI. Like this:
-</p><pre class="screen">
-
- smb://WORKGROUP/WINDOWSNETBIOSNAME/printersharename
- smb://username:password@WORKGROUP/WINDOWSNETBIOSNAME/printersharename
- smb://username:password@WINDOWSNETBIOSNAME/printersharename
-
-</pre><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>smb://WORKGROUP/WINDOWSNETBIOSNAME/printersharename </p></li><li><p>smb://username:password@WORKGROUP/WINDOWSNETBIOSNAME/printersharename</p></li><li><p>smb://username:password@WINDOWSNETBIOSNAME/printersharename</p></li></ul></div><p>
Note that the device-URI will be visible in the process list of the
Samba server (e.g. when someone uses the <b class="command">ps -aux</b>
command on Linux), even if the username and passwords are sanitized
@@ -3214,337 +3024,41 @@ doesn't require a password! Printing will only work if you have a
working netbios name resolution up and running. Note that this is a
feature of CUPS and you don't necessarily need to have smbd running
(but who wants that? :-).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973332"></a>More CUPS filtering Chains</h3></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2938656"></a>More CUPS filtering Chains</h2></div></div><div></div></div><p>
The following diagrams reveal how CUPS handles print jobs.
-</p><pre class="screen">
-#########################################################################
-#
-# CUPS in and of itself has this (general) filter chain (CAPITAL
-# letters are FILE-FORMATS or MIME types, other are filters (this is
-# true for pre-1.1.15 of pre-4.3 versions of CUPS and ESP PrintPro):
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT
-# |
-# V
-# pstoraster # as shipped with CUPS, independent from any Ghostscipt
-# | # installation on the system
-# | (= &quot;postscipt interpreter&quot;)
-# V
-# APPLICATION/VND.CUPS-RASTER
-# |
-# V
-# rastertosomething (e.g. Gimp-Print filters may be plugged in here)
-# | (= &quot;raster driver&quot;)
-# V
-# SOMETHING-DEVICE-SPECIFIC
-# |
-# V
-# backend
-#
-#
-# ESP PrintPro has some enhanced &quot;rastertosomething&quot; filters as compared to
-# CUPS, and also a somewhat improved &quot;pstoraster&quot; filter.
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-#########################################################################
-</pre><pre class="screen">
-#########################################################################
-#
-# This is how &quot;cupsomatic&quot; comes into play:
-# =========================================
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT ----------------+
-# | V
-# V cupsomatic
-# pstoraster (constructs complicated
-# | (= &quot;postscipt interpreter&quot;) Ghostscript commandline
-# | to let the file be
-# V processed by a
-# APPLICATION/VND.CUPS-RASTER &quot;-sDEVICE=s.th.&quot;
-# | call...)
-# V |
-# rastertosomething V
-# | (= &quot;raster driver&quot;) +-------------------------+
-# | | Ghostscript at work.... |
-# V | |
-# SOMETHING-DEVICE-SPECIFIC *-------------------------+
-# | |
-# V |
-# backend &lt;------------------------------------+
-# |
-# V
-# THE PRINTER
-#
-#
-# Note, that cupsomatic &quot;kidnaps&quot; the printfile after the
-# &quot;APPLICATION/VND.CUPS-POSTSCRPT&quot; stage and deviates it gh
-# the CUPS-external, systemwide Ghostscript installation, bypassing the
-# &quot;pstoraster&quot; filter (therefore also bypassing the CUPS-raster-drivers
-# &quot;rastertosomething&quot;, and hands the rasterized file directly to the CUPS
-# backend...
-#
-# cupsomatic is not made by the CUPS developers. It is an independent
-# contribution to printing development, made by people from
-# Linuxprinting.org. (see also http://www.cups.org/cups-help.html)
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-#########################################################################
-</pre><pre class="screen">
-#########################################################################
-#
-# And this is how it works for ESP PrintPro from 4.3:
-# ===================================================
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT
-# |
-# V
-# gsrip
-# | (= &quot;postscipt interpreter&quot;)
-# V
-# APPLICATION/VND.CUPS-RASTER
-# |
-# V
-# rastertosomething (e.g. Gimp-Print filters may be plugged in here)
-# | (= &quot;raster driver&quot;)
-# V
-# SOMETHING-DEVICE-SPECIFIC
-# |
-# V
-# backend
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-#########################################################################
-</pre><pre class="screen">
-#########################################################################
-#
-# This is how &quot;cupsomatic&quot; would come into play with ESP PrintPro:
-# ================================================================
-#
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT ----------------+
-# | V
-# V cupsomatic
-# gsrip (constructs complicated
-# | (= &quot;postscipt interpreter&quot;) Ghostscript commandline
-# | to let the file be
-# V processed by a
-# APPLICATION/VND.CUPS-RASTER &quot;-sDEVICE=s.th.&quot;
-# | call...)
-# V |
-# rastertosomething V
-# | (= &quot;raster driver&quot;) +-------------------------+
-# | | Ghostscript at work.... |
-# V | |
-# SOMETHING-DEVICE-SPECIFIC *-------------------------+
-# | |
-# V |
-# backend &lt;------------------------------------+
-# |
-# V
-# THE PRINTER
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-#########################################################################
-</pre><pre class="screen">
-#########################################################################
-#
-# And this is how it works for CUPS from 1.1.15:
-# ==============================================
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT-----+
-# +------------------v------------------------------+
-# | Ghostscript |
-# | at work... |
-# | (with |
-# | &quot;-sDEVICE=cups&quot;) |
-# | |
-# | (= &quot;postscipt interpreter&quot;) |
-# | |
-# +------------------v------------------------------+
-# |
-# APPLICATION/VND.CUPS-RASTER &gt;-------+
-# |
-# V
-# rastertosomething
-# | (= &quot;raster driver&quot;)
-# V
-# SOMETHING-DEVICE-SPECIFIC
-# |
-# V
-# backend
-#
-#
-# NOTE: since version 1.1.15 CUPS &quot;outsourced&quot; the pstoraster process to
-# Ghostscript. GNU Ghostscript needs to be patched to handle the
-# CUPS requirement; ESP Ghostscript has this builtin. In any case,
-# &quot;gs -h&quot; needs to show up a &quot;cups&quot; device. pstoraster is now a
-# calling an appropriate &quot;gs -sDEVICE=cups...&quot; commandline to do
-# the job. It will output &quot;application/vnd.cup-raster&quot;, which will
-# be finally processed by a CUPS raster driver &quot;rastertosomething&quot;
-# Note the difference to &quot;cupsomatic&quot;, which will <span class="emphasis"><em>not</em></span> output
-# CUPS-raster, but a final version of the printfile, ready to be
-# sent to the printer. cupsomatic also doesn't use the &quot;cups&quot;
-# devicemode in Ghostscript, but one of the classical devicemodes....
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-#########################################################################
-</pre><pre class="screen">
-#########################################################################
-#
-# And this is how it works for CUPS from 1.1.15, with cupsomatic included:
-# ========================================================================
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT-----+
-# +------------------v------------------------------+
-# | Ghostscript . Ghostscript at work.... |
-# | at work... . (with &quot;-sDEVICE= |
-# | (with . s.th.&quot; |
-# | &quot;-sDEVICE=cups&quot;) . |
-# | . |
-# | (CUPS standard) . (cupsomatic) |
-# | . |
-# | (= &quot;postscript interpreter&quot;) |
-# | . |
-# +------------------v--------------v---------------+
-# | |
-# APPLICATION/VND.CUPS-RASTER &gt;-------+ |
-# | |
-# V |
-# rastertosomething |
-# | (= &quot;raster driver&quot;) |
-# V |
-# SOMETHING-DEVICE-SPECIFIC &gt;------------------------+
-# |
-# V
-# backend
-#
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-##########################################################################
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973586"></a>Trouble Shooting Guidelines to fix typical Samba printing
-Problems</h3></div></div><div></div></div><p>
-This is a short description of how to debug printing problems
-with Samba. This describes how to debug problems with printing from
-a SMB client to a Samba server, not the other way around.
-</p><div class="variablelist"><dl><dt><span class="term">Win9x client can't install driver</span></dt><dd><p>For Win9x clients require the printer names to be 8
+</p><div class="figure"><a name="cups1"></a><p class="title"><b>Figure19.17.Filtering chain 1</b></p><div class="mediaobject"><img src="projdoc/imagefiles/cups1.png" width="270" alt="Filtering chain 1"></div></div><div class="figure"><a name="cups2"></a><p class="title"><b>Figure19.18.Filtering chain with cupsomatic</b></p><div class="mediaobject"><img src="projdoc/imagefiles/cups2.png" width="270" alt="Filtering chain with cupsomatic"></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
+CUPS and ESP PrintPro plug-in where rastertosomething is noted.
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2938758"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938765"></a>Win9x client can't install driver</h3></div></div><div></div></div><p>For Win9x clients require the printer names to be 8
chars (or &quot;8 plus 3 chars suffix&quot;) max; otherwise the driver files
won't get transferred when you want to download them from
-Samba.</p></dd><dt><span class="term">testparm</span></dt><dd><p>Run <b class="command">testparm</b>: It will tell you if
-<tt class="filename">smb.conf</tt> parameters are in the wrong
-section. Many people have had the &quot;printer admin&quot; parameter in the
-<i class="parameter"><tt>[printers]</tt></i> section and experienced
-problems. &quot;testparm&quot; will tell you if it sees
-this.</p></dd><dt><span class="term">&quot;cupsaddsmb&quot; keeps asking for a root password in a
-neverending loop</span></dt><dd><p>Have you <i class="parameter"><tt>security = user</tt></i>? Have
+Samba.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938787"></a>&quot;cupsaddsmb&quot; keeps asking for root password in
+ neverending loop</h3></div></div><div></div></div><p>Have you <a class="indexterm" name="id2938800"></a><i class="parameter"><tt>security</tt></i> = user? Have
you used <b class="command">smbpasswd</b> to give root a Samba account?
You can do 2 things: open another terminal and execute
<b class="command">smbpasswd -a root</b> to create the account, and
continue with entering the password into the first terminal. Or break
out of the loop by hitting ENTER twice (without trying to type a
-password).</p></dd><dt><span class="term">&quot;cupsaddsmb&quot; gives &quot;No PPD file for printer...&quot;
-message (but I swear there is one!)</span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Have you enabled printer sharing on CUPS? This means:
+password).</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938835"></a>&quot;cupsaddsmb&quot; gives &quot;No PPD file for printer...&quot;
+ message while PPD file is present</h3></div></div><div></div></div><p>Have you enabled printer sharing on CUPS? This means:
do you have a <i class="parameter"><tt>&lt;Location
/printers&gt;....&lt;/Location&gt;</tt></i> section in CUPS
server's <tt class="filename">cupsd.conf</tt> which doesn't deny access to
the host you run &quot;cupsaddsmb&quot; from? It <span class="emphasis"><em>could</em></span> be
an issue if you use cupsaddsmb remotely, or if you use it with a
-<i class="parameter"><tt>-h</tt></i> parameter: <b class="command">cupsaddsmb -H
-sambaserver -h cupsserver -v printername</b>.
-</p></li><li><p>Is your
+<tt class="option">-h</tt> parameter: <b class="userinput"><tt>cupsaddsmb -H
+ sambaserver -h cupsserver -v printername</tt></b>.
+</p><p>Is your
&quot;TempDir&quot; directive in
<span class="emphasis"><em>cupsd.conf</em></span>
set to a valid value and is it writeable?
-</p></li></ul></div></dd><dt><span class="term">I can't connect client to Samba printer.</span></dt><dd><p>Use <b class="command">smbstatus</b> to check which user
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938893"></a>Client can't connect to Samba printer</h3></div></div><div></div></div><p>Use <b class="command">smbstatus</b> to check which user
you are from Samba's point of view. Do you have the privileges to
write into the <i class="parameter"><tt>[print$]</tt></i>
-share?</p></dd><dt><span class="term">I can't reconnect to Samba under a new account
-from Win2K/XP</span></dt><dd><p>Once you are connected as the &quot;wrong&quot; user (for
-example as &quot;nobody&quot;, which often occurs if you have <i class="parameter"><tt>map to
-guest = bad user</tt></i>), Windows Explorer will not accept an
+share?</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938921"></a>Can't reconnect to Samba under new account
+ from Win2K/XP</h3></div></div><div></div></div><p>Once you are connected as the &quot;wrong&quot; user (for
+example as &quot;nobody&quot;, which often occurs if you have
+<a class="indexterm" name="id2938935"></a><i class="parameter"><tt>map to guest</tt></i> = bad user), Windows Explorer will not accept an
attempt to connect again as a different user. There won't be any byte
transfered on the wire to Samba, but still you'll see a stupid error
message which makes you think that Samba has denied access. Use
@@ -3557,107 +3071,105 @@ indicating a renewed connection attempt? Shut all Explorer Windows.
This makes Windows forget what it has cached in its memory as
established connections. Then re-connect as the right user. Best
method is to use a DOS terminal window and <span class="emphasis"><em>first</em></span>
-do <b class="command">net use z: \\SAMBAHOST\print$ /user:root</b>. Check
+do <b class="userinput"><tt>net use z: \\GANDALF\print$ /user:root</tt></b>. Check
with <b class="command">smbstatus</b> that you are connected under a
different account. Now open the &quot;Printers&quot; folder (on the Samba server
in the <span class="emphasis"><em>Network Neighbourhood</em></span>), right-click the
printer in question and select
-<span class="emphasis"><em>Connect...</em></span></p></dd><dt><span class="term">Avoid being connected to the Samba server as the
-&quot;wrong&quot; user</span></dt><dd><p>You see per <b class="command">smbstatus</b> that you are
+<span class="emphasis"><em>Connect...</em></span></p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939149"></a>Avoid being connected to the Samba server as the
+ &quot;wrong&quot; user</h3></div></div><div></div></div><p>You see per <b class="command">smbstatus</b> that you are
connected as user &quot;nobody&quot;; while you wanted to be &quot;root&quot; or
-&quot;printeradmin&quot;? This is probably due to <i class="parameter"><tt>map to guest = bad
-user</tt></i>, which silently connects you under the guest account,
+&quot;printeradmin&quot;? This is probably due to
+<a class="indexterm" name="id2939171"></a><i class="parameter"><tt>map to guest</tt></i> = bad user, which silently connects you under the guest account,
when you gave (maybe by accident) an incorrect username. Remove
-<i class="parameter"><tt>map to guest</tt></i>, if you want to prevent
-this.</p></dd><dt><span class="term">Upgrading to CUPS drivers from Adobe drivers on
-NT/2K/XP clients gives problems</span></dt><dd><p>First delete all &quot;old&quot; Adobe-using printers. Then
+<a class="indexterm" name="id2939187"></a><i class="parameter"><tt>map to guest</tt></i>, if you want to prevent
+this.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939202"></a>Upgrading to CUPS drivers from Adobe drivers on
+ NT/2K/XP clients gives problems</h3></div></div><div></div></div><p>First delete all &quot;old&quot; Adobe-using printers. Then
delete all &quot;old&quot; Adobe drivers. (On Win2K/XP, right-click in
background of &quot;Printers&quot; folder, select &quot;Server Properties...&quot;, select
-tab &quot;Drivers&quot; and delete here).</p></dd><dt><span class="term">I can't use &quot;cupsaddsmb&quot;on a Samba server which is
-a PDC</span></dt><dd><p>Do you use the &quot;naked&quot; root user name? Try to do it
-this way: <span class="emphasis"><em>cupsaddsmb -U DOMAINNAME\\root -v
-printername</em></span> (note the two backslashes: the first one is
-required to &quot;escape&quot; the second one).</p></dd><dt><span class="term">I deleted a printer on Win2K; but I still see
-its driver</span></dt><dd><p>Deleting a printer on the client won't delete the
+tab &quot;Drivers&quot; and delete here).</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939219"></a>Can't use &quot;cupsaddsmb&quot; on Samba server which is
+ a PDC</h3></div></div><div></div></div><p>Do you use the &quot;naked&quot; root user name? Try to do it
+this way: <b class="userinput"><tt>cupsaddsmb -U <i class="replaceable"><tt>DOMAINNAME</tt></i>\\root -v
+<i class="replaceable"><tt>printername</tt></i></tt></b>&gt; (note the two backslashes: the first one is
+required to &quot;escape&quot; the second one).</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939249"></a>Deleted Win2K printer driver is still shown</h3></div></div><div></div></div><p>Deleting a printer on the client won't delete the
driver too (to verify, right-click on the white background of the
&quot;Printers&quot; folder, select &quot;Server Properties&quot; and click on the
&quot;Drivers&quot; tab). These same old drivers will be re-used when you try to
install a printer with the same name. If you want to update to a new
driver, delete the old ones first. Deletion is only possible if no
-other printer uses the same driver.</p></dd><dt><span class="term">Win2K/XP &quot;Local Security
-Policies&quot;</span></dt><dd><p><span class="emphasis"><em>Local Security Policies</em></span> may not
+other printer uses the same driver.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939258"></a>Win2K/XP &quot;Local Security
+ Policies&quot;</h3></div></div><div></div></div><p><span class="emphasis"><em>Local Security Policies</em></span> may not
allow the installation of unsigned drivers. &quot;Local Security Policies&quot;
may not allow the installation of printer drivers at
-all.</p></dd><dt><span class="term">WinXP clients: &quot;Administrator can not install
-printers for all local users&quot;</span></dt><dd><p>Windows XP handles SMB printers on a &quot;per-user&quot; basis.
+all.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939297"></a>WinXP clients: &quot;Administrator can not install
+ printers for all local users&quot;</h3></div></div><div></div></div><p>Windows XP handles SMB printers on a &quot;per-user&quot; basis.
This means every user needs to install the printer himself. To have a
printer available for everybody, you might want to use the built-in
IPP client capabilities of WinXP. Add a printer with the print path of
<span class="emphasis"><em>http://cupsserver:631/printers/printername</em></span>.
Still looking into this one: maybe a &quot;logon script&quot; could
automatically install printers for all
-users.</p></dd><dt><span class="term">&quot;Print Change Notify&quot; functions on
-NT-clients</span></dt><dd><p>For &quot;print change notify&quot; functions on NT++ clients,
+users.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939331"></a>&quot;Print Change Notify&quot; functions on
+ NT-clients</h3></div></div><div></div></div><p>For &quot;print change notify&quot; functions on NT++ clients,
these need to run the &quot;Server&quot; service first (re-named to
<span class="emphasis"><em>File &amp; Print Sharing for MS Networks</em></span> in
-XP).</p></dd><dt><span class="term">WinXP-SP1</span></dt><dd><p>WinXP-SP1 introduced a <span class="emphasis"><em>Point and Print
+XP).</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939354"></a>WinXP-SP1</h3></div></div><div></div></div><p>WinXP-SP1 introduced a <span class="emphasis"><em>Point and Print
Restriction Policy</em></span> (this restriction doesn't apply to
&quot;Administrator&quot; or &quot;Power User&quot; groups of users). In Group Policy
-Object Editor: go to <span class="emphasis"><em>User Configuration --&gt;
-Administrative Templates --&gt; Control Panel --&gt;
+Object Editor: go to <span class="emphasis"><em>User Configuration,
+ Administrative Templates, Control Panel,
Printers</em></span>. The policy is automatically set to
<span class="emphasis"><em>Enabled</em></span> and the <span class="emphasis"><em>Users can only Point
and Print to machines in their Forest</em></span> . You probably need
to change it to <span class="emphasis"><em>Disabled</em></span> or <span class="emphasis"><em>Users can
only Point and Print to these servers</em></span> in order to make
-driver downloads from Samba possible.</p></dd><dt><span class="term">I can't set and save default print options for all
-users on Win2K/XP</span></dt><dd><p>How are you doing it? I bet the wrong way (it is not
+driver downloads from Samba possible.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939398"></a>Print options for all users can't be set on Win2K/XP</h3></div></div><div></div></div><p>How are you doing it? I bet the wrong way (it is not
very easy to find out, though). There are 3 different ways to bring
you to a dialog that <span class="emphasis"><em>seems</em></span> to set everything. All
three dialogs <span class="emphasis"><em>look</em></span> the same. Only one of them
<span class="emphasis"><em>does</em></span> what you intend. You need to be
Administrator or Print Administrator to do this for all users. Here
is how I do in on XP:
-</p><div class="orderedlist"><ol type="A"><li xmlns:ns66=""><ns66:p>The first &quot;wrong&quot; way:
+</p><div class="orderedlist"><ol type="A"><li><p>The first &quot;wrong&quot; way:
-</ns66:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span>
+</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span>
folder.</p></li><li><p>Right-click on the printer
(<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and
select in context menu <span class="emphasis"><em>Printing
Preferences...</em></span></p></li><li><p>Look at this dialog closely and remember what it looks
-like.</p></li></ol></div><ns66:p>
-</ns66:p></li><li xmlns:ns67=""><ns67:p>The second &quot;wrong&quot; way:
+like.</p></li></ol></div><p>
+</p></li><li><p>The second &quot;wrong&quot; way:
-</ns67:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span>
+</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span>
folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on
cupshost</em></span>) and select in the context menu
<span class="emphasis"><em>Properties</em></span></p></li><li><p>Click on the <span class="emphasis"><em>General</em></span>
tab</p></li><li><p>Click on the button <span class="emphasis"><em>Printing
Preferences...</em></span></p></li><li><p>A new dialog opens. Keep this dialog open and go back
-to the parent dialog.</p></li></ol></div><ns67:p>
-</ns67:p></li><li xmlns:ns68=""><ns68:p>The third, the &quot;correct&quot; way: (should you do
+to the parent dialog.</p></li></ol></div><p>
+</p></li><li><p>The third, the &quot;correct&quot; way: (should you do
this from the beginning, just carry out steps 1. and 2. from second
&quot;way&quot; above)
-</ns68:p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="emphasis"><em>Advanced</em></span>
+</p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="emphasis"><em>Advanced</em></span>
tab. (Hmmm... if everything is &quot;Grayed Out&quot;, then you are not logged
in as a user with enough privileges).</p></li><li><p>Click on the <span class="emphasis"><em>Printing
Defaults...</em></span> button.</p></li><li><p>On any of the two new tabs, click on the
<span class="emphasis"><em>Advanced...</em></span>
button.</p></li><li><p>A new dialog opens. Compare this one to the other,
-identical looking one from &quot;B.5&quot; or A.3&quot;.</p></li></ol></div><ns68:p>
-</ns68:p></li></ol></div><p>
+identical looking one from &quot;B.5&quot; or A.3&quot;.</p></li></ol></div><p>
+</p></li></ol></div><p>
Do you see any difference? I don't either... However, only the last
one, which you arrived at with steps &quot;C.1.-6.&quot; will save any settings
permanently and be the defaults for new users. If you want all clients
to get the same defaults, you need to conduct these steps <span class="emphasis"><em>as
-Administrator</em></span> (<i class="parameter"><tt>printer admin</tt></i> in
+Administrator</em></span> (<a class="indexterm" name="id2939650"></a><i class="parameter"><tt>printer admin</tt></i> in
<tt class="filename">smb.conf</tt>) <span class="emphasis"><em>before</em></span> a client
downloads the driver (the clients can later set their own
<span class="emphasis"><em>per-user defaults</em></span> by following the
procedures <span class="emphasis"><em>A.</em></span> or <span class="emphasis"><em>B.</em></span>
-above).</p></dd><dt><span class="term">What are the most common blunders in driver
-settings on Windows clients?</span></dt><dd><p>Don't use <span class="emphasis"><em>Optimize for
+above).</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939689"></a>Most common blunders in driver
+ settings on Windows clients</h3></div></div><div></div></div><p>Don't use <span class="emphasis"><em>Optimize for
Speed</em></span>: use <span class="emphasis"><em>Optimize for
Portability</em></span> instead (Adobe PS Driver) Don't use
<span class="emphasis"><em>Page Independence: No</em></span>: always
@@ -3669,8 +3181,8 @@ printer</em></span> (Adobe PS Driver). For
<span class="emphasis"><em>TrueType Download Options</em></span>
choose <span class="emphasis"><em>Outline</em></span>. Use PostScript
Level 2, if you are having trouble with a non-PS printer, and if
-there is a choice.</p></dd><dt><span class="term">I can't make <b class="command">cupsaddsmb</b> work
-with newly installed printer</span></dt><dd><p>Symptom: the last command of
+there is a choice.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939734"></a><b class="command">cupsaddsmb</b> does not work
+ with newly installed printer</h3></div></div><div></div></div><p>Symptom: the last command of
<b class="command">cupsaddsmb</b> doesn't complete successfully:
<b class="command">cmd = setdriver printername printername</b> result was
NT_STATUS_UNSUCCESSFUL then possibly the printer was not yet
@@ -3679,23 +3191,23 @@ Neighbourhood</em></span>? Did it show up in <b class="command">rpcclient
hostname -c 'enumprinters'</b>? Restart smbd (or send a
<b class="command">kill -HUP</b> to all processes listed by
<b class="command">smbstatus</b> and try
-again.</p></dd><dt><span class="term">My permissions on
+again.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939796"></a>Permissions on
<tt class="filename">/var/spool/samba/</tt> get reset after each
-reboot</span></dt><dd><p>Have you by accident set the CUPS spool directory to
+reboot</h3></div></div><div></div></div><p>Have you by accident set the CUPS spool directory to
the same location? (<i class="parameter"><tt>RequestRoot
/var/spool/samba/</tt></i> in <tt class="filename">cupsd.conf</tt> or
the other way round: <tt class="filename">/var/spool/cups/</tt> is set as
-<i class="parameter"><tt>path</tt></i> in the <i class="parameter"><tt>[printers]</tt></i>
+<a class="indexterm" name="id2939835"></a><i class="parameter"><tt>path</tt></i>&gt; in the <i class="parameter"><tt>[printers]</tt></i>
section). These <span class="emphasis"><em>must</em></span> be different. Set
<i class="parameter"><tt>RequestRoot /var/spool/cups/</tt></i> in
-<tt class="filename">cupsd.conf</tt> and <i class="parameter"><tt>path =
-/var/spool/samba</tt></i> in the <i class="parameter"><tt>[printers]</tt></i>
+<tt class="filename">cupsd.conf</tt> and <a class="indexterm" name="id2939874"></a><i class="parameter"><tt>path</tt></i> =
+/var/spool/samba in the <i class="parameter"><tt>[printers]</tt></i>
section of <tt class="filename">smb.conf</tt>. Otherwise cupsd will
sanitize permissions to its spool directory with each restart, and
-printing will not work reliably.</p></dd><dt><span class="term">My printers work fine: just the printer named &quot;lp&quot;
+printing will not work reliably.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939905"></a>Printer named &quot;lp&quot;
intermittently swallows jobs and spits out completely different
-ones</span></dt><dd><p>It is a very bad idea to name any printer &quot;lp&quot;. This
-is the traditional Unix name for the default printer. CUPS may be set
+ones</h3></div></div><div></div></div><p>It is a very bad idea to name any printer &quot;lp&quot;. This
+is the traditional UNIX name for the default printer. CUPS may be set
up to do an automatic creation of &quot;Implicit Classes&quot;. This means, to
group all printers with the same name to a pool of devices, and
loadbalancing the jobs across them in a round-robin fashion. Chances
@@ -3704,31 +3216,10 @@ receive his jobs and send your own to his device unwittingly. To have
tight control over the printer names, set <i class="parameter"><tt>BrowseShortNames
No</tt></i>. It will present any printer as &quot;printername@cupshost&quot;
then, giving you a better control over what may happen in a large
-networked environment.</p></dd><dt><span class="term">How do I &quot;watch&quot; my Samba server?</span></dt><dd><p>You can use <b class="command">tail -f
-/var/log/samba/log.smbd</b> (you may need a different path) to
-see a live scrolling of all log messages. <b class="command">smbcontrol smbd
-debuglevel</b> tells you which verbosity goes into the
-logs. <b class="command">smbcontrol smbd debug 3</b> sets the verbosity to
-a quite high level (you can choose from 0 to 10 or 100). This works
-&quot;on the fly&quot;, without the need to restart the smbd daemon. Don't use
-more than 3 initially; or you'll drown in an ocean of
-messages.</p></dd><dt><span class="term">I can't use Samba from my WinXP Home box, while
-access from WinXP Prof works flawlessly</span></dt><dd><p>You have our condolences! WinXP home has been
-completely neutered by Microsoft as compared to WinXP Prof: you can
-not log into a WinNT domain. It cannot join a Win NT domain as a
-member server. While it is possible to access domain resources, users
-don't have &quot;single sign-on&quot;. They need to supply username and password
-each time they connect to a resource. Logon scripts and roaming
-profiles are not supported. It can serve file and print shares; but
-only in &quot;share-mode security&quot; level. It can not use &quot;user-mode
-security&quot; (what Windows 95/98/ME still can
-do).</p></dd><dt><span class="term">Where do I find the Adobe PostScript driver files
-I need for &quot;cupsaddsmb&quot;?</span></dt><dd><p>Use <b class="command">smbclient</b> to connect to any
+networked environment.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939953"></a>Location of Adobe PostScript driver files necessary for &quot;cupsaddsmb&quot;</h3></div></div><div></div></div><p>Use <b class="command">smbclient</b> to connect to any
Windows box with a shared PostScript printer: <b class="command">smbclient
//windowsbox/print\$ -U guest</b>. You can navigate to the
<tt class="filename">W32X86/2</tt> subdir to <b class="command">mget ADOBE*</b>
and other files or to <tt class="filename">WIN40/0</tt> to do the same. --
Another option is to download the <tt class="filename">*.exe</tt> packaged
-files from the Adobe website.</p></dd></dl></div></div><div xmlns:ns69="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974692"></a>An Overview of the CUPS Printing Processes</h3></div></div><div></div></div><ns69:p>
-</ns69:p><div class="figure"><a name="id2974702"></a><p class="title"><b>Figure19.15.CUPS Printing Overview</b></p><div class="mediaobject"><img src="projdoc/imagefiles/a_small.png" alt="CUPS Printing Overview"></div></div><ns69:p>
-</ns69:p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="printing.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="VFS.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter18.Classical Printing Support</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter20.Stackable VFS modules</td></tr></table></div></body></html>
+files from the Adobe website.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2940008"></a>An Overview of the CUPS Printing Processes</h2></div></div><div></div></div><div class="figure"><a name="a_small"></a><p class="title"><b>Figure19.19.CUPS Printing Overview</b></p><div class="mediaobject"><img src="projdoc/imagefiles/a_small.png" width="270" alt="CUPS Printing Overview"></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="printing.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="VFS.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter18.Classical Printing Support</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter20.Stackable VFS modules</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/ClientConfig.html b/docs/htmldocs/ClientConfig.html
index 2f7002efbf1..ab34354e2de 100644
--- a/docs/htmldocs/ClientConfig.html
+++ b/docs/htmldocs/ClientConfig.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter9.MS Windows Network Configuration Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="StandAloneServer.html" title="Chapter8.Stand-Alone Servers"><link rel="next" href="optional.html" title="PartIII.Advanced Configuration"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter9.MS Windows Network Configuration Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="StandAloneServer.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="optional.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ClientConfig"></a>Chapter9.MS Windows Network Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ClientConfig.html#id2901302">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2901302"></a>Note</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter9.MS Windows Network Configuration Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="StandAloneServer.html" title="Chapter8.Stand-Alone Servers"><link rel="next" href="optional.html" title="PartIII.Advanced Configuration"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter9.MS Windows Network Configuration Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="StandAloneServer.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="optional.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ClientConfig"></a>Chapter9.MS Windows Network Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ClientConfig.html#id2893778">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893778"></a>Note</h2></div></div><div></div></div><p>
This chapter did not make it into this release.
It is planned for the published release of this document.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="StandAloneServer.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="optional.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter8.Stand-Alone Servers</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">PartIII.Advanced Configuration</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="StandAloneServer.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="optional.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter8.Stand-Alone Servers</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">PartIII.Advanced Configuration</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/DNSDHCP.html b/docs/htmldocs/DNSDHCP.html
index 7e09c782150..1472c1925b7 100644
--- a/docs/htmldocs/DNSDHCP.html
+++ b/docs/htmldocs/DNSDHCP.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter40.DNS and DHCP Configuration Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="speed.html" title="Chapter39.Samba Performance Tuning"><link rel="next" href="Further-Resources.html" title="Chapter41.Further Resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter40.DNS and DHCP Configuration Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="speed.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Further-Resources.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="DNSDHCP"></a>Chapter40.DNS and DHCP Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="DNSDHCP.html#id3016535">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016535"></a>Note</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter40.DNS and DHCP Configuration Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="speed.html" title="Chapter39.Samba Performance Tuning"><link rel="next" href="Further-Resources.html" title="Chapter41.Further Resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter40.DNS and DHCP Configuration Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="speed.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Further-Resources.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="DNSDHCP"></a>Chapter40.DNS and DHCP Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="DNSDHCP.html#id2964821">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964821"></a>Note</h2></div></div><div></div></div><p>
This chapter did not make it into this release.
It is planned for the published release of this document.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="speed.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="Further-Resources.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter39.Samba Performance Tuning</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter41.Further Resources</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="speed.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="Further-Resources.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter39.Samba Performance Tuning</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter41.Further Resources</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/FastStart.html b/docs/htmldocs/FastStart.html
index 2d474566c5c..64c38702fd4 100644
--- a/docs/htmldocs/FastStart.html
+++ b/docs/htmldocs/FastStart.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter3.Fast Start for the Impatient</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="install.html" title="Chapter2.How to Install and Test SAMBA"><link rel="next" href="type.html" title="PartII.Server Configuration Basics"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter3.Fast Start for the Impatient</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="install.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="type.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FastStart"></a>Chapter3.Fast Start for the Impatient</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FastStart.html#id2886380">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886380"></a>Note</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter3.Fast Start for the Impatient</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="install.html" title="Chapter2.How to Install and Test SAMBA"><link rel="next" href="type.html" title="PartII.Server Configuration Basics"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter3.Fast Start for the Impatient</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="install.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="type.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FastStart"></a>Chapter3.Fast Start for the Impatient</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="FastStart.html#id2884787">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884787"></a>Note</h2></div></div><div></div></div><p>
This chapter did not make it into this release.
It is planned for the published release of this document.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="install.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="introduction.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="type.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter2.How to Install and Test SAMBA</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">PartII.Server Configuration Basics</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="install.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="introduction.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="type.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter2.How to Install and Test SAMBA</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">PartII.Server Configuration Basics</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/Further-Resources.html b/docs/htmldocs/Further-Resources.html
index ba734c1e135..8464c480c29 100644
--- a/docs/htmldocs/Further-Resources.html
+++ b/docs/htmldocs/Further-Resources.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter41.Further Resources</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="DNSDHCP.html" title="Chapter40.DNS and DHCP Configuration Guide"><link rel="next" href="ix01.html" title="Index"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter41.Further Resources</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="DNSDHCP.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="ix01.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Further-Resources"></a>Chapter41.Further Resources</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 1, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Further-Resources.html#id3015954">Websites</a></dt><dt><a href="Further-Resources.html#id3016336">Related updates from Microsoft</a></dt><dt><a href="Further-Resources.html#id3016404">Books</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3015954"></a>Websites</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter41.Further Resources</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="DNSDHCP.html" title="Chapter40.DNS and DHCP Configuration Guide"><link rel="next" href="ix01.html" title="Index"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter41.Further Resources</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="DNSDHCP.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="ix01.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Further-Resources"></a>Chapter41.Further Resources</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 1, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Further-Resources.html#id2964888">Websites</a></dt><dt><a href="Further-Resources.html#id2965278">Related updates from Microsoft</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964888"></a>Websites</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
<a href="http://hr.uoregon.edu/davidrl/cifs.txt" target="_top">
<span class="emphasis"><em>CIFS: Common Insecurities Fail Scrutiny</em></span> by &quot;Hobbit&quot;</a>
</p></li><li><p>
@@ -86,7 +85,7 @@
<span class="emphasis"><em>WFWG: Password Caching and How It Affects LAN Manager
Security</em></span> at Microsoft Knowledge Base
</a>
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016336"></a>Related updates from Microsoft</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
+ </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2965278"></a>Related updates from Microsoft</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
<a href="http://support.microsoft.com/support/kb/articles/q92/5/88.asp" target="_top">
<span class="emphasis"><em>Enhanced Encryption for Windows 95 Password Cache</em></span>
</a>
@@ -98,4 +97,4 @@
<a href="http://support.microsoft.com/support/kb/articles/q136/4/18.asp" target="_top">
<span class="emphasis"><em>Windows for Workgroups Sharing Updates</em></span>
</a>
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016404"></a>Books</h2></div></div><div></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="DNSDHCP.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ix01.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter40.DNS and DHCP Configuration Guide</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Index</td></tr></table></div></body></html>
+ </p></li></ul></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="DNSDHCP.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ix01.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter40.DNS and DHCP Configuration Guide</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Index</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/InterdomainTrusts.html b/docs/htmldocs/InterdomainTrusts.html
index 44d925ced50..8422c520737 100644
--- a/docs/htmldocs/InterdomainTrusts.html
+++ b/docs/htmldocs/InterdomainTrusts.html
@@ -1,11 +1,11 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter16.Interdomain Trust Relationships</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="securing-samba.html" title="Chapter15.Securing Samba"><link rel="next" href="msdfs.html" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter16.Interdomain Trust Relationships</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="securing-samba.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="msdfs.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="InterdomainTrusts"></a>Chapter16.Interdomain Trust Relationships</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Rafal</span> <span class="surname">Szczesniak</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:mimir@samba.org">mimir@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="InterdomainTrusts.html#id2929505">Features and Benefits</a></dt><dt><a href="InterdomainTrusts.html#id2929534">Trust Relationship Background</a></dt><dt><a href="InterdomainTrusts.html#id2929617">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929629">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="InterdomainTrusts.html#id2931604">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2931642">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2931669">Samba-3 as the Trusting Domain</a></dt><dt><a href="InterdomainTrusts.html#id2931795">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2929173">Common Errors</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929188">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter16.Interdomain Trust Relationships</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="securing-samba.html" title="Chapter15.Securing Samba"><link rel="next" href="msdfs.html" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter16.Interdomain Trust Relationships</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="securing-samba.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="msdfs.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="InterdomainTrusts"></a>Chapter16.Interdomain Trust Relationships</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Rafal</span> <span class="surname">Szczesniak</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:mimir@samba.org">mimir@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><span class="contrib">drawing</span><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Langasek</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:vorlon@netexpress.net">vorlon@netexpress.net</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="InterdomainTrusts.html#id2911605">Features and Benefits</a></dt><dt><a href="InterdomainTrusts.html#id2911633">Trust Relationship Background</a></dt><dt><a href="InterdomainTrusts.html#id2911721">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2911750">Creating an NT4 Domain Trust</a></dt><dt><a href="InterdomainTrusts.html#id2911822">Completing an NT4 Domain Trust</a></dt><dt><a href="InterdomainTrusts.html#id2911868">Inter-Domain Trust Facilities</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2912046">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#samba-trusted-domain">Samba as the Trusted Domain</a></dt><dt><a href="InterdomainTrusts.html#id2912232">Samba as the Trusting Domain</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2912370">NT4-style Domain Trusts with Windows 2000</a></dt><dt><a href="InterdomainTrusts.html#id2912476">Common Errors</a></dt></dl></div><a class="indexterm" name="id2911584"></a><p>
Samba-3 supports NT4 style domain trust relationships. This is feature that many sites
will want to use if they migrate to Samba-3 from and NT4 style domain and do NOT want to
adopt Active Directory or an LDAP based authentication back end. This section explains
some background information regarding trust relationships and how to create them. It is now
-possible for Samba-3 to NT4 trust (and vice versa), as well as Samba3 to Samba3 trusts.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929505"></a>Features and Benefits</h2></div></div><div></div></div><p>
+possible for Samba-3 to trust NT4 (and vice versa), as well as to create Samba3-to-Samba3
+trusts.
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911605"></a>Features and Benefits</h2></div></div><div></div></div><p>
Samba-3 can participate in Samba-to-Samba as well as in Samba-to-MS Windows NT4 style
trust relationships. This imparts to Samba similar scalability as is possible with
MS Windows NT4.
@@ -15,10 +15,10 @@ database such as LDAP, and given it's ability to run in Primary as well as Backu
modes, the administrator would be well advised to consider alternatives to the use of
Interdomain trusts simply because by the very nature of how this works it is fragile.
That was, after all, a key reason for the development and adoption of Microsoft Active Directory.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929534"></a>Trust Relationship Background</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911633"></a>Trust Relationship Background</h2></div></div><div></div></div><p>
MS Windows NT3.x/4.0 type security domains employ a non-hierarchical security structure.
The limitations of this architecture as it affects the scalability of MS Windows networking
-in large organisations is well known. Additionally, the flat-name space that results from
+in large organisations is well known. Additionally, the flat namespace that results from
this design significantly impacts the delegation of administrative responsibilities in
large and diverse organisations.
</p><p>
@@ -44,90 +44,136 @@ relationship, and WHITE and BLUE have a trust relationship, then it holds that t
implied trust between the RED and BLUE domains. ie: Relationships are explicit and not
transitive.
</p><p>
+
New to MS Windows 2000 ADS security contexts is the fact that trust relationships are two-way
by default. Also, all inter-ADS domain trusts are transitive. In the case of the RED, WHITE and BLUE
domains above, with Windows 2000 and ADS the RED and BLUE domains CAN trust each other. This is
an inherent feature of ADS domains. Samba-3 implements MS Windows NT4
style Interdomain trusts and interoperates with MS Windows 200x ADS
security domains in similar manner to MS Windows NT4 style domains.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929617"></a>Native MS Windows NT4 Trusts Configuration</h2></div></div><div></div></div><p>
-There are two steps to creating an interdomain trust relationship.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929629"></a>NT4 as the Trusting Domain (ie. creating the trusted account)</h3></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911721"></a>Native MS Windows NT4 Trusts Configuration</h2></div></div><div></div></div><p>
+There are two steps to creating an interdomain trust relationship. To effect a two-way trust
+relationship it is necessary for each domain administrator to create a trust account for the
+other domain to use in verifying security credentials.
+
+<a class="indexterm" name="id2911738"></a>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911750"></a>Creating an NT4 Domain Trust</h3></div></div><div></div></div><p>
For MS Windows NT4, all domain trust relationships are configured using the
-<span class="application">Domain User Manager</span>. To affect a two way trust relationship it is
-necessary for each domain administrator to make available (for use by an external domain) it's
-security resources. This is done from the Domain User Manager Policies entry on the menu bar.
-From the <span class="guimenu">Policy</span> menu, select <span class="guimenuitem">Trust Relationships</span>, then
-next to the lower box that is labelled <span class="guilabel">Permitted to Trust this Domain</span> are two
-buttons, <span class="guibutton">Add</span> and <span class="guibutton">Remove</span>. The <span class="guibutton">Add</span>
-button will open a panel in which needs to be entered the remote domain that will be able to assign
-user rights to your domain. In addition it is necessary to enter a password
-that is specific to this trust relationship. The password needs to be
-typed twice (for standard confirmation).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931604"></a>NT4 as the Trusted Domain (ie. creating trusted account's password)</h3></div></div><div></div></div><p>
+<span class="application">Domain User Manager</span>. This is done from the Domain User Manager Policies
+entry on the menu bar. From the <span class="guimenu">Policy</span> menu, select
+<span class="guimenuitem">Trust Relationships</span>. Next to the lower box labelled
+<span class="guilabel">Permitted to Trust this Domain</span> are two buttons, <span class="guibutton">Add</span>
+and <span class="guibutton">Remove</span>. The <span class="guibutton">Add</span> button will open a panel in which
+to enter the name of the remote domain that will be able to assign access rights to users in
+your domain. You will also need to enter a password for this trust relationship, which the
+trusting domain will use when authenticating users from the trusted domain.
+The password needs to be typed twice (for standard confirmation).
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911822"></a>Completing an NT4 Domain Trust</h3></div></div><div></div></div><p>
+<a class="indexterm" name="id2911833"></a>
A trust relationship will work only when the other (trusting) domain makes the appropriate connections
with the trusted domain. To consummate the trust relationship the administrator will launch the
Domain User Manager, from the menu select Policies, then select Trust Relationships, then click on the
<span class="guibutton">Add</span> button that is next to the box that is labelled
<span class="guilabel">Trusted Domains</span>. A panel will open in which must be entered the name of the remote
domain as well as the password assigned to that trust.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2931642"></a>Configuring Samba NT-style Domain Trusts</h2></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911868"></a>Inter-Domain Trust Facilities</h3></div></div><div></div></div><a class="indexterm" name="id2911877"></a><p>
+A two-way trust relationship is created when two one-way trusts are created, one in each direction.
+Where a one-way trust has been established between two MS Windows NT4 domains (let's call them
+DomA and DomB) the following facilities are created:
+</p><div class="figure"><a name="trusts1"></a><p class="title"><b>Figure16.1.Trusts overview</b></p><div class="mediaobject"><img src="projdoc/imagefiles/trusts1.png" width="270" alt="Trusts overview"></div></div><div class="itemizedlist"><ul type="disc"><li><p>
+ DomA (completes the trust connection) Trusts DomB
+ </p></li><li><p>
+ DomA is the Trusting domain
+ </p></li><li><p>
+ DomB is the Trusted domain (originates the trust account)
+ </p></li><li><p>
+ Users in DomB can access resources in DomA
+ </p></li><li><p>
+ Users in DomA can NOT access resources in DomB
+ </p></li><li><p>
+ Global groups from DomB CAN be used in DomA
+ </p></li><li><p>
+ Global groups from DomA can NOT be used in DomB
+ </p></li><li><p>
+ DomB DOES appear in the logon dialog box on client workstations in DomA
+ </p></li><li><p>
+ DomA does NOT appear in the logon dialog box on client workstations in DomB
+ </p></li></ul></div><div class="itemizedlist"><ul type="disc"><li><p>
+ Users / Groups in a trusting domain can NOT be granted rights, permissions or access
+ to a trusted domain.
+ </p></li><li><p>
+ The trusting domain CAN access and use accounts (Users / Global Groups) in the
+ trusted domain.
+ </p></li><li><p>
+ Administrators of the trusted domain CAN be granted admininstrative rights in the
+ trusting domain.
+ </p></li><li><p>
+ Users in a trusted domain CAN be given rights and privileges in the trusting
+ domain.
+ </p></li><li><p>
+ Trusted domain Global Groups CAN be given rights and permissions in the trusting
+ domain.
+ </p></li><li><p>
+ Global Groups from the trusted domain CAN be made members in Local Groups on
+ MS Windows domain member machines.
+ </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912046"></a>Configuring Samba NT-style Domain Trusts</h2></div></div><div></div></div><p>
This description is meant to be a fairly short introduction about how to set up a Samba server so
that it could participate in interdomain trust relationships. Trust relationship support in Samba
is in its early stage, so lot of things don't work yet.
</p><p>
-Each of the procedures described below is treated as they were performed with Windows NT4 Server on
-one end. The remote end could just as well be another Samba-3 domain. It can be clearly seen, after
-reading this document, that combining Samba-specific parts of what's written below leads to trust
-between domains in purely Samba environment.
-</p><div xmlns:ns44="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931669"></a>Samba-3 as the Trusting Domain</h3></div></div><div></div></div><p>
-In order to set the Samba PDC to be the trusted party of the relationship first you need
-to create special account for the domain that will be the trusting party. To do that,
+Each of the procedures described below assumes the peer domain in the trust relationship is
+controlled by a Windows NT4 server. However, the remote end could just as well be another
+Samba-3 domain. It can be clearly seen, after reading this document, that combining
+Samba-specific parts of what's written below leads to trust between domains in a purely Samba
+environment.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="samba-trusted-domain"></a>Samba as the Trusted Domain</h3></div></div><div></div></div><p>
+In order to set the Samba PDC to be the trusted party of the relationship you first need
+to create a special account for the domain that will be the trusting party. To do that,
you can use the 'smbpasswd' utility. Creating the trusted domain account is very
similar to creating a trusted machine account. Suppose, your domain is
called SAMBA, and the remote domain is called RUMBA. The first step
will be to issue this command from your favourite shell:
-</p><ns44:p>
-</ns44:p><pre class="screen">
+</p><p>
+</p><pre class="screen">
<tt class="prompt">root# </tt> <b class="userinput"><tt>smbpasswd -a -i rumba</tt></b>
- New SMB password: XXXXXXXX
- Retype SMB password: XXXXXXXX
- Added user rumba$
-</pre><ns44:p>
+New SMB password: <b class="userinput"><tt>XXXXXXXX</tt></b>
+Retype SMB password: <b class="userinput"><tt>XXXXXXXX</tt></b>
+Added user rumba$
+</pre><p>
where <tt class="option">-a</tt> means to add a new account into the
passdb database and <tt class="option">-i</tt> means: ''create this
account with the InterDomain trust flag''
-</ns44:p><p>
+</p><p>
The account name will be 'rumba$' (the name of the remote domain)
</p><p>
After issuing this command you'll be asked to enter the password for
the account. You can use any password you want, but be aware that Windows NT will
not change this password until 7 days following account creation.
After the command returns successfully, you can look at the entry for the new account
-(in the standard way depending on your configuration) and see that account's name is
-really RUMBA$ and it has 'I' flag in the flags field. Now you're ready to confirm
+(in the standard way as appropriate for your configuration) and see that account's name is
+really RUMBA$ and it has the 'I' flag set in the flags field. Now you're ready to confirm
the trust by establishing it from Windows NT Server.
-</p><p>
-Open <span class="application">User Manager for Domains</span> and from menu
-<span class="guimenu">Policies</span> select <span class="guimenuitem">Trust Relationships...</span>.
-Right beside <span class="guilabel">Trusted domains</span> list box press the
+</p><a class="indexterm" name="id2912170"></a><p>
+Open <span class="application">User Manager for Domains</span> and from the
+<span class="guimenu">Policies</span> menu, select <span class="guimenuitem">Trust Relationships...</span>.
+Right beside the <span class="guilabel">Trusted domains</span> list box press the
<span class="guimenu">Add...</span> button. You will be prompted for
the trusted domain name and the relationship password. Type in SAMBA, as this is
-your domain name, and the password used at the time of account creation.
+the name of the remote domain, and the password used at the time of account creation.
Press OK and, if everything went without incident, you will see
<tt class="computeroutput">Trusted domain relationship successfully
established</tt> message.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931795"></a>Samba-3 as the Trusted Domain</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912232"></a>Samba as the Trusting Domain</h3></div></div><div></div></div><p>
This time activities are somewhat reversed. Again, we'll assume that your domain
controlled by the Samba PDC is called SAMBA and NT-controlled domain is called RUMBA.
</p><p>
-The very first thing requirement is to add an account for the SAMBA domain on RUMBA's PDC.
-</p><p>
+The very first step is to add an account for the SAMBA domain on RUMBA's PDC.
+</p><a class="indexterm" name="id2912253"></a><p>
Launch the <span class="application">Domain User Manager</span>, then from the menu select
<span class="guimenu">Policies</span>, <span class="guimenuitem">Trust Relationships</span>.
-Now, next to <span class="guilabel">Trusted Domains</span> box press the <span class="guibutton">Add</span>
-button, and type in the name of the trusted domain (SAMBA) and password securing
+Now, next to the <span class="guilabel">Trusted Domains</span> box press the <span class="guibutton">Add</span>
+button, and type in the name of the trusted domain (SAMBA) and the password to use in securing
the relationship.
</p><p>
The password can be arbitrarily chosen. It is easy to change the password
@@ -139,38 +185,39 @@ Using your favourite shell while being logged in as root, issue this command:
<tt class="prompt">root# </tt><b class="userinput"><tt>net rpc trustdom establish rumba</tt></b>
</p><p>
You will be prompted for the password you just typed on your Windows NT4 Server box.
-Do not worry if you see an error message that mentions a returned code of
-<span class="errorname">NT_STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT</span>. It means the
+Do not worry if you see an error message that mentions a return code of
+NT_STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT. It means the
password you gave is correct and the NT4 Server says the account is
ready for interdomain connection and not for ordinary
-connection. After that, be patient it can take a while (especially
-in large networks), you should see the <tt class="computeroutput">Success</tt> message.
+connection. After that, be patient; it can take a while (especially
+in large networks), but eventually you should see the <tt class="computeroutput">Success</tt> message.
Congratulations! Your trust relationship has just been established.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Note that you have to run this command as root because you must have write access to
the <tt class="filename">secrets.tdb</tt> file.
-</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929173"></a>Common Errors</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912370"></a>NT4-style Domain Trusts with Windows 2000</h2></div></div><div></div></div><p>
+Although <span class="application">Domain User Manager</span> is not present in Windows 2000, it is
+also possible to establish an NT4-style trust relationship with a Windows 2000 domain
+controller running in mixed mode as the trusting server. It should also be possible for
+Samba to trust a Windows 2000 server, however, more testing is still needed in this area.
+</p><p>
+After <a href="InterdomainTrusts.html#samba-trusted-domain" title="Samba as the Trusted Domain">creating the interdomain trust account on the
+Samba server</a> as described above, open <span class="application">Active Directory Domains and
+Trusts</span> on the AD controller of the domain whose resources you wish Samba users
+to have access to. Remember that since NT4-style trusts are not transitive, if you want
+your users to have access to multiple mixed-mode domains in your AD forest, you will need to
+repeat this process for each of those domains. With <span class="application">Active Directory Domains
+and Trusts</span> open, right-click on the name of the Active Directory domain that
+will trust our Samba domain and choose <span class="guimenuitem">Properties</span>, then click on
+the <span class="guilabel">Trusts</span> tab. In the upper part of the panel, you will see a list box
+labelled <span class="guilabel">Domains trusted by this domain:</span>, and an
+<span class="guilabel">Add...</span> button next to it. Press this button, and just as with NT4, you
+will be prompted for the trusted domain name and the relationship password. Press OK, and
+after a moment, Active Directory will respond with <tt class="computeroutput">The trusted domain has
+been added and the trust has been verified.</tt> Your Samba users can now be
+granted acess to resources in the AD domain.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912476"></a>Common Errors</h2></div></div><div></div></div><p>
Interdomain trust relationships should NOT be attempted on networks that are unstable
or that suffer regular outages. Network stability and integrity are key concerns with
distributed trusted domains.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929188"></a>Tell me about Trust Relationships using Samba</h3></div></div><div></div></div><p>
- Like many, I administer multiple LANs connected together using NT trust
- relationships. This was implemented about 4 years ago. I now have the
- occasion to consider performing this same task again, but this time, I
- would like to implement it solely through samba - no Microsoft PDCs
- anywhere.
- </p><p>
- I have read documentation on samba.org regarding NT-style trust
- relationships and am now wondering, can I do what I want to? I already
- have successfully implemented 2 samba servers, but they are not PDCs.
- They merely act as file servers. I seem to remember, and it appears to
- be true (according to samba.org) that trust relationships are a
- challenge.
- </p><p>
- Please provide any helpful feedback that you may have.
- </p><p>
- These are almost complete in Samba 3.0 snapshots. The main catch
- is getting winbindd to be able to allocate UID/GIDs for trusted
- users/groups. See the updated Samba HOWTO collection for more
- details.
- </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="securing-samba.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="msdfs.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter15.Securing Samba</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter17.Hosting a Microsoft Distributed File System tree on Samba</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="securing-samba.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="msdfs.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter15.Securing Samba</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter17.Hosting a Microsoft Distributed File System tree on Samba</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/IntroSMB.html b/docs/htmldocs/IntroSMB.html
index 6d267d5b723..51a22f14fad 100644
--- a/docs/htmldocs/IntroSMB.html
+++ b/docs/htmldocs/IntroSMB.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter1.Introduction to Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="introduction.html" title="PartI.General Installation"><link rel="next" href="install.html" title="Chapter2.How to Install and Test SAMBA"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter1.Introduction to Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="introduction.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="install.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="IntroSMB"></a>Chapter1.Introduction to Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 14, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="IntroSMB.html#id2885266">Background</a></dt><dt><a href="IntroSMB.html#id2885320">Terminology</a></dt><dt><a href="IntroSMB.html#id2884044">Related Projects</a></dt><dt><a href="IntroSMB.html#id2884112">SMB Methodology</a></dt><dt><a href="IntroSMB.html#id2884199">Epilogue</a></dt><dt><a href="IntroSMB.html#id2884272">Miscellaneous</a></dt></dl></div><p>&#8220;<span class="quote">
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter1.Introduction to Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="introduction.html" title="PartI.General Installation"><link rel="next" href="install.html" title="Chapter2.How to Install and Test SAMBA"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter1.Introduction to Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="introduction.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="install.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="IntroSMB"></a>Chapter1.Introduction to Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 14, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="IntroSMB.html#id2817919">Background</a></dt><dt><a href="IntroSMB.html#id2817978">Terminology</a></dt><dt><a href="IntroSMB.html#id2818169">Related Projects</a></dt><dt><a href="IntroSMB.html#id2818237">SMB Methodology</a></dt><dt><a href="IntroSMB.html#id2818345">Epilogue</a></dt><dt><a href="IntroSMB.html#id2818430">Miscellaneous</a></dt></dl></div><p>&#8220;<span class="quote">
&quot;If you understand what you're doing, you're not learning anything.&quot;
-- Anonymous
</span>&#8221;</p><p>
@@ -8,7 +7,7 @@ transport protocol. In fact, it can support any SMB/CIFS-enabled client. One of
strengths is that you can use it to blend your mix of Windows and Linux machines together
without requiring a separate Windows NT/2000/2003 Server. Samba is actively being developed
by a global team of about 30 active programmers and was originally developed by Andrew Tridgell.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885266"></a>Background</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2817919"></a>Background</h2></div></div><div></div></div><p>
Once long ago, there was a buzzword referred to as DCE/RPC. This stood for Distributed
Computing Environment/Remote Procedure Calls and conceptually was a good idea. It was
originally developed by Apollo/HP as NCA 1.0 (Network Computing Architecture) and only
@@ -34,7 +33,7 @@ been dutifully waded through during the information-gathering stages of this pro
are *still* many missing pieces... While often tedious, at least the way has been generously
littered with occurrences of clapping hand to forehead and muttering 'crikey, what are they
thinking?
-</em></span></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885320"></a>Terminology</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
+</em></span></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2817978"></a>Terminology</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
SMB: Acronym for &quot;Server Message Block&quot;. This is Microsoft's file and printer sharing protocol.
</p></li><li><p>
CIFS: Acronym for &quot;Common Internet File System&quot;. Around 1996, Microsoft apparently
@@ -84,7 +83,7 @@ thinking?
W3K: Acronym for Windows 2003 Server
</p></li></ul></div><p>If you plan on getting help, make sure to subscribe to the Samba Mailing List (available at
<a href="http://www.samba.org/" target="_top">http://www.samba.org</a>).
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884044"></a>Related Projects</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2818169"></a>Related Projects</h2></div></div><div></div></div><p>
There are currently two network filesystem client projects for Linux that are directly
related to Samba: SMBFS and CIFS VFS. These are both available in the Linux kernel itself.
</p><div class="itemizedlist"><ul type="disc"><li><p>
@@ -106,7 +105,7 @@ nothing to do with acting as a file and print server for SMB/CIFS clients.
There are other Open Source CIFS client implementations, such as the
<a href="http://jcifs.samba.org/" target="_top">jCIFS project</a>
which provides an SMB client toolkit written in Java.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884112"></a>SMB Methodology</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2818237"></a>SMB Methodology</h2></div></div><div></div></div><p>
Traditionally, SMB uses UDP port 137 (NetBIOS name service, or netbios-ns),
UDP port 138 (NetBIOS datagram service, or netbios-dgm), and TCP port 139 (NetBIOS
session service, or netbios-ssn). Anyone looking at their network with a good
@@ -138,7 +137,7 @@ up a single file. In general, SMB sessions are established in the following orde
A good way to examine this process in depth is to try out
<a href="http://www.securityfriday.com/ToolDownload/SWB/swb_doc.html" target="_top">SecurityFriday's SWB program</a>.
It allows you to walk through the establishment of a SMB/CIFS session step by step.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884199"></a>Epilogue</h2></div></div><div></div></div><p>&#8220;<span class="quote">
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2818345"></a>Epilogue</h2></div></div><div></div></div><p>&#8220;<span class="quote">
What's fundamentally wrong is that nobody ever had any taste when they
did it. Microsoft has been very much into making the user interface look good,
but internally it's just a complete mess. And even people who program for Microsoft
@@ -167,9 +166,9 @@ not the completely clueless user who probably sits there shivering thinking
That's what's really irritating to me.&quot;
</span>&#8221;</p><p>--
<a href="http://hr.uoregon.edu/davidrl/boot.txt" target="_top">Linus Torvalds, from an interview with BOOT Magazine, Sept 1998</a>
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884272"></a>Miscellaneous</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2818430"></a>Miscellaneous</h2></div></div><div></div></div><p>
This chapter is Copyright 2003 David Lechnyr (david at lechnyr dot com).
Permission is granted to copy, distribute and/or modify this document under the terms
of the GNU Free Documentation License, Version 1.2 or any later version published by the Free
Software Foundation. A copy of the license is available at http://www.gnu.org/licenses/fdl.txt.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="introduction.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="introduction.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="install.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartI.General Installation</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter2.How to Install and Test SAMBA</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="introduction.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="introduction.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="install.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartI.General Installation</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter2.How to Install and Test SAMBA</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/NT4Migration.html b/docs/htmldocs/NT4Migration.html
index 0d7dbce2ed3..b5614926443 100644
--- a/docs/htmldocs/NT4Migration.html
+++ b/docs/htmldocs/NT4Migration.html
@@ -1,8 +1,7 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter31.Migration from NT4 PDC to Samba-3 PDC</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="upgrading-to-3.0.html" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0"><link rel="next" href="SWAT.html" title="Chapter32.SWAT - The Samba Web Administration Tool"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter31.Migration from NT4 PDC to Samba-3 PDC</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="upgrading-to-3.0.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="SWAT.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NT4Migration"></a>Chapter31.Migration from NT4 PDC to Samba-3 PDC</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="NT4Migration.html#id3000463">Planning and Getting Started</a></dt><dd><dl><dt><a href="NT4Migration.html#id3000487">Objectives</a></dt><dt><a href="NT4Migration.html#id2999415">Steps In Migration Process</a></dt></dl></dd><dt><a href="NT4Migration.html#id3001632">Migration Options</a></dt><dd><dl><dt><a href="NT4Migration.html#id3001713">Planning for Success</a></dt><dt><a href="NT4Migration.html#id3001954">Samba Implementation Choices</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter31.Migration from NT4 PDC to Samba-3 PDC</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="upgrading-to-3.0.html" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0"><link rel="next" href="SWAT.html" title="Chapter32.SWAT - The Samba Web Administration Tool"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter31.Migration from NT4 PDC to Samba-3 PDC</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="upgrading-to-3.0.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="SWAT.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NT4Migration"></a>Chapter31.Migration from NT4 PDC to Samba-3 PDC</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="NT4Migration.html#id2955644">Planning and Getting Started</a></dt><dd><dl><dt><a href="NT4Migration.html#id2955669">Objectives</a></dt><dt><a href="NT4Migration.html#id2956108">Steps In Migration Process</a></dt></dl></dd><dt><a href="NT4Migration.html#id2956323">Migration Options</a></dt><dd><dl><dt><a href="NT4Migration.html#id2956414">Planning for Success</a></dt><dt><a href="NT4Migration.html#id2956670">Samba-3 Implementation Choices</a></dt></dl></dd></dl></div><p>
This is a rough guide to assist those wishing to migrate from NT4 domain control to
Samba-3 based domain control.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3000463"></a>Planning and Getting Started</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955644"></a>Planning and Getting Started</h2></div></div><div></div></div><p>
In the IT world there is often a saying that all problems are encountered because of
poor planning. The corollary to this saying is that not all problems can be anticipated
and planned for. Then again, good planning will anticipate most show stopper type situations.
@@ -10,65 +9,62 @@ and planned for. Then again, good planning will anticipate most show stopper typ
Those wishing to migrate from MS Windows NT4 domain control to a Samba-3 domain control
environment would do well to develop a detailed migration plan. So here are a few pointers to
help migration get under way.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3000487"></a>Objectives</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955669"></a>Objectives</h3></div></div><div></div></div><p>
The key objective for most organisations will be to make the migration from MS Windows NT4
to Samba-3 domain control as painless as possible. One of the challenges you may experience
in your migration process may well be one of convincing management that the new environment
should remain in place. Many who have introduced open source technologies have experienced
pressure to return to a Microsoft based platform solution at the first sign of trouble.
</p><p>
-It is strongly advised that before attempting a migration to a Samba-3 controlled network
-that every possible effort be made to gain all-round commitment to the change. Firstly, you
-should know precisely <span class="emphasis"><em>why</em></span> the change is important for the organisation.
-Possible motivations to make a change include:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Improve network manageability</td></tr><tr><td>Obtain better user level functionality</td></tr><tr><td>Reduce network operating costs</td></tr><tr><td>Reduce exposure caused by Microsoft withdrawal of NT4 support</td></tr><tr><td>Avoid MS License 6 implications</td></tr><tr><td>Reduce organisation's dependency on Microsoft</td></tr></table><p>
-It is vital that it be well recognised that Samba-3 is NOT MS Windows NT4. Samba-3 offers
-an alternative solution that is both different from MS Windows NT4 and that offers some
-advantages compared with it. It should also be recognised that Samba-3 lacks many of the
+Before attempting a migration to a Samba-3 controlled network make every possible effort to
+gain all-round commitment to the change. Know precisely <span class="emphasis"><em>why</em></span> the change
+is important for the organisation. Possible motivations to make a change include:
+</p><div class="itemizedlist"><ul type="disc"><li><p>Improve network manageability</p></li><li><p>Obtain better user level functionality</p></li><li><p>Reduce network operating costs</p></li><li><p>Reduce exposure caused by Microsoft withdrawal of NT4 support</p></li><li><p>Avoid MS License 6 implications</p></li><li><p>Reduce organisation's dependency on Microsoft</p></li></ul></div><p>
+Make sure that everyone knows that Samba-3 is NOT MS Windows NT4. Samba-3 offers
+an alternative solution that is both different from MS Windows NT4 and that offers
+advantages compared with it. Gain recognition that Samba-3 lacks many of the
features that Microsoft has promoted as core values in migration from MS Windows NT4 to
MS Windows 2000 and beyond (with or without Active Directory services).
</p><p>
What are the features that Samba-3 can NOT provide?
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Active Directory Server</td></tr><tr><td>Group Policy Objects (in Active Directory)</td></tr><tr><td>Machine Policy objects</td></tr><tr><td>Logon Scripts in Active Directory</td></tr><tr><td>Software Application and Access Controls in Active Directory</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Active Directory Server</p></li><li><p>Group Policy Objects (in Active Directory)</p></li><li><p>Machine Policy objects</p></li><li><p>Logon Scripts in Active Directory</p></li><li><p>Software Application and Access Controls in Active Directory</p></li></ul></div><p>
The features that Samba-3 DOES provide and that may be of compelling interest to your site
includes:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Lower Cost of Ownership</td></tr><tr><td>Global availability of support with no strings attached</td></tr><tr><td>Dynamic SMB Servers (ie:Can run more than one server per Unix/Linux system)</td></tr><tr><td>Creation of on-the-fly logon scripts</td></tr><tr><td>Creation of on-the-fly Policy Files</td></tr><tr><td>Greater Stability, Reliability, Performance and Availability</td></tr><tr><td>Manageability via an ssh connection</td></tr><tr><td>Flexible choices of back-end authentication technologies (tdbsam, ldapsam, mysqlsam)</td></tr><tr><td>Ability to implement a full single-sign-on architecture</td></tr><tr><td>Ability to distribute authentication systems for absolute minimum wide area network bandwidth demand</td></tr></table><p>
-Before migrating a network from MS Windows NT4 to Samba-3 it is vital that all necessary factors are
-considered. Users should be educated about changes they may experience so that the change will be a
-welcome one and not become an obstacle to the work they need to do. The following are some of the
-factors that will go into a successful migration:
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2999189"></a>Domain Layout</h4></div></div><div></div></div><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Lower Cost of Ownership</p></li><li><p>Global availability of support with no strings attached</p></li><li><p>Dynamic SMB Servers (ie:Can run more than one server per Unix/Linux system)</p></li><li><p>Creation of on-the-fly logon scripts</p></li><li><p>Creation of on-the-fly Policy Files</p></li><li><p>Greater Stability, Reliability, Performance and Availability</p></li><li><p>Manageability via an ssh connection</p></li><li><p>Flexible choices of back-end authentication technologies (tdbsam, ldapsam, mysqlsam)</p></li><li><p>Ability to implement a full single-sign-on architecture</p></li><li><p>Ability to distribute authentication systems for absolute minimum wide area network bandwidth demand</p></li></ul></div><p>
+Before migrating a network from MS Windows NT4 to Samba-3 consider all necessary factors. Users
+should be educated about changes they may experience so that the change will be a welcome one
+and not become an obstacle to the work they need to do. The following are factors that will
+help ensure a successful migration:
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2955881"></a>Domain Layout</h4></div></div><div></div></div><p>
Samba-3 can be configured as a domain controller, a back-up domain controller (probably best called
a secondary controller), a domain member, or as a stand-alone server. The Windows network security
domain context should be sized and scoped before implementation. Particular attention needs to be
paid to the location of the primary domain controller (PDC) as well as backup controllers (BDCs).
-It should be noted that one way in which Samba-3 differs from Microsoft technology is that if one
-chooses to use an LDAP authentication backend then the same database can be used by several different
-domains. This means that in a complex organisation there can be a single LDAP database, that itself
-can be distributed, that can simultaneously serve multiple domains (that can also be widely distributed).
+One way in which Samba-3 differs from Microsoft technology is that if one chooses to use an LDAP
+authentication backend then the same database can be used by several different domains. In a
+complex organisation there can be a single LDAP database, which itself can be distributed (ie: Have
+a master server and multiple slave servers) that can simultaneously serve multiple domains.
</p><p>
-It is recommended that from a design perspective, the number of users per server, as well as the number
-of servers, per domain should be scaled according to needs and should also consider server capacity
-and network bandwidth.
+From a design perspective, the number of users per server, as well as the number of servers, per
+domain should be scaled taking into consideration server capacity and network bandwidth.
</p><p>
-A physical network segment may house several domains, each of which may span multiple network segments.
-Where domains span routed network segments it is most advisable to consider and test the performance
-implications of the design and layout of a network. A Centrally located domain controller that is being
-designed to serve multiple routed network segments may result in severe performance problems if the
-response time (eg: ping timing) between the remote segment and the PDC is more than 100 ms. In situations
-where the delay is too long it is highly recommended to locate a backup controller (BDC) to serve as
-the local authentication and access control server.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2999243"></a>Server Share and Directory Layout</h4></div></div><div></div></div><p>
-There are few cardinal rules to effective network design that can be broken with impunity.
-The most important rule of effective network management is that simplicity is king in every
-well controlled network. Every part of the infrastructure must be managed, the more complex
-it is, the greater will be the demand of keeping systems secure and functional.
+A physical network segment may house several domains. Each may span multiple network segments.
+Where domains span routed network segments, consider and test the performance implications of
+the design and layout of a network. A Centrally located domain controller that is designed to
+serve multiple routed network segments may result in severe performance problems. Check the
+response time (eg: ping timing) between the remote segment and the PDC. If long (more than 100 ms)
+locate a backup controller (BDC) on the remote segmanet to serve as the local authentication and
+access control server.
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2955930"></a>Server Share and Directory Layout</h4></div></div><div></div></div><p>
+There are cardinal rules to effective network design. These can not be broken with impunity.
+The most important rule: Simplicity is king in every well controlled network. Every part of
+the infrastructure must be managed, the more complex it is, the greater will be the demand
+of keeping systems secure and functional.
</p><p>
-The nature of the data that must be stored needs to be born in mind when deciding how many
-shares must be created. The physical disk space layout should also be taken into account
-when designing where share points will be created. Keep in mind that all data needs to be
-backed up, thus the simpler the disk layout the easier it will be to keep track of what must
-be backed up to tape or other off-line storage medium. Always plan and implement for minimum
+Keep in mind the nature of how data must be share. Physical disk space layout should be considered
+carefully. Some data must be backed up. The simpler the disk layout the easier it will be to
+keep track of backed needs. Identify what back media will be meet needs, consider backup to tape
+, CD-ROM or (DVD-ROM), or other off-line storage medium. Plan and implement for minimum
maintenance. Leave nothing to chance in your design, above all, do not leave backups to chance:
Backup and test, validate every backup, create a disaster recovery plan and prove that it works.
</p><p>
@@ -76,54 +72,70 @@ Users should be grouped according to data access control needs. File and directo
is best controlled via group permissions and the use of the &quot;sticky bit&quot; on group controlled
directories may substantially avoid file access complaints from samba share users.
</p><p>
-Many network administrators who are new to the game will attempt to use elaborate techniques
-to set access controls, on files, directories, shares, as well as in share definitions.
-There is the ever present danger that that administrator's successor will not understand the
-complex mess that has been inherited. Remember, apparent job security through complex design
-and implementation may ultimately cause loss of operations and downtime to users as the new
-administrator learns to untangle your web. Keep access controls simple and effective and
-make sure that users will never be interrupted by the stupidity of complexity.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2999304"></a>Logon Scripts</h4></div></div><div></div></div><p>
-Please refer to the section of this document on Advanced Network Administration for information
-regarding the network logon script options for Samba-3. Logon scripts can help to ensure that
-all users gain share and printer connections they need.
+Inexperienced network administrators often attempt elaborate techniques to set access
+controls on files, directories, shares, as well as in share definitions.
+Keep your design and implementation simple and document your design extensively. Have others
+audit your documentation. Do not create a complex mess that your successor will not understand.
+Remember, job security through complex design and implementation may cause loss of operations
+and downtime to users as the new administrator learns to untangle your knots. Keep access
+controls simple and effective and make sure that users will never be interrupted by stupid
+complexity.
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2955990"></a>Logon Scripts</h4></div></div><div></div></div><p>
+Logon scripts can help to ensure that all users gain share and printer connections they need.
</p><p>
-Logon scripts can be created on-the-fly so that all commands executed are specific to the
-rights and privileges granted to the user. The preferred controls should be affected through
+Logon scripts can be created 'on-the-fly' so that all commands executed are specific to the
+rights and priviliges granted to the user. The preferred controls should be affected through
group membership so that group information can be used to custom create a logon script using
-the <i class="parameter"><tt>root preexec</tt></i> parameters to the <tt class="filename">NETLOGON</tt> share.
+the <a class="indexterm" name="id2956012"></a><i class="parameter"><tt>root preexec</tt></i> parameters to the <i class="parameter"><tt>NETLOGON</tt></i> share.
</p><p>
Some sites prefer to use a tool such as <b class="command">kixstart</b> to establish a controlled
user environment. In any case you may wish to do a google search for logon script process controls.
In particular, you may wish to explore the use of the Microsoft knowledgebase article KB189105 that
deals with how to add printers without user intervention via the logon script process.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2999361"></a>Profile Migration/Creation</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2956054"></a>Profile Migration/Creation</h4></div></div><div></div></div><p>
User and Group Profiles may be migrated using the tools described in the section titled Desktop Profile
Management.
</p><p>
Profiles may also be managed using the Samba-3 tool <b class="command">profiles</b>. This tool allows
the MS Windows NT style security identifiers (SIDs) that are stored inside the profile NTuser.DAT file
to be changed to the SID of the Samba-3 domain.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2999390"></a>User and Group Accounts</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2956084"></a>User and Group Accounts</h4></div></div><div></div></div><p>
It is possible to migrate all account settings from an MS Windows NT4 domain to Samba-3. Before
attempting to migrate user and group accounts it is STRONGLY advised to create in Samba-3 the
-groups that are present on the MS Windows NT4 domain <span class="emphasis"><em>AND</em></span> to connect these to
-suitable Unix/Linux groups. Following this simple advice will mean that all user and group attributes
+groups that are present on the MS Windows NT4 domain <span class="emphasis"><em>AND</em></span> to map these to
+suitable Unix/Linux groups. By following this simple advice all user and group attributes
should migrate painlessly.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2999415"></a>Steps In Migration Process</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956108"></a>Steps In Migration Process</h3></div></div><div></div></div><p>
The approximate migration process is described below.
</p><div class="itemizedlist"><ul type="disc"><li><p>
You will have an NT4 PDC that has the users, groups, policies and profiles to be migrated
</p></li><li><p>
-Samba-3 set up as a DC with netlogon share, profile share, etc.
-</p></li></ul></div><div class="procedure"><p class="title"><b>Procedure31.1.The Account Migration Process</b></p><ol type="1"><li><p>Create a BDC account for the samba server using NT Server Manager</p><ol type="a"><li><p>Samba must NOT be running</p></li></ol></li><li><p><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>NT4PDC</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p><ol type="a"><li><p>lsaquery</p></li><li><p>Note the SID returned</p></li></ol></li><li><p><b class="userinput"><tt>net getsid -S <i class="replaceable"><tt>NT4PDC</tt></i> -w <i class="replaceable"><tt>DOMNAME</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p><ol type="a"><li><p>Note the SID</p></li></ol></li><li><p><b class="userinput"><tt>net getlocalsid</tt></b></p><ol type="a"><li><p>Note the SID, now check that all three SIDS reported are the same!</p></li></ol></li><li><p><b class="userinput"><tt>net rpc join -S <i class="replaceable"><tt>NT4PDC</tt></i> -w <i class="replaceable"><tt>DOMNAME</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>net rpc vampire -S <i class="replaceable"><tt>NT4PDC</tt></i> -U administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>pdbedit -L</tt></b></p><ol type="a"><li><p>Note - did the users migrate?</p></li></ol></li><li><p><b class="userinput"><tt>initGrps.sh <i class="replaceable"><tt>DOMNAME</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>net groupmap list</tt></b></p><ol type="a"><li><p>Now check that all groups are recognised</p></li></ol></li><li><p><b class="userinput"><tt>net rpc vampire -S <i class="replaceable"><tt>NT4PDC</tt></i> -U administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>pdbedit -Lv</tt></b></p><ol type="a"><li><p>Note - check that all group membership has been migrated</p></li></ol></li></ol></div><p>
-Now it is time to migrate all the profiles, then migrate all policy files.
-More later.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001632"></a>Migration Options</h2></div></div><div></div></div><p>
-Based on feedback from many sites as well as from actual installation and maintenance
-experience sites that wish to migrate from MS Windows NT4 Domain Control to a Samba
-based solution fit into three basic categories.
-</p><div class="table"><a name="id3001647"></a><p class="title"><b>Table31.1.The 3 Major Site Types</b></p><table summary="The 3 Major Site Types" border="1"><colgroup><col><col></colgroup><thead><tr><th>Number of Users</th><th>Description</th></tr></thead><tbody><tr><td>&lt; 50</td><td><p>Want simple conversion with NO pain</p></td></tr><tr><td>50 - 250</td><td><p>Want new features, can manage some in-house complexity</p></td></tr><tr><td>&gt; 250</td><td><p>Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas</p></td></tr></tbody></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3001713"></a>Planning for Success</h3></div></div><div></div></div><p>
+Samba-3 set up as a DC with netlogon share, profile share, etc. Configure the <tt class="filename">smb.conf</tt> file
+to fucntion as a BDC. ie: <i class="parameter"><tt>domain master = No</tt></i>.
+</p></li></ul></div><div class="procedure"><p class="title"><b>Procedure31.1.The Account Migration Process</b></p><ol type="1"><li><p>Create a BDC account for the samba server using NT Server Manager</p><ol type="a"><li><p>Samba must NOT be running</p></li></ol></li><li><p><b class="userinput"><tt>net rpc join -S <i class="replaceable"><tt>NT4PDC</tt></i> -w <i class="replaceable"><tt>DOMNAME</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>net rpc vampire -S <i class="replaceable"><tt>NT4PDC</tt></i> -U administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>pdbedit -L</tt></b></p><ol type="a"><li><p>Note - did the users migrate?</p></li></ol></li><li><p>
+ Now assign each of the UNIX groups to NT groups:
+ (Note: It may be useful to copy this text to a script called
+ <tt class="filename">initGroups.sh</tt>)
+ </p><pre class="programlisting">
+#!/bin/bash
+#### Keep this as a shell script for future re-use
+
+# First assign well known domain global groups
+net groupmap modify ntgroup=&quot;Domain Admins&quot; unixgroup=ntadmins
+net groupmap modify ntgroup=&quot;Domain Guests&quot; unixgroup=nobody
+net groupmap modify ntgroup=&quot;Domain Users&quot; unixgroup=users
+
+# Now for our added domain global groups
+net groupmap add ntgroup=&quot;Designers&quot; unixgroup=designers type=d rid=3200
+net groupmap add ntgroup=&quot;Engineers&quot; unixgroup=engineers type=d rid=3210
+net groupmap add ntgroup=&quot;QA Team&quot; unixgroup=qateam type=d rid=3220
+</pre><p>
+ </p></li><li><p><b class="userinput"><tt>net groupmap list</tt></b></p><ol type="a"><li><p>Now check that all groups are recognised</p></li></ol></li></ol></div><p>
+Now migrate all the profiles, then migrate all policy files.
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2956323"></a>Migration Options</h2></div></div><div></div></div><p>
+Sites that wish to migrate from MS Windows NT4 Domain Control to a Samba based solution
+generally fit into three basic categories.
+</p><div class="table"><a name="id2956338"></a><p class="title"><b>Table31.1.The 3 Major Site Types</b></p><table summary="The 3 Major Site Types" border="1"><colgroup><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Number of Users</th><th align="justify">Description</th></tr></thead><tbody><tr><td align="left">&lt; 50</td><td align="justify"><p>Want simple conversion with NO pain</p></td></tr><tr><td align="left">50 - 250</td><td align="justify"><p>Want new features, can manage some in-house complexity</p></td></tr><tr><td align="left">&gt; 250</td><td align="justify"><p>Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas</p></td></tr></tbody></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956414"></a>Planning for Success</h3></div></div><div></div></div><p>
There are three basic choices for sites that intend to migrate from MS Windows NT4
to Samba-3.
</p><div class="itemizedlist"><ul type="disc"><li><p>
@@ -133,7 +145,7 @@ to Samba-3.
</p></li><li><p>
Complete Redesign (completely new solution)
</p></li></ul></div><p>
-No matter what choice you make, the following rules will minimise down-stream problems:
+Minimise down-stream problems by:
</p><div class="itemizedlist"><ul type="disc"><li><p>
Take sufficient time
</p></li><li><p>
@@ -142,62 +154,25 @@ No matter what choice you make, the following rules will minimise down-stream pr
Test ALL assumptions
</p></li><li><p>
Test full roll-out program, including workstation deployment
- </p></li></ul></div><div class="table"><a name="id3001783"></a><p class="title"><b>Table31.2.Nature of the Conversion Choices</b></p><table summary="Nature of the Conversion Choices" border="1"><colgroup><col><col><col></colgroup><thead><tr><th>Simple</th><th>Upgraded</th><th>Redesign</th></tr></thead><tbody><tr><td><p>Make use of minimal OS specific features</p></td><td><p>Translate NT4 features to new host OS features</p></td><td><p>Decide:</p></td></tr><tr><td><p>Suck all accounts from NT4 into Samba-3</p></td><td><p>Copy and improve:</p></td><td><p>Authentication Regime (database location and access)</p></td></tr><tr><td><p>Make least number of operational changes</p></td><td><p>Make progressive improvements</p></td><td><p>Desktop Management Methods</p></td></tr><tr><td><p>Take least amount of time to migrate</p></td><td><p>Minimise user impact</p></td><td><p>Better Control of Desktops / Users</p></td></tr><tr><td><p>Live versus Isolated Conversion</p></td><td><p>Maximise functionality</p></td><td><p>Identify Needs for: Manageability, Scalability, Security, Availability</p></td></tr><tr><td><p>Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)</p></td><td><p>Take advantage of lower maintenance opportunity</p></td><td><p></p></td></tr></tbody></table></div></div><div xmlns:ns95="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3001954"></a>Samba Implementation Choices</h3></div></div><div></div></div><pre class="programlisting">
-Authentication database back end
- Winbind (external Samba or NT4/200x server)
- Can use pam_mkhomedir.so to auto-create home dirs
- External server could use Active Directory or NT4 Domain
-
-Database type
- smbpasswd, tdbsam, ldapsam, mysqlsam
-
-Access Control Points
- On the Share itself (Use NT4 Server Manager)
- On the file system
- Unix permissions on files and directories
- Enable Posix ACLs in file system?
- Through Samba share parameters
- Not recommended - except as only resort
-
-Policies (migrate or create new ones)
- Group Policy Editor (NT4)
- Watch out for Tattoo effect
-
-User and Group Profiles
- Platform specific so use platform tool to change from a Local
- to a Roaming profile Can use new profiles tool to change SIDs
- (NTUser.DAT)
-
-Logon Scripts (Know how they work)
-
-User and Group mapping to Unix/Linux
- username map facility may be needed
- Use 'net groupmap' to connect NT4 groups to Unix groups
- Use pdbedit to set/change user configuration
-NOTE:
-If migrating to LDAP back end it may be easier to dump initial LDAP database
-to LDIF, then edit, then reload into LDAP
-
- OS specific scripts / programs may be needed
- Add / delete Users
- Note OS limits on size of name (Linux 8 chars)
- NT4 up to 254 chars
- Add / delete machines
- Applied only to domain members (note up to 16 chars)
- Add / delete Groups
- Note OS limits on size and nature
- Linux limit is 16 char,
- no spaces and no upper case chars (groupadd)
-
-Migration Tools
- Domain Control (NT4 Style)
- Profiles, Policies, Access Controls, Security
-
-Migration Tools
- Samba: net, rpcclient, smbpasswd, pdbedit, profiles
- Windows: NT4 Domain User Manager, Server Manager (NEXUS)
-
-Authentication
- New SAM back end (smbpasswd, tdbsam, ldapsam, mysqlsam)
-</pre><ns95:p>
-</ns95:p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="upgrading-to-3.0.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="migration.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="SWAT.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter32.SWAT - The Samba Web Administration Tool</td></tr></table></div></body></html>
+ </p></li></ul></div><div class="table"><a name="id2956485"></a><p class="title"><b>Table31.2.Nature of the Conversion Choices</b></p><table summary="Nature of the Conversion Choices" border="1"><colgroup><col align="justify"><col align="justify"><col align="justify"></colgroup><thead><tr><th align="justify">Simple</th><th align="justify">Upgraded</th><th align="justify">Redesign</th></tr></thead><tbody><tr><td align="justify"><p>Make use of minimal OS specific features</p></td><td align="justify"><p>Translate NT4 features to new host OS features</p></td><td align="justify"><p>Decide:</p></td></tr><tr><td align="justify"><p>Suck all accounts from NT4 into Samba-3</p></td><td align="justify"><p>Copy and improve:</p></td><td align="justify"><p>Authentication Regime (database location and access)</p></td></tr><tr><td align="justify"><p>Make least number of operational changes</p></td><td align="justify"><p>Make progressive improvements</p></td><td align="justify"><p>Desktop Management Methods</p></td></tr><tr><td align="justify"><p>Take least amount of time to migrate</p></td><td align="justify"><p>Minimise user impact</p></td><td align="justify"><p>Better Control of Desktops / Users</p></td></tr><tr><td align="justify"><p>Live versus Isolated Conversion</p></td><td align="justify"><p>Maximise functionality</p></td><td align="justify"><p>Identify Needs for: Manageability, Scalability, Security, Availability</p></td></tr><tr><td align="justify"><p>Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)</p></td><td align="justify"><p>Take advantage of lower maintenance opportunity</p></td><td align="justify"><p></p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956670"></a>Samba-3 Implementation Choices</h3></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Authentication database/back end:</span></dt><dd><p>
+ Samba-3 can use an external authentication backend:
+ </p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>Winbind (external Samba or NT4/200x server)</p></li><li><p>External server could use Active Directory or NT4 Domain</p></li><li><p>Can use pam_mkhomedir.so to auto-create home dirs</p></li></ul></div><p>
+ </p><p>
+ Samba-3 can use a local authentication backend:
+ </p><div class="itemizedlist"><ul type="disc"><li><p>smbpasswd, tdbsam, ldapsam, mysqlsam</p></li></ul></div><p>
+ </p></dd><dt><span class="term">Access Control Points:</span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>On the Share itself - using Share ACLs</p></li><li><p>On the file system - using UNIX permissions on files and directories</p><p>Note: Can Enable Posix ACLs in file system also</p></li><li><p>Through Samba share parameters - Not recommended - except as last resort</p></li></ul></div></dd><dt><span class="term">Policies (migrate or create new ones):</span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Using Group Policy Editor (NT4)</p></li><li><p>- Watch out for Tattoo effect</p></li></ul></div></dd><dt><span class="term">User and Group Profiles:</span></dt><dd><p>
+ Platform specific so use platform tool to change from a Local to a Roaming profile
+ Can use new profiles tool to change SIDs (NTUser.DAT)
+ </p></dd><dt><span class="term">Logon Scripts:</span></dt><dd><p>
+ Know how they work
+ </p></dd><dt><span class="term">User and Group mapping to Unix/Linux:</span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>username map facility may be needed</p></li><li><p>Use 'net groupmap' to connect NT4 groups to Unix groups</p></li><li><p>Use pdbedit to set/change user configuration</p><p>
+ NOTE: When migrating to LDAP back, end it may be easier to dump initial
+ LDAP database to LDIF, then edit, then reload into LDAP
+ </p></li></ul></div></dd><dt><span class="term">OS specific scripts/programs may be needed:</span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Add/Delete Users: Note OS limits on size of name
+ (Linux 8 chars) NT4 up to 254 chars</p></li><li><p>Add/Delete Machines: Applied only to domain members
+ (Note: Machine names may be limited to 16 characters)</p></li><li><p>Use 'net groupmap' to connect NT4 groups to Unix groups</p></li><li><p>Add/Delete Groups: Note OS limits on size and nature.
+ Linux limit is 16 char, no spaces and no upper case chars (groupadd)</p></li></ul></div></dd><dt><span class="term">Migration Tools:</span></dt><dd><p>
+ Domain Control (NT4 Style) Profiles, Policies, Access Controls, Security
+ </p><div class="itemizedlist"><ul type="disc"><li><p>Samba: net, rpcclient, smbpasswd, pdbedit, profiles</p></li><li><p>Windows: NT4 Domain User Manager, Server Manager (NEXUS)</p></li></ul></div><p>
+ </p></dd></dl></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="upgrading-to-3.0.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="migration.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="SWAT.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter32.SWAT - The Samba Web Administration Tool</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/NetworkBrowsing.html b/docs/htmldocs/NetworkBrowsing.html
index 34d48cacc35..4507c0067f1 100644
--- a/docs/htmldocs/NetworkBrowsing.html
+++ b/docs/htmldocs/NetworkBrowsing.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter10.Samba / MS Windows Network Browsing Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="optional.html" title="PartIII.Advanced Configuration"><link rel="next" href="passdb.html" title="Chapter11.Account Information Databases"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter10.Samba / MS Windows Network Browsing Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="optional.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="passdb.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NetworkBrowsing"></a>Chapter10.Samba / MS Windows Network Browsing Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">July 5, 1998</p></div><div><p class="pubdate">Updated: April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="NetworkBrowsing.html#id2901654">Features and Benefits</a></dt><dt><a href="NetworkBrowsing.html#id2901733">What is Browsing?</a></dt><dt><a href="NetworkBrowsing.html#id2905839">Discussion</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905855">NetBIOS over TCP/IP</a></dt><dt><a href="NetworkBrowsing.html#id2906017">TCP/IP - without NetBIOS</a></dt><dt><a href="NetworkBrowsing.html#id2900986">DNS and Active Directory</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2901119">How Browsing Functions</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2901245">Setting up WORKGROUP Browsing</a></dt><dt><a href="NetworkBrowsing.html#id2902631">Setting up DOMAIN Browsing</a></dt><dt><a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="NetworkBrowsing.html#id2902896">Making Samba the domain master</a></dt><dt><a href="NetworkBrowsing.html#id2903052">Note about broadcast addresses</a></dt><dt><a href="NetworkBrowsing.html#id2903070">Multiple interfaces</a></dt><dt><a href="NetworkBrowsing.html#id2906571">Use of the Remote Announce parameter</a></dt><dt><a href="NetworkBrowsing.html#id2906680">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2906741">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2906900">Setting up a WINS server</a></dt><dt><a href="NetworkBrowsing.html#id2907094">WINS Replication</a></dt><dt><a href="NetworkBrowsing.html#id2907119">Static WINS Entries</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2907203">Helpful Hints</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2907217">Windows Networking Protocols</a></dt><dt><a href="NetworkBrowsing.html#id2907283">Name Resolution Order</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2907421">Technical Overview of browsing</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2907468">Browsing support in Samba</a></dt><dt><a href="NetworkBrowsing.html#id2907575">Problem resolution</a></dt><dt><a href="NetworkBrowsing.html#id2907654">Browsing across subnets</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2908270">Common Errors</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2908285">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="NetworkBrowsing.html#id2908313">My client reports &quot;This server is not configured to list shared resources&quot;</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter10.Samba / MS Windows Network Browsing Guide</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="optional.html" title="PartIII.Advanced Configuration"><link rel="next" href="passdb.html" title="Chapter11.Account Information Databases"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter10.Samba / MS Windows Network Browsing Guide</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="optional.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="passdb.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NetworkBrowsing"></a>Chapter10.Samba / MS Windows Network Browsing Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">July 5, 1998</p></div><div><p class="pubdate">Updated: April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="NetworkBrowsing.html#id2893931">Features and Benefits</a></dt><dt><a href="NetworkBrowsing.html#id2894019">What is Browsing?</a></dt><dt><a href="NetworkBrowsing.html#id2894333">Discussion</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2894349">NetBIOS over TCP/IP</a></dt><dt><a href="NetworkBrowsing.html#id2894584">TCP/IP - without NetBIOS</a></dt><dt><a href="NetworkBrowsing.html#id2894750">DNS and Active Directory</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2894896">How Browsing Functions</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#DMB">Setting up WORKGROUP Browsing</a></dt><dt><a href="NetworkBrowsing.html#id2895446">Setting up DOMAIN Browsing</a></dt><dt><a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="NetworkBrowsing.html#id2895844">Making Samba the domain master</a></dt><dt><a href="NetworkBrowsing.html#id2896022">Note about broadcast addresses</a></dt><dt><a href="NetworkBrowsing.html#id2896045">Multiple interfaces</a></dt><dt><a href="NetworkBrowsing.html#id2896081">Use of the Remote Announce parameter</a></dt><dt><a href="NetworkBrowsing.html#id2896240">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2896317">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2896504">Setting up a WINS server</a></dt><dt><a href="NetworkBrowsing.html#id2896761">WINS Replication</a></dt><dt><a href="NetworkBrowsing.html#id2896787">Static WINS Entries</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2896875">Helpful Hints</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2896889">Windows Networking Protocols</a></dt><dt><a href="NetworkBrowsing.html#id2896967">Name Resolution Order</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2897133">Technical Overview of browsing</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2897187">Browsing support in Samba</a></dt><dt><a href="NetworkBrowsing.html#id2897308">Problem resolution</a></dt><dt><a href="NetworkBrowsing.html#id2897396">Browsing across subnets</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2898078">Common Errors</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2898092">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="NetworkBrowsing.html#id2898121">My client reports &quot;This server is not configured to list shared resources&quot;</a></dt><dt><a href="NetworkBrowsing.html#id2898166">I get an Unable to browse the network error</a></dt></dl></dd></dl></div><p>
This document contains detailed information as well as a fast track guide to
implementing browsing across subnets and / or across workgroups (or domains).
WINS is the best tool for resolution of NetBIOS names to IP addresses. WINS is
@@ -10,11 +9,11 @@ over TCP/IP. Samba-3 and later also supports this mode of operation.
When the use of NetBIOS over TCP/IP has been disabled then the primary
means for resolution of MS Windows machine names is via DNS and Active Directory.
The following information assumes that your site is running NetBIOS over TCP/IP.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2901654"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893931"></a>Features and Benefits</h2></div></div><div></div></div><p>
Someone once referred to the past in terms of: <span class="emphasis"><em>They were the worst of times,
they were the best of times. The more we look back, them more we long for what was and
hope it never returns!</em></span>.
-</p><p>
+</p><a class="indexterm" name="id2893952"></a><p>
For many MS Windows network administrators, that statement sums up their feelings about
NetBIOS networking precisely. For those who mastered NetBIOS networking, its fickle
nature was just par for the course. For those who never quite managed to tame its
@@ -39,63 +38,55 @@ help Samba to affect stable WINS operations beyond the normal scope of MS WINS.
</p><p>
Please note that WINS is exclusively a service that applies only to those systems
that run NetBIOS over TCP/IP. MS Windows 200x / XP have the capacity to turn off
-support for NetBIOS, in which case WINS is of no relevance. Samba-3 supports this also.
+support for NetBIOS, in which case WINS is of no relevance. Samba supports this also.
</p><p>
For those networks on which NetBIOS has been disabled (ie: WINS is NOT required)
the use of DNS is necessary for host name resolution.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2901733"></a>What is Browsing?</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894019"></a>What is Browsing?</h2></div></div><div></div></div><p>
To most people browsing means that they can see the MS Windows and Samba servers
in the Network Neighborhood, and when the computer icon for a particular server is
clicked, it opens up and shows the shares and printers available on the target server.
</p><p>
What seems so simple is in fact a very complex interaction of different technologies.
The technologies (or methods) employed in making all of this work includes:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>MS Windows machines register their presence to the network</td></tr><tr><td>Machines announce themselves to other machines on the network</td></tr><tr><td>One or more machine on the network collates the local announcements</td></tr><tr><td>The client machine finds the machine that has the collated list of machines</td></tr><tr><td>The client machine is able to resolve the machine names to IP addresses</td></tr><tr><td>The client machine is able to connect to a target machine</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>MS Windows machines register their presence to the network</p></li><li><p>Machines announce themselves to other machines on the network</p></li><li><p>One or more machine on the network collates the local announcements</p></li><li><p>The client machine finds the machine that has the collated list of machines</p></li><li><p>The client machine is able to resolve the machine names to IP addresses</p></li><li><p>The client machine is able to connect to a target machine</p></li></ul></div><p>
The Samba application that controls browse list management and name resolution is
called <tt class="filename">nmbd</tt>. The configuration parameters involved in nmbd's operation are:
-</p><pre class="programlisting">
-
- Browsing options:
- -----------------
- * os level
- lm announce
- lm interval
- * preferred master
- * local master
- * domain master
- browse list
- enhanced browsing
-
- Name Resolution Method:
- -----------------------
- * name resolve order
-
- WINS options:
- -------------
- dns proxy
- wins proxy
- * wins server
- * wins support
- wins hook
-</pre><p>
+</p><p>Browsing options: <a class="indexterm" name="id2894104"></a><i class="parameter"><tt>os level</tt></i>(*),
+ <a class="indexterm" name="id2894118"></a><i class="parameter"><tt>lm announce</tt></i>,
+ <a class="indexterm" name="id2894131"></a><i class="parameter"><tt>lm interval</tt></i>,
+ <a class="indexterm" name="id2894145"></a><i class="parameter"><tt>preferred master</tt></i>(*),
+ <a class="indexterm" name="id2894159"></a><i class="parameter"><tt>local master</tt></i>(*),
+ <a class="indexterm" name="id2894173"></a><i class="parameter"><tt>domain master</tt></i>(*),
+ <a class="indexterm" name="id2894187"></a><i class="parameter"><tt>browse list</tt></i>,
+ <a class="indexterm" name="id2894201"></a><i class="parameter"><tt>enhanced browsing</tt></i>.
+</p><p>Name Resolution Method:
+ <a class="indexterm" name="id2894218"></a><i class="parameter"><tt>name resolve order</tt></i>(*).
+</p><p>WINS options:
+ <a class="indexterm" name="id2894238"></a><i class="parameter"><tt>dns proxy</tt></i>,
+ <a class="indexterm" name="id2894251"></a><i class="parameter"><tt>wins proxy</tt></i>,
+ <a class="indexterm" name="id2894265"></a><i class="parameter"><tt>wins server</tt></i>(*),
+ <a class="indexterm" name="id2894279"></a><i class="parameter"><tt>wins support</tt></i>(*),
+ <a class="indexterm" name="id2894293"></a><i class="parameter"><tt>wins hook</tt></i>.
+</p><a class="indexterm" name="id2894308"></a><p>
For Samba, the WINS Server and WINS Support are mutually exclusive options. Those marked with
an '*' are the only options that commonly MAY need to be modified. Even if not one of these
parameters is set <tt class="filename">nmbd</tt> will still do it's job.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905839"></a>Discussion</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894333"></a>Discussion</h2></div></div><div></div></div><p>
Firstly, all MS Windows networking uses SMB (Server Message Block) based messaging.
SMB messaging may be implemented with or without NetBIOS. MS Windows 200x supports
NetBIOS over TCP/IP for backwards compatibility. Microsoft is intent on phasing out NetBIOS
support.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905855"></a>NetBIOS over TCP/IP</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894349"></a>NetBIOS over TCP/IP</h3></div></div><div></div></div><p>
Samba implements NetBIOS, as does MS Windows NT / 200x / XP, by encapsulating it over TCP/IP.
MS Windows products can do likewise. NetBIOS based networking uses broadcast messaging to
affect browse list management. When running NetBIOS over TCP/IP, this uses UDP based messaging.
UDP messages can be broadcast or unicast.
-</p><p>
+</p><a class="indexterm" name="id2894367"></a><p>
Normally, only unicast UDP messaging can be forwarded by routers. The
-<b class="command">remote announce</b> parameter to smb.conf helps to project browse announcements
+<a class="indexterm" name="id2894378"></a><i class="parameter"><tt>remote announce</tt></i> parameter to smb.conf helps to project browse announcements
to remote network segments via unicast UDP. Similarly, the
-<b class="command">remote browse sync</b> parameter of <tt class="filename">smb.conf</tt>
+<a class="indexterm" name="id2894395"></a><i class="parameter"><tt>remote browse sync</tt></i> parameter of <tt class="filename">smb.conf</tt>
implements browse list collation using unicast UDP.
</p><p>
Secondly, in those networks where Samba is the only SMB server technology,
@@ -103,12 +94,13 @@ wherever possible <tt class="filename">nmbd</tt> should be configured on one (1)
server. This makes it easy to manage the browsing environment. If each network
segment is configured with it's own Samba WINS server, then the only way to
get cross segment browsing to work is by using the
-<b class="command">remote announce</b> and the <b class="command">remote browse sync</b>
+<a class="indexterm" name="id2894434"></a><i class="parameter"><tt>remote announce</tt></i> and the <a class="indexterm" name="id2894448"></a><i class="parameter"><tt>remote browse sync</tt></i>
parameters to your <tt class="filename">smb.conf</tt> file.
</p><p>
+<a class="indexterm" name="id2894474"></a>
If only one WINS server is used for an entire multi-segment network then
-the use of the <b class="command">remote announce</b> and the
-<b class="command">remote browse sync</b> parameters should NOT be necessary.
+the use of the <a class="indexterm" name="id2894484"></a><i class="parameter"><tt>remote announce</tt></i> and the
+<a class="indexterm" name="id2894498"></a><i class="parameter"><tt>remote browse sync</tt></i> parameters should NOT be necessary.
</p><p>
As of Samba 3 WINS replication is being worked on. The bulk of the code has
been committed, but it still needs maturation. This is NOT a supported feature
@@ -119,7 +111,7 @@ Right now Samba WINS does not support MS-WINS replication. This means that
when setting up Samba as a WINS server there must only be one <tt class="filename">nmbd</tt>
configured as a WINS server on the network. Some sites have used multiple Samba WINS
servers for redundancy (one server per subnet) and then used
-<b class="command">remote browse sync</b> and <b class="command">remote announce</b>
+<a class="indexterm" name="id2894536"></a><i class="parameter"><tt>remote browse sync</tt></i> and <a class="indexterm" name="id2894552"></a><i class="parameter"><tt>remote announce</tt></i>
to affect browse list collation across all segments. Note that this means clients
will only resolve local names, and must be configured to use DNS to resolve names
on other subnets in order to resolve the IP addresses of the servers they can see
@@ -130,7 +122,10 @@ Lastly, take note that browse lists are a collection of unreliable broadcast
messages that are repeated at intervals of not more than 15 minutes. This means
that it will take time to establish a browse list and it can take up to 45
minutes to stabilise, particularly across network segments.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906017"></a>TCP/IP - without NetBIOS</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894584"></a>TCP/IP - without NetBIOS</h3></div></div><div></div></div><p>
+<a class="indexterm" name="id2894596"></a>
+<a class="indexterm" name="id2894604"></a>
+<a class="indexterm" name="id2894613"></a>
All TCP/IP using systems use various forms of host name resolution. The primary
methods for TCP/IP hostname resolutions involves either a static file (<tt class="filename">/etc/hosts
</tt>) or DNS (the Domain Name System). DNS is the technology that makes
@@ -153,7 +148,7 @@ it follows a defined path:
</p></li><li><p>
Looks up entries in LMHOSTS. It is located in
<tt class="filename">C:\WinNT\System32\Drivers\etc</tt>.
- </p></li></ol></div><p>
+ </p></li></ol></div><a class="indexterm" name="id2894710"></a><p>
Windows 200x / XP can register it's host name with a Dynamic DNS server. You can
force register with a Dynamic DNS server in Windows 200x / XP using:
<b class="command">ipconfig /registerdns</b>
@@ -166,8 +161,8 @@ consequently network services will be severely impaired.
The use of Dynamic DNS is highly recommended with Active Directory, in which case
the use of BIND9 is preferred for it's ability to adequately support the SRV (service)
records that are needed for Active Directory.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900986"></a>DNS and Active Directory</h3></div></div><div></div></div><p>
-Occasionally we hear from Unix network administrators who want to use a Unix based Dynamic
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894750"></a>DNS and Active Directory</h3></div></div><div></div></div><a class="indexterm" name="id2894758"></a><p>
+Occasionally we hear from UNIX network administrators who want to use a UNIX based Dynamic
DNS server in place of the Microsoft DNS server. While this might be desirable to some, the
MS Windows 200x DNS server is auto-configured to work with Active Directory. It is possible
to use BIND version 8 or 9, but it will almost certainly be necessary to create service records
@@ -188,7 +183,7 @@ The following are some of the default service records that Active Directory requ
</p></li><li><p>_ldap._tcp.<span class="emphasis"><em>Site</em></span>.gc.ms-dcs.<span class="emphasis"><em>DomainTree</em></span></p><p>
Used by MS Windows clients to locate site configuration dependent
Global Catalog server.
- </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2901119"></a>How Browsing Functions</h2></div></div><div></div></div><p>
+ </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894896"></a>How Browsing Functions</h2></div></div><div></div></div><p>
MS Windows machines register their NetBIOS names
(ie: the machine name for each service type in operation) on start
up. The exact method by which this name registration
@@ -202,7 +197,7 @@ resolution to the local subnet, unless LMHOSTS is used to list all
names and IP addresses. In such situations Samba provides a means by
which the Samba server name may be forcibly injected into the browse
list of a remote MS Windows network (using the
-<b class="command">remote announce</b> parameter).
+<a class="indexterm" name="id2894933"></a><i class="parameter"><tt>remote announce</tt></i> parameter).
</p><p>
Where a WINS server is used, the MS Windows client will use UDP
unicast to register with the WINS server. Such packets can be routed
@@ -230,20 +225,18 @@ will annoy users because they will have to put up with protracted
inability to use the network services.
</p><p>
Samba supports a feature that allows forced synchronisation
-of browse lists across routed networks using the <b class="command">remote
-browse sync</b> parameter in the <tt class="filename">smb.conf</tt> file.
+of browse lists across routed networks using the <a class="indexterm" name="id2894996"></a><i class="parameter"><tt>remote browse sync</tt></i> parameter in the <tt class="filename">smb.conf</tt> file.
This causes Samba to contact the local master browser on a remote network and
to request browse list synchronisation. This effectively bridges
two networks that are separated by routers. The two remote
networks may use either broadcast based name resolution or WINS
-based name resolution, but it should be noted that the <b class="command">remote
-browse sync</b> parameter provides browse list synchronisation - and
+based name resolution, but it should be noted that the <a class="indexterm" name="id2895025"></a><i class="parameter"><tt>remote browse sync</tt></i> parameter provides browse list synchronisation - and
that is distinct from name to address resolution, in other
words, for cross subnet browsing to function correctly it is
essential that a name to address resolution mechanism be provided.
This mechanism could be via DNS, <tt class="filename">/etc/hosts</tt>,
and so on.
-</p><div xmlns:ns14="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2901245"></a>Setting up WORKGROUP Browsing</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="DMB"></a>Setting up WORKGROUP Browsing</h3></div></div><div></div></div><p>
To set up cross subnet browsing on a network containing machines
in up to be in a WORKGROUP, not an NT Domain you need to set up one
Samba server to be the Domain Master Browser (note that this is *NOT*
@@ -261,22 +254,15 @@ Samba server, and there must only be one domain master browser per
workgroup name. To set up a Samba server as a domain master browser,
set the following option in the <i class="parameter"><tt>[global]</tt></i> section
of the <tt class="filename">smb.conf</tt> file :
-</p><ns14:p>
-</ns14:p><pre class="programlisting">
- domain master = yes
-</pre><ns14:p>
-</ns14:p><p>
-The domain master browser should also preferrably be the local master
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>domain master = yes</tt></i></td></tr></table><p>
+</p><p>
+The domain master browser should also preferably be the local master
browser for its own subnet. In order to achieve this set the following
options in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file :
-</p><ns14:p>
-</ns14:p><pre class="programlisting">
- domain master = yes
- local master = yes
- preferred master = yes
- os level = 65
-</pre><ns14:p>
-</ns14:p><p>
+</p><p>
+ </p><div class="example"><a name="id2895160"></a><p class="title"><b>Example10.1.Domain master browser smb.conf</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 65</tt></i></td></tr></table></div><p>
+</p><p>
The domain master browser may be the same machine as the WINS
server, if you require.
</p><p>
@@ -288,21 +274,16 @@ tend to get rebooted more often, so it's not such a good idea
to use these). To make a Samba server a local master browser
set the following options in the <i class="parameter"><tt>[global]</tt></i> section of the
<tt class="filename">smb.conf</tt> file :
-</p><ns14:p>
-</ns14:p><pre class="programlisting">
- domain master = no
- local master = yes
- preferred master = yes
- os level = 65
-</pre><ns14:p>
-</ns14:p><p>
+</p><p>
+</p><div class="example"><a name="id2895251"></a><p class="title"><b>Example10.2.Local master browser smb.conf</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 65</tt></i></td></tr></table></div><p>
+</p><p>
Do not do this for more than one Samba server on each subnet,
or they will war with each other over which is to be the local
master browser.
</p><p>
-The <i class="parameter"><tt>local master</tt></i> parameter allows Samba to act as a
-local master browser. The <i class="parameter"><tt>preferred master</tt></i> causes nmbd
-to force a browser election on startup and the <i class="parameter"><tt>os level</tt></i>
+The <a class="indexterm" name="id2895317"></a><i class="parameter"><tt>local master</tt></i> parameter allows Samba to act as a
+local master browser. The <a class="indexterm" name="id2895334"></a><i class="parameter"><tt>preferred master</tt></i> causes nmbd
+to force a browser election on startup and the <a class="indexterm" name="id2895349"></a><i class="parameter"><tt>os level</tt></i>
parameter sets Samba high enough so that it should win any browser elections.
</p><p>
If you have an NT machine on the subnet that you wish to
@@ -310,14 +291,9 @@ be the local master browser then you can disable Samba from
becoming a local master browser by setting the following
options in the <i class="parameter"><tt>[global]</tt></i> section of the
<tt class="filename">smb.conf</tt> file :
-</p><ns14:p>
-</ns14:p><pre class="programlisting">
- domain master = no
- local master = no
- preferred master = no
- os level = 0
-</pre><ns14:p>
-</ns14:p></div><div xmlns:ns15="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902631"></a>Setting up DOMAIN Browsing</h3></div></div><div></div></div><p>
+</p><p>
+</p><div class="example"><a name="id2895389"></a><p class="title"><b>Example10.3.smb.conf for not being a master browser</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 0</tt></i></td></tr></table></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895446"></a>Setting up DOMAIN Browsing</h3></div></div><div></div></div><p>
If you are adding Samba servers to a Windows NT Domain then
you must not set up a Samba server as a domain master browser.
By default, a Windows NT Primary Domain Controller for a domain
@@ -329,18 +305,13 @@ with WINS instead of the PDC.
For subnets other than the one containing the Windows NT PDC
you may set up Samba servers as local master browsers as
described. To make a Samba server a local master browser set
-the following options in the <b class="command">[global]</b> section
+the following options in the <i class="parameter"><tt>[global]</tt></i> section
of the <tt class="filename">smb.conf</tt> file :
-</p><ns15:p>
-</ns15:p><pre class="programlisting">
- domain master = no
- local master = yes
- preferred master = yes
- os level = 65
-</pre><ns15:p>
-</ns15:p><p>
+</p><p>
+ </p><div class="example"><a name="id2895495"></a><p class="title"><b>Example10.4.Local master browser smb.conf</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 65</tt></i></td></tr></table></div><p>
+</p><p>
If you wish to have a Samba server fight the election with machines
-on the same subnet you may set the <i class="parameter"><tt>os level</tt></i> parameter
+on the same subnet you may set the <a class="indexterm" name="id2895556"></a><i class="parameter"><tt>os level</tt></i> parameter
to lower levels. By doing this you can tune the order of machines that
will become local master browsers if they are running. For
more details on this see the section <a href="NetworkBrowsing.html#browse-force-master" title="Forcing Samba to be the master">
@@ -353,39 +324,34 @@ you can disable Samba from taking part in browser elections and
ever becoming a local master browser by setting following options
in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt>
file :
-</p><ns15:p>
-</ns15:p><pre class="programlisting">
- domain master = no
- local master = no
- preferred master = no
- os level = 0
-</pre><ns15:p>
-</ns15:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="browse-force-master"></a>Forcing Samba to be the master</h3></div></div><div></div></div><p>
-Who becomes the <i class="parameter"><tt>master browser</tt></i> is determined by an election
+</p><p>
+</p><div class="example"><a name="id2895612"></a><p class="title"><b>Example10.5.smb.conf for not being a master browser</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 0</tt></i></td></tr></table></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="browse-force-master"></a>Forcing Samba to be the master</h3></div></div><div></div></div><p>
+Who becomes the master browser is determined by an election
process using broadcasts. Each election packet contains a number of parameters
which determine what precedence (bias) a host should have in the
election. By default Samba uses a very low precedence and thus loses
elections to just about anyone else.
</p><p>
-If you want Samba to win elections then just set the <i class="parameter"><tt>os level</tt></i> global
+If you want Samba to win elections then just set the <a class="indexterm" name="id2895696"></a><i class="parameter"><tt>os level</tt></i> global
option in <tt class="filename">smb.conf</tt> to a higher number. It defaults to 0. Using 34
would make it win all elections over every other system (except other
samba systems!)
</p><p>
-A <i class="parameter"><tt>os level</tt></i> of 2 would make it beat WfWg and Win95, but not MS Windows
+A <a class="indexterm" name="id2895722"></a><i class="parameter"><tt>os level</tt></i> of 2 would make it beat WfWg and Win95, but not MS Windows
NT/2K Server. A MS Windows NT/2K Server domain controller uses level 32.
</p><p>The maximum os level is 255</p><p>
If you want Samba to force an election on startup, then set the
-<i class="parameter"><tt>preferred master</tt></i> global option in <tt class="filename">smb.conf</tt> to <tt class="constant">yes</tt>. Samba will
+<a class="indexterm" name="id2895748"></a><i class="parameter"><tt>preferred master</tt></i> global option in <tt class="filename">smb.conf</tt> to <tt class="constant">yes</tt>. Samba will
then have a slight advantage over other potential master browsers
that are not preferred master browsers. Use this parameter with
care, as if you have two hosts (whether they are Windows 95 or NT or
-Samba) on the same local subnet both set with <i class="parameter"><tt>preferred master</tt></i> to
+Samba) on the same local subnet both set with <a class="indexterm" name="id2895778"></a><i class="parameter"><tt>preferred master</tt></i> to
<tt class="constant">yes</tt>, then periodically and continually they will force an election
in order to become the local master browser.
</p><p>
-If you want Samba to be a <i class="parameter"><tt>domain master browser</tt></i>, then it is
-recommended that you also set <i class="parameter"><tt>preferred master</tt></i> to <tt class="constant">yes</tt>, because
+ If you want Samba to be a <span class="emphasis"><em>domain master browser</em></span>, then it is
+recommended that you also set <a class="indexterm" name="id2895807"></a><i class="parameter"><tt>preferred master</tt></i> to <tt class="constant">yes</tt>, because
Samba will not become a domain master browser for the whole of your
LAN or WAN if it is not also a local master browser on its own
broadcast isolated subnet.
@@ -397,10 +363,10 @@ attempt to become the domain master browser every 5 minutes. They
will find that another Samba server is already the domain master
browser and will fail. This provides automatic redundancy, should
the current domain master browser fail.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902896"></a>Making Samba the domain master</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895844"></a>Making Samba the domain master</h3></div></div><div></div></div><p>
The domain master is responsible for collating the browse lists of
multiple subnets so that browsing can occur between subnets. You can
-make Samba act as the domain master by setting <i class="parameter"><tt>domain master = yes</tt></i>
+make Samba act as the domain master by setting <a class="indexterm" name="id2895858"></a><i class="parameter"><tt>domain master</tt></i> = yes
in <tt class="filename">smb.conf</tt>. By default it will not be a domain master.
</p><p>
Note that you should <span class="emphasis"><em>not</em></span> set Samba to be the domain master for a
@@ -412,8 +378,8 @@ master browsers on other subnets and then contact them to synchronise
browse lists.
</p><p>
If you want Samba to be the domain master then I suggest you also set
-the <i class="parameter"><tt>os level</tt></i> high enough to make sure it wins elections, and set
-<i class="parameter"><tt>preferred master</tt></i> to <tt class="constant">yes</tt>, to get Samba to force an election on
+the <a class="indexterm" name="id2895904"></a><i class="parameter"><tt>os level</tt></i> high enough to make sure it wins elections, and set
+<a class="indexterm" name="id2895919"></a><i class="parameter"><tt>preferred master</tt></i> to <tt class="constant">yes</tt>, to get Samba to force an election on
startup.
</p><p>
Note that all your servers (including Samba) and clients should be
@@ -439,31 +405,31 @@ If, however, both Samba and your clients are using a WINS server, then:
resolve the NetBIOS name of that host. as long as that host has
registered its NetBIOS name with the same WINS server, the user will
be able to see that host.
- </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903052"></a>Note about broadcast addresses</h3></div></div><div></div></div><p>
+ </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896022"></a>Note about broadcast addresses</h3></div></div><div></div></div><p>
If your network uses a &quot;0&quot; based broadcast address (for example if it
ends in a 0) then you will strike problems. Windows for Workgroups
does not seem to support a 0's broadcast and you will probably find
that browsing and name lookups won't work.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903070"></a>Multiple interfaces</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896045"></a>Multiple interfaces</h3></div></div><div></div></div><p>
Samba now supports machines with multiple network interfaces. If you
-have multiple interfaces then you will need to use the <b class="command">interfaces</b>
+have multiple interfaces then you will need to use the <a class="indexterm" name="id2896057"></a><i class="parameter"><tt>interfaces</tt></i>
option in <tt class="filename">smb.conf</tt> to configure them.
-</p></div><div xmlns:ns16="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906571"></a>Use of the Remote Announce parameter</h3></div></div><div></div></div><ns16:p>
-The <i class="parameter"><tt>remote announce</tt></i> parameter of
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896081"></a>Use of the Remote Announce parameter</h3></div></div><div></div></div><p>
+The <a class="indexterm" name="id2896090"></a><i class="parameter"><tt>remote announce</tt></i> parameter of
<tt class="filename">smb.conf</tt> can be used to forcibly ensure
that all the NetBIOS names on a network get announced to a remote network.
-The syntax of the <i class="parameter"><tt>remote announce</tt></i> parameter is:
-</ns16:p><pre class="programlisting">
- remote announce = a.b.c.d [e.f.g.h] ...
-</pre><ns16:p>
+The syntax of the <a class="indexterm" name="id2896115"></a><i class="parameter"><tt>remote announce</tt></i> parameter is:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>remote announce = a.b.c.d [e.f.g.h] ...</tt></i></td></tr></table><p>
<span class="emphasis"><em>or</em></span>
-</ns16:p><pre class="programlisting">
- remote announce = a.b.c.d/WORKGROUP [e.f.g.h/WORKGROUP] ...
-</pre><ns16:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>remote announce = a.b.c.d/WORKGROUP [e.f.g.h/WORKGROUP] ...</tt></i></td></tr></table><p>
where:
-</ns16:p><div class="variablelist"><dl><dt><span class="term"><i class="replaceable"><tt>a.b.c.d</tt></i> and
-<i class="replaceable"><tt>e.f.g.h</tt></i></span></dt><dd><p>is either the LMB (Local Master Browser) IP address
+</p><div class="variablelist"><dl><dt><span class="term"><i class="replaceable"><tt>a.b.c.d</tt></i> and
+<i class="replaceable"><tt>e.f.g.h</tt></i></span></dt><dd><p>
+ <a class="indexterm" name="id2896185"></a>
+<a class="indexterm" name="id2896196"></a>
+
+ is either the LMB (Local Master Browser) IP address
or the broadcast address of the remote network.
ie: the LMB is at 192.168.1.10, or the address
could be given as 192.168.1.255 where the netmask
@@ -478,23 +444,21 @@ workgroup name of the remote network then our
NetBIOS machine names will end up looking like
they belong to that workgroup, this may cause
name resolution problems and should be avoided.
-</p></dd></dl></div><ns16:p>
-</ns16:p></div><div xmlns:ns17="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906680"></a>Use of the Remote Browse Sync parameter</h3></div></div><div></div></div><p>
-The <i class="parameter"><tt>remote browse sync</tt></i> parameter of
+</p></dd></dl></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896240"></a>Use of the Remote Browse Sync parameter</h3></div></div><div></div></div><p>
+The <a class="indexterm" name="id2896250"></a><i class="parameter"><tt>remote browse sync</tt></i> parameter of
<tt class="filename">smb.conf</tt> is used to announce to
another LMB that it must synchronise its NetBIOS name list with our
Samba LMB. It works ONLY if the Samba server that has this option is
simultaneously the LMB on its network segment.
-</p><ns17:p>
-The syntax of the <i class="parameter"><tt>remote browse sync</tt></i> parameter is:
+</p><p>
+The syntax of the <a class="indexterm" name="id2896279"></a><i class="parameter"><tt>remote browse sync</tt></i> parameter is:
-</ns17:p><pre class="programlisting">
-remote browse sync = <i class="replaceable"><tt>a.b.c.d</tt></i>
-</pre><ns17:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>remote browse sync = a.b.c.d</tt></i></td></tr></table><p>
where <i class="replaceable"><tt>a.b.c.d</tt></i> is either the IP address of the
remote LMB or else is the network broadcast address of the remote segment.
-</ns17:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906741"></a>WINS - The Windows Internetworking Name Server</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896317"></a>WINS - The Windows Internetworking Name Server</h2></div></div><div></div></div><p>
Use of WINS (either Samba WINS <span class="emphasis"><em>or</em></span> MS Windows NT Server WINS) is highly
recommended. Every NetBIOS machine registers its name together with a
name_type value for each of several types of service it has available.
@@ -535,36 +499,34 @@ lookup attempts by other clients and will therefore cause workstation access
errors.
</p><p>
To configure Samba as a WINS server just add
-<i class="parameter"><tt>wins support = yes</tt></i> to the <tt class="filename">smb.conf</tt>
-file [globals] section.
+<a class="indexterm" name="id2896406"></a><i class="parameter"><tt>wins support</tt></i> = yes to the <tt class="filename">smb.conf</tt>
+file [global] section.
</p><p>
To configure Samba to register with a WINS server just add
-<i class="parameter"><tt>wins server = a.b.c.d</tt></i> to your <tt class="filename">smb.conf</tt> file <i class="parameter"><tt>[globals]</tt></i> section.
+<a class="indexterm" name="id2896434"></a><i class="parameter"><tt>wins server</tt></i> = a.b.c.d to your <tt class="filename">smb.conf</tt> file <i class="parameter"><tt>[global]</tt></i> section.
</p><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>
-Never use both <i class="parameter"><tt>wins support = yes</tt></i> together
-with <i class="parameter"><tt>wins server = a.b.c.d</tt></i>
+Never use both <a class="indexterm" name="id2896466"></a><i class="parameter"><tt>wins support</tt></i> = yes together
+with <a class="indexterm" name="id2896482"></a><i class="parameter"><tt>wins server</tt></i> = a.b.c.d
particularly not using it's own IP address.
Specifying both will cause <span class="application">nmbd</span> to refuse to start!
-</p></div><div xmlns:ns18="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906900"></a>Setting up a WINS server</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896504"></a>Setting up a WINS server</h3></div></div><div></div></div><p>
Either a Samba machine or a Windows NT Server machine may be set up
as a WINS server. To set a Samba machine to be a WINS server you must
add the following option to the <tt class="filename">smb.conf</tt> file on the selected machine :
-in the <i class="parameter"><tt>[globals]</tt></i> section add the line
-</p><ns18:p>
-</ns18:p><pre class="programlisting">
- wins support = yes
-</pre><ns18:p>
-</ns18:p><p>
+in the <i class="parameter"><tt>[global]</tt></i> section add the line
+</p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>wins support = yes</tt></i></td></tr></table><p>
+</p><p>
Versions of Samba prior to 1.9.17 had this parameter default to
yes. If you have any older versions of Samba on your network it is
strongly suggested you upgrade to a recent version, or at the very
least set the parameter to 'no' on all these machines.
</p><p>
-Machines with <i class="parameter"><tt>wins support = yes</tt></i> will keep a list of
+Machines with <a class="indexterm" name="id2896564"></a><i class="parameter"><tt>wins support</tt></i> = yes will keep a list of
all NetBIOS names registered with them, acting as a DNS for NetBIOS names.
</p><p>
You should set up only ONE WINS server. Do NOT set the
-<i class="parameter"><tt>wins support = yes</tt></i> option on more than one Samba
+<a class="indexterm" name="id2896585"></a><i class="parameter"><tt>wins support</tt></i> = yes option on more than one Samba
server.
</p><p>
To set up a Windows NT Server as a WINS server you need to set up
@@ -576,7 +538,7 @@ participate in these replications. It is possible in the future that
a Samba-&gt;Samba WINS replication protocol may be defined, in which
case more than one Samba machine could be set up as a WINS server
but currently only one Samba server should have the
-<i class="parameter"><tt>wins support = yes</tt></i> parameter set.
+<a class="indexterm" name="id2896621"></a><i class="parameter"><tt>wins support</tt></i> = yes parameter set.
</p><p>
After the WINS server has been configured you must ensure that all
machines participating on the network are configured with the address
@@ -586,18 +548,16 @@ the <span class="guilabel">Control Panel-&gt;Network-&gt;Protocols-&gt;TCP-&gt;W
in Windows 95 or Windows NT. To tell a Samba server the IP address
of the WINS server add the following line to the <i class="parameter"><tt>[global]</tt></i> section of
all <tt class="filename">smb.conf</tt> files :
-</p><ns18:p>
-</ns18:p><pre class="programlisting">
- wins server = &lt;name or IP address&gt;
-</pre><ns18:p>
-</ns18:p><p>
+</p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>wins server = &lt;name or IP address&gt;</tt></i></td></tr></table><p>
+</p><p>
where &lt;name or IP address&gt; is either the DNS name of the WINS server
machine or its IP address.
</p><p>
Note that this line MUST NOT BE SET in the <tt class="filename">smb.conf</tt> file of the Samba
server acting as the WINS server itself. If you set both the
-<i class="parameter"><tt>wins support = yes</tt></i> option and the
-<i class="parameter"><tt>wins server = &lt;name&gt;</tt></i> option then
+<a class="indexterm" name="id2896719"></a><i class="parameter"><tt>wins support</tt></i> = yes option and the
+<a class="indexterm" name="id2896734"></a><i class="parameter"><tt>wins server</tt></i> = &lt;name&gt; option then
nmbd will fail to start.
</p><p>
There are two possible scenarios for setting up cross subnet browsing.
@@ -605,45 +565,45 @@ The first details setting up cross subnet browsing on a network containing
Windows 95, Samba and Windows NT machines that are not configured as
part of a Windows NT Domain. The second details setting up cross subnet
browsing on networks that contain NT Domains.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907094"></a>WINS Replication</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896761"></a>WINS Replication</h3></div></div><div></div></div><p>
Samba-3 permits WINS replication through the use of the <tt class="filename">wrepld</tt> utility.
This tool is not currently capable of being used as it is still in active development.
As soon as this tool becomes moderately functional we will prepare man pages and enhance this
section of the documentation to provide usage and technical details.
-</p></div><div xmlns:ns19="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907119"></a>Static WINS Entries</h3></div></div><div></div></div><p>
-Adding static entries to your Samba-3 WINS server is actually fairly easy.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896787"></a>Static WINS Entries</h3></div></div><div></div></div><p>
+Adding static entries to your Samba WINS server is actually fairly easy.
All you have to do is add a line to <tt class="filename">wins.dat</tt>, typically
located in <tt class="filename">/usr/local/samba/var/locks</tt>.
-</p><ns19:p>
+</p><p>
Entries in <tt class="filename">wins.dat</tt> take the form of
-</ns19:p><pre class="programlisting">
+</p><pre class="programlisting">
&quot;NAME#TYPE&quot; TTL ADDRESS+ FLAGS
-</pre><ns19:p>
+</pre><p>
where NAME is the NetBIOS name, TYPE is the NetBIOS type, TTL is the
time-to-live as an absolute time in seconds, ADDRESS+ is one or more
addresses corresponding to the registration and FLAGS are the NetBIOS
flags for the registration.
-</ns19:p><ns19:p>
+</p><p>
A typical dynamic entry looks like:
-</ns19:p><pre class="programlisting">
+</p><pre class="programlisting">
&quot;MADMAN#03&quot; 1055298378 192.168.1.2 66R
-</pre><ns19:p>
+</pre><p>
To make it static, all that has to be done is set the TTL to 0:
-</ns19:p><pre class="programlisting">
+</p><pre class="programlisting">
&quot;MADMAN#03&quot; 0 192.168.1.2 66R
-</pre><ns19:p>
-</ns19:p><p>
+</pre><p>
+</p><p>
Though this method works with early Samba-3 versions, there's a
possibility that it may change in future versions if WINS replication
is added.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2907203"></a>Helpful Hints</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896875"></a>Helpful Hints</h2></div></div><div></div></div><p>
The following hints should be carefully considered as they are stumbling points
for many new network administrators.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907217"></a>Windows Networking Protocols</h3></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896889"></a>Windows Networking Protocols</h3></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
Do NOT use more than one (1) protocol on MS Windows machines
</p></div><p>
A very common cause of browsing problems results from installing more than
@@ -673,34 +633,27 @@ differently from MS Windows NT4. Generally, where a server does NOT support
the newer or extended protocol, these will fall back to the NT4 protocols.
</em></span></p><p>
The safest rule of all to follow it this - USE ONLY ONE PROTOCOL!
-</p></div><div xmlns:ns20="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907283"></a>Name Resolution Order</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896967"></a>Name Resolution Order</h3></div></div><div></div></div><p>
Resolution of NetBIOS names to IP addresses can take place using a number
of methods. The only ones that can provide NetBIOS name_type information
are:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>WINS: the best tool!</td></tr><tr><td>LMHOSTS: is static and hard to maintain.</td></tr><tr><td>Broadcast: uses UDP and can not resolve names across remote segments.</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>WINS: the best tool!</p></li><li><p>LMHOSTS: is static and hard to maintain.</p></li><li><p>Broadcast: uses UDP and can not resolve names across remote segments.</p></li></ul></div><p>
Alternative means of name resolution includes:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td><tt class="filename">/etc/hosts</tt>: is static, hard to maintain, and lacks name_type info</td></tr><tr><td>DNS: is a good choice but lacks essential name_type info.</td></tr></table><ns20:p>
+</p><div class="itemizedlist"><ul type="disc"><li><p><tt class="filename">/etc/hosts</tt>: is static, hard to maintain, and lacks name_type info</p></li><li><p>DNS: is a good choice but lacks essential name_type info.</p></li></ul></div><p>
Many sites want to restrict DNS lookups and want to avoid broadcast name
-resolution traffic. The <i class="parameter"><tt>name resolve order</tt></i> parameter is
-of great help here. The syntax of the <i class="parameter"><tt>name resolve order</tt></i>
-parameter is:
-</ns20:p><pre class="programlisting">
-name resolve order = wins lmhosts bcast host
-</pre><ns20:p>
+resolution traffic. The <i class="parameter"><tt>name resolve order</tt></i> parameter is of great help here.
+The syntax of the <i class="parameter"><tt>name resolve order</tt></i> parameter is:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>name resolve order = wins lmhosts bcast host</tt></i></td></tr></table><p>
<span class="emphasis"><em>or</em></span>
-</ns20:p><pre class="programlisting">
-name resolve order = wins lmhosts (eliminates bcast and host)
-</pre><ns20:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>name resolve order = wins lmhosts (eliminates bcast and host)</tt></i></td></tr></table><p>
The default is:
-</ns20:p><pre class="programlisting">
-name resolve order = host lmhost wins bcast
-</pre><ns20:p>
-where &quot;host&quot; refers the the native methods used by the Unix system
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>name resolve order = host lmhost wins bcast</tt></i></td></tr></table><p>
+where &quot;host&quot; refers to the native methods used by the UNIX system
to implement the gethostbyname() function call. This is normally
controlled by <tt class="filename">/etc/host.conf</tt>, <tt class="filename">/etc/nsswitch.conf</tt> and <tt class="filename">/etc/resolv.conf</tt>.
-</ns20:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2907421"></a>Technical Overview of browsing</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2897133"></a>Technical Overview of browsing</h2></div></div><div></div></div><p>
SMB networking provides a mechanism by which clients can access a list
-of machines in a network, a so-called <i class="parameter"><tt>browse list</tt></i>. This list
+of machines in a network, a so-called <a class="indexterm" name="id2897145"></a><i class="parameter"><tt>browse list</tt></i>. This list
contains machines that are ready to offer file and/or print services
to other machines within the network. Thus it does not include
machines which aren't currently able to do server tasks. The browse
@@ -718,7 +671,7 @@ Where NetBIOS over TCP/IP is enabled use of a WINS server is highly
recommended to aid the resolution of NetBIOS (SMB) names to IP addresses.
WINS allows remote segment clients to obtain NetBIOS name_type information
that can NOT be provided by any other means of name resolution.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907468"></a>Browsing support in Samba</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2897187"></a>Browsing support in Samba</h3></div></div><div></div></div><p>
Samba facilitates browsing. The browsing is supported by <span class="application">nmbd</span>
and is also controlled by options in the <tt class="filename">smb.conf</tt> file.
Samba can act as a local browse master for a workgroup and the ability
@@ -745,15 +698,15 @@ WINS server capabilities. In a Samba-only environment, it is
recommended that you use one and only one Samba server as your WINS server.
</p></div><p>
To get browsing to work you need to run nmbd as usual, but will need
-to use the <i class="parameter"><tt>workgroup</tt></i> option in <tt class="filename">smb.conf</tt>
+to use the <a class="indexterm" name="id2897254"></a><i class="parameter"><tt>workgroup</tt></i> option in <tt class="filename">smb.conf</tt>
to control what workgroup Samba becomes a part of.
</p><p>
Samba also has a useful option for a Samba server to offer itself for
browsing on another subnet. It is recommended that this option is only
used for 'unusual' purposes: announcements over the internet, for
-example. See <i class="parameter"><tt>remote announce</tt></i> in the
+example. See <a class="indexterm" name="id2897285"></a><i class="parameter"><tt>remote announce</tt></i> in the
<tt class="filename">smb.conf</tt> man page.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907575"></a>Problem resolution</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2897308"></a>Problem resolution</h3></div></div><div></div></div><p>
If something doesn't work then hopefully the log.nmbd file will help
you track down the problem. Try a debug level of 2 or 3 for finding
problems. Also note that the current browse list usually gets stored
@@ -764,7 +717,7 @@ type the server name as <tt class="filename">\\SERVER</tt> in filemanager then
hit enter and filemanager should display the list of available shares.
</p><p>
Some people find browsing fails because they don't have the global
-<i class="parameter"><tt>guest account</tt></i> set to a valid account. Remember that the
+<a class="indexterm" name="id2897349"></a><i class="parameter"><tt>guest account</tt></i> set to a valid account. Remember that the
IPC$ connection that lists the shares is done as guest, and thus you must
have a valid guest account.
</p><p><span class="emphasis"><em>
@@ -778,7 +731,7 @@ server resources.
The other big problem people have is that their broadcast address,
netmask or IP address is wrong (specified with the &quot;interfaces&quot; option
in <tt class="filename">smb.conf</tt>)
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907654"></a>Browsing across subnets</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2897396"></a>Browsing across subnets</h3></div></div><div></div></div><p>
Since the release of Samba 1.9.17(alpha1), Samba has supported the
replication of browse lists across subnet boundaries. This section
describes how to set this feature up in different settings.
@@ -799,32 +752,14 @@ be they Windows 95, Windows NT, or Samba servers must have the IP address
of a WINS server given to them by a DHCP server, or by manual configuration
(for Win95 and WinNT, this is in the TCP/IP Properties, under Network
settings) for Samba this is in the <tt class="filename">smb.conf</tt> file.
-</p><div xmlns:ns21="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907703"></a>How does cross subnet browsing work ?</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897445"></a>How does cross subnet browsing work ?</h4></div></div><div></div></div><p>
Cross subnet browsing is a complicated dance, containing multiple
moving parts. It has taken Microsoft several years to get the code
that achieves this correct, and Samba lags behind in some areas.
Samba is capable of cross subnet browsing when configured correctly.
</p><p>
-Consider a network set up as follows :
-</p><ns21:p>
-
-</ns21:p><pre class="programlisting">
- (DMB)
- N1_A N1_B N1_C N1_D N1_E
- | | | | |
- -------------------------------------------------------
- | subnet 1 |
- +---+ +---+
- |R1 | Router 1 Router 2 |R2 |
- +---+ +---+
- | |
- | subnet 2 subnet 3 |
- -------------------------- ------------------------------------
- | | | | | | | |
- N2_A N2_B N2_C N2_D N3_A N3_B N3_C N3_D
- (WINS)
-</pre><ns21:p>
-</ns21:p><p>
+ Consider a network set up as <a href="NetworkBrowsing.html#browsing1" title="Figure10.1.Cross subnet browsing example">in the diagram below</a>.
+</p><div class="figure"><a name="browsing1"></a><p class="title"><b>Figure10.1.Cross subnet browsing example</b></p><div class="mediaobject"><img src="projdoc/imagefiles/browsing1.png" width="270" alt="Cross subnet browsing example"></div></div><p>
Consisting of 3 subnets (1, 2, 3) connected by two routers
(R1, R2) - these do not pass broadcasts. Subnet 1 has 5 machines
on it, subnet 2 has 4 machines, subnet 3 has 4 machines. Assume
@@ -865,9 +800,9 @@ called 'non-authoritative'.
At this point the browse lists look as follows (these are
the machines you would see in your network neighborhood if
you looked in it on a particular network right now).
-</p><ns21:p>
-</ns21:p><div class="table"><a name="id2907818"></a><p class="title"><b>Table10.1.Browse subnet example 1</b></p><table summary="Browse subnet example 1" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><ns21:p>
-</ns21:p><p>
+</p><p>
+</p><div class="table"><a name="id2897579"></a><p class="title"><b>Table10.1.Browse subnet example 1</b></p><table summary="Browse subnet example 1" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><p>
+</p><p>
Note that at this point all the subnets are separate, no
machine is seen across any of the subnets.
</p><p>
@@ -887,26 +822,31 @@ names it knows about. Once the domain master browser receives
the MasterAnnouncement packet it schedules a synchronization
request to the sender of that packet. After both synchronizations
are done the browse lists look like :
-</p><ns21:p>
-</ns21:p><div class="table"><a name="id2907928"></a><p class="title"><b>Table10.2.Browse subnet example 2</b></p><table summary="Browse subnet example 2" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><ns21:p>
+</p><p>
+</p><div class="table"><a name="id2897692"></a><p class="title"><b>Table10.2.Browse subnet example 2</b></p><table summary="Browse subnet example 2" border="1"><colgroup><col align="left"><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="justify">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="justify">N1_A, N1_B, N1_C, N1_D, N1_E,
+N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="justify">N2_A, N2_B, N2_C, N2_D, N1_A(*),
+N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="justify">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><p>
Servers with a (*) after them are non-authoritative names.
-</ns21:p><p>
+</p><p>
At this point users looking in their network neighborhood on
subnets 1 or 2 will see all the servers on both, users on
subnet 3 will still only see the servers on their own subnet.
</p><p>
-The same sequence of events that occured for N2_B now occurs
+The same sequence of events that occurred for N2_B now occurs
for the local master browser on subnet 3 (N3_D). When it
synchronizes browse lists with the domain master browser (N1_A)
it gets both the server entries on subnet 1, and those on
subnet 2. After N3_D has synchronized with N1_C and vica-versa
the browse lists look like.
-</p><ns21:p>
-</ns21:p><div class="table"><a name="id2908028"></a><p class="title"><b>Table10.3.Browse subnet example 3</b></p><table summary="Browse subnet example 3" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><ns21:p>
+</p><p>
+</p><div class="table"><a name="id2897805"></a><p class="title"><b>Table10.3.Browse subnet example 3</b></p><table summary="Browse subnet example 3" border="1"><colgroup><col align="left"><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="justify">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="justify">N1_A, N1_B, N1_C, N1_D, N1_E,
+N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="justify">N2_A, N2_B, N2_C, N2_D, N1_A(*),
+N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="justify">N3_A, N3_B, N3_C, N3_D, N1_A(*),
+N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><p>
Servers with a (*) after them are non-authoritative names.
-</ns21:p><p>
+</p><p>
At this point users looking in their network neighborhood on
subnets 1 or 3 will see all the servers on all subnets, users on
subnet 2 will still only see the servers on subnets 1 and 2, but not 3.
@@ -915,11 +855,17 @@ Finally, the local master browser for subnet 2 (N2_B) will sync again
with the domain master browser (N1_C) and will receive the missing
server entries. Finally - and as a steady state (if no machines
are removed or shut off) the browse lists will look like :
-</p><ns21:p>
-</ns21:p><div class="table"><a name="id2908128"></a><p class="title"><b>Table10.4.Browse subnet example 4</b></p><table summary="Browse subnet example 4" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><ns21:p>
+</p><p>
+</p><div class="table"><a name="id2897922"></a><p class="title"><b>Table10.4.Browse subnet example 4</b></p><table summary="Browse subnet example 4" border="1"><colgroup><col align="left"><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="justify">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="justify">N1_A, N1_B, N1_C, N1_D, N1_E,
+N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*),
+N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="justify">N2_A, N2_B, N2_C, N2_D, N1_A(*),
+N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*),
+N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="justify">N3_A, N3_B, N3_C, N3_D, N1_A(*),
+N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*),
+N2_C(*), N2_D(*)</td></tr></tbody></table></div><p>
Servers with a (*) after them are non-authoritative names.
-</ns21:p><p>
+</p><p>
Synchronizations between the domain master browser and local
master browsers will continue to occur, but this should be a
steady state situation.
@@ -937,11 +883,11 @@ If either router R1 or R2 fails the following will occur:
be able to access servers on its local subnet, by using subnet-isolated
broadcast NetBIOS name resolution. The effects are similar to that of
losing access to a DNS server.
- </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2908270"></a>Common Errors</h2></div></div><div></div></div><p>
+ </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2898078"></a>Common Errors</h2></div></div><div></div></div><p>
Many questions are asked on the mailing lists regarding browsing. The majority of browsing
problems originate out of incorrect configuration of NetBIOS name resolution. Some are of
particular note.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908285"></a>How can one flush the Samba NetBIOS name cache without restarting Samba?</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898092"></a>How can one flush the Samba NetBIOS name cache without restarting Samba?</h3></div></div><div></div></div><p>
Samba's nmbd process controls all browse list handling. Under normal circumstances it is
safe to restart nmbd. This will effectively flush the Samba NetBIOS name cache and cause it
to be rebuilt. Note that this does NOT make certain that a rogue machine name will not re-appear
@@ -951,8 +897,11 @@ want to clear a rogue machine from the list then every machine on the network wi
shut down and restarted at after all machines are down. Failing a complete restart, the only
other thing you can do is wait until the entry times out and is then flushed from the list.
This may take a long time on some networks (months).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908313"></a>My client reports &quot;This server is not configured to list shared resources&quot;</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898121"></a>My client reports &quot;This server is not configured to list shared resources&quot;</h3></div></div><div></div></div><p>
Your guest account is probably invalid for some reason. Samba uses the
guest account for browsing in smbd. Check that your guest account is
valid.
-</p><p>See also <i class="parameter"><tt>guest account</tt></i> in the <tt class="filename">smb.conf</tt> man page.</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="optional.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="passdb.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartIII.Advanced Configuration</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter11.Account Information Databases</td></tr></table></div></body></html>
+</p><p>See also <a class="indexterm" name="id2898142"></a><i class="parameter"><tt>guest account</tt></i> in the <tt class="filename">smb.conf</tt> man page.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898166"></a>I get an <span class="errorname">Unable to browse the network</span> error</h3></div></div><div></div></div><p>This error can have multiple causes:</p><div class="itemizedlist"><ul type="disc"><li><p>There is no local master browser. Configure <span class="application">nmbd</span>
+ or any other machine to serve as local master browser.</p></li><li><p>You can not log onto the machine that is the local master
+ browser. Can you logon to it as guest user? </p></li><li><p>There is no IP connectivity to the local master browser.
+ Can you reach it by broadcast?</p></li></ul></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="optional.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="passdb.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartIII.Advanced Configuration</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter11.Account Information Databases</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/Other-Clients.html b/docs/htmldocs/Other-Clients.html
index b9d03873934..dffa1122ac6 100644
--- a/docs/htmldocs/Other-Clients.html
+++ b/docs/htmldocs/Other-Clients.html
@@ -1,9 +1,7 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter38.Samba and other CIFS clients</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Portability.html" title="Chapter37.Portability"><link rel="next" href="speed.html" title="Chapter39.Samba Performance Tuning"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter38.Samba and other CIFS clients</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Portability.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="speed.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Other-Clients"></a>Chapter38.Samba and other CIFS clients</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jim</span> <span class="surname">McDonough</span></h3><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jmcd@us.ibm.com">jmcd@us.ibm.com</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">5 Mar 2001</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Other-Clients.html#id3013776">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id3013848">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013855">How can I configure OS/2 Warp Connect or
- OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="Other-Clients.html#id3013471">How can I configure OS/2 Warp 3 (not Connect),
- OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="Other-Clients.html#id3013530">How do I get printer driver download working
- for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013628">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id3013090">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id3013179">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id3013210">Configure WfW password handling</a></dt><dt><a href="Other-Clients.html#id3013255">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id3013285">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id3013303">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3013349">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id3014379">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id3014403">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id3014514">Windows NT 3.1</a></dt></dl></div><p>This chapter contains client-specific information.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013776"></a>Macintosh clients?</h2></div></div><div></div></div><p>
-Yes. <a href="http://www.thursby.com/" target="_top">Thursby</a> now has a CIFS Client / Server called <a href="http://www.thursby.com/products/dave.html" target="_top">DAVE</a>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter38.Samba and other CIFS clients</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Portability.html" title="Chapter37.Portability"><link rel="next" href="speed.html" title="Chapter39.Samba Performance Tuning"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter38.Samba and other CIFS clients</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Portability.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="speed.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Other-Clients"></a>Chapter38.Samba and other CIFS clients</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jim</span> <span class="surname">McDonough</span></h3><span class="contrib">OS/2</span><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jmcd@us.ibm.com">jmcd@us.ibm.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">5 Mar 2001</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Other-Clients.html#id2963189">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id2963267">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id2963275">Configuring OS/2 Warp Connect or
+ OS/2 Warp 4 as a client for Samba</a></dt><dt><a href="Other-Clients.html#id2963359">Configuring OS/2 Warp 3 (not Connect),
+ OS/2 1.2, 1.3 or 2.x for Samba</a></dt><dt><a href="Other-Clients.html#id2963411">Printer driver download for for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id2963512">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id2963519">Latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id2963610">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id2963639">Configuring WfW password handling</a></dt><dt><a href="Other-Clients.html#id2963692">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id2963730">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id2963747">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id2963794">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id2963867">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id2963891">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id2964079">Windows NT 3.1</a></dt></dl></div><p>This chapter contains client-specific information.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963189"></a>Macintosh clients?</h2></div></div><div></div></div><p>
+ Yes. <a href="http://www.thursby.com/" target="_top">Thursby</a> now has a CIFS Client / Server called <a href="http://www.thursby.com/products/dave.html" target="_top">DAVE</a>
</p><p>
They test it against Windows 95, Windows NT and samba for
compatibility issues. At the time of writing, DAVE was at version
@@ -22,10 +20,8 @@ What Samba offers MS
Windows users, these packages offer to Macs. For more info on these
packages, Samba, and Linux (and other UNIX-based systems) see
<a href="http://www.eats.com/linux_mac_win.html" target="_top">http://www.eats.com/linux_mac_win.html</a>
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013848"></a>OS2 Client</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013855"></a>How can I configure OS/2 Warp Connect or
- OS/2 Warp 4 as a client for Samba?</h3></div></div><div></div></div><p>A more complete answer to this question can be
- found on <a href="http://carol.wins.uva.nl/~leeuw/samba/warp.html" target="_top">
- http://carol.wins.uva.nl/~leeuw/samba/warp.html</a>.</p><p>Basically, you need three components:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>The File and Print Client ('IBM Peer')</td></tr><tr><td>TCP/IP ('Internet support') </td></tr><tr><td>The &quot;NetBIOS over TCP/IP&quot; driver ('TCPBEUI')</td></tr></table><p>Installing the first two together with the base operating
+</p><p>Newer versions of the Macintosh (Mac OS X) include Samba.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963267"></a>OS2 Client</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963275"></a>Configuring OS/2 Warp Connect or
+ OS/2 Warp 4 as a client for Samba</h3></div></div><div></div></div><p>Basically, you need three components:</p><div class="itemizedlist"><ul type="disc"><li><p>The File and Print Client ('IBM Peer')</p></li><li><p>TCP/IP ('Internet support') </p></li><li><p>The &quot;NetBIOS over TCP/IP&quot; driver ('TCPBEUI')</p></li></ul></div><p>Installing the first two together with the base operating
system on a blank system is explained in the Warp manual. If Warp
has already been installed, but you now want to install the
networking support, use the &quot;Selective Install for Networking&quot;
@@ -40,14 +36,12 @@ packages, Samba, and Linux (and other UNIX-based systems) see
to the &quot;Names List&quot;, or specify a WINS server ('NetBIOS
Nameserver' in IBM and RFC terminology). For Warp Connect you
may need to download an update for 'IBM Peer' to bring it on
- the same level as Warp 4. See the webpage mentioned above.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013471"></a>How can I configure OS/2 Warp 3 (not Connect),
- OS/2 1.2, 1.3 or 2.x for Samba?</h3></div></div><div></div></div><p>You can use the free Microsoft LAN Manager 2.2c Client
+ the same level as Warp 4. See the webpage mentioned above.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963359"></a>Configuring OS/2 Warp 3 (not Connect),
+ OS/2 1.2, 1.3 or 2.x for Samba</h3></div></div><div></div></div><p>You can use the free Microsoft LAN Manager 2.2c Client
for OS/2 from
<a href="ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/" target="_top">
ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/</a>.
- See <a href="http://carol.wins.uva.nl/~leeuw/lanman.html" target="_top">
- http://carol.wins.uva.nl/~leeuw/lanman.html</a> for
- more information on how to install and use this client. In
+ In
a nutshell, edit the file \OS2VER in the root directory of
the OS/2 boot partition and add the lines:</p><pre class="programlisting">
20=setup.exe
@@ -58,14 +52,12 @@ packages, Samba, and Linux (and other UNIX-based systems) see
or NS2000 driver from
<a href="ftp://ftp.cdrom.com/pub/os2/network/ndis/" target="_top">
ftp://ftp.cdrom.com/pub/os2/network/ndis/</a> instead.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013530"></a>How do I get printer driver download working
- for OS/2 clients?</h3></div></div><div></div></div><p>First, create a share called <i class="parameter"><tt>[PRINTDRV]</tt></i> that is
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963411"></a>Printer driver download for for OS/2 clients?</h3></div></div><div></div></div><p>First, create a share called <i class="parameter"><tt>[PRINTDRV]</tt></i> that is
world-readable. Copy your OS/2 driver files there. Note
that the .EA_ files must still be separate, so you will need
to use the original install files, and not copy an installed
driver from an OS/2 system.</p><p>Install the NT driver first for that printer. Then,
- add to your <tt class="filename">smb.conf</tt> a parameter, <i class="parameter"><tt>os2 driver map =
- <i class="replaceable"><tt>filename</tt></i></tt></i>. Then, in the file
+ add to your <tt class="filename">smb.conf</tt> a parameter, <a class="indexterm" name="id2963445"></a><i class="parameter"><tt>os2 driver map</tt></i> = filename. Then, in the file
specified by <i class="replaceable"><tt>filename</tt></i>, map the
name of the NT driver name to the OS/2 driver name as
follows:</p><p><i class="parameter"><tt><i class="replaceable"><tt>nt driver name</tt></i> = <i class="replaceable"><tt>os2 driver name</tt></i>.<i class="replaceable"><tt>device name</tt></i></tt></i>, e.g.:</p><p><i class="parameter"><tt>
@@ -75,7 +67,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see
you the driver is not available. On the second attempt, it
will work. This is fixed simply by adding the device name
to the mapping, after which it will work on the first attempt.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013628"></a>Windows for Workgroups</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013090"></a>Use latest TCP/IP stack from Microsoft</h3></div></div><div></div></div><p>Use the latest TCP/IP stack from Microsoft if you use Windows
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963512"></a>Windows for Workgroups</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963519"></a>Latest TCP/IP stack from Microsoft</h3></div></div><div></div></div><p>Use the latest TCP/IP stack from Microsoft if you use Windows
for Workgroups.
</p><p>The early TCP/IP stacks had lots of bugs.</p><p>
Microsoft has released an incremental upgrade to their TCP/IP 32-Bit
@@ -90,7 +82,7 @@ fixed. New files include <tt class="filename">WINSOCK.DLL</tt>,
<tt class="filename">TRACERT.EXE</tt>,
<tt class="filename">NETSTAT.EXE</tt>, and
<tt class="filename">NBTSTAT.EXE</tt>.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013179"></a>Delete .pwl files after password change</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963610"></a>Delete .pwl files after password change</h3></div></div><div></div></div><p>
WfWg does a lousy job with passwords. I find that if I change my
password on either the unix box or the PC the safest thing to do is to
delete the .pwl files in the windows directory. The PC will complain about not finding the files, but will soon get over it, allowing you to enter the new password.
@@ -99,20 +91,20 @@ If you don't do this you may find that WfWg remembers and uses the old
password, even if you told it a new one.
</p><p>
Often WfWg will totally ignore a password you give it in a dialog box.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013210"></a>Configure WfW password handling</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963639"></a>Configuring WfW password handling</h3></div></div><div></div></div><p>
There is a program call admincfg.exe
on the last disk (disk 8) of the WFW 3.11 disk set. To install it
type <b class="userinput"><tt>EXPAND A:\ADMINCFG.EX_ C:\WINDOWS\ADMINCFG.EXE</tt></b>.
Then add an icon
for it via the <span class="application">Program Manager</span> <span class="guimenu">New</span> Menu.
This program allows you to control how WFW handles passwords. ie disable Password Caching etc
-for use with <i class="parameter"><tt>security = user</tt></i>
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013255"></a>Case handling of passwords</h3></div></div><div></div></div><p>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <a href="smb.conf.5.html" target="_top">smb.conf(5)</a> information on <i class="parameter"><tt>password level</tt></i> to specify what characters samba should try to uppercase when checking.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013285"></a>Use TCP/IP as default protocol</h3></div></div><div></div></div><p>To support print queue reporting you may find
+for use with <a class="indexterm" name="id2963677"></a><i class="parameter"><tt>security</tt></i> = user
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963692"></a>Case handling of passwords</h3></div></div><div></div></div><p>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <tt class="filename">smb.conf</tt> information on <a class="indexterm" name="id2963713"></a><i class="parameter"><tt>password level</tt></i> to specify what characters samba should try to uppercase when checking.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963730"></a>Use TCP/IP as default protocol</h3></div></div><div></div></div><p>To support print queue reporting you may find
that you have to use TCP/IP as the default protocol under
WfWg. For some reason if you leave NetBEUI as the default
it may break the print queue reporting on some systems.
-It is presumably a WfWg bug.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013303"></a>Speed improvement</h3></div></div><div></div></div><p>
-Note that some people have found that setting <i class="parameter"><tt>DefaultRcvWindow</tt></i> in
+It is presumably a WfWg bug.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963747"></a>Speed improvement</h3></div></div><div></div></div><p>
+ Note that some people have found that setting <i class="parameter"><tt>DefaultRcvWindow</tt></i> in
the <i class="parameter"><tt>[MSTCP]</tt></i> section of the
<tt class="filename">SYSTEM.INI</tt> file under WfWg to 3072 gives a
big improvement. I don't know why.
@@ -122,7 +114,7 @@ performance with a large value (16384 or larger). Other people have
reported that anything over 3072 slows things down enormously. One
person even reported a speed drop of a factor of 30 when he went from
3072 to 8192. I don't know why.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3013349"></a>Windows '95/'98</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963794"></a>Windows '95/'98</h2></div></div><div></div></div><p>
When using Windows 95 OEM SR2 the following updates are recommended where Samba
is being used. Please NOTE that the above change will affect you once these
updates have been installed.
@@ -136,11 +128,11 @@ install the <b class="command">OLEUPD.EXE</b> fix. This
fix may stop your machine from hanging for an extended period when exiting
Outlook and you may also notice a significant speedup when accessing network
neighborhood services.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3014379"></a>Speed improvement</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963867"></a>Speed improvement</h3></div></div><div></div></div><p>
Configure the win95 TCPIP registry settings to give better
performance. I use a program called <b class="command">MTUSPEED.exe</b> which I got off the
net. There are various other utilities of this type freely available.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014403"></a>Windows 2000 Service Pack 2</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963891"></a>Windows 2000 Service Pack 2</h2></div></div><div></div></div><p>
There are several annoyances with Windows 2000 SP2. One of which
only appears when using a Samba server to host user profiles
to Windows 2000 SP2 clients in a Windows domain. This assumes
@@ -149,26 +141,19 @@ likely occur if it is not.
</p><p>
In order to serve profiles successfully to Windows 2000 SP2
clients (when not operating as a PDC), Samba must have
-<i class="parameter"><tt>nt acl support = no</tt></i>
+<a class="indexterm" name="id2963913"></a><i class="parameter"><tt>nt acl support</tt></i> = no
added to the file share which houses the roaming profiles.
If this is not done, then the Windows 2000 SP2 client will
complain about not being able to access the profile (Access
Denied) and create multiple copies of it on disk (DOMAIN.user.001,
DOMAIN.user.002, etc...). See the
-<a href="smb.conf.5.html" target="_top">smb.conf(5)</a> man page
+<tt class="filename">smb.conf</tt> man page
for more details on this option. Also note that the
-<i class="parameter"><tt>nt acl support</tt></i> parameter was formally a global parameter in
+<a class="indexterm" name="id2963940"></a><i class="parameter"><tt>nt acl support</tt></i> parameter was formally a global parameter in
releases prior to Samba 2.2.2.
</p><p>
The following is a minimal profile share:
-</p><pre class="programlisting">
- [profile]
- path = /export/profile
- create mask = 0600
- directory mask = 0700
- nt acl support = no
- read only = no
-</pre><p>
+</p><div class="example"><a name="id2963963"></a><p class="title"><b>Example38.1.Minimal profile share</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[profile]</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /export/profile</tt></i></td></tr><tr><td><i class="parameter"><tt>create mask = 0600</tt></i></td></tr><tr><td><i class="parameter"><tt>directory mask = 0700</tt></i></td></tr><tr><td><i class="parameter"><tt>nt acl support = no</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = no</tt></i></td></tr></table></div><p>
The reason for this bug is that the Win2k SP2 client copies
the security descriptor for the profile which contains
the Samba server's SID, and not the domain SID. The client
@@ -176,12 +161,12 @@ compares the SID for SAMBA\user and realizes it is
different that the one assigned to DOMAIN\user. Hence the reason
for the <span class="errorname">access denied</span> message.
</p><p>
-By disabling the <i class="parameter"><tt>nt acl support</tt></i> parameter, Samba will send
+By disabling the <a class="indexterm" name="id2964043"></a><i class="parameter"><tt>nt acl support</tt></i> parameter, Samba will send
the Win2k client a response to the QuerySecurityDescriptor
trans2 call which causes the client to set a default ACL
for the profile. This default ACL includes
</p><p><span class="emphasis"><em>DOMAIN\user &quot;Full Control&quot;</em></span>&gt;</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This bug does not occur when using winbind to
-create accounts on the Samba host for Domain users.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014514"></a>Windows NT 3.1</h2></div></div><div></div></div><p>If you have problems communicating across routers with Windows
-NT 3.1 workstations, read <a href="http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;Q103765" target="_top">this Microsoft Knowledge Base article</a>.
+create accounts on the Samba host for Domain users.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964079"></a>Windows NT 3.1</h2></div></div><div></div></div><p>If you have problems communicating across routers with Windows
+NT 3.1 workstations, read <a href="http://support.microsoft.com/default.aspx?scid=kb;Q103765" target="_top">this Microsoft Knowledge Base article</a>.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Portability.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="speed.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter37.Portability</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter39.Samba Performance Tuning</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Portability.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="speed.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter37.Portability</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter39.Samba Performance Tuning</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/PolicyMgmt.html b/docs/htmldocs/PolicyMgmt.html
index 3b3e2b3d1a6..754ca9b686f 100644
--- a/docs/htmldocs/PolicyMgmt.html
+++ b/docs/htmldocs/PolicyMgmt.html
@@ -1,11 +1,10 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter23.System and Account Policies</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="AdvancedNetworkManagement.html" title="Chapter22.Advanced Network Management"><link rel="next" href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter23.System and Account Policies</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="AdvancedNetworkManagement.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="ProfileMgmt.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="PolicyMgmt"></a>Chapter23.System and Account Policies</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="PolicyMgmt.html#id2982185">Features and Benefits</a></dt><dt><a href="PolicyMgmt.html#id2982237">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2982348">Windows 9x/Me Policies</a></dt><dt><a href="PolicyMgmt.html#id2981896">Windows NT4 Style Policy Files</a></dt><dt><a href="PolicyMgmt.html#id2982030">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2983472">Managing Account/User Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2983573">Samba Editreg Toolset</a></dt><dt><a href="PolicyMgmt.html#id2983593">Windows NT4/200x</a></dt><dt><a href="PolicyMgmt.html#id2983614">Samba PDC</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2983658">System Startup and Logon Processing Overview</a></dt><dt><a href="PolicyMgmt.html#id2983805">Common Errors</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2983819">Policy Does Not Work</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter23.System and Account Policies</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="AdvancedNetworkManagement.html" title="Chapter22.Advanced Network Management"><link rel="next" href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter23.System and Account Policies</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="AdvancedNetworkManagement.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="ProfileMgmt.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="PolicyMgmt"></a>Chapter23.System and Account Policies</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="PolicyMgmt.html#id2944479">Features and Benefits</a></dt><dt><a href="PolicyMgmt.html#id2944538">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2944652">Windows 9x/Me Policies</a></dt><dt><a href="PolicyMgmt.html#id2944748">Windows NT4 Style Policy Files</a></dt><dt><a href="PolicyMgmt.html#id2944880">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2945132">Managing Account/User Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2945238">Samba Editreg Toolset</a></dt><dt><a href="PolicyMgmt.html#id2945277">Windows NT4/200x</a></dt><dt><a href="PolicyMgmt.html#id2945301">Samba PDC</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2945346">System Startup and Logon Processing Overview</a></dt><dt><a href="PolicyMgmt.html#id2945496">Common Errors</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2945511">Policy Does Not Work</a></dt></dl></dd></dl></div><p>
This chapter summarises the current state of knowledge derived from personal
practice and knowledge from samba mailing list subscribers. Before reproduction
of posted information effort has been made to validate the information provided.
Where additional information was uncovered through this validation it is provided
also.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982185"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944479"></a>Features and Benefits</h2></div></div><div></div></div><p>
When MS Windows NT3.5 was introduced the hot new topic was the ability to implement
Group Policies for users and group. Then along came MS Windows NT4 and a few sites
started to adopt this capability. How do we know that? By way of the number of &quot;booboos&quot;
@@ -24,9 +23,9 @@ the deployment in many sites. This chapter reviews techniques and methods that c
be used to exploit opportunities for automation of control over user desktops and
network client workstations.
</p><p>
-A tool new to Samba-3 may become an important part of the future Samba Administrators'
+A tool new to Samba may become an important part of the future Samba Administrators'
arsenal. The <b class="command">editreg</b> tool is described in this document.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982237"></a>Creating and Managing System Policies</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944538"></a>Creating and Managing System Policies</h2></div></div><div></div></div><p>
Under MS Windows platforms, particularly those following the release of MS Windows
NT4 and MS Windows 95) it is possible to create a type of file that would be placed
in the NETLOGON share of a domain controller. As the client logs onto the network
@@ -55,13 +54,13 @@ be a step forward, but improved functionality comes at a great price.
Before embarking on the configuration of network and system policies it is highly
advisable to read the documentation available from Microsoft's web site regarding
<a href="http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp" target="_top">
-Implementing Profiles and Policies in Windows NT 4.0 from http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp</a> available from Microsoft.
+Implementing Profiles and Policies in Windows NT 4.0</a> available from Microsoft.
There are a large number of documents in addition to this old one that should also
be read and understood. Try searching on the Microsoft web site for &quot;Group Policies&quot;.
</p><p>
What follows is a very brief discussion with some helpful notes. The information provided
here is incomplete - you are warned.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982348"></a>Windows 9x/Me Policies</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944652"></a>Windows 9x/Me Policies</h3></div></div><div></div></div><p>
You need the Win98 Group Policy Editor to set Group Profiles up under Windows 9x/Me.
It can be found on the Original full product Win98 installation CD under
<tt class="filename">tools/reskit/netadmin/poledit</tt>. Install this using the
@@ -87,7 +86,7 @@ here is incomplete - you are warned.
<tt class="filename">grouppol.inf</tt>. Log off and on again a couple of times and see
if Win98 picks up group policies. Unfortunately this needs to be done on every
Win9x/Me machine that uses group policies.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2981896"></a>Windows NT4 Style Policy Files</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944748"></a>Windows NT4 Style Policy Files</h3></div></div><div></div></div><p>
To create or edit <tt class="filename">ntconfig.pol</tt> you must use the NT Server
Policy Editor, <b class="command">poledit.exe</b> which is included with NT4 Server
but <span class="emphasis"><em>not NT Workstation</em></span>. There is a Policy Editor on a NT4
@@ -108,14 +107,14 @@ here is incomplete - you are warned.
be extracted as well. It is also possible to downloaded the policy template
files for Office97 and get a copy of the policy editor. Another possible
location is with the Zero Administration Kit available for download from Microsoft.
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2982006"></a>Registry Spoiling</h4></div></div><div></div></div><p>
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944857"></a>Registry Spoiling</h4></div></div><div></div></div><p>
With NT4 style registry based policy changes, a large number of settings are not
automatically reversed as the user logs off. Since the settings that were in the
NTConfig.POL file were applied to the client machine registry and that apply to the
hive key HKEY_LOCAL_MACHINE are permanent until explicitly reversed. This is known
as tattooing. It can have serious consequences down-stream and the administrator must
be extremely careful not to lock out the ability to manage the machine at a later date.
- </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982030"></a>MS Windows 200x / XP Professional Policies</h3></div></div><div></div></div><p>
+ </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944880"></a>MS Windows 200x / XP Professional Policies</h3></div></div><div></div></div><p>
Windows NT4 System policies allows setting of registry parameters specific to
users, groups and computers (client workstations) that are members of the NT4
style domain. Such policy file will work with MS Windows 2000 / XP clients also.
@@ -152,7 +151,7 @@ here is incomplete - you are warned.
to any number of concurrently applicable (and applied) policy sets (GPOs). Active Directory allows
the administrator to also set filters over the policy settings. No such equivalent capability
exists with NT4 style policy files.
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2982130"></a>Administration of Win2K / XP Policies</h4></div></div><div></div></div><p>
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944981"></a>Administration of Win2K / XP Policies</h4></div></div><div></div></div><p>
Instead of using the tool called <span class="application">The System Policy Editor</span>, commonly called Poledit (from the
executable name <b class="command">poledit.exe</b>), <span class="acronym">GPOs</span> are created and managed using a
<span class="application">Microsoft Management Console</span> <span class="acronym">(MMC)</span> snap-in as follows:</p><div class="procedure"><ol type="1"><li><p>
@@ -178,10 +177,10 @@ here is incomplete - you are warned.
The MS Windows 2000 Resource Kit contains a tool called gpolmig.exe. This tool can be used
to migrate an NT4 NTConfig.POL file into a Windows 200x style GPO. Be VERY careful how you
use this powerful tool. Please refer to the resource kit manuals for specific usage information.
- </p></div></div></div></div><div xmlns:ns80="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983472"></a>Managing Account/User Policies</h2></div></div><div></div></div><p>
+ </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945132"></a>Managing Account/User Policies</h2></div></div><div></div></div><p>
Policies can define a specific user's settings or the settings for a group of users. The resulting
policy file contains the registry settings for all users, groups, and computers that will be using
-the policy file. Separate policy files for each user, group, or computer are not not necessary.
+the policy file. Separate policy files for each user, group, or computer are not necessary.
</p><p>
If you create a policy that will be automatically downloaded from validating domain controllers,
you should name the file NTconfig.POL. As system administrator, you have the option of renaming the
@@ -203,42 +202,49 @@ In addition to user access controls that may be imposed or applied via system an
in a manner that works in conjunction with user profiles, the user management environment under
MS Windows NT4/200x/XP allows per domain as well as per user account restrictions to be applied.
Common restrictions that are frequently used includes:
-</p><ns80:p>
-</ns80:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Logon Hours</td></tr><tr><td>Password Aging</td></tr><tr><td>Permitted Logon from certain machines only</td></tr><tr><td>Account type (Local or Global)</td></tr><tr><td>User Rights</td></tr></table><ns80:p>
-</ns80:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983573"></a>Samba Editreg Toolset</h3></div></div><div></div></div><p>
- Describe in detail the benefits of <b class="command">editreg</b> and how to use it.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983593"></a>Windows NT4/200x</h3></div></div><div></div></div><p>
+</p><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Logon Hours</p></li><li><p>Password Aging</p></li><li><p>Permitted Logon from certain machines only</p></li><li><p>Account type (Local or Global)</p></li><li><p>User Rights</p></li></ul></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945238"></a>Samba Editreg Toolset</h3></div></div><div></div></div><p>
+ A new tool called <b class="command">editreg</b> is under development. This tool can be used
+ to edit registry files (called NTUser.DAT) that are stored in user and group profiles.
+ NTConfig.POL files have the same structure as the NTUser.DAT file and can be editted using
+ this tool. <b class="command">editreg</b> is being built with the intent to enable NTConfig.POL
+ files to be saved in text format and to permit the building of new NTConfig.POL files with
+ extended capabilities. It is proving difficult to realise this capability, so do not be surprised
+ if this feature does not materialise. Formal capabilities will be announced at the time that
+ this tool is released for production use.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945277"></a>Windows NT4/200x</h3></div></div><div></div></div><p>
The tools that may be used to configure these types of controls from the MS Windows environment are:
The NT4 User Manager for domains, the NT4 System and Group Policy Editor, the registry editor (regedt32.exe).
Under MS Windows 200x/XP this is done using the Microsoft Management Console (MMC) with appropriate
&quot;snap-ins&quot;, the registry editor, and potentially also the NT4 System and Group Policy Editor.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983614"></a>Samba PDC</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945301"></a>Samba PDC</h3></div></div><div></div></div><p>
With a Samba Domain Controller, the new tools for managing of user account and policy information includes:
<b class="command">smbpasswd</b>, <b class="command">pdbedit</b>, <b class="command">net</b>, <b class="command">rpcclient</b>.
The administrator should read the
man pages for these tools and become familiar with their use.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983658"></a>System Startup and Logon Processing Overview</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945346"></a>System Startup and Logon Processing Overview</h2></div></div><div></div></div><p>
The following attempts to document the order of processing of system and user policies following a system
reboot and as part of the user logon:
</p><div class="orderedlist"><ol type="1"><li><p>
Network starts, then Remote Procedure Call System Service (RPCSS) and Multiple Universal Naming
Convention Provider (MUP) start
- </p></li><li xmlns:ns81=""><ns81:p>
+ </p></li><li><p>
Where Active Directory is involved, an ordered list of Group Policy Objects (GPOs) is downloaded
and applied. The list may include GPOs that:
-</ns81:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Apply to the location of machines in a Directory</td></tr><tr><td>Apply only when settings have changed</td></tr><tr><td>Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.</td></tr></table><ns81:p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Apply to the location of machines in a Directory</p></li><li><p>Apply only when settings have changed</p></li><li><p>Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.</p></li></ul></div><p>
No desktop user interface is presented until the above have been processed.
- </ns81:p></li><li><p>
+ </p></li><li><p>
Execution of start-up scripts (hidden and synchronous by default).
</p></li><li><p>
A keyboard action to affect start of logon (Ctrl-Alt-Del).
</p></li><li><p>
User credentials are validated, User profile is loaded (depends on policy settings).
- </p></li><li xmlns:ns82=""><ns82:p>
+ </p></li><li><p>
An ordered list of User GPOs is obtained. The list contents depends on what is configured in respect of:
-</ns82:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Is user a domain member, thus subject to particular policies</td></tr><tr><td>Loopback enablement, and the state of the loopback policy (Merge or Replace)</td></tr><tr><td>Location of the Active Directory itself</td></tr><tr><td>Has the list of GPOs changed. No processing is needed if not changed.</td></tr></table><ns82:p>
- </ns82:p></li><li><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Is user a domain member, thus subject to particular policies</p></li><li><p>Loopback enablement, and the state of the loopback policy (Merge or Replace)</p></li><li><p>Location of the Active Directory itself</p></li><li><p>Has the list of GPOs changed. No processing is needed if not changed.</p></li></ul></div><p>
+ </p></li><li><p>
User Policies are applied from Active Directory. Note: There are several types.
</p></li><li><p>
Logon scripts are run. New to Win2K and Active Directory, logon scripts may be obtained based on Group
@@ -247,15 +253,15 @@ reboot and as part of the user logon:
</p></li><li><p>
The User Interface as determined from the GPOs is presented. Note: In a Samba domain (like and NT4
Domain) machine (system) policies are applied at start-up, User policies are applied at logon.
- </p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983805"></a>Common Errors</h2></div></div><div></div></div><p>
+ </p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945496"></a>Common Errors</h2></div></div><div></div></div><p>
Policy related problems can be very difficult to diagnose and even more difficult to rectify. The following
collection demonstrates only basic issues.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983819"></a>Policy Does Not Work</h3></div></div><div></div></div><p>
-Question: We have created the <tt class="filename">config.pol</tt> file and put it in the <span class="emphasis"><em>NETLOGON</em></span> share.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945511"></a>Policy Does Not Work</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">We have created the <tt class="filename">config.pol</tt> file and put it in the <span class="emphasis"><em>NETLOGON</em></span> share.
It has made no difference to our Win XP Pro machines, they just don't see it. IT worked fine with Win 98 but does not
-work any longer since we upgraded to Win XP Pro. Any hints?
+work any longer since we upgraded to Win XP Pro. Any hints?</span>&#8221;
</p><p>
-<span class="emphasis"><em>ANSWER:</em></span> Policy files are NOT portable between Windows 9x / Me and MS Windows NT4 / 200x / XP based
+Policy files are NOT portable between Windows 9x / Me and MS Windows NT4 / 200x / XP based
platforms. You need to use the NT4 Group Policy Editor to create a file called <tt class="filename">NTConfig.POL</tt> so that
it is in the correct format for your MS Windows XP Pro clients.
-</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="AdvancedNetworkManagement.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ProfileMgmt.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter22.Advanced Network Management</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter24.Desktop Profile Management</td></tr></table></div></body></html>
+</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="AdvancedNetworkManagement.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ProfileMgmt.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter22.Advanced Network Management</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter24.Desktop Profile Management</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/Portability.html b/docs/htmldocs/Portability.html
index f40d0dcd11f..50d14207d09 100644
--- a/docs/htmldocs/Portability.html
+++ b/docs/htmldocs/Portability.html
@@ -1,7 +1,6 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter37.Portability</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="compiling.html" title="Chapter36.How to compile SAMBA"><link rel="next" href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter37.Portability</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="compiling.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Other-Clients.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Portability"></a>Chapter37.Portability</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Portability.html#id3012634">HPUX</a></dt><dt><a href="Portability.html#id3012719">SCO Unix</a></dt><dt><a href="Portability.html#id3012747">DNIX</a></dt><dt><a href="Portability.html#id3012917">RedHat Linux Rembrandt-II</a></dt><dt><a href="Portability.html#id3012960">AIX</a></dt><dd><dl><dt><a href="Portability.html#id3012967">Sequential Read Ahead</a></dt></dl></dd><dt><a href="Portability.html#id3012993">Solaris</a></dt><dd><dl><dt><a href="Portability.html#id3013000">Locking improvements</a></dt><dt><a href="Portability.html#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></div><p>Samba works on a wide range of platforms but the interface all the
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter37.Portability</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="compiling.html" title="Chapter36.How to compile Samba"><link rel="next" href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter37.Portability</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="compiling.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Other-Clients.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Portability"></a>Chapter37.Portability</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="Portability.html#id2962662">HPUX</a></dt><dt><a href="Portability.html#id2962750">SCO UNIX</a></dt><dt><a href="Portability.html#id2962780">DNIX</a></dt><dt><a href="Portability.html#id2962953">RedHat Linux Rembrandt-II</a></dt><dt><a href="Portability.html#id2962995">AIX</a></dt><dd><dl><dt><a href="Portability.html#id2963002">Sequential Read Ahead</a></dt></dl></dd><dt><a href="Portability.html#id2963029">Solaris</a></dt><dd><dl><dt><a href="Portability.html#id2963036">Locking improvements</a></dt><dt><a href="Portability.html#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></div><p>Samba works on a wide range of platforms but the interface all the
platforms provide is not always compatible. This chapter contains
-platform-specific information about compiling and using samba.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012634"></a>HPUX</h2></div></div><div></div></div><p>
+platform-specific information about compiling and using samba.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962662"></a>HPUX</h2></div></div><div></div></div><p>
HP's implementation of supplementary groups is, er, non-standard (for
hysterical reasons). There are two group files, <tt class="filename">/etc/group</tt> and
<tt class="filename">/etc/logingroup</tt>; the system maps UIDs to numbers using the former, but
@@ -21,15 +20,15 @@ allowed range.
On HPUX you must use gcc or the HP ANSI compiler. The free compiler
that comes with HP-UX is not ANSI compliant and cannot compile
Samba.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012719"></a>SCO Unix</h2></div></div><div></div></div><p>
-If you run an old version of SCO Unix then you may need to get important
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962750"></a>SCO UNIX</h2></div></div><div></div></div><p>
+If you run an old version of SCO UNIX then you may need to get important
TCP/IP patches for Samba to work correctly. Without the patch, you may
encounter corrupt data transfers using samba.
</p><p>
The patch you need is UOD385 Connection Drivers SLS. It is available from
SCO (<a href="ftp://ftp.sco.com/" target="_top">ftp.sco.com</a>, directory SLS,
files uod385a.Z and uod385a.ltr.Z).
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012747"></a>DNIX</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962780"></a>DNIX</h2></div></div><div></div></div><p>
DNIX has a problem with seteuid() and setegid(). These routines are
needed for Samba to work correctly, but they were left out of the DNIX
C library for some reason.
@@ -74,8 +73,8 @@ _seteuid:
</pre><p>
after creating the above files you then assemble them using
</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>as seteuid.s</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>as setegid.s</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>as seteuid.s</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>as setegid.s</tt></b>
</pre><p>
that should produce the files <tt class="filename">seteuid.o</tt> and
<tt class="filename">setegid.o</tt>
@@ -88,13 +87,13 @@ LIBSM = setegid.o seteuid.o -ln
You should then remove the line:
</p><pre class="programlisting">
#define NO_EID
-</pre><p>from the DNIX section of <tt class="filename">includes.h</tt></p></div><div xmlns:ns102="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012917"></a>RedHat Linux Rembrandt-II</h2></div></div><div></div></div><ns102:p>
+</pre><p>from the DNIX section of <tt class="filename">includes.h</tt></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962953"></a>RedHat Linux Rembrandt-II</h2></div></div><div></div></div><p>
By default RedHat Rembrandt-II during installation adds an
entry to <tt class="filename">/etc/hosts</tt> as follows:
-</ns102:p><pre class="programlisting">
+</p><pre class="programlisting">
127.0.0.1 loopback &quot;hostname&quot;.&quot;domainname&quot;
-</pre><ns102:p>
-</ns102:p><p>
+</pre><p>
+</p><p>
This causes Samba to loop back onto the loopback interface.
The result is that Samba fails to communicate correctly with
the world and therefor may fail to correctly negotiate who
@@ -102,10 +101,10 @@ is the master browse list holder and who is the master browser.
</p><p>
Corrective Action: Delete the entry after the word loopback
in the line starting 127.0.0.1
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012960"></a>AIX</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3012967"></a>Sequential Read Ahead</h3></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962995"></a>AIX</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963002"></a>Sequential Read Ahead</h3></div></div><div></div></div><p>
Disabling Sequential Read Ahead using <b class="userinput"><tt>vmtune -r 0</tt></b> improves
Samba performance significantly.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3012993"></a>Solaris</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3013000"></a>Locking improvements</h3></div></div><div></div></div><p>Some people have been experiencing problems with F_SETLKW64/fcntl
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963029"></a>Solaris</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963036"></a>Locking improvements</h3></div></div><div></div></div><p>Some people have been experiencing problems with F_SETLKW64/fcntl
when running Samba on Solaris. The built in file locking mechanism was
not scalable. Performance would degrade to the point where processes would
get into loops of trying to lock a file. It would try a lock, then fail,
@@ -126,4 +125,4 @@ and rebuild samba.
Nsswitch on Solaris 9 refuses to use the winbind nss module. This behavior
is fixed by Sun in patch 113476-05 which as of March 2003 is not in any
roll-up packages.
-</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="compiling.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="Other-Clients.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter36.How to compile SAMBA</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter38.Samba and other CIFS clients</td></tr></table></div></body></html>
+</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="compiling.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="Other-Clients.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter36.How to compile Samba</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter38.Samba and other CIFS clients</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/ProfileMgmt.html b/docs/htmldocs/ProfileMgmt.html
index 0a2f609bd66..765ae4b0c46 100644
--- a/docs/htmldocs/ProfileMgmt.html
+++ b/docs/htmldocs/ProfileMgmt.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter24.Desktop Profile Management</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="PolicyMgmt.html" title="Chapter23.System and Account Policies"><link rel="next" href="pam.html" title="Chapter25.PAM based Distributed Authentication"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter24.Desktop Profile Management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="PolicyMgmt.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="pam.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ProfileMgmt"></a>Chapter24.Desktop Profile Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ProfileMgmt.html#id2983922">Features and Benefits</a></dt><dt><a href="ProfileMgmt.html#id2983955">Roaming Profiles</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2983996">Samba Configuration for Profile Handling</a></dt><dt><a href="ProfileMgmt.html#id2989358">Windows Client Profile Configuration Information</a></dt><dt><a href="ProfileMgmt.html#id2990295">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="ProfileMgmt.html#id2990360">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2990620">Mandatory profiles</a></dt><dt><a href="ProfileMgmt.html#id2990678">Creating/Managing Group Profiles</a></dt><dt><a href="ProfileMgmt.html#id2990723">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2990743">MS Windows 9x/Me</a></dt><dt><a href="ProfileMgmt.html#id2990891">MS Windows NT4 Workstation</a></dt><dt><a href="ProfileMgmt.html#id2991445">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2991949">Common Errors</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2991962">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="ProfileMgmt.html#id2992025">Can NOT use Roaming Profiles</a></dt><dt><a href="ProfileMgmt.html#id2992243">Changing the default profile</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983922"></a>Features and Benefits</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter24.Desktop Profile Management</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="PolicyMgmt.html" title="Chapter23.System and Account Policies"><link rel="next" href="pam.html" title="Chapter25.PAM based Distributed Authentication"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter24.Desktop Profile Management</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="PolicyMgmt.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="pam.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ProfileMgmt"></a>Chapter24.Desktop Profile Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ProfileMgmt.html#id2945611">Features and Benefits</a></dt><dt><a href="ProfileMgmt.html#id2945646">Roaming Profiles</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2945686">Samba Configuration for Profile Handling</a></dt><dt><a href="ProfileMgmt.html#id2946178">Windows Client Profile Configuration Information</a></dt><dt><a href="ProfileMgmt.html#id2947427">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="ProfileMgmt.html#id2947512">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2947770">Mandatory profiles</a></dt><dt><a href="ProfileMgmt.html#id2947828">Creating/Managing Group Profiles</a></dt><dt><a href="ProfileMgmt.html#id2947873">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2947893">MS Windows 9x/Me</a></dt><dt><a href="ProfileMgmt.html#id2948045">MS Windows NT4 Workstation</a></dt><dt><a href="ProfileMgmt.html#id2948600">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2949100">Common Errors</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2949130">Setting up roaming profiles for just a few user's or group's?</a></dt><dt><a href="ProfileMgmt.html#id2949201">Can NOT use Roaming Profiles</a></dt><dt><a href="ProfileMgmt.html#id2949414">Changing the default profile</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945611"></a>Features and Benefits</h2></div></div><div></div></div><p>
Roaming Profiles are feared by some, hated by a few, loved by many, and a Godsend for
some administrators.
</p><p>
@@ -12,7 +11,7 @@ problem to others. In particular, users of mobile computing tools, where often t
be a sustained network connection, are often better served by purely Local Profiles.
This chapter provides information to help the Samba administrator to deal with those
situations also.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983955"></a>Roaming Profiles</h2></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945646"></a>Roaming Profiles</h2></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
Roaming profiles support is different for Win9x / Me and Windows NT4/200x.
</p></div><p>
Before discussing how to configure roaming profiles, it is useful to see how
@@ -25,23 +24,19 @@ profiles are restricted to being stored in the user's home directory.
</p><p>
Windows NT4/200x clients send a NetSAMLogon RPC request, which contains many fields,
including a separate field for the location of the user's profiles.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2983996"></a>Samba Configuration for Profile Handling</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945686"></a>Samba Configuration for Profile Handling</h3></div></div><div></div></div><p>
This section documents how to configure Samba for MS Windows client profile support.
-</p><div xmlns:ns83="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2984009"></a>NT4/200x User Profiles</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2945699"></a>NT4/200x User Profiles</h4></div></div><div></div></div><p>
To support Windows NT4/200x clients, in the [global] section of smb.conf set the
following (for example):
-</p><ns83:p>
-</ns83:p><pre class="programlisting">
- logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath
-</pre><ns83:p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath</tt></i></td></tr></table><p>
This is typically implemented like:
-</ns83:p><pre class="programlisting">
- logon path = \\%L\Profiles\%u
-</pre><ns83:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon path = \\%L\Profiles\%u</tt></i></td></tr></table><p>
where %L translates to the name of the Samba server and %u translates to the user name
-</ns83:p><p>
+</p><p>
The default for this option is <tt class="filename">\\%N\%U\profile</tt>,
namely <tt class="filename">\\sambaserver\username\profile</tt>.
The <tt class="filename">\\N%\%U</tt> service is created automatically by the [homes] service. If you are using
@@ -52,46 +47,39 @@ semantics of %L and %N, as well as %U and %u.
MS Windows NT/2K clients at times do not disconnect a connection to a server
between logons. It is recommended to NOT use the <i class="parameter"><tt>homes</tt></i>
meta-service name as part of the profile share path.
-</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2984098"></a>Windows 9x / Me User Profiles</h4></div></div><div></div></div><p>
- To support Windows 9x / Me clients, you must use the <i class="parameter"><tt>logon home</tt></i> parameter. Samba has
+</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2945807"></a>Windows 9x / Me User Profiles</h4></div></div><div></div></div><p>
+ To support Windows 9x / Me clients, you must use the <a class="indexterm" name="id2945819"></a><i class="parameter"><tt>logon home</tt></i> parameter. Samba has
now been fixed so that <b class="userinput"><tt>net use /home</tt></b> now works as well, and it, too, relies
on the <b class="command">logon home</b> parameter.
</p><p>
By using the logon home parameter, you are restricted to putting Win9x / Me
profiles in the user's home directory. But wait! There is a trick you
can use. If you set the following in the <i class="parameter"><tt>[global]</tt></i> section of your <tt class="filename">smb.conf</tt> file:
-</p><pre class="programlisting">
- logon home = \\%L\%U\.profiles
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon home = \\%L\%U\.profiles</tt></i></td></tr></table><p>
then your Windows 9x / Me clients will dutifully put their clients in a subdirectory
of your home directory called <tt class="filename">.profiles</tt> (thus making them hidden).
</p><p>
Not only that, but <b class="userinput"><tt>net use /home</tt></b> will also work, because of a feature in
Windows 9x / Me. It removes any directory stuff off the end of the home directory area
and only uses the server and share portion. That is, it looks like you
-specified <tt class="filename">\\%L\%U</tt> for <i class="parameter"><tt>logon home</tt></i>.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2989173"></a>Mixed Windows 9x / Me and Windows NT4/200x User Profiles</h4></div></div><div></div></div><p>
+specified <tt class="filename">\\%L\%U</tt> for <a class="indexterm" name="id2945923"></a><i class="parameter"><tt>logon home</tt></i>.
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2945938"></a>Mixed Windows 9x / Me and Windows NT4/200x User Profiles</h4></div></div><div></div></div><p>
You can support profiles for both Win9X and WinNT clients by setting both the
-<i class="parameter"><tt>logon home</tt></i> and <i class="parameter"><tt>logon path</tt></i> parameters. For example:
-</p><pre class="programlisting">
- logon home = \\%L\%u\.profiles
- logon path = \\%L\profiles\%u
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2989209"></a>Disabling Roaming Profile Support</h4></div></div><div></div></div><p>
+<a class="indexterm" name="id2945951"></a><i class="parameter"><tt>logon home</tt></i> and <a class="indexterm" name="id2945965"></a><i class="parameter"><tt>logon path</tt></i> parameters. For example:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon home = \\%L\%u\.profiles</tt></i></td></tr><tr><td><i class="parameter"><tt>logon path = \\%L\profiles\%u</tt></i></td></tr></table></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946006"></a>Disabling Roaming Profile Support</h4></div></div><div></div></div><p>
A question often asked is &#8220;<span class="quote">How may I enforce use of local profiles?</span>&#8221; or
&#8220;<span class="quote">How do I disable Roaming Profiles?</span>&#8221;
</p><p>
There are three ways of doing this:
-</p><div class="variablelist"><dl><dt><span class="term">In <tt class="filename">smb.conf</tt></span></dt><dd xmlns:ns84=""><ns84:p>
+</p><div class="variablelist"><dl><dt><span class="term">In <tt class="filename">smb.conf</tt></span></dt><dd><p>
Affect the following settings and ALL clients
will be forced to use a local profile:
- </ns84:p><pre class="programlisting">
- logon home =
- logon path =
- </pre><ns84:p>
- </ns84:p></dd><dt><span class="term">MS Windows Registry:</span></dt><dd xmlns:ns85=""><ns85:p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon home</tt></i></td></tr><tr><td><i class="parameter"><tt>logon path</tt></i></td></tr></table><p>
+ </p></dd><dt><span class="term">MS Windows Registry:</span></dt><dd><p>
By using the Microsoft Management Console gpedit.msc to instruct your MS Windows XP machine to use only a local profile. This of course modifies registry settings. The full path to the option is:
- </ns85:p><pre class="programlisting">
+
+ </p><pre class="programlisting">
Local Computer Policy\
Computer Configuration\
Administrative Templates\
@@ -100,8 +88,8 @@ There are three ways of doing this:
Disable: Only Allow Local User Profiles
Disable: Prevent Roaming Profile Change from Propagating to the Server
- </pre><ns85:p>
- </ns85:p></dd><dt><span class="term">Change of Profile Type:</span></dt><dd><p>
+ </pre><p>
+ </p></dd><dt><span class="term">Change of Profile Type:</span></dt><dd><p>
From the start menu right click on the
My Computer icon, select <span class="guimenuitem">Properties</span>, click on the <span class="guilabel">User Profiles</span>
tab, select the profile you wish to change from Roaming type to Local, click <span class="guibutton">Change Type</span>.
@@ -113,15 +101,15 @@ profiles.
The specifics of how to convert a local profile to a roaming profile, or a roaming profile
to a local one vary according to the version of MS Windows you are running. Consult the
Microsoft MS Windows Resource Kit for your version of Windows for specific information.
-</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2989358"></a>Windows Client Profile Configuration Information</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2989366"></a>Windows 9x / Me Profile Setup</h4></div></div><div></div></div><p>
+</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946178"></a>Windows Client Profile Configuration Information</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946186"></a>Windows 9x / Me Profile Setup</h4></div></div><div></div></div><p>
When a user first logs in on Windows 9X, the file user.DAT is created,
as are folders <tt class="filename">Start Menu</tt>, <tt class="filename">Desktop</tt>,
<tt class="filename">Programs</tt> and <tt class="filename">Nethood</tt>.
These directories and their contents will be merged with the local
versions stored in <tt class="filename">c:\windows\profiles\username</tt> on subsequent logins,
taking the most recent from each. You will need to use the <i class="parameter"><tt>[global]</tt></i>
-options <i class="parameter"><tt>preserve case = yes</tt></i>, <i class="parameter"><tt>short preserve case = yes</tt></i> and
-<i class="parameter"><tt>case sensitive = no</tt></i> in order to maintain capital letters in shortcuts
+options <a class="indexterm" name="id2946240"></a><i class="parameter"><tt>preserve case</tt></i> = yes, <a class="indexterm" name="id2946255"></a><i class="parameter"><tt>short preserve case</tt></i> = yes and
+<a class="indexterm" name="id2946269"></a><i class="parameter"><tt>case sensitive</tt></i> = no in order to maintain capital letters in shortcuts
in any of the profile folders.
</p><p>
The user.DAT file contains all the user's preferences. If you wish to
@@ -154,11 +142,11 @@ domain and profiles downloaded from it, if that domain logon server
supports it), user name and user's password.
</p><p>
Once the user has been successfully validated, the Windows 9x / Me machine
-will inform you that <tt class="computeroutput">The user has not logged on before' and asks you
- if you wish to save the user's preferences?</tt> Select <span class="guibutton">yes</span>.
+will inform you that <tt class="computeroutput">The user has not logged on before</tt> and asks you
+<tt class="computeroutput">Do you wish to save the user's preferences?</tt>. Select <span class="guibutton">yes</span>.
</p><p>
Once the Windows 9x / Me client comes up with the desktop, you should be able
-to examine the contents of the directory specified in the <i class="parameter"><tt>logon path</tt></i>
+to examine the contents of the directory specified in the <a class="indexterm" name="id2946457"></a><i class="parameter"><tt>logon path</tt></i>
on the samba server and verify that the <tt class="filename">Desktop</tt>, <tt class="filename">Start Menu</tt>,
<tt class="filename">Programs</tt> and <tt class="filename">Nethood</tt> folders have been created.
</p><p>
@@ -172,14 +160,14 @@ the newest folders and short-cuts from each set.
If you have made the folders / files read-only on the samba server,
then you will get errors from the Windows 9x / Me machine on logon and logout, as
it attempts to merge the local and the remote profile. Basically, if
-you have any errors reported by the Windows 9x / Me machine, check the Unix file
+you have any errors reported by the Windows 9x / Me machine, check the UNIX file
permissions and ownership rights on the profile directory contents,
on the samba server.
</p><p>
If you have problems creating user profiles, you can reset the user's
local desktop cache, as shown below. When this user then next logs in,
they will be told that they are logging in &quot;for the first time&quot;.
-</p><div class="orderedlist"><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
Before deleting the contents of the
directory listed in the ProfilePath (this is likely to be
<tt class="filename">c:\windows\profiles\username)</tt>, ask them if they
@@ -190,7 +178,7 @@ they will be told that they are logging in &quot;for the first time&quot;.
This will have the effect of removing the local (read-only hidden
system file) user.DAT in their profile directory, as well as the
local &quot;desktop&quot;, &quot;nethood&quot;, &quot;start menu&quot; and &quot;programs&quot; folders.
- </p></div><ol type="1"><li><p>
+ </p></div><div class="orderedlist"><ol type="1"><li><p>
instead of logging in under the [user, password, domain] dialog,
press <span class="guibutton">escape</span>.
</p></li><li><p>
@@ -207,7 +195,7 @@ they will be told that they are logging in &quot;for the first time&quot;.
</p></li><li><p>
log off the windows 9x / Me client.
</p></li><li><p>
- check the contents of the profile path (see <i class="parameter"><tt>logon path</tt></i> described
+ check the contents of the profile path (see <a class="indexterm" name="id2946668"></a><i class="parameter"><tt>logon path</tt></i> described
above), and delete the <tt class="filename">user.DAT</tt> or <tt class="filename">user.MAN</tt> file for the user,
making a backup if required.
</p></li></ol></div><p>
@@ -219,14 +207,14 @@ If you have access to an Windows NT4/200x server, then first set up roaming prof
and / or netlogons on the Windows NT4/200x server. Make a packet trace, or examine
the example packet traces provided with Windows NT4/200x server, and see what the
differences are with the equivalent samba trace.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2985567"></a>Windows NT4 Workstation</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946726"></a>Windows NT4 Workstation</h4></div></div><div></div></div><p>
When a user first logs in to a Windows NT Workstation, the profile
NTuser.DAT is created. The profile location can be now specified
-through the <i class="parameter"><tt>logon path</tt></i> parameter.
+through the <a class="indexterm" name="id2946739"></a><i class="parameter"><tt>logon path</tt></i> parameter.
</p><p>
There is a parameter that is now available for use with NT Profiles:
-<i class="parameter"><tt>logon drive</tt></i>. This should be set to <tt class="filename">H:</tt> or any other drive, and
-should be used in conjunction with the new &quot;logon home&quot; parameter.
+<a class="indexterm" name="id2946758"></a><i class="parameter"><tt>logon drive</tt></i>. This should be set to <tt class="filename">H:</tt> or any other drive, and
+should be used in conjunction with the new <a class="indexterm" name="id2946781"></a><i class="parameter"><tt>logon home</tt></i> parameter.
</p><p>
The entry for the NT4 profile is a _directory_ not a file. The NT
help on profiles mentions that a directory is also created with a .PDS
@@ -248,7 +236,7 @@ turns a profile into a mandatory one.
</p><p>
The case of the profile is significant. The file must be called
<tt class="filename">NTuser.DAT</tt> or, for a mandatory profile, <tt class="filename">NTuser.MAN</tt>.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2985724"></a>Windows 2000/XP Professional</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946911"></a>Windows 2000/XP Professional</h4></div></div><div></div></div><p>
You must first convert the profile from a local profile to a domain
profile on the MS Windows workstation as follows:
</p><div class="procedure"><ol type="1"><li><p>
@@ -267,8 +255,7 @@ profile on the MS Windows workstation as follows:
Click on the 'Look in&quot; area that lists the machine name, when you click
here it will open up a selection box. Click on the domain to which the
profile must be accessible.
- </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>You will need to log on if a logon box opens up. Eg: In the connect
- as: <i class="replaceable"><tt>MIDEARTH</tt></i>\root, password: <i class="replaceable"><tt>mypassword</tt></i>.</p></div></li><li><p>
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>You will need to log on if a logon box opens up. Eg: In the connect as: <i class="replaceable"><tt>DOMAIN</tt></i>\root, password: <i class="replaceable"><tt>mypassword</tt></i>.</p></div></li><li><p>
To make the profile capable of being used by anyone select 'Everyone'
</p></li><li><p>
Click <span class="guibutton">OK</span>. The Selection box will close.
@@ -276,12 +263,12 @@ profile on the MS Windows workstation as follows:
Now click on the <span class="guibutton">Ok</span> button to create the profile in the path you
nominated.
</p></li></ol></div><p>
-Done. You now have a profile that can be edited using the samba-3.0.0
+Done. You now have a profile that can be edited using the samba
<b class="command">profiles</b> tool.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Under NT/2K the use of mandatory profiles forces the use of MS Exchange
storage of mail data. That keeps desktop profiles usable.
-</p></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><div class="procedure"><ol type="1"><li><p>
+</p></div><div class="procedure"><p class="title"><b>Procedure24.2.Windows XP Service Pack 1</b></p><ol type="1"><li><p>
This is a security check new to Windows XP (or maybe only
Windows XP service pack 1). It can be disabled via a group policy in
Active Directory. The policy is:</p><p><tt class="filename">Computer Configuration\Administrative Templates\System\User
@@ -298,7 +285,7 @@ On the XP workstation log in with an Administrator account.
</p></li><li><p>Click: <span class="guimenu">Start</span>, <span class="guimenuitem">Run</span></p></li><li><p>Type: <b class="userinput"><tt>mmc</tt></b></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>A Microsoft Management Console should appear.</p></li><li><p>Click: <span class="guimenu">File</span>, <span class="guimenuitem">Add/Remove Snap-in...</span>, <span class="guimenuitem">Add</span></p></li><li><p>Double-Click: <span class="guiicon">Group Policy</span></p></li><li><p>Click: <span class="guibutton">Finish</span>, <span class="guibutton">Close</span></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>In the &quot;Console Root&quot; window:</p></li><li><p>Expand: <span class="guiicon">Local Computer Policy</span>, <span class="guiicon">Computer Configuration</span>,
<span class="guiicon">Administrative Templates</span>, <span class="guiicon">System</span>, <span class="guiicon">User Profiles</span></p></li><li><p>Double-Click: <span class="guilabel">Do not check for user ownership of Roaming Profile Folders</span></p></li><li><p>Select: <span class="guilabel">Enabled</span></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>Close the whole console. You do not need to save the settings (this
refers to the console settings rather than the policies you have
- changed).</p></li><li><p>Reboot</p></li></ol></div></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990295"></a>Sharing Profiles between W9x/Me and NT4/200x/XP workstations</h3></div></div><div></div></div><p>
+ changed).</p></li><li><p>Reboot</p></li></ol></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947427"></a>Sharing Profiles between W9x/Me and NT4/200x/XP workstations</h3></div></div><div></div></div><p>
Sharing of desktop profiles between Windows versions is NOT recommended.
Desktop profiles are an evolving phenomenon and profiles for later versions
of MS Windows clients add features that may interfere with earlier versions
@@ -309,18 +296,18 @@ version resulting in loss of profile information content when that user logs
on again with the newer version of MS Windows.
</p><p>
If you then want to share the same Start Menu / Desktop with W9x/Me, you will
-need to specify a common location for the profiles. The smb.conf parameters
-that need to be common are <i class="parameter"><tt>logon path</tt></i> and
-<i class="parameter"><tt>logon home</tt></i>.
+need to specify a common location for the profiles. The <tt class="filename">smb.conf</tt> parameters
+that need to be common are <a class="indexterm" name="id2947463"></a><i class="parameter"><tt>logon path</tt></i> and
+<a class="indexterm" name="id2947477"></a><i class="parameter"><tt>logon home</tt></i>.
</p><p>
If you have this set up correctly, you will find separate <tt class="filename">user.DAT</tt> and
<tt class="filename">NTuser.DAT</tt> files in the same profile directory.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990360"></a>Profile Migration from Windows NT4/200x Server to Samba</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947512"></a>Profile Migration from Windows NT4/200x Server to Samba</h3></div></div><div></div></div><p>
There is nothing to stop you specifying any path that you like for the
location of users' profiles. Therefore, you could specify that the
profile be stored on a samba server, or any other SMB server, as long as
that SMB server supports encrypted passwords.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990377"></a>Windows NT4 Profile Management Tools</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2947528"></a>Windows NT4 Profile Management Tools</h4></div></div><div></div></div><p>
Unfortunately, the Resource Kit information is specific to the version of MS Windows
NT4/200x. The correct resource kit is required for each platform.
</p><p>
@@ -337,17 +324,13 @@ domain is not a member of a trust relationship with your NT4 PDC.</p></div></li>
<tt class="filename">c:\temp\foobar</tt></p></li><li><p>Click on the button <span class="guibutton">Change</span> in the <span class="guilabel">Permitted to use</span> box.</p></li><li><p>Click on the group 'Everyone' and then click <span class="guibutton">OK</span>. This closes the
'choose user' box.</p></li><li><p>Now click <span class="guibutton">OK</span>.</p></li></ol></div><p>
Follow the above for every profile you need to migrate.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990540"></a>Side bar Notes</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2947698"></a>Side bar Notes</h4></div></div><div></div></div><p>
You should obtain the SID of your NT4 domain. You can use smbpasswd to do
-this. Read the man page.</p><p>
-With Samba-3.0.0 alpha code you can import all you NT4 domain accounts
-using the net samsync method. This way you can retain your profile
-settings as well as all your users.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990562"></a>moveuser.exe</h4></div></div><div></div></div><p>
+this. Read the man page.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2947712"></a>moveuser.exe</h4></div></div><div></div></div><p>
The W2K professional resource kit has moveuser.exe. moveuser.exe changes
the security of a profile from one user to another. This allows the account
domain to change, and/or the user name to change.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990578"></a>Get SID</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2947728"></a>Get SID</h4></div></div><div></div></div><p>
You can identify the SID by using GetSID.exe from the Windows NT Server 4.0
Resource Kit.
</p><p>
@@ -360,7 +343,7 @@ users who have logged on to this computer. (To find the profile information
for the user whose locally cached profile you want to move, find the SID for
the user with the GetSID.exe utility.) Inside of the appropriate user's
subkey, you will see a string value named ProfileImagePath.
-</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990620"></a>Mandatory profiles</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947770"></a>Mandatory profiles</h2></div></div><div></div></div><p>
A Mandatory Profile is a profile that the user does NOT have the ability to overwrite.
During the user's session it may be possible to change the desktop environment, but
as the user logs out all changes made will be lost. If it is desired to NOT allow the
@@ -376,7 +359,7 @@ file in the copied profile and rename it to NTUser.MAN.
</p><p>
For MS Windows 9x / Me it is the <tt class="filename">User.DAT</tt> file that must be renamed to <tt class="filename">User.MAN</tt> to
affect a mandatory profile.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990678"></a>Creating/Managing Group Profiles</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947828"></a>Creating/Managing Group Profiles</h2></div></div><div></div></div><p>
Most organisations are arranged into departments. There is a nice benefit in
this fact since usually most users in a department will require the same desktop
applications and the same desktop layout. MS Windows NT4/200x/XP will allow the
@@ -391,14 +374,14 @@ the now modified profile.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Be careful with group profiles, if the user who is a member of a group also
has a personal profile, then the result will be a fusion (merge) of the two.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990723"></a>Default Profile for Windows Users</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947873"></a>Default Profile for Windows Users</h2></div></div><div></div></div><p>
MS Windows 9x / Me and NT4/200x/XP will use a default profile for any user for whom
a profile does not already exist. Armed with a knowledge of where the default profile
is located on the Windows workstation, and knowing which registry keys affect the path
from which the default profile is created, it is possible to modify the default profile
to one that has been optimised for the site. This has significant administrative
advantages.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990743"></a>MS Windows 9x/Me</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947893"></a>MS Windows 9x/Me</h3></div></div><div></div></div><p>
To enable default per use profiles in Windows 9x / Me you can either use the <span class="application">Windows 98 System
Policy Editor</span> or change the registry directly.
</p><p>
@@ -410,7 +393,7 @@ select <span class="guilabel">User Profiles</span>, click on the enable box. Do
To modify the registry directly, launch the <span class="application">Registry Editor</span> (<b class="command">regedit.exe</b>), select the hive
<tt class="filename">HKEY_LOCAL_MACHINE\Network\Logon</tt>. Now add a DWORD type key with the name
&quot;User Profiles&quot;, to enable user profiles set the value to 1, to disable user profiles set it to 0.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990841"></a>How User Profiles Are Handled in Windows 9x / Me?</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2947996"></a>How User Profiles Are Handled in Windows 9x / Me?</h4></div></div><div></div></div><p>
When a user logs on to a Windows 9x / Me machine, the local profile path,
<tt class="filename">HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ProfileList</tt>, is checked
for an existing entry for that user:
@@ -426,7 +409,7 @@ If a User Profile is not found in either location, the Default User Profile from
machine is used and is copied to a newly created folder for the logged on user. At log off, any
changes that the user made are written to the user's local profile. If the user has a roaming
profile, the changes are written to the user's profile on the server.
-</p></div></div><div xmlns:ns86="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990891"></a>MS Windows NT4 Workstation</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948045"></a>MS Windows NT4 Workstation</h3></div></div><div></div></div><p>
On MS Windows NT4 the default user profile is obtained from the location
<tt class="filename">%SystemRoot%\Profiles</tt> which in a default installation will translate to
<tt class="filename">C:\WinNT\Profiles</tt>. Under this directory on a clean install there will be
@@ -437,7 +420,7 @@ system users. The <tt class="filename">Default User</tt> directory contains menu
customisable per user depending on the profile settings chosen/created.
</p><p>
When a new user first logs onto an MS Windows NT4 machine a new profile is created from:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>All Users settings</td></tr><tr><td>Default User settings (contains the default NTUser.DAT file)</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>All Users settings</p></li><li><p>Default User settings (contains the default NTUser.DAT file)</p></li></ul></div><p>
When a user logs onto an MS Windows NT4 machine that is a member of a Microsoft security domain
the following steps are followed in respect of profile handling:
</p><div class="procedure"><ol type="1"><li><p>
@@ -467,15 +450,15 @@ the following steps are followed in respect of profile handling:
MS Windows NT4 profiles may be <span class="emphasis"><em>Local</em></span> or <span class="emphasis"><em>Roaming</em></span>. A Local profile
will stored in the <tt class="filename">%SystemRoot%\Profiles\%USERNAME%</tt> location. A roaming profile will
also remain stored in the same way, unless the following registry key is created:
-</p><ns86:p>
-</ns86:p><pre class="programlisting">
- HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\
- &quot;DeleteRoamingCache&quot;=dword:00000001
-</pre><ns86:p>
+</p><p>
+</p><pre class="programlisting">
+HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\
+winlogon\&quot;DeleteRoamingCache&quot;=dword:00000001
+</pre><p>
In which case, the local copy (in <tt class="filename">%SystemRoot%\Profiles\%USERNAME%</tt>) will be
deleted on logout.
-</ns86:p><p>
+</p><p>
Under MS Windows NT4 default locations for common resources (like <tt class="filename">My Documents</tt>
may be redirected to a network share by modifying the following registry keys. These changes may be affected
via use of the System Policy Editor (to do so may require that you create your owns template extension
@@ -488,17 +471,17 @@ are controlled by entries on Windows NT4 is:
<tt class="filename">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\</tt>
</p><p>
The above hive key contains a list of automatically managed folders. The default entries are:
-</p><ns86:p>
-</ns86:p><div class="table"><a name="id2991239"></a><p class="title"><b>Table24.1.User Shell Folder registry keys default values</b></p><table summary="User Shell Folder registry keys default values" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu </td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr></tbody></table></div><ns86:p>
-</ns86:p><p>
+</p><p>
+</p><div class="table"><a name="id2948397"></a><p class="title"><b>Table24.1.User Shell Folder registry keys default values</b></p><table summary="User Shell Folder registry keys default values" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu </td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr></tbody></table></div><p>
+</p><p>
The registry key that contains the location of the default profile settings is:
</p><p>
<tt class="filename">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders</tt>
-</p><ns86:p>
+</p><p>
The default entries are:
-</ns86:p><div class="table"><a name="id2991383"></a><p class="title"><b>Table24.2.Defaults of profile settings registry keys</b></p><table summary="Defaults of profile settings registry keys" border="1"><colgroup><col><col></colgroup><tbody><tr><td>Common Desktop</td><td>%SystemRoot%\Profiles\All Users\Desktop</td></tr><tr><td>Common Programs</td><td>%SystemRoot%\Profiles\All Users\Programs</td></tr><tr><td>Common Start Menu</td><td>%SystemRoot%\Profiles\All Users\Start Menu</td></tr><tr><td>Common Startup</td><td>%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup</td></tr></tbody></table></div><ns86:p>
-</ns86:p></div><div xmlns:ns87="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2991445"></a>MS Windows 200x/XP</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="table"><a name="id2948541"></a><p class="title"><b>Table24.2.Defaults of profile settings registry keys</b></p><table summary="Defaults of profile settings registry keys" border="1"><colgroup><col><col></colgroup><tbody><tr><td>Common Desktop</td><td>%SystemRoot%\Profiles\All Users\Desktop</td></tr><tr><td>Common Programs</td><td>%SystemRoot%\Profiles\All Users\Programs</td></tr><tr><td>Common Start Menu</td><td>%SystemRoot%\Profiles\All Users\Start Menu</td></tr><tr><td>Common Startup</td><td>%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup</td></tr></tbody></table></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948600"></a>MS Windows 200x/XP</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
MS Windows XP Home Edition does use default per user profiles, but can not participate
in domain security, can not log onto an NT/ADS style domain, and thus can obtain the profile
only from itself. While there are benefits in doing this the beauty of those MS Windows
@@ -546,9 +529,9 @@ are controlled by entries on Windows 200x/XP is:
<tt class="filename">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\</tt>
</p><p>
The above hive key contains a list of automatically managed folders. The default entries are:
-</p><ns87:p>
-</ns87:p><div class="table"><a name="id2991638"></a><p class="title"><b>Table24.3.Defaults of default user profile paths registry keys</b></p><table summary="Defaults of default user profile paths registry keys" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Cache</td><td>%USERPROFILE%\Local Settings\Temporary Internet Files</td></tr><tr><td>Cookies</td><td>%USERPROFILE%\Cookies</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>History</td><td>%USERPROFILE%\Local Settings\History</td></tr><tr><td>Local AppData</td><td>%USERPROFILE%\Local Settings\Application Data</td></tr><tr><td>Local Settings</td><td>%USERPROFILE%\Local Settings</td></tr><tr><td>My Pictures</td><td>%USERPROFILE%\My Documents\My Pictures</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>Personal</td><td>%USERPROFILE%\My Documents</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu</td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr><tr><td>Templates</td><td>%USERPROFILE%\Templates</td></tr></tbody></table></div><ns87:p>
-</ns87:p><p>
+</p><p>
+</p><div class="table"><a name="id2948802"></a><p class="title"><b>Table24.3.Defaults of default user profile paths registry keys</b></p><table summary="Defaults of default user profile paths registry keys" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Cache</td><td>%USERPROFILE%\Local Settings\Temporary Internet Files</td></tr><tr><td>Cookies</td><td>%USERPROFILE%\Cookies</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>History</td><td>%USERPROFILE%\Local Settings\History</td></tr><tr><td>Local AppData</td><td>%USERPROFILE%\Local Settings\Application Data</td></tr><tr><td>Local Settings</td><td>%USERPROFILE%\Local Settings</td></tr><tr><td>My Pictures</td><td>%USERPROFILE%\My Documents\My Pictures</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>Personal</td><td>%USERPROFILE%\My Documents</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu</td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr><tr><td>Templates</td><td>%USERPROFILE%\Templates</td></tr></tbody></table></div><p>
+</p><p>
There is also an entry called &quot;Default&quot; that has no value set. The default entry is of type <tt class="constant">REG_SZ</tt>, all
the others are of type <tt class="constant">REG_EXPAND_SZ</tt>.
</p><p>
@@ -563,18 +546,21 @@ You could also use:
</p><p><tt class="filename">\\<i class="replaceable"><tt>SambaServer</tt></i>\<i class="replaceable"><tt>FolderShare</tt></i>\%USERNAME%</tt></p><p>
in which case the default folders will be stored in the server named <i class="replaceable"><tt>SambaServer</tt></i>
in the share called <i class="replaceable"><tt>FolderShare</tt></i> under a directory that has the name of the MS Windows
-user as seen by the Linux/Unix file system.
+user as seen by the Linux/UNIX file system.
</p><p>
Please note that once you have created a default profile share, you MUST migrate a user's profile
(default or custom) to it.
</p><p>
MS Windows 200x/XP profiles may be <span class="emphasis"><em>Local</em></span> or <span class="emphasis"><em>Roaming</em></span>.
A roaming profile will be cached locally unless the following registry key is created:
-</p><p><tt class="filename">HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\&quot;DeleteRoamingCache&quot;=dword:00000001</tt></p><p>
+</p><p>
+</p><pre class="programlisting">
+HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\
+ winlogon\&quot;DeleteRoamingCache&quot;=dword:00000001</pre><p>
In which case, the local cache copy will be deleted on logout.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2991949"></a>Common Errors</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949100"></a>Common Errors</h2></div></div><div></div></div><p>
The following are some typical errors/problems/questions that have been asked.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2991962"></a>How does one set up roaming profiles for just one (or a few) user/s or group/s?</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949130"></a>Setting up roaming profiles for just a few user's or group's?</h3></div></div><div></div></div><p>
With samba-2.2.x the choice you have is to enable or disable roaming
profiles support. It is a global only setting. The default is to have
roaming profiles and the default path will locate them in the user's home
@@ -586,42 +572,40 @@ those machines on which roaming profile support is NOT wanted it is then
necessary to disable roaming profile handling in the registry of each such
machine.
</p><p>
-With samba-3.0.0 (soon to be released) you can have a global profile
-setting in smb.conf _AND_ you can over-ride this by per-user settings
+With samba-3 you can have a global profile
+setting in <tt class="filename">smb.conf</tt> _AND_ you can over-ride this by per-user settings
using the Domain User Manager (as with MS Windows NT4/ Win 2Kx).
</p><p>
In any case, you can configure only one profile per user. That profile can
be either:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>A profile unique to that user</td></tr><tr><td>A mandatory profile (one the user can not change)</td></tr><tr><td>A group profile (really should be mandatory ie:unchangable)</td></tr></table></div><div xmlns:ns89="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2992025"></a>Can NOT use Roaming Profiles</h3></div></div><div></div></div><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>A profile unique to that user</p></li><li><p>A mandatory profile (one the user can not change)</p></li><li><p>A group profile (really should be mandatory ie:unchangable)</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949201"></a>Can NOT use Roaming Profiles</h3></div></div><div></div></div><p>
+A user requested the following:
&#8220;<span class="quote">
- I dont want Roaming profile to be implemented, I just want to give users
- local profiles only.
-...
- Please help me I am totally lost with this error from past two days I tried
- everything and googled around quite a bit but of no help. Please help me.
-</span>&#8221;</p><ns89:p>
-Your choices are:
-
-
-</ns89:p><div class="variablelist"><dl><dt><span class="term">Local profiles</span></dt><dd><p>
- I know of no registry keys that will allow auto-deletion of LOCAL profiles on log out
- </p></dd><dt><span class="term">Roaming profiles</span></dt><dd xmlns:ns88=""><ns88:p>
- </ns88:p><table class="simplelist" border="0" summary="Simple list"><tr><td>can use auto-delete on logout option</td></tr><tr><td>requires a registry key change on workstation</td></tr></table><ns88:p>
-
- Your choices are:
-
- </ns88:p><div class="variablelist"><dl><dt><span class="term">Personal Roaming profiles</span></dt><dd><p>
- - should be preserved on a central server
- - workstations 'cache' (store) a local copy
- - used in case the profile can not be downloaded
- at next logon
- </p></dd><dt><span class="term">Group profiles</span></dt><dd><p>- loaded from a central place</p></dd><dt><span class="term">Mandatory profiles</span></dt><dd><p>
- - can be personal or group
- - can NOT be changed (except by an administrator
- </p></dd></dl></div><ns88:p>
- </ns88:p></dd></dl></div><ns89:p>
-
-</ns89:p><p>
+I do not want Roaming profiles to be implemented. I want to give users a local profile alone. ...
+Please help me I am totally lost with this error. For the past two days I tried everything, I googled
+around but found no useful pointers. Please help me.
+</span>&#8221;</p><p>
+The choices are:
+</p><div class="variablelist"><dl><dt><span class="term">Local profiles:</span></dt><dd><p>
+ I know of no registry keys that will allow auto-deletion of LOCAL profiles on log out
+ </p></dd><dt><span class="term">Roaming profiles:</span></dt><dd><p>
+ As a user logs onto the network a centrally stored profile is copied to the workstation
+ to form a local profile. This local profile will persist (remain on the workstation disk)
+ unless a registry key is changed that will cause this profile to be automatically deleted
+ on logout.
+ </p></dd></dl></div><p>
+The <span class="emphasis"><em>Roaming Profile</em></span> choices are:
+</p><div class="variablelist"><dl><dt><span class="term">Personal Roaming profiles</span></dt><dd><p>
+ These are typically stored in a profile share on a central (or conveniently located
+ local) server.
+ </p><p>
+ Workstations 'cache' (store) a local copy of the profile. This cached copy is used when
+ the profile can not be downloaded at next logon.
+ </p></dd><dt><span class="term">Group profiles</span></dt><dd><p>These are loaded from a central profile server</p></dd><dt><span class="term">Mandatory profiles</span></dt><dd><p>
+ Mandatory profiles can be created for a user as well as for any group that a user
+ is a member of. Mandatory profiles can NOT be changed by ordinary users. Only the administrator
+ can change or reconfigure a mandatory profile.
+ </p></dd></dl></div><p>
A WinNT4/2K/XP profile can vary in size from 130KB to off the scale.
Outlook PST files are most often part of the profile and can be many GB in
size. On average (in a well controlled environment) roaming profile size of
@@ -635,47 +619,34 @@ controls of how they can be changed as well as good discipline make up for
a problem free site.
</p><p>
Microsoft's answer to the PST problem is to store all email in an MS
-Exchange Server back-end. But this is another story ...!
-</p><ns89:p>
-So, having LOCAL profiles means:
-
-</ns89:p><table class="simplelist" border="0" summary="Simple list"><tr><td>If lots of users user each machine - lot's of local disk storage needed for local profiles</td></tr><tr><td>Every workstation the user logs into has it's own profile - can be very different from machine to machine</td></tr></table><ns89:p>
-
-On the other hand, having roaming profiles means:
-</ns89:p><table class="simplelist" border="0" summary="Simple list"><tr><td>The network administrator can control EVERY aspect of user profiles</td></tr><tr><td>With the use of mandatory profiles - a drastic reduction in network management overheads</td></tr><tr><td>User unhappiness about not being able to change their profiles soon fades as they get used to being able to work reliably</td></tr></table><ns89:p>
-
-</ns89:p><p>
-I have managed and installed MANY NT/2K networks and have NEVER found one
-where users who move from machine to machine are happy with local
-profiles. In the long run local profiles bite them.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2992243"></a>Changing the default profile</h3></div></div><div></div></div><p>&#8220;<span class="quote">
-When the client tries to logon to the PDC it looks for a profile to download
-where do I put this default profile.
+Exchange Server back-end. This removes the need for a PST file.
+</p><p>
+LOCAL profiles mean:
+</p><div class="itemizedlist"><ul type="disc"><li><p>If each machine is used my many users then much local disk storage is needed for local profiles</p></li><li><p>Every workstation the user logs into has it's own profile, these can be very different from machine to machine</p></li></ul></div><p>
+On the other hand, use of roaming profiles means:
+</p><div class="itemizedlist"><ul type="disc"><li><p>The network administrator can control the desktop environment of all users.</p></li><li><p>Use of mandatory profiles drasitcally reduces network management overheads.</p></li><li><p>In the long run users will be experience fewer problems.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949414"></a>Changing the default profile</h3></div></div><div></div></div><p>
+<span class="emphasis"><em>Question:</em></span>
+&#8220;<span class="quote">
+When the client logs onto the domain controller it searches for a profile to download,
+where do I put this default profile?
</span>&#8221;</p><p>
-Firstly, your samba server need to be configured as a domain controller.
-</p><pre class="programlisting">
- server = user
- os level = 32 (or more)
- domain logons = Yes
-</pre><p>
-Plus you need to have a <i class="parameter"><tt>[netlogon]</tt></i> share that is world readable.
+Firstly, the samba server needs to be configured as a domain controller.
+This can be done by setting in <tt class="filename">smb.conf</tt>:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security = user</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 32 (or more)</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = Yes</tt></i></td></tr></table><p>
+There must be an <i class="parameter"><tt>[netlogon]</tt></i> share that is world readable.
It is a good idea to add a logon script to pre-set printer and
drive connections. There is also a facility for automatically
synchronizing the workstation time clock with that of the logon
server (another good thing to do).
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
To invoke auto-deletion of roaming profile from the local
-workstation cache (disk storage) you need to use the <span class="application">Group Policy Editor</span>
+workstation cache (disk storage) use the <span class="application">Group Policy Editor</span>
to create a file called <tt class="filename">NTConfig.POL</tt> with the appropriate entries. This
file needs to be located in the <i class="parameter"><tt>netlogon</tt></i> share root directory.</p></div><p>
-Oh, of course the windows clients need to be members of the domain.
-Workgroup machines do NOT do network logons - so they never see domain
-profiles.
+Windows clients need to be members of the domain. Workgroup machines do NOT use network logons so
+they do not interoperate with domain profiles.
</p><p>
-Secondly, for roaming profiles you need:
-
- logon path = \\%N\profiles\%U (with some such path)
- logon drive = H: (Z: is the default)
-
- Plus you need a PROFILES share that is world writable.
-</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="PolicyMgmt.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="pam.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter23.System and Account Policies</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter25.PAM based Distributed Authentication</td></tr></table></div></body></html>
+For roaming profiles add to <tt class="filename">smb.conf</tt>:
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon path = \\%N\profiles\%U</tt></i></td></tr><tr><td># Default logon drive is Z:</td></tr><tr><td><i class="parameter"><tt>logon drive = H:</tt></i></td></tr><tr><td># This requires a PROFILES share that is world writable.</td></tr></table><p>
+</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="PolicyMgmt.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="pam.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter23.System and Account Policies</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter25.PAM based Distributed Authentication</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/SWAT.html b/docs/htmldocs/SWAT.html
index f7605ceb4db..30df1ed7783 100644
--- a/docs/htmldocs/SWAT.html
+++ b/docs/htmldocs/SWAT.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter32.SWAT - The Samba Web Administration Tool</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="NT4Migration.html" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC"><link rel="next" href="troubleshooting.html" title="PartV.Troubleshooting"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter32.SWAT - The Samba Web Administration Tool</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="NT4Migration.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="troubleshooting.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SWAT"></a>Chapter32.SWAT - The Samba Web Administration Tool</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="SWAT.html#id3002261">Features and Benefits</a></dt><dd><dl><dt><a href="SWAT.html#id3002111">Enabling SWAT for use</a></dt><dt><a href="SWAT.html#id3003000">Securing SWAT through SSL</a></dt><dt><a href="SWAT.html#id3003113">The SWAT Home Page</a></dt><dt><a href="SWAT.html#id3003176">Global Settings</a></dt><dt><a href="SWAT.html#id3003282">Share Settings</a></dt><dt><a href="SWAT.html#id3003346">Printers Settings</a></dt><dt><a href="SWAT.html#id3003411">The SWAT Wizard</a></dt><dt><a href="SWAT.html#id3003459">The Status Page</a></dt><dt><a href="SWAT.html#id3003511">The View Page</a></dt><dt><a href="SWAT.html#id3003534">The Password Change Page</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter32.SWAT - The Samba Web Administration Tool</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="NT4Migration.html" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC"><link rel="next" href="troubleshooting.html" title="PartV.Troubleshooting"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter32.SWAT - The Samba Web Administration Tool</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="NT4Migration.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="troubleshooting.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SWAT"></a>Chapter32.SWAT - The Samba Web Administration Tool</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="SWAT.html#id2957030">Features and Benefits</a></dt><dd><dl><dt><a href="SWAT.html#id2957079">Enabling SWAT for use</a></dt><dt><a href="SWAT.html#id2957316">Securing SWAT through SSL</a></dt><dt><a href="SWAT.html#id2957428">The SWAT Home Page</a></dt><dt><a href="SWAT.html#id2957493">Global Settings</a></dt><dt><a href="SWAT.html#id2957601">Share Settings</a></dt><dt><a href="SWAT.html#id2957665">Printers Settings</a></dt><dt><a href="SWAT.html#id2957730">The SWAT Wizard</a></dt><dt><a href="SWAT.html#id2957777">The Status Page</a></dt><dt><a href="SWAT.html#id2957829">The View Page</a></dt><dt><a href="SWAT.html#id2957853">The Password Change Page</a></dt></dl></dd></dl></div><p>
There are many and varied opinions regarding the usefulness or otherwise of SWAT.
No matter how hard one tries to produce the perfect configuration tool it remains
an object of personal taste. SWAT is a tool that will allow web based configuration
@@ -7,7 +6,7 @@ of samba. It has a wizard that may help to get samba configured quickly, it has
sensitive help on each smb.conf parameter, it provides for monitoring of current state
of connection information, and it allows network wide MS Windows network password
management.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3002261"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957030"></a>Features and Benefits</h2></div></div><div></div></div><p>
There are network administrators who believe that it is a good idea to write systems
documentation inside configuration files, for them SWAT will aways be a nasty tool. SWAT
does not store the configuration file in any intermediate form, rather, it stores only the
@@ -19,9 +18,9 @@ internal ordering.
So before using SWAT please be warned - SWAT will completely replace your smb.conf with
a fully optimised file that has been stripped of all comments you might have placed there
and only non-default settings will be written to the file.
-</p></div><div xmlns:ns96="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3002111"></a>Enabling SWAT for use</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957079"></a>Enabling SWAT for use</h3></div></div><div></div></div><p>
SWAT should be installed to run via the network super daemon. Depending on which system
-your Unix/Linux system has you will have either an <b class="command">inetd</b> or
+your UNIX/Linux system has you will have either an <b class="command">inetd</b> or
<b class="command">xinetd</b> based system.
</p><p>
The nature and location of the network super-daemon varies with the operating system
@@ -35,8 +34,8 @@ The control entry for the older style file might be:
swat stream tcp nowait.400 root /usr/sbin/swat swat
</pre><p>
A control file for the newer style xinetd could be:
-</p><ns96:p>
-</ns96:p><pre class="programlisting">
+</p><p>
+</p><pre class="programlisting">
# default: off
# description: SWAT is the Samba Web Admin Tool. Use swat \
# to configure your Samba server. To use SWAT, \
@@ -52,9 +51,9 @@ A control file for the newer style xinetd could be:
log_on_failure += USERID
disable = yes
}
-</pre><ns96:p>
+</pre><p>
-</ns96:p><p>
+</p><p>
Both the above examples assume that the <b class="command">swat</b> binary has been
located in the <tt class="filename">/usr/sbin</tt> directory. In addition to the above
SWAT will use a directory access point from which it will load it's help files
@@ -73,32 +72,32 @@ So long as you log onto SWAT as the user <span class="emphasis"><em>root</em></s
full change and commit ability. The buttons that will be exposed includes:
<span class="guibutton">HOME</span>, <span class="guibutton">GLOBALS</span>, <span class="guibutton">SHARES</span>, <span class="guibutton">PRINTERS</span>,
<span class="guibutton">WIZARD</span>, <span class="guibutton">STATUS</span>, <span class="guibutton">VIEW</span>, <span class="guibutton">PASSWORD</span>.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003000"></a>Securing SWAT through SSL</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957316"></a>Securing SWAT through SSL</h3></div></div><div></div></div><p>
Lots of people have asked about how to setup SWAT with SSL to allow for secure remote
administration of Samba. Here is a method that works, courtesy of Markus Krieger
</p><p>
Modifications to the swat setup are as following:
</p><div class="procedure"><ol type="1"><li><p>
install OpenSSL
- </p></li><li xmlns:ns97=""><ns97:p>
+ </p></li><li><p>
generate certificate and private key
- </ns97:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>/usr/bin/openssl req -new -x509 -days 365 -nodes -config \
- /usr/share/doc/packages/stunnel/stunnel.cnf \
+ /usr/share/doc/packages/stunnel/stunnel.cnf \
-out /etc/stunnel/stunnel.pem -keyout /etc/stunnel/stunnel.pem</tt></b>
- </pre></li><li><p>
+</pre></li><li><p>
remove swat-entry from [x]inetd
- </p></li><li xmlns:ns98=""><ns98:p>
+ </p></li><li><p>
start stunnel
- </ns98:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>stunnel -p /etc/stunnel/stunnel.pem -d 901 \
-l /usr/local/samba/bin/swat swat </tt></b>
- </pre></li></ol></div><p>
+</pre></li></ol></div><p>
afterwords simply contact to swat by using the URL <a href="https://myhost:901" target="_top">https://myhost:901</a>, accept the certificate
and the SSL connection is up.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003113"></a>The SWAT Home Page</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957428"></a>The SWAT Home Page</h3></div></div><div></div></div><p>
The SWAT title page provides access to the latest Samba documentation. The manual page for
each samba component is accessible from this page as are the Samba-HOWTO-Collection (this
document) as well as the O'Reilly book &quot;Using Samba&quot;.
@@ -106,15 +105,14 @@ document) as well as the O'Reilly book &quot;Using Samba&quot;.
Administrators who wish to validate their samba configuration may obtain useful information
from the man pages for the diagnostic utilities. These are available from the SWAT home page
also. One diagnostic tool that is NOT mentioned on this page, but that is particularly
-useful is <b class="command">ethereal</b>, available from <a href="http://www.ethereal.com" target="_top">
-http://www.ethereal.com</a>.
+useful is <a href="http://www.ethereal.com/" target="_top"><b class="command">ethereal</b></a>.
</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
SWAT can be configured to run in <span class="emphasis"><em>demo</em></span> mode. This is NOT recommended
as it runs SWAT without authentication and with full administrative ability. ie: Allows
changes to smb.conf as well as general operation with root privileges. The option that
creates this ability is the <tt class="option">-a</tt> flag to swat. <span class="emphasis"><em>Do not use this in any
production environment.</em></span>
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003176"></a>Global Settings</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957493"></a>Global Settings</h3></div></div><div></div></div><p>
The Globals button will expose a page that allows configuration of the global parameters
in smb.conf. There are three levels of exposure of the parameters:
</p><div class="itemizedlist"><ul type="disc"><li><p>
@@ -127,8 +125,8 @@ in smb.conf. There are three levels of exposure of the parameters:
will want to tamper with.
</p></li></ul></div><p>
To switch to other than <span class="emphasis"><em>Basic</em></span> editing ability click on either the
-<span class="emphasis"><em>Advanced</em></span> or the <span class="emphasis"><em>Developer</em></span> dial, then click the
-<span class="guibutton">Commit Changes</span> button.
+<span class="emphasis"><em>Advanced</em></span> or the <span class="emphasis"><em>Developer</em></span> button. You may also
+do this by clicking on the radio button, then click the <span class="guibutton">Commit Changes</span> button.
</p><p>
After making any changes to configuration parameters make sure that you click on the
<span class="guibutton">Commit Changes</span> button before moving to another area otherwise
@@ -136,7 +134,7 @@ your changes will be immediately lost.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
SWAT has context sensitive help. To find out what each parameter is for simply click the
<span class="guibutton">Help</span> link to the left of the configuration parameter.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003282"></a>Share Settings</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957601"></a>Share Settings</h3></div></div><div></div></div><p>
To affect a currently configured share, simply click on the pull down button between the
<span class="guibutton">Choose Share</span> and the <span class="guibutton">Delete Share</span> buttons,
select the share you wish to operate on, then to edit the settings click on the
@@ -146,7 +144,7 @@ select the share you wish to operate on, then to edit the settings click on the
To create a new share, next to the button labelled <span class="guibutton">Create Share</span> enter
into the text field the name of the share to be created, then click on the
<span class="guibutton">Create Share</span> button.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003346"></a>Printers Settings</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957665"></a>Printers Settings</h3></div></div><div></div></div><p>
To affect a currently configured printer, simply click on the pull down button between the
<span class="guibutton">Choose Printer</span> and the <span class="guibutton">Delete Printer</span> buttons,
select the printer you wish to operate on, then to edit the settings click on the
@@ -156,7 +154,7 @@ select the printer you wish to operate on, then to edit the settings click on th
To create a new printer, next to the button labelled <span class="guibutton">Create Printer</span> enter
into the text field the name of the share to be created, then click on the
<span class="guibutton">Create Printer</span> button.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003411"></a>The SWAT Wizard</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957730"></a>The SWAT Wizard</h3></div></div><div></div></div><p>
The purpose if the SWAT Wizard is to help the Microsoft knowledgeable network administrator
to configure Samba with a minimum of effort.
</p><p>
@@ -172,7 +170,7 @@ Finally, there are a limited set of options that will determine what type of ser
will be configured for, whether it will be a WINS server, participate as a WINS client, or
operate with no WINS support. By clicking on one button you can elect to expose (or not) user
home directories.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003459"></a>The Status Page</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957777"></a>The Status Page</h3></div></div><div></div></div><p>
The status page serves a limited purpose. Firstly, it allows control of the samba daemons.
The key daemons that create the samba server environment are: <span class="application">smbd</span>, <span class="application">nmbd</span>, <span class="application">winbindd</span>.
</p><p>
@@ -183,11 +181,11 @@ conditions with minimal effort.
</p><p>
Lastly, the Status page may be used to terminate specific smbd client connections in order to
free files that may be locked.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003511"></a>The View Page</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957829"></a>The View Page</h3></div></div><div></div></div><p>
This page allows the administrator to view the optimised <tt class="filename">smb.conf</tt> file and, if you are
particularly masochistic, will permit you also to see all possible global configuration
parameters and their settings.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3003534"></a>The Password Change Page</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957853"></a>The Password Change Page</h3></div></div><div></div></div><p>
The Password Change page is a popular tool. This tool allows the creation, deletion, deactivation
and reactivation of MS Windows networking users on the local machine. Alternatively, you can use
this tool to change a local password for a user account.
@@ -198,4 +196,4 @@ required.
</p><p>
One popular use for this tool is to change user passwords across a range of remote MS Windows
servers.
-</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="NT4Migration.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="migration.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="troubleshooting.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter31.Migration from NT4 PDC to Samba-3 PDC</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">PartV.Troubleshooting</td></tr></table></div></body></html>
+</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="NT4Migration.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="migration.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="troubleshooting.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter31.Migration from NT4 PDC to Samba-3 PDC</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">PartV.Troubleshooting</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/Samba-Developers-Guide.html b/docs/htmldocs/Samba-Developers-Guide.html
index 2edd2b50421..c16b48441b8 100644
--- a/docs/htmldocs/Samba-Developers-Guide.html
+++ b/docs/htmldocs/Samba-Developers-Guide.html
@@ -12,10 +12,7 @@ Please send updates to Jelmer Vernooij.
This documentation is distributed under the GNU General Public License (GPL)
version 2. A copy of the license is included with the Samba source
distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt
-"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-Developers-Guide"></a>SAMBA Developers Guide</h1></div><div><div class="author"><h3 class="author"><span class="surname">SAMBA Team</span></h3></div></div><div><div xmlns:ns1="" class="legalnotice"><ns1:p><b>Attributions.</b>
- </ns1:p><div class="variablelist"><dl><dt><span class="term"><a href="#netbios" title="Chapter1.Definition of NetBIOS Protocol and Name Resolution Modes">Definition of NetBIOS Protocol and Name Resolution Modes</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Luke Leighton</p></li></ul></div></dd><dt><span class="term"><a href="#architecture" title="Chapter2.Samba Architecture">Samba Architecture</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Dan Shearer</p></li></ul></div></dd><dt><span class="term"><a href="#debug" title="Chapter3.The samba DEBUG system">The samba DEBUG system</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Chris Hertel</p></li></ul></div></dd><dt><span class="term"><a href="#CodingSuggestions" title="Chapter4.Coding Suggestions">Coding Suggestions</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Steve French</p></li><li><p>Simo Sorce</p></li><li><p>Andrew Bartlett</p></li><li><p>Tim Potter</p></li><li><p>Martin Pool</p></li></ul></div></dd><dt><span class="term"><a href="#internals" title="Chapter5.Samba Internals">Samba Internals</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>David Chappell &lt;<a href="mailto:David.Chappell@mail.trincoll.edu" target="_top">David.Chappell@mail.trincoll.edu</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#parsing" title="Chapter6.The smb.conf file">The smb.conf file</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Chris Hertel</p></li></ul></div></dd><dt><span class="term"><a href="#unix-smb" title="Chapter7.NetBIOS in a Unix World">NetBIOS in a Unix World</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell</p></li></ul></div></dd><dt><span class="term"><a href="#tracing" title="Chapter8.Tracing samba system calls">Tracing samba system calls</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell</p></li></ul></div></dd><dt><span class="term"><a href="#windows-debug" title="Chapter9.Finding useful information on windows">Finding useful information on windows</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#ntdomain" title="Chapter10.NT Domain RPC's">NT Domain RPC's</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Luke Leighton &lt;<a href="mailto:lkcl@switchboard.net" target="_top">lkcl@switchboard.net</a>&gt;</p></li><li><p>Paul Ashton &lt;<a href="mailto:paul@argo.demon.co.uk" target="_top">paul@argo.demon.co.uk</a>&gt;</p></li><li><p>Duncan Stansfield &lt;<a href="mailto:duncans@sco.com" target="_top">duncans@sco.com</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#printing" title="Chapter11.Samba Printing Internals">Samba Printing Internals</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter</p></li></ul></div></dd><dt><span class="term"><a href="#wins" title="Chapter12.Samba WINS Internals">Samba WINS Internals</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter</p></li></ul></div></dd><dt><span class="term"><a href="#sam" title="Chapter13.The Upcoming SAM System">The Upcoming SAM System</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Bartlett</p></li></ul></div></dd><dt><span class="term"><a href="#pwencrypt" title="Chapter14.LanMan and NT Password Encryption">LanMan and NT Password Encryption</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jeremy Allison &lt;<a href="mailto:samba@samba.org" target="_top">samba@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#modules" title="Chapter15.Modules">Modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#rpc-plugin" title="Chapter16.RPC Pluggable Modules">RPC Pluggable Modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Anthony Liguori &lt;<a href="mailto:aliguor@us.ibm.com" target="_top">aliguor@us.ibm.com</a>&gt;</p></li><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#vfs" title="Chapter17.VFS Modules">VFS Modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Alexander Bokovoy &lt;<a href="mailto:ab@samba.org" target="_top">ab@samba.org</a>&gt;</p></li><li><p>Stefan Metzmacher &lt;<a href="mailto:metze@metzemix.de" target="_top">metze@metzemix.de</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#Packaging" title="Chapter18.Notes to packagers">Notes to packagers</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij</p></li></ul></div></dd><dt><span class="term"><a href="#contributing" title="Chapter19.Contributing code">Contributing code</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div></dd></dl></div><ns1:p>
-
- </ns1:p></div></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p>
+"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-Developers-Guide"></a>SAMBA Developers Guide</h1></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p>
<span class="emphasis"><em>Last Update</em></span> : Fri Jun 6 00:45:54 CEST 2003
</p><p>
This book is a collection of documents that might be useful for
@@ -29,15 +26,15 @@ Please send updates to <a href="mailto:jelmer@samba.org" target="_top">Jelmer Ve
This documentation is distributed under the GNU General Public License (GPL)
version 2. A copy of the license is included with the Samba source
distribution. A copy can be found on-line at <a href="http://www.fsf.org/licenses/gpl.txt" target="_top">http://www.fsf.org/licenses/gpl.txt</a>
-</p></div></div></div><div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="#netbios">Definition of NetBIOS Protocol and Name Resolution Modes</a></dt><dd><dl><dt><a href="#id2800411">NETBIOS</a></dt><dt><a href="#id2800495">BROADCAST NetBIOS</a></dt><dt><a href="#id2800526">NBNS NetBIOS</a></dt></dl></dd><dt>2. <a href="#architecture">Samba Architecture</a></dt><dd><dl><dt><a href="#id2800303">Introduction</a></dt><dt><a href="#id2800352">Multithreading and Samba</a></dt><dt><a href="#id2800390">Threading smbd</a></dt><dt><a href="#id2799517">Threading nmbd</a></dt><dt><a href="#id2799568">nbmd Design</a></dt></dl></dd><dt>3. <a href="#debug">The samba DEBUG system</a></dt><dd><dl><dt><a href="#id2799634">New Output Syntax</a></dt><dt><a href="#id2799757">The DEBUG() Macro</a></dt><dt><a href="#id2799887">The DEBUGADD() Macro</a></dt><dt><a href="#id2799932">The DEBUGLVL() Macro</a></dt><dt><a href="#id2865890">New Functions</a></dt><dd><dl><dt><a href="#id2865897">dbgtext()</a></dt><dt><a href="#id2865916">dbghdr()</a></dt><dt><a href="#id2865940">format_debug_text()</a></dt></dl></dd></dl></dd><dt>4. <a href="#CodingSuggestions">Coding Suggestions</a></dt><dt>5. <a href="#internals">Samba Internals</a></dt><dd><dl><dt><a href="#id2867480">Character Handling</a></dt><dt><a href="#id2867505">The new functions</a></dt><dt><a href="#id2866270">Macros in byteorder.h</a></dt><dd><dl><dt><a href="#id2866283">CVAL(buf,pos)</a></dt><dt><a href="#id2866297">PVAL(buf,pos)</a></dt><dt><a href="#id2866311">SCVAL(buf,pos,val)</a></dt><dt><a href="#id2866324">SVAL(buf,pos)</a></dt><dt><a href="#id2866337">IVAL(buf,pos)</a></dt><dt><a href="#id2866351">SVALS(buf,pos)</a></dt><dt><a href="#id2866365">IVALS(buf,pos)</a></dt><dt><a href="#id2866380">SSVAL(buf,pos,val)</a></dt><dt><a href="#id2866394">SIVAL(buf,pos,val)</a></dt><dt><a href="#id2866408">SSVALS(buf,pos,val)</a></dt><dt><a href="#id2866423">SIVALS(buf,pos,val)</a></dt><dt><a href="#id2866437">RSVAL(buf,pos)</a></dt><dt><a href="#id2867143">RIVAL(buf,pos)</a></dt><dt><a href="#id2867158">RSSVAL(buf,pos,val)</a></dt><dt><a href="#id2867173">RSIVAL(buf,pos,val)</a></dt></dl></dd><dt><a href="#id2867189">LAN Manager Samba API</a></dt><dd><dl><dt><a href="#id2867223">Parameters</a></dt><dt><a href="#id2867374">Return value</a></dt></dl></dd><dt><a href="#id2868058">Code character table</a></dt></dl></dd><dt>6. <a href="#parsing">The smb.conf file</a></dt><dd><dl><dt><a href="#id2868180">Lexical Analysis</a></dt><dd><dl><dt><a href="#id2868265">Handling of Whitespace</a></dt><dt><a href="#id2868320">Handling of Line Continuation</a></dt><dt><a href="#id2868382">Line Continuation Quirks</a></dt></dl></dd><dt><a href="#id2868479">Syntax</a></dt><dd><dl><dt><a href="#id2869330">About params.c</a></dt></dl></dd></dl></dd><dt>7. <a href="#unix-smb">NetBIOS in a Unix World</a></dt><dd><dl><dt><a href="#id2870008">Introduction</a></dt><dt><a href="#id2870030">Usernames</a></dt><dt><a href="#id2870095">File Ownership</a></dt><dt><a href="#id2870131">Passwords</a></dt><dt><a href="#id2869394">Locking</a></dt><dt><a href="#id2869456">Deny Modes</a></dt><dt><a href="#id2869487">Trapdoor UIDs</a></dt><dt><a href="#id2869512">Port numbers</a></dt><dt><a href="#id2869557">Protocol Complexity</a></dt></dl></dd><dt>8. <a href="#tracing">Tracing samba system calls</a></dt><dt>9. <a href="#windows-debug">Finding useful information on windows</a></dt><dd><dl><dt><a href="#id2871834">Netlogon debugging output</a></dt></dl></dd><dt>10. <a href="#ntdomain">NT Domain RPC's</a></dt><dd><dl><dt><a href="#id2870569">Introduction</a></dt><dd><dl><dt><a href="#id2870767">Sources</a></dt><dt><a href="#id2870802">Credits</a></dt></dl></dd><dt><a href="#id2871390">Notes and Structures</a></dt><dd><dl><dt><a href="#id2871397">Notes</a></dt><dt><a href="#id2871472">Enumerations</a></dt><dt><a href="#id2871684">Structures</a></dt></dl></dd><dt><a href="#id2883414">MSRPC over Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2883427">MSRPC Pipes</a></dt><dt><a href="#id2883528">Header</a></dt><dt><a href="#id2884399">Tail</a></dt><dt><a href="#id2884445">RPC Bind / Bind Ack</a></dt><dt><a href="#id2884625">NTLSA Transact Named Pipe</a></dt><dt><a href="#id2884790">LSA Open Policy</a></dt><dt><a href="#id2884916">LSA Query Info Policy</a></dt><dt><a href="#id2885022">LSA Enumerate Trusted Domains</a></dt><dt><a href="#id2885113">LSA Open Secret</a></dt><dt><a href="#id2885223">LSA Close</a></dt><dt><a href="#id2885289">LSA Lookup SIDS</a></dt><dt><a href="#id2885498">LSA Lookup Names</a></dt></dl></dd><dt><a href="#id2885724">NETLOGON rpc Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2885885">LSA Request Challenge</a></dt><dt><a href="#id2886019">LSA Authenticate 2</a></dt><dt><a href="#id2886166">LSA Server Password Set</a></dt><dt><a href="#id2886282">LSA SAM Logon</a></dt><dt><a href="#id2886384">LSA SAM Logoff</a></dt></dl></dd><dt><a href="#id2886476">\\MAILSLOT\NET\NTLOGON</a></dt><dd><dl><dt><a href="#id2886493">Query for PDC</a></dt><dt><a href="#id2886755">SAM Logon</a></dt></dl></dd><dt><a href="#id2887080">SRVSVC Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2887125">Net Share Enum</a></dt><dt><a href="#id2887345">Net Server Get Info</a></dt></dl></dd><dt><a href="#id2887461">Cryptographic side of NT Domain Authentication</a></dt><dd><dl><dt><a href="#id2887469">Definitions</a></dt><dt><a href="#id2887631">Protocol</a></dt><dt><a href="#id2887711">Comments</a></dt></dl></dd><dt><a href="#id2887760">SIDs and RIDs</a></dt><dd><dl><dt><a href="#id2887800">Well-known SIDs</a></dt><dt><a href="#id2888114">Well-known RIDS</a></dt></dl></dd></dl></dd><dt>11. <a href="#printing">Samba Printing Internals</a></dt><dd><dl><dt><a href="#id2889659">Abstract</a></dt><dt><a href="#id2889674">
+</p></div></div></div><div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2865348">Attributions</a></dt><dt>1. <a href="#netbios">Definition of NetBIOS Protocol and Name Resolution Modes</a></dt><dd><dl><dt><a href="#id2797071">NETBIOS</a></dt><dt><a href="#id2797155">BROADCAST NetBIOS</a></dt><dt><a href="#id2797186">NBNS NetBIOS</a></dt></dl></dd><dt>2. <a href="#architecture">Samba Architecture</a></dt><dd><dl><dt><a href="#id2797301">Introduction</a></dt><dt><a href="#id2797354">Multithreading and Samba</a></dt><dt><a href="#id2797393">Threading smbd</a></dt><dt><a href="#id2797467">Threading nmbd</a></dt><dt><a href="#id2797529">nbmd Design</a></dt></dl></dd><dt>3. <a href="#debug">The samba DEBUG system</a></dt><dd><dl><dt><a href="#id2797614">New Output Syntax</a></dt><dt><a href="#id2797749">The DEBUG() Macro</a></dt><dt><a href="#id2799885">The DEBUGADD() Macro</a></dt><dt><a href="#id2799932">The DEBUGLVL() Macro</a></dt><dt><a href="#id2800044">New Functions</a></dt><dd><dl><dt><a href="#id2800051">dbgtext()</a></dt><dt><a href="#id2800071">dbghdr()</a></dt><dt><a href="#id2800094">format_debug_text()</a></dt></dl></dd></dl></dd><dt>4. <a href="#CodingSuggestions">Coding Suggestions</a></dt><dt>5. <a href="#internals">Samba Internals</a></dt><dd><dl><dt><a href="#id2800556">Character Handling</a></dt><dt><a href="#id2800582">The new functions</a></dt><dt><a href="#id2800742">Macros in byteorder.h</a></dt><dd><dl><dt><a href="#id2800755">CVAL(buf,pos)</a></dt><dt><a href="#id2800769">PVAL(buf,pos)</a></dt><dt><a href="#id2800783">SCVAL(buf,pos,val)</a></dt><dt><a href="#id2800795">SVAL(buf,pos)</a></dt><dt><a href="#id2800815">IVAL(buf,pos)</a></dt><dt><a href="#id2800829">SVALS(buf,pos)</a></dt><dt><a href="#id2800844">IVALS(buf,pos)</a></dt><dt><a href="#id2800858">SSVAL(buf,pos,val)</a></dt><dt><a href="#id2800872">SIVAL(buf,pos,val)</a></dt><dt><a href="#id2800887">SSVALS(buf,pos,val)</a></dt><dt><a href="#id2800901">SIVALS(buf,pos,val)</a></dt><dt><a href="#id2800916">RSVAL(buf,pos)</a></dt><dt><a href="#id2800930">RIVAL(buf,pos)</a></dt><dt><a href="#id2800944">RSSVAL(buf,pos,val)</a></dt><dt><a href="#id2866314">RSIVAL(buf,pos,val)</a></dt></dl></dd><dt><a href="#id2866329">LAN Manager Samba API</a></dt><dd><dl><dt><a href="#id2866366">Parameters</a></dt><dt><a href="#id2866517">Return value</a></dt></dl></dd><dt><a href="#id2866617">Code character table</a></dt></dl></dd><dt>6. <a href="#parsing">The smb.conf file</a></dt><dd><dl><dt><a href="#id2866736">Lexical Analysis</a></dt><dd><dl><dt><a href="#id2866826">Handling of Whitespace</a></dt><dt><a href="#id2866883">Handling of Line Continuation</a></dt><dt><a href="#id2866948">Line Continuation Quirks</a></dt></dl></dd><dt><a href="#id2867044">Syntax</a></dt><dd><dl><dt><a href="#id2867117">About params.c</a></dt></dl></dd></dl></dd><dt>7. <a href="#unix-smb">NetBIOS in a Unix World</a></dt><dd><dl><dt><a href="#id2867166">Introduction</a></dt><dt><a href="#id2867191">Usernames</a></dt><dt><a href="#id2867277">File Ownership</a></dt><dt><a href="#id2867326">Passwords</a></dt><dt><a href="#id2867388">Locking</a></dt><dt><a href="#id2867458">Deny Modes</a></dt><dt><a href="#id2867499">Trapdoor UIDs</a></dt><dt><a href="#id2867526">Port numbers</a></dt><dt><a href="#id2867572">Protocol Complexity</a></dt></dl></dd><dt>8. <a href="#tracing">Tracing samba system calls</a></dt><dt>9. <a href="#windows-debug">Finding useful information on windows</a></dt><dd><dl><dt><a href="#id2867998">Netlogon debugging output</a></dt></dl></dd><dt>10. <a href="#ntdomain">NT Domain RPC's</a></dt><dd><dl><dt><a href="#id2868139">Introduction</a></dt><dd><dl><dt><a href="#id2868342">Sources</a></dt><dt><a href="#id2868377">Credits</a></dt></dl></dd><dt><a href="#id2868416">Notes and Structures</a></dt><dd><dl><dt><a href="#id2868423">Notes</a></dt><dt><a href="#id2868506">Enumerations</a></dt><dt><a href="#id2868718">Structures</a></dt></dl></dd><dt><a href="#id2871669">MSRPC over Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2871682">MSRPC Pipes</a></dt><dt><a href="#id2871787">Header</a></dt><dt><a href="#id2872660">Tail</a></dt><dt><a href="#id2872706">RPC Bind / Bind Ack</a></dt><dt><a href="#id2872896">NTLSA Transact Named Pipe</a></dt><dt><a href="#id2873062">LSA Open Policy</a></dt><dt><a href="#id2873187">LSA Query Info Policy</a></dt><dt><a href="#id2873296">LSA Enumerate Trusted Domains</a></dt><dt><a href="#id2873387">LSA Open Secret</a></dt><dt><a href="#id2873498">LSA Close</a></dt><dt><a href="#id2873564">LSA Lookup SIDS</a></dt><dt><a href="#id2873773">LSA Lookup Names</a></dt></dl></dd><dt><a href="#id2873999">NETLOGON rpc Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2874162">LSA Request Challenge</a></dt><dt><a href="#id2874296">LSA Authenticate 2</a></dt><dt><a href="#id2874444">LSA Server Password Set</a></dt><dt><a href="#id2874559">LSA SAM Logon</a></dt><dt><a href="#id2874662">LSA SAM Logoff</a></dt></dl></dd><dt><a href="#id2874755">\\MAILSLOT\NET\NTLOGON</a></dt><dd><dl><dt><a href="#id2874774">Query for PDC</a></dt><dt><a href="#id2875034">SAM Logon</a></dt></dl></dd><dt><a href="#id2875360">SRVSVC Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2875405">Net Share Enum</a></dt><dt><a href="#id2875625">Net Server Get Info</a></dt></dl></dd><dt><a href="#id2875741">Cryptographic side of NT Domain Authentication</a></dt><dd><dl><dt><a href="#id2875749">Definitions</a></dt><dt><a href="#id2875911">Protocol</a></dt><dt><a href="#id2876010">Comments</a></dt></dl></dd><dt><a href="#id2876057">SIDs and RIDs</a></dt><dd><dl><dt><a href="#id2876097">Well-known SIDs</a></dt><dt><a href="#id2876412">Well-known RIDS</a></dt></dl></dd></dl></dd><dt>11. <a href="#printing">Samba Printing Internals</a></dt><dd><dl><dt><a href="#id2876697">Abstract</a></dt><dt><a href="#id2876713">
Printing Interface to Various Back ends
-</a></dt><dt><a href="#id2889766">
+</a></dt><dt><a href="#id2876809">
Print Queue TDB's
-</a></dt><dt><a href="#id2888559">
+</a></dt><dt><a href="#id2877031">
ChangeID and Client Caching of Printer Information
-</a></dt><dt><a href="#id2888572">
+</a></dt><dt><a href="#id2877045">
Windows NT/2K Printer Change Notify
-</a></dt></dl></dd><dt>12. <a href="#wins">Samba WINS Internals</a></dt><dd><dl><dt><a href="#id2889228">WINS Failover</a></dt></dl></dd><dt>13. <a href="#sam">The Upcoming SAM System</a></dt><dd><dl><dt><a href="#id2888904">Security in the 'new SAM'</a></dt><dt><a href="#id2889032">Standalone from UNIX</a></dt><dt><a href="#id2889059">Handles and Races in the new SAM</a></dt><dt><a href="#id2889127">Layers</a></dt><dd><dl><dt><a href="#id2889134">Application</a></dt><dt><a href="#id2889150">SAM Interface</a></dt><dt><a href="#id2889176">SAM Modules</a></dt></dl></dd><dt><a href="#id2889198">SAM Modules</a></dt><dd><dl><dt><a href="#id2889205">Special Module: sam_passdb</a></dt><dt><a href="#id2890449">sam_ads</a></dt></dl></dd><dt><a href="#id2890478">Memory Management</a></dt><dt><a href="#id2890565">Testing</a></dt></dl></dd><dt>14. <a href="#pwencrypt">LanMan and NT Password Encryption</a></dt><dd><dl><dt><a href="#id2891295">Introduction</a></dt><dt><a href="#id2891319">How does it work?</a></dt><dt><a href="#id2891414">The smbpasswd file</a></dt></dl></dd><dt>15. <a href="#modules">Modules</a></dt><dd><dl><dt><a href="#id2893198">Advantages</a></dt><dt><a href="#id2893242">Loading modules</a></dt><dd><dl><dt><a href="#id2893272">Static modules</a></dt><dt><a href="#id2893313">Shared modules</a></dt></dl></dd><dt><a href="#id2893342">Writing modules</a></dt><dd><dl><dt><a href="#id2893402">Static/Shared selection in configure.in</a></dt></dl></dd></dl></dd><dt>16. <a href="#rpc-plugin">RPC Pluggable Modules</a></dt><dd><dl><dt><a href="#id2893560">About</a></dt><dt><a href="#id2893579">General Overview</a></dt></dl></dd><dt>17. <a href="#vfs">VFS Modules</a></dt><dd><dl><dt><a href="#id2895821">The Samba (Posix) VFS layer</a></dt><dd><dl><dt><a href="#id2895828">The general interface</a></dt><dt><a href="#id2895928">Possible VFS operation layers</a></dt></dl></dd><dt><a href="#id2895992">The Interaction between the Samba VFS subsystem and the modules</a></dt><dd><dl><dt><a href="#id2896000">Initialization and registration</a></dt><dt><a href="#id2892061">How the Modules handle per connection data</a></dt></dl></dd><dt><a href="#id2892280">Upgrading to the New VFS Interface</a></dt><dd><dl><dt><a href="#id2893883">Upgrading from 2.2.* and 3.0aplha modules</a></dt></dl></dd><dt><a href="#id2894294">Some Notes</a></dt><dd><dl><dt><a href="#id2894300">Implement TRANSPARENT functions</a></dt><dt><a href="#id2894324">Implement OPAQUE functions</a></dt></dl></dd></dl></dd><dt>18. <a href="#Packaging">Notes to packagers</a></dt><dd><dl><dt><a href="#id2894389">Versioning</a></dt><dt><a href="#id2894418">Modules</a></dt></dl></dd><dt>19. <a href="#contributing">Contributing code</a></dt></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="netbios"></a>Chapter1.Definition of NetBIOS Protocol and Name Resolution Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Luke</span> <span class="surname">Leighton</span></h3></div></div><div><p class="pubdate">12 June 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2800411">NETBIOS</a></dt><dt><a href="#id2800495">BROADCAST NetBIOS</a></dt><dt><a href="#id2800526">NBNS NetBIOS</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800411"></a>NETBIOS</h2></div></div><div></div></div><p>
+</a></dt></dl></dd><dt>12. <a href="#wins">Samba WINS Internals</a></dt><dd><dl><dt><a href="#id2877426">WINS Failover</a></dt></dl></dd><dt>13. <a href="#sam">The Upcoming SAM System</a></dt><dd><dl><dt><a href="#id2877582">Security in the 'new SAM'</a></dt><dt><a href="#id2877712">Standalone from UNIX</a></dt><dt><a href="#id2877739">Handles and Races in the new SAM</a></dt><dt><a href="#id2877808">Layers</a></dt><dd><dl><dt><a href="#id2877815">Application</a></dt><dt><a href="#id2877831">SAM Interface</a></dt><dt><a href="#id2877859">SAM Modules</a></dt></dl></dd><dt><a href="#id2877880">SAM Modules</a></dt><dd><dl><dt><a href="#id2877888">Special Module: sam_passdb</a></dt><dt><a href="#id2877906">sam_ads</a></dt></dl></dd><dt><a href="#id2877935">Memory Management</a></dt><dt><a href="#id2878035">Testing</a></dt></dl></dd><dt>14. <a href="#pwencrypt">LanMan and NT Password Encryption</a></dt><dd><dl><dt><a href="#id2878174">Introduction</a></dt><dt><a href="#id2878193">How does it work?</a></dt><dt><a href="#id2878320">The smbpasswd file</a></dt></dl></dd><dt>15. <a href="#modules">Modules</a></dt><dd><dl><dt><a href="#id2878688">Advantages</a></dt><dt><a href="#id2878737">Loading modules</a></dt><dd><dl><dt><a href="#id2878771">Static modules</a></dt><dt><a href="#id2878811">Shared modules</a></dt></dl></dd><dt><a href="#id2878839">Writing modules</a></dt><dd><dl><dt><a href="#id2878904">Static/Shared selection in configure.in</a></dt></dl></dd></dl></dd><dt>16. <a href="#rpc-plugin">RPC Pluggable Modules</a></dt><dd><dl><dt><a href="#id2879098">About</a></dt><dt><a href="#id2879116">General Overview</a></dt></dl></dd><dt>17. <a href="#vfs">VFS Modules</a></dt><dd><dl><dt><a href="#id2879326">The Samba (Posix) VFS layer</a></dt><dd><dl><dt><a href="#id2879332">The general interface</a></dt><dt><a href="#id2879448">Possible VFS operation layers</a></dt></dl></dd><dt><a href="#id2879520">The Interaction between the Samba VFS subsystem and the modules</a></dt><dd><dl><dt><a href="#id2879528">Initialization and registration</a></dt><dt><a href="#id2879720">How the Modules handle per connection data</a></dt></dl></dd><dt><a href="#id2879963">Upgrading to the New VFS Interface</a></dt><dd><dl><dt><a href="#id2879970">Upgrading from 2.2.* and 3.0aplha modules</a></dt></dl></dd><dt><a href="#id2880501">Some Notes</a></dt><dd><dl><dt><a href="#id2880508">Implement TRANSPARENT functions</a></dt><dt><a href="#id2880533">Implement OPAQUE functions</a></dt></dl></dd></dl></dd><dt>18. <a href="#Packaging">Notes to packagers</a></dt><dd><dl><dt><a href="#id2880600">Versioning</a></dt><dt><a href="#id2880635">Modules</a></dt></dl></dd><dt>19. <a href="#contributing">Contributing code</a></dt></dl></div><div class="preface" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2865348"></a>Attributions</h2></div></div><div></div></div><p><a href="#netbios" title="Chapter1.Definition of NetBIOS Protocol and Name Resolution Modes">Definition of NetBIOS Protocol and Name Resolution Modes</a></p><div class="itemizedlist"><ul type="disc"><li><p>Luke Leighton</p></li></ul></div><p><a href="#architecture" title="Chapter2.Samba Architecture">Samba Architecture</a></p><div class="itemizedlist"><ul type="disc"><li><p>Dan Shearer</p></li></ul></div><p><a href="#debug" title="Chapter3.The samba DEBUG system">The samba DEBUG system</a></p><div class="itemizedlist"><ul type="disc"><li><p>Chris Hertel</p></li></ul></div><p><a href="#CodingSuggestions" title="Chapter4.Coding Suggestions">Coding Suggestions</a></p><div class="itemizedlist"><ul type="disc"><li><p>Steve French</p></li><li><p>Simo Sorce</p></li><li><p>Andrew Bartlett</p></li><li><p>Tim Potter</p></li><li><p>Martin Pool</p></li></ul></div><p><a href="#internals" title="Chapter5.Samba Internals">Samba Internals</a></p><div class="itemizedlist"><ul type="disc"><li><p>David Chappell &lt;<a href="mailto:David.Chappell@mail.trincoll.edu" target="_top">David.Chappell@mail.trincoll.edu</a>&gt;</p></li></ul></div><p><a href="#parsing" title="Chapter6.The smb.conf file">The smb.conf file</a></p><div class="itemizedlist"><ul type="disc"><li><p>Chris Hertel</p></li></ul></div><p><a href="#unix-smb" title="Chapter7.NetBIOS in a Unix World">NetBIOS in a Unix World</a></p><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell</p></li></ul></div><p><a href="#tracing" title="Chapter8.Tracing samba system calls">Tracing samba system calls</a></p><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell</p></li></ul></div><p><a href="#windows-debug" title="Chapter9.Finding useful information on windows">Finding useful information on windows</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li></ul></div><p><a href="#ntdomain" title="Chapter10.NT Domain RPC's">NT Domain RPC's</a></p><div class="itemizedlist"><ul type="disc"><li><p>Luke Leighton &lt;<a href="mailto:lkcl@switchboard.net" target="_top">lkcl@switchboard.net</a>&gt;</p></li><li><p>Paul Ashton &lt;<a href="mailto:paul@argo.demon.co.uk" target="_top">paul@argo.demon.co.uk</a>&gt;</p></li><li><p>Duncan Stansfield &lt;<a href="mailto:duncans@sco.com" target="_top">duncans@sco.com</a>&gt;</p></li></ul></div><p><a href="#printing" title="Chapter11.Samba Printing Internals">Samba Printing Internals</a></p><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter</p></li></ul></div><p><a href="#wins" title="Chapter12.Samba WINS Internals">Samba WINS Internals</a></p><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter</p></li></ul></div><p><a href="#sam" title="Chapter13.The Upcoming SAM System">The Upcoming SAM System</a></p><div class="itemizedlist"><ul type="disc"><li><p>Andrew Bartlett</p></li></ul></div><p><a href="#pwencrypt" title="Chapter14.LanMan and NT Password Encryption">LanMan and NT Password Encryption</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jeremy Allison &lt;<a href="mailto:samba@samba.org" target="_top">samba@samba.org</a>&gt;</p></li></ul></div><p><a href="#modules" title="Chapter15.Modules">Modules</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div><p><a href="#rpc-plugin" title="Chapter16.RPC Pluggable Modules">RPC Pluggable Modules</a></p><div class="itemizedlist"><ul type="disc"><li><p>Anthony Liguori &lt;<a href="mailto:aliguor@us.ibm.com" target="_top">aliguor@us.ibm.com</a>&gt;</p></li><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div><p><a href="#vfs" title="Chapter17.VFS Modules">VFS Modules</a></p><div class="itemizedlist"><ul type="disc"><li><p>Alexander Bokovoy &lt;<a href="mailto:ab@samba.org" target="_top">ab@samba.org</a>&gt;</p></li><li><p>Stefan Metzmacher &lt;<a href="mailto:metze@metzemix.de" target="_top">metze@metzemix.de</a>&gt;</p></li></ul></div><p><a href="#Packaging" title="Chapter18.Notes to packagers">Notes to packagers</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij</p></li></ul></div><p><a href="#contributing" title="Chapter19.Contributing code">Contributing code</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="netbios"></a>Chapter1.Definition of NetBIOS Protocol and Name Resolution Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Luke</span> <span class="surname">Leighton</span></h3></div></div><div><p class="pubdate">12 June 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2797071">NETBIOS</a></dt><dt><a href="#id2797155">BROADCAST NetBIOS</a></dt><dt><a href="#id2797186">NBNS NetBIOS</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797071"></a>NETBIOS</h2></div></div><div></div></div><p>
NetBIOS runs over the following tranports: TCP/IP; NetBEUI and IPX/SPX.
Samba only uses NetBIOS over TCP/IP. For details on the TCP/IP NetBIOS
Session Service NetBIOS Datagram Service, and NetBIOS Names, see
@@ -78,7 +75,7 @@ NetBIOS names are either UNIQUE or GROUP. Only one application can claim a
UNIQUE NetBIOS name on a network.
</p><p>
There are two kinds of NetBIOS Name resolution: Broadcast and Point-to-Point.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800495"></a>BROADCAST NetBIOS</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797155"></a>BROADCAST NetBIOS</h2></div></div><div></div></div><p>
Clients can claim names, and therefore offer services on successfully claimed
names, on their broadcast-isolated subnet. One way to get NetBIOS services
(such as browsing: see ftp.microsoft.com/drg/developr/CIFS/browdiff.txt; and
@@ -90,7 +87,7 @@ find that some of your hosts spend 95 percent of their time dealing with
broadcast traffic. [If you have IPX/SPX on your LAN or WAN, you will find
that this is already happening: a packet analyzer will show, roughly
every twelve minutes, great swathes of broadcast traffic!].
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800526"></a>NBNS NetBIOS</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797186"></a>NBNS NetBIOS</h2></div></div><div></div></div><p>
rfc1001.txt describes, amongst other things, the implementation and use
of, a 'NetBIOS Name Service'. NT/AS offers 'Windows Internet Name Service'
which is fully rfc1001/2 compliant, but has had to take specific action
@@ -131,7 +128,7 @@ WINS Clients therefore claim names from the WINS server. If the WINS
server allows them to register a name, the client's NetBIOS session service
can then offer services on this name. Other WINS clients will then
contact the WINS server to resolve a NetBIOS name.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="architecture"></a>Chapter2.Samba Architecture</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Dan</span> <span class="surname">Shearer</span></h3></div></div><div><p class="pubdate"> November 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2800303">Introduction</a></dt><dt><a href="#id2800352">Multithreading and Samba</a></dt><dt><a href="#id2800390">Threading smbd</a></dt><dt><a href="#id2799517">Threading nmbd</a></dt><dt><a href="#id2799568">nbmd Design</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800303"></a>Introduction</h2></div></div><div></div></div><p>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="architecture"></a>Chapter2.Samba Architecture</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Dan</span> <span class="surname">Shearer</span></h3></div></div><div><p class="pubdate"> November 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2797301">Introduction</a></dt><dt><a href="#id2797354">Multithreading and Samba</a></dt><dt><a href="#id2797393">Threading smbd</a></dt><dt><a href="#id2797467">Threading nmbd</a></dt><dt><a href="#id2797529">nbmd Design</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797301"></a>Introduction</h2></div></div><div></div></div><p>
This document gives a general overview of how Samba works
internally. The Samba Team has tried to come up with a model which is
the best possible compromise between elegance, portability, security
@@ -142,7 +139,7 @@ It also tries to answer some of the frequently asked questions such as:
</p><div class="orderedlist"><ol type="1"><li><p>
Is Samba secure when running on Unix? The xyz platform?
What about the root priveliges issue?
-</p></li><li><p>Pros and cons of multithreading in various parts of Samba</p></li><li><p>Why not have a separate process for name resolution, WINS, and browsing?</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800352"></a>Multithreading and Samba</h2></div></div><div></div></div><p>
+</p></li><li><p>Pros and cons of multithreading in various parts of Samba</p></li><li><p>Why not have a separate process for name resolution, WINS, and browsing?</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797354"></a>Multithreading and Samba</h2></div></div><div></div></div><p>
People sometimes tout threads as a uniformly good thing. They are very
nice in their place but are quite inappropriate for smbd. nmbd is
another matter, and multi-threading it would be very nice.
@@ -159,7 +156,7 @@ smbd multi-threaded. Multi-threading would actually make Samba much
slower, less scalable, less portable and much less robust. The fact
that we use a separate process for each connection is one of Samba's
biggest advantages.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800390"></a>Threading smbd</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797393"></a>Threading smbd</h2></div></div><div></div></div><p>
A few problems that would arise from a threaded smbd are:
</p><div class="orderedlist"><ol type="1"><li><p>
It's not only to create threads instead of processes, but you
@@ -184,7 +181,7 @@ A few problems that would arise from a threaded smbd are:
</p></li><li><p>
we couldn't use the system locking calls as the locking context of
fcntl() is a process, not a thread.
-</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799517"></a>Threading nmbd</h2></div></div><div></div></div><p>
+</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797467"></a>Threading nmbd</h2></div></div><div></div></div><p>
This would be ideal, but gets sunk by portability requirements.
</p><p>
Andrew tried to write a test threads library for nmbd that used only
@@ -211,7 +208,7 @@ packet that arrives. Having a pool of processes is possible but is
nasty to program cleanly due to the enormous amount of shared data (in
complex structures) between the processes. We can't rely on each
platform having a shared memory system.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799568"></a>nbmd Design</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797529"></a>nbmd Design</h2></div></div><div></div></div><p>
Originally Andrew used recursion to simulate a multi-threaded
environment, which use the stack enormously and made for really
confusing debugging sessions. Luke Leighton rewrote it to use a
@@ -232,7 +229,7 @@ keeps the idea of a distinct packet. See &quot;struct packet_struct&quot; in
nameserv.h. It has all the detail but none of the on-the-wire
mess. This makes it ideal for using in disk or memory-based databases
for browsing and WINS support.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="debug"></a>Chapter3.The samba DEBUG system</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Chris</span> <span class="surname">Hertel</span></h3></div></div><div><p class="pubdate">July 1998</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2799634">New Output Syntax</a></dt><dt><a href="#id2799757">The DEBUG() Macro</a></dt><dt><a href="#id2799887">The DEBUGADD() Macro</a></dt><dt><a href="#id2799932">The DEBUGLVL() Macro</a></dt><dt><a href="#id2865890">New Functions</a></dt><dd><dl><dt><a href="#id2865897">dbgtext()</a></dt><dt><a href="#id2865916">dbghdr()</a></dt><dt><a href="#id2865940">format_debug_text()</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799634"></a>New Output Syntax</h2></div></div><div></div></div><p>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="debug"></a>Chapter3.The samba DEBUG system</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Chris</span> <span class="surname">Hertel</span></h3></div></div><div><p class="pubdate">July 1998</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2797614">New Output Syntax</a></dt><dt><a href="#id2797749">The DEBUG() Macro</a></dt><dt><a href="#id2799885">The DEBUGADD() Macro</a></dt><dt><a href="#id2799932">The DEBUGLVL() Macro</a></dt><dt><a href="#id2800044">New Functions</a></dt><dd><dl><dt><a href="#id2800051">dbgtext()</a></dt><dt><a href="#id2800071">dbghdr()</a></dt><dt><a href="#id2800094">format_debug_text()</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797614"></a>New Output Syntax</h2></div></div><div></div></div><p>
The syntax of a debugging log file is represented as:
</p><pre class="programlisting">
&gt;debugfile&lt; :== { &gt;debugmsg&lt; }
@@ -285,7 +282,7 @@ by a newline.
Note that in the above example the function names are not listed on
the header line. That's because the example above was generated on an
SGI Indy, and the SGI compiler doesn't support the __FUNCTION__ macro.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799757"></a>The DEBUG() Macro</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2797749"></a>The DEBUG() Macro</h2></div></div><div></div></div><p>
Use of the DEBUG() macro is unchanged. DEBUG() takes two parameters.
The first is the message level, the second is the body of a function
call to the Debug1() function.
@@ -336,7 +333,7 @@ would look like this:
[1998/07/30 16:00:51, 0] file.c:function(261)
.
</pre><p>Which isn't much use. The format buffer kludge fixes this problem.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799887"></a>The DEBUGADD() Macro</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2799885"></a>The DEBUGADD() Macro</h2></div></div><div></div></div><p>
In addition to the kludgey solution to the broken line problem
described above, there is a clean solution. The DEBUGADD() macro never
generates a header. It will append new text to the current debug
@@ -385,7 +382,7 @@ within the DEBUGLVL() block.
</p></li><li><p>
Processing that is only relevant to debug output can be contained
within the DEBUGLVL() block.
-</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2865890"></a>New Functions</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2865897"></a>dbgtext()</h3></div></div><div></div></div><p>
+</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800044"></a>New Functions</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800051"></a>dbgtext()</h3></div></div><div></div></div><p>
This function prints debug message text to the debug file (and
possibly to syslog) via the format buffer. The function uses a
variable argument list just like printf() or Debug1(). The
@@ -394,7 +391,7 @@ and then passed to format_debug_text().
If you use DEBUGLVL() you will probably print the body of the
message using dbgtext().
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2865916"></a>dbghdr()</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800071"></a>dbghdr()</h3></div></div><div></div></div><p>
This is the function that writes a debug message header.
Headers are not processed via the format buffer. Also note that
if the format buffer is not empty, a call to dbghdr() will not
@@ -402,7 +399,7 @@ produce any output. See the comments in dbghdr() for more info.
</p><p>
It is not likely that this function will be called directly. It
is used by DEBUG() and DEBUGADD().
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2865940"></a>format_debug_text()</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800094"></a>format_debug_text()</h3></div></div><div></div></div><p>
This is a static function in debug.c. It stores the output text
for the body of the message in a buffer until it encounters a
newline. When the newline character is found, the buffer is
@@ -553,7 +550,7 @@ The suggestions above are simply that, suggestions, but the information may
help in reducing the routine rework done on new code. The preceeding list
is expected to change routinely as new support routines and macros are
added.
-</p></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="internals"></a>Chapter5.Samba Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Chappell</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:David.Chappell@mail.trincoll.edu">David.Chappell@mail.trincoll.edu</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">8 May 1996</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2867480">Character Handling</a></dt><dt><a href="#id2867505">The new functions</a></dt><dt><a href="#id2866270">Macros in byteorder.h</a></dt><dd><dl><dt><a href="#id2866283">CVAL(buf,pos)</a></dt><dt><a href="#id2866297">PVAL(buf,pos)</a></dt><dt><a href="#id2866311">SCVAL(buf,pos,val)</a></dt><dt><a href="#id2866324">SVAL(buf,pos)</a></dt><dt><a href="#id2866337">IVAL(buf,pos)</a></dt><dt><a href="#id2866351">SVALS(buf,pos)</a></dt><dt><a href="#id2866365">IVALS(buf,pos)</a></dt><dt><a href="#id2866380">SSVAL(buf,pos,val)</a></dt><dt><a href="#id2866394">SIVAL(buf,pos,val)</a></dt><dt><a href="#id2866408">SSVALS(buf,pos,val)</a></dt><dt><a href="#id2866423">SIVALS(buf,pos,val)</a></dt><dt><a href="#id2866437">RSVAL(buf,pos)</a></dt><dt><a href="#id2867143">RIVAL(buf,pos)</a></dt><dt><a href="#id2867158">RSSVAL(buf,pos,val)</a></dt><dt><a href="#id2867173">RSIVAL(buf,pos,val)</a></dt></dl></dd><dt><a href="#id2867189">LAN Manager Samba API</a></dt><dd><dl><dt><a href="#id2867223">Parameters</a></dt><dt><a href="#id2867374">Return value</a></dt></dl></dd><dt><a href="#id2868058">Code character table</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867480"></a>Character Handling</h2></div></div><div></div></div><p>
+</p></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="internals"></a>Chapter5.Samba Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Chappell</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:David.Chappell@mail.trincoll.edu">David.Chappell@mail.trincoll.edu</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">8 May 1996</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2800556">Character Handling</a></dt><dt><a href="#id2800582">The new functions</a></dt><dt><a href="#id2800742">Macros in byteorder.h</a></dt><dd><dl><dt><a href="#id2800755">CVAL(buf,pos)</a></dt><dt><a href="#id2800769">PVAL(buf,pos)</a></dt><dt><a href="#id2800783">SCVAL(buf,pos,val)</a></dt><dt><a href="#id2800795">SVAL(buf,pos)</a></dt><dt><a href="#id2800815">IVAL(buf,pos)</a></dt><dt><a href="#id2800829">SVALS(buf,pos)</a></dt><dt><a href="#id2800844">IVALS(buf,pos)</a></dt><dt><a href="#id2800858">SSVAL(buf,pos,val)</a></dt><dt><a href="#id2800872">SIVAL(buf,pos,val)</a></dt><dt><a href="#id2800887">SSVALS(buf,pos,val)</a></dt><dt><a href="#id2800901">SIVALS(buf,pos,val)</a></dt><dt><a href="#id2800916">RSVAL(buf,pos)</a></dt><dt><a href="#id2800930">RIVAL(buf,pos)</a></dt><dt><a href="#id2800944">RSSVAL(buf,pos,val)</a></dt><dt><a href="#id2866314">RSIVAL(buf,pos,val)</a></dt></dl></dd><dt><a href="#id2866329">LAN Manager Samba API</a></dt><dd><dl><dt><a href="#id2866366">Parameters</a></dt><dt><a href="#id2866517">Return value</a></dt></dl></dd><dt><a href="#id2866617">Code character table</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800556"></a>Character Handling</h2></div></div><div></div></div><p>
This section describes character set handling in Samba, as implemented in
Samba 3.0 and above
</p><p>
@@ -563,7 +560,7 @@ strings to/from DOS codepages. The problem is that there was no way of
telling if a particular char* is in dos codepage or unix
codepage. This led to a nightmare of code that tried to cope with
particular cases without handlingt the general case.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867505"></a>The new functions</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800582"></a>The new functions</h2></div></div><div></div></div><p>
The new system works like this:
</p><div class="orderedlist"><ol type="1"><li><p>
all char* strings inside Samba are &quot;unix&quot; strings. These are
@@ -625,41 +622,41 @@ The new system works like this:
parameters is gone.
</p></li><li><p>
all vfs functions take unix strings. Don't convert when passing to them
-</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866270"></a>Macros in byteorder.h</h2></div></div><div></div></div><p>
+</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800742"></a>Macros in byteorder.h</h2></div></div><div></div></div><p>
This section describes the macros defined in byteorder.h. These macros
are used extensively in the Samba code.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866283"></a>CVAL(buf,pos)</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800755"></a>CVAL(buf,pos)</h3></div></div><div></div></div><p>
returns the byte at offset pos within buffer buf as an unsigned character.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866297"></a>PVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of CVAL(buf,pos) cast to type unsigned integer.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866311"></a>SCVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the byte at offset pos within buffer buf to value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866324"></a>SVAL(buf,pos)</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800769"></a>PVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of CVAL(buf,pos) cast to type unsigned integer.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800783"></a>SCVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the byte at offset pos within buffer buf to value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800795"></a>SVAL(buf,pos)</h3></div></div><div></div></div><p>
returns the value of the unsigned short (16 bit) little-endian integer at
offset pos within buffer buf. An integer of this type is sometimes
refered to as &quot;USHORT&quot;.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866337"></a>IVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned 32 bit little-endian integer at offset
-pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866351"></a>SVALS(buf,pos)</h3></div></div><div></div></div><p>returns the value of the signed short (16 bit) little-endian integer at
-offset pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866365"></a>IVALS(buf,pos)</h3></div></div><div></div></div><p>returns the value of the signed 32 bit little-endian integer at offset pos
-within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866380"></a>SSVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the unsigned short (16 bit) little-endian integer at offset pos within
-buffer buf to value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866394"></a>SIVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the unsigned 32 bit little-endian integer at offset pos within buffer
-buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866408"></a>SSVALS(buf,pos,val)</h3></div></div><div></div></div><p>sets the short (16 bit) signed little-endian integer at offset pos within
-buffer buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866423"></a>SIVALS(buf,pos,val)</h3></div></div><div></div></div><p>sets the signed 32 bit little-endian integer at offset pos withing buffer
-buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866437"></a>RSVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned short (16 bit) big-endian integer at
-offset pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867143"></a>RIVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned 32 bit big-endian integer at offset
-pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867158"></a>RSSVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the value of the unsigned short (16 bit) big-endian integer at
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800815"></a>IVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned 32 bit little-endian integer at offset
+pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800829"></a>SVALS(buf,pos)</h3></div></div><div></div></div><p>returns the value of the signed short (16 bit) little-endian integer at
+offset pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800844"></a>IVALS(buf,pos)</h3></div></div><div></div></div><p>returns the value of the signed 32 bit little-endian integer at offset pos
+within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800858"></a>SSVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the unsigned short (16 bit) little-endian integer at offset pos within
+buffer buf to value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800872"></a>SIVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the unsigned 32 bit little-endian integer at offset pos within buffer
+buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800887"></a>SSVALS(buf,pos,val)</h3></div></div><div></div></div><p>sets the short (16 bit) signed little-endian integer at offset pos within
+buffer buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800901"></a>SIVALS(buf,pos,val)</h3></div></div><div></div></div><p>sets the signed 32 bit little-endian integer at offset pos withing buffer
+buf to the value val.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800916"></a>RSVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned short (16 bit) big-endian integer at
+offset pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800930"></a>RIVAL(buf,pos)</h3></div></div><div></div></div><p>returns the value of the unsigned 32 bit big-endian integer at offset
+pos within buffer buf.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2800944"></a>RSSVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the value of the unsigned short (16 bit) big-endian integer at
offset pos within buffer buf to value val.
-refered to as &quot;USHORT&quot;.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867173"></a>RSIVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the value of the unsigned 32 bit big-endian integer at offset
-pos within buffer buf to value val.</p></div></div><div xmlns:ns2="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867189"></a>LAN Manager Samba API</h2></div></div><div></div></div><p>
+refered to as &quot;USHORT&quot;.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866314"></a>RSIVAL(buf,pos,val)</h3></div></div><div></div></div><p>sets the value of the unsigned 32 bit big-endian integer at offset
+pos within buffer buf to value val.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866329"></a>LAN Manager Samba API</h2></div></div><div></div></div><p>
This section describes the functions need to make a LAN Manager RPC call.
This information had been obtained by examining the Samba code and the LAN
Manager 2.0 API documentation. It should not be considered entirely
reliable.
-</p><ns2:p>
-</ns2:p><pre class="programlisting">
+</p><p>
+</p><pre class="programlisting">
call_api(int prcnt, int drcnt, int mprcnt, int mdrcnt,
char *param, char *data, char **rparam, char **rdata);
-</pre><ns2:p>
-</ns2:p><p>
+</pre><p>
+</p><p>
This function is defined in client.c. It uses an SMB transaction to call a
remote api.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867223"></a>Parameters</h3></div></div><div></div></div><p>The parameters are as follows:</p><div class="orderedlist"><ol type="1"><li><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866366"></a>Parameters</h3></div></div><div></div></div><p>The parameters are as follows:</p><div class="orderedlist"><ol type="1"><li><p>
prcnt: the number of bytes of parameters begin sent.
</p></li><li><p>
drcnt: the number of bytes of data begin sent.
@@ -704,7 +701,7 @@ substructures apply, this string is of zero length.
</p></li></ol></div><p>
The code in client.c always calls call_api() with no data. It is unclear
when a non-zero length data buffer would be sent.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867374"></a>Return value</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866517"></a>Return value</h3></div></div><div></div></div><p>
The returned parameters (pointed to by rparam), in their order of appearance
are:</p><div class="orderedlist"><ol type="1"><li><p>
An unsigned 16 bit integer which contains the API function's return code.
@@ -735,7 +732,7 @@ fix_char_ptr() in client.c can be used for this purpose.
The third parameter (which may be read as &quot;SVAL(rparam,4)&quot;) has something to
do with indicating the amount of data returned or possibly the amount of
data which can be returned if enough buffer space is allowed.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868058"></a>Code character table</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866617"></a>Code character table</h2></div></div><div></div></div><p>
Certain data structures are described by means of ASCIIz strings containing
code characters. These are the code characters:
</p><div class="orderedlist"><ol type="1"><li><p>
@@ -758,7 +755,7 @@ r pointer to returned data buffer???
L length in bytes of returned data buffer???
</p></li><li><p>
h number of bytes of information available???
-</p></li></ol></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="parsing"></a>Chapter6.The smb.conf file</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Chris</span> <span class="surname">Hertel</span></h3></div></div><div><p class="pubdate">November 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2868180">Lexical Analysis</a></dt><dd><dl><dt><a href="#id2868265">Handling of Whitespace</a></dt><dt><a href="#id2868320">Handling of Line Continuation</a></dt><dt><a href="#id2868382">Line Continuation Quirks</a></dt></dl></dd><dt><a href="#id2868479">Syntax</a></dt><dd><dl><dt><a href="#id2869330">About params.c</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868180"></a>Lexical Analysis</h2></div></div><div></div></div><p>
+</p></li></ol></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="parsing"></a>Chapter6.The smb.conf file</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Chris</span> <span class="surname">Hertel</span></h3></div></div><div><p class="pubdate">November 1997</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2866736">Lexical Analysis</a></dt><dd><dl><dt><a href="#id2866826">Handling of Whitespace</a></dt><dt><a href="#id2866883">Handling of Line Continuation</a></dt><dt><a href="#id2866948">Line Continuation Quirks</a></dt></dl></dd><dt><a href="#id2867044">Syntax</a></dt><dd><dl><dt><a href="#id2867117">About params.c</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866736"></a>Lexical Analysis</h2></div></div><div></div></div><p>
Basically, the file is processed on a line by line basis. There are
four types of lines that are recognized by the lexical analyzer
(params.c):
@@ -785,7 +782,7 @@ ignores them. The latter two line types are scanned for
These are the only tokens passed to the parameter loader
(loadparm.c). Parameter names and values are divided from one
another by an equal sign: '='.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868265"></a>Handling of Whitespace</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866826"></a>Handling of Whitespace</h3></div></div><div></div></div><p>
Whitespace is defined as all characters recognized by the isspace()
function (see ctype(3C)) except for the newline character ('\n')
The newline is excluded because it identifies the end of the line.
@@ -800,7 +797,7 @@ the exception of carriage return characters ('\r'), all of which
are removed.
</p></li><li><p>
Leading and trailing whitespace is removed from names and values.
-</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868320"></a>Handling of Line Continuation</h3></div></div><div></div></div><p>
+</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866883"></a>Handling of Line Continuation</h3></div></div><div></div></div><p>
Long section header and parameter lines may be extended across
multiple lines by use of the backslash character ('\\'). Line
continuation is ignored for blank and comment lines.
@@ -823,7 +820,7 @@ line, plus the four preceeding the word 'with' in the second line.
Line continuation characters are ignored on blank lines and at the end
of comments. They are *only* recognized within section and parameter
lines.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868382"></a>Line Continuation Quirks</h3></div></div><div></div></div><p>Note the following example:</p><pre class="programlisting">
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866948"></a>Line Continuation Quirks</h3></div></div><div></div></div><p>Note the following example:</p><pre class="programlisting">
param name = parameter value string \
\
with line continuation.
@@ -847,7 +844,7 @@ terminating character, and the rest of the line is ignored. The lines
</pre><p>are read as</p><pre class="programlisting">
[section name]
param name = value
-</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868479"></a>Syntax</h2></div></div><div></div></div><p>The syntax of the smb.conf file is as follows:</p><pre class="programlisting">
+</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867044"></a>Syntax</h2></div></div><div></div></div><p>The syntax of the smb.conf file is as follows:</p><pre class="programlisting">
&lt;file&gt; :== { &lt;section&gt; } EOF
&lt;section&gt; :== &lt;section header&gt; { &lt;parameter line&gt; }
&lt;section header&gt; :== '[' NAME ']'
@@ -866,12 +863,12 @@ terminating character, and the rest of the line is ignored. The lines
A parameter line is divided into a NAME and a VALUE. The *first*
equal sign on the line separates the NAME from the VALUE. The
VALUE is terminated by a newline character (NL = '\n').
-</p></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869330"></a>About params.c</h3></div></div><div></div></div><p>
+</p></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867117"></a>About params.c</h3></div></div><div></div></div><p>
The parsing of the config file is a bit unusual if you are used to
lex, yacc, bison, etc. Both lexical analysis (scanning) and parsing
are performed by params.c. Values are loaded via callbacks to
loadparm.c.
-</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unix-smb"></a>Chapter7.NetBIOS in a Unix World</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3></div></div><div><p class="pubdate">April 1995</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2870008">Introduction</a></dt><dt><a href="#id2870030">Usernames</a></dt><dt><a href="#id2870095">File Ownership</a></dt><dt><a href="#id2870131">Passwords</a></dt><dt><a href="#id2869394">Locking</a></dt><dt><a href="#id2869456">Deny Modes</a></dt><dt><a href="#id2869487">Trapdoor UIDs</a></dt><dt><a href="#id2869512">Port numbers</a></dt><dt><a href="#id2869557">Protocol Complexity</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870008"></a>Introduction</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unix-smb"></a>Chapter7.NetBIOS in a Unix World</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3></div></div><div><p class="pubdate">April 1995</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2867166">Introduction</a></dt><dt><a href="#id2867191">Usernames</a></dt><dt><a href="#id2867277">File Ownership</a></dt><dt><a href="#id2867326">Passwords</a></dt><dt><a href="#id2867388">Locking</a></dt><dt><a href="#id2867458">Deny Modes</a></dt><dt><a href="#id2867499">Trapdoor UIDs</a></dt><dt><a href="#id2867526">Port numbers</a></dt><dt><a href="#id2867572">Protocol Complexity</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867166"></a>Introduction</h2></div></div><div></div></div><p>
This is a short document that describes some of the issues that
confront a SMB implementation on unix, and how Samba copes with
them. They may help people who are looking at unix&lt;-&gt;PC
@@ -879,7 +876,7 @@ interoperability.
</p><p>
It was written to help out a person who was writing a paper on unix to
PC connectivity.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870030"></a>Usernames</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867191"></a>Usernames</h2></div></div><div></div></div><p>
The SMB protocol has only a loose username concept. Early SMB
protocols (such as CORE and COREPLUS) have no username concept at
all. Even in later protocols clients often attempt operations
@@ -916,7 +913,7 @@ in the vast majority of cases. The methods include username maps, the
service%user syntax, the saving of session setup usernames for later
validation and the derivation of the username from the service name
(either directly or via the user= option).
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870095"></a>File Ownership</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867277"></a>File Ownership</h2></div></div><div></div></div><p>
The commonly used SMB protocols have no way of saying &quot;you can't do
that because you don't own the file&quot;. They have, in fact, no concept
of file ownership at all.
@@ -934,7 +931,7 @@ file time comparisons right.
There are several possible solutions to this problem, including
username mapping, and forcing a specific username for particular
shares.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870131"></a>Passwords</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867326"></a>Passwords</h2></div></div><div></div></div><p>
Many SMB clients uppercase passwords before sending them. I have no
idea why they do this. Interestingly WfWg uppercases the password only
if the server is running a protocol greater than COREPLUS, so
@@ -956,7 +953,7 @@ This means that it is *VERY* important to ensure that the Samba
smbpasswd file containing these password hashes is only readable
by the root user. See the documentation ENCRYPTION.txt for more
details.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869394"></a>Locking</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867388"></a>Locking</h2></div></div><div></div></div><p>
Since samba 2.2, samba supports other types of locking as well. This
section is outdated.
</p><p>
@@ -987,7 +984,7 @@ asking the server to notify it if anyone else tries to do something on
the same file, at which time the client will say if it is willing to
give up its lock. Unix has no simple way of implementing
opportunistic locking, and currently Samba has no support for it.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869456"></a>Deny Modes</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867458"></a>Deny Modes</h2></div></div><div></div></div><p>
When a SMB client opens a file it asks for a particular &quot;deny mode&quot; to
be placed on the file. These modes (DENY_NONE, DENY_READ, DENY_WRITE,
DENY_ALL, DENY_FCB and DENY_DOS) specify what actions should be
@@ -1001,7 +998,7 @@ directory or a shared memory implementation. The lock file method
is clumsy and consumes processing and file resources,
the shared memory implementation is vastly prefered and is turned on
by default for those systems that support it.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869487"></a>Trapdoor UIDs</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867499"></a>Trapdoor UIDs</h2></div></div><div></div></div><p>
A SMB session can run with several uids on the one socket. This
happens when a user connects to two shares with different
usernames. To cope with this the unix server needs to switch uids
@@ -1011,7 +1008,7 @@ a single uid.
</p><p>
Note that you can also get the &quot;trapdoor uid&quot; message for other
reasons. Please see the FAQ for details.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869512"></a>Port numbers</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867526"></a>Port numbers</h2></div></div><div></div></div><p>
There is a convention that clients on sockets use high &quot;unprivilaged&quot;
port numbers (&gt;1000) and connect to servers on low &quot;privilaged&quot; port
numbers. This is enforced in Unix as non-root users can't open a
@@ -1034,7 +1031,7 @@ to any of these OSes unless they are running as root. The answer comes
back, but it goes to port 137 which the unix user can't listen
on. Interestingly WinNT3.1 got this right - it sends node status
responses back to the source port in the request.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869557"></a>Protocol Complexity</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867572"></a>Protocol Complexity</h2></div></div><div></div></div><p>
There are many &quot;protocol levels&quot; in the SMB protocol. It seems that
each time new functionality was added to a Microsoft operating system,
they added the equivalent functions in a new protocol level of the SMB
@@ -1148,7 +1145,7 @@ causes printing to fail with Samba:
The process is trying to first open <tt class="filename">/dev/null</tt> read-write
then read-only. Both fail. This means <tt class="filename">/dev/null</tt> has
incorrect permissions.
-</p></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="windows-debug"></a>Chapter9.Finding useful information on windows</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2871834">Netlogon debugging output</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871834"></a>Netlogon debugging output</h2></div></div><div></div></div><div class="procedure"><ol type="1"><li><p>stop netlogon service on PDC</p></li><li><p>rename original netlogon.dll to netlogon.dll.original</p></li><li><p>copy checked version of netlogon.dll to system32 directory</p></li><li><p>set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\DBFlag to 0x20000004</p></li><li><p>start netlogon service on PDC</p></li></ol></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ntdomain"></a>Chapter10.NT Domain RPC's</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Luke</span> <span class="surname">Leighton</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:lkcl@switchboard.net">lkcl@switchboard.net</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Ashton</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:paul@argo.demon.co.uk">paul@argo.demon.co.uk</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Duncan</span> <span class="surname">Stansfield</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:duncans@sco.com">duncans@sco.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">01 November 97(version 0.0.24)</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2870569">Introduction</a></dt><dd><dl><dt><a href="#id2870767">Sources</a></dt><dt><a href="#id2870802">Credits</a></dt></dl></dd><dt><a href="#id2871390">Notes and Structures</a></dt><dd><dl><dt><a href="#id2871397">Notes</a></dt><dt><a href="#id2871472">Enumerations</a></dt><dt><a href="#id2871684">Structures</a></dt></dl></dd><dt><a href="#id2883414">MSRPC over Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2883427">MSRPC Pipes</a></dt><dt><a href="#id2883528">Header</a></dt><dt><a href="#id2884399">Tail</a></dt><dt><a href="#id2884445">RPC Bind / Bind Ack</a></dt><dt><a href="#id2884625">NTLSA Transact Named Pipe</a></dt><dt><a href="#id2884790">LSA Open Policy</a></dt><dt><a href="#id2884916">LSA Query Info Policy</a></dt><dt><a href="#id2885022">LSA Enumerate Trusted Domains</a></dt><dt><a href="#id2885113">LSA Open Secret</a></dt><dt><a href="#id2885223">LSA Close</a></dt><dt><a href="#id2885289">LSA Lookup SIDS</a></dt><dt><a href="#id2885498">LSA Lookup Names</a></dt></dl></dd><dt><a href="#id2885724">NETLOGON rpc Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2885885">LSA Request Challenge</a></dt><dt><a href="#id2886019">LSA Authenticate 2</a></dt><dt><a href="#id2886166">LSA Server Password Set</a></dt><dt><a href="#id2886282">LSA SAM Logon</a></dt><dt><a href="#id2886384">LSA SAM Logoff</a></dt></dl></dd><dt><a href="#id2886476">\\MAILSLOT\NET\NTLOGON</a></dt><dd><dl><dt><a href="#id2886493">Query for PDC</a></dt><dt><a href="#id2886755">SAM Logon</a></dt></dl></dd><dt><a href="#id2887080">SRVSVC Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2887125">Net Share Enum</a></dt><dt><a href="#id2887345">Net Server Get Info</a></dt></dl></dd><dt><a href="#id2887461">Cryptographic side of NT Domain Authentication</a></dt><dd><dl><dt><a href="#id2887469">Definitions</a></dt><dt><a href="#id2887631">Protocol</a></dt><dt><a href="#id2887711">Comments</a></dt></dl></dd><dt><a href="#id2887760">SIDs and RIDs</a></dt><dd><dl><dt><a href="#id2887800">Well-known SIDs</a></dt><dt><a href="#id2888114">Well-known RIDS</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870569"></a>Introduction</h2></div></div><div></div></div><p>
+</p></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="windows-debug"></a>Chapter9.Finding useful information on windows</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2867998">Netlogon debugging output</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867998"></a>Netlogon debugging output</h2></div></div><div></div></div><div class="procedure"><ol type="1"><li><p>stop netlogon service on PDC</p></li><li><p>rename original netlogon.dll to netlogon.dll.original</p></li><li><p>copy checked version of netlogon.dll to system32 directory</p></li><li><p>set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\DBFlag to 0x20000004</p></li><li><p>start netlogon service on PDC</p></li></ol></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ntdomain"></a>Chapter10.NT Domain RPC's</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Luke</span> <span class="surname">Leighton</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:lkcl@switchboard.net">lkcl@switchboard.net</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Ashton</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:paul@argo.demon.co.uk">paul@argo.demon.co.uk</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Duncan</span> <span class="surname">Stansfield</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:duncans@sco.com">duncans@sco.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">01 November 97(version 0.0.24)</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2868139">Introduction</a></dt><dd><dl><dt><a href="#id2868342">Sources</a></dt><dt><a href="#id2868377">Credits</a></dt></dl></dd><dt><a href="#id2868416">Notes and Structures</a></dt><dd><dl><dt><a href="#id2868423">Notes</a></dt><dt><a href="#id2868506">Enumerations</a></dt><dt><a href="#id2868718">Structures</a></dt></dl></dd><dt><a href="#id2871669">MSRPC over Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2871682">MSRPC Pipes</a></dt><dt><a href="#id2871787">Header</a></dt><dt><a href="#id2872660">Tail</a></dt><dt><a href="#id2872706">RPC Bind / Bind Ack</a></dt><dt><a href="#id2872896">NTLSA Transact Named Pipe</a></dt><dt><a href="#id2873062">LSA Open Policy</a></dt><dt><a href="#id2873187">LSA Query Info Policy</a></dt><dt><a href="#id2873296">LSA Enumerate Trusted Domains</a></dt><dt><a href="#id2873387">LSA Open Secret</a></dt><dt><a href="#id2873498">LSA Close</a></dt><dt><a href="#id2873564">LSA Lookup SIDS</a></dt><dt><a href="#id2873773">LSA Lookup Names</a></dt></dl></dd><dt><a href="#id2873999">NETLOGON rpc Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2874162">LSA Request Challenge</a></dt><dt><a href="#id2874296">LSA Authenticate 2</a></dt><dt><a href="#id2874444">LSA Server Password Set</a></dt><dt><a href="#id2874559">LSA SAM Logon</a></dt><dt><a href="#id2874662">LSA SAM Logoff</a></dt></dl></dd><dt><a href="#id2874755">\\MAILSLOT\NET\NTLOGON</a></dt><dd><dl><dt><a href="#id2874774">Query for PDC</a></dt><dt><a href="#id2875034">SAM Logon</a></dt></dl></dd><dt><a href="#id2875360">SRVSVC Transact Named Pipe</a></dt><dd><dl><dt><a href="#id2875405">Net Share Enum</a></dt><dt><a href="#id2875625">Net Server Get Info</a></dt></dl></dd><dt><a href="#id2875741">Cryptographic side of NT Domain Authentication</a></dt><dd><dl><dt><a href="#id2875749">Definitions</a></dt><dt><a href="#id2875911">Protocol</a></dt><dt><a href="#id2876010">Comments</a></dt></dl></dd><dt><a href="#id2876057">SIDs and RIDs</a></dt><dd><dl><dt><a href="#id2876097">Well-known SIDs</a></dt><dt><a href="#id2876412">Well-known RIDS</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868139"></a>Introduction</h2></div></div><div></div></div><p>
This document contains information to provide an NT workstation with login
services, without the need for an NT server. It is the sgml version of <a href="http://mailhost.cb1.com/~lkcl/cifsntdomain.txt" target="_top">http://mailhost.cb1.com/~lkcl/cifsntdomain.txt</a>, controlled by Luke.
</p><p>
@@ -1194,7 +1191,7 @@ Failure to return this error code will make the workstation report
that it is already a member of the domain.</p></li><li><p>the cryptographic side of the NetrServerPasswordSet command,
which would allow the workstation to change its password. This password is
used to generate the long-term session key. [It is possible to reject this
-command, and keep the default workstation password].</p></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870767"></a>Sources</h3></div></div><div></div></div><table class="simplelist" border="0" summary="Simple list"><tr><td>cket Traces from Netmonitor (Service Pack 1 and above)</td></tr><tr><td>ul Ashton and Luke Leighton's other &quot;NT Domain&quot; doc.</td></tr><tr><td>FS documentation - cifs6.txt</td></tr><tr><td>FS documentation - cifsrap2.txt</td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870802"></a>Credits</h3></div></div><div></div></div><table class="simplelist" border="0" summary="Simple list"><tr><td>Paul Ashton: loads of work with Net Monitor; understanding the NT authentication system; reference implementation of the NT domain support on which this document is originally based.</td></tr><tr><td>Duncan Stansfield: low-level analysis of MSRPC Pipes.</td></tr><tr><td>Linus Nordberg: producing c-code from Paul's crypto spec.</td></tr><tr><td>Windows Sourcer development team</td></tr></table></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871390"></a>Notes and Structures</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871397"></a>Notes</h3></div></div><div></div></div><div class="orderedlist"><ol type="1"><li><p>
+command, and keep the default workstation password].</p></li></ol></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868342"></a>Sources</h3></div></div><div></div></div><table class="simplelist" border="0" summary="Simple list"><tr><td>cket Traces from Netmonitor (Service Pack 1 and above)</td></tr><tr><td>ul Ashton and Luke Leighton's other &quot;NT Domain&quot; doc.</td></tr><tr><td>FS documentation - cifs6.txt</td></tr><tr><td>FS documentation - cifsrap2.txt</td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868377"></a>Credits</h3></div></div><div></div></div><table class="simplelist" border="0" summary="Simple list"><tr><td>Paul Ashton: loads of work with Net Monitor; understanding the NT authentication system; reference implementation of the NT domain support on which this document is originally based.</td></tr><tr><td>Duncan Stansfield: low-level analysis of MSRPC Pipes.</td></tr><tr><td>Linus Nordberg: producing c-code from Paul's crypto spec.</td></tr><tr><td>Windows Sourcer development team</td></tr></table></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868416"></a>Notes and Structures</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868423"></a>Notes</h3></div></div><div></div></div><div class="orderedlist"><ol type="1"><li><p>
In the SMB Transact pipes, some &quot;Structures&quot;, described here, appear to be
4-byte aligned with the SMB header, at their start. Exactly which
&quot;Structures&quot; need aligning is not precisely known or documented.
@@ -1222,15 +1219,15 @@ into or taken out of the SMB data stream. if the count is non-zero, then
the pointer is also non-zero. immediately following the pointer is the
count again, followed by an array of container sub-structures. the count
appears a third time after the last sub-structure.
-</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871472"></a>Enumerations</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871479"></a>MSRPC Header type</h4></div></div><div></div></div><p>command number in the msrpc packet header</p><div class="variablelist"><dl><dt><span class="term">MSRPC_Request:</span></dt><dd><p>0x00</p></dd><dt><span class="term">MSRPC_Response:</span></dt><dd><p>0x02</p></dd><dt><span class="term">MSRPC_Bind:</span></dt><dd><p>0x0B</p></dd><dt><span class="term">MSRPC_BindAck:</span></dt><dd><p>0x0C</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871553"></a>MSRPC Packet info</h4></div></div><div></div></div><p>The meaning of these flags is undocumented</p><div class="variablelist"><dl><dt><span class="term">FirstFrag:</span></dt><dd><p>0x01 </p></dd><dt><span class="term">LastFrag:</span></dt><dd><p>0x02 </p></dd><dt><span class="term">NotaFrag:</span></dt><dd><p>0x04 </p></dd><dt><span class="term">RecRespond:</span></dt><dd><p>0x08 </p></dd><dt><span class="term">NoMultiplex:</span></dt><dd><p>0x10 </p></dd><dt><span class="term">NotForIdemp:</span></dt><dd><p>0x20 </p></dd><dt><span class="term">NotforBcast:</span></dt><dd><p>0x40 </p></dd><dt><span class="term">NoUuid:</span></dt><dd><p>0x80 </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871684"></a>Structures</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871691"></a>VOID *</h4></div></div><div></div></div><p>sizeof VOID* is 32 bits.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871702"></a>char</h4></div></div><div></div></div><p>sizeof char is 8 bits.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871714"></a>UTIME</h4></div></div><div></div></div><p>UTIME is 32 bits, indicating time in seconds since 01jan1970. documented in cifs6.txt (section 3.5 page, page 30).</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871727"></a>NTTIME</h4></div></div><div></div></div><p>NTTIME is 64 bits. documented in cifs6.txt (section 3.5 page, page 30).</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871739"></a>DOM_SID (domain SID structure)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>num of sub-authorities in domain SID</p></dd><dt><span class="term">UINT8</span></dt><dd><p>SID revision number</p></dd><dt><span class="term">UINT8</span></dt><dd><p>num of sub-authorities in domain SID</p></dd><dt><span class="term">UINT8[6]</span></dt><dd><p>6 bytes for domain SID - Identifier Authority.</p></dd><dt><span class="term">UINT16[n_subauths]</span></dt><dd><p>domain SID sub-authorities</p></dd></dl></div><p><span class="emphasis"><em>Note: the domain SID is documented elsewhere.</em></span>
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872096"></a>STR (string)</h4></div></div><div></div></div><p>STR (string) is a char[] : a null-terminated string of ascii characters.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872110"></a>UNIHDR (unicode string header) </h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16</span></dt><dd><p>max length of unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - undocumented.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872166"></a>UNIHDR2 (unicode string header plus buffer pointer)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNIHDR</span></dt><dd><p>unicode string header</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872208"></a>UNISTR (unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16[]</span></dt><dd><p>null-terminated string of unicode characters.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872236"></a>NAME (length-indicated unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16[]</span></dt><dd><p>null-terminated string of unicode characters.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872278"></a>UNISTR2 (aligned unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with the start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>max length of unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16[]</span></dt><dd><p>string of uncode characters</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872364"></a>OBJ_ATTR (object attributes)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0x18 - length (in bytes) including the length field.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - root directory (pointer)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - object name (pointer)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - attributes (undocumented)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - security descriptior (pointer)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - security quality of service</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872457"></a>POL_HND (LSA policy handle)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[20]</span></dt><dd><p>policy handle</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872484"></a>DOM_SID2 (domain SID structure, SIDS stored in unicode)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>5 - SID type</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UNIHDR2</span></dt><dd><p>domain SID unicode string header</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain SID unicode string</p></dd></dl></div><p><span class="emphasis"><em>Note: there is a conflict between the unicode string header and the unicode string itself as to which to use to indicate string length. this will need to be resolved.</em></span></p><p><span class="emphasis"><em>Note: the SID type indicates, for example, an alias; a well-known group etc. this is documented somewhere.</em></span></p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872571"></a>DOM_RID (domain RID structure)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>5 - well-known SID. 1 - user SID (see ShowACLs)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>5 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>domain RID </p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - domain index out of above reference domains</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872640"></a>LOG_INFO (server, account, client structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><p><span class="emphasis"><em>Note: account name is the logon client name from the LSA Request Challenge, with a $ on the end of it, in upper case.</em></span></p><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>account name unicode string</p></dd><dt><span class="term">UINT16</span></dt><dd><p>sec_chan - security channel type</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client machine unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881257"></a>CLNT_SRV (server, client names structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client machine unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881334"></a>CREDS (credentials + time stamp)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>credentials</p></dd><dt><span class="term">UTIME</span></dt><dd><p>time stamp</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881375"></a>CLNT_INFO2 (server, client structure, client credentials)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will beused in subsequent credential checks. the presumed intention is to
- maintain an authenticated request/response trail.</em></span></p><div class="variablelist"><dl><dt><span class="term">CLNT_SRV</span></dt><dd><p>client and server names</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>???? padding, for 4-byte alignment with SMB header.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to client credentials.</p></dd><dt><span class="term">CREDS</span></dt><dd><p>client-calculated credentials + client time</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881457"></a>CLNT_INFO (server, account, client structure, client credentials)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will be used in subsequent credential checks. the presumed intention is to maintain an authenticated request/response trail.</em></span></p><div class="variablelist"><dl><dt><span class="term">LOG_INFO</span></dt><dd><p>logon account info</p></dd><dt><span class="term">CREDS</span></dt><dd><p>client-calculated credentials + client time</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881510"></a>ID_INFO_1 (id info structure, auth level 1)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>ptr_id_info_1</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>domain name unicode header</p></dd><dt><span class="term">UINT32</span></dt><dd><p>param control</p></dd><dt><span class="term">UINT64</span></dt><dd><p>logon ID</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>user name unicode header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>workgroup name unicode header</p></dd><dt><span class="term">char[16]</span></dt><dd><p>arc4 LM OWF Password</p></dd><dt><span class="term">char[16]</span></dt><dd><p>arc4 NT OWF Password</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>domain name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>user name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>workstation name unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881680"></a>SAM_INFO (sam logon/logoff id info structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: presumably, the return credentials is supposedly for the server to verify that the credential chain hasn't been compromised.</em></span></p><div class="variablelist"><dl><dt><span class="term">CLNT_INFO2</span></dt><dd><p>client identification/authentication info</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to return credentials.</p></dd><dt><span class="term">CRED</span></dt><dd><p>return credentials - ignored.</p></dd><dt><span class="term">UINT16</span></dt><dd><p>logon level</p></dd><dt><span class="term">UINT16</span></dt><dd><p>switch value</p></dd></dl></div><pre class="programlisting">
+</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868506"></a>Enumerations</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868513"></a>MSRPC Header type</h4></div></div><div></div></div><p>command number in the msrpc packet header</p><div class="variablelist"><dl><dt><span class="term">MSRPC_Request:</span></dt><dd><p>0x00</p></dd><dt><span class="term">MSRPC_Response:</span></dt><dd><p>0x02</p></dd><dt><span class="term">MSRPC_Bind:</span></dt><dd><p>0x0B</p></dd><dt><span class="term">MSRPC_BindAck:</span></dt><dd><p>0x0C</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868587"></a>MSRPC Packet info</h4></div></div><div></div></div><p>The meaning of these flags is undocumented</p><div class="variablelist"><dl><dt><span class="term">FirstFrag:</span></dt><dd><p>0x01 </p></dd><dt><span class="term">LastFrag:</span></dt><dd><p>0x02 </p></dd><dt><span class="term">NotaFrag:</span></dt><dd><p>0x04 </p></dd><dt><span class="term">RecRespond:</span></dt><dd><p>0x08 </p></dd><dt><span class="term">NoMultiplex:</span></dt><dd><p>0x10 </p></dd><dt><span class="term">NotForIdemp:</span></dt><dd><p>0x20 </p></dd><dt><span class="term">NotforBcast:</span></dt><dd><p>0x40 </p></dd><dt><span class="term">NoUuid:</span></dt><dd><p>0x80 </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868718"></a>Structures</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868725"></a>VOID *</h4></div></div><div></div></div><p>sizeof VOID* is 32 bits.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868737"></a>char</h4></div></div><div></div></div><p>sizeof char is 8 bits.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868748"></a>UTIME</h4></div></div><div></div></div><p>UTIME is 32 bits, indicating time in seconds since 01jan1970. documented in cifs6.txt (section 3.5 page, page 30).</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868761"></a>NTTIME</h4></div></div><div></div></div><p>NTTIME is 64 bits. documented in cifs6.txt (section 3.5 page, page 30).</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868774"></a>DOM_SID (domain SID structure)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>num of sub-authorities in domain SID</p></dd><dt><span class="term">UINT8</span></dt><dd><p>SID revision number</p></dd><dt><span class="term">UINT8</span></dt><dd><p>num of sub-authorities in domain SID</p></dd><dt><span class="term">UINT8[6]</span></dt><dd><p>6 bytes for domain SID - Identifier Authority.</p></dd><dt><span class="term">UINT16[n_subauths]</span></dt><dd><p>domain SID sub-authorities</p></dd></dl></div><p><span class="emphasis"><em>Note: the domain SID is documented elsewhere.</em></span>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868867"></a>STR (string)</h4></div></div><div></div></div><p>STR (string) is a char[] : a null-terminated string of ascii characters.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868880"></a>UNIHDR (unicode string header) </h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16</span></dt><dd><p>max length of unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - undocumented.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868937"></a>UNIHDR2 (unicode string header plus buffer pointer)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNIHDR</span></dt><dd><p>unicode string header</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868979"></a>UNISTR (unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16[]</span></dt><dd><p>null-terminated string of unicode characters.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869007"></a>NAME (length-indicated unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16[]</span></dt><dd><p>null-terminated string of unicode characters.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869049"></a>UNISTR2 (aligned unicode string)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with the start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>max length of unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>length of unicode string</p></dd><dt><span class="term">UINT16[]</span></dt><dd><p>string of uncode characters</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869135"></a>OBJ_ATTR (object attributes)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0x18 - length (in bytes) including the length field.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - root directory (pointer)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - object name (pointer)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - attributes (undocumented)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>0 - security descriptior (pointer)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - security quality of service</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869228"></a>POL_HND (LSA policy handle)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[20]</span></dt><dd><p>policy handle</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869255"></a>DOM_SID2 (domain SID structure, SIDS stored in unicode)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>5 - SID type</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UNIHDR2</span></dt><dd><p>domain SID unicode string header</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain SID unicode string</p></dd></dl></div><p><span class="emphasis"><em>Note: there is a conflict between the unicode string header and the unicode string itself as to which to use to indicate string length. this will need to be resolved.</em></span></p><p><span class="emphasis"><em>Note: the SID type indicates, for example, an alias; a well-known group etc. this is documented somewhere.</em></span></p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869341"></a>DOM_RID (domain RID structure)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>5 - well-known SID. 1 - user SID (see ShowACLs)</p></dd><dt><span class="term">UINT32</span></dt><dd><p>5 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>domain RID </p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - domain index out of above reference domains</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869411"></a>LOG_INFO (server, account, client structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><p><span class="emphasis"><em>Note: account name is the logon client name from the LSA Request Challenge, with a $ on the end of it, in upper case.</em></span></p><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>account name unicode string</p></dd><dt><span class="term">UINT16</span></dt><dd><p>sec_chan - security channel type</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client machine unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869511"></a>CLNT_SRV (server, client names structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client machine unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869588"></a>CREDS (credentials + time stamp)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>credentials</p></dd><dt><span class="term">UTIME</span></dt><dd><p>time stamp</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869629"></a>CLNT_INFO2 (server, client structure, client credentials)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will beused in subsequent credential checks. the presumed intention is to
+ maintain an authenticated request/response trail.</em></span></p><div class="variablelist"><dl><dt><span class="term">CLNT_SRV</span></dt><dd><p>client and server names</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>???? padding, for 4-byte alignment with SMB header.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to client credentials.</p></dd><dt><span class="term">CREDS</span></dt><dd><p>client-calculated credentials + client time</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869711"></a>CLNT_INFO (server, account, client structure, client credentials)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will be used in subsequent credential checks. the presumed intention is to maintain an authenticated request/response trail.</em></span></p><div class="variablelist"><dl><dt><span class="term">LOG_INFO</span></dt><dd><p>logon account info</p></dd><dt><span class="term">CREDS</span></dt><dd><p>client-calculated credentials + client time</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869764"></a>ID_INFO_1 (id info structure, auth level 1)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>ptr_id_info_1</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>domain name unicode header</p></dd><dt><span class="term">UINT32</span></dt><dd><p>param control</p></dd><dt><span class="term">UINT64</span></dt><dd><p>logon ID</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>user name unicode header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>workgroup name unicode header</p></dd><dt><span class="term">char[16]</span></dt><dd><p>arc4 LM OWF Password</p></dd><dt><span class="term">char[16]</span></dt><dd><p>arc4 NT OWF Password</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>domain name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>user name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>workstation name unicode string</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869934"></a>SAM_INFO (sam logon/logoff id info structure)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: presumably, the return credentials is supposedly for the server to verify that the credential chain hasn't been compromised.</em></span></p><div class="variablelist"><dl><dt><span class="term">CLNT_INFO2</span></dt><dd><p>client identification/authentication info</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to return credentials.</p></dd><dt><span class="term">CRED</span></dt><dd><p>return credentials - ignored.</p></dd><dt><span class="term">UINT16</span></dt><dd><p>logon level</p></dd><dt><span class="term">UINT16</span></dt><dd><p>switch value</p></dd></dl></div><pre class="programlisting">
switch (switch_value)
case 1:
{
ID_INFO_1 id_info_1;
}
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881784"></a>GID (group id info)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>group id</p></dd><dt><span class="term">UINT32</span></dt><dd><p>user attributes (only used by NT 3.1 and 3.51)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881822"></a>DOM_REF (domain reference info)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num referenced domains?</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>32 - max number of entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - num referenced domains?</p></dd><dt><span class="term">UNIHDR2</span></dt><dd><p>domain name unicode string header</p></dd><dt><span class="term">UNIHDR2[num_ref_doms-1]</span></dt><dd><p>referenced domain unicode string headers</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name unicode string</p></dd><dt><span class="term">DOM_SID[num_ref_doms]</span></dt><dd><p>referenced domain SIDs</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881966"></a>DOM_INFO (domain info, levels 3 and 5 are the same))</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8[]</span></dt><dd><p>??? padding to get 4-byte alignment with start of SMB header</p></dd><dt><span class="term">UINT16</span></dt><dd><p>domain name string length * 2</p></dd><dt><span class="term">UINT16</span></dt><dd><p>domain name string length * 2</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name string buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID string buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>domain name (unicode string)</p></dd><dt><span class="term">DOM_SID</span></dt><dd><p>domain SID</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882079"></a>USER_INFO (user logon info)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: it would be nice to know what the 16 byte user session key is for.</em></span></p><div class="variablelist"><dl><dt><span class="term">NTTIME</span></dt><dd><p>logon time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>logoff time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>kickoff time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password last set time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password can change time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password must change time</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>username unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>user's full name unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon script unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>profile path unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>home directory unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>home directory drive unicode string header</p></dd><dt><span class="term">UINT16</span></dt><dd><p>logon count</p></dd><dt><span class="term">UINT16</span></dt><dd><p>bad password count</p></dd><dt><span class="term">UINT32</span></dt><dd><p>User ID</p></dd><dt><span class="term">UINT32</span></dt><dd><p>Group ID</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num groups</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer to groups.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>user flags</p></dd><dt><span class="term">char[16]</span></dt><dd><p>user session key</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon server unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon domain unicode string header</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented logon domain id pointer</p></dd><dt><span class="term">char[40]</span></dt><dd><p>40 undocumented padding bytes. future expansion?</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - num_other_sids?</p></dd><dt><span class="term">VOID*</span></dt><dd><p>NULL - undocumented pointer to other domain SIDs.</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>username unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>user's full name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon script unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>profile path unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>home directory unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>home directory drive unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num groups</p></dd><dt><span class="term">GID[num_groups]</span></dt><dd><p>group info</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon domain unicode string</p></dd><dt><span class="term">DOM_SID</span></dt><dd><p>domain SID</p></dd><dt><span class="term">DOM_SID[num_sids]</span></dt><dd><p>other domain SIDs?</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882642"></a>SH_INFO_1_PTR (pointers to level 1 share info strings)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: see cifsrap2.txt section5, page 10.</em></span></p><table class="simplelist" border="0" summary="Simple list"><tr><td>0 for shi1_type indicates a Disk.</td></tr><tr><td>1 for shi1_type indicates a Print Queue.</td></tr><tr><td>2 for shi1_type indicates a Device.</td></tr><tr><td>3 for shi1_type indicates an IPC pipe.</td></tr><tr><td>0x8000 0000 (top bit set in shi1_type) indicates a hidden share.</td></tr></table><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>shi1_netname - pointer to net name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>shi1_type - type of share. 0 - undocumented.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>shi1_remark - pointer to comment.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882736"></a>SH_INFO_1_STR (level 1 share info strings)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNISTR2</span></dt><dd><p>shi1_netname - unicode string of net name</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>shi1_remark - unicode string of comment.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882779"></a>SHARE_INFO_1_CTR</h4></div></div><div></div></div><p>share container with 0 entries:</p><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - Buffer</p></dd></dl></div><p>share container with &gt; 0 entries:</p><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>non-zero - Buffer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">SH_INFO_1_PTR[EntriesRead]</span></dt><dd><p>share entry pointers</p></dd><dt><span class="term">SH_INFO_1_STR[EntriesRead]</span></dt><dd><p>share entry strings</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - padding</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882948"></a>SERVER_INFO_101</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: see cifs6.txt section 6.4 - the fields described therein will be of assistance here. for example, the type listed below is the same as fServerType, which is described in 6.4.1. </em></span></p><div class="variablelist"><dl><dt><span class="term">SV_TYPE_WORKSTATION</span></dt><dd><p>0x00000001 All workstations</p></dd><dt><span class="term">SV_TYPE_SERVER</span></dt><dd><p>0x00000002 All servers</p></dd><dt><span class="term">SV_TYPE_SQLSERVER</span></dt><dd><p>0x00000004 Any server running with SQL server</p></dd><dt><span class="term">SV_TYPE_DOMAIN_CTRL</span></dt><dd><p>0x00000008 Primary domain controller</p></dd><dt><span class="term">SV_TYPE_DOMAIN_BAKCTRL</span></dt><dd><p>0x00000010 Backup domain controller</p></dd><dt><span class="term">SV_TYPE_TIME_SOURCE</span></dt><dd><p>0x00000020 Server running the timesource service</p></dd><dt><span class="term">SV_TYPE_AFP</span></dt><dd><p>0x00000040 Apple File Protocol servers</p></dd><dt><span class="term">SV_TYPE_NOVELL</span></dt><dd><p>0x00000080 Novell servers</p></dd><dt><span class="term">SV_TYPE_DOMAIN_MEMBER</span></dt><dd><p>0x00000100 Domain Member</p></dd><dt><span class="term">SV_TYPE_PRINTQ_SERVER</span></dt><dd><p>0x00000200 Server sharing print queue</p></dd><dt><span class="term">SV_TYPE_DIALIN_SERVER</span></dt><dd><p>0x00000400 Server running dialin service.</p></dd><dt><span class="term">SV_TYPE_XENIX_SERVER</span></dt><dd><p>0x00000800 Xenix server</p></dd><dt><span class="term">SV_TYPE_NT</span></dt><dd><p>0x00001000 NT server</p></dd><dt><span class="term">SV_TYPE_WFW</span></dt><dd><p>0x00002000 Server running Windows for </p></dd><dt><span class="term">SV_TYPE_SERVER_NT</span></dt><dd><p>0x00008000 Windows NT non DC server</p></dd><dt><span class="term">SV_TYPE_POTENTIAL_BROWSER</span></dt><dd><p>0x00010000 Server that can run the browser service</p></dd><dt><span class="term">SV_TYPE_BACKUP_BROWSER</span></dt><dd><p>0x00020000 Backup browser server</p></dd><dt><span class="term">SV_TYPE_MASTER_BROWSER</span></dt><dd><p>0x00040000 Master browser server</p></dd><dt><span class="term">SV_TYPE_DOMAIN_MASTER</span></dt><dd><p>0x00080000 Domain Master Browser server</p></dd><dt><span class="term">SV_TYPE_LOCAL_LIST_ONLY</span></dt><dd><p>0x40000000 Enumerate only entries marked &quot;local&quot;</p></dd><dt><span class="term">SV_TYPE_DOMAIN_ENUM</span></dt><dd><p>0x80000000 Enumerate Domains. The pszServer and pszDomain parameters must be NULL.</p></dd></dl></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>500 - platform_id</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>5 - major version</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - minor version</p></dd><dt><span class="term">UINT32</span></dt><dd><p>type (SV_TYPE_... bit field)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to comment</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>sv101_name - unicode string of server name</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>sv_101_comment - unicode string of server comment.</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with start of the SMB header.</p></dd></dl></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883414"></a>MSRPC over Transact Named Pipe</h2></div></div><div></div></div><p>For details on the SMB Transact Named Pipe, see cifs6.txt</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883427"></a>MSRPC Pipes</h3></div></div><div></div></div><p>
+</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870038"></a>GID (group id info)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>group id</p></dd><dt><span class="term">UINT32</span></dt><dd><p>user attributes (only used by NT 3.1 and 3.51)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870077"></a>DOM_REF (domain reference info)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num referenced domains?</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>32 - max number of entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - num referenced domains?</p></dd><dt><span class="term">UNIHDR2</span></dt><dd><p>domain name unicode string header</p></dd><dt><span class="term">UNIHDR2[num_ref_doms-1]</span></dt><dd><p>referenced domain unicode string headers</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name unicode string</p></dd><dt><span class="term">DOM_SID[num_ref_doms]</span></dt><dd><p>referenced domain SIDs</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870220"></a>DOM_INFO (domain info, levels 3 and 5 are the same))</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8[]</span></dt><dd><p>??? padding to get 4-byte alignment with start of SMB header</p></dd><dt><span class="term">UINT16</span></dt><dd><p>domain name string length * 2</p></dd><dt><span class="term">UINT16</span></dt><dd><p>domain name string length * 2</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name string buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID string buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>domain name (unicode string)</p></dd><dt><span class="term">DOM_SID</span></dt><dd><p>domain SID</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870333"></a>USER_INFO (user logon info)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: it would be nice to know what the 16 byte user session key is for.</em></span></p><div class="variablelist"><dl><dt><span class="term">NTTIME</span></dt><dd><p>logon time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>logoff time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>kickoff time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password last set time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password can change time</p></dd><dt><span class="term">NTTIME</span></dt><dd><p>password must change time</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>username unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>user's full name unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon script unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>profile path unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>home directory unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>home directory drive unicode string header</p></dd><dt><span class="term">UINT16</span></dt><dd><p>logon count</p></dd><dt><span class="term">UINT16</span></dt><dd><p>bad password count</p></dd><dt><span class="term">UINT32</span></dt><dd><p>User ID</p></dd><dt><span class="term">UINT32</span></dt><dd><p>Group ID</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num groups</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer to groups.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>user flags</p></dd><dt><span class="term">char[16]</span></dt><dd><p>user session key</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon server unicode string header</p></dd><dt><span class="term">UNIHDR</span></dt><dd><p>logon domain unicode string header</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented logon domain id pointer</p></dd><dt><span class="term">char[40]</span></dt><dd><p>40 undocumented padding bytes. future expansion?</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - num_other_sids?</p></dd><dt><span class="term">VOID*</span></dt><dd><p>NULL - undocumented pointer to other domain SIDs.</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>username unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>user's full name unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon script unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>profile path unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>home directory unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>home directory drive unicode string</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num groups</p></dd><dt><span class="term">GID[num_groups]</span></dt><dd><p>group info</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon domain unicode string</p></dd><dt><span class="term">DOM_SID</span></dt><dd><p>domain SID</p></dd><dt><span class="term">DOM_SID[num_sids]</span></dt><dd><p>other domain SIDs?</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870896"></a>SH_INFO_1_PTR (pointers to level 1 share info strings)</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: see cifsrap2.txt section5, page 10.</em></span></p><table class="simplelist" border="0" summary="Simple list"><tr><td>0 for shi1_type indicates a Disk.</td></tr><tr><td>1 for shi1_type indicates a Print Queue.</td></tr><tr><td>2 for shi1_type indicates a Device.</td></tr><tr><td>3 for shi1_type indicates an IPC pipe.</td></tr><tr><td>0x8000 0000 (top bit set in shi1_type) indicates a hidden share.</td></tr></table><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>shi1_netname - pointer to net name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>shi1_type - type of share. 0 - undocumented.</p></dd><dt><span class="term">VOID*</span></dt><dd><p>shi1_remark - pointer to comment.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870991"></a>SH_INFO_1_STR (level 1 share info strings)</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNISTR2</span></dt><dd><p>shi1_netname - unicode string of net name</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>shi1_remark - unicode string of comment.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871033"></a>SHARE_INFO_1_CTR</h4></div></div><div></div></div><p>share container with 0 entries:</p><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - Buffer</p></dd></dl></div><p>share container with &gt; 0 entries:</p><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>non-zero - Buffer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">SH_INFO_1_PTR[EntriesRead]</span></dt><dd><p>share entry pointers</p></dd><dt><span class="term">SH_INFO_1_STR[EntriesRead]</span></dt><dd><p>share entry strings</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>EntriesRead</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - padding</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871203"></a>SERVER_INFO_101</h4></div></div><div></div></div><p><span class="emphasis"><em>Note: see cifs6.txt section 6.4 - the fields described therein will be of assistance here. for example, the type listed below is the same as fServerType, which is described in 6.4.1. </em></span></p><div class="variablelist"><dl><dt><span class="term">SV_TYPE_WORKSTATION</span></dt><dd><p>0x00000001 All workstations</p></dd><dt><span class="term">SV_TYPE_SERVER</span></dt><dd><p>0x00000002 All servers</p></dd><dt><span class="term">SV_TYPE_SQLSERVER</span></dt><dd><p>0x00000004 Any server running with SQL server</p></dd><dt><span class="term">SV_TYPE_DOMAIN_CTRL</span></dt><dd><p>0x00000008 Primary domain controller</p></dd><dt><span class="term">SV_TYPE_DOMAIN_BAKCTRL</span></dt><dd><p>0x00000010 Backup domain controller</p></dd><dt><span class="term">SV_TYPE_TIME_SOURCE</span></dt><dd><p>0x00000020 Server running the timesource service</p></dd><dt><span class="term">SV_TYPE_AFP</span></dt><dd><p>0x00000040 Apple File Protocol servers</p></dd><dt><span class="term">SV_TYPE_NOVELL</span></dt><dd><p>0x00000080 Novell servers</p></dd><dt><span class="term">SV_TYPE_DOMAIN_MEMBER</span></dt><dd><p>0x00000100 Domain Member</p></dd><dt><span class="term">SV_TYPE_PRINTQ_SERVER</span></dt><dd><p>0x00000200 Server sharing print queue</p></dd><dt><span class="term">SV_TYPE_DIALIN_SERVER</span></dt><dd><p>0x00000400 Server running dialin service.</p></dd><dt><span class="term">SV_TYPE_XENIX_SERVER</span></dt><dd><p>0x00000800 Xenix server</p></dd><dt><span class="term">SV_TYPE_NT</span></dt><dd><p>0x00001000 NT server</p></dd><dt><span class="term">SV_TYPE_WFW</span></dt><dd><p>0x00002000 Server running Windows for </p></dd><dt><span class="term">SV_TYPE_SERVER_NT</span></dt><dd><p>0x00008000 Windows NT non DC server</p></dd><dt><span class="term">SV_TYPE_POTENTIAL_BROWSER</span></dt><dd><p>0x00010000 Server that can run the browser service</p></dd><dt><span class="term">SV_TYPE_BACKUP_BROWSER</span></dt><dd><p>0x00020000 Backup browser server</p></dd><dt><span class="term">SV_TYPE_MASTER_BROWSER</span></dt><dd><p>0x00040000 Master browser server</p></dd><dt><span class="term">SV_TYPE_DOMAIN_MASTER</span></dt><dd><p>0x00080000 Domain Master Browser server</p></dd><dt><span class="term">SV_TYPE_LOCAL_LIST_ONLY</span></dt><dd><p>0x40000000 Enumerate only entries marked &quot;local&quot;</p></dd><dt><span class="term">SV_TYPE_DOMAIN_ENUM</span></dt><dd><p>0x80000000 Enumerate Domains. The pszServer and pszDomain parameters must be NULL.</p></dd></dl></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>500 - platform_id</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>5 - major version</p></dd><dt><span class="term">UINT32</span></dt><dd><p>4 - minor version</p></dd><dt><span class="term">UINT32</span></dt><dd><p>type (SV_TYPE_... bit field)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to comment</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>sv101_name - unicode string of server name</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>sv_101_comment - unicode string of server comment.</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with start of the SMB header.</p></dd></dl></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871669"></a>MSRPC over Transact Named Pipe</h2></div></div><div></div></div><p>For details on the SMB Transact Named Pipe, see cifs6.txt</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871682"></a>MSRPC Pipes</h3></div></div><div></div></div><p>
The MSRPC is conducted over an SMB Transact Pipe with a name of
<tt class="filename">\PIPE\</tt>. You must first obtain a 16 bit file handle, by
sending a SMBopenX with the pipe name <tt class="filename">\PIPE\srvsvc</tt> for
@@ -1271,11 +1268,11 @@ listed below:</p><pre class="programlisting">
initial SMBopenX request: RPC API command 0x26 params:
&quot;\\PIPE\\lsarpc&quot; 0x65 0x63; 0x72 0x70; 0x44 0x65;
&quot;\\PIPE\\srvsvc&quot; 0x73 0x76; 0x4E 0x00; 0x5C 0x43;
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883528"></a>Header</h3></div></div><div></div></div><p>[section to be rewritten, following receipt of work by Duncan Stansfield]</p><p>Interesting note: if you set packed data representation to 0x0100 0000
-then all 4-byte and 2-byte word ordering is turned around!</p><p>The start of each of the NTLSA and NETLOGON named pipes begins with:</p><div class="segmentedlist"><p><b>offset: </b>00</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>5 - RPC major version</p><p><b>offset: </b>01</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>0 - RPC minor version</p><p><b>offset: </b>02</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>2 - RPC response packet</p><p><b>offset: </b>03</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>3 - (FirstFrag bit-wise or with LastFrag)</p><p><b>offset: </b>04</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>0x1000 0000 - packed data representation</p><p><b>offset: </b>08</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>fragment length - data size (bytes) inc header and tail.</p><p><b>offset: </b>0A</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>0 - authentication length </p><p><b>offset: </b>0C</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>call identifier. matches 12th UINT32 of incoming RPC data.</p><p><b>offset: </b>10</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>allocation hint - data size (bytes) minus header and tail.</p><p><b>offset: </b>14</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>0 - presentation context identifier</p><p><b>offset: </b>16</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>0 - cancel count</p><p><b>offset: </b>17</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>in replies: 0 - reserved; in requests: opnum - see #defines.</p><p><b>offset: </b>18</p><p><b>Variable type: </b>......</p><p><b>Variable data: </b>start of data (goes on for allocation_hint bytes)</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883718"></a>RPC_Packet for request, response, bind and bind acknowledgement</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8 versionmaj</span></dt><dd><p>reply same as request (0x05)</p></dd><dt><span class="term">UINT8 versionmin</span></dt><dd><p>reply same as request (0x00)</p></dd><dt><span class="term">UINT8 type</span></dt><dd><p>one of the MSRPC_Type enums</p></dd><dt><span class="term">UINT8 flags</span></dt><dd><p>reply same as request (0x00 for Bind, 0x03 for Request)</p></dd><dt><span class="term">UINT32 representation</span></dt><dd><p>reply same as request (0x00000010)</p></dd><dt><span class="term">UINT16 fraglength</span></dt><dd><p>the length of the data section of the SMB trans packet</p></dd><dt><span class="term">UINT16 authlength</span></dt><dd><p></p></dd><dt><span class="term">UINT32 callid</span></dt><dd><p>call identifier. (e.g. 0x00149594)</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p>the remainder of the packet depending on the &quot;type&quot;</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883852"></a>Interface identification</h4></div></div><div></div></div><p>the interfaces are numbered. as yet I haven't seen more than one interface used on the same pipe name srvsvc</p><pre class="programlisting">
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871787"></a>Header</h3></div></div><div></div></div><p>[section to be rewritten, following receipt of work by Duncan Stansfield]</p><p>Interesting note: if you set packed data representation to 0x0100 0000
+then all 4-byte and 2-byte word ordering is turned around!</p><p>The start of each of the NTLSA and NETLOGON named pipes begins with:</p><div class="segmentedlist"><p><b>offset: </b>00</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>5 - RPC major version</p><p><b>offset: </b>01</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>0 - RPC minor version</p><p><b>offset: </b>02</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>2 - RPC response packet</p><p><b>offset: </b>03</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>3 - (FirstFrag bit-wise or with LastFrag)</p><p><b>offset: </b>04</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>0x1000 0000 - packed data representation</p><p><b>offset: </b>08</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>fragment length - data size (bytes) inc header and tail.</p><p><b>offset: </b>0A</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>0 - authentication length </p><p><b>offset: </b>0C</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>call identifier. matches 12th UINT32 of incoming RPC data.</p><p><b>offset: </b>10</p><p><b>Variable type: </b>UINT32</p><p><b>Variable data: </b>allocation hint - data size (bytes) minus header and tail.</p><p><b>offset: </b>14</p><p><b>Variable type: </b>UINT16</p><p><b>Variable data: </b>0 - presentation context identifier</p><p><b>offset: </b>16</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>0 - cancel count</p><p><b>offset: </b>17</p><p><b>Variable type: </b>UINT8</p><p><b>Variable data: </b>in replies: 0 - reserved; in requests: opnum - see #defines.</p><p><b>offset: </b>18</p><p><b>Variable type: </b>......</p><p><b>Variable data: </b>start of data (goes on for allocation_hint bytes)</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2871976"></a>RPC_Packet for request, response, bind and bind acknowledgement</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8 versionmaj</span></dt><dd><p>reply same as request (0x05)</p></dd><dt><span class="term">UINT8 versionmin</span></dt><dd><p>reply same as request (0x00)</p></dd><dt><span class="term">UINT8 type</span></dt><dd><p>one of the MSRPC_Type enums</p></dd><dt><span class="term">UINT8 flags</span></dt><dd><p>reply same as request (0x00 for Bind, 0x03 for Request)</p></dd><dt><span class="term">UINT32 representation</span></dt><dd><p>reply same as request (0x00000010)</p></dd><dt><span class="term">UINT16 fraglength</span></dt><dd><p>the length of the data section of the SMB trans packet</p></dd><dt><span class="term">UINT16 authlength</span></dt><dd><p></p></dd><dt><span class="term">UINT32 callid</span></dt><dd><p>call identifier. (e.g. 0x00149594)</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p>the remainder of the packet depending on the &quot;type&quot;</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872110"></a>Interface identification</h4></div></div><div></div></div><p>the interfaces are numbered. as yet I haven't seen more than one interface used on the same pipe name srvsvc</p><pre class="programlisting">
abstract (0x4B324FC8, 0x01D31670, 0x475A7812, 0x88E16EBF, 0x00000003)
transfer (0x8A885D04, 0x11C91CEB, 0x0008E89F, 0x6048102B, 0x00000002)
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883877"></a>RPC_Iface RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8 byte[16]</span></dt><dd><p>16 bytes of number</p></dd><dt><span class="term">UINT32 version</span></dt><dd><p>the interface number</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883916"></a>RPC_ReqBind RW</h4></div></div><div></div></div><p>the remainder of the packet after the header if &quot;type&quot; was Bind in the response header, &quot;type&quot; should be BindAck</p><div class="variablelist"><dl><dt><span class="term">UINT16 maxtsize</span></dt><dd><p>maximum transmission fragment size (0x1630)</p></dd><dt><span class="term">UINT16 maxrsize</span></dt><dd><p>max receive fragment size (0x1630)</p></dd><dt><span class="term">UINT32 assocgid</span></dt><dd><p>associated group id (0x0)</p></dd><dt><span class="term">UINT32 numelements</span></dt><dd><p>the number of elements (0x1)</p></dd><dt><span class="term">UINT16 contextid</span></dt><dd><p>presentation context identifier (0x0)</p></dd><dt><span class="term">UINT8 numsyntaxes</span></dt><dd><p>the number of syntaxes (has always been 1?)(0x1)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">* abstractint USE RPC_Iface</span></dt><dd><p>num and vers. of interface client is using</p></dd><dt><span class="term">* transferint USE RPC_Iface</span></dt><dd><p>num and vers. of interface to use for replies</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884057"></a>RPC_Address RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16 length</span></dt><dd><p>length of the string including null terminator</p></dd><dt><span class="term">* port USE string</span></dt><dd><p>the string above in single byte, null terminated form</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884097"></a>RPC_ResBind RW</h4></div></div><div></div></div><p>the response to place after the header in the reply packet</p><div class="variablelist"><dl><dt><span class="term">UINT16 maxtsize</span></dt><dd><p>same as request</p></dd><dt><span class="term">UINT16 maxrsize</span></dt><dd><p>same as request</p></dd><dt><span class="term">UINT32 assocgid</span></dt><dd><p>zero</p></dd><dt><span class="term">* secondaddr USE RPC_Address</span></dt><dd><p>the address string, as described earlier</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">UINT8 numresults</span></dt><dd><p>the number of results (0x01)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">UINT16 result</span></dt><dd><p>result (0x00 = accept)</p></dd><dt><span class="term">UINT16 reason</span></dt><dd><p>reason (0x00 = no reason specified)</p></dd><dt><span class="term">* transfersyntax USE RPC_Iface</span></dt><dd><p>the transfer syntax from the request</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884247"></a>RPC_ReqNorm RW</h4></div></div><div></div></div><p>the remainder of the packet after the header for every other other request</p><div class="variablelist"><dl><dt><span class="term">UINT32 allochint</span></dt><dd><p>the size of the stub data in bytes</p></dd><dt><span class="term">UINT16 prescontext</span></dt><dd><p>presentation context identifier (0x0)</p></dd><dt><span class="term">UINT16 opnum</span></dt><dd><p>operation number (0x15)</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p>a packet dependent on the pipe name (probably the interface) and the op number)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884319"></a>RPC_ResNorm RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32 allochint</span></dt><dd><p># size of the stub data in bytes</p></dd><dt><span class="term">UINT16 prescontext</span></dt><dd><p># presentation context identifier (same as request)</p></dd><dt><span class="term">UINT8 cancelcount</span></dt><dd><p># cancel count? (0x0)</p></dd><dt><span class="term">UINT8 reserved</span></dt><dd><p># 0 - one byte padding</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p># the remainder of the reply</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884399"></a>Tail</h3></div></div><div></div></div><p>The end of each of the NTLSA and NETLOGON named pipes ends with:</p><div class="variablelist"><dl><dt><span class="term">......</span></dt><dd><p>end of data</p></dd><dt><span class="term">UINT32</span></dt><dd><p>return code</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884445"></a>RPC Bind / Bind Ack</h3></div></div><div></div></div><p>
+</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872138"></a>RPC_Iface RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT8 byte[16]</span></dt><dd><p>16 bytes of number</p></dd><dt><span class="term">UINT32 version</span></dt><dd><p>the interface number</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872175"></a>RPC_ReqBind RW</h4></div></div><div></div></div><p>the remainder of the packet after the header if &quot;type&quot; was Bind in the response header, &quot;type&quot; should be BindAck</p><div class="variablelist"><dl><dt><span class="term">UINT16 maxtsize</span></dt><dd><p>maximum transmission fragment size (0x1630)</p></dd><dt><span class="term">UINT16 maxrsize</span></dt><dd><p>max receive fragment size (0x1630)</p></dd><dt><span class="term">UINT32 assocgid</span></dt><dd><p>associated group id (0x0)</p></dd><dt><span class="term">UINT32 numelements</span></dt><dd><p>the number of elements (0x1)</p></dd><dt><span class="term">UINT16 contextid</span></dt><dd><p>presentation context identifier (0x0)</p></dd><dt><span class="term">UINT8 numsyntaxes</span></dt><dd><p>the number of syntaxes (has always been 1?)(0x1)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">* abstractint USE RPC_Iface</span></dt><dd><p>num and vers. of interface client is using</p></dd><dt><span class="term">* transferint USE RPC_Iface</span></dt><dd><p>num and vers. of interface to use for replies</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872318"></a>RPC_Address RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16 length</span></dt><dd><p>length of the string including null terminator</p></dd><dt><span class="term">* port USE string</span></dt><dd><p>the string above in single byte, null terminated form</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872358"></a>RPC_ResBind RW</h4></div></div><div></div></div><p>the response to place after the header in the reply packet</p><div class="variablelist"><dl><dt><span class="term">UINT16 maxtsize</span></dt><dd><p>same as request</p></dd><dt><span class="term">UINT16 maxrsize</span></dt><dd><p>same as request</p></dd><dt><span class="term">UINT32 assocgid</span></dt><dd><p>zero</p></dd><dt><span class="term">* secondaddr USE RPC_Address</span></dt><dd><p>the address string, as described earlier</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">UINT8 numresults</span></dt><dd><p>the number of results (0x01)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>4-byte alignment padding, against SMB header</p></dd><dt><span class="term">UINT16 result</span></dt><dd><p>result (0x00 = accept)</p></dd><dt><span class="term">UINT16 reason</span></dt><dd><p>reason (0x00 = no reason specified)</p></dd><dt><span class="term">* transfersyntax USE RPC_Iface</span></dt><dd><p>the transfer syntax from the request</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872508"></a>RPC_ReqNorm RW</h4></div></div><div></div></div><p>the remainder of the packet after the header for every other other request</p><div class="variablelist"><dl><dt><span class="term">UINT32 allochint</span></dt><dd><p>the size of the stub data in bytes</p></dd><dt><span class="term">UINT16 prescontext</span></dt><dd><p>presentation context identifier (0x0)</p></dd><dt><span class="term">UINT16 opnum</span></dt><dd><p>operation number (0x15)</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p>a packet dependent on the pipe name (probably the interface) and the op number)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872580"></a>RPC_ResNorm RW</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32 allochint</span></dt><dd><p># size of the stub data in bytes</p></dd><dt><span class="term">UINT16 prescontext</span></dt><dd><p># presentation context identifier (same as request)</p></dd><dt><span class="term">UINT8 cancelcount</span></dt><dd><p># cancel count? (0x0)</p></dd><dt><span class="term">UINT8 reserved</span></dt><dd><p># 0 - one byte padding</p></dd><dt><span class="term">* stub USE TvPacket</span></dt><dd><p># the remainder of the reply</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872660"></a>Tail</h3></div></div><div></div></div><p>The end of each of the NTLSA and NETLOGON named pipes ends with:</p><div class="variablelist"><dl><dt><span class="term">......</span></dt><dd><p>end of data</p></dd><dt><span class="term">UINT32</span></dt><dd><p>return code</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872706"></a>RPC Bind / Bind Ack</h3></div></div><div></div></div><p>
RPC Binds are the process of associating an RPC pipe (e.g \PIPE\lsarpc)
with a &quot;transfer syntax&quot; (see RPC_Iface structure). The purpose for doing
this is unknown.
@@ -1283,7 +1280,7 @@ this is unknown.
returned by the SMBopenX Transact response.</em></span></p><p><span class="emphasis"><em>Note: The RPC_ResBind members maxtsize, maxrsize and assocgid are the same in the response as the same members in the RPC_ReqBind. The
RPC_ResBind member transfersyntax is the same in the response as
the</em></span></p><p><span class="emphasis"><em>Note: The RPC_ResBind response member secondaddr contains the name of what is presumed to be the service behind the RPC pipe. The
- mapping identified so far is:</em></span></p><div class="variablelist"><dl><dt><span class="term">initial SMBopenX request:</span></dt><dd><p>RPC_ResBind response:</p></dd><dt><span class="term">&quot;\\PIPE\\srvsvc&quot;</span></dt><dd><p>&quot;\\PIPE\\ntsvcs&quot;</p></dd><dt><span class="term">&quot;\\PIPE\\samr&quot;</span></dt><dd><p>&quot;\\PIPE\\lsass&quot;</p></dd><dt><span class="term">&quot;\\PIPE\\lsarpc&quot;</span></dt><dd><p>&quot;\\PIPE\\lsass&quot;</p></dd><dt><span class="term">&quot;\\PIPE\\wkssvc&quot;</span></dt><dd><p>&quot;\\PIPE\\wksvcs&quot;</p></dd><dt><span class="term">&quot;\\PIPE\\NETLOGON&quot;</span></dt><dd><p>&quot;\\PIPE\\NETLOGON&quot;</p></dd></dl></div><p><span class="emphasis"><em>Note: The RPC_Packet fraglength member in both the Bind Request and Bind Acknowledgment must contain the length of the entire RPC data, including the RPC_Packet header.</em></span></p><p>Request:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>RPC_Packet</td></tr><tr><td>RPC_ReqBind</td></tr></table><p>Response:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>RPC_Packet</td></tr><tr><td>RPC_ResBind</td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884625"></a>NTLSA Transact Named Pipe</h3></div></div><div></div></div><p>The sequence of actions taken on this pipe are:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords.</td></tr><tr><td>Open an RPC Pipe with the name &quot;\\PIPE\\lsarpc&quot;. Store the file handle.</td></tr><tr><td>Using the file handle, send a Set Named Pipe Handle state to 0x4300.</td></tr><tr><td>Send an LSA Open Policy request. Store the Policy Handle.</td></tr><tr><td>Using the Policy Handle, send LSA Query Info Policy requests, etc.</td></tr><tr><td>Using the Policy Handle, send an LSA Close.</td></tr><tr><td>Close the IPC$ share.</td></tr></table><p>Defines for this pipe, identifying the query are:</p><div class="variablelist"><dl><dt><span class="term">LSA Open Policy:</span></dt><dd><p>0x2c</p></dd><dt><span class="term">LSA Query Info Policy:</span></dt><dd><p>0x07</p></dd><dt><span class="term">LSA Enumerate Trusted Domains:</span></dt><dd><p>0x0d</p></dd><dt><span class="term">LSA Open Secret:</span></dt><dd><p>0xff</p></dd><dt><span class="term">LSA Lookup SIDs:</span></dt><dd><p>0xfe</p></dd><dt><span class="term">LSA Lookup Names:</span></dt><dd><p>0xfd</p></dd><dt><span class="term">LSA Close:</span></dt><dd><p>0x00</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884790"></a>LSA Open Policy</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: The policy handle can be anything you like.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884803"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>server name - unicode string starting with two '\'s</p></dd><dt><span class="term">OBJ_ATTR</span></dt><dd><p>object attributes</p></dd><dt><span class="term">UINT32</span></dt><dd><p>1 - desired access</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884873"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">return</span></dt><dd><p>0 - indicates success</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884916"></a>LSA Query Info Policy</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: The info class in response must be the same as that in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884930"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT16</span></dt><dd><p>info class (also a policy handle?)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884968"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT16</span></dt><dd><p>info class (same as info class in request).</p></dd></dl></div><pre class="programlisting">
+ mapping identified so far is:</em></span></p><div class="variablelist"><dl><dt><span class="term">initial SMBopenX request:</span></dt><dd><p>RPC_ResBind response:</p></dd><dt><span class="term">&quot;\\PIPE\\srvsvc&quot;</span></dt><dd><p>&quot;\\PIPE\\ntsvcs&quot;</p></dd><dt><span class="term">&quot;\\PIPE\\samr&quot;</span></dt><dd><p>&quot;\\PIPE\\lsass&quot;</p></dd><dt><span class="term">&quot;\\PIPE\\lsarpc&quot;</span></dt><dd><p>&quot;\\PIPE\\lsass&quot;</p></dd><dt><span class="term">&quot;\\PIPE\\wkssvc&quot;</span></dt><dd><p>&quot;\\PIPE\\wksvcs&quot;</p></dd><dt><span class="term">&quot;\\PIPE\\NETLOGON&quot;</span></dt><dd><p>&quot;\\PIPE\\NETLOGON&quot;</p></dd></dl></div><p><span class="emphasis"><em>Note: The RPC_Packet fraglength member in both the Bind Request and Bind Acknowledgment must contain the length of the entire RPC data, including the RPC_Packet header.</em></span></p><p>Request:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>RPC_Packet</td></tr><tr><td>RPC_ReqBind</td></tr></table><p>Response:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>RPC_Packet</td></tr><tr><td>RPC_ResBind</td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872896"></a>NTLSA Transact Named Pipe</h3></div></div><div></div></div><p>The sequence of actions taken on this pipe are:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords.</td></tr><tr><td>Open an RPC Pipe with the name &quot;\\PIPE\\lsarpc&quot;. Store the file handle.</td></tr><tr><td>Using the file handle, send a Set Named Pipe Handle state to 0x4300.</td></tr><tr><td>Send an LSA Open Policy request. Store the Policy Handle.</td></tr><tr><td>Using the Policy Handle, send LSA Query Info Policy requests, etc.</td></tr><tr><td>Using the Policy Handle, send an LSA Close.</td></tr><tr><td>Close the IPC$ share.</td></tr></table><p>Defines for this pipe, identifying the query are:</p><div class="variablelist"><dl><dt><span class="term">LSA Open Policy:</span></dt><dd><p>0x2c</p></dd><dt><span class="term">LSA Query Info Policy:</span></dt><dd><p>0x07</p></dd><dt><span class="term">LSA Enumerate Trusted Domains:</span></dt><dd><p>0x0d</p></dd><dt><span class="term">LSA Open Secret:</span></dt><dd><p>0xff</p></dd><dt><span class="term">LSA Lookup SIDs:</span></dt><dd><p>0xfe</p></dd><dt><span class="term">LSA Lookup Names:</span></dt><dd><p>0xfd</p></dd><dt><span class="term">LSA Close:</span></dt><dd><p>0x00</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873062"></a>LSA Open Policy</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: The policy handle can be anything you like.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873076"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>server name - unicode string starting with two '\'s</p></dd><dt><span class="term">OBJ_ATTR</span></dt><dd><p>object attributes</p></dd><dt><span class="term">UINT32</span></dt><dd><p>1 - desired access</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873146"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">return</span></dt><dd><p>0 - indicates success</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873187"></a>LSA Query Info Policy</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: The info class in response must be the same as that in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873202"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT16</span></dt><dd><p>info class (also a policy handle?)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873241"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT16</span></dt><dd><p>info class (same as info class in request).</p></dd></dl></div><pre class="programlisting">
switch (info class)
case 3:
case 5:
@@ -1292,11 +1289,11 @@ DOM_INFO domain info, levels 3 and 5 (are the same).
}
return 0 - indicates success
-</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885022"></a>LSA Enumerate Trusted Domains</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885029"></a>Request</h4></div></div><div></div></div><p>no extra data</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885042"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - enumeration context</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - entries read</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - trust information</p></dd><dt><span class="term">return</span></dt><dd><p>0x8000 001a - &quot;no trusted domains&quot; success code</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885113"></a>LSA Open Secret</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885120"></a>Request</h4></div></div><div></div></div><p>no extra data</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885133"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd></dl></div><p>return 0x0C00 0034 - &quot;no such secret&quot; success code</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885223"></a>LSA Close</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885230"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>policy handle to be closed</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885257"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>0s - closed policy handle (all zeros)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885289"></a>LSA Lookup SIDS</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: num_entries in response must be same as num_entries in request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885302"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer</p></dd><dt><span class="term">VOID*[num_entries] undocumented domain SID pointers to be looked up.
-</span></dt><dd><p>DOM_SID[num_entries] domain SIDs to be looked up.</p></dd><dt><span class="term">char[16]</span></dt><dd><p>completely undocumented 16 bytes.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885402"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">DOM_REF</span></dt><dd><p>domain reference response</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">DOM_SID2[num_entries]</span></dt><dd><p>domain SIDs (from Request, listed above).</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885498"></a>LSA Lookup Names</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: num_entries in response must be same as num_entries in request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885512"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer</p></dd><dt><span class="term">NAME[num_entries]</span></dt><dd><p>names to be looked up.</p></dd><dt><span class="term">char[]</span></dt><dd><p>undocumented bytes - falsely translated SID structure?</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885626"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">DOM_REF</span></dt><dd><p>domain reference response</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">DOM_RID[num_entries]</span></dt><dd><p>domain SIDs (from Request, listed above).</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd></dl></div><p>return 0 - indicates success</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885724"></a>NETLOGON rpc Transact Named Pipe</h2></div></div><div></div></div><p>The sequence of actions taken on this pipe are:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>tablish a connection to the IPC$ share (SMBtconX). use encrypted passwords.</td></tr><tr><td>en an RPC Pipe with the name &quot;\\PIPE\\NETLOGON&quot;. Store the file handle.</td></tr><tr><td>ing the file handle, send a Set Named Pipe Handle state to 0x4300.</td></tr><tr><td>eate Client Challenge. Send LSA Request Challenge. Store Server Challenge.</td></tr><tr><td>lculate Session Key. Send an LSA Auth 2 Challenge. Store Auth2 Challenge.</td></tr><tr><td>lc/Verify Client Creds. Send LSA Srv PW Set. Calc/Verify Server Creds.</td></tr><tr><td>lc/Verify Client Creds. Send LSA SAM Logon . Calc/Verify Server Creds.</td></tr><tr><td>lc/Verify Client Creds. Send LSA SAM Logoff. Calc/Verify Server Creds.</td></tr><tr><td>ose the IPC$ share.</td></tr></table><p>Defines for this pipe, identifying the query are</p><div class="variablelist"><dl><dt><span class="term">LSA Request Challenge:</span></dt><dd><p>0x04</p></dd><dt><span class="term">LSA Server Password Set:</span></dt><dd><p>0x06</p></dd><dt><span class="term">LSA SAM Logon:</span></dt><dd><p>0x02</p></dd><dt><span class="term">LSA SAM Logoff:</span></dt><dd><p>0x03</p></dd><dt><span class="term">LSA Auth 2:</span></dt><dd><p>0x0f</p></dd><dt><span class="term">LSA Logon Control:</span></dt><dd><p>0x0e</p></dd></dl></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885885"></a>LSA Request Challenge</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><p><span class="emphasis"><em>Note: logon client is the machine, not the user.</em></span></p><p><span class="emphasis"><em>Note: the initial LanManager password hash, against which the challenge is issued, is the machine name itself (lower case). there will becalls issued (LSA Server Password Set) which will change this, later. refusing these calls allows you to always deal with the same password (i.e the LM# of the machine name in lower case).</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885917"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client unicode string</p></dd><dt><span class="term">char[8]</span></dt><dd><p>client challenge</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885986"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>server challenge</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886019"></a>LSA Authenticate 2</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).</em></span></p><p><span class="emphasis"><em>Note: neg_flags in the response is the same as that in the request.</em></span></p><p><span class="emphasis"><em>Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886050"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">LOG_INFO</span></dt><dd><p>client identification info</p></dd><dt><span class="term">char[8]</span></dt><dd><p>client-calculated credentials</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 4-byte align with start of SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>neg_flags - negotiated flags (usual value is 0x0000 01ff)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886118"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>server credentials.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>neg_flags - same as neg_flags in request.</p></dd></dl></div><p>return 0 - indicates success. failure value unknown.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886166"></a>LSA Server Password Set</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: the new password is suspected to be a DES encryption using the old password to generate the key.</em></span></p><p><span class="emphasis"><em>Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).</em></span></p><p><span class="emphasis"><em>Note: the server credentials are constructed from the client-calculated credentials and the client time + 1 second.</em></span></p><p><span class="emphasis"><em>Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886206"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">CLNT_INFO</span></dt><dd><p>client identification/authentication info</p></dd><dt><span class="term">char[]</span></dt><dd><p>new password - undocumented.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886247"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><p>return 0 - indicates success; 0xC000 006a indicates failure</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886282"></a>LSA SAM Logon</h3></div></div><div></div></div><p><span class="emphasis"><em>
+</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873296"></a>LSA Enumerate Trusted Domains</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873304"></a>Request</h4></div></div><div></div></div><p>no extra data</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873316"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - enumeration context</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - entries read</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - trust information</p></dd><dt><span class="term">return</span></dt><dd><p>0x8000 001a - &quot;no trusted domains&quot; success code</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873387"></a>LSA Open Secret</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873394"></a>Request</h4></div></div><div></div></div><p>no extra data</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873406"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd><dt><span class="term">UINT32</span></dt><dd><p>0 - undocumented</p></dd></dl></div><p>return 0x0C00 0034 - &quot;no such secret&quot; success code</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873498"></a>LSA Close</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873505"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>policy handle to be closed</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873532"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>0s - closed policy handle (all zeros)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873564"></a>LSA Lookup SIDS</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: num_entries in response must be same as num_entries in request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873577"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer</p></dd><dt><span class="term">VOID*[num_entries] undocumented domain SID pointers to be looked up.
+</span></dt><dd><p>DOM_SID[num_entries] domain SIDs to be looked up.</p></dd><dt><span class="term">char[16]</span></dt><dd><p>completely undocumented 16 bytes.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873677"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">DOM_REF</span></dt><dd><p>domain reference response</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">DOM_SID2[num_entries]</span></dt><dd><p>domain SIDs (from Request, listed above).</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873773"></a>LSA Lookup Names</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: num_entries in response must be same as num_entries in request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873787"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">POL_HND</span></dt><dd><p>LSA policy handle</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain SID buffer pointer</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented domain name buffer pointer</p></dd><dt><span class="term">NAME[num_entries]</span></dt><dd><p>names to be looked up.</p></dd><dt><span class="term">char[]</span></dt><dd><p>undocumented bytes - falsely translated SID structure?</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873901"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">DOM_REF</span></dt><dd><p>domain reference response</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd><dt><span class="term">DOM_RID[num_entries]</span></dt><dd><p>domain SIDs (from Request, listed above).</p></dd><dt><span class="term">UINT32</span></dt><dd><p>num_entries (listed above)</p></dd></dl></div><p>return 0 - indicates success</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2873999"></a>NETLOGON rpc Transact Named Pipe</h2></div></div><div></div></div><p>The sequence of actions taken on this pipe are:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>tablish a connection to the IPC$ share (SMBtconX). use encrypted passwords.</td></tr><tr><td>en an RPC Pipe with the name &quot;\\PIPE\\NETLOGON&quot;. Store the file handle.</td></tr><tr><td>ing the file handle, send a Set Named Pipe Handle state to 0x4300.</td></tr><tr><td>eate Client Challenge. Send LSA Request Challenge. Store Server Challenge.</td></tr><tr><td>lculate Session Key. Send an LSA Auth 2 Challenge. Store Auth2 Challenge.</td></tr><tr><td>lc/Verify Client Creds. Send LSA Srv PW Set. Calc/Verify Server Creds.</td></tr><tr><td>lc/Verify Client Creds. Send LSA SAM Logon . Calc/Verify Server Creds.</td></tr><tr><td>lc/Verify Client Creds. Send LSA SAM Logoff. Calc/Verify Server Creds.</td></tr><tr><td>ose the IPC$ share.</td></tr></table><p>Defines for this pipe, identifying the query are</p><div class="variablelist"><dl><dt><span class="term">LSA Request Challenge:</span></dt><dd><p>0x04</p></dd><dt><span class="term">LSA Server Password Set:</span></dt><dd><p>0x06</p></dd><dt><span class="term">LSA SAM Logon:</span></dt><dd><p>0x02</p></dd><dt><span class="term">LSA SAM Logoff:</span></dt><dd><p>0x03</p></dd><dt><span class="term">LSA Auth 2:</span></dt><dd><p>0x0f</p></dd><dt><span class="term">LSA Logon Control:</span></dt><dd><p>0x0e</p></dd></dl></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2874162"></a>LSA Request Challenge</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: logon server name starts with two '\' characters and is upper case.</em></span></p><p><span class="emphasis"><em>Note: logon client is the machine, not the user.</em></span></p><p><span class="emphasis"><em>Note: the initial LanManager password hash, against which the challenge is issued, is the machine name itself (lower case). there will becalls issued (LSA Server Password Set) which will change this, later. refusing these calls allows you to always deal with the same password (i.e the LM# of the machine name in lower case).</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874194"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon server unicode string</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>logon client unicode string</p></dd><dt><span class="term">char[8]</span></dt><dd><p>client challenge</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874264"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>server challenge</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2874296"></a>LSA Authenticate 2</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).</em></span></p><p><span class="emphasis"><em>Note: neg_flags in the response is the same as that in the request.</em></span></p><p><span class="emphasis"><em>Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874327"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">LOG_INFO</span></dt><dd><p>client identification info</p></dd><dt><span class="term">char[8]</span></dt><dd><p>client-calculated credentials</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 4-byte align with start of SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>neg_flags - negotiated flags (usual value is 0x0000 01ff)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874396"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">char[8]</span></dt><dd><p>server credentials.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>neg_flags - same as neg_flags in request.</p></dd></dl></div><p>return 0 - indicates success. failure value unknown.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2874444"></a>LSA Server Password Set</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: the new password is suspected to be a DES encryption using the old password to generate the key.</em></span></p><p><span class="emphasis"><em>Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).</em></span></p><p><span class="emphasis"><em>Note: the server credentials are constructed from the client-calculated credentials and the client time + 1 second.</em></span></p><p><span class="emphasis"><em>Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874483"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">CLNT_INFO</span></dt><dd><p>client identification/authentication info</p></dd><dt><span class="term">char[]</span></dt><dd><p>new password - undocumented.</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874525"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><p>return 0 - indicates success; 0xC000 006a indicates failure</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2874559"></a>LSA SAM Logon</h3></div></div><div></div></div><p><span class="emphasis"><em>
Note: valid_user is True iff the username and password hash are valid for
the requested domain.
-</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886296"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">SAM_INFO</span></dt><dd><p>sam_id structure</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886323"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><pre class="programlisting">
+</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874574"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">SAM_INFO</span></dt><dd><p>sam_id structure</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874601"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><pre class="programlisting">
if (valid_user)
{
UINT16 3 - switch value indicating USER_INFO structure.
@@ -1316,16 +1313,16 @@ else
return 0xC000 0064 - NT_STATUS_NO_SUCH_USER.
}
-</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886384"></a>LSA SAM Logoff</h3></div></div><div></div></div><p><span class="emphasis"><em>
+</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2874662"></a>LSA SAM Logoff</h3></div></div><div></div></div><p><span class="emphasis"><em>
Note: presumably, the SAM_INFO structure is validated, and a (currently
undocumented) error code returned if the Logoff is invalid.
-</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886400"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">SAM_INFO</span></dt><dd><p>sam_id structure</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886426"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><p>return 0 - indicates success. undocumented failure indication.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886476"></a>\\MAILSLOT\NET\NTLOGON</h2></div></div><div></div></div><p><span class="emphasis"><em>
+</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874677"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">SAM_INFO</span></dt><dd><p>sam_id structure</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874705"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>undocumented buffer pointer</p></dd><dt><span class="term">CREDS</span></dt><dd><p>server credentials. server time stamp appears to be ignored.</p></dd></dl></div><p>return 0 - indicates success. undocumented failure indication.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2874755"></a>\\MAILSLOT\NET\NTLOGON</h2></div></div><div></div></div><p><span class="emphasis"><em>
Note: mailslots will contain a response mailslot, to which the response
should be sent. the target NetBIOS name is REQUEST_NAME&lt;20&gt;, where
REQUEST_NAME is the name of the machine that sent the request.
-</em></span></p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886493"></a>Query for PDC</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886507"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0007 - Query for PDC</p></dd><dt><span class="term">STR</span></dt><dd><p>machine name</p></dd><dt><span class="term">STR</span></dt><dd><p>response mailslot</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 2-byte align with start of mailslot.</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886634"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x000A - Respose to Query for PDC</p></dd><dt><span class="term">STR</span></dt><dd><p>machine name (in uppercase)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 2-byte align with start of mailslot.</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion (same as received in request)</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken (same as received in request)</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token (same as received in request)</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886755"></a>SAM Logon</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: machine name in response is preceded by two '\' characters.</em></span></p><p><span class="emphasis"><em>Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.</em></span></p><p><span class="emphasis"><em>Note: user name in the response is presumably the same as that in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886782"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0012 - SAM Logon</p></dd><dt><span class="term">UINT16</span></dt><dd><p>request count</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>user name</p></dd><dt><span class="term">STR</span></dt><dd><p>response mailslot</p></dd><dt><span class="term">UINT32</span></dt><dd><p>alloweable account</p></dd><dt><span class="term">UINT32</span></dt><dd><p>domain SID size</p></dd><dt><span class="term">char[sid_size]</span></dt><dd><p>domain SID, of sid_size bytes.</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>???? padding to 4? 2? -byte align with start of mailslot.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886966"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0013 - Response to SAM Logon</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>user name - workstation trust account</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name </p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887080"></a>SRVSVC Transact Named Pipe</h2></div></div><div></div></div><p>Defines for this pipe, identifying the query are:</p><div class="variablelist"><dl><dt><span class="term">Net Share Enum</span></dt><dd><p>0x0f</p></dd><dt><span class="term">Net Server Get Info</span></dt><dd><p>0x15</p></dd></dl></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887125"></a>Net Share Enum</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: share level and switch value in the response are presumably the same as those in the request.</em></span></p><p><span class="emphasis"><em>Note: cifsrap2.txt (section 5) may be of limited assistance here.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887146"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>pointer (to server name?)</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>server name</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with the start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>share level</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch value</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SHARE_INFO_1_CTR</p></dd><dt><span class="term">SHARE_INFO_1_CTR</span></dt><dd><p>share info with 0 entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>preferred maximum length (0xffff ffff)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887271"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>share level</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch value</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SHARE_INFO_1_CTR</p></dd><dt><span class="term">SHARE_INFO_1_CTR</span></dt><dd><p>share info (only added if share info ptr is non-zero)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887345"></a>Net Server Get Info</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: level is the same value as in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887358"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNISTR2</span></dt><dd><p>server name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch level</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887399"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>switch level</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SERVER_INFO_101</p></dd><dt><span class="term">SERVER_INFO_101</span></dt><dd><p>server info (only added if server info ptr is non-zero)</p></dd></dl></div><p>return 0 - indicates success</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887461"></a>Cryptographic side of NT Domain Authentication</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887469"></a>Definitions</h3></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Add(A1,A2)</span></dt><dd><p>Intel byte ordered addition of corresponding 4 byte words in arrays A1 and A2</p></dd><dt><span class="term">E(K,D)</span></dt><dd><p>DES ECB encryption of 8 byte data D using 7 byte key K</p></dd><dt><span class="term">lmowf()</span></dt><dd><p>Lan man hash</p></dd><dt><span class="term">ntowf()</span></dt><dd><p>NT hash</p></dd><dt><span class="term">PW</span></dt><dd><p>md4(machine_password) == md4(lsadump $machine.acc) ==
+</em></span></p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2874774"></a>Query for PDC</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874787"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0007 - Query for PDC</p></dd><dt><span class="term">STR</span></dt><dd><p>machine name</p></dd><dt><span class="term">STR</span></dt><dd><p>response mailslot</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 2-byte align with start of mailslot.</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874913"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x000A - Respose to Query for PDC</p></dd><dt><span class="term">STR</span></dt><dd><p>machine name (in uppercase)</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to 2-byte align with start of mailslot.</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion (same as received in request)</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken (same as received in request)</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token (same as received in request)</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2875034"></a>SAM Logon</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: machine name in response is preceded by two '\' characters.</em></span></p><p><span class="emphasis"><em>Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.</em></span></p><p><span class="emphasis"><em>Note: user name in the response is presumably the same as that in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875062"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0012 - SAM Logon</p></dd><dt><span class="term">UINT16</span></dt><dd><p>request count</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>user name</p></dd><dt><span class="term">STR</span></dt><dd><p>response mailslot</p></dd><dt><span class="term">UINT32</span></dt><dd><p>alloweable account</p></dd><dt><span class="term">UINT32</span></dt><dd><p>domain SID size</p></dd><dt><span class="term">char[sid_size]</span></dt><dd><p>domain SID, of sid_size bytes.</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>???? padding to 4? 2? -byte align with start of mailslot.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875246"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT16</span></dt><dd><p>0x0013 - Response to SAM Logon</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>machine name</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>user name - workstation trust account</p></dd><dt><span class="term">UNISTR</span></dt><dd><p>domain name </p></dd><dt><span class="term">UINT32</span></dt><dd><p>NTversion</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LMNTtoken</p></dd><dt><span class="term">UINT16</span></dt><dd><p>LM20token</p></dd></dl></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2875360"></a>SRVSVC Transact Named Pipe</h2></div></div><div></div></div><p>Defines for this pipe, identifying the query are:</p><div class="variablelist"><dl><dt><span class="term">Net Share Enum</span></dt><dd><p>0x0f</p></dd><dt><span class="term">Net Server Get Info</span></dt><dd><p>0x15</p></dd></dl></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2875405"></a>Net Share Enum</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: share level and switch value in the response are presumably the same as those in the request.</em></span></p><p><span class="emphasis"><em>Note: cifsrap2.txt (section 5) may be of limited assistance here.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875426"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">VOID*</span></dt><dd><p>pointer (to server name?)</p></dd><dt><span class="term">UNISTR2</span></dt><dd><p>server name</p></dd><dt><span class="term">UINT8[]</span></dt><dd><p>padding to get unicode string 4-byte aligned with the start of the SMB header.</p></dd><dt><span class="term">UINT32</span></dt><dd><p>share level</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch value</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SHARE_INFO_1_CTR</p></dd><dt><span class="term">SHARE_INFO_1_CTR</span></dt><dd><p>share info with 0 entries</p></dd><dt><span class="term">UINT32</span></dt><dd><p>preferred maximum length (0xffff ffff)</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875550"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>share level</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch value</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SHARE_INFO_1_CTR</p></dd><dt><span class="term">SHARE_INFO_1_CTR</span></dt><dd><p>share info (only added if share info ptr is non-zero)</p></dd></dl></div><p>return 0 - indicates success</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2875625"></a>Net Server Get Info</h3></div></div><div></div></div><p><span class="emphasis"><em>Note: level is the same value as in the request.</em></span></p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875638"></a>Request</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UNISTR2</span></dt><dd><p>server name</p></dd><dt><span class="term">UINT32</span></dt><dd><p>switch level</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875679"></a>Response</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">UINT32</span></dt><dd><p>switch level</p></dd><dt><span class="term">VOID*</span></dt><dd><p>pointer to SERVER_INFO_101</p></dd><dt><span class="term">SERVER_INFO_101</span></dt><dd><p>server info (only added if server info ptr is non-zero)</p></dd></dl></div><p>return 0 - indicates success</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2875741"></a>Cryptographic side of NT Domain Authentication</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2875749"></a>Definitions</h3></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Add(A1,A2)</span></dt><dd><p>Intel byte ordered addition of corresponding 4 byte words in arrays A1 and A2</p></dd><dt><span class="term">E(K,D)</span></dt><dd><p>DES ECB encryption of 8 byte data D using 7 byte key K</p></dd><dt><span class="term">lmowf()</span></dt><dd><p>Lan man hash</p></dd><dt><span class="term">ntowf()</span></dt><dd><p>NT hash</p></dd><dt><span class="term">PW</span></dt><dd><p>md4(machine_password) == md4(lsadump $machine.acc) ==
pwdump(machine$) (initially) == md4(lmowf(unicode(machine)))
-</p></dd><dt><span class="term">ARC4(K,Lk,D,Ld)</span></dt><dd><p>ARC4 encryption of data D of length Ld with key K of length Lk</p></dd><dt><span class="term">v[m..n(,l)]</span></dt><dd><p>subset of v from bytes m to n, optionally padded with zeroes to length l</p></dd><dt><span class="term">Cred(K,D)</span></dt><dd><p>E(K[7..7,7],E(K[0..6],D)) computes a credential</p></dd><dt><span class="term">Time()</span></dt><dd><p>4 byte current time</p></dd><dt><span class="term">Cc,Cs</span></dt><dd><p>8 byte client and server challenges Rc,Rs: 8 byte client and server credentials</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887631"></a>Protocol</h3></div></div><div></div></div><pre class="programlisting">
+</p></dd><dt><span class="term">ARC4(K,Lk,D,Ld)</span></dt><dd><p>ARC4 encryption of data D of length Ld with key K of length Lk</p></dd><dt><span class="term">v[m..n(,l)]</span></dt><dd><p>subset of v from bytes m to n, optionally padded with zeroes to length l</p></dd><dt><span class="term">Cred(K,D)</span></dt><dd><p>E(K[7..7,7],E(K[0..6],D)) computes a credential</p></dd><dt><span class="term">Time()</span></dt><dd><p>4 byte current time</p></dd><dt><span class="term">Cc,Cs</span></dt><dd><p>8 byte client and server challenges Rc,Rs: 8 byte client and server credentials</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2875911"></a>Protocol</h3></div></div><div></div></div><pre class="programlisting">
C-&gt;S ReqChal,Cc
S-&gt;C Cs
</pre><pre class="programlisting">
@@ -1361,7 +1358,7 @@ S: Ts = Time()
S-&gt;C Cred(Ks,Cred(Ks,Rc+Tc+1)),userinfo(logon script,UID,SIDs,etc)
C: assert(Rs == Cred(Ks,Cred(Rc+Tc+1))
C: Rc = Cred(Ks,Rc+Tc+1)
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887711"></a>Comments</h3></div></div><div></div></div><p>
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876010"></a>Comments</h3></div></div><div></div></div><p>
On first joining the domain the session key could be computed by
anyone listening in on the network as the machine password has a well
known value. Until the machine is rebooted it will use this session
@@ -1382,30 +1379,30 @@ returned by the server.
The password OWFs should NOT be sent over the network reversibly
encrypted. They should be sent using ARC4(Ks,md4(owf)) with the server
computing the same function using the owf values in the SAM.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887760"></a>SIDs and RIDs</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876057"></a>SIDs and RIDs</h2></div></div><div></div></div><p>
SIDs and RIDs are well documented elsewhere.
</p><p>
A SID is an NT Security ID (see DOM_SID structure). They are of the form:
</p><table class="simplelist" border="0" summary="Simple list"><tr><td>revision-NN-SubAuth1-SubAuth2-SubAuth3... </td></tr><tr><td>revision-0xNNNNNNNNNNNN-SubAuth1-SubAuth2-SubAuth3...</td></tr></table><p>
currently, the SID revision is 1.
The Sub-Authorities are known as Relative IDs (RIDs).
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887800"></a>Well-known SIDs</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887807"></a>Universal well-known SIDs</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Null SID</span></dt><dd><p>S-1-0-0</p></dd><dt><span class="term">World</span></dt><dd><p>S-1-1-0</p></dd><dt><span class="term">Local</span></dt><dd><p>S-1-2-0</p></dd><dt><span class="term">Creator Owner ID</span></dt><dd><p>S-1-3-0</p></dd><dt><span class="term">Creator Group ID</span></dt><dd><p>S-1-3-1</p></dd><dt><span class="term">Creator Owner Server ID</span></dt><dd><p>S-1-3-2</p></dd><dt><span class="term">Creator Group Server ID</span></dt><dd><p>S-1-3-3</p></dd><dt><span class="term">(Non-unique IDs)</span></dt><dd><p>S-1-4</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887933"></a>NT well-known SIDs</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">NT Authority</span></dt><dd><p>S-1-5</p></dd><dt><span class="term">Dialup</span></dt><dd><p>S-1-5-1</p></dd><dt><span class="term">Network</span></dt><dd><p>S-1-5-2</p></dd><dt><span class="term">Batch</span></dt><dd><p>S-1-5-3</p></dd><dt><span class="term">Interactive</span></dt><dd><p>S-1-5-4</p></dd><dt><span class="term">Service</span></dt><dd><p>S-1-5-6</p></dd><dt><span class="term">AnonymousLogon(aka null logon session)</span></dt><dd><p>S-1-5-7</p></dd><dt><span class="term">Proxy</span></dt><dd><p>S-1-5-8</p></dd><dt><span class="term">ServerLogon(aka domain controller account)</span></dt><dd><p>S-1-5-8</p></dd><dt><span class="term">(Logon IDs)</span></dt><dd><p>S-1-5-5-X-Y</p></dd><dt><span class="term">(NT non-unique IDs)</span></dt><dd><p>S-1-5-0x15-...</p></dd><dt><span class="term">(Built-in domain)</span></dt><dd><p>s-1-5-0x20</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888114"></a>Well-known RIDS</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876097"></a>Well-known SIDs</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2876104"></a>Universal well-known SIDs</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Null SID</span></dt><dd><p>S-1-0-0</p></dd><dt><span class="term">World</span></dt><dd><p>S-1-1-0</p></dd><dt><span class="term">Local</span></dt><dd><p>S-1-2-0</p></dd><dt><span class="term">Creator Owner ID</span></dt><dd><p>S-1-3-0</p></dd><dt><span class="term">Creator Group ID</span></dt><dd><p>S-1-3-1</p></dd><dt><span class="term">Creator Owner Server ID</span></dt><dd><p>S-1-3-2</p></dd><dt><span class="term">Creator Group Server ID</span></dt><dd><p>S-1-3-3</p></dd><dt><span class="term">(Non-unique IDs)</span></dt><dd><p>S-1-4</p></dd></dl></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2876231"></a>NT well-known SIDs</h4></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">NT Authority</span></dt><dd><p>S-1-5</p></dd><dt><span class="term">Dialup</span></dt><dd><p>S-1-5-1</p></dd><dt><span class="term">Network</span></dt><dd><p>S-1-5-2</p></dd><dt><span class="term">Batch</span></dt><dd><p>S-1-5-3</p></dd><dt><span class="term">Interactive</span></dt><dd><p>S-1-5-4</p></dd><dt><span class="term">Service</span></dt><dd><p>S-1-5-6</p></dd><dt><span class="term">AnonymousLogon(aka null logon session)</span></dt><dd><p>S-1-5-7</p></dd><dt><span class="term">Proxy</span></dt><dd><p>S-1-5-8</p></dd><dt><span class="term">ServerLogon(aka domain controller account)</span></dt><dd><p>S-1-5-8</p></dd><dt><span class="term">(Logon IDs)</span></dt><dd><p>S-1-5-5-X-Y</p></dd><dt><span class="term">(NT non-unique IDs)</span></dt><dd><p>S-1-5-0x15-...</p></dd><dt><span class="term">(Built-in domain)</span></dt><dd><p>s-1-5-0x20</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876412"></a>Well-known RIDS</h3></div></div><div></div></div><p>
A RID is a sub-authority value, as part of either a SID, or in the case
of Group RIDs, part of the DOM_GID structure, in the USER_INFO_1
structure, in the LSA SAM Logon response.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888129"></a>Well-known RID users</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b>DOMAIN_USER_RID_ADMIN</p><p><b>????: </b>0x0000</p><p><b>RID: </b>01F4</p><p><b>Groupname: </b>DOMAIN_USER_RID_GUEST</p><p><b>????: </b>0x0000</p><p><b>RID: </b>01F5</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888177"></a>Well-known RID groups</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b> DOMAIN_GROUP_RID_ADMINS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0200</p><p><b>Groupname: </b> DOMAIN_GROUP_RID_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0201</p><p><b>Groupname: </b> DOMAIN_GROUP_RID_GUESTS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0202</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888237"></a>Well-known RID aliases</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b> DOMAIN_ALIAS_RID_ADMINS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0220</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0221</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_GUESTS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0222</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_POWER_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0223</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_ACCOUNT_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0224</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_SYSTEM_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0225</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_PRINT_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0226</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_BACKUP_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0227</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_REPLICATOR</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0228</p></div></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter11.Samba Printing Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="surname">Carter</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2889659">Abstract</a></dt><dt><a href="#id2889674">
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2876426"></a>Well-known RID users</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b>DOMAIN_USER_RID_ADMIN</p><p><b>????: </b>0x0000</p><p><b>RID: </b>01F4</p><p><b>Groupname: </b>DOMAIN_USER_RID_GUEST</p><p><b>????: </b>0x0000</p><p><b>RID: </b>01F5</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2876474"></a>Well-known RID groups</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b> DOMAIN_GROUP_RID_ADMINS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0200</p><p><b>Groupname: </b> DOMAIN_GROUP_RID_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0201</p><p><b>Groupname: </b> DOMAIN_GROUP_RID_GUESTS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0202</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2876534"></a>Well-known RID aliases</h4></div></div><div></div></div><div class="segmentedlist"><p><b>Groupname: </b> DOMAIN_ALIAS_RID_ADMINS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0220</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0221</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_GUESTS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0222</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_POWER_USERS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0223</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_ACCOUNT_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0224</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_SYSTEM_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0225</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_PRINT_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0226</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_BACKUP_OPS</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0227</p><p><b>Groupname: </b> DOMAIN_ALIAS_RID_REPLICATOR</p><p><b>????: </b>0x0000</p><p><b>RID: </b>0228</p></div></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter11.Samba Printing Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="surname">Carter</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2876697">Abstract</a></dt><dt><a href="#id2876713">
Printing Interface to Various Back ends
-</a></dt><dt><a href="#id2889766">
+</a></dt><dt><a href="#id2876809">
Print Queue TDB's
-</a></dt><dt><a href="#id2888559">
+</a></dt><dt><a href="#id2877031">
ChangeID and Client Caching of Printer Information
-</a></dt><dt><a href="#id2888572">
+</a></dt><dt><a href="#id2877045">
Windows NT/2K Printer Change Notify
-</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889659"></a>Abstract</h2></div></div><div></div></div><p>
+</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876697"></a>Abstract</h2></div></div><div></div></div><p>
The purpose of this document is to provide some insight into
Samba's printing functionality and also to describe the semantics
of certain features of Windows client printing.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889674"></a>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876713"></a>
Printing Interface to Various Back ends
</h2></div></div><div></div></div><p>
Samba uses a table of function pointers to seven functions. The
@@ -1416,7 +1413,7 @@ Currently there are only two printing back end implementations
defined.
</p><div class="itemizedlist"><ul type="disc"><li><p>a generic set of functions for working with standard UNIX
printing subsystems</p></li><li><p>a set of CUPS specific functions (this is only enabled if
- the CUPS libraries were located at compile time).</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889766"></a>
+ the CUPS libraries were located at compile time).</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876809"></a>
Print Queue TDB's
</h2></div></div><div></div></div><p>
Samba provides periodic caching of the output from the &quot;lpq command&quot;
@@ -1505,11 +1502,11 @@ and the job has the printer's device mode associated with it by default.
Only non-default Device Mode are stored with print jobs in the print
queue TDB. Otherwise, the Device Mode is obtained from the printer
object when the client issues a GetJob(level == 2) request.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888559"></a>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877031"></a>
ChangeID and Client Caching of Printer Information
</h2></div></div><div></div></div><p>
[To be filled in later]
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888572"></a>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877045"></a>
Windows NT/2K Printer Change Notify
</h2></div></div><div></div></div><p>
When working with Windows NT+ clients, it is possible for a
@@ -1607,7 +1604,7 @@ handle for notification. Samba currently uses the snum of
the printer for this which can break if the list of services
has been modified since the notification handle was registered.</p></li><li><p>The size is either (a) the string length in UNICODE for strings,
(b) the size in bytes of the security descriptor, or (c) 0 for
-data values.</p></li></ul></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="wins"></a>Chapter12.Samba WINS Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="surname">Carter</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2889228">WINS Failover</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889228"></a>WINS Failover</h2></div></div><div></div></div><p>
+data values.</p></li></ul></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="wins"></a>Chapter12.Samba WINS Internals</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="surname">Carter</span></h3></div></div><div><p class="pubdate">October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2877426">WINS Failover</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877426"></a>WINS Failover</h2></div></div><div></div></div><p>
The current Samba codebase possesses the capability to use groups of WINS
servers that share a common namespace for NetBIOS name registration and
resolution. The formal parameter syntax is
@@ -1649,7 +1646,7 @@ If a timeout occurs when querying a specific WINS server, that server is marked
prevent further timeouts and the next server in the WINS group is contacted. Once marked as
dead, Samba will not attempt to contact that server for name registration/resolution queries
for a period of 10 minutes.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sam"></a>Chapter13.The Upcoming SAM System</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Bartlett</span></h3></div></div><div><p class="pubdate">1 October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2888904">Security in the 'new SAM'</a></dt><dt><a href="#id2889032">Standalone from UNIX</a></dt><dt><a href="#id2889059">Handles and Races in the new SAM</a></dt><dt><a href="#id2889127">Layers</a></dt><dd><dl><dt><a href="#id2889134">Application</a></dt><dt><a href="#id2889150">SAM Interface</a></dt><dt><a href="#id2889176">SAM Modules</a></dt></dl></dd><dt><a href="#id2889198">SAM Modules</a></dt><dd><dl><dt><a href="#id2889205">Special Module: sam_passdb</a></dt><dt><a href="#id2890449">sam_ads</a></dt></dl></dd><dt><a href="#id2890478">Memory Management</a></dt><dt><a href="#id2890565">Testing</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888904"></a>Security in the 'new SAM'</h2></div></div><div></div></div><p>One of the biggest problems with passdb is it's implementation of
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="sam"></a>Chapter13.The Upcoming SAM System</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Bartlett</span></h3></div></div><div><p class="pubdate">1 October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2877582">Security in the 'new SAM'</a></dt><dt><a href="#id2877712">Standalone from UNIX</a></dt><dt><a href="#id2877739">Handles and Races in the new SAM</a></dt><dt><a href="#id2877808">Layers</a></dt><dd><dl><dt><a href="#id2877815">Application</a></dt><dt><a href="#id2877831">SAM Interface</a></dt><dt><a href="#id2877859">SAM Modules</a></dt></dl></dd><dt><a href="#id2877880">SAM Modules</a></dt><dd><dl><dt><a href="#id2877888">Special Module: sam_passdb</a></dt><dt><a href="#id2877906">sam_ads</a></dt></dl></dd><dt><a href="#id2877935">Memory Management</a></dt><dt><a href="#id2878035">Testing</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877582"></a>Security in the 'new SAM'</h2></div></div><div></div></div><p>One of the biggest problems with passdb is it's implementation of
'security'. Access control is on a 'are you root at the moment' basis,
and it has no concept of NT ACLs. Things like ldapsam had to add
'magic' 'are you root' checks.</p><p>We took this very seriously when we started work, and the new structure
@@ -1709,7 +1706,7 @@ actual data store (like the LDAP server).
</p><p>
Finally, we have generic get_sec_desc() and set_sec_desc() routines to
allow external ACL manipulation. These do lookups based on SID.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889032"></a>Standalone from UNIX</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877712"></a>Standalone from UNIX</h2></div></div><div></div></div><p>
One of the primary tenants of the 'new SAM' is that it would not attempt
to deal with 'what unix id for that'. This would be left to the 'SMS'
(Sid Mapping System') or SID farm, and probably administered via
@@ -1719,7 +1716,7 @@ Accounts not preexisting in unix would be served up via winbind.
</p><p>
This is an *optional* part, and my preferred end-game. We have a fare
way to go before things like winbind up to it however.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889059"></a>Handles and Races in the new SAM</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877739"></a>Handles and Races in the new SAM</h2></div></div><div></div></div><p>
One of the things that the 'new SAM' work has tried to face is both
compatibility with existing code, and a closer alignment to the SAMR
interface. I consider SAMR to be a 'primary customer' to the this work,
@@ -1744,11 +1741,11 @@ have *really* changed.
'conflicting' updates: Currently we don't deal with this (in passdb
or the new sam stuff), but the design is sufficiently flexible to 'deny'
a second update. I don't foresee locking records however.
-</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889127"></a>Layers</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889134"></a>Application</h3></div></div><div></div></div><p>
+</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877808"></a>Layers</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877815"></a>Application</h3></div></div><div></div></div><p>
This is where smbd, samtest and whatever end-user replacement we have
for pdbedit sits. They use only the SAM interface, and do not get
'special knowledge' of what is below them.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889150"></a>SAM Interface</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877831"></a>SAM Interface</h3></div></div><div></div></div><p>
This level 'owns' the various handle structures, the get/set routines on
those structures and provides the public interface. The application
layer may initialize a 'context' to be passed to all interface routines,
@@ -1759,7 +1756,7 @@ abstraction to the modules below, and arrange for their initial loading.
</p><p>
We could possibly add ACL checking at this layer, to avoid discrepancies
in implementation modules.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889176"></a>SAM Modules</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877859"></a>SAM Modules</h3></div></div><div></div></div><p>
These do not communicate with the application directly, only by setting
values in the handles, and receiving requests from the interface. These
modules are responsible for translating values from the handle's
@@ -1767,13 +1764,13 @@ modules are responsible for translating values from the handle's
to 'know' things like it's own domain SID, domain name, and any other
state attached to the SAM. Simpler modules may call back to some helper
routine.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889198"></a>SAM Modules</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889205"></a>Special Module: sam_passdb</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877880"></a>SAM Modules</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877888"></a>Special Module: sam_passdb</h3></div></div><div></div></div><p>
In order for there to be a smooth transition, kai is writing a module
that reads existing passdb backends, and translates them into SAM
replies. (Also pulling data from the account policy DB etc). We also
intend to write a module that does the reverse - gives the SAM a passdb
interface.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890449"></a>sam_ads</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877906"></a>sam_ads</h3></div></div><div></div></div><p>
This is the first of the SAM modules to be committed to the tree -
mainly because I needed to coordinate work with metze (who authored most
of it). This module aims to use Samba's libads code to provide an
@@ -1785,7 +1782,7 @@ the construction of an Samba AD DC.
</p><p>
We also intend to construct a Samba 2.2/3.0 compatible ldap module,
again using libads code.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890478"></a>Memory Management</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877935"></a>Memory Management</h2></div></div><div></div></div><p>
The 'new SAM' development effort also concerned itself with getting a
sane implementation of memory management. It was decided that we would
be (as much as possible) talloc based, using an 'internal talloc
@@ -1814,7 +1811,7 @@ NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID
NTSTATUS sam_enum_accounts(const SAM_CONTEXT *context, const
NT_USER_TOKEN *access_token, const DOM_SID *domainsid, uint16 acct_ctrl,
int32 *account_count, SAM_ACCOUNT_ENUM **accounts)
-</pre></div><div xmlns:ns3="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890565"></a>Testing</h2></div></div><div></div></div><p>
+</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878035"></a>Testing</h2></div></div><div></div></div><p>
Testing is vital in any piece of software, and Samba is certainly no
exception. In designing this new subsystem, we have taken care to ensure
it is easily tested, independent of outside protocols.
@@ -1831,25 +1828,25 @@ already proved vital in testing. I expect SAM module authors will find
it particularly valuable.
</p><p>Example useage:</p><p><tt class="prompt">$</tt> <b class="command">bin/samtest</b></p><pre class="programlisting">
&gt; context ads:ldap://192.168.1.96
-</pre><ns3:p>
+</pre><p>
(this loads a new context, using the new ADS module. The parameter is
the 'location' of the ldap server)
-</ns3:p><pre class="programlisting">
+</p><pre class="programlisting">
&gt; lookup_name DOMAIN abartlet
-</pre><ns3:p>
+</pre><p>
(returns a sid).
-</ns3:p><p>
+</p><p>
Because the 'new SAM' is NT ACL based, there will be a command to
specify an arbitrary NT ACL, but for now it uses 'system' by default.
</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="pwencrypt"></a>Chapter14.LanMan and NT Password Encryption</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><br>
<tt class="email">&lt;<a href="mailto:samba@samba.org">samba@samba.org</a>&gt;</tt><br>
- </p></div></div></div></div><div><p class="pubdate">19 Apr 1999</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2891295">Introduction</a></dt><dt><a href="#id2891319">How does it work?</a></dt><dt><a href="#id2891414">The smbpasswd file</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891295"></a>Introduction</h2></div></div><div></div></div><p>With the development of LanManager and Windows NT
+ </p></div></div></div></div><div><p class="pubdate">19 Apr 1999</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2878174">Introduction</a></dt><dt><a href="#id2878193">How does it work?</a></dt><dt><a href="#id2878320">The smbpasswd file</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878174"></a>Introduction</h2></div></div><div></div></div><p>With the development of LanManager and Windows NT
compatible password encryption for Samba, it is now able
to validate user connections in exactly the same way as
a LanManager or Windows NT server.</p><p>This document describes how the SMB password encryption
algorithm works and what issues there are in choosing whether
you want to use it. You should read it carefully, especially
- the part about security and the &quot;PROS and CONS&quot; section.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891319"></a>How does it work?</h2></div></div><div></div></div><p>LanManager encryption is somewhat similar to UNIX
+ the part about security and the &quot;PROS and CONS&quot; section.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878193"></a>How does it work?</h2></div></div><div></div></div><p>LanManager encryption is somewhat similar to UNIX
password encryption. The server uses a file containing a
hashed value of a user's password. This is created by taking
the user's plaintext password, capitalising it, and either
@@ -1886,7 +1883,7 @@ specify an arbitrary NT ACL, but for now it uses 'system' by default.
know the correct password and is denied access.</p><p>Note that the Samba server never knows or stores the cleartext
of the user's password - just the 16 byte hashed values derived from
it. Also note that the cleartext password or 16 byte hashed values
- are never transmitted over the network - thus increasing security.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891414"></a>The smbpasswd file</h2></div></div><div></div></div><a name="SMBPASSWDFILEFORMAT"></a><p>In order for Samba to participate in the above protocol
+ are never transmitted over the network - thus increasing security.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878320"></a>The smbpasswd file</h2></div></div><div></div></div><a name="SMBPASSWDFILEFORMAT"></a><p>In order for Samba to participate in the above protocol
it must be able to look up the 16 byte hashed values given a user name.
Unfortunately, as the UNIX password value is also a one way hash
function (ie. it is impossible to retrieve the cleartext of the user's
@@ -1943,10 +1940,10 @@ bob:100:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:
to enable this on your server.</p><p><span class="emphasis"><em>Note : </em></span>This file should be protected very
carefully. Anyone with access to this file can (with enough knowledge of
the protocols) gain access to your SMB server. The file is thus more
- sensitive than a normal unix <tt class="filename">/etc/passwd</tt> file.</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="modules"></a>Chapter15.Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> 19 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2893198">Advantages</a></dt><dt><a href="#id2893242">Loading modules</a></dt><dd><dl><dt><a href="#id2893272">Static modules</a></dt><dt><a href="#id2893313">Shared modules</a></dt></dl></dd><dt><a href="#id2893342">Writing modules</a></dt><dd><dl><dt><a href="#id2893402">Static/Shared selection in configure.in</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893198"></a>Advantages</h2></div></div><div></div></div><p>
+ sensitive than a normal unix <tt class="filename">/etc/passwd</tt> file.</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="modules"></a>Chapter15.Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> 19 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2878688">Advantages</a></dt><dt><a href="#id2878737">Loading modules</a></dt><dd><dl><dt><a href="#id2878771">Static modules</a></dt><dt><a href="#id2878811">Shared modules</a></dt></dl></dd><dt><a href="#id2878839">Writing modules</a></dt><dd><dl><dt><a href="#id2878904">Static/Shared selection in configure.in</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878688"></a>Advantages</h2></div></div><div></div></div><p>
The new modules system has the following advantages:
</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Transparent loading of static and shared modules (no need
-for a subsystem to know about modules)</td></tr><tr><td>Simple selection between shared and static modules at configure time</td></tr><tr><td>&quot;preload modules&quot; option for increasing performance for stable modules</td></tr><tr><td>No nasty #define stuff anymore</td></tr><tr><td>All backends are available as plugin now (including pdb_ldap and pdb_tdb)</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893242"></a>Loading modules</h2></div></div><div></div></div><p>
+for a subsystem to know about modules)</td></tr><tr><td>Simple selection between shared and static modules at configure time</td></tr><tr><td>&quot;preload modules&quot; option for increasing performance for stable modules</td></tr><tr><td>No nasty #define stuff anymore</td></tr><tr><td>All backends are available as plugin now (including pdb_ldap and pdb_tdb)</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878737"></a>Loading modules</h2></div></div><div></div></div><p>
Some subsystems in samba use different backends. These backends can be
either statically linked in to samba or available as a plugin. A subsystem
should have a function that allows a module to register itself. For example,
@@ -1956,7 +1953,7 @@ NTSTATUS smb_register_passdb(int version, const char *name, pdb_init_function in
</pre><p>
This function will be called by the initialisation function of the module to
register itself.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893272"></a>Static modules</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878771"></a>Static modules</h3></div></div><div></div></div><p>
The modules system compiles a list of initialisation functions for the
static modules of each subsystem. This is a define. For example,
it is here currently (from <tt class="filename">include/config.h</tt>):
@@ -1966,7 +1963,7 @@ it is here currently (from <tt class="filename">include/config.h</tt>):
</pre><p>
These functions should be called before the subsystem is used. That
should be done when the subsystem is initialised or first used.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893313"></a>Shared modules</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878811"></a>Shared modules</h3></div></div><div></div></div><p>
If a subsystem needs a certain backend, it should check if it has
already been registered. If the backend hasn't been registered already,
the subsystem should call smb_probe_module(char *subsystem, char *backend).
@@ -1976,7 +1973,7 @@ is a slash, smb_probe_module() tries to load the module from the
absolute path specified in 'backend'.
</p><p>After smb_probe_module() has been executed, the subsystem
should check again if the module has been registered.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893342"></a>Writing modules</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878839"></a>Writing modules</h2></div></div><div></div></div><p>
Each module has an initialisation function. For modules that are
included with samba this name is '<i class="replaceable"><tt>subsystem</tt></i>_<i class="replaceable"><tt>backend</tt></i>_init'. For external modules (that will never be built-in, but only available as a module) this name is always 'init_module'. (In the case of modules included with samba, the configure system will add a #define subsystem_backend_init() init_module()).
The prototype for these functions is:
@@ -1991,7 +1988,7 @@ smb_register_passdb(PASSDB_INTERFACE_VERSION, &quot;ldapsam&quot;, pdb_init_ldap
smb_register_passdb(PASSDB_INTERFACE_VERSION, &quot;ldapsam_nua&quot;, pdb_init_ldapsam_nua);
return NT_STATUS_OK;
}
-</pre><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893402"></a>Static/Shared selection in configure.in</h3></div></div><div></div></div><p>
+</pre><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878904"></a>Static/Shared selection in configure.in</h3></div></div><div></div></div><p>
Some macros in configure.in generate the various defines and substs that
are necessary for the system to work correct. All modules that should
be built by default have to be added to the variable 'default_modules'.
@@ -2001,22 +1998,24 @@ On the bottom of configure.in, SMB_MODULE() should be called
for each module and SMB_SUBSYSTEM() for each subsystem.
</p><p>Syntax:</p><pre class="programlisting">
SMB_MODULE(<i class="replaceable"><tt>subsystem</tt></i>_<i class="replaceable"><tt>backend</tt></i>, <i class="replaceable"><tt>object files</tt></i>, <i class="replaceable"><tt>plugin name</tt></i>, <i class="replaceable"><tt>subsystem name</tt></i>, <i class="replaceable"><tt>static_action</tt></i>, <i class="replaceable"><tt>shared_action</tt></i>)
-SMB_SUBSYSTEM(<i class="replaceable"><tt>subsystem</tt></i>)
-</pre><p>Also, make sure to add the correct directives to
-<tt class="filename">Makefile.in</tt>. <i class="replaceable"><tt>@SUBSYSTEM_STATIC@</tt></i>
-will be replaced with a list of objects files of the modules that need to
-be linked in statically. <i class="replaceable"><tt>@SUBSYSTEM_MODULES@</tt></i> will
+SMB_SUBSYSTEM(<i class="replaceable"><tt>subsystem</tt></i>,<i class="replaceable"><tt>depfile</tt></i>)
+</pre><p>The depfile for a certain subsystem is the file that calls the
+initialisation functions for the statically built in modules.</p><p>
+<i class="replaceable"><tt>@SUBSYSTEM_MODULES@</tt></i> in Makefile.in will
be replaced with the names of the plugins to build.
</p><p>You must make sure all .c files that contain defines that can
be changed by ./configure are rebuilded in the 'modules_clean' make target.
Practically, this means all c files that contain <b class="command">static_init_subsystem;</b> calls need to be rebuilded.
-</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="rpc-plugin"></a>Chapter16.RPC Pluggable Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Anthony</span> <span class="surname">Liguori</span></h3><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:aliguor@us.ibm.com">aliguor@us.ibm.com</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">January 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2893560">About</a></dt><dt><a href="#id2893579">General Overview</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893560"></a>About</h2></div></div><div></div></div><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+There currently also is a configure.in command called SMB_MODULE_PROVIVES().
+This is used for modules that register multiple things. It should not
+be used as probing will most likely disappear in the future.</p></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="rpc-plugin"></a>Chapter16.RPC Pluggable Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Anthony</span> <span class="surname">Liguori</span></h3><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:aliguor@us.ibm.com">aliguor@us.ibm.com</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">January 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2879098">About</a></dt><dt><a href="#id2879116">General Overview</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2879098"></a>About</h2></div></div><div></div></div><p>
This document describes how to make use the new RPC Pluggable Modules features
of Samba 3.0. This architecture was added to increase the maintainability of
Samba allowing RPC Pipes to be worked on separately from the main CVS branch.
The RPM architecture will also allow third-party vendors to add functionality
to Samba through plug-ins.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893579"></a>General Overview</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2879116"></a>General Overview</h2></div></div><div></div></div><p>
When an RPC call is sent to smbd, smbd tries to load a shared library by the
name <tt class="filename">librpc_&lt;pipename&gt;.so</tt> to handle the call if
it doesn't know how to handle the call internally. For instance, LSA calls
@@ -2033,7 +2032,7 @@ NTSTATUS rpc_pipe_register_commands(int version, const char *clnt, const char *s
argument.</p></dd><dt><span class="term">clnt</span></dt><dd><p>the Client name of the named pipe</p></dd><dt><span class="term">srv</span></dt><dd><p>the Server name of the named pipe</p></dd><dt><span class="term">cmds</span></dt><dd><p>a list of api_structs that map RPC ordinal numbers to function calls</p></dd><dt><span class="term">size</span></dt><dd><p>the number of api_structs contained in cmds</p></dd></dl></div><p>
See rpc_server/srv_reg.c and rpc_server/srv_reg_nt.c for a small example of
how to use this library.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="vfs"></a>Chapter17.VFS Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:ab@samba.org">ab@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:metze@metzemix.de">metze@metzemix.de</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> 27 May 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2895821">The Samba (Posix) VFS layer</a></dt><dd><dl><dt><a href="#id2895828">The general interface</a></dt><dt><a href="#id2895928">Possible VFS operation layers</a></dt></dl></dd><dt><a href="#id2895992">The Interaction between the Samba VFS subsystem and the modules</a></dt><dd><dl><dt><a href="#id2896000">Initialization and registration</a></dt><dt><a href="#id2892061">How the Modules handle per connection data</a></dt></dl></dd><dt><a href="#id2892280">Upgrading to the New VFS Interface</a></dt><dd><dl><dt><a href="#id2893883">Upgrading from 2.2.* and 3.0aplha modules</a></dt></dl></dd><dt><a href="#id2894294">Some Notes</a></dt><dd><dl><dt><a href="#id2894300">Implement TRANSPARENT functions</a></dt><dt><a href="#id2894324">Implement OPAQUE functions</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895821"></a>The Samba (Posix) VFS layer</h2></div></div><div></div></div><div xmlns:ns4="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895828"></a>The general interface</h3></div></div><div></div></div><p>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="vfs"></a>Chapter17.VFS Modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:ab@samba.org">ab@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:metze@metzemix.de">metze@metzemix.de</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> 27 May 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2879326">The Samba (Posix) VFS layer</a></dt><dd><dl><dt><a href="#id2879332">The general interface</a></dt><dt><a href="#id2879448">Possible VFS operation layers</a></dt></dl></dd><dt><a href="#id2879520">The Interaction between the Samba VFS subsystem and the modules</a></dt><dd><dl><dt><a href="#id2879528">Initialization and registration</a></dt><dt><a href="#id2879720">How the Modules handle per connection data</a></dt></dl></dd><dt><a href="#id2879963">Upgrading to the New VFS Interface</a></dt><dd><dl><dt><a href="#id2879970">Upgrading from 2.2.* and 3.0aplha modules</a></dt></dl></dd><dt><a href="#id2880501">Some Notes</a></dt><dd><dl><dt><a href="#id2880508">Implement TRANSPARENT functions</a></dt><dt><a href="#id2880533">Implement OPAQUE functions</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2879326"></a>The Samba (Posix) VFS layer</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879332"></a>The general interface</h3></div></div><div></div></div><p>
Each VFS operation has a vfs_op_type, a function pointer and a handle pointer in the
struct vfs_ops and tree macros to make it easier to call the operations.
(Take a look at <tt class="filename">include/vfs.h</tt> and <tt class="filename">include/vfs_macros.h</tt>.)
@@ -2056,7 +2055,7 @@ typedef enum _vfs_op_type {
SMB_VFS_OP_LAST
} vfs_op_type;
-</pre><ns4:p>This struct contains the function and handle pointers for all operations.</ns4:p><pre class="programlisting">
+</pre><p>This struct contains the function and handle pointers for all operations.</p><pre class="programlisting">
struct vfs_ops {
struct vfs_fn_pointers {
...
@@ -2098,10 +2097,10 @@ struct vfs_ops {
...
} handles;
};
-</pre><ns4:p>
+</pre><p>
This macros SHOULD be used to call any vfs operation.
DO NOT ACCESS conn-&gt;vfs.ops.* directly !!!
-</ns4:p><pre class="programlisting">
+</p><pre class="programlisting">
...
/* File operations */
@@ -2129,7 +2128,7 @@ DO NOT ACCESS conn-&gt;vfs.ops.* directly !!!
(tofd), (fsp), (fromfd), (header), (offset), (count)))
...
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895928"></a>Possible VFS operation layers</h3></div></div><div></div></div><p>
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879448"></a>Possible VFS operation layers</h3></div></div><div></div></div><p>
These values are used by the VFS subsystem when building the conn-&gt;vfs
and conn-&gt;vfs_opaque structs for a connection with multiple VFS modules.
Internally, Samba differentiates only opaque and transparent layers at this process.
@@ -2158,19 +2157,19 @@ typedef enum _vfs_op_layer {
SMB_VFS_LAYER_SCANNER /* - Checks data and possibly initiates additional */
/* file activity like logging to files _inside_ samba VFS */
} vfs_op_layer;
-</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895992"></a>The Interaction between the Samba VFS subsystem and the modules</h2></div></div><div></div></div><div xmlns:ns5="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896000"></a>Initialization and registration</h3></div></div><div></div></div><ns5:p>
+</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2879520"></a>The Interaction between the Samba VFS subsystem and the modules</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879528"></a>Initialization and registration</h3></div></div><div></div></div><p>
As each Samba module a VFS module should have a
-</ns5:p><pre class="programlisting">NTSTATUS vfs_example_init(void);</pre><ns5:p> function if it's staticly linked to samba or
-</ns5:p><pre class="programlisting">NTSTATUS init_module(void);</pre><ns5:p> function if it's a shared module.
-</ns5:p><p>
+</p><pre class="programlisting">NTSTATUS vfs_example_init(void);</pre><p> function if it's staticly linked to samba or
+</p><pre class="programlisting">NTSTATUS init_module(void);</pre><p> function if it's a shared module.
+</p><p>
This should be the only non static function inside the module.
Global variables should also be static!
-</p><ns5:p>
+</p><p>
The module should register its functions via the
-</ns5:p><pre class="programlisting">
+</p><pre class="programlisting">
NTSTATUS smb_register_vfs(int version, const char *name, vfs_op_tuple *vfs_op_tuples);
-</pre><ns5:p> function.
-</ns5:p><div class="variablelist"><dl><dt><span class="term">version</span></dt><dd><p>should be filled with SMB_VFS_INTERFACE_VERSION</p></dd><dt><span class="term">name</span></dt><dd><p>this is the name witch can be listed in the
+</pre><p> function.
+</p><div class="variablelist"><dl><dt><span class="term">version</span></dt><dd><p>should be filled with SMB_VFS_INTERFACE_VERSION</p></dd><dt><span class="term">name</span></dt><dd><p>this is the name witch can be listed in the
<b class="command">vfs objects</b> parameter to use this module.</p></dd><dt><span class="term">vfs_op_tuples</span></dt><dd><p>
this is an array of vfs_op_tuple's.
(vfs_op_tuples is descripted in details below.)
@@ -2198,7 +2197,7 @@ NTSTATUS init_module(void)
{
return smb_register_vfs(SMB_VFS_INTERFACE_VERSION, &quot;example&quot;, example_op_tuples);
}
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892061"></a>How the Modules handle per connection data</h3></div></div><div></div></div><p>Each VFS function has as first parameter a pointer to the modules vfs_handle_struct.
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879720"></a>How the Modules handle per connection data</h3></div></div><div></div></div><p>Each VFS function has as first parameter a pointer to the modules vfs_handle_struct.
</p><pre class="programlisting">
typedef struct vfs_handle_struct {
struct vfs_handle_struct *next, *prev;
@@ -2299,7 +2298,7 @@ you can set this function pointer to NULL.</p></dd></dl></div><p>Some useful MAC
(handle)-&gt;vfs_next.handles.sendfile,\
(tofd), (fsp), (fromfd), (header), (offset), (count)))
...
-</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892280"></a>Upgrading to the New VFS Interface</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893883"></a>Upgrading from 2.2.* and 3.0aplha modules</h3></div></div><div></div></div><div class="orderedlist"><ol type="1"><li><p>
+</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2879963"></a>Upgrading to the New VFS Interface</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879970"></a>Upgrading from 2.2.* and 3.0aplha modules</h3></div></div><div></div></div><div class="orderedlist"><ol type="1"><li><p>
Add &quot;vfs_handle_struct *handle, &quot; as first parameter to all vfs operation functions.
e.g. example_connect(connection_struct *conn, const char *service, const char *user);
-&gt; example_connect(vfs_handle_struct *handle, connection_struct *conn, const char *service, const char *user);
@@ -2315,12 +2314,12 @@ e.g. smb_vfs_next_connect(conn, service, user);
Add &quot;handle, &quot; as first parameter to all SMB_VFS_NEXT_*() calls.
e.g. SMB_VFS_NEXT_CONNECT(conn, service, user);
-&gt; SMB_VFS_NEXT_CONNECT(handle, conn, service, user);
-</p></li><li xmlns:ns6=""><ns6:p>
+</p></li><li><p>
(Only for 2.2.* modules)
Convert the old struct vfs_ops example_ops to
a vfs_op_tuple example_op_tuples[] array.
e.g.
-</ns6:p><pre class="programlisting">
+</p><pre class="programlisting">
struct vfs_ops example_ops = {
/* Disk operations */
example_connect, /* connect */
@@ -2390,9 +2389,9 @@ struct vfs_ops example_ops = {
NULL, /* sys_acl_free_acl */
NULL /* sys_acl_free_qualifier */
};
-</pre><ns6:p>
+</pre><p>
-&gt;
-</ns6:p><pre class="programlisting">
+</p><pre class="programlisting">
static vfs_op_tuple example_op_tuples[] = {
{SMB_VFS_OP(example_connect), SMB_VFS_OP_CONNECT, SMB_VFS_LAYER_TRANSPARENT},
{SMB_VFS_OP(example_disconnect), SMB_VFS_OP_DISCONNECT, SMB_VFS_LAYER_TRANSPARENT},
@@ -2403,42 +2402,42 @@ static vfs_op_tuple example_op_tuples[] = {
{SMB_VFS_OP(NULL), SMB_VFS_OP_NOOP, SMB_VFS_LAYER_NOOP}
};
-</pre><ns6:p>
-</ns6:p></li><li><p>
+</pre><p>
+</p></li><li><p>
Move the example_op_tuples[] array to the end of the file.
-</p></li><li xmlns:ns7=""><ns7:p>
+</p></li><li><p>
Add the init_module() function at the end of the file.
e.g.
-</ns7:p><pre class="programlisting">
+</p><pre class="programlisting">
NTSTATUS init_module(void)
{
return smb_register_vfs(SMB_VFS_INTERFACE_VERSION,&quot;example&quot;,example_op_tuples);
}
-</pre><ns7:p>
-</ns7:p></li><li xmlns:ns8=""><ns8:p>
+</pre><p>
+</p></li><li><p>
Check if your vfs_init() function does more then just prepare the vfs_ops structs or
remember the struct smb_vfs_handle_struct.
-</ns8:p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT you can remove the vfs_init() function.</td></tr><tr><td>If YES decide if you want to move the code to the example_connect() operation or to the init_module(). And then remove vfs_init().
- e.g. a debug class registration should go into init_module() and the allocation of private data should go to example_connect().</td></tr></table><ns8:p>
-</ns8:p></li><li xmlns:ns9=""><ns9:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT you can remove the vfs_init() function.</td></tr><tr><td>If YES decide if you want to move the code to the example_connect() operation or to the init_module(). And then remove vfs_init().
+ e.g. a debug class registration should go into init_module() and the allocation of private data should go to example_connect().</td></tr></table><p>
+</p></li><li><p>
(Only for 3.0alpha* modules)
Check if your vfs_done() function contains needed code.
-</ns9:p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT you can remove the vfs_done() function.</td></tr><tr><td>If YES decide if you can move the code to the example_disconnect() operation. Otherwise register a SMB_EXIT_EVENT with smb_register_exit_event(); (Described in the <a href="#modules" title="Chapter15.Modules">modules section</a>) And then remove vfs_done(). e.g. the freeing of private data should go to example_disconnect().
-</td></tr></table><ns9:p>
-</ns9:p></li><li xmlns:ns10=""><ns10:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT you can remove the vfs_done() function.</td></tr><tr><td>If YES decide if you can move the code to the example_disconnect() operation. Otherwise register a SMB_EXIT_EVENT with smb_register_exit_event(); (Described in the <a href="#modules" title="Chapter15.Modules">modules section</a>) And then remove vfs_done(). e.g. the freeing of private data should go to example_disconnect().
+</td></tr></table><p>
+</p></li><li><p>
Check if you have any global variables left.
Decide if it wouldn't be better to have this data on a connection basis.
-</ns10:p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT leave them as they are. (e.g. this could be the variable for the private debug class.)</td></tr><tr><td>If YES pack all this data into a struct. You can use handle-&gt;data to point to such a struct on a per connection basis.</td></tr></table><ns10:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td>If NOT leave them as they are. (e.g. this could be the variable for the private debug class.)</td></tr><tr><td>If YES pack all this data into a struct. You can use handle-&gt;data to point to such a struct on a per connection basis.</td></tr></table><p>
e.g. if you have such a struct:
-</ns10:p><pre class="programlisting">
+</p><pre class="programlisting">
struct example_privates {
char *some_string;
int db_connection;
};
-</pre><ns10:p>
+</pre><p>
first way of doing it:
-</ns10:p><pre class="programlisting">
+</p><pre class="programlisting">
static int example_connect(vfs_handle_struct *handle,
connection_struct *conn, const char *service,
const char* user)
@@ -2485,9 +2484,9 @@ static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd)
return SMB_VFS_NEXT_CLOSE(handle, fsp, fd);
}
-</pre><ns10:p>
+</pre><p>
second way of doing it:
-</ns10:p><pre class="programlisting">
+</p><pre class="programlisting">
static void free_example_privates(void **datap)
{
struct example_privates *data = (struct example_privates *)*datap;
@@ -2545,8 +2544,8 @@ static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd)
return SMB_VFS_NEXT_CLOSE(handle, fsp, fd);
}
-</pre><ns10:p>
-</ns10:p></li><li><p>
+</pre><p>
+</p></li><li><p>
To make it easy to build 3rd party modules it would be usefull to provide
configure.in, (configure), install.sh and Makefile.in with the module.
(Take a look at the example in <tt class="filename">examples/VFS</tt>.)
@@ -2559,21 +2558,21 @@ give you more warnings.
The idea is that you can extend this
<tt class="filename">configure.in</tt> and <tt class="filename">Makefile.in</tt> scripts
for your module.
-</p></li><li xmlns:ns11=""><ns11:p>
+</p></li><li><p>
Compiling &amp; Testing...
-</ns11:p><table class="simplelist" border="0" summary="Simple list"><tr><td><b class="userinput"><tt>./configure <tt class="option">--enable-developer</tt></tt></b> ...</td></tr><tr><td><b class="userinput"><tt>make</tt></b></td></tr><tr><td>Try to fix all compiler warnings</td></tr><tr><td><b class="userinput"><tt>make</tt></b></td></tr><tr><td>Testing, Testing, Testing ...</td></tr></table><ns11:p>
-</ns11:p></li></ol></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894294"></a>Some Notes</h2></div></div><div></div></div><div xmlns:ns12="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894300"></a>Implement TRANSPARENT functions</h3></div></div><div></div></div><ns12:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><b class="userinput"><tt>./configure <tt class="option">--enable-developer</tt></tt></b> ...</td></tr><tr><td><b class="userinput"><tt>make</tt></b></td></tr><tr><td>Try to fix all compiler warnings</td></tr><tr><td><b class="userinput"><tt>make</tt></b></td></tr><tr><td>Testing, Testing, Testing ...</td></tr></table><p>
+</p></li></ol></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2880501"></a>Some Notes</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880508"></a>Implement TRANSPARENT functions</h3></div></div><div></div></div><p>
Avoid writing functions like this:
-</ns12:p><pre class="programlisting">
+</p><pre class="programlisting">
static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd)
{
return SMB_VFS_NEXT_CLOSE(handle, fsp, fd);
}
-</pre><ns12:p>
+</pre><p>
Overload only the functions you really need to!
-</ns12:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894324"></a>Implement OPAQUE functions</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880533"></a>Implement OPAQUE functions</h3></div></div><div></div></div><p>
If you want to just implement a better version of a
default samba opaque function
(e.g. like a disk_free() function for a special filesystem)
@@ -2593,12 +2592,12 @@ static int example_rename(vfs_handle_struct *handle, connection_struct *conn,
errno = ENOSYS;
return -1;
}
-</pre></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Packaging"></a>Chapter18.Notes to packagers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2894389">Versioning</a></dt><dt><a href="#id2894418">Modules</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894389"></a>Versioning</h2></div></div><div></div></div><p>Please, please update the version number in
+</pre></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Packaging"></a>Chapter18.Notes to packagers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="surname">Vernooij</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2880600">Versioning</a></dt><dt><a href="#id2880635">Modules</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2880600"></a>Versioning</h2></div></div><div></div></div><p>Please, please update the version number in
<tt class="filename">source/include/version.h</tt> to include the versioning of your package. This makes it easier to distinguish standard samba builds
from custom-build samba builds (distributions often patch packages). For
example, a good version would be: </p><pre class="programlisting">
Version 2.999+3.0.alpha21-5 for Debian
-</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894418"></a>Modules</h2></div></div><div></div></div><p>Samba now has support for building parts of samba as plugins. This
+</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2880635"></a>Modules</h2></div></div><div></div></div><p>Samba now has support for building parts of samba as plugins. This
makes it possible to, for example, put ldap or mysql support in a seperate
package, thus making it possible to have a normal samba package not
depending on ldap or mysql. To build as much parts of samba
@@ -2621,8 +2620,8 @@ as a plugin, run: </p><pre class="programlisting">
e.g. files generated by <b class="userinput"><tt>diff -u</tt></b>.
</p><p>If you are modifying a copy of samba you retrieved from CVS,
you can easily generate a diff file of these changes by running
- <b class="userinput"><tt>cvs diff -u</tt></b>.</p></dd><dt><span class="term">Points of attention when modifying samba source code</span></dt><dd xmlns:ns13=""><ns13:p>
- </ns13:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Don't simply copy code from other places and modify it until it
+ <b class="userinput"><tt>cvs diff -u</tt></b>.</p></dd><dt><span class="term">Points of attention when modifying samba source code</span></dt><dd><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td>Don't simply copy code from other places and modify it until it
works. Code needs to be clean and logical. Duplicate
code is to be avoided.</td></tr><tr><td>Test your patch. It might take a while before one of us looks
at your patch so it will take longer before your patch when your patch
@@ -2630,8 +2629,8 @@ as a plugin, run: </p><pre class="programlisting">
it harder to read, understand and test the patch. You might
also risk not getting a good patch committed because you mixed it
with one that had issues. </td></tr><tr><td>Make sure your patch complies to the samba coding style as
- suggested in the coding-suggestions chapter. </td></tr></table><ns13:p>
- </ns13:p></dd><dt><span class="term">Sending in bugfixes</span></dt><dd><p>Bugfixes to bugs in samba should be submitted to samba's
+ suggested in the coding-suggestions chapter. </td></tr></table><p>
+ </p></dd><dt><span class="term">Sending in bugfixes</span></dt><dd><p>Bugfixes to bugs in samba should be submitted to samba's
<a href="https://bugzilla.samba.org/" target="_top">bugzilla system</a>,
along with a description of the bug.
</p></dd><dt><span class="term">Sending in feature patches</span></dt><dd><p>Send feature patches along with a description of what the
diff --git a/docs/htmldocs/Samba-HOWTO-Collection.html b/docs/htmldocs/Samba-HOWTO-Collection.html
index 44d9954758d..a721fea6f1d 100644
--- a/docs/htmldocs/Samba-HOWTO-Collection.html
+++ b/docs/htmldocs/Samba-HOWTO-Collection.html
@@ -16,14 +16,7 @@ insignificant number of ideas for inclusion (if not content itself) has been obt
from a number of Unofficial HOWTOs - to each such author a big &quot;Thank-you&quot; is also offered.
Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and
application knowledge that is most to be desired by many Samba users and administrators.
-"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-HOWTO-Collection"></a>SAMBA Project Documentation</h1></div><div><div class="authorgroup"><h4 class="editedby">Edited by</h4><h3 class="editor"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><h3 class="editor"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><h3 class="editor"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3></div></div><div><div xmlns:ns1="" class="legalnotice"><p>
-This documentation is distributed under the GNU General Public License (GPL)
-version 2. A copy of the license is included with the Samba source
-distribution. A copy can be found on-line at <a href="http://www.fsf.org/licenses/gpl.txt" target="_top">http://www.fsf.org/licenses/gpl.txt</a>
-</p><ns1:p><b>Attributions.</b>
- </ns1:p><div class="variablelist"><dl><dt><span class="term"><a href="#IntroSMB" title="Chapter1.Introduction to Samba">Introduction to Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>David Lechnyr &lt;<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#install" title="Chapter2.How to Install and Test SAMBA">How to Install and Test SAMBA</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Karl Auer</p></li></ul></div></dd><dt><span class="term"><a href="#FastStart" title="Chapter3.Fast Start for the Impatient">Fast Start for the Impatient</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#ServerType" title="Chapter4.Server Types and Security Modes">Server Types and Security Modes</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#samba-pdc" title="Chapter5.Domain Control">Domain Control</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Gerald Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>David Bannon &lt;<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#samba-bdc" title="Chapter6.Backup Domain Control">Backup Domain Control</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Volker Lendecke &lt;<a href="mailto:Volker.Lendecke@SerNet.DE" target="_top">Volker.Lendecke@SerNet.DE</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#domain-member" title="Chapter7.Domain Membership">Domain Membership</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li><li><p>Gerald Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#StandAloneServer" title="Chapter8.Stand-Alone Servers">Stand-Alone Servers</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#ClientConfig" title="Chapter9.MS Windows Network Configuration Guide">MS Windows Network Configuration Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#NetworkBrowsing" title="Chapter10.Samba / MS Windows Network Browsing Guide">Samba / MS Windows Network Browsing Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#passdb" title="Chapter11.Account Information Databases">Account Information Databases</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>Gerald Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Olivier (lem) Lemaire &lt;<a href="mailto:olem@IDEALX.org" target="_top">olem@IDEALX.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#groupmapping" title="Chapter12.Mapping MS Windows and Unix Groups">Mapping MS Windows and Unix Groups</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jean Franois Micouleau</p></li><li><p>Gerald Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#AccessControls" title="Chapter13.File, Directory and Share Access Controls">File, Directory and Share Access Controls</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#locking" title="Chapter14.File and Record Locking">File and Record Locking</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Eric Roseme &lt;<a href="mailto:eric.roseme@hp.com" target="_top">eric.roseme@hp.com</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#securing-samba" title="Chapter15.Securing Samba">Securing Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#InterdomainTrusts" title="Chapter16.Interdomain Trust Relationships">Interdomain Trust Relationships</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Rafal Szczesniak &lt;<a href="mailto:mimir@samba.org" target="_top">mimir@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#msdfs" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba">Hosting a Microsoft Distributed File System tree on Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Shirish Kalele &lt;<a href="mailto:samba@samba.org" target="_top">samba@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#printing" title="Chapter18.Classical Printing Support">Classical Printing Support</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle &lt;<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>&gt;</p></li><li><p>Gerald Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#CUPS-printing" title="Chapter19.CUPS Printing Support in Samba 3.0">CUPS Printing Support in Samba 3.0</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle &lt;<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>&gt;</p></li><li><p>Ciprian Vizitiu &lt;<a href="mailto:CVizitiu@gbif.org" target="_top">CVizitiu@gbif.org</a>&gt; (drawings) </p></li></ul></div></dd><dt><span class="term"><a href="#VFS" title="Chapter20.Stackable VFS modules">Stackable VFS modules</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Tim Potter</p></li><li><p>Simo Sorce (original vfs_skel README) </p></li><li><p>Alexander Bokovoy (original vfs_netatalk docs) </p></li><li><p>Stefan Metzmacher (Update for multiple modules) </p></li></ul></div></dd><dt><span class="term"><a href="#winbind" title="Chapter21.Integrated Logon Support using Winbind">Integrated Logon Support using Winbind</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Tim Potter &lt;<a href="mailto:tpot@samba.org" target="_top">tpot@samba.org</a>&gt;</p></li><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Naag Mummaneni &lt;<a href="mailto:getnag@rediffmail.com" target="_top">getnag@rediffmail.com</a>&gt;</p></li><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#AdvancedNetworkManagement" title="Chapter22.Advanced Network Management">Advanced Network Management</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#PolicyMgmt" title="Chapter23.System and Account Policies">System and Account Policies</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#ProfileMgmt" title="Chapter24.Desktop Profile Management">Desktop Profile Management</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#pam" title="Chapter25.PAM based Distributed Authentication">PAM based Distributed Authentication</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Stephen Langasek &lt;<a href="mailto:vorlon@netexpress.net" target="_top">vorlon@netexpress.net</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#integrate-ms-networks" title="Chapter26.Integrating MS Windows networks with Samba">Integrating MS Windows networks with Samba</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#unicode" title="Chapter27.Unicode/Charsets">Unicode/Charsets</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>TAKAHASHI Motonobu &lt;<a href="mailto:monyo@home.monyo.com" target="_top">monyo@home.monyo.com</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#Backup" title="Chapter28.Samba Backup Techniques">Samba Backup Techniques</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#SambaHA" title="Chapter29.High Availability Options">High Availability Options</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#upgrading-to-3.0" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0">Upgrading from Samba-2.x to Samba-3.0.0</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#NT4Migration" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC">Migration from NT4 PDC to Samba-3 PDC</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#SWAT" title="Chapter32.SWAT - The Samba Web Administration Tool">SWAT - The Samba Web Administration Tool</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#diagnosis" title="Chapter33.The Samba checklist">The Samba checklist</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#problems" title="Chapter34.Analysing and solving samba problems">Analysing and solving samba problems</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Gerald Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>David Bannon &lt;<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#bugreport" title="Chapter35.Reporting Bugs">Reporting Bugs</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p> Someone; Tridge or Karl Auer perhaps?</p></li></ul></div></dd><dt><span class="term"><a href="#compiling" title="Chapter36.How to compile SAMBA">How to compile SAMBA</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p> Someone; Jerry perhaps?</p></li></ul></div></dd><dt><span class="term"><a href="#Portability" title="Chapter37.Portability">Portability</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#Other-Clients" title="Chapter38.Samba and other CIFS clients">Samba and other CIFS clients</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jim McDonough &lt;<a href="mailto:jmcd@us.ibm.com" target="_top">jmcd@us.ibm.com</a>&gt;</p></li><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#speed" title="Chapter39.Samba Performance Tuning">Samba Performance Tuning</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Paul Cochrane &lt;<a href="mailto:paulc@dth.scot.nhs.uk" target="_top">paulc@dth.scot.nhs.uk</a>&gt;</p></li><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#DNSDHCP" title="Chapter40.DNS and DHCP Configuration Guide">DNS and DHCP Configuration Guide</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>John Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div></dd><dt><span class="term"><a href="#Further-Resources" title="Chapter41.Further Resources">Further Resources</a></span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Jelmer Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>David Lechnyr &lt;<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>&gt;</p></li></ul></div></dd></dl></div><ns1:p>
-
- </ns1:p></div></div><div><p class="pubdate">Monday April 21, 2003</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p>
+"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-HOWTO-Collection"></a>SAMBA Project Documentation</h1></div><div><div class="authorgroup"><h4 class="editedby">Edited by</h4><h3 class="editor"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><h3 class="editor"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><h3 class="editor"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3></div></div><div><p class="pubdate">Monday April 21, 2003</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p>
This book is a collection of HOWTOs added to Samba documentation over the years.
Samba is always under development, and so is its' documentation. This release of the
documentation represents a major revision or layout as well as contents.
@@ -41,43 +34,49 @@ insignificant number of ideas for inclusion (if not content itself) has been obt
from a number of Unofficial HOWTOs - to each such author a big &quot;Thank-you&quot; is also offered.
Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and
application knowledge that is most to be desired by many Samba users and administrators.
-</p></div></div></div><div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>I. <a href="#introduction">General Installation</a></dt><dd><dl><dt>1. <a href="#IntroSMB">Introduction to Samba</a></dt><dd><dl><dt><a href="#id2867763">Background</a></dt><dt><a href="#id2867816">Terminology</a></dt><dt><a href="#id2866541">Related Projects</a></dt><dt><a href="#id2866610">SMB Methodology</a></dt><dt><a href="#id2866696">Epilogue</a></dt><dt><a href="#id2866770">Miscellaneous</a></dt></dl></dd><dt>2. <a href="#install">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="#id2867536">Obtaining and installing samba</a></dt><dt><a href="#id2867578">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2867152">Example Configuration</a></dt><dt><a href="#id2867295">SWAT</a></dt></dl></dd><dt><a href="#id2867340">Try listing the shares available on your
- server</a></dt><dt><a href="#id2866845">Try connecting with the unix client</a></dt><dt><a href="#id2866947">Try connecting from a DOS, WfWg, Win9x, WinNT,
- Win2k, OS/2, etc... client</a></dt><dt><a href="#id2867008">What If Things Don't Work?</a></dt><dt><a href="#id2867038">Common Errors</a></dt><dd><dl><dt><a href="#id2867051">Why are so many smbd processes eating memory?</a></dt><dt><a href="#id2868426">I'm getting &quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot; in the logs</a></dt></dl></dd></dl></dd><dt>3. <a href="#FastStart">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="#id2868875">Note</a></dt></dl></dd></dl></dd><dt>II. <a href="#type">Server Configuration Basics</a></dt><dd><dl><dt>4. <a href="#ServerType">Server Types and Security Modes</a></dt><dd><dl><dt><a href="#id2871949">Features and Benefits</a></dt><dt><a href="#id2872041">Server Types</a></dt><dt><a href="#id2872122">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2868550">User Level Security</a></dt><dt><a href="#id2868682">Share Level Security</a></dt><dt><a href="#id2869754">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2869996">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2870079">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2870304">Seamless Windows Network Integration</a></dt><dt><a href="#id2870481">Common Errors</a></dt><dd><dl><dt><a href="#id2870509">What makes Samba a SERVER?</a></dt><dt><a href="#id2870542">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2870571">What makes Samba a Domain Member?</a></dt><dt><a href="#id2872482">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="#samba-pdc">Domain Control</a></dt><dd><dl><dt><a href="#id2875113">Features and Benefits</a></dt><dt><a href="#id2872711">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2872727">Domain Controller Types</a></dt><dt><a href="#id2872926">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2873240">Domain Control - Example Configuration</a></dt><dt><a href="#id2873537">Samba ADS Domain Control</a></dt><dt><a href="#id2873559">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2873574">Domain Network Logon Service</a></dt><dt><a href="#id2876300">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2876404">Common Problems and Errors</a></dt><dd><dl><dt><a href="#id2876412">I cannot include a '$' in a machine name</a></dt><dt><a href="#id2876450">I get told &quot;You already have a connection to the Domain....&quot;
-or &quot;Cannot join domain, the credentials supplied conflict with an
-existing set..&quot; when creating a machine trust account.</a></dt><dt><a href="#id2876500">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2876570">The machine trust account for this computer either does not
-exist or is not accessible.</a></dt><dt><a href="#id2876634">When I attempt to login to a Samba Domain from a NT4/W2K workstation,
-I get a message about my account being disabled.</a></dt><dt><a href="#id2876660">Until a few minutes after Samba has started, clients get the error &quot;Domain Controller Unavailable&quot;</a></dt></dl></dd></dl></dd><dt>6. <a href="#samba-bdc">Backup Domain Control</a></dt><dd><dl><dt><a href="#id2878706">Features And Benefits</a></dt><dt><a href="#id2878870">Essential Background Information</a></dt><dd><dl><dt><a href="#id2878898">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2876857">Active Directory Domain Control</a></dt><dt><a href="#id2876879">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2876902">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2876928">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2877029">Example Configuration</a></dt></dl></dd><dt><a href="#id2877079">Common Errors</a></dt><dd><dl><dt><a href="#id2877093">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2877125">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2877158">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2877202">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="#domain-member">Domain Membership</a></dt><dd><dl><dt><a href="#id2877728">Features and Benefits</a></dt><dt><a href="#id2877298">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2877460">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879244">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2879440">&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879495">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2879692">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2882368">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2882506">Setup your smb.conf</a></dt><dt><a href="#id2882590">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2882938">Notes</a></dt></dl></dd><dt><a href="#id2882960">Common Errors</a></dt><dd><dl><dt><a href="#id2882986">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2883018">Adding Machine to Domain Fails</a></dt></dl></dd></dl></dd><dt>8. <a href="#StandAloneServer">Stand-Alone Servers</a></dt><dd><dl><dt><a href="#id2884461">Features and Benefits</a></dt><dt><a href="#id2884499">Background</a></dt><dt><a href="#id2884567">Example Configuration</a></dt><dd><dl><dt><a href="#id2883169">Reference Documentation Server</a></dt><dt><a href="#id2883216">Central Print Serving</a></dt></dl></dd><dt><a href="#id2883429">Common Errors</a></dt></dl></dd><dt>9. <a href="#ClientConfig">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="#id2883797">Note</a></dt></dl></dd></dl></dd><dt>III. <a href="#optional">Advanced Configuration</a></dt><dd><dl><dt>10. <a href="#NetworkBrowsing">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="#id2884150">Features and Benefits</a></dt><dt><a href="#id2884229">What is Browsing?</a></dt><dt><a href="#id2888334">Discussion</a></dt><dd><dl><dt><a href="#id2888350">NetBIOS over TCP/IP</a></dt><dt><a href="#id2888512">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2883481">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2883615">How Browsing Functions</a></dt><dd><dl><dt><a href="#id2883741">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2885127">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2885392">Making Samba the domain master</a></dt><dt><a href="#id2885548">Note about broadcast addresses</a></dt><dt><a href="#id2885566">Multiple interfaces</a></dt><dt><a href="#id2889067">Use of the Remote Announce parameter</a></dt><dt><a href="#id2889176">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2889237">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2889395">Setting up a WINS server</a></dt><dt><a href="#id2889590">WINS Replication</a></dt><dt><a href="#id2889615">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2889699">Helpful Hints</a></dt><dd><dl><dt><a href="#id2889712">Windows Networking Protocols</a></dt><dt><a href="#id2889779">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2889917">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2889964">Browsing support in Samba</a></dt><dt><a href="#id2890071">Problem resolution</a></dt><dt><a href="#id2890150">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2890765">Common Errors</a></dt><dd><dl><dt><a href="#id2890780">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2890809">My client reports &quot;This server is not configured to list shared resources&quot;</a></dt></dl></dd></dl></dd><dt>11. <a href="#passdb">Account Information Databases</a></dt><dd><dl><dt><a href="#id2894185">Features and Benefits</a></dt><dt><a href="#id2891076">Technical Information</a></dt><dd><dl><dt><a href="#id2891140">Important Notes About Security</a></dt><dt><a href="#id2891384">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="#id2891439">Account Management Tools</a></dt><dd><dl><dt><a href="#id2891471">The smbpasswd Command</a></dt><dt><a href="#id2891736">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2891870">Password Backends</a></dt><dd><dl><dt><a href="#id2891906">Plain Text</a></dt><dt><a href="#id2891946">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2896387">tdbsam</a></dt><dt><a href="#id2896415">ldapsam</a></dt><dt><a href="#id2897903">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2898709">Common Errors</a></dt><dd><dl><dt><a href="#id2898716">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="#id2898731">Users are being added to the wrong backend database</a></dt><dt><a href="#id2898791">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="#groupmapping">Mapping MS Windows and Unix Groups</a></dt><dd><dl><dt><a href="#id2898963">Features and Benefits</a></dt><dt><a href="#id2899064">Discussion</a></dt><dd><dl><dt><a href="#id2899252">Example Configuration</a></dt></dl></dd><dt><a href="#id2899318">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2899332">Sample smb.conf add group script</a></dt><dt><a href="#id2899399">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2899473">Common Errors</a></dt><dd><dl><dt><a href="#id2899489">Adding Groups Fails</a></dt><dt><a href="#id2899549">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></dd><dt>13. <a href="#AccessControls">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="#id2902735">Features and Benefits</a></dt><dt><a href="#id2902861">File System Access Controls</a></dt><dd><dl><dt><a href="#id2902879">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="#id2899794">Managing Directories</a></dt><dt><a href="#id2899890">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2900296">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2900324">User and Group Based Controls</a></dt><dt><a href="#id2900596">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2900842">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2905426">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2905498">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2905797">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="#id2905805">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2905843">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2905922">Viewing file ownership</a></dt><dt><a href="#id2906044">Viewing File or Directory Permissions</a></dt><dt><a href="#id2906272">Modifying file or directory permissions</a></dt><dt><a href="#id2906424">Interaction with the standard Samba create mask
- parameters</a></dt><dt><a href="#id2906754">Interaction with the standard Samba file attribute
- mapping</a></dt></dl></dd><dt><a href="#id2906829">Common Errors</a></dt><dd><dl><dt><a href="#id2906843">Users can not write to a public share</a></dt><dt><a href="#id2907222">I have set force user and Samba still makes root the owner of all the files
- I touch!</a></dt></dl></dd></dl></dd><dt>14. <a href="#locking">File and Record Locking</a></dt><dd><dl><dt><a href="#id2909343">Features and Benefits</a></dt><dt><a href="#id2909398">Discussion</a></dt><dd><dl><dt><a href="#id2909529">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2907904">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2908013">Example Configuration</a></dt></dl></dd><dt><a href="#id2908272">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2910709">Workstation Service Entries</a></dt><dt><a href="#id2910736">Server Service Entries</a></dt></dl></dd><dt><a href="#id2910816">Persistent Data Corruption</a></dt><dt><a href="#id2910846">Common Errors</a></dt><dd><dl><dt><a href="#id2910919">locking.tdb error messages</a></dt></dl></dd><dt><a href="#id2910950">Additional Reading</a></dt></dl></dd><dt>15. <a href="#securing-samba">Securing Samba</a></dt><dd><dl><dt><a href="#id2912374">Introduction</a></dt><dt><a href="#id2912407">Features and Benefits</a></dt><dt><a href="#id2911067">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2911085">Using host based protection</a></dt><dt><a href="#id2911154">User based protection</a></dt><dt><a href="#id2911205">Using interface protection</a></dt><dt><a href="#id2911256">Using a firewall</a></dt><dt><a href="#id2911312">Using a IPC$ share deny</a></dt><dt><a href="#id2911377">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2911416">Upgrading Samba</a></dt><dt><a href="#id2911439">Common Errors</a></dt><dd><dl><dt><a href="#id2911458">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2911483">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="#InterdomainTrusts">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="#id2912001">Features and Benefits</a></dt><dt><a href="#id2912030">Trust Relationship Background</a></dt><dt><a href="#id2912113">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2912125">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="#id2914100">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="#id2914137">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#id2914164">Samba-3 as the Trusting Domain</a></dt><dt><a href="#id2914290">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="#id2911669">Common Errors</a></dt><dd><dl><dt><a href="#id2911684">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></dd><dt>17. <a href="#msdfs">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="#id2911782">Features and Benefits</a></dt><dt><a href="#id2913192">Common Errors</a></dt></dl></dd><dt>18. <a href="#printing">Classical Printing Support</a></dt><dd><dl><dt><a href="#id2914714">Features and Benefits</a></dt><dt><a href="#id2914778">Technical Introduction</a></dt><dd><dl><dt><a href="#id2914814">What happens if you send a Job from a Client</a></dt><dt><a href="#id2914884">Printing Related Configuration Parameters</a></dt><dt><a href="#id2917993">Parameters Recommended for Use</a></dt><dt><a href="#id2913353">Parameters for Backwards Compatibility</a></dt><dt><a href="#id2913461">Parameters no longer in use</a></dt></dl></dd><dt><a href="#id2913555">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="#id2915561">Verification of &quot;Settings in Use&quot; with testparm</a></dt><dt><a href="#id2915643">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2915950">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="#id2916042">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2916055">The [global] Section</a></dt><dt><a href="#id2925516">The [printers] Section</a></dt><dt><a href="#id2925845">Any [my_printer_name] Section</a></dt><dt><a href="#id2926066">Print Commands</a></dt><dt><a href="#id2926117">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="#id2926642">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2926920">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2927074">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2927225">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="#id2927338">Creating the [print$] Share</a></dt><dt><a href="#id2927409">Parameters in the [print$] Section</a></dt><dt><a href="#id2927630">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2927791">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2927885">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2928069">Setting Drivers for existing Printers with
-rpcclient</a></dt></dl></dd><dt><a href="#id2929667">&quot;The Proof of the Pudding lies in the Eating&quot; (Client Driver Install
-Procedure)</a></dt><dd><dl><dt><a href="#id2929688">The first Client Driver Installation</a></dt><dt><a href="#id2929885">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2930175">Further Client Driver Install Procedures</a></dt><dt><a href="#id2930270">Always make first Client Connection as root or &quot;printer admin&quot;</a></dt></dl></dd><dt><a href="#id2930412">Other Gotchas</a></dt><dd><dl><dt><a href="#id2930445">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2930879">Supporting large Numbers of Printers</a></dt><dt><a href="#id2931181">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2931425">Weird Error Message Cannot connect under a
-different Name</a></dt><dt><a href="#id2931523">Be careful when assembling Driver Files</a></dt><dt><a href="#id2931794">Samba and Printer Ports</a></dt><dt><a href="#id2931864">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2931887">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2931932">What is Imprints?</a></dt><dt><a href="#id2931973">Creating Printer Driver Packages</a></dt><dt><a href="#id2931992">The Imprints Server</a></dt><dt><a href="#id2932017">The Installation Client</a></dt></dl></dd><dt><a href="#id2932169">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2932498">The addprinter command</a></dt><dt><a href="#id2932543">Migration of &quot;Classical&quot; printing to Samba-3</a></dt><dt><a href="#id2932712">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2932726">Common Errors and Problems</a></dt><dd><dl><dt><a href="#id2932739">I give my root password but I don't get access</a></dt><dt><a href="#id2932773">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="#CUPS-printing">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="#id2939792">Introduction</a></dt><dd><dl><dt><a href="#id2939799">Features and Benefits</a></dt><dt><a href="#id2939849">Overview</a></dt></dl></dd><dt><a href="#id2939900">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2939980">Linking of smbd with libcups.so</a></dt><dt><a href="#id2932886">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2932950">More complex smb.conf Settings for
-CUPS</a></dt></dl></dd><dt><a href="#id2933049">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2933069">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt><a href="#id2933096">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
-with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2933133">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2933191">Explicitly enable &quot;raw&quot; printing for
-application/octet-stream!</a></dt><dt><a href="#id2933352">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2933445">Using CUPS/Samba in an advanced Way -- intelligent printing
-with PostScript Driver Download</a></dt><dd><dl><dt><a href="#id2933520">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="#id2933565">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2933663">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="#id2933735">PostScript and Ghostscript</a></dt><dt><a href="#id2933832">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2933927">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2946744">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2946833">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2946856">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2946994">MIME types and CUPS Filters</a></dt><dt><a href="#id2947182">MIME type Conversion Rules</a></dt><dt><a href="#id2947298">Filter Requirements</a></dt><dt><a href="#id2947467">Prefilters</a></dt><dt><a href="#id2947552">pstops</a></dt><dt><a href="#id2947655">pstoraster</a></dt><dt><a href="#id2947811">imagetops and imagetoraster</a></dt><dt><a href="#id2947866">rasterto [printers specific]</a></dt><dt><a href="#id2947951">CUPS Backends</a></dt><dt><a href="#id2948265">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2948368">The Complete Picture</a></dt><dt><a href="#id2948383">mime.convs</a></dt><dt><a href="#id2948436">&quot;Raw&quot; printing</a></dt><dt><a href="#id2948490">&quot;application/octet-stream&quot; printing</a></dt><dt><a href="#id2948706">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2948933">Difference between cupsomatic/foomatic-rip and
-native CUPS printing</a></dt><dt><a href="#id2949090">Examples for filtering Chains</a></dt><dt><a href="#id2949319">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2949444">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2949506">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2949522">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2949561">Driver Execution on the Client</a></dt><dt><a href="#id2949620">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2949683">Network Printing (Windows clients -- UNIX/Samba Print
-Servers)</a></dt><dd><dl><dt><a href="#id2949704">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2949864">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2949942">Network PostScript RIP: CUPS Filters on Server -- clients use
-PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2949997">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2950038">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2950103">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2950120">Printer Drivers running in &quot;Kernel Mode&quot; cause many
-Problems</a></dt><dt><a href="#id2950155">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2950176">CUPS: a &quot;Magical Stone&quot;?</a></dt><dt><a href="#id2950203">PostScript Drivers with no major problems -- even in Kernel
-Mode</a></dt></dl></dd><dt><a href="#id2950237"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2950256">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2950347">Prepare your smb.conf for
-cupsaddsmb</a></dt><dt><a href="#id2950394">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt><a href="#id2950591">Recognize the different Driver Files</a></dt><dt><a href="#id2950649">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2950682">ESP Print Pro Package of &quot;PostScript Driver for
-WinNT/2k/XP&quot;</a></dt><dt><a href="#id2950732">Caveats to be considered</a></dt><dt><a href="#id2950953">What are the Benefits of using the &quot;CUPS PostScript Driver for
-Windows NT/2k/XP&quot; as compared to the Adobe Driver?</a></dt><dt><a href="#id2951134">Run &quot;cupsaddsmb&quot; (quiet Mode)</a></dt><dt><a href="#id2951235">Run &quot;cupsaddsmb&quot; with verbose Output</a></dt><dt><a href="#id2951378">Understanding cupsaddsmb</a></dt><dt><a href="#id2951472">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="#id2951559">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2951594">cupsaddsmb Flowchart</a></dt><dt><a href="#id2951645">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2951760">Avoiding critical PostScript Driver Settings on the
-Client</a></dt></dl></dd><dt><a href="#id2951894">Installing PostScript Driver Files manually (using
-rpcclient)</a></dt><dd><dl><dt><a href="#id2952009">A Check of the rpcclient man Page</a></dt><dt><a href="#id2952121">Understanding the rpcclient man Page</a></dt><dt><a href="#id2952200">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2952290">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2952452">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="#id2953072">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2953174">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2953277">Trivial DataBase Files</a></dt><dt><a href="#id2953347">Binary Format</a></dt><dt><a href="#id2953409">Losing *.tdb Files</a></dt><dt><a href="#id2953468">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2953530">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2953636">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2954264">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2954722">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2954753">Setting up Quotas</a></dt><dt><a href="#id2954784">Correct and incorrect Accounting</a></dt><dt><a href="#id2954825">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2954897">The page_log File Syntax</a></dt><dt><a href="#id2954998">Possible Shortcomings</a></dt><dt><a href="#id2955070">Future Developments</a></dt><dt><a href="#id2955118">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2955133">Additional Material</a></dt><dt><a href="#id2955326">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2955372">CUPS Configuration Settings explained</a></dt><dt><a href="#id2955454">Pre-conditions</a></dt><dt><a href="#id2955515">Manual Configuration</a></dt></dl></dd><dt><a href="#id2955533">When not to use Samba to print to
-CUPS</a></dt><dt><a href="#id2955550">In Case of Trouble.....</a></dt><dd><dl><dt><a href="#id2955585">Where to find Documentation</a></dt><dt><a href="#id2955598">How to ask for Help</a></dt><dt><a href="#id2955611">Where to find Help</a></dt></dl></dd><dt><a href="#id2955625">Appendix</a></dt><dd><dl><dt><a href="#id2955632">Printing from CUPS to Windows attached
-Printers</a></dt><dt><a href="#id2955826">More CUPS filtering Chains</a></dt><dt><a href="#id2956080">Trouble Shooting Guidelines to fix typical Samba printing
-Problems</a></dt><dt><a href="#id2957186">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></dd><dt>20. <a href="#VFS">Stackable VFS modules</a></dt><dd><dl><dt><a href="#id2958605">Features and Benefits</a></dt><dt><a href="#id2958623">Discussion</a></dt><dt><a href="#id2957300">Included modules</a></dt><dd><dl><dt><a href="#id2957307">audit</a></dt><dt><a href="#id2957345">extd_audit</a></dt><dt><a href="#id2957466">fake_perms</a></dt><dt><a href="#id2957486">recycle</a></dt><dt><a href="#id2957625">netatalk</a></dt></dl></dd><dt><a href="#id2957671">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2957693">DatabaseFS</a></dt><dt><a href="#id2957748">vscan</a></dt></dl></dd><dt><a href="#id2957777">Common Errors</a></dt></dl></dd><dt>21. <a href="#winbind">Integrated Logon Support using Winbind</a></dt><dd><dl><dt><a href="#id2958272">Features and Benefits</a></dt><dt><a href="#id2958300">Introduction</a></dt><dt><a href="#id2960332">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2960392">Target Uses</a></dt></dl></dd><dt><a href="#id2960423">How Winbind Works</a></dt><dd><dl><dt><a href="#id2960451">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2960484">Microsoft Active Directory Services</a></dt><dt><a href="#id2960506">Name Service Switch</a></dt><dt><a href="#id2957818">Pluggable Authentication Modules</a></dt><dt><a href="#id2957889">User and Group ID Allocation</a></dt><dt><a href="#id2957924">Result Caching</a></dt></dl></dd><dt><a href="#id2957952">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2957980">Introduction</a></dt><dt><a href="#id2958055">Requirements</a></dt><dt><a href="#id2959330">Testing Things Out</a></dt></dl></dd><dt><a href="#id2963732">Conclusion</a></dt><dt><a href="#id2963750">Common Errors</a></dt></dl></dd><dt>22. <a href="#AdvancedNetworkManagement">Advanced Network Management</a></dt><dd><dl><dt><a href="#id2965123">Features and Benefits</a></dt><dt><a href="#id2965154">Remote Server Administration</a></dt><dt><a href="#id2963838">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2963854">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2964055">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2964250">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2964283">Common Errors</a></dt></dl></dd><dt>23. <a href="#PolicyMgmt">System and Account Policies</a></dt><dd><dl><dt><a href="#id2964680">Features and Benefits</a></dt><dt><a href="#id2964732">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2964843">Windows 9x/Me Policies</a></dt><dt><a href="#id2964391">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2964524">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2965966">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2966066">Samba Editreg Toolset</a></dt><dt><a href="#id2966087">Windows NT4/200x</a></dt><dt><a href="#id2966107">Samba PDC</a></dt></dl></dd><dt><a href="#id2966152">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2966299">Common Errors</a></dt><dd><dl><dt><a href="#id2966313">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="#ProfileMgmt">Desktop Profile Management</a></dt><dd><dl><dt><a href="#id2966416">Features and Benefits</a></dt><dt><a href="#id2966449">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2966490">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2971852">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2972789">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2972854">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2973114">Mandatory profiles</a></dt><dt><a href="#id2973172">Creating/Managing Group Profiles</a></dt><dt><a href="#id2973217">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2973237">MS Windows 9x/Me</a></dt><dt><a href="#id2973385">MS Windows NT4 Workstation</a></dt><dt><a href="#id2973939">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2974443">Common Errors</a></dt><dd><dl><dt><a href="#id2974456">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="#id2974519">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2974737">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="#pam">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="#id2976194">Features and Benefits</a></dt><dt><a href="#id2975049">Technical Discussion</a></dt><dd><dl><dt><a href="#id2975066">PAM Configuration Syntax</a></dt><dt><a href="#id2975731">Example System Configurations</a></dt><dt><a href="#id2978164">smb.conf PAM Configuration</a></dt><dt><a href="#id2978221">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2978305">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2978671">Common Errors</a></dt><dd><dl><dt><a href="#id2978685">pam_winbind problem</a></dt></dl></dd></dl></dd><dt>26. <a href="#integrate-ms-networks">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="#id2980428">Features and Benefits</a></dt><dt><a href="#id2980452">Background Information</a></dt><dt><a href="#id2980497">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="#id2980549">/etc/hosts</a></dt><dt><a href="#id2980673">/etc/resolv.conf</a></dt><dt><a href="#id2978824">/etc/host.conf</a></dt><dt><a href="#id2978866">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2978954">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2979079">The NetBIOS Name Cache</a></dt><dt><a href="#id2979124">The LMHOSTS file</a></dt><dt><a href="#id2979238">HOSTS file</a></dt><dt><a href="#id2979270">DNS Lookup</a></dt><dt><a href="#id2979295">WINS Lookup</a></dt></dl></dd><dt><a href="#id2979366">Common Errors</a></dt><dd><dl><dt><a href="#id2979382">My Boomerang Won't Come Back</a></dt><dt><a href="#id2979413">Very Slow Network Connections</a></dt><dt><a href="#id2979464">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="#unicode">Unicode/Charsets</a></dt><dd><dl><dt><a href="#id2979620">Features and Benefits</a></dt><dt><a href="#id2979662">What are charsets and unicode?</a></dt><dt><a href="#id2979730">Samba and charsets</a></dt><dt><a href="#id2979831">Conversion from old names</a></dt><dt><a href="#id2979876">Japanese charsets</a></dt></dl></dd><dt>28. <a href="#Backup">Samba Backup Techniques</a></dt><dd><dl><dt><a href="#id2982471">Note</a></dt><dt><a href="#id2982492">Features and Benefits</a></dt></dl></dd><dt>29. <a href="#SambaHA">High Availability Options</a></dt><dd><dl><dt><a href="#id2982302">Note</a></dt></dl></dd></dl></dd><dt>IV. <a href="#migration">Migration and Updating</a></dt><dd><dl><dt>30. <a href="#upgrading-to-3.0">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="#id2983637">Charsets</a></dt><dt><a href="#id2983660">Obsolete configuration options</a></dt><dt><a href="#id2983713">Password Backend</a></dt></dl></dd><dt>31. <a href="#NT4Migration">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="#id2982957">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2982981">Objectives</a></dt><dt><a href="#id2981910">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2984126">Migration Options</a></dt><dd><dl><dt><a href="#id2984207">Planning for Success</a></dt><dt><a href="#id2984449">Samba Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="#SWAT">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="#id2984755">Features and Benefits</a></dt><dd><dl><dt><a href="#id2984605">Enabling SWAT for use</a></dt><dt><a href="#id2985495">Securing SWAT through SSL</a></dt><dt><a href="#id2985607">The SWAT Home Page</a></dt><dt><a href="#id2985671">Global Settings</a></dt><dt><a href="#id2985776">Share Settings</a></dt><dt><a href="#id2985841">Printers Settings</a></dt><dt><a href="#id2985906">The SWAT Wizard</a></dt><dt><a href="#id2985953">The Status Page</a></dt><dt><a href="#id2986005">The View Page</a></dt><dt><a href="#id2986028">The Password Change Page</a></dt></dl></dd></dl></dd></dl></dd><dt>V. <a href="#troubleshooting">Troubleshooting</a></dt><dd><dl><dt>33. <a href="#diagnosis">The Samba checklist</a></dt><dd><dl><dt><a href="#id2986149">Introduction</a></dt><dt><a href="#id2986183">Assumptions</a></dt><dt><a href="#id2986356">The tests</a></dt><dt><a href="#id2989908">Still having troubles?</a></dt></dl></dd><dt>34. <a href="#problems">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="#id2991300">Diagnostics tools</a></dt><dt><a href="#id2990026">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="#id2990310">Useful URLs</a></dt><dt><a href="#id2990353">Getting help from the mailing lists</a></dt><dt><a href="#id2990506">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="#bugreport">Reporting Bugs</a></dt><dd><dl><dt><a href="#id2992820">Introduction</a></dt><dt><a href="#id2992880">General info</a></dt><dt><a href="#id2992915">Debug levels</a></dt><dt><a href="#id2991012">Internal errors</a></dt><dt><a href="#id2991120">Attaching to a running process</a></dt><dt><a href="#id2990621">Patches</a></dt></dl></dd></dl></dd><dt>VI. <a href="#Appendixes">Appendixes</a></dt><dd><dl><dt>36. <a href="#compiling">How to compile SAMBA</a></dt><dd><dl><dt><a href="#id2990738">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2990746">Introduction</a></dt><dt><a href="#id2990775">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2992243">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2992291">Verifying Samba's PGP signature</a></dt><dt><a href="#id2992426">Building the Binaries</a></dt><dd><dl><dt><a href="#id2992564">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2993459">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2993550">Starting from inetd.conf</a></dt><dt><a href="#id2993754">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="#id2993849">Common Errors</a></dt></dl></dd><dt>37. <a href="#Portability">Portability</a></dt><dd><dl><dt><a href="#id2995128">HPUX</a></dt><dt><a href="#id2995213">SCO Unix</a></dt><dt><a href="#id2995241">DNIX</a></dt><dt><a href="#id2995411">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2995454">AIX</a></dt><dd><dl><dt><a href="#id2995461">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2995487">Solaris</a></dt><dd><dl><dt><a href="#id2995494">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="#Other-Clients">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="#id2996271">Macintosh clients?</a></dt><dt><a href="#id2996343">OS2 Client</a></dt><dd><dl><dt><a href="#id2996350">How can I configure OS/2 Warp Connect or
- OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="#id2995965">How can I configure OS/2 Warp 3 (not Connect),
- OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="#id2996025">How do I get printer driver download working
- for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2996122">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2995584">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2995674">Delete .pwl files after password change</a></dt><dt><a href="#id2995704">Configure WfW password handling</a></dt><dt><a href="#id2995750">Case handling of passwords</a></dt><dt><a href="#id2995780">Use TCP/IP as default protocol</a></dt><dt><a href="#id2995797">Speed improvement</a></dt></dl></dd><dt><a href="#id2995844">Windows '95/'98</a></dt><dd><dl><dt><a href="#id2996873">Speed improvement</a></dt></dl></dd><dt><a href="#id2996898">Windows 2000 Service Pack 2</a></dt><dt><a href="#id2997008">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="#speed">Samba Performance Tuning</a></dt><dd><dl><dt><a href="#id2999219">Comparisons</a></dt><dt><a href="#id2997059">Socket options</a></dt><dt><a href="#id2997130">Read size</a></dt><dt><a href="#id2997174">Max xmit</a></dt><dt><a href="#id2997227">Log level</a></dt><dt><a href="#id2997250">Read raw</a></dt><dt><a href="#id2997306">Write raw</a></dt><dt><a href="#id2997348">Slow Logins</a></dt><dt><a href="#id2998255">Client tuning</a></dt><dt><a href="#id2998279">Samba performance problem due changing kernel</a></dt><dt><a href="#id2998311">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="#DNSDHCP">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="#id2999030">Note</a></dt></dl></dd><dt>41. <a href="#Further-Resources">Further Resources</a></dt><dd><dl><dt><a href="#id2998449">Websites</a></dt><dt><a href="#id2998831">Related updates from Microsoft</a></dt><dt><a href="#id2998898">Books</a></dt></dl></dd></dl></dd><dt><a href="#id2998910">Index</a></dt></dl></div><div class="list-of-figures"><p><b>List of Figures</b></p><dl><dt>19.1. <a href="#id2933630">Windows Printing to a local Printer</a></dt><dt>19.2. <a href="#id2933781">Printing to a Postscript Printer</a></dt><dt>19.3. <a href="#id2933861">Ghostscript as a RIP for non-postscript printers</a></dt><dt>19.4. <a href="#id2947518">Prefiltering in CUPS to form Postscript</a></dt><dt>19.5. <a href="#id2947583">Adding Device-specific Print Options</a></dt><dt>19.6. <a href="#id2947685">Postscript to intermediate Raster format</a></dt><dt>19.7. <a href="#id2947737">CUPS-raster production using Ghostscript</a></dt><dt>19.8. <a href="#id2947832">Image format to CUPS-raster format conversion</a></dt><dt>19.9. <a href="#id2947917">Raster to Printer Specific formats</a></dt><dt>19.10. <a href="#id2948984">cupsomatic/foomatic processing versus Native CUPS</a></dt><dt>19.11. <a href="#id2949586">Print Driver execution on the Client</a></dt><dt>19.12. <a href="#id2949642">Print Driver execution on the Server</a></dt><dt>19.13. <a href="#id2949830">Printing via CUPS/samba server</a></dt><dt>19.14. <a href="#id2951611">cupsaddsmb flowchart</a></dt><dt>19.15. <a href="#id2957196">CUPS Printing Overview</a></dt></dl></div><div class="list-of-tables"><p><b>List of Tables</b></p><dl><dt>7.1. <a href="#id2879702">Assumptions</a></dt><dt>10.1. <a href="#id2890314">Browse subnet example 1</a></dt><dt>10.2. <a href="#id2890424">Browse subnet example 2</a></dt><dt>10.3. <a href="#id2890523">Browse subnet example 3</a></dt><dt>10.4. <a href="#id2890624">Browse subnet example 4</a></dt><dt>11.1. <a href="#id2897381">Attributes in the sambaSamAccount objectclass (LDAP)</a></dt><dt>11.2. <a href="#id2898064">Basic smb.conf options for MySQL passdb backend</a></dt><dt>11.3. <a href="#id2898189">MySQL field names for MySQL passdb backend</a></dt><dt>13.1. <a href="#id2899812">Managing directories with unix and windows</a></dt><dt>13.2. <a href="#id2900382">User and Group Based Controls</a></dt><dt>13.3. <a href="#id2900615">File and Directory Permission Based Controls</a></dt><dt>13.4. <a href="#id2900863">Other Controls</a></dt><dt>20.1. <a href="#id2957384">Extended Auditing Log Information</a></dt><dt>24.1. <a href="#id2973733">User Shell Folder registry keys default values</a></dt><dt>24.2. <a href="#id2973877">Defaults of profile settings registry keys</a></dt><dt>24.3. <a href="#id2974132">Defaults of default user profile paths registry keys</a></dt><dt>25.1. <a href="#id2978335">Options recognized by pam_smbpass</a></dt><dt>31.1. <a href="#id2984141">The 3 Major Site Types</a></dt><dt>31.2. <a href="#id2984278">Nature of the Conversion Choices</a></dt></dl></div><div class="list-of-examples"><p><b>List of Examples</b></p><dl><dt>12.1. <a href="#id2899354">smbgrpadd.sh</a></dt><dt>13.1. <a href="#id2900217">Example File</a></dt></dl></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="introduction"></a>General Installation</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2866423"></a>Preparing Samba for Configuration</h1></div></div><div></div></div><p>This section of the Samba-HOWTO-Collection contains general info on how to install samba
+</p></div></div></div><div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2852328">Legal Notice</a></dt><dt><a href="#id2852352">Attributions</a></dt><dt>I. <a href="#introduction">General Installation</a></dt><dd><dl><dt>1. <a href="#IntroSMB">Introduction to Samba</a></dt><dd><dl><dt><a href="#id2800382">Background</a></dt><dt><a href="#id2800440">Terminology</a></dt><dt><a href="#id2800631">Related Projects</a></dt><dt><a href="#id2800699">SMB Methodology</a></dt><dt><a href="#id2800808">Epilogue</a></dt><dt><a href="#id2800892">Miscellaneous</a></dt></dl></dd><dt>2. <a href="#install">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="#id2866386">Obtaining and installing samba</a></dt><dt><a href="#id2866430">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2866468">Example Configuration</a></dt><dt><a href="#id2866661">SWAT</a></dt></dl></dd><dt><a href="#id2866706">Try listing the shares available on your
+ server</a></dt><dt><a href="#id2866764">Try connecting with the unix client</a></dt><dt><a href="#id2866881">Try connecting from another SMB client</a></dt><dt><a href="#id2866964">What If Things Don't Work?</a></dt><dt><a href="#id2866997">Common Errors</a></dt><dd><dl><dt><a href="#id2867010">Large number of smbd processes</a></dt><dt><a href="#id2867109">&quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot;</a></dt><dt><a href="#id2867129">&quot;The network name cannot be found&quot;</a></dt></dl></dd></dl></dd><dt>3. <a href="#FastStart">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="#id2867256">Note</a></dt></dl></dd></dl></dd><dt>II. <a href="#type">Server Configuration Basics</a></dt><dd><dl><dt>4. <a href="#ServerType">Server Types and Security Modes</a></dt><dd><dl><dt><a href="#id2867445">Features and Benefits</a></dt><dt><a href="#id2867540">Server Types</a></dt><dt><a href="#id2867626">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2867745">User Level Security</a></dt><dt><a href="#id2867883">Share Level Security</a></dt><dt><a href="#id2868020">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2868278">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2868379">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2868660">Password checking</a></dt><dt><a href="#id2868855">Common Errors</a></dt><dd><dl><dt><a href="#id2868882">What makes Samba a SERVER?</a></dt><dt><a href="#id2868923">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2868959">What makes Samba a Domain Member?</a></dt><dt><a href="#id2868998">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="#samba-pdc">Domain Control</a></dt><dd><dl><dt><a href="#id2869330">Features and Benefits</a></dt><dt><a href="#id2869545">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2869560">Domain Controller Types</a></dt><dt><a href="#id2869805">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2870187">Domain Control - Example Configuration</a></dt><dt><a href="#id2870675">Samba ADS Domain Control</a></dt><dt><a href="#id2870727">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2870742">Domain Network Logon Service</a></dt><dt><a href="#id2871174">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2871320">Common Errors</a></dt><dd><dl><dt><a href="#id2871328">'$' cannot be included in machine name</a></dt><dt><a href="#id2871386">Joining domain fails because of existing machine account</a></dt><dt><a href="#id2871445">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2871529">The machine trust account not accessible</a></dt><dt><a href="#id2871602">Account disabled</a></dt><dt><a href="#id2871634">Domain Controller Unavailable</a></dt><dt><a href="#id2871658">Can not log onto domain member workstation after joining domain</a></dt></dl></dd></dl></dd><dt>6. <a href="#samba-bdc">Backup Domain Control</a></dt><dd><dl><dt><a href="#id2871817">Features And Benefits</a></dt><dt><a href="#id2872006">Essential Background Information</a></dt><dd><dl><dt><a href="#id2872035">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2872286">Active Directory Domain Control</a></dt><dt><a href="#id2872307">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2872332">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2872346">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2872480">Example Configuration</a></dt></dl></dd><dt><a href="#id2872638">Common Errors</a></dt><dd><dl><dt><a href="#id2872650">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2872682">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2872708">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2872753">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="#domain-member">Domain Membership</a></dt><dd><dl><dt><a href="#id2872960">Features and Benefits</a></dt><dt><a href="#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2873290">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2873596">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2873811">&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</a></dt><dt><a href="#id2873884">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2874094">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2874530">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2874715">Setup your smb.conf</a></dt><dt><a href="#id2874844">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2875221">Notes</a></dt></dl></dd><dt><a href="#id2875243">Common Errors</a></dt><dd><dl><dt><a href="#id2875286">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2875318">Adding Machine to Domain Fails</a></dt><dt><a href="#id2875462">I can't join a Windows 2003 PDC</a></dt></dl></dd></dl></dd><dt>8. <a href="#StandAloneServer">Stand-Alone Servers</a></dt><dd><dl><dt><a href="#id2875549">Features and Benefits</a></dt><dt><a href="#id2875587">Background</a></dt><dt><a href="#id2875661">Example Configuration</a></dt><dd><dl><dt><a href="#RefDocServer">Reference Documentation Server</a></dt><dt><a href="#SimplePrintServer">Central Print Serving</a></dt></dl></dd><dt><a href="#id2876184">Common Errors</a></dt></dl></dd><dt>9. <a href="#ClientConfig">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="#id2876248">Note</a></dt></dl></dd></dl></dd><dt>III. <a href="#optional">Advanced Configuration</a></dt><dd><dl><dt>10. <a href="#NetworkBrowsing">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="#id2876401">Features and Benefits</a></dt><dt><a href="#id2876490">What is Browsing?</a></dt><dt><a href="#id2876803">Discussion</a></dt><dd><dl><dt><a href="#id2876818">NetBIOS over TCP/IP</a></dt><dt><a href="#id2877054">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2877219">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2877367">How Browsing Functions</a></dt><dd><dl><dt><a href="#DMB">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2877916">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2878314">Making Samba the domain master</a></dt><dt><a href="#id2878491">Note about broadcast addresses</a></dt><dt><a href="#id2878515">Multiple interfaces</a></dt><dt><a href="#id2878551">Use of the Remote Announce parameter</a></dt><dt><a href="#id2878708">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2878786">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2878975">Setting up a WINS server</a></dt><dt><a href="#id2879231">WINS Replication</a></dt><dt><a href="#id2879256">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2879345">Helpful Hints</a></dt><dd><dl><dt><a href="#id2879358">Windows Networking Protocols</a></dt><dt><a href="#id2879437">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2879603">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2879656">Browsing support in Samba</a></dt><dt><a href="#id2879778">Problem resolution</a></dt><dt><a href="#id2879866">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2880547">Common Errors</a></dt><dd><dl><dt><a href="#id2880562">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2880591">My client reports &quot;This server is not configured to list shared resources&quot;</a></dt><dt><a href="#id2880635">I get an Unable to browse the network error</a></dt></dl></dd></dl></dd><dt>11. <a href="#passdb">Account Information Databases</a></dt><dd><dl><dt><a href="#id2880915">Features and Benefits</a></dt><dd><dl><dt><a href="#id2880929">Backwards Compatibility Backends</a></dt><dt><a href="#id2881032">New Backends</a></dt></dl></dd><dt><a href="#id2881219">Technical Information</a></dt><dd><dl><dt><a href="#id2881344">Important Notes About Security</a></dt><dt><a href="#id2881634">Mapping User Identifiers between MS Windows and UNIX</a></dt><dt><a href="#idmapbackend">Mapping Common UIDs/GIDs on Distributed Machines</a></dt></dl></dd><dt><a href="#acctmgmttools">Account Management Tools</a></dt><dd><dl><dt><a href="#id2881821">The smbpasswd Command</a></dt><dt><a href="#id2882092">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2882329">Password Backends</a></dt><dd><dl><dt><a href="#id2882371">Plain Text</a></dt><dt><a href="#id2882412">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2882525">tdbsam</a></dt><dt><a href="#id2882559">ldapsam</a></dt><dt><a href="#id2884412">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2885260">Common Errors</a></dt><dd><dl><dt><a href="#id2885267">Users can not logon</a></dt><dt><a href="#id2885312">Users being added to wrong backend database</a></dt><dt><a href="#id2885422">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="#groupmapping">Mapping MS Windows and UNIX Groups</a></dt><dd><dl><dt><a href="#id2885652">Features and Benefits</a></dt><dt><a href="#id2885887">Discussion</a></dt><dd><dl><dt><a href="#id2886122">Example Configuration</a></dt></dl></dd><dt><a href="#id2886189">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2886202">Sample smb.conf add group script</a></dt><dt><a href="#id2886288">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2886372">Common Errors</a></dt><dd><dl><dt><a href="#id2886386">Adding Groups Fails</a></dt><dt><a href="#id2886455">Adding MS Windows Groups to MS Windows Groups Fails</a></dt><dt><a href="#id2886481">Adding Domain Users to the Power Users group</a></dt></dl></dd></dl></dd><dt>13. <a href="#AccessControls">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="#id2886736">Features and Benefits</a></dt><dt><a href="#id2886866">File System Access Controls</a></dt><dd><dl><dt><a href="#id2886902">MS Windows NTFS Comparison with UNIX File Systems</a></dt><dt><a href="#id2887207">Managing Directories</a></dt><dt><a href="#id2887301">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2887513">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2887541">User and Group Based Controls</a></dt><dt><a href="#id2887963">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2888342">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2888722">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2888794">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2889094">MS Windows Access Control Lists and UNIX Interoperability</a></dt><dd><dl><dt><a href="#id2889102">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2889146">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2889226">Viewing file ownership</a></dt><dt><a href="#id2889358">Viewing File or Directory Permissions</a></dt><dt><a href="#id2889603">Modifying file or directory permissions</a></dt><dt><a href="#id2889768">Interaction with the standard Samba create mask
+ parameters</a></dt><dt><a href="#id2890164">Interaction with the standard Samba file attribute mapping</a></dt></dl></dd><dt><a href="#id2890260">Common Errors</a></dt><dd><dl><dt><a href="#id2890274">Users can not write to a public share</a></dt><dt><a href="#id2890703">I have set force user but Samba still makes root the owner of all the files I touch!</a></dt><dt><a href="#id2890755">MS Word with Samba changes owner of file</a></dt></dl></dd></dl></dd><dt>14. <a href="#locking">File and Record Locking</a></dt><dd><dl><dt><a href="#id2891003">Features and Benefits</a></dt><dt><a href="#id2891060">Discussion</a></dt><dd><dl><dt><a href="#id2891204">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2891921">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2892041">Example Configuration</a></dt></dl></dd><dt><a href="#id2892456">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2892680">Workstation Service Entries</a></dt><dt><a href="#id2892709">Server Service Entries</a></dt></dl></dd><dt><a href="#id2892788">Persistent Data Corruption</a></dt><dt><a href="#id2892817">Common Errors</a></dt><dd><dl><dt><a href="#id2892891">locking.tdb error messages</a></dt><dt><a href="#id2892930">Problems saving files in MS Office on Windows XP</a></dt><dt><a href="#id2892952">Long delays deleting files over network with XP SP1</a></dt></dl></dd><dt><a href="#id2892983">Additional Reading</a></dt></dl></dd><dt>15. <a href="#securing-samba">Securing Samba</a></dt><dd><dl><dt><a href="#id2893158">Introduction</a></dt><dt><a href="#id2893195">Features and Benefits</a></dt><dt><a href="#id2893269">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2893288">Using host based protection</a></dt><dt><a href="#id2893387">User based protection</a></dt><dt><a href="#id2893447">Using interface protection</a></dt><dt><a href="#id2893515">Using a firewall</a></dt><dt><a href="#id2893572">Using a IPC$ share deny</a></dt><dt><a href="#id2893660">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2893719">Upgrading Samba</a></dt><dt><a href="#id2893743">Common Errors</a></dt><dd><dl><dt><a href="#id2893761">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2893786">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="#InterdomainTrusts">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="#id2894077">Features and Benefits</a></dt><dt><a href="#id2894106">Trust Relationship Background</a></dt><dt><a href="#id2894193">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2894221">Creating an NT4 Domain Trust</a></dt><dt><a href="#id2894294">Completing an NT4 Domain Trust</a></dt><dt><a href="#id2894341">Inter-Domain Trust Facilities</a></dt></dl></dd><dt><a href="#id2894518">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#samba-trusted-domain">Samba as the Trusted Domain</a></dt><dt><a href="#id2894704">Samba as the Trusting Domain</a></dt></dl></dd><dt><a href="#id2894842">NT4-style Domain Trusts with Windows 2000</a></dt><dt><a href="#id2894948">Common Errors</a></dt></dl></dd><dt>17. <a href="#msdfs">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="#id2895017">Features and Benefits</a></dt><dt><a href="#id2895292">Common Errors</a></dt></dl></dd><dt>18. <a href="#printing">Classical Printing Support</a></dt><dd><dl><dt><a href="#id2895411">Features and Benefits</a></dt><dt><a href="#id2895517">Technical Introduction</a></dt><dd><dl><dt><a href="#id2895555">What happens if you send a Job from a Client</a></dt><dt><a href="#id2895627">Printing Related Configuration Parameters</a></dt><dt><a href="#id2895722">Parameters Recommended for Use</a></dt></dl></dd><dt><a href="#id2896188">A simple Configuration to Print</a></dt><dd><dl><dt><a href="#id2896354">Verification of &quot;Settings in Use&quot; with testparm</a></dt><dt><a href="#id2896481">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2896843">Extended Sample Configuration to Print</a></dt><dt><a href="#id2897173">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2897186">The [global] Section</a></dt><dt><a href="#id2897717">The [printers] Section</a></dt><dt><a href="#id2898177">Any [my_printer_name] Section</a></dt><dt><a href="#id2898498">Print Commands</a></dt><dt><a href="#id2898580">Default Print Commands for various UNIX Print Subsystems</a></dt><dt><a href="#id2899263">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2899603">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2899763">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2899925">The [printer$] Section is removed from Samba 3</a></dt><dt><a href="#id2900037">Creating the [print$] Share</a></dt><dt><a href="#id2900227">Parameters in the [print$] Section</a></dt><dt><a href="#id2900537">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2900710">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2900805">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2901002">Setting Drivers for existing Printers with
+rpcclient</a></dt></dl></dd><dt><a href="#id2902712">Client Driver Install Procedure</a></dt><dd><dl><dt><a href="#id2902731">The first Client Driver Installation</a></dt><dt><a href="#id2902934">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2903234">Further Client Driver Install Procedures</a></dt><dt><a href="#id2903328">Always make first Client Connection as root or &quot;printer admin&quot;</a></dt></dl></dd><dt><a href="#id2903500">Other Gotchas</a></dt><dd><dl><dt><a href="#id2903534">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2904001">Supporting large Numbers of Printers</a></dt><dt><a href="#id2904312">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2904606">Weird Error Message Cannot connect under a
+different Name</a></dt><dt><a href="#id2904706">Be careful when assembling Driver Files</a></dt><dt><a href="#id2905065">Samba and Printer Ports</a></dt><dt><a href="#id2905158">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2905183">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2905239">What is Imprints?</a></dt><dt><a href="#id2905280">Creating Printer Driver Packages</a></dt><dt><a href="#id2905299">The Imprints Server</a></dt><dt><a href="#id2905323">The Installation Client</a></dt></dl></dd><dt><a href="#id2905478">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2905813">The addprinter command</a></dt><dt><a href="#id2905859">Migration of &quot;Classical&quot; printing to Samba</a></dt><dt><a href="#id2906032">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2906044">Common Errors</a></dt><dd><dl><dt><a href="#id2906050">I give my root password but I don't get access</a></dt><dt><a href="#id2906085">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="#CUPS-printing">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="#id2906220">Introduction</a></dt><dd><dl><dt><a href="#id2906227">Features and Benefits</a></dt><dt><a href="#id2906281">Overview</a></dt></dl></dd><dt><a href="#id2906348">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2906443">Linking of smbd with libcups.so</a></dt><dt><a href="#id2906684">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2906866">More complex smb.conf Settings for
+CUPS</a></dt></dl></dd><dt><a href="#id2907221">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2907241">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt><a href="#id2907296">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2907365">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2907441">Explicitly enable &quot;raw&quot; printing for
+application/octet-stream!</a></dt><dt><a href="#id2907647">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2907785">Using CUPS/Samba in an advanced Way -- intelligent printing
+with PostScript Driver Download</a></dt><dd><dl><dt><a href="#gdipost">GDI on Windows -- PostScript on UNIX</a></dt><dt><a href="#id2907968">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2908120">UNIX Printfile Conversion and GUI Basics</a></dt><dt><a href="#post-and-ghost">PostScript and Ghostscript</a></dt><dt><a href="#id2908420">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2908563">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2908649">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2908755">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2908777">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2908970">MIME types and CUPS Filters</a></dt><dt><a href="#id2909178">MIME type Conversion Rules</a></dt><dt><a href="#id2909333">Filter Requirements</a></dt><dt><a href="#id2909513">Prefilters</a></dt><dt><a href="#id2909624">pstops</a></dt><dt><a href="#id2909734">pstoraster</a></dt><dt><a href="#id2909928">imagetops and imagetoraster</a></dt><dt><a href="#id2909993">rasterto [printers specific]</a></dt><dt><a href="#id2910145">CUPS Backends</a></dt><dt><a href="#id2910493">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2910637">The Complete Picture</a></dt><dt><a href="#id2910653">mime.convs</a></dt><dt><a href="#id2910716">&quot;Raw&quot; printing</a></dt><dt><a href="#id2910805">&quot;application/octet-stream&quot; printing</a></dt><dt><a href="#id2911052">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2911319">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a></dt><dt><a href="#id2911554">Examples for filtering Chains</a></dt><dt><a href="#id2911891">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2912041">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2912139">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2912150">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2912212">Driver Execution on the Client</a></dt><dt><a href="#id2912287">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2912407">Network Printing (Windows clients -- UNIX/Samba Print
+Servers)</a></dt><dd><dl><dt><a href="#id2912426">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2912640">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2912726">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2912815">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2912871">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2912948">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2912964">Printer Drivers running in &quot;Kernel Mode&quot; cause many
+Problems</a></dt><dt><a href="#id2913011">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2913032">CUPS: a &quot;Magical Stone&quot;?</a></dt><dt><a href="#id2913085">PostScript Drivers with no major problems -- even in Kernel
+Mode</a></dt></dl></dd><dt><a href="#id2913108">Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2913163">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2913282">Prepare your smb.conf for cupsaddsmb</a></dt><dt><a href="#id2913502">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt><a href="#id2913789">Recognize the different Driver Files</a></dt><dt><a href="#id2913932">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2913965">ESP Print Pro Package of &quot;PostScript Driver for
+WinNT/2k/XP&quot;</a></dt><dt><a href="#id2914035">Caveats to be considered</a></dt><dt><a href="#id2914308">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a></dt><dt><a href="#id2914525">Run &quot;cupsaddsmb&quot; (quiet Mode)</a></dt><dt><a href="#id2914652">Run &quot;cupsaddsmb&quot; with verbose Output</a></dt><dt><a href="#id2914873">Understanding cupsaddsmb</a></dt><dt><a href="#id2915022">How to recognize if cupsaddsmb completed successfully</a></dt><dt><a href="#id2915105">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2915185">cupsaddsmb Flowchart</a></dt><dt><a href="#id2915261">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2915425">Avoiding critical PostScript Driver Settings on the
+Client</a></dt></dl></dd><dt><a href="#id2915559">Installing PostScript Driver Files manually (using
+rpcclient)</a></dt><dd><dl><dt><a href="#id2915762">A Check of the rpcclient man Page</a></dt><dt><a href="#id2915876">Understanding the rpcclient man page</a></dt><dt><a href="#id2915981">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2916147">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2916361">Manual Driver Installation in 15 Steps</a></dt><dt><a href="#id2917432">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2917838">Trivial DataBase Files</a></dt><dt><a href="#id2917930">Binary Format</a></dt><dt><a href="#id2917994">Losing *.tdb Files</a></dt><dt><a href="#id2918053">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2918189">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2918345">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2919115">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2919616">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2919667">Setting up Quotas</a></dt><dt><a href="#id2919734">Correct and incorrect Accounting</a></dt><dt><a href="#id2919778">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2919874">The page_log File Syntax</a></dt><dt><a href="#id2919991">Possible Shortcomings</a></dt><dt><a href="#id2920067">Future Developments</a></dt><dt><a href="#id2920123">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2920136">Additional Material</a></dt><dt><a href="#id2920387">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2920450">CUPS Configuration Settings explained</a></dt><dt><a href="#id2920543">Pre-conditions</a></dt><dt><a href="#id2920702">Manual Configuration</a></dt></dl></dd><dt><a href="#id2920760">In Case of Trouble.....</a></dt><dt><a href="#id2920832">Printing from CUPS to Windows attached
+Printers</a></dt><dt><a href="#id2921130">More CUPS filtering Chains</a></dt><dt><a href="#id2921233">Common Errors</a></dt><dd><dl><dt><a href="#id2921241">Win9x client can't install driver</a></dt><dt><a href="#id2921263">&quot;cupsaddsmb&quot; keeps asking for root password in
+ neverending loop</a></dt><dt><a href="#id2921311">&quot;cupsaddsmb&quot; gives &quot;No PPD file for printer...&quot;
+ message while PPD file is present</a></dt><dt><a href="#id2921368">Client can't connect to Samba printer</a></dt><dt><a href="#id2921397">Can't reconnect to Samba under new account
+ from Win2K/XP</a></dt><dt><a href="#id2921624">Avoid being connected to the Samba server as the
+ &quot;wrong&quot; user</a></dt><dt><a href="#id2921678">Upgrading to CUPS drivers from Adobe drivers on
+ NT/2K/XP clients gives problems</a></dt><dt><a href="#id2921695">Can't use &quot;cupsaddsmb&quot; on Samba server which is
+ a PDC</a></dt><dt><a href="#id2921726">Deleted Win2K printer driver is still shown</a></dt><dt><a href="#id2921734">Win2K/XP &quot;Local Security
+ Policies&quot;</a></dt><dt><a href="#id2921774">WinXP clients: &quot;Administrator can not install
+ printers for all local users&quot;</a></dt><dt><a href="#id2921808">&quot;Print Change Notify&quot; functions on
+ NT-clients</a></dt><dt><a href="#id2921830">WinXP-SP1</a></dt><dt><a href="#id2921875">Print options for all users can't be set on Win2K/XP</a></dt><dt><a href="#id2922164">Most common blunders in driver
+ settings on Windows clients</a></dt><dt><a href="#id2922210">cupsaddsmb does not work
+ with newly installed printer</a></dt><dt><a href="#id2922272">Permissions on
+/var/spool/samba/ get reset after each
+reboot</a></dt><dt><a href="#id2922380">Printer named &quot;lp&quot;
+intermittently swallows jobs and spits out completely different
+ones</a></dt><dt><a href="#id2922428">Location of Adobe PostScript driver files necessary for &quot;cupsaddsmb&quot;</a></dt></dl></dd><dt><a href="#id2922484">An Overview of the CUPS Printing Processes</a></dt></dl></dd><dt>20. <a href="#VFS">Stackable VFS modules</a></dt><dd><dl><dt><a href="#id2922653">Features and Benefits</a></dt><dt><a href="#id2922671">Discussion</a></dt><dt><a href="#id2922900">Included modules</a></dt><dd><dl><dt><a href="#id2922907">audit</a></dt><dt><a href="#id2922950">extd_audit</a></dt><dt><a href="#id2923080">fake_perms</a></dt><dt><a href="#id2923099">recycle</a></dt><dt><a href="#id2923274">netatalk</a></dt></dl></dd><dt><a href="#id2923320">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2923342">DatabaseFS</a></dt><dt><a href="#id2923396">vscan</a></dt></dl></dd></dl></dd><dt>21. <a href="#winbind">Winbind: Use of Domain Accounts</a></dt><dd><dl><dt><a href="#id2923626">Features and Benefits</a></dt><dt><a href="#id2923721">Introduction</a></dt><dt><a href="#id2923799">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2923876">Target Uses</a></dt></dl></dd><dt><a href="#id2923906">How Winbind Works</a></dt><dd><dl><dt><a href="#id2923935">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2923968">Microsoft Active Directory Services</a></dt><dt><a href="#id2923991">Name Service Switch</a></dt><dt><a href="#id2924127">Pluggable Authentication Modules</a></dt><dt><a href="#id2924199">User and Group ID Allocation</a></dt><dt><a href="#id2924232">Result Caching</a></dt></dl></dd><dt><a href="#id2924260">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2924268">Introduction</a></dt><dt><a href="#id2924335">Requirements</a></dt><dt><a href="#id2924429">Testing Things Out</a></dt></dl></dd><dt><a href="#id2926036">Conclusion</a></dt><dt><a href="#id2926054">Common Errors</a></dt><dd><dl><dt><a href="#id2926108">NSCD Problem Warning</a></dt></dl></dd></dl></dd><dt>22. <a href="#AdvancedNetworkManagement">Advanced Network Management</a></dt><dd><dl><dt><a href="#id2926216">Features and Benefits</a></dt><dt><a href="#id2926247">Remote Server Administration</a></dt><dt><a href="#id2926346">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2926363">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2926605">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2926843">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2926877">Common Errors</a></dt></dl></dd><dt>23. <a href="#PolicyMgmt">System and Account Policies</a></dt><dd><dl><dt><a href="#id2926955">Features and Benefits</a></dt><dt><a href="#id2927014">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2927128">Windows 9x/Me Policies</a></dt><dt><a href="#id2927223">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2927356">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2927608">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2927714">Samba Editreg Toolset</a></dt><dt><a href="#id2927753">Windows NT4/200x</a></dt><dt><a href="#id2927776">Samba PDC</a></dt></dl></dd><dt><a href="#id2927822">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2927973">Common Errors</a></dt><dd><dl><dt><a href="#id2927986">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="#ProfileMgmt">Desktop Profile Management</a></dt><dd><dl><dt><a href="#id2928087">Features and Benefits</a></dt><dt><a href="#id2928120">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2928161">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2928652">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2929902">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2929987">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2930246">Mandatory profiles</a></dt><dt><a href="#id2930304">Creating/Managing Group Profiles</a></dt><dt><a href="#id2930349">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2930369">MS Windows 9x/Me</a></dt><dt><a href="#id2930521">MS Windows NT4 Workstation</a></dt><dt><a href="#id2931076">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2931594">Common Errors</a></dt><dd><dl><dt><a href="#id2931607">Setting up roaming profiles for just a few user's or group's?</a></dt><dt><a href="#id2931676">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2931889">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="#pam">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="#id2932170">Features and Benefits</a></dt><dt><a href="#id2932418">Technical Discussion</a></dt><dd><dl><dt><a href="#id2932435">PAM Configuration Syntax</a></dt><dt><a href="#id2933099">Example System Configurations</a></dt><dt><a href="#id2933403">smb.conf PAM Configuration</a></dt><dt><a href="#id2933482">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2933565">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2933949">Common Errors</a></dt><dd><dl><dt><a href="#id2933962">pam_winbind problem</a></dt><dt><a href="#id2934050">Winbind is not resolving users and groups</a></dt></dl></dd></dl></dd><dt>26. <a href="#integrate-ms-networks">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="#id2934288">Features and Benefits</a></dt><dt><a href="#id2934312">Background Information</a></dt><dt><a href="#id2934378">Name Resolution in a pure UNIX/Linux world</a></dt><dd><dl><dt><a href="#id2934434">/etc/hosts</a></dt><dt><a href="#id2934584">/etc/resolv.conf</a></dt><dt><a href="#id2934626">/etc/host.conf</a></dt><dt><a href="#id2934679">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2934793">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2935103">The NetBIOS Name Cache</a></dt><dt><a href="#id2935167">The LMHOSTS file</a></dt><dt><a href="#id2935329">HOSTS file</a></dt><dt><a href="#id2935361">DNS Lookup</a></dt><dt><a href="#id2935393">WINS Lookup</a></dt></dl></dd><dt><a href="#id2935511">Common Errors</a></dt><dd><dl><dt><a href="#id2935527">Pinging works only in one way</a></dt><dt><a href="#id2935562">Very Slow Network Connections</a></dt><dt><a href="#id2935612">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="#unicode">Unicode/Charsets</a></dt><dd><dl><dt><a href="#id2935816">Features and Benefits</a></dt><dt><a href="#id2935861">What are charsets and unicode?</a></dt><dt><a href="#id2935930">Samba and charsets</a></dt><dt><a href="#id2936058">Conversion from old names</a></dt><dt><a href="#id2936088">Japanese charsets</a></dt><dt><a href="#id2936225">Common errors</a></dt><dd><dl><dt><a href="#id2936232">CP850.so can't be found</a></dt></dl></dd></dl></dd><dt>28. <a href="#Backup">Samba Backup Techniques</a></dt><dd><dl><dt><a href="#id2936346">Note</a></dt><dt><a href="#id2936359">Features and Benefits</a></dt></dl></dd><dt>29. <a href="#SambaHA">High Availability Options</a></dt><dd><dl><dt><a href="#id2936430">Note</a></dt></dl></dd></dl></dd><dt>IV. <a href="#migration">Migration and Updating</a></dt><dd><dl><dt>30. <a href="#upgrading-to-3.0">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="#id2936568">New Features in Samba-3</a></dt><dt><a href="#id2936703">Configuration Parameter Changes</a></dt><dd><dl><dt><a href="#id2936719">Removed Parameters</a></dt><dt><a href="#id2936845">New Parameters</a></dt><dt><a href="#id2937241">Modified Parameters (changes in behavior):</a></dt></dl></dd><dt><a href="#id2937316">New Functionality</a></dt><dd><dl><dt><a href="#id2937323">Databases</a></dt><dt><a href="#id2937557">Changes in Behavior</a></dt><dt><a href="#id2937607">Charsets</a></dt><dt><a href="#id2937630">Passdb Backends and Authentication</a></dt><dt><a href="#id2937749">Charsets</a></dt><dt><a href="#id2937773">LDAP</a></dt></dl></dd></dl></dd><dt>31. <a href="#NT4Migration">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="#id2938118">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2938143">Objectives</a></dt><dt><a href="#id2938581">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2938798">Migration Options</a></dt><dd><dl><dt><a href="#id2938888">Planning for Success</a></dt><dt><a href="#id2939144">Samba-3 Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="#SWAT">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="#id2939504">Features and Benefits</a></dt><dd><dl><dt><a href="#id2939553">Enabling SWAT for use</a></dt><dt><a href="#id2939790">Securing SWAT through SSL</a></dt><dt><a href="#id2939902">The SWAT Home Page</a></dt><dt><a href="#id2939968">Global Settings</a></dt><dt><a href="#id2940074">Share Settings</a></dt><dt><a href="#id2940138">Printers Settings</a></dt><dt><a href="#id2940203">The SWAT Wizard</a></dt><dt><a href="#id2940250">The Status Page</a></dt><dt><a href="#id2940302">The View Page</a></dt><dt><a href="#id2940326">The Password Change Page</a></dt></dl></dd></dl></dd></dl></dd><dt>V. <a href="#troubleshooting">Troubleshooting</a></dt><dd><dl><dt>33. <a href="#diagnosis">The Samba checklist</a></dt><dd><dl><dt><a href="#id2940455">Introduction</a></dt><dt><a href="#id2940496">Assumptions</a></dt><dt><a href="#id2940722">The tests</a></dt></dl></dd><dt>34. <a href="#problems">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="#id2942220">Diagnostics tools</a></dt><dd><dl><dt><a href="#id2942241">Debugging with Samba itself</a></dt><dt><a href="#id2942367">Tcpdump</a></dt><dt><a href="#id2942389">Ethereal</a></dt><dt><a href="#id2942441">The Windows Network Monitor</a></dt></dl></dd><dt><a href="#id2942759">Useful URLs</a></dt><dt><a href="#id2942799">Getting help from the mailing lists</a></dt><dt><a href="#id2942958">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="#bugreport">Reporting Bugs</a></dt><dd><dl><dt><a href="#id2943087">Introduction</a></dt><dt><a href="#id2943154">General info</a></dt><dt><a href="#id2943191">Debug levels</a></dt><dt><a href="#id2943400">Internal errors</a></dt><dt><a href="#id2943534">Attaching to a running process</a></dt><dt><a href="#id2943580">Patches</a></dt></dl></dd></dl></dd><dt>VI. <a href="#Appendixes">Appendixes</a></dt><dd><dl><dt>36. <a href="#compiling">How to compile Samba</a></dt><dd><dl><dt><a href="#id2943739">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2943756">Introduction</a></dt><dt><a href="#id2943794">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2944055">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2944120">Verifying Samba's PGP signature</a></dt><dt><a href="#id2944272">Building the Binaries</a></dt><dd><dl><dt><a href="#id2944452">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2944619">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2944727">Starting from inetd.conf</a></dt><dt><a href="#id2944974">Alternative: starting it as a daemon</a></dt></dl></dd></dl></dd><dt>37. <a href="#Portability">Portability</a></dt><dd><dl><dt><a href="#id2945137">HPUX</a></dt><dt><a href="#id2945225">SCO UNIX</a></dt><dt><a href="#id2945255">DNIX</a></dt><dt><a href="#id2945428">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2945472">AIX</a></dt><dd><dl><dt><a href="#id2945479">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2945504">Solaris</a></dt><dd><dl><dt><a href="#id2945511">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="#Other-Clients">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="#id2945664">Macintosh clients?</a></dt><dt><a href="#id2945743">OS2 Client</a></dt><dd><dl><dt><a href="#id2945750">Configuring OS/2 Warp Connect or
+ OS/2 Warp 4 as a client for Samba</a></dt><dt><a href="#id2945834">Configuring OS/2 Warp 3 (not Connect),
+ OS/2 1.2, 1.3 or 2.x for Samba</a></dt><dt><a href="#id2945887">Printer driver download for for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2945987">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2945995">Latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2946085">Delete .pwl files after password change</a></dt><dt><a href="#id2946115">Configuring WfW password handling</a></dt><dt><a href="#id2946168">Case handling of passwords</a></dt><dt><a href="#id2946205">Use TCP/IP as default protocol</a></dt><dt><a href="#id2946222">Speed improvement</a></dt></dl></dd><dt><a href="#id2946269">Windows '95/'98</a></dt><dd><dl><dt><a href="#id2946343">Speed improvement</a></dt></dl></dd><dt><a href="#id2946367">Windows 2000 Service Pack 2</a></dt><dt><a href="#id2946555">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="#speed">Samba Performance Tuning</a></dt><dd><dl><dt><a href="#id2946684">Comparisons</a></dt><dt><a href="#id2946728">Socket options</a></dt><dt><a href="#id2946819">Read size</a></dt><dt><a href="#id2946869">Max xmit</a></dt><dt><a href="#id2946928">Log level</a></dt><dt><a href="#id2946959">Read raw</a></dt><dt><a href="#id2947043">Write raw</a></dt><dt><a href="#id2947106">Slow Logins</a></dt><dt><a href="#id2947135">Client tuning</a></dt><dt><a href="#id2947160">Samba performance problem due changing kernel</a></dt><dt><a href="#id2947192">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="#DNSDHCP">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="#id2947297">Note</a></dt></dl></dd><dt>41. <a href="#Further-Resources">Further Resources</a></dt><dd><dl><dt><a href="#id2947365">Websites</a></dt><dt><a href="#id2947755">Related updates from Microsoft</a></dt></dl></dd></dl></dd><dt><a href="#id2947825">Index</a></dt></dl></div><div class="list-of-figures"><p><b>List of Figures</b></p><dl><dt>5.1. <a href="#domain-example">An Example Domain</a></dt><dt>10.1. <a href="#browsing1">Cross subnet browsing example</a></dt><dt>11.1. <a href="#idmap-diag">IDMAP</a></dt><dt>12.1. <a href="#idmap-group-diag">IDMAP groups</a></dt><dt>13.1. <a href="#access1">Overview of unix permissions field</a></dt><dt>16.1. <a href="#trusts1">Trusts overview</a></dt><dt>19.1. <a href="#small1">Windows Printing to a local Printer</a></dt><dt>19.2. <a href="#small2">Printing to a Postscript Printer</a></dt><dt>19.3. <a href="#small3">Ghostscript as a RIP for non-postscript printers</a></dt><dt>19.4. <a href="#small4">Prefiltering in CUPS to form Postscript</a></dt><dt>19.5. <a href="#small5">Adding Device-specific Print Options</a></dt><dt>19.6. <a href="#small6">Postscript to intermediate Raster format</a></dt><dt>19.7. <a href="#small7">CUPS-raster production using Ghostscript</a></dt><dt>19.8. <a href="#small8">Image format to CUPS-raster format conversion</a></dt><dt>19.9. <a href="#small9">Raster to Printer Specific formats</a></dt><dt>19.10. <a href="#small10">cupsomatic/foomatic processing versus Native CUPS</a></dt><dt>19.11. <a href="#pdftosocket">PDF to socket chain</a></dt><dt>19.12. <a href="#pdftoepsonusb">PDF to USB chain</a></dt><dt>19.13. <a href="#small11">Print Driver execution on the Client</a></dt><dt>19.14. <a href="#small12">Print Driver execution on the Server</a></dt><dt>19.15. <a href="#small13">Printing via CUPS/samba server</a></dt><dt>19.16. <a href="#small14">cupsaddsmb flowchart</a></dt><dt>19.17. <a href="#cups1">Filtering chain 1</a></dt><dt>19.18. <a href="#cups2">Filtering chain with cupsomatic</a></dt><dt>19.19. <a href="#a_small">CUPS Printing Overview</a></dt></dl></div><div class="list-of-tables"><p><b>List of Tables</b></p><dl><dt>7.1. <a href="#id2874105">Assumptions</a></dt><dt>10.1. <a href="#id2880049">Browse subnet example 1</a></dt><dt>10.2. <a href="#id2880162">Browse subnet example 2</a></dt><dt>10.3. <a href="#id2880274">Browse subnet example 3</a></dt><dt>10.4. <a href="#id2880391">Browse subnet example 4</a></dt><dt>11.1. <a href="#id2883788">Attributes in the sambaSamAccount objectclass (LDAP)</a></dt><dt>11.2. <a href="#id2884599">Basic smb.conf options for MySQL passdb backend</a></dt><dt>11.3. <a href="#id2884730">MySQL field names for MySQL passdb backend</a></dt><dt>13.1. <a href="#id2887226">Managing directories with unix and windows</a></dt><dt>13.2. <a href="#id2887628">User and Group Based Controls</a></dt><dt>13.3. <a href="#id2887984">File and Directory Permission Based Controls</a></dt><dt>13.4. <a href="#id2888364">Other Controls</a></dt><dt>19.1. <a href="#id2911136">PPD's shipped with CUPS</a></dt><dt>20.1. <a href="#id2922997">Extended Auditing Log Information</a></dt><dt>24.1. <a href="#id2930872">User Shell Folder registry keys default values</a></dt><dt>24.2. <a href="#id2931016">Defaults of profile settings registry keys</a></dt><dt>24.3. <a href="#id2931278">Defaults of default user profile paths registry keys</a></dt><dt>25.1. <a href="#id2933597">Options recognized by pam_smbpass</a></dt><dt>26.1. <a href="#id2934846">Unique NetBIOS names</a></dt><dt>26.2. <a href="#id2934916">Group Names</a></dt><dt>30.1. <a href="#id2937342">TDB File Descriptions</a></dt><dt>31.1. <a href="#id2938813">The 3 Major Site Types</a></dt><dt>31.2. <a href="#id2938959">Nature of the Conversion Choices</a></dt></dl></div><div class="list-of-examples"><p><b>List of Examples</b></p><dl><dt>2.1. <a href="#id2866491">Simplest possible smb.conf file</a></dt><dt>5.1. <a href="#pdc-example">smb.conf for being a PDC</a></dt><dt>5.2. <a href="#id2870798">smb.conf for being a PDC</a></dt><dt>6.1. <a href="#id2872218">Minimal smb.conf for being a PDC</a></dt><dt>6.2. <a href="#id2872495">Minimal setup for being a BDC</a></dt><dt>8.1. <a href="#id2875707">smb.conf for Reference Documentation Server</a></dt><dt>8.2. <a href="#id2876026">smb.conf for anonymous printing</a></dt><dt>10.1. <a href="#id2877630">Domain master browser smb.conf</a></dt><dt>10.2. <a href="#id2877721">Local master browser smb.conf</a></dt><dt>10.3. <a href="#id2877859">smb.conf for not being a master browser</a></dt><dt>10.4. <a href="#id2877965">Local master browser smb.conf</a></dt><dt>10.5. <a href="#id2878082">smb.conf for not being a master browser</a></dt><dt>11.1. <a href="#idmapbackendexample"></a></dt><dt>11.2. <a href="#id2883349">Configuration with LDAP</a></dt><dt>12.1. <a href="#id2886226">smbgrpadd.sh</a></dt><dt>13.1. <a href="#id2887436">Example File</a></dt><dt>14.1. <a href="#id2892244">Share with some files oplocked</a></dt><dt>14.2. <a href="#id2892403"></a></dt><dt>17.1. <a href="#id2895128">smb.conf with DFS configured</a></dt><dt>18.1. <a href="#id2896217">Simple configuration with BSD printing</a></dt><dt>18.2. <a href="#extbsdpr">Extended configuration with BSD printing</a></dt><dt>18.3. <a href="#id2900085">[print\$] example</a></dt><dt>19.1. <a href="#id2906712">Simplest printing-related smb.conf</a></dt><dt>19.2. <a href="#id2906897">Overriding global CUPS settings for one printer</a></dt><dt>19.3. <a href="#id2913310">smb.conf for cupsaddsmb usage</a></dt><dt>20.1. <a href="#id2922709">smb.conf with VFS modules</a></dt><dt>20.2. <a href="#id2922809">smb.conf with multiple VFS modules</a></dt><dt>21.1. <a href="#id2924824">smb.conf for winbind set-up</a></dt><dt>33.1. <a href="#id2940544">smb.conf with [tmp] share</a></dt><dt>38.1. <a href="#id2946439">Minimal profile share</a></dt></dl></div><div class="preface" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2852328"></a>Legal Notice</h2></div></div><div></div></div><p>
+This documentation is distributed under the GNU General Public License (GPL)
+version 2. A copy of the license is included with the Samba source
+distribution. A copy can be found on-line at <a href="http://www.fsf.org/licenses/gpl.txt" target="_top">http://www.fsf.org/licenses/gpl.txt</a>
+</p></div><div class="preface" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2852352"></a>Attributions</h2></div></div><div></div></div><p><a href="#IntroSMB" title="Chapter1.Introduction to Samba">Introduction to Samba</a></p><div class="itemizedlist"><ul type="disc"><li><p>David Lechnyr &lt;<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>&gt;</p></li></ul></div><p><a href="#install" title="Chapter2.How to Install and Test SAMBA">How to Install and Test SAMBA</a></p><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Karl Auer</p></li></ul></div><p><a href="#FastStart" title="Chapter3.Fast Start for the Impatient">Fast Start for the Impatient</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#ServerType" title="Chapter4.Server Types and Security Modes">Server Types and Security Modes</a></p><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#samba-pdc" title="Chapter5.Domain Control">Domain Control</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>David Bannon &lt;<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>&gt;</p></li></ul></div><p><a href="#samba-bdc" title="Chapter6.Backup Domain Control">Backup Domain Control</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Volker Lendecke &lt;<a href="mailto:Volker.Lendecke@SerNet.DE" target="_top">Volker.Lendecke@SerNet.DE</a>&gt;</p></li></ul></div><p><a href="#domain-member" title="Chapter7.Domain Membership">Domain Membership</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div><p><a href="#StandAloneServer" title="Chapter8.Stand-Alone Servers">Stand-Alone Servers</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#ClientConfig" title="Chapter9.MS Windows Network Configuration Guide">MS Windows Network Configuration Guide</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#NetworkBrowsing" title="Chapter10.Samba / MS Windows Network Browsing Guide">Samba / MS Windows Network Browsing Guide</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div><p><a href="#passdb" title="Chapter11.Account Information Databases">Account Information Databases</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Olivier (lem) Lemaire &lt;<a href="mailto:olem@IDEALX.org" target="_top">olem@IDEALX.org</a>&gt;</p></li></ul></div><p><a href="#groupmapping" title="Chapter12.Mapping MS Windows and UNIX Groups">Mapping MS Windows and UNIX Groups</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jean Franois Micouleau</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#AccessControls" title="Chapter13.File, Directory and Share Access Controls">File, Directory and Share Access Controls</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt; (drawing) </p></li></ul></div><p><a href="#locking" title="Chapter14.File and Record Locking">File and Record Locking</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Eric Roseme &lt;<a href="mailto:eric.roseme@hp.com" target="_top">eric.roseme@hp.com</a>&gt;</p></li></ul></div><p><a href="#securing-samba" title="Chapter15.Securing Samba">Securing Samba</a></p><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#InterdomainTrusts" title="Chapter16.Interdomain Trust Relationships">Interdomain Trust Relationships</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Rafal Szczesniak &lt;<a href="mailto:mimir@samba.org" target="_top">mimir@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt; (drawing) </p></li><li><p>Stephen Langasek &lt;<a href="mailto:vorlon@netexpress.net" target="_top">vorlon@netexpress.net</a>&gt;</p></li></ul></div><p><a href="#msdfs" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba">Hosting a Microsoft Distributed File System tree on Samba</a></p><div class="itemizedlist"><ul type="disc"><li><p>Shirish Kalele &lt;<a href="mailto:samba@samba.org" target="_top">samba@samba.org</a>&gt;</p></li></ul></div><p><a href="#printing" title="Chapter18.Classical Printing Support">Classical Printing Support</a></p><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle &lt;<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>&gt;</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li></ul></div><p><a href="#CUPS-printing" title="Chapter19.CUPS Printing Support in Samba 3.0">CUPS Printing Support in Samba 3.0</a></p><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle &lt;<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>&gt;</p></li><li><p>Ciprian Vizitiu &lt;<a href="mailto:CVizitiu@gbif.org" target="_top">CVizitiu@gbif.org</a>&gt; (drawings) </p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt; (drawings) </p></li></ul></div><p><a href="#VFS" title="Chapter20.Stackable VFS modules">Stackable VFS modules</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Tim Potter</p></li><li><p>Simo Sorce (original vfs_skel README) </p></li><li><p>Alexander Bokovoy (original vfs_netatalk docs) </p></li><li><p>Stefan Metzmacher (Update for multiple modules) </p></li></ul></div><p><a href="#AdvancedNetworkManagement" title="Chapter22.Advanced Network Management">Advanced Network Management</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#PolicyMgmt" title="Chapter23.System and Account Policies">System and Account Policies</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#ProfileMgmt" title="Chapter24.Desktop Profile Management">Desktop Profile Management</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#pam" title="Chapter25.PAM based Distributed Authentication">PAM based Distributed Authentication</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Stephen Langasek &lt;<a href="mailto:vorlon@netexpress.net" target="_top">vorlon@netexpress.net</a>&gt;</p></li></ul></div><p><a href="#integrate-ms-networks" title="Chapter26.Integrating MS Windows networks with Samba">Integrating MS Windows networks with Samba</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#unicode" title="Chapter27.Unicode/Charsets">Unicode/Charsets</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>TAKAHASHI Motonobu &lt;<a href="mailto:monyo@home.monyo.com" target="_top">monyo@home.monyo.com</a>&gt;</p></li></ul></div><p><a href="#Backup" title="Chapter28.Samba Backup Techniques">Samba Backup Techniques</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#SambaHA" title="Chapter29.High Availability Options">High Availability Options</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#upgrading-to-3.0" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0">Upgrading from Samba-2.x to Samba-3.0.0</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li></ul></div><p><a href="#NT4Migration" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC">Migration from NT4 PDC to Samba-3 PDC</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#SWAT" title="Chapter32.SWAT - The Samba Web Administration Tool">SWAT - The Samba Web Administration Tool</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#diagnosis" title="Chapter33.The Samba checklist">The Samba checklist</a></p><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div><p><a href="#problems" title="Chapter34.Analysing and solving samba problems">Analysing and solving samba problems</a></p><div class="itemizedlist"><ul type="disc"><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>David Bannon &lt;<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>&gt;</p></li></ul></div><p><a href="#bugreport" title="Chapter35.Reporting Bugs">Reporting Bugs</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li></ul></div><p><a href="#compiling" title="Chapter36.How to compile Samba">How to compile Samba</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li></ul></div><p><a href="#Portability" title="Chapter37.Portability">Portability</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div><p><a href="#Other-Clients" title="Chapter38.Samba and other CIFS clients">Samba and other CIFS clients</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>Jim McDonough &lt;<a href="mailto:jmcd@us.ibm.com" target="_top">jmcd@us.ibm.com</a>&gt; (OS/2) </p></li></ul></div><p><a href="#speed" title="Chapter39.Samba Performance Tuning">Samba Performance Tuning</a></p><div class="itemizedlist"><ul type="disc"><li><p>Paul Cochrane &lt;<a href="mailto:paulc@dth.scot.nhs.uk" target="_top">paulc@dth.scot.nhs.uk</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#DNSDHCP" title="Chapter40.DNS and DHCP Configuration Guide">DNS and DHCP Configuration Guide</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="#Further-Resources" title="Chapter41.Further Resources">Further Resources</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="introduction"></a>General Installation</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2800298"></a>Preparing Samba for Configuration</h1></div></div><div></div></div><p>This section of the Samba-HOWTO-Collection contains general info on how to install samba
and how to configure the parts of samba you will most likely need.
-PLEASE read this.</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="#IntroSMB">Introduction to Samba</a></dt><dd><dl><dt><a href="#id2867763">Background</a></dt><dt><a href="#id2867816">Terminology</a></dt><dt><a href="#id2866541">Related Projects</a></dt><dt><a href="#id2866610">SMB Methodology</a></dt><dt><a href="#id2866696">Epilogue</a></dt><dt><a href="#id2866770">Miscellaneous</a></dt></dl></dd><dt>2. <a href="#install">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="#id2867536">Obtaining and installing samba</a></dt><dt><a href="#id2867578">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2867152">Example Configuration</a></dt><dt><a href="#id2867295">SWAT</a></dt></dl></dd><dt><a href="#id2867340">Try listing the shares available on your
- server</a></dt><dt><a href="#id2866845">Try connecting with the unix client</a></dt><dt><a href="#id2866947">Try connecting from a DOS, WfWg, Win9x, WinNT,
- Win2k, OS/2, etc... client</a></dt><dt><a href="#id2867008">What If Things Don't Work?</a></dt><dt><a href="#id2867038">Common Errors</a></dt><dd><dl><dt><a href="#id2867051">Why are so many smbd processes eating memory?</a></dt><dt><a href="#id2868426">I'm getting &quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot; in the logs</a></dt></dl></dd></dl></dd><dt>3. <a href="#FastStart">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="#id2868875">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="IntroSMB"></a>Chapter1.Introduction to Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 14, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2867763">Background</a></dt><dt><a href="#id2867816">Terminology</a></dt><dt><a href="#id2866541">Related Projects</a></dt><dt><a href="#id2866610">SMB Methodology</a></dt><dt><a href="#id2866696">Epilogue</a></dt><dt><a href="#id2866770">Miscellaneous</a></dt></dl></div><p>&#8220;<span class="quote">
+PLEASE read this.</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="#IntroSMB">Introduction to Samba</a></dt><dd><dl><dt><a href="#id2800382">Background</a></dt><dt><a href="#id2800440">Terminology</a></dt><dt><a href="#id2800631">Related Projects</a></dt><dt><a href="#id2800699">SMB Methodology</a></dt><dt><a href="#id2800808">Epilogue</a></dt><dt><a href="#id2800892">Miscellaneous</a></dt></dl></dd><dt>2. <a href="#install">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="#id2866386">Obtaining and installing samba</a></dt><dt><a href="#id2866430">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2866468">Example Configuration</a></dt><dt><a href="#id2866661">SWAT</a></dt></dl></dd><dt><a href="#id2866706">Try listing the shares available on your
+ server</a></dt><dt><a href="#id2866764">Try connecting with the unix client</a></dt><dt><a href="#id2866881">Try connecting from another SMB client</a></dt><dt><a href="#id2866964">What If Things Don't Work?</a></dt><dt><a href="#id2866997">Common Errors</a></dt><dd><dl><dt><a href="#id2867010">Large number of smbd processes</a></dt><dt><a href="#id2867109">&quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot;</a></dt><dt><a href="#id2867129">&quot;The network name cannot be found&quot;</a></dt></dl></dd></dl></dd><dt>3. <a href="#FastStart">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="#id2867256">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="IntroSMB"></a>Chapter1.Introduction to Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 14, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2800382">Background</a></dt><dt><a href="#id2800440">Terminology</a></dt><dt><a href="#id2800631">Related Projects</a></dt><dt><a href="#id2800699">SMB Methodology</a></dt><dt><a href="#id2800808">Epilogue</a></dt><dt><a href="#id2800892">Miscellaneous</a></dt></dl></div><p>&#8220;<span class="quote">
&quot;If you understand what you're doing, you're not learning anything.&quot;
-- Anonymous
</span>&#8221;</p><p>
@@ -86,7 +85,7 @@ transport protocol. In fact, it can support any SMB/CIFS-enabled client. One of
strengths is that you can use it to blend your mix of Windows and Linux machines together
without requiring a separate Windows NT/2000/2003 Server. Samba is actively being developed
by a global team of about 30 active programmers and was originally developed by Andrew Tridgell.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867763"></a>Background</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800382"></a>Background</h2></div></div><div></div></div><p>
Once long ago, there was a buzzword referred to as DCE/RPC. This stood for Distributed
Computing Environment/Remote Procedure Calls and conceptually was a good idea. It was
originally developed by Apollo/HP as NCA 1.0 (Network Computing Architecture) and only
@@ -112,7 +111,7 @@ been dutifully waded through during the information-gathering stages of this pro
are *still* many missing pieces... While often tedious, at least the way has been generously
littered with occurrences of clapping hand to forehead and muttering 'crikey, what are they
thinking?
-</em></span></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867816"></a>Terminology</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
+</em></span></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800440"></a>Terminology</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
SMB: Acronym for &quot;Server Message Block&quot;. This is Microsoft's file and printer sharing protocol.
</p></li><li><p>
CIFS: Acronym for &quot;Common Internet File System&quot;. Around 1996, Microsoft apparently
@@ -162,7 +161,7 @@ thinking?
W3K: Acronym for Windows 2003 Server
</p></li></ul></div><p>If you plan on getting help, make sure to subscribe to the Samba Mailing List (available at
<a href="http://www.samba.org/" target="_top">http://www.samba.org</a>).
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866541"></a>Related Projects</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800631"></a>Related Projects</h2></div></div><div></div></div><p>
There are currently two network filesystem client projects for Linux that are directly
related to Samba: SMBFS and CIFS VFS. These are both available in the Linux kernel itself.
</p><div class="itemizedlist"><ul type="disc"><li><p>
@@ -184,7 +183,7 @@ nothing to do with acting as a file and print server for SMB/CIFS clients.
There are other Open Source CIFS client implementations, such as the
<a href="http://jcifs.samba.org/" target="_top">jCIFS project</a>
which provides an SMB client toolkit written in Java.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866610"></a>SMB Methodology</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800699"></a>SMB Methodology</h2></div></div><div></div></div><p>
Traditionally, SMB uses UDP port 137 (NetBIOS name service, or netbios-ns),
UDP port 138 (NetBIOS datagram service, or netbios-dgm), and TCP port 139 (NetBIOS
session service, or netbios-ssn). Anyone looking at their network with a good
@@ -216,7 +215,7 @@ up a single file. In general, SMB sessions are established in the following orde
A good way to examine this process in depth is to try out
<a href="http://www.securityfriday.com/ToolDownload/SWB/swb_doc.html" target="_top">SecurityFriday's SWB program</a>.
It allows you to walk through the establishment of a SMB/CIFS session step by step.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866696"></a>Epilogue</h2></div></div><div></div></div><p>&#8220;<span class="quote">
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800808"></a>Epilogue</h2></div></div><div></div></div><p>&#8220;<span class="quote">
What's fundamentally wrong is that nobody ever had any taste when they
did it. Microsoft has been very much into making the user interface look good,
but internally it's just a complete mess. And even people who program for Microsoft
@@ -245,56 +244,47 @@ not the completely clueless user who probably sits there shivering thinking
That's what's really irritating to me.&quot;
</span>&#8221;</p><p>--
<a href="http://hr.uoregon.edu/davidrl/boot.txt" target="_top">Linus Torvalds, from an interview with BOOT Magazine, Sept 1998</a>
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866770"></a>Miscellaneous</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2800892"></a>Miscellaneous</h2></div></div><div></div></div><p>
This chapter is Copyright 2003 David Lechnyr (david at lechnyr dot com).
Permission is granted to copy, distribute and/or modify this document under the terms
of the GNU Free Documentation License, Version 1.2 or any later version published by the Free
Software Foundation. A copy of the license is available at http://www.gnu.org/licenses/fdl.txt.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="install"></a>Chapter2.How to Install and Test SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Karl</span> <span class="surname">Auer</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2867536">Obtaining and installing samba</a></dt><dt><a href="#id2867578">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2867152">Example Configuration</a></dt><dt><a href="#id2867295">SWAT</a></dt></dl></dd><dt><a href="#id2867340">Try listing the shares available on your
- server</a></dt><dt><a href="#id2866845">Try connecting with the unix client</a></dt><dt><a href="#id2866947">Try connecting from a DOS, WfWg, Win9x, WinNT,
- Win2k, OS/2, etc... client</a></dt><dt><a href="#id2867008">What If Things Don't Work?</a></dt><dt><a href="#id2867038">Common Errors</a></dt><dd><dl><dt><a href="#id2867051">Why are so many smbd processes eating memory?</a></dt><dt><a href="#id2868426">I'm getting &quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot; in the logs</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867536"></a>Obtaining and installing samba</h2></div></div><div></div></div><p>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="install"></a>Chapter2.How to Install and Test SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Karl</span> <span class="surname">Auer</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2866386">Obtaining and installing samba</a></dt><dt><a href="#id2866430">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="#id2866468">Example Configuration</a></dt><dt><a href="#id2866661">SWAT</a></dt></dl></dd><dt><a href="#id2866706">Try listing the shares available on your
+ server</a></dt><dt><a href="#id2866764">Try connecting with the unix client</a></dt><dt><a href="#id2866881">Try connecting from another SMB client</a></dt><dt><a href="#id2866964">What If Things Don't Work?</a></dt><dt><a href="#id2866997">Common Errors</a></dt><dd><dl><dt><a href="#id2867010">Large number of smbd processes</a></dt><dt><a href="#id2867109">&quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot;</a></dt><dt><a href="#id2867129">&quot;The network name cannot be found&quot;</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866386"></a>Obtaining and installing samba</h2></div></div><div></div></div><p>
Binary packages of samba are included in almost any Linux or
- Unix distribution. There are also some packages available at
+ UNIX distribution. There are also some packages available at
<a href="http://samba.org/" target="_top">the samba homepage</a>.
- </p><p>If you need to compile samba from source, check the
- <a href="#compiling" title="Chapter36.How to compile SAMBA">appropriate appendix chapter</a>.</p><p>If you have already installed samba, or if your operating system
+ </p><p>If you need to compile samba from source, check
+ <a href="#compiling" title="Chapter36.How to compile Samba">the chapter about compiling samba from scratch</a>.</p><p>If you have already installed samba, or if your operating system
was pre-installed with samba, then you may not need to bother with this
chapter. On the other hand, you may want to read this chapter anyhow
- for information about updating samba.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867578"></a>Configuring samba (smb.conf)</h2></div></div><div></div></div><p>
+ for information about updating samba.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866430"></a>Configuring samba (smb.conf)</h2></div></div><div></div></div><p>
Samba's configuration is stored in the <tt class="filename">smb.conf</tt> file,
that usually resides in <tt class="filename">/etc/samba/smb.conf</tt>
or <tt class="filename">/usr/local/samba/lib/smb.conf</tt>. You can either
edit this file yourself or do it using one of the many graphical
tools that are available, such as the web-based interface swat, that
is included with samba.
- </p><div xmlns:ns2="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867152"></a>Example Configuration</h3></div></div><div></div></div><p>
+ </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866468"></a>Example Configuration</h3></div></div><div></div></div><p>
There are sample configuration files in the examples subdirectory in the
distribution. I suggest you read them carefully so you can see how the options
go together in practice. See the man page for all the options.
</p><p>
The simplest useful configuration file would be something like this:
- </p><ns2:p>
- </ns2:p><pre class="programlisting">
- [global]
- workgroup = MYGROUP
-
- [homes]
- guest ok = no
- read only = no
- </pre><ns2:p>
- </ns2:p><p>
+ </p><p>
+ </p><div class="example"><a name="id2866491"></a><p class="title"><b>Example2.1.Simplest possible smb.conf file</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[homes]</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = no</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = no</tt></i></td></tr></table></div><p>
+ </p><p>
This will allow connections by anyone with an account on the server, using either
- their login name or &quot;<i class="parameter"><tt>homes</tt></i>&quot; as the service name.
+ their login name or <i class="parameter"><tt>homes</tt></i>&quot; as the service name.
(Note that the workgroup that Samba must also be set.)
</p><p>
- Make sure you put the <tt class="filename">smb.conf</tt> file in the same place
- you specified in the <tt class="filename">Makefile</tt> (the default is to
- look for it in <tt class="filename">/usr/local/samba/lib/</tt>).
+ Make sure you put the <tt class="filename">smb.conf</tt> file in the correct place
+ (usually in <tt class="filename">/etc/samba</tt>).
</p><p>
For more information about security settings for the
- <i class="parameter"><tt>[homes]</tt></i> share please refer to the chapter
- <a href="#securing-samba" title="Chapter15.Securing Samba">Securing Samba</a>.
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2867242"></a>Test your config file with <b class="command">testparm</b></h4></div></div><div></div></div><p>
+ <i class="parameter"><tt>[homes]</tt></i> share please refer to
+ <a href="#securing-samba" title="Chapter15.Securing Samba">&quot;Securing Samba&quot;</a>.
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2866608"></a>Test your config file with <b class="command">testparm</b></h4></div></div><div></div></div><p>
It's important that you test the validity of your <tt class="filename">smb.conf</tt>
file using the <span class="application">testparm</span> program. If testparm runs OK
then it will list the loaded services. If not it will give an error message.
@@ -302,7 +292,7 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li
Make sure it runs OK and that the services look reasonable before proceeding.
</p><p>
Always run testparm again when you change <tt class="filename">smb.conf</tt>!
- </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867295"></a>SWAT</h3></div></div><div></div></div><p>
+ </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2866661"></a>SWAT</h3></div></div><div></div></div><p>
SWAT is a web-based interface that helps you configure samba.
SWAT might not be available in the samba package on your platform,
but in a separate package. Please read the swat manpage
@@ -318,9 +308,10 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li
machine but connecting from a remote machine leaves your
connection open to password sniffing as passwords will be sent
in the clear over the wire.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867340"></a>Try listing the shares available on your
- server</h2></div></div><div></div></div><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient -L
- <i class="replaceable"><tt>yourhostname</tt></i></tt></b></p><p>You should get back a list of shares available on
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866706"></a>Try listing the shares available on your
+ server</h2></div></div><div></div></div><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>smbclient -L <i class="replaceable"><tt>yourhostname</tt></i></tt></b>
+</pre><p>You should get back a list of shares available on
your server. If you don't then something is incorrectly setup.
Note that this method can also be used to see what shares
are available on other LanManager clients (such as WfWg).</p><p>If you choose user level security then you may find
@@ -328,68 +319,31 @@ Software Foundation. A copy of the license is available at http://www.gnu.org/li
See the <b class="command">smbclient</b> man page for details. (you
can force it to list the shares without a password by
adding the option -U% to the command line. This will not work
- with non-Samba servers)</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866845"></a>Try connecting with the unix client</h2></div></div><div></div></div><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient <i class="replaceable"><tt>
- //yourhostname/aservice</tt></i></tt></b></p><p>Typically the <i class="replaceable"><tt>yourhostname</tt></i>
+ with non-Samba servers)</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866764"></a>Try connecting with the unix client</h2></div></div><div></div></div><p>
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>smbclient <i class="replaceable"><tt> //yourhostname/aservice</tt></i></tt></b>
+</pre><p>Typically the <i class="replaceable"><tt>yourhostname</tt></i>
would be the name of the host where you installed <span class="application">smbd</span>.
The <i class="replaceable"><tt>aservice</tt></i> is
any service you have defined in the <tt class="filename">smb.conf</tt>
file. Try your user name if you just have a <i class="parameter"><tt>[homes]</tt></i>
section
in <tt class="filename">smb.conf</tt>.</p><p>For example if your unix host is <i class="replaceable"><tt>bambi</tt></i>
- and your login name is <i class="replaceable"><tt>fred</tt></i> you would type:</p><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient //<i class="replaceable"><tt>bambi</tt></i>/<i class="replaceable"><tt>fred</tt></i>
- </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866947"></a>Try connecting from a DOS, WfWg, Win9x, WinNT,
- Win2k, OS/2, etc... client</h2></div></div><div></div></div><p>Try mounting disks. eg:</p><p><tt class="prompt">C:\WINDOWS\&gt; </tt><b class="userinput"><tt>net use d: \\servername\service
- </tt></b></p><p>Try printing. eg:</p><p><tt class="prompt">C:\WINDOWS\&gt; </tt><b class="userinput"><tt>net use lpt1:
- \\servername\spoolservice</tt></b></p><p><tt class="prompt">C:\WINDOWS\&gt; </tt><b class="userinput"><tt>print filename
- </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867008"></a>What If Things Don't Work?</h2></div></div><div></div></div><p>Then you might read the file chapter
- <a href="#diagnosis" title="Chapter33.The Samba checklist">Diagnosis</a> and the
- FAQ. If you are still stuck then try to follow
- the <a href="#problems" title="Chapter34.Analysing and solving samba problems">Analysing and Solving Problems chapter</a>
+ and your login name is <i class="replaceable"><tt>fred</tt></i> you would type:</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>smbclient //<i class="replaceable"><tt>bambi</tt></i>/<i class="replaceable"><tt>fred</tt></i></tt></b>
+</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866881"></a>Try connecting from another SMB client</h2></div></div><div></div></div><p>Try mounting disks. from a DOS, Windows or OS/2 client, eg:</p><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>net use d: \\servername\service</tt></b>
+</pre><p>Try printing. eg:</p><p>
+</p><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>net use lpt1: \\servername\spoolservice</tt></b>
+</pre><p>
+</p><pre class="screen"><tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>print filename</tt></b>
+</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866964"></a>What If Things Don't Work?</h2></div></div><div></div></div><p>Then you might read the file chapter <a href="#diagnosis" title="Chapter33.The Samba checklist">diagnosis</a>
+ and the FAQ. If you are still stuck then refer to <a href="#problems" title="Chapter34.Analysing and solving samba problems">&quot;Analysing and solving problems&quot;</a>.
Samba has been successfully installed at thousands of sites worldwide,
- so maybe someone else has hit your problem and has overcome it. </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867038"></a>Common Errors</h2></div></div><div></div></div><p>
+ so maybe someone else has hit your problem and has overcome it.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2866997"></a>Common Errors</h2></div></div><div></div></div><p>
The following questions and issues get raised on the samba mailing list over and over again.
-</p><div xmlns:ns3="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867051"></a>Why are so many smbd processes eating memory?</h3></div></div><div></div></div><p>
-&#8220;<span class="quote">
-Site that is running Samba on an AIX box. They are sharing out about 2 terabytes using samba.
-Samba was installed using smitty and the binaries. We seem to be experiencing a memory problem
-with this box. When I do a <b class="command">svmon -Pu</b> the monitoring program shows that <span class="application">smbd</span> has several
-processes of smbd running:
-</span>&#8221;
-</p><p>
- &#8220;<span class="quote">
-Is samba suppose to start this many different smbd processes? Or does it run as one smbd process? Also
-is it normal for it to be taking up this much memory?
-</span>&#8221;
-</p><ns3:p>
-</ns3:p><pre class="screen">
-Inuse * 4096 = amount of memory being used by this process
-
- Pid Command Inuse Pin Pgsp Virtual 64-bit Mthrd
- 20950 smbd 33098 1906 181 5017 N N
- 22262 smbd 9104 1906 5410
- 21060 smbd 9048 1906 181 5479 N N
- 25972 smbd 8678 1906 181 5109 N N
- 24524 smbd 8674 1906 181 5105 N N
- 19262 smbd 8582 1906 181 5013 N N
- 20722 smbd 8572 1906 181 5003 N N
- 21454 smbd 8572 1906 181 5003 N N
- 28946 smbd 8567 1906 181 4996 N N
- 24076 smbd 8566 1906 181 4996 N N
- 20138 smbd 8566 1906 181 4996 N N
- 17608 smbd 8565 1906 181 4996 N N
- 21820 smbd 8565 1906 181 4996 N N
- 26940 smbd 8565 1906 181 4996 N N
- 19884 smbd 8565 1906 181 4996 N N
- 9912 smbd 8565 1906 181 4996 N N
- 25800 smbd 8564 1906 181 4995 N N
- 20452 smbd 8564 1906 181 4995 N N
- 18592 smbd 8562 1906 181 4993 N N
- 28216 smbd 8521 1906 181 4954 N N
- 19110 smbd 8404 1906 181 4862 N N
-
- Total memory used: 841,592,832 bytes
-</pre><ns3:p>
-</ns3:p><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867010"></a>Large number of smbd processes</h3></div></div><div></div></div><p>
Samba consists on three core programs:
<span class="application">nmbd</span>, <span class="application">smbd</span>, <span class="application">winbindd</span>. <span class="application">nmbd</span> is the name server message daemon,
<span class="application">smbd</span> is the server message daemon, <span class="application">winbindd</span> is the daemon that
@@ -404,18 +358,19 @@ connection made. That is why you are seeing so many of them, one (1) per client
</p><p>
<span class="application">winbindd</span> will run as one or two daemons, depending on whether or not it is being
run in &quot;split mode&quot; (in which case there will be two instances).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868426"></a>I'm getting &quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot; in the logs</h3></div></div><div></div></div><p>Your loopback device isn't working correctly. Make sure it's running. </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FastStart"></a>Chapter3.Fast Start for the Impatient</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2868875">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868875"></a>Note</h2></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867109"></a>&quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot;</h3></div></div><div></div></div><p>Your loopback device isn't working correctly. Make sure it's configured properly. The loopback device is an internal (virtual) network device with
+ the ip address 127.0.0.1. Read your OS documentation for details
+ on how to configure the loopback on your system.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867129"></a>&quot;<span class="errorname">The network name cannot be found</span>&quot;</h3></div></div><div></div></div><p>
+ This error can be caused by one of these misconfigurations:
+ </p><div class="itemizedlist"><ul type="disc"><li><p>You specified an nonexisting <a class="indexterm" name="id2867155"></a><i class="parameter"><tt>path</tt></i> for the share in <tt class="filename">smb.conf</tt> </p></li><li><p>The user you are trying to access the share with does not
+ have sufficient permissions to access the <a class="indexterm" name="id2867184"></a><i class="parameter"><tt>path</tt></i> for the share. Both read (r) and access (x) should be possible.</p></li><li><p>The share you are trying to access does not exist.</p></li></ul></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="FastStart"></a>Chapter3.Fast Start for the Impatient</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2867256">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867256"></a>Note</h2></div></div><div></div></div><p>
This chapter did not make it into this release.
It is planned for the published release of this document.
-</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="type"></a>Server Configuration Basics</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2868902"></a>First Steps in Server Configuration</h1></div></div><div></div></div><p>
+</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="type"></a>Server Configuration Basics</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2867283"></a>First Steps in Server Configuration</h1></div></div><div></div></div><p>
Samba can operate in various modes within SMB networks. This HOWTO section contains information on
configuring samba to function as the type of server your network requires. Please read this
section carefully.
-</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>4. <a href="#ServerType">Server Types and Security Modes</a></dt><dd><dl><dt><a href="#id2871949">Features and Benefits</a></dt><dt><a href="#id2872041">Server Types</a></dt><dt><a href="#id2872122">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2868550">User Level Security</a></dt><dt><a href="#id2868682">Share Level Security</a></dt><dt><a href="#id2869754">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2869996">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2870079">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2870304">Seamless Windows Network Integration</a></dt><dt><a href="#id2870481">Common Errors</a></dt><dd><dl><dt><a href="#id2870509">What makes Samba a SERVER?</a></dt><dt><a href="#id2870542">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2870571">What makes Samba a Domain Member?</a></dt><dt><a href="#id2872482">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="#samba-pdc">Domain Control</a></dt><dd><dl><dt><a href="#id2875113">Features and Benefits</a></dt><dt><a href="#id2872711">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2872727">Domain Controller Types</a></dt><dt><a href="#id2872926">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2873240">Domain Control - Example Configuration</a></dt><dt><a href="#id2873537">Samba ADS Domain Control</a></dt><dt><a href="#id2873559">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2873574">Domain Network Logon Service</a></dt><dt><a href="#id2876300">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2876404">Common Problems and Errors</a></dt><dd><dl><dt><a href="#id2876412">I cannot include a '$' in a machine name</a></dt><dt><a href="#id2876450">I get told &quot;You already have a connection to the Domain....&quot;
-or &quot;Cannot join domain, the credentials supplied conflict with an
-existing set..&quot; when creating a machine trust account.</a></dt><dt><a href="#id2876500">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2876570">The machine trust account for this computer either does not
-exist or is not accessible.</a></dt><dt><a href="#id2876634">When I attempt to login to a Samba Domain from a NT4/W2K workstation,
-I get a message about my account being disabled.</a></dt><dt><a href="#id2876660">Until a few minutes after Samba has started, clients get the error &quot;Domain Controller Unavailable&quot;</a></dt></dl></dd></dl></dd><dt>6. <a href="#samba-bdc">Backup Domain Control</a></dt><dd><dl><dt><a href="#id2878706">Features And Benefits</a></dt><dt><a href="#id2878870">Essential Background Information</a></dt><dd><dl><dt><a href="#id2878898">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2876857">Active Directory Domain Control</a></dt><dt><a href="#id2876879">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2876902">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2876928">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2877029">Example Configuration</a></dt></dl></dd><dt><a href="#id2877079">Common Errors</a></dt><dd><dl><dt><a href="#id2877093">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2877125">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2877158">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2877202">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="#domain-member">Domain Membership</a></dt><dd><dl><dt><a href="#id2877728">Features and Benefits</a></dt><dt><a href="#id2877298">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2877460">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879244">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2879440">&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879495">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2879692">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2882368">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2882506">Setup your smb.conf</a></dt><dt><a href="#id2882590">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2882938">Notes</a></dt></dl></dd><dt><a href="#id2882960">Common Errors</a></dt><dd><dl><dt><a href="#id2882986">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2883018">Adding Machine to Domain Fails</a></dt></dl></dd></dl></dd><dt>8. <a href="#StandAloneServer">Stand-Alone Servers</a></dt><dd><dl><dt><a href="#id2884461">Features and Benefits</a></dt><dt><a href="#id2884499">Background</a></dt><dt><a href="#id2884567">Example Configuration</a></dt><dd><dl><dt><a href="#id2883169">Reference Documentation Server</a></dt><dt><a href="#id2883216">Central Print Serving</a></dt></dl></dd><dt><a href="#id2883429">Common Errors</a></dt></dl></dd><dt>9. <a href="#ClientConfig">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="#id2883797">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ServerType"></a>Chapter4.Server Types and Security Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2871949">Features and Benefits</a></dt><dt><a href="#id2872041">Server Types</a></dt><dt><a href="#id2872122">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2868550">User Level Security</a></dt><dt><a href="#id2868682">Share Level Security</a></dt><dt><a href="#id2869754">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2869996">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2870079">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2870304">Seamless Windows Network Integration</a></dt><dt><a href="#id2870481">Common Errors</a></dt><dd><dl><dt><a href="#id2870509">What makes Samba a SERVER?</a></dt><dt><a href="#id2870542">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2870571">What makes Samba a Domain Member?</a></dt><dt><a href="#id2872482">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></div><p>
+</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>4. <a href="#ServerType">Server Types and Security Modes</a></dt><dd><dl><dt><a href="#id2867445">Features and Benefits</a></dt><dt><a href="#id2867540">Server Types</a></dt><dt><a href="#id2867626">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2867745">User Level Security</a></dt><dt><a href="#id2867883">Share Level Security</a></dt><dt><a href="#id2868020">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2868278">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2868379">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2868660">Password checking</a></dt><dt><a href="#id2868855">Common Errors</a></dt><dd><dl><dt><a href="#id2868882">What makes Samba a SERVER?</a></dt><dt><a href="#id2868923">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2868959">What makes Samba a Domain Member?</a></dt><dt><a href="#id2868998">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="#samba-pdc">Domain Control</a></dt><dd><dl><dt><a href="#id2869330">Features and Benefits</a></dt><dt><a href="#id2869545">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2869560">Domain Controller Types</a></dt><dt><a href="#id2869805">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2870187">Domain Control - Example Configuration</a></dt><dt><a href="#id2870675">Samba ADS Domain Control</a></dt><dt><a href="#id2870727">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2870742">Domain Network Logon Service</a></dt><dt><a href="#id2871174">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2871320">Common Errors</a></dt><dd><dl><dt><a href="#id2871328">'$' cannot be included in machine name</a></dt><dt><a href="#id2871386">Joining domain fails because of existing machine account</a></dt><dt><a href="#id2871445">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2871529">The machine trust account not accessible</a></dt><dt><a href="#id2871602">Account disabled</a></dt><dt><a href="#id2871634">Domain Controller Unavailable</a></dt><dt><a href="#id2871658">Can not log onto domain member workstation after joining domain</a></dt></dl></dd></dl></dd><dt>6. <a href="#samba-bdc">Backup Domain Control</a></dt><dd><dl><dt><a href="#id2871817">Features And Benefits</a></dt><dt><a href="#id2872006">Essential Background Information</a></dt><dd><dl><dt><a href="#id2872035">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2872286">Active Directory Domain Control</a></dt><dt><a href="#id2872307">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2872332">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2872346">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2872480">Example Configuration</a></dt></dl></dd><dt><a href="#id2872638">Common Errors</a></dt><dd><dl><dt><a href="#id2872650">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2872682">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2872708">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2872753">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="#domain-member">Domain Membership</a></dt><dd><dl><dt><a href="#id2872960">Features and Benefits</a></dt><dt><a href="#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2873290">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2873596">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2873811">&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</a></dt><dt><a href="#id2873884">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2874094">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2874530">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2874715">Setup your smb.conf</a></dt><dt><a href="#id2874844">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2875221">Notes</a></dt></dl></dd><dt><a href="#id2875243">Common Errors</a></dt><dd><dl><dt><a href="#id2875286">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2875318">Adding Machine to Domain Fails</a></dt><dt><a href="#id2875462">I can't join a Windows 2003 PDC</a></dt></dl></dd></dl></dd><dt>8. <a href="#StandAloneServer">Stand-Alone Servers</a></dt><dd><dl><dt><a href="#id2875549">Features and Benefits</a></dt><dt><a href="#id2875587">Background</a></dt><dt><a href="#id2875661">Example Configuration</a></dt><dd><dl><dt><a href="#RefDocServer">Reference Documentation Server</a></dt><dt><a href="#SimplePrintServer">Central Print Serving</a></dt></dl></dd><dt><a href="#id2876184">Common Errors</a></dt></dl></dd><dt>9. <a href="#ClientConfig">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="#id2876248">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ServerType"></a>Chapter4.Server Types and Security Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2867445">Features and Benefits</a></dt><dt><a href="#id2867540">Server Types</a></dt><dt><a href="#id2867626">Samba Security Modes</a></dt><dd><dl><dt><a href="#id2867745">User Level Security</a></dt><dt><a href="#id2867883">Share Level Security</a></dt><dt><a href="#id2868020">Domain Security Mode (User Level Security)</a></dt><dt><a href="#id2868278">ADS Security Mode (User Level Security)</a></dt><dt><a href="#id2868379">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="#id2868660">Password checking</a></dt><dt><a href="#id2868855">Common Errors</a></dt><dd><dl><dt><a href="#id2868882">What makes Samba a SERVER?</a></dt><dt><a href="#id2868923">What makes Samba a Domain Controller?</a></dt><dt><a href="#id2868959">What makes Samba a Domain Member?</a></dt><dt><a href="#id2868998">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></div><p>
This chapter provides information regarding the types of server that Samba may be
configured to be. A Microsoft network administrator who wishes to migrate to or to
use Samba will want to know what, within a Samba context, terms familiar to MS Windows
@@ -425,10 +380,11 @@ modes function BEFORE we get into the details of how to configure the server its
The chapter provides an overview of the security modes of which Samba is capable
and how these relate to MS Windows servers and clients.
</p><p>
-Firstly we should recognise the question so often asked, &quot;Why would I want to use Samba?&quot;
-So, in those chapters where the answer may be important you will see a section that highlights
-features and benefits. These may be for or against Samba.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871949"></a>Features and Benefits</h2></div></div><div></div></div><p>
+A question often asked is, &quot;Why would I want to use Samba?&quot; Most chapters contain a section
+that highlights features and benefits. We hope that the information provided will help to
+answer this question. Be warned though, we want to be fair and reasonable, so not all
+features are positive towards Samba so the benefit may be on the side of our competition.
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867445"></a>Features and Benefits</h2></div></div><div></div></div><p>
Two men were walking down a dusty road, when one suddenly kicked up a small red stone. It
hurt his toe and lodged in his sandal. He took the stone out and cursed it with a passion
and fury fitting his anguish. The other looked at the stone and said, that is a garnet - I
@@ -440,7 +396,7 @@ pleasure, but if you are forced upon it and have no time for its secrets then it
a source of discomfort.
</p><p>
Samba started out as a project that sought to provide interoperability for MS Windows 3.x
-clients with a Unix server. It has grown up a lot since its humble beginnings and now provides
+clients with a UNIX server. It has grown up a lot since its humble beginnings and now provides
features and functionality fit for large scale deployment. It also has some warts. In sections
like this one we will tell of both.
</p><p>
@@ -464,14 +420,14 @@ So now, what are the benefits of features mentioned in this chapter?
greater flexibility than MS Windows NT4 and in many cases a
significantly higher utility than Active Directory domains
with MS Windows 200x.
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872041"></a>Server Types</h2></div></div><div></div></div><p>Administrators of Microsoft networks often refer to three
-different type of servers:</p><div class="itemizedlist"><ul type="disc"><li><p>Domain Controller</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Primary Domain Controller</td></tr><tr><td>Backup Domain Controller</td></tr><tr><td>ADS Domain Controller</td></tr></table></li><li><p>Domain Member Server</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Active Directory Member Server</td></tr><tr><td>NT4 Style Domain Member Server</td></tr></table></li><li><p>Stand Alone Server</p></li></ul></div><p>
+ </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867540"></a>Server Types</h2></div></div><div></div></div><p>Administrators of Microsoft networks often refer to three
+different type of servers:</p><div class="itemizedlist"><ul type="disc"><li><p>Domain Controller</p><div class="itemizedlist"><ul type="circle"><li><p>Primary Domain Controller</p></li><li><p>Backup Domain Controller</p></li><li><p>ADS Domain Controller</p></li></ul></div></li><li><p>Domain Member Server</p><div class="itemizedlist"><ul type="circle"><li><p>Active Directory Domain Server</p></li><li><p>NT4 Style Domain Domain Server</p></li></ul></div></li><li><p>Stand Alone Server</p></li></ul></div><p>
The chapters covering Domain Control, Backup Domain Control and Domain Membership provide
-pertinent information regarding Samba-3 configuration for each of these server roles.
+pertinent information regarding Samba configuration for each of these server roles.
The reader is strongly encouraged to become intimately familiar with the information
presented.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872122"></a>Samba Security Modes</h2></div></div><div></div></div><p>
-In this section the function and purpose of Samba's <i class="parameter"><tt>security</tt></i>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2867626"></a>Samba Security Modes</h2></div></div><div></div></div><p>
+In this section the function and purpose of Samba's <a class="indexterm" name="id2867637"></a><i class="parameter"><tt>security</tt></i>
modes are described. An accurate understanding of how Samba implements each security
mode as well as how to configure MS Windows clients for each mode will significantly
reduce user complaints and administrator heartache.
@@ -486,7 +442,7 @@ ways that allow the security levels to be implemented. In actual fact, Samba imp
<span class="emphasis"><em>ADS</em></span>, and <span class="emphasis"><em>SERVER</em></span>
modes. They are documented in this chapter.
</p><p>
-A SMB server tells the client at startup what <i class="parameter"><tt>security level</tt></i>
+ A SMB server tells the client at startup what <span class="emphasis"><em>security level</em></span>
it is running. There are two options: <span class="emphasis"><em>share level</em></span> and
<span class="emphasis"><em>user level</em></span>. Which of these two the client receives affects
the way the client then tries to authenticate itself. It does not directly affect
@@ -494,8 +450,8 @@ the way the client then tries to authenticate itself. It does not directly affec
but it fits in with the client/server approach of SMB. In SMB everything is initiated
and controlled by the client, and the server can only tell the client what is
available and whether an action is allowed.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868550"></a>User Level Security</h3></div></div><div></div></div><p>
-We will describe <i class="parameter"><tt>user level</tt></i> security first, as it's simpler.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867745"></a>User Level Security</h3></div></div><div></div></div><p>
+We will describe <span class="emphasis"><em>user level</em></span> security first, as it's simpler.
In <span class="emphasis"><em>user level</em></span> security, the client will send a
<span class="emphasis"><em>session setup</em></span> command directly after the protocol negotiation.
This contains a username and password. The server can either accept or reject that
@@ -512,13 +468,11 @@ It is also possible for a client to send multiple <span class="emphasis"><em>ses
requests. When the server responds, it gives the client a <span class="emphasis"><em>uid</em></span> to use
as an authentication tag for that username/password. The client can maintain multiple
authentication contexts in this way (WinDD is an example of an application that does this).
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868643"></a>Example Configuration</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2867837"></a>Example Configuration</h4></div></div><div></div></div><p>
The <tt class="filename">smb.conf</tt> parameter that sets <span class="emphasis"><em>User Level Security</em></span> is:
-</p><pre class="programlisting">
- security = user
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security = user</tt></i></td></tr></table><p>
This is the default setting since samba-2.2.x.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868682"></a>Share Level Security</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2867883"></a>Share Level Security</h3></div></div><div></div></div><p>
Ok, now for share level security. In share level security, the client authenticates
itself separately for each share. It will send a password along with each
<span class="emphasis"><em>tree connection</em></span> (share mount). It does not explicitly send a
@@ -538,104 +492,92 @@ level security. They normally send a valid username but no password. Samba recor
this username in a list of <span class="emphasis"><em>possible usernames</em></span>. When the client
then does a <span class="emphasis"><em>tree connection</em></span> it also adds to this list the name
of the share they try to connect to (useful for home directories) and any users
-listed in the <i class="parameter"><tt>user =</tt></i> <tt class="filename">smb.conf</tt> line. The password is then checked
+listed in the <a class="indexterm" name="id2867942"></a><i class="parameter"><tt>user</tt></i> <tt class="filename">smb.conf</tt> line. The password is then checked
in turn against these <span class="emphasis"><em>possible usernames</em></span>. If a match is found
then the client is authenticated as that user.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868762"></a>Example Configuration</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2867971"></a>Example Configuration</h4></div></div><div></div></div><p>
The <tt class="filename">smb.conf</tt> parameter that sets <span class="emphasis"><em>Share Level Security</em></span> is:
-</p><pre class="programlisting">
- security = share
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security = share</tt></i></td></tr></table><p>
Please note that there are reports that recent MS Windows clients do not like to work
with share mode security servers. You are strongly discouraged from using share level security.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869754"></a>Domain Security Mode (User Level Security)</h3></div></div><div></div></div><p>
-When Samba is operating in <i class="parameter"><tt>security = domain</tt></i> mode,
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868020"></a>Domain Security Mode (User Level Security)</h3></div></div><div></div></div><p>
+When Samba is operating in <a class="indexterm" name="id2868031"></a><i class="parameter"><tt>security</tt></i> = domain mode,
the Samba server has a domain security trust account (a machine account) and will cause
all authentication requests to be passed through to the domain controllers.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2869776"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868051"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em>
Samba as a Domain Member Server
</em></span></p><p>
This method involves addition of the following parameters in the <tt class="filename">smb.conf</tt> file:
-</p><pre class="programlisting">
- security = domain
- workgroup = &quot;name_of_NT_domain&quot;
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security = domain</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr></table><p>
In order for this method to work, the Samba server needs to join the MS Windows NT
security domain. This is done as follows:
</p><div class="procedure"><ol type="1"><li><p>On the MS Windows NT domain controller, using
the Server Manager, add a machine account for the Samba server.
- </p></li><li><p>Next, on the Unix/Linux system execute:</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j DOMAIN_NAME -r PDC_NAME</tt></b> (samba-2.x)</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>net join -U administrator%password</tt></b> (samba-3)</p></li></ol></div><div xmlns:ns4="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns4:p>
-As of Samba-2.2.4 the Samba 2.2.x series can auto-join a Windows NT4 style Domain just
-by executing:
-</ns4:p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j <i class="replaceable"><tt>DOMAIN_NAME</tt></i> -r <i class="replaceable"><tt>PDC_NAME</tt></i> -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b>
-</pre><ns4:p>
+ </p></li><li><p>Next, on the UNIX/Linux system execute:</p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>net rpc join -U administrator%password</tt></b></pre></li></ol></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+Samba-2.2.4 and later can auto-join a Windows NT4 style Domain just by executing:
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j <i class="replaceable"><tt>DOMAIN_NAME</tt></i> -r <i class="replaceable"><tt>PDC_NAME</tt></i> \
+ -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b>
+</pre><p>
-As of Samba-3 the same can be done by executing:
-</ns4:p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>net join -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b>
-</pre><ns4:p>
-It is not necessary with Samba-3 to specify the <i class="replaceable"><tt>DOMAIN_NAME</tt></i> or the <i class="replaceable"><tt>PDC_NAME</tt></i> as it
-figures this out from the <tt class="filename">smb.conf</tt> file settings.
-</ns4:p></div><p>
-Use of this mode of authentication does require there to be a standard Unix account
+Samba-3 can do the same by executing:
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>net rpc join -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b>
+</pre><p>
+It is not necessary with Samba-3 to specify the <i class="replaceable"><tt>DOMAIN_NAME</tt></i> or the
+<i class="replaceable"><tt>PDC_NAME</tt></i> as it figures this out from the <tt class="filename">smb.conf</tt> file settings.
+</p></div><p>
+Use of this mode of authentication does require there to be a standard UNIX account
for each user in order to assign a UID once the account has been authenticated by
the remote Windows DC. This account can be blocked to prevent logons by clients other than
MS Windows through means such as setting an invalid shell in the
<tt class="filename">/etc/passwd</tt> entry.
</p><p>
An alternative to assigning UIDs to Windows users on a Samba member server is
-presented in the <a href="#winbind" title="Chapter21.Integrated Logon Support using Winbind">Winbind Overview</a> chapter
-in this HOWTO collection.
+presented in <a href="#winbind" title="Chapter21.Winbind: Use of Domain Accounts">the chapter about winbind</a>.
</p><p>
-For more information of being a domain member, see the <a href="#domain-member" title="Chapter7.Domain Membership">Domain
-Member</a> section of this Howto.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869996"></a>ADS Security Mode (User Level Security)</h3></div></div><div></div></div><p>
+ For more information of being a domain member, see <a href="#domain-member" title="Chapter7.Domain Membership">the chapter about domain membership</a>.
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868278"></a>ADS Security Mode (User Level Security)</h3></div></div><div></div></div><p>
Both Samba 2.2 and 3.0 can join an Active Directory domain. This is
-possible even if the domain is run in native mode. Active Directory in
-native mode perfectly allows NT4-style domain members, contrary to
+possible if the domain is run in native mode. Active Directory in
+native mode perfectly allows NT4-style domain members. This is contrary to
popular belief. The only thing that Active Directory in native mode
prohibits is Backup Domain Controllers running NT4.
</p><p>
-If you are running Active Directory starting with Samba 3.0 you can
-however join as a native AD member. Why would you want to do that?
+If you are using Active Directory, starting with Samba-3 you can
+join as a native AD member. Why would you want to do that?
Your security policy might prohibit the use of NT-compatible
authentication protocols. All your machines are running Windows 2000
-and above and all use full Kerberos. In this case Samba as a NT4-style
+and above and all use Kerberos. In this case Samba as a NT4-style
domain would still require NT-compatible authentication data. Samba in
-AD-member mode can accept Kerberos.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870026"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting">
- realm = your.kerberos.REALM
- security = ADS
-</pre><p>
- The following parameter may be required:
-</p><pre class="programlisting">
- ads server = your.kerberos.server
-</pre><p>
-Please refer to the <a href="#domain-member" title="Chapter7.Domain Membership">Domain Membership</a> and <a href="#ads-member" title="Samba ADS Domain Membership">Active Directory
-Membership</a> sections for more information regarding this configuration option.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870079"></a>Server Security (User Level Security)</h3></div></div><div></div></div><p>
+AD-member mode can accept Kerberos tickets.
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868307"></a>Example Configuration</h4></div></div><div></div></div><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>realm = your.kerberos.REALM</tt></i></td></tr><tr><td><i class="parameter"><tt>security = ADS</tt></i></td></tr></table><p>
+The following parameter may be required:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>ads server = your.kerberos.server</tt></i></td></tr></table><p>
+Please refer to <a href="#domain-member" title="Chapter7.Domain Membership">the chapter on domain membership</a>
+for more information regarding this configuration option.
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868379"></a>Server Security (User Level Security)</h3></div></div><div></div></div><p>
Server security mode is a left over from the time when Samba was not capable of acting
as a domain member server. It is highly recommended NOT to use this feature. Server
security mode has many draw backs. The draw backs include:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Potential Account Lockout on MS Windows NT4/200x password servers</td></tr><tr><td>Lack of assurance that the password server is the one specified</td></tr><tr><td>Does not work with Winbind, particularly needed when storing profiles remotely</td></tr><tr><td>This mode may open connections to the password server, and keep them open for extended periods.</td></tr><tr><td>Security on the Samba server breaks badly when the remote password server suddenly shuts down</td></tr><tr><td>With this mode there is NO security account in the domain that the password server belongs to for the Samba server.</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Potential Account Lockout on MS Windows NT4/200x password servers</p></li><li><p>Lack of assurance that the password server is the one specified</p></li><li><p>Does not work with Winbind, particularly needed when storing profiles remotely</p></li><li><p>This mode may open connections to the password server, and keep them open for extended periods.</p></li><li><p>Security on the Samba server breaks badly when the remote password server suddenly shuts down</p></li><li><p>With this mode there is NO security account in the domain that the password server belongs to for the Samba server.</p></li></ul></div><p>
In server security mode the Samba server reports to the client that it is in user level
security. The client then does a <span class="emphasis"><em>session setup</em></span> as described earlier.
The Samba server takes the username/password that the client sends and attempts to login to the
-<i class="parameter"><tt>password server</tt></i> by sending exactly the same username/password that
+<a class="indexterm" name="id2868451"></a><i class="parameter"><tt>password server</tt></i> by sending exactly the same username/password that
it got from the client. If that server is in user level security and accepts the password,
then Samba accepts the clients connection. This allows the Samba server to use another SMB
-server as the <i class="parameter"><tt>password server</tt></i>.
+server as the <a class="indexterm" name="id2868471"></a><i class="parameter"><tt>password server</tt></i>.
</p><p>
You should also note that at the very start of all this, where the server tells the client
what security level it is in, it also tells the client if it supports encryption. If it
does then it supplies the client with a random cryptkey. The client will then send all
passwords in encrypted form. Samba supports this type of encryption by default.
</p><p>
-The parameter <i class="parameter"><tt>security = server</tt></i> means that Samba reports to clients that
+The parameter <a class="indexterm" name="id2868500"></a><i class="parameter"><tt>security</tt></i> = server means that Samba reports to clients that
it is running in <span class="emphasis"><em>user mode</em></span> but actually passes off all authentication
requests to another <span class="emphasis"><em>user mode</em></span> server. This requires an additional
-parameter <i class="parameter"><tt>password server</tt></i> that points to the real authentication server.
+parameter <a class="indexterm" name="id2868525"></a><i class="parameter"><tt>password server</tt></i> that points to the real authentication server.
That real authentication server can be another Samba server or can be a Windows NT server,
the later natively capable of encrypted password support.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
@@ -646,15 +588,11 @@ lookups because the choice of the target authentication server is arbitrary and
be determined from a domain name. In essence, a Samba server that is in
<span class="emphasis"><em>server security mode</em></span> is operating in what used to be known as
workgroup mode.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870236"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2868569"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em>
Using MS Windows NT as an authentication server
</em></span></p><p>
This method involves the additions of the following parameters in the <tt class="filename">smb.conf</tt> file:
-</p><pre class="programlisting">
- encrypt passwords = Yes
- security = server
- password server = &quot;NetBIOS_name_of_a_DC&quot;
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>encrypt passwords = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>security = server</tt></i></td></tr><tr><td><i class="parameter"><tt>password server = &quot;NetBIOS_name_of_a_DC&quot;</tt></i></td></tr></table><p>
There are two ways of identifying whether or not a username and password pair was valid.
One uses the reply information provided as part of the authentication messaging
process, the other uses just an error code.
@@ -665,9 +603,9 @@ server fails to reject the username and password pair then an alternative mode o
identification of validation is used. Where a site uses password lock out after a
certain number of failed authentication attempts this will result in user lockouts.
</p><p>
-Use of this mode of authentication does require there to be a standard Unix account
+Use of this mode of authentication does require there to be a standard UNIX account
for the user, though this account can be blocked to prevent logons by non-SMB/CIFS clients.
-</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870304"></a>Seamless Windows Network Integration</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868660"></a>Password checking</h2></div></div><div></div></div><p>
MS Windows clients may use encrypted passwords as part of a challenge/response
authentication model (a.k.a. NTLMv1 and NTLMv2) or alone, or clear text strings for simple
password based authentication. It should be realized that with the SMB protocol,
@@ -704,21 +642,18 @@ is definitely not a good idea to re-enable plain text password support in such c
The following parameters can be used to work around the issue of Windows 9x clients
upper casing usernames and password before transmitting them to the SMB server
when using clear text authentication.
-</p><pre class="programlisting">
- <a href="smb.conf.5.html#PASSWORDLEVEL" target="_top">password level</a> = <i class="replaceable"><tt>integer</tt></i>
- <a href="smb.conf.5.html#USERNAMELEVEL" target="_top">username level</a> = <i class="replaceable"><tt>integer</tt></i>
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>password level = integer</tt></i></td></tr><tr><td><i class="parameter"><tt>username level = integer</tt></i></td></tr></table><p>
By default Samba will lower case the username before attempting to lookup the user
in the database of local system accounts. Because UNIX usernames conventionally
-only contain lower-case characters, the <i class="parameter"><tt>username level</tt></i> parameter
+only contain lower-case character, the <a class="indexterm" name="id2868781"></a><i class="parameter"><tt>username level</tt></i> parameter
is rarely needed.
</p><p>
However, passwords on UNIX systems often make use of mixed-case characters.
This means that in order for a user on a Windows 9x client to connect to a Samba
-server using clear text authentication, the <i class="parameter"><tt>password level</tt></i>
+server using clear text authentication, the <a class="indexterm" name="id2868805"></a><i class="parameter"><tt>password level</tt></i>
must be set to the maximum number of upper case letters which <span class="emphasis"><em>could</em></span>
-appear in a password. Note that the server OS uses the traditional DES version
-of crypt(), a <i class="parameter"><tt>password level</tt></i> of 8 will result in case
+appear in a password. Note that if the server OS uses the traditional DES version
+of crypt(), a <a class="indexterm" name="id2868826"></a><i class="parameter"><tt>password level</tt></i> of 8 will result in case
insensitive passwords as seen from Windows users. This will also result in longer
login times as Samba has to compute the permutations of the password string and
try them one by one until a match is located (or all combinations fail).
@@ -726,7 +661,7 @@ try them one by one until a match is located (or all combinations fail).
The best option to adopt is to enable support for encrypted passwords wherever
Samba is used. Most attempts to apply the registry change to re-enable plain text
passwords will eventually lead to user complaints and unhappiness.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870481"></a>Common Errors</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2868855"></a>Common Errors</h2></div></div><div></div></div><p>
We all make mistakes. It is Ok to make mistakes, so long as they are made in the right places
and at the right time. A mistake that causes lost productivity is seldom tolerated. A mistake
made in a developmental test lab is expected.
@@ -736,32 +671,29 @@ on the Samba mailing lists. Many of these are avoidable by doing you homework be
a Samba implementation. Some are the result of misunderstanding of the English language. The
English language has many turns of phrase that are potentially vague and may be highly confusing
to those for whom English is not their native tongue.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870509"></a>What makes Samba a SERVER?</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868882"></a>What makes Samba a SERVER?</h3></div></div><div></div></div><p>
To some the nature of the Samba <span class="emphasis"><em>security</em></span> mode is very obvious, but entirely
-wrong all the same. It is assumed that <i class="parameter"><tt>security = server</tt></i> means that Samba
+wrong all the same. It is assumed that <a class="indexterm" name="id2868899"></a><i class="parameter"><tt>security</tt></i> = server means that Samba
will act as a server. Not so! See above - this setting means that Samba will <span class="emphasis"><em>try</em></span>
to use another SMB server as its source of user authentication alone.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870542"></a>What makes Samba a Domain Controller?</h3></div></div><div></div></div><p>
-The <tt class="filename">smb.conf</tt> parameter <i class="parameter"><tt>security = domain</tt></i> does NOT really make Samba behave
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868923"></a>What makes Samba a Domain Controller?</h3></div></div><div></div></div><p>
+The <tt class="filename">smb.conf</tt> parameter <a class="indexterm" name="id2868941"></a><i class="parameter"><tt>security</tt></i> = domain does NOT really make Samba behave
as a Domain Controller! This setting means we want Samba to be a domain member!
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870571"></a>What makes Samba a Domain Member?</h3></div></div><div></div></div><p>
-Guess! So many others do. But whatever you do, do NOT think that <i class="parameter"><tt>security = user</tt></i>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868959"></a>What makes Samba a Domain Member?</h3></div></div><div></div></div><p>
+Guess! So many others do. But whatever you do, do NOT think that <a class="indexterm" name="id2868971"></a><i class="parameter"><tt>security</tt></i> = user
makes Samba act as a domain member. Read the manufacturers manual before the warranty expires! See
-the <a href="#domain-member" title="Chapter7.Domain Membership">Domain Member</a> section of this Howto for more information.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872482"></a>Constantly Losing Connections to Password Server</h3></div></div><div></div></div><p>
+<a href="#domain-member" title="Chapter7.Domain Membership">the chapter about domain membership</a> for more information.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2868998"></a>Constantly Losing Connections to Password Server</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">
Why does server_validate() simply give up rather than re-establishing its connection to the
password server? Though I am not fluent in the SMB protocol, perhaps the cluster server
process passes along to its client workstation the session key it receives from the password
server, which means the password hashes submitted by the client would not work on a subsequent
-connection, whose session key would be different. So server_validate() must give up.
+connection, whose session key would be different. So server_validate() must give up.</span>&#8221;
</p><p>
-Indeed. That's why security = server is at best a nasty hack. Please use security = domain.
-<i class="parameter"><tt>security = server</tt></i> mode is also known as pass-through authentication.
-</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-pdc"></a>Chapter5.Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2875113">Features and Benefits</a></dt><dt><a href="#id2872711">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2872727">Domain Controller Types</a></dt><dt><a href="#id2872926">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2873240">Domain Control - Example Configuration</a></dt><dt><a href="#id2873537">Samba ADS Domain Control</a></dt><dt><a href="#id2873559">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2873574">Domain Network Logon Service</a></dt><dt><a href="#id2876300">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2876404">Common Problems and Errors</a></dt><dd><dl><dt><a href="#id2876412">I cannot include a '$' in a machine name</a></dt><dt><a href="#id2876450">I get told &quot;You already have a connection to the Domain....&quot;
-or &quot;Cannot join domain, the credentials supplied conflict with an
-existing set..&quot; when creating a machine trust account.</a></dt><dt><a href="#id2876500">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2876570">The machine trust account for this computer either does not
-exist or is not accessible.</a></dt><dt><a href="#id2876634">When I attempt to login to a Samba Domain from a NT4/W2K workstation,
-I get a message about my account being disabled.</a></dt><dt><a href="#id2876660">Until a few minutes after Samba has started, clients get the error &quot;Domain Controller Unavailable&quot;</a></dt></dl></dd></dl></div><p><b><span class="emphasis"><em>The Essence of Learning:</em></span></b>
+ Indeed. That's why <a class="indexterm" name="id2869025"></a><i class="parameter"><tt>security</tt></i> = server is at best a nasty hack. Please use <a class="indexterm" name="id2869041"></a><i class="parameter"><tt>security</tt></i> = domain.
+<a class="indexterm" name="id2869054"></a><i class="parameter"><tt>security</tt></i> = server mode is also known as pass-through authentication.
+</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-pdc"></a>Chapter5.Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2869330">Features and Benefits</a></dt><dt><a href="#id2869545">Basics of Domain Control</a></dt><dd><dl><dt><a href="#id2869560">Domain Controller Types</a></dt><dt><a href="#id2869805">Preparing for Domain Control</a></dt></dl></dd><dt><a href="#id2870187">Domain Control - Example Configuration</a></dt><dt><a href="#id2870675">Samba ADS Domain Control</a></dt><dt><a href="#id2870727">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="#id2870742">Domain Network Logon Service</a></dt><dt><a href="#id2871174">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="#id2871320">Common Errors</a></dt><dd><dl><dt><a href="#id2871328">'$' cannot be included in machine name</a></dt><dt><a href="#id2871386">Joining domain fails because of existing machine account</a></dt><dt><a href="#id2871445">The system can not log you on (C000019B)....</a></dt><dt><a href="#id2871529">The machine trust account not accessible</a></dt><dt><a href="#id2871602">Account disabled</a></dt><dt><a href="#id2871634">Domain Controller Unavailable</a></dt><dt><a href="#id2871658">Can not log onto domain member workstation after joining domain</a></dt></dl></dd></dl></div><p><b><span class="emphasis"><em>The Essence of Learning:</em></span></b>
There are many who approach MS Windows networking with incredible misconceptions.
That's OK, because it gives the rest of us plenty of opportunity to be of assistance.
Those who really want help would be well advised to become familiar with information
@@ -769,18 +701,18 @@ that is already available.
</p><p>
The reader is advised NOT to tackle this section without having first understood
and mastered some basics. MS Windows networking is not particularly forgiving of
-misconfiguration. Users of MS Windows networking are likely to complain bitterly
-of persistent niggles that may be caused by broken network or system configuration.
+misconfiguration. Users of MS Windows networking are likely to complain
+of persistent niggles that may be caused by a broken network configuration.
To a great many people however, MS Windows networking starts with a domain controller
that in some magical way is expected to solve all ills.
-</p><p>
+</p><div class="figure"><a name="domain-example"></a><p class="title"><b>Figure5.1.An Example Domain</b></p><div class="mediaobject"><img src="projdoc/imagefiles/domain.png" width="270" alt="An Example Domain"></div></div><p>
From the Samba mailing list one can readily identify many common networking issues.
If you are not clear on the following subjects, then it will do much good to read the
sections of this HOWTO that deal with it. These are the most common causes of MS Windows
networking problems:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Basic TCP/IP configuration</td></tr><tr><td>NetBIOS name resolution</td></tr><tr><td>Authentication configuration</td></tr><tr><td>User and Group configuration</td></tr><tr><td>Basic File and Directory Permission Control in Unix/Linux</td></tr><tr><td>Understanding of how MS Windows clients interoperate in a network
- environment</td></tr></table><p>
-Do not be put off; on the surface of it MS Windows networking seems so simple that any fool
+</p><div class="itemizedlist"><ul type="disc"><li><p>Basic TCP/IP configuration</p></li><li><p>NetBIOS name resolution</p></li><li><p>Authentication configuration</p></li><li><p>User and Group configuration</p></li><li><p>Basic File and Directory Permission Control in UNIX/Linux</p></li><li><p>Understanding of how MS Windows clients interoperate in a network
+ environment</p></li></ul></div><p>
+Do not be put off; on the surface of it MS Windows networking seems so simple that anyone
can do it. In fact, it is not a good idea to set up an MS Windows network with
inadequate training and preparation. But let's get our first indelible principle out of the
way: <span class="emphasis"><em>It is perfectly OK to make mistakes!</em></span> In the right place and at
@@ -791,7 +723,7 @@ burden on an organisation.
Where is the right place to make mistakes? Only out of harm's way! If you are going to
make mistakes, then please do this on a test network, away from users and in such a way as
to not inflict pain on others. Do your learning on a test network.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2875113"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869330"></a>Features and Benefits</h2></div></div><div></div></div><p>
<span class="emphasis"><em>What is the key benefit of Microsoft Domain security?</em></span>
</p><p>
In a word, <span class="emphasis"><em>Single Sign On</em></span>, or SSO for short. To many, this is the holy
@@ -802,13 +734,18 @@ and they will be able to log onto the network and access resources (shares, file
as if they are sitting at their home (personal) workstation. This is a feature of the Domain
security protocols.
</p><p>
-The benefits of Domain security are fully available to those sites that deploy a Samba PDC.
+The benefits of Domain security are available to those sites that deploy a Samba PDC.
+A Domain provides a unique network security identifier (SID). Domain user and group security
+identifiers are comprised of the network SID plus a relative identifier (RID) that is unique to
+the account. User and Group SIDs (the network SID plus the RID) can be used to create Access Control
+Lists (ACLs) attached to network resources to provide organizational access control. UNIX systems
+know only of local security identifiers.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Network clients of an MS Windows Domain security environment must be Domain members to be
able to gain access to the advanced features provided. Domain membership involves more than just
setting the workgroup name to the Domain name. It requires the creation of a Domain trust account
for the workstation (called a machine account). Please refer to the chapter on
-<a href="#domain-member" title="Chapter7.Domain Membership">Domain Membership</a> for more information.
+<a href="#domain-member" title="Chapter7.Domain Membership">setting up samba as a domain member</a> for more information.
</p></div><p>
The following functionalities are new to the Samba-3 release:
</p><div class="itemizedlist"><ul type="disc"><li><p>
@@ -816,8 +753,7 @@ The following functionalities are new to the Samba-3 release:
</p></li><li><p>
Adding users via the User Manager for Domains. This can be done on any MS Windows
client using the Nexus toolkit that is available from Microsoft's web site.
- At some later date Samba-3 may get support for the use of the Microsoft Management
- Console for user management.
+ Samba-3 supports the use of the Microsoft Management Console for user management.
</p></li><li><p>
Introduces replaceable and multiple user account (authentication)
back ends. In the case where the back end is placed in an LDAP database,
@@ -831,14 +767,18 @@ The following functionalities are new to the Samba-3 release:
The following functionalities are NOT provided by Samba-3:
</p><div class="itemizedlist"><ul type="disc"><li><p>
SAM replication with Windows NT4 Domain Controllers
- (i.e. a Samba PDC and a Windows NT BDC or vice versa)
+ (i.e. a Samba PDC and a Windows NT BDC or vice versa). This means samba
+ cannot operate as a BDC when the PDC is Microsoft-based or
+ replicate account data to Windows-BDC's.
</p></li><li><p>
Acting as a Windows 2000 Domain Controller (i.e. Kerberos and
Active Directory) - In point of fact, Samba-3 DOES have some
Active Directory Domain Control ability that is at this time
purely experimental <span class="emphasis"><em>AND</em></span> that is certain
to change as it becomes a fully supported feature some time
- during the Samba-3 (or later) life cycle.
+ during the Samba-3 (or later) life cycle. However, Active Directory is
+ more then just SMB - it's also LDAP, Kerberos, DHCP and other protocols
+ (with proprietary extensions, of course).
</p></li></ul></div><p>
Windows 9x / Me / XP Home clients are not true members of a domain for reasons outlined
in this chapter. The protocol for support of Windows 9x / Me style network (domain) logons
@@ -847,67 +787,33 @@ for some time. These clients use the old LanMan Network Logon facilities that ar
in Samba since approximately the Samba-1.9.15 series.
</p><p>
Samba-3 has an implementation of group mapping between Windows NT groups
-and Unix groups (this is really quite complicated to explain in a short space). This is
-discussed more fully in the <a href="#groupmapping" title="Chapter12.Mapping MS Windows and Unix Groups">Group Mapping</a> chapter.
+and UNIX groups (this is really quite complicated to explain in a short space). This is
+discussed more fully in <a href="#groupmapping" title="Chapter12.Mapping MS Windows and UNIX Groups">the chapter on group mapping</a>.
</p><p>
Samba-3, like an MS Windows NT4 PDC or a Windows 200x Active Directory, needs to store
-user and machine trust account information in a suitable backend data store. With Samba-3
-there can be multiple back-ends for this including:
-</p><div class="itemizedlist"><ul type="disc"><li><p>
- <span class="emphasis"><em>smbpasswd</em></span> - the plain ASCII file stored used by
- earlier versions of Samba. This file configuration option requires
- a Unix/Linux system account for EVERY entry (ie: both for user and for
- machine accounts). This file will be located in the <span class="emphasis"><em>private</em></span>
- directory (default is /usr/local/samba/lib/private or on linux /etc/samba).
- </p></li><li><p>
- <span class="emphasis"><em>tdbsam</em></span> - a binary database backend that will be
- stored in the <span class="emphasis"><em>private</em></span> directory in a file called
- <span class="emphasis"><em>passdb.tdb</em></span>. The key benefit of this binary format
- file is that it can store binary objects that can not be accommodated
- in the traditional plain text smbpasswd file. These permit the extended
- account controls that MS Windows NT4 and later also have.
- </p></li><li><p>
- <span class="emphasis"><em>ldapsam</em></span> - An LDAP based back-end. Permits the
- LDAP server to be specified. eg: ldap://localhost or ldap://frodo.murphy.com.
- Like the tdbsam, ldapsam permits the storing of extended account attributes
- for control of things like: Permitted access times, password activation and
- expiry, permitted points of access (workstation names), per user profile
- location, and much more.
- </p></li><li><p>
- <span class="emphasis"><em>ldapsam_compat</em></span> - An LDAP back-end that maintains backwards
- compatibility with the behaviour of samba-2.2.x. You should use this in the process
- of migrating from samba-2.2.x to samba-3 if you do not want to rebuild your LDAP
- database.
- </p></li></ul></div><p>
-Read the chapter about <a href="#passdb" title="Chapter11.Account Information Databases">Account Information Database</a> for details
-regarding the choices available and how to configure them.
-</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
-The new tdbsam and ldapsam account backends store substantially more information than
-smbpasswd is capable of. The new backend database includes capacity to specify
-per user settings for many parameters, over-riding global settings given in the
-<tt class="filename">smb.conf</tt> file. eg: logon drive, logon home, logon path, etc.
-Thus, with samba-3 it is possible to have a default system configuration for profiles,
-and on a per user basis to over-ride this for those users who should not be subject
-to the default configuration.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872711"></a>Basics of Domain Control</h2></div></div><div></div></div><p>
+user and machine trust account information in a suitable backend data store.
+Refer <a href="#machine-trust-accounts" title="MS Windows Workstation/Server Machine Trust Accounts">to the section on machine trust accounts</a>. With Samba-3 there can be multiple
+back-ends for this. A complete discussion of account database backends can be found in
+<a href="#passdb" title="Chapter11.Account Information Databases">the chapter on Account Information Databases</a>.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2869545"></a>Basics of Domain Control</h2></div></div><div></div></div><p>
Over the years, public perceptions of what Domain Control really is has taken on an
almost mystical nature. Before we branch into a brief overview of Domain Control,
there are three basic types of domain controllers:
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872727"></a>Domain Controller Types</h3></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Primary Domain Controller</p></li><li><p>Backup Domain Controller</p></li><li><p>ADS Domain Controller</p></li></ul></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869560"></a>Domain Controller Types</h3></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Primary Domain Controller</p></li><li><p>Backup Domain Controller</p></li><li><p>ADS Domain Controller</p></li></ul></div><p>
The <span class="emphasis"><em>Primary Domain Controller</em></span> or PDC plays an important role in the MS
-Windows NT4 and Windows 200x Domain Control architecture, but not in the manner that so many
-expect. There is folk lore that dictates that because of it's role in the MS Windows
-network, the PDC should be the most powerful and most capable machine in the network.
+Windows NT4. In Windows 200x Domain Control architecture this role is held by domain controllers.
+There is folk lore that dictates that because of it's role in the MS Windows
+network, the domain controllers should be the most powerful and most capable machine in the network.
As strange as it may seem to say this here, good over all network performance dictates that
-the entire infrastructure needs to be balanced. It is advisable to invest more in the Backup
-Domain Controllers and Stand-Alone (or Domain Member) servers than in the PDC.
+the entire infrastructure needs to be balanced. It is advisable to invest more in Stand-Alone
+(or Domain Member) servers than in the domain controllers.
</p><p>
-In the case of MS Windows NT4 style domains, it is the PDC seeds the Domain Control database,
-a part of the Windows registry called the SAM (Security Account Manager). It plays a key
+In the case of MS Windows NT4 style domains, it is the PDC that initiates a new Domain Control database.
+This forms a part of the Windows registry called the SAM (Security Account Manager). It plays a key
part in NT4 type domain user authentication and in synchronisation of the domain authentication
database with Backup Domain Controllers.
</p><p>
-With MS Windows 200x Server based Active Directory domains, one domain controller seeds a potential
+With MS Windows 200x Server based Active Directory domains, one domain controller initiates a potential
hierarchy of domain controllers, each with their own area of delegated control. The master domain
controller has the ability to override any down-stream controller, but a down-line controller has
control only over it's down-line. With Samba-3 this functionality can be implemented using an
@@ -915,9 +821,7 @@ LDAP based user and machine account back end.
</p><p>
New to Samba-3 is the ability to use a back-end database that holds the same type of data as
the NT4 style SAM (Security Account Manager) database (one of the registry files).
-The Samba-3 SAM can be specified via the smb.conf file parameter
-<i class="parameter"><tt>passwd backend</tt></i> and valid options include
-<span class="emphasis"><em>smbpasswd, tdbsam, ldapsam, nisplussam, xmlsam, mysqlsam, guest</em></span>.
+<sup>[<a name="id2869637" href="#ftn.id2869637">1</a>]</sup>
</p><p>
The <span class="emphasis"><em>Backup Domain Controller</em></span> or BDC plays a key role in servicing network
authentication requests. The BDC is biased to answer logon requests in preference to the PDC.
@@ -941,11 +845,14 @@ excluding the SAM replication components. However, please be aware that Samba-3
MS Windows 200x domain control protocols also.
</p><p>
At this time any appearance that Samba-3 is capable of acting as an
-<span class="emphasis"><em>ADS Domain Controller</em></span> is limited and experimental in nature.
+<span class="emphasis"><em>Domain Controller</em></span> in native ADS mode is limited and experimental in nature.
This functionality should not be used until the Samba-Team offers formal support for it.
At such a time, the documentation will be revised to duly reflect all configuration and
-management requirements.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872926"></a>Preparing for Domain Control</h3></div></div><div></div></div><p>
+management requirements. Samba can act as a NT4-style DC in a Windows 2000/XP
+environment. However, there are certain compromises:
+
+</p><div class="itemizedlist"><ul type="disc"><li><p>No machine policy files</p></li><li><p>No Group Policy Objects</p></li><li><p>No synchronously executed AD logon scripts</p></li><li><p>Can't use ANY Active Directory management tools to manage users and machines</p></li><li><p>Registry changes tattoo the main registry, while with AD they do NOT. ie: Leave permanent changes in effect</p></li><li><p>Without AD you can not peprform the function of exporting specific applications to specific users or groups</p></li></ul></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2869805"></a>Preparing for Domain Control</h3></div></div><div></div></div><p>
There are two ways that MS Windows machines may interact with each other, with other servers,
and with Domain Controllers: Either as <span class="emphasis"><em>Stand-Alone</em></span> systems, more commonly
called <span class="emphasis"><em>Workgroup</em></span> members, or as full participants in a security system,
@@ -967,23 +874,22 @@ Domain it triggers a machine password change.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
When running a Domain all MS Windows NT / 200x / XP Professional clients should be configured
as full Domain Members - IF A SECURE NETWORK IS WANTED. If the machine is NOT made a member of the
-Domain, then it will operate like a workgroup (stand-alone) machine. Please refer the
-<a href="#domain-member" title="Chapter7.Domain Membership">Domain Membership</a> chapter for information regarding
- HOW to make your MS Windows clients Domain members.
+Domain, then it will operate like a workgroup (stand-alone) machine. Please refer to
+<a href="#domain-member" title="Chapter7.Domain Membership">the chapter on domain membership</a> for information regarding HOW to make your MS Windows clients Domain members.
</p></div><p>
The following are necessary for configuring Samba-3 as an MS Windows NT4 style PDC for MS Windows
NT4 / 200x / XP clients.
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Configuration of basic TCP/IP and MS Windows Networking</td></tr><tr><td>Correct designation of the Server Role (<i class="parameter"><tt>security = user</tt></i>)</td></tr><tr><td>Consistent configuration of Name Resolution (See chapter on <a href="#NetworkBrowsing" title="Chapter10.Samba / MS Windows Network Browsing Guide">Browsing</a> and on
- <a href="#integrate-ms-networks" title="Chapter26.Integrating MS Windows networks with Samba">MS Windows network Integration</a>)</td></tr><tr><td>Domain logons for Windows NT4 / 200x / XP Professional clients</td></tr><tr><td>Configuration of Roaming Profiles or explicit configuration to force local profile usage</td></tr><tr><td>Configuration of Network/System Policies</td></tr><tr><td>Adding and managing domain user accounts</td></tr><tr><td>Configuring MS Windows client machines to become domain members</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Configuration of basic TCP/IP and MS Windows Networking</p></li><li><p>Correct designation of the Server Role (<a class="indexterm" name="id2869911"></a><i class="parameter"><tt>security</tt></i> = user)</p></li><li><p>Consistent configuration of Name Resolution (See chapter on <a href="#NetworkBrowsing" title="Chapter10.Samba / MS Windows Network Browsing Guide">Network Browsing</a> and on
+ <a href="#integrate-ms-networks" title="Chapter26.Integrating MS Windows networks with Samba">Integrating Unix into Windows networks</a>)</p></li><li><p>Domain logons for Windows NT4 / 200x / XP Professional clients</p></li><li><p>Configuration of Roaming Profiles or explicit configuration to force local profile usage</p></li><li><p>Configuration of Network/System Policies</p></li><li><p>Adding and managing domain user accounts</p></li><li><p>Configuring MS Windows client machines to become domain members</p></li></ul></div><p>
The following provisions are required to serve MS Windows 9x / Me Clients:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Configuration of basic TCP/IP and MS Windows Networking</td></tr><tr><td>Correct designation of the Server Role (<i class="parameter"><tt>security = user</tt></i>)</td></tr><tr><td>Network Logon Configuration (Since Windows 9x / XP Home are not technically domain
- members, they do not really participate in the security aspects of Domain logons as such)</td></tr><tr><td>Roaming Profile Configuration</td></tr><tr><td>Configuration of System Policy handling</td></tr><tr><td>Installation of the Network driver &quot;Client for MS Windows Networks&quot; and configuration
- to log onto the domain</td></tr><tr><td>Placing Windows 9x / Me clients in user level security - if it is desired to allow
- all client share access to be controlled according to domain user / group identities.</td></tr><tr><td>Adding and managing domain user accounts</td></tr></table><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Configuration of basic TCP/IP and MS Windows Networking</p></li><li><p>Correct designation of the Server Role (<a class="indexterm" name="id2870004"></a><i class="parameter"><tt>security</tt></i> = user)</p></li><li><p>Network Logon Configuration (Since Windows 9x / XP Home are not technically domain
+ members, they do not really participate in the security aspects of Domain logons as such)</p></li><li><p>Roaming Profile Configuration</p></li><li><p>Configuration of System Policy handling</p></li><li><p>Installation of the Network driver &quot;Client for MS Windows Networks&quot; and configuration
+ to log onto the domain</p></li><li><p>Placing Windows 9x / Me clients in user level security - if it is desired to allow
+ all client share access to be controlled according to domain user / group identities.</p></li><li><p>Adding and managing domain user accounts</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Roaming Profiles and System/Network policies are advanced network administration topics
that are covered in the <a href="#ProfileMgmt" title="Chapter24.Desktop Profile Management">Profile Management</a> and
-<a href="#PolicyMgmt" title="Chapter23.System and Account Policies">Policy Management</a> chapters of this document. However, these are not necessarily specific
-to a Samba PDC as much as they are related to Windows NT networking concepts.
+<a href="#PolicyMgmt" title="Chapter23.System and Account Policies">Policy Management</a> chapters of this document. However, these are not
+necessarily specific to a Samba PDC as much as they are related to Windows NT networking concepts.
</p></div><p>
A Domain Controller is an SMB/CIFS server that:
</p><div class="itemizedlist"><ul type="disc"><li><p>
@@ -998,120 +904,86 @@ A Domain Controller is an SMB/CIFS server that:
Provides a share called NETLOGON
</p></li></ul></div><p>
For Samba to provide these is rather easy to configure. Each Samba Domain Controller must provide
-the NETLOGON service which Samba calls the <span class="emphasis"><em>domain logons</em></span> functionality
+the NETLOGON service which Samba calls the <a class="indexterm" name="id2870136"></a><i class="parameter"><tt>domain logons</tt></i> functionality
(after the name of the parameter in the <tt class="filename">smb.conf</tt> file). Additionally, one (1) server in a Samba-3
-Domain must advertise itself as the domain master browser. This causes the Primary Domain Controller
+Domain must advertise itself as the domain master browser<sup>[<a name="id2870160" href="#ftn.id2870160">2</a>]</sup>. This causes the Primary Domain Controller
to claim domain specific NetBIOS name that identifies it as a domain master browser for its given
domain/workgroup. Local master browsers in the same domain/workgroup on broadcast-isolated subnets
then ask for a complete copy of the browse list for the whole wide area network. Browser clients
will then contact their local master browser, and will receive the domain-wide browse list,
instead of just the list for their broadcast-isolated subnet.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2873240"></a>Domain Control - Example Configuration</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870187"></a>Domain Control - Example Configuration</h2></div></div><div></div></div><p>
The first step in creating a working Samba PDC is to understand the parameters necessary
-in <tt class="filename">smb.conf</tt>. Here we attempt to explain the parameters that are covered in
-the <tt class="filename">smb.conf</tt> man page.
-</p><p>
-Here is an example <tt class="filename">smb.conf</tt> for acting as a PDC:
-</p><pre class="programlisting">
- [global]
- ; Basic server settings
- <a href="smb.conf.5.html#NETBIOSNAME" target="_top">netbios name</a> = <i class="replaceable"><tt>POGO</tt></i>
- <a href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> = <i class="replaceable"><tt>NARNIA</tt></i>
-
- ; User and Machine Account Backends
- ; Choices are: tdbsam, smbpasswd, ldapsam, mysqlsam, xmlsam, guest
- <a href="smb.conf.5.html#PASSDBBACKEND" target="_top">passdb backend</a> = ldapsam, guest
-
- ; we should act as the domain and local master browser
- <a href="smb.conf.5.html#OSLEVEL" target="_top">os level</a> = 64
- <a href="smb.conf.5.html#PERFERREDMASTER" target="_top">preferred master</a> = yes
- <a href="smb.conf.5.html#DOMAINMASTER" target="_top">domain master</a> = yes
- <a href="smb.conf.5.html#LOCALMASTER" target="_top">local master</a> = yes
-
- ; security settings (must user security = user)
- <a href="smb.conf.5.html#SECURITYEQUALSUSER" target="_top">security</a> = user
-
- ; encrypted passwords are a requirement for a PDC (default = Yes)
- <a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords</a> = yes
-
- ; support domain logons
- <a href="smb.conf.5.html#DOMAINLOGONS" target="_top">domain logons</a> = yes
-
- ; where to store user profiles?
- <a href="smb.conf.5.html#LOGONPATH" target="_top">logon path</a> = \\%N\profiles\%u
-
- ; where is a user's home directory and where should it be mounted at?
- <a href="smb.conf.5.html#LOGONDRIVE" target="_top">logon drive</a> = H:
- <a href="smb.conf.5.html#LOGONHOME" target="_top">logon home</a> = \\homeserver\%u\winprofile
-
- ; specify a generic logon script for all users
- ; this is a relative **DOS** path to the [netlogon] share
- <a href="smb.conf.5.html#LOGONSCRIPT" target="_top">logon script</a> = logon.cmd
-
- ; necessary share for domain controller
- [netlogon]
- <a href="smb.conf.5.html#PATH" target="_top">path</a> = /usr/local/samba/lib/netlogon
- <a href="smb.conf.5.html#READONLY" target="_top">read only</a> = yes
- <a href="smb.conf.5.html#WRITELIST" target="_top">write list</a> = <i class="replaceable"><tt>ntadmin</tt></i>
-
- ; share for storing user profiles
- [profiles]
- <a href="smb.conf.5.html#PATH" target="_top">path</a> = /export/smb/ntprofile
- <a href="smb.conf.5.html#READONLY" target="_top">read only</a> = no
- <a href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a> = 0600
- <a href="smb.conf.5.html#DIRECTORYMASK" target="_top">directory mask</a> = 0700
-</pre><div xmlns:ns5="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns5:p>
+in <tt class="filename">smb.conf</tt>. An example <tt class="filename">smb.conf</tt> for acting as a PDC can be found in the example
+<a href="#pdc-example" title="Example5.1.smb.conf for being a PDC">for being a PDC</a>.
+</p><p>
+</p><div class="example"><a name="pdc-example"></a><p class="title"><b>Example5.1.smb.conf for being a PDC</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>netbios name = BELERIAND</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>passdb backend = ldapsam, guest</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 33</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>security = user</tt></i></td></tr><tr><td><i class="parameter"><tt>encrypt passwords = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>logon path = \\%N\profiles\%u</tt></i></td></tr><tr><td><i class="parameter"><tt>logon drive = H:</tt></i></td></tr><tr><td><i class="parameter"><tt>logon home = \\homeserver\%u\winprofile</tt></i></td></tr><tr><td><i class="parameter"><tt>logon script = logon.cmd</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[netlogon]</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/lib/samba/netlogon</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>write list = ntadmin</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[profiles]</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/lib/samba/profiles</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = no</tt></i></td></tr><tr><td><i class="parameter"><tt>create mask = 0600</tt></i></td></tr><tr><td><i class="parameter"><tt>directory mask = 0700</tt></i></td></tr></table></div><p>
+</p><p>
+The basic options shown above are explained as follows:
+</p><div class="variablelist"><dl><dt><span class="term">passdb backend</span></dt><dd><p>
+ This contains all the user and group account information. Acceptable values for a PDC
+ are: <span class="emphasis"><em>smbpasswd, tdbsam, ldapsam</em></span>. The 'guest' entry provides needed
+ default accounts.</p><p>
+ Where is is intended to use backup domain controllers (BDCs) the only logical choice is
+ to use LDAP so that the passdb backend can be distributed. The tdbsam and smbpasswd files
+ can not effectively be distributed and therefore should not be used.
+ </p></dd><dt><span class="term">Domain Control Parameters</span></dt><dd><p>
+ The parameters <span class="emphasis"><em>os level, preferred master, domain master, security,
+ encrypt passwords, domain logons</em></span> play a central role in assuring domain
+ control and network logon support.</p><p>
+ The <span class="emphasis"><em>os level</em></span> must be set at or above a value of 32. A domain controller
+ must be the domain master browser, must be set in <span class="emphasis"><em>user</em></span> mode security,
+ must support Microsoft compatible encrypted passwords, and must provide the network logon
+ service (domain logons). Encrypted passwords must be enabled, for more details on how
+ to do this, refer to <a href="#passdb" title="Chapter11.Account Information Databases">the chapter on account information databases</a>.
+ </p></dd><dt><span class="term">Environment Parameters</span></dt><dd><p>
+ The parameters <span class="emphasis"><em>logon path, logon home, logon drive, logon script</em></span> are
+ environment support settings that help to facilitate client logon operations and that help
+ to provide automated control facilities to ease network management overheads. Please refer
+ to the man page information for these parameters.
+ </p></dd><dt><span class="term">NETLOGON Share</span></dt><dd><p>
+ The NETLOGON share plays a central role in domain logon and domain membership support.
+ This share is provided on all Microsoft domain controllers. It is used to provide logon
+ scripts, to store Group Policy files (NTConfig.POL), as well as to locate other common
+ tools that may be needed for logon processing. This is an essential share on a domain controller.
+ </p></dd><dt><span class="term">PROFILE Share</span></dt><dd><p>
+ This share is used to store user desktop profiles. Eash user must have a directory at the root
+ of this share. This directory must be write enabled for the user and must be globally read enabled.
+ Samba-3 has a VFS module called 'fake_permissions' that may be installed on this share. This will
+ allow a Samba administrator to make the directory read only to everyone. Of course this is useful
+ only after the profile has been properly created.
+ </p></dd></dl></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The above parameters make for a full set of parameters that may define the server's mode
-of operation. The following parameters are the essentials alone:
-
-</ns5:p><pre class="programlisting">
- workgroup = NARNIA
- domain logons = Yes
- domain master = Yes
- security = User
-</pre><ns5:p>
-
-The additional parameters shown in the longer listing above just makes for a
-more complete environment.
-</ns5:p></div><p>
-There are a couple of points to emphasize in the above configuration.
-</p><div class="itemizedlist"><ul type="disc"><li><p>
- Encrypted passwords must be enabled. For more details on how
- to do this, refer to <a href="#passdb" title="Chapter11.Account Information Databases">Account Information Database chapter</a>.
- </p></li><li><p>
- The server must support domain logons and have a
- <i class="parameter"><tt>[netlogon]</tt></i> share
- </p></li><li><p>
- The server must be the domain master browser in order for Windows
- client to locate the server as a DC. Please refer to the various
- Network Browsing documentation included with this distribution for
- details.
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2873537"></a>Samba ADS Domain Control</h2></div></div><div></div></div><p>
-Samba-3 is not and can not act as an Active Directory Server. It can not truly function as
+of operation. The following <tt class="filename">smb.conf</tt> parameters are the essentials alone:
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>netbios name = BELERIAND</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>security = User</tt></i></td></tr></table><p>
+</p><p>
+The additional parameters shown in the longer listing above just makes for
+more complete explanation.
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870675"></a>Samba ADS Domain Control</h2></div></div><div></div></div><p>
+Samba-3 is not, and can not act as, an Active Directory Server. It can not truly function as
an Active Directory Primary Domain Controller. The protocols for some of the functionality
-the Active Directory Domain Controllers is have been partially implemented on an experimental
-only basis. Please do NOT expect Samba-3 to support these protocols - nor should you depend
-on any such functionality either now or in the future. The Samba-Team may well remove such
-experimental features or may change their behaviour.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2873559"></a>Domain and Network Logon Configuration</h2></div></div><div></div></div><p>
-The subject of Network or Domain Logons is discussed here because it rightly forms
+the Active Directory Domain Controllers has been partially implemented on an experimental
+only basis. Please do NOT expect Samba-3 to support these protocols. Do not depend
+on any such functionality either now or in the future. The Samba-Team may remove these
+experimental features or may change their behaviour. This is mentioned for the benefit of those
+who have discovered secret capabilities in samba-3 and who have asked when this functionality will be
+completed. The answer is: Maybe or maybe never!
+</p><p>
+To be sure: Samba-3 is designed to provide most of the functionality that Microsoft Windows NT4 style
+domain controllers have. Samba-3 does NOT have all the capabilities of Windows NT4, but it does have
+a number of features that Windows NT4 domain contollers do not have. In short, Samba-3 is not NT4 and it
+is not Windows Server 200x and it is not an Active Directory server. We hope this is plain and simple
+enough for all to understand.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2870727"></a>Domain and Network Logon Configuration</h2></div></div><div></div></div><p>
+The subject of Network or Domain Logons is discussed here because it forms
an integral part of the essential functionality that is provided by a Domain Controller.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873574"></a>Domain Network Logon Service</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2870742"></a>Domain Network Logon Service</h3></div></div><div></div></div><p>
All Domain Controllers must run the netlogon service (<span class="emphasis"><em>domain logons</em></span>
-in Samba). One Domain Controller must be configured with <i class="parameter"><tt>domain master = Yes</tt></i>
-(the Primary Domain Controller); on ALL Backup Domain Controllers <i class="parameter"><tt>domain master = No</tt></i>
+in Samba). One Domain Controller must be configured with <a class="indexterm" name="id2870759"></a><i class="parameter"><tt>domain master</tt></i> = Yes
+(the Primary Domain Controller); on ALL Backup Domain Controllers <a class="indexterm" name="id2870775"></a><i class="parameter"><tt>domain master</tt></i> = No
must be set.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873607"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting">
- [global]
- domain logons = Yes
- domain master = (Yes on PDC, No on BDCs)
-
- [netlogon]
- comment = Network Logon Service
- path = /var/lib/samba/netlogon
- guest ok = Yes
- browseable = No
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873626"></a>The Special Case of MS Windows XP Home Edition</h4></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870791"></a>Example Configuration</h4></div></div><div></div></div><div class="example"><a name="id2870798"></a><p class="title"><b>Example5.2.smb.conf for being a PDC</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = (Yes on PDC, No on BDCs)</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[netlogon]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Network Logon Service</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/lib/samba/netlogon</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = No</tt></i></td></tr></table></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870882"></a>The Special Case of MS Windows XP Home Edition</h4></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
MS Windows XP Home Edition does not have the ability to join any type of Domain
security facility. Unlike, MS Windows 9x / Me, MS Windows XP Home Edition also completely
lacks the ability to log onto a network.
@@ -1123,8 +995,10 @@ MS Windows XP Professional.
</p><p>
Now that this has been said, please do NOT ask the mailing list, or email any of the
Samba-Team members with your questions asking how to make this work. It can't be done.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873661"></a>The Special Case of Windows 9x / Me</h4></div></div><div></div></div><p>
-A domain and a workgroup are exactly the same thing in terms of network
+If it can be done, then to do so would violate your software license agreement with
+Microsoft, and we recommend that you do not do that.
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2870920"></a>The Special Case of Windows 9x / Me</h4></div></div><div></div></div><p>
+A domain and a workgroup are exactly the same in terms of network
browsing. The difference is that a distributable authentication
database is associated with a domain, for secure login access to a
network. Also, different access rights can be granted to users if they
@@ -1145,7 +1019,7 @@ which are the focus of this section.
When an SMB client in a domain wishes to logon, it broadcasts requests for a
logon server. The first one to reply gets the job, and validates its
password using whatever mechanism the Samba administrator has installed.
-It is possible (but very stupid) to create a domain where the user
+It is possible (but ill advised ) to create a domain where the user
database is not shared between servers, i.e. they are effectively workgroup
servers advertising themselves as participating in a domain. This
demonstrates how authentication is quite different from but closely
@@ -1196,14 +1070,17 @@ The main difference between a PDC and a Windows 9x logon server configuration is
</p><div class="itemizedlist"><ul type="disc"><li><p>
Password encryption is not required for a Windows 9x logon server. But note
that beginning with MS Windows 98 the default setting is that plain-text
- password support has been disabled. It can be re-enabled with the registry
+ password support is disabled. It can be re-enabled with the registry
changes that are documented in the chapter on Policies.
</p></li><li><p>
Windows 9x/ME clients do not require and do not use machine trust accounts.
</p></li></ul></div><p>
A Samba PDC will act as a Windows 9x logon server; after all, it does provide the
network logon services that MS Windows 9x / Me expect to find.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876300"></a>Security Mode and Master Browsers</h3></div></div><div></div></div><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+Use of plain-text passwords is strongly discouraged. Where used they are easily detected
+using a sniffer tool to examine network traffic.
+</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871174"></a>Security Mode and Master Browsers</h3></div></div><div></div></div><p>
There are a few comments to make in order to tie up some
loose ends. There has been much debate over the issue of whether
or not it is ok to configure Samba as a Domain Controller in security
@@ -1220,24 +1097,25 @@ are two distinctly different functions), it is not a good idea to do
so. You should remember that the DC must register the DOMAIN&lt;#1b&gt; NetBIOS
name. This is the name used by Windows clients to locate the DC.
Windows clients do not distinguish between the DC and the DMB.
+A DMB is a Domain Master Browser - see <a href="#DMB" title="Setting up WORKGROUP Browsing">Domain Master Browser</a>.
For this reason, it is very wise to configure the Samba DC as the DMB.
</p><p>
Now back to the issue of configuring a Samba DC to use a mode other
-than <i class="parameter"><tt>security = user</tt></i>. If a Samba host is configured to use
+than <a class="indexterm" name="id2871243"></a><i class="parameter"><tt>security</tt></i> = user. If a Samba host is configured to use
another SMB server or DC in order to validate user connection
requests, then it is a fact that some other machine on the network
-(the <i class="parameter"><tt>password server</tt></i>) knows more about the user than the Samba host.
+(the <a class="indexterm" name="id2871260"></a><i class="parameter"><tt>password server</tt></i>) knows more about the user than the Samba host.
99% of the time, this other host is a domain controller. Now
-in order to operate in domain mode security, the <i class="parameter"><tt>workgroup</tt></i> parameter
+in order to operate in domain mode security, the <a class="indexterm" name="id2871278"></a><i class="parameter"><tt>workgroup</tt></i> parameter
must be set to the name of the Windows NT domain (which already
has a domain controller). If the domain does NOT already have a Domain Controller
then you do not yet have a Domain!
</p><p>
Configuring a Samba box as a DC for a domain that already by definition has a
PDC is asking for trouble. Therefore, you should always configure the Samba DC
-to be the DMB for its domain and set <i class="parameter"><tt>security = user</tt></i>.
+to be the DMB for its domain and set <a class="indexterm" name="id2871302"></a><i class="parameter"><tt>security</tt></i> = user.
This is the only officially supported mode of operation.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876404"></a>Common Problems and Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876412"></a>I cannot include a '$' in a machine name</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871320"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871328"></a>'$' cannot be included in machine name</h3></div></div><div></div></div><p>
A 'machine account', (typically) stored in <tt class="filename">/etc/passwd</tt>,
takes the form of the machine name with a '$' appended. FreeBSD (and other BSD
systems?) won't create a user with a '$' in their name.
@@ -1245,24 +1123,26 @@ systems?) won't create a user with a '$' in their name.
The problem is only in the program used to make the entry. Once made, it works perfectly.
Create a user without the '$'. Then use <b class="command">vipw</b> to edit the entry, adding
the '$'. Or create the whole entry with vipw if you like; make sure you use a unique User ID!
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876450"></a>I get told &quot;You already have a connection to the Domain....&quot;
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+The UNIX tool <b class="command">vipw</b> is a common tool for directly editting the <tt class="filename">/etc/passwd</tt> file.
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871386"></a>Joining domain fails because of existing machine account</h3></div></div><div></div></div><p>&#8220;<span class="quote">I get told &quot;You already have a connection to the Domain....&quot;
or &quot;Cannot join domain, the credentials supplied conflict with an
-existing set..&quot; when creating a machine trust account.</h3></div></div><div></div></div><p>
+existing set..&quot; when creating a machine trust account.</span>&#8221;</p><p>
This happens if you try to create a machine trust account from the
machine itself and already have a connection (e.g. mapped drive)
to a share (or IPC$) on the Samba PDC. The following command
will remove all network drive connections:
</p><pre class="screen">
- <tt class="prompt">C:\WINNT\&gt;</tt> <b class="userinput"><tt>net use * /d</tt></b>
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>net use * /d</tt></b>
</pre><p>
Further, if the machine is already a 'member of a workgroup' that
is the same name as the domain you are joining (bad idea) you will
get this message. Change the workgroup name to something else, it
does not matter what, reboot, and try again.
-</p></div><div xmlns:ns6="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876500"></a>The system can not log you on (C000019B)....</h3></div></div><div></div></div><p>I joined the domain successfully but after upgrading
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871445"></a>The system can not log you on (C000019B)....</h3></div></div><div></div></div><p>&#8220;<span class="quote">I joined the domain successfully but after upgrading
to a newer version of the Samba code I get the message, <span class="errorname">The system
can not log you on (C000019B), Please try again or consult your
-system administrator</span> when attempting to logon.
+system administrator</span> when attempting to logon.</span>&#8221;
</p><p>
This occurs when the domain SID stored in the secrets.tdb database
is changed. The most common cause of a change in domain SID is when
@@ -1270,21 +1150,25 @@ the domain name and/or the server name (NetBIOS name) is changed.
The only way to correct the problem is to restore the original domain
SID or remove the domain client from the domain and rejoin. The domain
SID may be reset using either the net or rpcclient utilities.
-</p><ns6:p>
+</p><p>
The reset or change the domain SID you can use the net command as follows:
-</ns6:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>net getlocalsid 'OLDNAME'</tt></b>
<tt class="prompt">root# </tt><b class="userinput"><tt>net setlocalsid 'SID'</tt></b>
-</pre><ns6:p>
-</ns6:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876570"></a>The machine trust account for this computer either does not
-exist or is not accessible.</h3></div></div><div></div></div><p>
-When I try to join the domain I get the message <span class="errorname">The machine account
+</pre><p>
+</p><p>
+Workstation machine trust accounts work only with the Domain (or network) SID. If this SID changes
+then domain members (workstations) will not be able to log onto the domain. The original Domain SID
+can be recovered from the secrets.tdb file. The alternative is to visit each workstation to re-join
+it to the domain.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871529"></a>The machine trust account not accessible</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">When I try to join the domain I get the message <span class="errorname">The machine account
for this computer either does not exist or is not accessible</span>. What's
-wrong?
+wrong?</span>&#8221;
</p><p>
This problem is caused by the PDC not having a suitable machine trust account.
-If you are using the <i class="parameter"><tt>add machine script</tt></i> method to create
+If you are using the <a class="indexterm" name="id2871555"></a><i class="parameter"><tt>add machine script</tt></i> method to create
accounts then this would indicate that it has not worked. Ensure the domain
admin user system is working.
</p><p>
@@ -1300,31 +1184,42 @@ Some people have also reported
that inconsistent subnet masks between the Samba server and the NT
client can cause this problem. Make sure that these are consistent
for both client and server.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876634"></a>When I attempt to login to a Samba Domain from a NT4/W2K workstation,
-I get a message about my account being disabled.</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871602"></a>Account disabled</h3></div></div><div></div></div><p>&#8220;<span class="quote">When I attempt to login to a Samba Domain from a NT4/W2K workstation,
+ I get a message about my account being disabled.</span>&#8221;</p><p>
Enable the user accounts with <b class="userinput"><tt>smbpasswd -e <i class="replaceable"><tt>username</tt></i>
</tt></b>, this is normally done as an account is created.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876660"></a>Until a few minutes after Samba has started, clients get the error &quot;Domain Controller Unavailable&quot;</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871634"></a>Domain Controller Unavailable</h3></div></div><div></div></div><p>&#8220;<span class="quote">Until a few minutes after Samba has started, clients get the error &quot;Domain Controller Unavailable&quot;</span>&#8221;</p><p>
A domain controller has to announce on the network who it is. This usually takes a while.
- </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-bdc"></a>Chapter6.Backup Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Volker</span> <span class="surname">Lendecke</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:Volker.Lendecke@SerNet.DE">Volker.Lendecke@SerNet.DE</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2878706">Features And Benefits</a></dt><dt><a href="#id2878870">Essential Background Information</a></dt><dd><dl><dt><a href="#id2878898">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2876857">Active Directory Domain Control</a></dt><dt><a href="#id2876879">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2876902">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2876928">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2877029">Example Configuration</a></dt></dl></dd><dt><a href="#id2877079">Common Errors</a></dt><dd><dl><dt><a href="#id2877093">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2877125">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2877158">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2877202">Can I do this all with LDAP?</a></dt></dl></dd></dl></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2871658"></a>Can not log onto domain member workstation after joining domain</h3></div></div><div></div></div><p>After successfully joining the domain user logons fail with one of two messages:</p><p>One to the effect that the domain controller can not be found, the other claiming that the
+ account does not exist in the domain or that the password is incorrect.</p><p>This may be due to incompatible settings between
+ the Windows client and the Samba-3 server for <span class="emphasis"><em>schannel</em></span> (secure channel) settings
+ or <span class="emphasis"><em>smb signing</em></span> settings. Check your samba settings for <span class="emphasis"><em>
+ client schannel, server schannel, client signing, server signing</em></span> by executing:
+ <b class="command">testparm -v | more</b> and looking for the value of these parameters.
+ </p><p>
+ Also use the Microsoft Management Console - Local Security Settings. This tool is available from the
+ Control Panel. The Policy settings are found in the Local Policies / Securty Options area and are prefixed by
+ <span class="emphasis"><em>Secure Channel: ..., and Digitally sign ...</em></span>.
+ </p><p>
+ It is important that these be set consistently with the Samba-3 server settings.
+ </p></div></div><div class="footnotes"><br><hr width="100" align="left"><div class="footnote"><p><sup>[<a name="ftn.id2869637" href="#id2869637">1</a>] </sup>See also <a href="#passdb" title="Chapter11.Account Information Databases">the chapter on Account Information Databases</a>.</p></div><div class="footnote"><p><sup>[<a name="ftn.id2870160" href="#id2870160">2</a>] </sup>See also <a href="#NetworkBrowsing" title="Chapter10.Samba / MS Windows Network Browsing Guide">the chapter about network browsing</a></p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-bdc"></a>Chapter6.Backup Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Volker</span> <span class="surname">Lendecke</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:Volker.Lendecke@SerNet.DE">Volker.Lendecke@SerNet.DE</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2871817">Features And Benefits</a></dt><dt><a href="#id2872006">Essential Background Information</a></dt><dd><dl><dt><a href="#id2872035">MS Windows NT4 Style Domain Control</a></dt><dt><a href="#id2872286">Active Directory Domain Control</a></dt><dt><a href="#id2872307">What qualifies a Domain Controller on the network?</a></dt><dt><a href="#id2872332">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="#id2872346">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="#id2872480">Example Configuration</a></dt></dl></dd><dt><a href="#id2872638">Common Errors</a></dt><dd><dl><dt><a href="#id2872650">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="#id2872682">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="#id2872708">How do I replicate the smbpasswd file?</a></dt><dt><a href="#id2872753">Can I do this all with LDAP?</a></dt></dl></dd></dl></div><p>
Before you continue reading in this section, please make sure that you are comfortable
-with configuring a Samba Domain Controller as described in the
-<a href="#samba-pdc" title="Chapter5.Domain Control">Domain Control</a> chapter.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878706"></a>Features And Benefits</h2></div></div><div></div></div><p>
+with configuring a Samba Domain Controller as described in <a href="#samba-pdc" title="Chapter5.Domain Control">chapter on setting up Samba as a PDC</a>.
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2871817"></a>Features And Benefits</h2></div></div><div></div></div><p>
This is one of the most difficult chapters to summarise. It does not matter what we say here
for someone will still draw conclusions and / or approach the Samba-Team with expectations
that are either not yet capable of being delivered, or that can be achieved far more
-effectively using a totally different approach. Since this HOWTO is already so large and
-extensive, we have taken the decision to provide sufficient (but not comprehensive)
-information regarding Backup Domain Control. In the event that you should have a persistent
-concern that is not addressed in this HOWTO document then please email
+effectively using a totally different approach. In the event that you should have a persistent
+concern that is not addressed in this book then please email
<a href="mailto:jht@samba.org" target="_top">John H Terpstra</a> clearly setting out your requirements
and / or question and we will do our best to provide a solution.
</p><p>
Samba-3 is capable of acting as a Backup Domain Controller to another Samba Primary Domain
-Controller. A Samba-3 PDC can operate with an LDAP Account backend. The Samba-3 BDC can
-operate with a slave LDAP server for the Account backend. This effectively gives samba a high
-degree of scalability. This is a very sweet (nice) solution for large organisations.
+Controller. A Samba-3 PDC can operate with an LDAP Account backend. The LDAP backend can be
+either a common master LDAP server, or a slave server. The use of a slave LDAP server has the
+benefit that when the master is down clients may still be able to log onto the network.
+This effectively gives samba a high degree of scalability iand is a very sweet (nice) solution
+for large organisations.
</p><p>
While it is possible to run a Samba-3 BDC with non-LDAP backend, the administrator will
need to figure out precisely what is the best way to replicate (copy / distribute) the
@@ -1349,8 +1244,9 @@ lets consider each possible option and look at the pro's and con's for each theo
</p><p>
Arguments Against: Complexity
</p></li><li><p>
- Passdb Backend is tdbsam based, BDCs use cron based &quot;net rpc vampire&quot; to
- suck down the Accounts database from the PDC
+ Passdb Backend is tdbsam based, BDCs use cron based <span class="emphasis"><em>net rpc vampire</em></span> to
+ obtain the Accounts database from the PDC and place them into the Samba SAM.
+ <span class="emphasis"><em>net rpc vampire</em></span> is a Samba function of the &quot;net&quot; command.
</p><p>
Arguments For: It would be a nice solution
</p><p>
@@ -1371,7 +1267,7 @@ lets consider each possible option and look at the pro's and con's for each theo
Arguments Against: All machine trust accounts and user accounts will be locally
maintained. Domain users will NOT be able to roam from office to office. This is
a broken and flawed solution. Do NOT do this.
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878870"></a>Essential Background Information</h2></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872006"></a>Essential Background Information</h2></div></div><div></div></div><p>
A Domain Controller is a machine that is able to answer logon requests from network
workstations. Microsoft LanManager and IBM LanServer were two early products that
provided this capability. The technology has become known as the LanMan Netlogon service.
@@ -1381,7 +1277,7 @@ and with it a new form of the network logon service that has extended functional
This service became known as the NT NetLogon Service. The nature of this service has
changed with the evolution of MS Windows NT and today provides a very complex array of
services that are implemented over a complex spectrum of technologies.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878898"></a>MS Windows NT4 Style Domain Control</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872035"></a>MS Windows NT4 Style Domain Control</h3></div></div><div></div></div><p>
Whenever a user logs into a Windows NT4 / 200x / XP Professional Workstation,
the workstation connects to a Domain Controller (authentication server) to validate
the username and password that the user entered are valid. If the information entered
@@ -1439,32 +1335,29 @@ one of the BDCs can be promoted to a PDC. If this happens while the original PDC
line then it is automatically demoted to a BDC. This is an important aspect of Domain
Controller management. The tool that is used to affect a promotion or a demotion is the
Server Manager for Domains.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2876788"></a>Example PDC Configuration</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2872186"></a>Example PDC Configuration</h4></div></div><div></div></div><p>
Since version 2.2 Samba officially supports domain logons for all current Windows Clients,
including Windows NT4, 2003 and XP Professional. For samba to be enabled as a PDC some
parameters in the <i class="parameter"><tt>[global]</tt></i>-section of the <tt class="filename">smb.conf</tt> have to be set:
-</p><pre class="programlisting">
- workgroup = SAMBA
- domain master = yes
- domain logons = yes
-</pre><p>
-Several other things like a <i class="parameter"><tt>[homes]</tt></i> and a <i class="parameter"><tt>[netlogon]</tt></i> share also need to be set along with
+</p><div class="example"><a name="id2872218"></a><p class="title"><b>Example6.1.Minimal smb.conf for being a PDC</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = yes</tt></i></td></tr></table></div><p>
+Several other things like a <i class="parameter"><tt>[homes]</tt></i> and a
+<i class="parameter"><tt>[netlogon]</tt></i> share also need to be set along with
settings for the profile path, the users home drive, etc.. This will not be covered in this
-chapter, for more information please refer to the chapter on <a href="#samba-pdc" title="Chapter5.Domain Control">Domain Control</a>.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876857"></a>Active Directory Domain Control</h3></div></div><div></div></div><p>
+chapter, for more information please refer to <a href="#samba-pdc" title="Chapter5.Domain Control">the chapter about samba as a PDC</a>.
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872286"></a>Active Directory Domain Control</h3></div></div><div></div></div><p>
As of the release of MS Windows 2000 and Active Directory, this information is now stored
in a directory that can be replicated and for which partial or full administrative control
can be delegated. Samba-3 is NOT able to be a Domain Controller within an Active Directory
tree, and it can not be an Active Directory server. This means that Samba-3 also can NOT
act as a Backup Domain Controller to an Active Directory Domain Controller.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876879"></a>What qualifies a Domain Controller on the network?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872307"></a>What qualifies a Domain Controller on the network?</h3></div></div><div></div></div><p>
Every machine that is a Domain Controller for the domain SAMBA has to register the NetBIOS
group name SAMBA&lt;#1c&gt; with the WINS server and/or by broadcast on the local network.
The PDC also registers the unique NetBIOS name SAMBA&lt;#1b&gt; with the WINS server.
The name type &lt;#1b&gt; name is normally reserved for the Domain Master Browser, a role
that has nothing to do with anything related to authentication, but the Microsoft Domain
implementation requires the domain master browser to be on the same machine as the PDC.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876902"></a>How does a Workstation find its domain controller?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872332"></a>How does a Workstation find its domain controller?</h3></div></div><div></div></div><p>
An MS Windows NT4 / 200x / XP Professional workstation in the domain SAMBA that wants a
local user to be authenticated has to find the domain controller for SAMBA. It does this
by doing a NetBIOS name query for the group name SAMBA&lt;#1c&gt;. It assumes that each
@@ -1472,22 +1365,22 @@ of the machines it gets back from the queries is a domain controller and can ans
requests. To not open security holes both the workstation and the selected domain controller
authenticate each other. After that the workstation sends the user's credentials (name and
password) to the local Domain Controller, for validation.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876928"></a>Backup Domain Controller Configuration</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872346"></a>Backup Domain Controller Configuration</h2></div></div><div></div></div><p>
Several things have to be done:
</p><div class="itemizedlist"><ul type="disc"><li><p>
The domain SID has to be the same on the PDC and the BDC. This used to
be stored in the file private/MACHINE.SID. This file is not created
- anymore since Samba 2.2.5 or even earlier. Nowadays the domain SID is
- stored in the file private/secrets.tdb. Simply copying the secrets.tdb
+ since Samba 2.2.5. Nowadays the domain SID is stored in the file
+ private/secrets.tdb. Simply copying the secrets.tdb
from the PDC to the BDC does not work, as the BDC would
generate a new SID for itself and override the domain SID with this
new BDC SID.</p><p>
To retrieve the domain SID from the PDC or an existing BDC and store it in the
secrets.tdb, execute:
</p><pre class="screen">
- <tt class="prompt">root# </tt><b class="userinput"><tt>net rpc getsid</tt></b>
- </pre></li><li><p>
- The Unix user database has to be synchronized from the PDC to the
+<tt class="prompt">root# </tt><b class="userinput"><tt>net rpc getsid</tt></b>
+</pre></li><li><p>
+ The UNIX user database has to be synchronized from the PDC to the
BDC. This means that both the /etc/passwd and /etc/group have to be
replicated from the PDC to the BDC. This can be done manually
whenever changes are made, or the PDC is set up as a NIS master
@@ -1507,23 +1400,30 @@ Several things have to be done:
BDC. This can be done manually whenever login scripts are changed,
or it can be done automatically together with the smbpasswd
synchronization.
- </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877029"></a>Example Configuration</h3></div></div><div></div></div><p>
+ </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872480"></a>Example Configuration</h3></div></div><div></div></div><p>
Finally, the BDC has to be found by the workstations. This can be done by setting:
-</p><pre class="programlisting">
- workgroup = SAMBA
- domain master = no
- domain logons = yes
-</pre><p>
-in the <i class="parameter"><tt>[global]</tt></i>-section of the <tt class="filename">smb.conf</tt> of the BDC. This makes the BDC
+</p><div class="example"><a name="id2872495"></a><p class="title"><b>Example6.2.Minimal setup for being a BDC</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>idmap backend = ldapsam://slave-ldap.quenya.org</tt></i></td></tr></table></div><p>
+In the <i class="parameter"><tt>[global]</tt></i>-section of the <tt class="filename">smb.conf</tt> of the BDC. This makes the BDC
only register the name SAMBA&lt;#1c&gt; with the WINS server. This is no
problem as the name SAMBA&lt;#1c&gt; is a NetBIOS group name that is meant to
-be registered by more than one machine. The parameter 'domain master =
-no' forces the BDC not to register SAMBA&lt;#1b&gt; which as a unique NetBIOS
+be registered by more than one machine. The parameter
+<a class="indexterm" name="id2872563"></a><i class="parameter"><tt>domain master</tt></i> = no
+forces the BDC not to register SAMBA&lt;#1b&gt; which as a unique NetBIOS
name is reserved for the Primary Domain Controller.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877079"></a>Common Errors</h2></div></div><div></div></div><p>
+</p><p>
+The <i class="parameter"><tt>idmap backend</tt></i> will redirect the <b class="command">winbindd</b> utility to
+use the LDAP database to resolve all UIDs and GIDs for UNIX accounts.
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+Samba-3 has introduced a new ID mapping facility. One of the features of this facility is that it
+allows greater flexibility in how user and group IDs are handled in respect of NT Domain User and Group
+SIDs. One of the new facilities provides for explicitly ensuring that UNIX / Linux UID and GID values
+will be consistent on the PDC, all BDCs and all Domain Member servers. The parameter that controls this
+is called <i class="parameter"><tt>idmap backend</tt></i>. Please refer to the man page for <tt class="filename">smb.conf</tt> for more information
+regarding it's behaviour. Do NOT set this parameter except where an LDAP backend (ldapsam) is in use.
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872638"></a>Common Errors</h2></div></div><div></div></div><p>
As this is a rather new area for Samba there are not many examples that we may refer to. Keep
watching for updates to this section.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877093"></a>Machine Accounts keep expiring, what can I do?</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872650"></a>Machine Accounts keep expiring, what can I do?</h3></div></div><div></div></div><p>
This problem will occur when occur when the passdb (SAM) files are copied from a central
server but the local Backup Domain Controllers. Local machine trust account password updates
are not copied back to the central server. The newer machine account password is then over
@@ -1534,18 +1434,15 @@ to proceed and the account expiry error will be reported.
</p><p>
The solution: use a more robust passdb backend, such as the ldapsam backend, setting up
an slave LDAP server for each BDC, and a master LDAP server for the PDC.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877125"></a>Can Samba be a Backup Domain Controller to an NT4 PDC?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872682"></a>Can Samba be a Backup Domain Controller to an NT4 PDC?</h3></div></div><div></div></div><p>
With version 2.2, no. The native NT4 SAM replication protocols have not yet been fully
implemented. The Samba Team is working on understanding and implementing the protocols,
-but this work has not been finished for version 2.2.
+but this work has not been finished for Samba-3.
</p><p>
-With version 3.0, the work on both the replication protocols and a suitable storage
-mechanism has progressed, and some form of NT4 BDC support is expected soon.
-</p><p>
-Can I get the benefits of a BDC with Samba? Yes. The main reason for implementing a
+Can I get the benefits of a BDC with Samba? Yes, but only to a Samba PDC. The main reason for implementing a
BDC is availability. If the PDC is a Samba machine, a second Samba machine can be set up to
service logon requests whenever the PDC is down.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877158"></a>How do I replicate the smbpasswd file?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872708"></a>How do I replicate the smbpasswd file?</h3></div></div><div></div></div><p>
Replication of the smbpasswd file is sensitive. It has to be done whenever changes
to the SAM are made. Every user's password change is done in the smbpasswd file and
has to be replicated to the BDC. So replicating the smbpasswd file very often is necessary.
@@ -1559,12 +1456,12 @@ to type a password.
As said a few times before, use of this method is broken and flawed. Machine trust
accounts will go out of sync, resulting in a very broken domain. This method is
<span class="emphasis"><em>not</em></span> recommended. Try using LDAP instead.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877202"></a>Can I do this all with LDAP?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2872753"></a>Can I do this all with LDAP?</h3></div></div><div></div></div><p>
The simple answer is YES. Samba's pdb_ldap code supports binding to a replica
LDAP server, and will also follow referrals and rebind to the master if it ever
needs to make a modification to the database. (Normally BDCs are read only, so
this will not occur often).
-</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="domain-member"></a>Chapter7.Domain Membership</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2877728">Features and Benefits</a></dt><dt><a href="#id2877298">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2877460">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879244">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2879440">&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</a></dt><dt><a href="#id2879495">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2879692">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2882368">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2882506">Setup your smb.conf</a></dt><dt><a href="#id2882590">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2882938">Notes</a></dt></dl></dd><dt><a href="#id2882960">Common Errors</a></dt><dd><dl><dt><a href="#id2882986">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2883018">Adding Machine to Domain Fails</a></dt></dl></dd></dl></div><p>
+</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="domain-member"></a>Chapter7.Domain Membership</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2872960">Features and Benefits</a></dt><dt><a href="#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="#id2873290">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="#id2873596">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="#id2873811">&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</a></dt><dt><a href="#id2873884">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="#id2874094">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="#id2874530">Why is this better than security = server?</a></dt></dl></dd><dt><a href="#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="#id2874715">Setup your smb.conf</a></dt><dt><a href="#id2874844">Setup your /etc/krb5.conf</a></dt><dt><a href="#ads-create-machine-account">Create the computer account</a></dt><dt><a href="#ads-test-server">Test your server setup</a></dt><dt><a href="#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="#id2875221">Notes</a></dt></dl></dd><dt><a href="#id2875243">Common Errors</a></dt><dd><dl><dt><a href="#id2875286">Can Not Add Machine Back to Domain</a></dt><dt><a href="#id2875318">Adding Machine to Domain Fails</a></dt><dt><a href="#id2875462">I can't join a Windows 2003 PDC</a></dt></dl></dd></dl></div><p>
Domain Membership is a subject of vital concern, Samba must be able to
participate as a member server in a Microsoft Domain security context, and
Samba must be capable of providing Domain machine member trust accounts,
@@ -1574,12 +1471,11 @@ This chapter covers background information pertaining to domain membership,
Samba configuration for it, and MS Windows client procedures for joining a
domain. Why is this necessary? Because both are areas in which there exists
within the current MS Windows networking world and particularly in the
-Unix/Linux networking and administration world, a considerable level of
+UNIX/Linux networking and administration world, a considerable level of
mis-information, incorrect understanding, and a lack of knowledge. Hopefully
this chapter will fill the voids.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877728"></a>Features and Benefits</h2></div></div><div></div></div><p>
-MS Windows workstations and servers that want to participate in domain
-security need to
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2872960"></a>Features and Benefits</h2></div></div><div></div></div><p>
+MS Windows workstations and servers that want to participate in domain security need to
be made Domain members. Participating in Domain security is often called
<span class="emphasis"><em>Single Sign On</em></span> or <span class="acronym">SSO</span> for short. This
chapter describes the process that must be followed to make a workstation
@@ -1614,7 +1510,7 @@ Domain membership has many advantages:
client or server, other than the central Domain database
(either NT4/Samba SAM style Domain, NT4 Domain that is back ended with an
LDAP directory, or via an Active Directory infrastructure)
- </p></li></ul></div></div><div xmlns:ns7="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877298"></a>MS Windows Workstation/Server Machine Trust Accounts</h2></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="machine-trust-accounts"></a>MS Windows Workstation/Server Machine Trust Accounts</h2></div></div><div></div></div><a class="indexterm" name="id2873091"></a><p>
A machine trust account is an account that is used to authenticate a client
machine
(rather than a user) to the Domain Controller server. In Windows terminology,
@@ -1633,18 +1529,18 @@ shared secret with the domain controller.
A Windows NT4 PDC stores each machine trust account in the Windows Registry.
The introduction of MS Windows 2000 saw the introduction of Active Directory,
the new repository for machine trust accounts.
-</p><ns7:p>
+</p><p>
A Samba PDC, however, stores each machine trust account in two parts,
as follows:
-</ns7:p><div class="itemizedlist"><ul type="disc"><li><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>
A Domain Security Account (stored in the
- <i class="parameter"><tt>passdb backend</tt></i> that has been configured in the
+ <a class="indexterm" name="id2873145"></a><i class="parameter"><tt>passdb backend</tt></i> that has been configured in the
<tt class="filename">smb.conf</tt> file. The precise nature of the account information that is
stored depends on the type of backend database that has been chosen.
</p><p>
The older format of this data is the <tt class="filename">smbpasswd</tt> database
- which contains the unix login ID, the Unix user identifier (UID), and the
+ which contains the UNIX login ID, the UNIX user identifier (UID), and the
LanMan and NT encrypted passwords. There is also some other information in
this file that we do not need to concern ourselves with here.
</p><p>
@@ -1653,17 +1549,18 @@ as follows:
older <tt class="filename">smbpasswd</tt> file did. The extra information
enables new user account controls to be used.
</p></li><li><p>
- A corresponding Unix account, typically stored in
+ A corresponding UNIX account, typically stored in
<tt class="filename">/etc/passwd</tt>. Work is in progress to allow a
- simplified mode of operation that does not require Unix user accounts, but
+ simplified mode of operation that does not require UNIX user accounts, but
this may not be a feature of the early releases of Samba-3.
- </p></li></ul></div><ns7:p>
-</ns7:p><p>
+ </p></li></ul></div><p>
+</p><a class="indexterm" name="id2873227"></a><p>
There are three ways to create machine trust accounts:
</p><div class="itemizedlist"><ul type="disc"><li><p>
- Manual creation from the Unix/Linux command line. Here, both the Samba and
- corresponding Unix account are created by hand.
+ Manual creation from the UNIX/Linux command line. Here, both the Samba and
+ corresponding UNIX account are created by hand.
</p></li><li><p>
+ <a class="indexterm" name="id2873260"></a>
Using the MS Windows NT4 Server Manager (either from an NT4 Domain member
server, or using the Nexus toolkit available from the Microsoft web site.
This tool can be run from any MS Windows machine so long as the user is
@@ -1671,28 +1568,39 @@ There are three ways to create machine trust accounts:
</p></li><li><p>
&quot;On-the-fly&quot; creation. The Samba machine trust account is automatically
created by Samba at the time the client is joined to the domain.
- (For security, this is the recommended method.) The corresponding Unix
+ (For security, this is the recommended method.) The corresponding UNIX
account may be created automatically or manually.
- </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877460"></a>Manual Creation of Machine Trust Accounts</h3></div></div><div></div></div><p>
+ </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873290"></a>Manual Creation of Machine Trust Accounts</h3></div></div><div></div></div><p>
The first step in manually creating a machine trust account is to manually
-create the corresponding Unix account in <tt class="filename">/etc/passwd</tt>.
+create the corresponding UNIX account in <tt class="filename">/etc/passwd</tt>.
This can be done using <b class="command">vipw</b> or another 'add user' command
-that is normally used to create new Unix accounts. The following is an example for a Linux based Samba server:
-</p><p>
-<tt class="prompt">root# </tt><b class="userinput"><tt>/usr/sbin/useradd -g 100 -d /dev/null -c <i class="replaceable"><tt>&quot;machine nickname&quot;</tt></i> -s /bin/false <i class="replaceable"><tt>machine_name</tt></i>$ </tt></b>
+that is normally used to create new UNIX accounts. The following is an example for a Linux based Samba server:
+<a class="indexterm" name="id2873321"></a>
+<a class="indexterm" name="id2873329"></a>
+
+
</p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>/usr/sbin/useradd -g 100 -d /dev/null -c <i class="replaceable"><tt>&quot;machine nickname&quot;</tt></i> \
+ -s /bin/false <i class="replaceable"><tt>machine_name</tt></i>$ </tt></b>
+
<tt class="prompt">root# </tt><b class="userinput"><tt>passwd -l <i class="replaceable"><tt>machine_name</tt></i>$</tt></b>
+</pre><p>
</p><p>
+<a class="indexterm" name="id2873391"></a>
On *BSD systems, this can be done using the <b class="command">chpass</b> utility:
</p><p>
-<tt class="prompt">root# </tt><b class="userinput"><tt>chpass -a &quot;<i class="replaceable"><tt>machine_name</tt></i>$:*:101:100::0:0:Workstation <i class="replaceable"><tt>machine_name</tt></i>:/dev/null:/sbin/nologin&quot;</tt></b>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>chpass -a \
+ &quot;<i class="replaceable"><tt>machine_name</tt></i>$:*:101:100::0:0:Workstation <i class="replaceable"><tt>machine_name</tt></i>:/dev/null:/sbin/nologin&quot;</tt></b>
+</pre><p>
</p><p>
The <tt class="filename">/etc/passwd</tt> entry will list the machine name
with a &quot;$&quot; appended, won't have a password, will have a null shell and no
home directory. For example a machine named 'doppy' would have an
<tt class="filename">/etc/passwd</tt> entry like this:
</p><pre class="programlisting">
-doppy$:x:505:501:<i class="replaceable"><tt>machine_nickname</tt></i>:/dev/null:/bin/false
+doppy$:x:505:100:<i class="replaceable"><tt>machine_nickname</tt></i>:/dev/null:/bin/false
</pre><p>
Above, <i class="replaceable"><tt>machine_nickname</tt></i> can be any
descriptive name for the client, i.e., BasementComputer.
@@ -1701,39 +1609,44 @@ name of the client to be joined to the domain. The &quot;$&quot; must be
appended to the NetBIOS name of the client or Samba will not recognize
this as a machine trust account.
</p><p>
-Now that the corresponding Unix account has been created, the next step is to create
+Now that the corresponding UNIX account has been created, the next step is to create
the Samba account for the client containing the well-known initial
-machine trust account password. This can be done using the <a href="smbpasswd.8.html" target="_top"><b class="command">smbpasswd(8)</b></a> command
+machine trust account password. This can be done using the
+<b class="command">smbpasswd</b> command
as shown here:
-</p><ns7:p>
-</ns7:p><pre class="screen">
+</p><p>
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -a -m <i class="replaceable"><tt>machine_name</tt></i></tt></b>
-</pre><ns7:p>
-</ns7:p><p>
+</pre><p>
+</p><p>
where <i class="replaceable"><tt>machine_name</tt></i> is the machine's NetBIOS
name. The RID of the new machine account is generated from the UID of
-the corresponding Unix account.
+the corresponding UNIX account.
</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Join the client to the domain immediately</h3><p>
Manually creating a machine trust account using this method is the
equivalent of creating a machine trust account on a Windows NT PDC using
+ <a class="indexterm" name="id2873570"></a>
the <span class="application">Server Manager</span>. From the time at which the
account is created to the time which the client joins the domain and
changes the password, your domain is vulnerable to an intruder joining
your domain using a machine with the same NetBIOS name. A PDC inherently
trusts members of the domain and will serve out a large degree of user
information to such clients. You have been warned!
- </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879244"></a>Using NT4 Server Manager to Add Machine Accounts to the Domain</h3></div></div><div></div></div><p>
+ </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873596"></a>Using NT4 Server Manager to Add Machine Accounts to the Domain</h3></div></div><div></div></div><p>
If the machine from which you are trying to manage the domain is an
-<span class="application">MS Windows NT4 workstation</span>
+<span class="application">MS Windows NT4 workstation or MS Windows 200x / XP Professional</span>
then the tool of choice is the package called <b class="command">SRVTOOLS.EXE</b>.
-When executed in the target directory this will unpack
-<b class="command">SrvMge.exe</b> and <b class="command">UsrMgr.exe</b> (both are
-Domain Management tools for MS Windows NT4 workstation.
+When executed in the target directory this will unpack <b class="command">SrvMge.exe</b>
+and <b class="command">UsrMgr.exe</b> (both are domain management tools for MS Windows NT4 workstation).
+</p><p>
+If your workstation is a <span class="application">Microsoft Windows 9x/Me</span> family product
+ you should download the <b class="command">Nexus.exe</b> package from the Microsoft web site.
+When executed from the target directory this will unpack the same tools but for use on
+this platform.
</p><p>
-If your workstation is any other MS Windows product you should download the
-<b class="command">Nexus.exe</b> package from the Microsoft web site. When executed
-from the target directory this will unpack the same tools but for use on
-<span class="application">MS Windows 9x/Me/200x/XP</span>.
+Further information about these tools may be obtained from the following locations:
+<a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;173673" target="_top">http://support.microsoft.com/default.aspx?scid=kb;en-us;173673</a>
+<a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;172540" target="_top">http://support.microsoft.com/default.aspx?scid=kb;en-us;172540</a>
</p><p>
Launch the <b class="command">srvmgr.exe</b> (Server Manager for Domains) and follow these steps:
</p><div class="procedure"><p class="title"><b>Procedure7.1.Server Manager Account Machine Account Management</b></p><ol type="1"><li><p>
@@ -1753,25 +1666,21 @@ Launch the <b class="command">srvmgr.exe</b> (Server Manager for Domains) and fo
<span class="guilabel">Add NT Workstation of Server</span>, then
enter the machine name in the field provided, then click the
<span class="guibutton">Add</span> button.
- </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879440"></a>&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</h3></div></div><div></div></div><p>
+ </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873811"></a>&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</h3></div></div><div></div></div><p>
The second (and recommended) way of creating machine trust accounts is
simply to allow the Samba server to create them as needed when the client
is joined to the domain.
-</p><p>Since each Samba machine trust account requires a corresponding Unix account, a method
-for automatically creating the Unix account is usually supplied; this requires configuration of the
-<a href="smb.conf.5.html#ADDMACHINESCRIPT" target="_top">add machine script</a> option in
-<tt class="filename">smb.conf</tt>. This method is not required, however; corresponding Unix
+</p><p>Since each Samba machine trust account requires a corresponding UNIX account, a method
+for automatically creating the UNIX account is usually supplied; this requires configuration of the
+add machine script option in
+<tt class="filename">smb.conf</tt>. This method is not required, however; corresponding UNIX
accounts may also be created manually.
</p><p>
Below is an example for a RedHat Linux system.
-</p><pre class="programlisting">
-[global]
- # &lt;...remainder of parameters...&gt;
- add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879495"></a>Making an MS Windows Workstation or Server a Domain Member</h3></div></div><div></div></div><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td># &lt;...remainder of parameters...&gt;</td></tr><tr><td><i class="parameter"><tt>add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u </tt></i></td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2873884"></a>Making an MS Windows Workstation or Server a Domain Member</h3></div></div><div></div></div><p>
The procedure for making an MS Windows workstation of server a member of the domain varies
with the version of Windows:
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879508"></a>Windows 200x XP Professional</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873896"></a>Windows 200x XP Professional</h4></div></div><div></div></div><p>
When the user elects to make the client a domain member, Windows 200x prompts for
an account and password that has privileges to create machine accounts in the domain.
A Samba administrative account (i.e., a Samba account that has root privileges on the
@@ -1785,13 +1694,13 @@ with the version of Windows:
The name of the account that is used to create domain member machine accounts can be
anything the network administrator may choose. If it is other than <span class="emphasis"><em>root</em></span>
then this is easily mapped to root using the file pointed to be the <tt class="filename">smb.conf</tt> parameter
- <i class="parameter"><tt>username map = /etc/samba/smbusers</tt></i>.
+ <a class="indexterm" name="id2873948"></a><i class="parameter"><tt>username map</tt></i> = /etc/samba/smbusers.
</p><p>
The session key of the Samba administrative account acts as an
encryption key for setting the password of the machine trust
account. The machine trust account will be created on-the-fly, or
updated if it already exists.
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879576"></a>Windows NT4</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2873973"></a>Windows NT4</h4></div></div><div></div></div><p>
If the machine trust account was created manually, on the
Identification Changes menu enter the domain name, but do not
check the box <span class="guilabel">Create a Computer Account in the Domain</span>.
@@ -1804,8 +1713,8 @@ with the version of Windows:
Domain</span>. In this case, joining the domain proceeds as above
for Windows 2000 (i.e., you must supply a Samba administrative account when
prompted).
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879617"></a>Samba</h4></div></div><div></div></div><p>Joining a Samba client to a domain is documented in
- the <a href="#domain-member-server" title="Domain Member Server">Domain Member Server</a> section of this chapter chapter.
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2874013"></a>Samba</h4></div></div><div></div></div><p>Joining a Samba client to a domain is documented in
+ <a href="#domain-member-server" title="Domain Member Server">the domain member chapter</a>.
</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="domain-member-server"></a>Domain Member Server</h2></div></div><div></div></div><p>
This mode of server operation involves the Samba machine being made a member
of a domain security context. This means by definition that all user
@@ -1821,47 +1730,39 @@ This can be LDAP (from OpenLDAP), or Sun's iPlanet, of NetWare Directory
Server, etc.
</em></span>
</p><p>
-Please refer to the <a href="#samba-pdc" title="Chapter5.Domain Control">Domain Control chapter</a>
+Please refer to <a href="#samba-pdc" title="Chapter5.Domain Control">the chapter on setting up a PDC</a>
for more information regarding how to create a domain
machine account for a domain member server as well as for information
regarding how to enable the Samba domain member machine to join the domain and
to be fully trusted by it.
-</p><div xmlns:ns8="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879692"></a>Joining an NT4 type Domain with Samba-3</h3></div></div><div></div></div><ns8:p>
- </ns8:p><div class="table"><a name="id2879702"></a><p class="title"><b>Table7.1.Assumptions</b></p><table summary="Assumptions" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">NetBIOS name:</td><td align="left">SERV1</td></tr><tr><td align="left">Win2K/NT domain name:</td><td align="left">DOM</td></tr><tr><td align="left">Domain's PDC NetBIOS name:</td><td align="left">DOMPDC</td></tr><tr><td align="left">Domain's BDC NetBIOS names:</td><td align="left">DOMBDC1 and DOMBDC2</td></tr></tbody></table></div><ns8:p>
-</ns8:p><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2874094"></a>Joining an NT4 type Domain with Samba-3</h3></div></div><div></div></div><p>
+ </p><div class="table"><a name="id2874105"></a><p class="title"><b>Table7.1.Assumptions</b></p><table summary="Assumptions" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">NetBIOS name:</td><td align="left">SERV1</td></tr><tr><td align="left">Win2K/NT domain name:</td><td align="left">MIDEARTH</td></tr><tr><td align="left">Domain's PDC NetBIOS name:</td><td align="left">DOMPDC</td></tr><tr><td align="left">Domain's BDC NetBIOS names:</td><td align="left">DOMBDC1 and DOMBDC2</td></tr></tbody></table></div><p>
+</p><p>
First, you must edit your <tt class="filename">smb.conf</tt> file to tell Samba it should
now use domain security.
</p><p>
-Change (or add) your <a href="smb.conf.5.html#SECURITY" target="_top">
-<i class="parameter"><tt>security</tt></i></a> line in the [global] section
+ Change (or add) your
+ <a class="indexterm" name="id2874178"></a><i class="parameter"><tt>security</tt></i> line in the [global] section
of your <tt class="filename">smb.conf</tt> to read:
-</p><ns8:p>
-</ns8:p><pre class="programlisting">
-security = domain
-</pre><ns8:p>
-</ns8:p><p>
-Next change the <a href="smb.conf.5.html#WORKGROUP" target="_top"><i class="parameter"><tt>
-workgroup</tt></i></a> line in the <i class="parameter"><tt>[global]</tt></i>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security = domain</tt></i></td></tr></table><p>
+</p><p>
+Next change the <a class="indexterm" name="id2874222"></a><i class="parameter"><tt>workgroup</tt></i> line in the <i class="parameter"><tt>[global]</tt></i>
section to read:
-</p><ns8:p>
-</ns8:p><pre class="programlisting">
-workgroup = DOM
-</pre><ns8:p>
-</ns8:p><p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr></table><p>
+</p><p>
as this is the name of the domain we are joining.
</p><p>
-You must also have the parameter <a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">
-<i class="parameter"><tt>encrypt passwords</tt></i></a> set to <tt class="constant">yes
+You must also have the parameter
+<a class="indexterm" name="id2874272"></a><i class="parameter"><tt>encrypt passwords</tt></i> set to <tt class="constant">yes
</tt> in order for your users to authenticate to the NT PDC.
</p><p>
-Finally, add (or modify) a <a href="smb.conf.5.html#PASSWORDSERVER" target="_top">
-<i class="parameter"><tt>password server</tt></i></a> line in the [global]
+Finally, add (or modify) a <a class="indexterm" name="id2874295"></a><i class="parameter"><tt>password server</tt></i> line in the [global]
section to read:
-</p><ns8:p>
-</ns8:p><pre class="programlisting">
-password server = DOMPDC DOMBDC1 DOMBDC2
-</pre><ns8:p>
-</ns8:p><p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>password server = DOMPDC DOMBDC1 DOMBDC2</tt></i></td></tr></table><p>
+</p><p>
These are the primary and backup domain controllers Samba
will attempt to contact in order to authenticate users. Samba will
try to contact each of these servers in order, so you may want to
@@ -1871,21 +1772,19 @@ among domain controllers.
Alternatively, if you want smbd to automatically determine
the list of Domain controllers to use for authentication, you may
set this line to be:
-</p><ns8:p>
-</ns8:p><pre class="programlisting">
-password server = *
-</pre><ns8:p>
-</ns8:p><p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>password server = *</tt></i></td></tr></table><p>
+</p><p>
This method allows Samba to use exactly the same mechanism that NT does. This
method either broadcasts or uses a WINS database in order to
find domain controllers to authenticate against.
</p><p>
In order to actually join the domain, you must run this command:
-</p><ns8:p>
-</ns8:p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>net join -S DOMPDC -U<i class="replaceable"><tt>Administrator%password</tt></i></tt></b>
-</pre><ns8:p>
-</ns8:p><p>
+</p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>net rpc join -S DOMPDC -U<i class="replaceable"><tt>Administrator%password</tt></i></tt></b>
+</pre><p>
+</p><p>
If the <tt class="option">-S DOMPDC</tt> argument is not given then
the domain name will be obtained from <tt class="filename">smb.conf</tt>.
</p><p>
@@ -1900,8 +1799,8 @@ you will see the message:
<tt class="computeroutput">Joined domain DOM.</tt>
or <tt class="computeroutput">Joined 'SERV1' to realm 'MYREALM'</tt>
</p><p>
-in your terminal window. See the <a href="net.8.html" target="_top">
-net(8)</a> man page for more details.
+in your terminal window. See the
+<b class="command">net</b> man page for more details.
</p><p>
This process joins the server to the domain without having to create the machine
trust account on the PDC beforehand.
@@ -1919,21 +1818,25 @@ security for your system, and should be treated as carefully
as a shadow password file.
</p><p>
Finally, restart your Samba daemons and get ready for
-clients to begin using domain security!
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882368"></a>Why is this better than security = server?</h3></div></div><div></div></div><p>
+clients to begin using domain security! The way you can restart your
+samba daemons depends on your distribution, but in most cases running
+</p><pre class="screen">
+ <tt class="prompt">root# </tt>/etc/init.d/samba restart
+</pre><p>
+does the job.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2874530"></a>Why is this better than security = server?</h3></div></div><div></div></div><p>
Currently, domain security in Samba doesn't free you from
-having to create local Unix users to represent the users attaching
+having to create local UNIX users to represent the users attaching
to your server. This means that if domain user <tt class="constant">DOM\fred
</tt> attaches to your domain security Samba server, there needs
-to be a local Unix user fred to represent that user in the Unix
+to be a local UNIX user fred to represent that user in the UNIX
filesystem. This is very similar to the older Samba security mode
-<a href="smb.conf.5.html#SECURITYEQUALSSERVER" target="_top">security = server</a>,
+security = server,
where Samba would pass through the authentication request to a Windows
NT server in the same way as a Windows 95 or Windows 98 server would.
</p><p>
-Please refer to the <a href="#winbind" title="Chapter21.Integrated Logon Support using Winbind">Winbind</a> chapter
-for information on a system to automatically
-assign UNIX uids and gids to Windows NT Domain users and groups.
+ Please refer to <a href="#winbind" title="Chapter21.Winbind: Use of Domain Accounts">the chapter on winbind</a> for information on a system
+to automatically assign UNIX uids and gids to Windows NT Domain users and groups.
</p><p>
The advantage to domain-level security is that the
authentication in domain-level security is passed down the authenticated
@@ -1943,11 +1846,11 @@ exactly the same way NT servers do (i.e., you can add Samba servers into
a resource domain and have the authentication passed on from a resource
domain PDC to an account domain PDC).
</p><p>
-In addition, with <i class="parameter"><tt>security = server</tt></i> every Samba
+In addition, with <a class="indexterm" name="id2874587"></a><i class="parameter"><tt>security</tt></i> = server every Samba
daemon on a server has to keep a connection open to the
authenticating server for as long as that daemon lasts. This can drain
the connection resources on a Microsoft NT server and cause it to run
-out of available connections. With <i class="parameter"><tt>security = domain</tt></i>,
+out of available connections. With <a class="indexterm" name="id2874605"></a><i class="parameter"><tt>security</tt></i> = domain,
however, the Samba daemons connect to the PDC/BDC only for as long
as is necessary to authenticate the user, and then drop the connection,
thus conserving PDC connection resources.
@@ -1961,44 +1864,39 @@ Much of the text of this document
was first published in the Web magazine
<a href="http://www.linuxworld.com" target="_top">LinuxWorld</a> as the article <a href="http://www.linuxworld.com/linuxworld/lw-1998-10/lw-10-samba.html" target="_top">Doing
the NIS/NT Samba</a>.
-</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ads-member"></a>Samba ADS Domain Membership</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ads-member"></a>Samba ADS Domain Membership</h2></div></div><div></div></div><a class="indexterm" name="id2874673"></a><a class="indexterm" name="id2874648"></a><a class="indexterm" name="id2874692"></a><a class="indexterm" name="id2874700"></a><p>
This is a rough guide to setting up Samba 3.0 with Kerberos authentication against a
Windows2000 KDC. A familiarity with Kerberos is assumed.
-</p><div xmlns:ns9="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882506"></a>Setup your <tt class="filename">smb.conf</tt></h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2874715"></a>Setup your <tt class="filename">smb.conf</tt></h3></div></div><div></div></div><p>
You must use at least the following 3 options in <tt class="filename">smb.conf</tt>:
-</p><pre class="programlisting">
- realm = your.kerberos.REALM
- security = ADS
- encrypt passwords = yes
-</pre><ns9:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>realm = your.kerberos.REALM</tt></i></td></tr><tr><td><i class="parameter"><tt>security = ADS</tt></i></td></tr><tr><td><i class="parameter"><tt>encrypt passwords = yes</tt></i></td></tr></table><p>
In case samba can't figure out your ads server using your realm name, use the
-<i class="parameter"><tt>ads server</tt></i> option in <tt class="filename">smb.conf</tt>:
-</ns9:p><pre class="programlisting">
- ads server = your.kerberos.server
-</pre><ns9:p>
-</ns9:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2874775"></a><i class="parameter"><tt>ads server</tt></i> option in <tt class="filename">smb.conf</tt>:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>ads server = your.kerberos.server</tt></i></td></tr></table><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
You do <span class="emphasis"><em>not</em></span> need a smbpasswd file, and older clients will be authenticated as
-if <i class="parameter"><tt>security = domain</tt></i>, although it won't do any harm and
+if <a class="indexterm" name="id2874822"></a><i class="parameter"><tt>security</tt></i> = domain, although it won't do any harm and
allows you to have local users not in the domain. It is expected that the above
required options will change soon when active directory integration will get
better.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882590"></a>Setup your <tt class="filename">/etc/krb5.conf</tt></h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2874844"></a>Setup your <tt class="filename">/etc/krb5.conf</tt></h3></div></div><div></div></div><p>
The minimal configuration for <tt class="filename">krb5.conf</tt> is:
</p><pre class="programlisting">
- [libdefaults]
- default_realm = YOUR.KERBEROS.REALM
+[libdefaults]
+ default_realm = YOUR.KERBEROS.REALM
[realms]
- YOUR.KERBEROS.REALM = {
- kdc = your.kerberos.server
+ YOUR.KERBEROS.REALM = {
+ kdc = your.kerberos.server
}
-</pre><p>
+</pre><a class="indexterm" name="id2874880"></a><p>
Test your config by doing a <b class="userinput"><tt>kinit
<i class="replaceable"><tt>USERNAME</tt></i>@<i class="replaceable"><tt>REALM</tt></i></tt></b> and
making sure that your password is accepted by the Win2000 KDC.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The realm must be uppercase or you will get <span class="errorname">Cannot find KDC for
-requested realm while getting initial credentials</span> error.
+requested realm while getting initial credentials</span> error (Kerberos
+is case-sensitive!).
</p></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Time between the two servers must be synchronized. You will get a
<span class="errorname">kinit(v5): Clock skew too great while getting initial credentials</span>
@@ -2020,20 +1918,20 @@ straight to <a href="#ads-test-smbclient" title="Testing with smbclient">Test wi
<a href="#ads-create-machine-account" title="Create the computer account">Creating a computer account</a>
and <a href="#ads-test-server" title="Test your server setup">testing your servers</a>
is only needed if you want Kerberos support for <span class="application">smbd</span> and <span class="application">winbindd</span>.
-</p></div><div xmlns:ns10="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-create-machine-account"></a>Create the computer account</h3></div></div><div></div></div><ns10:p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-create-machine-account"></a>Create the computer account</h3></div></div><div></div></div><p>
As a user that has write permission on the Samba private directory
(usually root) run:
-</ns10:p><pre class="programlisting">
- <tt class="prompt">root# </tt><b class="userinput"><tt>net join -U Administrator%password</tt></b>
-</pre><ns10:p>
-</ns10:p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882787"></a>Possible errors</h4></div></div><div></div></div><ns10:p>
-</ns10:p><div class="variablelist"><dl><dt><span class="term"><span class="errorname">ADS support not compiled in</span></span></dt><dd><p>Samba must be reconfigured (remove config.cache) and recompiled
+</p><pre class="screen">
+<tt class="prompt">root# </tt> <b class="userinput"><tt>net ads join -U Administrator%password</tt></b>
+</pre><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2875062"></a>Possible errors</h4></div></div><div></div></div><p>
+</p><div class="variablelist"><dl><dt><span class="term"><span class="errorname">ADS support not compiled in</span></span></dt><dd><p>Samba must be reconfigured (remove config.cache) and recompiled
(make clean all install) after the Kerberos libs and headers are installed.
- </p></dd><dt><span class="term"><span class="errorname">net join prompts for user name</span></span></dt><dd><p>You need to login to the domain using <b class="userinput"><tt>kinit
+ </p></dd><dt><span class="term"><span class="errorname">net ads join prompts for user name</span></span></dt><dd><p>You need to login to the domain using <b class="userinput"><tt>kinit
<i class="replaceable"><tt>USERNAME</tt></i>@<i class="replaceable"><tt>REALM</tt></i></tt></b>.
<i class="replaceable"><tt>USERNAME</tt></i> must be a user who has rights to add a machine
- to the domain. </p></dd></dl></div><ns10:p>
-</ns10:p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-server"></a>Test your server setup</h3></div></div><div></div></div><p>
+ to the domain. </p></dd></dl></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-server"></a>Test your server setup</h3></div></div><div></div></div><p>
If the join was successful, you will see a new computer account with the
NetBIOS name of your Samba server in Active Directory (in the &quot;Computers&quot;
folder under Users and Computers.
@@ -2042,41 +1940,41 @@ On a Windows 2000 client try <b class="userinput"><tt>net use * \\server\share</
be logged in with Kerberos without needing to know a password. If
this fails then run <b class="userinput"><tt>klist tickets</tt></b>. Did you get a ticket for the
server? Does it have an encoding type of DES-CBC-MD5 ?
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-smbclient"></a>Testing with <span class="application">smbclient</span></h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-smbclient"></a>Testing with <span class="application">smbclient</span></h3></div></div><div></div></div><a class="indexterm" name="id2875189"></a><p>
On your Samba server try to login to a Win2000 server or your Samba
server using <span class="application">smbclient</span> and Kerberos. Use <span class="application">smbclient</span> as usual, but
-specify the <i class="parameter"><tt>-k</tt></i> option to choose Kerberos authentication.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882938"></a>Notes</h3></div></div><div></div></div><p>
+specify the <tt class="option">-k</tt> option to choose Kerberos authentication.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2875221"></a>Notes</h3></div></div><div></div></div><p>
You must change administrator password at least once after DC
install, to create the right encoding types
</p><p>
W2k doesn't seem to create the _kerberos._udp and _ldap._tcp in
-their defaults DNS setup. Maybe fixed in service packs?
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2882960"></a>Common Errors</h2></div></div><div></div></div><p>
+their defaults DNS setup. Maybe this will be fixed later in service packs.
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2875243"></a>Common Errors</h2></div></div><div></div></div><p>
In the process of adding / deleting / re-adding domain member machine accounts there are
many traps for the unwary player and there are many &#8220;<span class="quote">little</span>&#8221; things that can go wrong.
It is particularly interesting how often subscribers on the samba mailing list have concluded
after repeated failed attempts to add a machine account that it is necessary to &quot;re-install&quot;
MS Windows on t he machine. In truth, it is seldom necessary to reinstall because of this type
of problem. The real solution is often very simple, and with understanding of how MS Windows
-networking functions. easily overcome.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882986"></a>Can Not Add Machine Back to Domain</h3></div></div><div></div></div><p>
-<span class="emphasis"><em>Problem:</em></span> A Windows workstation was reinstalled. The original domain machine
+networking functions easy to overcome.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2875286"></a>Can Not Add Machine Back to Domain</h3></div></div><div></div></div><p>
+&#8220;<span class="quote"> A Windows workstation was reinstalled. The original domain machine
account was deleted and added immediately. The workstation will not join the domain if I use
the same machine name. Attempts to add the machine fail with a message that the machine already
-exists on the network - I know it doesn't. Why is this failing?
+exists on the network - I know it doesn't. Why is this failing?</span>&#8221;
</p><p>
The original name is still in the NetBIOS name cache and must expire after machine account
deletion BEFORE adding that same name as a domain member again. The best advice is to delete
the old account and then to add the machine with a new name.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883018"></a>Adding Machine to Domain Fails</h3></div></div><div></div></div><p>
-Adding a Windows 200x or XP Professional machine to the Samba PDC Domain fails with a
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2875318"></a>Adding Machine to Domain Fails</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">Adding a Windows 200x or XP Professional machine to the Samba PDC Domain fails with a
message that, <span class="errorname">The machine could not be added at this time, there is a network problem.
-Please try again later.</span> Why?
+ Please try again later.</span> Why?</span>&#8221;
</p><p>
-You should check that there is an <i class="parameter"><tt>add machine script</tt></i> in your <tt class="filename">smb.conf</tt>
+You should check that there is an <a class="indexterm" name="id2875345"></a><i class="parameter"><tt>add machine script</tt></i> in your <tt class="filename">smb.conf</tt>
file. If there is not, please add one that is appropriate for your OS platform. If a script
-has been defined you will need to debug it's operation. Increase the <i class="parameter"><tt>log level</tt></i>
+has been defined you will need to debug it's operation. Increase the <a class="indexterm" name="id2875370"></a><i class="parameter"><tt>log level</tt></i>
in the <tt class="filename">smb.conf</tt> file to level 10, then try to rejoin the domain. Check the logs to see which
operation is failing.
</p><p>
@@ -2085,21 +1983,23 @@ Possible causes include:
The script does not actually exist, or could not be located in the path specified.
</p><p>
<span class="emphasis"><em>Corrective Action:</em></span> Fix it. Make sure that when run manually
- that the script will add both the Unix system account _and_ the Samba SAM account.
+ that the script will add both the UNIX system account _and_ the Samba SAM account.
</p></li><li><p>
- The machine could not be added to the Unix system accounts file <tt class="filename">/etc/passwd</tt>
+ The machine could not be added to the UNIX system accounts file <tt class="filename">/etc/passwd</tt>
</p><p>
- <span class="emphasis"><em>Corrective Action:</em></span> Check that the machine name is a legal Unix
- system account name. ie: If the Unix utility <b class="command">useradd</b> is called
+ <span class="emphasis"><em>Corrective Action:</em></span> Check that the machine name is a legal UNIX
+ system account name. ie: If the UNIX utility <b class="command">useradd</b> is called
then make sure that the machine name you are trying to add can be added using this
tool. <b class="command">Useradd</b> on some systems will not allow any upper case characters
nor will it allow spaces in the name.
- </p></li></ul></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="StandAloneServer"></a>Chapter8.Stand-Alone Servers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2884461">Features and Benefits</a></dt><dt><a href="#id2884499">Background</a></dt><dt><a href="#id2884567">Example Configuration</a></dt><dd><dl><dt><a href="#id2883169">Reference Documentation Server</a></dt><dt><a href="#id2883216">Central Print Serving</a></dt></dl></dd><dt><a href="#id2883429">Common Errors</a></dt></dl></div><p>
+ </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2875462"></a>I can't join a Windows 2003 PDC</h3></div></div><div></div></div><p>Windows 2003 requires SMB signing. Client side SMB signing has
+ only been implemented partially in Samba 3.0. Set <a class="indexterm" name="id2875474"></a><i class="parameter"><tt>client use spnego</tt></i> = no when communicating
+ with a windows 2003 server. </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="StandAloneServer"></a>Chapter8.Stand-Alone Servers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2875549">Features and Benefits</a></dt><dt><a href="#id2875587">Background</a></dt><dt><a href="#id2875661">Example Configuration</a></dt><dd><dl><dt><a href="#RefDocServer">Reference Documentation Server</a></dt><dt><a href="#SimplePrintServer">Central Print Serving</a></dt></dl></dd><dt><a href="#id2876184">Common Errors</a></dt></dl></div><p>
Stand-Alone servers are independent of Domain Controllers on the network.
They are NOT domain members and function more like workgroup servers. In many
cases a stand-alone server is configured with a minimum of security control
with the intent that all data served will be readily accessible to all users.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884461"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2875549"></a>Features and Benefits</h2></div></div><div></div></div><p>
Stand-Alone servers can be as secure or as insecure as needs dictate. They can
have simple or complex configurations. Above all, despite the hoopla about
Domain security they remain a very common installation.
@@ -2116,7 +2016,7 @@ that are queued off a single central server. Everyone needs to be able to print
to the printers, there is no need to affect any access controls and no files will
be served from the print server. Again a share mode stand-alone server makes
a great solution.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884499"></a>Background</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2875587"></a>Background</h2></div></div><div></div></div><p>
The term <span class="emphasis"><em>stand-alone server</em></span> means that the server
will provide local authentication and access control for all resources
that are available from it. In general this means that there will be a
@@ -2138,50 +2038,37 @@ local or on a remote server, even if from the Samba protocol perspective
the Samba server is NOT a member of a domain security context.
</p><p>
Through the use of PAM (Pluggable Authentication Modules) and nsswitch
-(the name service switcher) the source of authentication may reside on
+(the name service switcher, which maintains the unix user database) the source of authentication may reside on
another server. We would be inclined to call this the authentication server.
-This means that the Samba server may use the local Unix/Linux system password database
+This means that the Samba server may use the local UNIX/Linux system password database
(<tt class="filename">/etc/passwd</tt> or <tt class="filename">/etc/shadow</tt>), may use a
local smbpasswd file, or may use
an LDAP back end, or even via PAM and Winbind another CIFS/SMB server
for authentication.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884567"></a>Example Configuration</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2875661"></a>Example Configuration</h2></div></div><div></div></div><p>
The following examples are designed to inspire simplicity. It is too easy to
attempt a high level of creativity and to introduce too much complexity in
server and network design.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883169"></a>Reference Documentation Server</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="RefDocServer"></a>Reference Documentation Server</h3></div></div><div></div></div><p>
Configuration of a read-only data server that EVERYONE can access is very simple.
Here is the smb.conf file that will do this. Assume that all the reference documents
are stored in the directory /export, that the documents are owned by a user other than
nobody. No home directories are shared, that are no users in the <tt class="filename">/etc/passwd</tt>
-Unix system database. This is a very simple system to administer.
-</p><pre class="programlisting">
- # Global parameters
- [global]
- workgroup = MYGROUP
- netbios name = REFDOCS
- security = SHARE
- passdb backend = guest
- wins server = 192.168.1.1
-
- [data]
- comment = Data
- path = /export
- guest only = Yes
-</pre><p>
+UNIX system database. This is a very simple system to administer.
+</p><div class="example"><a name="id2875707"></a><p class="title"><b>Example8.1.smb.conf for Reference Documentation Server</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>netbios name = GANDALF</tt></i></td></tr><tr><td><i class="parameter"><tt>security = SHARE</tt></i></td></tr><tr><td><i class="parameter"><tt>passdb backend = guest</tt></i></td></tr><tr><td><i class="parameter"><tt>wins server = 192.168.1.1</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[data]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Data</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /export</tt></i></td></tr><tr><td><i class="parameter"><tt>guest only = Yes</tt></i></td></tr></table></div><p>
In the above example the machine name is set to REFDOCS, the workgroup is set to the name
of the local workgroup so that the machine will appear in with systems users are familiar
with. The only password backend required is the &quot;guest&quot; backend so as to allow default
unprivileged account names to be used. Given that there is a WINS server on this network
we do use it.
-</p></div><div xmlns:ns13="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883216"></a>Central Print Serving</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="SimplePrintServer"></a>Central Print Serving</h3></div></div><div></div></div><p>
Configuration of a simple print server is very simple if you have all the right tools
on your system.
</p><div class="orderedlist"><p class="title"><b> Assumptions:</b></p><ol type="1"><li><p>
The print server must require no administration
</p></li><li><p>
The print spooling and processing system on our print server will be CUPS.
- (Please refer to the <a href="#CUPS-printing" title="Chapter19.CUPS Printing Support in Samba 3.0">CUPS Printing</a> chapter for more information).
+ (Please refer to <a href="#CUPS-printing" title="Chapter19.CUPS Printing Support in Samba 3.0">the chapter about CUPS</a> for more information).
</p></li><li><p>
All printers that the print server will service will be network
printers. They will be correctly configured, by the administrator,
@@ -2194,77 +2081,68 @@ In this example our print server will spool all incoming print jobs to
<tt class="filename">/var/spool/samba</tt> until the job is ready to be submitted by
Samba to the CUPS print processor. Since all incoming connections will be as
the anonymous (guest) user, two things will be required:
-</p><div class="itemizedlist"><p class="title"><b>Enabling Anonymous Printing</b></p><ul type="disc"><li xmlns:ns11=""><ns11:p>
- The Unix/Linux system must have a <b class="command">guest</b> account.
+</p><div class="itemizedlist"><p class="title"><b>Enabling Anonymous Printing</b></p><ul type="disc"><li><p>
+ The UNIX/Linux system must have a <b class="command">guest</b> account.
The default for this is usually the account <b class="command">nobody</b>.
To find the correct name to use for your version of Samba do the
following:
- </ns11:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">$ </tt><b class="userinput"><tt>testparm -s -v | grep &quot;guest account&quot;</tt></b>
- </pre><ns11:p>
+</pre><p>
Then make sure that this account exists in your system password
database (<tt class="filename">/etc/passwd</tt>).
- </ns11:p></li><li xmlns:ns12=""><ns12:p>
+ </p></li><li><p>
The directory into which Samba will spool the file must have write
access for the guest account. The following commands will ensure that
this directory is available for use:
- </ns12:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>mkdir /var/spool/samba</tt></b>
<tt class="prompt">root# </tt><b class="userinput"><tt>chown nobody.nobody /var/spool/samba</tt></b>
<tt class="prompt">root# </tt><b class="userinput"><tt>chmod a+rwt /var/spool/samba</tt></b>
- </pre><ns12:p>
- </ns12:p></li></ul></div><ns13:p>
-</ns13:p><pre class="programlisting">
- # Global parameters
- [global]
- workgroup = MYGROUP
- netbios name = PTRSVR1
- security = SHARE
- passdb backend = guest
- wins server = 192.168.1.1
-
- [printers]
- comment = All Printers
- path = /var/spool/samba
- printer admin = root
- guest ok = Yes
- printable = Yes
- printing = cups
- use client driver = Yes
- browseable = No
-</pre><ns13:p>
-</ns13:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883429"></a>Common Errors</h2></div></div><div></div></div><p>
+</pre><p>
+ </p></li></ul></div><p>
+ </p><div class="example"><a name="id2876026"></a><p class="title"><b>Example8.2.smb.conf for anonymous printing</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>netbios name = GANDALF</tt></i></td></tr><tr><td><i class="parameter"><tt>security = SHARE</tt></i></td></tr><tr><td><i class="parameter"><tt>passdb backend = guest</tt></i></td></tr><tr><td><i class="parameter"><tt>wins server = noldor</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = cups</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap name = cups</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = All Printers</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = root</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>use client driver = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = No</tt></i></td></tr></table></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876184"></a>Common Errors</h2></div></div><div></div></div><p>
The greatest mistake so often made is to make a network configuration too complex.
It pays to use the simplest solution that will meet the needs of the moment.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ClientConfig"></a>Chapter9.MS Windows Network Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2883797">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883797"></a>Note</h2></div></div><div></div></div><p>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ClientConfig"></a>Chapter9.MS Windows Network Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2876248">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876248"></a>Note</h2></div></div><div></div></div><p>
This chapter did not make it into this release.
It is planned for the published release of this document.
-</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="optional"></a>Advanced Configuration</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2883825"></a>Valuable Nuts and Bolts Information</h1></div></div><div></div></div><p>
+</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="optional"></a>Advanced Configuration</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2876276"></a>Valuable Nuts and Bolts Information</h1></div></div><div></div></div><p>
Samba has several features that you might want or might not want to use. The chapters in this part each cover specific Samba features.
-</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>10. <a href="#NetworkBrowsing">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="#id2884150">Features and Benefits</a></dt><dt><a href="#id2884229">What is Browsing?</a></dt><dt><a href="#id2888334">Discussion</a></dt><dd><dl><dt><a href="#id2888350">NetBIOS over TCP/IP</a></dt><dt><a href="#id2888512">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2883481">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2883615">How Browsing Functions</a></dt><dd><dl><dt><a href="#id2883741">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2885127">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2885392">Making Samba the domain master</a></dt><dt><a href="#id2885548">Note about broadcast addresses</a></dt><dt><a href="#id2885566">Multiple interfaces</a></dt><dt><a href="#id2889067">Use of the Remote Announce parameter</a></dt><dt><a href="#id2889176">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2889237">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2889395">Setting up a WINS server</a></dt><dt><a href="#id2889590">WINS Replication</a></dt><dt><a href="#id2889615">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2889699">Helpful Hints</a></dt><dd><dl><dt><a href="#id2889712">Windows Networking Protocols</a></dt><dt><a href="#id2889779">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2889917">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2889964">Browsing support in Samba</a></dt><dt><a href="#id2890071">Problem resolution</a></dt><dt><a href="#id2890150">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2890765">Common Errors</a></dt><dd><dl><dt><a href="#id2890780">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2890809">My client reports &quot;This server is not configured to list shared resources&quot;</a></dt></dl></dd></dl></dd><dt>11. <a href="#passdb">Account Information Databases</a></dt><dd><dl><dt><a href="#id2894185">Features and Benefits</a></dt><dt><a href="#id2891076">Technical Information</a></dt><dd><dl><dt><a href="#id2891140">Important Notes About Security</a></dt><dt><a href="#id2891384">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="#id2891439">Account Management Tools</a></dt><dd><dl><dt><a href="#id2891471">The smbpasswd Command</a></dt><dt><a href="#id2891736">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2891870">Password Backends</a></dt><dd><dl><dt><a href="#id2891906">Plain Text</a></dt><dt><a href="#id2891946">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2896387">tdbsam</a></dt><dt><a href="#id2896415">ldapsam</a></dt><dt><a href="#id2897903">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2898709">Common Errors</a></dt><dd><dl><dt><a href="#id2898716">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="#id2898731">Users are being added to the wrong backend database</a></dt><dt><a href="#id2898791">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="#groupmapping">Mapping MS Windows and Unix Groups</a></dt><dd><dl><dt><a href="#id2898963">Features and Benefits</a></dt><dt><a href="#id2899064">Discussion</a></dt><dd><dl><dt><a href="#id2899252">Example Configuration</a></dt></dl></dd><dt><a href="#id2899318">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2899332">Sample smb.conf add group script</a></dt><dt><a href="#id2899399">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2899473">Common Errors</a></dt><dd><dl><dt><a href="#id2899489">Adding Groups Fails</a></dt><dt><a href="#id2899549">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></dd><dt>13. <a href="#AccessControls">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="#id2902735">Features and Benefits</a></dt><dt><a href="#id2902861">File System Access Controls</a></dt><dd><dl><dt><a href="#id2902879">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="#id2899794">Managing Directories</a></dt><dt><a href="#id2899890">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2900296">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2900324">User and Group Based Controls</a></dt><dt><a href="#id2900596">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2900842">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2905426">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2905498">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2905797">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="#id2905805">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2905843">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2905922">Viewing file ownership</a></dt><dt><a href="#id2906044">Viewing File or Directory Permissions</a></dt><dt><a href="#id2906272">Modifying file or directory permissions</a></dt><dt><a href="#id2906424">Interaction with the standard Samba create mask
- parameters</a></dt><dt><a href="#id2906754">Interaction with the standard Samba file attribute
- mapping</a></dt></dl></dd><dt><a href="#id2906829">Common Errors</a></dt><dd><dl><dt><a href="#id2906843">Users can not write to a public share</a></dt><dt><a href="#id2907222">I have set force user and Samba still makes root the owner of all the files
- I touch!</a></dt></dl></dd></dl></dd><dt>14. <a href="#locking">File and Record Locking</a></dt><dd><dl><dt><a href="#id2909343">Features and Benefits</a></dt><dt><a href="#id2909398">Discussion</a></dt><dd><dl><dt><a href="#id2909529">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2907904">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2908013">Example Configuration</a></dt></dl></dd><dt><a href="#id2908272">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2910709">Workstation Service Entries</a></dt><dt><a href="#id2910736">Server Service Entries</a></dt></dl></dd><dt><a href="#id2910816">Persistent Data Corruption</a></dt><dt><a href="#id2910846">Common Errors</a></dt><dd><dl><dt><a href="#id2910919">locking.tdb error messages</a></dt></dl></dd><dt><a href="#id2910950">Additional Reading</a></dt></dl></dd><dt>15. <a href="#securing-samba">Securing Samba</a></dt><dd><dl><dt><a href="#id2912374">Introduction</a></dt><dt><a href="#id2912407">Features and Benefits</a></dt><dt><a href="#id2911067">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2911085">Using host based protection</a></dt><dt><a href="#id2911154">User based protection</a></dt><dt><a href="#id2911205">Using interface protection</a></dt><dt><a href="#id2911256">Using a firewall</a></dt><dt><a href="#id2911312">Using a IPC$ share deny</a></dt><dt><a href="#id2911377">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2911416">Upgrading Samba</a></dt><dt><a href="#id2911439">Common Errors</a></dt><dd><dl><dt><a href="#id2911458">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2911483">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="#InterdomainTrusts">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="#id2912001">Features and Benefits</a></dt><dt><a href="#id2912030">Trust Relationship Background</a></dt><dt><a href="#id2912113">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2912125">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="#id2914100">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="#id2914137">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#id2914164">Samba-3 as the Trusting Domain</a></dt><dt><a href="#id2914290">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="#id2911669">Common Errors</a></dt><dd><dl><dt><a href="#id2911684">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></dd><dt>17. <a href="#msdfs">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="#id2911782">Features and Benefits</a></dt><dt><a href="#id2913192">Common Errors</a></dt></dl></dd><dt>18. <a href="#printing">Classical Printing Support</a></dt><dd><dl><dt><a href="#id2914714">Features and Benefits</a></dt><dt><a href="#id2914778">Technical Introduction</a></dt><dd><dl><dt><a href="#id2914814">What happens if you send a Job from a Client</a></dt><dt><a href="#id2914884">Printing Related Configuration Parameters</a></dt><dt><a href="#id2917993">Parameters Recommended for Use</a></dt><dt><a href="#id2913353">Parameters for Backwards Compatibility</a></dt><dt><a href="#id2913461">Parameters no longer in use</a></dt></dl></dd><dt><a href="#id2913555">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="#id2915561">Verification of &quot;Settings in Use&quot; with testparm</a></dt><dt><a href="#id2915643">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2915950">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="#id2916042">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2916055">The [global] Section</a></dt><dt><a href="#id2925516">The [printers] Section</a></dt><dt><a href="#id2925845">Any [my_printer_name] Section</a></dt><dt><a href="#id2926066">Print Commands</a></dt><dt><a href="#id2926117">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="#id2926642">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2926920">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2927074">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2927225">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="#id2927338">Creating the [print$] Share</a></dt><dt><a href="#id2927409">Parameters in the [print$] Section</a></dt><dt><a href="#id2927630">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2927791">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2927885">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2928069">Setting Drivers for existing Printers with
-rpcclient</a></dt></dl></dd><dt><a href="#id2929667">&quot;The Proof of the Pudding lies in the Eating&quot; (Client Driver Install
-Procedure)</a></dt><dd><dl><dt><a href="#id2929688">The first Client Driver Installation</a></dt><dt><a href="#id2929885">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2930175">Further Client Driver Install Procedures</a></dt><dt><a href="#id2930270">Always make first Client Connection as root or &quot;printer admin&quot;</a></dt></dl></dd><dt><a href="#id2930412">Other Gotchas</a></dt><dd><dl><dt><a href="#id2930445">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2930879">Supporting large Numbers of Printers</a></dt><dt><a href="#id2931181">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2931425">Weird Error Message Cannot connect under a
-different Name</a></dt><dt><a href="#id2931523">Be careful when assembling Driver Files</a></dt><dt><a href="#id2931794">Samba and Printer Ports</a></dt><dt><a href="#id2931864">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2931887">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2931932">What is Imprints?</a></dt><dt><a href="#id2931973">Creating Printer Driver Packages</a></dt><dt><a href="#id2931992">The Imprints Server</a></dt><dt><a href="#id2932017">The Installation Client</a></dt></dl></dd><dt><a href="#id2932169">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2932498">The addprinter command</a></dt><dt><a href="#id2932543">Migration of &quot;Classical&quot; printing to Samba-3</a></dt><dt><a href="#id2932712">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2932726">Common Errors and Problems</a></dt><dd><dl><dt><a href="#id2932739">I give my root password but I don't get access</a></dt><dt><a href="#id2932773">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="#CUPS-printing">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="#id2939792">Introduction</a></dt><dd><dl><dt><a href="#id2939799">Features and Benefits</a></dt><dt><a href="#id2939849">Overview</a></dt></dl></dd><dt><a href="#id2939900">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2939980">Linking of smbd with libcups.so</a></dt><dt><a href="#id2932886">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2932950">More complex smb.conf Settings for
-CUPS</a></dt></dl></dd><dt><a href="#id2933049">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2933069">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt><a href="#id2933096">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
-with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2933133">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2933191">Explicitly enable &quot;raw&quot; printing for
-application/octet-stream!</a></dt><dt><a href="#id2933352">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2933445">Using CUPS/Samba in an advanced Way -- intelligent printing
-with PostScript Driver Download</a></dt><dd><dl><dt><a href="#id2933520">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="#id2933565">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2933663">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="#id2933735">PostScript and Ghostscript</a></dt><dt><a href="#id2933832">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2933927">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2946744">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2946833">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2946856">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2946994">MIME types and CUPS Filters</a></dt><dt><a href="#id2947182">MIME type Conversion Rules</a></dt><dt><a href="#id2947298">Filter Requirements</a></dt><dt><a href="#id2947467">Prefilters</a></dt><dt><a href="#id2947552">pstops</a></dt><dt><a href="#id2947655">pstoraster</a></dt><dt><a href="#id2947811">imagetops and imagetoraster</a></dt><dt><a href="#id2947866">rasterto [printers specific]</a></dt><dt><a href="#id2947951">CUPS Backends</a></dt><dt><a href="#id2948265">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2948368">The Complete Picture</a></dt><dt><a href="#id2948383">mime.convs</a></dt><dt><a href="#id2948436">&quot;Raw&quot; printing</a></dt><dt><a href="#id2948490">&quot;application/octet-stream&quot; printing</a></dt><dt><a href="#id2948706">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2948933">Difference between cupsomatic/foomatic-rip and
-native CUPS printing</a></dt><dt><a href="#id2949090">Examples for filtering Chains</a></dt><dt><a href="#id2949319">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2949444">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2949506">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2949522">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2949561">Driver Execution on the Client</a></dt><dt><a href="#id2949620">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2949683">Network Printing (Windows clients -- UNIX/Samba Print
-Servers)</a></dt><dd><dl><dt><a href="#id2949704">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2949864">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2949942">Network PostScript RIP: CUPS Filters on Server -- clients use
-PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2949997">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2950038">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2950103">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2950120">Printer Drivers running in &quot;Kernel Mode&quot; cause many
-Problems</a></dt><dt><a href="#id2950155">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2950176">CUPS: a &quot;Magical Stone&quot;?</a></dt><dt><a href="#id2950203">PostScript Drivers with no major problems -- even in Kernel
-Mode</a></dt></dl></dd><dt><a href="#id2950237"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2950256">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2950347">Prepare your smb.conf for
-cupsaddsmb</a></dt><dt><a href="#id2950394">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt><a href="#id2950591">Recognize the different Driver Files</a></dt><dt><a href="#id2950649">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2950682">ESP Print Pro Package of &quot;PostScript Driver for
-WinNT/2k/XP&quot;</a></dt><dt><a href="#id2950732">Caveats to be considered</a></dt><dt><a href="#id2950953">What are the Benefits of using the &quot;CUPS PostScript Driver for
-Windows NT/2k/XP&quot; as compared to the Adobe Driver?</a></dt><dt><a href="#id2951134">Run &quot;cupsaddsmb&quot; (quiet Mode)</a></dt><dt><a href="#id2951235">Run &quot;cupsaddsmb&quot; with verbose Output</a></dt><dt><a href="#id2951378">Understanding cupsaddsmb</a></dt><dt><a href="#id2951472">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="#id2951559">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2951594">cupsaddsmb Flowchart</a></dt><dt><a href="#id2951645">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2951760">Avoiding critical PostScript Driver Settings on the
-Client</a></dt></dl></dd><dt><a href="#id2951894">Installing PostScript Driver Files manually (using
-rpcclient)</a></dt><dd><dl><dt><a href="#id2952009">A Check of the rpcclient man Page</a></dt><dt><a href="#id2952121">Understanding the rpcclient man Page</a></dt><dt><a href="#id2952200">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2952290">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2952452">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="#id2953072">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2953174">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2953277">Trivial DataBase Files</a></dt><dt><a href="#id2953347">Binary Format</a></dt><dt><a href="#id2953409">Losing *.tdb Files</a></dt><dt><a href="#id2953468">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2953530">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2953636">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2954264">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2954722">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2954753">Setting up Quotas</a></dt><dt><a href="#id2954784">Correct and incorrect Accounting</a></dt><dt><a href="#id2954825">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2954897">The page_log File Syntax</a></dt><dt><a href="#id2954998">Possible Shortcomings</a></dt><dt><a href="#id2955070">Future Developments</a></dt><dt><a href="#id2955118">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2955133">Additional Material</a></dt><dt><a href="#id2955326">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2955372">CUPS Configuration Settings explained</a></dt><dt><a href="#id2955454">Pre-conditions</a></dt><dt><a href="#id2955515">Manual Configuration</a></dt></dl></dd><dt><a href="#id2955533">When not to use Samba to print to
-CUPS</a></dt><dt><a href="#id2955550">In Case of Trouble.....</a></dt><dd><dl><dt><a href="#id2955585">Where to find Documentation</a></dt><dt><a href="#id2955598">How to ask for Help</a></dt><dt><a href="#id2955611">Where to find Help</a></dt></dl></dd><dt><a href="#id2955625">Appendix</a></dt><dd><dl><dt><a href="#id2955632">Printing from CUPS to Windows attached
-Printers</a></dt><dt><a href="#id2955826">More CUPS filtering Chains</a></dt><dt><a href="#id2956080">Trouble Shooting Guidelines to fix typical Samba printing
-Problems</a></dt><dt><a href="#id2957186">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></dd><dt>20. <a href="#VFS">Stackable VFS modules</a></dt><dd><dl><dt><a href="#id2958605">Features and Benefits</a></dt><dt><a href="#id2958623">Discussion</a></dt><dt><a href="#id2957300">Included modules</a></dt><dd><dl><dt><a href="#id2957307">audit</a></dt><dt><a href="#id2957345">extd_audit</a></dt><dt><a href="#id2957466">fake_perms</a></dt><dt><a href="#id2957486">recycle</a></dt><dt><a href="#id2957625">netatalk</a></dt></dl></dd><dt><a href="#id2957671">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2957693">DatabaseFS</a></dt><dt><a href="#id2957748">vscan</a></dt></dl></dd><dt><a href="#id2957777">Common Errors</a></dt></dl></dd><dt>21. <a href="#winbind">Integrated Logon Support using Winbind</a></dt><dd><dl><dt><a href="#id2958272">Features and Benefits</a></dt><dt><a href="#id2958300">Introduction</a></dt><dt><a href="#id2960332">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2960392">Target Uses</a></dt></dl></dd><dt><a href="#id2960423">How Winbind Works</a></dt><dd><dl><dt><a href="#id2960451">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2960484">Microsoft Active Directory Services</a></dt><dt><a href="#id2960506">Name Service Switch</a></dt><dt><a href="#id2957818">Pluggable Authentication Modules</a></dt><dt><a href="#id2957889">User and Group ID Allocation</a></dt><dt><a href="#id2957924">Result Caching</a></dt></dl></dd><dt><a href="#id2957952">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2957980">Introduction</a></dt><dt><a href="#id2958055">Requirements</a></dt><dt><a href="#id2959330">Testing Things Out</a></dt></dl></dd><dt><a href="#id2963732">Conclusion</a></dt><dt><a href="#id2963750">Common Errors</a></dt></dl></dd><dt>22. <a href="#AdvancedNetworkManagement">Advanced Network Management</a></dt><dd><dl><dt><a href="#id2965123">Features and Benefits</a></dt><dt><a href="#id2965154">Remote Server Administration</a></dt><dt><a href="#id2963838">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2963854">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2964055">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2964250">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2964283">Common Errors</a></dt></dl></dd><dt>23. <a href="#PolicyMgmt">System and Account Policies</a></dt><dd><dl><dt><a href="#id2964680">Features and Benefits</a></dt><dt><a href="#id2964732">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2964843">Windows 9x/Me Policies</a></dt><dt><a href="#id2964391">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2964524">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2965966">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2966066">Samba Editreg Toolset</a></dt><dt><a href="#id2966087">Windows NT4/200x</a></dt><dt><a href="#id2966107">Samba PDC</a></dt></dl></dd><dt><a href="#id2966152">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2966299">Common Errors</a></dt><dd><dl><dt><a href="#id2966313">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="#ProfileMgmt">Desktop Profile Management</a></dt><dd><dl><dt><a href="#id2966416">Features and Benefits</a></dt><dt><a href="#id2966449">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2966490">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2971852">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2972789">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2972854">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2973114">Mandatory profiles</a></dt><dt><a href="#id2973172">Creating/Managing Group Profiles</a></dt><dt><a href="#id2973217">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2973237">MS Windows 9x/Me</a></dt><dt><a href="#id2973385">MS Windows NT4 Workstation</a></dt><dt><a href="#id2973939">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2974443">Common Errors</a></dt><dd><dl><dt><a href="#id2974456">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="#id2974519">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2974737">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="#pam">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="#id2976194">Features and Benefits</a></dt><dt><a href="#id2975049">Technical Discussion</a></dt><dd><dl><dt><a href="#id2975066">PAM Configuration Syntax</a></dt><dt><a href="#id2975731">Example System Configurations</a></dt><dt><a href="#id2978164">smb.conf PAM Configuration</a></dt><dt><a href="#id2978221">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2978305">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2978671">Common Errors</a></dt><dd><dl><dt><a href="#id2978685">pam_winbind problem</a></dt></dl></dd></dl></dd><dt>26. <a href="#integrate-ms-networks">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="#id2980428">Features and Benefits</a></dt><dt><a href="#id2980452">Background Information</a></dt><dt><a href="#id2980497">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="#id2980549">/etc/hosts</a></dt><dt><a href="#id2980673">/etc/resolv.conf</a></dt><dt><a href="#id2978824">/etc/host.conf</a></dt><dt><a href="#id2978866">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2978954">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2979079">The NetBIOS Name Cache</a></dt><dt><a href="#id2979124">The LMHOSTS file</a></dt><dt><a href="#id2979238">HOSTS file</a></dt><dt><a href="#id2979270">DNS Lookup</a></dt><dt><a href="#id2979295">WINS Lookup</a></dt></dl></dd><dt><a href="#id2979366">Common Errors</a></dt><dd><dl><dt><a href="#id2979382">My Boomerang Won't Come Back</a></dt><dt><a href="#id2979413">Very Slow Network Connections</a></dt><dt><a href="#id2979464">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="#unicode">Unicode/Charsets</a></dt><dd><dl><dt><a href="#id2979620">Features and Benefits</a></dt><dt><a href="#id2979662">What are charsets and unicode?</a></dt><dt><a href="#id2979730">Samba and charsets</a></dt><dt><a href="#id2979831">Conversion from old names</a></dt><dt><a href="#id2979876">Japanese charsets</a></dt></dl></dd><dt>28. <a href="#Backup">Samba Backup Techniques</a></dt><dd><dl><dt><a href="#id2982471">Note</a></dt><dt><a href="#id2982492">Features and Benefits</a></dt></dl></dd><dt>29. <a href="#SambaHA">High Availability Options</a></dt><dd><dl><dt><a href="#id2982302">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NetworkBrowsing"></a>Chapter10.Samba / MS Windows Network Browsing Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">July 5, 1998</p></div><div><p class="pubdate">Updated: April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2884150">Features and Benefits</a></dt><dt><a href="#id2884229">What is Browsing?</a></dt><dt><a href="#id2888334">Discussion</a></dt><dd><dl><dt><a href="#id2888350">NetBIOS over TCP/IP</a></dt><dt><a href="#id2888512">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2883481">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2883615">How Browsing Functions</a></dt><dd><dl><dt><a href="#id2883741">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2885127">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2885392">Making Samba the domain master</a></dt><dt><a href="#id2885548">Note about broadcast addresses</a></dt><dt><a href="#id2885566">Multiple interfaces</a></dt><dt><a href="#id2889067">Use of the Remote Announce parameter</a></dt><dt><a href="#id2889176">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2889237">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2889395">Setting up a WINS server</a></dt><dt><a href="#id2889590">WINS Replication</a></dt><dt><a href="#id2889615">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2889699">Helpful Hints</a></dt><dd><dl><dt><a href="#id2889712">Windows Networking Protocols</a></dt><dt><a href="#id2889779">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2889917">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2889964">Browsing support in Samba</a></dt><dt><a href="#id2890071">Problem resolution</a></dt><dt><a href="#id2890150">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2890765">Common Errors</a></dt><dd><dl><dt><a href="#id2890780">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2890809">My client reports &quot;This server is not configured to list shared resources&quot;</a></dt></dl></dd></dl></div><p>
+</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>10. <a href="#NetworkBrowsing">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="#id2876401">Features and Benefits</a></dt><dt><a href="#id2876490">What is Browsing?</a></dt><dt><a href="#id2876803">Discussion</a></dt><dd><dl><dt><a href="#id2876818">NetBIOS over TCP/IP</a></dt><dt><a href="#id2877054">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2877219">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2877367">How Browsing Functions</a></dt><dd><dl><dt><a href="#DMB">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2877916">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2878314">Making Samba the domain master</a></dt><dt><a href="#id2878491">Note about broadcast addresses</a></dt><dt><a href="#id2878515">Multiple interfaces</a></dt><dt><a href="#id2878551">Use of the Remote Announce parameter</a></dt><dt><a href="#id2878708">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2878786">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2878975">Setting up a WINS server</a></dt><dt><a href="#id2879231">WINS Replication</a></dt><dt><a href="#id2879256">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2879345">Helpful Hints</a></dt><dd><dl><dt><a href="#id2879358">Windows Networking Protocols</a></dt><dt><a href="#id2879437">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2879603">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2879656">Browsing support in Samba</a></dt><dt><a href="#id2879778">Problem resolution</a></dt><dt><a href="#id2879866">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2880547">Common Errors</a></dt><dd><dl><dt><a href="#id2880562">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2880591">My client reports &quot;This server is not configured to list shared resources&quot;</a></dt><dt><a href="#id2880635">I get an Unable to browse the network error</a></dt></dl></dd></dl></dd><dt>11. <a href="#passdb">Account Information Databases</a></dt><dd><dl><dt><a href="#id2880915">Features and Benefits</a></dt><dd><dl><dt><a href="#id2880929">Backwards Compatibility Backends</a></dt><dt><a href="#id2881032">New Backends</a></dt></dl></dd><dt><a href="#id2881219">Technical Information</a></dt><dd><dl><dt><a href="#id2881344">Important Notes About Security</a></dt><dt><a href="#id2881634">Mapping User Identifiers between MS Windows and UNIX</a></dt><dt><a href="#idmapbackend">Mapping Common UIDs/GIDs on Distributed Machines</a></dt></dl></dd><dt><a href="#acctmgmttools">Account Management Tools</a></dt><dd><dl><dt><a href="#id2881821">The smbpasswd Command</a></dt><dt><a href="#id2882092">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2882329">Password Backends</a></dt><dd><dl><dt><a href="#id2882371">Plain Text</a></dt><dt><a href="#id2882412">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2882525">tdbsam</a></dt><dt><a href="#id2882559">ldapsam</a></dt><dt><a href="#id2884412">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2885260">Common Errors</a></dt><dd><dl><dt><a href="#id2885267">Users can not logon</a></dt><dt><a href="#id2885312">Users being added to wrong backend database</a></dt><dt><a href="#id2885422">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="#groupmapping">Mapping MS Windows and UNIX Groups</a></dt><dd><dl><dt><a href="#id2885652">Features and Benefits</a></dt><dt><a href="#id2885887">Discussion</a></dt><dd><dl><dt><a href="#id2886122">Example Configuration</a></dt></dl></dd><dt><a href="#id2886189">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2886202">Sample smb.conf add group script</a></dt><dt><a href="#id2886288">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2886372">Common Errors</a></dt><dd><dl><dt><a href="#id2886386">Adding Groups Fails</a></dt><dt><a href="#id2886455">Adding MS Windows Groups to MS Windows Groups Fails</a></dt><dt><a href="#id2886481">Adding Domain Users to the Power Users group</a></dt></dl></dd></dl></dd><dt>13. <a href="#AccessControls">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="#id2886736">Features and Benefits</a></dt><dt><a href="#id2886866">File System Access Controls</a></dt><dd><dl><dt><a href="#id2886902">MS Windows NTFS Comparison with UNIX File Systems</a></dt><dt><a href="#id2887207">Managing Directories</a></dt><dt><a href="#id2887301">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2887513">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2887541">User and Group Based Controls</a></dt><dt><a href="#id2887963">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2888342">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2888722">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2888794">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2889094">MS Windows Access Control Lists and UNIX Interoperability</a></dt><dd><dl><dt><a href="#id2889102">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2889146">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2889226">Viewing file ownership</a></dt><dt><a href="#id2889358">Viewing File or Directory Permissions</a></dt><dt><a href="#id2889603">Modifying file or directory permissions</a></dt><dt><a href="#id2889768">Interaction with the standard Samba create mask
+ parameters</a></dt><dt><a href="#id2890164">Interaction with the standard Samba file attribute mapping</a></dt></dl></dd><dt><a href="#id2890260">Common Errors</a></dt><dd><dl><dt><a href="#id2890274">Users can not write to a public share</a></dt><dt><a href="#id2890703">I have set force user but Samba still makes root the owner of all the files I touch!</a></dt><dt><a href="#id2890755">MS Word with Samba changes owner of file</a></dt></dl></dd></dl></dd><dt>14. <a href="#locking">File and Record Locking</a></dt><dd><dl><dt><a href="#id2891003">Features and Benefits</a></dt><dt><a href="#id2891060">Discussion</a></dt><dd><dl><dt><a href="#id2891204">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2891921">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2892041">Example Configuration</a></dt></dl></dd><dt><a href="#id2892456">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2892680">Workstation Service Entries</a></dt><dt><a href="#id2892709">Server Service Entries</a></dt></dl></dd><dt><a href="#id2892788">Persistent Data Corruption</a></dt><dt><a href="#id2892817">Common Errors</a></dt><dd><dl><dt><a href="#id2892891">locking.tdb error messages</a></dt><dt><a href="#id2892930">Problems saving files in MS Office on Windows XP</a></dt><dt><a href="#id2892952">Long delays deleting files over network with XP SP1</a></dt></dl></dd><dt><a href="#id2892983">Additional Reading</a></dt></dl></dd><dt>15. <a href="#securing-samba">Securing Samba</a></dt><dd><dl><dt><a href="#id2893158">Introduction</a></dt><dt><a href="#id2893195">Features and Benefits</a></dt><dt><a href="#id2893269">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2893288">Using host based protection</a></dt><dt><a href="#id2893387">User based protection</a></dt><dt><a href="#id2893447">Using interface protection</a></dt><dt><a href="#id2893515">Using a firewall</a></dt><dt><a href="#id2893572">Using a IPC$ share deny</a></dt><dt><a href="#id2893660">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2893719">Upgrading Samba</a></dt><dt><a href="#id2893743">Common Errors</a></dt><dd><dl><dt><a href="#id2893761">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2893786">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="#InterdomainTrusts">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="#id2894077">Features and Benefits</a></dt><dt><a href="#id2894106">Trust Relationship Background</a></dt><dt><a href="#id2894193">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2894221">Creating an NT4 Domain Trust</a></dt><dt><a href="#id2894294">Completing an NT4 Domain Trust</a></dt><dt><a href="#id2894341">Inter-Domain Trust Facilities</a></dt></dl></dd><dt><a href="#id2894518">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#samba-trusted-domain">Samba as the Trusted Domain</a></dt><dt><a href="#id2894704">Samba as the Trusting Domain</a></dt></dl></dd><dt><a href="#id2894842">NT4-style Domain Trusts with Windows 2000</a></dt><dt><a href="#id2894948">Common Errors</a></dt></dl></dd><dt>17. <a href="#msdfs">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="#id2895017">Features and Benefits</a></dt><dt><a href="#id2895292">Common Errors</a></dt></dl></dd><dt>18. <a href="#printing">Classical Printing Support</a></dt><dd><dl><dt><a href="#id2895411">Features and Benefits</a></dt><dt><a href="#id2895517">Technical Introduction</a></dt><dd><dl><dt><a href="#id2895555">What happens if you send a Job from a Client</a></dt><dt><a href="#id2895627">Printing Related Configuration Parameters</a></dt><dt><a href="#id2895722">Parameters Recommended for Use</a></dt></dl></dd><dt><a href="#id2896188">A simple Configuration to Print</a></dt><dd><dl><dt><a href="#id2896354">Verification of &quot;Settings in Use&quot; with testparm</a></dt><dt><a href="#id2896481">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2896843">Extended Sample Configuration to Print</a></dt><dt><a href="#id2897173">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2897186">The [global] Section</a></dt><dt><a href="#id2897717">The [printers] Section</a></dt><dt><a href="#id2898177">Any [my_printer_name] Section</a></dt><dt><a href="#id2898498">Print Commands</a></dt><dt><a href="#id2898580">Default Print Commands for various UNIX Print Subsystems</a></dt><dt><a href="#id2899263">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2899603">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2899763">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2899925">The [printer$] Section is removed from Samba 3</a></dt><dt><a href="#id2900037">Creating the [print$] Share</a></dt><dt><a href="#id2900227">Parameters in the [print$] Section</a></dt><dt><a href="#id2900537">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2900710">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2900805">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2901002">Setting Drivers for existing Printers with
+rpcclient</a></dt></dl></dd><dt><a href="#id2902712">Client Driver Install Procedure</a></dt><dd><dl><dt><a href="#id2902731">The first Client Driver Installation</a></dt><dt><a href="#id2902934">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2903234">Further Client Driver Install Procedures</a></dt><dt><a href="#id2903328">Always make first Client Connection as root or &quot;printer admin&quot;</a></dt></dl></dd><dt><a href="#id2903500">Other Gotchas</a></dt><dd><dl><dt><a href="#id2903534">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2904001">Supporting large Numbers of Printers</a></dt><dt><a href="#id2904312">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2904606">Weird Error Message Cannot connect under a
+different Name</a></dt><dt><a href="#id2904706">Be careful when assembling Driver Files</a></dt><dt><a href="#id2905065">Samba and Printer Ports</a></dt><dt><a href="#id2905158">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2905183">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2905239">What is Imprints?</a></dt><dt><a href="#id2905280">Creating Printer Driver Packages</a></dt><dt><a href="#id2905299">The Imprints Server</a></dt><dt><a href="#id2905323">The Installation Client</a></dt></dl></dd><dt><a href="#id2905478">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2905813">The addprinter command</a></dt><dt><a href="#id2905859">Migration of &quot;Classical&quot; printing to Samba</a></dt><dt><a href="#id2906032">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2906044">Common Errors</a></dt><dd><dl><dt><a href="#id2906050">I give my root password but I don't get access</a></dt><dt><a href="#id2906085">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="#CUPS-printing">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="#id2906220">Introduction</a></dt><dd><dl><dt><a href="#id2906227">Features and Benefits</a></dt><dt><a href="#id2906281">Overview</a></dt></dl></dd><dt><a href="#id2906348">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2906443">Linking of smbd with libcups.so</a></dt><dt><a href="#id2906684">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2906866">More complex smb.conf Settings for
+CUPS</a></dt></dl></dd><dt><a href="#id2907221">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2907241">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt><a href="#id2907296">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2907365">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2907441">Explicitly enable &quot;raw&quot; printing for
+application/octet-stream!</a></dt><dt><a href="#id2907647">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2907785">Using CUPS/Samba in an advanced Way -- intelligent printing
+with PostScript Driver Download</a></dt><dd><dl><dt><a href="#gdipost">GDI on Windows -- PostScript on UNIX</a></dt><dt><a href="#id2907968">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2908120">UNIX Printfile Conversion and GUI Basics</a></dt><dt><a href="#post-and-ghost">PostScript and Ghostscript</a></dt><dt><a href="#id2908420">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2908563">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2908649">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2908755">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2908777">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2908970">MIME types and CUPS Filters</a></dt><dt><a href="#id2909178">MIME type Conversion Rules</a></dt><dt><a href="#id2909333">Filter Requirements</a></dt><dt><a href="#id2909513">Prefilters</a></dt><dt><a href="#id2909624">pstops</a></dt><dt><a href="#id2909734">pstoraster</a></dt><dt><a href="#id2909928">imagetops and imagetoraster</a></dt><dt><a href="#id2909993">rasterto [printers specific]</a></dt><dt><a href="#id2910145">CUPS Backends</a></dt><dt><a href="#id2910493">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2910637">The Complete Picture</a></dt><dt><a href="#id2910653">mime.convs</a></dt><dt><a href="#id2910716">&quot;Raw&quot; printing</a></dt><dt><a href="#id2910805">&quot;application/octet-stream&quot; printing</a></dt><dt><a href="#id2911052">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2911319">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a></dt><dt><a href="#id2911554">Examples for filtering Chains</a></dt><dt><a href="#id2911891">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2912041">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2912139">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2912150">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2912212">Driver Execution on the Client</a></dt><dt><a href="#id2912287">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2912407">Network Printing (Windows clients -- UNIX/Samba Print
+Servers)</a></dt><dd><dl><dt><a href="#id2912426">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2912640">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2912726">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2912815">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2912871">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2912948">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2912964">Printer Drivers running in &quot;Kernel Mode&quot; cause many
+Problems</a></dt><dt><a href="#id2913011">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2913032">CUPS: a &quot;Magical Stone&quot;?</a></dt><dt><a href="#id2913085">PostScript Drivers with no major problems -- even in Kernel
+Mode</a></dt></dl></dd><dt><a href="#id2913108">Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2913163">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2913282">Prepare your smb.conf for cupsaddsmb</a></dt><dt><a href="#id2913502">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt><a href="#id2913789">Recognize the different Driver Files</a></dt><dt><a href="#id2913932">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2913965">ESP Print Pro Package of &quot;PostScript Driver for
+WinNT/2k/XP&quot;</a></dt><dt><a href="#id2914035">Caveats to be considered</a></dt><dt><a href="#id2914308">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a></dt><dt><a href="#id2914525">Run &quot;cupsaddsmb&quot; (quiet Mode)</a></dt><dt><a href="#id2914652">Run &quot;cupsaddsmb&quot; with verbose Output</a></dt><dt><a href="#id2914873">Understanding cupsaddsmb</a></dt><dt><a href="#id2915022">How to recognize if cupsaddsmb completed successfully</a></dt><dt><a href="#id2915105">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2915185">cupsaddsmb Flowchart</a></dt><dt><a href="#id2915261">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2915425">Avoiding critical PostScript Driver Settings on the
+Client</a></dt></dl></dd><dt><a href="#id2915559">Installing PostScript Driver Files manually (using
+rpcclient)</a></dt><dd><dl><dt><a href="#id2915762">A Check of the rpcclient man Page</a></dt><dt><a href="#id2915876">Understanding the rpcclient man page</a></dt><dt><a href="#id2915981">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2916147">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2916361">Manual Driver Installation in 15 Steps</a></dt><dt><a href="#id2917432">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2917838">Trivial DataBase Files</a></dt><dt><a href="#id2917930">Binary Format</a></dt><dt><a href="#id2917994">Losing *.tdb Files</a></dt><dt><a href="#id2918053">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2918189">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2918345">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2919115">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2919616">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2919667">Setting up Quotas</a></dt><dt><a href="#id2919734">Correct and incorrect Accounting</a></dt><dt><a href="#id2919778">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2919874">The page_log File Syntax</a></dt><dt><a href="#id2919991">Possible Shortcomings</a></dt><dt><a href="#id2920067">Future Developments</a></dt><dt><a href="#id2920123">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2920136">Additional Material</a></dt><dt><a href="#id2920387">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2920450">CUPS Configuration Settings explained</a></dt><dt><a href="#id2920543">Pre-conditions</a></dt><dt><a href="#id2920702">Manual Configuration</a></dt></dl></dd><dt><a href="#id2920760">In Case of Trouble.....</a></dt><dt><a href="#id2920832">Printing from CUPS to Windows attached
+Printers</a></dt><dt><a href="#id2921130">More CUPS filtering Chains</a></dt><dt><a href="#id2921233">Common Errors</a></dt><dd><dl><dt><a href="#id2921241">Win9x client can't install driver</a></dt><dt><a href="#id2921263">&quot;cupsaddsmb&quot; keeps asking for root password in
+ neverending loop</a></dt><dt><a href="#id2921311">&quot;cupsaddsmb&quot; gives &quot;No PPD file for printer...&quot;
+ message while PPD file is present</a></dt><dt><a href="#id2921368">Client can't connect to Samba printer</a></dt><dt><a href="#id2921397">Can't reconnect to Samba under new account
+ from Win2K/XP</a></dt><dt><a href="#id2921624">Avoid being connected to the Samba server as the
+ &quot;wrong&quot; user</a></dt><dt><a href="#id2921678">Upgrading to CUPS drivers from Adobe drivers on
+ NT/2K/XP clients gives problems</a></dt><dt><a href="#id2921695">Can't use &quot;cupsaddsmb&quot; on Samba server which is
+ a PDC</a></dt><dt><a href="#id2921726">Deleted Win2K printer driver is still shown</a></dt><dt><a href="#id2921734">Win2K/XP &quot;Local Security
+ Policies&quot;</a></dt><dt><a href="#id2921774">WinXP clients: &quot;Administrator can not install
+ printers for all local users&quot;</a></dt><dt><a href="#id2921808">&quot;Print Change Notify&quot; functions on
+ NT-clients</a></dt><dt><a href="#id2921830">WinXP-SP1</a></dt><dt><a href="#id2921875">Print options for all users can't be set on Win2K/XP</a></dt><dt><a href="#id2922164">Most common blunders in driver
+ settings on Windows clients</a></dt><dt><a href="#id2922210">cupsaddsmb does not work
+ with newly installed printer</a></dt><dt><a href="#id2922272">Permissions on
+/var/spool/samba/ get reset after each
+reboot</a></dt><dt><a href="#id2922380">Printer named &quot;lp&quot;
+intermittently swallows jobs and spits out completely different
+ones</a></dt><dt><a href="#id2922428">Location of Adobe PostScript driver files necessary for &quot;cupsaddsmb&quot;</a></dt></dl></dd><dt><a href="#id2922484">An Overview of the CUPS Printing Processes</a></dt></dl></dd><dt>20. <a href="#VFS">Stackable VFS modules</a></dt><dd><dl><dt><a href="#id2922653">Features and Benefits</a></dt><dt><a href="#id2922671">Discussion</a></dt><dt><a href="#id2922900">Included modules</a></dt><dd><dl><dt><a href="#id2922907">audit</a></dt><dt><a href="#id2922950">extd_audit</a></dt><dt><a href="#id2923080">fake_perms</a></dt><dt><a href="#id2923099">recycle</a></dt><dt><a href="#id2923274">netatalk</a></dt></dl></dd><dt><a href="#id2923320">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2923342">DatabaseFS</a></dt><dt><a href="#id2923396">vscan</a></dt></dl></dd></dl></dd><dt>21. <a href="#winbind">Winbind: Use of Domain Accounts</a></dt><dd><dl><dt><a href="#id2923626">Features and Benefits</a></dt><dt><a href="#id2923721">Introduction</a></dt><dt><a href="#id2923799">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2923876">Target Uses</a></dt></dl></dd><dt><a href="#id2923906">How Winbind Works</a></dt><dd><dl><dt><a href="#id2923935">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2923968">Microsoft Active Directory Services</a></dt><dt><a href="#id2923991">Name Service Switch</a></dt><dt><a href="#id2924127">Pluggable Authentication Modules</a></dt><dt><a href="#id2924199">User and Group ID Allocation</a></dt><dt><a href="#id2924232">Result Caching</a></dt></dl></dd><dt><a href="#id2924260">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2924268">Introduction</a></dt><dt><a href="#id2924335">Requirements</a></dt><dt><a href="#id2924429">Testing Things Out</a></dt></dl></dd><dt><a href="#id2926036">Conclusion</a></dt><dt><a href="#id2926054">Common Errors</a></dt><dd><dl><dt><a href="#id2926108">NSCD Problem Warning</a></dt></dl></dd></dl></dd><dt>22. <a href="#AdvancedNetworkManagement">Advanced Network Management</a></dt><dd><dl><dt><a href="#id2926216">Features and Benefits</a></dt><dt><a href="#id2926247">Remote Server Administration</a></dt><dt><a href="#id2926346">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2926363">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2926605">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2926843">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2926877">Common Errors</a></dt></dl></dd><dt>23. <a href="#PolicyMgmt">System and Account Policies</a></dt><dd><dl><dt><a href="#id2926955">Features and Benefits</a></dt><dt><a href="#id2927014">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2927128">Windows 9x/Me Policies</a></dt><dt><a href="#id2927223">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2927356">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2927608">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2927714">Samba Editreg Toolset</a></dt><dt><a href="#id2927753">Windows NT4/200x</a></dt><dt><a href="#id2927776">Samba PDC</a></dt></dl></dd><dt><a href="#id2927822">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2927973">Common Errors</a></dt><dd><dl><dt><a href="#id2927986">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="#ProfileMgmt">Desktop Profile Management</a></dt><dd><dl><dt><a href="#id2928087">Features and Benefits</a></dt><dt><a href="#id2928120">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2928161">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2928652">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2929902">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2929987">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2930246">Mandatory profiles</a></dt><dt><a href="#id2930304">Creating/Managing Group Profiles</a></dt><dt><a href="#id2930349">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2930369">MS Windows 9x/Me</a></dt><dt><a href="#id2930521">MS Windows NT4 Workstation</a></dt><dt><a href="#id2931076">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2931594">Common Errors</a></dt><dd><dl><dt><a href="#id2931607">Setting up roaming profiles for just a few user's or group's?</a></dt><dt><a href="#id2931676">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2931889">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="#pam">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="#id2932170">Features and Benefits</a></dt><dt><a href="#id2932418">Technical Discussion</a></dt><dd><dl><dt><a href="#id2932435">PAM Configuration Syntax</a></dt><dt><a href="#id2933099">Example System Configurations</a></dt><dt><a href="#id2933403">smb.conf PAM Configuration</a></dt><dt><a href="#id2933482">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2933565">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2933949">Common Errors</a></dt><dd><dl><dt><a href="#id2933962">pam_winbind problem</a></dt><dt><a href="#id2934050">Winbind is not resolving users and groups</a></dt></dl></dd></dl></dd><dt>26. <a href="#integrate-ms-networks">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="#id2934288">Features and Benefits</a></dt><dt><a href="#id2934312">Background Information</a></dt><dt><a href="#id2934378">Name Resolution in a pure UNIX/Linux world</a></dt><dd><dl><dt><a href="#id2934434">/etc/hosts</a></dt><dt><a href="#id2934584">/etc/resolv.conf</a></dt><dt><a href="#id2934626">/etc/host.conf</a></dt><dt><a href="#id2934679">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2934793">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2935103">The NetBIOS Name Cache</a></dt><dt><a href="#id2935167">The LMHOSTS file</a></dt><dt><a href="#id2935329">HOSTS file</a></dt><dt><a href="#id2935361">DNS Lookup</a></dt><dt><a href="#id2935393">WINS Lookup</a></dt></dl></dd><dt><a href="#id2935511">Common Errors</a></dt><dd><dl><dt><a href="#id2935527">Pinging works only in one way</a></dt><dt><a href="#id2935562">Very Slow Network Connections</a></dt><dt><a href="#id2935612">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="#unicode">Unicode/Charsets</a></dt><dd><dl><dt><a href="#id2935816">Features and Benefits</a></dt><dt><a href="#id2935861">What are charsets and unicode?</a></dt><dt><a href="#id2935930">Samba and charsets</a></dt><dt><a href="#id2936058">Conversion from old names</a></dt><dt><a href="#id2936088">Japanese charsets</a></dt><dt><a href="#id2936225">Common errors</a></dt><dd><dl><dt><a href="#id2936232">CP850.so can't be found</a></dt></dl></dd></dl></dd><dt>28. <a href="#Backup">Samba Backup Techniques</a></dt><dd><dl><dt><a href="#id2936346">Note</a></dt><dt><a href="#id2936359">Features and Benefits</a></dt></dl></dd><dt>29. <a href="#SambaHA">High Availability Options</a></dt><dd><dl><dt><a href="#id2936430">Note</a></dt></dl></dd></dl></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NetworkBrowsing"></a>Chapter10.Samba / MS Windows Network Browsing Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">July 5, 1998</p></div><div><p class="pubdate">Updated: April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2876401">Features and Benefits</a></dt><dt><a href="#id2876490">What is Browsing?</a></dt><dt><a href="#id2876803">Discussion</a></dt><dd><dl><dt><a href="#id2876818">NetBIOS over TCP/IP</a></dt><dt><a href="#id2877054">TCP/IP - without NetBIOS</a></dt><dt><a href="#id2877219">DNS and Active Directory</a></dt></dl></dd><dt><a href="#id2877367">How Browsing Functions</a></dt><dd><dl><dt><a href="#DMB">Setting up WORKGROUP Browsing</a></dt><dt><a href="#id2877916">Setting up DOMAIN Browsing</a></dt><dt><a href="#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="#id2878314">Making Samba the domain master</a></dt><dt><a href="#id2878491">Note about broadcast addresses</a></dt><dt><a href="#id2878515">Multiple interfaces</a></dt><dt><a href="#id2878551">Use of the Remote Announce parameter</a></dt><dt><a href="#id2878708">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="#id2878786">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="#id2878975">Setting up a WINS server</a></dt><dt><a href="#id2879231">WINS Replication</a></dt><dt><a href="#id2879256">Static WINS Entries</a></dt></dl></dd><dt><a href="#id2879345">Helpful Hints</a></dt><dd><dl><dt><a href="#id2879358">Windows Networking Protocols</a></dt><dt><a href="#id2879437">Name Resolution Order</a></dt></dl></dd><dt><a href="#id2879603">Technical Overview of browsing</a></dt><dd><dl><dt><a href="#id2879656">Browsing support in Samba</a></dt><dt><a href="#id2879778">Problem resolution</a></dt><dt><a href="#id2879866">Browsing across subnets</a></dt></dl></dd><dt><a href="#id2880547">Common Errors</a></dt><dd><dl><dt><a href="#id2880562">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="#id2880591">My client reports &quot;This server is not configured to list shared resources&quot;</a></dt><dt><a href="#id2880635">I get an Unable to browse the network error</a></dt></dl></dd></dl></div><p>
This document contains detailed information as well as a fast track guide to
implementing browsing across subnets and / or across workgroups (or domains).
WINS is the best tool for resolution of NetBIOS names to IP addresses. WINS is
@@ -2275,11 +2153,11 @@ over TCP/IP. Samba-3 and later also supports this mode of operation.
When the use of NetBIOS over TCP/IP has been disabled then the primary
means for resolution of MS Windows machine names is via DNS and Active Directory.
The following information assumes that your site is running NetBIOS over TCP/IP.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884150"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876401"></a>Features and Benefits</h2></div></div><div></div></div><p>
Someone once referred to the past in terms of: <span class="emphasis"><em>They were the worst of times,
they were the best of times. The more we look back, them more we long for what was and
hope it never returns!</em></span>.
-</p><p>
+</p><a class="indexterm" name="id2876422"></a><p>
For many MS Windows network administrators, that statement sums up their feelings about
NetBIOS networking precisely. For those who mastered NetBIOS networking, its fickle
nature was just par for the course. For those who never quite managed to tame its
@@ -2304,63 +2182,55 @@ help Samba to affect stable WINS operations beyond the normal scope of MS WINS.
</p><p>
Please note that WINS is exclusively a service that applies only to those systems
that run NetBIOS over TCP/IP. MS Windows 200x / XP have the capacity to turn off
-support for NetBIOS, in which case WINS is of no relevance. Samba-3 supports this also.
+support for NetBIOS, in which case WINS is of no relevance. Samba supports this also.
</p><p>
For those networks on which NetBIOS has been disabled (ie: WINS is NOT required)
the use of DNS is necessary for host name resolution.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884229"></a>What is Browsing?</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876490"></a>What is Browsing?</h2></div></div><div></div></div><p>
To most people browsing means that they can see the MS Windows and Samba servers
in the Network Neighborhood, and when the computer icon for a particular server is
clicked, it opens up and shows the shares and printers available on the target server.
</p><p>
What seems so simple is in fact a very complex interaction of different technologies.
The technologies (or methods) employed in making all of this work includes:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>MS Windows machines register their presence to the network</td></tr><tr><td>Machines announce themselves to other machines on the network</td></tr><tr><td>One or more machine on the network collates the local announcements</td></tr><tr><td>The client machine finds the machine that has the collated list of machines</td></tr><tr><td>The client machine is able to resolve the machine names to IP addresses</td></tr><tr><td>The client machine is able to connect to a target machine</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>MS Windows machines register their presence to the network</p></li><li><p>Machines announce themselves to other machines on the network</p></li><li><p>One or more machine on the network collates the local announcements</p></li><li><p>The client machine finds the machine that has the collated list of machines</p></li><li><p>The client machine is able to resolve the machine names to IP addresses</p></li><li><p>The client machine is able to connect to a target machine</p></li></ul></div><p>
The Samba application that controls browse list management and name resolution is
called <tt class="filename">nmbd</tt>. The configuration parameters involved in nmbd's operation are:
-</p><pre class="programlisting">
-
- Browsing options:
- -----------------
- * os level
- lm announce
- lm interval
- * preferred master
- * local master
- * domain master
- browse list
- enhanced browsing
-
- Name Resolution Method:
- -----------------------
- * name resolve order
-
- WINS options:
- -------------
- dns proxy
- wins proxy
- * wins server
- * wins support
- wins hook
-</pre><p>
+</p><p>Browsing options: <a class="indexterm" name="id2876574"></a><i class="parameter"><tt>os level</tt></i>(*),
+ <a class="indexterm" name="id2876588"></a><i class="parameter"><tt>lm announce</tt></i>,
+ <a class="indexterm" name="id2876602"></a><i class="parameter"><tt>lm interval</tt></i>,
+ <a class="indexterm" name="id2876615"></a><i class="parameter"><tt>preferred master</tt></i>(*),
+ <a class="indexterm" name="id2876630"></a><i class="parameter"><tt>local master</tt></i>(*),
+ <a class="indexterm" name="id2876644"></a><i class="parameter"><tt>domain master</tt></i>(*),
+ <a class="indexterm" name="id2876658"></a><i class="parameter"><tt>browse list</tt></i>,
+ <a class="indexterm" name="id2876671"></a><i class="parameter"><tt>enhanced browsing</tt></i>.
+</p><p>Name Resolution Method:
+ <a class="indexterm" name="id2876689"></a><i class="parameter"><tt>name resolve order</tt></i>(*).
+</p><p>WINS options:
+ <a class="indexterm" name="id2876708"></a><i class="parameter"><tt>dns proxy</tt></i>,
+ <a class="indexterm" name="id2876721"></a><i class="parameter"><tt>wins proxy</tt></i>,
+ <a class="indexterm" name="id2876735"></a><i class="parameter"><tt>wins server</tt></i>(*),
+ <a class="indexterm" name="id2876749"></a><i class="parameter"><tt>wins support</tt></i>(*),
+ <a class="indexterm" name="id2876763"></a><i class="parameter"><tt>wins hook</tt></i>.
+</p><a class="indexterm" name="id2876778"></a><p>
For Samba, the WINS Server and WINS Support are mutually exclusive options. Those marked with
an '*' are the only options that commonly MAY need to be modified. Even if not one of these
parameters is set <tt class="filename">nmbd</tt> will still do it's job.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888334"></a>Discussion</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2876803"></a>Discussion</h2></div></div><div></div></div><p>
Firstly, all MS Windows networking uses SMB (Server Message Block) based messaging.
SMB messaging may be implemented with or without NetBIOS. MS Windows 200x supports
NetBIOS over TCP/IP for backwards compatibility. Microsoft is intent on phasing out NetBIOS
support.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888350"></a>NetBIOS over TCP/IP</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2876818"></a>NetBIOS over TCP/IP</h3></div></div><div></div></div><p>
Samba implements NetBIOS, as does MS Windows NT / 200x / XP, by encapsulating it over TCP/IP.
MS Windows products can do likewise. NetBIOS based networking uses broadcast messaging to
affect browse list management. When running NetBIOS over TCP/IP, this uses UDP based messaging.
UDP messages can be broadcast or unicast.
-</p><p>
+</p><a class="indexterm" name="id2876837"></a><p>
Normally, only unicast UDP messaging can be forwarded by routers. The
-<b class="command">remote announce</b> parameter to smb.conf helps to project browse announcements
+<a class="indexterm" name="id2876849"></a><i class="parameter"><tt>remote announce</tt></i> parameter to smb.conf helps to project browse announcements
to remote network segments via unicast UDP. Similarly, the
-<b class="command">remote browse sync</b> parameter of <tt class="filename">smb.conf</tt>
+<a class="indexterm" name="id2876865"></a><i class="parameter"><tt>remote browse sync</tt></i> parameter of <tt class="filename">smb.conf</tt>
implements browse list collation using unicast UDP.
</p><p>
Secondly, in those networks where Samba is the only SMB server technology,
@@ -2368,12 +2238,13 @@ wherever possible <tt class="filename">nmbd</tt> should be configured on one (1)
server. This makes it easy to manage the browsing environment. If each network
segment is configured with it's own Samba WINS server, then the only way to
get cross segment browsing to work is by using the
-<b class="command">remote announce</b> and the <b class="command">remote browse sync</b>
+<a class="indexterm" name="id2876904"></a><i class="parameter"><tt>remote announce</tt></i> and the <a class="indexterm" name="id2876918"></a><i class="parameter"><tt>remote browse sync</tt></i>
parameters to your <tt class="filename">smb.conf</tt> file.
</p><p>
+<a class="indexterm" name="id2876944"></a>
If only one WINS server is used for an entire multi-segment network then
-the use of the <b class="command">remote announce</b> and the
-<b class="command">remote browse sync</b> parameters should NOT be necessary.
+the use of the <a class="indexterm" name="id2876954"></a><i class="parameter"><tt>remote announce</tt></i> and the
+<a class="indexterm" name="id2876966"></a><i class="parameter"><tt>remote browse sync</tt></i> parameters should NOT be necessary.
</p><p>
As of Samba 3 WINS replication is being worked on. The bulk of the code has
been committed, but it still needs maturation. This is NOT a supported feature
@@ -2384,7 +2255,7 @@ Right now Samba WINS does not support MS-WINS replication. This means that
when setting up Samba as a WINS server there must only be one <tt class="filename">nmbd</tt>
configured as a WINS server on the network. Some sites have used multiple Samba WINS
servers for redundancy (one server per subnet) and then used
-<b class="command">remote browse sync</b> and <b class="command">remote announce</b>
+<a class="indexterm" name="id2877008"></a><i class="parameter"><tt>remote browse sync</tt></i> and <a class="indexterm" name="id2877022"></a><i class="parameter"><tt>remote announce</tt></i>
to affect browse list collation across all segments. Note that this means clients
will only resolve local names, and must be configured to use DNS to resolve names
on other subnets in order to resolve the IP addresses of the servers they can see
@@ -2395,7 +2266,10 @@ Lastly, take note that browse lists are a collection of unreliable broadcast
messages that are repeated at intervals of not more than 15 minutes. This means
that it will take time to establish a browse list and it can take up to 45
minutes to stabilise, particularly across network segments.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888512"></a>TCP/IP - without NetBIOS</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877054"></a>TCP/IP - without NetBIOS</h3></div></div><div></div></div><p>
+<a class="indexterm" name="id2877066"></a>
+<a class="indexterm" name="id2877074"></a>
+<a class="indexterm" name="id2877083"></a>
All TCP/IP using systems use various forms of host name resolution. The primary
methods for TCP/IP hostname resolutions involves either a static file (<tt class="filename">/etc/hosts
</tt>) or DNS (the Domain Name System). DNS is the technology that makes
@@ -2418,7 +2292,7 @@ it follows a defined path:
</p></li><li><p>
Looks up entries in LMHOSTS. It is located in
<tt class="filename">C:\WinNT\System32\Drivers\etc</tt>.
- </p></li></ol></div><p>
+ </p></li></ol></div><a class="indexterm" name="id2877180"></a><p>
Windows 200x / XP can register it's host name with a Dynamic DNS server. You can
force register with a Dynamic DNS server in Windows 200x / XP using:
<b class="command">ipconfig /registerdns</b>
@@ -2431,8 +2305,8 @@ consequently network services will be severely impaired.
The use of Dynamic DNS is highly recommended with Active Directory, in which case
the use of BIND9 is preferred for it's ability to adequately support the SRV (service)
records that are needed for Active Directory.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883481"></a>DNS and Active Directory</h3></div></div><div></div></div><p>
-Occasionally we hear from Unix network administrators who want to use a Unix based Dynamic
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877219"></a>DNS and Active Directory</h3></div></div><div></div></div><a class="indexterm" name="id2877228"></a><p>
+Occasionally we hear from UNIX network administrators who want to use a UNIX based Dynamic
DNS server in place of the Microsoft DNS server. While this might be desirable to some, the
MS Windows 200x DNS server is auto-configured to work with Active Directory. It is possible
to use BIND version 8 or 9, but it will almost certainly be necessary to create service records
@@ -2453,7 +2327,7 @@ The following are some of the default service records that Active Directory requ
</p></li><li><p>_ldap._tcp.<span class="emphasis"><em>Site</em></span>.gc.ms-dcs.<span class="emphasis"><em>DomainTree</em></span></p><p>
Used by MS Windows clients to locate site configuration dependent
Global Catalog server.
- </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883615"></a>How Browsing Functions</h2></div></div><div></div></div><p>
+ </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2877367"></a>How Browsing Functions</h2></div></div><div></div></div><p>
MS Windows machines register their NetBIOS names
(ie: the machine name for each service type in operation) on start
up. The exact method by which this name registration
@@ -2467,7 +2341,7 @@ resolution to the local subnet, unless LMHOSTS is used to list all
names and IP addresses. In such situations Samba provides a means by
which the Samba server name may be forcibly injected into the browse
list of a remote MS Windows network (using the
-<b class="command">remote announce</b> parameter).
+<a class="indexterm" name="id2877403"></a><i class="parameter"><tt>remote announce</tt></i> parameter).
</p><p>
Where a WINS server is used, the MS Windows client will use UDP
unicast to register with the WINS server. Such packets can be routed
@@ -2495,20 +2369,18 @@ will annoy users because they will have to put up with protracted
inability to use the network services.
</p><p>
Samba supports a feature that allows forced synchronisation
-of browse lists across routed networks using the <b class="command">remote
-browse sync</b> parameter in the <tt class="filename">smb.conf</tt> file.
+of browse lists across routed networks using the <a class="indexterm" name="id2877466"></a><i class="parameter"><tt>remote browse sync</tt></i> parameter in the <tt class="filename">smb.conf</tt> file.
This causes Samba to contact the local master browser on a remote network and
to request browse list synchronisation. This effectively bridges
two networks that are separated by routers. The two remote
networks may use either broadcast based name resolution or WINS
-based name resolution, but it should be noted that the <b class="command">remote
-browse sync</b> parameter provides browse list synchronisation - and
+based name resolution, but it should be noted that the <a class="indexterm" name="id2877495"></a><i class="parameter"><tt>remote browse sync</tt></i> parameter provides browse list synchronisation - and
that is distinct from name to address resolution, in other
words, for cross subnet browsing to function correctly it is
essential that a name to address resolution mechanism be provided.
This mechanism could be via DNS, <tt class="filename">/etc/hosts</tt>,
and so on.
-</p><div xmlns:ns14="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883741"></a>Setting up WORKGROUP Browsing</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="DMB"></a>Setting up WORKGROUP Browsing</h3></div></div><div></div></div><p>
To set up cross subnet browsing on a network containing machines
in up to be in a WORKGROUP, not an NT Domain you need to set up one
Samba server to be the Domain Master Browser (note that this is *NOT*
@@ -2526,22 +2398,15 @@ Samba server, and there must only be one domain master browser per
workgroup name. To set up a Samba server as a domain master browser,
set the following option in the <i class="parameter"><tt>[global]</tt></i> section
of the <tt class="filename">smb.conf</tt> file :
-</p><ns14:p>
-</ns14:p><pre class="programlisting">
- domain master = yes
-</pre><ns14:p>
-</ns14:p><p>
-The domain master browser should also preferrably be the local master
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>domain master = yes</tt></i></td></tr></table><p>
+</p><p>
+The domain master browser should also preferably be the local master
browser for its own subnet. In order to achieve this set the following
options in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt> file :
-</p><ns14:p>
-</ns14:p><pre class="programlisting">
- domain master = yes
- local master = yes
- preferred master = yes
- os level = 65
-</pre><ns14:p>
-</ns14:p><p>
+</p><p>
+ </p><div class="example"><a name="id2877630"></a><p class="title"><b>Example10.1.Domain master browser smb.conf</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 65</tt></i></td></tr></table></div><p>
+</p><p>
The domain master browser may be the same machine as the WINS
server, if you require.
</p><p>
@@ -2553,21 +2418,16 @@ tend to get rebooted more often, so it's not such a good idea
to use these). To make a Samba server a local master browser
set the following options in the <i class="parameter"><tt>[global]</tt></i> section of the
<tt class="filename">smb.conf</tt> file :
-</p><ns14:p>
-</ns14:p><pre class="programlisting">
- domain master = no
- local master = yes
- preferred master = yes
- os level = 65
-</pre><ns14:p>
-</ns14:p><p>
+</p><p>
+</p><div class="example"><a name="id2877721"></a><p class="title"><b>Example10.2.Local master browser smb.conf</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 65</tt></i></td></tr></table></div><p>
+</p><p>
Do not do this for more than one Samba server on each subnet,
or they will war with each other over which is to be the local
master browser.
</p><p>
-The <i class="parameter"><tt>local master</tt></i> parameter allows Samba to act as a
-local master browser. The <i class="parameter"><tt>preferred master</tt></i> causes nmbd
-to force a browser election on startup and the <i class="parameter"><tt>os level</tt></i>
+The <a class="indexterm" name="id2877787"></a><i class="parameter"><tt>local master</tt></i> parameter allows Samba to act as a
+local master browser. The <a class="indexterm" name="id2877804"></a><i class="parameter"><tt>preferred master</tt></i> causes nmbd
+to force a browser election on startup and the <a class="indexterm" name="id2877819"></a><i class="parameter"><tt>os level</tt></i>
parameter sets Samba high enough so that it should win any browser elections.
</p><p>
If you have an NT machine on the subnet that you wish to
@@ -2575,14 +2435,9 @@ be the local master browser then you can disable Samba from
becoming a local master browser by setting the following
options in the <i class="parameter"><tt>[global]</tt></i> section of the
<tt class="filename">smb.conf</tt> file :
-</p><ns14:p>
-</ns14:p><pre class="programlisting">
- domain master = no
- local master = no
- preferred master = no
- os level = 0
-</pre><ns14:p>
-</ns14:p></div><div xmlns:ns15="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885127"></a>Setting up DOMAIN Browsing</h3></div></div><div></div></div><p>
+</p><p>
+</p><div class="example"><a name="id2877859"></a><p class="title"><b>Example10.3.smb.conf for not being a master browser</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 0</tt></i></td></tr></table></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2877916"></a>Setting up DOMAIN Browsing</h3></div></div><div></div></div><p>
If you are adding Samba servers to a Windows NT Domain then
you must not set up a Samba server as a domain master browser.
By default, a Windows NT Primary Domain Controller for a domain
@@ -2594,18 +2449,13 @@ with WINS instead of the PDC.
For subnets other than the one containing the Windows NT PDC
you may set up Samba servers as local master browsers as
described. To make a Samba server a local master browser set
-the following options in the <b class="command">[global]</b> section
+the following options in the <i class="parameter"><tt>[global]</tt></i> section
of the <tt class="filename">smb.conf</tt> file :
-</p><ns15:p>
-</ns15:p><pre class="programlisting">
- domain master = no
- local master = yes
- preferred master = yes
- os level = 65
-</pre><ns15:p>
-</ns15:p><p>
+</p><p>
+ </p><div class="example"><a name="id2877965"></a><p class="title"><b>Example10.4.Local master browser smb.conf</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 65</tt></i></td></tr></table></div><p>
+</p><p>
If you wish to have a Samba server fight the election with machines
-on the same subnet you may set the <i class="parameter"><tt>os level</tt></i> parameter
+on the same subnet you may set the <a class="indexterm" name="id2878026"></a><i class="parameter"><tt>os level</tt></i> parameter
to lower levels. By doing this you can tune the order of machines that
will become local master browsers if they are running. For
more details on this see the section <a href="#browse-force-master" title="Forcing Samba to be the master">
@@ -2618,39 +2468,34 @@ you can disable Samba from taking part in browser elections and
ever becoming a local master browser by setting following options
in the <i class="parameter"><tt>[global]</tt></i> section of the <tt class="filename">smb.conf</tt>
file :
-</p><ns15:p>
-</ns15:p><pre class="programlisting">
- domain master = no
- local master = no
- preferred master = no
- os level = 0
-</pre><ns15:p>
-</ns15:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="browse-force-master"></a>Forcing Samba to be the master</h3></div></div><div></div></div><p>
-Who becomes the <i class="parameter"><tt>master browser</tt></i> is determined by an election
+</p><p>
+</p><div class="example"><a name="id2878082"></a><p class="title"><b>Example10.5.smb.conf for not being a master browser</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 0</tt></i></td></tr></table></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="browse-force-master"></a>Forcing Samba to be the master</h3></div></div><div></div></div><p>
+Who becomes the master browser is determined by an election
process using broadcasts. Each election packet contains a number of parameters
which determine what precedence (bias) a host should have in the
election. By default Samba uses a very low precedence and thus loses
elections to just about anyone else.
</p><p>
-If you want Samba to win elections then just set the <i class="parameter"><tt>os level</tt></i> global
+If you want Samba to win elections then just set the <a class="indexterm" name="id2878164"></a><i class="parameter"><tt>os level</tt></i> global
option in <tt class="filename">smb.conf</tt> to a higher number. It defaults to 0. Using 34
would make it win all elections over every other system (except other
samba systems!)
</p><p>
-A <i class="parameter"><tt>os level</tt></i> of 2 would make it beat WfWg and Win95, but not MS Windows
+A <a class="indexterm" name="id2878192"></a><i class="parameter"><tt>os level</tt></i> of 2 would make it beat WfWg and Win95, but not MS Windows
NT/2K Server. A MS Windows NT/2K Server domain controller uses level 32.
</p><p>The maximum os level is 255</p><p>
If you want Samba to force an election on startup, then set the
-<i class="parameter"><tt>preferred master</tt></i> global option in <tt class="filename">smb.conf</tt> to <tt class="constant">yes</tt>. Samba will
+<a class="indexterm" name="id2878218"></a><i class="parameter"><tt>preferred master</tt></i> global option in <tt class="filename">smb.conf</tt> to <tt class="constant">yes</tt>. Samba will
then have a slight advantage over other potential master browsers
that are not preferred master browsers. Use this parameter with
care, as if you have two hosts (whether they are Windows 95 or NT or
-Samba) on the same local subnet both set with <i class="parameter"><tt>preferred master</tt></i> to
+Samba) on the same local subnet both set with <a class="indexterm" name="id2878248"></a><i class="parameter"><tt>preferred master</tt></i> to
<tt class="constant">yes</tt>, then periodically and continually they will force an election
in order to become the local master browser.
</p><p>
-If you want Samba to be a <i class="parameter"><tt>domain master browser</tt></i>, then it is
-recommended that you also set <i class="parameter"><tt>preferred master</tt></i> to <tt class="constant">yes</tt>, because
+ If you want Samba to be a <span class="emphasis"><em>domain master browser</em></span>, then it is
+recommended that you also set <a class="indexterm" name="id2878277"></a><i class="parameter"><tt>preferred master</tt></i> to <tt class="constant">yes</tt>, because
Samba will not become a domain master browser for the whole of your
LAN or WAN if it is not also a local master browser on its own
broadcast isolated subnet.
@@ -2662,10 +2507,10 @@ attempt to become the domain master browser every 5 minutes. They
will find that another Samba server is already the domain master
browser and will fail. This provides automatic redundancy, should
the current domain master browser fail.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885392"></a>Making Samba the domain master</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878314"></a>Making Samba the domain master</h3></div></div><div></div></div><p>
The domain master is responsible for collating the browse lists of
multiple subnets so that browsing can occur between subnets. You can
-make Samba act as the domain master by setting <i class="parameter"><tt>domain master = yes</tt></i>
+make Samba act as the domain master by setting <a class="indexterm" name="id2878327"></a><i class="parameter"><tt>domain master</tt></i> = yes
in <tt class="filename">smb.conf</tt>. By default it will not be a domain master.
</p><p>
Note that you should <span class="emphasis"><em>not</em></span> set Samba to be the domain master for a
@@ -2677,8 +2522,8 @@ master browsers on other subnets and then contact them to synchronise
browse lists.
</p><p>
If you want Samba to be the domain master then I suggest you also set
-the <i class="parameter"><tt>os level</tt></i> high enough to make sure it wins elections, and set
-<i class="parameter"><tt>preferred master</tt></i> to <tt class="constant">yes</tt>, to get Samba to force an election on
+the <a class="indexterm" name="id2878374"></a><i class="parameter"><tt>os level</tt></i> high enough to make sure it wins elections, and set
+<a class="indexterm" name="id2878389"></a><i class="parameter"><tt>preferred master</tt></i> to <tt class="constant">yes</tt>, to get Samba to force an election on
startup.
</p><p>
Note that all your servers (including Samba) and clients should be
@@ -2704,31 +2549,31 @@ If, however, both Samba and your clients are using a WINS server, then:
resolve the NetBIOS name of that host. as long as that host has
registered its NetBIOS name with the same WINS server, the user will
be able to see that host.
- </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885548"></a>Note about broadcast addresses</h3></div></div><div></div></div><p>
+ </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878491"></a>Note about broadcast addresses</h3></div></div><div></div></div><p>
If your network uses a &quot;0&quot; based broadcast address (for example if it
ends in a 0) then you will strike problems. Windows for Workgroups
does not seem to support a 0's broadcast and you will probably find
that browsing and name lookups won't work.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885566"></a>Multiple interfaces</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878515"></a>Multiple interfaces</h3></div></div><div></div></div><p>
Samba now supports machines with multiple network interfaces. If you
-have multiple interfaces then you will need to use the <b class="command">interfaces</b>
+have multiple interfaces then you will need to use the <a class="indexterm" name="id2878527"></a><i class="parameter"><tt>interfaces</tt></i>
option in <tt class="filename">smb.conf</tt> to configure them.
-</p></div><div xmlns:ns16="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889067"></a>Use of the Remote Announce parameter</h3></div></div><div></div></div><ns16:p>
-The <i class="parameter"><tt>remote announce</tt></i> parameter of
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878551"></a>Use of the Remote Announce parameter</h3></div></div><div></div></div><p>
+The <a class="indexterm" name="id2878560"></a><i class="parameter"><tt>remote announce</tt></i> parameter of
<tt class="filename">smb.conf</tt> can be used to forcibly ensure
that all the NetBIOS names on a network get announced to a remote network.
-The syntax of the <i class="parameter"><tt>remote announce</tt></i> parameter is:
-</ns16:p><pre class="programlisting">
- remote announce = a.b.c.d [e.f.g.h] ...
-</pre><ns16:p>
+The syntax of the <a class="indexterm" name="id2878585"></a><i class="parameter"><tt>remote announce</tt></i> parameter is:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>remote announce = a.b.c.d [e.f.g.h] ...</tt></i></td></tr></table><p>
<span class="emphasis"><em>or</em></span>
-</ns16:p><pre class="programlisting">
- remote announce = a.b.c.d/WORKGROUP [e.f.g.h/WORKGROUP] ...
-</pre><ns16:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>remote announce = a.b.c.d/WORKGROUP [e.f.g.h/WORKGROUP] ...</tt></i></td></tr></table><p>
where:
-</ns16:p><div class="variablelist"><dl><dt><span class="term"><i class="replaceable"><tt>a.b.c.d</tt></i> and
-<i class="replaceable"><tt>e.f.g.h</tt></i></span></dt><dd><p>is either the LMB (Local Master Browser) IP address
+</p><div class="variablelist"><dl><dt><span class="term"><i class="replaceable"><tt>a.b.c.d</tt></i> and
+<i class="replaceable"><tt>e.f.g.h</tt></i></span></dt><dd><p>
+ <a class="indexterm" name="id2878655"></a>
+<a class="indexterm" name="id2878666"></a>
+
+ is either the LMB (Local Master Browser) IP address
or the broadcast address of the remote network.
ie: the LMB is at 192.168.1.10, or the address
could be given as 192.168.1.255 where the netmask
@@ -2743,23 +2588,21 @@ workgroup name of the remote network then our
NetBIOS machine names will end up looking like
they belong to that workgroup, this may cause
name resolution problems and should be avoided.
-</p></dd></dl></div><ns16:p>
-</ns16:p></div><div xmlns:ns17="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889176"></a>Use of the Remote Browse Sync parameter</h3></div></div><div></div></div><p>
-The <i class="parameter"><tt>remote browse sync</tt></i> parameter of
+</p></dd></dl></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878708"></a>Use of the Remote Browse Sync parameter</h3></div></div><div></div></div><p>
+The <a class="indexterm" name="id2878719"></a><i class="parameter"><tt>remote browse sync</tt></i> parameter of
<tt class="filename">smb.conf</tt> is used to announce to
another LMB that it must synchronise its NetBIOS name list with our
Samba LMB. It works ONLY if the Samba server that has this option is
simultaneously the LMB on its network segment.
-</p><ns17:p>
-The syntax of the <i class="parameter"><tt>remote browse sync</tt></i> parameter is:
+</p><p>
+The syntax of the <a class="indexterm" name="id2878748"></a><i class="parameter"><tt>remote browse sync</tt></i> parameter is:
-</ns17:p><pre class="programlisting">
-remote browse sync = <i class="replaceable"><tt>a.b.c.d</tt></i>
-</pre><ns17:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>remote browse sync = a.b.c.d</tt></i></td></tr></table><p>
where <i class="replaceable"><tt>a.b.c.d</tt></i> is either the IP address of the
remote LMB or else is the network broadcast address of the remote segment.
-</ns17:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889237"></a>WINS - The Windows Internetworking Name Server</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2878786"></a>WINS - The Windows Internetworking Name Server</h2></div></div><div></div></div><p>
Use of WINS (either Samba WINS <span class="emphasis"><em>or</em></span> MS Windows NT Server WINS) is highly
recommended. Every NetBIOS machine registers its name together with a
name_type value for each of several types of service it has available.
@@ -2800,36 +2643,34 @@ lookup attempts by other clients and will therefore cause workstation access
errors.
</p><p>
To configure Samba as a WINS server just add
-<i class="parameter"><tt>wins support = yes</tt></i> to the <tt class="filename">smb.conf</tt>
-file [globals] section.
+<a class="indexterm" name="id2878876"></a><i class="parameter"><tt>wins support</tt></i> = yes to the <tt class="filename">smb.conf</tt>
+file [global] section.
</p><p>
To configure Samba to register with a WINS server just add
-<i class="parameter"><tt>wins server = a.b.c.d</tt></i> to your <tt class="filename">smb.conf</tt> file <i class="parameter"><tt>[globals]</tt></i> section.
+<a class="indexterm" name="id2878904"></a><i class="parameter"><tt>wins server</tt></i> = a.b.c.d to your <tt class="filename">smb.conf</tt> file <i class="parameter"><tt>[global]</tt></i> section.
</p><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>
-Never use both <i class="parameter"><tt>wins support = yes</tt></i> together
-with <i class="parameter"><tt>wins server = a.b.c.d</tt></i>
+Never use both <a class="indexterm" name="id2878936"></a><i class="parameter"><tt>wins support</tt></i> = yes together
+with <a class="indexterm" name="id2878952"></a><i class="parameter"><tt>wins server</tt></i> = a.b.c.d
particularly not using it's own IP address.
Specifying both will cause <span class="application">nmbd</span> to refuse to start!
-</p></div><div xmlns:ns18="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889395"></a>Setting up a WINS server</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2878975"></a>Setting up a WINS server</h3></div></div><div></div></div><p>
Either a Samba machine or a Windows NT Server machine may be set up
as a WINS server. To set a Samba machine to be a WINS server you must
add the following option to the <tt class="filename">smb.conf</tt> file on the selected machine :
-in the <i class="parameter"><tt>[globals]</tt></i> section add the line
-</p><ns18:p>
-</ns18:p><pre class="programlisting">
- wins support = yes
-</pre><ns18:p>
-</ns18:p><p>
+in the <i class="parameter"><tt>[global]</tt></i> section add the line
+</p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>wins support = yes</tt></i></td></tr></table><p>
+</p><p>
Versions of Samba prior to 1.9.17 had this parameter default to
yes. If you have any older versions of Samba on your network it is
strongly suggested you upgrade to a recent version, or at the very
least set the parameter to 'no' on all these machines.
</p><p>
-Machines with <i class="parameter"><tt>wins support = yes</tt></i> will keep a list of
+Machines with <a class="indexterm" name="id2879034"></a><i class="parameter"><tt>wins support</tt></i> = yes will keep a list of
all NetBIOS names registered with them, acting as a DNS for NetBIOS names.
</p><p>
You should set up only ONE WINS server. Do NOT set the
-<i class="parameter"><tt>wins support = yes</tt></i> option on more than one Samba
+<a class="indexterm" name="id2879056"></a><i class="parameter"><tt>wins support</tt></i> = yes option on more than one Samba
server.
</p><p>
To set up a Windows NT Server as a WINS server you need to set up
@@ -2841,7 +2682,7 @@ participate in these replications. It is possible in the future that
a Samba-&gt;Samba WINS replication protocol may be defined, in which
case more than one Samba machine could be set up as a WINS server
but currently only one Samba server should have the
-<i class="parameter"><tt>wins support = yes</tt></i> parameter set.
+<a class="indexterm" name="id2879091"></a><i class="parameter"><tt>wins support</tt></i> = yes parameter set.
</p><p>
After the WINS server has been configured you must ensure that all
machines participating on the network are configured with the address
@@ -2851,18 +2692,16 @@ the <span class="guilabel">Control Panel-&gt;Network-&gt;Protocols-&gt;TCP-&gt;W
in Windows 95 or Windows NT. To tell a Samba server the IP address
of the WINS server add the following line to the <i class="parameter"><tt>[global]</tt></i> section of
all <tt class="filename">smb.conf</tt> files :
-</p><ns18:p>
-</ns18:p><pre class="programlisting">
- wins server = &lt;name or IP address&gt;
-</pre><ns18:p>
-</ns18:p><p>
+</p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>wins server = &lt;name or IP address&gt;</tt></i></td></tr></table><p>
+</p><p>
where &lt;name or IP address&gt; is either the DNS name of the WINS server
machine or its IP address.
</p><p>
Note that this line MUST NOT BE SET in the <tt class="filename">smb.conf</tt> file of the Samba
server acting as the WINS server itself. If you set both the
-<i class="parameter"><tt>wins support = yes</tt></i> option and the
-<i class="parameter"><tt>wins server = &lt;name&gt;</tt></i> option then
+<a class="indexterm" name="id2879189"></a><i class="parameter"><tt>wins support</tt></i> = yes option and the
+<a class="indexterm" name="id2879204"></a><i class="parameter"><tt>wins server</tt></i> = &lt;name&gt; option then
nmbd will fail to start.
</p><p>
There are two possible scenarios for setting up cross subnet browsing.
@@ -2870,45 +2709,45 @@ The first details setting up cross subnet browsing on a network containing
Windows 95, Samba and Windows NT machines that are not configured as
part of a Windows NT Domain. The second details setting up cross subnet
browsing on networks that contain NT Domains.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889590"></a>WINS Replication</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879231"></a>WINS Replication</h3></div></div><div></div></div><p>
Samba-3 permits WINS replication through the use of the <tt class="filename">wrepld</tt> utility.
This tool is not currently capable of being used as it is still in active development.
As soon as this tool becomes moderately functional we will prepare man pages and enhance this
section of the documentation to provide usage and technical details.
-</p></div><div xmlns:ns19="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889615"></a>Static WINS Entries</h3></div></div><div></div></div><p>
-Adding static entries to your Samba-3 WINS server is actually fairly easy.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879256"></a>Static WINS Entries</h3></div></div><div></div></div><p>
+Adding static entries to your Samba WINS server is actually fairly easy.
All you have to do is add a line to <tt class="filename">wins.dat</tt>, typically
located in <tt class="filename">/usr/local/samba/var/locks</tt>.
-</p><ns19:p>
+</p><p>
Entries in <tt class="filename">wins.dat</tt> take the form of
-</ns19:p><pre class="programlisting">
+</p><pre class="programlisting">
&quot;NAME#TYPE&quot; TTL ADDRESS+ FLAGS
-</pre><ns19:p>
+</pre><p>
where NAME is the NetBIOS name, TYPE is the NetBIOS type, TTL is the
time-to-live as an absolute time in seconds, ADDRESS+ is one or more
addresses corresponding to the registration and FLAGS are the NetBIOS
flags for the registration.
-</ns19:p><ns19:p>
+</p><p>
A typical dynamic entry looks like:
-</ns19:p><pre class="programlisting">
+</p><pre class="programlisting">
&quot;MADMAN#03&quot; 1055298378 192.168.1.2 66R
-</pre><ns19:p>
+</pre><p>
To make it static, all that has to be done is set the TTL to 0:
-</ns19:p><pre class="programlisting">
+</p><pre class="programlisting">
&quot;MADMAN#03&quot; 0 192.168.1.2 66R
-</pre><ns19:p>
-</ns19:p><p>
+</pre><p>
+</p><p>
Though this method works with early Samba-3 versions, there's a
possibility that it may change in future versions if WINS replication
is added.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889699"></a>Helpful Hints</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2879345"></a>Helpful Hints</h2></div></div><div></div></div><p>
The following hints should be carefully considered as they are stumbling points
for many new network administrators.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889712"></a>Windows Networking Protocols</h3></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879358"></a>Windows Networking Protocols</h3></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
Do NOT use more than one (1) protocol on MS Windows machines
</p></div><p>
A very common cause of browsing problems results from installing more than
@@ -2938,34 +2777,27 @@ differently from MS Windows NT4. Generally, where a server does NOT support
the newer or extended protocol, these will fall back to the NT4 protocols.
</em></span></p><p>
The safest rule of all to follow it this - USE ONLY ONE PROTOCOL!
-</p></div><div xmlns:ns20="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889779"></a>Name Resolution Order</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879437"></a>Name Resolution Order</h3></div></div><div></div></div><p>
Resolution of NetBIOS names to IP addresses can take place using a number
of methods. The only ones that can provide NetBIOS name_type information
are:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>WINS: the best tool!</td></tr><tr><td>LMHOSTS: is static and hard to maintain.</td></tr><tr><td>Broadcast: uses UDP and can not resolve names across remote segments.</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>WINS: the best tool!</p></li><li><p>LMHOSTS: is static and hard to maintain.</p></li><li><p>Broadcast: uses UDP and can not resolve names across remote segments.</p></li></ul></div><p>
Alternative means of name resolution includes:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td><tt class="filename">/etc/hosts</tt>: is static, hard to maintain, and lacks name_type info</td></tr><tr><td>DNS: is a good choice but lacks essential name_type info.</td></tr></table><ns20:p>
+</p><div class="itemizedlist"><ul type="disc"><li><p><tt class="filename">/etc/hosts</tt>: is static, hard to maintain, and lacks name_type info</p></li><li><p>DNS: is a good choice but lacks essential name_type info.</p></li></ul></div><p>
Many sites want to restrict DNS lookups and want to avoid broadcast name
-resolution traffic. The <i class="parameter"><tt>name resolve order</tt></i> parameter is
-of great help here. The syntax of the <i class="parameter"><tt>name resolve order</tt></i>
-parameter is:
-</ns20:p><pre class="programlisting">
-name resolve order = wins lmhosts bcast host
-</pre><ns20:p>
+resolution traffic. The <i class="parameter"><tt>name resolve order</tt></i> parameter is of great help here.
+The syntax of the <i class="parameter"><tt>name resolve order</tt></i> parameter is:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>name resolve order = wins lmhosts bcast host</tt></i></td></tr></table><p>
<span class="emphasis"><em>or</em></span>
-</ns20:p><pre class="programlisting">
-name resolve order = wins lmhosts (eliminates bcast and host)
-</pre><ns20:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>name resolve order = wins lmhosts (eliminates bcast and host)</tt></i></td></tr></table><p>
The default is:
-</ns20:p><pre class="programlisting">
-name resolve order = host lmhost wins bcast
-</pre><ns20:p>
-where &quot;host&quot; refers the the native methods used by the Unix system
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>name resolve order = host lmhost wins bcast</tt></i></td></tr></table><p>
+where &quot;host&quot; refers to the native methods used by the UNIX system
to implement the gethostbyname() function call. This is normally
controlled by <tt class="filename">/etc/host.conf</tt>, <tt class="filename">/etc/nsswitch.conf</tt> and <tt class="filename">/etc/resolv.conf</tt>.
-</ns20:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889917"></a>Technical Overview of browsing</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2879603"></a>Technical Overview of browsing</h2></div></div><div></div></div><p>
SMB networking provides a mechanism by which clients can access a list
-of machines in a network, a so-called <i class="parameter"><tt>browse list</tt></i>. This list
+of machines in a network, a so-called <a class="indexterm" name="id2879615"></a><i class="parameter"><tt>browse list</tt></i>. This list
contains machines that are ready to offer file and/or print services
to other machines within the network. Thus it does not include
machines which aren't currently able to do server tasks. The browse
@@ -2983,7 +2815,7 @@ Where NetBIOS over TCP/IP is enabled use of a WINS server is highly
recommended to aid the resolution of NetBIOS (SMB) names to IP addresses.
WINS allows remote segment clients to obtain NetBIOS name_type information
that can NOT be provided by any other means of name resolution.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889964"></a>Browsing support in Samba</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879656"></a>Browsing support in Samba</h3></div></div><div></div></div><p>
Samba facilitates browsing. The browsing is supported by <span class="application">nmbd</span>
and is also controlled by options in the <tt class="filename">smb.conf</tt> file.
Samba can act as a local browse master for a workgroup and the ability
@@ -3010,15 +2842,15 @@ WINS server capabilities. In a Samba-only environment, it is
recommended that you use one and only one Samba server as your WINS server.
</p></div><p>
To get browsing to work you need to run nmbd as usual, but will need
-to use the <i class="parameter"><tt>workgroup</tt></i> option in <tt class="filename">smb.conf</tt>
+to use the <a class="indexterm" name="id2879724"></a><i class="parameter"><tt>workgroup</tt></i> option in <tt class="filename">smb.conf</tt>
to control what workgroup Samba becomes a part of.
</p><p>
Samba also has a useful option for a Samba server to offer itself for
browsing on another subnet. It is recommended that this option is only
used for 'unusual' purposes: announcements over the internet, for
-example. See <i class="parameter"><tt>remote announce</tt></i> in the
+example. See <a class="indexterm" name="id2879754"></a><i class="parameter"><tt>remote announce</tt></i> in the
<tt class="filename">smb.conf</tt> man page.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890071"></a>Problem resolution</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879778"></a>Problem resolution</h3></div></div><div></div></div><p>
If something doesn't work then hopefully the log.nmbd file will help
you track down the problem. Try a debug level of 2 or 3 for finding
problems. Also note that the current browse list usually gets stored
@@ -3029,7 +2861,7 @@ type the server name as <tt class="filename">\\SERVER</tt> in filemanager then
hit enter and filemanager should display the list of available shares.
</p><p>
Some people find browsing fails because they don't have the global
-<i class="parameter"><tt>guest account</tt></i> set to a valid account. Remember that the
+<a class="indexterm" name="id2879819"></a><i class="parameter"><tt>guest account</tt></i> set to a valid account. Remember that the
IPC$ connection that lists the shares is done as guest, and thus you must
have a valid guest account.
</p><p><span class="emphasis"><em>
@@ -3043,7 +2875,7 @@ server resources.
The other big problem people have is that their broadcast address,
netmask or IP address is wrong (specified with the &quot;interfaces&quot; option
in <tt class="filename">smb.conf</tt>)
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890150"></a>Browsing across subnets</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2879866"></a>Browsing across subnets</h3></div></div><div></div></div><p>
Since the release of Samba 1.9.17(alpha1), Samba has supported the
replication of browse lists across subnet boundaries. This section
describes how to set this feature up in different settings.
@@ -3064,32 +2896,14 @@ be they Windows 95, Windows NT, or Samba servers must have the IP address
of a WINS server given to them by a DHCP server, or by manual configuration
(for Win95 and WinNT, this is in the TCP/IP Properties, under Network
settings) for Samba this is in the <tt class="filename">smb.conf</tt> file.
-</p><div xmlns:ns21="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2890199"></a>How does cross subnet browsing work ?</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2879915"></a>How does cross subnet browsing work ?</h4></div></div><div></div></div><p>
Cross subnet browsing is a complicated dance, containing multiple
moving parts. It has taken Microsoft several years to get the code
that achieves this correct, and Samba lags behind in some areas.
Samba is capable of cross subnet browsing when configured correctly.
</p><p>
-Consider a network set up as follows :
-</p><ns21:p>
-
-</ns21:p><pre class="programlisting">
- (DMB)
- N1_A N1_B N1_C N1_D N1_E
- | | | | |
- -------------------------------------------------------
- | subnet 1 |
- +---+ +---+
- |R1 | Router 1 Router 2 |R2 |
- +---+ +---+
- | |
- | subnet 2 subnet 3 |
- -------------------------- ------------------------------------
- | | | | | | | |
- N2_A N2_B N2_C N2_D N3_A N3_B N3_C N3_D
- (WINS)
-</pre><ns21:p>
-</ns21:p><p>
+ Consider a network set up as <a href="#browsing1" title="Figure10.1.Cross subnet browsing example">in the diagram below</a>.
+</p><div class="figure"><a name="browsing1"></a><p class="title"><b>Figure10.1.Cross subnet browsing example</b></p><div class="mediaobject"><img src="projdoc/imagefiles/browsing1.png" width="270" alt="Cross subnet browsing example"></div></div><p>
Consisting of 3 subnets (1, 2, 3) connected by two routers
(R1, R2) - these do not pass broadcasts. Subnet 1 has 5 machines
on it, subnet 2 has 4 machines, subnet 3 has 4 machines. Assume
@@ -3130,9 +2944,9 @@ called 'non-authoritative'.
At this point the browse lists look as follows (these are
the machines you would see in your network neighborhood if
you looked in it on a particular network right now).
-</p><ns21:p>
-</ns21:p><div class="table"><a name="id2890314"></a><p class="title"><b>Table10.1.Browse subnet example 1</b></p><table summary="Browse subnet example 1" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><ns21:p>
-</ns21:p><p>
+</p><p>
+</p><div class="table"><a name="id2880049"></a><p class="title"><b>Table10.1.Browse subnet example 1</b></p><table summary="Browse subnet example 1" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><p>
+</p><p>
Note that at this point all the subnets are separate, no
machine is seen across any of the subnets.
</p><p>
@@ -3152,26 +2966,31 @@ names it knows about. Once the domain master browser receives
the MasterAnnouncement packet it schedules a synchronization
request to the sender of that packet. After both synchronizations
are done the browse lists look like :
-</p><ns21:p>
-</ns21:p><div class="table"><a name="id2890424"></a><p class="title"><b>Table10.2.Browse subnet example 2</b></p><table summary="Browse subnet example 2" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><ns21:p>
+</p><p>
+</p><div class="table"><a name="id2880162"></a><p class="title"><b>Table10.2.Browse subnet example 2</b></p><table summary="Browse subnet example 2" border="1"><colgroup><col align="left"><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="justify">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="justify">N1_A, N1_B, N1_C, N1_D, N1_E,
+N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="justify">N2_A, N2_B, N2_C, N2_D, N1_A(*),
+N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="justify">N3_A, N3_B, N3_C, N3_D</td></tr></tbody></table></div><p>
Servers with a (*) after them are non-authoritative names.
-</ns21:p><p>
+</p><p>
At this point users looking in their network neighborhood on
subnets 1 or 2 will see all the servers on both, users on
subnet 3 will still only see the servers on their own subnet.
</p><p>
-The same sequence of events that occured for N2_B now occurs
+The same sequence of events that occurred for N2_B now occurs
for the local master browser on subnet 3 (N3_D). When it
synchronizes browse lists with the domain master browser (N1_A)
it gets both the server entries on subnet 1, and those on
subnet 2. After N3_D has synchronized with N1_C and vica-versa
the browse lists look like.
-</p><ns21:p>
-</ns21:p><div class="table"><a name="id2890523"></a><p class="title"><b>Table10.3.Browse subnet example 3</b></p><table summary="Browse subnet example 3" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><ns21:p>
+</p><p>
+</p><div class="table"><a name="id2880274"></a><p class="title"><b>Table10.3.Browse subnet example 3</b></p><table summary="Browse subnet example 3" border="1"><colgroup><col align="left"><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="justify">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="justify">N1_A, N1_B, N1_C, N1_D, N1_E,
+N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="justify">N2_A, N2_B, N2_C, N2_D, N1_A(*),
+N1_B(*), N1_C(*), N1_D(*), N1_E(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="justify">N3_A, N3_B, N3_C, N3_D, N1_A(*),
+N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><p>
Servers with a (*) after them are non-authoritative names.
-</ns21:p><p>
+</p><p>
At this point users looking in their network neighborhood on
subnets 1 or 3 will see all the servers on all subnets, users on
subnet 2 will still only see the servers on subnets 1 and 2, but not 3.
@@ -3180,11 +2999,17 @@ Finally, the local master browser for subnet 2 (N2_B) will sync again
with the domain master browser (N1_C) and will receive the missing
server entries. Finally - and as a steady state (if no machines
are removed or shut off) the browse lists will look like :
-</p><ns21:p>
-</ns21:p><div class="table"><a name="id2890624"></a><p class="title"><b>Table10.4.Browse subnet example 4</b></p><table summary="Browse subnet example 4" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="left">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="left">N1_A, N1_B, N1_C, N1_D, N1_E, N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="left">N2_A, N2_B, N2_C, N2_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*), N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="left">N3_A, N3_B, N3_C, N3_D, N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*), N2_C(*), N2_D(*)</td></tr></tbody></table></div><ns21:p>
+</p><p>
+</p><div class="table"><a name="id2880391"></a><p class="title"><b>Table10.4.Browse subnet example 4</b></p><table summary="Browse subnet example 4" border="1"><colgroup><col align="left"><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Subnet</th><th align="left">Browse Master</th><th align="justify">List</th></tr></thead><tbody><tr><td align="left">Subnet1</td><td align="left">N1_C</td><td align="justify">N1_A, N1_B, N1_C, N1_D, N1_E,
+N2_A(*), N2_B(*), N2_C(*), N2_D(*), N3_A(*), N3_B(*),
+N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet2</td><td align="left">N2_B</td><td align="justify">N2_A, N2_B, N2_C, N2_D, N1_A(*),
+N1_B(*), N1_C(*), N1_D(*), N1_E(*), N3_A(*), N3_B(*),
+N3_C(*), N3_D(*)</td></tr><tr><td align="left">Subnet3</td><td align="left">N3_D</td><td align="justify">N3_A, N3_B, N3_C, N3_D, N1_A(*),
+N1_B(*), N1_C(*), N1_D(*), N1_E(*), N2_A(*), N2_B(*),
+N2_C(*), N2_D(*)</td></tr></tbody></table></div><p>
Servers with a (*) after them are non-authoritative names.
-</ns21:p><p>
+</p><p>
Synchronizations between the domain master browser and local
master browsers will continue to occur, but this should be a
steady state situation.
@@ -3202,11 +3027,11 @@ If either router R1 or R2 fails the following will occur:
be able to access servers on its local subnet, by using subnet-isolated
broadcast NetBIOS name resolution. The effects are similar to that of
losing access to a DNS server.
- </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890765"></a>Common Errors</h2></div></div><div></div></div><p>
+ </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2880547"></a>Common Errors</h2></div></div><div></div></div><p>
Many questions are asked on the mailing lists regarding browsing. The majority of browsing
problems originate out of incorrect configuration of NetBIOS name resolution. Some are of
particular note.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890780"></a>How can one flush the Samba NetBIOS name cache without restarting Samba?</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880562"></a>How can one flush the Samba NetBIOS name cache without restarting Samba?</h3></div></div><div></div></div><p>
Samba's nmbd process controls all browse list handling. Under normal circumstances it is
safe to restart nmbd. This will effectively flush the Samba NetBIOS name cache and cause it
to be rebuilt. Note that this does NOT make certain that a rogue machine name will not re-appear
@@ -3216,33 +3041,37 @@ want to clear a rogue machine from the list then every machine on the network wi
shut down and restarted at after all machines are down. Failing a complete restart, the only
other thing you can do is wait until the entry times out and is then flushed from the list.
This may take a long time on some networks (months).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890809"></a>My client reports &quot;This server is not configured to list shared resources&quot;</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880591"></a>My client reports &quot;This server is not configured to list shared resources&quot;</h3></div></div><div></div></div><p>
Your guest account is probably invalid for some reason. Samba uses the
guest account for browsing in smbd. Check that your guest account is
valid.
-</p><p>See also <i class="parameter"><tt>guest account</tt></i> in the <tt class="filename">smb.conf</tt> man page.</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="passdb"></a>Chapter11.Account Information Databases</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Olivier (lem)</span> <span class="surname">Lemaire</span></h3><div class="affiliation"><span class="orgname">IDEALX<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:olem@IDEALX.org">olem@IDEALX.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 24, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2894185">Features and Benefits</a></dt><dt><a href="#id2891076">Technical Information</a></dt><dd><dl><dt><a href="#id2891140">Important Notes About Security</a></dt><dt><a href="#id2891384">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="#id2891439">Account Management Tools</a></dt><dd><dl><dt><a href="#id2891471">The smbpasswd Command</a></dt><dt><a href="#id2891736">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2891870">Password Backends</a></dt><dd><dl><dt><a href="#id2891906">Plain Text</a></dt><dt><a href="#id2891946">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2896387">tdbsam</a></dt><dt><a href="#id2896415">ldapsam</a></dt><dt><a href="#id2897903">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2898709">Common Errors</a></dt><dd><dl><dt><a href="#id2898716">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="#id2898731">Users are being added to the wrong backend database</a></dt><dt><a href="#id2898791">auth methods does not work</a></dt></dl></dd></dl></div><p>
-Samba-3 implements a new capability to work concurrently with multiple account backends.
-The possible new combinations of password backends allows Samba-3 a degree of flexibility
+</p><p>See also <a class="indexterm" name="id2880612"></a><i class="parameter"><tt>guest account</tt></i> in the <tt class="filename">smb.conf</tt> man page.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880635"></a>I get an <span class="errorname">Unable to browse the network</span> error</h3></div></div><div></div></div><p>This error can have multiple causes:</p><div class="itemizedlist"><ul type="disc"><li><p>There is no local master browser. Configure <span class="application">nmbd</span>
+ or any other machine to serve as local master browser.</p></li><li><p>You can not log onto the machine that is the local master
+ browser. Can you logon to it as guest user? </p></li><li><p>There is no IP connectivity to the local master browser.
+ Can you reach it by broadcast?</p></li></ul></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="passdb"></a>Chapter11.Account Information Databases</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Olivier (lem)</span> <span class="surname">Lemaire</span></h3><div class="affiliation"><span class="orgname">IDEALX<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:olem@IDEALX.org">olem@IDEALX.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 24, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2880915">Features and Benefits</a></dt><dd><dl><dt><a href="#id2880929">Backwards Compatibility Backends</a></dt><dt><a href="#id2881032">New Backends</a></dt></dl></dd><dt><a href="#id2881219">Technical Information</a></dt><dd><dl><dt><a href="#id2881344">Important Notes About Security</a></dt><dt><a href="#id2881634">Mapping User Identifiers between MS Windows and UNIX</a></dt><dt><a href="#idmapbackend">Mapping Common UIDs/GIDs on Distributed Machines</a></dt></dl></dd><dt><a href="#acctmgmttools">Account Management Tools</a></dt><dd><dl><dt><a href="#id2881821">The smbpasswd Command</a></dt><dt><a href="#id2882092">The pdbedit Command</a></dt></dl></dd><dt><a href="#id2882329">Password Backends</a></dt><dd><dl><dt><a href="#id2882371">Plain Text</a></dt><dt><a href="#id2882412">smbpasswd - Encrypted Password Database</a></dt><dt><a href="#id2882525">tdbsam</a></dt><dt><a href="#id2882559">ldapsam</a></dt><dt><a href="#id2884412">MySQL</a></dt><dt><a href="#XMLpassdb">XML</a></dt></dl></dd><dt><a href="#id2885260">Common Errors</a></dt><dd><dl><dt><a href="#id2885267">Users can not logon</a></dt><dt><a href="#id2885312">Users being added to wrong backend database</a></dt><dt><a href="#id2885422">auth methods does not work</a></dt></dl></dd></dl></div><p>
+Samba 3 implements a new capability to work concurrently with multiple account backends.
+The possible new combinations of password backends allows Samba 3 a degree of flexibility
and scalability that previously could be achieved only with MS Windows Active Directory.
This chapter describes the new functionality and how to get the most out of it.
</p><p>
In the course of development of Samba-3, a number of requests were received to provide the
ability to migrate MS Windows NT4 SAM accounts to Samba-3 without the need to provide
-matching Unix/Linux accounts. We called this the <span class="emphasis"><em>Non Unix Accounts (NUA)</em></span>
+matching UNIX/Linux accounts. We called this the <span class="emphasis"><em>Non UNIX Accounts (NUA)</em></span>
capability. The intent was that an administrator could decide to use the <span class="emphasis"><em>tdbsam</em></span>
-backend and by simply specifying <span class="emphasis"><em>&quot;passdb backend = tdbsam_nua, guest&quot;</em></span>
-this would allow Samba-3 to implement a solution that did not use Unix accounts per se. Late
+backend and by simply specifying <a class="indexterm" name="id2880884"></a><i class="parameter"><tt>passdb backend</tt></i> = tdbsam_nua
+this would allow Samba-3 to implement a solution that did not use UNIX accounts per se. Late
in the development cycle, the team doing this work hit upon some obstacles that prevents this
solution from being used. Given the delays with Samba-3 release a decision was made to NOT
deliver this functionality until a better method of recognising NT Group SIDs from NT User
SIDs could be found. This feature may thus return during the life cycle for the Samba-3 series.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
-Samba-3.0.0 does NOT support Non-Unix Account (NUA) operation.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894185"></a>Features and Benefits</h2></div></div><div></div></div><p>
+Samba-3 does NOT support Non-UNIX Account (NUA) operation for user accounts.
+Samba-3 does support NUA operation for machine accounts.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2880915"></a>Features and Benefits</h2></div></div><div></div></div><p>
Samba-3 provides for complete backwards compatibility with Samba-2.2.x functionality
as follows:
-</p><div class="variablelist"><p class="title"><b>Backwards Compatibility Backends</b></p><dl><dt><span class="term">Plain Text:</span></dt><dd><p>
- This option uses nothing but the Unix/Linux <tt class="filename">/etc/passwd</tt>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2880929"></a>Backwards Compatibility Backends</h3></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Plain Text:</span></dt><dd><p>
+ This option uses nothing but the UNIX/Linux <tt class="filename">/etc/passwd</tt>
style back end. On systems that have PAM (Pluggable Authentication Modules)
support all PAM modules are supported. The behaviour is just as it was with
Samba-2.2.x, and the protocol limitations imposed by MS Windows clients
@@ -3264,13 +3093,9 @@ as follows:
This option is provided primarily as a migration tool, although there is
no reason to force migration at this time. Note that this tool will eventually
be deprecated.
- </p></dd></dl></div><p>
+ </p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881032"></a>New Backends</h3></div></div><div></div></div><p>
Samba-3 introduces the following new password backend capabilities:
-</p><div class="variablelist"><p class="title"><b>New Backends</b></p><dl><dt><span class="term">guest:</span></dt><dd><p>
- This is <span class="emphasis"><em>always</em></span> required as the last backend specified.
- It provides the ability to handle guest account requirements for access to
- resources like <i class="parameter"><tt>IPC$</tt></i> which is used for browsing.
- </p></dd><dt><span class="term">tdbsam:</span></dt><dd><p>
+</p><div class="variablelist"><dl><dt><span class="term">tdbsam:</span></dt><dd><p>
This backend provides a rich database backend for local servers. This
backend is NOT suitable for multiple domain controller (ie: PDC + one
or more BDC) installations.
@@ -3312,10 +3137,7 @@ Samba-3 introduces the following new password backend capabilities:
The xmlsam option can be useful for account migration between database
backends or backups. Use of this tool will allow the data to be edited before migration
into another backend format.
- </p></dd><dt><span class="term">nisplussam:</span></dt><dd><p>
- The NIS+ based passdb backend. Takes name NIS domain as an
- optional argument. Only works with Sun NIS+ servers.
- </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891076"></a>Technical Information</h2></div></div><div></div></div><p>
+ </p></dd></dl></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881219"></a>Technical Information</h2></div></div><div></div></div><p>
Old windows clients send plain text passwords over the wire. Samba can check these
passwords by crypting them and comparing them to the hash stored in the unix user database.
</p><p>
@@ -3330,10 +3152,10 @@ Samba-3 introduces the following new password backend capabilities:
In addition to differently encrypted passwords, windows also stores certain data for each
user that is not stored in a unix user database. e.g: workstations the user may logon from,
the location where the users' profile is stored, and so on. Samba retrieves and stores this
- information using a <i class="parameter"><tt>passdb backend</tt></i>. Commonly available backends are LDAP, plain text
+ information using a <a class="indexterm" name="id2881258"></a><i class="parameter"><tt>passdb backend</tt></i>. Commonly available backends are LDAP, plain text
file, MySQL and nisplus. For more information, see the man page for <tt class="filename">smb.conf</tt> regarding the
- <i class="parameter"><tt>passdb backend</tt></i> parameter.
- </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891140"></a>Important Notes About Security</h3></div></div><div></div></div><p>
+ <a class="indexterm" name="id2881282"></a><i class="parameter"><tt>passdb backend</tt></i> parameter.
+ </p><div class="figure"><a name="idmap-diag"></a><p class="title"><b>Figure11.1.IDMAP</b></p><div class="mediaobject"><img src="projdoc/imagefiles/idmap.png" width="270" alt="IDMAP"></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881344"></a>Important Notes About Security</h3></div></div><div></div></div><p>
The unix and SMB password encryption techniques seem similar on the surface. This
similarity is, however, only skin deep. The unix scheme typically sends clear text
passwords over the network when logging in. This is bad. The SMB encryption scheme
@@ -3357,12 +3179,12 @@ Samba-3 introduces the following new password backend capabilities:
</p><p>
The following versions of MS Windows do not support full domain security protocols,
although they may log onto a domain environment:
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td>MS DOS Network client 3.0 with the basic network redirector installed</td></tr><tr><td>Windows 95 with the network redirector update installed</td></tr><tr><td>Windows 98 [se]</td></tr><tr><td>Windows Me</td></tr></table><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>MS DOS Network client 3.0 with the basic network redirector installed</p></li><li><p>Windows 95 with the network redirector update installed</p></li><li><p>Windows 98 [se]</p></li><li><p>Windows Me</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
MS Windows XP Home does not have facilities to become a domain member and it can
not participate in domain logons.
</p></div><p>
The following versions of MS Windows fully support domain security protocols.
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td>Windows NT 3.5x</td></tr><tr><td>Windows NT 4.0</td></tr><tr><td>Windows 2000 Professional</td></tr><tr><td>Windows 200x Server/Advanced Server</td></tr><tr><td>Windows XP Professional</td></tr></table><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>Windows NT 3.5x</p></li><li><p>Windows NT 4.0</p></li><li><p>Windows 2000 Professional</p></li><li><p>Windows 200x Server/Advanced Server</p></li><li><p>Windows XP Professional</p></li></ul></div><p>
All current release of Microsoft SMB/CIFS clients support authentication via the
SMB Challenge/Response mechanism described here. Enabling clear text authentication
does not disable the ability of the client to participate in encrypted authentication.
@@ -3375,7 +3197,7 @@ Samba-3 introduces the following new password backend capabilities:
(broken) only the cached (encrypted) password will be sent to the resource server to
affect a auto-reconnect. If the resource server does not support encrypted passwords the
auto-reconnect will fail. <span class="emphasis"><em>USE OF ENCRYPTED PASSWORDS IS STRONGLY ADVISED.</em></span>
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891293"></a>Advantages of Encrypted Passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not passed across
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881537"></a>Advantages of Encrypted Passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not passed across
the network. Someone using a network sniffer cannot just
record passwords going to the SMB server.</p></li><li><p>Plain text passwords are not stored anywhere in
memory or on disk.</p></li><li><p>WinNT doesn't like talking to a server
@@ -3386,32 +3208,44 @@ Samba-3 introduces the following new password backend capabilities:
only things you can do to stop this is to use SMB encryption.
</p></li><li><p>Encrypted password support allows automatic share
(resource) reconnects.</p></li><li><p>Encrypted passwords are essential for PDC/BDC
- operation.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891347"></a>Advantages of non-encrypted passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not kept
+ operation.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2881599"></a>Advantages of non-encrypted passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not kept
on disk, and are NOT cached in memory. </p></li><li><p>Uses same password file as other unix
services such as login and ftp</p></li><li><p>Use of other services (such as telnet and ftp) which
send plain text passwords over the net, so sending them for SMB
- isn't such a big deal.</p></li></ul></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891384"></a>Mapping User Identifiers between MS Windows and Unix</h3></div></div><div></div></div><p>
- Every operation in Unix/Linux requires a user identifier (UID), just as in
+ isn't such a big deal.</p></li></ul></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881634"></a>Mapping User Identifiers between MS Windows and UNIX</h3></div></div><div></div></div><p>
+ Every operation in UNIX/Linux requires a user identifier (UID), just as in
MS Windows NT4 / 200x this requires a Security Identifier (SID). Samba provides
- two means for mapping an MS Windows user to a Unix/Linux UID.
+ two means for mapping an MS Windows user to a UNIX/Linux UID.
</p><p>
Firstly, all Samba SAM (Security Account Manager database) accounts require
- a Unix/Linux UID that the account will map to. As users are added to the account
- information database, Samba-3 will call the <i class="parameter"><tt>add user script</tt></i>
- interface to add the account to the Samba host OS. In essence, all accounts in
+ a UNIX/Linux UID that the account will map to. As users are added to the account
+ information database, Samba will call the <a class="indexterm" name="id2881658"></a><i class="parameter"><tt>add user script</tt></i>
+ interface to add the account to the Samba host OS. In essence all accounts in
the local SAM require a local user account.
</p><p>
- The second way to affect Windows SID to Unix UID mapping is via the
+ The second way to affect Windows SID to UNIX UID mapping is via the
<span class="emphasis"><em>idmap uid, idmap gid</em></span> parameters in <tt class="filename">smb.conf</tt>.
Please refer to the man page for information about these parameters.
These parameters are essential when mapping users from a remote SAM server.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891439"></a>Account Management Tools</h2></div></div><div></div></div><p>
-Samba-3 provides two (2) tools for management of User and machine accounts. These tools are
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="idmapbackend"></a>Mapping Common UIDs/GIDs on Distributed Machines</h3></div></div><div></div></div><p>
+ Samba-3 has a special facility that makes it possible to maintain identical UIDs and GIDs
+ on all servers in a distributed network. A distributed network is one where there exists
+ a PDC, one or more BDCs and/or one or more domain member servers. Why is this important?
+ This is important if files are being shared over more than one protocol (eg: NFS) and where
+ users are copying files across UNIX/Linux systems using tools such as <b class="command">rsync</b>.
+ </p><p>
+ The special facility is enabled using a parameter called <i class="parameter"><tt>idmap backend</tt></i>.
+ The default setting for this parameter is an empty string. Administrators should NOT set this
+ parameter except when an LDAP based passdb backend is in use. An example of use is:
+ </p><p>
+</p><div class="example"><a name="idmapbackendexample"></a><p class="title"><b>Example11.1.</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>idmap backend = ldapsam://ldap-server.quenya.org:636</tt></i></td></tr></table></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="acctmgmttools"></a>Account Management Tools</h2></div></div><div></div></div><p>
+Samba provides two (2) tools for management of User and machine accounts. These tools are
called <b class="command">smbpasswd</b> and <b class="command">pdbedit</b>. A third tool is under
development but is NOT expected to ship in time for Samba-3.0.0. The new tool will be a TCL/TK
GUI tool that looks much like the MS Windows NT4 Domain User Manager - hopefully this will
be announced in time for the Samba-3.0.1 release.
-</p><div xmlns:ns22="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891471"></a>The <span class="emphasis"><em>smbpasswd</em></span> Command</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881821"></a>The <span class="emphasis"><em>smbpasswd</em></span> Command</h3></div></div><div></div></div><p>
The smbpasswd utility is a utility similar to the <b class="command">passwd</b>
or <b class="command">yppasswd</b> programs. It maintains the two 32 byte password
fields in the passdb backend.
@@ -3425,20 +3259,20 @@ be announced in time for the Samba-3.0.1 release.
if changing an NT Domain user's password).
</p><p>
<b class="command">smbpasswd</b> can be used to:
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td><span class="emphasis"><em>add</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>delete</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>enable</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>disable</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>set to NULL</em></span> user passwords</td></tr><tr><td><span class="emphasis"><em>manage interdomain trust accounts</em></span></td></tr></table><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p><span class="emphasis"><em>add</em></span> user or machine accounts</p></li><li><p><span class="emphasis"><em>delete</em></span> user or machine accounts</p></li><li><p><span class="emphasis"><em>enable</em></span> user or machine accounts</p></li><li><p><span class="emphasis"><em>disable</em></span> user or machine accounts</p></li><li><p><span class="emphasis"><em>set to NULL</em></span> user passwords</p></li><li><p><span class="emphasis"><em>manage interdomain trust accounts</em></span></p></li></ul></div><p>
To run smbpasswd as a normal user just type:
- </p><ns22:p>
- </ns22:p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>smbpasswd</tt></b>
- <tt class="prompt">Old SMB password: </tt><b class="userinput"><tt><i class="replaceable"><tt>secret</tt></i></tt></b>
- </pre><ns22:p>
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>smbpasswd</tt></b>
+<tt class="prompt">Old SMB password: </tt><b class="userinput"><tt><i class="replaceable"><tt>secret</tt></i></tt></b>
+</pre><p>
For <i class="replaceable"><tt>secret</tt></i> type old value here - or hit return if
there was no old password
- </ns22:p><pre class="screen">
- <tt class="prompt">New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b>
- <tt class="prompt">Repeat New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b>
- </pre><ns22:p>
- </ns22:p><p>
+</p><pre class="screen">
+<tt class="prompt">New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b>
+<tt class="prompt">Repeat New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b>
+</pre><p>
+ </p><p>
If the old value does not match the current value stored for that user, or the two
new values do not match each other, then the password will not be changed.
</p><p>
@@ -3457,10 +3291,10 @@ be announced in time for the Samba-3.0.1 release.
</p><p>
For more details on using <b class="command">smbpasswd</b> refer to the man page (the
definitive reference).
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891736"></a>The <span class="emphasis"><em>pdbedit</em></span> Command</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882092"></a>The <span class="emphasis"><em>pdbedit</em></span> Command</h3></div></div><div></div></div><p>
<b class="command">pdbedit</b> is a tool that can be used only by root. It is used to
manage the passdb backend. <b class="command">pdbedit</b> can be used to:
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td>add, remove or modify user accounts</td></tr><tr><td>listing user accounts</td></tr><tr><td>migrate user accounts</td></tr></table><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>add, remove or modify user accounts</p></li><li><p>listing user accounts</p></li><li><p>migrate user accounts</p></li></ul></div><p>
The <b class="command">pdbedit</b> tool is the only one that can manage the account
security and policy settings. It is capable of all operations that smbpasswd can
do as well as a super set of them.
@@ -3472,50 +3306,60 @@ be announced in time for the Samba-3.0.1 release.
The following is an example of the user account information that is stored in
a tdbsam password backend. This listing was produced by running:
</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>pdbedit -Lv met</tt></b>
- Unix username: met
- NT username:
- Account Flags: [UX ]
- User SID: S-1-5-21-1449123459-1407424037-3116680435-2004
- Primary Group SID: S-1-5-21-1449123459-1407424037-3116680435-1201
- Full Name: Melissa E Terpstra
- Home Directory: \\frodo\met\Win9Profile
- HomeDir Drive: H:
- Logon Script: scripts\logon.bat
- Profile Path: \\frodo\Profiles\met
- Domain: MIDEARTH
- Account desc:
- Workstations: melbelle
- Munged dial:
- Logon time: 0
- Logoff time: Mon, 18 Jan 2038 20:14:07 GMT
- Kickoff time: Mon, 18 Jan 2038 20:14:07 GMT
- Password last set: Sat, 14 Dec 2002 14:37:03 GMT
- Password can change: Sat, 14 Dec 2002 14:37:03 GMT
- Password must change: Mon, 18 Jan 2038 20:14:07 GMT
- </pre></div></div><div xmlns:ns23="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891870"></a>Password Backends</h2></div></div><div></div></div><p>
-Samba-3 offers the greatest flexibility in backend account database design of any SMB/CIFS server
+<tt class="prompt">$ </tt><b class="userinput"><tt>pdbedit -Lv met</tt></b>
+UNIX username: met
+NT username:
+Account Flags: [UX ]
+User SID: S-1-5-21-1449123459-1407424037-3116680435-2004
+Primary Group SID: S-1-5-21-1449123459-1407424037-3116680435-1201
+Full Name: Melissa E Terpstra
+Home Directory: \\frodo\met\Win9Profile
+HomeDir Drive: H:
+Logon Script: scripts\logon.bat
+Profile Path: \\frodo\Profiles\met
+Domain: MIDEARTH
+Account desc:
+Workstations: melbelle
+Munged dial:
+Logon time: 0
+Logoff time: Mon, 18 Jan 2038 20:14:07 GMT
+Kickoff time: Mon, 18 Jan 2038 20:14:07 GMT
+Password last set: Sat, 14 Dec 2002 14:37:03 GMT
+Password can change: Sat, 14 Dec 2002 14:37:03 GMT
+Password must change: Mon, 18 Jan 2038 20:14:07 GMT
+</pre><p>
+ The <b class="command">pdbedit</b> tool allows migration of authentication (account)
+ databases from one backend to another. For example: To migrate accounts from an
+ old <tt class="filename">smbpasswd</tt> database to a <i class="parameter"><tt>tdbsam</tt></i>
+ backend:
+ </p><div class="procedure"><ol type="1"><li><p>
+ Set the <a class="indexterm" name="id2882260"></a><i class="parameter"><tt>passdb backend</tt></i> = tdbsam, smbpasswd.
+ </p></li><li><p>
+ Execute:
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>pdbedit -i smbpassed -e tdbsam</tt></b>
+</pre><p>
+ </p></li><li><p>
+ Now remove the <i class="parameter"><tt>smbpasswd</tt></i> from the passdb backend
+ configuration in <tt class="filename">smb.conf</tt>.
+ </p></li></ol></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2882329"></a>Password Backends</h2></div></div><div></div></div><p>
+Samba offers the greatest flexibility in backend account database design of any SMB/CIFS server
technology available today. The flexibility is immediately obvious as one begins to explore this
capability.
</p><p>
It is possible to specify not only multiple different password backends, but even multiple
backends of the same type. For example, to use two different tdbsam databases:
-</p><ns23:p>
-</ns23:p><pre class="programlisting">
-[globals]
- passdb backend = tdbsam:/etc/samba/passdb.tdb, \
- tdbsam:/etc/samba/old-passdb.tdb, guest
-</pre><ns23:p>
-</ns23:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891906"></a>Plain Text</h3></div></div><div></div></div><p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>passdb backend = tdbsam:/etc/samba/passdb.tdb, tdbsam:/etc/samba/old-passdb.tdb</tt></i></td></tr></table><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882371"></a>Plain Text</h3></div></div><div></div></div><p>
Older versions of Samba retrieved user information from the unix user database
and eventually some other fields from the file <tt class="filename">/etc/samba/smbpasswd</tt>
or <tt class="filename">/etc/smbpasswd</tt>. When password encryption is disabled, no
SMB specific data is stored at all. Instead all operations are conducted via the way
that the Samba host OS will access its <tt class="filename">/etc/passwd</tt> database.
eg: On Linux systems that is done via PAM.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891946"></a>smbpasswd - Encrypted Password Database</h3></div></div><div></div></div><p>
- Traditionally, when configuring <a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt
- passwords = yes</a> in Samba's <tt class="filename">smb.conf</tt> file, user account
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882412"></a>smbpasswd - Encrypted Password Database</h3></div></div><div></div></div><p>
+ Traditionally, when configuring <a class="indexterm" name="id2882422"></a><i class="parameter"><tt>encrypt passwords</tt></i> = yes in Samba's <tt class="filename">smb.conf</tt> file, user account
information such as username, LM/NT password hashes, password change times, and account
flags have been stored in the <tt class="filename">smbpasswd(5)</tt> file. There are several
disadvantages to this approach for sites with very large numbers of users (counted
@@ -3541,10 +3385,10 @@ backends of the same type. For example, to use two different tdbsam databases:
is commonly referred to as the samdb interface (previously this was called the passdb
API, and is still so named in the Samba CVS trees).
</p><p>
- Samba-3 provides an enhanced set of passdb backends that overcome the deficiencies
+ Samba provides an enhanced set of passdb backends that overcome the deficiencies
of the smbpasswd plain text database. These are tdbsam, ldapsam, and xmlsam.
Of these ldapsam will be of most interest to large corporate or enterprise sites.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896387"></a>tdbsam</h3></div></div><div></div></div><p>Samba can store user and machine account data in a &quot;TDB&quot; (Trivial Database).
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882525"></a>tdbsam</h3></div></div><div></div></div><p>Samba can store user and machine account data in a &quot;TDB&quot; (Trivial Database).
Using this backend doesn't require any additional configuration. This backend is
recommended for new installations that do not require LDAP.
</p><p>
@@ -3552,7 +3396,7 @@ backends of the same type. For example, to use two different tdbsam databases:
that have 250 or more users. Additionally, tdbsam is not capable of scaling for use
in sites that require PDB/BDC implementations that requires replication of the account
database. Clearly, for reason of scalability, the use of ldapsam should be encouraged.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896415"></a>ldapsam</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2882559"></a>ldapsam</h3></div></div><div></div></div><p>
There are a few points to stress that the ldapsam does not provide. The LDAP
support referred to in the this documentation does not include:
</p><div class="itemizedlist"><ul type="disc"><li><p>A means of retrieving user account information from
@@ -3575,30 +3419,32 @@ backends of the same type. For example, to use two different tdbsam databases:
and has a working directory server already installed. For more information
on LDAP architectures and Directories, please refer to the following sites.
</p><div class="itemizedlist"><ul type="disc"><li><p>OpenLDAP - <a href="http://www.openldap.org/" target="_top">http://www.openldap.org/</a></p></li><li><p>iPlanet Directory Server -
- <a href="http://iplanet.netscape.com/directory" target="_top">http://iplanet.netscape.com/directory</a></p></li></ul></div><p>
+ <a href="http://iplanet.netscape.com/directory" target="_top">http://iplanet.netscape.com/directory</a></p></li></ul></div><p>
Two additional Samba resources which may prove to be helpful are
</p><div class="itemizedlist"><ul type="disc"><li><p>The <a href="http://www.unav.es/cti/ldap-smb/ldap-smb-3-howto.html" target="_top">Samba-PDC-LDAP-HOWTO</a>
maintained by Ignacio Coupeau.</p></li><li><p>The NT migration scripts from <a href="http://samba.idealx.org/" target="_top">IDEALX</a> that are
geared to manage users and group in such a Samba-LDAP Domain Controller configuration.
- </p></li></ul></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2896564"></a>Supported LDAP Servers</h4></div></div><div></div></div><p>
+ </p></li></ul></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882714"></a>Supported LDAP Servers</h4></div></div><div></div></div><p>
The LDAP ldapsam code has been developed and tested using the OpenLDAP 2.0 and 2.1 server and
client libraries. The same code should work with Netscape's Directory Server and client SDK.
However, there are bound to be compile errors and bugs. These should not be hard to fix.
Please submit fixes via <a href="#bugreport" title="Chapter35.Reporting Bugs">Bug reporting facility</a>.
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2896589"></a>Schema and Relationship to the RFC 2307 posixAccount</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882739"></a>Schema and Relationship to the RFC 2307 posixAccount</h4></div></div><div></div></div><p>
Samba 3.0 includes the necessary schema file for OpenLDAP 2.0 in
<tt class="filename">examples/LDAP/samba.schema</tt>. The sambaSamAccount objectclass is given here:
- </p><ns23:p>
-</ns23:p><pre class="programlisting">
-objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY
- DESC 'Samba Auxiliary Account'
- MUST ( uid $ rid )
- MAY ( cn $ lmPassword $ ntPassword $ pwdLastSet $ logonTime $
- logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $
- displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $
- description $ userWorkstations $ primaryGroupID $ domain ))
-</pre><ns23:p>
-</ns23:p><p>
+ </p><p>
+</p><pre class="programlisting">
+objectclass ( 1.3.6.1.4.1.7165.2.2.6 NAME 'sambaSamAccount' SUP top AUXILIARY
+ DESC 'Samba 3.0 Auxiliary SAM Account'
+ MUST ( uid $ sambaSID )
+ MAY ( cn $ sambaLMPassword $ sambaNTPassword $ sambaPwdLastSet $
+ sambaLogonTime $ sambaLogoffTime $ sambaKickoffTime $
+ sambaPwdCanChange $ sambaPwdMustChange $ sambaAcctFlags $
+ displayName $ sambaHomePath $ sambaHomeDrive $ sambaLogonScript $
+ sambaProfilePath $ description $ sambaUserWorkstations $
+ sambaPrimaryGroupSID $ sambaDomainName ))
+</pre><p>
+</p><p>
The <tt class="filename">samba.schema</tt> file has been formatted for OpenLDAP 2.0/2.1.
The OID's are owned by the Samba Team and as such is legal to be openly published.
If you translate the schema to be used with Netscape DS, please
@@ -3620,23 +3466,23 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY
and functioning correctly. This division of information makes it possible to
store all Samba account information in LDAP, but still maintain UNIX account
information in NIS while the network is transitioning to a full LDAP infrastructure.
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2896698"></a>OpenLDAP configuration</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2882851"></a>OpenLDAP configuration</h4></div></div><div></div></div><p>
To include support for the sambaSamAccount object in an OpenLDAP directory
server, first copy the samba.schema file to slapd's configuration directory.
The samba.schema file can be found in the directory <tt class="filename">examples/LDAP</tt>
in the samba source distribution.
- </p><ns23:p>
-</ns23:p><pre class="screen">
+ </p><p>
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>cp samba.schema /etc/openldap/schema/</tt></b>
-</pre><ns23:p>
-</ns23:p><p>
+</pre><p>
+</p><p>
Next, include the <tt class="filename">samba.schema</tt> file in <tt class="filename">slapd.conf</tt>.
The sambaSamAccount object contains two attributes which depend upon other schema
files. The 'uid' attribute is defined in <tt class="filename">cosine.schema</tt> and
the 'displayName' attribute is defined in the <tt class="filename">inetorgperson.schema</tt>
file. Both of these must be included before the <tt class="filename">samba.schema</tt> file.
- </p><ns23:p>
-</ns23:p><pre class="programlisting">
+ </p><p>
+</p><pre class="programlisting">
## /etc/openldap/slapd.conf
## schema files (core.schema is required by default)
@@ -3648,13 +3494,13 @@ include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/samba.schema
include /etc/openldap/schema/nis.schema
....
-</pre><ns23:p>
-</ns23:p><p>
+</pre><p>
+</p><p>
It is recommended that you maintain some indices on some of the most useful attributes,
like in the following example, to speed up searches made on sambaSamAccount objectclasses
(and possibly posixAccount and posixGroup as well).
- </p><ns23:p>
-</ns23:p><pre class="screen">
+ </p><p>
+</p><pre class="programlisting">
# Indices to maintain
## required by OpenLDAP
index objectclass eq
@@ -3676,132 +3522,101 @@ index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
index default sub
-</pre><ns23:p>
-</ns23:p><p>
+</pre><p>
+</p><p>
Create the new index by executing:
- </p><ns23:p>
-</ns23:p><pre class="screen">
-./sbin/slapindex -f slapd.conf
-</pre><ns23:p>
-</ns23:p><p>
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt>./sbin/slapindex -f slapd.conf
+</pre><p>
+</p><p>
Remember to restart slapd after making these changes:
- </p><ns23:p>
-</ns23:p><pre class="screen">
+ </p><p>
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>/etc/init.d/slapd restart</tt></b>
-</pre><ns23:p>
-</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2896886"></a>Initialise the LDAP database</h4></div></div><div></div></div><p>
+</pre><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883046"></a>Initialise the LDAP database</h4></div></div><div></div></div><p>
Before you can add accounts to the LDAP database you must create the account containers
that they will be stored in. The following LDIF file should be modified to match your
needs (ie: Your DNS entries, etc.).
- </p><ns23:p>
-</ns23:p><pre class="screen">
+ </p><p>
+</p><pre class="programlisting">
# Organization for Samba Base
-dn: dc=plainjoe,dc=org
+dn: dc=quenya,dc=org
objectclass: dcObject
objectclass: organization
-dc: plainjoe
-o: Terpstra Org Network
+dc: quenya
+o: Quenya Org Network
description: The Samba-3 Network LDAP Example
# Organizational Role for Directory Management
-dn: cn=Manager,dc=plainjoe,dc=org
+dn: cn=Manager,dc=quenya,dc=org
objectclass: organizationalRole
cn: Manager
description: Directory Manager
# Setting up container for users
-dn: ou=People,dc=plainjoe,dc=org
+dn: ou=People,dc=quenya,dc=org
objectclass: top
objectclass: organizationalUnit
ou: People
# Setting up admin handle for People OU
-dn: cn=admin,ou=People,dc=plainjoe,dc=org
+dn: cn=admin,ou=People,dc=quenya,dc=org
cn: admin
objectclass: top
objectclass: organizationalRole
objectclass: simpleSecurityObject
userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
-</pre><ns23:p>
-</ns23:p><p>
+</pre><p>
+</p><p>
The userPassword shown above should be generated using <b class="command">slappasswd</b>.
</p><p>
The following command will then load the contents of the LDIF file into the LDAP
database.
- </p><ns23:p>
-</ns23:p><pre class="screen">
+ </p><p>
+</p><pre class="screen">
<tt class="prompt">$ </tt><b class="userinput"><tt>slapadd -v -l initldap.dif</tt></b>
-</pre><ns23:p>
-</ns23:p><p>
+</pre><p>
+</p><p>
Do not forget to secure your LDAP server with an adequate access control list,
as well as an admin password.
- </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns23:p>
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Before Samba can access the LDAP server you need to store the LDAP admin password
into the Samba-3 <tt class="filename">secrets.tdb</tt> database by:
- </ns23:p><pre class="screen">
-<tt class="prompt">root# </tt> <b class="userinput"><tt>smbpasswd -w <i class="replaceable"><tt>secret</tt></i></tt></b>
- </pre><ns23:p>
- </ns23:p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897015"></a>Configuring Samba</h4></div></div><div></div></div><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -w <i class="replaceable"><tt>secret</tt></i></tt></b>
+</pre><p>
+ </p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883174"></a>Configuring Samba</h4></div></div><div></div></div><p>
The following parameters are available in smb.conf only if your
version of samba was built with LDAP support. Samba automatically builds with LDAP support if the
LDAP libraries are found.
- </p><div class="itemizedlist"><ul type="disc"><li><p><a href="smb.conf.5.html#PASSDBBACKEND" target="_top">passdb backend = ldapsam:url</a></p></li><li><p><a href="smb.conf.5.html#LDAPSSL" target="_top">ldap ssl</a></p></li><li><p><a href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a></p></li><li><p><a href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a></p></li><li><p><a href="smb.conf.5.html#LDAPFILTER" target="_top">ldap filter</a></p></li><li><p><a href="smb.conf.5.html#LDAPMACHINSUFFIX" target="_top">ldap machine suffix</a></p></li><li><p><a href="smb.conf.5.html#LDAPUSERSUFFIX" target="_top">ldap user suffix</a></p></li><li><p><a href="smb.conf.5.html#LDAPDELETEDN" target="_top">ldap delete dn</a></p></li><li><p><a href="smb.conf.5.html#LDAPPASSWDSYNC" target="_top">ldap passwd sync</a></p></li><li><p><a href="smb.conf.5.html#LDAPTRUSTIDS" target="_top">ldap trust ids</a></p></li></ul></div><p>
+ </p><p>LDAP related smb.conf options:
+ <a class="indexterm" name="id2883191"></a><i class="parameter"><tt>passdb backend</tt></i> = ldapsam:url,
+ <a class="indexterm" name="id2883207"></a><i class="parameter"><tt>ldap ssl</tt></i>,
+ <a class="indexterm" name="id2883220"></a><i class="parameter"><tt>ldap admin dn</tt></i>,
+ <a class="indexterm" name="id2883234"></a><i class="parameter"><tt>ldap suffix</tt></i>,
+ <a class="indexterm" name="id2883248"></a><i class="parameter"><tt>ldap filter</tt></i>,
+ <a class="indexterm" name="id2883262"></a><i class="parameter"><tt>ldap machine suffix</tt></i>,
+ <a class="indexterm" name="id2883276"></a><i class="parameter"><tt>ldap user suffix</tt></i>,
+ <a class="indexterm" name="id2883290"></a><i class="parameter"><tt>ldap delete dn</tt></i>,
+ <a class="indexterm" name="id2883304"></a><i class="parameter"><tt>ldap passwd sync</tt></i>,
+ <a class="indexterm" name="id2883318"></a><i class="parameter"><tt>ldap trust ids</tt></i>.
+ </p><p>
These are described in the <tt class="filename">smb.conf</tt> man
page and so will not be repeated here. However, a sample smb.conf file for
use with an LDAP directory could appear as
- </p><ns23:p>
-</ns23:p><pre class="programlisting">
-## /usr/local/samba/lib/smb.conf
-[global]
- security = user
- encrypt passwords = yes
-
- netbios name = TASHTEGO
- workgroup = NARNIA
-
- # ldap related parameters
-
- # define the DN to use when binding to the directory servers
- # The password for this DN is not stored in smb.conf. Rather it
- # must be set by using 'smbpasswd -w <i class="replaceable"><tt>secretpw</tt></i>' to store the
- # passphrase in the secrets.tdb file. If the &quot;ldap admin dn&quot; values
- # change, this password will need to be reset.
- ldap admin dn = &quot;cn=Samba Manager,ou=people,dc=samba,dc=org&quot;
-
- # Define the SSL option when connecting to the directory
- # ('off', 'start tls', or 'on' (default))
- ldap ssl = start tls
-
- # syntax: passdb backend = ldapsam:ldap://server-name[:port]
- passdb backend = ldapsam:ldap://funball.samba.org, guest
-
- # smbpasswd -x delete the entire dn-entry
- ldap delete dn = no
-
- # the machine and user suffix added to the base suffix
- # wrote WITHOUT quotes. NULL suffixes by default
- ldap user suffix = ou=People
- ldap machine suffix = ou=Systems
-
- # Trust unix account information in LDAP
- # (see the smb.conf manpage for details)
- ldap trust ids = Yes
-
- # specify the base DN to use when searching the directory
- ldap suffix = &quot;ou=people,dc=samba,dc=org&quot;
-
- # generally the default ldap search filter is ok
- # ldap filter = &quot;(&amp;(uid=%u)(objectclass=sambaSamAccount))&quot;
-</pre><ns23:p>
-</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897193"></a>Accounts and Groups management</h4></div></div><div></div></div><p>
+ </p><p>
+</p><div class="example"><a name="id2883349"></a><p class="title"><b>Example11.2.Configuration with LDAP</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>security = user</tt></i></td></tr><tr><td><i class="parameter"><tt>encrypt passwords = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>netbios name = TASHTEGO</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = NARNIA</tt></i></td></tr><tr><td># ldap related parameters</td></tr><tr><td># define the DN to use when binding to the directory servers</td></tr><tr><td># The password for this DN is not stored in smb.conf. Rather it</td></tr><tr><td># must be set by using 'smbpasswd -w <i class="replaceable"><tt>secretpw</tt></i>' to store the</td></tr><tr><td># passphrase in the secrets.tdb file. If the &quot;ldap admin dn&quot; values</td></tr><tr><td># change, this password will need to be reset.</td></tr><tr><td><i class="parameter"><tt>ldap admin dn = &quot;cn=Samba Manager,ou=people,dc=samba,dc=org&quot;</tt></i></td></tr><tr><td># Define the SSL option when connecting to the directory</td></tr><tr><td># ('off', 'start tls', or 'on' (default))</td></tr><tr><td><i class="parameter"><tt>ldap ssl = start tls</tt></i></td></tr><tr><td># syntax: passdb backend = ldapsam:ldap://server-name[:port]</td></tr><tr><td><i class="parameter"><tt>passdb backend = ldapsam:ldap://funball.samba.org</tt></i></td></tr><tr><td># smbpasswd -x delete the entire dn-entry</td></tr><tr><td><i class="parameter"><tt>ldap delete dn = no</tt></i></td></tr><tr><td># the machine and user suffix added to the base suffix</td></tr><tr><td># wrote WITHOUT quotes. NULL suffixes by default</td></tr><tr><td><i class="parameter"><tt>ldap user suffix = ou=People</tt></i></td></tr><tr><td><i class="parameter"><tt>ldap machine suffix = ou=Systems</tt></i></td></tr><tr><td># Trust unix account information in LDAP</td></tr><tr><td># (see the smb.conf manpage for details)</td></tr><tr><td><i class="parameter"><tt>ldap trust ids = Yes</tt></i></td></tr><tr><td># specify the base DN to use when searching the directory</td></tr><tr><td><i class="parameter"><tt>ldap suffix = &quot;ou=people,dc=samba,dc=org&quot;</tt></i></td></tr><tr><td># generally the default ldap search filter is ok</td></tr><tr><td><i class="parameter"><tt>ldap filter = &quot;(&amp;(uid=%u)(objectclass=sambaSamAccount))&quot;</tt></i></td></tr></table></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883574"></a>Accounts and Groups management</h4></div></div><div></div></div><p>
As users accounts are managed through the sambaSamAccount objectclass, you should
modify your existing administration tools to deal with sambaSamAccount attributes.
</p><p>
Machines accounts are managed with the sambaSamAccount objectclass, just
like users accounts. However, it's up to you to store those accounts
in a different tree of your LDAP namespace: you should use
- &quot;ou=Groups,dc=plainjoe,dc=org&quot; to store groups and
- &quot;ou=People,dc=plainjoe,dc=org&quot; to store users. Just configure your
+ &quot;ou=Groups,dc=quenya,dc=org&quot; to store groups and
+ &quot;ou=People,dc=quenya,dc=org&quot; to store users. Just configure your
NSS and PAM accordingly (usually, in the /etc/ldap.conf configuration
file).
</p><p>
@@ -3809,7 +3624,7 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
groups. This means that Samba makes use of the posixGroup objectclass.
For now, there is no NT-like group system management (global and local
groups).
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897230"></a>Security and sambaSamAccount</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883611"></a>Security and sambaSamAccount</h4></div></div><div></div></div><p>
There are two important points to remember when discussing the security
of sambaSamAccount entries in the directory.
</p><div class="itemizedlist"><ul type="disc"><li><p><span class="emphasis"><em>Never</em></span> retrieve the lmPassword or
@@ -3820,13 +3635,13 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
on the details of LM/NT password hashes, refer to the
<a href="#passdb" title="Chapter11.Account Information Databases">Account Information Database</a> section of this chapter.
</p><p>
- To remedy the first security issue, the <i class="parameter"><tt>ldap ssl</tt></i> <tt class="filename">smb.conf</tt> parameter defaults
- to require an encrypted session (<i class="parameter"><tt>ldap ssl = on</tt></i>) using
+ To remedy the first security issue, the <a class="indexterm" name="id2883671"></a><i class="parameter"><tt>ldap ssl</tt></i> <tt class="filename">smb.conf</tt> parameter defaults
+ to require an encrypted session (<a class="indexterm" name="id2883693"></a><i class="parameter"><tt>ldap ssl</tt></i> = on) using
the default port of <tt class="constant">636</tt>
when contacting the directory server. When using an OpenLDAP server, it
is possible to use the use the StartTLS LDAP extended operation in the place of
LDAPS. In either case, you are strongly discouraged to disable this security
- (<i class="parameter"><tt>ldap ssl = off</tt></i>).
+ (<a class="indexterm" name="id2883715"></a><i class="parameter"><tt>ldap ssl</tt></i> = off).
</p><p>
Note that the LDAPS protocol is deprecated in favor of the LDAPv3 StartTLS
extended operation. However, the OpenLDAP library still provides support for
@@ -3835,88 +3650,87 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
The second security precaution is to prevent non-administrative users from
harvesting password hashes from the directory. This can be done using the
following ACL in <tt class="filename">slapd.conf</tt>:
- </p><ns23:p>
-</ns23:p><pre class="programlisting">
+ </p><p>
+</p><pre class="programlisting">
## allow the &quot;ldap admin dn&quot; access, but deny everyone else
access to attrs=lmPassword,ntPassword
- by dn=&quot;cn=Samba Admin,ou=people,dc=plainjoe,dc=org&quot; write
+ by dn=&quot;cn=Samba Admin,ou=people,dc=quenya,dc=org&quot; write
by * none
-</pre><ns23:p>
-</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897365"></a>LDAP special attributes for sambaSamAccounts</h4></div></div><div></div></div><p>
+</pre><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2883771"></a>LDAP special attributes for sambaSamAccounts</h4></div></div><div></div></div><p>
The sambaSamAccount objectclass is composed of the following attributes:
- </p><ns23:p>
- </ns23:p><div class="table"><a name="id2897381"></a><p class="title"><b>Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)</b></p><table summary="Attributes in the sambaSamAccount objectclass (LDAP)" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left"><tt class="constant">lmPassword</tt></td><td align="left">the LANMAN password 16-byte hash stored as a character
- representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">ntPassword</tt></td><td align="left">the NT password hash 16-byte stored as a character
- representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">pwdLastSet</tt></td><td align="left">The integer time in seconds since 1970 when the
- <tt class="constant">lmPassword</tt> and <tt class="constant">ntPassword</tt> attributes were last set.
- </td></tr><tr><td align="left"><tt class="constant">acctFlags</tt></td><td align="left">string of 11 characters surrounded by square brackets []
+ </p><p>
+ </p><div class="table"><a name="id2883788"></a><p class="title"><b>Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)</b></p><table summary="Attributes in the sambaSamAccount objectclass (LDAP)" border="1"><colgroup><col align="left"><col align="justify"></colgroup><tbody><tr><td align="left"><tt class="constant">sambaLMPassword</tt></td><td align="justify">the LANMAN password 16-byte hash stored as a character
+representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">sambaNTPassword</tt></td><td align="justify">the NT password hash 16-byte stored as a character
+ representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">sambaPwdLastSet</tt></td><td align="justify">The integer time in seconds since 1970 when the
+ <tt class="constant">sambaLMPassword</tt> and <tt class="constant">sambaNTPassword</tt> attributes were last set.
+ </td></tr><tr><td align="left"><tt class="constant">sambaAcctFlags</tt></td><td align="justify">string of 11 characters surrounded by square brackets []
representing account flags such as U (user), W(workstation), X(no password expiration),
I(Domain trust account), H(Home dir required), S(Server trust account),
- and D(disabled).</td></tr><tr><td align="left"><tt class="constant">logonTime</tt></td><td align="left">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">logoffTime</tt></td><td align="left">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">kickoffTime</tt></td><td align="left">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">pwdCanChange</tt></td><td align="left">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">pwdMustChange</tt></td><td align="left">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">homeDrive</tt></td><td align="left">specifies the drive letter to which to map the
- UNC path specified by homeDirectory. The drive letter must be specified in the form &quot;X:&quot;
+ and D(disabled).</td></tr><tr><td align="left"><tt class="constant">sambaLogonTime</tt></td><td align="justify">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">sambaLogoffTime</tt></td><td align="justify">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">sambaKickoffTime</tt></td><td align="justify">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">sambaPwdCanChange</tt></td><td align="justify">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">sambaPwdMustChange</tt></td><td align="justify">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">sambaHomeDrive</tt></td><td align="justify">specifies the drive letter to which to map the
+ UNC path specified by sambaHomePath. The drive letter must be specified in the form &quot;X:&quot;
where X is the letter of the drive to map. Refer to the &quot;logon drive&quot; parameter in the
- smb.conf(5) man page for more information.</td></tr><tr><td align="left"><tt class="constant">scriptPath</tt></td><td align="left">The scriptPath property specifies the path of
+ smb.conf(5) man page for more information.</td></tr><tr><td align="left"><tt class="constant">sambaLogonScript</tt></td><td align="justify">The sambaLogonScript property specifies the path of
the user's logon script, .CMD, .EXE, or .BAT file. The string can be null. The path
- is relative to the netlogon share. Refer to the &quot;logon script&quot; parameter in the
- smb.conf(5) man page for more information.</td></tr><tr><td align="left"><tt class="constant">profilePath</tt></td><td align="left">specifies a path to the user's profile.
+ is relative to the netlogon share. Refer to the <a class="indexterm" name="id2883963"></a><i class="parameter"><tt>logon script</tt></i> parameter in the
+ <tt class="filename">smb.conf</tt> man page for more information.</td></tr><tr><td align="left"><tt class="constant">sambaProfilePath</tt></td><td align="justify">specifies a path to the user's profile.
This value can be a null string, a local absolute path, or a UNC path. Refer to the
- &quot;logon path&quot; parameter in the smb.conf(5) man page for more information.</td></tr><tr><td align="left"><tt class="constant">smbHome</tt></td><td align="left">The homeDirectory property specifies the path of
- the home directory for the user. The string can be null. If homeDrive is set and specifies
- a drive letter, homeDirectory should be a UNC path. The path must be a network
- UNC path of the form <tt class="filename">\\server\share\directory</tt>. This value can be a null string.
- Refer to the <b class="command">logon home</b> parameter in the <tt class="filename">smb.conf</tt> man page for more information.
- </td></tr><tr><td align="left"><tt class="constant">userWorkstation</tt></td><td align="left">character string value currently unused.
- </td></tr><tr><td align="left"><tt class="constant">rid</tt></td><td align="left">the integer representation of the user's relative identifier
- (RID).</td></tr><tr><td align="left"><tt class="constant">primaryGroupID</tt></td><td align="left">the relative identifier (RID) of the primary group
- of the user.</td></tr><tr><td align="left"><tt class="constant">domain</tt></td><td align="left">domain the user is part of.</td></tr></tbody></table></div><ns23:p>
- </ns23:p><p>
+ <a class="indexterm" name="id2883998"></a><i class="parameter"><tt>logon path</tt></i> parameter in the <tt class="filename">smb.conf</tt> man page for more information.</td></tr><tr><td align="left"><tt class="constant">sambaHomePath</tt></td><td align="justify">The sambaHomePath property specifies the path of
+the home directory for the user. The string can be null. If sambaHomeDrive is set and specifies
+a drive letter, sambaHomePath should be a UNC path. The path must be a network
+UNC path of the form <tt class="filename">\\server\share\directory</tt>. This value can be a null string.
+Refer to the <b class="command">logon home</b> parameter in the <tt class="filename">smb.conf</tt> man page for more information.
+ </td></tr><tr><td align="left"><tt class="constant">sambaUserWorkstations</tt></td><td align="justify">character string value currently unused.
+ </td></tr><tr><td align="left"><tt class="constant">sambaSID</tt></td><td align="justify">The security identifier(SID) of the user. The windows equivalent of unix uid's.</td></tr><tr><td align="left"><tt class="constant">sambaPrimaryGroupSID</tt></td><td align="justify">the relative identifier (RID) of the primary group
+ of the user.</td></tr><tr><td align="left"><tt class="constant">sambaDomainName</tt></td><td align="justify">domain the user is part of.</td></tr></tbody></table></div><p>
+ </p><p>
The majority of these parameters are only used when Samba is acting as a PDC of
a domain (refer to the <a href="#samba-pdc" title="Chapter5.Domain Control">Samba as a primary domain controller</a> chapter for details on
how to configure Samba as a Primary Domain Controller). The following four attributes
are only stored with the sambaSamAccount entry if the values are non-default values:
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td>smbHome</td></tr><tr><td>scriptPath</td></tr><tr><td>logonPath</td></tr><tr><td>homeDrive</td></tr></table><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>sambaHomePath</p></li><li><p>sambaLogonScript</p></li><li><p>sambaProfilePath</p></li><li><p>sambaHomeDrive</p></li></ul></div><p>
These attributes are only stored with the sambaSamAccount entry if
the values are non-default values. For example, assume TASHTEGO has now been
- configured as a PDC and that <i class="parameter"><tt>logon home = \\%L\%u</tt></i> was defined in
+ configured as a PDC and that <a class="indexterm" name="id2884154"></a><i class="parameter"><tt>logon home</tt></i> = \\%L\%u was defined in
its <tt class="filename">smb.conf</tt> file. When a user named &quot;becky&quot; logons to the domain,
- the <i class="parameter"><tt>logon home</tt></i> string is expanded to \\TASHTEGO\becky.
+ the <a class="indexterm" name="id2884178"></a><i class="parameter"><tt>logon home</tt></i> string is expanded to \\TASHTEGO\becky.
If the smbHome attribute exists in the entry &quot;uid=becky,ou=people,dc=samba,dc=org&quot;,
this value is used. However, if this attribute does not exist, then the value
- of the <i class="parameter"><tt>logon home</tt></i> parameter is used in its place. Samba
+ of the <a class="indexterm" name="id2884202"></a><i class="parameter"><tt>logon home</tt></i> parameter is used in its place. Samba
will only write the attribute value to the directory entry if the value is
something other than the default (e.g. <tt class="filename">\\MOBY\becky</tt>).
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897728"></a>Example LDIF Entries for a sambaSamAccount</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884228"></a>Example LDIF Entries for a sambaSamAccount</h4></div></div><div></div></div><p>
The following is a working LDIF with the inclusion of the posixAccount objectclass:
- </p><ns23:p>
- </ns23:p><pre class="programlisting">
- dn: uid=guest2, ou=people,dc=plainjoe,dc=org
- ntPassword: 878D8014606CDA29677A44EFA1353FC7
- pwdMustChange: 2147483647
- primaryGroupID: 1201
- lmPassword: 552902031BEDE9EFAAD3B435B51404EE
- pwdLastSet: 1010179124
- logonTime: 0
+ </p><p>
+ </p><pre class="programlisting">
+ dn: uid=guest2, ou=people,dc=quenya,dc=org
+ sambaNTPassword: 878D8014606CDA29677A44EFA1353FC7
+ sambaPwdMustChange: 2147483647
+ sambaPrimaryGroupSID: S-1-5-21-2447931902-1787058256-3961074038-513
+ sambaNTPassword: 552902031BEDE9EFAAD3B435B51404EE
+ sambaPwdLastSet: 1010179124
+ sambaLogonTime: 0
objectClass: sambaSamAccount
uid: guest2
- kickoffTime: 2147483647
- acctFlags: [UX ]
- logoffTime: 2147483647
- rid: 19006
- pwdCanChange: 0
- </pre><ns23:p>
- </ns23:p><p>
+ sambaKickoffTime: 2147483647
+ sambaAcctFlags: [UX ]
+ sambaLogoffTime: 2147483647
+ sambaSID: S-1-5-21-2447931902-1787058256-3961074038-5006
+ sambaPwdCanChange: 0
+ </pre><p>
+ </p><p>
The following is an LDIF entry for using both the sambaSamAccount and
posixAccount objectclasses:
- </p><ns23:p>
- </ns23:p><pre class="programlisting">
- dn: uid=gcarter, ou=people,dc=plainjoe,dc=org
- logonTime: 0
+ </p><p>
+ </p><pre class="programlisting">
+ dn: uid=gcarter, ou=people,dc=quenya,dc=org
+ sambaLogonTime: 0
displayName: Gerald Carter
- lmPassword: 552902031BEDE9EFAAD3B435B51404EE
- primaryGroupID: 1201
+ sambaLMPassword: 552902031BEDE9EFAAD3B435B51404EE
+ sambaPrimaryGroupSID: S-1-5-21-2447931902-1787058256-3961074038-1201
objectClass: posixAccount
objectClass: sambaSamAccount
- acctFlags: [UX ]
+ sambaAcctFlags: [UX ]
userPassword: {crypt}BpM2ej8Rkzogo
uid: gcarter
uidNumber: 9000
@@ -3924,60 +3738,59 @@ access to attrs=lmPassword,ntPassword
loginShell: /bin/bash
logoffTime: 2147483647
gidNumber: 100
- kickoffTime: 2147483647
- pwdLastSet: 1010179230
- rid: 19000
+ sambaKickoffTime: 2147483647
+ sambaPwdLastSet: 1010179230
+ sambaSID: S-1-5-21-2447931902-1787058256-3961074038-5004
homeDirectory: /home/tashtego/gcarter
- pwdCanChange: 0
- pwdMustChange: 2147483647
- ntPassword: 878D8014606CDA29677A44EFA1353FC7
-</pre><ns23:p>
- </ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897790"></a>Password synchronisation</h4></div></div><div></div></div><p>
+ sambaPwdCanChange: 0
+ sambaPwdMustChange: 2147483647
+ sambaNTPassword: 878D8014606CDA29677A44EFA1353FC7
+</pre><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884294"></a>Password synchronisation</h4></div></div><div></div></div><p>
Since version 3.0 samba can update the non-samba (LDAP) password stored with an account. When
using pam_ldap, this allows changing both unix and windows passwords at once.
- </p><p>The <i class="parameter"><tt>ldap passwd sync</tt></i> options can have the following values:</p><div class="variablelist"><dl><dt><span class="term">yes</span></dt><dd><p>When the user changes his password, update
+ </p><p>The <a class="indexterm" name="id2884312"></a><i class="parameter"><tt>ldap passwd sync</tt></i> options can have the following values:</p><div class="variablelist"><dl><dt><span class="term">yes</span></dt><dd><p>When the user changes his password, update
<tt class="constant">ntPassword</tt>, <tt class="constant">lmPassword</tt>
- and the <tt class="constant">password</tt> fields.</p></dd><dt><span class="term">no</span></dt><dd><p>Only update <tt class="constant">ntPassword</tt> and <tt class="constant">lmPassword</tt>.</p></dd><dt><span class="term">only</span></dt><dd><p>Only update the LDAP password and let the LDAP server worry
- about the other fields. This option is only available when the LDAP server supports LDAP_EXOP_X_MODIFY_PASSWD. </p></dd></dl></div><p>More information can be found in the <a href="smb.conf.5.html#LDAPPASSWDSYNC" target="_top">smb.conf</a> manpage.
- </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2897903"></a>MySQL</h3></div></div><div></div></div><p>
+ and the <tt class="constant">password</tt> fields.</p></dd><dt><span class="term">no</span></dt><dd><p>Only update <tt class="constant">ntPassword</tt> and <tt class="constant">lmPassword</tt>.</p></dd><dt><span class="term">only</span></dt><dd><p>Only update the LDAP password and let the LDAP server worry about the other fields. This option is only available on some LDAP servers. <sup>[<a name="id2884396" href="#ftn.id2884396">3</a>]</sup></p></dd></dl></div><p>More information can be found in the smb.conf manpage.
+ </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884412"></a>MySQL</h3></div></div><div></div></div><p>
Every so often someone will come along with a great new idea. Storing of user accounts in an
SQL backend is one of them. Those who want to do this are in the best position to know what the
specific benefits are to them. This may sound like a cop-out, but in truth we can not attempt
to document every nitty little detail why certain things of marginal utility to the bulk of
Samba users might make sense to the rest. In any case, the following instructions should help
the determined SQL user to implement a working system.
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897924"></a>Creating the database</h4></div></div><div></div></div><ns23:p>
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884433"></a>Creating the database</h4></div></div><div></div></div><p>
You either can set up your own table and specify the field names to pdb_mysql (see below
for the column names) or use the default table. The file <tt class="filename">examples/pdb/mysql/mysql.dump</tt>
contains the correct queries to create the required tables. Use the command :
- </ns23:p><pre class="screen"><tt class="prompt">$ </tt><b class="userinput"><tt>mysql -u<i class="replaceable"><tt>username</tt></i> -h<i class="replaceable"><tt>hostname</tt></i> -p<i class="replaceable"><tt>password</tt></i> \
-<i class="replaceable"><tt>databasename</tt></i> &lt; <tt class="filename">/path/to/samba/examples/pdb/mysql/mysql.dump</tt></tt></b></pre><ns23:p>
- </ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897988"></a>Configuring</h4></div></div><div></div></div><p>This plugin lacks some good documentation, but here is some short info:</p><ns23:p>Add a the following to the <i class="parameter"><tt>passdb backend</tt></i> variable in your <tt class="filename">smb.conf</tt>:
- </ns23:p><pre class="programlisting">
- passdb backend = [other-plugins] mysql:identifier [other-plugins]
- </pre><ns23:p>
- </ns23:p><p>The identifier can be any string you like, as long as it doesn't collide with
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>mysql -u<i class="replaceable"><tt>username</tt></i> -h<i class="replaceable"><tt>hostname</tt></i> -p<i class="replaceable"><tt>password</tt></i> \
+<i class="replaceable"><tt>databasename</tt></i> &lt; <tt class="filename">/path/to/samba/examples/pdb/mysql/mysql.dump</tt></tt></b>
+</pre><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884501"></a>Configuring</h4></div></div><div></div></div><p>This plugin lacks some good documentation, but here is some short info:</p><p>Add a the following to the <a class="indexterm" name="id2884517"></a><i class="parameter"><tt>passdb backend</tt></i> variable in your <tt class="filename">smb.conf</tt>:
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>passdb backend = [other-plugins] mysql:identifier [other-plugins]</tt></i></td></tr></table><p>
+ </p><p>The identifier can be any string you like, as long as it doesn't collide with
the identifiers of other plugins or other instances of pdb_mysql. If you
- specify multiple pdb_mysql.so entries in <i class="parameter"><tt>passdb backend</tt></i>, you also need to
+ specify multiple pdb_mysql.so entries in <a class="indexterm" name="id2884560"></a><i class="parameter"><tt>passdb backend</tt></i>, you also need to
use different identifiers!
</p><p>
Additional options can be given through the <tt class="filename">smb.conf</tt> file in the <i class="parameter"><tt>[global]</tt></i> section.
- </p><ns23:p>
- </ns23:p><div class="table"><a name="id2898064"></a><p class="title"><b>Table11.2.Basic smb.conf options for MySQL passdb backend</b></p><table summary="Basic smb.conf options for MySQL passdb backend" border="1"><colgroup><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:mysql host</td><td align="left">host name, defaults to 'localhost'</td></tr><tr><td align="left">identifier:mysql password</td><td align="left"></td></tr><tr><td align="left">identifier:mysql user</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql database</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql port</td><td align="left">defaults to 3306</td></tr><tr><td align="left">identifier:table</td><td align="left">Name of the table containing users</td></tr></tbody></table></div><ns23:p>
- </ns23:p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+ </p><p>
+ </p><div class="table"><a name="id2884599"></a><p class="title"><b>Table11.2.Basic smb.conf options for MySQL passdb backend</b></p><table summary="Basic smb.conf options for MySQL passdb backend" border="1"><colgroup><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Field</th><th align="justify">Contents</th></tr></thead><tbody><tr><td align="left">mysql host</td><td align="justify">host name, defaults to 'localhost'</td></tr><tr><td align="left">mysql password</td><td align="justify"></td></tr><tr><td align="left">mysql user</td><td align="justify">defaults to 'samba'</td></tr><tr><td align="left">mysql database</td><td align="justify">defaults to 'samba'</td></tr><tr><td align="left">mysql port</td><td align="justify">defaults to 3306</td></tr><tr><td align="left">table</td><td align="justify">Name of the table containing users</td></tr></tbody></table></div><p>
+ </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
Since the password for the MySQL user is stored in the
- <tt class="filename">smb.conf</tt> file, you should make the the <tt class="filename">smb.conf</tt> file
+ <tt class="filename">smb.conf</tt> file, you should make the <tt class="filename">smb.conf</tt> file
readable only to the user that runs Samba This is considered a security
bug and will be fixed soon.
- </p></div><p>Names of the columns in this table (I've added column types those columns should have first):</p><ns23:p>
- </ns23:p><div class="table"><a name="id2898189"></a><p class="title"><b>Table11.3.MySQL field names for MySQL passdb backend</b></p><table summary="MySQL field names for MySQL passdb backend" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Type</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:logon time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:logoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:kickoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass last set time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass can change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass must change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:username column</td><td align="left">varchar(255)</td><td align="left">unix username</td></tr><tr><td align="left">identifier:domain column</td><td align="left">varchar(255)</td><td align="left">NT domain user is part of</td></tr><tr><td align="left">identifier:nt username column</td><td align="left">varchar(255)</td><td align="left">NT username</td></tr><tr><td align="left">identifier:fullname column</td><td align="left">varchar(255)</td><td align="left">Full name of user</td></tr><tr><td align="left">identifier:home dir column</td><td align="left">varchar(255)</td><td align="left">Unix homedir path</td></tr><tr><td align="left">identifier:dir drive column</td><td align="left">varchar(2)</td><td align="left">Directory drive path (eg: 'H:')</td></tr><tr><td align="left">identifier:logon script column</td><td align="left">varchar(255)</td><td align="left">Batch file to run on client side when logging on</td></tr><tr><td align="left">identifier:profile path column</td><td align="left">varchar(255)</td><td align="left">Path of profile</td></tr><tr><td align="left">identifier:acct desc column</td><td align="left">varchar(255)</td><td align="left">Some ASCII NT user data</td></tr><tr><td align="left">identifier:workstations column</td><td align="left">varchar(255)</td><td align="left">Workstations user can logon to (or NULL for all)</td></tr><tr><td align="left">identifier:unknown string column</td><td align="left">varchar(255)</td><td align="left">unknown string</td></tr><tr><td align="left">identifier:munged dial column</td><td align="left">varchar(255)</td><td align="left">?</td></tr><tr><td align="left">identifier:user sid column</td><td align="left">varchar(255)</td><td align="left">NT user SID</td></tr><tr><td align="left">identifier:group sid column</td><td align="left">varchar(255)</td><td align="left">NT group ID</td></tr><tr><td align="left">identifier:lanman pass column</td><td align="left">varchar(255)</td><td align="left">encrypted lanman password</td></tr><tr><td align="left">identifier:nt pass column</td><td align="left">varchar(255)</td><td align="left">encrypted nt passwd</td></tr><tr><td align="left">identifier:plain pass column</td><td align="left">varchar(255)</td><td align="left">plaintext password</td></tr><tr><td align="left">identifier:acct control column</td><td align="left">int(9)</td><td align="left">nt user data</td></tr><tr><td align="left">identifier:unknown 3 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:logon divs column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:hours len column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:unknown 5 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:unknown 6 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr></tbody></table></div><ns23:p>
- </ns23:p><p>
+ </p></div><p>Names of the columns in this table (I've added column types those columns should have first):</p><p>
+ </p><div class="table"><a name="id2884730"></a><p class="title"><b>Table11.3.MySQL field names for MySQL passdb backend</b></p><table summary="MySQL field names for MySQL passdb backend" border="1"><colgroup><col align="left"><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Field</th><th align="left">Type</th><th align="justify">Contents</th></tr></thead><tbody><tr><td align="left">logon time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">logoff time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">kickoff time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">pass last set time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">pass can change time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">pass must change time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">username column</td><td align="left">varchar(255)</td><td align="justify">unix username</td></tr><tr><td align="left">domain column</td><td align="left">varchar(255)</td><td align="justify">NT domain user is part of</td></tr><tr><td align="left">nt username column</td><td align="left">varchar(255)</td><td align="justify">NT username</td></tr><tr><td align="left">fullname column</td><td align="left">varchar(255)</td><td align="justify">Full name of user</td></tr><tr><td align="left">home dir column</td><td align="left">varchar(255)</td><td align="justify">UNIX homedir path</td></tr><tr><td align="left">dir drive column</td><td align="left">varchar(2)</td><td align="justify">Directory drive path (eg: 'H:')</td></tr><tr><td align="left">logon script column</td><td align="left">varchar(255)</td><td align="justify">Batch file to run on client side when logging on</td></tr><tr><td align="left">profile path column</td><td align="left">varchar(255)</td><td align="justify">Path of profile</td></tr><tr><td align="left">acct desc column</td><td align="left">varchar(255)</td><td align="justify">Some ASCII NT user data</td></tr><tr><td align="left">workstations column</td><td align="left">varchar(255)</td><td align="justify">Workstations user can logon to (or NULL for all)</td></tr><tr><td align="left">unknown string column</td><td align="left">varchar(255)</td><td align="justify">unknown string</td></tr><tr><td align="left">munged dial column</td><td align="left">varchar(255)</td><td align="justify">?</td></tr><tr><td align="left">user sid column</td><td align="left">varchar(255)</td><td align="justify">NT user SID</td></tr><tr><td align="left">group sid column</td><td align="left">varchar(255)</td><td align="justify">NT group ID</td></tr><tr><td align="left">lanman pass column</td><td align="left">varchar(255)</td><td align="justify">encrypted lanman password</td></tr><tr><td align="left">nt pass column</td><td align="left">varchar(255)</td><td align="justify">encrypted nt passwd</td></tr><tr><td align="left">plain pass column</td><td align="left">varchar(255)</td><td align="justify">plaintext password</td></tr><tr><td align="left">acct control column</td><td align="left">int(9)</td><td align="justify">nt user data</td></tr><tr><td align="left">unknown 3 column</td><td align="left">int(9)</td><td align="justify">unknown</td></tr><tr><td align="left">logon divs column</td><td align="left">int(9)</td><td align="justify">?</td></tr><tr><td align="left">hours len column</td><td align="left">int(9)</td><td align="justify">?</td></tr><tr><td align="left">unknown 5 column</td><td align="left">int(9)</td><td align="justify">unknown</td></tr><tr><td align="left">unknown 6 column</td><td align="left">int(9)</td><td align="justify">unknown</td></tr></tbody></table></div><p>
+ </p><p>
Eventually, you can put a colon (:) after the name of each column, which
should specify the column to update when updating the table. You can also
specify nothing behind the colon - then the data from the field will not be
updated.
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2898570"></a>Using plaintext passwords or encrypted password</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885120"></a>Using plaintext passwords or encrypted password</h4></div></div><div></div></div><p>
I strongly discourage the use of plaintext passwords, however, you can use them:
</p><p>
If you would like to use plaintext passwords, set
@@ -3987,7 +3800,7 @@ access to attrs=lmPassword,ntPassword
</p><p>
If you use encrypted passwords, set the 'identifier:plain pass
column' to 'NULL' (without the quotes). This is the default.
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2898601"></a>Getting non-column data from the table</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885150"></a>Getting non-column data from the table</h4></div></div><div></div></div><p>
It is possible to have not all data in the database and making some 'constant'.
</p><p>
For example, you can set 'identifier:fullname column' to :
@@ -4002,75 +3815,68 @@ access to attrs=lmPassword,ntPassword
</p><p>
To import data, use:
<tt class="prompt">$ </tt> <b class="userinput"><tt>pdbedit -i xml:filename</tt></b>
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2898709"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898716"></a>Users can not logon - Users not in Samba SAM</h3></div></div><div></div></div><p>
- People forget to put their users in their backend and then complain Samba won't authorize them.
- </p></div><div xmlns:ns24="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898731"></a>Users are being added to the wrong backend database</h3></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885260"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885267"></a>Users can not logon</h3></div></div><div></div></div><p>&#8220;<span class="quote">I've installed samba, but now I can't log on with my unix account!</span>&#8221;</p><p>Make sure your user has been added to the current samba <a class="indexterm" name="id2885285"></a><i class="parameter"><tt>passdb backend</tt></i>. Read the section <a href="#acctmgmttools" title="Account Management Tools">Account Management Tools</a> for details.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885312"></a>Users being added to wrong backend database</h3></div></div><div></div></div><p>
A few complaints have been received from users that just moved to Samba-3. The following
<tt class="filename">smb.conf</tt> file entries were causing problems, new accounts were being added to the old
smbpasswd file, not to the tdbsam passdb.tdb file:
- </p><ns24:p>
- </ns24:p><pre class="programlisting">
- [globals]
- ...
- passdb backend = smbpasswd, tdbsam, guest
- ...
- </pre><ns24:p>
- </ns24:p><p>
+ </p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td>...</td></tr><tr><td><i class="parameter"><tt>passdb backend = smbpasswd, tdbsam</tt></i></td></tr><tr><td>...</td></tr></table><p>
+ </p><p>
Samba will add new accounts to the first entry in the <span class="emphasis"><em>passdb backend</em></span>
parameter entry. If you want to update to the tdbsam, then change the entry to:
- </p><ns24:p>
- </ns24:p><pre class="programlisting">
- [globals]
- ...
- passdb backend = tdbsam, smbpasswd, guest
- ...
- </pre><ns24:p>
- </ns24:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898791"></a>auth methods does not work</h3></div></div><div></div></div><p>
- If you explicitly set an 'auth methods' parameter, guest must be specified as the first
- entry on the line. Eg: <i class="parameter"><tt>auth methods = guest sam</tt></i>.
</p><p>
- This is the exact opposite of the requirement for the <i class="parameter"><tt>passdb backed</tt></i>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[globals]</tt></i></td></tr><tr><td>...</td></tr><tr><td><i class="parameter"><tt>passdb backend = tdbsam, smbpasswd</tt></i></td></tr><tr><td>...</td></tr></table><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885422"></a>auth methods does not work</h3></div></div><div></div></div><p>
+ If you explicitly set an <a class="indexterm" name="id2885433"></a><i class="parameter"><tt>auth methods</tt></i> parameter, guest must be specified as the first
+ entry on the line. Eg: <a class="indexterm" name="id2885450"></a><i class="parameter"><tt>auth methods</tt></i> = guest sam.
+ </p><p>
+ This is the exact opposite of the requirement for the <a class="indexterm" name="id2885469"></a><i class="parameter"><tt>passdb backend</tt></i>
option, where it must be the <span class="emphasis"><em>LAST</em></span> parameter on the line.
- </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="groupmapping"></a>Chapter12.Mapping MS Windows and Unix Groups</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jean Franois</span> <span class="surname">Micouleau</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2898963">Features and Benefits</a></dt><dt><a href="#id2899064">Discussion</a></dt><dd><dl><dt><a href="#id2899252">Example Configuration</a></dt></dl></dd><dt><a href="#id2899318">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2899332">Sample smb.conf add group script</a></dt><dt><a href="#id2899399">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2899473">Common Errors</a></dt><dd><dl><dt><a href="#id2899489">Adding Groups Fails</a></dt><dt><a href="#id2899549">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></div><p>
+ </p></div></div><div class="footnotes"><br><hr width="100" align="left"><div class="footnote"><p><sup>[<a name="ftn.id2884396" href="#id2884396">3</a>] </sup>Only when the LDAP server supports LDAP_EXOP_X_MODIFY_PASSWD</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="groupmapping"></a>Chapter12.Mapping MS Windows and UNIX Groups</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jean Franois</span> <span class="surname">Micouleau</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2885652">Features and Benefits</a></dt><dt><a href="#id2885887">Discussion</a></dt><dd><dl><dt><a href="#id2886122">Example Configuration</a></dt></dl></dd><dt><a href="#id2886189">Configuration Scripts</a></dt><dd><dl><dt><a href="#id2886202">Sample smb.conf add group script</a></dt><dt><a href="#id2886288">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="#id2886372">Common Errors</a></dt><dd><dl><dt><a href="#id2886386">Adding Groups Fails</a></dt><dt><a href="#id2886455">Adding MS Windows Groups to MS Windows Groups Fails</a></dt><dt><a href="#id2886481">Adding Domain Users to the Power Users group</a></dt></dl></dd></dl></div><a class="indexterm" name="id2885580"></a><p>
Starting with Samba-3, new group mapping functionality is available to create associations
- between Windows group SIDs and UNIX groups. The <i class="parameter"><tt>groupmap</tt></i> subcommand
+ between Windows group SIDs and UNIX groups. The <b class="command">groupmap</b> subcommand
included with the <span class="application">net</span> tool can be used to manage these associations.
</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
The first immediate reason to use the group mapping on a Samba PDC, is that
+ <a class="indexterm" name="id2885620"></a>
the <i class="parameter"><tt>domain admin group</tt></i> has been removed and should no longer
be specified in <tt class="filename">smb.conf</tt>. This parameter was used to give the listed users membership
in the <tt class="constant">Domain Admins</tt> Windows group which gave local admin rights on their workstations
(in default configurations).
- </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2898963"></a>Features and Benefits</h2></div></div><div></div></div><p>
+ </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885652"></a>Features and Benefits</h2></div></div><div></div></div><p>
Samba allows the administrator to create MS Windows NT4 / 200x group accounts and to
- arbitrarily associate them with Unix/Linux group accounts.
- </p><p>
- Group accounts can be managed using the MS Windows NT4 or MS Windows 200x MMC tools
- so long as appropriate interface scripts have been provided to <tt class="filename">smb.conf</tt>.
- </p><p>
+ arbitrarily associate them with UNIX/Linux group accounts.
+ </p><a class="indexterm" name="id2885667"></a><a class="indexterm" name="id2885676"></a><p>
+ Group accounts can be managed using the MS Windows NT4 or MS Windows 200x / XP Professional MMC tools.
+ Appropriate interface scripts should be provided in <tt class="filename">smb.conf</tt> if it is desired that UNIX / Linux system
+ accounts should be automatically created when these tools are used. In the absence of these scripts, and
+ so long as winbind is running, Samba accounts group accounts that are created using these tools will be
+ allocated UNIX UIDs/GIDs from the parameters set by the <a class="indexterm" name="id2885702"></a><i class="parameter"><tt>idmap uid</tt></i>/<a class="indexterm" name="id2885715"></a><i class="parameter"><tt>idmap gid</tt></i> settings
+ in the <tt class="filename">smb.conf</tt> file.
+ </p><div class="figure"><a name="idmap-group-diag"></a><p class="title"><b>Figure12.1.IDMAP groups</b></p><div class="mediaobject"><img src="projdoc/imagefiles/idmap-groups.png" width="270" alt="IDMAP groups"></div></div><a class="indexterm" name="id2885785"></a><a class="indexterm" name="id2885792"></a><p>
Administrators should be aware that where <tt class="filename">smb.conf</tt> group interface scripts make
- direct calls to the Unix/Linux system tools (eg: the shadow utilities, <b class="command">groupadd</b>,
- <b class="command">groupdel</b>, <b class="command">groupmod</b>) then the resulting Unix/Linux group names will be subject
+ direct calls to the UNIX/Linux system tools (eg: the shadow utilities, <b class="command">groupadd</b>,
+ <b class="command">groupdel</b>, <b class="command">groupmod</b>) then the resulting UNIX/Linux group names will be subject
to any limits imposed by these tools. If the tool does NOT allow upper case characters
or space characters, then the creation of an MS Windows NT4 / 200x style group of
- <i class="parameter"><tt>Engineering Managers</tt></i> will attempt to create an identically named
- Unix/Linux group, an attempt that will of course fail!
- </p><p>
+ <span class="emphasis"><em>Engineering Managers</em></span> will attempt to create an identically named
+ UNIX/Linux group, an attempt that will of course fail!
+ </p><a class="indexterm" name="id2885845"></a><a class="indexterm" name="id2885853"></a><p>
There are several possible work-arounds for the operating system tools limitation. One
- method is to use a script that generates a name for the Unix/Linux system group that
- fits the operating system limits, and that then just passes the Unix/Linux group id (GID)
+ method is to use a script that generates a name for the UNIX/Linux system group that
+ fits the operating system limits, and that then just passes the UNIX/Linux group id (GID)
back to the calling Samba interface. This will provide a dynamic work-around solution.
</p><p>
- Another work-around is to manually create a Unix/Linux group, then manually create the
+ Another work-around is to manually create a UNIX/Linux group, then manually create the
MS Windows NT4 / 200x group on the Samba server and then use the <b class="command">net groupmap</b>
tool to connect the two to each other.
- </p></div><div xmlns:ns27="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2899064"></a>Discussion</h2></div></div><div></div></div><p>
+ </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885887"></a>Discussion</h2></div></div><div></div></div><p>
When installing <span class="application">MS Windows NT4 / 200x</span> on a computer, the installation
program creates default users and groups, notably the <tt class="constant">Administrators</tt> group,
and gives that group privileges necessary privileges to perform essential system tasks.
eg: Ability to change the date and time or to kill (or close) any process running on the
local machine.
- </p><p>
+ </p><a class="indexterm" name="id2885916"></a><p>
The 'Administrator' user is a member of the 'Administrators' group, and thus inherits
'Administrators' group privileges. If a 'joe' user is created to be a member of the
'Administrator' group, 'joe' has exactly the same rights as 'Administrator'.
@@ -4083,58 +3889,58 @@ access to attrs=lmPassword,ntPassword
The following steps describe how to make Samba PDC users members of the 'Domain Admins' group?
</p><div class="orderedlist"><ol type="1"><li><p>
create a unix group (usually in <tt class="filename">/etc/group</tt>), let's call it domadm
- </p></li><li xmlns:ns25=""><p>add to this group the users that must be Administrators. For example
+ </p></li><li><p>add to this group the users that must be Administrators. For example
if you want joe, john and mary, your entry in <tt class="filename">/etc/group</tt> will
look like:
</p><pre class="programlisting">
domadm:x:502:joe,john,mary
- </pre><ns25:p>
- </ns25:p></li><li xmlns:ns26=""><p>
+ </pre><p>
+ </p></li><li><p>
Map this domadm group to the &quot;Domain Admins&quot; group by running the command:
- </p><ns26:p>
- </ns26:p><pre class="screen">
- <tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add ntgroup=&quot;Domain Admins&quot; unixgroup=domadm</tt></b>
- </pre><ns26:p>
- </ns26:p><p>
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add ntgroup=&quot;Domain Admins&quot; unixgroup=domadm</tt></b>
+</pre><p>
+ </p><a class="indexterm" name="id2886039"></a><p>
The quotes around &quot;Domain Admins&quot; are necessary due to the space in the group name.
Also make sure to leave no whitespace surrounding the equal character (=).
</p></li></ol></div><p>
Now joe, john and mary are domain administrators!
- </p><p>
+ </p><a class="indexterm" name="id2886065"></a><p>
It is possible to map any arbitrary UNIX group to any Windows NT4 / 200x group as well as
making any UNIX group a Windows domain group. For example, if you wanted to include a
UNIX group (e.g. acct) in a ACL on a local file or printer on a domain member machine,
you would flag that group as a domain group by running the following on the Samba PDC:
- </p><ns27:p>
- </ns27:p><pre class="screen">
- <tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add rid=1000 ntgroup=&quot;Accounting&quot; unixgroup=acct</tt></b>
- </pre><ns27:p>
- </ns27:p><p>
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add rid=1000 ntgroup=&quot;Accounting&quot; unixgroup=acct</tt></b>
+</pre><p>
+ </p><p>
Be aware that the RID parameter is a unsigned 32 bit integer that should
normally start at 1000. However, this rid must not overlap with any RID assigned
- to a user. Verifying this is done differently depending on on the passdb backend
+ to a user. Verifying this is done differently depending on the passdb backend
you are using. Future versions of the tools may perform the verification automatically,
but for now the burden is on you.
- </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899252"></a>Example Configuration</h3></div></div><div></div></div><p>
+ </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886122"></a>Example Configuration</h3></div></div><div></div></div><p>
You can list the various groups in the mapping database by executing
<b class="command">net groupmap list</b>. Here is an example:
- </p><ns27:p>
- </ns27:p><pre class="screen">
- <tt class="prompt">root# </tt> <b class="userinput"><tt>net groupmap list</tt></b>
- System Administrators (S-1-5-21-2547222302-1596225915-2414751004-1002) -&gt; sysadmin
- Domain Admins (S-1-5-21-2547222302-1596225915-2414751004-512) -&gt; domadmin
- Domain Users (S-1-5-21-2547222302-1596225915-2414751004-513) -&gt; domuser
- Domain Guests (S-1-5-21-2547222302-1596225915-2414751004-514) -&gt; domguest
- </pre><ns27:p>
- </ns27:p><p>
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt> <b class="userinput"><tt>net groupmap list</tt></b>
+System Administrators (S-1-5-21-2547222302-1596225915-2414751004-1002) -&gt; sysadmin
+Domain Admins (S-1-5-21-2547222302-1596225915-2414751004-512) -&gt; domadmin
+Domain Users (S-1-5-21-2547222302-1596225915-2414751004-513) -&gt; domuser
+Domain Guests (S-1-5-21-2547222302-1596225915-2414751004-514) -&gt; domguest
+</pre><p>
+ </p><p>
For complete details on <b class="command">net groupmap</b>, refer to the net(8) man page.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2899318"></a>Configuration Scripts</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886189"></a>Configuration Scripts</h2></div></div><div></div></div><p>
Everyone needs tools. Some of us like to create our own, others prefer to use canned tools
(ie: prepared by someone else for general use).
- </p><div xmlns:ns28="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899332"></a>Sample <tt class="filename">smb.conf</tt> add group script</h3></div></div><div></div></div><p>
- A script to great complying group names for use by the Samba group interfaces:
- </p><ns28:p>
-</ns28:p><div class="example"><a name="id2899354"></a><p class="title"><b>Example12.1.smbgrpadd.sh</b></p><pre class="programlisting">
+ </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886202"></a>Sample <tt class="filename">smb.conf</tt> add group script</h3></div></div><div></div></div><p>
+ A script to create complying group names for use by the Samba group interfaces:
+ </p><p>
+</p><div class="example"><a name="id2886226"></a><p class="title"><b>Example12.1.smbgrpadd.sh</b></p><pre class="programlisting">
#!/bin/bash
@@ -4150,17 +3956,15 @@ cat /etc/group.bak | sed s/smbtmpgrp00/$1/g &gt; /etc/group
# Now return the GID as would normally happen.
echo $thegid
exit 0
-</pre></div><ns28:p>
-</ns28:p><ns28:p>
+</pre></div><p>
+</p><p>
The <tt class="filename">smb.conf</tt> entry for the above script would look like:
- </ns28:p><pre class="programlisting">
- add group script = /path_to_tool/smbgrpadd.sh %g
- </pre><ns28:p>
- </ns28:p></div><div xmlns:ns29="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899399"></a>Script to configure Group Mapping</h3></div></div><div></div></div><p>
- In our example we have created a Unix/Linux group called <i class="parameter"><tt>ntadmin</tt></i>.
- Our script will create the additional groups <i class="parameter"><tt>Engineers, Marketoids, Gnomes</tt></i>:
- </p><ns29:p>
-</ns29:p><pre class="programlisting">
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>add group script = /path_to_tool/smbgrpadd.sh %g</tt></i></td></tr></table><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886288"></a>Script to configure Group Mapping</h3></div></div><div></div></div><p>
+ In our example we have created a UNIX/Linux group called <span class="emphasis"><em>ntadmin</em></span>.
+ Our script will create the additional groups <span class="emphasis"><em>Orks</em></span>, <span class="emphasis"><em>Elves</em></span>, <span class="emphasis"><em>Gnomes</em></span>:
+ </p><p>
+</p><pre class="programlisting">
#!/bin/bash
net groupmap modify ntgroup=&quot;Domain Admins&quot; unixgroup=ntadmin
@@ -4176,58 +3980,70 @@ net groupmap modify ntgroup=&quot;Print Operators&quot; unixgroup=lp
net groupmap modify ntgroup=&quot;Replicators&quot; unixgroup=daemon
net groupmap modify ntgroup=&quot;Power Users&quot; unixgroup=sys
-#groupadd Engineers
-#groupadd Marketoids
-#groupadd Gnomes
+groupadd Orks
+groupadd Elves
+groupadd Gnomes
-#net groupmap add ntgroup=&quot;Engineers&quot; unixgroup=Engineers type=d
-#net groupmap add ntgroup=&quot;Marketoids&quot; unixgroup=Marketoids type=d
-#net groupmap add ntgroup=&quot;Gnomes&quot; unixgroup=Gnomes type=d
-</pre><ns29:p>
-</ns29:p><p>
+net groupmap add ntgroup=&quot;Orks&quot; unixgroup=Orks type=d
+net groupmap add ntgroup=&quot;Elves&quot; unixgroup=Elves type=d
+net groupmap add ntgroup=&quot;Gnomes&quot; unixgroup=Gnomes type=d
+</pre><p>
+</p><p>
Of course it is expected that the administrator will modify this to suit local needs.
For information regarding the use of the <b class="command">net groupmap</b> tool please
refer to the man page.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2899473"></a>Common Errors</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886372"></a>Common Errors</h2></div></div><div></div></div><p>
At this time there are many little surprises for the unwary administrator. In a real sense
it is imperative that every step of automated control scripts must be carefully tested
manually before putting them into active service.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899489"></a>Adding Groups Fails</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886386"></a>Adding Groups Fails</h3></div></div><div></div></div><p>
This is a common problem when the <b class="command">groupadd</b> is called directly
- by the Samba interface script for the <i class="parameter"><tt>add group script</tt></i> in
+ by the Samba interface script for the <a class="indexterm" name="id2886406"></a><i class="parameter"><tt>add group script</tt></i> in
the <tt class="filename">smb.conf</tt> file.
</p><p>
The most common cause of failure is an attempt to add an MS Windows group account
that has either an upper case character and/or a space character in it.
</p><p>
There are three possible work-arounds. Firstly, use only group names that comply
- with the limitations of the Unix/Linux <b class="command">groupadd</b> system tool.
+ with the limitations of the UNIX/Linux <b class="command">groupadd</b> system tool.
The second involves use of the script mentioned earlier in this chapter, and the
- third option is to manually create a Unix/Linux group account that can substitute
+ third option is to manually create a UNIX/Linux group account that can substitute
for the MS Windows group name, then use the procedure listed above to map that group
to the MS Windows group.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899549"></a>Adding MS Windows Groups to MS Windows Groups Fails</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886455"></a>Adding MS Windows Groups to MS Windows Groups Fails</h3></div></div><div></div></div><a class="indexterm" name="id2886463"></a><p>
Samba-3 does NOT support nested groups from the MS Windows control environment.
- </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AccessControls"></a>Chapter13.File, Directory and Share Access Controls</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 10, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2902735">Features and Benefits</a></dt><dt><a href="#id2902861">File System Access Controls</a></dt><dd><dl><dt><a href="#id2902879">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="#id2899794">Managing Directories</a></dt><dt><a href="#id2899890">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2900296">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2900324">User and Group Based Controls</a></dt><dt><a href="#id2900596">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2900842">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2905426">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2905498">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2905797">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="#id2905805">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2905843">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2905922">Viewing file ownership</a></dt><dt><a href="#id2906044">Viewing File or Directory Permissions</a></dt><dt><a href="#id2906272">Modifying file or directory permissions</a></dt><dt><a href="#id2906424">Interaction with the standard Samba create mask
- parameters</a></dt><dt><a href="#id2906754">Interaction with the standard Samba file attribute
- mapping</a></dt></dl></dd><dt><a href="#id2906829">Common Errors</a></dt><dd><dl><dt><a href="#id2906843">Users can not write to a public share</a></dt><dt><a href="#id2907222">I have set force user and Samba still makes root the owner of all the files
- I touch!</a></dt></dl></dd></dl></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886481"></a>Adding <span class="emphasis"><em>Domain Users</em></span> to the <span class="emphasis"><em>Power Users</em></span> group</h3></div></div><div></div></div><p>&#8220;<span class="quote">
+ What must I do to add Domain Users to the Power Users group?
+ </span>&#8221;</p><p>
+ The Power Users group is a group that is local to each Windows
+ 200x / XP Professional workstation. You can not add the Domain Users group to the Power Users
+ group automatically, this must be done on each workstation by logging in as the local workstation
+ <span class="emphasis"><em>administrator</em></span> and then using click on Start / Control Panel / Users and Passwords
+ now click on the 'Advanced' tab, then on the 'Advanced' Button.
+ </p><a class="indexterm" name="id2886519"></a><p>
+ Now click on 'Groups', then double click on 'Power Users'. This will launch the panel to add users
+ or groups to the local machine 'Power Uses' group. Click on the 'Add' button, select the domain
+ from which the 'Domain Users' group is to be added, double click on the 'Domain Users' group, then
+ click on the 'Ok' button. Note: If a logon box is presented during this process please remember to
+ enter the connect as DOMAIN\UserName. ie: For the domain MIDEARTH and the user 'root' enter
+ MIDEARTH\root.
+ </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AccessControls"></a>Chapter13.File, Directory and Share Access Controls</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><span class="contrib">drawing</span><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 10, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2886736">Features and Benefits</a></dt><dt><a href="#id2886866">File System Access Controls</a></dt><dd><dl><dt><a href="#id2886902">MS Windows NTFS Comparison with UNIX File Systems</a></dt><dt><a href="#id2887207">Managing Directories</a></dt><dt><a href="#id2887301">File and Directory Access Control</a></dt></dl></dd><dt><a href="#id2887513">Share Definition Access Controls</a></dt><dd><dl><dt><a href="#id2887541">User and Group Based Controls</a></dt><dt><a href="#id2887963">File and Directory Permissions Based Controls</a></dt><dt><a href="#id2888342">Miscellaneous Controls</a></dt></dl></dd><dt><a href="#id2888722">Access Controls on Shares</a></dt><dd><dl><dt><a href="#id2888794">Share Permissions Management</a></dt></dl></dd><dt><a href="#id2889094">MS Windows Access Control Lists and UNIX Interoperability</a></dt><dd><dl><dt><a href="#id2889102">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="#id2889146">Viewing File Security on a Samba Share</a></dt><dt><a href="#id2889226">Viewing file ownership</a></dt><dt><a href="#id2889358">Viewing File or Directory Permissions</a></dt><dt><a href="#id2889603">Modifying file or directory permissions</a></dt><dt><a href="#id2889768">Interaction with the standard Samba create mask
+ parameters</a></dt><dt><a href="#id2890164">Interaction with the standard Samba file attribute mapping</a></dt></dl></dd><dt><a href="#id2890260">Common Errors</a></dt><dd><dl><dt><a href="#id2890274">Users can not write to a public share</a></dt><dt><a href="#id2890703">I have set force user but Samba still makes root the owner of all the files I touch!</a></dt><dt><a href="#id2890755">MS Word with Samba changes owner of file</a></dt></dl></dd></dl></div><a class="indexterm" name="id2886659"></a><p>
Advanced MS Windows users are frequently perplexed when file, directory and share manipulation of
resources shared via Samba do not behave in the manner they might expect. MS Windows network
-administrators are often confused regarding network access controls and what is the best way to
-provide users with the type of access they need while protecting resources from the consequences
-of untoward access capabilities.
+administrators are often confused regarding network access controls and how to
+provide users with the access they need while protecting resources from unauthorised access.
</p><p>
-Unix administrators frequently are not familiar with the MS Windows environment and in particular
+Many UNIX administrators are unfamiliar with the MS Windows environment and in particular
have difficulty in visualizing what the MS Windows user wishes to achieve in attempts to set file
and directory access permissions.
</p><p>
The problem lies in the differences in how file and directory permissions and controls work
between the two environments. This difference is one that Samba can not completely hide, even
-though it does try to make the chasm transparent.
-</p><p>
+though it does try to bridge the chasm to a degree.
+</p><a class="indexterm" name="id2886695"></a><p>
POSIX Access Control List technology has been available (along with Extended Attributes)
-for Unix for many years, yet there is little evidence today of any significant use. This
+for UNIX for many years, yet there is little evidence today of any significant use. This
explains to some extent the slow adoption of ACLs into commercial Linux products. MS Windows
administrators are astounded at this given that ACLs were a foundational capability of the now
decade old MS Windows NT operating system.
@@ -4236,25 +4052,24 @@ The purpose of this chapter is to present each of the points of control that are
Samba-3 in the hope that this will help the network administrator to find the optimum method
for delivering the best environment for MS Windows desktop users.
</p><p>
-This is an opportune point to mention that it should be borne in mind that Samba was created to
-provide a means of interoperability and interchange of data between two operating environments
-that are quite different. It was never the intent to make Unix/Linux like MS Windows NT. Instead
-the purpose was an is to provide a sufficient level of exchange of data between the two environments.
-What is available today extends well beyond early plans and expectations, yet the gap continues to
-shrink.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902735"></a>Features and Benefits</h2></div></div><div></div></div><p>
+This is an opportune point to mention that Samba was created to provide a means of interoperability
+and interchange of data between differing operating environments. Samba has no intent change
+UNIX/Linux into a platform like MS Windows. Instead the purpose was and is to provide a sufficient
+level of exchange of data between the two environments. What is available today extends well
+beyond early plans and expectations, yet the gap continues to shrink.
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886736"></a>Features and Benefits</h2></div></div><div></div></div><p>
Samba offers a lot of flexibility in file system access management. These are the key access control
facilities present in Samba today:
</p><div class="itemizedlist"><p class="title"><b>Samba Access Control Facilities</b></p><ul type="disc"><li><p>
- <span class="emphasis"><em>Unix File and Directory Permissions</em></span>
+ <span class="emphasis"><em>UNIX File and Directory Permissions</em></span>
</p><p>
- Samba honours and implements Unix file system access controls. Users
+ Samba honours and implements UNIX file system access controls. Users
who access a Samba server will do so as a particular MS Windows user.
This information is passed to the Samba server as part of the logon or
connection setup process. Samba uses this user identity to validate
whether or not the user should be given access to file system resources
(files and directories). This chapter provides an overview for those
- to whom the Unix permissions and controls are a little strange or unknown.
+ to whom the UNIX permissions and controls are a little strange or unknown.
</p></li><li><p>
<span class="emphasis"><em>Samba Share Definitions</em></span>
</p><p>
@@ -4273,22 +4088,22 @@ shrink.
easiest ways to affect access controls (restrictions) and can often
do so with minimum invasiveness compared with other methods.
</p></li><li><p>
- <span class="emphasis"><em>MS Windows ACLs through Unix POSIX ACLs</em></span>
+ <span class="emphasis"><em>MS Windows ACLs through UNIX POSIX ACLs</em></span>
</p><p>
- The use of POSIX ACLs on Unix/Linux is possible ONLY if the underlying
+ The use of POSIX ACLs on UNIX/Linux is possible ONLY if the underlying
operating system supports them. If not, then this option will not be
- available to you. Current Unix technology platforms have native support
+ available to you. Current UNIX technology platforms have native support
for POSIX ACLs. There are patches for the Linux kernel that provide
this also. Sadly, few Linux platforms ship today with native ACLs and
Extended Attributes enabled. This chapter has pertinent information
for users of platforms that support them.
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902861"></a>File System Access Controls</h2></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886866"></a>File System Access Controls</h2></div></div><div></div></div><p>
Perhaps the most important recognition to be made is the simple fact that MS Windows NT4 / 200x / XP
-implement a totally divergent file system technology from what is provided in the Unix operating system
+implement a totally divergent file system technology from what is provided in the UNIX operating system
environment. Firstly we should consider what the most significant differences are, then we shall look
at how Samba helps to bridge the differences.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902879"></a>MS Windows NTFS Comparison with Unix File Systems</h3></div></div><div></div></div><p>
- Samba operates on top of the Unix file system. This means it is subject to Unix file system conventions
+</p><a class="indexterm" name="id2886885"></a><a class="indexterm" name="id2886894"></a><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886902"></a>MS Windows NTFS Comparison with UNIX File Systems</h3></div></div><div></div></div><p>
+ Samba operates on top of the UNIX file system. This means it is subject to UNIX file system conventions
and permissions. It also means that if the MS Windows networking environment requires file system
behaviour that differs from unix file system behaviour then somehow Samba is responsible for emulating
that in a transparent and consistent manner.
@@ -4298,128 +4113,108 @@ at how Samba helps to bridge the differences.
but for the greater part we will stay within the bounds of default behaviour. Those wishing to explore
to depths of control ability should review the <tt class="filename">smb.conf</tt> man page.
</p><div class="variablelist"><p class="title"><b>File System Feature Comparison</b></p><dl><dt><span class="term">Name Space</span></dt><dd><p>
- MS Windows NT4 / 200x/ XP files names may be up to 254 characters long, Unix file names
+ MS Windows NT4 / 200x/ XP files names may be up to 254 characters long, UNIX file names
may be 1023 characters long. In MS Windows file extensions indicate particular file types,
- in Unix this is not so rigorously observed as all names are considered arbitrary.
+ in UNIX this is not so rigorously observed as all names are considered arbitrary.
</p><p>
- What MS Windows calls a Folder, Unix calls a directory,
+ What MS Windows calls a Folder, UNIX calls a directory.
</p></dd><dt><span class="term">Case Sensitivity</span></dt><dd><p>
- MS Windows file names are generally Upper Case if made up of 8.3 (ie: 8 character file name
+ <a class="indexterm" name="id2886988"></a>
+ MS Windows file names are generally upper case if made up of 8.3 (ie: 8 character file name
and 3 character extension. If longer than 8.3 file names are Case Preserving, and Case
Insensitive.
</p><p>
- Unix file and directory names are Case Sensitive and Case Preserving. Samba implements the
- MS Windows file name behaviour, but it does so as a user application. The Unix file system
+ UNIX file and directory names are case sensitive and case preserving. Samba implements the
+ MS Windows file name behaviour, but it does so as a user application. The UNIX file system
provides no mechanism to perform case insensitive file name lookups. MS Windows does this
by default. This means that Samba has to carry the processing overhead to provide features
- that are NOT native to the Unix operating system environment.
+ that are NOT native to the UNIX operating system environment.
</p><p>
- Consider the following, all are unique Unix names but one single MS Windows file name:
+ Consider the following, all are unique UNIX names but one single MS Windows file name:
<tt class="computeroutput">
MYFILE.TXT
MyFile.txt
myfile.txt
</tt>
- So clearly, In an MS Windows file name space these three files CAN NOT co-exist! But in Unix
+ So clearly, In an MS Windows file name space these three files CAN NOT co-exist! But in UNIX
they can. So what should Samba do if all three are present? Answer, the one that is lexically
first will be accessible to MS Windows users, the others are invisible and unaccessible - any
other solution would be suicidal.
</p></dd><dt><span class="term">Directory Separators</span></dt><dd><p>
- MS Windows and DOS uses the back-slash '\' as a directory delimiter, Unix uses the forward-slash '/'
+ MS Windows and DOS uses the back-slash '\' as a directory delimiter, UNIX uses the forward-slash '/'
as it's directory delimiter. This is transparently handled by Samba.
</p></dd><dt><span class="term">Drive Identification</span></dt><dd><p>
MS Windows products support a notion of drive letters, like <b class="command">C:</b> to represent
- disk partitions. Unix has NO concept if separate identifiers for file partitions since each
+ disk partitions. UNIX has NO concept if separate identifiers for file partitions since each
such file system is <tt class="filename">mounted</tt> to become part of the over-all directory tree.
- The Unix directory tree begins at '/', just like the root of a DOS drive is specified like
+ The UNIX directory tree begins at '/', just like the root of a DOS drive is specified like
<b class="command">C:\</b>.
</p></dd><dt><span class="term">File Naming Conventions</span></dt><dd><p>
- MS Windows generally never experiences file names that begin with a '.', while in Unix these
+ MS Windows generally never experiences file names that begin with a '.', while in UNIX these
are commonly found in a user's home directory. Files that begin with a '.' are typically
- either start up files for various Unix applications, or they may be files that contain
+ either start up files for various UNIX applications, or they may be files that contain
start-up configuration data.
</p></dd><dt><span class="term">Links and Short-Cuts</span></dt><dd><p>
+ <a class="indexterm" name="id2887139"></a>
+ <a class="indexterm" name="id2887150"></a>
+ <a class="indexterm" name="id2887161"></a>
+
MS Windows make use of &quot;links and Short-Cuts&quot; that are actually special types of files that will
- redirect an attempt to execute the file to the real location of the file. Unix knows of file and directory
+ redirect an attempt to execute the file to the real location of the file. UNIX knows of file and directory
links, but they are entirely different from what MS Windows users are used to.
</p><p>
- Symbolic links are files in Unix that contain the actual location of the data (file OR directory). An
+ Symbolic links are files in UNIX that contain the actual location of the data (file OR directory). An
operation (like read or write) will operate directly on the file referenced. Symbolic links are also
referred to as 'soft links'. A hard link is something that MS Windows is NOT familiar with. It allows
one physical file to be known simultaneously by more than one file name.
</p></dd></dl></div><p>
There are many other subtle differences that may cause the MS Windows administrator some temporary discomfort
- in the process of becoming familiar with Unix/Linux. These are best left for a text that is dedicated to the
- purpose of Unix/Linux training/education.
- </p></div><div xmlns:ns30="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899794"></a>Managing Directories</h3></div></div><div></div></div><ns30:p>
+ in the process of becoming familiar with UNIX/Linux. These are best left for a text that is dedicated to the
+ purpose of UNIX/Linux training/education.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887207"></a>Managing Directories</h3></div></div><div></div></div><p>
There are three basic operations for managing directories, <b class="command">create, delete, rename</b>.
- </ns30:p><div class="table"><a name="id2899812"></a><p class="title"><b>Table13.1.Managing directories with unix and windows</b></p><table summary="Managing directories with unix and windows" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="center">Action</th><th align="center">MS Windows Command</th><th align="center">Unix Command</th></tr></thead><tbody><tr><td align="center">create</td><td align="center">md folder</td><td align="center">mkdir folder</td></tr><tr><td align="center">delete</td><td align="center">rd folder</td><td align="center">rmdir folder</td></tr><tr><td align="center">rename</td><td align="center">rename oldname newname</td><td align="center">mv oldname newname</td></tr></tbody></table></div><ns30:p>
- </ns30:p></div><div xmlns:ns31="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899890"></a>File and Directory Access Control</h3></div></div><div></div></div><p>
+ </p><div class="table"><a name="id2887226"></a><p class="title"><b>Table13.1.Managing directories with unix and windows</b></p><table summary="Managing directories with unix and windows" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="center">Action</th><th align="center">MS Windows Command</th><th align="center">UNIX Command</th></tr></thead><tbody><tr><td align="center">create</td><td align="center">md folder</td><td align="center">mkdir folder</td></tr><tr><td align="center">delete</td><td align="center">rd folder</td><td align="center">rmdir folder</td></tr><tr><td align="center">rename</td><td align="center">rename oldname newname</td><td align="center">mv oldname newname</td></tr></tbody></table></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887301"></a>File and Directory Access Control</h3></div></div><div></div></div><p>
The network administrator is strongly advised to read foundational training manuals and reference materials
- regarding file and directory permissions maintenance. Much can be achieved with the basic Unix permissions
+ regarding file and directory permissions maintenance. Much can be achieved with the basic UNIX permissions
without having to resort to more complex facilities like POSIX Access Control Lists (ACLs) or Extended
Attributes (EAs).
- </p><ns31:p>
- Unix/Linux file and directory access permissions involves setting three (3) primary sets of data and one (1) control set.
- A Unix file listing looks as follows:-
-
- </ns31:p><pre class="screen">
- <tt class="prompt">jht@frodo:~/stuff&gt; </tt><b class="userinput"><tt>ls -la</tt></b>
- total 632
- drwxr-xr-x 13 jht users 816 2003-05-12 22:56 .
- drwxr-xr-x 37 jht users 3800 2003-05-12 22:29 ..
- d--------- 2 jht users 48 2003-05-12 22:29 muchado00
- d--x--x--x 2 jht users 48 2003-05-12 22:29 muchado01
- dr-xr-xr-x 2 jht users 48 2003-05-12 22:29 muchado02
- drwxrwxrwx 2 jht users 48 2003-05-12 22:29 muchado03
- drw-rw-rw- 2 jht users 48 2003-05-12 22:29 muchado04
- d-w--w--w- 2 jht users 48 2003-05-12 22:29 muchado05
- dr--r--r-- 2 jht users 48 2003-05-12 22:29 muchado06
- drwxrwxrwt 2 jht users 48 2003-05-12 22:29 muchado07
- drwsrwsrwx 2 jht users 48 2003-05-12 22:29 muchado08
- ---------- 1 jht users 1242 2003-05-12 22:31 mydata00.lst
- ---x--x--x 1 jht users 1674 2003-05-12 22:33 mydata01.lst
- --w--w--w- 1 jht users 7754 2003-05-12 22:33 mydata02.lst
- --wx-wx-wx 1 jht users 260179 2003-05-12 22:33 mydata03.lst
- -r--r--r-- 1 jht users 21017 2003-05-12 22:32 mydata04.lst
- -r-xr-xr-x 1 jht users 206339 2003-05-12 22:32 mydata05.lst
- -rw-rw-rw- 1 jht users 41105 2003-05-12 22:32 mydata06.lst
- -rwxrwxrwx 1 jht users 19312 2003-05-12 22:32 mydata07.lst
- <tt class="prompt">jht@frodo:~/stuff&gt;</tt>
- </pre><ns31:p>
- </ns31:p><p>
- The columns above represent (from left to right): permissions, no blocks used, owner, group, size (bytes), access date, access time, file name.
- </p><ns31:p>
- The permissions field is made up of:
+ </p><p>
+ UNIX/Linux file and directory access permissions involves setting three (3) primary sets of data and one (1) control set.
+ A UNIX file listing looks as follows:-
- </ns31:p><pre class="programlisting">
- <i><span class="comment"> JRV: Put this into a diagram of some sort</span></i>
- [ type ] [ users ] [ group ] [ others ] [File, Directory Permissions]
- [ d | l ] [ r w x ] [ r w x ] [ r w x ]
- | | | | | | | | | | |
- | | | | | | | | | | |-----&gt; Can Execute, List files
- | | | | | | | | | |-------&gt; Can Write, Create files
- | | | | | | | | |---------&gt; Can Read, Read files
- | | | | | | | |---------------&gt; Can Execute, List files
- | | | | | | |-----------------&gt; Can Write, Create files
- | | | | | |-------------------&gt; Can Read, Read files
- | | | | |-------------------------&gt; Can Execute, List files
- | | | |---------------------------&gt; Can Write, Create files
- | | |-----------------------------&gt; Can Read, Read files
- | |-----------------------------------&gt; Is a symbolic Link
- |---------------------------------------&gt; Is a directory
- </pre><ns31:p>
- </ns31:p><ns31:p>
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>ls -la</tt></b>
+total 632
+drwxr-xr-x 13 maryo gnomes 816 2003-05-12 22:56 .
+drwxrwxr-x 37 maryo gnomes 3800 2003-05-12 22:29 ..
+dr-xr-xr-x 2 maryo gnomes 48 2003-05-12 22:29 muchado02
+drwxrwxrwx 2 maryo gnomes 48 2003-05-12 22:29 muchado03
+drw-rw-rw- 2 maryo gnomes 48 2003-05-12 22:29 muchado04
+d-w--w--w- 2 maryo gnomes 48 2003-05-12 22:29 muchado05
+dr--r--r-- 2 maryo gnomes 48 2003-05-12 22:29 muchado06
+drwsrwsrwx 2 maryo gnomes 48 2003-05-12 22:29 muchado08
+---------- 1 maryo gnomes 1242 2003-05-12 22:31 mydata00.lst
+--w--w--w- 1 maryo gnomes 7754 2003-05-12 22:33 mydata02.lst
+-r--r--r-- 1 maryo gnomes 21017 2003-05-12 22:32 mydata04.lst
+-rw-rw-rw- 1 maryo gnomes 41105 2003-05-12 22:32 mydata06.lst
+<tt class="prompt">$ </tt>
+</pre><p>
+ </p><p>
+ The columns above represent (from left to right): permissions, number of hard links to file, owner, group, size (bytes), access date, access time, file name.
+ </p><p>
+ An overview of the permissions field can be found in <a href="#access1" title="Figure13.1.Overview of unix permissions field">the image below</a>.
+ </p><div class="figure"><a name="access1"></a><p class="title"><b>Figure13.1.Overview of unix permissions field</b></p><div class="mediaobject"><img src="projdoc/imagefiles/access1.png" width="270" alt="Overview of unix permissions field"></div></div><p>
Any bit flag may be unset. An unset bit flag is the equivalent of 'Can NOT' and is represented as a '-' character.
- </ns31:p><div class="example"><a name="id2900217"></a><p class="title"><b>Example13.1.Example File</b></p><pre class="programlisting">
+ </p><div class="example"><a name="id2887436"></a><p class="title"><b>Example13.1.Example File</b></p><pre class="programlisting">
-rwxr-x--- Means: The owner (user) can read, write, execute
the group can read and execute
everyone else can NOT do anything with it
- </pre></div><ns31:p>
+ </pre></div><p>
- </ns31:p><p>
- Additional possibilities in the [type] field are: c = character device, b = block device, p = pipe device, s = Unix Domain Socket.
+ </p><p>
+ Additional possibilities in the [type] field are: c = character device, b = block device, p = pipe device, s = UNIX Domain Socket.
</p><p>
The letters `rwxXst' set permissions for the user, group and others as: read (r), write (w), execute (or access for directories) (x),
execute only if the file is a directory or already has execute permission for some user (X), set user or group ID on execution (s),
@@ -4438,101 +4233,101 @@ at how Samba helps to bridge the differences.
the (x) execute flags are not set files can not be listed (seen) in the directory by anyone. The group can read files in the
directory but can NOT create new files. NOTE: If files in the directory are set to be readable and writable for the group, then
group members will be able to write to (or delete) them.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2900296"></a>Share Definition Access Controls</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887513"></a>Share Definition Access Controls</h2></div></div><div></div></div><p>
The following parameters in the <tt class="filename">smb.conf</tt> file sections that define a share control or affect access controls.
Before using any of the following options please refer to the man page for <tt class="filename">smb.conf</tt>.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900324"></a>User and Group Based Controls</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887541"></a>User and Group Based Controls</h3></div></div><div></div></div><p>
User and group based controls can prove very useful. In some situations it is distinctly desirable to affect all
- file system operations as if a single user is doing this, the use of the <i class="parameter"><tt>force user</tt></i> and
- <i class="parameter"><tt>force group</tt></i> behaviour will achieve this. In other situations it may be necessary to affect a
+ file system operations as if a single user is doing this, the use of the <a class="indexterm" name="id2887556"></a><i class="parameter"><tt>force user</tt></i> and
+ <a class="indexterm" name="id2887569"></a><i class="parameter"><tt>force group</tt></i> behaviour will achieve this. In other situations it may be necessary to affect a
paranoia level of control to ensure that only particular authorised persons will be able to access a share or
- it's contents, here the use of the <i class="parameter"><tt>valid users</tt></i> or the <i class="parameter"><tt>invalid users</tt></i> may
+ it's contents, here the use of the <a class="indexterm" name="id2887587"></a><i class="parameter"><tt>valid users</tt></i> or the <a class="indexterm" name="id2887600"></a><i class="parameter"><tt>invalid users</tt></i> may
be most useful.
</p><p>
As always, it is highly advisable to use the least difficult to maintain and the least ambiguous method for
controlling access. Remember, that when you leave the scene someone else will need to provide assistance and
if that person finds too great a mess, or if they do not understand what you have done then there is risk of
Samba being removed and an alternative solution being adopted.
- </p><div class="table"><a name="id2900382"></a><p class="title"><b>Table13.2.User and Group Based Controls</b></p><table summary="User and Group Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>admin users</td><td><p>
+ </p><div class="table"><a name="id2887628"></a><p class="title"><b>Table13.2.User and Group Based Controls</b></p><table summary="User and Group Based Controls" border="1"><colgroup><col align="left"><col align="justify"></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td align="left"><a class="indexterm" name="id2887684"></a><i class="parameter"><tt>admin users</tt></i></td><td align="justify"><p>
List of users who will be granted administrative privileges on the share.
They will do all file operations as the super-user (root).
Any user in this list will be able to do anything they like on the share,
irrespective of file permissions.
- </p></td></tr><tr><td>force group</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2887715"></a><i class="parameter"><tt>force group</tt></i></td><td align="justify"><p>
Specifies a UNIX group name that will be assigned as the default primary group
for all users connecting to this service.
- </p></td></tr><tr><td>force user</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2887742"></a><i class="parameter"><tt>force user</tt></i></td><td align="justify"><p>
Specifies a UNIX user name that will be assigned as the default user for all users connecting to this service.
This is useful for sharing files. Incorrect use can cause security problems.
- </p></td></tr><tr><td>guest ok</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2887770"></a><i class="parameter"><tt>guest ok</tt></i></td><td align="justify"><p>
If this parameter is set for a service, then no password is required to connect to the service. Privileges will be
those of the guest account.
- </p></td></tr><tr><td>invalid users</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2887798"></a><i class="parameter"><tt>invalid users</tt></i></td><td align="justify"><p>
List of users that should not be allowed to login to this service.
- </p></td></tr><tr><td>only user</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2887824"></a><i class="parameter"><tt>only user</tt></i></td><td align="justify"><p>
Controls whether connections with usernames not in the user list will be allowed.
- </p></td></tr><tr><td>read list</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2887850"></a><i class="parameter"><tt>read list</tt></i></td><td align="justify"><p>
List of users that are given read-only access to a service. Users in this list
will not be given write access, no matter what the read only option is set to.
- </p></td></tr><tr><td>username</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2887878"></a><i class="parameter"><tt>username</tt></i></td><td align="justify"><p>
Refer to the <tt class="filename">smb.conf</tt> man page for more information - this is a complex and potentially misused parameter.
- </p></td></tr><tr><td>valid users</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2887912"></a><i class="parameter"><tt>valid users</tt></i></td><td align="justify"><p>
List of users that should be allowed to login to this service.
- </p></td></tr><tr><td>write list</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2887938"></a><i class="parameter"><tt>write list</tt></i></td><td align="justify"><p>
List of users that are given read-write access to a service.
- </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900596"></a>File and Directory Permissions Based Controls</h3></div></div><div></div></div><p>
+ </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887963"></a>File and Directory Permissions Based Controls</h3></div></div><div></div></div><p>
The following file and directory permission based controls, if misused, can result in considerable difficulty to
diagnose the cause of mis-configuration. Use them sparingly and carefully. By gradually introducing each one by one
undesirable side-effects may be detected. In the event of a problem, always comment all of them out and then gradually
re-introduce them in a controlled fashion.
- </p><div class="table"><a name="id2900615"></a><p class="title"><b>Table13.3.File and Directory Permission Based Controls</b></p><table summary="File and Directory Permission Based Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>create mask</td><td><p>
+ </p><div class="table"><a name="id2887984"></a><p class="title"><b>Table13.3.File and Directory Permission Based Controls</b></p><table summary="File and Directory Permission Based Controls" border="1"><colgroup><col align="left"><col align="justify"></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td align="left"><a class="indexterm" name="id2888039"></a><i class="parameter"><tt>create mask</tt></i></td><td align="justify"><p>
Refer to the <tt class="filename">smb.conf</tt> man page.
- </p></td></tr><tr><td>directory mask</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2888071"></a><i class="parameter"><tt>directory mask</tt></i></td><td align="justify"><p>
The octal modes used when converting DOS modes to UNIX modes when creating UNIX directories.
See also: directory security mask.
- </p></td></tr><tr><td>dos filemode</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2888097"></a><i class="parameter"><tt>dos filemode</tt></i></td><td align="justify"><p>
Enabling this parameter allows a user who has write access to the file to modify the permissions on it.
- </p></td></tr><tr><td>force create mode</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2888124"></a><i class="parameter"><tt>force create mode</tt></i></td><td align="justify"><p>
This parameter specifies a set of UNIX mode bit permissions that will always be set on a file created by Samba.
- </p></td></tr><tr><td>force directory mode</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2888151"></a><i class="parameter"><tt>force directory mode</tt></i></td><td align="justify"><p>
This parameter specifies a set of UNIX mode bit permissions that will always be set on a directory created by Samba.
- </p></td></tr><tr><td>force directory security mode</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2888179"></a><i class="parameter"><tt>force directory security mode</tt></i></td><td align="justify"><p>
Controls UNIX permission bits modified when a Windows NT client is manipulating UNIX permissions on a directory
- </p></td></tr><tr><td>force security mode</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2888207"></a><i class="parameter"><tt>force security mode</tt></i></td><td align="justify"><p>
Controls UNIX permission bits modified when a Windows NT client manipulates UNIX permissions.
- </p></td></tr><tr><td>hide unreadable</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2888233"></a><i class="parameter"><tt>hide unreadable</tt></i></td><td align="justify"><p>
Prevents clients from seeing the existence of files that cannot be read.
- </p></td></tr><tr><td>hide unwriteable files</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2888260"></a><i class="parameter"><tt>hide unwriteable files</tt></i></td><td align="justify"><p>
Prevents clients from seeing the existence of files that cannot be written to. Unwriteable directories are shown as usual.
- </p></td></tr><tr><td>nt acl support</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2888288"></a><i class="parameter"><tt>nt acl support</tt></i></td><td align="justify"><p>
This parameter controls whether smbd will attempt to map UNIX permissions into Windows NT access control lists.
- </p></td></tr><tr><td>security mask</td><td><p>
+ </p></td></tr><tr><td align="left"><a class="indexterm" name="id2888314"></a><i class="parameter"><tt>security mask</tt></i></td><td align="justify"><p>
Controls UNIX permission bits modified when a Windows NT client is manipulating the UNIX permissions on a file.
- </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900842"></a>Miscellaneous Controls</h3></div></div><div></div></div><p>
- The following are documented because of the prevalence of administrators creating inadvertant barriers to file
+ </p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888342"></a>Miscellaneous Controls</h3></div></div><div></div></div><p>
+ The following are documented because of the prevalence of administrators creating inadvertent barriers to file
access by not understanding the full implications of <tt class="filename">smb.conf</tt> file settings.
- </p><div class="table"><a name="id2900863"></a><p class="title"><b>Table13.4.Other Controls</b></p><table summary="Other Controls" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td>case sensitive, default case, short preserve case</td><td><p>
+ </p><div class="table"><a name="id2888364"></a><p class="title"><b>Table13.4.Other Controls</b></p><table summary="Other Controls" border="1"><colgroup><col align="justify"><col align="justify"></colgroup><thead><tr><th align="center">Control Parameter</th><th align="center">Description - Action - Notes</th></tr></thead><tbody><tr><td align="justify"><a class="indexterm" name="id2888419"></a><i class="parameter"><tt>case sensitive</tt></i>, <a class="indexterm" name="id2888433"></a><i class="parameter"><tt>default case</tt></i>, <a class="indexterm" name="id2888447"></a><i class="parameter"><tt>short preserve case</tt></i></td><td align="justify"><p>
This means that all file name lookup will be done in a case sensitive manner.
Files will be created with the precise filename Samba received from the MS Windows client.
- </p></td></tr><tr><td>csc policy</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2888474"></a><i class="parameter"><tt>csc policy</tt></i></td><td align="justify"><p>
Client Side Caching Policy - parallels MS Windows client side file caching capabilities.
- </p></td></tr><tr><td>dont descend</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2888502"></a><i class="parameter"><tt>dont descend</tt></i></td><td align="justify"><p>
Allows to specify a comma-delimited list of directories that the server should always show as empty.
- </p></td></tr><tr><td>dos filetime resolution</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2888529"></a><i class="parameter"><tt>dos filetime resolution</tt></i></td><td align="justify"><p>
This option is mainly used as a compatibility option for Visual C++ when used against Samba shares.
- </p></td></tr><tr><td>dos filetimes</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2888555"></a><i class="parameter"><tt>dos filetimes</tt></i></td><td align="justify"><p>
DOS and Windows allows users to change file time stamps if they can write to the file. POSIX semantics prevent this.
This options allows DOS and Windows behaviour.
- </p></td></tr><tr><td>fake oplocks</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2888584"></a><i class="parameter"><tt>fake oplocks</tt></i></td><td align="justify"><p>
Oplocks are the way that SMB clients get permission from a server to locally cache file operations. If a server grants an
oplock then the client is free to assume that it is the only one accessing the file and it will aggressively cache file data.
- </p></td></tr><tr><td>hide dot files, hide files, veto files</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2888614"></a><i class="parameter"><tt>hide dot files</tt></i>, <a class="indexterm" name="id2888629"></a><i class="parameter"><tt>hide files</tt></i>, <a class="indexterm" name="id2888642"></a><i class="parameter"><tt>veto files</tt></i></td><td align="justify"><p>
Note: MS Windows Explorer allows over-ride of files marked as hidden so they will still be visible.
- </p></td></tr><tr><td>read only</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2888669"></a><i class="parameter"><tt>read only</tt></i></td><td align="justify"><p>
If this parameter is yes, then users of a service may not create or modify files in the service's directory.
- </p></td></tr><tr><td>veto files</td><td><p>
+ </p></td></tr><tr><td align="justify"><a class="indexterm" name="id2888696"></a><i class="parameter"><tt>veto files</tt></i></td><td align="justify"><p>
List of files and directories that are neither visible nor accessible.
- </p></td></tr></tbody></table></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905426"></a>Access Controls on Shares</h2></div></div><div></div></div><p>
+ </p></td></tr></tbody></table></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888722"></a>Access Controls on Shares</h2></div></div><div></div></div><p>
This section deals with how to configure Samba per share access control restrictions.
By default, Samba sets no restrictions on the share itself. Restrictions on the share itself
can be set on MS Windows NT4/200x/XP shares. This can be a very effective way to limit who can
@@ -4549,9 +4344,9 @@ Before using any of the following options please refer to the man page for <tt c
for Samba's tdb files is under <tt class="filename">/usr/local/samba/var</tt>. If the <tt class="filename">tdbdump</tt>
utility has been compiled and installed on your system, then you can examine the contents of this file
by: <b class="userinput"><tt>tdbdump share_info.tdb</tt></b>.
- </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905498"></a>Share Permissions Management</h3></div></div><div></div></div><p>
+ </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888794"></a>Share Permissions Management</h3></div></div><div></div></div><p>
The best tool for the task is platform dependant. Choose the best tool for your environment.
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2905511"></a>Windows NT4 Workstation/Server</h4></div></div><div></div></div><p>
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888808"></a>Windows NT4 Workstation/Server</h4></div></div><div></div></div><p>
The tool you need to use to manage share permissions on a Samba server is the NT Server Manager.
Server Manager is shipped with Windows NT4 Server products but not with Windows NT4 Workstation.
You can obtain the NT Server Manager for MS Windows NT4 Workstation from Microsoft - see details below.
@@ -4561,9 +4356,9 @@ Before using any of the following options please refer to the man page for <tt c
</p></li><li><p>
Now click on the share that you wish to manage, then click on the <span class="guilabel">Properties</span> tab, next click on
the <span class="guilabel">Permissions</span> tab. Now you can add or change access control settings as you wish.
- </p></li></ol></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2905594"></a>Windows 200x/XP</h4></div></div><div></div></div><p>
+ </p></li></ol></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888891"></a>Windows 200x/XP</h4></div></div><div></div></div><p>
On <span class="application">MS Windows NT4/200x/XP</span> system access control lists on the share itself are set using native
- tools, usually from filemanager. For example, in Windows 200x: right click on the shared folder,
+ tools, usually from file manager. For example, in Windows 200x: right click on the shared folder,
then select <span class="guimenuitem">Sharing</span>, then click on <span class="guilabel">Permissions</span>. The default
Windows NT4/200x permission allows <span class="emphasis"><em>Everyone</em></span> Full Control on the Share.
</p><p>
@@ -4590,71 +4385,70 @@ Before using any of the following options please refer to the man page for <tt c
then effectively no user will be able to access the share. This is a result of what is known as
ACL precedence. ie: Everyone with <span class="emphasis"><em>no access</em></span> means that MaryK who is part of the group
<tt class="constant">Everyone</tt> will have no access even if this user is given explicit full control access.
- </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905797"></a>MS Windows Access Control Lists and Unix Interoperability</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905805"></a>Managing UNIX permissions Using NT Security Dialogs</h3></div></div><div></div></div><p>Windows NT clients can use their native security settings
- dialog box to view and modify the underlying UNIX permissions.</p><p>Note that this ability is careful not to compromise
- the security of the UNIX host Samba is running on, and
- still obeys all the file permission rules that a Samba
- administrator can set.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
- All access to Unix/Linux system file via Samba is controlled at
- the operating system file access control level. When trying to
- figure out file access problems it is vitally important to identify
- the identity of the Windows user as it is presented by Samba at
- the point of file access. This can best be determined from the
+ </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889094"></a>MS Windows Access Control Lists and UNIX Interoperability</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889102"></a>Managing UNIX permissions Using NT Security Dialogs</h3></div></div><div></div></div><p>
+ Windows NT clients can use their native security settings dialog box to view and modify the
+ underlying UNIX permissions.
+ </p><p>
+ Note that this ability is careful not to compromise the security of the UNIX host Samba is running on, and
+ still obeys all the file permission rules that a Samba administrator can set.
+ </p><p>
+ Samba does not attempt to go beyond POSIX ACLs, so that the various finer-grained access control
+ options provided in Windows are actually ignore.
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ All access to UNIX/Linux system files via Samba is controlled by the operating system file access controls.
+ When trying to figure out file access problems it is vitally important to find the identity of the Windows
+ user as it is presented by Samba at the point of file access. This can best be determined from the
Samba log files.
- </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905843"></a>Viewing File Security on a Samba Share</h3></div></div><div></div></div><p>From an NT4/2000/XP client, single-click with the right
- mouse button on any file or directory in a Samba mounted
- drive letter or UNC path. When the menu pops-up, click
- on the <span class="guilabel">Properties</span> entry at the bottom of
- the menu. This brings up the file properties dialog
- box. Click on the tab <span class="guilabel">Security</span> and you
- will see three buttons, <span class="guibutton">Permissions</span>,
- <span class="guibutton">Auditing</span>, and <span class="guibutton">Ownership</span>.
- The <span class="guibutton">Auditing</span> button will cause either
- an error message <span class="errorname">A requested privilege is not held
- by the client</span> to appear if the user is not the
- NT Administrator, or a dialog which is intended to allow an
- Administrator to add auditing requirements to a file if the
- user is logged on as the NT Administrator. This dialog is
- non-functional with a Samba share at this time, as the only
- useful button, the <span class="guibutton">Add</span> button will not currently
- allow a list of users to be seen.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905922"></a>Viewing file ownership</h3></div></div><div></div></div><p>Clicking on the <span class="guibutton">Ownership</span> button
- brings up a dialog box telling you who owns the given file. The
- owner name will be of the form :</p><p><b class="command">&quot;SERVER\user (Long name)&quot;</b></p><p>Where <i class="replaceable"><tt>SERVER</tt></i> is the NetBIOS name of
- the Samba server, <i class="replaceable"><tt>user</tt></i> is the user name of
- the UNIX user who owns the file, and <i class="replaceable"><tt>(Long name)</tt></i>
- is the descriptive string identifying the user (normally found in the
- GECOS field of the UNIX password database). Click on the
- <span class="guibutton">Close </span> button to remove this dialog.</p><p>If the parameter <i class="parameter"><tt>nt acl support</tt></i>
- is set to <tt class="constant">false</tt> then the file owner will
- be shown as the NT user <tt class="constant">&quot;Everyone&quot;</tt>.</p><p>The <span class="guibutton">Take Ownership</span> button will not allow
- you to change the ownership of this file to yourself (clicking on
- it will display a dialog box complaining that the user you are
- currently logged onto the NT client cannot be found). The reason
- for this is that changing the ownership of a file is a privileged
- operation in UNIX, available only to the <span class="emphasis"><em>root</em></span>
- user. As clicking on this button causes NT to attempt to change
- the ownership of a file to the current user logged into the NT
- client this will not work with Samba at this time.</p><p>There is an NT chown command that will work with Samba
- and allow a user with Administrator privilege connected
- to a Samba server as root to change the ownership of
- files on both a local NTFS filesystem or remote mounted NTFS
- or Samba drive. This is available as part of the <span class="application">Seclib
- </span> NT security library written by Jeremy Allison of
- the Samba Team, available from the main Samba ftp site.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906044"></a>Viewing File or Directory Permissions</h3></div></div><div></div></div><p>The third button is the <span class="guibutton">Permissions</span>
- button. Clicking on this brings up a dialog box that shows both
- the permissions and the UNIX owner of the file or directory.
- The owner is displayed in the form :</p><p><b class="command">&quot;<i class="replaceable"><tt>SERVER</tt></i>\
+ </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889146"></a>Viewing File Security on a Samba Share</h3></div></div><div></div></div><p>
+ From an NT4/2000/XP client, single-click with the right mouse button on any file or directory in a Samba
+ mounted drive letter or UNC path. When the menu pops-up, click on the <span class="guilabel">Properties</span>
+ entry at the bottom of the menu. This brings up the file properties dialog box. Click on the tab
+ <span class="guilabel">Security</span> and you will see three buttons, <span class="guibutton">Permissions</span>,
+ <span class="guibutton">Auditing</span>, and <span class="guibutton">Ownership</span>. The <span class="guibutton">Auditing</span>
+ button will cause either an error message <span class="errorname">A requested privilege is not held by the client</span>
+ to appear if the user is not the NT Administrator, or a dialog which is intended to allow an Administrator
+ to add auditing requirements to a file if the user is logged on as the NT Administrator. This dialog is
+ non-functional with a Samba share at this time, as the only useful button, the <span class="guibutton">Add</span>
+ button will not currently allow a list of users to be seen.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889226"></a>Viewing file ownership</h3></div></div><div></div></div><p>
+ Clicking on the <span class="guibutton">Ownership</span> button brings up a dialog box telling you who owns
+ the given file. The owner name will be of the form:
+ </p><p>
+ <b class="command">&quot;SERVER\user (Long name)&quot;</b>
+ </p><p>
+ Where <i class="replaceable"><tt>SERVER</tt></i> is the NetBIOS name of the Samba server, <i class="replaceable"><tt>user</tt></i>
+ is the user name of the UNIX user who owns the file, and <i class="replaceable"><tt>(Long name)</tt></i> is the
+ descriptive string identifying the user (normally found in the GECOS field of the UNIX password database).
+ Click on the <span class="guibutton">Close </span> button to remove this dialog.
+ </p><p>
+ If the parameter <a class="indexterm" name="id2889290"></a><i class="parameter"><tt>nt acl support</tt></i> is set to <tt class="constant">false</tt>
+ then the file owner will be shown as the NT user <tt class="constant">&quot;Everyone&quot;</tt>.
+ </p><p>
+ The <span class="guibutton">Take Ownership</span> button will not allow you to change the ownership of this file to
+ yourself (clicking on it will display a dialog box complaining that the user you are currently logged onto
+ the NT client cannot be found). The reason for this is that changing the ownership of a file is a privileged
+ operation in UNIX, available only to the <span class="emphasis"><em>root</em></span> user. As clicking on this button causes
+ NT to attempt to change the ownership of a file to the current user logged into the NT client this will
+ not work with Samba at this time.</p><p>
+ There is an NT chown command that will work with Samba and allow a user with Administrator privilege connected
+ to a Samba server as root to change the ownership of files on both a local NTFS filesystem or remote mounted NTFS
+ or Samba drive. This is available as part of the <span class="application">Seclib</span> NT security library written
+ by Jeremy Allison of the Samba-Team, available from the main Samba FTP site.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889358"></a>Viewing File or Directory Permissions</h3></div></div><div></div></div><p>
+ The third button is the <span class="guibutton">Permissions</span> button. Clicking on this brings up a dialog box
+ that shows both the permissions and the UNIX owner of the file or directory. The owner is displayed in the form:
+ </p><p><b class="command">&quot;<i class="replaceable"><tt>SERVER</tt></i>\
<i class="replaceable"><tt>user</tt></i>
- <i class="replaceable"><tt>(Long name)</tt></i>&quot;</b></p><p>Where <i class="replaceable"><tt>SERVER</tt></i> is the NetBIOS name of
- the Samba server, <i class="replaceable"><tt>user</tt></i> is the user name of
- the UNIX user who owns the file, and <i class="replaceable"><tt>(Long name)</tt></i>
- is the descriptive string identifying the user (normally found in the
- GECOS field of the UNIX password database).</p><p>If the parameter <i class="parameter"><tt>nt acl support</tt></i>
- is set to <tt class="constant">false</tt> then the file owner will
- be shown as the NT user <tt class="constant">&quot;Everyone&quot;</tt> and the
- permissions will be shown as NT &quot;Full Control&quot;.</p><p>The permissions field is displayed differently for files
- and directories, so I'll describe the way file permissions
- are displayed first.</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2906135"></a>File Permissions</h4></div></div><div></div></div><p>The standard UNIX user/group/world triplet and
+ <i class="replaceable"><tt>(Long name)</tt></i>&quot;</b></p><p>Where <i class="replaceable"><tt>SERVER</tt></i> is the NetBIOS name of the Samba server,
+ <i class="replaceable"><tt>user</tt></i> is the user name of the UNIX user who owns the file, and
+ <i class="replaceable"><tt>(Long name)</tt></i> is the descriptive string identifying the user (normally found in the
+ GECOS field of the UNIX password database).</p><p>
+ If the parameter <a class="indexterm" name="id2889424"></a><i class="parameter"><tt>nt acl support</tt></i> is set to <tt class="constant">false</tt>
+ then the file owner will be shown as the NT user <tt class="constant">&quot;Everyone&quot;</tt> and the permissions will be
+ shown as NT &quot;Full Control&quot;.
+ </p><p>
+ The permissions field is displayed differently for files and directories, so I'll describe the way file permissions
+ are displayed first.
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2889458"></a>File Permissions</h4></div></div><div></div></div><p>The standard UNIX user/group/world triplet and
the corresponding &quot;read&quot;, &quot;write&quot;, &quot;execute&quot; permissions
triplets are mapped by Samba into a three element NT ACL
with the 'r', 'w', and 'x' bits mapped into the corresponding
@@ -4669,14 +4463,14 @@ Before using any of the following options please refer to the man page for <tt c
&quot;change&quot;</tt> or <tt class="constant">full control</tt> then
usually the permissions will be prefixed by the words <tt class="constant">
&quot;Special Access&quot;</tt> in the NT display list.</p><p>But what happens if the file has no permissions allowed
- for a particular UNIX user group or world component ? In order
+ for a particular UNIX user group or world component? In order
to allow &quot;no permissions&quot; to be seen and modified then Samba
overloads the NT <b class="command">&quot;Take Ownership&quot;</b> ACL attribute
(which has no meaning in UNIX) and reports a component with
no permissions as having the NT <b class="command">&quot;O&quot;</b> bit set.
This was chosen of course to make it look like a zero, meaning
zero permissions. More details on the decision behind this will
- be given below.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2906227"></a>Directory Permissions</h4></div></div><div></div></div><p>Directories on an NT NTFS file system have two
+ be given below.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2889560"></a>Directory Permissions</h4></div></div><div></div></div><p>Directories on an NT NTFS file system have two
different sets of permissions. The first set of permissions
is the ACL set on the directory itself, this is usually displayed
in the first set of parentheses in the normal <tt class="constant">&quot;RW&quot;</tt>
@@ -4687,12 +4481,12 @@ Before using any of the following options please refer to the man page for <tt c
inherited</tt> permissions that any file created within
this directory would inherit.</p><p>Samba synthesises these inherited permissions for NT by
returning as an NT ACL the UNIX permission mode that a new file
- created by Samba on this share would receive.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906272"></a>Modifying file or directory permissions</h3></div></div><div></div></div><p>Modifying file and directory permissions is as simple
+ created by Samba on this share would receive.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889603"></a>Modifying file or directory permissions</h3></div></div><div></div></div><p>Modifying file and directory permissions is as simple
as changing the displayed permissions in the dialog box, and
clicking the <span class="guibutton">OK</span> button. However, there are
limitations that a user needs to be aware of, and also interactions
with the standard Samba permission masks and mapping of DOS
- attributes that need to also be taken into account.</p><p>If the parameter <i class="parameter"><tt>nt acl support</tt></i>
+ attributes that need to also be taken into account.</p><p>If the parameter <a class="indexterm" name="id2889632"></a><i class="parameter"><tt>nt acl support</tt></i>
is set to <tt class="constant">false</tt> then any attempt to set
security permissions will fail with an <span class="errorname">&quot;Access Denied&quot;
</span> message.</p><p>The first thing to note is that the <span class="guibutton">&quot;Add&quot;</span>
@@ -4721,59 +4515,56 @@ Before using any of the following options please refer to the man page for <tt c
component and click the <span class="guibutton">Remove</span> button,
or set the component to only have the special <tt class="constant">Take
Ownership</tt> permission (displayed as <b class="command">&quot;O&quot;
- </b>) highlighted.</p></div><div xmlns:ns32="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906424"></a>Interaction with the standard Samba create mask
- parameters</h3></div></div><div></div></div><ns32:p>There are four parameters
+ </b>) highlighted.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889768"></a>Interaction with the standard Samba create mask
+ parameters</h3></div></div><div></div></div><p>There are four parameters
to control interaction with the standard Samba create mask parameters.
These are :
- </ns32:p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode</tt></i></td></tr></table><ns32:p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p><a class="indexterm" name="id2889788"></a><i class="parameter"><tt>security mask</tt></i></p></li><li><p><a class="indexterm" name="id2889805"></a><i class="parameter"><tt>force security mode</tt></i></p></li><li><p><a class="indexterm" name="id2889821"></a><i class="parameter"><tt>directory security mask</tt></i></p></li><li><p><a class="indexterm" name="id2889838"></a><i class="parameter"><tt>force directory security mode</tt></i></p></li></ul></div><p>
- </ns32:p><p>Once a user clicks <span class="guibutton">OK</span> to apply the
+ </p><p>Once a user clicks <span class="guibutton">OK</span> to apply the
permissions Samba maps the given permissions into a user/group/world
r/w/x triplet set, and then will check the changed permissions for a
- file against the bits set in the <a href="smb.conf.5.html#SECURITYMASK" target="_top">
- <i class="parameter"><tt>security mask</tt></i></a> parameter. Any bits that
+ file against the bits set in the
+ <a class="indexterm" name="id2889868"></a><i class="parameter"><tt>security mask</tt></i> parameter. Any bits that
were changed that are not set to '1' in this parameter are left alone
- in the file permissions.</p><p>Essentially, zero bits in the <i class="parameter"><tt>security mask</tt></i>
+ in the file permissions.</p><p>Essentially, zero bits in the <a class="indexterm" name="id2889888"></a><i class="parameter"><tt>security mask</tt></i>
mask may be treated as a set of bits the user is <span class="emphasis"><em>not</em></span>
allowed to change, and one bits are those the user is allowed to change.
</p><p>If not set explicitly this parameter is set to the same value as
- the <a href="smb.conf.5.html#CREATEMASK" target="_top"><i class="parameter"><tt>create mask
- </tt></i></a> parameter. To allow a user to modify all the
+ the <a class="indexterm" name="id2889915"></a><i class="parameter"><tt>create mask</tt></i> parameter. To allow a user to modify all the
user/group/world permissions on a file, set this parameter
to 0777.</p><p>Next Samba checks the changed permissions for a file against
- the bits set in the <a href="smb.conf.5.html#FORCESECURITYMODE" target="_top">
- <i class="parameter"><tt>force security mode</tt></i></a> parameter. Any bits
+ the bits set in the
+ <a class="indexterm" name="id2889937"></a><i class="parameter"><tt>force security mode</tt></i> parameter. Any bits
that were changed that correspond to bits set to '1' in this parameter
are forced to be set.</p><p>Essentially, bits set in the <i class="parameter"><tt>force security mode
</tt></i> parameter may be treated as a set of bits that, when
modifying security on a file, the user has always set to be 'on'.</p><p>If not set explicitly this parameter is set to the same value
- as the <a href="smb.conf.5.html#FORCECREATEMODE" target="_top"><i class="parameter"><tt>force
- create mode</tt></i></a> parameter.
+ as the <a class="indexterm" name="id2889972"></a><i class="parameter"><tt>force create mode</tt></i> parameter.
To allow a user to modify all the user/group/world permissions on a file
- with no restrictions set this parameter to 000.</p><p>The <i class="parameter"><tt>security mask</tt></i> and <i class="parameter"><tt>force
+ with no restrictions set this parameter to 000.</p><p>The <a class="indexterm" name="id2889993"></a><i class="parameter"><tt>security mask</tt></i> and <i class="parameter"><tt>force
security mode</tt></i> parameters are applied to the change
request in that order.</p><p>For a directory Samba will perform the same operations as
described above for a file except using the parameter <i class="parameter"><tt>
directory security mask</tt></i> instead of <i class="parameter"><tt>security
mask</tt></i>, and <i class="parameter"><tt>force directory security mode
</tt></i> parameter instead of <i class="parameter"><tt>force security mode
- </tt></i>.</p><p>The <i class="parameter"><tt>directory security mask</tt></i> parameter
+ </tt></i>.</p><p>The <a class="indexterm" name="id2890054"></a><i class="parameter"><tt>directory security mask</tt></i> parameter
by default is set to the same value as the <i class="parameter"><tt>directory mask
</tt></i> parameter and the <i class="parameter"><tt>force directory security
mode</tt></i> parameter by default is set to the same value as
- the <i class="parameter"><tt>force directory mode</tt></i> parameter. </p><p>In this way Samba enforces the permission restrictions that
+ the <a class="indexterm" name="id2890085"></a><i class="parameter"><tt>force directory mode</tt></i> parameter. </p><p>In this way Samba enforces the permission restrictions that
an administrator can set on a Samba share, whilst still allowing users
to modify the permission bits within that restriction.</p><p>If you want to set up a share that allows users full control
in modifying the permission bits on their files and directories and
doesn't force any particular bits to be set 'on', then set the following
parameters in the <tt class="filename">smb.conf</tt> file in that share specific section :
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode = 0</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode = 0</tt></i></td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906754"></a>Interaction with the standard Samba file attribute
- mapping</h3></div></div><div></div></div><p>Samba maps some of the DOS attribute bits (such as &quot;read
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force security mode = 0</tt></i></td></tr><tr><td><i class="parameter"><tt>directory security mask = 0777</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory security mode = 0</tt></i></td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890164"></a>Interaction with the standard Samba file attribute mapping</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Samba maps some of the DOS attribute bits (such as &quot;read
only&quot;) into the UNIX permissions of a file. This means there can
be a conflict between the permission bits set via the security
dialog and the permission bits set by the file attribute mapping.
- </p><p>One way this can show up is if a file has no UNIX read access
+ </p></div><p>One way this can show up is if a file has no UNIX read access
for the owner it will show up as &quot;read only&quot; in the standard
file attributes tabbed dialog. Unfortunately this dialog is
the same one that contains the security info in another tab.</p><p>What this can mean is that if the owner changes the permissions
@@ -4785,10 +4576,10 @@ Before using any of the following options please refer to the man page for <tt c
permissions and clicking <span class="guibutton">OK</span> to get back to the
attributes dialog you should always hit <span class="guibutton">Cancel</span>
rather than <span class="guibutton">OK</span> to ensure that your changes
- are not overridden.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906829"></a>Common Errors</h2></div></div><div></div></div><p>
+ are not overridden.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890260"></a>Common Errors</h2></div></div><div></div></div><p>
File, Directory and Share access problems are very common on the mailing list. The following
are examples taken from the mailing list in recent times.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906843"></a>Users can not write to a public share</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890274"></a>Users can not write to a public share</h3></div></div><div></div></div><p>
&#8220;<span class="quote">
We are facing some troubles with file / directory permissions. I can log on the domain as admin user(root),
and there's a public share, on which everyone needs to have permission to create / modify files, but only
@@ -4797,80 +4588,89 @@ are examples taken from the mailing list in recent times.
</span>&#8221;
</p><p>
There are many ways to solve this problem, here are a few hints:
- </p><div class="procedure"><p class="title"><b>Procedure13.3.Example Solution:</b></p><ol type="1"><li><p>
+ </p><div class="procedure"><ol type="1"><li><p>
Go to the top of the directory that is shared
- </p></li><li xmlns:ns33=""><ns33:p>
+ </p></li><li><p>
Set the ownership to what ever public owner and group you want
- </ns33:p><pre class="programlisting">
- find 'directory_name' -type d -exec chown user.group {}\;
- find 'directory_name' -type d -exec chmod 6775 'directory_name'
- find 'directory_name' -type f -exec chmod 0775 {} \;
- find 'directory_name' -type f -exec chown user.group {}\;
- </pre><ns33:p>
- </ns33:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><pre class="screen">
+<tt class="prompt">$ </tt>find 'directory_name' -type d -exec chown user.group {}\;
+<tt class="prompt">$ </tt>find 'directory_name' -type d -exec chmod 6775 'directory_name'
+<tt class="prompt">$ </tt>find 'directory_name' -type f -exec chmod 0775 {} \;
+<tt class="prompt">$ </tt>find 'directory_name' -type f -exec chown user.group {}\;
+</pre><p>
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The above will set the 'sticky bit' on all directories. Read your
- Unix/Linux man page on what that does. It causes the OS to assign
+ UNIX/Linux man page on what that does. It causes the OS to assign
to all files created in the directories the ownership of the
directory.
- </p></div></li><li xmlns:ns34=""><ns34:p>
+ </p></div></li><li><p>
Directory is: <i class="replaceable"><tt>/foodbar</tt></i>
- </ns34:p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>chown jack.engr /foodbar</tt></b>
- </pre><ns34:p>
- </ns34:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns34:p>
- </ns34:p><p>This is the same as doing:</p><ns34:p>
- </ns34:p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>chown jack /foodbar</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>chgrp engr /foodbar</tt></b>
- </pre><ns34:p>
- </ns34:p></div></li><li xmlns:ns35=""><ns35:p>Now do:
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>chown jack.engr /foodbar</tt></b>
+</pre><p>
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This is the same as doing:</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>chown jack /foodbar</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>chgrp engr /foodbar</tt></b>
+</pre></div></li><li><p>Now do:
- </ns35:p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>chmod 6775 /foodbar</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>ls -al /foodbar/..</tt></b>
- </pre><ns35:p>
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>chmod 6775 /foodbar</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>ls -al /foodbar/..</tt></b>
+</pre><p>
- </ns35:p><ns35:p>You should see:
- </ns35:p><pre class="screen">
- drwsrwsr-x 2 jack engr 48 2003-02-04 09:55 foodbar
- </pre><ns35:p>
- </ns35:p></li><li xmlns:ns36=""><ns36:p>Now do:
- </ns36:p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>su - jill</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>cd /foodbar</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>touch Afile</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>ls -al</tt></b>
- </pre><ns36:p>
- </ns36:p><ns36:p>
+ </p><p>You should see:
+</p><pre class="screen">
+drwsrwsr-x 2 jack engr 48 2003-02-04 09:55 foodbar
+</pre><p>
+ </p></li><li><p>Now do:
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>su - jill</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>cd /foodbar</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>touch Afile</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>ls -al</tt></b>
+</pre><p>
+ </p><p>
You should see that the file <tt class="filename">Afile</tt> created by Jill will have ownership
and permissions of Jack, as follows:
- </ns36:p><pre class="screen">
- -rw-r--r-- 1 jack engr 0 2003-02-04 09:57 Afile
- </pre><ns36:p>
- </ns36:p></li><li xmlns:ns37=""><ns37:p>
+</p><pre class="screen">
+-rw-r--r-- 1 jack engr 0 2003-02-04 09:57 Afile
+</pre><p>
+ </p></li><li><p>
Now in your <tt class="filename">smb.conf</tt> for the share add:
- </ns37:p><pre class="programlisting">
- force create mode = 0775
- force directory mode = 6775
- </pre><ns37:p>
- </ns37:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>force create mode = 0775</tt></i></td></tr><tr><td><i class="parameter"><tt>force direcrtory mode = 6775</tt></i></td></tr></table><p>
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The above are only needed <span class="emphasis"><em>if</em></span> your users are <span class="emphasis"><em>not</em></span> members of the group
you have used. ie: Within the OS do not have write permission on the directory.
- </p></div><ns37:p>
+ </p></div><p>
An alternative is to set in the <tt class="filename">smb.conf</tt> entry for the share:
- </ns37:p><pre class="programlisting">
- force user = jack
- force group = engr
- </pre><ns37:p>
- </ns37:p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907222"></a>I have set force user and Samba still makes <span class="emphasis"><em>root</em></span> the owner of all the files
- I touch!</h3></div></div><div></div></div><p>
- When you have a user in 'admin users', Samba will always do file operations for
- this user as <span class="emphasis"><em>root</em></span>, even if <i class="parameter"><tt>force user</tt></i> has been set.
- </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="locking"></a>Chapter14.File and Record Locking</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Eric</span> <span class="surname">Roseme</span></h3><div class="affiliation"><span class="orgname">HP Oplocks Usage Recommendations Whitepaper<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:eric.roseme@hp.com">eric.roseme@hp.com</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2909343">Features and Benefits</a></dt><dt><a href="#id2909398">Discussion</a></dt><dd><dl><dt><a href="#id2909529">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2907904">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2908013">Example Configuration</a></dt></dl></dd><dt><a href="#id2908272">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2910709">Workstation Service Entries</a></dt><dt><a href="#id2910736">Server Service Entries</a></dt></dl></dd><dt><a href="#id2910816">Persistent Data Corruption</a></dt><dt><a href="#id2910846">Common Errors</a></dt><dd><dl><dt><a href="#id2910919">locking.tdb error messages</a></dt></dl></dd><dt><a href="#id2910950">Additional Reading</a></dt></dl></div><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>force user = jack</tt></i></td></tr><tr><td><i class="parameter"><tt>force group = engr</tt></i></td></tr></table><p>
+ </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890703"></a>I have set force user but Samba still makes <span class="emphasis"><em>root</em></span> the owner of all the files I touch!</h3></div></div><div></div></div><p>
+ When you have a user in <a class="indexterm" name="id2890720"></a><i class="parameter"><tt>admin users</tt></i>, samba will always do file operations for
+ this user as <span class="emphasis"><em>root</em></span>, even if <a class="indexterm" name="id2890739"></a><i class="parameter"><tt>force user</tt></i> has been set.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890755"></a>MS Word with Samba changes owner of file</h3></div></div><div></div></div><p>
+ <span class="emphasis"><em>Question:</em></span> &#8220;<span class="quote">When userB saves a word document that is owned by userA the updated file is now owned by userB.
+ Why is Samba doing this? How do I fix this?</span>&#8221;
+ </p><p>
+ <span class="emphasis"><em>Answer:</em></span> Word does the following when you modify/change a Word document: Word Creates a NEW document with
+ a temporary name, Word then closes the old document and deletes it, Word then renames the new document to the original document name.
+ There is NO mechanism by which Samba CAN IN ANY WAY know that the new document really should be owned by the owners
+ of the original file. Samba has no way of knowing that the file will be renamed by MS Word. As far as Samba is able
+ to tell, the file that gets created is a NEW file, not one that the application (Word) is updating.
+ </p><p>
+ There is a work-around to solve the permissions problem. That work-around involves understanding how you can manage file
+ system behaviour from within the <tt class="filename">smb.conf</tt> file, as well as understanding how Unix file systems work. Set on the directory
+ in which you are changing word documents: <b class="command">chmod g+s 'directory_name'</b> This ensures that all files will
+ be created with the group that owns the directory. In smb.conf share declaration section set:
+ </p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>force create mode = 0660</tt></i></td></tr><tr><td><i class="parameter"><tt>force directory mode = 0770</tt></i></td></tr></table><p>
+ </p><p>
+ These two settings will ensure that all directories and files that get created in the share will be read/writable by the
+ owner and group set on the directory itself.
+ </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="locking"></a>Chapter14.File and Record Locking</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Eric</span> <span class="surname">Roseme</span></h3><div class="affiliation"><span class="orgname">HP Oplocks Usage Recommendations Whitepaper<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:eric.roseme@hp.com">eric.roseme@hp.com</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2891003">Features and Benefits</a></dt><dt><a href="#id2891060">Discussion</a></dt><dd><dl><dt><a href="#id2891204">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="#id2891921">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="#id2892041">Example Configuration</a></dt></dl></dd><dt><a href="#id2892456">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="#id2892680">Workstation Service Entries</a></dt><dt><a href="#id2892709">Server Service Entries</a></dt></dl></dd><dt><a href="#id2892788">Persistent Data Corruption</a></dt><dt><a href="#id2892817">Common Errors</a></dt><dd><dl><dt><a href="#id2892891">locking.tdb error messages</a></dt><dt><a href="#id2892930">Problems saving files in MS Office on Windows XP</a></dt><dt><a href="#id2892952">Long delays deleting files over network with XP SP1</a></dt></dl></dd><dt><a href="#id2892983">Additional Reading</a></dt></dl></div><p>
One area which causes trouble for many network administrators is locking.
The extent of the problem is readily evident from searches over the internet.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2909343"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891003"></a>Features and Benefits</h2></div></div><div></div></div><p>
Samba provides all the same locking semantics that MS Windows clients expect
and that MS Windows NT4 / 200x servers provide also.
</p><p>
@@ -4892,13 +4692,13 @@ settings on the MS Windows client.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Sometimes it is necessary to disable locking control settings BOTH on the Samba
server as well as on each MS Windows client!
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2909398"></a>Discussion</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891060"></a>Discussion</h2></div></div><div></div></div><p>
There are two types of locking which need to be performed by a SMB server.
The first is <span class="emphasis"><em>record locking</em></span> which allows a client to lock
a range of bytes in a open file. The second is the <span class="emphasis"><em>deny modes</em></span>
that are specified when a file is open.
</p><p>
-Record locking semantics under Unix are very different from record locking under
+Record locking semantics under UNIX are very different from record locking under
Windows. Versions of Samba before 2.2 have tried to use the native fcntl() unix
system call to implement proper record locking between different Samba clients.
This can not be fully correct due to several reasons. The simplest is the fact
@@ -4909,29 +4709,29 @@ many more differences, too many to be listed here.
</p><p>
Samba 2.2 and above implements record locking completely independent of the
underlying unix system. If a byte range lock that the client requests happens
-to fall into the range 0-2^31, Samba hands this request down to the Unix system.
+to fall into the range 0-2^31, Samba hands this request down to the UNIX system.
All other locks can not be seen by unix anyway.
</p><p>
-Strictly a SMB server should check for locks before every read and write call on
-a file. Unfortunately with the way fcntl() works this can be slow and may overstress
+Strictly an SMB server should check for locks before every read and write call on
+a file. Unfortunately with the way fcntl() works this can be slow and may over-stress
the <b class="command">rpc.lockd</b>. It is also almost always unnecessary as clients are supposed to
independently make locking calls before reads and writes anyway if locking is
important to them. By default Samba only makes locking calls when explicitly asked
-to by a client, but if you set <i class="parameter"><tt>strict locking = yes</tt></i> then it
+to by a client, but if you set <a class="indexterm" name="id2891128"></a><i class="parameter"><tt>strict locking</tt></i> = yes then it
will make lock checking calls on every read and write.
</p><p>
-You can also disable byte range locking completely using <i class="parameter"><tt>locking = no</tt></i>.
+You can also disable byte range locking completely using <a class="indexterm" name="id2891148"></a><i class="parameter"><tt>locking</tt></i> = no.
This is useful for those shares that don't support locking or don't need it
(such as cdroms). In this case Samba fakes the return codes of locking calls to
tell clients that everything is OK.
</p><p>
-The second class of locking is the <i class="parameter"><tt>deny modes</tt></i>. These
+The second class of locking is the <span class="emphasis"><em>deny modes</em></span>. These
are set by an application when it opens a file to determine what types of
access should be allowed simultaneously with its open. A client may ask for
<tt class="constant">DENY_NONE</tt>, <tt class="constant">DENY_READ</tt>,
<tt class="constant">DENY_WRITE</tt> or <tt class="constant">DENY_ALL</tt>. There are also special compatibility
modes called <tt class="constant">DENY_FCB</tt> and <tt class="constant">DENY_DOS</tt>.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909529"></a>Opportunistic Locking Overview</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891204"></a>Opportunistic Locking Overview</h3></div></div><div></div></div><p>
Opportunistic locking (Oplocks) is invoked by the Windows file system
(as opposed to an API) via registry entries (on the server AND client)
for the purpose of enhancing network performance when accessing a file
@@ -5054,7 +4854,7 @@ In mission critical high availability environments, careful attention
should be given to opportunistic locking. Ideally, comprehensive
testing should be done with all affected applications with oplocks
enabled and disabled.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907563"></a>Exclusively Accessed Shares</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891533"></a>Exclusively Accessed Shares</h4></div></div><div></div></div><p>
Opportunistic locking is most effective when it is confined to shares
that are exclusively accessed by a single user, or by only one user at
a time. Because the true value of opportunistic locking is the local
@@ -5063,7 +4863,7 @@ mechanism will cause a delay.
</p><p>
Home directories are the most obvious examples of where the performance
benefit of opportunistic locking can be safely realized.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907588"></a>Multiple-Accessed Shares or Files</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891558"></a>Multiple-Accessed Shares or Files</h4></div></div><div></div></div><p>
As each additional user accesses a file in a share with opportunistic
locking enabled, the potential for delays and resulting perceived poor
performance increases. When multiple users are accessing a file on a
@@ -5075,17 +4875,17 @@ of the caching user.
As each additional client attempts to access a file with oplocks set,
the potential performance improvement is negated and eventually results
in a performance bottleneck.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907617"></a>Unix or NFS Client Accessed Files</h4></div></div><div></div></div><p>
-Local Unix and NFS clients access files without a mandatory
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891587"></a>UNIX or NFS Client Accessed Files</h4></div></div><div></div></div><p>
+Local UNIX and NFS clients access files without a mandatory
file locking mechanism. Thus, these client platforms are incapable of
initiating an oplock break request from the server to a Windows client
-that has a file cached. Local Unix or NFS file access can therefore
+that has a file cached. Local UNIX or NFS file access can therefore
write to a file that has been cached by a Windows client, which
exposes the file to likely data corruption.
</p><p>
-If files are shared between Windows clients, and either local Unix
+If files are shared between Windows clients, and either local UNIX
or NFS users, then turn opportunistic locking off.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907643"></a>Slow and/or Unreliable Networks</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891613"></a>Slow and/or Unreliable Networks</h4></div></div><div></div></div><p>
The biggest potential performance improvement for opportunistic locking
occurs when the client-side caching of reads and writes delivers the
most differential over sending those reads and writes over the wire.
@@ -5100,7 +4900,7 @@ the most advantageous scenario to utilize opportunistic locking.
If the network is slow, unreliable, or a WAN, then do not configure
opportunistic locking if there is any chance of multiple users
regularly opening the same file.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907676"></a>Multi-User Databases</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891646"></a>Multi-User Databases</h4></div></div><div></div></div><p>
Multi-user databases clearly pose a risk due to their very nature -
they are typically heavily accessed by numerous users at random
intervals. Placing a multi-user database on a share with opportunistic
@@ -5108,7 +4908,7 @@ locking enabled will likely result in a locking management bottleneck
on the Samba server. Whether the database application is developed
in-house or a commercially available product, ensure that the share
has opportunistic locking disabled.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907698"></a>PDM Data Shares</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891676"></a>PDM Data Shares</h4></div></div><div></div></div><p>
Process Data Management (PDM) applications such as IMAN, Enovia, and
Clearcase, are increasing in usage with Windows client platforms, and
therefore SMB data stores. PDM applications manage multi-user
@@ -5121,8 +4921,8 @@ application and PDM server to negotiate and maintain. It is
appropriate to eliminate the client OS from any caching tasks, and the
server from any oplock management, by disabling opportunistic locking on
the share.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907725"></a>Beware of Force User</h4></div></div><div></div></div><p>
-Samba includes an <tt class="filename">smb.conf</tt> parameter called <i class="parameter"><tt>force user</tt></i> that changes
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891703"></a>Beware of Force User</h4></div></div><div></div></div><p>
+Samba includes an <tt class="filename">smb.conf</tt> parameter called <a class="indexterm" name="id2891722"></a><i class="parameter"><tt>force user</tt></i> that changes
the user accessing a share from the incoming user to whatever user is
defined by the smb.conf variable. If opportunistic locking is enabled
on a share, the change in user access causes an oplock break to be sent
@@ -5134,26 +4934,26 @@ to overcome the lost oplock break.
</p><p>
Avoid the combination of the following:
</p><div class="itemizedlist"><ul type="disc"><li><p>
- <i class="parameter"><tt>force user</tt></i> in the <tt class="filename">smb.conf</tt> share configuration.
+ <a class="indexterm" name="id2891758"></a><i class="parameter"><tt>force user</tt></i> in the <tt class="filename">smb.conf</tt> share configuration.
</p></li><li><p>
Slow or unreliable networks
</p></li><li><p>
Opportunistic Locking Enabled
- </p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907802"></a>Advanced Samba Opportunistic Locking Parameters</h4></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891795"></a>Advanced Samba Opportunistic Locking Parameters</h4></div></div><div></div></div><p>
Samba provides opportunistic locking parameters that allow the
administrator to adjust various properties of the oplock mechanism to
account for timing and usage levels. These parameters provide good
versatility for implementing oplocks in environments where they would
likely cause problems. The parameters are:
-<i class="parameter"><tt>oplock break wait time</tt></i>,
-<i class="parameter"><tt>oplock contention limit</tt></i>.
+<a class="indexterm" name="id2891812"></a><i class="parameter"><tt>oplock break wait time</tt></i>,
+<a class="indexterm" name="id2891827"></a><i class="parameter"><tt>oplock contention limit</tt></i>.
</p><p>
For most users, administrators, and environments, if these parameters
are required, then the better option is to simply turn oplocks off.
The samba SWAT help text for both parameters reads &quot;DO NOT CHANGE THIS
PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE.&quot;
This is good advice.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2907845"></a>Mission Critical High Availability</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891854"></a>Mission Critical High Availability</h4></div></div><div></div></div><p>
In mission critical high availability environments, data integrity is
often a priority. Complex and expensive configurations are implemented
to ensure that if a client loses connectivity with a file server, a
@@ -5183,10 +4983,10 @@ In mission critical high availability environments, careful attention
should be given to opportunistic locking. Ideally, comprehensive
testing should be done with all affected applications with oplocks
enabled and disabled.
-</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2907904"></a>Samba Opportunistic Locking Control</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891921"></a>Samba Opportunistic Locking Control</h2></div></div><div></div></div><p>
Opportunistic Locking is a unique Windows file locking feature. It is
not really file locking, but is included in most discussions of Windows
-file locking, so is considered a defacto locking feature.
+file locking, so is considered a de facto locking feature.
Opportunistic Locking is actually part of the Windows client file
caching mechanism. It is not a particularly robust or reliable feature
when implemented on the variety of customized networks that exist in
@@ -5217,7 +5017,7 @@ file locking with the under lying OS, SGI IRIX and Linux are the only two OS's t
oplock aware at this time.
</p><p>
Unless your system supports kernel oplocks, you should disable oplocks if you are
-accessing the same files from both Unix/Linux and SMB clients. Regardless, oplocks should
+accessing the same files from both UNIX/Linux and SMB clients. Regardless, oplocks should
always be disabled if you are sharing a database file (e.g., Microsoft Access) between
multiple clients, as any break the first client receives will affect synchronisation of
the entire file (not just the single record), which will result in a noticeable performance
@@ -5233,29 +5033,23 @@ of your client sending oplock breaks and will instead want to disable oplocks fo
</p><p>
Another factor to consider is the perceived performance of file access. If oplocks provide no
measurable speed benefit on your network, it might not be worth the hassle of dealing with them.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908013"></a>Example Configuration</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892041"></a>Example Configuration</h3></div></div><div></div></div><p>
In the following we examine two distinct aspects of Samba locking controls.
-</p><div xmlns:ns38="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2908026"></a>Disabling Oplocks</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2892054"></a>Disabling Oplocks</h4></div></div><div></div></div><p>
You can disable oplocks on a per-share basis with the following:
-</p><ns38:p>
-</ns38:p><pre class="programlisting">
-[acctdata]
- oplocks = False
- level2 oplocks = False
-</pre><ns38:p>
-</ns38:p><p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[acctdata]</tt></i></td></tr><tr><td><i class="parameter"><tt>oplocks = False</tt></i></td></tr><tr><td><i class="parameter"><tt>level2 oplocks = False</tt></i></td></tr></table><p>
+</p><p>
The default oplock type is Level1. Level2 Oplocks are enabled on a per-share basis
in the <tt class="filename">smb.conf</tt> file.
</p><p>
Alternately, you could disable oplocks on a per-file basis within the share:
-</p><ns38:p>
-</ns38:p><pre class="programlisting">
- veto oplock files = /*.mdb/*.MDB/*.dbf/*.DBF/
-</pre><ns38:p>
-</ns38:p><p>
+</p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>veto oplock files = /*.mdb/*.MDB/*.dbf/*.DBF/</tt></i></td></tr></table><p>
+</p><p>
If you are experiencing problems with oplocks as apparent from Samba's log entries,
you may want to play it safe and disable oplocks and level2 oplocks.
-</p></div><div xmlns:ns39="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2908088"></a>Disabling Kernel OpLocks</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2892152"></a>Disabling Kernel OpLocks</h4></div></div><div></div></div><p>
Kernel OpLocks is an <tt class="filename">smb.conf</tt> parameter that notifies Samba (if
the UNIX kernel has the capability to send a Windows client an oplock
break) when a UNIX process is attempting to open the file that is
@@ -5267,13 +5061,10 @@ to the risk of data corruption. If the UNIX kernel has the ability to
send an oplock break, then the kernel oplocks parameter enables Samba
to send the oplock break. Kernel oplocks are enabled on a per-server
basis in the <tt class="filename">smb.conf</tt> file.
-</p><ns39:p>
-</ns39:p><pre class="programlisting">
-[global]
-kernel oplocks = yes
-</pre><ns39:p>
+</p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>kernel oplocks = yes</tt></i></td></tr></table><p>
The default is &quot;no&quot;.
-</ns39:p><p>
+</p><p>
Veto OpLocks is an <tt class="filename">smb.conf</tt> parameter that identifies specific files for
which Oplocks are disabled. When a Windows client opens a file that
has been configured for veto oplocks, the client will not be granted
@@ -5285,26 +5076,17 @@ allow Windows clients to utilize the performance benefit of file
caching without the risk of data corruption. Veto Oplocks can be
enabled on a per-share basis, or globally for the entire server, in the
<tt class="filename">smb.conf</tt> file:
-</p><ns39:p>
-</ns39:p><pre class="programlisting"><font color="red">&lt;title&gt;Example Veto OpLock Settings&lt;/title&gt;</font>
-[global]
- veto oplock files = /filename.htm/*.txt/
-
-[share_name]
- veto oplock files = /*.exe/filename.ext/
-</pre><ns39:p>
-</ns39:p><p>
-<span class="emphasis"><em>Oplock break wait time</em></span> is an <tt class="filename">smb.conf</tt> parameter that adjusts the time
+</p><p>
+</p><div class="example"><a name="id2892244"></a><p class="title"><b>Example14.1.Share with some files oplocked</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>veto oplock files = /filename.htm/*.txt/</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[share_name]</tt></i></td></tr><tr><td><i class="parameter"><tt>veto oplock files = /*.exe/filename.ext/</tt></i></td></tr></table></div><p>
+</p><p>
+ <a class="indexterm" name="id2892299"></a><i class="parameter"><tt>oplock break wait time</tt></i> is an <tt class="filename">smb.conf</tt> parameter that adjusts the time
interval for Samba to reply to an oplock break request. Samba
recommends &quot;DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND
UNDERSTOOD THE SAMBA OPLOCK CODE.&quot; Oplock Break Wait Time can only be
configured globally in the <tt class="filename">smb.conf</tt> file:
-</p><ns39:p>
-</ns39:p><pre class="programlisting">
-[global]
- oplock break wait time = 0 (default)
-</pre><ns39:p>
-</ns39:p><p>
+</p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>oplock break wait time = 0 (default)</tt></i></td></tr></table><p>
+</p><p>
<span class="emphasis"><em>Oplock break contention limit</em></span> is an <tt class="filename">smb.conf</tt> parameter that limits the
response of the Samba server to grant an oplock if the configured
number of contending clients reaches the limit specified by the
@@ -5312,15 +5094,9 @@ parameter. Samba recommends &quot;DO NOT CHANGE THIS PARAMETER UNLESS YOU
HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE.&quot; Oplock Break
Contention Limit can be enable on a per-share basis, or globally for
the entire server, in the <tt class="filename">smb.conf</tt> file:
-</p><ns39:p>
-</ns39:p><pre class="programlisting">
-[global]
- oplock break contention limit = 2 (default)
-
-[share_name]
- oplock break contention limit = 2 (default)
-</pre><ns39:p>
-</ns39:p></div></div></div><div xmlns:ns40="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2908272"></a>MS Windows Opportunistic Locking and Caching Controls</h2></div></div><div></div></div><p>
+</p><p>
+ </p><div class="example"><a name="id2892403"></a><p class="title"><b>Example14.2.</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>oplock break contention limit = 2 (default)</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[share_name]</tt></i></td></tr><tr><td><i class="parameter"><tt>oplock break contention limit = 2 (default)</tt></i></td></tr></table></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892456"></a>MS Windows Opportunistic Locking and Caching Controls</h2></div></div><div></div></div><p>
There is a known issue when running applications (like Norton Anti-Virus) on a Windows 2000/ XP
workstation computer that can affect any application attempting to access shared database files
across a network. This is a result of a default setting configured in the Windows 2000/XP
@@ -5357,20 +5133,20 @@ Windows 2000 will still respect the EnableOplocks registry value used to disable
in earlier versions of Windows.
</p></div><p>
You can also deny the granting of opportunistic locks by changing the following registry entries:
-</p><ns40:p>
-</ns40:p><pre class="programlisting">
+</p><p>
+</p><pre class="programlisting">
HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Services\MRXSmb\Parameters\
OplocksDisabled REG_DWORD 0 or 1
Default: 0 (not disabled)
-</pre><ns40:p>
-</ns40:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</pre><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The OplocksDisabled registry value configures Windows clients to either request or not
request opportunistic locks on a remote file. To disable oplocks, the value of
OplocksDisabled must be set to 1.
-</p></div><ns40:p>
-</ns40:p><pre class="programlisting">
+</p></div><p>
+</p><pre class="programlisting">
HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Services\LanmanServer\Parameters
@@ -5379,8 +5155,8 @@ request opportunistic locks on a remote file. To disable oplocks, the value of
EnableOpLockForceClose REG_DWORD 0 or 1
Default: 0 (Disabled by Default)
-</pre><ns40:p>
-</ns40:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</pre><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The EnableOplocks value configures Windows-based servers (including Workstations sharing
files) to allow or deny opportunistic locks on local files.
</p></div><p>
@@ -5412,7 +5188,7 @@ An illustration of how level II oplocks work:
station holds any oplock on the file. Because the workstations can have no cached
writes or locks at this point, they need not respond to the break-to-none advisory;
all they need do is invalidate locally cashed read-ahead data.
- </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910709"></a>Workstation Service Entries</h3></div></div><div></div></div><pre class="programlisting">
+ </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892680"></a>Workstation Service Entries</h3></div></div><div></div></div><pre class="programlisting">
\HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Services\LanmanWorkstation\Parameters
@@ -5421,7 +5197,7 @@ An illustration of how level II oplocks work:
</pre><p>
Indicates whether the redirector should use opportunistic-locking (oplock) performance
enhancement. This parameter should be disabled only to isolate problems.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910736"></a>Server Service Entries</h3></div></div><div></div></div><pre class="programlisting">
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892709"></a>Server Service Entries</h3></div></div><div></div></div><pre class="programlisting">
\HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Services\LanmanServer\Parameters
@@ -5450,8 +5226,8 @@ the server disables raw I/O and opportunistic locking for this connection.
Specifies the time that the server waits for a client to respond to an oplock break
request. Smaller values can allow detection of crashed clients more quickly but can
potentially cause loss of cached data.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910816"></a>Persistent Data Corruption</h2></div></div><div></div></div><p>
-If you have applied all of the settings discussed in this paper but data corruption problems
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892788"></a>Persistent Data Corruption</h2></div></div><div></div></div><p>
+If you have applied all of the settings discussed in this chapter but data corruption problems
and other symptoms persist, here are some additional things to check out:
</p><p>
We have credible reports from developers that faulty network hardware, such as a single
@@ -5461,7 +5237,7 @@ rebuild the data files in question. This involves creating a new data file with
same definition as the file to be rebuilt and transferring the data from the old file
to the new one. There are several known methods for doing this that can be found in
our Knowledge Base.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910846"></a>Common Errors</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892817"></a>Common Errors</h2></div></div><div></div></div><p>
In some sites locking problems surface as soon as a server is installed, in other sites
locking problems may not surface for a long time. Almost without exception, when a locking
problem does surface it will cause embarrassment and potential data corruption.
@@ -5491,18 +5267,23 @@ so far:
report on https://bugzilla.samba.org without delay. Make sure that you give as much
information as you possibly can to help isolate the cause and to allow reproduction
of the problem (an essential step in problem isolation and correction).
- </p></li></ul></div><div xmlns:ns41="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910919"></a>locking.tdb error messages</h3></div></div><div></div></div><ns41:p>
- </ns41:p><pre class="screen">
- &gt; We are seeing lots of errors in the samba logs like:
- &gt;
- &gt; tdb(/usr/local/samba_2.2.7/var/locks/locking.tdb): rec_read bad magic
- &gt; 0x4d6f4b61 at offset=36116
- &gt;
- &gt; What do these mean?
- </pre><ns41:p>
- </ns41:p><p>
+ </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892891"></a>locking.tdb error messages</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">
+ We are seeing lots of errors in the samba logs like:
+</span>&#8221;
+</p><pre class="programlisting">
+tdb(/usr/local/samba_2.2.7/var/locks/locking.tdb): rec_read bad magic
+ 0x4d6f4b61 at offset=36116
+</pre><p>
+&#8220;<span class="quote">
+ What do these mean?
+ </span>&#8221;
+ </p><p>
Corrupted tdb. Stop all instances of smbd, delete locking.tdb, restart smbd.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910950"></a>Additional Reading</h2></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892930"></a>Problems saving files in MS Office on Windows XP</h3></div></div><div></div></div><p>This is a bug in Windows XP. More information can be
+ found in <a href="http://support.microsoft.com/?id=812937" target="_top">Microsoft Knowledge Base article 812937</a>.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892952"></a>Long delays deleting files over network with XP SP1</h3></div></div><div></div></div><p>&#8220;<span class="quote">It sometimes takes approximately 35 seconds to delete files over the network after XP SP1 has been applied</span>&#8221;</p><p>This is a bug in Windows XP. More information can be
+ found in <a href="http://support.microsoft.com/?id=811492" target="_top">
+ Microsoft Knowledge Base article 811492</a>.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892983"></a>Additional Reading</h2></div></div><div></div></div><p>
You may want to check for an updated version of this white paper on our Web site from
time to time. Many of our white papers are updated as information changes. For those papers,
the Last Edited date is always at the top of the paper.
@@ -5522,7 +5303,7 @@ Microsoft Corporation, April 2001, <a href="http://support.microsoft.com/default
</p><p>
Microsoft Knowledge Base Article Q129202 &quot;PC Ext: Explanation of Opportunistic Locking on Windows NT&quot;,
Microsoft Corporation, April 1995, <a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;Q129202" target="_top">http://support.microsoft.com/default.aspx?scid=kb;en-us;Q129202</a>.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="securing-samba"></a>Chapter15.Securing Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 26, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2912374">Introduction</a></dt><dt><a href="#id2912407">Features and Benefits</a></dt><dt><a href="#id2911067">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2911085">Using host based protection</a></dt><dt><a href="#id2911154">User based protection</a></dt><dt><a href="#id2911205">Using interface protection</a></dt><dt><a href="#id2911256">Using a firewall</a></dt><dt><a href="#id2911312">Using a IPC$ share deny</a></dt><dt><a href="#id2911377">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2911416">Upgrading Samba</a></dt><dt><a href="#id2911439">Common Errors</a></dt><dd><dl><dt><a href="#id2911458">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2911483">Why can users access home directories of other users?</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912374"></a>Introduction</h2></div></div><div></div></div><p>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="securing-samba"></a>Chapter15.Securing Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 26, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2893158">Introduction</a></dt><dt><a href="#id2893195">Features and Benefits</a></dt><dt><a href="#id2893269">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="#id2893288">Using host based protection</a></dt><dt><a href="#id2893387">User based protection</a></dt><dt><a href="#id2893447">Using interface protection</a></dt><dt><a href="#id2893515">Using a firewall</a></dt><dt><a href="#id2893572">Using a IPC$ share deny</a></dt><dt><a href="#id2893660">NTLMv2 Security</a></dt></dl></dd><dt><a href="#id2893719">Upgrading Samba</a></dt><dt><a href="#id2893743">Common Errors</a></dt><dd><dl><dt><a href="#id2893761">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="#id2893786">Why can users access home directories of other users?</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893158"></a>Introduction</h2></div></div><div></div></div><p>
This note was attached to the Samba 2.2.8 release notes as it contained an
important security fix. The information contained here applies to Samba
installations in general.
@@ -5534,7 +5315,7 @@ on it!&quot;
Security concerns are just like that: You need to know a little about the subject to appreciate
how obvious most of it really is. The challenge for most of us is to discover that first morsel
of knowledge with which we may unlock the secrets of the masters.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912407"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893195"></a>Features and Benefits</h2></div></div><div></div></div><p>
There are three level at which security principals must be observed in order to render a site
at least moderately secure. These are: the perimeter firewall, the configuration of the host
server that is running Samba, and Samba itself.
@@ -5546,58 +5327,50 @@ Samba may be secured from connections that originate from outside the local netw
done using <span class="emphasis"><em>host based protection</em></span> (using samba's implementation of a technology
known as &quot;tcpwrappers&quot;, or it may be done be using <span class="emphasis"><em>interface based exclusion</em></span>
so that <span class="application">smbd</span> will bind only to specifically permitted interfaces. It is also
-possible to set specific share or resource based exclusions, eg: on the <i class="parameter"><tt>IPC$</tt></i>
-auto-share. The <i class="parameter"><tt>IPC$</tt></i> share is used for browsing purposes as well as to establish
+possible to set specific share or resource based exclusions, eg: on the <i class="parameter"><tt>[IPC$]</tt></i>
+auto-share. The <i class="parameter"><tt>[IPC$]</tt></i> share is used for browsing purposes as well as to establish
TCP/IP connections.
</p><p>
Another method by which Samba may be secured is by way of setting Access Control Entries in an Access
Control List on the shares themselves. This is discussed in the chapter on File, Directory and Share Access
Control.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911067"></a>Technical Discussion of Protective Measures and Issues</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893269"></a>Technical Discussion of Protective Measures and Issues</h2></div></div><div></div></div><p>
The key challenge of security is the fact that protective measures suffice at best
only to close the door on known exploits and breach techniques. Never assume that
because you have followed these few measures that the Samba server is now an impenetrable
fortress! Given the history of information systems so far, it is only a matter of time
before someone will find yet another vulnerability.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911085"></a>Using host based protection</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893288"></a>Using host based protection</h3></div></div><div></div></div><p>
In many installations of Samba the greatest threat comes for outside
your immediate network. By default Samba will accept connections from
any host, which means that if you run an insecure version of Samba on
a host that is directly connected to the Internet you can be
especially vulnerable.
</p><p>
- One of the simplest fixes in this case is to use the <i class="parameter"><tt>hosts allow</tt></i> and
- <i class="parameter"><tt>hosts deny</tt></i> options in the Samba <tt class="filename">smb.conf</tt> configuration file to only
+ One of the simplest fixes in this case is to use the <a class="indexterm" name="id2893310"></a><i class="parameter"><tt>hosts allow</tt></i> and
+ <a class="indexterm" name="id2893324"></a><i class="parameter"><tt>hosts deny</tt></i> options in the Samba <tt class="filename">smb.conf</tt> configuration file to only
allow access to your server from a specific range of hosts. An example
might be:
- </p><pre class="programlisting">
- hosts allow = 127.0.0.1 192.168.2.0/24 192.168.3.0/24
- hosts deny = 0.0.0.0/0
- </pre><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>hosts allow = 127.0.0.1 192.168.2.0/24 192.168.3.0/24</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts deny = 0.0.0.0/0</tt></i></td></tr></table><p>
The above will only allow SMB connections from 'localhost' (your own
computer) and from the two private networks 192.168.2 and
192.168.3. All other connections will be refused as soon
as the client sends its first packet. The refusal will be marked as a
<span class="errorname">not listening on called name</span> error.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911154"></a>User based protection</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893387"></a>User based protection</h3></div></div><div></div></div><p>
If you want to restrict access to your server to valid users only then the following
- method may be of use. In the <tt class="filename">smb.conf</tt> <i class="parameter"><tt>[globals]</tt></i> section put:
- </p><pre class="programlisting">
- valid users = @smbusers, jacko
- </pre><p>
+ method may be of use. In the <tt class="filename">smb.conf</tt> <i class="parameter"><tt>[global]</tt></i> section put:
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>valid users = @smbusers, jacko</tt></i></td></tr></table><p>
What this does is, it restricts all server access to either the user <span class="emphasis"><em>jacko</em></span>
or to members of the system group <span class="emphasis"><em>smbusers</em></span>.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911205"></a>Using interface protection</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893447"></a>Using interface protection</h3></div></div><div></div></div><p>
By default Samba will accept connections on any network interface that
it finds on your system. That means if you have a ISDN line or a PPP
connection to the Internet then Samba will accept connections on those
links. This may not be what you want.
</p><p>
You can change this behaviour using options like the following:
- </p><pre class="programlisting">
- interfaces = eth* lo
- bind interfaces only = yes
- </pre><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>interfaces = eth* lo</tt></i></td></tr><tr><td><i class="parameter"><tt>bind interfaces only = yes</tt></i></td></tr></table><p>
This tells Samba to only listen for connections on interfaces with a
name starting with 'eth' such as eth0, eth1, plus on the loopback
interface called 'lo'. The name you will need to use depends on what
@@ -5609,7 +5382,7 @@ before someone will find yet another vulnerability.
connection refused reply. In that case no Samba code is run at all as
the operating system has been told not to pass connections from that
interface to any samba process.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911256"></a>Using a firewall</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893515"></a>Using a firewall</h3></div></div><div></div></div><p>
Many people use a firewall to deny access to services that they don't
want exposed outside their network. This can be a very good idea,
although I would recommend using it in conjunction with the above
@@ -5622,7 +5395,7 @@ before someone will find yet another vulnerability.
The last one is important as many older firewall setups may not be
aware of it, given that this port was only added to the protocol in
recent years.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911312"></a>Using a IPC$ share deny</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893572"></a>Using a IPC$ share deny</h3></div></div><div></div></div><p>
If the above methods are not suitable, then you could also place a
more specific deny on the IPC$ share that is used in the recently
discovered security hole. This allows you to offer access to other
@@ -5630,11 +5403,7 @@ before someone will find yet another vulnerability.
hosts.
</p><p>
To do that you could use:
- </p><pre class="programlisting">
-[ipc$]
- hosts allow = 192.168.115.0/24 127.0.0.1
- hosts deny = 0.0.0.0/0
- </pre><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[ipc$]</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts allow = 192.168.115.0/24 127.0.0.1</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts deny = 0.0.0.0/0</tt></i></td></tr></table><p>
this would tell Samba that IPC$ connections are not allowed from
anywhere but the two listed places (localhost and a local
subnet). Connections to other shares would still be allowed. As the
@@ -5649,42 +5418,44 @@ before someone will find yet another vulnerability.
</p><p>
This is not recommended unless you cannot use one of the other
methods listed above for some reason.
- </p></div><div xmlns:ns42="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911377"></a>NTLMv2 Security</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893660"></a>NTLMv2 Security</h3></div></div><div></div></div><p>
To configure NTLMv2 authentication the following registry keys are worth knowing about:
- </p><ns42:p>
- </ns42:p><pre class="screen">
+ </p><p>
+ </p><pre class="screen">
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
&quot;lmcompatibilitylevel&quot;=dword:00000003
-
+ </pre><p>
+ </p><p>
0x3 - Send NTLMv2 response only. Clients will use NTLMv2 authentication,
use NTLMv2 session security if the server supports it. Domain
controllers accept LM, NTLM and NTLMv2 authentication.
-
+ </p><p>
+ </p><pre class="screen">
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0]
&quot;NtlmMinClientSec&quot;=dword:00080000
-
+ </pre><p>
+ </p><p>
0x80000 - NTLMv2 session security. If either NtlmMinClientSec or
NtlmMinServerSec is set to 0x80000, the connection will fail if NTLMv2
session security is not negotiated.
- </pre><ns42:p>
- </ns42:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911416"></a>Upgrading Samba</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893719"></a>Upgrading Samba</h2></div></div><div></div></div><p>
Please check regularly on <a href="http://www.samba.org/" target="_top">http://www.samba.org/</a> for updates and
important announcements. Occasionally security releases are made and
it is highly recommended to upgrade Samba when a security vulnerability
-is discovered.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911439"></a>Common Errors</h2></div></div><div></div></div><p>
+is discovered. Check with your OS vendor for OS specific upgrades.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893743"></a>Common Errors</h2></div></div><div></div></div><p>
If all of samba and host platform configuration were really as intuitive as one might like then this
section would not be necessary. Security issues are often vexing for a support person to resolve, not
because of the complexity of the problem, but for reason that most administrators who post what turns
out to be a security problem request are totally convinced that the problem is with Samba.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911458"></a>Smbclient works on localhost, but the network is dead</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893761"></a>Smbclient works on localhost, but the network is dead</h3></div></div><div></div></div><p>
This is a very common problem. Red Hat Linux (as do others) will install a default firewall.
With the default firewall in place only traffic on the loopback adapter (IP address 127.0.0.1)
will be allowed through the firewall.
</p><p>
The solution is either to remove the firewall (stop it) or to modify the firewall script to
allow SMB networking traffic through. See section above in this chapter.
- </p></div><div xmlns:ns43="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911483"></a>Why can users access home directories of other users?</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893786"></a>Why can users access home directories of other users?</h3></div></div><div></div></div><p>
&#8220;<span class="quote">
We are unable to keep individual users from mapping to any other user's
home directory once they have supplied a valid password! They only need
@@ -5713,27 +5484,24 @@ out to be a security problem request are totally convinced that the problem is w
the policies and permissions he or she desires.
</p><p>
Samba does allow the setup you require when you have set the
- <i class="parameter"><tt>only user = yes</tt></i> option on the share, is that you have not set the
+ <a class="indexterm" name="id2893846"></a><i class="parameter"><tt>only user</tt></i> = yes option on the share, is that you have not set the
valid users list for the share.
- </p><ns43:p>
+ </p><p>
Note that only user works in conjunction with the users= list,
so to get the behavior you require, add the line :
- </ns43:p><pre class="programlisting">
- users = %S
- </pre><ns43:p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>users = %S</tt></i></td></tr></table><p>
this is equivalent to:
- </ns43:p><pre class="programlisting">
- valid users = %S
- </pre><ns43:p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>valid users = %S</tt></i></td></tr></table><p>
to the definition of the <i class="parameter"><tt>[homes]</tt></i> share, as recommended in
the <tt class="filename">smb.conf</tt> man page.
- </ns43:p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="InterdomainTrusts"></a>Chapter16.Interdomain Trust Relationships</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Rafal</span> <span class="surname">Szczesniak</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:mimir@samba.org">mimir@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2912001">Features and Benefits</a></dt><dt><a href="#id2912030">Trust Relationship Background</a></dt><dt><a href="#id2912113">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2912125">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="#id2914100">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="#id2914137">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#id2914164">Samba-3 as the Trusting Domain</a></dt><dt><a href="#id2914290">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="#id2911669">Common Errors</a></dt><dd><dl><dt><a href="#id2911684">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></div><p>
+ </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="InterdomainTrusts"></a>Chapter16.Interdomain Trust Relationships</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Rafal</span> <span class="surname">Szczesniak</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:mimir@samba.org">mimir@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><span class="contrib">drawing</span><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Langasek</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:vorlon@netexpress.net">vorlon@netexpress.net</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2894077">Features and Benefits</a></dt><dt><a href="#id2894106">Trust Relationship Background</a></dt><dt><a href="#id2894193">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="#id2894221">Creating an NT4 Domain Trust</a></dt><dt><a href="#id2894294">Completing an NT4 Domain Trust</a></dt><dt><a href="#id2894341">Inter-Domain Trust Facilities</a></dt></dl></dd><dt><a href="#id2894518">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="#samba-trusted-domain">Samba as the Trusted Domain</a></dt><dt><a href="#id2894704">Samba as the Trusting Domain</a></dt></dl></dd><dt><a href="#id2894842">NT4-style Domain Trusts with Windows 2000</a></dt><dt><a href="#id2894948">Common Errors</a></dt></dl></div><a class="indexterm" name="id2894056"></a><p>
Samba-3 supports NT4 style domain trust relationships. This is feature that many sites
will want to use if they migrate to Samba-3 from and NT4 style domain and do NOT want to
adopt Active Directory or an LDAP based authentication back end. This section explains
some background information regarding trust relationships and how to create them. It is now
-possible for Samba-3 to NT4 trust (and vice versa), as well as Samba3 to Samba3 trusts.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912001"></a>Features and Benefits</h2></div></div><div></div></div><p>
+possible for Samba-3 to trust NT4 (and vice versa), as well as to create Samba3-to-Samba3
+trusts.
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894077"></a>Features and Benefits</h2></div></div><div></div></div><p>
Samba-3 can participate in Samba-to-Samba as well as in Samba-to-MS Windows NT4 style
trust relationships. This imparts to Samba similar scalability as is possible with
MS Windows NT4.
@@ -5743,10 +5511,10 @@ database such as LDAP, and given it's ability to run in Primary as well as Backu
modes, the administrator would be well advised to consider alternatives to the use of
Interdomain trusts simply because by the very nature of how this works it is fragile.
That was, after all, a key reason for the development and adoption of Microsoft Active Directory.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912030"></a>Trust Relationship Background</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894106"></a>Trust Relationship Background</h2></div></div><div></div></div><p>
MS Windows NT3.x/4.0 type security domains employ a non-hierarchical security structure.
The limitations of this architecture as it affects the scalability of MS Windows networking
-in large organisations is well known. Additionally, the flat-name space that results from
+in large organisations is well known. Additionally, the flat namespace that results from
this design significantly impacts the delegation of administrative responsibilities in
large and diverse organisations.
</p><p>
@@ -5772,90 +5540,136 @@ relationship, and WHITE and BLUE have a trust relationship, then it holds that t
implied trust between the RED and BLUE domains. ie: Relationships are explicit and not
transitive.
</p><p>
+
New to MS Windows 2000 ADS security contexts is the fact that trust relationships are two-way
by default. Also, all inter-ADS domain trusts are transitive. In the case of the RED, WHITE and BLUE
domains above, with Windows 2000 and ADS the RED and BLUE domains CAN trust each other. This is
an inherent feature of ADS domains. Samba-3 implements MS Windows NT4
style Interdomain trusts and interoperates with MS Windows 200x ADS
security domains in similar manner to MS Windows NT4 style domains.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912113"></a>Native MS Windows NT4 Trusts Configuration</h2></div></div><div></div></div><p>
-There are two steps to creating an interdomain trust relationship.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912125"></a>NT4 as the Trusting Domain (ie. creating the trusted account)</h3></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894193"></a>Native MS Windows NT4 Trusts Configuration</h2></div></div><div></div></div><p>
+There are two steps to creating an interdomain trust relationship. To effect a two-way trust
+relationship it is necessary for each domain administrator to create a trust account for the
+other domain to use in verifying security credentials.
+
+<a class="indexterm" name="id2894210"></a>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894221"></a>Creating an NT4 Domain Trust</h3></div></div><div></div></div><p>
For MS Windows NT4, all domain trust relationships are configured using the
-<span class="application">Domain User Manager</span>. To affect a two way trust relationship it is
-necessary for each domain administrator to make available (for use by an external domain) it's
-security resources. This is done from the Domain User Manager Policies entry on the menu bar.
-From the <span class="guimenu">Policy</span> menu, select <span class="guimenuitem">Trust Relationships</span>, then
-next to the lower box that is labelled <span class="guilabel">Permitted to Trust this Domain</span> are two
-buttons, <span class="guibutton">Add</span> and <span class="guibutton">Remove</span>. The <span class="guibutton">Add</span>
-button will open a panel in which needs to be entered the remote domain that will be able to assign
-user rights to your domain. In addition it is necessary to enter a password
-that is specific to this trust relationship. The password needs to be
-typed twice (for standard confirmation).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914100"></a>NT4 as the Trusted Domain (ie. creating trusted account's password)</h3></div></div><div></div></div><p>
+<span class="application">Domain User Manager</span>. This is done from the Domain User Manager Policies
+entry on the menu bar. From the <span class="guimenu">Policy</span> menu, select
+<span class="guimenuitem">Trust Relationships</span>. Next to the lower box labelled
+<span class="guilabel">Permitted to Trust this Domain</span> are two buttons, <span class="guibutton">Add</span>
+and <span class="guibutton">Remove</span>. The <span class="guibutton">Add</span> button will open a panel in which
+to enter the name of the remote domain that will be able to assign access rights to users in
+your domain. You will also need to enter a password for this trust relationship, which the
+trusting domain will use when authenticating users from the trusted domain.
+The password needs to be typed twice (for standard confirmation).
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894294"></a>Completing an NT4 Domain Trust</h3></div></div><div></div></div><p>
+<a class="indexterm" name="id2894305"></a>
A trust relationship will work only when the other (trusting) domain makes the appropriate connections
with the trusted domain. To consummate the trust relationship the administrator will launch the
Domain User Manager, from the menu select Policies, then select Trust Relationships, then click on the
<span class="guibutton">Add</span> button that is next to the box that is labelled
<span class="guilabel">Trusted Domains</span>. A panel will open in which must be entered the name of the remote
domain as well as the password assigned to that trust.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914137"></a>Configuring Samba NT-style Domain Trusts</h2></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894341"></a>Inter-Domain Trust Facilities</h3></div></div><div></div></div><a class="indexterm" name="id2894348"></a><p>
+A two-way trust relationship is created when two one-way trusts are created, one in each direction.
+Where a one-way trust has been established between two MS Windows NT4 domains (let's call them
+DomA and DomB) the following facilities are created:
+</p><div class="figure"><a name="trusts1"></a><p class="title"><b>Figure16.1.Trusts overview</b></p><div class="mediaobject"><img src="projdoc/imagefiles/trusts1.png" width="270" alt="Trusts overview"></div></div><div class="itemizedlist"><ul type="disc"><li><p>
+ DomA (completes the trust connection) Trusts DomB
+ </p></li><li><p>
+ DomA is the Trusting domain
+ </p></li><li><p>
+ DomB is the Trusted domain (originates the trust account)
+ </p></li><li><p>
+ Users in DomB can access resources in DomA
+ </p></li><li><p>
+ Users in DomA can NOT access resources in DomB
+ </p></li><li><p>
+ Global groups from DomB CAN be used in DomA
+ </p></li><li><p>
+ Global groups from DomA can NOT be used in DomB
+ </p></li><li><p>
+ DomB DOES appear in the logon dialog box on client workstations in DomA
+ </p></li><li><p>
+ DomA does NOT appear in the logon dialog box on client workstations in DomB
+ </p></li></ul></div><div class="itemizedlist"><ul type="disc"><li><p>
+ Users / Groups in a trusting domain can NOT be granted rights, permissions or access
+ to a trusted domain.
+ </p></li><li><p>
+ The trusting domain CAN access and use accounts (Users / Global Groups) in the
+ trusted domain.
+ </p></li><li><p>
+ Administrators of the trusted domain CAN be granted admininstrative rights in the
+ trusting domain.
+ </p></li><li><p>
+ Users in a trusted domain CAN be given rights and privileges in the trusting
+ domain.
+ </p></li><li><p>
+ Trusted domain Global Groups CAN be given rights and permissions in the trusting
+ domain.
+ </p></li><li><p>
+ Global Groups from the trusted domain CAN be made members in Local Groups on
+ MS Windows domain member machines.
+ </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894518"></a>Configuring Samba NT-style Domain Trusts</h2></div></div><div></div></div><p>
This description is meant to be a fairly short introduction about how to set up a Samba server so
that it could participate in interdomain trust relationships. Trust relationship support in Samba
is in its early stage, so lot of things don't work yet.
</p><p>
-Each of the procedures described below is treated as they were performed with Windows NT4 Server on
-one end. The remote end could just as well be another Samba-3 domain. It can be clearly seen, after
-reading this document, that combining Samba-specific parts of what's written below leads to trust
-between domains in purely Samba environment.
-</p><div xmlns:ns44="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914164"></a>Samba-3 as the Trusting Domain</h3></div></div><div></div></div><p>
-In order to set the Samba PDC to be the trusted party of the relationship first you need
-to create special account for the domain that will be the trusting party. To do that,
+Each of the procedures described below assumes the peer domain in the trust relationship is
+controlled by a Windows NT4 server. However, the remote end could just as well be another
+Samba-3 domain. It can be clearly seen, after reading this document, that combining
+Samba-specific parts of what's written below leads to trust between domains in a purely Samba
+environment.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="samba-trusted-domain"></a>Samba as the Trusted Domain</h3></div></div><div></div></div><p>
+In order to set the Samba PDC to be the trusted party of the relationship you first need
+to create a special account for the domain that will be the trusting party. To do that,
you can use the 'smbpasswd' utility. Creating the trusted domain account is very
similar to creating a trusted machine account. Suppose, your domain is
called SAMBA, and the remote domain is called RUMBA. The first step
will be to issue this command from your favourite shell:
-</p><ns44:p>
-</ns44:p><pre class="screen">
+</p><p>
+</p><pre class="screen">
<tt class="prompt">root# </tt> <b class="userinput"><tt>smbpasswd -a -i rumba</tt></b>
- New SMB password: XXXXXXXX
- Retype SMB password: XXXXXXXX
- Added user rumba$
-</pre><ns44:p>
+New SMB password: <b class="userinput"><tt>XXXXXXXX</tt></b>
+Retype SMB password: <b class="userinput"><tt>XXXXXXXX</tt></b>
+Added user rumba$
+</pre><p>
where <tt class="option">-a</tt> means to add a new account into the
passdb database and <tt class="option">-i</tt> means: ''create this
account with the InterDomain trust flag''
-</ns44:p><p>
+</p><p>
The account name will be 'rumba$' (the name of the remote domain)
</p><p>
After issuing this command you'll be asked to enter the password for
the account. You can use any password you want, but be aware that Windows NT will
not change this password until 7 days following account creation.
After the command returns successfully, you can look at the entry for the new account
-(in the standard way depending on your configuration) and see that account's name is
-really RUMBA$ and it has 'I' flag in the flags field. Now you're ready to confirm
+(in the standard way as appropriate for your configuration) and see that account's name is
+really RUMBA$ and it has the 'I' flag set in the flags field. Now you're ready to confirm
the trust by establishing it from Windows NT Server.
-</p><p>
-Open <span class="application">User Manager for Domains</span> and from menu
-<span class="guimenu">Policies</span> select <span class="guimenuitem">Trust Relationships...</span>.
-Right beside <span class="guilabel">Trusted domains</span> list box press the
+</p><a class="indexterm" name="id2894642"></a><p>
+Open <span class="application">User Manager for Domains</span> and from the
+<span class="guimenu">Policies</span> menu, select <span class="guimenuitem">Trust Relationships...</span>.
+Right beside the <span class="guilabel">Trusted domains</span> list box press the
<span class="guimenu">Add...</span> button. You will be prompted for
the trusted domain name and the relationship password. Type in SAMBA, as this is
-your domain name, and the password used at the time of account creation.
+the name of the remote domain, and the password used at the time of account creation.
Press OK and, if everything went without incident, you will see
<tt class="computeroutput">Trusted domain relationship successfully
established</tt> message.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914290"></a>Samba-3 as the Trusted Domain</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894704"></a>Samba as the Trusting Domain</h3></div></div><div></div></div><p>
This time activities are somewhat reversed. Again, we'll assume that your domain
controlled by the Samba PDC is called SAMBA and NT-controlled domain is called RUMBA.
</p><p>
-The very first thing requirement is to add an account for the SAMBA domain on RUMBA's PDC.
-</p><p>
+The very first step is to add an account for the SAMBA domain on RUMBA's PDC.
+</p><a class="indexterm" name="id2894724"></a><p>
Launch the <span class="application">Domain User Manager</span>, then from the menu select
<span class="guimenu">Policies</span>, <span class="guimenuitem">Trust Relationships</span>.
-Now, next to <span class="guilabel">Trusted Domains</span> box press the <span class="guibutton">Add</span>
-button, and type in the name of the trusted domain (SAMBA) and password securing
+Now, next to the <span class="guilabel">Trusted Domains</span> box press the <span class="guibutton">Add</span>
+button, and type in the name of the trusted domain (SAMBA) and the password to use in securing
the relationship.
</p><p>
The password can be arbitrarily chosen. It is easy to change the password
@@ -5867,61 +5681,60 @@ Using your favourite shell while being logged in as root, issue this command:
<tt class="prompt">root# </tt><b class="userinput"><tt>net rpc trustdom establish rumba</tt></b>
</p><p>
You will be prompted for the password you just typed on your Windows NT4 Server box.
-Do not worry if you see an error message that mentions a returned code of
-<span class="errorname">NT_STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT</span>. It means the
+Do not worry if you see an error message that mentions a return code of
+NT_STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT. It means the
password you gave is correct and the NT4 Server says the account is
ready for interdomain connection and not for ordinary
-connection. After that, be patient it can take a while (especially
-in large networks), you should see the <tt class="computeroutput">Success</tt> message.
+connection. After that, be patient; it can take a while (especially
+in large networks), but eventually you should see the <tt class="computeroutput">Success</tt> message.
Congratulations! Your trust relationship has just been established.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Note that you have to run this command as root because you must have write access to
the <tt class="filename">secrets.tdb</tt> file.
-</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911669"></a>Common Errors</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894842"></a>NT4-style Domain Trusts with Windows 2000</h2></div></div><div></div></div><p>
+Although <span class="application">Domain User Manager</span> is not present in Windows 2000, it is
+also possible to establish an NT4-style trust relationship with a Windows 2000 domain
+controller running in mixed mode as the trusting server. It should also be possible for
+Samba to trust a Windows 2000 server, however, more testing is still needed in this area.
+</p><p>
+After <a href="#samba-trusted-domain" title="Samba as the Trusted Domain">creating the interdomain trust account on the
+Samba server</a> as described above, open <span class="application">Active Directory Domains and
+Trusts</span> on the AD controller of the domain whose resources you wish Samba users
+to have access to. Remember that since NT4-style trusts are not transitive, if you want
+your users to have access to multiple mixed-mode domains in your AD forest, you will need to
+repeat this process for each of those domains. With <span class="application">Active Directory Domains
+and Trusts</span> open, right-click on the name of the Active Directory domain that
+will trust our Samba domain and choose <span class="guimenuitem">Properties</span>, then click on
+the <span class="guilabel">Trusts</span> tab. In the upper part of the panel, you will see a list box
+labelled <span class="guilabel">Domains trusted by this domain:</span>, and an
+<span class="guilabel">Add...</span> button next to it. Press this button, and just as with NT4, you
+will be prompted for the trusted domain name and the relationship password. Press OK, and
+after a moment, Active Directory will respond with <tt class="computeroutput">The trusted domain has
+been added and the trust has been verified.</tt> Your Samba users can now be
+granted acess to resources in the AD domain.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894948"></a>Common Errors</h2></div></div><div></div></div><p>
Interdomain trust relationships should NOT be attempted on networks that are unstable
or that suffer regular outages. Network stability and integrity are key concerns with
distributed trusted domains.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911684"></a>Tell me about Trust Relationships using Samba</h3></div></div><div></div></div><p>
- Like many, I administer multiple LANs connected together using NT trust
- relationships. This was implemented about 4 years ago. I now have the
- occasion to consider performing this same task again, but this time, I
- would like to implement it solely through samba - no Microsoft PDCs
- anywhere.
- </p><p>
- I have read documentation on samba.org regarding NT-style trust
- relationships and am now wondering, can I do what I want to? I already
- have successfully implemented 2 samba servers, but they are not PDCs.
- They merely act as file servers. I seem to remember, and it appears to
- be true (according to samba.org) that trust relationships are a
- challenge.
- </p><p>
- Please provide any helpful feedback that you may have.
- </p><p>
- These are almost complete in Samba 3.0 snapshots. The main catch
- is getting winbindd to be able to allocate UID/GIDs for trusted
- users/groups. See the updated Samba HOWTO collection for more
- details.
- </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="msdfs"></a>Chapter17.Hosting a Microsoft Distributed File System tree on Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Shirish</span> <span class="surname">Kalele</span></h3><div class="affiliation"><span class="orgname">Samba Team &amp; Veritas Software<br></span><div class="address"><p><br>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="msdfs"></a>Chapter17.Hosting a Microsoft Distributed File System tree on Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Shirish</span> <span class="surname">Kalele</span></h3><div class="affiliation"><span class="orgname">Samba Team &amp; Veritas Software<br></span><div class="address"><p><br>
<tt class="email">&lt;<a href="mailto:samba@samba.org">samba@samba.org</a>&gt;</tt><br>
- </p></div></div></div></div><div><p class="pubdate">12 Jul 2000</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2911782">Features and Benefits</a></dt><dt><a href="#id2913192">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911782"></a>Features and Benefits</h2></div></div><div></div></div><p>
+ </p></div></div></div></div><div><p class="pubdate">12 Jul 2000</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2895017">Features and Benefits</a></dt><dt><a href="#id2895292">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895017"></a>Features and Benefits</h2></div></div><div></div></div><p>
The Distributed File System (or DFS) provides a means of separating the logical
view of files and directories that users see from the actual physical locations
of these resources on the network. It allows for higher availability, smoother
storage expansion, load balancing etc.
</p><p>
- For information about DFS, refer to
- <a href="http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp" target="_top">
- Microsoft documentation at http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp</a>.
+ For information about DFS, refer to the
+<a href="http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp" target="_top">Microsoft documentation</a>.
</p><p>
- This document explains how to host a DFS tree on a Unix machine (for DFS-aware
+ This document explains how to host a DFS tree on a UNIX machine (for DFS-aware
clients to browse) using Samba.
</p><p>
- To enable SMB-based DFS for Samba, configure it with the <i class="parameter"><tt>--with-msdfs</tt></i>
+ To enable SMB-based DFS for Samba, configure it with the <tt class="option">--with-msdfs</tt>
option. Once built, a Samba server can be made a DFS server by setting the global
- boolean <a href="smb.conf.5.html#HOSTMSDFS" target="_top"><i class="parameter"><tt> host msdfs</tt></i></a>
- parameter in the <tt class="filename">smb.conf </tt> file. You designate a share as a DFS
- root using the share level boolean <a href="smb.conf.5.html#MSDFSROOT" target="_top"><i class="parameter"><tt>
- msdfs root</tt></i></a> parameter. A DFS root directory on Samba hosts DFS
+ boolean <a class="indexterm" name="id2895064"></a><i class="parameter"><tt>host msdfs</tt></i>
+ parameter in the <tt class="filename">smb.conf</tt> file. You designate a share as a DFS
+ root using the share level boolean <a class="indexterm" name="id2895086"></a><i class="parameter"><tt>msdfs root</tt></i> parameter. A DFS root directory on Samba hosts DFS
links in the form of symbolic links that point to other servers. For example, a symbolic link
<tt class="filename">junction-&gt;msdfs:storage1\share1</tt> in the share directory acts
as the DFS junction. When DFS-aware clients attempt to access the junction link,
@@ -5930,23 +5743,14 @@ distributed trusted domains.
DFS trees on Samba work with all DFS-aware clients ranging from Windows 95 to 200x.
</p><p>
Here's an example of setting up a DFS tree on a Samba server.
- </p><pre class="programlisting">
-# The smb.conf file:
-[global]
- netbios name = SMOKEY
- host msdfs = yes
-
-[dfs]
- path = /export/dfsroot
- msdfs root = yes
- </pre><p>In the /export/dfsroot directory we set up our dfs links to
+ </p><div class="example"><a name="id2895128"></a><p class="title"><b>Example17.1.smb.conf with DFS configured</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>netbios name = GANDALF</tt></i></td></tr><tr><td><i class="parameter"><tt>host msdfs = yes</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[dfs]</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /export/dfsroot</tt></i></td></tr><tr><td><i class="parameter"><tt>msdfs root = yes</tt></i></td></tr></table></div><p>In the /export/dfsroot directory we set up our DFS links to
other servers on the network.</p><pre class="screen">
- <tt class="prompt">root# </tt><b class="userinput"><tt>cd /export/dfsroot</tt></b>
- <tt class="prompt">root# </tt><b class="userinput"><tt>chown root /export/dfsroot</tt></b>
- <tt class="prompt">root# </tt><b class="userinput"><tt>chmod 755 /export/dfsroot</tt></b>
- <tt class="prompt">root# </tt><b class="userinput"><tt>ln -s msdfs:storageA\\shareA linka</tt></b>
- <tt class="prompt">root# </tt><b class="userinput"><tt>ln -s msdfs:serverB\\share,serverC\\share linkb</tt></b>
- </pre><p>You should set up the permissions and ownership of
+<tt class="prompt">root# </tt><b class="userinput"><tt>cd /export/dfsroot</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>chown root /export/dfsroot</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>chmod 755 /export/dfsroot</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>ln -s msdfs:storageA\\shareA linka</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>ln -s msdfs:serverB\\share,serverC\\share linkb</tt></b>
+</pre><p>You should set up the permissions and ownership of
the directory acting as the DFS root such that only designated
users can create, delete or modify the msdfs links. Also note
that symlink names should be all lowercase. This limitation exists
@@ -5955,22 +5759,21 @@ distributed trusted domains.
network shares you want, and start Samba.</p><p>Users on DFS-aware clients can now browse the DFS tree
on the Samba server at \\samba\dfs. Accessing
links linka or linkb (which appear as directories to the client)
- takes users directly to the appropriate shares on the network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2913192"></a>Common Errors</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Windows clients need to be rebooted
- if a previously mounted non-dfs share is made a dfs
+ takes users directly to the appropriate shares on the network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895292"></a>Common Errors</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Windows clients need to be rebooted
+ if a previously mounted non-dfs share is made a DFS
root or vice versa. A better way is to introduce a
- new share and make it the dfs root.</p></li><li><p>Currently there's a restriction that msdfs
+ new share and make it the DFS root.</p></li><li><p>Currently there's a restriction that msdfs
symlink names should all be lowercase.</p></li><li><p>For security purposes, the directory
acting as the root of the DFS tree should have ownership
and permissions set so that only designated users can
- modify the symbolic links in the directory.</p></li></ul></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter18.Classical Printing Support</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 32, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2914714">Features and Benefits</a></dt><dt><a href="#id2914778">Technical Introduction</a></dt><dd><dl><dt><a href="#id2914814">What happens if you send a Job from a Client</a></dt><dt><a href="#id2914884">Printing Related Configuration Parameters</a></dt><dt><a href="#id2917993">Parameters Recommended for Use</a></dt><dt><a href="#id2913353">Parameters for Backwards Compatibility</a></dt><dt><a href="#id2913461">Parameters no longer in use</a></dt></dl></dd><dt><a href="#id2913555">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="#id2915561">Verification of &quot;Settings in Use&quot; with testparm</a></dt><dt><a href="#id2915643">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2915950">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="#id2916042">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2916055">The [global] Section</a></dt><dt><a href="#id2925516">The [printers] Section</a></dt><dt><a href="#id2925845">Any [my_printer_name] Section</a></dt><dt><a href="#id2926066">Print Commands</a></dt><dt><a href="#id2926117">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="#id2926642">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2926920">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2927074">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2927225">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="#id2927338">Creating the [print$] Share</a></dt><dt><a href="#id2927409">Parameters in the [print$] Section</a></dt><dt><a href="#id2927630">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2927791">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2927885">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2928069">Setting Drivers for existing Printers with
-rpcclient</a></dt></dl></dd><dt><a href="#id2929667">&quot;The Proof of the Pudding lies in the Eating&quot; (Client Driver Install
-Procedure)</a></dt><dd><dl><dt><a href="#id2929688">The first Client Driver Installation</a></dt><dt><a href="#id2929885">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2930175">Further Client Driver Install Procedures</a></dt><dt><a href="#id2930270">Always make first Client Connection as root or &quot;printer admin&quot;</a></dt></dl></dd><dt><a href="#id2930412">Other Gotchas</a></dt><dd><dl><dt><a href="#id2930445">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2930879">Supporting large Numbers of Printers</a></dt><dt><a href="#id2931181">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2931425">Weird Error Message Cannot connect under a
-different Name</a></dt><dt><a href="#id2931523">Be careful when assembling Driver Files</a></dt><dt><a href="#id2931794">Samba and Printer Ports</a></dt><dt><a href="#id2931864">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2931887">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2931932">What is Imprints?</a></dt><dt><a href="#id2931973">Creating Printer Driver Packages</a></dt><dt><a href="#id2931992">The Imprints Server</a></dt><dt><a href="#id2932017">The Installation Client</a></dt></dl></dd><dt><a href="#id2932169">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2932498">The addprinter command</a></dt><dt><a href="#id2932543">Migration of &quot;Classical&quot; printing to Samba-3</a></dt><dt><a href="#id2932712">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2932726">Common Errors and Problems</a></dt><dd><dl><dt><a href="#id2932739">I give my root password but I don't get access</a></dt><dt><a href="#id2932773">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914714"></a>Features and Benefits</h2></div></div><div></div></div><p>
+ modify the symbolic links in the directory.</p></li></ul></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter18.Classical Printing Support</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 31, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2895411">Features and Benefits</a></dt><dt><a href="#id2895517">Technical Introduction</a></dt><dd><dl><dt><a href="#id2895555">What happens if you send a Job from a Client</a></dt><dt><a href="#id2895627">Printing Related Configuration Parameters</a></dt><dt><a href="#id2895722">Parameters Recommended for Use</a></dt></dl></dd><dt><a href="#id2896188">A simple Configuration to Print</a></dt><dd><dl><dt><a href="#id2896354">Verification of &quot;Settings in Use&quot; with testparm</a></dt><dt><a href="#id2896481">A little Experiment to warn you</a></dt></dl></dd><dt><a href="#id2896843">Extended Sample Configuration to Print</a></dt><dt><a href="#id2897173">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="#id2897186">The [global] Section</a></dt><dt><a href="#id2897717">The [printers] Section</a></dt><dt><a href="#id2898177">Any [my_printer_name] Section</a></dt><dt><a href="#id2898498">Print Commands</a></dt><dt><a href="#id2898580">Default Print Commands for various UNIX Print Subsystems</a></dt><dt><a href="#id2899263">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="#id2899603">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="#id2899763">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="#id2899925">The [printer$] Section is removed from Samba 3</a></dt><dt><a href="#id2900037">Creating the [print$] Share</a></dt><dt><a href="#id2900227">Parameters in the [print$] Section</a></dt><dt><a href="#id2900537">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="#id2900710">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="#id2900805">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="#id2901002">Setting Drivers for existing Printers with
+rpcclient</a></dt></dl></dd><dt><a href="#id2902712">Client Driver Install Procedure</a></dt><dd><dl><dt><a href="#id2902731">The first Client Driver Installation</a></dt><dt><a href="#id2902934">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="#id2903234">Further Client Driver Install Procedures</a></dt><dt><a href="#id2903328">Always make first Client Connection as root or &quot;printer admin&quot;</a></dt></dl></dd><dt><a href="#id2903500">Other Gotchas</a></dt><dd><dl><dt><a href="#id2903534">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="#id2904001">Supporting large Numbers of Printers</a></dt><dt><a href="#id2904312">Adding new Printers with the Windows NT APW</a></dt><dt><a href="#id2904606">Weird Error Message Cannot connect under a
+different Name</a></dt><dt><a href="#id2904706">Be careful when assembling Driver Files</a></dt><dt><a href="#id2905065">Samba and Printer Ports</a></dt><dt><a href="#id2905158">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="#id2905183">The Imprints Toolset</a></dt><dd><dl><dt><a href="#id2905239">What is Imprints?</a></dt><dt><a href="#id2905280">Creating Printer Driver Packages</a></dt><dt><a href="#id2905299">The Imprints Server</a></dt><dt><a href="#id2905323">The Installation Client</a></dt></dl></dd><dt><a href="#id2905478">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="#id2905813">The addprinter command</a></dt><dt><a href="#id2905859">Migration of &quot;Classical&quot; printing to Samba</a></dt><dt><a href="#id2906032">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="#id2906044">Common Errors</a></dt><dd><dl><dt><a href="#id2906050">I give my root password but I don't get access</a></dt><dt><a href="#id2906085">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895411"></a>Features and Benefits</h2></div></div><div></div></div><p>
Printing is often a mission-critical service for the users. Samba can
provide this service reliably and seamlessly for a client network
consisting of Windows workstations.
</p><p>
-A Samba-3.0 print service may be run on a Standalone or a Domain
+A Samba print service may be run on a Standalone or a Domain
member server, side by side with file serving functions, or on a
dedicated print server. It can be made as tight or as loosely secured
as needs dictate. Configurations may be simple or complex. Available
@@ -5994,40 +5797,40 @@ implemented by the more traditional UNIX (BSD- and System V-style)
printing systems. Many things apply to CUPS, the newer Common UNIX
Printing System, too; so if you use CUPS, you might be tempted to jump
to the next chapter -- but you will certainly miss a few things if you
-do so. Better read this chapter too.
+do so. Better to read this chapter too.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Most of the given examples have been verified on Windows XP
Professional clients. Where this document describes the responses to
commands given, bear in mind that Windows 2000 clients are very
similar, but may differ in details. Windows NT is somewhat different
again.
-</p></div></div><div xmlns:ns45="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914778"></a>Technical Introduction</h2></div></div><div></div></div><ns45:p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895517"></a>Technical Introduction</h2></div></div><div></div></div><p>
Samba's printing support always relies on the installed print
-subsystem of the Unix OS it runs on. Samba is a &quot;middleman&quot;. It takes
+subsystem of the UNIX OS it runs on. Samba is a &quot;middleman&quot;. It takes
printfiles from Windows (or other SMB) clients and passes them to the
real printing system for further processing. Therefore it needs to
-&quot;talk&quot; to two sides: to the Windows print clients and to the Unix
+&quot;talk&quot; to two sides: to the Windows print clients and to the UNIX
printing system. Hence we must differentiate between the various
client OS types each of which behave differently, as well as the
various UNIX print subsystems, which themselves have different
features and are accessed differently. This part of the Samba HOWTO
-Collection deals with the &quot;traditional&quot; way of Unix printing first;
+Collection deals with the &quot;traditional&quot; way of UNIX printing first;
the next chapter covers in great detail the more modern
<span class="emphasis"><em>Common UNIX Printing System</em></span>
(CUPS).
-</ns45:p><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>CUPS users, be warned: don't just jump on to the next
+</p><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>CUPS users, be warned: don't just jump on to the next
chapter. You might miss important information contained only
-here!</p></div><ns45:p>
-</ns45:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914814"></a>What happens if you send a Job from a Client</h3></div></div><div></div></div><p>
+here!</p></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895555"></a>What happens if you send a Job from a Client</h3></div></div><div></div></div><p>
To successfully print a job from a Windows client via a Samba
print server to a UNIX printer, there are 6 (potentially 7)
stages:
-</p><div class="orderedlist"><ol type="1"><li><p>Windows opens a connection to the printershare</p></li><li><p>Samba must authenticate the user</p></li><li><p>Windows sends a copy of the printfile over the network
+</p><div class="orderedlist"><ol type="1"><li><p>Windows opens a connection to the printer share</p></li><li><p>Samba must authenticate the user</p></li><li><p>Windows sends a copy of the printfile over the network
into Samba's spooling area</p></li><li><p>Windows closes the connection again</p></li><li><p>Samba invokes the print command to hand the file over
-to the UNIX print subsystem's spooling area</p></li><li><p>The Unix print subsystem processes the print
+to the UNIX print subsystem's spooling area</p></li><li><p>The UNIX print subsystem processes the print
job</p></li><li><p>The printfile may need to be explicitly deleted
-from the Samba spooling area.</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914884"></a>Printing Related Configuration Parameters</h3></div></div><div></div></div><p>
+from the Samba spooling area.</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895627"></a>Printing Related Configuration Parameters</h3></div></div><div></div></div><p>
There are a number of configuration parameters in
controlling Samba's printing
behaviour. Please also refer to the man page for smb.conf to
@@ -6035,74 +5838,65 @@ acquire an overview about these. As with other parameters, there are
Global Level (tagged with a &quot;<span class="emphasis"><em>G</em></span>&quot; in the listings) and
Service Level (&quot;<span class="emphasis"><em>S</em></span>&quot;) parameters.
</p><div class="variablelist"><dl><dt><span class="term">Service Level Parameters</span></dt><dd><p>These <span class="emphasis"><em>may</em></span> go into the
-<i class="parameter"><tt>[global]</tt></i> section of
-. In this case they define the default
+<i class="parameter"><tt>[global]</tt></i> section of <tt class="filename">smb.conf</tt>.
+In this case they define the default
behaviour of all individual or service level shares (provided those
don't have a different setting defined for the same parameter, thus
overriding the global default).</p></dd><dt><span class="term">Global Parameters</span></dt><dd><p>These <span class="emphasis"><em>may not</em></span> go into individual
shares. If they go in by error, the &quot;testparm&quot; utility can discover
-this (if you run it) and tell you so.</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917993"></a>Parameters Recommended for Use</h3></div></div><div></div></div><p>The following <tt class="filename">smb.conf</tt> parameters directly
-related to printing are used in Samba-3. See also the
+this (if you run it) and tell you so.</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2895722"></a>Parameters Recommended for Use</h3></div></div><div></div></div><p>The following <tt class="filename">smb.conf</tt> parameters directly
+related to printing are used in Samba. See also the
<tt class="filename">smb.conf</tt> man page for detailed explanations:
-</p><ns45:p><b>List of printing related parameters in Samba-3.</b>
-</ns45:p><div class="itemizedlist"><p class="title"><b>Global level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>addprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>deleteprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>enumports command (G)</tt></i></p></li><li><p><i class="parameter"><tt>load printers (G)</tt></i></p></li><li><p><i class="parameter"><tt>lpq cache time (G)</tt></i></p></li><li><p><i class="parameter"><tt>os2 driver map (G)</tt></i></p></li><li><p><i class="parameter"><tt>printcap name (G), printcap (G)</tt></i></p></li><li><p><i class="parameter"><tt>show add printer wizard (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (G)</tt></i></p></li></ul></div><ns45:p>
-
-</ns45:p><div class="itemizedlist"><p class="title"><b>Service level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>hosts allow (S)</tt></i></p></li><li><p><i class="parameter"><tt>hosts deny (S)</tt></i></p></li><li><p><i class="parameter"><tt>lppause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpq command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lprm command (S)</tt></i></p></li><li><p><i class="parameter"><tt>max print jobs (S)</tt></i></p></li><li><p><i class="parameter"><tt>min print space (S)</tt></i></p></li><li><p><i class="parameter"><tt>print command (S)</tt></i></p></li><li><p><i class="parameter"><tt>printable (S), print ok (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer name (S), printer (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer admin (S)</tt></i></p></li><li><p><i class="parameter"><tt>printing = [cups|bsd|lprng...] (S)</tt></i></p></li><li><p><i class="parameter"><tt>queuepause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>queueresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (S)</tt></i></p></li></ul></div><ns45:p>
-</ns45:p><p>
+</p><p>Global level parameters: <a class="indexterm" name="id2895752"></a><i class="parameter"><tt>addprinter command</tt></i>,
+<a class="indexterm" name="id2895767"></a><i class="parameter"><tt>deleteprinter command</tt></i>,
+<a class="indexterm" name="id2895781"></a><i class="parameter"><tt>disable spoolss</tt></i>,
+<a class="indexterm" name="id2895794"></a><i class="parameter"><tt>enumports command</tt></i>,
+<a class="indexterm" name="id2895809"></a><i class="parameter"><tt>load printers</tt></i>,
+<a class="indexterm" name="id2895823"></a><i class="parameter"><tt>lpq cache time</tt></i>,
+<a class="indexterm" name="id2895837"></a><i class="parameter"><tt>os2 driver map</tt></i>,
+<a class="indexterm" name="id2895851"></a><i class="parameter"><tt>printcap name</tt></i>, <a class="indexterm" name="id2895865"></a><i class="parameter"><tt>printcap</tt></i>,
+<a class="indexterm" name="id2895878"></a><i class="parameter"><tt>show add printer wizard</tt></i>,
+<a class="indexterm" name="id2895893"></a><i class="parameter"><tt>total print jobs</tt></i>,
+<a class="indexterm" name="id2895907"></a><i class="parameter"><tt>use client driver</tt></i>.
+</p><p>Service level parameters: <a class="indexterm" name="id2895925"></a><i class="parameter"><tt>hosts allow</tt></i>,
+<a class="indexterm" name="id2895939"></a><i class="parameter"><tt>hosts deny</tt></i>,
+<a class="indexterm" name="id2895953"></a><i class="parameter"><tt>lppause command</tt></i>,
+<a class="indexterm" name="id2895967"></a><i class="parameter"><tt>lpq command</tt></i>,
+<a class="indexterm" name="id2895980"></a><i class="parameter"><tt>lpresume command</tt></i>,
+<a class="indexterm" name="id2895995"></a><i class="parameter"><tt>lprm command</tt></i>,
+<a class="indexterm" name="id2896009"></a><i class="parameter"><tt>max print jobs</tt></i>,
+<a class="indexterm" name="id2896023"></a><i class="parameter"><tt>min print space</tt></i>,
+<a class="indexterm" name="id2896037"></a><i class="parameter"><tt>print command</tt></i>,
+<a class="indexterm" name="id2896051"></a><i class="parameter"><tt>printable</tt></i>, <a class="indexterm" name="id2896064"></a><i class="parameter"><tt>print ok </tt></i>,
+<a class="indexterm" name="id2896078"></a><i class="parameter"><tt>printer name</tt></i>, <a class="indexterm" name="id2896092"></a><i class="parameter"><tt>printer</tt></i>,
+<a class="indexterm" name="id2896105"></a><i class="parameter"><tt>printer admin</tt></i>,
+<a class="indexterm" name="id2896120"></a><i class="parameter"><tt>printing</tt></i> = [cups|bsd|lprng...],
+<a class="indexterm" name="id2896134"></a><i class="parameter"><tt>queuepause command</tt></i>,
+<a class="indexterm" name="id2896148"></a><i class="parameter"><tt>queueresume command</tt></i>,
+<a class="indexterm" name="id2896162"></a><i class="parameter"><tt>total print jobs</tt></i>.
+</p><p>
Samba's printing support implements the Microsoft Remote Procedure
Calls (MS-RPC) methods for printing. These are used by Windows NT (and
later) print servers. The old &quot;LanMan&quot; protocol is still supported as
a fallback resort, and for older clients to use. More details will
follow further beneath.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913353"></a>Parameters for Backwards Compatibility</h3></div></div><div></div></div><p>
-Two new parameters that were added in Samba 2.2.2, are still present
-in Samba-3.0. Both of these options are described in the
-<tt class="filename">smb.conf</tt> man page and are disabled by
-default. <span class="emphasis"><em>Use them with caution!</em></span>
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>disable spoolss(G)</tt></i></span></dt><dd><p> This is
-provided for better support of Samba 2.0.x backwards capability. It
-will disable Samba's support for MS-RPC printing and yield identical
-printing behaviour to Samba 2.0.x.</p></dd><dt><span class="term"><i class="parameter"><tt>use client driver (G)</tt></i></span></dt><dd><p> was provided
-for using local printer drivers on Windows NT/2000 clients. It does
-not apply to Windows 95/98/ME clients.</p></dd></dl></div><ns45:p><b>Parameters &quot;for backward compatibility only&quot;, use with caution.</b>
-</ns45:p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (S)</tt></i></p></li></ul></div><ns45:p>
-</ns45:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913461"></a>Parameters no longer in use</h3></div></div><div></div></div><p>
-Samba users upgrading from 2.2.x to 3.0 need to be aware that some
-previously available settings are no longer supported (as was
-announced some time ago). Here is a list of them:
-</p><ns45:p><b>&quot;old&quot; parameters, removed in Samba-3.</b>
-The following <tt class="filename">smb.conf</tt> parameters have been
-deprecated already in Samba 2.2 and are now completely removed from
-Samba-3. You cannot use them in new 3.0 installations:
-
-</ns45:p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>printer driver file (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>postscript (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver location (S)</tt></i></p></li></ul></div><ns45:p>
-</ns45:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2913555"></a>A simple Configuration to Print with Samba-3</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896188"></a>A simple Configuration to Print</h2></div></div><div></div></div><p>
Here is a very simple example configuration for print related settings
-in the file. If you compare it with your
-own system's , you probably find some
+in the file. If you compare it with your own system's , you probably find some
additional parameters included there (as pre-configured by your OS
vendor). Further below is a discussion and explanation of the
parameters. Note, that this example doesn't use many parameters.
However, in many environments these are enough to provide a valid
- which enables all clients to print.
-</p><pre class="programlisting">
- [global]
- printing = bsd
- load printers = yes
-
- [printers]
- path = /var/spool/samba
- printable = yes
- public = yes
- writable = no
-</pre><p>
-This is only an example configuration. Many settings, if not
-explicitly set to a specific value, are used and set by Samba
-implicitly to its own default, because these have been compiled in.
-To see all settings, let root use the <b class="command">testparm</b>
-utility. <b class="command">testparm</b> also gives warnings if you have
-mis-configured certain things. Its complete output is easily 340 lines
-and more. You may want to pipe it through a pager program.
+<tt class="filename">smb.conf</tt> file which enables all clients to print.
+</p><div class="example"><a name="id2896217"></a><p class="title"><b>Example18.1.Simple configuration with BSD printing</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = bsd</tt></i></td></tr><tr><td><i class="parameter"><tt>load printers = yes</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>public = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writable = no</tt></i></td></tr></table></div><p>
+This is only an example configuration. Samba assigns default values to all
+configuration parameters. On the whole the defaults are conservative and
+sensible. When a parameter is specified in the <tt class="filename">smb.conf</tt> file this overwrites
+the default value. The <b class="command">testparm</b> utility when run as root
+is capable of reporting all setting, both default as well as <tt class="filename">smb.conf</tt> file
+settings. <b class="command">Testparm</b> gives warnings for all mis-configured
+settings. The complete output is easily 340 lines and more, so you may want
+to pipe it through a pager program.
</p><p>
The syntax for the configuration file is easy to grasp. You should
know that is not very picky about its
@@ -6111,7 +5905,7 @@ reminder: It even tolerates some spelling errors (like &quot;browsable&quot;
instead of &quot;browseable&quot;). Most spelling is case-insensitive. Also, you
can use &quot;Yes|No&quot; or &quot;True|False&quot; for boolean settings. Lists of names
may be separated by commas, spaces or tabs.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915561"></a>Verification of &quot;Settings in Use&quot; with <b class="command">testparm</b></h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896354"></a>Verification of &quot;Settings in Use&quot; with <b class="command">testparm</b></h3></div></div><div></div></div><p>
To see all (or at least most) printing related settings in Samba,
including the implicitly used ones, try the command outlined below
(hit &quot;ENTER&quot; twice!). It greps for all occurrences of &quot;lp&quot;, &quot;print&quot;,
@@ -6162,20 +5956,20 @@ as shown above:
You can easily verify which settings were implicitly added by Samba's
default behaviour. <span class="emphasis"><em>Don't forget about this point: it may
be important in your future dealings with Samba.</em></span>
-</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> testparm in Samba-3.0 behaves differently from 2.2.x: used
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> testparm in samba 3 behaves differently from 2.2.x: used
without the &quot;-v&quot; switch it only shows you the settings actually
written into ! To see the complete
-configuration used, add the &quot;-v&quot; parameter to testparm.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915643"></a>A little Experiment to warn you</h3></div></div><div></div></div><p>
+configuration used, add the &quot;-v&quot; parameter to testparm.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896481"></a>A little Experiment to warn you</h3></div></div><div></div></div><p>
Should you need to troubleshoot at any stage, please always come back
to this point first and verify if &quot;testparm&quot; shows the parameters you
expect! To give you an example from personal experience as a warning,
-try to just &quot;comment out&quot; the <i class="parameter"><tt>load printers</tt></i>&quot;
+try to just &quot;comment out&quot; the <a class="indexterm" name="id2896492"></a><i class="parameter"><tt>load printers</tt></i>&quot;
parameter. If your 2.2.x system behaves like mine, you'll see this:
</p><pre class="screen">
<tt class="prompt">root# </tt>grep &quot;load printers&quot; /etc/samba/smb.conf
# load printers = Yes
- # This setting is commented ooouuuuut!!
-
+ # This setting is commented ooouuuuut!!
+
<tt class="prompt">root# </tt>testparm -v /etc/samba/smb.conf | egrep &quot;(load printers)&quot;
load printers = Yes
@@ -6196,7 +5990,7 @@ any more... at least not by this ;-)
</pre><p>
Only when setting the parameter explicitly to
-&quot;<i class="parameter"><tt>load printers = No</tt></i>&quot;
+&quot;<a class="indexterm" name="id2896606"></a><i class="parameter"><tt>load printers</tt></i> = No&quot;
would Samba recognize my intentions. So my strong advice is:
</p><div class="itemizedlist"><ul type="disc"><li><p>Never rely on &quot;commented out&quot; parameters!</p></li><li><p>Always set it up explicitly as you intend it to
behave.</p></li><li><p>Use <b class="command">testparm</b> to uncover hidden
@@ -6222,7 +6016,7 @@ ask <b class="command">testparm</b> what the Samba print configuration
would be, if you used this minimalistic file as your real
:
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt> testparm -v /etc/samba/smb.conf-minimal | egrep &quot;(print|lpq|spool|driver|ports|[)&quot;</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>testparm -v smb.conf-minimal | egrep &quot;(print|lpq|spool|driver|ports|[)&quot;</tt></b>
Processing section &quot;[printers]&quot;
WARNING: [printers] service MUST be printable!
No path in service printers - using /tmp
@@ -6255,8 +6049,8 @@ testparm issued 2 warnings:
<i class="parameter"><tt>[printers]</tt></i> section as printable,
and</p></li><li><p>because we didn't tell it which spool directory to
use.</p></li></ul></div><p>
-However, this was not fatal, and Samba-3.0 will default to values that
-will work here. But, please!, don't rely on this and don't use this
+However, this was not fatal, and samba will default to values that
+will work here. Please, don't rely on this and don't use this
example! This was only meant to make you careful to design and specify
your setup to be what you really want it to be. The outcome on your
system may vary for some parameters, since you may have a Samba built
@@ -6268,61 +6062,20 @@ comment sign at the front). At first I regarded this as a bug in my
Samba version(s). But the man page states: &#8220;<span class="quote">Internal whitespace
in a parameter value is retained verbatim.</span>&#8221; This means that a
line consisting of, for example,
-</p><pre class="screen">
-printing = lprng #This defines LPRng as the printing system&quot;
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td># This defines LPRng as the printing system&quot;</td></tr><tr><td><i class="parameter"><tt>printing = lprng</tt></i></td></tr></table><p>
will regard the whole of the string after the &quot;=&quot;
sign as the value you want to define. And this is an invalid value
that will be ignored, and a default value used instead.]
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2915950"></a>Extended Sample Configuration to Print with Samba-3</h2></div></div><div></div></div><p>
-Here we show a more verbose example configuration for print related
-settings in an . Below is a discussion
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896843"></a>Extended Sample Configuration to Print</h2></div></div><div></div></div><p>
+ In <a href="#extbsdpr" title="Example18.2.Extended configuration with BSD printing">the extended BSD configuration example</a> we show a more verbose example configuration for print related
+ settings in BSD-printing style environment . Below is a discussion
and explanation of the various parameters. We chose to use BSD-style
printing here, because we guess it is still the most commonly used
system on legacy Linux installations (new installs now predominantly
have CUPS, which is discussed entirely in the next chapter of this
document). Note, that this example explicitly names many parameters
-which don't need to be stated because they are set by default. You
-might be able to do with a leaner .</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>
-if you read access it with the Samba Web Administration Tool (SWAT),
-and then write it to disk again, it will be optimized in a way such
-that it doesn't contain any superfluous parameters and comments. SWAT
-organizes the file for best performance. Remember that each smbd
-re-reads the Samba configuration once a minute, and that each
-connection spawns an smbd process of its own, so it is not a bad idea
-to optimize the in environments with
-hundreds or thousands of clients.</p></div><pre class="programlisting">
- [global]
- printing = bsd
- load printers = yes
- show add printer wizard = yes
- printcap name = /etc/printcap
- printer admin = @ntadmin, root
- total print jobs = 100
- lpq cache time = 20
- use client driver = no
-
- [printers]
- comment = All Printers
- printable = yes
- path = /var/spool/samba
- browseable = no
- guest ok = yes
- public = yes
- read only = yes
- writable = no
-
- [my_printer_name]
- comment = Printer with Restricted Access
- path = /var/spool/samba_my_printer
- printer admin = kurt
- browseable = yes
- printable = yes
- writeable = no
- hosts allow = 0.0.0.0
- hosts deny = turbo_xp, 10.160.50.23, 10.160.51.60
- guest ok = no
-</pre><p>
+which don't need to be specified because they are set by default. You
+might be able to do with a leaner <tt class="filename">smb.conf</tt> file.</p><div class="example"><a name="extbsdpr"></a><p class="title"><b>Example18.2.Extended configuration with BSD printing</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = bsd</tt></i></td></tr><tr><td><i class="parameter"><tt>load printers = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>show add printer wizard = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap name = /etc/printcap</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = @ntadmin, root</tt></i></td></tr><tr><td><i class="parameter"><tt>total print jobs = 100</tt></i></td></tr><tr><td><i class="parameter"><tt>lpq cache time = 20</tt></i></td></tr><tr><td><i class="parameter"><tt>use client driver = no</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = All Printers</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>public = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writable = no </tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[my_printer_name]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Printer with Restricted Access</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba_my_printer</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = kurt</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writeable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts allow = 0.0.0.0</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts deny = turbo_xp, 10.160.50.23, 10.160.51.60</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = no</tt></i></td></tr></table></div><p>
This <span class="emphasis"><em>also</em></span> is only an example configuration. You
may not find all the settings in your own
(as pre-configured by your OS
@@ -6332,31 +6085,31 @@ default, because these have been compiled in. To see all settings, let
root use the <b class="command">testparm</b>
utility. <b class="command">testparm</b> also gives warnings if you have
mis-configured certain things..
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916042"></a>Detailed Explanation of the Example's Settings</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2897173"></a>Detailed Explanation of the Example's Settings</h2></div></div><div></div></div><p>
Following is a discussion of the settings from above shown example.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916055"></a>The [global] Section</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2897186"></a>The [global] Section</h3></div></div><div></div></div><p>
The <i class="parameter"><tt>[global]</tt></i> section is one of 4 special
sections (along with [<i class="parameter"><tt>[homes]</tt></i>,
<i class="parameter"><tt>[printers]</tt></i> and
<i class="parameter"><tt>[print$]</tt></i>...) It contains all parameters which
apply to the server as a whole. It is the place for parameters which
-have only a &quot;global&quot; meaning (G). It may also contain service level
-parameters (S) which then define default settings for all other
+have only a &quot;global&quot; meaning. It may also contain service level
+parameters which then define default settings for all other
sections and shares. This way you can simplify the configuration and
avoid setting the same value repeatedly. (Within each individual
section or share you may however override these globally set &quot;share
level&quot; settings and specify other values).
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>printing = bsd</tt></i></span></dt><dd><p> this causes Samba to use default print commands
+</p><div class="variablelist"><dl><dt><span class="term"><a class="indexterm" name="id2897253"></a><i class="parameter"><tt>printing</tt></i> = bsd</span></dt><dd><p> this causes Samba to use default print commands
applicable for the BSD (a.k.a. RFC 1179 style or LPR/LPD) printing
system. In general, the &quot;printing&quot; parameter informs Samba about the
print subsystem it should expect. Samba supports CUPS, LPD, LPRNG,
SYSV, HPUX, AIX, QNX and PLP. Each of these systems defaults to a
-different <i class="parameter"><tt>print command</tt></i> (and other queue control
-commands).</p><div class="caution" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Caution</h3><p>The <i class="parameter"><tt>printing</tt></i> parameter is
+different <a class="indexterm" name="id2897272"></a><i class="parameter"><tt>print command</tt></i> (and other queue control
+commands).</p><div class="caution" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Caution</h3><p>The <a class="indexterm" name="id2897310"></a><i class="parameter"><tt>printing</tt></i> parameter is
normally a service level parameter. Since it is included here in the
<i class="parameter"><tt>[global]</tt></i> section, it will take effect for all
-printer shares that are not defined differently. Samba-3.0 no longer
-supports the SOFTQ printing system.</p></div></dd><dt><span class="term"><i class="parameter"><tt>load printers = yes</tt></i></span></dt><dd><p> this tells Samba to create automatically all
+printer shares that are not defined differently. Samba 3 no longer
+supports the SOFTQ printing system.</p></div></dd><dt><span class="term"><a class="indexterm" name="id2897340"></a><i class="parameter"><tt>load printers</tt></i> = yes</span></dt><dd><p> this tells Samba to create automatically all
available printer shares. &quot;Available&quot; printer shares are discovered by
scanning the printcap file. All created printer shares are also loaded
for browsing. If you use this parameter, you do not need to specify
@@ -6365,8 +6118,7 @@ share will clone the configuration options found in the
<i class="parameter"><tt>[printers]</tt></i> section. (A <i class="parameter"><tt>load printers
= no</tt></i> setting will allow you to specify each UNIX printer
you want to share separately, leaving out some you don't want to be
-publicly visible and available). </p></dd><dt><span class="term"><i class="parameter"><tt>show add printer wizard =
-yes</tt></i></span></dt><dd><p> this setting is normally
+publicly visible and available). </p></dd><dt><span class="term"><a class="indexterm" name="id2897399"></a><i class="parameter"><tt>show add printer wizard</tt></i> = yes </span></dt><dd><p> this setting is normally
enabled by default (even if the parameter is not written into the
). It makes the <span class="guiicon">Add Printer Wizard</span> icon
show up in the <span class="guiicon">Printers</span> folder of the Samba host's
@@ -6377,38 +6129,38 @@ will not suffice!). The Add Printer Wizard lets you upload printer
drivers to the <i class="parameter"><tt>[print$]</tt></i> share and associate it
with a printer (if the respective queue exists there before the
action), or exchange a printer's driver against any other previously
-uploaded driver. </p></dd><dt><span class="term"><i class="parameter"><tt>total print jobs = 100</tt></i></span></dt><dd><p> this setting sets the upper limit to 100 print jobs
+uploaded driver. </p></dd><dt><span class="term"><a class="indexterm" name="id2897468"></a><i class="parameter"><tt>total print jobs</tt></i> = 100</span></dt><dd><p> this setting sets the upper limit to 100 print jobs
being active on the Samba server at any one time. Should a client
submit a job which exceeds this number, a &#8220;<span class="quote">no more space
available on server</span>&#8221; type of error message will be returned by
Samba to the client. A setting of &quot;0&quot; (the default) means there is
<span class="emphasis"><em>no</em></span> limit at all!
-</p></dd><dt><span class="term"><i class="parameter"><tt>printcap name = /etc/printcap</tt></i></span></dt><dd><p> this tells Samba where to look for a list of
+</p></dd><dt><span class="term"><a class="indexterm" name="id2897507"></a><i class="parameter"><tt>printcap name</tt></i> = /etc/printcap</span></dt><dd><p> this tells Samba where to look for a list of
available printer names. (If you use CUPS, make sure that a printcap
file is written: this is controlled by the &quot;Printcap&quot; directive of
<tt class="filename">cupsd.conf</tt>).
-</p></dd><dt><span class="term"><i class="parameter"><tt>printer admin = @ntadmin</tt></i></span></dt><dd><p> members of the ntadmin group should be able to add
+</p></dd><dt><span class="term"><a class="indexterm" name="id2897544"></a><i class="parameter"><tt>printer admin</tt></i> = @ntadmin</span></dt><dd><p> members of the ntadmin group should be able to add
drivers and set printer properties (&quot;ntadmin&quot; is only an example name,
it needs to be a valid UNIX group name); root is implicitly always a
-<i class="parameter"><tt>printer admin</tt></i>. The &quot;@&quot; sign precedes group names in
+<a class="indexterm" name="id2897563"></a><i class="parameter"><tt>printer admin</tt></i>. The &quot;@&quot; sign precedes group names in
. A printer admin can do anything to
printers via the remote administration interfaces offered by MS-RPC
-(see below). Note that the <i class="parameter"><tt>printer admin</tt></i>
+(see below). Note that the <a class="indexterm" name="id2897596"></a><i class="parameter"><tt>printer admin</tt></i>
parameter is normally a share level parameter, so you may associate
different groups to different printer shares in larger installations,
-if you use the <i class="parameter"><tt>printer admin</tt></i> parameter on the
+if you use the <a class="indexterm" name="id2897613"></a><i class="parameter"><tt>printer admin</tt></i> parameter on the
share levels).
-</p></dd><dt><span class="term"><i class="parameter"><tt>lpq cache time = 20</tt></i></span></dt><dd><p> this controls the cache time for the results of the
+</p></dd><dt><span class="term"><a class="indexterm" name="id2897631"></a><i class="parameter"><tt>lpq cache time</tt></i> = 20</span></dt><dd><p> this controls the cache time for the results of the
lpq command. It prevents the lpq command being called too often and
reduces load on a heavily used print server.
-</p></dd><dt><span class="term"><i class="parameter"><tt>use client driver = no</tt></i></span></dt><dd><p> if set to <tt class="constant">yes</tt>, this setting only
+</p></dd><dt><span class="term"><a class="indexterm" name="id2897657"></a><i class="parameter"><tt>use client driver</tt></i> = no</span></dt><dd><p> if set to <tt class="constant">yes</tt>, this setting only
takes effect for Win NT/2k/XP clients (and not for Win 95/98/ME). Its
default value is <tt class="constant">No</tt> (or <tt class="constant">False</tt>).
It must <span class="emphasis"><em>not</em></span> be enabled on print shares
(with a <tt class="constant">yes</tt> or <tt class="constant">true</tt> setting) which
have valid drivers installed on the Samba server! For more detailed
explanations see the man page of <tt class="filename">smb.conf</tt>.
-</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925516"></a>The [printers] Section</h3></div></div><div></div></div><p>
+</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2897717"></a>The [printers] Section</h3></div></div><div></div></div><p>
This is the second special section. If a section with this name
appears in the <tt class="filename">smb.conf</tt>, users are able to
connect to any printer specified in the Samba host's printcap file,
@@ -6418,41 +6170,40 @@ section as a general convenience shortcut to share all printers with
minimal configuration. It is also a container for settings which
should apply as default to all printers. (For more details see the
<tt class="filename">smb.conf</tt> man page.) Settings inside this
-container must be share level parameters (S).
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>comment = All printers</tt></i></span></dt><dd><p> the <i class="parameter"><tt>comment</tt></i> is shown next to
+container must be share level parameters.
+</p><div class="variablelist"><dl><dt><span class="term"><a class="indexterm" name="id2897759"></a><i class="parameter"><tt>comment</tt></i> = All printers</span></dt><dd><p> the <a class="indexterm" name="id2897778"></a><i class="parameter"><tt>comment</tt></i> is shown next to
the share if a client queries the server, either via <span class="guiicon">Network
Neighbourhood</span> or with the <b class="command">net view</b> command to list
available shares.
-</p></dd><dt><span class="term"><i class="parameter"><tt>printable = yes</tt></i></span></dt><dd><p> please note well, that the
+</p></dd><dt><span class="term"><a class="indexterm" name="id2897812"></a><i class="parameter"><tt>printable</tt></i> = yes</span></dt><dd><p> please note well, that the
<i class="parameter"><tt>[printers]</tt></i> service <span class="emphasis"><em>must</em></span> be
declared as printable. If you specify otherwise, smbd will refuse to
load at startup. This parameter allows
connected clients to open, write to and submit spool files into the
-directory specified with the <i class="parameter"><tt>path</tt></i> parameter for
+directory specified with the <a class="indexterm" name="id2897846"></a><i class="parameter"><tt>path</tt></i> parameter for
this service. It is used by Samba to differentiate printer shares from
-file shares. </p></dd><dt><span class="term"><i class="parameter"><tt>path = /var/spool/samba</tt></i></span></dt><dd><p>this must point to a directory used by Samba to spool
+file shares. </p></dd><dt><span class="term"><a class="indexterm" name="id2897866"></a><i class="parameter"><tt>path</tt></i> = /var/spool/samba</span></dt><dd><p>this must point to a directory used by Samba to spool
incoming print files. <span class="emphasis"><em>It must not be the same as the spool
directory specified in the configuration of your UNIX print
subsystem!</em></span> The path would typically point to a directory
which is world writeable, with the &quot;sticky&quot; bit set to it.
-</p></dd><dt><span class="term"><i class="parameter"><tt>browseable = no</tt></i></span></dt><dd><p> this is always set to <tt class="constant">no</tt> if
-<i class="parameter"><tt>printable = yes</tt></i>. It makes the
+</p></dd><dt><span class="term"><a class="indexterm" name="id2897900"></a><i class="parameter"><tt>browseable</tt></i> = no</span></dt><dd><p> this is always set to <tt class="constant">no</tt> if
+<a class="indexterm" name="id2897923"></a><i class="parameter"><tt>printable</tt></i> = yes. It makes the
<i class="parameter"><tt>[printer]</tt></i> share itself invisible in the
list of available shares in a <b class="command">net view</b> command or
in the Explorer browse list. (Note that you will of course see the
individual printers).
-</p></dd><dt><span class="term"><i class="parameter"><tt>guest ok = yes</tt></i></span></dt><dd><p>
+</p></dd><dt><span class="term"><a class="indexterm" name="id2897959"></a><i class="parameter"><tt>guest ok</tt></i> = yes</span></dt><dd><p>
if set to <tt class="constant">yes</tt>, then no password is required to
connect to the printers service. Access will be granted with the
-privileges of the <i class="parameter"><tt>guest account</tt></i>. On many systems the
+privileges of the <a class="indexterm" name="id2897985"></a><i class="parameter"><tt>guest account</tt></i>. On many systems the
guest account will map to a user named &quot;nobody&quot;. This user is in the UNIX
passwd file with an empty password, but with no valid UNIX login.
(Note: on some systems the guest account might not have the
privilege to be able to print. Test this by logging in as your
guest user using <b class="command">su - guest</b> and run a system print
command like
-</p><p><b class="userinput"><tt>lpr -P printername /etc/motd</tt></b></p></dd><dt><span class="term"><i class="parameter"><tt>public = yes</tt></i></span></dt><dd><p> this is a synonym for <i class="parameter"><tt>guest ok =
-yes</tt></i>. Since we have <i class="parameter"><tt>guest ok = yes</tt></i>,
+</p><p><b class="userinput"><tt>lpr -P printername /etc/motd</tt></b></p></dd><dt><span class="term"><a class="indexterm" name="id2898034"></a><i class="parameter"><tt>public</tt></i> = yes</span></dt><dd><p> this is a synonym for <a class="indexterm" name="id2898054"></a><i class="parameter"><tt>guest ok</tt></i> = yes. Since we have <a class="indexterm" name="id2898068"></a><i class="parameter"><tt>guest ok</tt></i> = yes,
it really doesn't need to be here! (This leads to the interesting
question: &#8220;<span class="quote">What, if I by accident have to contradictory settings
for the same share?</span>&#8221; The answer is: the last one encountered by
@@ -6461,16 +6212,16 @@ complain about different settings of the same parameter for the same
share! You can test this by setting up multiple lines for the &quot;guest
account&quot; parameter with different usernames, and then run testparm to
see which one is actually used by Samba.)
-</p></dd><dt><span class="term"><i class="parameter"><tt>read only = yes</tt></i></span></dt><dd><p>this normally (for other types of shares) prevents
+</p></dd><dt><span class="term"><a class="indexterm" name="id2898104"></a><i class="parameter"><tt>read only</tt></i> = yes</span></dt><dd><p>this normally (for other types of shares) prevents
users creating or modifying files in the service's directory. However,
in a &quot;printable&quot; service, it is <span class="emphasis"><em>always</em></span> allowed to
write to the directory (if user privileges allow the connection), but
only via print spooling operations. &quot;Normal&quot; write operations are not
-allowed. </p></dd><dt><span class="term"><i class="parameter"><tt>writeable = no</tt></i></span></dt><dd><p>
-synonym for <i class="parameter"><tt>read only = yes</tt></i>
-</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925845"></a>Any [my_printer_name] Section</h3></div></div><div></div></div><p>
+allowed. </p></dd><dt><span class="term"><a class="indexterm" name="id2898141"></a><i class="parameter"><tt>writeable</tt></i> = no</span></dt><dd><p>
+synonym for <a class="indexterm" name="id2898159"></a><i class="parameter"><tt>read only</tt></i> = yes
+</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898177"></a>Any [my_printer_name] Section</h3></div></div><div></div></div><p>
If a section appears in the , which is
-tagged as <i class="parameter"><tt>printable = yes</tt></i>, Samba presents it as
+tagged as <a class="indexterm" name="id2898189"></a><i class="parameter"><tt>printable</tt></i> = yes, Samba presents it as
a printer share to its clients. Note, that Win95/98/ME clients may
have problems with connecting or loading printer drivers if the share
name has more than 8 characters! Also be very careful if you give a
@@ -6479,37 +6230,36 @@ client's connection request to a certain sharename, Samba always tries
to find file shares with that name first; if it finds one, it will
connect to this and will never ultimately connect to a printer with
the same name!
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>comment = Printer with Restricted Access</tt></i></span></dt><dd><p> the comment says it all.
-</p></dd><dt><span class="term"><i class="parameter"><tt>path = /var/spool/samba_my_printer</tt></i></span></dt><dd><p> here we set the spooling area for this printer to
+</p><div class="variablelist"><dl><dt><span class="term"><a class="indexterm" name="id2898219"></a><i class="parameter"><tt>comment</tt></i> = Printer with Restricted Access</span></dt><dd><p> the comment says it all.
+</p></dd><dt><span class="term"><a class="indexterm" name="id2898243"></a><i class="parameter"><tt>path</tt></i> = /var/spool/samba_my_printer</span></dt><dd><p> here we set the spooling area for this printer to
another directory than the default. It is not a requirement to set it
differently, but the option is available.
-</p></dd><dt><span class="term"><i class="parameter"><tt>printer admin = kurt</tt></i></span></dt><dd><p> the printer admin definition is different for this
+</p></dd><dt><span class="term"><a class="indexterm" name="id2898271"></a><i class="parameter"><tt>printer admin</tt></i> = kurt</span></dt><dd><p> the printer admin definition is different for this
explicitly defined printer share from the general
<i class="parameter"><tt>[printers]</tt></i> share. It is not a requirement; we
did it to show that it is possible if you want it.
-</p></dd><dt><span class="term"><i class="parameter"><tt>browseable = yes</tt></i></span></dt><dd><p> we also made this printer browseable (so that the
+</p></dd><dt><span class="term"><a class="indexterm" name="id2898304"></a><i class="parameter"><tt>browseable</tt></i> = yes</span></dt><dd><p> we also made this printer browseable (so that the
clients may conveniently find it when browsing the <span class="guiicon">Network
Neighbourhood</span>).
-</p></dd><dt><span class="term"><i class="parameter"><tt>printable = yes</tt></i></span></dt><dd><p>see explanation in last subsection.
-</p></dd><dt><span class="term"><i class="parameter"><tt>writeable = no</tt></i></span></dt><dd><p>see explanation in last subsection.
-</p></dd><dt><span class="term"><i class="parameter"><tt>hosts allow = 10.160.50.,10.160.51.</tt></i></span></dt><dd><p>here we exercise a certain degree of access control
-by using the <i class="parameter"><tt>hosts allow</tt></i> and <i class="parameter"><tt>hosts deny</tt></i> parameters. Note, that
+</p></dd><dt><span class="term"><a class="indexterm" name="id2898337"></a><i class="parameter"><tt>printable</tt></i> = yes</span></dt><dd><p>see explanation in last subsection.
+</p></dd><dt><span class="term"><a class="indexterm" name="id2898361"></a><i class="parameter"><tt>writeable</tt></i> = no</span></dt><dd><p>see explanation in last subsection.
+</p></dd><dt><span class="term"><a class="indexterm" name="id2898385"></a><i class="parameter"><tt>hosts allow</tt></i> = 10.160.50.,10.160.51.</span></dt><dd><p>here we exercise a certain degree of access control
+by using the <a class="indexterm" name="id2898407"></a><i class="parameter"><tt>hosts allow</tt></i> and <a class="indexterm" name="id2898420"></a><i class="parameter"><tt>hosts deny</tt></i> parameters. Note, that
this is not by any means a safe bet. It is not a way to secure your
printers. This line accepts all clients from a certain subnet in a
first evaluation of access control
-</p></dd><dt><span class="term"><i class="parameter"><tt>hosts deny = turbo_xp,10.160.50.23,10.160.51.60
-</tt></i></span></dt><dd><p>all listed hosts are not allowed here (even if they
+</p></dd><dt><span class="term"><a class="indexterm" name="id2898442"></a><i class="parameter"><tt>hosts deny</tt></i> = turbo_xp,10.160.50.23,10.160.51.60</span></dt><dd><p>all listed hosts are not allowed here (even if they
belong to the &quot;allowed subnets&quot;). As you can see, you could name IP
addresses as well as NetBIOS hostnames
here.
-</p></dd><dt><span class="term"><i class="parameter"><tt>guest ok = no</tt></i></span></dt><dd><p>this printer is not open for the guest account!
-</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926066"></a>Print Commands</h3></div></div><div></div></div><p>
+</p></dd><dt><span class="term"><a class="indexterm" name="id2898473"></a><i class="parameter"><tt>guest ok</tt></i> = no</span></dt><dd><p>this printer is not open for the guest account!
+</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898498"></a>Print Commands</h3></div></div><div></div></div><p>
In each section defining a printer (or in the
<i class="parameter"><tt>[printers]</tt></i> section), a <i class="parameter"><tt>print
command</tt></i> parameter may be defined. It sets a command to
process the files which have been placed into the Samba print spool
directory for that printer. (That spool directory was, if you
-remember, set up with the <i class="parameter"><tt>path</tt></i>
+remember, set up with the <a class="indexterm" name="id2898526"></a><i class="parameter"><tt>path</tt></i>
parameter). Typically, this command will submit the spool file to the
Samba host's print subsystem, using the suitable system print
command. But there is no requirement that this needs to be the
@@ -6521,24 +6271,24 @@ your own print commands (or even develop print command shell scripts),
make sure you pay attention to the need to remove the files from the
Samba spool directory. Otherwise your hard disk may soon suffer from
shortage of free space.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926117"></a>Default Print Commands for various Unix Print Subsystems</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898580"></a>Default Print Commands for various UNIX Print Subsystems</h3></div></div><div></div></div><p>
You learned earlier on, that Samba in most cases uses its built-in
settings for many parameters if it can not find an explicitly stated
one in its configuration file. The same is true for the
-<i class="parameter"><tt>print command</tt></i>. The default print command varies
-depending on the <i class="parameter"><tt>printing =...</tt></i> parameter
+<a class="indexterm" name="id2898594"></a><i class="parameter"><tt>print command</tt></i>. The default print command varies
+depending on the <a class="indexterm" name="id2898610"></a><i class="parameter"><tt>printing</tt></i> parameter
setting. In the commands listed below, you will notice some parameters
of the form <span class="emphasis"><em>%X</em></span> where <span class="emphasis"><em>X</em></span> is
<span class="emphasis"><em>p, s, J</em></span> etc. These letters stand for
&quot;printername&quot;, &quot;spoolfile&quot; and &quot;job ID&quot; respectively. They are
explained in more detail further below. Here is an overview (excluding
the special case of CUPS, which is discussed in the next chapter):
-</p><div class="informaltable"><table border="1"><colgroup><col><col></colgroup><thead><tr><th align="left">If this setting is active...</th><th align="left">...this is used in lieu of an explicit command:</th></tr></thead><tbody><tr><td align="left"><i class="parameter"><tt>printing = bsd|aix|lprng|plp</tt></i></td><td align="left">print command is <b class="command">lpr -r -P%p %s</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = sysv|hpux</tt></i></td><td align="left">print command is <b class="command">lp -c -P%p %s; rm %s</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = qnx</tt></i></td><td align="left">print command is <b class="command">lp -r -P%p -s %s</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = bsd|aix|lprng|plp</tt></i></td><td align="left">lpq command is <b class="command">lpq -P%p</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = sysv|hpux</tt></i></td><td align="left">lpq command is <b class="command">lpstat -o%p</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = qnx</tt></i></td><td align="left">lpq command is <b class="command">lpq -P%p</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = bsd|aix|lprng|plp</tt></i></td><td align="left">lprm command is <b class="command">lprm -P%p %j</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = sysv|hpux</tt></i></td><td align="left">lprm command is <b class="command">cancel %p-%j</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = qnx</tt></i></td><td align="left">lprm command is <b class="command">cancel %p-%j</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = bsd|aix|lprng|plp</tt></i></td><td align="left">lppause command is <b class="command">lp -i %p-%j -H hold</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = sysv|hpux</tt></i></td><td align="left">lppause command (...is empty)</td></tr><tr><td align="left"><i class="parameter"><tt>printing = qnx</tt></i></td><td align="left">lppause command (...is empty)</td></tr><tr><td align="left"><i class="parameter"><tt>printing = bsd|aix|lprng|plp</tt></i></td><td align="left">lpresume command is <b class="command">lp -i %p-%j -H resume</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = sysv|hpux</tt></i></td><td align="left">lpresume command (...is empty)</td></tr><tr><td align="left"><i class="parameter"><tt>printing = qnx</tt></i></td><td align="left">lpresume command (...is empty)</td></tr></tbody></table></div><p>
+</p><div class="informaltable"><table border="1"><colgroup><col><col></colgroup><thead><tr><th align="left">If this setting is active...</th><th align="left">...this is used in lieu of an explicit command:</th></tr></thead><tbody><tr><td align="left"><a class="indexterm" name="id2898695"></a><i class="parameter"><tt>printing</tt></i> = bsd|aix|lprng|plp</td><td align="left">print command is <b class="command">lpr -r -P%p %s</b></td></tr><tr><td align="left"><a class="indexterm" name="id2898726"></a><i class="parameter"><tt>printing</tt></i> = sysv|hpux</td><td align="left">print command is <b class="command">lp -c -P%p %s; rm %s</b></td></tr><tr><td align="left"><a class="indexterm" name="id2898758"></a><i class="parameter"><tt>printing</tt></i> = qnx</td><td align="left">print command is <b class="command">lp -r -P%p -s %s</b></td></tr><tr><td align="left"><a class="indexterm" name="id2898788"></a><i class="parameter"><tt>printing</tt></i> = bsd|aix|lprng|plp</td><td align="left">lpq command is <b class="command">lpq -P%p</b></td></tr><tr><td align="left"><a class="indexterm" name="id2898819"></a><i class="parameter"><tt>printing</tt></i> = sysv|hpux</td><td align="left">lpq command is <b class="command">lpstat -o%p</b></td></tr><tr><td align="left"><a class="indexterm" name="id2898850"></a><i class="parameter"><tt>printing</tt></i> = qnx</td><td align="left">lpq command is <b class="command">lpq -P%p</b></td></tr><tr><td align="left"><a class="indexterm" name="id2898880"></a><i class="parameter"><tt>printing</tt></i> = bsd|aix|lprng|plp</td><td align="left">lprm command is <b class="command">lprm -P%p %j</b></td></tr><tr><td align="left"><a class="indexterm" name="id2898911"></a><i class="parameter"><tt>printing</tt></i> = sysv|hpux</td><td align="left">lprm command is <b class="command">cancel %p-%j</b></td></tr><tr><td align="left"><a class="indexterm" name="id2898941"></a><i class="parameter"><tt>printing</tt></i> = qnx</td><td align="left">lprm command is <b class="command">cancel %p-%j</b></td></tr><tr><td align="left"><a class="indexterm" name="id2898972"></a><i class="parameter"><tt>printing</tt></i> = bsd|aix|lprng|plp</td><td align="left">lppause command is <b class="command">lp -i %p-%j -H hold</b></td></tr><tr><td align="left"><a class="indexterm" name="id2899003"></a><i class="parameter"><tt>printing</tt></i> = sysv|hpux</td><td align="left">lppause command (...is empty)</td></tr><tr><td align="left"><a class="indexterm" name="id2899027"></a><i class="parameter"><tt>printing</tt></i> = qnx</td><td align="left">lppause command (...is empty)</td></tr><tr><td align="left"><a class="indexterm" name="id2899053"></a><i class="parameter"><tt>printing</tt></i> = bsd|aix|lprng|plp</td><td align="left">lpresume command is <b class="command">lp -i %p-%j -H resume</b></td></tr><tr><td align="left"><a class="indexterm" name="id2899084"></a><i class="parameter"><tt>printing</tt></i> = sysv|hpux</td><td align="left">lpresume command (...is empty)</td></tr><tr><td align="left"><a class="indexterm" name="id2899109"></a><i class="parameter"><tt>printing</tt></i> = qnx</td><td align="left">lpresume command (...is empty)</td></tr></tbody></table></div><p>
We excluded the special CUPS case here, because it is discussed in the
next chapter. Just a short summary. For <i class="parameter"><tt>printing =
CUPS</tt></i>: If SAMBA is compiled against libcups, it uses the
CUPS API to submit jobs, etc. (It is a good idea also to set
-<i class="parameter"><tt>printcap = cups</tt></i> in case your
+<a class="indexterm" name="id2899148"></a><i class="parameter"><tt>printcap</tt></i> = cups in case your
<tt class="filename">cupsd.conf</tt> is set to write its autogenerated
printcap file to an unusual place). Otherwise Samba maps to the System
V printing commands with the -oraw option for printing, i.e. it uses
@@ -6561,9 +6311,9 @@ check which command takes effect. Then check that this command is
adequate and actually works for your installed print subsystem. It is
always a good idea to explicitly set up your configuration files the
way you want them to work and not rely on any built-in defaults.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926642"></a>Setting up your own Print Commands</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899263"></a>Setting up your own Print Commands</h3></div></div><div></div></div><p>
After a print job has finished spooling to a service, the
-<i class="parameter"><tt>print command</tt></i> will be used by Samba via a
+<a class="indexterm" name="id2899273"></a><i class="parameter"><tt>print command</tt></i> will be used by Samba via a
<span class="emphasis"><em>system()</em></span> call to process the spool file. Usually
the command specified will submit the spool file to the host's
printing subsystem. But there is no requirement at all that this must
@@ -6616,22 +6366,16 @@ expand the included environment variables as usual. (The syntax to
include a UNIX environment variable <i class="parameter"><tt>$variable</tt></i>
in or in the Samba print command is
<i class="parameter"><tt>%$variable</tt></i>.) To give you a working
-<i class="parameter"><tt>print command</tt></i> example, the following will log a
+<a class="indexterm" name="id2899504"></a><i class="parameter"><tt>print command</tt></i> example, the following will log a
print job to <tt class="filename">/tmp/print.log</tt>, print the file, then
remove it. Note that ';' is the usual separator for commands in shell
scripts:
-</p><pre class="programlisting">
-
- print command = echo Printing %s &gt;&gt; /tmp/print.log; lpr -P %p %s; rm %s
-
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>print command = echo Printing %s &gt;&gt; /tmp/print.log; lpr -P %p %s; rm %s</tt></i></td></tr></table><p>
You may have to vary your own command considerably from this example
depending on how you normally print files on your system. The default
-for the <i class="parameter"><tt>print command</tt></i> parameter varies depending on the setting of
-the <i class="parameter"><tt>printing</tt></i> parameter. Another example is:
-</p><pre class="programlisting">
- print command = /usr/local/samba/bin/myprintscript %p %s
-</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926920"></a>Innovations in Samba Printing since 2.2</h2></div></div><div></div></div><p>
+for the <a class="indexterm" name="id2899553"></a><i class="parameter"><tt>print command</tt></i> parameter varies depending on the setting of
+the <a class="indexterm" name="id2899570"></a><i class="parameter"><tt>printing</tt></i> parameter. Another example is:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>print command = /usr/local/samba/bin/myprintscript %p %s</tt></i></td></tr></table></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2899603"></a>Innovations in Samba Printing since 2.2</h2></div></div><div></div></div><p>
Before version 2.2.0, Samba's print server support for Windows clients
was limited to the level of <span class="emphasis"><em>LanMan</em></span> printing
calls. This is the same protocol level as Windows 9x PCs offer when
@@ -6646,16 +6390,14 @@ The additional functionality provided by the new SPOOLSS support includes:
95/98/NT/2000 clients upon demand (<span class="emphasis"><em>Point'n'Print</em></span>);
</p></li><li><p>Uploading of printer drivers via the Windows NT
<span class="emphasis"><em>Add Printer Wizard</em></span> (APW) or the
-<span class="emphasis"><em>Imprints</em></span> tool set (refer to <a href="http://imprints.sourceforge.net/" target="_top">http://imprints.sourceforge.net</a>);
+<a href="http://imprints.sourceforge.net/" target="_top">Imprints</a> tool set.
</p></li><li><p>Support for the native MS-RPC printing calls such as
-StartDocPrinter, EnumJobs(), etc... (See the MSDN documentation
-at <a href="http://msdn.microsoft.com/" target="_top">http://msdn.microsoft.com/</a>
-for more information on the Win32 printing API);</p></li><li><p>Support for NT <span class="emphasis"><em>Access Control
+ StartDocPrinter, EnumJobs(), etc... (See the <a href="http://msdn.microsoft.com/" target="_top">MSDN documentation</a> for more information on the Win32 printing API);</p></li><li><p>Support for NT <span class="emphasis"><em>Access Control
Lists</em></span> (ACL) on printer objects;</p></li><li><p>Improved support for printer queue manipulation
through the use of internal databases for spooled job information
(implemented by various <tt class="filename">*.tdb</tt>
files).</p></li></ul></div><p>
-One other benefit of an update is this: Samba-3 is able to publish
+One other benefit of an update is this: Samba 3 is able to publish
all its printers in Active Directory (or LDAP)!
</p><p>
One slight difference is here: it is possible on a Windows NT print
@@ -6672,7 +6414,7 @@ default permissions assigned by Windows NT to a printer gives the
&quot;Print&quot; permissions to the well-known <span class="emphasis"><em>Everyone</em></span>
group. (The older clients of type Win9x can only print to &quot;shared&quot;
printers).
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927074"></a>Client Drivers on Samba Server for <span class="emphasis"><em>Point'n'Print</em></span></h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899763"></a>Client Drivers on Samba Server for <span class="emphasis"><em>Point'n'Print</em></span></h3></div></div><div></div></div><p>
There is still confusion about what all this means: <span class="emphasis"><em>Is it or
is it not a requirement for printer drivers to be installed on a Samba
host in order to support printing from Windows clients?</em></span> The
@@ -6707,10 +6449,10 @@ does not use these uploaded drivers in any way to process spooled
files</em></span>. Drivers are utilized entirely by the clients, who
download and install them via the &quot;Point'n'Print&quot; mechanism supported
by Samba. The clients use these drivers to generate print files in the
-format the printer (or the Unix print system) requires. Print files
-received by Samba are handed over to the Unix printing system, which
+format the printer (or the UNIX print system) requires. Print files
+received by Samba are handed over to the UNIX printing system, which
is responsible for all further processing, if needed.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927225"></a>The [printer$] Section is removed from Samba-3</h3></div></div><div></div></div><p><b>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899925"></a>The [printer$] Section is removed from Samba 3</h3></div></div><div></div></div><p><b>
<i class="parameter"><tt>[print$]</tt></i> vs. <i class="parameter"><tt>[printer$]</tt></i>
.</b>
Versions of Samba prior to 2.2 made it possible to use a share
@@ -6726,7 +6468,7 @@ files associated with that printer. Another parameter named
<i class="parameter"><tt>printer driver</tt></i> provided a means of defining the
printer driver name to be sent to the client. These parameters,
including the <i class="parameter"><tt>printer driver file</tt></i> parameter,
-are now removed and can not be used in installations of Samba-3.0.
+are now removed and can not be used in installations of samba-3.
Now the share name <i class="parameter"><tt>[print$]</tt></i> is used for the
location of downloadable printer drivers. It is taken from the
<i class="parameter"><tt>[print$]</tt></i> service created by Windows NT PCs when
@@ -6736,7 +6478,7 @@ access (in the context of its ACLs) in order to support printer driver
down- and uploads. Don't fear -- this does not mean Windows 9x
clients are thrown aside now. They can use Samba's
<i class="parameter"><tt>[print$]</tt></i> share support just fine.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927338"></a>Creating the [print$] Share</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900037"></a>Creating the [print$] Share</h3></div></div><div></div></div><p>
In order to support the up- and downloading of printer driver files,
you must first configure a file share named
<i class="parameter"><tt>[print$]</tt></i>. The &quot;public&quot; name of this share is
@@ -6750,42 +6492,25 @@ add the global parameters and create the
<i class="parameter"><tt>[print$]</tt></i> file share (of course, some of the
parameter values, such as 'path' are arbitrary and should be replaced
with appropriate values for your site):
-</p><pre class="screen">
- [global]
- ; members of the ntadmin group should be able to add drivers and set
- ; printer properties. root is implicitly always a 'printer admin'.
- printer admin = @ntadmin
- [....]
-
- [printers]
- [....]
-
- [print$]
- comment = Printer Driver Download Area
- path = /etc/samba/drivers
- browseable = yes
- guest ok = yes
- read only = yes
- write list = @ntadmin, root
-</pre><p>
+</p><div class="example"><a name="id2900085"></a><p class="title"><b>Example18.3.[print\$] example</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td># members of the ntadmin group should be able to add drivers and set</td></tr><tr><td># printer properties. root is implicitly always a 'printer admin'.</td></tr><tr><td><i class="parameter"><tt>printer admin = @ntadmin</tt></i></td></tr><tr><td>...</td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td>...</td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[print$]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Printer Driver Download Area</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /etc/samba/drivers</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>write list = @ntadmin, root</tt></i></td></tr></table></div><p>
Of course, you also need to ensure that the directory named by the
-<i class="parameter"><tt>path</tt></i> parameter exists on the Unix file system.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927409"></a>Parameters in the [print$] Section</h3></div></div><div></div></div><p>
+<a class="indexterm" name="id2900210"></a><i class="parameter"><tt>path</tt></i> parameter exists on the UNIX file system.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900227"></a>Parameters in the [print$] Section</h3></div></div><div></div></div><p>
<i class="parameter"><tt>[print$]</tt></i> is a special section in
. It contains settings relevant to
potential printer driver download and local installation by clients.
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>comment = Printer Driver
-Download Area</tt></i></span></dt><dd><p> the comment appears next to the share name if it is
+</p><div class="variablelist"><dl><dt><span class="term"><a class="indexterm" name="id2900255"></a><i class="parameter"><tt>comment</tt></i> = Printer Driver
+ Download Area</span></dt><dd><p> the comment appears next to the share name if it is
listed in a share list (usually Windows clients won't see it often but
it will also appear up in a <b class="command">smbclient -L sambaserver
-</b> output). </p></dd><dt><span class="term"><i class="parameter"><tt>path = /etc/samba/printers</tt></i></span></dt><dd><p> this is the path to the location of the Windows
+</b> output). </p></dd><dt><span class="term"><a class="indexterm" name="id2900290"></a><i class="parameter"><tt>path</tt></i> = /etc/samba/printers</span></dt><dd><p> this is the path to the location of the Windows
driver file deposit from the UNIX point of
-view.</p></dd><dt><span class="term"><i class="parameter"><tt>browseable = no</tt></i></span></dt><dd><p> this makes the <i class="parameter"><tt>[print$]</tt></i> share
+view.</p></dd><dt><span class="term"><a class="indexterm" name="id2900315"></a><i class="parameter"><tt>browseable</tt></i> = no</span></dt><dd><p> this makes the <i class="parameter"><tt>[print$]</tt></i> share
&quot;invisible&quot; in Network Neighbourhood to clients. However, you can
still &quot;mount&quot; it from any client using the <b class="command">net use
g:\\sambaserver\print$</b> command in a &quot;DOS box&quot; or the
&quot;Connect network drive&quot; menu from Windows
-Explorer.</p></dd><dt><span class="term"><i class="parameter"><tt>guest ok = yes</tt></i></span></dt><dd><p>this gives read only access to this share for all
+Explorer.</p></dd><dt><span class="term"><a class="indexterm" name="id2900360"></a><i class="parameter"><tt>guest ok</tt></i> = yes</span></dt><dd><p>this gives read only access to this share for all
guest users. Access may be used to download and install printer
drivers on clients. The requirement for <i class="parameter"><tt>guest ok =
yes</tt></i> depends upon how your site is configured. If users
@@ -6798,13 +6523,13 @@ validated by the Domain Controller in order to logon to the Windows NT
session), then guest access is not necessary. Of course, in a
workgroup environment where you just want to be able to print without
worrying about silly accounts and security, then configure the share
-for guest access. You'll probably want to add <i class="parameter"><tt>map to guest
-= Bad User</tt></i> in the <i class="parameter"><tt>[global]</tt></i> section
+for guest access. You'll probably want to add <a class="indexterm" name="id2900407"></a><i class="parameter"><tt>map to guest</tt></i> = Bad User in the
+<i class="parameter"><tt>[global]</tt></i> section
as well. Make sure you understand what this parameter does before
using it.
-</p></div></dd><dt><span class="term"><i class="parameter"><tt>read only = yes</tt></i></span></dt><dd><p>as we don't want everybody to upload driver files (or
+</p></div></dd><dt><span class="term"><a class="indexterm" name="id2900434"></a><i class="parameter"><tt>read only</tt></i> = yes</span></dt><dd><p>as we don't want everybody to upload driver files (or
even change driver settings) we tagged this share as not
-writeable.</p></dd><dt><span class="term"><i class="parameter"><tt>write list = @ntadmin,root</tt></i></span></dt><dd><p>since the <i class="parameter"><tt>[print$]</tt></i> was made
+writeable.</p></dd><dt><span class="term"><a class="indexterm" name="id2900461"></a><i class="parameter"><tt>write list</tt></i> = @ntadmin,root</span></dt><dd><p>since the <i class="parameter"><tt>[print$]</tt></i> was made
read only by the previous setting, we need to create a &quot;write list&quot;
also. UNIX groups (denoted with a leading &quot;@&quot; character) and users
listed here are allowed write access (as an exception to the general
@@ -6813,13 +6538,13 @@ share. Normally you will want to only name administrative level user
accounts in this setting. Check the file system permissions to make
sure these accounts can copy files to the share. If this is a non-root
account, then the account should also be mentioned in the global
-<i class="parameter"><tt>printer admin </tt></i> parameter. See the
+<a class="indexterm" name="id2900517"></a><i class="parameter"><tt>printer admin </tt></i> parameter. See the
man page for more information on
-configuring file shares. </p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927630"></a>Subdirectory Structure in [print$]</h3></div></div><div></div></div><p>
+configuring file shares. </p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900537"></a>Subdirectory Structure in [print$]</h3></div></div><div></div></div><p>
In order for a Windows NT print server to support the downloading of
driver files by multiple client architectures, you must create several
subdirectories within the <i class="parameter"><tt>[print$]</tt></i> service
-(i.e. the Unix directory named by the <i class="parameter"><tt>path</tt></i>
+(i.e. the UNIX directory named by the <a class="indexterm" name="id2900557"></a><i class="parameter"><tt>path</tt></i>
parameter). These correspond to each of the supported client
architectures. Samba follows this model as well. Just like the name of
the <i class="parameter"><tt>[print$]</tt></i> share itself, the subdirectories
@@ -6854,7 +6579,7 @@ client workstation. Open <span class="guiicon">Network Neighbourhood</span> or
Once you have located the server, navigate to its <span class="guiicon">Printers and
Faxes</span> folder. You should see an initial listing of printers
that matches the printer shares defined on your Samba host.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2927791"></a>Installing Drivers into [print$]</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2900710"></a>Installing Drivers into [print$]</h2></div></div><div></div></div><p>
You have successfully created the <i class="parameter"><tt>[print$]</tt></i>
share in ? And Samba has re-read its
configuration? Good. But you are not yet ready to take off. The
@@ -6872,11 +6597,11 @@ Properties</em></span> and <span class="emphasis"><em>Add Printer Wizard</em></s
from any Windows NT/2k/XP client workstation.</p></li></ul></div><p>
The latter option is probably the easier one (even if the only
entrance to this realm seems a little bit weird at first).
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927885"></a>Setting Drivers for existing Printers with a Client GUI</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900805"></a>Setting Drivers for existing Printers with a Client GUI</h3></div></div><div></div></div><p>
The initial listing of printers in the Samba host's
<span class="guiicon">Printers</span> folder accessed from a client's Explorer
-will have no real printer driver assigned to them. By default, in
-Samba-3 (as in 2.2.1 and later) this driver name is set to a NULL
+will have no real printer driver assigned to them. By default
+this driver name is set to a NULL
string. This must be changed now. The local <span class="emphasis"><em>Add Printer
Wizard</em></span>, run from NT/2000/XP clients, will help us in this
task.
@@ -6907,18 +6632,18 @@ Once the APW is started, the procedure is exactly the same as the one
you are familiar with in Windows (we assume here that you are
familiar with the printer driver installations procedure on Windows
NT). Make sure your connection is in fact setup as a user with
-<i class="parameter"><tt>printer admin</tt></i> privileges (if in doubt, use
+<a class="indexterm" name="id2900939"></a><i class="parameter"><tt>printer admin</tt></i> privileges (if in doubt, use
<b class="command">smbstatus</b> to check for this). If you wish to
install printer drivers for client operating systems other than
<span class="application">Windows NT x86</span>, you will need to use the
<span class="guilabel">Sharing</span> tab of the printer properties dialog.
</p><p>
Assuming you have connected with an administrative (or root) account
-(as named by the <i class="parameter"><tt>printer admin</tt></i> parameter),
+(as named by the <a class="indexterm" name="id2900981"></a><i class="parameter"><tt>printer admin</tt></i> parameter),
you will also be able to modify other printer properties such as ACLs
and default device settings using this dialog. For the default device
settings, please consider the advice given further below.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928069"></a>Setting Drivers for existing Printers with
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2901002"></a>Setting Drivers for existing Printers with
<b class="command">rpcclient</b></h3></div></div><div></div></div><p>
The second way to install printer drivers into
<i class="parameter"><tt>[print$]</tt></i> and set them up in a valid way can be
@@ -6933,7 +6658,7 @@ time with the <b class="command">setdriver</b>
subcommand.</p></li></ol></div><p>
We will provide detailed hints for each of these steps in the next few
paragraphs.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928178"></a>Identifying the Driver Files</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2901111"></a>Identifying the Driver Files</h4></div></div><div></div></div><p>
To find out about the driver files, you have two options: you could
investigate the driver CD which comes with your printer. Study the
<tt class="filename">*.inf</tt> file on the CD, if it is contained. This
@@ -6981,35 +6706,35 @@ create scripts to automate the procedure for a large number of
printers and drivers. Note the different quotes used to overcome the
different spaces in between words:
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U'Danka%xxxx' -c 'getdriver &quot;Heidelberg Digimaster 9110 (PS)&quot; 3' TURBO_XP</tt></b>
- cmd = getdriver &quot;Heidelberg Digimaster 9110 (PS)&quot; 3
-
- [Windows NT x86]
- Printer Driver Info 3:
- Version: [2]
- Driver Name: [Heidelberg Digimaster 9110 (PS)]
- Architecture: [Windows NT x86]
- Driver Path: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01_de.DLL]
- Datafile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.ppd]
- Configfile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01U_de.DLL]
- Helpfile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01U_de.HLP]
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U'Danka%xxxx' -c \
+ 'getdriver &quot;Heidelberg Digimaster 9110 (PS)&quot; 3' TURBO_XP</tt></b>
+cmd = getdriver &quot;Heidelberg Digimaster 9110 (PS)&quot; 3
+
+[Windows NT x86]
+Printer Driver Info 3:
+ Version: [2]
+ Driver Name: [Heidelberg Digimaster 9110 (PS)]
+ Architecture: [Windows NT x86]
+ Driver Path: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01_de.DLL]
+ Datafile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.ppd]
+ Configfile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01U_de.DLL]
+ Helpfile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01U_de.HLP]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.DLL]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.INI]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1KMMin.DLL]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.dat]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.cat]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.def]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.hre]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.vnd]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.hlp]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de_reg.HLP]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01Aux.dll]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01_de.NTF]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.DLL]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.INI]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1KMMin.DLL]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.dat]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.cat]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.def]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.hre]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.vnd]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.hlp]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de_reg.HLP]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01Aux.dll]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01_de.NTF]
- Monitorname: []
- Defaultdatatype: []
-
+ Monitorname: []
+ Defaultdatatype: []
</pre><p>
You may notice, that this driver has quite a big number of
<span class="guilabel">Dependentfiles</span> (I know worse cases however). Also,
@@ -7036,7 +6761,7 @@ Windows 2000 changed this. While it still can use the Kernel Mode
drivers (if this is enabled by the Admin), its native mode for printer
drivers is User Mode execution. This requires drivers designed for
this. These type of drivers install into the &quot;3&quot; subdirectory.
-</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928506"></a>Collecting the Driver Files from a Windows Host's
+</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2901474"></a>Collecting the Driver Files from a Windows Host's
[print$] Share</h4></div></div><div></div></div><p>
Now we need to collect all the driver files we identified. in our
previous step. Where do we get them from? Well, why not retrieve them
@@ -7049,15 +6774,15 @@ listing is edited to include linebreaks for readability:
<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //TURBO_XP/print\$ -U'Danka%xxxx' \
-c 'cd W32X86/2;mget HD*_de.* \
hd*ppd Hd*_de.* Hddm*dll HDN*Aux.DLL'</tt></b>
- added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
- Got a positive name query response from 10.160.50.8 ( 10.160.50.8 )
- Domain=[DEVELOPMENT] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
- <tt class="prompt">Get file Hddm91c1_de.ABD? </tt><b class="userinput"><tt>n</tt></b>
- <tt class="prompt">Get file Hddm91c1_de.def? </tt><b class="userinput"><tt>y</tt></b>
- getting file \W32X86\2\Hddm91c1_de.def of size 428 as Hddm91c1_de.def (22.0 kb/s) (average 22.0 kb/s)
- <tt class="prompt">Get file Hddm91c1_de.DLL? </tt><b class="userinput"><tt>y</tt></b>
- getting file \W32X86\2\Hddm91c1_de.DLL of size 876544 as Hddm91c1_de.DLL (737.3 kb/s) (average 737.3 kb/s)
- [...]
+added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
+Got a positive name query response from 10.160.50.8 ( 10.160.50.8 )
+Domain=[DEVELOPMENT] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
+<tt class="prompt">Get file Hddm91c1_de.ABD? </tt><b class="userinput"><tt>n</tt></b>
+<tt class="prompt">Get file Hddm91c1_de.def? </tt><b class="userinput"><tt>y</tt></b>
+getting file \W32X86\2\Hddm91c1_de.def of size 428 as Hddm91c1_de.def
+<tt class="prompt">Get file Hddm91c1_de.DLL? </tt><b class="userinput"><tt>y</tt></b>
+getting file \W32X86\2\Hddm91c1_de.DLL of size 876544 as Hddm91c1_de.DLL
+[...]
</pre><p>
After this command is complete, the files are in our current local
@@ -7072,7 +6797,7 @@ files for these architectures are in the WIN40/0/ subdir. Once we are
complete, we can run <b class="command">smbclient ... put</b> to store
the collected files on the Samba server's
<i class="parameter"><tt>[print$]</tt></i> share.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928658"></a>Depositing the Driver Files into [print$]</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2901624"></a>Depositing the Driver Files into [print$]</h4></div></div><div></div></div><p>
So, now we are going to put the driver files into the
<i class="parameter"><tt>[print$]</tt></i> share. Remember, the UNIX path to this
share has been defined previously in your
@@ -7093,7 +6818,8 @@ running <b class="command">getdriver</b> against the original
store the files into a <span class="emphasis"><em>Samba/UNIX</em></span> print server's
<i class="parameter"><tt>[print$]</tt></i> share...
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -U'root%xxxx' -c 'cd W32X86; put HDNIS01_de.DLL; \
+ <tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -U'root%xxxx' -c \
+ 'cd W32X86; put HDNIS01_de.DLL; \
put Hddm91c1_de.ppd; put HDNIS01U_de.DLL; \
put HDNIS01U_de.HLP; put Hddm91c1_de.DLL; \
put Hddm91c1_de.INI; put Hddm91c1KMMin.DLL; \
@@ -7102,26 +6828,25 @@ store the files into a <span class="emphasis"><em>Samba/UNIX</em></span> print s
put Hddm91c1_de.vnd; put Hddm91c1_de.hlp; \
put Hddm91c1_de_reg.HLP; put HDNIS01Aux.dll; \
put HDNIS01_de.NTF'</tt></b>
- added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
- Got a positive name query response from 10.160.51.162 ( 10.160.51.162 )
- Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
- putting file HDNIS01_de.DLL as \W32X86\HDNIS01_de.DLL (4465.5 kb/s) (average 4465.5 kb/s)
- putting file Hddm91c1_de.ppd as \W32X86\Hddm91c1_de.ppd (12876.8 kb/s) (average 4638.9 kb/s)
- putting file HDNIS01U_de.DLL as \W32X86\HDNIS01U_de.DLL (20249.8 kb/s) (average 5828.3 kb/s)
- putting file HDNIS01U_de.HLP as \W32X86\HDNIS01U_de.HLP (9652.8 kb/s) (average 5899.8 kb/s)
- putting file Hddm91c1_de.DLL as \W32X86\Hddm91c1_de.DLL (23777.7 kb/s) (average 10400.6 kb/s)
- putting file Hddm91c1_de.INI as \W32X86\Hddm91c1_de.INI (98.6 kb/s) (average 10329.0 kb/s)
- putting file Hddm91c1KMMin.DLL as \W32X86\Hddm91c1KMMin.DLL (22931.5 kb/s) (average 10501.7 kb/s)
- putting file Hddm91c1_de.dat as \W32X86\Hddm91c1_de.dat (2462.8 kb/s) (average 10393.0 kb/s)
- putting file Hddm91c1_de.dat as \W32X86\Hddm91c1_de.dat (4925.3 kb/s) (average 10356.3 kb/s)
- putting file Hddm91c1_de.def as \W32X86\Hddm91c1_de.def (417.9 kb/s) (average 10290.1 kb/s)
- putting file Hddm91c1_de.hre as \W32X86\Hddm91c1_de.hre (22571.3 kb/s) (average 11338.5 kb/s)
- putting file Hddm91c1_de.vnd as \W32X86\Hddm91c1_de.vnd (3384.6 kb/s) (average 10754.3 kb/s)
- putting file Hddm91c1_de.hlp as \W32X86\Hddm91c1_de.hlp (18406.8 kb/s) (average 10839.8 kb/s)
- putting file Hddm91c1_de_reg.HLP as \W32X86\Hddm91c1_de_reg.HLP (20278.3 kb/s) (average 11386.3 kb/s)
- putting file HDNIS01Aux.dll as \W32X86\HDNIS01Aux.dll (14994.6 kb/s) (average 11405.2 kb/s)
- putting file HDNIS01_de.NTF as \W32X86\HDNIS01_de.NTF (23390.2 kb/s) (average 13170.8 kb/s)
-
+added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
+Got a positive name query response from 10.160.51.162 ( 10.160.51.162 )
+Domain=[CUPS-PRINT] OS=[UNIX] Server=[Samba 2.2.7a]
+putting file HDNIS01_de.DLL as \W32X86\HDNIS01_de.DLL
+putting file Hddm91c1_de.ppd as \W32X86\Hddm91c1_de.ppd
+putting file HDNIS01U_de.DLL as \W32X86\HDNIS01U_de.DLL
+putting file HDNIS01U_de.HLP as \W32X86\HDNIS01U_de.HLP
+putting file Hddm91c1_de.DLL as \W32X86\Hddm91c1_de.DLL
+putting file Hddm91c1_de.INI as \W32X86\Hddm91c1_de.INI
+putting file Hddm91c1KMMin.DLL as \W32X86\Hddm91c1KMMin.DLL
+putting file Hddm91c1_de.dat as \W32X86\Hddm91c1_de.dat
+putting file Hddm91c1_de.dat as \W32X86\Hddm91c1_de.dat
+putting file Hddm91c1_de.def as \W32X86\Hddm91c1_de.def
+putting file Hddm91c1_de.hre as \W32X86\Hddm91c1_de.hre
+putting file Hddm91c1_de.vnd as \W32X86\Hddm91c1_de.vnd
+putting file Hddm91c1_de.hlp as \W32X86\Hddm91c1_de.hlp
+putting file Hddm91c1_de_reg.HLP as \W32X86\Hddm91c1_de_reg.HLP
+putting file HDNIS01Aux.dll as \W32X86\HDNIS01Aux.dll
+putting file HDNIS01_de.NTF as \W32X86\HDNIS01_de.NTF
</pre><p>
Phewww -- that was a lot of typing! Most drivers are a lot smaller --
many only having 3 generic PostScript driver files plus 1 PPD. Note,
@@ -7133,47 +6858,47 @@ re-location will automatically be done by the
don't forget to also put the files for the Win95/98/ME architecture
into the <tt class="filename">WIN40/</tt> subdirectory should you need
them).
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928861"></a>Check if the Driver Files are there (with smbclient)</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2901819"></a>Check if the Driver Files are there (with smbclient)</h4></div></div><div></div></div><p>
For now we verify that our files are there. This can be done with
<b class="command">smbclient</b> too (but of course you can log in via SSH
also and do this through a standard UNIX shell access too):
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -U 'root%xxxx' -c 'cd W32X86; pwd; dir; cd 2; pwd; dir'</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -U 'root%xxxx' \
+ -c 'cd W32X86; pwd; dir; cd 2; pwd; dir'</tt></b>
added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
- Got a positive name query response from 10.160.51.162 ( 10.160.51.162 )
- Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
-
- Current directory is \\SAMBA-CUPS\print$\W32X86\
- . D 0 Sun May 4 03:56:35 2003
- .. D 0 Thu Apr 10 23:47:40 2003
- 2 D 0 Sun May 4 03:56:18 2003
- HDNIS01Aux.dll A 15356 Sun May 4 03:58:59 2003
- Hddm91c1KMMin.DLL A 46966 Sun May 4 03:58:59 2003
- HDNIS01_de.DLL A 434400 Sun May 4 03:58:59 2003
- HDNIS01_de.NTF A 790404 Sun May 4 03:56:35 2003
- Hddm91c1_de.DLL A 876544 Sun May 4 03:58:59 2003
- Hddm91c1_de.INI A 101 Sun May 4 03:58:59 2003
- Hddm91c1_de.dat A 5044 Sun May 4 03:58:59 2003
- Hddm91c1_de.def A 428 Sun May 4 03:58:59 2003
- Hddm91c1_de.hlp A 37699 Sun May 4 03:58:59 2003
- Hddm91c1_de.hre A 323584 Sun May 4 03:58:59 2003
- Hddm91c1_de.ppd A 26373 Sun May 4 03:58:59 2003
- Hddm91c1_de.vnd A 45056 Sun May 4 03:58:59 2003
- HDNIS01U_de.DLL A 165888 Sun May 4 03:58:59 2003
- HDNIS01U_de.HLP A 19770 Sun May 4 03:58:59 2003
- Hddm91c1_de_reg.HLP A 228417 Sun May 4 03:58:59 2003
- 40976 blocks of size 262144. 709 blocks available
-
- Current directory is \\SAMBA-CUPS\print$\W32X86\2\
- . D 0 Sun May 4 03:56:18 2003
- .. D 0 Sun May 4 03:56:35 2003
- ADOBEPS5.DLL A 434400 Sat May 3 23:18:45 2003
- laserjet4.ppd A 9639 Thu Apr 24 01:05:32 2003
- ADOBEPSU.DLL A 109568 Sat May 3 23:18:45 2003
- ADOBEPSU.HLP A 18082 Sat May 3 23:18:45 2003
- PDFcreator2.PPD A 15746 Sun Apr 20 22:24:07 2003
- 40976 blocks of size 262144. 709 blocks available
-
+Got a positive name query response from 10.160.51.162 ( 10.160.51.162 )
+Domain=[CUPS-PRINT] OS=[UNIX] Server=[Samba 2.2.7a]
+
+Current directory is \\SAMBA-CUPS\print$\W32X86\
+. D 0 Sun May 4 03:56:35 2003
+.. D 0 Thu Apr 10 23:47:40 2003
+2 D 0 Sun May 4 03:56:18 2003
+HDNIS01Aux.dll A 15356 Sun May 4 03:58:59 2003
+Hddm91c1KMMin.DLL A 46966 Sun May 4 03:58:59 2003
+HDNIS01_de.DLL A 434400 Sun May 4 03:58:59 2003
+HDNIS01_de.NTF A 790404 Sun May 4 03:56:35 2003
+Hddm91c1_de.DLL A 876544 Sun May 4 03:58:59 2003
+Hddm91c1_de.INI A 101 Sun May 4 03:58:59 2003
+Hddm91c1_de.dat A 5044 Sun May 4 03:58:59 2003
+Hddm91c1_de.def A 428 Sun May 4 03:58:59 2003
+Hddm91c1_de.hlp A 37699 Sun May 4 03:58:59 2003
+Hddm91c1_de.hre A 323584 Sun May 4 03:58:59 2003
+Hddm91c1_de.ppd A 26373 Sun May 4 03:58:59 2003
+Hddm91c1_de.vnd A 45056 Sun May 4 03:58:59 2003
+HDNIS01U_de.DLL A 165888 Sun May 4 03:58:59 2003
+HDNIS01U_de.HLP A 19770 Sun May 4 03:58:59 2003
+Hddm91c1_de_reg.HLP A 228417 Sun May 4 03:58:59 2003
+ 40976 blocks of size 262144. 709 blocks available
+
+Current directory is \\SAMBA-CUPS\print$\W32X86\2\
+. D 0 Sun May 4 03:56:18 2003
+.. D 0 Sun May 4 03:56:35 2003
+ADOBEPS5.DLL A 434400 Sat May 3 23:18:45 2003
+laserjet4.ppd A 9639 Thu Apr 24 01:05:32 2003
+ADOBEPSU.DLL A 109568 Sat May 3 23:18:45 2003
+ADOBEPSU.HLP A 18082 Sat May 3 23:18:45 2003
+PDFcreator2.PPD A 15746 Sun Apr 20 22:24:07 2003
+ 40976 blocks of size 262144. 709 blocks available
</pre><p>
Notice that there are already driver files present in the
<tt class="filename">2</tt> subdir (probably from a previous
@@ -7186,7 +6911,7 @@ Point'n'Print. The reason is: Samba doesn't know yet that these files
are something special, namely <span class="emphasis"><em>printer driver
files</em></span> and it doesn't know yet to which print queue(s) these
driver files belong.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928977"></a>Running <b class="command">rpcclient</b> with
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2901935"></a>Running <b class="command">rpcclient</b> with
<b class="command">adddriver</b></h4></div></div><div></div></div><p>
So, next you must tell Samba about the special category of the files
you just uploaded into the <i class="parameter"><tt>[print$]</tt></i> share. This
@@ -7195,21 +6920,23 @@ prompt Samba to register the driver files into its internal TDB
database files. The following command and its output has been edited,
again, for readability:
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'adddriver &quot;Windows NT x86&quot; &quot;dm9110:HDNIS01_de.DLL: \
- Hddm91c1_de.ppd:HDNIS01U_de.DLL:HDNIS01U_de.HLP: \
- NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
- Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
- Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
- HDNIS01Aux.dll,HDNIS01_de.NTF, \
- Hddm91c1_de_reg.HLP' SAMBA-CUPS</tt></b>
+ <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'adddriver &quot;Windows NT x86&quot; \
+&quot;dm9110:HDNIS01_de.DLL: \
+Hddm91c1_de.ppd:HDNIS01U_de.DLL:HDNIS01U_de.HLP: \
+ NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
+ Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
+ Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
+ HDNIS01Aux.dll,HDNIS01_de.NTF, \
+ Hddm91c1_de_reg.HLP' SAMBA-CUPS</tt></b>
- cmd = adddriver &quot;Windows NT x86&quot; &quot;dm9110:HDNIS01_de.DLL:Hddm91c1_de.ppd:HDNIS01U_de.DLL: \
- HDNIS01U_de.HLP:NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
- Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
- Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
- HDNIS01Aux.dll,HDNIS01_de.NTF,Hddm91c1_de_reg.HLP&quot;
+cmd = adddriver &quot;Windows NT x86&quot; \
+&quot;dm9110:HDNIS01_de.DLL:Hddm91c1_de.ppd:HDNIS01U_de.DLL: \
+ HDNIS01U_de.HLP:NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
+ Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
+ Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
+ HDNIS01Aux.dll,HDNIS01_de.NTF,Hddm91c1_de_reg.HLP&quot;
- Printer Driver dm9110 successfully installed.
+Printer Driver dm9110 successfully installed.
</pre><p>
After this step the driver should be recognized by Samba on the print
@@ -7221,7 +6948,7 @@ files successfully, but render the driver unworkable. So take care!
Hints about the syntax of the adddriver command are in the man
page. The CUPS printing chapter of this HOWTO collection provides a
more detailed description, if you should need it.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929076"></a>Check how Driver Files have been moved after
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2902049"></a>Check how Driver Files have been moved after
<b class="command">adddriver</b> finished</h4></div></div><div></div></div><p>
One indication for Samba's recognition of the files as driver files is
the <tt class="computeroutput">successfully installed</tt> message.
@@ -7230,9 +6957,9 @@ Another one is the fact, that our files have been moved by the
subdirectory. You can check this again with
<b class="command">smbclient</b>:
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -Uroot%xxxx -c 'cd W32X86;dir;pwd;cd 2;dir;pwd'</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -Uroot%xx -c 'cd W32X86;dir;pwd;cd 2;dir;pwd'</tt></b>
added interface ip=10.160.51.162 bcast=10.160.51.255 nmask=255.255.252.0
- Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
+ Domain=[CUPS-PRINT] OS=[UNIX] Server=[Samba 2.2.7a]
Current directory is \\SAMBA-CUPS\print$\W32X86\
. D 0 Sun May 4 04:32:48 2003
@@ -7269,7 +6996,7 @@ subdirectory. You can check this again with
</pre><p>
Another verification is that the timestamp of the printing TDB files
is now updated (and possibly their filesize has increased).
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929200"></a>Check if the Driver is recognized by Samba</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2902217"></a>Check if the Driver is recognized by Samba</h4></div></div><div></div></div><p>
Now the driver should be registered with Samba. We can easily verify
this, and will do so in a moment. However, this driver is
<span class="emphasis"><em>not yet</em></span> associated with a particular
@@ -7313,19 +7040,19 @@ time. Our new driver only shows up for
<span class="application">Windows NT 4.0 or 2000</span>. To
have it present for <span class="application">Windows 95, 98 and ME</span> you'll
have to repeat the whole procedure with the WIN40 architecture and subdirectory.
-</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929404"></a>A side note: you are not bound to specific driver names</h4></div></div><div></div></div><p>
+</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2902426"></a>A side note: you are not bound to specific driver names</h4></div></div><div></div></div><p>
You can name the driver as you like. If you repeat the
<b class="command">adddriver</b> step, with the same files as before, but
with a different driver name, it will work the same:
</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx \
- -c 'adddriver &quot;Windows NT x86&quot; \
- &quot;myphantasydrivername:HDNIS01_de.DLL: \
- Hddm91c1_de.ppd:HDNIS01U_de.DLL:HDNIS01U_de.HLP: \
- NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
- Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
- Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
- HDNIS01Aux.dll,HDNIS01_de.NTF,Hddm91c1_de_reg.HLP' SAMBA-CUPS
+ -c 'adddriver &quot;Windows NT x86&quot; \
+ &quot;myphantasydrivername:HDNIS01_de.DLL: \
+ Hddm91c1_de.ppd:HDNIS01U_de.DLL:HDNIS01U_de.HLP: \
+ NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
+ Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
+ Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
+ HDNIS01Aux.dll,HDNIS01_de.NTF,Hddm91c1_de_reg.HLP' SAMBA-CUPS
</tt></b>
cmd = adddriver &quot;Windows NT x86&quot;
@@ -7347,7 +7074,7 @@ repeatedly. Each run &quot;consumes&quot; the files you had put into the
respective subdirectories. So you <span class="emphasis"><em>must</em></span> precede an
<b class="command">smbclient ... put</b> command before each
<b class="command">rpcclient ... adddriver</b>&quot; command.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929515"></a>La Grande Finale: Running <b class="command">rpcclient</b> with
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2902559"></a>Running <b class="command">rpcclient</b> with
<b class="command">setdriver</b></h4></div></div><div></div></div><p>
Samba still needs to know <span class="emphasis"><em>which</em></span> printer's driver
this is. It needs to create a mapping of the driver to a printer, and
@@ -7377,20 +7104,19 @@ known to
Samba already. A bug in 2.2.x prevented Samba from recognizing freshly
installed printers. You had to restart Samba, or at least send a HUP
signal to all running smbd processes to work around this:
-<b class="userinput"><tt>kill -HUP `pidof smbd`</tt></b>. </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929667"></a>&quot;The Proof of the Pudding lies in the Eating&quot; (Client Driver Install
-Procedure)</h2></div></div><div></div></div><p>
+<b class="userinput"><tt>kill -HUP `pidof smbd`</tt></b>. </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902712"></a>Client Driver Install Procedure</h2></div></div><div></div></div><p>
A famous philosopher said once: &#8220;<span class="quote">The Proof of the Pudding lies
in the Eating</span>&#8221;. The proof for our setup lies in the printing.
So let's install the printer driver onto the client PCs. This is not
as straightforward as it may seem. Read on.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929688"></a>The first Client Driver Installation</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902731"></a>The first Client Driver Installation</h3></div></div><div></div></div><p>
Especially important is the installation onto the first client PC (for
each architectural platform separately). Once this is done correctly,
all further clients are easy to setup and shouldn't need further
attention. What follows is a description for the recommended first
procedure. You work now from a client workstation. First you should
guarantee that your connection is not unwittingly mapped to
-<i class="parameter"><tt>bad user</tt></i> &quot;nobody&quot;. In a DOS box type:
+<span class="emphasis"><em>bad user</em></span> &quot;nobody&quot;. In a DOS box type:
</p><p><b class="userinput"><tt>net use \\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\print$ /user:root</tt></b></p><p>
Replace root, if needed, by another valid
<i class="replaceable"><tt>printer admin</tt></i> user as given in the definition.
@@ -7426,7 +7152,7 @@ Data&quot; set is still incomplete.
</p><p>
You must now make sure that a valid &quot;Device Mode&quot; is set for the
driver. Don't fear -- we will explain now what that means.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929885"></a>IMPORTANT! Setting Device Modes on new Printers</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902934"></a>IMPORTANT! Setting Device Modes on new Printers</h3></div></div><div></div></div><p>
In order for a printer to be truly usable by a Windows NT/2K/XP
client, it must possess:
</p><div class="itemizedlist"><ul type="disc"><li><p>a valid <span class="emphasis"><em>Device Mode</em></span> generated by
@@ -7453,7 +7179,7 @@ This can be achieved by accessing the drivers remotely from an NT (or
2k/XP) client, as is discussed in the next paragraphs.
</p><p>
Be aware, that a valid Device Mode can only be initiated by a
-<i class="parameter"><tt>printer admin</tt></i>, or root (the reason should be
+<a class="indexterm" name="id2903030"></a><i class="parameter"><tt>printer admin</tt></i>, or root (the reason should be
obvious). Device Modes can only correctly be set by executing the
printer driver program itself. Since Samba can not execute this Win32
platform driver code, it sets this field initially to NULL (which is
@@ -7498,7 +7224,7 @@ properties. Others may crash the client's spooler service. So use this
parameter with caution. It is always better to have the client
generate a valid device mode for the printer and store it on the
server for you.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930175"></a>Further Client Driver Install Procedures</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903234"></a>Further Client Driver Install Procedures</h3></div></div><div></div></div><p>
Every further driver may be done by any user, along the lines
described above: Browse network, open printers folder on Samba server,
right-click printer and choose <span class="guimenuitem">Connect...</span>. Once
@@ -7518,12 +7244,12 @@ rundll32 shell32.dll,Control_RunDLL MAIN.CPL @2
You can enter the commands either inside a <span class="guilabel">DOS box</span> window
or in the <span class="guimenuitem">Run command...</span> field from the
<span class="guimenu">Start</span> menu.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930270"></a>Always make first Client Connection as root or &quot;printer admin&quot;</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903328"></a>Always make first Client Connection as root or &quot;printer admin&quot;</h3></div></div><div></div></div><p>
After you installed the driver on the Samba server (in its
<i class="parameter"><tt>[print$]</tt></i> share, you should always make sure
that your first client installation completes correctly. Make it a habit for
yourself to build that the very first connection from a client as
-<i class="parameter"><tt>printer admin</tt></i>. This is to make sure that:
+<a class="indexterm" name="id2903350"></a><i class="parameter"><tt>printer admin</tt></i>. This is to make sure that:
</p><div class="itemizedlist"><ul type="disc"><li><p> a first valid <span class="emphasis"><em>Device Mode</em></span> is
really initialized (see above for more explanation details), and
that</p></li><li><p> the default print settings of your printer for all
@@ -7537,20 +7263,23 @@ set to <span class="emphasis"><em>Letter</em></span>, when you are all using
</p><p>
To connect as root to a Samba printer, try this command from a Windows
2K/XP DOS box command prompt:
-</p><p><b class="userinput"><tt>runas /netonly /user:root &quot;rundll32 printui.dll,PrintUIEntry /p /t3 /n \\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\<i class="replaceable"><tt>printername</tt></i>&quot;</tt></b>
+</p><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>runas /netonly /user:root &quot;rundll32 printui.dll,PrintUIEntry /p /t3 /n
+ \\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\<i class="replaceable"><tt>printername</tt></i>&quot;</tt></b>
+</pre><p>
</p><p>
You will be prompted for root's Samba-password; type it, wait a few
seconds, click on <span class="guibutton">Printing Defaults...</span> and
proceed to set the job options as should be used as defaults by all
clients. Alternatively, instead of root you can name one other member
-of the <i class="parameter"><tt>printer admins</tt></i> from the setting.
+of the <a class="indexterm" name="id2903470"></a><i class="parameter"><tt>printer admin</tt></i> from the setting.
</p><p>
Now all the other users downloading and installing the driver
the same way (called <span class="emphasis"><em>Point'n'Print</em></span>) will
have the same defaults set for them. If you miss this step you'll
get a lot of helpdesk calls from your users. But maybe you like to
talk to people.... ;-)
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2930412"></a>Other Gotchas</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2903500"></a>Other Gotchas</h2></div></div><div></div></div><p>
Your driver is installed. It is ready for
<span class="emphasis"><em>Point'n'Print</em></span> installation by the clients
now. You <span class="emphasis"><em>may</em></span> have tried to download and use it
@@ -7560,7 +7289,7 @@ example, suppose you didn't manage to &quot;set the defaults&quot; on the
printer, as advised in the preceding paragraphs? And your users
complain about various issues (such as &#8220;<span class="quote">We need to set the paper
size for each job from Letter to A4 and it won't store it!</span>&#8221;)
-</p><div xmlns:ns49="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930445"></a>Setting Default Print Options for the Client Drivers</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903534"></a>Setting Default Print Options for the Client Drivers</h3></div></div><div></div></div><p>
The last sentence might be viewed with mixed feelings by some users and
admins. They have struggled for hours and hours and couldn't arrive at
a point were their settings seemed to be saved. It is not their
@@ -7570,7 +7299,7 @@ up when you right-click the printer name and select
looking dialogs, each claiming that they help you to set printer options,
in three different ways. Here is the definite answer to the &quot;Samba
Default Driver Setting FAQ&quot;:
-</p><ns49:p><b>&#8220;<span class="quote">I can't set and save default print options
+</p><p><b>&#8220;<span class="quote">I can't set and save default print options
for all users on Win2K/XP! Why not?</span>&#8221;</b>
How are you doing it? I bet the wrong way.... (it is not very
easy to find out, though). There are 3 different ways to bring you to
@@ -7581,41 +7310,41 @@ dialogs <span class="emphasis"><em>look</em></span> the same. Only one of them
Administrator to do this for all users. Here is how I reproduce it in
on XP Professional:
-</ns49:p><div class="orderedlist"><ol type="A"><li xmlns:ns46=""><ns46:p>The first &quot;wrong&quot; way:
+</p><div class="orderedlist"><ol type="A"><li><p>The first &quot;wrong&quot; way:
-</ns46:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guiicon">Printers</span>
+</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guiicon">Printers</span>
folder.</p></li><li><p>Right-click on the printer
(<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and
select in context menu <span class="guimenu">Printing
Preferences...</span></p></li><li><p>Look at this dialog closely and remember what it looks
-like.</p></li></ol></div><ns46:p>
-</ns46:p></li><li xmlns:ns47=""><ns47:p>The second &quot;wrong&quot; way:
+like.</p></li></ol></div><p>
+</p></li><li><p>The second &quot;wrong&quot; way:
-</ns47:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guimenu">Printers</span>
+</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guimenu">Printers</span>
folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on
cupshost</em></span>) and select in the context menu
<span class="guimenuitem">Properties</span></p></li><li><p>Click on the <span class="guilabel">General</span>
tab</p></li><li><p>Click on the button <span class="guibutton">Printing
Preferences...</span></p></li><li><p>A new dialog opens. Keep this dialog open and go back
-to the parent dialog.</p></li></ol></div><ns47:p>
-</ns47:p></li><li xmlns:ns48=""><ns48:p>The third, the &quot;correct&quot; way: (should you do
+to the parent dialog.</p></li></ol></div><p>
+</p></li><li><p>The third, the &quot;correct&quot; way: (should you do
this from the beginning, just carry out steps 1. and 2. from second
&quot;way&quot; above)
-</ns48:p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="guilabel">Advanced</span>
+</p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="guilabel">Advanced</span>
tab. (Hmmm... if everything is &quot;Grayed Out&quot;, then you are not logged
in as a user with enough privileges).</p></li><li><p>Click on the <span class="guibutton">Printing
Defaults...</span> button.</p></li><li><p>On any of the two new tabs, click on the
<span class="guilabel">Advanced...</span> button.</p></li><li><p>A new dialog opens. Compare this one to the other,
-identical looking one from &quot;B.5&quot; or A.3&quot;.</p></li></ol></div><ns48:p>
-</ns48:p></li></ol></div><ns49:p>
+identical looking one from &quot;B.5&quot; or A.3&quot;.</p></li></ol></div><p>
+</p></li></ol></div><p>
Do you see any difference in the two settings dialogs? I don't
either. However, only the last one, which you arrived at with steps
C.1.-6. will permanently save any settings which will then become the
defaults for new users. If you want all clients to have the same
defaults, you need to conduct these steps as administrator
-(<i class="parameter"><tt>printer admin</tt></i> in )
+(<a class="indexterm" name="id2903830"></a><i class="parameter"><tt>printer admin</tt></i> in )
<span class="emphasis"><em>before</em></span> a client downloads the driver (the clients
can later set their own <span class="emphasis"><em>per-user defaults</em></span> by
following the procedures <span class="emphasis"><em>A.</em></span>
@@ -7635,7 +7364,7 @@ try the same way with Win2k or WinXP. You wouldn't dream
that there is now a different &quot;clicking path&quot; to arrive at an
identically looking, but functionally different dialog to set defaults
for all users!
-</ns49:p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>Try (on Win2000 and WinXP) to run this command (as a user
+</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>Try (on Win2000 and WinXP) to run this command (as a user
with the right privileges):
</p><p><b class="userinput"><tt>
rundll32 printui.dll,PrintUIEntry /p /t3 /n\\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\<i class="replaceable"><tt>printersharename</tt></i>
@@ -7649,7 +7378,7 @@ to see the tab with the <span class="guilabel">Printing Preferences...</span>
button (the one which doesn't set system-wide defaults). You can
start the commands from inside a DOS box&quot; or from the <span class="guimenu">Start</span>
-- <span class="guimenuitem">Run...</span> menu.
-</p></div></div><div xmlns:ns50="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930879"></a>Supporting large Numbers of Printers</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904001"></a>Supporting large Numbers of Printers</h3></div></div><div></div></div><p>
One issue that has arisen during the recent development phase of Samba
is the need to support driver downloads for 100's of printers. Using
Windows NT APW here is somewhat awkward (to say the least). If you
@@ -7686,9 +7415,9 @@ following is an example of how this could be accomplished:
Driver Name: [myphantasydrivername]
[....]
-</pre><ns50:p>
+</pre><p>
-</ns50:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b>
cmd = enumprinters
flags:[0x800000]
@@ -7696,36 +7425,39 @@ following is an example of how this could be accomplished:
description:[\\SAMBA-CUPS\dm9110,,110ppm HiVolume DANKA Stuttgart]
comment:[110 ppm HiVolume DANKA Stuttgart]
[....]
-</pre><ns50:p>
+</pre><p>
-</ns50:p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'setdriver <i class="replaceable"><tt>dm9110</tt></i> &quot;<i class="replaceable"><tt>Heidelberg Digimaster 9110 (PS)</tt></i>&quot;'</tt></b>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c \
+ 'setdriver <i class="replaceable"><tt>dm9110</tt></i> &quot;<i class="replaceable"><tt>Heidelberg Digimaster 9110 (PS)</tt></i>&quot;'</tt></b>
cmd = setdriver dm9110 Heidelberg Digimaster 9110 (PPD)
Successfully set dm9110 to driver Heidelberg Digimaster 9110 (PS).
-</pre><ns50:p>
+</pre><p>
-</ns50:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b>
cmd = enumprinters
flags:[0x800000]
name:[\\SAMBA-CUPS\dm9110]
- description:[\\SAMBA-CUPS\dm9110,Heidelberg Digimaster 9110 (PS),110ppm HiVolume DANKA Stuttgart]
+ description:[\\SAMBA-CUPS\dm9110,Heidelberg Digimaster 9110 (PS),\
+ 110ppm HiVolume DANKA Stuttgart]
comment:[110ppm HiVolume DANKA Stuttgart]
[....]
-</pre><ns50:p>
+</pre><p>
-</ns50:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'setdriver <i class="replaceable"><tt>dm9110</tt></i> <i class="replaceable"><tt>myphantasydrivername</tt></i>'</tt></b>
cmd = setdriver dm9110 myphantasydrivername
Successfully set dm9110 to myphantasydrivername.
-</pre><ns50:p>
+</pre><p>
-</ns50:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b>
cmd = enumprinters
flags:[0x800000]
name:[\\SAMBA-CUPS\dm9110]
- description:[\\SAMBA-CUPS\dm9110,myphantasydrivername,110ppm HiVolume DANKA Stuttgart]
+ description:[\\SAMBA-CUPS\dm9110,myphantasydrivername,\
+ 110ppm HiVolume DANKA Stuttgart]
comment:[110ppm HiVolume DANKA Stuttgart]
[....]
</pre><p>
@@ -7736,7 +7468,7 @@ commas in the &quot;description&quot; field). After the
<b class="command">setdriver</b> command succeeded, all is well. (The
CUPS Printing chapter has more info about the installation of printer
drivers with the help of <b class="command">rpcclient</b>).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931181"></a>Adding new Printers with the Windows NT APW</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904312"></a>Adding new Printers with the Windows NT APW</h3></div></div><div></div></div><p>
By default, Samba exhibits all printer shares defined in
<tt class="filename">smb.conf</tt> in the
<span class="guiicon">Printers...</span> folder. Also located in this folder
@@ -7744,29 +7476,29 @@ is the Windows NT Add Printer Wizard icon. The APW will be shown only
if:
</p><div class="itemizedlist"><ul type="disc"><li><p>...the connected user is able to successfully execute
an <b class="command">OpenPrinterEx(\\server)</b> with administrative
-privileges (i.e. root or <i class="parameter"><tt>printer admin</tt></i>).
+privileges (i.e. root or <a class="indexterm" name="id2904358"></a><i class="parameter"><tt>printer admin</tt></i>).
</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p> Try this from a Windows 2K/XP DOS box command prompt:
</p><p><b class="userinput"><tt>
runas /netonly /user:root rundll32 printui.dll,PrintUIEntry /p /t0 /n \\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\<i class="replaceable"><tt>printersharename</tt></i>
</tt></b></p><p>
and click on <span class="guibutton">Printing Preferences...</span>
</p></div></li><li><p>... contains the setting
-<i class="parameter"><tt>show add printer wizard = yes</tt></i> (the
+<a class="indexterm" name="id2904413"></a><i class="parameter"><tt>show add printer wizard</tt></i> = yes (the
default).</p></li></ul></div><p>
The APW can do various things:
</p><div class="itemizedlist"><ul type="disc"><li><p>upload a new driver to the Samba
<i class="parameter"><tt>[print$]</tt></i> share;</p></li><li><p>associate an uploaded driver with an existing (but
still &quot;driverless&quot;) print queue;</p></li><li><p>exchange the currently used driver for an existing
print queue with one that has been uploaded before;</p></li><li><p>add an entirely new printer to the Samba host (only in
-conjunction with a working <i class="parameter"><tt>add printer command</tt></i>;
-a corresponding <i class="parameter"><tt>delete printer command</tt></i> for
+conjunction with a working <a class="indexterm" name="id2904471"></a><i class="parameter"><tt>add printer command</tt></i>;
+a corresponding <a class="indexterm" name="id2904486"></a><i class="parameter"><tt>delete printer command</tt></i> for
removing entries from the <span class="guiicon">Printers...</span> folder
may be provided too)</p></li></ul></div><p>
The last one (add a new printer) requires more effort than the
previous ones. In order to use the APW to successfully add a printer
-to a Samba server, the <i class="parameter"><tt>add printer command</tt></i> must
+to a Samba server, the <a class="indexterm" name="id2904516"></a><i class="parameter"><tt>add printer command</tt></i> must
have a defined value. The program hook must successfully add the
-printer to the Unix print system (i.e. to
+printer to the UNIX print system (i.e. to
<tt class="filename">/etc/printcap</tt>,
<tt class="filename">/etc/cups/printers.conf</tt> or other appropriate
files) and to if necessary.
@@ -7776,13 +7508,11 @@ exist, smbd will execute the <i class="parameter"><tt>add printer
command</tt></i> and reparse to the
to attempt to locate the new printer share. If the share is still not
defined, an error of <span class="errorname">Access Denied</span> is
-returned to the client. Note that the <i class="parameter"><tt>add printer
-command</tt></i> is executed under the context of the connected
-user, not necessarily a root account. A <i class="parameter"><tt>map to guest = bad
-user</tt></i> may have connected you unwittingly under the wrong
+returned to the client. Note that the <a class="indexterm" name="id2904566"></a><i class="parameter"><tt>add printer command</tt></i> is executed under the context of the connected
+user, not necessarily a root account. A <a class="indexterm" name="id2904582"></a><i class="parameter"><tt>map to guest</tt></i> = bad user may have connected you unwittingly under the wrong
privilege; you should check it by using the
<b class="command">smbstatus</b> command.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931425"></a>Weird Error Message <span class="errorname">Cannot connect under a
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904606"></a>Weird Error Message <span class="errorname">Cannot connect under a
different Name</span></h3></div></div><div></div></div><p>
Once you are connected with the wrong credentials, there is no means
to reverse the situation other than to close all Explorer windows, and
@@ -7812,7 +7542,7 @@ message. You close all Explorer Windows and start it again. You try to
connect - and this times it works! Windows seems to cache connection
info somewhere and doesn't keep it up to date (if you are unlucky you
might need to reboot to get rid of the error message).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931523"></a>Be careful when assembling Driver Files</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904706"></a>Be careful when assembling Driver Files</h3></div></div><div></div></div><p>
You need to be very careful when you take notes about the files and
belonging to a particular driver. Don't confuse the files for driver
version &quot;0&quot; (for Win95/98/ME, going into
@@ -7953,7 +7683,7 @@ In my example were even more differences than shown here. Conclusion:
you must be very careful to select the correct driver files for each
driver version. Don't rely on the names alone. Don't interchange files
belonging to different driver versions.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931794"></a>Samba and Printer Ports</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905065"></a>Samba and Printer Ports</h3></div></div><div></div></div><p>
Windows NT/2000 print servers associate a port with each
printer. These normally take the form of <tt class="filename">LPT1:</tt>,
<tt class="filename">COM1:</tt>, <tt class="filename">FILE:</tt>, etc. Samba
@@ -7972,20 +7702,20 @@ multiple ports as a form of load balancing or fail over.
If you require that multiple ports be defined for some reason or
another (&#8220;<span class="quote">My users and my Boss should not know that they are
working with Samba</span>&#8221;), possesses a
-<i class="parameter"><tt>enumports command</tt></i> which can be used to define
+<a class="indexterm" name="id2905140"></a><i class="parameter"><tt>enumports command</tt></i> which can be used to define
an external program that generates a listing of ports on a system.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931864"></a>Avoiding the most common Misconfigurations of the Client Driver</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905158"></a>Avoiding the most common Misconfigurations of the Client Driver</h3></div></div><div></div></div><p>
So - printing works, but there are still problems. Most jobs print
well, some don't print at all. Some jobs have problems with fonts,
which don't look good at all. Some jobs print fast, and some are
dead-slow. We can't cover it all; but we want to encourage you to read
the little paragraph about &quot;Avoiding the wrong PostScript Driver
Settings&quot; in the CUPS Printing part of this document.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2931887"></a>The Imprints Toolset</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905183"></a>The Imprints Toolset</h2></div></div><div></div></div><p>
The Imprints tool set provides a UNIX equivalent of the
Windows NT Add Printer Wizard. For complete information, please
refer to the Imprints web site
-at<a href="http://imprints.sourceforge.net/" target="_top">http://imprints.sourceforge.net/</a>
+at <a href="http://imprints.sourceforge.net/" target="_top">http://imprints.sourceforge.net/</a>
as well as the documentation included with the imprints source
distribution. This section will only provide a brief introduction
to the features of Imprints.
@@ -7998,20 +7728,20 @@ coordinate your efforts on the samba-technical mailing list. The
toolset is still in usable form; but only for a series of older
printer models, where there are prepared packages to use. Packages for
more up to date print devices are needed if Imprints should have a
-future.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931932"></a>What is Imprints?</h3></div></div><div></div></div><p>
+future.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905239"></a>What is Imprints?</h3></div></div><div></div></div><p>
Imprints is a collection of tools for supporting these goals:
</p><div class="itemizedlist"><ul type="disc"><li><p>Providing a central repository information regarding
Windows NT and 95/98 printer driver packages</p></li><li><p>Providing the tools necessary for creating the
Imprints printer driver packages.</p></li><li><p>Providing an installation client which will obtain
printer drivers from a central internet (or intranet) Imprints Server
repository and install them on remote Samba and Windows NT4 print
-servers.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931973"></a>Creating Printer Driver Packages</h3></div></div><div></div></div><p>
+servers.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905280"></a>Creating Printer Driver Packages</h3></div></div><div></div></div><p>
The process of creating printer driver packages is beyond the scope of
this document (refer to Imprints.txt also included with the Samba
distribution for more information). In short, an Imprints driver
package is a gzipped tarball containing the driver files, related INF
files, and a control file needed by the installation client.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931992"></a>The Imprints Server</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905299"></a>The Imprints Server</h3></div></div><div></div></div><p>
The Imprints server is really a database server that may be queried
via standard HTTP mechanisms. Each printer entry in the database has
an associated URL for the actual downloading of the package. Each
@@ -8019,7 +7749,7 @@ package is digitally signed via GnuPG which can be used to verify that
package downloaded is actually the one referred in the Imprints
database. It is strongly recommended that this security check
<span class="emphasis"><em>not</em></span> be disabled.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932017"></a>The Installation Client</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2905323"></a>The Installation Client</h3></div></div><div></div></div><p>
More information regarding the Imprints installation client is
available in the <tt class="filename">Imprints-Client-HOWTO.ps</tt> file
included with the imprints source package.
@@ -8034,10 +7764,10 @@ remote Samba and Windows NT print servers.
</p><p>
The basic installation process is in four steps and perl code is
wrapped around smbclient and rpcclient
-</p><div class="itemizedlist"><ul type="disc"><li xmlns:ns51=""><ns51:p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>
foreach (supported architecture for a given driver)
- </ns51:p><div class="orderedlist"><ol type="1"><li><p>rpcclient: Get the appropriate upload directory on the remote server</p></li><li><p>smbclient: Upload the driver files</p></li><li><p>rpcclient: Issues an AddPrinterDriver() MS-RPC</p></li></ol></div><ns51:p>
- </ns51:p></li><li><p>rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer</p></li></ul></div><p>
+ </p><div class="orderedlist"><ol type="1"><li><p>rpcclient: Get the appropriate upload directory on the remote server</p></li><li><p>smbclient: Upload the driver files</p></li><li><p>rpcclient: Issues an AddPrinterDriver() MS-RPC</p></li></ol></div><p>
+ </p></li><li><p>rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer</p></li></ul></div><p>
One of the problems encountered when implementing the Imprints tool
set was the name space issues between various supported client
architectures. For example, Windows NT includes a driver named &quot;Apple
@@ -8060,7 +7790,7 @@ if is has not already been installed?
The way of sidestepping this limitation is to require that all
Imprints printer driver packages include both the Intel Windows NT and
95/98 printer drivers and that NT driver is installed first.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932169"></a>Add Network Printers at Logon without User Interaction</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905478"></a>Add Network Printers at Logon without User Interaction</h2></div></div><div></div></div><p>
The following MS Knowledge Base article may be of some help if you
need to handle Windows 2000 clients: <span class="emphasis"><em>How to Add Printers
with No User Interaction in Windows 2000.</em></span> ( <a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.aspx?scid=kb;en-us;189105</a>
@@ -8085,13 +7815,7 @@ printers via Samba, but works for Windows-based print servers too):
<b class="userinput"><tt>rundll32 printui.dll,PrintUIEntry /y /n &quot;\\sambacupsserver\infotec2105-PS&quot;</tt></b>
</pre><p>
Here is a list of the used commandline parameters:
-</p><div class="variablelist"><dl><dt><span class="term">/dn</span></dt><dd><p>deletes a network printer</p></dd><dt><span class="term">/q</span></dt><dd><p>quiet modus</p></dd><dt><span class="term">/n</span></dt><dd><p>names a printer</p></dd><dt><span class="term">/in</span></dt><dd><p>adds a network printer connection</p></dd><dt><span class="term">/y</span></dt><dd><p>sets printer as default printer</p></dd></dl></div><p>
-I have tested this with a Samba 2.2.7a and a Samba-3alpha24
-installation and Windows XP Professional clients. Note that this
-specific command set works with network print queues (installing
-local print queues requires different parameters, but this is of no
-interest here).
-</p><div class="itemizedlist"><ul type="disc"><li><p>Line 1 deletes a possibly existing previous network
+</p><div class="variablelist"><dl><dt><span class="term">/dn</span></dt><dd><p>deletes a network printer</p></dd><dt><span class="term">/q</span></dt><dd><p>quiet modus</p></dd><dt><span class="term">/n</span></dt><dd><p>names a printer</p></dd><dt><span class="term">/in</span></dt><dd><p>adds a network printer connection</p></dd><dt><span class="term">/y</span></dt><dd><p>sets printer as default printer</p></dd></dl></div><div class="itemizedlist"><ul type="disc"><li><p>Line 1 deletes a possibly existing previous network
printer <span class="emphasis"><em>infotec2105-IPDS</em></span> (which had used native
Windows drivers with LPRng that were removed from the server which was
converted to CUPS). The <b class="command">/q</b> at the end eliminates
@@ -8135,7 +7859,7 @@ at logon time will not really be noticeable. Printers can be centrally
added, changed, and deleted at will on the server with no user
intervention required on the clients (you just need to keep the logon
scripts up to date).
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932498"></a>The <b class="command">addprinter</b> command</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905813"></a>The <b class="command">addprinter</b> command</h2></div></div><div></div></div><p>
The <b class="command">addprinter</b> command can be configured to be a
shell script or program executed by Samba. It is triggered by running
the APW from a client against the Samba print server. The APW asks the
@@ -8147,7 +7871,7 @@ on legacy systems, or execute the <b class="command">lpadmin</b> command
on more modern systems) and create the associated share in
, then the APW will in effect really
create a new printer on Samba and the UNIX print subsystem!
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932543"></a>Migration of &quot;Classical&quot; printing to Samba-3</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2905859"></a>Migration of &quot;Classical&quot; printing to Samba</h2></div></div><div></div></div><p>
The basic &quot;NT-style&quot; printer driver management has not changed
considerably in 3.0 over the 2.2.x releases (apart from many small
improvements). Here migration should be quite easy, especially if you
@@ -8158,14 +7882,13 @@ is more of an effort. Please read the appropriate release notes and
the HOWTO Collection for 2.2. You can follow several paths. Here are
possible scenarios for migration:
</p><div class="itemizedlist"><ul type="disc"><li><p>You need to study and apply the new Windows NT printer
-and driver support. Previously used parameters &quot;<i class="parameter"><tt>printer
-driver file</tt></i>&quot;, &quot; <i class="parameter"><tt>printer driver</tt></i>&quot; and
-&quot;<i class="parameter"><tt>printer driver location</tt></i>&quot; are no longer
+and driver support. Previously used parameters <i class="parameter"><tt>printer
+driver file</tt></i>, <i class="parameter"><tt>printer driver</tt></i> and
+<i class="parameter"><tt>printer driver location</tt></i> are no longer
supported.</p></li><li><p>If you want to take advantage of WinNT printer driver
support you also need to migrate the Win9x/ME drivers to the new
setup.</p></li><li><p>An existing <tt class="filename">printers.def</tt> file
-(the one specified in the now removed parameter <i class="parameter"><tt>printer
-driver file = ...</tt></i>) will work no longer with Samba-3.0. In
+ (the one specified in the now removed parameter <i class="parameter"><tt>printer driver file</tt></i>) will work no longer with samba 3. In
3.0, smbd attempts to locate a Win9x/ME driver files for the printer
in <i class="parameter"><tt>[print$]</tt></i> and additional settings in the TDB
and only there; if it fails it will <span class="emphasis"><em>not</em></span> (as 2.2.x
@@ -8181,77 +7904,79 @@ only solution is to use the Windows NT APW to install the NT drivers
and the 9x drivers. This can be scripted using smbclient and
rpcclient. See the Imprints installation client at:
</p><p>
-<a href="http://imprints.sourceforge.net/" target="_top"><span class="emphasis"><em>http://imprints.sourceforge.net/</em></span></a>
+ <a href="http://imprints.sourceforge.net/" target="_top">http://imprints.sourceforge.net/</a>
</p><p>
for an example. See also the discussion of rpcclient usage in the
-&quot;CUPS Printing&quot; section.</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932712"></a>Publishing Printer Information in Active Directory or LDAP</h2></div></div><div></div></div><p>
+&quot;CUPS Printing&quot; section.</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906032"></a>Publishing Printer Information in Active Directory or LDAP</h2></div></div><div></div></div><p>
We will publish an update to this section shortly.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932726"></a>Common Errors and Problems</h2></div></div><div></div></div><p>
-Here are a few typical errors and problems people have
-encountered. You can avoid them. Read on.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932739"></a>I give my root password but I don't get access</h3></div></div><div></div></div><p>
-Don't confuse the root password which is valid for the Unix system
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906044"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906050"></a>I give my root password but I don't get access</h3></div></div><div></div></div><p>
+Don't confuse the root password which is valid for the UNIX system
(and in most cases stored in the form of a one-way hash in a file
named <tt class="filename">/etc/shadow</tt>) with the password used to
authenticate against Samba!. Samba doesn't know the UNIX password; for
root to access Samba resources via Samba-type access, a Samba account
for root must be created first. This is often done with the
<b class="command">smbpasswd</b> command.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932773"></a>My printjobs get spooled into the spooling directory, but then get lost</h3></div></div><div></div></div><p>
-Don't use the existing Unix print system spool directory for the Samba
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906085"></a>My printjobs get spooled into the spooling directory, but then get lost</h3></div></div><div></div></div><p>
+Don't use the existing UNIX print system spool directory for the Samba
spool directory. It may seem convenient and a saving of space, but it
only leads to problems. The two <span class="emphasis"><em>must</em></span> be separate.
-</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="CUPS-printing"></a>Chapter19.CUPS Printing Support in Samba 3.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Ciprian</span> <span class="surname">Vizitiu</span></h3><span class="contrib">drawings</span><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:CVizitiu@gbif.org">CVizitiu@gbif.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> (3 June 2003) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2939792">Introduction</a></dt><dd><dl><dt><a href="#id2939799">Features and Benefits</a></dt><dt><a href="#id2939849">Overview</a></dt></dl></dd><dt><a href="#id2939900">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2939980">Linking of smbd with libcups.so</a></dt><dt><a href="#id2932886">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2932950">More complex smb.conf Settings for
-CUPS</a></dt></dl></dd><dt><a href="#id2933049">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2933069">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt><a href="#id2933096">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
-with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2933133">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2933191">Explicitly enable &quot;raw&quot; printing for
-application/octet-stream!</a></dt><dt><a href="#id2933352">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2933445">Using CUPS/Samba in an advanced Way -- intelligent printing
-with PostScript Driver Download</a></dt><dd><dl><dt><a href="#id2933520">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="#id2933565">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2933663">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="#id2933735">PostScript and Ghostscript</a></dt><dt><a href="#id2933832">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2933927">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2946744">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2946833">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2946856">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2946994">MIME types and CUPS Filters</a></dt><dt><a href="#id2947182">MIME type Conversion Rules</a></dt><dt><a href="#id2947298">Filter Requirements</a></dt><dt><a href="#id2947467">Prefilters</a></dt><dt><a href="#id2947552">pstops</a></dt><dt><a href="#id2947655">pstoraster</a></dt><dt><a href="#id2947811">imagetops and imagetoraster</a></dt><dt><a href="#id2947866">rasterto [printers specific]</a></dt><dt><a href="#id2947951">CUPS Backends</a></dt><dt><a href="#id2948265">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2948368">The Complete Picture</a></dt><dt><a href="#id2948383">mime.convs</a></dt><dt><a href="#id2948436">&quot;Raw&quot; printing</a></dt><dt><a href="#id2948490">&quot;application/octet-stream&quot; printing</a></dt><dt><a href="#id2948706">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2948933">Difference between cupsomatic/foomatic-rip and
-native CUPS printing</a></dt><dt><a href="#id2949090">Examples for filtering Chains</a></dt><dt><a href="#id2949319">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2949444">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2949506">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2949522">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2949561">Driver Execution on the Client</a></dt><dt><a href="#id2949620">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2949683">Network Printing (Windows clients -- UNIX/Samba Print
-Servers)</a></dt><dd><dl><dt><a href="#id2949704">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2949864">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2949942">Network PostScript RIP: CUPS Filters on Server -- clients use
-PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2949997">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2950038">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2950103">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2950120">Printer Drivers running in &quot;Kernel Mode&quot; cause many
-Problems</a></dt><dt><a href="#id2950155">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2950176">CUPS: a &quot;Magical Stone&quot;?</a></dt><dt><a href="#id2950203">PostScript Drivers with no major problems -- even in Kernel
-Mode</a></dt></dl></dd><dt><a href="#id2950237"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2950256">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2950347">Prepare your smb.conf for
-cupsaddsmb</a></dt><dt><a href="#id2950394">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt><a href="#id2950591">Recognize the different Driver Files</a></dt><dt><a href="#id2950649">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2950682">ESP Print Pro Package of &quot;PostScript Driver for
-WinNT/2k/XP&quot;</a></dt><dt><a href="#id2950732">Caveats to be considered</a></dt><dt><a href="#id2950953">What are the Benefits of using the &quot;CUPS PostScript Driver for
-Windows NT/2k/XP&quot; as compared to the Adobe Driver?</a></dt><dt><a href="#id2951134">Run &quot;cupsaddsmb&quot; (quiet Mode)</a></dt><dt><a href="#id2951235">Run &quot;cupsaddsmb&quot; with verbose Output</a></dt><dt><a href="#id2951378">Understanding cupsaddsmb</a></dt><dt><a href="#id2951472">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="#id2951559">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2951594">cupsaddsmb Flowchart</a></dt><dt><a href="#id2951645">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2951760">Avoiding critical PostScript Driver Settings on the
-Client</a></dt></dl></dd><dt><a href="#id2951894">Installing PostScript Driver Files manually (using
-rpcclient)</a></dt><dd><dl><dt><a href="#id2952009">A Check of the rpcclient man Page</a></dt><dt><a href="#id2952121">Understanding the rpcclient man Page</a></dt><dt><a href="#id2952200">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2952290">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2952452">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="#id2953072">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2953174">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2953277">Trivial DataBase Files</a></dt><dt><a href="#id2953347">Binary Format</a></dt><dt><a href="#id2953409">Losing *.tdb Files</a></dt><dt><a href="#id2953468">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2953530">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2953636">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2954264">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2954722">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2954753">Setting up Quotas</a></dt><dt><a href="#id2954784">Correct and incorrect Accounting</a></dt><dt><a href="#id2954825">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2954897">The page_log File Syntax</a></dt><dt><a href="#id2954998">Possible Shortcomings</a></dt><dt><a href="#id2955070">Future Developments</a></dt><dt><a href="#id2955118">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2955133">Additional Material</a></dt><dt><a href="#id2955326">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2955372">CUPS Configuration Settings explained</a></dt><dt><a href="#id2955454">Pre-conditions</a></dt><dt><a href="#id2955515">Manual Configuration</a></dt></dl></dd><dt><a href="#id2955533">When not to use Samba to print to
-CUPS</a></dt><dt><a href="#id2955550">In Case of Trouble.....</a></dt><dd><dl><dt><a href="#id2955585">Where to find Documentation</a></dt><dt><a href="#id2955598">How to ask for Help</a></dt><dt><a href="#id2955611">Where to find Help</a></dt></dl></dd><dt><a href="#id2955625">Appendix</a></dt><dd><dl><dt><a href="#id2955632">Printing from CUPS to Windows attached
-Printers</a></dt><dt><a href="#id2955826">More CUPS filtering Chains</a></dt><dt><a href="#id2956080">Trouble Shooting Guidelines to fix typical Samba printing
-Problems</a></dt><dt><a href="#id2957186">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2939792"></a>Introduction</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939799"></a>Features and Benefits</h3></div></div><div></div></div><p>
- The Common Unix Print System (<a href="http://www.cups.org/" target="_top">CUPS</a>) has become very popular. All
- big Linux distributions now ship it as their default printing
- system. But to many it is still a very mystical tool. Normally it
- &quot;just works&quot; (TM). People tend to regard it as a sort of &quot;black box&quot;,
- which they don't want to look into, as long as it works OK. But once
+</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="CUPS-printing"></a>Chapter19.CUPS Printing Support in Samba 3.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname">Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Ciprian</span> <span class="surname">Vizitiu</span></h3><span class="contrib">drawings</span><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:CVizitiu@gbif.org">CVizitiu@gbif.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><span class="contrib">drawings</span><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> (3 June 2003) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2906220">Introduction</a></dt><dd><dl><dt><a href="#id2906227">Features and Benefits</a></dt><dt><a href="#id2906281">Overview</a></dt></dl></dd><dt><a href="#id2906348">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="#id2906443">Linking of smbd with libcups.so</a></dt><dt><a href="#id2906684">Simple smb.conf Settings for CUPS</a></dt><dt><a href="#id2906866">More complex smb.conf Settings for
+CUPS</a></dt></dl></dd><dt><a href="#id2907221">Advanced Configuration</a></dt><dd><dl><dt><a href="#id2907241">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt><a href="#id2907296">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</a></dt><dt><a href="#id2907365">Driver Installation Methods on Windows Clients</a></dt><dt><a href="#id2907441">Explicitly enable &quot;raw&quot; printing for
+application/octet-stream!</a></dt><dt><a href="#id2907647">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="#id2907785">Using CUPS/Samba in an advanced Way -- intelligent printing
+with PostScript Driver Download</a></dt><dd><dl><dt><a href="#gdipost">GDI on Windows -- PostScript on UNIX</a></dt><dt><a href="#id2907968">Windows Drivers, GDI and EMF</a></dt><dt><a href="#id2908120">UNIX Printfile Conversion and GUI Basics</a></dt><dt><a href="#post-and-ghost">PostScript and Ghostscript</a></dt><dt><a href="#id2908420">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="#id2908563">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="#id2908649">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="#id2908755">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="#id2908777">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="#id2908970">MIME types and CUPS Filters</a></dt><dt><a href="#id2909178">MIME type Conversion Rules</a></dt><dt><a href="#id2909333">Filter Requirements</a></dt><dt><a href="#id2909513">Prefilters</a></dt><dt><a href="#id2909624">pstops</a></dt><dt><a href="#id2909734">pstoraster</a></dt><dt><a href="#id2909928">imagetops and imagetoraster</a></dt><dt><a href="#id2909993">rasterto [printers specific]</a></dt><dt><a href="#id2910145">CUPS Backends</a></dt><dt><a href="#id2910493">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="#id2910637">The Complete Picture</a></dt><dt><a href="#id2910653">mime.convs</a></dt><dt><a href="#id2910716">&quot;Raw&quot; printing</a></dt><dt><a href="#id2910805">&quot;application/octet-stream&quot; printing</a></dt><dt><a href="#id2911052">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="#id2911319">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a></dt><dt><a href="#id2911554">Examples for filtering Chains</a></dt><dt><a href="#id2911891">Sources of CUPS drivers / PPDs</a></dt><dt><a href="#id2912041">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="#id2912139">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="#id2912150">From Windows Clients to an NT Print Server</a></dt><dt><a href="#id2912212">Driver Execution on the Client</a></dt><dt><a href="#id2912287">Driver Execution on the Server</a></dt></dl></dd><dt><a href="#id2912407">Network Printing (Windows clients -- UNIX/Samba Print
+Servers)</a></dt><dd><dl><dt><a href="#id2912426">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="#id2912640">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="#id2912726">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="#id2912815">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="#id2912871">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="#id2912948">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="#id2912964">Printer Drivers running in &quot;Kernel Mode&quot; cause many
+Problems</a></dt><dt><a href="#id2913011">Workarounds impose Heavy Limitations</a></dt><dt><a href="#id2913032">CUPS: a &quot;Magical Stone&quot;?</a></dt><dt><a href="#id2913085">PostScript Drivers with no major problems -- even in Kernel
+Mode</a></dt></dl></dd><dt><a href="#id2913108">Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="#id2913163">cupsaddsmb: the unknown Utility</a></dt><dt><a href="#id2913282">Prepare your smb.conf for cupsaddsmb</a></dt><dt><a href="#id2913502">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt><a href="#id2913789">Recognize the different Driver Files</a></dt><dt><a href="#id2913932">Acquiring the Adobe Driver Files</a></dt><dt><a href="#id2913965">ESP Print Pro Package of &quot;PostScript Driver for
+WinNT/2k/XP&quot;</a></dt><dt><a href="#id2914035">Caveats to be considered</a></dt><dt><a href="#id2914308">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a></dt><dt><a href="#id2914525">Run &quot;cupsaddsmb&quot; (quiet Mode)</a></dt><dt><a href="#id2914652">Run &quot;cupsaddsmb&quot; with verbose Output</a></dt><dt><a href="#id2914873">Understanding cupsaddsmb</a></dt><dt><a href="#id2915022">How to recognize if cupsaddsmb completed successfully</a></dt><dt><a href="#id2915105">cupsaddsmb with a Samba PDC</a></dt><dt><a href="#id2915185">cupsaddsmb Flowchart</a></dt><dt><a href="#id2915261">Installing the PostScript Driver on a Client</a></dt><dt><a href="#id2915425">Avoiding critical PostScript Driver Settings on the
+Client</a></dt></dl></dd><dt><a href="#id2915559">Installing PostScript Driver Files manually (using
+rpcclient)</a></dt><dd><dl><dt><a href="#id2915762">A Check of the rpcclient man Page</a></dt><dt><a href="#id2915876">Understanding the rpcclient man page</a></dt><dt><a href="#id2915981">Producing an Example by querying a Windows Box</a></dt><dt><a href="#id2916147">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="#id2916361">Manual Driver Installation in 15 Steps</a></dt><dt><a href="#id2917432">Troubleshooting revisited</a></dt></dl></dd><dt><a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt><a href="#id2917838">Trivial DataBase Files</a></dt><dt><a href="#id2917930">Binary Format</a></dt><dt><a href="#id2917994">Losing *.tdb Files</a></dt><dt><a href="#id2918053">Using tdbbackup</a></dt></dl></dd><dt><a href="#id2918189">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="#id2918345">foomatic-rip and Foomatic explained</a></dt><dt><a href="#id2919115">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="#id2919616">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="#id2919667">Setting up Quotas</a></dt><dt><a href="#id2919734">Correct and incorrect Accounting</a></dt><dt><a href="#id2919778">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="#id2919874">The page_log File Syntax</a></dt><dt><a href="#id2919991">Possible Shortcomings</a></dt><dt><a href="#id2920067">Future Developments</a></dt><dt><a href="#id2920123">Other Accounting Tools</a></dt></dl></dd><dt><a href="#id2920136">Additional Material</a></dt><dt><a href="#id2920387">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="#id2920450">CUPS Configuration Settings explained</a></dt><dt><a href="#id2920543">Pre-conditions</a></dt><dt><a href="#id2920702">Manual Configuration</a></dt></dl></dd><dt><a href="#id2920760">In Case of Trouble.....</a></dt><dt><a href="#id2920832">Printing from CUPS to Windows attached
+Printers</a></dt><dt><a href="#id2921130">More CUPS filtering Chains</a></dt><dt><a href="#id2921233">Common Errors</a></dt><dd><dl><dt><a href="#id2921241">Win9x client can't install driver</a></dt><dt><a href="#id2921263">&quot;cupsaddsmb&quot; keeps asking for root password in
+ neverending loop</a></dt><dt><a href="#id2921311">&quot;cupsaddsmb&quot; gives &quot;No PPD file for printer...&quot;
+ message while PPD file is present</a></dt><dt><a href="#id2921368">Client can't connect to Samba printer</a></dt><dt><a href="#id2921397">Can't reconnect to Samba under new account
+ from Win2K/XP</a></dt><dt><a href="#id2921624">Avoid being connected to the Samba server as the
+ &quot;wrong&quot; user</a></dt><dt><a href="#id2921678">Upgrading to CUPS drivers from Adobe drivers on
+ NT/2K/XP clients gives problems</a></dt><dt><a href="#id2921695">Can't use &quot;cupsaddsmb&quot; on Samba server which is
+ a PDC</a></dt><dt><a href="#id2921726">Deleted Win2K printer driver is still shown</a></dt><dt><a href="#id2921734">Win2K/XP &quot;Local Security
+ Policies&quot;</a></dt><dt><a href="#id2921774">WinXP clients: &quot;Administrator can not install
+ printers for all local users&quot;</a></dt><dt><a href="#id2921808">&quot;Print Change Notify&quot; functions on
+ NT-clients</a></dt><dt><a href="#id2921830">WinXP-SP1</a></dt><dt><a href="#id2921875">Print options for all users can't be set on Win2K/XP</a></dt><dt><a href="#id2922164">Most common blunders in driver
+ settings on Windows clients</a></dt><dt><a href="#id2922210">cupsaddsmb does not work
+ with newly installed printer</a></dt><dt><a href="#id2922272">Permissions on
+/var/spool/samba/ get reset after each
+reboot</a></dt><dt><a href="#id2922380">Printer named &quot;lp&quot;
+intermittently swallows jobs and spits out completely different
+ones</a></dt><dt><a href="#id2922428">Location of Adobe PostScript driver files necessary for &quot;cupsaddsmb&quot;</a></dt></dl></dd><dt><a href="#id2922484">An Overview of the CUPS Printing Processes</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906220"></a>Introduction</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906227"></a>Features and Benefits</h3></div></div><div></div></div><p>
+ The Common UNIX Print System (<a href="http://www.cups.org/" target="_top">CUPS</a>) has become very popular. All
+ major Linux distributions now ship it as their default printing
+ system. To many it is still a very mystical tool. Mostly, it
+ &quot;just works&quot; (TM). People tend to regard it as a &quot;black box&quot;
+ which they don't want to look into, as long as it works. But once
there is a little problem, they are in trouble to find out where to
- start debugging it. Also, even the most recent and otherwise excellent
- printed Samba documentation has only limited attention paid to CUPS
- printing, leaving out important pieces or even writing plain wrong
- things about it. This demands rectification. But before you dive into
- this chapter, make sure that you don't forget to refer to the
- &quot;Classical Printing&quot; chapter also. It contains a lot of information
- that is relevant for CUPS too.
+ start debugging it. Refer to the &quot;Classical Printing&quot; chapter also, it
+ contains a lot of information that is relevant for CUPS.
</p><p>
CUPS sports quite a few unique and powerful features. While their
basic functions may be grasped quite easily, they are also
new. Because they are different from other, more traditional printing
systems, it is best to try and not apply any prior knowledge about
- printing upon this new system. Rather try to start understand CUPS
- from the beginning. This documentation will lead you here to a
- complete understanding of CUPS, if you study all of the material
- contained. But lets start with the most basic things first. Maybe this
- is all you need for now. Then you can skip most of the other
- paragraphs.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939849"></a>Overview</h3></div></div><div></div></div><p>
+ printing upon this new system. Rather, try to understand CUPS
+ from the beginning. This documentation will lead you to a
+ complete understanding of CUPS. Let's start with the most basic
+ things first.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906281"></a>Overview</h3></div></div><div></div></div><p>
CUPS is more than just a print spooling system. It is a complete
printer management system that complies with the new IPP
(<span class="emphasis"><em>Internet Printing Protocol</em></span>). IPP is an industry
and IETF (<span class="emphasis"><em>Internet Engineering Task Force</em></span>)
standard for network printing. Many of its functions can be managed
remotely (or locally) via a web browser (giving you a
- platform-independent access to the CUPS print server). In addition it
- has the traditional commandline and several more modern GUI interfaces
+ platform-independent access to the CUPS print server). Additionally, it
+ has the traditional command line and several more modern GUI interfaces
(GUI interfaces developed by 3rd parties, like KDE's
overwhelming <a href="http://printing.kde.org/" target="_top">KDEPrint</a>).
</p><p>
@@ -8263,80 +7988,53 @@ Problems</a></dt><dt><a href="#id2957186">An Overview of the CUPS Printing Proce
argue that CUPS is better! In any case, let us now move on to
explore how one may configure CUPS for interfacing with MS Windows
print clients via Samba.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2939900"></a>Basic Configuration of CUPS support</h2></div></div><div></div></div><p>
- Printing with CUPS in the most basic <tt class="filename">smb.conf</tt>
- setup in Samba 3.0 (as was true for 2.2.x) only needs two
- settings: <i class="parameter"><tt>printing = cups</tt></i> and <i class="parameter"><tt>printcap
- = cups</tt></i>. CUPS itself doesn't need a printcap file
- anymore. However, the <tt class="filename">cupsd.conf</tt> configuration
- file knows two related directives: they control if such a file should
- be automatically created and maintained by CUPS for the convenience of
- third party applications (example: <i class="parameter"><tt>Printcap
- /etc/printcap</tt></i> and <i class="parameter"><tt>PrintcapFormat
- BSD</tt></i>). These legacy programs often require the existence of
- printcap file containing printernames or they will refuse to
- print. Make sure CUPS is set to generate and maintain a printcap! For
- details see <b class="command">man cupsd.conf</b> and other CUPS-related
- documentation, like the wealth of documents on your CUPS server
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2906348"></a>Basic Configuration of CUPS support</h2></div></div><div></div></div><p>
+ Printing with CUPS in the most basic <tt class="filename">smb.conf</tt> setup in Samba 3.0 (as was true for 2.2.x) only needs two
+ settings: <a class="indexterm" name="id2906368"></a><i class="parameter"><tt>printing</tt></i> = cups and
+ <a class="indexterm" name="id2906382"></a><i class="parameter"><tt>printcap</tt></i> = cups. CUPS does not need a printcap file.
+ However, the <tt class="filename">cupsd.conf</tt> configuration file knows of two related directives that control
+ how such a file will be automatically created and maintained by CUPS for the convenience of third party
+ applications (example: <i class="parameter"><tt>Printcap /etc/printcap</tt></i> and <i class="parameter"><tt>PrintcapFormat BSD</tt></i>).
+ Legacy programs often require the existence of a printcap file containing printer names or they will refuse to
+ print. Make sure CUPS is set to generate and maintain a printcap file! For details see
+ <b class="command">man cupsd.conf</b> and other CUPS-related documentation, like the wealth of documents on your CUPS server
itself: <a href="http://localhost:631/documentation.html" target="_top">http://localhost:631/documentation.html</a>.
- </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939980"></a>Linking of smbd with libcups.so</h3></div></div><div></div></div><p>
- Samba has a very special relationship to CUPS. The reason is: Samba
- can be compiled with CUPS library support. Most recent installations
- have this support enabled, and per default CUPS linking is compiled
+ </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906443"></a>Linking of smbd with libcups.so</h3></div></div><div></div></div><p>
+ Samba has a very special relationship to CUPS. Samba can be compiled with CUPS library support.
+ Most recent installations have this support enabled. Per default CUPS linking is compiled
into smbd and other Samba binaries. Of course, you can use CUPS even
if Samba is not linked against <tt class="filename">libcups.so</tt> -- but
there are some differences in required or supported configuration
then.
</p><p>
- If SAMBA is compiled against libcups, then <i class="parameter"><tt>printcap =
- cups</tt></i> uses the CUPS API to list printers, submit jobs,
- query queues, etc. Otherwise it maps to the System V commands with an
- additional <b class="command">-oraw</b> option for printing. On a Linux
- system, you can use the <b class="command">ldd</b> utility to find out
- details (ldd may not be present on other OS platforms, or its function
- may be embodied by a different command):
+ When Samba is compiled against libcups, <a class="indexterm" name="id2906472"></a><i class="parameter"><tt>printcap</tt></i> = cups
+ uses the CUPS API to list printers, submit jobs, query queues, etc. Otherwise it maps to the System V
+ commands with an additional <b class="command">-oraw</b> option for printing. On a Linux
+ system, you can use the <b class="command">ldd</b> utility to find out details (ldd may not be present on
+ other OS platforms, or its function may be embodied by a different command):
</p><pre class="screen">
- transmeta:/home/kurt # ldd `which smbd`
- libssl.so.0.9.6 =&gt; /usr/lib/libssl.so.0.9.6 (0x4002d000)
- libcrypto.so.0.9.6 =&gt; /usr/lib/libcrypto.so.0.9.6 (0x4005a000)
- libcups.so.2 =&gt; /usr/lib/libcups.so.2 (0x40123000)
- [....]
- </pre><p>
- The line <tt class="computeroutput">libcups.so.2 =&gt; /usr/lib/libcups.so.2
- (0x40123000)</tt> shows there is CUPS support compiled
- into this version of Samba. If this is the case, and printing = cups
- is set, then <span class="emphasis"><em>any otherwise manually set print command in
- <tt class="filename">smb.conf</tt> is ignored</em></span>. This is an
- important point to remember!
- </p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p> Should you require -- for any reason -- to set your own
- print commands, you can still do this by setting <i class="parameter"><tt>printing =
- sysv</tt></i>. However, you'll loose all the benefits from the
- close CUPS/Samba integration. You are on your own then to manually
- configure the rest of the printing system commands (most important:
- <i class="parameter"><tt>print command</tt></i>; other commands are
- <i class="parameter"><tt>lppause command, lpresume command, lpq command, lprm
- command, queuepause command </tt></i> and <i class="parameter"><tt>queue resume
- command</tt></i>).</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932886"></a>Simple <tt class="filename">smb.conf</tt> Settings for CUPS</h3></div></div><div></div></div><p>
- To summarize, here is the simplest printing-related setup
- for <tt class="filename">smb.conf</tt> to enable basic CUPS support:
- </p><pre class="screen">
-
- [global]
- load printers = yes
- printing = cups
- printcap name = cups
-
- [printers]
- comment = All Printers
- path = /var/spool/samba
- browseable = no
- public = yes
- guest ok = yes
- writable = no
- printable = yes
- printer admin = root, @ntadmins
-
- </pre><p>
+<tt class="prompt">root# </tt><b class="userinput"><tt>ldd `which smbd`</tt></b>
+libssl.so.0.9.6 =&gt; /usr/lib/libssl.so.0.9.6 (0x4002d000)
+libcrypto.so.0.9.6 =&gt; /usr/lib/libcrypto.so.0.9.6 (0x4005a000)
+libcups.so.2 =&gt; /usr/lib/libcups.so.2 (0x40123000)
+[....]
+</pre><p>
+ The line <tt class="computeroutput">libcups.so.2 =&gt; /usr/lib/libcups.so.2 (0x40123000)</tt> shows
+ there is CUPS support compiled into this version of Samba. If this is the case, and printing = cups
+ is set, then <span class="emphasis"><em>any otherwise manually set print command in <tt class="filename">smb.conf</tt> is ignored</em></span>.
+ This is an important point to remember!
+ </p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p> Should it be necessary, for any reason, to set your own print commands, you can do this by setting
+ <a class="indexterm" name="id2906567"></a><i class="parameter"><tt>printing</tt></i> = sysv. However, you will loose all the benefits
+ of tight CUPS/Samba integration. When you do this you must manually configure the printing system commands
+ (most important: <a class="indexterm" name="id2906584"></a><i class="parameter"><tt>print command</tt></i>; other commands are
+ <a class="indexterm" name="id2906598"></a><i class="parameter"><tt>lppause command</tt></i>,
+ <a class="indexterm" name="id2906612"></a><i class="parameter"><tt>lpresume command</tt></i>,
+ <a class="indexterm" name="id2906626"></a><i class="parameter"><tt>lpq command</tt></i>,
+ <a class="indexterm" name="id2906639"></a><i class="parameter"><tt>lprm command</tt></i>,
+ <a class="indexterm" name="id2906653"></a><i class="parameter"><tt>queuepause command</tt></i> and
+ <a class="indexterm" name="id2906667"></a><i class="parameter"><tt>queue resume command</tt></i>).</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906684"></a>Simple <tt class="filename">smb.conf</tt> Settings for CUPS</h3></div></div><div></div></div><p>
+ To summarize, here is the simplest printing-related setup for <tt class="filename">smb.conf</tt> to enable basic CUPS support:
+ </p><div class="example"><a name="id2906712"></a><p class="title"><b>Example19.1.Simplest printing-related smb.conf</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>load printers = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = cups</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap name = cups</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = All Printers</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>public = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = root, @ntadmins</tt></i></td></tr></table></div><p>
This is all you need for basic printing setup for CUPS. It will print
all Graphic, Text, PDF and PostScript file submitted from Windows
clients. However, most of your Windows users would not know how to
@@ -8351,67 +8049,29 @@ Problems</a></dt><dt><a href="#id2957186">An Overview of the CUPS Printing Proce
printer is not a PostScript device, the print data stream is &quot;binary&quot;,
sensible only for the target printer. Read on to learn which problem
this may cause and how to avoid it.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932950"></a>More complex <tt class="filename">smb.conf</tt> Settings for
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2906866"></a>More complex <tt class="filename">smb.conf</tt> Settings for
CUPS</h3></div></div><div></div></div><p>
Here is a slightly more complex printing-related setup
for <tt class="filename">smb.conf</tt>. It enables general CUPS printing
support for all printers, but defines one printer share which is set
up differently.
-</p><pre class="screen">
-
- [global]
- printing = cups
- printcap name = cups
- load printers = yes
-
- [printers]
- comment = All Printers
- path = /var/spool/samba
- public = yes
- guest ok = yes
- writable = no
- printable = yes
- printer admin = root, @ntadmins
-
- [special_printer]
- comment = A special printer with his own settings
- path = /var/spool/samba-special
- printing = sysv
- printcap = lpstat
- print command = echo &quot;NEW: `date`: printfile %f&quot; &gt;&gt; /tmp/smbprn.log ;\
- echo &quot; `date`: p-%p s-%s f-%f&quot; &gt;&gt; /tmp/smbprn.log ;\
- echo &quot; `date`: j-%j J-%J z-%z c-%c&quot; &gt;&gt; /tmp/smbprn.log :\
- rm %f
- public = no
- guest ok = no
- writeable = no
- printable = yes
- printer admin = kurt
- hosts deny = 0.0.0.0
- hosts allow = turbo_xp, 10.160.50.23, 10.160.51.60
-
-</pre><p>
-This special share is only there for my testing purposes. It doesn't
-even write the print job to a file. It just logs the job parameters
-known to Samba into the <tt class="filename">/tmp/smbprn.log</tt> file and
-deletes the jobfile. Moreover, the <i class="parameter"><tt>printer
-admin</tt></i> of this share is &quot;kurt&quot; (not the &quot;@ntadmins&quot; group);
-guest access is not allowed; the share isn't announced in Network
-Neighbourhood (so you need to know it is there), and it is only
-allowing access from three hosts. To prevent CUPS kicking in and
-taking over the print jobs for that share, we need to set
-<i class="parameter"><tt>printing = sysv</tt></i> and <i class="parameter"><tt>printcap =
-lpstat</tt></i>.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933049"></a>Advanced Configuration</h2></div></div><div></div></div><p>
-Before we dive into all the configuration options, let's clarify a few
+</p><div class="example"><a name="id2906897"></a><p class="title"><b>Example19.2.Overriding global CUPS settings for one printer</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = cups</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap name = cups</tt></i></td></tr><tr><td><i class="parameter"><tt>load printers = yes</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = All Printers</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>public = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = root, @ntadmins</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[special_printer]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = A special printer with his own settings</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba-special</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = sysv</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap = lpstat</tt></i></td></tr><tr><td><i class="parameter"><tt>print command = echo &quot;NEW: `date`: printfile %f&quot; &gt;&gt; /tmp/smbprn.log ; \</tt></i></td></tr><tr><td><i class="parameter"><tt>echo &quot; `date`: p-%p s-%s f-%f&quot; &gt;&gt; /tmp/smbprn.log ; \</tt></i></td></tr><tr><td><i class="parameter"><tt>echo &quot; `date`: j-%j J-%J z-%z c-%c&quot; &gt;&gt; /tmp/smbprn.log : rm %f</tt></i></td></tr><tr><td><i class="parameter"><tt>public = no</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = no</tt></i></td></tr><tr><td><i class="parameter"><tt>writeable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = kurt</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts deny = 0.0.0.0</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts allow = turbo_xp, 10.160.50.23, 10.160.51.60</tt></i></td></tr></table></div><p>
+This special share is only there for testing purposes. It does not write the print job to a file. It just logs the job parameters
+known to Samba into the <tt class="filename">/tmp/smbprn.log</tt> file and deletes the jobfile. Moreover, the
+<a class="indexterm" name="id2907162"></a><i class="parameter"><tt>printer admin</tt></i> of this share is &quot;kurt&quot; (not the &quot;@ntadmins&quot; group);
+guest access is not allowed; the share isn not published to the Network Neighbourhood (so you need to know it is there), and it only
+allows access from only three hosts. To prevent CUPS kicking in and taking over the print jobs for that share, we need to set
+<a class="indexterm" name="id2907190"></a><i class="parameter"><tt>printing</tt></i> = sysv and
+<a class="indexterm" name="id2907204"></a><i class="parameter"><tt>printcap</tt></i> = lpstat.
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2907221"></a>Advanced Configuration</h2></div></div><div></div></div><p>
+Before we delve into all the configuration options, let us clarify a few
points. <span class="emphasis"><em>Network printing needs to be organized and setup
correctly</em></span>. Often this is not done correctly. Legacy systems
-or small LANs in business environments often lack a clear design and
-good housekeeping.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933069"></a>Central spooling vs. &quot;Peer-to-Peer&quot; printing</h3></div></div><div></div></div><p>
+or small business LAN environments often lack design and good housekeeping.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907241"></a>Central spooling vs. &quot;Peer-to-Peer&quot; printing</h3></div></div><div></div></div><a class="indexterm" name="id2907250"></a><a class="indexterm" name="id2907261"></a><p>
Many small office or home networks, as well as badly organized larger
environments, allow each client a direct access to available network
-printers. Generally, this is a bad idea. It often blocks one client's
+printers. This is generally a bad idea. It often blocks one client's
access to the printer when another client's job is printing. It also
might freeze the first client's application while it is waiting to get
rid of the job. Also, there are frequent complaints about various jobs
@@ -8420,18 +8080,18 @@ is the usage of a &quot;print server&quot;: it routes all jobs through one
central system, which responds immediately, takes jobs from multiple
concurrent clients at the same time and in turn transfers them to the
printer(s) in the correct order.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933096"></a>CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
-with Vendor Drivers on Windows Clients</h3></div></div><div></div></div><p>
-Most traditionally configured Unix print servers acting on behalf of
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907296"></a>CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</h3></div></div><div></div></div><a class="indexterm" name="id2907306"></a><a class="indexterm" name="id2907314"></a><p>
+Most traditionally configured UNIX print servers acting on behalf of
Samba's Windows clients represented a really simple setup. Their only
task was to manage the &quot;raw&quot; spooling of all jobs handed to them by
Samba. This approach meant that the Windows clients were expected to
-prepare the print job file in such a way that it became fit to be fed to
-the printing device. Here a native (vendor-supplied) Windows printer
+prepare the print job file that it s ready to be sent to the printing
+device. Here a native (vendor-supplied) Windows printer
driver for the target device needed to be installed on each and every
client.
</p><p>
-Of course you can setup CUPS, Samba and your Windows clients in the
+It is possible to configure CUPS, Samba and your Windows clients in the
same, traditional and simple way. When CUPS printers are configured
for RAW print-through mode operation it is the responsibility of the
Samba client to fully render the print job (file). The file must be
@@ -8439,21 +8099,23 @@ sent in a format that is suitable for direct delivery to the
printer. Clients need to run the vendor-provided drivers to do
this. In this case CUPS will NOT do any print file format conversion
work.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933133"></a>Driver Installation Methods on Windows Clients</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907365"></a>Driver Installation Methods on Windows Clients</h3></div></div><div></div></div><p>
The printer drivers on the Windows clients may be installed
in two functionally different ways:
</p><div class="itemizedlist"><ul type="disc"><li><p>manually install the drivers locally on each client,
one by one; this yields the old <span class="emphasis"><em>LanMan</em></span> style
printing; it uses a <tt class="filename">\\sambaserver\printershare</tt>
-type of connection.</p></li><li><p>deposit and prepare the drivers (for later download) on
+type of connection.</p></li><li><p>
+<a class="indexterm" name="id2907407"></a>
+ deposit and prepare the drivers (for later download) on
the print server (Samba); this enables the clients to use
-&quot;Point'n'Print&quot; to get drivers semi-automatically installed the
+&quot;Point and Print&quot; to get drivers semi-automatically installed the
first time they access the printer; with this method NT/2K/XP
clients use the <span class="emphasis"><em>SPOOLSS/MS-RPC</em></span>
type printing calls.</p></li></ul></div><p>
The second method is recommended for use over the first.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933191"></a>Explicitly enable &quot;raw&quot; printing for
-<span class="emphasis"><em>application/octet-stream</em></span>!</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907441"></a>Explicitly enable &quot;raw&quot; printing for
+<span class="emphasis"><em>application/octet-stream</em></span>!</h3></div></div><div></div></div><a class="indexterm" name="id2907454"></a><p>
If you use the first option (drivers are installed on the client
side), there is one setting to take care of: CUPS needs to be told
that it should allow &quot;raw&quot; printing of deliberate (binary) file
@@ -8466,16 +8128,12 @@ be uncommented to allow RAW mode operation.
In<tt class="filename">/etc/cups/mime.types</tt> make sure this line is
present:
</p><pre class="screen">
-
application/octet-stream
-
</pre><p>
In <tt class="filename">/etc/cups/mime.convs</tt>,
have this line:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2907523"></a><pre class="screen">
application/octet-stream application/vnd.cups-raw 0 -
-
</pre><p>
If these two files are not set up correctly for raw Windows client
printing, you may encounter the dreaded <tt class="computeroutput">Unable to
@@ -8484,7 +8142,7 @@ convert file 0</tt> in your CUPS error_log file.
<tt class="filename">mime.types</tt> file does not
<span class="emphasis"><em>enforce</em></span> &quot;raw&quot; printing, it only
<span class="emphasis"><em>allows</em></span> it.
-</p></div><p><b>Background.</b>
+</p></div><p><b>Background.</b><a class="indexterm" name="id2907589"></a>
CUPS being a more security-aware printing system than traditional ones
does not by default allow a user to send deliberate (possibly binary)
data to printing devices. This could be easily abused to launch a
@@ -8501,7 +8159,7 @@ This is all you need to know to get the CUPS/Samba combo printing
locally installed. If you are not interested in background information about
more advanced CUPS/Samba printing, simply skip the remaining sections
of this chapter.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933352"></a>Three familiar Methods for driver upload plus a new one</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907647"></a>Three familiar Methods for driver upload plus a new one</h3></div></div><div></div></div><a class="indexterm" name="id2907657"></a><p>
If you want to use the MS-RPC type printing, you must upload the
drivers onto the Samba server first (<i class="parameter"><tt>[print$]</tt></i>
share). For a discussion on how to deposit printer drivers on the
@@ -8509,23 +8167,25 @@ Samba host (so that the Windows clients can download and use them via
&quot;Point'n'Print&quot;) please also refer to the previous chapter of this
HOWTO Collection. There you will find a description or reference to
three methods of preparing the client drivers on the Samba server:
-</p><div class="itemizedlist"><ul type="disc"><li><p>the GUI, &quot;Add Printer Wizard&quot;
+</p><a class="indexterm" name="id2907694"></a><div class="itemizedlist"><ul type="disc"><li><p>the GUI, &quot;Add Printer Wizard&quot;
<span class="emphasis"><em>upload-from-a-Windows-client</em></span>
method;</p></li><li><p>the commandline, &quot;smbclient/rpcclient&quot;
<span class="emphasis"><em>upload-from-a-UNIX-workstation</em></span>
-method;</p></li><li><p>the <span class="emphasis"><em>Imprints</em></span> Toolset
+method;</p></li><li><p>
+<a class="indexterm" name="id2907734"></a>
+ the <span class="emphasis"><em>Imprints</em></span> Toolset
method.</p></li></ul></div><p>
These 3 methods apply to CUPS all the same. A new and more
convenient way to load the Windows drivers into Samba is provided
-provided if you use CUPS:
-</p><div class="itemizedlist"><ul type="disc"><li><p>the <span class="emphasis"><em>cupsaddsmb</em></span>
+if you use CUPS:
+</p><a class="indexterm" name="id2907755"></a><div class="itemizedlist"><ul type="disc"><li><p>the <span class="emphasis"><em>cupsaddsmb</em></span>
utility.</p></li></ul></div><p>
cupsaddsmb is discussed in much detail further below. But we will
first explore the CUPS filtering system and compare the Windows and
UNIX printing architectures.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933445"></a>Using CUPS/Samba in an advanced Way -- intelligent printing
-with PostScript Driver Download</h2></div></div><div></div></div><p>
-Still reading on? Good. Let's go into more detail then. We now know
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2907785"></a>Using CUPS/Samba in an advanced Way -- intelligent printing
+with PostScript Driver Download</h2></div></div><div></div></div><a class="indexterm" name="id2907795"></a><p>
+Are you still following this? Good. Let's go into more detail then. We now know
how to set up a &quot;dump&quot; printserver, that is, a server which is spooling
printjobs &quot;raw&quot;, leaving the print data untouched.
</p><p>
@@ -8546,13 +8206,13 @@ server meeting these requirements, you'll first need to learn about
how CUPS works and how you can enable its features.
</p><p>
What follows is the comparison of some fundamental concepts for
-Windows and Unix printing; then is the time for a description of the
+Windows and UNIX printing; then is the time for a description of the
CUPS filtering system, how it works and how you can tweak it.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933520"></a>GDI on Windows -- PostScript on Unix</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="gdipost"></a>GDI on Windows -- PostScript on UNIX</h3></div></div><div></div></div><a class="indexterm" name="id2907893"></a><a class="indexterm" name="id2907901"></a><p>
Network printing is one of the most complicated and error-prone
day-to-day tasks any user or an administrator may encounter. This is
true for all OS platforms. And there are reasons for this.
-</p><p>
+</p><a class="indexterm" name="id2907917"></a><a class="indexterm" name="id2907926"></a><p>
You can't expect for most file formats to just throw them towards
printers and they get printed. There needs to be a file format
conversion in between. The problem is: there is no common standard for
@@ -8564,7 +8224,7 @@ into semi-official &quot;standards&quot;, by being the most widely used PDLs
many manufacturers who &quot;roll their own&quot; (their reasons may be
unacceptable license fees for using printer-embedded PostScript
interpreters, etc.).
-</p></div><div xmlns:ns52="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933565"></a>Windows Drivers, GDI and EMF</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2907968"></a>Windows Drivers, GDI and EMF</h3></div></div><div></div></div><a class="indexterm" name="id2907976"></a><a class="indexterm" name="id2907984"></a><a class="indexterm" name="id2907992"></a><p>
In Windows OS, the format conversion job is done by the printer
drivers. On MS Windows OS platforms all application programmers have
at their disposal a built-in API, the GDI (<span class="emphasis"><em>Graphical Device
@@ -8581,16 +8241,17 @@ the GDI, produces often a file format called EMF (<span class="emphasis"><em>Enh
MetaFile</em></span>). The EMF is processed by the printer driver and
converted to the printer-specific file format.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2908053"></a>
To the GDI foundation in MS Windows, Apple has chosen to
put paper and screen output on a common foundation for their
-(BSD-Unix-based, did you know??) Mac OS X and Darwin Operating
-Systems.Their <span class="emphasis"><em>Core Graphic Engine</em></span> uses a
-<span class="emphasis"><em>PDF</em></span> derivate for all display work.
-</p></div><ns52:p>
+(BSD-UNIX-based, did you know??) Mac OS X and Darwin Operating
+Systems. Their <span class="emphasis"><em>Core Graphic Engine</em></span> uses a
+<span class="emphasis"><em>PDF</em></span> derivative for all display work.
+</p></div><p>
-</ns52:p><div class="figure"><a name="id2933630"></a><p class="title"><b>Figure19.1.Windows Printing to a local Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="Windows Printing to a local Printer"></div></div><ns52:p>
-</ns52:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933663"></a>Unix Printfile Conversion and GUI Basics</h3></div></div><div></div></div><p>
-In Unix and Linux, there is no comparable layer built into the OS
+</p><div class="figure"><a name="small1"></a><p class="title"><b>Figure19.1.Windows Printing to a local Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" width="270" alt="Windows Printing to a local Printer"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908120"></a>UNIX Printfile Conversion and GUI Basics</h3></div></div><div></div></div><a class="indexterm" name="id2908127"></a><a class="indexterm" name="id2908136"></a><a class="indexterm" name="id2908144"></a><a class="indexterm" name="id2908152"></a><p>
+In UNIX and Linux, there is no comparable layer built into the OS
kernel(s) or the X (screen display) server. Every application is
responsible for itself to create its print output. Fortunately, most
use PostScript. That gives at least some common ground. Unfortunately,
@@ -8609,7 +8270,7 @@ ready for prime time.) You can see this unfavorable inheritance up to
the present day by looking into the various &quot;font&quot; directories on your
system; there are separate ones for fonts used for X display and fonts
to be used on paper.
-</p><p><b>Background.</b>
+</p><p><b>Background.</b><a class="indexterm" name="id2908211"></a>
The PostScript programming language is an &quot;invention&quot; by Adobe Inc.,
but its specifications have been published to the full. Its strength
lies in its powerful abilities to describe graphical objects (fonts,
@@ -8625,9 +8286,9 @@ form and you will be reading its PostScript code, the language
instructions which need to be interpreted by a rasterizer. Rasterizers
produce pixel images, which may be displayed on screen by a viewer
program or on paper by a printer.
-</p></div><div xmlns:ns53="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933735"></a>PostScript and Ghostscript</h3></div></div><div></div></div><p>
-So, Unix is lacking a common ground for printing on paper and
-displaying on screen. Despite this unfavorable legacy for Unix, basic
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="post-and-ghost"></a>PostScript and Ghostscript</h3></div></div><div></div></div><a class="indexterm" name="id2908263"></a><a class="indexterm" name="id2908270"></a><a class="indexterm" name="id2908281"></a><p>
+So, UNIX is lacking a common ground for printing on paper and
+displaying on screen. Despite this unfavorable legacy for UNIX, basic
printing is fairly easy: if you have PostScript printers at your
disposal! The reason is: these devices have a built-in PostScript
language &quot;interpreter&quot;, also called a <span class="emphasis"><em>Raster Image
@@ -8637,34 +8298,36 @@ spit out your printed pages. Their RIP is doing all the hard work of
converting the PostScript drawing commands into a bitmap picture as
you see it on paper, in a resolution as done by your printer. This is
no different to PostScript printing of a file from a Windows origin.
-</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Traditional Unix programs and printing systems -- while
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2908324"></a>
+Traditional UNIX programs and printing systems -- while
using PostScript -- are largely not PPD-aware. PPDs are &quot;PostScript
Printer Description&quot; files. They enable you to specify and control all
options a printer supports: duplexing, stapling, punching... Therefore
-Unix users for a long time couldn't choose many of the supported
+UNIX users for a long time couldn't choose many of the supported
device and job options, unlike Windows or Apple users. But now there
-is CUPS.... ;-)
-</p></div><ns53:p>
-</ns53:p><div class="figure"><a name="id2933781"></a><p class="title"><b>Figure19.2.Printing to a Postscript Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/2small.png" alt="Printing to a Postscript Printer"></div></div><ns53:p>
-</ns53:p><p>
+is CUPS....
+</p></div><p>
+ </p><div class="figure"><a name="small2"></a><p class="title"><b>Figure19.2.Printing to a Postscript Printer</b></p><div class="mediaobject"><img src="projdoc/imagefiles/2small.png" width="270" alt="Printing to a Postscript Printer"></div></div><p>
+</p><a class="indexterm" name="id2908396"></a><p>
However, there are other types of printers out there. These don't know
how to print PostScript. They use their own <span class="emphasis"><em>Page Description
Language</em></span> (PDL, often proprietary). To print to them is much
-more demanding. Since your Unix applications mostly produce
+more demanding. Since your UNIX applications mostly produce
PostScript, and since these devices don't understand PostScript, you
need to convert the printfiles to a format suitable for your printer
on the host, before you can send it away.
-</p></div><div xmlns:ns54="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933832"></a>Ghostscript -- the Software RIP for non-PostScript Printers</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908420"></a>Ghostscript -- the Software RIP for non-PostScript Printers</h3></div></div><div></div></div><a class="indexterm" name="id2908429"></a><p>
Here is where <span class="emphasis"><em>Ghostscript</em></span> kicks in. Ghostscript is
the traditional (and quite powerful) PostScript interpreter used on
-Unix platforms. It is a RIP in software, capable to do a
+UNIX platforms. It is a RIP in software, capable to do a
<span class="emphasis"><em>lot</em></span> of file format conversions, for a very broad
spectrum of hardware devices as well as software file formats.
Ghostscript technology and drivers is what enables PostScript printing
to non-PostScript hardware.
-</p><ns54:p>
-</ns54:p><div class="figure"><a name="id2933861"></a><p class="title"><b>Figure19.3.Ghostscript as a RIP for non-postscript printers</b></p><div class="mediaobject"><img src="projdoc/imagefiles/3small.png" alt="Ghostscript as a RIP for non-postscript printers"></div></div><ns54:p>
-</ns54:p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>
+</p><p>
+ </p><div class="figure"><a name="small3"></a><p class="title"><b>Figure19.3.Ghostscript as a RIP for non-postscript printers</b></p><div class="mediaobject"><img src="projdoc/imagefiles/3small.png" width="270" alt="Ghostscript as a RIP for non-postscript printers"></div></div><p>
+</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>
Use the &quot;gs -h&quot; command to check for all built-in &quot;devices&quot; of your
Ghostscript version. If you specify e.g. a parameter of
<i class="parameter"><tt>-sDEVICE=png256</tt></i> on your Ghostscript command
@@ -8676,12 +8339,12 @@ intervals, now by artofcode LLC. They are initially put under the
&quot;AFPL&quot; license, but re-released under the GNU GPL as soon as the next
AFPL version appears. GNU Ghostscript is probably the version
installed on most Samba systems. But it has got some
-deficiencies. Therefore ESP Ghostscript was developed as an
+deficiencies. <a class="indexterm" name="id2908538"></a>Therefore ESP Ghostscript was developed as an
enhancement over GNU Ghostscript, with lots of bug-fixes, additional
devices and improvements. It is jointly maintained by developers from
CUPS, Gimp-Print, MandrakeSoft, SuSE, RedHat and Debian. It includes
the &quot;cups&quot; device (essential to print to non-PS printers from CUPS).
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933927"></a>PostScript Printer Description (PPD) Specification</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908563"></a>PostScript Printer Description (PPD) Specification</h3></div></div><div></div></div><a class="indexterm" name="id2908570"></a><p>
While PostScript in essence is a <span class="emphasis"><em>Page Description
Language</em></span> (PDL) to represent the page layout in a
<span class="emphasis"><em>device independent</em></span> way, real world print jobs are
@@ -8707,15 +8370,16 @@ user selections are somehow written (in the form of special
PostScript, PJL, JCL or vendor-dependent commands) into the PostScript
file created by the driver.
</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+<a class="indexterm" name="id2908632"></a>
A PostScript file that was created to contain device-specific commands
for achieving a certain print job output (e.g. duplexed, stapled and
punched) on a specific target machine, may not print as expected, or
may not be printable at all on other models; it also may not be fit
for further processing by software (e.g. by a PDF distilling program).
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946744"></a>CUPS can use all Windows-formatted Vendor PPDs</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908649"></a>CUPS can use all Windows-formatted Vendor PPDs</h3></div></div><div></div></div><p>
CUPS can handle all spec-compliant PPDs as supplied by the
manufacturers for their PostScript models. Even if a
-Unix/Linux-illiterate vendor might not have mentioned our favorite
+UNIX/Linux-illiterate vendor might not have mentioned our favorite
OS in his manuals and brochures -- you can safely trust this:
<span class="emphasis"><em>if you get hold of the Windows NT version of the PPD, you
can use it unchanged in CUPS</em></span> and thus access the full
@@ -8727,6 +8391,8 @@ immediately. CUPS in all versions after 1.1.19 has a much more strict
internal PPD parsing and checking code enabled; in case of printing
trouble this online resource should be one of your first pitstops.
</p></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+<a class="indexterm" name="id2908697"></a>
+<a class="indexterm" name="id2908705"></a>
For real PostScript printers <span class="emphasis"><em>don't</em></span> use the
<span class="emphasis"><em>Foomatic</em></span> or <span class="emphasis"><em>cupsomatic</em></span>
PPDs from Linuxprinting.org. With these devices the original
@@ -8739,7 +8405,7 @@ your LAN has the PostScript driver installed, just use
access the Windows directory where all printer driver files are
stored. First look in the <tt class="filename">W32X86/2</tt> subdir for
the PPD you are seeking.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946833"></a>CUPS also uses PPDs for non-PostScript Printers</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908755"></a>CUPS also uses PPDs for non-PostScript Printers</h3></div></div><div></div></div><p>
CUPS also uses specially crafted PPDs to handle non-PostScript
printers. These PPDs are usually not available from the vendors (and
no, you can't just take the PPD of a Postscript printer with the same
@@ -8747,7 +8413,7 @@ model name and hope it works for the non-PostScript version too). To
understand how these PPDs work for non-PS printers we first need to
dive deeply into the CUPS filtering and file format conversion
architecture. Stay tuned.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946856"></a>The CUPS Filtering Architecture</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2908777"></a>The CUPS Filtering Architecture</h2></div></div><div></div></div><p>
The core of the CUPS filtering system is based on
<span class="emphasis"><em>Ghostscript</em></span>. In addition to Ghostscript, CUPS
uses some other filters of its own. You (or your OS vendor) may have
@@ -8773,23 +8439,27 @@ Make sure your Ghostscript version has the &quot;cups&quot; device compiled in
may encounter the dreaded <tt class="computeroutput">Unable to convert file
0</tt> in your CUPS error_log file. To have &quot;cups&quot; as a
device in your Ghostscript, you either need to <span class="emphasis"><em>patch GNU
-Ghostscript</em></span> and re-compile or use <a href="http://www.cups.org/ghostscript.php" target="_top">ESP Ghostscript</a>. The
+Ghostscript</em></span> and re-compile or use <a class="indexterm" name="id2908880"></a><a href="http://www.cups.org/ghostscript.php" target="_top">ESP Ghostscript</a>. The
superior alternative is ESP Ghostscript: it supports not just CUPS,
but 300 other devices too (while GNU Ghostscript supports only about
180). Because of this broad output device support, ESP Ghostscript is
the first choice for non-CUPS spoolers too. It is now recommended by
Linuxprinting.org for all spoolers.
</p><p>
+<a class="indexterm" name="id2908908"></a>
+<a class="indexterm" name="id2908916"></a>
CUPS printers may be setup to use <span class="emphasis"><em>external</em></span>
rendering paths. One of the most common ones is provided by the
<span class="emphasis"><em>Foomatic/cupsomatic</em></span> concept, from <a href="http://www.linuxprinting.org/" target="_top">Linuxprinting.org</a>. This
uses the classical Ghostscript approach, doing everything in one
step. It doesn't use the &quot;cups&quot; device, but one of the many
others. However, even for Foomatic/cupsomatic usage, best results and
+<a class="indexterm" name="id2908953"></a>
broadest printer model support is provided by ESP Ghostscript (more
about cupsomatic/Foomatic, particularly the new version called now
<span class="emphasis"><em>foomatic-rip</em></span>, follows below).
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946994"></a>MIME types and CUPS Filters</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908970"></a>MIME types and CUPS Filters</h3></div></div><div></div></div><p>
+ <a class="indexterm" name="id2908982"></a>
CUPS reads the file <tt class="filename">/etc/cups/mime.types</tt>
(and all other files carrying a <tt class="filename">*.types</tt> suffix
in the same directory) upon startup. These files contain the MIME
@@ -8798,10 +8468,10 @@ auto-typing routines. The rule syntax is explained in the man page
for <tt class="filename">mime.types</tt> and in the comments section of the
<tt class="filename">mime.types</tt> file itself. A simple rule reads
like this:
+</p><p>
+<a class="indexterm" name="id2909028"></a>
</p><pre class="screen">
-
application/pdf pdf string(0,%PDF)
-
</pre><p>
This means: if a filename has either a
<tt class="filename">.pdf</tt> suffix, or if the magic
@@ -8810,9 +8480,7 @@ beginning of the file itself (offset 0 from the start), then it is
a PDF file (<span class="emphasis"><em>application/pdf</em></span>).
Another rule is this:
</p><pre class="screen">
-
application/postscript ai eps ps string(0,%!) string(0,&lt;04&gt;%!)
-
</pre><p>
Its meaning: if the filename has one of the suffixes
<tt class="filename">.ai</tt>, <tt class="filename">.eps</tt>,
@@ -8842,7 +8510,7 @@ CUPS can handle ASCII text, HP-GL, PDF, PostScript, DVI and a
lot of image formats (GIF. PNG, TIFF, JPEG, Photo-CD, SUN-Raster,
PNM, PBM, SGI-RGB and some more) and their associated MIME types
with its filters.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947182"></a>MIME type Conversion Rules</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909178"></a>MIME type Conversion Rules</h3></div></div><div></div></div><a class="indexterm" name="id2909186"></a><p>
CUPS reads the file <tt class="filename">/etc/cups/mime.convs</tt>
(and all other files named with a <tt class="filename">*.convs</tt>
suffix in the same directory) upon startup. These files contain
@@ -8851,39 +8519,31 @@ conversion filter which can produce the output from the input type
and virtual costs associated with this conversion. One example line
reads like this:
</p><pre class="screen">
-
application/pdf application/postscript 33 pdftops
-
</pre><p>
This means that the <span class="emphasis"><em>pdftops</em></span> filter will take
<span class="emphasis"><em>application/pdf</em></span> as input and produce
<span class="emphasis"><em>application/postscript</em></span> as output, the virtual
cost of this operation is 33 CUPS-$. The next filter is more
expensive, costing 66 CUPS-$:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2909248"></a><pre class="screen">
application/vnd.hp-HPGL application/postscript 66 hpgltops
-
</pre><p>
This is the <span class="emphasis"><em>hpgltops</em></span>, which processes HP-GL
plotter files to PostScript.
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2909275"></a><pre class="screen">
application/octet-stream
-
</pre><p>
Here are two more examples:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2909297"></a><pre class="screen">
application/x-shell application/postscript 33 texttops
text/plain application/postscript 33 texttops
-
</pre><p>
The last two examples name the <span class="emphasis"><em>texttops</em></span> filter
to work on &quot;text/plain&quot; as well as on &quot;application/x-shell&quot;. (Hint:
this differentiation is needed for the syntax highlighting feature of
&quot;texttops&quot;).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947298"></a>Filter Requirements</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909333"></a>Filter Requirements</h3></div></div><div></div></div><a class="indexterm" name="id2909340"></a><p>
There are many more combinations named in mime.convs. However, you
are not limited to use the ones pre-defined there. You can plug in any
filter you like into the CUPS framework. It must meet, or must be made
@@ -8899,13 +8559,13 @@ filenames or <tt class="filename">stdin</tt> as input and write to
<span class="emphasis"><em>printer job user title copies options [filename]</em></span>
</p><div class="variablelist"><dl><dt><span class="term">Printer</span></dt><dd><p>The name of the printer queue (normally this is the
name of the filter being run)</p></dd><dt><span class="term">job</span></dt><dd><p>The numeric job ID for the job being
-printed</p></dd><dt><span class="term">Printer</span></dt><dd><p>The string from the originating-user-name
-attribute</p></dd><dt><span class="term">Printer</span></dt><dd><p>The string from the job-name attribute</p></dd><dt><span class="term">Printer</span></dt><dd><p>The numeric value from the number-copies
-attribute</p></dd><dt><span class="term">Printer</span></dt><dd><p>The job options</p></dd><dt><span class="term">Printer</span></dt><dd><p>(Optionally) The print request file (if missing,
+printed</p></dd><dt><span class="term">user</span></dt><dd><p>The string from the originating-user-name
+attribute</p></dd><dt><span class="term">title</span></dt><dd><p>The string from the job-name attribute</p></dd><dt><span class="term">copies</span></dt><dd><p>The numeric value from the number-copies
+attribute</p></dd><dt><span class="term">options</span></dt><dd><p>The job options</p></dd><dt><span class="term">filename</span></dt><dd><p>(Optionally) The print request file (if missing,
filters expected data fed through <tt class="filename">stdin</tt>). In most
cases it is very easy to write a simple wrapper script around existing
-filters to make them work with CUPS.</p></dd></dl></div></div></div><div xmlns:ns55="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947467"></a>Prefilters</h3></div></div><div></div></div><p>
-As was said, PostScript is the central file format to any Unix based
+filters to make them work with CUPS.</p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909513"></a>Prefilters</h3></div></div><div></div></div><a class="indexterm" name="id2909520"></a><p>
+As was said, PostScript is the central file format to any UNIX based
printing system. From PostScript, CUPS generates raster data to feed
non-PostScript printers.
</p><p>
@@ -8921,18 +8581,18 @@ the <span class="emphasis"><em>imagetops</em></span> filter. Its outcome is alwa
MIME type <span class="emphasis"><em>application/vnd.cups-postscript</em></span>
(<span class="emphasis"><em>not</em></span> application/postscript), meaning it has the
print options already embedded into the file.
-</p><ns55:p>
-</ns55:p><div class="figure"><a name="id2947518"></a><p class="title"><b>Figure19.4.Prefiltering in CUPS to form Postscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/4small.png" alt="Prefiltering in CUPS to form Postscript"></div></div><ns55:p>
-</ns55:p></div><div xmlns:ns56="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947552"></a>pstops</h3></div></div><div></div></div><p>
+</p><p>
+ </p><div class="figure"><a name="small4"></a><p class="title"><b>Figure19.4.Prefiltering in CUPS to form Postscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/4small.png" width="270" alt="Prefiltering in CUPS to form Postscript"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909624"></a>pstops</h3></div></div><div></div></div><p>
<span class="emphasis"><em>pstops</em></span>is the filter to convert
<span class="emphasis"><em>application/postscript</em></span> to
<span class="emphasis"><em>application/vnd.cups-postscript</em></span>. It was said
above that this filter inserts all device-specific print options
(commands to the printer to ask for the duplexing of output, or
stapling an punching it, etc.) into the PostScript file.
-</p><ns56:p>
-</ns56:p><div class="figure"><a name="id2947583"></a><p class="title"><b>Figure19.5.Adding Device-specific Print Options</b></p><div class="mediaobject"><img src="projdoc/imagefiles/5small.png" alt="Adding Device-specific Print Options"></div></div><ns56:p>
-</ns56:p><p>
+</p><p>
+ </p><div class="figure"><a name="small5"></a><p class="title"><b>Figure19.5.Adding Device-specific Print Options</b></p><div class="mediaobject"><img src="projdoc/imagefiles/5small.png" width="270" alt="Adding Device-specific Print Options"></div></div><p>
+</p><p>
This is not all: other tasks performed by it are:
</p><div class="itemizedlist"><ul type="disc"><li><p>
selecting the range of pages to be printed (if you choose to
@@ -8943,7 +8603,7 @@ putting 2 or more logical pages on one sheet of paper (the
so-called &quot;number-up&quot; function)
</p></li><li><p>counting the pages of the job to insert the accounting
information into the <tt class="filename">/var/log/cups/page_log</tt>
-</p></li></ul></div></div><div xmlns:ns57="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947655"></a>pstoraster</h3></div></div><div></div></div><p>
+</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909734"></a>pstoraster</h3></div></div><div></div></div><p>
<span class="emphasis"><em>pstoraster</em></span> is at the core of the CUPS filtering
system. It is responsible for the first stage of the rasterization
process. Its input is of MIME type application/vnd.cups-postscript;
@@ -8951,22 +8611,22 @@ its output is application/vnd.cups-raster. This output format is not
yet meant to be printable. Its aim is to serve as a general purpose
input format for more specialized <span class="emphasis"><em>raster drivers</em></span>,
that are able to generate device-specific printer data.
-</p><ns57:p>
-</ns57:p><div class="figure"><a name="id2947685"></a><p class="title"><b>Figure19.6.Postscript to intermediate Raster format</b></p><div class="mediaobject"><img src="projdoc/imagefiles/6small.png" alt="Postscript to intermediate Raster format"></div></div><ns57:p>
-</ns57:p><p>
+</p><p>
+ </p><div class="figure"><a name="small6"></a><p class="title"><b>Figure19.6.Postscript to intermediate Raster format</b></p><div class="mediaobject"><img src="projdoc/imagefiles/6small.png" width="270" alt="Postscript to intermediate Raster format"></div></div><p>
+</p><p>
CUPS raster is a generic raster format with powerful features. It is
able to include per-page information, color profiles and more to be
used by the following downstream raster drivers. Its MIME type is
registered with IANA and its specification is of course completely
open. It is designed to make it very easy and inexpensive for
-manufacturers to develop Linux and Unix raster drivers for their
+manufacturers to develop Linux and UNIX raster drivers for their
printer models, should they choose to do so. CUPS always takes care
for the first stage of rasterization so these vendors don't need to care
about Ghostscript complications (in fact, there is currently more
than one vendor financing the development of CUPS raster drivers).
-</p><ns57:p>
-</ns57:p><div class="figure"><a name="id2947737"></a><p class="title"><b>Figure19.7.CUPS-raster production using Ghostscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/7small.png" alt="CUPS-raster production using Ghostscript"></div></div><ns57:p>
-</ns57:p><p>
+</p><p>
+ </p><div class="figure"><a name="small7"></a><p class="title"><b>Figure19.7.CUPS-raster production using Ghostscript</b></p><div class="mediaobject"><img src="projdoc/imagefiles/7small.png" width="270" alt="CUPS-raster production using Ghostscript"></div></div><p>
+</p><p>
CUPS versions before version 1.1.15 were shipping a binary (or source
code) standalone filter, named &quot;pstoraster&quot;. pstoraster was derived
from GNU Ghostscript 5.50, and could be installed besides and in
@@ -8979,30 +8639,30 @@ integrated back into Ghostscript (now based on GNU Ghostscript version
parameter. If your Ghostscript doesn't show a success on asking for
<b class="command">gs -h |grep cups</b>, you might not be able to
print. Update your Ghostscript then!
-</p></div><div xmlns:ns58="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947811"></a>imagetops and imagetoraster</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909928"></a>imagetops and imagetoraster</h3></div></div><div></div></div><p>
Above in the section about prefilters, we mentioned the prefilter
that generates PostScript from image formats. The imagetoraster
filter is used to convert directly from image to raster, without the
intermediate PostScript stage. It is used more often than the above
mentioned prefilters. Here is a summarizing flowchart of image file
filtering:
-</p><ns58:p>
-</ns58:p><div class="figure"><a name="id2947832"></a><p class="title"><b>Figure19.8.Image format to CUPS-raster format conversion</b></p><div class="mediaobject"><img src="projdoc/imagefiles/8small.png" alt="Image format to CUPS-raster format conversion"></div></div><ns58:p>
-</ns58:p></div><div xmlns:ns59="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947866"></a>rasterto [printers specific]</h3></div></div><div></div></div><p>
+</p><p>
+ </p><div class="figure"><a name="small8"></a><p class="title"><b>Figure19.8.Image format to CUPS-raster format conversion</b></p><div class="mediaobject"><img src="projdoc/imagefiles/8small.png" width="270" alt="Image format to CUPS-raster format conversion"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909993"></a>rasterto [printers specific]</h3></div></div><div></div></div><p>
CUPS ships with quite some different raster drivers processing CUPS
raster. On my system I find in /usr/lib/cups/filter/ these:
-<i class="parameter"><tt>rastertoalps, rastertobj, rastertoepson, rastertoescp,
-rastertopcl, rastertoturboprint, rastertoapdk, rastertodymo,
-rastertoescp, rastertohp</tt></i> and
+<i class="parameter"><tt>rastertoalps</tt></i>, <i class="parameter"><tt>rastertobj</tt></i>, <i class="parameter"><tt>rastertoepson</tt></i>, <i class="parameter"><tt>rastertoescp</tt></i>,
+<i class="parameter"><tt>rastertopcl</tt></i>, <i class="parameter"><tt>rastertoturboprint</tt></i>, <i class="parameter"><tt>rastertoapdk</tt></i>, <i class="parameter"><tt>rastertodymo</tt></i>,
+<i class="parameter"><tt>rastertoescp</tt></i>, <i class="parameter"><tt>rastertohp</tt></i> and
<i class="parameter"><tt>rastertoprinter</tt></i>. Don't worry if you have less
than this; some of these are installed by commercial add-ons to CUPS
(like <i class="parameter"><tt>rastertoturboprint</tt></i>), others (like
<i class="parameter"><tt>rastertoprinter</tt></i>) by 3rd party driver
development projects (such as Gimp-Print) wanting to cooperate as
closely as possible with CUPS.
-</p><ns59:p>
-</ns59:p><div class="figure"><a name="id2947917"></a><p class="title"><b>Figure19.9.Raster to Printer Specific formats</b></p><div class="mediaobject"><img src="projdoc/imagefiles/9small.png" alt="Raster to Printer Specific formats"></div></div><ns59:p>
-</ns59:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947951"></a>CUPS Backends</h3></div></div><div></div></div><p>
+</p><p>
+ </p><div class="figure"><a name="small9"></a><p class="title"><b>Figure19.9.Raster to Printer Specific formats</b></p><div class="mediaobject"><img src="projdoc/imagefiles/9small.png" width="270" alt="Raster to Printer Specific formats"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910145"></a>CUPS Backends</h3></div></div><div></div></div><p>
The last part of any CUPS filtering chain is a &quot;backend&quot;. Backends
are special programs that send the print-ready file to the final
device. There is a separate backend program for any transfer
@@ -9057,7 +8717,7 @@ This backend sends printfiles to printers shared by a Windows
host. An example for CUPS device-URIs to use are:
<tt class="filename">smb://workgroup/server/printersharename</tt>
Or
-<tt class="filename">Smb://server/printersharename</tt>
+<tt class="filename">smb://server/printersharename</tt>
or
<tt class="filename">smb://username:password@workgroup/server/printersharename</tt>
or
@@ -9083,13 +8743,11 @@ printername).
Not all of the mentioned backends may be present on your system or
usable (depending on your hardware configuration). One test for all
available CUPS backends is provided by the <span class="emphasis"><em>lpinfo</em></span>
-utility. Used with the <i class="parameter"><tt>-v</tt></i> parameter, it lists
+utility. Used with the <tt class="option">-v</tt> parameter, it lists
all available backends:
</p><pre class="screen">
-
- lpinfo -v
-
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948265"></a>cupsomatic/Foomatic -- how do they fit into the Picture?</h3></div></div><div></div></div><p>
+<tt class="prompt">$ </tt><b class="userinput"><tt>lpinfo -v</tt></b>
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910493"></a>cupsomatic/Foomatic -- how do they fit into the Picture?</h3></div></div><div></div></div><a class="indexterm" name="id2910501"></a><a class="indexterm" name="id2910509"></a><p>
&quot;cupsomatic&quot; filters may be the most widely used on CUPS
installations. You must be clear about the fact that these were not
developed by the CUPS people. They are a &quot;Third Party&quot; add-on to
@@ -9103,9 +8761,7 @@ Printer &amp; Driver Database at Linuxprinting.org.
You can recognize these PPDs from the line calling the
<span class="emphasis"><em>cupsomatic</em></span> filter:
</p><pre class="screen">
-
*cupsFilter: &quot;application/vnd.cups-postscript 0 cupsomatic&quot;
-
</pre><p>
This line you may find amongst the first 40 or so lines of the PPD
file. If you have such a PPD installed, the printer shows up in the
@@ -9114,7 +8770,7 @@ the driver description. cupsomatic is a Perl script that runs
Ghostscript, with all the complicated commandline options
auto-constructed from the selected PPD and commandline options give to
the printjob.
-</p><p>
+</p><a class="indexterm" name="id2910581"></a><p>
However, cupsomatic is now deprecated. Its PPDs (especially the first
generation of them, still in heavy use out there) are not meeting the
Adobe specifications. You might also suffer difficulties when you try
@@ -9139,11 +8795,11 @@ print-options from page to page, in the middle of a job. And the
best thing is: the new foomatic-rip now works seamlessly with all
legacy spoolers too (like LPRng, BSD-LPD, PDQ, PPR etc.), providing
for them access to use PPDs for their printing!
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948368"></a>The Complete Picture</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910637"></a>The Complete Picture</h3></div></div><div></div></div><p>
If you want to see an overview over all the filters and how they
relate to each other, the complete picture of the puzzle is at the end
of this document.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948383"></a><tt class="filename">mime.convs</tt></h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910653"></a><tt class="filename">mime.convs</tt></h3></div></div><div></div></div><p>
CUPS auto-constructs all possible filtering chain paths for any given
MIME type, and every printer installed. But how does it decide in
favor or against a specific alternative? (There may often be cases,
@@ -9160,7 +8816,7 @@ cost. This is a very efficient way to limit the load of any CUPS
server by setting an appropriate &quot;FilterLimit&quot; value. A FilterLimit of
200 allows roughly 1 job at a time, while a FilterLimit of 1000 allows
approximately 5 jobs maximum at a time.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948436"></a>&quot;Raw&quot; printing</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910716"></a>&quot;Raw&quot; printing</h3></div></div><div></div></div><p>
You can tell CUPS to print (nearly) any file &quot;raw&quot;. &quot;Raw&quot; means it
will not be filtered. CUPS will send the file to the printer &quot;as is&quot;
without bothering if the printer is able to digest it. Users need to
@@ -9169,9 +8825,7 @@ printing can happen on any queue if the &quot;-o raw&quot; option is specified
on the command line. You can also set up raw-only queues by simply not
associating any PPD with it. This command:
</p><pre class="screen">
-
- lpadmin -P rawprinter -v socket://11.12.13.14:9100 -E
-
+<tt class="prompt">$ </tt><b class="userinput"><tt>lpadmin -P rawprinter -v socket://11.12.13.14:9100 -E</tt></b>
</pre><p>
sets up a queue named &quot;rawprinter&quot;, connected via the &quot;socket&quot;
protocol (a.k.a. &quot;HP JetDirect&quot;) to the device at IP address
@@ -9183,7 +8837,7 @@ CUPS will automatically treat each job sent to a queue as a &quot;raw&quot; one,
if it can't find a PPD associated with the queue. However, CUPS will
only send known MIME types (as defined in its own mime.types file) and
refuse others.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948490"></a>&quot;application/octet-stream&quot; printing</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910805"></a>&quot;application/octet-stream&quot; printing</h3></div></div><div></div></div><p>
Any MIME type with no rule in the
<tt class="filename">/etc/cups/mime.types</tt> file is regarded as unknown
or <span class="emphasis"><em>application/octet-stream</em></span> and will not be
@@ -9192,9 +8846,7 @@ you will probably have experienced the fact that printjobs originating
from Windows clients were not printed. You may have found an error
message in your CUPS logs like:
</p><pre class="screen">
-
Unable to convert file 0 to printable format for job
-
</pre><p>
To enable the printing of &quot;application/octet-stream&quot; files, edit
these two files:
@@ -9203,20 +8855,16 @@ Both contain entries (at the end of the respective files) which must
be uncommented to allow RAW mode operation for
application/octet-stream. In <tt class="filename">/etc/cups/mime.types</tt>
make sure this line is present:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2910890"></a><pre class="screen">
application/octet-stream
-
</pre><p>
This line (with no specific auto-typing rule set) makes all files
not otherwise auto-typed a member of application/octet-stream. In
<tt class="filename">/etc/cups/mime.convs</tt>, have this
line:
</p><pre class="screen">
-
application/octet-stream application/vnd.cups-raw 0 -
-
-</pre><p>
+</pre><a class="indexterm" name="id2910931"></a><p>
This line tells CUPS to use the <span class="emphasis"><em>Null Filter</em></span>
(denoted as &quot;-&quot;, doing... nothing at all) on
<span class="emphasis"><em>application/octet-stream</em></span>, and tag the result as
@@ -9241,7 +8889,7 @@ be one that is known to CUPS and an allowed one. The file
recognizes MIME types. The file
<tt class="filename">/etc/cups/mime.convs</tt> decides which file
conversion filter(s) may be applied to which MIME types.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948706"></a>PostScript Printer Descriptions (PPDs) for non-PS Printers</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911052"></a>PostScript Printer Descriptions (PPDs) for non-PS Printers</h3></div></div><div></div></div><a class="indexterm" name="id2911060"></a><p>
Originally PPDs were meant to be used for PostScript printers
only. Here, they help to send device-specific commands and settings
to the RIP which processes the jobfile. CUPS has extended this
@@ -9254,10 +8902,8 @@ printers the Ghostscript RIP runs on the host computer.
</p><p>
PPDs for a non-PS printer have a few lines that are unique to
CUPS. The most important one looks similar to this:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2911090"></a><pre class="screen">
*cupsFilter: application/vnd.cups-raster 66 rastertoprinter
-
</pre><p>
It is the last piece in the CUPS filtering puzzle. This line tells the
CUPS daemon to use as a last filter &quot;rastertoprinter&quot;. This filter
@@ -9273,24 +8919,12 @@ CUPS by default ships only a few generic PPDs, but they are good for
several hundred printer models. You may not be able to control
different paper trays, or you may get larger margins than your
specific model supports):
-</p><div class="variablelist"><dl><dt><span class="term">deskjet.ppd</span></dt><dd><p>older HP inkjet printers and compatible
-</p></dd><dt><span class="term">deskjet2.ppd</span></dt><dd><p>newer HP inkjet printers and compatible
-</p></dd><dt><span class="term">dymo.ppd</span></dt><dd><p>label printers
-</p></dd><dt><span class="term">epson9.ppd</span></dt><dd><p>Epson 24pin impact printers and compatible
-</p></dd><dt><span class="term">epson24.ppd</span></dt><dd><p>Epson 24pin impact printers and compatible
-</p></dd><dt><span class="term">okidata9.ppd</span></dt><dd><p>Okidata 9pin impact printers and compatible
-</p></dd><dt><span class="term">okidat24.ppd</span></dt><dd><p>Okidata 24pin impact printers and compatible
-</p></dd><dt><span class="term">stcolor.ppd</span></dt><dd><p>older Epson Stylus Color printers
-</p></dd><dt><span class="term">stcolor2.ppd</span></dt><dd><p>newer Epson Stylus Color printers
-</p></dd><dt><span class="term">stphoto.ppd</span></dt><dd><p>older Epson Stylus Photo printers
-</p></dd><dt><span class="term">stphoto2.ppd</span></dt><dd><p>newer Epson Stylus Photo printers
-</p></dd><dt><span class="term">laserjet.ppd</span></dt><dd><p>all PCL printers. Further below is a discussion
-of several other driver/PPD-packages suitable fur use with CUPS.
-</p></dd></dl></div></div><div xmlns:ns60="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948933"></a>Difference between <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span> and
-<span class="emphasis"><em>native CUPS</em></span> printing</h3></div></div><div></div></div><p>
+</p><div class="table"><a name="id2911136"></a><p class="title"><b>Table19.1.PPD's shipped with CUPS</b></p><table summary="PPD's shipped with CUPS" border="1"><colgroup><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">PPD file</th><th align="justify">Printer type</th></tr></thead><tbody><tr><td align="left">deskjet.ppd</td><td align="justify">older HP inkjet printers and compatible</td></tr><tr><td align="left">deskjet2.ppd</td><td align="justify">newer HP inkjet printers and compatible </td></tr><tr><td align="left">dymo.ppd</td><td align="justify">label printers </td></tr><tr><td align="left">epson9.ppd</td><td align="justify">Epson 24pin impact printers and compatible </td></tr><tr><td align="left">epson24.ppd</td><td align="justify">Epson 24pin impact printers and compatible </td></tr><tr><td align="left">okidata9.ppd</td><td align="justify">Okidata 9pin impact printers and compatible </td></tr><tr><td align="left">okidat24.ppd</td><td align="justify">Okidata 24pin impact printers and compatible </td></tr><tr><td align="left">stcolor.ppd</td><td align="justify">older Epson Stylus Color printers </td></tr><tr><td align="left">stcolor2.ppd</td><td align="justify">newer Epson Stylus Color printers </td></tr><tr><td align="left">stphoto.ppd</td><td align="justify">older Epson Stylus Photo printers </td></tr><tr><td align="left">stphoto2.ppd</td><td align="justify">newer Epson Stylus Photo printers </td></tr><tr><td align="left">laserjet.ppd</td><td align="justify">all PCL printers. Further below is a discussion of several other driver/PPD-packages suitable for use with CUPS. </td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911319"></a>Difference between <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span> and
+<span class="emphasis"><em>native CUPS</em></span> printing</h3></div></div><div></div></div><a class="indexterm" name="id2911337"></a><a class="indexterm" name="id2911345"></a><p>
Native CUPS rasterization works in two steps.
</p><div class="itemizedlist"><ul type="disc"><li><p>
First is the &quot;pstoraster&quot; step. It uses the special &quot;cups&quot;
+<a class="indexterm" name="id2911369"></a>
device from ESP Ghostscript 7.05.x as its tool
</p></li><li><p>
Second comes the &quot;rasterdriver&quot; step. It uses various
@@ -9299,9 +8933,9 @@ quality filters for this step, some are Free Software, some are
Shareware/Non-Free, some are proprietary.</p></li></ul></div><p>
Often this produces better quality (and has several more
advantages) than other methods.
-</p><ns60:p>
-</ns60:p><div class="figure"><a name="id2948984"></a><p class="title"><b>Figure19.10.cupsomatic/foomatic processing versus Native CUPS</b></p><div class="mediaobject"><img src="projdoc/imagefiles/10small.png" alt="cupsomatic/foomatic processing versus Native CUPS"></div></div><ns60:p>
-</ns60:p><p>
+</p><p>
+ </p><div class="figure"><a name="small10"></a><p class="title"><b>Figure19.10.cupsomatic/foomatic processing versus Native CUPS</b></p><div class="mediaobject"><img src="projdoc/imagefiles/10small.png" width="270" alt="cupsomatic/foomatic processing versus Native CUPS"></div></div><p>
+</p><p>
One other method is the <span class="emphasis"><em>cupsomatic/foomatic-rip</em></span>
way. Note that cupsomatic is <span class="emphasis"><em>not</em></span> made by the CUPS
developers. It is an independent contribution to printing development,
@@ -9314,6 +8948,8 @@ other (non-CUPS) spoolers. An upgrade to foomatic-rip is strongly
advised, especially if you are upgrading to a recent version of CUPS
too.
</p><p>
+ <a class="indexterm" name="id2911483"></a>
+ <a class="indexterm" name="id2911491"></a>
Both the cupsomatic (old) and the foomatic-rip (new) methods from
Linuxprinting.org use the traditional Ghostscript print file
processing, doing everything in a single step. It therefore relies on
@@ -9335,7 +8971,7 @@ installation: Therefore the printfile bypasses the &quot;pstoraster&quot; filter
cupsomatic hands the rendered file directly to the CUPS backend. The
flowchart above illustrates the difference between native CUPS
rendering and the Foomatic/cupsomatic method.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949090"></a>Examples for filtering Chains</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911554"></a>Examples for filtering Chains</h3></div></div><div></div></div><p>
Here are a few examples of commonly occurring filtering chains to
illustrate the workings of CUPS.
</p><p>
@@ -9355,10 +8991,8 @@ PPD) into the new PostScript file; the file now is of PostScript MIME
type
<span class="emphasis"><em>application/vnd.cups-postscript</em></span>;</p></li><li><p>the file goes to the <span class="emphasis"><em>socket</em></span>
backend, which transfers the job to the printers.</p></li></ul></div><p>
-The resulting filter chain therefore is:
-</p><pre class="screen">
-pdftops --&gt; pstops --&gt; socket
-</pre><p>
+ The resulting filter chain therefore is as drawn in <a href="#pdftosocket" title="Figure19.11.PDF to socket chain">the image below</a>.
+</p><div class="figure"><a name="pdftosocket"></a><p class="title"><b>Figure19.11.PDF to socket chain</b></p><div class="mediaobject"><img src="projdoc/imagefiles/pdftosocket.png" width="270" alt="PDF to socket chain"></div></div><p>
Assume your want to print the same filter to an USB-connected
Epson Stylus Photo printer, installed with the CUPS
<tt class="filename">stphoto2.ppd</tt>. The first few filtering stages
@@ -9382,45 +9016,43 @@ does its work (as is indicated in the printer's PPD), creating the
printer-specific raster data and embedding any user-selected
print-options into the print data stream;</p></li><li><p>the file goes to the <span class="emphasis"><em>usb</em></span> backend,
which transfers the job to the printers.</p></li></ul></div><p>
-The resulting filter chain therefore is:
-</p><pre class="screen">
-pdftops --&gt; pstops --&gt; pstoraster --&gt; rastertoepson --&gt; usb
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949319"></a>Sources of CUPS drivers / PPDs</h3></div></div><div></div></div><p>
+ The resulting filter chain therefore is as drawn in <a href="#pdftoepsonusb" title="Figure19.12.PDF to USB chain">the image below</a>.
+</p><div class="figure"><a name="pdftoepsonusb"></a><p class="title"><b>Figure19.12.PDF to USB chain</b></p><div class="mediaobject"><img src="projdoc/imagefiles/pdftoepsonusb.png" width="270" alt="PDF to USB chain"></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911891"></a>Sources of CUPS drivers / PPDs</h3></div></div><div></div></div><p>
On the internet you can find now many thousand CUPS-PPD files
(with their companion filters), in many national languages,
supporting more than 1000 non-PostScript models.
-</p><div class="itemizedlist"><ul type="disc"><li><p><a href="http://wwwl.easysw.com/printpro/" target="_top">ESP
-PrintPro (http://wwwl.easysw.com/printpro/)</a> (commercial,
+</p><div class="itemizedlist"><a class="indexterm" name="id2911907"></a><a class="indexterm" name="id2911918"></a><ul type="disc"><li><p><a href="http://wwwl.easysw.com/printpro/" target="_top">ESP
+PrintPro</a> (commercial,
non-Free) is packaged with more than 3000 PPDs, ready for
successful use &quot;out of the box&quot; on Linux, Mac OS X, IBM-AIX,
-HP-UX, Sun-Solaris, SGI-IRIX, Compaq Tru64, Digital Unix and some
+HP-UX, Sun-Solaris, SGI-IRIX, Compaq Tru64, Digital UNIX and some
more commercial Unices (it is written by the CUPS developers
themselves and its sales help finance the further development of
CUPS, as they feed their creators).</p></li><li><p>the <a href="http://gimp-print.sourceforge.net/" target="_top">Gimp-Print-Project
-(http://gimp-print.sourceforge.net/)</a> (GPL, Free Software)
+</a> (GPL, Free Software)
provides around 140 PPDs (supporting nearly 400 printers, many driven
to photo quality output), to be used alongside the Gimp-Print CUPS
filters;</p></li><li><p><a href="http://www.turboprint.com/" target="_top">TurboPrint
-(http://www.turboprint.com/)</a> (Shareware, non-Free) supports
+</a> (Shareware, non-Free) supports
roughly the same amount of printers in excellent
quality;</p></li><li><p><a href="http://www-124.ibm.com/developerworks/oss/linux/projects/omni/" target="_top">OMNI
-(http://www-124.ibm.com/developerworks/oss/linux/projects/omni/)</a>
+</a>
(LPGL, Free) is a package made by IBM, now containing support for more
than 400 printers, stemming from the inheritance of IBM OS/2 Know-How
ported over to Linux (CUPS support is in a Beta-stage at
present);</p></li><li><p><a href="http://hpinkjet.sourceforge.net/" target="_top">HPIJS
-(http://hpinkjet.sourceforge.net/)</a> (BSD-style licenses, Free)
+</a> (BSD-style licenses, Free)
supports around 150 of HP's own printers and is also providing
excellent print quality now (currently available only via the Foomatic
path);</p></li><li><p><a href="http://www.linuxprinting.org/" target="_top">Foomatic/cupsomatic
-(http://www.linuxprinting.org/)</a> (LPGL, Free) from
+</a> (LPGL, Free) from
Linuxprinting.org are providing PPDs for practically every Ghostscript
filter known to the world (including Omni, Gimp-Print and
HPIJS).</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The cupsomatic/Foomatic trick from Linuxprinting.org works
differently from the other drivers. This is explained elsewhere in this
document.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949444"></a>Printing with Interface Scripts</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912041"></a>Printing with Interface Scripts</h3></div></div><div></div></div><p>
CUPS also supports the usage of &quot;interface scripts&quot; as known from
System V AT&amp;T printing systems. These are often used for PCL
printers, from applications that generate PCL print jobs. Interface
@@ -9433,61 +9065,60 @@ realm. On HP-UX platforms they are more often used. You can use any
working interface script on CUPS too. Just install the printer with
the <b class="command">-i</b> option:
</p><pre class="screen">
-
- lpadmin -p pclprinter -v socket://11.12.13.14:9100 -i /path/to/interface-script
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p pclprinter -v socket://11.12.13.14:9100 \
+ -i /path/to/interface-script</tt></b>
</pre><p>
Interface scripts might be the &quot;unknown animal&quot; to many. However,
with CUPS they provide the most easy way to plug in your own
custom-written filtering script or program into one specific print
queue (some information about the traditional usage of interface scripts is
to be found at <a href="http://playground.sun.com/printing/documentation/interface.html" target="_top">http://playground.sun.com/printing/documentation/interface.html</a>).
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949506"></a>Network printing (purely Windows)</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912139"></a>Network printing (purely Windows)</h2></div></div><div></div></div><p>
Network printing covers a lot of ground. To understand what exactly
goes on with Samba when it is printing on behalf of its Windows
clients, let's first look at a &quot;purely Windows&quot; setup: Windows clients
with a Windows NT print server.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949522"></a>From Windows Clients to an NT Print Server</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912150"></a>From Windows Clients to an NT Print Server</h3></div></div><div></div></div><p>
Windows clients printing to an NT-based print server have two
options. They may
-</p><div class="itemizedlist"><ul type="disc"><li><p>execute the driver locally and render the GDI output
+</p><a class="indexterm" name="id2912170"></a><a class="indexterm" name="id2912178"></a><div class="itemizedlist"><ul type="disc"><li><p>execute the driver locally and render the GDI output
(EMF) into the printer specific format on their own,
or</p></li><li><p>send the GDI output (EMF) to the server, where the
driver is executed to render the printer specific
output.</p></li></ul></div><p>
Both print paths are shown in the flowcharts below.
-</p></div><div xmlns:ns61="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949561"></a>Driver Execution on the Client</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912212"></a>Driver Execution on the Client</h3></div></div><div></div></div><p>
In the first case the print server must spool the file as &quot;raw&quot;,
meaning it shouldn't touch the jobfile and try to convert it in any
-way. This is what traditional Unix-based print server can do too; and
+way. This is what traditional UNIX-based print server can do too; and
at a better performance and more reliably than NT print server. This
is what most Samba administrators probably are familiar with. One
advantage of this setup is that this &quot;spooling-only&quot; print server may
-be used even if no driver(s) for Unix are available it is sufficient
+be used even if no driver(s) for UNIX are available it is sufficient
to have the Windows client drivers available and installed on the
clients.
-</p><ns61:p>
-</ns61:p><div class="figure"><a name="id2949586"></a><p class="title"><b>Figure19.11.Print Driver execution on the Client</b></p><div class="mediaobject"><img src="projdoc/imagefiles/11small.png" alt="Print Driver execution on the Client"></div></div><ns61:p>
-</ns61:p></div><div xmlns:ns62="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949620"></a>Driver Execution on the Server</h3></div></div><div></div></div><p>
+</p><p>
+ </p><div class="figure"><a name="small11"></a><p class="title"><b>Figure19.13.Print Driver execution on the Client</b></p><div class="mediaobject"><img src="projdoc/imagefiles/11small.png" width="270" alt="Print Driver execution on the Client"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912287"></a>Driver Execution on the Server</h3></div></div><div></div></div><a class="indexterm" name="id2912293"></a><a class="indexterm" name="id2912302"></a><a class="indexterm" name="id2912310"></a><a class="indexterm" name="id2912318"></a><a class="indexterm" name="id2912326"></a><p>
The other path executes the printer driver on the server. The clients
transfers print files in EMF format to the server. The server uses the
PostScript, PCL, ESC/P or other driver to convert the EMF file into
-the printer-specific language. It is not possible for Unix to do the
+the printer-specific language. It is not possible for UNIX to do the
same. Currently there is no program or method to convert a Windows
-client's GDI output on a Unix server into something a printer could
+client's GDI output on a UNIX server into something a printer could
understand.
-</p><ns62:p>
-</ns62:p><div class="figure"><a name="id2949642"></a><p class="title"><b>Figure19.12.Print Driver execution on the Server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/12small.png" alt="Print Driver execution on the Server"></div></div><ns62:p>
-</ns62:p><p>
+</p><p>
+ </p><div class="figure"><a name="small12"></a><p class="title"><b>Figure19.14.Print Driver execution on the Server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/12small.png" width="270" alt="Print Driver execution on the Server"></div></div><p>
+</p><p>
However, there is something similar possible with CUPS. Read on...
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949683"></a>Network Printing (Windows clients -- UNIX/Samba Print
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912407"></a>Network Printing (Windows clients -- UNIX/Samba Print
Servers)</h2></div></div><div></div></div><p>
Since UNIX print servers <span class="emphasis"><em>cannot</em></span> execute the Win32
program code on their platform, the picture is somewhat
different. However, this doesn't limit your options all that
much. In the contrary, you may have a way here to implement printing
features which are not possible otherwise.
-</p><div xmlns:ns63="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949704"></a>From Windows Clients to a CUPS/Samba Print Server</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912426"></a>From Windows Clients to a CUPS/Samba Print Server</h3></div></div><div></div></div><p>
Here is a simple recipe showing how you can take advantage of CUPS
powerful features for the benefit of your Windows network printing
clients:
@@ -9499,12 +9130,11 @@ printer is a non-PostScript model. It also requires that you have a
&quot;driver&quot; on the CUPS server.
</p><p>
Firstly, to enable CUPS based printing through Samba the
-following options should be set in your <tt class="filename">smb.conf</tt> file [globals]
+following options should be set in your <tt class="filename">smb.conf</tt> file [global]
section:
-</p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>printing = CUPS</tt></i></p></li><li><p><i class="parameter"><tt>printcap = CUPS</tt></i></p></li></ul></div><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p><a class="indexterm" name="id2912488"></a><i class="parameter"><tt>printing</tt></i> = cups</p></li><li><p><a class="indexterm" name="id2912506"></a><i class="parameter"><tt>printcap</tt></i> = cups</p></li></ul></div><p>
When these parameters are specified, all manually set print directives
-(like <i class="parameter"><tt>print command =...</tt></i>, or <i class="parameter"><tt>lppause
-command =...</tt></i>) in <tt class="filename">smb.conf</tt> (as well as
+(like <a class="indexterm" name="id2912526"></a><i class="parameter"><tt>print command</tt></i>, or <a class="indexterm" name="id2912540"></a><i class="parameter"><tt>lppause command</tt></i>) in <tt class="filename">smb.conf</tt> (as well as
in samba itself) will be ignored. Instead, Samba will directly
interface with CUPS through it's application program interface (API) -
as long as Samba has been compiled with CUPS library (libcups)
@@ -9513,12 +9143,12 @@ other print commands are set up, then printing will use the
<span class="emphasis"><em>System V</em></span> AT&amp;T command set, with the -oraw
option automatically passing through (if you want your own defined
print commands to work with a Samba that has CUPS support compiled in,
-simply use <i class="parameter"><tt>printing = sysv</tt></i>).
-</p><ns63:p>
-</ns63:p><div class="figure"><a name="id2949830"></a><p class="title"><b>Figure19.13.Printing via CUPS/samba server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/13small.png" alt="Printing via CUPS/samba server"></div></div><ns63:p>
-</ns63:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949864"></a>Samba receiving Jobfiles and passing them to CUPS</h3></div></div><div></div></div><p>
+simply use <a class="indexterm" name="id2912578"></a><i class="parameter"><tt>printing</tt></i> = sysv).
+</p><p>
+</p><div class="figure"><a name="small13"></a><p class="title"><b>Figure19.15.Printing via CUPS/samba server</b></p><div class="mediaobject"><img src="projdoc/imagefiles/13small.png" width="270" alt="Printing via CUPS/samba server"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912640"></a>Samba receiving Jobfiles and passing them to CUPS</h3></div></div><div></div></div><p>
Samba <span class="emphasis"><em>must</em></span> use its own spool directory (it is set
-by a line similar to <i class="parameter"><tt>path = /var/spool/samba</tt></i>,
+by a line similar to <a class="indexterm" name="id2912654"></a><i class="parameter"><tt>path</tt></i> = /var/spool/samba,
in the <i class="parameter"><tt>[printers]</tt></i> or
<i class="parameter"><tt>[printername]</tt></i> section of
<tt class="filename">smb.conf</tt>). Samba receives the job in its own
@@ -9534,8 +9164,8 @@ A Windows user authenticates only to Samba (by whatever means is
configured). If Samba runs on the same host as CUPS, you only need to
allow &quot;localhost&quot; to print. If they run on different machines, you
need to make sure the Samba host gets access to printing on CUPS.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949942"></a>Network PostScript RIP: CUPS Filters on Server -- clients use
-PostScript Driver with CUPS-PPDs</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912726"></a>Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</h2></div></div><div></div></div><a class="indexterm" name="id2912736"></a><a class="indexterm" name="id2912744"></a><a class="indexterm" name="id2912753"></a><p>
PPDs can control all print device options. They are usually provided
by the manufacturer; if you own a PostScript printer, that is. PPD
files (PostScript Printer Descriptions) are always a component of
@@ -9554,7 +9184,7 @@ or see if you have lphelp on your system). There are also some
different GUI frontends on Linux/UNIX, which can present PPD options
to users. PPD options are normally meant to be evaluated by the
PostScript RIP on the real PostScript printer.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949997"></a>PPDs for non-PS Printers on UNIX</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912815"></a>PPDs for non-PS Printers on UNIX</h3></div></div><div></div></div><a class="indexterm" name="id2912823"></a><p>
CUPS doesn't limit itself to &quot;real&quot; PostScript printers in its usage
of PPDs. The CUPS developers have extended the scope of the PPD
concept, to also describe available device and driver options for
@@ -9571,7 +9201,7 @@ the supplied PostScript. Thus CUPS lets all its printers appear as
PostScript devices to its clients, because it can act as a PostScript
RIP for those printers, processing the received PostScript code into a
proper raster print format.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950038"></a>PPDs for non-PS Printers on Windows</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912871"></a>PPDs for non-PS Printers on Windows</h3></div></div><div></div></div><a class="indexterm" name="id2912878"></a><p>
CUPS-PPDs can also be used on Windows-Clients, on top of a
&quot;core&quot; PostScript driver (now recommended is the &quot;CUPS PostScript
Driver for WindowsNT/2K/XP&quot;; you can also use the Adobe one, with
@@ -9587,13 +9217,13 @@ which always remain unfiltered per definition;</p></li><li><p>enable clients to
driver, even for many different target printers.</p></li></ul></div><p>
Using CUPS PPDs on Windows clients enables these to control
all print job settings just as a UNIX client can do too.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950103"></a>Windows Terminal Servers (WTS) as CUPS Clients</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912948"></a>Windows Terminal Servers (WTS) as CUPS Clients</h2></div></div><div></div></div><p>
This setup may be of special interest to people experiencing major
problems in WTS environments. WTS need often a multitude of
non-PostScript drivers installed to run their clients' variety of
different printer models. This often imposes the price of much
increased instability.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950120"></a>Printer Drivers running in &quot;Kernel Mode&quot; cause many
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2912964"></a>Printer Drivers running in &quot;Kernel Mode&quot; cause many
Problems</h3></div></div><div></div></div><p>
The reason is that in Win NT printer drivers run in &quot;Kernel
Mode&quot;, this introduces a high risk for the stability of the system
@@ -9607,10 +9237,10 @@ of Death&quot; on a regular basis?
PostScript drivers generally are very well tested. They are not known
to cause any problems, even though they run in Kernel Mode too. This
might be because there have so far only been 2 different PostScript
-drivers the ones from Adobe and the one from Microsoft. Both are
+drivers: the ones from Adobe and the one from Microsoft. Both are
very well tested and are as stable as you ever can imagine on
Windows. The CUPS driver is derived from the Microsoft one.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950155"></a>Workarounds impose Heavy Limitations</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913011"></a>Workarounds impose Heavy Limitations</h3></div></div><div></div></div><p>
In many cases, in an attempt to work around this problem, site
administrators have resorted to restrict the allowed drivers installed
on their WTS to one generic PCL- and one PostScript driver. This
@@ -9618,7 +9248,7 @@ however restricts the clients in the amount of printer options
available for them; often they can't get out more than simplex
prints from one standard paper tray, while their devices could do much
better, if driven by a different driver! )
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950176"></a>CUPS: a &quot;Magical Stone&quot;?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913032"></a>CUPS: a &quot;Magical Stone&quot;?</h3></div></div><div></div></div><a class="indexterm" name="id2912976"></a><a class="indexterm" name="id2913049"></a><p>
Using a PostScript driver, enabled with a CUPS-PPD, seems to be a very
elegant way to overcome all these shortcomings. There are, depending
on the version of Windows OS you use, up to 3 different PostScript
@@ -9630,8 +9260,8 @@ is a certain price for this too: a CUPS server acting as a PostScript
RIP for its clients requires more CPU and RAM than when just acting as
a &quot;raw spooling&quot; device. Plus, this setup is not yet widely tested,
although the first feedbacks look very promising.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950203"></a>PostScript Drivers with no major problems -- even in Kernel
-Mode</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913085"></a>PostScript Drivers with no major problems -- even in Kernel
+Mode</h3></div></div><div></div></div><a class="indexterm" name="id2913095"></a><p>
More recent printer drivers on W2K and XP don't run in Kernel mode
(unlike Win NT) any more. However, both operating systems can still
use the NT drivers, running in Kernel mode (you can roughly tell which
@@ -9647,14 +9277,14 @@ development efforts. This is what the CUPS people have done. The
license doesn't allow them to publish the whole of the source code.
However, they have released the &quot;diff&quot; under the GPL, and if you are
owner of an &quot;MS DDK for Win NT&quot;, you can check the driver yourself.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950237"></a> Setting up CUPS for driver Download</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2913108"></a>Setting up CUPS for driver Download</h2></div></div><div></div></div><p>
As we have said before: all previously known methods to prepare client
printer drivers on the Samba server for download and &quot;Point'n'Print&quot;
convenience of Windows workstations are working with CUPS too. These
methods were described in the previous chapter. In reality, this is a
pure Samba business, and only relates to the Samba/Win client
relationship.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950256"></a><span class="emphasis"><em>cupsaddsmb</em></span>: the unknown Utility</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913163"></a><span class="emphasis"><em>cupsaddsmb</em></span>: the unknown Utility</h3></div></div><div></div></div><a class="indexterm" name="id2913193"></a><p>
The cupsaddsmb utility (shipped with all current CUPS versions) is an
alternative method to transfer printer drivers into the Samba
<i class="parameter"><tt>[print$]</tt></i> share. Remember, this share is where
@@ -9679,53 +9309,26 @@ job-billing)</p></li></ul></div><p>
However, currently only Windows NT, 2000, and XP are supported by the
CUPS drivers. You will need to get the respective part of Adobe driver
too if you need to support Windows 95, 98, and ME clients.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950347"></a>Prepare your <tt class="filename">smb.conf</tt> for
-cupsaddsmb</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913282"></a>Prepare your <tt class="filename">smb.conf</tt> for cupsaddsmb</h3></div></div><div></div></div><p>
Prior to running cupsaddsmb, you need the following settings in
<tt class="filename">smb.conf</tt>:
-</p><pre class="screen">
-
- [global]
- load printers = yes
- printing = cups
- printcap name = cups
-
- [printers]
- comment = All Printers
- path = /var/spool/samba
- browseable = no
- public = yes
- guest ok = yes # setting depends on your requirements
- writable = no
- printable = yes
- printer admin = root
-
- [print$]
- comment = Printer Drivers
- path = /etc/samba/drivers
- browseable = yes
- guest ok = no
- read only = yes
- write list = root
-
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950394"></a>CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</h3></div></div><div></div></div><p>
-CUPS users may get the exactly same packages from<a href="http://www.cups.org/software.html" target="_top"><span class="emphasis"><em>http://www.cups.org/software.html</em></span></a>.
+</p><div class="example"><a name="id2913310"></a><p class="title"><b>Example19.3.smb.conf for cupsaddsmb usage</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>load printers = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = cups</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap name = cups</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = All Printers</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>public = yes</tt></i></td></tr><tr><td># setting depends on your requirements</td></tr><tr><td><i class="parameter"><tt>guest ok = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = root</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[print$]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Printer Drivers</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /etc/samba/drivers</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = no</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>write list = root</tt></i></td></tr></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913502"></a>CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</h3></div></div><div></div></div><a class="indexterm" name="id2913512"></a><p>
+CUPS users may get the exactly same packages from <a href="http://www.cups.org/software.html" target="_top">http://www.cups.org/software.html</a>.
It is a separate package from the CUPS base software files, tagged as
-<span class="emphasis"><em>CUPS 1.1.x Windows NT/2k/XP Printer Driver for SAMBA
+<span class="emphasis"><em>CUPS 1.1.x Windows NT/2k/XP Printer Driver for Samba
(tar.gz, 192k)</em></span>. The filename to download is
<tt class="filename">cups-samba-1.1.x.tar.gz</tt>. Upon untar-/unzip-ing,
it will reveal these files:
</p><pre class="screen">
-
-# tar xvzf cups-samba-1.1.19.tar.gz
-
- cups-samba.install
- cups-samba.license
- cups-samba.readme
- cups-samba.remove
- cups-samba.ss
-
-</pre><p>
+<tt class="prompt">root# </tt><b class="userinput"><tt>tar xvzf cups-samba-1.1.19.tar.gz</tt></b>
+cups-samba.install
+cups-samba.license
+cups-samba.readme
+cups-samba.remove
+cups-samba.ss
+</pre><p>
+<a class="indexterm" name="id2913574"></a>
+<a class="indexterm" name="id2913585"></a>
These have been packaged with the ESP meta packager software
&quot;EPM&quot;. The <tt class="filename">*.install</tt> and
<tt class="filename">*.remove</tt> files are simple shell scripts, which
@@ -9735,26 +9338,20 @@ too). Then it puts the content into
<tt class="filename">/usr/share/cups/drivers/</tt>. This content includes 3
files:
</p><pre class="screen">
-
-# tar tv cups-samba.ss
-
- cupsdrvr.dll
- cupsui.dll
- cups.hlp
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>tar tv cups-samba.ss</tt></b>
+cupsdrvr.dll
+cupsui.dll
+cups.hlp
</pre><p>
The <span class="emphasis"><em>cups-samba.install</em></span> shell scripts is easy to
handle:
</p><pre class="screen">
-
-# ./cups-samba.install
-
- [....]
- Installing software...
- Updating file permissions...
- Running post-install commands...
- Installation is complete.
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>./cups-samba.install</tt></b>
+[....]
+Installing software...
+Updating file permissions...
+Running post-install commands...
+Installation is complete.
</pre><p>
The script should automatically put the driver files into the
<tt class="filename">/usr/share/cups/drivers/</tt> directory.
@@ -9767,10 +9364,8 @@ copy/move the file (after running the
<b class="command">./cups-samba.install</b> script) manually to the
right place.
</p></div><pre class="screen">
-
- cp /usr/share/drivers/cups.hlp /usr/share/cups/drivers/
-
-</pre><p>
+<tt class="prompt">root# </tt><b class="userinput"><tt>cp /usr/share/drivers/cups.hlp /usr/share/cups/drivers/</tt></b>
+</pre><a class="indexterm" name="id2913761"></a><p>
This new CUPS PostScript driver is currently binary-only, but free of
charge. No complete source code is provided (yet). The reason is this:
it has been developed with the help of the <span class="emphasis"><em>Microsoft Driver
@@ -9779,42 +9374,27 @@ Studio 6. Driver developers are not allowed to distribute the whole of
the source code as Free Software. However, CUPS developers released
the &quot;diff&quot; in source code under the GPL, so anybody with a license of
Visual Studio and a DDK will be able to compile for him/herself.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950591"></a>Recognize the different Driver Files</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913789"></a>Recognize the different Driver Files</h3></div></div><div></div></div><p>
The CUPS drivers don't support the &quot;older&quot; Windows 95/98/ME, but only
the Windows NT/2000/XP client:
-</p><pre class="screen">
-
- [Windows NT, 2000, and XP are supported by:]
- cups.hlp
- cupsdrvr.dll
- cupsui.dll
-
-</pre><p>
+</p><p>Windows NT, 2000, and XP are supported by:</p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>cups.hlp</p></li><li><p>cupsdrvr.dll</p></li><li><p>cupsui.dll</p></li></ul></div><p>
+</p><p>
Adobe drivers are available for the older Windows 95/98/ME as well as
the Windows NT/2000/XP clients. The set of files is different for the
different platforms.
-</p><pre class="screen">
-
- [Windows 95, 98, and Me are supported by:]
- ADFONTS.MFM
- ADOBEPS4.DRV
- ADOBEPS4.HLP
- DEFPRTR2.PPD
- ICONLIB.DLL
- PSMON.DLL
-
- [Windows NT, 2000, and XP are supported by:]
- ADOBEPS5.DLL
- ADOBEPSU.DLL
- ADOBEPSU.HLP
+</p><p>Windows 95, 98, and Me are supported by:</p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>ADFONTS.MFM</p></li><li><p>ADOBEPS4.DRV</p></li><li><p>ADOBEPS4.HLP</p></li><li><p>DEFPRTR2.PPD</p></li><li><p>ICONLIB.DLL</p></li><li><p>PSMON.DLL</p></li></ul></div><p>
+</p><p>Windows NT, 2000, and XP are supported by:</p><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>ADOBEPS5.DLL</p></li><li><p>ADOBEPSU.DLL</p></li><li><p>ADOBEPSU.HLP</p></li></ul></div><p>
-</pre><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
If both, the Adobe driver files and the CUPS driver files for the
support of WinNT/2k/XP are present in , the Adobe ones will be ignored
and the CUPS ones will be used. If you prefer -- for whatever reason
-- to use Adobe-only drivers, move away the 3 CUPS driver files. The
Win95/98/ME clients use the Adobe drivers in any case.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950649"></a>Acquiring the Adobe Driver Files</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913932"></a>Acquiring the Adobe Driver Files</h3></div></div><div></div></div><p>
Acquiring the Adobe driver files seems to be unexpectedly difficult
for many users. They are not available on the Adobe website as single
files and the self-extracting and/or self-installing Windows-exe is
@@ -9827,12 +9407,12 @@ Generic PostScript printer. After this, the client's
where you can get them with smbclient from the CUPS host. A more
detailed description about this is in the next (the CUPS printing)
chapter.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950682"></a>ESP Print Pro Package of &quot;PostScript Driver for
-WinNT/2k/XP&quot;</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913965"></a>ESP Print Pro Package of &quot;PostScript Driver for
+WinNT/2k/XP&quot;</h3></div></div><div></div></div><a class="indexterm" name="id2913977"></a><p>
Users of the ESP Print Pro software are able to install their &quot;Samba
Drivers&quot; package for this purpose with no problem. Retrieve the driver
files from the normal download area of the ESP Print Pro software
-at<a href="http://www.easysw.com/software.html" target="_top">http://www.easysw.com/software.html</a>.
+at <a href="http://www.easysw.com/software.html" target="_top">http://www.easysw.com/software.html</a>.
You need to locate the link labelled &quot;SAMBA&quot; amongst the
<span class="emphasis"><em>Download Printer Drivers for ESP Print Pro 4.x</em></span>
area and download the package. Once installed, you can prepare any
@@ -9843,7 +9423,7 @@ driver files; i.e. mainly setup the <i class="parameter"><tt>[print$]</tt></i>
share, etc. The ESP Print Pro package includes the CUPS driver files
as well as a (licensed) set of Adobe drivers for the Windows 95/98/ME
client family.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950732"></a>Caveats to be considered</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914035"></a>Caveats to be considered</h3></div></div><div></div></div><a class="indexterm" name="id2914043"></a><p>
Once you have run the install script (and possibly manually
moved the <tt class="filename">cups.hlp</tt> file to
<tt class="filename">/usr/share/cups/drivers/</tt>), the driver is
@@ -9854,6 +9434,7 @@ tree with <span class="emphasis"><em>WIN40</em></span> and
&quot;cupsaddsmb&quot; (see also <b class="command">man cupsaddsmb</b> for
CUPS since release 1.1.16).
</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>
+<a class="indexterm" name="id2914108"></a>
You may need to put root into the smbpasswd file by running
<b class="command">smbpasswd</b>; this is especially important if you
should run this whole procedure for the first time, and are not
@@ -9863,8 +9444,8 @@ working in an environment where everything is configured for
Once the driver files are in the <i class="parameter"><tt>[print$]</tt></i> share
and are initialized, they are ready to be downloaded and installed by
the Win NT/2k/XP clients.
-</p><div xmlns:ns64="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns64:p>
-</ns64:p><div class="orderedlist"><ol type="1"><li><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="orderedlist"><ol type="1"><li><p>
Win 9x/ME clients won't work with the CUPS PostScript driver. For
these you'd still need to use the <tt class="filename">ADOBE*.*</tt>
drivers as previously.
@@ -9875,6 +9456,7 @@ installations in the <tt class="filename">/usr/share/cups/drivers/</tt>
directory. The new <span class="emphasis"><em>cupsaddsmb</em></span> (from 1.1.16) will
automatically prefer &quot;its own&quot; drivers if it finds both.
</p></li><li><p>
+<a class="indexterm" name="id2914205"></a>
Should your Win clients have had the old <tt class="filename">ADOBE*.*</tt>
files for the Adobe PostScript driver installed, the download and
installation of the new CUPS PostScript driver for Windows NT/2k/XP
@@ -9882,8 +9464,7 @@ will fail at first. You need to wipe the old driver from the clients
first. It is not enough to &quot;delete&quot; the printer, as the driver files
will still be kept by the clients and re-used if you try to re-install
the printer. To really get rid of the Adobe driver files on the
-clients, open the &quot;Printers&quot; folder (possibly via <span class="emphasis"><em>Start
---&gt; Settings --&gt; Control Panel --&gt; Printers</em></span>),
+clients, open the &quot;Printers&quot; folder (possibly via <span class="emphasis"><em>Start, Settings, Control Panel, Printers</em></span>),
right-click onto the folder background and select <span class="emphasis"><em>Server
Properties</em></span>. When the new dialog opens, select the
<span class="emphasis"><em>Drivers</em></span> tab. On the list select the driver you
@@ -9893,20 +9474,23 @@ which uses that particular driver. You need to &quot;delete&quot; all printers
using this driver in the &quot;Printers&quot; folder first. You will need
Administrator privileges to do this.
</p></li><li><p>
+<a class="indexterm" name="id2914267"></a>
Once you have successfully downloaded the CUPS PostScript driver to a
client, you can easily switch all printers to this one by proceeding
-as described elsewhere in the &quot;Samba HOWTO Collection&quot;: either change
+as described in <a href="#printing" title="Chapter18.Classical Printing Support">the printing chapter</a>: either change
a driver for an existing printer by running the &quot;Printer Properties&quot;
dialog, or use <b class="command">rpcclient</b> with the
<b class="command">setdriver</b> sub-command.
-</p></li></ol></div><ns64:p>
-</ns64:p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950953"></a>What are the Benefits of using the &quot;CUPS PostScript Driver for
-Windows NT/2k/XP&quot; as compared to the Adobe Driver?</h3></div></div><div></div></div><p>
+</p></li></ol></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914308"></a>Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</h3></div></div><div></div></div><p>
You are interested in a comparison between the CUPS and the Adobe
PostScript drivers? For our purposes these are the most important
items which weigh in favor of the CUPS ones:
</p><div class="itemizedlist"><ul type="disc"><li><p>no hassle with the Adobe EULA</p></li><li><p>no hassle with the question &#8220;<span class="quote">Where do I
-get the ADOBE*.* driver files from?</span>&#8221;</p></li><li><p>the Adobe drivers (on request of the printer PPD
+get the ADOBE*.* driver files from?</span>&#8221;</p></li><li><p>
+<a class="indexterm" name="id2914350"></a>
+ the Adobe drivers (on request of the printer PPD
associated with them) often put a PJL header in front of the main
PostScript part of the print file. Thus the printfile starts with
<i class="parameter"><tt>&lt;1B &gt;%-12345X</tt></i> or
@@ -9915,8 +9499,10 @@ of <i class="parameter"><tt>%!PS</tt></i>). This leads to the
CUPS daemon auto-typing the incoming file as a print-ready file,
not initiating a pass through the &quot;pstops&quot; filter (to speak more
technically, it is not regarded as the generic MIME type
+<a class="indexterm" name="id2914388"></a>
<span class="emphasis"><em>application/postscript</em></span>, but as
the more special MIME type
+<a class="indexterm" name="id2914402"></a>
<span class="emphasis"><em>application/cups.vnd-postscript</em></span>),
which therefore also leads to the page accounting in
<span class="emphasis"><em>/var/log/cups/page_log</em></span> not
@@ -9946,7 +9532,7 @@ not disturb any other applications as they will regard it as a comment
and simply ignore it).</p></li><li><p>the CUPS PostScript driver will be the heart of the
fully fledged CUPS IPP client for Windows NT/2K/XP to be released soon
(probably alongside the first Beta release for CUPS
-1.2).</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951134"></a>Run &quot;cupsaddsmb&quot; (quiet Mode)</h3></div></div><div></div></div><p>
+1.2).</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914525"></a>Run &quot;cupsaddsmb&quot; (quiet Mode)</h3></div></div><div></div></div><a class="indexterm" name="id2914533"></a><a class="indexterm" name="id2914542"></a><p>
The cupsaddsmb command copies the needed files into your
<i class="parameter"><tt>[print$]</tt></i> share. Additionally, the PPD
associated with this printer is copied from
@@ -9955,124 +9541,111 @@ associated with this printer is copied from
Windows client installations via Point'n'Print. Before we can run the
command successfully, we need to be sure that we can authenticate
towards Samba. If you have a small network you are probably using user
-level security (<i class="parameter"><tt>security = user</tt></i>). Probably your
-root has already a Samba account. Otherwise, create it now, using
-<b class="command">smbpasswd</b>:
-</p><pre class="screen">
-
- # smbpasswd -a root
- New SMB password: [type in password 'secret']
- Retype new SMB password: [type in password 'secret']
-
-</pre><p>
+level security (<a class="indexterm" name="id2914579"></a><i class="parameter"><tt>security</tt></i> = user).
+</p><p>
Here is an example of a successfully run cupsaddsmb command.
</p><pre class="screen">
-
- # cupsaddsmb -U root infotec_IS2027
- Password for root required to access localhost via SAMBA: [type in password 'secret']
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -U root infotec_IS2027</tt></b>
+Password for root required to access localhost via Samba: <b class="userinput"><tt>['secret']</tt></b>
</pre><p>
To share <span class="emphasis"><em>all</em></span> printers and drivers, use the
-<i class="parameter"><tt>-a</tt></i> parameter instead of a printer name. Since
+<tt class="option">-a</tt> parameter instead of a printer name. Since
cupsaddsmb &quot;exports&quot; the printer drivers to Samba, it should be
obvious that it only works for queues with a CUPS driver associated.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951235"></a>Run &quot;cupsaddsmb&quot; with verbose Output</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914652"></a>Run &quot;cupsaddsmb&quot; with verbose Output</h3></div></div><div></div></div><a class="indexterm" name="id2914660"></a><p>
Probably you want to see what's going on. Use the
-<i class="parameter"><tt>-v</tt></i> parameter to get a more verbose output. The
+<tt class="option">-v</tt> parameter to get a more verbose output. The
output below was edited for better readability: all &quot;\&quot; at the end of
a line indicate that I inserted an artificial line break plus some
indentation here:
</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
You will see the root password for the Samba account printed on
-screen. If you use remote access, the password will go over the wire
-unencrypted!
-</p></div><pre class="screen">
-
- # cupsaddsmb -U root -v infotec_2105
- Password for root required to access localhost via SAMBA:
- Running command: smbclient //localhost/print\$ -N -U'root%secret' -c 'mkdir W32X86;put \
- /var/spool/cups/tmp/3e98bf2d333b5 W32X86/infotec_2105.ppd;put \
- /usr/share/cups/drivers/cupsdrvr.dll W32X86/cupsdrvr.dll;put \
- /usr/share/cups/drivers/cupsui.dll W32X86/cupsui.dll;put \
- /usr/share/cups/drivers/cups.hlp W32X86/cups.hlp'
- added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
- Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
- NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
- putting file /var/spool/cups/tmp/3e98bf2d333b5 as \W32X86/infotec_2105.ppd (2328.8 kb/s) \
- (average 2328.8 kb/s)
- putting file /usr/share/cups/drivers/cupsdrvr.dll as \W32X86/cupsdrvr.dll (9374.3 kb/s) \
- (average 5206.6 kb/s)
- putting file /usr/share/cups/drivers/cupsui.dll as \W32X86/cupsui.dll (8107.2 kb/s) \
- (average 5984.1 kb/s)
- putting file /usr/share/cups/drivers/cups.hlp as \W32X86/cups.hlp (3475.0 kb/s) \
- (average 5884.7 kb/s)
+screen.
+</p></div><a class="indexterm" name="id2914695"></a><a class="indexterm" name="id2914706"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -U root -v infotec_2105</tt></b>
+Password for root required to access localhost via GANDALF:
+Running command: smbclient //localhost/print\$ -N -U'root%secret' \
+ -c 'mkdir W32X86; \
+ put /var/spool/cups/tmp/3e98bf2d333b5 W32X86/infotec_2105.ppd; \
+ put /usr/share/cups/drivers/cupsdrvr.dll W32X86/cupsdrvr.dll; \
+ put /usr/share/cups/drivers/cupsui.dll W32X86/cupsui.dll; \
+ put /usr/share/cups/drivers/cups.hlp W32X86/cups.hlp'
+added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
+Domain=[CUPS-PRINT] OS=[UNIX] Server=[Samba 2.2.7a]
+NT_STATUS_OBJECT_NAME_COLLISION making remote directory \W32X86
+putting file /var/spool/cups/tmp/3e98bf2d333b5 as \W32X86/infotec_2105.ppd
+putting file /usr/share/cups/drivers/cupsdrvr.dll as \W32X86/cupsdrvr.dll
+putting file /usr/share/cups/drivers/cupsui.dll as \W32X86/cupsui.dll
+putting file /usr/share/cups/drivers/cups.hlp as \W32X86/cups.hlp
- Running command: rpcclient localhost -N -U'root%secret' -c 'adddriver &quot;Windows NT x86&quot; \
- &quot;infotec_2105:cupsdrvr.dll:infotec_2105.ppd:cupsui.dll:cups.hlp:NULL: \
- RAW:NULL&quot;'
- cmd = adddriver &quot;Windows NT x86&quot; &quot;infotec_2105:cupsdrvr.dll:infotec_2105.ppd:cupsui.dll: \
- cups.hlp:NULL:RAW:NULL&quot;
- Printer Driver infotec_2105 successfully installed.
+Running command: rpcclient localhost -N -U'root%secret'
+ -c 'adddriver &quot;Windows NT x86&quot; \
+ &quot;infotec_2105:cupsdrvr.dll:infotec_2105.ppd:cupsui.dll:cups.hlp:NULL: \
+ RAW:NULL&quot;'
+cmd = adddriver &quot;Windows NT x86&quot; \
+ &quot;infotec_2105:cupsdrvr.dll:infotec_2105.ppd:cupsui.dll:cups.hlp:NULL:RAW:NULL&quot;
+Printer Driver infotec_2105 successfully installed.
- Running command: smbclient //localhost/print\$ -N -U'root%secret' -c 'mkdir WIN40;put \
- /var/spool/cups/tmp/3e98bf2d333b5 WIN40/infotec_2105.PPD; put \
- /usr/share/cups/drivers/ADFONTS.MFM WIN40/ADFONTS.MFM;put \
- /usr/share/cups/drivers/ADOBEPS4.DRV WIN40/ADOBEPS4.DRV;put \
- /usr/share/cups/drivers/ADOBEPS4.HLP WIN40/ADOBEPS4.HLP;put \
- /usr/share/cups/drivers/DEFPRTR2.PPD WIN40/DEFPRTR2.PPD;put \
- /usr/share/cups/drivers/ICONLIB.DLL
- WIN40/ICONLIB.DLL;put /usr/share/cups/drivers/PSMON.DLL WIN40/PSMON.DLL;'
+Running command: smbclient //localhost/print\$ -N -U'root%secret' \
+-c 'mkdir WIN40; \
+ put /var/spool/cups/tmp/3e98bf2d333b5 WIN40/infotec_2105.PPD; \
+ put /usr/share/cups/drivers/ADFONTS.MFM WIN40/ADFONTS.MFM; \
+ put /usr/share/cups/drivers/ADOBEPS4.DRV WIN40/ADOBEPS4.DRV; \
+ put /usr/share/cups/drivers/ADOBEPS4.HLP WIN40/ADOBEPS4.HLP; \
+ put /usr/share/cups/drivers/DEFPRTR2.PPD WIN40/DEFPRTR2.PPD; \
+ put /usr/share/cups/drivers/ICONLIB.DLL WIN40/ICONLIB.DLL; \
+ put /usr/share/cups/drivers/PSMON.DLL WIN40/PSMON.DLL;'
added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
- Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
+ Domain=[CUPS-PRINT] OS=[UNIX] Server=[Samba 2.2.7a]
NT_STATUS_OBJECT_NAME_COLLISION making remote directory \WIN40
- putting file /var/spool/cups/tmp/3e98bf2d333b5 as \WIN40/infotec_2105.PPD (2328.8 kb/s) \
- (average 2328.8 kb/s)
- putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM (9368.0 kb/s) \
- (average 6469.6 kb/s)
- putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV (9958.2 kb/s) \
- (average 8404.3 kb/s)
- putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP (8341.5 kb/s) \
- (average 8398.6 kb/s)
- putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD (2195.9 kb/s) \
- (average 8254.3 kb/s)
- putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL (8239.9 kb/s) \
- (average 8253.6 kb/s)
- putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL (6222.2 kb/s) \
- (average 8188.5 kb/s)
+ putting file /var/spool/cups/tmp/3e98bf2d333b5 as \WIN40/infotec_2105.PPD
+ putting file /usr/share/cups/drivers/ADFONTS.MFM as \WIN40/ADFONTS.MFM
+ putting file /usr/share/cups/drivers/ADOBEPS4.DRV as \WIN40/ADOBEPS4.DRV
+ putting file /usr/share/cups/drivers/ADOBEPS4.HLP as \WIN40/ADOBEPS4.HLP
+ putting file /usr/share/cups/drivers/DEFPRTR2.PPD as \WIN40/DEFPRTR2.PPD
+ putting file /usr/share/cups/drivers/ICONLIB.DLL as \WIN40/ICONLIB.DLL
+ putting file /usr/share/cups/drivers/PSMON.DLL as \WIN40/PSMON.DLL
- Running command: rpcclient localhost -N -U'root%secret' -c 'adddriver &quot;Windows 4.0&quot; \
- &quot;infotec_2105:ADOBEPS4.DRV:infotec_2105.PPD:NULL:ADOBEPS4.HLP: \
- PSMON.DLL:RAW:ADOBEPS4.DRV,infotec_2105.PPD,ADOBEPS4.HLP,PSMON.DLL, \
- ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL&quot;'
+ Running command: rpcclient localhost -N -U'root%secret' \
+ -c 'adddriver &quot;Windows 4.0&quot; \
+ &quot;infotec_2105:ADOBEPS4.DRV:infotec_2105.PPD:NULL:ADOBEPS4.HLP: \
+ PSMON.DLL:RAW:ADOBEPS4.DRV,infotec_2105.PPD,ADOBEPS4.HLP,PSMON.DLL, \
+ ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL&quot;'
cmd = adddriver &quot;Windows 4.0&quot; &quot;infotec_2105:ADOBEPS4.DRV:infotec_2105.PPD:NULL: \
- ADOBEPS4.HLP:PSMON.DLL:RAW:ADOBEPS4.DRV,infotec_2105.PPD,ADOBEPS4.HLP, \
+ ADOBEPS4.HLP:PSMON.DLL:RAW:ADOBEPS4.DRV,infotec_2105.PPD,ADOBEPS4.HLP, \
PSMON.DLL,ADFONTS.MFM,DEFPRTR2.PPD,ICONLIB.DLL&quot;
Printer Driver infotec_2105 successfully installed.
- Running command: rpcclient localhost -N -U'root%secret' \
- -c 'setdriver infotec_2105 infotec_2105'
+ Running command: rpcclient localhost -N -U'root%secret' \
+ -c 'setdriver infotec_2105 infotec_2105'
cmd = setdriver infotec_2105 infotec_2105
Successfully set infotec_2105 to driver infotec_2105.
</pre><p>
-If you look closely, you'll discover your root password was transfered
+If you look closely, you'll discover your root password was transferred
unencrypted over the wire, so beware! Also, if you look further her,
you'll discover error messages like NT_STATUS_OBJECT_NAME_COLLISION in
between. They occur, because the directories WIN40 and W32X86 already
existed in the <i class="parameter"><tt>[print$]</tt></i> driver download share
(from a previous driver installation). They are harmless here.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951378"></a>Understanding cupsaddsmb</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914873"></a>Understanding cupsaddsmb</h3></div></div><div></div></div><a class="indexterm" name="id2914882"></a><p>
What has happened? What did cupsaddsmb do? There are five stages of
the procedure
-</p><div class="orderedlist"><ol type="1"><li><p>call the CUPS server via IPP and request the
+</p><div class="orderedlist"><ol type="1"><li><p>
+ <a class="indexterm" name="id2914909"></a>
+ call the CUPS server via IPP and request the
driver files and the PPD file for the named printer;</p></li><li><p>store the files temporarily in the local
TEMPDIR (as defined in
<tt class="filename">cupsd.conf</tt>);</p></li><li><p>connect via smbclient to the Samba server's
<i class="parameter"><tt>[print$]</tt></i> share and put the files into the
share's WIN40 (for Win95/98/ME) and W32X86/ (for WinNT/2k/XP) sub
- directories;</p></li><li><p>connect via rpcclient to the Samba server and
+ directories;</p></li><li><p>
+<a class="indexterm" name="id2914954"></a>
+ connect via rpcclient to the Samba server and
execute the &quot;adddriver&quot; command with the correct
-parameters;</p></li><li><p>connect via rpcclient to the Samba server a second
+parameters;</p></li><li><p>
+<a class="indexterm" name="id2914972"></a>
+ connect via rpcclient to the Samba server a second
time and execute the &quot;setdriver&quot; command.</p></li></ol></div><p>
Note, that you can run the cupsaddsmb utility with parameters to
specify one remote host as Samba host and a second remote host as CUPS
@@ -10081,10 +9654,8 @@ good idea try it and see more clearly what is going on (though in real
life most people will have their CUPS and Samba servers run on the
same host):
</p><pre class="screen">
-
- # cupsaddsmb -H sambaserver -h cupsserver -v printername
-
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951472"></a>How to recognize if cupsaddsm completed successfully</h3></div></div><div></div></div><p>
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -H sambaserver -h cupsserver -v printername</tt></b>
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915022"></a>How to recognize if cupsaddsmb completed successfully</h3></div></div><div></div></div><p>
You <span class="emphasis"><em>must</em></span> always check if the utility completed
successfully in all fields. You need as a minimum these 3 messages
amongst the output:
@@ -10095,7 +9666,7 @@ installed.</em></span> # (for the WIN40 == Win9x/ME
architecture...)</p></li><li><p><span class="emphasis"><em>Successfully set [printerXPZ] to driver
[printerXYZ].</em></span></p></li></ol></div><p>
These messages probably not easily recognized in the general
-output. If you run cupsaddsmb with the <i class="parameter"><tt>-a</tt></i>
+output. If you run cupsaddsmb with the <tt class="option">-a</tt>
parameter (which tries to prepare <span class="emphasis"><em>all</em></span> active CUPS
printer drivers for download), you might miss if individual printers
drivers had problems to install properly. Here a redirection of the
@@ -10105,32 +9676,30 @@ It is impossible to see any diagnostic output if you don't run
cupsaddsmb in verbose mode. Therefore we strongly recommend to not
use the default quiet mode. It will hide any problems from you which
might occur.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951559"></a>cupsaddsmb with a Samba PDC</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915105"></a>cupsaddsmb with a Samba PDC</h3></div></div><div></div></div><a class="indexterm" name="id2915114"></a><p>
You can't get the standard cupsaddsmb command to run on a Samba PDC?
You are asked for the password credential all over again and again and
the command just will not take off at all? Try one of these
variations:
</p><pre class="screen">
-
- # cupsaddsmb -U DOMAINNAME\\root -v printername
- # cupsaddsmb -H SAMBA-PDC -U DOMAINNAME\\root -v printername
- # cupsaddsmb -H SAMBA-PDC -U DOMAINNAME\\root -h cups-server -v printername
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -U MIDEARTH\\root -v printername</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -H SAURON -U MIDEARTH\\root -v printername</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>cupsaddsmb -H SAURON -U MIDEARTH\\root -h cups-server -v printername</tt></b>
</pre><p>
(Note the two backslashes: the first one is required to
&quot;escape&quot; the second one).
-</p></div><div xmlns:ns65="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951594"></a>cupsaddsmb Flowchart</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915185"></a>cupsaddsmb Flowchart</h3></div></div><div></div></div><a class="indexterm" name="id2915194"></a><p>
Here is a chart about the procedures, commandflows and
dataflows of the &quot;cupaddsmb&quot; command. Note again: cupsaddsmb is
not intended to, and does not work with, &quot;raw&quot; queues!
-</p><ns65:p>
-</ns65:p><div class="figure"><a name="id2951611"></a><p class="title"><b>Figure19.14.cupsaddsmb flowchart</b></p><div class="mediaobject"><img src="projdoc/imagefiles/1small.png" alt="cupsaddsmb flowchart"></div></div><ns65:p>
-</ns65:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951645"></a>Installing the PostScript Driver on a Client</h3></div></div><div></div></div><p>
+</p><p>
+ </p><div class="figure"><a name="small14"></a><p class="title"><b>Figure19.16.cupsaddsmb flowchart</b></p><div class="mediaobject"><img src="projdoc/imagefiles/14small.png" width="270" alt="cupsaddsmb flowchart"></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915261"></a>Installing the PostScript Driver on a Client</h3></div></div><div></div></div><a class="indexterm" name="id2915268"></a><p>
After cupsaddsmb completed, your driver is prepared for the clients to
use. Here are the steps you must perform to download and install it
via &quot;Point'n'Print&quot;. From a Windows client, browse to the CUPS/Samba
server;
-</p><div class="itemizedlist"><ul type="disc"><li><p>open the <span class="emphasis"><em>Printers</em></span>
+</p><div class="itemizedlist"><a class="indexterm" name="id2915289"></a><ul type="disc"><li><p>open the <span class="emphasis"><em>Printers</em></span>
share of Samba in Network Neighbourhood;</p></li><li><p>right-click on the printer in
question;</p></li><li><p>from the opening context-menu select
<span class="emphasis"><em>Install...</em></span> or
@@ -10145,6 +9714,7 @@ an application like Winword, the new printer will appears in a
<tt class="filename">\\SambaServer\PrinterName</tt> entry in the
dropdown list of available printers.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2915366"></a>
cupsaddsmb will only reliably work with CUPS version 1.1.15 or higher
and Samba from 2.2.4. If it doesn't work, or if the automatic printer
driver download to the clients doesn't succeed, you can still manually
@@ -10152,16 +9722,14 @@ install the CUPS printer PPD on top of the Adobe PostScript driver on
clients. Then point the client's printer queue to the Samba printer
share for a UNC type of connection:
</p></div><pre class="screen">
-
- net use lpt1: \\sambaserver\printershare /user:ntadmin
-
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>net use lpt1: \\sambaserver\printershare /user:ntadmin</tt></b>
</pre><p>
should you desire to use the CUPS networked PostScript RIP
functions. (Note that user &quot;ntadmin&quot; needs to be a valid Samba user
with the required privileges to access the printershare) This would
set up the printer connection in the traditional
<span class="emphasis"><em>LanMan</em></span> way (not using MS-RPC).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951760"></a>Avoiding critical PostScript Driver Settings on the
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915425"></a>Avoiding critical PostScript Driver Settings on the
Client</h3></div></div><div></div></div><p>
Soooo: printing works, but there are still problems. Most jobs print
well, some don't print at all. Some jobs have problems with fonts,
@@ -10187,7 +9755,7 @@ get a printout at all) (Adobe)</p></li><li><p>Sometimes you can choose <span cla
Level</em></span>: in case of problems try <span class="emphasis"><em>2</em></span>
instead of <span class="emphasis"><em>3</em></span> (the latest ESP Ghostscript package
handles Level 3 PostScript very well) (Adobe).</p></li><li><p>Say <span class="emphasis"><em>Yes</em></span> to <span class="emphasis"><em>PostScript
-Error Handler</em></span> (Adobe)</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2951894"></a>Installing PostScript Driver Files manually (using
+Error Handler</em></span> (Adobe)</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2915559"></a>Installing PostScript Driver Files manually (using
rpcclient)</h2></div></div><div></div></div><p>
Of course you can run all the commands which are embedded into the
cupsaddsmb convenience utility yourself, one by one, and hereby upload
@@ -10195,9 +9763,18 @@ and prepare the driver files for future client downloads.
</p><div class="orderedlist"><ol type="1"><li><p>prepare Samba (a CUPS printqueue with the name of the
printer should be there. We are providing the driver
now);</p></li><li><p>copy all files to
-<i class="parameter"><tt>[print$]:</tt></i></p></li><li><p>run <b class="command">rpcclient adddriver</b>
-(for each client architecture you want to support):</p></li><li><p>run <b class="command">rpcclient
+ <i class="parameter"><tt>[print$]</tt></i></p></li><li><p>
+<a class="indexterm" name="id2915609"></a>
+ run <b class="command">rpcclient adddriver</b>
+(for each client architecture you want to support):</p></li><li><p>
+<a class="indexterm" name="id2915633"></a>
+ run <b class="command">rpcclient
setdriver.</b></p></li></ol></div><p>
+<a class="indexterm" name="id2915655"></a>
+<a class="indexterm" name="id2915666"></a>
+<a class="indexterm" name="id2915677"></a>
+<a class="indexterm" name="id2915688"></a>
+<a class="indexterm" name="id2915699"></a>
We are going to do this now. First, read the man page on &quot;rpcclient&quot;
to get a first idea. Look at all the printing related
sub-commands. <b class="command">enumprinters</b>,
@@ -10208,7 +9785,7 @@ the MS-RPC protocol. You can use it to query (and command) a Win NT
(or 2K/XP) PC too. MS-RPC is used by Windows clients, amongst other
things, to benefit from the &quot;Point'n'Print&quot; features. Samba can now
mimic this too.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952009"></a>A Check of the rpcclient man Page</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915762"></a>A Check of the rpcclient man Page</h3></div></div><div></div></div><p>
First let's have a little check of the rpcclient man page. Here are
two relevant passages:
</p><p>
@@ -10241,18 +9818,16 @@ printer driver associated with an installed printer. The printer
driver must already be correctly installed on the print server.
</p><p> See also the enumprinters and enumdrivers commands for
obtaining a list of installed printers and drivers.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952121"></a>Understanding the rpcclient man Page</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915876"></a>Understanding the rpcclient man page</h3></div></div><div></div></div><p>
The <span class="emphasis"><em>exact</em></span> format isn't made too clear by the man
page, since you have to deal with some parameters containing
spaces. Here is a better description for it. We have line-broken the
command and indicated the breaks with &quot;\&quot;. Usually you would type the
command in one line without the linebreaks:
-</p><pre class="screen">
-
+</p><a class="indexterm" name="id2915901"></a><pre class="screen">
adddriver &quot;Architecture&quot; \
&quot;LongPrinterName:DriverFile:DataFile:ConfigFile:HelpFile:\
LanguageMonitorFile:DataType:ListOfFiles,Comma-separated&quot;
-
</pre><p>
What the man pages denotes as a simple &lt;config&gt;
keyword, does in reality consist of 8 colon-separated fields. The
@@ -10277,22 +9852,22 @@ box now, and access it from a UNIX workstation. We will query it
with <b class="command">rpcclient</b> to see what it tells us and
try to understand the man page more clearly which we've read just
now.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952200"></a>Producing an Example by querying a Windows Box</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915981"></a>Producing an Example by querying a Windows Box</h3></div></div><div></div></div><p>
+ <a class="indexterm" name="id2915992"></a>
+ <a class="indexterm" name="id2916003"></a>
We could run <b class="command">rpcclient</b> with a
<b class="command">getdriver</b> or a <b class="command">getprinter</b>
subcommand (in level 3 verbosity) against it. Just sit down at UNIX or
Linux workstation with the Samba utilities installed. Then type the
following command:
</p><pre class="screen">
-
- rpcclient -U'USERNAME%PASSWORD' NT-SERVER-NAME -c 'getdriver printername 3'
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U'USERNAME%PASSWORD' NT-SERVER-NAME -c 'getdriver printername 3'</tt></b>
</pre><p>
From the result it should become clear which is which. Here is an
example from my installation:
-</p><pre class="screen">
-
-# rpcclient -U'Danka%xxxx' W2KSERVER -c'getdriver &quot;DANKA InfoStream Virtual Printer&quot; 3'
+</p><a class="indexterm" name="id2916064"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U'Danka%xxxx' W2KSERVER \
+ -c'getdriver &quot;DANKA InfoStream Virtual Printer&quot; 3'</tt></b>
cmd = getdriver &quot;DANKA InfoStream Virtual Printer&quot; 3
[Windows NT x86]
@@ -10322,15 +9897,16 @@ Some printer drivers list additional files under the label
<span class="emphasis"><em>ListOfFiles,Comma-separated</em></span>. For the CUPS
PostScript drivers we don't need any (nor would we for the Adobe
PostScript driver): therefore the field will get a &quot;NULL&quot; entry.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952290"></a>What is required for adddriver and setdriver to succeed</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916147"></a>What is required for adddriver and setdriver to succeed</h3></div></div><div></div></div><p>
From the manpage (and from the quoted output
of <span class="emphasis"><em>cupsaddsmb</em></span>, above) it becomes clear that you
need to have certain conditions in order to make the manual uploading
and initializing of the driver files succeed. The two rpcclient
+<a class="indexterm" name="id2916166"></a>
subcommands (<b class="command">adddriver</b> and
<b class="command">setdriver</b>) need to encounter the following
pre-conditions to complete successfully:
-</p><div class="itemizedlist"><ul type="disc"><li><p>you are connected as &quot;printer admin&quot;, or root (note,
+</p><div class="itemizedlist"><ul type="disc"><li><p>you are connected as <a class="indexterm" name="id2916200"></a><i class="parameter"><tt>printer admin</tt></i>, or root (note,
that this is <span class="emphasis"><em>not</em></span> the &quot;Printer Operators&quot; group in
NT, but the <span class="emphasis"><em>printer admin</em></span> group, as defined in
the <i class="parameter"><tt>[global]</tt></i> section of
@@ -10345,7 +9921,10 @@ to escape the &quot;$&quot;: <b class="command">smbclient //sambaserver/print\$
root</b>);</p></li><li><p>the user you're connecting as must be able to write to
the <i class="parameter"><tt>[print$]</tt></i> share and create
subdirectories;</p></li><li><p>the printer you are going to setup for the Windows
-clients, needs to be installed in CUPS already;</p></li><li><p>the CUPS printer must be known to Samba, otherwise the
+clients, needs to be installed in CUPS already;</p></li><li><p>
+ <a class="indexterm" name="id2916315"></a>
+ <a class="indexterm" name="id2916326"></a>
+ the CUPS printer must be known to Samba, otherwise the
<b class="command">setdriver</b> subcommand fails with an
NT_STATUS_UNSUCCESSFUL error. To check if the printer is known by
Samba you may use the <b class="command">enumprinters</b> subcommand to
@@ -10353,30 +9932,25 @@ rpcclient. A long-standing bug prevented a proper update of the
printer list until every smbd process had received a SIGHUP or was
restarted. Remember this in case you've created the CUPS printer just
shortly ago and encounter problems: try restarting
-Samba.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952452"></a>Manual Commandline Driver Installation in 15 little Steps</h3></div></div><div></div></div><p>
+Samba.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916361"></a>Manual Driver Installation in 15 Steps</h3></div></div><div></div></div><p>
We are going to install a printer driver now by manually executing all
required commands. As this may seem a rather complicated process at
first, we go through the procedure step by step, explaining every
single action item as it comes up.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952469"></a>First Step: Install the Printer on CUPS</h4></div></div><div></div></div><pre class="screen">
-
-# lpadmin -p mysmbtstprn -v socket://10.160.51.131:9100 -E -P /home/kurt/canonIR85.ppd
-
+</p><div class="procedure"><p class="title"><b>Procedure19.1.Manual Driver Installation installation</b></p><ol type="1"><li><p class="title"><b>Install the Printer on CUPS</b></p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p mysmbtstprn -v socket://10.160.51.131:9100 -E -P canonIR85.ppd</tt></b>
</pre><p>
This installs printer with the name <span class="emphasis"><em>mysmbtstprn</em></span>
to the CUPS system. The printer is accessed via a socket
(a.k.a. JetDirect or Direct TCP/IP) connection. You need to be root
for this step
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952499"></a>Second Step (optional): Check if the Printer is recognized by
-Samba</h4></div></div><div></div></div><pre class="screen">
-
- # rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep -C2 mysmbtstprn
-
- flags:[0x800000]
- name:[\\kde-bitshop\mysmbtstprn]
- description:[\\kde-bitshop\mysmbtstprn,,mysmbtstprn]
- comment:[mysmbtstprn]
-
+</p></li><li><p class="title"><b>(optional) Check if the Printer is recognized by
+Samba</b></p><a class="indexterm" name="id2916442"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep -C2 mysmbtstprn</tt></b>
+flags:[0x800000]
+name:[\\kde-bitshop\mysmbtstprn]
+description:[\\kde-bitshop\mysmbtstprn,,mysmbtstprn]
+comment:[mysmbtstprn]
</pre><p>
This should show the printer in the list. If not, stop and re-start
the Samba daemon (smbd), or send a HUP signal: <b class="command">kill -HUP
@@ -10388,24 +9962,25 @@ already. You need to know root's Samba password (as set by the
following steps. Alternatively you can authenticate as one of the
users from the &quot;write list&quot; as defined in <tt class="filename">smb.conf</tt> for
<i class="parameter"><tt>[print$]</tt></i>.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952562"></a>Third Step (optional): Check if Samba knows a Driver for the
-Printer</h4></div></div><div></div></div><pre class="screen">
-
-# rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver
- drivername:[]
+</p></li><li><p class="title"><b>(optional) Check if Samba knows a Driver for the
+Printer</b></p><a class="indexterm" name="id2916537"></a><a class="indexterm" name="id2916548"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost \
+ | grep driver </tt></b>
+drivername:[]
+
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost \
+ | grep -C4 driv</tt></b>
+servername:[\\kde-bitshop]
+printername:[\\kde-bitshop\mysmbtstprn]
+sharename:[mysmbtstprn]
+portname:[Samba Printer Port]
+drivername:[]
+comment:[mysmbtstprn]
+location:[]
+sepfile:[]
+printprocessor:[winprint]
-# rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep -C4 driv
- servername:[\\kde-bitshop]
- printername:[\\kde-bitshop\mysmbtstprn]
- sharename:[mysmbtstprn]
- portname:[Samba Printer Port]
- drivername:[]
- comment:[mysmbtstprn]
- location:[]
- sepfile:[]
- printprocessor:[winprint]
-
-# rpcclient -U root%xxxx -c 'getdriver mysmbtstprn' localhost
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U root%xxxx -c 'getdriver mysmbtstprn' localhost</tt></b>
result was WERR_UNKNOWN_PRINTER_DRIVER
</pre><p>
@@ -10414,16 +9989,14 @@ This step was done for the purpose of demonstrating this condition. An
attempt to connect to the printer at this stage will prompt the
message along the lines: &quot;The server has not the required printer
driver installed&quot;.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952600"></a>Fourth Step: Put all required Driver Files into Samba's
-[print$]</h4></div></div><div></div></div><pre class="screen">
-
-# smbclient //localhost/print\$ -U 'root%xxxx' \
- -c 'cd W32X86; \
- put /etc/cups/ppd/mysmbtstprn.ppd mysmbtstprn.PPD; \
- put /usr/share/cups/drivers/cupsui.dll cupsui.dll; \
- put /usr/share/cups/drivers/cupsdrvr.dll cupsdrvr.dll; \
- put /usr/share/cups/drivers/cups.hlp cups.hlp'
-
+</p></li><li><p class="title"><b>Put all required Driver Files into Samba's
+[print$]</b></p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //localhost/print\$ -U 'root%xxxx' \
+ -c 'cd W32X86; \
+ put /etc/cups/ppd/mysmbtstprn.ppd mysmbtstprn.PPD; \
+ put /usr/share/cups/drivers/cupsui.dll cupsui.dll; \
+ put /usr/share/cups/drivers/cupsdrvr.dll cupsdrvr.dll; \
+ put /usr/share/cups/drivers/cups.hlp cups.hlp'</tt></b>
</pre><p>
(Note that this command should be entered in one long single
line. Line-breaks and the line-end indicating &quot;\&quot; has been inserted
@@ -10433,31 +10006,26 @@ present in the <i class="parameter"><tt>[print$]</tt></i> share. However, client
would still not be able to install them, because Samba does not yet
treat them as driver files. A client asking for the driver would still
be presented with a &quot;not installed here&quot; message.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952651"></a>Fifth Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen">
-
-# ls -l /etc/samba/drivers/W32X86/
- total 669
- drwxr-sr-x 2 root ntadmin 532 May 25 23:08 2
- drwxr-sr-x 2 root ntadmin 670 May 16 03:15 3
- -rwxr--r-- 1 root ntadmin 14234 May 25 23:21 cups.hlp
- -rwxr--r-- 1 root ntadmin 278380 May 25 23:21 cupsdrvr.dll
- -rwxr--r-- 1 root ntadmin 215848 May 25 23:21 cupsui.dll
- -rwxr--r-- 1 root ntadmin 169458 May 25 23:21 mysmbtstprn.PPD
-
+</p></li><li><p class="title"><b>Verify where the Driver Files are now</b></p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l /etc/samba/drivers/W32X86/</tt></b>
+total 669
+drwxr-sr-x 2 root ntadmin 532 May 25 23:08 2
+drwxr-sr-x 2 root ntadmin 670 May 16 03:15 3
+-rwxr--r-- 1 root ntadmin 14234 May 25 23:21 cups.hlp
+-rwxr--r-- 1 root ntadmin 278380 May 25 23:21 cupsdrvr.dll
+-rwxr--r-- 1 root ntadmin 215848 May 25 23:21 cupsui.dll
+-rwxr--r-- 1 root ntadmin 169458 May 25 23:21 mysmbtstprn.PPD
</pre><p>
The driver files now are in the W32X86 architecture &quot;root&quot; of
<i class="parameter"><tt>[print$]</tt></i>.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952689"></a>Sixth Step: Tell Samba that these are
+</p></li><li><p class="title"><b>Tell Samba that these are
<span class="emphasis"><em>Driver</em></span> Files
-(<b class="command">adddriver</b>)</h4></div></div><div></div></div><pre class="screen">
-
-# rpcclient -Uroot%xxxx -c `adddriver &quot;Windows NT x86&quot; &quot;mydrivername: \
- cupsdrvr.dll:mysmbtstprn.PPD: \
- cupsui.dll:cups.hlp:NULL:RAW[<span class="citation">:</span>]NULL&quot; \
- localhost
-
- Printer Driver mydrivername successfully installed.
-
+(<b class="command">adddriver</b>)</b></p><a class="indexterm" name="id2916765"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c `adddriver &quot;Windows NT x86&quot; &quot;mydrivername: \
+ cupsdrvr.dll:mysmbtstprn.PPD: \
+ cupsui.dll:cups.hlp:NULL:RAW:NULL&quot; \
+ localhost</tt></b>
+Printer Driver mydrivername successfully installed.
</pre><p>
Note that your cannot repeat this step if it fails. It could fail even
as a result of a simple typo. It will most likely have moved a part of
@@ -10468,49 +10036,41 @@ driver. It is normally a good idea to use the same name as is used for
the printername; however, in big installations you may use this driver
for a number of printers which have obviously different names. So the
name of the driver is not fixed.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952744"></a>Seventh Step: Verify where the Driver Files are now</h4></div></div><div></div></div><pre class="screen">
-
-# ls -l /etc/samba/drivers/W32X86/
- total 1
- drwxr-sr-x 2 root ntadmin 532 May 25 23:22 2
- drwxr-sr-x 2 root ntadmin 670 May 16 03:15 3
-
-
-# ls -l /etc/samba/drivers/W32X86/2
- total 5039
- [....]
- -rwxr--r-- 1 root ntadmin 14234 May 25 23:21 cups.hlp
- -rwxr--r-- 1 root ntadmin 278380 May 13 13:53 cupsdrvr.dll
- -rwxr--r-- 1 root ntadmin 215848 May 13 13:53 cupsui.dll
- -rwxr--r-- 1 root ntadmin 169458 May 25 23:21 mysmbtstprn.PPD
-
+</p></li><li><p class="title"><b>Verify where the Driver Files are now</b></p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l /etc/samba/drivers/W32X86/</tt></b>
+total 1
+drwxr-sr-x 2 root ntadmin 532 May 25 23:22 2
+drwxr-sr-x 2 root ntadmin 670 May 16 03:15 3
+
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l /etc/samba/drivers/W32X86/2</tt></b>
+total 5039
+[....]
+-rwxr--r-- 1 root ntadmin 14234 May 25 23:21 cups.hlp
+-rwxr--r-- 1 root ntadmin 278380 May 13 13:53 cupsdrvr.dll
+-rwxr--r-- 1 root ntadmin 215848 May 13 13:53 cupsui.dll
+-rwxr--r-- 1 root ntadmin 169458 May 25 23:21 mysmbtstprn.PPD
</pre><p>
Notice how step 6 did also move the driver files to the appropriate
subdirectory. Compare with the situation after step 5.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952777"></a>Eighth Step (optional): Verify if Samba now recognizes the
-Driver</h4></div></div><div></div></div><pre class="screen">
-
-# rpcclient -Uroot%xxxx -c 'enumdrivers 3' localhost | grep -B2 -A5 mydrivername
-
- Printer Driver Info 3:
- Version: [2]
- Driver Name: [mydrivername]
- Architecture: [Windows NT x86]
- Driver Path: [\\kde-bitshop\print$\W32X86\2\cupsdrvr.dll]
- Datafile: [\\kde-bitshop\print$\W32X86\2\mysmbtstprn.PPD]
- Configfile: [\\kde-bitshop\print$\W32X86\2\cupsui.dll]
- Helpfile: [\\kde-bitshop\print$\W32X86\2\cups.hlp]
-
+</p></li><li><p class="title"><b>(optional) Verify if Samba now recognizes the
+Driver</b></p><a class="indexterm" name="id2916909"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'enumdrivers 3' localhost \
+ | grep -B2 -A5 mydrivername</tt></b>
+Printer Driver Info 3:
+Version: [2]
+Driver Name: [mydrivername]
+Architecture: [Windows NT x86]
+Driver Path: [\\kde-bitshop\print$\W32X86\2\cupsdrvr.dll]
+Datafile: [\\kde-bitshop\print$\W32X86\2\mysmbtstprn.PPD]
+Configfile: [\\kde-bitshop\print$\W32X86\2\cupsui.dll]
+Helpfile: [\\kde-bitshop\print$\W32X86\2\cups.hlp]
</pre><p>
Remember, this command greps for the name you did choose for the
driver in step Six. This command must succeed before you can proceed.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952810"></a>Ninth Step: Tell Samba which Printer should use these Driver
-Files (<b class="command">setdriver</b>)</h4></div></div><div></div></div><pre class="screen">
-
-# rpcclient -Uroot%xxxx -c 'setdriver mysmbtstprn mydrivername' localhost
-
- Successfully set mysmbtstprn to driver mydrivername
-
+</p></li><li><p class="title"><b>Tell Samba which Printer should use these Driver
+Files (<b class="command">setdriver</b>)</b></p><a class="indexterm" name="id2916973"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'setdriver mysmbtstprn mydrivername' localhost</tt></b>
+Successfully set mysmbtstprn to driver mydrivername
</pre><p>
Since you can bind any printername (=printqueue) to any driver, this
is a very convenient way to setup many queues which use the same
@@ -10518,50 +10078,53 @@ driver. You don't need to repeat all the previous steps for the
setdriver command to succeed. The only pre-conditions are:
<b class="command">enumdrivers</b> must find the driver and
<b class="command">enumprinters</b> must find the printer.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952860"></a>Tenth Step (optional): Verify if Samba has this Association
-recognized</h4></div></div><div></div></div><pre class="screen">
-
-# rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep driver
- drivername:[mydrivername]
+</p></li><li><p class="title"><b>(optional) Verify if Samba has this Association
+recognized</b></p><a class="indexterm" name="id2917042"></a><a class="indexterm" name="id2917053"></a><a class="indexterm" name="id2917064"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost \
+ | grep driver</tt></b>
+drivername:[mydrivername]
-# rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost | grep -C4 driv
- servername:[\\kde-bitshop]
- printername:[\\kde-bitshop\mysmbtstprn]
- sharename:[mysmbtstprn]
- portname:[Done]
- drivername:[mydrivername]
- comment:[mysmbtstprn]
- location:[]
- sepfile:[]
- printprocessor:[winprint]
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'getprinter mysmbtstprn 2' localhost \
+ | grep -C4 driv</tt></b>
+servername:[\\kde-bitshop]
+printername:[\\kde-bitshop\mysmbtstprn]
+sharename:[mysmbtstprn]
+portname:[Done]
+drivername:[mydrivername]
+comment:[mysmbtstprn]
+location:[]
+sepfile:[]
+printprocessor:[winprint]
-# rpcclient -U root%xxxx -c 'getdriver mysmbtstprn' localhost
- [Windows NT x86]
- Printer Driver Info 3:
- Version: [2]
- Driver Name: [mydrivername]
- Architecture: [Windows NT x86]
- Driver Path: [\\kde-bitshop\print$\W32X86\2\cupsdrvr.dll]
- Datafile: [\\kde-bitshop\print$\W32X86\2\mysmbtstprn.PPD]
- Configfile: [\\kde-bitshop\print$\W32X86\2\cupsui.dll]
- Helpfile: [\\kde-bitshop\print$\W32X86\2\cups.hlp]
- Monitorname: []
- Defaultdatatype: [RAW]
- Monitorname: []
- Defaultdatatype: [RAW]
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U root%xxxx -c 'getdriver mysmbtstprn' localhost</tt></b>
+[Windows NT x86]
+Printer Driver Info 3:
+ Version: [2]
+ Driver Name: [mydrivername]
+ Architecture: [Windows NT x86]
+ Driver Path: [\\kde-bitshop\print$\W32X86\2\cupsdrvr.dll]
+ Datafile: [\\kde-bitshop\print$\W32X86\2\mysmbtstprn.PPD]
+ Configfile: [\\kde-bitshop\print$\W32X86\2\cupsui.dll]
+ Helpfile: [\\kde-bitshop\print$\W32X86\2\cups.hlp]
+ Monitorname: []
+ Defaultdatatype: [RAW]
+ Monitorname: []
+ Defaultdatatype: [RAW]
-# rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep mysmbtstprn
- name:[\\kde-bitshop\mysmbtstprn]
- description:[\\kde-bitshop\mysmbtstprn,mydrivername,mysmbtstprn]
- comment:[mysmbtstprn]
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'enumprinters' localhost | grep mysmbtstprn</tt></b>
+ name:[\\kde-bitshop\mysmbtstprn]
+ description:[\\kde-bitshop\mysmbtstprn,mydrivername,mysmbtstprn]
+ comment:[mysmbtstprn]
</pre><p>
+<a class="indexterm" name="id2917156"></a>
Compare these results with the ones from steps 2 and 3. Note that
every single of these commands show the driver is installed. Even
the <b class="command">enumprinters</b> command now lists the driver
on the &quot;description&quot; line.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952916"></a>Eleventh Step (optional): Tickle the Driver into a correct
-Device Mode</h4></div></div><div></div></div><p>
+</p></li><li><p class="title"><b>(optional) Tickle the Driver into a correct
+Device Mode</b></p><p>
+<a class="indexterm" name="id2917194"></a>
You certainly know how to install the driver on the client. In case
you are not particularly familiar with Windows, here is a short
recipe: browse the Network Neighbourhood, go to the Samba server, look
@@ -10578,39 +10141,32 @@ It is important that you execute this step as a Samba printer admin
to do this on Windows XP. It uses a commandline, which you may type
into the &quot;DOS box&quot; (type root's smbpassword when prompted):
</p><pre class="screen">
-
- C:\&gt; runas /netonly /user:root &quot;rundll32 printui.dll,PrintUIEntry /in /n \\sambacupsserver\mysmbtstprn&quot;
-
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>runas /netonly /user:root &quot;rundll32 printui.dll,PrintUIEntry /in /n\
+ \\sambacupsserver\mysmbtstprn&quot;</tt></b>
</pre><p>
-Change any printer setting once (like <span class="emphasis"><em>&quot;portrait&quot;
---&gt; &quot;landscape&quot;</em></span>), click &quot;Apply&quot;; change the setting
+Change any printer setting once (like changing <span class="emphasis"><em>&quot;portrait&quot; to
+ &quot;landscape&quot;</em></span>), click <span class="guibutton">Apply</span>; change the setting
back.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2952978"></a>Twelfth Step: Install the Printer on a Client
-(&quot;Point'n'Print&quot;)</h4></div></div><div></div></div><pre class="screen">
-
- C:\&gt; rundll32 printui.dll,PrintUIEntry /in /n &quot;\\sambacupsserver\mysmbtstprn&quot;
-
+</p></li><li><p class="title"><b>Install the Printer on a Client
+(&quot;Point'n'Print&quot;)</b></p><a class="indexterm" name="id2917291"></a><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>rundll32 printui.dll,PrintUIEntry /in /n &quot;\\sambacupsserver\mysmbtstprn&quot;</tt></b>
</pre><p>
If it doesn't work it could be a permission problem with the
<i class="parameter"><tt>[print$]</tt></i> share.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953009"></a>Thirteenth Step (optional): Print a Test Page</h4></div></div><div></div></div><pre class="screen">
-
- C:\&gt; rundll32 printui.dll,PrintUIEntry /p /n &quot;\\sambacupsserver\mysmbtstprn&quot;
-
+</p></li><li><p class="title"><b>Thirteenth Step (optional): Print a Test Page</b></p><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>rundll32 printui.dll,PrintUIEntry /p /n &quot;\\sambacupsserver\mysmbtstprn&quot;</tt></b>
</pre><p>
Then hit [TAB] 5 times, [ENTER] twice, [TAB] once and [ENTER] again
and march to the printer.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953034"></a>Fourteenth Step (recommended): Study the Test Page</h4></div></div><div></div></div><p>
+</p></li><li><p class="title"><b>Fourteenth Step (recommended): Study the Test Page</b></p><p>
Hmmm.... just kidding! By now you know everything about printer
installations and you don't need to read a word. Just put it in a
frame and bolt it to the wall with the heading &quot;MY FIRST
RPCCLIENT-INSTALLED PRINTER&quot; - why not just throw it away!
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953052"></a>Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your
-Success</h4></div></div><div></div></div><pre class="screen">
-
-# echo &quot;Cheeeeerioooooo! Success...&quot; &gt;&gt; /var/log/samba/log.smbd
-
-</pre></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953072"></a>Troubleshooting revisited</h3></div></div><div></div></div><p>
+</p></li><li><p class="title"><b>Fifteenth Step (obligatory): Enjoy. Jump. Celebrate your
+Success</b></p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>echo &quot;Cheeeeerioooooo! Success...&quot; &gt;&gt; /var/log/samba/log.smbd</tt></b>
+</pre></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917432"></a>Troubleshooting revisited</h3></div></div><div></div></div><p>
The setdriver command will fail, if in Samba's mind the queue is not
already there. You had promising messages about the:
</p><pre class="screen">
@@ -10625,7 +10181,8 @@ a disappointing message like this one beneath?
result was NT_STATUS_UNSUCCESSFUL
</pre><p>
-It is not good enough that <span class="emphasis"><em>you</em></span>
+<a class="indexterm" name="id2917477"></a>
+It is not good enough that you
can see the queue <span class="emphasis"><em>in CUPS</em></span>, using
the <b class="command">lpstat -p ir85wm</b> command. A
bug in most recent versions of Samba prevents the proper update of
@@ -10634,26 +10191,35 @@ fails unless you re-start Samba or send a HUP to all smbd
processes. To verify if this is the reason why Samba doesn't
execute the setdriver command successfully, check if Samba &quot;sees&quot;
the printer:
-</p><pre class="screen">
-
-# rpcclient transmeta -N -U'root%secret' -c 'enumprinters 0'| grep ir85wm
+</p><a class="indexterm" name="id2917510"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient transmeta -N -U'root%secret' -c 'enumprinters 0'| grep ir85wm</tt></b>
printername:[ir85wm]
-
</pre><p>
An alternative command could be this:
-</p><pre class="screen">
-
-# rpcclient transmeta -N -U'root%secret' -c 'getprinter ir85wm'
+</p><a class="indexterm" name="id2917548"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient transmeta -N -U'root%secret' -c 'getprinter ir85wm' </tt></b>
cmd = getprinter ir85wm
flags:[0x800000]
name:[\\transmeta\ir85wm]
description:[\\transmeta\ir85wm,ir85wm,DPD]
comment:[CUPS PostScript-Treiber for WinNT/2K/XP]
-
</pre><p>
BTW, you can use these commands, plus a few more, of course,
to install drivers on remote Windows NT print servers too!
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953174"></a>The printing <tt class="filename">*.tdb</tt> Files</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2917593"></a>The printing <tt class="filename">*.tdb</tt> Files</h2></div></div><div></div></div><p>
+<a class="indexterm" name="id2917610"></a>
+<a class="indexterm" name="id2917618"></a>
+<a class="indexterm" name="id2917629"></a>
+<a class="indexterm" name="id2917640"></a>
+<a class="indexterm" name="id2917652"></a>
+<a class="indexterm" name="id2917663"></a>
+<a class="indexterm" name="id2917674"></a>
+<a class="indexterm" name="id2917685"></a>
+<a class="indexterm" name="id2917696"></a>
+<a class="indexterm" name="id2917708"></a>
+<a class="indexterm" name="id2917719"></a>
+<a class="indexterm" name="id2917730"></a>
+<a class="indexterm" name="id2917741"></a>
Some mystery is associated with the series of files with a
tdb-suffix appearing in every Samba installation. They are
<tt class="filename">connections.tdb</tt>,
@@ -10668,12 +10234,12 @@ tdb-suffix appearing in every Samba installation. They are
<tt class="filename">ntprinters.tdb</tt>,
<tt class="filename">sessionid.tdb</tt> and
<tt class="filename">secrets.tdb</tt>. What is their purpose?
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953277"></a>Trivial DataBase Files</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917838"></a>Trivial DataBase Files</h3></div></div><div></div></div><a class="indexterm" name="id2917846"></a><p>
A Windows NT (Print) Server keeps track of all information needed to serve
its duty toward its clients by storing entries in the Windows
&quot;Registry&quot;. Client queries are answered by reading from the registry,
Administrator or user configuration settings are saved by writing into
-the Registry. Samba and Unix obviously don't have such a kind of
+the Registry. Samba and UNIX obviously don't have such a kind of
Registry. Samba instead keeps track of all client related information in a
series of <tt class="filename">*.tdb</tt> files. (TDB = Trivial Data
Base). These are often located in <tt class="filename">/var/lib/samba/</tt>
@@ -10681,7 +10247,7 @@ or <tt class="filename">/var/lock/samba/</tt> . The printing related files
are <tt class="filename">ntprinters.tdb</tt>,
<tt class="filename">printing.tdb</tt>,<tt class="filename">ntforms.tdb</tt> and
<tt class="filename">ntdrivers.tdb</tt>.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953347"></a>Binary Format</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917930"></a>Binary Format</h3></div></div><div></div></div><p>
<tt class="filename">*.tdb</tt> files are not human readable. They are
written in a binary format. &quot;Why not ASCII?&quot;, you may ask. &quot;After all,
ASCII configuration files are a good and proofed tradition on UNIX.&quot;
@@ -10694,7 +10260,7 @@ same time</em></span>. The file format of Samba's
<tt class="filename">*.tdb</tt> files allows for this provision. Many smbd
processes may write to the same <tt class="filename">*.tdb</tt> file at the
same time. This wouldn't be possible with pure ASCII files.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953409"></a>Losing <tt class="filename">*.tdb</tt> Files</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917994"></a>Losing <tt class="filename">*.tdb</tt> Files</h3></div></div><div></div></div><p>
It is very important that all <tt class="filename">*.tdb</tt> files remain
consistent over all write and read accesses. However, it may happen
that these files <span class="emphasis"><em>do</em></span> get corrupted. (A
@@ -10704,13 +10270,12 @@ etc.). In cases of trouble, a deletion of the old printing-related
<tt class="filename">*.tdb</tt> files may be the only option. You need to
re-create all print related setup after that. Or you have made a
backup of the <tt class="filename">*.tdb</tt> files in time.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953468"></a>Using <span class="emphasis"><em>tdbbackup</em></span></h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918053"></a>Using <span class="emphasis"><em>tdbbackup</em></span></h3></div></div><div></div></div><a class="indexterm" name="id2918063"></a><a class="indexterm" name="id2918077"></a><p>
Samba ships with a little utility which helps the root user of your
system to back up your <tt class="filename">*.tdb</tt> files. If you run it
with no argument, it prints a little usage message:
</p><pre class="screen">
-
-# tdbbackup
+<tt class="prompt">root# </tt><b class="userinput"><tt>tdbbackup</tt></b>
Usage: tdbbackup [options] &lt;fname...&gt;
Version:3.0a
@@ -10721,32 +10286,30 @@ with no argument, it prints a little usage message:
</pre><p>
Here is how I backed up my printing.tdb file:
</p><pre class="screen">
-
-# ls
- . browse.dat locking.tdb ntdrivers.tdb printing.tdb share_info.tdb
- .. connections.tdb messages.tdb ntforms.tdb printing.tdbkp unexpected.tdb
- brlock.tdb gmon.out namelist.debug ntprinters.tdb sessionid.tdb
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls</tt></b>
+. browse.dat locking.tdb ntdrivers.tdb printing.tdb
+.. share_info.tdb connections.tdb messages.tdb ntforms.tdb
+printing.tdbkp unexpected.tdb brlock.tdb gmon.out namelist.debug
+ntprinters.tdb sessionid.tdb
- kde-bitshop:/var/lock/samba # tdbbackup -s .bak printing.tdb
+<tt class="prompt">root# </tt><b class="userinput"><tt>tdbbackup -s .bak printing.tdb</tt></b>
printing.tdb : 135 records
- kde-bitshop:/var/lock/samba # ls -l printing.tdb*
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l printing.tdb*</tt></b>
-rw------- 1 root root 40960 May 2 03:44 printing.tdb
-rw------- 1 root root 40960 May 2 03:44 printing.tdb.bak
-</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953530"></a>CUPS Print Drivers from Linuxprinting.org</h2></div></div><div></div></div><p>
+</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2918189"></a>CUPS Print Drivers from Linuxprinting.org</h2></div></div><div></div></div><a class="indexterm" name="id2918196"></a><p>
CUPS ships with good support for HP LaserJet type printers. You can
install the generic driver as follows:
-</p><pre class="screen">
-
-lpadmin -p laserjet4plus -v parallel:/dev/lp0 -E -m laserjet.ppd
-
+</p><a class="indexterm" name="id2918211"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p laserjet4plus -v parallel:/dev/lp0 -E -m laserjet.ppd</tt></b>
</pre><p>
-The <i class="parameter"><tt>-m</tt></i> switch will retrieve the
+The <tt class="option">-m</tt> switch will retrieve the
<tt class="filename">laserjet.ppd</tt> from the standard repository for
not-yet-installed-PPDs, which CUPS typically stores in
<tt class="filename">/usr/share/cups/model</tt>. Alternatively, you may use
-<i class="parameter"><tt>-P /path/to/your.ppd</tt></i>.
+<tt class="option">-P /path/to/your.ppd</tt>.
</p><p>
The generic laserjet.ppd however does not support every special option
for every LaserJet-compatible model. It constitutes a sort of &quot;least
@@ -10758,6 +10321,7 @@ best used for each printer. Its database is kept current by the
tireless work of Till Kamppeter from MandrakeSoft, who is also the
principal author of the foomatic-rip utility.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2918309"></a>
The former &quot;cupsomatic&quot; concept is now be replaced by the new, much
more powerful &quot;foomatic-rip&quot;. foomatic-rip is the successor of
cupsomatic. cupsomatic is no longer maintained. Here is the new URL
@@ -10768,7 +10332,7 @@ not work with PPDs generated for the old cupsomatic. The new-style
PPDs are 100% compliant to the Adobe PPD specification. They are
intended to be used by Samba and the cupsaddsmb utility also, to
provide the driver files for the Windows clients also!
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953636"></a>foomatic-rip and Foomatic explained</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918345"></a>foomatic-rip and Foomatic explained</h3></div></div><div></div></div><a class="indexterm" name="id2918353"></a><a class="indexterm" name="id2918362"></a><p>
Nowadays most Linux distros rely on the utilities of Linuxprinting.org
to create their printing related software (which, BTW, works on all
UNIXes and on Mac OS X or Darwin too). It is not known as well as it
@@ -10785,7 +10349,7 @@ its <a href="http://www.linuxprinting.org/foomatic.html" target="_top">Foomatic<
database. Currently there are <a href="http://www.linuxprinting.org/driver_list.cgi" target="_top">245 drivers</a>
in the database: many drivers support various models, and many models
may be driven by different drivers; it's your choice!
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953691"></a>690 &quot;perfect&quot; Printers</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2918416"></a>690 &quot;perfect&quot; Printers</h4></div></div><div></div></div><p>
At present there are 690 devices dubbed as working &quot;perfectly&quot;, 181
&quot;mostly&quot;, 96 &quot;partially&quot; and 46 are &quot;Paperweights&quot;. Keeping in mind
that most of these are non-PostScript models (PostScript printers are
@@ -10796,7 +10360,7 @@ doesn't also scan and copy and fax under GNU/Linux: then this is a
truly astonishing achievement. Three years ago the number was not
more than 500, and Linux or UNIX &quot;printing&quot; at the time wasn't
anywhere near the quality it is today!
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953716"></a>How the &quot;Printing HOWTO&quot; started it all</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2918449"></a>How the &quot;Printing HOWTO&quot; started it all</h4></div></div><div></div></div><p>
A few years ago <a href="http://www2.picante.com:81/~gtaylor/" target="_top">Grant Taylor</a>
started it all. The roots of today's Linuxprinting.org are in the
first <a href="http://www.linuxprinting.org/foomatic2.9/howto/" target="_top">Linux Printing
@@ -10810,7 +10374,7 @@ hardware and driver zoo that made up Linux printing of the time. This
database became the core component of today's Foomatic collection of
tools and data. In the meantime it has moved to an XML representation
of the data.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953761"></a>Foomatic's strange Name</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2918496"></a>Foomatic's strange Name</h4></div></div><div></div></div><a class="indexterm" name="id2918505"></a><p>
&quot;Why the funny name?&quot;, you ask. When it really took off, around spring
2000, CUPS was far less popular than today, and most systems used LPD,
LPRng or even PDQ to print. CUPS shipped with a few generic &quot;drivers&quot;
@@ -10833,7 +10397,7 @@ developments available for CUPS;</p></li><li><p>It made available a lot of addit
to CUPS users (because often the &quot;traditional&quot; Ghostscript way of
printing was the only one available);</p></li><li><p>It gave all the advanced CUPS options (web interface,
GUI driver configurations) to users wanting (or needing) to use
-Ghostscript filters.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953828"></a>cupsomatic, pdqomatic, lpdomatic, directomatic</h4></div></div><div></div></div><p>
+Ghostscript filters.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2918598"></a>cupsomatic, pdqomatic, lpdomatic, directomatic</h4></div></div><div></div></div><a class="indexterm" name="id2918607"></a><a class="indexterm" name="id2918615"></a><a class="indexterm" name="id2918624"></a><p>
CUPS worked through a quickly-hacked up filter script named <a href="http://www.linuxprinting.org/download.cgi?filename=cupsomatic&amp;show=0" target="_top">cupsomatic</a>.
cupsomatic ran the printfile through Ghostscript, constructing
automatically the rather complicated command line needed. It just
@@ -10867,8 +10431,8 @@ Foomatic up to versions 2.0.x required (ugly) Perl data structures
attached the Linuxprinting.org PPDs for CUPS. It had a different
&quot;*omatic&quot; script for every spooler, as well as different printer
configuration files..
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2953960"></a>7.13.1.5.The <span class="emphasis"><em>Grand Unification</em></span>
-achieved...</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2918779"></a>The <span class="emphasis"><em>Grand Unification</em></span>
+achieved...</h4></div></div><div></div></div><a class="indexterm" name="id2918791"></a><p>
This all has changed in Foomatic versions 2.9 (Beta) and released as
&quot;stable&quot; 3.0. This has now achieved the convergence of all *omatic
scripts: it is called the <a href="http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&amp;show=0" target="_top">foomatic-rip</a>.
@@ -10903,7 +10467,7 @@ sizes for many printers; and it will support printing on media drawn
from different paper trays within the same job (in both cases: even
where there is no support for this from Windows-based vendor printer
drivers).
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2954048"></a>Driver Development outside</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2918884"></a>Driver Development outside</h4></div></div><div></div></div><p>
Most driver development itself does not happen within
Linuxprinting.org. Drivers are written by independent maintainers.
Linuxprinting.org just pools all the information, and stores it in its
@@ -10916,7 +10480,7 @@ the work is currently done in three projects. These are:
</p><div class="itemizedlist"><ul type="disc"><li><p><a href="http://www-124.ibm.com/developerworks/oss/linux/projects/omni/" target="_top">Omni</a>
-- a Free Software project by IBM which tries to convert their printer
driver knowledge from good-ol' OS/2 times into a modern, modular,
-universal driver architecture for Linux/Unix (still Beta). This
+universal driver architecture for Linux/UNIX (still Beta). This
currently supports 437 models.</p></li><li><p><a href="http://hpinkjet.sf.net/" target="_top">HPIJS</a> --
a Free Software project by HP to provide the support for their own
range of models (very mature, printing in most cases is perfect and
@@ -10926,8 +10490,8 @@ effort, started by Michael Sweet (also lead developer for CUPS), now
directed by Robert Krawitz, which has achieved an amazing level of
photo print quality (many Epson users swear that its quality is
better than the vendor drivers provided by Epson for the Microsoft
-platforms). This currently supports 522 models.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2954126"></a>Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and
-commercial Unix</h4></div></div><div></div></div><p>
+platforms). This currently supports 522 models.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2918963"></a>Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and
+commercial UNIX</h4></div></div><div></div></div><p>
Linuxprinting.org today is the one-stop &quot;shop&quot; to download printer
drivers. Look for printer information and <a href="http://www.linuxprinting.org//kpfeifle/LinuxKongress2002/Tutorial/" target="_top">tutorials</a>
or solve printing problems in its popular <a href="http://www.linuxprinting.org/newsportal/" target="_top">forums</a>. But
@@ -10947,7 +10511,7 @@ of the Foomatic project.
Till Kamppeter from MandrakeSoft is doing an excellent job in his
spare time to maintain Linuxprinting.org and Foomatic. So if you use
it often, please send him a note showing your appreciation.
-</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2954199"></a>Foomatic Database generated PPDs</h4></div></div><div></div></div><p>
+</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2919038"></a>Foomatic Database generated PPDs</h4></div></div><div></div></div><p>
The Foomatic database is an amazing piece of ingenuity in itself. Not
only does it keep the printer and driver information, but it is
organized in a way that it can generate &quot;PPD&quot; files &quot;on the fly&quot; from
@@ -10972,7 +10536,7 @@ GUI tools (like KDE's marvellous <a href="http://printing.kde.org/overview/kprin
or the GNOME <a href="http://gtklp.sourceforge.net/" target="_top">&quot;gtklp&quot;</a>, &quot;xpp&quot; and the CUPS
web interface) read the PPD too and use this information to present
the available settings to the user as an intuitive menu selection.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954264"></a>foomatic-rip and Foomatic-PPD Download and Installation</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2919115"></a>foomatic-rip and Foomatic-PPD Download and Installation</h3></div></div><div></div></div><p>
Here are the steps to install a foomatic-rip driven &quot;LaserJet 4 Plus&quot;
compatible printer in CUPS (note that recent distributions of SuSE,
UnitedLinux and Mandrake may ship with a complete package of
@@ -10986,11 +10550,11 @@ link.</p></li><li><p>You'll arrive at a page listing all drivers working
with this model (for all printers, there will always be
<span class="emphasis"><em>one</em></span> recommended driver. Try this one
first).</p></li><li><p>In our case (&quot;HP LaserJet 4 Plus&quot;), we'll arrive here:
-<a href="http://www.linuxprinting.org/show_printer.cgi?recnum=HP-LaserJet_4_Plus" target="_top">http://www.linuxprinting.org/show_printer.cgi?recnum=HP-LaserJet_4_Plus</a>
+ <a href="http://www.linuxprinting.org/show_printer.cgi?recnum=HP-LaserJet_4_Plus" target="_top">http://www.linuxprinting.org/show_printer.cgi?recnum=HP-LaserJet_4_Plus</a>
</p></li><li><p>The recommended driver is &quot;ljet4&quot;.</p></li><li><p>There are several links provided here. You should
visit them all, if you are not familiar with the Linuxprinting.org
database.</p></li><li><p>There is a link to the database page for the &quot;ljet4&quot;:
-<a href="http://www.linuxprinting.org/show_driver.cgi?driver=ljet4" target="_top">http://www.linuxprinting.org/show_driver.cgi?driver=ljet4</a>
+ <a href="http://www.linuxprinting.org/show_driver.cgi?driver=ljet4" target="_top">http://www.linuxprinting.org/show_driver.cgi?driver=ljet4</a>
On the driver's page, you'll find important and detailed information
about how to use that driver within the various available
spoolers.</p></li><li><p>Another link may lead you to the homepage of the
@@ -11031,9 +10595,7 @@ the <tt class="filename">/usr/share/cups/model/</tt> path and re-start
cupsd).</p></li><li><p>Then install the printer with a suitable commandline,
e.g.:
</p><pre class="screen">
-
-lpadmin -p laserjet4plus -v parallel:/dev/lp0 -E -P path/to/my-printer.ppd
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p laserjet4plus -v parallel:/dev/lp0 -E -P path/to/my-printer.ppd</tt></b>
</pre></li><li><p>Note again this: for all the new-style &quot;Foomatic-PPDs&quot;
from Linuxprinting.org, you also need a special &quot;CUPS filter&quot; named
&quot;foomatic-rip&quot;.Get the latest version of &quot;foomatic-rip&quot; from: <a href="http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&amp;show=0" target="_top">http://www.linuxprinting.org/foomatic2.9/download.cgi?filename=foomatic-rip&amp;show=0</a>
@@ -11071,7 +10633,7 @@ the driver/model) contain support for a certain &quot;device&quot;, representing
the selected &quot;driver&quot; for your model (as shown by &quot;gs
-h&quot;)</p></li><li><p>foomatic-rip needs a new version of PPDs (PPD versions
produced for cupsomatic don't work with
-foomatic-rip).</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2954722"></a>Page Accounting with CUPS</h2></div></div><div></div></div><p>
+foomatic-rip).</p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2919616"></a>Page Accounting with CUPS</h2></div></div><div></div></div><a class="indexterm" name="id2919625"></a><p>
Often there are questions regarding &quot;print quotas&quot; wherein Samba users
(that is, Windows clients) should not be able to print beyond a
certain amount of pages or data volume per day, week or month. This
@@ -11084,18 +10646,17 @@ Of course one could &quot;hack&quot; things with one's own scripts. But then
there is CUPS. CUPS supports &quot;quotas&quot; which can be based on sizes of
jobs or on the number of pages or both, and are spanning any time
period you want.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954753"></a>Setting up Quotas</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2919667"></a>Setting up Quotas</h3></div></div><div></div></div><a class="indexterm" name="id2919676"></a><p>
This is an example command how root would set a print quota in CUPS,
assuming an existing printer named &quot;quotaprinter&quot;:
-</p><pre class="screen">
-
- lpadmin -p quotaprinter -o job-quota-period=604800 -o job-k-limit=1024 -o job-page-limit=100
-
+</p><a class="indexterm" name="id2919696"></a><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p quotaprinter -o job-quota-period=604800 \
+ -o job-k-limit=1024 -o job-page-limit=100</tt></b>
</pre><p>
This would limit every single user to print 100 pages or 1024 KB of
data (whichever comes first) within the last 604,800 seconds ( = 1
week).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954784"></a>Correct and incorrect Accounting</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2919734"></a>Correct and incorrect Accounting</h3></div></div><div></div></div><p>
For CUPS to count correctly, the printfile needs to pass the CUPS
&quot;pstops&quot; filter, otherwise it uses a &quot;dummy&quot; count of &quot;1&quot;. Some
printfiles don't pass it (eg: image files) but then those are mostly 1
@@ -11109,8 +10670,8 @@ driver there) to have the chance to get accounting done. If the
printer is a non-PostScript model, you need to let CUPS do the job to
convert the file to a print-ready format for the target printer. This
will be working for currently about 1,000 different printer models,
-see <a href="http://www.linuxprinting.org/printer_list.cgi" target="_top">http://www.linuxprinting.org/printer_list.cgi</a>).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954825"></a>Adobe and CUPS PostScript Drivers for Windows Clients</h3></div></div><div></div></div><p>
+see <a href="http://www.linuxprinting.org/printer_list.cgi" target="_top">the driver list at linuxprinting.org/</a>.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2919778"></a>Adobe and CUPS PostScript Drivers for Windows Clients</h3></div></div><div></div></div><p>
Before CUPS-1.1.16 your only option was to use the Adobe PostScript
Driver on the Windows clients. The output of this driver was not
always passed through the &quot;pstops&quot; filter on the CUPS/Samba side, and
@@ -11123,14 +10684,14 @@ From CUPS-1.1.16 onward you can use the &quot;CUPS PostScript Driver for
Windows NT/2K/XP clients&quot; (which is tagged in the download area of
http://www.cups.org/ as the &quot;cups-samba-1.1.16.tar.gz&quot; package). It does
<span class="emphasis"><em>not</em></span> work for Win9x/ME clients. But it guarantees:
-</p><div class="itemizedlist"><ul type="disc"><li><p>to not write an PJL-header</p></li><li><p>to still read and support all PJL-options named in the
+</p><div class="itemizedlist"><a class="indexterm" name="id2919825"></a><ul type="disc"><li><p>to not write an PJL-header</p></li><li><p>to still read and support all PJL-options named in the
driver PPD with its own means</p></li><li><p> that the file will pass through the &quot;pstops&quot; filter
on the CUPS/Samba server</p></li><li><p>to page-count correctly the
printfile</p></li></ul></div><p>
You can read more about the setup of this combination in the manpage
for &quot;cupsaddsmb&quot; (which is only present with CUPS installed, and only
current from CUPS 1.1.16).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954897"></a>The page_log File Syntax</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2919874"></a>The page_log File Syntax</h3></div></div><div></div></div><a class="indexterm" name="id2919883"></a><p>
These are the items CUPS logs in the &quot;page_log&quot; for every
single <span class="emphasis"><em>page</em></span> of a job:
</p><div class="itemizedlist"><ul type="disc"><li><p>Printer name</p></li><li><p>User name</p></li><li><p>Job ID</p></li><li><p>Time of printing</p></li><li><p>the page number</p></li><li><p>the number of copies</p></li><li><p>a billing information string
@@ -11139,20 +10700,18 @@ single <span class="emphasis"><em>page</em></span> of a job:
Here is an extract of my CUPS server's page_log file to illustrate the
format and included items:
</p><pre class="screen">
-
- infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 1 3 #marketing 10.160.50.13
- infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 2 3 #marketing 10.160.50.13
- infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 3 3 #marketing 10.160.50.13
- infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 4 3 #marketing 10.160.50.13
- DigiMaster9110 boss 402 [22/Apr/2003:10:33:22 +0100] 1 440 finance-dep 10.160.51.33
-
+infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 1 3 #marketing 10.160.50.13
+infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 2 3 #marketing 10.160.50.13
+infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 3 3 #marketing 10.160.50.13
+infotec_IS2027 kurt 401 [22/Apr/2003:10:28:43 +0100] 4 3 #marketing 10.160.50.13
+DigiMaster9110 boss 402 [22/Apr/2003:10:33:22 +0100] 1 440 finance-dep 10.160.51.33
</pre><p>
This was job ID &quot;401&quot;, printed on &quot;infotec_IS2027&quot; by user &quot;kurt&quot;, a
64-page job printed in 3 copies and billed to &quot;#marketing&quot;, sent
from IP address 10.160.50.13. The next job had ID &quot;402&quot;, was sent by
user &quot;boss&quot; from IP address 10.160.51.33,printed from one page 440
copies and is set to be billed to &quot;finance-dep&quot;.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954998"></a>Possible Shortcomings</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2919991"></a>Possible Shortcomings</h3></div></div><div></div></div><p>
What flaws or shortcomings are there with this quota system?
</p><div class="itemizedlist"><ul type="disc"><li><p>the ones named above (wrongly logged job in case of
printer hardware failure, etc.)</p></li><li><p>in reality, CUPS counts the job pages that are being
@@ -11161,12 +10720,12 @@ processed in <span class="emphasis"><em>software</em></span> (that is, going thr
printing device. Thus if there is a jam while printing the 5th sheet out
of 1000 and the job is aborted by the printer, the &quot;page count&quot; will
still show the figure of 1000 for that job</p></li><li><p>all quotas are the same for all users (no flexibility
-to give the boss a higher quota than the clerk) no support for
+to give the boss a higher quota than the clerk), no support for
groups</p></li><li><p>no means to read out the current balance or the
&quot;used-up&quot; number of current quota</p></li><li><p>a user having used up 99 sheets of 100 quota will
still be able to send and print a 1,000 sheet job</p></li><li><p>a user being denied a job because of a filled-up quota
doesn't get a meaningful error message from CUPS other than
-&quot;client-error-not-possible&quot;.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955070"></a>Future Developments</h3></div></div><div></div></div><p>
+&quot;client-error-not-possible&quot;.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920067"></a>Future Developments</h3></div></div><div></div></div><p>
This is the best system currently available, and there are huge
improvements under development for CUPS 1.2:
</p><div class="itemizedlist"><ul type="disc"><li><p>page counting will go into the &quot;backends&quot; (these talk
@@ -11174,9 +10733,9 @@ directly to the printer and will increase the count in sync with the
actual printing process: thus a jam at the 5th sheet will lead to a
stop in the counting)</p></li><li><p>quotas will be handled more flexibly</p></li><li><p>probably there will be support for users to inquire
their &quot;accounts&quot; in advance</p></li><li><p>probably there will be support for some other tools
-around this topic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955118"></a>Other Accounting Tools</h3></div></div><div></div></div><p>
+around this topic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920123"></a>Other Accounting Tools</h3></div></div><div></div></div><p>
PrintAnalyzer, pyKota, printbill, LogReport.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955133"></a>Additional Material</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920136"></a>Additional Material</h2></div></div><div></div></div><p>
A printer queue with <span class="emphasis"><em>no</em></span> PPD associated to it is a
&quot;raw&quot; printer and all files will go directly there as received by the
spooler. The exceptions are file types &quot;application/octet-stream&quot;
@@ -11197,10 +10756,8 @@ where &quot;normally&quot; the native CUPS &quot;pstoraster&quot; filter would k
in. cupsomatic by-passes pstoraster, &quot;kidnaps&quot; the printfile from CUPS
away and re-directs it to go through Ghostscript. CUPS accepts this,
because the associated CUPS-O-Matic-/Foomatic-PPD specifies:
-</p><pre class="screen">
-
- *cupsFilter: &quot;application/vnd.cups-postscript 0 cupsomatic&quot;
-
+</p><pre class="programlisting">
+ *cupsFilter: &quot;application/vnd.cups-postscript 0 cupsomatic&quot;
</pre><p>
This line persuades CUPS to hand the file to cupsomatic, once it has
successfully converted it to the MIME type
@@ -11212,30 +10769,24 @@ Jobs arriving from Windows which are auto-typed
CUPS is widely configurable and flexible, even regarding its filtering
mechanism. Another workaround in some situations would be to have in
<tt class="filename">/etc/cups/mime.types</tt> entries as follows:
-</p><pre class="screen">
-
- application/postscript application/vnd.cups-raw 0 -
- application/vnd.cups-postscript application/vnd.cups-raw 0 -
-
+</p><pre class="programlisting">
+ application/postscript application/vnd.cups-raw 0 -
+ application/vnd.cups-postscript application/vnd.cups-raw 0 -
</pre><p>
This would prevent all Postscript files from being filtered (rather,
they will through the virtual <span class="emphasis"><em>nullfilter</em></span>
denoted with &quot;-&quot;). This could only be useful for PS printers. If you
want to print PS code on non-PS printers (provided they support ASCII
text printing) an entry as follows could be useful:
-</p><pre class="screen">
-
- */* application/vnd.cups-raw 0 -
-
+</p><pre class="programlisting">
+ */* application/vnd.cups-raw 0 -
</pre><p>
and would effectively send <span class="emphasis"><em>all</em></span> files to the
backend without further processing.
</p><p>
Lastly, you could have the following entry:
-</p><pre class="screen">
-
- application/vnd.cups-postscript application/vnd.cups-raw 0 my_PJL_stripping_filter
-
+</p><pre class="programlisting">
+application/vnd.cups-postscript application/vnd.cups-raw 0 my_PJL_stripping_filter
</pre><p>
You will need to write a <span class="emphasis"><em>my_PJL_stripping_filter</em></span>
(could be a shellscript) that parses the PostScript and removes the
@@ -11254,16 +10805,15 @@ the jobs of hundreds of users on some big machine, where no user is
allowed to have direct access (such as when the operators often need
to load the proper paper type before running the 10,000 page job
requested by marketing for the mailing, etc.).
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955326"></a>Auto-Deletion or Preservation of CUPS Spool Files</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920387"></a>Auto-Deletion or Preservation of CUPS Spool Files</h2></div></div><div></div></div><p>
Samba print files pass through two &quot;spool&quot; directories. One is the
-incoming directory managed by Samba, (set in the <span class="emphasis"><em>path =
-/var/spool/samba</em></span> directive in the
-<span class="emphasis"><em>[printers]</em></span> section of
+incoming directory managed by Samba, (set in the <a class="indexterm" name="id2920404"></a><i class="parameter"><tt>path</tt></i> = /var/spool/samba directive in the
+<i class="parameter"><tt>[printers]</tt></i> section of
<tt class="filename">smb.conf</tt>). The other is the spool directory of
your UNIX print subsystem. For CUPS it is normally
<tt class="filename">/var/spool/cups/</tt>, as set by the cupsd.conf
directive <tt class="filename">RequestRoot /var/spool/cups</tt>.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955372"></a>CUPS Configuration Settings explained</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920450"></a>CUPS Configuration Settings explained</h3></div></div><div></div></div><p>
Some important parameter settings in the CUPS configuration file
<tt class="filename">cupsd.conf</tt> are:
</p><div class="variablelist"><dl><dt><span class="term">PreserveJobHistory Yes</span></dt><dd><p>
@@ -11287,34 +10837,32 @@ maximum to 0 disables this functionality. The default setting is
</p></dd></dl></div><p>
(There are also additional settings for &quot;MaxJobsPerUser&quot; and
&quot;MaxJobsPerPrinter&quot;...)
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955454"></a>Pre-conditions</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920543"></a>Pre-conditions</h3></div></div><div></div></div><p>
For everything to work as announced, you need to have three
things:
</p><div class="itemizedlist"><ul type="disc"><li><p>a Samba-smbd which is compiled against &quot;libcups&quot; (Check
on Linux by running &quot;ldd `which smbd`&quot;)</p></li><li><p>a Samba-<tt class="filename">smb.conf</tt> setting of
-&quot;printing = cups&quot;</p></li><li><p>another Samba-<tt class="filename">smb.conf</tt> setting of
-&quot;printcap = cups&quot;</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ <a class="indexterm" name="id2920580"></a><i class="parameter"><tt>printing</tt></i> = cups</p></li><li><p>another Samba-<tt class="filename">smb.conf</tt> setting of
+ <a class="indexterm" name="id2920606"></a><i class="parameter"><tt>printcap</tt></i> = cups</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
In this case all other manually set printing-related commands (like
-&quot;print command&quot;, &quot;lpq command&quot;, &quot;lprm command&quot;, &quot;lppause command&quot; or
-&quot;lpresume command&quot;) are ignored and they should normally have no
+<a class="indexterm" name="id2920628"></a><i class="parameter"><tt>print command</tt></i>,
+<a class="indexterm" name="id2920642"></a><i class="parameter"><tt>lpq command</tt></i>,
+<a class="indexterm" name="id2920656"></a><i class="parameter"><tt>lprm command</tt></i>,
+<a class="indexterm" name="id2920670"></a><i class="parameter"><tt>lppause command</tt></i> or
+<a class="indexterm" name="id2920683"></a><i class="parameter"><tt>lpresume command</tt></i>) are ignored and they should normally have no
influence what-so-ever on your printing.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955515"></a>Manual Configuration</h3></div></div><div></div></div><p>
-If you want to do things manually, replace the &quot;printing =
-cups&quot; by &quot;printing = bsd&quot;. Then your manually set commands may work
-(haven't tested this), and a &quot;print command = lp -d %P %s; rm %s&quot;
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920702"></a>Manual Configuration</h3></div></div><div></div></div><p>
+If you want to do things manually, replace the <a class="indexterm" name="id2920713"></a><i class="parameter"><tt>printing</tt></i> = cups
+by <a class="indexterm" name="id2920726"></a><i class="parameter"><tt>printing</tt></i> = bsd. Then your manually set commands may work
+(haven't tested this), and a <a class="indexterm" name="id2920742"></a><i class="parameter"><tt>print command</tt></i> = lp -d %P %s; rm %s&quot;
may do what you need.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955533"></a>When <span class="emphasis"><em>not</em></span> to use Samba to print to
-CUPS</h2></div></div><div></div></div><p>
-[TO BE DONE]
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955550"></a>In Case of Trouble.....</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920760"></a>In Case of Trouble.....</h2></div></div><div></div></div><p>
If you have more problems, post the output of these commands
to the CUPS or Samba mailing lists (choose the one which seems more
relevant to your problem):
</p><pre class="screen">
-
- grep -v ^# /etc/cups/cupsd.conf | grep -v ^$
- grep -v ^# /etc/samba/smb.conf | grep -v ^$ | grep -v &quot;^;&quot;
-
+<tt class="prompt">$ </tt><b class="userinput"><tt>grep -v ^# /etc/cups/cupsd.conf | grep -v ^$</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>grep -v ^# /etc/samba/smb.conf | grep -v ^$ | grep -v &quot;^;&quot;</tt></b>
</pre><p>
(adapt paths as needed). These commands leave out the empty
lines and lines with comments, providing the &quot;naked settings&quot; in a
@@ -11322,18 +10870,12 @@ compact way. Don't forget to name the CUPS and Samba versions you
are using! This saves bandwidth and makes for easier readability
for experts (and you are expecting experts to read them, right?
;-)
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955585"></a>Where to find Documentation</h3></div></div><div></div></div><p>
-[TO BE DONE]
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955598"></a>How to ask for Help</h3></div></div><div></div></div><p>
-[TO BE DONE]
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955611"></a>Where to find Help</h3></div></div><div></div></div><p>
-[TO BE DONE]
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2955625"></a>Appendix</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955632"></a>Printing <span class="emphasis"><em>from</em></span> CUPS to Windows attached
-Printers</h3></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920832"></a>Printing <span class="emphasis"><em>from</em></span> CUPS to Windows attached
+Printers</h2></div></div><div></div></div><p>
From time to time the question arises, how you can print
<span class="emphasis"><em>to</em></span> a Windows attached printer
<span class="emphasis"><em>from</em></span> Samba. Normally the local connection
-&quot;Windows host &lt;--&gt; printer&quot; would be done by USB or parallel
+from Windows host to printer would be done by USB or parallel
cable, but this doesn't matter to Samba. From here only an SMB
connection needs to be opened to the Windows host. Of course, this
printer must be &quot;shared&quot; first. As you have learned by now, CUPS uses
@@ -11345,33 +10887,29 @@ is in the CUPS backend directory. This resides usually in
file there. It should be a symlink to <tt class="filename">smbspool</tt>
which file must exist and be executable:
</p><pre class="screen">
-
- # ls -l /usr/lib/cups/backend/
- total 253
- drwxr-xr-x 3 root root 720 Apr 30 19:04 .
- drwxr-xr-x 6 root root 125 Dec 19 17:13 ..
- -rwxr-xr-x 1 root root 10692 Feb 16 21:29 canon
- -rwxr-xr-x 1 root root 10692 Feb 16 21:29 epson
- lrwxrwxrwx 1 root root 3 Apr 17 22:50 http -&gt; ipp
- -rwxr-xr-x 1 root root 17316 Apr 17 22:50 ipp
- -rwxr-xr-x 1 root root 15420 Apr 20 17:01 lpd
- -rwxr-xr-x 1 root root 8656 Apr 20 17:01 parallel
- -rwxr-xr-x 1 root root 2162 Mar 31 23:15 pdfdistiller
- lrwxrwxrwx 1 root root 25 Apr 30 19:04 ptal -&gt; /usr/local/sbin/ptal-cups
- -rwxr-xr-x 1 root root 6284 Apr 20 17:01 scsi
- lrwxrwxrwx 1 root root 17 Apr 2 03:11 smb -&gt; /usr/bin/smbspool
- -rwxr-xr-x 1 root root 7912 Apr 20 17:01 socket
- -rwxr-xr-x 1 root root 9012 Apr 20 17:01 usb
-
-# ls -l `which smbspool`
- -rwxr-xr-x 1 root root 563245 Dec 28 14:49 /usr/bin/smbspool
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l /usr/lib/cups/backend/</tt></b>
+total 253
+drwxr-xr-x 3 root root 720 Apr 30 19:04 .
+drwxr-xr-x 6 root root 125 Dec 19 17:13 ..
+-rwxr-xr-x 1 root root 10692 Feb 16 21:29 canon
+-rwxr-xr-x 1 root root 10692 Feb 16 21:29 epson
+lrwxrwxrwx 1 root root 3 Apr 17 22:50 http -&gt; ipp
+-rwxr-xr-x 1 root root 17316 Apr 17 22:50 ipp
+-rwxr-xr-x 1 root root 15420 Apr 20 17:01 lpd
+-rwxr-xr-x 1 root root 8656 Apr 20 17:01 parallel
+-rwxr-xr-x 1 root root 2162 Mar 31 23:15 pdfdistiller
+lrwxrwxrwx 1 root root 25 Apr 30 19:04 ptal -&gt; /usr/sbin/ptal-cups
+-rwxr-xr-x 1 root root 6284 Apr 20 17:01 scsi
+lrwxrwxrwx 1 root root 17 Apr 2 03:11 smb -&gt; /usr/bin/smbspool
+-rwxr-xr-x 1 root root 7912 Apr 20 17:01 socket
+-rwxr-xr-x 1 root root 9012 Apr 20 17:01 usb
+
+<tt class="prompt">root# </tt><b class="userinput"><tt>ls -l `which smbspool`</tt></b>
+-rwxr-xr-x 1 root root 563245 Dec 28 14:49 /usr/bin/smbspool
</pre><p>
If this symlink doesn't exist, create it:
</p><pre class="screen">
-
-# ln -s `which smbspool` /usr/lib/cups/backend/smb
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>ln -s `which smbspool` /usr/lib/cups/backend/smb</tt></b>
</pre><p>
smbspool has been written by Mike Sweet from the CUPS folks. It is
included and ships with Samba. It may also be used with print
@@ -11388,9 +10926,8 @@ the Windows host, etc.
</p><p>
To install a printer with the smb backend on CUPS, use this command:
</p><pre class="screen">
-
-# lpadmin -p winprinter -v smb://WINDOWSNETBIOSNAME/printersharename -P /path/to/PPD
-
+<tt class="prompt">root# </tt><b class="userinput"><tt>lpadmin -p winprinter -v smb://WINDOWSNETBIOSNAME/printersharename \
+ -P /path/to/PPD</tt></b>
</pre><p>
The <span class="emphasis"><em>PPD</em></span> must be able to direct CUPS to generate
the print data for the target model. For PostScript printers just use
@@ -11399,13 +10936,7 @@ what can you do if the printer is only accessible with a password? Or
if the printer's host is part of another workgroup? This is provided
for: you can include the required parameters as part of the
<tt class="filename">smb://</tt> device-URI. Like this:
-</p><pre class="screen">
-
- smb://WORKGROUP/WINDOWSNETBIOSNAME/printersharename
- smb://username:password@WORKGROUP/WINDOWSNETBIOSNAME/printersharename
- smb://username:password@WINDOWSNETBIOSNAME/printersharename
-
-</pre><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>smb://WORKGROUP/WINDOWSNETBIOSNAME/printersharename </p></li><li><p>smb://username:password@WORKGROUP/WINDOWSNETBIOSNAME/printersharename</p></li><li><p>smb://username:password@WINDOWSNETBIOSNAME/printersharename</p></li></ul></div><p>
Note that the device-URI will be visible in the process list of the
Samba server (e.g. when someone uses the <b class="command">ps -aux</b>
command on Linux), even if the username and passwords are sanitized
@@ -11416,337 +10947,41 @@ doesn't require a password! Printing will only work if you have a
working netbios name resolution up and running. Note that this is a
feature of CUPS and you don't necessarily need to have smbd running
(but who wants that? :-).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955826"></a>More CUPS filtering Chains</h3></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2921130"></a>More CUPS filtering Chains</h2></div></div><div></div></div><p>
The following diagrams reveal how CUPS handles print jobs.
-</p><pre class="screen">
-#########################################################################
-#
-# CUPS in and of itself has this (general) filter chain (CAPITAL
-# letters are FILE-FORMATS or MIME types, other are filters (this is
-# true for pre-1.1.15 of pre-4.3 versions of CUPS and ESP PrintPro):
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT
-# |
-# V
-# pstoraster # as shipped with CUPS, independent from any Ghostscipt
-# | # installation on the system
-# | (= &quot;postscipt interpreter&quot;)
-# V
-# APPLICATION/VND.CUPS-RASTER
-# |
-# V
-# rastertosomething (e.g. Gimp-Print filters may be plugged in here)
-# | (= &quot;raster driver&quot;)
-# V
-# SOMETHING-DEVICE-SPECIFIC
-# |
-# V
-# backend
-#
-#
-# ESP PrintPro has some enhanced &quot;rastertosomething&quot; filters as compared to
-# CUPS, and also a somewhat improved &quot;pstoraster&quot; filter.
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-#########################################################################
-</pre><pre class="screen">
-#########################################################################
-#
-# This is how &quot;cupsomatic&quot; comes into play:
-# =========================================
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT ----------------+
-# | V
-# V cupsomatic
-# pstoraster (constructs complicated
-# | (= &quot;postscipt interpreter&quot;) Ghostscript commandline
-# | to let the file be
-# V processed by a
-# APPLICATION/VND.CUPS-RASTER &quot;-sDEVICE=s.th.&quot;
-# | call...)
-# V |
-# rastertosomething V
-# | (= &quot;raster driver&quot;) +-------------------------+
-# | | Ghostscript at work.... |
-# V | |
-# SOMETHING-DEVICE-SPECIFIC *-------------------------+
-# | |
-# V |
-# backend &lt;------------------------------------+
-# |
-# V
-# THE PRINTER
-#
-#
-# Note, that cupsomatic &quot;kidnaps&quot; the printfile after the
-# &quot;APPLICATION/VND.CUPS-POSTSCRPT&quot; stage and deviates it gh
-# the CUPS-external, systemwide Ghostscript installation, bypassing the
-# &quot;pstoraster&quot; filter (therefore also bypassing the CUPS-raster-drivers
-# &quot;rastertosomething&quot;, and hands the rasterized file directly to the CUPS
-# backend...
-#
-# cupsomatic is not made by the CUPS developers. It is an independent
-# contribution to printing development, made by people from
-# Linuxprinting.org. (see also http://www.cups.org/cups-help.html)
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-#########################################################################
-</pre><pre class="screen">
-#########################################################################
-#
-# And this is how it works for ESP PrintPro from 4.3:
-# ===================================================
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT
-# |
-# V
-# gsrip
-# | (= &quot;postscipt interpreter&quot;)
-# V
-# APPLICATION/VND.CUPS-RASTER
-# |
-# V
-# rastertosomething (e.g. Gimp-Print filters may be plugged in here)
-# | (= &quot;raster driver&quot;)
-# V
-# SOMETHING-DEVICE-SPECIFIC
-# |
-# V
-# backend
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-#########################################################################
-</pre><pre class="screen">
-#########################################################################
-#
-# This is how &quot;cupsomatic&quot; would come into play with ESP PrintPro:
-# ================================================================
-#
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT ----------------+
-# | V
-# V cupsomatic
-# gsrip (constructs complicated
-# | (= &quot;postscipt interpreter&quot;) Ghostscript commandline
-# | to let the file be
-# V processed by a
-# APPLICATION/VND.CUPS-RASTER &quot;-sDEVICE=s.th.&quot;
-# | call...)
-# V |
-# rastertosomething V
-# | (= &quot;raster driver&quot;) +-------------------------+
-# | | Ghostscript at work.... |
-# V | |
-# SOMETHING-DEVICE-SPECIFIC *-------------------------+
-# | |
-# V |
-# backend &lt;------------------------------------+
-# |
-# V
-# THE PRINTER
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-#########################################################################
-</pre><pre class="screen">
-#########################################################################
-#
-# And this is how it works for CUPS from 1.1.15:
-# ==============================================
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT-----+
-# +------------------v------------------------------+
-# | Ghostscript |
-# | at work... |
-# | (with |
-# | &quot;-sDEVICE=cups&quot;) |
-# | |
-# | (= &quot;postscipt interpreter&quot;) |
-# | |
-# +------------------v------------------------------+
-# |
-# APPLICATION/VND.CUPS-RASTER &gt;-------+
-# |
-# V
-# rastertosomething
-# | (= &quot;raster driver&quot;)
-# V
-# SOMETHING-DEVICE-SPECIFIC
-# |
-# V
-# backend
-#
-#
-# NOTE: since version 1.1.15 CUPS &quot;outsourced&quot; the pstoraster process to
-# Ghostscript. GNU Ghostscript needs to be patched to handle the
-# CUPS requirement; ESP Ghostscript has this builtin. In any case,
-# &quot;gs -h&quot; needs to show up a &quot;cups&quot; device. pstoraster is now a
-# calling an appropriate &quot;gs -sDEVICE=cups...&quot; commandline to do
-# the job. It will output &quot;application/vnd.cup-raster&quot;, which will
-# be finally processed by a CUPS raster driver &quot;rastertosomething&quot;
-# Note the difference to &quot;cupsomatic&quot;, which will <span class="emphasis"><em>not</em></span> output
-# CUPS-raster, but a final version of the printfile, ready to be
-# sent to the printer. cupsomatic also doesn't use the &quot;cups&quot;
-# devicemode in Ghostscript, but one of the classical devicemodes....
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-#########################################################################
-</pre><pre class="screen">
-#########################################################################
-#
-# And this is how it works for CUPS from 1.1.15, with cupsomatic included:
-# ========================================================================
-#
-# SOMETHNG-FILEFORMAT
-# |
-# V
-# somethingtops
-# |
-# V
-# APPLICATION/POSTSCRIPT
-# |
-# V
-# pstops
-# |
-# V
-# APPLICATION/VND.CUPS-POSTSCRIPT-----+
-# +------------------v------------------------------+
-# | Ghostscript . Ghostscript at work.... |
-# | at work... . (with &quot;-sDEVICE= |
-# | (with . s.th.&quot; |
-# | &quot;-sDEVICE=cups&quot;) . |
-# | . |
-# | (CUPS standard) . (cupsomatic) |
-# | . |
-# | (= &quot;postscript interpreter&quot;) |
-# | . |
-# +------------------v--------------v---------------+
-# | |
-# APPLICATION/VND.CUPS-RASTER &gt;-------+ |
-# | |
-# V |
-# rastertosomething |
-# | (= &quot;raster driver&quot;) |
-# V |
-# SOMETHING-DEVICE-SPECIFIC &gt;------------------------+
-# |
-# V
-# backend
-#
-#
-# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
-# CUPS and ESP PrintPro plug-in where rastertosomething is noted.
-#
-##########################################################################
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2956080"></a>Trouble Shooting Guidelines to fix typical Samba printing
-Problems</h3></div></div><div></div></div><p>
-This is a short description of how to debug printing problems
-with Samba. This describes how to debug problems with printing from
-a SMB client to a Samba server, not the other way around.
-</p><div class="variablelist"><dl><dt><span class="term">Win9x client can't install driver</span></dt><dd><p>For Win9x clients require the printer names to be 8
+</p><div class="figure"><a name="cups1"></a><p class="title"><b>Figure19.17.Filtering chain 1</b></p><div class="mediaobject"><img src="projdoc/imagefiles/cups1.png" width="270" alt="Filtering chain 1"></div></div><div class="figure"><a name="cups2"></a><p class="title"><b>Figure19.18.Filtering chain with cupsomatic</b></p><div class="mediaobject"><img src="projdoc/imagefiles/cups2.png" width="270" alt="Filtering chain with cupsomatic"></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to
+CUPS and ESP PrintPro plug-in where rastertosomething is noted.
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2921233"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921241"></a>Win9x client can't install driver</h3></div></div><div></div></div><p>For Win9x clients require the printer names to be 8
chars (or &quot;8 plus 3 chars suffix&quot;) max; otherwise the driver files
won't get transferred when you want to download them from
-Samba.</p></dd><dt><span class="term">testparm</span></dt><dd><p>Run <b class="command">testparm</b>: It will tell you if
-<tt class="filename">smb.conf</tt> parameters are in the wrong
-section. Many people have had the &quot;printer admin&quot; parameter in the
-<i class="parameter"><tt>[printers]</tt></i> section and experienced
-problems. &quot;testparm&quot; will tell you if it sees
-this.</p></dd><dt><span class="term">&quot;cupsaddsmb&quot; keeps asking for a root password in a
-neverending loop</span></dt><dd><p>Have you <i class="parameter"><tt>security = user</tt></i>? Have
+Samba.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921263"></a>&quot;cupsaddsmb&quot; keeps asking for root password in
+ neverending loop</h3></div></div><div></div></div><p>Have you <a class="indexterm" name="id2921276"></a><i class="parameter"><tt>security</tt></i> = user? Have
you used <b class="command">smbpasswd</b> to give root a Samba account?
You can do 2 things: open another terminal and execute
<b class="command">smbpasswd -a root</b> to create the account, and
continue with entering the password into the first terminal. Or break
out of the loop by hitting ENTER twice (without trying to type a
-password).</p></dd><dt><span class="term">&quot;cupsaddsmb&quot; gives &quot;No PPD file for printer...&quot;
-message (but I swear there is one!)</span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Have you enabled printer sharing on CUPS? This means:
+password).</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921311"></a>&quot;cupsaddsmb&quot; gives &quot;No PPD file for printer...&quot;
+ message while PPD file is present</h3></div></div><div></div></div><p>Have you enabled printer sharing on CUPS? This means:
do you have a <i class="parameter"><tt>&lt;Location
/printers&gt;....&lt;/Location&gt;</tt></i> section in CUPS
server's <tt class="filename">cupsd.conf</tt> which doesn't deny access to
the host you run &quot;cupsaddsmb&quot; from? It <span class="emphasis"><em>could</em></span> be
an issue if you use cupsaddsmb remotely, or if you use it with a
-<i class="parameter"><tt>-h</tt></i> parameter: <b class="command">cupsaddsmb -H
-sambaserver -h cupsserver -v printername</b>.
-</p></li><li><p>Is your
+<tt class="option">-h</tt> parameter: <b class="userinput"><tt>cupsaddsmb -H
+ sambaserver -h cupsserver -v printername</tt></b>.
+</p><p>Is your
&quot;TempDir&quot; directive in
<span class="emphasis"><em>cupsd.conf</em></span>
set to a valid value and is it writeable?
-</p></li></ul></div></dd><dt><span class="term">I can't connect client to Samba printer.</span></dt><dd><p>Use <b class="command">smbstatus</b> to check which user
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921368"></a>Client can't connect to Samba printer</h3></div></div><div></div></div><p>Use <b class="command">smbstatus</b> to check which user
you are from Samba's point of view. Do you have the privileges to
write into the <i class="parameter"><tt>[print$]</tt></i>
-share?</p></dd><dt><span class="term">I can't reconnect to Samba under a new account
-from Win2K/XP</span></dt><dd><p>Once you are connected as the &quot;wrong&quot; user (for
-example as &quot;nobody&quot;, which often occurs if you have <i class="parameter"><tt>map to
-guest = bad user</tt></i>), Windows Explorer will not accept an
+share?</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921397"></a>Can't reconnect to Samba under new account
+ from Win2K/XP</h3></div></div><div></div></div><p>Once you are connected as the &quot;wrong&quot; user (for
+example as &quot;nobody&quot;, which often occurs if you have
+<a class="indexterm" name="id2921410"></a><i class="parameter"><tt>map to guest</tt></i> = bad user), Windows Explorer will not accept an
attempt to connect again as a different user. There won't be any byte
transfered on the wire to Samba, but still you'll see a stupid error
message which makes you think that Samba has denied access. Use
@@ -11759,107 +10994,105 @@ indicating a renewed connection attempt? Shut all Explorer Windows.
This makes Windows forget what it has cached in its memory as
established connections. Then re-connect as the right user. Best
method is to use a DOS terminal window and <span class="emphasis"><em>first</em></span>
-do <b class="command">net use z: \\SAMBAHOST\print$ /user:root</b>. Check
+do <b class="userinput"><tt>net use z: \\GANDALF\print$ /user:root</tt></b>. Check
with <b class="command">smbstatus</b> that you are connected under a
different account. Now open the &quot;Printers&quot; folder (on the Samba server
in the <span class="emphasis"><em>Network Neighbourhood</em></span>), right-click the
printer in question and select
-<span class="emphasis"><em>Connect...</em></span></p></dd><dt><span class="term">Avoid being connected to the Samba server as the
-&quot;wrong&quot; user</span></dt><dd><p>You see per <b class="command">smbstatus</b> that you are
+<span class="emphasis"><em>Connect...</em></span></p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921624"></a>Avoid being connected to the Samba server as the
+ &quot;wrong&quot; user</h3></div></div><div></div></div><p>You see per <b class="command">smbstatus</b> that you are
connected as user &quot;nobody&quot;; while you wanted to be &quot;root&quot; or
-&quot;printeradmin&quot;? This is probably due to <i class="parameter"><tt>map to guest = bad
-user</tt></i>, which silently connects you under the guest account,
+&quot;printeradmin&quot;? This is probably due to
+<a class="indexterm" name="id2921646"></a><i class="parameter"><tt>map to guest</tt></i> = bad user, which silently connects you under the guest account,
when you gave (maybe by accident) an incorrect username. Remove
-<i class="parameter"><tt>map to guest</tt></i>, if you want to prevent
-this.</p></dd><dt><span class="term">Upgrading to CUPS drivers from Adobe drivers on
-NT/2K/XP clients gives problems</span></dt><dd><p>First delete all &quot;old&quot; Adobe-using printers. Then
+<a class="indexterm" name="id2921662"></a><i class="parameter"><tt>map to guest</tt></i>, if you want to prevent
+this.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921678"></a>Upgrading to CUPS drivers from Adobe drivers on
+ NT/2K/XP clients gives problems</h3></div></div><div></div></div><p>First delete all &quot;old&quot; Adobe-using printers. Then
delete all &quot;old&quot; Adobe drivers. (On Win2K/XP, right-click in
background of &quot;Printers&quot; folder, select &quot;Server Properties...&quot;, select
-tab &quot;Drivers&quot; and delete here).</p></dd><dt><span class="term">I can't use &quot;cupsaddsmb&quot;on a Samba server which is
-a PDC</span></dt><dd><p>Do you use the &quot;naked&quot; root user name? Try to do it
-this way: <span class="emphasis"><em>cupsaddsmb -U DOMAINNAME\\root -v
-printername</em></span> (note the two backslashes: the first one is
-required to &quot;escape&quot; the second one).</p></dd><dt><span class="term">I deleted a printer on Win2K; but I still see
-its driver</span></dt><dd><p>Deleting a printer on the client won't delete the
+tab &quot;Drivers&quot; and delete here).</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921695"></a>Can't use &quot;cupsaddsmb&quot; on Samba server which is
+ a PDC</h3></div></div><div></div></div><p>Do you use the &quot;naked&quot; root user name? Try to do it
+this way: <b class="userinput"><tt>cupsaddsmb -U <i class="replaceable"><tt>DOMAINNAME</tt></i>\\root -v
+<i class="replaceable"><tt>printername</tt></i></tt></b>&gt; (note the two backslashes: the first one is
+required to &quot;escape&quot; the second one).</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921726"></a>Deleted Win2K printer driver is still shown</h3></div></div><div></div></div><p>Deleting a printer on the client won't delete the
driver too (to verify, right-click on the white background of the
&quot;Printers&quot; folder, select &quot;Server Properties&quot; and click on the
&quot;Drivers&quot; tab). These same old drivers will be re-used when you try to
install a printer with the same name. If you want to update to a new
driver, delete the old ones first. Deletion is only possible if no
-other printer uses the same driver.</p></dd><dt><span class="term">Win2K/XP &quot;Local Security
-Policies&quot;</span></dt><dd><p><span class="emphasis"><em>Local Security Policies</em></span> may not
+other printer uses the same driver.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921734"></a>Win2K/XP &quot;Local Security
+ Policies&quot;</h3></div></div><div></div></div><p><span class="emphasis"><em>Local Security Policies</em></span> may not
allow the installation of unsigned drivers. &quot;Local Security Policies&quot;
may not allow the installation of printer drivers at
-all.</p></dd><dt><span class="term">WinXP clients: &quot;Administrator can not install
-printers for all local users&quot;</span></dt><dd><p>Windows XP handles SMB printers on a &quot;per-user&quot; basis.
+all.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921774"></a>WinXP clients: &quot;Administrator can not install
+ printers for all local users&quot;</h3></div></div><div></div></div><p>Windows XP handles SMB printers on a &quot;per-user&quot; basis.
This means every user needs to install the printer himself. To have a
printer available for everybody, you might want to use the built-in
IPP client capabilities of WinXP. Add a printer with the print path of
<span class="emphasis"><em>http://cupsserver:631/printers/printername</em></span>.
Still looking into this one: maybe a &quot;logon script&quot; could
automatically install printers for all
-users.</p></dd><dt><span class="term">&quot;Print Change Notify&quot; functions on
-NT-clients</span></dt><dd><p>For &quot;print change notify&quot; functions on NT++ clients,
+users.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921808"></a>&quot;Print Change Notify&quot; functions on
+ NT-clients</h3></div></div><div></div></div><p>For &quot;print change notify&quot; functions on NT++ clients,
these need to run the &quot;Server&quot; service first (re-named to
<span class="emphasis"><em>File &amp; Print Sharing for MS Networks</em></span> in
-XP).</p></dd><dt><span class="term">WinXP-SP1</span></dt><dd><p>WinXP-SP1 introduced a <span class="emphasis"><em>Point and Print
+XP).</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921830"></a>WinXP-SP1</h3></div></div><div></div></div><p>WinXP-SP1 introduced a <span class="emphasis"><em>Point and Print
Restriction Policy</em></span> (this restriction doesn't apply to
&quot;Administrator&quot; or &quot;Power User&quot; groups of users). In Group Policy
-Object Editor: go to <span class="emphasis"><em>User Configuration --&gt;
-Administrative Templates --&gt; Control Panel --&gt;
+Object Editor: go to <span class="emphasis"><em>User Configuration,
+ Administrative Templates, Control Panel,
Printers</em></span>. The policy is automatically set to
<span class="emphasis"><em>Enabled</em></span> and the <span class="emphasis"><em>Users can only Point
and Print to machines in their Forest</em></span> . You probably need
to change it to <span class="emphasis"><em>Disabled</em></span> or <span class="emphasis"><em>Users can
only Point and Print to these servers</em></span> in order to make
-driver downloads from Samba possible.</p></dd><dt><span class="term">I can't set and save default print options for all
-users on Win2K/XP</span></dt><dd><p>How are you doing it? I bet the wrong way (it is not
+driver downloads from Samba possible.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921875"></a>Print options for all users can't be set on Win2K/XP</h3></div></div><div></div></div><p>How are you doing it? I bet the wrong way (it is not
very easy to find out, though). There are 3 different ways to bring
you to a dialog that <span class="emphasis"><em>seems</em></span> to set everything. All
three dialogs <span class="emphasis"><em>look</em></span> the same. Only one of them
<span class="emphasis"><em>does</em></span> what you intend. You need to be
Administrator or Print Administrator to do this for all users. Here
is how I do in on XP:
-</p><div class="orderedlist"><ol type="A"><li xmlns:ns66=""><ns66:p>The first &quot;wrong&quot; way:
+</p><div class="orderedlist"><ol type="A"><li><p>The first &quot;wrong&quot; way:
-</ns66:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span>
+</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span>
folder.</p></li><li><p>Right-click on the printer
(<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and
select in context menu <span class="emphasis"><em>Printing
Preferences...</em></span></p></li><li><p>Look at this dialog closely and remember what it looks
-like.</p></li></ol></div><ns66:p>
-</ns66:p></li><li xmlns:ns67=""><ns67:p>The second &quot;wrong&quot; way:
+like.</p></li></ol></div><p>
+</p></li><li><p>The second &quot;wrong&quot; way:
-</ns67:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span>
+</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="emphasis"><em>Printers</em></span>
folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on
cupshost</em></span>) and select in the context menu
<span class="emphasis"><em>Properties</em></span></p></li><li><p>Click on the <span class="emphasis"><em>General</em></span>
tab</p></li><li><p>Click on the button <span class="emphasis"><em>Printing
Preferences...</em></span></p></li><li><p>A new dialog opens. Keep this dialog open and go back
-to the parent dialog.</p></li></ol></div><ns67:p>
-</ns67:p></li><li xmlns:ns68=""><ns68:p>The third, the &quot;correct&quot; way: (should you do
+to the parent dialog.</p></li></ol></div><p>
+</p></li><li><p>The third, the &quot;correct&quot; way: (should you do
this from the beginning, just carry out steps 1. and 2. from second
&quot;way&quot; above)
-</ns68:p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="emphasis"><em>Advanced</em></span>
+</p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="emphasis"><em>Advanced</em></span>
tab. (Hmmm... if everything is &quot;Grayed Out&quot;, then you are not logged
in as a user with enough privileges).</p></li><li><p>Click on the <span class="emphasis"><em>Printing
Defaults...</em></span> button.</p></li><li><p>On any of the two new tabs, click on the
<span class="emphasis"><em>Advanced...</em></span>
button.</p></li><li><p>A new dialog opens. Compare this one to the other,
-identical looking one from &quot;B.5&quot; or A.3&quot;.</p></li></ol></div><ns68:p>
-</ns68:p></li></ol></div><p>
+identical looking one from &quot;B.5&quot; or A.3&quot;.</p></li></ol></div><p>
+</p></li></ol></div><p>
Do you see any difference? I don't either... However, only the last
one, which you arrived at with steps &quot;C.1.-6.&quot; will save any settings
permanently and be the defaults for new users. If you want all clients
to get the same defaults, you need to conduct these steps <span class="emphasis"><em>as
-Administrator</em></span> (<i class="parameter"><tt>printer admin</tt></i> in
+Administrator</em></span> (<a class="indexterm" name="id2922123"></a><i class="parameter"><tt>printer admin</tt></i> in
<tt class="filename">smb.conf</tt>) <span class="emphasis"><em>before</em></span> a client
downloads the driver (the clients can later set their own
<span class="emphasis"><em>per-user defaults</em></span> by following the
procedures <span class="emphasis"><em>A.</em></span> or <span class="emphasis"><em>B.</em></span>
-above).</p></dd><dt><span class="term">What are the most common blunders in driver
-settings on Windows clients?</span></dt><dd><p>Don't use <span class="emphasis"><em>Optimize for
+above).</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922164"></a>Most common blunders in driver
+ settings on Windows clients</h3></div></div><div></div></div><p>Don't use <span class="emphasis"><em>Optimize for
Speed</em></span>: use <span class="emphasis"><em>Optimize for
Portability</em></span> instead (Adobe PS Driver) Don't use
<span class="emphasis"><em>Page Independence: No</em></span>: always
@@ -11871,8 +11104,8 @@ printer</em></span> (Adobe PS Driver). For
<span class="emphasis"><em>TrueType Download Options</em></span>
choose <span class="emphasis"><em>Outline</em></span>. Use PostScript
Level 2, if you are having trouble with a non-PS printer, and if
-there is a choice.</p></dd><dt><span class="term">I can't make <b class="command">cupsaddsmb</b> work
-with newly installed printer</span></dt><dd><p>Symptom: the last command of
+there is a choice.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922210"></a><b class="command">cupsaddsmb</b> does not work
+ with newly installed printer</h3></div></div><div></div></div><p>Symptom: the last command of
<b class="command">cupsaddsmb</b> doesn't complete successfully:
<b class="command">cmd = setdriver printername printername</b> result was
NT_STATUS_UNSUCCESSFUL then possibly the printer was not yet
@@ -11881,23 +11114,23 @@ Neighbourhood</em></span>? Did it show up in <b class="command">rpcclient
hostname -c 'enumprinters'</b>? Restart smbd (or send a
<b class="command">kill -HUP</b> to all processes listed by
<b class="command">smbstatus</b> and try
-again.</p></dd><dt><span class="term">My permissions on
+again.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922272"></a>Permissions on
<tt class="filename">/var/spool/samba/</tt> get reset after each
-reboot</span></dt><dd><p>Have you by accident set the CUPS spool directory to
+reboot</h3></div></div><div></div></div><p>Have you by accident set the CUPS spool directory to
the same location? (<i class="parameter"><tt>RequestRoot
/var/spool/samba/</tt></i> in <tt class="filename">cupsd.conf</tt> or
the other way round: <tt class="filename">/var/spool/cups/</tt> is set as
-<i class="parameter"><tt>path</tt></i> in the <i class="parameter"><tt>[printers]</tt></i>
+<a class="indexterm" name="id2922310"></a><i class="parameter"><tt>path</tt></i>&gt; in the <i class="parameter"><tt>[printers]</tt></i>
section). These <span class="emphasis"><em>must</em></span> be different. Set
<i class="parameter"><tt>RequestRoot /var/spool/cups/</tt></i> in
-<tt class="filename">cupsd.conf</tt> and <i class="parameter"><tt>path =
-/var/spool/samba</tt></i> in the <i class="parameter"><tt>[printers]</tt></i>
+<tt class="filename">cupsd.conf</tt> and <a class="indexterm" name="id2922349"></a><i class="parameter"><tt>path</tt></i> =
+/var/spool/samba in the <i class="parameter"><tt>[printers]</tt></i>
section of <tt class="filename">smb.conf</tt>. Otherwise cupsd will
sanitize permissions to its spool directory with each restart, and
-printing will not work reliably.</p></dd><dt><span class="term">My printers work fine: just the printer named &quot;lp&quot;
+printing will not work reliably.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922380"></a>Printer named &quot;lp&quot;
intermittently swallows jobs and spits out completely different
-ones</span></dt><dd><p>It is a very bad idea to name any printer &quot;lp&quot;. This
-is the traditional Unix name for the default printer. CUPS may be set
+ones</h3></div></div><div></div></div><p>It is a very bad idea to name any printer &quot;lp&quot;. This
+is the traditional UNIX name for the default printer. CUPS may be set
up to do an automatic creation of &quot;Implicit Classes&quot;. This means, to
group all printers with the same name to a pool of devices, and
loadbalancing the jobs across them in a round-robin fashion. Chances
@@ -11906,107 +11139,85 @@ receive his jobs and send your own to his device unwittingly. To have
tight control over the printer names, set <i class="parameter"><tt>BrowseShortNames
No</tt></i>. It will present any printer as &quot;printername@cupshost&quot;
then, giving you a better control over what may happen in a large
-networked environment.</p></dd><dt><span class="term">How do I &quot;watch&quot; my Samba server?</span></dt><dd><p>You can use <b class="command">tail -f
-/var/log/samba/log.smbd</b> (you may need a different path) to
-see a live scrolling of all log messages. <b class="command">smbcontrol smbd
-debuglevel</b> tells you which verbosity goes into the
-logs. <b class="command">smbcontrol smbd debug 3</b> sets the verbosity to
-a quite high level (you can choose from 0 to 10 or 100). This works
-&quot;on the fly&quot;, without the need to restart the smbd daemon. Don't use
-more than 3 initially; or you'll drown in an ocean of
-messages.</p></dd><dt><span class="term">I can't use Samba from my WinXP Home box, while
-access from WinXP Prof works flawlessly</span></dt><dd><p>You have our condolences! WinXP home has been
-completely neutered by Microsoft as compared to WinXP Prof: you can
-not log into a WinNT domain. It cannot join a Win NT domain as a
-member server. While it is possible to access domain resources, users
-don't have &quot;single sign-on&quot;. They need to supply username and password
-each time they connect to a resource. Logon scripts and roaming
-profiles are not supported. It can serve file and print shares; but
-only in &quot;share-mode security&quot; level. It can not use &quot;user-mode
-security&quot; (what Windows 95/98/ME still can
-do).</p></dd><dt><span class="term">Where do I find the Adobe PostScript driver files
-I need for &quot;cupsaddsmb&quot;?</span></dt><dd><p>Use <b class="command">smbclient</b> to connect to any
+networked environment.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922428"></a>Location of Adobe PostScript driver files necessary for &quot;cupsaddsmb&quot;</h3></div></div><div></div></div><p>Use <b class="command">smbclient</b> to connect to any
Windows box with a shared PostScript printer: <b class="command">smbclient
//windowsbox/print\$ -U guest</b>. You can navigate to the
<tt class="filename">W32X86/2</tt> subdir to <b class="command">mget ADOBE*</b>
and other files or to <tt class="filename">WIN40/0</tt> to do the same. --
Another option is to download the <tt class="filename">*.exe</tt> packaged
-files from the Adobe website.</p></dd></dl></div></div><div xmlns:ns69="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957186"></a>An Overview of the CUPS Printing Processes</h3></div></div><div></div></div><ns69:p>
-</ns69:p><div class="figure"><a name="id2957196"></a><p class="title"><b>Figure19.15.CUPS Printing Overview</b></p><div class="mediaobject"><img src="projdoc/imagefiles/a_small.png" alt="CUPS Printing Overview"></div></div><ns69:p>
-</ns69:p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="VFS"></a>Chapter20.Stackable VFS modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Simo</span> <span class="surname">Sorce</span></h3><span class="contrib">original vfs_skel README</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><span class="contrib">original vfs_netatalk docs</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><span class="contrib">Update for multiple modules</span></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2958605">Features and Benefits</a></dt><dt><a href="#id2958623">Discussion</a></dt><dt><a href="#id2957300">Included modules</a></dt><dd><dl><dt><a href="#id2957307">audit</a></dt><dt><a href="#id2957345">extd_audit</a></dt><dt><a href="#id2957466">fake_perms</a></dt><dt><a href="#id2957486">recycle</a></dt><dt><a href="#id2957625">netatalk</a></dt></dl></dd><dt><a href="#id2957671">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2957693">DatabaseFS</a></dt><dt><a href="#id2957748">vscan</a></dt></dl></dd><dt><a href="#id2957777">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958605"></a>Features and Benefits</h2></div></div><div></div></div><p>
+files from the Adobe website.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2922484"></a>An Overview of the CUPS Printing Processes</h2></div></div><div></div></div><div class="figure"><a name="a_small"></a><p class="title"><b>Figure19.19.CUPS Printing Overview</b></p><div class="mediaobject"><img src="projdoc/imagefiles/a_small.png" width="270" alt="CUPS Printing Overview"></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="VFS"></a>Chapter20.Stackable VFS modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Simo</span> <span class="surname">Sorce</span></h3><span class="contrib">original vfs_skel README</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><span class="contrib">original vfs_netatalk docs</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><span class="contrib">Update for multiple modules</span></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2922653">Features and Benefits</a></dt><dt><a href="#id2922671">Discussion</a></dt><dt><a href="#id2922900">Included modules</a></dt><dd><dl><dt><a href="#id2922907">audit</a></dt><dt><a href="#id2922950">extd_audit</a></dt><dt><a href="#id2923080">fake_perms</a></dt><dt><a href="#id2923099">recycle</a></dt><dt><a href="#id2923274">netatalk</a></dt></dl></dd><dt><a href="#id2923320">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="#id2923342">DatabaseFS</a></dt><dt><a href="#id2923396">vscan</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2922653"></a>Features and Benefits</h2></div></div><div></div></div><p>
Since Samba-3, there is support for stackable VFS(Virtual File System) modules.
Samba passes each request to access the unix file system thru the loaded VFS modules.
This chapter covers all the modules that come with the samba source and references to
some external modules.
-</p></div><div xmlns:ns70="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958623"></a>Discussion</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2922671"></a>Discussion</h2></div></div><div></div></div><p>
If not supplied with your platform distribution binary Samba package you may have problems
to compile these modules, as shared libraries are compiled and linked in different ways
on different systems. They currently have been tested against GNU/Linux and IRIX.
-</p><ns70:p>
+</p><p>
To use the VFS modules, create a share similar to the one below. The
-important parameter is the <b class="command">vfs objects</b> parameter where
+important parameter is the <a class="indexterm" name="id2922692"></a><i class="parameter"><tt>vfs objects</tt></i> parameter where
you can list one or more VFS modules by name. For example, to log all access
to files and put deleted files in a recycle bin:
-</ns70:p><pre class="programlisting">
-[audit]
- comment = Audited /data directory
- path = /data
- vfs objects = audit recycle
- writeable = yes
- browseable = yes
-</pre><ns70:p>
-</ns70:p><p>
+</p><div class="example"><a name="id2922709"></a><p class="title"><b>Example20.1.smb.conf with VFS modules</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[audit]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Audited /data directory</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /data</tt></i></td></tr><tr><td><i class="parameter"><tt>vfs objects = audit recycle</tt></i></td></tr><tr><td><i class="parameter"><tt>writeable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = yes</tt></i></td></tr></table></div><p>
+</p><p>
The modules are used in the order in which they are specified.
</p><p>
Samba will attempt to load modules from the <span class="emphasis"><em>lib</em></span>
directory in the root directory of the samba installation (usually
<tt class="filename">/usr/lib/samba/vfs</tt> or <tt class="filename">/usr/local/samba/lib/vfs
</tt>).
-</p><ns70:p>
+</p><p>
Some modules can be used twice for the same share.
This can be done using a configuration similar to the one below.
-</ns70:p><pre class="programlisting">
-[test]
- comment = VFS TEST
- path = /data
- writeable = yes
- browseable = yes
- vfs objects = example:example1 example example:test
- example1: parameter = 1
- example: parameter = 5
- test: parameter = 7
-</pre><ns70:p>
-</ns70:p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957300"></a>Included modules</h2></div></div><div></div></div><div xmlns:ns71="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957307"></a>audit</h3></div></div><div></div></div><ns71:p>
+</p><div class="example"><a name="id2922809"></a><p class="title"><b>Example20.2.smb.conf with multiple VFS modules</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[test]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = VFS TEST</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /data</tt></i></td></tr><tr><td><i class="parameter"><tt>writeable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>vfs objects = example:example1 example example:test</tt></i></td></tr><tr><td><i class="parameter"><tt>example1: parameter = 1</tt></i></td></tr><tr><td><i class="parameter"><tt>example: parameter = 5</tt></i></td></tr><tr><td><i class="parameter"><tt>test: parameter = 7</tt></i></td></tr></table></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2922900"></a>Included modules</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922907"></a>audit</h3></div></div><div></div></div><p>
A simple module to audit file access to the syslog
facility. The following operations are logged:
- </ns71:p><table class="simplelist" border="0" summary="Simple list"><tr><td>share</td></tr><tr><td>connect/disconnect</td></tr><tr><td>directory opens/create/remove</td></tr><tr><td>file open/close/rename/unlink/chmod</td></tr></table><ns71:p>
- </ns71:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957345"></a>extd_audit</h3></div></div><div></div></div><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>share</p></li><li><p>connect/disconnect</p></li><li><p>directory opens/create/remove</p></li><li><p>file open/close/rename/unlink/chmod</p></li></ul></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922950"></a>extd_audit</h3></div></div><div></div></div><p>
This module is identical with the <span class="emphasis"><em>audit</em></span> module above except
that it sends audit logs to both syslog as well as the smbd log file/s. The
loglevel for this module is set in the smb.conf file.
</p><p>
The logging information that will be written to the smbd log file is controlled by
- the <i class="parameter"><tt>log level</tt></i> parameter in <tt class="filename">smb.conf</tt>. The
+ the <a class="indexterm" name="id2922973"></a><i class="parameter"><tt>log level</tt></i> parameter in <tt class="filename">smb.conf</tt>. The
following information will be recorded:
- </p><div class="table"><a name="id2957384"></a><p class="title"><b>Table20.1.Extended Auditing Log Information</b></p><table summary="Extended Auditing Log Information" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Log Level</th><th align="center">Log Details - File and Directory Operations</th></tr></thead><tbody><tr><td align="center">0</td><td align="left">Creation / Deletion</td></tr><tr><td align="center">1</td><td align="left">Create / Delete / Rename / Permission Changes</td></tr><tr><td align="center">2</td><td align="left">Create / Delete / Rename / Perm Change / Open / Close</td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957466"></a>fake_perms</h3></div></div><div></div></div><p>
+ </p><div class="table"><a name="id2922997"></a><p class="title"><b>Table20.1.Extended Auditing Log Information</b></p><table summary="Extended Auditing Log Information" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Log Level</th><th align="center">Log Details - File and Directory Operations</th></tr></thead><tbody><tr><td align="center">0</td><td align="left">Creation / Deletion</td></tr><tr><td align="center">1</td><td align="left">Create / Delete / Rename / Permission Changes</td></tr><tr><td align="center">2</td><td align="left">Create / Delete / Rename / Perm Change / Open / Close</td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923080"></a>fake_perms</h3></div></div><div></div></div><p>
This module was created to allow Roaming Profile files and directories to be set (on the Samba server
under Unix) as read only. This module will if installed on the Profiles share will report to the client
that the Profile files and directories are writable. This satisfies the client even though the files
will never be overwritten as the client logs out or shuts down.
- </p></div><div xmlns:ns72="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957486"></a>recycle</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923099"></a>recycle</h3></div></div><div></div></div><p>
A recycle-bin like module. When used any unlink call
will be intercepted and files moved to the recycle
- directory instead of being deleted.
- </p><ns72:p>Supported options:
- </ns72:p><div class="variablelist"><dl><dt><span class="term">recycle:repository</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:keeptree</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:versions</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:touch</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:maxsize</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude_dir</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:noversions</span></dt><dd><p>FIXME</p></dd></dl></div><ns72:p>
- </ns72:p></div><div xmlns:ns73="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957625"></a>netatalk</h3></div></div><div></div></div><p>
+ directory instead of being deleted. This gives the same
+ effect as the &quot;Recycle Bin&quot; on Windows computers.
+ </p><p>Supported options:
+ </p><div class="variablelist"><dl><dt><span class="term">recycle:repository</span></dt><dd><p>Relative path of the directory where deleted files should be moved to</p></dd><dt><span class="term">recycle:keeptree</span></dt><dd><p>Specifies whether the directory structure should
+ be kept or if the files in the directory that is being
+ deleted should be kept seperately in the recycle bin.
+ </p></dd><dt><span class="term">recycle:versions</span></dt><dd><p>If this option is set, two files
+ with the same name that are deleted will both
+ be kept in the recycle bin. Newer deleted versions
+ of a file will be called &quot;Copy #x of <i class="replaceable"><tt>filename</tt></i>&quot;.</p></dd><dt><span class="term">recycle:touch</span></dt><dd><p>Specifies whether a file's access
+ date should be touched when the file is moved to
+ the recycle bin.</p></dd><dt><span class="term">recycle:maxsize</span></dt><dd><p>Files that are larger than the number
+ of bytes specified by this parameter will
+ not be put into the recycle bin.</p></dd><dt><span class="term">recycle:exclude</span></dt><dd><p>List of files that should not
+ be put into the recycle bin when deleted, but deleted
+ in the regular way.</p></dd><dt><span class="term">recycle:exclude_dir</span></dt><dd><p>Contains a list of directories. When files from
+ these directories are deleted, they are not put into the
+ recycle bin, but deleted in the regular way.
+ </p></dd><dt><span class="term">recycle:noversions</span></dt><dd><p>Opposite of <i class="parameter"><tt>recycle:versions</tt></i>. If both options are specified, this one takes precedence.</p></dd></dl></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923274"></a>netatalk</h3></div></div><div></div></div><p>
A netatalk module, that will ease co-existence of samba and
netatalk file sharing services.
- </p><ns73:p>Advantages compared to the old netatalk module:
- </ns73:p><table class="simplelist" border="0" summary="Simple list"><tr><td>it doesn't care about creating of .AppleDouble forks, just keeps them in sync</td></tr><tr><td>if a share in <tt class="filename">smb.conf</tt> doesn't contain .AppleDouble item in hide or veto list, it will be added automatically</td></tr></table><ns73:p>
- </ns73:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957671"></a>VFS modules available elsewhere</h2></div></div><div></div></div><p>
+ </p><p>Advantages compared to the old netatalk module:
+ </p><div class="itemizedlist"><ul type="disc"><li><p>it doesn't care about creating of .AppleDouble forks, just keeps them in sync</p></li><li><p>if a share in <tt class="filename">smb.conf</tt> doesn't contain .AppleDouble item in hide or veto list, it will be added automatically</p></li></ul></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923320"></a>VFS modules available elsewhere</h2></div></div><div></div></div><p>
This section contains a listing of various other VFS modules that
have been posted but don't currently reside in the Samba CVS
tree for one reason or another (e.g. it is easy for the maintainer
@@ -12014,7 +11225,7 @@ to have his or her own CVS tree).
</p><p>
No statements about the stability or functionality of any module
should be implied due to its presence here.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957693"></a>DatabaseFS</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923342"></a>DatabaseFS</h3></div></div><div></div></div><p>
URL: <a href="http://www.css.tayloru.edu/~elorimer/databasefs/index.php" target="_top">http://www.css.tayloru.edu/~elorimer/databasefs/index.php</a>
</p><p>By <a href="mailto:elorimer@css.tayloru.edu" target="_top">Eric Lorimer</a>.</p><p>
I have created a VFS module which implements a fairly complete read-only
@@ -12029,25 +11240,47 @@ should be implied due to its presence here.
Any feedback would be appreciated: comments, suggestions, patches,
etc... If nothing else, hopefully it might prove useful for someone
else who wishes to create a virtual filesystem.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957748"></a>vscan</h3></div></div><div></div></div><p>URL: <a href="http://www.openantivirus.org/" target="_top">http://www.openantivirus.org/</a></p><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923396"></a>vscan</h3></div></div><div></div></div><p>URL: <a href="http://www.openantivirus.org/" target="_top">http://www.openantivirus.org/</a></p><p>
samba-vscan is a proof-of-concept module for Samba, which
uses the VFS (virtual file system) features of Samba 2.2.x/3.0
alphaX. Of course, Samba has to be compiled with VFS support.
samba-vscan supports various virus scanners and is maintained
by Rainer Link.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957777"></a>Common Errors</h2></div></div><div></div></div><p>
-There must be some gotchas we should record here! Jelmer???
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="winbind"></a>Chapter21.Integrated Logon Support using Winbind</h2></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tpot@samba.org">tpot@samba.org</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Naag</span> <span class="surname">Mummaneni</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:getnag@rediffmail.com">getnag@rediffmail.com</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div><p class="pubdate">27 June 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2958272">Features and Benefits</a></dt><dt><a href="#id2958300">Introduction</a></dt><dt><a href="#id2960332">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2960392">Target Uses</a></dt></dl></dd><dt><a href="#id2960423">How Winbind Works</a></dt><dd><dl><dt><a href="#id2960451">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2960484">Microsoft Active Directory Services</a></dt><dt><a href="#id2960506">Name Service Switch</a></dt><dt><a href="#id2957818">Pluggable Authentication Modules</a></dt><dt><a href="#id2957889">User and Group ID Allocation</a></dt><dt><a href="#id2957924">Result Caching</a></dt></dl></dd><dt><a href="#id2957952">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2957980">Introduction</a></dt><dt><a href="#id2958055">Requirements</a></dt><dt><a href="#id2959330">Testing Things Out</a></dt></dl></dd><dt><a href="#id2963732">Conclusion</a></dt><dt><a href="#id2963750">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958272"></a>Features and Benefits</h2></div></div><div></div></div><p>Integration of UNIX and Microsoft Windows NT through
- a unified logon has been considered a &quot;holy grail&quot; in heterogeneous
- computing environments for a long time. We present
- <span class="emphasis"><em>winbind</em></span>, a component of the Samba suite
- of programs as a solution to the unified logon problem. Winbind
- uses a UNIX implementation
- of Microsoft RPC calls, Pluggable Authentication Modules, and the Name
- Service Switch to allow Windows NT domain users to appear and operate
- as UNIX users on a UNIX machine. This paper describes the winbind
- system, explaining the functionality it provides, how it is configured,
- and how it works internally.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958300"></a>Introduction</h2></div></div><div></div></div><p>It is well known that UNIX and Microsoft Windows NT have
+ </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="winbind"></a>Chapter21.Winbind: Use of Domain Accounts</h2></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tpot@linuxcare.com.au">tpot@linuxcare.com.au</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Naag</span> <span class="surname">Mummaneni</span></h3><span class="contrib">Notes for Solaris</span><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:getnag@rediffmail.com">getnag@rediffmail.com</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="surname">Trostel</span></h3><div class="affiliation"><span class="orgname">SNAP<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jtrostel@snapserver.com">jtrostel@snapserver.com</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div><p class="pubdate">27 June 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2923626">Features and Benefits</a></dt><dt><a href="#id2923721">Introduction</a></dt><dt><a href="#id2923799">What Winbind Provides</a></dt><dd><dl><dt><a href="#id2923876">Target Uses</a></dt></dl></dd><dt><a href="#id2923906">How Winbind Works</a></dt><dd><dl><dt><a href="#id2923935">Microsoft Remote Procedure Calls</a></dt><dt><a href="#id2923968">Microsoft Active Directory Services</a></dt><dt><a href="#id2923991">Name Service Switch</a></dt><dt><a href="#id2924127">Pluggable Authentication Modules</a></dt><dt><a href="#id2924199">User and Group ID Allocation</a></dt><dt><a href="#id2924232">Result Caching</a></dt></dl></dd><dt><a href="#id2924260">Installation and Configuration</a></dt><dd><dl><dt><a href="#id2924268">Introduction</a></dt><dt><a href="#id2924335">Requirements</a></dt><dt><a href="#id2924429">Testing Things Out</a></dt></dl></dd><dt><a href="#id2926036">Conclusion</a></dt><dt><a href="#id2926054">Common Errors</a></dt><dd><dl><dt><a href="#id2926108">NSCD Problem Warning</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923626"></a>Features and Benefits</h2></div></div><div></div></div><p>
+ Integration of UNIX and Microsoft Windows NT through a unified logon has
+ been considered a &quot;holy grail&quot; in heterogeneous computing environments for
+ a long time.
+ </p><p>
+ There is one other facility without which UNIX and Microsoft Windows network
+ interoperability would suffer greatly. It is imperative that there be a
+ mechanism for sharing files across UNIX systems and to be able to assign
+ domain user and group ownerships with integrity.
+ </p><p>
+ <span class="emphasis"><em>winbind</em></span> is a component of the Samba suite of programs
+ solves the unified logon problem. Winbind uses a UNIX implementation of Microsoft
+ RPC calls, Pluggable Authentication Modules, and the Name Service Switch to
+ allow Windows NT domain users to appear and operate as UNIX users on a UNIX
+ machine. This chapter describes the winbind system, explaining the functionality
+ it provides, how it is configured, and how it works internally.
+ </p><p>
+ Winbind provides three separate functions:
+ </p><div class="itemizedlist"><ul type="disc"><li><p>
+ Authentication of user credentials (via PAM)
+ </p></li><li><p>
+ Identity resolution (via NSS)`
+ </p></li><li><p>
+ Windindd maintains a database called winbind_idmap.tdb in which it stores
+ mappings between UNIX UIDs / GIDs and NT SIDs. This mapping is used only
+ for users and groups that do not have a local UID/GID. It stored the UID/GID
+ allocated from the idmap uid/gid range that it has mapped to the NT SID.
+ If <i class="parameter"><tt>idmap backend</tt></i> has been specified as ldapsam:url
+ then instead of using a local mapping winbindd will obtain this information
+ from the LDAP database.
+ </p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ If winbindd is not running, then smbd (which calls winbindd) will fall back to
+ using purely local information from /etc/passwd and /etc/group and no dynamic
+ mapping will be used.
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923721"></a>Introduction</h2></div></div><div></div></div><p>It is well known that UNIX and Microsoft Windows NT have
different models for representing user and group information and
use different technologies for implementing them. This fact has
made it difficult to integrate the two systems in a satisfactory
@@ -12068,7 +11301,7 @@ There must be some gotchas we should record here! Jelmer???
tasks for the system administrator when maintaining users and
groups on either system. The winbind system provides a simple
and elegant solution to all three components of the unified logon
- problem.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960332"></a>What Winbind Provides</h2></div></div><div></div></div><p>Winbind unifies UNIX and Windows NT account management by
+ problem.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923799"></a>What Winbind Provides</h2></div></div><div></div></div><p>Winbind unifies UNIX and Windows NT account management by
allowing a UNIX box to become a full member of a NT domain. Once
this is done the UNIX box will see NT users and groups as if
they were native UNIX users and groups, allowing the NT domain
@@ -12092,7 +11325,7 @@ There must be some gotchas we should record here! Jelmer???
to provide authentication via a NT domain to any PAM enabled
applications. This capability solves the problem of synchronizing
passwords between systems since all passwords are stored in a single
- location (on the domain controller).</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960392"></a>Target Uses</h3></div></div><div></div></div><p>Winbind is targeted at organizations that have an
+ location (on the domain controller).</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923876"></a>Target Uses</h3></div></div><div></div></div><p>Winbind is targeted at organizations that have an
existing NT based domain infrastructure into which they wish
to put UNIX workstations or servers. Winbind will allow these
organizations to deploy UNIX workstations without having to
@@ -12102,12 +11335,12 @@ There must be some gotchas we should record here! Jelmer???
be used is as a central part of UNIX based appliances. Appliances
that provide file and print services to Microsoft based networks
will be able to use Winbind to provide seamless integration of
- the appliance into the domain.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960423"></a>How Winbind Works</h2></div></div><div></div></div><p>The winbind system is designed around a client/server
+ the appliance into the domain.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923906"></a>How Winbind Works</h2></div></div><div></div></div><p>The winbind system is designed around a client/server
architecture. A long running <b class="command">winbindd</b> daemon
listens on a UNIX domain socket waiting for requests
to arrive. These requests are generated by the NSS and PAM
clients and processed sequentially.</p><p>The technologies used to implement winbind are described
- in detail below.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960451"></a>Microsoft Remote Procedure Calls</h3></div></div><div></div></div><p>Over the last few years, efforts have been underway
+ in detail below.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923935"></a>Microsoft Remote Procedure Calls</h3></div></div><div></div></div><p>Over the last few years, efforts have been underway
by various Samba Team members to decode various aspects of
the Microsoft Remote Procedure Call (MSRPC) system. This
system is used for most network related operations between
@@ -12120,7 +11353,7 @@ There must be some gotchas we should record here! Jelmer???
users or groups. Other MSRPC calls can be used to authenticate
NT domain users and to change user passwords. By directly querying
a Windows PDC for user and group information, winbind maps the
- NT account information onto UNIX user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960484"></a>Microsoft Active Directory Services</h3></div></div><div></div></div><p>
+ NT account information onto UNIX user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923968"></a>Microsoft Active Directory Services</h3></div></div><div></div></div><p>
Since late 2001, Samba has gained the ability to
interact with Microsoft Windows 2000 using its 'Native
Mode' protocols, rather than the NT4 RPC services.
@@ -12129,7 +11362,7 @@ There must be some gotchas we should record here! Jelmer???
same way as a Win2k client would, and in so doing
provide a much more efficient and
effective winbind implementation.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2960506"></a>Name Service Switch</h3></div></div><div></div></div><p>The Name Service Switch, or NSS, is a feature that is
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923991"></a>Name Service Switch</h3></div></div><div></div></div><p>The Name Service Switch, or NSS, is a feature that is
present in many UNIX operating systems. It allows system
information such as hostnames, mail aliases and user information
to be resolved from different sources. For example, a standalone
@@ -12151,7 +11384,7 @@ There must be some gotchas we should record here! Jelmer???
the C library looks in <tt class="filename">/etc/nsswitch.conf</tt>
for a line which matches the service type being requested, for
example the &quot;passwd&quot; service type is used when user or group names
- are looked up. This config line species which implementations
+ are looked up. This config line specifies which implementations
of that service should be tried and in what order. If the passwd
config line is:</p><pre class="programlisting">
passwd: files example
@@ -12166,7 +11399,7 @@ passwd: files example
is to put <tt class="filename">libnss_winbind.so</tt> in <tt class="filename">/lib/</tt>
then add &quot;winbind&quot; into <tt class="filename">/etc/nsswitch.conf</tt> at
the appropriate place. The C library will then call Winbind to
- resolve user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957818"></a>Pluggable Authentication Modules</h3></div></div><div></div></div><p>Pluggable Authentication Modules, also known as PAM,
+ resolve user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924127"></a>Pluggable Authentication Modules</h3></div></div><div></div></div><p>Pluggable Authentication Modules, also known as PAM,
is a system for abstracting authentication and authorization
technologies. With a PAM module it is possible to specify different
authentication methods for different system applications without
@@ -12191,7 +11424,7 @@ passwd: files example
is copied to <tt class="filename">/lib/security/</tt> and the PAM
control files for relevant services are updated to allow
authentication via winbind. See the PAM documentation
- for more details.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957889"></a>User and Group ID Allocation</h3></div></div><div></div></div><p>When a user or group is created under Windows NT
+ for more details.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924199"></a>User and Group ID Allocation</h3></div></div><div></div></div><p>When a user or group is created under Windows NT
is it allocated a numerical relative identifier (RID). This is
slightly different to UNIX which has a range of numbers that are
used to identify users, and the same range in which to identify
@@ -12204,7 +11437,7 @@ passwd: files example
time, winbind will have mapped all Windows NT users and groups
to UNIX user ids and group ids.</p><p>The results of this mapping are stored persistently in
an ID mapping database held in a tdb database). This ensures that
- RIDs are mapped to UNIX IDs in a consistent way.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957924"></a>Result Caching</h3></div></div><div></div></div><p>An active system can generate a lot of user and group
+ RIDs are mapped to UNIX IDs in a consistent way.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924232"></a>Result Caching</h3></div></div><div></div></div><p>An active system can generate a lot of user and group
name lookups. To reduce the network cost of these lookups winbind
uses a caching scheme based on the SAM sequence number supplied
by NT domain controllers. User or group information returned
@@ -12215,23 +11448,12 @@ passwd: files example
the PDC and compared against the sequence number of the cached entry.
If the sequence numbers do not match, then the cached information
is discarded and up to date information is requested directly
- from the PDC.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957952"></a>Installation and Configuration</h2></div></div><div></div></div><p>
-Many thanks to John Trostel <a href="mailto:jtrostel@snapserver.com" target="_top">jtrostel@snapserver.com</a>
-for providing the HOWTO for this section.
-</p><p>
-This HOWTO describes how to get winbind services up and running
-to control access and authenticate users on your Linux box using
-the winbind services which come with SAMBA 3.0.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2957980"></a>Introduction</h3></div></div><div></div></div><p>
+ from the PDC.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2924260"></a>Installation and Configuration</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924268"></a>Introduction</h3></div></div><div></div></div><p>
This section describes the procedures used to get winbind up and
-running on a RedHat 7.1 system. Winbind is capable of providing access
+running. Winbind is capable of providing access
and authentication control for Windows Domain users through an NT
or Win2K PDC for 'regular' services, such as telnet a nd ftp, as
well for SAMBA services.
-</p><p>
-This HOWTO has been written from a 'RedHat-centric' perspective, so if
-you are using another distribution, you may have to modify the instructions
-somewhat to fit the way your distribution works.
</p><div class="itemizedlist"><ul type="disc"><li><p>
<span class="emphasis"><em>Why should I to this?</em></span>
</p><p>This allows the SAMBA administrator to rely on the
@@ -12247,7 +11469,7 @@ somewhat to fit the way your distribution works.
SAMBA server, this HOWTO is for you. That said, I am no NT or PAM
expert, so you may find a better or easier way to accomplish
these tasks.
- </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2958055"></a>Requirements</h3></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924335"></a>Requirements</h3></div></div><div></div></div><p>
If you have a Samba configuration file that you are currently
using... <span class="emphasis"><em>BACK IT UP!</em></span> If your system already uses PAM,
<span class="emphasis"><em>back up the <tt class="filename">/etc/pam.d</tt> directory
@@ -12274,41 +11496,26 @@ winbind modules, you should have at least the pam libraries resident
on your system. For recent RedHat systems (7.1, for instance), that
means <tt class="filename">pam-0.74-22</tt>. For best results, it is helpful to also
install the development packages in <tt class="filename">pam-devel-0.74-22</tt>.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959330"></a>Testing Things Out</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2924429"></a>Testing Things Out</h3></div></div><div></div></div><p>
Before starting, it is probably best to kill off all the SAMBA
related daemons running on your server. Kill off all <span class="application">smbd</span>,
<span class="application">nmbd</span>, and <span class="application">winbindd</span> processes that may
be running. To use PAM, you will want to make sure that you have the
-standard PAM package (for RedHat) which supplies the <tt class="filename">/etc/pam.d</tt>
+standard PAM package which supplies the <tt class="filename">/etc/pam.d</tt>
directory structure, including the pam modules are used by pam-aware
services, several pam libraries, and the <tt class="filename">/usr/doc</tt>
and <tt class="filename">/usr/man</tt> entries for pam. Winbind built better
in SAMBA if the pam-devel package was also installed. This package includes
the header files needed to compile pam-aware applications.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2959391"></a>Configure and compile SAMBA</h4></div></div><div></div></div><p>
-The configuration and compilation of SAMBA is pretty straightforward.
-The first three steps may not be necessary depending upon
-whether or not you have previously built the Samba binaries.
-</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="command">autoconf</b>
-<tt class="prompt">root# </tt><b class="command">make clean</b>
-<tt class="prompt">root# </tt><b class="command">rm config.cache</b>
-<tt class="prompt">root# </tt><b class="command">./configure</b>
-<tt class="prompt">root# </tt><b class="command">make</b>
-<tt class="prompt">root# </tt><b class="command">make install</b>
-</pre><p>
-This will, by default, install SAMBA in <tt class="filename">/usr/local/samba</tt>.
-See the main SAMBA documentation if you want to install SAMBA somewhere else.
-It will also build the winbindd executable and libraries.
-</p></div><div xmlns:ns74="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2959503"></a>Configure <tt class="filename">nsswitch.conf</tt> and the
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2924491"></a>Configure <tt class="filename">nsswitch.conf</tt> and the
winbind libraries on Linux and Solaris</h4></div></div><div></div></div><p>
The libraries needed to run the <span class="application">winbindd</span> daemon
through nsswitch need to be copied to their proper locations, so
-</p><ns74:p>
-</ns74:p><pre class="screen">
+</p><p>
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>cp ../samba/source/nsswitch/libnss_winbind.so /lib</tt></b>
-</pre><ns74:p>
-</ns74:p><p>
+</pre><p>
+</p><p>
I also found it necessary to make the following symbolic link:
</p><p>
<tt class="prompt">root# </tt> <b class="userinput"><tt>ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2</tt></b>
@@ -12335,7 +11542,7 @@ is faster (and you don't need to reboot) if you do it manually:
</p><p>
This makes <tt class="filename">libnss_winbind</tt> available to winbindd
and echos back a check to you.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2959711"></a>NSS Winbind on AIX</h4></div></div><div></div></div><p>(This section is only for those running AIX)</p><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2924699"></a>NSS Winbind on AIX</h4></div></div><div></div></div><p>(This section is only for those running AIX)</p><p>
The winbind AIX identification module gets built as libnss_winbind.so in the
nsswitch directory of the samba source. This file can be copied to
/usr/lib/security, and the AIX naming convention would indicate that it
@@ -12355,40 +11562,25 @@ Programming Concepts for AIX&quot;: <a href="http://publibn.boulder.ibm.com/doc_
Chapter 18. Loadable Authentication Module Programming Interface</a>
and more information on administering the modules at <a href="http://publibn.boulder.ibm.com/doc_link/en_US/a_doc_lib/aixbman/baseadmn/iandaadmin.htm" target="_top">
&quot;System Management Guide: Operating System and Devices&quot;</a>.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2959782"></a>Configure smb.conf</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2924778"></a>Configure smb.conf</h4></div></div><div></div></div><p>
Several parameters are needed in the smb.conf file to control
the behavior of <span class="application">winbindd</span>. Configure
<tt class="filename">smb.conf</tt> These are described in more detail in
the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> man page. My
<tt class="filename">smb.conf</tt> file was modified to
include the following entries in the [global] section:
-</p><pre class="programlisting">
-[global]
- &lt;...&gt;
- # separate domain and username with '+', like DOMAIN+username
- <a href="winbindd.8.html#WINBINDSEPARATOR" target="_top">winbind separator</a> = +
- # use uids from 10000 to 20000 for domain users
- <a href="winbindd.8.html#WINBINDUID" target="_top">idmap uid</a> = 10000-20000
- # use gids from 10000 to 20000 for domain groups
- <a href="winbindd.8.html#WINBINDGID" target="_top">idmap gid</a> = 10000-20000
- # allow enumeration of winbind users and groups
- <a href="winbindd.8.html#WINBINDENUMUSERS" target="_top">winbind enum users</a> = yes
- <a href="winbindd.8.html#WINBINDENUMGROUP" target="_top">winbind enum groups</a> = yes
- # give winbind users a real shell (only needed if they have telnet access)
- <a href="winbindd.8.html#TEMPLATEHOMEDIR" target="_top">template homedir</a> = /home/winnt/%D/%U
- <a href="winbindd.8.html#TEMPLATESHELL" target="_top">template shell</a> = /bin/bash
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2959896"></a>Join the SAMBA server to the PDC domain</h4></div></div><div></div></div><p>
+</p><div class="example"><a name="id2924824"></a><p class="title"><b>Example21.1.smb.conf for winbind set-up</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td>...</td></tr><tr><td># separate domain and username with '+', like DOMAIN+username</td></tr><tr><td><i class="parameter"><tt>winbind separator = +</tt></i></td></tr><tr><td># use uids from 10000 to 20000 for domain users</td></tr><tr><td><i class="parameter"><tt>idmap uid = 10000-20000</tt></i></td></tr><tr><td># use gids from 10000 to 20000 for domain groups</td></tr><tr><td><i class="parameter"><tt>winbind gid = 10000-20000</tt></i></td></tr><tr><td># allow enumeration of winbind users and groups</td></tr><tr><td><i class="parameter"><tt>winbind enum users = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>winbind enum groups = yes</tt></i></td></tr><tr><td># give winbind users a real shell (only needed if they have telnet access)</td></tr><tr><td><i class="parameter"><tt>template homedir = /home/winnt/%D/%U</tt></i></td></tr><tr><td><i class="parameter"><tt>template shell = /bin/bash</tt></i></td></tr></table></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2924936"></a>Join the SAMBA server to the PDC domain</h4></div></div><div></div></div><p>
Enter the following command to make the SAMBA server join the
PDC domain, where <i class="replaceable"><tt>DOMAIN</tt></i> is the name of
your Windows domain and <i class="replaceable"><tt>Administrator</tt></i> is
a domain user who has administrative privileges in the domain.
</p><p>
-<tt class="prompt">root# </tt><b class="userinput"><tt>/usr/local/samba/bin/net join -S PDC -U Administrator</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>/usr/local/samba/bin/net rpc join -S PDC -U Administrator</tt></b>
</p><p>
The proper response to the command should be: &quot;Joined the domain
<i class="replaceable"><tt>DOMAIN</tt></i>&quot; where <i class="replaceable"><tt>DOMAIN</tt></i>
is your DOMAIN name.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962791"></a>Start up the winbindd daemon and test it!</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2924992"></a>Start up the winbindd daemon and test it!</h4></div></div><div></div></div><p>
Eventually, you will want to modify your smb startup script to
automatically invoke the winbindd daemon when the other parts of
SAMBA start, but it is possible to test out just the winbind
@@ -12430,8 +11622,7 @@ your PDC. For example, I get the following response:
CEO+krbtgt
CEO+TsInternetUser
</pre><p>
-Obviously, I have named my domain 'CEO' and my <i class="parameter"><tt>winbind
-separator</tt></i> is '+'.
+ Obviously, I have named my domain 'CEO' and my <a class="indexterm" name="id2925137"></a><i class="parameter"><tt>winbind separator</tt></i> is '+'.
</p><p>
You can do the same sort of thing to get group information from
the PDC:
@@ -12460,7 +11651,7 @@ directories and default shells.
The same thing can be done for groups with the command
</p><p>
<tt class="prompt">root# </tt><b class="userinput"><tt>getent group</tt></b>
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2963032"></a>Fix the init.d startup scripts</h4></div></div><div></div></div><div xmlns:ns75="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963039"></a>Linux</h5></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925241"></a>Fix the init.d startup scripts</h4></div></div><div></div></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2925248"></a>Linux</h5></div></div><div></div></div><p>
The <span class="application">winbindd</span> daemon needs to start up after the
<span class="application">smbd</span> and <span class="application">nmbd</span> daemons are running.
To accomplish this task, you need to modify the startup scripts of your system.
@@ -12491,18 +11682,18 @@ start() {
touch /var/lock/subsys/smb || RETVAL=1
return $RETVAL
}
-</pre><ns75:p>If you would like to run winbindd in dual daemon mode, replace
+</pre><p>If you would like to run winbindd in dual daemon mode, replace
the line
-</ns75:p><pre class="programlisting">
+</p><pre class="programlisting">
daemon /usr/local/samba/bin/winbindd
-</pre><ns75:p>
+</pre><p>
in the example above with:
-</ns75:p><pre class="programlisting">
+</p><pre class="programlisting">
daemon /usr/local/samba/bin/winbindd -B
-</pre><ns75:p>.
-</ns75:p><p>
+</pre><p>.
+</p><p>
The 'stop' function has a corresponding entry to shut down the
services and looks like this:
</p><pre class="programlisting">
@@ -12526,7 +11717,7 @@ stop() {
echo &quot;&quot;
return $RETVAL
}
-</pre></div><div xmlns:ns76="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963185"></a>Solaris</h5></div></div><div></div></div><p>Winbind doesn't work on Solaris 9, see the <a href="#winbind-solaris9" title="Winbind on Solaris 9">Portability</a> chapter for details.</p><p>On Solaris, you need to modify the
+</pre></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2925416"></a>Solaris</h5></div></div><div></div></div><p>Winbind doesn't work on Solaris 9, see the <a href="#winbind-solaris9" title="Winbind on Solaris 9">Portability</a> chapter for details.</p><p>On Solaris, you need to modify the
<tt class="filename">/etc/init.d/samba.server</tt> startup script. It usually
only starts smbd and nmbd but should now start winbindd too. If you
have samba installed in <tt class="filename">/usr/local/samba/bin</tt>,
@@ -12578,22 +11769,22 @@ the file could contains something like this:
echo &quot;Usage: /etc/init.d/samba.server { start | stop }&quot;
;;
esac
-</pre><ns76:p>
+</pre><p>
Again, if you would like to run samba in dual daemon mode, replace
-</ns76:p><pre class="programlisting">
+</p><pre class="programlisting">
/usr/local/samba/bin/winbindd
-</pre><ns76:p>
+</pre><p>
in the script above with:
-</ns76:p><pre class="programlisting">
+</p><pre class="programlisting">
/usr/local/samba/bin/winbindd -B
-</pre><ns76:p>
-</ns76:p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963273"></a>Restarting</h5></div></div><div></div></div><p>
+</pre><p>
+</p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2925529"></a>Restarting</h5></div></div><div></div></div><p>
If you restart the <span class="application">smbd</span>, <span class="application">nmbd</span>, and <span class="application">winbindd</span> daemons at this point, you
should be able to connect to the samba server as a domain member just as
if you were a local user.
-</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2963310"></a>Configure Winbind and PAM</h4></div></div><div></div></div><p>
+</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925565"></a>Configure Winbind and PAM</h4></div></div><div></div></div><p>
If you have made it this far, you know that winbindd and samba are working
together. If you want to use winbind to provide authentication for other
services, keep reading. The pam configuration files need to be altered in
@@ -12613,7 +11804,7 @@ your other pam security modules. On my RedHat system, this was the
modules reside in <tt class="filename">/usr/lib/security</tt>.
</p><p>
<tt class="prompt">root# </tt><b class="userinput"><tt>cp ../samba/source/nsswitch/pam_winbind.so /lib/security</tt></b>
-</p><div xmlns:ns77="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963416"></a>Linux/FreeBSD-specific PAM configuration</h5></div></div><div></div></div><p>
+</p><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2925671"></a>Linux/FreeBSD-specific PAM configuration</h5></div></div><div></div></div><p>
The <tt class="filename">/etc/pam.d/samba</tt> file does not need to be changed. I
just left this file as it was:
</p><pre class="programlisting">
@@ -12640,7 +11831,7 @@ have individual directories for the domain users already present on
the server, or change the home directory template to a general
directory for all domain users. These can be easily set using
the <tt class="filename">smb.conf</tt> global entry
-<i class="parameter"><tt>template homedir</tt></i>.
+<a class="indexterm" name="id2925778"></a><i class="parameter"><tt>template homedir</tt></i>.
</p><p>
The <tt class="filename">/etc/pam.d/ftp</tt> file can be changed
to allow winbind ftp access in a manner similar to the
@@ -12669,14 +11860,14 @@ same way. It now looks like this:
password required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_stack.so service=system-auth
session optional /lib/security/pam_console.so
-</pre><ns77:p>
-In this case, I added the </ns77:p><pre class="programlisting">auth sufficient /lib/security/pam_winbind.so</pre><ns77:p>
-lines as before, but also added the </ns77:p><pre class="programlisting">required pam_securetty.so</pre><ns77:p>
+</pre><p>
+In this case, I added the </p><pre class="programlisting">auth sufficient /lib/security/pam_winbind.so</pre><p>
+lines as before, but also added the </p><pre class="programlisting">required pam_securetty.so</pre><p>
above it, to disallow root logins over the network. I also added a
-<b class="command">sufficient /lib/security/pam_unix.so use_first_pass</b>
+</p><pre class="programlisting">sufficient /lib/security/pam_unix.so use_first_pass</pre><p>
line after the <b class="command">winbind.so</b> line to get rid of annoying
double prompts for passwords.
-</ns77:p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2963640"></a>Solaris-specific configuration</h5></div></div><div></div></div><p>
+</p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2925912"></a>Solaris-specific configuration</h5></div></div><div></div></div><p>
The /etc/pam.conf needs to be changed. I changed this file so that my Domain
users can logon both locally as well as telnet.The following are the changes
that I made.You can customize the pam.conf file as per your requirements,but
@@ -12748,15 +11939,15 @@ annoying double prompts for passwords.
</p><p>
Now restart your Samba and try connecting through your application that you
configured in the pam.conf.
-</p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963732"></a>Conclusion</h2></div></div><div></div></div><p>The winbind system, through the use of the Name Service
+</p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926036"></a>Conclusion</h2></div></div><div></div></div><p>The winbind system, through the use of the Name Service
Switch, Pluggable Authentication Modules, and appropriate
Microsoft RPC calls have allowed us to provide seamless
integration of Microsoft Windows NT domain users on a
UNIX system. The result is a great reduction in the administrative
- cost of running a mixed UNIX and NT network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963750"></a>Common Errors</h2></div></div><div></div></div><p>Winbind has a number of limitations in its current
+ cost of running a mixed UNIX and NT network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926054"></a>Common Errors</h2></div></div><div></div></div><p>Winbind has a number of limitations in its current
released version that we hope to overcome in future
releases:</p><div class="itemizedlist"><ul type="disc"><li><p>Winbind is currently only available for
- the Linux, Solaris and IRIX operating systems, although ports to other operating
+ the Linux, Solaris, AIX and IRIX operating systems, although ports to other operating
systems are certainly possible. For such ports to be feasible,
we require the C library of the target operating system to
support the Name Service Switch and Pluggable Authentication
@@ -12768,11 +11959,18 @@ configured in the pam.conf.
containing this information is corrupted or destroyed.</p></li><li><p>Currently the winbind PAM module does not take
into account possible workstation and logon time restrictions
that may be been set for Windows NT users, this is
- instead up to the PDC to enforce.</p></li></ul></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AdvancedNetworkManagement"></a>Chapter22.Advanced Network Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2965123">Features and Benefits</a></dt><dt><a href="#id2965154">Remote Server Administration</a></dt><dt><a href="#id2963838">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2963854">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2964055">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2964250">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2964283">Common Errors</a></dt></dl></div><p>
+ instead up to the PDC to enforce.</p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926108"></a>NSCD Problem Warning</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ Do NOT under ANY circumstances run <b class="command">nscd</b> on any system
+ on which <b class="command">winbind</b> is running.
+ </p></div><p>
+ If <b class="command">nscd</b> is running on the UNIX/Linux system, then
+ even though NSSWITCH is correctly configured it will NOT be possible to resolve
+ domain users and groups for file and directory controls.
+ </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="AdvancedNetworkManagement"></a>Chapter22.Advanced Network Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2926216">Features and Benefits</a></dt><dt><a href="#id2926247">Remote Server Administration</a></dt><dt><a href="#id2926346">Remote Desktop Management</a></dt><dd><dl><dt><a href="#id2926363">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="#id2926605">Network Logon Script Magic</a></dt><dd><dl><dt><a href="#id2926843">Adding printers without user intervention</a></dt></dl></dd><dt><a href="#id2926877">Common Errors</a></dt></dl></div><p>
This section documents peripheral issues that are of great importance to network
administrators who want to improve network resource access control, to automate the user
environment, and to make their lives a little easier.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2965123"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926216"></a>Features and Benefits</h2></div></div><div></div></div><p>
Often the difference between a working network environment and a well appreciated one can
best be measured by the <span class="emphasis"><em>little things</em></span> that makes everything work more
harmoniously. A key part of every network environment solution is the ability to remotely
@@ -12782,7 +11980,7 @@ network operations.
</p><p>
This chapter presents information on each of these area. They are placed here, and not in
other chapters, for ease of reference.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2965154"></a>Remote Server Administration</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926247"></a>Remote Server Administration</h2></div></div><div></div></div><p>
<span class="emphasis"><em>How do I get 'User Manager' and 'Server Manager'?</em></span>
</p><p>
Since I don't need to buy an <span class="application">NT4 Server</span>, how do I get the 'User Manager for Domains',
@@ -12796,17 +11994,17 @@ Click here to download the archived file <a href="ftp://ftp.microsoft.com/Softli
The <span class="application">Windows NT 4.0</span> version of the 'User Manager for
Domains' and 'Server Manager' are available from Microsoft via ftp
from <a href="ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE" target="_top">ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE</a>
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2963838"></a>Remote Desktop Management</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926346"></a>Remote Desktop Management</h2></div></div><div></div></div><p>
There are a number of possible remote desktop management solutions that range from free
through costly. Do not let that put you off. Sometimes the most costly solutions is the
most cost effective. In any case, you will need to draw your own conclusions as to which
is the best tool in your network environment.
-</p><div xmlns:ns78="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2963854"></a>Remote Management from NoMachines.Com</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926363"></a>Remote Management from NoMachines.Com</h3></div></div><div></div></div><p>
The following information was posted to the Samba mailing list at Apr 3 23:33:50 GMT 2003.
It is presented in slightly edited form (with author details omitted for privacy reasons).
The entire answer is reproduced below with some comments removed.
- </p><ns78:p>
-</ns78:p><pre class="screen">
+ </p><p>
+</p><pre class="screen">
&gt; I have a wonderful linux/samba server running as PDC for a network.
&gt; Now I would like to add remote desktop capabilities so that
&gt; users outside could login to the system and get their desktop up from
@@ -12818,8 +12016,8 @@ is the best tool in your network environment.
&gt; even if the computer is in a domain?
&gt;
&gt; Any ideas/experience would be appreciated :)
-</pre><ns78:p>
-</ns78:p><p>
+</pre><p>
+</p><p>
Answer provided: Check out the new offer from NoMachine, &quot;NX&quot; software:
<a href="http://www.nomachine.com/" target="_top">http://www.nomachine.com/</a>.
</p><p>
@@ -12889,7 +12087,7 @@ is the best tool in your network environment.
NoMachine are encouraging and offering help to OSS/Free Software implementations
for such a frontend too, even if it means competition to them (they have written
to this effect even to the LTSP, KDE and GNOME developer mailing lists)
- </p></li></ul></div></div></div><div xmlns:ns79="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964055"></a>Network Logon Script Magic</h2></div></div><div></div></div><p>
+ </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926605"></a>Network Logon Script Magic</h2></div></div><div></div></div><p>
This section needs work. Volunteer contributions most welcome. Please send your patches or updates
to <a href="mailto:jht@samba.org" target="_top">John Terpstra</a>.
</p><p>
@@ -12901,10 +12099,10 @@ See <tt class="filename">examples</tt> directory <tt class="filename">genlogon</
<tt class="filename">ntlogon</tt> subdirectories.
</p><p>
The following listings are from the genlogon directory.
-</p><ns79:p>
+</p><p>
This is the <tt class="filename">genlogon.pl</tt> file:
-</ns79:p><pre class="programlisting">
+</p><pre class="programlisting">
#!/usr/bin/perl
#
# genlogon.pl
@@ -12976,28 +12174,28 @@ This is the <tt class="filename">genlogon.pl</tt> file:
# All done! Close the output file.
close LOGON;
-</pre><ns79:p>
-</ns79:p><p>
+</pre><p>
+</p><p>
Those wishing to use more elaborate or capable logon processing system should check out the following sites:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="http://www.craigelachie.org/rhacer/ntlogon" target="_top">http://www.craigelachie.org/rhacer/ntlogon</a></td></tr><tr><td><a href="http://www.kixtart.org" target="_top">http://www.kixtart.org</a></td></tr><tr><td><a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.asp?scid=kb;en-us;189105</a></td></tr></table><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964250"></a>Adding printers without user intervention</h3></div></div><div></div></div><ns79:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="http://www.craigelachie.org/rhacer/ntlogon" target="_top">http://www.craigelachie.org/rhacer/ntlogon</a></td></tr><tr><td><a href="http://www.kixtart.org" target="_top">http://www.kixtart.org</a></td></tr><tr><td><a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.asp?scid=kb;en-us;189105</a></td></tr></table><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2926843"></a>Adding printers without user intervention</h3></div></div><div></div></div><p>
Printers may be added automatically during logon script processing through the use of:
-</ns79:p><pre class="programlisting">
+</p><pre class="programlisting">
rundll32 printui.dll,PrintUIEntry /?
-</pre><ns79:p>
+</pre><p>
See the documentation in the <a href="http://support.microsoft.com/default.asp?scid=kb;en-us;189105" target="_top">Microsoft knowledgebase article no: 189105</a>.
-</ns79:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964283"></a>Common Errors</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926877"></a>Common Errors</h2></div></div><div></div></div><p>
The information provided in this chapter has been reproduced from postings on the samba@samba.org
mailing list. No implied endorsement or recommendation is offered. Administrators should conduct
their own evaluation of alternatives and are encouraged to draw their own conclusions.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="PolicyMgmt"></a>Chapter23.System and Account Policies</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2964680">Features and Benefits</a></dt><dt><a href="#id2964732">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2964843">Windows 9x/Me Policies</a></dt><dt><a href="#id2964391">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2964524">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2965966">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2966066">Samba Editreg Toolset</a></dt><dt><a href="#id2966087">Windows NT4/200x</a></dt><dt><a href="#id2966107">Samba PDC</a></dt></dl></dd><dt><a href="#id2966152">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2966299">Common Errors</a></dt><dd><dl><dt><a href="#id2966313">Policy Does Not Work</a></dt></dl></dd></dl></div><p>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="PolicyMgmt"></a>Chapter23.System and Account Policies</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2926955">Features and Benefits</a></dt><dt><a href="#id2927014">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="#id2927128">Windows 9x/Me Policies</a></dt><dt><a href="#id2927223">Windows NT4 Style Policy Files</a></dt><dt><a href="#id2927356">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="#id2927608">Managing Account/User Policies</a></dt><dd><dl><dt><a href="#id2927714">Samba Editreg Toolset</a></dt><dt><a href="#id2927753">Windows NT4/200x</a></dt><dt><a href="#id2927776">Samba PDC</a></dt></dl></dd><dt><a href="#id2927822">System Startup and Logon Processing Overview</a></dt><dt><a href="#id2927973">Common Errors</a></dt><dd><dl><dt><a href="#id2927986">Policy Does Not Work</a></dt></dl></dd></dl></div><p>
This chapter summarises the current state of knowledge derived from personal
practice and knowledge from samba mailing list subscribers. Before reproduction
of posted information effort has been made to validate the information provided.
Where additional information was uncovered through this validation it is provided
also.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964680"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926955"></a>Features and Benefits</h2></div></div><div></div></div><p>
When MS Windows NT3.5 was introduced the hot new topic was the ability to implement
Group Policies for users and group. Then along came MS Windows NT4 and a few sites
started to adopt this capability. How do we know that? By way of the number of &quot;booboos&quot;
@@ -13016,9 +12214,9 @@ the deployment in many sites. This chapter reviews techniques and methods that c
be used to exploit opportunities for automation of control over user desktops and
network client workstations.
</p><p>
-A tool new to Samba-3 may become an important part of the future Samba Administrators'
+A tool new to Samba may become an important part of the future Samba Administrators'
arsenal. The <b class="command">editreg</b> tool is described in this document.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964732"></a>Creating and Managing System Policies</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2927014"></a>Creating and Managing System Policies</h2></div></div><div></div></div><p>
Under MS Windows platforms, particularly those following the release of MS Windows
NT4 and MS Windows 95) it is possible to create a type of file that would be placed
in the NETLOGON share of a domain controller. As the client logs onto the network
@@ -13047,13 +12245,13 @@ be a step forward, but improved functionality comes at a great price.
Before embarking on the configuration of network and system policies it is highly
advisable to read the documentation available from Microsoft's web site regarding
<a href="http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp" target="_top">
-Implementing Profiles and Policies in Windows NT 4.0 from http://www.microsoft.com/ntserver/management/deployment/planguide/prof_policies.asp</a> available from Microsoft.
+Implementing Profiles and Policies in Windows NT 4.0</a> available from Microsoft.
There are a large number of documents in addition to this old one that should also
be read and understood. Try searching on the Microsoft web site for &quot;Group Policies&quot;.
</p><p>
What follows is a very brief discussion with some helpful notes. The information provided
here is incomplete - you are warned.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964843"></a>Windows 9x/Me Policies</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927128"></a>Windows 9x/Me Policies</h3></div></div><div></div></div><p>
You need the Win98 Group Policy Editor to set Group Profiles up under Windows 9x/Me.
It can be found on the Original full product Win98 installation CD under
<tt class="filename">tools/reskit/netadmin/poledit</tt>. Install this using the
@@ -13079,7 +12277,7 @@ here is incomplete - you are warned.
<tt class="filename">grouppol.inf</tt>. Log off and on again a couple of times and see
if Win98 picks up group policies. Unfortunately this needs to be done on every
Win9x/Me machine that uses group policies.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964391"></a>Windows NT4 Style Policy Files</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927223"></a>Windows NT4 Style Policy Files</h3></div></div><div></div></div><p>
To create or edit <tt class="filename">ntconfig.pol</tt> you must use the NT Server
Policy Editor, <b class="command">poledit.exe</b> which is included with NT4 Server
but <span class="emphasis"><em>not NT Workstation</em></span>. There is a Policy Editor on a NT4
@@ -13100,14 +12298,14 @@ here is incomplete - you are warned.
be extracted as well. It is also possible to downloaded the policy template
files for Office97 and get a copy of the policy editor. Another possible
location is with the Zero Administration Kit available for download from Microsoft.
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2964500"></a>Registry Spoiling</h4></div></div><div></div></div><p>
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2927333"></a>Registry Spoiling</h4></div></div><div></div></div><p>
With NT4 style registry based policy changes, a large number of settings are not
automatically reversed as the user logs off. Since the settings that were in the
NTConfig.POL file were applied to the client machine registry and that apply to the
hive key HKEY_LOCAL_MACHINE are permanent until explicitly reversed. This is known
as tattooing. It can have serious consequences down-stream and the administrator must
be extremely careful not to lock out the ability to manage the machine at a later date.
- </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2964524"></a>MS Windows 200x / XP Professional Policies</h3></div></div><div></div></div><p>
+ </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927356"></a>MS Windows 200x / XP Professional Policies</h3></div></div><div></div></div><p>
Windows NT4 System policies allows setting of registry parameters specific to
users, groups and computers (client workstations) that are members of the NT4
style domain. Such policy file will work with MS Windows 2000 / XP clients also.
@@ -13144,7 +12342,7 @@ here is incomplete - you are warned.
to any number of concurrently applicable (and applied) policy sets (GPOs). Active Directory allows
the administrator to also set filters over the policy settings. No such equivalent capability
exists with NT4 style policy files.
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2964625"></a>Administration of Win2K / XP Policies</h4></div></div><div></div></div><p>
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2927457"></a>Administration of Win2K / XP Policies</h4></div></div><div></div></div><p>
Instead of using the tool called <span class="application">The System Policy Editor</span>, commonly called Poledit (from the
executable name <b class="command">poledit.exe</b>), <span class="acronym">GPOs</span> are created and managed using a
<span class="application">Microsoft Management Console</span> <span class="acronym">(MMC)</span> snap-in as follows:</p><div class="procedure"><ol type="1"><li><p>
@@ -13170,10 +12368,10 @@ here is incomplete - you are warned.
The MS Windows 2000 Resource Kit contains a tool called gpolmig.exe. This tool can be used
to migrate an NT4 NTConfig.POL file into a Windows 200x style GPO. Be VERY careful how you
use this powerful tool. Please refer to the resource kit manuals for specific usage information.
- </p></div></div></div></div><div xmlns:ns80="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2965966"></a>Managing Account/User Policies</h2></div></div><div></div></div><p>
+ </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2927608"></a>Managing Account/User Policies</h2></div></div><div></div></div><p>
Policies can define a specific user's settings or the settings for a group of users. The resulting
policy file contains the registry settings for all users, groups, and computers that will be using
-the policy file. Separate policy files for each user, group, or computer are not not necessary.
+the policy file. Separate policy files for each user, group, or computer are not necessary.
</p><p>
If you create a policy that will be automatically downloaded from validating domain controllers,
you should name the file NTconfig.POL. As system administrator, you have the option of renaming the
@@ -13195,42 +12393,49 @@ In addition to user access controls that may be imposed or applied via system an
in a manner that works in conjunction with user profiles, the user management environment under
MS Windows NT4/200x/XP allows per domain as well as per user account restrictions to be applied.
Common restrictions that are frequently used includes:
-</p><ns80:p>
-</ns80:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Logon Hours</td></tr><tr><td>Password Aging</td></tr><tr><td>Permitted Logon from certain machines only</td></tr><tr><td>Account type (Local or Global)</td></tr><tr><td>User Rights</td></tr></table><ns80:p>
-</ns80:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966066"></a>Samba Editreg Toolset</h3></div></div><div></div></div><p>
- Describe in detail the benefits of <b class="command">editreg</b> and how to use it.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966087"></a>Windows NT4/200x</h3></div></div><div></div></div><p>
+</p><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Logon Hours</p></li><li><p>Password Aging</p></li><li><p>Permitted Logon from certain machines only</p></li><li><p>Account type (Local or Global)</p></li><li><p>User Rights</p></li></ul></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927714"></a>Samba Editreg Toolset</h3></div></div><div></div></div><p>
+ A new tool called <b class="command">editreg</b> is under development. This tool can be used
+ to edit registry files (called NTUser.DAT) that are stored in user and group profiles.
+ NTConfig.POL files have the same structure as the NTUser.DAT file and can be editted using
+ this tool. <b class="command">editreg</b> is being built with the intent to enable NTConfig.POL
+ files to be saved in text format and to permit the building of new NTConfig.POL files with
+ extended capabilities. It is proving difficult to realise this capability, so do not be surprised
+ if this feature does not materialise. Formal capabilities will be announced at the time that
+ this tool is released for production use.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927753"></a>Windows NT4/200x</h3></div></div><div></div></div><p>
The tools that may be used to configure these types of controls from the MS Windows environment are:
The NT4 User Manager for domains, the NT4 System and Group Policy Editor, the registry editor (regedt32.exe).
Under MS Windows 200x/XP this is done using the Microsoft Management Console (MMC) with appropriate
&quot;snap-ins&quot;, the registry editor, and potentially also the NT4 System and Group Policy Editor.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966107"></a>Samba PDC</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927776"></a>Samba PDC</h3></div></div><div></div></div><p>
With a Samba Domain Controller, the new tools for managing of user account and policy information includes:
<b class="command">smbpasswd</b>, <b class="command">pdbedit</b>, <b class="command">net</b>, <b class="command">rpcclient</b>.
The administrator should read the
man pages for these tools and become familiar with their use.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2966152"></a>System Startup and Logon Processing Overview</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2927822"></a>System Startup and Logon Processing Overview</h2></div></div><div></div></div><p>
The following attempts to document the order of processing of system and user policies following a system
reboot and as part of the user logon:
</p><div class="orderedlist"><ol type="1"><li><p>
Network starts, then Remote Procedure Call System Service (RPCSS) and Multiple Universal Naming
Convention Provider (MUP) start
- </p></li><li xmlns:ns81=""><ns81:p>
+ </p></li><li><p>
Where Active Directory is involved, an ordered list of Group Policy Objects (GPOs) is downloaded
and applied. The list may include GPOs that:
-</ns81:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Apply to the location of machines in a Directory</td></tr><tr><td>Apply only when settings have changed</td></tr><tr><td>Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.</td></tr></table><ns81:p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Apply to the location of machines in a Directory</p></li><li><p>Apply only when settings have changed</p></li><li><p>Depend on configuration of scope of applicability: local, site, domain, organizational unit, etc.</p></li></ul></div><p>
No desktop user interface is presented until the above have been processed.
- </ns81:p></li><li><p>
+ </p></li><li><p>
Execution of start-up scripts (hidden and synchronous by default).
</p></li><li><p>
A keyboard action to affect start of logon (Ctrl-Alt-Del).
</p></li><li><p>
User credentials are validated, User profile is loaded (depends on policy settings).
- </p></li><li xmlns:ns82=""><ns82:p>
+ </p></li><li><p>
An ordered list of User GPOs is obtained. The list contents depends on what is configured in respect of:
-</ns82:p><table class="simplelist" border="0" summary="Simple list"><tr><td>Is user a domain member, thus subject to particular policies</td></tr><tr><td>Loopback enablement, and the state of the loopback policy (Merge or Replace)</td></tr><tr><td>Location of the Active Directory itself</td></tr><tr><td>Has the list of GPOs changed. No processing is needed if not changed.</td></tr></table><ns82:p>
- </ns82:p></li><li><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Is user a domain member, thus subject to particular policies</p></li><li><p>Loopback enablement, and the state of the loopback policy (Merge or Replace)</p></li><li><p>Location of the Active Directory itself</p></li><li><p>Has the list of GPOs changed. No processing is needed if not changed.</p></li></ul></div><p>
+ </p></li><li><p>
User Policies are applied from Active Directory. Note: There are several types.
</p></li><li><p>
Logon scripts are run. New to Win2K and Active Directory, logon scripts may be obtained based on Group
@@ -13239,18 +12444,18 @@ reboot and as part of the user logon:
</p></li><li><p>
The User Interface as determined from the GPOs is presented. Note: In a Samba domain (like and NT4
Domain) machine (system) policies are applied at start-up, User policies are applied at logon.
- </p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2966299"></a>Common Errors</h2></div></div><div></div></div><p>
+ </p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2927973"></a>Common Errors</h2></div></div><div></div></div><p>
Policy related problems can be very difficult to diagnose and even more difficult to rectify. The following
collection demonstrates only basic issues.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966313"></a>Policy Does Not Work</h3></div></div><div></div></div><p>
-Question: We have created the <tt class="filename">config.pol</tt> file and put it in the <span class="emphasis"><em>NETLOGON</em></span> share.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927986"></a>Policy Does Not Work</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">We have created the <tt class="filename">config.pol</tt> file and put it in the <span class="emphasis"><em>NETLOGON</em></span> share.
It has made no difference to our Win XP Pro machines, they just don't see it. IT worked fine with Win 98 but does not
-work any longer since we upgraded to Win XP Pro. Any hints?
+work any longer since we upgraded to Win XP Pro. Any hints?</span>&#8221;
</p><p>
-<span class="emphasis"><em>ANSWER:</em></span> Policy files are NOT portable between Windows 9x / Me and MS Windows NT4 / 200x / XP based
+Policy files are NOT portable between Windows 9x / Me and MS Windows NT4 / 200x / XP based
platforms. You need to use the NT4 Group Policy Editor to create a file called <tt class="filename">NTConfig.POL</tt> so that
it is in the correct format for your MS Windows XP Pro clients.
-</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ProfileMgmt"></a>Chapter24.Desktop Profile Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2966416">Features and Benefits</a></dt><dt><a href="#id2966449">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2966490">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2971852">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2972789">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2972854">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2973114">Mandatory profiles</a></dt><dt><a href="#id2973172">Creating/Managing Group Profiles</a></dt><dt><a href="#id2973217">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2973237">MS Windows 9x/Me</a></dt><dt><a href="#id2973385">MS Windows NT4 Workstation</a></dt><dt><a href="#id2973939">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2974443">Common Errors</a></dt><dd><dl><dt><a href="#id2974456">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="#id2974519">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2974737">Changing the default profile</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2966416"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ProfileMgmt"></a>Chapter24.Desktop Profile Management</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2928087">Features and Benefits</a></dt><dt><a href="#id2928120">Roaming Profiles</a></dt><dd><dl><dt><a href="#id2928161">Samba Configuration for Profile Handling</a></dt><dt><a href="#id2928652">Windows Client Profile Configuration Information</a></dt><dt><a href="#id2929902">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="#id2929987">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="#id2930246">Mandatory profiles</a></dt><dt><a href="#id2930304">Creating/Managing Group Profiles</a></dt><dt><a href="#id2930349">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="#id2930369">MS Windows 9x/Me</a></dt><dt><a href="#id2930521">MS Windows NT4 Workstation</a></dt><dt><a href="#id2931076">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="#id2931594">Common Errors</a></dt><dd><dl><dt><a href="#id2931607">Setting up roaming profiles for just a few user's or group's?</a></dt><dt><a href="#id2931676">Can NOT use Roaming Profiles</a></dt><dt><a href="#id2931889">Changing the default profile</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928087"></a>Features and Benefits</h2></div></div><div></div></div><p>
Roaming Profiles are feared by some, hated by a few, loved by many, and a Godsend for
some administrators.
</p><p>
@@ -13263,7 +12468,7 @@ problem to others. In particular, users of mobile computing tools, where often t
be a sustained network connection, are often better served by purely Local Profiles.
This chapter provides information to help the Samba administrator to deal with those
situations also.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2966449"></a>Roaming Profiles</h2></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928120"></a>Roaming Profiles</h2></div></div><div></div></div><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
Roaming profiles support is different for Win9x / Me and Windows NT4/200x.
</p></div><p>
Before discussing how to configure roaming profiles, it is useful to see how
@@ -13276,23 +12481,19 @@ profiles are restricted to being stored in the user's home directory.
</p><p>
Windows NT4/200x clients send a NetSAMLogon RPC request, which contains many fields,
including a separate field for the location of the user's profiles.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2966490"></a>Samba Configuration for Profile Handling</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928161"></a>Samba Configuration for Profile Handling</h3></div></div><div></div></div><p>
This section documents how to configure Samba for MS Windows client profile support.
-</p><div xmlns:ns83="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2966503"></a>NT4/200x User Profiles</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928175"></a>NT4/200x User Profiles</h4></div></div><div></div></div><p>
To support Windows NT4/200x clients, in the [global] section of smb.conf set the
following (for example):
-</p><ns83:p>
-</ns83:p><pre class="programlisting">
- logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath
-</pre><ns83:p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon path = \\profileserver\profileshare\profilepath\%U\moreprofilepath</tt></i></td></tr></table><p>
This is typically implemented like:
-</ns83:p><pre class="programlisting">
- logon path = \\%L\Profiles\%u
-</pre><ns83:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon path = \\%L\Profiles\%u</tt></i></td></tr></table><p>
where %L translates to the name of the Samba server and %u translates to the user name
-</ns83:p><p>
+</p><p>
The default for this option is <tt class="filename">\\%N\%U\profile</tt>,
namely <tt class="filename">\\sambaserver\username\profile</tt>.
The <tt class="filename">\\N%\%U</tt> service is created automatically by the [homes] service. If you are using
@@ -13303,46 +12504,39 @@ semantics of %L and %N, as well as %U and %u.
MS Windows NT/2K clients at times do not disconnect a connection to a server
between logons. It is recommended to NOT use the <i class="parameter"><tt>homes</tt></i>
meta-service name as part of the profile share path.
-</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2966592"></a>Windows 9x / Me User Profiles</h4></div></div><div></div></div><p>
- To support Windows 9x / Me clients, you must use the <i class="parameter"><tt>logon home</tt></i> parameter. Samba has
+</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928283"></a>Windows 9x / Me User Profiles</h4></div></div><div></div></div><p>
+ To support Windows 9x / Me clients, you must use the <a class="indexterm" name="id2928295"></a><i class="parameter"><tt>logon home</tt></i> parameter. Samba has
now been fixed so that <b class="userinput"><tt>net use /home</tt></b> now works as well, and it, too, relies
on the <b class="command">logon home</b> parameter.
</p><p>
By using the logon home parameter, you are restricted to putting Win9x / Me
profiles in the user's home directory. But wait! There is a trick you
can use. If you set the following in the <i class="parameter"><tt>[global]</tt></i> section of your <tt class="filename">smb.conf</tt> file:
-</p><pre class="programlisting">
- logon home = \\%L\%U\.profiles
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon home = \\%L\%U\.profiles</tt></i></td></tr></table><p>
then your Windows 9x / Me clients will dutifully put their clients in a subdirectory
of your home directory called <tt class="filename">.profiles</tt> (thus making them hidden).
</p><p>
Not only that, but <b class="userinput"><tt>net use /home</tt></b> will also work, because of a feature in
Windows 9x / Me. It removes any directory stuff off the end of the home directory area
and only uses the server and share portion. That is, it looks like you
-specified <tt class="filename">\\%L\%U</tt> for <i class="parameter"><tt>logon home</tt></i>.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971667"></a>Mixed Windows 9x / Me and Windows NT4/200x User Profiles</h4></div></div><div></div></div><p>
+specified <tt class="filename">\\%L\%U</tt> for <a class="indexterm" name="id2928398"></a><i class="parameter"><tt>logon home</tt></i>.
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928414"></a>Mixed Windows 9x / Me and Windows NT4/200x User Profiles</h4></div></div><div></div></div><p>
You can support profiles for both Win9X and WinNT clients by setting both the
-<i class="parameter"><tt>logon home</tt></i> and <i class="parameter"><tt>logon path</tt></i> parameters. For example:
-</p><pre class="programlisting">
- logon home = \\%L\%u\.profiles
- logon path = \\%L\profiles\%u
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971703"></a>Disabling Roaming Profile Support</h4></div></div><div></div></div><p>
+<a class="indexterm" name="id2928427"></a><i class="parameter"><tt>logon home</tt></i> and <a class="indexterm" name="id2928441"></a><i class="parameter"><tt>logon path</tt></i> parameters. For example:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon home = \\%L\%u\.profiles</tt></i></td></tr><tr><td><i class="parameter"><tt>logon path = \\%L\profiles\%u</tt></i></td></tr></table></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928482"></a>Disabling Roaming Profile Support</h4></div></div><div></div></div><p>
A question often asked is &#8220;<span class="quote">How may I enforce use of local profiles?</span>&#8221; or
&#8220;<span class="quote">How do I disable Roaming Profiles?</span>&#8221;
</p><p>
There are three ways of doing this:
-</p><div class="variablelist"><dl><dt><span class="term">In <tt class="filename">smb.conf</tt></span></dt><dd xmlns:ns84=""><ns84:p>
+</p><div class="variablelist"><dl><dt><span class="term">In <tt class="filename">smb.conf</tt></span></dt><dd><p>
Affect the following settings and ALL clients
will be forced to use a local profile:
- </ns84:p><pre class="programlisting">
- logon home =
- logon path =
- </pre><ns84:p>
- </ns84:p></dd><dt><span class="term">MS Windows Registry:</span></dt><dd xmlns:ns85=""><ns85:p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon home</tt></i></td></tr><tr><td><i class="parameter"><tt>logon path</tt></i></td></tr></table><p>
+ </p></dd><dt><span class="term">MS Windows Registry:</span></dt><dd><p>
By using the Microsoft Management Console gpedit.msc to instruct your MS Windows XP machine to use only a local profile. This of course modifies registry settings. The full path to the option is:
- </ns85:p><pre class="programlisting">
+
+ </p><pre class="programlisting">
Local Computer Policy\
Computer Configuration\
Administrative Templates\
@@ -13351,8 +12545,8 @@ There are three ways of doing this:
Disable: Only Allow Local User Profiles
Disable: Prevent Roaming Profile Change from Propagating to the Server
- </pre><ns85:p>
- </ns85:p></dd><dt><span class="term">Change of Profile Type:</span></dt><dd><p>
+ </pre><p>
+ </p></dd><dt><span class="term">Change of Profile Type:</span></dt><dd><p>
From the start menu right click on the
My Computer icon, select <span class="guimenuitem">Properties</span>, click on the <span class="guilabel">User Profiles</span>
tab, select the profile you wish to change from Roaming type to Local, click <span class="guibutton">Change Type</span>.
@@ -13364,15 +12558,15 @@ profiles.
The specifics of how to convert a local profile to a roaming profile, or a roaming profile
to a local one vary according to the version of MS Windows you are running. Consult the
Microsoft MS Windows Resource Kit for your version of Windows for specific information.
-</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2971852"></a>Windows Client Profile Configuration Information</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2971860"></a>Windows 9x / Me Profile Setup</h4></div></div><div></div></div><p>
+</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928652"></a>Windows Client Profile Configuration Information</h3></div></div><div></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2928660"></a>Windows 9x / Me Profile Setup</h4></div></div><div></div></div><p>
When a user first logs in on Windows 9X, the file user.DAT is created,
as are folders <tt class="filename">Start Menu</tt>, <tt class="filename">Desktop</tt>,
<tt class="filename">Programs</tt> and <tt class="filename">Nethood</tt>.
These directories and their contents will be merged with the local
versions stored in <tt class="filename">c:\windows\profiles\username</tt> on subsequent logins,
taking the most recent from each. You will need to use the <i class="parameter"><tt>[global]</tt></i>
-options <i class="parameter"><tt>preserve case = yes</tt></i>, <i class="parameter"><tt>short preserve case = yes</tt></i> and
-<i class="parameter"><tt>case sensitive = no</tt></i> in order to maintain capital letters in shortcuts
+options <a class="indexterm" name="id2928716"></a><i class="parameter"><tt>preserve case</tt></i> = yes, <a class="indexterm" name="id2928731"></a><i class="parameter"><tt>short preserve case</tt></i> = yes and
+<a class="indexterm" name="id2928745"></a><i class="parameter"><tt>case sensitive</tt></i> = no in order to maintain capital letters in shortcuts
in any of the profile folders.
</p><p>
The user.DAT file contains all the user's preferences. If you wish to
@@ -13405,11 +12599,11 @@ domain and profiles downloaded from it, if that domain logon server
supports it), user name and user's password.
</p><p>
Once the user has been successfully validated, the Windows 9x / Me machine
-will inform you that <tt class="computeroutput">The user has not logged on before' and asks you
- if you wish to save the user's preferences?</tt> Select <span class="guibutton">yes</span>.
+will inform you that <tt class="computeroutput">The user has not logged on before</tt> and asks you
+<tt class="computeroutput">Do you wish to save the user's preferences?</tt>. Select <span class="guibutton">yes</span>.
</p><p>
Once the Windows 9x / Me client comes up with the desktop, you should be able
-to examine the contents of the directory specified in the <i class="parameter"><tt>logon path</tt></i>
+to examine the contents of the directory specified in the <a class="indexterm" name="id2928932"></a><i class="parameter"><tt>logon path</tt></i>
on the samba server and verify that the <tt class="filename">Desktop</tt>, <tt class="filename">Start Menu</tt>,
<tt class="filename">Programs</tt> and <tt class="filename">Nethood</tt> folders have been created.
</p><p>
@@ -13423,14 +12617,14 @@ the newest folders and short-cuts from each set.
If you have made the folders / files read-only on the samba server,
then you will get errors from the Windows 9x / Me machine on logon and logout, as
it attempts to merge the local and the remote profile. Basically, if
-you have any errors reported by the Windows 9x / Me machine, check the Unix file
+you have any errors reported by the Windows 9x / Me machine, check the UNIX file
permissions and ownership rights on the profile directory contents,
on the samba server.
</p><p>
If you have problems creating user profiles, you can reset the user's
local desktop cache, as shown below. When this user then next logs in,
they will be told that they are logging in &quot;for the first time&quot;.
-</p><div class="orderedlist"><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
Before deleting the contents of the
directory listed in the ProfilePath (this is likely to be
<tt class="filename">c:\windows\profiles\username)</tt>, ask them if they
@@ -13441,7 +12635,7 @@ they will be told that they are logging in &quot;for the first time&quot;.
This will have the effect of removing the local (read-only hidden
system file) user.DAT in their profile directory, as well as the
local &quot;desktop&quot;, &quot;nethood&quot;, &quot;start menu&quot; and &quot;programs&quot; folders.
- </p></div><ol type="1"><li><p>
+ </p></div><div class="orderedlist"><ol type="1"><li><p>
instead of logging in under the [user, password, domain] dialog,
press <span class="guibutton">escape</span>.
</p></li><li><p>
@@ -13458,7 +12652,7 @@ they will be told that they are logging in &quot;for the first time&quot;.
</p></li><li><p>
log off the windows 9x / Me client.
</p></li><li><p>
- check the contents of the profile path (see <i class="parameter"><tt>logon path</tt></i> described
+ check the contents of the profile path (see <a class="indexterm" name="id2929144"></a><i class="parameter"><tt>logon path</tt></i> described
above), and delete the <tt class="filename">user.DAT</tt> or <tt class="filename">user.MAN</tt> file for the user,
making a backup if required.
</p></li></ol></div><p>
@@ -13470,14 +12664,14 @@ If you have access to an Windows NT4/200x server, then first set up roaming prof
and / or netlogons on the Windows NT4/200x server. Make a packet trace, or examine
the example packet traces provided with Windows NT4/200x server, and see what the
differences are with the equivalent samba trace.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2968061"></a>Windows NT4 Workstation</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929201"></a>Windows NT4 Workstation</h4></div></div><div></div></div><p>
When a user first logs in to a Windows NT Workstation, the profile
NTuser.DAT is created. The profile location can be now specified
-through the <i class="parameter"><tt>logon path</tt></i> parameter.
+through the <a class="indexterm" name="id2929214"></a><i class="parameter"><tt>logon path</tt></i> parameter.
</p><p>
There is a parameter that is now available for use with NT Profiles:
-<i class="parameter"><tt>logon drive</tt></i>. This should be set to <tt class="filename">H:</tt> or any other drive, and
-should be used in conjunction with the new &quot;logon home&quot; parameter.
+<a class="indexterm" name="id2929234"></a><i class="parameter"><tt>logon drive</tt></i>. This should be set to <tt class="filename">H:</tt> or any other drive, and
+should be used in conjunction with the new <a class="indexterm" name="id2929256"></a><i class="parameter"><tt>logon home</tt></i> parameter.
</p><p>
The entry for the NT4 profile is a _directory_ not a file. The NT
help on profiles mentions that a directory is also created with a .PDS
@@ -13499,7 +12693,7 @@ turns a profile into a mandatory one.
</p><p>
The case of the profile is significant. The file must be called
<tt class="filename">NTuser.DAT</tt> or, for a mandatory profile, <tt class="filename">NTuser.MAN</tt>.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2968219"></a>Windows 2000/XP Professional</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2929387"></a>Windows 2000/XP Professional</h4></div></div><div></div></div><p>
You must first convert the profile from a local profile to a domain
profile on the MS Windows workstation as follows:
</p><div class="procedure"><ol type="1"><li><p>
@@ -13518,8 +12712,7 @@ profile on the MS Windows workstation as follows:
Click on the 'Look in&quot; area that lists the machine name, when you click
here it will open up a selection box. Click on the domain to which the
profile must be accessible.
- </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>You will need to log on if a logon box opens up. Eg: In the connect
- as: <i class="replaceable"><tt>MIDEARTH</tt></i>\root, password: <i class="replaceable"><tt>mypassword</tt></i>.</p></div></li><li><p>
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>You will need to log on if a logon box opens up. Eg: In the connect as: <i class="replaceable"><tt>DOMAIN</tt></i>\root, password: <i class="replaceable"><tt>mypassword</tt></i>.</p></div></li><li><p>
To make the profile capable of being used by anyone select 'Everyone'
</p></li><li><p>
Click <span class="guibutton">OK</span>. The Selection box will close.
@@ -13527,12 +12720,12 @@ profile on the MS Windows workstation as follows:
Now click on the <span class="guibutton">Ok</span> button to create the profile in the path you
nominated.
</p></li></ol></div><p>
-Done. You now have a profile that can be edited using the samba-3.0.0
+Done. You now have a profile that can be edited using the samba
<b class="command">profiles</b> tool.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Under NT/2K the use of mandatory profiles forces the use of MS Exchange
storage of mail data. That keeps desktop profiles usable.
-</p></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><div class="procedure"><ol type="1"><li><p>
+</p></div><div class="procedure"><p class="title"><b>Procedure24.2.Windows XP Service Pack 1</b></p><ol type="1"><li><p>
This is a security check new to Windows XP (or maybe only
Windows XP service pack 1). It can be disabled via a group policy in
Active Directory. The policy is:</p><p><tt class="filename">Computer Configuration\Administrative Templates\System\User
@@ -13549,7 +12742,7 @@ On the XP workstation log in with an Administrator account.
</p></li><li><p>Click: <span class="guimenu">Start</span>, <span class="guimenuitem">Run</span></p></li><li><p>Type: <b class="userinput"><tt>mmc</tt></b></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>A Microsoft Management Console should appear.</p></li><li><p>Click: <span class="guimenu">File</span>, <span class="guimenuitem">Add/Remove Snap-in...</span>, <span class="guimenuitem">Add</span></p></li><li><p>Double-Click: <span class="guiicon">Group Policy</span></p></li><li><p>Click: <span class="guibutton">Finish</span>, <span class="guibutton">Close</span></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>In the &quot;Console Root&quot; window:</p></li><li><p>Expand: <span class="guiicon">Local Computer Policy</span>, <span class="guiicon">Computer Configuration</span>,
<span class="guiicon">Administrative Templates</span>, <span class="guiicon">System</span>, <span class="guiicon">User Profiles</span></p></li><li><p>Double-Click: <span class="guilabel">Do not check for user ownership of Roaming Profile Folders</span></p></li><li><p>Select: <span class="guilabel">Enabled</span></p></li><li><p>Click: <span class="guibutton">OK</span></p></li><li><p>Close the whole console. You do not need to save the settings (this
refers to the console settings rather than the policies you have
- changed).</p></li><li><p>Reboot</p></li></ol></div></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972789"></a>Sharing Profiles between W9x/Me and NT4/200x/XP workstations</h3></div></div><div></div></div><p>
+ changed).</p></li><li><p>Reboot</p></li></ol></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929902"></a>Sharing Profiles between W9x/Me and NT4/200x/XP workstations</h3></div></div><div></div></div><p>
Sharing of desktop profiles between Windows versions is NOT recommended.
Desktop profiles are an evolving phenomenon and profiles for later versions
of MS Windows clients add features that may interfere with earlier versions
@@ -13560,18 +12753,18 @@ version resulting in loss of profile information content when that user logs
on again with the newer version of MS Windows.
</p><p>
If you then want to share the same Start Menu / Desktop with W9x/Me, you will
-need to specify a common location for the profiles. The smb.conf parameters
-that need to be common are <i class="parameter"><tt>logon path</tt></i> and
-<i class="parameter"><tt>logon home</tt></i>.
+need to specify a common location for the profiles. The <tt class="filename">smb.conf</tt> parameters
+that need to be common are <a class="indexterm" name="id2929938"></a><i class="parameter"><tt>logon path</tt></i> and
+<a class="indexterm" name="id2929953"></a><i class="parameter"><tt>logon home</tt></i>.
</p><p>
If you have this set up correctly, you will find separate <tt class="filename">user.DAT</tt> and
<tt class="filename">NTuser.DAT</tt> files in the same profile directory.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2972854"></a>Profile Migration from Windows NT4/200x Server to Samba</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2929987"></a>Profile Migration from Windows NT4/200x Server to Samba</h3></div></div><div></div></div><p>
There is nothing to stop you specifying any path that you like for the
location of users' profiles. Therefore, you could specify that the
profile be stored on a samba server, or any other SMB server, as long as
that SMB server supports encrypted passwords.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2972871"></a>Windows NT4 Profile Management Tools</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2930004"></a>Windows NT4 Profile Management Tools</h4></div></div><div></div></div><p>
Unfortunately, the Resource Kit information is specific to the version of MS Windows
NT4/200x. The correct resource kit is required for each platform.
</p><p>
@@ -13588,17 +12781,13 @@ domain is not a member of a trust relationship with your NT4 PDC.</p></div></li>
<tt class="filename">c:\temp\foobar</tt></p></li><li><p>Click on the button <span class="guibutton">Change</span> in the <span class="guilabel">Permitted to use</span> box.</p></li><li><p>Click on the group 'Everyone' and then click <span class="guibutton">OK</span>. This closes the
'choose user' box.</p></li><li><p>Now click <span class="guibutton">OK</span>.</p></li></ol></div><p>
Follow the above for every profile you need to migrate.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2973034"></a>Side bar Notes</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2930174"></a>Side bar Notes</h4></div></div><div></div></div><p>
You should obtain the SID of your NT4 domain. You can use smbpasswd to do
-this. Read the man page.</p><p>
-With Samba-3.0.0 alpha code you can import all you NT4 domain accounts
-using the net samsync method. This way you can retain your profile
-settings as well as all your users.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2973056"></a>moveuser.exe</h4></div></div><div></div></div><p>
+this. Read the man page.</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2930188"></a>moveuser.exe</h4></div></div><div></div></div><p>
The W2K professional resource kit has moveuser.exe. moveuser.exe changes
the security of a profile from one user to another. This allows the account
domain to change, and/or the user name to change.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2973072"></a>Get SID</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2930205"></a>Get SID</h4></div></div><div></div></div><p>
You can identify the SID by using GetSID.exe from the Windows NT Server 4.0
Resource Kit.
</p><p>
@@ -13611,7 +12800,7 @@ users who have logged on to this computer. (To find the profile information
for the user whose locally cached profile you want to move, find the SID for
the user with the GetSID.exe utility.) Inside of the appropriate user's
subkey, you will see a string value named ProfileImagePath.
-</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973114"></a>Mandatory profiles</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2930246"></a>Mandatory profiles</h2></div></div><div></div></div><p>
A Mandatory Profile is a profile that the user does NOT have the ability to overwrite.
During the user's session it may be possible to change the desktop environment, but
as the user logs out all changes made will be lost. If it is desired to NOT allow the
@@ -13627,7 +12816,7 @@ file in the copied profile and rename it to NTUser.MAN.
</p><p>
For MS Windows 9x / Me it is the <tt class="filename">User.DAT</tt> file that must be renamed to <tt class="filename">User.MAN</tt> to
affect a mandatory profile.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973172"></a>Creating/Managing Group Profiles</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2930304"></a>Creating/Managing Group Profiles</h2></div></div><div></div></div><p>
Most organisations are arranged into departments. There is a nice benefit in
this fact since usually most users in a department will require the same desktop
applications and the same desktop layout. MS Windows NT4/200x/XP will allow the
@@ -13642,14 +12831,14 @@ the now modified profile.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Be careful with group profiles, if the user who is a member of a group also
has a personal profile, then the result will be a fusion (merge) of the two.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2973217"></a>Default Profile for Windows Users</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2930349"></a>Default Profile for Windows Users</h2></div></div><div></div></div><p>
MS Windows 9x / Me and NT4/200x/XP will use a default profile for any user for whom
a profile does not already exist. Armed with a knowledge of where the default profile
is located on the Windows workstation, and knowing which registry keys affect the path
from which the default profile is created, it is possible to modify the default profile
to one that has been optimised for the site. This has significant administrative
advantages.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973237"></a>MS Windows 9x/Me</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930369"></a>MS Windows 9x/Me</h3></div></div><div></div></div><p>
To enable default per use profiles in Windows 9x / Me you can either use the <span class="application">Windows 98 System
Policy Editor</span> or change the registry directly.
</p><p>
@@ -13661,7 +12850,7 @@ select <span class="guilabel">User Profiles</span>, click on the enable box. Do
To modify the registry directly, launch the <span class="application">Registry Editor</span> (<b class="command">regedit.exe</b>), select the hive
<tt class="filename">HKEY_LOCAL_MACHINE\Network\Logon</tt>. Now add a DWORD type key with the name
&quot;User Profiles&quot;, to enable user profiles set the value to 1, to disable user profiles set it to 0.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2973335"></a>How User Profiles Are Handled in Windows 9x / Me?</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2930472"></a>How User Profiles Are Handled in Windows 9x / Me?</h4></div></div><div></div></div><p>
When a user logs on to a Windows 9x / Me machine, the local profile path,
<tt class="filename">HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ProfileList</tt>, is checked
for an existing entry for that user:
@@ -13677,7 +12866,7 @@ If a User Profile is not found in either location, the Default User Profile from
machine is used and is copied to a newly created folder for the logged on user. At log off, any
changes that the user made are written to the user's local profile. If the user has a roaming
profile, the changes are written to the user's profile on the server.
-</p></div></div><div xmlns:ns86="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973385"></a>MS Windows NT4 Workstation</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930521"></a>MS Windows NT4 Workstation</h3></div></div><div></div></div><p>
On MS Windows NT4 the default user profile is obtained from the location
<tt class="filename">%SystemRoot%\Profiles</tt> which in a default installation will translate to
<tt class="filename">C:\WinNT\Profiles</tt>. Under this directory on a clean install there will be
@@ -13688,7 +12877,7 @@ system users. The <tt class="filename">Default User</tt> directory contains menu
customisable per user depending on the profile settings chosen/created.
</p><p>
When a new user first logs onto an MS Windows NT4 machine a new profile is created from:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>All Users settings</td></tr><tr><td>Default User settings (contains the default NTUser.DAT file)</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>All Users settings</p></li><li><p>Default User settings (contains the default NTUser.DAT file)</p></li></ul></div><p>
When a user logs onto an MS Windows NT4 machine that is a member of a Microsoft security domain
the following steps are followed in respect of profile handling:
</p><div class="procedure"><ol type="1"><li><p>
@@ -13718,15 +12907,15 @@ the following steps are followed in respect of profile handling:
MS Windows NT4 profiles may be <span class="emphasis"><em>Local</em></span> or <span class="emphasis"><em>Roaming</em></span>. A Local profile
will stored in the <tt class="filename">%SystemRoot%\Profiles\%USERNAME%</tt> location. A roaming profile will
also remain stored in the same way, unless the following registry key is created:
-</p><ns86:p>
-</ns86:p><pre class="programlisting">
- HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\
- &quot;DeleteRoamingCache&quot;=dword:00000001
-</pre><ns86:p>
+</p><p>
+</p><pre class="programlisting">
+HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\
+winlogon\&quot;DeleteRoamingCache&quot;=dword:00000001
+</pre><p>
In which case, the local copy (in <tt class="filename">%SystemRoot%\Profiles\%USERNAME%</tt>) will be
deleted on logout.
-</ns86:p><p>
+</p><p>
Under MS Windows NT4 default locations for common resources (like <tt class="filename">My Documents</tt>
may be redirected to a network share by modifying the following registry keys. These changes may be affected
via use of the System Policy Editor (to do so may require that you create your owns template extension
@@ -13739,17 +12928,17 @@ are controlled by entries on Windows NT4 is:
<tt class="filename">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\</tt>
</p><p>
The above hive key contains a list of automatically managed folders. The default entries are:
-</p><ns86:p>
-</ns86:p><div class="table"><a name="id2973733"></a><p class="title"><b>Table24.1.User Shell Folder registry keys default values</b></p><table summary="User Shell Folder registry keys default values" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu </td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr></tbody></table></div><ns86:p>
-</ns86:p><p>
+</p><p>
+</p><div class="table"><a name="id2930872"></a><p class="title"><b>Table24.1.User Shell Folder registry keys default values</b></p><table summary="User Shell Folder registry keys default values" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu </td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr></tbody></table></div><p>
+</p><p>
The registry key that contains the location of the default profile settings is:
</p><p>
<tt class="filename">HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders</tt>
-</p><ns86:p>
+</p><p>
The default entries are:
-</ns86:p><div class="table"><a name="id2973877"></a><p class="title"><b>Table24.2.Defaults of profile settings registry keys</b></p><table summary="Defaults of profile settings registry keys" border="1"><colgroup><col><col></colgroup><tbody><tr><td>Common Desktop</td><td>%SystemRoot%\Profiles\All Users\Desktop</td></tr><tr><td>Common Programs</td><td>%SystemRoot%\Profiles\All Users\Programs</td></tr><tr><td>Common Start Menu</td><td>%SystemRoot%\Profiles\All Users\Start Menu</td></tr><tr><td>Common Startup</td><td>%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup</td></tr></tbody></table></div><ns86:p>
-</ns86:p></div><div xmlns:ns87="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2973939"></a>MS Windows 200x/XP</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="table"><a name="id2931016"></a><p class="title"><b>Table24.2.Defaults of profile settings registry keys</b></p><table summary="Defaults of profile settings registry keys" border="1"><colgroup><col><col></colgroup><tbody><tr><td>Common Desktop</td><td>%SystemRoot%\Profiles\All Users\Desktop</td></tr><tr><td>Common Programs</td><td>%SystemRoot%\Profiles\All Users\Programs</td></tr><tr><td>Common Start Menu</td><td>%SystemRoot%\Profiles\All Users\Start Menu</td></tr><tr><td>Common Startup</td><td>%SystemRoot%\Profiles\All Users\Start Menu\Programs\Startup</td></tr></tbody></table></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931076"></a>MS Windows 200x/XP</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
MS Windows XP Home Edition does use default per user profiles, but can not participate
in domain security, can not log onto an NT/ADS style domain, and thus can obtain the profile
only from itself. While there are benefits in doing this the beauty of those MS Windows
@@ -13797,9 +12986,9 @@ are controlled by entries on Windows 200x/XP is:
<tt class="filename">HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\</tt>
</p><p>
The above hive key contains a list of automatically managed folders. The default entries are:
-</p><ns87:p>
-</ns87:p><div class="table"><a name="id2974132"></a><p class="title"><b>Table24.3.Defaults of default user profile paths registry keys</b></p><table summary="Defaults of default user profile paths registry keys" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Cache</td><td>%USERPROFILE%\Local Settings\Temporary Internet Files</td></tr><tr><td>Cookies</td><td>%USERPROFILE%\Cookies</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>History</td><td>%USERPROFILE%\Local Settings\History</td></tr><tr><td>Local AppData</td><td>%USERPROFILE%\Local Settings\Application Data</td></tr><tr><td>Local Settings</td><td>%USERPROFILE%\Local Settings</td></tr><tr><td>My Pictures</td><td>%USERPROFILE%\My Documents\My Pictures</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>Personal</td><td>%USERPROFILE%\My Documents</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu</td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr><tr><td>Templates</td><td>%USERPROFILE%\Templates</td></tr></tbody></table></div><ns87:p>
-</ns87:p><p>
+</p><p>
+</p><div class="table"><a name="id2931278"></a><p class="title"><b>Table24.3.Defaults of default user profile paths registry keys</b></p><table summary="Defaults of default user profile paths registry keys" border="1"><colgroup><col><col></colgroup><thead><tr><th>Name</th><th>Default Value</th></tr></thead><tbody><tr><td>AppData</td><td>%USERPROFILE%\Application Data</td></tr><tr><td>Cache</td><td>%USERPROFILE%\Local Settings\Temporary Internet Files</td></tr><tr><td>Cookies</td><td>%USERPROFILE%\Cookies</td></tr><tr><td>Desktop</td><td>%USERPROFILE%\Desktop</td></tr><tr><td>Favorites</td><td>%USERPROFILE%\Favorites</td></tr><tr><td>History</td><td>%USERPROFILE%\Local Settings\History</td></tr><tr><td>Local AppData</td><td>%USERPROFILE%\Local Settings\Application Data</td></tr><tr><td>Local Settings</td><td>%USERPROFILE%\Local Settings</td></tr><tr><td>My Pictures</td><td>%USERPROFILE%\My Documents\My Pictures</td></tr><tr><td>NetHood</td><td>%USERPROFILE%\NetHood</td></tr><tr><td>Personal</td><td>%USERPROFILE%\My Documents</td></tr><tr><td>PrintHood</td><td>%USERPROFILE%\PrintHood</td></tr><tr><td>Programs</td><td>%USERPROFILE%\Start Menu\Programs</td></tr><tr><td>Recent</td><td>%USERPROFILE%\Recent</td></tr><tr><td>SendTo</td><td>%USERPROFILE%\SendTo</td></tr><tr><td>Start Menu</td><td>%USERPROFILE%\Start Menu</td></tr><tr><td>Startup</td><td>%USERPROFILE%\Start Menu\Programs\Startup</td></tr><tr><td>Templates</td><td>%USERPROFILE%\Templates</td></tr></tbody></table></div><p>
+</p><p>
There is also an entry called &quot;Default&quot; that has no value set. The default entry is of type <tt class="constant">REG_SZ</tt>, all
the others are of type <tt class="constant">REG_EXPAND_SZ</tt>.
</p><p>
@@ -13814,18 +13003,21 @@ You could also use:
</p><p><tt class="filename">\\<i class="replaceable"><tt>SambaServer</tt></i>\<i class="replaceable"><tt>FolderShare</tt></i>\%USERNAME%</tt></p><p>
in which case the default folders will be stored in the server named <i class="replaceable"><tt>SambaServer</tt></i>
in the share called <i class="replaceable"><tt>FolderShare</tt></i> under a directory that has the name of the MS Windows
-user as seen by the Linux/Unix file system.
+user as seen by the Linux/UNIX file system.
</p><p>
Please note that once you have created a default profile share, you MUST migrate a user's profile
(default or custom) to it.
</p><p>
MS Windows 200x/XP profiles may be <span class="emphasis"><em>Local</em></span> or <span class="emphasis"><em>Roaming</em></span>.
A roaming profile will be cached locally unless the following registry key is created:
-</p><p><tt class="filename">HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\winlogon\&quot;DeleteRoamingCache&quot;=dword:00000001</tt></p><p>
+</p><p>
+</p><pre class="programlisting">
+HKEY_LOCAL_MACHINE\SYSTEM\Software\Microsoft\Windows NT\CurrentVersion\
+ winlogon\&quot;DeleteRoamingCache&quot;=dword:00000001</pre><p>
In which case, the local cache copy will be deleted on logout.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2974443"></a>Common Errors</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2931594"></a>Common Errors</h2></div></div><div></div></div><p>
The following are some typical errors/problems/questions that have been asked.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974456"></a>How does one set up roaming profiles for just one (or a few) user/s or group/s?</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931607"></a>Setting up roaming profiles for just a few user's or group's?</h3></div></div><div></div></div><p>
With samba-2.2.x the choice you have is to enable or disable roaming
profiles support. It is a global only setting. The default is to have
roaming profiles and the default path will locate them in the user's home
@@ -13837,42 +13029,40 @@ those machines on which roaming profile support is NOT wanted it is then
necessary to disable roaming profile handling in the registry of each such
machine.
</p><p>
-With samba-3.0.0 (soon to be released) you can have a global profile
-setting in smb.conf _AND_ you can over-ride this by per-user settings
+With samba-3 you can have a global profile
+setting in <tt class="filename">smb.conf</tt> _AND_ you can over-ride this by per-user settings
using the Domain User Manager (as with MS Windows NT4/ Win 2Kx).
</p><p>
In any case, you can configure only one profile per user. That profile can
be either:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>A profile unique to that user</td></tr><tr><td>A mandatory profile (one the user can not change)</td></tr><tr><td>A group profile (really should be mandatory ie:unchangable)</td></tr></table></div><div xmlns:ns89="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974519"></a>Can NOT use Roaming Profiles</h3></div></div><div></div></div><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>A profile unique to that user</p></li><li><p>A mandatory profile (one the user can not change)</p></li><li><p>A group profile (really should be mandatory ie:unchangable)</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931676"></a>Can NOT use Roaming Profiles</h3></div></div><div></div></div><p>
+A user requested the following:
&#8220;<span class="quote">
- I dont want Roaming profile to be implemented, I just want to give users
- local profiles only.
-...
- Please help me I am totally lost with this error from past two days I tried
- everything and googled around quite a bit but of no help. Please help me.
-</span>&#8221;</p><ns89:p>
-Your choices are:
-
-
-</ns89:p><div class="variablelist"><dl><dt><span class="term">Local profiles</span></dt><dd><p>
- I know of no registry keys that will allow auto-deletion of LOCAL profiles on log out
- </p></dd><dt><span class="term">Roaming profiles</span></dt><dd xmlns:ns88=""><ns88:p>
- </ns88:p><table class="simplelist" border="0" summary="Simple list"><tr><td>can use auto-delete on logout option</td></tr><tr><td>requires a registry key change on workstation</td></tr></table><ns88:p>
-
- Your choices are:
-
- </ns88:p><div class="variablelist"><dl><dt><span class="term">Personal Roaming profiles</span></dt><dd><p>
- - should be preserved on a central server
- - workstations 'cache' (store) a local copy
- - used in case the profile can not be downloaded
- at next logon
- </p></dd><dt><span class="term">Group profiles</span></dt><dd><p>- loaded from a central place</p></dd><dt><span class="term">Mandatory profiles</span></dt><dd><p>
- - can be personal or group
- - can NOT be changed (except by an administrator
- </p></dd></dl></div><ns88:p>
- </ns88:p></dd></dl></div><ns89:p>
-
-</ns89:p><p>
+I do not want Roaming profiles to be implemented. I want to give users a local profile alone. ...
+Please help me I am totally lost with this error. For the past two days I tried everything, I googled
+around but found no useful pointers. Please help me.
+</span>&#8221;</p><p>
+The choices are:
+</p><div class="variablelist"><dl><dt><span class="term">Local profiles:</span></dt><dd><p>
+ I know of no registry keys that will allow auto-deletion of LOCAL profiles on log out
+ </p></dd><dt><span class="term">Roaming profiles:</span></dt><dd><p>
+ As a user logs onto the network a centrally stored profile is copied to the workstation
+ to form a local profile. This local profile will persist (remain on the workstation disk)
+ unless a registry key is changed that will cause this profile to be automatically deleted
+ on logout.
+ </p></dd></dl></div><p>
+The <span class="emphasis"><em>Roaming Profile</em></span> choices are:
+</p><div class="variablelist"><dl><dt><span class="term">Personal Roaming profiles</span></dt><dd><p>
+ These are typically stored in a profile share on a central (or conveniently located
+ local) server.
+ </p><p>
+ Workstations 'cache' (store) a local copy of the profile. This cached copy is used when
+ the profile can not be downloaded at next logon.
+ </p></dd><dt><span class="term">Group profiles</span></dt><dd><p>These are loaded from a central profile server</p></dd><dt><span class="term">Mandatory profiles</span></dt><dd><p>
+ Mandatory profiles can be created for a user as well as for any group that a user
+ is a member of. Mandatory profiles can NOT be changed by ordinary users. Only the administrator
+ can change or reconfigure a mandatory profile.
+ </p></dd></dl></div><p>
A WinNT4/2K/XP profile can vary in size from 130KB to off the scale.
Outlook PST files are most often part of the profile and can be many GB in
size. On average (in a well controlled environment) roaming profile size of
@@ -13886,52 +13076,39 @@ controls of how they can be changed as well as good discipline make up for
a problem free site.
</p><p>
Microsoft's answer to the PST problem is to store all email in an MS
-Exchange Server back-end. But this is another story ...!
-</p><ns89:p>
-So, having LOCAL profiles means:
-
-</ns89:p><table class="simplelist" border="0" summary="Simple list"><tr><td>If lots of users user each machine - lot's of local disk storage needed for local profiles</td></tr><tr><td>Every workstation the user logs into has it's own profile - can be very different from machine to machine</td></tr></table><ns89:p>
-
-On the other hand, having roaming profiles means:
-</ns89:p><table class="simplelist" border="0" summary="Simple list"><tr><td>The network administrator can control EVERY aspect of user profiles</td></tr><tr><td>With the use of mandatory profiles - a drastic reduction in network management overheads</td></tr><tr><td>User unhappiness about not being able to change their profiles soon fades as they get used to being able to work reliably</td></tr></table><ns89:p>
-
-</ns89:p><p>
-I have managed and installed MANY NT/2K networks and have NEVER found one
-where users who move from machine to machine are happy with local
-profiles. In the long run local profiles bite them.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974737"></a>Changing the default profile</h3></div></div><div></div></div><p>&#8220;<span class="quote">
-When the client tries to logon to the PDC it looks for a profile to download
-where do I put this default profile.
+Exchange Server back-end. This removes the need for a PST file.
+</p><p>
+LOCAL profiles mean:
+</p><div class="itemizedlist"><ul type="disc"><li><p>If each machine is used my many users then much local disk storage is needed for local profiles</p></li><li><p>Every workstation the user logs into has it's own profile, these can be very different from machine to machine</p></li></ul></div><p>
+On the other hand, use of roaming profiles means:
+</p><div class="itemizedlist"><ul type="disc"><li><p>The network administrator can control the desktop environment of all users.</p></li><li><p>Use of mandatory profiles drasitcally reduces network management overheads.</p></li><li><p>In the long run users will be experience fewer problems.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2931889"></a>Changing the default profile</h3></div></div><div></div></div><p>
+<span class="emphasis"><em>Question:</em></span>
+&#8220;<span class="quote">
+When the client logs onto the domain controller it searches for a profile to download,
+where do I put this default profile?
</span>&#8221;</p><p>
-Firstly, your samba server need to be configured as a domain controller.
-</p><pre class="programlisting">
- server = user
- os level = 32 (or more)
- domain logons = Yes
-</pre><p>
-Plus you need to have a <i class="parameter"><tt>[netlogon]</tt></i> share that is world readable.
+Firstly, the samba server needs to be configured as a domain controller.
+This can be done by setting in <tt class="filename">smb.conf</tt>:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security = user</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 32 (or more)</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = Yes</tt></i></td></tr></table><p>
+There must be an <i class="parameter"><tt>[netlogon]</tt></i> share that is world readable.
It is a good idea to add a logon script to pre-set printer and
drive connections. There is also a facility for automatically
synchronizing the workstation time clock with that of the logon
server (another good thing to do).
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
To invoke auto-deletion of roaming profile from the local
-workstation cache (disk storage) you need to use the <span class="application">Group Policy Editor</span>
+workstation cache (disk storage) use the <span class="application">Group Policy Editor</span>
to create a file called <tt class="filename">NTConfig.POL</tt> with the appropriate entries. This
file needs to be located in the <i class="parameter"><tt>netlogon</tt></i> share root directory.</p></div><p>
-Oh, of course the windows clients need to be members of the domain.
-Workgroup machines do NOT do network logons - so they never see domain
-profiles.
+Windows clients need to be members of the domain. Workgroup machines do NOT use network logons so
+they do not interoperate with domain profiles.
</p><p>
-Secondly, for roaming profiles you need:
-
- logon path = \\%N\profiles\%U (with some such path)
- logon drive = H: (Z: is the default)
-
- Plus you need a PROFILES share that is world writable.
-</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="pam"></a>Chapter25.PAM based Distributed Authentication</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Langasek</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:vorlon@netexpress.net">vorlon@netexpress.net</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 31, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2976194">Features and Benefits</a></dt><dt><a href="#id2975049">Technical Discussion</a></dt><dd><dl><dt><a href="#id2975066">PAM Configuration Syntax</a></dt><dt><a href="#id2975731">Example System Configurations</a></dt><dt><a href="#id2978164">smb.conf PAM Configuration</a></dt><dt><a href="#id2978221">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2978305">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2978671">Common Errors</a></dt><dd><dl><dt><a href="#id2978685">pam_winbind problem</a></dt></dl></dd></dl></div><p>
+For roaming profiles add to <tt class="filename">smb.conf</tt>:
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>logon path = \\%N\profiles\%U</tt></i></td></tr><tr><td># Default logon drive is Z:</td></tr><tr><td><i class="parameter"><tt>logon drive = H:</tt></i></td></tr><tr><td># This requires a PROFILES share that is world writable.</td></tr></table><p>
+</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="pam"></a>Chapter25.PAM based Distributed Authentication</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Langasek</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:vorlon@netexpress.net">vorlon@netexpress.net</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 31, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2932170">Features and Benefits</a></dt><dt><a href="#id2932418">Technical Discussion</a></dt><dd><dl><dt><a href="#id2932435">PAM Configuration Syntax</a></dt><dt><a href="#id2933099">Example System Configurations</a></dt><dt><a href="#id2933403">smb.conf PAM Configuration</a></dt><dt><a href="#id2933482">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="#id2933565">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="#id2933949">Common Errors</a></dt><dd><dl><dt><a href="#id2933962">pam_winbind problem</a></dt><dt><a href="#id2934050">Winbind is not resolving users and groups</a></dt></dl></dd></dl></div><p>
This chapter you should help you to deploy winbind based authentication on any PAM enabled
-Unix/Linux system. Winbind can be used to enable user level application access authentication
+UNIX/Linux system. Winbind can be used to enable user level application access authentication
from any MS Windows NT Domain, MS Windows 200x Active Directory based domain, or any Samba
based domain environment. It will also help you to configure PAM based local host access
controls that are appropriate to your Samba configuration.
@@ -13939,9 +13116,9 @@ controls that are appropriate to your Samba configuration.
In addition to knowing how to configure winbind into PAM, you will learn generic PAM management
possibilities and in particular how to deploy tools like pam_smbpass.so to your advantage.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
-The use of Winbind require more than PAM configuration alone. Please refer to <a href="#winbind" title="Chapter21.Integrated Logon Support using Winbind">the Winbind chapter</a>.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2976194"></a>Features and Benefits</h2></div></div><div></div></div><p>
-A number of Unix systems (eg: Sun Solaris), as well as the xxxxBSD family and Linux,
+The use of Winbind require more than PAM configuration alone. Please refer to <a href="#winbind" title="Chapter21.Winbind: Use of Domain Accounts">the Winbind chapter</a>.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932170"></a>Features and Benefits</h2></div></div><div></div></div><p>
+A number of UNIX systems (eg: Sun Solaris), as well as the xxxxBSD family and Linux,
now utilize the Pluggable Authentication Modules (PAM) facility to provide all authentication,
authorization and resource control services. Prior to the introduction of PAM, a decision
to use an alternative to the system password database (<tt class="filename">/etc/passwd</tt>)
@@ -13954,38 +13131,38 @@ authentication/authorization infrastructure. PAM is configured either through o
<tt class="filename">/etc/pam.conf</tt> (Solaris), or by editing individual files that are
located in <tt class="filename">/etc/pam.d</tt>.
</p><p>
-On PAM enabled Unix/Linux systems it is an easy matter to configure the system to use any
+On PAM enabled UNIX/Linux systems it is an easy matter to configure the system to use any
authentication backend, so long as the appropriate dynamically loadable library modules
are available for it. The backend may be local to the system, or may be centralised on a
remote server.
</p><p>
PAM support modules are available for:
-</p><div class="variablelist"><dl><dt><span class="term"><tt class="filename">/etc/passwd</tt></span></dt><dd><p>-</p><p>
- There are several PAM modules that interact with this standard Unix user
+</p><div class="variablelist"><dl><dt><span class="term"><tt class="filename">/etc/passwd</tt>:</span></dt><dd><p>
+ There are several PAM modules that interact with this standard UNIX user
database. The most common are called: pam_unix.so, pam_unix2.so, pam_pwdb.so
and pam_userdb.so.
- </p></dd><dt><span class="term">Kerberos</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">Kerberos:</span></dt><dd><p>
The pam_krb5.so module allows the use of any Kerberos compliant server.
This tool is used to access MIT Kerberos, Heimdal Kerberos, and potentially
Microsoft Active Directory (if enabled).
- </p></dd><dt><span class="term">LDAP</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">LDAP:</span></dt><dd><p>
The pam_ldap.so module allows the use of any LDAP v2 or v3 compatible backend
server. Commonly used LDAP backend servers include: OpenLDAP v2.0 and v2.1,
Sun ONE iDentity server, Novell eDirectory server, Microsoft Active Directory.
- </p></dd><dt><span class="term">NetWare Bindery</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">NetWare Bindery:</span></dt><dd><p>
The pam_ncp_auth.so module allows authentication off any bindery enabled
NetWare Core Protocol based server.
- </p></dd><dt><span class="term">SMB Password</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">SMB Password:</span></dt><dd><p>
This module, called pam_smbpass.so, will allow user authentication off
the passdb backend that is configured in the Samba <tt class="filename">smb.conf</tt> file.
- </p></dd><dt><span class="term">SMB Server</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">SMB Server:</span></dt><dd><p>
The pam_smb_auth.so module is the original MS Windows networking authentication
tool. This module has been somewhat outdated by the Winbind module.
- </p></dd><dt><span class="term">Winbind</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">Winbind:</span></dt><dd><p>
The pam_winbind.so module allows Samba to obtain authentication from any
MS Windows Domain Controller. It can just as easily be used to authenticate
users for access to any PAM enabled application.
- </p></dd><dt><span class="term">RADIUS</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">RADIUS:</span></dt><dd><p>
There is a PAM RADIUS (Remote Access Dial-In User Service) authentication
module. In most cases the administrator will need to locate the source code
for this tool and compile and install it themselves. RADIUS protocols are
@@ -13998,12 +13175,12 @@ of distributed samba domain controllers that can provide wide are network bandwi
efficient authentication services for PAM capable systems. In effect, this allows the
deployment of centrally managed and maintained distributed authentication from a single
user account database.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975049"></a>Technical Discussion</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932418"></a>Technical Discussion</h2></div></div><div></div></div><p>
PAM is designed to provide the system administrator with a great deal of flexibility in
configuration of the privilege granting applications of their system. The local
configuration of system security controlled by PAM is contained in one of two places:
either the single system file, /etc/pam.conf; or the /etc/pam.d/ directory.
-</p><div xmlns:ns90="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975066"></a>PAM Configuration Syntax</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932435"></a>PAM Configuration Syntax</h3></div></div><div></div></div><p>
In this section we discuss the correct syntax of and generic options respected by entries to these files.
PAM specific tokens in the configuration file are case insensitive. The module paths, however, are case
sensitive since they indicate a file's name and reflect the case dependence of typical file-systems.
@@ -14017,33 +13194,32 @@ If the PAM authentication module (loadable link library file) is located in the
default location then it is not necessary to specify the path. In the case of
Linux, the default location is <tt class="filename">/lib/security</tt>. If the module
is located outside the default then the path must be specified as:
-</p><ns90:p>
-</ns90:p><pre class="screen">
+</p><p>
+</p><pre class="programlisting">
auth required /other_path/pam_strange_module.so
-</pre><ns90:p>
-</ns90:p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2975122"></a>Anatomy of <tt class="filename">/etc/pam.d</tt> Entries</h4></div></div><div></div></div><p>
+</pre><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2932493"></a>Anatomy of <tt class="filename">/etc/pam.d</tt> Entries</h4></div></div><div></div></div><p>
The remaining information in this subsection was taken from the documentation of the Linux-PAM
project. For more information on PAM, see
-<a href="http://ftp.kernel.org/pub/linux/libs/pam/" target="_top">
-http://ftp.kernel.org/pub/linux/libs/pam</a> The Official Linux-PAM home page.
+<a href="http://ftp.kernel.org/pub/linux/libs/pam/" target="_top">The Official Linux-PAM home page</a>
</p><p>
A general configuration line of the /etc/pam.conf file has the following form:
-</p><ns90:p>
-</ns90:p><pre class="screen">
+</p><p>
+</p><pre class="programlisting">
service-name module-type control-flag module-path args
-</pre><ns90:p>
-</ns90:p><p>
+</pre><p>
+</p><p>
Below, we explain the meaning of each of these tokens. The second (and more recently adopted)
way of configuring Linux-PAM is via the contents of the <tt class="filename">/etc/pam.d/</tt> directory.
Once we have explained the meaning of the above tokens, we will describe this method.
-</p><div class="variablelist"><dl><dt><span class="term">service-name</span></dt><dd><p>-</p><p>
+</p><div class="variablelist"><dl><dt><span class="term">service-name:</span></dt><dd><p>
The name of the service associated with this entry. Frequently the service name is the conventional
name of the given application. For example, `ftpd', `rlogind' and `su', etc. .
</p><p>
There is a special service-name, reserved for defining a default authentication mechanism. It has
the name `OTHER' and may be specified in either lower or upper case characters. Note, when there
is a module specified for a named service, the `OTHER' entries are ignored.
- </p></dd><dt><span class="term">module-type</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">module-type:</span></dt><dd><p>
One of (currently) four types of module. The four types are as follows:
</p><div class="itemizedlist"><ul type="disc"><li><p>
<span class="emphasis"><em>auth:</em></span> this module type provides two aspects of authenticating the user.
@@ -14065,7 +13241,7 @@ Once we have explained the meaning of the above tokens, we will describe this me
<span class="emphasis"><em>password:</em></span> this last module type is required for updating the authentication
token associated with the user. Typically, there is one module for each `challenge/response'
based authentication (auth) module-type.
- </p></li></ul></div></dd><dt><span class="term">control-flag</span></dt><dd><p>-</p><p>
+ </p></li></ul></div></dd><dt><span class="term">control-flag:</span></dt><dd><p>
The control-flag is used to indicate how the PAM library will react to the success or failure of the
module it is associated with. Since modules can be stacked (modules of the same type execute in series,
one after another), the control-flags determine the relative importance of each module. The application
@@ -14109,9 +13285,9 @@ Once we have explained the meaning of the above tokens, we will describe this me
The more elaborate (newer) syntax is much more specific and gives the administrator a great deal of control
over how the user is authenticated. This form of the control flag is delimited with square brackets and
consists of a series of value=action tokens:
- </p><pre class="screen">
- [value1=action1 value2=action2 ...]
- </pre><p>
+ </p><pre class="programlisting">
+[value1=action1 value2=action2 ...]
+</pre><p>
Here, value1 is one of the following return values: success; open_err; symbol_err; service_err;
system_err; buf_err; perm_denied; auth_err; cred_insufficient; authinfo_unavail; user_unknown; maxtries;
new_authtok_reqd; acct_expired; session_err; cred_unavail; cred_expired; cred_err; no_module_data; conv_err;
@@ -14149,8 +13325,8 @@ Once we have explained the meaning of the above tokens, we will describe this me
</p></li></ul></div><p>
Each of the four keywords: required; requisite; sufficient; and optional, have an equivalent expression in
terms of the [...] syntax. They are as follows:
- </p><ns90:p>
- </ns90:p><div class="itemizedlist"><ul type="disc"><li><p>
+ </p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>
required is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=bad]
</p></li><li><p>
requisite is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=die]
@@ -14158,15 +13334,15 @@ Once we have explained the meaning of the above tokens, we will describe this me
sufficient is equivalent to [success=done new_authtok_reqd=done default=ignore]
</p></li><li><p>
optional is equivalent to [success=ok new_authtok_reqd=ok default=ignore]
- </p></li></ul></div><ns90:p>
- </ns90:p><p>
+ </p></li></ul></div><p>
+ </p><p>
Just to get a feel for the power of this new syntax, here is a taste of what you can do with it. With Linux-PAM-0.63,
the notion of client plug-in agents was introduced. This is something that makes it possible for PAM to support
machine-machine authentication using the transport protocol inherent to the client/server application. With the
<span class="emphasis"><em>[ ... value=action ... ]</em></span> control syntax, it is possible for an application to be configured
to support binary prompts with compliant clients, but to gracefully fall over into an alternative authentication
mode for older, legacy, applications.
- </p></dd><dt><span class="term">module-path</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">module-path:</span></dt><dd><p>
The path-name of the dynamically loadable object file; the pluggable module itself. If the first character of the
module path is `/', it is assumed to be a complete path. If this is not the case, the given module path is appended
to the default module path: <tt class="filename">/lib/security</tt> (but see the notes above).
@@ -14177,7 +13353,7 @@ Once we have explained the meaning of the above tokens, we will describe this me
to syslog(3). For a list of generic options see the next section.
</p><p>
Note, if you wish to include spaces in an argument, you should surround that argument with square brackets. For example:
- </p><pre class="screen">
+ </p><pre class="programlisting">
squid auth required pam_mysql.so user=passwd_query passwd=mada \
db=eminence [query=select user_name from internet_service where \
user_name='%u' and password=PASSWORD('%p') and \
@@ -14185,19 +13361,19 @@ squid auth required pam_mysql.so user=passwd_query passwd=mada \
</pre><p>
Note, when using this convention, you can include `[' characters inside the string, and if you wish to include a `]'
character inside the string that will survive the argument parsing, you should use `\['. In other words:
- </p><pre class="screen">
+ </p><pre class="programlisting">
[..[..\]..] --&gt; ..[..]..
</pre><p>
Any line in (one of) the configuration file(s), that is not formatted correctly, will generally tend (erring on the
side of caution) to make the authentication process fail. A corresponding error is written to the system log files
with a call to syslog(3).
- </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975731"></a>Example System Configurations</h3></div></div><div></div></div><p>
+ </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933099"></a>Example System Configurations</h3></div></div><div></div></div><p>
The following is an example <tt class="filename">/etc/pam.d/login</tt> configuration file.
This example had all options been uncommented is probably not usable
as it stacks many conditions before allowing successful completion
of the login process. Essentially all conditions can be disabled
by commenting them out except the calls to <tt class="filename">pam_pwdb.so</tt>.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2975762"></a>PAM: original login config</h4></div></div><div></div></div><pre class="screen">
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2933130"></a>PAM: original login config</h4></div></div><div></div></div><pre class="programlisting">
#%PAM-1.0
# The PAM configuration file for the `login' service
#
@@ -14212,10 +13388,10 @@ session required pam_pwdb.so
# session optional pam_lastlog.so
# password required pam_cracklib.so retry=3
password required pam_pwdb.so shadow md5
-</pre></div><div xmlns:ns91="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2975789"></a>PAM: login using pam_smbpass</h4></div></div><div></div></div><p>
+</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2933157"></a>PAM: login using pam_smbpass</h4></div></div><div></div></div><p>
PAM allows use of replaceable modules. Those available on a sample system include:
-</p><ns91:p><tt class="prompt">$</tt><b class="userinput"><tt>/bin/ls /lib/security</tt></b>
-</ns91:p><pre class="screen">
+</p><p><tt class="prompt">$</tt><b class="userinput"><tt>/bin/ls /lib/security</tt></b>
+</p><pre class="programlisting">
pam_access.so pam_ftp.so pam_limits.so
pam_ncp_auth.so pam_rhosts_auth.so pam_stress.so
pam_cracklib.so pam_group.so pam_listfile.so
@@ -14239,7 +13415,7 @@ hashes. This database is stored in either
<tt class="filename">/usr/local/samba/private/smbpasswd</tt>,
<tt class="filename">/etc/samba/smbpasswd</tt>, or in
<tt class="filename">/etc/samba.d/smbpasswd</tt>, depending on the
-Samba implementation for your Unix/Linux system. The
+Samba implementation for your UNIX/Linux system. The
<tt class="filename">pam_smbpass.so</tt> module is provided by
Samba version 2.2.1 or later. It can be compiled by specifying the
<tt class="option">--with-pam_smbpass</tt> options when running Samba's
@@ -14247,7 +13423,7 @@ Samba version 2.2.1 or later. It can be compiled by specifying the
on the <tt class="filename">pam_smbpass</tt> module, see the documentation
in the <tt class="filename">source/pam_smbpass</tt> directory of the Samba
source distribution.
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# The PAM configuration file for the `login' service
#
@@ -14258,7 +13434,7 @@ password required pam_smbpass.so nodelay
</pre><p>
The following is the PAM configuration file for a particular
Linux system. The default condition uses <tt class="filename">pam_pwdb.so</tt>.
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# The PAM configuration file for the `samba' service
#
@@ -14272,7 +13448,7 @@ smbpasswd database even for basic samba authentication. Such a
decision could also be made for the passwd program and would
thus allow the smbpasswd passwords to be changed using the passwd
program.
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# The PAM configuration file for the `samba' service
#
@@ -14291,24 +13467,24 @@ authentication to be configured in a single central file. The
on the basis that it allows for easier administration. As with all issues in
life though, every decision makes trade-offs, so you may want examine the
PAM documentation for further helpful information.
-</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978164"></a>smb.conf PAM Configuration</h3></div></div><div></div></div><p>
-There is an option in smb.conf called <a href="smb.conf.5.html#OBEYPAMRESTRICTIONS" target="_top">obey pam restrictions</a>.
+</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933403"></a>smb.conf PAM Configuration</h3></div></div><div></div></div><p>
+ There is an option in smb.conf called <a class="indexterm" name="id2933413"></a><i class="parameter"><tt>obey pam restrictions</tt></i>.
The following is from the on-line help for this option in SWAT;
</p><p>
-When Samba-3 is configured to enable PAM support (i.e.
+When Samba is configured to enable PAM support (i.e.
<tt class="option">--with-pam</tt>), this parameter will
control whether or not Samba should obey PAM's account
and session management directives. The default behavior
is to use PAM for clear text authentication only and to
ignore any account or session management. Note that Samba always
ignores PAM for authentication in the case of
-<a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords = yes</a>.
+<a class="indexterm" name="id2933444"></a><i class="parameter"><tt>encrypt passwords</tt></i> = yes.
The reason is that PAM modules cannot support the challenge/response
authentication mechanism needed in the presence of SMB
password encryption.
-</p><p>Default: <i class="parameter"><tt>obey pam restrictions = no</tt></i></p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978221"></a>Remote CIFS Authentication using winbindd.so</h3></div></div><div></div></div><p>
+</p><p>Default: <a class="indexterm" name="id2933465"></a><i class="parameter"><tt>obey pam restrictions</tt></i> = no</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933482"></a>Remote CIFS Authentication using winbindd.so</h3></div></div><div></div></div><p>
All operating systems depend on the provision of users credentials acceptable to the platform.
-Unix requires the provision of a user identifier (UID) as well as a group identifier (GID).
+UNIX requires the provision of a user identifier (UID) as well as a group identifier (GID).
These are both simple integer type numbers that are obtained from a password backend such
as <tt class="filename">/etc/passwd</tt>.
</p><p>
@@ -14332,7 +13508,7 @@ Microsoft Active Directory Service (ADS) in so far as reduction of wide area net
The rid to unix id database is the only location where the user and group mappings are
stored by winbindd. If this file is deleted or corrupted, there is no way for winbindd
to determine which user and group ids correspond to Windows NT user and group rids.
-</p></div></div><div xmlns:ns92="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978305"></a>Password Synchronization using pam_smbpass.so</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933565"></a>Password Synchronization using pam_smbpass.so</h3></div></div><div></div></div><p>
pam_smbpass is a PAM module which can be used on conforming systems to
keep the smbpasswd (Samba password) database in sync with the unix
password file. PAM (Pluggable Authentication Modules) is an API supported
@@ -14343,26 +13519,25 @@ This module authenticates a local smbpasswd user database. If you require
support for authenticating against a remote SMB server, or if you're
concerned about the presence of suid root binaries on your system, it is
recommended that you use pam_winbind instead.
-</p><ns92:p>
+</p><p>
Options recognized by this module are as follows:
-</ns92:p><div class="table"><a name="id2978335"></a><p class="title"><b>Table25.1.Options recognized by pam_smbpass</b></p><table summary="Options recognized by pam_smbpass" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">debug</td><td align="left">log more debugging info</td></tr><tr><td align="left">audit</td><td align="left">like debug, but also logs unknown usernames</td></tr><tr><td align="left">use_first_pass</td><td align="left">don't prompt the user for passwords; take them from PAM_ items instead</td></tr><tr><td align="left">try_first_pass</td><td align="left">try to get the password from a previous PAM module, fall back to prompting the user</td></tr><tr><td align="left">use_authtok</td><td align="left">like try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)</td></tr><tr><td align="left">not_set_pass</td><td align="left">don't make passwords used by this module available to other modules.</td></tr><tr><td align="left">nodelay</td><td align="left">don't insert ~1 second delays on authentication failure.</td></tr><tr><td align="left">nullok</td><td align="left">null passwords are allowed.</td></tr><tr><td align="left">nonull</td><td align="left">null passwords are not allowed. Used to override the Samba configuration.</td></tr><tr><td align="left">migrate</td><td align="left">only meaningful in an &quot;auth&quot; context; used to update smbpasswd file with a password used for successful authentication.</td></tr><tr><td align="left">smbconf=<i class="replaceable"><tt>file</tt></i></td><td align="left">specify an alternate path to the <tt class="filename">smb.conf</tt> file.</td></tr></tbody></table></div><ns92:p>
-</ns92:p><ns92:p>
-Thanks go to the following people:
-</ns92:p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="mailto:morgan@transmeta.com" target="_top">Andrew Morgan</a>, for providing the Linux-PAM
- framework, without which none of this would have happened</td></tr><tr><td><a href="gafton@redhat.com" target="_top">Christian Gafton</a> and Andrew Morgan again, for the
- pam_pwdb module upon which pam_smbpass was originally based</td></tr><tr><td><a href="lkcl@switchboard.net" target="_top">Luke Leighton</a> for being receptive to the idea,
+</p><div class="table"><a name="id2933597"></a><p class="title"><b>Table25.1.Options recognized by pam_smbpass</b></p><table summary="Options recognized by pam_smbpass" border="1"><colgroup><col align="left"><col align="justify"></colgroup><tbody><tr><td align="left">debug</td><td align="justify">log more debugging info</td></tr><tr><td align="left">audit</td><td align="justify">like debug, but also logs unknown usernames</td></tr><tr><td align="left">use_first_pass</td><td align="justify">don't prompt the user for passwords; take them from PAM_ items instead</td></tr><tr><td align="left">try_first_pass</td><td align="justify">try to get the password from a previous PAM module, fall back to prompting the user</td></tr><tr><td align="left">use_authtok</td><td align="justify">like try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)</td></tr><tr><td align="left">not_set_pass</td><td align="justify">don't make passwords used by this module available to other modules.</td></tr><tr><td align="left">nodelay</td><td align="justify">don't insert ~1 second delays on authentication failure.</td></tr><tr><td align="left">nullok</td><td align="justify">null passwords are allowed.</td></tr><tr><td align="left">nonull</td><td align="justify">null passwords are not allowed. Used to override the Samba configuration.</td></tr><tr><td align="left">migrate</td><td align="justify">only meaningful in an &quot;auth&quot; context; used to update smbpasswd file with a password used for successful authentication.</td></tr><tr><td align="left">smbconf=<i class="replaceable"><tt>file</tt></i></td><td align="justify">specify an alternate path to the <tt class="filename">smb.conf</tt> file.</td></tr></tbody></table></div><p>
+</p><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p><a href="mailto:morgan@transmeta.com" target="_top">Andrew Morgan</a>, for providing the Linux-PAM
+ framework, without which none of this would have happened</p></li><li><p><a href="mailto:gafton@redhat.com" target="_top">Christian Gafton</a> and Andrew Morgan again, for the
+ pam_pwdb module upon which pam_smbpass was originally based</p></li><li><p><a href="mailto:lkcl@switchboard.net" target="_top">Luke Leighton</a> for being receptive to the idea,
and for the occasional good-natured complaint about the project's status
- that keep me working on it :)</td></tr></table><ns92:p>.
-</ns92:p><p>
+ that keep me working on it :)</p></li></ul></div><p>.
+</p><p>
The following are examples of the use of pam_smbpass.so in the format of Linux
<tt class="filename">/etc/pam.d/</tt> files structure. Those wishing to implement this
tool on other platforms will need to adapt this appropriately.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2978537"></a>Password Synchronisation Configuration</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2933814"></a>Password Synchronisation Configuration</h4></div></div><div></div></div><p>
A sample PAM configuration that shows the use of pam_smbpass to make
sure private/smbpasswd is kept in sync when /etc/passwd (/etc/shadow)
is changed. Useful when an expired password might be changed by an
application (such as ssh).
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# password-sync
#
@@ -14373,13 +13548,13 @@ password requisite pam_cracklib.so retry=3
password requisite pam_unix.so shadow md5 use_authtok try_first_pass
password required pam_smbpass.so nullok use_authtok try_first_pass
session required pam_unix.so
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2978569"></a>Password Migration Configuration</h4></div></div><div></div></div><p>
+</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2933846"></a>Password Migration Configuration</h4></div></div><div></div></div><p>
A sample PAM configuration that shows the use of pam_smbpass to migrate
from plaintext to encrypted passwords for Samba. Unlike other methods,
this can be used for users who have never connected to Samba shares:
password migration takes place when users ftp in, login using ssh, pop
their mail, etc.
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# password-migration
#
@@ -14392,11 +13567,11 @@ password requisite pam_cracklib.so retry=3
password requisite pam_unix.so shadow md5 use_authtok try_first_pass
password optional pam_smbpass.so nullok use_authtok try_first_pass
session required pam_unix.so
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2978605"></a>Mature Password Configuration</h4></div></div><div></div></div><p>
+</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2933883"></a>Mature Password Configuration</h4></div></div><div></div></div><p>
A sample PAM configuration for a 'mature' smbpasswd installation.
private/smbpasswd is fully populated, and we consider it an error if
-the smbpasswd doesn't exist or doesn't match the Unix password.
-</p><pre class="screen">
+the smbpasswd doesn't exist or doesn't match the UNIX password.
+</p><pre class="programlisting">
#%PAM-1.0
# password-mature
#
@@ -14407,11 +13582,11 @@ password requisite pam_cracklib.so retry=3
password requisite pam_unix.so shadow md5 use_authtok try_first_pass
password required pam_smbpass.so use_authtok use_first_pass
session required pam_unix.so
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2978637"></a>Kerberos Password Integration Configuration</h4></div></div><div></div></div><p>
+</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2933915"></a>Kerberos Password Integration Configuration</h4></div></div><div></div></div><p>
A sample PAM configuration that shows pam_smbpass used together with
pam_krb5. This could be useful on a Samba PDC that is also a member of
a Kerberos realm.
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# kdc-pdc
#
@@ -14423,13 +13598,15 @@ password requisite pam_cracklib.so retry=3
password optional pam_smbpass.so nullok use_authtok try_first_pass
password required pam_krb5.so use_authtok try_first_pass
session required pam_krb5.so
-</pre></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2978671"></a>Common Errors</h2></div></div><div></div></div><p>
+</pre></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933949"></a>Common Errors</h2></div></div><div></div></div><p>
PAM can be a very fickle and sensitive to configuration glitches. Here we look at a few cases from
the Samba mailing list.
-</p><div xmlns:ns93="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978685"></a>pam_winbind problem</h3></div></div><div></div></div><p>
- I have the following PAM configuration:
- </p><ns93:p>
-</ns93:p><pre class="screen">
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933962"></a>pam_winbind problem</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">
+ I have the following PAM configuration:
+ </span>&#8221;
+ </p><p>
+</p><pre class="programlisting">
auth required /lib/security/pam_securetty.so
auth sufficient /lib/security/pam_winbind.so
auth sufficient /lib/security/pam_unix.so use_first_pass nullok
@@ -14438,19 +13615,62 @@ auth required /lib/security/pam_nologin.so
account required /lib/security/pam_stack.so service=system-auth
account required /lib/security/pam_winbind.so
password required /lib/security/pam_stack.so service=system-auth
-</pre><ns93:p>
-</ns93:p><p>
+</pre><p>
+ </p><p>
+ &#8220;<span class="quote">
When I open a new console with [ctrl][alt][F1], then I cant log in with my user &quot;pitie&quot;.
I've tried with user &quot;scienceu+pitie&quot; also.
+</span>&#8221;
</p><p>
- Answer: The problem may lie with your inclusion of <i class="parameter"><tt>pam_stack.so
+ The problem may lie with your inclusion of <i class="parameter"><tt>pam_stack.so
service=system-auth</tt></i>. That file often contains a lot of stuff that may
duplicate what you're already doing. Try commenting out the pam_stack lines
for auth and account and see if things work. If they do, look at
<tt class="filename">/etc/pam.d/system-auth</tt> and copy only what you need from it into your
<tt class="filename">/etc/pam.d/login</tt> file. Alternatively, if you want all services to use
winbind, you can put the winbind-specific stuff in <tt class="filename">/etc/pam.d/system-auth</tt>.
- </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="integrate-ms-networks"></a>Chapter26.Integrating MS Windows networks with Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> (Jan 01 2001) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2980428">Features and Benefits</a></dt><dt><a href="#id2980452">Background Information</a></dt><dt><a href="#id2980497">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="#id2980549">/etc/hosts</a></dt><dt><a href="#id2980673">/etc/resolv.conf</a></dt><dt><a href="#id2978824">/etc/host.conf</a></dt><dt><a href="#id2978866">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2978954">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2979079">The NetBIOS Name Cache</a></dt><dt><a href="#id2979124">The LMHOSTS file</a></dt><dt><a href="#id2979238">HOSTS file</a></dt><dt><a href="#id2979270">DNS Lookup</a></dt><dt><a href="#id2979295">WINS Lookup</a></dt></dl></dd><dt><a href="#id2979366">Common Errors</a></dt><dd><dl><dt><a href="#id2979382">My Boomerang Won't Come Back</a></dt><dt><a href="#id2979413">Very Slow Network Connections</a></dt><dt><a href="#id2979464">Samba server name change problem</a></dt></dl></dd></dl></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2934050"></a>Winbind is not resolving users and groups</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">
+ My smb.conf file is correctly configured. I have specified
+ <a class="indexterm" name="id2934064"></a><i class="parameter"><tt>idmap uid</tt></i> = 12000,
+ and <a class="indexterm" name="id2934079"></a><i class="parameter"><tt>idmap gid</tt></i> = 3000-3500
+ and <b class="command">winbind</b> is running. When I do the following it all works fine.
+</span>&#8221;
+ </p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>wbinfo -u</tt></b>
+MIDEARTH+maryo
+MIDEARTH+jackb
+MIDEARTH+ameds
+...
+MIDEARTH+root
+
+<tt class="prompt">root# </tt><b class="userinput"><tt>wbinfo -g</tt></b>
+MIDEARTH+Domain Users
+MIDEARTH+Domain Admins
+MIDEARTH+Domain Guests
+...
+MIDEARTH+Accounts
+
+<tt class="prompt">root# </tt><b class="userinput"><tt>getent passwd</tt></b>
+root:x:0:0:root:/root:/bin/bash
+bin:x:1:1:bin:/bin:/bin/bash
+...
+maryo:x:15000:15003:Mary Orville:/home/MIDEARTH/maryo:/bin/false
+</pre><p>
+ &#8220;<span class="quote">
+ But the following command just fails:
+</span>&#8221;
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>chown 'maryo' a_file</tt></b>
+chown: `maryo': invalid user
+</pre><p>
+&#8220;<span class="quote">
+This is driving me nuts! What can be wrong?
+</span>&#8221;
+ </p><p>
+ Your system is likely running <b class="command">nscd</b>, the name service
+ caching daemon. Shut it down, do NOT restart it! You will find your problem resolved.
+ </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="integrate-ms-networks"></a>Chapter26.Integrating MS Windows networks with Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> (Jan 01 2001) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2934288">Features and Benefits</a></dt><dt><a href="#id2934312">Background Information</a></dt><dt><a href="#id2934378">Name Resolution in a pure UNIX/Linux world</a></dt><dd><dl><dt><a href="#id2934434">/etc/hosts</a></dt><dt><a href="#id2934584">/etc/resolv.conf</a></dt><dt><a href="#id2934626">/etc/host.conf</a></dt><dt><a href="#id2934679">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="#id2934793">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="#id2935103">The NetBIOS Name Cache</a></dt><dt><a href="#id2935167">The LMHOSTS file</a></dt><dt><a href="#id2935329">HOSTS file</a></dt><dt><a href="#id2935361">DNS Lookup</a></dt><dt><a href="#id2935393">WINS Lookup</a></dt></dl></dd><dt><a href="#id2935511">Common Errors</a></dt><dd><dl><dt><a href="#id2935527">Pinging works only in one way</a></dt><dt><a href="#id2935562">Very Slow Network Connections</a></dt><dt><a href="#id2935612">Samba server name change problem</a></dt></dl></dd></dl></div><a class="indexterm" name="id2934255"></a><p>
This section deals with NetBIOS over TCP/IP name to IP address resolution. If
your MS Windows clients are NOT configured to use NetBIOS over TCP/IP then this
section does not apply to your installation. If your installation involves use of
@@ -14461,15 +13681,15 @@ NetBIOS over TCP/IP then this section may help you to resolve networking problem
to NOT run NetBEUI at all. Note also that there is NO such thing as
NetBEUI over TCP/IP - the existence of such a protocol is a complete
and utter mis-apprehension.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2980428"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2934288"></a>Features and Benefits</h2></div></div><div></div></div><p>
Many MS Windows network administrators have never been exposed to basic TCP/IP
-networking as it is implemented in a Unix/Linux operating system. Likewise, many Unix and
+networking as it is implemented in a UNIX/Linux operating system. Likewise, many UNIX and
Linux administrators have not been exposed to the intricacies of MS Windows TCP/IP based
networking (and may have no desire to be either).
</p><p>
This chapter gives a short introduction to the basics of how a name can be resolved to
it's IP address for each operating system environment.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2980452"></a>Background Information</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2934312"></a>Background Information</h2></div></div><div></div></div><p>
Since the introduction of MS Windows 2000 it is possible to run MS Windows networking
without the use of NetBIOS over TCP/IP. NetBIOS over TCP/IP uses UDP port 137 for NetBIOS
name resolution and uses TCP port 139 for NetBIOS session services. When NetBIOS over
@@ -14482,17 +13702,19 @@ Name Service or WINS), TCP port 139 AND TCP port 445 (for actual file and print
</p></div><p>
When NetBIOS over TCP/IP is disabled the use of DNS is essential. Most installations that
disable NetBIOS over TCP/IP today use MS Active Directory Service (ADS). ADS requires
+<a class="indexterm" name="id2934352"></a>
Dynamic DNS with Service Resource Records (SRV RR) and with Incremental Zone Transfers (IXFR).
+<a class="indexterm" name="id2934365"></a>
Use of DHCP with ADS is recommended as a further means of maintaining central control
over client workstation network configuration.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2980497"></a>Name Resolution in a pure Unix/Linux world</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2934378"></a>Name Resolution in a pure UNIX/Linux world</h2></div></div><div></div></div><p>
The key configuration files covered in this section are:
-</p><div class="itemizedlist"><ul type="disc"><li><p><tt class="filename">/etc/hosts</tt></p></li><li><p><tt class="filename">/etc/resolv.conf</tt></p></li><li><p><tt class="filename">/etc/host.conf</tt></p></li><li><p><tt class="filename">/etc/nsswitch.conf</tt></p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2980549"></a><tt class="filename">/etc/hosts</tt></h3></div></div><div></div></div><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p><tt class="filename">/etc/hosts</tt></p></li><li><p><tt class="filename">/etc/resolv.conf</tt></p></li><li><p><tt class="filename">/etc/host.conf</tt></p></li><li><p><tt class="filename">/etc/nsswitch.conf</tt></p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2934434"></a><tt class="filename">/etc/hosts</tt></h3></div></div><div></div></div><p>
Contains a static list of IP addresses and names.
eg:
-</p><pre class="screen">
- 127.0.0.1 localhost localhost.localdomain
- 192.168.1.1 bigbox.caldera.com bigbox alias4box
+</p><pre class="programlisting">
+127.0.0.1 localhost localhost.localdomain
+192.168.1.1 bigbox.caldera.com bigbox alias4box
</pre><p>
The purpose of <tt class="filename">/etc/hosts</tt> is to provide a
name resolution mechanism so that uses do not need to remember
@@ -14503,7 +13725,7 @@ layer communicate not via IP addresses but rather using the Media
Access Control address, or MAC address. IP addresses are currently
32 bits in length and are typically presented as four (4) decimal
numbers that are separated by a dot (or period). eg: 168.192.1.1.
-</p><p>
+</p><a class="indexterm" name="id2934484"></a><p>
MAC Addresses use 48 bits (or 6 bytes) and are typically represented
as two digit hexadecimal numbers separated by colons. eg:
40:8e:0a:12:34:56
@@ -14536,15 +13758,15 @@ MAC addresses only; their own unique address and the address
ff:ff:ff:ff:ff:ff. The reply packet from an ARP request will
contain the MAC address and the primary IP address for each
interface.
-</p><p>
+</p><a class="indexterm" name="id2934556"></a><p>
The <tt class="filename">/etc/hosts</tt> file is foundational to all
-Unix/Linux TCP/IP installations and as a minimum will contain
+UNIX/Linux TCP/IP installations and as a minimum will contain
the localhost and local network interface IP addresses and the
primary names by which they are known within the local machine.
This file helps to prime the pump so that a basic level of name
resolution can exist before any other method of name resolution
becomes available.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2980673"></a><tt class="filename">/etc/resolv.conf</tt></h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2934584"></a><tt class="filename">/etc/resolv.conf</tt></h3></div></div><div></div></div><p>
This file tells the name resolution libraries:
</p><div class="itemizedlist"><ul type="disc"><li><p>The name of the domain to which the machine
belongs
@@ -14554,41 +13776,41 @@ This file tells the name resolution libraries:
</p></li><li><p>The name or IP address of available Domain
Name Servers that may be asked to perform name to address
translation lookups
- </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978824"></a><tt class="filename">/etc/host.conf</tt></h3></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2934626"></a><tt class="filename">/etc/host.conf</tt></h3></div></div><div></div></div><a class="indexterm" name="id2934639"></a><p>
<tt class="filename">/etc/host.conf</tt> is the primary means by
which the setting in /etc/resolv.conf may be affected. It is a
critical configuration file. This file controls the order by
which name resolution may proceed. The typical structure is:
-</p><pre class="screen">
- order hosts,bind
- multi on
+</p><pre class="programlisting">
+order hosts,bind
+multi on
</pre><p>
then both addresses should be returned. Please refer to the
man page for host.conf for further details.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978866"></a><tt class="filename">/etc/nsswitch.conf</tt></h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2934679"></a><tt class="filename">/etc/nsswitch.conf</tt></h3></div></div><div></div></div><a class="indexterm" name="id2934691"></a><p>
This file controls the actual name resolution targets. The
file typically has resolver object specifications as follows:
-</p><pre class="screen">
- # /etc/nsswitch.conf
- #
- # Name Service Switch configuration file.
- #
+</p><pre class="programlisting">
+# /etc/nsswitch.conf
+#
+# Name Service Switch configuration file.
+#
- passwd: compat
- # Alternative entries for password authentication are:
- # passwd: compat files nis ldap winbind
- shadow: compat
- group: compat
+passwd: compat
+# Alternative entries for password authentication are:
+# passwd: compat files nis ldap winbind
+shadow: compat
+group: compat
- hosts: files nis dns
- # Alternative entries for host name resolution are:
- # hosts: files dns nis nis+ hesiod db compat ldap wins
- networks: nis files dns
+hosts: files nis dns
+# Alternative entries for host name resolution are:
+# hosts: files dns nis nis+ hesiod db compat ldap wins
+networks: nis files dns
- ethers: nis files
- protocols: nis files
- rpc: nis files
- services: nis files
+ethers: nis files
+protocols: nis files
+rpc: nis files
+services: nis files
</pre><p>
Of course, each of these mechanisms requires that the appropriate
facilities and/or services are correctly configured.
@@ -14596,7 +13818,7 @@ facilities and/or services are correctly configured.
It should be noted that unless a network request/message must be
sent, TCP/IP networks are silent. All TCP/IP communications assumes a
principal of speaking only when necessary.
-</p><p>
+</p><a class="indexterm" name="id2934744"></a><p>
Starting with version 2.2.0 samba has Linux support for extensions to
the name service switch infrastructure so that linux clients will
be able to obtain resolution of MS Windows NetBIOS names to IP
@@ -14609,7 +13831,7 @@ the <tt class="filename">/etc/nsswitch.conf</tt> file. At this point it
will be possible to ping any MS Windows machine by its NetBIOS
machine name, so long as that machine is within the workgroup to
which both the samba machine and the MS Windows machine belong.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2978954"></a>Name resolution as used within MS Windows networking</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2934793"></a>Name resolution as used within MS Windows networking</h2></div></div><div></div></div><p>
MS Windows networking is predicated about the name each machine
is given. This name is known variously (and inconsistently) as
the &quot;computer name&quot;, &quot;machine name&quot;, &quot;networking name&quot;, &quot;netbios name&quot;,
@@ -14624,25 +13846,14 @@ name is therefore registered for each service type that is provided by
the client/server.
</p><p>
The following are typical NetBIOS name/service type registrations:
-</p><pre class="screen">
- Unique NetBIOS Names:
- MACHINENAME&lt;00&gt; = Server Service is running on MACHINENAME
- MACHINENAME&lt;03&gt; = Generic Machine Name (NetBIOS name)
- MACHINENAME&lt;20&gt; = LanMan Server service is running on MACHINENAME
- WORKGROUP&lt;1b&gt; = Domain Master Browser
-
- Group Names:
- WORKGROUP&lt;03&gt; = Generic Name registered by all members of WORKGROUP
- WORKGROUP&lt;1c&gt; = Domain Controllers / Netlogon Servers
- WORKGROUP&lt;1d&gt; = Local Master Browsers
- WORKGROUP&lt;1e&gt; = Internet Name Resolvers
-</pre><p>
+</p><div class="table"><a name="id2934846"></a><p class="title"><b>Table26.1.Unique NetBIOS names</b></p><table summary="Unique NetBIOS names" border="1"><colgroup><col align="left"><col align="justify"></colgroup><tbody><tr><td align="left">MACHINENAME&lt;00&gt;</td><td align="justify">Server Service is running on MACHINENAME</td></tr><tr><td align="left">MACHINENAME&lt;03&gt;</td><td align="justify">Generic Machine Name (NetBIOS name)</td></tr><tr><td align="left">MACHINENAME&lt;20&gt;</td><td align="justify">LanMan Server service is running on MACHINENAME</td></tr><tr><td align="left">WORKGROUP&lt;1b&gt;</td><td align="justify">Domain Master Browser</td></tr></tbody></table></div><div class="table"><a name="id2934916"></a><p class="title"><b>Table26.2.Group Names</b></p><table summary="Group Names" border="1"><colgroup><col align="left"><col align="justify"></colgroup><tbody><tr><td align="left">WORKGROUP&lt;03&gt;</td><td align="justify">Generic Name registered by all members of WORKGROUP</td></tr><tr><td align="left">WORKGROUP&lt;1c&gt;</td><td align="justify">Domain Controllers / Netlogon Servers</td></tr><tr><td align="left">WORKGROUP&lt;1d&gt;</td><td align="justify">Local Master Browsers</td></tr><tr><td align="left">WORKGROUP&lt;1e&gt;</td><td align="justify">Internet Name Resolvers</td></tr></tbody></table></div><p>
+<a class="indexterm" name="id2934988"></a>
It should be noted that all NetBIOS machines register their own
names as per the above. This is in vast contrast to TCP/IP
installations where traditionally the system administrator will
determine in the /etc/hosts or in the DNS database what names
are associated with each IP address.
-</p><p>
+</p><a class="indexterm" name="id2935003"></a><p>
One further point of clarification should be noted, the <tt class="filename">/etc/hosts</tt>
file and the DNS records do not provide the NetBIOS name type information
that MS Windows clients depend on to locate the type of service that may
@@ -14680,7 +13891,7 @@ NBT or NetBT, the NetBIOS over TCP/IP.
MS Windows machines use a complex array of name resolution mechanisms.
Since we are primarily concerned with TCP/IP this demonstration is
limited to this area.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979079"></a>The NetBIOS Name Cache</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935103"></a>The NetBIOS Name Cache</h3></div></div><div></div></div><p>
All MS Windows machines employ an in memory buffer in which is
stored the NetBIOS names and IP addresses for all external
machines that that machine has communicated with over the
@@ -14694,11 +13905,11 @@ an attempt to exchange a message with that machine will be subject
to time-out delays. i.e.: Its name is in the cache, so a name resolution
lookup will succeed, but the machine can not respond. This can be
frustrating for users - but it is a characteristic of the protocol.
-</p><p>
+</p><a class="indexterm" name="id2935135"></a><a class="indexterm" name="id2935144"></a><p>
The MS Windows utility that allows examination of the NetBIOS
name cache is called &quot;nbtstat&quot;. The Samba equivalent of this
is called <b class="command">nmblookup</b>.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979124"></a>The LMHOSTS file</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935167"></a>The LMHOSTS file</h3></div></div><div></div></div><a class="indexterm" name="id2935175"></a><p>
This file is usually located in MS Windows NT 4.0 or
2000 in <tt class="filename">C:\WINNT\SYSTEM32\DRIVERS\ETC</tt> and contains
the IP Address and the machine name in matched pairs. The
@@ -14706,91 +13917,92 @@ the IP Address and the machine name in matched pairs. The
to IP address mapping.
</p><p>
It typically looks like:
-</p><pre class="screen">
- # Copyright (c) 1998 Microsoft Corp.
- #
- # This is a sample LMHOSTS file used by the Microsoft Wins Client (NetBIOS
- # over TCP/IP) stack for Windows98
- #
- # This file contains the mappings of IP addresses to NT computernames
- # (NetBIOS) names. Each entry should be kept on an individual line.
- # The IP address should be placed in the first column followed by the
- # corresponding computername. The address and the computername
- # should be separated by at least one space or tab. The &quot;#&quot; character
- # is generally used to denote the start of a comment (see the exceptions
- # below).
- #
- # This file is compatible with Microsoft LAN Manager 2.x TCP/IP lmhosts
- # files and offers the following extensions:
- #
- # #PRE
- # #DOM:&lt;domain&gt;
- # #INCLUDE &lt;filename&gt;
- # #BEGIN_ALTERNATE
- # #END_ALTERNATE
- # \0xnn (non-printing character support)
- #
- # Following any entry in the file with the characters &quot;#PRE&quot; will cause
- # the entry to be preloaded into the name cache. By default, entries are
- # not preloaded, but are parsed only after dynamic name resolution fails.
- #
- # Following an entry with the &quot;#DOM:&lt;domain&gt;&quot; tag will associate the
- # entry with the domain specified by &lt;domain&gt;. This affects how the
- # browser and logon services behave in TCP/IP environments. To preload
- # the host name associated with #DOM entry, it is necessary to also add a
- # #PRE to the line. The &lt;domain&gt; is always preloaded although it will not
- # be shown when the name cache is viewed.
- #
- # Specifying &quot;#INCLUDE &lt;filename&gt;&quot; will force the RFC NetBIOS (NBT)
- # software to seek the specified &lt;filename&gt; and parse it as if it were
- # local. &lt;filename&gt; is generally a UNC-based name, allowing a
- # centralized lmhosts file to be maintained on a server.
- # It is ALWAYS necessary to provide a mapping for the IP address of the
- # server prior to the #INCLUDE. This mapping must use the #PRE directive.
- # In addition the share &quot;public&quot; in the example below must be in the
- # LanManServer list of &quot;NullSessionShares&quot; in order for client machines to
- # be able to read the lmhosts file successfully. This key is under
- # \machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionshares
- # in the registry. Simply add &quot;public&quot; to the list found there.
- #
- # The #BEGIN_ and #END_ALTERNATE keywords allow multiple #INCLUDE
- # statements to be grouped together. Any single successful include
- # will cause the group to succeed.
- #
- # Finally, non-printing characters can be embedded in mappings by
- # first surrounding the NetBIOS name in quotations, then using the
- # \0xnn notation to specify a hex value for a non-printing character.
- #
- # The following example illustrates all of these extensions:
- #
- # 102.54.94.97 rhino #PRE #DOM:networking #net group's DC
- # 102.54.94.102 &quot;appname \0x14&quot; #special app server
- # 102.54.94.123 popular #PRE #source server
- # 102.54.94.117 localsrv #PRE #needed for the include
- #
- # #BEGIN_ALTERNATE
- # #INCLUDE \\localsrv\public\lmhosts
- # #INCLUDE \\rhino\public\lmhosts
- # #END_ALTERNATE
- #
- # In the above example, the &quot;appname&quot; server contains a special
- # character in its name, the &quot;popular&quot; and &quot;localsrv&quot; server names are
- # preloaded, and the &quot;rhino&quot; server name is specified so it can be used
- # to later #INCLUDE a centrally maintained lmhosts file if the &quot;localsrv&quot;
- # system is unavailable.
- #
- # Note that the whole file is parsed including comments on each lookup,
- # so keeping the number of comments to a minimum will improve performance.
- # Therefore it is not advisable to simply add lmhosts file entries onto the
- # end of this file.
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979238"></a>HOSTS file</h3></div></div><div></div></div><p>
+</p><pre class="programlisting">
+# Copyright (c) 1998 Microsoft Corp.
+#
+# This is a sample LMHOSTS file used by the Microsoft Wins Client (NetBIOS
+# over TCP/IP) stack for Windows98
+#
+# This file contains the mappings of IP addresses to NT computernames
+# (NetBIOS) names. Each entry should be kept on an individual line.
+# The IP address should be placed in the first column followed by the
+# corresponding computername. The address and the computername
+# should be separated by at least one space or tab. The &quot;#&quot; character
+# is generally used to denote the start of a comment (see the exceptions
+# below).
+#
+# This file is compatible with Microsoft LAN Manager 2.x TCP/IP lmhosts
+# files and offers the following extensions:
+#
+# #PRE
+# #DOM:&lt;domain&gt;
+# #INCLUDE &lt;filename&gt;
+# #BEGIN_ALTERNATE
+# #END_ALTERNATE
+# \0xnn (non-printing character support)
+#
+# Following any entry in the file with the characters &quot;#PRE&quot; will cause
+# the entry to be preloaded into the name cache. By default, entries are
+# not preloaded, but are parsed only after dynamic name resolution fails.
+#
+# Following an entry with the &quot;#DOM:&lt;domain&gt;&quot; tag will associate the
+# entry with the domain specified by &lt;domain&gt;. This affects how the
+# browser and logon services behave in TCP/IP environments. To preload
+# the host name associated with #DOM entry, it is necessary to also add a
+# #PRE to the line. The &lt;domain&gt; is always preloaded although it will not
+# be shown when the name cache is viewed.
+#
+# Specifying &quot;#INCLUDE &lt;filename&gt;&quot; will force the RFC NetBIOS (NBT)
+# software to seek the specified &lt;filename&gt; and parse it as if it were
+# local. &lt;filename&gt; is generally a UNC-based name, allowing a
+# centralized lmhosts file to be maintained on a server.
+# It is ALWAYS necessary to provide a mapping for the IP address of the
+# server prior to the #INCLUDE. This mapping must use the #PRE directive.
+# In addition the share &quot;public&quot; in the example below must be in the
+# LanManServer list of &quot;NullSessionShares&quot; in order for client machines to
+# be able to read the lmhosts file successfully. This key is under
+# \machine\system\currentcontrolset\services\lanmanserver\
+# parameters\nullsessionshares
+# in the registry. Simply add &quot;public&quot; to the list found there.
+#
+# The #BEGIN_ and #END_ALTERNATE keywords allow multiple #INCLUDE
+# statements to be grouped together. Any single successful include
+# will cause the group to succeed.
+#
+# Finally, non-printing characters can be embedded in mappings by
+# first surrounding the NetBIOS name in quotations, then using the
+# \0xnn notation to specify a hex value for a non-printing character.
+#
+# The following example illustrates all of these extensions:
+#
+# 102.54.94.97 rhino #PRE #DOM:networking #net group's DC
+# 102.54.94.102 &quot;appname \0x14&quot; #special app server
+# 102.54.94.123 popular #PRE #source server
+# 102.54.94.117 localsrv #PRE #needed for the include
+#
+# #BEGIN_ALTERNATE
+# #INCLUDE \\localsrv\public\lmhosts
+# #INCLUDE \\rhino\public\lmhosts
+# #END_ALTERNATE
+#
+# In the above example, the &quot;appname&quot; server contains a special
+# character in its name, the &quot;popular&quot; and &quot;localsrv&quot; server names are
+# preloaded, and the &quot;rhino&quot; server name is specified so it can be used
+# to later #INCLUDE a centrally maintained lmhosts file if the &quot;localsrv&quot;
+# system is unavailable.
+#
+# Note that the whole file is parsed including comments on each lookup,
+# so keeping the number of comments to a minimum will improve performance.
+# Therefore it is not advisable to simply add lmhosts file entries onto the
+# end of this file.
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935329"></a>HOSTS file</h3></div></div><div></div></div><p>
This file is usually located in MS Windows NT 4.0 or 2000 in
<tt class="filename">C:\WINNT\SYSTEM32\DRIVERS\ETC</tt> and contains
the IP Address and the IP hostname in matched pairs. It can be
used by the name resolution infrastructure in MS Windows, depending
on how the TCP/IP environment is configured. This file is in
-every way the equivalent of the Unix/Linux <tt class="filename">/etc/hosts</tt> file.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979270"></a>DNS Lookup</h3></div></div><div></div></div><p>
+every way the equivalent of the UNIX/Linux <tt class="filename">/etc/hosts</tt> file.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935361"></a>DNS Lookup</h3></div></div><div></div></div><a class="indexterm" name="id2935368"></a><p>
This capability is configured in the TCP/IP setup area in the network
configuration facility. If enabled, an elaborate name resolution sequence
is followed the precise nature of which is dependant on how the NetBIOS
@@ -14801,7 +14013,7 @@ cache. If that fails then DNS, HOSTS and LMHOSTS are checked. If set to
Node Type 8, then a NetBIOS Unicast (over UDP Unicast) is sent to the
WINS Server to obtain a lookup before DNS, HOSTS, LMHOSTS, or broadcast
lookup is used.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979295"></a>WINS Lookup</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935393"></a>WINS Lookup</h3></div></div><div></div></div><a class="indexterm" name="id2935401"></a><p>
A WINS (Windows Internet Name Server) service is the equivalent of the
rfc1001/1002 specified NBNS (NetBIOS Name Server). A WINS server stores
the names and IP addresses that are registered by a Windows client
@@ -14809,24 +14021,20 @@ if the TCP/IP setup has been given at least one WINS Server IP Address.
</p><p>
To configure Samba to be a WINS server the following parameter needs
to be added to the <tt class="filename">smb.conf</tt> file:
-</p><pre class="screen">
- wins support = Yes
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>wins support = Yes</tt></i></td></tr></table><p>
To configure Samba to use a WINS server the following parameters are
needed in the <tt class="filename">smb.conf</tt> file:
-</p><pre class="screen">
- wins support = No
- wins server = xxx.xxx.xxx.xxx
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>wins support = No</tt></i></td></tr><tr><td><i class="parameter"><tt>wins server = xxx.xxx.xxx.xxx</tt></i></td></tr></table><p>
where <i class="replaceable"><tt>xxx.xxx.xxx.xxx</tt></i> is the IP address
of the WINS server.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979366"></a>Common Errors</h2></div></div><div></div></div><p>
+</p><p>For information about setting up Samba as a WINS server, read
+ <a href="#NetworkBrowsing" title="Chapter10.Samba / MS Windows Network Browsing Guide">the chapter on network browsing</a>.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2935511"></a>Common Errors</h2></div></div><div></div></div><p>
TCP/IP network configuration problems find every network administrator sooner or later.
The cause can be anything from keyboard mishaps, forgetfulness, simple mistakes, and
carelessness. Of course, no one is every deliberately careless!
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979382"></a>My Boomerang Won't Come Back</h3></div></div><div></div></div><p>
- Well, the real complaint said, &quot;I can ping my samba server from Windows, but I can
- not ping my Windows machine from the samba server.&quot;
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935527"></a>Pinging works only in one way</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">I can ping my samba server from Windows, but I can
+ not ping my Windows machine from the samba server.</span>&#8221;
</p><p>
The Windows machine was at IP Address 192.168.1.2 with netmask 255.255.255.0, the
Samba server (Linux) was at IP Address 192.168.1.130 with netmask 255.255.255.128.
@@ -14834,49 +14042,49 @@ carelessness. Of course, no one is every deliberately careless!
</p><p>
Due to inconsistent netmasks, the Windows machine was on network 192.168.1.0/24, while
the Samba server was on network 192.168.1.128/25 - logically a different network.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979413"></a>Very Slow Network Connections</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935562"></a>Very Slow Network Connections</h3></div></div><div></div></div><p>
A common causes of slow network response includes:
- </p><div class="itemizedlist"><ul type="disc"><li><p>Client is configured to use DNS and DNS server is down</p></li><li><p>Client is configured to use remote DNS server, but remote connection is down</p></li><li><p>Client is configured to use a WINS server, but there is no WINS server</p></li><li><p>Client is NOT configured to use a WINS server, but there is a WINS server</p></li><li><p>Firewall is filtering our DNS or WINS traffic</p></li></ul></div></div><div xmlns:ns94="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2979464"></a>Samba server name change problem</h3></div></div><div></div></div><p>
- The name of the samba server was changed, samba was restarted, samba server can not be
+ </p><div class="itemizedlist"><ul type="disc"><li><p>Client is configured to use DNS and DNS server is down</p></li><li><p>Client is configured to use remote DNS server, but remote connection is down</p></li><li><p>Client is configured to use a WINS server, but there is no WINS server</p></li><li><p>Client is NOT configured to use a WINS server, but there is a WINS server</p></li><li><p>Firewall is filtering our DNS or WINS traffic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935612"></a>Samba server name change problem</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">The name of the samba server was changed, samba was restarted, samba server can not be
pinged by new name from MS Windows NT4 Workstation, but it does still respond to ping using
- the old name. Why?
+ the old name. Why?</span>&#8221;
</p><p>
From this description three (3) things are rather obvious:
</p><div class="itemizedlist"><ul type="disc"><li><p>WINS is NOT in use, only broadcast based name resolution is used</p></li><li><p>The samba server was renamed and restarted within the last 10-15 minutes</p></li><li><p>The old samba server name is still in the NetBIOS name cache on the MS Windows NT4 Workstation</p></li></ul></div><p>
To find what names are present in the NetBIOS name cache on the MS Windows NT4 machine,
open a cmd shell, then:
- </p><ns94:p>
- </ns94:p><pre class="screen">
- C:\temp\&gt;nbtstat -n
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>nbtstat -n</tt></b>
- NetBIOS Local Name Table
+ NetBIOS Local Name Table
- Name Type Status
- ------------------------------------------------
- SLACK &lt;03&gt; UNIQUE Registered
- ADMINISTRATOR &lt;03&gt; UNIQUE Registered
- SLACK &lt;00&gt; UNIQUE Registered
- SARDON &lt;00&gt; GROUP Registered
- SLACK &lt;20&gt; UNIQUE Registered
- SLACK &lt;1F&gt; UNIQUE Registered
+ Name Type Status
+------------------------------------------------
+FRODO &lt;03&gt; UNIQUE Registered
+ADMINSTRATOR &lt;03&gt; UNIQUE Registered
+FRODO &lt;00&gt; UNIQUE Registered
+SARDON &lt;00&gt; GROUP Registered
+FRODO &lt;20&gt; UNIQUE Registered
+FRODO &lt;1F&gt; UNIQUE Registered
- C:\Temp\&gt;nbtstat -c
+<tt class="prompt">C:\&gt; </tt>nbtstat -c
- NetBIOS Remote Cache Name Table
+ NetBIOS Remote Cache Name Table
- Name Type Host Address Life [sec]
- --------------------------------------------------------------
- FRODO &lt;20&gt; UNIQUE 192.168.1.1 240
+ Name Type Host Address Life [sec]
+--------------------------------------------------------------
+GANDALF &lt;20&gt; UNIQUE 192.168.1.1 240
- C:\Temp\&gt;
- </pre><ns94:p>
- </ns94:p><p>
- In the above example, FRODO is the Samba server and SLACK is the MS Windows NT4 Workstation.
+<tt class="prompt">C:\&gt; </tt>
+</pre><p>
+ </p><p>
+ In the above example, GANDALF is the Samba server and FRODO is the MS Windows NT4 Workstation.
The first listing shows the contents of the Local Name Table (i.e.: Identity information on
the MS Windows workstation), the second shows the NetBIOS name in the NetBIOS name cache.
The name cache contains the remote machines known to this workstation.
- </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unicode"></a>Chapter27.Unicode/Charsets</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">TAKAHASHI</span> <span class="surname">Motonobu</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:monyo@home.monyo.com">monyo@home.monyo.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">25 March 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2979620">Features and Benefits</a></dt><dt><a href="#id2979662">What are charsets and unicode?</a></dt><dt><a href="#id2979730">Samba and charsets</a></dt><dt><a href="#id2979831">Conversion from old names</a></dt><dt><a href="#id2979876">Japanese charsets</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979620"></a>Features and Benefits</h2></div></div><div></div></div><p>
+ </p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unicode"></a>Chapter27.Unicode/Charsets</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">TAKAHASHI</span> <span class="surname">Motonobu</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:monyo@home.monyo.com">monyo@home.monyo.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">25 March 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2935816">Features and Benefits</a></dt><dt><a href="#id2935861">What are charsets and unicode?</a></dt><dt><a href="#id2935930">Samba and charsets</a></dt><dt><a href="#id2936058">Conversion from old names</a></dt><dt><a href="#id2936088">Japanese charsets</a></dt><dt><a href="#id2936225">Common errors</a></dt><dd><dl><dt><a href="#id2936232">CP850.so can't be found</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2935816"></a>Features and Benefits</h2></div></div><div></div></div><p>
Every industry eventually matures. One of the great areas of maturation is in
the focus that has been given over the past decade to make it possible for anyone
anywhere to use a computer. It has not always been that way, in fact, not so long
@@ -14884,14 +14092,13 @@ ago it was common for software to be written for exclusive use in the country of
origin.
</p><p>
Of all the effort that has been brought to bear on providing native language support
-for all computer users, the efforts of the Openi18n organisation is deserving of
-special mention. For more information about Openi18n please refer to:
-<a href="#">http://www.openi18n.org/</a>.
+for all computer users, the efforts of the <a href="http://www.openi18n.org/" target="_top">Openi18n organisation</a> is deserving of
+special mention.
</p><p>
Samba-2.x supported a single locale through a mechanism called
<span class="emphasis"><em>codepages</em></span>. Samba-3 is destined to become a truly trans-global
file and printer sharing platform.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979662"></a>What are charsets and unicode?</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2935861"></a>What are charsets and unicode?</h2></div></div><div></div></div><p>
Computers communicate in numbers. In texts, each number will be
translated to a corresponding letter. The meaning that will be assigned
to a certain number depends on the <span class="emphasis"><em>character set(charset)
@@ -14908,84 +14115,233 @@ is more then all possible characters one could think of. They are called
multibyte charsets (because they use more then one byte to
store one character).
</p><p>
-A standardised multibyte charset is unicode, info is available at
-<a href="http://www.unicode.org/" target="_top">www.unicode.org</a>.
-A big advantage of using a multibyte charset is that you only need one; no
-need to make sure two computers use the same charset when they are
+ A standardised multibyte charset is <a href="http://www.unicode.org/" target="_top">unicode</a>.
+A big advantage of using a multibyte charset is that you only need one; there
+is no need to make sure two computers use the same charset when they are
communicating.
-</p><p>Old windows clients used to use single-byte charsets, named
+</p><p>Old windows clients use single-byte charsets, named
'codepages' by Microsoft. However, there is no support for
negotiating the charset to be used in the smb protocol. Thus, you
-have to make sure you are using the same charset when talking to an old client.
+have to make sure you are using the same charset when talking to an older client.
Newer clients (Windows NT, 2K, XP) talk unicode over the wire.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979730"></a>Samba and charsets</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2935930"></a>Samba and charsets</h2></div></div><div></div></div><p>
As of samba 3.0, samba can (and will) talk unicode over the wire. Internally,
samba knows of three kinds of character sets:
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>unix charset</tt></i></span></dt><dd><p>
+</p><div class="variablelist"><dl><dt><span class="term"><a class="indexterm" name="id2935952"></a><i class="parameter"><tt>unix charset</tt></i></span></dt><dd><p>
This is the charset used internally by your operating system.
- The default is <tt class="constant">ASCII</tt>, which is fine for most
- systems.
- </p></dd><dt><span class="term"><i class="parameter"><tt>display charset</tt></i></span></dt><dd><p>This is the charset samba will use to print messages
+ The default is <tt class="constant">UTF-8</tt>, which is fine for most
+ systems. The default in previous samba releases was <tt class="constant">ASCII</tt>.
+ </p></dd><dt><span class="term"><a class="indexterm" name="id2935987"></a><i class="parameter"><tt>display charset</tt></i></span></dt><dd><p>This is the charset samba will use to print messages
on your screen. It should generally be the same as the <b class="command">unix charset</b>.
- </p></dd><dt><span class="term"><i class="parameter"><tt>dos charset</tt></i></span></dt><dd><p>This is the charset samba uses when communicating with
+ </p></dd><dt><span class="term"><a class="indexterm" name="id2936022"></a><i class="parameter"><tt>dos charset</tt></i></span></dt><dd><p>This is the charset samba uses when communicating with
DOS and Windows 9x clients. It will talk unicode to all newer clients.
The default depends on the charsets you have installed on your system.
Run <b class="command">testparm -v | grep &quot;dos charset&quot;</b> to see
what the default is on your system.
- </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979831"></a>Conversion from old names</h2></div></div><div></div></div><p>Because previous samba versions did not do any charset conversion,
+ </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936058"></a>Conversion from old names</h2></div></div><div></div></div><p>Because previous samba versions did not do any charset conversion,
characters in filenames are usually not correct in the unix charset but only
-for the local charset used by the DOS/Windows clients.</p><p>The following script from Steve Langasek converts all
-filenames from CP850 to the iso8859-15 charset.</p><p>
-<tt class="prompt">#</tt><b class="userinput"><tt>find <i class="replaceable"><tt>/path/to/share</tt></i> -type f -exec bash -c 'CP=&quot;{}&quot;; ISO=`echo -n &quot;$CP&quot; | iconv -f cp850 \
- -t iso8859-15`; if [ &quot;$CP&quot; != &quot;$ISO&quot; ]; then mv &quot;$CP&quot; &quot;$ISO&quot;; fi' \;
-</tt></b>
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2979876"></a>Japanese charsets</h2></div></div><div></div></div><p>Samba doesn't work correctly with Japanese charsets yet. Here are
-points of attention when setting it up:</p><div class="itemizedlist"><ul type="disc"><li><p>You should set <i class="parameter"><tt>mangling method =
-hash</tt></i></p></li><li><p>There are various iconv() implementations around and not
+for the local charset used by the DOS/Windows clients.</p><p>Bjoern Jacke has written a utility named <a href="http://j3e.de/linux/convmv/" target="_top">convm</a> that can convert whole directory
+ structures to different charsets with one single command.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936088"></a>Japanese charsets</h2></div></div><div></div></div><p>Samba doesn't work correctly with Japanese charsets yet. Here are
+points of attention when setting it up:</p><div class="itemizedlist"><ul type="disc"><li><p>You should set <a class="indexterm" name="id2936109"></a><i class="parameter"><tt>mangling method</tt></i> = hash</p></li><li><p>There are various iconv() implementations around and not
all of them work equally well. glibc2's iconv() has a critical problem
in CP932. libiconv-1.8 works with CP932 but still has some problems and
-does not work with EUC-JP.</p></li><li><p>You should set <i class="parameter"><tt>dos charset = CP932</tt></i>, not
-Shift_JIS, SJIS...</p></li><li><p>Currently only <i class="parameter"><tt>unix charset = CP932</tt></i>
+does not work with EUC-JP.</p></li><li><p>You should set <a class="indexterm" name="id2936137"></a><i class="parameter"><tt>dos charset</tt></i> = CP932, not
+Shift_JIS, SJIS...</p></li><li><p>Currently only <a class="indexterm" name="id2936158"></a><i class="parameter"><tt>unix charset</tt></i> = CP932
will work (but still has some problems...) because of iconv() issues.
-<i class="parameter"><tt>unix charset = EUC-JP</tt></i> doesn't work well because of
-iconv() issues.</p></li><li><p>Currently Samba 3.0 does not support <i class="parameter"><tt>unix charset
-= UTF8-MAC/CAP/HEX/JIS*</tt></i></p></li></ul></div><p>More information (in Japanese) is available at: <a href="http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html" target="_top">http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html</a>.</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Backup"></a>Chapter28.Samba Backup Techniques</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2982471">Note</a></dt><dt><a href="#id2982492">Features and Benefits</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982471"></a>Note</h2></div></div><div></div></div><p>
+<a class="indexterm" name="id2936174"></a><i class="parameter"><tt>unix charset</tt></i> = EUC-JP doesn't work well because of
+iconv() issues.</p></li><li><p>Currently Samba 3.0 does not support <a class="indexterm" name="id2936193"></a><i class="parameter"><tt>unix charset</tt></i> = UTF8-MAC/CAP/HEX/JIS*</p></li></ul></div><p>More information (in Japanese) is available at: <a href="http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html" target="_top">http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html</a>.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936225"></a>Common errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936232"></a>CP850.so can't be found</h3></div></div><div></div></div><p>&#8220;<span class="quote">Samba is complaining about a missing <tt class="filename">CP850.so</tt> file</span>&#8221;.</p><p>CP850 is the default <a class="indexterm" name="id2936258"></a><i class="parameter"><tt>dos charset</tt></i>. The <a class="indexterm" name="id2936271"></a><i class="parameter"><tt>dos charset</tt></i> is used to convert data to the codepage used by your dos clients. If you don't have any dos clients, you can safely ignore this message. </p><p>CP850 should be supported by your local iconv implementation. Make sure you have all the required packages installed. If you compiled samba from source, make sure configure found iconv.</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Backup"></a>Chapter28.Samba Backup Techniques</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2936346">Note</a></dt><dt><a href="#id2936359">Features and Benefits</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936346"></a>Note</h2></div></div><div></div></div><p>
This chapter did not make it into this release.
It is planned for the published release of this document.
-If you have something to contribute for this section please email it to
-<a href="#">jht@samba.org</a>/
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982492"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936359"></a>Features and Benefits</h2></div></div><div></div></div><p>
We need feedback from people who are backing up samba servers.
We would like to know what software tools you are using to backup
your samba server/s.
</p><p>
In particular, if you have any success and / or failure stories you could
share with other users this would be appreciated.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SambaHA"></a>Chapter29.High Availability Options</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2982302">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982302"></a>Note</h2></div></div><div></div></div><p>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SambaHA"></a>Chapter29.High Availability Options</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2936430">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936430"></a>Note</h2></div></div><div></div></div><p>
This chapter did not make it into this release.
It is planned for the published release of this document.
-</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="migration"></a>Migration and Updating</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>30. <a href="#upgrading-to-3.0">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="#id2983637">Charsets</a></dt><dt><a href="#id2983660">Obsolete configuration options</a></dt><dt><a href="#id2983713">Password Backend</a></dt></dl></dd><dt>31. <a href="#NT4Migration">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="#id2982957">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2982981">Objectives</a></dt><dt><a href="#id2981910">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2984126">Migration Options</a></dt><dd><dl><dt><a href="#id2984207">Planning for Success</a></dt><dt><a href="#id2984449">Samba Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="#SWAT">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="#id2984755">Features and Benefits</a></dt><dd><dl><dt><a href="#id2984605">Enabling SWAT for use</a></dt><dt><a href="#id2985495">Securing SWAT through SSL</a></dt><dt><a href="#id2985607">The SWAT Home Page</a></dt><dt><a href="#id2985671">Global Settings</a></dt><dt><a href="#id2985776">Share Settings</a></dt><dt><a href="#id2985841">Printers Settings</a></dt><dt><a href="#id2985906">The SWAT Wizard</a></dt><dt><a href="#id2985953">The Status Page</a></dt><dt><a href="#id2986005">The View Page</a></dt><dt><a href="#id2986028">The Password Change Page</a></dt></dl></dd></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="upgrading-to-3.0"></a>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">25 October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2983637">Charsets</a></dt><dt><a href="#id2983660">Obsolete configuration options</a></dt><dt><a href="#id2983713">Password Backend</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983637"></a>Charsets</h2></div></div><div></div></div><p>You might experience problems with special characters
-when communicating with old DOS clients. Codepage
-support has changed in samba 3.0. Read the chapter
-<a href="#unicode" title="Chapter27.Unicode/Charsets">Unicode support</a> for details.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983660"></a>Obsolete configuration options</h2></div></div><div></div></div><p>
-In 3.0, the following configuration options have been removed.
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>printer driver (replaced by new driver procedures) </td></tr><tr><td>printer driver file (replaced by new driver procedures)</td></tr><tr><td>printer driver location (replaced by new driver procedures)</td></tr><tr><td>use rhosts</td></tr><tr><td>postscript</td></tr><tr><td>client code page (replaced by dos charset)</td></tr><tr><td>vfs path</td></tr><tr><td>vfs options</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2983713"></a>Password Backend</h2></div></div><div></div></div><p>
-Effective with the release of samba-3 it is now imperative that the password backend
-be correctly defined in smb.conf.
-</p><p>
-Those migrating from samba-2.x with plaintext password support need the following:
-<span class="emphasis"><em>passdb backend = guest</em></span>.
-</p><p>
-Those migrating from samba-2.x with encrypted password support should add to smb.conf
-<span class="emphasis"><em>passdb backend = smbpasswd, guest</em></span>.
-</p><p>
-LDAP using Samba-2.x systems can continue to operate with the following entry
-<span class="emphasis"><em>passdb backend = ldapsam_compat, guest</em></span>.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NT4Migration"></a>Chapter31.Migration from NT4 PDC to Samba-3 PDC</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2982957">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2982981">Objectives</a></dt><dt><a href="#id2981910">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2984126">Migration Options</a></dt><dd><dl><dt><a href="#id2984207">Planning for Success</a></dt><dt><a href="#id2984449">Samba Implementation Choices</a></dt></dl></dd></dl></div><p>
+</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="migration"></a>Migration and Updating</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>30. <a href="#upgrading-to-3.0">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="#id2936568">New Features in Samba-3</a></dt><dt><a href="#id2936703">Configuration Parameter Changes</a></dt><dd><dl><dt><a href="#id2936719">Removed Parameters</a></dt><dt><a href="#id2936845">New Parameters</a></dt><dt><a href="#id2937241">Modified Parameters (changes in behavior):</a></dt></dl></dd><dt><a href="#id2937316">New Functionality</a></dt><dd><dl><dt><a href="#id2937323">Databases</a></dt><dt><a href="#id2937557">Changes in Behavior</a></dt><dt><a href="#id2937607">Charsets</a></dt><dt><a href="#id2937630">Passdb Backends and Authentication</a></dt><dt><a href="#id2937749">Charsets</a></dt><dt><a href="#id2937773">LDAP</a></dt></dl></dd></dl></dd><dt>31. <a href="#NT4Migration">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="#id2938118">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2938143">Objectives</a></dt><dt><a href="#id2938581">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2938798">Migration Options</a></dt><dd><dl><dt><a href="#id2938888">Planning for Success</a></dt><dt><a href="#id2939144">Samba-3 Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="#SWAT">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="#id2939504">Features and Benefits</a></dt><dd><dl><dt><a href="#id2939553">Enabling SWAT for use</a></dt><dt><a href="#id2939790">Securing SWAT through SSL</a></dt><dt><a href="#id2939902">The SWAT Home Page</a></dt><dt><a href="#id2939968">Global Settings</a></dt><dt><a href="#id2940074">Share Settings</a></dt><dt><a href="#id2940138">Printers Settings</a></dt><dt><a href="#id2940203">The SWAT Wizard</a></dt><dt><a href="#id2940250">The Status Page</a></dt><dt><a href="#id2940302">The View Page</a></dt><dt><a href="#id2940326">The Password Change Page</a></dt></dl></dd></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="upgrading-to-3.0"></a>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">June 30, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2936568">New Features in Samba-3</a></dt><dt><a href="#id2936703">Configuration Parameter Changes</a></dt><dd><dl><dt><a href="#id2936719">Removed Parameters</a></dt><dt><a href="#id2936845">New Parameters</a></dt><dt><a href="#id2937241">Modified Parameters (changes in behavior):</a></dt></dl></dd><dt><a href="#id2937316">New Functionality</a></dt><dd><dl><dt><a href="#id2937323">Databases</a></dt><dt><a href="#id2937557">Changes in Behavior</a></dt><dt><a href="#id2937607">Charsets</a></dt><dt><a href="#id2937630">Passdb Backends and Authentication</a></dt><dt><a href="#id2937749">Charsets</a></dt><dt><a href="#id2937773">LDAP</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936568"></a>New Features in Samba-3</h2></div></div><div></div></div><p>
+Major new features:
+</p><div class="orderedlist"><ol type="1"><li><p>
+ Active Directory support. This release is able to join a ADS realm
+ as a member server and authenticate users using LDAP/kerberos.
+ </p></li><li><p>
+ Unicode support. Samba will now negotiate UNICODE on the wire and
+ internally there is now a much better infrastructure for multi-byte
+ and UNICODE character sets.
+ </p></li><li><p>
+ New authentication system. The internal authentication system has
+ been almost completely rewritten. Most of the changes are internal,
+ but the new auth system is also very configurable.
+ </p></li><li><p>
+ New filename mangling system. The filename mangling system has been
+ completely rewritten. An internal database now stores mangling maps
+ persistently. This needs lots of testing.
+ </p></li><li><p>
+ New &quot;net&quot; command. A new &quot;net&quot; command has been added. It is
+ somewhat similar to the &quot;net&quot; command in windows. Eventually we
+ plan to replace a bunch of other utilities (such as smbpasswd)
+ with subcommands in &quot;net&quot;, at the moment only a few things are
+ implemented.
+ </p></li><li><p>
+ Samba now negotiates NT-style status32 codes on the wire. This
+ improves error handling a lot.
+ </p></li><li><p>
+ Better Windows 2000/XP/2003 printing support including publishing
+ printer attributes in active directory
+ </p></li><li><p>
+ New loadable RPC modules
+ </p></li><li><p>
+ New dual-daemon winbindd support (-B) for better performance
+ </p></li><li><p>
+ Support for migrating from a Windows NT 4.0 domain to a Samba
+ domain and maintaining user, group and domain SIDs
+ </p></li><li><p>
+ Support for establishing trust relationships with Windows NT 4.0
+ domain controllers
+ </p></li><li><p>
+ Initial support for a distributed Winbind architecture using
+ an LDAP directory for storing SID to uid/gid mappings
+ </p></li><li><p>
+ Major updates to the Samba documentation tree.
+ </p></li></ol></div><p>
+Plus lots of other improvements!
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2936703"></a>Configuration Parameter Changes</h2></div></div><div></div></div><p>
+This section contains a brief listing of changes to smb.conf options
+in the 3.0.0 release. Please refer to the smb.conf(5) man page for
+complete descriptions of new or modified parameters.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936719"></a>Removed Parameters</h3></div></div><div></div></div><p>(order alphabetically):</p><div class="itemizedlist"><ul type="disc"><li><p>admin log </p></li><li><p>alternate permissions </p></li><li><p>character set </p></li><li><p>client codepage </p></li><li><p>code page directory </p></li><li><p>coding system </p></li><li><p>domain admin group </p></li><li><p>domain guest group </p></li><li><p>force unknown acl user </p></li><li><p>nt smb support </p></li><li><p>post script </p></li><li><p>printer driver </p></li><li><p>printer driver file </p></li><li><p>printer driver location </p></li><li><p>status </p></li><li><p>total print jobs </p></li><li><p>use rhosts </p></li><li><p>valid chars </p></li><li><p>vfs options </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2936845"></a>New Parameters</h3></div></div><div></div></div><p>(new parameters have been grouped by function):</p><p>Remote management</p><div class="itemizedlist"><ul type="disc"><li><p>abort shutdown script </p></li><li><p>shutdown script </p></li></ul></div><p>User and Group Account Management</p><div class="itemizedlist"><ul type="disc"><li><p>add group script </p></li><li><p>add machine script </p></li><li><p>add user to group script </p></li><li><p>algorithmic rid base </p></li><li><p>delete group script </p></li><li><p>delete user from group script </p></li><li><p>passdb backend </p></li><li><p>set primary group script </p></li></ul></div><p>Authentication</p><div class="itemizedlist"><ul type="disc"><li><p>auth methods </p></li><li><p>ads server </p></li><li><p>realm </p></li></ul></div><p>Protocol Options</p><div class="itemizedlist"><ul type="disc"><li><p>client lanman auth </p></li><li><p>client NTLMv2 auth </p></li><li><p>client schannel </p></li><li><p>client signing </p></li><li><p>client use spnego </p></li><li><p>disable netbios </p></li><li><p>ntlm auth </p></li><li><p>paranoid server security </p></li><li><p>server schannel </p></li><li><p>smb ports </p></li><li><p>use spnego </p></li></ul></div><p>File Service</p><div class="itemizedlist"><ul type="disc"><li><p>get quota command </p></li><li><p>hide special files </p></li><li><p>hide unwriteable files </p></li><li><p>hostname lookups </p></li><li><p>kernel change notify </p></li><li><p>mangle prefix </p></li><li><p>msdfs proxy </p></li><li><p>set quota command </p></li><li><p>use sendfile </p></li><li><p>vfs objects </p></li></ul></div><p>Printing</p><div class="itemizedlist"><ul type="disc"><li><p>max reported print jobs </p></li></ul></div><p>UNICODE and Character Sets</p><div class="itemizedlist"><ul type="disc"><li><p>display charset </p></li><li><p>dos charset </p></li><li><p>unicode </p></li><li><p>unix charset </p></li></ul></div><p>SID to uid/gid Mappings</p><div class="itemizedlist"><ul type="disc"><li><p>idmap backend </p></li><li><p>idmap gid </p></li><li><p>idmap only </p></li><li><p>idmap uid </p></li></ul></div><p>LDAP</p><div class="itemizedlist"><ul type="disc"><li><p>ldap delete dn </p></li><li><p>ldap group suffix </p></li><li><p>ldap idmap suffix </p></li><li><p>ldap machine suffix </p></li><li><p>ldap passwd sync </p></li><li><p>ldap trust ids </p></li><li><p>ldap user suffix </p></li></ul></div><p>General Configuration</p><div class="itemizedlist"><ul type="disc"><li><p>preload modules </p></li><li><p>privatedir </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937241"></a>Modified Parameters (changes in behavior):</h3></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>encrypt passwords (enabled by default) </p></li><li><p>mangling method (set to 'hash2' by default) </p></li><li><p>passwd chat </p></li><li><p>passwd program </p></li><li><p>restrict anonymous (integer value) </p></li><li><p>security (new 'ads' value) </p></li><li><p>strict locking (enabled by default) </p></li><li><p>winbind cache time (increased to 5 minutes) </p></li><li><p>winbind uid (deprecated in favor of 'idmap uid') </p></li><li><p>winbind gid (deprecated in favor of 'idmap gid') </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2937316"></a>New Functionality</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937323"></a>Databases</h3></div></div><div></div></div><p>
+ This section contains brief descriptions of any new databases
+ introduced in Samba 3.0. Please remember to backup your existing
+ ${lock directory}/*tdb before upgrading to Samba 3.0. Samba will
+ upgrade databases as they are opened (if necessary), but downgrading
+ from 3.0 to 2.2 is an unsupported path.
+ </p><div class="table"><a name="id2937342"></a><p class="title"><b>Table30.1.TDB File Descriptions</b></p><table summary="TDB File Descriptions" border="1"><colgroup><col align="left"><col align="justify"><col align="left"></colgroup><thead><tr><th align="left">Name</th><th align="justify">Description</th><th align="center">Backup?</th></tr></thead><tbody><tr><td align="left">account_policy</td><td align="justify">User policy settings</td><td align="left">yes</td></tr><tr><td align="left">gencache</td><td align="justify">Generic caching db</td><td align="left">no</td></tr><tr><td align="left">group_mapping</td><td align="justify"><p>Mapping table from Windows groups/SID to unix groups</p></td><td align="left">yes</td></tr><tr><td align="left">idmap</td><td align="justify"><p>new ID map table from SIDS to UNIX uids/gids</p></td><td align="left">yes</td></tr><tr><td align="left">namecache</td><td align="justify">Name resolution cache entries</td><td align="left">no</td></tr><tr><td align="left">netlogon_unigrp</td><td align="justify"><p>Cache of universal group membership obtained when operating
+ as a member of a Windows domain</p></td><td align="left">no</td></tr><tr><td align="left">printing/*.tdb</td><td align="justify"><p>Cached output from 'lpq command' created on a per print
+ service basis</p></td><td align="left">no</td></tr><tr><td align="left">registry</td><td align="justify"><p>Read-only samba registry skeleton that provides support for
+ exporting various db tables via the winreg RPCs</p></td><td align="left">no</td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937557"></a>Changes in Behavior</h3></div></div><div></div></div><p>
+ The following issues are known changes in behavior between Samba 2.2 and
+ Samba 3.0 that may affect certain installations of Samba.
+ </p><div class="orderedlist"><ol type="1"><li><p>
+ When operating as a member of a Windows domain, Samba 2.2 would
+ map any users authenticated by the remote DC to the 'guest account'
+ if a uid could not be obtained via the getpwnam() call. Samba 3.0
+ rejects the connection as NT_STATUS_LOGON_FAILURE. There is no
+ current work around to re-establish the 2.2 behavior.
+ </p></li><li><p>
+ When adding machines to a Samba 2.2 controlled domain, the
+ 'add user script' was used to create the UNIX identity of the
+ machine trust account. Samba 3.0 introduces a new 'add machine
+ script' that must be specified for this purpose. Samba 3.0 will
+ not fall back to using the 'add user script' in the absence of
+ an 'add machine script'
+ </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937607"></a>Charsets</h3></div></div><div></div></div><p>
+ You might experience problems with special characters when communicating with old DOS
+ clients. Codepage support has changed in samba 3.0. Read the chapter
+ <a href="#unicode" title="Chapter27.Unicode/Charsets">Unicode support</a> for details.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937630"></a>Passdb Backends and Authentication</h3></div></div><div></div></div><p>
+ There have been a few new changes that Samba administrators should be
+ aware of when moving to Samba 3.0.
+ </p><div class="orderedlist"><ol type="1"><li><p>
+ Encrypted passwords have been enabled by default in order to
+ inter-operate better with out-of-the-box Windows client
+ installations. This does mean that either (a) a samba account
+ must be created for each user, or (b) 'encrypt passwords = no'
+ must be explicitly defined in smb.conf.
+ </p></li><li><p>
+ Inclusion of new <a class="indexterm" name="id2937669"></a><i class="parameter"><tt>security</tt></i> = ads option for integration
+ with an Active Directory domain using the native Windows
+ Kerberos 5 and LDAP protocols.
+ </p></li></ol></div><p>
+ Samba 3.0 also includes the possibility of setting up chains
+ of authentication methods
+ (<a class="indexterm" name="id2937691"></a><i class="parameter"><tt>auth methods</tt></i>) and account
+ storage backends
+ (<a class="indexterm" name="id2937706"></a><i class="parameter"><tt>passdb backend</tt></i>).
+ Please refer to the <tt class="filename">smb.conf</tt>
+ man page and <a href="#passdb" title="Chapter11.Account Information Databases">the chapter about account information databases</a> for details. While both parameters assume sane default
+ values, it is likely that you will need to understand what the
+ values actually mean in order to ensure Samba operates correctly.
+ </p><p>
+ Certain functions of the smbpasswd(8) tool have been split between the
+ new smbpasswd(8) utility, the net(8) tool, and the new pdbedit(8)
+ utility. See the respective man pages for details.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937749"></a>Charsets</h3></div></div><div></div></div><p>
+ You might experience problems with special characters when communicating with old DOS
+ clients. Codepage support has changed in samba 3.0. Read the chapter
+ <a href="#unicode" title="Chapter27.Unicode/Charsets">Unicode support</a> for details.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2937773"></a>LDAP</h3></div></div><div></div></div><p>
+ This section outlines the new features affecting Samba / LDAP integration.
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2937784"></a>New Schema</h4></div></div><div></div></div><p>
+ A new object class (sambaSamAccount) has been introduced to replace
+ the old sambaAccount. This change aids us in the renaming of attributes
+ to prevent clashes with attributes from other vendors. There is a
+ conversion script (examples/LDAP/convertSambaAccount) to modify and LDIF
+ file to the new schema.
+ </p><p>
+ Example:
+ </p><pre class="screen">
+ <tt class="prompt">$ </tt>ldapsearch .... -b &quot;ou=people,dc=...&quot; &gt; old.ldif
+ <tt class="prompt">$ </tt>convertSambaAccount &lt;DOM SID&gt; old.ldif new.ldif
+ </pre><p>
+ The &lt;DOM SID&gt; can be obtained by running 'net getlocalsid &lt;DOMAINNAME&gt;
+ on the Samba PDC as root.
+ </p><p>
+ The old sambaAccount schema may still be used by specifying the
+ &quot;ldapsam_compat&quot; passdb backend. However, the sambaAccount and
+ associated attributes have been moved to the historical section of
+ the schema file and must be uncommented before use if needed.
+ The 2.2 object class declaration for a sambaAccount has not changed
+ in the 3.0 samba.schema file.
+ </p><p>
+ Other new object classes and their uses include:
+ </p><div class="itemizedlist"><ul type="disc"><li><p>
+ sambaDomain - domain information used to allocate rids
+ for users and groups as necessary. The attributes are added
+ in 'ldap suffix' directory entry automatically if
+ an idmap uid/gid range has been set and the 'ldapsam'
+ passdb backend has been selected.
+ </p></li><li><p>
+ sambaGroupMapping - an object representing the
+ relationship between a posixGroup and a Windows
+ group/SID. These entries are stored in the 'ldap
+ group suffix' and managed by the 'net groupmap' command.
+ </p></li><li><p>
+ sambaUnixIdPool - created in the 'ldap idmap suffix' entry
+ automatically and contains the next available 'idmap uid' and
+ 'idmap gid'
+ </p></li><li><p>
+ sambaIdmapEntry - object storing a mapping between a
+ SID and a UNIX uid/gid. These objects are created by the
+ idmap_ldap module as needed.
+ </p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2937906"></a>New Suffix for Searching</h4></div></div><div></div></div><p>
+ The following new smb.conf parameters have been added to aid in directing
+ certain LDAP queries when 'passdb backend = ldapsam://...' has been
+ specified.
+ </p><div class="itemizedlist"><ul type="disc"><li><p>ldap suffix - used to search for user and computer accounts</p></li><li><p>ldap user suffix - used to store user accounts</p></li><li><p>ldap machine suffix - used to store machine trust accounts</p></li><li><p>ldap group suffix - location of posixGroup/sambaGroupMapping entries</p></li><li><p>ldap idmap suffix - location of sambaIdmapEntry objects</p></li></ul></div><p>
+ If an 'ldap suffix' is defined, it will be appended to all of the
+ remaining sub-suffix parameters. In this case, the order of the suffix
+ listings in smb.conf is important. Always place the 'ldap suffix' first
+ in the list.
+ </p><p>
+ Due to a limitation in Samba's smb.conf parsing, you should not surround
+ the DN's with quotation marks.
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2937974"></a>IdMap LDAP support</h4></div></div><div></div></div><p>
+ Samba 3.0 supports an ldap backend for the idmap subsystem. The
+ following options would inform Samba that the idmap table should be
+ stored on the directory server onterose in the &quot;ou=idmap,dc=plainjoe,
+ dc=org&quot; partition.
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td>...</td></tr><tr><td><i class="parameter"><tt>idmap backend = ldap:ldap://onterose/</tt></i></td></tr><tr><td><i class="parameter"><tt>ldap idmap suffix = ou=idmap,dc=plainjoe,dc=org</tt></i></td></tr><tr><td><i class="parameter"><tt>idmap uid = 40000-50000</tt></i></td></tr><tr><td><i class="parameter"><tt>idmap gid = 40000-50000</tt></i></td></tr></table><p>
+ This configuration allows winbind installations on multiple servers to
+ share a uid/gid number space, thus avoiding the interoperability problems
+ with NFS that were present in Samba 2.2.
+ </p></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="NT4Migration"></a>Chapter31.Migration from NT4 PDC to Samba-3 PDC</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 3, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2938118">Planning and Getting Started</a></dt><dd><dl><dt><a href="#id2938143">Objectives</a></dt><dt><a href="#id2938581">Steps In Migration Process</a></dt></dl></dd><dt><a href="#id2938798">Migration Options</a></dt><dd><dl><dt><a href="#id2938888">Planning for Success</a></dt><dt><a href="#id2939144">Samba-3 Implementation Choices</a></dt></dl></dd></dl></div><p>
This is a rough guide to assist those wishing to migrate from NT4 domain control to
Samba-3 based domain control.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2982957"></a>Planning and Getting Started</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2938118"></a>Planning and Getting Started</h2></div></div><div></div></div><p>
In the IT world there is often a saying that all problems are encountered because of
poor planning. The corollary to this saying is that not all problems can be anticipated
and planned for. Then again, good planning will anticipate most show stopper type situations.
@@ -14993,65 +14349,62 @@ and planned for. Then again, good planning will anticipate most show stopper typ
Those wishing to migrate from MS Windows NT4 domain control to a Samba-3 domain control
environment would do well to develop a detailed migration plan. So here are a few pointers to
help migration get under way.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2982981"></a>Objectives</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938143"></a>Objectives</h3></div></div><div></div></div><p>
The key objective for most organisations will be to make the migration from MS Windows NT4
to Samba-3 domain control as painless as possible. One of the challenges you may experience
in your migration process may well be one of convincing management that the new environment
should remain in place. Many who have introduced open source technologies have experienced
pressure to return to a Microsoft based platform solution at the first sign of trouble.
</p><p>
-It is strongly advised that before attempting a migration to a Samba-3 controlled network
-that every possible effort be made to gain all-round commitment to the change. Firstly, you
-should know precisely <span class="emphasis"><em>why</em></span> the change is important for the organisation.
-Possible motivations to make a change include:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Improve network manageability</td></tr><tr><td>Obtain better user level functionality</td></tr><tr><td>Reduce network operating costs</td></tr><tr><td>Reduce exposure caused by Microsoft withdrawal of NT4 support</td></tr><tr><td>Avoid MS License 6 implications</td></tr><tr><td>Reduce organisation's dependency on Microsoft</td></tr></table><p>
-It is vital that it be well recognised that Samba-3 is NOT MS Windows NT4. Samba-3 offers
-an alternative solution that is both different from MS Windows NT4 and that offers some
-advantages compared with it. It should also be recognised that Samba-3 lacks many of the
+Before attempting a migration to a Samba-3 controlled network make every possible effort to
+gain all-round commitment to the change. Know precisely <span class="emphasis"><em>why</em></span> the change
+is important for the organisation. Possible motivations to make a change include:
+</p><div class="itemizedlist"><ul type="disc"><li><p>Improve network manageability</p></li><li><p>Obtain better user level functionality</p></li><li><p>Reduce network operating costs</p></li><li><p>Reduce exposure caused by Microsoft withdrawal of NT4 support</p></li><li><p>Avoid MS License 6 implications</p></li><li><p>Reduce organisation's dependency on Microsoft</p></li></ul></div><p>
+Make sure that everyone knows that Samba-3 is NOT MS Windows NT4. Samba-3 offers
+an alternative solution that is both different from MS Windows NT4 and that offers
+advantages compared with it. Gain recognition that Samba-3 lacks many of the
features that Microsoft has promoted as core values in migration from MS Windows NT4 to
MS Windows 2000 and beyond (with or without Active Directory services).
</p><p>
What are the features that Samba-3 can NOT provide?
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Active Directory Server</td></tr><tr><td>Group Policy Objects (in Active Directory)</td></tr><tr><td>Machine Policy objects</td></tr><tr><td>Logon Scripts in Active Directory</td></tr><tr><td>Software Application and Access Controls in Active Directory</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Active Directory Server</p></li><li><p>Group Policy Objects (in Active Directory)</p></li><li><p>Machine Policy objects</p></li><li><p>Logon Scripts in Active Directory</p></li><li><p>Software Application and Access Controls in Active Directory</p></li></ul></div><p>
The features that Samba-3 DOES provide and that may be of compelling interest to your site
includes:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Lower Cost of Ownership</td></tr><tr><td>Global availability of support with no strings attached</td></tr><tr><td>Dynamic SMB Servers (ie:Can run more than one server per Unix/Linux system)</td></tr><tr><td>Creation of on-the-fly logon scripts</td></tr><tr><td>Creation of on-the-fly Policy Files</td></tr><tr><td>Greater Stability, Reliability, Performance and Availability</td></tr><tr><td>Manageability via an ssh connection</td></tr><tr><td>Flexible choices of back-end authentication technologies (tdbsam, ldapsam, mysqlsam)</td></tr><tr><td>Ability to implement a full single-sign-on architecture</td></tr><tr><td>Ability to distribute authentication systems for absolute minimum wide area network bandwidth demand</td></tr></table><p>
-Before migrating a network from MS Windows NT4 to Samba-3 it is vital that all necessary factors are
-considered. Users should be educated about changes they may experience so that the change will be a
-welcome one and not become an obstacle to the work they need to do. The following are some of the
-factors that will go into a successful migration:
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981684"></a>Domain Layout</h4></div></div><div></div></div><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Lower Cost of Ownership</p></li><li><p>Global availability of support with no strings attached</p></li><li><p>Dynamic SMB Servers (ie:Can run more than one server per Unix/Linux system)</p></li><li><p>Creation of on-the-fly logon scripts</p></li><li><p>Creation of on-the-fly Policy Files</p></li><li><p>Greater Stability, Reliability, Performance and Availability</p></li><li><p>Manageability via an ssh connection</p></li><li><p>Flexible choices of back-end authentication technologies (tdbsam, ldapsam, mysqlsam)</p></li><li><p>Ability to implement a full single-sign-on architecture</p></li><li><p>Ability to distribute authentication systems for absolute minimum wide area network bandwidth demand</p></li></ul></div><p>
+Before migrating a network from MS Windows NT4 to Samba-3 consider all necessary factors. Users
+should be educated about changes they may experience so that the change will be a welcome one
+and not become an obstacle to the work they need to do. The following are factors that will
+help ensure a successful migration:
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2938354"></a>Domain Layout</h4></div></div><div></div></div><p>
Samba-3 can be configured as a domain controller, a back-up domain controller (probably best called
a secondary controller), a domain member, or as a stand-alone server. The Windows network security
domain context should be sized and scoped before implementation. Particular attention needs to be
paid to the location of the primary domain controller (PDC) as well as backup controllers (BDCs).
-It should be noted that one way in which Samba-3 differs from Microsoft technology is that if one
-chooses to use an LDAP authentication backend then the same database can be used by several different
-domains. This means that in a complex organisation there can be a single LDAP database, that itself
-can be distributed, that can simultaneously serve multiple domains (that can also be widely distributed).
-</p><p>
-It is recommended that from a design perspective, the number of users per server, as well as the number
-of servers, per domain should be scaled according to needs and should also consider server capacity
-and network bandwidth.
-</p><p>
-A physical network segment may house several domains, each of which may span multiple network segments.
-Where domains span routed network segments it is most advisable to consider and test the performance
-implications of the design and layout of a network. A Centrally located domain controller that is being
-designed to serve multiple routed network segments may result in severe performance problems if the
-response time (eg: ping timing) between the remote segment and the PDC is more than 100 ms. In situations
-where the delay is too long it is highly recommended to locate a backup controller (BDC) to serve as
-the local authentication and access control server.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981737"></a>Server Share and Directory Layout</h4></div></div><div></div></div><p>
-There are few cardinal rules to effective network design that can be broken with impunity.
-The most important rule of effective network management is that simplicity is king in every
-well controlled network. Every part of the infrastructure must be managed, the more complex
-it is, the greater will be the demand of keeping systems secure and functional.
-</p><p>
-The nature of the data that must be stored needs to be born in mind when deciding how many
-shares must be created. The physical disk space layout should also be taken into account
-when designing where share points will be created. Keep in mind that all data needs to be
-backed up, thus the simpler the disk layout the easier it will be to keep track of what must
-be backed up to tape or other off-line storage medium. Always plan and implement for minimum
+One way in which Samba-3 differs from Microsoft technology is that if one chooses to use an LDAP
+authentication backend then the same database can be used by several different domains. In a
+complex organisation there can be a single LDAP database, which itself can be distributed (ie: Have
+a master server and multiple slave servers) that can simultaneously serve multiple domains.
+</p><p>
+From a design perspective, the number of users per server, as well as the number of servers, per
+domain should be scaled taking into consideration server capacity and network bandwidth.
+</p><p>
+A physical network segment may house several domains. Each may span multiple network segments.
+Where domains span routed network segments, consider and test the performance implications of
+the design and layout of a network. A Centrally located domain controller that is designed to
+serve multiple routed network segments may result in severe performance problems. Check the
+response time (eg: ping timing) between the remote segment and the PDC. If long (more than 100 ms)
+locate a backup controller (BDC) on the remote segmanet to serve as the local authentication and
+access control server.
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2938404"></a>Server Share and Directory Layout</h4></div></div><div></div></div><p>
+There are cardinal rules to effective network design. These can not be broken with impunity.
+The most important rule: Simplicity is king in every well controlled network. Every part of
+the infrastructure must be managed, the more complex it is, the greater will be the demand
+of keeping systems secure and functional.
+</p><p>
+Keep in mind the nature of how data must be share. Physical disk space layout should be considered
+carefully. Some data must be backed up. The simpler the disk layout the easier it will be to
+keep track of backed needs. Identify what back media will be meet needs, consider backup to tape
+, CD-ROM or (DVD-ROM), or other off-line storage medium. Plan and implement for minimum
maintenance. Leave nothing to chance in your design, above all, do not leave backups to chance:
Backup and test, validate every backup, create a disaster recovery plan and prove that it works.
</p><p>
@@ -15059,54 +14412,70 @@ Users should be grouped according to data access control needs. File and directo
is best controlled via group permissions and the use of the &quot;sticky bit&quot; on group controlled
directories may substantially avoid file access complaints from samba share users.
</p><p>
-Many network administrators who are new to the game will attempt to use elaborate techniques
-to set access controls, on files, directories, shares, as well as in share definitions.
-There is the ever present danger that that administrator's successor will not understand the
-complex mess that has been inherited. Remember, apparent job security through complex design
-and implementation may ultimately cause loss of operations and downtime to users as the new
-administrator learns to untangle your web. Keep access controls simple and effective and
-make sure that users will never be interrupted by the stupidity of complexity.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981799"></a>Logon Scripts</h4></div></div><div></div></div><p>
-Please refer to the section of this document on Advanced Network Administration for information
-regarding the network logon script options for Samba-3. Logon scripts can help to ensure that
-all users gain share and printer connections they need.
-</p><p>
-Logon scripts can be created on-the-fly so that all commands executed are specific to the
-rights and privileges granted to the user. The preferred controls should be affected through
+Inexperienced network administrators often attempt elaborate techniques to set access
+controls on files, directories, shares, as well as in share definitions.
+Keep your design and implementation simple and document your design extensively. Have others
+audit your documentation. Do not create a complex mess that your successor will not understand.
+Remember, job security through complex design and implementation may cause loss of operations
+and downtime to users as the new administrator learns to untangle your knots. Keep access
+controls simple and effective and make sure that users will never be interrupted by stupid
+complexity.
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2938464"></a>Logon Scripts</h4></div></div><div></div></div><p>
+Logon scripts can help to ensure that all users gain share and printer connections they need.
+</p><p>
+Logon scripts can be created 'on-the-fly' so that all commands executed are specific to the
+rights and priviliges granted to the user. The preferred controls should be affected through
group membership so that group information can be used to custom create a logon script using
-the <i class="parameter"><tt>root preexec</tt></i> parameters to the <tt class="filename">NETLOGON</tt> share.
+the <a class="indexterm" name="id2938486"></a><i class="parameter"><tt>root preexec</tt></i> parameters to the <i class="parameter"><tt>NETLOGON</tt></i> share.
</p><p>
Some sites prefer to use a tool such as <b class="command">kixstart</b> to establish a controlled
user environment. In any case you may wish to do a google search for logon script process controls.
In particular, you may wish to explore the use of the Microsoft knowledgebase article KB189105 that
deals with how to add printers without user intervention via the logon script process.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981856"></a>Profile Migration/Creation</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2938527"></a>Profile Migration/Creation</h4></div></div><div></div></div><p>
User and Group Profiles may be migrated using the tools described in the section titled Desktop Profile
Management.
</p><p>
Profiles may also be managed using the Samba-3 tool <b class="command">profiles</b>. This tool allows
the MS Windows NT style security identifiers (SIDs) that are stored inside the profile NTuser.DAT file
to be changed to the SID of the Samba-3 domain.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2981885"></a>User and Group Accounts</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2938557"></a>User and Group Accounts</h4></div></div><div></div></div><p>
It is possible to migrate all account settings from an MS Windows NT4 domain to Samba-3. Before
attempting to migrate user and group accounts it is STRONGLY advised to create in Samba-3 the
-groups that are present on the MS Windows NT4 domain <span class="emphasis"><em>AND</em></span> to connect these to
-suitable Unix/Linux groups. Following this simple advice will mean that all user and group attributes
+groups that are present on the MS Windows NT4 domain <span class="emphasis"><em>AND</em></span> to map these to
+suitable Unix/Linux groups. By following this simple advice all user and group attributes
should migrate painlessly.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2981910"></a>Steps In Migration Process</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938581"></a>Steps In Migration Process</h3></div></div><div></div></div><p>
The approximate migration process is described below.
</p><div class="itemizedlist"><ul type="disc"><li><p>
You will have an NT4 PDC that has the users, groups, policies and profiles to be migrated
</p></li><li><p>
-Samba-3 set up as a DC with netlogon share, profile share, etc.
-</p></li></ul></div><div class="procedure"><p class="title"><b>Procedure31.1.The Account Migration Process</b></p><ol type="1"><li><p>Create a BDC account for the samba server using NT Server Manager</p><ol type="a"><li><p>Samba must NOT be running</p></li></ol></li><li><p><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>NT4PDC</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p><ol type="a"><li><p>lsaquery</p></li><li><p>Note the SID returned</p></li></ol></li><li><p><b class="userinput"><tt>net getsid -S <i class="replaceable"><tt>NT4PDC</tt></i> -w <i class="replaceable"><tt>DOMNAME</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p><ol type="a"><li><p>Note the SID</p></li></ol></li><li><p><b class="userinput"><tt>net getlocalsid</tt></b></p><ol type="a"><li><p>Note the SID, now check that all three SIDS reported are the same!</p></li></ol></li><li><p><b class="userinput"><tt>net rpc join -S <i class="replaceable"><tt>NT4PDC</tt></i> -w <i class="replaceable"><tt>DOMNAME</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>net rpc vampire -S <i class="replaceable"><tt>NT4PDC</tt></i> -U administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>pdbedit -L</tt></b></p><ol type="a"><li><p>Note - did the users migrate?</p></li></ol></li><li><p><b class="userinput"><tt>initGrps.sh <i class="replaceable"><tt>DOMNAME</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>net groupmap list</tt></b></p><ol type="a"><li><p>Now check that all groups are recognised</p></li></ol></li><li><p><b class="userinput"><tt>net rpc vampire -S <i class="replaceable"><tt>NT4PDC</tt></i> -U administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>pdbedit -Lv</tt></b></p><ol type="a"><li><p>Note - check that all group membership has been migrated</p></li></ol></li></ol></div><p>
-Now it is time to migrate all the profiles, then migrate all policy files.
-More later.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984126"></a>Migration Options</h2></div></div><div></div></div><p>
-Based on feedback from many sites as well as from actual installation and maintenance
-experience sites that wish to migrate from MS Windows NT4 Domain Control to a Samba
-based solution fit into three basic categories.
-</p><div class="table"><a name="id2984141"></a><p class="title"><b>Table31.1.The 3 Major Site Types</b></p><table summary="The 3 Major Site Types" border="1"><colgroup><col><col></colgroup><thead><tr><th>Number of Users</th><th>Description</th></tr></thead><tbody><tr><td>&lt; 50</td><td><p>Want simple conversion with NO pain</p></td></tr><tr><td>50 - 250</td><td><p>Want new features, can manage some in-house complexity</p></td></tr><tr><td>&gt; 250</td><td><p>Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas</p></td></tr></tbody></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2984207"></a>Planning for Success</h3></div></div><div></div></div><p>
+Samba-3 set up as a DC with netlogon share, profile share, etc. Configure the <tt class="filename">smb.conf</tt> file
+to fucntion as a BDC. ie: <i class="parameter"><tt>domain master = No</tt></i>.
+</p></li></ul></div><div class="procedure"><p class="title"><b>Procedure31.1.The Account Migration Process</b></p><ol type="1"><li><p>Create a BDC account for the samba server using NT Server Manager</p><ol type="a"><li><p>Samba must NOT be running</p></li></ol></li><li><p><b class="userinput"><tt>net rpc join -S <i class="replaceable"><tt>NT4PDC</tt></i> -w <i class="replaceable"><tt>DOMNAME</tt></i> -U Administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>net rpc vampire -S <i class="replaceable"><tt>NT4PDC</tt></i> -U administrator%<i class="replaceable"><tt>passwd</tt></i></tt></b></p></li><li><p><b class="userinput"><tt>pdbedit -L</tt></b></p><ol type="a"><li><p>Note - did the users migrate?</p></li></ol></li><li><p>
+ Now assign each of the UNIX groups to NT groups:
+ (Note: It may be useful to copy this text to a script called
+ <tt class="filename">initGroups.sh</tt>)
+ </p><pre class="programlisting">
+#!/bin/bash
+#### Keep this as a shell script for future re-use
+
+# First assign well known domain global groups
+net groupmap modify ntgroup=&quot;Domain Admins&quot; unixgroup=ntadmins
+net groupmap modify ntgroup=&quot;Domain Guests&quot; unixgroup=nobody
+net groupmap modify ntgroup=&quot;Domain Users&quot; unixgroup=users
+
+# Now for our added domain global groups
+net groupmap add ntgroup=&quot;Designers&quot; unixgroup=designers type=d rid=3200
+net groupmap add ntgroup=&quot;Engineers&quot; unixgroup=engineers type=d rid=3210
+net groupmap add ntgroup=&quot;QA Team&quot; unixgroup=qateam type=d rid=3220
+</pre><p>
+ </p></li><li><p><b class="userinput"><tt>net groupmap list</tt></b></p><ol type="a"><li><p>Now check that all groups are recognised</p></li></ol></li></ol></div><p>
+Now migrate all the profiles, then migrate all policy files.
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2938798"></a>Migration Options</h2></div></div><div></div></div><p>
+Sites that wish to migrate from MS Windows NT4 Domain Control to a Samba based solution
+generally fit into three basic categories.
+</p><div class="table"><a name="id2938813"></a><p class="title"><b>Table31.1.The 3 Major Site Types</b></p><table summary="The 3 Major Site Types" border="1"><colgroup><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Number of Users</th><th align="justify">Description</th></tr></thead><tbody><tr><td align="left">&lt; 50</td><td align="justify"><p>Want simple conversion with NO pain</p></td></tr><tr><td align="left">50 - 250</td><td align="justify"><p>Want new features, can manage some in-house complexity</p></td></tr><tr><td align="left">&gt; 250</td><td align="justify"><p>Solution/Implementation MUST scale well, complex needs. Cross departmental decision process. Local expertise in most areas</p></td></tr></tbody></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2938888"></a>Planning for Success</h3></div></div><div></div></div><p>
There are three basic choices for sites that intend to migrate from MS Windows NT4
to Samba-3.
</p><div class="itemizedlist"><ul type="disc"><li><p>
@@ -15116,7 +14485,7 @@ to Samba-3.
</p></li><li><p>
Complete Redesign (completely new solution)
</p></li></ul></div><p>
-No matter what choice you make, the following rules will minimise down-stream problems:
+Minimise down-stream problems by:
</p><div class="itemizedlist"><ul type="disc"><li><p>
Take sufficient time
</p></li><li><p>
@@ -15125,65 +14494,28 @@ No matter what choice you make, the following rules will minimise down-stream pr
Test ALL assumptions
</p></li><li><p>
Test full roll-out program, including workstation deployment
- </p></li></ul></div><div class="table"><a name="id2984278"></a><p class="title"><b>Table31.2.Nature of the Conversion Choices</b></p><table summary="Nature of the Conversion Choices" border="1"><colgroup><col><col><col></colgroup><thead><tr><th>Simple</th><th>Upgraded</th><th>Redesign</th></tr></thead><tbody><tr><td><p>Make use of minimal OS specific features</p></td><td><p>Translate NT4 features to new host OS features</p></td><td><p>Decide:</p></td></tr><tr><td><p>Suck all accounts from NT4 into Samba-3</p></td><td><p>Copy and improve:</p></td><td><p>Authentication Regime (database location and access)</p></td></tr><tr><td><p>Make least number of operational changes</p></td><td><p>Make progressive improvements</p></td><td><p>Desktop Management Methods</p></td></tr><tr><td><p>Take least amount of time to migrate</p></td><td><p>Minimise user impact</p></td><td><p>Better Control of Desktops / Users</p></td></tr><tr><td><p>Live versus Isolated Conversion</p></td><td><p>Maximise functionality</p></td><td><p>Identify Needs for: Manageability, Scalability, Security, Availability</p></td></tr><tr><td><p>Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)</p></td><td><p>Take advantage of lower maintenance opportunity</p></td><td><p></p></td></tr></tbody></table></div></div><div xmlns:ns95="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2984449"></a>Samba Implementation Choices</h3></div></div><div></div></div><pre class="programlisting">
-Authentication database back end
- Winbind (external Samba or NT4/200x server)
- Can use pam_mkhomedir.so to auto-create home dirs
- External server could use Active Directory or NT4 Domain
-
-Database type
- smbpasswd, tdbsam, ldapsam, mysqlsam
-
-Access Control Points
- On the Share itself (Use NT4 Server Manager)
- On the file system
- Unix permissions on files and directories
- Enable Posix ACLs in file system?
- Through Samba share parameters
- Not recommended - except as only resort
-
-Policies (migrate or create new ones)
- Group Policy Editor (NT4)
- Watch out for Tattoo effect
-
-User and Group Profiles
- Platform specific so use platform tool to change from a Local
- to a Roaming profile Can use new profiles tool to change SIDs
- (NTUser.DAT)
-
-Logon Scripts (Know how they work)
-
-User and Group mapping to Unix/Linux
- username map facility may be needed
- Use 'net groupmap' to connect NT4 groups to Unix groups
- Use pdbedit to set/change user configuration
-NOTE:
-If migrating to LDAP back end it may be easier to dump initial LDAP database
-to LDIF, then edit, then reload into LDAP
-
- OS specific scripts / programs may be needed
- Add / delete Users
- Note OS limits on size of name (Linux 8 chars)
- NT4 up to 254 chars
- Add / delete machines
- Applied only to domain members (note up to 16 chars)
- Add / delete Groups
- Note OS limits on size and nature
- Linux limit is 16 char,
- no spaces and no upper case chars (groupadd)
-
-Migration Tools
- Domain Control (NT4 Style)
- Profiles, Policies, Access Controls, Security
-
-Migration Tools
- Samba: net, rpcclient, smbpasswd, pdbedit, profiles
- Windows: NT4 Domain User Manager, Server Manager (NEXUS)
-
-Authentication
- New SAM back end (smbpasswd, tdbsam, ldapsam, mysqlsam)
-</pre><ns95:p>
-</ns95:p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SWAT"></a>Chapter32.SWAT - The Samba Web Administration Tool</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2984755">Features and Benefits</a></dt><dd><dl><dt><a href="#id2984605">Enabling SWAT for use</a></dt><dt><a href="#id2985495">Securing SWAT through SSL</a></dt><dt><a href="#id2985607">The SWAT Home Page</a></dt><dt><a href="#id2985671">Global Settings</a></dt><dt><a href="#id2985776">Share Settings</a></dt><dt><a href="#id2985841">Printers Settings</a></dt><dt><a href="#id2985906">The SWAT Wizard</a></dt><dt><a href="#id2985953">The Status Page</a></dt><dt><a href="#id2986005">The View Page</a></dt><dt><a href="#id2986028">The Password Change Page</a></dt></dl></dd></dl></div><p>
+ </p></li></ul></div><div class="table"><a name="id2938959"></a><p class="title"><b>Table31.2.Nature of the Conversion Choices</b></p><table summary="Nature of the Conversion Choices" border="1"><colgroup><col align="justify"><col align="justify"><col align="justify"></colgroup><thead><tr><th align="justify">Simple</th><th align="justify">Upgraded</th><th align="justify">Redesign</th></tr></thead><tbody><tr><td align="justify"><p>Make use of minimal OS specific features</p></td><td align="justify"><p>Translate NT4 features to new host OS features</p></td><td align="justify"><p>Decide:</p></td></tr><tr><td align="justify"><p>Suck all accounts from NT4 into Samba-3</p></td><td align="justify"><p>Copy and improve:</p></td><td align="justify"><p>Authentication Regime (database location and access)</p></td></tr><tr><td align="justify"><p>Make least number of operational changes</p></td><td align="justify"><p>Make progressive improvements</p></td><td align="justify"><p>Desktop Management Methods</p></td></tr><tr><td align="justify"><p>Take least amount of time to migrate</p></td><td align="justify"><p>Minimise user impact</p></td><td align="justify"><p>Better Control of Desktops / Users</p></td></tr><tr><td align="justify"><p>Live versus Isolated Conversion</p></td><td align="justify"><p>Maximise functionality</p></td><td align="justify"><p>Identify Needs for: Manageability, Scalability, Security, Availability</p></td></tr><tr><td align="justify"><p>Integrate Samba-3 then migrate while users are active, then Change of control (ie: swap out)</p></td><td align="justify"><p>Take advantage of lower maintenance opportunity</p></td><td align="justify"><p></p></td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939144"></a>Samba-3 Implementation Choices</h3></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Authentication database/back end:</span></dt><dd><p>
+ Samba-3 can use an external authentication backend:
+ </p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>Winbind (external Samba or NT4/200x server)</p></li><li><p>External server could use Active Directory or NT4 Domain</p></li><li><p>Can use pam_mkhomedir.so to auto-create home dirs</p></li></ul></div><p>
+ </p><p>
+ Samba-3 can use a local authentication backend:
+ </p><div class="itemizedlist"><ul type="disc"><li><p>smbpasswd, tdbsam, ldapsam, mysqlsam</p></li></ul></div><p>
+ </p></dd><dt><span class="term">Access Control Points:</span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>On the Share itself - using Share ACLs</p></li><li><p>On the file system - using UNIX permissions on files and directories</p><p>Note: Can Enable Posix ACLs in file system also</p></li><li><p>Through Samba share parameters - Not recommended - except as last resort</p></li></ul></div></dd><dt><span class="term">Policies (migrate or create new ones):</span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Using Group Policy Editor (NT4)</p></li><li><p>- Watch out for Tattoo effect</p></li></ul></div></dd><dt><span class="term">User and Group Profiles:</span></dt><dd><p>
+ Platform specific so use platform tool to change from a Local to a Roaming profile
+ Can use new profiles tool to change SIDs (NTUser.DAT)
+ </p></dd><dt><span class="term">Logon Scripts:</span></dt><dd><p>
+ Know how they work
+ </p></dd><dt><span class="term">User and Group mapping to Unix/Linux:</span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>username map facility may be needed</p></li><li><p>Use 'net groupmap' to connect NT4 groups to Unix groups</p></li><li><p>Use pdbedit to set/change user configuration</p><p>
+ NOTE: When migrating to LDAP back, end it may be easier to dump initial
+ LDAP database to LDIF, then edit, then reload into LDAP
+ </p></li></ul></div></dd><dt><span class="term">OS specific scripts/programs may be needed:</span></dt><dd><div class="itemizedlist"><ul type="disc"><li><p>Add/Delete Users: Note OS limits on size of name
+ (Linux 8 chars) NT4 up to 254 chars</p></li><li><p>Add/Delete Machines: Applied only to domain members
+ (Note: Machine names may be limited to 16 characters)</p></li><li><p>Use 'net groupmap' to connect NT4 groups to Unix groups</p></li><li><p>Add/Delete Groups: Note OS limits on size and nature.
+ Linux limit is 16 char, no spaces and no upper case chars (groupadd)</p></li></ul></div></dd><dt><span class="term">Migration Tools:</span></dt><dd><p>
+ Domain Control (NT4 Style) Profiles, Policies, Access Controls, Security
+ </p><div class="itemizedlist"><ul type="disc"><li><p>Samba: net, rpcclient, smbpasswd, pdbedit, profiles</p></li><li><p>Windows: NT4 Domain User Manager, Server Manager (NEXUS)</p></li></ul></div><p>
+ </p></dd></dl></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SWAT"></a>Chapter32.SWAT - The Samba Web Administration Tool</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">April 21, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2939504">Features and Benefits</a></dt><dd><dl><dt><a href="#id2939553">Enabling SWAT for use</a></dt><dt><a href="#id2939790">Securing SWAT through SSL</a></dt><dt><a href="#id2939902">The SWAT Home Page</a></dt><dt><a href="#id2939968">Global Settings</a></dt><dt><a href="#id2940074">Share Settings</a></dt><dt><a href="#id2940138">Printers Settings</a></dt><dt><a href="#id2940203">The SWAT Wizard</a></dt><dt><a href="#id2940250">The Status Page</a></dt><dt><a href="#id2940302">The View Page</a></dt><dt><a href="#id2940326">The Password Change Page</a></dt></dl></dd></dl></div><p>
There are many and varied opinions regarding the usefulness or otherwise of SWAT.
No matter how hard one tries to produce the perfect configuration tool it remains
an object of personal taste. SWAT is a tool that will allow web based configuration
@@ -15191,7 +14523,7 @@ of samba. It has a wizard that may help to get samba configured quickly, it has
sensitive help on each smb.conf parameter, it provides for monitoring of current state
of connection information, and it allows network wide MS Windows network password
management.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2984755"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2939504"></a>Features and Benefits</h2></div></div><div></div></div><p>
There are network administrators who believe that it is a good idea to write systems
documentation inside configuration files, for them SWAT will aways be a nasty tool. SWAT
does not store the configuration file in any intermediate form, rather, it stores only the
@@ -15203,9 +14535,9 @@ internal ordering.
So before using SWAT please be warned - SWAT will completely replace your smb.conf with
a fully optimised file that has been stripped of all comments you might have placed there
and only non-default settings will be written to the file.
-</p></div><div xmlns:ns96="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2984605"></a>Enabling SWAT for use</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939553"></a>Enabling SWAT for use</h3></div></div><div></div></div><p>
SWAT should be installed to run via the network super daemon. Depending on which system
-your Unix/Linux system has you will have either an <b class="command">inetd</b> or
+your UNIX/Linux system has you will have either an <b class="command">inetd</b> or
<b class="command">xinetd</b> based system.
</p><p>
The nature and location of the network super-daemon varies with the operating system
@@ -15219,8 +14551,8 @@ The control entry for the older style file might be:
swat stream tcp nowait.400 root /usr/sbin/swat swat
</pre><p>
A control file for the newer style xinetd could be:
-</p><ns96:p>
-</ns96:p><pre class="programlisting">
+</p><p>
+</p><pre class="programlisting">
# default: off
# description: SWAT is the Samba Web Admin Tool. Use swat \
# to configure your Samba server. To use SWAT, \
@@ -15236,9 +14568,9 @@ A control file for the newer style xinetd could be:
log_on_failure += USERID
disable = yes
}
-</pre><ns96:p>
+</pre><p>
-</ns96:p><p>
+</p><p>
Both the above examples assume that the <b class="command">swat</b> binary has been
located in the <tt class="filename">/usr/sbin</tt> directory. In addition to the above
SWAT will use a directory access point from which it will load it's help files
@@ -15257,32 +14589,32 @@ So long as you log onto SWAT as the user <span class="emphasis"><em>root</em></s
full change and commit ability. The buttons that will be exposed includes:
<span class="guibutton">HOME</span>, <span class="guibutton">GLOBALS</span>, <span class="guibutton">SHARES</span>, <span class="guibutton">PRINTERS</span>,
<span class="guibutton">WIZARD</span>, <span class="guibutton">STATUS</span>, <span class="guibutton">VIEW</span>, <span class="guibutton">PASSWORD</span>.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985495"></a>Securing SWAT through SSL</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939790"></a>Securing SWAT through SSL</h3></div></div><div></div></div><p>
Lots of people have asked about how to setup SWAT with SSL to allow for secure remote
administration of Samba. Here is a method that works, courtesy of Markus Krieger
</p><p>
Modifications to the swat setup are as following:
</p><div class="procedure"><ol type="1"><li><p>
install OpenSSL
- </p></li><li xmlns:ns97=""><ns97:p>
+ </p></li><li><p>
generate certificate and private key
- </ns97:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>/usr/bin/openssl req -new -x509 -days 365 -nodes -config \
- /usr/share/doc/packages/stunnel/stunnel.cnf \
+ /usr/share/doc/packages/stunnel/stunnel.cnf \
-out /etc/stunnel/stunnel.pem -keyout /etc/stunnel/stunnel.pem</tt></b>
- </pre></li><li><p>
+</pre></li><li><p>
remove swat-entry from [x]inetd
- </p></li><li xmlns:ns98=""><ns98:p>
+ </p></li><li><p>
start stunnel
- </ns98:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>stunnel -p /etc/stunnel/stunnel.pem -d 901 \
-l /usr/local/samba/bin/swat swat </tt></b>
- </pre></li></ol></div><p>
+</pre></li></ol></div><p>
afterwords simply contact to swat by using the URL <a href="https://myhost:901" target="_top">https://myhost:901</a>, accept the certificate
and the SSL connection is up.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985607"></a>The SWAT Home Page</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939902"></a>The SWAT Home Page</h3></div></div><div></div></div><p>
The SWAT title page provides access to the latest Samba documentation. The manual page for
each samba component is accessible from this page as are the Samba-HOWTO-Collection (this
document) as well as the O'Reilly book &quot;Using Samba&quot;.
@@ -15290,15 +14622,14 @@ document) as well as the O'Reilly book &quot;Using Samba&quot;.
Administrators who wish to validate their samba configuration may obtain useful information
from the man pages for the diagnostic utilities. These are available from the SWAT home page
also. One diagnostic tool that is NOT mentioned on this page, but that is particularly
-useful is <b class="command">ethereal</b>, available from <a href="http://www.ethereal.com" target="_top">
-http://www.ethereal.com</a>.
+useful is <a href="http://www.ethereal.com/" target="_top"><b class="command">ethereal</b></a>.
</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
SWAT can be configured to run in <span class="emphasis"><em>demo</em></span> mode. This is NOT recommended
as it runs SWAT without authentication and with full administrative ability. ie: Allows
changes to smb.conf as well as general operation with root privileges. The option that
creates this ability is the <tt class="option">-a</tt> flag to swat. <span class="emphasis"><em>Do not use this in any
production environment.</em></span>
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985671"></a>Global Settings</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2939968"></a>Global Settings</h3></div></div><div></div></div><p>
The Globals button will expose a page that allows configuration of the global parameters
in smb.conf. There are three levels of exposure of the parameters:
</p><div class="itemizedlist"><ul type="disc"><li><p>
@@ -15311,8 +14642,8 @@ in smb.conf. There are three levels of exposure of the parameters:
will want to tamper with.
</p></li></ul></div><p>
To switch to other than <span class="emphasis"><em>Basic</em></span> editing ability click on either the
-<span class="emphasis"><em>Advanced</em></span> or the <span class="emphasis"><em>Developer</em></span> dial, then click the
-<span class="guibutton">Commit Changes</span> button.
+<span class="emphasis"><em>Advanced</em></span> or the <span class="emphasis"><em>Developer</em></span> button. You may also
+do this by clicking on the radio button, then click the <span class="guibutton">Commit Changes</span> button.
</p><p>
After making any changes to configuration parameters make sure that you click on the
<span class="guibutton">Commit Changes</span> button before moving to another area otherwise
@@ -15320,7 +14651,7 @@ your changes will be immediately lost.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
SWAT has context sensitive help. To find out what each parameter is for simply click the
<span class="guibutton">Help</span> link to the left of the configuration parameter.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985776"></a>Share Settings</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940074"></a>Share Settings</h3></div></div><div></div></div><p>
To affect a currently configured share, simply click on the pull down button between the
<span class="guibutton">Choose Share</span> and the <span class="guibutton">Delete Share</span> buttons,
select the share you wish to operate on, then to edit the settings click on the
@@ -15330,7 +14661,7 @@ select the share you wish to operate on, then to edit the settings click on the
To create a new share, next to the button labelled <span class="guibutton">Create Share</span> enter
into the text field the name of the share to be created, then click on the
<span class="guibutton">Create Share</span> button.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985841"></a>Printers Settings</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940138"></a>Printers Settings</h3></div></div><div></div></div><p>
To affect a currently configured printer, simply click on the pull down button between the
<span class="guibutton">Choose Printer</span> and the <span class="guibutton">Delete Printer</span> buttons,
select the printer you wish to operate on, then to edit the settings click on the
@@ -15340,7 +14671,7 @@ select the printer you wish to operate on, then to edit the settings click on th
To create a new printer, next to the button labelled <span class="guibutton">Create Printer</span> enter
into the text field the name of the share to be created, then click on the
<span class="guibutton">Create Printer</span> button.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985906"></a>The SWAT Wizard</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940203"></a>The SWAT Wizard</h3></div></div><div></div></div><p>
The purpose if the SWAT Wizard is to help the Microsoft knowledgeable network administrator
to configure Samba with a minimum of effort.
</p><p>
@@ -15356,7 +14687,7 @@ Finally, there are a limited set of options that will determine what type of ser
will be configured for, whether it will be a WINS server, participate as a WINS client, or
operate with no WINS support. By clicking on one button you can elect to expose (or not) user
home directories.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2985953"></a>The Status Page</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940250"></a>The Status Page</h3></div></div><div></div></div><p>
The status page serves a limited purpose. Firstly, it allows control of the samba daemons.
The key daemons that create the samba server environment are: <span class="application">smbd</span>, <span class="application">nmbd</span>, <span class="application">winbindd</span>.
</p><p>
@@ -15367,11 +14698,11 @@ conditions with minimal effort.
</p><p>
Lastly, the Status page may be used to terminate specific smbd client connections in order to
free files that may be locked.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986005"></a>The View Page</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940302"></a>The View Page</h3></div></div><div></div></div><p>
This page allows the administrator to view the optimised <tt class="filename">smb.conf</tt> file and, if you are
particularly masochistic, will permit you also to see all possible global configuration
parameters and their settings.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2986028"></a>The Password Change Page</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940326"></a>The Password Change Page</h3></div></div><div></div></div><p>
The Password Change page is a popular tool. This tool allows the creation, deletion, deactivation
and reactivation of MS Windows networking users on the local machine. Alternatively, you can use
this tool to change a local password for a user account.
@@ -15382,7 +14713,7 @@ required.
</p><p>
One popular use for this tool is to change user passwords across a range of remote MS Windows
servers.
-</p></div></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="troubleshooting"></a>Troubleshooting</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>33. <a href="#diagnosis">The Samba checklist</a></dt><dd><dl><dt><a href="#id2986149">Introduction</a></dt><dt><a href="#id2986183">Assumptions</a></dt><dt><a href="#id2986356">The tests</a></dt><dt><a href="#id2989908">Still having troubles?</a></dt></dl></dd><dt>34. <a href="#problems">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="#id2991300">Diagnostics tools</a></dt><dt><a href="#id2990026">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="#id2990310">Useful URLs</a></dt><dt><a href="#id2990353">Getting help from the mailing lists</a></dt><dt><a href="#id2990506">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="#bugreport">Reporting Bugs</a></dt><dd><dl><dt><a href="#id2992820">Introduction</a></dt><dt><a href="#id2992880">General info</a></dt><dt><a href="#id2992915">Debug levels</a></dt><dt><a href="#id2991012">Internal errors</a></dt><dt><a href="#id2991120">Attaching to a running process</a></dt><dt><a href="#id2990621">Patches</a></dt></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="diagnosis"></a>Chapter33.The Samba checklist</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">Wed Jan 15</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2986149">Introduction</a></dt><dt><a href="#id2986183">Assumptions</a></dt><dt><a href="#id2986356">The tests</a></dt><dt><a href="#id2989908">Still having troubles?</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2986149"></a>Introduction</h2></div></div><div></div></div><p>
+</p></div></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="troubleshooting"></a>Troubleshooting</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>33. <a href="#diagnosis">The Samba checklist</a></dt><dd><dl><dt><a href="#id2940455">Introduction</a></dt><dt><a href="#id2940496">Assumptions</a></dt><dt><a href="#id2940722">The tests</a></dt></dl></dd><dt>34. <a href="#problems">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="#id2942220">Diagnostics tools</a></dt><dd><dl><dt><a href="#id2942241">Debugging with Samba itself</a></dt><dt><a href="#id2942367">Tcpdump</a></dt><dt><a href="#id2942389">Ethereal</a></dt><dt><a href="#id2942441">The Windows Network Monitor</a></dt></dl></dd><dt><a href="#id2942759">Useful URLs</a></dt><dt><a href="#id2942799">Getting help from the mailing lists</a></dt><dt><a href="#id2942958">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="#bugreport">Reporting Bugs</a></dt><dd><dl><dt><a href="#id2943087">Introduction</a></dt><dt><a href="#id2943154">General info</a></dt><dt><a href="#id2943191">Debug levels</a></dt><dt><a href="#id2943400">Internal errors</a></dt><dt><a href="#id2943534">Attaching to a running process</a></dt><dt><a href="#id2943580">Patches</a></dt></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="diagnosis"></a>Chapter33.The Samba checklist</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">Wed Jan 15</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2940455">Introduction</a></dt><dt><a href="#id2940496">Assumptions</a></dt><dt><a href="#id2940722">The tests</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2940455"></a>Introduction</h2></div></div><div></div></div><p>
This file contains a list of tests you can perform to validate your
Samba server. It also tells you what the likely cause of the problem
is if it fails any one of these steps. If it passes all these tests
@@ -15397,7 +14728,7 @@ to solve a problem.
If you send one of the samba mailing lists an email saying &quot;it doesn't work&quot;
and you have not followed this test procedure then you should not be surprised
if your email is ignored.
-</p></div><div xmlns:ns99="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2986183"></a>Assumptions</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2940496"></a>Assumptions</h2></div></div><div></div></div><p>
In all of the tests it is assumed you have a Samba server called
BIGSERVER and a PC called ACLIENT both in workgroup TESTGROUP.
</p><p>
@@ -15407,15 +14738,8 @@ It is also assumed you know the name of an available share in your
<tt class="filename">smb.conf</tt>. I will assume this share is called <i class="replaceable"><tt>tmp</tt></i>.
You can add a <i class="replaceable"><tt>tmp</tt></i> share like this by adding the
following to <tt class="filename">smb.conf</tt>:
-</p><pre class="programlisting">
-
-[tmp]
- comment = temporary files
- path = /tmp
- read only = yes
-
-</pre><ns99:p>
-</ns99:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="example"><a name="id2940544"></a><p class="title"><b>Example33.1.smb.conf with [tmp] share</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[tmp]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = temporary files </tt></i></td></tr><tr><td><i class="parameter"><tt>path = /tmp</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = yes</tt></i></td></tr></table></div><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
These tests assume version 3.0 or later of the samba suite.
Some commands shown did not exist in earlier versions.
</p></div><p>
@@ -15427,7 +14751,7 @@ file points to name servers that really do exist.
Also, if you do not have DNS server access for name resolution please check
that the settings for your <tt class="filename">smb.conf</tt> file results in <b class="command">dns proxy = no</b>. The
best way to check this is with <b class="userinput"><tt>testparm smb.conf</tt></b>.
-</p><p>
+</p><a class="indexterm" name="id2940644"></a><p>
It is helpful to monitor the log files during testing by using the
<b class="command">tail -F <i class="replaceable"><tt>log_file_name</tt></i></b> in a separate
terminal console (use ctrl-alt-F1 through F6 or multiple terminals in X).
@@ -15438,7 +14762,7 @@ depending on how or if you specified logging in your <tt class="filename">smb.co
</p><p>
If you make changes to your <tt class="filename">smb.conf</tt> file while going through these test,
don't forget to restart <span class="application">smbd</span> and <span class="application">nmbd</span>.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2986356"></a>The tests</h2></div></div><div></div></div><div class="procedure"><p class="title"><b>Procedure33.1.Diagnosing your samba server</b></p><ol type="1"><li><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2940722"></a>The tests</h2></div></div><div></div></div><div class="procedure"><p class="title"><b>Procedure33.1.Diagnosing your samba server</b></p><a class="indexterm" name="id2940738"></a><ol type="1"><li><p>
In the directory in which you store your <tt class="filename">smb.conf</tt> file, run the command
<b class="userinput"><tt>testparm smb.conf</tt></b>. If it reports any errors then your <tt class="filename">smb.conf</tt>
configuration file is faulty.
@@ -15484,6 +14808,8 @@ that file incorrectly. If you installed it as a daemon then check that
it is running, and check that the netbios-ssn port is in a LISTEN
state using <b class="userinput"><tt>netstat -a</tt></b>.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2941003"></a>
+<a class="indexterm" name="id2941011"></a>
Some Unix / Linux systems use <b class="command">xinetd</b> in place of
<b class="command">inetd</b>. Check your system documentation for the location
of the control file/s for your particular system implementation of
@@ -15500,26 +14826,20 @@ files exist.
There are a number of reasons for which smbd may refuse or decline
a session request. The most common of these involve one or more of
the following <tt class="filename">smb.conf</tt> file entries:
-</p><pre class="programlisting">
- hosts deny = ALL
- hosts allow = xxx.xxx.xxx.xxx/yy
- bind interfaces only = Yes
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>hosts deny = ALL</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts allow = xxx.xxx.xxx.xxx/yy</tt></i></td></tr><tr><td><i class="parameter"><tt>bind interfaces only = Yes</tt></i></td></tr></table><p>
In the above, no allowance has been made for any session requests that
will automatically translate to the loopback adapter address 127.0.0.1.
To solve this problem change these lines to:
-</p><pre class="programlisting">
- hosts deny = ALL
- hosts allow = xxx.xxx.xxx.xxx/yy 127.
-</pre><p>
-Do <span class="emphasis"><em>not</em></span> use the <b class="command">bind interfaces only</b> parameter where you
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>hosts deny = ALL</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts allow = xxx.xxx.xxx.xxx/yy 127.</tt></i></td></tr></table><p>
+Do <span class="emphasis"><em>not</em></span> use the <a class="indexterm" name="id2941171"></a><i class="parameter"><tt>bind interfaces only</tt></i> parameter where you
may wish to
use the samba password change facility, or where <span class="application">smbclient</span> may need to
access a local service for name resolution or for local resource
-connections. (Note: the <b class="command">bind interfaces only</b> parameter deficiency
+connections. (Note: the <a class="indexterm" name="id2941197"></a><i class="parameter"><tt>bind interfaces only</tt></i> parameter deficiency
where it will not allow connections to the loopback address will be
fixed soon).
</p><p>
+<a class="indexterm" name="id2941217"></a>
Another common cause of these two errors is having something already running
on port <tt class="constant">139</tt>, such as Samba
(ie: <span class="application">smbd</span> is running from <span class="application">inetd</span> already) or
@@ -15562,20 +14882,20 @@ messages from several hosts.
If this doesn't give a similar result to the previous test then
nmblookup isn't correctly getting your broadcast address through its
automatic mechanism. In this case you should experiment with the
-<b class="command">interfaces</b> option in <tt class="filename">smb.conf</tt> to manually configure your IP
+<a class="indexterm" name="id2941388"></a><i class="parameter"><tt>interfaces</tt></i> option in <tt class="filename">smb.conf</tt> to manually configure your IP
address, broadcast and netmask.
</p><p>
If your PC and server aren't on the same subnet then you will need to
-use the <i class="parameter"><tt>-B</tt></i> option to set the broadcast address to that of the PCs
+use the <tt class="option">-B</tt> option to set the broadcast address to that of the PCs
subnet.
</p><p>
This test will probably fail if your subnet mask and broadcast address are
not correct. (Refer to TEST 3 notes above).
-</p></li><li><p>
+</p></li><li><a class="indexterm" name="id2941436"></a><p>
Run the command <b class="userinput"><tt>smbclient //BIGSERVER/TMP</tt></b>. You should
then be prompted for a password. You should use the password of the account
you are logged into the unix box with. If you want to test with
-another account then add the <i class="parameter"><tt>-U <i class="replaceable"><tt>accountname</tt></i></tt></i> option to the end of
+another account then add the <tt class="option">-U <i class="replaceable"><tt>accountname</tt></i></tt> option to the end of
the command line. eg:
<b class="userinput"><tt>smbclient //bigserver/tmp -Ujohndoe</tt></b>
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
@@ -15592,14 +14912,13 @@ If it says <span class="errorname">bad password</span> then the likely causes ar
you have shadow passwords (or some other password system) but didn't
compile in support for them in <span class="application">smbd</span>
</p></li><li><p>
- your <b class="command">valid users</b> configuration is incorrect
+ your <a class="indexterm" name="id2941557"></a><i class="parameter"><tt>valid users</tt></i> configuration is incorrect
</p></li><li><p>
- you have a mixed case password and you haven't enabled the <b class="command">password
- level</b> option at a high enough level
+ you have a mixed case password and you haven't enabled the <a class="indexterm" name="id2941580"></a><i class="parameter"><tt>password level</tt></i> option at a high enough level
</p></li><li><p>
- the <b class="command">path =</b> line in <tt class="filename">smb.conf</tt> is incorrect. Check it with <span class="application">testparm</span>
+ the <a class="indexterm" name="id2941603"></a><i class="parameter"><tt>path</tt></i> line in <tt class="filename">smb.conf</tt> is incorrect. Check it with <span class="application">testparm</span>
</p></li><li><p>
- you enabled password encryption but didn't map unix to samba users
+ you enabled password encryption but didn't map unix to samba users. Run </p><pre class="screen"><b class="userinput"><tt>smbpasswd -a <i class="replaceable"><tt>username</tt></i></tt></b></pre><p>.
</p></li></ol></div><p>
Once connected you should be able to use the commands
<b class="command">dir</b> <b class="command">get</b> <b class="command">put</b> etc.
@@ -15649,14 +14968,13 @@ installed or your smb.conf is incorrect. make sure your <b class="command">hosts
and other config lines in <tt class="filename">smb.conf</tt> are correct.
</p><p>
It's also possible that the server can't work out what user name to
-connect you as. To see if this is the problem add the line <i class="parameter"><tt>user =
-<i class="replaceable"><tt>username</tt></i></tt></i> to the <i class="parameter"><tt>[tmp]</tt></i> section of
+connect you as. To see if this is the problem add the line <a class="indexterm" name="id2941893"></a><i class="parameter"><tt>user</tt></i> = username to the <i class="parameter"><tt>[tmp]</tt></i> section of
<tt class="filename">smb.conf</tt> where <i class="replaceable"><tt>username</tt></i> is the
username corresponding to the password you typed. If you find this
fixes things you may need the username mapping option.
</p><p>
It might also be the case that your client only sends encrypted passwords
-and you have <i class="parameter"><tt>encrypt passwords = no</tt></i> in <tt class="filename">smb.conf</tt>
+and you have <a class="indexterm" name="id2941933"></a><i class="parameter"><tt>encrypt passwords</tt></i> = no in <tt class="filename">smb.conf</tt>
Turn it back on to fix.
</p></li><li><p>
Run the command <b class="userinput"><tt>nmblookup -M <i class="replaceable"><tt>testgroup</tt></i></tt></b> where
@@ -15667,30 +14985,33 @@ master browser for that workgroup.
If you don't then the election process has failed. Wait a minute to
see if it is just being slow then try again. If it still fails after
that then look at the browsing options you have set in <tt class="filename">smb.conf</tt>. Make
-sure you have <i class="parameter"><tt>preferred master = yes</tt></i> to ensure that
+sure you have <a class="indexterm" name="id2941997"></a><i class="parameter"><tt>preferred master</tt></i> = yes to ensure that
an election is held at startup.
</p></li><li><p>
-&gt;From file manager try to browse the server. Your samba server should
+From file manager try to browse the server. Your samba server should
appear in the browse list of your local workgroup (or the one you
-specified in smb.conf). You should be able to double click on the name
+specified in <tt class="filename">smb.conf</tt>). You should be able to double click on the name
of the server and get a list of shares. If you get a &quot;invalid
password&quot; error when you do then you are probably running WinNT and it
is refusing to browse a server that has no encrypted password
capability and is in user level security mode. In this case either set
-<i class="parameter"><tt>security = server</tt></i> AND
-<i class="parameter"><tt>password server = Windows_NT_Machine</tt></i> in your
-<tt class="filename">smb.conf</tt> file, or make sure <i class="parameter"><tt>encrypted passwords</tt></i> is
+<a class="indexterm" name="id2942048"></a><i class="parameter"><tt>security</tt></i> = server AND
+<a class="indexterm" name="id2942062"></a><i class="parameter"><tt>password server</tt></i> = Windows_NT_Machine in your
+<tt class="filename">smb.conf</tt> file, or make sure <a class="indexterm" name="id2942083"></a><i class="parameter"><tt>encrypt passwords</tt></i> is
set to &quot;yes&quot;.
-</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2989908"></a>Still having troubles?</h2></div></div><div></div></div><p>Read the chapter on
-<a href="#problems" title="Chapter34.Analysing and solving samba problems">Analysing and Solving Problems</a>.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="problems"></a>Chapter34.Analysing and solving samba problems</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">8 Apr 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2991300">Diagnostics tools</a></dt><dt><a href="#id2990026">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="#id2990310">Useful URLs</a></dt><dt><a href="#id2990353">Getting help from the mailing lists</a></dt><dt><a href="#id2990506">How to get off the mailing lists</a></dt></dl></div><p>
+</p></li></ol></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="problems"></a>Chapter34.Analysing and solving samba problems</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">8 Apr 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2942220">Diagnostics tools</a></dt><dd><dl><dt><a href="#id2942241">Debugging with Samba itself</a></dt><dt><a href="#id2942367">Tcpdump</a></dt><dt><a href="#id2942389">Ethereal</a></dt><dt><a href="#id2942441">The Windows Network Monitor</a></dt></dl></dd><dt><a href="#id2942759">Useful URLs</a></dt><dt><a href="#id2942799">Getting help from the mailing lists</a></dt><dt><a href="#id2942958">How to get off the mailing lists</a></dt></dl></div><p>
There are many sources of information available in the form
of mailing lists, RFC's and documentation. The docs that come
with the samba distribution contain very good explanations of
-general SMB topics such as browsing.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2991300"></a>Diagnostics tools</h2></div></div><div></div></div><p>
+general SMB topics such as browsing.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2942220"></a>Diagnostics tools</h2></div></div><div></div></div><p>With SMB networking, it is often not immediately clear what
+the cause is of a certain problem. Samba itself provides rather
+useful information, but in some cases you might have to fall back
+to using a <span class="emphasis"><em>sniffer</em></span>. A sniffer is a program that
+listens on your LAN, analyses the data sent on it and displays it
+on the screen.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942241"></a>Debugging with Samba itself</h3></div></div><div></div></div><p>
One of the best diagnostic tools for debugging problems is Samba itself.
You can use the <tt class="option">-d option</tt> for both <span class="application">smbd</span> and <span class="application">nmbd</span> to specify what
-<i class="parameter"><tt>debug level</tt></i> at which to run. See the man pages on smbd, nmbd and
+<a class="indexterm" name="id2942272"></a><i class="parameter"><tt>debug level</tt></i> at which to run. See the man pages on smbd, nmbd and
smb.conf for more information on debugging options. The debug
level can range from 1 (the default) to 10 (100 for debugging passwords).
</p><p>
@@ -15709,14 +15030,19 @@ typing in your password, you can attach gdb and continue.
</p><p>
Some useful samba commands worth investigating:
</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>testparm | more</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>smbclient -L //{netbios name of server}</tt></b>
-</pre><p>
-An SMB enabled version of tcpdump is available from
-<a href="http://www.tcpdump.org/" target="_top">http://www.tcpdup.org/</a>.
-Ethereal, another good packet sniffer for Unix and Win32
-hosts, can be downloaded from <a href="http://www.ethereal.com/" target="_top">http://www.ethereal.com</a>.
-</p><p>
+<tt class="prompt">$ </tt><b class="userinput"><tt>testparm | more</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>smbclient -L //{netbios name of server}</tt></b>
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942367"></a>Tcpdump</h3></div></div><div></div></div><p><a href="http://www.tcpdump.org/" target="_top">Tcpdump</a> was the first
+unix sniffer with SMB support. It is a command-line utility and
+nowadays, it's SMB support is somewhat less then that of ethereal
+and tethereal.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942389"></a>Ethereal</h3></div></div><div></div></div><p>
+<a href="http://www.ethereal.com/" target="_top">Ethereal</a> is a graphical
+sniffer, available for both unix (Gtk) and Windows. Ethereal's
+SMB support is very good.</p><p>For details on the use of ethereal, read the well-written
+ethereal User Guide.</p><p>
+Listen for data on ports 137, 138, 139 and 445. E.g.
+use the filter <b class="userinput"><tt>port 137 or port 138 or port 139 or port 445</tt></b>.</p><p>A console version of ethereal is available as well and is called
+<b class="command">tethereal</b>.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2942441"></a>The Windows Network Monitor</h3></div></div><div></div></div><p>
For tracing things on the Microsoft Windows NT, Network Monitor
(aka. netmon) is available on the Microsoft Developer Network CD's,
the Windows NT Server install CD and the SMS CD's. The version of
@@ -15726,7 +15052,7 @@ The version on the NT Server install CD will only allow monitoring
of network traffic directed to the local NT box and broadcasts on the
local subnet. Be aware that Ethereal can read and write netmon
formatted files.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990026"></a>Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</h2></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2942462"></a>Installing 'Network Monitor' on an NT Workstation</h4></div></div><div></div></div><p>
Installing netmon on an NT workstation requires a couple
of steps. The following are for installing Netmon V4.00.349, which comes
with Microsoft Windows NT Server 4.0, on Microsoft Windows NT
@@ -15759,17 +15085,17 @@ Now copy the files from the NT Server in <tt class="filename">%SYSTEMROOT%\Syste
to <tt class="filename">%SYSTEMROOT%\System32\netmon\*.*</tt> on the Workstation and set
permissions as you deem appropriate for your site. You will need
administrative rights on the NT box to run netmon.
-</p><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2942732"></a>Installing 'Network Monitor' on an 9x Workstation</h4></div></div><div></div></div><p>
To install Netmon on a Windows 9x box install the network monitor agent
from the Windows 9x CD (<tt class="filename">\admin\nettools\netmon</tt>). There is a readme
file located with the netmon driver files on the CD if you need
information on how to do this. Copy the files from a working
Netmon installation.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990310"></a>Useful URLs</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>See how Scott Merrill simulates a BDC behavior at
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2942759"></a>Useful URLs</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>See how Scott Merrill simulates a BDC behavior at
<a href="http://www.skippy.net/linux/smb-howto.html" target="_top">
http://www.skippy.net/linux/smb-howto.html</a>. </p></li><li><p>FTP site for older SMB specs:
<a href="ftp://ftp.microsoft.com/developr/drg/CIFS/" target="_top">
- ftp://ftp.microsoft.com/developr/drg/CIFS/</a></p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990353"></a>Getting help from the mailing lists</h2></div></div><div></div></div><p>
+ ftp://ftp.microsoft.com/developr/drg/CIFS/</a></p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2942799"></a>Getting help from the mailing lists</h2></div></div><div></div></div><p>
There are a number of Samba related mailing lists. Go to <a href="http://samba.org" target="_top">http://samba.org</a>, click on your nearest mirror
and then click on <b class="command">Support</b> and then click on <b class="command">
Samba related mailing lists</b>.
@@ -15779,10 +15105,10 @@ For questions relating to Samba TNG go to
It has been requested that you don't post questions about Samba-TNG to the
main stream Samba lists.</p><p>
If you post a message to one of the lists please observe the following guide lines :
-</p><div class="itemizedlist"><ul type="disc"><li><p> Always remember that the developers are volunteers, they are
+</p><div class="itemizedlist"><ul type="disc"><li><p>Always remember that the developers are volunteers, they are
not paid and they never guarantee to produce a particular feature at
a particular time. Any time lines are 'best guess' and nothing more.
-</p></li><li><p> Always mention what version of samba you are using and what
+</p></li><li><p>Always mention what version of samba you are using and what
operating system its running under. You should probably list the
relevant sections of your <tt class="filename">smb.conf</tt> file, at least the options
in [global] that affect PDC support.</p></li><li><p>In addition to the version, if you obtained Samba via
@@ -15803,15 +15129,14 @@ error messages.</p></li><li><p>(Possibly) If you have a complete netmon trace (
the pipe to the error ) you can send the *.CAP file as well.</p></li><li><p>Please think carefully before attaching a document to an email.
Consider pasting the relevant parts into the body of the message. The samba
mailing lists go to a huge number of people, do they all need a copy of your
-smb.conf in their attach directory?</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990506"></a>How to get off the mailing lists</h2></div></div><div></div></div><p>To have your name removed from a samba mailing list, go to the
+smb.conf in their attach directory?</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2942958"></a>How to get off the mailing lists</h2></div></div><div></div></div><p>To have your name removed from a samba mailing list, go to the
same place you went to to get on it. Go to <a href="http://lists.samba.org/" target="_top">http://lists.samba.org</a>,
click on your nearest mirror and then click on <b class="command">Support</b> and
-then click on <b class="command"> Samba related mailing lists</b>. Or perhaps see
-<a href="http://lists.samba.org/mailman/roster/samba-ntdom" target="_top">here</a>
+then click on <b class="command"> Samba related mailing lists</b>.
</p><p>
Please don't post messages to the list asking to be removed, you will just
be referred to the above address (unless that process failed in some way...)
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="bugreport"></a>Chapter35.Reporting Bugs</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Tridge or Karl Auer perhaps?</span></h3></div></div><div><p class="pubdate"> 27 June 1997 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2992820">Introduction</a></dt><dt><a href="#id2992880">General info</a></dt><dt><a href="#id2992915">Debug levels</a></dt><dt><a href="#id2991012">Internal errors</a></dt><dt><a href="#id2991120">Attaching to a running process</a></dt><dt><a href="#id2990621">Patches</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992820"></a>Introduction</h2></div></div><div></div></div><p>Please report bugs using
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="bugreport"></a>Chapter35.Reporting Bugs</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> 27 June 1997 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2943087">Introduction</a></dt><dt><a href="#id2943154">General info</a></dt><dt><a href="#id2943191">Debug levels</a></dt><dt><a href="#id2943400">Internal errors</a></dt><dt><a href="#id2943534">Attaching to a running process</a></dt><dt><a href="#id2943580">Patches</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943087"></a>Introduction</h2></div></div><div></div></div><p>Please report bugs using
<a href="https://bugzilla.samba.org/" target="_top">bugzilla</a>.</p><p>
Please take the time to read this file before you submit a bug
report. Also, please see if it has changed between releases, as we
@@ -15833,7 +15158,7 @@ that list that may be able to help you.
You may also like to look though the recent mailing list archives,
which are conveniently accessible on the Samba web pages
at <a href="http://samba.org/samba/" target="_top">http://samba.org/samba/</a>.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992880"></a>General info</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943154"></a>General info</h2></div></div><div></div></div><p>
Before submitting a bug report check your config for silly
errors. Look in your log files for obvious messages that tell you that
you've misconfigured something and run testparm to test your config
@@ -15845,42 +15170,38 @@ This is very important.
If you include part of a log file with your bug report then be sure to
annotate it with exactly what you were doing on the client at the
time, and exactly what the results were.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992915"></a>Debug levels</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943191"></a>Debug levels</h2></div></div><div></div></div><p>
If the bug has anything to do with Samba behaving incorrectly as a
server (like refusing to open a file) then the log files will probably
be very useful. Depending on the problem a log level of between 3 and
10 showing the problem may be appropriate. A higher level gives more
detail, but may use too much disk space.
</p><p>
-To set the debug level use the <i class="parameter"><tt>log level</tt></i> in your
+To set the debug level use the <a class="indexterm" name="id2943212"></a><i class="parameter"><tt>log level</tt></i> in your
<tt class="filename">smb.conf</tt>. You may also find it useful to set the log
level higher for just one machine and keep separate logs for each machine.
-To do this use:
-</p><pre class="programlisting">
-log level = 10
-log file = /usr/local/samba/lib/log.%m
-include = /usr/local/samba/lib/smb.conf.%m
-</pre><p>
+To do this add the following lines to your main <tt class="filename">smb.conf</tt> file:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>log level = 10</tt></i></td></tr><tr><td><i class="parameter"><tt>log file = /usr/local/samba/lib/log.%m</tt></i></td></tr><tr><td><i class="parameter"><tt>include = /usr/local/samba/lib/smb.conf.%m</tt></i></td></tr></table><p>
then create a file
<tt class="filename">/usr/local/samba/lib/smb.conf.<i class="replaceable"><tt>machine</tt></i></tt> where
<i class="replaceable"><tt>machine</tt></i> is the name of the client you wish to debug. In that file
put any <tt class="filename">smb.conf</tt> commands you want, for example
-<i class="parameter"><tt>log level</tt></i> may be useful. This also allows you to
+<a class="indexterm" name="id2943304"></a><i class="parameter"><tt>log level</tt></i> may be useful. This also allows you to
experiment with different security systems, protocol levels etc on just
one machine.
</p><p>
-The <tt class="filename">smb.conf</tt> entry <i class="parameter"><tt>log level</tt></i>
-is synonymous with the parameter <i class="parameter"><tt>debuglevel</tt></i> that has
+The <tt class="filename">smb.conf</tt> entry <a class="indexterm" name="id2943331"></a><i class="parameter"><tt>log level</tt></i>
+is synonymous with the parameter <a class="indexterm" name="id2943345"></a><i class="parameter"><tt>debuglevel</tt></i> that has
been used in older versions of Samba and is being retained for backwards
compatibility of <tt class="filename">smb.conf</tt> files.
</p><p>
-As the <i class="parameter"><tt>log level</tt></i> value is increased you will record
+As the <a class="indexterm" name="id2943370"></a><i class="parameter"><tt>log level</tt></i> value is increased you will record
a significantly increasing level of debugging information. For most
debugging operations you may not need a setting higher than
<tt class="constant">3</tt>. Nearly
all bugs can be tracked at a setting of <tt class="constant">10</tt>, but be
prepared for a VERY large volume of log data.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2991012"></a>Internal errors</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943400"></a>Internal errors</h2></div></div><div></div></div><p>
If you get a <span class="errorname">INTERNAL ERROR</span> message in your log files
it means that Samba got an unexpected signal while running. It is probably a
segmentation fault and almost certainly means a bug in Samba (unless
@@ -15893,13 +15214,13 @@ include it in your bug report.
</p><p>
You should also detail how to reproduce the problem, if
possible. Please make this reasonably detailed.
-</p><p>
+</p><a class="indexterm" name="id2943436"></a><p>
You may also find that a core file appeared in a <tt class="filename">corefiles</tt>
subdirectory of the directory where you keep your samba log
files. This file is the most useful tool for tracking down the bug. To
use it you do this:
-</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>gdb smbd core</tt></b>
+</p><a class="indexterm" name="id2943458"></a><a class="indexterm" name="id2943467"></a><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>gdb smbd core</tt></b>
</pre><p>
adding appropriate paths to smbd and core so gdb can find them. If you
don't have gdb then try <b class="userinput"><tt>dbx</tt></b>. Then within the debugger
@@ -15913,7 +15234,7 @@ disassemble the routine that called it) and try to work out exactly
where the problem is by looking at the surrounding code. Even if you
don't know assembly, including this info in the bug report can be
useful.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2991120"></a>Attaching to a running process</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943534"></a>Attaching to a running process</h2></div></div><div></div></div><p>
Unfortunately some unixes (in particular some recent linux kernels)
refuse to dump a core file if the task has changed uid (which smbd
does often). To debug with this sort of system you could try to attach
@@ -15923,20 +15244,19 @@ to the running process using
Then use <b class="command">c</b> to continue and try to cause the core dump
using the client. The debugger should catch the fault and tell you
where it occurred.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990621"></a>Patches</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943580"></a>Patches</h2></div></div><div></div></div><a class="indexterm" name="id2943588"></a><a class="indexterm" name="id2943596"></a><p>
The best sort of bug report is one that includes a fix! If you send us
patches please use <b class="userinput"><tt>diff -u</tt></b> format if your version of
diff supports it, otherwise use <b class="userinput"><tt>diff -c4</tt></b>. Make sure
you do the diff against a clean version of the source and let me know
exactly what version you used.
-</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Appendixes"></a>Appendixes</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>36. <a href="#compiling">How to compile SAMBA</a></dt><dd><dl><dt><a href="#id2990738">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2990746">Introduction</a></dt><dt><a href="#id2990775">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2992243">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2992291">Verifying Samba's PGP signature</a></dt><dt><a href="#id2992426">Building the Binaries</a></dt><dd><dl><dt><a href="#id2992564">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2993459">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2993550">Starting from inetd.conf</a></dt><dt><a href="#id2993754">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="#id2993849">Common Errors</a></dt></dl></dd><dt>37. <a href="#Portability">Portability</a></dt><dd><dl><dt><a href="#id2995128">HPUX</a></dt><dt><a href="#id2995213">SCO Unix</a></dt><dt><a href="#id2995241">DNIX</a></dt><dt><a href="#id2995411">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2995454">AIX</a></dt><dd><dl><dt><a href="#id2995461">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2995487">Solaris</a></dt><dd><dl><dt><a href="#id2995494">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="#Other-Clients">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="#id2996271">Macintosh clients?</a></dt><dt><a href="#id2996343">OS2 Client</a></dt><dd><dl><dt><a href="#id2996350">How can I configure OS/2 Warp Connect or
- OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="#id2995965">How can I configure OS/2 Warp 3 (not Connect),
- OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="#id2996025">How do I get printer driver download working
- for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2996122">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2995584">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2995674">Delete .pwl files after password change</a></dt><dt><a href="#id2995704">Configure WfW password handling</a></dt><dt><a href="#id2995750">Case handling of passwords</a></dt><dt><a href="#id2995780">Use TCP/IP as default protocol</a></dt><dt><a href="#id2995797">Speed improvement</a></dt></dl></dd><dt><a href="#id2995844">Windows '95/'98</a></dt><dd><dl><dt><a href="#id2996873">Speed improvement</a></dt></dl></dd><dt><a href="#id2996898">Windows 2000 Service Pack 2</a></dt><dt><a href="#id2997008">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="#speed">Samba Performance Tuning</a></dt><dd><dl><dt><a href="#id2999219">Comparisons</a></dt><dt><a href="#id2997059">Socket options</a></dt><dt><a href="#id2997130">Read size</a></dt><dt><a href="#id2997174">Max xmit</a></dt><dt><a href="#id2997227">Log level</a></dt><dt><a href="#id2997250">Read raw</a></dt><dt><a href="#id2997306">Write raw</a></dt><dt><a href="#id2997348">Slow Logins</a></dt><dt><a href="#id2998255">Client tuning</a></dt><dt><a href="#id2998279">Samba performance problem due changing kernel</a></dt><dt><a href="#id2998311">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="#DNSDHCP">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="#id2999030">Note</a></dt></dl></dd><dt>41. <a href="#Further-Resources">Further Resources</a></dt><dd><dl><dt><a href="#id2998449">Websites</a></dt><dt><a href="#id2998831">Related updates from Microsoft</a></dt><dt><a href="#id2998898">Books</a></dt></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="compiling"></a>Chapter36.How to compile SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Jerry perhaps?</span></h3></div></div><div><p class="pubdate"> 22 May 2001 </p></div><div><p class="pubdate"> 18 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2990738">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2990746">Introduction</a></dt><dt><a href="#id2990775">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2992243">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2992291">Verifying Samba's PGP signature</a></dt><dt><a href="#id2992426">Building the Binaries</a></dt><dd><dl><dt><a href="#id2992564">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2993459">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2993550">Starting from inetd.conf</a></dt><dt><a href="#id2993754">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="#id2993849">Common Errors</a></dt></dl></div><p>
+</p></div></div></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Appendixes"></a>Appendixes</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>36. <a href="#compiling">How to compile Samba</a></dt><dd><dl><dt><a href="#id2943739">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2943756">Introduction</a></dt><dt><a href="#id2943794">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2944055">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2944120">Verifying Samba's PGP signature</a></dt><dt><a href="#id2944272">Building the Binaries</a></dt><dd><dl><dt><a href="#id2944452">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2944619">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2944727">Starting from inetd.conf</a></dt><dt><a href="#id2944974">Alternative: starting it as a daemon</a></dt></dl></dd></dl></dd><dt>37. <a href="#Portability">Portability</a></dt><dd><dl><dt><a href="#id2945137">HPUX</a></dt><dt><a href="#id2945225">SCO UNIX</a></dt><dt><a href="#id2945255">DNIX</a></dt><dt><a href="#id2945428">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2945472">AIX</a></dt><dd><dl><dt><a href="#id2945479">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2945504">Solaris</a></dt><dd><dl><dt><a href="#id2945511">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="#Other-Clients">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="#id2945664">Macintosh clients?</a></dt><dt><a href="#id2945743">OS2 Client</a></dt><dd><dl><dt><a href="#id2945750">Configuring OS/2 Warp Connect or
+ OS/2 Warp 4 as a client for Samba</a></dt><dt><a href="#id2945834">Configuring OS/2 Warp 3 (not Connect),
+ OS/2 1.2, 1.3 or 2.x for Samba</a></dt><dt><a href="#id2945887">Printer driver download for for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2945987">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2945995">Latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2946085">Delete .pwl files after password change</a></dt><dt><a href="#id2946115">Configuring WfW password handling</a></dt><dt><a href="#id2946168">Case handling of passwords</a></dt><dt><a href="#id2946205">Use TCP/IP as default protocol</a></dt><dt><a href="#id2946222">Speed improvement</a></dt></dl></dd><dt><a href="#id2946269">Windows '95/'98</a></dt><dd><dl><dt><a href="#id2946343">Speed improvement</a></dt></dl></dd><dt><a href="#id2946367">Windows 2000 Service Pack 2</a></dt><dt><a href="#id2946555">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="#speed">Samba Performance Tuning</a></dt><dd><dl><dt><a href="#id2946684">Comparisons</a></dt><dt><a href="#id2946728">Socket options</a></dt><dt><a href="#id2946819">Read size</a></dt><dt><a href="#id2946869">Max xmit</a></dt><dt><a href="#id2946928">Log level</a></dt><dt><a href="#id2946959">Read raw</a></dt><dt><a href="#id2947043">Write raw</a></dt><dt><a href="#id2947106">Slow Logins</a></dt><dt><a href="#id2947135">Client tuning</a></dt><dt><a href="#id2947160">Samba performance problem due changing kernel</a></dt><dt><a href="#id2947192">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="#DNSDHCP">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="#id2947297">Note</a></dt></dl></dd><dt>41. <a href="#Further-Resources">Further Resources</a></dt><dd><dl><dt><a href="#id2947365">Websites</a></dt><dt><a href="#id2947755">Related updates from Microsoft</a></dt></dl></dd></dl></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="compiling"></a>Chapter36.How to compile Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> 22 May 2001 </p></div><div><p class="pubdate"> 18 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2943739">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="#id2943756">Introduction</a></dt><dt><a href="#id2943794">CVS Access to samba.org</a></dt></dl></dd><dt><a href="#id2944055">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="#id2944120">Verifying Samba's PGP signature</a></dt><dt><a href="#id2944272">Building the Binaries</a></dt><dd><dl><dt><a href="#id2944452">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="#id2944619">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="#id2944727">Starting from inetd.conf</a></dt><dt><a href="#id2944974">Alternative: starting it as a daemon</a></dt></dl></dd></dl></div><p>
You can obtain the samba source from the
<a href="http://samba.org/" target="_top">samba website</a>. To obtain a development version,
you can download samba from CVS or using rsync.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2990738"></a>Access Samba source code via CVS</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990746"></a>Introduction</h3></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943739"></a>Access Samba source code via CVS</h2></div></div><div></div></div><a class="indexterm" name="id2943748"></a><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943756"></a>Introduction</h3></div></div><div></div></div><p>
Samba is developed in an open environment. Developers use CVS
(Concurrent Versioning System) to &quot;checkin&quot; (also known as
&quot;commit&quot;) new source code. Samba's various CVS branches can
@@ -15945,12 +15265,12 @@ detailed in this chapter.
</p><p>
This chapter is a modified version of the instructions found at
<a href="http://samba.org/samba/cvs.html" target="_top">http://samba.org/samba/cvs.html</a>
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2990775"></a>CVS Access to samba.org</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943794"></a>CVS Access to samba.org</h3></div></div><div></div></div><p>
The machine samba.org runs a publicly accessible CVS
repository for access to the source code of several packages,
including samba, rsync, distcc, ccache and jitterbug. There are two main ways
of accessing the CVS server on this host.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990790"></a>Access via CVSweb</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2943810"></a>Access via CVSweb</h4></div></div><div></div></div><a class="indexterm" name="id2943818"></a><p>
You can access the source code via your
favourite WWW browser. This allows you to access the contents of
individual files in the repository and also to look at the revision
@@ -15958,7 +15278,7 @@ history and commit logs of individual files. You can also ask for a diff
listing between any two versions on the repository.
</p><p>
Use the URL : <a href="http://samba.org/cgi-bin/cvsweb" target="_top">http://samba.org/cgi-bin/cvsweb</a>
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2990820"></a>Access via cvs</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2943858"></a>Access via cvs</h4></div></div><div></div></div><p>
You can also access the source code via a
normal cvs client. This gives you much more control over what you can
do with the repository and allows you to checkout whole source trees
@@ -16008,7 +15328,7 @@ on this system just substitute the correct package name
the following command from within the samba directory:
</p><p>
<b class="userinput"><tt>cvs update -d -P</tt></b>
- </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992243"></a>Accessing the samba sources via rsync and ftp</h2></div></div><div></div></div><p>
+ </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944055"></a>Accessing the samba sources via rsync and ftp</h2></div></div><div></div></div><a class="indexterm" name="id2944063"></a><a class="indexterm" name="id2944072"></a><p>
pserver.samba.org also exports unpacked copies of most parts of the CVS
tree at <a href="ftp://pserver.samba.org/pub/unpacked" target="_top">ftp://pserver.samba.org/pub/unpacked</a> and also via anonymous rsync at
<a href="rsync://pserver.samba.org/ftp/unpacked/" target="_top">rsync://pserver.samba.org/ftp/unpacked/</a>. I recommend using rsync rather than ftp.
@@ -16017,7 +15337,7 @@ on this system just substitute the correct package name
The disadvantage of the unpacked trees is that they do not support automatic
merging of local changes like CVS does. rsync access is most convenient
for an initial install.
- </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992291"></a>Verifying Samba's PGP signature</h2></div></div><div></div></div><p>
+ </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944120"></a>Verifying Samba's PGP signature</h2></div></div><div></div></div><p>
In these days of insecurity, it's strongly recommended that you verify the PGP
signature for any source file before installing it. Even if you're not
downloading from a mirror site, verifying PGP signatures should be a
@@ -16025,39 +15345,43 @@ standard reflex.
</p><p>
With that said, go ahead and download the following files:
</p><pre class="screen">
-<tt class="prompt">$ </tt><b class="userinput"><tt> wget http://us1.samba.org/samba/ftp/samba-2.2.8a.tar.asc</tt></b>
-<tt class="prompt">$ </tt><b class="userinput"><tt> wget http://us1.samba.org/samba/ftp/samba-pubkey.asc</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>wget http://us1.samba.org/samba/ftp/samba-2.2.8a.tar.asc</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>wget http://us1.samba.org/samba/ftp/samba-pubkey.asc</tt></b>
</pre><p>
+<a class="indexterm" name="id2944179"></a>
The first file is the PGP signature for the Samba source file; the other is the Samba public
PGP key itself. Import the public PGP key with:
</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>gpg --import samba-pubkey.asc</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>gpg --import samba-pubkey.asc</tt></b>
</pre><p>
And verify the Samba source code integrity with:
</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>gzip -d samba-2.2.8a.tar.gz</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>gpg --verify samba-2.2.8a.tar.asc</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>gzip -d samba-2.2.8a.tar.gz</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>gpg --verify samba-2.2.8a.tar.asc</tt></b>
</pre><p>
If you receive a message like, &quot;Good signature from Samba Distribution
Verification Key...&quot;
then all is well. The warnings about trust relationships can be ignored. An
example of what you would not want to see would be:
-</p><tt class="computeroutput">
+</p><p>
+<tt class="computeroutput">
gpg: BAD signature from &quot;Samba Distribution Verification Key&quot;
-</tt></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992426"></a>Building the Binaries</h2></div></div><div></div></div><p>To do this, first run the program <b class="userinput"><tt>./configure
+ </tt>
+ </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944272"></a>Building the Binaries</h2></div></div><div></div></div><a class="indexterm" name="id2944280"></a><p>
+ To do this, first run the program <b class="userinput"><tt>./configure
</tt></b> in the source directory. This should automatically
configure Samba for your operating system. If you have unusual
- needs then you may wish to run</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>./configure --help
- </tt></b></p><p>first to see what special options you can enable.
- Then executing</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make</tt></b></p><p>will create the binaries. Once it's successfully
- compiled you can use </p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make install</tt></b></p><p>to install the binaries and manual pages. You can
- separately install the binaries and/or man pages using</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make installbin
- </tt></b></p><p>and</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make installman
- </tt></b></p><p>Note that if you are upgrading for a previous version
+ needs then you may wish to run</p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>./configure --help
+</tt></b></pre><p>first to see what special options you can enable.
+ Then executing</p><a class="indexterm" name="id2944326"></a><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>make</tt></b></pre><p>will create the binaries. Once it's successfully
+ compiled you can use </p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>make install</tt></b></pre><p>to install the binaries and manual pages. You can
+ separately install the binaries and/or man pages using</p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>make installbin
+</tt></b></pre><p>and</p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>make installman
+ </tt></b></pre><p>Note that if you are upgrading for a previous version
of Samba you might like to know that the old versions of
the binaries will be renamed with a &quot;.old&quot; extension. You
- can go back to the previous version with</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make revert
- </tt></b></p><p>if you find this version a disaster!</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2992564"></a>Compiling samba with Active Directory support</h3></div></div><div></div></div><p>In order to compile samba with ADS support, you need to have installed
+ can go back to the previous version with</p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>make revert
+</tt></b></pre><p>if you find this version a disaster!</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944452"></a>Compiling samba with Active Directory support</h3></div></div><div></div></div><p>In order to compile samba with ADS support, you need to have installed
on your system:</p><div class="itemizedlist"><ul type="disc"><li><p>the MIT kerberos development libraries
(either install from the sources or use a package). The
Heimdal libraries will not work.</p></li><li><p>the OpenLDAP development libraries.</p></li></ul></div><p>If your kerberos libraries are in a non-standard location then
@@ -16069,16 +15393,17 @@ example of what you would not want to see would be:
#define HAVE_LDAP 1
</pre><p>If it doesn't then configure did not find your krb5 libraries or
your ldap libraries. Look in <tt class="filename">config.log</tt> to figure
- out why and fix it.</p><div xmlns:ns100="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2993373"></a>Installing the required packages for Debian</h4></div></div><div></div></div><p>On Debian you need to install the following packages:</p><ns100:p>
- </ns100:p><table class="simplelist" border="0" summary="Simple list"><tr><td>libkrb5-dev</td></tr><tr><td>krb5-user</td></tr></table><ns100:p>
- </ns100:p></div><div xmlns:ns101="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2993406"></a>Installing the required packages for RedHat</h4></div></div><div></div></div><p>On RedHat this means you should have at least: </p><ns101:p>
- </ns101:p><table class="simplelist" border="0" summary="Simple list"><tr><td>krb5-workstation (for kinit)</td></tr><tr><td>krb5-libs (for linking with)</td></tr><tr><td>krb5-devel (because you are compiling from source)</td></tr></table><ns101:p>
- </ns101:p><p>in addition to the standard development environment.</p><p>Note that these are not standard on a RedHat install, and you may need
- to get them off CD2.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993459"></a>Starting the <span class="application">smbd</span> and <span class="application">nmbd</span></h2></div></div><div></div></div><p>You must choose to start <span class="application">smbd</span> and <span class="application">nmbd</span> either
+ out why and fix it.</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944534"></a>Installing the required packages for Debian</h4></div></div><div></div></div><p>On Debian you need to install the following packages:</p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>libkrb5-dev</p></li><li><p>krb5-user</p></li></ul></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2944565"></a>Installing the required packages for RedHat</h4></div></div><div></div></div><p>On RedHat this means you should have at least: </p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>krb5-workstation (for kinit)</p></li><li><p>krb5-libs (for linking with)</p></li><li><p>krb5-devel (because you are compiling from source)</p></li></ul></div><p>
+ </p><p>in addition to the standard development environment.</p><p>Note that these are not standard on a RedHat install, and you may need
+ to get them off CD2.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944619"></a>Starting the <span class="application">smbd</span> and <span class="application">nmbd</span></h2></div></div><div></div></div><a class="indexterm" name="id2944640"></a><p>You must choose to start <span class="application">smbd</span> and <span class="application">nmbd</span> either
as daemons or from <span class="application">inetd</span>. Don't try
to do both! Either you can put them in <tt class="filename">
inetd.conf</tt> and have them started on demand
- by <span class="application">inetd</span>, or you can start them as
+ by <span class="application">inetd</span> or <span class="application">xinetd</span>,
+ or you can start them as
daemons either from the command line or in <tt class="filename">
/etc/rc.local</tt>. See the man pages for details
on the command line options. Take particular care to read
@@ -16086,7 +15411,7 @@ example of what you would not want to see would be:
Samba. In many cases you must be root.</p><p>The main advantage of starting <span class="application">smbd</span>
and <span class="application">nmbd</span> using the recommended daemon method
is that they will respond slightly more quickly to an initial connection
- request.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2993550"></a>Starting from inetd.conf</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>The following will be different if
+ request.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944727"></a>Starting from inetd.conf</h3></div></div><div></div></div><a class="indexterm" name="id2944735"></a><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>The following will be different if
you use NIS, NIS+ or LDAP to distribute services maps.</p></div><p>Look at your <tt class="filename">/etc/services</tt>.
What is defined at port 139/tcp. If nothing is defined
then add a line like this:</p><pre class="programlisting">netbios-ssn 139/tcp</pre><p>similarly for 137/udp you should have an entry like:</p><pre class="programlisting">netbios-ns 137/udp</pre><p>Next edit your <tt class="filename">/etc/inetd.conf</tt>
@@ -16095,12 +15420,13 @@ example of what you would not want to see would be:
netbios-ns dgram udp wait root /usr/local/samba/bin/nmbd nmbd
</pre><p>The exact syntax of <tt class="filename">/etc/inetd.conf</tt>
varies between unixes. Look at the other entries in inetd.conf
- for a guide.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Some unixes already have entries like netbios_ns
+ for a guide. </p><a class="indexterm" name="id2944825"></a><p>Some distributions use xinetd instead of inetd. Consult the
+ xinetd manual for configuration information.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Some unixes already have entries like netbios_ns
(note the underscore) in <tt class="filename">/etc/services</tt>.
You must either edit <tt class="filename">/etc/services</tt> or
<tt class="filename">/etc/inetd.conf</tt> to make them consistent.
- </p></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>On many systems you may need to use the
- <i class="parameter"><tt>interfaces</tt></i> option in <tt class="filename">smb.conf</tt> to specify the IP
+ </p></div><a class="indexterm" name="id2944867"></a><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>On many systems you may need to use the
+ <a class="indexterm" name="id2944880"></a><i class="parameter"><tt>interfaces</tt></i> option in <tt class="filename">smb.conf</tt> to specify the IP
address and netmask of your interfaces. Run
<span class="application">ifconfig</span>
as root if you don't know what the broadcast is for your
@@ -16111,8 +15437,9 @@ example of what you would not want to see would be:
This means you shouldn't use spaces between the options and
arguments, or you should use a script, and start the script
from <b class="command">inetd</b>.</p></div><p>Restart <span class="application">inetd</span>, perhaps just send
- it a HUP. If you have installed an earlier version of <span class="application">nmbd</span> then
- you may need to kill <span class="application">nmbd</span> as well.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2993754"></a>Alternative: starting it as a daemon</h3></div></div><div></div></div><p>To start the server as a daemon you should create
+ it a HUP. </p><pre class="screen">
+ <tt class="prompt">root# </tt><b class="userinput"><tt>killall -HUP inetd</tt></b>
+ </pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944974"></a>Alternative: starting it as a daemon</h3></div></div><div></div></div><a class="indexterm" name="id2944982"></a><p>To start the server as a daemon you should create
a script something like this one, perhaps calling
it <tt class="filename">startsmb</tt>.</p><pre class="programlisting">
#!/bin/sh
@@ -16124,17 +15451,9 @@ example of what you would not want to see would be:
</p><p>To kill it send a kill signal to the processes
<span class="application">nmbd</span> and <span class="application">smbd</span>.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>If you use the SVR4 style init system then
you may like to look at the <tt class="filename">examples/svr4-startup</tt>
- script to make Samba fit into that system.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993849"></a>Common Errors</h2></div></div><div></div></div><p>&#8220;<span class="quote">
-I'm using gcc 3 and I've compiled Samba-3 from the CVS and the
-binaries are very large files (40 Mb and 20 Mb). I've the same result with
-<tt class="option">--enable-shared</tt> ?
-</span>&#8221;
-</p><p>
-The dwarf format used by GCC 3 for storing debugging symbols is very inefficient.
-Strip the binaries, don't compile with -g or compile with -gstabs.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Portability"></a>Chapter37.Portability</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2995128">HPUX</a></dt><dt><a href="#id2995213">SCO Unix</a></dt><dt><a href="#id2995241">DNIX</a></dt><dt><a href="#id2995411">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2995454">AIX</a></dt><dd><dl><dt><a href="#id2995461">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2995487">Solaris</a></dt><dd><dl><dt><a href="#id2995494">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></div><p>Samba works on a wide range of platforms but the interface all the
+ script to make Samba fit into that system.</p></div></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Portability"></a>Chapter37.Portability</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2945137">HPUX</a></dt><dt><a href="#id2945225">SCO UNIX</a></dt><dt><a href="#id2945255">DNIX</a></dt><dt><a href="#id2945428">RedHat Linux Rembrandt-II</a></dt><dt><a href="#id2945472">AIX</a></dt><dd><dl><dt><a href="#id2945479">Sequential Read Ahead</a></dt></dl></dd><dt><a href="#id2945504">Solaris</a></dt><dd><dl><dt><a href="#id2945511">Locking improvements</a></dt><dt><a href="#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></div><p>Samba works on a wide range of platforms but the interface all the
platforms provide is not always compatible. This chapter contains
-platform-specific information about compiling and using samba.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995128"></a>HPUX</h2></div></div><div></div></div><p>
+platform-specific information about compiling and using samba.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945137"></a>HPUX</h2></div></div><div></div></div><p>
HP's implementation of supplementary groups is, er, non-standard (for
hysterical reasons). There are two group files, <tt class="filename">/etc/group</tt> and
<tt class="filename">/etc/logingroup</tt>; the system maps UIDs to numbers using the former, but
@@ -16154,15 +15473,15 @@ allowed range.
On HPUX you must use gcc or the HP ANSI compiler. The free compiler
that comes with HP-UX is not ANSI compliant and cannot compile
Samba.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995213"></a>SCO Unix</h2></div></div><div></div></div><p>
-If you run an old version of SCO Unix then you may need to get important
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945225"></a>SCO UNIX</h2></div></div><div></div></div><p>
+If you run an old version of SCO UNIX then you may need to get important
TCP/IP patches for Samba to work correctly. Without the patch, you may
encounter corrupt data transfers using samba.
</p><p>
The patch you need is UOD385 Connection Drivers SLS. It is available from
SCO (<a href="ftp://ftp.sco.com/" target="_top">ftp.sco.com</a>, directory SLS,
files uod385a.Z and uod385a.ltr.Z).
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995241"></a>DNIX</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945255"></a>DNIX</h2></div></div><div></div></div><p>
DNIX has a problem with seteuid() and setegid(). These routines are
needed for Samba to work correctly, but they were left out of the DNIX
C library for some reason.
@@ -16207,8 +15526,8 @@ _seteuid:
</pre><p>
after creating the above files you then assemble them using
</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>as seteuid.s</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>as setegid.s</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>as seteuid.s</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>as setegid.s</tt></b>
</pre><p>
that should produce the files <tt class="filename">seteuid.o</tt> and
<tt class="filename">setegid.o</tt>
@@ -16221,13 +15540,13 @@ LIBSM = setegid.o seteuid.o -ln
You should then remove the line:
</p><pre class="programlisting">
#define NO_EID
-</pre><p>from the DNIX section of <tt class="filename">includes.h</tt></p></div><div xmlns:ns102="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995411"></a>RedHat Linux Rembrandt-II</h2></div></div><div></div></div><ns102:p>
+</pre><p>from the DNIX section of <tt class="filename">includes.h</tt></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945428"></a>RedHat Linux Rembrandt-II</h2></div></div><div></div></div><p>
By default RedHat Rembrandt-II during installation adds an
entry to <tt class="filename">/etc/hosts</tt> as follows:
-</ns102:p><pre class="programlisting">
+</p><pre class="programlisting">
127.0.0.1 loopback &quot;hostname&quot;.&quot;domainname&quot;
-</pre><ns102:p>
-</ns102:p><p>
+</pre><p>
+</p><p>
This causes Samba to loop back onto the loopback interface.
The result is that Samba fails to communicate correctly with
the world and therefor may fail to correctly negotiate who
@@ -16235,10 +15554,10 @@ is the master browse list holder and who is the master browser.
</p><p>
Corrective Action: Delete the entry after the word loopback
in the line starting 127.0.0.1
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995454"></a>AIX</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995461"></a>Sequential Read Ahead</h3></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945472"></a>AIX</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945479"></a>Sequential Read Ahead</h3></div></div><div></div></div><p>
Disabling Sequential Read Ahead using <b class="userinput"><tt>vmtune -r 0</tt></b> improves
Samba performance significantly.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995487"></a>Solaris</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995494"></a>Locking improvements</h3></div></div><div></div></div><p>Some people have been experiencing problems with F_SETLKW64/fcntl
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945504"></a>Solaris</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945511"></a>Locking improvements</h3></div></div><div></div></div><p>Some people have been experiencing problems with F_SETLKW64/fcntl
when running Samba on Solaris. The built in file locking mechanism was
not scalable. Performance would degrade to the point where processes would
get into loops of trying to lock a file. It would try a lock, then fail,
@@ -16259,11 +15578,10 @@ and rebuild samba.
Nsswitch on Solaris 9 refuses to use the winbind nss module. This behavior
is fixed by Sun in patch 113476-05 which as of March 2003 is not in any
roll-up packages.
-</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Other-Clients"></a>Chapter38.Samba and other CIFS clients</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jim</span> <span class="surname">McDonough</span></h3><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jmcd@us.ibm.com">jmcd@us.ibm.com</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">5 Mar 2001</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2996271">Macintosh clients?</a></dt><dt><a href="#id2996343">OS2 Client</a></dt><dd><dl><dt><a href="#id2996350">How can I configure OS/2 Warp Connect or
- OS/2 Warp 4 as a client for Samba?</a></dt><dt><a href="#id2995965">How can I configure OS/2 Warp 3 (not Connect),
- OS/2 1.2, 1.3 or 2.x for Samba?</a></dt><dt><a href="#id2996025">How do I get printer driver download working
- for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2996122">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2995584">Use latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2995674">Delete .pwl files after password change</a></dt><dt><a href="#id2995704">Configure WfW password handling</a></dt><dt><a href="#id2995750">Case handling of passwords</a></dt><dt><a href="#id2995780">Use TCP/IP as default protocol</a></dt><dt><a href="#id2995797">Speed improvement</a></dt></dl></dd><dt><a href="#id2995844">Windows '95/'98</a></dt><dd><dl><dt><a href="#id2996873">Speed improvement</a></dt></dl></dd><dt><a href="#id2996898">Windows 2000 Service Pack 2</a></dt><dt><a href="#id2997008">Windows NT 3.1</a></dt></dl></div><p>This chapter contains client-specific information.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996271"></a>Macintosh clients?</h2></div></div><div></div></div><p>
-Yes. <a href="http://www.thursby.com/" target="_top">Thursby</a> now has a CIFS Client / Server called <a href="http://www.thursby.com/products/dave.html" target="_top">DAVE</a>
+</p></div></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Other-Clients"></a>Chapter38.Samba and other CIFS clients</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jim</span> <span class="surname">McDonough</span></h3><span class="contrib">OS/2</span><div class="affiliation"><span class="orgname">IBM<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jmcd@us.ibm.com">jmcd@us.ibm.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">5 Mar 2001</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2945664">Macintosh clients?</a></dt><dt><a href="#id2945743">OS2 Client</a></dt><dd><dl><dt><a href="#id2945750">Configuring OS/2 Warp Connect or
+ OS/2 Warp 4 as a client for Samba</a></dt><dt><a href="#id2945834">Configuring OS/2 Warp 3 (not Connect),
+ OS/2 1.2, 1.3 or 2.x for Samba</a></dt><dt><a href="#id2945887">Printer driver download for for OS/2 clients?</a></dt></dl></dd><dt><a href="#id2945987">Windows for Workgroups</a></dt><dd><dl><dt><a href="#id2945995">Latest TCP/IP stack from Microsoft</a></dt><dt><a href="#id2946085">Delete .pwl files after password change</a></dt><dt><a href="#id2946115">Configuring WfW password handling</a></dt><dt><a href="#id2946168">Case handling of passwords</a></dt><dt><a href="#id2946205">Use TCP/IP as default protocol</a></dt><dt><a href="#id2946222">Speed improvement</a></dt></dl></dd><dt><a href="#id2946269">Windows '95/'98</a></dt><dd><dl><dt><a href="#id2946343">Speed improvement</a></dt></dl></dd><dt><a href="#id2946367">Windows 2000 Service Pack 2</a></dt><dt><a href="#id2946555">Windows NT 3.1</a></dt></dl></div><p>This chapter contains client-specific information.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945664"></a>Macintosh clients?</h2></div></div><div></div></div><p>
+ Yes. <a href="http://www.thursby.com/" target="_top">Thursby</a> now has a CIFS Client / Server called <a href="http://www.thursby.com/products/dave.html" target="_top">DAVE</a>
</p><p>
They test it against Windows 95, Windows NT and samba for
compatibility issues. At the time of writing, DAVE was at version
@@ -16282,10 +15600,8 @@ What Samba offers MS
Windows users, these packages offer to Macs. For more info on these
packages, Samba, and Linux (and other UNIX-based systems) see
<a href="http://www.eats.com/linux_mac_win.html" target="_top">http://www.eats.com/linux_mac_win.html</a>
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996343"></a>OS2 Client</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996350"></a>How can I configure OS/2 Warp Connect or
- OS/2 Warp 4 as a client for Samba?</h3></div></div><div></div></div><p>A more complete answer to this question can be
- found on <a href="http://carol.wins.uva.nl/~leeuw/samba/warp.html" target="_top">
- http://carol.wins.uva.nl/~leeuw/samba/warp.html</a>.</p><p>Basically, you need three components:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>The File and Print Client ('IBM Peer')</td></tr><tr><td>TCP/IP ('Internet support') </td></tr><tr><td>The &quot;NetBIOS over TCP/IP&quot; driver ('TCPBEUI')</td></tr></table><p>Installing the first two together with the base operating
+</p><p>Newer versions of the Macintosh (Mac OS X) include Samba.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945743"></a>OS2 Client</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945750"></a>Configuring OS/2 Warp Connect or
+ OS/2 Warp 4 as a client for Samba</h3></div></div><div></div></div><p>Basically, you need three components:</p><div class="itemizedlist"><ul type="disc"><li><p>The File and Print Client ('IBM Peer')</p></li><li><p>TCP/IP ('Internet support') </p></li><li><p>The &quot;NetBIOS over TCP/IP&quot; driver ('TCPBEUI')</p></li></ul></div><p>Installing the first two together with the base operating
system on a blank system is explained in the Warp manual. If Warp
has already been installed, but you now want to install the
networking support, use the &quot;Selective Install for Networking&quot;
@@ -16300,14 +15616,12 @@ packages, Samba, and Linux (and other UNIX-based systems) see
to the &quot;Names List&quot;, or specify a WINS server ('NetBIOS
Nameserver' in IBM and RFC terminology). For Warp Connect you
may need to download an update for 'IBM Peer' to bring it on
- the same level as Warp 4. See the webpage mentioned above.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995965"></a>How can I configure OS/2 Warp 3 (not Connect),
- OS/2 1.2, 1.3 or 2.x for Samba?</h3></div></div><div></div></div><p>You can use the free Microsoft LAN Manager 2.2c Client
+ the same level as Warp 4. See the webpage mentioned above.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945834"></a>Configuring OS/2 Warp 3 (not Connect),
+ OS/2 1.2, 1.3 or 2.x for Samba</h3></div></div><div></div></div><p>You can use the free Microsoft LAN Manager 2.2c Client
for OS/2 from
<a href="ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/" target="_top">
ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/</a>.
- See <a href="http://carol.wins.uva.nl/~leeuw/lanman.html" target="_top">
- http://carol.wins.uva.nl/~leeuw/lanman.html</a> for
- more information on how to install and use this client. In
+ In
a nutshell, edit the file \OS2VER in the root directory of
the OS/2 boot partition and add the lines:</p><pre class="programlisting">
20=setup.exe
@@ -16318,14 +15632,12 @@ packages, Samba, and Linux (and other UNIX-based systems) see
or NS2000 driver from
<a href="ftp://ftp.cdrom.com/pub/os2/network/ndis/" target="_top">
ftp://ftp.cdrom.com/pub/os2/network/ndis/</a> instead.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996025"></a>How do I get printer driver download working
- for OS/2 clients?</h3></div></div><div></div></div><p>First, create a share called <i class="parameter"><tt>[PRINTDRV]</tt></i> that is
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945887"></a>Printer driver download for for OS/2 clients?</h3></div></div><div></div></div><p>First, create a share called <i class="parameter"><tt>[PRINTDRV]</tt></i> that is
world-readable. Copy your OS/2 driver files there. Note
that the .EA_ files must still be separate, so you will need
to use the original install files, and not copy an installed
driver from an OS/2 system.</p><p>Install the NT driver first for that printer. Then,
- add to your <tt class="filename">smb.conf</tt> a parameter, <i class="parameter"><tt>os2 driver map =
- <i class="replaceable"><tt>filename</tt></i></tt></i>. Then, in the file
+ add to your <tt class="filename">smb.conf</tt> a parameter, <a class="indexterm" name="id2945920"></a><i class="parameter"><tt>os2 driver map</tt></i> = filename. Then, in the file
specified by <i class="replaceable"><tt>filename</tt></i>, map the
name of the NT driver name to the OS/2 driver name as
follows:</p><p><i class="parameter"><tt><i class="replaceable"><tt>nt driver name</tt></i> = <i class="replaceable"><tt>os2 driver name</tt></i>.<i class="replaceable"><tt>device name</tt></i></tt></i>, e.g.:</p><p><i class="parameter"><tt>
@@ -16335,7 +15647,7 @@ packages, Samba, and Linux (and other UNIX-based systems) see
you the driver is not available. On the second attempt, it
will work. This is fixed simply by adding the device name
to the mapping, after which it will work on the first attempt.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996122"></a>Windows for Workgroups</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995584"></a>Use latest TCP/IP stack from Microsoft</h3></div></div><div></div></div><p>Use the latest TCP/IP stack from Microsoft if you use Windows
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945987"></a>Windows for Workgroups</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945995"></a>Latest TCP/IP stack from Microsoft</h3></div></div><div></div></div><p>Use the latest TCP/IP stack from Microsoft if you use Windows
for Workgroups.
</p><p>The early TCP/IP stacks had lots of bugs.</p><p>
Microsoft has released an incremental upgrade to their TCP/IP 32-Bit
@@ -16350,7 +15662,7 @@ fixed. New files include <tt class="filename">WINSOCK.DLL</tt>,
<tt class="filename">TRACERT.EXE</tt>,
<tt class="filename">NETSTAT.EXE</tt>, and
<tt class="filename">NBTSTAT.EXE</tt>.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995674"></a>Delete .pwl files after password change</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946085"></a>Delete .pwl files after password change</h3></div></div><div></div></div><p>
WfWg does a lousy job with passwords. I find that if I change my
password on either the unix box or the PC the safest thing to do is to
delete the .pwl files in the windows directory. The PC will complain about not finding the files, but will soon get over it, allowing you to enter the new password.
@@ -16359,20 +15671,20 @@ If you don't do this you may find that WfWg remembers and uses the old
password, even if you told it a new one.
</p><p>
Often WfWg will totally ignore a password you give it in a dialog box.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995704"></a>Configure WfW password handling</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946115"></a>Configuring WfW password handling</h3></div></div><div></div></div><p>
There is a program call admincfg.exe
on the last disk (disk 8) of the WFW 3.11 disk set. To install it
type <b class="userinput"><tt>EXPAND A:\ADMINCFG.EX_ C:\WINDOWS\ADMINCFG.EXE</tt></b>.
Then add an icon
for it via the <span class="application">Program Manager</span> <span class="guimenu">New</span> Menu.
This program allows you to control how WFW handles passwords. ie disable Password Caching etc
-for use with <i class="parameter"><tt>security = user</tt></i>
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995750"></a>Case handling of passwords</h3></div></div><div></div></div><p>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <a href="smb.conf.5.html" target="_top">smb.conf(5)</a> information on <i class="parameter"><tt>password level</tt></i> to specify what characters samba should try to uppercase when checking.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995780"></a>Use TCP/IP as default protocol</h3></div></div><div></div></div><p>To support print queue reporting you may find
+for use with <a class="indexterm" name="id2946153"></a><i class="parameter"><tt>security</tt></i> = user
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946168"></a>Case handling of passwords</h3></div></div><div></div></div><p>Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the <tt class="filename">smb.conf</tt> information on <a class="indexterm" name="id2946188"></a><i class="parameter"><tt>password level</tt></i> to specify what characters samba should try to uppercase when checking.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946205"></a>Use TCP/IP as default protocol</h3></div></div><div></div></div><p>To support print queue reporting you may find
that you have to use TCP/IP as the default protocol under
WfWg. For some reason if you leave NetBEUI as the default
it may break the print queue reporting on some systems.
-It is presumably a WfWg bug.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995797"></a>Speed improvement</h3></div></div><div></div></div><p>
-Note that some people have found that setting <i class="parameter"><tt>DefaultRcvWindow</tt></i> in
+It is presumably a WfWg bug.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946222"></a>Speed improvement</h3></div></div><div></div></div><p>
+ Note that some people have found that setting <i class="parameter"><tt>DefaultRcvWindow</tt></i> in
the <i class="parameter"><tt>[MSTCP]</tt></i> section of the
<tt class="filename">SYSTEM.INI</tt> file under WfWg to 3072 gives a
big improvement. I don't know why.
@@ -16382,7 +15694,7 @@ performance with a large value (16384 or larger). Other people have
reported that anything over 3072 slows things down enormously. One
person even reported a speed drop of a factor of 30 when he went from
3072 to 8192. I don't know why.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2995844"></a>Windows '95/'98</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946269"></a>Windows '95/'98</h2></div></div><div></div></div><p>
When using Windows 95 OEM SR2 the following updates are recommended where Samba
is being used. Please NOTE that the above change will affect you once these
updates have been installed.
@@ -16396,11 +15708,11 @@ install the <b class="command">OLEUPD.EXE</b> fix. This
fix may stop your machine from hanging for an extended period when exiting
Outlook and you may also notice a significant speedup when accessing network
neighborhood services.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996873"></a>Speed improvement</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2946343"></a>Speed improvement</h3></div></div><div></div></div><p>
Configure the win95 TCPIP registry settings to give better
performance. I use a program called <b class="command">MTUSPEED.exe</b> which I got off the
net. There are various other utilities of this type freely available.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996898"></a>Windows 2000 Service Pack 2</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946367"></a>Windows 2000 Service Pack 2</h2></div></div><div></div></div><p>
There are several annoyances with Windows 2000 SP2. One of which
only appears when using a Samba server to host user profiles
to Windows 2000 SP2 clients in a Windows domain. This assumes
@@ -16409,26 +15721,19 @@ likely occur if it is not.
</p><p>
In order to serve profiles successfully to Windows 2000 SP2
clients (when not operating as a PDC), Samba must have
-<i class="parameter"><tt>nt acl support = no</tt></i>
+<a class="indexterm" name="id2946388"></a><i class="parameter"><tt>nt acl support</tt></i> = no
added to the file share which houses the roaming profiles.
If this is not done, then the Windows 2000 SP2 client will
complain about not being able to access the profile (Access
Denied) and create multiple copies of it on disk (DOMAIN.user.001,
DOMAIN.user.002, etc...). See the
-<a href="smb.conf.5.html" target="_top">smb.conf(5)</a> man page
+<tt class="filename">smb.conf</tt> man page
for more details on this option. Also note that the
-<i class="parameter"><tt>nt acl support</tt></i> parameter was formally a global parameter in
+<a class="indexterm" name="id2946416"></a><i class="parameter"><tt>nt acl support</tt></i> parameter was formally a global parameter in
releases prior to Samba 2.2.2.
</p><p>
The following is a minimal profile share:
-</p><pre class="programlisting">
- [profile]
- path = /export/profile
- create mask = 0600
- directory mask = 0700
- nt acl support = no
- read only = no
-</pre><p>
+</p><div class="example"><a name="id2946439"></a><p class="title"><b>Example38.1.Minimal profile share</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[profile]</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /export/profile</tt></i></td></tr><tr><td><i class="parameter"><tt>create mask = 0600</tt></i></td></tr><tr><td><i class="parameter"><tt>directory mask = 0700</tt></i></td></tr><tr><td><i class="parameter"><tt>nt acl support = no</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = no</tt></i></td></tr></table></div><p>
The reason for this bug is that the Win2k SP2 client copies
the security descriptor for the profile which contains
the Samba server's SID, and not the domain SID. The client
@@ -16436,15 +15741,15 @@ compares the SID for SAMBA\user and realizes it is
different that the one assigned to DOMAIN\user. Hence the reason
for the <span class="errorname">access denied</span> message.
</p><p>
-By disabling the <i class="parameter"><tt>nt acl support</tt></i> parameter, Samba will send
+By disabling the <a class="indexterm" name="id2946519"></a><i class="parameter"><tt>nt acl support</tt></i> parameter, Samba will send
the Win2k client a response to the QuerySecurityDescriptor
trans2 call which causes the client to set a default ACL
for the profile. This default ACL includes
</p><p><span class="emphasis"><em>DOMAIN\user &quot;Full Control&quot;</em></span>&gt;</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This bug does not occur when using winbind to
-create accounts on the Samba host for Domain users.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997008"></a>Windows NT 3.1</h2></div></div><div></div></div><p>If you have problems communicating across routers with Windows
-NT 3.1 workstations, read <a href="http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;Q103765" target="_top">this Microsoft Knowledge Base article</a>.
+create accounts on the Samba host for Domain users.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946555"></a>Windows NT 3.1</h2></div></div><div></div></div><p>If you have problems communicating across routers with Windows
+NT 3.1 workstations, read <a href="http://support.microsoft.com/default.aspx?scid=kb;Q103765" target="_top">this Microsoft Knowledge Base article</a>.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="speed"></a>Chapter39.Samba Performance Tuning</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Cochrane</span></h3><div class="affiliation"><span class="orgname">Dundee Limb Fitting Centre<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:paulc@dth.scot.nhs.uk">paulc@dth.scot.nhs.uk</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2999219">Comparisons</a></dt><dt><a href="#id2997059">Socket options</a></dt><dt><a href="#id2997130">Read size</a></dt><dt><a href="#id2997174">Max xmit</a></dt><dt><a href="#id2997227">Log level</a></dt><dt><a href="#id2997250">Read raw</a></dt><dt><a href="#id2997306">Write raw</a></dt><dt><a href="#id2997348">Slow Logins</a></dt><dt><a href="#id2998255">Client tuning</a></dt><dt><a href="#id2998279">Samba performance problem due changing kernel</a></dt><dt><a href="#id2998311">Corrupt tdb Files</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999219"></a>Comparisons</h2></div></div><div></div></div><p>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="speed"></a>Chapter39.Samba Performance Tuning</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Cochrane</span></h3><div class="affiliation"><span class="orgname">Dundee Limb Fitting Centre<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:paulc@dth.scot.nhs.uk">paulc@dth.scot.nhs.uk</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2946684">Comparisons</a></dt><dt><a href="#id2946728">Socket options</a></dt><dt><a href="#id2946819">Read size</a></dt><dt><a href="#id2946869">Max xmit</a></dt><dt><a href="#id2946928">Log level</a></dt><dt><a href="#id2946959">Read raw</a></dt><dt><a href="#id2947043">Write raw</a></dt><dt><a href="#id2947106">Slow Logins</a></dt><dt><a href="#id2947135">Client tuning</a></dt><dt><a href="#id2947160">Samba performance problem due changing kernel</a></dt><dt><a href="#id2947192">Corrupt tdb Files</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946684"></a>Comparisons</h2></div></div><div></div></div><p>
The Samba server uses TCP to talk to the client. Thus if you are
trying to see if it performs well you should really compare it to
programs that use the same protocol. The most readily available
@@ -16466,14 +15771,14 @@ suspect the biggest factor is not Samba vs some other system but the
hardware and drivers used on the various systems. Given similar
hardware Samba should certainly be competitive in speed with other
systems.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997059"></a>Socket options</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946728"></a>Socket options</h2></div></div><div></div></div><p>
There are a number of socket options that can greatly affect the
performance of a TCP based server like Samba.
</p><p>
The socket options that Samba uses are settable both on the command
line with the <tt class="option">-O</tt> option, or in the <tt class="filename">smb.conf</tt> file.
</p><p>
-The <i class="parameter"><tt>socket options</tt></i> section of the <tt class="filename">smb.conf</tt> manual page describes how
+The <a class="indexterm" name="id2946762"></a><i class="parameter"><tt>socket options</tt></i> section of the <tt class="filename">smb.conf</tt> manual page describes how
to set these and gives recommendations.
</p><p>
Getting the socket options right can make a big difference to your
@@ -16482,11 +15787,11 @@ much. The correct settings are very dependent on your local network.
</p><p>
The socket option TCP_NODELAY is the one that seems to make the
biggest single difference for most networks. Many people report that
-adding <i class="parameter"><tt>socket options = TCP_NODELAY</tt></i> doubles the read
+adding <a class="indexterm" name="id2946800"></a><i class="parameter"><tt>socket options</tt></i> = TCP_NODELAY doubles the read
performance of a Samba drive. The best explanation I have seen for this is
that the Microsoft TCP/IP stack is slow in sending tcp ACKs.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997130"></a>Read size</h2></div></div><div></div></div><p>
-The option <i class="parameter"><tt>read size</tt></i> affects the overlap of disk
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946819"></a>Read size</h2></div></div><div></div></div><p>
+The option <a class="indexterm" name="id2946829"></a><i class="parameter"><tt>read size</tt></i> affects the overlap of disk
reads/writes with network reads/writes. If the amount of data being
transferred in several of the SMB commands (currently SMBwrite, SMBwriteX and
SMBreadbraw) is larger than this value then the server begins writing
@@ -16502,10 +15807,10 @@ The default value is 16384, but very little experimentation has been
done yet to determine the optimal value, and it is likely that the best
value will vary greatly between systems anyway. A value over 65536 is
pointless and will cause you to allocate memory unnecessarily.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997174"></a>Max xmit</h2></div></div><div></div></div><p>
-At startup the client and server negotiate a <i class="parameter"><tt>maximum transmit</tt></i> size,
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946869"></a>Max xmit</h2></div></div><div></div></div><p>
+ At startup the client and server negotiate a <i class="parameter"><tt>maximum transmit</tt></i> size,
which limits the size of nearly all SMB commands. You can set the
-maximum size that Samba will negotiate using the <i class="parameter"><tt>max xmit = </tt></i> option
+maximum size that Samba will negotiate using the <a class="indexterm" name="id2946890"></a><i class="parameter"><tt>max xmit</tt></i> option
in <tt class="filename">smb.conf</tt>. Note that this is the maximum size of SMB requests that
Samba will accept, but not the maximum size that the *client* will accept.
The client maximum receive size is sent to Samba by the client and Samba
@@ -16516,41 +15821,41 @@ clients may perform better with a smaller transmit unit. Trying values
of less than 2048 is likely to cause severe problems.
</p><p>
In most cases the default is the best option.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997227"></a>Log level</h2></div></div><div></div></div><p>
-If you set the log level (also known as <i class="parameter"><tt>debug level</tt></i>) higher than 2
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946928"></a>Log level</h2></div></div><div></div></div><p>
+If you set the log level (also known as <a class="indexterm" name="id2946939"></a><i class="parameter"><tt>debug level</tt></i>) higher than 2
then you may suffer a large drop in performance. This is because the
server flushes the log file after each operation, which can be very
expensive.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997250"></a>Read raw</h2></div></div><div></div></div><p>
-The <i class="parameter"><tt>read raw</tt></i> operation is designed to be an optimised, low-latency
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2946959"></a>Read raw</h2></div></div><div></div></div><p>
+The <a class="indexterm" name="id2946969"></a><i class="parameter"><tt>read raw</tt></i> operation is designed to be an optimised, low-latency
file read operation. A server may choose to not support it,
-however. and Samba makes support for <i class="parameter"><tt>read raw</tt></i> optional, with it
+however. and Samba makes support for <a class="indexterm" name="id2946986"></a><i class="parameter"><tt>read raw</tt></i> optional, with it
being enabled by default.
</p><p>
-In some cases clients don't handle <i class="parameter"><tt>read raw</tt></i> very well and actually
+In some cases clients don't handle <a class="indexterm" name="id2947004"></a><i class="parameter"><tt>read raw</tt></i> very well and actually
get lower performance using it than they get using the conventional
read operations.
</p><p>
-So you might like to try <i class="parameter"><tt>read raw = no</tt></i> and see what happens on your
+So you might like to try <a class="indexterm" name="id2947025"></a><i class="parameter"><tt>read raw</tt></i> = no and see what happens on your
network. It might lower, raise or not affect your performance. Only
testing can really tell.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997306"></a>Write raw</h2></div></div><div></div></div><p>
-The <i class="parameter"><tt>write raw</tt></i> operation is designed to be an optimised, low-latency
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947043"></a>Write raw</h2></div></div><div></div></div><p>
+The <a class="indexterm" name="id2947053"></a><i class="parameter"><tt>write raw</tt></i> operation is designed to be an optimised, low-latency
file write operation. A server may choose to not support it,
-however. and Samba makes support for <i class="parameter"><tt>write raw</tt></i> optional, with it
+however. and Samba makes support for <a class="indexterm" name="id2947070"></a><i class="parameter"><tt>write raw</tt></i> optional, with it
being enabled by default.
</p><p>
-Some machines may find <i class="parameter"><tt>write raw</tt></i> slower than normal write, in which
+Some machines may find <a class="indexterm" name="id2947089"></a><i class="parameter"><tt>write raw</tt></i> slower than normal write, in which
case you may wish to change this option.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997348"></a>Slow Logins</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947106"></a>Slow Logins</h2></div></div><div></div></div><p>
Slow logins are almost always due to the password checking time. Using
-the lowest practical <i class="parameter"><tt>password level</tt></i> will improve things.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998255"></a>Client tuning</h2></div></div><div></div></div><p>
+the lowest practical <a class="indexterm" name="id2947118"></a><i class="parameter"><tt>password level</tt></i> will improve things.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947135"></a>Client tuning</h2></div></div><div></div></div><p>
Often a speed problem can be traced to the client. The client (for
example Windows for Workgroups) can often be tuned for better TCP
performance. Check the sections on the various clients in
<a href="#Other-Clients" title="Chapter38.Samba and other CIFS clients">Samba and Other Clients</a>.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998279"></a>Samba performance problem due changing kernel</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947160"></a>Samba performance problem due changing kernel</h2></div></div><div></div></div><p>
Hi everyone. I am running Gentoo on my server and samba 2.2.8a. Recently
I changed kernel version from linux-2.4.19-gentoo-r10 to
linux-2.4.20-wolk4.0s. And now I have performance issue with samba. Ok
@@ -16565,7 +15870,7 @@ Grab mii-tool and check the duplex settings on the NIC.
My guess is that it is a link layer issue, not an application
layer problem. Also run ifconfig and verify that the framing
error, collisions, etc... look normal for ethernet.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998311"></a>Corrupt tdb Files</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947192"></a>Corrupt tdb Files</h2></div></div><div></div></div><p>
Well today it happened, Our first major problem using samba.
Our samba PDC server has been hosting 3 TB of data to our 500+ users
[Windows NT/XP] for the last 3 years using samba, no problem.
@@ -16583,10 +15888,10 @@ Q2) What I also would like to mention is that the service latency seems
a lot lower then before the locks cleanup, any ideas on keeping it top notch?
</p><p>
A2) Yes! Same answer as for Q1!
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="DNSDHCP"></a>Chapter40.DNS and DHCP Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2999030">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999030"></a>Note</h2></div></div><div></div></div><p>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="DNSDHCP"></a>Chapter40.DNS and DHCP Configuration Guide</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2947297">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947297"></a>Note</h2></div></div><div></div></div><p>
This chapter did not make it into this release.
It is planned for the published release of this document.
-</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Further-Resources"></a>Chapter41.Further Resources</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Lechnyr</span></h3><div class="affiliation"><span class="orgname">Unofficial HOWTO<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:david@lechnyr.com">david@lechnyr.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 1, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2998449">Websites</a></dt><dt><a href="#id2998831">Related updates from Microsoft</a></dt><dt><a href="#id2998898">Books</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998449"></a>Websites</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
+</p></div></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="Further-Resources"></a>Chapter41.Further Resources</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 1, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="#id2947365">Websites</a></dt><dt><a href="#id2947755">Related updates from Microsoft</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947365"></a>Websites</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
<a href="http://hr.uoregon.edu/davidrl/cifs.txt" target="_top">
<span class="emphasis"><em>CIFS: Common Insecurities Fail Scrutiny</em></span> by &quot;Hobbit&quot;</a>
</p></li><li><p>
@@ -16673,7 +15978,7 @@ It is planned for the published release of this document.
<span class="emphasis"><em>WFWG: Password Caching and How It Affects LAN Manager
Security</em></span> at Microsoft Knowledge Base
</a>
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998831"></a>Related updates from Microsoft</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
+ </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947755"></a>Related updates from Microsoft</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>
<a href="http://support.microsoft.com/support/kb/articles/q92/5/88.asp" target="_top">
<span class="emphasis"><em>Enhanced Encryption for Windows 95 Password Cache</em></span>
</a>
@@ -16685,4 +15990,42 @@ It is planned for the published release of this document.
<a href="http://support.microsoft.com/support/kb/articles/q136/4/18.asp" target="_top">
<span class="emphasis"><em>Windows for Workgroups Sharing Updates</em></span>
</a>
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998898"></a>Books</h2></div></div><div></div></div></div></div></div><div class="index"><div class="titlepage"><div><div><h2 class="title"><a name="id2998910"></a>Index</h2></div></div><div></div></div><div class="index"></div></div></div></body></html>
+ </p></li></ul></div></div></div></div><div class="index"><div class="titlepage"><div><div><h2 class="title"><a name="id2947825"></a>Index</h2></div></div><div></div></div><div class="index"><div class="indexdiv"><h3>Symbols</h3><dl><dt>&quot;Domain Admins&quot; group, <a href="#id2885887">Discussion</a></dt><dt>&quot;Domain Users&quot; group, <a href="#id2886481">Adding Domain Users to the Power Users group</a></dt><dt>&quot;Printers&quot; folder, <a href="#id2914035">Caveats to be considered</a>, <a href="#id2915261">Installing the PostScript Driver on a Client</a>, <a href="#id2916361">Manual Driver Installation in 15 Steps</a></dt><dt>&quot;raw&quot; printing, <a href="#id2907296">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</a></dt><dt>/etc/host.conf, <a href="#id2934626">/etc/host.conf</a></dt><dt>/etc/hosts, <a href="#id2934434">/etc/hosts</a></dt><dt>/etc/nsswitch.conf, <a href="#id2934679">/etc/nsswitch.conf</a></dt><dt>8.3</dt><dd><dl><dt>file names, <a href="#id2886902">MS Windows NTFS Comparison with UNIX File Systems</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>A</h3><dl><dt>ACLs, <a href="#AccessControls">File, Directory and Share Access Controls</a></dt><dt>Active Directory, <a href="#ads-member">Samba ADS Domain Membership</a></dt><dt>add group script, <a href="#id2886386">Adding Groups Fails</a></dt><dt>add machine script, <a href="#id2871529">The machine trust account not accessible</a>, <a href="#id2875318">Adding Machine to Domain Fails</a></dt><dt>add printer command, <a href="#id2904312">Adding new Printers with the Windows NT APW</a></dt><dt>add printer wizard, <a href="#id2907647">Three familiar Methods for driver upload plus a new one</a></dt><dt>add user script, <a href="#id2881634">Mapping User Identifiers between MS Windows and UNIX</a></dt><dt>addprinter command, <a href="#id2895722">Parameters Recommended for Use</a></dt><dt>admin users, <a href="#id2887541">User and Group Based Controls</a>, <a href="#id2890703">I have set force user but Samba still makes root the owner of all the files I touch!</a></dt><dt>Administrator, <a href="#id2885887">Discussion</a></dt><dt>ADS (see Active Directory)</dt><dt>ads server, <a href="#id2874715">Setup your smb.conf</a></dt><dt>application/cups.vnd-postscript, <a href="#id2914308">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a></dt><dt>application/octet-stream, <a href="#id2907441">Explicitly enable &quot;raw&quot; printing for
+application/octet-stream!</a>, <a href="#id2909178">MIME type Conversion Rules</a>, <a href="#id2910805">&quot;application/octet-stream&quot; printing</a></dt><dt>application/pdf, <a href="#id2908970">MIME types and CUPS Filters</a></dt><dt>application/postscript, <a href="#id2914308">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a></dt><dt>application/vnd.cups-raster, <a href="#id2911052">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt>application/vnd.cups-raw, <a href="#id2907441">Explicitly enable &quot;raw&quot; printing for
+application/octet-stream!</a></dt><dt>auth methods, <a href="#id2885422">auth methods does not work</a>, <a href="#id2937630">Passdb Backends and Authentication</a></dt></dl></div><div class="indexdiv"><h3>B</h3><dl><dt>bind interfaces only, <a href="#id2940722">The tests</a></dt><dt>brlock.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>browse list, <a href="#id2876490">What is Browsing?</a>, <a href="#id2879603">Technical Overview of browsing</a></dt><dt>browseable, <a href="#id2897717">The [printers] Section</a>, <a href="#id2898177">Any [my_printer_name] Section</a>, <a href="#id2900227">Parameters in the [print$] Section</a></dt></dl></div><div class="indexdiv"><h3>C</h3><dl><dt>case sensitive, <a href="#id2888342">Miscellaneous Controls</a>, <a href="#id2928660">Windows 9x / Me Profile Setup</a></dt><dt>chpass, <a href="#id2873290">Manual Creation of Machine Trust Accounts</a></dt><dt>client use spnego, <a href="#id2875462">I can't join a Windows 2003 PDC</a></dt><dt>comment, <a href="#id2897717">The [printers] Section</a>, <a href="#id2898177">Any [my_printer_name] Section</a>, <a href="#id2900227">Parameters in the [print$] Section</a></dt><dt>configure, <a href="#id2944272">Building the Binaries</a></dt><dt>connections.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>core files, <a href="#id2943400">Internal errors</a></dt><dt>create mask, <a href="#id2887963">File and Directory Permissions Based Controls</a>, <a href="#id2889768">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>csc policy, <a href="#id2888342">Miscellaneous Controls</a></dt><dt>CUPS</dt><dd><dl><dt>Page Accounting, <a href="#id2919616">Page Accounting with CUPS</a></dt><dt>quotas, <a href="#id2919667">Setting up Quotas</a></dt></dl></dd><dt>CUPS-PPD, <a href="#id2918598">cupsomatic, pdqomatic, lpdomatic, directomatic</a></dt><dt>cupsaddsmb, <a href="#id2907647">Three familiar Methods for driver upload plus a new one</a>, <a href="#id2913163">cupsaddsmb: the unknown Utility</a>, <a href="#id2914035">Caveats to be considered</a>, <a href="#id2914525">Run &quot;cupsaddsmb&quot; (quiet Mode)</a>, <a href="#id2914652">Run &quot;cupsaddsmb&quot; with verbose Output</a>, <a href="#id2914873">Understanding cupsaddsmb</a>, <a href="#id2915105">cupsaddsmb with a Samba PDC</a>, <a href="#id2915185">cupsaddsmb Flowchart</a></dt><dt>cupsomatic, <a href="#id2908649">CUPS can use all Windows-formatted Vendor PPDs</a>, <a href="#id2908777">The CUPS Filtering Architecture</a>, <a href="#id2910493">cupsomatic/Foomatic -- how do they fit into the Picture?</a>, <a href="#id2911319">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a>, <a href="#id2918598">cupsomatic, pdqomatic, lpdomatic, directomatic</a></dt><dt>CVS, <a href="#id2943739">Access Samba source code via CVS</a></dt><dd><dl><dt>web, <a href="#id2943810">Access via CVSweb</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>D</h3><dl><dt>daemon, <a href="#id2944974">Alternative: starting it as a daemon</a></dt><dt>DDK, <a href="#id2913085">PostScript Drivers with no major problems -- even in Kernel
+Mode</a>, <a href="#id2913502">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt>debug, <a href="#id2943400">Internal errors</a></dt><dt>debug level, <a href="#id2942241">Debugging with Samba itself</a>, <a href="#id2946928">Log level</a></dt><dt>debuglevel, <a href="#id2943191">Debug levels</a></dt><dt>default case, <a href="#id2888342">Miscellaneous Controls</a></dt><dt>delete printer command, <a href="#id2904312">Adding new Printers with the Windows NT APW</a></dt><dt>deleteprinter command, <a href="#id2895722">Parameters Recommended for Use</a></dt><dt>DHCP, <a href="#id2934312">Background Information</a></dt><dt>diff, <a href="#id2943580">Patches</a></dt><dt>directory mask, <a href="#id2887963">File and Directory Permissions Based Controls</a></dt><dt>directory security mask, <a href="#id2889768">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>disable spoolss, <a href="#id2895722">Parameters Recommended for Use</a></dt><dt>display charset, <a href="#id2935930">Samba and charsets</a></dt><dt>DNS, <a href="#id2877054">TCP/IP - without NetBIOS</a>, <a href="#id2935361">DNS Lookup</a></dt><dd><dl><dt>Active Directory, <a href="#id2877219">DNS and Active Directory</a></dt><dt>Dynamic, <a href="#id2934312">Background Information</a></dt></dl></dd><dt>dns proxy, <a href="#id2876490">What is Browsing?</a></dt><dt>domain admin group, <a href="#groupmapping">Mapping MS Windows and UNIX Groups</a></dt><dt>domain logons, <a href="#id2869805">Preparing for Domain Control</a></dt><dt>domain master, <a href="#id2870742">Domain Network Logon Service</a>, <a href="#id2872480">Example Configuration</a>, <a href="#id2876490">What is Browsing?</a>, <a href="#id2878314">Making Samba the domain master</a></dt><dt>dont descend, <a href="#id2888342">Miscellaneous Controls</a></dt><dt>dos charset, <a href="#id2935930">Samba and charsets</a>, <a href="#id2936088">Japanese charsets</a>, <a href="#id2936232">CP850.so can't be found</a></dt><dt>dos filemode, <a href="#id2887963">File and Directory Permissions Based Controls</a></dt><dt>dos filetime resolution, <a href="#id2888342">Miscellaneous Controls</a></dt><dt>dos filetimes, <a href="#id2888342">Miscellaneous Controls</a></dt></dl></div><div class="indexdiv"><h3>E</h3><dl><dt>EMF, <a href="#id2907968">Windows Drivers, GDI and EMF</a>, <a href="#id2912150">From Windows Clients to an NT Print Server</a>, <a href="#id2912287">Driver Execution on the Server</a></dt><dt>encrypt passwords, <a href="#id2874094">Joining an NT4 type Domain with Samba-3</a>, <a href="#id2882412">smbpasswd - Encrypted Password Database</a>, <a href="#id2933403">smb.conf PAM Configuration</a>, <a href="#id2940722">The tests</a></dt><dt>enhanced browsing, <a href="#id2876490">What is Browsing?</a></dt><dt>enumports command, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2905065">Samba and Printer Ports</a></dt><dt>EPM (see ESP meta packager)</dt><dt>ESC/P, <a href="#id2912287">Driver Execution on the Server</a></dt><dt>ESP</dt><dd><dl><dt>Ghostscript, <a href="#id2908777">The CUPS Filtering Architecture</a>, <a href="#id2911319">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a></dt><dt>meta packager, <a href="#id2913502">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt>Print Pro, <a href="#id2911891">Sources of CUPS drivers / PPDs</a>, <a href="#id2913965">ESP Print Pro Package of &quot;PostScript Driver for
+WinNT/2k/XP&quot;</a></dt></dl></dd><dt>Extended Attributes, <a href="#AccessControls">File, Directory and Share Access Controls</a></dt></dl></div><div class="indexdiv"><h3>F</h3><dl><dt>fake oplocks, <a href="#id2888342">Miscellaneous Controls</a></dt><dt>File System, <a href="#id2886866">File System Access Controls</a></dt><dt>foomatic, <a href="#id2908649">CUPS can use all Windows-formatted Vendor PPDs</a>, <a href="#id2908777">The CUPS Filtering Architecture</a>, <a href="#id2910493">cupsomatic/Foomatic -- how do they fit into the Picture?</a>, <a href="#id2911319">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a>, <a href="#id2918345">foomatic-rip and Foomatic explained</a>, <a href="#id2918496">Foomatic's strange Name</a></dt><dt>foomatic-rip, <a href="#id2911319">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a>, <a href="#id2918189">CUPS Print Drivers from Linuxprinting.org</a>, <a href="#id2918345">foomatic-rip and Foomatic explained</a>, <a href="#id2918779">The Grand Unification
+achieved...</a></dt><dt>force create mode, <a href="#id2887963">File and Directory Permissions Based Controls</a>, <a href="#id2889768">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>force directory mode, <a href="#id2887963">File and Directory Permissions Based Controls</a>, <a href="#id2889768">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>force directory security mode, <a href="#id2887963">File and Directory Permissions Based Controls</a>, <a href="#id2889768">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>force group, <a href="#id2887541">User and Group Based Controls</a></dt><dt>force security mode, <a href="#id2887963">File and Directory Permissions Based Controls</a>, <a href="#id2889768">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>force user, <a href="#id2887541">User and Group Based Controls</a>, <a href="#id2890703">I have set force user but Samba still makes root the owner of all the files I touch!</a>, <a href="#id2891703">Beware of Force User</a></dt><dt>ftp, <a href="#id2944055">Accessing the samba sources via rsync and ftp</a></dt></dl></div><div class="indexdiv"><h3>G</h3><dl><dt>gdb, <a href="#id2943400">Internal errors</a></dt><dt>GDI, <a href="#gdipost">GDI on Windows -- PostScript on UNIX</a>, <a href="#id2907968">Windows Drivers, GDI and EMF</a>, <a href="#id2912150">From Windows Clients to an NT Print Server</a>, <a href="#id2912287">Driver Execution on the Server</a></dt><dt>GhostScript, <a href="#post-and-ghost">PostScript and Ghostscript</a>, <a href="#id2908420">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dd><dl><dt>(see also PostScript)</dt></dl></dd><dt>Ghostscript</dt><dd><dl><dt>ESP (see ESP GhostScript)</dt></dl></dd><dt>GID, <a href="#id2885652">Features and Benefits</a></dt><dt>GPG, <a href="#id2944120">Verifying Samba's PGP signature</a></dt><dt>groupadd, <a href="#id2885652">Features and Benefits</a></dt><dt>groupdel, <a href="#id2885652">Features and Benefits</a></dt><dt>groups</dt><dd><dl><dt>domain, <a href="#id2885887">Discussion</a></dt><dt>mapping, <a href="#groupmapping">Mapping MS Windows and UNIX Groups</a></dt><dt>nested, <a href="#id2886455">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd><dt>guest account, <a href="#id2879778">Problem resolution</a>, <a href="#id2880591">My client reports &quot;This server is not configured to list shared resources&quot;</a>, <a href="#id2897717">The [printers] Section</a></dt><dt>guest ok, <a href="#id2887541">User and Group Based Controls</a>, <a href="#id2897717">The [printers] Section</a>, <a href="#id2898177">Any [my_printer_name] Section</a>, <a href="#id2900227">Parameters in the [print$] Section</a></dt></dl></div><div class="indexdiv"><h3>H</h3><dl><dt>hide dot files, <a href="#id2888342">Miscellaneous Controls</a></dt><dt>hide files, <a href="#id2888342">Miscellaneous Controls</a></dt><dt>hide unreadable, <a href="#id2887963">File and Directory Permissions Based Controls</a></dt><dt>hide unwriteable files, <a href="#id2887963">File and Directory Permissions Based Controls</a></dt><dt>host msdfs, <a href="#id2895017">Features and Benefits</a></dt><dt>hosts allow, <a href="#id2893288">Using host based protection</a>, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2898177">Any [my_printer_name] Section</a></dt><dt>hosts deny, <a href="#id2893288">Using host based protection</a>, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2898177">Any [my_printer_name] Section</a></dt></dl></div><div class="indexdiv"><h3>I</h3><dl><dt>idmap gid, <a href="#id2885652">Features and Benefits</a>, <a href="#id2934050">Winbind is not resolving users and groups</a></dt><dt>idmap uid, <a href="#id2885652">Features and Benefits</a>, <a href="#id2934050">Winbind is not resolving users and groups</a></dt><dt>ifconfig, <a href="#id2944727">Starting from inetd.conf</a></dt><dt>imprints, <a href="#id2907647">Three familiar Methods for driver upload plus a new one</a></dt><dt>inetd, <a href="#id2940722">The tests</a>, <a href="#id2944619">Starting the smbd and nmbd</a>, <a href="#id2944727">Starting from inetd.conf</a></dt><dt>Interdomain Trusts, <a href="#InterdomainTrusts">Interdomain Trust Relationships</a></dt><dd><dl><dt>completing, <a href="#id2894294">Completing an NT4 Domain Trust</a></dt><dt>creating, <a href="#id2894193">Native MS Windows NT4 Trusts Configuration</a></dt><dt>Facilities, <a href="#id2894341">Inter-Domain Trust Facilities</a></dt></dl></dd><dt>interfaces, <a href="#id2878515">Multiple interfaces</a>, <a href="#id2940722">The tests</a>, <a href="#id2944727">Starting from inetd.conf</a></dt><dt>invalid users, <a href="#id2887541">User and Group Based Controls</a></dt><dt>IPP, <a href="#id2914873">Understanding cupsaddsmb</a></dt></dl></div><div class="indexdiv"><h3>K</h3><dl><dt>KDC, <a href="#ads-member">Samba ADS Domain Membership</a></dt><dt>Kerberos, <a href="#ads-member">Samba ADS Domain Membership</a></dt><dt>kinit, <a href="#id2874844">Setup your /etc/krb5.conf</a></dt></dl></div><div class="indexdiv"><h3>L</h3><dl><dt>ldap admin dn, <a href="#id2883174">Configuring Samba</a></dt><dt>ldap delete dn, <a href="#id2883174">Configuring Samba</a></dt><dt>ldap filter, <a href="#id2883174">Configuring Samba</a></dt><dt>ldap machine suffix, <a href="#id2883174">Configuring Samba</a></dt><dt>ldap passwd sync, <a href="#id2883174">Configuring Samba</a>, <a href="#id2884294">Password synchronisation</a></dt><dt>ldap ssl, <a href="#id2883174">Configuring Samba</a>, <a href="#id2883611">Security and sambaSamAccount</a></dt><dt>ldap suffix, <a href="#id2883174">Configuring Samba</a></dt><dt>ldap trust ids, <a href="#id2883174">Configuring Samba</a></dt><dt>ldap user suffix, <a href="#id2883174">Configuring Samba</a></dt><dt>libnss_wins.so, <a href="#id2934679">/etc/nsswitch.conf</a></dt><dt>Links</dt><dd><dl><dt>hard, <a href="#id2886902">MS Windows NTFS Comparison with UNIX File Systems</a></dt><dt>soft, <a href="#id2886902">MS Windows NTFS Comparison with UNIX File Systems</a></dt></dl></dd><dt>Linuxprinting.org, <a href="#id2918189">CUPS Print Drivers from Linuxprinting.org</a></dt><dt>lm announce, <a href="#id2876490">What is Browsing?</a></dt><dt>lm interval, <a href="#id2876490">What is Browsing?</a></dt><dt>LMB (see Local Master Browser)</dt><dt>LMHOSTS, <a href="#id2935167">The LMHOSTS file</a></dt><dt>load printers, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2896481">A little Experiment to warn you</a>, <a href="#id2897186">The [global] Section</a></dt><dt>local master, <a href="#id2876490">What is Browsing?</a>, <a href="#DMB">Setting up WORKGROUP Browsing</a></dt><dt>Local Master Browser, <a href="#id2878551">Use of the Remote Announce parameter</a></dt><dt>locking, <a href="#id2891060">Discussion</a></dt><dt>locking.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>log files</dt><dd><dl><dt>monitoring, <a href="#id2940496">Assumptions</a></dt></dl></dd><dt>log level, <a href="#id2875318">Adding Machine to Domain Fails</a>, <a href="#id2922950">extd_audit</a>, <a href="#id2943191">Debug levels</a></dt><dt>logon drive, <a href="#id2929201">Windows NT4 Workstation</a></dt><dt>logon home, <a href="#id2883771">LDAP special attributes for sambaSamAccounts</a>, <a href="#id2928283">Windows 9x / Me User Profiles</a>, <a href="#id2928414">Mixed Windows 9x / Me and Windows NT4/200x User Profiles</a>, <a href="#id2929201">Windows NT4 Workstation</a>, <a href="#id2929902">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt>logon path, <a href="#id2883771">LDAP special attributes for sambaSamAccounts</a>, <a href="#id2928414">Mixed Windows 9x / Me and Windows NT4/200x User Profiles</a>, <a href="#id2928660">Windows 9x / Me Profile Setup</a>, <a href="#id2929201">Windows NT4 Workstation</a>, <a href="#id2929902">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt>logon script, <a href="#id2883771">LDAP special attributes for sambaSamAccounts</a></dt><dt>lpadmin, <a href="#id2918189">CUPS Print Drivers from Linuxprinting.org</a>, <a href="#id2919667">Setting up Quotas</a></dt><dt>lppause command, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2906443">Linking of smbd with libcups.so</a>, <a href="#id2912426">From Windows Clients to a CUPS/Samba Print Server</a>, <a href="#id2920543">Pre-conditions</a></dt><dt>lpq cache time, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2897186">The [global] Section</a></dt><dt>lpq command, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2906443">Linking of smbd with libcups.so</a>, <a href="#id2920543">Pre-conditions</a></dt><dt>lpresume command, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2906443">Linking of smbd with libcups.so</a>, <a href="#id2920543">Pre-conditions</a></dt><dt>lprm command, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2906443">Linking of smbd with libcups.so</a>, <a href="#id2920543">Pre-conditions</a></dt><dt>lpstat, <a href="#id2917432">Troubleshooting revisited</a></dt></dl></div><div class="indexdiv"><h3>M</h3><dl><dt>MAC Addresses, <a href="#id2934434">/etc/hosts</a></dt><dt>machine trust accounts, <a href="#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt>creating, <a href="#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a></dt></dl></dd><dt>make, <a href="#id2944272">Building the Binaries</a></dt><dt>mangling method, <a href="#id2936088">Japanese charsets</a></dt><dt>map to guest, <a href="#id2900227">Parameters in the [print$] Section</a>, <a href="#id2904312">Adding new Printers with the Windows NT APW</a>, <a href="#id2921397">Can't reconnect to Samba under new account
+ from Win2K/XP</a>, <a href="#id2921624">Avoid being connected to the Samba server as the
+ &quot;wrong&quot; user</a></dt><dt>max print jobs, <a href="#id2895722">Parameters Recommended for Use</a></dt><dt>max xmit, <a href="#id2946869">Max xmit</a></dt><dt>messages.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>MIME, <a href="#id2908970">MIME types and CUPS Filters</a>, <a href="#id2909178">MIME type Conversion Rules</a>, <a href="#id2909333">Filter Requirements</a>, <a href="#id2910805">&quot;application/octet-stream&quot; printing</a></dt><dt>min print space, <a href="#id2895722">Parameters Recommended for Use</a></dt><dt>msdfs root, <a href="#id2895017">Features and Benefits</a></dt></dl></div><div class="indexdiv"><h3>N</h3><dl><dt>name resolve order, <a href="#id2876490">What is Browsing?</a></dt><dt>nbtstat, <a href="#id2935103">The NetBIOS Name Cache</a></dt><dt>NetBIOS, <a href="#id2876401">Features and Benefits</a>, <a href="#id2877054">TCP/IP - without NetBIOS</a>, <a href="#integrate-ms-networks">Integrating MS Windows networks with Samba</a>, <a href="#id2934793">Name resolution as used within MS Windows networking</a></dt><dt>NetBIOS-less, <a href="#id2877054">TCP/IP - without NetBIOS</a></dt><dt>nmblookup, <a href="#id2935103">The NetBIOS Name Cache</a></dt><dt>nt acl support, <a href="#id2887963">File and Directory Permissions Based Controls</a>, <a href="#id2889226">Viewing file ownership</a>, <a href="#id2889358">Viewing File or Directory Permissions</a>, <a href="#id2889603">Modifying file or directory permissions</a>, <a href="#id2946367">Windows 2000 Service Pack 2</a></dt><dt>ntdrivers.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>ntforms.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>NTFS, <a href="#id2886866">File System Access Controls</a></dt><dt>ntprinters.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd></dl></div><div class="indexdiv"><h3>O</h3><dl><dt>obey pam restrictions, <a href="#id2933403">smb.conf PAM Configuration</a></dt><dt>only user, <a href="#id2887541">User and Group Based Controls</a>, <a href="#id2893786">Why can users access home directories of other users?</a></dt><dt>oplock break wait time, <a href="#id2891795">Advanced Samba Opportunistic Locking Parameters</a>, <a href="#id2892152">Disabling Kernel OpLocks</a></dt><dt>oplock contention limit, <a href="#id2891795">Advanced Samba Opportunistic Locking Parameters</a></dt><dt>os level, <a href="#id2876490">What is Browsing?</a>, <a href="#DMB">Setting up WORKGROUP Browsing</a>, <a href="#id2877916">Setting up DOMAIN Browsing</a>, <a href="#browse-force-master">Forcing Samba to be the master</a>, <a href="#id2878314">Making Samba the domain master</a></dt><dt>os2 driver map, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2945887">Printer driver download for for OS/2 clients?</a></dt></dl></div><div class="indexdiv"><h3>P</h3><dl><dt>page_log, <a href="#id2919874">The page_log File Syntax</a></dt><dt>passdb backend, <a href="#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a>, <a href="#passdb">Account Information Databases</a>, <a href="#id2881219">Technical Information</a>, <a href="#id2882092">The pdbedit Command</a>, <a href="#id2883174">Configuring Samba</a>, <a href="#id2884501">Configuring</a>, <a href="#id2885267">Users can not logon</a>, <a href="#id2885422">auth methods does not work</a>, <a href="#id2937630">Passdb Backends and Authentication</a></dt><dt>password level, <a href="#id2868660">Password checking</a>, <a href="#id2940722">The tests</a>, <a href="#id2946168">Case handling of passwords</a>, <a href="#id2947106">Slow Logins</a></dt><dt>password server, <a href="#id2868379">Server Security (User Level Security)</a>, <a href="#id2871174">Security Mode and Master Browsers</a>, <a href="#id2874094">Joining an NT4 type Domain with Samba-3</a>, <a href="#id2940722">The tests</a></dt><dt>patch, <a href="#id2943580">Patches</a></dt><dt>path, <a href="#id2867129">&quot;The network name cannot be found&quot;</a>, <a href="#id2897717">The [printers] Section</a>, <a href="#id2898177">Any [my_printer_name] Section</a>, <a href="#id2898498">Print Commands</a>, <a href="#id2900037">Creating the [print$] Share</a>, <a href="#id2900227">Parameters in the [print$] Section</a>, <a href="#id2900537">Subdirectory Structure in [print$]</a>, <a href="#id2912640">Samba receiving Jobfiles and passing them to CUPS</a>, <a href="#id2920387">Auto-Deletion or Preservation of CUPS Spool Files</a>, <a href="#id2922272">Permissions on
+/var/spool/samba/ get reset after each
+reboot</a>, <a href="#id2940722">The tests</a></dt><dt>PCL, <a href="#gdipost">GDI on Windows -- PostScript on UNIX</a>, <a href="#id2908120">UNIX Printfile Conversion and GUI Basics</a>, <a href="#id2912287">Driver Execution on the Server</a>, <a href="#id2912726">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a></dt><dt>PDF, <a href="#id2907968">Windows Drivers, GDI and EMF</a>, <a href="#id2908563">PostScript Printer Description (PPD) Specification</a></dt><dt>pdf, <a href="#id2909178">MIME type Conversion Rules</a></dt><dt>PDL, <a href="#gdipost">GDI on Windows -- PostScript on UNIX</a>, <a href="#post-and-ghost">PostScript and Ghostscript</a></dt><dt>PJL, <a href="#id2912726">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a>, <a href="#id2914308">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a>, <a href="#id2919778">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt>point and print, <a href="#id2907365">Driver Installation Methods on Windows Clients</a>, <a href="#id2907647">Three familiar Methods for driver upload plus a new one</a>, <a href="#id2910493">cupsomatic/Foomatic -- how do they fit into the Picture?</a>, <a href="#id2914525">Run &quot;cupsaddsmb&quot; (quiet Mode)</a>, <a href="#id2915261">Installing the PostScript Driver on a Client</a>, <a href="#id2916361">Manual Driver Installation in 15 Steps</a></dt><dt>PostScript, <a href="#id2907785">Using CUPS/Samba in an advanced Way -- intelligent printing
+with PostScript Driver Download</a>, <a href="#gdipost">GDI on Windows -- PostScript on UNIX</a>, <a href="#id2908120">UNIX Printfile Conversion and GUI Basics</a>, <a href="#post-and-ghost">PostScript and Ghostscript</a>, <a href="#id2909513">Prefilters</a>, <a href="#id2912287">Driver Execution on the Server</a>, <a href="#id2912726">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a>, <a href="#id2913032">CUPS: a &quot;Magical Stone&quot;?</a>, <a href="#id2913502">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dd><dl><dt>(see also Ghostscript)</dt><dt>RIP, <a href="#post-and-ghost">PostScript and Ghostscript</a></dt></dl></dd><dt>PPD, <a href="#post-and-ghost">PostScript and Ghostscript</a>, <a href="#id2908563">PostScript Printer Description (PPD) Specification</a>, <a href="#id2911052">PostScript Printer Descriptions (PPDs) for non-PS Printers</a>, <a href="#id2912815">PPDs for non-PS Printers on UNIX</a>, <a href="#id2912871">PPDs for non-PS Printers on Windows</a>, <a href="#id2913032">CUPS: a &quot;Magical Stone&quot;?</a>, <a href="#id2915261">Installing the PostScript Driver on a Client</a></dt><dd><dl><dt>CUPS (see CUPS-PPD)</dt></dl></dd><dt>preferred master, <a href="#id2876490">What is Browsing?</a>, <a href="#DMB">Setting up WORKGROUP Browsing</a>, <a href="#browse-force-master">Forcing Samba to be the master</a>, <a href="#id2878314">Making Samba the domain master</a>, <a href="#id2940722">The tests</a></dt><dt>preserve case, <a href="#id2928660">Windows 9x / Me Profile Setup</a></dt><dt>print command, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2897186">The [global] Section</a>, <a href="#id2898580">Default Print Commands for various UNIX Print Subsystems</a>, <a href="#id2899263">Setting up your own Print Commands</a>, <a href="#id2906443">Linking of smbd with libcups.so</a>, <a href="#id2912426">From Windows Clients to a CUPS/Samba Print Server</a>, <a href="#id2920543">Pre-conditions</a>, <a href="#id2920702">Manual Configuration</a></dt><dt>print ok , <a href="#id2895722">Parameters Recommended for Use</a></dt><dt>printable, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2897717">The [printers] Section</a>, <a href="#id2898177">Any [my_printer_name] Section</a></dt><dt>printcap, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2898580">Default Print Commands for various UNIX Print Subsystems</a>, <a href="#id2906348">Basic Configuration of CUPS support</a>, <a href="#id2906443">Linking of smbd with libcups.so</a>, <a href="#id2906866">More complex smb.conf Settings for
+CUPS</a>, <a href="#id2912426">From Windows Clients to a CUPS/Samba Print Server</a>, <a href="#id2920543">Pre-conditions</a></dt><dt>printcap name, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2897186">The [global] Section</a></dt><dt>printer, <a href="#id2895722">Parameters Recommended for Use</a></dt><dt>printer admin, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2897186">The [global] Section</a>, <a href="#id2898177">Any [my_printer_name] Section</a>, <a href="#id2900227">Parameters in the [print$] Section</a>, <a href="#id2900805">Setting Drivers for existing Printers with a Client GUI</a>, <a href="#id2902934">IMPORTANT! Setting Device Modes on new Printers</a>, <a href="#id2903328">Always make first Client Connection as root or &quot;printer admin&quot;</a>, <a href="#id2903534">Setting Default Print Options for the Client Drivers</a>, <a href="#id2904312">Adding new Printers with the Windows NT APW</a>, <a href="#id2906866">More complex smb.conf Settings for
+CUPS</a>, <a href="#id2916147">What is required for adddriver and setdriver to succeed</a>, <a href="#id2921875">Print options for all users can't be set on Win2K/XP</a></dt><dt>printer name, <a href="#id2895722">Parameters Recommended for Use</a></dt><dt>printing, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2897186">The [global] Section</a>, <a href="#id2898580">Default Print Commands for various UNIX Print Subsystems</a>, <a href="#id2899263">Setting up your own Print Commands</a>, <a href="#id2906348">Basic Configuration of CUPS support</a>, <a href="#id2906443">Linking of smbd with libcups.so</a>, <a href="#id2906866">More complex smb.conf Settings for
+CUPS</a>, <a href="#id2912426">From Windows Clients to a CUPS/Samba Print Server</a>, <a href="#id2920543">Pre-conditions</a>, <a href="#id2920702">Manual Configuration</a></dt><dt>printing.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>PrintPro (see ESP Print Pro)</dt><dt>public, <a href="#id2897717">The [printers] Section</a></dt></dl></div><div class="indexdiv"><h3>Q</h3><dl><dt>queue resume command, <a href="#id2906443">Linking of smbd with libcups.so</a></dt><dt>queuepause command, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2906443">Linking of smbd with libcups.so</a></dt><dt>queueresume command, <a href="#id2895722">Parameters Recommended for Use</a></dt></dl></div><div class="indexdiv"><h3>R</h3><dl><dt>read list, <a href="#id2887541">User and Group Based Controls</a></dt><dt>read only, <a href="#id2888342">Miscellaneous Controls</a>, <a href="#id2897717">The [printers] Section</a>, <a href="#id2900227">Parameters in the [print$] Section</a></dt><dt>read raw, <a href="#id2946959">Read raw</a></dt><dt>read size, <a href="#id2946819">Read size</a></dt><dt>remote announce, <a href="#id2876818">NetBIOS over TCP/IP</a>, <a href="#id2877367">How Browsing Functions</a>, <a href="#id2878551">Use of the Remote Announce parameter</a>, <a href="#id2879656">Browsing support in Samba</a></dt><dt>remote browse sync, <a href="#id2876818">NetBIOS over TCP/IP</a>, <a href="#id2877367">How Browsing Functions</a>, <a href="#id2878708">Use of the Remote Browse Sync parameter</a></dt><dt>root preexec, <a href="#id2938464">Logon Scripts</a></dt><dt>rpcclient</dt><dd><dl><dt>adddriver, <a href="#id2914652">Run &quot;cupsaddsmb&quot; with verbose Output</a>, <a href="#id2914873">Understanding cupsaddsmb</a>, <a href="#id2915559">Installing PostScript Driver Files manually (using
+rpcclient)</a>, <a href="#id2915876">Understanding the rpcclient man page</a>, <a href="#id2916147">What is required for adddriver and setdriver to succeed</a>, <a href="#id2916361">Manual Driver Installation in 15 Steps</a></dt><dt>enumdrivers, <a href="#id2915559">Installing PostScript Driver Files manually (using
+rpcclient)</a>, <a href="#id2916361">Manual Driver Installation in 15 Steps</a></dt><dt>enumports, <a href="#id2915559">Installing PostScript Driver Files manually (using
+rpcclient)</a></dt><dt>enumprinters, <a href="#id2915559">Installing PostScript Driver Files manually (using
+rpcclient)</a>, <a href="#id2916147">What is required for adddriver and setdriver to succeed</a>, <a href="#id2916361">Manual Driver Installation in 15 Steps</a>, <a href="#id2917432">Troubleshooting revisited</a></dt><dt>getdriver, <a href="#id2915981">Producing an Example by querying a Windows Box</a>, <a href="#id2916361">Manual Driver Installation in 15 Steps</a></dt><dt>getprinter, <a href="#id2915981">Producing an Example by querying a Windows Box</a>, <a href="#id2916361">Manual Driver Installation in 15 Steps</a>, <a href="#id2917432">Troubleshooting revisited</a></dt><dt>setdriver, <a href="#id2914035">Caveats to be considered</a>, <a href="#id2914652">Run &quot;cupsaddsmb&quot; with verbose Output</a>, <a href="#id2914873">Understanding cupsaddsmb</a>, <a href="#id2915559">Installing PostScript Driver Files manually (using
+rpcclient)</a>, <a href="#id2916147">What is required for adddriver and setdriver to succeed</a>, <a href="#id2916361">Manual Driver Installation in 15 Steps</a></dt></dl></dd><dt>rsync, <a href="#id2944055">Accessing the samba sources via rsync and ftp</a></dt></dl></div><div class="indexdiv"><h3>S</h3><dl><dt>secrets.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>security, <a href="#id2867626">Samba Security Modes</a>, <a href="#id2868020">Domain Security Mode (User Level Security)</a>, <a href="#id2868379">Server Security (User Level Security)</a>, <a href="#id2868882">What makes Samba a SERVER?</a>, <a href="#id2868923">What makes Samba a Domain Controller?</a>, <a href="#id2868959">What makes Samba a Domain Member?</a>, <a href="#id2868998">Constantly Losing Connections to Password Server</a>, <a href="#id2869805">Preparing for Domain Control</a>, <a href="#id2871174">Security Mode and Master Browsers</a>, <a href="#id2874094">Joining an NT4 type Domain with Samba-3</a>, <a href="#id2874530">Why is this better than security = server?</a>, <a href="#id2874715">Setup your smb.conf</a>, <a href="#id2914525">Run &quot;cupsaddsmb&quot; (quiet Mode)</a>, <a href="#id2921263">&quot;cupsaddsmb&quot; keeps asking for root password in
+ neverending loop</a>, <a href="#id2937630">Passdb Backends and Authentication</a>, <a href="#id2940722">The tests</a>, <a href="#id2946115">Configuring WfW password handling</a></dt><dt>security mask, <a href="#id2887963">File and Directory Permissions Based Controls</a>, <a href="#id2889768">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>Server Manager, <a href="#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a>, <a href="#id2873290">Manual Creation of Machine Trust Accounts</a></dt><dt>sessionid.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>share_info.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>short preserve case, <a href="#id2888342">Miscellaneous Controls</a>, <a href="#id2928660">Windows 9x / Me Profile Setup</a></dt><dt>Short-Cuts, <a href="#id2886902">MS Windows NTFS Comparison with UNIX File Systems</a></dt><dt>show add printer wizard, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2897186">The [global] Section</a>, <a href="#id2904312">Adding new Printers with the Windows NT APW</a></dt><dt>SID, <a href="#id2885652">Features and Benefits</a></dt><dt>Single Sign On, <a href="#id2914035">Caveats to be considered</a></dt><dt>smbclient, <a href="#ads-test-smbclient">Testing with smbclient</a>, <a href="#id2940722">The tests</a></dt><dt>socket options, <a href="#id2946728">Socket options</a></dt><dt>spooling</dt><dd><dl><dt>central, <a href="#id2907241">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt>peer-to-peer, <a href="#id2907241">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt></dl></dd><dt>spooling-only, <a href="#id2907296">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</a></dt><dt>strict locking, <a href="#id2891060">Discussion</a></dt></dl></div><div class="indexdiv"><h3>T</h3><dl><dt>TDB, <a href="#id2917593">The printing *.tdb Files</a>, <a href="#id2917838">Trivial DataBase Files</a></dt><dd><dl><dt>backing up (see tdbbackup)</dt></dl></dd><dt>tdbbackup, <a href="#id2918053">Using tdbbackup</a></dt><dt>template homedir, <a href="#id2925671">Linux/FreeBSD-specific PAM configuration</a></dt><dt>testparm, <a href="#id2940722">The tests</a></dt><dt>text/plain, <a href="#id2909178">MIME type Conversion Rules</a></dt><dt>total print jobs, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2897186">The [global] Section</a></dt></dl></div><div class="indexdiv"><h3>U</h3><dl><dt>UDP, <a href="#id2876818">NetBIOS over TCP/IP</a></dt><dt>UID, <a href="#id2885652">Features and Benefits</a></dt><dt>unexpected.tdb, <a href="#id2917593">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>unix charset, <a href="#id2935930">Samba and charsets</a>, <a href="#id2936088">Japanese charsets</a></dt><dt>use client driver, <a href="#id2895722">Parameters Recommended for Use</a>, <a href="#id2897186">The [global] Section</a></dt><dt>user, <a href="#id2867883">Share Level Security</a>, <a href="#id2940722">The tests</a></dt><dt>User Manager, <a href="#samba-trusted-domain">Samba as the Trusted Domain</a>, <a href="#id2894704">Samba as the Trusting Domain</a></dt><dt>useradd, <a href="#id2873290">Manual Creation of Machine Trust Accounts</a></dt><dt>username, <a href="#id2887541">User and Group Based Controls</a></dt><dt>username level, <a href="#id2868660">Password checking</a></dt><dt>username map, <a href="#id2873896">Windows 200x XP Professional</a></dt></dl></div><div class="indexdiv"><h3>V</h3><dl><dt>valid users, <a href="#id2887541">User and Group Based Controls</a>, <a href="#id2940722">The tests</a></dt><dt>veto files, <a href="#id2888342">Miscellaneous Controls</a></dt><dt>vfs objects, <a href="#id2922671">Discussion</a></dt><dt>vipw, <a href="#id2873290">Manual Creation of Machine Trust Accounts</a></dt></dl></div><div class="indexdiv"><h3>W</h3><dl><dt>winbind separator, <a href="#id2924992">Start up the winbindd daemon and test it!</a></dt><dt>WINS, <a href="#id2876490">What is Browsing?</a>, <a href="#id2876818">NetBIOS over TCP/IP</a>, <a href="#id2935393">WINS Lookup</a></dt><dt>wins hook, <a href="#id2876490">What is Browsing?</a></dt><dt>wins proxy, <a href="#id2876490">What is Browsing?</a></dt><dt>wins server, <a href="#id2876490">What is Browsing?</a>, <a href="#id2878786">WINS - The Windows Internetworking Name Server</a>, <a href="#id2878975">Setting up a WINS server</a></dt><dt>wins support, <a href="#id2876490">What is Browsing?</a>, <a href="#id2878786">WINS - The Windows Internetworking Name Server</a>, <a href="#id2878975">Setting up a WINS server</a></dt><dt>workgroup, <a href="#id2871174">Security Mode and Master Browsers</a>, <a href="#id2874094">Joining an NT4 type Domain with Samba-3</a>, <a href="#id2879656">Browsing support in Samba</a></dt><dt>write list, <a href="#id2887541">User and Group Based Controls</a>, <a href="#id2900227">Parameters in the [print$] Section</a></dt><dt>write raw, <a href="#id2947043">Write raw</a></dt><dt>writeable, <a href="#id2897717">The [printers] Section</a>, <a href="#id2898177">Any [my_printer_name] Section</a></dt><dt>WYSIWYG, <a href="#id2907968">Windows Drivers, GDI and EMF</a></dt></dl></div><div class="indexdiv"><h3>X</h3><dl><dt>X Window System, <a href="#id2908120">UNIX Printfile Conversion and GUI Basics</a></dt><dt>xinetd, <a href="#id2944727">Starting from inetd.conf</a> (see inetd)</dt><dt>Xprint, <a href="#id2908120">UNIX Printfile Conversion and GUI Basics</a></dt></dl></div></div></div></div></body></html>
diff --git a/docs/htmldocs/SambaHA.html b/docs/htmldocs/SambaHA.html
index d8614deeb7b..39ab6b91d89 100644
--- a/docs/htmldocs/SambaHA.html
+++ b/docs/htmldocs/SambaHA.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter29.High Availability Options</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="Backup.html" title="Chapter28.Samba Backup Techniques"><link rel="next" href="migration.html" title="PartIV.Migration and Updating"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter29.High Availability Options</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Backup.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="migration.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SambaHA"></a>Chapter29.High Availability Options</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="SambaHA.html#id2999808">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2999808"></a>Note</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter29.High Availability Options</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="Backup.html" title="Chapter28.Samba Backup Techniques"><link rel="next" href="migration.html" title="PartIV.Migration and Updating"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter29.High Availability Options</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Backup.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="migration.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="SambaHA"></a>Chapter29.High Availability Options</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="SambaHA.html#id2953955">Note</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953955"></a>Note</h2></div></div><div></div></div><p>
This chapter did not make it into this release.
It is planned for the published release of this document.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Backup.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="migration.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter28.Samba Backup Techniques</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">PartIV.Migration and Updating</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Backup.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="migration.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter28.Samba Backup Techniques</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">PartIV.Migration and Updating</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/ServerType.html b/docs/htmldocs/ServerType.html
index e624c5ee27b..7b5b7117a68 100644
--- a/docs/htmldocs/ServerType.html
+++ b/docs/htmldocs/ServerType.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter4.Server Types and Security Modes</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="type.html" title="PartII.Server Configuration Basics"><link rel="next" href="samba-pdc.html" title="Chapter5.Domain Control"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter4.Server Types and Security Modes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="type.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="samba-pdc.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ServerType"></a>Chapter4.Server Types and Security Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ServerType.html#id2889453">Features and Benefits</a></dt><dt><a href="ServerType.html#id2889545">Server Types</a></dt><dt><a href="ServerType.html#id2889626">Samba Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2886055">User Level Security</a></dt><dt><a href="ServerType.html#id2886188">Share Level Security</a></dt><dt><a href="ServerType.html#id2887258">Domain Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2887500">ADS Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2887583">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="ServerType.html#id2887808">Seamless Windows Network Integration</a></dt><dt><a href="ServerType.html#id2887985">Common Errors</a></dt><dd><dl><dt><a href="ServerType.html#id2888013">What makes Samba a SERVER?</a></dt><dt><a href="ServerType.html#id2888046">What makes Samba a Domain Controller?</a></dt><dt><a href="ServerType.html#id2888075">What makes Samba a Domain Member?</a></dt><dt><a href="ServerType.html#id2889987">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter4.Server Types and Security Modes</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="type.html" title="PartII.Server Configuration Basics"><link rel="next" href="samba-pdc.html" title="Chapter5.Domain Control"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter4.Server Types and Security Modes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="type.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="samba-pdc.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="ServerType"></a>Chapter4.Server Types and Security Modes</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="ServerType.html#id2884977">Features and Benefits</a></dt><dt><a href="ServerType.html#id2885071">Server Types</a></dt><dt><a href="ServerType.html#id2885157">Samba Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2885276">User Level Security</a></dt><dt><a href="ServerType.html#id2885414">Share Level Security</a></dt><dt><a href="ServerType.html#id2885551">Domain Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2885808">ADS Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2885909">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="ServerType.html#id2886191">Password checking</a></dt><dt><a href="ServerType.html#id2886386">Common Errors</a></dt><dd><dl><dt><a href="ServerType.html#id2886414">What makes Samba a SERVER?</a></dt><dt><a href="ServerType.html#id2886453">What makes Samba a Domain Controller?</a></dt><dt><a href="ServerType.html#id2886490">What makes Samba a Domain Member?</a></dt><dt><a href="ServerType.html#id2886529">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></div><p>
This chapter provides information regarding the types of server that Samba may be
configured to be. A Microsoft network administrator who wishes to migrate to or to
use Samba will want to know what, within a Samba context, terms familiar to MS Windows
@@ -9,10 +8,11 @@ modes function BEFORE we get into the details of how to configure the server its
The chapter provides an overview of the security modes of which Samba is capable
and how these relate to MS Windows servers and clients.
</p><p>
-Firstly we should recognise the question so often asked, &quot;Why would I want to use Samba?&quot;
-So, in those chapters where the answer may be important you will see a section that highlights
-features and benefits. These may be for or against Samba.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889453"></a>Features and Benefits</h2></div></div><div></div></div><p>
+A question often asked is, &quot;Why would I want to use Samba?&quot; Most chapters contain a section
+that highlights features and benefits. We hope that the information provided will help to
+answer this question. Be warned though, we want to be fair and reasonable, so not all
+features are positive towards Samba so the benefit may be on the side of our competition.
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884977"></a>Features and Benefits</h2></div></div><div></div></div><p>
Two men were walking down a dusty road, when one suddenly kicked up a small red stone. It
hurt his toe and lodged in his sandal. He took the stone out and cursed it with a passion
and fury fitting his anguish. The other looked at the stone and said, that is a garnet - I
@@ -24,7 +24,7 @@ pleasure, but if you are forced upon it and have no time for its secrets then it
a source of discomfort.
</p><p>
Samba started out as a project that sought to provide interoperability for MS Windows 3.x
-clients with a Unix server. It has grown up a lot since its humble beginnings and now provides
+clients with a UNIX server. It has grown up a lot since its humble beginnings and now provides
features and functionality fit for large scale deployment. It also has some warts. In sections
like this one we will tell of both.
</p><p>
@@ -48,14 +48,14 @@ So now, what are the benefits of features mentioned in this chapter?
greater flexibility than MS Windows NT4 and in many cases a
significantly higher utility than Active Directory domains
with MS Windows 200x.
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889545"></a>Server Types</h2></div></div><div></div></div><p>Administrators of Microsoft networks often refer to three
-different type of servers:</p><div class="itemizedlist"><ul type="disc"><li><p>Domain Controller</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Primary Domain Controller</td></tr><tr><td>Backup Domain Controller</td></tr><tr><td>ADS Domain Controller</td></tr></table></li><li><p>Domain Member Server</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Active Directory Member Server</td></tr><tr><td>NT4 Style Domain Member Server</td></tr></table></li><li><p>Stand Alone Server</p></li></ul></div><p>
+ </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885071"></a>Server Types</h2></div></div><div></div></div><p>Administrators of Microsoft networks often refer to three
+different type of servers:</p><div class="itemizedlist"><ul type="disc"><li><p>Domain Controller</p><div class="itemizedlist"><ul type="circle"><li><p>Primary Domain Controller</p></li><li><p>Backup Domain Controller</p></li><li><p>ADS Domain Controller</p></li></ul></div></li><li><p>Domain Member Server</p><div class="itemizedlist"><ul type="circle"><li><p>Active Directory Domain Server</p></li><li><p>NT4 Style Domain Domain Server</p></li></ul></div></li><li><p>Stand Alone Server</p></li></ul></div><p>
The chapters covering Domain Control, Backup Domain Control and Domain Membership provide
-pertinent information regarding Samba-3 configuration for each of these server roles.
+pertinent information regarding Samba configuration for each of these server roles.
The reader is strongly encouraged to become intimately familiar with the information
presented.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889626"></a>Samba Security Modes</h2></div></div><div></div></div><p>
-In this section the function and purpose of Samba's <i class="parameter"><tt>security</tt></i>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885157"></a>Samba Security Modes</h2></div></div><div></div></div><p>
+In this section the function and purpose of Samba's <a class="indexterm" name="id2885168"></a><i class="parameter"><tt>security</tt></i>
modes are described. An accurate understanding of how Samba implements each security
mode as well as how to configure MS Windows clients for each mode will significantly
reduce user complaints and administrator heartache.
@@ -70,7 +70,7 @@ ways that allow the security levels to be implemented. In actual fact, Samba imp
<span class="emphasis"><em>ADS</em></span>, and <span class="emphasis"><em>SERVER</em></span>
modes. They are documented in this chapter.
</p><p>
-A SMB server tells the client at startup what <i class="parameter"><tt>security level</tt></i>
+ A SMB server tells the client at startup what <span class="emphasis"><em>security level</em></span>
it is running. There are two options: <span class="emphasis"><em>share level</em></span> and
<span class="emphasis"><em>user level</em></span>. Which of these two the client receives affects
the way the client then tries to authenticate itself. It does not directly affect
@@ -78,8 +78,8 @@ the way the client then tries to authenticate itself. It does not directly affec
but it fits in with the client/server approach of SMB. In SMB everything is initiated
and controlled by the client, and the server can only tell the client what is
available and whether an action is allowed.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886055"></a>User Level Security</h3></div></div><div></div></div><p>
-We will describe <i class="parameter"><tt>user level</tt></i> security first, as it's simpler.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885276"></a>User Level Security</h3></div></div><div></div></div><p>
+We will describe <span class="emphasis"><em>user level</em></span> security first, as it's simpler.
In <span class="emphasis"><em>user level</em></span> security, the client will send a
<span class="emphasis"><em>session setup</em></span> command directly after the protocol negotiation.
This contains a username and password. The server can either accept or reject that
@@ -96,13 +96,11 @@ It is also possible for a client to send multiple <span class="emphasis"><em>ses
requests. When the server responds, it gives the client a <span class="emphasis"><em>uid</em></span> to use
as an authentication tag for that username/password. The client can maintain multiple
authentication contexts in this way (WinDD is an example of an application that does this).
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886149"></a>Example Configuration</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885368"></a>Example Configuration</h4></div></div><div></div></div><p>
The <tt class="filename">smb.conf</tt> parameter that sets <span class="emphasis"><em>User Level Security</em></span> is:
-</p><pre class="programlisting">
- security = user
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security = user</tt></i></td></tr></table><p>
This is the default setting since samba-2.2.x.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886188"></a>Share Level Security</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885414"></a>Share Level Security</h3></div></div><div></div></div><p>
Ok, now for share level security. In share level security, the client authenticates
itself separately for each share. It will send a password along with each
<span class="emphasis"><em>tree connection</em></span> (share mount). It does not explicitly send a
@@ -122,104 +120,92 @@ level security. They normally send a valid username but no password. Samba recor
this username in a list of <span class="emphasis"><em>possible usernames</em></span>. When the client
then does a <span class="emphasis"><em>tree connection</em></span> it also adds to this list the name
of the share they try to connect to (useful for home directories) and any users
-listed in the <i class="parameter"><tt>user =</tt></i> <tt class="filename">smb.conf</tt> line. The password is then checked
+listed in the <a class="indexterm" name="id2885473"></a><i class="parameter"><tt>user</tt></i> <tt class="filename">smb.conf</tt> line. The password is then checked
in turn against these <span class="emphasis"><em>possible usernames</em></span>. If a match is found
then the client is authenticated as that user.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886268"></a>Example Configuration</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885502"></a>Example Configuration</h4></div></div><div></div></div><p>
The <tt class="filename">smb.conf</tt> parameter that sets <span class="emphasis"><em>Share Level Security</em></span> is:
-</p><pre class="programlisting">
- security = share
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security = share</tt></i></td></tr></table><p>
Please note that there are reports that recent MS Windows clients do not like to work
with share mode security servers. You are strongly discouraged from using share level security.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887258"></a>Domain Security Mode (User Level Security)</h3></div></div><div></div></div><p>
-When Samba is operating in <i class="parameter"><tt>security = domain</tt></i> mode,
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885551"></a>Domain Security Mode (User Level Security)</h3></div></div><div></div></div><p>
+When Samba is operating in <a class="indexterm" name="id2885562"></a><i class="parameter"><tt>security</tt></i> = domain mode,
the Samba server has a domain security trust account (a machine account) and will cause
all authentication requests to be passed through to the domain controllers.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887280"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885582"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em>
Samba as a Domain Member Server
</em></span></p><p>
This method involves addition of the following parameters in the <tt class="filename">smb.conf</tt> file:
-</p><pre class="programlisting">
- security = domain
- workgroup = &quot;name_of_NT_domain&quot;
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security = domain</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr></table><p>
In order for this method to work, the Samba server needs to join the MS Windows NT
security domain. This is done as follows:
</p><div class="procedure"><ol type="1"><li><p>On the MS Windows NT domain controller, using
the Server Manager, add a machine account for the Samba server.
- </p></li><li><p>Next, on the Unix/Linux system execute:</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j DOMAIN_NAME -r PDC_NAME</tt></b> (samba-2.x)</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>net join -U administrator%password</tt></b> (samba-3)</p></li></ol></div><div xmlns:ns4="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns4:p>
-As of Samba-2.2.4 the Samba 2.2.x series can auto-join a Windows NT4 style Domain just
-by executing:
-</ns4:p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j <i class="replaceable"><tt>DOMAIN_NAME</tt></i> -r <i class="replaceable"><tt>PDC_NAME</tt></i> -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b>
-</pre><ns4:p>
+ </p></li><li><p>Next, on the UNIX/Linux system execute:</p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>net rpc join -U administrator%password</tt></b></pre></li></ol></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+Samba-2.2.4 and later can auto-join a Windows NT4 style Domain just by executing:
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -j <i class="replaceable"><tt>DOMAIN_NAME</tt></i> -r <i class="replaceable"><tt>PDC_NAME</tt></i> \
+ -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b>
+</pre><p>
-As of Samba-3 the same can be done by executing:
-</ns4:p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>net join -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b>
-</pre><ns4:p>
-It is not necessary with Samba-3 to specify the <i class="replaceable"><tt>DOMAIN_NAME</tt></i> or the <i class="replaceable"><tt>PDC_NAME</tt></i> as it
-figures this out from the <tt class="filename">smb.conf</tt> file settings.
-</ns4:p></div><p>
-Use of this mode of authentication does require there to be a standard Unix account
+Samba-3 can do the same by executing:
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>net rpc join -U Administrator%<i class="replaceable"><tt>password</tt></i></tt></b>
+</pre><p>
+It is not necessary with Samba-3 to specify the <i class="replaceable"><tt>DOMAIN_NAME</tt></i> or the
+<i class="replaceable"><tt>PDC_NAME</tt></i> as it figures this out from the <tt class="filename">smb.conf</tt> file settings.
+</p></div><p>
+Use of this mode of authentication does require there to be a standard UNIX account
for each user in order to assign a UID once the account has been authenticated by
the remote Windows DC. This account can be blocked to prevent logons by clients other than
MS Windows through means such as setting an invalid shell in the
<tt class="filename">/etc/passwd</tt> entry.
</p><p>
An alternative to assigning UIDs to Windows users on a Samba member server is
-presented in the <a href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind">Winbind Overview</a> chapter
-in this HOWTO collection.
+presented in <a href="winbind.html" title="Chapter21.Winbind: Use of Domain Accounts">the chapter about winbind</a>.
</p><p>
-For more information of being a domain member, see the <a href="domain-member.html" title="Chapter7.Domain Membership">Domain
-Member</a> section of this Howto.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887500"></a>ADS Security Mode (User Level Security)</h3></div></div><div></div></div><p>
+ For more information of being a domain member, see <a href="domain-member.html" title="Chapter7.Domain Membership">the chapter about domain membership</a>.
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885808"></a>ADS Security Mode (User Level Security)</h3></div></div><div></div></div><p>
Both Samba 2.2 and 3.0 can join an Active Directory domain. This is
-possible even if the domain is run in native mode. Active Directory in
-native mode perfectly allows NT4-style domain members, contrary to
+possible if the domain is run in native mode. Active Directory in
+native mode perfectly allows NT4-style domain members. This is contrary to
popular belief. The only thing that Active Directory in native mode
prohibits is Backup Domain Controllers running NT4.
</p><p>
-If you are running Active Directory starting with Samba 3.0 you can
-however join as a native AD member. Why would you want to do that?
+If you are using Active Directory, starting with Samba-3 you can
+join as a native AD member. Why would you want to do that?
Your security policy might prohibit the use of NT-compatible
authentication protocols. All your machines are running Windows 2000
-and above and all use full Kerberos. In this case Samba as a NT4-style
+and above and all use Kerberos. In this case Samba as a NT4-style
domain would still require NT-compatible authentication data. Samba in
-AD-member mode can accept Kerberos.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887530"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting">
- realm = your.kerberos.REALM
- security = ADS
-</pre><p>
- The following parameter may be required:
-</p><pre class="programlisting">
- ads server = your.kerberos.server
-</pre><p>
-Please refer to the <a href="domain-member.html" title="Chapter7.Domain Membership">Domain Membership</a> and <a href="domain-member.html#ads-member" title="Samba ADS Domain Membership">Active Directory
-Membership</a> sections for more information regarding this configuration option.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887583"></a>Server Security (User Level Security)</h3></div></div><div></div></div><p>
+AD-member mode can accept Kerberos tickets.
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2885838"></a>Example Configuration</h4></div></div><div></div></div><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>realm = your.kerberos.REALM</tt></i></td></tr><tr><td><i class="parameter"><tt>security = ADS</tt></i></td></tr></table><p>
+The following parameter may be required:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>ads server = your.kerberos.server</tt></i></td></tr></table><p>
+Please refer to <a href="domain-member.html" title="Chapter7.Domain Membership">the chapter on domain membership</a>
+for more information regarding this configuration option.
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885909"></a>Server Security (User Level Security)</h3></div></div><div></div></div><p>
Server security mode is a left over from the time when Samba was not capable of acting
as a domain member server. It is highly recommended NOT to use this feature. Server
security mode has many draw backs. The draw backs include:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Potential Account Lockout on MS Windows NT4/200x password servers</td></tr><tr><td>Lack of assurance that the password server is the one specified</td></tr><tr><td>Does not work with Winbind, particularly needed when storing profiles remotely</td></tr><tr><td>This mode may open connections to the password server, and keep them open for extended periods.</td></tr><tr><td>Security on the Samba server breaks badly when the remote password server suddenly shuts down</td></tr><tr><td>With this mode there is NO security account in the domain that the password server belongs to for the Samba server.</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Potential Account Lockout on MS Windows NT4/200x password servers</p></li><li><p>Lack of assurance that the password server is the one specified</p></li><li><p>Does not work with Winbind, particularly needed when storing profiles remotely</p></li><li><p>This mode may open connections to the password server, and keep them open for extended periods.</p></li><li><p>Security on the Samba server breaks badly when the remote password server suddenly shuts down</p></li><li><p>With this mode there is NO security account in the domain that the password server belongs to for the Samba server.</p></li></ul></div><p>
In server security mode the Samba server reports to the client that it is in user level
security. The client then does a <span class="emphasis"><em>session setup</em></span> as described earlier.
The Samba server takes the username/password that the client sends and attempts to login to the
-<i class="parameter"><tt>password server</tt></i> by sending exactly the same username/password that
+<a class="indexterm" name="id2885982"></a><i class="parameter"><tt>password server</tt></i> by sending exactly the same username/password that
it got from the client. If that server is in user level security and accepts the password,
then Samba accepts the clients connection. This allows the Samba server to use another SMB
-server as the <i class="parameter"><tt>password server</tt></i>.
+server as the <a class="indexterm" name="id2886002"></a><i class="parameter"><tt>password server</tt></i>.
</p><p>
You should also note that at the very start of all this, where the server tells the client
what security level it is in, it also tells the client if it supports encryption. If it
does then it supplies the client with a random cryptkey. The client will then send all
passwords in encrypted form. Samba supports this type of encryption by default.
</p><p>
-The parameter <i class="parameter"><tt>security = server</tt></i> means that Samba reports to clients that
+The parameter <a class="indexterm" name="id2886030"></a><i class="parameter"><tt>security</tt></i> = server means that Samba reports to clients that
it is running in <span class="emphasis"><em>user mode</em></span> but actually passes off all authentication
requests to another <span class="emphasis"><em>user mode</em></span> server. This requires an additional
-parameter <i class="parameter"><tt>password server</tt></i> that points to the real authentication server.
+parameter <a class="indexterm" name="id2886056"></a><i class="parameter"><tt>password server</tt></i> that points to the real authentication server.
That real authentication server can be another Samba server or can be a Windows NT server,
the later natively capable of encrypted password support.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
@@ -230,15 +216,11 @@ lookups because the choice of the target authentication server is arbitrary and
be determined from a domain name. In essence, a Samba server that is in
<span class="emphasis"><em>server security mode</em></span> is operating in what used to be known as
workgroup mode.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2887740"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2886099"></a>Example Configuration</h4></div></div><div></div></div><p><span class="emphasis"><em>
Using MS Windows NT as an authentication server
</em></span></p><p>
This method involves the additions of the following parameters in the <tt class="filename">smb.conf</tt> file:
-</p><pre class="programlisting">
- encrypt passwords = Yes
- security = server
- password server = &quot;NetBIOS_name_of_a_DC&quot;
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>encrypt passwords = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>security = server</tt></i></td></tr><tr><td><i class="parameter"><tt>password server = &quot;NetBIOS_name_of_a_DC&quot;</tt></i></td></tr></table><p>
There are two ways of identifying whether or not a username and password pair was valid.
One uses the reply information provided as part of the authentication messaging
process, the other uses just an error code.
@@ -249,9 +231,9 @@ server fails to reject the username and password pair then an alternative mode o
identification of validation is used. Where a site uses password lock out after a
certain number of failed authentication attempts this will result in user lockouts.
</p><p>
-Use of this mode of authentication does require there to be a standard Unix account
+Use of this mode of authentication does require there to be a standard UNIX account
for the user, though this account can be blocked to prevent logons by non-SMB/CIFS clients.
-</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887808"></a>Seamless Windows Network Integration</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886191"></a>Password checking</h2></div></div><div></div></div><p>
MS Windows clients may use encrypted passwords as part of a challenge/response
authentication model (a.k.a. NTLMv1 and NTLMv2) or alone, or clear text strings for simple
password based authentication. It should be realized that with the SMB protocol,
@@ -288,21 +270,18 @@ is definitely not a good idea to re-enable plain text password support in such c
The following parameters can be used to work around the issue of Windows 9x clients
upper casing usernames and password before transmitting them to the SMB server
when using clear text authentication.
-</p><pre class="programlisting">
- <a href="smb.conf.5.html#PASSWORDLEVEL" target="_top">password level</a> = <i class="replaceable"><tt>integer</tt></i>
- <a href="smb.conf.5.html#USERNAMELEVEL" target="_top">username level</a> = <i class="replaceable"><tt>integer</tt></i>
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>password level = integer</tt></i></td></tr><tr><td><i class="parameter"><tt>username level = integer</tt></i></td></tr></table><p>
By default Samba will lower case the username before attempting to lookup the user
in the database of local system accounts. Because UNIX usernames conventionally
-only contain lower-case characters, the <i class="parameter"><tt>username level</tt></i> parameter
+only contain lower-case character, the <a class="indexterm" name="id2886312"></a><i class="parameter"><tt>username level</tt></i> parameter
is rarely needed.
</p><p>
However, passwords on UNIX systems often make use of mixed-case characters.
This means that in order for a user on a Windows 9x client to connect to a Samba
-server using clear text authentication, the <i class="parameter"><tt>password level</tt></i>
+server using clear text authentication, the <a class="indexterm" name="id2886335"></a><i class="parameter"><tt>password level</tt></i>
must be set to the maximum number of upper case letters which <span class="emphasis"><em>could</em></span>
-appear in a password. Note that the server OS uses the traditional DES version
-of crypt(), a <i class="parameter"><tt>password level</tt></i> of 8 will result in case
+appear in a password. Note that if the server OS uses the traditional DES version
+of crypt(), a <a class="indexterm" name="id2886356"></a><i class="parameter"><tt>password level</tt></i> of 8 will result in case
insensitive passwords as seen from Windows users. This will also result in longer
login times as Samba has to compute the permutations of the password string and
try them one by one until a match is located (or all combinations fail).
@@ -310,7 +289,7 @@ try them one by one until a match is located (or all combinations fail).
The best option to adopt is to enable support for encrypted passwords wherever
Samba is used. Most attempts to apply the registry change to re-enable plain text
passwords will eventually lead to user complaints and unhappiness.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887985"></a>Common Errors</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886386"></a>Common Errors</h2></div></div><div></div></div><p>
We all make mistakes. It is Ok to make mistakes, so long as they are made in the right places
and at the right time. A mistake that causes lost productivity is seldom tolerated. A mistake
made in a developmental test lab is expected.
@@ -320,25 +299,26 @@ on the Samba mailing lists. Many of these are avoidable by doing you homework be
a Samba implementation. Some are the result of misunderstanding of the English language. The
English language has many turns of phrase that are potentially vague and may be highly confusing
to those for whom English is not their native tongue.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888013"></a>What makes Samba a SERVER?</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886414"></a>What makes Samba a SERVER?</h3></div></div><div></div></div><p>
To some the nature of the Samba <span class="emphasis"><em>security</em></span> mode is very obvious, but entirely
-wrong all the same. It is assumed that <i class="parameter"><tt>security = server</tt></i> means that Samba
+wrong all the same. It is assumed that <a class="indexterm" name="id2886429"></a><i class="parameter"><tt>security</tt></i> = server means that Samba
will act as a server. Not so! See above - this setting means that Samba will <span class="emphasis"><em>try</em></span>
to use another SMB server as its source of user authentication alone.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888046"></a>What makes Samba a Domain Controller?</h3></div></div><div></div></div><p>
-The <tt class="filename">smb.conf</tt> parameter <i class="parameter"><tt>security = domain</tt></i> does NOT really make Samba behave
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886453"></a>What makes Samba a Domain Controller?</h3></div></div><div></div></div><p>
+The <tt class="filename">smb.conf</tt> parameter <a class="indexterm" name="id2886471"></a><i class="parameter"><tt>security</tt></i> = domain does NOT really make Samba behave
as a Domain Controller! This setting means we want Samba to be a domain member!
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888075"></a>What makes Samba a Domain Member?</h3></div></div><div></div></div><p>
-Guess! So many others do. But whatever you do, do NOT think that <i class="parameter"><tt>security = user</tt></i>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886490"></a>What makes Samba a Domain Member?</h3></div></div><div></div></div><p>
+Guess! So many others do. But whatever you do, do NOT think that <a class="indexterm" name="id2886500"></a><i class="parameter"><tt>security</tt></i> = user
makes Samba act as a domain member. Read the manufacturers manual before the warranty expires! See
-the <a href="domain-member.html" title="Chapter7.Domain Membership">Domain Member</a> section of this Howto for more information.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889987"></a>Constantly Losing Connections to Password Server</h3></div></div><div></div></div><p>
+<a href="domain-member.html" title="Chapter7.Domain Membership">the chapter about domain membership</a> for more information.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2886529"></a>Constantly Losing Connections to Password Server</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">
Why does server_validate() simply give up rather than re-establishing its connection to the
password server? Though I am not fluent in the SMB protocol, perhaps the cluster server
process passes along to its client workstation the session key it receives from the password
server, which means the password hashes submitted by the client would not work on a subsequent
-connection, whose session key would be different. So server_validate() must give up.
+connection, whose session key would be different. So server_validate() must give up.</span>&#8221;
</p><p>
-Indeed. That's why security = server is at best a nasty hack. Please use security = domain.
-<i class="parameter"><tt>security = server</tt></i> mode is also known as pass-through authentication.
-</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="type.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="samba-pdc.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartII.Server Configuration Basics</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter5.Domain Control</td></tr></table></div></body></html>
+ Indeed. That's why <a class="indexterm" name="id2886557"></a><i class="parameter"><tt>security</tt></i> = server is at best a nasty hack. Please use <a class="indexterm" name="id2886571"></a><i class="parameter"><tt>security</tt></i> = domain.
+<a class="indexterm" name="id2886584"></a><i class="parameter"><tt>security</tt></i> = server mode is also known as pass-through authentication.
+</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="type.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="samba-pdc.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartII.Server Configuration Basics</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter5.Domain Control</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/StandAloneServer.html b/docs/htmldocs/StandAloneServer.html
index 272df7a27b5..f85fdfe3fce 100644
--- a/docs/htmldocs/StandAloneServer.html
+++ b/docs/htmldocs/StandAloneServer.html
@@ -1,10 +1,9 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter8.Stand-Alone Servers</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="domain-member.html" title="Chapter7.Domain Membership"><link rel="next" href="ClientConfig.html" title="Chapter9.MS Windows Network Configuration Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter8.Stand-Alone Servers</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="domain-member.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="ClientConfig.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="StandAloneServer"></a>Chapter8.Stand-Alone Servers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="StandAloneServer.html#id2901965">Features and Benefits</a></dt><dt><a href="StandAloneServer.html#id2902003">Background</a></dt><dt><a href="StandAloneServer.html#id2902071">Example Configuration</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2900673">Reference Documentation Server</a></dt><dt><a href="StandAloneServer.html#id2900721">Central Print Serving</a></dt></dl></dd><dt><a href="StandAloneServer.html#id2900933">Common Errors</a></dt></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter8.Stand-Alone Servers</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="domain-member.html" title="Chapter7.Domain Membership"><link rel="next" href="ClientConfig.html" title="Chapter9.MS Windows Network Configuration Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter8.Stand-Alone Servers</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="domain-member.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="ClientConfig.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="StandAloneServer"></a>Chapter8.Stand-Alone Servers</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="StandAloneServer.html#id2893079">Features and Benefits</a></dt><dt><a href="StandAloneServer.html#id2893117">Background</a></dt><dt><a href="StandAloneServer.html#id2893191">Example Configuration</a></dt><dd><dl><dt><a href="StandAloneServer.html#RefDocServer">Reference Documentation Server</a></dt><dt><a href="StandAloneServer.html#SimplePrintServer">Central Print Serving</a></dt></dl></dd><dt><a href="StandAloneServer.html#id2893714">Common Errors</a></dt></dl></div><p>
Stand-Alone servers are independent of Domain Controllers on the network.
They are NOT domain members and function more like workgroup servers. In many
cases a stand-alone server is configured with a minimum of security control
with the intent that all data served will be readily accessible to all users.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2901965"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893079"></a>Features and Benefits</h2></div></div><div></div></div><p>
Stand-Alone servers can be as secure or as insecure as needs dictate. They can
have simple or complex configurations. Above all, despite the hoopla about
Domain security they remain a very common installation.
@@ -21,7 +20,7 @@ that are queued off a single central server. Everyone needs to be able to print
to the printers, there is no need to affect any access controls and no files will
be served from the print server. Again a share mode stand-alone server makes
a great solution.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902003"></a>Background</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893117"></a>Background</h2></div></div><div></div></div><p>
The term <span class="emphasis"><em>stand-alone server</em></span> means that the server
will provide local authentication and access control for all resources
that are available from it. In general this means that there will be a
@@ -43,50 +42,37 @@ local or on a remote server, even if from the Samba protocol perspective
the Samba server is NOT a member of a domain security context.
</p><p>
Through the use of PAM (Pluggable Authentication Modules) and nsswitch
-(the name service switcher) the source of authentication may reside on
+(the name service switcher, which maintains the unix user database) the source of authentication may reside on
another server. We would be inclined to call this the authentication server.
-This means that the Samba server may use the local Unix/Linux system password database
+This means that the Samba server may use the local UNIX/Linux system password database
(<tt class="filename">/etc/passwd</tt> or <tt class="filename">/etc/shadow</tt>), may use a
local smbpasswd file, or may use
an LDAP back end, or even via PAM and Winbind another CIFS/SMB server
for authentication.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902071"></a>Example Configuration</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893191"></a>Example Configuration</h2></div></div><div></div></div><p>
The following examples are designed to inspire simplicity. It is too easy to
attempt a high level of creativity and to introduce too much complexity in
server and network design.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900673"></a>Reference Documentation Server</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="RefDocServer"></a>Reference Documentation Server</h3></div></div><div></div></div><p>
Configuration of a read-only data server that EVERYONE can access is very simple.
Here is the smb.conf file that will do this. Assume that all the reference documents
are stored in the directory /export, that the documents are owned by a user other than
nobody. No home directories are shared, that are no users in the <tt class="filename">/etc/passwd</tt>
-Unix system database. This is a very simple system to administer.
-</p><pre class="programlisting">
- # Global parameters
- [global]
- workgroup = MYGROUP
- netbios name = REFDOCS
- security = SHARE
- passdb backend = guest
- wins server = 192.168.1.1
-
- [data]
- comment = Data
- path = /export
- guest only = Yes
-</pre><p>
+UNIX system database. This is a very simple system to administer.
+</p><div class="example"><a name="id2893237"></a><p class="title"><b>Example8.1.smb.conf for Reference Documentation Server</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>netbios name = GANDALF</tt></i></td></tr><tr><td><i class="parameter"><tt>security = SHARE</tt></i></td></tr><tr><td><i class="parameter"><tt>passdb backend = guest</tt></i></td></tr><tr><td><i class="parameter"><tt>wins server = 192.168.1.1</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[data]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Data</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /export</tt></i></td></tr><tr><td><i class="parameter"><tt>guest only = Yes</tt></i></td></tr></table></div><p>
In the above example the machine name is set to REFDOCS, the workgroup is set to the name
of the local workgroup so that the machine will appear in with systems users are familiar
with. The only password backend required is the &quot;guest&quot; backend so as to allow default
unprivileged account names to be used. Given that there is a WINS server on this network
we do use it.
-</p></div><div xmlns:ns13="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900721"></a>Central Print Serving</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="SimplePrintServer"></a>Central Print Serving</h3></div></div><div></div></div><p>
Configuration of a simple print server is very simple if you have all the right tools
on your system.
</p><div class="orderedlist"><p class="title"><b> Assumptions:</b></p><ol type="1"><li><p>
The print server must require no administration
</p></li><li><p>
The print spooling and processing system on our print server will be CUPS.
- (Please refer to the <a href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0">CUPS Printing</a> chapter for more information).
+ (Please refer to <a href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0">the chapter about CUPS</a> for more information).
</p></li><li><p>
All printers that the print server will service will be network
printers. They will be correctly configured, by the administrator,
@@ -99,46 +85,28 @@ In this example our print server will spool all incoming print jobs to
<tt class="filename">/var/spool/samba</tt> until the job is ready to be submitted by
Samba to the CUPS print processor. Since all incoming connections will be as
the anonymous (guest) user, two things will be required:
-</p><div class="itemizedlist"><p class="title"><b>Enabling Anonymous Printing</b></p><ul type="disc"><li xmlns:ns11=""><ns11:p>
- The Unix/Linux system must have a <b class="command">guest</b> account.
+</p><div class="itemizedlist"><p class="title"><b>Enabling Anonymous Printing</b></p><ul type="disc"><li><p>
+ The UNIX/Linux system must have a <b class="command">guest</b> account.
The default for this is usually the account <b class="command">nobody</b>.
To find the correct name to use for your version of Samba do the
following:
- </ns11:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">$ </tt><b class="userinput"><tt>testparm -s -v | grep &quot;guest account&quot;</tt></b>
- </pre><ns11:p>
+</pre><p>
Then make sure that this account exists in your system password
database (<tt class="filename">/etc/passwd</tt>).
- </ns11:p></li><li xmlns:ns12=""><ns12:p>
+ </p></li><li><p>
The directory into which Samba will spool the file must have write
access for the guest account. The following commands will ensure that
this directory is available for use:
- </ns12:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>mkdir /var/spool/samba</tt></b>
<tt class="prompt">root# </tt><b class="userinput"><tt>chown nobody.nobody /var/spool/samba</tt></b>
<tt class="prompt">root# </tt><b class="userinput"><tt>chmod a+rwt /var/spool/samba</tt></b>
- </pre><ns12:p>
- </ns12:p></li></ul></div><ns13:p>
-</ns13:p><pre class="programlisting">
- # Global parameters
- [global]
- workgroup = MYGROUP
- netbios name = PTRSVR1
- security = SHARE
- passdb backend = guest
- wins server = 192.168.1.1
-
- [printers]
- comment = All Printers
- path = /var/spool/samba
- printer admin = root
- guest ok = Yes
- printable = Yes
- printing = cups
- use client driver = Yes
- browseable = No
-</pre><ns13:p>
-</ns13:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2900933"></a>Common Errors</h2></div></div><div></div></div><p>
+</pre><p>
+ </p></li></ul></div><p>
+ </p><div class="example"><a name="id2893557"></a><p class="title"><b>Example8.2.smb.conf for anonymous printing</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td># Global parameters</td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>netbios name = GANDALF</tt></i></td></tr><tr><td><i class="parameter"><tt>security = SHARE</tt></i></td></tr><tr><td><i class="parameter"><tt>passdb backend = guest</tt></i></td></tr><tr><td><i class="parameter"><tt>wins server = noldor</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = cups</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap name = cups</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = All Printers</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = root</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>use client driver = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = No</tt></i></td></tr></table></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893714"></a>Common Errors</h2></div></div><div></div></div><p>
The greatest mistake so often made is to make a network configuration too complex.
It pays to use the simplest solution that will meet the needs of the moment.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="domain-member.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ClientConfig.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter7.Domain Membership</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter9.MS Windows Network Configuration Guide</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="domain-member.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ClientConfig.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter7.Domain Membership</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter9.MS Windows Network Configuration Guide</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/VFS.html b/docs/htmldocs/VFS.html
index 0b22d2e1fb2..ffa767e6c90 100644
--- a/docs/htmldocs/VFS.html
+++ b/docs/htmldocs/VFS.html
@@ -1,78 +1,76 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter20.Stackable VFS modules</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0"><link rel="next" href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter20.Stackable VFS modules</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="CUPS-printing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="winbind.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="VFS"></a>Chapter20.Stackable VFS modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Simo</span> <span class="surname">Sorce</span></h3><span class="contrib">original vfs_skel README</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><span class="contrib">original vfs_netatalk docs</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><span class="contrib">Update for multiple modules</span></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="VFS.html#id2976111">Features and Benefits</a></dt><dt><a href="VFS.html#id2976129">Discussion</a></dt><dt><a href="VFS.html#id2974805">Included modules</a></dt><dd><dl><dt><a href="VFS.html#id2974812">audit</a></dt><dt><a href="VFS.html#id2974851">extd_audit</a></dt><dt><a href="VFS.html#id2974972">fake_perms</a></dt><dt><a href="VFS.html#id2974992">recycle</a></dt><dt><a href="VFS.html#id2975130">netatalk</a></dt></dl></dd><dt><a href="VFS.html#id2975176">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="VFS.html#id2975198">DatabaseFS</a></dt><dt><a href="VFS.html#id2975253">vscan</a></dt></dl></dd><dt><a href="VFS.html#id2975282">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2976111"></a>Features and Benefits</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter20.Stackable VFS modules</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0"><link rel="next" href="winbind.html" title="Chapter21.Winbind: Use of Domain Accounts"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter20.Stackable VFS modules</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="CUPS-printing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="winbind.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="VFS"></a>Chapter20.Stackable VFS modules</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Simo</span> <span class="surname">Sorce</span></h3><span class="contrib">original vfs_skel README</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Alexander</span> <span class="surname">Bokovoy</span></h3><span class="contrib">original vfs_netatalk docs</span></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stefan</span> <span class="surname">Metzmacher</span></h3><span class="contrib">Update for multiple modules</span></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="VFS.html#id2940177">Features and Benefits</a></dt><dt><a href="VFS.html#id2940195">Discussion</a></dt><dt><a href="VFS.html#id2940424">Included modules</a></dt><dd><dl><dt><a href="VFS.html#id2940432">audit</a></dt><dt><a href="VFS.html#id2940474">extd_audit</a></dt><dt><a href="VFS.html#id2940604">fake_perms</a></dt><dt><a href="VFS.html#id2940622">recycle</a></dt><dt><a href="VFS.html#id2940798">netatalk</a></dt></dl></dd><dt><a href="VFS.html#id2940843">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="VFS.html#id2940865">DatabaseFS</a></dt><dt><a href="VFS.html#id2940920">vscan</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2940177"></a>Features and Benefits</h2></div></div><div></div></div><p>
Since Samba-3, there is support for stackable VFS(Virtual File System) modules.
Samba passes each request to access the unix file system thru the loaded VFS modules.
This chapter covers all the modules that come with the samba source and references to
some external modules.
-</p></div><div xmlns:ns70="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2976129"></a>Discussion</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2940195"></a>Discussion</h2></div></div><div></div></div><p>
If not supplied with your platform distribution binary Samba package you may have problems
to compile these modules, as shared libraries are compiled and linked in different ways
on different systems. They currently have been tested against GNU/Linux and IRIX.
-</p><ns70:p>
+</p><p>
To use the VFS modules, create a share similar to the one below. The
-important parameter is the <b class="command">vfs objects</b> parameter where
+important parameter is the <a class="indexterm" name="id2940216"></a><i class="parameter"><tt>vfs objects</tt></i> parameter where
you can list one or more VFS modules by name. For example, to log all access
to files and put deleted files in a recycle bin:
-</ns70:p><pre class="programlisting">
-[audit]
- comment = Audited /data directory
- path = /data
- vfs objects = audit recycle
- writeable = yes
- browseable = yes
-</pre><ns70:p>
-</ns70:p><p>
+</p><div class="example"><a name="id2940233"></a><p class="title"><b>Example20.1.smb.conf with VFS modules</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[audit]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Audited /data directory</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /data</tt></i></td></tr><tr><td><i class="parameter"><tt>vfs objects = audit recycle</tt></i></td></tr><tr><td><i class="parameter"><tt>writeable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = yes</tt></i></td></tr></table></div><p>
+</p><p>
The modules are used in the order in which they are specified.
</p><p>
Samba will attempt to load modules from the <span class="emphasis"><em>lib</em></span>
directory in the root directory of the samba installation (usually
<tt class="filename">/usr/lib/samba/vfs</tt> or <tt class="filename">/usr/local/samba/lib/vfs
</tt>).
-</p><ns70:p>
+</p><p>
Some modules can be used twice for the same share.
This can be done using a configuration similar to the one below.
-</ns70:p><pre class="programlisting">
-[test]
- comment = VFS TEST
- path = /data
- writeable = yes
- browseable = yes
- vfs objects = example:example1 example example:test
- example1: parameter = 1
- example: parameter = 5
- test: parameter = 7
-</pre><ns70:p>
-</ns70:p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2974805"></a>Included modules</h2></div></div><div></div></div><div xmlns:ns71="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974812"></a>audit</h3></div></div><div></div></div><ns71:p>
+</p><div class="example"><a name="id2940333"></a><p class="title"><b>Example20.2.smb.conf with multiple VFS modules</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[test]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = VFS TEST</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /data</tt></i></td></tr><tr><td><i class="parameter"><tt>writeable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>vfs objects = example:example1 example example:test</tt></i></td></tr><tr><td><i class="parameter"><tt>example1: parameter = 1</tt></i></td></tr><tr><td><i class="parameter"><tt>example: parameter = 5</tt></i></td></tr><tr><td><i class="parameter"><tt>test: parameter = 7</tt></i></td></tr></table></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2940424"></a>Included modules</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940432"></a>audit</h3></div></div><div></div></div><p>
A simple module to audit file access to the syslog
facility. The following operations are logged:
- </ns71:p><table class="simplelist" border="0" summary="Simple list"><tr><td>share</td></tr><tr><td>connect/disconnect</td></tr><tr><td>directory opens/create/remove</td></tr><tr><td>file open/close/rename/unlink/chmod</td></tr></table><ns71:p>
- </ns71:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974851"></a>extd_audit</h3></div></div><div></div></div><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>share</p></li><li><p>connect/disconnect</p></li><li><p>directory opens/create/remove</p></li><li><p>file open/close/rename/unlink/chmod</p></li></ul></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940474"></a>extd_audit</h3></div></div><div></div></div><p>
This module is identical with the <span class="emphasis"><em>audit</em></span> module above except
that it sends audit logs to both syslog as well as the smbd log file/s. The
loglevel for this module is set in the smb.conf file.
</p><p>
The logging information that will be written to the smbd log file is controlled by
- the <i class="parameter"><tt>log level</tt></i> parameter in <tt class="filename">smb.conf</tt>. The
+ the <a class="indexterm" name="id2940498"></a><i class="parameter"><tt>log level</tt></i> parameter in <tt class="filename">smb.conf</tt>. The
following information will be recorded:
- </p><div class="table"><a name="id2974890"></a><p class="title"><b>Table20.1.Extended Auditing Log Information</b></p><table summary="Extended Auditing Log Information" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Log Level</th><th align="center">Log Details - File and Directory Operations</th></tr></thead><tbody><tr><td align="center">0</td><td align="left">Creation / Deletion</td></tr><tr><td align="center">1</td><td align="left">Create / Delete / Rename / Permission Changes</td></tr><tr><td align="center">2</td><td align="left">Create / Delete / Rename / Perm Change / Open / Close</td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974972"></a>fake_perms</h3></div></div><div></div></div><p>
+ </p><div class="table"><a name="id2940521"></a><p class="title"><b>Table20.1.Extended Auditing Log Information</b></p><table summary="Extended Auditing Log Information" border="1"><colgroup><col><col></colgroup><thead><tr><th align="center">Log Level</th><th align="center">Log Details - File and Directory Operations</th></tr></thead><tbody><tr><td align="center">0</td><td align="left">Creation / Deletion</td></tr><tr><td align="center">1</td><td align="left">Create / Delete / Rename / Permission Changes</td></tr><tr><td align="center">2</td><td align="left">Create / Delete / Rename / Perm Change / Open / Close</td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940604"></a>fake_perms</h3></div></div><div></div></div><p>
This module was created to allow Roaming Profile files and directories to be set (on the Samba server
under Unix) as read only. This module will if installed on the Profiles share will report to the client
that the Profile files and directories are writable. This satisfies the client even though the files
will never be overwritten as the client logs out or shuts down.
- </p></div><div xmlns:ns72="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2974992"></a>recycle</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940622"></a>recycle</h3></div></div><div></div></div><p>
A recycle-bin like module. When used any unlink call
will be intercepted and files moved to the recycle
- directory instead of being deleted.
- </p><ns72:p>Supported options:
- </ns72:p><div class="variablelist"><dl><dt><span class="term">recycle:repository</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:keeptree</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:versions</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:touch</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:maxsize</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:exclude_dir</span></dt><dd><p>FIXME</p></dd><dt><span class="term">recycle:noversions</span></dt><dd><p>FIXME</p></dd></dl></div><ns72:p>
- </ns72:p></div><div xmlns:ns73="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975130"></a>netatalk</h3></div></div><div></div></div><p>
+ directory instead of being deleted. This gives the same
+ effect as the &quot;Recycle Bin&quot; on Windows computers.
+ </p><p>Supported options:
+ </p><div class="variablelist"><dl><dt><span class="term">recycle:repository</span></dt><dd><p>Relative path of the directory where deleted files should be moved to</p></dd><dt><span class="term">recycle:keeptree</span></dt><dd><p>Specifies whether the directory structure should
+ be kept or if the files in the directory that is being
+ deleted should be kept seperately in the recycle bin.
+ </p></dd><dt><span class="term">recycle:versions</span></dt><dd><p>If this option is set, two files
+ with the same name that are deleted will both
+ be kept in the recycle bin. Newer deleted versions
+ of a file will be called &quot;Copy #x of <i class="replaceable"><tt>filename</tt></i>&quot;.</p></dd><dt><span class="term">recycle:touch</span></dt><dd><p>Specifies whether a file's access
+ date should be touched when the file is moved to
+ the recycle bin.</p></dd><dt><span class="term">recycle:maxsize</span></dt><dd><p>Files that are larger than the number
+ of bytes specified by this parameter will
+ not be put into the recycle bin.</p></dd><dt><span class="term">recycle:exclude</span></dt><dd><p>List of files that should not
+ be put into the recycle bin when deleted, but deleted
+ in the regular way.</p></dd><dt><span class="term">recycle:exclude_dir</span></dt><dd><p>Contains a list of directories. When files from
+ these directories are deleted, they are not put into the
+ recycle bin, but deleted in the regular way.
+ </p></dd><dt><span class="term">recycle:noversions</span></dt><dd><p>Opposite of <i class="parameter"><tt>recycle:versions</tt></i>. If both options are specified, this one takes precedence.</p></dd></dl></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940798"></a>netatalk</h3></div></div><div></div></div><p>
A netatalk module, that will ease co-existence of samba and
netatalk file sharing services.
- </p><ns73:p>Advantages compared to the old netatalk module:
- </ns73:p><table class="simplelist" border="0" summary="Simple list"><tr><td>it doesn't care about creating of .AppleDouble forks, just keeps them in sync</td></tr><tr><td>if a share in <tt class="filename">smb.conf</tt> doesn't contain .AppleDouble item in hide or veto list, it will be added automatically</td></tr></table><ns73:p>
- </ns73:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975176"></a>VFS modules available elsewhere</h2></div></div><div></div></div><p>
+ </p><p>Advantages compared to the old netatalk module:
+ </p><div class="itemizedlist"><ul type="disc"><li><p>it doesn't care about creating of .AppleDouble forks, just keeps them in sync</p></li><li><p>if a share in <tt class="filename">smb.conf</tt> doesn't contain .AppleDouble item in hide or veto list, it will be added automatically</p></li></ul></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2940843"></a>VFS modules available elsewhere</h2></div></div><div></div></div><p>
This section contains a listing of various other VFS modules that
have been posted but don't currently reside in the Samba CVS
tree for one reason or another (e.g. it is easy for the maintainer
@@ -80,7 +78,7 @@ to have his or her own CVS tree).
</p><p>
No statements about the stability or functionality of any module
should be implied due to its presence here.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975198"></a>DatabaseFS</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940865"></a>DatabaseFS</h3></div></div><div></div></div><p>
URL: <a href="http://www.css.tayloru.edu/~elorimer/databasefs/index.php" target="_top">http://www.css.tayloru.edu/~elorimer/databasefs/index.php</a>
</p><p>By <a href="mailto:elorimer@css.tayloru.edu" target="_top">Eric Lorimer</a>.</p><p>
I have created a VFS module which implements a fairly complete read-only
@@ -95,12 +93,10 @@ should be implied due to its presence here.
Any feedback would be appreciated: comments, suggestions, patches,
etc... If nothing else, hopefully it might prove useful for someone
else who wishes to create a virtual filesystem.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975253"></a>vscan</h3></div></div><div></div></div><p>URL: <a href="http://www.openantivirus.org/" target="_top">http://www.openantivirus.org/</a></p><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2940920"></a>vscan</h3></div></div><div></div></div><p>URL: <a href="http://www.openantivirus.org/" target="_top">http://www.openantivirus.org/</a></p><p>
samba-vscan is a proof-of-concept module for Samba, which
uses the VFS (virtual file system) features of Samba 2.2.x/3.0
alphaX. Of course, Samba has to be compiled with VFS support.
samba-vscan supports various virus scanners and is maintained
by Rainer Link.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975282"></a>Common Errors</h2></div></div><div></div></div><p>
-There must be some gotchas we should record here! Jelmer???
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="CUPS-printing.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="winbind.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter19.CUPS Printing Support in Samba 3.0</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter21.Integrated Logon Support using Winbind</td></tr></table></div></body></html>
+ </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="CUPS-printing.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="winbind.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter19.CUPS Printing Support in Samba 3.0</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter21.Winbind: Use of Domain Accounts</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/bugreport.html b/docs/htmldocs/bugreport.html
index e8d7a8ccd3d..49eb2117ca2 100644
--- a/docs/htmldocs/bugreport.html
+++ b/docs/htmldocs/bugreport.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter35.Reporting Bugs</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="problems.html" title="Chapter34.Analysing and solving samba problems"><link rel="next" href="Appendixes.html" title="PartVI.Appendixes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter35.Reporting Bugs</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="problems.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="Appendixes.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="bugreport"></a>Chapter35.Reporting Bugs</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Tridge or Karl Auer perhaps?</span></h3></div></div><div><p class="pubdate"> 27 June 1997 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="bugreport.html#id3010326">Introduction</a></dt><dt><a href="bugreport.html#id3010385">General info</a></dt><dt><a href="bugreport.html#id3010421">Debug levels</a></dt><dt><a href="bugreport.html#id3008517">Internal errors</a></dt><dt><a href="bugreport.html#id3008625">Attaching to a running process</a></dt><dt><a href="bugreport.html#id3008127">Patches</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3010326"></a>Introduction</h2></div></div><div></div></div><p>Please report bugs using
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter35.Reporting Bugs</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="problems.html" title="Chapter34.Analysing and solving samba problems"><link rel="next" href="Appendixes.html" title="PartVI.Appendixes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter35.Reporting Bugs</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="problems.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="Appendixes.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="bugreport"></a>Chapter35.Reporting Bugs</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> 27 June 1997 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="bugreport.html#id2960613">Introduction</a></dt><dt><a href="bugreport.html#id2960681">General info</a></dt><dt><a href="bugreport.html#id2960718">Debug levels</a></dt><dt><a href="bugreport.html#id2960926">Internal errors</a></dt><dt><a href="bugreport.html#id2961060">Attaching to a running process</a></dt><dt><a href="bugreport.html#id2961107">Patches</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960613"></a>Introduction</h2></div></div><div></div></div><p>Please report bugs using
<a href="https://bugzilla.samba.org/" target="_top">bugzilla</a>.</p><p>
Please take the time to read this file before you submit a bug
report. Also, please see if it has changed between releases, as we
@@ -21,7 +20,7 @@ that list that may be able to help you.
You may also like to look though the recent mailing list archives,
which are conveniently accessible on the Samba web pages
at <a href="http://samba.org/samba/" target="_top">http://samba.org/samba/</a>.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3010385"></a>General info</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960681"></a>General info</h2></div></div><div></div></div><p>
Before submitting a bug report check your config for silly
errors. Look in your log files for obvious messages that tell you that
you've misconfigured something and run testparm to test your config
@@ -33,42 +32,38 @@ This is very important.
If you include part of a log file with your bug report then be sure to
annotate it with exactly what you were doing on the client at the
time, and exactly what the results were.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3010421"></a>Debug levels</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960718"></a>Debug levels</h2></div></div><div></div></div><p>
If the bug has anything to do with Samba behaving incorrectly as a
server (like refusing to open a file) then the log files will probably
be very useful. Depending on the problem a log level of between 3 and
10 showing the problem may be appropriate. A higher level gives more
detail, but may use too much disk space.
</p><p>
-To set the debug level use the <i class="parameter"><tt>log level</tt></i> in your
+To set the debug level use the <a class="indexterm" name="id2960739"></a><i class="parameter"><tt>log level</tt></i> in your
<tt class="filename">smb.conf</tt>. You may also find it useful to set the log
level higher for just one machine and keep separate logs for each machine.
-To do this use:
-</p><pre class="programlisting">
-log level = 10
-log file = /usr/local/samba/lib/log.%m
-include = /usr/local/samba/lib/smb.conf.%m
-</pre><p>
+To do this add the following lines to your main <tt class="filename">smb.conf</tt> file:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>log level = 10</tt></i></td></tr><tr><td><i class="parameter"><tt>log file = /usr/local/samba/lib/log.%m</tt></i></td></tr><tr><td><i class="parameter"><tt>include = /usr/local/samba/lib/smb.conf.%m</tt></i></td></tr></table><p>
then create a file
<tt class="filename">/usr/local/samba/lib/smb.conf.<i class="replaceable"><tt>machine</tt></i></tt> where
<i class="replaceable"><tt>machine</tt></i> is the name of the client you wish to debug. In that file
put any <tt class="filename">smb.conf</tt> commands you want, for example
-<i class="parameter"><tt>log level</tt></i> may be useful. This also allows you to
+<a class="indexterm" name="id2960830"></a><i class="parameter"><tt>log level</tt></i> may be useful. This also allows you to
experiment with different security systems, protocol levels etc on just
one machine.
</p><p>
-The <tt class="filename">smb.conf</tt> entry <i class="parameter"><tt>log level</tt></i>
-is synonymous with the parameter <i class="parameter"><tt>debuglevel</tt></i> that has
+The <tt class="filename">smb.conf</tt> entry <a class="indexterm" name="id2960857"></a><i class="parameter"><tt>log level</tt></i>
+is synonymous with the parameter <a class="indexterm" name="id2960872"></a><i class="parameter"><tt>debuglevel</tt></i> that has
been used in older versions of Samba and is being retained for backwards
compatibility of <tt class="filename">smb.conf</tt> files.
</p><p>
-As the <i class="parameter"><tt>log level</tt></i> value is increased you will record
+As the <a class="indexterm" name="id2960897"></a><i class="parameter"><tt>log level</tt></i> value is increased you will record
a significantly increasing level of debugging information. For most
debugging operations you may not need a setting higher than
<tt class="constant">3</tt>. Nearly
all bugs can be tracked at a setting of <tt class="constant">10</tt>, but be
prepared for a VERY large volume of log data.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008517"></a>Internal errors</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960926"></a>Internal errors</h2></div></div><div></div></div><p>
If you get a <span class="errorname">INTERNAL ERROR</span> message in your log files
it means that Samba got an unexpected signal while running. It is probably a
segmentation fault and almost certainly means a bug in Samba (unless
@@ -81,13 +76,13 @@ include it in your bug report.
</p><p>
You should also detail how to reproduce the problem, if
possible. Please make this reasonably detailed.
-</p><p>
+</p><a class="indexterm" name="id2960962"></a><p>
You may also find that a core file appeared in a <tt class="filename">corefiles</tt>
subdirectory of the directory where you keep your samba log
files. This file is the most useful tool for tracking down the bug. To
use it you do this:
-</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>gdb smbd core</tt></b>
+</p><a class="indexterm" name="id2960984"></a><a class="indexterm" name="id2960993"></a><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>gdb smbd core</tt></b>
</pre><p>
adding appropriate paths to smbd and core so gdb can find them. If you
don't have gdb then try <b class="userinput"><tt>dbx</tt></b>. Then within the debugger
@@ -101,7 +96,7 @@ disassemble the routine that called it) and try to work out exactly
where the problem is by looking at the surrounding code. Even if you
don't know assembly, including this info in the bug report can be
useful.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008625"></a>Attaching to a running process</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2961060"></a>Attaching to a running process</h2></div></div><div></div></div><p>
Unfortunately some unixes (in particular some recent linux kernels)
refuse to dump a core file if the task has changed uid (which smbd
does often). To debug with this sort of system you could try to attach
@@ -111,10 +106,10 @@ to the running process using
Then use <b class="command">c</b> to continue and try to cause the core dump
using the client. The debugger should catch the fault and tell you
where it occurred.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008127"></a>Patches</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2961107"></a>Patches</h2></div></div><div></div></div><a class="indexterm" name="id2961114"></a><a class="indexterm" name="id2961123"></a><p>
The best sort of bug report is one that includes a fix! If you send us
patches please use <b class="userinput"><tt>diff -u</tt></b> format if your version of
diff supports it, otherwise use <b class="userinput"><tt>diff -c4</tt></b>. Make sure
you do the diff against a clean version of the source and let me know
exactly what version you used.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="problems.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="troubleshooting.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="Appendixes.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter34.Analysing and solving samba problems</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">PartVI.Appendixes</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="problems.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="troubleshooting.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="Appendixes.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter34.Analysing and solving samba problems</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">PartVI.Appendixes</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/compiling.html b/docs/htmldocs/compiling.html
index 836fb50bb88..95cdb0f581c 100644
--- a/docs/htmldocs/compiling.html
+++ b/docs/htmldocs/compiling.html
@@ -1,9 +1,8 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter36.How to compile SAMBA</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Appendixes.html" title="PartVI.Appendixes"><link rel="next" href="Portability.html" title="Chapter37.Portability"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter36.How to compile SAMBA</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Appendixes.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Portability.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="compiling"></a>Chapter36.How to compile SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="surname">Someone; Jerry perhaps?</span></h3></div></div><div><p class="pubdate"> 22 May 2001 </p></div><div><p class="pubdate"> 18 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="compiling.html#id3008244">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="compiling.html#id3008251">Introduction</a></dt><dt><a href="compiling.html#id3008280">CVS Access to samba.org</a></dt></dl></dd><dt><a href="compiling.html#id3009749">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="compiling.html#id3009796">Verifying Samba's PGP signature</a></dt><dt><a href="compiling.html#id3009932">Building the Binaries</a></dt><dd><dl><dt><a href="compiling.html#id3010069">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="compiling.html#id3010964">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="compiling.html#id3011056">Starting from inetd.conf</a></dt><dt><a href="compiling.html#id3011260">Alternative: starting it as a daemon</a></dt></dl></dd><dt><a href="compiling.html#id3011355">Common Errors</a></dt></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter36.How to compile Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Appendixes.html" title="PartVI.Appendixes"><link rel="next" href="Portability.html" title="Chapter37.Portability"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter36.How to compile Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Appendixes.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="Portability.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="compiling"></a>Chapter36.How to compile Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> 22 May 2001 </p></div><div><p class="pubdate"> 18 March 2003 </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="compiling.html#id2961265">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="compiling.html#id2961282">Introduction</a></dt><dt><a href="compiling.html#id2961320">CVS Access to samba.org</a></dt></dl></dd><dt><a href="compiling.html#id2961581">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="compiling.html#id2961644">Verifying Samba's PGP signature</a></dt><dt><a href="compiling.html#id2961798">Building the Binaries</a></dt><dd><dl><dt><a href="compiling.html#id2961978">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="compiling.html#id2962144">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="compiling.html#id2962252">Starting from inetd.conf</a></dt><dt><a href="compiling.html#id2962499">Alternative: starting it as a daemon</a></dt></dl></dd></dl></div><p>
You can obtain the samba source from the
<a href="http://samba.org/" target="_top">samba website</a>. To obtain a development version,
you can download samba from CVS or using rsync.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008244"></a>Access Samba source code via CVS</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3008251"></a>Introduction</h3></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2961265"></a>Access Samba source code via CVS</h2></div></div><div></div></div><a class="indexterm" name="id2961274"></a><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2961282"></a>Introduction</h3></div></div><div></div></div><p>
Samba is developed in an open environment. Developers use CVS
(Concurrent Versioning System) to &quot;checkin&quot; (also known as
&quot;commit&quot;) new source code. Samba's various CVS branches can
@@ -12,12 +11,12 @@ detailed in this chapter.
</p><p>
This chapter is a modified version of the instructions found at
<a href="http://samba.org/samba/cvs.html" target="_top">http://samba.org/samba/cvs.html</a>
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3008280"></a>CVS Access to samba.org</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2961320"></a>CVS Access to samba.org</h3></div></div><div></div></div><p>
The machine samba.org runs a publicly accessible CVS
repository for access to the source code of several packages,
including samba, rsync, distcc, ccache and jitterbug. There are two main ways
of accessing the CVS server on this host.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3008295"></a>Access via CVSweb</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961335"></a>Access via CVSweb</h4></div></div><div></div></div><a class="indexterm" name="id2961344"></a><p>
You can access the source code via your
favourite WWW browser. This allows you to access the contents of
individual files in the repository and also to look at the revision
@@ -25,7 +24,7 @@ history and commit logs of individual files. You can also ask for a diff
listing between any two versions on the repository.
</p><p>
Use the URL : <a href="http://samba.org/cgi-bin/cvsweb" target="_top">http://samba.org/cgi-bin/cvsweb</a>
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3008326"></a>Access via cvs</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2961383"></a>Access via cvs</h4></div></div><div></div></div><p>
You can also access the source code via a
normal cvs client. This gives you much more control over what you can
do with the repository and allows you to checkout whole source trees
@@ -75,7 +74,7 @@ on this system just substitute the correct package name
the following command from within the samba directory:
</p><p>
<b class="userinput"><tt>cvs update -d -P</tt></b>
- </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3009749"></a>Accessing the samba sources via rsync and ftp</h2></div></div><div></div></div><p>
+ </p></li></ol></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2961581"></a>Accessing the samba sources via rsync and ftp</h2></div></div><div></div></div><a class="indexterm" name="id2961589"></a><a class="indexterm" name="id2961597"></a><p>
pserver.samba.org also exports unpacked copies of most parts of the CVS
tree at <a href="ftp://pserver.samba.org/pub/unpacked" target="_top">ftp://pserver.samba.org/pub/unpacked</a> and also via anonymous rsync at
<a href="rsync://pserver.samba.org/ftp/unpacked/" target="_top">rsync://pserver.samba.org/ftp/unpacked/</a>. I recommend using rsync rather than ftp.
@@ -84,7 +83,7 @@ on this system just substitute the correct package name
The disadvantage of the unpacked trees is that they do not support automatic
merging of local changes like CVS does. rsync access is most convenient
for an initial install.
- </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3009796"></a>Verifying Samba's PGP signature</h2></div></div><div></div></div><p>
+ </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2961644"></a>Verifying Samba's PGP signature</h2></div></div><div></div></div><p>
In these days of insecurity, it's strongly recommended that you verify the PGP
signature for any source file before installing it. Even if you're not
downloading from a mirror site, verifying PGP signatures should be a
@@ -92,39 +91,43 @@ standard reflex.
</p><p>
With that said, go ahead and download the following files:
</p><pre class="screen">
-<tt class="prompt">$ </tt><b class="userinput"><tt> wget http://us1.samba.org/samba/ftp/samba-2.2.8a.tar.asc</tt></b>
-<tt class="prompt">$ </tt><b class="userinput"><tt> wget http://us1.samba.org/samba/ftp/samba-pubkey.asc</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>wget http://us1.samba.org/samba/ftp/samba-2.2.8a.tar.asc</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>wget http://us1.samba.org/samba/ftp/samba-pubkey.asc</tt></b>
</pre><p>
+<a class="indexterm" name="id2961705"></a>
The first file is the PGP signature for the Samba source file; the other is the Samba public
PGP key itself. Import the public PGP key with:
</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>gpg --import samba-pubkey.asc</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>gpg --import samba-pubkey.asc</tt></b>
</pre><p>
And verify the Samba source code integrity with:
</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>gzip -d samba-2.2.8a.tar.gz</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>gpg --verify samba-2.2.8a.tar.asc</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>gzip -d samba-2.2.8a.tar.gz</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>gpg --verify samba-2.2.8a.tar.asc</tt></b>
</pre><p>
If you receive a message like, &quot;Good signature from Samba Distribution
Verification Key...&quot;
then all is well. The warnings about trust relationships can be ignored. An
example of what you would not want to see would be:
-</p><tt class="computeroutput">
+</p><p>
+<tt class="computeroutput">
gpg: BAD signature from &quot;Samba Distribution Verification Key&quot;
-</tt></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3009932"></a>Building the Binaries</h2></div></div><div></div></div><p>To do this, first run the program <b class="userinput"><tt>./configure
+ </tt>
+ </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2961798"></a>Building the Binaries</h2></div></div><div></div></div><a class="indexterm" name="id2961805"></a><p>
+ To do this, first run the program <b class="userinput"><tt>./configure
</tt></b> in the source directory. This should automatically
configure Samba for your operating system. If you have unusual
- needs then you may wish to run</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>./configure --help
- </tt></b></p><p>first to see what special options you can enable.
- Then executing</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make</tt></b></p><p>will create the binaries. Once it's successfully
- compiled you can use </p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make install</tt></b></p><p>to install the binaries and manual pages. You can
- separately install the binaries and/or man pages using</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make installbin
- </tt></b></p><p>and</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make installman
- </tt></b></p><p>Note that if you are upgrading for a previous version
+ needs then you may wish to run</p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>./configure --help
+</tt></b></pre><p>first to see what special options you can enable.
+ Then executing</p><a class="indexterm" name="id2961851"></a><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>make</tt></b></pre><p>will create the binaries. Once it's successfully
+ compiled you can use </p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>make install</tt></b></pre><p>to install the binaries and manual pages. You can
+ separately install the binaries and/or man pages using</p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>make installbin
+</tt></b></pre><p>and</p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>make installman
+ </tt></b></pre><p>Note that if you are upgrading for a previous version
of Samba you might like to know that the old versions of
the binaries will be renamed with a &quot;.old&quot; extension. You
- can go back to the previous version with</p><p><tt class="prompt">root# </tt><b class="userinput"><tt>make revert
- </tt></b></p><p>if you find this version a disaster!</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3010069"></a>Compiling samba with Active Directory support</h3></div></div><div></div></div><p>In order to compile samba with ADS support, you need to have installed
+ can go back to the previous version with</p><pre class="screen"><tt class="prompt">root# </tt><b class="userinput"><tt>make revert
+</tt></b></pre><p>if you find this version a disaster!</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2961978"></a>Compiling samba with Active Directory support</h3></div></div><div></div></div><p>In order to compile samba with ADS support, you need to have installed
on your system:</p><div class="itemizedlist"><ul type="disc"><li><p>the MIT kerberos development libraries
(either install from the sources or use a package). The
Heimdal libraries will not work.</p></li><li><p>the OpenLDAP development libraries.</p></li></ul></div><p>If your kerberos libraries are in a non-standard location then
@@ -136,16 +139,17 @@ example of what you would not want to see would be:
#define HAVE_LDAP 1
</pre><p>If it doesn't then configure did not find your krb5 libraries or
your ldap libraries. Look in <tt class="filename">config.log</tt> to figure
- out why and fix it.</p><div xmlns:ns100="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3010878"></a>Installing the required packages for Debian</h4></div></div><div></div></div><p>On Debian you need to install the following packages:</p><ns100:p>
- </ns100:p><table class="simplelist" border="0" summary="Simple list"><tr><td>libkrb5-dev</td></tr><tr><td>krb5-user</td></tr></table><ns100:p>
- </ns100:p></div><div xmlns:ns101="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id3010912"></a>Installing the required packages for RedHat</h4></div></div><div></div></div><p>On RedHat this means you should have at least: </p><ns101:p>
- </ns101:p><table class="simplelist" border="0" summary="Simple list"><tr><td>krb5-workstation (for kinit)</td></tr><tr><td>krb5-libs (for linking with)</td></tr><tr><td>krb5-devel (because you are compiling from source)</td></tr></table><ns101:p>
- </ns101:p><p>in addition to the standard development environment.</p><p>Note that these are not standard on a RedHat install, and you may need
- to get them off CD2.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3010964"></a>Starting the <span class="application">smbd</span> and <span class="application">nmbd</span></h2></div></div><div></div></div><p>You must choose to start <span class="application">smbd</span> and <span class="application">nmbd</span> either
+ out why and fix it.</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962059"></a>Installing the required packages for Debian</h4></div></div><div></div></div><p>On Debian you need to install the following packages:</p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>libkrb5-dev</p></li><li><p>krb5-user</p></li></ul></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2962091"></a>Installing the required packages for RedHat</h4></div></div><div></div></div><p>On RedHat this means you should have at least: </p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>krb5-workstation (for kinit)</p></li><li><p>krb5-libs (for linking with)</p></li><li><p>krb5-devel (because you are compiling from source)</p></li></ul></div><p>
+ </p><p>in addition to the standard development environment.</p><p>Note that these are not standard on a RedHat install, and you may need
+ to get them off CD2.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2962144"></a>Starting the <span class="application">smbd</span> and <span class="application">nmbd</span></h2></div></div><div></div></div><a class="indexterm" name="id2962165"></a><p>You must choose to start <span class="application">smbd</span> and <span class="application">nmbd</span> either
as daemons or from <span class="application">inetd</span>. Don't try
to do both! Either you can put them in <tt class="filename">
inetd.conf</tt> and have them started on demand
- by <span class="application">inetd</span>, or you can start them as
+ by <span class="application">inetd</span> or <span class="application">xinetd</span>,
+ or you can start them as
daemons either from the command line or in <tt class="filename">
/etc/rc.local</tt>. See the man pages for details
on the command line options. Take particular care to read
@@ -153,7 +157,7 @@ example of what you would not want to see would be:
Samba. In many cases you must be root.</p><p>The main advantage of starting <span class="application">smbd</span>
and <span class="application">nmbd</span> using the recommended daemon method
is that they will respond slightly more quickly to an initial connection
- request.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3011056"></a>Starting from inetd.conf</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>The following will be different if
+ request.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962252"></a>Starting from inetd.conf</h3></div></div><div></div></div><a class="indexterm" name="id2962260"></a><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>The following will be different if
you use NIS, NIS+ or LDAP to distribute services maps.</p></div><p>Look at your <tt class="filename">/etc/services</tt>.
What is defined at port 139/tcp. If nothing is defined
then add a line like this:</p><pre class="programlisting">netbios-ssn 139/tcp</pre><p>similarly for 137/udp you should have an entry like:</p><pre class="programlisting">netbios-ns 137/udp</pre><p>Next edit your <tt class="filename">/etc/inetd.conf</tt>
@@ -162,12 +166,13 @@ example of what you would not want to see would be:
netbios-ns dgram udp wait root /usr/local/samba/bin/nmbd nmbd
</pre><p>The exact syntax of <tt class="filename">/etc/inetd.conf</tt>
varies between unixes. Look at the other entries in inetd.conf
- for a guide.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Some unixes already have entries like netbios_ns
+ for a guide. </p><a class="indexterm" name="id2962350"></a><p>Some distributions use xinetd instead of inetd. Consult the
+ xinetd manual for configuration information.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Some unixes already have entries like netbios_ns
(note the underscore) in <tt class="filename">/etc/services</tt>.
You must either edit <tt class="filename">/etc/services</tt> or
<tt class="filename">/etc/inetd.conf</tt> to make them consistent.
- </p></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>On many systems you may need to use the
- <i class="parameter"><tt>interfaces</tt></i> option in <tt class="filename">smb.conf</tt> to specify the IP
+ </p></div><a class="indexterm" name="id2962393"></a><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>On many systems you may need to use the
+ <a class="indexterm" name="id2962405"></a><i class="parameter"><tt>interfaces</tt></i> option in <tt class="filename">smb.conf</tt> to specify the IP
address and netmask of your interfaces. Run
<span class="application">ifconfig</span>
as root if you don't know what the broadcast is for your
@@ -178,8 +183,9 @@ example of what you would not want to see would be:
This means you shouldn't use spaces between the options and
arguments, or you should use a script, and start the script
from <b class="command">inetd</b>.</p></div><p>Restart <span class="application">inetd</span>, perhaps just send
- it a HUP. If you have installed an earlier version of <span class="application">nmbd</span> then
- you may need to kill <span class="application">nmbd</span> as well.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id3011260"></a>Alternative: starting it as a daemon</h3></div></div><div></div></div><p>To start the server as a daemon you should create
+ it a HUP. </p><pre class="screen">
+ <tt class="prompt">root# </tt><b class="userinput"><tt>killall -HUP inetd</tt></b>
+ </pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2962499"></a>Alternative: starting it as a daemon</h3></div></div><div></div></div><a class="indexterm" name="id2962507"></a><p>To start the server as a daemon you should create
a script something like this one, perhaps calling
it <tt class="filename">startsmb</tt>.</p><pre class="programlisting">
#!/bin/sh
@@ -191,12 +197,4 @@ example of what you would not want to see would be:
</p><p>To kill it send a kill signal to the processes
<span class="application">nmbd</span> and <span class="application">smbd</span>.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>If you use the SVR4 style init system then
you may like to look at the <tt class="filename">examples/svr4-startup</tt>
- script to make Samba fit into that system.</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3011355"></a>Common Errors</h2></div></div><div></div></div><p>&#8220;<span class="quote">
-I'm using gcc 3 and I've compiled Samba-3 from the CVS and the
-binaries are very large files (40 Mb and 20 Mb). I've the same result with
-<tt class="option">--enable-shared</tt> ?
-</span>&#8221;
-</p><p>
-The dwarf format used by GCC 3 for storing debugging symbols is very inefficient.
-Strip the binaries, don't compile with -g or compile with -gstabs.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Appendixes.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="Portability.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartVI.Appendixes</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter37.Portability</td></tr></table></div></body></html>
+ script to make Samba fit into that system.</p></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Appendixes.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="Portability.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartVI.Appendixes</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter37.Portability</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/diagnosis.html b/docs/htmldocs/diagnosis.html
index 473f5e6985b..ea84661d308 100644
--- a/docs/htmldocs/diagnosis.html
+++ b/docs/htmldocs/diagnosis.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter33.The Samba checklist</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="next" href="problems.html" title="Chapter34.Analysing and solving samba problems"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter33.The Samba checklist</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="troubleshooting.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="problems.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="diagnosis"></a>Chapter33.The Samba checklist</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">Wed Jan 15</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="diagnosis.html#id3003655">Introduction</a></dt><dt><a href="diagnosis.html#id3003689">Assumptions</a></dt><dt><a href="diagnosis.html#id3003861">The tests</a></dt><dt><a href="diagnosis.html#id3007413">Still having troubles?</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3003655"></a>Introduction</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter33.The Samba checklist</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="next" href="problems.html" title="Chapter34.Analysing and solving samba problems"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter33.The Samba checklist</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="troubleshooting.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="problems.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="diagnosis"></a>Chapter33.The Samba checklist</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">Wed Jan 15</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="diagnosis.html#id2957982">Introduction</a></dt><dt><a href="diagnosis.html#id2958022">Assumptions</a></dt><dt><a href="diagnosis.html#id2958249">The tests</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2957982"></a>Introduction</h2></div></div><div></div></div><p>
This file contains a list of tests you can perform to validate your
Samba server. It also tells you what the likely cause of the problem
is if it fails any one of these steps. If it passes all these tests
@@ -14,7 +13,7 @@ to solve a problem.
If you send one of the samba mailing lists an email saying &quot;it doesn't work&quot;
and you have not followed this test procedure then you should not be surprised
if your email is ignored.
-</p></div><div xmlns:ns99="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3003689"></a>Assumptions</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958022"></a>Assumptions</h2></div></div><div></div></div><p>
In all of the tests it is assumed you have a Samba server called
BIGSERVER and a PC called ACLIENT both in workgroup TESTGROUP.
</p><p>
@@ -24,15 +23,8 @@ It is also assumed you know the name of an available share in your
<tt class="filename">smb.conf</tt>. I will assume this share is called <i class="replaceable"><tt>tmp</tt></i>.
You can add a <i class="replaceable"><tt>tmp</tt></i> share like this by adding the
following to <tt class="filename">smb.conf</tt>:
-</p><pre class="programlisting">
-
-[tmp]
- comment = temporary files
- path = /tmp
- read only = yes
-
-</pre><ns99:p>
-</ns99:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="example"><a name="id2958071"></a><p class="title"><b>Example33.1.smb.conf with [tmp] share</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[tmp]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = temporary files </tt></i></td></tr><tr><td><i class="parameter"><tt>path = /tmp</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = yes</tt></i></td></tr></table></div><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
These tests assume version 3.0 or later of the samba suite.
Some commands shown did not exist in earlier versions.
</p></div><p>
@@ -44,7 +36,7 @@ file points to name servers that really do exist.
Also, if you do not have DNS server access for name resolution please check
that the settings for your <tt class="filename">smb.conf</tt> file results in <b class="command">dns proxy = no</b>. The
best way to check this is with <b class="userinput"><tt>testparm smb.conf</tt></b>.
-</p><p>
+</p><a class="indexterm" name="id2958171"></a><p>
It is helpful to monitor the log files during testing by using the
<b class="command">tail -F <i class="replaceable"><tt>log_file_name</tt></i></b> in a separate
terminal console (use ctrl-alt-F1 through F6 or multiple terminals in X).
@@ -55,7 +47,7 @@ depending on how or if you specified logging in your <tt class="filename">smb.co
</p><p>
If you make changes to your <tt class="filename">smb.conf</tt> file while going through these test,
don't forget to restart <span class="application">smbd</span> and <span class="application">nmbd</span>.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3003861"></a>The tests</h2></div></div><div></div></div><div class="procedure"><p class="title"><b>Procedure33.1.Diagnosing your samba server</b></p><ol type="1"><li><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2958249"></a>The tests</h2></div></div><div></div></div><div class="procedure"><p class="title"><b>Procedure33.1.Diagnosing your samba server</b></p><a class="indexterm" name="id2958265"></a><ol type="1"><li><p>
In the directory in which you store your <tt class="filename">smb.conf</tt> file, run the command
<b class="userinput"><tt>testparm smb.conf</tt></b>. If it reports any errors then your <tt class="filename">smb.conf</tt>
configuration file is faulty.
@@ -101,6 +93,8 @@ that file incorrectly. If you installed it as a daemon then check that
it is running, and check that the netbios-ssn port is in a LISTEN
state using <b class="userinput"><tt>netstat -a</tt></b>.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2958530"></a>
+<a class="indexterm" name="id2958538"></a>
Some Unix / Linux systems use <b class="command">xinetd</b> in place of
<b class="command">inetd</b>. Check your system documentation for the location
of the control file/s for your particular system implementation of
@@ -117,26 +111,20 @@ files exist.
There are a number of reasons for which smbd may refuse or decline
a session request. The most common of these involve one or more of
the following <tt class="filename">smb.conf</tt> file entries:
-</p><pre class="programlisting">
- hosts deny = ALL
- hosts allow = xxx.xxx.xxx.xxx/yy
- bind interfaces only = Yes
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>hosts deny = ALL</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts allow = xxx.xxx.xxx.xxx/yy</tt></i></td></tr><tr><td><i class="parameter"><tt>bind interfaces only = Yes</tt></i></td></tr></table><p>
In the above, no allowance has been made for any session requests that
will automatically translate to the loopback adapter address 127.0.0.1.
To solve this problem change these lines to:
-</p><pre class="programlisting">
- hosts deny = ALL
- hosts allow = xxx.xxx.xxx.xxx/yy 127.
-</pre><p>
-Do <span class="emphasis"><em>not</em></span> use the <b class="command">bind interfaces only</b> parameter where you
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>hosts deny = ALL</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts allow = xxx.xxx.xxx.xxx/yy 127.</tt></i></td></tr></table><p>
+Do <span class="emphasis"><em>not</em></span> use the <a class="indexterm" name="id2958698"></a><i class="parameter"><tt>bind interfaces only</tt></i> parameter where you
may wish to
use the samba password change facility, or where <span class="application">smbclient</span> may need to
access a local service for name resolution or for local resource
-connections. (Note: the <b class="command">bind interfaces only</b> parameter deficiency
+connections. (Note: the <a class="indexterm" name="id2958724"></a><i class="parameter"><tt>bind interfaces only</tt></i> parameter deficiency
where it will not allow connections to the loopback address will be
fixed soon).
</p><p>
+<a class="indexterm" name="id2958744"></a>
Another common cause of these two errors is having something already running
on port <tt class="constant">139</tt>, such as Samba
(ie: <span class="application">smbd</span> is running from <span class="application">inetd</span> already) or
@@ -179,20 +167,20 @@ messages from several hosts.
If this doesn't give a similar result to the previous test then
nmblookup isn't correctly getting your broadcast address through its
automatic mechanism. In this case you should experiment with the
-<b class="command">interfaces</b> option in <tt class="filename">smb.conf</tt> to manually configure your IP
+<a class="indexterm" name="id2958915"></a><i class="parameter"><tt>interfaces</tt></i> option in <tt class="filename">smb.conf</tt> to manually configure your IP
address, broadcast and netmask.
</p><p>
If your PC and server aren't on the same subnet then you will need to
-use the <i class="parameter"><tt>-B</tt></i> option to set the broadcast address to that of the PCs
+use the <tt class="option">-B</tt> option to set the broadcast address to that of the PCs
subnet.
</p><p>
This test will probably fail if your subnet mask and broadcast address are
not correct. (Refer to TEST 3 notes above).
-</p></li><li><p>
+</p></li><li><a class="indexterm" name="id2958962"></a><p>
Run the command <b class="userinput"><tt>smbclient //BIGSERVER/TMP</tt></b>. You should
then be prompted for a password. You should use the password of the account
you are logged into the unix box with. If you want to test with
-another account then add the <i class="parameter"><tt>-U <i class="replaceable"><tt>accountname</tt></i></tt></i> option to the end of
+another account then add the <tt class="option">-U <i class="replaceable"><tt>accountname</tt></i></tt> option to the end of
the command line. eg:
<b class="userinput"><tt>smbclient //bigserver/tmp -Ujohndoe</tt></b>
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
@@ -209,14 +197,13 @@ If it says <span class="errorname">bad password</span> then the likely causes ar
you have shadow passwords (or some other password system) but didn't
compile in support for them in <span class="application">smbd</span>
</p></li><li><p>
- your <b class="command">valid users</b> configuration is incorrect
+ your <a class="indexterm" name="id2959084"></a><i class="parameter"><tt>valid users</tt></i> configuration is incorrect
</p></li><li><p>
- you have a mixed case password and you haven't enabled the <b class="command">password
- level</b> option at a high enough level
+ you have a mixed case password and you haven't enabled the <a class="indexterm" name="id2959107"></a><i class="parameter"><tt>password level</tt></i> option at a high enough level
</p></li><li><p>
- the <b class="command">path =</b> line in <tt class="filename">smb.conf</tt> is incorrect. Check it with <span class="application">testparm</span>
+ the <a class="indexterm" name="id2959129"></a><i class="parameter"><tt>path</tt></i> line in <tt class="filename">smb.conf</tt> is incorrect. Check it with <span class="application">testparm</span>
</p></li><li><p>
- you enabled password encryption but didn't map unix to samba users
+ you enabled password encryption but didn't map unix to samba users. Run </p><pre class="screen"><b class="userinput"><tt>smbpasswd -a <i class="replaceable"><tt>username</tt></i></tt></b></pre><p>.
</p></li></ol></div><p>
Once connected you should be able to use the commands
<b class="command">dir</b> <b class="command">get</b> <b class="command">put</b> etc.
@@ -266,14 +253,13 @@ installed or your smb.conf is incorrect. make sure your <b class="command">hosts
and other config lines in <tt class="filename">smb.conf</tt> are correct.
</p><p>
It's also possible that the server can't work out what user name to
-connect you as. To see if this is the problem add the line <i class="parameter"><tt>user =
-<i class="replaceable"><tt>username</tt></i></tt></i> to the <i class="parameter"><tt>[tmp]</tt></i> section of
+connect you as. To see if this is the problem add the line <a class="indexterm" name="id2959420"></a><i class="parameter"><tt>user</tt></i> = username to the <i class="parameter"><tt>[tmp]</tt></i> section of
<tt class="filename">smb.conf</tt> where <i class="replaceable"><tt>username</tt></i> is the
username corresponding to the password you typed. If you find this
fixes things you may need the username mapping option.
</p><p>
It might also be the case that your client only sends encrypted passwords
-and you have <i class="parameter"><tt>encrypt passwords = no</tt></i> in <tt class="filename">smb.conf</tt>
+and you have <a class="indexterm" name="id2959460"></a><i class="parameter"><tt>encrypt passwords</tt></i> = no in <tt class="filename">smb.conf</tt>
Turn it back on to fix.
</p></li><li><p>
Run the command <b class="userinput"><tt>nmblookup -M <i class="replaceable"><tt>testgroup</tt></i></tt></b> where
@@ -284,20 +270,18 @@ master browser for that workgroup.
If you don't then the election process has failed. Wait a minute to
see if it is just being slow then try again. If it still fails after
that then look at the browsing options you have set in <tt class="filename">smb.conf</tt>. Make
-sure you have <i class="parameter"><tt>preferred master = yes</tt></i> to ensure that
+sure you have <a class="indexterm" name="id2959524"></a><i class="parameter"><tt>preferred master</tt></i> = yes to ensure that
an election is held at startup.
</p></li><li><p>
-&gt;From file manager try to browse the server. Your samba server should
+From file manager try to browse the server. Your samba server should
appear in the browse list of your local workgroup (or the one you
-specified in smb.conf). You should be able to double click on the name
+specified in <tt class="filename">smb.conf</tt>). You should be able to double click on the name
of the server and get a list of shares. If you get a &quot;invalid
password&quot; error when you do then you are probably running WinNT and it
is refusing to browse a server that has no encrypted password
capability and is in user level security mode. In this case either set
-<i class="parameter"><tt>security = server</tt></i> AND
-<i class="parameter"><tt>password server = Windows_NT_Machine</tt></i> in your
-<tt class="filename">smb.conf</tt> file, or make sure <i class="parameter"><tt>encrypted passwords</tt></i> is
+<a class="indexterm" name="id2959575"></a><i class="parameter"><tt>security</tt></i> = server AND
+<a class="indexterm" name="id2959589"></a><i class="parameter"><tt>password server</tt></i> = Windows_NT_Machine in your
+<tt class="filename">smb.conf</tt> file, or make sure <a class="indexterm" name="id2959610"></a><i class="parameter"><tt>encrypt passwords</tt></i> is
set to &quot;yes&quot;.
-</p></li></ol></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3007413"></a>Still having troubles?</h2></div></div><div></div></div><p>Read the chapter on
-<a href="problems.html" title="Chapter34.Analysing and solving samba problems">Analysing and Solving Problems</a>.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="troubleshooting.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="troubleshooting.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="problems.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartV.Troubleshooting</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter34.Analysing and solving samba problems</td></tr></table></div></body></html>
+</p></li></ol></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="troubleshooting.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="troubleshooting.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="problems.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartV.Troubleshooting</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter34.Analysing and solving samba problems</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/domain-member.html b/docs/htmldocs/domain-member.html
index 19f8fd8677d..313c6e0fc7b 100644
--- a/docs/htmldocs/domain-member.html
+++ b/docs/htmldocs/domain-member.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter7.Domain Membership</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="samba-bdc.html" title="Chapter6.Backup Domain Control"><link rel="next" href="StandAloneServer.html" title="Chapter8.Stand-Alone Servers"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter7.Domain Membership</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="samba-bdc.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="StandAloneServer.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="domain-member"></a>Chapter7.Domain Membership</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="domain-member.html#id2895232">Features and Benefits</a></dt><dt><a href="domain-member.html#id2894803">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="domain-member.html#id2894963">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2896748">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="domain-member.html#id2896944">&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2897000">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="domain-member.html#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="domain-member.html#id2897196">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="domain-member.html#id2899872">Why is this better than security = server?</a></dt></dl></dd><dt><a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2900011">Setup your smb.conf</a></dt><dt><a href="domain-member.html#id2900094">Setup your /etc/krb5.conf</a></dt><dt><a href="domain-member.html#ads-create-machine-account">Create the computer account</a></dt><dt><a href="domain-member.html#ads-test-server">Test your server setup</a></dt><dt><a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="domain-member.html#id2900442">Notes</a></dt></dl></dd><dt><a href="domain-member.html#id2900464">Common Errors</a></dt><dd><dl><dt><a href="domain-member.html#id2900491">Can Not Add Machine Back to Domain</a></dt><dt><a href="domain-member.html#id2900523">Adding Machine to Domain Fails</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter7.Domain Membership</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="samba-bdc.html" title="Chapter6.Backup Domain Control"><link rel="next" href="StandAloneServer.html" title="Chapter8.Stand-Alone Servers"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter7.Domain Membership</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="samba-bdc.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="StandAloneServer.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="domain-member"></a>Chapter7.Domain Membership</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="domain-member.html#id2890490">Features and Benefits</a></dt><dt><a href="domain-member.html#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="domain-member.html#id2890821">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2891126">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="domain-member.html#id2891341">&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2891414">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="domain-member.html#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="domain-member.html#id2891624">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="domain-member.html#id2892061">Why is this better than security = server?</a></dt></dl></dd><dt><a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2892246">Setup your smb.conf</a></dt><dt><a href="domain-member.html#id2892373">Setup your /etc/krb5.conf</a></dt><dt><a href="domain-member.html#ads-create-machine-account">Create the computer account</a></dt><dt><a href="domain-member.html#ads-test-server">Test your server setup</a></dt><dt><a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="domain-member.html#id2892751">Notes</a></dt></dl></dd><dt><a href="domain-member.html#id2892773">Common Errors</a></dt><dd><dl><dt><a href="domain-member.html#id2892816">Can Not Add Machine Back to Domain</a></dt><dt><a href="domain-member.html#id2892848">Adding Machine to Domain Fails</a></dt><dt><a href="domain-member.html#id2892992">I can't join a Windows 2003 PDC</a></dt></dl></dd></dl></div><p>
Domain Membership is a subject of vital concern, Samba must be able to
participate as a member server in a Microsoft Domain security context, and
Samba must be capable of providing Domain machine member trust accounts,
@@ -9,12 +8,11 @@ This chapter covers background information pertaining to domain membership,
Samba configuration for it, and MS Windows client procedures for joining a
domain. Why is this necessary? Because both are areas in which there exists
within the current MS Windows networking world and particularly in the
-Unix/Linux networking and administration world, a considerable level of
+UNIX/Linux networking and administration world, a considerable level of
mis-information, incorrect understanding, and a lack of knowledge. Hopefully
this chapter will fill the voids.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2895232"></a>Features and Benefits</h2></div></div><div></div></div><p>
-MS Windows workstations and servers that want to participate in domain
-security need to
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890490"></a>Features and Benefits</h2></div></div><div></div></div><p>
+MS Windows workstations and servers that want to participate in domain security need to
be made Domain members. Participating in Domain security is often called
<span class="emphasis"><em>Single Sign On</em></span> or <span class="acronym">SSO</span> for short. This
chapter describes the process that must be followed to make a workstation
@@ -49,7 +47,7 @@ Domain membership has many advantages:
client or server, other than the central Domain database
(either NT4/Samba SAM style Domain, NT4 Domain that is back ended with an
LDAP directory, or via an Active Directory infrastructure)
- </p></li></ul></div></div><div xmlns:ns7="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894803"></a>MS Windows Workstation/Server Machine Trust Accounts</h2></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="machine-trust-accounts"></a>MS Windows Workstation/Server Machine Trust Accounts</h2></div></div><div></div></div><a class="indexterm" name="id2890621"></a><p>
A machine trust account is an account that is used to authenticate a client
machine
(rather than a user) to the Domain Controller server. In Windows terminology,
@@ -68,18 +66,18 @@ shared secret with the domain controller.
A Windows NT4 PDC stores each machine trust account in the Windows Registry.
The introduction of MS Windows 2000 saw the introduction of Active Directory,
the new repository for machine trust accounts.
-</p><ns7:p>
+</p><p>
A Samba PDC, however, stores each machine trust account in two parts,
as follows:
-</ns7:p><div class="itemizedlist"><ul type="disc"><li><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>
A Domain Security Account (stored in the
- <i class="parameter"><tt>passdb backend</tt></i> that has been configured in the
+ <a class="indexterm" name="id2890675"></a><i class="parameter"><tt>passdb backend</tt></i> that has been configured in the
<tt class="filename">smb.conf</tt> file. The precise nature of the account information that is
stored depends on the type of backend database that has been chosen.
</p><p>
The older format of this data is the <tt class="filename">smbpasswd</tt> database
- which contains the unix login ID, the Unix user identifier (UID), and the
+ which contains the UNIX login ID, the UNIX user identifier (UID), and the
LanMan and NT encrypted passwords. There is also some other information in
this file that we do not need to concern ourselves with here.
</p><p>
@@ -88,17 +86,18 @@ as follows:
older <tt class="filename">smbpasswd</tt> file did. The extra information
enables new user account controls to be used.
</p></li><li><p>
- A corresponding Unix account, typically stored in
+ A corresponding UNIX account, typically stored in
<tt class="filename">/etc/passwd</tt>. Work is in progress to allow a
- simplified mode of operation that does not require Unix user accounts, but
+ simplified mode of operation that does not require UNIX user accounts, but
this may not be a feature of the early releases of Samba-3.
- </p></li></ul></div><ns7:p>
-</ns7:p><p>
+ </p></li></ul></div><p>
+</p><a class="indexterm" name="id2890757"></a><p>
There are three ways to create machine trust accounts:
</p><div class="itemizedlist"><ul type="disc"><li><p>
- Manual creation from the Unix/Linux command line. Here, both the Samba and
- corresponding Unix account are created by hand.
+ Manual creation from the UNIX/Linux command line. Here, both the Samba and
+ corresponding UNIX account are created by hand.
</p></li><li><p>
+ <a class="indexterm" name="id2890790"></a>
Using the MS Windows NT4 Server Manager (either from an NT4 Domain member
server, or using the Nexus toolkit available from the Microsoft web site.
This tool can be run from any MS Windows machine so long as the user is
@@ -106,28 +105,39 @@ There are three ways to create machine trust accounts:
</p></li><li><p>
&quot;On-the-fly&quot; creation. The Samba machine trust account is automatically
created by Samba at the time the client is joined to the domain.
- (For security, this is the recommended method.) The corresponding Unix
+ (For security, this is the recommended method.) The corresponding UNIX
account may be created automatically or manually.
- </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894963"></a>Manual Creation of Machine Trust Accounts</h3></div></div><div></div></div><p>
+ </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890821"></a>Manual Creation of Machine Trust Accounts</h3></div></div><div></div></div><p>
The first step in manually creating a machine trust account is to manually
-create the corresponding Unix account in <tt class="filename">/etc/passwd</tt>.
+create the corresponding UNIX account in <tt class="filename">/etc/passwd</tt>.
This can be done using <b class="command">vipw</b> or another 'add user' command
-that is normally used to create new Unix accounts. The following is an example for a Linux based Samba server:
-</p><p>
-<tt class="prompt">root# </tt><b class="userinput"><tt>/usr/sbin/useradd -g 100 -d /dev/null -c <i class="replaceable"><tt>&quot;machine nickname&quot;</tt></i> -s /bin/false <i class="replaceable"><tt>machine_name</tt></i>$ </tt></b>
+that is normally used to create new UNIX accounts. The following is an example for a Linux based Samba server:
+<a class="indexterm" name="id2890851"></a>
+<a class="indexterm" name="id2890859"></a>
+
+
</p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>/usr/sbin/useradd -g 100 -d /dev/null -c <i class="replaceable"><tt>&quot;machine nickname&quot;</tt></i> \
+ -s /bin/false <i class="replaceable"><tt>machine_name</tt></i>$ </tt></b>
+
<tt class="prompt">root# </tt><b class="userinput"><tt>passwd -l <i class="replaceable"><tt>machine_name</tt></i>$</tt></b>
+</pre><p>
</p><p>
+<a class="indexterm" name="id2890921"></a>
On *BSD systems, this can be done using the <b class="command">chpass</b> utility:
</p><p>
-<tt class="prompt">root# </tt><b class="userinput"><tt>chpass -a &quot;<i class="replaceable"><tt>machine_name</tt></i>$:*:101:100::0:0:Workstation <i class="replaceable"><tt>machine_name</tt></i>:/dev/null:/sbin/nologin&quot;</tt></b>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>chpass -a \
+ &quot;<i class="replaceable"><tt>machine_name</tt></i>$:*:101:100::0:0:Workstation <i class="replaceable"><tt>machine_name</tt></i>:/dev/null:/sbin/nologin&quot;</tt></b>
+</pre><p>
</p><p>
The <tt class="filename">/etc/passwd</tt> entry will list the machine name
with a &quot;$&quot; appended, won't have a password, will have a null shell and no
home directory. For example a machine named 'doppy' would have an
<tt class="filename">/etc/passwd</tt> entry like this:
</p><pre class="programlisting">
-doppy$:x:505:501:<i class="replaceable"><tt>machine_nickname</tt></i>:/dev/null:/bin/false
+doppy$:x:505:100:<i class="replaceable"><tt>machine_nickname</tt></i>:/dev/null:/bin/false
</pre><p>
Above, <i class="replaceable"><tt>machine_nickname</tt></i> can be any
descriptive name for the client, i.e., BasementComputer.
@@ -136,39 +146,44 @@ name of the client to be joined to the domain. The &quot;$&quot; must be
appended to the NetBIOS name of the client or Samba will not recognize
this as a machine trust account.
</p><p>
-Now that the corresponding Unix account has been created, the next step is to create
+Now that the corresponding UNIX account has been created, the next step is to create
the Samba account for the client containing the well-known initial
-machine trust account password. This can be done using the <a href="smbpasswd.8.html" target="_top"><b class="command">smbpasswd(8)</b></a> command
+machine trust account password. This can be done using the
+<b class="command">smbpasswd</b> command
as shown here:
-</p><ns7:p>
-</ns7:p><pre class="screen">
+</p><p>
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -a -m <i class="replaceable"><tt>machine_name</tt></i></tt></b>
-</pre><ns7:p>
-</ns7:p><p>
+</pre><p>
+</p><p>
where <i class="replaceable"><tt>machine_name</tt></i> is the machine's NetBIOS
name. The RID of the new machine account is generated from the UID of
-the corresponding Unix account.
+the corresponding UNIX account.
</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Join the client to the domain immediately</h3><p>
Manually creating a machine trust account using this method is the
equivalent of creating a machine trust account on a Windows NT PDC using
+ <a class="indexterm" name="id2891100"></a>
the <span class="application">Server Manager</span>. From the time at which the
account is created to the time which the client joins the domain and
changes the password, your domain is vulnerable to an intruder joining
your domain using a machine with the same NetBIOS name. A PDC inherently
trusts members of the domain and will serve out a large degree of user
information to such clients. You have been warned!
- </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896748"></a>Using NT4 Server Manager to Add Machine Accounts to the Domain</h3></div></div><div></div></div><p>
+ </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891126"></a>Using NT4 Server Manager to Add Machine Accounts to the Domain</h3></div></div><div></div></div><p>
If the machine from which you are trying to manage the domain is an
-<span class="application">MS Windows NT4 workstation</span>
+<span class="application">MS Windows NT4 workstation or MS Windows 200x / XP Professional</span>
then the tool of choice is the package called <b class="command">SRVTOOLS.EXE</b>.
-When executed in the target directory this will unpack
-<b class="command">SrvMge.exe</b> and <b class="command">UsrMgr.exe</b> (both are
-Domain Management tools for MS Windows NT4 workstation.
+When executed in the target directory this will unpack <b class="command">SrvMge.exe</b>
+and <b class="command">UsrMgr.exe</b> (both are domain management tools for MS Windows NT4 workstation).
+</p><p>
+If your workstation is a <span class="application">Microsoft Windows 9x/Me</span> family product
+ you should download the <b class="command">Nexus.exe</b> package from the Microsoft web site.
+When executed from the target directory this will unpack the same tools but for use on
+this platform.
</p><p>
-If your workstation is any other MS Windows product you should download the
-<b class="command">Nexus.exe</b> package from the Microsoft web site. When executed
-from the target directory this will unpack the same tools but for use on
-<span class="application">MS Windows 9x/Me/200x/XP</span>.
+Further information about these tools may be obtained from the following locations:
+<a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;173673" target="_top">http://support.microsoft.com/default.aspx?scid=kb;en-us;173673</a>
+<a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;172540" target="_top">http://support.microsoft.com/default.aspx?scid=kb;en-us;172540</a>
</p><p>
Launch the <b class="command">srvmgr.exe</b> (Server Manager for Domains) and follow these steps:
</p><div class="procedure"><p class="title"><b>Procedure7.1.Server Manager Account Machine Account Management</b></p><ol type="1"><li><p>
@@ -188,25 +203,21 @@ Launch the <b class="command">srvmgr.exe</b> (Server Manager for Domains) and fo
<span class="guilabel">Add NT Workstation of Server</span>, then
enter the machine name in the field provided, then click the
<span class="guibutton">Add</span> button.
- </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896944"></a>&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</h3></div></div><div></div></div><p>
+ </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891341"></a>&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</h3></div></div><div></div></div><p>
The second (and recommended) way of creating machine trust accounts is
simply to allow the Samba server to create them as needed when the client
is joined to the domain.
-</p><p>Since each Samba machine trust account requires a corresponding Unix account, a method
-for automatically creating the Unix account is usually supplied; this requires configuration of the
-<a href="smb.conf.5.html#ADDMACHINESCRIPT" target="_top">add machine script</a> option in
-<tt class="filename">smb.conf</tt>. This method is not required, however; corresponding Unix
+</p><p>Since each Samba machine trust account requires a corresponding UNIX account, a method
+for automatically creating the UNIX account is usually supplied; this requires configuration of the
+add machine script option in
+<tt class="filename">smb.conf</tt>. This method is not required, however; corresponding UNIX
accounts may also be created manually.
</p><p>
Below is an example for a RedHat Linux system.
-</p><pre class="programlisting">
-[global]
- # &lt;...remainder of parameters...&gt;
- add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2897000"></a>Making an MS Windows Workstation or Server a Domain Member</h3></div></div><div></div></div><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td># &lt;...remainder of parameters...&gt;</td></tr><tr><td><i class="parameter"><tt>add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u </tt></i></td></tr></table></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891414"></a>Making an MS Windows Workstation or Server a Domain Member</h3></div></div><div></div></div><p>
The procedure for making an MS Windows workstation of server a member of the domain varies
with the version of Windows:
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897012"></a>Windows 200x XP Professional</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891426"></a>Windows 200x XP Professional</h4></div></div><div></div></div><p>
When the user elects to make the client a domain member, Windows 200x prompts for
an account and password that has privileges to create machine accounts in the domain.
A Samba administrative account (i.e., a Samba account that has root privileges on the
@@ -220,13 +231,13 @@ with the version of Windows:
The name of the account that is used to create domain member machine accounts can be
anything the network administrator may choose. If it is other than <span class="emphasis"><em>root</em></span>
then this is easily mapped to root using the file pointed to be the <tt class="filename">smb.conf</tt> parameter
- <i class="parameter"><tt>username map = /etc/samba/smbusers</tt></i>.
+ <a class="indexterm" name="id2891478"></a><i class="parameter"><tt>username map</tt></i> = /etc/samba/smbusers.
</p><p>
The session key of the Samba administrative account acts as an
encryption key for setting the password of the machine trust
account. The machine trust account will be created on-the-fly, or
updated if it already exists.
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897081"></a>Windows NT4</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891503"></a>Windows NT4</h4></div></div><div></div></div><p>
If the machine trust account was created manually, on the
Identification Changes menu enter the domain name, but do not
check the box <span class="guilabel">Create a Computer Account in the Domain</span>.
@@ -239,8 +250,8 @@ with the version of Windows:
Domain</span>. In this case, joining the domain proceeds as above
for Windows 2000 (i.e., you must supply a Samba administrative account when
prompted).
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2897121"></a>Samba</h4></div></div><div></div></div><p>Joining a Samba client to a domain is documented in
- the <a href="domain-member.html#domain-member-server" title="Domain Member Server">Domain Member Server</a> section of this chapter chapter.
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891543"></a>Samba</h4></div></div><div></div></div><p>Joining a Samba client to a domain is documented in
+ <a href="domain-member.html#domain-member-server" title="Domain Member Server">the domain member chapter</a>.
</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="domain-member-server"></a>Domain Member Server</h2></div></div><div></div></div><p>
This mode of server operation involves the Samba machine being made a member
of a domain security context. This means by definition that all user
@@ -256,47 +267,39 @@ This can be LDAP (from OpenLDAP), or Sun's iPlanet, of NetWare Directory
Server, etc.
</em></span>
</p><p>
-Please refer to the <a href="samba-pdc.html" title="Chapter5.Domain Control">Domain Control chapter</a>
+Please refer to <a href="samba-pdc.html" title="Chapter5.Domain Control">the chapter on setting up a PDC</a>
for more information regarding how to create a domain
machine account for a domain member server as well as for information
regarding how to enable the Samba domain member machine to join the domain and
to be fully trusted by it.
-</p><div xmlns:ns8="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2897196"></a>Joining an NT4 type Domain with Samba-3</h3></div></div><div></div></div><ns8:p>
- </ns8:p><div class="table"><a name="id2897206"></a><p class="title"><b>Table7.1.Assumptions</b></p><table summary="Assumptions" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">NetBIOS name:</td><td align="left">SERV1</td></tr><tr><td align="left">Win2K/NT domain name:</td><td align="left">DOM</td></tr><tr><td align="left">Domain's PDC NetBIOS name:</td><td align="left">DOMPDC</td></tr><tr><td align="left">Domain's BDC NetBIOS names:</td><td align="left">DOMBDC1 and DOMBDC2</td></tr></tbody></table></div><ns8:p>
-</ns8:p><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891624"></a>Joining an NT4 type Domain with Samba-3</h3></div></div><div></div></div><p>
+ </p><div class="table"><a name="id2891635"></a><p class="title"><b>Table7.1.Assumptions</b></p><table summary="Assumptions" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">NetBIOS name:</td><td align="left">SERV1</td></tr><tr><td align="left">Win2K/NT domain name:</td><td align="left">MIDEARTH</td></tr><tr><td align="left">Domain's PDC NetBIOS name:</td><td align="left">DOMPDC</td></tr><tr><td align="left">Domain's BDC NetBIOS names:</td><td align="left">DOMBDC1 and DOMBDC2</td></tr></tbody></table></div><p>
+</p><p>
First, you must edit your <tt class="filename">smb.conf</tt> file to tell Samba it should
now use domain security.
</p><p>
-Change (or add) your <a href="smb.conf.5.html#SECURITY" target="_top">
-<i class="parameter"><tt>security</tt></i></a> line in the [global] section
+ Change (or add) your
+ <a class="indexterm" name="id2891708"></a><i class="parameter"><tt>security</tt></i> line in the [global] section
of your <tt class="filename">smb.conf</tt> to read:
-</p><ns8:p>
-</ns8:p><pre class="programlisting">
-security = domain
-</pre><ns8:p>
-</ns8:p><p>
-Next change the <a href="smb.conf.5.html#WORKGROUP" target="_top"><i class="parameter"><tt>
-workgroup</tt></i></a> line in the <i class="parameter"><tt>[global]</tt></i>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>security = domain</tt></i></td></tr></table><p>
+</p><p>
+Next change the <a class="indexterm" name="id2891752"></a><i class="parameter"><tt>workgroup</tt></i> line in the <i class="parameter"><tt>[global]</tt></i>
section to read:
-</p><ns8:p>
-</ns8:p><pre class="programlisting">
-workgroup = DOM
-</pre><ns8:p>
-</ns8:p><p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr></table><p>
+</p><p>
as this is the name of the domain we are joining.
</p><p>
-You must also have the parameter <a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">
-<i class="parameter"><tt>encrypt passwords</tt></i></a> set to <tt class="constant">yes
+You must also have the parameter
+<a class="indexterm" name="id2891802"></a><i class="parameter"><tt>encrypt passwords</tt></i> set to <tt class="constant">yes
</tt> in order for your users to authenticate to the NT PDC.
</p><p>
-Finally, add (or modify) a <a href="smb.conf.5.html#PASSWORDSERVER" target="_top">
-<i class="parameter"><tt>password server</tt></i></a> line in the [global]
+Finally, add (or modify) a <a class="indexterm" name="id2891826"></a><i class="parameter"><tt>password server</tt></i> line in the [global]
section to read:
-</p><ns8:p>
-</ns8:p><pre class="programlisting">
-password server = DOMPDC DOMBDC1 DOMBDC2
-</pre><ns8:p>
-</ns8:p><p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>password server = DOMPDC DOMBDC1 DOMBDC2</tt></i></td></tr></table><p>
+</p><p>
These are the primary and backup domain controllers Samba
will attempt to contact in order to authenticate users. Samba will
try to contact each of these servers in order, so you may want to
@@ -306,21 +309,19 @@ among domain controllers.
Alternatively, if you want smbd to automatically determine
the list of Domain controllers to use for authentication, you may
set this line to be:
-</p><ns8:p>
-</ns8:p><pre class="programlisting">
-password server = *
-</pre><ns8:p>
-</ns8:p><p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>password server = *</tt></i></td></tr></table><p>
+</p><p>
This method allows Samba to use exactly the same mechanism that NT does. This
method either broadcasts or uses a WINS database in order to
find domain controllers to authenticate against.
</p><p>
In order to actually join the domain, you must run this command:
-</p><ns8:p>
-</ns8:p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>net join -S DOMPDC -U<i class="replaceable"><tt>Administrator%password</tt></i></tt></b>
-</pre><ns8:p>
-</ns8:p><p>
+</p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>net rpc join -S DOMPDC -U<i class="replaceable"><tt>Administrator%password</tt></i></tt></b>
+</pre><p>
+</p><p>
If the <tt class="option">-S DOMPDC</tt> argument is not given then
the domain name will be obtained from <tt class="filename">smb.conf</tt>.
</p><p>
@@ -335,8 +336,8 @@ you will see the message:
<tt class="computeroutput">Joined domain DOM.</tt>
or <tt class="computeroutput">Joined 'SERV1' to realm 'MYREALM'</tt>
</p><p>
-in your terminal window. See the <a href="net.8.html" target="_top">
-net(8)</a> man page for more details.
+in your terminal window. See the
+<b class="command">net</b> man page for more details.
</p><p>
This process joins the server to the domain without having to create the machine
trust account on the PDC beforehand.
@@ -354,21 +355,25 @@ security for your system, and should be treated as carefully
as a shadow password file.
</p><p>
Finally, restart your Samba daemons and get ready for
-clients to begin using domain security!
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899872"></a>Why is this better than security = server?</h3></div></div><div></div></div><p>
+clients to begin using domain security! The way you can restart your
+samba daemons depends on your distribution, but in most cases running
+</p><pre class="screen">
+ <tt class="prompt">root# </tt>/etc/init.d/samba restart
+</pre><p>
+does the job.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892061"></a>Why is this better than security = server?</h3></div></div><div></div></div><p>
Currently, domain security in Samba doesn't free you from
-having to create local Unix users to represent the users attaching
+having to create local UNIX users to represent the users attaching
to your server. This means that if domain user <tt class="constant">DOM\fred
</tt> attaches to your domain security Samba server, there needs
-to be a local Unix user fred to represent that user in the Unix
+to be a local UNIX user fred to represent that user in the UNIX
filesystem. This is very similar to the older Samba security mode
-<a href="smb.conf.5.html#SECURITYEQUALSSERVER" target="_top">security = server</a>,
+security = server,
where Samba would pass through the authentication request to a Windows
NT server in the same way as a Windows 95 or Windows 98 server would.
</p><p>
-Please refer to the <a href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind">Winbind</a> chapter
-for information on a system to automatically
-assign UNIX uids and gids to Windows NT Domain users and groups.
+ Please refer to <a href="winbind.html" title="Chapter21.Winbind: Use of Domain Accounts">the chapter on winbind</a> for information on a system
+to automatically assign UNIX uids and gids to Windows NT Domain users and groups.
</p><p>
The advantage to domain-level security is that the
authentication in domain-level security is passed down the authenticated
@@ -378,11 +383,11 @@ exactly the same way NT servers do (i.e., you can add Samba servers into
a resource domain and have the authentication passed on from a resource
domain PDC to an account domain PDC).
</p><p>
-In addition, with <i class="parameter"><tt>security = server</tt></i> every Samba
+In addition, with <a class="indexterm" name="id2892116"></a><i class="parameter"><tt>security</tt></i> = server every Samba
daemon on a server has to keep a connection open to the
authenticating server for as long as that daemon lasts. This can drain
the connection resources on a Microsoft NT server and cause it to run
-out of available connections. With <i class="parameter"><tt>security = domain</tt></i>,
+out of available connections. With <a class="indexterm" name="id2892135"></a><i class="parameter"><tt>security</tt></i> = domain,
however, the Samba daemons connect to the PDC/BDC only for as long
as is necessary to authenticate the user, and then drop the connection,
thus conserving PDC connection resources.
@@ -396,44 +401,39 @@ Much of the text of this document
was first published in the Web magazine
<a href="http://www.linuxworld.com" target="_top">LinuxWorld</a> as the article <a href="http://www.linuxworld.com/linuxworld/lw-1998-10/lw-10-samba.html" target="_top">Doing
the NIS/NT Samba</a>.
-</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ads-member"></a>Samba ADS Domain Membership</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ads-member"></a>Samba ADS Domain Membership</h2></div></div><div></div></div><a class="indexterm" name="id2892203"></a><a class="indexterm" name="id2892211"></a><a class="indexterm" name="id2892223"></a><a class="indexterm" name="id2892231"></a><p>
This is a rough guide to setting up Samba 3.0 with Kerberos authentication against a
Windows2000 KDC. A familiarity with Kerberos is assumed.
-</p><div xmlns:ns9="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900011"></a>Setup your <tt class="filename">smb.conf</tt></h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892246"></a>Setup your <tt class="filename">smb.conf</tt></h3></div></div><div></div></div><p>
You must use at least the following 3 options in <tt class="filename">smb.conf</tt>:
-</p><pre class="programlisting">
- realm = your.kerberos.REALM
- security = ADS
- encrypt passwords = yes
-</pre><ns9:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>realm = your.kerberos.REALM</tt></i></td></tr><tr><td><i class="parameter"><tt>security = ADS</tt></i></td></tr><tr><td><i class="parameter"><tt>encrypt passwords = yes</tt></i></td></tr></table><p>
In case samba can't figure out your ads server using your realm name, use the
-<i class="parameter"><tt>ads server</tt></i> option in <tt class="filename">smb.conf</tt>:
-</ns9:p><pre class="programlisting">
- ads server = your.kerberos.server
-</pre><ns9:p>
-</ns9:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+<a class="indexterm" name="id2892305"></a><i class="parameter"><tt>ads server</tt></i> option in <tt class="filename">smb.conf</tt>:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>ads server = your.kerberos.server</tt></i></td></tr></table><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
You do <span class="emphasis"><em>not</em></span> need a smbpasswd file, and older clients will be authenticated as
-if <i class="parameter"><tt>security = domain</tt></i>, although it won't do any harm and
+if <a class="indexterm" name="id2892352"></a><i class="parameter"><tt>security</tt></i> = domain, although it won't do any harm and
allows you to have local users not in the domain. It is expected that the above
required options will change soon when active directory integration will get
better.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900094"></a>Setup your <tt class="filename">/etc/krb5.conf</tt></h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892373"></a>Setup your <tt class="filename">/etc/krb5.conf</tt></h3></div></div><div></div></div><p>
The minimal configuration for <tt class="filename">krb5.conf</tt> is:
</p><pre class="programlisting">
- [libdefaults]
- default_realm = YOUR.KERBEROS.REALM
+[libdefaults]
+ default_realm = YOUR.KERBEROS.REALM
[realms]
- YOUR.KERBEROS.REALM = {
- kdc = your.kerberos.server
+ YOUR.KERBEROS.REALM = {
+ kdc = your.kerberos.server
}
-</pre><p>
+</pre><a class="indexterm" name="id2892409"></a><p>
Test your config by doing a <b class="userinput"><tt>kinit
<i class="replaceable"><tt>USERNAME</tt></i>@<i class="replaceable"><tt>REALM</tt></i></tt></b> and
making sure that your password is accepted by the Win2000 KDC.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The realm must be uppercase or you will get <span class="errorname">Cannot find KDC for
-requested realm while getting initial credentials</span> error.
+requested realm while getting initial credentials</span> error (Kerberos
+is case-sensitive!).
</p></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Time between the two servers must be synchronized. You will get a
<span class="errorname">kinit(v5): Clock skew too great while getting initial credentials</span>
@@ -455,20 +455,20 @@ straight to <a href="domain-member.html#ads-test-smbclient" title="Testing with
<a href="domain-member.html#ads-create-machine-account" title="Create the computer account">Creating a computer account</a>
and <a href="domain-member.html#ads-test-server" title="Test your server setup">testing your servers</a>
is only needed if you want Kerberos support for <span class="application">smbd</span> and <span class="application">winbindd</span>.
-</p></div><div xmlns:ns10="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-create-machine-account"></a>Create the computer account</h3></div></div><div></div></div><ns10:p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-create-machine-account"></a>Create the computer account</h3></div></div><div></div></div><p>
As a user that has write permission on the Samba private directory
(usually root) run:
-</ns10:p><pre class="programlisting">
- <tt class="prompt">root# </tt><b class="userinput"><tt>net join -U Administrator%password</tt></b>
-</pre><ns10:p>
-</ns10:p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2900292"></a>Possible errors</h4></div></div><div></div></div><ns10:p>
-</ns10:p><div class="variablelist"><dl><dt><span class="term"><span class="errorname">ADS support not compiled in</span></span></dt><dd><p>Samba must be reconfigured (remove config.cache) and recompiled
+</p><pre class="screen">
+<tt class="prompt">root# </tt> <b class="userinput"><tt>net ads join -U Administrator%password</tt></b>
+</pre><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2892592"></a>Possible errors</h4></div></div><div></div></div><p>
+</p><div class="variablelist"><dl><dt><span class="term"><span class="errorname">ADS support not compiled in</span></span></dt><dd><p>Samba must be reconfigured (remove config.cache) and recompiled
(make clean all install) after the Kerberos libs and headers are installed.
- </p></dd><dt><span class="term"><span class="errorname">net join prompts for user name</span></span></dt><dd><p>You need to login to the domain using <b class="userinput"><tt>kinit
+ </p></dd><dt><span class="term"><span class="errorname">net ads join prompts for user name</span></span></dt><dd><p>You need to login to the domain using <b class="userinput"><tt>kinit
<i class="replaceable"><tt>USERNAME</tt></i>@<i class="replaceable"><tt>REALM</tt></i></tt></b>.
<i class="replaceable"><tt>USERNAME</tt></i> must be a user who has rights to add a machine
- to the domain. </p></dd></dl></div><ns10:p>
-</ns10:p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-server"></a>Test your server setup</h3></div></div><div></div></div><p>
+ to the domain. </p></dd></dl></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-server"></a>Test your server setup</h3></div></div><div></div></div><p>
If the join was successful, you will see a new computer account with the
NetBIOS name of your Samba server in Active Directory (in the &quot;Computers&quot;
folder under Users and Computers.
@@ -477,41 +477,41 @@ On a Windows 2000 client try <b class="userinput"><tt>net use * \\server\share</
be logged in with Kerberos without needing to know a password. If
this fails then run <b class="userinput"><tt>klist tickets</tt></b>. Did you get a ticket for the
server? Does it have an encoding type of DES-CBC-MD5 ?
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-smbclient"></a>Testing with <span class="application">smbclient</span></h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="ads-test-smbclient"></a>Testing with <span class="application">smbclient</span></h3></div></div><div></div></div><a class="indexterm" name="id2892719"></a><p>
On your Samba server try to login to a Win2000 server or your Samba
server using <span class="application">smbclient</span> and Kerberos. Use <span class="application">smbclient</span> as usual, but
-specify the <i class="parameter"><tt>-k</tt></i> option to choose Kerberos authentication.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900442"></a>Notes</h3></div></div><div></div></div><p>
+specify the <tt class="option">-k</tt> option to choose Kerberos authentication.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892751"></a>Notes</h3></div></div><div></div></div><p>
You must change administrator password at least once after DC
install, to create the right encoding types
</p><p>
W2k doesn't seem to create the _kerberos._udp and _ldap._tcp in
-their defaults DNS setup. Maybe fixed in service packs?
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2900464"></a>Common Errors</h2></div></div><div></div></div><p>
+their defaults DNS setup. Maybe this will be fixed later in service packs.
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892773"></a>Common Errors</h2></div></div><div></div></div><p>
In the process of adding / deleting / re-adding domain member machine accounts there are
many traps for the unwary player and there are many &#8220;<span class="quote">little</span>&#8221; things that can go wrong.
It is particularly interesting how often subscribers on the samba mailing list have concluded
after repeated failed attempts to add a machine account that it is necessary to &quot;re-install&quot;
MS Windows on t he machine. In truth, it is seldom necessary to reinstall because of this type
of problem. The real solution is often very simple, and with understanding of how MS Windows
-networking functions. easily overcome.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900491"></a>Can Not Add Machine Back to Domain</h3></div></div><div></div></div><p>
-<span class="emphasis"><em>Problem:</em></span> A Windows workstation was reinstalled. The original domain machine
+networking functions easy to overcome.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892816"></a>Can Not Add Machine Back to Domain</h3></div></div><div></div></div><p>
+&#8220;<span class="quote"> A Windows workstation was reinstalled. The original domain machine
account was deleted and added immediately. The workstation will not join the domain if I use
the same machine name. Attempts to add the machine fail with a message that the machine already
-exists on the network - I know it doesn't. Why is this failing?
+exists on the network - I know it doesn't. Why is this failing?</span>&#8221;
</p><p>
The original name is still in the NetBIOS name cache and must expire after machine account
deletion BEFORE adding that same name as a domain member again. The best advice is to delete
the old account and then to add the machine with a new name.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900523"></a>Adding Machine to Domain Fails</h3></div></div><div></div></div><p>
-Adding a Windows 200x or XP Professional machine to the Samba PDC Domain fails with a
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892848"></a>Adding Machine to Domain Fails</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">Adding a Windows 200x or XP Professional machine to the Samba PDC Domain fails with a
message that, <span class="errorname">The machine could not be added at this time, there is a network problem.
-Please try again later.</span> Why?
+ Please try again later.</span> Why?</span>&#8221;
</p><p>
-You should check that there is an <i class="parameter"><tt>add machine script</tt></i> in your <tt class="filename">smb.conf</tt>
+You should check that there is an <a class="indexterm" name="id2892875"></a><i class="parameter"><tt>add machine script</tt></i> in your <tt class="filename">smb.conf</tt>
file. If there is not, please add one that is appropriate for your OS platform. If a script
-has been defined you will need to debug it's operation. Increase the <i class="parameter"><tt>log level</tt></i>
+has been defined you will need to debug it's operation. Increase the <a class="indexterm" name="id2892900"></a><i class="parameter"><tt>log level</tt></i>
in the <tt class="filename">smb.conf</tt> file to level 10, then try to rejoin the domain. Check the logs to see which
operation is failing.
</p><p>
@@ -520,13 +520,15 @@ Possible causes include:
The script does not actually exist, or could not be located in the path specified.
</p><p>
<span class="emphasis"><em>Corrective Action:</em></span> Fix it. Make sure that when run manually
- that the script will add both the Unix system account _and_ the Samba SAM account.
+ that the script will add both the UNIX system account _and_ the Samba SAM account.
</p></li><li><p>
- The machine could not be added to the Unix system accounts file <tt class="filename">/etc/passwd</tt>
+ The machine could not be added to the UNIX system accounts file <tt class="filename">/etc/passwd</tt>
</p><p>
- <span class="emphasis"><em>Corrective Action:</em></span> Check that the machine name is a legal Unix
- system account name. ie: If the Unix utility <b class="command">useradd</b> is called
+ <span class="emphasis"><em>Corrective Action:</em></span> Check that the machine name is a legal UNIX
+ system account name. ie: If the UNIX utility <b class="command">useradd</b> is called
then make sure that the machine name you are trying to add can be added using this
tool. <b class="command">Useradd</b> on some systems will not allow any upper case characters
nor will it allow spaces in the name.
- </p></li></ul></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="samba-bdc.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="StandAloneServer.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter6.Backup Domain Control</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter8.Stand-Alone Servers</td></tr></table></div></body></html>
+ </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2892992"></a>I can't join a Windows 2003 PDC</h3></div></div><div></div></div><p>Windows 2003 requires SMB signing. Client side SMB signing has
+ only been implemented partially in Samba 3.0. Set <a class="indexterm" name="id2893004"></a><i class="parameter"><tt>client use spnego</tt></i> = no when communicating
+ with a windows 2003 server. </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="samba-bdc.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="StandAloneServer.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter6.Backup Domain Control</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter8.Stand-Alone Servers</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/groupmapping.html b/docs/htmldocs/groupmapping.html
index aebddeeb085..39d317e8cf4 100644
--- a/docs/htmldocs/groupmapping.html
+++ b/docs/htmldocs/groupmapping.html
@@ -1,44 +1,48 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter12.Mapping MS Windows and Unix Groups</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="passdb.html" title="Chapter11.Account Information Databases"><link rel="next" href="AccessControls.html" title="Chapter13.File, Directory and Share Access Controls"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter12.Mapping MS Windows and Unix Groups</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="passdb.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="AccessControls.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="groupmapping"></a>Chapter12.Mapping MS Windows and Unix Groups</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jean Franois</span> <span class="surname">Micouleau</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="groupmapping.html#id2916467">Features and Benefits</a></dt><dt><a href="groupmapping.html#id2916568">Discussion</a></dt><dd><dl><dt><a href="groupmapping.html#id2916756">Example Configuration</a></dt></dl></dd><dt><a href="groupmapping.html#id2916822">Configuration Scripts</a></dt><dd><dl><dt><a href="groupmapping.html#id2916836">Sample smb.conf add group script</a></dt><dt><a href="groupmapping.html#id2916903">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="groupmapping.html#id2916977">Common Errors</a></dt><dd><dl><dt><a href="groupmapping.html#id2916993">Adding Groups Fails</a></dt><dt><a href="groupmapping.html#id2917053">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter12.Mapping MS Windows and UNIX Groups</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="passdb.html" title="Chapter11.Account Information Databases"><link rel="next" href="AccessControls.html" title="Chapter13.File, Directory and Share Access Controls"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter12.Mapping MS Windows and UNIX Groups</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="passdb.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="AccessControls.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="groupmapping"></a>Chapter12.Mapping MS Windows and UNIX Groups</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jean Franois</span> <span class="surname">Micouleau</span></h3></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="groupmapping.html#id2903181">Features and Benefits</a></dt><dt><a href="groupmapping.html#id2903416">Discussion</a></dt><dd><dl><dt><a href="groupmapping.html#id2903652">Example Configuration</a></dt></dl></dd><dt><a href="groupmapping.html#id2903718">Configuration Scripts</a></dt><dd><dl><dt><a href="groupmapping.html#id2903732">Sample smb.conf add group script</a></dt><dt><a href="groupmapping.html#id2903817">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="groupmapping.html#id2903900">Common Errors</a></dt><dd><dl><dt><a href="groupmapping.html#id2903915">Adding Groups Fails</a></dt><dt><a href="groupmapping.html#id2903984">Adding MS Windows Groups to MS Windows Groups Fails</a></dt><dt><a href="groupmapping.html#id2904010">Adding Domain Users to the Power Users group</a></dt></dl></dd></dl></div><a class="indexterm" name="id2903109"></a><p>
Starting with Samba-3, new group mapping functionality is available to create associations
- between Windows group SIDs and UNIX groups. The <i class="parameter"><tt>groupmap</tt></i> subcommand
+ between Windows group SIDs and UNIX groups. The <b class="command">groupmap</b> subcommand
included with the <span class="application">net</span> tool can be used to manage these associations.
</p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
The first immediate reason to use the group mapping on a Samba PDC, is that
+ <a class="indexterm" name="id2903150"></a>
the <i class="parameter"><tt>domain admin group</tt></i> has been removed and should no longer
be specified in <tt class="filename">smb.conf</tt>. This parameter was used to give the listed users membership
in the <tt class="constant">Domain Admins</tt> Windows group which gave local admin rights on their workstations
(in default configurations).
- </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916467"></a>Features and Benefits</h2></div></div><div></div></div><p>
+ </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2903181"></a>Features and Benefits</h2></div></div><div></div></div><p>
Samba allows the administrator to create MS Windows NT4 / 200x group accounts and to
- arbitrarily associate them with Unix/Linux group accounts.
- </p><p>
- Group accounts can be managed using the MS Windows NT4 or MS Windows 200x MMC tools
- so long as appropriate interface scripts have been provided to <tt class="filename">smb.conf</tt>.
- </p><p>
+ arbitrarily associate them with UNIX/Linux group accounts.
+ </p><a class="indexterm" name="id2903197"></a><a class="indexterm" name="id2903205"></a><p>
+ Group accounts can be managed using the MS Windows NT4 or MS Windows 200x / XP Professional MMC tools.
+ Appropriate interface scripts should be provided in <tt class="filename">smb.conf</tt> if it is desired that UNIX / Linux system
+ accounts should be automatically created when these tools are used. In the absence of these scripts, and
+ so long as winbind is running, Samba accounts group accounts that are created using these tools will be
+ allocated UNIX UIDs/GIDs from the parameters set by the <a class="indexterm" name="id2903232"></a><i class="parameter"><tt>idmap uid</tt></i>/<a class="indexterm" name="id2903245"></a><i class="parameter"><tt>idmap gid</tt></i> settings
+ in the <tt class="filename">smb.conf</tt> file.
+ </p><div class="figure"><a name="idmap-group-diag"></a><p class="title"><b>Figure12.1.IDMAP groups</b></p><div class="mediaobject"><img src="projdoc/imagefiles/idmap-groups.png" width="270" alt="IDMAP groups"></div></div><a class="indexterm" name="id2903314"></a><a class="indexterm" name="id2903322"></a><p>
Administrators should be aware that where <tt class="filename">smb.conf</tt> group interface scripts make
- direct calls to the Unix/Linux system tools (eg: the shadow utilities, <b class="command">groupadd</b>,
- <b class="command">groupdel</b>, <b class="command">groupmod</b>) then the resulting Unix/Linux group names will be subject
+ direct calls to the UNIX/Linux system tools (eg: the shadow utilities, <b class="command">groupadd</b>,
+ <b class="command">groupdel</b>, <b class="command">groupmod</b>) then the resulting UNIX/Linux group names will be subject
to any limits imposed by these tools. If the tool does NOT allow upper case characters
or space characters, then the creation of an MS Windows NT4 / 200x style group of
- <i class="parameter"><tt>Engineering Managers</tt></i> will attempt to create an identically named
- Unix/Linux group, an attempt that will of course fail!
- </p><p>
+ <span class="emphasis"><em>Engineering Managers</em></span> will attempt to create an identically named
+ UNIX/Linux group, an attempt that will of course fail!
+ </p><a class="indexterm" name="id2903374"></a><a class="indexterm" name="id2903382"></a><p>
There are several possible work-arounds for the operating system tools limitation. One
- method is to use a script that generates a name for the Unix/Linux system group that
- fits the operating system limits, and that then just passes the Unix/Linux group id (GID)
+ method is to use a script that generates a name for the UNIX/Linux system group that
+ fits the operating system limits, and that then just passes the UNIX/Linux group id (GID)
back to the calling Samba interface. This will provide a dynamic work-around solution.
</p><p>
- Another work-around is to manually create a Unix/Linux group, then manually create the
+ Another work-around is to manually create a UNIX/Linux group, then manually create the
MS Windows NT4 / 200x group on the Samba server and then use the <b class="command">net groupmap</b>
tool to connect the two to each other.
- </p></div><div xmlns:ns27="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916568"></a>Discussion</h2></div></div><div></div></div><p>
+ </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2903416"></a>Discussion</h2></div></div><div></div></div><p>
When installing <span class="application">MS Windows NT4 / 200x</span> on a computer, the installation
program creates default users and groups, notably the <tt class="constant">Administrators</tt> group,
and gives that group privileges necessary privileges to perform essential system tasks.
eg: Ability to change the date and time or to kill (or close) any process running on the
local machine.
- </p><p>
+ </p><a class="indexterm" name="id2903445"></a><p>
The 'Administrator' user is a member of the 'Administrators' group, and thus inherits
'Administrators' group privileges. If a 'joe' user is created to be a member of the
'Administrator' group, 'joe' has exactly the same rights as 'Administrator'.
@@ -51,58 +55,58 @@
The following steps describe how to make Samba PDC users members of the 'Domain Admins' group?
</p><div class="orderedlist"><ol type="1"><li><p>
create a unix group (usually in <tt class="filename">/etc/group</tt>), let's call it domadm
- </p></li><li xmlns:ns25=""><p>add to this group the users that must be Administrators. For example
+ </p></li><li><p>add to this group the users that must be Administrators. For example
if you want joe, john and mary, your entry in <tt class="filename">/etc/group</tt> will
look like:
</p><pre class="programlisting">
domadm:x:502:joe,john,mary
- </pre><ns25:p>
- </ns25:p></li><li xmlns:ns26=""><p>
+ </pre><p>
+ </p></li><li><p>
Map this domadm group to the &quot;Domain Admins&quot; group by running the command:
- </p><ns26:p>
- </ns26:p><pre class="screen">
- <tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add ntgroup=&quot;Domain Admins&quot; unixgroup=domadm</tt></b>
- </pre><ns26:p>
- </ns26:p><p>
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add ntgroup=&quot;Domain Admins&quot; unixgroup=domadm</tt></b>
+</pre><p>
+ </p><a class="indexterm" name="id2903569"></a><p>
The quotes around &quot;Domain Admins&quot; are necessary due to the space in the group name.
Also make sure to leave no whitespace surrounding the equal character (=).
</p></li></ol></div><p>
Now joe, john and mary are domain administrators!
- </p><p>
+ </p><a class="indexterm" name="id2903594"></a><p>
It is possible to map any arbitrary UNIX group to any Windows NT4 / 200x group as well as
making any UNIX group a Windows domain group. For example, if you wanted to include a
UNIX group (e.g. acct) in a ACL on a local file or printer on a domain member machine,
you would flag that group as a domain group by running the following on the Samba PDC:
- </p><ns27:p>
- </ns27:p><pre class="screen">
- <tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add rid=1000 ntgroup=&quot;Accounting&quot; unixgroup=acct</tt></b>
- </pre><ns27:p>
- </ns27:p><p>
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>net groupmap add rid=1000 ntgroup=&quot;Accounting&quot; unixgroup=acct</tt></b>
+</pre><p>
+ </p><p>
Be aware that the RID parameter is a unsigned 32 bit integer that should
normally start at 1000. However, this rid must not overlap with any RID assigned
- to a user. Verifying this is done differently depending on on the passdb backend
+ to a user. Verifying this is done differently depending on the passdb backend
you are using. Future versions of the tools may perform the verification automatically,
but for now the burden is on you.
- </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916756"></a>Example Configuration</h3></div></div><div></div></div><p>
+ </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903652"></a>Example Configuration</h3></div></div><div></div></div><p>
You can list the various groups in the mapping database by executing
<b class="command">net groupmap list</b>. Here is an example:
- </p><ns27:p>
- </ns27:p><pre class="screen">
- <tt class="prompt">root# </tt> <b class="userinput"><tt>net groupmap list</tt></b>
- System Administrators (S-1-5-21-2547222302-1596225915-2414751004-1002) -&gt; sysadmin
- Domain Admins (S-1-5-21-2547222302-1596225915-2414751004-512) -&gt; domadmin
- Domain Users (S-1-5-21-2547222302-1596225915-2414751004-513) -&gt; domuser
- Domain Guests (S-1-5-21-2547222302-1596225915-2414751004-514) -&gt; domguest
- </pre><ns27:p>
- </ns27:p><p>
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt> <b class="userinput"><tt>net groupmap list</tt></b>
+System Administrators (S-1-5-21-2547222302-1596225915-2414751004-1002) -&gt; sysadmin
+Domain Admins (S-1-5-21-2547222302-1596225915-2414751004-512) -&gt; domadmin
+Domain Users (S-1-5-21-2547222302-1596225915-2414751004-513) -&gt; domuser
+Domain Guests (S-1-5-21-2547222302-1596225915-2414751004-514) -&gt; domguest
+</pre><p>
+ </p><p>
For complete details on <b class="command">net groupmap</b>, refer to the net(8) man page.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916822"></a>Configuration Scripts</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2903718"></a>Configuration Scripts</h2></div></div><div></div></div><p>
Everyone needs tools. Some of us like to create our own, others prefer to use canned tools
(ie: prepared by someone else for general use).
- </p><div xmlns:ns28="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916836"></a>Sample <tt class="filename">smb.conf</tt> add group script</h3></div></div><div></div></div><p>
- A script to great complying group names for use by the Samba group interfaces:
- </p><ns28:p>
-</ns28:p><div class="example"><a name="id2916858"></a><p class="title"><b>Example12.1.smbgrpadd.sh</b></p><pre class="programlisting">
+ </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903732"></a>Sample <tt class="filename">smb.conf</tt> add group script</h3></div></div><div></div></div><p>
+ A script to create complying group names for use by the Samba group interfaces:
+ </p><p>
+</p><div class="example"><a name="id2903754"></a><p class="title"><b>Example12.1.smbgrpadd.sh</b></p><pre class="programlisting">
#!/bin/bash
@@ -118,17 +122,15 @@ cat /etc/group.bak | sed s/smbtmpgrp00/$1/g &gt; /etc/group
# Now return the GID as would normally happen.
echo $thegid
exit 0
-</pre></div><ns28:p>
-</ns28:p><ns28:p>
+</pre></div><p>
+</p><p>
The <tt class="filename">smb.conf</tt> entry for the above script would look like:
- </ns28:p><pre class="programlisting">
- add group script = /path_to_tool/smbgrpadd.sh %g
- </pre><ns28:p>
- </ns28:p></div><div xmlns:ns29="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916903"></a>Script to configure Group Mapping</h3></div></div><div></div></div><p>
- In our example we have created a Unix/Linux group called <i class="parameter"><tt>ntadmin</tt></i>.
- Our script will create the additional groups <i class="parameter"><tt>Engineers, Marketoids, Gnomes</tt></i>:
- </p><ns29:p>
-</ns29:p><pre class="programlisting">
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>add group script = /path_to_tool/smbgrpadd.sh %g</tt></i></td></tr></table><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903817"></a>Script to configure Group Mapping</h3></div></div><div></div></div><p>
+ In our example we have created a UNIX/Linux group called <span class="emphasis"><em>ntadmin</em></span>.
+ Our script will create the additional groups <span class="emphasis"><em>Orks</em></span>, <span class="emphasis"><em>Elves</em></span>, <span class="emphasis"><em>Gnomes</em></span>:
+ </p><p>
+</p><pre class="programlisting">
#!/bin/bash
net groupmap modify ntgroup=&quot;Domain Admins&quot; unixgroup=ntadmin
@@ -144,36 +146,51 @@ net groupmap modify ntgroup=&quot;Print Operators&quot; unixgroup=lp
net groupmap modify ntgroup=&quot;Replicators&quot; unixgroup=daemon
net groupmap modify ntgroup=&quot;Power Users&quot; unixgroup=sys
-#groupadd Engineers
-#groupadd Marketoids
-#groupadd Gnomes
+groupadd Orks
+groupadd Elves
+groupadd Gnomes
-#net groupmap add ntgroup=&quot;Engineers&quot; unixgroup=Engineers type=d
-#net groupmap add ntgroup=&quot;Marketoids&quot; unixgroup=Marketoids type=d
-#net groupmap add ntgroup=&quot;Gnomes&quot; unixgroup=Gnomes type=d
-</pre><ns29:p>
-</ns29:p><p>
+net groupmap add ntgroup=&quot;Orks&quot; unixgroup=Orks type=d
+net groupmap add ntgroup=&quot;Elves&quot; unixgroup=Elves type=d
+net groupmap add ntgroup=&quot;Gnomes&quot; unixgroup=Gnomes type=d
+</pre><p>
+</p><p>
Of course it is expected that the administrator will modify this to suit local needs.
For information regarding the use of the <b class="command">net groupmap</b> tool please
refer to the man page.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916977"></a>Common Errors</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2903900"></a>Common Errors</h2></div></div><div></div></div><p>
At this time there are many little surprises for the unwary administrator. In a real sense
it is imperative that every step of automated control scripts must be carefully tested
manually before putting them into active service.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916993"></a>Adding Groups Fails</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903915"></a>Adding Groups Fails</h3></div></div><div></div></div><p>
This is a common problem when the <b class="command">groupadd</b> is called directly
- by the Samba interface script for the <i class="parameter"><tt>add group script</tt></i> in
+ by the Samba interface script for the <a class="indexterm" name="id2903935"></a><i class="parameter"><tt>add group script</tt></i> in
the <tt class="filename">smb.conf</tt> file.
</p><p>
The most common cause of failure is an attempt to add an MS Windows group account
that has either an upper case character and/or a space character in it.
</p><p>
There are three possible work-arounds. Firstly, use only group names that comply
- with the limitations of the Unix/Linux <b class="command">groupadd</b> system tool.
+ with the limitations of the UNIX/Linux <b class="command">groupadd</b> system tool.
The second involves use of the script mentioned earlier in this chapter, and the
- third option is to manually create a Unix/Linux group account that can substitute
+ third option is to manually create a UNIX/Linux group account that can substitute
for the MS Windows group name, then use the procedure listed above to map that group
to the MS Windows group.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917053"></a>Adding MS Windows Groups to MS Windows Groups Fails</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2903984"></a>Adding MS Windows Groups to MS Windows Groups Fails</h3></div></div><div></div></div><a class="indexterm" name="id2903992"></a><p>
Samba-3 does NOT support nested groups from the MS Windows control environment.
- </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="passdb.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="AccessControls.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter11.Account Information Databases</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter13.File, Directory and Share Access Controls</td></tr></table></div></body></html>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2904010"></a>Adding <span class="emphasis"><em>Domain Users</em></span> to the <span class="emphasis"><em>Power Users</em></span> group</h3></div></div><div></div></div><p>&#8220;<span class="quote">
+ What must I do to add Domain Users to the Power Users group?
+ </span>&#8221;</p><p>
+ The Power Users group is a group that is local to each Windows
+ 200x / XP Professional workstation. You can not add the Domain Users group to the Power Users
+ group automatically, this must be done on each workstation by logging in as the local workstation
+ <span class="emphasis"><em>administrator</em></span> and then using click on Start / Control Panel / Users and Passwords
+ now click on the 'Advanced' tab, then on the 'Advanced' Button.
+ </p><a class="indexterm" name="id2904048"></a><p>
+ Now click on 'Groups', then double click on 'Power Users'. This will launch the panel to add users
+ or groups to the local machine 'Power Uses' group. Click on the 'Add' button, select the domain
+ from which the 'Domain Users' group is to be added, double click on the 'Domain Users' group, then
+ click on the 'Ok' button. Note: If a logon box is presented during this process please remember to
+ enter the connect as DOMAIN\UserName. ie: For the domain MIDEARTH and the user 'root' enter
+ MIDEARTH\root.
+ </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="passdb.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="AccessControls.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter11.Account Information Databases</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter13.File, Directory and Share Access Controls</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/install.html b/docs/htmldocs/install.html
index d602d123c77..02264c558d1 100644
--- a/docs/htmldocs/install.html
+++ b/docs/htmldocs/install.html
@@ -1,49 +1,39 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter2.How to Install and Test SAMBA</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="IntroSMB.html" title="Chapter1.Introduction to Samba"><link rel="next" href="FastStart.html" title="Chapter3.Fast Start for the Impatient"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter2.How to Install and Test SAMBA</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="IntroSMB.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="FastStart.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="install"></a>Chapter2.How to Install and Test SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Karl</span> <span class="surname">Auer</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="install.html#id2885039">Obtaining and installing samba</a></dt><dt><a href="install.html#id2885081">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="install.html#id2884654">Example Configuration</a></dt><dt><a href="install.html#id2884797">SWAT</a></dt></dl></dd><dt><a href="install.html#id2884842">Try listing the shares available on your
- server</a></dt><dt><a href="install.html#id2884347">Try connecting with the unix client</a></dt><dt><a href="install.html#id2884450">Try connecting from a DOS, WfWg, Win9x, WinNT,
- Win2k, OS/2, etc... client</a></dt><dt><a href="install.html#id2884510">What If Things Don't Work?</a></dt><dt><a href="install.html#id2884540">Common Errors</a></dt><dd><dl><dt><a href="install.html#id2884553">Why are so many smbd processes eating memory?</a></dt><dt><a href="install.html#id2885931">I'm getting &quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot; in the logs</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885039"></a>Obtaining and installing samba</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter2.How to Install and Test SAMBA</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="introduction.html" title="PartI.General Installation"><link rel="previous" href="IntroSMB.html" title="Chapter1.Introduction to Samba"><link rel="next" href="FastStart.html" title="Chapter3.Fast Start for the Impatient"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter2.How to Install and Test SAMBA</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="IntroSMB.html">Prev</a></td><th width="60%" align="center">PartI.General Installation</th><td width="20%" align="right"><a accesskey="n" href="FastStart.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="install"></a>Chapter2.How to Install and Test SAMBA</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Karl</span> <span class="surname">Auer</span></h3></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="install.html#id2883917">Obtaining and installing samba</a></dt><dt><a href="install.html#id2883961">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="install.html#id2883999">Example Configuration</a></dt><dt><a href="install.html#id2884191">SWAT</a></dt></dl></dd><dt><a href="install.html#id2884236">Try listing the shares available on your
+ server</a></dt><dt><a href="install.html#id2884294">Try connecting with the unix client</a></dt><dt><a href="install.html#id2884411">Try connecting from another SMB client</a></dt><dt><a href="install.html#id2884494">What If Things Don't Work?</a></dt><dt><a href="install.html#id2884528">Common Errors</a></dt><dd><dl><dt><a href="install.html#id2884539">Large number of smbd processes</a></dt><dt><a href="install.html#id2884640">&quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot;</a></dt><dt><a href="install.html#id2884661">&quot;The network name cannot be found&quot;</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883917"></a>Obtaining and installing samba</h2></div></div><div></div></div><p>
Binary packages of samba are included in almost any Linux or
- Unix distribution. There are also some packages available at
+ UNIX distribution. There are also some packages available at
<a href="http://samba.org/" target="_top">the samba homepage</a>.
- </p><p>If you need to compile samba from source, check the
- <a href="compiling.html" title="Chapter36.How to compile SAMBA">appropriate appendix chapter</a>.</p><p>If you have already installed samba, or if your operating system
+ </p><p>If you need to compile samba from source, check
+ <a href="compiling.html" title="Chapter36.How to compile Samba">the chapter about compiling samba from scratch</a>.</p><p>If you have already installed samba, or if your operating system
was pre-installed with samba, then you may not need to bother with this
chapter. On the other hand, you may want to read this chapter anyhow
- for information about updating samba.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2885081"></a>Configuring samba (smb.conf)</h2></div></div><div></div></div><p>
+ for information about updating samba.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2883961"></a>Configuring samba (smb.conf)</h2></div></div><div></div></div><p>
Samba's configuration is stored in the <tt class="filename">smb.conf</tt> file,
that usually resides in <tt class="filename">/etc/samba/smb.conf</tt>
or <tt class="filename">/usr/local/samba/lib/smb.conf</tt>. You can either
edit this file yourself or do it using one of the many graphical
tools that are available, such as the web-based interface swat, that
is included with samba.
- </p><div xmlns:ns2="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884654"></a>Example Configuration</h3></div></div><div></div></div><p>
+ </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2883999"></a>Example Configuration</h3></div></div><div></div></div><p>
There are sample configuration files in the examples subdirectory in the
distribution. I suggest you read them carefully so you can see how the options
go together in practice. See the man page for all the options.
</p><p>
The simplest useful configuration file would be something like this:
- </p><ns2:p>
- </ns2:p><pre class="programlisting">
- [global]
- workgroup = MYGROUP
-
- [homes]
- guest ok = no
- read only = no
- </pre><ns2:p>
- </ns2:p><p>
+ </p><p>
+ </p><div class="example"><a name="id2884022"></a><p class="title"><b>Example2.1.Simplest possible smb.conf file</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[homes]</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = no</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = no</tt></i></td></tr></table></div><p>
+ </p><p>
This will allow connections by anyone with an account on the server, using either
- their login name or &quot;<i class="parameter"><tt>homes</tt></i>&quot; as the service name.
+ their login name or <i class="parameter"><tt>homes</tt></i>&quot; as the service name.
(Note that the workgroup that Samba must also be set.)
</p><p>
- Make sure you put the <tt class="filename">smb.conf</tt> file in the same place
- you specified in the <tt class="filename">Makefile</tt> (the default is to
- look for it in <tt class="filename">/usr/local/samba/lib/</tt>).
+ Make sure you put the <tt class="filename">smb.conf</tt> file in the correct place
+ (usually in <tt class="filename">/etc/samba</tt>).
</p><p>
For more information about security settings for the
- <i class="parameter"><tt>[homes]</tt></i> share please refer to the chapter
- <a href="securing-samba.html" title="Chapter15.Securing Samba">Securing Samba</a>.
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884744"></a>Test your config file with <b class="command">testparm</b></h4></div></div><div></div></div><p>
+ <i class="parameter"><tt>[homes]</tt></i> share please refer to
+ <a href="securing-samba.html" title="Chapter15.Securing Samba">&quot;Securing Samba&quot;</a>.
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2884137"></a>Test your config file with <b class="command">testparm</b></h4></div></div><div></div></div><p>
It's important that you test the validity of your <tt class="filename">smb.conf</tt>
file using the <span class="application">testparm</span> program. If testparm runs OK
then it will list the loaded services. If not it will give an error message.
@@ -51,7 +41,7 @@
Make sure it runs OK and that the services look reasonable before proceeding.
</p><p>
Always run testparm again when you change <tt class="filename">smb.conf</tt>!
- </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884797"></a>SWAT</h3></div></div><div></div></div><p>
+ </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884191"></a>SWAT</h3></div></div><div></div></div><p>
SWAT is a web-based interface that helps you configure samba.
SWAT might not be available in the samba package on your platform,
but in a separate package. Please read the swat manpage
@@ -67,9 +57,10 @@
machine but connecting from a remote machine leaves your
connection open to password sniffing as passwords will be sent
in the clear over the wire.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884842"></a>Try listing the shares available on your
- server</h2></div></div><div></div></div><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient -L
- <i class="replaceable"><tt>yourhostname</tt></i></tt></b></p><p>You should get back a list of shares available on
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884236"></a>Try listing the shares available on your
+ server</h2></div></div><div></div></div><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>smbclient -L <i class="replaceable"><tt>yourhostname</tt></i></tt></b>
+</pre><p>You should get back a list of shares available on
your server. If you don't then something is incorrectly setup.
Note that this method can also be used to see what shares
are available on other LanManager clients (such as WfWg).</p><p>If you choose user level security then you may find
@@ -77,68 +68,31 @@
See the <b class="command">smbclient</b> man page for details. (you
can force it to list the shares without a password by
adding the option -U% to the command line. This will not work
- with non-Samba servers)</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884347"></a>Try connecting with the unix client</h2></div></div><div></div></div><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient <i class="replaceable"><tt>
- //yourhostname/aservice</tt></i></tt></b></p><p>Typically the <i class="replaceable"><tt>yourhostname</tt></i>
+ with non-Samba servers)</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884294"></a>Try connecting with the unix client</h2></div></div><div></div></div><p>
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>smbclient <i class="replaceable"><tt> //yourhostname/aservice</tt></i></tt></b>
+</pre><p>Typically the <i class="replaceable"><tt>yourhostname</tt></i>
would be the name of the host where you installed <span class="application">smbd</span>.
The <i class="replaceable"><tt>aservice</tt></i> is
any service you have defined in the <tt class="filename">smb.conf</tt>
file. Try your user name if you just have a <i class="parameter"><tt>[homes]</tt></i>
section
in <tt class="filename">smb.conf</tt>.</p><p>For example if your unix host is <i class="replaceable"><tt>bambi</tt></i>
- and your login name is <i class="replaceable"><tt>fred</tt></i> you would type:</p><p><tt class="prompt">$ </tt><b class="userinput"><tt>smbclient //<i class="replaceable"><tt>bambi</tt></i>/<i class="replaceable"><tt>fred</tt></i>
- </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884450"></a>Try connecting from a DOS, WfWg, Win9x, WinNT,
- Win2k, OS/2, etc... client</h2></div></div><div></div></div><p>Try mounting disks. eg:</p><p><tt class="prompt">C:\WINDOWS\&gt; </tt><b class="userinput"><tt>net use d: \\servername\service
- </tt></b></p><p>Try printing. eg:</p><p><tt class="prompt">C:\WINDOWS\&gt; </tt><b class="userinput"><tt>net use lpt1:
- \\servername\spoolservice</tt></b></p><p><tt class="prompt">C:\WINDOWS\&gt; </tt><b class="userinput"><tt>print filename
- </tt></b></p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884510"></a>What If Things Don't Work?</h2></div></div><div></div></div><p>Then you might read the file chapter
- <a href="diagnosis.html" title="Chapter33.The Samba checklist">Diagnosis</a> and the
- FAQ. If you are still stuck then try to follow
- the <a href="problems.html" title="Chapter34.Analysing and solving samba problems">Analysing and Solving Problems chapter</a>
+ and your login name is <i class="replaceable"><tt>fred</tt></i> you would type:</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>smbclient //<i class="replaceable"><tt>bambi</tt></i>/<i class="replaceable"><tt>fred</tt></i></tt></b>
+</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884411"></a>Try connecting from another SMB client</h2></div></div><div></div></div><p>Try mounting disks. from a DOS, Windows or OS/2 client, eg:</p><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>net use d: \\servername\service</tt></b>
+</pre><p>Try printing. eg:</p><p>
+</p><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>net use lpt1: \\servername\spoolservice</tt></b>
+</pre><p>
+</p><pre class="screen"><tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>print filename</tt></b>
+</pre></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884494"></a>What If Things Don't Work?</h2></div></div><div></div></div><p>Then you might read the file chapter <a href="diagnosis.html" title="Chapter33.The Samba checklist">diagnosis</a>
+ and the FAQ. If you are still stuck then refer to <a href="problems.html" title="Chapter34.Analysing and solving samba problems">&quot;Analysing and solving problems&quot;</a>.
Samba has been successfully installed at thousands of sites worldwide,
- so maybe someone else has hit your problem and has overcome it. </p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884540"></a>Common Errors</h2></div></div><div></div></div><p>
+ so maybe someone else has hit your problem and has overcome it.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2884528"></a>Common Errors</h2></div></div><div></div></div><p>
The following questions and issues get raised on the samba mailing list over and over again.
-</p><div xmlns:ns3="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884553"></a>Why are so many smbd processes eating memory?</h3></div></div><div></div></div><p>
-&#8220;<span class="quote">
-Site that is running Samba on an AIX box. They are sharing out about 2 terabytes using samba.
-Samba was installed using smitty and the binaries. We seem to be experiencing a memory problem
-with this box. When I do a <b class="command">svmon -Pu</b> the monitoring program shows that <span class="application">smbd</span> has several
-processes of smbd running:
-</span>&#8221;
-</p><p>
- &#8220;<span class="quote">
-Is samba suppose to start this many different smbd processes? Or does it run as one smbd process? Also
-is it normal for it to be taking up this much memory?
-</span>&#8221;
-</p><ns3:p>
-</ns3:p><pre class="screen">
-Inuse * 4096 = amount of memory being used by this process
-
- Pid Command Inuse Pin Pgsp Virtual 64-bit Mthrd
- 20950 smbd 33098 1906 181 5017 N N
- 22262 smbd 9104 1906 5410
- 21060 smbd 9048 1906 181 5479 N N
- 25972 smbd 8678 1906 181 5109 N N
- 24524 smbd 8674 1906 181 5105 N N
- 19262 smbd 8582 1906 181 5013 N N
- 20722 smbd 8572 1906 181 5003 N N
- 21454 smbd 8572 1906 181 5003 N N
- 28946 smbd 8567 1906 181 4996 N N
- 24076 smbd 8566 1906 181 4996 N N
- 20138 smbd 8566 1906 181 4996 N N
- 17608 smbd 8565 1906 181 4996 N N
- 21820 smbd 8565 1906 181 4996 N N
- 26940 smbd 8565 1906 181 4996 N N
- 19884 smbd 8565 1906 181 4996 N N
- 9912 smbd 8565 1906 181 4996 N N
- 25800 smbd 8564 1906 181 4995 N N
- 20452 smbd 8564 1906 181 4995 N N
- 18592 smbd 8562 1906 181 4993 N N
- 28216 smbd 8521 1906 181 4954 N N
- 19110 smbd 8404 1906 181 4862 N N
-
- Total memory used: 841,592,832 bytes
-</pre><ns3:p>
-</ns3:p><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884539"></a>Large number of smbd processes</h3></div></div><div></div></div><p>
Samba consists on three core programs:
<span class="application">nmbd</span>, <span class="application">smbd</span>, <span class="application">winbindd</span>. <span class="application">nmbd</span> is the name server message daemon,
<span class="application">smbd</span> is the server message daemon, <span class="application">winbindd</span> is the daemon that
@@ -153,4 +107,9 @@ connection made. That is why you are seeing so many of them, one (1) per client
</p><p>
<span class="application">winbindd</span> will run as one or two daemons, depending on whether or not it is being
run in &quot;split mode&quot; (in which case there will be two instances).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2885931"></a>I'm getting &quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot; in the logs</h3></div></div><div></div></div><p>Your loopback device isn't working correctly. Make sure it's running. </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="IntroSMB.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="introduction.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="FastStart.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter1.Introduction to Samba</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter3.Fast Start for the Impatient</td></tr></table></div></body></html>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884640"></a>&quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot;</h3></div></div><div></div></div><p>Your loopback device isn't working correctly. Make sure it's configured properly. The loopback device is an internal (virtual) network device with
+ the ip address 127.0.0.1. Read your OS documentation for details
+ on how to configure the loopback on your system.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2884661"></a>&quot;<span class="errorname">The network name cannot be found</span>&quot;</h3></div></div><div></div></div><p>
+ This error can be caused by one of these misconfigurations:
+ </p><div class="itemizedlist"><ul type="disc"><li><p>You specified an nonexisting <a class="indexterm" name="id2884686"></a><i class="parameter"><tt>path</tt></i> for the share in <tt class="filename">smb.conf</tt> </p></li><li><p>The user you are trying to access the share with does not
+ have sufficient permissions to access the <a class="indexterm" name="id2884714"></a><i class="parameter"><tt>path</tt></i> for the share. Both read (r) and access (x) should be possible.</p></li><li><p>The share you are trying to access does not exist.</p></li></ul></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="IntroSMB.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="introduction.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="FastStart.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter1.Introduction to Samba</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter3.Fast Start for the Impatient</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/integrate-ms-networks.html b/docs/htmldocs/integrate-ms-networks.html
index 07331fd9d03..73971d2a727 100644
--- a/docs/htmldocs/integrate-ms-networks.html
+++ b/docs/htmldocs/integrate-ms-networks.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter26.Integrating MS Windows networks with Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="pam.html" title="Chapter25.PAM based Distributed Authentication"><link rel="next" href="unicode.html" title="Chapter27.Unicode/Charsets"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter26.Integrating MS Windows networks with Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="pam.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="unicode.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="integrate-ms-networks"></a>Chapter26.Integrating MS Windows networks with Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> (Jan 01 2001) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="integrate-ms-networks.html#id2997933">Features and Benefits</a></dt><dt><a href="integrate-ms-networks.html#id2997958">Background Information</a></dt><dt><a href="integrate-ms-networks.html#id2998003">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2998054">/etc/hosts</a></dt><dt><a href="integrate-ms-networks.html#id2998179">/etc/resolv.conf</a></dt><dt><a href="integrate-ms-networks.html#id2996329">/etc/host.conf</a></dt><dt><a href="integrate-ms-networks.html#id2996371">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2996460">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2996585">The NetBIOS Name Cache</a></dt><dt><a href="integrate-ms-networks.html#id2996630">The LMHOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2996744">HOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2996776">DNS Lookup</a></dt><dt><a href="integrate-ms-networks.html#id2996801">WINS Lookup</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2996872">Common Errors</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2996887">My Boomerang Won't Come Back</a></dt><dt><a href="integrate-ms-networks.html#id2996919">Very Slow Network Connections</a></dt><dt><a href="integrate-ms-networks.html#id2996970">Samba server name change problem</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter26.Integrating MS Windows networks with Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="pam.html" title="Chapter25.PAM based Distributed Authentication"><link rel="next" href="unicode.html" title="Chapter27.Unicode/Charsets"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter26.Integrating MS Windows networks with Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="pam.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="unicode.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="integrate-ms-networks"></a>Chapter26.Integrating MS Windows networks with Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate"> (Jan 01 2001) </p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="integrate-ms-networks.html#id2951812">Features and Benefits</a></dt><dt><a href="integrate-ms-networks.html#id2951838">Background Information</a></dt><dt><a href="integrate-ms-networks.html#id2951903">Name Resolution in a pure UNIX/Linux world</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2951960">/etc/hosts</a></dt><dt><a href="integrate-ms-networks.html#id2952110">/etc/resolv.conf</a></dt><dt><a href="integrate-ms-networks.html#id2952153">/etc/host.conf</a></dt><dt><a href="integrate-ms-networks.html#id2952204">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2952319">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2952629">The NetBIOS Name Cache</a></dt><dt><a href="integrate-ms-networks.html#id2952692">The LMHOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2952854">HOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2952886">DNS Lookup</a></dt><dt><a href="integrate-ms-networks.html#id2952918">WINS Lookup</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2953036">Common Errors</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2953052">Pinging works only in one way</a></dt><dt><a href="integrate-ms-networks.html#id2953086">Very Slow Network Connections</a></dt><dt><a href="integrate-ms-networks.html#id2953137">Samba server name change problem</a></dt></dl></dd></dl></div><a class="indexterm" name="id2951782"></a><p>
This section deals with NetBIOS over TCP/IP name to IP address resolution. If
your MS Windows clients are NOT configured to use NetBIOS over TCP/IP then this
section does not apply to your installation. If your installation involves use of
@@ -10,15 +9,15 @@ NetBIOS over TCP/IP then this section may help you to resolve networking problem
to NOT run NetBEUI at all. Note also that there is NO such thing as
NetBEUI over TCP/IP - the existence of such a protocol is a complete
and utter mis-apprehension.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997933"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2951812"></a>Features and Benefits</h2></div></div><div></div></div><p>
Many MS Windows network administrators have never been exposed to basic TCP/IP
-networking as it is implemented in a Unix/Linux operating system. Likewise, many Unix and
+networking as it is implemented in a UNIX/Linux operating system. Likewise, many UNIX and
Linux administrators have not been exposed to the intricacies of MS Windows TCP/IP based
networking (and may have no desire to be either).
</p><p>
This chapter gives a short introduction to the basics of how a name can be resolved to
it's IP address for each operating system environment.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997958"></a>Background Information</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2951838"></a>Background Information</h2></div></div><div></div></div><p>
Since the introduction of MS Windows 2000 it is possible to run MS Windows networking
without the use of NetBIOS over TCP/IP. NetBIOS over TCP/IP uses UDP port 137 for NetBIOS
name resolution and uses TCP port 139 for NetBIOS session services. When NetBIOS over
@@ -31,17 +30,19 @@ Name Service or WINS), TCP port 139 AND TCP port 445 (for actual file and print
</p></div><p>
When NetBIOS over TCP/IP is disabled the use of DNS is essential. Most installations that
disable NetBIOS over TCP/IP today use MS Active Directory Service (ADS). ADS requires
+<a class="indexterm" name="id2951878"></a>
Dynamic DNS with Service Resource Records (SRV RR) and with Incremental Zone Transfers (IXFR).
+<a class="indexterm" name="id2951891"></a>
Use of DHCP with ADS is recommended as a further means of maintaining central control
over client workstation network configuration.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2998003"></a>Name Resolution in a pure Unix/Linux world</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2951903"></a>Name Resolution in a pure UNIX/Linux world</h2></div></div><div></div></div><p>
The key configuration files covered in this section are:
-</p><div class="itemizedlist"><ul type="disc"><li><p><tt class="filename">/etc/hosts</tt></p></li><li><p><tt class="filename">/etc/resolv.conf</tt></p></li><li><p><tt class="filename">/etc/host.conf</tt></p></li><li><p><tt class="filename">/etc/nsswitch.conf</tt></p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2998054"></a><tt class="filename">/etc/hosts</tt></h3></div></div><div></div></div><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p><tt class="filename">/etc/hosts</tt></p></li><li><p><tt class="filename">/etc/resolv.conf</tt></p></li><li><p><tt class="filename">/etc/host.conf</tt></p></li><li><p><tt class="filename">/etc/nsswitch.conf</tt></p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951960"></a><tt class="filename">/etc/hosts</tt></h3></div></div><div></div></div><p>
Contains a static list of IP addresses and names.
eg:
-</p><pre class="screen">
- 127.0.0.1 localhost localhost.localdomain
- 192.168.1.1 bigbox.caldera.com bigbox alias4box
+</p><pre class="programlisting">
+127.0.0.1 localhost localhost.localdomain
+192.168.1.1 bigbox.caldera.com bigbox alias4box
</pre><p>
The purpose of <tt class="filename">/etc/hosts</tt> is to provide a
name resolution mechanism so that uses do not need to remember
@@ -52,7 +53,7 @@ layer communicate not via IP addresses but rather using the Media
Access Control address, or MAC address. IP addresses are currently
32 bits in length and are typically presented as four (4) decimal
numbers that are separated by a dot (or period). eg: 168.192.1.1.
-</p><p>
+</p><a class="indexterm" name="id2952009"></a><p>
MAC Addresses use 48 bits (or 6 bytes) and are typically represented
as two digit hexadecimal numbers separated by colons. eg:
40:8e:0a:12:34:56
@@ -85,15 +86,15 @@ MAC addresses only; their own unique address and the address
ff:ff:ff:ff:ff:ff. The reply packet from an ARP request will
contain the MAC address and the primary IP address for each
interface.
-</p><p>
+</p><a class="indexterm" name="id2952082"></a><p>
The <tt class="filename">/etc/hosts</tt> file is foundational to all
-Unix/Linux TCP/IP installations and as a minimum will contain
+UNIX/Linux TCP/IP installations and as a minimum will contain
the localhost and local network interface IP addresses and the
primary names by which they are known within the local machine.
This file helps to prime the pump so that a basic level of name
resolution can exist before any other method of name resolution
becomes available.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2998179"></a><tt class="filename">/etc/resolv.conf</tt></h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952110"></a><tt class="filename">/etc/resolv.conf</tt></h3></div></div><div></div></div><p>
This file tells the name resolution libraries:
</p><div class="itemizedlist"><ul type="disc"><li><p>The name of the domain to which the machine
belongs
@@ -103,41 +104,41 @@ This file tells the name resolution libraries:
</p></li><li><p>The name or IP address of available Domain
Name Servers that may be asked to perform name to address
translation lookups
- </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996329"></a><tt class="filename">/etc/host.conf</tt></h3></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952153"></a><tt class="filename">/etc/host.conf</tt></h3></div></div><div></div></div><a class="indexterm" name="id2952165"></a><p>
<tt class="filename">/etc/host.conf</tt> is the primary means by
which the setting in /etc/resolv.conf may be affected. It is a
critical configuration file. This file controls the order by
which name resolution may proceed. The typical structure is:
-</p><pre class="screen">
- order hosts,bind
- multi on
+</p><pre class="programlisting">
+order hosts,bind
+multi on
</pre><p>
then both addresses should be returned. Please refer to the
man page for host.conf for further details.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996371"></a><tt class="filename">/etc/nsswitch.conf</tt></h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952204"></a><tt class="filename">/etc/nsswitch.conf</tt></h3></div></div><div></div></div><a class="indexterm" name="id2952216"></a><p>
This file controls the actual name resolution targets. The
file typically has resolver object specifications as follows:
-</p><pre class="screen">
- # /etc/nsswitch.conf
- #
- # Name Service Switch configuration file.
- #
+</p><pre class="programlisting">
+# /etc/nsswitch.conf
+#
+# Name Service Switch configuration file.
+#
- passwd: compat
- # Alternative entries for password authentication are:
- # passwd: compat files nis ldap winbind
- shadow: compat
- group: compat
+passwd: compat
+# Alternative entries for password authentication are:
+# passwd: compat files nis ldap winbind
+shadow: compat
+group: compat
- hosts: files nis dns
- # Alternative entries for host name resolution are:
- # hosts: files dns nis nis+ hesiod db compat ldap wins
- networks: nis files dns
+hosts: files nis dns
+# Alternative entries for host name resolution are:
+# hosts: files dns nis nis+ hesiod db compat ldap wins
+networks: nis files dns
- ethers: nis files
- protocols: nis files
- rpc: nis files
- services: nis files
+ethers: nis files
+protocols: nis files
+rpc: nis files
+services: nis files
</pre><p>
Of course, each of these mechanisms requires that the appropriate
facilities and/or services are correctly configured.
@@ -145,7 +146,7 @@ facilities and/or services are correctly configured.
It should be noted that unless a network request/message must be
sent, TCP/IP networks are silent. All TCP/IP communications assumes a
principal of speaking only when necessary.
-</p><p>
+</p><a class="indexterm" name="id2952270"></a><p>
Starting with version 2.2.0 samba has Linux support for extensions to
the name service switch infrastructure so that linux clients will
be able to obtain resolution of MS Windows NetBIOS names to IP
@@ -158,7 +159,7 @@ the <tt class="filename">/etc/nsswitch.conf</tt> file. At this point it
will be possible to ping any MS Windows machine by its NetBIOS
machine name, so long as that machine is within the workgroup to
which both the samba machine and the MS Windows machine belong.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996460"></a>Name resolution as used within MS Windows networking</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2952319"></a>Name resolution as used within MS Windows networking</h2></div></div><div></div></div><p>
MS Windows networking is predicated about the name each machine
is given. This name is known variously (and inconsistently) as
the &quot;computer name&quot;, &quot;machine name&quot;, &quot;networking name&quot;, &quot;netbios name&quot;,
@@ -173,25 +174,14 @@ name is therefore registered for each service type that is provided by
the client/server.
</p><p>
The following are typical NetBIOS name/service type registrations:
-</p><pre class="screen">
- Unique NetBIOS Names:
- MACHINENAME&lt;00&gt; = Server Service is running on MACHINENAME
- MACHINENAME&lt;03&gt; = Generic Machine Name (NetBIOS name)
- MACHINENAME&lt;20&gt; = LanMan Server service is running on MACHINENAME
- WORKGROUP&lt;1b&gt; = Domain Master Browser
-
- Group Names:
- WORKGROUP&lt;03&gt; = Generic Name registered by all members of WORKGROUP
- WORKGROUP&lt;1c&gt; = Domain Controllers / Netlogon Servers
- WORKGROUP&lt;1d&gt; = Local Master Browsers
- WORKGROUP&lt;1e&gt; = Internet Name Resolvers
-</pre><p>
+</p><div class="table"><a name="id2952372"></a><p class="title"><b>Table26.1.Unique NetBIOS names</b></p><table summary="Unique NetBIOS names" border="1"><colgroup><col align="left"><col align="justify"></colgroup><tbody><tr><td align="left">MACHINENAME&lt;00&gt;</td><td align="justify">Server Service is running on MACHINENAME</td></tr><tr><td align="left">MACHINENAME&lt;03&gt;</td><td align="justify">Generic Machine Name (NetBIOS name)</td></tr><tr><td align="left">MACHINENAME&lt;20&gt;</td><td align="justify">LanMan Server service is running on MACHINENAME</td></tr><tr><td align="left">WORKGROUP&lt;1b&gt;</td><td align="justify">Domain Master Browser</td></tr></tbody></table></div><div class="table"><a name="id2952442"></a><p class="title"><b>Table26.2.Group Names</b></p><table summary="Group Names" border="1"><colgroup><col align="left"><col align="justify"></colgroup><tbody><tr><td align="left">WORKGROUP&lt;03&gt;</td><td align="justify">Generic Name registered by all members of WORKGROUP</td></tr><tr><td align="left">WORKGROUP&lt;1c&gt;</td><td align="justify">Domain Controllers / Netlogon Servers</td></tr><tr><td align="left">WORKGROUP&lt;1d&gt;</td><td align="justify">Local Master Browsers</td></tr><tr><td align="left">WORKGROUP&lt;1e&gt;</td><td align="justify">Internet Name Resolvers</td></tr></tbody></table></div><p>
+<a class="indexterm" name="id2952514"></a>
It should be noted that all NetBIOS machines register their own
names as per the above. This is in vast contrast to TCP/IP
installations where traditionally the system administrator will
determine in the /etc/hosts or in the DNS database what names
are associated with each IP address.
-</p><p>
+</p><a class="indexterm" name="id2952529"></a><p>
One further point of clarification should be noted, the <tt class="filename">/etc/hosts</tt>
file and the DNS records do not provide the NetBIOS name type information
that MS Windows clients depend on to locate the type of service that may
@@ -229,7 +219,7 @@ NBT or NetBT, the NetBIOS over TCP/IP.
MS Windows machines use a complex array of name resolution mechanisms.
Since we are primarily concerned with TCP/IP this demonstration is
limited to this area.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996585"></a>The NetBIOS Name Cache</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952629"></a>The NetBIOS Name Cache</h3></div></div><div></div></div><p>
All MS Windows machines employ an in memory buffer in which is
stored the NetBIOS names and IP addresses for all external
machines that that machine has communicated with over the
@@ -243,11 +233,11 @@ an attempt to exchange a message with that machine will be subject
to time-out delays. i.e.: Its name is in the cache, so a name resolution
lookup will succeed, but the machine can not respond. This can be
frustrating for users - but it is a characteristic of the protocol.
-</p><p>
+</p><a class="indexterm" name="id2952661"></a><a class="indexterm" name="id2952669"></a><p>
The MS Windows utility that allows examination of the NetBIOS
name cache is called &quot;nbtstat&quot;. The Samba equivalent of this
is called <b class="command">nmblookup</b>.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996630"></a>The LMHOSTS file</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952692"></a>The LMHOSTS file</h3></div></div><div></div></div><a class="indexterm" name="id2952700"></a><p>
This file is usually located in MS Windows NT 4.0 or
2000 in <tt class="filename">C:\WINNT\SYSTEM32\DRIVERS\ETC</tt> and contains
the IP Address and the machine name in matched pairs. The
@@ -255,91 +245,92 @@ the IP Address and the machine name in matched pairs. The
to IP address mapping.
</p><p>
It typically looks like:
-</p><pre class="screen">
- # Copyright (c) 1998 Microsoft Corp.
- #
- # This is a sample LMHOSTS file used by the Microsoft Wins Client (NetBIOS
- # over TCP/IP) stack for Windows98
- #
- # This file contains the mappings of IP addresses to NT computernames
- # (NetBIOS) names. Each entry should be kept on an individual line.
- # The IP address should be placed in the first column followed by the
- # corresponding computername. The address and the computername
- # should be separated by at least one space or tab. The &quot;#&quot; character
- # is generally used to denote the start of a comment (see the exceptions
- # below).
- #
- # This file is compatible with Microsoft LAN Manager 2.x TCP/IP lmhosts
- # files and offers the following extensions:
- #
- # #PRE
- # #DOM:&lt;domain&gt;
- # #INCLUDE &lt;filename&gt;
- # #BEGIN_ALTERNATE
- # #END_ALTERNATE
- # \0xnn (non-printing character support)
- #
- # Following any entry in the file with the characters &quot;#PRE&quot; will cause
- # the entry to be preloaded into the name cache. By default, entries are
- # not preloaded, but are parsed only after dynamic name resolution fails.
- #
- # Following an entry with the &quot;#DOM:&lt;domain&gt;&quot; tag will associate the
- # entry with the domain specified by &lt;domain&gt;. This affects how the
- # browser and logon services behave in TCP/IP environments. To preload
- # the host name associated with #DOM entry, it is necessary to also add a
- # #PRE to the line. The &lt;domain&gt; is always preloaded although it will not
- # be shown when the name cache is viewed.
- #
- # Specifying &quot;#INCLUDE &lt;filename&gt;&quot; will force the RFC NetBIOS (NBT)
- # software to seek the specified &lt;filename&gt; and parse it as if it were
- # local. &lt;filename&gt; is generally a UNC-based name, allowing a
- # centralized lmhosts file to be maintained on a server.
- # It is ALWAYS necessary to provide a mapping for the IP address of the
- # server prior to the #INCLUDE. This mapping must use the #PRE directive.
- # In addition the share &quot;public&quot; in the example below must be in the
- # LanManServer list of &quot;NullSessionShares&quot; in order for client machines to
- # be able to read the lmhosts file successfully. This key is under
- # \machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionshares
- # in the registry. Simply add &quot;public&quot; to the list found there.
- #
- # The #BEGIN_ and #END_ALTERNATE keywords allow multiple #INCLUDE
- # statements to be grouped together. Any single successful include
- # will cause the group to succeed.
- #
- # Finally, non-printing characters can be embedded in mappings by
- # first surrounding the NetBIOS name in quotations, then using the
- # \0xnn notation to specify a hex value for a non-printing character.
- #
- # The following example illustrates all of these extensions:
- #
- # 102.54.94.97 rhino #PRE #DOM:networking #net group's DC
- # 102.54.94.102 &quot;appname \0x14&quot; #special app server
- # 102.54.94.123 popular #PRE #source server
- # 102.54.94.117 localsrv #PRE #needed for the include
- #
- # #BEGIN_ALTERNATE
- # #INCLUDE \\localsrv\public\lmhosts
- # #INCLUDE \\rhino\public\lmhosts
- # #END_ALTERNATE
- #
- # In the above example, the &quot;appname&quot; server contains a special
- # character in its name, the &quot;popular&quot; and &quot;localsrv&quot; server names are
- # preloaded, and the &quot;rhino&quot; server name is specified so it can be used
- # to later #INCLUDE a centrally maintained lmhosts file if the &quot;localsrv&quot;
- # system is unavailable.
- #
- # Note that the whole file is parsed including comments on each lookup,
- # so keeping the number of comments to a minimum will improve performance.
- # Therefore it is not advisable to simply add lmhosts file entries onto the
- # end of this file.
-</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996744"></a>HOSTS file</h3></div></div><div></div></div><p>
+</p><pre class="programlisting">
+# Copyright (c) 1998 Microsoft Corp.
+#
+# This is a sample LMHOSTS file used by the Microsoft Wins Client (NetBIOS
+# over TCP/IP) stack for Windows98
+#
+# This file contains the mappings of IP addresses to NT computernames
+# (NetBIOS) names. Each entry should be kept on an individual line.
+# The IP address should be placed in the first column followed by the
+# corresponding computername. The address and the computername
+# should be separated by at least one space or tab. The &quot;#&quot; character
+# is generally used to denote the start of a comment (see the exceptions
+# below).
+#
+# This file is compatible with Microsoft LAN Manager 2.x TCP/IP lmhosts
+# files and offers the following extensions:
+#
+# #PRE
+# #DOM:&lt;domain&gt;
+# #INCLUDE &lt;filename&gt;
+# #BEGIN_ALTERNATE
+# #END_ALTERNATE
+# \0xnn (non-printing character support)
+#
+# Following any entry in the file with the characters &quot;#PRE&quot; will cause
+# the entry to be preloaded into the name cache. By default, entries are
+# not preloaded, but are parsed only after dynamic name resolution fails.
+#
+# Following an entry with the &quot;#DOM:&lt;domain&gt;&quot; tag will associate the
+# entry with the domain specified by &lt;domain&gt;. This affects how the
+# browser and logon services behave in TCP/IP environments. To preload
+# the host name associated with #DOM entry, it is necessary to also add a
+# #PRE to the line. The &lt;domain&gt; is always preloaded although it will not
+# be shown when the name cache is viewed.
+#
+# Specifying &quot;#INCLUDE &lt;filename&gt;&quot; will force the RFC NetBIOS (NBT)
+# software to seek the specified &lt;filename&gt; and parse it as if it were
+# local. &lt;filename&gt; is generally a UNC-based name, allowing a
+# centralized lmhosts file to be maintained on a server.
+# It is ALWAYS necessary to provide a mapping for the IP address of the
+# server prior to the #INCLUDE. This mapping must use the #PRE directive.
+# In addition the share &quot;public&quot; in the example below must be in the
+# LanManServer list of &quot;NullSessionShares&quot; in order for client machines to
+# be able to read the lmhosts file successfully. This key is under
+# \machine\system\currentcontrolset\services\lanmanserver\
+# parameters\nullsessionshares
+# in the registry. Simply add &quot;public&quot; to the list found there.
+#
+# The #BEGIN_ and #END_ALTERNATE keywords allow multiple #INCLUDE
+# statements to be grouped together. Any single successful include
+# will cause the group to succeed.
+#
+# Finally, non-printing characters can be embedded in mappings by
+# first surrounding the NetBIOS name in quotations, then using the
+# \0xnn notation to specify a hex value for a non-printing character.
+#
+# The following example illustrates all of these extensions:
+#
+# 102.54.94.97 rhino #PRE #DOM:networking #net group's DC
+# 102.54.94.102 &quot;appname \0x14&quot; #special app server
+# 102.54.94.123 popular #PRE #source server
+# 102.54.94.117 localsrv #PRE #needed for the include
+#
+# #BEGIN_ALTERNATE
+# #INCLUDE \\localsrv\public\lmhosts
+# #INCLUDE \\rhino\public\lmhosts
+# #END_ALTERNATE
+#
+# In the above example, the &quot;appname&quot; server contains a special
+# character in its name, the &quot;popular&quot; and &quot;localsrv&quot; server names are
+# preloaded, and the &quot;rhino&quot; server name is specified so it can be used
+# to later #INCLUDE a centrally maintained lmhosts file if the &quot;localsrv&quot;
+# system is unavailable.
+#
+# Note that the whole file is parsed including comments on each lookup,
+# so keeping the number of comments to a minimum will improve performance.
+# Therefore it is not advisable to simply add lmhosts file entries onto the
+# end of this file.
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952854"></a>HOSTS file</h3></div></div><div></div></div><p>
This file is usually located in MS Windows NT 4.0 or 2000 in
<tt class="filename">C:\WINNT\SYSTEM32\DRIVERS\ETC</tt> and contains
the IP Address and the IP hostname in matched pairs. It can be
used by the name resolution infrastructure in MS Windows, depending
on how the TCP/IP environment is configured. This file is in
-every way the equivalent of the Unix/Linux <tt class="filename">/etc/hosts</tt> file.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996776"></a>DNS Lookup</h3></div></div><div></div></div><p>
+every way the equivalent of the UNIX/Linux <tt class="filename">/etc/hosts</tt> file.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952886"></a>DNS Lookup</h3></div></div><div></div></div><a class="indexterm" name="id2952894"></a><p>
This capability is configured in the TCP/IP setup area in the network
configuration facility. If enabled, an elaborate name resolution sequence
is followed the precise nature of which is dependant on how the NetBIOS
@@ -350,7 +341,7 @@ cache. If that fails then DNS, HOSTS and LMHOSTS are checked. If set to
Node Type 8, then a NetBIOS Unicast (over UDP Unicast) is sent to the
WINS Server to obtain a lookup before DNS, HOSTS, LMHOSTS, or broadcast
lookup is used.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996801"></a>WINS Lookup</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2952918"></a>WINS Lookup</h3></div></div><div></div></div><a class="indexterm" name="id2952927"></a><p>
A WINS (Windows Internet Name Server) service is the equivalent of the
rfc1001/1002 specified NBNS (NetBIOS Name Server). A WINS server stores
the names and IP addresses that are registered by a Windows client
@@ -358,24 +349,20 @@ if the TCP/IP setup has been given at least one WINS Server IP Address.
</p><p>
To configure Samba to be a WINS server the following parameter needs
to be added to the <tt class="filename">smb.conf</tt> file:
-</p><pre class="screen">
- wins support = Yes
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>wins support = Yes</tt></i></td></tr></table><p>
To configure Samba to use a WINS server the following parameters are
needed in the <tt class="filename">smb.conf</tt> file:
-</p><pre class="screen">
- wins support = No
- wins server = xxx.xxx.xxx.xxx
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>wins support = No</tt></i></td></tr><tr><td><i class="parameter"><tt>wins server = xxx.xxx.xxx.xxx</tt></i></td></tr></table><p>
where <i class="replaceable"><tt>xxx.xxx.xxx.xxx</tt></i> is the IP address
of the WINS server.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996872"></a>Common Errors</h2></div></div><div></div></div><p>
+</p><p>For information about setting up Samba as a WINS server, read
+ <a href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide">the chapter on network browsing</a>.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953036"></a>Common Errors</h2></div></div><div></div></div><p>
TCP/IP network configuration problems find every network administrator sooner or later.
The cause can be anything from keyboard mishaps, forgetfulness, simple mistakes, and
carelessness. Of course, no one is every deliberately careless!
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996887"></a>My Boomerang Won't Come Back</h3></div></div><div></div></div><p>
- Well, the real complaint said, &quot;I can ping my samba server from Windows, but I can
- not ping my Windows machine from the samba server.&quot;
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953052"></a>Pinging works only in one way</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">I can ping my samba server from Windows, but I can
+ not ping my Windows machine from the samba server.</span>&#8221;
</p><p>
The Windows machine was at IP Address 192.168.1.2 with netmask 255.255.255.0, the
Samba server (Linux) was at IP Address 192.168.1.130 with netmask 255.255.255.128.
@@ -383,46 +370,46 @@ carelessness. Of course, no one is every deliberately careless!
</p><p>
Due to inconsistent netmasks, the Windows machine was on network 192.168.1.0/24, while
the Samba server was on network 192.168.1.128/25 - logically a different network.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996919"></a>Very Slow Network Connections</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953086"></a>Very Slow Network Connections</h3></div></div><div></div></div><p>
A common causes of slow network response includes:
- </p><div class="itemizedlist"><ul type="disc"><li><p>Client is configured to use DNS and DNS server is down</p></li><li><p>Client is configured to use remote DNS server, but remote connection is down</p></li><li><p>Client is configured to use a WINS server, but there is no WINS server</p></li><li><p>Client is NOT configured to use a WINS server, but there is a WINS server</p></li><li><p>Firewall is filtering our DNS or WINS traffic</p></li></ul></div></div><div xmlns:ns94="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996970"></a>Samba server name change problem</h3></div></div><div></div></div><p>
- The name of the samba server was changed, samba was restarted, samba server can not be
+ </p><div class="itemizedlist"><ul type="disc"><li><p>Client is configured to use DNS and DNS server is down</p></li><li><p>Client is configured to use remote DNS server, but remote connection is down</p></li><li><p>Client is configured to use a WINS server, but there is no WINS server</p></li><li><p>Client is NOT configured to use a WINS server, but there is a WINS server</p></li><li><p>Firewall is filtering our DNS or WINS traffic</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953137"></a>Samba server name change problem</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">The name of the samba server was changed, samba was restarted, samba server can not be
pinged by new name from MS Windows NT4 Workstation, but it does still respond to ping using
- the old name. Why?
+ the old name. Why?</span>&#8221;
</p><p>
From this description three (3) things are rather obvious:
</p><div class="itemizedlist"><ul type="disc"><li><p>WINS is NOT in use, only broadcast based name resolution is used</p></li><li><p>The samba server was renamed and restarted within the last 10-15 minutes</p></li><li><p>The old samba server name is still in the NetBIOS name cache on the MS Windows NT4 Workstation</p></li></ul></div><p>
To find what names are present in the NetBIOS name cache on the MS Windows NT4 machine,
open a cmd shell, then:
- </p><ns94:p>
- </ns94:p><pre class="screen">
- C:\temp\&gt;nbtstat -n
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>nbtstat -n</tt></b>
- NetBIOS Local Name Table
+ NetBIOS Local Name Table
- Name Type Status
- ------------------------------------------------
- SLACK &lt;03&gt; UNIQUE Registered
- ADMINISTRATOR &lt;03&gt; UNIQUE Registered
- SLACK &lt;00&gt; UNIQUE Registered
- SARDON &lt;00&gt; GROUP Registered
- SLACK &lt;20&gt; UNIQUE Registered
- SLACK &lt;1F&gt; UNIQUE Registered
+ Name Type Status
+------------------------------------------------
+FRODO &lt;03&gt; UNIQUE Registered
+ADMINSTRATOR &lt;03&gt; UNIQUE Registered
+FRODO &lt;00&gt; UNIQUE Registered
+SARDON &lt;00&gt; GROUP Registered
+FRODO &lt;20&gt; UNIQUE Registered
+FRODO &lt;1F&gt; UNIQUE Registered
- C:\Temp\&gt;nbtstat -c
+<tt class="prompt">C:\&gt; </tt>nbtstat -c
- NetBIOS Remote Cache Name Table
+ NetBIOS Remote Cache Name Table
- Name Type Host Address Life [sec]
- --------------------------------------------------------------
- FRODO &lt;20&gt; UNIQUE 192.168.1.1 240
+ Name Type Host Address Life [sec]
+--------------------------------------------------------------
+GANDALF &lt;20&gt; UNIQUE 192.168.1.1 240
- C:\Temp\&gt;
- </pre><ns94:p>
- </ns94:p><p>
- In the above example, FRODO is the Samba server and SLACK is the MS Windows NT4 Workstation.
+<tt class="prompt">C:\&gt; </tt>
+</pre><p>
+ </p><p>
+ In the above example, GANDALF is the Samba server and FRODO is the MS Windows NT4 Workstation.
The first listing shows the contents of the Local Name Table (i.e.: Identity information on
the MS Windows workstation), the second shows the NetBIOS name in the NetBIOS name cache.
The name cache contains the remote machines known to this workstation.
- </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="pam.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="unicode.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter25.PAM based Distributed Authentication</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter27.Unicode/Charsets</td></tr></table></div></body></html>
+ </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="pam.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="unicode.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter25.PAM based Distributed Authentication</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter27.Unicode/Charsets</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/introduction.html b/docs/htmldocs/introduction.html
index f2e9d6f63f8..10cb806270a 100644
--- a/docs/htmldocs/introduction.html
+++ b/docs/htmldocs/introduction.html
@@ -1,6 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartI.General Installation</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="index.html" title="SAMBA Project Documentation"><link rel="next" href="IntroSMB.html" title="Chapter1.Introduction to Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartI.General Installation</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="index.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="IntroSMB.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="introduction"></a>General Installation</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2883926"></a>Preparing Samba for Configuration</h1></div></div><div></div></div><p>This section of the Samba-HOWTO-Collection contains general info on how to install samba
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartI.General Installation</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="previous" href="pr02.html" title="Attributions"><link rel="next" href="IntroSMB.html" title="Chapter1.Introduction to Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartI.General Installation</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="pr02.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="IntroSMB.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="introduction"></a>General Installation</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2817835"></a>Preparing Samba for Configuration</h1></div></div><div></div></div><p>This section of the Samba-HOWTO-Collection contains general info on how to install samba
and how to configure the parts of samba you will most likely need.
-PLEASE read this.</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="IntroSMB.html">Introduction to Samba</a></dt><dd><dl><dt><a href="IntroSMB.html#id2885266">Background</a></dt><dt><a href="IntroSMB.html#id2885320">Terminology</a></dt><dt><a href="IntroSMB.html#id2884044">Related Projects</a></dt><dt><a href="IntroSMB.html#id2884112">SMB Methodology</a></dt><dt><a href="IntroSMB.html#id2884199">Epilogue</a></dt><dt><a href="IntroSMB.html#id2884272">Miscellaneous</a></dt></dl></dd><dt>2. <a href="install.html">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="install.html#id2885039">Obtaining and installing samba</a></dt><dt><a href="install.html#id2885081">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="install.html#id2884654">Example Configuration</a></dt><dt><a href="install.html#id2884797">SWAT</a></dt></dl></dd><dt><a href="install.html#id2884842">Try listing the shares available on your
- server</a></dt><dt><a href="install.html#id2884347">Try connecting with the unix client</a></dt><dt><a href="install.html#id2884450">Try connecting from a DOS, WfWg, Win9x, WinNT,
- Win2k, OS/2, etc... client</a></dt><dt><a href="install.html#id2884510">What If Things Don't Work?</a></dt><dt><a href="install.html#id2884540">Common Errors</a></dt><dd><dl><dt><a href="install.html#id2884553">Why are so many smbd processes eating memory?</a></dt><dt><a href="install.html#id2885931">I'm getting &quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot; in the logs</a></dt></dl></dd></dl></dd><dt>3. <a href="FastStart.html">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="FastStart.html#id2886380">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="index.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="IntroSMB.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">SAMBA Project Documentation</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter1.Introduction to Samba</td></tr></table></div></body></html>
+PLEASE read this.</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>1. <a href="IntroSMB.html">Introduction to Samba</a></dt><dd><dl><dt><a href="IntroSMB.html#id2817919">Background</a></dt><dt><a href="IntroSMB.html#id2817978">Terminology</a></dt><dt><a href="IntroSMB.html#id2818169">Related Projects</a></dt><dt><a href="IntroSMB.html#id2818237">SMB Methodology</a></dt><dt><a href="IntroSMB.html#id2818345">Epilogue</a></dt><dt><a href="IntroSMB.html#id2818430">Miscellaneous</a></dt></dl></dd><dt>2. <a href="install.html">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="install.html#id2883917">Obtaining and installing samba</a></dt><dt><a href="install.html#id2883961">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="install.html#id2883999">Example Configuration</a></dt><dt><a href="install.html#id2884191">SWAT</a></dt></dl></dd><dt><a href="install.html#id2884236">Try listing the shares available on your
+ server</a></dt><dt><a href="install.html#id2884294">Try connecting with the unix client</a></dt><dt><a href="install.html#id2884411">Try connecting from another SMB client</a></dt><dt><a href="install.html#id2884494">What If Things Don't Work?</a></dt><dt><a href="install.html#id2884528">Common Errors</a></dt><dd><dl><dt><a href="install.html#id2884539">Large number of smbd processes</a></dt><dt><a href="install.html#id2884640">&quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot;</a></dt><dt><a href="install.html#id2884661">&quot;The network name cannot be found&quot;</a></dt></dl></dd></dl></dd><dt>3. <a href="FastStart.html">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="FastStart.html#id2884787">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="pr02.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-doc.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="IntroSMB.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Attributions</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter1.Introduction to Samba</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/ix01.html b/docs/htmldocs/ix01.html
index 6d8bfe06330..6e09e98de4a 100644
--- a/docs/htmldocs/ix01.html
+++ b/docs/htmldocs/ix01.html
@@ -1,2 +1,39 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Index</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="Further-Resources.html" title="Chapter41.Further Resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Index</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Further-Resources.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"></td></tr></table><hr></div><div class="index"><div class="titlepage"><div><div><h2 class="title"><a name="id3016415"></a>Index</h2></div></div><div></div></div><div class="index"></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Further-Resources.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"></td></tr><tr><td width="40%" align="left" valign="top">Chapter41.Further Resources</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"></td></tr></table></div></body></html>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Index</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="previous" href="Further-Resources.html" title="Chapter41.Further Resources"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Index</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Further-Resources.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"></td></tr></table><hr></div><div class="index"><div class="titlepage"><div><div><h2 class="title"><a name="id2965347"></a>Index</h2></div></div><div></div></div><div class="index"><div class="indexdiv"><h3>Symbols</h3><dl><dt>&quot;Domain Admins&quot; group, <a href="groupmapping.html#id2903416">Discussion</a></dt><dt>&quot;Domain Users&quot; group, <a href="groupmapping.html#id2904010">Adding Domain Users to the Power Users group</a></dt><dt>&quot;Printers&quot; folder, <a href="CUPS-printing.html#id2931562">Caveats to be considered</a>, <a href="CUPS-printing.html#id2932789">Installing the PostScript Driver on a Client</a>, <a href="CUPS-printing.html#id2933889">Manual Driver Installation in 15 Steps</a></dt><dt>&quot;raw&quot; printing, <a href="CUPS-printing.html#id2924825">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</a></dt><dt>/etc/host.conf, <a href="integrate-ms-networks.html#id2952153">/etc/host.conf</a></dt><dt>/etc/hosts, <a href="integrate-ms-networks.html#id2951960">/etc/hosts</a></dt><dt>/etc/nsswitch.conf, <a href="integrate-ms-networks.html#id2952204">/etc/nsswitch.conf</a></dt><dt>8.3</dt><dd><dl><dt>file names, <a href="AccessControls.html#id2904431">MS Windows NTFS Comparison with UNIX File Systems</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>A</h3><dl><dt>ACLs, <a href="AccessControls.html">File, Directory and Share Access Controls</a></dt><dt>Active Directory, <a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dt>add group script, <a href="groupmapping.html#id2903915">Adding Groups Fails</a></dt><dt>add machine script, <a href="samba-pdc.html#id2889059">The machine trust account not accessible</a>, <a href="domain-member.html#id2892848">Adding Machine to Domain Fails</a></dt><dt>add printer command, <a href="printing.html#id2921841">Adding new Printers with the Windows NT APW</a></dt><dt>add printer wizard, <a href="CUPS-printing.html#id2925177">Three familiar Methods for driver upload plus a new one</a></dt><dt>add user script, <a href="passdb.html#id2899165">Mapping User Identifiers between MS Windows and UNIX</a></dt><dt>addprinter command, <a href="printing.html#id2913251">Parameters Recommended for Use</a></dt><dt>admin users, <a href="AccessControls.html#id2905070">User and Group Based Controls</a>, <a href="AccessControls.html#id2908232">I have set force user but Samba still makes root the owner of all the files I touch!</a></dt><dt>Administrator, <a href="groupmapping.html#id2903416">Discussion</a></dt><dt>ADS (see Active Directory)</dt><dt>ads server, <a href="domain-member.html#id2892246">Setup your smb.conf</a></dt><dt>application/cups.vnd-postscript, <a href="CUPS-printing.html#id2931837">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a></dt><dt>application/octet-stream, <a href="CUPS-printing.html#id2924971">Explicitly enable &quot;raw&quot; printing for
+application/octet-stream!</a>, <a href="CUPS-printing.html#id2926707">MIME type Conversion Rules</a>, <a href="CUPS-printing.html#id2928335">&quot;application/octet-stream&quot; printing</a></dt><dt>application/pdf, <a href="CUPS-printing.html#id2926501">MIME types and CUPS Filters</a></dt><dt>application/postscript, <a href="CUPS-printing.html#id2931837">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a></dt><dt>application/vnd.cups-raster, <a href="CUPS-printing.html#id2928581">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt>application/vnd.cups-raw, <a href="CUPS-printing.html#id2924971">Explicitly enable &quot;raw&quot; printing for
+application/octet-stream!</a></dt><dt>auth methods, <a href="passdb.html#id2902952">auth methods does not work</a>, <a href="upgrading-to-3.0.html#id2955156">Passdb Backends and Authentication</a></dt></dl></div><div class="indexdiv"><h3>B</h3><dl><dt>bind interfaces only, <a href="diagnosis.html#id2958249">The tests</a></dt><dt>brlock.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>browse list, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a>, <a href="NetworkBrowsing.html#id2897133">Technical Overview of browsing</a></dt><dt>browseable, <a href="printing.html#id2915245">The [printers] Section</a>, <a href="printing.html#id2915706">Any [my_printer_name] Section</a>, <a href="printing.html#id2917756">Parameters in the [print$] Section</a></dt></dl></div><div class="indexdiv"><h3>C</h3><dl><dt>case sensitive, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a>, <a href="ProfileMgmt.html#id2946186">Windows 9x / Me Profile Setup</a></dt><dt>chpass, <a href="domain-member.html#id2890821">Manual Creation of Machine Trust Accounts</a></dt><dt>client use spnego, <a href="domain-member.html#id2892992">I can't join a Windows 2003 PDC</a></dt><dt>comment, <a href="printing.html#id2915245">The [printers] Section</a>, <a href="printing.html#id2915706">Any [my_printer_name] Section</a>, <a href="printing.html#id2917756">Parameters in the [print$] Section</a></dt><dt>configure, <a href="compiling.html#id2961798">Building the Binaries</a></dt><dt>connections.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>core files, <a href="bugreport.html#id2960926">Internal errors</a></dt><dt>create mask, <a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a>, <a href="AccessControls.html#id2907296">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>csc policy, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt><dt>CUPS</dt><dd><dl><dt>Page Accounting, <a href="CUPS-printing.html#id2937141">Page Accounting with CUPS</a></dt><dt>quotas, <a href="CUPS-printing.html#id2937193">Setting up Quotas</a></dt></dl></dd><dt>CUPS-PPD, <a href="CUPS-printing.html#id2936123">cupsomatic, pdqomatic, lpdomatic, directomatic</a></dt><dt>cupsaddsmb, <a href="CUPS-printing.html#id2925177">Three familiar Methods for driver upload plus a new one</a>, <a href="CUPS-printing.html#id2930710">cupsaddsmb: the unknown Utility</a>, <a href="CUPS-printing.html#id2931562">Caveats to be considered</a>, <a href="CUPS-printing.html#id2932052">Run &quot;cupsaddsmb&quot; (quiet Mode)</a>, <a href="CUPS-printing.html#id2932180">Run &quot;cupsaddsmb&quot; with verbose Output</a>, <a href="CUPS-printing.html#id2932401">Understanding cupsaddsmb</a>, <a href="CUPS-printing.html#id2932633">cupsaddsmb with a Samba PDC</a>, <a href="CUPS-printing.html#id2932714">cupsaddsmb Flowchart</a></dt><dt>cupsomatic, <a href="CUPS-printing.html#id2926179">CUPS can use all Windows-formatted Vendor PPDs</a>, <a href="CUPS-printing.html#id2926306">The CUPS Filtering Architecture</a>, <a href="CUPS-printing.html#id2928022">cupsomatic/Foomatic -- how do they fit into the Picture?</a>, <a href="CUPS-printing.html#id2928848">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a>, <a href="CUPS-printing.html#id2936123">cupsomatic, pdqomatic, lpdomatic, directomatic</a></dt><dt>CVS, <a href="compiling.html#id2961265">Access Samba source code via CVS</a></dt><dd><dl><dt>web, <a href="compiling.html#id2961335">Access via CVSweb</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>D</h3><dl><dt>daemon, <a href="compiling.html#id2962499">Alternative: starting it as a daemon</a></dt><dt>DDK, <a href="CUPS-printing.html#id2930614">PostScript Drivers with no major problems -- even in Kernel
+Mode</a>, <a href="CUPS-printing.html#id2931030">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt>debug, <a href="bugreport.html#id2960926">Internal errors</a></dt><dt>debug level, <a href="problems.html#id2959768">Debugging with Samba itself</a>, <a href="speed.html#id2964453">Log level</a></dt><dt>debuglevel, <a href="bugreport.html#id2960718">Debug levels</a></dt><dt>default case, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt><dt>delete printer command, <a href="printing.html#id2921841">Adding new Printers with the Windows NT APW</a></dt><dt>deleteprinter command, <a href="printing.html#id2913251">Parameters Recommended for Use</a></dt><dt>DHCP, <a href="integrate-ms-networks.html#id2951838">Background Information</a></dt><dt>diff, <a href="bugreport.html#id2961107">Patches</a></dt><dt>directory mask, <a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a></dt><dt>directory security mask, <a href="AccessControls.html#id2907296">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>disable spoolss, <a href="printing.html#id2913251">Parameters Recommended for Use</a></dt><dt>display charset, <a href="unicode.html#id2953454">Samba and charsets</a></dt><dt>DNS, <a href="NetworkBrowsing.html#id2894584">TCP/IP - without NetBIOS</a>, <a href="integrate-ms-networks.html#id2952886">DNS Lookup</a></dt><dd><dl><dt>Active Directory, <a href="NetworkBrowsing.html#id2894750">DNS and Active Directory</a></dt><dt>Dynamic, <a href="integrate-ms-networks.html#id2951838">Background Information</a></dt></dl></dd><dt>dns proxy, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a></dt><dt>domain admin group, <a href="groupmapping.html">Mapping MS Windows and UNIX Groups</a></dt><dt>domain logons, <a href="samba-pdc.html#id2887335">Preparing for Domain Control</a></dt><dt>domain master, <a href="samba-pdc.html#id2888272">Domain Network Logon Service</a>, <a href="samba-bdc.html#id2890011">Example Configuration</a>, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a>, <a href="NetworkBrowsing.html#id2895844">Making Samba the domain master</a></dt><dt>dont descend, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt><dt>dos charset, <a href="unicode.html#id2953454">Samba and charsets</a>, <a href="unicode.html#id2953612">Japanese charsets</a>, <a href="unicode.html#id2953758">CP850.so can't be found</a></dt><dt>dos filemode, <a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a></dt><dt>dos filetime resolution, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt><dt>dos filetimes, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt></dl></div><div class="indexdiv"><h3>E</h3><dl><dt>EMF, <a href="CUPS-printing.html#id2925497">Windows Drivers, GDI and EMF</a>, <a href="CUPS-printing.html#id2929677">From Windows Clients to an NT Print Server</a>, <a href="CUPS-printing.html#id2929818">Driver Execution on the Server</a></dt><dt>encrypt passwords, <a href="domain-member.html#id2891624">Joining an NT4 type Domain with Samba-3</a>, <a href="passdb.html#id2899942">smbpasswd - Encrypted Password Database</a>, <a href="pam.html#id2950929">smb.conf PAM Configuration</a>, <a href="diagnosis.html#id2958249">The tests</a></dt><dt>enhanced browsing, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a></dt><dt>enumports command, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2922594">Samba and Printer Ports</a></dt><dt>EPM (see ESP meta packager)</dt><dt>ESC/P, <a href="CUPS-printing.html#id2929818">Driver Execution on the Server</a></dt><dt>ESP</dt><dd><dl><dt>Ghostscript, <a href="CUPS-printing.html#id2926306">The CUPS Filtering Architecture</a>, <a href="CUPS-printing.html#id2928848">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a></dt><dt>meta packager, <a href="CUPS-printing.html#id2931030">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt>Print Pro, <a href="CUPS-printing.html#id2929420">Sources of CUPS drivers / PPDs</a>, <a href="CUPS-printing.html#id2931493">ESP Print Pro Package of &quot;PostScript Driver for
+WinNT/2k/XP&quot;</a></dt></dl></dd><dt>Extended Attributes, <a href="AccessControls.html">File, Directory and Share Access Controls</a></dt></dl></div><div class="indexdiv"><h3>F</h3><dl><dt>fake oplocks, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt><dt>File System, <a href="AccessControls.html#id2904395">File System Access Controls</a></dt><dt>foomatic, <a href="CUPS-printing.html#id2926179">CUPS can use all Windows-formatted Vendor PPDs</a>, <a href="CUPS-printing.html#id2926306">The CUPS Filtering Architecture</a>, <a href="CUPS-printing.html#id2928022">cupsomatic/Foomatic -- how do they fit into the Picture?</a>, <a href="CUPS-printing.html#id2928848">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a>, <a href="CUPS-printing.html#id2935871">foomatic-rip and Foomatic explained</a>, <a href="CUPS-printing.html#id2936022">Foomatic's strange Name</a></dt><dt>foomatic-rip, <a href="CUPS-printing.html#id2928848">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a>, <a href="CUPS-printing.html#id2935716">CUPS Print Drivers from Linuxprinting.org</a>, <a href="CUPS-printing.html#id2935871">foomatic-rip and Foomatic explained</a>, <a href="CUPS-printing.html#id2936304">The Grand Unification
+achieved...</a></dt><dt>force create mode, <a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a>, <a href="AccessControls.html#id2907296">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>force directory mode, <a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a>, <a href="AccessControls.html#id2907296">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>force directory security mode, <a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a>, <a href="AccessControls.html#id2907296">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>force group, <a href="AccessControls.html#id2905070">User and Group Based Controls</a></dt><dt>force security mode, <a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a>, <a href="AccessControls.html#id2907296">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>force user, <a href="AccessControls.html#id2905070">User and Group Based Controls</a>, <a href="AccessControls.html#id2908232">I have set force user but Samba still makes root the owner of all the files I touch!</a>, <a href="locking.html#id2909231">Beware of Force User</a></dt><dt>ftp, <a href="compiling.html#id2961581">Accessing the samba sources via rsync and ftp</a></dt></dl></div><div class="indexdiv"><h3>G</h3><dl><dt>gdb, <a href="bugreport.html#id2960926">Internal errors</a></dt><dt>GDI, <a href="CUPS-printing.html#gdipost">GDI on Windows -- PostScript on UNIX</a>, <a href="CUPS-printing.html#id2925497">Windows Drivers, GDI and EMF</a>, <a href="CUPS-printing.html#id2929677">From Windows Clients to an NT Print Server</a>, <a href="CUPS-printing.html#id2929818">Driver Execution on the Server</a></dt><dt>GhostScript, <a href="CUPS-printing.html#post-and-ghost">PostScript and Ghostscript</a>, <a href="CUPS-printing.html#id2925951">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dd><dl><dt>(see also PostScript)</dt></dl></dd><dt>Ghostscript</dt><dd><dl><dt>ESP (see ESP GhostScript)</dt></dl></dd><dt>GID, <a href="groupmapping.html#id2903181">Features and Benefits</a></dt><dt>GPG, <a href="compiling.html#id2961644">Verifying Samba's PGP signature</a></dt><dt>groupadd, <a href="groupmapping.html#id2903181">Features and Benefits</a></dt><dt>groupdel, <a href="groupmapping.html#id2903181">Features and Benefits</a></dt><dt>groups</dt><dd><dl><dt>domain, <a href="groupmapping.html#id2903416">Discussion</a></dt><dt>mapping, <a href="groupmapping.html">Mapping MS Windows and UNIX Groups</a></dt><dt>nested, <a href="groupmapping.html#id2903984">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd><dt>guest account, <a href="NetworkBrowsing.html#id2897308">Problem resolution</a>, <a href="NetworkBrowsing.html#id2898121">My client reports &quot;This server is not configured to list shared resources&quot;</a>, <a href="printing.html#id2915245">The [printers] Section</a></dt><dt>guest ok, <a href="AccessControls.html#id2905070">User and Group Based Controls</a>, <a href="printing.html#id2915245">The [printers] Section</a>, <a href="printing.html#id2915706">Any [my_printer_name] Section</a>, <a href="printing.html#id2917756">Parameters in the [print$] Section</a></dt></dl></div><div class="indexdiv"><h3>H</h3><dl><dt>hide dot files, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt><dt>hide files, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt><dt>hide unreadable, <a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a></dt><dt>hide unwriteable files, <a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a></dt><dt>host msdfs, <a href="msdfs.html#id2912546">Features and Benefits</a></dt><dt>hosts allow, <a href="securing-samba.html#id2910816">Using host based protection</a>, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2915706">Any [my_printer_name] Section</a></dt><dt>hosts deny, <a href="securing-samba.html#id2910816">Using host based protection</a>, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2915706">Any [my_printer_name] Section</a></dt></dl></div><div class="indexdiv"><h3>I</h3><dl><dt>idmap gid, <a href="groupmapping.html#id2903181">Features and Benefits</a>, <a href="pam.html#id2951576">Winbind is not resolving users and groups</a></dt><dt>idmap uid, <a href="groupmapping.html#id2903181">Features and Benefits</a>, <a href="pam.html#id2951576">Winbind is not resolving users and groups</a></dt><dt>ifconfig, <a href="compiling.html#id2962252">Starting from inetd.conf</a></dt><dt>imprints, <a href="CUPS-printing.html#id2925177">Three familiar Methods for driver upload plus a new one</a></dt><dt>inetd, <a href="diagnosis.html#id2958249">The tests</a>, <a href="compiling.html#id2962144">Starting the smbd and nmbd</a>, <a href="compiling.html#id2962252">Starting from inetd.conf</a></dt><dt>Interdomain Trusts, <a href="InterdomainTrusts.html">Interdomain Trust Relationships</a></dt><dd><dl><dt>completing, <a href="InterdomainTrusts.html#id2911822">Completing an NT4 Domain Trust</a></dt><dt>creating, <a href="InterdomainTrusts.html#id2911721">Native MS Windows NT4 Trusts Configuration</a></dt><dt>Facilities, <a href="InterdomainTrusts.html#id2911868">Inter-Domain Trust Facilities</a></dt></dl></dd><dt>interfaces, <a href="NetworkBrowsing.html#id2896045">Multiple interfaces</a>, <a href="diagnosis.html#id2958249">The tests</a>, <a href="compiling.html#id2962252">Starting from inetd.conf</a></dt><dt>invalid users, <a href="AccessControls.html#id2905070">User and Group Based Controls</a></dt><dt>IPP, <a href="CUPS-printing.html#id2932401">Understanding cupsaddsmb</a></dt></dl></div><div class="indexdiv"><h3>K</h3><dl><dt>KDC, <a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dt>Kerberos, <a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dt>kinit, <a href="domain-member.html#id2892373">Setup your /etc/krb5.conf</a></dt></dl></div><div class="indexdiv"><h3>L</h3><dl><dt>ldap admin dn, <a href="passdb.html#id2900704">Configuring Samba</a></dt><dt>ldap delete dn, <a href="passdb.html#id2900704">Configuring Samba</a></dt><dt>ldap filter, <a href="passdb.html#id2900704">Configuring Samba</a></dt><dt>ldap machine suffix, <a href="passdb.html#id2900704">Configuring Samba</a></dt><dt>ldap passwd sync, <a href="passdb.html#id2900704">Configuring Samba</a>, <a href="passdb.html#id2901824">Password synchronisation</a></dt><dt>ldap ssl, <a href="passdb.html#id2900704">Configuring Samba</a>, <a href="passdb.html#id2901140">Security and sambaSamAccount</a></dt><dt>ldap suffix, <a href="passdb.html#id2900704">Configuring Samba</a></dt><dt>ldap trust ids, <a href="passdb.html#id2900704">Configuring Samba</a></dt><dt>ldap user suffix, <a href="passdb.html#id2900704">Configuring Samba</a></dt><dt>libnss_wins.so, <a href="integrate-ms-networks.html#id2952204">/etc/nsswitch.conf</a></dt><dt>Links</dt><dd><dl><dt>hard, <a href="AccessControls.html#id2904431">MS Windows NTFS Comparison with UNIX File Systems</a></dt><dt>soft, <a href="AccessControls.html#id2904431">MS Windows NTFS Comparison with UNIX File Systems</a></dt></dl></dd><dt>Linuxprinting.org, <a href="CUPS-printing.html#id2935716">CUPS Print Drivers from Linuxprinting.org</a></dt><dt>lm announce, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a></dt><dt>lm interval, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a></dt><dt>LMB (see Local Master Browser)</dt><dt>LMHOSTS, <a href="integrate-ms-networks.html#id2952692">The LMHOSTS file</a></dt><dt>load printers, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2914010">A little Experiment to warn you</a>, <a href="printing.html#id2914714">The [global] Section</a></dt><dt>local master, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a>, <a href="NetworkBrowsing.html#DMB">Setting up WORKGROUP Browsing</a></dt><dt>Local Master Browser, <a href="NetworkBrowsing.html#id2896081">Use of the Remote Announce parameter</a></dt><dt>locking, <a href="locking.html#id2908589">Discussion</a></dt><dt>locking.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>log files</dt><dd><dl><dt>monitoring, <a href="diagnosis.html#id2958022">Assumptions</a></dt></dl></dd><dt>log level, <a href="domain-member.html#id2892848">Adding Machine to Domain Fails</a>, <a href="VFS.html#id2940474">extd_audit</a>, <a href="bugreport.html#id2960718">Debug levels</a></dt><dt>logon drive, <a href="ProfileMgmt.html#id2946726">Windows NT4 Workstation</a></dt><dt>logon home, <a href="passdb.html#id2901300">LDAP special attributes for sambaSamAccounts</a>, <a href="ProfileMgmt.html#id2945807">Windows 9x / Me User Profiles</a>, <a href="ProfileMgmt.html#id2945938">Mixed Windows 9x / Me and Windows NT4/200x User Profiles</a>, <a href="ProfileMgmt.html#id2946726">Windows NT4 Workstation</a>, <a href="ProfileMgmt.html#id2947427">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt>logon path, <a href="passdb.html#id2901300">LDAP special attributes for sambaSamAccounts</a>, <a href="ProfileMgmt.html#id2945938">Mixed Windows 9x / Me and Windows NT4/200x User Profiles</a>, <a href="ProfileMgmt.html#id2946186">Windows 9x / Me Profile Setup</a>, <a href="ProfileMgmt.html#id2946726">Windows NT4 Workstation</a>, <a href="ProfileMgmt.html#id2947427">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt>logon script, <a href="passdb.html#id2901300">LDAP special attributes for sambaSamAccounts</a></dt><dt>lpadmin, <a href="CUPS-printing.html#id2935716">CUPS Print Drivers from Linuxprinting.org</a>, <a href="CUPS-printing.html#id2937193">Setting up Quotas</a></dt><dt>lppause command, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a>, <a href="CUPS-printing.html#id2929956">From Windows Clients to a CUPS/Samba Print Server</a>, <a href="CUPS-printing.html#id2938069">Pre-conditions</a></dt><dt>lpq cache time, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2914714">The [global] Section</a></dt><dt>lpq command, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a>, <a href="CUPS-printing.html#id2938069">Pre-conditions</a></dt><dt>lpresume command, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a>, <a href="CUPS-printing.html#id2938069">Pre-conditions</a></dt><dt>lprm command, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a>, <a href="CUPS-printing.html#id2938069">Pre-conditions</a></dt><dt>lpstat, <a href="CUPS-printing.html#id2934958">Troubleshooting revisited</a></dt></dl></div><div class="indexdiv"><h3>M</h3><dl><dt>MAC Addresses, <a href="integrate-ms-networks.html#id2951960">/etc/hosts</a></dt><dt>machine trust accounts, <a href="domain-member.html#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt>creating, <a href="domain-member.html#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a></dt></dl></dd><dt>make, <a href="compiling.html#id2961798">Building the Binaries</a></dt><dt>mangling method, <a href="unicode.html#id2953612">Japanese charsets</a></dt><dt>map to guest, <a href="printing.html#id2917756">Parameters in the [print$] Section</a>, <a href="printing.html#id2921841">Adding new Printers with the Windows NT APW</a>, <a href="CUPS-printing.html#id2938921">Can't reconnect to Samba under new account
+ from Win2K/XP</a>, <a href="CUPS-printing.html#id2939149">Avoid being connected to the Samba server as the
+ &quot;wrong&quot; user</a></dt><dt>max print jobs, <a href="printing.html#id2913251">Parameters Recommended for Use</a></dt><dt>max xmit, <a href="speed.html#id2964393">Max xmit</a></dt><dt>messages.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>MIME, <a href="CUPS-printing.html#id2926501">MIME types and CUPS Filters</a>, <a href="CUPS-printing.html#id2926707">MIME type Conversion Rules</a>, <a href="CUPS-printing.html#id2926862">Filter Requirements</a>, <a href="CUPS-printing.html#id2928335">&quot;application/octet-stream&quot; printing</a></dt><dt>min print space, <a href="printing.html#id2913251">Parameters Recommended for Use</a></dt><dt>msdfs root, <a href="msdfs.html#id2912546">Features and Benefits</a></dt></dl></div><div class="indexdiv"><h3>N</h3><dl><dt>name resolve order, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a></dt><dt>nbtstat, <a href="integrate-ms-networks.html#id2952629">The NetBIOS Name Cache</a></dt><dt>NetBIOS, <a href="NetworkBrowsing.html#id2893931">Features and Benefits</a>, <a href="NetworkBrowsing.html#id2894584">TCP/IP - without NetBIOS</a>, <a href="integrate-ms-networks.html">Integrating MS Windows networks with Samba</a>, <a href="integrate-ms-networks.html#id2952319">Name resolution as used within MS Windows networking</a></dt><dt>NetBIOS-less, <a href="NetworkBrowsing.html#id2894584">TCP/IP - without NetBIOS</a></dt><dt>nmblookup, <a href="integrate-ms-networks.html#id2952629">The NetBIOS Name Cache</a></dt><dt>nt acl support, <a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a>, <a href="AccessControls.html#id2906755">Viewing file ownership</a>, <a href="AccessControls.html#id2906887">Viewing File or Directory Permissions</a>, <a href="AccessControls.html#id2907132">Modifying file or directory permissions</a>, <a href="Other-Clients.html#id2963891">Windows 2000 Service Pack 2</a></dt><dt>ntdrivers.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>ntforms.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>NTFS, <a href="AccessControls.html#id2904395">File System Access Controls</a></dt><dt>ntprinters.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd></dl></div><div class="indexdiv"><h3>O</h3><dl><dt>obey pam restrictions, <a href="pam.html#id2950929">smb.conf PAM Configuration</a></dt><dt>only user, <a href="AccessControls.html#id2905070">User and Group Based Controls</a>, <a href="securing-samba.html#id2911314">Why can users access home directories of other users?</a></dt><dt>oplock break wait time, <a href="locking.html#id2909323">Advanced Samba Opportunistic Locking Parameters</a>, <a href="locking.html#id2909679">Disabling Kernel OpLocks</a></dt><dt>oplock contention limit, <a href="locking.html#id2909323">Advanced Samba Opportunistic Locking Parameters</a></dt><dt>os level, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a>, <a href="NetworkBrowsing.html#DMB">Setting up WORKGROUP Browsing</a>, <a href="NetworkBrowsing.html#id2895446">Setting up DOMAIN Browsing</a>, <a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a>, <a href="NetworkBrowsing.html#id2895844">Making Samba the domain master</a></dt><dt>os2 driver map, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="Other-Clients.html#id2963411">Printer driver download for for OS/2 clients?</a></dt></dl></div><div class="indexdiv"><h3>P</h3><dl><dt>page_log, <a href="CUPS-printing.html#id2937398">The page_log File Syntax</a></dt><dt>passdb backend, <a href="domain-member.html#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a>, <a href="passdb.html">Account Information Databases</a>, <a href="passdb.html#id2898749">Technical Information</a>, <a href="passdb.html#id2899622">The pdbedit Command</a>, <a href="passdb.html#id2900704">Configuring Samba</a>, <a href="passdb.html#id2902030">Configuring</a>, <a href="passdb.html#id2902796">Users can not logon</a>, <a href="passdb.html#id2902952">auth methods does not work</a>, <a href="upgrading-to-3.0.html#id2955156">Passdb Backends and Authentication</a></dt><dt>password level, <a href="ServerType.html#id2886191">Password checking</a>, <a href="diagnosis.html#id2958249">The tests</a>, <a href="Other-Clients.html#id2963692">Case handling of passwords</a>, <a href="speed.html#id2964630">Slow Logins</a></dt><dt>password server, <a href="ServerType.html#id2885909">Server Security (User Level Security)</a>, <a href="samba-pdc.html#id2888704">Security Mode and Master Browsers</a>, <a href="domain-member.html#id2891624">Joining an NT4 type Domain with Samba-3</a>, <a href="diagnosis.html#id2958249">The tests</a></dt><dt>patch, <a href="bugreport.html#id2961107">Patches</a></dt><dt>path, <a href="install.html#id2884661">&quot;The network name cannot be found&quot;</a>, <a href="printing.html#id2915245">The [printers] Section</a>, <a href="printing.html#id2915706">Any [my_printer_name] Section</a>, <a href="printing.html#id2916027">Print Commands</a>, <a href="printing.html#id2917566">Creating the [print$] Share</a>, <a href="printing.html#id2917756">Parameters in the [print$] Section</a>, <a href="printing.html#id2918066">Subdirectory Structure in [print$]</a>, <a href="CUPS-printing.html#id2930169">Samba receiving Jobfiles and passing them to CUPS</a>, <a href="CUPS-printing.html#id2937912">Auto-Deletion or Preservation of CUPS Spool Files</a>, <a href="CUPS-printing.html#id2939796">Permissions on
+/var/spool/samba/ get reset after each
+reboot</a>, <a href="diagnosis.html#id2958249">The tests</a></dt><dt>PCL, <a href="CUPS-printing.html#gdipost">GDI on Windows -- PostScript on UNIX</a>, <a href="CUPS-printing.html#id2925650">UNIX Printfile Conversion and GUI Basics</a>, <a href="CUPS-printing.html#id2929818">Driver Execution on the Server</a>, <a href="CUPS-printing.html#id2930255">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a></dt><dt>PDF, <a href="CUPS-printing.html#id2925497">Windows Drivers, GDI and EMF</a>, <a href="CUPS-printing.html#id2926092">PostScript Printer Description (PPD) Specification</a></dt><dt>pdf, <a href="CUPS-printing.html#id2926707">MIME type Conversion Rules</a></dt><dt>PDL, <a href="CUPS-printing.html#gdipost">GDI on Windows -- PostScript on UNIX</a>, <a href="CUPS-printing.html#post-and-ghost">PostScript and Ghostscript</a></dt><dt>PJL, <a href="CUPS-printing.html#id2930255">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a>, <a href="CUPS-printing.html#id2931837">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a>, <a href="CUPS-printing.html#id2937303">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt>point and print, <a href="CUPS-printing.html#id2924894">Driver Installation Methods on Windows Clients</a>, <a href="CUPS-printing.html#id2925177">Three familiar Methods for driver upload plus a new one</a>, <a href="CUPS-printing.html#id2928022">cupsomatic/Foomatic -- how do they fit into the Picture?</a>, <a href="CUPS-printing.html#id2932052">Run &quot;cupsaddsmb&quot; (quiet Mode)</a>, <a href="CUPS-printing.html#id2932789">Installing the PostScript Driver on a Client</a>, <a href="CUPS-printing.html#id2933889">Manual Driver Installation in 15 Steps</a></dt><dt>PostScript, <a href="CUPS-printing.html#id2925317">Using CUPS/Samba in an advanced Way -- intelligent printing
+with PostScript Driver Download</a>, <a href="CUPS-printing.html#gdipost">GDI on Windows -- PostScript on UNIX</a>, <a href="CUPS-printing.html#id2925650">UNIX Printfile Conversion and GUI Basics</a>, <a href="CUPS-printing.html#post-and-ghost">PostScript and Ghostscript</a>, <a href="CUPS-printing.html#id2927043">Prefilters</a>, <a href="CUPS-printing.html#id2929818">Driver Execution on the Server</a>, <a href="CUPS-printing.html#id2930255">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a>, <a href="CUPS-printing.html#id2930560">CUPS: a &quot;Magical Stone&quot;?</a>, <a href="CUPS-printing.html#id2931030">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dd><dl><dt>(see also Ghostscript)</dt><dt>RIP, <a href="CUPS-printing.html#post-and-ghost">PostScript and Ghostscript</a></dt></dl></dd><dt>PPD, <a href="CUPS-printing.html#post-and-ghost">PostScript and Ghostscript</a>, <a href="CUPS-printing.html#id2926092">PostScript Printer Description (PPD) Specification</a>, <a href="CUPS-printing.html#id2928581">PostScript Printer Descriptions (PPDs) for non-PS Printers</a>, <a href="CUPS-printing.html#id2930344">PPDs for non-PS Printers on UNIX</a>, <a href="CUPS-printing.html#id2930400">PPDs for non-PS Printers on Windows</a>, <a href="CUPS-printing.html#id2930560">CUPS: a &quot;Magical Stone&quot;?</a>, <a href="CUPS-printing.html#id2932789">Installing the PostScript Driver on a Client</a></dt><dd><dl><dt>CUPS (see CUPS-PPD)</dt></dl></dd><dt>preferred master, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a>, <a href="NetworkBrowsing.html#DMB">Setting up WORKGROUP Browsing</a>, <a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a>, <a href="NetworkBrowsing.html#id2895844">Making Samba the domain master</a>, <a href="diagnosis.html#id2958249">The tests</a></dt><dt>preserve case, <a href="ProfileMgmt.html#id2946186">Windows 9x / Me Profile Setup</a></dt><dt>print command, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2914714">The [global] Section</a>, <a href="printing.html#id2916108">Default Print Commands for various UNIX Print Subsystems</a>, <a href="printing.html#id2916791">Setting up your own Print Commands</a>, <a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a>, <a href="CUPS-printing.html#id2929956">From Windows Clients to a CUPS/Samba Print Server</a>, <a href="CUPS-printing.html#id2938069">Pre-conditions</a>, <a href="CUPS-printing.html#id2938226">Manual Configuration</a></dt><dt>print ok , <a href="printing.html#id2913251">Parameters Recommended for Use</a></dt><dt>printable, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2915245">The [printers] Section</a>, <a href="printing.html#id2915706">Any [my_printer_name] Section</a></dt><dt>printcap, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2916108">Default Print Commands for various UNIX Print Subsystems</a>, <a href="CUPS-printing.html#id2923880">Basic Configuration of CUPS support</a>, <a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a>, <a href="CUPS-printing.html#id2924395">More complex smb.conf Settings for
+CUPS</a>, <a href="CUPS-printing.html#id2929956">From Windows Clients to a CUPS/Samba Print Server</a>, <a href="CUPS-printing.html#id2938069">Pre-conditions</a></dt><dt>printcap name, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2914714">The [global] Section</a></dt><dt>printer, <a href="printing.html#id2913251">Parameters Recommended for Use</a></dt><dt>printer admin, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2914714">The [global] Section</a>, <a href="printing.html#id2915706">Any [my_printer_name] Section</a>, <a href="printing.html#id2917756">Parameters in the [print$] Section</a>, <a href="printing.html#id2918333">Setting Drivers for existing Printers with a Client GUI</a>, <a href="printing.html#id2920462">IMPORTANT! Setting Device Modes on new Printers</a>, <a href="printing.html#id2920857">Always make first Client Connection as root or &quot;printer admin&quot;</a>, <a href="printing.html#id2921063">Setting Default Print Options for the Client Drivers</a>, <a href="printing.html#id2921841">Adding new Printers with the Windows NT APW</a>, <a href="CUPS-printing.html#id2924395">More complex smb.conf Settings for
+CUPS</a>, <a href="CUPS-printing.html#id2933674">What is required for adddriver and setdriver to succeed</a>, <a href="CUPS-printing.html#id2939398">Print options for all users can't be set on Win2K/XP</a></dt><dt>printer name, <a href="printing.html#id2913251">Parameters Recommended for Use</a></dt><dt>printing, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2914714">The [global] Section</a>, <a href="printing.html#id2916108">Default Print Commands for various UNIX Print Subsystems</a>, <a href="printing.html#id2916791">Setting up your own Print Commands</a>, <a href="CUPS-printing.html#id2923880">Basic Configuration of CUPS support</a>, <a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a>, <a href="CUPS-printing.html#id2924395">More complex smb.conf Settings for
+CUPS</a>, <a href="CUPS-printing.html#id2929956">From Windows Clients to a CUPS/Samba Print Server</a>, <a href="CUPS-printing.html#id2938069">Pre-conditions</a>, <a href="CUPS-printing.html#id2938226">Manual Configuration</a></dt><dt>printing.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>PrintPro (see ESP Print Pro)</dt><dt>public, <a href="printing.html#id2915245">The [printers] Section</a></dt></dl></div><div class="indexdiv"><h3>Q</h3><dl><dt>queue resume command, <a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a></dt><dt>queuepause command, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a></dt><dt>queueresume command, <a href="printing.html#id2913251">Parameters Recommended for Use</a></dt></dl></div><div class="indexdiv"><h3>R</h3><dl><dt>read list, <a href="AccessControls.html#id2905070">User and Group Based Controls</a></dt><dt>read only, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a>, <a href="printing.html#id2915245">The [printers] Section</a>, <a href="printing.html#id2917756">Parameters in the [print$] Section</a></dt><dt>read raw, <a href="speed.html#id2964483">Read raw</a></dt><dt>read size, <a href="speed.html#id2964343">Read size</a></dt><dt>remote announce, <a href="NetworkBrowsing.html#id2894349">NetBIOS over TCP/IP</a>, <a href="NetworkBrowsing.html#id2894896">How Browsing Functions</a>, <a href="NetworkBrowsing.html#id2896081">Use of the Remote Announce parameter</a>, <a href="NetworkBrowsing.html#id2897187">Browsing support in Samba</a></dt><dt>remote browse sync, <a href="NetworkBrowsing.html#id2894349">NetBIOS over TCP/IP</a>, <a href="NetworkBrowsing.html#id2894896">How Browsing Functions</a>, <a href="NetworkBrowsing.html#id2896240">Use of the Remote Browse Sync parameter</a></dt><dt>root preexec, <a href="NT4Migration.html#id2955990">Logon Scripts</a></dt><dt>rpcclient</dt><dd><dl><dt>adddriver, <a href="CUPS-printing.html#id2932180">Run &quot;cupsaddsmb&quot; with verbose Output</a>, <a href="CUPS-printing.html#id2932401">Understanding cupsaddsmb</a>, <a href="CUPS-printing.html#id2933086">Installing PostScript Driver Files manually (using
+rpcclient)</a>, <a href="CUPS-printing.html#id2933403">Understanding the rpcclient man page</a>, <a href="CUPS-printing.html#id2933674">What is required for adddriver and setdriver to succeed</a>, <a href="CUPS-printing.html#id2933889">Manual Driver Installation in 15 Steps</a></dt><dt>enumdrivers, <a href="CUPS-printing.html#id2933086">Installing PostScript Driver Files manually (using
+rpcclient)</a>, <a href="CUPS-printing.html#id2933889">Manual Driver Installation in 15 Steps</a></dt><dt>enumports, <a href="CUPS-printing.html#id2933086">Installing PostScript Driver Files manually (using
+rpcclient)</a></dt><dt>enumprinters, <a href="CUPS-printing.html#id2933086">Installing PostScript Driver Files manually (using
+rpcclient)</a>, <a href="CUPS-printing.html#id2933674">What is required for adddriver and setdriver to succeed</a>, <a href="CUPS-printing.html#id2933889">Manual Driver Installation in 15 Steps</a>, <a href="CUPS-printing.html#id2934958">Troubleshooting revisited</a></dt><dt>getdriver, <a href="CUPS-printing.html#id2933506">Producing an Example by querying a Windows Box</a>, <a href="CUPS-printing.html#id2933889">Manual Driver Installation in 15 Steps</a></dt><dt>getprinter, <a href="CUPS-printing.html#id2933506">Producing an Example by querying a Windows Box</a>, <a href="CUPS-printing.html#id2933889">Manual Driver Installation in 15 Steps</a>, <a href="CUPS-printing.html#id2934958">Troubleshooting revisited</a></dt><dt>setdriver, <a href="CUPS-printing.html#id2931562">Caveats to be considered</a>, <a href="CUPS-printing.html#id2932180">Run &quot;cupsaddsmb&quot; with verbose Output</a>, <a href="CUPS-printing.html#id2932401">Understanding cupsaddsmb</a>, <a href="CUPS-printing.html#id2933086">Installing PostScript Driver Files manually (using
+rpcclient)</a>, <a href="CUPS-printing.html#id2933674">What is required for adddriver and setdriver to succeed</a>, <a href="CUPS-printing.html#id2933889">Manual Driver Installation in 15 Steps</a></dt></dl></dd><dt>rsync, <a href="compiling.html#id2961581">Accessing the samba sources via rsync and ftp</a></dt></dl></div><div class="indexdiv"><h3>S</h3><dl><dt>secrets.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>security, <a href="ServerType.html#id2885157">Samba Security Modes</a>, <a href="ServerType.html#id2885551">Domain Security Mode (User Level Security)</a>, <a href="ServerType.html#id2885909">Server Security (User Level Security)</a>, <a href="ServerType.html#id2886414">What makes Samba a SERVER?</a>, <a href="ServerType.html#id2886453">What makes Samba a Domain Controller?</a>, <a href="ServerType.html#id2886490">What makes Samba a Domain Member?</a>, <a href="ServerType.html#id2886529">Constantly Losing Connections to Password Server</a>, <a href="samba-pdc.html#id2887335">Preparing for Domain Control</a>, <a href="samba-pdc.html#id2888704">Security Mode and Master Browsers</a>, <a href="domain-member.html#id2891624">Joining an NT4 type Domain with Samba-3</a>, <a href="domain-member.html#id2892061">Why is this better than security = server?</a>, <a href="domain-member.html#id2892246">Setup your smb.conf</a>, <a href="CUPS-printing.html#id2932052">Run &quot;cupsaddsmb&quot; (quiet Mode)</a>, <a href="CUPS-printing.html#id2938787">&quot;cupsaddsmb&quot; keeps asking for root password in
+ neverending loop</a>, <a href="upgrading-to-3.0.html#id2955156">Passdb Backends and Authentication</a>, <a href="diagnosis.html#id2958249">The tests</a>, <a href="Other-Clients.html#id2963639">Configuring WfW password handling</a></dt><dt>security mask, <a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a>, <a href="AccessControls.html#id2907296">Interaction with the standard Samba create mask
+ parameters</a></dt><dt>Server Manager, <a href="domain-member.html#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a>, <a href="domain-member.html#id2890821">Manual Creation of Machine Trust Accounts</a></dt><dt>sessionid.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>share_info.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>short preserve case, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a>, <a href="ProfileMgmt.html#id2946186">Windows 9x / Me Profile Setup</a></dt><dt>Short-Cuts, <a href="AccessControls.html#id2904431">MS Windows NTFS Comparison with UNIX File Systems</a></dt><dt>show add printer wizard, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2914714">The [global] Section</a>, <a href="printing.html#id2921841">Adding new Printers with the Windows NT APW</a></dt><dt>SID, <a href="groupmapping.html#id2903181">Features and Benefits</a></dt><dt>Single Sign On, <a href="CUPS-printing.html#id2931562">Caveats to be considered</a></dt><dt>smbclient, <a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a>, <a href="diagnosis.html#id2958249">The tests</a></dt><dt>socket options, <a href="speed.html#id2964253">Socket options</a></dt><dt>spooling</dt><dd><dl><dt>central, <a href="CUPS-printing.html#id2924770">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt>peer-to-peer, <a href="CUPS-printing.html#id2924770">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt></dl></dd><dt>spooling-only, <a href="CUPS-printing.html#id2924825">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</a></dt><dt>strict locking, <a href="locking.html#id2908589">Discussion</a></dt></dl></div><div class="indexdiv"><h3>T</h3><dl><dt>TDB, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a>, <a href="CUPS-printing.html#id2935364">Trivial DataBase Files</a></dt><dd><dl><dt>backing up (see tdbbackup)</dt></dl></dd><dt>tdbbackup, <a href="CUPS-printing.html#id2935579">Using tdbbackup</a></dt><dt>template homedir, <a href="winbind.html#id2943196">Linux/FreeBSD-specific PAM configuration</a></dt><dt>testparm, <a href="diagnosis.html#id2958249">The tests</a></dt><dt>text/plain, <a href="CUPS-printing.html#id2926707">MIME type Conversion Rules</a></dt><dt>total print jobs, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2914714">The [global] Section</a></dt></dl></div><div class="indexdiv"><h3>U</h3><dl><dt>UDP, <a href="NetworkBrowsing.html#id2894349">NetBIOS over TCP/IP</a></dt><dt>UID, <a href="groupmapping.html#id2903181">Features and Benefits</a></dt><dt>unexpected.tdb, <a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt>(see also TDB)</dt></dl></dd><dt>unix charset, <a href="unicode.html#id2953454">Samba and charsets</a>, <a href="unicode.html#id2953612">Japanese charsets</a></dt><dt>use client driver, <a href="printing.html#id2913251">Parameters Recommended for Use</a>, <a href="printing.html#id2914714">The [global] Section</a></dt><dt>user, <a href="ServerType.html#id2885414">Share Level Security</a>, <a href="diagnosis.html#id2958249">The tests</a></dt><dt>User Manager, <a href="InterdomainTrusts.html#samba-trusted-domain">Samba as the Trusted Domain</a>, <a href="InterdomainTrusts.html#id2912232">Samba as the Trusting Domain</a></dt><dt>useradd, <a href="domain-member.html#id2890821">Manual Creation of Machine Trust Accounts</a></dt><dt>username, <a href="AccessControls.html#id2905070">User and Group Based Controls</a></dt><dt>username level, <a href="ServerType.html#id2886191">Password checking</a></dt><dt>username map, <a href="domain-member.html#id2891426">Windows 200x XP Professional</a></dt></dl></div><div class="indexdiv"><h3>V</h3><dl><dt>valid users, <a href="AccessControls.html#id2905070">User and Group Based Controls</a>, <a href="diagnosis.html#id2958249">The tests</a></dt><dt>veto files, <a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt><dt>vfs objects, <a href="VFS.html#id2940195">Discussion</a></dt><dt>vipw, <a href="domain-member.html#id2890821">Manual Creation of Machine Trust Accounts</a></dt></dl></div><div class="indexdiv"><h3>W</h3><dl><dt>winbind separator, <a href="winbind.html#id2942516">Start up the winbindd daemon and test it!</a></dt><dt>WINS, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a>, <a href="NetworkBrowsing.html#id2894349">NetBIOS over TCP/IP</a>, <a href="integrate-ms-networks.html#id2952918">WINS Lookup</a></dt><dt>wins hook, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a></dt><dt>wins proxy, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a></dt><dt>wins server, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a>, <a href="NetworkBrowsing.html#id2896317">WINS - The Windows Internetworking Name Server</a>, <a href="NetworkBrowsing.html#id2896504">Setting up a WINS server</a></dt><dt>wins support, <a href="NetworkBrowsing.html#id2894019">What is Browsing?</a>, <a href="NetworkBrowsing.html#id2896317">WINS - The Windows Internetworking Name Server</a>, <a href="NetworkBrowsing.html#id2896504">Setting up a WINS server</a></dt><dt>workgroup, <a href="samba-pdc.html#id2888704">Security Mode and Master Browsers</a>, <a href="domain-member.html#id2891624">Joining an NT4 type Domain with Samba-3</a>, <a href="NetworkBrowsing.html#id2897187">Browsing support in Samba</a></dt><dt>write list, <a href="AccessControls.html#id2905070">User and Group Based Controls</a>, <a href="printing.html#id2917756">Parameters in the [print$] Section</a></dt><dt>write raw, <a href="speed.html#id2964567">Write raw</a></dt><dt>writeable, <a href="printing.html#id2915245">The [printers] Section</a>, <a href="printing.html#id2915706">Any [my_printer_name] Section</a></dt><dt>WYSIWYG, <a href="CUPS-printing.html#id2925497">Windows Drivers, GDI and EMF</a></dt></dl></div><div class="indexdiv"><h3>X</h3><dl><dt>X Window System, <a href="CUPS-printing.html#id2925650">UNIX Printfile Conversion and GUI Basics</a></dt><dt>xinetd, <a href="compiling.html#id2962252">Starting from inetd.conf</a> (see inetd)</dt><dt>Xprint, <a href="CUPS-printing.html#id2925650">UNIX Printfile Conversion and GUI Basics</a></dt></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Further-Resources.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-doc.html">Up</a></td><td width="40%" align="right"></td></tr><tr><td width="40%" align="left" valign="top">Chapter41.Further Resources</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top"></td></tr></table></div></body></html>
diff --git a/docs/htmldocs/locking.html b/docs/htmldocs/locking.html
index 6214254ce01..07228df19d7 100644
--- a/docs/htmldocs/locking.html
+++ b/docs/htmldocs/locking.html
@@ -1,8 +1,7 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter14.File and Record Locking</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="AccessControls.html" title="Chapter13.File, Directory and Share Access Controls"><link rel="next" href="securing-samba.html" title="Chapter15.Securing Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter14.File and Record Locking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="AccessControls.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="securing-samba.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="locking"></a>Chapter14.File and Record Locking</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Eric</span> <span class="surname">Roseme</span></h3><div class="affiliation"><span class="orgname">HP Oplocks Usage Recommendations Whitepaper<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:eric.roseme@hp.com">eric.roseme@hp.com</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="locking.html#id2926847">Features and Benefits</a></dt><dt><a href="locking.html#id2926902">Discussion</a></dt><dd><dl><dt><a href="locking.html#id2927033">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="locking.html#id2925408">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="locking.html#id2925517">Example Configuration</a></dt></dl></dd><dt><a href="locking.html#id2925776">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="locking.html#id2928213">Workstation Service Entries</a></dt><dt><a href="locking.html#id2928240">Server Service Entries</a></dt></dl></dd><dt><a href="locking.html#id2928320">Persistent Data Corruption</a></dt><dt><a href="locking.html#id2928350">Common Errors</a></dt><dd><dl><dt><a href="locking.html#id2928423">locking.tdb error messages</a></dt></dl></dd><dt><a href="locking.html#id2928454">Additional Reading</a></dt></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter14.File and Record Locking</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="AccessControls.html" title="Chapter13.File, Directory and Share Access Controls"><link rel="next" href="securing-samba.html" title="Chapter15.Securing Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter14.File and Record Locking</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="AccessControls.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="securing-samba.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="locking"></a>Chapter14.File and Record Locking</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Eric</span> <span class="surname">Roseme</span></h3><div class="affiliation"><span class="orgname">HP Oplocks Usage Recommendations Whitepaper<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:eric.roseme@hp.com">eric.roseme@hp.com</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="locking.html#id2908532">Features and Benefits</a></dt><dt><a href="locking.html#id2908589">Discussion</a></dt><dd><dl><dt><a href="locking.html#id2908732">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="locking.html#id2909449">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="locking.html#id2909569">Example Configuration</a></dt></dl></dd><dt><a href="locking.html#id2909983">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="locking.html#id2910208">Workstation Service Entries</a></dt><dt><a href="locking.html#id2910237">Server Service Entries</a></dt></dl></dd><dt><a href="locking.html#id2910317">Persistent Data Corruption</a></dt><dt><a href="locking.html#id2910345">Common Errors</a></dt><dd><dl><dt><a href="locking.html#id2910419">locking.tdb error messages</a></dt><dt><a href="locking.html#id2910456">Problems saving files in MS Office on Windows XP</a></dt><dt><a href="locking.html#id2910479">Long delays deleting files over network with XP SP1</a></dt></dl></dd><dt><a href="locking.html#id2910511">Additional Reading</a></dt></dl></div><p>
One area which causes trouble for many network administrators is locking.
The extent of the problem is readily evident from searches over the internet.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926847"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2908532"></a>Features and Benefits</h2></div></div><div></div></div><p>
Samba provides all the same locking semantics that MS Windows clients expect
and that MS Windows NT4 / 200x servers provide also.
</p><p>
@@ -24,13 +23,13 @@ settings on the MS Windows client.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Sometimes it is necessary to disable locking control settings BOTH on the Samba
server as well as on each MS Windows client!
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2926902"></a>Discussion</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2908589"></a>Discussion</h2></div></div><div></div></div><p>
There are two types of locking which need to be performed by a SMB server.
The first is <span class="emphasis"><em>record locking</em></span> which allows a client to lock
a range of bytes in a open file. The second is the <span class="emphasis"><em>deny modes</em></span>
that are specified when a file is open.
</p><p>
-Record locking semantics under Unix are very different from record locking under
+Record locking semantics under UNIX are very different from record locking under
Windows. Versions of Samba before 2.2 have tried to use the native fcntl() unix
system call to implement proper record locking between different Samba clients.
This can not be fully correct due to several reasons. The simplest is the fact
@@ -41,29 +40,29 @@ many more differences, too many to be listed here.
</p><p>
Samba 2.2 and above implements record locking completely independent of the
underlying unix system. If a byte range lock that the client requests happens
-to fall into the range 0-2^31, Samba hands this request down to the Unix system.
+to fall into the range 0-2^31, Samba hands this request down to the UNIX system.
All other locks can not be seen by unix anyway.
</p><p>
-Strictly a SMB server should check for locks before every read and write call on
-a file. Unfortunately with the way fcntl() works this can be slow and may overstress
+Strictly an SMB server should check for locks before every read and write call on
+a file. Unfortunately with the way fcntl() works this can be slow and may over-stress
the <b class="command">rpc.lockd</b>. It is also almost always unnecessary as clients are supposed to
independently make locking calls before reads and writes anyway if locking is
important to them. By default Samba only makes locking calls when explicitly asked
-to by a client, but if you set <i class="parameter"><tt>strict locking = yes</tt></i> then it
+to by a client, but if you set <a class="indexterm" name="id2908656"></a><i class="parameter"><tt>strict locking</tt></i> = yes then it
will make lock checking calls on every read and write.
</p><p>
-You can also disable byte range locking completely using <i class="parameter"><tt>locking = no</tt></i>.
+You can also disable byte range locking completely using <a class="indexterm" name="id2908676"></a><i class="parameter"><tt>locking</tt></i> = no.
This is useful for those shares that don't support locking or don't need it
(such as cdroms). In this case Samba fakes the return codes of locking calls to
tell clients that everything is OK.
</p><p>
-The second class of locking is the <i class="parameter"><tt>deny modes</tt></i>. These
+The second class of locking is the <span class="emphasis"><em>deny modes</em></span>. These
are set by an application when it opens a file to determine what types of
access should be allowed simultaneously with its open. A client may ask for
<tt class="constant">DENY_NONE</tt>, <tt class="constant">DENY_READ</tt>,
<tt class="constant">DENY_WRITE</tt> or <tt class="constant">DENY_ALL</tt>. There are also special compatibility
modes called <tt class="constant">DENY_FCB</tt> and <tt class="constant">DENY_DOS</tt>.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2927033"></a>Opportunistic Locking Overview</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908732"></a>Opportunistic Locking Overview</h3></div></div><div></div></div><p>
Opportunistic locking (Oplocks) is invoked by the Windows file system
(as opposed to an API) via registry entries (on the server AND client)
for the purpose of enhancing network performance when accessing a file
@@ -186,7 +185,7 @@ In mission critical high availability environments, careful attention
should be given to opportunistic locking. Ideally, comprehensive
testing should be done with all affected applications with oplocks
enabled and disabled.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925067"></a>Exclusively Accessed Shares</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2909061"></a>Exclusively Accessed Shares</h4></div></div><div></div></div><p>
Opportunistic locking is most effective when it is confined to shares
that are exclusively accessed by a single user, or by only one user at
a time. Because the true value of opportunistic locking is the local
@@ -195,7 +194,7 @@ mechanism will cause a delay.
</p><p>
Home directories are the most obvious examples of where the performance
benefit of opportunistic locking can be safely realized.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925092"></a>Multiple-Accessed Shares or Files</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2909086"></a>Multiple-Accessed Shares or Files</h4></div></div><div></div></div><p>
As each additional user accesses a file in a share with opportunistic
locking enabled, the potential for delays and resulting perceived poor
performance increases. When multiple users are accessing a file on a
@@ -207,17 +206,17 @@ of the caching user.
As each additional client attempts to access a file with oplocks set,
the potential performance improvement is negated and eventually results
in a performance bottleneck.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925121"></a>Unix or NFS Client Accessed Files</h4></div></div><div></div></div><p>
-Local Unix and NFS clients access files without a mandatory
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2909115"></a>UNIX or NFS Client Accessed Files</h4></div></div><div></div></div><p>
+Local UNIX and NFS clients access files without a mandatory
file locking mechanism. Thus, these client platforms are incapable of
initiating an oplock break request from the server to a Windows client
-that has a file cached. Local Unix or NFS file access can therefore
+that has a file cached. Local UNIX or NFS file access can therefore
write to a file that has been cached by a Windows client, which
exposes the file to likely data corruption.
</p><p>
-If files are shared between Windows clients, and either local Unix
+If files are shared between Windows clients, and either local UNIX
or NFS users, then turn opportunistic locking off.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925147"></a>Slow and/or Unreliable Networks</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2909141"></a>Slow and/or Unreliable Networks</h4></div></div><div></div></div><p>
The biggest potential performance improvement for opportunistic locking
occurs when the client-side caching of reads and writes delivers the
most differential over sending those reads and writes over the wire.
@@ -232,7 +231,7 @@ the most advantageous scenario to utilize opportunistic locking.
If the network is slow, unreliable, or a WAN, then do not configure
opportunistic locking if there is any chance of multiple users
regularly opening the same file.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925180"></a>Multi-User Databases</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2909174"></a>Multi-User Databases</h4></div></div><div></div></div><p>
Multi-user databases clearly pose a risk due to their very nature -
they are typically heavily accessed by numerous users at random
intervals. Placing a multi-user database on a share with opportunistic
@@ -240,7 +239,7 @@ locking enabled will likely result in a locking management bottleneck
on the Samba server. Whether the database application is developed
in-house or a commercially available product, ensure that the share
has opportunistic locking disabled.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925202"></a>PDM Data Shares</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2909204"></a>PDM Data Shares</h4></div></div><div></div></div><p>
Process Data Management (PDM) applications such as IMAN, Enovia, and
Clearcase, are increasing in usage with Windows client platforms, and
therefore SMB data stores. PDM applications manage multi-user
@@ -253,8 +252,8 @@ application and PDM server to negotiate and maintain. It is
appropriate to eliminate the client OS from any caching tasks, and the
server from any oplock management, by disabling opportunistic locking on
the share.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925229"></a>Beware of Force User</h4></div></div><div></div></div><p>
-Samba includes an <tt class="filename">smb.conf</tt> parameter called <i class="parameter"><tt>force user</tt></i> that changes
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2909231"></a>Beware of Force User</h4></div></div><div></div></div><p>
+Samba includes an <tt class="filename">smb.conf</tt> parameter called <a class="indexterm" name="id2909250"></a><i class="parameter"><tt>force user</tt></i> that changes
the user accessing a share from the incoming user to whatever user is
defined by the smb.conf variable. If opportunistic locking is enabled
on a share, the change in user access causes an oplock break to be sent
@@ -266,26 +265,26 @@ to overcome the lost oplock break.
</p><p>
Avoid the combination of the following:
</p><div class="itemizedlist"><ul type="disc"><li><p>
- <i class="parameter"><tt>force user</tt></i> in the <tt class="filename">smb.conf</tt> share configuration.
+ <a class="indexterm" name="id2909286"></a><i class="parameter"><tt>force user</tt></i> in the <tt class="filename">smb.conf</tt> share configuration.
</p></li><li><p>
Slow or unreliable networks
</p></li><li><p>
Opportunistic Locking Enabled
- </p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925306"></a>Advanced Samba Opportunistic Locking Parameters</h4></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2909323"></a>Advanced Samba Opportunistic Locking Parameters</h4></div></div><div></div></div><p>
Samba provides opportunistic locking parameters that allow the
administrator to adjust various properties of the oplock mechanism to
account for timing and usage levels. These parameters provide good
versatility for implementing oplocks in environments where they would
likely cause problems. The parameters are:
-<i class="parameter"><tt>oplock break wait time</tt></i>,
-<i class="parameter"><tt>oplock contention limit</tt></i>.
+<a class="indexterm" name="id2909340"></a><i class="parameter"><tt>oplock break wait time</tt></i>,
+<a class="indexterm" name="id2909355"></a><i class="parameter"><tt>oplock contention limit</tt></i>.
</p><p>
For most users, administrators, and environments, if these parameters
are required, then the better option is to simply turn oplocks off.
The samba SWAT help text for both parameters reads &quot;DO NOT CHANGE THIS
PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE.&quot;
This is good advice.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925349"></a>Mission Critical High Availability</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2909382"></a>Mission Critical High Availability</h4></div></div><div></div></div><p>
In mission critical high availability environments, data integrity is
often a priority. Complex and expensive configurations are implemented
to ensure that if a client loses connectivity with a file server, a
@@ -315,10 +314,10 @@ In mission critical high availability environments, careful attention
should be given to opportunistic locking. Ideally, comprehensive
testing should be done with all affected applications with oplocks
enabled and disabled.
-</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2925408"></a>Samba Opportunistic Locking Control</h2></div></div><div></div></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2909449"></a>Samba Opportunistic Locking Control</h2></div></div><div></div></div><p>
Opportunistic Locking is a unique Windows file locking feature. It is
not really file locking, but is included in most discussions of Windows
-file locking, so is considered a defacto locking feature.
+file locking, so is considered a de facto locking feature.
Opportunistic Locking is actually part of the Windows client file
caching mechanism. It is not a particularly robust or reliable feature
when implemented on the variety of customized networks that exist in
@@ -349,7 +348,7 @@ file locking with the under lying OS, SGI IRIX and Linux are the only two OS's t
oplock aware at this time.
</p><p>
Unless your system supports kernel oplocks, you should disable oplocks if you are
-accessing the same files from both Unix/Linux and SMB clients. Regardless, oplocks should
+accessing the same files from both UNIX/Linux and SMB clients. Regardless, oplocks should
always be disabled if you are sharing a database file (e.g., Microsoft Access) between
multiple clients, as any break the first client receives will affect synchronisation of
the entire file (not just the single record), which will result in a noticeable performance
@@ -365,29 +364,23 @@ of your client sending oplock breaks and will instead want to disable oplocks fo
</p><p>
Another factor to consider is the perceived performance of file access. If oplocks provide no
measurable speed benefit on your network, it might not be worth the hassle of dealing with them.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2925517"></a>Example Configuration</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909569"></a>Example Configuration</h3></div></div><div></div></div><p>
In the following we examine two distinct aspects of Samba locking controls.
-</p><div xmlns:ns38="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925530"></a>Disabling Oplocks</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2909582"></a>Disabling Oplocks</h4></div></div><div></div></div><p>
You can disable oplocks on a per-share basis with the following:
-</p><ns38:p>
-</ns38:p><pre class="programlisting">
-[acctdata]
- oplocks = False
- level2 oplocks = False
-</pre><ns38:p>
-</ns38:p><p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[acctdata]</tt></i></td></tr><tr><td><i class="parameter"><tt>oplocks = False</tt></i></td></tr><tr><td><i class="parameter"><tt>level2 oplocks = False</tt></i></td></tr></table><p>
+</p><p>
The default oplock type is Level1. Level2 Oplocks are enabled on a per-share basis
in the <tt class="filename">smb.conf</tt> file.
</p><p>
Alternately, you could disable oplocks on a per-file basis within the share:
-</p><ns38:p>
-</ns38:p><pre class="programlisting">
- veto oplock files = /*.mdb/*.MDB/*.dbf/*.DBF/
-</pre><ns38:p>
-</ns38:p><p>
+</p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>veto oplock files = /*.mdb/*.MDB/*.dbf/*.DBF/</tt></i></td></tr></table><p>
+</p><p>
If you are experiencing problems with oplocks as apparent from Samba's log entries,
you may want to play it safe and disable oplocks and level2 oplocks.
-</p></div><div xmlns:ns39="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2925592"></a>Disabling Kernel OpLocks</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2909679"></a>Disabling Kernel OpLocks</h4></div></div><div></div></div><p>
Kernel OpLocks is an <tt class="filename">smb.conf</tt> parameter that notifies Samba (if
the UNIX kernel has the capability to send a Windows client an oplock
break) when a UNIX process is attempting to open the file that is
@@ -399,13 +392,10 @@ to the risk of data corruption. If the UNIX kernel has the ability to
send an oplock break, then the kernel oplocks parameter enables Samba
to send the oplock break. Kernel oplocks are enabled on a per-server
basis in the <tt class="filename">smb.conf</tt> file.
-</p><ns39:p>
-</ns39:p><pre class="programlisting">
-[global]
-kernel oplocks = yes
-</pre><ns39:p>
+</p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>kernel oplocks = yes</tt></i></td></tr></table><p>
The default is &quot;no&quot;.
-</ns39:p><p>
+</p><p>
Veto OpLocks is an <tt class="filename">smb.conf</tt> parameter that identifies specific files for
which Oplocks are disabled. When a Windows client opens a file that
has been configured for veto oplocks, the client will not be granted
@@ -417,26 +407,17 @@ allow Windows clients to utilize the performance benefit of file
caching without the risk of data corruption. Veto Oplocks can be
enabled on a per-share basis, or globally for the entire server, in the
<tt class="filename">smb.conf</tt> file:
-</p><ns39:p>
-</ns39:p><pre class="programlisting"><font color="red">&lt;title&gt;Example Veto OpLock Settings&lt;/title&gt;</font>
-[global]
- veto oplock files = /filename.htm/*.txt/
-
-[share_name]
- veto oplock files = /*.exe/filename.ext/
-</pre><ns39:p>
-</ns39:p><p>
-<span class="emphasis"><em>Oplock break wait time</em></span> is an <tt class="filename">smb.conf</tt> parameter that adjusts the time
+</p><p>
+</p><div class="example"><a name="id2909772"></a><p class="title"><b>Example14.1.Share with some files oplocked</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>veto oplock files = /filename.htm/*.txt/</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[share_name]</tt></i></td></tr><tr><td><i class="parameter"><tt>veto oplock files = /*.exe/filename.ext/</tt></i></td></tr></table></div><p>
+</p><p>
+ <a class="indexterm" name="id2909826"></a><i class="parameter"><tt>oplock break wait time</tt></i> is an <tt class="filename">smb.conf</tt> parameter that adjusts the time
interval for Samba to reply to an oplock break request. Samba
recommends &quot;DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND
UNDERSTOOD THE SAMBA OPLOCK CODE.&quot; Oplock Break Wait Time can only be
configured globally in the <tt class="filename">smb.conf</tt> file:
-</p><ns39:p>
-</ns39:p><pre class="programlisting">
-[global]
- oplock break wait time = 0 (default)
-</pre><ns39:p>
-</ns39:p><p>
+</p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>oplock break wait time = 0 (default)</tt></i></td></tr></table><p>
+</p><p>
<span class="emphasis"><em>Oplock break contention limit</em></span> is an <tt class="filename">smb.conf</tt> parameter that limits the
response of the Samba server to grant an oplock if the configured
number of contending clients reaches the limit specified by the
@@ -444,15 +425,9 @@ parameter. Samba recommends &quot;DO NOT CHANGE THIS PARAMETER UNLESS YOU
HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE.&quot; Oplock Break
Contention Limit can be enable on a per-share basis, or globally for
the entire server, in the <tt class="filename">smb.conf</tt> file:
-</p><ns39:p>
-</ns39:p><pre class="programlisting">
-[global]
- oplock break contention limit = 2 (default)
-
-[share_name]
- oplock break contention limit = 2 (default)
-</pre><ns39:p>
-</ns39:p></div></div></div><div xmlns:ns40="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2925776"></a>MS Windows Opportunistic Locking and Caching Controls</h2></div></div><div></div></div><p>
+</p><p>
+ </p><div class="example"><a name="id2909930"></a><p class="title"><b>Example14.2.</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>oplock break contention limit = 2 (default)</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[share_name]</tt></i></td></tr><tr><td><i class="parameter"><tt>oplock break contention limit = 2 (default)</tt></i></td></tr></table></div><p>
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2909983"></a>MS Windows Opportunistic Locking and Caching Controls</h2></div></div><div></div></div><p>
There is a known issue when running applications (like Norton Anti-Virus) on a Windows 2000/ XP
workstation computer that can affect any application attempting to access shared database files
across a network. This is a result of a default setting configured in the Windows 2000/XP
@@ -489,20 +464,20 @@ Windows 2000 will still respect the EnableOplocks registry value used to disable
in earlier versions of Windows.
</p></div><p>
You can also deny the granting of opportunistic locks by changing the following registry entries:
-</p><ns40:p>
-</ns40:p><pre class="programlisting">
+</p><p>
+</p><pre class="programlisting">
HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Services\MRXSmb\Parameters\
OplocksDisabled REG_DWORD 0 or 1
Default: 0 (not disabled)
-</pre><ns40:p>
-</ns40:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</pre><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The OplocksDisabled registry value configures Windows clients to either request or not
request opportunistic locks on a remote file. To disable oplocks, the value of
OplocksDisabled must be set to 1.
-</p></div><ns40:p>
-</ns40:p><pre class="programlisting">
+</p></div><p>
+</p><pre class="programlisting">
HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Services\LanmanServer\Parameters
@@ -511,8 +486,8 @@ request opportunistic locks on a remote file. To disable oplocks, the value of
EnableOpLockForceClose REG_DWORD 0 or 1
Default: 0 (Disabled by Default)
-</pre><ns40:p>
-</ns40:p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</pre><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The EnableOplocks value configures Windows-based servers (including Workstations sharing
files) to allow or deny opportunistic locks on local files.
</p></div><p>
@@ -544,7 +519,7 @@ An illustration of how level II oplocks work:
station holds any oplock on the file. Because the workstations can have no cached
writes or locks at this point, they need not respond to the break-to-none advisory;
all they need do is invalidate locally cashed read-ahead data.
- </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928213"></a>Workstation Service Entries</h3></div></div><div></div></div><pre class="programlisting">
+ </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910208"></a>Workstation Service Entries</h3></div></div><div></div></div><pre class="programlisting">
\HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Services\LanmanWorkstation\Parameters
@@ -553,7 +528,7 @@ An illustration of how level II oplocks work:
</pre><p>
Indicates whether the redirector should use opportunistic-locking (oplock) performance
enhancement. This parameter should be disabled only to isolate problems.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928240"></a>Server Service Entries</h3></div></div><div></div></div><pre class="programlisting">
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910237"></a>Server Service Entries</h3></div></div><div></div></div><pre class="programlisting">
\HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Services\LanmanServer\Parameters
@@ -582,8 +557,8 @@ the server disables raw I/O and opportunistic locking for this connection.
Specifies the time that the server waits for a client to respond to an oplock break
request. Smaller values can allow detection of crashed clients more quickly but can
potentially cause loss of cached data.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928320"></a>Persistent Data Corruption</h2></div></div><div></div></div><p>
-If you have applied all of the settings discussed in this paper but data corruption problems
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910317"></a>Persistent Data Corruption</h2></div></div><div></div></div><p>
+If you have applied all of the settings discussed in this chapter but data corruption problems
and other symptoms persist, here are some additional things to check out:
</p><p>
We have credible reports from developers that faulty network hardware, such as a single
@@ -593,7 +568,7 @@ rebuild the data files in question. This involves creating a new data file with
same definition as the file to be rebuilt and transferring the data from the old file
to the new one. There are several known methods for doing this that can be found in
our Knowledge Base.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928350"></a>Common Errors</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910345"></a>Common Errors</h2></div></div><div></div></div><p>
In some sites locking problems surface as soon as a server is installed, in other sites
locking problems may not surface for a long time. Almost without exception, when a locking
problem does surface it will cause embarrassment and potential data corruption.
@@ -623,18 +598,23 @@ so far:
report on https://bugzilla.samba.org without delay. Make sure that you give as much
information as you possibly can to help isolate the cause and to allow reproduction
of the problem (an essential step in problem isolation and correction).
- </p></li></ul></div><div xmlns:ns41="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928423"></a>locking.tdb error messages</h3></div></div><div></div></div><ns41:p>
- </ns41:p><pre class="screen">
- &gt; We are seeing lots of errors in the samba logs like:
- &gt;
- &gt; tdb(/usr/local/samba_2.2.7/var/locks/locking.tdb): rec_read bad magic
- &gt; 0x4d6f4b61 at offset=36116
- &gt;
- &gt; What do these mean?
- </pre><ns41:p>
- </ns41:p><p>
+ </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910419"></a>locking.tdb error messages</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">
+ We are seeing lots of errors in the samba logs like:
+</span>&#8221;
+</p><pre class="programlisting">
+tdb(/usr/local/samba_2.2.7/var/locks/locking.tdb): rec_read bad magic
+ 0x4d6f4b61 at offset=36116
+</pre><p>
+&#8220;<span class="quote">
+ What do these mean?
+ </span>&#8221;
+ </p><p>
Corrupted tdb. Stop all instances of smbd, delete locking.tdb, restart smbd.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928454"></a>Additional Reading</h2></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910456"></a>Problems saving files in MS Office on Windows XP</h3></div></div><div></div></div><p>This is a bug in Windows XP. More information can be
+ found in <a href="http://support.microsoft.com/?id=812937" target="_top">Microsoft Knowledge Base article 812937</a>.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910479"></a>Long delays deleting files over network with XP SP1</h3></div></div><div></div></div><p>&#8220;<span class="quote">It sometimes takes approximately 35 seconds to delete files over the network after XP SP1 has been applied</span>&#8221;</p><p>This is a bug in Windows XP. More information can be
+ found in <a href="http://support.microsoft.com/?id=811492" target="_top">
+ Microsoft Knowledge Base article 811492</a>.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910511"></a>Additional Reading</h2></div></div><div></div></div><p>
You may want to check for an updated version of this white paper on our Web site from
time to time. Many of our white papers are updated as information changes. For those papers,
the Last Edited date is always at the top of the paper.
@@ -654,4 +634,4 @@ Microsoft Corporation, April 2001, <a href="http://support.microsoft.com/default
</p><p>
Microsoft Knowledge Base Article Q129202 &quot;PC Ext: Explanation of Opportunistic Locking on Windows NT&quot;,
Microsoft Corporation, April 1995, <a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;Q129202" target="_top">http://support.microsoft.com/default.aspx?scid=kb;en-us;Q129202</a>.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="AccessControls.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="securing-samba.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter13.File, Directory and Share Access Controls</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter15.Securing Samba</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="AccessControls.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="securing-samba.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter13.File, Directory and Share Access Controls</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter15.Securing Samba</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/migration.html b/docs/htmldocs/migration.html
index c099bb51376..36b6edb0b1d 100644
--- a/docs/htmldocs/migration.html
+++ b/docs/htmldocs/migration.html
@@ -1,2 +1 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartIV.Migration and Updating</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="SambaHA.html" title="Chapter29.High Availability Options"><link rel="next" href="upgrading-to-3.0.html" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartIV.Migration and Updating</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="SambaHA.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="upgrading-to-3.0.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="migration"></a>Migration and Updating</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>30. <a href="upgrading-to-3.0.html">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id3001143">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id3001165">Obsolete configuration options</a></dt><dt><a href="upgrading-to-3.0.html#id3001219">Password Backend</a></dt></dl></dd><dt>31. <a href="NT4Migration.html">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="NT4Migration.html#id3000463">Planning and Getting Started</a></dt><dd><dl><dt><a href="NT4Migration.html#id3000487">Objectives</a></dt><dt><a href="NT4Migration.html#id2999415">Steps In Migration Process</a></dt></dl></dd><dt><a href="NT4Migration.html#id3001632">Migration Options</a></dt><dd><dl><dt><a href="NT4Migration.html#id3001713">Planning for Success</a></dt><dt><a href="NT4Migration.html#id3001954">Samba Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="SWAT.html">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="SWAT.html#id3002261">Features and Benefits</a></dt><dd><dl><dt><a href="SWAT.html#id3002111">Enabling SWAT for use</a></dt><dt><a href="SWAT.html#id3003000">Securing SWAT through SSL</a></dt><dt><a href="SWAT.html#id3003113">The SWAT Home Page</a></dt><dt><a href="SWAT.html#id3003176">Global Settings</a></dt><dt><a href="SWAT.html#id3003282">Share Settings</a></dt><dt><a href="SWAT.html#id3003346">Printers Settings</a></dt><dt><a href="SWAT.html#id3003411">The SWAT Wizard</a></dt><dt><a href="SWAT.html#id3003459">The Status Page</a></dt><dt><a href="SWAT.html#id3003511">The View Page</a></dt><dt><a href="SWAT.html#id3003534">The Password Change Page</a></dt></dl></dd></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="SambaHA.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="upgrading-to-3.0.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter29.High Availability Options</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</td></tr></table></div></body></html>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartIV.Migration and Updating</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="previous" href="SambaHA.html" title="Chapter29.High Availability Options"><link rel="next" href="upgrading-to-3.0.html" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartIV.Migration and Updating</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="SambaHA.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="upgrading-to-3.0.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="migration"></a>Migration and Updating</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>30. <a href="upgrading-to-3.0.html">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id2954094">New Features in Samba-3</a></dt><dt><a href="upgrading-to-3.0.html#id2954229">Configuration Parameter Changes</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id2954244">Removed Parameters</a></dt><dt><a href="upgrading-to-3.0.html#id2954370">New Parameters</a></dt><dt><a href="upgrading-to-3.0.html#id2954767">Modified Parameters (changes in behavior):</a></dt></dl></dd><dt><a href="upgrading-to-3.0.html#id2954842">New Functionality</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id2954849">Databases</a></dt><dt><a href="upgrading-to-3.0.html#id2955083">Changes in Behavior</a></dt><dt><a href="upgrading-to-3.0.html#id2955133">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id2955156">Passdb Backends and Authentication</a></dt><dt><a href="upgrading-to-3.0.html#id2955274">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id2955299">LDAP</a></dt></dl></dd></dl></dd><dt>31. <a href="NT4Migration.html">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="NT4Migration.html#id2955644">Planning and Getting Started</a></dt><dd><dl><dt><a href="NT4Migration.html#id2955669">Objectives</a></dt><dt><a href="NT4Migration.html#id2956108">Steps In Migration Process</a></dt></dl></dd><dt><a href="NT4Migration.html#id2956323">Migration Options</a></dt><dd><dl><dt><a href="NT4Migration.html#id2956414">Planning for Success</a></dt><dt><a href="NT4Migration.html#id2956670">Samba-3 Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="SWAT.html">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="SWAT.html#id2957030">Features and Benefits</a></dt><dd><dl><dt><a href="SWAT.html#id2957079">Enabling SWAT for use</a></dt><dt><a href="SWAT.html#id2957316">Securing SWAT through SSL</a></dt><dt><a href="SWAT.html#id2957428">The SWAT Home Page</a></dt><dt><a href="SWAT.html#id2957493">Global Settings</a></dt><dt><a href="SWAT.html#id2957601">Share Settings</a></dt><dt><a href="SWAT.html#id2957665">Printers Settings</a></dt><dt><a href="SWAT.html#id2957730">The SWAT Wizard</a></dt><dt><a href="SWAT.html#id2957777">The Status Page</a></dt><dt><a href="SWAT.html#id2957829">The View Page</a></dt><dt><a href="SWAT.html#id2957853">The Password Change Page</a></dt></dl></dd></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="SambaHA.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-doc.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="upgrading-to-3.0.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter29.High Availability Options</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/msdfs.html b/docs/htmldocs/msdfs.html
index fc05fee5386..9fdf906ed05 100644
--- a/docs/htmldocs/msdfs.html
+++ b/docs/htmldocs/msdfs.html
@@ -1,25 +1,22 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter17.Hosting a Microsoft Distributed File System tree on Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="InterdomainTrusts.html" title="Chapter16.Interdomain Trust Relationships"><link rel="next" href="printing.html" title="Chapter18.Classical Printing Support"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter17.Hosting a Microsoft Distributed File System tree on Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="InterdomainTrusts.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="printing.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="msdfs"></a>Chapter17.Hosting a Microsoft Distributed File System tree on Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Shirish</span> <span class="surname">Kalele</span></h3><div class="affiliation"><span class="orgname">Samba Team &amp; Veritas Software<br></span><div class="address"><p><br>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter17.Hosting a Microsoft Distributed File System tree on Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="InterdomainTrusts.html" title="Chapter16.Interdomain Trust Relationships"><link rel="next" href="printing.html" title="Chapter18.Classical Printing Support"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter17.Hosting a Microsoft Distributed File System tree on Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="InterdomainTrusts.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="printing.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="msdfs"></a>Chapter17.Hosting a Microsoft Distributed File System tree on Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Shirish</span> <span class="surname">Kalele</span></h3><div class="affiliation"><span class="orgname">Samba Team &amp; Veritas Software<br></span><div class="address"><p><br>
<tt class="email">&lt;<a href="mailto:samba@samba.org">samba@samba.org</a>&gt;</tt><br>
- </p></div></div></div></div><div><p class="pubdate">12 Jul 2000</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="msdfs.html#id2929286">Features and Benefits</a></dt><dt><a href="msdfs.html#id2930696">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929286"></a>Features and Benefits</h2></div></div><div></div></div><p>
+ </p></div></div></div></div><div><p class="pubdate">12 Jul 2000</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="msdfs.html#id2912546">Features and Benefits</a></dt><dt><a href="msdfs.html#id2912820">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912546"></a>Features and Benefits</h2></div></div><div></div></div><p>
The Distributed File System (or DFS) provides a means of separating the logical
view of files and directories that users see from the actual physical locations
of these resources on the network. It allows for higher availability, smoother
storage expansion, load balancing etc.
</p><p>
- For information about DFS, refer to
- <a href="http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp" target="_top">
- Microsoft documentation at http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp</a>.
+ For information about DFS, refer to the
+<a href="http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp" target="_top">Microsoft documentation</a>.
</p><p>
- This document explains how to host a DFS tree on a Unix machine (for DFS-aware
+ This document explains how to host a DFS tree on a UNIX machine (for DFS-aware
clients to browse) using Samba.
</p><p>
- To enable SMB-based DFS for Samba, configure it with the <i class="parameter"><tt>--with-msdfs</tt></i>
+ To enable SMB-based DFS for Samba, configure it with the <tt class="option">--with-msdfs</tt>
option. Once built, a Samba server can be made a DFS server by setting the global
- boolean <a href="smb.conf.5.html#HOSTMSDFS" target="_top"><i class="parameter"><tt> host msdfs</tt></i></a>
- parameter in the <tt class="filename">smb.conf </tt> file. You designate a share as a DFS
- root using the share level boolean <a href="smb.conf.5.html#MSDFSROOT" target="_top"><i class="parameter"><tt>
- msdfs root</tt></i></a> parameter. A DFS root directory on Samba hosts DFS
+ boolean <a class="indexterm" name="id2912593"></a><i class="parameter"><tt>host msdfs</tt></i>
+ parameter in the <tt class="filename">smb.conf</tt> file. You designate a share as a DFS
+ root using the share level boolean <a class="indexterm" name="id2912615"></a><i class="parameter"><tt>msdfs root</tt></i> parameter. A DFS root directory on Samba hosts DFS
links in the form of symbolic links that point to other servers. For example, a symbolic link
<tt class="filename">junction-&gt;msdfs:storage1\share1</tt> in the share directory acts
as the DFS junction. When DFS-aware clients attempt to access the junction link,
@@ -28,23 +25,14 @@
DFS trees on Samba work with all DFS-aware clients ranging from Windows 95 to 200x.
</p><p>
Here's an example of setting up a DFS tree on a Samba server.
- </p><pre class="programlisting">
-# The smb.conf file:
-[global]
- netbios name = SMOKEY
- host msdfs = yes
-
-[dfs]
- path = /export/dfsroot
- msdfs root = yes
- </pre><p>In the /export/dfsroot directory we set up our dfs links to
+ </p><div class="example"><a name="id2912656"></a><p class="title"><b>Example17.1.smb.conf with DFS configured</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>netbios name = GANDALF</tt></i></td></tr><tr><td><i class="parameter"><tt>host msdfs = yes</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[dfs]</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /export/dfsroot</tt></i></td></tr><tr><td><i class="parameter"><tt>msdfs root = yes</tt></i></td></tr></table></div><p>In the /export/dfsroot directory we set up our DFS links to
other servers on the network.</p><pre class="screen">
- <tt class="prompt">root# </tt><b class="userinput"><tt>cd /export/dfsroot</tt></b>
- <tt class="prompt">root# </tt><b class="userinput"><tt>chown root /export/dfsroot</tt></b>
- <tt class="prompt">root# </tt><b class="userinput"><tt>chmod 755 /export/dfsroot</tt></b>
- <tt class="prompt">root# </tt><b class="userinput"><tt>ln -s msdfs:storageA\\shareA linka</tt></b>
- <tt class="prompt">root# </tt><b class="userinput"><tt>ln -s msdfs:serverB\\share,serverC\\share linkb</tt></b>
- </pre><p>You should set up the permissions and ownership of
+<tt class="prompt">root# </tt><b class="userinput"><tt>cd /export/dfsroot</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>chown root /export/dfsroot</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>chmod 755 /export/dfsroot</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>ln -s msdfs:storageA\\shareA linka</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>ln -s msdfs:serverB\\share,serverC\\share linkb</tt></b>
+</pre><p>You should set up the permissions and ownership of
the directory acting as the DFS root such that only designated
users can create, delete or modify the msdfs links. Also note
that symlink names should be all lowercase. This limitation exists
@@ -53,11 +41,11 @@
network shares you want, and start Samba.</p><p>Users on DFS-aware clients can now browse the DFS tree
on the Samba server at \\samba\dfs. Accessing
links linka or linkb (which appear as directories to the client)
- takes users directly to the appropriate shares on the network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2930696"></a>Common Errors</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Windows clients need to be rebooted
- if a previously mounted non-dfs share is made a dfs
+ takes users directly to the appropriate shares on the network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912820"></a>Common Errors</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Windows clients need to be rebooted
+ if a previously mounted non-dfs share is made a DFS
root or vice versa. A better way is to introduce a
- new share and make it the dfs root.</p></li><li><p>Currently there's a restriction that msdfs
+ new share and make it the DFS root.</p></li><li><p>Currently there's a restriction that msdfs
symlink names should all be lowercase.</p></li><li><p>For security purposes, the directory
acting as the root of the DFS tree should have ownership
and permissions set so that only designated users can
- modify the symbolic links in the directory.</p></li></ul></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="InterdomainTrusts.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="printing.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter16.Interdomain Trust Relationships</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter18.Classical Printing Support</td></tr></table></div></body></html>
+ modify the symbolic links in the directory.</p></li></ul></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="InterdomainTrusts.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="printing.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter16.Interdomain Trust Relationships</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter18.Classical Printing Support</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/net.8.html b/docs/htmldocs/net.8.html
index dd7c0165ada..cacc1090f6a 100644
--- a/docs/htmldocs/net.8.html
+++ b/docs/htmldocs/net.8.html
@@ -24,16 +24,15 @@
Defaults to trying 445 first, then 139.
</p></dd><dt><span class="term">-n &lt;primary NetBIOS name&gt;</span></dt><dd><p>This option allows you to override
the NetBIOS name that Samba uses for itself. This is identical
-to setting the <a href="smb.conf.5.html#netbiosname" target="_top"><i class="parameter"><tt>NetBIOS
-name</tt></i></a> parameter in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. However, a command
+to setting the <a class="indexterm" name="id2796721"></a><i class="parameter"><tt>netbios name</tt></i> parameter in the <tt class="filename">smb.conf</tt> file.
+However, a command
line setting will take precedence over settings in
-<a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></dd><dt><span class="term">-s &lt;configuration file&gt;</span></dt><dd><p>The file specified contains the
+<tt class="filename">smb.conf</tt>.</p></dd><dt><span class="term">-s &lt;configuration file&gt;</span></dt><dd><p>The file specified contains the
configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-S server</span></dt><dd><p>
Name of target server. You should specify either
@@ -54,9 +53,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>COMMANDS</h2><div class="refsect2" lang="en"><h3>TIME</h3><p>The <b class="command">NET TIME</b> command allows you to view the time on a remote server
+override the <a class="indexterm" name="id2796870"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>COMMANDS</h2><div class="refsect2" lang="en"><h3>TIME</h3><p>The <b class="command">NET TIME</b> command allows you to view the time on a remote server
or synchronise the time on the local server with the time on the remote server.</p><div class="refsect3" lang="en"><h4>TIME</h4><p>Without any options, the <b class="command">NET TIME</b> command
displays the time on the remote server.
</p></div><div class="refsect3" lang="en"><h4>TIME SYSTEM</h4><p> Displays the time on the remote server in a format ready for <b class="command">/bin/date</b></p></div><div class="refsect3" lang="en"><h4>TIME SET</h4><p>Tries to set the date and time of the local server to that on
@@ -95,12 +93,12 @@ The type defaults to 0x20 (workstation).
</p></div><div class="refsect3" lang="en"><h4>LOOKUP LDAP [<i class="replaceable"><tt>DOMAIN</tt></i></h4><p>Give IP address of LDAP server of specified <i class="replaceable"><tt>DOMAIN</tt></i>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><h4>LOOKUP KDC [<i class="replaceable"><tt>REALM</tt></i>]</h4><p>Give IP address of KDC for the specified <i class="replaceable"><tt>REALM</tt></i>.
Defaults to local realm.</p></div><div class="refsect3" lang="en"><h4>LOOKUP DC [<i class="replaceable"><tt>DOMAIN</tt></i>]</h4><p>Give IP's of Domain Controllers for specified <i class="replaceable"><tt>
DOMAIN</tt></i>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><h4>LOOKUP MASTER <i class="replaceable"><tt>DOMAIN</tt></i></h4><p>Give IP of master browser for specified <i class="replaceable"><tt>DOMAIN</tt></i>
-or workgroup. Defaults to local domain.</p></div></div><div xmlns:ns1="" class="refsect2" lang="en"><h3>CACHE</h3><p>Samba uses a general caching interface called 'gencache'. It
-can be controlled using 'NET CACHE'.</p><ns1:p>All the timeout parameters support the suffixes:
+or workgroup. Defaults to local domain.</p></div></div><div class="refsect2" lang="en"><h3>CACHE</h3><p>Samba uses a general caching interface called 'gencache'. It
+can be controlled using 'NET CACHE'.</p><p>All the timeout parameters support the suffixes:
-</ns1:p><table class="simplelist" border="0" summary="Simple list"><tr><td>s - Seconds</td></tr><tr><td>m - Minutes</td></tr><tr><td>h - Hours</td></tr><tr><td>d - Days</td></tr><tr><td>w - Weeks</td></tr></table><ns1:p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td>s - Seconds</td></tr><tr><td>m - Minutes</td></tr><tr><td>h - Hours</td></tr><tr><td>d - Days</td></tr><tr><td>w - Weeks</td></tr></table><p>
-</ns1:p><div class="refsect3" lang="en"><h4>CACHE ADD <i class="replaceable"><tt>key</tt></i> <i class="replaceable"><tt>data</tt></i> <i class="replaceable"><tt>time-out</tt></i></h4><p>Add specified key+data to the cache with the given timeout.</p></div><div class="refsect3" lang="en"><h4>CACHE DEL <i class="replaceable"><tt>key</tt></i></h4><p>Delete key from the cache.</p></div><div class="refsect3" lang="en"><h4>CACHE SET <i class="replaceable"><tt>key</tt></i> <i class="replaceable"><tt>data</tt></i> <i class="replaceable"><tt>time-out</tt></i></h4><p>Update data of existing cache entry.</p></div><div class="refsect3" lang="en"><h4>CACHE SEARCH <i class="replaceable"><tt>PATTERN</tt></i></h4><p>Search for the specified pattern in the cache data.</p></div><div class="refsect3" lang="en"><h4>CACHE LIST</h4><p>
+</p><div class="refsect3" lang="en"><h4>CACHE ADD <i class="replaceable"><tt>key</tt></i> <i class="replaceable"><tt>data</tt></i> <i class="replaceable"><tt>time-out</tt></i></h4><p>Add specified key+data to the cache with the given timeout.</p></div><div class="refsect3" lang="en"><h4>CACHE DEL <i class="replaceable"><tt>key</tt></i></h4><p>Delete key from the cache.</p></div><div class="refsect3" lang="en"><h4>CACHE SET <i class="replaceable"><tt>key</tt></i> <i class="replaceable"><tt>data</tt></i> <i class="replaceable"><tt>time-out</tt></i></h4><p>Update data of existing cache entry.</p></div><div class="refsect3" lang="en"><h4>CACHE SEARCH <i class="replaceable"><tt>PATTERN</tt></i></h4><p>Search for the specified pattern in the cache data.</p></div><div class="refsect3" lang="en"><h4>CACHE LIST</h4><p>
List all current items in the cache.
</p></div><div class="refsect3" lang="en"><h4>CACHE FLUSH</h4><p>Remove all the current items from the cache.</p></div></div><div class="refsect2" lang="en"><h3>GETLOCALSID [DOMAIN]</h3><p>Print the SID of the specified domain, or if the parameter is
omitted, the SID of the domain the local server is in.</p></div><div class="refsect2" lang="en"><h3>SETLOCALSID S-1-5-21-x-y-z</h3><p>Sets domain sid for the local server to the specified SID.</p></div><div class="refsect2" lang="en"><h3>GROUPMAP</h3><p>Manage the mappings between Windows group SIDs and UNIX groups.
diff --git a/docs/htmldocs/nmbd.8.html b/docs/htmldocs/nmbd.8.html
index c282bde89d4..ad1c7990c0e 100644
--- a/docs/htmldocs/nmbd.8.html
+++ b/docs/htmldocs/nmbd.8.html
@@ -51,8 +51,7 @@
</p></dd><dt><span class="term">-H &lt;filename&gt;</span></dt><dd><p>NetBIOS lmhosts file. The lmhosts
file is a list of NetBIOS names to IP addresses that
is loaded by the nmbd server and used via the name
- resolution mechanism <a href="smb.conf.5.html#nameresolveorder" target="_top"><i class="parameter"><tt>name resolve
- order</tt></i></a> described in <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> to resolve any
+ resolution mechanism <a class="indexterm" name="id2796904"></a><i class="parameter"><tt>name resolve order</tt></i> described in <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> to resolve any
NetBIOS name queries needed by the server. Note
that the contents of this file are <span class="emphasis"><em>NOT</em></span>
used by <b class="command">nmbd</b> to answer any name queries.
@@ -67,8 +66,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -82,9 +80,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2797084"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd><dt><span class="term">-p &lt;UDP port number&gt;</span></dt><dd><p>UDP port number is a positive integer value.
@@ -94,29 +91,26 @@ never removed by the client.
won't need help!</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><tt class="filename">/etc/inetd.conf</tt></span></dt><dd><p>If the server is to be run by the
<b class="command">inetd</b> meta-daemon, this file
must contain suitable startup information for the
- meta-daemon. See the <a href="install.html" target="_top">install</a> document
- for details.
+ meta-daemon.
</p></dd><dt><span class="term"><tt class="filename">/etc/rc</tt></span></dt><dd><p>or whatever initialization script your
system uses).</p><p>If running the server as a daemon at startup,
this file will need to contain an appropriate startup
- sequence for the server. See the <a href="install.html" target="_top">&quot;How to Install and Test SAMBA&quot;</a> document
- for details.</p></dd><dt><span class="term"><tt class="filename">/etc/services</tt></span></dt><dd><p>If running the server via the
+ sequence for the server.</p></dd><dt><span class="term"><tt class="filename">/etc/services</tt></span></dt><dd><p>If running the server via the
meta-daemon <b class="command">inetd</b>, this file
must contain a mapping of service name (e.g., netbios-ssn)
to service port (e.g., 139) and protocol type (e.g., tcp).
- See the <a href="install.html" target="_top">&quot;How to Install and Test SAMBA&quot;</a>
- document for details.</p></dd><dt><span class="term"><tt class="filename">/usr/local/samba/lib/smb.conf</tt></span></dt><dd><p>This is the default location of
+ </p></dd><dt><span class="term"><tt class="filename">/usr/local/samba/lib/smb.conf</tt></span></dt><dd><p>This is the default location of
the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> server
configuration file. Other common places that systems
install this file are <tt class="filename">/usr/samba/lib/smb.conf</tt>
and <tt class="filename">/etc/samba/smb.conf</tt>.</p><p>When run as a WINS server (see the
- <a href="smb.conf.5.html#WINSSUPPORT" target="_top"><tt class="constant">wins support</tt></a>
+ <a class="indexterm" name="id2797295"></a><i class="parameter"><tt>wins support</tt></i>
parameter in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> man page),
<b class="command">nmbd</b>
will store the WINS database in the file <tt class="filename">wins.dat</tt>
in the <tt class="filename">var/locks</tt> directory configured under
wherever Samba was configured to install itself.</p><p>If <b class="command">nmbd</b> is acting as a <span class="emphasis"><em>
- browse master</em></span> (see the <a href="smb.conf.5.html#LOCALMASTER" target="_top"><tt class="constant">local master</tt></a>
+ browse master</em></span> (see the <a class="indexterm" name="id2797358"></a><i class="parameter"><tt>local master</tt></i>
parameter in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> man page, <b class="command">nmbd</b>
will store the browsing database in the file <tt class="filename">browse.dat
</tt> in the <tt class="filename">var/locks</tt> directory
diff --git a/docs/htmldocs/nmblookup.1.html b/docs/htmldocs/nmblookup.1.html
index 46c17ce7068..21e84c9c71c 100644
--- a/docs/htmldocs/nmblookup.1.html
+++ b/docs/htmldocs/nmblookup.1.html
@@ -28,10 +28,10 @@
</p></dd><dt><span class="term">-A</span></dt><dd><p>Interpret <i class="replaceable"><tt>name</tt></i> as
an IP Address and do a node status query on this address.</p></dd><dt><span class="term">-n &lt;primary NetBIOS name&gt;</span></dt><dd><p>This option allows you to override
the NetBIOS name that Samba uses for itself. This is identical
-to setting the <a href="smb.conf.5.html#netbiosname" target="_top"><i class="parameter"><tt>NetBIOS
-name</tt></i></a> parameter in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. However, a command
+to setting the <a class="indexterm" name="id2796756"></a><i class="parameter"><tt>netbios name</tt></i> parameter in the <tt class="filename">smb.conf</tt> file.
+However, a command
line setting will take precedence over settings in
-<a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></dd><dt><span class="term">-i &lt;scope&gt;</span></dt><dd><p>This specifies a NetBIOS scope that
+<tt class="filename">smb.conf</tt>.</p></dd><dt><span class="term">-i &lt;scope&gt;</span></dt><dd><p>This specifies a NetBIOS scope that
<b class="command">nmblookup</b> will use to communicate with when
generating NetBIOS names. For details on the use of NetBIOS
scopes, see rfc1001.txt and rfc1002.txt. NetBIOS scopes are
@@ -43,7 +43,7 @@ smb.conf. If the domain specified is the same as the servers
NetBIOS name, it causes the client to log on using the servers local
SAM (as opposed to the Domain SAM). </p></dd><dt><span class="term">-O socket options</span></dt><dd><p>TCP socket options to set on the client
socket. See the socket options parameter in
-the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> manual page for the list of valid
+the <tt class="filename">smb.conf</tt> manual page for the list of valid
options. </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.
</p></dd><dt><span class="term">-B &lt;broadcast address&gt;</span></dt><dd><p>Send the query to the given broadcast address. Without
this option the default behavior of nmblookup is to send the
@@ -59,8 +59,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -74,9 +73,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2797037"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd><dt><span class="term">-T</span></dt><dd><p>This causes any IP addresses found in the
diff --git a/docs/htmldocs/ntlm_auth.1.html b/docs/htmldocs/ntlm_auth.1.html
index d2ee979d4d8..e048efae7be 100644
--- a/docs/htmldocs/ntlm_auth.1.html
+++ b/docs/htmldocs/ntlm_auth.1.html
@@ -17,8 +17,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -32,9 +31,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2796746"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.
diff --git a/docs/htmldocs/optional.html b/docs/htmldocs/optional.html
index 1a6d971f5f2..bd76a344f88 100644
--- a/docs/htmldocs/optional.html
+++ b/docs/htmldocs/optional.html
@@ -1,27 +1,35 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartIII.Advanced Configuration</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="ClientConfig.html" title="Chapter9.MS Windows Network Configuration Guide"><link rel="next" href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartIII.Advanced Configuration</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ClientConfig.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="NetworkBrowsing.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="optional"></a>Advanced Configuration</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2901329"></a>Valuable Nuts and Bolts Information</h1></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartIII.Advanced Configuration</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="previous" href="ClientConfig.html" title="Chapter9.MS Windows Network Configuration Guide"><link rel="next" href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartIII.Advanced Configuration</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ClientConfig.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="NetworkBrowsing.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="optional"></a>Advanced Configuration</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2893806"></a>Valuable Nuts and Bolts Information</h1></div></div><div></div></div><p>
Samba has several features that you might want or might not want to use. The chapters in this part each cover specific Samba features.
-</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>10. <a href="NetworkBrowsing.html">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2901654">Features and Benefits</a></dt><dt><a href="NetworkBrowsing.html#id2901733">What is Browsing?</a></dt><dt><a href="NetworkBrowsing.html#id2905839">Discussion</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2905855">NetBIOS over TCP/IP</a></dt><dt><a href="NetworkBrowsing.html#id2906017">TCP/IP - without NetBIOS</a></dt><dt><a href="NetworkBrowsing.html#id2900986">DNS and Active Directory</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2901119">How Browsing Functions</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2901245">Setting up WORKGROUP Browsing</a></dt><dt><a href="NetworkBrowsing.html#id2902631">Setting up DOMAIN Browsing</a></dt><dt><a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="NetworkBrowsing.html#id2902896">Making Samba the domain master</a></dt><dt><a href="NetworkBrowsing.html#id2903052">Note about broadcast addresses</a></dt><dt><a href="NetworkBrowsing.html#id2903070">Multiple interfaces</a></dt><dt><a href="NetworkBrowsing.html#id2906571">Use of the Remote Announce parameter</a></dt><dt><a href="NetworkBrowsing.html#id2906680">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2906741">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2906900">Setting up a WINS server</a></dt><dt><a href="NetworkBrowsing.html#id2907094">WINS Replication</a></dt><dt><a href="NetworkBrowsing.html#id2907119">Static WINS Entries</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2907203">Helpful Hints</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2907217">Windows Networking Protocols</a></dt><dt><a href="NetworkBrowsing.html#id2907283">Name Resolution Order</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2907421">Technical Overview of browsing</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2907468">Browsing support in Samba</a></dt><dt><a href="NetworkBrowsing.html#id2907575">Problem resolution</a></dt><dt><a href="NetworkBrowsing.html#id2907654">Browsing across subnets</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2908270">Common Errors</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2908285">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="NetworkBrowsing.html#id2908313">My client reports &quot;This server is not configured to list shared resources&quot;</a></dt></dl></dd></dl></dd><dt>11. <a href="passdb.html">Account Information Databases</a></dt><dd><dl><dt><a href="passdb.html#id2911689">Features and Benefits</a></dt><dt><a href="passdb.html#id2908580">Technical Information</a></dt><dd><dl><dt><a href="passdb.html#id2908644">Important Notes About Security</a></dt><dt><a href="passdb.html#id2908888">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="passdb.html#id2908943">Account Management Tools</a></dt><dd><dl><dt><a href="passdb.html#id2908975">The smbpasswd Command</a></dt><dt><a href="passdb.html#id2909240">The pdbedit Command</a></dt></dl></dd><dt><a href="passdb.html#id2909374">Password Backends</a></dt><dd><dl><dt><a href="passdb.html#id2909410">Plain Text</a></dt><dt><a href="passdb.html#id2909450">smbpasswd - Encrypted Password Database</a></dt><dt><a href="passdb.html#id2913891">tdbsam</a></dt><dt><a href="passdb.html#id2913919">ldapsam</a></dt><dt><a href="passdb.html#id2915407">MySQL</a></dt><dt><a href="passdb.html#XMLpassdb">XML</a></dt></dl></dd><dt><a href="passdb.html#id2916213">Common Errors</a></dt><dd><dl><dt><a href="passdb.html#id2916220">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="passdb.html#id2916235">Users are being added to the wrong backend database</a></dt><dt><a href="passdb.html#id2916295">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="groupmapping.html">Mapping MS Windows and Unix Groups</a></dt><dd><dl><dt><a href="groupmapping.html#id2916467">Features and Benefits</a></dt><dt><a href="groupmapping.html#id2916568">Discussion</a></dt><dd><dl><dt><a href="groupmapping.html#id2916756">Example Configuration</a></dt></dl></dd><dt><a href="groupmapping.html#id2916822">Configuration Scripts</a></dt><dd><dl><dt><a href="groupmapping.html#id2916836">Sample smb.conf add group script</a></dt><dt><a href="groupmapping.html#id2916903">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="groupmapping.html#id2916977">Common Errors</a></dt><dd><dl><dt><a href="groupmapping.html#id2916993">Adding Groups Fails</a></dt><dt><a href="groupmapping.html#id2917053">Adding MS Windows Groups to MS Windows Groups Fails</a></dt></dl></dd></dl></dd><dt>13. <a href="AccessControls.html">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920239">Features and Benefits</a></dt><dt><a href="AccessControls.html#id2920364">File System Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2920382">MS Windows NTFS Comparison with Unix File Systems</a></dt><dt><a href="AccessControls.html#id2917299">Managing Directories</a></dt><dt><a href="AccessControls.html#id2917394">File and Directory Access Control</a></dt></dl></dd><dt><a href="AccessControls.html#id2917800">Share Definition Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2917828">User and Group Based Controls</a></dt><dt><a href="AccessControls.html#id2918100">File and Directory Permissions Based Controls</a></dt><dt><a href="AccessControls.html#id2918346">Miscellaneous Controls</a></dt></dl></dd><dt><a href="AccessControls.html#id2922930">Access Controls on Shares</a></dt><dd><dl><dt><a href="AccessControls.html#id2923002">Share Permissions Management</a></dt></dl></dd><dt><a href="AccessControls.html#id2923301">MS Windows Access Control Lists and Unix Interoperability</a></dt><dd><dl><dt><a href="AccessControls.html#id2923309">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="AccessControls.html#id2923347">Viewing File Security on a Samba Share</a></dt><dt><a href="AccessControls.html#id2923426">Viewing file ownership</a></dt><dt><a href="AccessControls.html#id2923548">Viewing File or Directory Permissions</a></dt><dt><a href="AccessControls.html#id2923776">Modifying file or directory permissions</a></dt><dt><a href="AccessControls.html#id2923928">Interaction with the standard Samba create mask
- parameters</a></dt><dt><a href="AccessControls.html#id2924258">Interaction with the standard Samba file attribute
- mapping</a></dt></dl></dd><dt><a href="AccessControls.html#id2924333">Common Errors</a></dt><dd><dl><dt><a href="AccessControls.html#id2924347">Users can not write to a public share</a></dt><dt><a href="AccessControls.html#id2924726">I have set force user and Samba still makes root the owner of all the files
- I touch!</a></dt></dl></dd></dl></dd><dt>14. <a href="locking.html">File and Record Locking</a></dt><dd><dl><dt><a href="locking.html#id2926847">Features and Benefits</a></dt><dt><a href="locking.html#id2926902">Discussion</a></dt><dd><dl><dt><a href="locking.html#id2927033">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="locking.html#id2925408">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="locking.html#id2925517">Example Configuration</a></dt></dl></dd><dt><a href="locking.html#id2925776">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="locking.html#id2928213">Workstation Service Entries</a></dt><dt><a href="locking.html#id2928240">Server Service Entries</a></dt></dl></dd><dt><a href="locking.html#id2928320">Persistent Data Corruption</a></dt><dt><a href="locking.html#id2928350">Common Errors</a></dt><dd><dl><dt><a href="locking.html#id2928423">locking.tdb error messages</a></dt></dl></dd><dt><a href="locking.html#id2928454">Additional Reading</a></dt></dl></dd><dt>15. <a href="securing-samba.html">Securing Samba</a></dt><dd><dl><dt><a href="securing-samba.html#id2929879">Introduction</a></dt><dt><a href="securing-samba.html#id2929912">Features and Benefits</a></dt><dt><a href="securing-samba.html#id2928572">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="securing-samba.html#id2928590">Using host based protection</a></dt><dt><a href="securing-samba.html#id2928659">User based protection</a></dt><dt><a href="securing-samba.html#id2928710">Using interface protection</a></dt><dt><a href="securing-samba.html#id2928760">Using a firewall</a></dt><dt><a href="securing-samba.html#id2928816">Using a IPC$ share deny</a></dt><dt><a href="securing-samba.html#id2928881">NTLMv2 Security</a></dt></dl></dd><dt><a href="securing-samba.html#id2928920">Upgrading Samba</a></dt><dt><a href="securing-samba.html#id2928943">Common Errors</a></dt><dd><dl><dt><a href="securing-samba.html#id2928962">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="securing-samba.html#id2928987">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="InterdomainTrusts.html">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929505">Features and Benefits</a></dt><dt><a href="InterdomainTrusts.html#id2929534">Trust Relationship Background</a></dt><dt><a href="InterdomainTrusts.html#id2929617">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929629">NT4 as the Trusting Domain (ie. creating the trusted account)</a></dt><dt><a href="InterdomainTrusts.html#id2931604">NT4 as the Trusted Domain (ie. creating trusted account's password)</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2931642">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2931669">Samba-3 as the Trusting Domain</a></dt><dt><a href="InterdomainTrusts.html#id2931795">Samba-3 as the Trusted Domain</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2929173">Common Errors</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2929188">Tell me about Trust Relationships using Samba</a></dt></dl></dd></dl></dd><dt>17. <a href="msdfs.html">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="msdfs.html#id2929286">Features and Benefits</a></dt><dt><a href="msdfs.html#id2930696">Common Errors</a></dt></dl></dd><dt>18. <a href="printing.html">Classical Printing Support</a></dt><dd><dl><dt><a href="printing.html#id2932219">Features and Benefits</a></dt><dt><a href="printing.html#id2932283">Technical Introduction</a></dt><dd><dl><dt><a href="printing.html#id2932319">What happens if you send a Job from a Client</a></dt><dt><a href="printing.html#id2932389">Printing Related Configuration Parameters</a></dt><dt><a href="printing.html#id2935498">Parameters Recommended for Use</a></dt><dt><a href="printing.html#id2930858">Parameters for Backwards Compatibility</a></dt><dt><a href="printing.html#id2930966">Parameters no longer in use</a></dt></dl></dd><dt><a href="printing.html#id2931059">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="printing.html#id2933066">Verification of &quot;Settings in Use&quot; with testparm</a></dt><dt><a href="printing.html#id2933148">A little Experiment to warn you</a></dt></dl></dd><dt><a href="printing.html#id2933455">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="printing.html#id2933547">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="printing.html#id2933560">The [global] Section</a></dt><dt><a href="printing.html#id2943021">The [printers] Section</a></dt><dt><a href="printing.html#id2943350">Any [my_printer_name] Section</a></dt><dt><a href="printing.html#id2943571">Print Commands</a></dt><dt><a href="printing.html#id2943622">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="printing.html#id2944148">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="printing.html#id2944425">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="printing.html#id2944579">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="printing.html#id2944731">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="printing.html#id2944844">Creating the [print$] Share</a></dt><dt><a href="printing.html#id2944914">Parameters in the [print$] Section</a></dt><dt><a href="printing.html#id2945135">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="printing.html#id2945296">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="printing.html#id2945390">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="printing.html#id2945574">Setting Drivers for existing Printers with
-rpcclient</a></dt></dl></dd><dt><a href="printing.html#id2947172">&quot;The Proof of the Pudding lies in the Eating&quot; (Client Driver Install
-Procedure)</a></dt><dd><dl><dt><a href="printing.html#id2947193">The first Client Driver Installation</a></dt><dt><a href="printing.html#id2947391">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="printing.html#id2947680">Further Client Driver Install Procedures</a></dt><dt><a href="printing.html#id2947775">Always make first Client Connection as root or &quot;printer admin&quot;</a></dt></dl></dd><dt><a href="printing.html#id2947917">Other Gotchas</a></dt><dd><dl><dt><a href="printing.html#id2947950">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="printing.html#id2948384">Supporting large Numbers of Printers</a></dt><dt><a href="printing.html#id2948687">Adding new Printers with the Windows NT APW</a></dt><dt><a href="printing.html#id2948930">Weird Error Message Cannot connect under a
-different Name</a></dt><dt><a href="printing.html#id2949028">Be careful when assembling Driver Files</a></dt><dt><a href="printing.html#id2949299">Samba and Printer Ports</a></dt><dt><a href="printing.html#id2949370">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="printing.html#id2949392">The Imprints Toolset</a></dt><dd><dl><dt><a href="printing.html#id2949437">What is Imprints?</a></dt><dt><a href="printing.html#id2949479">Creating Printer Driver Packages</a></dt><dt><a href="printing.html#id2949498">The Imprints Server</a></dt><dt><a href="printing.html#id2949522">The Installation Client</a></dt></dl></dd><dt><a href="printing.html#id2949674">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="printing.html#id2950004">The addprinter command</a></dt><dt><a href="printing.html#id2950049">Migration of &quot;Classical&quot; printing to Samba-3</a></dt><dt><a href="printing.html#id2950217">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="printing.html#id2950232">Common Errors and Problems</a></dt><dd><dl><dt><a href="printing.html#id2950245">I give my root password but I don't get access</a></dt><dt><a href="printing.html#id2950278">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="CUPS-printing.html">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957297">Introduction</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957304">Features and Benefits</a></dt><dt><a href="CUPS-printing.html#id2957352">Overview</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2957404">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2957483">Linking of smbd with libcups.so</a></dt><dt><a href="CUPS-printing.html#id2950396">Simple smb.conf Settings for CUPS</a></dt><dt><a href="CUPS-printing.html#id2957550">More complex smb.conf Settings for
-CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2950555">Advanced Configuration</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2950575">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2950602">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
-with Vendor Drivers on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2950639">Driver Installation Methods on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2950697">Explicitly enable &quot;raw&quot; printing for
-application/octet-stream!</a></dt><dt><a href="CUPS-printing.html#id2950858">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2950951">Using CUPS/Samba in an advanced Way -- intelligent printing
-with PostScript Driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2951026">GDI on Windows -- PostScript on Unix</a></dt><dt><a href="CUPS-printing.html#id2951071">Windows Drivers, GDI and EMF</a></dt><dt><a href="CUPS-printing.html#id2951170">Unix Printfile Conversion and GUI Basics</a></dt><dt><a href="CUPS-printing.html#id2951241">PostScript and Ghostscript</a></dt><dt><a href="CUPS-printing.html#id2951338">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="CUPS-printing.html#id2951433">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="CUPS-printing.html#id2964250">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="CUPS-printing.html#id2964339">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2964362">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2964500">MIME types and CUPS Filters</a></dt><dt><a href="CUPS-printing.html#id2964688">MIME type Conversion Rules</a></dt><dt><a href="CUPS-printing.html#id2964804">Filter Requirements</a></dt><dt><a href="CUPS-printing.html#id2964973">Prefilters</a></dt><dt><a href="CUPS-printing.html#id2965058">pstops</a></dt><dt><a href="CUPS-printing.html#id2965161">pstoraster</a></dt><dt><a href="CUPS-printing.html#id2965317">imagetops and imagetoraster</a></dt><dt><a href="CUPS-printing.html#id2965372">rasterto [printers specific]</a></dt><dt><a href="CUPS-printing.html#id2965457">CUPS Backends</a></dt><dt><a href="CUPS-printing.html#id2965771">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="CUPS-printing.html#id2965874">The Complete Picture</a></dt><dt><a href="CUPS-printing.html#id2965889">mime.convs</a></dt><dt><a href="CUPS-printing.html#id2965942">&quot;Raw&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2965996">&quot;application/octet-stream&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2966212">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="CUPS-printing.html#id2966439">Difference between cupsomatic/foomatic-rip and
-native CUPS printing</a></dt><dt><a href="CUPS-printing.html#id2966596">Examples for filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2966825">Sources of CUPS drivers / PPDs</a></dt><dt><a href="CUPS-printing.html#id2966950">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967012">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967028">From Windows Clients to an NT Print Server</a></dt><dt><a href="CUPS-printing.html#id2967067">Driver Execution on the Client</a></dt><dt><a href="CUPS-printing.html#id2967126">Driver Execution on the Server</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967189">Network Printing (Windows clients -- UNIX/Samba Print
-Servers)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967210">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="CUPS-printing.html#id2967370">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967448">Network PostScript RIP: CUPS Filters on Server -- clients use
-PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967503">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="CUPS-printing.html#id2967544">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967609">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967626">Printer Drivers running in &quot;Kernel Mode&quot; cause many
-Problems</a></dt><dt><a href="CUPS-printing.html#id2967661">Workarounds impose Heavy Limitations</a></dt><dt><a href="CUPS-printing.html#id2967682">CUPS: a &quot;Magical Stone&quot;?</a></dt><dt><a href="CUPS-printing.html#id2967709">PostScript Drivers with no major problems -- even in Kernel
-Mode</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2967743"> Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2967762">cupsaddsmb: the unknown Utility</a></dt><dt><a href="CUPS-printing.html#id2967853">Prepare your smb.conf for
-cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2967900">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt><a href="CUPS-printing.html#id2968097">Recognize the different Driver Files</a></dt><dt><a href="CUPS-printing.html#id2968155">Acquiring the Adobe Driver Files</a></dt><dt><a href="CUPS-printing.html#id2968188">ESP Print Pro Package of &quot;PostScript Driver for
-WinNT/2k/XP&quot;</a></dt><dt><a href="CUPS-printing.html#id2968238">Caveats to be considered</a></dt><dt><a href="CUPS-printing.html#id2968459">What are the Benefits of using the &quot;CUPS PostScript Driver for
-Windows NT/2k/XP&quot; as compared to the Adobe Driver?</a></dt><dt><a href="CUPS-printing.html#id2968640">Run &quot;cupsaddsmb&quot; (quiet Mode)</a></dt><dt><a href="CUPS-printing.html#id2968741">Run &quot;cupsaddsmb&quot; with verbose Output</a></dt><dt><a href="CUPS-printing.html#id2968884">Understanding cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2968978">How to recognize if cupsaddsm completed successfully</a></dt><dt><a href="CUPS-printing.html#id2969065">cupsaddsmb with a Samba PDC</a></dt><dt><a href="CUPS-printing.html#id2969100">cupsaddsmb Flowchart</a></dt><dt><a href="CUPS-printing.html#id2969151">Installing the PostScript Driver on a Client</a></dt><dt><a href="CUPS-printing.html#id2969266">Avoiding critical PostScript Driver Settings on the
-Client</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2969400">Installing PostScript Driver Files manually (using
-rpcclient)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2969515">A Check of the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2969627">Understanding the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2969706">Producing an Example by querying a Windows Box</a></dt><dt><a href="CUPS-printing.html#id2969796">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="CUPS-printing.html#id2969958">Manual Commandline Driver Installation in 15 little Steps</a></dt><dt><a href="CUPS-printing.html#id2970578">Troubleshooting revisited</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2970680">The printing *.tdb Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2970783">Trivial DataBase Files</a></dt><dt><a href="CUPS-printing.html#id2970853">Binary Format</a></dt><dt><a href="CUPS-printing.html#id2970915">Losing *.tdb Files</a></dt><dt><a href="CUPS-printing.html#id2970974">Using tdbbackup</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2971036">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2971142">foomatic-rip and Foomatic explained</a></dt><dt><a href="CUPS-printing.html#id2971770">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2972228">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2972259">Setting up Quotas</a></dt><dt><a href="CUPS-printing.html#id2972290">Correct and incorrect Accounting</a></dt><dt><a href="CUPS-printing.html#id2972331">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2972403">The page_log File Syntax</a></dt><dt><a href="CUPS-printing.html#id2972504">Possible Shortcomings</a></dt><dt><a href="CUPS-printing.html#id2972576">Future Developments</a></dt><dt><a href="CUPS-printing.html#id2972624">Other Accounting Tools</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2972639">Additional Material</a></dt><dt><a href="CUPS-printing.html#id2972832">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2972878">CUPS Configuration Settings explained</a></dt><dt><a href="CUPS-printing.html#id2972960">Pre-conditions</a></dt><dt><a href="CUPS-printing.html#id2973021">Manual Configuration</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2973039">When not to use Samba to print to
-CUPS</a></dt><dt><a href="CUPS-printing.html#id2973056">In Case of Trouble.....</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2973091">Where to find Documentation</a></dt><dt><a href="CUPS-printing.html#id2973104">How to ask for Help</a></dt><dt><a href="CUPS-printing.html#id2973117">Where to find Help</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2973131">Appendix</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2973138">Printing from CUPS to Windows attached
-Printers</a></dt><dt><a href="CUPS-printing.html#id2973332">More CUPS filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2973586">Trouble Shooting Guidelines to fix typical Samba printing
-Problems</a></dt><dt><a href="CUPS-printing.html#id2974692">An Overview of the CUPS Printing Processes</a></dt></dl></dd></dl></dd><dt>20. <a href="VFS.html">Stackable VFS modules</a></dt><dd><dl><dt><a href="VFS.html#id2976111">Features and Benefits</a></dt><dt><a href="VFS.html#id2976129">Discussion</a></dt><dt><a href="VFS.html#id2974805">Included modules</a></dt><dd><dl><dt><a href="VFS.html#id2974812">audit</a></dt><dt><a href="VFS.html#id2974851">extd_audit</a></dt><dt><a href="VFS.html#id2974972">fake_perms</a></dt><dt><a href="VFS.html#id2974992">recycle</a></dt><dt><a href="VFS.html#id2975130">netatalk</a></dt></dl></dd><dt><a href="VFS.html#id2975176">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="VFS.html#id2975198">DatabaseFS</a></dt><dt><a href="VFS.html#id2975253">vscan</a></dt></dl></dd><dt><a href="VFS.html#id2975282">Common Errors</a></dt></dl></dd><dt>21. <a href="winbind.html">Integrated Logon Support using Winbind</a></dt><dd><dl><dt><a href="winbind.html#id2975777">Features and Benefits</a></dt><dt><a href="winbind.html#id2975805">Introduction</a></dt><dt><a href="winbind.html#id2977838">What Winbind Provides</a></dt><dd><dl><dt><a href="winbind.html#id2977898">Target Uses</a></dt></dl></dd><dt><a href="winbind.html#id2977929">How Winbind Works</a></dt><dd><dl><dt><a href="winbind.html#id2977957">Microsoft Remote Procedure Calls</a></dt><dt><a href="winbind.html#id2977989">Microsoft Active Directory Services</a></dt><dt><a href="winbind.html#id2978012">Name Service Switch</a></dt><dt><a href="winbind.html#id2975323">Pluggable Authentication Modules</a></dt><dt><a href="winbind.html#id2975394">User and Group ID Allocation</a></dt><dt><a href="winbind.html#id2975429">Result Caching</a></dt></dl></dd><dt><a href="winbind.html#id2975457">Installation and Configuration</a></dt><dd><dl><dt><a href="winbind.html#id2975485">Introduction</a></dt><dt><a href="winbind.html#id2975560">Requirements</a></dt><dt><a href="winbind.html#id2976836">Testing Things Out</a></dt></dl></dd><dt><a href="winbind.html#id2981237">Conclusion</a></dt><dt><a href="winbind.html#id2981256">Common Errors</a></dt></dl></dd><dt>22. <a href="AdvancedNetworkManagement.html">Advanced Network Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2982630">Features and Benefits</a></dt><dt><a href="AdvancedNetworkManagement.html#id2982661">Remote Server Administration</a></dt><dt><a href="AdvancedNetworkManagement.html#id2981342">Remote Desktop Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2981359">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2981560">Network Logon Script Magic</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2981755">Adding printers without user intervention</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2981788">Common Errors</a></dt></dl></dd><dt>23. <a href="PolicyMgmt.html">System and Account Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2982185">Features and Benefits</a></dt><dt><a href="PolicyMgmt.html#id2982237">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2982348">Windows 9x/Me Policies</a></dt><dt><a href="PolicyMgmt.html#id2981896">Windows NT4 Style Policy Files</a></dt><dt><a href="PolicyMgmt.html#id2982030">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2983472">Managing Account/User Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2983573">Samba Editreg Toolset</a></dt><dt><a href="PolicyMgmt.html#id2983593">Windows NT4/200x</a></dt><dt><a href="PolicyMgmt.html#id2983614">Samba PDC</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2983658">System Startup and Logon Processing Overview</a></dt><dt><a href="PolicyMgmt.html#id2983805">Common Errors</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2983819">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="ProfileMgmt.html">Desktop Profile Management</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2983922">Features and Benefits</a></dt><dt><a href="ProfileMgmt.html#id2983955">Roaming Profiles</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2983996">Samba Configuration for Profile Handling</a></dt><dt><a href="ProfileMgmt.html#id2989358">Windows Client Profile Configuration Information</a></dt><dt><a href="ProfileMgmt.html#id2990295">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="ProfileMgmt.html#id2990360">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2990620">Mandatory profiles</a></dt><dt><a href="ProfileMgmt.html#id2990678">Creating/Managing Group Profiles</a></dt><dt><a href="ProfileMgmt.html#id2990723">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2990743">MS Windows 9x/Me</a></dt><dt><a href="ProfileMgmt.html#id2990891">MS Windows NT4 Workstation</a></dt><dt><a href="ProfileMgmt.html#id2991445">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2991949">Common Errors</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2991962">How does one set up roaming profiles for just one (or a few) user/s or group/s?</a></dt><dt><a href="ProfileMgmt.html#id2992025">Can NOT use Roaming Profiles</a></dt><dt><a href="ProfileMgmt.html#id2992243">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="pam.html">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="pam.html#id2993700">Features and Benefits</a></dt><dt><a href="pam.html#id2992555">Technical Discussion</a></dt><dd><dl><dt><a href="pam.html#id2992572">PAM Configuration Syntax</a></dt><dt><a href="pam.html#id2993237">Example System Configurations</a></dt><dt><a href="pam.html#id2995669">smb.conf PAM Configuration</a></dt><dt><a href="pam.html#id2995726">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="pam.html#id2995810">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="pam.html#id2996177">Common Errors</a></dt><dd><dl><dt><a href="pam.html#id2996190">pam_winbind problem</a></dt></dl></dd></dl></dd><dt>26. <a href="integrate-ms-networks.html">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2997933">Features and Benefits</a></dt><dt><a href="integrate-ms-networks.html#id2997958">Background Information</a></dt><dt><a href="integrate-ms-networks.html#id2998003">Name Resolution in a pure Unix/Linux world</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2998054">/etc/hosts</a></dt><dt><a href="integrate-ms-networks.html#id2998179">/etc/resolv.conf</a></dt><dt><a href="integrate-ms-networks.html#id2996329">/etc/host.conf</a></dt><dt><a href="integrate-ms-networks.html#id2996371">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2996460">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2996585">The NetBIOS Name Cache</a></dt><dt><a href="integrate-ms-networks.html#id2996630">The LMHOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2996744">HOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2996776">DNS Lookup</a></dt><dt><a href="integrate-ms-networks.html#id2996801">WINS Lookup</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2996872">Common Errors</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2996887">My Boomerang Won't Come Back</a></dt><dt><a href="integrate-ms-networks.html#id2996919">Very Slow Network Connections</a></dt><dt><a href="integrate-ms-networks.html#id2996970">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="unicode.html">Unicode/Charsets</a></dt><dd><dl><dt><a href="unicode.html#id2997125">Features and Benefits</a></dt><dt><a href="unicode.html#id2997167">What are charsets and unicode?</a></dt><dt><a href="unicode.html#id2997235">Samba and charsets</a></dt><dt><a href="unicode.html#id2997336">Conversion from old names</a></dt><dt><a href="unicode.html#id2997382">Japanese charsets</a></dt></dl></dd><dt>28. <a href="Backup.html">Samba Backup Techniques</a></dt><dd><dl><dt><a href="Backup.html#id2999976">Note</a></dt><dt><a href="Backup.html#id2999997">Features and Benefits</a></dt></dl></dd><dt>29. <a href="SambaHA.html">High Availability Options</a></dt><dd><dl><dt><a href="SambaHA.html#id2999808">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ClientConfig.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="NetworkBrowsing.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter9.MS Windows Network Configuration Guide</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter10.Samba / MS Windows Network Browsing Guide</td></tr></table></div></body></html>
+</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>10. <a href="NetworkBrowsing.html">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2893931">Features and Benefits</a></dt><dt><a href="NetworkBrowsing.html#id2894019">What is Browsing?</a></dt><dt><a href="NetworkBrowsing.html#id2894333">Discussion</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2894349">NetBIOS over TCP/IP</a></dt><dt><a href="NetworkBrowsing.html#id2894584">TCP/IP - without NetBIOS</a></dt><dt><a href="NetworkBrowsing.html#id2894750">DNS and Active Directory</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2894896">How Browsing Functions</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#DMB">Setting up WORKGROUP Browsing</a></dt><dt><a href="NetworkBrowsing.html#id2895446">Setting up DOMAIN Browsing</a></dt><dt><a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="NetworkBrowsing.html#id2895844">Making Samba the domain master</a></dt><dt><a href="NetworkBrowsing.html#id2896022">Note about broadcast addresses</a></dt><dt><a href="NetworkBrowsing.html#id2896045">Multiple interfaces</a></dt><dt><a href="NetworkBrowsing.html#id2896081">Use of the Remote Announce parameter</a></dt><dt><a href="NetworkBrowsing.html#id2896240">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2896317">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2896504">Setting up a WINS server</a></dt><dt><a href="NetworkBrowsing.html#id2896761">WINS Replication</a></dt><dt><a href="NetworkBrowsing.html#id2896787">Static WINS Entries</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2896875">Helpful Hints</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2896889">Windows Networking Protocols</a></dt><dt><a href="NetworkBrowsing.html#id2896967">Name Resolution Order</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2897133">Technical Overview of browsing</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2897187">Browsing support in Samba</a></dt><dt><a href="NetworkBrowsing.html#id2897308">Problem resolution</a></dt><dt><a href="NetworkBrowsing.html#id2897396">Browsing across subnets</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2898078">Common Errors</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2898092">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="NetworkBrowsing.html#id2898121">My client reports &quot;This server is not configured to list shared resources&quot;</a></dt><dt><a href="NetworkBrowsing.html#id2898166">I get an Unable to browse the network error</a></dt></dl></dd></dl></dd><dt>11. <a href="passdb.html">Account Information Databases</a></dt><dd><dl><dt><a href="passdb.html#id2898446">Features and Benefits</a></dt><dd><dl><dt><a href="passdb.html#id2898460">Backwards Compatibility Backends</a></dt><dt><a href="passdb.html#id2898561">New Backends</a></dt></dl></dd><dt><a href="passdb.html#id2898749">Technical Information</a></dt><dd><dl><dt><a href="passdb.html#id2898874">Important Notes About Security</a></dt><dt><a href="passdb.html#id2899165">Mapping User Identifiers between MS Windows and UNIX</a></dt><dt><a href="passdb.html#idmapbackend">Mapping Common UIDs/GIDs on Distributed Machines</a></dt></dl></dd><dt><a href="passdb.html#acctmgmttools">Account Management Tools</a></dt><dd><dl><dt><a href="passdb.html#id2899351">The smbpasswd Command</a></dt><dt><a href="passdb.html#id2899622">The pdbedit Command</a></dt></dl></dd><dt><a href="passdb.html#id2899860">Password Backends</a></dt><dd><dl><dt><a href="passdb.html#id2899902">Plain Text</a></dt><dt><a href="passdb.html#id2899942">smbpasswd - Encrypted Password Database</a></dt><dt><a href="passdb.html#id2900055">tdbsam</a></dt><dt><a href="passdb.html#id2900089">ldapsam</a></dt><dt><a href="passdb.html#id2901940">MySQL</a></dt><dt><a href="passdb.html#XMLpassdb">XML</a></dt></dl></dd><dt><a href="passdb.html#id2902790">Common Errors</a></dt><dd><dl><dt><a href="passdb.html#id2902796">Users can not logon</a></dt><dt><a href="passdb.html#id2902841">Users being added to wrong backend database</a></dt><dt><a href="passdb.html#id2902952">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="groupmapping.html">Mapping MS Windows and UNIX Groups</a></dt><dd><dl><dt><a href="groupmapping.html#id2903181">Features and Benefits</a></dt><dt><a href="groupmapping.html#id2903416">Discussion</a></dt><dd><dl><dt><a href="groupmapping.html#id2903652">Example Configuration</a></dt></dl></dd><dt><a href="groupmapping.html#id2903718">Configuration Scripts</a></dt><dd><dl><dt><a href="groupmapping.html#id2903732">Sample smb.conf add group script</a></dt><dt><a href="groupmapping.html#id2903817">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="groupmapping.html#id2903900">Common Errors</a></dt><dd><dl><dt><a href="groupmapping.html#id2903915">Adding Groups Fails</a></dt><dt><a href="groupmapping.html#id2903984">Adding MS Windows Groups to MS Windows Groups Fails</a></dt><dt><a href="groupmapping.html#id2904010">Adding Domain Users to the Power Users group</a></dt></dl></dd></dl></dd><dt>13. <a href="AccessControls.html">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2904266">Features and Benefits</a></dt><dt><a href="AccessControls.html#id2904395">File System Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2904431">MS Windows NTFS Comparison with UNIX File Systems</a></dt><dt><a href="AccessControls.html#id2904735">Managing Directories</a></dt><dt><a href="AccessControls.html#id2904829">File and Directory Access Control</a></dt></dl></dd><dt><a href="AccessControls.html#id2905040">Share Definition Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2905070">User and Group Based Controls</a></dt><dt><a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a></dt><dt><a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt></dl></dd><dt><a href="AccessControls.html#id2906251">Access Controls on Shares</a></dt><dd><dl><dt><a href="AccessControls.html#id2906323">Share Permissions Management</a></dt></dl></dd><dt><a href="AccessControls.html#id2906623">MS Windows Access Control Lists and UNIX Interoperability</a></dt><dd><dl><dt><a href="AccessControls.html#id2906631">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="AccessControls.html#id2906675">Viewing File Security on a Samba Share</a></dt><dt><a href="AccessControls.html#id2906755">Viewing file ownership</a></dt><dt><a href="AccessControls.html#id2906887">Viewing File or Directory Permissions</a></dt><dt><a href="AccessControls.html#id2907132">Modifying file or directory permissions</a></dt><dt><a href="AccessControls.html#id2907296">Interaction with the standard Samba create mask
+ parameters</a></dt><dt><a href="AccessControls.html#id2907693">Interaction with the standard Samba file attribute mapping</a></dt></dl></dd><dt><a href="AccessControls.html#id2907788">Common Errors</a></dt><dd><dl><dt><a href="AccessControls.html#id2907802">Users can not write to a public share</a></dt><dt><a href="AccessControls.html#id2908232">I have set force user but Samba still makes root the owner of all the files I touch!</a></dt><dt><a href="AccessControls.html#id2908284">MS Word with Samba changes owner of file</a></dt></dl></dd></dl></dd><dt>14. <a href="locking.html">File and Record Locking</a></dt><dd><dl><dt><a href="locking.html#id2908532">Features and Benefits</a></dt><dt><a href="locking.html#id2908589">Discussion</a></dt><dd><dl><dt><a href="locking.html#id2908732">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="locking.html#id2909449">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="locking.html#id2909569">Example Configuration</a></dt></dl></dd><dt><a href="locking.html#id2909983">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="locking.html#id2910208">Workstation Service Entries</a></dt><dt><a href="locking.html#id2910237">Server Service Entries</a></dt></dl></dd><dt><a href="locking.html#id2910317">Persistent Data Corruption</a></dt><dt><a href="locking.html#id2910345">Common Errors</a></dt><dd><dl><dt><a href="locking.html#id2910419">locking.tdb error messages</a></dt><dt><a href="locking.html#id2910456">Problems saving files in MS Office on Windows XP</a></dt><dt><a href="locking.html#id2910479">Long delays deleting files over network with XP SP1</a></dt></dl></dd><dt><a href="locking.html#id2910511">Additional Reading</a></dt></dl></dd><dt>15. <a href="securing-samba.html">Securing Samba</a></dt><dd><dl><dt><a href="securing-samba.html#id2910685">Introduction</a></dt><dt><a href="securing-samba.html#id2910722">Features and Benefits</a></dt><dt><a href="securing-samba.html#id2910796">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="securing-samba.html#id2910816">Using host based protection</a></dt><dt><a href="securing-samba.html#id2910915">User based protection</a></dt><dt><a href="securing-samba.html#id2910975">Using interface protection</a></dt><dt><a href="securing-samba.html#id2911042">Using a firewall</a></dt><dt><a href="securing-samba.html#id2911098">Using a IPC$ share deny</a></dt><dt><a href="securing-samba.html#id2911187">NTLMv2 Security</a></dt></dl></dd><dt><a href="securing-samba.html#id2911245">Upgrading Samba</a></dt><dt><a href="securing-samba.html#id2911271">Common Errors</a></dt><dd><dl><dt><a href="securing-samba.html#id2911289">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="securing-samba.html#id2911314">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="InterdomainTrusts.html">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2911605">Features and Benefits</a></dt><dt><a href="InterdomainTrusts.html#id2911633">Trust Relationship Background</a></dt><dt><a href="InterdomainTrusts.html#id2911721">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2911750">Creating an NT4 Domain Trust</a></dt><dt><a href="InterdomainTrusts.html#id2911822">Completing an NT4 Domain Trust</a></dt><dt><a href="InterdomainTrusts.html#id2911868">Inter-Domain Trust Facilities</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2912046">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#samba-trusted-domain">Samba as the Trusted Domain</a></dt><dt><a href="InterdomainTrusts.html#id2912232">Samba as the Trusting Domain</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2912370">NT4-style Domain Trusts with Windows 2000</a></dt><dt><a href="InterdomainTrusts.html#id2912476">Common Errors</a></dt></dl></dd><dt>17. <a href="msdfs.html">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="msdfs.html#id2912546">Features and Benefits</a></dt><dt><a href="msdfs.html#id2912820">Common Errors</a></dt></dl></dd><dt>18. <a href="printing.html">Classical Printing Support</a></dt><dd><dl><dt><a href="printing.html#id2912941">Features and Benefits</a></dt><dt><a href="printing.html#id2913045">Technical Introduction</a></dt><dd><dl><dt><a href="printing.html#id2913083">What happens if you send a Job from a Client</a></dt><dt><a href="printing.html#id2913154">Printing Related Configuration Parameters</a></dt><dt><a href="printing.html#id2913251">Parameters Recommended for Use</a></dt></dl></dd><dt><a href="printing.html#id2913718">A simple Configuration to Print</a></dt><dd><dl><dt><a href="printing.html#id2913883">Verification of &quot;Settings in Use&quot; with testparm</a></dt><dt><a href="printing.html#id2914010">A little Experiment to warn you</a></dt></dl></dd><dt><a href="printing.html#id2914370">Extended Sample Configuration to Print</a></dt><dt><a href="printing.html#id2914701">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="printing.html#id2914714">The [global] Section</a></dt><dt><a href="printing.html#id2915245">The [printers] Section</a></dt><dt><a href="printing.html#id2915706">Any [my_printer_name] Section</a></dt><dt><a href="printing.html#id2916027">Print Commands</a></dt><dt><a href="printing.html#id2916108">Default Print Commands for various UNIX Print Subsystems</a></dt><dt><a href="printing.html#id2916791">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="printing.html#id2917131">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="printing.html#id2917292">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="printing.html#id2917453">The [printer$] Section is removed from Samba 3</a></dt><dt><a href="printing.html#id2917566">Creating the [print$] Share</a></dt><dt><a href="printing.html#id2917756">Parameters in the [print$] Section</a></dt><dt><a href="printing.html#id2918066">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="printing.html#id2918239">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="printing.html#id2918333">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="printing.html#id2918531">Setting Drivers for existing Printers with
+rpcclient</a></dt></dl></dd><dt><a href="printing.html#id2920241">Client Driver Install Procedure</a></dt><dd><dl><dt><a href="printing.html#id2920260">The first Client Driver Installation</a></dt><dt><a href="printing.html#id2920462">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="printing.html#id2920763">Further Client Driver Install Procedures</a></dt><dt><a href="printing.html#id2920857">Always make first Client Connection as root or &quot;printer admin&quot;</a></dt></dl></dd><dt><a href="printing.html#id2921029">Other Gotchas</a></dt><dd><dl><dt><a href="printing.html#id2921063">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="printing.html#id2921530">Supporting large Numbers of Printers</a></dt><dt><a href="printing.html#id2921841">Adding new Printers with the Windows NT APW</a></dt><dt><a href="printing.html#id2922136">Weird Error Message Cannot connect under a
+different Name</a></dt><dt><a href="printing.html#id2922236">Be careful when assembling Driver Files</a></dt><dt><a href="printing.html#id2922594">Samba and Printer Ports</a></dt><dt><a href="printing.html#id2922687">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="printing.html#id2922712">The Imprints Toolset</a></dt><dd><dl><dt><a href="printing.html#id2922768">What is Imprints?</a></dt><dt><a href="printing.html#id2922810">Creating Printer Driver Packages</a></dt><dt><a href="printing.html#id2922828">The Imprints Server</a></dt><dt><a href="printing.html#id2922853">The Installation Client</a></dt></dl></dd><dt><a href="printing.html#id2923008">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="printing.html#id2923342">The addprinter command</a></dt><dt><a href="printing.html#id2923388">Migration of &quot;Classical&quot; printing to Samba</a></dt><dt><a href="printing.html#id2923561">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="printing.html#id2923575">Common Errors</a></dt><dd><dl><dt><a href="printing.html#id2923582">I give my root password but I don't get access</a></dt><dt><a href="printing.html#id2923615">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="CUPS-printing.html">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2923750">Introduction</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2923756">Features and Benefits</a></dt><dt><a href="CUPS-printing.html#id2923811">Overview</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2923880">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a></dt><dt><a href="CUPS-printing.html#id2924213">Simple smb.conf Settings for CUPS</a></dt><dt><a href="CUPS-printing.html#id2924395">More complex smb.conf Settings for
+CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2924750">Advanced Configuration</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2924770">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2924825">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2924894">Driver Installation Methods on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2924971">Explicitly enable &quot;raw&quot; printing for
+application/octet-stream!</a></dt><dt><a href="CUPS-printing.html#id2925177">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2925317">Using CUPS/Samba in an advanced Way -- intelligent printing
+with PostScript Driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#gdipost">GDI on Windows -- PostScript on UNIX</a></dt><dt><a href="CUPS-printing.html#id2925497">Windows Drivers, GDI and EMF</a></dt><dt><a href="CUPS-printing.html#id2925650">UNIX Printfile Conversion and GUI Basics</a></dt><dt><a href="CUPS-printing.html#post-and-ghost">PostScript and Ghostscript</a></dt><dt><a href="CUPS-printing.html#id2925951">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="CUPS-printing.html#id2926092">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="CUPS-printing.html#id2926179">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="CUPS-printing.html#id2926285">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2926306">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2926501">MIME types and CUPS Filters</a></dt><dt><a href="CUPS-printing.html#id2926707">MIME type Conversion Rules</a></dt><dt><a href="CUPS-printing.html#id2926862">Filter Requirements</a></dt><dt><a href="CUPS-printing.html#id2927043">Prefilters</a></dt><dt><a href="CUPS-printing.html#id2927153">pstops</a></dt><dt><a href="CUPS-printing.html#id2927264">pstoraster</a></dt><dt><a href="CUPS-printing.html#id2927459">imagetops and imagetoraster</a></dt><dt><a href="CUPS-printing.html#id2927523">rasterto [printers specific]</a></dt><dt><a href="CUPS-printing.html#id2927675">CUPS Backends</a></dt><dt><a href="CUPS-printing.html#id2928022">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="CUPS-printing.html#id2928168">The Complete Picture</a></dt><dt><a href="CUPS-printing.html#id2928183">mime.convs</a></dt><dt><a href="CUPS-printing.html#id2928246">&quot;Raw&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2928335">&quot;application/octet-stream&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2928581">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="CUPS-printing.html#id2928848">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a></dt><dt><a href="CUPS-printing.html#id2929083">Examples for filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2929420">Sources of CUPS drivers / PPDs</a></dt><dt><a href="CUPS-printing.html#id2929572">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2929667">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2929677">From Windows Clients to an NT Print Server</a></dt><dt><a href="CUPS-printing.html#id2929741">Driver Execution on the Client</a></dt><dt><a href="CUPS-printing.html#id2929818">Driver Execution on the Server</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2929936">Network Printing (Windows clients -- UNIX/Samba Print
+Servers)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2929956">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="CUPS-printing.html#id2930169">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2930255">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2930344">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="CUPS-printing.html#id2930400">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2930476">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2930493">Printer Drivers running in &quot;Kernel Mode&quot; cause many
+Problems</a></dt><dt><a href="CUPS-printing.html#id2930538">Workarounds impose Heavy Limitations</a></dt><dt><a href="CUPS-printing.html#id2930560">CUPS: a &quot;Magical Stone&quot;?</a></dt><dt><a href="CUPS-printing.html#id2930614">PostScript Drivers with no major problems -- even in Kernel
+Mode</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2930637">Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2930710">cupsaddsmb: the unknown Utility</a></dt><dt><a href="CUPS-printing.html#id2930811">Prepare your smb.conf for cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2931030">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt><a href="CUPS-printing.html#id2931268">Recognize the different Driver Files</a></dt><dt><a href="CUPS-printing.html#id2931460">Acquiring the Adobe Driver Files</a></dt><dt><a href="CUPS-printing.html#id2931493">ESP Print Pro Package of &quot;PostScript Driver for
+WinNT/2k/XP&quot;</a></dt><dt><a href="CUPS-printing.html#id2931562">Caveats to be considered</a></dt><dt><a href="CUPS-printing.html#id2931837">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a></dt><dt><a href="CUPS-printing.html#id2932052">Run &quot;cupsaddsmb&quot; (quiet Mode)</a></dt><dt><a href="CUPS-printing.html#id2932180">Run &quot;cupsaddsmb&quot; with verbose Output</a></dt><dt><a href="CUPS-printing.html#id2932401">Understanding cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2932551">How to recognize if cupsaddsmb completed successfully</a></dt><dt><a href="CUPS-printing.html#id2932633">cupsaddsmb with a Samba PDC</a></dt><dt><a href="CUPS-printing.html#id2932714">cupsaddsmb Flowchart</a></dt><dt><a href="CUPS-printing.html#id2932789">Installing the PostScript Driver on a Client</a></dt><dt><a href="CUPS-printing.html#id2932953">Avoiding critical PostScript Driver Settings on the
+Client</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2933086">Installing PostScript Driver Files manually (using
+rpcclient)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2933288">A Check of the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2933403">Understanding the rpcclient man page</a></dt><dt><a href="CUPS-printing.html#id2933506">Producing an Example by querying a Windows Box</a></dt><dt><a href="CUPS-printing.html#id2933674">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="CUPS-printing.html#id2933889">Manual Driver Installation in 15 Steps</a></dt><dt><a href="CUPS-printing.html#id2934958">Troubleshooting revisited</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2935364">Trivial DataBase Files</a></dt><dt><a href="CUPS-printing.html#id2935456">Binary Format</a></dt><dt><a href="CUPS-printing.html#id2935520">Losing *.tdb Files</a></dt><dt><a href="CUPS-printing.html#id2935579">Using tdbbackup</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2935716">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2935871">foomatic-rip and Foomatic explained</a></dt><dt><a href="CUPS-printing.html#id2936640">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2937141">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2937193">Setting up Quotas</a></dt><dt><a href="CUPS-printing.html#id2937258">Correct and incorrect Accounting</a></dt><dt><a href="CUPS-printing.html#id2937303">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2937398">The page_log File Syntax</a></dt><dt><a href="CUPS-printing.html#id2937516">Possible Shortcomings</a></dt><dt><a href="CUPS-printing.html#id2937592">Future Developments</a></dt><dt><a href="CUPS-printing.html#id2937648">Other Accounting Tools</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2937662">Additional Material</a></dt><dt><a href="CUPS-printing.html#id2937912">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2937974">CUPS Configuration Settings explained</a></dt><dt><a href="CUPS-printing.html#id2938069">Pre-conditions</a></dt><dt><a href="CUPS-printing.html#id2938226">Manual Configuration</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2938284">In Case of Trouble.....</a></dt><dt><a href="CUPS-printing.html#id2938356">Printing from CUPS to Windows attached
+Printers</a></dt><dt><a href="CUPS-printing.html#id2938656">More CUPS filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2938758">Common Errors</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2938765">Win9x client can't install driver</a></dt><dt><a href="CUPS-printing.html#id2938787">&quot;cupsaddsmb&quot; keeps asking for root password in
+ neverending loop</a></dt><dt><a href="CUPS-printing.html#id2938835">&quot;cupsaddsmb&quot; gives &quot;No PPD file for printer...&quot;
+ message while PPD file is present</a></dt><dt><a href="CUPS-printing.html#id2938893">Client can't connect to Samba printer</a></dt><dt><a href="CUPS-printing.html#id2938921">Can't reconnect to Samba under new account
+ from Win2K/XP</a></dt><dt><a href="CUPS-printing.html#id2939149">Avoid being connected to the Samba server as the
+ &quot;wrong&quot; user</a></dt><dt><a href="CUPS-printing.html#id2939202">Upgrading to CUPS drivers from Adobe drivers on
+ NT/2K/XP clients gives problems</a></dt><dt><a href="CUPS-printing.html#id2939219">Can't use &quot;cupsaddsmb&quot; on Samba server which is
+ a PDC</a></dt><dt><a href="CUPS-printing.html#id2939249">Deleted Win2K printer driver is still shown</a></dt><dt><a href="CUPS-printing.html#id2939258">Win2K/XP &quot;Local Security
+ Policies&quot;</a></dt><dt><a href="CUPS-printing.html#id2939297">WinXP clients: &quot;Administrator can not install
+ printers for all local users&quot;</a></dt><dt><a href="CUPS-printing.html#id2939331">&quot;Print Change Notify&quot; functions on
+ NT-clients</a></dt><dt><a href="CUPS-printing.html#id2939354">WinXP-SP1</a></dt><dt><a href="CUPS-printing.html#id2939398">Print options for all users can't be set on Win2K/XP</a></dt><dt><a href="CUPS-printing.html#id2939689">Most common blunders in driver
+ settings on Windows clients</a></dt><dt><a href="CUPS-printing.html#id2939734">cupsaddsmb does not work
+ with newly installed printer</a></dt><dt><a href="CUPS-printing.html#id2939796">Permissions on
+/var/spool/samba/ get reset after each
+reboot</a></dt><dt><a href="CUPS-printing.html#id2939905">Printer named &quot;lp&quot;
+intermittently swallows jobs and spits out completely different
+ones</a></dt><dt><a href="CUPS-printing.html#id2939953">Location of Adobe PostScript driver files necessary for &quot;cupsaddsmb&quot;</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2940008">An Overview of the CUPS Printing Processes</a></dt></dl></dd><dt>20. <a href="VFS.html">Stackable VFS modules</a></dt><dd><dl><dt><a href="VFS.html#id2940177">Features and Benefits</a></dt><dt><a href="VFS.html#id2940195">Discussion</a></dt><dt><a href="VFS.html#id2940424">Included modules</a></dt><dd><dl><dt><a href="VFS.html#id2940432">audit</a></dt><dt><a href="VFS.html#id2940474">extd_audit</a></dt><dt><a href="VFS.html#id2940604">fake_perms</a></dt><dt><a href="VFS.html#id2940622">recycle</a></dt><dt><a href="VFS.html#id2940798">netatalk</a></dt></dl></dd><dt><a href="VFS.html#id2940843">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="VFS.html#id2940865">DatabaseFS</a></dt><dt><a href="VFS.html#id2940920">vscan</a></dt></dl></dd></dl></dd><dt>21. <a href="winbind.html">Winbind: Use of Domain Accounts</a></dt><dd><dl><dt><a href="winbind.html#id2941150">Features and Benefits</a></dt><dt><a href="winbind.html#id2941246">Introduction</a></dt><dt><a href="winbind.html#id2941324">What Winbind Provides</a></dt><dd><dl><dt><a href="winbind.html#id2941400">Target Uses</a></dt></dl></dd><dt><a href="winbind.html#id2941431">How Winbind Works</a></dt><dd><dl><dt><a href="winbind.html#id2941460">Microsoft Remote Procedure Calls</a></dt><dt><a href="winbind.html#id2941493">Microsoft Active Directory Services</a></dt><dt><a href="winbind.html#id2941516">Name Service Switch</a></dt><dt><a href="winbind.html#id2941652">Pluggable Authentication Modules</a></dt><dt><a href="winbind.html#id2941724">User and Group ID Allocation</a></dt><dt><a href="winbind.html#id2941757">Result Caching</a></dt></dl></dd><dt><a href="winbind.html#id2941785">Installation and Configuration</a></dt><dd><dl><dt><a href="winbind.html#id2941792">Introduction</a></dt><dt><a href="winbind.html#id2941859">Requirements</a></dt><dt><a href="winbind.html#id2941953">Testing Things Out</a></dt></dl></dd><dt><a href="winbind.html#id2943561">Conclusion</a></dt><dt><a href="winbind.html#id2943580">Common Errors</a></dt><dd><dl><dt><a href="winbind.html#id2943633">NSCD Problem Warning</a></dt></dl></dd></dl></dd><dt>22. <a href="AdvancedNetworkManagement.html">Advanced Network Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2943742">Features and Benefits</a></dt><dt><a href="AdvancedNetworkManagement.html#id2943772">Remote Server Administration</a></dt><dt><a href="AdvancedNetworkManagement.html#id2943871">Remote Desktop Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2943888">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2944129">Network Logon Script Magic</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2944368">Adding printers without user intervention</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2944401">Common Errors</a></dt></dl></dd><dt>23. <a href="PolicyMgmt.html">System and Account Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2944479">Features and Benefits</a></dt><dt><a href="PolicyMgmt.html#id2944538">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2944652">Windows 9x/Me Policies</a></dt><dt><a href="PolicyMgmt.html#id2944748">Windows NT4 Style Policy Files</a></dt><dt><a href="PolicyMgmt.html#id2944880">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2945132">Managing Account/User Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2945238">Samba Editreg Toolset</a></dt><dt><a href="PolicyMgmt.html#id2945277">Windows NT4/200x</a></dt><dt><a href="PolicyMgmt.html#id2945301">Samba PDC</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2945346">System Startup and Logon Processing Overview</a></dt><dt><a href="PolicyMgmt.html#id2945496">Common Errors</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2945511">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="ProfileMgmt.html">Desktop Profile Management</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2945611">Features and Benefits</a></dt><dt><a href="ProfileMgmt.html#id2945646">Roaming Profiles</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2945686">Samba Configuration for Profile Handling</a></dt><dt><a href="ProfileMgmt.html#id2946178">Windows Client Profile Configuration Information</a></dt><dt><a href="ProfileMgmt.html#id2947427">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="ProfileMgmt.html#id2947512">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2947770">Mandatory profiles</a></dt><dt><a href="ProfileMgmt.html#id2947828">Creating/Managing Group Profiles</a></dt><dt><a href="ProfileMgmt.html#id2947873">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2947893">MS Windows 9x/Me</a></dt><dt><a href="ProfileMgmt.html#id2948045">MS Windows NT4 Workstation</a></dt><dt><a href="ProfileMgmt.html#id2948600">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2949100">Common Errors</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2949130">Setting up roaming profiles for just a few user's or group's?</a></dt><dt><a href="ProfileMgmt.html#id2949201">Can NOT use Roaming Profiles</a></dt><dt><a href="ProfileMgmt.html#id2949414">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="pam.html">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="pam.html#id2949695">Features and Benefits</a></dt><dt><a href="pam.html#id2949942">Technical Discussion</a></dt><dd><dl><dt><a href="pam.html#id2949960">PAM Configuration Syntax</a></dt><dt><a href="pam.html#id2950624">Example System Configurations</a></dt><dt><a href="pam.html#id2950929">smb.conf PAM Configuration</a></dt><dt><a href="pam.html#id2951007">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="pam.html#id2951091">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="pam.html#id2951474">Common Errors</a></dt><dd><dl><dt><a href="pam.html#id2951487">pam_winbind problem</a></dt><dt><a href="pam.html#id2951576">Winbind is not resolving users and groups</a></dt></dl></dd></dl></dd><dt>26. <a href="integrate-ms-networks.html">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2951812">Features and Benefits</a></dt><dt><a href="integrate-ms-networks.html#id2951838">Background Information</a></dt><dt><a href="integrate-ms-networks.html#id2951903">Name Resolution in a pure UNIX/Linux world</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2951960">/etc/hosts</a></dt><dt><a href="integrate-ms-networks.html#id2952110">/etc/resolv.conf</a></dt><dt><a href="integrate-ms-networks.html#id2952153">/etc/host.conf</a></dt><dt><a href="integrate-ms-networks.html#id2952204">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2952319">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2952629">The NetBIOS Name Cache</a></dt><dt><a href="integrate-ms-networks.html#id2952692">The LMHOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2952854">HOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2952886">DNS Lookup</a></dt><dt><a href="integrate-ms-networks.html#id2952918">WINS Lookup</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2953036">Common Errors</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2953052">Pinging works only in one way</a></dt><dt><a href="integrate-ms-networks.html#id2953086">Very Slow Network Connections</a></dt><dt><a href="integrate-ms-networks.html#id2953137">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="unicode.html">Unicode/Charsets</a></dt><dd><dl><dt><a href="unicode.html#id2953342">Features and Benefits</a></dt><dt><a href="unicode.html#id2953385">What are charsets and unicode?</a></dt><dt><a href="unicode.html#id2953454">Samba and charsets</a></dt><dt><a href="unicode.html#id2953583">Conversion from old names</a></dt><dt><a href="unicode.html#id2953612">Japanese charsets</a></dt><dt><a href="unicode.html#id2953751">Common errors</a></dt><dd><dl><dt><a href="unicode.html#id2953758">CP850.so can't be found</a></dt></dl></dd></dl></dd><dt>28. <a href="Backup.html">Samba Backup Techniques</a></dt><dd><dl><dt><a href="Backup.html#id2953871">Note</a></dt><dt><a href="Backup.html#id2953885">Features and Benefits</a></dt></dl></dd><dt>29. <a href="SambaHA.html">High Availability Options</a></dt><dd><dl><dt><a href="SambaHA.html#id2953955">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ClientConfig.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-doc.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="NetworkBrowsing.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter9.MS Windows Network Configuration Guide</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter10.Samba / MS Windows Network Browsing Guide</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/pam.html b/docs/htmldocs/pam.html
index b3d0314adde..8edbdb26ca1 100644
--- a/docs/htmldocs/pam.html
+++ b/docs/htmldocs/pam.html
@@ -1,7 +1,6 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter25.PAM based Distributed Authentication</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management"><link rel="next" href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter25.PAM based Distributed Authentication</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ProfileMgmt.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="integrate-ms-networks.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="pam"></a>Chapter25.PAM based Distributed Authentication</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Langasek</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:vorlon@netexpress.net">vorlon@netexpress.net</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 31, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="pam.html#id2993700">Features and Benefits</a></dt><dt><a href="pam.html#id2992555">Technical Discussion</a></dt><dd><dl><dt><a href="pam.html#id2992572">PAM Configuration Syntax</a></dt><dt><a href="pam.html#id2993237">Example System Configurations</a></dt><dt><a href="pam.html#id2995669">smb.conf PAM Configuration</a></dt><dt><a href="pam.html#id2995726">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="pam.html#id2995810">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="pam.html#id2996177">Common Errors</a></dt><dd><dl><dt><a href="pam.html#id2996190">pam_winbind problem</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter25.PAM based Distributed Authentication</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management"><link rel="next" href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter25.PAM based Distributed Authentication</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ProfileMgmt.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="integrate-ms-networks.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="pam"></a>Chapter25.PAM based Distributed Authentication</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Stephen</span> <span class="surname">Langasek</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:vorlon@netexpress.net">vorlon@netexpress.net</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 31, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="pam.html#id2949695">Features and Benefits</a></dt><dt><a href="pam.html#id2949942">Technical Discussion</a></dt><dd><dl><dt><a href="pam.html#id2949960">PAM Configuration Syntax</a></dt><dt><a href="pam.html#id2950624">Example System Configurations</a></dt><dt><a href="pam.html#id2950929">smb.conf PAM Configuration</a></dt><dt><a href="pam.html#id2951007">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="pam.html#id2951091">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="pam.html#id2951474">Common Errors</a></dt><dd><dl><dt><a href="pam.html#id2951487">pam_winbind problem</a></dt><dt><a href="pam.html#id2951576">Winbind is not resolving users and groups</a></dt></dl></dd></dl></div><p>
This chapter you should help you to deploy winbind based authentication on any PAM enabled
-Unix/Linux system. Winbind can be used to enable user level application access authentication
+UNIX/Linux system. Winbind can be used to enable user level application access authentication
from any MS Windows NT Domain, MS Windows 200x Active Directory based domain, or any Samba
based domain environment. It will also help you to configure PAM based local host access
controls that are appropriate to your Samba configuration.
@@ -9,9 +8,9 @@ controls that are appropriate to your Samba configuration.
In addition to knowing how to configure winbind into PAM, you will learn generic PAM management
possibilities and in particular how to deploy tools like pam_smbpass.so to your advantage.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
-The use of Winbind require more than PAM configuration alone. Please refer to <a href="winbind.html" title="Chapter21.Integrated Logon Support using Winbind">the Winbind chapter</a>.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2993700"></a>Features and Benefits</h2></div></div><div></div></div><p>
-A number of Unix systems (eg: Sun Solaris), as well as the xxxxBSD family and Linux,
+The use of Winbind require more than PAM configuration alone. Please refer to <a href="winbind.html" title="Chapter21.Winbind: Use of Domain Accounts">the Winbind chapter</a>.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949695"></a>Features and Benefits</h2></div></div><div></div></div><p>
+A number of UNIX systems (eg: Sun Solaris), as well as the xxxxBSD family and Linux,
now utilize the Pluggable Authentication Modules (PAM) facility to provide all authentication,
authorization and resource control services. Prior to the introduction of PAM, a decision
to use an alternative to the system password database (<tt class="filename">/etc/passwd</tt>)
@@ -24,38 +23,38 @@ authentication/authorization infrastructure. PAM is configured either through o
<tt class="filename">/etc/pam.conf</tt> (Solaris), or by editing individual files that are
located in <tt class="filename">/etc/pam.d</tt>.
</p><p>
-On PAM enabled Unix/Linux systems it is an easy matter to configure the system to use any
+On PAM enabled UNIX/Linux systems it is an easy matter to configure the system to use any
authentication backend, so long as the appropriate dynamically loadable library modules
are available for it. The backend may be local to the system, or may be centralised on a
remote server.
</p><p>
PAM support modules are available for:
-</p><div class="variablelist"><dl><dt><span class="term"><tt class="filename">/etc/passwd</tt></span></dt><dd><p>-</p><p>
- There are several PAM modules that interact with this standard Unix user
+</p><div class="variablelist"><dl><dt><span class="term"><tt class="filename">/etc/passwd</tt>:</span></dt><dd><p>
+ There are several PAM modules that interact with this standard UNIX user
database. The most common are called: pam_unix.so, pam_unix2.so, pam_pwdb.so
and pam_userdb.so.
- </p></dd><dt><span class="term">Kerberos</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">Kerberos:</span></dt><dd><p>
The pam_krb5.so module allows the use of any Kerberos compliant server.
This tool is used to access MIT Kerberos, Heimdal Kerberos, and potentially
Microsoft Active Directory (if enabled).
- </p></dd><dt><span class="term">LDAP</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">LDAP:</span></dt><dd><p>
The pam_ldap.so module allows the use of any LDAP v2 or v3 compatible backend
server. Commonly used LDAP backend servers include: OpenLDAP v2.0 and v2.1,
Sun ONE iDentity server, Novell eDirectory server, Microsoft Active Directory.
- </p></dd><dt><span class="term">NetWare Bindery</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">NetWare Bindery:</span></dt><dd><p>
The pam_ncp_auth.so module allows authentication off any bindery enabled
NetWare Core Protocol based server.
- </p></dd><dt><span class="term">SMB Password</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">SMB Password:</span></dt><dd><p>
This module, called pam_smbpass.so, will allow user authentication off
the passdb backend that is configured in the Samba <tt class="filename">smb.conf</tt> file.
- </p></dd><dt><span class="term">SMB Server</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">SMB Server:</span></dt><dd><p>
The pam_smb_auth.so module is the original MS Windows networking authentication
tool. This module has been somewhat outdated by the Winbind module.
- </p></dd><dt><span class="term">Winbind</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">Winbind:</span></dt><dd><p>
The pam_winbind.so module allows Samba to obtain authentication from any
MS Windows Domain Controller. It can just as easily be used to authenticate
users for access to any PAM enabled application.
- </p></dd><dt><span class="term">RADIUS</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">RADIUS:</span></dt><dd><p>
There is a PAM RADIUS (Remote Access Dial-In User Service) authentication
module. In most cases the administrator will need to locate the source code
for this tool and compile and install it themselves. RADIUS protocols are
@@ -68,12 +67,12 @@ of distributed samba domain controllers that can provide wide are network bandwi
efficient authentication services for PAM capable systems. In effect, this allows the
deployment of centrally managed and maintained distributed authentication from a single
user account database.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2992555"></a>Technical Discussion</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949942"></a>Technical Discussion</h2></div></div><div></div></div><p>
PAM is designed to provide the system administrator with a great deal of flexibility in
configuration of the privilege granting applications of their system. The local
configuration of system security controlled by PAM is contained in one of two places:
either the single system file, /etc/pam.conf; or the /etc/pam.d/ directory.
-</p><div xmlns:ns90="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2992572"></a>PAM Configuration Syntax</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949960"></a>PAM Configuration Syntax</h3></div></div><div></div></div><p>
In this section we discuss the correct syntax of and generic options respected by entries to these files.
PAM specific tokens in the configuration file are case insensitive. The module paths, however, are case
sensitive since they indicate a file's name and reflect the case dependence of typical file-systems.
@@ -87,33 +86,32 @@ If the PAM authentication module (loadable link library file) is located in the
default location then it is not necessary to specify the path. In the case of
Linux, the default location is <tt class="filename">/lib/security</tt>. If the module
is located outside the default then the path must be specified as:
-</p><ns90:p>
-</ns90:p><pre class="screen">
+</p><p>
+</p><pre class="programlisting">
auth required /other_path/pam_strange_module.so
-</pre><ns90:p>
-</ns90:p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2992628"></a>Anatomy of <tt class="filename">/etc/pam.d</tt> Entries</h4></div></div><div></div></div><p>
+</pre><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2950018"></a>Anatomy of <tt class="filename">/etc/pam.d</tt> Entries</h4></div></div><div></div></div><p>
The remaining information in this subsection was taken from the documentation of the Linux-PAM
project. For more information on PAM, see
-<a href="http://ftp.kernel.org/pub/linux/libs/pam/" target="_top">
-http://ftp.kernel.org/pub/linux/libs/pam</a> The Official Linux-PAM home page.
+<a href="http://ftp.kernel.org/pub/linux/libs/pam/" target="_top">The Official Linux-PAM home page</a>
</p><p>
A general configuration line of the /etc/pam.conf file has the following form:
-</p><ns90:p>
-</ns90:p><pre class="screen">
+</p><p>
+</p><pre class="programlisting">
service-name module-type control-flag module-path args
-</pre><ns90:p>
-</ns90:p><p>
+</pre><p>
+</p><p>
Below, we explain the meaning of each of these tokens. The second (and more recently adopted)
way of configuring Linux-PAM is via the contents of the <tt class="filename">/etc/pam.d/</tt> directory.
Once we have explained the meaning of the above tokens, we will describe this method.
-</p><div class="variablelist"><dl><dt><span class="term">service-name</span></dt><dd><p>-</p><p>
+</p><div class="variablelist"><dl><dt><span class="term">service-name:</span></dt><dd><p>
The name of the service associated with this entry. Frequently the service name is the conventional
name of the given application. For example, `ftpd', `rlogind' and `su', etc. .
</p><p>
There is a special service-name, reserved for defining a default authentication mechanism. It has
the name `OTHER' and may be specified in either lower or upper case characters. Note, when there
is a module specified for a named service, the `OTHER' entries are ignored.
- </p></dd><dt><span class="term">module-type</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">module-type:</span></dt><dd><p>
One of (currently) four types of module. The four types are as follows:
</p><div class="itemizedlist"><ul type="disc"><li><p>
<span class="emphasis"><em>auth:</em></span> this module type provides two aspects of authenticating the user.
@@ -135,7 +133,7 @@ Once we have explained the meaning of the above tokens, we will describe this me
<span class="emphasis"><em>password:</em></span> this last module type is required for updating the authentication
token associated with the user. Typically, there is one module for each `challenge/response'
based authentication (auth) module-type.
- </p></li></ul></div></dd><dt><span class="term">control-flag</span></dt><dd><p>-</p><p>
+ </p></li></ul></div></dd><dt><span class="term">control-flag:</span></dt><dd><p>
The control-flag is used to indicate how the PAM library will react to the success or failure of the
module it is associated with. Since modules can be stacked (modules of the same type execute in series,
one after another), the control-flags determine the relative importance of each module. The application
@@ -179,9 +177,9 @@ Once we have explained the meaning of the above tokens, we will describe this me
The more elaborate (newer) syntax is much more specific and gives the administrator a great deal of control
over how the user is authenticated. This form of the control flag is delimited with square brackets and
consists of a series of value=action tokens:
- </p><pre class="screen">
- [value1=action1 value2=action2 ...]
- </pre><p>
+ </p><pre class="programlisting">
+[value1=action1 value2=action2 ...]
+</pre><p>
Here, value1 is one of the following return values: success; open_err; symbol_err; service_err;
system_err; buf_err; perm_denied; auth_err; cred_insufficient; authinfo_unavail; user_unknown; maxtries;
new_authtok_reqd; acct_expired; session_err; cred_unavail; cred_expired; cred_err; no_module_data; conv_err;
@@ -219,8 +217,8 @@ Once we have explained the meaning of the above tokens, we will describe this me
</p></li></ul></div><p>
Each of the four keywords: required; requisite; sufficient; and optional, have an equivalent expression in
terms of the [...] syntax. They are as follows:
- </p><ns90:p>
- </ns90:p><div class="itemizedlist"><ul type="disc"><li><p>
+ </p><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>
required is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=bad]
</p></li><li><p>
requisite is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=die]
@@ -228,15 +226,15 @@ Once we have explained the meaning of the above tokens, we will describe this me
sufficient is equivalent to [success=done new_authtok_reqd=done default=ignore]
</p></li><li><p>
optional is equivalent to [success=ok new_authtok_reqd=ok default=ignore]
- </p></li></ul></div><ns90:p>
- </ns90:p><p>
+ </p></li></ul></div><p>
+ </p><p>
Just to get a feel for the power of this new syntax, here is a taste of what you can do with it. With Linux-PAM-0.63,
the notion of client plug-in agents was introduced. This is something that makes it possible for PAM to support
machine-machine authentication using the transport protocol inherent to the client/server application. With the
<span class="emphasis"><em>[ ... value=action ... ]</em></span> control syntax, it is possible for an application to be configured
to support binary prompts with compliant clients, but to gracefully fall over into an alternative authentication
mode for older, legacy, applications.
- </p></dd><dt><span class="term">module-path</span></dt><dd><p>-</p><p>
+ </p></dd><dt><span class="term">module-path:</span></dt><dd><p>
The path-name of the dynamically loadable object file; the pluggable module itself. If the first character of the
module path is `/', it is assumed to be a complete path. If this is not the case, the given module path is appended
to the default module path: <tt class="filename">/lib/security</tt> (but see the notes above).
@@ -247,7 +245,7 @@ Once we have explained the meaning of the above tokens, we will describe this me
to syslog(3). For a list of generic options see the next section.
</p><p>
Note, if you wish to include spaces in an argument, you should surround that argument with square brackets. For example:
- </p><pre class="screen">
+ </p><pre class="programlisting">
squid auth required pam_mysql.so user=passwd_query passwd=mada \
db=eminence [query=select user_name from internet_service where \
user_name='%u' and password=PASSWORD('%p') and \
@@ -255,19 +253,19 @@ squid auth required pam_mysql.so user=passwd_query passwd=mada \
</pre><p>
Note, when using this convention, you can include `[' characters inside the string, and if you wish to include a `]'
character inside the string that will survive the argument parsing, you should use `\['. In other words:
- </p><pre class="screen">
+ </p><pre class="programlisting">
[..[..\]..] --&gt; ..[..]..
</pre><p>
Any line in (one of) the configuration file(s), that is not formatted correctly, will generally tend (erring on the
side of caution) to make the authentication process fail. A corresponding error is written to the system log files
with a call to syslog(3).
- </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2993237"></a>Example System Configurations</h3></div></div><div></div></div><p>
+ </p></dd></dl></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950624"></a>Example System Configurations</h3></div></div><div></div></div><p>
The following is an example <tt class="filename">/etc/pam.d/login</tt> configuration file.
This example had all options been uncommented is probably not usable
as it stacks many conditions before allowing successful completion
of the login process. Essentially all conditions can be disabled
by commenting them out except the calls to <tt class="filename">pam_pwdb.so</tt>.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2993268"></a>PAM: original login config</h4></div></div><div></div></div><pre class="screen">
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2950655"></a>PAM: original login config</h4></div></div><div></div></div><pre class="programlisting">
#%PAM-1.0
# The PAM configuration file for the `login' service
#
@@ -282,10 +280,10 @@ session required pam_pwdb.so
# session optional pam_lastlog.so
# password required pam_cracklib.so retry=3
password required pam_pwdb.so shadow md5
-</pre></div><div xmlns:ns91="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2993295"></a>PAM: login using pam_smbpass</h4></div></div><div></div></div><p>
+</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2950683"></a>PAM: login using pam_smbpass</h4></div></div><div></div></div><p>
PAM allows use of replaceable modules. Those available on a sample system include:
-</p><ns91:p><tt class="prompt">$</tt><b class="userinput"><tt>/bin/ls /lib/security</tt></b>
-</ns91:p><pre class="screen">
+</p><p><tt class="prompt">$</tt><b class="userinput"><tt>/bin/ls /lib/security</tt></b>
+</p><pre class="programlisting">
pam_access.so pam_ftp.so pam_limits.so
pam_ncp_auth.so pam_rhosts_auth.so pam_stress.so
pam_cracklib.so pam_group.so pam_listfile.so
@@ -309,7 +307,7 @@ hashes. This database is stored in either
<tt class="filename">/usr/local/samba/private/smbpasswd</tt>,
<tt class="filename">/etc/samba/smbpasswd</tt>, or in
<tt class="filename">/etc/samba.d/smbpasswd</tt>, depending on the
-Samba implementation for your Unix/Linux system. The
+Samba implementation for your UNIX/Linux system. The
<tt class="filename">pam_smbpass.so</tt> module is provided by
Samba version 2.2.1 or later. It can be compiled by specifying the
<tt class="option">--with-pam_smbpass</tt> options when running Samba's
@@ -317,7 +315,7 @@ Samba version 2.2.1 or later. It can be compiled by specifying the
on the <tt class="filename">pam_smbpass</tt> module, see the documentation
in the <tt class="filename">source/pam_smbpass</tt> directory of the Samba
source distribution.
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# The PAM configuration file for the `login' service
#
@@ -328,7 +326,7 @@ password required pam_smbpass.so nodelay
</pre><p>
The following is the PAM configuration file for a particular
Linux system. The default condition uses <tt class="filename">pam_pwdb.so</tt>.
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# The PAM configuration file for the `samba' service
#
@@ -342,7 +340,7 @@ smbpasswd database even for basic samba authentication. Such a
decision could also be made for the passwd program and would
thus allow the smbpasswd passwords to be changed using the passwd
program.
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# The PAM configuration file for the `samba' service
#
@@ -361,24 +359,24 @@ authentication to be configured in a single central file. The
on the basis that it allows for easier administration. As with all issues in
life though, every decision makes trade-offs, so you may want examine the
PAM documentation for further helpful information.
-</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995669"></a>smb.conf PAM Configuration</h3></div></div><div></div></div><p>
-There is an option in smb.conf called <a href="smb.conf.5.html#OBEYPAMRESTRICTIONS" target="_top">obey pam restrictions</a>.
+</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950929"></a>smb.conf PAM Configuration</h3></div></div><div></div></div><p>
+ There is an option in smb.conf called <a class="indexterm" name="id2950938"></a><i class="parameter"><tt>obey pam restrictions</tt></i>.
The following is from the on-line help for this option in SWAT;
</p><p>
-When Samba-3 is configured to enable PAM support (i.e.
+When Samba is configured to enable PAM support (i.e.
<tt class="option">--with-pam</tt>), this parameter will
control whether or not Samba should obey PAM's account
and session management directives. The default behavior
is to use PAM for clear text authentication only and to
ignore any account or session management. Note that Samba always
ignores PAM for authentication in the case of
-<a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords = yes</a>.
+<a class="indexterm" name="id2950969"></a><i class="parameter"><tt>encrypt passwords</tt></i> = yes.
The reason is that PAM modules cannot support the challenge/response
authentication mechanism needed in the presence of SMB
password encryption.
-</p><p>Default: <i class="parameter"><tt>obey pam restrictions = no</tt></i></p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995726"></a>Remote CIFS Authentication using winbindd.so</h3></div></div><div></div></div><p>
+</p><p>Default: <a class="indexterm" name="id2950990"></a><i class="parameter"><tt>obey pam restrictions</tt></i> = no</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951007"></a>Remote CIFS Authentication using winbindd.so</h3></div></div><div></div></div><p>
All operating systems depend on the provision of users credentials acceptable to the platform.
-Unix requires the provision of a user identifier (UID) as well as a group identifier (GID).
+UNIX requires the provision of a user identifier (UID) as well as a group identifier (GID).
These are both simple integer type numbers that are obtained from a password backend such
as <tt class="filename">/etc/passwd</tt>.
</p><p>
@@ -402,7 +400,7 @@ Microsoft Active Directory Service (ADS) in so far as reduction of wide area net
The rid to unix id database is the only location where the user and group mappings are
stored by winbindd. If this file is deleted or corrupted, there is no way for winbindd
to determine which user and group ids correspond to Windows NT user and group rids.
-</p></div></div><div xmlns:ns92="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2995810"></a>Password Synchronization using pam_smbpass.so</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951091"></a>Password Synchronization using pam_smbpass.so</h3></div></div><div></div></div><p>
pam_smbpass is a PAM module which can be used on conforming systems to
keep the smbpasswd (Samba password) database in sync with the unix
password file. PAM (Pluggable Authentication Modules) is an API supported
@@ -413,26 +411,25 @@ This module authenticates a local smbpasswd user database. If you require
support for authenticating against a remote SMB server, or if you're
concerned about the presence of suid root binaries on your system, it is
recommended that you use pam_winbind instead.
-</p><ns92:p>
+</p><p>
Options recognized by this module are as follows:
-</ns92:p><div class="table"><a name="id2995841"></a><p class="title"><b>Table25.1.Options recognized by pam_smbpass</b></p><table summary="Options recognized by pam_smbpass" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left">debug</td><td align="left">log more debugging info</td></tr><tr><td align="left">audit</td><td align="left">like debug, but also logs unknown usernames</td></tr><tr><td align="left">use_first_pass</td><td align="left">don't prompt the user for passwords; take them from PAM_ items instead</td></tr><tr><td align="left">try_first_pass</td><td align="left">try to get the password from a previous PAM module, fall back to prompting the user</td></tr><tr><td align="left">use_authtok</td><td align="left">like try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)</td></tr><tr><td align="left">not_set_pass</td><td align="left">don't make passwords used by this module available to other modules.</td></tr><tr><td align="left">nodelay</td><td align="left">don't insert ~1 second delays on authentication failure.</td></tr><tr><td align="left">nullok</td><td align="left">null passwords are allowed.</td></tr><tr><td align="left">nonull</td><td align="left">null passwords are not allowed. Used to override the Samba configuration.</td></tr><tr><td align="left">migrate</td><td align="left">only meaningful in an &quot;auth&quot; context; used to update smbpasswd file with a password used for successful authentication.</td></tr><tr><td align="left">smbconf=<i class="replaceable"><tt>file</tt></i></td><td align="left">specify an alternate path to the <tt class="filename">smb.conf</tt> file.</td></tr></tbody></table></div><ns92:p>
-</ns92:p><ns92:p>
-Thanks go to the following people:
-</ns92:p><table class="simplelist" border="0" summary="Simple list"><tr><td><a href="mailto:morgan@transmeta.com" target="_top">Andrew Morgan</a>, for providing the Linux-PAM
- framework, without which none of this would have happened</td></tr><tr><td><a href="gafton@redhat.com" target="_top">Christian Gafton</a> and Andrew Morgan again, for the
- pam_pwdb module upon which pam_smbpass was originally based</td></tr><tr><td><a href="lkcl@switchboard.net" target="_top">Luke Leighton</a> for being receptive to the idea,
+</p><div class="table"><a name="id2951123"></a><p class="title"><b>Table25.1.Options recognized by pam_smbpass</b></p><table summary="Options recognized by pam_smbpass" border="1"><colgroup><col align="left"><col align="justify"></colgroup><tbody><tr><td align="left">debug</td><td align="justify">log more debugging info</td></tr><tr><td align="left">audit</td><td align="justify">like debug, but also logs unknown usernames</td></tr><tr><td align="left">use_first_pass</td><td align="justify">don't prompt the user for passwords; take them from PAM_ items instead</td></tr><tr><td align="left">try_first_pass</td><td align="justify">try to get the password from a previous PAM module, fall back to prompting the user</td></tr><tr><td align="left">use_authtok</td><td align="justify">like try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)</td></tr><tr><td align="left">not_set_pass</td><td align="justify">don't make passwords used by this module available to other modules.</td></tr><tr><td align="left">nodelay</td><td align="justify">don't insert ~1 second delays on authentication failure.</td></tr><tr><td align="left">nullok</td><td align="justify">null passwords are allowed.</td></tr><tr><td align="left">nonull</td><td align="justify">null passwords are not allowed. Used to override the Samba configuration.</td></tr><tr><td align="left">migrate</td><td align="justify">only meaningful in an &quot;auth&quot; context; used to update smbpasswd file with a password used for successful authentication.</td></tr><tr><td align="left">smbconf=<i class="replaceable"><tt>file</tt></i></td><td align="justify">specify an alternate path to the <tt class="filename">smb.conf</tt> file.</td></tr></tbody></table></div><p>
+</p><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p><a href="mailto:morgan@transmeta.com" target="_top">Andrew Morgan</a>, for providing the Linux-PAM
+ framework, without which none of this would have happened</p></li><li><p><a href="mailto:gafton@redhat.com" target="_top">Christian Gafton</a> and Andrew Morgan again, for the
+ pam_pwdb module upon which pam_smbpass was originally based</p></li><li><p><a href="mailto:lkcl@switchboard.net" target="_top">Luke Leighton</a> for being receptive to the idea,
and for the occasional good-natured complaint about the project's status
- that keep me working on it :)</td></tr></table><ns92:p>.
-</ns92:p><p>
+ that keep me working on it :)</p></li></ul></div><p>.
+</p><p>
The following are examples of the use of pam_smbpass.so in the format of Linux
<tt class="filename">/etc/pam.d/</tt> files structure. Those wishing to implement this
tool on other platforms will need to adapt this appropriately.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996042"></a>Password Synchronisation Configuration</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2951339"></a>Password Synchronisation Configuration</h4></div></div><div></div></div><p>
A sample PAM configuration that shows the use of pam_smbpass to make
sure private/smbpasswd is kept in sync when /etc/passwd (/etc/shadow)
is changed. Useful when an expired password might be changed by an
application (such as ssh).
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# password-sync
#
@@ -443,13 +440,13 @@ password requisite pam_cracklib.so retry=3
password requisite pam_unix.so shadow md5 use_authtok try_first_pass
password required pam_smbpass.so nullok use_authtok try_first_pass
session required pam_unix.so
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996075"></a>Password Migration Configuration</h4></div></div><div></div></div><p>
+</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2951372"></a>Password Migration Configuration</h4></div></div><div></div></div><p>
A sample PAM configuration that shows the use of pam_smbpass to migrate
from plaintext to encrypted passwords for Samba. Unlike other methods,
this can be used for users who have never connected to Samba shares:
password migration takes place when users ftp in, login using ssh, pop
their mail, etc.
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# password-migration
#
@@ -462,11 +459,11 @@ password requisite pam_cracklib.so retry=3
password requisite pam_unix.so shadow md5 use_authtok try_first_pass
password optional pam_smbpass.so nullok use_authtok try_first_pass
session required pam_unix.so
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996110"></a>Mature Password Configuration</h4></div></div><div></div></div><p>
+</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2951407"></a>Mature Password Configuration</h4></div></div><div></div></div><p>
A sample PAM configuration for a 'mature' smbpasswd installation.
private/smbpasswd is fully populated, and we consider it an error if
-the smbpasswd doesn't exist or doesn't match the Unix password.
-</p><pre class="screen">
+the smbpasswd doesn't exist or doesn't match the UNIX password.
+</p><pre class="programlisting">
#%PAM-1.0
# password-mature
#
@@ -477,11 +474,11 @@ password requisite pam_cracklib.so retry=3
password requisite pam_unix.so shadow md5 use_authtok try_first_pass
password required pam_smbpass.so use_authtok use_first_pass
session required pam_unix.so
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2996142"></a>Kerberos Password Integration Configuration</h4></div></div><div></div></div><p>
+</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2951440"></a>Kerberos Password Integration Configuration</h4></div></div><div></div></div><p>
A sample PAM configuration that shows pam_smbpass used together with
pam_krb5. This could be useful on a Samba PDC that is also a member of
a Kerberos realm.
-</p><pre class="screen">
+</p><pre class="programlisting">
#%PAM-1.0
# kdc-pdc
#
@@ -493,13 +490,15 @@ password requisite pam_cracklib.so retry=3
password optional pam_smbpass.so nullok use_authtok try_first_pass
password required pam_krb5.so use_authtok try_first_pass
session required pam_krb5.so
-</pre></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2996177"></a>Common Errors</h2></div></div><div></div></div><p>
+</pre></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2951474"></a>Common Errors</h2></div></div><div></div></div><p>
PAM can be a very fickle and sensitive to configuration glitches. Here we look at a few cases from
the Samba mailing list.
-</p><div xmlns:ns93="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2996190"></a>pam_winbind problem</h3></div></div><div></div></div><p>
- I have the following PAM configuration:
- </p><ns93:p>
-</ns93:p><pre class="screen">
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951487"></a>pam_winbind problem</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">
+ I have the following PAM configuration:
+ </span>&#8221;
+ </p><p>
+</p><pre class="programlisting">
auth required /lib/security/pam_securetty.so
auth sufficient /lib/security/pam_winbind.so
auth sufficient /lib/security/pam_unix.so use_first_pass nullok
@@ -508,16 +507,59 @@ auth required /lib/security/pam_nologin.so
account required /lib/security/pam_stack.so service=system-auth
account required /lib/security/pam_winbind.so
password required /lib/security/pam_stack.so service=system-auth
-</pre><ns93:p>
-</ns93:p><p>
+</pre><p>
+ </p><p>
+ &#8220;<span class="quote">
When I open a new console with [ctrl][alt][F1], then I cant log in with my user &quot;pitie&quot;.
I've tried with user &quot;scienceu+pitie&quot; also.
+</span>&#8221;
</p><p>
- Answer: The problem may lie with your inclusion of <i class="parameter"><tt>pam_stack.so
+ The problem may lie with your inclusion of <i class="parameter"><tt>pam_stack.so
service=system-auth</tt></i>. That file often contains a lot of stuff that may
duplicate what you're already doing. Try commenting out the pam_stack lines
for auth and account and see if things work. If they do, look at
<tt class="filename">/etc/pam.d/system-auth</tt> and copy only what you need from it into your
<tt class="filename">/etc/pam.d/login</tt> file. Alternatively, if you want all services to use
winbind, you can put the winbind-specific stuff in <tt class="filename">/etc/pam.d/system-auth</tt>.
- </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ProfileMgmt.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="integrate-ms-networks.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter24.Desktop Profile Management</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter26.Integrating MS Windows networks with Samba</td></tr></table></div></body></html>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2951576"></a>Winbind is not resolving users and groups</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">
+ My smb.conf file is correctly configured. I have specified
+ <a class="indexterm" name="id2951590"></a><i class="parameter"><tt>idmap uid</tt></i> = 12000,
+ and <a class="indexterm" name="id2951604"></a><i class="parameter"><tt>idmap gid</tt></i> = 3000-3500
+ and <b class="command">winbind</b> is running. When I do the following it all works fine.
+</span>&#8221;
+ </p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>wbinfo -u</tt></b>
+MIDEARTH+maryo
+MIDEARTH+jackb
+MIDEARTH+ameds
+...
+MIDEARTH+root
+
+<tt class="prompt">root# </tt><b class="userinput"><tt>wbinfo -g</tt></b>
+MIDEARTH+Domain Users
+MIDEARTH+Domain Admins
+MIDEARTH+Domain Guests
+...
+MIDEARTH+Accounts
+
+<tt class="prompt">root# </tt><b class="userinput"><tt>getent passwd</tt></b>
+root:x:0:0:root:/root:/bin/bash
+bin:x:1:1:bin:/bin:/bin/bash
+...
+maryo:x:15000:15003:Mary Orville:/home/MIDEARTH/maryo:/bin/false
+</pre><p>
+ &#8220;<span class="quote">
+ But the following command just fails:
+</span>&#8221;
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>chown 'maryo' a_file</tt></b>
+chown: `maryo': invalid user
+</pre><p>
+&#8220;<span class="quote">
+This is driving me nuts! What can be wrong?
+</span>&#8221;
+ </p><p>
+ Your system is likely running <b class="command">nscd</b>, the name service
+ caching daemon. Shut it down, do NOT restart it! You will find your problem resolved.
+ </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ProfileMgmt.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="integrate-ms-networks.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter24.Desktop Profile Management</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter26.Integrating MS Windows networks with Samba</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/passdb.html b/docs/htmldocs/passdb.html
index e627eb015f9..4d5432fd70b 100644
--- a/docs/htmldocs/passdb.html
+++ b/docs/htmldocs/passdb.html
@@ -1,27 +1,27 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter11.Account Information Databases</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide"><link rel="next" href="groupmapping.html" title="Chapter12.Mapping MS Windows and Unix Groups"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter11.Account Information Databases</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="NetworkBrowsing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="groupmapping.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="passdb"></a>Chapter11.Account Information Databases</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Olivier (lem)</span> <span class="surname">Lemaire</span></h3><div class="affiliation"><span class="orgname">IDEALX<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:olem@IDEALX.org">olem@IDEALX.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 24, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="passdb.html#id2911689">Features and Benefits</a></dt><dt><a href="passdb.html#id2908580">Technical Information</a></dt><dd><dl><dt><a href="passdb.html#id2908644">Important Notes About Security</a></dt><dt><a href="passdb.html#id2908888">Mapping User Identifiers between MS Windows and Unix</a></dt></dl></dd><dt><a href="passdb.html#id2908943">Account Management Tools</a></dt><dd><dl><dt><a href="passdb.html#id2908975">The smbpasswd Command</a></dt><dt><a href="passdb.html#id2909240">The pdbedit Command</a></dt></dl></dd><dt><a href="passdb.html#id2909374">Password Backends</a></dt><dd><dl><dt><a href="passdb.html#id2909410">Plain Text</a></dt><dt><a href="passdb.html#id2909450">smbpasswd - Encrypted Password Database</a></dt><dt><a href="passdb.html#id2913891">tdbsam</a></dt><dt><a href="passdb.html#id2913919">ldapsam</a></dt><dt><a href="passdb.html#id2915407">MySQL</a></dt><dt><a href="passdb.html#XMLpassdb">XML</a></dt></dl></dd><dt><a href="passdb.html#id2916213">Common Errors</a></dt><dd><dl><dt><a href="passdb.html#id2916220">Users can not logon - Users not in Samba SAM</a></dt><dt><a href="passdb.html#id2916235">Users are being added to the wrong backend database</a></dt><dt><a href="passdb.html#id2916295">auth methods does not work</a></dt></dl></dd></dl></div><p>
-Samba-3 implements a new capability to work concurrently with multiple account backends.
-The possible new combinations of password backends allows Samba-3 a degree of flexibility
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter11.Account Information Databases</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide"><link rel="next" href="groupmapping.html" title="Chapter12.Mapping MS Windows and UNIX Groups"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter11.Account Information Databases</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="NetworkBrowsing.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="groupmapping.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="passdb"></a>Chapter11.Account Information Databases</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jeremy</span> <span class="surname">Allison</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jra@samba.org">jra@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Olivier (lem)</span> <span class="surname">Lemaire</span></h3><div class="affiliation"><span class="orgname">IDEALX<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:olem@IDEALX.org">olem@IDEALX.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 24, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="passdb.html#id2898446">Features and Benefits</a></dt><dd><dl><dt><a href="passdb.html#id2898460">Backwards Compatibility Backends</a></dt><dt><a href="passdb.html#id2898561">New Backends</a></dt></dl></dd><dt><a href="passdb.html#id2898749">Technical Information</a></dt><dd><dl><dt><a href="passdb.html#id2898874">Important Notes About Security</a></dt><dt><a href="passdb.html#id2899165">Mapping User Identifiers between MS Windows and UNIX</a></dt><dt><a href="passdb.html#idmapbackend">Mapping Common UIDs/GIDs on Distributed Machines</a></dt></dl></dd><dt><a href="passdb.html#acctmgmttools">Account Management Tools</a></dt><dd><dl><dt><a href="passdb.html#id2899351">The smbpasswd Command</a></dt><dt><a href="passdb.html#id2899622">The pdbedit Command</a></dt></dl></dd><dt><a href="passdb.html#id2899860">Password Backends</a></dt><dd><dl><dt><a href="passdb.html#id2899902">Plain Text</a></dt><dt><a href="passdb.html#id2899942">smbpasswd - Encrypted Password Database</a></dt><dt><a href="passdb.html#id2900055">tdbsam</a></dt><dt><a href="passdb.html#id2900089">ldapsam</a></dt><dt><a href="passdb.html#id2901940">MySQL</a></dt><dt><a href="passdb.html#XMLpassdb">XML</a></dt></dl></dd><dt><a href="passdb.html#id2902790">Common Errors</a></dt><dd><dl><dt><a href="passdb.html#id2902796">Users can not logon</a></dt><dt><a href="passdb.html#id2902841">Users being added to wrong backend database</a></dt><dt><a href="passdb.html#id2902952">auth methods does not work</a></dt></dl></dd></dl></div><p>
+Samba 3 implements a new capability to work concurrently with multiple account backends.
+The possible new combinations of password backends allows Samba 3 a degree of flexibility
and scalability that previously could be achieved only with MS Windows Active Directory.
This chapter describes the new functionality and how to get the most out of it.
</p><p>
In the course of development of Samba-3, a number of requests were received to provide the
ability to migrate MS Windows NT4 SAM accounts to Samba-3 without the need to provide
-matching Unix/Linux accounts. We called this the <span class="emphasis"><em>Non Unix Accounts (NUA)</em></span>
+matching UNIX/Linux accounts. We called this the <span class="emphasis"><em>Non UNIX Accounts (NUA)</em></span>
capability. The intent was that an administrator could decide to use the <span class="emphasis"><em>tdbsam</em></span>
-backend and by simply specifying <span class="emphasis"><em>&quot;passdb backend = tdbsam_nua, guest&quot;</em></span>
-this would allow Samba-3 to implement a solution that did not use Unix accounts per se. Late
+backend and by simply specifying <a class="indexterm" name="id2898413"></a><i class="parameter"><tt>passdb backend</tt></i> = tdbsam_nua
+this would allow Samba-3 to implement a solution that did not use UNIX accounts per se. Late
in the development cycle, the team doing this work hit upon some obstacles that prevents this
solution from being used. Given the delays with Samba-3 release a decision was made to NOT
deliver this functionality until a better method of recognising NT Group SIDs from NT User
SIDs could be found. This feature may thus return during the life cycle for the Samba-3 series.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
-Samba-3.0.0 does NOT support Non-Unix Account (NUA) operation.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911689"></a>Features and Benefits</h2></div></div><div></div></div><p>
+Samba-3 does NOT support Non-UNIX Account (NUA) operation for user accounts.
+Samba-3 does support NUA operation for machine accounts.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2898446"></a>Features and Benefits</h2></div></div><div></div></div><p>
Samba-3 provides for complete backwards compatibility with Samba-2.2.x functionality
as follows:
-</p><div class="variablelist"><p class="title"><b>Backwards Compatibility Backends</b></p><dl><dt><span class="term">Plain Text:</span></dt><dd><p>
- This option uses nothing but the Unix/Linux <tt class="filename">/etc/passwd</tt>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898460"></a>Backwards Compatibility Backends</h3></div></div><div></div></div><div class="variablelist"><dl><dt><span class="term">Plain Text:</span></dt><dd><p>
+ This option uses nothing but the UNIX/Linux <tt class="filename">/etc/passwd</tt>
style back end. On systems that have PAM (Pluggable Authentication Modules)
support all PAM modules are supported. The behaviour is just as it was with
Samba-2.2.x, and the protocol limitations imposed by MS Windows clients
@@ -43,13 +43,9 @@ as follows:
This option is provided primarily as a migration tool, although there is
no reason to force migration at this time. Note that this tool will eventually
be deprecated.
- </p></dd></dl></div><p>
+ </p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898561"></a>New Backends</h3></div></div><div></div></div><p>
Samba-3 introduces the following new password backend capabilities:
-</p><div class="variablelist"><p class="title"><b>New Backends</b></p><dl><dt><span class="term">guest:</span></dt><dd><p>
- This is <span class="emphasis"><em>always</em></span> required as the last backend specified.
- It provides the ability to handle guest account requirements for access to
- resources like <i class="parameter"><tt>IPC$</tt></i> which is used for browsing.
- </p></dd><dt><span class="term">tdbsam:</span></dt><dd><p>
+</p><div class="variablelist"><dl><dt><span class="term">tdbsam:</span></dt><dd><p>
This backend provides a rich database backend for local servers. This
backend is NOT suitable for multiple domain controller (ie: PDC + one
or more BDC) installations.
@@ -91,10 +87,7 @@ Samba-3 introduces the following new password backend capabilities:
The xmlsam option can be useful for account migration between database
backends or backups. Use of this tool will allow the data to be edited before migration
into another backend format.
- </p></dd><dt><span class="term">nisplussam:</span></dt><dd><p>
- The NIS+ based passdb backend. Takes name NIS domain as an
- optional argument. Only works with Sun NIS+ servers.
- </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2908580"></a>Technical Information</h2></div></div><div></div></div><p>
+ </p></dd></dl></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2898749"></a>Technical Information</h2></div></div><div></div></div><p>
Old windows clients send plain text passwords over the wire. Samba can check these
passwords by crypting them and comparing them to the hash stored in the unix user database.
</p><p>
@@ -109,10 +102,10 @@ Samba-3 introduces the following new password backend capabilities:
In addition to differently encrypted passwords, windows also stores certain data for each
user that is not stored in a unix user database. e.g: workstations the user may logon from,
the location where the users' profile is stored, and so on. Samba retrieves and stores this
- information using a <i class="parameter"><tt>passdb backend</tt></i>. Commonly available backends are LDAP, plain text
+ information using a <a class="indexterm" name="id2898789"></a><i class="parameter"><tt>passdb backend</tt></i>. Commonly available backends are LDAP, plain text
file, MySQL and nisplus. For more information, see the man page for <tt class="filename">smb.conf</tt> regarding the
- <i class="parameter"><tt>passdb backend</tt></i> parameter.
- </p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908644"></a>Important Notes About Security</h3></div></div><div></div></div><p>
+ <a class="indexterm" name="id2898812"></a><i class="parameter"><tt>passdb backend</tt></i> parameter.
+ </p><div class="figure"><a name="idmap-diag"></a><p class="title"><b>Figure11.1.IDMAP</b></p><div class="mediaobject"><img src="projdoc/imagefiles/idmap.png" width="270" alt="IDMAP"></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2898874"></a>Important Notes About Security</h3></div></div><div></div></div><p>
The unix and SMB password encryption techniques seem similar on the surface. This
similarity is, however, only skin deep. The unix scheme typically sends clear text
passwords over the network when logging in. This is bad. The SMB encryption scheme
@@ -136,12 +129,12 @@ Samba-3 introduces the following new password backend capabilities:
</p><p>
The following versions of MS Windows do not support full domain security protocols,
although they may log onto a domain environment:
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td>MS DOS Network client 3.0 with the basic network redirector installed</td></tr><tr><td>Windows 95 with the network redirector update installed</td></tr><tr><td>Windows 98 [se]</td></tr><tr><td>Windows Me</td></tr></table><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>MS DOS Network client 3.0 with the basic network redirector installed</p></li><li><p>Windows 95 with the network redirector update installed</p></li><li><p>Windows 98 [se]</p></li><li><p>Windows Me</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
MS Windows XP Home does not have facilities to become a domain member and it can
not participate in domain logons.
</p></div><p>
The following versions of MS Windows fully support domain security protocols.
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td>Windows NT 3.5x</td></tr><tr><td>Windows NT 4.0</td></tr><tr><td>Windows 2000 Professional</td></tr><tr><td>Windows 200x Server/Advanced Server</td></tr><tr><td>Windows XP Professional</td></tr></table><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>Windows NT 3.5x</p></li><li><p>Windows NT 4.0</p></li><li><p>Windows 2000 Professional</p></li><li><p>Windows 200x Server/Advanced Server</p></li><li><p>Windows XP Professional</p></li></ul></div><p>
All current release of Microsoft SMB/CIFS clients support authentication via the
SMB Challenge/Response mechanism described here. Enabling clear text authentication
does not disable the ability of the client to participate in encrypted authentication.
@@ -154,7 +147,7 @@ Samba-3 introduces the following new password backend capabilities:
(broken) only the cached (encrypted) password will be sent to the resource server to
affect a auto-reconnect. If the resource server does not support encrypted passwords the
auto-reconnect will fail. <span class="emphasis"><em>USE OF ENCRYPTED PASSWORDS IS STRONGLY ADVISED.</em></span>
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2908797"></a>Advantages of Encrypted Passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not passed across
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2899068"></a>Advantages of Encrypted Passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not passed across
the network. Someone using a network sniffer cannot just
record passwords going to the SMB server.</p></li><li><p>Plain text passwords are not stored anywhere in
memory or on disk.</p></li><li><p>WinNT doesn't like talking to a server
@@ -165,32 +158,44 @@ Samba-3 introduces the following new password backend capabilities:
only things you can do to stop this is to use SMB encryption.
</p></li><li><p>Encrypted password support allows automatic share
(resource) reconnects.</p></li><li><p>Encrypted passwords are essential for PDC/BDC
- operation.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2908851"></a>Advantages of non-encrypted passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not kept
+ operation.</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2899128"></a>Advantages of non-encrypted passwords</h4></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Plain text passwords are not kept
on disk, and are NOT cached in memory. </p></li><li><p>Uses same password file as other unix
services such as login and ftp</p></li><li><p>Use of other services (such as telnet and ftp) which
send plain text passwords over the net, so sending them for SMB
- isn't such a big deal.</p></li></ul></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908888"></a>Mapping User Identifiers between MS Windows and Unix</h3></div></div><div></div></div><p>
- Every operation in Unix/Linux requires a user identifier (UID), just as in
+ isn't such a big deal.</p></li></ul></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899165"></a>Mapping User Identifiers between MS Windows and UNIX</h3></div></div><div></div></div><p>
+ Every operation in UNIX/Linux requires a user identifier (UID), just as in
MS Windows NT4 / 200x this requires a Security Identifier (SID). Samba provides
- two means for mapping an MS Windows user to a Unix/Linux UID.
+ two means for mapping an MS Windows user to a UNIX/Linux UID.
</p><p>
Firstly, all Samba SAM (Security Account Manager database) accounts require
- a Unix/Linux UID that the account will map to. As users are added to the account
- information database, Samba-3 will call the <i class="parameter"><tt>add user script</tt></i>
- interface to add the account to the Samba host OS. In essence, all accounts in
+ a UNIX/Linux UID that the account will map to. As users are added to the account
+ information database, Samba will call the <a class="indexterm" name="id2899188"></a><i class="parameter"><tt>add user script</tt></i>
+ interface to add the account to the Samba host OS. In essence all accounts in
the local SAM require a local user account.
</p><p>
- The second way to affect Windows SID to Unix UID mapping is via the
+ The second way to affect Windows SID to UNIX UID mapping is via the
<span class="emphasis"><em>idmap uid, idmap gid</em></span> parameters in <tt class="filename">smb.conf</tt>.
Please refer to the man page for information about these parameters.
These parameters are essential when mapping users from a remote SAM server.
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2908943"></a>Account Management Tools</h2></div></div><div></div></div><p>
-Samba-3 provides two (2) tools for management of User and machine accounts. These tools are
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="idmapbackend"></a>Mapping Common UIDs/GIDs on Distributed Machines</h3></div></div><div></div></div><p>
+ Samba-3 has a special facility that makes it possible to maintain identical UIDs and GIDs
+ on all servers in a distributed network. A distributed network is one where there exists
+ a PDC, one or more BDCs and/or one or more domain member servers. Why is this important?
+ This is important if files are being shared over more than one protocol (eg: NFS) and where
+ users are copying files across UNIX/Linux systems using tools such as <b class="command">rsync</b>.
+ </p><p>
+ The special facility is enabled using a parameter called <i class="parameter"><tt>idmap backend</tt></i>.
+ The default setting for this parameter is an empty string. Administrators should NOT set this
+ parameter except when an LDAP based passdb backend is in use. An example of use is:
+ </p><p>
+</p><div class="example"><a name="idmapbackendexample"></a><p class="title"><b>Example11.1.</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>idmap backend = ldapsam://ldap-server.quenya.org:636</tt></i></td></tr></table></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="acctmgmttools"></a>Account Management Tools</h2></div></div><div></div></div><p>
+Samba provides two (2) tools for management of User and machine accounts. These tools are
called <b class="command">smbpasswd</b> and <b class="command">pdbedit</b>. A third tool is under
development but is NOT expected to ship in time for Samba-3.0.0. The new tool will be a TCL/TK
GUI tool that looks much like the MS Windows NT4 Domain User Manager - hopefully this will
be announced in time for the Samba-3.0.1 release.
-</p><div xmlns:ns22="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2908975"></a>The <span class="emphasis"><em>smbpasswd</em></span> Command</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899351"></a>The <span class="emphasis"><em>smbpasswd</em></span> Command</h3></div></div><div></div></div><p>
The smbpasswd utility is a utility similar to the <b class="command">passwd</b>
or <b class="command">yppasswd</b> programs. It maintains the two 32 byte password
fields in the passdb backend.
@@ -204,20 +209,20 @@ be announced in time for the Samba-3.0.1 release.
if changing an NT Domain user's password).
</p><p>
<b class="command">smbpasswd</b> can be used to:
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td><span class="emphasis"><em>add</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>delete</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>enable</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>disable</em></span> user or machine accounts</td></tr><tr><td><span class="emphasis"><em>set to NULL</em></span> user passwords</td></tr><tr><td><span class="emphasis"><em>manage interdomain trust accounts</em></span></td></tr></table><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p><span class="emphasis"><em>add</em></span> user or machine accounts</p></li><li><p><span class="emphasis"><em>delete</em></span> user or machine accounts</p></li><li><p><span class="emphasis"><em>enable</em></span> user or machine accounts</p></li><li><p><span class="emphasis"><em>disable</em></span> user or machine accounts</p></li><li><p><span class="emphasis"><em>set to NULL</em></span> user passwords</p></li><li><p><span class="emphasis"><em>manage interdomain trust accounts</em></span></p></li></ul></div><p>
To run smbpasswd as a normal user just type:
- </p><ns22:p>
- </ns22:p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>smbpasswd</tt></b>
- <tt class="prompt">Old SMB password: </tt><b class="userinput"><tt><i class="replaceable"><tt>secret</tt></i></tt></b>
- </pre><ns22:p>
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>smbpasswd</tt></b>
+<tt class="prompt">Old SMB password: </tt><b class="userinput"><tt><i class="replaceable"><tt>secret</tt></i></tt></b>
+</pre><p>
For <i class="replaceable"><tt>secret</tt></i> type old value here - or hit return if
there was no old password
- </ns22:p><pre class="screen">
- <tt class="prompt">New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b>
- <tt class="prompt">Repeat New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b>
- </pre><ns22:p>
- </ns22:p><p>
+</p><pre class="screen">
+<tt class="prompt">New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b>
+<tt class="prompt">Repeat New SMB Password: </tt><b class="userinput"><tt><i class="replaceable"><tt>new secret</tt></i></tt></b>
+</pre><p>
+ </p><p>
If the old value does not match the current value stored for that user, or the two
new values do not match each other, then the password will not be changed.
</p><p>
@@ -236,10 +241,10 @@ be announced in time for the Samba-3.0.1 release.
</p><p>
For more details on using <b class="command">smbpasswd</b> refer to the man page (the
definitive reference).
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909240"></a>The <span class="emphasis"><em>pdbedit</em></span> Command</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899622"></a>The <span class="emphasis"><em>pdbedit</em></span> Command</h3></div></div><div></div></div><p>
<b class="command">pdbedit</b> is a tool that can be used only by root. It is used to
manage the passdb backend. <b class="command">pdbedit</b> can be used to:
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td>add, remove or modify user accounts</td></tr><tr><td>listing user accounts</td></tr><tr><td>migrate user accounts</td></tr></table><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>add, remove or modify user accounts</p></li><li><p>listing user accounts</p></li><li><p>migrate user accounts</p></li></ul></div><p>
The <b class="command">pdbedit</b> tool is the only one that can manage the account
security and policy settings. It is capable of all operations that smbpasswd can
do as well as a super set of them.
@@ -251,50 +256,60 @@ be announced in time for the Samba-3.0.1 release.
The following is an example of the user account information that is stored in
a tdbsam password backend. This listing was produced by running:
</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>pdbedit -Lv met</tt></b>
- Unix username: met
- NT username:
- Account Flags: [UX ]
- User SID: S-1-5-21-1449123459-1407424037-3116680435-2004
- Primary Group SID: S-1-5-21-1449123459-1407424037-3116680435-1201
- Full Name: Melissa E Terpstra
- Home Directory: \\frodo\met\Win9Profile
- HomeDir Drive: H:
- Logon Script: scripts\logon.bat
- Profile Path: \\frodo\Profiles\met
- Domain: MIDEARTH
- Account desc:
- Workstations: melbelle
- Munged dial:
- Logon time: 0
- Logoff time: Mon, 18 Jan 2038 20:14:07 GMT
- Kickoff time: Mon, 18 Jan 2038 20:14:07 GMT
- Password last set: Sat, 14 Dec 2002 14:37:03 GMT
- Password can change: Sat, 14 Dec 2002 14:37:03 GMT
- Password must change: Mon, 18 Jan 2038 20:14:07 GMT
- </pre></div></div><div xmlns:ns23="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2909374"></a>Password Backends</h2></div></div><div></div></div><p>
-Samba-3 offers the greatest flexibility in backend account database design of any SMB/CIFS server
+<tt class="prompt">$ </tt><b class="userinput"><tt>pdbedit -Lv met</tt></b>
+UNIX username: met
+NT username:
+Account Flags: [UX ]
+User SID: S-1-5-21-1449123459-1407424037-3116680435-2004
+Primary Group SID: S-1-5-21-1449123459-1407424037-3116680435-1201
+Full Name: Melissa E Terpstra
+Home Directory: \\frodo\met\Win9Profile
+HomeDir Drive: H:
+Logon Script: scripts\logon.bat
+Profile Path: \\frodo\Profiles\met
+Domain: MIDEARTH
+Account desc:
+Workstations: melbelle
+Munged dial:
+Logon time: 0
+Logoff time: Mon, 18 Jan 2038 20:14:07 GMT
+Kickoff time: Mon, 18 Jan 2038 20:14:07 GMT
+Password last set: Sat, 14 Dec 2002 14:37:03 GMT
+Password can change: Sat, 14 Dec 2002 14:37:03 GMT
+Password must change: Mon, 18 Jan 2038 20:14:07 GMT
+</pre><p>
+ The <b class="command">pdbedit</b> tool allows migration of authentication (account)
+ databases from one backend to another. For example: To migrate accounts from an
+ old <tt class="filename">smbpasswd</tt> database to a <i class="parameter"><tt>tdbsam</tt></i>
+ backend:
+ </p><div class="procedure"><ol type="1"><li><p>
+ Set the <a class="indexterm" name="id2899790"></a><i class="parameter"><tt>passdb backend</tt></i> = tdbsam, smbpasswd.
+ </p></li><li><p>
+ Execute:
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>pdbedit -i smbpassed -e tdbsam</tt></b>
+</pre><p>
+ </p></li><li><p>
+ Now remove the <i class="parameter"><tt>smbpasswd</tt></i> from the passdb backend
+ configuration in <tt class="filename">smb.conf</tt>.
+ </p></li></ol></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2899860"></a>Password Backends</h2></div></div><div></div></div><p>
+Samba offers the greatest flexibility in backend account database design of any SMB/CIFS server
technology available today. The flexibility is immediately obvious as one begins to explore this
capability.
</p><p>
It is possible to specify not only multiple different password backends, but even multiple
backends of the same type. For example, to use two different tdbsam databases:
-</p><ns23:p>
-</ns23:p><pre class="programlisting">
-[globals]
- passdb backend = tdbsam:/etc/samba/passdb.tdb, \
- tdbsam:/etc/samba/old-passdb.tdb, guest
-</pre><ns23:p>
-</ns23:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909410"></a>Plain Text</h3></div></div><div></div></div><p>
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>passdb backend = tdbsam:/etc/samba/passdb.tdb, tdbsam:/etc/samba/old-passdb.tdb</tt></i></td></tr></table><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899902"></a>Plain Text</h3></div></div><div></div></div><p>
Older versions of Samba retrieved user information from the unix user database
and eventually some other fields from the file <tt class="filename">/etc/samba/smbpasswd</tt>
or <tt class="filename">/etc/smbpasswd</tt>. When password encryption is disabled, no
SMB specific data is stored at all. Instead all operations are conducted via the way
that the Samba host OS will access its <tt class="filename">/etc/passwd</tt> database.
eg: On Linux systems that is done via PAM.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2909450"></a>smbpasswd - Encrypted Password Database</h3></div></div><div></div></div><p>
- Traditionally, when configuring <a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt
- passwords = yes</a> in Samba's <tt class="filename">smb.conf</tt> file, user account
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2899942"></a>smbpasswd - Encrypted Password Database</h3></div></div><div></div></div><p>
+ Traditionally, when configuring <a class="indexterm" name="id2899952"></a><i class="parameter"><tt>encrypt passwords</tt></i> = yes in Samba's <tt class="filename">smb.conf</tt> file, user account
information such as username, LM/NT password hashes, password change times, and account
flags have been stored in the <tt class="filename">smbpasswd(5)</tt> file. There are several
disadvantages to this approach for sites with very large numbers of users (counted
@@ -320,10 +335,10 @@ backends of the same type. For example, to use two different tdbsam databases:
is commonly referred to as the samdb interface (previously this was called the passdb
API, and is still so named in the Samba CVS trees).
</p><p>
- Samba-3 provides an enhanced set of passdb backends that overcome the deficiencies
+ Samba provides an enhanced set of passdb backends that overcome the deficiencies
of the smbpasswd plain text database. These are tdbsam, ldapsam, and xmlsam.
Of these ldapsam will be of most interest to large corporate or enterprise sites.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913891"></a>tdbsam</h3></div></div><div></div></div><p>Samba can store user and machine account data in a &quot;TDB&quot; (Trivial Database).
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900055"></a>tdbsam</h3></div></div><div></div></div><p>Samba can store user and machine account data in a &quot;TDB&quot; (Trivial Database).
Using this backend doesn't require any additional configuration. This backend is
recommended for new installations that do not require LDAP.
</p><p>
@@ -331,7 +346,7 @@ backends of the same type. For example, to use two different tdbsam databases:
that have 250 or more users. Additionally, tdbsam is not capable of scaling for use
in sites that require PDB/BDC implementations that requires replication of the account
database. Clearly, for reason of scalability, the use of ldapsam should be encouraged.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913919"></a>ldapsam</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2900089"></a>ldapsam</h3></div></div><div></div></div><p>
There are a few points to stress that the ldapsam does not provide. The LDAP
support referred to in the this documentation does not include:
</p><div class="itemizedlist"><ul type="disc"><li><p>A means of retrieving user account information from
@@ -354,30 +369,32 @@ backends of the same type. For example, to use two different tdbsam databases:
and has a working directory server already installed. For more information
on LDAP architectures and Directories, please refer to the following sites.
</p><div class="itemizedlist"><ul type="disc"><li><p>OpenLDAP - <a href="http://www.openldap.org/" target="_top">http://www.openldap.org/</a></p></li><li><p>iPlanet Directory Server -
- <a href="http://iplanet.netscape.com/directory" target="_top">http://iplanet.netscape.com/directory</a></p></li></ul></div><p>
+ <a href="http://iplanet.netscape.com/directory" target="_top">http://iplanet.netscape.com/directory</a></p></li></ul></div><p>
Two additional Samba resources which may prove to be helpful are
</p><div class="itemizedlist"><ul type="disc"><li><p>The <a href="http://www.unav.es/cti/ldap-smb/ldap-smb-3-howto.html" target="_top">Samba-PDC-LDAP-HOWTO</a>
maintained by Ignacio Coupeau.</p></li><li><p>The NT migration scripts from <a href="http://samba.idealx.org/" target="_top">IDEALX</a> that are
geared to manage users and group in such a Samba-LDAP Domain Controller configuration.
- </p></li></ul></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914068"></a>Supported LDAP Servers</h4></div></div><div></div></div><p>
+ </p></li></ul></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2900244"></a>Supported LDAP Servers</h4></div></div><div></div></div><p>
The LDAP ldapsam code has been developed and tested using the OpenLDAP 2.0 and 2.1 server and
client libraries. The same code should work with Netscape's Directory Server and client SDK.
However, there are bound to be compile errors and bugs. These should not be hard to fix.
Please submit fixes via <a href="bugreport.html" title="Chapter35.Reporting Bugs">Bug reporting facility</a>.
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914093"></a>Schema and Relationship to the RFC 2307 posixAccount</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2900270"></a>Schema and Relationship to the RFC 2307 posixAccount</h4></div></div><div></div></div><p>
Samba 3.0 includes the necessary schema file for OpenLDAP 2.0 in
<tt class="filename">examples/LDAP/samba.schema</tt>. The sambaSamAccount objectclass is given here:
- </p><ns23:p>
-</ns23:p><pre class="programlisting">
-objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY
- DESC 'Samba Auxiliary Account'
- MUST ( uid $ rid )
- MAY ( cn $ lmPassword $ ntPassword $ pwdLastSet $ logonTime $
- logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $
- displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $
- description $ userWorkstations $ primaryGroupID $ domain ))
-</pre><ns23:p>
-</ns23:p><p>
+ </p><p>
+</p><pre class="programlisting">
+objectclass ( 1.3.6.1.4.1.7165.2.2.6 NAME 'sambaSamAccount' SUP top AUXILIARY
+ DESC 'Samba 3.0 Auxiliary SAM Account'
+ MUST ( uid $ sambaSID )
+ MAY ( cn $ sambaLMPassword $ sambaNTPassword $ sambaPwdLastSet $
+ sambaLogonTime $ sambaLogoffTime $ sambaKickoffTime $
+ sambaPwdCanChange $ sambaPwdMustChange $ sambaAcctFlags $
+ displayName $ sambaHomePath $ sambaHomeDrive $ sambaLogonScript $
+ sambaProfilePath $ description $ sambaUserWorkstations $
+ sambaPrimaryGroupSID $ sambaDomainName ))
+</pre><p>
+</p><p>
The <tt class="filename">samba.schema</tt> file has been formatted for OpenLDAP 2.0/2.1.
The OID's are owned by the Samba Team and as such is legal to be openly published.
If you translate the schema to be used with Netscape DS, please
@@ -399,23 +416,23 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaSamAccount' SUP top AUXILIARY
and functioning correctly. This division of information makes it possible to
store all Samba account information in LDAP, but still maintain UNIX account
information in NIS while the network is transitioning to a full LDAP infrastructure.
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914202"></a>OpenLDAP configuration</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2900380"></a>OpenLDAP configuration</h4></div></div><div></div></div><p>
To include support for the sambaSamAccount object in an OpenLDAP directory
server, first copy the samba.schema file to slapd's configuration directory.
The samba.schema file can be found in the directory <tt class="filename">examples/LDAP</tt>
in the samba source distribution.
- </p><ns23:p>
-</ns23:p><pre class="screen">
+ </p><p>
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>cp samba.schema /etc/openldap/schema/</tt></b>
-</pre><ns23:p>
-</ns23:p><p>
+</pre><p>
+</p><p>
Next, include the <tt class="filename">samba.schema</tt> file in <tt class="filename">slapd.conf</tt>.
The sambaSamAccount object contains two attributes which depend upon other schema
files. The 'uid' attribute is defined in <tt class="filename">cosine.schema</tt> and
the 'displayName' attribute is defined in the <tt class="filename">inetorgperson.schema</tt>
file. Both of these must be included before the <tt class="filename">samba.schema</tt> file.
- </p><ns23:p>
-</ns23:p><pre class="programlisting">
+ </p><p>
+</p><pre class="programlisting">
## /etc/openldap/slapd.conf
## schema files (core.schema is required by default)
@@ -427,13 +444,13 @@ include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/samba.schema
include /etc/openldap/schema/nis.schema
....
-</pre><ns23:p>
-</ns23:p><p>
+</pre><p>
+</p><p>
It is recommended that you maintain some indices on some of the most useful attributes,
like in the following example, to speed up searches made on sambaSamAccount objectclasses
(and possibly posixAccount and posixGroup as well).
- </p><ns23:p>
-</ns23:p><pre class="screen">
+ </p><p>
+</p><pre class="programlisting">
# Indices to maintain
## required by OpenLDAP
index objectclass eq
@@ -455,132 +472,101 @@ index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
index default sub
-</pre><ns23:p>
-</ns23:p><p>
+</pre><p>
+</p><p>
Create the new index by executing:
- </p><ns23:p>
-</ns23:p><pre class="screen">
-./sbin/slapindex -f slapd.conf
-</pre><ns23:p>
-</ns23:p><p>
+ </p><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt>./sbin/slapindex -f slapd.conf
+</pre><p>
+</p><p>
Remember to restart slapd after making these changes:
- </p><ns23:p>
-</ns23:p><pre class="screen">
+ </p><p>
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>/etc/init.d/slapd restart</tt></b>
-</pre><ns23:p>
-</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914390"></a>Initialise the LDAP database</h4></div></div><div></div></div><p>
+</pre><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2900576"></a>Initialise the LDAP database</h4></div></div><div></div></div><p>
Before you can add accounts to the LDAP database you must create the account containers
that they will be stored in. The following LDIF file should be modified to match your
needs (ie: Your DNS entries, etc.).
- </p><ns23:p>
-</ns23:p><pre class="screen">
+ </p><p>
+</p><pre class="programlisting">
# Organization for Samba Base
-dn: dc=plainjoe,dc=org
+dn: dc=quenya,dc=org
objectclass: dcObject
objectclass: organization
-dc: plainjoe
-o: Terpstra Org Network
+dc: quenya
+o: Quenya Org Network
description: The Samba-3 Network LDAP Example
# Organizational Role for Directory Management
-dn: cn=Manager,dc=plainjoe,dc=org
+dn: cn=Manager,dc=quenya,dc=org
objectclass: organizationalRole
cn: Manager
description: Directory Manager
# Setting up container for users
-dn: ou=People,dc=plainjoe,dc=org
+dn: ou=People,dc=quenya,dc=org
objectclass: top
objectclass: organizationalUnit
ou: People
# Setting up admin handle for People OU
-dn: cn=admin,ou=People,dc=plainjoe,dc=org
+dn: cn=admin,ou=People,dc=quenya,dc=org
cn: admin
objectclass: top
objectclass: organizationalRole
objectclass: simpleSecurityObject
userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
-</pre><ns23:p>
-</ns23:p><p>
+</pre><p>
+</p><p>
The userPassword shown above should be generated using <b class="command">slappasswd</b>.
</p><p>
The following command will then load the contents of the LDIF file into the LDAP
database.
- </p><ns23:p>
-</ns23:p><pre class="screen">
+ </p><p>
+</p><pre class="screen">
<tt class="prompt">$ </tt><b class="userinput"><tt>slapadd -v -l initldap.dif</tt></b>
-</pre><ns23:p>
-</ns23:p><p>
+</pre><p>
+</p><p>
Do not forget to secure your LDAP server with an adequate access control list,
as well as an admin password.
- </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns23:p>
+ </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Before Samba can access the LDAP server you need to store the LDAP admin password
into the Samba-3 <tt class="filename">secrets.tdb</tt> database by:
- </ns23:p><pre class="screen">
-<tt class="prompt">root# </tt> <b class="userinput"><tt>smbpasswd -w <i class="replaceable"><tt>secret</tt></i></tt></b>
- </pre><ns23:p>
- </ns23:p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914519"></a>Configuring Samba</h4></div></div><div></div></div><p>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>smbpasswd -w <i class="replaceable"><tt>secret</tt></i></tt></b>
+</pre><p>
+ </p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2900704"></a>Configuring Samba</h4></div></div><div></div></div><p>
The following parameters are available in smb.conf only if your
version of samba was built with LDAP support. Samba automatically builds with LDAP support if the
LDAP libraries are found.
- </p><div class="itemizedlist"><ul type="disc"><li><p><a href="smb.conf.5.html#PASSDBBACKEND" target="_top">passdb backend = ldapsam:url</a></p></li><li><p><a href="smb.conf.5.html#LDAPSSL" target="_top">ldap ssl</a></p></li><li><p><a href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a></p></li><li><p><a href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a></p></li><li><p><a href="smb.conf.5.html#LDAPFILTER" target="_top">ldap filter</a></p></li><li><p><a href="smb.conf.5.html#LDAPMACHINSUFFIX" target="_top">ldap machine suffix</a></p></li><li><p><a href="smb.conf.5.html#LDAPUSERSUFFIX" target="_top">ldap user suffix</a></p></li><li><p><a href="smb.conf.5.html#LDAPDELETEDN" target="_top">ldap delete dn</a></p></li><li><p><a href="smb.conf.5.html#LDAPPASSWDSYNC" target="_top">ldap passwd sync</a></p></li><li><p><a href="smb.conf.5.html#LDAPTRUSTIDS" target="_top">ldap trust ids</a></p></li></ul></div><p>
+ </p><p>LDAP related smb.conf options:
+ <a class="indexterm" name="id2900721"></a><i class="parameter"><tt>passdb backend</tt></i> = ldapsam:url,
+ <a class="indexterm" name="id2900737"></a><i class="parameter"><tt>ldap ssl</tt></i>,
+ <a class="indexterm" name="id2900750"></a><i class="parameter"><tt>ldap admin dn</tt></i>,
+ <a class="indexterm" name="id2900764"></a><i class="parameter"><tt>ldap suffix</tt></i>,
+ <a class="indexterm" name="id2900777"></a><i class="parameter"><tt>ldap filter</tt></i>,
+ <a class="indexterm" name="id2900791"></a><i class="parameter"><tt>ldap machine suffix</tt></i>,
+ <a class="indexterm" name="id2900805"></a><i class="parameter"><tt>ldap user suffix</tt></i>,
+ <a class="indexterm" name="id2900819"></a><i class="parameter"><tt>ldap delete dn</tt></i>,
+ <a class="indexterm" name="id2900833"></a><i class="parameter"><tt>ldap passwd sync</tt></i>,
+ <a class="indexterm" name="id2900847"></a><i class="parameter"><tt>ldap trust ids</tt></i>.
+ </p><p>
These are described in the <tt class="filename">smb.conf</tt> man
page and so will not be repeated here. However, a sample smb.conf file for
use with an LDAP directory could appear as
- </p><ns23:p>
-</ns23:p><pre class="programlisting">
-## /usr/local/samba/lib/smb.conf
-[global]
- security = user
- encrypt passwords = yes
-
- netbios name = TASHTEGO
- workgroup = NARNIA
-
- # ldap related parameters
-
- # define the DN to use when binding to the directory servers
- # The password for this DN is not stored in smb.conf. Rather it
- # must be set by using 'smbpasswd -w <i class="replaceable"><tt>secretpw</tt></i>' to store the
- # passphrase in the secrets.tdb file. If the &quot;ldap admin dn&quot; values
- # change, this password will need to be reset.
- ldap admin dn = &quot;cn=Samba Manager,ou=people,dc=samba,dc=org&quot;
-
- # Define the SSL option when connecting to the directory
- # ('off', 'start tls', or 'on' (default))
- ldap ssl = start tls
-
- # syntax: passdb backend = ldapsam:ldap://server-name[:port]
- passdb backend = ldapsam:ldap://funball.samba.org, guest
-
- # smbpasswd -x delete the entire dn-entry
- ldap delete dn = no
-
- # the machine and user suffix added to the base suffix
- # wrote WITHOUT quotes. NULL suffixes by default
- ldap user suffix = ou=People
- ldap machine suffix = ou=Systems
-
- # Trust unix account information in LDAP
- # (see the smb.conf manpage for details)
- ldap trust ids = Yes
-
- # specify the base DN to use when searching the directory
- ldap suffix = &quot;ou=people,dc=samba,dc=org&quot;
-
- # generally the default ldap search filter is ok
- # ldap filter = &quot;(&amp;(uid=%u)(objectclass=sambaSamAccount))&quot;
-</pre><ns23:p>
-</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914697"></a>Accounts and Groups management</h4></div></div><div></div></div><p>
+ </p><p>
+</p><div class="example"><a name="id2900879"></a><p class="title"><b>Example11.2.Configuration with LDAP</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>security = user</tt></i></td></tr><tr><td><i class="parameter"><tt>encrypt passwords = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>netbios name = TASHTEGO</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = NARNIA</tt></i></td></tr><tr><td># ldap related parameters</td></tr><tr><td># define the DN to use when binding to the directory servers</td></tr><tr><td># The password for this DN is not stored in smb.conf. Rather it</td></tr><tr><td># must be set by using 'smbpasswd -w <i class="replaceable"><tt>secretpw</tt></i>' to store the</td></tr><tr><td># passphrase in the secrets.tdb file. If the &quot;ldap admin dn&quot; values</td></tr><tr><td># change, this password will need to be reset.</td></tr><tr><td><i class="parameter"><tt>ldap admin dn = &quot;cn=Samba Manager,ou=people,dc=samba,dc=org&quot;</tt></i></td></tr><tr><td># Define the SSL option when connecting to the directory</td></tr><tr><td># ('off', 'start tls', or 'on' (default))</td></tr><tr><td><i class="parameter"><tt>ldap ssl = start tls</tt></i></td></tr><tr><td># syntax: passdb backend = ldapsam:ldap://server-name[:port]</td></tr><tr><td><i class="parameter"><tt>passdb backend = ldapsam:ldap://funball.samba.org</tt></i></td></tr><tr><td># smbpasswd -x delete the entire dn-entry</td></tr><tr><td><i class="parameter"><tt>ldap delete dn = no</tt></i></td></tr><tr><td># the machine and user suffix added to the base suffix</td></tr><tr><td># wrote WITHOUT quotes. NULL suffixes by default</td></tr><tr><td><i class="parameter"><tt>ldap user suffix = ou=People</tt></i></td></tr><tr><td><i class="parameter"><tt>ldap machine suffix = ou=Systems</tt></i></td></tr><tr><td># Trust unix account information in LDAP</td></tr><tr><td># (see the smb.conf manpage for details)</td></tr><tr><td><i class="parameter"><tt>ldap trust ids = Yes</tt></i></td></tr><tr><td># specify the base DN to use when searching the directory</td></tr><tr><td><i class="parameter"><tt>ldap suffix = &quot;ou=people,dc=samba,dc=org&quot;</tt></i></td></tr><tr><td># generally the default ldap search filter is ok</td></tr><tr><td><i class="parameter"><tt>ldap filter = &quot;(&amp;(uid=%u)(objectclass=sambaSamAccount))&quot;</tt></i></td></tr></table></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2901104"></a>Accounts and Groups management</h4></div></div><div></div></div><p>
As users accounts are managed through the sambaSamAccount objectclass, you should
modify your existing administration tools to deal with sambaSamAccount attributes.
</p><p>
Machines accounts are managed with the sambaSamAccount objectclass, just
like users accounts. However, it's up to you to store those accounts
in a different tree of your LDAP namespace: you should use
- &quot;ou=Groups,dc=plainjoe,dc=org&quot; to store groups and
- &quot;ou=People,dc=plainjoe,dc=org&quot; to store users. Just configure your
+ &quot;ou=Groups,dc=quenya,dc=org&quot; to store groups and
+ &quot;ou=People,dc=quenya,dc=org&quot; to store users. Just configure your
NSS and PAM accordingly (usually, in the /etc/ldap.conf configuration
file).
</p><p>
@@ -588,7 +574,7 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
groups. This means that Samba makes use of the posixGroup objectclass.
For now, there is no NT-like group system management (global and local
groups).
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914734"></a>Security and sambaSamAccount</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2901140"></a>Security and sambaSamAccount</h4></div></div><div></div></div><p>
There are two important points to remember when discussing the security
of sambaSamAccount entries in the directory.
</p><div class="itemizedlist"><ul type="disc"><li><p><span class="emphasis"><em>Never</em></span> retrieve the lmPassword or
@@ -599,13 +585,13 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
on the details of LM/NT password hashes, refer to the
<a href="passdb.html" title="Chapter11.Account Information Databases">Account Information Database</a> section of this chapter.
</p><p>
- To remedy the first security issue, the <i class="parameter"><tt>ldap ssl</tt></i> <tt class="filename">smb.conf</tt> parameter defaults
- to require an encrypted session (<i class="parameter"><tt>ldap ssl = on</tt></i>) using
+ To remedy the first security issue, the <a class="indexterm" name="id2901200"></a><i class="parameter"><tt>ldap ssl</tt></i> <tt class="filename">smb.conf</tt> parameter defaults
+ to require an encrypted session (<a class="indexterm" name="id2901222"></a><i class="parameter"><tt>ldap ssl</tt></i> = on) using
the default port of <tt class="constant">636</tt>
when contacting the directory server. When using an OpenLDAP server, it
is possible to use the use the StartTLS LDAP extended operation in the place of
LDAPS. In either case, you are strongly discouraged to disable this security
- (<i class="parameter"><tt>ldap ssl = off</tt></i>).
+ (<a class="indexterm" name="id2901244"></a><i class="parameter"><tt>ldap ssl</tt></i> = off).
</p><p>
Note that the LDAPS protocol is deprecated in favor of the LDAPv3 StartTLS
extended operation. However, the OpenLDAP library still provides support for
@@ -614,88 +600,87 @@ userPassword: {SSHA}c3ZM9tBaBo9autm1dL3waDS21+JSfQVz
The second security precaution is to prevent non-administrative users from
harvesting password hashes from the directory. This can be done using the
following ACL in <tt class="filename">slapd.conf</tt>:
- </p><ns23:p>
-</ns23:p><pre class="programlisting">
+ </p><p>
+</p><pre class="programlisting">
## allow the &quot;ldap admin dn&quot; access, but deny everyone else
access to attrs=lmPassword,ntPassword
- by dn=&quot;cn=Samba Admin,ou=people,dc=plainjoe,dc=org&quot; write
+ by dn=&quot;cn=Samba Admin,ou=people,dc=quenya,dc=org&quot; write
by * none
-</pre><ns23:p>
-</ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2914869"></a>LDAP special attributes for sambaSamAccounts</h4></div></div><div></div></div><p>
+</pre><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2901300"></a>LDAP special attributes for sambaSamAccounts</h4></div></div><div></div></div><p>
The sambaSamAccount objectclass is composed of the following attributes:
- </p><ns23:p>
- </ns23:p><div class="table"><a name="id2914885"></a><p class="title"><b>Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)</b></p><table summary="Attributes in the sambaSamAccount objectclass (LDAP)" border="1"><colgroup><col><col></colgroup><tbody><tr><td align="left"><tt class="constant">lmPassword</tt></td><td align="left">the LANMAN password 16-byte hash stored as a character
- representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">ntPassword</tt></td><td align="left">the NT password hash 16-byte stored as a character
- representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">pwdLastSet</tt></td><td align="left">The integer time in seconds since 1970 when the
- <tt class="constant">lmPassword</tt> and <tt class="constant">ntPassword</tt> attributes were last set.
- </td></tr><tr><td align="left"><tt class="constant">acctFlags</tt></td><td align="left">string of 11 characters surrounded by square brackets []
+ </p><p>
+ </p><div class="table"><a name="id2901317"></a><p class="title"><b>Table11.1.Attributes in the sambaSamAccount objectclass (LDAP)</b></p><table summary="Attributes in the sambaSamAccount objectclass (LDAP)" border="1"><colgroup><col align="left"><col align="justify"></colgroup><tbody><tr><td align="left"><tt class="constant">sambaLMPassword</tt></td><td align="justify">the LANMAN password 16-byte hash stored as a character
+representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">sambaNTPassword</tt></td><td align="justify">the NT password hash 16-byte stored as a character
+ representation of a hexadecimal string.</td></tr><tr><td align="left"><tt class="constant">sambaPwdLastSet</tt></td><td align="justify">The integer time in seconds since 1970 when the
+ <tt class="constant">sambaLMPassword</tt> and <tt class="constant">sambaNTPassword</tt> attributes were last set.
+ </td></tr><tr><td align="left"><tt class="constant">sambaAcctFlags</tt></td><td align="justify">string of 11 characters surrounded by square brackets []
representing account flags such as U (user), W(workstation), X(no password expiration),
I(Domain trust account), H(Home dir required), S(Server trust account),
- and D(disabled).</td></tr><tr><td align="left"><tt class="constant">logonTime</tt></td><td align="left">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">logoffTime</tt></td><td align="left">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">kickoffTime</tt></td><td align="left">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">pwdCanChange</tt></td><td align="left">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">pwdMustChange</tt></td><td align="left">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">homeDrive</tt></td><td align="left">specifies the drive letter to which to map the
- UNC path specified by homeDirectory. The drive letter must be specified in the form &quot;X:&quot;
+ and D(disabled).</td></tr><tr><td align="left"><tt class="constant">sambaLogonTime</tt></td><td align="justify">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">sambaLogoffTime</tt></td><td align="justify">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">sambaKickoffTime</tt></td><td align="justify">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">sambaPwdCanChange</tt></td><td align="justify">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">sambaPwdMustChange</tt></td><td align="justify">Integer value currently unused</td></tr><tr><td align="left"><tt class="constant">sambaHomeDrive</tt></td><td align="justify">specifies the drive letter to which to map the
+ UNC path specified by sambaHomePath. The drive letter must be specified in the form &quot;X:&quot;
where X is the letter of the drive to map. Refer to the &quot;logon drive&quot; parameter in the
- smb.conf(5) man page for more information.</td></tr><tr><td align="left"><tt class="constant">scriptPath</tt></td><td align="left">The scriptPath property specifies the path of
+ smb.conf(5) man page for more information.</td></tr><tr><td align="left"><tt class="constant">sambaLogonScript</tt></td><td align="justify">The sambaLogonScript property specifies the path of
the user's logon script, .CMD, .EXE, or .BAT file. The string can be null. The path
- is relative to the netlogon share. Refer to the &quot;logon script&quot; parameter in the
- smb.conf(5) man page for more information.</td></tr><tr><td align="left"><tt class="constant">profilePath</tt></td><td align="left">specifies a path to the user's profile.
+ is relative to the netlogon share. Refer to the <a class="indexterm" name="id2901492"></a><i class="parameter"><tt>logon script</tt></i> parameter in the
+ <tt class="filename">smb.conf</tt> man page for more information.</td></tr><tr><td align="left"><tt class="constant">sambaProfilePath</tt></td><td align="justify">specifies a path to the user's profile.
This value can be a null string, a local absolute path, or a UNC path. Refer to the
- &quot;logon path&quot; parameter in the smb.conf(5) man page for more information.</td></tr><tr><td align="left"><tt class="constant">smbHome</tt></td><td align="left">The homeDirectory property specifies the path of
- the home directory for the user. The string can be null. If homeDrive is set and specifies
- a drive letter, homeDirectory should be a UNC path. The path must be a network
- UNC path of the form <tt class="filename">\\server\share\directory</tt>. This value can be a null string.
- Refer to the <b class="command">logon home</b> parameter in the <tt class="filename">smb.conf</tt> man page for more information.
- </td></tr><tr><td align="left"><tt class="constant">userWorkstation</tt></td><td align="left">character string value currently unused.
- </td></tr><tr><td align="left"><tt class="constant">rid</tt></td><td align="left">the integer representation of the user's relative identifier
- (RID).</td></tr><tr><td align="left"><tt class="constant">primaryGroupID</tt></td><td align="left">the relative identifier (RID) of the primary group
- of the user.</td></tr><tr><td align="left"><tt class="constant">domain</tt></td><td align="left">domain the user is part of.</td></tr></tbody></table></div><ns23:p>
- </ns23:p><p>
+ <a class="indexterm" name="id2901527"></a><i class="parameter"><tt>logon path</tt></i> parameter in the <tt class="filename">smb.conf</tt> man page for more information.</td></tr><tr><td align="left"><tt class="constant">sambaHomePath</tt></td><td align="justify">The sambaHomePath property specifies the path of
+the home directory for the user. The string can be null. If sambaHomeDrive is set and specifies
+a drive letter, sambaHomePath should be a UNC path. The path must be a network
+UNC path of the form <tt class="filename">\\server\share\directory</tt>. This value can be a null string.
+Refer to the <b class="command">logon home</b> parameter in the <tt class="filename">smb.conf</tt> man page for more information.
+ </td></tr><tr><td align="left"><tt class="constant">sambaUserWorkstations</tt></td><td align="justify">character string value currently unused.
+ </td></tr><tr><td align="left"><tt class="constant">sambaSID</tt></td><td align="justify">The security identifier(SID) of the user. The windows equivalent of unix uid's.</td></tr><tr><td align="left"><tt class="constant">sambaPrimaryGroupSID</tt></td><td align="justify">the relative identifier (RID) of the primary group
+ of the user.</td></tr><tr><td align="left"><tt class="constant">sambaDomainName</tt></td><td align="justify">domain the user is part of.</td></tr></tbody></table></div><p>
+ </p><p>
The majority of these parameters are only used when Samba is acting as a PDC of
a domain (refer to the <a href="samba-pdc.html" title="Chapter5.Domain Control">Samba as a primary domain controller</a> chapter for details on
how to configure Samba as a Primary Domain Controller). The following four attributes
are only stored with the sambaSamAccount entry if the values are non-default values:
- </p><table class="simplelist" border="0" summary="Simple list"><tr><td>smbHome</td></tr><tr><td>scriptPath</td></tr><tr><td>logonPath</td></tr><tr><td>homeDrive</td></tr></table><p>
+ </p><div class="itemizedlist"><ul type="disc"><li><p>sambaHomePath</p></li><li><p>sambaLogonScript</p></li><li><p>sambaProfilePath</p></li><li><p>sambaHomeDrive</p></li></ul></div><p>
These attributes are only stored with the sambaSamAccount entry if
the values are non-default values. For example, assume TASHTEGO has now been
- configured as a PDC and that <i class="parameter"><tt>logon home = \\%L\%u</tt></i> was defined in
+ configured as a PDC and that <a class="indexterm" name="id2901683"></a><i class="parameter"><tt>logon home</tt></i> = \\%L\%u was defined in
its <tt class="filename">smb.conf</tt> file. When a user named &quot;becky&quot; logons to the domain,
- the <i class="parameter"><tt>logon home</tt></i> string is expanded to \\TASHTEGO\becky.
+ the <a class="indexterm" name="id2901708"></a><i class="parameter"><tt>logon home</tt></i> string is expanded to \\TASHTEGO\becky.
If the smbHome attribute exists in the entry &quot;uid=becky,ou=people,dc=samba,dc=org&quot;,
this value is used. However, if this attribute does not exist, then the value
- of the <i class="parameter"><tt>logon home</tt></i> parameter is used in its place. Samba
+ of the <a class="indexterm" name="id2901732"></a><i class="parameter"><tt>logon home</tt></i> parameter is used in its place. Samba
will only write the attribute value to the directory entry if the value is
something other than the default (e.g. <tt class="filename">\\MOBY\becky</tt>).
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2915232"></a>Example LDIF Entries for a sambaSamAccount</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2901758"></a>Example LDIF Entries for a sambaSamAccount</h4></div></div><div></div></div><p>
The following is a working LDIF with the inclusion of the posixAccount objectclass:
- </p><ns23:p>
- </ns23:p><pre class="programlisting">
- dn: uid=guest2, ou=people,dc=plainjoe,dc=org
- ntPassword: 878D8014606CDA29677A44EFA1353FC7
- pwdMustChange: 2147483647
- primaryGroupID: 1201
- lmPassword: 552902031BEDE9EFAAD3B435B51404EE
- pwdLastSet: 1010179124
- logonTime: 0
+ </p><p>
+ </p><pre class="programlisting">
+ dn: uid=guest2, ou=people,dc=quenya,dc=org
+ sambaNTPassword: 878D8014606CDA29677A44EFA1353FC7
+ sambaPwdMustChange: 2147483647
+ sambaPrimaryGroupSID: S-1-5-21-2447931902-1787058256-3961074038-513
+ sambaNTPassword: 552902031BEDE9EFAAD3B435B51404EE
+ sambaPwdLastSet: 1010179124
+ sambaLogonTime: 0
objectClass: sambaSamAccount
uid: guest2
- kickoffTime: 2147483647
- acctFlags: [UX ]
- logoffTime: 2147483647
- rid: 19006
- pwdCanChange: 0
- </pre><ns23:p>
- </ns23:p><p>
+ sambaKickoffTime: 2147483647
+ sambaAcctFlags: [UX ]
+ sambaLogoffTime: 2147483647
+ sambaSID: S-1-5-21-2447931902-1787058256-3961074038-5006
+ sambaPwdCanChange: 0
+ </pre><p>
+ </p><p>
The following is an LDIF entry for using both the sambaSamAccount and
posixAccount objectclasses:
- </p><ns23:p>
- </ns23:p><pre class="programlisting">
- dn: uid=gcarter, ou=people,dc=plainjoe,dc=org
- logonTime: 0
+ </p><p>
+ </p><pre class="programlisting">
+ dn: uid=gcarter, ou=people,dc=quenya,dc=org
+ sambaLogonTime: 0
displayName: Gerald Carter
- lmPassword: 552902031BEDE9EFAAD3B435B51404EE
- primaryGroupID: 1201
+ sambaLMPassword: 552902031BEDE9EFAAD3B435B51404EE
+ sambaPrimaryGroupSID: S-1-5-21-2447931902-1787058256-3961074038-1201
objectClass: posixAccount
objectClass: sambaSamAccount
- acctFlags: [UX ]
+ sambaAcctFlags: [UX ]
userPassword: {crypt}BpM2ej8Rkzogo
uid: gcarter
uidNumber: 9000
@@ -703,60 +688,59 @@ access to attrs=lmPassword,ntPassword
loginShell: /bin/bash
logoffTime: 2147483647
gidNumber: 100
- kickoffTime: 2147483647
- pwdLastSet: 1010179230
- rid: 19000
+ sambaKickoffTime: 2147483647
+ sambaPwdLastSet: 1010179230
+ sambaSID: S-1-5-21-2447931902-1787058256-3961074038-5004
homeDirectory: /home/tashtego/gcarter
- pwdCanChange: 0
- pwdMustChange: 2147483647
- ntPassword: 878D8014606CDA29677A44EFA1353FC7
-</pre><ns23:p>
- </ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2915294"></a>Password synchronisation</h4></div></div><div></div></div><p>
+ sambaPwdCanChange: 0
+ sambaPwdMustChange: 2147483647
+ sambaNTPassword: 878D8014606CDA29677A44EFA1353FC7
+</pre><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2901824"></a>Password synchronisation</h4></div></div><div></div></div><p>
Since version 3.0 samba can update the non-samba (LDAP) password stored with an account. When
using pam_ldap, this allows changing both unix and windows passwords at once.
- </p><p>The <i class="parameter"><tt>ldap passwd sync</tt></i> options can have the following values:</p><div class="variablelist"><dl><dt><span class="term">yes</span></dt><dd><p>When the user changes his password, update
+ </p><p>The <a class="indexterm" name="id2901842"></a><i class="parameter"><tt>ldap passwd sync</tt></i> options can have the following values:</p><div class="variablelist"><dl><dt><span class="term">yes</span></dt><dd><p>When the user changes his password, update
<tt class="constant">ntPassword</tt>, <tt class="constant">lmPassword</tt>
- and the <tt class="constant">password</tt> fields.</p></dd><dt><span class="term">no</span></dt><dd><p>Only update <tt class="constant">ntPassword</tt> and <tt class="constant">lmPassword</tt>.</p></dd><dt><span class="term">only</span></dt><dd><p>Only update the LDAP password and let the LDAP server worry
- about the other fields. This option is only available when the LDAP server supports LDAP_EXOP_X_MODIFY_PASSWD. </p></dd></dl></div><p>More information can be found in the <a href="smb.conf.5.html#LDAPPASSWDSYNC" target="_top">smb.conf</a> manpage.
- </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915407"></a>MySQL</h3></div></div><div></div></div><p>
+ and the <tt class="constant">password</tt> fields.</p></dd><dt><span class="term">no</span></dt><dd><p>Only update <tt class="constant">ntPassword</tt> and <tt class="constant">lmPassword</tt>.</p></dd><dt><span class="term">only</span></dt><dd><p>Only update the LDAP password and let the LDAP server worry about the other fields. This option is only available on some LDAP servers. <sup>[<a name="id2901925" href="#ftn.id2901925">3</a>]</sup></p></dd></dl></div><p>More information can be found in the smb.conf manpage.
+ </p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2901940"></a>MySQL</h3></div></div><div></div></div><p>
Every so often someone will come along with a great new idea. Storing of user accounts in an
SQL backend is one of them. Those who want to do this are in the best position to know what the
specific benefits are to them. This may sound like a cop-out, but in truth we can not attempt
to document every nitty little detail why certain things of marginal utility to the bulk of
Samba users might make sense to the rest. In any case, the following instructions should help
the determined SQL user to implement a working system.
- </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2915428"></a>Creating the database</h4></div></div><div></div></div><ns23:p>
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2901962"></a>Creating the database</h4></div></div><div></div></div><p>
You either can set up your own table and specify the field names to pdb_mysql (see below
for the column names) or use the default table. The file <tt class="filename">examples/pdb/mysql/mysql.dump</tt>
contains the correct queries to create the required tables. Use the command :
- </ns23:p><pre class="screen"><tt class="prompt">$ </tt><b class="userinput"><tt>mysql -u<i class="replaceable"><tt>username</tt></i> -h<i class="replaceable"><tt>hostname</tt></i> -p<i class="replaceable"><tt>password</tt></i> \
-<i class="replaceable"><tt>databasename</tt></i> &lt; <tt class="filename">/path/to/samba/examples/pdb/mysql/mysql.dump</tt></tt></b></pre><ns23:p>
- </ns23:p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2915492"></a>Configuring</h4></div></div><div></div></div><p>This plugin lacks some good documentation, but here is some short info:</p><ns23:p>Add a the following to the <i class="parameter"><tt>passdb backend</tt></i> variable in your <tt class="filename">smb.conf</tt>:
- </ns23:p><pre class="programlisting">
- passdb backend = [other-plugins] mysql:identifier [other-plugins]
- </pre><ns23:p>
- </ns23:p><p>The identifier can be any string you like, as long as it doesn't collide with
+</p><pre class="screen">
+<tt class="prompt">$ </tt><b class="userinput"><tt>mysql -u<i class="replaceable"><tt>username</tt></i> -h<i class="replaceable"><tt>hostname</tt></i> -p<i class="replaceable"><tt>password</tt></i> \
+<i class="replaceable"><tt>databasename</tt></i> &lt; <tt class="filename">/path/to/samba/examples/pdb/mysql/mysql.dump</tt></tt></b>
+</pre><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2902030"></a>Configuring</h4></div></div><div></div></div><p>This plugin lacks some good documentation, but here is some short info:</p><p>Add a the following to the <a class="indexterm" name="id2902046"></a><i class="parameter"><tt>passdb backend</tt></i> variable in your <tt class="filename">smb.conf</tt>:
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>passdb backend = [other-plugins] mysql:identifier [other-plugins]</tt></i></td></tr></table><p>
+ </p><p>The identifier can be any string you like, as long as it doesn't collide with
the identifiers of other plugins or other instances of pdb_mysql. If you
- specify multiple pdb_mysql.so entries in <i class="parameter"><tt>passdb backend</tt></i>, you also need to
+ specify multiple pdb_mysql.so entries in <a class="indexterm" name="id2902089"></a><i class="parameter"><tt>passdb backend</tt></i>, you also need to
use different identifiers!
</p><p>
Additional options can be given through the <tt class="filename">smb.conf</tt> file in the <i class="parameter"><tt>[global]</tt></i> section.
- </p><ns23:p>
- </ns23:p><div class="table"><a name="id2915568"></a><p class="title"><b>Table11.2.Basic smb.conf options for MySQL passdb backend</b></p><table summary="Basic smb.conf options for MySQL passdb backend" border="1"><colgroup><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:mysql host</td><td align="left">host name, defaults to 'localhost'</td></tr><tr><td align="left">identifier:mysql password</td><td align="left"></td></tr><tr><td align="left">identifier:mysql user</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql database</td><td align="left">defaults to 'samba'</td></tr><tr><td align="left">identifier:mysql port</td><td align="left">defaults to 3306</td></tr><tr><td align="left">identifier:table</td><td align="left">Name of the table containing users</td></tr></tbody></table></div><ns23:p>
- </ns23:p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
+ </p><p>
+ </p><div class="table"><a name="id2902128"></a><p class="title"><b>Table11.2.Basic smb.conf options for MySQL passdb backend</b></p><table summary="Basic smb.conf options for MySQL passdb backend" border="1"><colgroup><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Field</th><th align="justify">Contents</th></tr></thead><tbody><tr><td align="left">mysql host</td><td align="justify">host name, defaults to 'localhost'</td></tr><tr><td align="left">mysql password</td><td align="justify"></td></tr><tr><td align="left">mysql user</td><td align="justify">defaults to 'samba'</td></tr><tr><td align="left">mysql database</td><td align="justify">defaults to 'samba'</td></tr><tr><td align="left">mysql port</td><td align="justify">defaults to 3306</td></tr><tr><td align="left">table</td><td align="justify">Name of the table containing users</td></tr></tbody></table></div><p>
+ </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
Since the password for the MySQL user is stored in the
- <tt class="filename">smb.conf</tt> file, you should make the the <tt class="filename">smb.conf</tt> file
+ <tt class="filename">smb.conf</tt> file, you should make the <tt class="filename">smb.conf</tt> file
readable only to the user that runs Samba This is considered a security
bug and will be fixed soon.
- </p></div><p>Names of the columns in this table (I've added column types those columns should have first):</p><ns23:p>
- </ns23:p><div class="table"><a name="id2915693"></a><p class="title"><b>Table11.3.MySQL field names for MySQL passdb backend</b></p><table summary="MySQL field names for MySQL passdb backend" border="1"><colgroup><col><col><col></colgroup><thead><tr><th align="left">Field</th><th align="left">Type</th><th align="left">Contents</th></tr></thead><tbody><tr><td align="left">identifier:logon time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:logoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:kickoff time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass last set time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass can change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:pass must change time column</td><td align="left">int(9)</td><td align="left"></td></tr><tr><td align="left">identifier:username column</td><td align="left">varchar(255)</td><td align="left">unix username</td></tr><tr><td align="left">identifier:domain column</td><td align="left">varchar(255)</td><td align="left">NT domain user is part of</td></tr><tr><td align="left">identifier:nt username column</td><td align="left">varchar(255)</td><td align="left">NT username</td></tr><tr><td align="left">identifier:fullname column</td><td align="left">varchar(255)</td><td align="left">Full name of user</td></tr><tr><td align="left">identifier:home dir column</td><td align="left">varchar(255)</td><td align="left">Unix homedir path</td></tr><tr><td align="left">identifier:dir drive column</td><td align="left">varchar(2)</td><td align="left">Directory drive path (eg: 'H:')</td></tr><tr><td align="left">identifier:logon script column</td><td align="left">varchar(255)</td><td align="left">Batch file to run on client side when logging on</td></tr><tr><td align="left">identifier:profile path column</td><td align="left">varchar(255)</td><td align="left">Path of profile</td></tr><tr><td align="left">identifier:acct desc column</td><td align="left">varchar(255)</td><td align="left">Some ASCII NT user data</td></tr><tr><td align="left">identifier:workstations column</td><td align="left">varchar(255)</td><td align="left">Workstations user can logon to (or NULL for all)</td></tr><tr><td align="left">identifier:unknown string column</td><td align="left">varchar(255)</td><td align="left">unknown string</td></tr><tr><td align="left">identifier:munged dial column</td><td align="left">varchar(255)</td><td align="left">?</td></tr><tr><td align="left">identifier:user sid column</td><td align="left">varchar(255)</td><td align="left">NT user SID</td></tr><tr><td align="left">identifier:group sid column</td><td align="left">varchar(255)</td><td align="left">NT group ID</td></tr><tr><td align="left">identifier:lanman pass column</td><td align="left">varchar(255)</td><td align="left">encrypted lanman password</td></tr><tr><td align="left">identifier:nt pass column</td><td align="left">varchar(255)</td><td align="left">encrypted nt passwd</td></tr><tr><td align="left">identifier:plain pass column</td><td align="left">varchar(255)</td><td align="left">plaintext password</td></tr><tr><td align="left">identifier:acct control column</td><td align="left">int(9)</td><td align="left">nt user data</td></tr><tr><td align="left">identifier:unknown 3 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:logon divs column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:hours len column</td><td align="left">int(9)</td><td align="left">?</td></tr><tr><td align="left">identifier:unknown 5 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr><tr><td align="left">identifier:unknown 6 column</td><td align="left">int(9)</td><td align="left">unknown</td></tr></tbody></table></div><ns23:p>
- </ns23:p><p>
+ </p></div><p>Names of the columns in this table (I've added column types those columns should have first):</p><p>
+ </p><div class="table"><a name="id2902260"></a><p class="title"><b>Table11.3.MySQL field names for MySQL passdb backend</b></p><table summary="MySQL field names for MySQL passdb backend" border="1"><colgroup><col align="left"><col align="left"><col align="justify"></colgroup><thead><tr><th align="left">Field</th><th align="left">Type</th><th align="justify">Contents</th></tr></thead><tbody><tr><td align="left">logon time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">logoff time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">kickoff time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">pass last set time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">pass can change time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">pass must change time column</td><td align="left">int(9)</td><td align="justify"></td></tr><tr><td align="left">username column</td><td align="left">varchar(255)</td><td align="justify">unix username</td></tr><tr><td align="left">domain column</td><td align="left">varchar(255)</td><td align="justify">NT domain user is part of</td></tr><tr><td align="left">nt username column</td><td align="left">varchar(255)</td><td align="justify">NT username</td></tr><tr><td align="left">fullname column</td><td align="left">varchar(255)</td><td align="justify">Full name of user</td></tr><tr><td align="left">home dir column</td><td align="left">varchar(255)</td><td align="justify">UNIX homedir path</td></tr><tr><td align="left">dir drive column</td><td align="left">varchar(2)</td><td align="justify">Directory drive path (eg: 'H:')</td></tr><tr><td align="left">logon script column</td><td align="left">varchar(255)</td><td align="justify">Batch file to run on client side when logging on</td></tr><tr><td align="left">profile path column</td><td align="left">varchar(255)</td><td align="justify">Path of profile</td></tr><tr><td align="left">acct desc column</td><td align="left">varchar(255)</td><td align="justify">Some ASCII NT user data</td></tr><tr><td align="left">workstations column</td><td align="left">varchar(255)</td><td align="justify">Workstations user can logon to (or NULL for all)</td></tr><tr><td align="left">unknown string column</td><td align="left">varchar(255)</td><td align="justify">unknown string</td></tr><tr><td align="left">munged dial column</td><td align="left">varchar(255)</td><td align="justify">?</td></tr><tr><td align="left">user sid column</td><td align="left">varchar(255)</td><td align="justify">NT user SID</td></tr><tr><td align="left">group sid column</td><td align="left">varchar(255)</td><td align="justify">NT group ID</td></tr><tr><td align="left">lanman pass column</td><td align="left">varchar(255)</td><td align="justify">encrypted lanman password</td></tr><tr><td align="left">nt pass column</td><td align="left">varchar(255)</td><td align="justify">encrypted nt passwd</td></tr><tr><td align="left">plain pass column</td><td align="left">varchar(255)</td><td align="justify">plaintext password</td></tr><tr><td align="left">acct control column</td><td align="left">int(9)</td><td align="justify">nt user data</td></tr><tr><td align="left">unknown 3 column</td><td align="left">int(9)</td><td align="justify">unknown</td></tr><tr><td align="left">logon divs column</td><td align="left">int(9)</td><td align="justify">?</td></tr><tr><td align="left">hours len column</td><td align="left">int(9)</td><td align="justify">?</td></tr><tr><td align="left">unknown 5 column</td><td align="left">int(9)</td><td align="justify">unknown</td></tr><tr><td align="left">unknown 6 column</td><td align="left">int(9)</td><td align="justify">unknown</td></tr></tbody></table></div><p>
+ </p><p>
Eventually, you can put a colon (:) after the name of each column, which
should specify the column to update when updating the table. You can also
specify nothing behind the colon - then the data from the field will not be
updated.
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2916074"></a>Using plaintext passwords or encrypted password</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2902649"></a>Using plaintext passwords or encrypted password</h4></div></div><div></div></div><p>
I strongly discourage the use of plaintext passwords, however, you can use them:
</p><p>
If you would like to use plaintext passwords, set
@@ -766,7 +750,7 @@ access to attrs=lmPassword,ntPassword
</p><p>
If you use encrypted passwords, set the 'identifier:plain pass
column' to 'NULL' (without the quotes). This is the default.
- </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2916105"></a>Getting non-column data from the table</h4></div></div><div></div></div><p>
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2902679"></a>Getting non-column data from the table</h4></div></div><div></div></div><p>
It is possible to have not all data in the database and making some 'constant'.
</p><p>
For example, you can set 'identifier:fullname column' to :
@@ -781,33 +765,21 @@ access to attrs=lmPassword,ntPassword
</p><p>
To import data, use:
<tt class="prompt">$ </tt> <b class="userinput"><tt>pdbedit -i xml:filename</tt></b>
- </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2916213"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916220"></a>Users can not logon - Users not in Samba SAM</h3></div></div><div></div></div><p>
- People forget to put their users in their backend and then complain Samba won't authorize them.
- </p></div><div xmlns:ns24="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916235"></a>Users are being added to the wrong backend database</h3></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2902790"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902796"></a>Users can not logon</h3></div></div><div></div></div><p>&#8220;<span class="quote">I've installed samba, but now I can't log on with my unix account!</span>&#8221;</p><p>Make sure your user has been added to the current samba <a class="indexterm" name="id2902813"></a><i class="parameter"><tt>passdb backend</tt></i>. Read the section <a href="passdb.html#acctmgmttools" title="Account Management Tools">Account Management Tools</a> for details.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902841"></a>Users being added to wrong backend database</h3></div></div><div></div></div><p>
A few complaints have been received from users that just moved to Samba-3. The following
<tt class="filename">smb.conf</tt> file entries were causing problems, new accounts were being added to the old
smbpasswd file, not to the tdbsam passdb.tdb file:
- </p><ns24:p>
- </ns24:p><pre class="programlisting">
- [globals]
- ...
- passdb backend = smbpasswd, tdbsam, guest
- ...
- </pre><ns24:p>
- </ns24:p><p>
+ </p><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td>...</td></tr><tr><td><i class="parameter"><tt>passdb backend = smbpasswd, tdbsam</tt></i></td></tr><tr><td>...</td></tr></table><p>
+ </p><p>
Samba will add new accounts to the first entry in the <span class="emphasis"><em>passdb backend</em></span>
parameter entry. If you want to update to the tdbsam, then change the entry to:
- </p><ns24:p>
- </ns24:p><pre class="programlisting">
- [globals]
- ...
- passdb backend = tdbsam, smbpasswd, guest
- ...
- </pre><ns24:p>
- </ns24:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916295"></a>auth methods does not work</h3></div></div><div></div></div><p>
- If you explicitly set an 'auth methods' parameter, guest must be specified as the first
- entry on the line. Eg: <i class="parameter"><tt>auth methods = guest sam</tt></i>.
</p><p>
- This is the exact opposite of the requirement for the <i class="parameter"><tt>passdb backed</tt></i>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[globals]</tt></i></td></tr><tr><td>...</td></tr><tr><td><i class="parameter"><tt>passdb backend = tdbsam, smbpasswd</tt></i></td></tr><tr><td>...</td></tr></table><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2902952"></a>auth methods does not work</h3></div></div><div></div></div><p>
+ If you explicitly set an <a class="indexterm" name="id2902963"></a><i class="parameter"><tt>auth methods</tt></i> parameter, guest must be specified as the first
+ entry on the line. Eg: <a class="indexterm" name="id2902979"></a><i class="parameter"><tt>auth methods</tt></i> = guest sam.
+ </p><p>
+ This is the exact opposite of the requirement for the <a class="indexterm" name="id2902998"></a><i class="parameter"><tt>passdb backend</tt></i>
option, where it must be the <span class="emphasis"><em>LAST</em></span> parameter on the line.
- </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="NetworkBrowsing.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="groupmapping.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter10.Samba / MS Windows Network Browsing Guide</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter12.Mapping MS Windows and Unix Groups</td></tr></table></div></body></html>
+ </p></div></div><div class="footnotes"><br><hr width="100" align="left"><div class="footnote"><p><sup>[<a name="ftn.id2901925" href="#id2901925">3</a>] </sup>Only when the LDAP server supports LDAP_EXOP_X_MODIFY_PASSWD</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="NetworkBrowsing.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="groupmapping.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter10.Samba / MS Windows Network Browsing Guide</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter12.Mapping MS Windows and UNIX Groups</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/pdbedit.8.html b/docs/htmldocs/pdbedit.8.html
index 54068305a17..f38aeccc183 100644
--- a/docs/htmldocs/pdbedit.8.html
+++ b/docs/htmldocs/pdbedit.8.html
@@ -1,4 +1,4 @@
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>pdbedit</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="pdbedit.8"></a><div class="titlepage"><div></div><div></div></div><div class="refnamediv"><h2>Name</h2><p>pdbedit &#8212; manage the SAM database</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><tt class="command">pdbedit</tt> [-L] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-D drive] [-S script] [-p profile] [-a] [-m] [-x] [-i passdb-backend] [-e passdb-backend] [-b passdb-backend] [-g] [-d debuglevel] [-s configfile] [-P account-policy] [-C value]</p></div></div><div class="refsect1" lang="en"><h2>DESCRIPTION</h2><p>This tool is part of the <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a> suite.</p><p>The pdbedit program is used to manage the users accounts
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>pdbedit</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="pdbedit.8"></a><div class="titlepage"><div></div><div></div></div><div class="refnamediv"><h2>Name</h2><p>pdbedit &#8212; manage the SAM database</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><tt class="command">pdbedit</tt> [-L] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-D drive] [-S script] [-p profile] [-a] [-m] [-r] [-x] [-i passdb-backend] [-e passdb-backend] [-b passdb-backend] [-g] [-d debuglevel] [-s configfile] [-P account-policy] [-C value] [-c account-control]</p></div></div><div class="refsect1" lang="en"><h2>DESCRIPTION</h2><p>This tool is part of the <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a> suite.</p><p>The pdbedit program is used to manage the users accounts
stored in the sam database and can only be run by root.</p><p>The pdbedit tool uses the passdb modular interface and is
independent from the kind of users database used (currently there
are smbpasswd, ldap, nis+ and tdb based and more can be added
@@ -65,14 +65,14 @@ samba:45:0F2B255F7B67A7A9AAD3B435B51404EE:BC281CE3F53B6A5146629CD4751D3490:[UX
rid. </p><p>Example: <b class="command">-U S-1-5-21-2447931902-1787058256-3961074038-5004</b></p></dd><dt><span class="term">-c account-control</span></dt><dd><p>This option can be used while adding or modifying a user
account. It will specify the users' account control property. Possible
flags that can be set are: N, D, H, L, X.
- </p><p>Example: <b class="command">-c &quot;[X ]&quot;</b></p></dd><dt><span class="term">-a</span></dt><dd xmlns:ns1=""><p>This option is used to add a user into the
+ </p><p>Example: <b class="command">-c &quot;[X ]&quot;</b></p></dd><dt><span class="term">-a</span></dt><dd><p>This option is used to add a user into the
database. This command needs a user name specified with
the -u switch. When adding a new user, pdbedit will also
- ask for the password to be used.</p><ns1:p>Example: <b class="command">pdbedit -a -u sorce</b>
-</ns1:p><pre class="programlisting">new password:
+ ask for the password to be used.</p><p>Example: <b class="command">pdbedit -a -u sorce</b>
+</p><pre class="programlisting">new password:
retype new password
-</pre><ns1:p>
-</ns1:p></dd><dt><span class="term">-r</span></dt><dd><p>This option is used to modify an existing user
+</pre><p>
+</p></dd><dt><span class="term">-r</span></dt><dd><p>This option is used to modify an existing user
in the database. This command needs a user name specified with the -u
switch. Other options can be specified to modify the properties of
the specified user. This flag is kept for backwards compatibility, but
@@ -109,8 +109,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -124,9 +123,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2797533"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>NOTES</h2><p>This command may be used only by root.</p></div><div class="refsect1" lang="en"><h2>VERSION</h2><p>This man page is correct for version 3.0 of
diff --git a/docs/htmldocs/pr01.html b/docs/htmldocs/pr01.html
new file mode 100644
index 00000000000..193564ca32b
--- /dev/null
+++ b/docs/htmldocs/pr01.html
@@ -0,0 +1,5 @@
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Legal Notice</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="previous" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="next" href="pr02.html" title="Attributions"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Legal Notice</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="samba-doc.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="pr02.html">Next</a></td></tr></table><hr></div><div class="preface" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2869898"></a>Legal Notice</h2></div></div><div></div></div><p>
+This documentation is distributed under the GNU General Public License (GPL)
+version 2. A copy of the license is included with the Samba source
+distribution. A copy can be found on-line at <a href="http://www.fsf.org/licenses/gpl.txt" target="_top">http://www.fsf.org/licenses/gpl.txt</a>
+</p></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="samba-doc.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-doc.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="pr02.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">SAMBA Project Documentation</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Attributions</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/pr02.html b/docs/htmldocs/pr02.html
new file mode 100644
index 00000000000..08a02a71420
--- /dev/null
+++ b/docs/htmldocs/pr02.html
@@ -0,0 +1 @@
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Attributions</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="previous" href="pr01.html" title="Legal Notice"><link rel="next" href="introduction.html" title="PartI.General Installation"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Attributions</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="pr01.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="introduction.html">Next</a></td></tr></table><hr></div><div class="preface" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2869923"></a>Attributions</h2></div></div><div></div></div><p><a href="IntroSMB.html" title="Chapter1.Introduction to Samba">Introduction to Samba</a></p><div class="itemizedlist"><ul type="disc"><li><p>David Lechnyr &lt;<a href="mailto:david@lechnyr.com" target="_top">david@lechnyr.com</a>&gt;</p></li></ul></div><p><a href="install.html" title="Chapter2.How to Install and Test SAMBA">How to Install and Test SAMBA</a></p><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Karl Auer</p></li></ul></div><p><a href="FastStart.html" title="Chapter3.Fast Start for the Impatient">Fast Start for the Impatient</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="ServerType.html" title="Chapter4.Server Types and Security Modes">Server Types and Security Modes</a></p><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="samba-pdc.html" title="Chapter5.Domain Control">Domain Control</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>David Bannon &lt;<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>&gt;</p></li></ul></div><p><a href="samba-bdc.html" title="Chapter6.Backup Domain Control">Backup Domain Control</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Volker Lendecke &lt;<a href="mailto:Volker.Lendecke@SerNet.DE" target="_top">Volker.Lendecke@SerNet.DE</a>&gt;</p></li></ul></div><p><a href="domain-member.html" title="Chapter7.Domain Membership">Domain Membership</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div><p><a href="StandAloneServer.html" title="Chapter8.Stand-Alone Servers">Stand-Alone Servers</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="ClientConfig.html" title="Chapter9.MS Windows Network Configuration Guide">MS Windows Network Configuration Guide</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide">Samba / MS Windows Network Browsing Guide</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div><p><a href="passdb.html" title="Chapter11.Account Information Databases">Account Information Databases</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Olivier (lem) Lemaire &lt;<a href="mailto:olem@IDEALX.org" target="_top">olem@IDEALX.org</a>&gt;</p></li></ul></div><p><a href="groupmapping.html" title="Chapter12.Mapping MS Windows and UNIX Groups">Mapping MS Windows and UNIX Groups</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jean Franois Micouleau</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="AccessControls.html" title="Chapter13.File, Directory and Share Access Controls">File, Directory and Share Access Controls</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt; (drawing) </p></li></ul></div><p><a href="locking.html" title="Chapter14.File and Record Locking">File and Record Locking</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jeremy Allison &lt;<a href="mailto:jra@samba.org" target="_top">jra@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Eric Roseme &lt;<a href="mailto:eric.roseme@hp.com" target="_top">eric.roseme@hp.com</a>&gt;</p></li></ul></div><p><a href="securing-samba.html" title="Chapter15.Securing Samba">Securing Samba</a></p><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="InterdomainTrusts.html" title="Chapter16.Interdomain Trust Relationships">Interdomain Trust Relationships</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Rafal Szczesniak &lt;<a href="mailto:mimir@samba.org" target="_top">mimir@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt; (drawing) </p></li><li><p>Stephen Langasek &lt;<a href="mailto:vorlon@netexpress.net" target="_top">vorlon@netexpress.net</a>&gt;</p></li></ul></div><p><a href="msdfs.html" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba">Hosting a Microsoft Distributed File System tree on Samba</a></p><div class="itemizedlist"><ul type="disc"><li><p>Shirish Kalele &lt;<a href="mailto:samba@samba.org" target="_top">samba@samba.org</a>&gt;</p></li></ul></div><p><a href="printing.html" title="Chapter18.Classical Printing Support">Classical Printing Support</a></p><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle &lt;<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>&gt;</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li></ul></div><p><a href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0">CUPS Printing Support in Samba 3.0</a></p><div class="itemizedlist"><ul type="disc"><li><p>Kurt Pfeifle &lt;<a href="mailto:kpfeifle@danka.de" target="_top">kpfeifle@danka.de</a>&gt;</p></li><li><p>Ciprian Vizitiu &lt;<a href="mailto:CVizitiu@gbif.org" target="_top">CVizitiu@gbif.org</a>&gt; (drawings) </p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt; (drawings) </p></li></ul></div><p><a href="VFS.html" title="Chapter20.Stackable VFS modules">Stackable VFS modules</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Tim Potter</p></li><li><p>Simo Sorce (original vfs_skel README) </p></li><li><p>Alexander Bokovoy (original vfs_netatalk docs) </p></li><li><p>Stefan Metzmacher (Update for multiple modules) </p></li></ul></div><p><a href="AdvancedNetworkManagement.html" title="Chapter22.Advanced Network Management">Advanced Network Management</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="PolicyMgmt.html" title="Chapter23.System and Account Policies">System and Account Policies</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management">Desktop Profile Management</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="pam.html" title="Chapter25.PAM based Distributed Authentication">PAM based Distributed Authentication</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Stephen Langasek &lt;<a href="mailto:vorlon@netexpress.net" target="_top">vorlon@netexpress.net</a>&gt;</p></li></ul></div><p><a href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba">Integrating MS Windows networks with Samba</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="unicode.html" title="Chapter27.Unicode/Charsets">Unicode/Charsets</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>TAKAHASHI Motonobu &lt;<a href="mailto:monyo@home.monyo.com" target="_top">monyo@home.monyo.com</a>&gt;</p></li></ul></div><p><a href="Backup.html" title="Chapter28.Samba Backup Techniques">Samba Backup Techniques</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="SambaHA.html" title="Chapter29.High Availability Options">High Availability Options</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="upgrading-to-3.0.html" title="Chapter30.Upgrading from Samba-2.x to Samba-3.0.0">Upgrading from Samba-2.x to Samba-3.0.0</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li></ul></div><p><a href="NT4Migration.html" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC">Migration from NT4 PDC to Samba-3 PDC</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="SWAT.html" title="Chapter32.SWAT - The Samba Web Administration Tool">SWAT - The Samba Web Administration Tool</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="diagnosis.html" title="Chapter33.The Samba checklist">The Samba checklist</a></p><div class="itemizedlist"><ul type="disc"><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div><p><a href="problems.html" title="Chapter34.Analysing and solving samba problems">Analysing and solving samba problems</a></p><div class="itemizedlist"><ul type="disc"><li><p>Gerald (Jerry) Carter &lt;<a href="mailto:jerry@samba.org" target="_top">jerry@samba.org</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>David Bannon &lt;<a href="mailto:dbannon@samba.org" target="_top">dbannon@samba.org</a>&gt;</p></li></ul></div><p><a href="bugreport.html" title="Chapter35.Reporting Bugs">Reporting Bugs</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li></ul></div><p><a href="compiling.html" title="Chapter36.How to compile Samba">How to compile Samba</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>Andrew Tridgell &lt;<a href="mailto:tridge@samba.org" target="_top">tridge@samba.org</a>&gt;</p></li></ul></div><p><a href="Portability.html" title="Chapter37.Portability">Portability</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div><p><a href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients">Samba and other CIFS clients</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>Jim McDonough &lt;<a href="mailto:jmcd@us.ibm.com" target="_top">jmcd@us.ibm.com</a>&gt; (OS/2) </p></li></ul></div><p><a href="speed.html" title="Chapter39.Samba Performance Tuning">Samba Performance Tuning</a></p><div class="itemizedlist"><ul type="disc"><li><p>Paul Cochrane &lt;<a href="mailto:paulc@dth.scot.nhs.uk" target="_top">paulc@dth.scot.nhs.uk</a>&gt;</p></li><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="DNSDHCP.html" title="Chapter40.DNS and DHCP Configuration Guide">DNS and DHCP Configuration Guide</a></p><div class="itemizedlist"><ul type="disc"><li><p>John H. Terpstra &lt;<a href="mailto:jht@samba.org" target="_top">jht@samba.org</a>&gt;</p></li></ul></div><p><a href="Further-Resources.html" title="Chapter41.Further Resources">Further Resources</a></p><div class="itemizedlist"><ul type="disc"><li><p>Jelmer R. Vernooij &lt;<a href="mailto:jelmer@samba.org" target="_top">jelmer@samba.org</a>&gt;</p></li></ul></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="pr01.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-doc.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="introduction.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Legal Notice</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">PartI.General Installation</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/printing.html b/docs/htmldocs/printing.html
index 578e0783717..2b0abb56e69 100644
--- a/docs/htmldocs/printing.html
+++ b/docs/htmldocs/printing.html
@@ -1,13 +1,11 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter18.Classical Printing Support</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="msdfs.html" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba"><link rel="next" href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter18.Classical Printing Support</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="msdfs.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="CUPS-printing.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter18.Classical Printing Support</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 32, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="printing.html#id2932219">Features and Benefits</a></dt><dt><a href="printing.html#id2932283">Technical Introduction</a></dt><dd><dl><dt><a href="printing.html#id2932319">What happens if you send a Job from a Client</a></dt><dt><a href="printing.html#id2932389">Printing Related Configuration Parameters</a></dt><dt><a href="printing.html#id2935498">Parameters Recommended for Use</a></dt><dt><a href="printing.html#id2930858">Parameters for Backwards Compatibility</a></dt><dt><a href="printing.html#id2930966">Parameters no longer in use</a></dt></dl></dd><dt><a href="printing.html#id2931059">A simple Configuration to Print with Samba-3</a></dt><dd><dl><dt><a href="printing.html#id2933066">Verification of &quot;Settings in Use&quot; with testparm</a></dt><dt><a href="printing.html#id2933148">A little Experiment to warn you</a></dt></dl></dd><dt><a href="printing.html#id2933455">Extended Sample Configuration to Print with Samba-3</a></dt><dt><a href="printing.html#id2933547">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="printing.html#id2933560">The [global] Section</a></dt><dt><a href="printing.html#id2943021">The [printers] Section</a></dt><dt><a href="printing.html#id2943350">Any [my_printer_name] Section</a></dt><dt><a href="printing.html#id2943571">Print Commands</a></dt><dt><a href="printing.html#id2943622">Default Print Commands for various Unix Print Subsystems</a></dt><dt><a href="printing.html#id2944148">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="printing.html#id2944425">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="printing.html#id2944579">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="printing.html#id2944731">The [printer$] Section is removed from Samba-3</a></dt><dt><a href="printing.html#id2944844">Creating the [print$] Share</a></dt><dt><a href="printing.html#id2944914">Parameters in the [print$] Section</a></dt><dt><a href="printing.html#id2945135">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="printing.html#id2945296">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="printing.html#id2945390">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="printing.html#id2945574">Setting Drivers for existing Printers with
-rpcclient</a></dt></dl></dd><dt><a href="printing.html#id2947172">&quot;The Proof of the Pudding lies in the Eating&quot; (Client Driver Install
-Procedure)</a></dt><dd><dl><dt><a href="printing.html#id2947193">The first Client Driver Installation</a></dt><dt><a href="printing.html#id2947391">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="printing.html#id2947680">Further Client Driver Install Procedures</a></dt><dt><a href="printing.html#id2947775">Always make first Client Connection as root or &quot;printer admin&quot;</a></dt></dl></dd><dt><a href="printing.html#id2947917">Other Gotchas</a></dt><dd><dl><dt><a href="printing.html#id2947950">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="printing.html#id2948384">Supporting large Numbers of Printers</a></dt><dt><a href="printing.html#id2948687">Adding new Printers with the Windows NT APW</a></dt><dt><a href="printing.html#id2948930">Weird Error Message Cannot connect under a
-different Name</a></dt><dt><a href="printing.html#id2949028">Be careful when assembling Driver Files</a></dt><dt><a href="printing.html#id2949299">Samba and Printer Ports</a></dt><dt><a href="printing.html#id2949370">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="printing.html#id2949392">The Imprints Toolset</a></dt><dd><dl><dt><a href="printing.html#id2949437">What is Imprints?</a></dt><dt><a href="printing.html#id2949479">Creating Printer Driver Packages</a></dt><dt><a href="printing.html#id2949498">The Imprints Server</a></dt><dt><a href="printing.html#id2949522">The Installation Client</a></dt></dl></dd><dt><a href="printing.html#id2949674">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="printing.html#id2950004">The addprinter command</a></dt><dt><a href="printing.html#id2950049">Migration of &quot;Classical&quot; printing to Samba-3</a></dt><dt><a href="printing.html#id2950217">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="printing.html#id2950232">Common Errors and Problems</a></dt><dd><dl><dt><a href="printing.html#id2950245">I give my root password but I don't get access</a></dt><dt><a href="printing.html#id2950278">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932219"></a>Features and Benefits</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter18.Classical Printing Support</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="msdfs.html" title="Chapter17.Hosting a Microsoft Distributed File System tree on Samba"><link rel="next" href="CUPS-printing.html" title="Chapter19.CUPS Printing Support in Samba 3.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter18.Classical Printing Support</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="msdfs.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="CUPS-printing.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="printing"></a>Chapter18.Classical Printing Support</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Kurt</span> <span class="surname">Pfeifle</span></h3><div class="affiliation"><span class="orgname"> Danka Deutschland GmbH <br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:kpfeifle@danka.de">kpfeifle@danka.de</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 31, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="printing.html#id2912941">Features and Benefits</a></dt><dt><a href="printing.html#id2913045">Technical Introduction</a></dt><dd><dl><dt><a href="printing.html#id2913083">What happens if you send a Job from a Client</a></dt><dt><a href="printing.html#id2913154">Printing Related Configuration Parameters</a></dt><dt><a href="printing.html#id2913251">Parameters Recommended for Use</a></dt></dl></dd><dt><a href="printing.html#id2913718">A simple Configuration to Print</a></dt><dd><dl><dt><a href="printing.html#id2913883">Verification of &quot;Settings in Use&quot; with testparm</a></dt><dt><a href="printing.html#id2914010">A little Experiment to warn you</a></dt></dl></dd><dt><a href="printing.html#id2914370">Extended Sample Configuration to Print</a></dt><dt><a href="printing.html#id2914701">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="printing.html#id2914714">The [global] Section</a></dt><dt><a href="printing.html#id2915245">The [printers] Section</a></dt><dt><a href="printing.html#id2915706">Any [my_printer_name] Section</a></dt><dt><a href="printing.html#id2916027">Print Commands</a></dt><dt><a href="printing.html#id2916108">Default Print Commands for various UNIX Print Subsystems</a></dt><dt><a href="printing.html#id2916791">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="printing.html#id2917131">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="printing.html#id2917292">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="printing.html#id2917453">The [printer$] Section is removed from Samba 3</a></dt><dt><a href="printing.html#id2917566">Creating the [print$] Share</a></dt><dt><a href="printing.html#id2917756">Parameters in the [print$] Section</a></dt><dt><a href="printing.html#id2918066">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="printing.html#id2918239">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="printing.html#id2918333">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="printing.html#id2918531">Setting Drivers for existing Printers with
+rpcclient</a></dt></dl></dd><dt><a href="printing.html#id2920241">Client Driver Install Procedure</a></dt><dd><dl><dt><a href="printing.html#id2920260">The first Client Driver Installation</a></dt><dt><a href="printing.html#id2920462">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="printing.html#id2920763">Further Client Driver Install Procedures</a></dt><dt><a href="printing.html#id2920857">Always make first Client Connection as root or &quot;printer admin&quot;</a></dt></dl></dd><dt><a href="printing.html#id2921029">Other Gotchas</a></dt><dd><dl><dt><a href="printing.html#id2921063">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="printing.html#id2921530">Supporting large Numbers of Printers</a></dt><dt><a href="printing.html#id2921841">Adding new Printers with the Windows NT APW</a></dt><dt><a href="printing.html#id2922136">Weird Error Message Cannot connect under a
+different Name</a></dt><dt><a href="printing.html#id2922236">Be careful when assembling Driver Files</a></dt><dt><a href="printing.html#id2922594">Samba and Printer Ports</a></dt><dt><a href="printing.html#id2922687">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="printing.html#id2922712">The Imprints Toolset</a></dt><dd><dl><dt><a href="printing.html#id2922768">What is Imprints?</a></dt><dt><a href="printing.html#id2922810">Creating Printer Driver Packages</a></dt><dt><a href="printing.html#id2922828">The Imprints Server</a></dt><dt><a href="printing.html#id2922853">The Installation Client</a></dt></dl></dd><dt><a href="printing.html#id2923008">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="printing.html#id2923342">The addprinter command</a></dt><dt><a href="printing.html#id2923388">Migration of &quot;Classical&quot; printing to Samba</a></dt><dt><a href="printing.html#id2923561">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="printing.html#id2923575">Common Errors</a></dt><dd><dl><dt><a href="printing.html#id2923582">I give my root password but I don't get access</a></dt><dt><a href="printing.html#id2923615">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2912941"></a>Features and Benefits</h2></div></div><div></div></div><p>
Printing is often a mission-critical service for the users. Samba can
provide this service reliably and seamlessly for a client network
consisting of Windows workstations.
</p><p>
-A Samba-3.0 print service may be run on a Standalone or a Domain
+A Samba print service may be run on a Standalone or a Domain
member server, side by side with file serving functions, or on a
dedicated print server. It can be made as tight or as loosely secured
as needs dictate. Configurations may be simple or complex. Available
@@ -31,40 +29,40 @@ implemented by the more traditional UNIX (BSD- and System V-style)
printing systems. Many things apply to CUPS, the newer Common UNIX
Printing System, too; so if you use CUPS, you might be tempted to jump
to the next chapter -- but you will certainly miss a few things if you
-do so. Better read this chapter too.
+do so. Better to read this chapter too.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Most of the given examples have been verified on Windows XP
Professional clients. Where this document describes the responses to
commands given, bear in mind that Windows 2000 clients are very
similar, but may differ in details. Windows NT is somewhat different
again.
-</p></div></div><div xmlns:ns45="" class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2932283"></a>Technical Introduction</h2></div></div><div></div></div><ns45:p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2913045"></a>Technical Introduction</h2></div></div><div></div></div><p>
Samba's printing support always relies on the installed print
-subsystem of the Unix OS it runs on. Samba is a &quot;middleman&quot;. It takes
+subsystem of the UNIX OS it runs on. Samba is a &quot;middleman&quot;. It takes
printfiles from Windows (or other SMB) clients and passes them to the
real printing system for further processing. Therefore it needs to
-&quot;talk&quot; to two sides: to the Windows print clients and to the Unix
+&quot;talk&quot; to two sides: to the Windows print clients and to the UNIX
printing system. Hence we must differentiate between the various
client OS types each of which behave differently, as well as the
various UNIX print subsystems, which themselves have different
features and are accessed differently. This part of the Samba HOWTO
-Collection deals with the &quot;traditional&quot; way of Unix printing first;
+Collection deals with the &quot;traditional&quot; way of UNIX printing first;
the next chapter covers in great detail the more modern
<span class="emphasis"><em>Common UNIX Printing System</em></span>
(CUPS).
-</ns45:p><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>CUPS users, be warned: don't just jump on to the next
+</p><div class="important" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Important</h3><p>CUPS users, be warned: don't just jump on to the next
chapter. You might miss important information contained only
-here!</p></div><ns45:p>
-</ns45:p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932319"></a>What happens if you send a Job from a Client</h3></div></div><div></div></div><p>
+here!</p></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913083"></a>What happens if you send a Job from a Client</h3></div></div><div></div></div><p>
To successfully print a job from a Windows client via a Samba
print server to a UNIX printer, there are 6 (potentially 7)
stages:
-</p><div class="orderedlist"><ol type="1"><li><p>Windows opens a connection to the printershare</p></li><li><p>Samba must authenticate the user</p></li><li><p>Windows sends a copy of the printfile over the network
+</p><div class="orderedlist"><ol type="1"><li><p>Windows opens a connection to the printer share</p></li><li><p>Samba must authenticate the user</p></li><li><p>Windows sends a copy of the printfile over the network
into Samba's spooling area</p></li><li><p>Windows closes the connection again</p></li><li><p>Samba invokes the print command to hand the file over
-to the UNIX print subsystem's spooling area</p></li><li><p>The Unix print subsystem processes the print
+to the UNIX print subsystem's spooling area</p></li><li><p>The UNIX print subsystem processes the print
job</p></li><li><p>The printfile may need to be explicitly deleted
-from the Samba spooling area.</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2932389"></a>Printing Related Configuration Parameters</h3></div></div><div></div></div><p>
+from the Samba spooling area.</p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913154"></a>Printing Related Configuration Parameters</h3></div></div><div></div></div><p>
There are a number of configuration parameters in
controlling Samba's printing
behaviour. Please also refer to the man page for smb.conf to
@@ -72,74 +70,65 @@ acquire an overview about these. As with other parameters, there are
Global Level (tagged with a &quot;<span class="emphasis"><em>G</em></span>&quot; in the listings) and
Service Level (&quot;<span class="emphasis"><em>S</em></span>&quot;) parameters.
</p><div class="variablelist"><dl><dt><span class="term">Service Level Parameters</span></dt><dd><p>These <span class="emphasis"><em>may</em></span> go into the
-<i class="parameter"><tt>[global]</tt></i> section of
-. In this case they define the default
+<i class="parameter"><tt>[global]</tt></i> section of <tt class="filename">smb.conf</tt>.
+In this case they define the default
behaviour of all individual or service level shares (provided those
don't have a different setting defined for the same parameter, thus
overriding the global default).</p></dd><dt><span class="term">Global Parameters</span></dt><dd><p>These <span class="emphasis"><em>may not</em></span> go into individual
shares. If they go in by error, the &quot;testparm&quot; utility can discover
-this (if you run it) and tell you so.</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2935498"></a>Parameters Recommended for Use</h3></div></div><div></div></div><p>The following <tt class="filename">smb.conf</tt> parameters directly
-related to printing are used in Samba-3. See also the
+this (if you run it) and tell you so.</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913251"></a>Parameters Recommended for Use</h3></div></div><div></div></div><p>The following <tt class="filename">smb.conf</tt> parameters directly
+related to printing are used in Samba. See also the
<tt class="filename">smb.conf</tt> man page for detailed explanations:
-</p><ns45:p><b>List of printing related parameters in Samba-3.</b>
-</ns45:p><div class="itemizedlist"><p class="title"><b>Global level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>addprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>deleteprinter command (G)</tt></i></p></li><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>enumports command (G)</tt></i></p></li><li><p><i class="parameter"><tt>load printers (G)</tt></i></p></li><li><p><i class="parameter"><tt>lpq cache time (G)</tt></i></p></li><li><p><i class="parameter"><tt>os2 driver map (G)</tt></i></p></li><li><p><i class="parameter"><tt>printcap name (G), printcap (G)</tt></i></p></li><li><p><i class="parameter"><tt>show add printer wizard (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (G)</tt></i></p></li></ul></div><ns45:p>
-
-</ns45:p><div class="itemizedlist"><p class="title"><b>Service level parameters:</b></p><ul type="disc"><li><p><i class="parameter"><tt>hosts allow (S)</tt></i></p></li><li><p><i class="parameter"><tt>hosts deny (S)</tt></i></p></li><li><p><i class="parameter"><tt>lppause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpq command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lpresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>lprm command (S)</tt></i></p></li><li><p><i class="parameter"><tt>max print jobs (S)</tt></i></p></li><li><p><i class="parameter"><tt>min print space (S)</tt></i></p></li><li><p><i class="parameter"><tt>print command (S)</tt></i></p></li><li><p><i class="parameter"><tt>printable (S), print ok (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer name (S), printer (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer admin (S)</tt></i></p></li><li><p><i class="parameter"><tt>printing = [cups|bsd|lprng...] (S)</tt></i></p></li><li><p><i class="parameter"><tt>queuepause command (S)</tt></i></p></li><li><p><i class="parameter"><tt>queueresume command (S)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (S)</tt></i></p></li></ul></div><ns45:p>
-</ns45:p><p>
+</p><p>Global level parameters: <a class="indexterm" name="id2913280"></a><i class="parameter"><tt>addprinter command</tt></i>,
+<a class="indexterm" name="id2913295"></a><i class="parameter"><tt>deleteprinter command</tt></i>,
+<a class="indexterm" name="id2913310"></a><i class="parameter"><tt>disable spoolss</tt></i>,
+<a class="indexterm" name="id2913324"></a><i class="parameter"><tt>enumports command</tt></i>,
+<a class="indexterm" name="id2913338"></a><i class="parameter"><tt>load printers</tt></i>,
+<a class="indexterm" name="id2913352"></a><i class="parameter"><tt>lpq cache time</tt></i>,
+<a class="indexterm" name="id2913366"></a><i class="parameter"><tt>os2 driver map</tt></i>,
+<a class="indexterm" name="id2913380"></a><i class="parameter"><tt>printcap name</tt></i>, <a class="indexterm" name="id2913394"></a><i class="parameter"><tt>printcap</tt></i>,
+<a class="indexterm" name="id2913407"></a><i class="parameter"><tt>show add printer wizard</tt></i>,
+<a class="indexterm" name="id2913422"></a><i class="parameter"><tt>total print jobs</tt></i>,
+<a class="indexterm" name="id2913436"></a><i class="parameter"><tt>use client driver</tt></i>.
+</p><p>Service level parameters: <a class="indexterm" name="id2913454"></a><i class="parameter"><tt>hosts allow</tt></i>,
+<a class="indexterm" name="id2913468"></a><i class="parameter"><tt>hosts deny</tt></i>,
+<a class="indexterm" name="id2913481"></a><i class="parameter"><tt>lppause command</tt></i>,
+<a class="indexterm" name="id2913496"></a><i class="parameter"><tt>lpq command</tt></i>,
+<a class="indexterm" name="id2913509"></a><i class="parameter"><tt>lpresume command</tt></i>,
+<a class="indexterm" name="id2913523"></a><i class="parameter"><tt>lprm command</tt></i>,
+<a class="indexterm" name="id2913537"></a><i class="parameter"><tt>max print jobs</tt></i>,
+<a class="indexterm" name="id2913551"></a><i class="parameter"><tt>min print space</tt></i>,
+<a class="indexterm" name="id2913565"></a><i class="parameter"><tt>print command</tt></i>,
+<a class="indexterm" name="id2913579"></a><i class="parameter"><tt>printable</tt></i>, <a class="indexterm" name="id2913593"></a><i class="parameter"><tt>print ok </tt></i>,
+<a class="indexterm" name="id2913606"></a><i class="parameter"><tt>printer name</tt></i>, <a class="indexterm" name="id2913621"></a><i class="parameter"><tt>printer</tt></i>,
+<a class="indexterm" name="id2913634"></a><i class="parameter"><tt>printer admin</tt></i>,
+<a class="indexterm" name="id2913648"></a><i class="parameter"><tt>printing</tt></i> = [cups|bsd|lprng...],
+<a class="indexterm" name="id2913662"></a><i class="parameter"><tt>queuepause command</tt></i>,
+<a class="indexterm" name="id2913676"></a><i class="parameter"><tt>queueresume command</tt></i>,
+<a class="indexterm" name="id2913690"></a><i class="parameter"><tt>total print jobs</tt></i>.
+</p><p>
Samba's printing support implements the Microsoft Remote Procedure
Calls (MS-RPC) methods for printing. These are used by Windows NT (and
later) print servers. The old &quot;LanMan&quot; protocol is still supported as
a fallback resort, and for older clients to use. More details will
follow further beneath.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930858"></a>Parameters for Backwards Compatibility</h3></div></div><div></div></div><p>
-Two new parameters that were added in Samba 2.2.2, are still present
-in Samba-3.0. Both of these options are described in the
-<tt class="filename">smb.conf</tt> man page and are disabled by
-default. <span class="emphasis"><em>Use them with caution!</em></span>
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>disable spoolss(G)</tt></i></span></dt><dd><p> This is
-provided for better support of Samba 2.0.x backwards capability. It
-will disable Samba's support for MS-RPC printing and yield identical
-printing behaviour to Samba 2.0.x.</p></dd><dt><span class="term"><i class="parameter"><tt>use client driver (G)</tt></i></span></dt><dd><p> was provided
-for using local printer drivers on Windows NT/2000 clients. It does
-not apply to Windows 95/98/ME clients.</p></dd></dl></div><ns45:p><b>Parameters &quot;for backward compatibility only&quot;, use with caution.</b>
-</ns45:p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>disable spoolss (G)</tt></i></p></li><li><p><i class="parameter"><tt>use client driver (S)</tt></i></p></li></ul></div><ns45:p>
-</ns45:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2930966"></a>Parameters no longer in use</h3></div></div><div></div></div><p>
-Samba users upgrading from 2.2.x to 3.0 need to be aware that some
-previously available settings are no longer supported (as was
-announced some time ago). Here is a list of them:
-</p><ns45:p><b>&quot;old&quot; parameters, removed in Samba-3.</b>
-The following <tt class="filename">smb.conf</tt> parameters have been
-deprecated already in Samba 2.2 and are now completely removed from
-Samba-3. You cannot use them in new 3.0 installations:
-
-</ns45:p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>printer driver file (G)</tt></i></p></li><li><p><i class="parameter"><tt>total print jobs (G)</tt></i></p></li><li><p><i class="parameter"><tt>postscript (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver (S)</tt></i></p></li><li><p><i class="parameter"><tt>printer driver location (S)</tt></i></p></li></ul></div><ns45:p>
-</ns45:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2931059"></a>A simple Configuration to Print with Samba-3</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2913718"></a>A simple Configuration to Print</h2></div></div><div></div></div><p>
Here is a very simple example configuration for print related settings
-in the file. If you compare it with your
-own system's , you probably find some
+in the file. If you compare it with your own system's , you probably find some
additional parameters included there (as pre-configured by your OS
vendor). Further below is a discussion and explanation of the
parameters. Note, that this example doesn't use many parameters.
However, in many environments these are enough to provide a valid
- which enables all clients to print.
-</p><pre class="programlisting">
- [global]
- printing = bsd
- load printers = yes
-
- [printers]
- path = /var/spool/samba
- printable = yes
- public = yes
- writable = no
-</pre><p>
-This is only an example configuration. Many settings, if not
-explicitly set to a specific value, are used and set by Samba
-implicitly to its own default, because these have been compiled in.
-To see all settings, let root use the <b class="command">testparm</b>
-utility. <b class="command">testparm</b> also gives warnings if you have
-mis-configured certain things. Its complete output is easily 340 lines
-and more. You may want to pipe it through a pager program.
+<tt class="filename">smb.conf</tt> file which enables all clients to print.
+</p><div class="example"><a name="id2913746"></a><p class="title"><b>Example18.1.Simple configuration with BSD printing</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = bsd</tt></i></td></tr><tr><td><i class="parameter"><tt>load printers = yes</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>public = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writable = no</tt></i></td></tr></table></div><p>
+This is only an example configuration. Samba assigns default values to all
+configuration parameters. On the whole the defaults are conservative and
+sensible. When a parameter is specified in the <tt class="filename">smb.conf</tt> file this overwrites
+the default value. The <b class="command">testparm</b> utility when run as root
+is capable of reporting all setting, both default as well as <tt class="filename">smb.conf</tt> file
+settings. <b class="command">Testparm</b> gives warnings for all mis-configured
+settings. The complete output is easily 340 lines and more, so you may want
+to pipe it through a pager program.
</p><p>
The syntax for the configuration file is easy to grasp. You should
know that is not very picky about its
@@ -148,7 +137,7 @@ reminder: It even tolerates some spelling errors (like &quot;browsable&quot;
instead of &quot;browseable&quot;). Most spelling is case-insensitive. Also, you
can use &quot;Yes|No&quot; or &quot;True|False&quot; for boolean settings. Lists of names
may be separated by commas, spaces or tabs.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933066"></a>Verification of &quot;Settings in Use&quot; with <b class="command">testparm</b></h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2913883"></a>Verification of &quot;Settings in Use&quot; with <b class="command">testparm</b></h3></div></div><div></div></div><p>
To see all (or at least most) printing related settings in Samba,
including the implicitly used ones, try the command outlined below
(hit &quot;ENTER&quot; twice!). It greps for all occurrences of &quot;lp&quot;, &quot;print&quot;,
@@ -199,20 +188,20 @@ as shown above:
You can easily verify which settings were implicitly added by Samba's
default behaviour. <span class="emphasis"><em>Don't forget about this point: it may
be important in your future dealings with Samba.</em></span>
-</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> testparm in Samba-3.0 behaves differently from 2.2.x: used
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> testparm in samba 3 behaves differently from 2.2.x: used
without the &quot;-v&quot; switch it only shows you the settings actually
written into ! To see the complete
-configuration used, add the &quot;-v&quot; parameter to testparm.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933148"></a>A little Experiment to warn you</h3></div></div><div></div></div><p>
+configuration used, add the &quot;-v&quot; parameter to testparm.</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914010"></a>A little Experiment to warn you</h3></div></div><div></div></div><p>
Should you need to troubleshoot at any stage, please always come back
to this point first and verify if &quot;testparm&quot; shows the parameters you
expect! To give you an example from personal experience as a warning,
-try to just &quot;comment out&quot; the <i class="parameter"><tt>load printers</tt></i>&quot;
+try to just &quot;comment out&quot; the <a class="indexterm" name="id2914020"></a><i class="parameter"><tt>load printers</tt></i>&quot;
parameter. If your 2.2.x system behaves like mine, you'll see this:
</p><pre class="screen">
<tt class="prompt">root# </tt>grep &quot;load printers&quot; /etc/samba/smb.conf
# load printers = Yes
- # This setting is commented ooouuuuut!!
-
+ # This setting is commented ooouuuuut!!
+
<tt class="prompt">root# </tt>testparm -v /etc/samba/smb.conf | egrep &quot;(load printers)&quot;
load printers = Yes
@@ -233,7 +222,7 @@ any more... at least not by this ;-)
</pre><p>
Only when setting the parameter explicitly to
-&quot;<i class="parameter"><tt>load printers = No</tt></i>&quot;
+&quot;<a class="indexterm" name="id2914136"></a><i class="parameter"><tt>load printers</tt></i> = No&quot;
would Samba recognize my intentions. So my strong advice is:
</p><div class="itemizedlist"><ul type="disc"><li><p>Never rely on &quot;commented out&quot; parameters!</p></li><li><p>Always set it up explicitly as you intend it to
behave.</p></li><li><p>Use <b class="command">testparm</b> to uncover hidden
@@ -259,7 +248,7 @@ ask <b class="command">testparm</b> what the Samba print configuration
would be, if you used this minimalistic file as your real
:
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt> testparm -v /etc/samba/smb.conf-minimal | egrep &quot;(print|lpq|spool|driver|ports|[)&quot;</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>testparm -v smb.conf-minimal | egrep &quot;(print|lpq|spool|driver|ports|[)&quot;</tt></b>
Processing section &quot;[printers]&quot;
WARNING: [printers] service MUST be printable!
No path in service printers - using /tmp
@@ -292,8 +281,8 @@ testparm issued 2 warnings:
<i class="parameter"><tt>[printers]</tt></i> section as printable,
and</p></li><li><p>because we didn't tell it which spool directory to
use.</p></li></ul></div><p>
-However, this was not fatal, and Samba-3.0 will default to values that
-will work here. But, please!, don't rely on this and don't use this
+However, this was not fatal, and samba will default to values that
+will work here. Please, don't rely on this and don't use this
example! This was only meant to make you careful to design and specify
your setup to be what you really want it to be. The outcome on your
system may vary for some parameters, since you may have a Samba built
@@ -305,61 +294,20 @@ comment sign at the front). At first I regarded this as a bug in my
Samba version(s). But the man page states: &#8220;<span class="quote">Internal whitespace
in a parameter value is retained verbatim.</span>&#8221; This means that a
line consisting of, for example,
-</p><pre class="screen">
-printing = lprng #This defines LPRng as the printing system&quot;
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td># This defines LPRng as the printing system&quot;</td></tr><tr><td><i class="parameter"><tt>printing = lprng</tt></i></td></tr></table><p>
will regard the whole of the string after the &quot;=&quot;
sign as the value you want to define. And this is an invalid value
that will be ignored, and a default value used instead.]
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933455"></a>Extended Sample Configuration to Print with Samba-3</h2></div></div><div></div></div><p>
-Here we show a more verbose example configuration for print related
-settings in an . Below is a discussion
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914370"></a>Extended Sample Configuration to Print</h2></div></div><div></div></div><p>
+ In <a href="printing.html#extbsdpr" title="Example18.2.Extended configuration with BSD printing">the extended BSD configuration example</a> we show a more verbose example configuration for print related
+ settings in BSD-printing style environment . Below is a discussion
and explanation of the various parameters. We chose to use BSD-style
printing here, because we guess it is still the most commonly used
system on legacy Linux installations (new installs now predominantly
have CUPS, which is discussed entirely in the next chapter of this
document). Note, that this example explicitly names many parameters
-which don't need to be stated because they are set by default. You
-might be able to do with a leaner .</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>
-if you read access it with the Samba Web Administration Tool (SWAT),
-and then write it to disk again, it will be optimized in a way such
-that it doesn't contain any superfluous parameters and comments. SWAT
-organizes the file for best performance. Remember that each smbd
-re-reads the Samba configuration once a minute, and that each
-connection spawns an smbd process of its own, so it is not a bad idea
-to optimize the in environments with
-hundreds or thousands of clients.</p></div><pre class="programlisting">
- [global]
- printing = bsd
- load printers = yes
- show add printer wizard = yes
- printcap name = /etc/printcap
- printer admin = @ntadmin, root
- total print jobs = 100
- lpq cache time = 20
- use client driver = no
-
- [printers]
- comment = All Printers
- printable = yes
- path = /var/spool/samba
- browseable = no
- guest ok = yes
- public = yes
- read only = yes
- writable = no
-
- [my_printer_name]
- comment = Printer with Restricted Access
- path = /var/spool/samba_my_printer
- printer admin = kurt
- browseable = yes
- printable = yes
- writeable = no
- hosts allow = 0.0.0.0
- hosts deny = turbo_xp, 10.160.50.23, 10.160.51.60
- guest ok = no
-</pre><p>
+which don't need to be specified because they are set by default. You
+might be able to do with a leaner <tt class="filename">smb.conf</tt> file.</p><div class="example"><a name="extbsdpr"></a><p class="title"><b>Example18.2.Extended configuration with BSD printing</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>printing = bsd</tt></i></td></tr><tr><td><i class="parameter"><tt>load printers = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>show add printer wizard = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printcap name = /etc/printcap</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = @ntadmin, root</tt></i></td></tr><tr><td><i class="parameter"><tt>total print jobs = 100</tt></i></td></tr><tr><td><i class="parameter"><tt>lpq cache time = 20</tt></i></td></tr><tr><td><i class="parameter"><tt>use client driver = no</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = All Printers</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>public = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writable = no </tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[my_printer_name]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Printer with Restricted Access</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/spool/samba_my_printer</tt></i></td></tr><tr><td><i class="parameter"><tt>printer admin = kurt</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>printable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>writeable = no</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts allow = 0.0.0.0</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts deny = turbo_xp, 10.160.50.23, 10.160.51.60</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = no</tt></i></td></tr></table></div><p>
This <span class="emphasis"><em>also</em></span> is only an example configuration. You
may not find all the settings in your own
(as pre-configured by your OS
@@ -369,31 +317,31 @@ default, because these have been compiled in. To see all settings, let
root use the <b class="command">testparm</b>
utility. <b class="command">testparm</b> also gives warnings if you have
mis-configured certain things..
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2933547"></a>Detailed Explanation of the Example's Settings</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2914701"></a>Detailed Explanation of the Example's Settings</h2></div></div><div></div></div><p>
Following is a discussion of the settings from above shown example.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2933560"></a>The [global] Section</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2914714"></a>The [global] Section</h3></div></div><div></div></div><p>
The <i class="parameter"><tt>[global]</tt></i> section is one of 4 special
sections (along with [<i class="parameter"><tt>[homes]</tt></i>,
<i class="parameter"><tt>[printers]</tt></i> and
<i class="parameter"><tt>[print$]</tt></i>...) It contains all parameters which
apply to the server as a whole. It is the place for parameters which
-have only a &quot;global&quot; meaning (G). It may also contain service level
-parameters (S) which then define default settings for all other
+have only a &quot;global&quot; meaning. It may also contain service level
+parameters which then define default settings for all other
sections and shares. This way you can simplify the configuration and
avoid setting the same value repeatedly. (Within each individual
section or share you may however override these globally set &quot;share
level&quot; settings and specify other values).
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>printing = bsd</tt></i></span></dt><dd><p> this causes Samba to use default print commands
+</p><div class="variablelist"><dl><dt><span class="term"><a class="indexterm" name="id2914781"></a><i class="parameter"><tt>printing</tt></i> = bsd</span></dt><dd><p> this causes Samba to use default print commands
applicable for the BSD (a.k.a. RFC 1179 style or LPR/LPD) printing
system. In general, the &quot;printing&quot; parameter informs Samba about the
print subsystem it should expect. Samba supports CUPS, LPD, LPRNG,
SYSV, HPUX, AIX, QNX and PLP. Each of these systems defaults to a
-different <i class="parameter"><tt>print command</tt></i> (and other queue control
-commands).</p><div class="caution" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Caution</h3><p>The <i class="parameter"><tt>printing</tt></i> parameter is
+different <a class="indexterm" name="id2914801"></a><i class="parameter"><tt>print command</tt></i> (and other queue control
+commands).</p><div class="caution" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Caution</h3><p>The <a class="indexterm" name="id2914838"></a><i class="parameter"><tt>printing</tt></i> parameter is
normally a service level parameter. Since it is included here in the
<i class="parameter"><tt>[global]</tt></i> section, it will take effect for all
-printer shares that are not defined differently. Samba-3.0 no longer
-supports the SOFTQ printing system.</p></div></dd><dt><span class="term"><i class="parameter"><tt>load printers = yes</tt></i></span></dt><dd><p> this tells Samba to create automatically all
+printer shares that are not defined differently. Samba 3 no longer
+supports the SOFTQ printing system.</p></div></dd><dt><span class="term"><a class="indexterm" name="id2914868"></a><i class="parameter"><tt>load printers</tt></i> = yes</span></dt><dd><p> this tells Samba to create automatically all
available printer shares. &quot;Available&quot; printer shares are discovered by
scanning the printcap file. All created printer shares are also loaded
for browsing. If you use this parameter, you do not need to specify
@@ -402,8 +350,7 @@ share will clone the configuration options found in the
<i class="parameter"><tt>[printers]</tt></i> section. (A <i class="parameter"><tt>load printers
= no</tt></i> setting will allow you to specify each UNIX printer
you want to share separately, leaving out some you don't want to be
-publicly visible and available). </p></dd><dt><span class="term"><i class="parameter"><tt>show add printer wizard =
-yes</tt></i></span></dt><dd><p> this setting is normally
+publicly visible and available). </p></dd><dt><span class="term"><a class="indexterm" name="id2914927"></a><i class="parameter"><tt>show add printer wizard</tt></i> = yes </span></dt><dd><p> this setting is normally
enabled by default (even if the parameter is not written into the
). It makes the <span class="guiicon">Add Printer Wizard</span> icon
show up in the <span class="guiicon">Printers</span> folder of the Samba host's
@@ -414,38 +361,38 @@ will not suffice!). The Add Printer Wizard lets you upload printer
drivers to the <i class="parameter"><tt>[print$]</tt></i> share and associate it
with a printer (if the respective queue exists there before the
action), or exchange a printer's driver against any other previously
-uploaded driver. </p></dd><dt><span class="term"><i class="parameter"><tt>total print jobs = 100</tt></i></span></dt><dd><p> this setting sets the upper limit to 100 print jobs
+uploaded driver. </p></dd><dt><span class="term"><a class="indexterm" name="id2914996"></a><i class="parameter"><tt>total print jobs</tt></i> = 100</span></dt><dd><p> this setting sets the upper limit to 100 print jobs
being active on the Samba server at any one time. Should a client
submit a job which exceeds this number, a &#8220;<span class="quote">no more space
available on server</span>&#8221; type of error message will be returned by
Samba to the client. A setting of &quot;0&quot; (the default) means there is
<span class="emphasis"><em>no</em></span> limit at all!
-</p></dd><dt><span class="term"><i class="parameter"><tt>printcap name = /etc/printcap</tt></i></span></dt><dd><p> this tells Samba where to look for a list of
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915035"></a><i class="parameter"><tt>printcap name</tt></i> = /etc/printcap</span></dt><dd><p> this tells Samba where to look for a list of
available printer names. (If you use CUPS, make sure that a printcap
file is written: this is controlled by the &quot;Printcap&quot; directive of
<tt class="filename">cupsd.conf</tt>).
-</p></dd><dt><span class="term"><i class="parameter"><tt>printer admin = @ntadmin</tt></i></span></dt><dd><p> members of the ntadmin group should be able to add
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915072"></a><i class="parameter"><tt>printer admin</tt></i> = @ntadmin</span></dt><dd><p> members of the ntadmin group should be able to add
drivers and set printer properties (&quot;ntadmin&quot; is only an example name,
it needs to be a valid UNIX group name); root is implicitly always a
-<i class="parameter"><tt>printer admin</tt></i>. The &quot;@&quot; sign precedes group names in
+<a class="indexterm" name="id2915102"></a><i class="parameter"><tt>printer admin</tt></i>. The &quot;@&quot; sign precedes group names in
. A printer admin can do anything to
printers via the remote administration interfaces offered by MS-RPC
-(see below). Note that the <i class="parameter"><tt>printer admin</tt></i>
+(see below). Note that the <a class="indexterm" name="id2915124"></a><i class="parameter"><tt>printer admin</tt></i>
parameter is normally a share level parameter, so you may associate
different groups to different printer shares in larger installations,
-if you use the <i class="parameter"><tt>printer admin</tt></i> parameter on the
+if you use the <a class="indexterm" name="id2915141"></a><i class="parameter"><tt>printer admin</tt></i> parameter on the
share levels).
-</p></dd><dt><span class="term"><i class="parameter"><tt>lpq cache time = 20</tt></i></span></dt><dd><p> this controls the cache time for the results of the
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915159"></a><i class="parameter"><tt>lpq cache time</tt></i> = 20</span></dt><dd><p> this controls the cache time for the results of the
lpq command. It prevents the lpq command being called too often and
reduces load on a heavily used print server.
-</p></dd><dt><span class="term"><i class="parameter"><tt>use client driver = no</tt></i></span></dt><dd><p> if set to <tt class="constant">yes</tt>, this setting only
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915186"></a><i class="parameter"><tt>use client driver</tt></i> = no</span></dt><dd><p> if set to <tt class="constant">yes</tt>, this setting only
takes effect for Win NT/2k/XP clients (and not for Win 95/98/ME). Its
default value is <tt class="constant">No</tt> (or <tt class="constant">False</tt>).
It must <span class="emphasis"><em>not</em></span> be enabled on print shares
(with a <tt class="constant">yes</tt> or <tt class="constant">true</tt> setting) which
have valid drivers installed on the Samba server! For more detailed
explanations see the man page of <tt class="filename">smb.conf</tt>.
-</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943021"></a>The [printers] Section</h3></div></div><div></div></div><p>
+</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915245"></a>The [printers] Section</h3></div></div><div></div></div><p>
This is the second special section. If a section with this name
appears in the <tt class="filename">smb.conf</tt>, users are able to
connect to any printer specified in the Samba host's printcap file,
@@ -455,41 +402,40 @@ section as a general convenience shortcut to share all printers with
minimal configuration. It is also a container for settings which
should apply as default to all printers. (For more details see the
<tt class="filename">smb.conf</tt> man page.) Settings inside this
-container must be share level parameters (S).
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>comment = All printers</tt></i></span></dt><dd><p> the <i class="parameter"><tt>comment</tt></i> is shown next to
+container must be share level parameters.
+</p><div class="variablelist"><dl><dt><span class="term"><a class="indexterm" name="id2915287"></a><i class="parameter"><tt>comment</tt></i> = All printers</span></dt><dd><p> the <a class="indexterm" name="id2915307"></a><i class="parameter"><tt>comment</tt></i> is shown next to
the share if a client queries the server, either via <span class="guiicon">Network
Neighbourhood</span> or with the <b class="command">net view</b> command to list
available shares.
-</p></dd><dt><span class="term"><i class="parameter"><tt>printable = yes</tt></i></span></dt><dd><p> please note well, that the
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915340"></a><i class="parameter"><tt>printable</tt></i> = yes</span></dt><dd><p> please note well, that the
<i class="parameter"><tt>[printers]</tt></i> service <span class="emphasis"><em>must</em></span> be
declared as printable. If you specify otherwise, smbd will refuse to
load at startup. This parameter allows
connected clients to open, write to and submit spool files into the
-directory specified with the <i class="parameter"><tt>path</tt></i> parameter for
+directory specified with the <a class="indexterm" name="id2915374"></a><i class="parameter"><tt>path</tt></i> parameter for
this service. It is used by Samba to differentiate printer shares from
-file shares. </p></dd><dt><span class="term"><i class="parameter"><tt>path = /var/spool/samba</tt></i></span></dt><dd><p>this must point to a directory used by Samba to spool
+file shares. </p></dd><dt><span class="term"><a class="indexterm" name="id2915394"></a><i class="parameter"><tt>path</tt></i> = /var/spool/samba</span></dt><dd><p>this must point to a directory used by Samba to spool
incoming print files. <span class="emphasis"><em>It must not be the same as the spool
directory specified in the configuration of your UNIX print
subsystem!</em></span> The path would typically point to a directory
which is world writeable, with the &quot;sticky&quot; bit set to it.
-</p></dd><dt><span class="term"><i class="parameter"><tt>browseable = no</tt></i></span></dt><dd><p> this is always set to <tt class="constant">no</tt> if
-<i class="parameter"><tt>printable = yes</tt></i>. It makes the
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915428"></a><i class="parameter"><tt>browseable</tt></i> = no</span></dt><dd><p> this is always set to <tt class="constant">no</tt> if
+<a class="indexterm" name="id2915453"></a><i class="parameter"><tt>printable</tt></i> = yes. It makes the
<i class="parameter"><tt>[printer]</tt></i> share itself invisible in the
list of available shares in a <b class="command">net view</b> command or
in the Explorer browse list. (Note that you will of course see the
individual printers).
-</p></dd><dt><span class="term"><i class="parameter"><tt>guest ok = yes</tt></i></span></dt><dd><p>
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915487"></a><i class="parameter"><tt>guest ok</tt></i> = yes</span></dt><dd><p>
if set to <tt class="constant">yes</tt>, then no password is required to
connect to the printers service. Access will be granted with the
-privileges of the <i class="parameter"><tt>guest account</tt></i>. On many systems the
+privileges of the <a class="indexterm" name="id2915513"></a><i class="parameter"><tt>guest account</tt></i>. On many systems the
guest account will map to a user named &quot;nobody&quot;. This user is in the UNIX
passwd file with an empty password, but with no valid UNIX login.
(Note: on some systems the guest account might not have the
privilege to be able to print. Test this by logging in as your
guest user using <b class="command">su - guest</b> and run a system print
command like
-</p><p><b class="userinput"><tt>lpr -P printername /etc/motd</tt></b></p></dd><dt><span class="term"><i class="parameter"><tt>public = yes</tt></i></span></dt><dd><p> this is a synonym for <i class="parameter"><tt>guest ok =
-yes</tt></i>. Since we have <i class="parameter"><tt>guest ok = yes</tt></i>,
+</p><p><b class="userinput"><tt>lpr -P printername /etc/motd</tt></b></p></dd><dt><span class="term"><a class="indexterm" name="id2915562"></a><i class="parameter"><tt>public</tt></i> = yes</span></dt><dd><p> this is a synonym for <a class="indexterm" name="id2915582"></a><i class="parameter"><tt>guest ok</tt></i> = yes. Since we have <a class="indexterm" name="id2915596"></a><i class="parameter"><tt>guest ok</tt></i> = yes,
it really doesn't need to be here! (This leads to the interesting
question: &#8220;<span class="quote">What, if I by accident have to contradictory settings
for the same share?</span>&#8221; The answer is: the last one encountered by
@@ -498,16 +444,16 @@ complain about different settings of the same parameter for the same
share! You can test this by setting up multiple lines for the &quot;guest
account&quot; parameter with different usernames, and then run testparm to
see which one is actually used by Samba.)
-</p></dd><dt><span class="term"><i class="parameter"><tt>read only = yes</tt></i></span></dt><dd><p>this normally (for other types of shares) prevents
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915632"></a><i class="parameter"><tt>read only</tt></i> = yes</span></dt><dd><p>this normally (for other types of shares) prevents
users creating or modifying files in the service's directory. However,
in a &quot;printable&quot; service, it is <span class="emphasis"><em>always</em></span> allowed to
write to the directory (if user privileges allow the connection), but
only via print spooling operations. &quot;Normal&quot; write operations are not
-allowed. </p></dd><dt><span class="term"><i class="parameter"><tt>writeable = no</tt></i></span></dt><dd><p>
-synonym for <i class="parameter"><tt>read only = yes</tt></i>
-</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943350"></a>Any [my_printer_name] Section</h3></div></div><div></div></div><p>
+allowed. </p></dd><dt><span class="term"><a class="indexterm" name="id2915669"></a><i class="parameter"><tt>writeable</tt></i> = no</span></dt><dd><p>
+synonym for <a class="indexterm" name="id2915689"></a><i class="parameter"><tt>read only</tt></i> = yes
+</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2915706"></a>Any [my_printer_name] Section</h3></div></div><div></div></div><p>
If a section appears in the , which is
-tagged as <i class="parameter"><tt>printable = yes</tt></i>, Samba presents it as
+tagged as <a class="indexterm" name="id2915717"></a><i class="parameter"><tt>printable</tt></i> = yes, Samba presents it as
a printer share to its clients. Note, that Win95/98/ME clients may
have problems with connecting or loading printer drivers if the share
name has more than 8 characters! Also be very careful if you give a
@@ -516,37 +462,36 @@ client's connection request to a certain sharename, Samba always tries
to find file shares with that name first; if it finds one, it will
connect to this and will never ultimately connect to a printer with
the same name!
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>comment = Printer with Restricted Access</tt></i></span></dt><dd><p> the comment says it all.
-</p></dd><dt><span class="term"><i class="parameter"><tt>path = /var/spool/samba_my_printer</tt></i></span></dt><dd><p> here we set the spooling area for this printer to
+</p><div class="variablelist"><dl><dt><span class="term"><a class="indexterm" name="id2915747"></a><i class="parameter"><tt>comment</tt></i> = Printer with Restricted Access</span></dt><dd><p> the comment says it all.
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915772"></a><i class="parameter"><tt>path</tt></i> = /var/spool/samba_my_printer</span></dt><dd><p> here we set the spooling area for this printer to
another directory than the default. It is not a requirement to set it
differently, but the option is available.
-</p></dd><dt><span class="term"><i class="parameter"><tt>printer admin = kurt</tt></i></span></dt><dd><p> the printer admin definition is different for this
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915799"></a><i class="parameter"><tt>printer admin</tt></i> = kurt</span></dt><dd><p> the printer admin definition is different for this
explicitly defined printer share from the general
<i class="parameter"><tt>[printers]</tt></i> share. It is not a requirement; we
did it to show that it is possible if you want it.
-</p></dd><dt><span class="term"><i class="parameter"><tt>browseable = yes</tt></i></span></dt><dd><p> we also made this printer browseable (so that the
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915832"></a><i class="parameter"><tt>browseable</tt></i> = yes</span></dt><dd><p> we also made this printer browseable (so that the
clients may conveniently find it when browsing the <span class="guiicon">Network
Neighbourhood</span>).
-</p></dd><dt><span class="term"><i class="parameter"><tt>printable = yes</tt></i></span></dt><dd><p>see explanation in last subsection.
-</p></dd><dt><span class="term"><i class="parameter"><tt>writeable = no</tt></i></span></dt><dd><p>see explanation in last subsection.
-</p></dd><dt><span class="term"><i class="parameter"><tt>hosts allow = 10.160.50.,10.160.51.</tt></i></span></dt><dd><p>here we exercise a certain degree of access control
-by using the <i class="parameter"><tt>hosts allow</tt></i> and <i class="parameter"><tt>hosts deny</tt></i> parameters. Note, that
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915866"></a><i class="parameter"><tt>printable</tt></i> = yes</span></dt><dd><p>see explanation in last subsection.
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915889"></a><i class="parameter"><tt>writeable</tt></i> = no</span></dt><dd><p>see explanation in last subsection.
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915913"></a><i class="parameter"><tt>hosts allow</tt></i> = 10.160.50.,10.160.51.</span></dt><dd><p>here we exercise a certain degree of access control
+by using the <a class="indexterm" name="id2915935"></a><i class="parameter"><tt>hosts allow</tt></i> and <a class="indexterm" name="id2915949"></a><i class="parameter"><tt>hosts deny</tt></i> parameters. Note, that
this is not by any means a safe bet. It is not a way to secure your
printers. This line accepts all clients from a certain subnet in a
first evaluation of access control
-</p></dd><dt><span class="term"><i class="parameter"><tt>hosts deny = turbo_xp,10.160.50.23,10.160.51.60
-</tt></i></span></dt><dd><p>all listed hosts are not allowed here (even if they
+</p></dd><dt><span class="term"><a class="indexterm" name="id2915970"></a><i class="parameter"><tt>hosts deny</tt></i> = turbo_xp,10.160.50.23,10.160.51.60</span></dt><dd><p>all listed hosts are not allowed here (even if they
belong to the &quot;allowed subnets&quot;). As you can see, you could name IP
addresses as well as NetBIOS hostnames
here.
-</p></dd><dt><span class="term"><i class="parameter"><tt>guest ok = no</tt></i></span></dt><dd><p>this printer is not open for the guest account!
-</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943571"></a>Print Commands</h3></div></div><div></div></div><p>
+</p></dd><dt><span class="term"><a class="indexterm" name="id2916003"></a><i class="parameter"><tt>guest ok</tt></i> = no</span></dt><dd><p>this printer is not open for the guest account!
+</p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916027"></a>Print Commands</h3></div></div><div></div></div><p>
In each section defining a printer (or in the
<i class="parameter"><tt>[printers]</tt></i> section), a <i class="parameter"><tt>print
command</tt></i> parameter may be defined. It sets a command to
process the files which have been placed into the Samba print spool
directory for that printer. (That spool directory was, if you
-remember, set up with the <i class="parameter"><tt>path</tt></i>
+remember, set up with the <a class="indexterm" name="id2916055"></a><i class="parameter"><tt>path</tt></i>
parameter). Typically, this command will submit the spool file to the
Samba host's print subsystem, using the suitable system print
command. But there is no requirement that this needs to be the
@@ -558,24 +503,24 @@ your own print commands (or even develop print command shell scripts),
make sure you pay attention to the need to remove the files from the
Samba spool directory. Otherwise your hard disk may soon suffer from
shortage of free space.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943622"></a>Default Print Commands for various Unix Print Subsystems</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916108"></a>Default Print Commands for various UNIX Print Subsystems</h3></div></div><div></div></div><p>
You learned earlier on, that Samba in most cases uses its built-in
settings for many parameters if it can not find an explicitly stated
one in its configuration file. The same is true for the
-<i class="parameter"><tt>print command</tt></i>. The default print command varies
-depending on the <i class="parameter"><tt>printing =...</tt></i> parameter
+<a class="indexterm" name="id2916122"></a><i class="parameter"><tt>print command</tt></i>. The default print command varies
+depending on the <a class="indexterm" name="id2916138"></a><i class="parameter"><tt>printing</tt></i> parameter
setting. In the commands listed below, you will notice some parameters
of the form <span class="emphasis"><em>%X</em></span> where <span class="emphasis"><em>X</em></span> is
<span class="emphasis"><em>p, s, J</em></span> etc. These letters stand for
&quot;printername&quot;, &quot;spoolfile&quot; and &quot;job ID&quot; respectively. They are
explained in more detail further below. Here is an overview (excluding
the special case of CUPS, which is discussed in the next chapter):
-</p><div class="informaltable"><table border="1"><colgroup><col><col></colgroup><thead><tr><th align="left">If this setting is active...</th><th align="left">...this is used in lieu of an explicit command:</th></tr></thead><tbody><tr><td align="left"><i class="parameter"><tt>printing = bsd|aix|lprng|plp</tt></i></td><td align="left">print command is <b class="command">lpr -r -P%p %s</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = sysv|hpux</tt></i></td><td align="left">print command is <b class="command">lp -c -P%p %s; rm %s</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = qnx</tt></i></td><td align="left">print command is <b class="command">lp -r -P%p -s %s</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = bsd|aix|lprng|plp</tt></i></td><td align="left">lpq command is <b class="command">lpq -P%p</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = sysv|hpux</tt></i></td><td align="left">lpq command is <b class="command">lpstat -o%p</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = qnx</tt></i></td><td align="left">lpq command is <b class="command">lpq -P%p</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = bsd|aix|lprng|plp</tt></i></td><td align="left">lprm command is <b class="command">lprm -P%p %j</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = sysv|hpux</tt></i></td><td align="left">lprm command is <b class="command">cancel %p-%j</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = qnx</tt></i></td><td align="left">lprm command is <b class="command">cancel %p-%j</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = bsd|aix|lprng|plp</tt></i></td><td align="left">lppause command is <b class="command">lp -i %p-%j -H hold</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = sysv|hpux</tt></i></td><td align="left">lppause command (...is empty)</td></tr><tr><td align="left"><i class="parameter"><tt>printing = qnx</tt></i></td><td align="left">lppause command (...is empty)</td></tr><tr><td align="left"><i class="parameter"><tt>printing = bsd|aix|lprng|plp</tt></i></td><td align="left">lpresume command is <b class="command">lp -i %p-%j -H resume</b></td></tr><tr><td align="left"><i class="parameter"><tt>printing = sysv|hpux</tt></i></td><td align="left">lpresume command (...is empty)</td></tr><tr><td align="left"><i class="parameter"><tt>printing = qnx</tt></i></td><td align="left">lpresume command (...is empty)</td></tr></tbody></table></div><p>
+</p><div class="informaltable"><table border="1"><colgroup><col><col></colgroup><thead><tr><th align="left">If this setting is active...</th><th align="left">...this is used in lieu of an explicit command:</th></tr></thead><tbody><tr><td align="left"><a class="indexterm" name="id2916224"></a><i class="parameter"><tt>printing</tt></i> = bsd|aix|lprng|plp</td><td align="left">print command is <b class="command">lpr -r -P%p %s</b></td></tr><tr><td align="left"><a class="indexterm" name="id2916254"></a><i class="parameter"><tt>printing</tt></i> = sysv|hpux</td><td align="left">print command is <b class="command">lp -c -P%p %s; rm %s</b></td></tr><tr><td align="left"><a class="indexterm" name="id2916286"></a><i class="parameter"><tt>printing</tt></i> = qnx</td><td align="left">print command is <b class="command">lp -r -P%p -s %s</b></td></tr><tr><td align="left"><a class="indexterm" name="id2916317"></a><i class="parameter"><tt>printing</tt></i> = bsd|aix|lprng|plp</td><td align="left">lpq command is <b class="command">lpq -P%p</b></td></tr><tr><td align="left"><a class="indexterm" name="id2916348"></a><i class="parameter"><tt>printing</tt></i> = sysv|hpux</td><td align="left">lpq command is <b class="command">lpstat -o%p</b></td></tr><tr><td align="left"><a class="indexterm" name="id2916378"></a><i class="parameter"><tt>printing</tt></i> = qnx</td><td align="left">lpq command is <b class="command">lpq -P%p</b></td></tr><tr><td align="left"><a class="indexterm" name="id2916408"></a><i class="parameter"><tt>printing</tt></i> = bsd|aix|lprng|plp</td><td align="left">lprm command is <b class="command">lprm -P%p %j</b></td></tr><tr><td align="left"><a class="indexterm" name="id2916439"></a><i class="parameter"><tt>printing</tt></i> = sysv|hpux</td><td align="left">lprm command is <b class="command">cancel %p-%j</b></td></tr><tr><td align="left"><a class="indexterm" name="id2916470"></a><i class="parameter"><tt>printing</tt></i> = qnx</td><td align="left">lprm command is <b class="command">cancel %p-%j</b></td></tr><tr><td align="left"><a class="indexterm" name="id2916500"></a><i class="parameter"><tt>printing</tt></i> = bsd|aix|lprng|plp</td><td align="left">lppause command is <b class="command">lp -i %p-%j -H hold</b></td></tr><tr><td align="left"><a class="indexterm" name="id2916531"></a><i class="parameter"><tt>printing</tt></i> = sysv|hpux</td><td align="left">lppause command (...is empty)</td></tr><tr><td align="left"><a class="indexterm" name="id2916556"></a><i class="parameter"><tt>printing</tt></i> = qnx</td><td align="left">lppause command (...is empty)</td></tr><tr><td align="left"><a class="indexterm" name="id2916582"></a><i class="parameter"><tt>printing</tt></i> = bsd|aix|lprng|plp</td><td align="left">lpresume command is <b class="command">lp -i %p-%j -H resume</b></td></tr><tr><td align="left"><a class="indexterm" name="id2916613"></a><i class="parameter"><tt>printing</tt></i> = sysv|hpux</td><td align="left">lpresume command (...is empty)</td></tr><tr><td align="left"><a class="indexterm" name="id2916638"></a><i class="parameter"><tt>printing</tt></i> = qnx</td><td align="left">lpresume command (...is empty)</td></tr></tbody></table></div><p>
We excluded the special CUPS case here, because it is discussed in the
next chapter. Just a short summary. For <i class="parameter"><tt>printing =
CUPS</tt></i>: If SAMBA is compiled against libcups, it uses the
CUPS API to submit jobs, etc. (It is a good idea also to set
-<i class="parameter"><tt>printcap = cups</tt></i> in case your
+<a class="indexterm" name="id2916676"></a><i class="parameter"><tt>printcap</tt></i> = cups in case your
<tt class="filename">cupsd.conf</tt> is set to write its autogenerated
printcap file to an unusual place). Otherwise Samba maps to the System
V printing commands with the -oraw option for printing, i.e. it uses
@@ -598,9 +543,9 @@ check which command takes effect. Then check that this command is
adequate and actually works for your installed print subsystem. It is
always a good idea to explicitly set up your configuration files the
way you want them to work and not rely on any built-in defaults.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944148"></a>Setting up your own Print Commands</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2916791"></a>Setting up your own Print Commands</h3></div></div><div></div></div><p>
After a print job has finished spooling to a service, the
-<i class="parameter"><tt>print command</tt></i> will be used by Samba via a
+<a class="indexterm" name="id2916802"></a><i class="parameter"><tt>print command</tt></i> will be used by Samba via a
<span class="emphasis"><em>system()</em></span> call to process the spool file. Usually
the command specified will submit the spool file to the host's
printing subsystem. But there is no requirement at all that this must
@@ -653,22 +598,16 @@ expand the included environment variables as usual. (The syntax to
include a UNIX environment variable <i class="parameter"><tt>$variable</tt></i>
in or in the Samba print command is
<i class="parameter"><tt>%$variable</tt></i>.) To give you a working
-<i class="parameter"><tt>print command</tt></i> example, the following will log a
+<a class="indexterm" name="id2917032"></a><i class="parameter"><tt>print command</tt></i> example, the following will log a
print job to <tt class="filename">/tmp/print.log</tt>, print the file, then
remove it. Note that ';' is the usual separator for commands in shell
scripts:
-</p><pre class="programlisting">
-
- print command = echo Printing %s &gt;&gt; /tmp/print.log; lpr -P %p %s; rm %s
-
-</pre><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>print command = echo Printing %s &gt;&gt; /tmp/print.log; lpr -P %p %s; rm %s</tt></i></td></tr></table><p>
You may have to vary your own command considerably from this example
depending on how you normally print files on your system. The default
-for the <i class="parameter"><tt>print command</tt></i> parameter varies depending on the setting of
-the <i class="parameter"><tt>printing</tt></i> parameter. Another example is:
-</p><pre class="programlisting">
- print command = /usr/local/samba/bin/myprintscript %p %s
-</pre></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2944425"></a>Innovations in Samba Printing since 2.2</h2></div></div><div></div></div><p>
+for the <a class="indexterm" name="id2917081"></a><i class="parameter"><tt>print command</tt></i> parameter varies depending on the setting of
+the <a class="indexterm" name="id2917098"></a><i class="parameter"><tt>printing</tt></i> parameter. Another example is:
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>print command = /usr/local/samba/bin/myprintscript %p %s</tt></i></td></tr></table></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2917131"></a>Innovations in Samba Printing since 2.2</h2></div></div><div></div></div><p>
Before version 2.2.0, Samba's print server support for Windows clients
was limited to the level of <span class="emphasis"><em>LanMan</em></span> printing
calls. This is the same protocol level as Windows 9x PCs offer when
@@ -683,16 +622,14 @@ The additional functionality provided by the new SPOOLSS support includes:
95/98/NT/2000 clients upon demand (<span class="emphasis"><em>Point'n'Print</em></span>);
</p></li><li><p>Uploading of printer drivers via the Windows NT
<span class="emphasis"><em>Add Printer Wizard</em></span> (APW) or the
-<span class="emphasis"><em>Imprints</em></span> tool set (refer to <a href="http://imprints.sourceforge.net/" target="_top">http://imprints.sourceforge.net</a>);
+<a href="http://imprints.sourceforge.net/" target="_top">Imprints</a> tool set.
</p></li><li><p>Support for the native MS-RPC printing calls such as
-StartDocPrinter, EnumJobs(), etc... (See the MSDN documentation
-at <a href="http://msdn.microsoft.com/" target="_top">http://msdn.microsoft.com/</a>
-for more information on the Win32 printing API);</p></li><li><p>Support for NT <span class="emphasis"><em>Access Control
+ StartDocPrinter, EnumJobs(), etc... (See the <a href="http://msdn.microsoft.com/" target="_top">MSDN documentation</a> for more information on the Win32 printing API);</p></li><li><p>Support for NT <span class="emphasis"><em>Access Control
Lists</em></span> (ACL) on printer objects;</p></li><li><p>Improved support for printer queue manipulation
through the use of internal databases for spooled job information
(implemented by various <tt class="filename">*.tdb</tt>
files).</p></li></ul></div><p>
-One other benefit of an update is this: Samba-3 is able to publish
+One other benefit of an update is this: Samba 3 is able to publish
all its printers in Active Directory (or LDAP)!
</p><p>
One slight difference is here: it is possible on a Windows NT print
@@ -709,7 +646,7 @@ default permissions assigned by Windows NT to a printer gives the
&quot;Print&quot; permissions to the well-known <span class="emphasis"><em>Everyone</em></span>
group. (The older clients of type Win9x can only print to &quot;shared&quot;
printers).
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944579"></a>Client Drivers on Samba Server for <span class="emphasis"><em>Point'n'Print</em></span></h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917292"></a>Client Drivers on Samba Server for <span class="emphasis"><em>Point'n'Print</em></span></h3></div></div><div></div></div><p>
There is still confusion about what all this means: <span class="emphasis"><em>Is it or
is it not a requirement for printer drivers to be installed on a Samba
host in order to support printing from Windows clients?</em></span> The
@@ -744,10 +681,10 @@ does not use these uploaded drivers in any way to process spooled
files</em></span>. Drivers are utilized entirely by the clients, who
download and install them via the &quot;Point'n'Print&quot; mechanism supported
by Samba. The clients use these drivers to generate print files in the
-format the printer (or the Unix print system) requires. Print files
-received by Samba are handed over to the Unix printing system, which
+format the printer (or the UNIX print system) requires. Print files
+received by Samba are handed over to the UNIX printing system, which
is responsible for all further processing, if needed.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944731"></a>The [printer$] Section is removed from Samba-3</h3></div></div><div></div></div><p><b>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917453"></a>The [printer$] Section is removed from Samba 3</h3></div></div><div></div></div><p><b>
<i class="parameter"><tt>[print$]</tt></i> vs. <i class="parameter"><tt>[printer$]</tt></i>
.</b>
Versions of Samba prior to 2.2 made it possible to use a share
@@ -763,7 +700,7 @@ files associated with that printer. Another parameter named
<i class="parameter"><tt>printer driver</tt></i> provided a means of defining the
printer driver name to be sent to the client. These parameters,
including the <i class="parameter"><tt>printer driver file</tt></i> parameter,
-are now removed and can not be used in installations of Samba-3.0.
+are now removed and can not be used in installations of samba-3.
Now the share name <i class="parameter"><tt>[print$]</tt></i> is used for the
location of downloadable printer drivers. It is taken from the
<i class="parameter"><tt>[print$]</tt></i> service created by Windows NT PCs when
@@ -773,7 +710,7 @@ access (in the context of its ACLs) in order to support printer driver
down- and uploads. Don't fear -- this does not mean Windows 9x
clients are thrown aside now. They can use Samba's
<i class="parameter"><tt>[print$]</tt></i> share support just fine.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944844"></a>Creating the [print$] Share</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917566"></a>Creating the [print$] Share</h3></div></div><div></div></div><p>
In order to support the up- and downloading of printer driver files,
you must first configure a file share named
<i class="parameter"><tt>[print$]</tt></i>. The &quot;public&quot; name of this share is
@@ -787,42 +724,25 @@ add the global parameters and create the
<i class="parameter"><tt>[print$]</tt></i> file share (of course, some of the
parameter values, such as 'path' are arbitrary and should be replaced
with appropriate values for your site):
-</p><pre class="screen">
- [global]
- ; members of the ntadmin group should be able to add drivers and set
- ; printer properties. root is implicitly always a 'printer admin'.
- printer admin = @ntadmin
- [....]
-
- [printers]
- [....]
-
- [print$]
- comment = Printer Driver Download Area
- path = /etc/samba/drivers
- browseable = yes
- guest ok = yes
- read only = yes
- write list = @ntadmin, root
-</pre><p>
+</p><div class="example"><a name="id2917613"></a><p class="title"><b>Example18.3.[print\$] example</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td># members of the ntadmin group should be able to add drivers and set</td></tr><tr><td># printer properties. root is implicitly always a 'printer admin'.</td></tr><tr><td><i class="parameter"><tt>printer admin = @ntadmin</tt></i></td></tr><tr><td>...</td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[printers]</tt></i></td></tr><tr><td>...</td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[print$]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Printer Driver Download Area</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /etc/samba/drivers</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>write list = @ntadmin, root</tt></i></td></tr></table></div><p>
Of course, you also need to ensure that the directory named by the
-<i class="parameter"><tt>path</tt></i> parameter exists on the Unix file system.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2944914"></a>Parameters in the [print$] Section</h3></div></div><div></div></div><p>
+<a class="indexterm" name="id2917739"></a><i class="parameter"><tt>path</tt></i> parameter exists on the UNIX file system.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2917756"></a>Parameters in the [print$] Section</h3></div></div><div></div></div><p>
<i class="parameter"><tt>[print$]</tt></i> is a special section in
. It contains settings relevant to
potential printer driver download and local installation by clients.
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>comment = Printer Driver
-Download Area</tt></i></span></dt><dd><p> the comment appears next to the share name if it is
+</p><div class="variablelist"><dl><dt><span class="term"><a class="indexterm" name="id2917784"></a><i class="parameter"><tt>comment</tt></i> = Printer Driver
+ Download Area</span></dt><dd><p> the comment appears next to the share name if it is
listed in a share list (usually Windows clients won't see it often but
it will also appear up in a <b class="command">smbclient -L sambaserver
-</b> output). </p></dd><dt><span class="term"><i class="parameter"><tt>path = /etc/samba/printers</tt></i></span></dt><dd><p> this is the path to the location of the Windows
+</b> output). </p></dd><dt><span class="term"><a class="indexterm" name="id2917819"></a><i class="parameter"><tt>path</tt></i> = /etc/samba/printers</span></dt><dd><p> this is the path to the location of the Windows
driver file deposit from the UNIX point of
-view.</p></dd><dt><span class="term"><i class="parameter"><tt>browseable = no</tt></i></span></dt><dd><p> this makes the <i class="parameter"><tt>[print$]</tt></i> share
+view.</p></dd><dt><span class="term"><a class="indexterm" name="id2917844"></a><i class="parameter"><tt>browseable</tt></i> = no</span></dt><dd><p> this makes the <i class="parameter"><tt>[print$]</tt></i> share
&quot;invisible&quot; in Network Neighbourhood to clients. However, you can
still &quot;mount&quot; it from any client using the <b class="command">net use
g:\\sambaserver\print$</b> command in a &quot;DOS box&quot; or the
&quot;Connect network drive&quot; menu from Windows
-Explorer.</p></dd><dt><span class="term"><i class="parameter"><tt>guest ok = yes</tt></i></span></dt><dd><p>this gives read only access to this share for all
+Explorer.</p></dd><dt><span class="term"><a class="indexterm" name="id2917889"></a><i class="parameter"><tt>guest ok</tt></i> = yes</span></dt><dd><p>this gives read only access to this share for all
guest users. Access may be used to download and install printer
drivers on clients. The requirement for <i class="parameter"><tt>guest ok =
yes</tt></i> depends upon how your site is configured. If users
@@ -835,13 +755,13 @@ validated by the Domain Controller in order to logon to the Windows NT
session), then guest access is not necessary. Of course, in a
workgroup environment where you just want to be able to print without
worrying about silly accounts and security, then configure the share
-for guest access. You'll probably want to add <i class="parameter"><tt>map to guest
-= Bad User</tt></i> in the <i class="parameter"><tt>[global]</tt></i> section
+for guest access. You'll probably want to add <a class="indexterm" name="id2917936"></a><i class="parameter"><tt>map to guest</tt></i> = Bad User in the
+<i class="parameter"><tt>[global]</tt></i> section
as well. Make sure you understand what this parameter does before
using it.
-</p></div></dd><dt><span class="term"><i class="parameter"><tt>read only = yes</tt></i></span></dt><dd><p>as we don't want everybody to upload driver files (or
+</p></div></dd><dt><span class="term"><a class="indexterm" name="id2917963"></a><i class="parameter"><tt>read only</tt></i> = yes</span></dt><dd><p>as we don't want everybody to upload driver files (or
even change driver settings) we tagged this share as not
-writeable.</p></dd><dt><span class="term"><i class="parameter"><tt>write list = @ntadmin,root</tt></i></span></dt><dd><p>since the <i class="parameter"><tt>[print$]</tt></i> was made
+writeable.</p></dd><dt><span class="term"><a class="indexterm" name="id2917990"></a><i class="parameter"><tt>write list</tt></i> = @ntadmin,root</span></dt><dd><p>since the <i class="parameter"><tt>[print$]</tt></i> was made
read only by the previous setting, we need to create a &quot;write list&quot;
also. UNIX groups (denoted with a leading &quot;@&quot; character) and users
listed here are allowed write access (as an exception to the general
@@ -850,13 +770,13 @@ share. Normally you will want to only name administrative level user
accounts in this setting. Check the file system permissions to make
sure these accounts can copy files to the share. If this is a non-root
account, then the account should also be mentioned in the global
-<i class="parameter"><tt>printer admin </tt></i> parameter. See the
+<a class="indexterm" name="id2918045"></a><i class="parameter"><tt>printer admin </tt></i> parameter. See the
man page for more information on
-configuring file shares. </p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945135"></a>Subdirectory Structure in [print$]</h3></div></div><div></div></div><p>
+configuring file shares. </p></dd></dl></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918066"></a>Subdirectory Structure in [print$]</h3></div></div><div></div></div><p>
In order for a Windows NT print server to support the downloading of
driver files by multiple client architectures, you must create several
subdirectories within the <i class="parameter"><tt>[print$]</tt></i> service
-(i.e. the Unix directory named by the <i class="parameter"><tt>path</tt></i>
+(i.e. the UNIX directory named by the <a class="indexterm" name="id2918085"></a><i class="parameter"><tt>path</tt></i>
parameter). These correspond to each of the supported client
architectures. Samba follows this model as well. Just like the name of
the <i class="parameter"><tt>[print$]</tt></i> share itself, the subdirectories
@@ -891,7 +811,7 @@ client workstation. Open <span class="guiicon">Network Neighbourhood</span> or
Once you have located the server, navigate to its <span class="guiicon">Printers and
Faxes</span> folder. You should see an initial listing of printers
that matches the printer shares defined on your Samba host.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2945296"></a>Installing Drivers into [print$]</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2918239"></a>Installing Drivers into [print$]</h2></div></div><div></div></div><p>
You have successfully created the <i class="parameter"><tt>[print$]</tt></i>
share in ? And Samba has re-read its
configuration? Good. But you are not yet ready to take off. The
@@ -909,11 +829,11 @@ Properties</em></span> and <span class="emphasis"><em>Add Printer Wizard</em></s
from any Windows NT/2k/XP client workstation.</p></li></ul></div><p>
The latter option is probably the easier one (even if the only
entrance to this realm seems a little bit weird at first).
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945390"></a>Setting Drivers for existing Printers with a Client GUI</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918333"></a>Setting Drivers for existing Printers with a Client GUI</h3></div></div><div></div></div><p>
The initial listing of printers in the Samba host's
<span class="guiicon">Printers</span> folder accessed from a client's Explorer
-will have no real printer driver assigned to them. By default, in
-Samba-3 (as in 2.2.1 and later) this driver name is set to a NULL
+will have no real printer driver assigned to them. By default
+this driver name is set to a NULL
string. This must be changed now. The local <span class="emphasis"><em>Add Printer
Wizard</em></span>, run from NT/2000/XP clients, will help us in this
task.
@@ -944,18 +864,18 @@ Once the APW is started, the procedure is exactly the same as the one
you are familiar with in Windows (we assume here that you are
familiar with the printer driver installations procedure on Windows
NT). Make sure your connection is in fact setup as a user with
-<i class="parameter"><tt>printer admin</tt></i> privileges (if in doubt, use
+<a class="indexterm" name="id2918468"></a><i class="parameter"><tt>printer admin</tt></i> privileges (if in doubt, use
<b class="command">smbstatus</b> to check for this). If you wish to
install printer drivers for client operating systems other than
<span class="application">Windows NT x86</span>, you will need to use the
<span class="guilabel">Sharing</span> tab of the printer properties dialog.
</p><p>
Assuming you have connected with an administrative (or root) account
-(as named by the <i class="parameter"><tt>printer admin</tt></i> parameter),
+(as named by the <a class="indexterm" name="id2918510"></a><i class="parameter"><tt>printer admin</tt></i> parameter),
you will also be able to modify other printer properties such as ACLs
and default device settings using this dialog. For the default device
settings, please consider the advice given further below.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2945574"></a>Setting Drivers for existing Printers with
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2918531"></a>Setting Drivers for existing Printers with
<b class="command">rpcclient</b></h3></div></div><div></div></div><p>
The second way to install printer drivers into
<i class="parameter"><tt>[print$]</tt></i> and set them up in a valid way can be
@@ -970,7 +890,7 @@ time with the <b class="command">setdriver</b>
subcommand.</p></li></ol></div><p>
We will provide detailed hints for each of these steps in the next few
paragraphs.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2945683"></a>Identifying the Driver Files</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2918640"></a>Identifying the Driver Files</h4></div></div><div></div></div><p>
To find out about the driver files, you have two options: you could
investigate the driver CD which comes with your printer. Study the
<tt class="filename">*.inf</tt> file on the CD, if it is contained. This
@@ -1018,35 +938,35 @@ create scripts to automate the procedure for a large number of
printers and drivers. Note the different quotes used to overcome the
different spaces in between words:
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U'Danka%xxxx' -c 'getdriver &quot;Heidelberg Digimaster 9110 (PS)&quot; 3' TURBO_XP</tt></b>
- cmd = getdriver &quot;Heidelberg Digimaster 9110 (PS)&quot; 3
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -U'Danka%xxxx' -c \
+ 'getdriver &quot;Heidelberg Digimaster 9110 (PS)&quot; 3' TURBO_XP</tt></b>
+cmd = getdriver &quot;Heidelberg Digimaster 9110 (PS)&quot; 3
- [Windows NT x86]
- Printer Driver Info 3:
- Version: [2]
- Driver Name: [Heidelberg Digimaster 9110 (PS)]
- Architecture: [Windows NT x86]
- Driver Path: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01_de.DLL]
- Datafile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.ppd]
- Configfile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01U_de.DLL]
- Helpfile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01U_de.HLP]
+[Windows NT x86]
+Printer Driver Info 3:
+ Version: [2]
+ Driver Name: [Heidelberg Digimaster 9110 (PS)]
+ Architecture: [Windows NT x86]
+ Driver Path: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01_de.DLL]
+ Datafile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.ppd]
+ Configfile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01U_de.DLL]
+ Helpfile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01U_de.HLP]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.DLL]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.INI]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1KMMin.DLL]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.dat]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.cat]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.def]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.hre]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.vnd]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.hlp]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de_reg.HLP]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01Aux.dll]
- Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01_de.NTF]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.DLL]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.INI]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1KMMin.DLL]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.dat]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.cat]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.def]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.hre]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.vnd]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.hlp]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de_reg.HLP]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01Aux.dll]
+ Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01_de.NTF]
- Monitorname: []
- Defaultdatatype: []
-
+ Monitorname: []
+ Defaultdatatype: []
</pre><p>
You may notice, that this driver has quite a big number of
<span class="guilabel">Dependentfiles</span> (I know worse cases however). Also,
@@ -1073,7 +993,7 @@ Windows 2000 changed this. While it still can use the Kernel Mode
drivers (if this is enabled by the Admin), its native mode for printer
drivers is User Mode execution. This requires drivers designed for
this. These type of drivers install into the &quot;3&quot; subdirectory.
-</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946011"></a>Collecting the Driver Files from a Windows Host's
+</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2919003"></a>Collecting the Driver Files from a Windows Host's
[print$] Share</h4></div></div><div></div></div><p>
Now we need to collect all the driver files we identified. in our
previous step. Where do we get them from? Well, why not retrieve them
@@ -1086,15 +1006,15 @@ listing is edited to include linebreaks for readability:
<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //TURBO_XP/print\$ -U'Danka%xxxx' \
-c 'cd W32X86/2;mget HD*_de.* \
hd*ppd Hd*_de.* Hddm*dll HDN*Aux.DLL'</tt></b>
- added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
- Got a positive name query response from 10.160.50.8 ( 10.160.50.8 )
- Domain=[DEVELOPMENT] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
- <tt class="prompt">Get file Hddm91c1_de.ABD? </tt><b class="userinput"><tt>n</tt></b>
- <tt class="prompt">Get file Hddm91c1_de.def? </tt><b class="userinput"><tt>y</tt></b>
- getting file \W32X86\2\Hddm91c1_de.def of size 428 as Hddm91c1_de.def (22.0 kb/s) (average 22.0 kb/s)
- <tt class="prompt">Get file Hddm91c1_de.DLL? </tt><b class="userinput"><tt>y</tt></b>
- getting file \W32X86\2\Hddm91c1_de.DLL of size 876544 as Hddm91c1_de.DLL (737.3 kb/s) (average 737.3 kb/s)
- [...]
+added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
+Got a positive name query response from 10.160.50.8 ( 10.160.50.8 )
+Domain=[DEVELOPMENT] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
+<tt class="prompt">Get file Hddm91c1_de.ABD? </tt><b class="userinput"><tt>n</tt></b>
+<tt class="prompt">Get file Hddm91c1_de.def? </tt><b class="userinput"><tt>y</tt></b>
+getting file \W32X86\2\Hddm91c1_de.def of size 428 as Hddm91c1_de.def
+<tt class="prompt">Get file Hddm91c1_de.DLL? </tt><b class="userinput"><tt>y</tt></b>
+getting file \W32X86\2\Hddm91c1_de.DLL of size 876544 as Hddm91c1_de.DLL
+[...]
</pre><p>
After this command is complete, the files are in our current local
@@ -1109,7 +1029,7 @@ files for these architectures are in the WIN40/0/ subdir. Once we are
complete, we can run <b class="command">smbclient ... put</b> to store
the collected files on the Samba server's
<i class="parameter"><tt>[print$]</tt></i> share.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946163"></a>Depositing the Driver Files into [print$]</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2919153"></a>Depositing the Driver Files into [print$]</h4></div></div><div></div></div><p>
So, now we are going to put the driver files into the
<i class="parameter"><tt>[print$]</tt></i> share. Remember, the UNIX path to this
share has been defined previously in your
@@ -1130,7 +1050,8 @@ running <b class="command">getdriver</b> against the original
store the files into a <span class="emphasis"><em>Samba/UNIX</em></span> print server's
<i class="parameter"><tt>[print$]</tt></i> share...
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -U'root%xxxx' -c 'cd W32X86; put HDNIS01_de.DLL; \
+ <tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -U'root%xxxx' -c \
+ 'cd W32X86; put HDNIS01_de.DLL; \
put Hddm91c1_de.ppd; put HDNIS01U_de.DLL; \
put HDNIS01U_de.HLP; put Hddm91c1_de.DLL; \
put Hddm91c1_de.INI; put Hddm91c1KMMin.DLL; \
@@ -1139,26 +1060,25 @@ store the files into a <span class="emphasis"><em>Samba/UNIX</em></span> print s
put Hddm91c1_de.vnd; put Hddm91c1_de.hlp; \
put Hddm91c1_de_reg.HLP; put HDNIS01Aux.dll; \
put HDNIS01_de.NTF'</tt></b>
- added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
- Got a positive name query response from 10.160.51.162 ( 10.160.51.162 )
- Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
- putting file HDNIS01_de.DLL as \W32X86\HDNIS01_de.DLL (4465.5 kb/s) (average 4465.5 kb/s)
- putting file Hddm91c1_de.ppd as \W32X86\Hddm91c1_de.ppd (12876.8 kb/s) (average 4638.9 kb/s)
- putting file HDNIS01U_de.DLL as \W32X86\HDNIS01U_de.DLL (20249.8 kb/s) (average 5828.3 kb/s)
- putting file HDNIS01U_de.HLP as \W32X86\HDNIS01U_de.HLP (9652.8 kb/s) (average 5899.8 kb/s)
- putting file Hddm91c1_de.DLL as \W32X86\Hddm91c1_de.DLL (23777.7 kb/s) (average 10400.6 kb/s)
- putting file Hddm91c1_de.INI as \W32X86\Hddm91c1_de.INI (98.6 kb/s) (average 10329.0 kb/s)
- putting file Hddm91c1KMMin.DLL as \W32X86\Hddm91c1KMMin.DLL (22931.5 kb/s) (average 10501.7 kb/s)
- putting file Hddm91c1_de.dat as \W32X86\Hddm91c1_de.dat (2462.8 kb/s) (average 10393.0 kb/s)
- putting file Hddm91c1_de.dat as \W32X86\Hddm91c1_de.dat (4925.3 kb/s) (average 10356.3 kb/s)
- putting file Hddm91c1_de.def as \W32X86\Hddm91c1_de.def (417.9 kb/s) (average 10290.1 kb/s)
- putting file Hddm91c1_de.hre as \W32X86\Hddm91c1_de.hre (22571.3 kb/s) (average 11338.5 kb/s)
- putting file Hddm91c1_de.vnd as \W32X86\Hddm91c1_de.vnd (3384.6 kb/s) (average 10754.3 kb/s)
- putting file Hddm91c1_de.hlp as \W32X86\Hddm91c1_de.hlp (18406.8 kb/s) (average 10839.8 kb/s)
- putting file Hddm91c1_de_reg.HLP as \W32X86\Hddm91c1_de_reg.HLP (20278.3 kb/s) (average 11386.3 kb/s)
- putting file HDNIS01Aux.dll as \W32X86\HDNIS01Aux.dll (14994.6 kb/s) (average 11405.2 kb/s)
- putting file HDNIS01_de.NTF as \W32X86\HDNIS01_de.NTF (23390.2 kb/s) (average 13170.8 kb/s)
-
+added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
+Got a positive name query response from 10.160.51.162 ( 10.160.51.162 )
+Domain=[CUPS-PRINT] OS=[UNIX] Server=[Samba 2.2.7a]
+putting file HDNIS01_de.DLL as \W32X86\HDNIS01_de.DLL
+putting file Hddm91c1_de.ppd as \W32X86\Hddm91c1_de.ppd
+putting file HDNIS01U_de.DLL as \W32X86\HDNIS01U_de.DLL
+putting file HDNIS01U_de.HLP as \W32X86\HDNIS01U_de.HLP
+putting file Hddm91c1_de.DLL as \W32X86\Hddm91c1_de.DLL
+putting file Hddm91c1_de.INI as \W32X86\Hddm91c1_de.INI
+putting file Hddm91c1KMMin.DLL as \W32X86\Hddm91c1KMMin.DLL
+putting file Hddm91c1_de.dat as \W32X86\Hddm91c1_de.dat
+putting file Hddm91c1_de.dat as \W32X86\Hddm91c1_de.dat
+putting file Hddm91c1_de.def as \W32X86\Hddm91c1_de.def
+putting file Hddm91c1_de.hre as \W32X86\Hddm91c1_de.hre
+putting file Hddm91c1_de.vnd as \W32X86\Hddm91c1_de.vnd
+putting file Hddm91c1_de.hlp as \W32X86\Hddm91c1_de.hlp
+putting file Hddm91c1_de_reg.HLP as \W32X86\Hddm91c1_de_reg.HLP
+putting file HDNIS01Aux.dll as \W32X86\HDNIS01Aux.dll
+putting file HDNIS01_de.NTF as \W32X86\HDNIS01_de.NTF
</pre><p>
Phewww -- that was a lot of typing! Most drivers are a lot smaller --
many only having 3 generic PostScript driver files plus 1 PPD. Note,
@@ -1170,47 +1090,47 @@ re-location will automatically be done by the
don't forget to also put the files for the Win95/98/ME architecture
into the <tt class="filename">WIN40/</tt> subdirectory should you need
them).
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946366"></a>Check if the Driver Files are there (with smbclient)</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2919348"></a>Check if the Driver Files are there (with smbclient)</h4></div></div><div></div></div><p>
For now we verify that our files are there. This can be done with
<b class="command">smbclient</b> too (but of course you can log in via SSH
also and do this through a standard UNIX shell access too):
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -U 'root%xxxx' -c 'cd W32X86; pwd; dir; cd 2; pwd; dir'</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -U 'root%xxxx' \
+ -c 'cd W32X86; pwd; dir; cd 2; pwd; dir'</tt></b>
added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
- Got a positive name query response from 10.160.51.162 ( 10.160.51.162 )
- Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
-
- Current directory is \\SAMBA-CUPS\print$\W32X86\
- . D 0 Sun May 4 03:56:35 2003
- .. D 0 Thu Apr 10 23:47:40 2003
- 2 D 0 Sun May 4 03:56:18 2003
- HDNIS01Aux.dll A 15356 Sun May 4 03:58:59 2003
- Hddm91c1KMMin.DLL A 46966 Sun May 4 03:58:59 2003
- HDNIS01_de.DLL A 434400 Sun May 4 03:58:59 2003
- HDNIS01_de.NTF A 790404 Sun May 4 03:56:35 2003
- Hddm91c1_de.DLL A 876544 Sun May 4 03:58:59 2003
- Hddm91c1_de.INI A 101 Sun May 4 03:58:59 2003
- Hddm91c1_de.dat A 5044 Sun May 4 03:58:59 2003
- Hddm91c1_de.def A 428 Sun May 4 03:58:59 2003
- Hddm91c1_de.hlp A 37699 Sun May 4 03:58:59 2003
- Hddm91c1_de.hre A 323584 Sun May 4 03:58:59 2003
- Hddm91c1_de.ppd A 26373 Sun May 4 03:58:59 2003
- Hddm91c1_de.vnd A 45056 Sun May 4 03:58:59 2003
- HDNIS01U_de.DLL A 165888 Sun May 4 03:58:59 2003
- HDNIS01U_de.HLP A 19770 Sun May 4 03:58:59 2003
- Hddm91c1_de_reg.HLP A 228417 Sun May 4 03:58:59 2003
- 40976 blocks of size 262144. 709 blocks available
+Got a positive name query response from 10.160.51.162 ( 10.160.51.162 )
+Domain=[CUPS-PRINT] OS=[UNIX] Server=[Samba 2.2.7a]
- Current directory is \\SAMBA-CUPS\print$\W32X86\2\
- . D 0 Sun May 4 03:56:18 2003
- .. D 0 Sun May 4 03:56:35 2003
- ADOBEPS5.DLL A 434400 Sat May 3 23:18:45 2003
- laserjet4.ppd A 9639 Thu Apr 24 01:05:32 2003
- ADOBEPSU.DLL A 109568 Sat May 3 23:18:45 2003
- ADOBEPSU.HLP A 18082 Sat May 3 23:18:45 2003
- PDFcreator2.PPD A 15746 Sun Apr 20 22:24:07 2003
- 40976 blocks of size 262144. 709 blocks available
+Current directory is \\SAMBA-CUPS\print$\W32X86\
+. D 0 Sun May 4 03:56:35 2003
+.. D 0 Thu Apr 10 23:47:40 2003
+2 D 0 Sun May 4 03:56:18 2003
+HDNIS01Aux.dll A 15356 Sun May 4 03:58:59 2003
+Hddm91c1KMMin.DLL A 46966 Sun May 4 03:58:59 2003
+HDNIS01_de.DLL A 434400 Sun May 4 03:58:59 2003
+HDNIS01_de.NTF A 790404 Sun May 4 03:56:35 2003
+Hddm91c1_de.DLL A 876544 Sun May 4 03:58:59 2003
+Hddm91c1_de.INI A 101 Sun May 4 03:58:59 2003
+Hddm91c1_de.dat A 5044 Sun May 4 03:58:59 2003
+Hddm91c1_de.def A 428 Sun May 4 03:58:59 2003
+Hddm91c1_de.hlp A 37699 Sun May 4 03:58:59 2003
+Hddm91c1_de.hre A 323584 Sun May 4 03:58:59 2003
+Hddm91c1_de.ppd A 26373 Sun May 4 03:58:59 2003
+Hddm91c1_de.vnd A 45056 Sun May 4 03:58:59 2003
+HDNIS01U_de.DLL A 165888 Sun May 4 03:58:59 2003
+HDNIS01U_de.HLP A 19770 Sun May 4 03:58:59 2003
+Hddm91c1_de_reg.HLP A 228417 Sun May 4 03:58:59 2003
+ 40976 blocks of size 262144. 709 blocks available
+Current directory is \\SAMBA-CUPS\print$\W32X86\2\
+. D 0 Sun May 4 03:56:18 2003
+.. D 0 Sun May 4 03:56:35 2003
+ADOBEPS5.DLL A 434400 Sat May 3 23:18:45 2003
+laserjet4.ppd A 9639 Thu Apr 24 01:05:32 2003
+ADOBEPSU.DLL A 109568 Sat May 3 23:18:45 2003
+ADOBEPSU.HLP A 18082 Sat May 3 23:18:45 2003
+PDFcreator2.PPD A 15746 Sun Apr 20 22:24:07 2003
+ 40976 blocks of size 262144. 709 blocks available
</pre><p>
Notice that there are already driver files present in the
<tt class="filename">2</tt> subdir (probably from a previous
@@ -1223,7 +1143,7 @@ Point'n'Print. The reason is: Samba doesn't know yet that these files
are something special, namely <span class="emphasis"><em>printer driver
files</em></span> and it doesn't know yet to which print queue(s) these
driver files belong.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946482"></a>Running <b class="command">rpcclient</b> with
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2919464"></a>Running <b class="command">rpcclient</b> with
<b class="command">adddriver</b></h4></div></div><div></div></div><p>
So, next you must tell Samba about the special category of the files
you just uploaded into the <i class="parameter"><tt>[print$]</tt></i> share. This
@@ -1232,21 +1152,23 @@ prompt Samba to register the driver files into its internal TDB
database files. The following command and its output has been edited,
again, for readability:
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'adddriver &quot;Windows NT x86&quot; &quot;dm9110:HDNIS01_de.DLL: \
- Hddm91c1_de.ppd:HDNIS01U_de.DLL:HDNIS01U_de.HLP: \
- NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
- Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
- Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
- HDNIS01Aux.dll,HDNIS01_de.NTF, \
- Hddm91c1_de_reg.HLP' SAMBA-CUPS</tt></b>
+ <tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx -c 'adddriver &quot;Windows NT x86&quot; \
+&quot;dm9110:HDNIS01_de.DLL: \
+Hddm91c1_de.ppd:HDNIS01U_de.DLL:HDNIS01U_de.HLP: \
+ NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
+ Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
+ Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
+ HDNIS01Aux.dll,HDNIS01_de.NTF, \
+ Hddm91c1_de_reg.HLP' SAMBA-CUPS</tt></b>
- cmd = adddriver &quot;Windows NT x86&quot; &quot;dm9110:HDNIS01_de.DLL:Hddm91c1_de.ppd:HDNIS01U_de.DLL: \
- HDNIS01U_de.HLP:NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
- Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
- Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
- HDNIS01Aux.dll,HDNIS01_de.NTF,Hddm91c1_de_reg.HLP&quot;
+cmd = adddriver &quot;Windows NT x86&quot; \
+&quot;dm9110:HDNIS01_de.DLL:Hddm91c1_de.ppd:HDNIS01U_de.DLL: \
+ HDNIS01U_de.HLP:NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
+ Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
+ Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
+ HDNIS01Aux.dll,HDNIS01_de.NTF,Hddm91c1_de_reg.HLP&quot;
- Printer Driver dm9110 successfully installed.
+Printer Driver dm9110 successfully installed.
</pre><p>
After this step the driver should be recognized by Samba on the print
@@ -1258,7 +1180,7 @@ files successfully, but render the driver unworkable. So take care!
Hints about the syntax of the adddriver command are in the man
page. The CUPS printing chapter of this HOWTO collection provides a
more detailed description, if you should need it.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946582"></a>Check how Driver Files have been moved after
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2919577"></a>Check how Driver Files have been moved after
<b class="command">adddriver</b> finished</h4></div></div><div></div></div><p>
One indication for Samba's recognition of the files as driver files is
the <tt class="computeroutput">successfully installed</tt> message.
@@ -1267,9 +1189,9 @@ Another one is the fact, that our files have been moved by the
subdirectory. You can check this again with
<b class="command">smbclient</b>:
</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -Uroot%xxxx -c 'cd W32X86;dir;pwd;cd 2;dir;pwd'</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>smbclient //SAMBA-CUPS/print\$ -Uroot%xx -c 'cd W32X86;dir;pwd;cd 2;dir;pwd'</tt></b>
added interface ip=10.160.51.162 bcast=10.160.51.255 nmask=255.255.252.0
- Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
+ Domain=[CUPS-PRINT] OS=[UNIX] Server=[Samba 2.2.7a]
Current directory is \\SAMBA-CUPS\print$\W32X86\
. D 0 Sun May 4 04:32:48 2003
@@ -1306,7 +1228,7 @@ subdirectory. You can check this again with
</pre><p>
Another verification is that the timestamp of the printing TDB files
is now updated (and possibly their filesize has increased).
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946706"></a>Check if the Driver is recognized by Samba</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2919746"></a>Check if the Driver is recognized by Samba</h4></div></div><div></div></div><p>
Now the driver should be registered with Samba. We can easily verify
this, and will do so in a moment. However, this driver is
<span class="emphasis"><em>not yet</em></span> associated with a particular
@@ -1350,19 +1272,19 @@ time. Our new driver only shows up for
<span class="application">Windows NT 4.0 or 2000</span>. To
have it present for <span class="application">Windows 95, 98 and ME</span> you'll
have to repeat the whole procedure with the WIN40 architecture and subdirectory.
-</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2946909"></a>A side note: you are not bound to specific driver names</h4></div></div><div></div></div><p>
+</p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2919954"></a>A side note: you are not bound to specific driver names</h4></div></div><div></div></div><p>
You can name the driver as you like. If you repeat the
<b class="command">adddriver</b> step, with the same files as before, but
with a different driver name, it will work the same:
</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient -Uroot%xxxx \
- -c 'adddriver &quot;Windows NT x86&quot; \
- &quot;myphantasydrivername:HDNIS01_de.DLL: \
- Hddm91c1_de.ppd:HDNIS01U_de.DLL:HDNIS01U_de.HLP: \
- NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
- Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
- Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
- HDNIS01Aux.dll,HDNIS01_de.NTF,Hddm91c1_de_reg.HLP' SAMBA-CUPS
+ -c 'adddriver &quot;Windows NT x86&quot; \
+ &quot;myphantasydrivername:HDNIS01_de.DLL: \
+ Hddm91c1_de.ppd:HDNIS01U_de.DLL:HDNIS01U_de.HLP: \
+ NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
+ Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre, \
+ Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
+ HDNIS01Aux.dll,HDNIS01_de.NTF,Hddm91c1_de_reg.HLP' SAMBA-CUPS
</tt></b>
cmd = adddriver &quot;Windows NT x86&quot;
@@ -1384,7 +1306,7 @@ repeatedly. Each run &quot;consumes&quot; the files you had put into the
respective subdirectories. So you <span class="emphasis"><em>must</em></span> precede an
<b class="command">smbclient ... put</b> command before each
<b class="command">rpcclient ... adddriver</b>&quot; command.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2947021"></a>La Grande Finale: Running <b class="command">rpcclient</b> with
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2920088"></a>Running <b class="command">rpcclient</b> with
<b class="command">setdriver</b></h4></div></div><div></div></div><p>
Samba still needs to know <span class="emphasis"><em>which</em></span> printer's driver
this is. It needs to create a mapping of the driver to a printer, and
@@ -1414,20 +1336,19 @@ known to
Samba already. A bug in 2.2.x prevented Samba from recognizing freshly
installed printers. You had to restart Samba, or at least send a HUP
signal to all running smbd processes to work around this:
-<b class="userinput"><tt>kill -HUP `pidof smbd`</tt></b>. </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947172"></a>&quot;The Proof of the Pudding lies in the Eating&quot; (Client Driver Install
-Procedure)</h2></div></div><div></div></div><p>
+<b class="userinput"><tt>kill -HUP `pidof smbd`</tt></b>. </p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2920241"></a>Client Driver Install Procedure</h2></div></div><div></div></div><p>
A famous philosopher said once: &#8220;<span class="quote">The Proof of the Pudding lies
in the Eating</span>&#8221;. The proof for our setup lies in the printing.
So let's install the printer driver onto the client PCs. This is not
as straightforward as it may seem. Read on.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947193"></a>The first Client Driver Installation</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920260"></a>The first Client Driver Installation</h3></div></div><div></div></div><p>
Especially important is the installation onto the first client PC (for
each architectural platform separately). Once this is done correctly,
all further clients are easy to setup and shouldn't need further
attention. What follows is a description for the recommended first
procedure. You work now from a client workstation. First you should
guarantee that your connection is not unwittingly mapped to
-<i class="parameter"><tt>bad user</tt></i> &quot;nobody&quot;. In a DOS box type:
+<span class="emphasis"><em>bad user</em></span> &quot;nobody&quot;. In a DOS box type:
</p><p><b class="userinput"><tt>net use \\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\print$ /user:root</tt></b></p><p>
Replace root, if needed, by another valid
<i class="replaceable"><tt>printer admin</tt></i> user as given in the definition.
@@ -1463,7 +1384,7 @@ Data&quot; set is still incomplete.
</p><p>
You must now make sure that a valid &quot;Device Mode&quot; is set for the
driver. Don't fear -- we will explain now what that means.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947391"></a>IMPORTANT! Setting Device Modes on new Printers</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920462"></a>IMPORTANT! Setting Device Modes on new Printers</h3></div></div><div></div></div><p>
In order for a printer to be truly usable by a Windows NT/2K/XP
client, it must possess:
</p><div class="itemizedlist"><ul type="disc"><li><p>a valid <span class="emphasis"><em>Device Mode</em></span> generated by
@@ -1490,7 +1411,7 @@ This can be achieved by accessing the drivers remotely from an NT (or
2k/XP) client, as is discussed in the next paragraphs.
</p><p>
Be aware, that a valid Device Mode can only be initiated by a
-<i class="parameter"><tt>printer admin</tt></i>, or root (the reason should be
+<a class="indexterm" name="id2920558"></a><i class="parameter"><tt>printer admin</tt></i>, or root (the reason should be
obvious). Device Modes can only correctly be set by executing the
printer driver program itself. Since Samba can not execute this Win32
platform driver code, it sets this field initially to NULL (which is
@@ -1535,7 +1456,7 @@ properties. Others may crash the client's spooler service. So use this
parameter with caution. It is always better to have the client
generate a valid device mode for the printer and store it on the
server for you.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947680"></a>Further Client Driver Install Procedures</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920763"></a>Further Client Driver Install Procedures</h3></div></div><div></div></div><p>
Every further driver may be done by any user, along the lines
described above: Browse network, open printers folder on Samba server,
right-click printer and choose <span class="guimenuitem">Connect...</span>. Once
@@ -1555,12 +1476,12 @@ rundll32 shell32.dll,Control_RunDLL MAIN.CPL @2
You can enter the commands either inside a <span class="guilabel">DOS box</span> window
or in the <span class="guimenuitem">Run command...</span> field from the
<span class="guimenu">Start</span> menu.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947775"></a>Always make first Client Connection as root or &quot;printer admin&quot;</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2920857"></a>Always make first Client Connection as root or &quot;printer admin&quot;</h3></div></div><div></div></div><p>
After you installed the driver on the Samba server (in its
<i class="parameter"><tt>[print$]</tt></i> share, you should always make sure
that your first client installation completes correctly. Make it a habit for
yourself to build that the very first connection from a client as
-<i class="parameter"><tt>printer admin</tt></i>. This is to make sure that:
+<a class="indexterm" name="id2920879"></a><i class="parameter"><tt>printer admin</tt></i>. This is to make sure that:
</p><div class="itemizedlist"><ul type="disc"><li><p> a first valid <span class="emphasis"><em>Device Mode</em></span> is
really initialized (see above for more explanation details), and
that</p></li><li><p> the default print settings of your printer for all
@@ -1574,20 +1495,23 @@ set to <span class="emphasis"><em>Letter</em></span>, when you are all using
</p><p>
To connect as root to a Samba printer, try this command from a Windows
2K/XP DOS box command prompt:
-</p><p><b class="userinput"><tt>runas /netonly /user:root &quot;rundll32 printui.dll,PrintUIEntry /p /t3 /n \\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\<i class="replaceable"><tt>printername</tt></i>&quot;</tt></b>
+</p><pre class="screen">
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>runas /netonly /user:root &quot;rundll32 printui.dll,PrintUIEntry /p /t3 /n
+ \\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\<i class="replaceable"><tt>printername</tt></i>&quot;</tt></b>
+</pre><p>
</p><p>
You will be prompted for root's Samba-password; type it, wait a few
seconds, click on <span class="guibutton">Printing Defaults...</span> and
proceed to set the job options as should be used as defaults by all
clients. Alternatively, instead of root you can name one other member
-of the <i class="parameter"><tt>printer admins</tt></i> from the setting.
+of the <a class="indexterm" name="id2921000"></a><i class="parameter"><tt>printer admin</tt></i> from the setting.
</p><p>
Now all the other users downloading and installing the driver
the same way (called <span class="emphasis"><em>Point'n'Print</em></span>) will
have the same defaults set for them. If you miss this step you'll
get a lot of helpdesk calls from your users. But maybe you like to
talk to people.... ;-)
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2947917"></a>Other Gotchas</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2921029"></a>Other Gotchas</h2></div></div><div></div></div><p>
Your driver is installed. It is ready for
<span class="emphasis"><em>Point'n'Print</em></span> installation by the clients
now. You <span class="emphasis"><em>may</em></span> have tried to download and use it
@@ -1597,7 +1521,7 @@ example, suppose you didn't manage to &quot;set the defaults&quot; on the
printer, as advised in the preceding paragraphs? And your users
complain about various issues (such as &#8220;<span class="quote">We need to set the paper
size for each job from Letter to A4 and it won't store it!</span>&#8221;)
-</p><div xmlns:ns49="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2947950"></a>Setting Default Print Options for the Client Drivers</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921063"></a>Setting Default Print Options for the Client Drivers</h3></div></div><div></div></div><p>
The last sentence might be viewed with mixed feelings by some users and
admins. They have struggled for hours and hours and couldn't arrive at
a point were their settings seemed to be saved. It is not their
@@ -1607,7 +1531,7 @@ up when you right-click the printer name and select
looking dialogs, each claiming that they help you to set printer options,
in three different ways. Here is the definite answer to the &quot;Samba
Default Driver Setting FAQ&quot;:
-</p><ns49:p><b>&#8220;<span class="quote">I can't set and save default print options
+</p><p><b>&#8220;<span class="quote">I can't set and save default print options
for all users on Win2K/XP! Why not?</span>&#8221;</b>
How are you doing it? I bet the wrong way.... (it is not very
easy to find out, though). There are 3 different ways to bring you to
@@ -1618,41 +1542,41 @@ dialogs <span class="emphasis"><em>look</em></span> the same. Only one of them
Administrator to do this for all users. Here is how I reproduce it in
on XP Professional:
-</ns49:p><div class="orderedlist"><ol type="A"><li xmlns:ns46=""><ns46:p>The first &quot;wrong&quot; way:
+</p><div class="orderedlist"><ol type="A"><li><p>The first &quot;wrong&quot; way:
-</ns46:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guiicon">Printers</span>
+</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guiicon">Printers</span>
folder.</p></li><li><p>Right-click on the printer
(<span class="emphasis"><em>remoteprinter on cupshost</em></span>) and
select in context menu <span class="guimenu">Printing
Preferences...</span></p></li><li><p>Look at this dialog closely and remember what it looks
-like.</p></li></ol></div><ns46:p>
-</ns46:p></li><li xmlns:ns47=""><ns47:p>The second &quot;wrong&quot; way:
+like.</p></li></ol></div><p>
+</p></li><li><p>The second &quot;wrong&quot; way:
-</ns47:p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guimenu">Printers</span>
+</p><div class="orderedlist"><ol type="1"><li><p>Open the <span class="guimenu">Printers</span>
folder.</p></li><li><p>Right-click on the printer (<span class="emphasis"><em>remoteprinter on
cupshost</em></span>) and select in the context menu
<span class="guimenuitem">Properties</span></p></li><li><p>Click on the <span class="guilabel">General</span>
tab</p></li><li><p>Click on the button <span class="guibutton">Printing
Preferences...</span></p></li><li><p>A new dialog opens. Keep this dialog open and go back
-to the parent dialog.</p></li></ol></div><ns47:p>
-</ns47:p></li><li xmlns:ns48=""><ns48:p>The third, the &quot;correct&quot; way: (should you do
+to the parent dialog.</p></li></ol></div><p>
+</p></li><li><p>The third, the &quot;correct&quot; way: (should you do
this from the beginning, just carry out steps 1. and 2. from second
&quot;way&quot; above)
-</ns48:p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="guilabel">Advanced</span>
+</p><div class="orderedlist"><ol type="1"><li><p>Click on the <span class="guilabel">Advanced</span>
tab. (Hmmm... if everything is &quot;Grayed Out&quot;, then you are not logged
in as a user with enough privileges).</p></li><li><p>Click on the <span class="guibutton">Printing
Defaults...</span> button.</p></li><li><p>On any of the two new tabs, click on the
<span class="guilabel">Advanced...</span> button.</p></li><li><p>A new dialog opens. Compare this one to the other,
-identical looking one from &quot;B.5&quot; or A.3&quot;.</p></li></ol></div><ns48:p>
-</ns48:p></li></ol></div><ns49:p>
+identical looking one from &quot;B.5&quot; or A.3&quot;.</p></li></ol></div><p>
+</p></li></ol></div><p>
Do you see any difference in the two settings dialogs? I don't
either. However, only the last one, which you arrived at with steps
C.1.-6. will permanently save any settings which will then become the
defaults for new users. If you want all clients to have the same
defaults, you need to conduct these steps as administrator
-(<i class="parameter"><tt>printer admin</tt></i> in )
+(<a class="indexterm" name="id2921360"></a><i class="parameter"><tt>printer admin</tt></i> in )
<span class="emphasis"><em>before</em></span> a client downloads the driver (the clients
can later set their own <span class="emphasis"><em>per-user defaults</em></span> by
following the procedures <span class="emphasis"><em>A.</em></span>
@@ -1672,7 +1596,7 @@ try the same way with Win2k or WinXP. You wouldn't dream
that there is now a different &quot;clicking path&quot; to arrive at an
identically looking, but functionally different dialog to set defaults
for all users!
-</ns49:p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>Try (on Win2000 and WinXP) to run this command (as a user
+</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>Try (on Win2000 and WinXP) to run this command (as a user
with the right privileges):
</p><p><b class="userinput"><tt>
rundll32 printui.dll,PrintUIEntry /p /t3 /n\\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\<i class="replaceable"><tt>printersharename</tt></i>
@@ -1686,7 +1610,7 @@ to see the tab with the <span class="guilabel">Printing Preferences...</span>
button (the one which doesn't set system-wide defaults). You can
start the commands from inside a DOS box&quot; or from the <span class="guimenu">Start</span>
-- <span class="guimenuitem">Run...</span> menu.
-</p></div></div><div xmlns:ns50="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948384"></a>Supporting large Numbers of Printers</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921530"></a>Supporting large Numbers of Printers</h3></div></div><div></div></div><p>
One issue that has arisen during the recent development phase of Samba
is the need to support driver downloads for 100's of printers. Using
Windows NT APW here is somewhat awkward (to say the least). If you
@@ -1723,9 +1647,9 @@ following is an example of how this could be accomplished:
Driver Name: [myphantasydrivername]
[....]
-</pre><ns50:p>
+</pre><p>
-</ns50:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b>
cmd = enumprinters
flags:[0x800000]
@@ -1733,36 +1657,39 @@ following is an example of how this could be accomplished:
description:[\\SAMBA-CUPS\dm9110,,110ppm HiVolume DANKA Stuttgart]
comment:[110 ppm HiVolume DANKA Stuttgart]
[....]
-</pre><ns50:p>
+</pre><p>
-</ns50:p><pre class="screen">
-<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'setdriver <i class="replaceable"><tt>dm9110</tt></i> &quot;<i class="replaceable"><tt>Heidelberg Digimaster 9110 (PS)</tt></i>&quot;'</tt></b>
+</p><pre class="screen">
+<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c \
+ 'setdriver <i class="replaceable"><tt>dm9110</tt></i> &quot;<i class="replaceable"><tt>Heidelberg Digimaster 9110 (PS)</tt></i>&quot;'</tt></b>
cmd = setdriver dm9110 Heidelberg Digimaster 9110 (PPD)
Successfully set dm9110 to driver Heidelberg Digimaster 9110 (PS).
-</pre><ns50:p>
+</pre><p>
-</ns50:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b>
cmd = enumprinters
flags:[0x800000]
name:[\\SAMBA-CUPS\dm9110]
- description:[\\SAMBA-CUPS\dm9110,Heidelberg Digimaster 9110 (PS),110ppm HiVolume DANKA Stuttgart]
+ description:[\\SAMBA-CUPS\dm9110,Heidelberg Digimaster 9110 (PS),\
+ 110ppm HiVolume DANKA Stuttgart]
comment:[110ppm HiVolume DANKA Stuttgart]
[....]
-</pre><ns50:p>
+</pre><p>
-</ns50:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'setdriver <i class="replaceable"><tt>dm9110</tt></i> <i class="replaceable"><tt>myphantasydrivername</tt></i>'</tt></b>
cmd = setdriver dm9110 myphantasydrivername
Successfully set dm9110 to myphantasydrivername.
-</pre><ns50:p>
+</pre><p>
-</ns50:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>rpcclient <i class="replaceable"><tt>SAMBA-CUPS</tt></i> -U root%<i class="replaceable"><tt>secret</tt></i> -c 'enumprinters'</tt></b>
cmd = enumprinters
flags:[0x800000]
name:[\\SAMBA-CUPS\dm9110]
- description:[\\SAMBA-CUPS\dm9110,myphantasydrivername,110ppm HiVolume DANKA Stuttgart]
+ description:[\\SAMBA-CUPS\dm9110,myphantasydrivername,\
+ 110ppm HiVolume DANKA Stuttgart]
comment:[110ppm HiVolume DANKA Stuttgart]
[....]
</pre><p>
@@ -1773,7 +1700,7 @@ commas in the &quot;description&quot; field). After the
<b class="command">setdriver</b> command succeeded, all is well. (The
CUPS Printing chapter has more info about the installation of printer
drivers with the help of <b class="command">rpcclient</b>).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948687"></a>Adding new Printers with the Windows NT APW</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2921841"></a>Adding new Printers with the Windows NT APW</h3></div></div><div></div></div><p>
By default, Samba exhibits all printer shares defined in
<tt class="filename">smb.conf</tt> in the
<span class="guiicon">Printers...</span> folder. Also located in this folder
@@ -1781,29 +1708,29 @@ is the Windows NT Add Printer Wizard icon. The APW will be shown only
if:
</p><div class="itemizedlist"><ul type="disc"><li><p>...the connected user is able to successfully execute
an <b class="command">OpenPrinterEx(\\server)</b> with administrative
-privileges (i.e. root or <i class="parameter"><tt>printer admin</tt></i>).
+privileges (i.e. root or <a class="indexterm" name="id2921887"></a><i class="parameter"><tt>printer admin</tt></i>).
</p><div class="tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p> Try this from a Windows 2K/XP DOS box command prompt:
</p><p><b class="userinput"><tt>
runas /netonly /user:root rundll32 printui.dll,PrintUIEntry /p /t0 /n \\<i class="replaceable"><tt>SAMBA-SERVER</tt></i>\<i class="replaceable"><tt>printersharename</tt></i>
</tt></b></p><p>
and click on <span class="guibutton">Printing Preferences...</span>
</p></div></li><li><p>... contains the setting
-<i class="parameter"><tt>show add printer wizard = yes</tt></i> (the
+<a class="indexterm" name="id2921942"></a><i class="parameter"><tt>show add printer wizard</tt></i> = yes (the
default).</p></li></ul></div><p>
The APW can do various things:
</p><div class="itemizedlist"><ul type="disc"><li><p>upload a new driver to the Samba
<i class="parameter"><tt>[print$]</tt></i> share;</p></li><li><p>associate an uploaded driver with an existing (but
still &quot;driverless&quot;) print queue;</p></li><li><p>exchange the currently used driver for an existing
print queue with one that has been uploaded before;</p></li><li><p>add an entirely new printer to the Samba host (only in
-conjunction with a working <i class="parameter"><tt>add printer command</tt></i>;
-a corresponding <i class="parameter"><tt>delete printer command</tt></i> for
+conjunction with a working <a class="indexterm" name="id2922001"></a><i class="parameter"><tt>add printer command</tt></i>;
+a corresponding <a class="indexterm" name="id2922017"></a><i class="parameter"><tt>delete printer command</tt></i> for
removing entries from the <span class="guiicon">Printers...</span> folder
may be provided too)</p></li></ul></div><p>
The last one (add a new printer) requires more effort than the
previous ones. In order to use the APW to successfully add a printer
-to a Samba server, the <i class="parameter"><tt>add printer command</tt></i> must
+to a Samba server, the <a class="indexterm" name="id2922045"></a><i class="parameter"><tt>add printer command</tt></i> must
have a defined value. The program hook must successfully add the
-printer to the Unix print system (i.e. to
+printer to the UNIX print system (i.e. to
<tt class="filename">/etc/printcap</tt>,
<tt class="filename">/etc/cups/printers.conf</tt> or other appropriate
files) and to if necessary.
@@ -1813,13 +1740,11 @@ exist, smbd will execute the <i class="parameter"><tt>add printer
command</tt></i> and reparse to the
to attempt to locate the new printer share. If the share is still not
defined, an error of <span class="errorname">Access Denied</span> is
-returned to the client. Note that the <i class="parameter"><tt>add printer
-command</tt></i> is executed under the context of the connected
-user, not necessarily a root account. A <i class="parameter"><tt>map to guest = bad
-user</tt></i> may have connected you unwittingly under the wrong
+returned to the client. Note that the <a class="indexterm" name="id2922095"></a><i class="parameter"><tt>add printer command</tt></i> is executed under the context of the connected
+user, not necessarily a root account. A <a class="indexterm" name="id2922111"></a><i class="parameter"><tt>map to guest</tt></i> = bad user may have connected you unwittingly under the wrong
privilege; you should check it by using the
<b class="command">smbstatus</b> command.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2948930"></a>Weird Error Message <span class="errorname">Cannot connect under a
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922136"></a>Weird Error Message <span class="errorname">Cannot connect under a
different Name</span></h3></div></div><div></div></div><p>
Once you are connected with the wrong credentials, there is no means
to reverse the situation other than to close all Explorer windows, and
@@ -1849,7 +1774,7 @@ message. You close all Explorer Windows and start it again. You try to
connect - and this times it works! Windows seems to cache connection
info somewhere and doesn't keep it up to date (if you are unlucky you
might need to reboot to get rid of the error message).
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949028"></a>Be careful when assembling Driver Files</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922236"></a>Be careful when assembling Driver Files</h3></div></div><div></div></div><p>
You need to be very careful when you take notes about the files and
belonging to a particular driver. Don't confuse the files for driver
version &quot;0&quot; (for Win95/98/ME, going into
@@ -1990,7 +1915,7 @@ In my example were even more differences than shown here. Conclusion:
you must be very careful to select the correct driver files for each
driver version. Don't rely on the names alone. Don't interchange files
belonging to different driver versions.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949299"></a>Samba and Printer Ports</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922594"></a>Samba and Printer Ports</h3></div></div><div></div></div><p>
Windows NT/2000 print servers associate a port with each
printer. These normally take the form of <tt class="filename">LPT1:</tt>,
<tt class="filename">COM1:</tt>, <tt class="filename">FILE:</tt>, etc. Samba
@@ -2009,20 +1934,20 @@ multiple ports as a form of load balancing or fail over.
If you require that multiple ports be defined for some reason or
another (&#8220;<span class="quote">My users and my Boss should not know that they are
working with Samba</span>&#8221;), possesses a
-<i class="parameter"><tt>enumports command</tt></i> which can be used to define
+<a class="indexterm" name="id2922668"></a><i class="parameter"><tt>enumports command</tt></i> which can be used to define
an external program that generates a listing of ports on a system.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949370"></a>Avoiding the most common Misconfigurations of the Client Driver</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922687"></a>Avoiding the most common Misconfigurations of the Client Driver</h3></div></div><div></div></div><p>
So - printing works, but there are still problems. Most jobs print
well, some don't print at all. Some jobs have problems with fonts,
which don't look good at all. Some jobs print fast, and some are
dead-slow. We can't cover it all; but we want to encourage you to read
the little paragraph about &quot;Avoiding the wrong PostScript Driver
Settings&quot; in the CUPS Printing part of this document.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949392"></a>The Imprints Toolset</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2922712"></a>The Imprints Toolset</h2></div></div><div></div></div><p>
The Imprints tool set provides a UNIX equivalent of the
Windows NT Add Printer Wizard. For complete information, please
refer to the Imprints web site
-at<a href="http://imprints.sourceforge.net/" target="_top">http://imprints.sourceforge.net/</a>
+at <a href="http://imprints.sourceforge.net/" target="_top">http://imprints.sourceforge.net/</a>
as well as the documentation included with the imprints source
distribution. This section will only provide a brief introduction
to the features of Imprints.
@@ -2035,20 +1960,20 @@ coordinate your efforts on the samba-technical mailing list. The
toolset is still in usable form; but only for a series of older
printer models, where there are prepared packages to use. Packages for
more up to date print devices are needed if Imprints should have a
-future.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949437"></a>What is Imprints?</h3></div></div><div></div></div><p>
+future.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922768"></a>What is Imprints?</h3></div></div><div></div></div><p>
Imprints is a collection of tools for supporting these goals:
</p><div class="itemizedlist"><ul type="disc"><li><p>Providing a central repository information regarding
Windows NT and 95/98 printer driver packages</p></li><li><p>Providing the tools necessary for creating the
Imprints printer driver packages.</p></li><li><p>Providing an installation client which will obtain
printer drivers from a central internet (or intranet) Imprints Server
repository and install them on remote Samba and Windows NT4 print
-servers.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949479"></a>Creating Printer Driver Packages</h3></div></div><div></div></div><p>
+servers.</p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922810"></a>Creating Printer Driver Packages</h3></div></div><div></div></div><p>
The process of creating printer driver packages is beyond the scope of
this document (refer to Imprints.txt also included with the Samba
distribution for more information). In short, an Imprints driver
package is a gzipped tarball containing the driver files, related INF
files, and a control file needed by the installation client.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949498"></a>The Imprints Server</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922828"></a>The Imprints Server</h3></div></div><div></div></div><p>
The Imprints server is really a database server that may be queried
via standard HTTP mechanisms. Each printer entry in the database has
an associated URL for the actual downloading of the package. Each
@@ -2056,7 +1981,7 @@ package is digitally signed via GnuPG which can be used to verify that
package downloaded is actually the one referred in the Imprints
database. It is strongly recommended that this security check
<span class="emphasis"><em>not</em></span> be disabled.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2949522"></a>The Installation Client</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2922853"></a>The Installation Client</h3></div></div><div></div></div><p>
More information regarding the Imprints installation client is
available in the <tt class="filename">Imprints-Client-HOWTO.ps</tt> file
included with the imprints source package.
@@ -2071,10 +1996,10 @@ remote Samba and Windows NT print servers.
</p><p>
The basic installation process is in four steps and perl code is
wrapped around smbclient and rpcclient
-</p><div class="itemizedlist"><ul type="disc"><li xmlns:ns51=""><ns51:p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>
foreach (supported architecture for a given driver)
- </ns51:p><div class="orderedlist"><ol type="1"><li><p>rpcclient: Get the appropriate upload directory on the remote server</p></li><li><p>smbclient: Upload the driver files</p></li><li><p>rpcclient: Issues an AddPrinterDriver() MS-RPC</p></li></ol></div><ns51:p>
- </ns51:p></li><li><p>rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer</p></li></ul></div><p>
+ </p><div class="orderedlist"><ol type="1"><li><p>rpcclient: Get the appropriate upload directory on the remote server</p></li><li><p>smbclient: Upload the driver files</p></li><li><p>rpcclient: Issues an AddPrinterDriver() MS-RPC</p></li></ol></div><p>
+ </p></li><li><p>rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer</p></li></ul></div><p>
One of the problems encountered when implementing the Imprints tool
set was the name space issues between various supported client
architectures. For example, Windows NT includes a driver named &quot;Apple
@@ -2097,7 +2022,7 @@ if is has not already been installed?
The way of sidestepping this limitation is to require that all
Imprints printer driver packages include both the Intel Windows NT and
95/98 printer drivers and that NT driver is installed first.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2949674"></a>Add Network Printers at Logon without User Interaction</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923008"></a>Add Network Printers at Logon without User Interaction</h2></div></div><div></div></div><p>
The following MS Knowledge Base article may be of some help if you
need to handle Windows 2000 clients: <span class="emphasis"><em>How to Add Printers
with No User Interaction in Windows 2000.</em></span> ( <a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;189105" target="_top">http://support.microsoft.com/default.aspx?scid=kb;en-us;189105</a>
@@ -2122,13 +2047,7 @@ printers via Samba, but works for Windows-based print servers too):
<b class="userinput"><tt>rundll32 printui.dll,PrintUIEntry /y /n &quot;\\sambacupsserver\infotec2105-PS&quot;</tt></b>
</pre><p>
Here is a list of the used commandline parameters:
-</p><div class="variablelist"><dl><dt><span class="term">/dn</span></dt><dd><p>deletes a network printer</p></dd><dt><span class="term">/q</span></dt><dd><p>quiet modus</p></dd><dt><span class="term">/n</span></dt><dd><p>names a printer</p></dd><dt><span class="term">/in</span></dt><dd><p>adds a network printer connection</p></dd><dt><span class="term">/y</span></dt><dd><p>sets printer as default printer</p></dd></dl></div><p>
-I have tested this with a Samba 2.2.7a and a Samba-3alpha24
-installation and Windows XP Professional clients. Note that this
-specific command set works with network print queues (installing
-local print queues requires different parameters, but this is of no
-interest here).
-</p><div class="itemizedlist"><ul type="disc"><li><p>Line 1 deletes a possibly existing previous network
+</p><div class="variablelist"><dl><dt><span class="term">/dn</span></dt><dd><p>deletes a network printer</p></dd><dt><span class="term">/q</span></dt><dd><p>quiet modus</p></dd><dt><span class="term">/n</span></dt><dd><p>names a printer</p></dd><dt><span class="term">/in</span></dt><dd><p>adds a network printer connection</p></dd><dt><span class="term">/y</span></dt><dd><p>sets printer as default printer</p></dd></dl></div><div class="itemizedlist"><ul type="disc"><li><p>Line 1 deletes a possibly existing previous network
printer <span class="emphasis"><em>infotec2105-IPDS</em></span> (which had used native
Windows drivers with LPRng that were removed from the server which was
converted to CUPS). The <b class="command">/q</b> at the end eliminates
@@ -2172,7 +2091,7 @@ at logon time will not really be noticeable. Printers can be centrally
added, changed, and deleted at will on the server with no user
intervention required on the clients (you just need to keep the logon
scripts up to date).
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950004"></a>The <b class="command">addprinter</b> command</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923342"></a>The <b class="command">addprinter</b> command</h2></div></div><div></div></div><p>
The <b class="command">addprinter</b> command can be configured to be a
shell script or program executed by Samba. It is triggered by running
the APW from a client against the Samba print server. The APW asks the
@@ -2184,7 +2103,7 @@ on legacy systems, or execute the <b class="command">lpadmin</b> command
on more modern systems) and create the associated share in
, then the APW will in effect really
create a new printer on Samba and the UNIX print subsystem!
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950049"></a>Migration of &quot;Classical&quot; printing to Samba-3</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923388"></a>Migration of &quot;Classical&quot; printing to Samba</h2></div></div><div></div></div><p>
The basic &quot;NT-style&quot; printer driver management has not changed
considerably in 3.0 over the 2.2.x releases (apart from many small
improvements). Here migration should be quite easy, especially if you
@@ -2195,14 +2114,13 @@ is more of an effort. Please read the appropriate release notes and
the HOWTO Collection for 2.2. You can follow several paths. Here are
possible scenarios for migration:
</p><div class="itemizedlist"><ul type="disc"><li><p>You need to study and apply the new Windows NT printer
-and driver support. Previously used parameters &quot;<i class="parameter"><tt>printer
-driver file</tt></i>&quot;, &quot; <i class="parameter"><tt>printer driver</tt></i>&quot; and
-&quot;<i class="parameter"><tt>printer driver location</tt></i>&quot; are no longer
+and driver support. Previously used parameters <i class="parameter"><tt>printer
+driver file</tt></i>, <i class="parameter"><tt>printer driver</tt></i> and
+<i class="parameter"><tt>printer driver location</tt></i> are no longer
supported.</p></li><li><p>If you want to take advantage of WinNT printer driver
support you also need to migrate the Win9x/ME drivers to the new
setup.</p></li><li><p>An existing <tt class="filename">printers.def</tt> file
-(the one specified in the now removed parameter <i class="parameter"><tt>printer
-driver file = ...</tt></i>) will work no longer with Samba-3.0. In
+ (the one specified in the now removed parameter <i class="parameter"><tt>printer driver file</tt></i>) will work no longer with samba 3. In
3.0, smbd attempts to locate a Win9x/ME driver files for the printer
in <i class="parameter"><tt>[print$]</tt></i> and additional settings in the TDB
and only there; if it fails it will <span class="emphasis"><em>not</em></span> (as 2.2.x
@@ -2218,24 +2136,21 @@ only solution is to use the Windows NT APW to install the NT drivers
and the 9x drivers. This can be scripted using smbclient and
rpcclient. See the Imprints installation client at:
</p><p>
-<a href="http://imprints.sourceforge.net/" target="_top"><span class="emphasis"><em>http://imprints.sourceforge.net/</em></span></a>
+ <a href="http://imprints.sourceforge.net/" target="_top">http://imprints.sourceforge.net/</a>
</p><p>
for an example. See also the discussion of rpcclient usage in the
-&quot;CUPS Printing&quot; section.</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950217"></a>Publishing Printer Information in Active Directory or LDAP</h2></div></div><div></div></div><p>
+&quot;CUPS Printing&quot; section.</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923561"></a>Publishing Printer Information in Active Directory or LDAP</h2></div></div><div></div></div><p>
We will publish an update to this section shortly.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2950232"></a>Common Errors and Problems</h2></div></div><div></div></div><p>
-Here are a few typical errors and problems people have
-encountered. You can avoid them. Read on.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950245"></a>I give my root password but I don't get access</h3></div></div><div></div></div><p>
-Don't confuse the root password which is valid for the Unix system
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2923575"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923582"></a>I give my root password but I don't get access</h3></div></div><div></div></div><p>
+Don't confuse the root password which is valid for the UNIX system
(and in most cases stored in the form of a one-way hash in a file
named <tt class="filename">/etc/shadow</tt>) with the password used to
authenticate against Samba!. Samba doesn't know the UNIX password; for
root to access Samba resources via Samba-type access, a Samba account
for root must be created first. This is often done with the
<b class="command">smbpasswd</b> command.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2950278"></a>My printjobs get spooled into the spooling directory, but then get lost</h3></div></div><div></div></div><p>
-Don't use the existing Unix print system spool directory for the Samba
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2923615"></a>My printjobs get spooled into the spooling directory, but then get lost</h3></div></div><div></div></div><p>
+Don't use the existing UNIX print system spool directory for the Samba
spool directory. It may seem convenient and a saving of space, but it
only leads to problems. The two <span class="emphasis"><em>must</em></span> be separate.
-</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="msdfs.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="CUPS-printing.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter17.Hosting a Microsoft Distributed File System tree on Samba</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter19.CUPS Printing Support in Samba 3.0</td></tr></table></div></body></html>
+</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="msdfs.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="CUPS-printing.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter17.Hosting a Microsoft Distributed File System tree on Samba</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter19.CUPS Printing Support in Samba 3.0</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/problems.html b/docs/htmldocs/problems.html
index 62e1a3615a2..24ddc7c02c7 100644
--- a/docs/htmldocs/problems.html
+++ b/docs/htmldocs/problems.html
@@ -1,12 +1,16 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter34.Analysing and solving samba problems</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="diagnosis.html" title="Chapter33.The Samba checklist"><link rel="next" href="bugreport.html" title="Chapter35.Reporting Bugs"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter34.Analysing and solving samba problems</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="diagnosis.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="bugreport.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="problems"></a>Chapter34.Analysing and solving samba problems</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">8 Apr 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="problems.html#id3008806">Diagnostics tools</a></dt><dt><a href="problems.html#id3007532">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="problems.html#id3007815">Useful URLs</a></dt><dt><a href="problems.html#id3007859">Getting help from the mailing lists</a></dt><dt><a href="problems.html#id3008012">How to get off the mailing lists</a></dt></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter34.Analysing and solving samba problems</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="troubleshooting.html" title="PartV.Troubleshooting"><link rel="previous" href="diagnosis.html" title="Chapter33.The Samba checklist"><link rel="next" href="bugreport.html" title="Chapter35.Reporting Bugs"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter34.Analysing and solving samba problems</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="diagnosis.html">Prev</a></td><th width="60%" align="center">PartV.Troubleshooting</th><td width="20%" align="right"><a accesskey="n" href="bugreport.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="problems"></a>Chapter34.Analysing and solving samba problems</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">8 Apr 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="problems.html#id2959747">Diagnostics tools</a></dt><dd><dl><dt><a href="problems.html#id2959768">Debugging with Samba itself</a></dt><dt><a href="problems.html#id2959894">Tcpdump</a></dt><dt><a href="problems.html#id2959915">Ethereal</a></dt><dt><a href="problems.html#id2959968">The Windows Network Monitor</a></dt></dl></dd><dt><a href="problems.html#id2960285">Useful URLs</a></dt><dt><a href="problems.html#id2960326">Getting help from the mailing lists</a></dt><dt><a href="problems.html#id2960484">How to get off the mailing lists</a></dt></dl></div><p>
There are many sources of information available in the form
of mailing lists, RFC's and documentation. The docs that come
with the samba distribution contain very good explanations of
-general SMB topics such as browsing.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008806"></a>Diagnostics tools</h2></div></div><div></div></div><p>
+general SMB topics such as browsing.</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2959747"></a>Diagnostics tools</h2></div></div><div></div></div><p>With SMB networking, it is often not immediately clear what
+the cause is of a certain problem. Samba itself provides rather
+useful information, but in some cases you might have to fall back
+to using a <span class="emphasis"><em>sniffer</em></span>. A sniffer is a program that
+listens on your LAN, analyses the data sent on it and displays it
+on the screen.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959768"></a>Debugging with Samba itself</h3></div></div><div></div></div><p>
One of the best diagnostic tools for debugging problems is Samba itself.
You can use the <tt class="option">-d option</tt> for both <span class="application">smbd</span> and <span class="application">nmbd</span> to specify what
-<i class="parameter"><tt>debug level</tt></i> at which to run. See the man pages on smbd, nmbd and
+<a class="indexterm" name="id2959799"></a><i class="parameter"><tt>debug level</tt></i> at which to run. See the man pages on smbd, nmbd and
smb.conf for more information on debugging options. The debug
level can range from 1 (the default) to 10 (100 for debugging passwords).
</p><p>
@@ -25,14 +29,19 @@ typing in your password, you can attach gdb and continue.
</p><p>
Some useful samba commands worth investigating:
</p><pre class="screen">
- <tt class="prompt">$ </tt><b class="userinput"><tt>testparm | more</tt></b>
- <tt class="prompt">$ </tt><b class="userinput"><tt>smbclient -L //{netbios name of server}</tt></b>
-</pre><p>
-An SMB enabled version of tcpdump is available from
-<a href="http://www.tcpdump.org/" target="_top">http://www.tcpdup.org/</a>.
-Ethereal, another good packet sniffer for Unix and Win32
-hosts, can be downloaded from <a href="http://www.ethereal.com/" target="_top">http://www.ethereal.com</a>.
-</p><p>
+<tt class="prompt">$ </tt><b class="userinput"><tt>testparm | more</tt></b>
+<tt class="prompt">$ </tt><b class="userinput"><tt>smbclient -L //{netbios name of server}</tt></b>
+</pre></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959894"></a>Tcpdump</h3></div></div><div></div></div><p><a href="http://www.tcpdump.org/" target="_top">Tcpdump</a> was the first
+unix sniffer with SMB support. It is a command-line utility and
+nowadays, it's SMB support is somewhat less then that of ethereal
+and tethereal.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959915"></a>Ethereal</h3></div></div><div></div></div><p>
+<a href="http://www.ethereal.com/" target="_top">Ethereal</a> is a graphical
+sniffer, available for both unix (Gtk) and Windows. Ethereal's
+SMB support is very good.</p><p>For details on the use of ethereal, read the well-written
+ethereal User Guide.</p><p>
+Listen for data on ports 137, 138, 139 and 445. E.g.
+use the filter <b class="userinput"><tt>port 137 or port 138 or port 139 or port 445</tt></b>.</p><p>A console version of ethereal is available as well and is called
+<b class="command">tethereal</b>.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2959968"></a>The Windows Network Monitor</h3></div></div><div></div></div><p>
For tracing things on the Microsoft Windows NT, Network Monitor
(aka. netmon) is available on the Microsoft Developer Network CD's,
the Windows NT Server install CD and the SMS CD's. The version of
@@ -42,7 +51,7 @@ The version on the NT Server install CD will only allow monitoring
of network traffic directed to the local NT box and broadcasts on the
local subnet. Be aware that Ethereal can read and write netmon
formatted files.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3007532"></a>Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</h2></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2959989"></a>Installing 'Network Monitor' on an NT Workstation</h4></div></div><div></div></div><p>
Installing netmon on an NT workstation requires a couple
of steps. The following are for installing Netmon V4.00.349, which comes
with Microsoft Windows NT Server 4.0, on Microsoft Windows NT
@@ -75,17 +84,17 @@ Now copy the files from the NT Server in <tt class="filename">%SYSTEMROOT%\Syste
to <tt class="filename">%SYSTEMROOT%\System32\netmon\*.*</tt> on the Workstation and set
permissions as you deem appropriate for your site. You will need
administrative rights on the NT box to run netmon.
-</p><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2960258"></a>Installing 'Network Monitor' on an 9x Workstation</h4></div></div><div></div></div><p>
To install Netmon on a Windows 9x box install the network monitor agent
from the Windows 9x CD (<tt class="filename">\admin\nettools\netmon</tt>). There is a readme
file located with the netmon driver files on the CD if you need
information on how to do this. Copy the files from a working
Netmon installation.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3007815"></a>Useful URLs</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>See how Scott Merrill simulates a BDC behavior at
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960285"></a>Useful URLs</h2></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>See how Scott Merrill simulates a BDC behavior at
<a href="http://www.skippy.net/linux/smb-howto.html" target="_top">
http://www.skippy.net/linux/smb-howto.html</a>. </p></li><li><p>FTP site for older SMB specs:
<a href="ftp://ftp.microsoft.com/developr/drg/CIFS/" target="_top">
- ftp://ftp.microsoft.com/developr/drg/CIFS/</a></p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3007859"></a>Getting help from the mailing lists</h2></div></div><div></div></div><p>
+ ftp://ftp.microsoft.com/developr/drg/CIFS/</a></p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960326"></a>Getting help from the mailing lists</h2></div></div><div></div></div><p>
There are a number of Samba related mailing lists. Go to <a href="http://samba.org" target="_top">http://samba.org</a>, click on your nearest mirror
and then click on <b class="command">Support</b> and then click on <b class="command">
Samba related mailing lists</b>.
@@ -95,10 +104,10 @@ For questions relating to Samba TNG go to
It has been requested that you don't post questions about Samba-TNG to the
main stream Samba lists.</p><p>
If you post a message to one of the lists please observe the following guide lines :
-</p><div class="itemizedlist"><ul type="disc"><li><p> Always remember that the developers are volunteers, they are
+</p><div class="itemizedlist"><ul type="disc"><li><p>Always remember that the developers are volunteers, they are
not paid and they never guarantee to produce a particular feature at
a particular time. Any time lines are 'best guess' and nothing more.
-</p></li><li><p> Always mention what version of samba you are using and what
+</p></li><li><p>Always mention what version of samba you are using and what
operating system its running under. You should probably list the
relevant sections of your <tt class="filename">smb.conf</tt> file, at least the options
in [global] that affect PDC support.</p></li><li><p>In addition to the version, if you obtained Samba via
@@ -119,12 +128,11 @@ error messages.</p></li><li><p>(Possibly) If you have a complete netmon trace (
the pipe to the error ) you can send the *.CAP file as well.</p></li><li><p>Please think carefully before attaching a document to an email.
Consider pasting the relevant parts into the body of the message. The samba
mailing lists go to a huge number of people, do they all need a copy of your
-smb.conf in their attach directory?</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3008012"></a>How to get off the mailing lists</h2></div></div><div></div></div><p>To have your name removed from a samba mailing list, go to the
+smb.conf in their attach directory?</p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2960484"></a>How to get off the mailing lists</h2></div></div><div></div></div><p>To have your name removed from a samba mailing list, go to the
same place you went to to get on it. Go to <a href="http://lists.samba.org/" target="_top">http://lists.samba.org</a>,
click on your nearest mirror and then click on <b class="command">Support</b> and
-then click on <b class="command"> Samba related mailing lists</b>. Or perhaps see
-<a href="http://lists.samba.org/mailman/roster/samba-ntdom" target="_top">here</a>
+then click on <b class="command"> Samba related mailing lists</b>.
</p><p>
Please don't post messages to the list asking to be removed, you will just
be referred to the above address (unless that process failed in some way...)
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="diagnosis.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="troubleshooting.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="bugreport.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter33.The Samba checklist</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter35.Reporting Bugs</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="diagnosis.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="troubleshooting.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="bugreport.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter33.The Samba checklist</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter35.Reporting Bugs</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/rpcclient.1.html b/docs/htmldocs/rpcclient.1.html
index 47c4d914a5a..73caf547a24 100644
--- a/docs/htmldocs/rpcclient.1.html
+++ b/docs/htmldocs/rpcclient.1.html
@@ -5,8 +5,7 @@
have now written scripts around it to manage Windows NT clients from
their UNIX workstation. </p></div><div class="refsect1" lang="en"><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">server</span></dt><dd><p>NetBIOS name of Server to which to connect.
The server can be any SMB/CIFS server. The name is
- resolved using the <a href="smb.conf.5.html#NAMERESOLVEORDER" target="_top">
- <i class="parameter"><tt>name resolve order</tt></i></a> line from <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></dd><dt><span class="term">-c|--command='command string'</span></dt><dd><p>execute semicolon separated commands (listed
+ resolved using the <a class="indexterm" name="id2852375"></a><i class="parameter"><tt>name resolve order</tt></i> line from <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></dd><dt><span class="term">-c|--command='command string'</span></dt><dd><p>execute semicolon separated commands (listed
below)) </p></dd><dt><span class="term">-I IP-address</span></dt><dd><p><i class="replaceable"><tt>IP address</tt></i> is the address of the server to connect to.
It should be specified in standard &quot;a.b.c.d&quot; notation. </p><p>Normally the client would attempt to locate a named
SMB/CIFS server by looking it up via the NetBIOS name resolution
@@ -22,8 +21,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -37,9 +35,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2796778"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd><dt><span class="term">-N</span></dt><dd><p>If specified, this parameter suppresses the normal
@@ -73,10 +70,10 @@ via the <b class="command">ps</b> command. To be safe always allow
<b class="command">rpcclient</b> to prompt for a password and type
it in directly. </p></dd><dt><span class="term">-n &lt;primary NetBIOS name&gt;</span></dt><dd><p>This option allows you to override
the NetBIOS name that Samba uses for itself. This is identical
-to setting the <a href="smb.conf.5.html#netbiosname" target="_top"><i class="parameter"><tt>NetBIOS
-name</tt></i></a> parameter in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. However, a command
+to setting the <a class="indexterm" name="id2796983"></a><i class="parameter"><tt>netbios name</tt></i> parameter in the <tt class="filename">smb.conf</tt> file.
+However, a command
line setting will take precedence over settings in
-<a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></dd><dt><span class="term">-i &lt;scope&gt;</span></dt><dd><p>This specifies a NetBIOS scope that
+<tt class="filename">smb.conf</tt>.</p></dd><dt><span class="term">-i &lt;scope&gt;</span></dt><dd><p>This specifies a NetBIOS scope that
<b class="command">nmblookup</b> will use to communicate with when
generating NetBIOS names. For details on the use of NetBIOS
scopes, see rfc1001.txt and rfc1002.txt. NetBIOS scopes are
@@ -88,7 +85,7 @@ smb.conf. If the domain specified is the same as the servers
NetBIOS name, it causes the client to log on using the servers local
SAM (as opposed to the Domain SAM). </p></dd><dt><span class="term">-O socket options</span></dt><dd><p>TCP socket options to set on the client
socket. See the socket options parameter in
-the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> manual page for the list of valid
+the <tt class="filename">smb.conf</tt> manual page for the list of valid
options. </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.
</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>COMMANDS</h2><div class="refsect2" lang="en"><h3>LSARPC</h3><div class="variablelist"><dl><dt><span class="term">lsaquery</span></dt><dd><p>Query info policy</p></dd><dt><span class="term">lookupsids</span></dt><dd><p>Resolve a list
of SIDs to usernames.
diff --git a/docs/htmldocs/samba-bdc.html b/docs/htmldocs/samba-bdc.html
index b317fe124b9..c3be7504e26 100644
--- a/docs/htmldocs/samba-bdc.html
+++ b/docs/htmldocs/samba-bdc.html
@@ -1,23 +1,21 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter6.Backup Domain Control</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="samba-pdc.html" title="Chapter5.Domain Control"><link rel="next" href="domain-member.html" title="Chapter7.Domain Membership"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter6.Backup Domain Control</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="samba-pdc.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="domain-member.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-bdc"></a>Chapter6.Backup Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Volker</span> <span class="surname">Lendecke</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:Volker.Lendecke@SerNet.DE">Volker.Lendecke@SerNet.DE</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="samba-bdc.html#id2896206">Features And Benefits</a></dt><dt><a href="samba-bdc.html#id2896370">Essential Background Information</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896399">MS Windows NT4 Style Domain Control</a></dt><dt><a href="samba-bdc.html#id2894362">Active Directory Domain Control</a></dt><dt><a href="samba-bdc.html#id2894383">What qualifies a Domain Controller on the network?</a></dt><dt><a href="samba-bdc.html#id2894406">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="samba-bdc.html#id2894432">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="samba-bdc.html#id2894534">Example Configuration</a></dt></dl></dd><dt><a href="samba-bdc.html#id2894584">Common Errors</a></dt><dd><dl><dt><a href="samba-bdc.html#id2894597">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="samba-bdc.html#id2894629">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="samba-bdc.html#id2894662">How do I replicate the smbpasswd file?</a></dt><dt><a href="samba-bdc.html#id2894707">Can I do this all with LDAP?</a></dt></dl></dd></dl></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter6.Backup Domain Control</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="samba-pdc.html" title="Chapter5.Domain Control"><link rel="next" href="domain-member.html" title="Chapter7.Domain Membership"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter6.Backup Domain Control</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="samba-pdc.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="domain-member.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-bdc"></a>Chapter6.Backup Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Volker</span> <span class="surname">Lendecke</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:Volker.Lendecke@SerNet.DE">Volker.Lendecke@SerNet.DE</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="samba-bdc.html#id2889347">Features And Benefits</a></dt><dt><a href="samba-bdc.html#id2889536">Essential Background Information</a></dt><dd><dl><dt><a href="samba-bdc.html#id2889565">MS Windows NT4 Style Domain Control</a></dt><dt><a href="samba-bdc.html#id2889816">Active Directory Domain Control</a></dt><dt><a href="samba-bdc.html#id2889836">What qualifies a Domain Controller on the network?</a></dt><dt><a href="samba-bdc.html#id2889863">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="samba-bdc.html#id2889908">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="samba-bdc.html#id2890011">Example Configuration</a></dt></dl></dd><dt><a href="samba-bdc.html#id2890167">Common Errors</a></dt><dd><dl><dt><a href="samba-bdc.html#id2890181">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="samba-bdc.html#id2890212">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="samba-bdc.html#id2890238">How do I replicate the smbpasswd file?</a></dt><dt><a href="samba-bdc.html#id2890283">Can I do this all with LDAP?</a></dt></dl></dd></dl></div><p>
Before you continue reading in this section, please make sure that you are comfortable
-with configuring a Samba Domain Controller as described in the
-<a href="samba-pdc.html" title="Chapter5.Domain Control">Domain Control</a> chapter.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896206"></a>Features And Benefits</h2></div></div><div></div></div><p>
+with configuring a Samba Domain Controller as described in <a href="samba-pdc.html" title="Chapter5.Domain Control">chapter on setting up Samba as a PDC</a>.
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889347"></a>Features And Benefits</h2></div></div><div></div></div><p>
This is one of the most difficult chapters to summarise. It does not matter what we say here
for someone will still draw conclusions and / or approach the Samba-Team with expectations
that are either not yet capable of being delivered, or that can be achieved far more
-effectively using a totally different approach. Since this HOWTO is already so large and
-extensive, we have taken the decision to provide sufficient (but not comprehensive)
-information regarding Backup Domain Control. In the event that you should have a persistent
-concern that is not addressed in this HOWTO document then please email
+effectively using a totally different approach. In the event that you should have a persistent
+concern that is not addressed in this book then please email
<a href="mailto:jht@samba.org" target="_top">John H Terpstra</a> clearly setting out your requirements
and / or question and we will do our best to provide a solution.
</p><p>
Samba-3 is capable of acting as a Backup Domain Controller to another Samba Primary Domain
-Controller. A Samba-3 PDC can operate with an LDAP Account backend. The Samba-3 BDC can
-operate with a slave LDAP server for the Account backend. This effectively gives samba a high
-degree of scalability. This is a very sweet (nice) solution for large organisations.
+Controller. A Samba-3 PDC can operate with an LDAP Account backend. The LDAP backend can be
+either a common master LDAP server, or a slave server. The use of a slave LDAP server has the
+benefit that when the master is down clients may still be able to log onto the network.
+This effectively gives samba a high degree of scalability iand is a very sweet (nice) solution
+for large organisations.
</p><p>
While it is possible to run a Samba-3 BDC with non-LDAP backend, the administrator will
need to figure out precisely what is the best way to replicate (copy / distribute) the
@@ -42,8 +40,9 @@ lets consider each possible option and look at the pro's and con's for each theo
</p><p>
Arguments Against: Complexity
</p></li><li><p>
- Passdb Backend is tdbsam based, BDCs use cron based &quot;net rpc vampire&quot; to
- suck down the Accounts database from the PDC
+ Passdb Backend is tdbsam based, BDCs use cron based <span class="emphasis"><em>net rpc vampire</em></span> to
+ obtain the Accounts database from the PDC and place them into the Samba SAM.
+ <span class="emphasis"><em>net rpc vampire</em></span> is a Samba function of the &quot;net&quot; command.
</p><p>
Arguments For: It would be a nice solution
</p><p>
@@ -64,7 +63,7 @@ lets consider each possible option and look at the pro's and con's for each theo
Arguments Against: All machine trust accounts and user accounts will be locally
maintained. Domain users will NOT be able to roam from office to office. This is
a broken and flawed solution. Do NOT do this.
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2896370"></a>Essential Background Information</h2></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889536"></a>Essential Background Information</h2></div></div><div></div></div><p>
A Domain Controller is a machine that is able to answer logon requests from network
workstations. Microsoft LanManager and IBM LanServer were two early products that
provided this capability. The technology has become known as the LanMan Netlogon service.
@@ -74,7 +73,7 @@ and with it a new form of the network logon service that has extended functional
This service became known as the NT NetLogon Service. The nature of this service has
changed with the evolution of MS Windows NT and today provides a very complex array of
services that are implemented over a complex spectrum of technologies.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2896399"></a>MS Windows NT4 Style Domain Control</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889565"></a>MS Windows NT4 Style Domain Control</h3></div></div><div></div></div><p>
Whenever a user logs into a Windows NT4 / 200x / XP Professional Workstation,
the workstation connects to a Domain Controller (authentication server) to validate
the username and password that the user entered are valid. If the information entered
@@ -132,32 +131,29 @@ one of the BDCs can be promoted to a PDC. If this happens while the original PDC
line then it is automatically demoted to a BDC. This is an important aspect of Domain
Controller management. The tool that is used to affect a promotion or a demotion is the
Server Manager for Domains.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2894292"></a>Example PDC Configuration</h4></div></div><div></div></div><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2889716"></a>Example PDC Configuration</h4></div></div><div></div></div><p>
Since version 2.2 Samba officially supports domain logons for all current Windows Clients,
including Windows NT4, 2003 and XP Professional. For samba to be enabled as a PDC some
parameters in the <i class="parameter"><tt>[global]</tt></i>-section of the <tt class="filename">smb.conf</tt> have to be set:
-</p><pre class="programlisting">
- workgroup = SAMBA
- domain master = yes
- domain logons = yes
-</pre><p>
-Several other things like a <i class="parameter"><tt>[homes]</tt></i> and a <i class="parameter"><tt>[netlogon]</tt></i> share also need to be set along with
+</p><div class="example"><a name="id2889747"></a><p class="title"><b>Example6.1.Minimal smb.conf for being a PDC</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = yes</tt></i></td></tr></table></div><p>
+Several other things like a <i class="parameter"><tt>[homes]</tt></i> and a
+<i class="parameter"><tt>[netlogon]</tt></i> share also need to be set along with
settings for the profile path, the users home drive, etc.. This will not be covered in this
-chapter, for more information please refer to the chapter on <a href="samba-pdc.html" title="Chapter5.Domain Control">Domain Control</a>.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894362"></a>Active Directory Domain Control</h3></div></div><div></div></div><p>
+chapter, for more information please refer to <a href="samba-pdc.html" title="Chapter5.Domain Control">the chapter about samba as a PDC</a>.
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889816"></a>Active Directory Domain Control</h3></div></div><div></div></div><p>
As of the release of MS Windows 2000 and Active Directory, this information is now stored
in a directory that can be replicated and for which partial or full administrative control
can be delegated. Samba-3 is NOT able to be a Domain Controller within an Active Directory
tree, and it can not be an Active Directory server. This means that Samba-3 also can NOT
act as a Backup Domain Controller to an Active Directory Domain Controller.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894383"></a>What qualifies a Domain Controller on the network?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889836"></a>What qualifies a Domain Controller on the network?</h3></div></div><div></div></div><p>
Every machine that is a Domain Controller for the domain SAMBA has to register the NetBIOS
group name SAMBA&lt;#1c&gt; with the WINS server and/or by broadcast on the local network.
The PDC also registers the unique NetBIOS name SAMBA&lt;#1b&gt; with the WINS server.
The name type &lt;#1b&gt; name is normally reserved for the Domain Master Browser, a role
that has nothing to do with anything related to authentication, but the Microsoft Domain
implementation requires the domain master browser to be on the same machine as the PDC.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894406"></a>How does a Workstation find its domain controller?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889863"></a>How does a Workstation find its domain controller?</h3></div></div><div></div></div><p>
An MS Windows NT4 / 200x / XP Professional workstation in the domain SAMBA that wants a
local user to be authenticated has to find the domain controller for SAMBA. It does this
by doing a NetBIOS name query for the group name SAMBA&lt;#1c&gt;. It assumes that each
@@ -165,22 +161,22 @@ of the machines it gets back from the queries is a domain controller and can ans
requests. To not open security holes both the workstation and the selected domain controller
authenticate each other. After that the workstation sends the user's credentials (name and
password) to the local Domain Controller, for validation.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894432"></a>Backup Domain Controller Configuration</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2889908"></a>Backup Domain Controller Configuration</h2></div></div><div></div></div><p>
Several things have to be done:
</p><div class="itemizedlist"><ul type="disc"><li><p>
The domain SID has to be the same on the PDC and the BDC. This used to
be stored in the file private/MACHINE.SID. This file is not created
- anymore since Samba 2.2.5 or even earlier. Nowadays the domain SID is
- stored in the file private/secrets.tdb. Simply copying the secrets.tdb
+ since Samba 2.2.5. Nowadays the domain SID is stored in the file
+ private/secrets.tdb. Simply copying the secrets.tdb
from the PDC to the BDC does not work, as the BDC would
generate a new SID for itself and override the domain SID with this
new BDC SID.</p><p>
To retrieve the domain SID from the PDC or an existing BDC and store it in the
secrets.tdb, execute:
</p><pre class="screen">
- <tt class="prompt">root# </tt><b class="userinput"><tt>net rpc getsid</tt></b>
- </pre></li><li><p>
- The Unix user database has to be synchronized from the PDC to the
+<tt class="prompt">root# </tt><b class="userinput"><tt>net rpc getsid</tt></b>
+</pre></li><li><p>
+ The UNIX user database has to be synchronized from the PDC to the
BDC. This means that both the /etc/passwd and /etc/group have to be
replicated from the PDC to the BDC. This can be done manually
whenever changes are made, or the PDC is set up as a NIS master
@@ -200,23 +196,30 @@ Several things have to be done:
BDC. This can be done manually whenever login scripts are changed,
or it can be done automatically together with the smbpasswd
synchronization.
- </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894534"></a>Example Configuration</h3></div></div><div></div></div><p>
+ </p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890011"></a>Example Configuration</h3></div></div><div></div></div><p>
Finally, the BDC has to be found by the workstations. This can be done by setting:
-</p><pre class="programlisting">
- workgroup = SAMBA
- domain master = no
- domain logons = yes
-</pre><p>
-in the <i class="parameter"><tt>[global]</tt></i>-section of the <tt class="filename">smb.conf</tt> of the BDC. This makes the BDC
+</p><div class="example"><a name="id2890026"></a><p class="title"><b>Example6.2.Minimal setup for being a BDC</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = no</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>idmap backend = ldapsam://slave-ldap.quenya.org</tt></i></td></tr></table></div><p>
+In the <i class="parameter"><tt>[global]</tt></i>-section of the <tt class="filename">smb.conf</tt> of the BDC. This makes the BDC
only register the name SAMBA&lt;#1c&gt; with the WINS server. This is no
problem as the name SAMBA&lt;#1c&gt; is a NetBIOS group name that is meant to
-be registered by more than one machine. The parameter 'domain master =
-no' forces the BDC not to register SAMBA&lt;#1b&gt; which as a unique NetBIOS
+be registered by more than one machine. The parameter
+<a class="indexterm" name="id2890094"></a><i class="parameter"><tt>domain master</tt></i> = no
+forces the BDC not to register SAMBA&lt;#1b&gt; which as a unique NetBIOS
name is reserved for the Primary Domain Controller.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2894584"></a>Common Errors</h2></div></div><div></div></div><p>
+</p><p>
+The <i class="parameter"><tt>idmap backend</tt></i> will redirect the <b class="command">winbindd</b> utility to
+use the LDAP database to resolve all UIDs and GIDs for UNIX accounts.
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+Samba-3 has introduced a new ID mapping facility. One of the features of this facility is that it
+allows greater flexibility in how user and group IDs are handled in respect of NT Domain User and Group
+SIDs. One of the new facilities provides for explicitly ensuring that UNIX / Linux UID and GID values
+will be consistent on the PDC, all BDCs and all Domain Member servers. The parameter that controls this
+is called <i class="parameter"><tt>idmap backend</tt></i>. Please refer to the man page for <tt class="filename">smb.conf</tt> for more information
+regarding it's behaviour. Do NOT set this parameter except where an LDAP backend (ldapsam) is in use.
+</p></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890167"></a>Common Errors</h2></div></div><div></div></div><p>
As this is a rather new area for Samba there are not many examples that we may refer to. Keep
watching for updates to this section.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894597"></a>Machine Accounts keep expiring, what can I do?</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890181"></a>Machine Accounts keep expiring, what can I do?</h3></div></div><div></div></div><p>
This problem will occur when occur when the passdb (SAM) files are copied from a central
server but the local Backup Domain Controllers. Local machine trust account password updates
are not copied back to the central server. The newer machine account password is then over
@@ -227,18 +230,15 @@ to proceed and the account expiry error will be reported.
</p><p>
The solution: use a more robust passdb backend, such as the ldapsam backend, setting up
an slave LDAP server for each BDC, and a master LDAP server for the PDC.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894629"></a>Can Samba be a Backup Domain Controller to an NT4 PDC?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890212"></a>Can Samba be a Backup Domain Controller to an NT4 PDC?</h3></div></div><div></div></div><p>
With version 2.2, no. The native NT4 SAM replication protocols have not yet been fully
implemented. The Samba Team is working on understanding and implementing the protocols,
-but this work has not been finished for version 2.2.
-</p><p>
-With version 3.0, the work on both the replication protocols and a suitable storage
-mechanism has progressed, and some form of NT4 BDC support is expected soon.
+but this work has not been finished for Samba-3.
</p><p>
-Can I get the benefits of a BDC with Samba? Yes. The main reason for implementing a
+Can I get the benefits of a BDC with Samba? Yes, but only to a Samba PDC. The main reason for implementing a
BDC is availability. If the PDC is a Samba machine, a second Samba machine can be set up to
service logon requests whenever the PDC is down.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894662"></a>How do I replicate the smbpasswd file?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890238"></a>How do I replicate the smbpasswd file?</h3></div></div><div></div></div><p>
Replication of the smbpasswd file is sensitive. It has to be done whenever changes
to the SAM are made. Every user's password change is done in the smbpasswd file and
has to be replicated to the BDC. So replicating the smbpasswd file very often is necessary.
@@ -252,9 +252,9 @@ to type a password.
As said a few times before, use of this method is broken and flawed. Machine trust
accounts will go out of sync, resulting in a very broken domain. This method is
<span class="emphasis"><em>not</em></span> recommended. Try using LDAP instead.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894707"></a>Can I do this all with LDAP?</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890283"></a>Can I do this all with LDAP?</h3></div></div><div></div></div><p>
The simple answer is YES. Samba's pdb_ldap code supports binding to a replica
LDAP server, and will also follow referrals and rebind to the master if it ever
needs to make a modification to the database. (Normally BDCs are read only, so
this will not occur often).
-</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="samba-pdc.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="domain-member.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter5.Domain Control</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter7.Domain Membership</td></tr></table></div></body></html>
+</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="samba-pdc.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="domain-member.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter5.Domain Control</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter7.Domain Membership</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/samba-doc.html b/docs/htmldocs/samba-doc.html
new file mode 100644
index 00000000000..f5dfd498888
--- /dev/null
+++ b/docs/htmldocs/samba-doc.html
@@ -0,0 +1,72 @@
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>SAMBA Project Documentation</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><meta name="description" content="
+This book is a collection of HOWTOs added to Samba documentation over the years.
+Samba is always under development, and so is its' documentation. This release of the
+documentation represents a major revision or layout as well as contents.
+The most recent version of this document can be found at
+http://www.samba.org/
+on the &quot;Documentation&quot; page. Please send updates to
+Jelmer Vernooij,
+John H. Terpstra or
+Gerald (Jerry) Carter.
+
+The Samba-Team would like to express sincere thanks to the many people who have with
+or without their knowledge contributed to this update. The size and scope of this
+project would not have been possible without significant community contribution. A not
+insignificant number of ideas for inclusion (if not content itself) has been obtained
+from a number of Unofficial HOWTOs - to each such author a big &quot;Thank-you&quot; is also offered.
+Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and
+application knowledge that is most to be desired by many Samba users and administrators.
+"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="next" href="pr01.html" title="Legal Notice"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">SAMBA Project Documentation</th></tr><tr><td width="20%" align="left"></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="pr01.html">Next</a></td></tr></table><hr></div><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="Samba-HOWTO-Collection"></a>SAMBA Project Documentation</h1></div><div><div class="authorgroup"><h4 class="editedby">Edited by</h4><h3 class="editor"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><h3 class="editor"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><h3 class="editor"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3></div></div><div><p class="pubdate">Monday April 21, 2003</p></div><div><div class="abstract"><p class="title"><b>Abstract</b></p><p>
+This book is a collection of HOWTOs added to Samba documentation over the years.
+Samba is always under development, and so is its' documentation. This release of the
+documentation represents a major revision or layout as well as contents.
+The most recent version of this document can be found at
+<a href="http://www.samba.org/" target="_top">http://www.samba.org/</a>
+on the &quot;Documentation&quot; page. Please send updates to
+<a href="mailto:jelmer@samba.org" target="_top">Jelmer Vernooij</a>,
+<a href="mailto:jht@samba.org" target="_top">John H. Terpstra</a> or
+<a href="mailto:jerry@samba.org" target="_top">Gerald (Jerry) Carter</a>.
+</p><p>
+The Samba-Team would like to express sincere thanks to the many people who have with
+or without their knowledge contributed to this update. The size and scope of this
+project would not have been possible without significant community contribution. A not
+insignificant number of ideas for inclusion (if not content itself) has been obtained
+from a number of Unofficial HOWTOs - to each such author a big &quot;Thank-you&quot; is also offered.
+Please keep publishing your Unofficial HOWTOs - they are a source of inspiration and
+application knowledge that is most to be desired by many Samba users and administrators.
+</p></div></div></div><div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="pr01.html">Legal Notice</a></dt><dt><a href="pr02.html">Attributions</a></dt><dt>I. <a href="introduction.html">General Installation</a></dt><dd><dl><dt>1. <a href="IntroSMB.html">Introduction to Samba</a></dt><dd><dl><dt><a href="IntroSMB.html#id2817919">Background</a></dt><dt><a href="IntroSMB.html#id2817978">Terminology</a></dt><dt><a href="IntroSMB.html#id2818169">Related Projects</a></dt><dt><a href="IntroSMB.html#id2818237">SMB Methodology</a></dt><dt><a href="IntroSMB.html#id2818345">Epilogue</a></dt><dt><a href="IntroSMB.html#id2818430">Miscellaneous</a></dt></dl></dd><dt>2. <a href="install.html">How to Install and Test SAMBA</a></dt><dd><dl><dt><a href="install.html#id2883917">Obtaining and installing samba</a></dt><dt><a href="install.html#id2883961">Configuring samba (smb.conf)</a></dt><dd><dl><dt><a href="install.html#id2883999">Example Configuration</a></dt><dt><a href="install.html#id2884191">SWAT</a></dt></dl></dd><dt><a href="install.html#id2884236">Try listing the shares available on your
+ server</a></dt><dt><a href="install.html#id2884294">Try connecting with the unix client</a></dt><dt><a href="install.html#id2884411">Try connecting from another SMB client</a></dt><dt><a href="install.html#id2884494">What If Things Don't Work?</a></dt><dt><a href="install.html#id2884528">Common Errors</a></dt><dd><dl><dt><a href="install.html#id2884539">Large number of smbd processes</a></dt><dt><a href="install.html#id2884640">&quot;open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested&quot;</a></dt><dt><a href="install.html#id2884661">&quot;The network name cannot be found&quot;</a></dt></dl></dd></dl></dd><dt>3. <a href="FastStart.html">Fast Start for the Impatient</a></dt><dd><dl><dt><a href="FastStart.html#id2884787">Note</a></dt></dl></dd></dl></dd><dt>II. <a href="type.html">Server Configuration Basics</a></dt><dd><dl><dt>4. <a href="ServerType.html">Server Types and Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2884977">Features and Benefits</a></dt><dt><a href="ServerType.html#id2885071">Server Types</a></dt><dt><a href="ServerType.html#id2885157">Samba Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2885276">User Level Security</a></dt><dt><a href="ServerType.html#id2885414">Share Level Security</a></dt><dt><a href="ServerType.html#id2885551">Domain Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2885808">ADS Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2885909">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="ServerType.html#id2886191">Password checking</a></dt><dt><a href="ServerType.html#id2886386">Common Errors</a></dt><dd><dl><dt><a href="ServerType.html#id2886414">What makes Samba a SERVER?</a></dt><dt><a href="ServerType.html#id2886453">What makes Samba a Domain Controller?</a></dt><dt><a href="ServerType.html#id2886490">What makes Samba a Domain Member?</a></dt><dt><a href="ServerType.html#id2886529">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="samba-pdc.html">Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2886861">Features and Benefits</a></dt><dt><a href="samba-pdc.html#id2887076">Basics of Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2887090">Domain Controller Types</a></dt><dt><a href="samba-pdc.html#id2887335">Preparing for Domain Control</a></dt></dl></dd><dt><a href="samba-pdc.html#id2887717">Domain Control - Example Configuration</a></dt><dt><a href="samba-pdc.html#id2888205">Samba ADS Domain Control</a></dt><dt><a href="samba-pdc.html#id2888257">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="samba-pdc.html#id2888272">Domain Network Logon Service</a></dt><dt><a href="samba-pdc.html#id2888704">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="samba-pdc.html#id2888850">Common Errors</a></dt><dd><dl><dt><a href="samba-pdc.html#id2888857">'$' cannot be included in machine name</a></dt><dt><a href="samba-pdc.html#id2888916">Joining domain fails because of existing machine account</a></dt><dt><a href="samba-pdc.html#id2888975">The system can not log you on (C000019B)....</a></dt><dt><a href="samba-pdc.html#id2889059">The machine trust account not accessible</a></dt><dt><a href="samba-pdc.html#id2889131">Account disabled</a></dt><dt><a href="samba-pdc.html#id2889164">Domain Controller Unavailable</a></dt><dt><a href="samba-pdc.html#id2889186">Can not log onto domain member workstation after joining domain</a></dt></dl></dd></dl></dd><dt>6. <a href="samba-bdc.html">Backup Domain Control</a></dt><dd><dl><dt><a href="samba-bdc.html#id2889347">Features And Benefits</a></dt><dt><a href="samba-bdc.html#id2889536">Essential Background Information</a></dt><dd><dl><dt><a href="samba-bdc.html#id2889565">MS Windows NT4 Style Domain Control</a></dt><dt><a href="samba-bdc.html#id2889816">Active Directory Domain Control</a></dt><dt><a href="samba-bdc.html#id2889836">What qualifies a Domain Controller on the network?</a></dt><dt><a href="samba-bdc.html#id2889863">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="samba-bdc.html#id2889908">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="samba-bdc.html#id2890011">Example Configuration</a></dt></dl></dd><dt><a href="samba-bdc.html#id2890167">Common Errors</a></dt><dd><dl><dt><a href="samba-bdc.html#id2890181">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="samba-bdc.html#id2890212">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="samba-bdc.html#id2890238">How do I replicate the smbpasswd file?</a></dt><dt><a href="samba-bdc.html#id2890283">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="domain-member.html">Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2890490">Features and Benefits</a></dt><dt><a href="domain-member.html#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="domain-member.html#id2890821">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2891126">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="domain-member.html#id2891341">&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2891414">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="domain-member.html#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="domain-member.html#id2891624">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="domain-member.html#id2892061">Why is this better than security = server?</a></dt></dl></dd><dt><a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2892246">Setup your smb.conf</a></dt><dt><a href="domain-member.html#id2892373">Setup your /etc/krb5.conf</a></dt><dt><a href="domain-member.html#ads-create-machine-account">Create the computer account</a></dt><dt><a href="domain-member.html#ads-test-server">Test your server setup</a></dt><dt><a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="domain-member.html#id2892751">Notes</a></dt></dl></dd><dt><a href="domain-member.html#id2892773">Common Errors</a></dt><dd><dl><dt><a href="domain-member.html#id2892816">Can Not Add Machine Back to Domain</a></dt><dt><a href="domain-member.html#id2892848">Adding Machine to Domain Fails</a></dt><dt><a href="domain-member.html#id2892992">I can't join a Windows 2003 PDC</a></dt></dl></dd></dl></dd><dt>8. <a href="StandAloneServer.html">Stand-Alone Servers</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2893079">Features and Benefits</a></dt><dt><a href="StandAloneServer.html#id2893117">Background</a></dt><dt><a href="StandAloneServer.html#id2893191">Example Configuration</a></dt><dd><dl><dt><a href="StandAloneServer.html#RefDocServer">Reference Documentation Server</a></dt><dt><a href="StandAloneServer.html#SimplePrintServer">Central Print Serving</a></dt></dl></dd><dt><a href="StandAloneServer.html#id2893714">Common Errors</a></dt></dl></dd><dt>9. <a href="ClientConfig.html">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="ClientConfig.html#id2893778">Note</a></dt></dl></dd></dl></dd><dt>III. <a href="optional.html">Advanced Configuration</a></dt><dd><dl><dt>10. <a href="NetworkBrowsing.html">Samba / MS Windows Network Browsing Guide</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2893931">Features and Benefits</a></dt><dt><a href="NetworkBrowsing.html#id2894019">What is Browsing?</a></dt><dt><a href="NetworkBrowsing.html#id2894333">Discussion</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2894349">NetBIOS over TCP/IP</a></dt><dt><a href="NetworkBrowsing.html#id2894584">TCP/IP - without NetBIOS</a></dt><dt><a href="NetworkBrowsing.html#id2894750">DNS and Active Directory</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2894896">How Browsing Functions</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#DMB">Setting up WORKGROUP Browsing</a></dt><dt><a href="NetworkBrowsing.html#id2895446">Setting up DOMAIN Browsing</a></dt><dt><a href="NetworkBrowsing.html#browse-force-master">Forcing Samba to be the master</a></dt><dt><a href="NetworkBrowsing.html#id2895844">Making Samba the domain master</a></dt><dt><a href="NetworkBrowsing.html#id2896022">Note about broadcast addresses</a></dt><dt><a href="NetworkBrowsing.html#id2896045">Multiple interfaces</a></dt><dt><a href="NetworkBrowsing.html#id2896081">Use of the Remote Announce parameter</a></dt><dt><a href="NetworkBrowsing.html#id2896240">Use of the Remote Browse Sync parameter</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2896317">WINS - The Windows Internetworking Name Server</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2896504">Setting up a WINS server</a></dt><dt><a href="NetworkBrowsing.html#id2896761">WINS Replication</a></dt><dt><a href="NetworkBrowsing.html#id2896787">Static WINS Entries</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2896875">Helpful Hints</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2896889">Windows Networking Protocols</a></dt><dt><a href="NetworkBrowsing.html#id2896967">Name Resolution Order</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2897133">Technical Overview of browsing</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2897187">Browsing support in Samba</a></dt><dt><a href="NetworkBrowsing.html#id2897308">Problem resolution</a></dt><dt><a href="NetworkBrowsing.html#id2897396">Browsing across subnets</a></dt></dl></dd><dt><a href="NetworkBrowsing.html#id2898078">Common Errors</a></dt><dd><dl><dt><a href="NetworkBrowsing.html#id2898092">How can one flush the Samba NetBIOS name cache without restarting Samba?</a></dt><dt><a href="NetworkBrowsing.html#id2898121">My client reports &quot;This server is not configured to list shared resources&quot;</a></dt><dt><a href="NetworkBrowsing.html#id2898166">I get an Unable to browse the network error</a></dt></dl></dd></dl></dd><dt>11. <a href="passdb.html">Account Information Databases</a></dt><dd><dl><dt><a href="passdb.html#id2898446">Features and Benefits</a></dt><dd><dl><dt><a href="passdb.html#id2898460">Backwards Compatibility Backends</a></dt><dt><a href="passdb.html#id2898561">New Backends</a></dt></dl></dd><dt><a href="passdb.html#id2898749">Technical Information</a></dt><dd><dl><dt><a href="passdb.html#id2898874">Important Notes About Security</a></dt><dt><a href="passdb.html#id2899165">Mapping User Identifiers between MS Windows and UNIX</a></dt><dt><a href="passdb.html#idmapbackend">Mapping Common UIDs/GIDs on Distributed Machines</a></dt></dl></dd><dt><a href="passdb.html#acctmgmttools">Account Management Tools</a></dt><dd><dl><dt><a href="passdb.html#id2899351">The smbpasswd Command</a></dt><dt><a href="passdb.html#id2899622">The pdbedit Command</a></dt></dl></dd><dt><a href="passdb.html#id2899860">Password Backends</a></dt><dd><dl><dt><a href="passdb.html#id2899902">Plain Text</a></dt><dt><a href="passdb.html#id2899942">smbpasswd - Encrypted Password Database</a></dt><dt><a href="passdb.html#id2900055">tdbsam</a></dt><dt><a href="passdb.html#id2900089">ldapsam</a></dt><dt><a href="passdb.html#id2901940">MySQL</a></dt><dt><a href="passdb.html#XMLpassdb">XML</a></dt></dl></dd><dt><a href="passdb.html#id2902790">Common Errors</a></dt><dd><dl><dt><a href="passdb.html#id2902796">Users can not logon</a></dt><dt><a href="passdb.html#id2902841">Users being added to wrong backend database</a></dt><dt><a href="passdb.html#id2902952">auth methods does not work</a></dt></dl></dd></dl></dd><dt>12. <a href="groupmapping.html">Mapping MS Windows and UNIX Groups</a></dt><dd><dl><dt><a href="groupmapping.html#id2903181">Features and Benefits</a></dt><dt><a href="groupmapping.html#id2903416">Discussion</a></dt><dd><dl><dt><a href="groupmapping.html#id2903652">Example Configuration</a></dt></dl></dd><dt><a href="groupmapping.html#id2903718">Configuration Scripts</a></dt><dd><dl><dt><a href="groupmapping.html#id2903732">Sample smb.conf add group script</a></dt><dt><a href="groupmapping.html#id2903817">Script to configure Group Mapping</a></dt></dl></dd><dt><a href="groupmapping.html#id2903900">Common Errors</a></dt><dd><dl><dt><a href="groupmapping.html#id2903915">Adding Groups Fails</a></dt><dt><a href="groupmapping.html#id2903984">Adding MS Windows Groups to MS Windows Groups Fails</a></dt><dt><a href="groupmapping.html#id2904010">Adding Domain Users to the Power Users group</a></dt></dl></dd></dl></dd><dt>13. <a href="AccessControls.html">File, Directory and Share Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2904266">Features and Benefits</a></dt><dt><a href="AccessControls.html#id2904395">File System Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2904431">MS Windows NTFS Comparison with UNIX File Systems</a></dt><dt><a href="AccessControls.html#id2904735">Managing Directories</a></dt><dt><a href="AccessControls.html#id2904829">File and Directory Access Control</a></dt></dl></dd><dt><a href="AccessControls.html#id2905040">Share Definition Access Controls</a></dt><dd><dl><dt><a href="AccessControls.html#id2905070">User and Group Based Controls</a></dt><dt><a href="AccessControls.html#id2905491">File and Directory Permissions Based Controls</a></dt><dt><a href="AccessControls.html#id2905871">Miscellaneous Controls</a></dt></dl></dd><dt><a href="AccessControls.html#id2906251">Access Controls on Shares</a></dt><dd><dl><dt><a href="AccessControls.html#id2906323">Share Permissions Management</a></dt></dl></dd><dt><a href="AccessControls.html#id2906623">MS Windows Access Control Lists and UNIX Interoperability</a></dt><dd><dl><dt><a href="AccessControls.html#id2906631">Managing UNIX permissions Using NT Security Dialogs</a></dt><dt><a href="AccessControls.html#id2906675">Viewing File Security on a Samba Share</a></dt><dt><a href="AccessControls.html#id2906755">Viewing file ownership</a></dt><dt><a href="AccessControls.html#id2906887">Viewing File or Directory Permissions</a></dt><dt><a href="AccessControls.html#id2907132">Modifying file or directory permissions</a></dt><dt><a href="AccessControls.html#id2907296">Interaction with the standard Samba create mask
+ parameters</a></dt><dt><a href="AccessControls.html#id2907693">Interaction with the standard Samba file attribute mapping</a></dt></dl></dd><dt><a href="AccessControls.html#id2907788">Common Errors</a></dt><dd><dl><dt><a href="AccessControls.html#id2907802">Users can not write to a public share</a></dt><dt><a href="AccessControls.html#id2908232">I have set force user but Samba still makes root the owner of all the files I touch!</a></dt><dt><a href="AccessControls.html#id2908284">MS Word with Samba changes owner of file</a></dt></dl></dd></dl></dd><dt>14. <a href="locking.html">File and Record Locking</a></dt><dd><dl><dt><a href="locking.html#id2908532">Features and Benefits</a></dt><dt><a href="locking.html#id2908589">Discussion</a></dt><dd><dl><dt><a href="locking.html#id2908732">Opportunistic Locking Overview</a></dt></dl></dd><dt><a href="locking.html#id2909449">Samba Opportunistic Locking Control</a></dt><dd><dl><dt><a href="locking.html#id2909569">Example Configuration</a></dt></dl></dd><dt><a href="locking.html#id2909983">MS Windows Opportunistic Locking and Caching Controls</a></dt><dd><dl><dt><a href="locking.html#id2910208">Workstation Service Entries</a></dt><dt><a href="locking.html#id2910237">Server Service Entries</a></dt></dl></dd><dt><a href="locking.html#id2910317">Persistent Data Corruption</a></dt><dt><a href="locking.html#id2910345">Common Errors</a></dt><dd><dl><dt><a href="locking.html#id2910419">locking.tdb error messages</a></dt><dt><a href="locking.html#id2910456">Problems saving files in MS Office on Windows XP</a></dt><dt><a href="locking.html#id2910479">Long delays deleting files over network with XP SP1</a></dt></dl></dd><dt><a href="locking.html#id2910511">Additional Reading</a></dt></dl></dd><dt>15. <a href="securing-samba.html">Securing Samba</a></dt><dd><dl><dt><a href="securing-samba.html#id2910685">Introduction</a></dt><dt><a href="securing-samba.html#id2910722">Features and Benefits</a></dt><dt><a href="securing-samba.html#id2910796">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="securing-samba.html#id2910816">Using host based protection</a></dt><dt><a href="securing-samba.html#id2910915">User based protection</a></dt><dt><a href="securing-samba.html#id2910975">Using interface protection</a></dt><dt><a href="securing-samba.html#id2911042">Using a firewall</a></dt><dt><a href="securing-samba.html#id2911098">Using a IPC$ share deny</a></dt><dt><a href="securing-samba.html#id2911187">NTLMv2 Security</a></dt></dl></dd><dt><a href="securing-samba.html#id2911245">Upgrading Samba</a></dt><dt><a href="securing-samba.html#id2911271">Common Errors</a></dt><dd><dl><dt><a href="securing-samba.html#id2911289">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="securing-samba.html#id2911314">Why can users access home directories of other users?</a></dt></dl></dd></dl></dd><dt>16. <a href="InterdomainTrusts.html">Interdomain Trust Relationships</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2911605">Features and Benefits</a></dt><dt><a href="InterdomainTrusts.html#id2911633">Trust Relationship Background</a></dt><dt><a href="InterdomainTrusts.html#id2911721">Native MS Windows NT4 Trusts Configuration</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#id2911750">Creating an NT4 Domain Trust</a></dt><dt><a href="InterdomainTrusts.html#id2911822">Completing an NT4 Domain Trust</a></dt><dt><a href="InterdomainTrusts.html#id2911868">Inter-Domain Trust Facilities</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2912046">Configuring Samba NT-style Domain Trusts</a></dt><dd><dl><dt><a href="InterdomainTrusts.html#samba-trusted-domain">Samba as the Trusted Domain</a></dt><dt><a href="InterdomainTrusts.html#id2912232">Samba as the Trusting Domain</a></dt></dl></dd><dt><a href="InterdomainTrusts.html#id2912370">NT4-style Domain Trusts with Windows 2000</a></dt><dt><a href="InterdomainTrusts.html#id2912476">Common Errors</a></dt></dl></dd><dt>17. <a href="msdfs.html">Hosting a Microsoft Distributed File System tree on Samba</a></dt><dd><dl><dt><a href="msdfs.html#id2912546">Features and Benefits</a></dt><dt><a href="msdfs.html#id2912820">Common Errors</a></dt></dl></dd><dt>18. <a href="printing.html">Classical Printing Support</a></dt><dd><dl><dt><a href="printing.html#id2912941">Features and Benefits</a></dt><dt><a href="printing.html#id2913045">Technical Introduction</a></dt><dd><dl><dt><a href="printing.html#id2913083">What happens if you send a Job from a Client</a></dt><dt><a href="printing.html#id2913154">Printing Related Configuration Parameters</a></dt><dt><a href="printing.html#id2913251">Parameters Recommended for Use</a></dt></dl></dd><dt><a href="printing.html#id2913718">A simple Configuration to Print</a></dt><dd><dl><dt><a href="printing.html#id2913883">Verification of &quot;Settings in Use&quot; with testparm</a></dt><dt><a href="printing.html#id2914010">A little Experiment to warn you</a></dt></dl></dd><dt><a href="printing.html#id2914370">Extended Sample Configuration to Print</a></dt><dt><a href="printing.html#id2914701">Detailed Explanation of the Example's Settings</a></dt><dd><dl><dt><a href="printing.html#id2914714">The [global] Section</a></dt><dt><a href="printing.html#id2915245">The [printers] Section</a></dt><dt><a href="printing.html#id2915706">Any [my_printer_name] Section</a></dt><dt><a href="printing.html#id2916027">Print Commands</a></dt><dt><a href="printing.html#id2916108">Default Print Commands for various UNIX Print Subsystems</a></dt><dt><a href="printing.html#id2916791">Setting up your own Print Commands</a></dt></dl></dd><dt><a href="printing.html#id2917131">Innovations in Samba Printing since 2.2</a></dt><dd><dl><dt><a href="printing.html#id2917292">Client Drivers on Samba Server for Point'n'Print</a></dt><dt><a href="printing.html#id2917453">The [printer$] Section is removed from Samba 3</a></dt><dt><a href="printing.html#id2917566">Creating the [print$] Share</a></dt><dt><a href="printing.html#id2917756">Parameters in the [print$] Section</a></dt><dt><a href="printing.html#id2918066">Subdirectory Structure in [print$]</a></dt></dl></dd><dt><a href="printing.html#id2918239">Installing Drivers into [print$]</a></dt><dd><dl><dt><a href="printing.html#id2918333">Setting Drivers for existing Printers with a Client GUI</a></dt><dt><a href="printing.html#id2918531">Setting Drivers for existing Printers with
+rpcclient</a></dt></dl></dd><dt><a href="printing.html#id2920241">Client Driver Install Procedure</a></dt><dd><dl><dt><a href="printing.html#id2920260">The first Client Driver Installation</a></dt><dt><a href="printing.html#id2920462">IMPORTANT! Setting Device Modes on new Printers</a></dt><dt><a href="printing.html#id2920763">Further Client Driver Install Procedures</a></dt><dt><a href="printing.html#id2920857">Always make first Client Connection as root or &quot;printer admin&quot;</a></dt></dl></dd><dt><a href="printing.html#id2921029">Other Gotchas</a></dt><dd><dl><dt><a href="printing.html#id2921063">Setting Default Print Options for the Client Drivers</a></dt><dt><a href="printing.html#id2921530">Supporting large Numbers of Printers</a></dt><dt><a href="printing.html#id2921841">Adding new Printers with the Windows NT APW</a></dt><dt><a href="printing.html#id2922136">Weird Error Message Cannot connect under a
+different Name</a></dt><dt><a href="printing.html#id2922236">Be careful when assembling Driver Files</a></dt><dt><a href="printing.html#id2922594">Samba and Printer Ports</a></dt><dt><a href="printing.html#id2922687">Avoiding the most common Misconfigurations of the Client Driver</a></dt></dl></dd><dt><a href="printing.html#id2922712">The Imprints Toolset</a></dt><dd><dl><dt><a href="printing.html#id2922768">What is Imprints?</a></dt><dt><a href="printing.html#id2922810">Creating Printer Driver Packages</a></dt><dt><a href="printing.html#id2922828">The Imprints Server</a></dt><dt><a href="printing.html#id2922853">The Installation Client</a></dt></dl></dd><dt><a href="printing.html#id2923008">Add Network Printers at Logon without User Interaction</a></dt><dt><a href="printing.html#id2923342">The addprinter command</a></dt><dt><a href="printing.html#id2923388">Migration of &quot;Classical&quot; printing to Samba</a></dt><dt><a href="printing.html#id2923561">Publishing Printer Information in Active Directory or LDAP</a></dt><dt><a href="printing.html#id2923575">Common Errors</a></dt><dd><dl><dt><a href="printing.html#id2923582">I give my root password but I don't get access</a></dt><dt><a href="printing.html#id2923615">My printjobs get spooled into the spooling directory, but then get lost</a></dt></dl></dd></dl></dd><dt>19. <a href="CUPS-printing.html">CUPS Printing Support in Samba 3.0</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2923750">Introduction</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2923756">Features and Benefits</a></dt><dt><a href="CUPS-printing.html#id2923811">Overview</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2923880">Basic Configuration of CUPS support</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2923972">Linking of smbd with libcups.so</a></dt><dt><a href="CUPS-printing.html#id2924213">Simple smb.conf Settings for CUPS</a></dt><dt><a href="CUPS-printing.html#id2924395">More complex smb.conf Settings for
+CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2924750">Advanced Configuration</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2924770">Central spooling vs. &quot;Peer-to-Peer&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2924825">CUPS/Samba as a &quot;spooling-only&quot; Print Server; &quot;raw&quot; printing
+with Vendor Drivers on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2924894">Driver Installation Methods on Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2924971">Explicitly enable &quot;raw&quot; printing for
+application/octet-stream!</a></dt><dt><a href="CUPS-printing.html#id2925177">Three familiar Methods for driver upload plus a new one</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2925317">Using CUPS/Samba in an advanced Way -- intelligent printing
+with PostScript Driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#gdipost">GDI on Windows -- PostScript on UNIX</a></dt><dt><a href="CUPS-printing.html#id2925497">Windows Drivers, GDI and EMF</a></dt><dt><a href="CUPS-printing.html#id2925650">UNIX Printfile Conversion and GUI Basics</a></dt><dt><a href="CUPS-printing.html#post-and-ghost">PostScript and Ghostscript</a></dt><dt><a href="CUPS-printing.html#id2925951">Ghostscript -- the Software RIP for non-PostScript Printers</a></dt><dt><a href="CUPS-printing.html#id2926092">PostScript Printer Description (PPD) Specification</a></dt><dt><a href="CUPS-printing.html#id2926179">CUPS can use all Windows-formatted Vendor PPDs</a></dt><dt><a href="CUPS-printing.html#id2926285">CUPS also uses PPDs for non-PostScript Printers</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2926306">The CUPS Filtering Architecture</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2926501">MIME types and CUPS Filters</a></dt><dt><a href="CUPS-printing.html#id2926707">MIME type Conversion Rules</a></dt><dt><a href="CUPS-printing.html#id2926862">Filter Requirements</a></dt><dt><a href="CUPS-printing.html#id2927043">Prefilters</a></dt><dt><a href="CUPS-printing.html#id2927153">pstops</a></dt><dt><a href="CUPS-printing.html#id2927264">pstoraster</a></dt><dt><a href="CUPS-printing.html#id2927459">imagetops and imagetoraster</a></dt><dt><a href="CUPS-printing.html#id2927523">rasterto [printers specific]</a></dt><dt><a href="CUPS-printing.html#id2927675">CUPS Backends</a></dt><dt><a href="CUPS-printing.html#id2928022">cupsomatic/Foomatic -- how do they fit into the Picture?</a></dt><dt><a href="CUPS-printing.html#id2928168">The Complete Picture</a></dt><dt><a href="CUPS-printing.html#id2928183">mime.convs</a></dt><dt><a href="CUPS-printing.html#id2928246">&quot;Raw&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2928335">&quot;application/octet-stream&quot; printing</a></dt><dt><a href="CUPS-printing.html#id2928581">PostScript Printer Descriptions (PPDs) for non-PS Printers</a></dt><dt><a href="CUPS-printing.html#id2928848">Difference between cupsomatic/foomatic-rip and
+native CUPS printing</a></dt><dt><a href="CUPS-printing.html#id2929083">Examples for filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2929420">Sources of CUPS drivers / PPDs</a></dt><dt><a href="CUPS-printing.html#id2929572">Printing with Interface Scripts</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2929667">Network printing (purely Windows)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2929677">From Windows Clients to an NT Print Server</a></dt><dt><a href="CUPS-printing.html#id2929741">Driver Execution on the Client</a></dt><dt><a href="CUPS-printing.html#id2929818">Driver Execution on the Server</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2929936">Network Printing (Windows clients -- UNIX/Samba Print
+Servers)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2929956">From Windows Clients to a CUPS/Samba Print Server</a></dt><dt><a href="CUPS-printing.html#id2930169">Samba receiving Jobfiles and passing them to CUPS</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2930255">Network PostScript RIP: CUPS Filters on Server -- clients use
+PostScript Driver with CUPS-PPDs</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2930344">PPDs for non-PS Printers on UNIX</a></dt><dt><a href="CUPS-printing.html#id2930400">PPDs for non-PS Printers on Windows</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2930476">Windows Terminal Servers (WTS) as CUPS Clients</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2930493">Printer Drivers running in &quot;Kernel Mode&quot; cause many
+Problems</a></dt><dt><a href="CUPS-printing.html#id2930538">Workarounds impose Heavy Limitations</a></dt><dt><a href="CUPS-printing.html#id2930560">CUPS: a &quot;Magical Stone&quot;?</a></dt><dt><a href="CUPS-printing.html#id2930614">PostScript Drivers with no major problems -- even in Kernel
+Mode</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2930637">Setting up CUPS for driver Download</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2930710">cupsaddsmb: the unknown Utility</a></dt><dt><a href="CUPS-printing.html#id2930811">Prepare your smb.conf for cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2931030">CUPS Package of &quot;PostScript Driver for WinNT/2k/XP&quot;</a></dt><dt><a href="CUPS-printing.html#id2931268">Recognize the different Driver Files</a></dt><dt><a href="CUPS-printing.html#id2931460">Acquiring the Adobe Driver Files</a></dt><dt><a href="CUPS-printing.html#id2931493">ESP Print Pro Package of &quot;PostScript Driver for
+WinNT/2k/XP&quot;</a></dt><dt><a href="CUPS-printing.html#id2931562">Caveats to be considered</a></dt><dt><a href="CUPS-printing.html#id2931837">Benefits of using &quot;CUPS PostScript Driver for
+Windows NT/2k/XP&quot; instead of Adobe Driver</a></dt><dt><a href="CUPS-printing.html#id2932052">Run &quot;cupsaddsmb&quot; (quiet Mode)</a></dt><dt><a href="CUPS-printing.html#id2932180">Run &quot;cupsaddsmb&quot; with verbose Output</a></dt><dt><a href="CUPS-printing.html#id2932401">Understanding cupsaddsmb</a></dt><dt><a href="CUPS-printing.html#id2932551">How to recognize if cupsaddsmb completed successfully</a></dt><dt><a href="CUPS-printing.html#id2932633">cupsaddsmb with a Samba PDC</a></dt><dt><a href="CUPS-printing.html#id2932714">cupsaddsmb Flowchart</a></dt><dt><a href="CUPS-printing.html#id2932789">Installing the PostScript Driver on a Client</a></dt><dt><a href="CUPS-printing.html#id2932953">Avoiding critical PostScript Driver Settings on the
+Client</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2933086">Installing PostScript Driver Files manually (using
+rpcclient)</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2933288">A Check of the rpcclient man Page</a></dt><dt><a href="CUPS-printing.html#id2933403">Understanding the rpcclient man page</a></dt><dt><a href="CUPS-printing.html#id2933506">Producing an Example by querying a Windows Box</a></dt><dt><a href="CUPS-printing.html#id2933674">What is required for adddriver and setdriver to succeed</a></dt><dt><a href="CUPS-printing.html#id2933889">Manual Driver Installation in 15 Steps</a></dt><dt><a href="CUPS-printing.html#id2934958">Troubleshooting revisited</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2935118">The printing *.tdb Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2935364">Trivial DataBase Files</a></dt><dt><a href="CUPS-printing.html#id2935456">Binary Format</a></dt><dt><a href="CUPS-printing.html#id2935520">Losing *.tdb Files</a></dt><dt><a href="CUPS-printing.html#id2935579">Using tdbbackup</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2935716">CUPS Print Drivers from Linuxprinting.org</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2935871">foomatic-rip and Foomatic explained</a></dt><dt><a href="CUPS-printing.html#id2936640">foomatic-rip and Foomatic-PPD Download and Installation</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2937141">Page Accounting with CUPS</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2937193">Setting up Quotas</a></dt><dt><a href="CUPS-printing.html#id2937258">Correct and incorrect Accounting</a></dt><dt><a href="CUPS-printing.html#id2937303">Adobe and CUPS PostScript Drivers for Windows Clients</a></dt><dt><a href="CUPS-printing.html#id2937398">The page_log File Syntax</a></dt><dt><a href="CUPS-printing.html#id2937516">Possible Shortcomings</a></dt><dt><a href="CUPS-printing.html#id2937592">Future Developments</a></dt><dt><a href="CUPS-printing.html#id2937648">Other Accounting Tools</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2937662">Additional Material</a></dt><dt><a href="CUPS-printing.html#id2937912">Auto-Deletion or Preservation of CUPS Spool Files</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2937974">CUPS Configuration Settings explained</a></dt><dt><a href="CUPS-printing.html#id2938069">Pre-conditions</a></dt><dt><a href="CUPS-printing.html#id2938226">Manual Configuration</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2938284">In Case of Trouble.....</a></dt><dt><a href="CUPS-printing.html#id2938356">Printing from CUPS to Windows attached
+Printers</a></dt><dt><a href="CUPS-printing.html#id2938656">More CUPS filtering Chains</a></dt><dt><a href="CUPS-printing.html#id2938758">Common Errors</a></dt><dd><dl><dt><a href="CUPS-printing.html#id2938765">Win9x client can't install driver</a></dt><dt><a href="CUPS-printing.html#id2938787">&quot;cupsaddsmb&quot; keeps asking for root password in
+ neverending loop</a></dt><dt><a href="CUPS-printing.html#id2938835">&quot;cupsaddsmb&quot; gives &quot;No PPD file for printer...&quot;
+ message while PPD file is present</a></dt><dt><a href="CUPS-printing.html#id2938893">Client can't connect to Samba printer</a></dt><dt><a href="CUPS-printing.html#id2938921">Can't reconnect to Samba under new account
+ from Win2K/XP</a></dt><dt><a href="CUPS-printing.html#id2939149">Avoid being connected to the Samba server as the
+ &quot;wrong&quot; user</a></dt><dt><a href="CUPS-printing.html#id2939202">Upgrading to CUPS drivers from Adobe drivers on
+ NT/2K/XP clients gives problems</a></dt><dt><a href="CUPS-printing.html#id2939219">Can't use &quot;cupsaddsmb&quot; on Samba server which is
+ a PDC</a></dt><dt><a href="CUPS-printing.html#id2939249">Deleted Win2K printer driver is still shown</a></dt><dt><a href="CUPS-printing.html#id2939258">Win2K/XP &quot;Local Security
+ Policies&quot;</a></dt><dt><a href="CUPS-printing.html#id2939297">WinXP clients: &quot;Administrator can not install
+ printers for all local users&quot;</a></dt><dt><a href="CUPS-printing.html#id2939331">&quot;Print Change Notify&quot; functions on
+ NT-clients</a></dt><dt><a href="CUPS-printing.html#id2939354">WinXP-SP1</a></dt><dt><a href="CUPS-printing.html#id2939398">Print options for all users can't be set on Win2K/XP</a></dt><dt><a href="CUPS-printing.html#id2939689">Most common blunders in driver
+ settings on Windows clients</a></dt><dt><a href="CUPS-printing.html#id2939734">cupsaddsmb does not work
+ with newly installed printer</a></dt><dt><a href="CUPS-printing.html#id2939796">Permissions on
+/var/spool/samba/ get reset after each
+reboot</a></dt><dt><a href="CUPS-printing.html#id2939905">Printer named &quot;lp&quot;
+intermittently swallows jobs and spits out completely different
+ones</a></dt><dt><a href="CUPS-printing.html#id2939953">Location of Adobe PostScript driver files necessary for &quot;cupsaddsmb&quot;</a></dt></dl></dd><dt><a href="CUPS-printing.html#id2940008">An Overview of the CUPS Printing Processes</a></dt></dl></dd><dt>20. <a href="VFS.html">Stackable VFS modules</a></dt><dd><dl><dt><a href="VFS.html#id2940177">Features and Benefits</a></dt><dt><a href="VFS.html#id2940195">Discussion</a></dt><dt><a href="VFS.html#id2940424">Included modules</a></dt><dd><dl><dt><a href="VFS.html#id2940432">audit</a></dt><dt><a href="VFS.html#id2940474">extd_audit</a></dt><dt><a href="VFS.html#id2940604">fake_perms</a></dt><dt><a href="VFS.html#id2940622">recycle</a></dt><dt><a href="VFS.html#id2940798">netatalk</a></dt></dl></dd><dt><a href="VFS.html#id2940843">VFS modules available elsewhere</a></dt><dd><dl><dt><a href="VFS.html#id2940865">DatabaseFS</a></dt><dt><a href="VFS.html#id2940920">vscan</a></dt></dl></dd></dl></dd><dt>21. <a href="winbind.html">Winbind: Use of Domain Accounts</a></dt><dd><dl><dt><a href="winbind.html#id2941150">Features and Benefits</a></dt><dt><a href="winbind.html#id2941246">Introduction</a></dt><dt><a href="winbind.html#id2941324">What Winbind Provides</a></dt><dd><dl><dt><a href="winbind.html#id2941400">Target Uses</a></dt></dl></dd><dt><a href="winbind.html#id2941431">How Winbind Works</a></dt><dd><dl><dt><a href="winbind.html#id2941460">Microsoft Remote Procedure Calls</a></dt><dt><a href="winbind.html#id2941493">Microsoft Active Directory Services</a></dt><dt><a href="winbind.html#id2941516">Name Service Switch</a></dt><dt><a href="winbind.html#id2941652">Pluggable Authentication Modules</a></dt><dt><a href="winbind.html#id2941724">User and Group ID Allocation</a></dt><dt><a href="winbind.html#id2941757">Result Caching</a></dt></dl></dd><dt><a href="winbind.html#id2941785">Installation and Configuration</a></dt><dd><dl><dt><a href="winbind.html#id2941792">Introduction</a></dt><dt><a href="winbind.html#id2941859">Requirements</a></dt><dt><a href="winbind.html#id2941953">Testing Things Out</a></dt></dl></dd><dt><a href="winbind.html#id2943561">Conclusion</a></dt><dt><a href="winbind.html#id2943580">Common Errors</a></dt><dd><dl><dt><a href="winbind.html#id2943633">NSCD Problem Warning</a></dt></dl></dd></dl></dd><dt>22. <a href="AdvancedNetworkManagement.html">Advanced Network Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2943742">Features and Benefits</a></dt><dt><a href="AdvancedNetworkManagement.html#id2943772">Remote Server Administration</a></dt><dt><a href="AdvancedNetworkManagement.html#id2943871">Remote Desktop Management</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2943888">Remote Management from NoMachines.Com</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2944129">Network Logon Script Magic</a></dt><dd><dl><dt><a href="AdvancedNetworkManagement.html#id2944368">Adding printers without user intervention</a></dt></dl></dd><dt><a href="AdvancedNetworkManagement.html#id2944401">Common Errors</a></dt></dl></dd><dt>23. <a href="PolicyMgmt.html">System and Account Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2944479">Features and Benefits</a></dt><dt><a href="PolicyMgmt.html#id2944538">Creating and Managing System Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2944652">Windows 9x/Me Policies</a></dt><dt><a href="PolicyMgmt.html#id2944748">Windows NT4 Style Policy Files</a></dt><dt><a href="PolicyMgmt.html#id2944880">MS Windows 200x / XP Professional Policies</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2945132">Managing Account/User Policies</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2945238">Samba Editreg Toolset</a></dt><dt><a href="PolicyMgmt.html#id2945277">Windows NT4/200x</a></dt><dt><a href="PolicyMgmt.html#id2945301">Samba PDC</a></dt></dl></dd><dt><a href="PolicyMgmt.html#id2945346">System Startup and Logon Processing Overview</a></dt><dt><a href="PolicyMgmt.html#id2945496">Common Errors</a></dt><dd><dl><dt><a href="PolicyMgmt.html#id2945511">Policy Does Not Work</a></dt></dl></dd></dl></dd><dt>24. <a href="ProfileMgmt.html">Desktop Profile Management</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2945611">Features and Benefits</a></dt><dt><a href="ProfileMgmt.html#id2945646">Roaming Profiles</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2945686">Samba Configuration for Profile Handling</a></dt><dt><a href="ProfileMgmt.html#id2946178">Windows Client Profile Configuration Information</a></dt><dt><a href="ProfileMgmt.html#id2947427">Sharing Profiles between W9x/Me and NT4/200x/XP workstations</a></dt><dt><a href="ProfileMgmt.html#id2947512">Profile Migration from Windows NT4/200x Server to Samba</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2947770">Mandatory profiles</a></dt><dt><a href="ProfileMgmt.html#id2947828">Creating/Managing Group Profiles</a></dt><dt><a href="ProfileMgmt.html#id2947873">Default Profile for Windows Users</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2947893">MS Windows 9x/Me</a></dt><dt><a href="ProfileMgmt.html#id2948045">MS Windows NT4 Workstation</a></dt><dt><a href="ProfileMgmt.html#id2948600">MS Windows 200x/XP</a></dt></dl></dd><dt><a href="ProfileMgmt.html#id2949100">Common Errors</a></dt><dd><dl><dt><a href="ProfileMgmt.html#id2949130">Setting up roaming profiles for just a few user's or group's?</a></dt><dt><a href="ProfileMgmt.html#id2949201">Can NOT use Roaming Profiles</a></dt><dt><a href="ProfileMgmt.html#id2949414">Changing the default profile</a></dt></dl></dd></dl></dd><dt>25. <a href="pam.html">PAM based Distributed Authentication</a></dt><dd><dl><dt><a href="pam.html#id2949695">Features and Benefits</a></dt><dt><a href="pam.html#id2949942">Technical Discussion</a></dt><dd><dl><dt><a href="pam.html#id2949960">PAM Configuration Syntax</a></dt><dt><a href="pam.html#id2950624">Example System Configurations</a></dt><dt><a href="pam.html#id2950929">smb.conf PAM Configuration</a></dt><dt><a href="pam.html#id2951007">Remote CIFS Authentication using winbindd.so</a></dt><dt><a href="pam.html#id2951091">Password Synchronization using pam_smbpass.so</a></dt></dl></dd><dt><a href="pam.html#id2951474">Common Errors</a></dt><dd><dl><dt><a href="pam.html#id2951487">pam_winbind problem</a></dt><dt><a href="pam.html#id2951576">Winbind is not resolving users and groups</a></dt></dl></dd></dl></dd><dt>26. <a href="integrate-ms-networks.html">Integrating MS Windows networks with Samba</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2951812">Features and Benefits</a></dt><dt><a href="integrate-ms-networks.html#id2951838">Background Information</a></dt><dt><a href="integrate-ms-networks.html#id2951903">Name Resolution in a pure UNIX/Linux world</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2951960">/etc/hosts</a></dt><dt><a href="integrate-ms-networks.html#id2952110">/etc/resolv.conf</a></dt><dt><a href="integrate-ms-networks.html#id2952153">/etc/host.conf</a></dt><dt><a href="integrate-ms-networks.html#id2952204">/etc/nsswitch.conf</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2952319">Name resolution as used within MS Windows networking</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2952629">The NetBIOS Name Cache</a></dt><dt><a href="integrate-ms-networks.html#id2952692">The LMHOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2952854">HOSTS file</a></dt><dt><a href="integrate-ms-networks.html#id2952886">DNS Lookup</a></dt><dt><a href="integrate-ms-networks.html#id2952918">WINS Lookup</a></dt></dl></dd><dt><a href="integrate-ms-networks.html#id2953036">Common Errors</a></dt><dd><dl><dt><a href="integrate-ms-networks.html#id2953052">Pinging works only in one way</a></dt><dt><a href="integrate-ms-networks.html#id2953086">Very Slow Network Connections</a></dt><dt><a href="integrate-ms-networks.html#id2953137">Samba server name change problem</a></dt></dl></dd></dl></dd><dt>27. <a href="unicode.html">Unicode/Charsets</a></dt><dd><dl><dt><a href="unicode.html#id2953342">Features and Benefits</a></dt><dt><a href="unicode.html#id2953385">What are charsets and unicode?</a></dt><dt><a href="unicode.html#id2953454">Samba and charsets</a></dt><dt><a href="unicode.html#id2953583">Conversion from old names</a></dt><dt><a href="unicode.html#id2953612">Japanese charsets</a></dt><dt><a href="unicode.html#id2953751">Common errors</a></dt><dd><dl><dt><a href="unicode.html#id2953758">CP850.so can't be found</a></dt></dl></dd></dl></dd><dt>28. <a href="Backup.html">Samba Backup Techniques</a></dt><dd><dl><dt><a href="Backup.html#id2953871">Note</a></dt><dt><a href="Backup.html#id2953885">Features and Benefits</a></dt></dl></dd><dt>29. <a href="SambaHA.html">High Availability Options</a></dt><dd><dl><dt><a href="SambaHA.html#id2953955">Note</a></dt></dl></dd></dl></dd><dt>IV. <a href="migration.html">Migration and Updating</a></dt><dd><dl><dt>30. <a href="upgrading-to-3.0.html">Upgrading from Samba-2.x to Samba-3.0.0</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id2954094">New Features in Samba-3</a></dt><dt><a href="upgrading-to-3.0.html#id2954229">Configuration Parameter Changes</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id2954244">Removed Parameters</a></dt><dt><a href="upgrading-to-3.0.html#id2954370">New Parameters</a></dt><dt><a href="upgrading-to-3.0.html#id2954767">Modified Parameters (changes in behavior):</a></dt></dl></dd><dt><a href="upgrading-to-3.0.html#id2954842">New Functionality</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id2954849">Databases</a></dt><dt><a href="upgrading-to-3.0.html#id2955083">Changes in Behavior</a></dt><dt><a href="upgrading-to-3.0.html#id2955133">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id2955156">Passdb Backends and Authentication</a></dt><dt><a href="upgrading-to-3.0.html#id2955274">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id2955299">LDAP</a></dt></dl></dd></dl></dd><dt>31. <a href="NT4Migration.html">Migration from NT4 PDC to Samba-3 PDC</a></dt><dd><dl><dt><a href="NT4Migration.html#id2955644">Planning and Getting Started</a></dt><dd><dl><dt><a href="NT4Migration.html#id2955669">Objectives</a></dt><dt><a href="NT4Migration.html#id2956108">Steps In Migration Process</a></dt></dl></dd><dt><a href="NT4Migration.html#id2956323">Migration Options</a></dt><dd><dl><dt><a href="NT4Migration.html#id2956414">Planning for Success</a></dt><dt><a href="NT4Migration.html#id2956670">Samba-3 Implementation Choices</a></dt></dl></dd></dl></dd><dt>32. <a href="SWAT.html">SWAT - The Samba Web Administration Tool</a></dt><dd><dl><dt><a href="SWAT.html#id2957030">Features and Benefits</a></dt><dd><dl><dt><a href="SWAT.html#id2957079">Enabling SWAT for use</a></dt><dt><a href="SWAT.html#id2957316">Securing SWAT through SSL</a></dt><dt><a href="SWAT.html#id2957428">The SWAT Home Page</a></dt><dt><a href="SWAT.html#id2957493">Global Settings</a></dt><dt><a href="SWAT.html#id2957601">Share Settings</a></dt><dt><a href="SWAT.html#id2957665">Printers Settings</a></dt><dt><a href="SWAT.html#id2957730">The SWAT Wizard</a></dt><dt><a href="SWAT.html#id2957777">The Status Page</a></dt><dt><a href="SWAT.html#id2957829">The View Page</a></dt><dt><a href="SWAT.html#id2957853">The Password Change Page</a></dt></dl></dd></dl></dd></dl></dd><dt>V. <a href="troubleshooting.html">Troubleshooting</a></dt><dd><dl><dt>33. <a href="diagnosis.html">The Samba checklist</a></dt><dd><dl><dt><a href="diagnosis.html#id2957982">Introduction</a></dt><dt><a href="diagnosis.html#id2958022">Assumptions</a></dt><dt><a href="diagnosis.html#id2958249">The tests</a></dt></dl></dd><dt>34. <a href="problems.html">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="problems.html#id2959747">Diagnostics tools</a></dt><dd><dl><dt><a href="problems.html#id2959768">Debugging with Samba itself</a></dt><dt><a href="problems.html#id2959894">Tcpdump</a></dt><dt><a href="problems.html#id2959915">Ethereal</a></dt><dt><a href="problems.html#id2959968">The Windows Network Monitor</a></dt></dl></dd><dt><a href="problems.html#id2960285">Useful URLs</a></dt><dt><a href="problems.html#id2960326">Getting help from the mailing lists</a></dt><dt><a href="problems.html#id2960484">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="bugreport.html">Reporting Bugs</a></dt><dd><dl><dt><a href="bugreport.html#id2960613">Introduction</a></dt><dt><a href="bugreport.html#id2960681">General info</a></dt><dt><a href="bugreport.html#id2960718">Debug levels</a></dt><dt><a href="bugreport.html#id2960926">Internal errors</a></dt><dt><a href="bugreport.html#id2961060">Attaching to a running process</a></dt><dt><a href="bugreport.html#id2961107">Patches</a></dt></dl></dd></dl></dd><dt>VI. <a href="Appendixes.html">Appendixes</a></dt><dd><dl><dt>36. <a href="compiling.html">How to compile Samba</a></dt><dd><dl><dt><a href="compiling.html#id2961265">Access Samba source code via CVS</a></dt><dd><dl><dt><a href="compiling.html#id2961282">Introduction</a></dt><dt><a href="compiling.html#id2961320">CVS Access to samba.org</a></dt></dl></dd><dt><a href="compiling.html#id2961581">Accessing the samba sources via rsync and ftp</a></dt><dt><a href="compiling.html#id2961644">Verifying Samba's PGP signature</a></dt><dt><a href="compiling.html#id2961798">Building the Binaries</a></dt><dd><dl><dt><a href="compiling.html#id2961978">Compiling samba with Active Directory support</a></dt></dl></dd><dt><a href="compiling.html#id2962144">Starting the smbd and nmbd</a></dt><dd><dl><dt><a href="compiling.html#id2962252">Starting from inetd.conf</a></dt><dt><a href="compiling.html#id2962499">Alternative: starting it as a daemon</a></dt></dl></dd></dl></dd><dt>37. <a href="Portability.html">Portability</a></dt><dd><dl><dt><a href="Portability.html#id2962662">HPUX</a></dt><dt><a href="Portability.html#id2962750">SCO UNIX</a></dt><dt><a href="Portability.html#id2962780">DNIX</a></dt><dt><a href="Portability.html#id2962953">RedHat Linux Rembrandt-II</a></dt><dt><a href="Portability.html#id2962995">AIX</a></dt><dd><dl><dt><a href="Portability.html#id2963002">Sequential Read Ahead</a></dt></dl></dd><dt><a href="Portability.html#id2963029">Solaris</a></dt><dd><dl><dt><a href="Portability.html#id2963036">Locking improvements</a></dt><dt><a href="Portability.html#winbind-solaris9">Winbind on Solaris 9</a></dt></dl></dd></dl></dd><dt>38. <a href="Other-Clients.html">Samba and other CIFS clients</a></dt><dd><dl><dt><a href="Other-Clients.html#id2963189">Macintosh clients?</a></dt><dt><a href="Other-Clients.html#id2963267">OS2 Client</a></dt><dd><dl><dt><a href="Other-Clients.html#id2963275">Configuring OS/2 Warp Connect or
+ OS/2 Warp 4 as a client for Samba</a></dt><dt><a href="Other-Clients.html#id2963359">Configuring OS/2 Warp 3 (not Connect),
+ OS/2 1.2, 1.3 or 2.x for Samba</a></dt><dt><a href="Other-Clients.html#id2963411">Printer driver download for for OS/2 clients?</a></dt></dl></dd><dt><a href="Other-Clients.html#id2963512">Windows for Workgroups</a></dt><dd><dl><dt><a href="Other-Clients.html#id2963519">Latest TCP/IP stack from Microsoft</a></dt><dt><a href="Other-Clients.html#id2963610">Delete .pwl files after password change</a></dt><dt><a href="Other-Clients.html#id2963639">Configuring WfW password handling</a></dt><dt><a href="Other-Clients.html#id2963692">Case handling of passwords</a></dt><dt><a href="Other-Clients.html#id2963730">Use TCP/IP as default protocol</a></dt><dt><a href="Other-Clients.html#id2963747">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id2963794">Windows '95/'98</a></dt><dd><dl><dt><a href="Other-Clients.html#id2963867">Speed improvement</a></dt></dl></dd><dt><a href="Other-Clients.html#id2963891">Windows 2000 Service Pack 2</a></dt><dt><a href="Other-Clients.html#id2964079">Windows NT 3.1</a></dt></dl></dd><dt>39. <a href="speed.html">Samba Performance Tuning</a></dt><dd><dl><dt><a href="speed.html#id2964209">Comparisons</a></dt><dt><a href="speed.html#id2964253">Socket options</a></dt><dt><a href="speed.html#id2964343">Read size</a></dt><dt><a href="speed.html#id2964393">Max xmit</a></dt><dt><a href="speed.html#id2964453">Log level</a></dt><dt><a href="speed.html#id2964483">Read raw</a></dt><dt><a href="speed.html#id2964567">Write raw</a></dt><dt><a href="speed.html#id2964630">Slow Logins</a></dt><dt><a href="speed.html#id2964659">Client tuning</a></dt><dt><a href="speed.html#id2964684">Samba performance problem due changing kernel</a></dt><dt><a href="speed.html#id2964716">Corrupt tdb Files</a></dt></dl></dd><dt>40. <a href="DNSDHCP.html">DNS and DHCP Configuration Guide</a></dt><dd><dl><dt><a href="DNSDHCP.html#id2964821">Note</a></dt></dl></dd><dt>41. <a href="Further-Resources.html">Further Resources</a></dt><dd><dl><dt><a href="Further-Resources.html#id2964888">Websites</a></dt><dt><a href="Further-Resources.html#id2965278">Related updates from Microsoft</a></dt></dl></dd></dl></dd><dt><a href="ix01.html">Index</a></dt></dl></div><div class="list-of-figures"><p><b>List of Figures</b></p><dl><dt>5.1. <a href="samba-pdc.html#domain-example">An Example Domain</a></dt><dt>10.1. <a href="NetworkBrowsing.html#browsing1">Cross subnet browsing example</a></dt><dt>11.1. <a href="passdb.html#idmap-diag">IDMAP</a></dt><dt>12.1. <a href="groupmapping.html#idmap-group-diag">IDMAP groups</a></dt><dt>13.1. <a href="AccessControls.html#access1">Overview of unix permissions field</a></dt><dt>16.1. <a href="InterdomainTrusts.html#trusts1">Trusts overview</a></dt><dt>19.1. <a href="CUPS-printing.html#small1">Windows Printing to a local Printer</a></dt><dt>19.2. <a href="CUPS-printing.html#small2">Printing to a Postscript Printer</a></dt><dt>19.3. <a href="CUPS-printing.html#small3">Ghostscript as a RIP for non-postscript printers</a></dt><dt>19.4. <a href="CUPS-printing.html#small4">Prefiltering in CUPS to form Postscript</a></dt><dt>19.5. <a href="CUPS-printing.html#small5">Adding Device-specific Print Options</a></dt><dt>19.6. <a href="CUPS-printing.html#small6">Postscript to intermediate Raster format</a></dt><dt>19.7. <a href="CUPS-printing.html#small7">CUPS-raster production using Ghostscript</a></dt><dt>19.8. <a href="CUPS-printing.html#small8">Image format to CUPS-raster format conversion</a></dt><dt>19.9. <a href="CUPS-printing.html#small9">Raster to Printer Specific formats</a></dt><dt>19.10. <a href="CUPS-printing.html#small10">cupsomatic/foomatic processing versus Native CUPS</a></dt><dt>19.11. <a href="CUPS-printing.html#pdftosocket">PDF to socket chain</a></dt><dt>19.12. <a href="CUPS-printing.html#pdftoepsonusb">PDF to USB chain</a></dt><dt>19.13. <a href="CUPS-printing.html#small11">Print Driver execution on the Client</a></dt><dt>19.14. <a href="CUPS-printing.html#small12">Print Driver execution on the Server</a></dt><dt>19.15. <a href="CUPS-printing.html#small13">Printing via CUPS/samba server</a></dt><dt>19.16. <a href="CUPS-printing.html#small14">cupsaddsmb flowchart</a></dt><dt>19.17. <a href="CUPS-printing.html#cups1">Filtering chain 1</a></dt><dt>19.18. <a href="CUPS-printing.html#cups2">Filtering chain with cupsomatic</a></dt><dt>19.19. <a href="CUPS-printing.html#a_small">CUPS Printing Overview</a></dt></dl></div><div class="list-of-tables"><p><b>List of Tables</b></p><dl><dt>7.1. <a href="domain-member.html#id2891635">Assumptions</a></dt><dt>10.1. <a href="NetworkBrowsing.html#id2897579">Browse subnet example 1</a></dt><dt>10.2. <a href="NetworkBrowsing.html#id2897692">Browse subnet example 2</a></dt><dt>10.3. <a href="NetworkBrowsing.html#id2897805">Browse subnet example 3</a></dt><dt>10.4. <a href="NetworkBrowsing.html#id2897922">Browse subnet example 4</a></dt><dt>11.1. <a href="passdb.html#id2901317">Attributes in the sambaSamAccount objectclass (LDAP)</a></dt><dt>11.2. <a href="passdb.html#id2902128">Basic smb.conf options for MySQL passdb backend</a></dt><dt>11.3. <a href="passdb.html#id2902260">MySQL field names for MySQL passdb backend</a></dt><dt>13.1. <a href="AccessControls.html#id2904754">Managing directories with unix and windows</a></dt><dt>13.2. <a href="AccessControls.html#id2905157">User and Group Based Controls</a></dt><dt>13.3. <a href="AccessControls.html#id2905512">File and Directory Permission Based Controls</a></dt><dt>13.4. <a href="AccessControls.html#id2905893">Other Controls</a></dt><dt>19.1. <a href="CUPS-printing.html#id2928665">PPD's shipped with CUPS</a></dt><dt>20.1. <a href="VFS.html#id2940521">Extended Auditing Log Information</a></dt><dt>24.1. <a href="ProfileMgmt.html#id2948397">User Shell Folder registry keys default values</a></dt><dt>24.2. <a href="ProfileMgmt.html#id2948541">Defaults of profile settings registry keys</a></dt><dt>24.3. <a href="ProfileMgmt.html#id2948802">Defaults of default user profile paths registry keys</a></dt><dt>25.1. <a href="pam.html#id2951123">Options recognized by pam_smbpass</a></dt><dt>26.1. <a href="integrate-ms-networks.html#id2952372">Unique NetBIOS names</a></dt><dt>26.2. <a href="integrate-ms-networks.html#id2952442">Group Names</a></dt><dt>30.1. <a href="upgrading-to-3.0.html#id2954868">TDB File Descriptions</a></dt><dt>31.1. <a href="NT4Migration.html#id2956338">The 3 Major Site Types</a></dt><dt>31.2. <a href="NT4Migration.html#id2956485">Nature of the Conversion Choices</a></dt></dl></div><div class="list-of-examples"><p><b>List of Examples</b></p><dl><dt>2.1. <a href="install.html#id2884022">Simplest possible smb.conf file</a></dt><dt>5.1. <a href="samba-pdc.html#pdc-example">smb.conf for being a PDC</a></dt><dt>5.2. <a href="samba-pdc.html#id2888328">smb.conf for being a PDC</a></dt><dt>6.1. <a href="samba-bdc.html#id2889747">Minimal smb.conf for being a PDC</a></dt><dt>6.2. <a href="samba-bdc.html#id2890026">Minimal setup for being a BDC</a></dt><dt>8.1. <a href="StandAloneServer.html#id2893237">smb.conf for Reference Documentation Server</a></dt><dt>8.2. <a href="StandAloneServer.html#id2893557">smb.conf for anonymous printing</a></dt><dt>10.1. <a href="NetworkBrowsing.html#id2895160">Domain master browser smb.conf</a></dt><dt>10.2. <a href="NetworkBrowsing.html#id2895251">Local master browser smb.conf</a></dt><dt>10.3. <a href="NetworkBrowsing.html#id2895389">smb.conf for not being a master browser</a></dt><dt>10.4. <a href="NetworkBrowsing.html#id2895495">Local master browser smb.conf</a></dt><dt>10.5. <a href="NetworkBrowsing.html#id2895612">smb.conf for not being a master browser</a></dt><dt>11.1. <a href="passdb.html#idmapbackendexample"></a></dt><dt>11.2. <a href="passdb.html#id2900879">Configuration with LDAP</a></dt><dt>12.1. <a href="groupmapping.html#id2903754">smbgrpadd.sh</a></dt><dt>13.1. <a href="AccessControls.html#id2904965">Example File</a></dt><dt>14.1. <a href="locking.html#id2909772">Share with some files oplocked</a></dt><dt>14.2. <a href="locking.html#id2909930"></a></dt><dt>17.1. <a href="msdfs.html#id2912656">smb.conf with DFS configured</a></dt><dt>18.1. <a href="printing.html#id2913746">Simple configuration with BSD printing</a></dt><dt>18.2. <a href="printing.html#extbsdpr">Extended configuration with BSD printing</a></dt><dt>18.3. <a href="printing.html#id2917613">[print\$] example</a></dt><dt>19.1. <a href="CUPS-printing.html#id2924241">Simplest printing-related smb.conf</a></dt><dt>19.2. <a href="CUPS-printing.html#id2924426">Overriding global CUPS settings for one printer</a></dt><dt>19.3. <a href="CUPS-printing.html#id2930838">smb.conf for cupsaddsmb usage</a></dt><dt>20.1. <a href="VFS.html#id2940233">smb.conf with VFS modules</a></dt><dt>20.2. <a href="VFS.html#id2940333">smb.conf with multiple VFS modules</a></dt><dt>21.1. <a href="winbind.html#id2942349">smb.conf for winbind set-up</a></dt><dt>33.1. <a href="diagnosis.html#id2958071">smb.conf with [tmp] share</a></dt><dt>38.1. <a href="Other-Clients.html#id2963963">Minimal profile share</a></dt></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"></td><td width="20%" align="center"></td><td width="40%" align="right"><a accesskey="n" href="pr01.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top"></td><td width="20%" align="center"></td><td width="40%" align="right" valign="top">Legal Notice</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/samba-pdc.html b/docs/htmldocs/samba-pdc.html
index aee179737d6..aab2d4207c4 100644
--- a/docs/htmldocs/samba-pdc.html
+++ b/docs/htmldocs/samba-pdc.html
@@ -1,9 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter5.Domain Control</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="ServerType.html" title="Chapter4.Server Types and Security Modes"><link rel="next" href="samba-bdc.html" title="Chapter6.Backup Domain Control"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter5.Domain Control</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ServerType.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="samba-bdc.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-pdc"></a>Chapter5.Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="samba-pdc.html#id2892619">Features and Benefits</a></dt><dt><a href="samba-pdc.html#id2890215">Basics of Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2890230">Domain Controller Types</a></dt><dt><a href="samba-pdc.html#id2890429">Preparing for Domain Control</a></dt></dl></dd><dt><a href="samba-pdc.html#id2890744">Domain Control - Example Configuration</a></dt><dt><a href="samba-pdc.html#id2891040">Samba ADS Domain Control</a></dt><dt><a href="samba-pdc.html#id2891062">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="samba-pdc.html#id2891077">Domain Network Logon Service</a></dt><dt><a href="samba-pdc.html#id2893804">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="samba-pdc.html#id2893909">Common Problems and Errors</a></dt><dd><dl><dt><a href="samba-pdc.html#id2893916">I cannot include a '$' in a machine name</a></dt><dt><a href="samba-pdc.html#id2893954">I get told &quot;You already have a connection to the Domain....&quot;
-or &quot;Cannot join domain, the credentials supplied conflict with an
-existing set..&quot; when creating a machine trust account.</a></dt><dt><a href="samba-pdc.html#id2894004">The system can not log you on (C000019B)....</a></dt><dt><a href="samba-pdc.html#id2894075">The machine trust account for this computer either does not
-exist or is not accessible.</a></dt><dt><a href="samba-pdc.html#id2894138">When I attempt to login to a Samba Domain from a NT4/W2K workstation,
-I get a message about my account being disabled.</a></dt><dt><a href="samba-pdc.html#id2894165">Until a few minutes after Samba has started, clients get the error &quot;Domain Controller Unavailable&quot;</a></dt></dl></dd></dl></div><p><b><span class="emphasis"><em>The Essence of Learning:</em></span></b>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter5.Domain Control</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="type.html" title="PartII.Server Configuration Basics"><link rel="previous" href="ServerType.html" title="Chapter4.Server Types and Security Modes"><link rel="next" href="samba-bdc.html" title="Chapter6.Backup Domain Control"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter5.Domain Control</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ServerType.html">Prev</a></td><th width="60%" align="center">PartII.Server Configuration Basics</th><td width="20%" align="right"><a accesskey="n" href="samba-bdc.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="samba-pdc"></a>Chapter5.Domain Control</h2></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">David</span> <span class="surname">Bannon</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:dbannon@samba.org">dbannon@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="samba-pdc.html#id2886861">Features and Benefits</a></dt><dt><a href="samba-pdc.html#id2887076">Basics of Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2887090">Domain Controller Types</a></dt><dt><a href="samba-pdc.html#id2887335">Preparing for Domain Control</a></dt></dl></dd><dt><a href="samba-pdc.html#id2887717">Domain Control - Example Configuration</a></dt><dt><a href="samba-pdc.html#id2888205">Samba ADS Domain Control</a></dt><dt><a href="samba-pdc.html#id2888257">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="samba-pdc.html#id2888272">Domain Network Logon Service</a></dt><dt><a href="samba-pdc.html#id2888704">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="samba-pdc.html#id2888850">Common Errors</a></dt><dd><dl><dt><a href="samba-pdc.html#id2888857">'$' cannot be included in machine name</a></dt><dt><a href="samba-pdc.html#id2888916">Joining domain fails because of existing machine account</a></dt><dt><a href="samba-pdc.html#id2888975">The system can not log you on (C000019B)....</a></dt><dt><a href="samba-pdc.html#id2889059">The machine trust account not accessible</a></dt><dt><a href="samba-pdc.html#id2889131">Account disabled</a></dt><dt><a href="samba-pdc.html#id2889164">Domain Controller Unavailable</a></dt><dt><a href="samba-pdc.html#id2889186">Can not log onto domain member workstation after joining domain</a></dt></dl></dd></dl></div><p><b><span class="emphasis"><em>The Essence of Learning:</em></span></b>
There are many who approach MS Windows networking with incredible misconceptions.
That's OK, because it gives the rest of us plenty of opportunity to be of assistance.
Those who really want help would be well advised to become familiar with information
@@ -11,18 +6,18 @@ that is already available.
</p><p>
The reader is advised NOT to tackle this section without having first understood
and mastered some basics. MS Windows networking is not particularly forgiving of
-misconfiguration. Users of MS Windows networking are likely to complain bitterly
-of persistent niggles that may be caused by broken network or system configuration.
+misconfiguration. Users of MS Windows networking are likely to complain
+of persistent niggles that may be caused by a broken network configuration.
To a great many people however, MS Windows networking starts with a domain controller
that in some magical way is expected to solve all ills.
-</p><p>
+</p><div class="figure"><a name="domain-example"></a><p class="title"><b>Figure5.1.An Example Domain</b></p><div class="mediaobject"><img src="projdoc/imagefiles/domain.png" width="270" alt="An Example Domain"></div></div><p>
From the Samba mailing list one can readily identify many common networking issues.
If you are not clear on the following subjects, then it will do much good to read the
sections of this HOWTO that deal with it. These are the most common causes of MS Windows
networking problems:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Basic TCP/IP configuration</td></tr><tr><td>NetBIOS name resolution</td></tr><tr><td>Authentication configuration</td></tr><tr><td>User and Group configuration</td></tr><tr><td>Basic File and Directory Permission Control in Unix/Linux</td></tr><tr><td>Understanding of how MS Windows clients interoperate in a network
- environment</td></tr></table><p>
-Do not be put off; on the surface of it MS Windows networking seems so simple that any fool
+</p><div class="itemizedlist"><ul type="disc"><li><p>Basic TCP/IP configuration</p></li><li><p>NetBIOS name resolution</p></li><li><p>Authentication configuration</p></li><li><p>User and Group configuration</p></li><li><p>Basic File and Directory Permission Control in UNIX/Linux</p></li><li><p>Understanding of how MS Windows clients interoperate in a network
+ environment</p></li></ul></div><p>
+Do not be put off; on the surface of it MS Windows networking seems so simple that anyone
can do it. In fact, it is not a good idea to set up an MS Windows network with
inadequate training and preparation. But let's get our first indelible principle out of the
way: <span class="emphasis"><em>It is perfectly OK to make mistakes!</em></span> In the right place and at
@@ -33,7 +28,7 @@ burden on an organisation.
Where is the right place to make mistakes? Only out of harm's way! If you are going to
make mistakes, then please do this on a test network, away from users and in such a way as
to not inflict pain on others. Do your learning on a test network.
-</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2892619"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2886861"></a>Features and Benefits</h2></div></div><div></div></div><p>
<span class="emphasis"><em>What is the key benefit of Microsoft Domain security?</em></span>
</p><p>
In a word, <span class="emphasis"><em>Single Sign On</em></span>, or SSO for short. To many, this is the holy
@@ -44,13 +39,18 @@ and they will be able to log onto the network and access resources (shares, file
as if they are sitting at their home (personal) workstation. This is a feature of the Domain
security protocols.
</p><p>
-The benefits of Domain security are fully available to those sites that deploy a Samba PDC.
+The benefits of Domain security are available to those sites that deploy a Samba PDC.
+A Domain provides a unique network security identifier (SID). Domain user and group security
+identifiers are comprised of the network SID plus a relative identifier (RID) that is unique to
+the account. User and Group SIDs (the network SID plus the RID) can be used to create Access Control
+Lists (ACLs) attached to network resources to provide organizational access control. UNIX systems
+know only of local security identifiers.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Network clients of an MS Windows Domain security environment must be Domain members to be
able to gain access to the advanced features provided. Domain membership involves more than just
setting the workgroup name to the Domain name. It requires the creation of a Domain trust account
for the workstation (called a machine account). Please refer to the chapter on
-<a href="domain-member.html" title="Chapter7.Domain Membership">Domain Membership</a> for more information.
+<a href="domain-member.html" title="Chapter7.Domain Membership">setting up samba as a domain member</a> for more information.
</p></div><p>
The following functionalities are new to the Samba-3 release:
</p><div class="itemizedlist"><ul type="disc"><li><p>
@@ -58,8 +58,7 @@ The following functionalities are new to the Samba-3 release:
</p></li><li><p>
Adding users via the User Manager for Domains. This can be done on any MS Windows
client using the Nexus toolkit that is available from Microsoft's web site.
- At some later date Samba-3 may get support for the use of the Microsoft Management
- Console for user management.
+ Samba-3 supports the use of the Microsoft Management Console for user management.
</p></li><li><p>
Introduces replaceable and multiple user account (authentication)
back ends. In the case where the back end is placed in an LDAP database,
@@ -73,14 +72,18 @@ The following functionalities are new to the Samba-3 release:
The following functionalities are NOT provided by Samba-3:
</p><div class="itemizedlist"><ul type="disc"><li><p>
SAM replication with Windows NT4 Domain Controllers
- (i.e. a Samba PDC and a Windows NT BDC or vice versa)
+ (i.e. a Samba PDC and a Windows NT BDC or vice versa). This means samba
+ cannot operate as a BDC when the PDC is Microsoft-based or
+ replicate account data to Windows-BDC's.
</p></li><li><p>
Acting as a Windows 2000 Domain Controller (i.e. Kerberos and
Active Directory) - In point of fact, Samba-3 DOES have some
Active Directory Domain Control ability that is at this time
purely experimental <span class="emphasis"><em>AND</em></span> that is certain
to change as it becomes a fully supported feature some time
- during the Samba-3 (or later) life cycle.
+ during the Samba-3 (or later) life cycle. However, Active Directory is
+ more then just SMB - it's also LDAP, Kerberos, DHCP and other protocols
+ (with proprietary extensions, of course).
</p></li></ul></div><p>
Windows 9x / Me / XP Home clients are not true members of a domain for reasons outlined
in this chapter. The protocol for support of Windows 9x / Me style network (domain) logons
@@ -89,67 +92,33 @@ for some time. These clients use the old LanMan Network Logon facilities that ar
in Samba since approximately the Samba-1.9.15 series.
</p><p>
Samba-3 has an implementation of group mapping between Windows NT groups
-and Unix groups (this is really quite complicated to explain in a short space). This is
-discussed more fully in the <a href="groupmapping.html" title="Chapter12.Mapping MS Windows and Unix Groups">Group Mapping</a> chapter.
+and UNIX groups (this is really quite complicated to explain in a short space). This is
+discussed more fully in <a href="groupmapping.html" title="Chapter12.Mapping MS Windows and UNIX Groups">the chapter on group mapping</a>.
</p><p>
Samba-3, like an MS Windows NT4 PDC or a Windows 200x Active Directory, needs to store
-user and machine trust account information in a suitable backend data store. With Samba-3
-there can be multiple back-ends for this including:
-</p><div class="itemizedlist"><ul type="disc"><li><p>
- <span class="emphasis"><em>smbpasswd</em></span> - the plain ASCII file stored used by
- earlier versions of Samba. This file configuration option requires
- a Unix/Linux system account for EVERY entry (ie: both for user and for
- machine accounts). This file will be located in the <span class="emphasis"><em>private</em></span>
- directory (default is /usr/local/samba/lib/private or on linux /etc/samba).
- </p></li><li><p>
- <span class="emphasis"><em>tdbsam</em></span> - a binary database backend that will be
- stored in the <span class="emphasis"><em>private</em></span> directory in a file called
- <span class="emphasis"><em>passdb.tdb</em></span>. The key benefit of this binary format
- file is that it can store binary objects that can not be accommodated
- in the traditional plain text smbpasswd file. These permit the extended
- account controls that MS Windows NT4 and later also have.
- </p></li><li><p>
- <span class="emphasis"><em>ldapsam</em></span> - An LDAP based back-end. Permits the
- LDAP server to be specified. eg: ldap://localhost or ldap://frodo.murphy.com.
- Like the tdbsam, ldapsam permits the storing of extended account attributes
- for control of things like: Permitted access times, password activation and
- expiry, permitted points of access (workstation names), per user profile
- location, and much more.
- </p></li><li><p>
- <span class="emphasis"><em>ldapsam_compat</em></span> - An LDAP back-end that maintains backwards
- compatibility with the behaviour of samba-2.2.x. You should use this in the process
- of migrating from samba-2.2.x to samba-3 if you do not want to rebuild your LDAP
- database.
- </p></li></ul></div><p>
-Read the chapter about <a href="passdb.html" title="Chapter11.Account Information Databases">Account Information Database</a> for details
-regarding the choices available and how to configure them.
-</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
-The new tdbsam and ldapsam account backends store substantially more information than
-smbpasswd is capable of. The new backend database includes capacity to specify
-per user settings for many parameters, over-riding global settings given in the
-<tt class="filename">smb.conf</tt> file. eg: logon drive, logon home, logon path, etc.
-Thus, with samba-3 it is possible to have a default system configuration for profiles,
-and on a per user basis to over-ride this for those users who should not be subject
-to the default configuration.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890215"></a>Basics of Domain Control</h2></div></div><div></div></div><p>
+user and machine trust account information in a suitable backend data store.
+Refer <a href="domain-member.html#machine-trust-accounts" title="MS Windows Workstation/Server Machine Trust Accounts">to the section on machine trust accounts</a>. With Samba-3 there can be multiple
+back-ends for this. A complete discussion of account database backends can be found in
+<a href="passdb.html" title="Chapter11.Account Information Databases">the chapter on Account Information Databases</a>.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887076"></a>Basics of Domain Control</h2></div></div><div></div></div><p>
Over the years, public perceptions of what Domain Control really is has taken on an
almost mystical nature. Before we branch into a brief overview of Domain Control,
there are three basic types of domain controllers:
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890230"></a>Domain Controller Types</h3></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Primary Domain Controller</p></li><li><p>Backup Domain Controller</p></li><li><p>ADS Domain Controller</p></li></ul></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887090"></a>Domain Controller Types</h3></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>Primary Domain Controller</p></li><li><p>Backup Domain Controller</p></li><li><p>ADS Domain Controller</p></li></ul></div><p>
The <span class="emphasis"><em>Primary Domain Controller</em></span> or PDC plays an important role in the MS
-Windows NT4 and Windows 200x Domain Control architecture, but not in the manner that so many
-expect. There is folk lore that dictates that because of it's role in the MS Windows
-network, the PDC should be the most powerful and most capable machine in the network.
+Windows NT4. In Windows 200x Domain Control architecture this role is held by domain controllers.
+There is folk lore that dictates that because of it's role in the MS Windows
+network, the domain controllers should be the most powerful and most capable machine in the network.
As strange as it may seem to say this here, good over all network performance dictates that
-the entire infrastructure needs to be balanced. It is advisable to invest more in the Backup
-Domain Controllers and Stand-Alone (or Domain Member) servers than in the PDC.
+the entire infrastructure needs to be balanced. It is advisable to invest more in Stand-Alone
+(or Domain Member) servers than in the domain controllers.
</p><p>
-In the case of MS Windows NT4 style domains, it is the PDC seeds the Domain Control database,
-a part of the Windows registry called the SAM (Security Account Manager). It plays a key
+In the case of MS Windows NT4 style domains, it is the PDC that initiates a new Domain Control database.
+This forms a part of the Windows registry called the SAM (Security Account Manager). It plays a key
part in NT4 type domain user authentication and in synchronisation of the domain authentication
database with Backup Domain Controllers.
</p><p>
-With MS Windows 200x Server based Active Directory domains, one domain controller seeds a potential
+With MS Windows 200x Server based Active Directory domains, one domain controller initiates a potential
hierarchy of domain controllers, each with their own area of delegated control. The master domain
controller has the ability to override any down-stream controller, but a down-line controller has
control only over it's down-line. With Samba-3 this functionality can be implemented using an
@@ -157,9 +126,7 @@ LDAP based user and machine account back end.
</p><p>
New to Samba-3 is the ability to use a back-end database that holds the same type of data as
the NT4 style SAM (Security Account Manager) database (one of the registry files).
-The Samba-3 SAM can be specified via the smb.conf file parameter
-<i class="parameter"><tt>passwd backend</tt></i> and valid options include
-<span class="emphasis"><em>smbpasswd, tdbsam, ldapsam, nisplussam, xmlsam, mysqlsam, guest</em></span>.
+<sup>[<a name="id2887167" href="#ftn.id2887167">1</a>]</sup>
</p><p>
The <span class="emphasis"><em>Backup Domain Controller</em></span> or BDC plays a key role in servicing network
authentication requests. The BDC is biased to answer logon requests in preference to the PDC.
@@ -183,11 +150,14 @@ excluding the SAM replication components. However, please be aware that Samba-3
MS Windows 200x domain control protocols also.
</p><p>
At this time any appearance that Samba-3 is capable of acting as an
-<span class="emphasis"><em>ADS Domain Controller</em></span> is limited and experimental in nature.
+<span class="emphasis"><em>Domain Controller</em></span> in native ADS mode is limited and experimental in nature.
This functionality should not be used until the Samba-Team offers formal support for it.
At such a time, the documentation will be revised to duly reflect all configuration and
-management requirements.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2890429"></a>Preparing for Domain Control</h3></div></div><div></div></div><p>
+management requirements. Samba can act as a NT4-style DC in a Windows 2000/XP
+environment. However, there are certain compromises:
+
+</p><div class="itemizedlist"><ul type="disc"><li><p>No machine policy files</p></li><li><p>No Group Policy Objects</p></li><li><p>No synchronously executed AD logon scripts</p></li><li><p>Can't use ANY Active Directory management tools to manage users and machines</p></li><li><p>Registry changes tattoo the main registry, while with AD they do NOT. ie: Leave permanent changes in effect</p></li><li><p>Without AD you can not peprform the function of exporting specific applications to specific users or groups</p></li></ul></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2887335"></a>Preparing for Domain Control</h3></div></div><div></div></div><p>
There are two ways that MS Windows machines may interact with each other, with other servers,
and with Domain Controllers: Either as <span class="emphasis"><em>Stand-Alone</em></span> systems, more commonly
called <span class="emphasis"><em>Workgroup</em></span> members, or as full participants in a security system,
@@ -209,23 +179,22 @@ Domain it triggers a machine password change.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
When running a Domain all MS Windows NT / 200x / XP Professional clients should be configured
as full Domain Members - IF A SECURE NETWORK IS WANTED. If the machine is NOT made a member of the
-Domain, then it will operate like a workgroup (stand-alone) machine. Please refer the
-<a href="domain-member.html" title="Chapter7.Domain Membership">Domain Membership</a> chapter for information regarding
- HOW to make your MS Windows clients Domain members.
+Domain, then it will operate like a workgroup (stand-alone) machine. Please refer to
+<a href="domain-member.html" title="Chapter7.Domain Membership">the chapter on domain membership</a> for information regarding HOW to make your MS Windows clients Domain members.
</p></div><p>
The following are necessary for configuring Samba-3 as an MS Windows NT4 style PDC for MS Windows
NT4 / 200x / XP clients.
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Configuration of basic TCP/IP and MS Windows Networking</td></tr><tr><td>Correct designation of the Server Role (<i class="parameter"><tt>security = user</tt></i>)</td></tr><tr><td>Consistent configuration of Name Resolution (See chapter on <a href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide">Browsing</a> and on
- <a href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba">MS Windows network Integration</a>)</td></tr><tr><td>Domain logons for Windows NT4 / 200x / XP Professional clients</td></tr><tr><td>Configuration of Roaming Profiles or explicit configuration to force local profile usage</td></tr><tr><td>Configuration of Network/System Policies</td></tr><tr><td>Adding and managing domain user accounts</td></tr><tr><td>Configuring MS Windows client machines to become domain members</td></tr></table><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Configuration of basic TCP/IP and MS Windows Networking</p></li><li><p>Correct designation of the Server Role (<a class="indexterm" name="id2887441"></a><i class="parameter"><tt>security</tt></i> = user)</p></li><li><p>Consistent configuration of Name Resolution (See chapter on <a href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide">Network Browsing</a> and on
+ <a href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba">Integrating Unix into Windows networks</a>)</p></li><li><p>Domain logons for Windows NT4 / 200x / XP Professional clients</p></li><li><p>Configuration of Roaming Profiles or explicit configuration to force local profile usage</p></li><li><p>Configuration of Network/System Policies</p></li><li><p>Adding and managing domain user accounts</p></li><li><p>Configuring MS Windows client machines to become domain members</p></li></ul></div><p>
The following provisions are required to serve MS Windows 9x / Me Clients:
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>Configuration of basic TCP/IP and MS Windows Networking</td></tr><tr><td>Correct designation of the Server Role (<i class="parameter"><tt>security = user</tt></i>)</td></tr><tr><td>Network Logon Configuration (Since Windows 9x / XP Home are not technically domain
- members, they do not really participate in the security aspects of Domain logons as such)</td></tr><tr><td>Roaming Profile Configuration</td></tr><tr><td>Configuration of System Policy handling</td></tr><tr><td>Installation of the Network driver &quot;Client for MS Windows Networks&quot; and configuration
- to log onto the domain</td></tr><tr><td>Placing Windows 9x / Me clients in user level security - if it is desired to allow
- all client share access to be controlled according to domain user / group identities.</td></tr><tr><td>Adding and managing domain user accounts</td></tr></table><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="itemizedlist"><ul type="disc"><li><p>Configuration of basic TCP/IP and MS Windows Networking</p></li><li><p>Correct designation of the Server Role (<a class="indexterm" name="id2887534"></a><i class="parameter"><tt>security</tt></i> = user)</p></li><li><p>Network Logon Configuration (Since Windows 9x / XP Home are not technically domain
+ members, they do not really participate in the security aspects of Domain logons as such)</p></li><li><p>Roaming Profile Configuration</p></li><li><p>Configuration of System Policy handling</p></li><li><p>Installation of the Network driver &quot;Client for MS Windows Networks&quot; and configuration
+ to log onto the domain</p></li><li><p>Placing Windows 9x / Me clients in user level security - if it is desired to allow
+ all client share access to be controlled according to domain user / group identities.</p></li><li><p>Adding and managing domain user accounts</p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
Roaming Profiles and System/Network policies are advanced network administration topics
that are covered in the <a href="ProfileMgmt.html" title="Chapter24.Desktop Profile Management">Profile Management</a> and
-<a href="PolicyMgmt.html" title="Chapter23.System and Account Policies">Policy Management</a> chapters of this document. However, these are not necessarily specific
-to a Samba PDC as much as they are related to Windows NT networking concepts.
+<a href="PolicyMgmt.html" title="Chapter23.System and Account Policies">Policy Management</a> chapters of this document. However, these are not
+necessarily specific to a Samba PDC as much as they are related to Windows NT networking concepts.
</p></div><p>
A Domain Controller is an SMB/CIFS server that:
</p><div class="itemizedlist"><ul type="disc"><li><p>
@@ -240,120 +209,86 @@ A Domain Controller is an SMB/CIFS server that:
Provides a share called NETLOGON
</p></li></ul></div><p>
For Samba to provide these is rather easy to configure. Each Samba Domain Controller must provide
-the NETLOGON service which Samba calls the <span class="emphasis"><em>domain logons</em></span> functionality
+the NETLOGON service which Samba calls the <a class="indexterm" name="id2887666"></a><i class="parameter"><tt>domain logons</tt></i> functionality
(after the name of the parameter in the <tt class="filename">smb.conf</tt> file). Additionally, one (1) server in a Samba-3
-Domain must advertise itself as the domain master browser. This causes the Primary Domain Controller
+Domain must advertise itself as the domain master browser<sup>[<a name="id2887690" href="#ftn.id2887690">2</a>]</sup>. This causes the Primary Domain Controller
to claim domain specific NetBIOS name that identifies it as a domain master browser for its given
domain/workgroup. Local master browsers in the same domain/workgroup on broadcast-isolated subnets
then ask for a complete copy of the browse list for the whole wide area network. Browser clients
will then contact their local master browser, and will receive the domain-wide browse list,
instead of just the list for their broadcast-isolated subnet.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2890744"></a>Domain Control - Example Configuration</h2></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2887717"></a>Domain Control - Example Configuration</h2></div></div><div></div></div><p>
The first step in creating a working Samba PDC is to understand the parameters necessary
-in <tt class="filename">smb.conf</tt>. Here we attempt to explain the parameters that are covered in
-the <tt class="filename">smb.conf</tt> man page.
-</p><p>
-Here is an example <tt class="filename">smb.conf</tt> for acting as a PDC:
-</p><pre class="programlisting">
- [global]
- ; Basic server settings
- <a href="smb.conf.5.html#NETBIOSNAME" target="_top">netbios name</a> = <i class="replaceable"><tt>POGO</tt></i>
- <a href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> = <i class="replaceable"><tt>NARNIA</tt></i>
-
- ; User and Machine Account Backends
- ; Choices are: tdbsam, smbpasswd, ldapsam, mysqlsam, xmlsam, guest
- <a href="smb.conf.5.html#PASSDBBACKEND" target="_top">passdb backend</a> = ldapsam, guest
-
- ; we should act as the domain and local master browser
- <a href="smb.conf.5.html#OSLEVEL" target="_top">os level</a> = 64
- <a href="smb.conf.5.html#PERFERREDMASTER" target="_top">preferred master</a> = yes
- <a href="smb.conf.5.html#DOMAINMASTER" target="_top">domain master</a> = yes
- <a href="smb.conf.5.html#LOCALMASTER" target="_top">local master</a> = yes
-
- ; security settings (must user security = user)
- <a href="smb.conf.5.html#SECURITYEQUALSUSER" target="_top">security</a> = user
-
- ; encrypted passwords are a requirement for a PDC (default = Yes)
- <a href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords</a> = yes
-
- ; support domain logons
- <a href="smb.conf.5.html#DOMAINLOGONS" target="_top">domain logons</a> = yes
-
- ; where to store user profiles?
- <a href="smb.conf.5.html#LOGONPATH" target="_top">logon path</a> = \\%N\profiles\%u
-
- ; where is a user's home directory and where should it be mounted at?
- <a href="smb.conf.5.html#LOGONDRIVE" target="_top">logon drive</a> = H:
- <a href="smb.conf.5.html#LOGONHOME" target="_top">logon home</a> = \\homeserver\%u\winprofile
-
- ; specify a generic logon script for all users
- ; this is a relative **DOS** path to the [netlogon] share
- <a href="smb.conf.5.html#LOGONSCRIPT" target="_top">logon script</a> = logon.cmd
-
- ; necessary share for domain controller
- [netlogon]
- <a href="smb.conf.5.html#PATH" target="_top">path</a> = /usr/local/samba/lib/netlogon
- <a href="smb.conf.5.html#READONLY" target="_top">read only</a> = yes
- <a href="smb.conf.5.html#WRITELIST" target="_top">write list</a> = <i class="replaceable"><tt>ntadmin</tt></i>
-
- ; share for storing user profiles
- [profiles]
- <a href="smb.conf.5.html#PATH" target="_top">path</a> = /export/smb/ntprofile
- <a href="smb.conf.5.html#READONLY" target="_top">read only</a> = no
- <a href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a> = 0600
- <a href="smb.conf.5.html#DIRECTORYMASK" target="_top">directory mask</a> = 0700
-</pre><div xmlns:ns5="" class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><ns5:p>
+in <tt class="filename">smb.conf</tt>. An example <tt class="filename">smb.conf</tt> for acting as a PDC can be found in the example
+<a href="samba-pdc.html#pdc-example" title="Example5.1.smb.conf for being a PDC">for being a PDC</a>.
+</p><p>
+</p><div class="example"><a name="pdc-example"></a><p class="title"><b>Example5.1.smb.conf for being a PDC</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>netbios name = BELERIAND</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>passdb backend = ldapsam, guest</tt></i></td></tr><tr><td><i class="parameter"><tt>os level = 33</tt></i></td></tr><tr><td><i class="parameter"><tt>preferred master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>local master = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>security = user</tt></i></td></tr><tr><td><i class="parameter"><tt>encrypt passwords = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>logon path = \\%N\profiles\%u</tt></i></td></tr><tr><td><i class="parameter"><tt>logon drive = H:</tt></i></td></tr><tr><td><i class="parameter"><tt>logon home = \\homeserver\%u\winprofile</tt></i></td></tr><tr><td><i class="parameter"><tt>logon script = logon.cmd</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[netlogon]</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/lib/samba/netlogon</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>write list = ntadmin</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[profiles]</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/lib/samba/profiles</tt></i></td></tr><tr><td><i class="parameter"><tt>read only = no</tt></i></td></tr><tr><td><i class="parameter"><tt>create mask = 0600</tt></i></td></tr><tr><td><i class="parameter"><tt>directory mask = 0700</tt></i></td></tr></table></div><p>
+</p><p>
+The basic options shown above are explained as follows:
+</p><div class="variablelist"><dl><dt><span class="term">passdb backend</span></dt><dd><p>
+ This contains all the user and group account information. Acceptable values for a PDC
+ are: <span class="emphasis"><em>smbpasswd, tdbsam, ldapsam</em></span>. The 'guest' entry provides needed
+ default accounts.</p><p>
+ Where is is intended to use backup domain controllers (BDCs) the only logical choice is
+ to use LDAP so that the passdb backend can be distributed. The tdbsam and smbpasswd files
+ can not effectively be distributed and therefore should not be used.
+ </p></dd><dt><span class="term">Domain Control Parameters</span></dt><dd><p>
+ The parameters <span class="emphasis"><em>os level, preferred master, domain master, security,
+ encrypt passwords, domain logons</em></span> play a central role in assuring domain
+ control and network logon support.</p><p>
+ The <span class="emphasis"><em>os level</em></span> must be set at or above a value of 32. A domain controller
+ must be the domain master browser, must be set in <span class="emphasis"><em>user</em></span> mode security,
+ must support Microsoft compatible encrypted passwords, and must provide the network logon
+ service (domain logons). Encrypted passwords must be enabled, for more details on how
+ to do this, refer to <a href="passdb.html" title="Chapter11.Account Information Databases">the chapter on account information databases</a>.
+ </p></dd><dt><span class="term">Environment Parameters</span></dt><dd><p>
+ The parameters <span class="emphasis"><em>logon path, logon home, logon drive, logon script</em></span> are
+ environment support settings that help to facilitate client logon operations and that help
+ to provide automated control facilities to ease network management overheads. Please refer
+ to the man page information for these parameters.
+ </p></dd><dt><span class="term">NETLOGON Share</span></dt><dd><p>
+ The NETLOGON share plays a central role in domain logon and domain membership support.
+ This share is provided on all Microsoft domain controllers. It is used to provide logon
+ scripts, to store Group Policy files (NTConfig.POL), as well as to locate other common
+ tools that may be needed for logon processing. This is an essential share on a domain controller.
+ </p></dd><dt><span class="term">PROFILE Share</span></dt><dd><p>
+ This share is used to store user desktop profiles. Eash user must have a directory at the root
+ of this share. This directory must be write enabled for the user and must be globally read enabled.
+ Samba-3 has a VFS module called 'fake_permissions' that may be installed on this share. This will
+ allow a Samba administrator to make the directory read only to everyone. Of course this is useful
+ only after the profile has been properly created.
+ </p></dd></dl></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
The above parameters make for a full set of parameters that may define the server's mode
-of operation. The following parameters are the essentials alone:
-
-</ns5:p><pre class="programlisting">
- workgroup = NARNIA
- domain logons = Yes
- domain master = Yes
- security = User
-</pre><ns5:p>
-
-The additional parameters shown in the longer listing above just makes for a
-more complete environment.
-</ns5:p></div><p>
-There are a couple of points to emphasize in the above configuration.
-</p><div class="itemizedlist"><ul type="disc"><li><p>
- Encrypted passwords must be enabled. For more details on how
- to do this, refer to <a href="passdb.html" title="Chapter11.Account Information Databases">Account Information Database chapter</a>.
- </p></li><li><p>
- The server must support domain logons and have a
- <i class="parameter"><tt>[netlogon]</tt></i> share
- </p></li><li><p>
- The server must be the domain master browser in order for Windows
- client to locate the server as a DC. Please refer to the various
- Network Browsing documentation included with this distribution for
- details.
- </p></li></ul></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891040"></a>Samba ADS Domain Control</h2></div></div><div></div></div><p>
-Samba-3 is not and can not act as an Active Directory Server. It can not truly function as
+of operation. The following <tt class="filename">smb.conf</tt> parameters are the essentials alone:
+</p><p>
+</p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>netbios name = BELERIAND</tt></i></td></tr><tr><td><i class="parameter"><tt>workgroup = MIDEARTH</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>security = User</tt></i></td></tr></table><p>
+</p><p>
+The additional parameters shown in the longer listing above just makes for
+more complete explanation.
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888205"></a>Samba ADS Domain Control</h2></div></div><div></div></div><p>
+Samba-3 is not, and can not act as, an Active Directory Server. It can not truly function as
an Active Directory Primary Domain Controller. The protocols for some of the functionality
-the Active Directory Domain Controllers is have been partially implemented on an experimental
-only basis. Please do NOT expect Samba-3 to support these protocols - nor should you depend
-on any such functionality either now or in the future. The Samba-Team may well remove such
-experimental features or may change their behaviour.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2891062"></a>Domain and Network Logon Configuration</h2></div></div><div></div></div><p>
-The subject of Network or Domain Logons is discussed here because it rightly forms
+the Active Directory Domain Controllers has been partially implemented on an experimental
+only basis. Please do NOT expect Samba-3 to support these protocols. Do not depend
+on any such functionality either now or in the future. The Samba-Team may remove these
+experimental features or may change their behaviour. This is mentioned for the benefit of those
+who have discovered secret capabilities in samba-3 and who have asked when this functionality will be
+completed. The answer is: Maybe or maybe never!
+</p><p>
+To be sure: Samba-3 is designed to provide most of the functionality that Microsoft Windows NT4 style
+domain controllers have. Samba-3 does NOT have all the capabilities of Windows NT4, but it does have
+a number of features that Windows NT4 domain contollers do not have. In short, Samba-3 is not NT4 and it
+is not Windows Server 200x and it is not an Active Directory server. We hope this is plain and simple
+enough for all to understand.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888257"></a>Domain and Network Logon Configuration</h2></div></div><div></div></div><p>
+The subject of Network or Domain Logons is discussed here because it forms
an integral part of the essential functionality that is provided by a Domain Controller.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2891077"></a>Domain Network Logon Service</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888272"></a>Domain Network Logon Service</h3></div></div><div></div></div><p>
All Domain Controllers must run the netlogon service (<span class="emphasis"><em>domain logons</em></span>
-in Samba). One Domain Controller must be configured with <i class="parameter"><tt>domain master = Yes</tt></i>
-(the Primary Domain Controller); on ALL Backup Domain Controllers <i class="parameter"><tt>domain master = No</tt></i>
+in Samba). One Domain Controller must be configured with <a class="indexterm" name="id2888289"></a><i class="parameter"><tt>domain master</tt></i> = Yes
+(the Primary Domain Controller); on ALL Backup Domain Controllers <a class="indexterm" name="id2888305"></a><i class="parameter"><tt>domain master</tt></i> = No
must be set.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891110"></a>Example Configuration</h4></div></div><div></div></div><pre class="programlisting">
- [global]
- domain logons = Yes
- domain master = (Yes on PDC, No on BDCs)
-
- [netlogon]
- comment = Network Logon Service
- path = /var/lib/samba/netlogon
- guest ok = Yes
- browseable = No
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891129"></a>The Special Case of MS Windows XP Home Edition</h4></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888321"></a>Example Configuration</h4></div></div><div></div></div><div class="example"><a name="id2888328"></a><p class="title"><b>Example5.2.smb.conf for being a PDC</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td><i class="parameter"><tt>domain logons = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>domain master = (Yes on PDC, No on BDCs)</tt></i></td></tr><tr><td> </td></tr><tr><td><i class="parameter"><tt>[netlogon]</tt></i></td></tr><tr><td><i class="parameter"><tt>comment = Network Logon Service</tt></i></td></tr><tr><td><i class="parameter"><tt>path = /var/lib/samba/netlogon</tt></i></td></tr><tr><td><i class="parameter"><tt>guest ok = Yes</tt></i></td></tr><tr><td><i class="parameter"><tt>browseable = No</tt></i></td></tr></table></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888412"></a>The Special Case of MS Windows XP Home Edition</h4></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
MS Windows XP Home Edition does not have the ability to join any type of Domain
security facility. Unlike, MS Windows 9x / Me, MS Windows XP Home Edition also completely
lacks the ability to log onto a network.
@@ -365,8 +300,10 @@ MS Windows XP Professional.
</p><p>
Now that this has been said, please do NOT ask the mailing list, or email any of the
Samba-Team members with your questions asking how to make this work. It can't be done.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2891165"></a>The Special Case of Windows 9x / Me</h4></div></div><div></div></div><p>
-A domain and a workgroup are exactly the same thing in terms of network
+If it can be done, then to do so would violate your software license agreement with
+Microsoft, and we recommend that you do not do that.
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2888450"></a>The Special Case of Windows 9x / Me</h4></div></div><div></div></div><p>
+A domain and a workgroup are exactly the same in terms of network
browsing. The difference is that a distributable authentication
database is associated with a domain, for secure login access to a
network. Also, different access rights can be granted to users if they
@@ -387,7 +324,7 @@ which are the focus of this section.
When an SMB client in a domain wishes to logon, it broadcasts requests for a
logon server. The first one to reply gets the job, and validates its
password using whatever mechanism the Samba administrator has installed.
-It is possible (but very stupid) to create a domain where the user
+It is possible (but ill advised ) to create a domain where the user
database is not shared between servers, i.e. they are effectively workgroup
servers advertising themselves as participating in a domain. This
demonstrates how authentication is quite different from but closely
@@ -438,14 +375,17 @@ The main difference between a PDC and a Windows 9x logon server configuration is
</p><div class="itemizedlist"><ul type="disc"><li><p>
Password encryption is not required for a Windows 9x logon server. But note
that beginning with MS Windows 98 the default setting is that plain-text
- password support has been disabled. It can be re-enabled with the registry
+ password support is disabled. It can be re-enabled with the registry
changes that are documented in the chapter on Policies.
</p></li><li><p>
Windows 9x/ME clients do not require and do not use machine trust accounts.
</p></li></ul></div><p>
A Samba PDC will act as a Windows 9x logon server; after all, it does provide the
network logon services that MS Windows 9x / Me expect to find.
-</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893804"></a>Security Mode and Master Browsers</h3></div></div><div></div></div><p>
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+Use of plain-text passwords is strongly discouraged. Where used they are easily detected
+using a sniffer tool to examine network traffic.
+</p></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888704"></a>Security Mode and Master Browsers</h3></div></div><div></div></div><p>
There are a few comments to make in order to tie up some
loose ends. There has been much debate over the issue of whether
or not it is ok to configure Samba as a Domain Controller in security
@@ -462,24 +402,25 @@ are two distinctly different functions), it is not a good idea to do
so. You should remember that the DC must register the DOMAIN&lt;#1b&gt; NetBIOS
name. This is the name used by Windows clients to locate the DC.
Windows clients do not distinguish between the DC and the DMB.
+A DMB is a Domain Master Browser - see <a href="NetworkBrowsing.html#DMB" title="Setting up WORKGROUP Browsing">Domain Master Browser</a>.
For this reason, it is very wise to configure the Samba DC as the DMB.
</p><p>
Now back to the issue of configuring a Samba DC to use a mode other
-than <i class="parameter"><tt>security = user</tt></i>. If a Samba host is configured to use
+than <a class="indexterm" name="id2888773"></a><i class="parameter"><tt>security</tt></i> = user. If a Samba host is configured to use
another SMB server or DC in order to validate user connection
requests, then it is a fact that some other machine on the network
-(the <i class="parameter"><tt>password server</tt></i>) knows more about the user than the Samba host.
+(the <a class="indexterm" name="id2888790"></a><i class="parameter"><tt>password server</tt></i>) knows more about the user than the Samba host.
99% of the time, this other host is a domain controller. Now
-in order to operate in domain mode security, the <i class="parameter"><tt>workgroup</tt></i> parameter
+in order to operate in domain mode security, the <a class="indexterm" name="id2888808"></a><i class="parameter"><tt>workgroup</tt></i> parameter
must be set to the name of the Windows NT domain (which already
has a domain controller). If the domain does NOT already have a Domain Controller
then you do not yet have a Domain!
</p><p>
Configuring a Samba box as a DC for a domain that already by definition has a
PDC is asking for trouble. Therefore, you should always configure the Samba DC
-to be the DMB for its domain and set <i class="parameter"><tt>security = user</tt></i>.
+to be the DMB for its domain and set <a class="indexterm" name="id2888832"></a><i class="parameter"><tt>security</tt></i> = user.
This is the only officially supported mode of operation.
-</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2893909"></a>Common Problems and Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893916"></a>I cannot include a '$' in a machine name</h3></div></div><div></div></div><p>
+</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2888850"></a>Common Errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888857"></a>'$' cannot be included in machine name</h3></div></div><div></div></div><p>
A 'machine account', (typically) stored in <tt class="filename">/etc/passwd</tt>,
takes the form of the machine name with a '$' appended. FreeBSD (and other BSD
systems?) won't create a user with a '$' in their name.
@@ -487,24 +428,26 @@ systems?) won't create a user with a '$' in their name.
The problem is only in the program used to make the entry. Once made, it works perfectly.
Create a user without the '$'. Then use <b class="command">vipw</b> to edit the entry, adding
the '$'. Or create the whole entry with vipw if you like; make sure you use a unique User ID!
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2893954"></a>I get told &quot;You already have a connection to the Domain....&quot;
+</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+The UNIX tool <b class="command">vipw</b> is a common tool for directly editting the <tt class="filename">/etc/passwd</tt> file.
+</p></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888916"></a>Joining domain fails because of existing machine account</h3></div></div><div></div></div><p>&#8220;<span class="quote">I get told &quot;You already have a connection to the Domain....&quot;
or &quot;Cannot join domain, the credentials supplied conflict with an
-existing set..&quot; when creating a machine trust account.</h3></div></div><div></div></div><p>
+existing set..&quot; when creating a machine trust account.</span>&#8221;</p><p>
This happens if you try to create a machine trust account from the
machine itself and already have a connection (e.g. mapped drive)
to a share (or IPC$) on the Samba PDC. The following command
will remove all network drive connections:
</p><pre class="screen">
- <tt class="prompt">C:\WINNT\&gt;</tt> <b class="userinput"><tt>net use * /d</tt></b>
+<tt class="prompt">C:\&gt; </tt><b class="userinput"><tt>net use * /d</tt></b>
</pre><p>
Further, if the machine is already a 'member of a workgroup' that
is the same name as the domain you are joining (bad idea) you will
get this message. Change the workgroup name to something else, it
does not matter what, reboot, and try again.
-</p></div><div xmlns:ns6="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894004"></a>The system can not log you on (C000019B)....</h3></div></div><div></div></div><p>I joined the domain successfully but after upgrading
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2888975"></a>The system can not log you on (C000019B)....</h3></div></div><div></div></div><p>&#8220;<span class="quote">I joined the domain successfully but after upgrading
to a newer version of the Samba code I get the message, <span class="errorname">The system
can not log you on (C000019B), Please try again or consult your
-system administrator</span> when attempting to logon.
+system administrator</span> when attempting to logon.</span>&#8221;
</p><p>
This occurs when the domain SID stored in the secrets.tdb database
is changed. The most common cause of a change in domain SID is when
@@ -512,21 +455,25 @@ the domain name and/or the server name (NetBIOS name) is changed.
The only way to correct the problem is to restore the original domain
SID or remove the domain client from the domain and rejoin. The domain
SID may be reset using either the net or rpcclient utilities.
-</p><ns6:p>
+</p><p>
The reset or change the domain SID you can use the net command as follows:
-</ns6:p><pre class="screen">
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>net getlocalsid 'OLDNAME'</tt></b>
<tt class="prompt">root# </tt><b class="userinput"><tt>net setlocalsid 'SID'</tt></b>
-</pre><ns6:p>
-</ns6:p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894075"></a>The machine trust account for this computer either does not
-exist or is not accessible.</h3></div></div><div></div></div><p>
-When I try to join the domain I get the message <span class="errorname">The machine account
+</pre><p>
+</p><p>
+Workstation machine trust accounts work only with the Domain (or network) SID. If this SID changes
+then domain members (workstations) will not be able to log onto the domain. The original Domain SID
+can be recovered from the secrets.tdb file. The alternative is to visit each workstation to re-join
+it to the domain.
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889059"></a>The machine trust account not accessible</h3></div></div><div></div></div><p>
+ &#8220;<span class="quote">When I try to join the domain I get the message <span class="errorname">The machine account
for this computer either does not exist or is not accessible</span>. What's
-wrong?
+wrong?</span>&#8221;
</p><p>
This problem is caused by the PDC not having a suitable machine trust account.
-If you are using the <i class="parameter"><tt>add machine script</tt></i> method to create
+If you are using the <a class="indexterm" name="id2889085"></a><i class="parameter"><tt>add machine script</tt></i> method to create
accounts then this would indicate that it has not worked. Ensure the domain
admin user system is working.
</p><p>
@@ -542,10 +489,22 @@ Some people have also reported
that inconsistent subnet masks between the Samba server and the NT
client can cause this problem. Make sure that these are consistent
for both client and server.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894138"></a>When I attempt to login to a Samba Domain from a NT4/W2K workstation,
-I get a message about my account being disabled.</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889131"></a>Account disabled</h3></div></div><div></div></div><p>&#8220;<span class="quote">When I attempt to login to a Samba Domain from a NT4/W2K workstation,
+ I get a message about my account being disabled.</span>&#8221;</p><p>
Enable the user accounts with <b class="userinput"><tt>smbpasswd -e <i class="replaceable"><tt>username</tt></i>
</tt></b>, this is normally done as an account is created.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2894165"></a>Until a few minutes after Samba has started, clients get the error &quot;Domain Controller Unavailable&quot;</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889164"></a>Domain Controller Unavailable</h3></div></div><div></div></div><p>&#8220;<span class="quote">Until a few minutes after Samba has started, clients get the error &quot;Domain Controller Unavailable&quot;</span>&#8221;</p><p>
A domain controller has to announce on the network who it is. This usually takes a while.
- </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ServerType.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="samba-bdc.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter4.Server Types and Security Modes</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter6.Backup Domain Control</td></tr></table></div></body></html>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2889186"></a>Can not log onto domain member workstation after joining domain</h3></div></div><div></div></div><p>After successfully joining the domain user logons fail with one of two messages:</p><p>One to the effect that the domain controller can not be found, the other claiming that the
+ account does not exist in the domain or that the password is incorrect.</p><p>This may be due to incompatible settings between
+ the Windows client and the Samba-3 server for <span class="emphasis"><em>schannel</em></span> (secure channel) settings
+ or <span class="emphasis"><em>smb signing</em></span> settings. Check your samba settings for <span class="emphasis"><em>
+ client schannel, server schannel, client signing, server signing</em></span> by executing:
+ <b class="command">testparm -v | more</b> and looking for the value of these parameters.
+ </p><p>
+ Also use the Microsoft Management Console - Local Security Settings. This tool is available from the
+ Control Panel. The Policy settings are found in the Local Policies / Securty Options area and are prefixed by
+ <span class="emphasis"><em>Secure Channel: ..., and Digitally sign ...</em></span>.
+ </p><p>
+ It is important that these be set consistently with the Samba-3 server settings.
+ </p></div></div><div class="footnotes"><br><hr width="100" align="left"><div class="footnote"><p><sup>[<a name="ftn.id2887167" href="#id2887167">1</a>] </sup>See also <a href="passdb.html" title="Chapter11.Account Information Databases">the chapter on Account Information Databases</a>.</p></div><div class="footnote"><p><sup>[<a name="ftn.id2887690" href="#id2887690">2</a>] </sup>See also <a href="NetworkBrowsing.html" title="Chapter10.Samba / MS Windows Network Browsing Guide">the chapter about network browsing</a></p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ServerType.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="type.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="samba-bdc.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter4.Server Types and Security Modes</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter6.Backup Domain Control</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/securing-samba.html b/docs/htmldocs/securing-samba.html
index bdbc2ae0b54..492780765ef 100644
--- a/docs/htmldocs/securing-samba.html
+++ b/docs/htmldocs/securing-samba.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter15.Securing Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="locking.html" title="Chapter14.File and Record Locking"><link rel="next" href="InterdomainTrusts.html" title="Chapter16.Interdomain Trust Relationships"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter15.Securing Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="locking.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="InterdomainTrusts.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="securing-samba"></a>Chapter15.Securing Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 26, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="securing-samba.html#id2929879">Introduction</a></dt><dt><a href="securing-samba.html#id2929912">Features and Benefits</a></dt><dt><a href="securing-samba.html#id2928572">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="securing-samba.html#id2928590">Using host based protection</a></dt><dt><a href="securing-samba.html#id2928659">User based protection</a></dt><dt><a href="securing-samba.html#id2928710">Using interface protection</a></dt><dt><a href="securing-samba.html#id2928760">Using a firewall</a></dt><dt><a href="securing-samba.html#id2928816">Using a IPC$ share deny</a></dt><dt><a href="securing-samba.html#id2928881">NTLMv2 Security</a></dt></dl></dd><dt><a href="securing-samba.html#id2928920">Upgrading Samba</a></dt><dt><a href="securing-samba.html#id2928943">Common Errors</a></dt><dd><dl><dt><a href="securing-samba.html#id2928962">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="securing-samba.html#id2928987">Why can users access home directories of other users?</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929879"></a>Introduction</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter15.Securing Samba</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="locking.html" title="Chapter14.File and Record Locking"><link rel="next" href="InterdomainTrusts.html" title="Chapter16.Interdomain Trust Relationships"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter15.Securing Samba</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="locking.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="InterdomainTrusts.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="securing-samba"></a>Chapter15.Securing Samba</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">May 26, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="securing-samba.html#id2910685">Introduction</a></dt><dt><a href="securing-samba.html#id2910722">Features and Benefits</a></dt><dt><a href="securing-samba.html#id2910796">Technical Discussion of Protective Measures and Issues</a></dt><dd><dl><dt><a href="securing-samba.html#id2910816">Using host based protection</a></dt><dt><a href="securing-samba.html#id2910915">User based protection</a></dt><dt><a href="securing-samba.html#id2910975">Using interface protection</a></dt><dt><a href="securing-samba.html#id2911042">Using a firewall</a></dt><dt><a href="securing-samba.html#id2911098">Using a IPC$ share deny</a></dt><dt><a href="securing-samba.html#id2911187">NTLMv2 Security</a></dt></dl></dd><dt><a href="securing-samba.html#id2911245">Upgrading Samba</a></dt><dt><a href="securing-samba.html#id2911271">Common Errors</a></dt><dd><dl><dt><a href="securing-samba.html#id2911289">Smbclient works on localhost, but the network is dead</a></dt><dt><a href="securing-samba.html#id2911314">Why can users access home directories of other users?</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910685"></a>Introduction</h2></div></div><div></div></div><p>
This note was attached to the Samba 2.2.8 release notes as it contained an
important security fix. The information contained here applies to Samba
installations in general.
@@ -11,7 +10,7 @@ on it!&quot;
Security concerns are just like that: You need to know a little about the subject to appreciate
how obvious most of it really is. The challenge for most of us is to discover that first morsel
of knowledge with which we may unlock the secrets of the masters.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2929912"></a>Features and Benefits</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910722"></a>Features and Benefits</h2></div></div><div></div></div><p>
There are three level at which security principals must be observed in order to render a site
at least moderately secure. These are: the perimeter firewall, the configuration of the host
server that is running Samba, and Samba itself.
@@ -23,58 +22,50 @@ Samba may be secured from connections that originate from outside the local netw
done using <span class="emphasis"><em>host based protection</em></span> (using samba's implementation of a technology
known as &quot;tcpwrappers&quot;, or it may be done be using <span class="emphasis"><em>interface based exclusion</em></span>
so that <span class="application">smbd</span> will bind only to specifically permitted interfaces. It is also
-possible to set specific share or resource based exclusions, eg: on the <i class="parameter"><tt>IPC$</tt></i>
-auto-share. The <i class="parameter"><tt>IPC$</tt></i> share is used for browsing purposes as well as to establish
+possible to set specific share or resource based exclusions, eg: on the <i class="parameter"><tt>[IPC$]</tt></i>
+auto-share. The <i class="parameter"><tt>[IPC$]</tt></i> share is used for browsing purposes as well as to establish
TCP/IP connections.
</p><p>
Another method by which Samba may be secured is by way of setting Access Control Entries in an Access
Control List on the shares themselves. This is discussed in the chapter on File, Directory and Share Access
Control.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928572"></a>Technical Discussion of Protective Measures and Issues</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2910796"></a>Technical Discussion of Protective Measures and Issues</h2></div></div><div></div></div><p>
The key challenge of security is the fact that protective measures suffice at best
only to close the door on known exploits and breach techniques. Never assume that
because you have followed these few measures that the Samba server is now an impenetrable
fortress! Given the history of information systems so far, it is only a matter of time
before someone will find yet another vulnerability.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928590"></a>Using host based protection</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910816"></a>Using host based protection</h3></div></div><div></div></div><p>
In many installations of Samba the greatest threat comes for outside
your immediate network. By default Samba will accept connections from
any host, which means that if you run an insecure version of Samba on
a host that is directly connected to the Internet you can be
especially vulnerable.
</p><p>
- One of the simplest fixes in this case is to use the <i class="parameter"><tt>hosts allow</tt></i> and
- <i class="parameter"><tt>hosts deny</tt></i> options in the Samba <tt class="filename">smb.conf</tt> configuration file to only
+ One of the simplest fixes in this case is to use the <a class="indexterm" name="id2910838"></a><i class="parameter"><tt>hosts allow</tt></i> and
+ <a class="indexterm" name="id2910852"></a><i class="parameter"><tt>hosts deny</tt></i> options in the Samba <tt class="filename">smb.conf</tt> configuration file to only
allow access to your server from a specific range of hosts. An example
might be:
- </p><pre class="programlisting">
- hosts allow = 127.0.0.1 192.168.2.0/24 192.168.3.0/24
- hosts deny = 0.0.0.0/0
- </pre><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>hosts allow = 127.0.0.1 192.168.2.0/24 192.168.3.0/24</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts deny = 0.0.0.0/0</tt></i></td></tr></table><p>
The above will only allow SMB connections from 'localhost' (your own
computer) and from the two private networks 192.168.2 and
192.168.3. All other connections will be refused as soon
as the client sends its first packet. The refusal will be marked as a
<span class="errorname">not listening on called name</span> error.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928659"></a>User based protection</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910915"></a>User based protection</h3></div></div><div></div></div><p>
If you want to restrict access to your server to valid users only then the following
- method may be of use. In the <tt class="filename">smb.conf</tt> <i class="parameter"><tt>[globals]</tt></i> section put:
- </p><pre class="programlisting">
- valid users = @smbusers, jacko
- </pre><p>
+ method may be of use. In the <tt class="filename">smb.conf</tt> <i class="parameter"><tt>[global]</tt></i> section put:
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>valid users = @smbusers, jacko</tt></i></td></tr></table><p>
What this does is, it restricts all server access to either the user <span class="emphasis"><em>jacko</em></span>
or to members of the system group <span class="emphasis"><em>smbusers</em></span>.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928710"></a>Using interface protection</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2910975"></a>Using interface protection</h3></div></div><div></div></div><p>
By default Samba will accept connections on any network interface that
it finds on your system. That means if you have a ISDN line or a PPP
connection to the Internet then Samba will accept connections on those
links. This may not be what you want.
</p><p>
You can change this behaviour using options like the following:
- </p><pre class="programlisting">
- interfaces = eth* lo
- bind interfaces only = yes
- </pre><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>interfaces = eth* lo</tt></i></td></tr><tr><td><i class="parameter"><tt>bind interfaces only = yes</tt></i></td></tr></table><p>
This tells Samba to only listen for connections on interfaces with a
name starting with 'eth' such as eth0, eth1, plus on the loopback
interface called 'lo'. The name you will need to use depends on what
@@ -86,7 +77,7 @@ before someone will find yet another vulnerability.
connection refused reply. In that case no Samba code is run at all as
the operating system has been told not to pass connections from that
interface to any samba process.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928760"></a>Using a firewall</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911042"></a>Using a firewall</h3></div></div><div></div></div><p>
Many people use a firewall to deny access to services that they don't
want exposed outside their network. This can be a very good idea,
although I would recommend using it in conjunction with the above
@@ -99,7 +90,7 @@ before someone will find yet another vulnerability.
The last one is important as many older firewall setups may not be
aware of it, given that this port was only added to the protocol in
recent years.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928816"></a>Using a IPC$ share deny</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911098"></a>Using a IPC$ share deny</h3></div></div><div></div></div><p>
If the above methods are not suitable, then you could also place a
more specific deny on the IPC$ share that is used in the recently
discovered security hole. This allows you to offer access to other
@@ -107,11 +98,7 @@ before someone will find yet another vulnerability.
hosts.
</p><p>
To do that you could use:
- </p><pre class="programlisting">
-[ipc$]
- hosts allow = 192.168.115.0/24 127.0.0.1
- hosts deny = 0.0.0.0/0
- </pre><p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[ipc$]</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts allow = 192.168.115.0/24 127.0.0.1</tt></i></td></tr><tr><td><i class="parameter"><tt>hosts deny = 0.0.0.0/0</tt></i></td></tr></table><p>
this would tell Samba that IPC$ connections are not allowed from
anywhere but the two listed places (localhost and a local
subnet). Connections to other shares would still be allowed. As the
@@ -126,42 +113,44 @@ before someone will find yet another vulnerability.
</p><p>
This is not recommended unless you cannot use one of the other
methods listed above for some reason.
- </p></div><div xmlns:ns42="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928881"></a>NTLMv2 Security</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911187"></a>NTLMv2 Security</h3></div></div><div></div></div><p>
To configure NTLMv2 authentication the following registry keys are worth knowing about:
- </p><ns42:p>
- </ns42:p><pre class="screen">
+ </p><p>
+ </p><pre class="screen">
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
&quot;lmcompatibilitylevel&quot;=dword:00000003
-
+ </pre><p>
+ </p><p>
0x3 - Send NTLMv2 response only. Clients will use NTLMv2 authentication,
use NTLMv2 session security if the server supports it. Domain
controllers accept LM, NTLM and NTLMv2 authentication.
-
+ </p><p>
+ </p><pre class="screen">
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0]
&quot;NtlmMinClientSec&quot;=dword:00080000
-
+ </pre><p>
+ </p><p>
0x80000 - NTLMv2 session security. If either NtlmMinClientSec or
NtlmMinServerSec is set to 0x80000, the connection will fail if NTLMv2
session security is not negotiated.
- </pre><ns42:p>
- </ns42:p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928920"></a>Upgrading Samba</h2></div></div><div></div></div><p>
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911245"></a>Upgrading Samba</h2></div></div><div></div></div><p>
Please check regularly on <a href="http://www.samba.org/" target="_top">http://www.samba.org/</a> for updates and
important announcements. Occasionally security releases are made and
it is highly recommended to upgrade Samba when a security vulnerability
-is discovered.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2928943"></a>Common Errors</h2></div></div><div></div></div><p>
+is discovered. Check with your OS vendor for OS specific upgrades.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2911271"></a>Common Errors</h2></div></div><div></div></div><p>
If all of samba and host platform configuration were really as intuitive as one might like then this
section would not be necessary. Security issues are often vexing for a support person to resolve, not
because of the complexity of the problem, but for reason that most administrators who post what turns
out to be a security problem request are totally convinced that the problem is with Samba.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928962"></a>Smbclient works on localhost, but the network is dead</h3></div></div><div></div></div><p>
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911289"></a>Smbclient works on localhost, but the network is dead</h3></div></div><div></div></div><p>
This is a very common problem. Red Hat Linux (as do others) will install a default firewall.
With the default firewall in place only traffic on the loopback adapter (IP address 127.0.0.1)
will be allowed through the firewall.
</p><p>
The solution is either to remove the firewall (stop it) or to modify the firewall script to
allow SMB networking traffic through. See section above in this chapter.
- </p></div><div xmlns:ns43="" class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2928987"></a>Why can users access home directories of other users?</h3></div></div><div></div></div><p>
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2911314"></a>Why can users access home directories of other users?</h3></div></div><div></div></div><p>
&#8220;<span class="quote">
We are unable to keep individual users from mapping to any other user's
home directory once they have supplied a valid password! They only need
@@ -190,18 +179,14 @@ out to be a security problem request are totally convinced that the problem is w
the policies and permissions he or she desires.
</p><p>
Samba does allow the setup you require when you have set the
- <i class="parameter"><tt>only user = yes</tt></i> option on the share, is that you have not set the
+ <a class="indexterm" name="id2911373"></a><i class="parameter"><tt>only user</tt></i> = yes option on the share, is that you have not set the
valid users list for the share.
- </p><ns43:p>
+ </p><p>
Note that only user works in conjunction with the users= list,
so to get the behavior you require, add the line :
- </ns43:p><pre class="programlisting">
- users = %S
- </pre><ns43:p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>users = %S</tt></i></td></tr></table><p>
this is equivalent to:
- </ns43:p><pre class="programlisting">
- valid users = %S
- </pre><ns43:p>
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td><i class="parameter"><tt>valid users = %S</tt></i></td></tr></table><p>
to the definition of the <i class="parameter"><tt>[homes]</tt></i> share, as recommended in
the <tt class="filename">smb.conf</tt> man page.
- </ns43:p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="locking.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="InterdomainTrusts.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter14.File and Record Locking</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter16.Interdomain Trust Relationships</td></tr></table></div></body></html>
+ </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="locking.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="InterdomainTrusts.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter14.File and Record Locking</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter16.Interdomain Trust Relationships</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/smb.conf.5.html b/docs/htmldocs/smb.conf.5.html
index 2b3d51d6f67..926d8fcbb40 100644
--- a/docs/htmldocs/smb.conf.5.html
+++ b/docs/htmldocs/smb.conf.5.html
@@ -244,8 +244,8 @@ alias|alias|alias|alias...
connection is made as the username given in the &quot;guest
account =&quot; for the service, irrespective of the
supplied password.</p></li></ol></div></div><div class="refsect1" lang="en"><h2>COMPLETE LIST OF GLOBAL PARAMETERS</h2><p>Here is a list of all global parameters. See the section of
- each parameter for details. Note that some are synonyms.</p><div class="itemizedlist"><ul type="disc"><li><p><a href="#ABORTSHUTDOWNSCRIPT"><i class="parameter"><tt>abort shutdown script</tt></i></a></p></li><li><p><a href="#ADDGROUPSCRIPT"><i class="parameter"><tt>add group script</tt></i></a></p></li><li><p><a href="#ADDMACHINESCRIPT"><i class="parameter"><tt>add machine script</tt></i></a></p></li><li><p><a href="#ADDPRINTERCOMMAND"><i class="parameter"><tt>addprinter command</tt></i></a></p></li><li><p><a href="#ADDSHARECOMMAND"><i class="parameter"><tt>add share command</tt></i></a></p></li><li><p><a href="#ADDUSERSCRIPT"><i class="parameter"><tt>add user script</tt></i></a></p></li><li><p><a href="#ADDUSERTOGROUPSCRIPT"><i class="parameter"><tt>add user to group script</tt></i></a></p></li><li><p><a href="#ALGORITHMICRIDBASE"><i class="parameter"><tt>algorithmic rid base</tt></i></a></p></li><li><p><a href="#ALLOWTRUSTEDDOMAINS"><i class="parameter"><tt>allow trusted domains</tt></i></a></p></li><li><p><a href="#ANNOUNCEAS"><i class="parameter"><tt>announce as</tt></i></a></p></li><li><p><a href="#ANNOUNCEVERSION"><i class="parameter"><tt>announce version</tt></i></a></p></li><li><p><a href="#AUTHMETHODS"><i class="parameter"><tt>auth methods</tt></i></a></p></li><li><p><a href="#AUTOSERVICES"><i class="parameter"><tt>auto services</tt></i></a></p></li><li><p><a href="#BINDINTERFACESONLY"><i class="parameter"><tt>bind interfaces only</tt></i></a></p></li><li><p><a href="#BROWSELIST"><i class="parameter"><tt>browse list</tt></i></a></p></li><li><p><a href="#CHANGENOTIFYTIMEOUT"><i class="parameter"><tt>change notify timeout</tt></i></a></p></li><li><p><a href="#CHANGESHARECOMMAND"><i class="parameter"><tt>change share command</tt></i></a></p></li><li><p><a href="#CLIENTLANMANAUTH"><i class="parameter"><tt>client lanman auth</tt></i></a></p></li><li><p><a href="#CLIENTNTLMV2AUTH"><i class="parameter"><tt>client ntlmv2 auth</tt></i></a></p></li><li><p><a href="#CLIENTUSESPNEGO"><i class="parameter"><tt>client use spnego</tt></i></a></p></li><li><p><a href="#CONFIGFILE"><i class="parameter"><tt>config file</tt></i></a></p></li><li><p><a href="#DEADTIME"><i class="parameter"><tt>dead time</tt></i></a></p></li><li><p><a href="#DEBUGHIRESTIMESTAMP"><i class="parameter"><tt>debug hires timestamp</tt></i></a></p></li><li><p><a href="#DEBUGLEVEL"><i class="parameter"><tt>debuglevel</tt></i></a></p></li><li><p><a href="#DEBUGPID"><i class="parameter"><tt>debug pid</tt></i></a></p></li><li><p><a href="#DEBUGTIMESTAMP"><i class="parameter"><tt>debug timestamp</tt></i></a></p></li><li><p><a href="#DEBUGUID"><i class="parameter"><tt>debug uid</tt></i></a></p></li><li><p><a href="#DEFAULT"><i class="parameter"><tt>default</tt></i></a></p></li><li><p><a href="#DEFAULTSERVICE"><i class="parameter"><tt>default service</tt></i></a></p></li><li><p><a href="#DELETEGROUPSCRIPT"><i class="parameter"><tt>delete group script</tt></i></a></p></li><li><p><a href="#DELETEPRINTERCOMMAND"><i class="parameter"><tt>deleteprinter command</tt></i></a></p></li><li><p><a href="#DELETESHARECOMMAND"><i class="parameter"><tt>delete share command</tt></i></a></p></li><li><p><a href="#DELETEUSERFROMGROUPSCRIPT"><i class="parameter"><tt>delete user from group script</tt></i></a></p></li><li><p><a href="#DELETEUSERSCRIPT"><i class="parameter"><tt>delete user script</tt></i></a></p></li><li><p><a href="#DFREECOMMAND"><i class="parameter"><tt>dfree command</tt></i></a></p></li><li><p><a href="#DISABLENETBIOS"><i class="parameter"><tt>disable netbios</tt></i></a></p></li><li><p><a href="#DISABLESPOOLSS"><i class="parameter"><tt>disable spoolss</tt></i></a></p></li><li><p><a href="#DISPLAYCHARSET"><i class="parameter"><tt>display charset</tt></i></a></p></li><li><p><a href="#DNSPROXY"><i class="parameter"><tt>dns proxy</tt></i></a></p></li><li><p><a href="#DOMAINLOGONS"><i class="parameter"><tt>domain logons</tt></i></a></p></li><li><p><a href="#DOMAINMASTER"><i class="parameter"><tt>domain master</tt></i></a></p></li><li><p><a href="#DOSCHARSET"><i class="parameter"><tt>dos charset</tt></i></a></p></li><li><p><a href="#ENABLERIDALGORITHM"><i class="parameter"><tt>enable rid algorithm</tt></i></a></p></li><li><p><a href="#ENCRYPTPASSWORDS"><i class="parameter"><tt>encrypt passwords</tt></i></a></p></li><li><p><a href="#ENHANCEDBROWSING"><i class="parameter"><tt>enhanced browsing</tt></i></a></p></li><li><p><a href="#ENUMPORTSCOMMAND"><i class="parameter"><tt>enumports command</tt></i></a></p></li><li><p><a href="#GETWDCACHE"><i class="parameter"><tt>getwd cache</tt></i></a></p></li><li><p><a href="#GUESTACCOUNT"><i class="parameter"><tt>guest account</tt></i></a></p></li><li><p><a href="#HIDELOCALUSERS"><i class="parameter"><tt>hide local users</tt></i></a></p></li><li><p><a href="#HOMEDIRMAP"><i class="parameter"><tt>homedir map</tt></i></a></p></li><li><p><a href="#HOSTMSDFS"><i class="parameter"><tt>host msdfs</tt></i></a></p></li><li><p><a href="#HOSTNAMELOOKUPS"><i class="parameter"><tt>hostname lookups</tt></i></a></p></li><li><p><a href="#HOSTSEQUIV"><i class="parameter"><tt>hosts equiv</tt></i></a></p></li><li><p><a href="#IDMAPGID"><i class="parameter"><tt>idmap gid</tt></i></a></p></li><li><p><a href="#IDMAPUID"><i class="parameter"><tt>idmap uid</tt></i></a></p></li><li><p><a href="#INCLUDE"><i class="parameter"><tt>include</tt></i></a></p></li><li><p><a href="#INTERFACES"><i class="parameter"><tt>interfaces</tt></i></a></p></li><li><p><a href="#KEEPALIVE"><i class="parameter"><tt>keepalive</tt></i></a></p></li><li><p><a href="#KERNELOPLOCKS"><i class="parameter"><tt>kernel oplocks</tt></i></a></p></li><li><p><a href="#LANMANAUTH"><i class="parameter"><tt>lanman auth</tt></i></a></p></li><li><p><a href="#LARGEREADWRITE"><i class="parameter"><tt>large readwrite</tt></i></a></p></li><li><p><a href="#LDAPADMINDN"><i class="parameter"><tt>ldap admin dn</tt></i></a></p></li><li><p><a href="#LDAPDELETEDN"><i class="parameter"><tt>ldap delete dn</tt></i></a></p></li><li><p><a href="#LDAPFILTER"><i class="parameter"><tt>ldap filter</tt></i></a></p></li><li><p><a href="#LDAPMACHINESUFFIX"><i class="parameter"><tt>ldap machine suffix</tt></i></a></p></li><li><p><a href="#LDAPPASSWDSYNC"><i class="parameter"><tt>ldap passwd sync</tt></i></a></p></li><li><p><a href="#LDAPPORT"><i class="parameter"><tt>ldap port</tt></i></a></p></li><li><p><a href="#LDAPSERVER"><i class="parameter"><tt>ldap server</tt></i></a></p></li><li><p><a href="#LDAPSSL"><i class="parameter"><tt>ldap ssl</tt></i></a></p></li><li><p><a href="#LDAPSUFFIX"><i class="parameter"><tt>ldap suffix</tt></i></a></p></li><li><p><a href="#LDAPTRUSTIDS"><i class="parameter"><tt>ldap trust ids</tt></i></a></p></li><li><p><a href="#LDAPUSERSUFFIX"><i class="parameter"><tt>ldap user suffix</tt></i></a></p></li><li><p><a href="#LMANNOUNCE"><i class="parameter"><tt>lm announce</tt></i></a></p></li><li><p><a href="#LMINTERVAL"><i class="parameter"><tt>lm interval</tt></i></a></p></li><li><p><a href="#LOADPRINTERS"><i class="parameter"><tt>load printers</tt></i></a></p></li><li><p><a href="#LOCALMASTER"><i class="parameter"><tt>local master</tt></i></a></p></li><li><p><a href="#LOCKDIR"><i class="parameter"><tt>lock dir</tt></i></a></p></li><li><p><a href="#LOCKDIRECTORY"><i class="parameter"><tt>lock directory</tt></i></a></p></li><li><p><a href="#LOCKSPINCOUNT"><i class="parameter"><tt>lock spin count</tt></i></a></p></li><li><p><a href="#LOCKSPINTIME"><i class="parameter"><tt>lock spin time</tt></i></a></p></li><li><p><a href="#LOGFILE"><i class="parameter"><tt>log file</tt></i></a></p></li><li><p><a href="#LOGLEVEL"><i class="parameter"><tt>log level</tt></i></a></p></li><li><p><a href="#LOGONDRIVE"><i class="parameter"><tt>logon drive</tt></i></a></p></li><li><p><a href="#LOGONHOME"><i class="parameter"><tt>logon home</tt></i></a></p></li><li><p><a href="#LOGONPATH"><i class="parameter"><tt>logon path</tt></i></a></p></li><li><p><a href="#LOGONSCRIPT"><i class="parameter"><tt>logon script</tt></i></a></p></li><li><p><a href="#LPQCACHETIME"><i class="parameter"><tt>lpq cache time</tt></i></a></p></li><li><p><a href="#MACHINEPASSWORDTIMEOUT"><i class="parameter"><tt>machine password timeout</tt></i></a></p></li><li><p><a href="#MANGLEDSTACK"><i class="parameter"><tt>mangled stack</tt></i></a></p></li><li><p><a href="#MANGLEPREFIX"><i class="parameter"><tt>mangle prefix</tt></i></a></p></li><li><p><a href="#MANGLINGMETHOD"><i class="parameter"><tt>mangling method</tt></i></a></p></li><li><p><a href="#MAPTOGUEST"><i class="parameter"><tt>map to guest</tt></i></a></p></li><li><p><a href="#MAXDISKSIZE"><i class="parameter"><tt>max disk size</tt></i></a></p></li><li><p><a href="#MAXLOGSIZE"><i class="parameter"><tt>max log size</tt></i></a></p></li><li><p><a href="#MAXMUX"><i class="parameter"><tt>max mux</tt></i></a></p></li><li><p><a href="#MAXOPENFILES"><i class="parameter"><tt>max open files</tt></i></a></p></li><li><p><a href="#MAXPROTOCOL"><i class="parameter"><tt>max protocol</tt></i></a></p></li><li><p><a href="#MAXSMBDPROCESSES"><i class="parameter"><tt>max smbd processes</tt></i></a></p></li><li><p><a href="#MAXTTL"><i class="parameter"><tt>max ttl</tt></i></a></p></li><li><p><a href="#MAXWINSTTL"><i class="parameter"><tt>max wins ttl</tt></i></a></p></li><li><p><a href="#MAXXMIT"><i class="parameter"><tt>max xmit</tt></i></a></p></li><li><p><a href="#MESSAGECOMMAND"><i class="parameter"><tt>message command</tt></i></a></p></li><li><p><a href="#MINPASSWDLENGTH"><i class="parameter"><tt>min passwd length</tt></i></a></p></li><li><p><a href="#MINPASSWORDLENGTH"><i class="parameter"><tt>min password length</tt></i></a></p></li><li><p><a href="#MINPROTOCOL"><i class="parameter"><tt>min protocol</tt></i></a></p></li><li><p><a href="#MINWINSTTL"><i class="parameter"><tt>min wins ttl</tt></i></a></p></li><li><p><a href="#NAMECACHETIMEOUT"><i class="parameter"><tt>name cache timeout</tt></i></a></p></li><li><p><a href="#NAMERESOLVEORDER"><i class="parameter"><tt>name resolve order</tt></i></a></p></li><li><p><a href="#NETBIOSALIASES"><i class="parameter"><tt>netbios aliases</tt></i></a></p></li><li><p><a href="#NETBIOSNAME"><i class="parameter"><tt>netbios name</tt></i></a></p></li><li><p><a href="#NETBIOSSCOPE"><i class="parameter"><tt>netbios scope</tt></i></a></p></li><li><p><a href="#NISHOMEDIR"><i class="parameter"><tt>nis homedir</tt></i></a></p></li><li><p><a href="#NTLMAUTH"><i class="parameter"><tt>ntlm auth</tt></i></a></p></li><li><p><a href="#NTPIPESUPPORT"><i class="parameter"><tt>nt pipe support</tt></i></a></p></li><li><p><a href="#NTSTATUSSUPPORT"><i class="parameter"><tt>nt status support</tt></i></a></p></li><li><p><a href="#NULLPASSWORDS"><i class="parameter"><tt>null passwords</tt></i></a></p></li><li><p><a href="#OBEYPAMRESTRICTIONS"><i class="parameter"><tt>obey pam restrictions</tt></i></a></p></li><li><p><a href="#OPLOCKBREAKWAITTIME"><i class="parameter"><tt>oplock break wait time</tt></i></a></p></li><li><p><a href="#OS2DRIVERMAP"><i class="parameter"><tt>os2 driver map</tt></i></a></p></li><li><p><a href="#OSLEVEL"><i class="parameter"><tt>os level</tt></i></a></p></li><li><p><a href="#PAMPASSWORDCHANGE"><i class="parameter"><tt>pam password change</tt></i></a></p></li><li><p><a href="#PANICACTION"><i class="parameter"><tt>panic action</tt></i></a></p></li><li><p><a href="#PARANOIDSERVERSECURITY"><i class="parameter"><tt>paranoid server security</tt></i></a></p></li><li><p><a href="#PASSDBBACKEND"><i class="parameter"><tt>passdb backend</tt></i></a></p></li><li><p><a href="#PASSWDCHAT"><i class="parameter"><tt>passwd chat</tt></i></a></p></li><li><p><a href="#PASSWDCHATDEBUG"><i class="parameter"><tt>passwd chat debug</tt></i></a></p></li><li><p><a href="#PASSWDPROGRAM"><i class="parameter"><tt>passwd program</tt></i></a></p></li><li><p><a href="#PASSWORDLEVEL"><i class="parameter"><tt>password level</tt></i></a></p></li><li><p><a href="#PASSWORDSERVER"><i class="parameter"><tt>password server</tt></i></a></p></li><li><p><a href="#PIDDIRECTORY"><i class="parameter"><tt>pid directory</tt></i></a></p></li><li><p><a href="#PREFEREDMASTER"><i class="parameter"><tt>prefered master</tt></i></a></p></li><li><p><a href="#PREFERREDMASTER"><i class="parameter"><tt>preferred master</tt></i></a></p></li><li><p><a href="#PRELOAD"><i class="parameter"><tt>preload</tt></i></a></p></li><li><p><a href="#PRELOADMODULES"><i class="parameter"><tt>preload modules</tt></i></a></p></li><li><p><a href="#PRINTCAP"><i class="parameter"><tt>printcap</tt></i></a></p></li><li><p><a href="#PRIVATEDIR"><i class="parameter"><tt>private dir</tt></i></a></p></li><li><p><a href="#PROTOCOL"><i class="parameter"><tt>protocol</tt></i></a></p></li><li><p><a href="#READBMPX"><i class="parameter"><tt>read bmpx</tt></i></a></p></li><li><p><a href="#READRAW"><i class="parameter"><tt>read raw</tt></i></a></p></li><li><p><a href="#READSIZE"><i class="parameter"><tt>read size</tt></i></a></p></li><li><p><a href="#REALM"><i class="parameter"><tt>realm</tt></i></a></p></li><li><p><a href="#REMOTEANNOUNCE"><i class="parameter"><tt>remote announce</tt></i></a></p></li><li><p><a href="#REMOTEBROWSESYNC"><i class="parameter"><tt>remote browse sync</tt></i></a></p></li><li><p><a href="#RESTRICTANONYMOUS"><i class="parameter"><tt>restrict anonymous</tt></i></a></p></li><li><p><a href="#ROOT"><i class="parameter"><tt>root</tt></i></a></p></li><li><p><a href="#ROOTDIR"><i class="parameter"><tt>root dir</tt></i></a></p></li><li><p><a href="#ROOTDIRECTORY"><i class="parameter"><tt>root directory</tt></i></a></p></li><li><p><a href="#SECURITY"><i class="parameter"><tt>security</tt></i></a></p></li><li><p><a href="#SERVERSCHANNEL"><i class="parameter"><tt>server schannel</tt></i></a></p></li><li><p><a href="#SERVERSTRING"><i class="parameter"><tt>server string</tt></i></a></p></li><li><p><a href="#SETPRIMARYGROUPSCRIPT"><i class="parameter"><tt>set primary group script</tt></i></a></p></li><li><p><a href="#SHOWADDPRINTERWIZARD"><i class="parameter"><tt>show add printer wizard</tt></i></a></p></li><li><p><a href="#SHUTDOWNSCRIPT"><i class="parameter"><tt>shutdown script</tt></i></a></p></li><li><p><a href="#SMBPASSWDFILE"><i class="parameter"><tt>smb passwd file</tt></i></a></p></li><li><p><a href="#SMBPORTS"><i class="parameter"><tt>smb ports</tt></i></a></p></li><li><p><a href="#SOCKETADDRESS"><i class="parameter"><tt>socket address</tt></i></a></p></li><li><p><a href="#SOCKETOPTIONS"><i class="parameter"><tt>socket options</tt></i></a></p></li><li><p><a href="#SOURCEENVIRONMENT"><i class="parameter"><tt>source environment</tt></i></a></p></li><li><p><a href="#STATCACHE"><i class="parameter"><tt>stat cache</tt></i></a></p></li><li><p><a href="#STRIPDOT"><i class="parameter"><tt>strip dot</tt></i></a></p></li><li><p><a href="#SYSLOG"><i class="parameter"><tt>syslog</tt></i></a></p></li><li><p><a href="#SYSLOGONLY"><i class="parameter"><tt>syslog only</tt></i></a></p></li><li><p><a href="#TEMPLATEHOMEDIR"><i class="parameter"><tt>template homedir</tt></i></a></p></li><li><p><a href="#TEMPLATEPRIMARYGROUP"><i class="parameter"><tt>template primary group</tt></i></a></p></li><li><p><a href="#TEMPLATESHELL"><i class="parameter"><tt>template shell</tt></i></a></p></li><li><p><a href="#TIMEOFFSET"><i class="parameter"><tt>time offset</tt></i></a></p></li><li><p><a href="#TIMESERVER"><i class="parameter"><tt>time server</tt></i></a></p></li><li><p><a href="#TIMESTAMPLOGS"><i class="parameter"><tt>timestamp logs</tt></i></a></p></li><li><p><a href="#TOTALPRINTJOBS"><i class="parameter"><tt>total print jobs</tt></i></a></p></li><li><p><a href="#UNICODE"><i class="parameter"><tt>unicode</tt></i></a></p></li><li><p><a href="#UNIXCHARSET"><i class="parameter"><tt>unix charset</tt></i></a></p></li><li><p><a href="#UNIXEXTENSIONS"><i class="parameter"><tt>unix extensions</tt></i></a></p></li><li><p><a href="#UNIXPASSWORDSYNC"><i class="parameter"><tt>unix password sync</tt></i></a></p></li><li><p><a href="#UPDATEENCRYPTED"><i class="parameter"><tt>update encrypted</tt></i></a></p></li><li><p><a href="#USEMMAP"><i class="parameter"><tt>use mmap</tt></i></a></p></li><li><p><a href="#USERNAMELEVEL"><i class="parameter"><tt>username level</tt></i></a></p></li><li><p><a href="#USERNAMEMAP"><i class="parameter"><tt>username map</tt></i></a></p></li><li><p><a href="#USESPNEGO"><i class="parameter"><tt>use spnego</tt></i></a></p></li><li><p><a href="#UTMP"><i class="parameter"><tt>utmp</tt></i></a></p></li><li><p><a href="#UTMPDIRECTORY"><i class="parameter"><tt>utmp directory</tt></i></a></p></li><li><p><a href="#WINBINDCACHETIME"><i class="parameter"><tt>winbind cache time</tt></i></a></p></li><li><p><a href="#WINBINDENABLELOCALACCOUNTS"><i class="parameter"><tt>winbind enable local accounts</tt></i></a></p></li><li><p><a href="#WINBINDENUMGROUPS"><i class="parameter"><tt>winbind enum groups</tt></i></a></p></li><li><p><a href="#WINBINDENUMUSERS"><i class="parameter"><tt>winbind enum users</tt></i></a></p></li><li><p><a href="#WINBINDGID"><i class="parameter"><tt>winbind gid</tt></i></a></p></li><li><p><a href="#WINBINDSEPARATOR"><i class="parameter"><tt>winbind separator</tt></i></a></p></li><li><p><a href="#WINBINDTRUSTEDDOMAINSONLY"><i class="parameter"><tt>winbind trusted domains only</tt></i></a></p></li><li><p><a href="#WINBINDUID"><i class="parameter"><tt>winbind uid</tt></i></a></p></li><li><p><a href="#WINBINDUSEDEFAULTDOMAIN"><i class="parameter"><tt>winbind use default domain</tt></i></a></p></li><li><p><a href="#WINSHOOK"><i class="parameter"><tt>wins hook</tt></i></a></p></li><li><p><a href="#WINSPARTNERS"><i class="parameter"><tt>wins partners</tt></i></a></p></li><li><p><a href="#WINSPROXY"><i class="parameter"><tt>wins proxy</tt></i></a></p></li><li><p><a href="#WINSSERVER"><i class="parameter"><tt>wins server</tt></i></a></p></li><li><p><a href="#WINSSUPPORT"><i class="parameter"><tt>wins support</tt></i></a></p></li><li><p><a href="#WORKGROUP"><i class="parameter"><tt>workgroup</tt></i></a></p></li><li><p><a href="#WRITERAW"><i class="parameter"><tt>write raw</tt></i></a></p></li><li><p><a href="#WTMPDIRECTORY"><i class="parameter"><tt>wtmp directory</tt></i></a></p></li></ul></div></div><div class="refsect1" lang="en"><h2>COMPLETE LIST OF SERVICE PARAMETERS</h2><p>Here is a list of all service parameters. See the section on
- each parameter for details. Note that some are synonyms.</p><div class="itemizedlist"><ul type="disc"><li><p><a href="#ADMINUSERS"><i class="parameter"><tt>admin users</tt></i></a></p></li><li><p><a href="#ALLOWHOSTS"><i class="parameter"><tt>allow hosts</tt></i></a></p></li><li><p><a href="#AVAILABLE"><i class="parameter"><tt>available</tt></i></a></p></li><li><p><a href="#BLOCKINGLOCKS"><i class="parameter"><tt>blocking locks</tt></i></a></p></li><li><p><a href="#BLOCKSIZE"><i class="parameter"><tt>block size</tt></i></a></p></li><li><p><a href="#BROWSABLE"><i class="parameter"><tt>browsable</tt></i></a></p></li><li><p><a href="#BROWSEABLE"><i class="parameter"><tt>browseable</tt></i></a></p></li><li><p><a href="#CASESENSITIVE"><i class="parameter"><tt>case sensitive</tt></i></a></p></li><li><p><a href="#CASESIGNAMES"><i class="parameter"><tt>casesignames</tt></i></a></p></li><li><p><a href="#COMMENT"><i class="parameter"><tt>comment</tt></i></a></p></li><li><p><a href="#COPY"><i class="parameter"><tt>copy</tt></i></a></p></li><li><p><a href="#CREATEMASK"><i class="parameter"><tt>create mask</tt></i></a></p></li><li><p><a href="#CREATEMODE"><i class="parameter"><tt>create mode</tt></i></a></p></li><li><p><a href="#CSCPOLICY"><i class="parameter"><tt>csc policy</tt></i></a></p></li><li><p><a href="#DEFAULTCASE"><i class="parameter"><tt>default case</tt></i></a></p></li><li><p><a href="#DEFAULTDEVMODE"><i class="parameter"><tt>default devmode</tt></i></a></p></li><li><p><a href="#DELETEREADONLY"><i class="parameter"><tt>delete readonly</tt></i></a></p></li><li><p><a href="#DELETEVETOFILES"><i class="parameter"><tt>delete veto files</tt></i></a></p></li><li><p><a href="#DENYHOSTS"><i class="parameter"><tt>deny hosts</tt></i></a></p></li><li><p><a href="#DIRECTORY"><i class="parameter"><tt>directory</tt></i></a></p></li><li><p><a href="#DIRECTORYMASK"><i class="parameter"><tt>directory mask</tt></i></a></p></li><li><p><a href="#DIRECTORYMODE"><i class="parameter"><tt>directory mode</tt></i></a></p></li><li><p><a href="#DIRECTORYSECURITYMASK"><i class="parameter"><tt>directory security mask</tt></i></a></p></li><li><p><a href="#DONTDESCEND"><i class="parameter"><tt>dont descend</tt></i></a></p></li><li><p><a href="#DOSFILEMODE"><i class="parameter"><tt>dos filemode</tt></i></a></p></li><li><p><a href="#DOSFILETIMERESOLUTION"><i class="parameter"><tt>dos filetime resolution</tt></i></a></p></li><li><p><a href="#DOSFILETIMES"><i class="parameter"><tt>dos filetimes</tt></i></a></p></li><li><p><a href="#EXEC"><i class="parameter"><tt>exec</tt></i></a></p></li><li><p><a href="#FAKEDIRECTORYCREATETIMES"><i class="parameter"><tt>fake directory create times</tt></i></a></p></li><li><p><a href="#FAKEOPLOCKS"><i class="parameter"><tt>fake oplocks</tt></i></a></p></li><li><p><a href="#FOLLOWSYMLINKS"><i class="parameter"><tt>follow symlinks</tt></i></a></p></li><li><p><a href="#FORCECREATEMODE"><i class="parameter"><tt>force create mode</tt></i></a></p></li><li><p><a href="#FORCEDIRECTORYMODE"><i class="parameter"><tt>force directory mode</tt></i></a></p></li><li><p><a href="#FORCEDIRECTORYSECURITYMODE"><i class="parameter"><tt>force directory security mode</tt></i></a></p></li><li><p><a href="#FORCEGROUP"><i class="parameter"><tt>force group</tt></i></a></p></li><li><p><a href="#FORCESECURITYMODE"><i class="parameter"><tt>force security mode</tt></i></a></p></li><li><p><a href="#FORCEUSER"><i class="parameter"><tt>force user</tt></i></a></p></li><li><p><a href="#FSTYPE"><i class="parameter"><tt>fstype</tt></i></a></p></li><li><p><a href="#GROUP"><i class="parameter"><tt>group</tt></i></a></p></li><li><p><a href="#GUESTACCOUNT"><i class="parameter"><tt>guest account</tt></i></a></p></li><li><p><a href="#GUESTOK"><i class="parameter"><tt>guest ok</tt></i></a></p></li><li><p><a href="#GUESTONLY"><i class="parameter"><tt>guest only</tt></i></a></p></li><li><p><a href="#HIDEDOTFILES"><i class="parameter"><tt>hide dot files</tt></i></a></p></li><li><p><a href="#HIDEFILES"><i class="parameter"><tt>hide files</tt></i></a></p></li><li><p><a href="#HIDESPECIALFILES"><i class="parameter"><tt>hide special files</tt></i></a></p></li><li><p><a href="#HIDEUNREADABLE"><i class="parameter"><tt>hide unreadable</tt></i></a></p></li><li><p><a href="#HIDEUNWRITEABLEFILES"><i class="parameter"><tt>hide unwriteable files</tt></i></a></p></li><li><p><a href="#HOSTSALLOW"><i class="parameter"><tt>hosts allow</tt></i></a></p></li><li><p><a href="#HOSTSDENY"><i class="parameter"><tt>hosts deny</tt></i></a></p></li><li><p><a href="#INHERITACLS"><i class="parameter"><tt>inherit acls</tt></i></a></p></li><li><p><a href="#INHERITPERMISSIONS"><i class="parameter"><tt>inherit permissions</tt></i></a></p></li><li><p><a href="#INVALIDUSERS"><i class="parameter"><tt>invalid users</tt></i></a></p></li><li><p><a href="#LEVEL2OPLOCKS"><i class="parameter"><tt>level2 oplocks</tt></i></a></p></li><li><p><a href="#LOCKING"><i class="parameter"><tt>locking</tt></i></a></p></li><li><p><a href="#LPPAUSECOMMAND"><i class="parameter"><tt>lppause command</tt></i></a></p></li><li><p><a href="#LPQCOMMAND"><i class="parameter"><tt>lpq command</tt></i></a></p></li><li><p><a href="#LPRESUMECOMMAND"><i class="parameter"><tt>lpresume command</tt></i></a></p></li><li><p><a href="#LPRMCOMMAND"><i class="parameter"><tt>lprm command</tt></i></a></p></li><li><p><a href="#MAGICOUTPUT"><i class="parameter"><tt>magic output</tt></i></a></p></li><li><p><a href="#MAGICSCRIPT"><i class="parameter"><tt>magic script</tt></i></a></p></li><li><p><a href="#MANGLECASE"><i class="parameter"><tt>mangle case</tt></i></a></p></li><li><p><a href="#MANGLEDMAP"><i class="parameter"><tt>mangled map</tt></i></a></p></li><li><p><a href="#MANGLEDNAMES"><i class="parameter"><tt>mangled names</tt></i></a></p></li><li><p><a href="#MANGLINGCHAR"><i class="parameter"><tt>mangling char</tt></i></a></p></li><li><p><a href="#MAPACLINHERIT"><i class="parameter"><tt>map acl inherit</tt></i></a></p></li><li><p><a href="#MAPARCHIVE"><i class="parameter"><tt>map archive</tt></i></a></p></li><li><p><a href="#MAPHIDDEN"><i class="parameter"><tt>map hidden</tt></i></a></p></li><li><p><a href="#MAPSYSTEM"><i class="parameter"><tt>map system</tt></i></a></p></li><li><p><a href="#MAXCONNECTIONS"><i class="parameter"><tt>max connections</tt></i></a></p></li><li><p><a href="#MAXPRINTJOBS"><i class="parameter"><tt>max print jobs</tt></i></a></p></li><li><p><a href="#MAXREPORTEDPRINTJOBS"><i class="parameter"><tt>max reported print jobs</tt></i></a></p></li><li><p><a href="#MINPRINTSPACE"><i class="parameter"><tt>min print space</tt></i></a></p></li><li><p><a href="#MSDFSPROXY"><i class="parameter"><tt>msdfs proxy</tt></i></a></p></li><li><p><a href="#MSDFSROOT"><i class="parameter"><tt>msdfs root</tt></i></a></p></li><li><p><a href="#NTACLSUPPORT"><i class="parameter"><tt>nt acl support</tt></i></a></p></li><li><p><a href="#ONLYGUEST"><i class="parameter"><tt>only guest</tt></i></a></p></li><li><p><a href="#ONLYUSER"><i class="parameter"><tt>only user</tt></i></a></p></li><li><p><a href="#OPLOCKCONTENTIONLIMIT"><i class="parameter"><tt>oplock contention limit</tt></i></a></p></li><li><p><a href="#OPLOCKS"><i class="parameter"><tt>oplocks</tt></i></a></p></li><li><p><a href="#PATH"><i class="parameter"><tt>path</tt></i></a></p></li><li><p><a href="#POSIXLOCKING"><i class="parameter"><tt>posix locking</tt></i></a></p></li><li><p><a href="#POSTEXEC"><i class="parameter"><tt>postexec</tt></i></a></p></li><li><p><a href="#PREEXEC"><i class="parameter"><tt>preexec</tt></i></a></p></li><li><p><a href="#PREEXECCLOSE"><i class="parameter"><tt>preexec close</tt></i></a></p></li><li><p><a href="#PRESERVECASE"><i class="parameter"><tt>preserve case</tt></i></a></p></li><li><p><a href="#PRINTABLE"><i class="parameter"><tt>printable</tt></i></a></p></li><li><p><a href="#PRINTCAPNAME"><i class="parameter"><tt>printcap name</tt></i></a></p></li><li><p><a href="#PRINTCOMMAND"><i class="parameter"><tt>print command</tt></i></a></p></li><li><p><a href="#PRINTER"><i class="parameter"><tt>printer</tt></i></a></p></li><li><p><a href="#PRINTERADMIN"><i class="parameter"><tt>printer admin</tt></i></a></p></li><li><p><a href="#PRINTERNAME"><i class="parameter"><tt>printer name</tt></i></a></p></li><li><p><a href="#PRINTING"><i class="parameter"><tt>printing</tt></i></a></p></li><li><p><a href="#PRINTOK"><i class="parameter"><tt>print ok</tt></i></a></p></li><li><p><a href="#PROFILEACLS"><i class="parameter"><tt>profile acls</tt></i></a></p></li><li><p><a href="#PUBLIC"><i class="parameter"><tt>public</tt></i></a></p></li><li><p><a href="#QUEUEPAUSECOMMAND"><i class="parameter"><tt>queuepause command</tt></i></a></p></li><li><p><a href="#QUEUERESUMECOMMAND"><i class="parameter"><tt>queueresume command</tt></i></a></p></li><li><p><a href="#READLIST"><i class="parameter"><tt>read list</tt></i></a></p></li><li><p><a href="#READONLY"><i class="parameter"><tt>read only</tt></i></a></p></li><li><p><a href="#ROOTPOSTEXEC"><i class="parameter"><tt>root postexec</tt></i></a></p></li><li><p><a href="#ROOTPREEXEC"><i class="parameter"><tt>root preexec</tt></i></a></p></li><li><p><a href="#ROOTPREEXECCLOSE"><i class="parameter"><tt>root preexec close</tt></i></a></p></li><li><p><a href="#SECURITYMASK"><i class="parameter"><tt>security mask</tt></i></a></p></li><li><p><a href="#SETDIRECTORY"><i class="parameter"><tt>set directory</tt></i></a></p></li><li><p><a href="#SHAREMODES"><i class="parameter"><tt>share modes</tt></i></a></p></li><li><p><a href="#SHORTPRESERVECASE"><i class="parameter"><tt>short preserve case</tt></i></a></p></li><li><p><a href="#STRICTALLOCATE"><i class="parameter"><tt>strict allocate</tt></i></a></p></li><li><p><a href="#STRICTLOCKING"><i class="parameter"><tt>strict locking</tt></i></a></p></li><li><p><a href="#STRICTSYNC"><i class="parameter"><tt>strict sync</tt></i></a></p></li><li><p><a href="#SYNCALWAYS"><i class="parameter"><tt>sync always</tt></i></a></p></li><li><p><a href="#USECLIENTDRIVER"><i class="parameter"><tt>use client driver</tt></i></a></p></li><li><p><a href="#USER"><i class="parameter"><tt>user</tt></i></a></p></li><li><p><a href="#USERNAME"><i class="parameter"><tt>username</tt></i></a></p></li><li><p><a href="#USERS"><i class="parameter"><tt>users</tt></i></a></p></li><li><p><a href="#USESENDFILE"><i class="parameter"><tt>use sendfile</tt></i></a></p></li><li><p><a href="#-VALID"><i class="parameter"><tt>-valid</tt></i></a></p></li><li><p><a href="#VALIDUSERS"><i class="parameter"><tt>valid users</tt></i></a></p></li><li><p><a href="#VETOFILES"><i class="parameter"><tt>veto files</tt></i></a></p></li><li><p><a href="#VETOOPLOCKFILES"><i class="parameter"><tt>veto oplock files</tt></i></a></p></li><li><p><a href="#VFSOBJECT"><i class="parameter"><tt>vfs object</tt></i></a></p></li><li><p><a href="#VFSOBJECTS"><i class="parameter"><tt>vfs objects</tt></i></a></p></li><li><p><a href="#VOLUME"><i class="parameter"><tt>volume</tt></i></a></p></li><li><p><a href="#WIDELINKS"><i class="parameter"><tt>wide links</tt></i></a></p></li><li><p><a href="#WRITABLE"><i class="parameter"><tt>writable</tt></i></a></p></li><li><p><a href="#WRITEABLE"><i class="parameter"><tt>writeable</tt></i></a></p></li><li><p><a href="#WRITECACHESIZE"><i class="parameter"><tt>write cache size</tt></i></a></p></li><li><p><a href="#WRITELIST"><i class="parameter"><tt>write list</tt></i></a></p></li><li><p><a href="#WRITEOK"><i class="parameter"><tt>write ok</tt></i></a></p></li></ul></div></div><div class="refsect1" lang="en"><h2>EXPLANATION OF EACH PARAMETER</h2><div class="variablelist"><dl><dt><span class="term"><a name="ABORTSHUTDOWNSCRIPT"></a>abort shutdown script (G)</span></dt><dd><p><span class="emphasis"><em>This parameter only exists in the HEAD cvs branch</em></span>
+ each parameter for details. Note that some are synonyms.</p><div class="itemizedlist"><ul type="disc"><li><p><a href="#ABORTSHUTDOWNSCRIPT"><i class="parameter"><tt>abort shutdown script</tt></i></a></p></li><li><p><a href="#ADDGROUPSCRIPT"><i class="parameter"><tt>add group script</tt></i></a></p></li><li><p><a href="#ADDMACHINESCRIPT"><i class="parameter"><tt>add machine script</tt></i></a></p></li><li><p><a href="#ADDPRINTERCOMMAND"><i class="parameter"><tt>addprinter command</tt></i></a></p></li><li><p><a href="#ADDSHARECOMMAND"><i class="parameter"><tt>add share command</tt></i></a></p></li><li><p><a href="#ADDUSERSCRIPT"><i class="parameter"><tt>add user script</tt></i></a></p></li><li><p><a href="#ADDUSERTOGROUPSCRIPT"><i class="parameter"><tt>add user to group script</tt></i></a></p></li><li><p><a href="#ALGORITHMICRIDBASE"><i class="parameter"><tt>algorithmic rid base</tt></i></a></p></li><li><p><a href="#ALLOWTRUSTEDDOMAINS"><i class="parameter"><tt>allow trusted domains</tt></i></a></p></li><li><p><a href="#ANNOUNCEAS"><i class="parameter"><tt>announce as</tt></i></a></p></li><li><p><a href="#ANNOUNCEVERSION"><i class="parameter"><tt>announce version</tt></i></a></p></li><li><p><a href="#AUTHMETHODS"><i class="parameter"><tt>auth methods</tt></i></a></p></li><li><p><a href="#AUTOSERVICES"><i class="parameter"><tt>auto services</tt></i></a></p></li><li><p><a href="#BINDINTERFACESONLY"><i class="parameter"><tt>bind interfaces only</tt></i></a></p></li><li><p><a href="#BROWSELIST"><i class="parameter"><tt>browse list</tt></i></a></p></li><li><p><a href="#CHANGENOTIFYTIMEOUT"><i class="parameter"><tt>change notify timeout</tt></i></a></p></li><li><p><a href="#CHANGESHARECOMMAND"><i class="parameter"><tt>change share command</tt></i></a></p></li><li><p><a href="#CLIENTLANMANAUTH"><i class="parameter"><tt>client lanman auth</tt></i></a></p></li><li><p><a href="#CLIENTNTLMV2AUTH"><i class="parameter"><tt>client ntlmv2 auth</tt></i></a></p></li><li><p><a href="#CLIENTUSESPNEGO"><i class="parameter"><tt>client use spnego</tt></i></a></p></li><li><p><a href="#CONFIGFILE"><i class="parameter"><tt>config file</tt></i></a></p></li><li><p><a href="#DEADTIME"><i class="parameter"><tt>deadtime</tt></i></a></p></li><li><p><a href="#DEBUGHIRESTIMESTAMP"><i class="parameter"><tt>debug hires timestamp</tt></i></a></p></li><li><p><a href="#DEBUGLEVEL"><i class="parameter"><tt>debuglevel</tt></i></a></p></li><li><p><a href="#DEBUGPID"><i class="parameter"><tt>debug pid</tt></i></a></p></li><li><p><a href="#DEBUGTIMESTAMP"><i class="parameter"><tt>debug timestamp</tt></i></a></p></li><li><p><a href="#DEBUGUID"><i class="parameter"><tt>debug uid</tt></i></a></p></li><li><p><a href="#DEFAULTSERVICE"><i class="parameter"><tt>default service</tt></i></a></p></li><li><p><a href="#DEFAULT"><i class="parameter"><tt>default</tt></i></a></p></li><li><p><a href="#DELETEGROUPSCRIPT"><i class="parameter"><tt>delete group script</tt></i></a></p></li><li><p><a href="#DELETEPRINTERCOMMAND"><i class="parameter"><tt>deleteprinter command</tt></i></a></p></li><li><p><a href="#DELETESHARECOMMAND"><i class="parameter"><tt>delete share command</tt></i></a></p></li><li><p><a href="#DELETEUSERFROMGROUPSCRIPT"><i class="parameter"><tt>delete user from group script</tt></i></a></p></li><li><p><a href="#DELETEUSERSCRIPT"><i class="parameter"><tt>delete user script</tt></i></a></p></li><li><p><a href="#DFREECOMMAND"><i class="parameter"><tt>dfree command</tt></i></a></p></li><li><p><a href="#DISABLENETBIOS"><i class="parameter"><tt>disable netbios</tt></i></a></p></li><li><p><a href="#DISABLESPOOLSS"><i class="parameter"><tt>disable spoolss</tt></i></a></p></li><li><p><a href="#DISPLAYCHARSET"><i class="parameter"><tt>display charset</tt></i></a></p></li><li><p><a href="#DNSPROXY"><i class="parameter"><tt>dns proxy</tt></i></a></p></li><li><p><a href="#DOMAINLOGONS"><i class="parameter"><tt>domain logons</tt></i></a></p></li><li><p><a href="#DOMAINMASTER"><i class="parameter"><tt>domain master</tt></i></a></p></li><li><p><a href="#DOSCHARSET"><i class="parameter"><tt>dos charset</tt></i></a></p></li><li><p><a href="#ENABLERIDALGORITHM"><i class="parameter"><tt>enable rid algorithm</tt></i></a></p></li><li><p><a href="#ENCRYPTPASSWORDS"><i class="parameter"><tt>encrypt passwords</tt></i></a></p></li><li><p><a href="#ENHANCEDBROWSING"><i class="parameter"><tt>enhanced browsing</tt></i></a></p></li><li><p><a href="#ENUMPORTSCOMMAND"><i class="parameter"><tt>enumports command</tt></i></a></p></li><li><p><a href="#GETQUOTACOMMAND"><i class="parameter"><tt>get quota command</tt></i></a></p></li><li><p><a href="#GETWDCACHE"><i class="parameter"><tt>getwd cache</tt></i></a></p></li><li><p><a href="#GUESTACCOUNT"><i class="parameter"><tt>guest account</tt></i></a></p></li><li><p><a href="#HIDELOCALUSERS"><i class="parameter"><tt>hide local users</tt></i></a></p></li><li><p><a href="#HOMEDIRMAP"><i class="parameter"><tt>homedir map</tt></i></a></p></li><li><p><a href="#HOSTMSDFS"><i class="parameter"><tt>host msdfs</tt></i></a></p></li><li><p><a href="#HOSTNAMELOOKUPS"><i class="parameter"><tt>hostname lookups</tt></i></a></p></li><li><p><a href="#HOSTSEQUIV"><i class="parameter"><tt>hosts equiv</tt></i></a></p></li><li><p><a href="#IDMAPBACKEND"><i class="parameter"><tt>idmap backend</tt></i></a></p></li><li><p><a href="#IDMAPGID"><i class="parameter"><tt>idmap gid</tt></i></a></p></li><li><p><a href="#IDMAPUID"><i class="parameter"><tt>idmap uid</tt></i></a></p></li><li><p><a href="#INCLUDE"><i class="parameter"><tt>include</tt></i></a></p></li><li><p><a href="#INTERFACES"><i class="parameter"><tt>interfaces</tt></i></a></p></li><li><p><a href="#KEEPALIVE"><i class="parameter"><tt>keepalive</tt></i></a></p></li><li><p><a href="#KERNELOPLOCKS"><i class="parameter"><tt>kernel oplocks</tt></i></a></p></li><li><p><a href="#LANMANAUTH"><i class="parameter"><tt>lanman auth</tt></i></a></p></li><li><p><a href="#LARGEREADWRITE"><i class="parameter"><tt>large readwrite</tt></i></a></p></li><li><p><a href="#LDAPADMINDN"><i class="parameter"><tt>ldap admin dn</tt></i></a></p></li><li><p><a href="#LDAPDELETEDN"><i class="parameter"><tt>ldap delete dn</tt></i></a></p></li><li><p><a href="#LDAPFILTER"><i class="parameter"><tt>ldap filter</tt></i></a></p></li><li><p><a href="#LDAPMACHINESUFFIX"><i class="parameter"><tt>ldap machine suffix</tt></i></a></p></li><li><p><a href="#LDAPPASSWDSYNC"><i class="parameter"><tt>ldap passwd sync</tt></i></a></p></li><li><p><a href="#LDAPPORT"><i class="parameter"><tt>ldap port</tt></i></a></p></li><li><p><a href="#LDAPSERVER"><i class="parameter"><tt>ldap server</tt></i></a></p></li><li><p><a href="#LDAPSSL"><i class="parameter"><tt>ldap ssl</tt></i></a></p></li><li><p><a href="#LDAPSUFFIX"><i class="parameter"><tt>ldap suffix</tt></i></a></p></li><li><p><a href="#LDAPTRUSTIDS"><i class="parameter"><tt>ldap trust ids</tt></i></a></p></li><li><p><a href="#LDAPUSERSUFFIX"><i class="parameter"><tt>ldap user suffix</tt></i></a></p></li><li><p><a href="#LMANNOUNCE"><i class="parameter"><tt>lm announce</tt></i></a></p></li><li><p><a href="#LMINTERVAL"><i class="parameter"><tt>lm interval</tt></i></a></p></li><li><p><a href="#LOADPRINTERS"><i class="parameter"><tt>load printers</tt></i></a></p></li><li><p><a href="#LOCALMASTER"><i class="parameter"><tt>local master</tt></i></a></p></li><li><p><a href="#LOCKDIRECTORY"><i class="parameter"><tt>lock directory</tt></i></a></p></li><li><p><a href="#LOCKDIR"><i class="parameter"><tt>lock dir</tt></i></a></p></li><li><p><a href="#LOCKSPINCOUNT"><i class="parameter"><tt>lock spin count</tt></i></a></p></li><li><p><a href="#LOCKSPINTIME"><i class="parameter"><tt>lock spin time</tt></i></a></p></li><li><p><a href="#LOGFILE"><i class="parameter"><tt>log file</tt></i></a></p></li><li><p><a href="#LOGLEVEL"><i class="parameter"><tt>log level</tt></i></a></p></li><li><p><a href="#LOGONDRIVE"><i class="parameter"><tt>logon drive</tt></i></a></p></li><li><p><a href="#LOGONHOME"><i class="parameter"><tt>logon home</tt></i></a></p></li><li><p><a href="#LOGONPATH"><i class="parameter"><tt>logon path</tt></i></a></p></li><li><p><a href="#LOGONSCRIPT"><i class="parameter"><tt>logon script</tt></i></a></p></li><li><p><a href="#LPQCACHETIME"><i class="parameter"><tt>lpq cache time</tt></i></a></p></li><li><p><a href="#MACHINEPASSWORDTIMEOUT"><i class="parameter"><tt>machine password timeout</tt></i></a></p></li><li><p><a href="#MANGLEDSTACK"><i class="parameter"><tt>mangled stack</tt></i></a></p></li><li><p><a href="#MANGLEPREFIX"><i class="parameter"><tt>mangle prefix</tt></i></a></p></li><li><p><a href="#MANGLINGMETHOD"><i class="parameter"><tt>mangling method</tt></i></a></p></li><li><p><a href="#MAPTOGUEST"><i class="parameter"><tt>map to guest</tt></i></a></p></li><li><p><a href="#MAXDISKSIZE"><i class="parameter"><tt>max disk size</tt></i></a></p></li><li><p><a href="#MAXLOGSIZE"><i class="parameter"><tt>max log size</tt></i></a></p></li><li><p><a href="#MAXMUX"><i class="parameter"><tt>max mux</tt></i></a></p></li><li><p><a href="#MAXOPENFILES"><i class="parameter"><tt>max open files</tt></i></a></p></li><li><p><a href="#MAXPROTOCOL"><i class="parameter"><tt>max protocol</tt></i></a></p></li><li><p><a href="#MAXSMBDPROCESSES"><i class="parameter"><tt>max smbd processes</tt></i></a></p></li><li><p><a href="#MAXTTL"><i class="parameter"><tt>max ttl</tt></i></a></p></li><li><p><a href="#MAXWINSTTL"><i class="parameter"><tt>max wins ttl</tt></i></a></p></li><li><p><a href="#MAXXMIT"><i class="parameter"><tt>max xmit</tt></i></a></p></li><li><p><a href="#MESSAGECOMMAND"><i class="parameter"><tt>message command</tt></i></a></p></li><li><p><a href="#MINPASSWDLENGTH"><i class="parameter"><tt>min passwd length</tt></i></a></p></li><li><p><a href="#MINPASSWORDLENGTH"><i class="parameter"><tt>min password length</tt></i></a></p></li><li><p><a href="#MINPROTOCOL"><i class="parameter"><tt>min protocol</tt></i></a></p></li><li><p><a href="#MINWINSTTL"><i class="parameter"><tt>min wins ttl</tt></i></a></p></li><li><p><a href="#NAMECACHETIMEOUT"><i class="parameter"><tt>name cache timeout</tt></i></a></p></li><li><p><a href="#NAMERESOLVEORDER"><i class="parameter"><tt>name resolve order</tt></i></a></p></li><li><p><a href="#NETBIOSALIASES"><i class="parameter"><tt>netbios aliases</tt></i></a></p></li><li><p><a href="#NETBIOSNAME"><i class="parameter"><tt>netbios name</tt></i></a></p></li><li><p><a href="#NETBIOSSCOPE"><i class="parameter"><tt>netbios scope</tt></i></a></p></li><li><p><a href="#NISHOMEDIR"><i class="parameter"><tt>nis homedir</tt></i></a></p></li><li><p><a href="#NTLMAUTH"><i class="parameter"><tt>ntlm auth</tt></i></a></p></li><li><p><a href="#NTPIPESUPPORT"><i class="parameter"><tt>nt pipe support</tt></i></a></p></li><li><p><a href="#NTSTATUSSUPPORT"><i class="parameter"><tt>nt status support</tt></i></a></p></li><li><p><a href="#NULLPASSWORDS"><i class="parameter"><tt>null passwords</tt></i></a></p></li><li><p><a href="#OBEYPAMRESTRICTIONS"><i class="parameter"><tt>obey pam restrictions</tt></i></a></p></li><li><p><a href="#OPLOCKBREAKWAITTIME"><i class="parameter"><tt>oplock break wait time</tt></i></a></p></li><li><p><a href="#OS2DRIVERMAP"><i class="parameter"><tt>os2 driver map</tt></i></a></p></li><li><p><a href="#OSLEVEL"><i class="parameter"><tt>os level</tt></i></a></p></li><li><p><a href="#PAMPASSWORDCHANGE"><i class="parameter"><tt>pam password change</tt></i></a></p></li><li><p><a href="#PANICACTION"><i class="parameter"><tt>panic action</tt></i></a></p></li><li><p><a href="#PARANOIDSERVERSECURITY"><i class="parameter"><tt>paranoid server security</tt></i></a></p></li><li><p><a href="#PASSDBBACKEND"><i class="parameter"><tt>passdb backend</tt></i></a></p></li><li><p><a href="#PASSWDCHATDEBUG"><i class="parameter"><tt>passwd chat debug</tt></i></a></p></li><li><p><a href="#PASSWDCHAT"><i class="parameter"><tt>passwd chat</tt></i></a></p></li><li><p><a href="#PASSWDPROGRAM"><i class="parameter"><tt>passwd program</tt></i></a></p></li><li><p><a href="#PASSWORDLEVEL"><i class="parameter"><tt>password level</tt></i></a></p></li><li><p><a href="#PASSWORDSERVER"><i class="parameter"><tt>password server</tt></i></a></p></li><li><p><a href="#PIDDIRECTORY"><i class="parameter"><tt>pid directory</tt></i></a></p></li><li><p><a href="#PREFEREDMASTER"><i class="parameter"><tt>prefered master</tt></i></a></p></li><li><p><a href="#PREFERREDMASTER"><i class="parameter"><tt>preferred master</tt></i></a></p></li><li><p><a href="#PRELOADMODULES"><i class="parameter"><tt>preload modules</tt></i></a></p></li><li><p><a href="#PRELOAD"><i class="parameter"><tt>preload</tt></i></a></p></li><li><p><a href="#PRINTCAP"><i class="parameter"><tt>printcap</tt></i></a></p></li><li><p><a href="#PRIVATEDIR"><i class="parameter"><tt>private dir</tt></i></a></p></li><li><p><a href="#PROTOCOL"><i class="parameter"><tt>protocol</tt></i></a></p></li><li><p><a href="#READBMPX"><i class="parameter"><tt>read bmpx</tt></i></a></p></li><li><p><a href="#READRAW"><i class="parameter"><tt>read raw</tt></i></a></p></li><li><p><a href="#READSIZE"><i class="parameter"><tt>read size</tt></i></a></p></li><li><p><a href="#REALM"><i class="parameter"><tt>realm</tt></i></a></p></li><li><p><a href="#REMOTEANNOUNCE"><i class="parameter"><tt>remote announce</tt></i></a></p></li><li><p><a href="#REMOTEBROWSESYNC"><i class="parameter"><tt>remote browse sync</tt></i></a></p></li><li><p><a href="#RESTRICTANONYMOUS"><i class="parameter"><tt>restrict anonymous</tt></i></a></p></li><li><p><a href="#ROOTDIRECTORY"><i class="parameter"><tt>root directory</tt></i></a></p></li><li><p><a href="#ROOTDIR"><i class="parameter"><tt>root dir</tt></i></a></p></li><li><p><a href="#ROOT"><i class="parameter"><tt>root</tt></i></a></p></li><li><p><a href="#SECURITY"><i class="parameter"><tt>security</tt></i></a></p></li><li><p><a href="#SERVERSCHANNEL"><i class="parameter"><tt>server schannel</tt></i></a></p></li><li><p><a href="#SERVERSTRING"><i class="parameter"><tt>server string</tt></i></a></p></li><li><p><a href="#SETPRIMARYGROUPSCRIPT"><i class="parameter"><tt>set primary group script</tt></i></a></p></li><li><p><a href="#SETQUOTACOMMAND"><i class="parameter"><tt>set quota command</tt></i></a></p></li><li><p><a href="#SHOWADDPRINTERWIZARD"><i class="parameter"><tt>show add printer wizard</tt></i></a></p></li><li><p><a href="#SHUTDOWNSCRIPT"><i class="parameter"><tt>shutdown script</tt></i></a></p></li><li><p><a href="#SMBPASSWDFILE"><i class="parameter"><tt>smb passwd file</tt></i></a></p></li><li><p><a href="#SMBPORTS"><i class="parameter"><tt>smb ports</tt></i></a></p></li><li><p><a href="#SOCKETADDRESS"><i class="parameter"><tt>socket address</tt></i></a></p></li><li><p><a href="#SOCKETOPTIONS"><i class="parameter"><tt>socket options</tt></i></a></p></li><li><p><a href="#SOURCEENVIRONMENT"><i class="parameter"><tt>source environment</tt></i></a></p></li><li><p><a href="#STATCACHE"><i class="parameter"><tt>stat cache</tt></i></a></p></li><li><p><a href="#STRIPDOT"><i class="parameter"><tt>strip dot</tt></i></a></p></li><li><p><a href="#SYSLOGONLY"><i class="parameter"><tt>syslog only</tt></i></a></p></li><li><p><a href="#SYSLOG"><i class="parameter"><tt>syslog</tt></i></a></p></li><li><p><a href="#TEMPLATEHOMEDIR"><i class="parameter"><tt>template homedir</tt></i></a></p></li><li><p><a href="#TEMPLATEPRIMARYGROUP"><i class="parameter"><tt>template primary group</tt></i></a></p></li><li><p><a href="#TEMPLATESHELL"><i class="parameter"><tt>template shell</tt></i></a></p></li><li><p><a href="#TIMEOFFSET"><i class="parameter"><tt>time offset</tt></i></a></p></li><li><p><a href="#TIMESERVER"><i class="parameter"><tt>time server</tt></i></a></p></li><li><p><a href="#TIMESTAMPLOGS"><i class="parameter"><tt>timestamp logs</tt></i></a></p></li><li><p><a href="#UNICODE"><i class="parameter"><tt>unicode</tt></i></a></p></li><li><p><a href="#UNIXCHARSET"><i class="parameter"><tt>unix charset</tt></i></a></p></li><li><p><a href="#UNIXEXTENSIONS"><i class="parameter"><tt>unix extensions</tt></i></a></p></li><li><p><a href="#UNIXPASSWORDSYNC"><i class="parameter"><tt>unix password sync</tt></i></a></p></li><li><p><a href="#UPDATEENCRYPTED"><i class="parameter"><tt>update encrypted</tt></i></a></p></li><li><p><a href="#USEMMAP"><i class="parameter"><tt>use mmap</tt></i></a></p></li><li><p><a href="#USERNAMELEVEL"><i class="parameter"><tt>username level</tt></i></a></p></li><li><p><a href="#USERNAMEMAP"><i class="parameter"><tt>username map</tt></i></a></p></li><li><p><a href="#USESPNEGO"><i class="parameter"><tt>use spnego</tt></i></a></p></li><li><p><a href="#UTMPDIRECTORY"><i class="parameter"><tt>utmp directory</tt></i></a></p></li><li><p><a href="#UTMP"><i class="parameter"><tt>utmp</tt></i></a></p></li><li><p><a href="#WINBINDCACHETIME"><i class="parameter"><tt>winbind cache time</tt></i></a></p></li><li><p><a href="#WINBINDENABLELOCALACCOUNTS"><i class="parameter"><tt>winbind enable local accounts</tt></i></a></p></li><li><p><a href="#WINBINDENUMGROUPS"><i class="parameter"><tt>winbind enum groups</tt></i></a></p></li><li><p><a href="#WINBINDENUMUSERS"><i class="parameter"><tt>winbind enum users</tt></i></a></p></li><li><p><a href="#WINBINDGID"><i class="parameter"><tt>winbind gid</tt></i></a></p></li><li><p><a href="#WINBINDSEPARATOR"><i class="parameter"><tt>winbind separator</tt></i></a></p></li><li><p><a href="#WINBINDTRUSTEDDOMAINSONLY"><i class="parameter"><tt>winbind trusted domains only</tt></i></a></p></li><li><p><a href="#WINBINDUID"><i class="parameter"><tt>winbind uid</tt></i></a></p></li><li><p><a href="#WINBINDUSEDEFAULTDOMAIN"><i class="parameter"><tt>winbind use default domain</tt></i></a></p></li><li><p><a href="#WINSHOOK"><i class="parameter"><tt>wins hook</tt></i></a></p></li><li><p><a href="#WINSPARTNERS"><i class="parameter"><tt>wins partners</tt></i></a></p></li><li><p><a href="#WINSPROXY"><i class="parameter"><tt>wins proxy</tt></i></a></p></li><li><p><a href="#WINSSERVER"><i class="parameter"><tt>wins server</tt></i></a></p></li><li><p><a href="#WINSSUPPORT"><i class="parameter"><tt>wins support</tt></i></a></p></li><li><p><a href="#WORKGROUP"><i class="parameter"><tt>workgroup</tt></i></a></p></li><li><p><a href="#WRITERAW"><i class="parameter"><tt>write raw</tt></i></a></p></li><li><p><a href="#WTMPDIRECTORY"><i class="parameter"><tt>wtmp directory</tt></i></a></p></li></ul></div></div><div class="refsect1" lang="en"><h2>COMPLETE LIST OF SERVICE PARAMETERS</h2><p>Here is a list of all service parameters. See the section on
+ each parameter for details. Note that some are synonyms.</p><div class="itemizedlist"><ul type="disc"><li><p><a href="#ADMINUSERS"><i class="parameter"><tt>admin users</tt></i></a></p></li><li><p><a href="#ALLOWHOSTS"><i class="parameter"><tt>allow hosts</tt></i></a></p></li><li><p><a href="#AVAILABLE"><i class="parameter"><tt>available</tt></i></a></p></li><li><p><a href="#BLOCKINGLOCKS"><i class="parameter"><tt>blocking locks</tt></i></a></p></li><li><p><a href="#BLOCKSIZE"><i class="parameter"><tt>block size</tt></i></a></p></li><li><p><a href="#BROWSABLE"><i class="parameter"><tt>browsable</tt></i></a></p></li><li><p><a href="#BROWSEABLE"><i class="parameter"><tt>browseable</tt></i></a></p></li><li><p><a href="#CASESENSITIVE"><i class="parameter"><tt>case sensitive</tt></i></a></p></li><li><p><a href="#CASESIGNAMES"><i class="parameter"><tt>casesignames</tt></i></a></p></li><li><p><a href="#COMMENT"><i class="parameter"><tt>comment</tt></i></a></p></li><li><p><a href="#COPY"><i class="parameter"><tt>copy</tt></i></a></p></li><li><p><a href="#CREATEMASK"><i class="parameter"><tt>create mask</tt></i></a></p></li><li><p><a href="#CREATEMODE"><i class="parameter"><tt>create mode</tt></i></a></p></li><li><p><a href="#CSCPOLICY"><i class="parameter"><tt>csc policy</tt></i></a></p></li><li><p><a href="#DEFAULTCASE"><i class="parameter"><tt>default case</tt></i></a></p></li><li><p><a href="#DEFAULTDEVMODE"><i class="parameter"><tt>default devmode</tt></i></a></p></li><li><p><a href="#DELETEREADONLY"><i class="parameter"><tt>delete readonly</tt></i></a></p></li><li><p><a href="#DELETEVETOFILES"><i class="parameter"><tt>delete veto files</tt></i></a></p></li><li><p><a href="#DENYHOSTS"><i class="parameter"><tt>deny hosts</tt></i></a></p></li><li><p><a href="#DIRECTORYMASK"><i class="parameter"><tt>directory mask</tt></i></a></p></li><li><p><a href="#DIRECTORYMODE"><i class="parameter"><tt>directory mode</tt></i></a></p></li><li><p><a href="#DIRECTORYSECURITYMASK"><i class="parameter"><tt>directory security mask</tt></i></a></p></li><li><p><a href="#DIRECTORY"><i class="parameter"><tt>directory</tt></i></a></p></li><li><p><a href="#DONTDESCEND"><i class="parameter"><tt>dont descend</tt></i></a></p></li><li><p><a href="#DOSFILEMODE"><i class="parameter"><tt>dos filemode</tt></i></a></p></li><li><p><a href="#DOSFILETIMERESOLUTION"><i class="parameter"><tt>dos filetime resolution</tt></i></a></p></li><li><p><a href="#DOSFILETIMES"><i class="parameter"><tt>dos filetimes</tt></i></a></p></li><li><p><a href="#EXEC"><i class="parameter"><tt>exec</tt></i></a></p></li><li><p><a href="#FAKEDIRECTORYCREATETIMES"><i class="parameter"><tt>fake directory create times</tt></i></a></p></li><li><p><a href="#FAKEOPLOCKS"><i class="parameter"><tt>fake oplocks</tt></i></a></p></li><li><p><a href="#FOLLOWSYMLINKS"><i class="parameter"><tt>follow symlinks</tt></i></a></p></li><li><p><a href="#FORCECREATEMODE"><i class="parameter"><tt>force create mode</tt></i></a></p></li><li><p><a href="#FORCEDIRECTORYMODE"><i class="parameter"><tt>force directory mode</tt></i></a></p></li><li><p><a href="#FORCEDIRECTORYSECURITYMODE"><i class="parameter"><tt>force directory security mode</tt></i></a></p></li><li><p><a href="#FORCEGROUP"><i class="parameter"><tt>force group</tt></i></a></p></li><li><p><a href="#FORCESECURITYMODE"><i class="parameter"><tt>force security mode</tt></i></a></p></li><li><p><a href="#FORCEUSER"><i class="parameter"><tt>force user</tt></i></a></p></li><li><p><a href="#FSTYPE"><i class="parameter"><tt>fstype</tt></i></a></p></li><li><p><a href="#GROUP"><i class="parameter"><tt>group</tt></i></a></p></li><li><p><a href="#GUESTACCOUNT"><i class="parameter"><tt>guest account</tt></i></a></p></li><li><p><a href="#GUESTOK"><i class="parameter"><tt>guest ok</tt></i></a></p></li><li><p><a href="#GUESTONLY"><i class="parameter"><tt>guest only</tt></i></a></p></li><li><p><a href="#HIDEDOTFILES"><i class="parameter"><tt>hide dot files</tt></i></a></p></li><li><p><a href="#HIDEFILES"><i class="parameter"><tt>hide files</tt></i></a></p></li><li><p><a href="#HIDESPECIALFILES"><i class="parameter"><tt>hide special files</tt></i></a></p></li><li><p><a href="#HIDEUNREADABLE"><i class="parameter"><tt>hide unreadable</tt></i></a></p></li><li><p><a href="#HIDEUNWRITEABLEFILES"><i class="parameter"><tt>hide unwriteable files</tt></i></a></p></li><li><p><a href="#HOSTSALLOW"><i class="parameter"><tt>hosts allow</tt></i></a></p></li><li><p><a href="#HOSTSDENY"><i class="parameter"><tt>hosts deny</tt></i></a></p></li><li><p><a href="#INHERITACLS"><i class="parameter"><tt>inherit acls</tt></i></a></p></li><li><p><a href="#INHERITPERMISSIONS"><i class="parameter"><tt>inherit permissions</tt></i></a></p></li><li><p><a href="#INVALIDUSERS"><i class="parameter"><tt>invalid users</tt></i></a></p></li><li><p><a href="#LEVEL2OPLOCKS"><i class="parameter"><tt>level2 oplocks</tt></i></a></p></li><li><p><a href="#LOCKING"><i class="parameter"><tt>locking</tt></i></a></p></li><li><p><a href="#LPPAUSECOMMAND"><i class="parameter"><tt>lppause command</tt></i></a></p></li><li><p><a href="#LPQCOMMAND"><i class="parameter"><tt>lpq command</tt></i></a></p></li><li><p><a href="#LPRESUMECOMMAND"><i class="parameter"><tt>lpresume command</tt></i></a></p></li><li><p><a href="#LPRMCOMMAND"><i class="parameter"><tt>lprm command</tt></i></a></p></li><li><p><a href="#MAGICOUTPUT"><i class="parameter"><tt>magic output</tt></i></a></p></li><li><p><a href="#MAGICSCRIPT"><i class="parameter"><tt>magic script</tt></i></a></p></li><li><p><a href="#MANGLECASE"><i class="parameter"><tt>mangle case</tt></i></a></p></li><li><p><a href="#MANGLEDMAP"><i class="parameter"><tt>mangled map</tt></i></a></p></li><li><p><a href="#MANGLEDNAMES"><i class="parameter"><tt>mangled names</tt></i></a></p></li><li><p><a href="#MANGLINGCHAR"><i class="parameter"><tt>mangling char</tt></i></a></p></li><li><p><a href="#MAPACLINHERIT"><i class="parameter"><tt>map acl inherit</tt></i></a></p></li><li><p><a href="#MAPARCHIVE"><i class="parameter"><tt>map archive</tt></i></a></p></li><li><p><a href="#MAPHIDDEN"><i class="parameter"><tt>map hidden</tt></i></a></p></li><li><p><a href="#MAPSYSTEM"><i class="parameter"><tt>map system</tt></i></a></p></li><li><p><a href="#MAXCONNECTIONS"><i class="parameter"><tt>max connections</tt></i></a></p></li><li><p><a href="#MAXPRINTJOBS"><i class="parameter"><tt>max print jobs</tt></i></a></p></li><li><p><a href="#MAXREPORTEDPRINTJOBS"><i class="parameter"><tt>max reported print jobs</tt></i></a></p></li><li><p><a href="#MINPRINTSPACE"><i class="parameter"><tt>min print space</tt></i></a></p></li><li><p><a href="#MSDFSPROXY"><i class="parameter"><tt>msdfs proxy</tt></i></a></p></li><li><p><a href="#MSDFSROOT"><i class="parameter"><tt>msdfs root</tt></i></a></p></li><li><p><a href="#NTACLSUPPORT"><i class="parameter"><tt>nt acl support</tt></i></a></p></li><li><p><a href="#ONLYGUEST"><i class="parameter"><tt>only guest</tt></i></a></p></li><li><p><a href="#ONLYUSER"><i class="parameter"><tt>only user</tt></i></a></p></li><li><p><a href="#OPLOCKCONTENTIONLIMIT"><i class="parameter"><tt>oplock contention limit</tt></i></a></p></li><li><p><a href="#OPLOCKS"><i class="parameter"><tt>oplocks</tt></i></a></p></li><li><p><a href="#PATH"><i class="parameter"><tt>path</tt></i></a></p></li><li><p><a href="#POSIXLOCKING"><i class="parameter"><tt>posix locking</tt></i></a></p></li><li><p><a href="#POSTEXEC"><i class="parameter"><tt>postexec</tt></i></a></p></li><li><p><a href="#PREEXECCLOSE"><i class="parameter"><tt>preexec close</tt></i></a></p></li><li><p><a href="#PREEXEC"><i class="parameter"><tt>preexec</tt></i></a></p></li><li><p><a href="#PRESERVECASE"><i class="parameter"><tt>preserve case</tt></i></a></p></li><li><p><a href="#PRINTABLE"><i class="parameter"><tt>printable</tt></i></a></p></li><li><p><a href="#PRINTCAPNAME"><i class="parameter"><tt>printcap name</tt></i></a></p></li><li><p><a href="#PRINTCOMMAND"><i class="parameter"><tt>print command</tt></i></a></p></li><li><p><a href="#PRINTERADMIN"><i class="parameter"><tt>printer admin</tt></i></a></p></li><li><p><a href="#PRINTERNAME"><i class="parameter"><tt>printer name</tt></i></a></p></li><li><p><a href="#PRINTER"><i class="parameter"><tt>printer</tt></i></a></p></li><li><p><a href="#PRINTING"><i class="parameter"><tt>printing</tt></i></a></p></li><li><p><a href="#PRINTOK"><i class="parameter"><tt>print ok</tt></i></a></p></li><li><p><a href="#PROFILEACLS"><i class="parameter"><tt>profile acls</tt></i></a></p></li><li><p><a href="#PUBLIC"><i class="parameter"><tt>public</tt></i></a></p></li><li><p><a href="#QUEUEPAUSECOMMAND"><i class="parameter"><tt>queuepause command</tt></i></a></p></li><li><p><a href="#QUEUERESUMECOMMAND"><i class="parameter"><tt>queueresume command</tt></i></a></p></li><li><p><a href="#READLIST"><i class="parameter"><tt>read list</tt></i></a></p></li><li><p><a href="#READONLY"><i class="parameter"><tt>read only</tt></i></a></p></li><li><p><a href="#ROOTPOSTEXEC"><i class="parameter"><tt>root postexec</tt></i></a></p></li><li><p><a href="#ROOTPREEXECCLOSE"><i class="parameter"><tt>root preexec close</tt></i></a></p></li><li><p><a href="#ROOTPREEXEC"><i class="parameter"><tt>root preexec</tt></i></a></p></li><li><p><a href="#SECURITYMASK"><i class="parameter"><tt>security mask</tt></i></a></p></li><li><p><a href="#SETDIRECTORY"><i class="parameter"><tt>set directory</tt></i></a></p></li><li><p><a href="#SHAREMODES"><i class="parameter"><tt>share modes</tt></i></a></p></li><li><p><a href="#SHORTPRESERVECASE"><i class="parameter"><tt>short preserve case</tt></i></a></p></li><li><p><a href="#STRICTALLOCATE"><i class="parameter"><tt>strict allocate</tt></i></a></p></li><li><p><a href="#STRICTLOCKING"><i class="parameter"><tt>strict locking</tt></i></a></p></li><li><p><a href="#STRICTSYNC"><i class="parameter"><tt>strict sync</tt></i></a></p></li><li><p><a href="#SYNCALWAYS"><i class="parameter"><tt>sync always</tt></i></a></p></li><li><p><a href="#USECLIENTDRIVER"><i class="parameter"><tt>use client driver</tt></i></a></p></li><li><p><a href="#USERNAME"><i class="parameter"><tt>username</tt></i></a></p></li><li><p><a href="#USERS"><i class="parameter"><tt>users</tt></i></a></p></li><li><p><a href="#USER"><i class="parameter"><tt>user</tt></i></a></p></li><li><p><a href="#USESENDFILE"><i class="parameter"><tt>use sendfile</tt></i></a></p></li><li><p><a href="#VALIDUSERS"><i class="parameter"><tt>valid users</tt></i></a></p></li><li><p><a href="#-VALID"><i class="parameter"><tt>-valid</tt></i></a></p></li><li><p><a href="#VETOFILES"><i class="parameter"><tt>veto files</tt></i></a></p></li><li><p><a href="#VETOOPLOCKFILES"><i class="parameter"><tt>veto oplock files</tt></i></a></p></li><li><p><a href="#VFSOBJECTS"><i class="parameter"><tt>vfs objects</tt></i></a></p></li><li><p><a href="#VFSOBJECT"><i class="parameter"><tt>vfs object</tt></i></a></p></li><li><p><a href="#VOLUME"><i class="parameter"><tt>volume</tt></i></a></p></li><li><p><a href="#WIDELINKS"><i class="parameter"><tt>wide links</tt></i></a></p></li><li><p><a href="#WRITABLE"><i class="parameter"><tt>writable</tt></i></a></p></li><li><p><a href="#WRITEABLE"><i class="parameter"><tt>writeable</tt></i></a></p></li><li><p><a href="#WRITECACHESIZE"><i class="parameter"><tt>write cache size</tt></i></a></p></li><li><p><a href="#WRITELIST"><i class="parameter"><tt>write list</tt></i></a></p></li><li><p><a href="#WRITEOK"><i class="parameter"><tt>write ok</tt></i></a></p></li></ul></div></div><div class="refsect1" lang="en"><h2>EXPLANATION OF EACH PARAMETER</h2><div class="variablelist"><dl><dt><span class="term"><a name="ABORTSHUTDOWNSCRIPT"></a>abort shutdown script (G)</span></dt><dd><p><span class="emphasis"><em>This parameter only exists in the HEAD cvs branch</em></span>
This a full path name to a script called by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that
should stop a shutdown procedure issued by the <a href="#SHUTDOWNSCRIPT">
<i class="parameter"><tt>shutdown script</tt></i></a>.</p><p>This command will be run as user.</p><p>Default: <span class="emphasis"><em>None</em></span>.</p><p>Example: <b class="command">abort shutdown script = /sbin/shutdown -c</b></p></dd><dt><span class="term"><a name="ADDGROUPSCRIPT"></a>add group script (G)</span></dt><dd><p>This is the full pathname to a script that will be run
@@ -322,7 +322,7 @@ alias|alias|alias|alias...
created for all users accessing files on this server. For sites
that use Windows NT account databases as their primary user database
creating these users and keeping the user list in sync with the
- Windows NT PDC is an onerous task. This option allows <a href="smbd.8.html" target="_top">smbd</a> to create the required UNIX users
+ Windows NT PDC is an onerous task. This option allows smbd to create the required UNIX users
<span class="emphasis"><em>ON DEMAND</em></span> when a user accesses the Samba server.</p><p>In order to use this option, <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> must <span class="emphasis"><em>NOT</em></span> be set to <i class="parameter"><tt>security = share</tt></i>
and <i class="parameter"><tt>add user script</tt></i>
must be set to a full pathname for a script that will create a UNIX
@@ -367,7 +367,7 @@ alias|alias|alias|alias...
<i class="parameter"><tt>security</tt></i></a> option is set to
<tt class="constant">server</tt> or <tt class="constant">domain</tt>.
If it is set to no, then attempts to connect to a resource from
- a domain or workgroup other than the one which <a href="smbd.8.html" target="_top">smbd</a> is running
+ a domain or workgroup other than the one which smbd is running
in will fail, even if that domain is trusted by the remote server
doing the authentication.</p><p>This is useful if you only want your Samba server to
serve resources to users in the domain it is a member of. As
@@ -525,6 +525,9 @@ alias|alias|alias|alias...
responses, and not the weaker LM or NTLM.</p><p>Default : <b class="command">client ntlmv2 auth = no</b></p></dd><dt><span class="term"><a name="CLIENTUSESPNEGO"></a>client use spnego (G)</span></dt><dd><p> This variable controls controls whether samba clients will try
to use Simple and Protected NEGOciation (as specified by rfc2478) with
WindowsXP and Windows2000 servers to agree upon an authentication mechanism.
+ SPNEGO client support for SMB Signing is currently broken, so
+ you might want to turn this option off when operating with
+ Windows 2003 domain controllers in particular.
</p><p>Default: <span class="emphasis"><em>client use spnego = yes</em></span></p></dd><dt><span class="term"><a name="COMMENT"></a>comment (S)</span></dt><dd><p>This is a text field that is seen next to a share
when a client does a queries the server, either via the network
neighborhood or via <b class="command">net view</b> to list what shares
@@ -571,7 +574,7 @@ alias|alias|alias|alias...
policy</em></span>, and specifies how clients capable of offline
caching will cache the files in the share. The valid values
are: manual, documents, programs, disable.</p><p>These values correspond to those used on Windows servers.</p><p>For example, shares containing roaming profiles can have
- offline caching disabled using <b class="command">csc policy = disable</b>.</p><p>Default: <b class="command">csc policy = manual</b></p><p>Example: <b class="command">csc policy = programs</b></p></dd><dt><span class="term"><a name="DEADTIME"></a>dead time (G)</span></dt><dd><p>The value of the parameter (a decimal integer)
+ offline caching disabled using <b class="command">csc policy = disable</b>.</p><p>Default: <b class="command">csc policy = manual</b></p><p>Example: <b class="command">csc policy = programs</b></p></dd><dt><span class="term"><a name="DEADTIME"></a>deadtime (G)</span></dt><dd><p>The value of the parameter (a decimal integer)
represents the number of minutes of inactivity before a connection
is considered dead, and it is disconnected. The deadtime only takes
effect if the number of open files is zero.</p><p>This is useful to stop a server's resources being
@@ -600,8 +603,7 @@ alias|alias|alias|alias...
current euid, egid, uid and gid to the timestamp message headers
in the log file if turned on.</p><p>Note that the parameter <a href="#DEBUGTIMESTAMP"><i class="parameter"><tt>
debug timestamp</tt></i></a> must be on for this to have an
- effect.</p><p>Default: <b class="command">debug uid = no</b></p></dd><dt><span class="term"><a name="DEFAULT"></a>default (G)</span></dt><dd><p>A synonym for <a href="#DEFAULTSERVICE"><i class="parameter"><tt>
- default service</tt></i></a>.</p></dd><dt><span class="term"><a name="DEFAULTCASE"></a>default case (S)</span></dt><dd><p>See the section on <a href="#NAMEMANGLINGSECT" title="NAME MANGLING">
+ effect.</p><p>Default: <b class="command">debug uid = no</b></p></dd><dt><span class="term"><a name="DEFAULTCASE"></a>default case (S)</span></dt><dd><p>See the section on <a href="#NAMEMANGLINGSECT" title="NAME MANGLING">
NAME MANGLING</a>. Also note the <a href="#SHORTPRESERVECASE">
<i class="parameter"><tt>short preserve case</tt></i></a> parameter.</p><p>Default: <b class="command">default case = lower</b></p></dd><dt><span class="term"><a name="DEFAULTDEVMODE"></a>default devmode (S)</span></dt><dd><p>This parameter is only applicable to <a href="#PRINTOK">printable</a> services.
When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba
@@ -642,7 +644,8 @@ alias|alias|alias|alias...
[pub]
path = /%S
-</pre></dd><dt><span class="term"><a name="DELETEGROUPSCRIPT"></a>delete group script (G)</span></dt><dd><p>This is the full pathname to a script that will
+</pre></dd><dt><span class="term"><a name="DEFAULT"></a>default (G)</span></dt><dd><p>A synonym for <a href="#DEFAULTSERVICE"><i class="parameter"><tt>
+ default service</tt></i></a>.</p></dd><dt><span class="term"><a name="DELETEGROUPSCRIPT"></a>delete group script (G)</span></dt><dd><p>This is the full pathname to a script that will
be run <span class="emphasis"><em>AS ROOT</em></span> <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a group is requested to be deleted.
It will expand any <i class="parameter"><tt>%g</tt></i> to the group name passed.
This script is only useful for installations using the Windows NT domain administration tools.
@@ -737,7 +740,7 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
</pre><p>or perhaps (on Sys V based systems):</p><pre class="programlisting">
#!/bin/sh
/usr/bin/df -k $1 | tail -1 | awk '{print $3&quot; &quot;$5}'
-</pre><p>Note that you may have to replace the command names with full path names on some systems.</p></dd><dt><span class="term"><a name="DIRECTORY"></a>directory (S)</span></dt><dd><p>Synonym for <a href="#PATH"><i class="parameter"><tt>path</tt></i></a>.</p></dd><dt><span class="term"><a name="DIRECTORYMASK"></a>directory mask (S)</span></dt><dd><p>This parameter is the octal modes which are
+</pre><p>Note that you may have to replace the command names with full path names on some systems.</p></dd><dt><span class="term"><a name="DIRECTORYMASK"></a>directory mask (S)</span></dt><dd><p>This parameter is the octal modes which are
used when converting DOS modes to UNIX modes when creating UNIX
directories.</p><p>When a directory is created, the necessary permissions are
calculated according to the mapping from DOS modes to UNIX permissions,
@@ -777,7 +780,7 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
force directory security mode</tt></i></a>, <a href="#SECURITYMASK">
<i class="parameter"><tt>security mask</tt></i></a>,
<a href="#FORCESECURITYMODE"><i class="parameter"><tt>force security mode
- </tt></i></a> parameters.</p><p>Default: <b class="command">directory security mask = 0777</b></p><p>Example: <b class="command">directory security mask = 0700</b></p></dd><dt><span class="term"><a name="DISABLENETBIOS"></a>disable netbios (G)</span></dt><dd><p>Enabling this parameter will disable netbios support
+ </tt></i></a> parameters.</p><p>Default: <b class="command">directory security mask = 0777</b></p><p>Example: <b class="command">directory security mask = 0700</b></p></dd><dt><span class="term"><a name="DIRECTORY"></a>directory (S)</span></dt><dd><p>Synonym for <a href="#PATH"><i class="parameter"><tt>path</tt></i></a>.</p></dd><dt><span class="term"><a name="DISABLENETBIOS"></a>disable netbios (G)</span></dt><dd><p>Enabling this parameter will disable netbios support
in Samba. Netbios is the only available form of browsing in
all windows versions except for 2000 and XP. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Note that clients that only support netbios won't be able to
see your samba server when netbios support is disabled.
@@ -1049,7 +1052,13 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
for a share. The default type is <tt class="constant">NTFS</tt> for
compatibility with Windows NT but this can be changed to other
strings such as <tt class="constant">Samba</tt> or <tt class="constant">FAT
- </tt> if required.</p><p>Default: <b class="command">fstype = NTFS</b></p><p>Example: <b class="command">fstype = Samba</b></p></dd><dt><span class="term"><a name="GETWDCACHE"></a>getwd cache (G)</span></dt><dd><p>This is a tuning option. When this is enabled a
+ </tt> if required.</p><p>Default: <b class="command">fstype = NTFS</b></p><p>Example: <b class="command">fstype = Samba</b></p></dd><dt><span class="term"><a name="GETQUOTACOMMAND"></a>get quota command (G)</span></dt><dd><p>The <b class="command">get quota command</b> should only be used
+ whenever there is no operating system API available from the OS that
+ samba can use.</p><p>This parameter should specify the path to a script that
+ queries the quota information for the specified
+ user/group for the partition that
+ the specified directory is on.</p><p>Such a script should take 3 arguments:</p><div class="itemizedlist"><ul type="disc"><li><p>directory</p></li><li><p>type of query</p></li><li><p>uid of user or gid of group</p></li></ul></div><p>The type of query can be one of :</p><div class="itemizedlist"><ul type="disc"><li><p>1 - user quotas</p></li><li><p>2 - user default quotas (uid = -1)</p></li><li><p>3 - group quotas</p></li><li><p>4 - group default quotas (gid = -1)</p></li></ul></div><p>This script should print its output according to the following format:</p><div class="itemizedlist"><ul type="disc"><li><p>Line 1 - quota flags (0 = no quotas, 1 = quotas enabled, 2 = quotas enabled and enforced)</p></li><li><p>Line 2 - number of currently used blocks</p></li><li><p>Line 3 - the softlimit number of blocks</p></li><li><p>Line 4 - the hardlimit number of blocks</p></li><li><p>Line 5 - currently used number of inodes</p></li><li><p>Line 6 - the softlimit number of inodes</p></li><li><p>Line 7 - the hardlimit number of inodes</p></li><li><p>Line 8(optional) - the number of bytes in a block(default is 1024)</p></li></ul></div><p>See also the <a href="#SETQUOTACOMMAND"><i class="parameter"><tt>set quota command</tt></i></a> parameter.
+ </p><p>Default: <b class="command">get quota command = </b></p><p>Example: <b class="command">get quota command = /usr/local/sbin/query_quota</b></p></dd><dt><span class="term"><a name="GETWDCACHE"></a>getwd cache (G)</span></dt><dd><p>This is a tuning option. When this is enabled a
caching algorithm will be used to reduce the time taken for getwd()
calls. This can have a significant impact on performance, especially
when the <a href="#WIDELINKS"><i class="parameter"><tt>wide links</tt></i>
@@ -1124,7 +1133,7 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
to browse Dfs trees hosted on the server.</p><p>See also the <a href="#MSDFSROOT"><i class="parameter"><tt>
msdfs root</tt></i></a> share level parameter. For
more information on setting up a Dfs tree on Samba,
- refer to <a href="msdfs_setup.html" target="_top">msdfs_setup.html</a>.
+ refer to <a href="#">???</a>.
</p><p>Default: <b class="command">host msdfs = no</b></p></dd><dt><span class="term"><a name="HOSTNAMELOOKUPS"></a>hostname lookups (G)</span></dt><dd><p>Specifies whether samba should use (expensive)
hostname lookups or use the ip addresses instead. An example place
where hostname lookups are currently used is when checking
@@ -1164,7 +1173,13 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
<i class="parameter"><tt>hosts equiv</tt></i> option be only used if you really
know what you are doing, or perhaps on a home network where you trust
your spouse and kids. And only if you <span class="emphasis"><em>really</em></span> trust
- them :-).</p></div><p>Default: <span class="emphasis"><em>no host equivalences</em></span></p><p>Example: <b class="command">hosts equiv = /etc/hosts.equiv</b></p></dd><dt><span class="term"><a name="IDMAPGID"></a>idmap gid (G)</span></dt><dd><p>The idmap gid parameter specifies the range of group ids that are allocated for
+ them :-).</p></div><p>Default: <span class="emphasis"><em>no host equivalences</em></span></p><p>Example: <b class="command">hosts equiv = /etc/hosts.equiv</b></p></dd><dt><span class="term"><a name="IDMAPBACKEND"></a>idmap backend (G)</span></dt><dd><p>
+ The purpose of the idmap backend parameter is to allow idmap to NOT use the local idmap
+ tdb file to obtain SID to UID / GID mappings, but instead to obtain them from a common
+ LDAP backend. This way all domain members and controllers will have the same UID and GID
+ to SID mappings. This avoids the risk of UID / GID inconsistencies across UNIX / Linux
+ systems that are sharing information over protocols other than SMB/CIFS (ie: NFS).
+ </p><p>Default: <b class="command">idmap backend = &lt;empty string&gt;</b></p><p>Example: <b class="command">idmap backend = ldapsam://ldapslave.example.com</b></p></dd><dt><span class="term"><a name="IDMAPGID"></a>idmap gid (G)</span></dt><dd><p>The idmap gid parameter specifies the range of group ids that are allocated for
the purpose of mapping UNX groups to NT group SIDs. This range of group ids should have no
existing local or NIS groups within it as strange conflicts can occur otherwise.</p><p>The availability of an idmap gid range is essential for correct operation of
all group mapping.</p><p>Default: <b class="command">idmap gid = &lt;empty string&gt;</b></p><p>Example: <b class="command">idmap gid = 10000-20000</b></p></dd><dt><span class="term"><a name="IDMAPUID"></a>idmap uid (G)</span></dt><dd><p>The idmap uid parameter specifies the range of user ids that are allocated for use
@@ -1375,12 +1390,12 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
<tt class="constant">yes</tt> doesn't mean that Samba will <span class="emphasis"><em>become</em></span> the
local master browser on a subnet, just that <b class="command">nmbd</b>
will <span class="emphasis"><em>participate</em></span> in elections for local master browser.</p><p>Setting this value to <tt class="constant">no</tt> will cause <b class="command">nmbd</b> <span class="emphasis"><em>never</em></span> to become a local
- master browser.</p><p>Default: <b class="command">local master = yes</b></p></dd><dt><span class="term"><a name="LOCKDIR"></a>lock dir (G)</span></dt><dd><p>Synonym for <a href="#LOCKDIRECTORY"><i class="parameter"><tt>
- lock directory</tt></i></a>.
-</p></dd><dt><span class="term"><a name="LOCKDIRECTORY"></a>lock directory (G)</span></dt><dd><p>This option specifies the directory where lock
+ master browser.</p><p>Default: <b class="command">local master = yes</b></p></dd><dt><span class="term"><a name="LOCKDIRECTORY"></a>lock directory (G)</span></dt><dd><p>This option specifies the directory where lock
files will be placed. The lock files are used to implement the
<a href="#MAXCONNECTIONS"><i class="parameter"><tt>max connections</tt></i>
- </a> option.</p><p>Default: <b class="command">lock directory = ${prefix}/var/locks</b></p><p>Example: <b class="command">lock directory = /var/run/samba/locks</b></p></dd><dt><span class="term"><a name="LOCKING"></a>locking (S)</span></dt><dd><p>This controls whether or not locking will be
+ </a> option.</p><p>Default: <b class="command">lock directory = ${prefix}/var/locks</b></p><p>Example: <b class="command">lock directory = /var/run/samba/locks</b></p></dd><dt><span class="term"><a name="LOCKDIR"></a>lock dir (G)</span></dt><dd><p>Synonym for <a href="#LOCKDIRECTORY"><i class="parameter"><tt>
+ lock directory</tt></i></a>.
+</p></dd><dt><span class="term"><a name="LOCKING"></a>locking (S)</span></dt><dd><p>This controls whether or not locking will be
performed by the server in response to lock requests from the
client.</p><p>If <b class="command">locking = no</b>, all lock and unlock
requests will appear to succeed and all lock queries will report
@@ -1398,7 +1413,7 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
in case the lock could later be aquired. This behavior
is used to support PC database formats such as MS Access
and FoxPro.
- </p><p>Default: <b class="command">lock spin count = 2</b></p></dd><dt><span class="term"><a name="LOCKSPINTIME"></a>lock spin time (G)</span></dt><dd><p>The time in microseconds that smbd should
+ </p><p>Default: <b class="command">lock spin count = 3</b></p></dd><dt><span class="term"><a name="LOCKSPINTIME"></a>lock spin time (G)</span></dt><dd><p>The time in microseconds that smbd should
pause before attempting to gain a failed lock. See
<a href="#LOCKSPINCOUNT"><i class="parameter"><tt>lock spin
count</tt></i></a> for more details.</p><p>Default: <b class="command">lock spin time = 10</b></p></dd><dt><span class="term"><a name="LOGFILE"></a>log file (G)</span></dt><dd><p>This option allows you to override the name
@@ -1465,8 +1480,8 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
suggested command would be to add <b class="command">NET TIME \\SERVER /SET
/YES</b>, to force every machine to synchronize clocks with
the same time server. Another use would be to add <b class="command">NET USE
- U: \\SERVER\UTILS</b> for commonly used utilities, or <b class="command">
- NET USE Q: \\SERVER\ISO9001_QA</b> for example.</p><p>Note that it is particularly important not to allow write
+ U: \\SERVER\UTILS</b> for commonly used utilities, or </p><pre class="screen">
+ <b class="userinput"><tt>NET USE Q: \\SERVER\ISO9001_QA</tt></b></pre><p> for example.</p><p>Note that it is particularly important not to allow write
access to the [netlogon] share, or to grant users write permission
on the batch files in a secure environment, as this would allow
the batch files to be arbitrarily modified and security to be
@@ -1541,8 +1556,8 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
</tt></i></a> parameter.</p><p>Default: <span class="emphasis"><em>depends on the setting of <i class="parameter"><tt>printing
</tt></i></em></span></p><p>Example 1: <b class="command">lprm command = /usr/bin/lprm -P%p %j</b></p><p>Example 2: <b class="command">lprm command = /usr/bin/cancel %p-%j</b></p></dd><dt><span class="term"><a name="MACHINEPASSWORDTIMEOUT"></a>machine password timeout (G)</span></dt><dd><p>If a Samba server is a member of a Windows
NT Domain (see the <a href="#SECURITYEQUALSDOMAIN">security = domain</a>)
- parameter) then periodically a running <a href="smbd.8.html" target="_top">
- smbd(8)</a> process will try and change the MACHINE ACCOUNT
+ parameter) then periodically a running smbd
+ process will try and change the MACHINE ACCOUNT
PASSWORD stored in the TDB called <tt class="filename">private/secrets.tdb
</tt>. This parameter specifies how often this password
will be changed, in seconds. The default is one week (expressed in
@@ -1613,10 +1628,12 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
characters from the original name used when generating
the mangled names. A larger value will give a weaker
hash and therefore more name collisions. The minimum
- value is 1 and the maximum value is 6.</p><p>Default: <b class="command">mangle prefix = 1</b></p><p>Example: <b class="command">mangle prefix = 4</b></p></dd><dt><span class="term"><a name="MANGLINGCHAR"></a>mangling char (S)</span></dt><dd><p>This controls what character is used as
+ value is 1 and the maximum value is 6.</p><p>
+ mangle prefix is effective only when mangling method is hash2.
+ </p><p>Default: <b class="command">mangle prefix = 1</b></p><p>Example: <b class="command">mangle prefix = 4</b></p></dd><dt><span class="term"><a name="MANGLINGCHAR"></a>mangling char (S)</span></dt><dd><p>This controls what character is used as
the <span class="emphasis"><em>magic</em></span> character in <a href="#NAMEMANGLINGSECT" title="NAME MANGLING">name mangling</a>. The
default is a '~' but this may interfere with some software. Use this option to set
- it to whatever you prefer.</p><p>Default: <b class="command">mangling char = ~</b></p><p>Example: <b class="command">mangling char = ^</b></p></dd><dt><span class="term"><a name="MANGLINGMETHOD"></a>mangling method (G)</span></dt><dd><p> controls the algorithm used for the generating
+ it to whatever you prefer. This is effective only when mangling method is hash.</p><p>Default: <b class="command">mangling char = ~</b></p><p>Example: <b class="command">mangling char = ^</b></p></dd><dt><span class="term"><a name="MANGLINGMETHOD"></a>mangling method (G)</span></dt><dd><p> controls the algorithm used for the generating
the mangled names. Can take two different values, &quot;hash&quot; and
&quot;hash2&quot;. &quot;hash&quot; is the default and is the algorithm that has been
used in Samba for many years. &quot;hash2&quot; is a newer and considered
@@ -1702,7 +1719,7 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
this parameter so you should never need to touch this parameter.</p><p>Default: <b class="command">max open files = 10000</b></p></dd><dt><span class="term"><a name="MAXPRINTJOBS"></a>max print jobs (S)</span></dt><dd><p>This parameter limits the maximum number of
jobs allowable in a Samba printer queue at any given moment.
If this number is exceeded, <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote &quot;Out of Space&quot; to the client.
- See all <a href="#TOTALPRINTJOBS"><i class="parameter"><tt>total
+ See all <a href="#"><i class="parameter"><tt>total
print jobs</tt></i></a>.
</p><p>Default: <b class="command">max print jobs = 1000</b></p><p>Example: <b class="command">max print jobs = 5000</b></p></dd><dt><span class="term"><a name="MAXPROTOCOL"></a>max protocol (G)</span></dt><dd><p>The value of the parameter (a string) is the highest
protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul type="disc"><li><p><tt class="constant">CORE</tt>: Earliest version. No
@@ -1719,7 +1736,7 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
A value of zero means there is no limit on the number of print
jobs reported.
- See all <a href="#TOTALPRINTJOBS"><i class="parameter"><tt>total
+ See all <a href="#"><i class="parameter"><tt>total
print jobs</tt></i></a> and <a href="#MAXPRINTJOBS"><i class="parameter"><tt>max print
jobs</tt></i></a> parameters.
</p><p>Default: <b class="command">max reported print jobs = 0</b></p><p>Example: <b class="command">max reported print jobs = 1000</b></p></dd><dt><span class="term"><a name="MAXSMBDPROCESSES"></a>max smbd processes (G)</span></dt><dd><p>This parameter limits the maximum number of <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended
@@ -1801,8 +1818,7 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
Dfs links are specified in the share directory by symbolic
links of the form <tt class="filename">msdfs:serverA\\shareA,serverB\\shareB</tt>
and so on. For more information on setting up a Dfs tree
- on Samba, refer to <a href="msdfs.html" target="_top">&quot;Hosting a Microsoft
- Distributed File System tree on Samba&quot;</a> document.</p><p>See also <a href="#HOSTMSDFS"><i class="parameter"><tt>host msdfs</tt></i></a></p><p>Default: <b class="command">msdfs root = no</b></p></dd><dt><span class="term"><a name="NAMECACHETIMEOUT"></a>name cache timeout (G)</span></dt><dd><p>Specifies the number of seconds it takes before
+ on Samba, refer to <a href="#">???</a>.</p><p>See also <a href="#HOSTMSDFS"><i class="parameter"><tt>host msdfs</tt></i></a></p><p>Default: <b class="command">msdfs root = no</b></p></dd><dt><span class="term"><a name="NAMECACHETIMEOUT"></a>name cache timeout (G)</span></dt><dd><p>Specifies the number of seconds it takes before
entries in samba's hostname resolve cache time out. If
the timeout is set to 0. the caching is disabled.
</p><p>Default: <b class="command">name cache timeout = 660</b></p><p>Example: <b class="command">name cache timeout = 0</b></p></dd><dt><span class="term"><a name="NAMERESOLVEORDER"></a>name resolve order (G)</span></dt><dd><p>This option is used by the programs in the Samba
@@ -1833,7 +1849,7 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
first, followed by a broadcast attempt, followed by a normal
system hostname lookup.</p><p>When Samba is functioning in ADS security mode (<b class="command">security = ads</b>)
it is advised to use following settings for <i class="parameter"><tt>name resolve order</tt></i>:</p><p><b class="command">name resolve order = wins bcast</b></p><p>DC lookups will still be done via DNS, but fallbacks to netbios names will
- not inundate your DNS servers with needless querys for DOMAIN&lt;0x1c&gt; lookups.</p></dd><dt><span class="term"><a name="NETBIOSALIASES"></a>netbios aliases (G)</span></dt><dd><p>This is a list of NetBIOS names that <a href="nmbd.8.html" target="_top">nmbd(8)</a> will
+ not inundate your DNS servers with needless querys for DOMAIN&lt;0x1c&gt; lookups.</p></dd><dt><span class="term"><a name="NETBIOSALIASES"></a>netbios aliases (G)</span></dt><dd><p>This is a list of NetBIOS names that nmbd will
advertise as additional names by which the Samba server is known. This allows one machine
to appear in browse lists under multiple names. If a machine is acting as a browse server
or logon server none of these names will be advertised as either browse server or logon
@@ -1939,9 +1955,8 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
names to OS/2 printer driver names. The format is:</p><p>&lt;nt driver name&gt; = &lt;os2 driver name&gt;.&lt;device name&gt;</p><p>For example, a valid entry using the HP LaserJet 5
printer driver would appear as <b class="command">HP LaserJet 5L = LASERJET.HP
LaserJet 5L</b>.</p><p>The need for the file is due to the printer driver namespace
- problem described in the <a href="printing.html" target="_top">Samba
- Printing HOWTO</a>. For more details on OS/2 clients, please
- refer to the OS2-Client-HOWTO containing in the Samba documentation.</p><p>Default: <b class="command">os2 driver map = &lt;empty string&gt;</b></p></dd><dt><span class="term"><a name="OSLEVEL"></a>os level (G)</span></dt><dd><p>This integer value controls what level Samba
+ problem described in <a href="#">???</a>. For more details on OS/2 clients, please
+ refer to <a href="#">???</a>.</p><p>Default: <b class="command">os2 driver map = &lt;empty string&gt;</b></p></dd><dt><span class="term"><a name="OSLEVEL"></a>os level (G)</span></dt><dd><p>This integer value controls what level Samba
advertises itself as for browse elections. The value of this
parameter determines whether <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>
has a chance of becoming a local master browser for the <i class="parameter"><tt>
@@ -1966,15 +1981,15 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
to the logs and exit.
</p><p>Disabling this option prevents Samba from making
this check, which involves deliberatly attempting a
- bad logon to the remote server.</p><p>Default: <b class="command">paranoid server security = yes</b></p></dd><dt><span class="term"><a name="PASSDBBACKEND"></a>passdb backend (G)</span></dt><dd xmlns:ns1=""><p>This option allows the administrator to chose which backends
+ bad logon to the remote server.</p><p>Default: <b class="command">paranoid server security = yes</b></p></dd><dt><span class="term"><a name="PASSDBBACKEND"></a>passdb backend (G)</span></dt><dd><p>This option allows the administrator to chose which backends
to retrieve and store passwords with. This allows (for example) both
smbpasswd and tdbsam to be used without a recompile. Multiple
backends can be specified, separated by spaces. The backends will be
searched in the order they are specified. New users are always added
to the first backend specified. </p><p>This parameter is in two parts, the backend's name, and a 'location'
string that has meaning only to that particular backed. These are separated
- by a : character.</p><ns1:p>Available backends can include:
- </ns1:p><div class="itemizedlist"><ul type="disc"><li><p><b class="command">smbpasswd</b> - The default smbpasswd
+ by a : character.</p><p>Available backends can include:
+ </p><div class="itemizedlist"><ul type="disc"><li><p><b class="command">smbpasswd</b> - The default smbpasswd
backend. Takes a path to the smbpasswd file as an optional argument.
</p></li><li><p><b class="command">tdbsam</b> - The TDB based password storage
backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb
@@ -1991,12 +2006,22 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
The MySQL based passdb backend. Takes an identifier as
argument. Read the Samba HOWTO Collection for configuration
details.
- </p></li><li><p><b class="command">guest</b> -
- Very simple backend that only provides one user: the guest user.
- Only maps the NT guest user to the <i class="parameter"><tt>guest account</tt></i>.
- Required in pretty much all situations.
- </p></li></ul></div><ns1:p>
- </ns1:p><p>Default: <b class="command">passdb backend = smbpasswd</b></p><p>Example: <b class="command">passdb backend = tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd guest</b></p><p>Example: <b class="command">passdb backend = ldapsam:ldaps://ldap.example.com guest</b></p><p>Example: <b class="command">passdb backend = mysql:my_plugin_args tdbsam:/etc/samba/private/passdb.tdb guest</b></p></dd><dt><span class="term"><a name="PASSWDCHAT"></a>passwd chat (G)</span></dt><dd><p>This string controls the <span class="emphasis"><em>&quot;chat&quot;</em></span>
+ </p></li></ul></div><p>
+ </p><p>Default: <b class="command">passdb backend = smbpasswd</b></p><p>Example: <b class="command">passdb backend = tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd</b></p><p>Example: <b class="command">passdb backend = ldapsam:ldaps://ldap.example.com</b></p><p>Example: <b class="command">passdb backend = mysql:my_plugin_args tdbsam</b></p></dd><dt><span class="term"><a name="PASSWDCHATDEBUG"></a>passwd chat debug (G)</span></dt><dd><p>This boolean specifies if the passwd chat script
+ parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the
+ strings passed to and received from the passwd chat are printed
+ in the <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> log with a
+ <a href="#DEBUGLEVEL"><i class="parameter"><tt>debug level</tt></i></a>
+ of 100. This is a dangerous option as it will allow plaintext passwords
+ to be seen in the <b class="command">smbd</b> log. It is available to help
+ Samba admins debug their <i class="parameter"><tt>passwd chat</tt></i> scripts
+ when calling the <i class="parameter"><tt>passwd program</tt></i> and should
+ be turned off after this has been done. This option has no effect if the
+ <a href="#PAMPASSWORDCHANGE"><i class="parameter"><tt>pam password change</tt></i></a>
+ paramter is set. This parameter is off by default.</p><p>See also <a href="#PASSWDCHAT"><i class="parameter"><tt>passwd chat</tt></i>
+ </a>, <a href="#PAMPASSWORDCHANGE"><i class="parameter"><tt>pam password change</tt></i>
+ </a>, <a href="#PASSWDPROGRAM"><i class="parameter"><tt>passwd program</tt></i>
+ </a>.</p><p>Default: <b class="command">passwd chat debug = no</b></p></dd><dt><span class="term"><a name="PASSWDCHAT"></a>passwd chat (G)</span></dt><dd><p>This string controls the <span class="emphasis"><em>&quot;chat&quot;</em></span>
conversation that takes places between <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing
program to change the user's password. The string describes a
sequence of response-receive pairs that <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> uses to determine what to send to the
@@ -2030,21 +2055,7 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
<i class="parameter"><tt>pam password change</tt></i></a>.</p><p>Default: <b class="command">passwd chat = *new*password* %n\\n
*new*password* %n\\n *changed*</b></p><p>Example: <b class="command">passwd chat = &quot;*Enter OLD password*&quot; %o\\n
&quot;*Enter NEW password*&quot; %n\\n &quot;*Reenter NEW password*&quot; %n\\n
- &quot;*Password changed*&quot;</b></p></dd><dt><span class="term"><a name="PASSWDCHATDEBUG"></a>passwd chat debug (G)</span></dt><dd><p>This boolean specifies if the passwd chat script
- parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the
- strings passed to and received from the passwd chat are printed
- in the <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> log with a
- <a href="#DEBUGLEVEL"><i class="parameter"><tt>debug level</tt></i></a>
- of 100. This is a dangerous option as it will allow plaintext passwords
- to be seen in the <b class="command">smbd</b> log. It is available to help
- Samba admins debug their <i class="parameter"><tt>passwd chat</tt></i> scripts
- when calling the <i class="parameter"><tt>passwd program</tt></i> and should
- be turned off after this has been done. This option has no effect if the
- <a href="#PAMPASSWORDCHANGE"><i class="parameter"><tt>pam password change</tt></i></a>
- paramter is set. This parameter is off by default.</p><p>See also <a href="#PASSWDCHAT"><i class="parameter"><tt>passwd chat</tt></i>
- </a>, <a href="#PAMPASSWORDCHANGE"><i class="parameter"><tt>pam password change</tt></i>
- </a>, <a href="#PASSWDPROGRAM"><i class="parameter"><tt>passwd program</tt></i>
- </a>.</p><p>Default: <b class="command">passwd chat debug = no</b></p></dd><dt><span class="term"><a name="PASSWDPROGRAM"></a>passwd program (G)</span></dt><dd><p>The name of a program that can be used to set
+ &quot;*Password changed*&quot;</b></p></dd><dt><span class="term"><a name="PASSWDPROGRAM"></a>passwd program (G)</span></dt><dd><p>The name of a program that can be used to set
UNIX user passwords. Any occurrences of <i class="parameter"><tt>%u</tt></i>
will be replaced with the user name. The user name is checked for
existence before calling the password changing program.</p><p>Also note that many passwd programs insist in <span class="emphasis"><em>reasonable
@@ -2054,8 +2065,8 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
it.</p><p><span class="emphasis"><em>Note</em></span> that if the <i class="parameter"><tt>unix
password sync</tt></i> parameter is set to <tt class="constant">yes
</tt> then this program is called <span class="emphasis"><em>AS ROOT</em></span>
- before the SMB password in the <a href="smbpasswd.5.html" target="_top"><a href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>
- </a> file is changed. If this UNIX password change fails, then
+ before the SMB password in the smbpasswd
+ file is changed. If this UNIX password change fails, then
<b class="command">smbd</b> will fail to change the SMB password also
(this is by design).</p><p>If the <i class="parameter"><tt>unix password sync</tt></i> parameter
is set this parameter <span class="emphasis"><em>MUST USE ABSOLUTE PATHS</em></span>
@@ -2158,13 +2169,13 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
whenever the service is disconnected. It takes the usual
substitutions. The command may be run as the root on some
systems.</p><p>An interesting example may be to unmount server
- resources:</p><p><b class="command">postexec = /etc/umount /cdrom</b></p><p>See also <a href="#PREEXEC"><i class="parameter"><tt>preexec</tt></i></a>.</p><p>Default: <span class="emphasis"><em>none (no command executed)</em></span></p><p>Example: <b class="command">postexec = echo \&quot;%u disconnected from %S from %m (%I)\&quot; &gt;&gt; /tmp/log</b></p></dd><dt><span class="term"><a name="PREEXEC"></a>preexec (S)</span></dt><dd><p>This option specifies a command to be run whenever
+ resources:</p><p><b class="command">postexec = /etc/umount /cdrom</b></p><p>See also <a href="#PREEXEC"><i class="parameter"><tt>preexec</tt></i></a>.</p><p>Default: <span class="emphasis"><em>none (no command executed)</em></span></p><p>Example: <b class="command">postexec = echo \&quot;%u disconnected from %S from %m (%I)\&quot; &gt;&gt; /tmp/log</b></p></dd><dt><span class="term"><a name="PREEXECCLOSE"></a>preexec close (S)</span></dt><dd><p>This boolean option controls whether a non-zero
+ return code from <a href="#PREEXEC"><i class="parameter"><tt>preexec
+ </tt></i></a> should close the service being connected to.</p><p>Default: <b class="command">preexec close = no</b></p></dd><dt><span class="term"><a name="PREEXEC"></a>preexec (S)</span></dt><dd><p>This option specifies a command to be run whenever
the service is connected to. It takes the usual substitutions.</p><p>An interesting example is to send the users a welcome
message every time they log in. Maybe a message of the day? Here
is an example:</p><p><b class="command">preexec = csh -c 'echo \&quot;Welcome to %S!\&quot; | /usr/local/samba/bin/smbclient -M %m -I %I' &amp; </b></p><p>Of course, this could get annoying after a while :-)</p><p>See also <a href="#PREEXECCLOSE"><i class="parameter"><tt>preexec close</tt></i></a> and <a href="#POSTEXEC"><i class="parameter"><tt>postexec
- </tt></i></a>.</p><p>Default: <span class="emphasis"><em>none (no command executed)</em></span></p><p>Example: <b class="command">preexec = echo \&quot;%u connected to %S from %m (%I)\&quot; &gt;&gt; /tmp/log</b></p></dd><dt><span class="term"><a name="PREEXECCLOSE"></a>preexec close (S)</span></dt><dd><p>This boolean option controls whether a non-zero
- return code from <a href="#PREEXEC"><i class="parameter"><tt>preexec
- </tt></i></a> should close the service being connected to.</p><p>Default: <b class="command">preexec close = no</b></p></dd><dt><span class="term"><a name="PREFEREDMASTER"></a>prefered master (G)</span></dt><dd><p>Synonym for <a href="#PREFERREDMASTER"><i class="parameter"><tt>
+ </tt></i></a>.</p><p>Default: <span class="emphasis"><em>none (no command executed)</em></span></p><p>Example: <b class="command">preexec = echo \&quot;%u connected to %S from %m (%I)\&quot; &gt;&gt; /tmp/log</b></p></dd><dt><span class="term"><a name="PREFEREDMASTER"></a>prefered master (G)</span></dt><dd><p>Synonym for <a href="#PREFERREDMASTER"><i class="parameter"><tt>
preferred master</tt></i></a> for people who cannot spell :-).</p></dd><dt><span class="term"><a name="PREFERREDMASTER"></a>preferred master (G)</span></dt><dd><p>This boolean parameter controls if
<a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master
browser for its workgroup.</p><p>If this is set to <tt class="constant">yes</tt>, on startup, <b class="command">nmbd</b>
@@ -2177,15 +2188,15 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
preferred master browsers on the same subnet, they will each
periodically and continuously attempt to become the local
master browser. This will result in unnecessary broadcast
- traffic and reduced browsing capabilities.</p><p>See also <a href="#OSLEVEL"><i class="parameter"><tt>os level</tt></i></a>.</p><p>Default: <b class="command">preferred master = auto</b></p></dd><dt><span class="term"><a name="PRELOAD"></a>preload (G)</span></dt><dd><p>This is a list of services that you want to be
+ traffic and reduced browsing capabilities.</p><p>See also <a href="#OSLEVEL"><i class="parameter"><tt>os level</tt></i></a>.</p><p>Default: <b class="command">preferred master = auto</b></p></dd><dt><span class="term"><a name="PRELOADMODULES"></a>preload modules (G)</span></dt><dd><p>This is a list of paths to modules that should
+ be loaded into smbd before a client connects. This improves
+ the speed of smbd when reacting to new connections somewhat. </p><p>It is recommended to only use this option on heavy-performance
+ servers.</p><p>Default: <b class="command">preload modules = </b></p><p>Example: <b class="command">preload modules = /usr/lib/samba/passdb/mysql.so+++ </b></p></dd><dt><span class="term"><a name="PRELOAD"></a>preload (G)</span></dt><dd><p>This is a list of services that you want to be
automatically added to the browse lists. This is most useful
for homes and printers services that would otherwise not be
visible.</p><p>Note that if you just want all printers in your
printcap file loaded then the <a href="#LOADPRINTERS">
- <i class="parameter"><tt>load printers</tt></i></a> option is easier.</p><p>Default: <span class="emphasis"><em>no preloaded services</em></span></p><p>Example: <b class="command">preload = fred lp colorlp</b></p></dd><dt><span class="term"><a name="PRELOADMODULES"></a>preload modules (G)</span></dt><dd><p>This is a list of paths to modules that should
- be loaded into smbd before a client connects. This improves
- the speed of smbd when reacting to new connections somewhat. </p><p>It is recommended to only use this option on heavy-performance
- servers.</p><p>Default: <b class="command">preload modules = </b></p><p>Example: <b class="command">preload modules = /usr/lib/samba/passdb/mysql.so+++ </b></p></dd><dt><span class="term"><a name="PRESERVECASE"></a>preserve case (S)</span></dt><dd><p> This controls if new filenames are created
+ <i class="parameter"><tt>load printers</tt></i></a> option is easier.</p><p>Default: <span class="emphasis"><em>no preloaded services</em></span></p><p>Example: <b class="command">preload = fred lp colorlp</b></p></dd><dt><span class="term"><a name="PRESERVECASE"></a>preserve case (S)</span></dt><dd><p> This controls if new filenames are created
with the case that the client passes, or if they are forced to
be the <a href="#DEFAULTCASE"><i class="parameter"><tt>default case
</tt></i></a>.</p><p>Default: <b class="command">preserve case = yes</b></p><p>See the section on <a href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a> for a fuller discussion.</p></dd><dt><span class="term"><a name="PRINTABLE"></a>printable (S)</span></dt><dd><p>If this parameter is <tt class="constant">yes</tt>, then
@@ -2194,8 +2205,7 @@ df $1 | tail -1 | awk '{print $2&quot; &quot;$4}'
to the service path (user privileges permitting) via the spooling
of print data. The <a href="#READONLY"><i class="parameter"><tt>read only
</tt></i></a> parameter controls only non-printing access to
- the resource.</p><p>Default: <b class="command">printable = no</b></p></dd><dt><span class="term"><a name="PRINTCAP"></a>printcap (G)</span></dt><dd><p>Synonym for <a href="#PRINTCAPNAME"><i class="parameter"><tt>
- printcap name</tt></i></a>.</p></dd><dt><span class="term"><a name="PRINTCAPNAME"></a>printcap name (S)</span></dt><dd><p>This parameter may be used to override the
+ the resource.</p><p>Default: <b class="command">printable = no</b></p></dd><dt><span class="term"><a name="PRINTCAPNAME"></a>printcap name (S)</span></dt><dd><p>This parameter may be used to override the
compiled-in default printcap name used by the server (usually <tt class="filename">
/etc/printcap</tt>). See the discussion of the <a href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons
why you might want to do this.</p><p>To use the CUPS printing interface set <b class="command">printcap name = cups
@@ -2222,7 +2232,8 @@ print5|My Printer 5
that it's a comment.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Under AIX the default printcap
name is <tt class="filename">/etc/qconfig</tt>. Samba will assume the
file is in AIX <tt class="filename">qconfig</tt> format if the string
- <tt class="filename">qconfig</tt> appears in the printcap filename.</p></div><p>Default: <b class="command">printcap name = /etc/printcap</b></p><p>Example: <b class="command">printcap name = /etc/myprintcap</b></p></dd><dt><span class="term"><a name="PRINTCOMMAND"></a>print command (S)</span></dt><dd><p>After a print job has finished spooling to
+ <tt class="filename">qconfig</tt> appears in the printcap filename.</p></div><p>Default: <b class="command">printcap name = /etc/printcap</b></p><p>Example: <b class="command">printcap name = /etc/myprintcap</b></p></dd><dt><span class="term"><a name="PRINTCAP"></a>printcap (G)</span></dt><dd><p>Synonym for <a href="#PRINTCAPNAME"><i class="parameter"><tt>
+ printcap name</tt></i></a>.</p></dd><dt><span class="term"><a name="PRINTCOMMAND"></a>print command (S)</span></dt><dd><p>After a print job has finished spooling to
a service, this command will be used via a <b class="command">system()</b>
call to process the spool file. Typically the command specified will
submit the spool file to the host's printing subsystem, but there
@@ -2263,15 +2274,15 @@ print5|My Printer 5
uses <b class="command">lp -c -d%p -oraw; rm %s</b>.
With <b class="command">printing = cups</b>,
and if SAMBA is compiled against libcups, any manually
- set print command will be ignored.</p><p>Example: <b class="command">print command = /usr/local/samba/bin/myprintscript %p %s</b></p></dd><dt><span class="term"><a name="PRINTER"></a>printer (S)</span></dt><dd><p>Synonym for <a href="#PRINTERNAME"><i class="parameter"><tt>
- printer name</tt></i></a>.</p></dd><dt><span class="term"><a name="PRINTERADMIN"></a>printer admin (S)</span></dt><dd><p>This is a list of users that can do anything to
+ set print command will be ignored.</p><p>Example: <b class="command">print command = /usr/local/samba/bin/myprintscript %p %s</b></p></dd><dt><span class="term"><a name="PRINTERADMIN"></a>printer admin (S)</span></dt><dd><p>This is a list of users that can do anything to
printers via the remote administration interfaces offered by MS-RPC
(usually using a NT workstation). Note that the root user always
has admin rights.</p><p>Default: <b class="command">printer admin = &lt;empty string&gt;</b></p><p>Example: <b class="command">printer admin = admin, @staff</b></p></dd><dt><span class="term"><a name="PRINTERNAME"></a>printer name (S)</span></dt><dd><p>This parameter specifies the name of the printer
to which print jobs spooled through a printable service will be sent.</p><p>If specified in the [global] section, the printer
name given will be used for any printable service that does
not have its own printer name specified.</p><p>Default: <span class="emphasis"><em>none (but may be <tt class="constant">lp</tt>
- on many systems)</em></span></p><p>Example: <b class="command">printer name = laserwriter</b></p></dd><dt><span class="term"><a name="PRINTING"></a>printing (S)</span></dt><dd><p>This parameters controls how printer status information is
+ on many systems)</em></span></p><p>Example: <b class="command">printer name = laserwriter</b></p></dd><dt><span class="term"><a name="PRINTER"></a>printer (S)</span></dt><dd><p>Synonym for <a href="#PRINTERNAME"><i class="parameter"><tt>
+ printer name</tt></i></a>.</p></dd><dt><span class="term"><a name="PRINTING"></a>printing (S)</span></dt><dd><p>This parameters controls how printer status information is
interpreted on your system. It also affects the default values for
the <i class="parameter"><tt>print command</tt></i>, <i class="parameter"><tt>lpq command</tt></i>, <i class="parameter"><tt>lppause command </tt></i>, <i class="parameter"><tt>lpresume command</tt></i>, and <i class="parameter"><tt>lprm command</tt></i> if specified in the
[global] section.</p><p>Currently nine printing styles are supported. They are
@@ -2291,7 +2302,8 @@ print5|My Printer 5
Windows XP clients. New versions of Windows 2000 or Windows XP service
packs do security ACL checking on the owner and ability to write of the
profile directory stored on a local workstation when copied from a Samba
- share. When not in domain mode with winbindd then the security info copied
+ share.
+</p><p>When not in domain mode with winbindd then the security info copied
onto the local workstation has no meaning to the logged in user (SID) on
that workstation so the profile storing fails. Adding this parameter
onto a share used for profile storage changes two things about the
@@ -2300,14 +2312,14 @@ print5|My Printer 5
BUILTIN\\Users respectively (SIDs S-1-5-32-544, S-1-5-32-545). Secondly
it adds an ACE entry of &quot;Full Control&quot; to the SID BUILTIN\\Users to
every returned ACL. This will allow any Windows 2000 or XP workstation
- user to access the profile. Note that if you have multiple users logging
+ user to access the profile.</p><p>Note that if you have multiple users logging
on to a workstation then in order to prevent them from being able to access
each others profiles you must remove the &quot;Bypass traverse checking&quot; advanced
user right. This will prevent access to other users profile directories as
the top level profile directory (named after the user) is created by the
workstation profile code and has an ACL restricting entry to the directory
tree to the owning user.
- </p><p>Default: <b class="command">profile acls = no</b></p></dd><dt><span class="term"><a name="PROTOCOL"></a>protocol (G)</span></dt><dd><p>Synonym for <a href="#MAXPROTOCOL">
+</p><p>Default: <b class="command">profile acls = no</b></p></dd><dt><span class="term"><a name="PROTOCOL"></a>protocol (G)</span></dt><dd><p>Synonym for <a href="#MAXPROTOCOL">
<i class="parameter"><tt>max protocol</tt></i></a>.</p></dd><dt><span class="term"><a name="PUBLIC"></a>public (S)</span></dt><dd><p>Synonym for <a href="#GUESTOK"><i class="parameter"><tt>guest
ok</tt></i></a>.</p></dd><dt><span class="term"><a name="QUEUEPAUSECOMMAND"></a>queuepause command (S)</span></dt><dd><p>This parameter specifies the command to be
executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes
@@ -2384,8 +2396,7 @@ print5|My Printer 5
the <a href="#WORKGROUP"><i class="parameter"><tt>workgroup</tt></i></a>
parameter is used instead.</p><p>The IP addresses you choose would normally be the broadcast
addresses of the remote networks, but can also be the IP addresses
- of known browse masters if your network config is that stable.</p><p>See the documentation file <a href="improved-browsing.html" target="_top">BROWSING</a>
- in the <tt class="filename">docs/</tt> directory.</p><p>Default: <b class="command">remote announce = &lt;empty string&gt;</b></p></dd><dt><span class="term"><a name="REMOTEBROWSESYNC"></a>remote browse sync (G)</span></dt><dd><p>This option allows you to setup <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request
+ of known browse masters if your network config is that stable.</p><p>See <a href="#">???</a>.</p><p>Default: <b class="command">remote announce = &lt;empty string&gt;</b></p></dd><dt><span class="term"><a name="REMOTEBROWSESYNC"></a>remote browse sync (G)</span></dt><dd><p>This option allows you to setup <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request
synchronization of browse lists with the master browser of a Samba
server that is on a remote segment. This option will allow you to
gain browse lists for multiple workgroups across routed networks. This
@@ -2418,11 +2429,7 @@ print5|My Printer 5
The security advantage of using restrict anonymous = 2 is removed
by setting <a href="#GUESTOK"><i class="parameter"><tt>guest
ok</tt></i> = yes</a> on any share.
- </p></div><p>Default: <b class="command">restrict anonymous = 0</b></p></dd><dt><span class="term"><a name="ROOT"></a>root (G)</span></dt><dd><p>Synonym for <a href="#ROOTDIRECTORY">
- <i class="parameter"><tt>root directory&quot;</tt></i></a>.
- </p></dd><dt><span class="term"><a name="ROOTDIR"></a>root dir (G)</span></dt><dd><p>Synonym for <a href="#ROOTDIRECTORY">
- <i class="parameter"><tt>root directory&quot;</tt></i></a>.
- </p></dd><dt><span class="term"><a name="ROOTDIRECTORY"></a>root directory (G)</span></dt><dd><p>The server will <b class="command">chroot()</b> (i.e.
+ </p></div><p>Default: <b class="command">restrict anonymous = 0</b></p></dd><dt><span class="term"><a name="ROOTDIRECTORY"></a>root directory (G)</span></dt><dd><p>The server will <b class="command">chroot()</b> (i.e.
Change its root directory) to this directory on startup. This is
not strictly necessary for secure operation. Even without it the
server will deny access to files not in one of the service entries.
@@ -2442,19 +2449,40 @@ print5|My Printer 5
you will need to mirror <tt class="filename">/etc/passwd</tt> (or a
subset of it), and any binaries or configuration files needed for
printing (if required). The set of files that must be mirrored is
- operating system dependent.</p><p>Default: <b class="command">root directory = /</b></p><p>Example: <b class="command">root directory = /homes/smb</b></p></dd><dt><span class="term"><a name="ROOTPOSTEXEC"></a>root postexec (S)</span></dt><dd><p>This is the same as the <i class="parameter"><tt>postexec</tt></i>
+ operating system dependent.</p><p>Default: <b class="command">root directory = /</b></p><p>Example: <b class="command">root directory = /homes/smb</b></p></dd><dt><span class="term"><a name="ROOTDIR"></a>root dir (G)</span></dt><dd><p>Synonym for <a href="#ROOTDIRECTORY">
+ <i class="parameter"><tt>root directory&quot;</tt></i></a>.
+ </p></dd><dt><span class="term"><a name="ROOTPOSTEXEC"></a>root postexec (S)</span></dt><dd><p>This is the same as the <i class="parameter"><tt>postexec</tt></i>
parameter except that the command is run as root. This
is useful for unmounting filesystems
(such as CDROMs) after a connection is closed.</p><p>See also <a href="#POSTEXEC"><i class="parameter"><tt>
- postexec</tt></i></a>.</p><p>Default: <b class="command">root postexec = &lt;empty string&gt;</b></p></dd><dt><span class="term"><a name="ROOTPREEXEC"></a>root preexec (S)</span></dt><dd><p>This is the same as the <i class="parameter"><tt>preexec</tt></i>
+ postexec</tt></i></a>.</p><p>Default: <b class="command">root postexec = &lt;empty string&gt;</b></p></dd><dt><span class="term"><a name="ROOTPREEXECCLOSE"></a>root preexec close (S)</span></dt><dd><p>This is the same as the <i class="parameter"><tt>preexec close
+ </tt></i> parameter except that the command is run as root.</p><p>See also <a href="#PREEXEC"><i class="parameter"><tt>
+ preexec</tt></i></a> and <a href="#PREEXECCLOSE">
+ <i class="parameter"><tt>preexec close</tt></i></a>.</p><p>Default: <b class="command">root preexec close = no</b></p></dd><dt><span class="term"><a name="ROOTPREEXEC"></a>root preexec (S)</span></dt><dd><p>This is the same as the <i class="parameter"><tt>preexec</tt></i>
parameter except that the command is run as root. This
is useful for mounting filesystems (such as CDROMs) when a
connection is opened.</p><p>See also <a href="#PREEXEC"><i class="parameter"><tt>
preexec</tt></i></a> and <a href="#PREEXECCLOSE">
- <i class="parameter"><tt>preexec close</tt></i></a>.</p><p>Default: <b class="command">root preexec = &lt;empty string&gt;</b></p></dd><dt><span class="term"><a name="ROOTPREEXECCLOSE"></a>root preexec close (S)</span></dt><dd><p>This is the same as the <i class="parameter"><tt>preexec close
- </tt></i> parameter except that the command is run as root.</p><p>See also <a href="#PREEXEC"><i class="parameter"><tt>
- preexec</tt></i></a> and <a href="#PREEXECCLOSE">
- <i class="parameter"><tt>preexec close</tt></i></a>.</p><p>Default: <b class="command">root preexec close = no</b></p></dd><dt><span class="term"><a name="SECURITY"></a>security (G)</span></dt><dd><p>This option affects how clients respond to
+ <i class="parameter"><tt>preexec close</tt></i></a>.</p><p>Default: <b class="command">root preexec = &lt;empty string&gt;</b></p></dd><dt><span class="term"><a name="ROOT"></a>root (G)</span></dt><dd><p>Synonym for <a href="#ROOTDIRECTORY">
+ <i class="parameter"><tt>root directory&quot;</tt></i></a>.
+ </p></dd><dt><span class="term"><a name="SECURITYMASK"></a>security mask (S)</span></dt><dd><p>This parameter controls what UNIX permission
+ bits can be modified when a Windows NT client is manipulating
+ the UNIX permission on a file using the native NT security
+ dialog box.</p><p>This parameter is applied as a mask (AND'ed with) to
+ the changed permission bits, thus preventing any bits not in
+ this mask from being modified. Essentially, zero bits in this
+ mask may be treated as a set of bits the user is not allowed
+ to change.</p><p>If not set explicitly this parameter is 0777, allowing
+ a user to modify all the user/group/world permissions on a file.
+ </p><p><span class="emphasis"><em>Note</em></span> that users who can access the
+ Samba server through other means can easily bypass this
+ restriction, so it is primarily useful for standalone
+ &quot;appliance&quot; systems. Administrators of most normal systems will
+ probably want to leave it set to <tt class="constant">0777</tt>.</p><p>See also the <a href="#FORCEDIRECTORYSECURITYMODE">
+ <i class="parameter"><tt>force directory security mode</tt></i></a>,
+ <a href="#DIRECTORYSECURITYMASK"><i class="parameter"><tt>directory
+ security mask</tt></i></a>, <a href="#FORCESECURITYMODE">
+ <i class="parameter"><tt>force security mode</tt></i></a> parameters.</p><p>Default: <b class="command">security mask = 0777</b></p><p>Example: <b class="command">security mask = 0770</b></p></dd><dt><span class="term"><a name="SECURITY"></a>security (G)</span></dt><dd><p>This option affects how clients respond to
Samba and is one of the most important settings in the <tt class="filename">
smb.conf</tt> file.</p><p>The option sets the &quot;security mode bit&quot; in replies to
protocol negotiations with <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to turn share level security on or off. Clients decide
@@ -2600,24 +2628,7 @@ print5|My Printer 5
Controller. </p><p>Read the chapter about Domain Membership in the HOWTO for details.</p><p>See also the <a href="#"><i class="parameter"><tt>ads server
</tt></i></a> parameter, the <a href="#REALM"><i class="parameter"><tt>realm
</tt></i></a> paramter and the <a href="#ENCRYPTPASSWORDS">
- <i class="parameter"><tt>encrypted passwords</tt></i></a> parameter.</p><p>Default: <b class="command">security = USER</b></p><p>Example: <b class="command">security = DOMAIN</b></p></dd><dt><span class="term"><a name="SECURITYMASK"></a>security mask (S)</span></dt><dd><p>This parameter controls what UNIX permission
- bits can be modified when a Windows NT client is manipulating
- the UNIX permission on a file using the native NT security
- dialog box.</p><p>This parameter is applied as a mask (AND'ed with) to
- the changed permission bits, thus preventing any bits not in
- this mask from being modified. Essentially, zero bits in this
- mask may be treated as a set of bits the user is not allowed
- to change.</p><p>If not set explicitly this parameter is 0777, allowing
- a user to modify all the user/group/world permissions on a file.
- </p><p><span class="emphasis"><em>Note</em></span> that users who can access the
- Samba server through other means can easily bypass this
- restriction, so it is primarily useful for standalone
- &quot;appliance&quot; systems. Administrators of most normal systems will
- probably want to leave it set to <tt class="constant">0777</tt>.</p><p>See also the <a href="#FORCEDIRECTORYSECURITYMODE">
- <i class="parameter"><tt>force directory security mode</tt></i></a>,
- <a href="#DIRECTORYSECURITYMASK"><i class="parameter"><tt>directory
- security mask</tt></i></a>, <a href="#FORCESECURITYMODE">
- <i class="parameter"><tt>force security mode</tt></i></a> parameters.</p><p>Default: <b class="command">security mask = 0777</b></p><p>Example: <b class="command">security mask = 0770</b></p></dd><dt><span class="term"><a name="SERVERSCHANNEL"></a>server schannel (G)</span></dt><dd><p>This controls whether the server offers or even
+ <i class="parameter"><tt>encrypted passwords</tt></i></a> parameter.</p><p>Default: <b class="command">security = USER</b></p><p>Example: <b class="command">security = DOMAIN</b></p></dd><dt><span class="term"><a name="SERVERSCHANNEL"></a>server schannel (G)</span></dt><dd><p>This controls whether the server offers or even
demands the use of the netlogon schannel.
<i class="parameter"><tt>server schannel = no</tt></i> does not
offer the schannel, <i class="parameter"><tt>server schannel =
@@ -2646,7 +2657,13 @@ print5|My Printer 5
vampire</b>. <i class="parameter"><tt>%u</tt></i> will be replaced
with the user whose primary group is to be set.
<i class="parameter"><tt>%g</tt></i> will be replaced with the group to
- set.</p><p>Default: <span class="emphasis"><em>No default value</em></span></p><p>Example: <b class="command">set primary group script = /usr/sbin/usermod -g '%g' '%u'</b></p></dd><dt><span class="term"><a name="SHAREMODES"></a>share modes (S)</span></dt><dd><p>This enables or disables the honoring of
+ set.</p><p>Default: <span class="emphasis"><em>No default value</em></span></p><p>Example: <b class="command">set primary group script = /usr/sbin/usermod -g '%g' '%u'</b></p></dd><dt><span class="term"><a name="SETQUOTACOMMAND"></a>set quota command (G)</span></dt><dd><p>The <b class="command">set quota command</b> should only be used
+ whenever there is no operating system API available from the OS that
+ samba can use.</p><p>This parameter should specify the path to a script that
+ can set quota for the specified arguments.</p><p>The specified script should take the following arguments:</p><div class="itemizedlist"><ul type="disc"><li><p>1 - quota type
+ </p><div class="itemizedlist"><ul type="circle"><li><p>1 - user quotas</p></li><li><p>2 - user default quotas (uid = -1)</p></li><li><p>3 - group quotas</p></li><li><p>4 - group default quotas (gid = -1)</p></li></ul></div><p>
+ </p></li><li><p>2 - id (uid for user, gid for group, -1 if N/A)</p></li><li><p>3 - quota state (0 = disable, 1 = enable, 2 = enable and enforce)</p></li><li><p>4 - block softlimit</p></li><li><p>5 - block hardlimit</p></li><li><p>6 - inode softlimit</p></li><li><p>7 - inode hardlimit</p></li><li><p>8(optional) - block size, defaults to 1024</p></li></ul></div><p>The script should output at least one line of data.</p><p>See also the <a href="#GETQUOTACOMMAND"><i class="parameter"><tt>get quota command</tt></i></a> parameter.
+ </p><p>Default: <b class="command">set quota command = </b></p><p>Example: <b class="command">set quota command = /usr/local/sbin/set_quota</b></p></dd><dt><span class="term"><a name="SHAREMODES"></a>share modes (S)</span></dt><dd><p>This enables or disables the honoring of
the <i class="parameter"><tt>share modes</tt></i> during a file open. These
modes are used by clients to gain exclusive read or write access
to a file.</p><p>These open modes are not directly supported by UNIX, so
@@ -2682,7 +2699,7 @@ print5|My Printer 5
administrative privilege on an individual printer.</p><p>See also <a href="#ADDPRINTERCOMMAND"><i class="parameter"><tt>addprinter
command</tt></i></a>, <a href="#DELETEPRINTERCOMMAND">
<i class="parameter"><tt>deleteprinter command</tt></i></a>, <a href="#PRINTERADMIN">
- <i class="parameter"><tt>printer admin</tt></i></a></p><p>Default :<b class="command">show add printer wizard = yes</b></p></dd><dt><span class="term"><a name="SHUTDOWNSCRIPT"></a>shutdown script (G)</span></dt><dd xmlns:ns2=""><p><span class="emphasis"><em>This parameter only exists in the HEAD cvs branch</em></span>
+ <i class="parameter"><tt>printer admin</tt></i></a></p><p>Default :<b class="command">show add printer wizard = yes</b></p></dd><dt><span class="term"><a name="SHUTDOWNSCRIPT"></a>shutdown script (G)</span></dt><dd><p><span class="emphasis"><em>This parameter only exists in the HEAD cvs branch</em></span>
This a full path name to a script called by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should start a shutdown procedure.</p><p>This command will be run as the user connected to the server.</p><p>%m %t %r %f parameters are expanded:</p><div class="itemizedlist"><ul type="disc"><li><p><i class="parameter"><tt>%m</tt></i> will be substituted with the
shutdown message sent to the server.</p></li><li><p><i class="parameter"><tt>%t</tt></i> will be substituted with the
number of seconds to wait before effectively starting the
@@ -2690,8 +2707,8 @@ print5|My Printer 5
switch <span class="emphasis"><em>-r</em></span>. It means reboot after shutdown
for NT.</p></li><li><p><i class="parameter"><tt>%f</tt></i> will be substituted with the
switch <span class="emphasis"><em>-f</em></span>. It means force the shutdown
- even if applications do not respond for NT.</p></li></ul></div><p>Default: <span class="emphasis"><em>None</em></span>.</p><p>Example: <b class="command">abort shutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f</b></p><ns2:p>Shutdown script example:
-</ns2:p><pre class="programlisting">
+ even if applications do not respond for NT.</p></li></ul></div><p>Default: <span class="emphasis"><em>None</em></span>.</p><p>Example: <b class="command">shutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f</b></p><p>Shutdown script example:
+</p><pre class="programlisting">
#!/bin/bash
$time=0
@@ -2699,9 +2716,9 @@ let &quot;time/60&quot;
let &quot;time++&quot;
/sbin/shutdown $3 $4 +$time $1 &amp;
-</pre><ns2:p>
+</pre><p>
Shutdown does not return so we need to launch it in background.
-</ns2:p><p>See also <a href="#ABORTSHUTDOWNSCRIPT">
+</p><p>See also <a href="#ABORTSHUTDOWNSCRIPT">
<i class="parameter"><tt>abort shutdown script</tt></i></a>.</p></dd><dt><span class="term"><a name="SMBPASSWDFILE"></a>smb passwd file (G)</span></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By
default the path to the smbpasswd file is compiled into Samba.</p><p>Default: <b class="command">smb passwd file = ${prefix}/private/smbpasswd</b></p><p>Example: <b class="command">smb passwd file = /etc/samba/smbpasswd</b></p></dd><dt><span class="term"><a name="SMBPORTS"></a>smb ports (G)</span></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <b class="command">smb ports = 445 139</b></p></dd><dt><span class="term"><a name="SOCKETADDRESS"></a>socket address (G)</span></dt><dd><p>This option allows you to control what
address Samba will listen for connections on. This is used to
@@ -2779,7 +2796,9 @@ Shutdown does not return so we need to launch it in background.
the <i class="parameter"><tt>strict sync</tt></i> parameter must be set to
<tt class="constant">yes</tt> in order for this parameter to have
any affect.</p><p>See also the <a href="#STRICTSYNC"><i class="parameter"><tt>strict
- sync</tt></i></a> parameter.</p><p>Default: <b class="command">sync always = no</b></p></dd><dt><span class="term"><a name="SYSLOG"></a>syslog (G)</span></dt><dd><p>This parameter maps how Samba debug messages
+ sync</tt></i></a> parameter.</p><p>Default: <b class="command">sync always = no</b></p></dd><dt><span class="term"><a name="SYSLOGONLY"></a>syslog only (G)</span></dt><dd><p>If this parameter is set then Samba debug
+ messages are logged into the system syslog only, and not to
+ the debug log files.</p><p>Default: <b class="command">syslog only = no</b></p></dd><dt><span class="term"><a name="SYSLOG"></a>syslog (G)</span></dt><dd><p>This parameter maps how Samba debug messages
are logged onto the system syslog logging levels. Samba debug
level zero maps onto syslog <tt class="constant">LOG_ERR</tt>, debug
level one maps onto <tt class="constant">LOG_WARNING</tt>, debug level
@@ -2787,9 +2806,7 @@ Shutdown does not return so we need to launch it in background.
maps onto LOG_INFO. All higher levels are mapped to <tt class="constant">
LOG_DEBUG</tt>.</p><p>This parameter sets the threshold for sending messages
to syslog. Only messages with debug level less than this value
- will be sent to syslog.</p><p>Default: <b class="command">syslog = 1</b></p></dd><dt><span class="term"><a name="SYSLOGONLY"></a>syslog only (G)</span></dt><dd><p>If this parameter is set then Samba debug
- messages are logged into the system syslog only, and not to
- the debug log files.</p><p>Default: <b class="command">syslog only = no</b></p></dd><dt><span class="term"><a name="TEMPLATEHOMEDIR"></a>template homedir (G)</span></dt><dd><p>When filling out the user information for a Windows NT
+ will be sent to syslog.</p><p>Default: <b class="command">syslog = 1</b></p></dd><dt><span class="term"><a name="TEMPLATEHOMEDIR"></a>template homedir (G)</span></dt><dd><p>When filling out the user information for a Windows NT
user, the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this
parameter to fill in the home directory for that user. If the
string <i class="parameter"><tt>%D</tt></i> is present it
@@ -2805,16 +2822,7 @@ Shutdown does not return so we need to launch it in background.
you are serving a lot of PCs that have incorrect daylight
saving time handling.</p><p>Default: <b class="command">time offset = 0</b></p><p>Example: <b class="command">time offset = 60</b></p></dd><dt><span class="term"><a name="TIMESERVER"></a>time server (G)</span></dt><dd><p>This parameter determines if <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows
clients.</p><p>Default: <b class="command">time server = no</b></p></dd><dt><span class="term"><a name="TIMESTAMPLOGS"></a>timestamp logs (G)</span></dt><dd><p>Synonym for <a href="#DEBUGTIMESTAMP"><i class="parameter"><tt>
- debug timestamp</tt></i></a>.</p></dd><dt><span class="term"><a name="TOTALPRINTJOBS"></a>total print jobs (G)</span></dt><dd><p>This parameter accepts an integer value which defines
- a limit on the maximum number of print jobs that will be accepted
- system wide at any given time. If a print job is submitted
- by a client which will exceed this number, then <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will return an
- error indicating that no space is available on the server. The
- default value of 0 means that no such limit exists. This parameter
- can be used to prevent a server from exceeding its capacity and is
- designed as a printing throttle. See also <a href="#MAXPRINTJOBS">
- <i class="parameter"><tt>max print jobs</tt></i></a>.
- </p><p>Default: <b class="command">total print jobs = 0</b></p><p>Example: <b class="command">total print jobs = 5000</b></p></dd><dt><span class="term"><a name="UNICODE"></a>unicode (G)</span></dt><dd><p>Specifies whether Samba should try
+ debug timestamp</tt></i></a>.</p></dd><dt><span class="term"><a name="UNICODE"></a>unicode (G)</span></dt><dd><p>Specifies whether Samba should try
to use unicode on the wire by default. Note: This does NOT
mean that samba will assume that the unix machine uses unicode!
</p><p>Default: <b class="command">unicode = yes</b></p></dd><dt><span class="term"><a name="UNIXCHARSET"></a>unix charset (G)</span></dt><dd><p>Specifies the charset the unix machine
@@ -2883,42 +2891,7 @@ Shutdown does not return so we need to launch it in background.
default on HPUX. On all other systems this parameter should be left alone. This
parameter is provided to help the Samba developers track down problems with
the tdb internal code.
- </p><p>Default: <b class="command">use mmap = yes</b></p></dd><dt><span class="term"><a name="USER"></a>user (S)</span></dt><dd><p>Synonym for <a href="#USERNAME"><i class="parameter"><tt>username</tt></i></a>.</p></dd><dt><span class="term"><a name="USERNAME"></a>username (S)</span></dt><dd><p>Multiple users may be specified in a comma-delimited
- list, in which case the supplied password will be tested against
- each username in turn (left to right).</p><p>The <i class="parameter"><tt>username</tt></i> line is needed only when
- the PC is unable to supply its own username. This is the case
- for the COREPLUS protocol or where your users have different WfWg
- usernames to UNIX usernames. In both these cases you may also be
- better using the \\server\share%user syntax instead.</p><p>The <i class="parameter"><tt>username</tt></i> line is not a great
- solution in many cases as it means Samba will try to validate
- the supplied password against each of the usernames in the
- <i class="parameter"><tt>username</tt></i> line in turn. This is slow and
- a bad idea for lots of users in case of duplicate passwords.
- You may get timeouts or security breaches using this parameter
- unwisely.</p><p>Samba relies on the underlying UNIX security. This
- parameter does not restrict who can login, it just offers hints
- to the Samba server as to what usernames might correspond to the
- supplied password. Users can login as whoever they please and
- they will be able to do no more damage than if they started a
- telnet session. The daemon runs as the user that they log in as,
- so they cannot do anything that user cannot do.</p><p>To restrict a service to a particular set of users you
- can use the <a href="#VALIDUSERS"><i class="parameter"><tt>valid users
- </tt></i></a> parameter.</p><p>If any of the usernames begin with a '@' then the name
- will be looked up first in the NIS netgroups list (if Samba
- is compiled with netgroup support), followed by a lookup in
- the UNIX groups database and will expand to a list of all users
- in the group of that name.</p><p>If any of the usernames begin with a '+' then the name
- will be looked up only in the UNIX groups database and will
- expand to a list of all users in the group of that name.</p><p>If any of the usernames begin with a '&amp;' then the name
- will be looked up only in the NIS netgroups database (if Samba
- is compiled with netgroup support) and will expand to a list
- of all users in the netgroup group of that name.</p><p>Note that searching though a groups database can take
- quite some time, and some clients may time out during the
- search.</p><p>See the section <a href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">NOTE ABOUT
- USERNAME/PASSWORD VALIDATION</a> for more information on how
- this parameter determines access to the services.</p><p>Default: <b class="command">The guest account if a guest service,
- else &lt;empty string&gt;.</b></p><p>Examples:<b class="command">username = fred, mary, jack, jane,
- @users, @pcgroup</b></p></dd><dt><span class="term"><a name="USERNAMELEVEL"></a>username level (G)</span></dt><dd><p>This option helps Samba to try and 'guess' at
+ </p><p>Default: <b class="command">use mmap = yes</b></p></dd><dt><span class="term"><a name="USERNAMELEVEL"></a>username level (G)</span></dt><dd><p>This option helps Samba to try and 'guess' at
the real UNIX username, as many DOS clients send an all-uppercase
username. By default Samba tries all lowercase, followed by the
username with the first letter capitalized, and fails if the
@@ -2972,8 +2945,43 @@ guest = *
modification.</p><p>Also note that no reverse mapping is done. The main effect
this has is with printing. Users who have been mapped may have
trouble deleting print jobs as PrintManager under WfWg will think
- they don't own the print job.</p><p>Default: <span class="emphasis"><em>no username map</em></span></p><p>Example: <b class="command">username map = /usr/local/samba/lib/users.map</b></p></dd><dt><span class="term"><a name="USERS"></a>users (S)</span></dt><dd><p>Synonym for <a href="#USERNAME"><i class="parameter"><tt>
- username</tt></i></a>.</p></dd><dt><span class="term"><a name="USESENDFILE"></a>use sendfile (S)</span></dt><dd><p>If this parameter is <tt class="constant">yes</tt>, and Samba
+ they don't own the print job.</p><p>Default: <span class="emphasis"><em>no username map</em></span></p><p>Example: <b class="command">username map = /usr/local/samba/lib/users.map</b></p></dd><dt><span class="term"><a name="USERNAME"></a>username (S)</span></dt><dd><p>Multiple users may be specified in a comma-delimited
+ list, in which case the supplied password will be tested against
+ each username in turn (left to right).</p><p>The <i class="parameter"><tt>username</tt></i> line is needed only when
+ the PC is unable to supply its own username. This is the case
+ for the COREPLUS protocol or where your users have different WfWg
+ usernames to UNIX usernames. In both these cases you may also be
+ better using the \\server\share%user syntax instead.</p><p>The <i class="parameter"><tt>username</tt></i> line is not a great
+ solution in many cases as it means Samba will try to validate
+ the supplied password against each of the usernames in the
+ <i class="parameter"><tt>username</tt></i> line in turn. This is slow and
+ a bad idea for lots of users in case of duplicate passwords.
+ You may get timeouts or security breaches using this parameter
+ unwisely.</p><p>Samba relies on the underlying UNIX security. This
+ parameter does not restrict who can login, it just offers hints
+ to the Samba server as to what usernames might correspond to the
+ supplied password. Users can login as whoever they please and
+ they will be able to do no more damage than if they started a
+ telnet session. The daemon runs as the user that they log in as,
+ so they cannot do anything that user cannot do.</p><p>To restrict a service to a particular set of users you
+ can use the <a href="#VALIDUSERS"><i class="parameter"><tt>valid users
+ </tt></i></a> parameter.</p><p>If any of the usernames begin with a '@' then the name
+ will be looked up first in the NIS netgroups list (if Samba
+ is compiled with netgroup support), followed by a lookup in
+ the UNIX groups database and will expand to a list of all users
+ in the group of that name.</p><p>If any of the usernames begin with a '+' then the name
+ will be looked up only in the UNIX groups database and will
+ expand to a list of all users in the group of that name.</p><p>If any of the usernames begin with a '&amp;' then the name
+ will be looked up only in the NIS netgroups database (if Samba
+ is compiled with netgroup support) and will expand to a list
+ of all users in the netgroup group of that name.</p><p>Note that searching though a groups database can take
+ quite some time, and some clients may time out during the
+ search.</p><p>See the section <a href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">NOTE ABOUT
+ USERNAME/PASSWORD VALIDATION</a> for more information on how
+ this parameter determines access to the services.</p><p>Default: <b class="command">The guest account if a guest service,
+ else &lt;empty string&gt;.</b></p><p>Examples:<b class="command">username = fred, mary, jack, jane,
+ @users, @pcgroup</b></p></dd><dt><span class="term"><a name="USERS"></a>users (S)</span></dt><dd><p>Synonym for <a href="#USERNAME"><i class="parameter"><tt>
+ username</tt></i></a>.</p></dd><dt><span class="term"><a name="USER"></a>user (S)</span></dt><dd><p>Synonym for <a href="#USERNAME"><i class="parameter"><tt>username</tt></i></a>.</p></dd><dt><span class="term"><a name="USESENDFILE"></a>use sendfile (S)</span></dt><dd><p>If this parameter is <tt class="constant">yes</tt>, and Samba
was built with the --with-sendfile-support option, and the underlying operating
system supports sendfile system call, then some SMB read calls (mainly ReadAndX
and ReadRaw) will use the more efficient sendfile system call for files that
@@ -2984,7 +2992,15 @@ guest = *
WindowsXP and Windows2000 clients to agree upon an authentication mechanism.
Unless further issues are discovered with our SPNEGO
implementation, there is no reason this should ever be
- disabled.</p><p>Default: <span class="emphasis"><em>use spnego = yes</em></span></p></dd><dt><span class="term"><a name="UTMP"></a>utmp (G)</span></dt><dd><p>This boolean parameter is only available if
+ disabled.</p><p>Default: <span class="emphasis"><em>use spnego = yes</em></span></p></dd><dt><span class="term"><a name="UTMPDIRECTORY"></a>utmp directory (G)</span></dt><dd><p>This parameter is only available if Samba has
+ been configured and compiled with the option <b class="command">
+ --with-utmp</b>. It specifies a directory pathname that is
+ used to store the utmp or utmpx files (depending on the UNIX system) that
+ record user connections to a Samba server. See also the <a href="#UTMP">
+ <i class="parameter"><tt>utmp</tt></i></a> parameter. By default this is
+ not set, meaning the system will use whatever utmp file the
+ native system is set to use (usually
+ <tt class="filename">/var/run/utmp</tt> on Linux).</p><p>Default: <span class="emphasis"><em>no utmp directory</em></span></p><p>Example: <b class="command">utmp directory = /var/run/utmp</b></p></dd><dt><span class="term"><a name="UTMP"></a>utmp (G)</span></dt><dd><p>This boolean parameter is only available if
Samba has been configured and compiled with the option <b class="command">
--with-utmp</b>. If set to <tt class="constant">yes</tt> then Samba will attempt
to add utmp or utmpx records (depending on the UNIX system) whenever a
@@ -2994,22 +3010,7 @@ guest = *
incoming user. Enabling this option creates an n^2
algorithm to find this number. This may impede
performance on large installations. </p><p>See also the <a href="#UTMPDIRECTORY"><i class="parameter"><tt>
- utmp directory</tt></i></a> parameter.</p><p>Default: <b class="command">utmp = no</b></p></dd><dt><span class="term"><a name="UTMPDIRECTORY"></a>utmp directory (G)</span></dt><dd><p>This parameter is only available if Samba has
- been configured and compiled with the option <b class="command">
- --with-utmp</b>. It specifies a directory pathname that is
- used to store the utmp or utmpx files (depending on the UNIX system) that
- record user connections to a Samba server. See also the <a href="#UTMP">
- <i class="parameter"><tt>utmp</tt></i></a> parameter. By default this is
- not set, meaning the system will use whatever utmp file the
- native system is set to use (usually
- <tt class="filename">/var/run/utmp</tt> on Linux).</p><p>Default: <span class="emphasis"><em>no utmp directory</em></span></p><p>Example: <b class="command">utmp directory = /var/run/utmp</b></p></dd><dt><span class="term"><a name="-VALID"></a>-valid (S)</span></dt><dd><p> This parameter indicates whether a share is
- valid and thus can be used. When this parameter is set to false,
- the share will be in no way visible nor accessible.
- </p><p>
- This option should not be
- used by regular users but might be of help to developers.
- Samba uses this option internally to mark shares as deleted.
- </p><p>Default: <span class="emphasis"><em>True</em></span></p></dd><dt><span class="term"><a name="VALIDUSERS"></a>valid users (S)</span></dt><dd><p>This is a list of users that should be allowed
+ utmp directory</tt></i></a> parameter.</p><p>Default: <b class="command">utmp = no</b></p></dd><dt><span class="term"><a name="VALIDUSERS"></a>valid users (S)</span></dt><dd><p>This is a list of users that should be allowed
to login to this service. Names starting with '@', '+' and '&amp;'
are interpreted using the same rules as described in the
<i class="parameter"><tt>invalid users</tt></i> parameter.</p><p>If this is empty (the default) then any user can login.
@@ -3017,7 +3018,14 @@ guest = *
users</tt></i> list then access is denied for that user.</p><p>The current servicename is substituted for <i class="parameter"><tt>%S
</tt></i>. This is useful in the [homes] section.</p><p>See also <a href="#INVALIDUSERS"><i class="parameter"><tt>invalid users
</tt></i></a></p><p>Default: <span class="emphasis"><em>No valid users list (anyone can login)
- </em></span></p><p>Example: <b class="command">valid users = greg, @pcusers</b></p></dd><dt><span class="term"><a name="VETOFILES"></a>veto files (S)</span></dt><dd xmlns:ns3=""><p>This is a list of files and directories that
+ </em></span></p><p>Example: <b class="command">valid users = greg, @pcusers</b></p></dd><dt><span class="term"><a name="-VALID"></a>-valid (S)</span></dt><dd><p> This parameter indicates whether a share is
+ valid and thus can be used. When this parameter is set to false,
+ the share will be in no way visible nor accessible.
+ </p><p>
+ This option should not be
+ used by regular users but might be of help to developers.
+ Samba uses this option internally to mark shares as deleted.
+ </p><p>Default: <span class="emphasis"><em>True</em></span></p></dd><dt><span class="term"><a name="VETOFILES"></a>veto files (S)</span></dt><dd><p>This is a list of files and directories that
are neither visible nor accessible. Each entry in the list must
be separated by a '/', which allows spaces to be included
in the entry. '*' and '?' can be used to specify multiple files
@@ -3035,8 +3043,8 @@ guest = *
for a match as they are scanned.</p><p>See also <a href="#HIDEFILES"><i class="parameter"><tt>hide files
</tt></i></a> and <a href="#CASESENSITIVE"><i class="parameter"><tt>
case sensitive</tt></i></a>.</p><p>Default: <span class="emphasis"><em>No files or directories are vetoed.
- </em></span></p><ns3:p>Examples:
-</ns3:p><pre class="programlisting">
+ </em></span></p><p>Examples:
+</p><pre class="programlisting">
; Veto any files containing the word Security,
; any ending in .tmp, and any directory containing the
; word root.
@@ -3057,14 +3065,14 @@ veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/
client contention for files ending in <tt class="filename">.SEM</tt>.
To cause Samba not to grant oplocks on these files you would use
the line (either in the [global] section or in the section for
- the particular NetBench share :</p><p>Example: <b class="command">veto oplock files = /*.SEM/</b></p></dd><dt><span class="term"><a name="VFSOBJECT"></a>vfs object (S)</span></dt><dd><p>Synonym for
+ the particular NetBench share :</p><p>Example: <b class="command">veto oplock files = /*.SEM/</b></p></dd><dt><span class="term"><a name="VFSOBJECTS"></a>vfs objects (S)</span></dt><dd><p>This parameter specifies the backend names which
+ are used for Samba VFS I/O operations. By default, normal
+ disk I/O operations are used but these can be overloaded
+ with one or more VFS objects. </p><p>Default: <span class="emphasis"><em>no value</em></span></p><p>Example: <b class="command">vfs objects = extd_audit recycle</b></p></dd><dt><span class="term"><a name="VFSOBJECT"></a>vfs object (S)</span></dt><dd><p>Synonym for
<a href="#VFSOBJECTS">
<i class="parameter"><tt>vfs objects</tt></i>
</a>.
- </p></dd><dt><span class="term"><a name="VFSOBJECTS"></a>vfs objects (S)</span></dt><dd><p>This parameter specifies the backend names which
- are used for Samba VFS I/O operations. By default, normal
- disk I/O operations are used but these can be overloaded
- with one or more VFS objects. </p><p>Default: <span class="emphasis"><em>no value</em></span></p><p>Example: <b class="command">vfs objects = extd_audit recycle</b></p></dd><dt><span class="term"><a name="VOLUME"></a>volume (S)</span></dt><dd><p> This allows you to override the volume label
+ </p></dd><dt><span class="term"><a name="VOLUME"></a>volume (S)</span></dt><dd><p> This allows you to override the volume label
returned for a share. Useful for CDROMs with installation programs
that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em>the name of the share</em></span></p></dd><dt><span class="term"><a name="WIDELINKS"></a>wide links (S)</span></dt><dd><p>This parameter controls whether or not links
in the UNIX file system may be followed by the server. Links
@@ -3161,7 +3169,7 @@ veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/
seperated from the ip address by a colon.
</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>You need to set up Samba to point
to a WINS server if you have multiple subnets and wish cross-subnet
- browsing to work correctly.</p></div><p>See the documentation file <a href="improved-browsing.html" target="_top">Browsing</a> in the samba howto collection.</p><p>Default: <span class="emphasis"><em>not enabled</em></span></p><p>Example: <b class="command">wins server = mary:192.9.200.1 fred:192.168.3.199 mary:192.168.2.61</b></p><p>For this example when querying a certain name, 192.19.200.1 will
+ browsing to work correctly.</p></div><p>See the <a href="#">???</a>.</p><p>Default: <span class="emphasis"><em>not enabled</em></span></p><p>Example: <b class="command">wins server = mary:192.9.200.1 fred:192.168.3.199 mary:192.168.2.61</b></p><p>For this example when querying a certain name, 192.19.200.1 will
be asked first and if that doesn't respond 192.168.2.61. If either
of those doesn't know the name 192.168.3.199 will be queried.
</p><p>Example: <b class="command">wins server = 192.9.200.1 192.168.2.61</b></p></dd><dt><span class="term"><a name="WINSSUPPORT"></a>wins support (G)</span></dt><dd><p>This boolean controls if the <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should
diff --git a/docs/htmldocs/smbcacls.1.html b/docs/htmldocs/smbcacls.1.html
index d7c5fed1b59..44585bc1f7e 100644
--- a/docs/htmldocs/smbcacls.1.html
+++ b/docs/htmldocs/smbcacls.1.html
@@ -34,8 +34,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -49,9 +48,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2796911"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>ACL FORMAT</h2><p>The format of an ACL is one or more ACL entries separated by
diff --git a/docs/htmldocs/smbclient.1.html b/docs/htmldocs/smbclient.1.html
index ecb85d6e854..1ee5fd26da0 100644
--- a/docs/htmldocs/smbclient.1.html
+++ b/docs/htmldocs/smbclient.1.html
@@ -84,12 +84,7 @@
messages. </p></dd><dt><span class="term">-p port</span></dt><dd><p>This number is the TCP port number that will be used
when making connections to the server. The standard (well-known)
TCP port number for an SMB/CIFS server is 139, which is the
- default. </p></dd><dt><span class="term">-l logfilename</span></dt><dd><p>If specified, <i class="replaceable"><tt>logfilename</tt></i> specifies a base filename
- into which operational data from the running client will be
- logged. </p><p>The default base name is specified at compile time.</p><p>The base name is used to generate actual log file names.
- For example, if the name specified was &quot;log&quot;, the debug file
- would be <tt class="filename">log.client</tt>.</p><p>The log file generated is never removed by the client.
- </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.
+ default. </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.
</p></dd><dt><span class="term">-I IP-address</span></dt><dd><p><i class="replaceable"><tt>IP address</tt></i> is the address of the server to connect to.
It should be specified in standard &quot;a.b.c.d&quot; notation. </p><p>Normally the client would attempt to locate a named
SMB/CIFS server by looking it up via the NetBIOS name resolution
@@ -126,8 +121,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -141,9 +135,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2797426"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd><dt><span class="term">-N</span></dt><dd><p>If specified, this parameter suppresses the normal
@@ -177,10 +170,10 @@ via the <b class="command">ps</b> command. To be safe always allow
<b class="command">rpcclient</b> to prompt for a password and type
it in directly. </p></dd><dt><span class="term">-n &lt;primary NetBIOS name&gt;</span></dt><dd><p>This option allows you to override
the NetBIOS name that Samba uses for itself. This is identical
-to setting the <a href="smb.conf.5.html#netbiosname" target="_top"><i class="parameter"><tt>NetBIOS
-name</tt></i></a> parameter in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. However, a command
+to setting the <a class="indexterm" name="id2797632"></a><i class="parameter"><tt>netbios name</tt></i> parameter in the <tt class="filename">smb.conf</tt> file.
+However, a command
line setting will take precedence over settings in
-<a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></dd><dt><span class="term">-i &lt;scope&gt;</span></dt><dd><p>This specifies a NetBIOS scope that
+<tt class="filename">smb.conf</tt>.</p></dd><dt><span class="term">-i &lt;scope&gt;</span></dt><dd><p>This specifies a NetBIOS scope that
<b class="command">nmblookup</b> will use to communicate with when
generating NetBIOS names. For details on the use of NetBIOS
scopes, see rfc1001.txt and rfc1002.txt. NetBIOS scopes are
@@ -192,7 +185,7 @@ smb.conf. If the domain specified is the same as the servers
NetBIOS name, it causes the client to log on using the servers local
SAM (as opposed to the Domain SAM). </p></dd><dt><span class="term">-O socket options</span></dt><dd><p>TCP socket options to set on the client
socket. See the socket options parameter in
-the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> manual page for the list of valid
+the <tt class="filename">smb.conf</tt> manual page for the list of valid
options. </p></dd><dt><span class="term">-T tar options</span></dt><dd><p>smbclient may be used to create <b class="command">tar(1)
</b> compatible backups of all the files on an SMB/CIFS
share. The secondary tar flags that can be given to this option
diff --git a/docs/htmldocs/smbcontrol.1.html b/docs/htmldocs/smbcontrol.1.html
index 553a9e91636..e7ccd27f262 100644
--- a/docs/htmldocs/smbcontrol.1.html
+++ b/docs/htmldocs/smbcontrol.1.html
@@ -5,8 +5,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-i</span></dt><dd><p>Run interactively. Individual commands
of the form destination message-type parameters can be entered
diff --git a/docs/htmldocs/smbcquotas.1.html b/docs/htmldocs/smbcquotas.1.html
index 468edd1d61b..59dcd106ed8 100644
--- a/docs/htmldocs/smbcquotas.1.html
+++ b/docs/htmldocs/smbcquotas.1.html
@@ -14,8 +14,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -29,9 +28,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2796846"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd><dt><span class="term">-N</span></dt><dd><p>If specified, this parameter suppresses the normal
diff --git a/docs/htmldocs/smbd.8.html b/docs/htmldocs/smbd.8.html
index 5b71bd71960..291ddbc0f6b 100644
--- a/docs/htmldocs/smbd.8.html
+++ b/docs/htmldocs/smbd.8.html
@@ -54,8 +54,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -69,9 +68,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2796921"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.
@@ -82,7 +80,8 @@ never removed by the client.
file will be created for informational and debug
messages from the running server. The log
file generated is never removed by the server although
- its size may be controlled by the <a href="smb.conf.5.html#maxlogsize" target="_top"><i class="parameter"><tt>max log size</tt></i></a>
+ its size may be controlled by the
+ <a class="indexterm" name="id2797022"></a><i class="parameter"><tt>max log size</tt></i>
option in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. <span class="emphasis"><em>Beware:</em></span>
If the directory specified does not exist, <b class="command">smbd</b>
will log to the default debug log location defined at compile time.
@@ -104,18 +103,15 @@ never removed by the client.
in the above situation.</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><tt class="filename">/etc/inetd.conf</tt></span></dt><dd><p>If the server is to be run by the
<b class="command">inetd</b> meta-daemon, this file
must contain suitable startup information for the
- meta-daemon. See the <a href="install.html" target="_top">&quot;How to Install and Test SAMBA&quot;</a>
- document for details.
+ meta-daemon.
</p></dd><dt><span class="term"><tt class="filename">/etc/rc</tt></span></dt><dd><p>or whatever initialization script your
system uses).</p><p>If running the server as a daemon at startup,
this file will need to contain an appropriate startup
- sequence for the server. See the <a href="install.html" target="_top">&quot;How to Install and Test SAMBA&quot;</a>
- document for details.</p></dd><dt><span class="term"><tt class="filename">/etc/services</tt></span></dt><dd><p>If running the server via the
+ sequence for the server. </p></dd><dt><span class="term"><tt class="filename">/etc/services</tt></span></dt><dd><p>If running the server via the
meta-daemon <b class="command">inetd</b>, this file
must contain a mapping of service name (e.g., netbios-ssn)
to service port (e.g., 139) and protocol type (e.g., tcp).
- See the <a href="install.html" target="_top">&quot;How to Install and Test SAMBA&quot;</a>
- document for details.</p></dd><dt><span class="term"><tt class="filename">/usr/local/samba/lib/smb.conf</tt></span></dt><dd><p>This is the default location of the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> server configuration file. Other common places that systems
+ </p></dd><dt><span class="term"><tt class="filename">/usr/local/samba/lib/smb.conf</tt></span></dt><dd><p>This is the default location of the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> server configuration file. Other common places that systems
install this file are <tt class="filename">/usr/samba/lib/smb.conf</tt>
and <tt class="filename">/etc/samba/smb.conf</tt>.</p><p>This file describes all the services the server
is to make available to clients. See <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> for more information.</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>LIMITATIONS</h2><p>On some systems <b class="command">smbd</b> cannot change uid back
@@ -131,8 +127,7 @@ never removed by the client.
is not specific to the server, however.</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>PAM INTERACTION</h2><p>Samba uses PAM for authentication (when presented with a plaintext
password), for account checking (is this account disabled?) and for
session management. The degree too which samba supports PAM is restricted
- by the limitations of the SMB protocol and the <a href="smb.conf.5.html#OBEYPAMRESRICTIONS" target="_top"><i class="parameter"><tt>obey
- pam restricions</tt></i></a> <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> paramater. When this is set, the following restrictions apply:
+ by the limitations of the SMB protocol and the <a class="indexterm" name="id2797347"></a><i class="parameter"><tt>obey pam restrictions</tt></i> <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> paramater. When this is set, the following restrictions apply:
</p><div class="itemizedlist"><ul type="disc"><li><p><span class="emphasis"><em>Account Validation</em></span>: All accesses to a
samba server are checked
against PAM to see if the account is vaild, not disabled and is permitted to
diff --git a/docs/htmldocs/smbmount.8.html b/docs/htmldocs/smbmount.8.html
index eff8fea825f..233dee51d74 100644
--- a/docs/htmldocs/smbmount.8.html
+++ b/docs/htmldocs/smbmount.8.html
@@ -29,9 +29,9 @@
on the command line. However, the same password defined
in the PASSWD environment variable or a credentials file (see
below) will be read correctly.
- </p></dd><dt><span class="term">credentials=&lt;filename&gt;</span></dt><dd xmlns:ns1=""><ns1:p>specifies a file that contains a username and/or password.
+ </p></dd><dt><span class="term">credentials=&lt;filename&gt;</span></dt><dd><p>specifies a file that contains a username and/or password.
The format of the file is:
-</ns1:p><pre class="programlisting">
+</p><pre class="programlisting">
username = &lt;value&gt;
password = &lt;value&gt;
</pre><p>This is preferred over having passwords in plaintext in a
diff --git a/docs/htmldocs/smbpasswd.5.html b/docs/htmldocs/smbpasswd.5.html
index 556b637f4fe..700f986f30b 100644
--- a/docs/htmldocs/smbpasswd.5.html
+++ b/docs/htmldocs/smbpasswd.5.html
@@ -65,7 +65,8 @@
account has no password (the passwords in the fields LANMAN
Password Hash and NT Password Hash are ignored). Note that this
will only allow users to log on with no password if the <i class="parameter"><tt>
- null passwords</tt></i> parameter is set in the <a href="smb.conf.5.html#NULLPASSWORDS" target="_top"><a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></a> config file. </p></li><li><p><span class="emphasis"><em>D</em></span> - This means the account
+ null passwords</tt></i> parameter is set in the
+ <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> config file. </p></li><li><p><span class="emphasis"><em>D</em></span> - This means the account
is disabled and no SMB/CIFS logins will be allowed for this user. </p></li><li><p><span class="emphasis"><em>W</em></span> - This means this account
is a &quot;Workstation Trust&quot; account. This kind of account is used
in the Samba PDC code stream to allow Windows NT Workstations
diff --git a/docs/htmldocs/smbpasswd.8.html b/docs/htmldocs/smbpasswd.8.html
index 7612fdd775b..73feaecf142 100644
--- a/docs/htmldocs/smbpasswd.8.html
+++ b/docs/htmldocs/smbpasswd.8.html
@@ -127,8 +127,7 @@
has been configured to use the experimental
<b class="command">--with-ldapsam</b> option. The <i class="parameter"><tt>-w</tt></i>
switch is used to specify the password to be used with the
- <a href="smb.conf.5.html#LDAPADMINDN" target="_top"><i class="parameter"><tt>ldap admin
- dn</tt></i></a>. Note that the password is stored in
+ <a class="indexterm" name="id2797339"></a><i class="parameter"><tt>ldap admin dn</tt></i>. Note that the password is stored in
the <tt class="filename">secrets.tdb</tt> and is keyed off
of the admin's DN. This means that if the value of <i class="parameter"><tt>ldap
admin dn</tt></i> ever changes, the password will need to be
@@ -149,9 +148,7 @@
hosts</tt></i> or <i class="parameter"><tt>deny hosts</tt></i> entry in
the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file and neglecting to
allow &quot;localhost&quot; access to the smbd. </p><p>In addition, the smbpasswd command is only useful if Samba
- has been set up to use encrypted passwords. See the document <a href="pwencrypt.html" target="_top">
- &quot;LanMan and NT Password Encryption in Samba&quot;</a> in the docs directory for details
- on how to do this. </p></div><div class="refsect1" lang="en"><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><h2>SEE ALSO</h2><p><a href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>, <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a>.</p></div><div class="refsect1" lang="en"><h2>AUTHOR</h2><p>The original Samba software and related utilities
+ has been set up to use encrypted passwords. </p></div><div class="refsect1" lang="en"><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><h2>SEE ALSO</h2><p><a href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>, <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a>.</p></div><div class="refsect1" lang="en"><h2>AUTHOR</h2><p>The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer.
diff --git a/docs/htmldocs/smbsh.1.html b/docs/htmldocs/smbsh.1.html
index 4ef2244bb7a..c9feebe01b1 100644
--- a/docs/htmldocs/smbsh.1.html
+++ b/docs/htmldocs/smbsh.1.html
@@ -19,8 +19,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -34,9 +33,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-R &lt;name resolve order&gt;</span></dt><dd><p>This option is used to determine what naming
+override the <a class="indexterm" name="id2796723"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-R &lt;name resolve order&gt;</span></dt><dd><p>This option is used to determine what naming
services and in what order to resolve
host names to IP addresses. The option takes a space-separated
string of different name resolution options.</p><p>The options are: &quot;lmhosts&quot;, &quot;host&quot;, &quot;wins&quot; and &quot;bcast&quot;.
@@ -67,18 +65,18 @@ parameter. This is the least reliable of the name
resolution methods as it depends on the target host
being on a locally connected subnet.
</p></li></ul></div><p>If this parameter is not set then the name resolve order
-defined in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file parameter
-(<i class="parameter"><tt>name resolve order</tt></i>) will be used. </p><p>The default order is lmhosts, host, wins, bcast. Without
-this parameter or any entry in the <i class="parameter"><tt>name resolve order
-</tt></i> parameter of the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file, the name resolution methods
-will be attempted in this order. </p></dd><dt><span class="term">-L libdir</span></dt><dd><p>This parameter specifies the location of the
+defined in the <tt class="filename">smb.conf</tt> file parameter
+(<a class="indexterm" name="id2796877"></a><i class="parameter"><tt>name resolve order</tt></i>) will be used.
+</p><p>The default order is lmhosts, host, wins, bcast. Without
+this parameter or any entry in the <a class="indexterm" name="id2796896"></a><i class="parameter"><tt>name resolve order</tt></i> parameter of the <tt class="filename">smb.conf</tt> file, the name
+resolution methods will be attempted in this order. </p></dd><dt><span class="term">-L libdir</span></dt><dd><p>This parameter specifies the location of the
shared libraries used by <b class="command">smbsh</b>. The default
value is specified at compile time.
- </p></dd></dl></div></div><div xmlns:ns1="" class="refsect1" lang="en"><h2>EXAMPLES</h2><ns1:p>To use the <b class="command">smbsh</b> command, execute <b class="command">
+ </p></dd></dl></div></div><div class="refsect1" lang="en"><h2>EXAMPLES</h2><p>To use the <b class="command">smbsh</b> command, execute <b class="command">
smbsh</b> from the prompt and enter the username and password
that authenticates you to the machine running the Windows NT
operating system.
-</ns1:p><pre class="programlisting">
+</p><pre class="programlisting">
<tt class="prompt">system% </tt><b class="userinput"><tt>smbsh</tt></b>
<tt class="prompt">Username: </tt><b class="userinput"><tt>user</tt></b>
<tt class="prompt">Password: </tt><b class="userinput"><tt>XXXXXXX</tt></b>
diff --git a/docs/htmldocs/smbstatus.1.html b/docs/htmldocs/smbstatus.1.html
index c1be6234c32..99b152e75c6 100644
--- a/docs/htmldocs/smbstatus.1.html
+++ b/docs/htmldocs/smbstatus.1.html
@@ -7,8 +7,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -22,9 +21,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2796685"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd><dt><span class="term">-v|--verbose</span></dt><dd><p>gives verbose output.</p></dd><dt><span class="term">-L|--locks</span></dt><dd><p>causes smbstatus to only list locks.</p></dd><dt><span class="term">-B|--byterange</span></dt><dd><p>causes smbstatus to include byte range locks.
diff --git a/docs/htmldocs/smbtree.1.html b/docs/htmldocs/smbtree.1.html
index 6cf24ddf915..26120161d59 100644
--- a/docs/htmldocs/smbtree.1.html
+++ b/docs/htmldocs/smbtree.1.html
@@ -17,8 +17,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -32,9 +31,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2796642"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd><dt><span class="term">-N</span></dt><dd><p>If specified, this parameter suppresses the normal
diff --git a/docs/htmldocs/speed.html b/docs/htmldocs/speed.html
index 0033a05211a..47f19abb708 100644
--- a/docs/htmldocs/speed.html
+++ b/docs/htmldocs/speed.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter39.Samba Performance Tuning</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients"><link rel="next" href="DNSDHCP.html" title="Chapter40.DNS and DHCP Configuration Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter39.Samba Performance Tuning</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Other-Clients.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="DNSDHCP.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="speed"></a>Chapter39.Samba Performance Tuning</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Cochrane</span></h3><div class="affiliation"><span class="orgname">Dundee Limb Fitting Centre<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:paulc@dth.scot.nhs.uk">paulc@dth.scot.nhs.uk</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="speed.html#id3016725">Comparisons</a></dt><dt><a href="speed.html#id3014565">Socket options</a></dt><dt><a href="speed.html#id3014636">Read size</a></dt><dt><a href="speed.html#id3014680">Max xmit</a></dt><dt><a href="speed.html#id3014732">Log level</a></dt><dt><a href="speed.html#id3014755">Read raw</a></dt><dt><a href="speed.html#id3014811">Write raw</a></dt><dt><a href="speed.html#id3014853">Slow Logins</a></dt><dt><a href="speed.html#id3015761">Client tuning</a></dt><dt><a href="speed.html#id3015784">Samba performance problem due changing kernel</a></dt><dt><a href="speed.html#id3015817">Corrupt tdb Files</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3016725"></a>Comparisons</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter39.Samba Performance Tuning</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="Appendixes.html" title="PartVI.Appendixes"><link rel="previous" href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients"><link rel="next" href="DNSDHCP.html" title="Chapter40.DNS and DHCP Configuration Guide"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter39.Samba Performance Tuning</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="Other-Clients.html">Prev</a></td><th width="60%" align="center">PartVI.Appendixes</th><td width="20%" align="right"><a accesskey="n" href="DNSDHCP.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="speed"></a>Chapter39.Samba Performance Tuning</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Paul</span> <span class="surname">Cochrane</span></h3><div class="affiliation"><span class="orgname">Dundee Limb Fitting Centre<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:paulc@dth.scot.nhs.uk">paulc@dth.scot.nhs.uk</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="speed.html#id2964209">Comparisons</a></dt><dt><a href="speed.html#id2964253">Socket options</a></dt><dt><a href="speed.html#id2964343">Read size</a></dt><dt><a href="speed.html#id2964393">Max xmit</a></dt><dt><a href="speed.html#id2964453">Log level</a></dt><dt><a href="speed.html#id2964483">Read raw</a></dt><dt><a href="speed.html#id2964567">Write raw</a></dt><dt><a href="speed.html#id2964630">Slow Logins</a></dt><dt><a href="speed.html#id2964659">Client tuning</a></dt><dt><a href="speed.html#id2964684">Samba performance problem due changing kernel</a></dt><dt><a href="speed.html#id2964716">Corrupt tdb Files</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964209"></a>Comparisons</h2></div></div><div></div></div><p>
The Samba server uses TCP to talk to the client. Thus if you are
trying to see if it performs well you should really compare it to
programs that use the same protocol. The most readily available
@@ -21,14 +20,14 @@ suspect the biggest factor is not Samba vs some other system but the
hardware and drivers used on the various systems. Given similar
hardware Samba should certainly be competitive in speed with other
systems.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014565"></a>Socket options</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964253"></a>Socket options</h2></div></div><div></div></div><p>
There are a number of socket options that can greatly affect the
performance of a TCP based server like Samba.
</p><p>
The socket options that Samba uses are settable both on the command
line with the <tt class="option">-O</tt> option, or in the <tt class="filename">smb.conf</tt> file.
</p><p>
-The <i class="parameter"><tt>socket options</tt></i> section of the <tt class="filename">smb.conf</tt> manual page describes how
+The <a class="indexterm" name="id2964287"></a><i class="parameter"><tt>socket options</tt></i> section of the <tt class="filename">smb.conf</tt> manual page describes how
to set these and gives recommendations.
</p><p>
Getting the socket options right can make a big difference to your
@@ -37,11 +36,11 @@ much. The correct settings are very dependent on your local network.
</p><p>
The socket option TCP_NODELAY is the one that seems to make the
biggest single difference for most networks. Many people report that
-adding <i class="parameter"><tt>socket options = TCP_NODELAY</tt></i> doubles the read
+adding <a class="indexterm" name="id2964323"></a><i class="parameter"><tt>socket options</tt></i> = TCP_NODELAY doubles the read
performance of a Samba drive. The best explanation I have seen for this is
that the Microsoft TCP/IP stack is slow in sending tcp ACKs.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014636"></a>Read size</h2></div></div><div></div></div><p>
-The option <i class="parameter"><tt>read size</tt></i> affects the overlap of disk
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964343"></a>Read size</h2></div></div><div></div></div><p>
+The option <a class="indexterm" name="id2964353"></a><i class="parameter"><tt>read size</tt></i> affects the overlap of disk
reads/writes with network reads/writes. If the amount of data being
transferred in several of the SMB commands (currently SMBwrite, SMBwriteX and
SMBreadbraw) is larger than this value then the server begins writing
@@ -57,10 +56,10 @@ The default value is 16384, but very little experimentation has been
done yet to determine the optimal value, and it is likely that the best
value will vary greatly between systems anyway. A value over 65536 is
pointless and will cause you to allocate memory unnecessarily.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014680"></a>Max xmit</h2></div></div><div></div></div><p>
-At startup the client and server negotiate a <i class="parameter"><tt>maximum transmit</tt></i> size,
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964393"></a>Max xmit</h2></div></div><div></div></div><p>
+ At startup the client and server negotiate a <i class="parameter"><tt>maximum transmit</tt></i> size,
which limits the size of nearly all SMB commands. You can set the
-maximum size that Samba will negotiate using the <i class="parameter"><tt>max xmit = </tt></i> option
+maximum size that Samba will negotiate using the <a class="indexterm" name="id2964414"></a><i class="parameter"><tt>max xmit</tt></i> option
in <tt class="filename">smb.conf</tt>. Note that this is the maximum size of SMB requests that
Samba will accept, but not the maximum size that the *client* will accept.
The client maximum receive size is sent to Samba by the client and Samba
@@ -71,41 +70,41 @@ clients may perform better with a smaller transmit unit. Trying values
of less than 2048 is likely to cause severe problems.
</p><p>
In most cases the default is the best option.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014732"></a>Log level</h2></div></div><div></div></div><p>
-If you set the log level (also known as <i class="parameter"><tt>debug level</tt></i>) higher than 2
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964453"></a>Log level</h2></div></div><div></div></div><p>
+If you set the log level (also known as <a class="indexterm" name="id2964463"></a><i class="parameter"><tt>debug level</tt></i>) higher than 2
then you may suffer a large drop in performance. This is because the
server flushes the log file after each operation, which can be very
expensive.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014755"></a>Read raw</h2></div></div><div></div></div><p>
-The <i class="parameter"><tt>read raw</tt></i> operation is designed to be an optimised, low-latency
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964483"></a>Read raw</h2></div></div><div></div></div><p>
+The <a class="indexterm" name="id2964492"></a><i class="parameter"><tt>read raw</tt></i> operation is designed to be an optimised, low-latency
file read operation. A server may choose to not support it,
-however. and Samba makes support for <i class="parameter"><tt>read raw</tt></i> optional, with it
+however. and Samba makes support for <a class="indexterm" name="id2964510"></a><i class="parameter"><tt>read raw</tt></i> optional, with it
being enabled by default.
</p><p>
-In some cases clients don't handle <i class="parameter"><tt>read raw</tt></i> very well and actually
+In some cases clients don't handle <a class="indexterm" name="id2964528"></a><i class="parameter"><tt>read raw</tt></i> very well and actually
get lower performance using it than they get using the conventional
read operations.
</p><p>
-So you might like to try <i class="parameter"><tt>read raw = no</tt></i> and see what happens on your
+So you might like to try <a class="indexterm" name="id2964549"></a><i class="parameter"><tt>read raw</tt></i> = no and see what happens on your
network. It might lower, raise or not affect your performance. Only
testing can really tell.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014811"></a>Write raw</h2></div></div><div></div></div><p>
-The <i class="parameter"><tt>write raw</tt></i> operation is designed to be an optimised, low-latency
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964567"></a>Write raw</h2></div></div><div></div></div><p>
+The <a class="indexterm" name="id2964577"></a><i class="parameter"><tt>write raw</tt></i> operation is designed to be an optimised, low-latency
file write operation. A server may choose to not support it,
-however. and Samba makes support for <i class="parameter"><tt>write raw</tt></i> optional, with it
+however. and Samba makes support for <a class="indexterm" name="id2964594"></a><i class="parameter"><tt>write raw</tt></i> optional, with it
being enabled by default.
</p><p>
-Some machines may find <i class="parameter"><tt>write raw</tt></i> slower than normal write, in which
+Some machines may find <a class="indexterm" name="id2964613"></a><i class="parameter"><tt>write raw</tt></i> slower than normal write, in which
case you may wish to change this option.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3014853"></a>Slow Logins</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964630"></a>Slow Logins</h2></div></div><div></div></div><p>
Slow logins are almost always due to the password checking time. Using
-the lowest practical <i class="parameter"><tt>password level</tt></i> will improve things.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3015761"></a>Client tuning</h2></div></div><div></div></div><p>
+the lowest practical <a class="indexterm" name="id2964641"></a><i class="parameter"><tt>password level</tt></i> will improve things.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964659"></a>Client tuning</h2></div></div><div></div></div><p>
Often a speed problem can be traced to the client. The client (for
example Windows for Workgroups) can often be tuned for better TCP
performance. Check the sections on the various clients in
<a href="Other-Clients.html" title="Chapter38.Samba and other CIFS clients">Samba and Other Clients</a>.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3015784"></a>Samba performance problem due changing kernel</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964684"></a>Samba performance problem due changing kernel</h2></div></div><div></div></div><p>
Hi everyone. I am running Gentoo on my server and samba 2.2.8a. Recently
I changed kernel version from linux-2.4.19-gentoo-r10 to
linux-2.4.20-wolk4.0s. And now I have performance issue with samba. Ok
@@ -120,7 +119,7 @@ Grab mii-tool and check the duplex settings on the NIC.
My guess is that it is a link layer issue, not an application
layer problem. Also run ifconfig and verify that the framing
error, collisions, etc... look normal for ethernet.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3015817"></a>Corrupt tdb Files</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2964716"></a>Corrupt tdb Files</h2></div></div><div></div></div><p>
Well today it happened, Our first major problem using samba.
Our samba PDC server has been hosting 3 TB of data to our 500+ users
[Windows NT/XP] for the last 3 years using samba, no problem.
@@ -138,4 +137,4 @@ Q2) What I also would like to mention is that the service latency seems
a lot lower then before the locks cleanup, any ideas on keeping it top notch?
</p><p>
A2) Yes! Same answer as for Q1!
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Other-Clients.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="DNSDHCP.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter38.Samba and other CIFS clients</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter40.DNS and DHCP Configuration Guide</td></tr></table></div></body></html>
+</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="Other-Clients.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="Appendixes.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="DNSDHCP.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter38.Samba and other CIFS clients</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter40.DNS and DHCP Configuration Guide</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/swat.8.html b/docs/htmldocs/swat.8.html
index e0719dce3d8..33e595e0c32 100644
--- a/docs/htmldocs/swat.8.html
+++ b/docs/htmldocs/swat.8.html
@@ -19,8 +19,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -34,9 +33,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2796724"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.
diff --git a/docs/htmldocs/troubleshooting.html b/docs/htmldocs/troubleshooting.html
index b43083fdd1e..d18399caeb1 100644
--- a/docs/htmldocs/troubleshooting.html
+++ b/docs/htmldocs/troubleshooting.html
@@ -1,2 +1 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartV.Troubleshooting</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="SWAT.html" title="Chapter32.SWAT - The Samba Web Administration Tool"><link rel="next" href="diagnosis.html" title="Chapter33.The Samba checklist"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartV.Troubleshooting</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="SWAT.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="diagnosis.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="troubleshooting"></a>Troubleshooting</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>33. <a href="diagnosis.html">The Samba checklist</a></dt><dd><dl><dt><a href="diagnosis.html#id3003655">Introduction</a></dt><dt><a href="diagnosis.html#id3003689">Assumptions</a></dt><dt><a href="diagnosis.html#id3003861">The tests</a></dt><dt><a href="diagnosis.html#id3007413">Still having troubles?</a></dt></dl></dd><dt>34. <a href="problems.html">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="problems.html#id3008806">Diagnostics tools</a></dt><dt><a href="problems.html#id3007532">Installing 'Network Monitor' on an NT Workstation or a Windows 9x box</a></dt><dt><a href="problems.html#id3007815">Useful URLs</a></dt><dt><a href="problems.html#id3007859">Getting help from the mailing lists</a></dt><dt><a href="problems.html#id3008012">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="bugreport.html">Reporting Bugs</a></dt><dd><dl><dt><a href="bugreport.html#id3010326">Introduction</a></dt><dt><a href="bugreport.html#id3010385">General info</a></dt><dt><a href="bugreport.html#id3010421">Debug levels</a></dt><dt><a href="bugreport.html#id3008517">Internal errors</a></dt><dt><a href="bugreport.html#id3008625">Attaching to a running process</a></dt><dt><a href="bugreport.html#id3008127">Patches</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="SWAT.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="diagnosis.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter32.SWAT - The Samba Web Administration Tool</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter33.The Samba checklist</td></tr></table></div></body></html>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartV.Troubleshooting</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="previous" href="SWAT.html" title="Chapter32.SWAT - The Samba Web Administration Tool"><link rel="next" href="diagnosis.html" title="Chapter33.The Samba checklist"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartV.Troubleshooting</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="SWAT.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="diagnosis.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="troubleshooting"></a>Troubleshooting</h1></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt>33. <a href="diagnosis.html">The Samba checklist</a></dt><dd><dl><dt><a href="diagnosis.html#id2957982">Introduction</a></dt><dt><a href="diagnosis.html#id2958022">Assumptions</a></dt><dt><a href="diagnosis.html#id2958249">The tests</a></dt></dl></dd><dt>34. <a href="problems.html">Analysing and solving samba problems</a></dt><dd><dl><dt><a href="problems.html#id2959747">Diagnostics tools</a></dt><dd><dl><dt><a href="problems.html#id2959768">Debugging with Samba itself</a></dt><dt><a href="problems.html#id2959894">Tcpdump</a></dt><dt><a href="problems.html#id2959915">Ethereal</a></dt><dt><a href="problems.html#id2959968">The Windows Network Monitor</a></dt></dl></dd><dt><a href="problems.html#id2960285">Useful URLs</a></dt><dt><a href="problems.html#id2960326">Getting help from the mailing lists</a></dt><dt><a href="problems.html#id2960484">How to get off the mailing lists</a></dt></dl></dd><dt>35. <a href="bugreport.html">Reporting Bugs</a></dt><dd><dl><dt><a href="bugreport.html#id2960613">Introduction</a></dt><dt><a href="bugreport.html#id2960681">General info</a></dt><dt><a href="bugreport.html#id2960718">Debug levels</a></dt><dt><a href="bugreport.html#id2960926">Internal errors</a></dt><dt><a href="bugreport.html#id2961060">Attaching to a running process</a></dt><dt><a href="bugreport.html#id2961107">Patches</a></dt></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="SWAT.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-doc.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="diagnosis.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter32.SWAT - The Samba Web Administration Tool</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter33.The Samba checklist</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/type.html b/docs/htmldocs/type.html
index cc0a2583e56..5322995de45 100644
--- a/docs/htmldocs/type.html
+++ b/docs/htmldocs/type.html
@@ -1,10 +1,5 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartII.Server Configuration Basics</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="index.html" title="SAMBA Project Documentation"><link rel="previous" href="FastStart.html" title="Chapter3.Fast Start for the Impatient"><link rel="next" href="ServerType.html" title="Chapter4.Server Types and Security Modes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartII.Server Configuration Basics</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FastStart.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="ServerType.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="type"></a>Server Configuration Basics</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2886408"></a>First Steps in Server Configuration</h1></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>PartII.Server Configuration Basics</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="previous" href="FastStart.html" title="Chapter3.Fast Start for the Impatient"><link rel="next" href="ServerType.html" title="Chapter4.Server Types and Security Modes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">PartII.Server Configuration Basics</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="FastStart.html">Prev</a></td><th width="60%" align="center"></th><td width="20%" align="right"><a accesskey="n" href="ServerType.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="type"></a>Server Configuration Basics</h1></div></div><div></div></div><div class="partintro" lang="en"><div><div><div><h1 class="title"><a name="id2884814"></a>First Steps in Server Configuration</h1></div></div><div></div></div><p>
Samba can operate in various modes within SMB networks. This HOWTO section contains information on
configuring samba to function as the type of server your network requires. Please read this
section carefully.
-</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>4. <a href="ServerType.html">Server Types and Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2889453">Features and Benefits</a></dt><dt><a href="ServerType.html#id2889545">Server Types</a></dt><dt><a href="ServerType.html#id2889626">Samba Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2886055">User Level Security</a></dt><dt><a href="ServerType.html#id2886188">Share Level Security</a></dt><dt><a href="ServerType.html#id2887258">Domain Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2887500">ADS Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2887583">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="ServerType.html#id2887808">Seamless Windows Network Integration</a></dt><dt><a href="ServerType.html#id2887985">Common Errors</a></dt><dd><dl><dt><a href="ServerType.html#id2888013">What makes Samba a SERVER?</a></dt><dt><a href="ServerType.html#id2888046">What makes Samba a Domain Controller?</a></dt><dt><a href="ServerType.html#id2888075">What makes Samba a Domain Member?</a></dt><dt><a href="ServerType.html#id2889987">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="samba-pdc.html">Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2892619">Features and Benefits</a></dt><dt><a href="samba-pdc.html#id2890215">Basics of Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2890230">Domain Controller Types</a></dt><dt><a href="samba-pdc.html#id2890429">Preparing for Domain Control</a></dt></dl></dd><dt><a href="samba-pdc.html#id2890744">Domain Control - Example Configuration</a></dt><dt><a href="samba-pdc.html#id2891040">Samba ADS Domain Control</a></dt><dt><a href="samba-pdc.html#id2891062">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="samba-pdc.html#id2891077">Domain Network Logon Service</a></dt><dt><a href="samba-pdc.html#id2893804">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="samba-pdc.html#id2893909">Common Problems and Errors</a></dt><dd><dl><dt><a href="samba-pdc.html#id2893916">I cannot include a '$' in a machine name</a></dt><dt><a href="samba-pdc.html#id2893954">I get told &quot;You already have a connection to the Domain....&quot;
-or &quot;Cannot join domain, the credentials supplied conflict with an
-existing set..&quot; when creating a machine trust account.</a></dt><dt><a href="samba-pdc.html#id2894004">The system can not log you on (C000019B)....</a></dt><dt><a href="samba-pdc.html#id2894075">The machine trust account for this computer either does not
-exist or is not accessible.</a></dt><dt><a href="samba-pdc.html#id2894138">When I attempt to login to a Samba Domain from a NT4/W2K workstation,
-I get a message about my account being disabled.</a></dt><dt><a href="samba-pdc.html#id2894165">Until a few minutes after Samba has started, clients get the error &quot;Domain Controller Unavailable&quot;</a></dt></dl></dd></dl></dd><dt>6. <a href="samba-bdc.html">Backup Domain Control</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896206">Features And Benefits</a></dt><dt><a href="samba-bdc.html#id2896370">Essential Background Information</a></dt><dd><dl><dt><a href="samba-bdc.html#id2896399">MS Windows NT4 Style Domain Control</a></dt><dt><a href="samba-bdc.html#id2894362">Active Directory Domain Control</a></dt><dt><a href="samba-bdc.html#id2894383">What qualifies a Domain Controller on the network?</a></dt><dt><a href="samba-bdc.html#id2894406">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="samba-bdc.html#id2894432">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="samba-bdc.html#id2894534">Example Configuration</a></dt></dl></dd><dt><a href="samba-bdc.html#id2894584">Common Errors</a></dt><dd><dl><dt><a href="samba-bdc.html#id2894597">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="samba-bdc.html#id2894629">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="samba-bdc.html#id2894662">How do I replicate the smbpasswd file?</a></dt><dt><a href="samba-bdc.html#id2894707">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="domain-member.html">Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2895232">Features and Benefits</a></dt><dt><a href="domain-member.html#id2894803">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="domain-member.html#id2894963">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2896748">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="domain-member.html#id2896944">&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2897000">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="domain-member.html#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="domain-member.html#id2897196">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="domain-member.html#id2899872">Why is this better than security = server?</a></dt></dl></dd><dt><a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2900011">Setup your smb.conf</a></dt><dt><a href="domain-member.html#id2900094">Setup your /etc/krb5.conf</a></dt><dt><a href="domain-member.html#ads-create-machine-account">Create the computer account</a></dt><dt><a href="domain-member.html#ads-test-server">Test your server setup</a></dt><dt><a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="domain-member.html#id2900442">Notes</a></dt></dl></dd><dt><a href="domain-member.html#id2900464">Common Errors</a></dt><dd><dl><dt><a href="domain-member.html#id2900491">Can Not Add Machine Back to Domain</a></dt><dt><a href="domain-member.html#id2900523">Adding Machine to Domain Fails</a></dt></dl></dd></dl></dd><dt>8. <a href="StandAloneServer.html">Stand-Alone Servers</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2901965">Features and Benefits</a></dt><dt><a href="StandAloneServer.html#id2902003">Background</a></dt><dt><a href="StandAloneServer.html#id2902071">Example Configuration</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2900673">Reference Documentation Server</a></dt><dt><a href="StandAloneServer.html#id2900721">Central Print Serving</a></dt></dl></dd><dt><a href="StandAloneServer.html#id2900933">Common Errors</a></dt></dl></dd><dt>9. <a href="ClientConfig.html">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="ClientConfig.html#id2901302">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="FastStart.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="index.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ServerType.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter3.Fast Start for the Impatient</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter4.Server Types and Security Modes</td></tr></table></div></body></html>
+</p><div class="toc"><p><b>Table of Contents</b></p><dl><dt>4. <a href="ServerType.html">Server Types and Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2884977">Features and Benefits</a></dt><dt><a href="ServerType.html#id2885071">Server Types</a></dt><dt><a href="ServerType.html#id2885157">Samba Security Modes</a></dt><dd><dl><dt><a href="ServerType.html#id2885276">User Level Security</a></dt><dt><a href="ServerType.html#id2885414">Share Level Security</a></dt><dt><a href="ServerType.html#id2885551">Domain Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2885808">ADS Security Mode (User Level Security)</a></dt><dt><a href="ServerType.html#id2885909">Server Security (User Level Security)</a></dt></dl></dd><dt><a href="ServerType.html#id2886191">Password checking</a></dt><dt><a href="ServerType.html#id2886386">Common Errors</a></dt><dd><dl><dt><a href="ServerType.html#id2886414">What makes Samba a SERVER?</a></dt><dt><a href="ServerType.html#id2886453">What makes Samba a Domain Controller?</a></dt><dt><a href="ServerType.html#id2886490">What makes Samba a Domain Member?</a></dt><dt><a href="ServerType.html#id2886529">Constantly Losing Connections to Password Server</a></dt></dl></dd></dl></dd><dt>5. <a href="samba-pdc.html">Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2886861">Features and Benefits</a></dt><dt><a href="samba-pdc.html#id2887076">Basics of Domain Control</a></dt><dd><dl><dt><a href="samba-pdc.html#id2887090">Domain Controller Types</a></dt><dt><a href="samba-pdc.html#id2887335">Preparing for Domain Control</a></dt></dl></dd><dt><a href="samba-pdc.html#id2887717">Domain Control - Example Configuration</a></dt><dt><a href="samba-pdc.html#id2888205">Samba ADS Domain Control</a></dt><dt><a href="samba-pdc.html#id2888257">Domain and Network Logon Configuration</a></dt><dd><dl><dt><a href="samba-pdc.html#id2888272">Domain Network Logon Service</a></dt><dt><a href="samba-pdc.html#id2888704">Security Mode and Master Browsers</a></dt></dl></dd><dt><a href="samba-pdc.html#id2888850">Common Errors</a></dt><dd><dl><dt><a href="samba-pdc.html#id2888857">'$' cannot be included in machine name</a></dt><dt><a href="samba-pdc.html#id2888916">Joining domain fails because of existing machine account</a></dt><dt><a href="samba-pdc.html#id2888975">The system can not log you on (C000019B)....</a></dt><dt><a href="samba-pdc.html#id2889059">The machine trust account not accessible</a></dt><dt><a href="samba-pdc.html#id2889131">Account disabled</a></dt><dt><a href="samba-pdc.html#id2889164">Domain Controller Unavailable</a></dt><dt><a href="samba-pdc.html#id2889186">Can not log onto domain member workstation after joining domain</a></dt></dl></dd></dl></dd><dt>6. <a href="samba-bdc.html">Backup Domain Control</a></dt><dd><dl><dt><a href="samba-bdc.html#id2889347">Features And Benefits</a></dt><dt><a href="samba-bdc.html#id2889536">Essential Background Information</a></dt><dd><dl><dt><a href="samba-bdc.html#id2889565">MS Windows NT4 Style Domain Control</a></dt><dt><a href="samba-bdc.html#id2889816">Active Directory Domain Control</a></dt><dt><a href="samba-bdc.html#id2889836">What qualifies a Domain Controller on the network?</a></dt><dt><a href="samba-bdc.html#id2889863">How does a Workstation find its domain controller?</a></dt></dl></dd><dt><a href="samba-bdc.html#id2889908">Backup Domain Controller Configuration</a></dt><dd><dl><dt><a href="samba-bdc.html#id2890011">Example Configuration</a></dt></dl></dd><dt><a href="samba-bdc.html#id2890167">Common Errors</a></dt><dd><dl><dt><a href="samba-bdc.html#id2890181">Machine Accounts keep expiring, what can I do?</a></dt><dt><a href="samba-bdc.html#id2890212">Can Samba be a Backup Domain Controller to an NT4 PDC?</a></dt><dt><a href="samba-bdc.html#id2890238">How do I replicate the smbpasswd file?</a></dt><dt><a href="samba-bdc.html#id2890283">Can I do this all with LDAP?</a></dt></dl></dd></dl></dd><dt>7. <a href="domain-member.html">Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2890490">Features and Benefits</a></dt><dt><a href="domain-member.html#machine-trust-accounts">MS Windows Workstation/Server Machine Trust Accounts</a></dt><dd><dl><dt><a href="domain-member.html#id2890821">Manual Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2891126">Using NT4 Server Manager to Add Machine Accounts to the Domain</a></dt><dt><a href="domain-member.html#id2891341">&quot;On-the-Fly&quot; Creation of Machine Trust Accounts</a></dt><dt><a href="domain-member.html#id2891414">Making an MS Windows Workstation or Server a Domain Member</a></dt></dl></dd><dt><a href="domain-member.html#domain-member-server">Domain Member Server</a></dt><dd><dl><dt><a href="domain-member.html#id2891624">Joining an NT4 type Domain with Samba-3</a></dt><dt><a href="domain-member.html#id2892061">Why is this better than security = server?</a></dt></dl></dd><dt><a href="domain-member.html#ads-member">Samba ADS Domain Membership</a></dt><dd><dl><dt><a href="domain-member.html#id2892246">Setup your smb.conf</a></dt><dt><a href="domain-member.html#id2892373">Setup your /etc/krb5.conf</a></dt><dt><a href="domain-member.html#ads-create-machine-account">Create the computer account</a></dt><dt><a href="domain-member.html#ads-test-server">Test your server setup</a></dt><dt><a href="domain-member.html#ads-test-smbclient">Testing with smbclient</a></dt><dt><a href="domain-member.html#id2892751">Notes</a></dt></dl></dd><dt><a href="domain-member.html#id2892773">Common Errors</a></dt><dd><dl><dt><a href="domain-member.html#id2892816">Can Not Add Machine Back to Domain</a></dt><dt><a href="domain-member.html#id2892848">Adding Machine to Domain Fails</a></dt><dt><a href="domain-member.html#id2892992">I can't join a Windows 2003 PDC</a></dt></dl></dd></dl></dd><dt>8. <a href="StandAloneServer.html">Stand-Alone Servers</a></dt><dd><dl><dt><a href="StandAloneServer.html#id2893079">Features and Benefits</a></dt><dt><a href="StandAloneServer.html#id2893117">Background</a></dt><dt><a href="StandAloneServer.html#id2893191">Example Configuration</a></dt><dd><dl><dt><a href="StandAloneServer.html#RefDocServer">Reference Documentation Server</a></dt><dt><a href="StandAloneServer.html#SimplePrintServer">Central Print Serving</a></dt></dl></dd><dt><a href="StandAloneServer.html#id2893714">Common Errors</a></dt></dl></dd><dt>9. <a href="ClientConfig.html">MS Windows Network Configuration Guide</a></dt><dd><dl><dt><a href="ClientConfig.html#id2893778">Note</a></dt></dl></dd></dl></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="FastStart.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="samba-doc.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="ServerType.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter3.Fast Start for the Impatient</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter4.Server Types and Security Modes</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/unicode.html b/docs/htmldocs/unicode.html
index 58adb5c9938..a4f568576d4 100644
--- a/docs/htmldocs/unicode.html
+++ b/docs/htmldocs/unicode.html
@@ -1,5 +1,4 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter27.Unicode/Charsets</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba"><link rel="next" href="Backup.html" title="Chapter28.Samba Backup Techniques"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter27.Unicode/Charsets</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="integrate-ms-networks.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="Backup.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unicode"></a>Chapter27.Unicode/Charsets</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">TAKAHASHI</span> <span class="surname">Motonobu</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:monyo@home.monyo.com">monyo@home.monyo.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">25 March 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="unicode.html#id2997125">Features and Benefits</a></dt><dt><a href="unicode.html#id2997167">What are charsets and unicode?</a></dt><dt><a href="unicode.html#id2997235">Samba and charsets</a></dt><dt><a href="unicode.html#id2997336">Conversion from old names</a></dt><dt><a href="unicode.html#id2997382">Japanese charsets</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997125"></a>Features and Benefits</h2></div></div><div></div></div><p>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter27.Unicode/Charsets</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="integrate-ms-networks.html" title="Chapter26.Integrating MS Windows networks with Samba"><link rel="next" href="Backup.html" title="Chapter28.Samba Backup Techniques"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter27.Unicode/Charsets</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="integrate-ms-networks.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="Backup.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="unicode"></a>Chapter27.Unicode/Charsets</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">TAKAHASHI</span> <span class="surname">Motonobu</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:monyo@home.monyo.com">monyo@home.monyo.com</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">25 March 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="unicode.html#id2953342">Features and Benefits</a></dt><dt><a href="unicode.html#id2953385">What are charsets and unicode?</a></dt><dt><a href="unicode.html#id2953454">Samba and charsets</a></dt><dt><a href="unicode.html#id2953583">Conversion from old names</a></dt><dt><a href="unicode.html#id2953612">Japanese charsets</a></dt><dt><a href="unicode.html#id2953751">Common errors</a></dt><dd><dl><dt><a href="unicode.html#id2953758">CP850.so can't be found</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953342"></a>Features and Benefits</h2></div></div><div></div></div><p>
Every industry eventually matures. One of the great areas of maturation is in
the focus that has been given over the past decade to make it possible for anyone
anywhere to use a computer. It has not always been that way, in fact, not so long
@@ -7,14 +6,13 @@ ago it was common for software to be written for exclusive use in the country of
origin.
</p><p>
Of all the effort that has been brought to bear on providing native language support
-for all computer users, the efforts of the Openi18n organisation is deserving of
-special mention. For more information about Openi18n please refer to:
-<a href="">http://www.openi18n.org/</a>.
+for all computer users, the efforts of the <a href="http://www.openi18n.org/" target="_top">Openi18n organisation</a> is deserving of
+special mention.
</p><p>
Samba-2.x supported a single locale through a mechanism called
<span class="emphasis"><em>codepages</em></span>. Samba-3 is destined to become a truly trans-global
file and printer sharing platform.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997167"></a>What are charsets and unicode?</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953385"></a>What are charsets and unicode?</h2></div></div><div></div></div><p>
Computers communicate in numbers. In texts, each number will be
translated to a corresponding letter. The meaning that will be assigned
to a certain number depends on the <span class="emphasis"><em>character set(charset)
@@ -31,45 +29,39 @@ is more then all possible characters one could think of. They are called
multibyte charsets (because they use more then one byte to
store one character).
</p><p>
-A standardised multibyte charset is unicode, info is available at
-<a href="http://www.unicode.org/" target="_top">www.unicode.org</a>.
-A big advantage of using a multibyte charset is that you only need one; no
-need to make sure two computers use the same charset when they are
+ A standardised multibyte charset is <a href="http://www.unicode.org/" target="_top">unicode</a>.
+A big advantage of using a multibyte charset is that you only need one; there
+is no need to make sure two computers use the same charset when they are
communicating.
-</p><p>Old windows clients used to use single-byte charsets, named
+</p><p>Old windows clients use single-byte charsets, named
'codepages' by Microsoft. However, there is no support for
negotiating the charset to be used in the smb protocol. Thus, you
-have to make sure you are using the same charset when talking to an old client.
+have to make sure you are using the same charset when talking to an older client.
Newer clients (Windows NT, 2K, XP) talk unicode over the wire.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997235"></a>Samba and charsets</h2></div></div><div></div></div><p>
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953454"></a>Samba and charsets</h2></div></div><div></div></div><p>
As of samba 3.0, samba can (and will) talk unicode over the wire. Internally,
samba knows of three kinds of character sets:
-</p><div class="variablelist"><dl><dt><span class="term"><i class="parameter"><tt>unix charset</tt></i></span></dt><dd><p>
+</p><div class="variablelist"><dl><dt><span class="term"><a class="indexterm" name="id2953476"></a><i class="parameter"><tt>unix charset</tt></i></span></dt><dd><p>
This is the charset used internally by your operating system.
- The default is <tt class="constant">ASCII</tt>, which is fine for most
- systems.
- </p></dd><dt><span class="term"><i class="parameter"><tt>display charset</tt></i></span></dt><dd><p>This is the charset samba will use to print messages
+ The default is <tt class="constant">UTF-8</tt>, which is fine for most
+ systems. The default in previous samba releases was <tt class="constant">ASCII</tt>.
+ </p></dd><dt><span class="term"><a class="indexterm" name="id2953514"></a><i class="parameter"><tt>display charset</tt></i></span></dt><dd><p>This is the charset samba will use to print messages
on your screen. It should generally be the same as the <b class="command">unix charset</b>.
- </p></dd><dt><span class="term"><i class="parameter"><tt>dos charset</tt></i></span></dt><dd><p>This is the charset samba uses when communicating with
+ </p></dd><dt><span class="term"><a class="indexterm" name="id2953548"></a><i class="parameter"><tt>dos charset</tt></i></span></dt><dd><p>This is the charset samba uses when communicating with
DOS and Windows 9x clients. It will talk unicode to all newer clients.
The default depends on the charsets you have installed on your system.
Run <b class="command">testparm -v | grep &quot;dos charset&quot;</b> to see
what the default is on your system.
- </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997336"></a>Conversion from old names</h2></div></div><div></div></div><p>Because previous samba versions did not do any charset conversion,
+ </p></dd></dl></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953583"></a>Conversion from old names</h2></div></div><div></div></div><p>Because previous samba versions did not do any charset conversion,
characters in filenames are usually not correct in the unix charset but only
-for the local charset used by the DOS/Windows clients.</p><p>The following script from Steve Langasek converts all
-filenames from CP850 to the iso8859-15 charset.</p><p>
-<tt class="prompt">#</tt><b class="userinput"><tt>find <i class="replaceable"><tt>/path/to/share</tt></i> -type f -exec bash -c 'CP=&quot;{}&quot;; ISO=`echo -n &quot;$CP&quot; | iconv -f cp850 \
- -t iso8859-15`; if [ &quot;$CP&quot; != &quot;$ISO&quot; ]; then mv &quot;$CP&quot; &quot;$ISO&quot;; fi' \;
-</tt></b>
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2997382"></a>Japanese charsets</h2></div></div><div></div></div><p>Samba doesn't work correctly with Japanese charsets yet. Here are
-points of attention when setting it up:</p><div class="itemizedlist"><ul type="disc"><li><p>You should set <i class="parameter"><tt>mangling method =
-hash</tt></i></p></li><li><p>There are various iconv() implementations around and not
+for the local charset used by the DOS/Windows clients.</p><p>Bjoern Jacke has written a utility named <a href="http://j3e.de/linux/convmv/" target="_top">convm</a> that can convert whole directory
+ structures to different charsets with one single command.
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953612"></a>Japanese charsets</h2></div></div><div></div></div><p>Samba doesn't work correctly with Japanese charsets yet. Here are
+points of attention when setting it up:</p><div class="itemizedlist"><ul type="disc"><li><p>You should set <a class="indexterm" name="id2953633"></a><i class="parameter"><tt>mangling method</tt></i> = hash</p></li><li><p>There are various iconv() implementations around and not
all of them work equally well. glibc2's iconv() has a critical problem
in CP932. libiconv-1.8 works with CP932 but still has some problems and
-does not work with EUC-JP.</p></li><li><p>You should set <i class="parameter"><tt>dos charset = CP932</tt></i>, not
-Shift_JIS, SJIS...</p></li><li><p>Currently only <i class="parameter"><tt>unix charset = CP932</tt></i>
+does not work with EUC-JP.</p></li><li><p>You should set <a class="indexterm" name="id2953663"></a><i class="parameter"><tt>dos charset</tt></i> = CP932, not
+Shift_JIS, SJIS...</p></li><li><p>Currently only <a class="indexterm" name="id2953683"></a><i class="parameter"><tt>unix charset</tt></i> = CP932
will work (but still has some problems...) because of iconv() issues.
-<i class="parameter"><tt>unix charset = EUC-JP</tt></i> doesn't work well because of
-iconv() issues.</p></li><li><p>Currently Samba 3.0 does not support <i class="parameter"><tt>unix charset
-= UTF8-MAC/CAP/HEX/JIS*</tt></i></p></li></ul></div><p>More information (in Japanese) is available at: <a href="http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html" target="_top">http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html</a>.</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="integrate-ms-networks.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="Backup.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter26.Integrating MS Windows networks with Samba</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter28.Samba Backup Techniques</td></tr></table></div></body></html>
+<a class="indexterm" name="id2953699"></a><i class="parameter"><tt>unix charset</tt></i> = EUC-JP doesn't work well because of
+iconv() issues.</p></li><li><p>Currently Samba 3.0 does not support <a class="indexterm" name="id2953718"></a><i class="parameter"><tt>unix charset</tt></i> = UTF8-MAC/CAP/HEX/JIS*</p></li></ul></div><p>More information (in Japanese) is available at: <a href="http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html" target="_top">http://www.atmarkit.co.jp/flinux/special/samba3/samba3a.html</a>.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2953751"></a>Common errors</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2953758"></a>CP850.so can't be found</h3></div></div><div></div></div><p>&#8220;<span class="quote">Samba is complaining about a missing <tt class="filename">CP850.so</tt> file</span>&#8221;.</p><p>CP850 is the default <a class="indexterm" name="id2953783"></a><i class="parameter"><tt>dos charset</tt></i>. The <a class="indexterm" name="id2953797"></a><i class="parameter"><tt>dos charset</tt></i> is used to convert data to the codepage used by your dos clients. If you don't have any dos clients, you can safely ignore this message. </p><p>CP850 should be supported by your local iconv implementation. Make sure you have all the required packages installed. If you compiled samba from source, make sure configure found iconv.</p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="integrate-ms-networks.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="Backup.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter26.Integrating MS Windows networks with Samba</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter28.Samba Backup Techniques</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/upgrading-to-3.0.html b/docs/htmldocs/upgrading-to-3.0.html
index 16272d0cd4f..e7c1c61234f 100644
--- a/docs/htmldocs/upgrading-to-3.0.html
+++ b/docs/htmldocs/upgrading-to-3.0.html
@@ -1,20 +1,176 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="migration.html" title="PartIV.Migration and Updating"><link rel="next" href="NT4Migration.html" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="migration.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="NT4Migration.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="upgrading-to-3.0"></a>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">25 October 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="upgrading-to-3.0.html#id3001143">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id3001165">Obsolete configuration options</a></dt><dt><a href="upgrading-to-3.0.html#id3001219">Password Backend</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001143"></a>Charsets</h2></div></div><div></div></div><p>You might experience problems with special characters
-when communicating with old DOS clients. Codepage
-support has changed in samba 3.0. Read the chapter
-<a href="unicode.html" title="Chapter27.Unicode/Charsets">Unicode support</a> for details.
-</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001165"></a>Obsolete configuration options</h2></div></div><div></div></div><p>
-In 3.0, the following configuration options have been removed.
-</p><table class="simplelist" border="0" summary="Simple list"><tr><td>printer driver (replaced by new driver procedures) </td></tr><tr><td>printer driver file (replaced by new driver procedures)</td></tr><tr><td>printer driver location (replaced by new driver procedures)</td></tr><tr><td>use rhosts</td></tr><tr><td>postscript</td></tr><tr><td>client code page (replaced by dos charset)</td></tr><tr><td>vfs path</td></tr><tr><td>vfs options</td></tr></table></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id3001219"></a>Password Backend</h2></div></div><div></div></div><p>
-Effective with the release of samba-3 it is now imperative that the password backend
-be correctly defined in smb.conf.
-</p><p>
-Those migrating from samba-2.x with plaintext password support need the following:
-<span class="emphasis"><em>passdb backend = guest</em></span>.
-</p><p>
-Those migrating from samba-2.x with encrypted password support should add to smb.conf
-<span class="emphasis"><em>passdb backend = smbpasswd, guest</em></span>.
-</p><p>
-LDAP using Samba-2.x systems can continue to operate with the following entry
-<span class="emphasis"><em>passdb backend = ldapsam_compat, guest</em></span>.
-</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="migration.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="migration.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="NT4Migration.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartIV.Migration and Updating</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter31.Migration from NT4 PDC to Samba-3 PDC</td></tr></table></div></body></html>
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="migration.html" title="PartIV.Migration and Updating"><link rel="previous" href="migration.html" title="PartIV.Migration and Updating"><link rel="next" href="NT4Migration.html" title="Chapter31.Migration from NT4 PDC to Samba-3 PDC"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="migration.html">Prev</a></td><th width="60%" align="center">PartIV.Migration and Updating</th><td width="20%" align="right"><a accesskey="n" href="NT4Migration.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="upgrading-to-3.0"></a>Chapter30.Upgrading from Samba-2.x to Samba-3.0.0</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div><div><div class="author"><h3 class="author"><span class="firstname">Gerald</span> <span class="othername">(Jerry)</span> <span class="surname">Carter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jerry@samba.org">jerry@samba.org</a>&gt;</tt></p></div></div></div></div><div><p class="pubdate">June 30, 2003</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="upgrading-to-3.0.html#id2954094">New Features in Samba-3</a></dt><dt><a href="upgrading-to-3.0.html#id2954229">Configuration Parameter Changes</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id2954244">Removed Parameters</a></dt><dt><a href="upgrading-to-3.0.html#id2954370">New Parameters</a></dt><dt><a href="upgrading-to-3.0.html#id2954767">Modified Parameters (changes in behavior):</a></dt></dl></dd><dt><a href="upgrading-to-3.0.html#id2954842">New Functionality</a></dt><dd><dl><dt><a href="upgrading-to-3.0.html#id2954849">Databases</a></dt><dt><a href="upgrading-to-3.0.html#id2955083">Changes in Behavior</a></dt><dt><a href="upgrading-to-3.0.html#id2955133">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id2955156">Passdb Backends and Authentication</a></dt><dt><a href="upgrading-to-3.0.html#id2955274">Charsets</a></dt><dt><a href="upgrading-to-3.0.html#id2955299">LDAP</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2954094"></a>New Features in Samba-3</h2></div></div><div></div></div><p>
+Major new features:
+</p><div class="orderedlist"><ol type="1"><li><p>
+ Active Directory support. This release is able to join a ADS realm
+ as a member server and authenticate users using LDAP/kerberos.
+ </p></li><li><p>
+ Unicode support. Samba will now negotiate UNICODE on the wire and
+ internally there is now a much better infrastructure for multi-byte
+ and UNICODE character sets.
+ </p></li><li><p>
+ New authentication system. The internal authentication system has
+ been almost completely rewritten. Most of the changes are internal,
+ but the new auth system is also very configurable.
+ </p></li><li><p>
+ New filename mangling system. The filename mangling system has been
+ completely rewritten. An internal database now stores mangling maps
+ persistently. This needs lots of testing.
+ </p></li><li><p>
+ New &quot;net&quot; command. A new &quot;net&quot; command has been added. It is
+ somewhat similar to the &quot;net&quot; command in windows. Eventually we
+ plan to replace a bunch of other utilities (such as smbpasswd)
+ with subcommands in &quot;net&quot;, at the moment only a few things are
+ implemented.
+ </p></li><li><p>
+ Samba now negotiates NT-style status32 codes on the wire. This
+ improves error handling a lot.
+ </p></li><li><p>
+ Better Windows 2000/XP/2003 printing support including publishing
+ printer attributes in active directory
+ </p></li><li><p>
+ New loadable RPC modules
+ </p></li><li><p>
+ New dual-daemon winbindd support (-B) for better performance
+ </p></li><li><p>
+ Support for migrating from a Windows NT 4.0 domain to a Samba
+ domain and maintaining user, group and domain SIDs
+ </p></li><li><p>
+ Support for establishing trust relationships with Windows NT 4.0
+ domain controllers
+ </p></li><li><p>
+ Initial support for a distributed Winbind architecture using
+ an LDAP directory for storing SID to uid/gid mappings
+ </p></li><li><p>
+ Major updates to the Samba documentation tree.
+ </p></li></ol></div><p>
+Plus lots of other improvements!
+</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2954229"></a>Configuration Parameter Changes</h2></div></div><div></div></div><p>
+This section contains a brief listing of changes to smb.conf options
+in the 3.0.0 release. Please refer to the smb.conf(5) man page for
+complete descriptions of new or modified parameters.
+</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954244"></a>Removed Parameters</h3></div></div><div></div></div><p>(order alphabetically):</p><div class="itemizedlist"><ul type="disc"><li><p>admin log </p></li><li><p>alternate permissions </p></li><li><p>character set </p></li><li><p>client codepage </p></li><li><p>code page directory </p></li><li><p>coding system </p></li><li><p>domain admin group </p></li><li><p>domain guest group </p></li><li><p>force unknown acl user </p></li><li><p>nt smb support </p></li><li><p>post script </p></li><li><p>printer driver </p></li><li><p>printer driver file </p></li><li><p>printer driver location </p></li><li><p>status </p></li><li><p>total print jobs </p></li><li><p>use rhosts </p></li><li><p>valid chars </p></li><li><p>vfs options </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954370"></a>New Parameters</h3></div></div><div></div></div><p>(new parameters have been grouped by function):</p><p>Remote management</p><div class="itemizedlist"><ul type="disc"><li><p>abort shutdown script </p></li><li><p>shutdown script </p></li></ul></div><p>User and Group Account Management</p><div class="itemizedlist"><ul type="disc"><li><p>add group script </p></li><li><p>add machine script </p></li><li><p>add user to group script </p></li><li><p>algorithmic rid base </p></li><li><p>delete group script </p></li><li><p>delete user from group script </p></li><li><p>passdb backend </p></li><li><p>set primary group script </p></li></ul></div><p>Authentication</p><div class="itemizedlist"><ul type="disc"><li><p>auth methods </p></li><li><p>ads server </p></li><li><p>realm </p></li></ul></div><p>Protocol Options</p><div class="itemizedlist"><ul type="disc"><li><p>client lanman auth </p></li><li><p>client NTLMv2 auth </p></li><li><p>client schannel </p></li><li><p>client signing </p></li><li><p>client use spnego </p></li><li><p>disable netbios </p></li><li><p>ntlm auth </p></li><li><p>paranoid server security </p></li><li><p>server schannel </p></li><li><p>smb ports </p></li><li><p>use spnego </p></li></ul></div><p>File Service</p><div class="itemizedlist"><ul type="disc"><li><p>get quota command </p></li><li><p>hide special files </p></li><li><p>hide unwriteable files </p></li><li><p>hostname lookups </p></li><li><p>kernel change notify </p></li><li><p>mangle prefix </p></li><li><p>msdfs proxy </p></li><li><p>set quota command </p></li><li><p>use sendfile </p></li><li><p>vfs objects </p></li></ul></div><p>Printing</p><div class="itemizedlist"><ul type="disc"><li><p>max reported print jobs </p></li></ul></div><p>UNICODE and Character Sets</p><div class="itemizedlist"><ul type="disc"><li><p>display charset </p></li><li><p>dos charset </p></li><li><p>unicode </p></li><li><p>unix charset </p></li></ul></div><p>SID to uid/gid Mappings</p><div class="itemizedlist"><ul type="disc"><li><p>idmap backend </p></li><li><p>idmap gid </p></li><li><p>idmap only </p></li><li><p>idmap uid </p></li></ul></div><p>LDAP</p><div class="itemizedlist"><ul type="disc"><li><p>ldap delete dn </p></li><li><p>ldap group suffix </p></li><li><p>ldap idmap suffix </p></li><li><p>ldap machine suffix </p></li><li><p>ldap passwd sync </p></li><li><p>ldap trust ids </p></li><li><p>ldap user suffix </p></li></ul></div><p>General Configuration</p><div class="itemizedlist"><ul type="disc"><li><p>preload modules </p></li><li><p>privatedir </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954767"></a>Modified Parameters (changes in behavior):</h3></div></div><div></div></div><div class="itemizedlist"><ul type="disc"><li><p>encrypt passwords (enabled by default) </p></li><li><p>mangling method (set to 'hash2' by default) </p></li><li><p>passwd chat </p></li><li><p>passwd program </p></li><li><p>restrict anonymous (integer value) </p></li><li><p>security (new 'ads' value) </p></li><li><p>strict locking (enabled by default) </p></li><li><p>winbind cache time (increased to 5 minutes) </p></li><li><p>winbind uid (deprecated in favor of 'idmap uid') </p></li><li><p>winbind gid (deprecated in favor of 'idmap gid') </p></li></ul></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2954842"></a>New Functionality</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2954849"></a>Databases</h3></div></div><div></div></div><p>
+ This section contains brief descriptions of any new databases
+ introduced in Samba 3.0. Please remember to backup your existing
+ ${lock directory}/*tdb before upgrading to Samba 3.0. Samba will
+ upgrade databases as they are opened (if necessary), but downgrading
+ from 3.0 to 2.2 is an unsupported path.
+ </p><div class="table"><a name="id2954868"></a><p class="title"><b>Table30.1.TDB File Descriptions</b></p><table summary="TDB File Descriptions" border="1"><colgroup><col align="left"><col align="justify"><col align="left"></colgroup><thead><tr><th align="left">Name</th><th align="justify">Description</th><th align="center">Backup?</th></tr></thead><tbody><tr><td align="left">account_policy</td><td align="justify">User policy settings</td><td align="left">yes</td></tr><tr><td align="left">gencache</td><td align="justify">Generic caching db</td><td align="left">no</td></tr><tr><td align="left">group_mapping</td><td align="justify"><p>Mapping table from Windows groups/SID to unix groups</p></td><td align="left">yes</td></tr><tr><td align="left">idmap</td><td align="justify"><p>new ID map table from SIDS to UNIX uids/gids</p></td><td align="left">yes</td></tr><tr><td align="left">namecache</td><td align="justify">Name resolution cache entries</td><td align="left">no</td></tr><tr><td align="left">netlogon_unigrp</td><td align="justify"><p>Cache of universal group membership obtained when operating
+ as a member of a Windows domain</p></td><td align="left">no</td></tr><tr><td align="left">printing/*.tdb</td><td align="justify"><p>Cached output from 'lpq command' created on a per print
+ service basis</p></td><td align="left">no</td></tr><tr><td align="left">registry</td><td align="justify"><p>Read-only samba registry skeleton that provides support for
+ exporting various db tables via the winreg RPCs</p></td><td align="left">no</td></tr></tbody></table></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955083"></a>Changes in Behavior</h3></div></div><div></div></div><p>
+ The following issues are known changes in behavior between Samba 2.2 and
+ Samba 3.0 that may affect certain installations of Samba.
+ </p><div class="orderedlist"><ol type="1"><li><p>
+ When operating as a member of a Windows domain, Samba 2.2 would
+ map any users authenticated by the remote DC to the 'guest account'
+ if a uid could not be obtained via the getpwnam() call. Samba 3.0
+ rejects the connection as NT_STATUS_LOGON_FAILURE. There is no
+ current work around to re-establish the 2.2 behavior.
+ </p></li><li><p>
+ When adding machines to a Samba 2.2 controlled domain, the
+ 'add user script' was used to create the UNIX identity of the
+ machine trust account. Samba 3.0 introduces a new 'add machine
+ script' that must be specified for this purpose. Samba 3.0 will
+ not fall back to using the 'add user script' in the absence of
+ an 'add machine script'
+ </p></li></ol></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955133"></a>Charsets</h3></div></div><div></div></div><p>
+ You might experience problems with special characters when communicating with old DOS
+ clients. Codepage support has changed in samba 3.0. Read the chapter
+ <a href="unicode.html" title="Chapter27.Unicode/Charsets">Unicode support</a> for details.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955156"></a>Passdb Backends and Authentication</h3></div></div><div></div></div><p>
+ There have been a few new changes that Samba administrators should be
+ aware of when moving to Samba 3.0.
+ </p><div class="orderedlist"><ol type="1"><li><p>
+ Encrypted passwords have been enabled by default in order to
+ inter-operate better with out-of-the-box Windows client
+ installations. This does mean that either (a) a samba account
+ must be created for each user, or (b) 'encrypt passwords = no'
+ must be explicitly defined in smb.conf.
+ </p></li><li><p>
+ Inclusion of new <a class="indexterm" name="id2955194"></a><i class="parameter"><tt>security</tt></i> = ads option for integration
+ with an Active Directory domain using the native Windows
+ Kerberos 5 and LDAP protocols.
+ </p></li></ol></div><p>
+ Samba 3.0 also includes the possibility of setting up chains
+ of authentication methods
+ (<a class="indexterm" name="id2955217"></a><i class="parameter"><tt>auth methods</tt></i>) and account
+ storage backends
+ (<a class="indexterm" name="id2955232"></a><i class="parameter"><tt>passdb backend</tt></i>).
+ Please refer to the <tt class="filename">smb.conf</tt>
+ man page and <a href="passdb.html" title="Chapter11.Account Information Databases">the chapter about account information databases</a> for details. While both parameters assume sane default
+ values, it is likely that you will need to understand what the
+ values actually mean in order to ensure Samba operates correctly.
+ </p><p>
+ Certain functions of the smbpasswd(8) tool have been split between the
+ new smbpasswd(8) utility, the net(8) tool, and the new pdbedit(8)
+ utility. See the respective man pages for details.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955274"></a>Charsets</h3></div></div><div></div></div><p>
+ You might experience problems with special characters when communicating with old DOS
+ clients. Codepage support has changed in samba 3.0. Read the chapter
+ <a href="unicode.html" title="Chapter27.Unicode/Charsets">Unicode support</a> for details.
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2955299"></a>LDAP</h3></div></div><div></div></div><p>
+ This section outlines the new features affecting Samba / LDAP integration.
+ </p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2955311"></a>New Schema</h4></div></div><div></div></div><p>
+ A new object class (sambaSamAccount) has been introduced to replace
+ the old sambaAccount. This change aids us in the renaming of attributes
+ to prevent clashes with attributes from other vendors. There is a
+ conversion script (examples/LDAP/convertSambaAccount) to modify and LDIF
+ file to the new schema.
+ </p><p>
+ Example:
+ </p><pre class="screen">
+ <tt class="prompt">$ </tt>ldapsearch .... -b &quot;ou=people,dc=...&quot; &gt; old.ldif
+ <tt class="prompt">$ </tt>convertSambaAccount &lt;DOM SID&gt; old.ldif new.ldif
+ </pre><p>
+ The &lt;DOM SID&gt; can be obtained by running 'net getlocalsid &lt;DOMAINNAME&gt;
+ on the Samba PDC as root.
+ </p><p>
+ The old sambaAccount schema may still be used by specifying the
+ &quot;ldapsam_compat&quot; passdb backend. However, the sambaAccount and
+ associated attributes have been moved to the historical section of
+ the schema file and must be uncommented before use if needed.
+ The 2.2 object class declaration for a sambaAccount has not changed
+ in the 3.0 samba.schema file.
+ </p><p>
+ Other new object classes and their uses include:
+ </p><div class="itemizedlist"><ul type="disc"><li><p>
+ sambaDomain - domain information used to allocate rids
+ for users and groups as necessary. The attributes are added
+ in 'ldap suffix' directory entry automatically if
+ an idmap uid/gid range has been set and the 'ldapsam'
+ passdb backend has been selected.
+ </p></li><li><p>
+ sambaGroupMapping - an object representing the
+ relationship between a posixGroup and a Windows
+ group/SID. These entries are stored in the 'ldap
+ group suffix' and managed by the 'net groupmap' command.
+ </p></li><li><p>
+ sambaUnixIdPool - created in the 'ldap idmap suffix' entry
+ automatically and contains the next available 'idmap uid' and
+ 'idmap gid'
+ </p></li><li><p>
+ sambaIdmapEntry - object storing a mapping between a
+ SID and a UNIX uid/gid. These objects are created by the
+ idmap_ldap module as needed.
+ </p></li></ul></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2955433"></a>New Suffix for Searching</h4></div></div><div></div></div><p>
+ The following new smb.conf parameters have been added to aid in directing
+ certain LDAP queries when 'passdb backend = ldapsam://...' has been
+ specified.
+ </p><div class="itemizedlist"><ul type="disc"><li><p>ldap suffix - used to search for user and computer accounts</p></li><li><p>ldap user suffix - used to store user accounts</p></li><li><p>ldap machine suffix - used to store machine trust accounts</p></li><li><p>ldap group suffix - location of posixGroup/sambaGroupMapping entries</p></li><li><p>ldap idmap suffix - location of sambaIdmapEntry objects</p></li></ul></div><p>
+ If an 'ldap suffix' is defined, it will be appended to all of the
+ remaining sub-suffix parameters. In this case, the order of the suffix
+ listings in smb.conf is important. Always place the 'ldap suffix' first
+ in the list.
+ </p><p>
+ Due to a limitation in Samba's smb.conf parsing, you should not surround
+ the DN's with quotation marks.
+ </p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2955500"></a>IdMap LDAP support</h4></div></div><div></div></div><p>
+ Samba 3.0 supports an ldap backend for the idmap subsystem. The
+ following options would inform Samba that the idmap table should be
+ stored on the directory server onterose in the &quot;ou=idmap,dc=plainjoe,
+ dc=org&quot; partition.
+ </p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td>...</td></tr><tr><td><i class="parameter"><tt>idmap backend = ldap:ldap://onterose/</tt></i></td></tr><tr><td><i class="parameter"><tt>ldap idmap suffix = ou=idmap,dc=plainjoe,dc=org</tt></i></td></tr><tr><td><i class="parameter"><tt>idmap uid = 40000-50000</tt></i></td></tr><tr><td><i class="parameter"><tt>idmap gid = 40000-50000</tt></i></td></tr></table><p>
+ This configuration allows winbind installations on multiple servers to
+ share a uid/gid number space, thus avoiding the interoperability problems
+ with NFS that were present in Samba 2.2.
+ </p></div></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="migration.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="migration.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="NT4Migration.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">PartIV.Migration and Updating</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter31.Migration from NT4 PDC to Samba-3 PDC</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/vfstest.1.html b/docs/htmldocs/vfstest.1.html
index 7b124c070f3..561b3deb454 100644
--- a/docs/htmldocs/vfstest.1.html
+++ b/docs/htmldocs/vfstest.1.html
@@ -14,8 +14,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -29,9 +28,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2796651"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>COMMANDS</h2><p><span class="emphasis"><em>VFS COMMANDS</em></span></p><div class="itemizedlist"><ul type="disc"><li><p><b class="command">load &lt;module.so&gt;</b> - Load specified VFS module </p></li><li><p><b class="command">populate &lt;char&gt; &lt;size&gt;</b> - Populate a data buffer with the specified data
diff --git a/docs/htmldocs/wbinfo.1.html b/docs/htmldocs/wbinfo.1.html
index 4aa9ddab12b..f5f5af0a27b 100644
--- a/docs/htmldocs/wbinfo.1.html
+++ b/docs/htmldocs/wbinfo.1.html
@@ -1,22 +1,32 @@
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>wbinfo</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="wbinfo.1"></a><div class="titlepage"><div></div><div></div></div><div class="refnamediv"><h2>Name</h2><p>wbinfo &#8212; Query information from winbind daemon</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><tt class="command">wbinfo</tt> [-u] [-g] [-N netbios-name] [-I ip] [-n name] [-s sid] [-U uid] [-G gid] [-S sid] [-Y sid] [-t] [-m] [--sequence] [-r user] [-a user%password] [--set-auth-user user%password] [--get-auth-user] [-p]</p></div></div><div class="refsect1" lang="en"><h2>DESCRIPTION</h2><p>This tool is part of the <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a> suite.</p><p>The <b class="command">wbinfo</b> program queries and returns information
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>wbinfo</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="wbinfo.1"></a><div class="titlepage"><div></div><div></div></div><div class="refnamediv"><h2>Name</h2><p>wbinfo &#8212; Query information from winbind daemon</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><tt class="command">wbinfo</tt> [-a user%password] [-c username] [-C groupname] [--domain domain] [-I ip] [-s sid] [-u] [-U uid] [-g] [--get-auth-user] [-G gid] [-m] [-n name] [-N netbios-name] [-o user:group] [-O user:group] [-p] [-r user] [--set-auth-user user%password] [--sequence] [-S sid] [-t] [-x username] [-X groupname] [-Y sid]</p></div></div><div class="refsect1" lang="en"><h2>DESCRIPTION</h2><p>This tool is part of the <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a> suite.</p><p>The <b class="command">wbinfo</b> program queries and returns information
created and used by the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon. </p><p>The <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon must be configured
and running for the <b class="command">wbinfo</b> program to be able
- to return information.</p></div><div class="refsect1" lang="en"><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-u</span></dt><dd><p>This option will list all users available
- in the Windows NT domain for which the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon is operating in. Users in all trusted domains
- will also be listed. Note that this operation does not assign
- user ids to any users that have not already been seen by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>
- .</p></dd><dt><span class="term">-g</span></dt><dd><p>This option will list all groups available
+ to return information.</p></div><div class="refsect1" lang="en"><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-a username%password</span></dt><dd><p>Attempt to authenticate a user via winbindd.
+ This checks both authenticaion methods and reports its results.
+ </p></dd><dt><span class="term">-c user</span></dt><dd><p>Create a local winbind user.
+ </p></dd><dt><span class="term">-C group</span></dt><dd><p>Create a local winbindd group.
+ </p></dd><dt><span class="term">--domain name</span></dt><dd><p>This parameter sets the domain on which any specified
+ operations will performed. If special domain name '.' is used to represent
+ the current domain to which winbindd belongs. Currently only the
+ <tt class="option">--sequence</tt>,
+ <tt class="option">-u</tt>, and <tt class="option">-g</tt> options honor this parameter.
+ </p></dd><dt><span class="term">-g</span></dt><dd><p>This option will list all groups available
in the Windows NT domain for which the <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a> daemon is operating in. Groups in all trusted domains
will also be listed. Note that this operation does not assign
group ids to any groups that have not already been
- seen by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>. </p></dd><dt><span class="term">-N name</span></dt><dd><p>The <i class="parameter"><tt>-N</tt></i> option
- queries <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> to query the WINS
- server for the IP address associated with the NetBIOS name
- specified by the <i class="parameter"><tt>name</tt></i> parameter.
- </p></dd><dt><span class="term">-I ip</span></dt><dd><p>The <i class="parameter"><tt>-I</tt></i> option
+ seen by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>. </p></dd><dt><span class="term">--get-auth-user</span></dt><dd><p>Print username and password used by winbindd
+ during session setup to a domain controller. Username
+ and password can be set using '-A'. Only available for
+ root.</p></dd><dt><span class="term">-G gid</span></dt><dd><p>Try to convert a UNIX group id to a Windows
+ NT SID. If the gid specified does not refer to one within
+ the idmap gid range then the operation will fail. </p></dd><dt><span class="term">-I ip</span></dt><dd><p>The <i class="parameter"><tt>-I</tt></i> option
queries <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> to send a node status
request to get the NetBIOS name associated with the IP address
specified by the <i class="parameter"><tt>ip</tt></i> parameter.
+ </p></dd><dt><span class="term">-m</span></dt><dd><p>Produce a list of domains trusted by the
+ Windows NT server <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> contacts
+ when resolving names. This list does not include the Windows
+ NT domain the server is a Primary Domain Controller for.
</p></dd><dt><span class="term">-n name</span></dt><dd><p>The <i class="parameter"><tt>-n</tt></i> option
queries <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> for the SID
associated with the name specified. Domain names can be specified
@@ -24,40 +34,43 @@
For example CWDOM1/Administrator refers to the Administrator
user in the domain CWDOM1. If no domain is specified then the
domain used is the one specified in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> <i class="parameter"><tt>workgroup
- </tt></i> parameter. </p></dd><dt><span class="term">-s sid</span></dt><dd><p>Use <i class="parameter"><tt>-s</tt></i> to resolve
+ </tt></i> parameter. </p></dd><dt><span class="term">-N name</span></dt><dd><p>The <i class="parameter"><tt>-N</tt></i> option
+ queries <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> to query the WINS
+ server for the IP address associated with the NetBIOS name
+ specified by the <i class="parameter"><tt>name</tt></i> parameter.
+ </p></dd><dt><span class="term">-o user:group</span></dt><dd><p>Add a winbindd local group as a secondary group
+ for the specified winbindd local user.
+ </p></dd><dt><span class="term">-O user:group</span></dt><dd><p>Remove a winbindd local group as a secondary group
+ for the specified winbindd local user.
+ </p></dd><dt><span class="term">-p</span></dt><dd><p>Check whether winbindd is still alive.
+ Prints out either 'succeeded' or 'failed'.
+ </p></dd><dt><span class="term">-r username</span></dt><dd><p>Try to obtain the list of UNIX group ids
+ to which the user belongs. This only works for users
+ defined on a Domain Controller.
+ </p></dd><dt><span class="term">-s sid</span></dt><dd><p>Use <i class="parameter"><tt>-s</tt></i> to resolve
a SID to a name. This is the inverse of the <i class="parameter"><tt>-n
</tt></i> option above. SIDs must be specified as ASCII strings
in the traditional Microsoft format. For example,
- S-1-5-21-1455342024-3071081365-2475485837-500. </p></dd><dt><span class="term">-U uid</span></dt><dd><p>Try to convert a UNIX user id to a Windows NT
- SID. If the uid specified does not refer to one within
- the winbind uid range then the operation will fail. </p></dd><dt><span class="term">-G gid</span></dt><dd><p>Try to convert a UNIX group id to a Windows
- NT SID. If the gid specified does not refer to one within
- the winbind gid range then the operation will fail. </p></dd><dt><span class="term">-S sid</span></dt><dd><p>Convert a SID to a UNIX user id. If the SID
- does not correspond to a UNIX user mapped by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then the operation will fail. </p></dd><dt><span class="term">-Y sid</span></dt><dd><p>Convert a SID to a UNIX group id. If the SID
- does not correspond to a UNIX group mapped by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then
- the operation will fail. </p></dd><dt><span class="term">-t</span></dt><dd><p>Verify that the workstation trust account
- created when the Samba server is added to the Windows NT
- domain is working. </p></dd><dt><span class="term">-m</span></dt><dd><p>Produce a list of domains trusted by the
- Windows NT server <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> contacts
- when resolving names. This list does not include the Windows
- NT domain the server is a Primary Domain Controller for.
- </p></dd><dt><span class="term">--sequence</span></dt><dd><p>Show sequence numbers of
- all known domains</p></dd><dt><span class="term">-r username</span></dt><dd><p>Try to obtain the list of UNIX group ids
- to which the user belongs. This only works for users
- defined on a Domain Controller.
- </p></dd><dt><span class="term">-a username%password</span></dt><dd><p>Attempt to authenticate a user via winbindd.
- This checks both authenticaion methods and reports its results.
- </p></dd><dt><span class="term">--set-auth-user username%password</span></dt><dd><p>Store username and password used by winbindd
+ S-1-5-21-1455342024-3071081365-2475485837-500. </p></dd><dt><span class="term">--set-auth-user username%password</span></dt><dd><p>Store username and password used by winbindd
during session setup to a domain controller. This enables
winbindd to operate in a Windows 2000 domain with Restrict
Anonymous turned on (a.k.a. Permissions compatiable with
Windows 2000 servers only).
- </p></dd><dt><span class="term">--get-auth-user</span></dt><dd><p>Print username and password used by winbindd
- during session setup to a domain controller. Username
- and password can be set using '-A'. Only available for
- root.</p></dd><dt><span class="term">-p</span></dt><dd><p>Check whether winbindd is still alive.
- Prints out either 'succeeded' or 'failed'.
- </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the version number for
+ </p></dd><dt><span class="term">--sequence</span></dt><dd><p>Show sequence numbers of
+ all known domains</p></dd><dt><span class="term">-S sid</span></dt><dd><p>Convert a SID to a UNIX user id. If the SID
+ does not correspond to a UNIX user mapped by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then the operation will fail. </p></dd><dt><span class="term">-t</span></dt><dd><p>Verify that the workstation trust account
+ created when the Samba server is added to the Windows NT
+ domain is working. </p></dd><dt><span class="term">-u</span></dt><dd><p>This option will list all users available
+ in the Windows NT domain for which the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon is operating in. Users in all trusted domains
+ will also be listed. Note that this operation does not assign
+ user ids to any users that have not already been seen by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>
+ .</p></dd><dt><span class="term">-U uid</span></dt><dd><p>Try to convert a UNIX user id to a Windows NT
+ SID. If the uid specified does not refer to one within
+ the idmap uid range then the operation will fail. </p></dd><dt><span class="term">-x user</span></dt><dd><p>Delete an existing local winbind user.
+ </p></dd><dt><span class="term">-X group</span></dt><dd><p>Delete an existing local winbindd group.
+ </p></dd><dt><span class="term">-Y sid</span></dt><dd><p>Convert a SID to a UNIX group id. If the SID
+ does not correspond to a UNIX group mapped by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then
+ the operation will fail. </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the version number for
<b class="command">smbd</b>.</p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.
</p></dd></dl></div></div><div class="refsect1" lang="en"><h2>EXIT STATUS</h2><p>The wbinfo program returns 0 if the operation
succeeded, or 1 if the operation failed. If the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon is not working <b class="command">wbinfo</b> will always return
diff --git a/docs/htmldocs/winbind.html b/docs/htmldocs/winbind.html
index b289f5141ef..1ee1de9f2fc 100644
--- a/docs/htmldocs/winbind.html
+++ b/docs/htmldocs/winbind.html
@@ -1,15 +1,38 @@
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
-<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter21.Integrated Logon Support using Winbind</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="index.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="VFS.html" title="Chapter20.Stackable VFS modules"><link rel="next" href="AdvancedNetworkManagement.html" title="Chapter22.Advanced Network Management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter21.Integrated Logon Support using Winbind</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="VFS.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="AdvancedNetworkManagement.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="winbind"></a>Chapter21.Integrated Logon Support using Winbind</h2></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tpot@samba.org">tpot@samba.org</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Naag</span> <span class="surname">Mummaneni</span></h3><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:getnag@rediffmail.com">getnag@rediffmail.com</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div><p class="pubdate">27 June 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="winbind.html#id2975777">Features and Benefits</a></dt><dt><a href="winbind.html#id2975805">Introduction</a></dt><dt><a href="winbind.html#id2977838">What Winbind Provides</a></dt><dd><dl><dt><a href="winbind.html#id2977898">Target Uses</a></dt></dl></dd><dt><a href="winbind.html#id2977929">How Winbind Works</a></dt><dd><dl><dt><a href="winbind.html#id2977957">Microsoft Remote Procedure Calls</a></dt><dt><a href="winbind.html#id2977989">Microsoft Active Directory Services</a></dt><dt><a href="winbind.html#id2978012">Name Service Switch</a></dt><dt><a href="winbind.html#id2975323">Pluggable Authentication Modules</a></dt><dt><a href="winbind.html#id2975394">User and Group ID Allocation</a></dt><dt><a href="winbind.html#id2975429">Result Caching</a></dt></dl></dd><dt><a href="winbind.html#id2975457">Installation and Configuration</a></dt><dd><dl><dt><a href="winbind.html#id2975485">Introduction</a></dt><dt><a href="winbind.html#id2975560">Requirements</a></dt><dt><a href="winbind.html#id2976836">Testing Things Out</a></dt></dl></dd><dt><a href="winbind.html#id2981237">Conclusion</a></dt><dt><a href="winbind.html#id2981256">Common Errors</a></dt></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975777"></a>Features and Benefits</h2></div></div><div></div></div><p>Integration of UNIX and Microsoft Windows NT through
- a unified logon has been considered a &quot;holy grail&quot; in heterogeneous
- computing environments for a long time. We present
- <span class="emphasis"><em>winbind</em></span>, a component of the Samba suite
- of programs as a solution to the unified logon problem. Winbind
- uses a UNIX implementation
- of Microsoft RPC calls, Pluggable Authentication Modules, and the Name
- Service Switch to allow Windows NT domain users to appear and operate
- as UNIX users on a UNIX machine. This paper describes the winbind
- system, explaining the functionality it provides, how it is configured,
- and how it works internally.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975805"></a>Introduction</h2></div></div><div></div></div><p>It is well known that UNIX and Microsoft Windows NT have
+<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Chapter21.Winbind: Use of Domain Accounts</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"><link rel="home" href="samba-doc.html" title="SAMBA Project Documentation"><link rel="up" href="optional.html" title="PartIII.Advanced Configuration"><link rel="previous" href="VFS.html" title="Chapter20.Stackable VFS modules"><link rel="next" href="AdvancedNetworkManagement.html" title="Chapter22.Advanced Network Management"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Chapter21.Winbind: Use of Domain Accounts</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="VFS.html">Prev</a></td><th width="60%" align="center">PartIII.Advanced Configuration</th><td width="20%" align="right"><a accesskey="n" href="AdvancedNetworkManagement.html">Next</a></td></tr></table><hr></div><div class="chapter" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="winbind"></a>Chapter21.Winbind: Use of Domain Accounts</h2></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Tim</span> <span class="surname">Potter</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tpot@linuxcare.com.au">tpot@linuxcare.com.au</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Andrew</span> <span class="surname">Tridgell</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:tridge@samba.org">tridge@samba.org</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Naag</span> <span class="surname">Mummaneni</span></h3><span class="contrib">Notes for Solaris</span><div class="affiliation"><div class="address"><p><tt class="email">&lt;<a href="mailto:getnag@rediffmail.com">getnag@rediffmail.com</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="surname">Trostel</span></h3><div class="affiliation"><span class="orgname">SNAP<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jtrostel@snapserver.com">jtrostel@snapserver.com</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">Jelmer</span> <span class="othername">R.</span> <span class="surname">Vernooij</span></h3><div class="affiliation"><span class="orgname">The Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jelmer@samba.org">jelmer@samba.org</a>&gt;</tt></p></div></div></div><div class="author"><h3 class="author"><span class="firstname">John</span> <span class="othername">H.</span> <span class="surname">Terpstra</span></h3><div class="affiliation"><span class="orgname">Samba Team<br></span><div class="address"><p><tt class="email">&lt;<a href="mailto:jht@samba.org">jht@samba.org</a>&gt;</tt></p></div></div></div></div></div><div><p class="pubdate">27 June 2002</p></div></div><div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><a href="winbind.html#id2941150">Features and Benefits</a></dt><dt><a href="winbind.html#id2941246">Introduction</a></dt><dt><a href="winbind.html#id2941324">What Winbind Provides</a></dt><dd><dl><dt><a href="winbind.html#id2941400">Target Uses</a></dt></dl></dd><dt><a href="winbind.html#id2941431">How Winbind Works</a></dt><dd><dl><dt><a href="winbind.html#id2941460">Microsoft Remote Procedure Calls</a></dt><dt><a href="winbind.html#id2941493">Microsoft Active Directory Services</a></dt><dt><a href="winbind.html#id2941516">Name Service Switch</a></dt><dt><a href="winbind.html#id2941652">Pluggable Authentication Modules</a></dt><dt><a href="winbind.html#id2941724">User and Group ID Allocation</a></dt><dt><a href="winbind.html#id2941757">Result Caching</a></dt></dl></dd><dt><a href="winbind.html#id2941785">Installation and Configuration</a></dt><dd><dl><dt><a href="winbind.html#id2941792">Introduction</a></dt><dt><a href="winbind.html#id2941859">Requirements</a></dt><dt><a href="winbind.html#id2941953">Testing Things Out</a></dt></dl></dd><dt><a href="winbind.html#id2943561">Conclusion</a></dt><dt><a href="winbind.html#id2943580">Common Errors</a></dt><dd><dl><dt><a href="winbind.html#id2943633">NSCD Problem Warning</a></dt></dl></dd></dl></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2941150"></a>Features and Benefits</h2></div></div><div></div></div><p>
+ Integration of UNIX and Microsoft Windows NT through a unified logon has
+ been considered a &quot;holy grail&quot; in heterogeneous computing environments for
+ a long time.
+ </p><p>
+ There is one other facility without which UNIX and Microsoft Windows network
+ interoperability would suffer greatly. It is imperative that there be a
+ mechanism for sharing files across UNIX systems and to be able to assign
+ domain user and group ownerships with integrity.
+ </p><p>
+ <span class="emphasis"><em>winbind</em></span> is a component of the Samba suite of programs
+ solves the unified logon problem. Winbind uses a UNIX implementation of Microsoft
+ RPC calls, Pluggable Authentication Modules, and the Name Service Switch to
+ allow Windows NT domain users to appear and operate as UNIX users on a UNIX
+ machine. This chapter describes the winbind system, explaining the functionality
+ it provides, how it is configured, and how it works internally.
+ </p><p>
+ Winbind provides three separate functions:
+ </p><div class="itemizedlist"><ul type="disc"><li><p>
+ Authentication of user credentials (via PAM)
+ </p></li><li><p>
+ Identity resolution (via NSS)`
+ </p></li><li><p>
+ Windindd maintains a database called winbind_idmap.tdb in which it stores
+ mappings between UNIX UIDs / GIDs and NT SIDs. This mapping is used only
+ for users and groups that do not have a local UID/GID. It stored the UID/GID
+ allocated from the idmap uid/gid range that it has mapped to the NT SID.
+ If <i class="parameter"><tt>idmap backend</tt></i> has been specified as ldapsam:url
+ then instead of using a local mapping winbindd will obtain this information
+ from the LDAP database.
+ </p></li></ul></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ If winbindd is not running, then smbd (which calls winbindd) will fall back to
+ using purely local information from /etc/passwd and /etc/group and no dynamic
+ mapping will be used.
+ </p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2941246"></a>Introduction</h2></div></div><div></div></div><p>It is well known that UNIX and Microsoft Windows NT have
different models for representing user and group information and
use different technologies for implementing them. This fact has
made it difficult to integrate the two systems in a satisfactory
@@ -30,7 +53,7 @@
tasks for the system administrator when maintaining users and
groups on either system. The winbind system provides a simple
and elegant solution to all three components of the unified logon
- problem.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2977838"></a>What Winbind Provides</h2></div></div><div></div></div><p>Winbind unifies UNIX and Windows NT account management by
+ problem.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2941324"></a>What Winbind Provides</h2></div></div><div></div></div><p>Winbind unifies UNIX and Windows NT account management by
allowing a UNIX box to become a full member of a NT domain. Once
this is done the UNIX box will see NT users and groups as if
they were native UNIX users and groups, allowing the NT domain
@@ -54,7 +77,7 @@
to provide authentication via a NT domain to any PAM enabled
applications. This capability solves the problem of synchronizing
passwords between systems since all passwords are stored in a single
- location (on the domain controller).</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2977898"></a>Target Uses</h3></div></div><div></div></div><p>Winbind is targeted at organizations that have an
+ location (on the domain controller).</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941400"></a>Target Uses</h3></div></div><div></div></div><p>Winbind is targeted at organizations that have an
existing NT based domain infrastructure into which they wish
to put UNIX workstations or servers. Winbind will allow these
organizations to deploy UNIX workstations without having to
@@ -64,12 +87,12 @@
be used is as a central part of UNIX based appliances. Appliances
that provide file and print services to Microsoft based networks
will be able to use Winbind to provide seamless integration of
- the appliance into the domain.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2977929"></a>How Winbind Works</h2></div></div><div></div></div><p>The winbind system is designed around a client/server
+ the appliance into the domain.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2941431"></a>How Winbind Works</h2></div></div><div></div></div><p>The winbind system is designed around a client/server
architecture. A long running <b class="command">winbindd</b> daemon
listens on a UNIX domain socket waiting for requests
to arrive. These requests are generated by the NSS and PAM
clients and processed sequentially.</p><p>The technologies used to implement winbind are described
- in detail below.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2977957"></a>Microsoft Remote Procedure Calls</h3></div></div><div></div></div><p>Over the last few years, efforts have been underway
+ in detail below.</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941460"></a>Microsoft Remote Procedure Calls</h3></div></div><div></div></div><p>Over the last few years, efforts have been underway
by various Samba Team members to decode various aspects of
the Microsoft Remote Procedure Call (MSRPC) system. This
system is used for most network related operations between
@@ -82,7 +105,7 @@
users or groups. Other MSRPC calls can be used to authenticate
NT domain users and to change user passwords. By directly querying
a Windows PDC for user and group information, winbind maps the
- NT account information onto UNIX user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2977989"></a>Microsoft Active Directory Services</h3></div></div><div></div></div><p>
+ NT account information onto UNIX user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941493"></a>Microsoft Active Directory Services</h3></div></div><div></div></div><p>
Since late 2001, Samba has gained the ability to
interact with Microsoft Windows 2000 using its 'Native
Mode' protocols, rather than the NT4 RPC services.
@@ -91,7 +114,7 @@
same way as a Win2k client would, and in so doing
provide a much more efficient and
effective winbind implementation.
- </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2978012"></a>Name Service Switch</h3></div></div><div></div></div><p>The Name Service Switch, or NSS, is a feature that is
+ </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941516"></a>Name Service Switch</h3></div></div><div></div></div><p>The Name Service Switch, or NSS, is a feature that is
present in many UNIX operating systems. It allows system
information such as hostnames, mail aliases and user information
to be resolved from different sources. For example, a standalone
@@ -113,7 +136,7 @@
the C library looks in <tt class="filename">/etc/nsswitch.conf</tt>
for a line which matches the service type being requested, for
example the &quot;passwd&quot; service type is used when user or group names
- are looked up. This config line species which implementations
+ are looked up. This config line specifies which implementations
of that service should be tried and in what order. If the passwd
config line is:</p><pre class="programlisting">
passwd: files example
@@ -128,7 +151,7 @@ passwd: files example
is to put <tt class="filename">libnss_winbind.so</tt> in <tt class="filename">/lib/</tt>
then add &quot;winbind&quot; into <tt class="filename">/etc/nsswitch.conf</tt> at
the appropriate place. The C library will then call Winbind to
- resolve user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975323"></a>Pluggable Authentication Modules</h3></div></div><div></div></div><p>Pluggable Authentication Modules, also known as PAM,
+ resolve user and group names.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941652"></a>Pluggable Authentication Modules</h3></div></div><div></div></div><p>Pluggable Authentication Modules, also known as PAM,
is a system for abstracting authentication and authorization
technologies. With a PAM module it is possible to specify different
authentication methods for different system applications without
@@ -153,7 +176,7 @@ passwd: files example
is copied to <tt class="filename">/lib/security/</tt> and the PAM
control files for relevant services are updated to allow
authentication via winbind. See the PAM documentation
- for more details.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975394"></a>User and Group ID Allocation</h3></div></div><div></div></div><p>When a user or group is created under Windows NT
+ for more details.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941724"></a>User and Group ID Allocation</h3></div></div><div></div></div><p>When a user or group is created under Windows NT
is it allocated a numerical relative identifier (RID). This is
slightly different to UNIX which has a range of numbers that are
used to identify users, and the same range in which to identify
@@ -166,7 +189,7 @@ passwd: files example
time, winbind will have mapped all Windows NT users and groups
to UNIX user ids and group ids.</p><p>The results of this mapping are stored persistently in
an ID mapping database held in a tdb database). This ensures that
- RIDs are mapped to UNIX IDs in a consistent way.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975429"></a>Result Caching</h3></div></div><div></div></div><p>An active system can generate a lot of user and group
+ RIDs are mapped to UNIX IDs in a consistent way.</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941757"></a>Result Caching</h3></div></div><div></div></div><p>An active system can generate a lot of user and group
name lookups. To reduce the network cost of these lookups winbind
uses a caching scheme based on the SAM sequence number supplied
by NT domain controllers. User or group information returned
@@ -177,23 +200,12 @@ passwd: files example
the PDC and compared against the sequence number of the cached entry.
If the sequence numbers do not match, then the cached information
is discarded and up to date information is requested directly
- from the PDC.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2975457"></a>Installation and Configuration</h2></div></div><div></div></div><p>
-Many thanks to John Trostel <a href="mailto:jtrostel@snapserver.com" target="_top">jtrostel@snapserver.com</a>
-for providing the HOWTO for this section.
-</p><p>
-This HOWTO describes how to get winbind services up and running
-to control access and authenticate users on your Linux box using
-the winbind services which come with SAMBA 3.0.
-</p><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975485"></a>Introduction</h3></div></div><div></div></div><p>
+ from the PDC.</p></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2941785"></a>Installation and Configuration</h2></div></div><div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941792"></a>Introduction</h3></div></div><div></div></div><p>
This section describes the procedures used to get winbind up and
-running on a RedHat 7.1 system. Winbind is capable of providing access
+running. Winbind is capable of providing access
and authentication control for Windows Domain users through an NT
or Win2K PDC for 'regular' services, such as telnet a nd ftp, as
well for SAMBA services.
-</p><p>
-This HOWTO has been written from a 'RedHat-centric' perspective, so if
-you are using another distribution, you may have to modify the instructions
-somewhat to fit the way your distribution works.
</p><div class="itemizedlist"><ul type="disc"><li><p>
<span class="emphasis"><em>Why should I to this?</em></span>
</p><p>This allows the SAMBA administrator to rely on the
@@ -209,7 +221,7 @@ somewhat to fit the way your distribution works.
SAMBA server, this HOWTO is for you. That said, I am no NT or PAM
expert, so you may find a better or easier way to accomplish
these tasks.
- </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2975560"></a>Requirements</h3></div></div><div></div></div><p>
+ </p></li></ul></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941859"></a>Requirements</h3></div></div><div></div></div><p>
If you have a Samba configuration file that you are currently
using... <span class="emphasis"><em>BACK IT UP!</em></span> If your system already uses PAM,
<span class="emphasis"><em>back up the <tt class="filename">/etc/pam.d</tt> directory
@@ -236,41 +248,26 @@ winbind modules, you should have at least the pam libraries resident
on your system. For recent RedHat systems (7.1, for instance), that
means <tt class="filename">pam-0.74-22</tt>. For best results, it is helpful to also
install the development packages in <tt class="filename">pam-devel-0.74-22</tt>.
-</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2976836"></a>Testing Things Out</h3></div></div><div></div></div><p>
+</p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2941953"></a>Testing Things Out</h3></div></div><div></div></div><p>
Before starting, it is probably best to kill off all the SAMBA
related daemons running on your server. Kill off all <span class="application">smbd</span>,
<span class="application">nmbd</span>, and <span class="application">winbindd</span> processes that may
be running. To use PAM, you will want to make sure that you have the
-standard PAM package (for RedHat) which supplies the <tt class="filename">/etc/pam.d</tt>
+standard PAM package which supplies the <tt class="filename">/etc/pam.d</tt>
directory structure, including the pam modules are used by pam-aware
services, several pam libraries, and the <tt class="filename">/usr/doc</tt>
and <tt class="filename">/usr/man</tt> entries for pam. Winbind built better
in SAMBA if the pam-devel package was also installed. This package includes
the header files needed to compile pam-aware applications.
-</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2976898"></a>Configure and compile SAMBA</h4></div></div><div></div></div><p>
-The configuration and compilation of SAMBA is pretty straightforward.
-The first three steps may not be necessary depending upon
-whether or not you have previously built the Samba binaries.
-</p><pre class="screen">
-<tt class="prompt">root# </tt><b class="command">autoconf</b>
-<tt class="prompt">root# </tt><b class="command">make clean</b>
-<tt class="prompt">root# </tt><b class="command">rm config.cache</b>
-<tt class="prompt">root# </tt><b class="command">./configure</b>
-<tt class="prompt">root# </tt><b class="command">make</b>
-<tt class="prompt">root# </tt><b class="command">make install</b>
-</pre><p>
-This will, by default, install SAMBA in <tt class="filename">/usr/local/samba</tt>.
-See the main SAMBA documentation if you want to install SAMBA somewhere else.
-It will also build the winbindd executable and libraries.
-</p></div><div xmlns:ns74="" class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2977010"></a>Configure <tt class="filename">nsswitch.conf</tt> and the
+</p><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2942015"></a>Configure <tt class="filename">nsswitch.conf</tt> and the
winbind libraries on Linux and Solaris</h4></div></div><div></div></div><p>
The libraries needed to run the <span class="application">winbindd</span> daemon
through nsswitch need to be copied to their proper locations, so
-</p><ns74:p>
-</ns74:p><pre class="screen">
+</p><p>
+</p><pre class="screen">
<tt class="prompt">root# </tt><b class="userinput"><tt>cp ../samba/source/nsswitch/libnss_winbind.so /lib</tt></b>
-</pre><ns74:p>
-</ns74:p><p>
+</pre><p>
+</p><p>
I also found it necessary to make the following symbolic link:
</p><p>
<tt class="prompt">root# </tt> <b class="userinput"><tt>ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2</tt></b>
@@ -297,7 +294,7 @@ is faster (and you don't need to reboot) if you do it manually:
</p><p>
This makes <tt class="filename">libnss_winbind</tt> available to winbindd
and echos back a check to you.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2977217"></a>NSS Winbind on AIX</h4></div></div><div></div></div><p>(This section is only for those running AIX)</p><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2942224"></a>NSS Winbind on AIX</h4></div></div><div></div></div><p>(This section is only for those running AIX)</p><p>
The winbind AIX identification module gets built as libnss_winbind.so in the
nsswitch directory of the samba source. This file can be copied to
/usr/lib/security, and the AIX naming convention would indicate that it
@@ -317,40 +314,25 @@ Programming Concepts for AIX&quot;: <a href="http://publibn.boulder.ibm.com/doc_
Chapter 18. Loadable Authentication Module Programming Interface</a>
and more information on administering the modules at <a href="http://publibn.boulder.ibm.com/doc_link/en_US/a_doc_lib/aixbman/baseadmn/iandaadmin.htm" target="_top">
&quot;System Management Guide: Operating System and Devices&quot;</a>.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2977288"></a>Configure smb.conf</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2942302"></a>Configure smb.conf</h4></div></div><div></div></div><p>
Several parameters are needed in the smb.conf file to control
the behavior of <span class="application">winbindd</span>. Configure
<tt class="filename">smb.conf</tt> These are described in more detail in
the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> man page. My
<tt class="filename">smb.conf</tt> file was modified to
include the following entries in the [global] section:
-</p><pre class="programlisting">
-[global]
- &lt;...&gt;
- # separate domain and username with '+', like DOMAIN+username
- <a href="winbindd.8.html#WINBINDSEPARATOR" target="_top">winbind separator</a> = +
- # use uids from 10000 to 20000 for domain users
- <a href="winbindd.8.html#WINBINDUID" target="_top">idmap uid</a> = 10000-20000
- # use gids from 10000 to 20000 for domain groups
- <a href="winbindd.8.html#WINBINDGID" target="_top">idmap gid</a> = 10000-20000
- # allow enumeration of winbind users and groups
- <a href="winbindd.8.html#WINBINDENUMUSERS" target="_top">winbind enum users</a> = yes
- <a href="winbindd.8.html#WINBINDENUMGROUP" target="_top">winbind enum groups</a> = yes
- # give winbind users a real shell (only needed if they have telnet access)
- <a href="winbindd.8.html#TEMPLATEHOMEDIR" target="_top">template homedir</a> = /home/winnt/%D/%U
- <a href="winbindd.8.html#TEMPLATESHELL" target="_top">template shell</a> = /bin/bash
-</pre></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2977402"></a>Join the SAMBA server to the PDC domain</h4></div></div><div></div></div><p>
+</p><div class="example"><a name="id2942349"></a><p class="title"><b>Example21.1.smb.conf for winbind set-up</b></p><table class="simplelist" border="0" summary="Simple list"><tr><td> </td></tr><tr><td><i class="parameter"><tt>[global]</tt></i></td></tr><tr><td>...</td></tr><tr><td># separate domain and username with '+', like DOMAIN+username</td></tr><tr><td><i class="parameter"><tt>winbind separator = +</tt></i></td></tr><tr><td># use uids from 10000 to 20000 for domain users</td></tr><tr><td><i class="parameter"><tt>idmap uid = 10000-20000</tt></i></td></tr><tr><td># use gids from 10000 to 20000 for domain groups</td></tr><tr><td><i class="parameter"><tt>winbind gid = 10000-20000</tt></i></td></tr><tr><td># allow enumeration of winbind users and groups</td></tr><tr><td><i class="parameter"><tt>winbind enum users = yes</tt></i></td></tr><tr><td><i class="parameter"><tt>winbind enum groups = yes</tt></i></td></tr><tr><td># give winbind users a real shell (only needed if they have telnet access)</td></tr><tr><td><i class="parameter"><tt>template homedir = /home/winnt/%D/%U</tt></i></td></tr><tr><td><i class="parameter"><tt>template shell = /bin/bash</tt></i></td></tr></table></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2942460"></a>Join the SAMBA server to the PDC domain</h4></div></div><div></div></div><p>
Enter the following command to make the SAMBA server join the
PDC domain, where <i class="replaceable"><tt>DOMAIN</tt></i> is the name of
your Windows domain and <i class="replaceable"><tt>Administrator</tt></i> is
a domain user who has administrative privileges in the domain.
</p><p>
-<tt class="prompt">root# </tt><b class="userinput"><tt>/usr/local/samba/bin/net join -S PDC -U Administrator</tt></b>
+<tt class="prompt">root# </tt><b class="userinput"><tt>/usr/local/samba/bin/net rpc join -S PDC -U Administrator</tt></b>
</p><p>
The proper response to the command should be: &quot;Joined the domain
<i class="replaceable"><tt>DOMAIN</tt></i>&quot; where <i class="replaceable"><tt>DOMAIN</tt></i>
is your DOMAIN name.
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980297"></a>Start up the winbindd daemon and test it!</h4></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2942516"></a>Start up the winbindd daemon and test it!</h4></div></div><div></div></div><p>
Eventually, you will want to modify your smb startup script to
automatically invoke the winbindd daemon when the other parts of
SAMBA start, but it is possible to test out just the winbind
@@ -392,8 +374,7 @@ your PDC. For example, I get the following response:
CEO+krbtgt
CEO+TsInternetUser
</pre><p>
-Obviously, I have named my domain 'CEO' and my <i class="parameter"><tt>winbind
-separator</tt></i> is '+'.
+ Obviously, I have named my domain 'CEO' and my <a class="indexterm" name="id2942662"></a><i class="parameter"><tt>winbind separator</tt></i> is '+'.
</p><p>
You can do the same sort of thing to get group information from
the PDC:
@@ -422,7 +403,7 @@ directories and default shells.
The same thing can be done for groups with the command
</p><p>
<tt class="prompt">root# </tt><b class="userinput"><tt>getent group</tt></b>
-</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980538"></a>Fix the init.d startup scripts</h4></div></div><div></div></div><div xmlns:ns75="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2980545"></a>Linux</h5></div></div><div></div></div><p>
+</p></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2942766"></a>Fix the init.d startup scripts</h4></div></div><div></div></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2942773"></a>Linux</h5></div></div><div></div></div><p>
The <span class="application">winbindd</span> daemon needs to start up after the
<span class="application">smbd</span> and <span class="application">nmbd</span> daemons are running.
To accomplish this task, you need to modify the startup scripts of your system.
@@ -453,18 +434,18 @@ start() {
touch /var/lock/subsys/smb || RETVAL=1
return $RETVAL
}
-</pre><ns75:p>If you would like to run winbindd in dual daemon mode, replace
+</pre><p>If you would like to run winbindd in dual daemon mode, replace
the line
-</ns75:p><pre class="programlisting">
+</p><pre class="programlisting">
daemon /usr/local/samba/bin/winbindd
-</pre><ns75:p>
+</pre><p>
in the example above with:
-</ns75:p><pre class="programlisting">
+</p><pre class="programlisting">
daemon /usr/local/samba/bin/winbindd -B
-</pre><ns75:p>.
-</ns75:p><p>
+</pre><p>.
+</p><p>
The 'stop' function has a corresponding entry to shut down the
services and looks like this:
</p><pre class="programlisting">
@@ -488,7 +469,7 @@ stop() {
echo &quot;&quot;
return $RETVAL
}
-</pre></div><div xmlns:ns76="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2980690"></a>Solaris</h5></div></div><div></div></div><p>Winbind doesn't work on Solaris 9, see the <a href="Portability.html#winbind-solaris9" title="Winbind on Solaris 9">Portability</a> chapter for details.</p><p>On Solaris, you need to modify the
+</pre></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2942942"></a>Solaris</h5></div></div><div></div></div><p>Winbind doesn't work on Solaris 9, see the <a href="Portability.html#winbind-solaris9" title="Winbind on Solaris 9">Portability</a> chapter for details.</p><p>On Solaris, you need to modify the
<tt class="filename">/etc/init.d/samba.server</tt> startup script. It usually
only starts smbd and nmbd but should now start winbindd too. If you
have samba installed in <tt class="filename">/usr/local/samba/bin</tt>,
@@ -540,22 +521,22 @@ the file could contains something like this:
echo &quot;Usage: /etc/init.d/samba.server { start | stop }&quot;
;;
esac
-</pre><ns76:p>
+</pre><p>
Again, if you would like to run samba in dual daemon mode, replace
-</ns76:p><pre class="programlisting">
+</p><pre class="programlisting">
/usr/local/samba/bin/winbindd
-</pre><ns76:p>
+</pre><p>
in the script above with:
-</ns76:p><pre class="programlisting">
+</p><pre class="programlisting">
/usr/local/samba/bin/winbindd -B
-</pre><ns76:p>
-</ns76:p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2980779"></a>Restarting</h5></div></div><div></div></div><p>
+</pre><p>
+</p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2943053"></a>Restarting</h5></div></div><div></div></div><p>
If you restart the <span class="application">smbd</span>, <span class="application">nmbd</span>, and <span class="application">winbindd</span> daemons at this point, you
should be able to connect to the samba server as a domain member just as
if you were a local user.
-</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2980816"></a>Configure Winbind and PAM</h4></div></div><div></div></div><p>
+</p></div></div><div class="sect3" lang="en"><div class="titlepage"><div><div><h4 class="title"><a name="id2943089"></a>Configure Winbind and PAM</h4></div></div><div></div></div><p>
If you have made it this far, you know that winbindd and samba are working
together. If you want to use winbind to provide authentication for other
services, keep reading. The pam configuration files need to be altered in
@@ -575,7 +556,7 @@ your other pam security modules. On my RedHat system, this was the
modules reside in <tt class="filename">/usr/lib/security</tt>.
</p><p>
<tt class="prompt">root# </tt><b class="userinput"><tt>cp ../samba/source/nsswitch/pam_winbind.so /lib/security</tt></b>
-</p><div xmlns:ns77="" class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2980922"></a>Linux/FreeBSD-specific PAM configuration</h5></div></div><div></div></div><p>
+</p><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2943196"></a>Linux/FreeBSD-specific PAM configuration</h5></div></div><div></div></div><p>
The <tt class="filename">/etc/pam.d/samba</tt> file does not need to be changed. I
just left this file as it was:
</p><pre class="programlisting">
@@ -602,7 +583,7 @@ have individual directories for the domain users already present on
the server, or change the home directory template to a general
directory for all domain users. These can be easily set using
the <tt class="filename">smb.conf</tt> global entry
-<i class="parameter"><tt>template homedir</tt></i>.
+<a class="indexterm" name="id2943302"></a><i class="parameter"><tt>template homedir</tt></i>.
</p><p>
The <tt class="filename">/etc/pam.d/ftp</tt> file can be changed
to allow winbind ftp access in a manner similar to the
@@ -631,14 +612,14 @@ same way. It now looks like this:
password required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_stack.so service=system-auth
session optional /lib/security/pam_console.so
-</pre><ns77:p>
-In this case, I added the </ns77:p><pre class="programlisting">auth sufficient /lib/security/pam_winbind.so</pre><ns77:p>
-lines as before, but also added the </ns77:p><pre class="programlisting">required pam_securetty.so</pre><ns77:p>
+</pre><p>
+In this case, I added the </p><pre class="programlisting">auth sufficient /lib/security/pam_winbind.so</pre><p>
+lines as before, but also added the </p><pre class="programlisting">required pam_securetty.so</pre><p>
above it, to disallow root logins over the network. I also added a
-<b class="command">sufficient /lib/security/pam_unix.so use_first_pass</b>
+</p><pre class="programlisting">sufficient /lib/security/pam_unix.so use_first_pass</pre><p>
line after the <b class="command">winbind.so</b> line to get rid of annoying
double prompts for passwords.
-</ns77:p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2981145"></a>Solaris-specific configuration</h5></div></div><div></div></div><p>
+</p></div><div class="sect4" lang="en"><div class="titlepage"><div><div><h5 class="title"><a name="id2943437"></a>Solaris-specific configuration</h5></div></div><div></div></div><p>
The /etc/pam.conf needs to be changed. I changed this file so that my Domain
users can logon both locally as well as telnet.The following are the changes
that I made.You can customize the pam.conf file as per your requirements,but
@@ -710,15 +691,15 @@ annoying double prompts for passwords.
</p><p>
Now restart your Samba and try connecting through your application that you
configured in the pam.conf.
-</p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2981237"></a>Conclusion</h2></div></div><div></div></div><p>The winbind system, through the use of the Name Service
+</p></div></div></div></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943561"></a>Conclusion</h2></div></div><div></div></div><p>The winbind system, through the use of the Name Service
Switch, Pluggable Authentication Modules, and appropriate
Microsoft RPC calls have allowed us to provide seamless
integration of Microsoft Windows NT domain users on a
UNIX system. The result is a great reduction in the administrative
- cost of running a mixed UNIX and NT network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2981256"></a>Common Errors</h2></div></div><div></div></div><p>Winbind has a number of limitations in its current
+ cost of running a mixed UNIX and NT network.</p></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2943580"></a>Common Errors</h2></div></div><div></div></div><p>Winbind has a number of limitations in its current
released version that we hope to overcome in future
releases:</p><div class="itemizedlist"><ul type="disc"><li><p>Winbind is currently only available for
- the Linux, Solaris and IRIX operating systems, although ports to other operating
+ the Linux, Solaris, AIX and IRIX operating systems, although ports to other operating
systems are certainly possible. For such ports to be feasible,
we require the C library of the target operating system to
support the Name Service Switch and Pluggable Authentication
@@ -730,4 +711,11 @@ configured in the pam.conf.
containing this information is corrupted or destroyed.</p></li><li><p>Currently the winbind PAM module does not take
into account possible workstation and logon time restrictions
that may be been set for Windows NT users, this is
- instead up to the PDC to enforce.</p></li></ul></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="VFS.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="AdvancedNetworkManagement.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter20.Stackable VFS modules</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">Chapter22.Advanced Network Management</td></tr></table></div></body></html>
+ instead up to the PDC to enforce.</p></li></ul></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2943633"></a>NSCD Problem Warning</h3></div></div><div></div></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
+ Do NOT under ANY circumstances run <b class="command">nscd</b> on any system
+ on which <b class="command">winbind</b> is running.
+ </p></div><p>
+ If <b class="command">nscd</b> is running on the UNIX/Linux system, then
+ even though NSSWITCH is correctly configured it will NOT be possible to resolve
+ domain users and groups for file and directory controls.
+ </p></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="VFS.html">Prev</a></td><td width="20%" align="center"><a accesskey="u" href="optional.html">Up</a></td><td width="40%" align="right"><a accesskey="n" href="AdvancedNetworkManagement.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter20.Stackable VFS modules</td><td width="20%" align="center"><a accesskey="h" href="samba-doc.html">Home</a></td><td width="40%" align="right" valign="top">Chapter22.Advanced Network Management</td></tr></table></div></body></html>
diff --git a/docs/htmldocs/winbindd.8.html b/docs/htmldocs/winbindd.8.html
index 10759df47e8..748dbe1e4bc 100644
--- a/docs/htmldocs/winbindd.8.html
+++ b/docs/htmldocs/winbindd.8.html
@@ -1,5 +1,5 @@
<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>winbindd</title><link rel="stylesheet" href="samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.60.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="winbindd.8"></a><div class="titlepage"><div></div><div></div></div><div class="refnamediv"><h2>Name</h2><p>winbindd &#8212; Name Service Switch daemon for resolving names
- from NT servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><tt class="command">winbindd</tt> [-F] [-S] [-i] [-Y] [-d &lt;debug level&gt;] [-s &lt;smb config file&gt;] [-n]</p></div></div><div xmlns:ns1="" class="refsect1" lang="en"><h2>DESCRIPTION</h2><p>This program is part of the <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a> suite.</p><p><b class="command">winbindd</b> is a daemon that provides
+ from NT servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><tt class="command">winbindd</tt> [-F] [-S] [-i] [-Y] [-d &lt;debug level&gt;] [-s &lt;smb config file&gt;] [-n]</p></div></div><div class="refsect1" lang="en"><h2>DESCRIPTION</h2><p>This program is part of the <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a> suite.</p><p><b class="command">winbindd</b> is a daemon that provides
a service for the Name Service Switch capability that is present
in most modern C libraries. The Name Service Switch allows user
and system information to be obtained from different databases
@@ -26,12 +26,12 @@
the <tt class="filename">passwd(5)</tt> file and used by
<b class="command">getpwent(3)</b> functions. </p></dd><dt><span class="term">group</span></dt><dd><p>Group information traditionally stored in
the <tt class="filename">group(5)</tt> file and used by
- <b class="command">getgrent(3)</b> functions. </p></dd></dl></div><ns1:p>For example, the following simple configuration in the
+ <b class="command">getgrent(3)</b> functions. </p></dd></dl></div><p>For example, the following simple configuration in the
<tt class="filename">/etc/nsswitch.conf</tt> file can be used to initially
resolve user and group information from <tt class="filename">/etc/passwd
</tt> and <tt class="filename">/etc/group</tt> and then from the
Windows NT server.
-</ns1:p><pre class="programlisting">
+</p><pre class="programlisting">
passwd: files winbind
group: files winbind
</pre><p>The following simple configuration in the
@@ -55,8 +55,7 @@ configuration details required by the server. The
information in this file includes server-specific
information such as what printcap file to use, as well
as descriptions of all the services that the server is
-to provide. See <a href="smb.conf.5.html" target="_top"><tt class="filename">
-smb.conf(5)</tt></a> for more information.
+to provide. See <tt class="filename">smb.conf</tt> for more information.
The default configuration file name is determined at
compile time.</p></dd><dt><span class="term">-d|--debug=debuglevel</span></dt><dd><p><i class="replaceable"><tt>debuglevel</tt></i> is an integer
from 0 to 10. The default value if this parameter is
@@ -70,9 +69,8 @@ amounts of log data, and should only be used when
investigating a problem. Levels above 3 are designed for
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will
-override the <a href="smb.conf.5.html#loglevel" target="_top">log
-level</a> parameter in the <a href="smb.conf.5.html" target="_top">
-<tt class="filename">smb.conf(5)</tt></a> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
+override the <a class="indexterm" name="id2796919"></a><i class="parameter"><tt>log level</tt></i> parameter
+in the <tt class="filename">smb.conf</tt> file.</p></dd><dt><span class="term">-l|--logfile=logbasename</span></dt><dd><p>File name for log/debug files. The extension
<tt class="constant">&quot;.client&quot;</tt> will be appended. The log file is
never removed by the client.
</p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.
@@ -109,25 +107,25 @@ never removed by the client.
determine which user and group ids correspond to Windows NT user
and group rids. </p></div><div class="refsect1" lang="en"><h2>CONFIGURATION</h2><p>Configuration of the <b class="command">winbindd</b> daemon
is done through configuration parameters in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. All parameters should be specified in the
- [global] section of smb.conf. </p><div class="itemizedlist"><ul type="disc"><li><p><a href="smb.conf.5.html#WINBINDSEPARATOR" target="_top">
- <i class="parameter"><tt>winbind separator</tt></i></a></p></li><li><p><a href="smb.conf.5.html#WINBINDUID" target="_top">
- <i class="parameter"><tt>winbind uid</tt></i></a></p></li><li><p><a href="smb.conf.5.html#WINBINDGID" target="_top">
- <i class="parameter"><tt>winbind gid</tt></i></a></p></li><li><p><a href="smb.conf.5.html#WINBINDCACHETIME" target="_top">
- <i class="parameter"><tt>winbind cache time</tt></i></a></p></li><li><p><a href="smb.conf.5.html#WINBINDENUMUSERS" target="_top">
- <i class="parameter"><tt>winbind enum users</tt></i></a></p></li><li><p><a href="smb.conf.5.html#WINBINDENUMGROUPS" target="_top">
- <i class="parameter"><tt>winbind enum groups</tt></i></a></p></li><li><p><a href="smb.conf.5.html#TEMPLATEHOMEDIR" target="_top">
- <i class="parameter"><tt>template homedir</tt></i></a></p></li><li><p><a href="smb.conf.5.html#TEMPLATESHELL" target="_top">
- <i class="parameter"><tt>template shell</tt></i></a></p></li><li><p><a href="smb.conf.5.html#WINBINDUSEDEFAULTDOMAIN" target="_top">
- <i class="parameter"><tt>winbind use default domain</tt></i></a></p></li></ul></div></div><div xmlns:ns2="" class="refsect1" lang="en"><h2>EXAMPLE SETUP</h2><p>To setup winbindd for user and group lookups plus
+ [global] section of smb.conf. </p><div class="itemizedlist"><ul type="disc"><li><p>
+ <a class="indexterm" name="id2797151"></a><i class="parameter"><tt>winbind separator</tt></i></p></li><li><p>
+ <a class="indexterm" name="id2797169"></a><i class="parameter"><tt>idmap uid</tt></i></p></li><li><p>
+ <a class="indexterm" name="id2797187"></a><i class="parameter"><tt>idmap gid</tt></i></p></li><li><p>
+ <a class="indexterm" name="id2797205"></a><i class="parameter"><tt>winbind cache time</tt></i></p></li><li><p>
+ <a class="indexterm" name="id2797223"></a><i class="parameter"><tt>winbind enum users</tt></i></p></li><li><p>
+ <a class="indexterm" name="id2797241"></a><i class="parameter"><tt>winbind enum groups</tt></i></p></li><li><p>
+ <a class="indexterm" name="id2797259"></a><i class="parameter"><tt>template homedir</tt></i></p></li><li><p>
+ <a class="indexterm" name="id2797277"></a><i class="parameter"><tt>template shell</tt></i></p></li><li><p>
+ <a class="indexterm" name="id2797296"></a><i class="parameter"><tt>winbind use default domain</tt></i></p></li></ul></div></div><div class="refsect1" lang="en"><h2>EXAMPLE SETUP</h2><p>To setup winbindd for user and group lookups plus
authentication from a domain controller use something like the
- following setup. This was tested on a RedHat 6.2 Linux box. </p><ns2:p>In <tt class="filename">/etc/nsswitch.conf</tt> put the
+ following setup. This was tested on a RedHat 6.2 Linux box. </p><p>In <tt class="filename">/etc/nsswitch.conf</tt> put the
following:
-</ns2:p><pre class="programlisting">
+</p><pre class="programlisting">
passwd: files winbind
group: files winbind
-</pre><ns2:p>In <tt class="filename">/etc/pam.d/*</tt> replace the <i class="parameter"><tt>
+</pre><p>In <tt class="filename">/etc/pam.d/*</tt> replace the <i class="parameter"><tt>
auth</tt></i> lines with something like this:
-</ns2:p><pre class="programlisting">
+</p><pre class="programlisting">
auth required /lib/security/pam_securetty.so
auth required /lib/security/pam_nologin.so
auth sufficient /lib/security/pam_winbind.so
@@ -143,16 +141,16 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok
made from <tt class="filename">/lib/libnss_winbind.so</tt> to
<tt class="filename">/lib/libnss_winbind.so.2</tt>. If you are using an
older version of glibc then the target of the link should be
- <tt class="filename">/lib/libnss_winbind.so.1</tt>.</p><ns2:p>Finally, setup a <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> containing directives like the
+ <tt class="filename">/lib/libnss_winbind.so.1</tt>.</p><p>Finally, setup a <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> containing directives like the
following:
-</ns2:p><pre class="programlisting">
+</p><pre class="programlisting">
[global]
winbind separator = +
winbind cache time = 10
template shell = /bin/bash
template homedir = /home/%D/%U
- winbind uid = 10000-20000
- winbind gid = 10000-20000
+ idmap uid = 10000-20000
+ idmap gid = 10000-20000
workgroup = DOMAIN
security = domain
password server = *
diff --git a/docs/manpages/Samba.7 b/docs/manpages/Samba.7
index bd0cfa3d489..591e4ca28a1 100644
--- a/docs/manpages/Samba.7
+++ b/docs/manpages/Samba.7
@@ -209,7 +209,10 @@ If you have patches to submit, visithttp://devel\&.samba\&.org/ for information
.SH "CONTRIBUTORS"
.PP
-Contributors to the project are now too numerous to mention here but all deserve the thanks of all Samba users\&. To see a full list, look at the\fIchange-log\fR in the source package for the pre-CVS changes and at http://cvs\&.samba\&.org/ for the contributors to Samba post-CVS\&. CVS is the Open Source source code control system used by the Samba Team to develop Samba\&. The project would have been unmanageable without it\&.
+Contributors to the project are now too numerous to mention here but all deserve the thanks of all Samba users\&. To see a full list, look at ftp://samba\&.org/pub/samba/alpha/change-log for the pre-CVS changes and at ftp://samba\&.org/pub/samba/alpha/cvs\&.log for the contributors to Samba post-CVS\&. CVS is the Open Source source code control system used by the Samba Team to develop Samba\&. The project would have been unmanageable without it\&.
+
+.PP
+In addition, several commercial organizations now help fund the Samba Team with money and equipment\&. For details see the Samba Web pages at http://samba\&.org/samba/samba-thanks\&.html\&.
.SH "AUTHOR"
diff --git a/docs/manpages/net.8 b/docs/manpages/net.8
index d473503792a..3f3f9340bea 100644
--- a/docs/manpages/net.8
+++ b/docs/manpages/net.8
@@ -70,12 +70,12 @@ Port on the target server to connect to (usually 139 or 445)\&. Defaults to tryi
.TP
-n <primary NetBIOS name>
-This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fINetBIOS name\fR parameter in the \fBsmb.conf\fR(5) file\&. However, a command line setting will take precedence over settings in \fBsmb.conf\fR(5)\&.
+This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fInetbios name\fR parameter in the \fIsmb\&.conf\fR file\&. However, a command line setting will take precedence over settings in \fIsmb\&.conf\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -104,7 +104,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.SH "COMMANDS"
diff --git a/docs/manpages/nmbd.8 b/docs/manpages/nmbd.8
index 096876bfdef..0b63e77ee21 100644
--- a/docs/manpages/nmbd.8
+++ b/docs/manpages/nmbd.8
@@ -89,7 +89,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -103,7 +103,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
@@ -120,7 +120,7 @@ UDP port number is a positive integer value\&. This option changes the default U
.TP
\fI/etc/inetd\&.conf\fR
-If the server is to be run by the \fBinetd\fR meta-daemon, this file must contain suitable startup information for the meta-daemon\&. See the install document for details\&.
+If the server is to be run by the \fBinetd\fR meta-daemon, this file must contain suitable startup information for the meta-daemon\&.
.TP
@@ -128,12 +128,12 @@ If the server is to be run by the \fBinetd\fR meta-daemon, this file must contai
or whatever initialization script your system uses)\&.
-If running the server as a daemon at startup, this file will need to contain an appropriate startup sequence for the server\&. See the "How to Install and Test SAMBA" document for details\&.
+If running the server as a daemon at startup, this file will need to contain an appropriate startup sequence for the server\&.
.TP
\fI/etc/services\fR
-If running the server via the meta-daemon \fBinetd\fR, this file must contain a mapping of service name (e\&.g\&., netbios-ssn) to service port (e\&.g\&., 139) and protocol type (e\&.g\&., tcp)\&. See the "How to Install and Test SAMBA" document for details\&.
+If running the server via the meta-daemon \fBinetd\fR, this file must contain a mapping of service name (e\&.g\&., netbios-ssn) to service port (e\&.g\&., 139) and protocol type (e\&.g\&., tcp)\&.
.TP
@@ -141,10 +141,10 @@ If running the server via the meta-daemon \fBinetd\fR, this file must contain a
This is the default location of the \fBsmb.conf\fR(5) server configuration file\&. Other common places that systems install this file are \fI/usr/samba/lib/smb\&.conf\fR and \fI/etc/samba/smb\&.conf\fR\&.
-When run as a WINS server (see the \fBwins support\fR parameter in the \fBsmb.conf\fR(5) man page), \fBnmbd\fR will store the WINS database in the file \fIwins\&.dat\fR in the \fIvar/locks\fR directory configured under wherever Samba was configured to install itself\&.
+When run as a WINS server (see the \fIwins support\fR parameter in the \fBsmb.conf\fR(5) man page), \fBnmbd\fR will store the WINS database in the file \fIwins\&.dat\fR in the \fIvar/locks\fR directory configured under wherever Samba was configured to install itself\&.
-If \fBnmbd\fR is acting as a \fB browse master\fR (see the \fBlocal master\fR parameter in the \fBsmb.conf\fR(5) man page, \fBnmbd\fR will store the browsing database in the file \fIbrowse\&.dat \fR in the \fIvar/locks\fR directory configured under wherever Samba was configured to install itself\&.
+If \fBnmbd\fR is acting as a \fB browse master\fR (see the \fIlocal master\fR parameter in the \fBsmb.conf\fR(5) man page, \fBnmbd\fR will store the browsing database in the file \fIbrowse\&.dat \fR in the \fIvar/locks\fR directory configured under wherever Samba was configured to install itself\&.
.SH "SIGNALS"
diff --git a/docs/manpages/nmblookup.1 b/docs/manpages/nmblookup.1
index 2f160255939..5cc590ae119 100644
--- a/docs/manpages/nmblookup.1
+++ b/docs/manpages/nmblookup.1
@@ -65,7 +65,7 @@ Interpret \fIname\fR as an IP Address and do a node status query on this address
.TP
-n <primary NetBIOS name>
-This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fINetBIOS name\fR parameter in the \fBsmb.conf\fR(5) file\&. However, a command line setting will take precedence over settings in \fBsmb.conf\fR(5)\&.
+This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fInetbios name\fR parameter in the \fIsmb\&.conf\fR file\&. However, a command line setting will take precedence over settings in \fIsmb\&.conf\fR\&.
.TP
@@ -80,7 +80,7 @@ Set the SMB domain of the username\&. This overrides the default domain which is
.TP
-O socket options
-TCP socket options to set on the client socket\&. See the socket options parameter in the \fBsmb.conf\fR(5) manual page for the list of valid options\&.
+TCP socket options to set on the client socket\&. See the socket options parameter in the \fIsmb\&.conf\fR manual page for the list of valid options\&.
.TP
@@ -105,7 +105,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -119,7 +119,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
diff --git a/docs/manpages/ntlm_auth.1 b/docs/manpages/ntlm_auth.1
index 082d9422c80..e234ad7fb89 100644
--- a/docs/manpages/ntlm_auth.1
+++ b/docs/manpages/ntlm_auth.1
@@ -93,7 +93,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -107,7 +107,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
diff --git a/docs/manpages/pdbedit.8 b/docs/manpages/pdbedit.8
index ff0fc1244bd..75a655a7e75 100644
--- a/docs/manpages/pdbedit.8
+++ b/docs/manpages/pdbedit.8
@@ -24,9 +24,9 @@ pdbedit \- manage the SAM database
.nf
\fBpdbedit\fR [-L] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-D drive] [-S
- script] [-p profile] [-a] [-m] [-x] [-i passdb-backend] [-e passdb-backend]
+ script] [-p profile] [-a] [-m] [-r] [-x] [-i passdb-backend] [-e passdb-backend]
[-b passdb-backend] [-g] [-d debuglevel] [-s configfile] [-P account-policy]
- [-C value]
+ [-C value] [-c account-control]
.fi
.SH "DESCRIPTION"
@@ -287,7 +287,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -301,7 +301,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
diff --git a/docs/manpages/rpcclient.1 b/docs/manpages/rpcclient.1
index 34cb6a1fa5a..0684d741979 100644
--- a/docs/manpages/rpcclient.1
+++ b/docs/manpages/rpcclient.1
@@ -66,7 +66,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -80,7 +80,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
@@ -133,7 +133,7 @@ Be cautious about including passwords in scripts\&. Also, on many systems the co
.TP
-n <primary NetBIOS name>
-This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fINetBIOS name\fR parameter in the \fBsmb.conf\fR(5) file\&. However, a command line setting will take precedence over settings in \fBsmb.conf\fR(5)\&.
+This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fInetbios name\fR parameter in the \fIsmb\&.conf\fR file\&. However, a command line setting will take precedence over settings in \fIsmb\&.conf\fR\&.
.TP
@@ -148,7 +148,7 @@ Set the SMB domain of the username\&. This overrides the default domain which is
.TP
-O socket options
-TCP socket options to set on the client socket\&. See the socket options parameter in the \fBsmb.conf\fR(5) manual page for the list of valid options\&.
+TCP socket options to set on the client socket\&. See the socket options parameter in the \fIsmb\&.conf\fR manual page for the list of valid options\&.
.TP
diff --git a/docs/manpages/smb.conf.5 b/docs/manpages/smb.conf.5
index ec771023653..6379e942ecc 100644
--- a/docs/manpages/smb.conf.5
+++ b/docs/manpages/smb.conf.5
@@ -516,7 +516,7 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
-\fIdead time\fR
+\fIdeadtime\fR
.TP
\(bu
@@ -540,11 +540,11 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
-\fIdefault\fR
+\fIdefault service\fR
.TP
\(bu
-\fIdefault service\fR
+\fIdefault\fR
.TP
\(bu
@@ -616,6 +616,10 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
+\fIget quota command\fR
+
+.TP
+\(bu
\fIgetwd cache\fR
.TP
@@ -644,6 +648,10 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
+\fIidmap backend\fR
+
+.TP
+\(bu
\fIidmap gid\fR
.TP
@@ -736,11 +744,11 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
-\fIlock dir\fR
+\fIlock directory\fR
.TP
\(bu
-\fIlock directory\fR
+\fIlock dir\fR
.TP
\(bu
@@ -928,11 +936,11 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
-\fIpasswd chat\fR
+\fIpasswd chat debug\fR
.TP
\(bu
-\fIpasswd chat debug\fR
+\fIpasswd chat\fR
.TP
\(bu
@@ -960,11 +968,11 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
-\fIpreload\fR
+\fIpreload modules\fR
.TP
\(bu
-\fIpreload modules\fR
+\fIpreload\fR
.TP
\(bu
@@ -1008,7 +1016,7 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
-\fIroot\fR
+\fIroot directory\fR
.TP
\(bu
@@ -1016,7 +1024,7 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
-\fIroot directory\fR
+\fIroot\fR
.TP
\(bu
@@ -1036,6 +1044,10 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
+\fIset quota command\fR
+
+.TP
+\(bu
\fIshow add printer wizard\fR
.TP
@@ -1072,11 +1084,11 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
-\fIsyslog\fR
+\fIsyslog only\fR
.TP
\(bu
-\fIsyslog only\fR
+\fIsyslog\fR
.TP
\(bu
@@ -1104,10 +1116,6 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
-\fItotal print jobs\fR
-
-.TP
-\(bu
\fIunicode\fR
.TP
@@ -1144,11 +1152,11 @@ Here is a list of all global parameters\&. See the section of each parameter for
.TP
\(bu
-\fIutmp\fR
+\fIutmp directory\fR
.TP
\(bu
-\fIutmp directory\fR
+\fIutmp\fR
.TP
\(bu
@@ -1303,10 +1311,6 @@ Here is a list of all service parameters\&. See the section on each parameter fo
.TP
\(bu
-\fIdirectory\fR
-
-.TP
-\(bu
\fIdirectory mask\fR
.TP
@@ -1319,6 +1323,10 @@ Here is a list of all service parameters\&. See the section on each parameter fo
.TP
\(bu
+\fIdirectory\fR
+
+.TP
+\(bu
\fIdont descend\fR
.TP
@@ -1555,11 +1563,11 @@ Here is a list of all service parameters\&. See the section on each parameter fo
.TP
\(bu
-\fIpreexec\fR
+\fIpreexec close\fR
.TP
\(bu
-\fIpreexec close\fR
+\fIpreexec\fR
.TP
\(bu
@@ -1579,15 +1587,15 @@ Here is a list of all service parameters\&. See the section on each parameter fo
.TP
\(bu
-\fIprinter\fR
+\fIprinter admin\fR
.TP
\(bu
-\fIprinter admin\fR
+\fIprinter name\fR
.TP
\(bu
-\fIprinter name\fR
+\fIprinter\fR
.TP
\(bu
@@ -1627,11 +1635,11 @@ Here is a list of all service parameters\&. See the section on each parameter fo
.TP
\(bu
-\fIroot preexec\fR
+\fIroot preexec close\fR
.TP
\(bu
-\fIroot preexec close\fR
+\fIroot preexec\fR
.TP
\(bu
@@ -1671,15 +1679,15 @@ Here is a list of all service parameters\&. See the section on each parameter fo
.TP
\(bu
-\fIuser\fR
+\fIusername\fR
.TP
\(bu
-\fIusername\fR
+\fIusers\fR
.TP
\(bu
-\fIusers\fR
+\fIuser\fR
.TP
\(bu
@@ -1687,11 +1695,11 @@ Here is a list of all service parameters\&. See the section on each parameter fo
.TP
\(bu
-\fI-valid\fR
+\fIvalid users\fR
.TP
\(bu
-\fIvalid users\fR
+\fI-valid\fR
.TP
\(bu
@@ -1703,11 +1711,11 @@ Here is a list of all service parameters\&. See the section on each parameter fo
.TP
\(bu
-\fIvfs object\fR
+\fIvfs objects\fR
.TP
\(bu
-\fIvfs objects\fR
+\fIvfs object\fR
.TP
\(bu
@@ -2139,7 +2147,7 @@ Default : \fBclient ntlmv2 auth = no\fR
.TP
client use spnego (G)
-This variable controls controls whether samba clients will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000 servers to agree upon an authentication mechanism\&.
+This variable controls controls whether samba clients will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000 servers to agree upon an authentication mechanism\&. SPNEGO client support for SMB Signing is currently broken, so you might want to turn this option off when operating with Windows 2003 domain controllers in particular\&.
Default: \fBclient use spnego = yes\fR
@@ -2242,7 +2250,7 @@ Example: \fBcsc policy = programs\fR
.TP
-dead time (G)
+deadtime (G)
The value of the parameter (a decimal integer) represents the number of minutes of inactivity before a connection is considered dead, and it is disconnected\&. The deadtime only takes effect if the number of open files is zero\&.
@@ -2311,11 +2319,6 @@ Default: \fBdebug uid = no\fR
.TP
-default (G)
-A synonym for \fI default service\fR\&.
-
-
-.TP
default case (S)
See the section on NAME MANGLING\&. Also note the \fIshort preserve case\fR parameter\&.
@@ -2371,6 +2374,11 @@ Example:
.TP
+default (G)
+A synonym for \fI default service\fR\&.
+
+
+.TP
delete group script (G)
This is the full pathname to a script that will be run \fBAS ROOT\fR \fBsmbd\fR(8) when a group is requested to be deleted\&. It will expand any \fI%g\fR to the group name passed\&. This script is only useful for installations using the Windows NT domain administration tools\&.
@@ -2527,11 +2535,6 @@ Note that you may have to replace the command names with full path names on some
.TP
-directory (S)
-Synonym for \fIpath\fR\&.
-
-
-.TP
directory mask (S)
This parameter is the octal modes which are used when converting DOS modes to UNIX modes when creating UNIX directories\&.
@@ -2592,6 +2595,11 @@ Example: \fBdirectory security mask = 0700\fR
.TP
+directory (S)
+Synonym for \fIpath\fR\&.
+
+
+.TP
disable netbios (G)
Enabling this parameter will disable netbios support in Samba\&. Netbios is the only available form of browsing in all windows versions except for 2000 and XP\&.
@@ -2946,6 +2954,62 @@ Example: \fBfstype = Samba\fR
.TP
+get quota command (G)
+The \fBget quota command\fR should only be used whenever there is no operating system API available from the OS that samba can use\&.
+
+
+This parameter should specify the path to a script that queries the quota information for the specified user/group for the partition that the specified directory is on\&.
+
+
+Such a script should take 3 arguments:
+
+
+directory
+
+type of query
+
+uid of user or gid of group
+
+The type of query can be one of :
+
+
+1 - user quotas
+
+2 - user default quotas (uid = -1)
+
+3 - group quotas
+
+4 - group default quotas (gid = -1)
+
+This script should print its output according to the following format:
+
+
+Line 1 - quota flags (0 = no quotas, 1 = quotas enabled, 2 = quotas enabled and enforced)
+
+Line 2 - number of currently used blocks
+
+Line 3 - the softlimit number of blocks
+
+Line 4 - the hardlimit number of blocks
+
+Line 5 - currently used number of inodes
+
+Line 6 - the softlimit number of inodes
+
+Line 7 - the hardlimit number of inodes
+
+Line 8(optional) - the number of bytes in a block(default is 1024)
+
+See also the \fIset quota command\fR parameter\&.
+
+
+Default: \fBget quota command = \fR
+
+
+Example: \fBget quota command = /usr/local/sbin/query_quota\fR
+
+
+.TP
getwd cache (G)
This is a tuning option\&. When this is enabled a caching algorithm will be used to reduce the time taken for getwd() calls\&. This can have a significant impact on performance, especially when the \fIwide links\fR parameter is set to \fBno\fR\&.
@@ -3096,7 +3160,7 @@ host msdfs (G)
This boolean parameter is only available if Samba has been configured and compiled with the \fB --with-msdfs\fR option\&. If set to \fByes\fR, Samba will act as a Dfs server, and allow Dfs-aware clients to browse Dfs trees hosted on the server\&.
-See also the \fI msdfs root\fR share level parameter\&. For more information on setting up a Dfs tree on Samba, refer to msdfs_setup\&.html\&.
+See also the \fI msdfs root\fR share level parameter\&. For more information on setting up a Dfs tree on Samba, refer to ???\&.
Default: \fBhost msdfs = no\fR
@@ -3199,6 +3263,17 @@ Example: \fBhosts equiv = /etc/hosts.equiv\fR
.TP
+idmap backend (G)
+The purpose of the idmap backend parameter is to allow idmap to NOT use the local idmap tdb file to obtain SID to UID / GID mappings, but instead to obtain them from a common LDAP backend\&. This way all domain members and controllers will have the same UID and GID to SID mappings\&. This avoids the risk of UID / GID inconsistencies across UNIX / Linux systems that are sharing information over protocols other than SMB/CIFS (ie: NFS)\&.
+
+
+Default: \fBidmap backend = <empty string>\fR
+
+
+Example: \fBidmap backend = ldapsam://ldapslave.example.com\fR
+
+
+.TP
idmap gid (G)
The idmap gid parameter specifies the range of group ids that are allocated for the purpose of mapping UNX groups to NT group SIDs\&. This range of group ids should have no existing local or NIS groups within it as strange conflicts can occur otherwise\&.
@@ -3576,11 +3651,6 @@ Default: \fBlocal master = yes\fR
.TP
-lock dir (G)
-Synonym for \fI lock directory\fR\&.
-
-
-.TP
lock directory (G)
This option specifies the directory where lock files will be placed\&. The lock files are used to implement the \fImax connections\fR option\&.
@@ -3592,6 +3662,11 @@ Example: \fBlock directory = /var/run/samba/locks\fR
.TP
+lock dir (G)
+Synonym for \fI lock directory\fR\&.
+
+
+.TP
locking (S)
This controls whether or not locking will be performed by the server in response to lock requests from the client\&.
@@ -3616,7 +3691,7 @@ lock spin count (G)
This parameter controls the number of times that smbd should attempt to gain a byte range lock on the behalf of a client request\&. Experiments have shown that Windows 2k servers do not reply with a failure if the lock could not be immediately granted, but try a few more times in case the lock could later be aquired\&. This behavior is used to support PC database formats such as MS Access and FoxPro\&.
-Default: \fBlock spin count = 2\fR
+Default: \fBlock spin count = 3\fR
.TP
@@ -3738,8 +3813,14 @@ The script must be a relative path to the [netlogon] service\&. If the [netlogon
\fI/usr/local/samba/netlogon/STARTUP\&.BAT\fR
-The contents of the batch file are entirely your choice\&. A suggested command would be to add \fBNET TIME \\SERVER /SET /YES\fR, to force every machine to synchronize clocks with the same time server\&. Another use would be to add \fBNET USE U: \\SERVER\UTILS\fR for commonly used utilities, or \fB NET USE Q: \\SERVER\ISO9001_QA\fR for example\&.
+The contents of the batch file are entirely your choice\&. A
+ suggested command would be to add \fBNET TIME \\SERVER /SET
+ /YES\fR, to force every machine to synchronize clocks with
+ the same time server\&. Another use would be to add \fBNET USE
+ U: \\SERVER\UTILS\fR for commonly used utilities, or .nf
+ \fBNET USE Q: \\\\SERVER\\ISO9001_QA\fR.fi
+ for example\&.
Note that it is particularly important not to allow write access to the [netlogon] share, or to grant users write permission on the batch files in a secure environment, as this would allow the batch files to be arbitrarily modified and security to be breached\&.
@@ -3900,7 +3981,7 @@ Example 2: \fBlprm command = /usr/bin/cancel %p-%j\fR
.TP
machine password timeout (G)
-If a Samba server is a member of a Windows NT Domain (see the security = domain) parameter) then periodically a running smbd(8) process will try and change the MACHINE ACCOUNT PASSWORD stored in the TDB called \fIprivate/secrets\&.tdb \fR\&. This parameter specifies how often this password will be changed, in seconds\&. The default is one week (expressed in seconds), the same as a Windows NT Domain member server\&.
+If a Samba server is a member of a Windows NT Domain (see the security = domain) parameter) then periodically a running smbd process will try and change the MACHINE ACCOUNT PASSWORD stored in the TDB called \fIprivate/secrets\&.tdb \fR\&. This parameter specifies how often this password will be changed, in seconds\&. The default is one week (expressed in seconds), the same as a Windows NT Domain member server\&.
See also \fBsmbpasswd\fR(8), and the security = domain) parameter\&.
@@ -4033,6 +4114,9 @@ mangle prefix (G)
controls the number of prefix characters from the original name used when generating the mangled names\&. A larger value will give a weaker hash and therefore more name collisions\&. The minimum value is 1 and the maximum value is 6\&.
+mangle prefix is effective only when mangling method is hash2\&.
+
+
Default: \fBmangle prefix = 1\fR
@@ -4041,7 +4125,7 @@ Example: \fBmangle prefix = 4\fR
.TP
mangling char (S)
-This controls what character is used as the \fBmagic\fR character in name mangling\&. The default is a '~' but this may interfere with some software\&. Use this option to set it to whatever you prefer\&.
+This controls what character is used as the \fBmagic\fR character in name mangling\&. The default is a '~' but this may interfere with some software\&. Use this option to set it to whatever you prefer\&. This is effective only when mangling method is hash\&.
Default: \fBmangling char = ~\fR
@@ -4409,7 +4493,7 @@ Example: \fBmsdfs proxy = \\\\otherserver\\someshare\fR
.TP
msdfs root (S)
-This boolean parameter is only available if Samba is configured and compiled with the \fB --with-msdfs\fR option\&. If set to \fByes\fR, Samba treats the share as a Dfs root and allows clients to browse the distributed file system tree rooted at the share directory\&. Dfs links are specified in the share directory by symbolic links of the form \fImsdfs:serverA\\\\shareA,serverB\\\\shareB\fR and so on\&. For more information on setting up a Dfs tree on Samba, refer to "Hosting a Microsoft Distributed File System tree on Samba" document\&.
+This boolean parameter is only available if Samba is configured and compiled with the \fB --with-msdfs\fR option\&. If set to \fByes\fR, Samba treats the share as a Dfs root and allows clients to browse the distributed file system tree rooted at the share directory\&. Dfs links are specified in the share directory by symbolic links of the form \fImsdfs:serverA\\\\shareA,serverB\\\\shareB\fR and so on\&. For more information on setting up a Dfs tree on Samba, refer to ???\&.
See also \fIhost msdfs\fR
@@ -4465,7 +4549,7 @@ DC lookups will still be done via DNS, but fallbacks to netbios names will not i
.TP
netbios aliases (G)
-This is a list of NetBIOS names that nmbd(8) will advertise as additional names by which the Samba server is known\&. This allows one machine to appear in browse lists under multiple names\&. If a machine is acting as a browse server or logon server none of these names will be advertised as either browse server or logon servers, only the primary name of the machine will be advertised with these capabilities\&.
+This is a list of NetBIOS names that nmbd will advertise as additional names by which the Samba server is known\&. This allows one machine to appear in browse lists under multiple names\&. If a machine is acting as a browse server or logon server none of these names will be advertised as either browse server or logon servers, only the primary name of the machine will be advertised with these capabilities\&.
See also \fInetbios name\fR\&.
@@ -4639,7 +4723,7 @@ The parameter is used to define the absolute path to a file containing a mapping
For example, a valid entry using the HP LaserJet 5 printer driver would appear as \fBHP LaserJet 5L = LASERJET.HP LaserJet 5L\fR\&.
-The need for the file is due to the printer driver namespace problem described in the Samba Printing HOWTO\&. For more details on OS/2 clients, please refer to the OS2-Client-HOWTO containing in the Samba documentation\&.
+The need for the file is due to the printer driver namespace problem described in ???\&. For more details on OS/2 clients, please refer to ???\&.
Default: \fBos2 driver map = <empty string>\fR
@@ -4697,19 +4781,30 @@ This option allows the administrator to chose which backends to retrieve and sto
This parameter is in two parts, the backend's name, and a 'location' string that has meaning only to that particular backed\&. These are separated by a : character\&.
-Available backends can include: .TP 3 \(bu \fBsmbpasswd\fR - The default smbpasswd backend\&. Takes a path to the smbpasswd file as an optional argument\&. .TP \(bu \fBtdbsam\fR - The TDB based password storage backend\&. Takes a path to the TDB as an optional argument (defaults to passdb\&.tdb in the \fIprivate dir\fR directory\&. .TP \(bu \fBldapsam\fR - The LDAP based passdb backend\&. Takes an LDAP URL as an optional argument (defaults to \fBldap://localhost\fR) LDAP connections should be secured where possible\&. This may be done using either Start-TLS (see \fIldap ssl\fR) or by specifying \fIldaps://\fR in the URL argument\&. .TP \(bu \fBnisplussam\fR - The NIS+ based passdb backend\&. Takes name NIS domain as an optional argument\&. Only works with sun NIS+ servers\&. .TP \(bu \fBmysql\fR - The MySQL based passdb backend\&. Takes an identifier as argument\&. Read the Samba HOWTO Collection for configuration details\&. .TP \(bu \fBguest\fR - Very simple backend that only provides one user: the guest user\&. Only maps the NT guest user to the \fIguest account\fR\&. Required in pretty much all situations\&. .LP
+Available backends can include: .TP 3 \(bu \fBsmbpasswd\fR - The default smbpasswd backend\&. Takes a path to the smbpasswd file as an optional argument\&. .TP \(bu \fBtdbsam\fR - The TDB based password storage backend\&. Takes a path to the TDB as an optional argument (defaults to passdb\&.tdb in the \fIprivate dir\fR directory\&. .TP \(bu \fBldapsam\fR - The LDAP based passdb backend\&. Takes an LDAP URL as an optional argument (defaults to \fBldap://localhost\fR) LDAP connections should be secured where possible\&. This may be done using either Start-TLS (see \fIldap ssl\fR) or by specifying \fIldaps://\fR in the URL argument\&. .TP \(bu \fBnisplussam\fR - The NIS+ based passdb backend\&. Takes name NIS domain as an optional argument\&. Only works with sun NIS+ servers\&. .TP \(bu \fBmysql\fR - The MySQL based passdb backend\&. Takes an identifier as argument\&. Read the Samba HOWTO Collection for configuration details\&. .LP
Default: \fBpassdb backend = smbpasswd\fR
-Example: \fBpassdb backend = tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd guest\fR
+Example: \fBpassdb backend = tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd\fR
+
+
+Example: \fBpassdb backend = ldapsam:ldaps://ldap.example.com\fR
+
+
+Example: \fBpassdb backend = mysql:my_plugin_args tdbsam\fR
-Example: \fBpassdb backend = ldapsam:ldaps://ldap.example.com guest\fR
+.TP
+passwd chat debug (G)
+This boolean specifies if the passwd chat script parameter is run in \fBdebug\fR mode\&. In this mode the strings passed to and received from the passwd chat are printed in the \fBsmbd\fR(8) log with a \fIdebug level\fR of 100\&. This is a dangerous option as it will allow plaintext passwords to be seen in the \fBsmbd\fR log\&. It is available to help Samba admins debug their \fIpasswd chat\fR scripts when calling the \fIpasswd program\fR and should be turned off after this has been done\&. This option has no effect if the \fIpam password change\fR paramter is set\&. This parameter is off by default\&.
+
+
+See also \fIpasswd chat\fR , \fIpam password change\fR , \fIpasswd program\fR \&.
-Example: \fBpassdb backend = mysql:my_plugin_args tdbsam:/etc/samba/private/passdb.tdb guest\fR
+Default: \fBpasswd chat debug = no\fR
.TP
@@ -4742,17 +4837,6 @@ Example: \fBpasswd chat = "*Enter OLD password*" %o\\n "*Enter NEW password*" %n
.TP
-passwd chat debug (G)
-This boolean specifies if the passwd chat script parameter is run in \fBdebug\fR mode\&. In this mode the strings passed to and received from the passwd chat are printed in the \fBsmbd\fR(8) log with a \fIdebug level\fR of 100\&. This is a dangerous option as it will allow plaintext passwords to be seen in the \fBsmbd\fR log\&. It is available to help Samba admins debug their \fIpasswd chat\fR scripts when calling the \fIpasswd program\fR and should be turned off after this has been done\&. This option has no effect if the \fIpam password change\fR paramter is set\&. This parameter is off by default\&.
-
-
-See also \fIpasswd chat\fR , \fIpam password change\fR , \fIpasswd program\fR \&.
-
-
-Default: \fBpasswd chat debug = no\fR
-
-
-.TP
passwd program (G)
The name of a program that can be used to set UNIX user passwords\&. Any occurrences of \fI%u\fR will be replaced with the user name\&. The user name is checked for existence before calling the password changing program\&.
@@ -4760,7 +4844,7 @@ The name of a program that can be used to set UNIX user passwords\&. Any occurre
Also note that many passwd programs insist in \fBreasonable \fR passwords, such as a minimum length, or the inclusion of mixed case chars and digits\&. This can pose a problem as some clients (such as Windows for Workgroups) uppercase the password before sending it\&.
-\fBNote\fR that if the \fIunix password sync\fR parameter is set to \fByes \fR then this program is called \fBAS ROOT\fR before the SMB password in the \fBsmbpasswd\fR(5) file is changed\&. If this UNIX password change fails, then \fBsmbd\fR will fail to change the SMB password also (this is by design)\&.
+\fBNote\fR that if the \fIunix password sync\fR parameter is set to \fByes \fR then this program is called \fBAS ROOT\fR before the SMB password in the smbpasswd file is changed\&. If this UNIX password change fails, then \fBsmbd\fR will fail to change the SMB password also (this is by design)\&.
If the \fIunix password sync\fR parameter is set this parameter \fBMUST USE ABSOLUTE PATHS\fR for \fBALL\fR programs called, and must be examined for security implications\&. Note that by default \fIunix password sync\fR is set to \fBno\fR\&.
@@ -4923,6 +5007,14 @@ Example: \fBpostexec = echo \"%u disconnected from %S from %m (%I)\" >> /tmp/log
.TP
+preexec close (S)
+This boolean option controls whether a non-zero return code from \fIpreexec \fR should close the service being connected to\&.
+
+
+Default: \fBpreexec close = no\fR
+
+
+.TP
preexec (S)
This option specifies a command to be run whenever the service is connected to\&. It takes the usual substitutions\&.
@@ -4946,14 +5038,6 @@ Example: \fBpreexec = echo \"%u connected to %S from %m (%I)\" >> /tmp/log\fR
.TP
-preexec close (S)
-This boolean option controls whether a non-zero return code from \fIpreexec \fR should close the service being connected to\&.
-
-
-Default: \fBpreexec close = no\fR
-
-
-.TP
prefered master (G)
Synonym for \fI preferred master\fR for people who cannot spell :-)\&.
@@ -4976,31 +5060,31 @@ Default: \fBpreferred master = auto\fR
.TP
-preload (G)
-This is a list of services that you want to be automatically added to the browse lists\&. This is most useful for homes and printers services that would otherwise not be visible\&.
+preload modules (G)
+This is a list of paths to modules that should be loaded into smbd before a client connects\&. This improves the speed of smbd when reacting to new connections somewhat\&.
-Note that if you just want all printers in your printcap file loaded then the \fIload printers\fR option is easier\&.
+It is recommended to only use this option on heavy-performance servers\&.
-Default: \fBno preloaded services\fR
+Default: \fBpreload modules = \fR
-Example: \fBpreload = fred lp colorlp\fR
+Example: \fBpreload modules = /usr/lib/samba/passdb/mysql.so+++ \fR
.TP
-preload modules (G)
-This is a list of paths to modules that should be loaded into smbd before a client connects\&. This improves the speed of smbd when reacting to new connections somewhat\&.
+preload (G)
+This is a list of services that you want to be automatically added to the browse lists\&. This is most useful for homes and printers services that would otherwise not be visible\&.
-It is recommended to only use this option on heavy-performance servers\&.
+Note that if you just want all printers in your printcap file loaded then the \fIload printers\fR option is easier\&.
-Default: \fBpreload modules = \fR
+Default: \fBno preloaded services\fR
-Example: \fBpreload modules = /usr/lib/samba/passdb/mysql.so+++ \fR
+Example: \fBpreload = fred lp colorlp\fR
.TP
@@ -5026,11 +5110,6 @@ Default: \fBprintable = no\fR
.TP
-printcap (G)
-Synonym for \fI printcap name\fR\&.
-
-
-.TP
printcap name (S)
This parameter may be used to override the compiled-in default printcap name used by the server (usually \fI /etc/printcap\fR)\&. See the discussion of the [printers] section above for reasons why you might want to do this\&.
@@ -5066,6 +5145,11 @@ Example: \fBprintcap name = /etc/myprintcap\fR
.TP
+printcap (G)
+Synonym for \fI printcap name\fR\&.
+
+
+.TP
print command (S)
After a print job has finished spooling to a service, this command will be used via a \fBsystem()\fR call to process the spool file\&. Typically the command specified will submit the spool file to the host's printing subsystem, but there is no requirement that this be the case\&. The server will not remove the spool file, so whatever command you specify should remove the spool file when it has been processed, otherwise you will need to manually remove old spool files\&.
@@ -5134,11 +5218,6 @@ Example: \fBprint command = /usr/local/samba/bin/myprintscript %p %s\fR
.TP
-printer (S)
-Synonym for \fI printer name\fR\&.
-
-
-.TP
printer admin (S)
This is a list of users that can do anything to printers via the remote administration interfaces offered by MS-RPC (usually using a NT workstation)\&. Note that the root user always has admin rights\&.
@@ -5164,6 +5243,11 @@ Example: \fBprinter name = laserwriter\fR
.TP
+printer (S)
+Synonym for \fI printer name\fR\&.
+
+
+.TP
printing (S)
This parameters controls how printer status information is interpreted on your system\&. It also affects the default values for the \fIprint command\fR, \fIlpq command\fR, \fIlppause command \fR, \fIlpresume command\fR, and \fIlprm command\fR if specified in the [global] section\&.
@@ -5195,7 +5279,13 @@ Default :\fBprivate dir = ${prefix}/private\fR
.TP
profile acls (S)
-This boolean parameter controls whether \fBsmbd\fR(8) This boolean parameter was added to fix the problems that people have been having with storing user profiles on Samba shares from Windows 2000 or Windows XP clients\&. New versions of Windows 2000 or Windows XP service packs do security ACL checking on the owner and ability to write of the profile directory stored on a local workstation when copied from a Samba share\&. When not in domain mode with winbindd then the security info copied onto the local workstation has no meaning to the logged in user (SID) on that workstation so the profile storing fails\&. Adding this parameter onto a share used for profile storage changes two things about the returned Windows ACL\&. Firstly it changes the owner and group owner of all reported files and directories to be BUILTIN\\\\Administrators, BUILTIN\\\\Users respectively (SIDs S-1-5-32-544, S-1-5-32-545)\&. Secondly it adds an ACE entry of "Full Control" to the SID BUILTIN\\\\Users to every returned ACL\&. This will allow any Windows 2000 or XP workstation user to access the profile\&. Note that if you have multiple users logging on to a workstation then in order to prevent them from being able to access each others profiles you must remove the "Bypass traverse checking" advanced user right\&. This will prevent access to other users profile directories as the top level profile directory (named after the user) is created by the workstation profile code and has an ACL restricting entry to the directory tree to the owning user\&.
+This boolean parameter controls whether \fBsmbd\fR(8) This boolean parameter was added to fix the problems that people have been having with storing user profiles on Samba shares from Windows 2000 or Windows XP clients\&. New versions of Windows 2000 or Windows XP service packs do security ACL checking on the owner and ability to write of the profile directory stored on a local workstation when copied from a Samba share\&.
+
+
+When not in domain mode with winbindd then the security info copied onto the local workstation has no meaning to the logged in user (SID) on that workstation so the profile storing fails\&. Adding this parameter onto a share used for profile storage changes two things about the returned Windows ACL\&. Firstly it changes the owner and group owner of all reported files and directories to be BUILTIN\\\\Administrators, BUILTIN\\\\Users respectively (SIDs S-1-5-32-544, S-1-5-32-545)\&. Secondly it adds an ACE entry of "Full Control" to the SID BUILTIN\\\\Users to every returned ACL\&. This will allow any Windows 2000 or XP workstation user to access the profile\&.
+
+
+Note that if you have multiple users logging on to a workstation then in order to prevent them from being able to access each others profiles you must remove the "Bypass traverse checking" advanced user right\&. This will prevent access to other users profile directories as the top level profile directory (named after the user) is created by the workstation profile code and has an ACL restricting entry to the directory tree to the owning user\&.
Default: \fBprofile acls = no\fR
@@ -5358,7 +5448,7 @@ the above line would cause \fBnmbd\fR to announce itself to the two given IP add
The IP addresses you choose would normally be the broadcast addresses of the remote networks, but can also be the IP addresses of known browse masters if your network config is that stable\&.
-See the documentation file BROWSING in the \fIdocs/\fR directory\&.
+See ???\&.
Default: \fBremote announce = <empty string>\fR
@@ -5401,16 +5491,6 @@ Default: \fBrestrict anonymous = 0\fR
.TP
-root (G)
-Synonym for \fIroot directory"\fR\&.
-
-
-.TP
-root dir (G)
-Synonym for \fIroot directory"\fR\&.
-
-
-.TP
root directory (G)
The server will \fBchroot()\fR (i\&.e\&. Change its root directory) to this directory on startup\&. This is not strictly necessary for secure operation\&. Even without it the server will deny access to files not in one of the service entries\&. It may also check for, and deny access to, soft links to other parts of the filesystem, or attempts to use "\&.\&." in file names to access other directories (depending on the setting of the \fIwide links\fR parameter)\&.
@@ -5425,6 +5505,11 @@ Example: \fBroot directory = /homes/smb\fR
.TP
+root dir (G)
+Synonym for \fIroot directory"\fR\&.
+
+
+.TP
root postexec (S)
This is the same as the \fIpostexec\fR parameter except that the command is run as root\&. This is useful for unmounting filesystems (such as CDROMs) after a connection is closed\&.
@@ -5436,6 +5521,17 @@ Default: \fBroot postexec = <empty string>\fR
.TP
+root preexec close (S)
+This is the same as the \fIpreexec close \fR parameter except that the command is run as root\&.
+
+
+See also \fI preexec\fR and \fIpreexec close\fR\&.
+
+
+Default: \fBroot preexec close = no\fR
+
+
+.TP
root preexec (S)
This is the same as the \fIpreexec\fR parameter except that the command is run as root\&. This is useful for mounting filesystems (such as CDROMs) when a connection is opened\&.
@@ -5447,14 +5543,31 @@ Default: \fBroot preexec = <empty string>\fR
.TP
-root preexec close (S)
-This is the same as the \fIpreexec close \fR parameter except that the command is run as root\&.
+root (G)
+Synonym for \fIroot directory"\fR\&.
-See also \fI preexec\fR and \fIpreexec close\fR\&.
+.TP
+security mask (S)
+This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating the UNIX permission on a file using the native NT security dialog box\&.
-Default: \fBroot preexec close = no\fR
+This parameter is applied as a mask (AND'ed with) to the changed permission bits, thus preventing any bits not in this mask from being modified\&. Essentially, zero bits in this mask may be treated as a set of bits the user is not allowed to change\&.
+
+
+If not set explicitly this parameter is 0777, allowing a user to modify all the user/group/world permissions on a file\&.
+
+
+\fBNote\fR that users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone "appliance" systems\&. Administrators of most normal systems will probably want to leave it set to \fB0777\fR\&.
+
+
+See also the \fIforce directory security mode\fR, \fIdirectory security mask\fR, \fIforce security mode\fR parameters\&.
+
+
+Default: \fBsecurity mask = 0777\fR
+
+
+Example: \fBsecurity mask = 0770\fR
.TP
@@ -5602,29 +5715,6 @@ Example: \fBsecurity = DOMAIN\fR
.TP
-security mask (S)
-This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating the UNIX permission on a file using the native NT security dialog box\&.
-
-
-This parameter is applied as a mask (AND'ed with) to the changed permission bits, thus preventing any bits not in this mask from being modified\&. Essentially, zero bits in this mask may be treated as a set of bits the user is not allowed to change\&.
-
-
-If not set explicitly this parameter is 0777, allowing a user to modify all the user/group/world permissions on a file\&.
-
-
-\fBNote\fR that users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone "appliance" systems\&. Administrators of most normal systems will probably want to leave it set to \fB0777\fR\&.
-
-
-See also the \fIforce directory security mode\fR, \fIdirectory security mask\fR, \fIforce security mode\fR parameters\&.
-
-
-Default: \fBsecurity mask = 0777\fR
-
-
-Example: \fBsecurity mask = 0770\fR
-
-
-.TP
server schannel (G)
This controls whether the server offers or even demands the use of the netlogon schannel\&. \fIserver schannel = no\fR does not offer the schannel, \fIserver schannel = auto\fR offers the schannel but does not enforce it, and \fIserver schannel = yes\fR denies access if the client is not able to speak netlogon schannel\&. This is only the case for Windows NT4 before SP4\&.
@@ -5681,6 +5771,45 @@ Example: \fBset primary group script = /usr/sbin/usermod -g '%g' '%u'\fR
.TP
+set quota command (G)
+The \fBset quota command\fR should only be used whenever there is no operating system API available from the OS that samba can use\&.
+
+
+This parameter should specify the path to a script that can set quota for the specified arguments\&.
+
+
+The specified script should take the following arguments:
+
+
+1 - quota type .TP 3 \(bu 1 - user quotas .TP \(bu 2 - user default quotas (uid = -1) .TP \(bu 3 - group quotas .TP \(bu 4 - group default quotas (gid = -1) .LP
+
+2 - id (uid for user, gid for group, -1 if N/A)
+
+3 - quota state (0 = disable, 1 = enable, 2 = enable and enforce)
+
+4 - block softlimit
+
+5 - block hardlimit
+
+6 - inode softlimit
+
+7 - inode hardlimit
+
+8(optional) - block size, defaults to 1024
+
+The script should output at least one line of data\&.
+
+
+See also the \fIget quota command\fR parameter\&.
+
+
+Default: \fBset quota command = \fR
+
+
+Example: \fBset quota command = /usr/local/sbin/set_quota\fR
+
+
+.TP
share modes (S)
This enables or disables the honoring of the \fIshare modes\fR during a file open\&. These modes are used by clients to gain exclusive read or write access to a file\&.
@@ -5750,7 +5879,7 @@ This command will be run as the user connected to the server\&.
Default: \fBNone\fR\&.
-Example: \fBabort shutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f\fR
+Example: \fBshutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f\fR
Shutdown script example:
@@ -5964,22 +6093,22 @@ Default: \fBsync always = no\fR
.TP
-syslog (G)
-This parameter maps how Samba debug messages are logged onto the system syslog logging levels\&. Samba debug level zero maps onto syslog \fBLOG_ERR\fR, debug level one maps onto \fBLOG_WARNING\fR, debug level two maps onto \fBLOG_NOTICE\fR, debug level three maps onto LOG_INFO\&. All higher levels are mapped to \fB LOG_DEBUG\fR\&.
+syslog only (G)
+If this parameter is set then Samba debug messages are logged into the system syslog only, and not to the debug log files\&.
-This parameter sets the threshold for sending messages to syslog\&. Only messages with debug level less than this value will be sent to syslog\&.
+Default: \fBsyslog only = no\fR
-Default: \fBsyslog = 1\fR
+.TP
+syslog (G)
+This parameter maps how Samba debug messages are logged onto the system syslog logging levels\&. Samba debug level zero maps onto syslog \fBLOG_ERR\fR, debug level one maps onto \fBLOG_WARNING\fR, debug level two maps onto \fBLOG_NOTICE\fR, debug level three maps onto LOG_INFO\&. All higher levels are mapped to \fB LOG_DEBUG\fR\&.
-.TP
-syslog only (G)
-If this parameter is set then Samba debug messages are logged into the system syslog only, and not to the debug log files\&.
+This parameter sets the threshold for sending messages to syslog\&. Only messages with debug level less than this value will be sent to syslog\&.
-Default: \fBsyslog only = no\fR
+Default: \fBsyslog = 1\fR
.TP
@@ -6031,17 +6160,6 @@ Synonym for \fI debug timestamp\fR\&.
.TP
-total print jobs (G)
-This parameter accepts an integer value which defines a limit on the maximum number of print jobs that will be accepted system wide at any given time\&. If a print job is submitted by a client which will exceed this number, then \fBsmbd\fR(8) will return an error indicating that no space is available on the server\&. The default value of 0 means that no such limit exists\&. This parameter can be used to prevent a server from exceeding its capacity and is designed as a printing throttle\&. See also \fImax print jobs\fR\&.
-
-
-Default: \fBtotal print jobs = 0\fR
-
-
-Example: \fBtotal print jobs = 5000\fR
-
-
-.TP
unicode (G)
Specifies whether Samba should try to use unicode on the wire by default\&. Note: This does NOT mean that samba will assume that the unix machine uses unicode!
@@ -6119,49 +6237,6 @@ Default: \fBuse mmap = yes\fR
.TP
-user (S)
-Synonym for \fIusername\fR\&.
-
-
-.TP
-username (S)
-Multiple users may be specified in a comma-delimited list, in which case the supplied password will be tested against each username in turn (left to right)\&.
-
-
-The \fIusername\fR line is needed only when the PC is unable to supply its own username\&. This is the case for the COREPLUS protocol or where your users have different WfWg usernames to UNIX usernames\&. In both these cases you may also be better using the \\\\server\\share%user syntax instead\&.
-
-
-The \fIusername\fR line is not a great solution in many cases as it means Samba will try to validate the supplied password against each of the usernames in the \fIusername\fR line in turn\&. This is slow and a bad idea for lots of users in case of duplicate passwords\&. You may get timeouts or security breaches using this parameter unwisely\&.
-
-
-Samba relies on the underlying UNIX security\&. This parameter does not restrict who can login, it just offers hints to the Samba server as to what usernames might correspond to the supplied password\&. Users can login as whoever they please and they will be able to do no more damage than if they started a telnet session\&. The daemon runs as the user that they log in as, so they cannot do anything that user cannot do\&.
-
-
-To restrict a service to a particular set of users you can use the \fIvalid users \fR parameter\&.
-
-
-If any of the usernames begin with a '@' then the name will be looked up first in the NIS netgroups list (if Samba is compiled with netgroup support), followed by a lookup in the UNIX groups database and will expand to a list of all users in the group of that name\&.
-
-
-If any of the usernames begin with a '+' then the name will be looked up only in the UNIX groups database and will expand to a list of all users in the group of that name\&.
-
-
-If any of the usernames begin with a '&' then the name will be looked up only in the NIS netgroups database (if Samba is compiled with netgroup support) and will expand to a list of all users in the netgroup group of that name\&.
-
-
-Note that searching though a groups database can take quite some time, and some clients may time out during the search\&.
-
-
-See the section NOTE ABOUT USERNAME/PASSWORD VALIDATION for more information on how this parameter determines access to the services\&.
-
-
-Default: \fBThe guest account if a guest service, else <empty string>.\fR
-
-
-Examples:\fBusername = fred, mary, jack, jane, @users, @pcgroup\fR
-
-
-.TP
username level (G)
This option helps Samba to try and 'guess' at the real UNIX username, as many DOS clients send an all-uppercase username\&. By default Samba tries all lowercase, followed by the username with the first letter capitalized, and fails if the username is not found on the UNIX machine\&.
@@ -6242,38 +6317,67 @@ Example: \fBusername map = /usr/local/samba/lib/users.map\fR
.TP
-users (S)
-Synonym for \fI username\fR\&.
+username (S)
+Multiple users may be specified in a comma-delimited list, in which case the supplied password will be tested against each username in turn (left to right)\&.
-.TP
-use sendfile (S)
-If this parameter is \fByes\fR, and Samba was built with the --with-sendfile-support option, and the underlying operating system supports sendfile system call, then some SMB read calls (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that are exclusively oplocked\&. This may make more efficient use of the system CPU's and cause Samba to be faster\&. This is off by default as it's effects are unknown as yet\&.
+The \fIusername\fR line is needed only when the PC is unable to supply its own username\&. This is the case for the COREPLUS protocol or where your users have different WfWg usernames to UNIX usernames\&. In both these cases you may also be better using the \\\\server\\share%user syntax instead\&.
-Default: \fBuse sendfile = no\fR
+The \fIusername\fR line is not a great solution in many cases as it means Samba will try to validate the supplied password against each of the usernames in the \fIusername\fR line in turn\&. This is slow and a bad idea for lots of users in case of duplicate passwords\&. You may get timeouts or security breaches using this parameter unwisely\&.
+
+
+Samba relies on the underlying UNIX security\&. This parameter does not restrict who can login, it just offers hints to the Samba server as to what usernames might correspond to the supplied password\&. Users can login as whoever they please and they will be able to do no more damage than if they started a telnet session\&. The daemon runs as the user that they log in as, so they cannot do anything that user cannot do\&.
+
+
+To restrict a service to a particular set of users you can use the \fIvalid users \fR parameter\&.
+
+
+If any of the usernames begin with a '@' then the name will be looked up first in the NIS netgroups list (if Samba is compiled with netgroup support), followed by a lookup in the UNIX groups database and will expand to a list of all users in the group of that name\&.
+
+
+If any of the usernames begin with a '+' then the name will be looked up only in the UNIX groups database and will expand to a list of all users in the group of that name\&.
+
+
+If any of the usernames begin with a '&' then the name will be looked up only in the NIS netgroups database (if Samba is compiled with netgroup support) and will expand to a list of all users in the netgroup group of that name\&.
+
+
+Note that searching though a groups database can take quite some time, and some clients may time out during the search\&.
+
+
+See the section NOTE ABOUT USERNAME/PASSWORD VALIDATION for more information on how this parameter determines access to the services\&.
+
+
+Default: \fBThe guest account if a guest service, else <empty string>.\fR
+
+
+Examples:\fBusername = fred, mary, jack, jane, @users, @pcgroup\fR
.TP
-use spnego (G)
-This variable controls controls whether samba will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000 clients to agree upon an authentication mechanism\&. Unless further issues are discovered with our SPNEGO implementation, there is no reason this should ever be disabled\&.
+users (S)
+Synonym for \fI username\fR\&.
-Default: \fBuse spnego = yes\fR
+.TP
+user (S)
+Synonym for \fIusername\fR\&.
.TP
-utmp (G)
-This boolean parameter is only available if Samba has been configured and compiled with the option \fB --with-utmp\fR\&. If set to \fByes\fR then Samba will attempt to add utmp or utmpx records (depending on the UNIX system) whenever a connection is made to a Samba server\&. Sites may use this to record the user connecting to a Samba share\&.
+use sendfile (S)
+If this parameter is \fByes\fR, and Samba was built with the --with-sendfile-support option, and the underlying operating system supports sendfile system call, then some SMB read calls (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that are exclusively oplocked\&. This may make more efficient use of the system CPU's and cause Samba to be faster\&. This is off by default as it's effects are unknown as yet\&.
-Due to the requirements of the utmp record, we are required to create a unique identifier for the incoming user\&. Enabling this option creates an n^2 algorithm to find this number\&. This may impede performance on large installations\&.
+Default: \fBuse sendfile = no\fR
-See also the \fI utmp directory\fR parameter\&.
+.TP
+use spnego (G)
+This variable controls controls whether samba will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000 clients to agree upon an authentication mechanism\&. Unless further issues are discovered with our SPNEGO implementation, there is no reason this should ever be disabled\&.
-Default: \fButmp = no\fR
+Default: \fBuse spnego = yes\fR
.TP
@@ -6288,14 +6392,17 @@ Example: \fButmp directory = /var/run/utmp\fR
.TP
--valid (S)
-This parameter indicates whether a share is valid and thus can be used\&. When this parameter is set to false, the share will be in no way visible nor accessible\&.
+utmp (G)
+This boolean parameter is only available if Samba has been configured and compiled with the option \fB --with-utmp\fR\&. If set to \fByes\fR then Samba will attempt to add utmp or utmpx records (depending on the UNIX system) whenever a connection is made to a Samba server\&. Sites may use this to record the user connecting to a Samba share\&.
-This option should not be used by regular users but might be of help to developers\&. Samba uses this option internally to mark shares as deleted\&.
+Due to the requirements of the utmp record, we are required to create a unique identifier for the incoming user\&. Enabling this option creates an n^2 algorithm to find this number\&. This may impede performance on large installations\&.
-Default: \fBTrue\fR
+See also the \fI utmp directory\fR parameter\&.
+
+
+Default: \fButmp = no\fR
.TP
@@ -6319,6 +6426,17 @@ Example: \fBvalid users = greg, @pcusers\fR
.TP
+-valid (S)
+This parameter indicates whether a share is valid and thus can be used\&. When this parameter is set to false, the share will be in no way visible nor accessible\&.
+
+
+This option should not be used by regular users but might be of help to developers\&. Samba uses this option internally to mark shares as deleted\&.
+
+
+Default: \fBTrue\fR
+
+
+.TP
veto files (S)
This is a list of files and directories that are neither visible nor accessible\&. Each entry in the list must be separated by a '/', which allows spaces to be included in the entry\&. '*' and '?' can be used to specify multiple files or directories as in DOS wildcards\&.
@@ -6370,11 +6488,6 @@ Example: \fBveto oplock files = /*.SEM/\fR
.TP
-vfs object (S)
-Synonym for \fIvfs objects\fR \&.
-
-
-.TP
vfs objects (S)
This parameter specifies the backend names which are used for Samba VFS I/O operations\&. By default, normal disk I/O operations are used but these can be overloaded with one or more VFS objects\&.
@@ -6386,6 +6499,11 @@ Example: \fBvfs objects = extd_audit recycle\fR
.TP
+vfs object (S)
+Synonym for \fIvfs objects\fR \&.
+
+
+.TP
volume (S)
This allows you to override the volume label returned for a share\&. Useful for CDROMs with installation programs that insist on a particular volume label\&.
@@ -6559,7 +6677,7 @@ If you want to work in multiple namespaces, you can give every wins server a 'ta
You need to set up Samba to point to a WINS server if you have multiple subnets and wish cross-subnet browsing to work correctly\&.
-See the documentation file Browsing in the samba howto collection\&.
+See the ???\&.
Default: \fBnot enabled\fR
diff --git a/docs/manpages/smbcacls.1 b/docs/manpages/smbcacls.1
index 9df06dff9b5..cb9fcfb884c 100644
--- a/docs/manpages/smbcacls.1
+++ b/docs/manpages/smbcacls.1
@@ -103,7 +103,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -117,7 +117,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
diff --git a/docs/manpages/smbclient.1 b/docs/manpages/smbclient.1
index 3f5718a2fa9..8de0c58a6d8 100644
--- a/docs/manpages/smbclient.1
+++ b/docs/manpages/smbclient.1
@@ -114,20 +114,6 @@ This number is the TCP port number that will be used when making connections to
.TP
--l logfilename
-If specified, \fIlogfilename\fR specifies a base filename into which operational data from the running client will be logged\&.
-
-
-The default base name is specified at compile time\&.
-
-
-The base name is used to generate actual log file names\&. For example, if the name specified was "log", the debug file would be \fIlog\&.client\fR\&.
-
-
-The log file generated is never removed by the client\&.
-
-
-.TP
-h|--help
Print a summary of command line options\&.
@@ -176,7 +162,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -190,7 +176,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
@@ -243,7 +229,7 @@ Be cautious about including passwords in scripts\&. Also, on many systems the co
.TP
-n <primary NetBIOS name>
-This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fINetBIOS name\fR parameter in the \fBsmb.conf\fR(5) file\&. However, a command line setting will take precedence over settings in \fBsmb.conf\fR(5)\&.
+This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fInetbios name\fR parameter in the \fIsmb\&.conf\fR file\&. However, a command line setting will take precedence over settings in \fIsmb\&.conf\fR\&.
.TP
@@ -258,7 +244,7 @@ Set the SMB domain of the username\&. This overrides the default domain which is
.TP
-O socket options
-TCP socket options to set on the client socket\&. See the socket options parameter in the \fBsmb.conf\fR(5) manual page for the list of valid options\&.
+TCP socket options to set on the client socket\&. See the socket options parameter in the \fIsmb\&.conf\fR manual page for the list of valid options\&.
.TP
diff --git a/docs/manpages/smbcontrol.1 b/docs/manpages/smbcontrol.1
index 718e7d7b1c9..cec003a6726 100644
--- a/docs/manpages/smbcontrol.1
+++ b/docs/manpages/smbcontrol.1
@@ -47,7 +47,7 @@ Print a summary of command line options\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
diff --git a/docs/manpages/smbcquotas.1 b/docs/manpages/smbcquotas.1
index e8288977f85..e270fe3b4ae 100644
--- a/docs/manpages/smbcquotas.1
+++ b/docs/manpages/smbcquotas.1
@@ -88,7 +88,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -102,7 +102,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
diff --git a/docs/manpages/smbd.8 b/docs/manpages/smbd.8
index c7c0fac7775..07b563af5c8 100644
--- a/docs/manpages/smbd.8
+++ b/docs/manpages/smbd.8
@@ -76,7 +76,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -90,7 +90,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
@@ -134,7 +134,7 @@ This parameter is not normally specified except in the above situation\&.
.TP
\fI/etc/inetd\&.conf\fR
-If the server is to be run by the \fBinetd\fR meta-daemon, this file must contain suitable startup information for the meta-daemon\&. See the "How to Install and Test SAMBA" document for details\&.
+If the server is to be run by the \fBinetd\fR meta-daemon, this file must contain suitable startup information for the meta-daemon\&.
.TP
@@ -142,12 +142,12 @@ If the server is to be run by the \fBinetd\fR meta-daemon, this file must contai
or whatever initialization script your system uses)\&.
-If running the server as a daemon at startup, this file will need to contain an appropriate startup sequence for the server\&. See the "How to Install and Test SAMBA" document for details\&.
+If running the server as a daemon at startup, this file will need to contain an appropriate startup sequence for the server\&.
.TP
\fI/etc/services\fR
-If running the server via the meta-daemon \fBinetd\fR, this file must contain a mapping of service name (e\&.g\&., netbios-ssn) to service port (e\&.g\&., 139) and protocol type (e\&.g\&., tcp)\&. See the "How to Install and Test SAMBA" document for details\&.
+If running the server via the meta-daemon \fBinetd\fR, this file must contain a mapping of service name (e\&.g\&., netbios-ssn) to service port (e\&.g\&., 139) and protocol type (e\&.g\&., tcp)\&.
.TP
@@ -173,7 +173,7 @@ If no printer name is specified to printable services, most systems will use the
.SH "PAM INTERACTION"
.PP
-Samba uses PAM for authentication (when presented with a plaintext password), for account checking (is this account disabled?) and for session management\&. The degree too which samba supports PAM is restricted by the limitations of the SMB protocol and the \fIobey pam restricions\fR \fBsmb.conf\fR(5) paramater\&. When this is set, the following restrictions apply:
+Samba uses PAM for authentication (when presented with a plaintext password), for account checking (is this account disabled?) and for session management\&. The degree too which samba supports PAM is restricted by the limitations of the SMB protocol and the \fIobey pam restrictions\fR \fBsmb.conf\fR(5) paramater\&. When this is set, the following restrictions apply:
.TP 3
\(bu
diff --git a/docs/manpages/smbpasswd.8 b/docs/manpages/smbpasswd.8
index a7973871c46..e0c8ca51090 100644
--- a/docs/manpages/smbpasswd.8
+++ b/docs/manpages/smbpasswd.8
@@ -197,7 +197,7 @@ This specifies the username for all of the \fBroot only\fR options to operate on
Since \fBsmbpasswd\fR works in client-server mode communicating with a local smbd for a non-root user then the smbd daemon must be running for this to work\&. A common problem is to add a restriction to the hosts that may access the \fB smbd\fR running on the local machine by specifying either \fIallow hosts\fR or \fIdeny hosts\fR entry in the \fBsmb.conf\fR(5) file and neglecting to allow "localhost" access to the smbd\&.
.PP
-In addition, the smbpasswd command is only useful if Samba has been set up to use encrypted passwords\&. See the document "LanMan and NT Password Encryption in Samba" in the docs directory for details on how to do this\&.
+In addition, the smbpasswd command is only useful if Samba has been set up to use encrypted passwords\&.
.SH "VERSION"
diff --git a/docs/manpages/smbsh.1 b/docs/manpages/smbsh.1
index 0e2c4a3a85e..0788237acaf 100644
--- a/docs/manpages/smbsh.1
+++ b/docs/manpages/smbsh.1
@@ -54,7 +54,7 @@ This option allows the user to set the directory prefix for SMB access\&. The de
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -68,7 +68,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
@@ -87,10 +87,10 @@ The options are: "lmhosts", "host", "wins" and "bcast"\&. They cause names to be
\fBbcast\fR: Do a broadcast on each of the known local interfaces listed in the \fIinterfaces\fR parameter\&. This is the least reliable of the name resolution methods as it depends on the target host being on a locally connected subnet\&.
-If this parameter is not set then the name resolve order defined in the \fBsmb.conf\fR(5) file parameter (\fIname resolve order\fR) will be used\&.
+If this parameter is not set then the name resolve order defined in the \fIsmb\&.conf\fR file parameter (\fIname resolve order\fR) will be used\&.
-The default order is lmhosts, host, wins, bcast\&. Without this parameter or any entry in the \fIname resolve order \fR parameter of the \fBsmb.conf\fR(5) file, the name resolution methods will be attempted in this order\&.
+The default order is lmhosts, host, wins, bcast\&. Without this parameter or any entry in the \fIname resolve order\fR parameter of the \fIsmb\&.conf\fR file, the name resolution methods will be attempted in this order\&.
.TP
diff --git a/docs/manpages/smbstatus.1 b/docs/manpages/smbstatus.1
index 7e349dcd199..21b05a24295 100644
--- a/docs/manpages/smbstatus.1
+++ b/docs/manpages/smbstatus.1
@@ -54,7 +54,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -68,7 +68,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
diff --git a/docs/manpages/smbtree.1 b/docs/manpages/smbtree.1
index 0cc984c24a1..84c2399c77c 100644
--- a/docs/manpages/smbtree.1
+++ b/docs/manpages/smbtree.1
@@ -58,7 +58,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -72,7 +72,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
diff --git a/docs/manpages/swat.8 b/docs/manpages/swat.8
index 36d855e7251..26e5376bf69 100644
--- a/docs/manpages/swat.8
+++ b/docs/manpages/swat.8
@@ -59,7 +59,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -73,7 +73,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
diff --git a/docs/manpages/vfstest.1 b/docs/manpages/vfstest.1
index a6d01fba572..3400c6b5708 100644
--- a/docs/manpages/vfstest.1
+++ b/docs/manpages/vfstest.1
@@ -58,7 +58,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -72,7 +72,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
diff --git a/docs/manpages/wbinfo.1 b/docs/manpages/wbinfo.1
index 9bbecb29a41..6c5ca93e198 100644
--- a/docs/manpages/wbinfo.1
+++ b/docs/manpages/wbinfo.1
@@ -23,9 +23,8 @@ wbinfo \- Query information from winbind daemon
.SH "SYNOPSIS"
.nf
-\fBwbinfo\fR [-u] [-g] [-N netbios-name] [-I ip] [-n name] [-s sid] [-U uid] [-G gid]
- [-S sid] [-Y sid] [-t] [-m] [--sequence] [-r user] [-a user%password]
- [--set-auth-user user%password] [--get-auth-user] [-p]
+\fBwbinfo\fR [-a user%password] [-c username] [-C groupname] [--domain domain] [-I ip] [-s sid] [-u] [-U uid] [-g] [--get-auth-user] [-G gid] [-m] [-n name] [-N netbios-name] [-o user:group] [-O user:group] [-p] [-r user] [--set-auth-user user%password] [--sequence] [-S sid] [-t] [-x username] [-X groupname] [-Y sid]
+
.fi
.SH "DESCRIPTION"
@@ -42,8 +41,23 @@ The \fBwinbindd\fR(8) daemon must be configured and running for the \fBwbinfo\fR
.SH "OPTIONS"
.TP
--u
-This option will list all users available in the Windows NT domain for which the \fBwinbindd\fR(8) daemon is operating in\&. Users in all trusted domains will also be listed\&. Note that this operation does not assign user ids to any users that have not already been seen by \fBwinbindd\fR(8) \&.
+-a username%password
+Attempt to authenticate a user via winbindd\&. This checks both authenticaion methods and reports its results\&.
+
+
+.TP
+-c user
+Create a local winbind user\&.
+
+
+.TP
+-C group
+Create a local winbindd group\&.
+
+
+.TP
+--domain name
+This parameter sets the domain on which any specified operations will performed\&. If special domain name '\&.' is used to represent the current domain to which winbindd belongs\&. Currently only the \fB--sequence\fR, \fB-u\fR, and \fB-g\fR options honor this parameter\&.
.TP
@@ -52,8 +66,13 @@ This option will list all groups available in the Windows NT domain for which th
.TP
--N name
-The \fI-N\fR option queries \fBwinbindd\fR(8) to query the WINS server for the IP address associated with the NetBIOS name specified by the \fIname\fR parameter\&.
+--get-auth-user
+Print username and password used by winbindd during session setup to a domain controller\&. Username and password can be set using '-A'\&. Only available for root\&.
+
+
+.TP
+-G gid
+Try to convert a UNIX group id to a Windows NT SID\&. If the gid specified does not refer to one within the idmap gid range then the operation will fail\&.
.TP
@@ -62,43 +81,48 @@ The \fI-I\fR option queries \fBwinbindd\fR(8) to send a node status request to g
.TP
+-m
+Produce a list of domains trusted by the Windows NT server \fBwinbindd\fR(8) contacts when resolving names\&. This list does not include the Windows NT domain the server is a Primary Domain Controller for\&.
+
+
+.TP
-n name
The \fI-n\fR option queries \fBwinbindd\fR(8) for the SID associated with the name specified\&. Domain names can be specified before the user name by using the winbind separator character\&. For example CWDOM1/Administrator refers to the Administrator user in the domain CWDOM1\&. If no domain is specified then the domain used is the one specified in the \fBsmb.conf\fR(5) \fIworkgroup \fR parameter\&.
.TP
--s sid
-Use \fI-s\fR to resolve a SID to a name\&. This is the inverse of the \fI-n \fR option above\&. SIDs must be specified as ASCII strings in the traditional Microsoft format\&. For example, S-1-5-21-1455342024-3071081365-2475485837-500\&.
+-N name
+The \fI-N\fR option queries \fBwinbindd\fR(8) to query the WINS server for the IP address associated with the NetBIOS name specified by the \fIname\fR parameter\&.
.TP
--U uid
-Try to convert a UNIX user id to a Windows NT SID\&. If the uid specified does not refer to one within the winbind uid range then the operation will fail\&.
+-o user:group
+Add a winbindd local group as a secondary group for the specified winbindd local user\&.
.TP
--G gid
-Try to convert a UNIX group id to a Windows NT SID\&. If the gid specified does not refer to one within the winbind gid range then the operation will fail\&.
+-O user:group
+Remove a winbindd local group as a secondary group for the specified winbindd local user\&.
.TP
--S sid
-Convert a SID to a UNIX user id\&. If the SID does not correspond to a UNIX user mapped by \fBwinbindd\fR(8) then the operation will fail\&.
+-p
+Check whether winbindd is still alive\&. Prints out either 'succeeded' or 'failed'\&.
.TP
--Y sid
-Convert a SID to a UNIX group id\&. If the SID does not correspond to a UNIX group mapped by \fBwinbindd\fR(8) then the operation will fail\&.
+-r username
+Try to obtain the list of UNIX group ids to which the user belongs\&. This only works for users defined on a Domain Controller\&.
.TP
--t
-Verify that the workstation trust account created when the Samba server is added to the Windows NT domain is working\&.
+-s sid
+Use \fI-s\fR to resolve a SID to a name\&. This is the inverse of the \fI-n \fR option above\&. SIDs must be specified as ASCII strings in the traditional Microsoft format\&. For example, S-1-5-21-1455342024-3071081365-2475485837-500\&.
.TP
--m
-Produce a list of domains trusted by the Windows NT server \fBwinbindd\fR(8) contacts when resolving names\&. This list does not include the Windows NT domain the server is a Primary Domain Controller for\&.
+--set-auth-user username%password
+Store username and password used by winbindd during session setup to a domain controller\&. This enables winbindd to operate in a Windows 2000 domain with Restrict Anonymous turned on (a\&.k\&.a\&. Permissions compatiable with Windows 2000 servers only)\&.
.TP
@@ -107,28 +131,38 @@ Show sequence numbers of all known domains
.TP
--r username
-Try to obtain the list of UNIX group ids to which the user belongs\&. This only works for users defined on a Domain Controller\&.
+-S sid
+Convert a SID to a UNIX user id\&. If the SID does not correspond to a UNIX user mapped by \fBwinbindd\fR(8) then the operation will fail\&.
.TP
--a username%password
-Attempt to authenticate a user via winbindd\&. This checks both authenticaion methods and reports its results\&.
+-t
+Verify that the workstation trust account created when the Samba server is added to the Windows NT domain is working\&.
.TP
---set-auth-user username%password
-Store username and password used by winbindd during session setup to a domain controller\&. This enables winbindd to operate in a Windows 2000 domain with Restrict Anonymous turned on (a\&.k\&.a\&. Permissions compatiable with Windows 2000 servers only)\&.
+-u
+This option will list all users available in the Windows NT domain for which the \fBwinbindd\fR(8) daemon is operating in\&. Users in all trusted domains will also be listed\&. Note that this operation does not assign user ids to any users that have not already been seen by \fBwinbindd\fR(8) \&.
.TP
---get-auth-user
-Print username and password used by winbindd during session setup to a domain controller\&. Username and password can be set using '-A'\&. Only available for root\&.
+-U uid
+Try to convert a UNIX user id to a Windows NT SID\&. If the uid specified does not refer to one within the idmap uid range then the operation will fail\&.
.TP
--p
-Check whether winbindd is still alive\&. Prints out either 'succeeded' or 'failed'\&.
+-x user
+Delete an existing local winbind user\&.
+
+
+.TP
+-X group
+Delete an existing local winbindd group\&.
+
+
+.TP
+-Y sid
+Convert a SID to a UNIX group id\&. If the SID does not correspond to a UNIX group mapped by \fBwinbindd\fR(8) then the operation will fail\&.
.TP
diff --git a/docs/manpages/winbindd.8 b/docs/manpages/winbindd.8
index 71322decbe0..f0368014c76 100644
--- a/docs/manpages/winbindd.8
+++ b/docs/manpages/winbindd.8
@@ -89,7 +89,7 @@ Prints the version number for \fBsmbd\fR\&.
.TP
-s <configuration file>
-The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&.
+The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.
.TP
@@ -103,7 +103,7 @@ The higher this value, the more detail will be logged to the log files about the
Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.
-Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&.
+Note that specifying this parameter here will override the \fIlog level\fR parameter in the \fIsmb\&.conf\fR file\&.
.TP
@@ -153,11 +153,11 @@ Configuration of the \fBwinbindd\fR daemon is done through configuration paramet
.TP
\(bu
-\fIwinbind uid\fR
+\fIidmap uid\fR
.TP
\(bu
-\fIwinbind gid\fR
+\fIidmap gid\fR
.TP
\(bu
@@ -240,8 +240,8 @@ Finally, setup a \fBsmb.conf\fR(5) containing directives like the following:
winbind cache time = 10
template shell = /bin/bash
template homedir = /home/%D/%U
- winbind uid = 10000-20000
- winbind gid = 10000-20000
+ idmap uid = 10000-20000
+ idmap gid = 10000-20000
workgroup = DOMAIN
security = domain
password server = *
diff --git a/docs/textdocs/README.NOW b/docs/textdocs/README.NOW
deleted file mode 100644
index dda607097be..00000000000
--- a/docs/textdocs/README.NOW
+++ /dev/null
@@ -1,6 +0,0 @@
-All old text documents have been converted to docbook.
-To create ASCII versions of the official documentation
-run the following command in ../docbook/:
-
- $ make txt
-
diff --git a/docs/textdocs/README.jis b/docs/textdocs/README.jis
deleted file mode 100644
index 50ff0cced74..00000000000
--- a/docs/textdocs/README.jis
+++ /dev/null
@@ -1,149 +0,0 @@
-$B!|(B samba $BF|K\8lBP1~$K$D$$$F(B
-
-1. $BL\E*(B
-
- $BF|K\8lBP1~$O!"(B
-
- (1) MS-Windows $B>e$G!"4A;z%U%!%$%kL>$r$I$&$7$F$b07$&I,MW$N$"$k%"%W%j%1!<%7%g%s$,$A$c(B
- $B$s$HF0:n$9$k!#Nc$($P!"(BMS-WORD 5 $B$J$I$O!"%$%s%9%H!<%k;~$K4A;z$N%U%!%$%kL>$r>!<j(B
- $B$K$D$1$F$7$^$$$^$9!#$3$&$$$C$?>l9g$K$A$c$s$HBP1~$G$-$k$h$&$K$9$k!#(B
-
- (2) UNIX $B$O!":G6a$G$O$[$H$s$I$N$b$N$,(B 8 bits $B$N%U%!%$%kL>$r%5%]!<%H$7$F$$$^$9$,!"(B
- $BCf$K$O!"$3$l$r%5%]!<%H$7$F$$$J$$$b$N$b$"$j$^$9!#$3$N$h$&$J>l9g$G$b!"(B(1)$B$NL\E*(B
- $B$,K~B-$G$-$k$h$&$K$9$k!#(B
-
- $B$rL\E*$H$7$F$$$^$9!#$=$N$?$a!"F|K\8lBP1~$O!"I,MW:G>.8B$7$+9T$J$C$F$*$j$^$;$s!#(B
-
- $BF|K\8lBP1~$7$?(B samba $B$rMxMQ$9$k$?$a$K$O!"%3%s%Q%$%k$9$k;~$K!"I,$:!"(BKANJI $B$NDj5A$rDI(B
- $B2C$7$F$/$@$5$$!#$3$N%*%W%7%g%s$r;XDj$7$F$$$J$$>l9g$O!"F|K\8l$N%U%!%$%kL>$r@5$7$/07(B
- $B$&$3$H$O$G$-$^$;$s!#!J%3%s%Q%$%k$K$D$$$F$O!"2<5-(B 3. $B$r;2>H$7$F2<$5$$!K(B
-
-2. $BMxMQJ}K!(B
-
-(1) $BDI2C$7$?%Q%i%a!<%?(B
-
- smb.conf $B%U%!%$%k$N(B global $B%;%/%7%g%s$K0J2<$N%Q%i%a!<%?$r@_Dj$G$-$k$h$&$K$7$^$7$?!#(B
-
- [global]
- ....
- coding system = <$B%3!<%I7O(B>
-
- $B$3$3$G;XDj$5$l$?%3!<%I7O$,(B UNIX $B>e$N%U%!%$%k%7%9%F%`$N%U%!%$%kL>$N%3!<%I$K$J$j$^$9!#(B
- $B@_Dj$G$-$k$b$N$O!"<!$N$h$&$K$J$C$F$$$^$9!#(B
-
- sjis: SHIFT JIS (MS $B4A;z%3!<%I(B)
- euc: EUC $B%3!<%I(B
- hex: 7 bits $B$N(B ASCII $B%3!<%I0J30$N%3!<%I$r0J2<$N7A<0$GI=$9J}<0$G$9!#Nc$($P!"(B
- '$B%*%U%#%9(B' $B$H$$$&L>A0$O!"(B':83:49:83:74:83:42:83:58' $B$N$h$&$K!"(B':' $B$N8e$K#27e(B
- $B$N(B16$B?J?t$rB3$1$k7A<0$K$J$j$^$9!#(B
- $B$3$3$G!"(B':' $B$rB>$NJ8;z$KJQ99$7$?$$>l9g$O!"(Bhex $B$N8e$m$K$=$NJ8;z$r;XDj$7$^$9!#(B
- $BNc$($P!"(B@$B$rJQ$o$j$K;H$$$?$$>l9g$O!"(B'hex@'$B$N$h$&$K;XDj$7$^$9!#(B
- cap: 7 bits $B$N(B ASCII $B%3!<%I0J30$N%3!<%I$r0J2<$N7A<0$GI=$9J}<0$H$$$&E@$G$O(B
- hex$B$HF1MM$G$9$,!"(BCAP (The Columbia AppleTalk Package)$B$H8_49@-$r;}$DJQ49(B
- $BJ}<0$H$J$C$F$$$^$9!#(Bhex$B$H$N0c$$$O(B0x80$B0J>e$N%3!<%I$N$_(B':80'$B$N$h$&$KJQ49(B
- $B$5$l!"$=$NB>$O(BASCII$B%3!<%I$G8=$5$l$^$9!#(B
- $BNc$($P!"(B'$B%*%U%#%9(B'$B$H$$$&L>A0$O!"(B':83I:83t:83B:83X'$B$H$J$j$^$9!#(B
-
- JIS $B%3!<%I$K$D$$$F$O!"0J2<$NI=$r;2>H$7$F2<$5$$!#(B
- $B(#(!(!(!(((!(!(!(!(((!(!(!(!(((!(!(!(!(((!(!(!(!(((!(!(!(!(((!(!(!(!(!(!(!(!(!($(B
- $B(";XDj(B $B("4A;z3+;O("4A;z=*N;("%+%J3+;O("%+%J=*N;("1Q?t3+;O("Hw9M(B $B("(B
- $B('(!(!(!(+(!(!(!(!(+(!(!(!(!(+(!(!(!(!(+(!(!(!(!(+(!(!(!(!(+(!(!(!(!(!(!(!(!(!()(B
- $B("(Bjis7 $B("(B\E$B $B("(B\E(J $B("(B0x0e $B("(B0x0f $B("(B\E(J $B("(Bjis 7$BC10LId9f(B $B("(B
- $B("(Bjunet $B("(B\E$B $B("(B\E(J $B("(B\E(I $B("(B\E(J $B("(B\E(J $B("(B7bits $B%3!<%I(B $B("(B
- $B("(Bjis8 $B("(B\E$B $B("(B\E(J $B("(B-- $B("(B-- $B("(B\E(J $B("(Bjis 8$BC10LId9f(B $B("(B
- $B("(Bj7bb $B("(B\E$B $B("(B\E(B $B("(B0x0e $B("(B0x0f $B("(B\E(B $B("(B $B("(B
- $B("(Bj7bj $B("(B\E$B $B("(B\E(J $B("(B0x0e $B("(B0x0f $B("(B\E(J $B("(Bjis7$B$HF1$8(B $B("(B
- $B("(Bj7bh $B("(B\E$B $B("(B\E(H $B("(B0x0e $B("(B0x0f $B("(B\E(H $B("(B $B("(B
- $B("(Bj7@b $B("(B\E$@ $B("(B\E(B $B("(B0x0e $B("(B0x0f $B("(B\E(B $B("(B $B("(B
- $B("(Bj7@j $B("(B\E$@ $B("(B\E(J $B("(B0x0e $B("(B0x0f $B("(B\E(J $B("(B $B("(B
- $B("(Bj7@h $B("(B\E$@ $B("(B\E(H $B("(B0x0e $B("(B0x0f $B("(B\E(H $B("(B $B("(B
- $B("(Bj8bb $B("(B\E$B $B("(B\E(B $B("(B-- $B("(B-- $B("(B\E(B $B("(B $B("(B
- $B("(Bj8bj $B("(B\E$B $B("(B\E(J $B("(B-- $B("(B-- $B("(B\E(J $B("(Bjis8$B$HF1$8(B $B("(B
- $B("(Bj8bh $B("(B\E$B $B("(B\E(H $B("(B-- $B("(B-- $B("(B\E(H $B("(B $B("(B
- $B("(Bj8@b $B("(B\E@@ $B("(B\E(B $B("(B-- $B("(B-- $B("(B\E(B $B("(B $B("(B
- $B("(Bj8@j $B("(B\E$@ $B("(B\E(J $B("(B-- $B("(B-- $B("(B\E(J $B("(B $B("(B
- $B("(Bj8@h $B("(B\E$@ $B("(B\E(H $B("(B-- $B("(B-- $B("(B\E(H $B("(B $B("(B
- $B("(Bjubb $B("(B\E$B $B("(B\E(B $B("(B\E(I $B("(B\E(B $B("(B\E(B $B("(B $B("(B
- $B("(Bjubj $B("(B\E$B $B("(B\E(J $B("(B\E(I $B("(B\E(J $B("(B\E(J $B("(Bjunet$B$HF1$8(B $B("(B
- $B("(Bjubh $B("(B\E$B $B("(B\E(H $B("(B\E(I $B("(B\E(H $B("(B\E(H $B("(B $B("(B
- $B("(Bju@b $B("(B\E$@ $B("(B\E(B $B("(B\E(I $B("(B\E(B $B("(B\E(B $B("(B $B("(B
- $B("(Bju@j $B("(B\E$@ $B("(B\E(J $B("(B\E(I $B("(B\E(J $B("(B\E(J $B("(B $B("(B
- $B("(Bju@h $B("(B\E$@ $B("(B\E(H $B("(B\E(I $B("(B\E(H $B("(B\E(H $B("(B $B("(B
- $B(&(!(!(!(*(!(!(!(!(*(!(!(!(!(*(!(!(!(!(*(!(!(!(!(*(!(!(!(!(*(!(!(!(!(!(!(!(!(!(%(B
-
- $B$$$:$l$N>l9g$b!"$9$G$KB8:_$7$F$$$kL>A0$KBP$7$F$O!"4A;z$N3+;O=*N;%7!<%1%s%9$O!"0J2<(B
- $B$N$b$N$rG'<1$7$^$9!#(B
- $B4A;z$N;O$^$j(B: \E$B $B$+(B \E$@
- $B4A;z$N=*$j(B: \E(J $B$+(B \E(B $B$+(B \E(H
-
-(2) smbclient $B$N%*%W%7%g%s(B
-
- $B%/%i%$%"%s%H%W%m%0%i%`$G$b!"4A;z$d2>L>$r4^$s$@%U%!%$%k$r07$($k$h$&$K!"<!$N%*%W%7%g%s(B
- $B$rDI2C$7$^$7$?!#(B
-
- -t <$B%?!<%_%J%k%3!<%I7O(B>
-
- $B$3$3$G!"(B<$B%?!<%_%J%k%3!<%I7O(B>$B$K;XDj$G$-$k$b$N$O!">e$N(B<$B%3!<%I7O(B>$B$HF1$8$b$N$G$9!#(B
-
-(3) $B%G%U%)%k%H(B
-
- $B%G%U%)%k%H$N%3!<%I7O$O!"%3%s%Q%$%k;~$K7h$^$j$^$9!#(B
-
-3. $B%3%s%Q%$%k;~$N@_Dj(B
-
- Makefile $B$K@_Dj$9$k9`L\$r0J2<$K<($7$^$9!#(B
-
-(1) KANJI $B%U%i%0(B
-
- $B%3%s%Q%$%k%*%W%7%g%s$K(B -DKANJI=\"$B%3!<%I7O(B\" $B$r;XDj$7$^$9!#$3$N%3!<%I7O$O(B 2. $B$G;X(B
- $BDj$9$k$b$N$HF1$8$G$9!#Nc$($P!"(B-DKANJI=\"euc\" $B$r(BFLAGSM $B$K@_Dj$9$k$H(B UNIX $B>e$N%U%!(B
- $B%$%kL>$O!"(BEUC $B%3!<%I$K$J$j$^$9!#$3$3$G;XDj$7$?%3!<%I7O$O!"%5!<%P5Z$S%/%i%$%"%s%H(B
- $B%W%m%0%i%`$N%G%U%)%k%H$KCM$J$j$^$9!#(B
-
- $B>0!"%*%W%7%g%sCf$N(B \ $B$d(B " $B$bK:$l$:$K;XDj$7$F2<$5$$!#(B
-
-3. $B@)8B;v9`(B
-
-(1) $B4A;z%3!<%I(B
- smbd $B$rF0:n$5$;$k%[%9%H$N(B UNIX $B$,%5%]!<%H$7$F$$$J$$4A;z%3!<%I$O!"MxMQ$G$-$J$$$3$H$,(B
- $B$"$j$^$9!#JQ$JF0:n$r$9$k$h$&$J$i(B hex $B$N;XDj$r$9$k$N$,NI$$$G$7$g$&!#(B
-
-(2) smbclient $B%3%^%s%I(B
- $B%7%U%H%3!<%I$J$I$N4X78$G!"4A;z$d2>L>$r4^$s$@%U%!%$%kL>$N(B ls $B$NI=<($,Mp$l$k$3$H$,$"$j(B
- $B$^$9!#(B
-
-(3) $B%o%$%k%I%+!<%I$K$D$$$F(B
- $B$A$c$s$H$7$?%9%Z%C%/$,$h$/$o$+$i$J$+$C$?$N$G$9$,!"0l1~!"(BDOS/V $B$NF0:n$HF1$8F0:n$r9T$J(B
- $B$&$h$&$K$J$C$F$$$^$9!#(B
-
-(4) $B%m%s%0%U%!%$%kL>$K$D$$$F(B
- Windows NT/95 $B$G$O!"%m%s%0%U%!%$%kL>$,07$($^$9!#%m%s%0%U%!%$%kL>$r(B 8.3 $B%U%)!<%^%C%H(B
- $B$G07$&$?$a$K!"(Bmangling $B$7$F$$$^$9$,!"$3$NJ}K!$O!"(BNT $B$d(B 95 $B$,9T$J$C$F$$$k(B mangling $B$H(B
- $B$O0[$J$j$^$9$N$GCm0U$7$F2<$5$$!#(B
-
-4. $B>c32Ey$N%l%]!<%H$K$D$$$F(B
-
- $BF|K\8l$N%U%!%$%kL>$K4X$7$F!"J8;z2=$1Ey$N>c32$,$"$l$P!";d$K%l%]!<%H$7$FD:$1$l$P9,$$$G(B
-$B$9!#$?$@$7!"%*%j%8%J%k$+$i$NLdBjE@$d<ALd$K$D$$$F$O!"%*%j%8%J%k$N:n<T$XD>@\Ld$$9g$o$;$k(B
-$B$+!"$b$7$/$O%a!<%j%s%0%j%9%H$J$I$X%l%]!<%H$9$k$h$&$K$7$F2<$5$$!#(B
-
-$B%l%]!<%H$5$l$k>l9g!"MxMQ$5$l$F$$$k4D6-(B(UNIX $B5Z$S(B PC $BB&$N(BOS$B$J$I(B)$B$H$G$-$^$7$?$i@_Dj%U%!(B
-$B%$%k$d%m%0$J$I$rE:IU$7$FD:$1$k$H9,$$$G$9!#(B
-
-5. $B$=$NB>(B
-
- $B%3!<%IJQ49$O0J2<$NJ}!9$,:n$i$l$?%W%m%0%i%`$rMxMQ$7$F$$$^$9!#(B
-
- hex $B7A<0(B $BBgLZ!wBgDM!&C^GH(B <ohki@gssm.otsuka.tsukuba.ac.jp>$B;a(B
- cap $B7A<0(B $BI%ED(B $BF;O:(B (michiro@po.iijnet.or.jp)(michiro@dms.toppan.co.jp)$B;a(B
-
- $B$=$NB>!"$?$/$5$s$NJ}!9$+$i$$$m$$$m$H8f65<($$$?$@$-$"$j$,$H$&$4$6$$$^$7$?!#:#8e$H$b$h(B
-$B$m$7$/$*4j$$CW$7$^$9!#(B
-
-1994$BG/(B10$B7n(B28$BF|(B $BBh#1HG(B
-1995$BG/(B 8$B7n(B16$BF|(B $BBh#2HG(B
-1995$BG/(B11$B7n(B24$BF|(B $BBh#3HG(B
-1996$BG/(B 5$B7n(B13$BF|(B $BBh#4HG(B
-
-$BF#ED(B $B?r(B fujita@ainix.isac.co.jp
-